last executing test programs: 5.38550067s ago: executing program 2 (id=3): syz_emit_ethernet(0x56, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6f61184a0020060100000000090000000a00000000000000fe8000000018000000000000000000aa4e224e2200089078cac7994a8602"]) 5.32291651s ago: executing program 2 (id=9): openat$vmm(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) (async) r0 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$VMM_IOC_READREGS(r0, 0xc2485607, &(0x7f0000000200)={0x4, 0x5, 0x4, {[0x5, 0x0, 0x2, 0x1c4, 0x8000000000000001, 0x4, 0x1, 0x0, 0x9, 0x81, 0x2, 0x3ff, 0x4, 0x4, 0x4, 0x6, 0x80, 0x9], [0x8000000000000000, 0x9, 0x10001, 0x6, 0x7, 0x2, 0x9, 0x4, 0x1ff, 0x9], [0x101, 0x9, 0x4, 0x6, 0x101, 0x4, 0xfffffffffffffff1], [0x5, 0x1fe0000000000, 0x6, 0xc43, 0xffffffffffffffff, 0x28], [{0x1, 0x1ffffc, 0x10000, 0xf}, {0x1ff, 0xfff, 0xffff}, {0x5, 0x4783, 0x8, 0xffffffff80000001}, {0x8e, 0xc, 0x9, 0x8}, {0x6, 0x3b, 0x10000, 0x7}, {0x2, 0x9, 0x93d, 0x2e0}, {0x8, 0xfff, 0x8, 0x2}, {0x4b9, 0x6, 0x81c00, 0xa39}], {0x401, 0xe, 0xd49, 0xbbb4}, {0x4, 0x18fe, 0xfffffffa, 0x9}}}) mkfifo(&(0x7f0000001380)='./file0\x00', 0x8) ktrace(&(0x7f0000000100)='./file0\x00', 0x1, 0x100, 0x0) ioctl$FIONBIO(r0, 0x8004667e, &(0x7f0000000140)=0x8) (async) ioctl$FIONBIO(r0, 0x8004667e, &(0x7f0000000140)=0x8) open$dir(&(0x7f00000002c0)='./file0\x00', 0x40, 0x3c) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x40}, {0xffffffffffffffff, 0x1a0}, {0xffffffffffffffff, 0x10}, {0xffffffffffffffff, 0x1}], 0x55, 0x1) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x1, 0x28) faccessat(r1, &(0x7f00000000c0)='./file0\x00', 0x85, 0x2) (async) faccessat(r1, &(0x7f00000000c0)='./file0\x00', 0x85, 0x2) 5.03524276s ago: executing program 2 (id=14): mkdir(&(0x7f0000000400)='./file0\x00', 0x148) getgroups(0x7, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]) setsid() r2 = syz_open_pts() r3 = dup2(r2, r2) ioctl$TIOCSCTTY(r3, 0x20007461) syz_open_pts() openat$tty(0xffffffffffffff9c, &(0x7f0000000040), 0x1c, 0x0) setresgid(r1, r0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) getsockopt$sock_cred(r4, 0xffff, 0x1022, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000140)=0xc) chown(&(0x7f0000000180)='./file0\x00', r5, 0x0) setreuid(0x0, r5) chdir(&(0x7f0000000180)='./file0\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r6, 0xffff, 0x1022, &(0x7f0000000000), &(0x7f0000000140)=0xc) r7 = syz_open_pts() openat$bpf(0xffffffffffffff9c, &(0x7f0000001ec0), 0x20, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) closefrom(r8) setrlimit(0x8, &(0x7f0000001ec0)={0x9, 0x37e1790c}) r9 = syz_open_pts() ioctl$TIOCSETAW(r9, 0x802c7415, &(0x7f0000000000)={0xb, 0x3, 0xffffffc0, 0x3b6d67bd, "fe83fe7a9542a14123a70000001efe02bfabb686", 0x2, 0xcfe}) write(r7, &(0x7f0000000080)="7ef5b69389691e24966a3ddf3d32cdb3fcdc1293054eedfc4c98644011ebd4ed712cded9d188c11bac6dc6f23ec53ad394df0db649d54e94008b075e183605afc43ad24202", 0x45) sysctl$kern(&(0x7f0000000000)={0x1, 0x4e}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x4) sysctl$vfs_nfs(&(0x7f0000000000)={0xa, 0x2, 0x2}, 0x3, &(0x7f0000000040), &(0x7f0000000140)=0x3a, 0x0, 0x0) 1.235280708s ago: executing program 4 (id=44): r0 = openat$dri(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card0\x00', 0x80, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffff9c, 0xc01064b5, &(0x7f0000000200)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6}) r2 = syz_open_pts() openat$bpf(0xffffffffffffff9c, &(0x7f0000001ec0), 0x20, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) closefrom(r3) setrlimit(0x8, &(0x7f0000001ec0)={0x9, 0x37e1790c}) syz_open_pts() ioctl$TIOCSETAW(r2, 0x802c7415, &(0x7f0000000000)={0x1007, 0x3, 0x7, 0xfffffffd, "fe83fe7a9542a14123a70000001efe02bfabb686", 0x2, 0xcfe}) write(0xffffffffffffffff, 0x0, 0x0) sysctl$net_inet_tcp(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) semget$private(0x0, 0x7, 0x30) write(r2, &(0x7f0000000380)="639738000000000000760e3518fd66afbf71c57ec5933a9cfd2dfc29588833948e4a9373f7074b12d7ade86267bef269cdc7d9a2ff8e415ba60b6baded4511a05b8494c51b18276b3fa73260ec1c72135130f873313c7673403291c4517fb67bbf538e42fd33d233bbf0fc65eef27cc6145dc8a0b444d87922355531e5b4dfe338d9b28c7864dcc7f0fde98b7d5a641bd4ceb2c87b7946b1ebce76917995fbe0ea77e0d7a45f0f319cd26661b344d188940b8e406d13e62edc67182a7d45679c1fa57a83b8af019797f0d6fbda1c512f64deb4b93c682c14aed3c7b1bd9cf9e6e3fc57a913c5e20601bf26128fe22f1823686c4d1a5a70", 0xf7) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000280)={r1, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000240)=[0x0, 0x0]}) r4 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) utimensat(r4, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={{0x0, 0xfffffffffffffff2}, {0xce7, 0x80}}, 0x2) mkdir(&(0x7f0000000400)='./file0\x00', 0x108) sysctl$net_inet_ip(&(0x7f0000000080)={0x4, 0x2, 0x0, 0xc}, 0x67, &(0x7f0000000100)="7512ba6a7b8d1285f9622f3f0413bcc8b3d2d762ec14a1155087fedbdc637b0cc27dcc7271330dba8c0aa20124fd0e00ab7d29daf58ac3c991c1662caf0af320ddd2b70e5cafcf6d0215500f0dbb0fdf501539a8049a9f694f899736e2ed037ef1324a8447d29e7b66bd17a232c5c94e47abce4b7821d695840ab1001a6075a2560c3c8728bad30b096be8677e211bb751827894b172714658e8c21b54e54c6a3ea291ec09f24aef6f5de223d0c8b6b5c0874388d55562bd5c43a6c4c299b696bd43ca0c327a7718c0d383b5a34b4f097733f9650288fc74ccc852924ef6f43359a5ddf59ee6f5af", &(0x7f0000000000)=0x4, 0x0, 0x0) 1.049693497s ago: executing program 4 (id=46): sysctl$hw(&(0x7f0000000040)={0x6, 0x13}, 0x2, 0x0, 0x0, &(0x7f0000000040), 0x3a) sysctl$hw(&(0x7f0000000000)={0x6, 0x7}, 0x2, &(0x7f0000000080)="5f7da1524597e68d92a575358540b85257d5645571353e0b63f9604ea215e9225da8827c0d4768eeea3332e7f4c3f1ce5274597ff7667aa9f7533f4bc6624cee98a91ee8553dd944ae1de0", &(0x7f0000000180)=0x4b, &(0x7f00000001c0)="c7baff37773906bd53dbcd605704182bdae19984451a34d6913c1ddcc81f317c4e4a143b7072759371a6825cb025121f0de12f4de5aaf3d24d08f7d413d987f7b6d4195a4e5fe3cc9d98ef8e578f6e5efacd503d9ec0a2e0071f7d4a38ed8fe0c8530eaeb0d963f8fb0f0c21acdfd31609578830a1ffe240fa310d3a586b9ad616424d6717595af2d52c9e2aa04688be7bff30395b475d1e091ecc1566e8b56d9b79773e93da1cf11abb21c60ea94f2d6cc0a2e20faa9b387cfa7a49ad8d28a15f", 0xc1) r0 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) ioctl$WSMOUSEIO_GETPARAMS(r0, 0x80105727, &(0x7f0000000140)={&(0x7f0000000100)=[{0x23}, {0x1, 0x3}], 0x2}) mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4) mlock(&(0x7f0000ffe000/0x1000)=nil, 0x1000) sysctl$hw(&(0x7f0000002680)={0x6, 0x13}, 0x2, &(0x7f0000000080), 0x0, 0x0, 0x0) 1.020098826s ago: executing program 5 (id=50): open(&(0x7f00000000c0)='./file0\x00', 0x200, 0x112) getgroups(0x7, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]) mknod(&(0x7f0000000040)='./file0\x00', 0x2000, 0x33a2) r2 = open(&(0x7f0000001980)='./file0\x00', 0x80, 0xc3) ioctl$TIOCCONS(r2, 0xc0a86b04, &(0x7f0000000140)=0x4) setresgid(r1, r0, 0x0) r3 = openat$pf(0xffffffffffffff9c, &(0x7f00000001c0), 0x80, 0x0) ioctl$DIOCRCLRTSTATS(r3, 0xc4504441, &(0x7f0000001700)={{'./file0\x00', './file1\x00', 0x40, 0x3}, 0x0, 0x2, 0x0, 0x7, 0x0, 0x7, 0x6, 0x8, 0x53}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) getsockopt$sock_cred(r4, 0xffff, 0x1022, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000140)=0xc) chown(&(0x7f0000000180)='./file0\x00', r5, 0x0) setreuid(0x0, r5) open(&(0x7f0000000180)='./file0\x00', 0x2, 0xcf) 933.292403ms ago: executing program 3 (id=54): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000ec0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r2, &(0x7f0000002e40)={{0x0, 0x0, &(0x7f0000002dc0)=[{&(0x7f0000000240)=""/167, 0xa7}], 0x1, 0x0}, 0x7}, 0x38, 0x6840, 0x0) sendmsg$unix(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000080)="ef", 0x1}], 0x1, 0x0, 0x0, 0x1}, 0x4) closefrom(r0) 833.721973ms ago: executing program 3 (id=55): r0 = socket$inet(0x2, 0x3, 0x57) setsockopt(r0, 0x0, 0x1d, &(0x7f0000000140)="9a350700", 0x4) pselect(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0xfffffffffffff80d}, 0x0) execve(0x0, 0x0, &(0x7f00000002c0)=[&(0x7f0000000180)=')$/\x00-\x86Qw\xaaN\xd3[\x04\x95\xf7*\x12\x8f\xa4\v\x13$P\xe9\xb1\xf0M\x0f`,\f\x10\xdb\nh(\xff\xabD\x90\x06\x98\xeb\x9f\x9caB%\x92\xf2@\xc8\xe6w\xbd\xb1u\x82\x00*e\xdf\"\xbfF\xf7\xba\b\xb8\x12\xe4\xa6F\x00_k\xc2\x91t\xc8\xa6D\xae3\xbf\xd2(\f\x8b\x14\xcc\x1ckB\xc1$\xbb#\x80|\xb8{\xa6`\xdbYd\xa4?\xd1@\xca\xcf\xa0\xe7\xf3\xf3\x04\f\xe7\x82\x8d*wW\xb3Vw\x0f\xf4uI4\xe9\x0f_\x03~q\xfd\x18\xb9G\xba\b\x176?g\x8c\x12\b\xb724\b\"\xf7\x9c\x16\xfeq\xf3\xf6I>\xd0']) pselect(0x40, &(0x7f0000000000)={0x2, 0x6, 0xf, 0x8, 0x2, 0x6, 0x9, 0x2}, &(0x7f0000000040)={0x7, 0x1, 0x4, 0x3, 0x3, 0x0, 0x3, 0x10e3}, &(0x7f0000000080)={0x7, 0x4, 0x7, 0x27, 0xffff, 0xc000000000000, 0xb, 0x7d02}, &(0x7f00000000c0)={0x6, 0x5}, &(0x7f0000000100)={0x1}) sysctl$net_inet_gre(&(0x7f0000000000)={0x4, 0x2, 0x2f, 0x1}, 0x4000000000000005, 0x0, 0x0, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0) r1 = syz_open_pts() r2 = dup2(r1, r1) sysctl$kern(&(0x7f00000005c0)={0x1, 0x4b}, 0x2, &(0x7f0000000600)="7c9ebc2aa022", &(0x7f0000000700)=0x6, &(0x7f0000000740), 0x0) (async, rerun: 64) ioctl$TIOCSCTTY(r2, 0x20007461) (rerun: 64) close(r2) (async) mknod(&(0x7f0000000040)='./file0\x00', 0x2000, 0x33a5) (async) r3 = open(&(0x7f0000001980)='./file0\x00', 0x80, 0xc3) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000100)="425746c89f97391d0653e4877c42929f3ffa94ddcc0045f8d0202984396f6d72d075941f51b06723f0f280d5d84278ee781e599fe65ac6645b2ac33631aa60d6c116eb7a014199e568", 0x49}], 0x1, 0x0, 0x0, 0x1}, 0x4) (async) ioctl$TIOCCONS(r3, 0xc0a86b02, &(0x7f0000000140)=0x1) (async, rerun: 64) ioctl$DIOCRCLRTABLES(r2, 0xc450443c, &(0x7f0000000300)={{'./file0\x00', './file0\x00', 0x1d, 0x6}, 0x0, 0x0, 0x0, 0x2, 0x3, 0x6, 0xd, 0x2}) (async, rerun: 64) mkdir(&(0x7f0000000180)='./file0\x00', 0x2) 833.352219ms ago: executing program 5 (id=56): r0 = syz_open_pts() ioctl$TIOCSPGRP(r0, 0x40047477, &(0x7f0000000000)) (async) ioctl$TIOCGETA(r0, 0x402c7413, &(0x7f0000000040)) (async) r1 = open(&(0x7f0000001980)='./file0\x00', 0x80, 0x0) ioctl$TIOCSETA(r1, 0x8004745f, &(0x7f0000000500)={0x3, 0xffffffff, 0x519, 0x6, "4522ab1c59b3f1beca704340880e1a5213513f4c", 0x2c1, 0x4}) (async, rerun: 64) ioctl$KDSETLED(r1, 0x20004b42, &(0x7f0000000080)=0x4) (rerun: 64) 832.932434ms ago: executing program 7 (id=57): pselect(0x40, &(0x7f0000000080)={0xff, 0x3ff, 0x5, 0x8, 0x9, 0xb, 0x3, 0x80000009}, 0x0, 0x0, 0x0, 0x0) sysctl$kern(&(0x7f0000000000)={0x1, 0x35}, 0x2, 0x0, 0x0, 0x0, 0x0) sysctl$kern(&(0x7f0000000040)={0x1, 0x40}, 0x2, &(0x7f00000000c0)="8b13", &(0x7f0000000100)=0x2, &(0x7f0000000200)="e0d325538345916c302d9e5bbf2d22a4ff4d9d04f0a091955f924f1a531e2420d11ac35d6175d52bc72ce25e36f3fc1a0a2502d7537ba4eaba822b4287cda9944d9e", 0x42) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) sysctl$kern(&(0x7f0000000000)={0x1, 0x59}, 0x3, &(0x7f0000000180)="ee8f409198157e3b0d482cd811439e57ce10400116e4853368b7858dd5313a55267eae31dfdeb4695f32fe7b7ad86f86b9026db90f9b45d9c0dfe6f336cdbed0b1e9503fb71d22c07e97988cb677f6e039bda806b77d270400"/104, &(0x7f0000000080)=0x5b, 0x0, 0xfffa) 832.566311ms ago: executing program 3 (id=58): r0 = accept$inet6(0xffffffffffffff9c, &(0x7f0000000040), &(0x7f0000000080)=0x1c) recvfrom$inet6(r0, &(0x7f0000000640)=""/4075, 0xe94, 0x2003, &(0x7f0000000100)={0x1c, 0x18, 0x1, 0x57b9, "2d7d11ad8eef508e705a1d994305ad76", 0x9}, 0x1c) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0x66, &(0x7f00000000c0)={0x7c70, 0x1, 0x8, 0xb200, 0x1}, 0xc) recvfrom$unix(0xffffffffffffffff, 0x0, 0x0, 0x1, &(0x7f0000000600)=@abs={0x2, 0x0, 0x0, 0x3}, 0x8) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ppoll(&(0x7f0000000080)=[{r1, 0x4}], 0x1, 0x0, 0x0) writev(r1, &(0x7f0000000780)=[{&(0x7f0000000440)="29d25f48fa", 0x4000}], 0x1) r2 = socket$inet6(0x18, 0x1, 0x3) sendto$inet6(r2, &(0x7f0000000000)="d3735a6a6ea10c21", 0x8, 0x2, &(0x7f0000000300)={0x1c, 0x18, 0x0, 0x2, "000000010000000000008000", 0x9}, 0x1c) 776.084637ms ago: executing program 3 (id=59): recvmmsg(0xffffffffffffffff, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0xfffffffffffffe8c, 0x0}, 0xb761}, 0x38, 0x5802, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) chmod(&(0x7f0000000100)='./file0\x00', 0x39b) seteuid(0xffffffffffffffff) mkdir(&(0x7f0000000200)='./file0/file0\x00', 0x120) unlink(&(0x7f00000000c0)='./file0/file0\x00') mknod$loop(&(0x7f0000000040)='./file0\x00', 0x20c0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x200, 0xcf) lseek(r0, 0x7ff, 0x2) ioctl$DIOCSETSTATUSIF(r0, 0xc0284414, &(0x7f0000000340)={'./file1\x00', &(0x7f0000000240)=""/240, 0x7, 0xff, 0x8, 0x8}) r1 = accept4(0xffffffffffffffff, &(0x7f0000000380)=@in6, &(0x7f00000003c0)=0x1c, 0x9000) getsockopt$SO_PEERCRED(r0, 0xffff, 0x1022, &(0x7f0000000400)={0x0, 0x0}, 0xc) r3 = getegid() setregid(0x0, r3) setsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f0000000440)={0x0, r2, r3}, 0xc) link(&(0x7f0000000080)='./file0\x00', 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x7) getsockname(r0, &(0x7f0000000140)=@in, &(0x7f00000001c0)=0x10) r4 = kqueue1(0x10000) kevent(r4, &(0x7f00000000c0)=[{{}, 0xfffffffffffffffa, 0x1, 0x2, 0x8000000000000000, 0x9}], 0x40, 0x0, 0x1, 0x0) unveil(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='r\x00') 771.787941ms ago: executing program 5 (id=60): getgroups(0x7, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]) setresgid(r1, r0, 0x0) setgroups(0x0, 0x0) seteuid(0xffffffffffffffff) pipe(&(0x7f0000000280)={0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0x80047308, &(0x7f0000001840)={0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff}) closefrom(r3) r4 = socket$inet(0x2, 0x2, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0x80047308, &(0x7f0000001840)={0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff}) closefrom(r6) r7 = socket$inet6(0x18, 0x2, 0x0) bind$inet6(r7, &(0x7f0000000040)={0x1c, 0x18, 0x2, 0x0, "fffe0000000000000000008000", 0xfffffff5}, 0x1c) connect$inet6(r7, &(0x7f0000000080)={0x1c, 0x18, 0x0, 0x8a, "0a5be30e01a3d3d1793c1db58465282f", 0x308}, 0x1c) r8 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_cred(r8, 0xffff, 0x1023, &(0x7f00000003c0)={0x0, 0xffffffffffffffff}, 0x20) setsockopt$sock_cred(r4, 0xffff, 0x1023, 0x0, 0x0) openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) 771.561283ms ago: executing program 7 (id=61): r0 = socket$inet6(0x18, 0x3, 0x1) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x18, 0x1, 0x41, "00000000000000000000000000000001", 0xc0000}, 0x1c) sendmmsg(r0, &(0x7f0000002b40)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x7001}}, 0x38, 0x406) 771.123722ms ago: executing program 1 (id=62): r0 = socket$inet(0x2, 0x4, 0x6) ioctl$FIOASYNC(r0, 0x8004667d, &(0x7f0000000080)=0xb32) connect$inet(r0, &(0x7f0000000000)={0x10, 0x2, 0x0, 0x9}, 0x67) r1 = syz_open_pts() read(r1, 0x0, 0x0) fchown(r1, 0x0, 0x0) socket$inet(0x2, 0x4, 0x6) (async) ioctl$FIOASYNC(r0, 0x8004667d, &(0x7f0000000080)=0xb32) (async) connect$inet(r0, &(0x7f0000000000)={0x10, 0x2, 0x0, 0x9}, 0x67) (async) syz_open_pts() (async) read(r1, 0x0, 0x0) (async) fchown(r1, 0x0, 0x0) (async) 653.09563ms ago: executing program 1 (id=63): syz_emit_ethernet(0x243, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaa03aaaaaaaa86dd6f75184a020d3a7c39bc48e57db8883fa6958273532df404fe8000000000000000000000000000aac9009078000000086a0e1d10ffff0281fe80000000020000ff010000000000"]) r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x10, 0x0) ioctl$DIOCRGETTSTATS(r1, 0xc4504440, &(0x7f0000000480)={{'./file0\x00', './file0\x00', 0x28, 0x2}, 0x0, 0x4d0, 0x0, 0xb5, 0x401, 0x4, 0x2, 0x4c, 0x8}) ioctl$DIOCSETHOSTID(r0, 0xc0044456, &(0x7f0000000040)=0x7) 652.47004ms ago: executing program 0 (id=64): mknod$loop(&(0x7f0000000580)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000940), 0x8, 0x0) sysctl$kern(&(0x7f00000001c0)={0x1, 0x2f}, 0x2, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x341a) open(&(0x7f00000000c0)='./file0\x00', 0x7c6, 0xea) mkdir(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mknod$loop(&(0x7f0000000580)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x0) (async) openat$null(0xffffffffffffff9c, &(0x7f0000000940), 0x8, 0x0) (async) sysctl$kern(&(0x7f00000001c0)={0x1, 0x2f}, 0x2, 0x0, 0x0, 0x0, 0x0) (async) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x341a) (async) open(&(0x7f00000000c0)='./file0\x00', 0x7c6, 0xea) (async) mkdir(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) (async) 651.962124ms ago: executing program 4 (id=65): syz_emit_ethernet(0x8e, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6f61184a00580621fe00000000000000000000bbfe8000000000000000000000000000aa4e224e2200089078cac7b94a86028ed6d653"]) r0 = syz_open_pts() r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000d00), 0x20, 0x0) ioctl$BIOCLOCK(r1, 0x20004276) ioctl$TIOCSPGRP(r0, 0x8010427e, &(0x7f0000000040)) 651.10962ms ago: executing program 1 (id=66): pselect(0x40, &(0x7f0000000000)={0x49f, 0x1, 0x8000000000000001, 0x1, 0x9, 0x6, 0x8, 0x8}, 0x0, 0x0, 0x0, 0x0) (async) sysctl$net_inet_etherip(&(0x7f0000000000)={0x4, 0x2, 0x61, 0x1}, 0x4, 0x0, 0x0, 0x0, 0x0) (async) sysctl$net_pipex(&(0x7f0000000000)={0x4, 0x1f, 0x2}, 0x3, 0x0, 0x0, 0x0, 0x0) sysctl$kern(&(0x7f0000000000)={0x1, 0x49}, 0x6, 0x0, 0x0, 0x0, 0x0) (async) syz_emit_ethernet(0x56, &(0x7f0000000300)={@local, @local, [], {@ipv6={0x86dd, {0xf, 0x6, "61184a", 0x20, 0x6, 0x1, @empty, @local={0xfe, 0x80, '\x00', 0x0}, {[], @udp={{0x2, 0x2, 0x8}, {"cac7b94a86028ed6d6535d2243d0609e29473a29b9fcaab6"}}}}}}}) 535.920209ms ago: executing program 0 (id=68): sysctl$net_inet_tcp(&(0x7f0000000000)={0x4, 0x2, 0x6, 0x19}, 0x4, 0x0, 0x0, &(0x7f0000000040)="a0860100", 0x4) r0 = socket$inet6(0x18, 0x3, 0x3a) sendto$inet6(r0, &(0x7f0000000080)="00024ae9d648eaa8e5939c075885219c4d43584e9f4af473d36b81c34262ba7bdc13559b064fd084c69fe5e6e13a78b9d9e0f65a45dfdd41d982d96f4d3959e1b87a4ef4b4d2026cafd8626f", 0x4c, 0x6, &(0x7f0000000300)={0x1c, 0x18, 0x3, 0x0, "fed5e132beaada1fcc9fa0df76735576"}, 0x1c) 535.480656ms ago: executing program 7 (id=69): sysctl$hw(&(0x7f0000000100)={0x6, 0xc}, 0x2, &(0x7f0000000140)="66ec6380", &(0x7f00000001c0)=0x4, 0x0, 0x0) pselect(0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000000)) sysctl$hw(&(0x7f0000000040)={0x6, 0x5}, 0x2, &(0x7f0000000200)="95f4d4cc", &(0x7f00000000c0)=0x4, 0x0, 0x0) (async) sysctl$hw(&(0x7f0000000040)={0x6, 0x5}, 0x2, &(0x7f0000000200)="95f4d4cc", &(0x7f00000000c0)=0x4, 0x0, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 534.797933ms ago: executing program 0 (id=70): mkdir(&(0x7f0000000080)='./file0\x00', 0x168) unveil(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='r\x00') unveil(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000240)='w\x00') seteuid(0xffffffffffffffff) ioctl$TIOCSETD(0xffffffffffffffff, 0x8004741b, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x8004741b, 0x0) r0 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000f00), 0x0, 0x0) closefrom(r0) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x7) r1 = open(&(0x7f0000001980)='./file0\x00', 0x80, 0xc3) socketpair$unix(0x1, 0x5, 0x0, 0x0) fstat(r1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r2) ioctl$TIOCSETAF(r0, 0x802c7416, &(0x7f0000000000)={0x6, 0x5, 0xff7ffec0, 0x80004a, "9012b30900", 0x0, 0x7}) openat$bpf(0xffffffffffffff9c, 0x0, 0x40, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) closefrom(r4) r5 = accept(r4, &(0x7f0000000100)=@un=@abs, &(0x7f0000000280)=0x8) ppoll(&(0x7f00000002c0)=[{r5, 0x2}, {r4, 0x4}, {0xffffffffffffff9c, 0x10}, {r3, 0x8}], 0x4, 0x0, 0x0) r6 = openat$vnd(0xffffffffffffff9c, &(0x7f0000002a80), 0x80, 0x0) ioctl$VNDIOCSET(r6, 0xc0384600, &(0x7f0000002b00)={0x0, 0x5, 0x0}) chdir(&(0x7f0000000200)='./file0\x00') writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000140)="abd7453f9950b84fba95b1b61c60075cc39796a11012ada0e0c3c9396b6f8cbd63e10842750ec4f55b1fa662e657103d5890ab8dc4aed3a9f3299eb13292cc984adf77932110f25b7b468f0f33bf3be0d978a872ee2bf014773bfd80c5921ba7f32c7c3374b6e4c8cba3721f117a5b51b43393950b024f68e1a0d073088b14502e2e", 0x82}], 0x1) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x4) r7 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$BIOCSETF(r7, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f00000000c0)=[{0x7, 0x6, 0x5, 0x5}, {0x7, 0x3, 0x4, 0x6}, {0xfffe, 0x1, 0x5, 0x40000003}]}) ioctl$BIOCSETIF(r7, 0x8020426c, &(0x7f0000000440)={'tap', 0x0}) syz_emit_ethernet(0x2a, &(0x7f0000001600)={@random="fb30c1c425b3", @remote, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x8, @empty, @remote={0xac, 0x14, 0x0}, @local, @local={0xac, 0x14, 0x0}}}}}) openat$wsmouse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) 534.670343ms ago: executing program 7 (id=71): sysctl$kern(&(0x7f0000000040)={0x1, 0x4}, 0x2, 0x0, &(0x7f0000000140), 0x0, 0x0) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) sysctl$kern(&(0x7f0000000040)={0x1, 0x3b}, 0x2, &(0x7f0000000080), &(0x7f0000000140), 0x0, 0x0) r0 = socket$inet6(0x18, 0x1, 0x6) setsockopt$sock_int(r0, 0xffff, 0x1, &(0x7f0000000000)=0x3, 0x4) (async) setsockopt$sock_int(r0, 0xffff, 0x1, &(0x7f0000000000)=0x3, 0x4) listen(r0, 0x0) sysctl$kern(&(0x7f0000000080)={0x1, 0x46}, 0x2, 0x0, 0x0, &(0x7f0000000180), 0x0) sysctl$net_inet_ip(&(0x7f0000002ac0)={0x4, 0x2, 0x0, 0x5}, 0x4, &(0x7f0000000100)="7b5a82b0", &(0x7f0000002c00)=0x4, 0x0, 0x0) (async) sysctl$net_inet_ip(&(0x7f0000002ac0)={0x4, 0x2, 0x0, 0x5}, 0x4, &(0x7f0000000100)="7b5a82b0", &(0x7f0000002c00)=0x4, 0x0, 0x0) 533.267329ms ago: executing program 4 (id=72): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x3, 0x6, 0x6, 0x9}, {0x87, 0xda, 0xa2, 0x8003}, {0xfffe, 0x0, 0x7, 0x5}]}) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[]) r1 = socket$inet(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000200)={0x10, 0x2, 0x2}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x10, 0x2, 0x3, 0x8}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00000002c0)={@broadcast, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x2, 0x36, 0x1c, 0x68, 0x0, 0x5, 0x11, 0x0, @multicast1}, @udp={{0x0, 0x2, 0x8}}}}}}) 374.577329ms ago: executing program 0 (id=73): getentropy(&(0x7f00000003c0)=""/25, 0x19) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)) 374.37295ms ago: executing program 1 (id=74): r0 = getppid() setpgid(r0, r0) getppid() (async) setpgid(r0, r0) (async) 330.921543ms ago: executing program 4 (id=75): r0 = msgget(0x2, 0x203) r1 = socket$inet(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000200)={0x10, 0x2, 0x2}, 0x10) msgsnd(r0, &(0x7f0000000580)=ANY=[], 0xe1, 0x0) msgrcv(r0, &(0x7f0000000180)={0x0, ""/57}, 0x41, 0x0, 0x1800) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) execve(&(0x7f00000002c0)='./file0\x00', &(0x7f00000003c0)=[&(0x7f0000000300)='\\{\\\xfd*\x00', &(0x7f0000000600)='}:)^)^\x00s\xc31\x10\xda2w\x0e\x97\x04\xd8z\x05\xc2\x86\xff\x1cc\xe0\x1fW\x85T`p\xe1\x17\x97\xd1\x1b\r\xab*\xff\xeeX\b\xba\x1b\x1c\xab\xad\x18;<\x94\x80t\xc7\x84M\xd9^o\xe0#c\xca\x8b\x1e\x84\x0f\xbd\x03y4d\xdes\xe4y\x10', &(0x7f0000000380)='-\x00'], &(0x7f0000000540)) munmap(&(0x7f00000cf000/0x1000)=nil, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) munmap(&(0x7f00000b9000/0x3000)=nil, 0x3000) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x7c6, 0xea) writev(r3, &(0x7f0000000540)=[{&(0x7f0000000180)="19a09f0a20", 0x100000}], 0x1) ioctl$BIOCSETF(r2, 0x80104267, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0xac, 0x7, 0x4, 0x43}, {0xfffe, 0x0, 0x1c, 0x3}]}) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000440)={'tap', 0x0}) openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0x28, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000001600)=ANY=[]) pipe(&(0x7f0000000280)={0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0x80047308, &(0x7f0000000000)={0x0, 0x0, 0x18000, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0x80047308, &(0x7f0000001840)={0x0, 0x0, 0x10000, 0x0, 0xffffffffffffffff}) closefrom(r6) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0x80047308, 0x0) closefrom(0xffffffffffffffff) r7 = socket$inet6(0x18, 0x2, 0x0) bind$inet6(r7, &(0x7f0000000040)={0x1c, 0x18, 0x2, 0x0, "fffe0000000000000000008000", 0xfffffff5}, 0x1c) connect$inet6(r7, &(0x7f0000000080)={0x1c, 0x18, 0x0, 0x8a, "0a5be30e01a3d3d1793c1db58465282f", 0x308}, 0x1c) setsockopt$sock_cred(r7, 0xffff, 0x1023, &(0x7f00000003c0), 0x20) r8 = socket$inet6(0x18, 0x2, 0x1) setsockopt$sock_cred(r8, 0xffff, 0x1023, &(0x7f00000003c0)={0xffffffffffffffff}, 0xc) closefrom(r5) getresuid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)) 328.451585ms ago: executing program 7 (id=76): mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x674) r0 = open(&(0x7f0000001980)='./file0\x00', 0x80, 0x0) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt(r1, 0x0, 0xa, &(0x7f0000000040)='Y', 0x1) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x10, 0x2, 0x0, 0xffffffff}, 0x10) ioctl$TIOCSETA(r0, 0x80047466, &(0x7f0000000500)={0x3, 0x0, 0x519, 0x3, "450400000000000000704340880e1a5213513f4c", 0x2c1, 0x4}) pselect(0x40, &(0x7f0000000000)={0x0, 0x21a, 0x8, 0x6, 0x1834, 0x140, 0x5, 0x5}, 0x0, &(0x7f0000000100)={0x7fff, 0x654, 0x10001, 0xffffffffffffffff, 0x2, 0x5, 0x7fffffff, 0x7fff}, 0x0, 0x0) 328.271217ms ago: executing program 1 (id=77): mkdir(&(0x7f0000000400)='./file0\x00', 0x148) r0 = open$dir(&(0x7f00000009c0)='./file0\x00', 0x8, 0x100) rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000140)='./file0\x00', 0x0) rename(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00') seteuid(0xffffffffffffffff) unveil(&(0x7f0000000b80)='./file1\x00', &(0x7f0000000bc0)='c\x00') fchownat(r0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x2) 326.051879ms ago: executing program 5 (id=78): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000004600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@rights={0x10, 0xffff, 0x1, [r1]}], 0x10, 0xd}, 0x400) read(r1, &(0x7f0000000200)=""/223, 0xdf) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x0, 0xfffffffffffffc00}) 323.430991ms ago: executing program 6 (id=80): getgroups(0x7, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]) setresgid(r1, r0, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt(r2, 0x6, 0x10, &(0x7f0000000100)="308fbbdfc4", 0x5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) getsockopt$sock_cred(r3, 0xffff, 0x1022, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000140)=0xc) setreuid(0x0, r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) getsockopt$sock_cred(r5, 0xffff, 0x1022, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000140)=0xc) setreuid(r4, r6) getgroups(0x7, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]) (async) setresgid(r1, r0, 0x0) (async) socket$inet(0x2, 0x1, 0x0) (async) setsockopt(r2, 0x6, 0x10, &(0x7f0000000100)="308fbbdfc4", 0x5) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)) (async) getsockopt$sock_cred(r3, 0xffff, 0x1022, &(0x7f00000000c0), &(0x7f0000000140)=0xc) (async) setreuid(0x0, r4) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) (async) getsockopt$sock_cred(r5, 0xffff, 0x1022, &(0x7f0000000100), &(0x7f0000000140)=0xc) (async) setreuid(r4, r6) (async) 322.966568ms ago: executing program 5 (id=81): r0 = open(&(0x7f0000000180)='./file0\x00', 0x200, 0xcf) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x7c6, 0xea) sysctl$net_inet_tcp(&(0x7f0000000040)={0x4, 0x2, 0x6, 0x1}, 0x4, &(0x7f00000003c0)="d36407ee1373f4ea56ea8137acc99c9eecab3bc9ce316f05d6fd05fbbc6718343702829b2043c686dab4ad338a4518f73b1aa422d98fed69148be12326d3b647c894c655059749ec050ef27b0555c7969c3819b59f1a90471450da95d4b898bab68290e8479bcd27450e8c7204980456e368e40d83d3a30636dafc98bf7633106804a6888876a0589fe1b84e91793c2f2e020abd0e6e251d5576398049b0e7c76e66c489f54c56fef2abf3a0fecfc24d89d36c622eb002ef8cb631bc39e5258914aaba6554fc28bb103b9b82b6b06090a679758fd6bdb65dd3", &(0x7f00000004c0)=0xd9, &(0x7f0000000580)="080d27581bb7ebaa16cab7ab67f619879a5eb4e1a83c424a1806dbbb31697b24d1eb19bba212233f3445a85e6d02b0b01d1fc5cf5546403a96af52763cc9dbb8bc0adaf584d22b41336cf330222f11a382a48fde3a5204b45bb4b9ca8d5dbdd504656ec9b409ec8b8f075035f7b5b09a100b6536d15a4ccb3d6ba1e537eaade176fefb17763c71531e5982c55398d135e34f6f2f24c179fc92abd7a5a3ef7fdfc66e0d3c6d8a009d54be0050e2008872b54a818f46f153de232c426b09a4349a39422df0a8d9d95b1f29a127a94a5302db1b5cd6380187b440d5ac21bba505cda9159985", 0xe4) writev(r1, &(0x7f0000000540)=[{&(0x7f00000002c0)="19a09f0a202db400721b86085f2ccb05793b8c2b5fa2ca44d6760feccbaa42ce584b73722125bc3a0080e544a9b04f43186c91c63608e995b3d891c8ad165b0e2cebe705c495fb883d9a0ee0f6322059b4849c86a134181c25a27029cb4bb58bed6036028e825ee65c50a83bc4bd6fc38a7fd17560c33a9dfc8426ab42d5ee3c103260c22f1bbafef8fffee66f751b2ef60db074ed32ddf37f8837129e1d0932a736e1e37fe5f22b4b34e675b4aee91a87e4aec94d3a43fc21647990417e880d1ab087e5b33ea1778302517ed54c8fb04a1d5bae76611af2c334", 0xda}, {&(0x7f0000000280)="ffdb9f10984e2f8961967223f4996de5a537e34107c1a402be3523e39bce454ce4eee6b86dc96ab382f89e", 0x2b}], 0x2) mmap(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x4, 0x2010, r0, 0x2000) truncate(&(0x7f0000000000)='./file0\x00', 0xffff) syz_emit_ethernet(0x32, &(0x7f0000000100)={@local, @local, [{[{0x88a8, 0x5, 0x0, 0x1}], {0x8100, 0x4, 0x1, 0x2}}], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x9, @empty, @loopback, @broadcast}}}}) munmap(&(0x7f0000000000/0x9000)=nil, 0x9000) pselect(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xfffffffffffffffe, 0xfffffffffffff80d}, 0x0) r2 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r3 = socket$inet6(0x18, 0x2, 0x0) setsockopt$sock_int(r3, 0xffff, 0x1000, &(0x7f00000002c0)=0x6, 0x4) bind$inet6(r3, &(0x7f0000000040)={0x1c, 0x18, 0x3, 0xd, "0000000000000000030f00", 0x1000004}, 0x1c) r4 = socket$inet6(0x18, 0x2, 0x0) setsockopt$sock_int(r4, 0xffff, 0x1000, &(0x7f00000002c0)=0x6, 0x4) bind$inet6(r4, &(0x7f0000000080)={0x1c, 0x18, 0x3, 0x11, "00000000000000000000000000000010", 0x8}, 0x1c) unveil(0x0, &(0x7f0000000340)='x\x00') mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1) ioctl$DIOCSETIFFLAG(r2, 0xc0284459, &(0x7f0000000340)={'./file0\x00', 0x0, 0xb, 0x8, 0x0, 0x6}) mlock(&(0x7f0000ff5000/0xb000)=nil, 0xb000) open(&(0x7f0000000180)='./file0\x00', 0x19083084ca9cf73d, 0x2) 322.652473ms ago: executing program 3 (id=82): r0 = kqueue() kevent(r0, &(0x7f0000000200), 0xd410, &(0x7f0000000280)=[{{}, 0xfffffffffffffff9, 0x81, 0xf0000000, 0x1}], 0xa, 0x0) unveil(&(0x7f0000001d00)='./file1\x00', &(0x7f0000001d40)='w\x00') unveil(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000400)='r\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) closefrom(r1) openat$bpf(0xffffffffffffff9c, &(0x7f0000000140), 0x20, 0x0) mkfifo(&(0x7f0000001380)='./file0\x00', 0x8) r3 = open$dir(&(0x7f00000002c0)='./file0\x00', 0x2, 0x3c) r4 = setsid() fcntl$setown(r2, 0x6, r4) fcntl$setown(r3, 0x6, r4) mkdir(&(0x7f0000000000)='./file0\x00', 0x150) unveil(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000080)='x\x00') munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x1810, r0, 0x8000000000000000) unveil(&(0x7f0000000100)='./file0\x00', &(0x7f0000000240)='r\x00') open$dir(&(0x7f00000000c0)='./file0\x00', 0x400, 0x79) chroot(&(0x7f0000000000)='./file0\x00') 213.172333ms ago: executing program 6 (id=83): r0 = socket$inet(0x2, 0x2, 0x0) getsockopt(r0, 0x0, 0x20, 0x0, 0x0) r1 = kqueue1(0x10000) kevent(r1, &(0x7f0000000040)=[{{r1}, 0xfffffffffffffffa, 0xc3, 0x2, 0x1, 0xfffffffffffffffd}], 0x6, 0x0, 0x4, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x1ff, 0x7, r1}) ioctl$WSDISPLAYIO_SETPARAM(r2, 0xc020575a, &(0x7f0000000080)={0x1, 0x5, 0x95, 0x3}) kevent(r1, &(0x7f0000000040), 0xf00, 0x0, 0xffff4b51, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x19083084ca9cf73d, 0x2) utimes(0x0, &(0x7f0000000080)={{0x6, 0xfffffffffffffffe}, {0xfb, 0xfffffffffffffff7}}) writev(r3, &(0x7f0000000300)=[{0x0}], 0x1) socket$inet(0x2, 0x2, 0x0) (async) getsockopt(r0, 0x0, 0x20, 0x0, 0x0) (async) kqueue1(0x10000) (async) kevent(r1, &(0x7f0000000040)=[{{r1}, 0xfffffffffffffffa, 0xc3, 0x2, 0x1, 0xfffffffffffffffd}], 0x6, 0x0, 0x4, 0x0) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x1ff, 0x7, r1}) (async) ioctl$WSDISPLAYIO_SETPARAM(r2, 0xc020575a, &(0x7f0000000080)={0x1, 0x5, 0x95, 0x3}) (async) kevent(r1, &(0x7f0000000040), 0xf00, 0x0, 0xffff4b51, 0x0) (async) open(&(0x7f0000000180)='./file0\x00', 0x19083084ca9cf73d, 0x2) (async) utimes(0x0, &(0x7f0000000080)={{0x6, 0xfffffffffffffffe}, {0xfb, 0xfffffffffffffff7}}) (async) writev(r3, &(0x7f0000000300)=[{0x0}], 0x1) (async) 212.739569ms ago: executing program 6 (id=84): mkfifo(&(0x7f0000001800)='./file0\x00', 0x8) unveil(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='r\x00') sysctl$net_mpls(&(0x7f0000001b80)={0x4, 0x21, 0x2}, 0x3, 0x0, 0x0, 0x0, 0x0) utimes(&(0x7f0000000000)='./file0\x00', 0x0) 212.360733ms ago: executing program 6 (id=85): open$dir(&(0x7f0000000280)='./file1\x00', 0x0, 0x200) (async) r0 = open$dir(&(0x7f0000000280)='./file1\x00', 0x0, 0x200) getdents(r0, &(0x7f0000000680)=""/4096, 0x331) linkat(r0, &(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) linkat(r0, &(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = openat$vnd(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) ppoll(&(0x7f0000000180)=[{r0, 0x4}, {r0, 0x4}, {r0, 0x4}, {r1, 0x4}, {r0, 0x40}, {r0, 0x4}], 0x6, &(0x7f00000001c0)={0x4, 0xb1d2}, &(0x7f0000000200)={0x9}) r2 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000040), 0x48129, 0x0) ioctl$WSMOUSEIO_GETPARAMS(r2, 0x80105727, &(0x7f0000000080)={&(0x7f0000000140)=[{0x2, 0x3}, {0x101, 0x4}], 0x2}) 161.345932ms ago: executing program 0 (id=86): r0 = socket$inet6(0x18, 0x3, 0x1) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x18, 0x1, 0x41, "00000000000000000000000000000001", 0xc0000}, 0x1c) sendmmsg(r0, &(0x7f0000002b40)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x9000}}, 0x38, 0x406) 160.919117ms ago: executing program 6 (id=87): r0 = open(&(0x7f00000000c0)='./file0\x00', 0x7c6, 0xea) writev(r0, &(0x7f0000000540)=[{&(0x7f00000003c0)="19a09f0a", 0x4}], 0x1) (async) truncate(&(0x7f0000000000)='./file0\x00', 0xffff) r1 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) ioctl$DIOCGETQUEUES(0xffffffffffffffff, 0x80184405, &(0x7f0000000040)={0x1, 0x1, {'\x00', './file1\x00', './file1\x00', './file1\x00', {{0x7, 0x2}, {0x6, 0x13}, 0x2}, {{0x9, 0x5}, {0x2f1c, 0x526}, 0x4}, {{0xc, 0x2}, {0x9, 0x1000}, 0x40000000}, {0x7, 0x0, 0x0, 0x4}, 0x0, 0x10000, 0x6, 0x7, 0x4}}) (async) r2 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) fcntl$lock(r2, 0x9, &(0x7f0000000040)={0x2, 0x0, 0x5, 0x2000100000005}) openat$vnd(0xffffffffffffff9c, &(0x7f0000000080), 0x10, 0x0) (async) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) ioctl$WSMOUSEIO_SETPARAMS(r1, 0x80105728, &(0x7f0000000100)={&(0x7f00000000c0)=[{0x22, 0x4}], 0x1}) (async) sysctl$net_pipex(&(0x7f0000000040)={0x4, 0x1f, 0x1}, 0x3, 0x0, 0x0, 0x0, 0x0) 158.873323ms ago: executing program 7 (id=88): r0 = socket$inet(0x2, 0x8003, 0x1) socket$inet6(0x18, 0x2, 0x5) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$DIOCRSETTFLAGS(r1, 0xc450444a, &(0x7f0000000340)={{'./file1\x00', './file1\x00', 0x4d, 0x8}, 0x0, 0x0, 0x0, 0xfffffff7, 0x5, 0x0, 0x5, 0x2e, 0x2}) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) closefrom(r2) r3 = socket$inet6(0x18, 0x3, 0x2) connect$inet6(r3, &(0x7f0000000180)={0x1c, 0x18, 0x1, 0xc, "ff210b6974468558ca1c65232a5b6f35", 0x2}, 0x1c) r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) r5 = dup(r4) ioctl$BIOCSETIF(r5, 0x8020426c, &(0x7f0000000000)={'tap', 0x0}) bind$inet6(r2, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000001c0)={0x7fff, 0x3, 0xad, 0x10000}) r6 = socket$inet6(0x18, 0x3, 0x7) getsockopt$sock_int(r6, 0xffff, 0x1000, &(0x7f0000000000), &(0x7f0000000080)=0x4) getrusage(0xffffffffffffffff, 0xffffffffffffffff) connect$inet6(r6, &(0x7f0000000200)={0x1c, 0x18, 0x2, 0x2, "38d16e00", 0x1ff}, 0x1c) r7 = accept$inet6(r6, &(0x7f0000000040), &(0x7f00000000c0)=0x1f) setsockopt$inet_opts(r0, 0x0, 0x1, &(0x7f0000000140)="d99db631c5ce5e7e21321f95ee7b33aecd8f83625fcb0747c88eba001b5b5f95b4c876007265dbe3153d88a4e62cce40682b880fa1ede7368cec8e9bdfea1cba57d87a7b59e23109ef6c858b", 0x4c) accept$inet6(r7, &(0x7f0000000000), &(0x7f0000000100)=0x1c) getsockopt(0xffffffffffffffff, 0xfffffffe, 0x68, 0x0, 0x0) 91.932755ms ago: executing program 5 (id=89): syz_emit_ethernet(0x8e, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6f61184a00580621fe00000000000000000000bbfe8000000000000000000000000000aa4e224e2200089078cac7b94a86028ed6d653"]) r0 = syz_open_pts() r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000d00), 0x20, 0x0) ioctl$BIOCLOCK(r1, 0x20004276) ioctl$TIOCSPGRP(r0, 0x8010427e, &(0x7f0000000040)) 66.953676ms ago: executing program 0 (id=90): ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x7fff, 0x2, 0xffffffffffffff9c}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000080)={0x0, 0x1}) mknod(&(0x7f0000000040)='./file0\x00', 0x2000, 0x33a5) r1 = open(&(0x7f0000001980)='./file0\x00', 0x80, 0xc3) r2 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000100)={0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000180)={0x0}) ioctl$DRM_IOCTL_MODE_ADDFB2(r2, 0xc06864b8, &(0x7f00000001c0)={0x0, 0x4, 0x2, 0x59565955, 0x3, [0x0, 0x0, r3, r4], [0x9, 0x0, 0x1, 0x1], [0x3, 0x80000001, 0x7], [0x9, 0x10, 0x2, 0x8]}) ioctl$TIOCCONS(r1, 0xc0a86b05, &(0x7f0000000140)=0x1) r5 = open(&(0x7f0000001980)='./file0\x00', 0x80, 0xc3) writev(r2, &(0x7f0000000400)=[{&(0x7f0000000240)="16c08b766e9cfa468451d4e4550cd1be41b0a9d43a4767759d416ebf27b51a05071afb24e5874f922a6e00cb485b83cee3a6cea7b2d899f5b4988c95b20493a6bf046148e26a59e2e0fe5c7be28df30291517b79ea29f200a8b0e257653d61d26f3174e90ed18b4e52cf5186c4db4e60f44219221462c91a3186d8538334e69d455f6a84a4ef0eff0daca42f752d337ade6b56a6b4d2d33b4c3480b5d86e77c9450b21b60d4cac64134ceee479f95b0020e1dc19524ee8825350bf16d1ded0e2e5bab8f162524f19c63c7b2a5656ed89f595fc30936dcb74bc13bb9c26934c416f7d869da5b0bc7676eb947ae5903f730eab3dbc9eb21f", 0xf7}, {&(0x7f0000000340)="3d4fb4f8cc6804cb6046244796bdf9d6677fa6c00e683f34039e5071385a2d8ce3e6d435fb821444eac988da18b003e8b73abca257663eeed4063ad25fe159de4f315d4214f85a438b849fa9d43c41da6ec9858f3dcc04157f7e0676c9acb3ebade80a4e9b51e9451786840b0b0ea812a90bd2b7d87ddf2c2b5ef0f9b23ccfb84a", 0x81}], 0x2) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r6, 0xffff, 0x1003, 0x0, 0x0) ioctl$TIOCCONS(r5, 0xc0a86b07, &(0x7f0000000140)=0x1) 66.519058ms ago: executing program 3 (id=91): r0 = open(&(0x7f00000000c0)='./file0\x00', 0x200, 0x112) ppoll(&(0x7f0000000100)=[{r0, 0x14}], 0x1, 0x0, 0x0) (async) open(&(0x7f0000000180)='./file0\x00', 0x19083084ca9cf73d, 0x2) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000200)={0x3, &(0x7f0000000080)=[{0x54, 0x6, 0x5, 0x10002009}, {0x7, 0x40, 0xff, 0x1}, {0x2006, 0xe, 0x4, 0x1003}]}) (async) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000440)={'tap', 0x0}) syz_emit_ethernet(0x66, &(0x7f0000000240)={@local, @local, [], {@ipv6={0x86dd, {0x8, 0x6, "595b81", 0x30, 0x3c, 0x4, @empty, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0xa, {0x4, 0x6, '\x00\x00\b', 0xf000, 0x62, 0x1, @ipv4={'\x00', '\xff\xff', @empty=0xfeff}, @mcast2}}}}}}}) r2 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) (async) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r4 = syz_open_pts() ppoll(&(0x7f0000000140)=[{r4, 0x4}, {r3, 0x6}], 0x2, 0x0, 0x0) ppoll(&(0x7f0000000040)=[{r3, 0x40}], 0x1, 0x0, 0x0) (async) ioctl$WSKBDIO_GETMAP(r2, 0xc010570d, &(0x7f0000000180)={0xffffffffffffffd4, 0x0}) r5 = msgget(0x1, 0x9) (async) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) mknod(&(0x7f0000000040)='./file0\x00', 0x2000, 0x33a2) (async) r7 = open(&(0x7f0000001980)='./file0\x00', 0x80, 0xc3) ioctl$TIOCCONS(r7, 0xc0a86b07, &(0x7f0000000140)=0x1) (async) ioctl$DIOCRGETASTATS(0xffffffffffffffff, 0xc4504447, &(0x7f0000000240)={{'./file1\x00', './file0\x00', 0x20, 0xfe}, &(0x7f0000000180)=[{@remote={0xac, 0x14, 0x0}, '\x00', './file0\x00', 0xfffffff7, 0x0, 0x2, 0x4, 0x9, 0x7, 0xfc}], 0x9, 0x1, 0xb, 0x0, 0x5, 0x1ff, 0x4, 0x6f3}) ioctl$TIOCCONS(r7, 0xc0a86b07, &(0x7f0000000140)=0x4) (async) r8 = getegid() setregid(r8, 0x0) r9 = getpgrp() (async) r10 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x522, 0x0) (async) r11 = getpgrp() kill(r11, 0x13) fcntl$lock(r10, 0x8, &(0x7f0000000080)={0x0, 0x0, 0xfffffff7fffffffd, 0x1000100000001, r11}) (async) msgctl$IPC_SET(r5, 0x1, &(0x7f00000001c0)={{r6, 0x0, 0x0, r8, 0x101, 0x200, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xafbf6a6, 0x1, 0xa, r9, r11, 0x4a4ebb50, 0x0, 0x8, 0x0, 0xb}) 65.620367ms ago: executing program 1 (id=92): r0 = syz_open_pts() fcntl$lock(r0, 0x7, &(0x7f0000000080)={0x5cc5148d39c991cf, 0x1, 0x6dc, 0x4000000000006}) syz_emit_ethernet(0x3e, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6fff070000083a0cfe8000000000000000000000000000bbff020000001e00000001810090780e0104"]) 13.611963ms ago: executing program 6 (id=93): r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r1 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r1, &(0x7f0000002180)=[{&(0x7f00000001c0)="8a2fc8efa1aff7ec420444edf2537cb020b1c1989ed194277772ac3a8a4a59607bd681d554be419a191f5e5cc0d623050d43", 0x32}], 0x1) sysctl$hw(&(0x7f0000000000)={0x6, 0x14}, 0x2, &(0x7f0000000040)="a7c720461d8c3999", &(0x7f0000000100)=0x8, 0x0, 0x0) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) ioctl$SPKRTONE(r1, 0x80085301, &(0x7f0000000040)={0x7fff, 0x2}) munmap(&(0x7f0000000000/0x9000)=nil, 0x9000) r2 = shmget$private(0x0, 0x3000, 0x2ea, &(0x7f0000469000/0x3000)=nil) recvmmsg(0xffffffffffffffff, &(0x7f0000000440)={{&(0x7f0000000080)=@in6, 0x1c, &(0x7f00000000c0), 0x343, &(0x7f0000000280)=""/86, 0x56}, 0x7fff}, 0x38, 0x1821, 0x0) unveil(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='r\x00') pselect(0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0) shmat(r2, &(0x7f0000000000/0x800000)=nil, 0x1000) ioctl$DIOCSETLIMIT(r0, 0xc0084428, &(0x7f0000000180)={0x7, 0x14}) r3 = socket$inet6(0x18, 0x2, 0x0) setsockopt$sock_int(r3, 0xffff, 0x1000, &(0x7f00000002c0)=0x6, 0x4) bind$inet6(r3, &(0x7f0000000040)={0x1c, 0x18, 0x3, 0xd, "0000000000000000000000001000", 0x1000004}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x4, 0x6, "31f05f", 0x8, 0x11, 0x91, @empty, @local={0xfe, 0x80, '\x00', 0x0}, {[], @udp={{0x1, 0x3, 0x8}}}}}}}) ppoll(&(0x7f0000000000)=[{r0, 0x8}, {r0, 0x100}], 0x2, &(0x7f0000000080)={0x0, 0x401}, 0x0) 1.452705ms ago: executing program 4 (id=94): open$dir(&(0x7f0000000080)='./file0\x00', 0x200, 0x0) mknod(&(0x7f0000000640)='./file0\x00', 0x10, 0x8) ktrace(&(0x7f0000000040)='./file0\x00', 0x4, 0x300, 0x0) sysctl$ddb(&(0x7f00000016c0)={0x9, 0x8}, 0x2, 0x0, 0x0, &(0x7f0000001840), 0x0) r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) ioctl$DIOCGETRULESET(r0, 0xc444443b, &(0x7f00000001c0)={0x5, './file0\x00', './file0\x00'}) madvise(&(0x7f0000e60000/0x4000)=nil, 0x4000, 0x1) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$BIOCSETWF(r1, 0x80104277, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0xa4b, 0x9, 0x6, 0x3}]}) munmap(&(0x7f0000c00000/0x400000)=nil, 0x400000) pselect(0x40, &(0x7f0000000080)={0xff, 0x3ff, 0x5, 0x8, 0x9, 0xb, 0x40008000000000, 0x80000009}, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) dup(r1) sendmmsg(r2, &(0x7f0000000000)={{0x0, 0x0, &(0x7f0000000680), 0x0, 0x0}}, 0x38, 0x8) socket$unix(0x1, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000004200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="9c000000ffff000001000000a603697b92441de00a9f4699909098a7b024d5acfd1d4f3ef54ceafa10e48dece8975ec03f2c46149e993bd01f04522054ff0f01a789819aff1611acb14ee38b9c9102670fbb90d859b1b3bfebbd05a434fc19e8d1d4f628013758afb803c49b8fb48a51d298c8", @ANYBLOB="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", @ANYRES32, @ANYRESHEX=r3, @ANYRESHEX=r4], 0x1c, 0xd}, 0x400) syz_emit_ethernet(0x36, &(0x7f0000000080)=ANY=[]) select(0x40, &(0x7f0000000680)={0x7, 0xb9e, 0xfffffffffffff801, 0x9, 0x800000000003, 0x8, 0x6, 0x2}, &(0x7f00000000c0)={0x8, 0x0, 0x7fffffff, 0x7, 0x7, 0x4, 0x4, 0x100000000}, &(0x7f0000000100)={0x0, 0x65d3, 0xfffffffffffffffe, 0x3, 0x10000000000008, 0x7, 0x8, 0x9}, &(0x7f0000000140)={0x5, 0x4}) 0s ago: executing program 2 (id=95): open$dir(&(0x7f0000000080)='./file0\x00', 0x200, 0x0) r0 = kqueue1(0x10000) kevent(r0, &(0x7f0000000040)=[{{r0}, 0xfffffffffffffffa, 0xc3, 0x2, 0x1, 0xfffffffffffffffd}], 0x6, 0x0, 0x4, 0x0) kevent(r0, &(0x7f0000000040), 0xf00, 0x0, 0xffff4b51, 0x0) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000080)=@file={0x4, 0x1, './file0\x00'}, 0xa) connect$unix(r2, &(0x7f00000000c0)=@file={0xfc, 0x1, './file0\x00'}, 0xa) closefrom(r1) r3 = open(&(0x7f0000000180)='./file0\x00', 0x19083084ca9cf73d, 0x4a) fcntl$lock(r3, 0x8, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x1000100000001}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.189' (ED25519) to the list of known hosts. pckbd_enable: command error Connection to 10.128.1.189 closed by remote host. pckbd_enable: command error  ./file0 f OpenBSD/amd64 (ci-openbsd-kasan-3.us-central1-b.c.syzkaller.internal) (tty00) login: panic: sleep: syz-executor[29232] slept inside a no-sleep walk bracket (raw pointer held across sleep, wmesg "getblk") Stopped at db_enter+0x17: popq %rbp TID PID UID PRFLAGS PFLAGS CPU COMMAND *359553 29232 0 0 0x4000010 1K syz-executor 207220 78088 0 0 0 0 syz-executor db_enter() at db_enter+0x17 panic(ffffffff84d8d160) at panic+0x270 sleep_setup(ffff800001be1550,11,ffffffff84692e40) at sleep_setup+0x3b2 tsleep_nsec(ffff800001be1550,11,ffffffff84692e40,ffffffffffffffff) at tsleep_nsec+0x29c getblk(ffff800000d8e948,65560,4000,0,ffffffffffffffff) at getblk+0x23a bread(ffff800000d8e948,65560,4000,ffff80002993e9c0) at bread+0x47 ffs_update(ffff8000018ddd18,1) at ffs_update+0x3e4 ffs_truncate(ffff8000018ddd18,0,0,ffffffffffffffff) at ffs_truncate+0x12f0 ufs_inactive(ffff80002993eda0) at ufs_inactive+0x2cb VOP_INACTIVE(ffff8000016ab6f8,ffff800029912a70) at VOP_INACTIVE+0x1bb vrele(ffff8000016ab6f8) at vrele+0x16a ktrsettrace(ffff800029915820,80000300,ffff8000019062d0,ffff8000001194e0) at ktrsettrace+0x16c ktrops(ffff800029912a70,ffff800029915820,0,80000300,ffff8000019062d0,ffff8000001194e0) at ktrops+0x338 doktrace(ffff8000019062d0,4,300,0,ffff800029912a70) at doktrace+0xa72 end trace frame: 0xffff80002993f290, count: 0 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{1}> ddb{1}> set $lines = 0 ddb{1}> set $maxwidth = 0 ddb{1}> show panic *cpu1: sleep: syz-executor[29232] slept inside a no-sleep walk bracket (raw pointer held across sleep, wmesg "getblk") ddb{1}> show kasan kasan: no report recorded this boot ddb{1}> trace db_enter() at db_enter+0x17 panic(ffffffff84d8d160) at panic+0x270 sleep_setup(ffff800001be1550,11,ffffffff84692e40) at sleep_setup+0x3b2 tsleep_nsec(ffff800001be1550,11,ffffffff84692e40,ffffffffffffffff) at tsleep_nsec+0x29c getblk(ffff800000d8e948,65560,4000,0,ffffffffffffffff) at getblk+0x23a bread(ffff800000d8e948,65560,4000,ffff80002993e9c0) at bread+0x47 ffs_update(ffff8000018ddd18,1) at ffs_update+0x3e4 ffs_truncate(ffff8000018ddd18,0,0,ffffffffffffffff) at ffs_truncate+0x12f0 ufs_inactive(ffff80002993eda0) at ufs_inactive+0x2cb VOP_INACTIVE(ffff8000016ab6f8,ffff800029912a70) at VOP_INACTIVE+0x1bb vrele(ffff8000016ab6f8) at vrele+0x16a ktrsettrace(ffff800029915820,80000300,ffff8000019062d0,ffff8000001194e0) at ktrsettrace+0x16c ktrops(ffff800029912a70,ffff800029915820,0,80000300,ffff8000019062d0,ffff8000001194e0) at ktrops+0x338 doktrace(ffff8000019062d0,4,300,0,ffff800029912a70) at doktrace+0xa72 sys_ktrace(ffff800029912a70,ffff80002993f410,ffff80002993f380) at sys_ktrace+0x1f6 syscall(ffff80002993f410) at syscall+0x1089 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xd8c32839300, count: -17 ddb{1}> show registers rdi 0 rsi 0x1 rbp 0xffff80002993e470 rbx 0xffff80002993e4e0 rdx 0 rcx 0xffff800028fe3ff0 rax 0xffff800000164900 r8 0x101010101010101 r9 0x8080808080808080 r10 0 r11 0xffffffff83e54b70 x86_bus_space_io_read_1 r12 0xffffffff84d8d160 .str.9 r13 0xffff800028fe4c08 r14 0xffff800028fe4e07 r15 0x1 rip 0xffffffff82f1b577 db_enter+0x17 cs 0x8 rflags 0x246 rsp 0xffff80002993e470 ss 0x10 db_enter+0x17: popq %rbp ddb{1}> show proc PROC (syz-executor) tid=359553 pid=29232 tcnt=2 stat=onproc flags process=0 proc=4000010 runpri=32, usrpri=50, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff800029912540,0xffff800029912d18 process=0xffff800045ff0020 user=0xffff800029934000, vmspace=0xffff800000d871e8 estcpu=36, cpticks=1, pctcpu=0.0, user=0, sys=1, intr=0 ddb{1}> ps PID TID PPID UID S PRLAGS PFLAGS WAIT COMMAND 29232 421586 3664 0 2 0 0 syz-executor *29232 359553 3664 0 7 0 0x4000010 syz-executor 44453 389953 94248 0 2 0 0 syz-executor 44453 233969 94248 0 3 0 0x4000080 fsleep syz-executor 78088 207220 49786 0 7 0 0 syz-executor 78088 397870 49786 0 2 0 0x4000000 syz-executor 61249 509018 24794 0 2 0 0 syz-executor 61249 366396 24794 0 2 0 0x4000000 syz-executor 9331 283238 43298 0 2 0 0 syz-executor 9331 84100 43298 0 3 0 0x4000080 fsleep syz-executor 9331 62526 43298 0 3 0 0x4000080 fsleep syz-executor 15083 17758 12891 0 2 0 0 syz-executor 15083 368174 12891 0 3 0 0x4000080 fsleep syz-executor 62328 331282 52644 0 2 0 0 syz-executor 62328 330462 52644 0 3 0 0x4000080 fsleep syz-executor 11929 23575 1 0 3 0x100003 0x80 ttyin getty 52644 324194 96424 0 3 0x2 0x80 nanoslp syz-executor 49786 224112 96424 0 3 0x2 0x80 nanoslp syz-executor 78319 47012 96424 0 3 0x2 0 biowait syz-executor 3664 21799 96424 0 3 0x2 0x80 nanoslp syz-executor 43298 282172 96424 0 3 0x2 0x80 nanoslp syz-executor 94248 336759 96424 0 3 0x2 0x80 nanoslp syz-executor 24794 54682 96424 0 3 0x2 0x80 nanoslp syz-executor 12891 20963 96424 0 3 0x2 0x80 nanoslp syz-executor 96424 241268 1 0 2 0x2 0 syz-executor 51993 58792 0 0 3 0x14000 0x200 bored smr 72866 119922 0 0 2 0x14000 0x200 zerothread 56301 422192 0 0 3 0x14000 0x200 aiodoned aiodoned 9883 151621 0 0 3 0x14000 0x200 syncer update 37106 249390 0 0 3 0x14000 0x200 cleaner cleaner 57000 169868 0 0 3 0x14000 0x200 reaper reaper 28991 320375 0 0 3 0x14000 0x200 pgdaemon pagedaemon 12639 310500 0 0 3 0x14000 0x200 bored viomb 43603 230154 0 0 3 0x14000 0x40000200 acpi0 acpi0 82221 247130 0 0 3 0x14000 0x40000200 idle1 85499 5888 0 0 3 0x14000 0x200 bored softnet1 49942 126784 0 0 3 0x14000 0x200 bored softnet0 76642 355186 0 0 3 0x14000 0x200 bored systqmp 84403 99923 0 0 3 0x14000 0x200 bored systq 58919 402530 0 0 3 0x14000 0x200 tmoslp softclockmp 69826 319455 0 0 3 0x14000 0x40000200 tmoslp softclock 25365 61376 0 0 3 0x14000 0x40000200 idle0 1 478005 0 0 3 0x2 0x80 wait init 0 0 -1 0 3 0x10000 0x200 scheduler swapper ddb{1}> show all locks Process 29232 (syz-executor) thread 0xffff800029912a70 (359553) exclusive rrwlock inode r = 0 (0xffff8000018dddb8) #0 witness_lock+0x632 #1 rw_do_enter_write+0x53e #2 rrw_enter+0xf0 #3 VOP_LOCK+0x17e #4 vn_lock+0xca #5 vrele+0x113 #6 ktrsettrace+0x16c #7 ktrops+0x338 #8 doktrace+0xa72 #9 sys_ktrace+0x1f6 #10 syscall+0x1089 #11 Xsyscall+0x128 exclusive kernel_lock &kernel_lock r = 0 (0xffffffff85d52380) #0 witness_lock+0x632 #1 syscall+0x1048 #2 Xsyscall+0x128 Process 78319 (syz-executor) thread 0xffff800045ffca78 (47012) exclusive rrwlock inode r = 0 (0xffff8000018dd228) #0 witness_lock+0x632 #1 rw_do_enter_write+0x53e #2 rrw_enter+0xf0 #3 VOP_LOCK+0x17e #4 ufs_ihashins+0xda #5 ffs_vget+0x2e9 #6 ffs_inode_alloc+0x576 #7 ufs_mkdir+0x25d #8 VOP_MKDIR+0x1a8 #9 domkdirat+0x1f9 #10 syscall+0x1089 #11 Xsyscall+0x128 exclusive rrwlock inode r = 0 (0xffff800001bf97d8) #0 witness_lock+0x632 #1 rw_do_enter_write+0x53e #2 rrw_enter+0xf0 #3 VOP_LOCK+0x17e #4 vn_lock+0xca #5 vfs_lookup+0x1f7 #6 namei+0xe19 #7 domkdirat+0xe1 #8 syscall+0x1089 #9 Xsyscall+0x128 ddb{1}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 11047 12164K 12453K 166960K 12227 0 pcb 17 24K 24K 166960K 28 0 rtable 243 13K 13K 166960K 365 0 pf 34 22K 24K 166960K 46 0 ifaddr 43 12K 12K 166960K 45 0 ifgroup 55 2K 2K 166960K 55 0 sysctl 1 1K 13K 166960K 5 0 counters 70 42K 42K 166960K 70 0 ioctlops 0 0K 4K 166960K 1500 0 iov 0 0K 2K 166960K 3 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1294 83K 84K 166960K 1464 0 UFS quota 1 36K 36K 166960K 1 0 UFS mount 5 44K 44K 166960K 5 0 shm 2 2K 10K 166960K 8 0 VM map 2 1K 1K 166960K 2 0 sem 5 0K 0K 166960K 5 0 dirhash 12 2K 2K 166960K 12 0 ACPI 1734 201K 292K 166960K 11964 0 file desc 16 61K 97K 166960K 225 0 sigio 0 0K 0K 166960K 3 0 proc 19 46K 177K 166960K 584 0 subproc 72 9K 9K 166960K 72 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 20K 20K 166960K 1 0 ip_moptions 0 0K 0K 166960K 4 0 in_multi 99 7K 7K 166960K 99 0 ether_multi 1 0K 0K 166960K 1 0 mrt 0 0K 0K 166960K 10 0 ISOFS mount 1 36K 36K 166960K 1 0 MSDOSFS mount 1 20K 20K 166960K 1 0 ttys 55 384K 384K 166960K 55 0 exec 0 0K 2K 166960K 399 0 fusefs mount 1 36K 36K 166960K 1 0 tdb 3 1K 1K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 122 127K 264K 166960K 3976 0 UVM aobj 8 4K 4K 166960K 9 0 pinsyscall 1043 1718K 1723K 166960K 1425 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 NDP 12 0K 2K 166960K 28 0 temp 36 9162K 9202K 166960K 4256 0 kqueue 2 8K 45K 166960K 42 0 SYN cache 2 16K 16K 166960K 2 0 ddb{1}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 28 0 0 1 0 1 1 0 8 0 rtpcb 120 38 0 38 1 0 1 1 0 8 1 rtentry 176 114 0 1 6 0 6 6 0 8 0 unpcb 144 110 0 110 1 0 1 1 0 8 1 syncache 336 4 0 4 1 0 1 1 0 8 1 tcpcb 736 20 0 19 1 0 1 1 0 8 0 arp 136 19 0 0 1 0 1 1 0 8 0 inpcb 328 116 0 113 1 0 1 1 0 8 0 nd6 152 26 0 0 1 0 1 1 0 8 0 kcovpl 48 8 0 0 1 0 1 1 0 8 0 pfosfp 40 1428 0 1005 5 0 5 5 0 8 0 pfosfpen 112 1428 0 714 21 0 21 21 0 8 0 pfstitem 24 31 0 0 1 0 1 1 0 8 0 pfstkey 128 31 0 0 1 0 1 1 0 8 0 pfstate 448 31 0 0 4 0 4 4 0 8 0 pfrule 1360 22 0 17 2 1 1 2 0 8 0 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 457 0 0 29 0 29 29 0 8 0 art_table 40 458 0 0 5 0 5 5 0 8 0 art_node 32 114 0 11 1 0 1 1 0 8 0 sysvmsgpl 40 4 0 1 1 0 1 1 0 8 0 semapl 72 3 0 0 1 0 1 1 0 8 0 shmpl 112 6 0 1 1 0 1 1 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino2pl 256 1765 0 286 93 0 93 93 0 8 0 ffsino 296 1765 0 286 115 0 115 115 0 8 0 nchpl 144 2090 0 386 64 0 64 64 0 8 0 vnodes 216 1898 0 0 106 0 106 106 0 8 0 namei 1024 6584 0 6583 3 0 3 3 0 8 2 percpumem 16 51 0 0 1 0 1 1 0 8 0 kstatmem 264 27 0 0 2 0 2 2 0 8 0 scxspl 216 8945 0 8944 4 2 2 2 1 8 1 plimitpl 152 32 0 22 1 0 1 1 0 8 0 sigapl 424 555 0 520 7 0 7 7 0 8 1 knotepl 120 111 0 0 4 0 4 4 0 8 0 kqueuepl 224 50 0 48 1 0 1 1 0 8 0 pipepl 344 144 0 117 3 0 3 3 0 8 0 fdescpl 528 539 0 520 3 0 3 3 0 8 0 filepl 160 2215 0 2057 10 0 10 10 0 8 0 lockfpl 104 56 0 55 1 0 1 1 0 8 0 lockfspl 48 27 0 26 1 0 1 1 0 8 0 sessionpl 144 31 0 28 1 0 1 1 0 8 0 pgrppl 48 42 0 31 1 0 1 1 0 8 0 ucredpl 104 311 0 308 1 0 1 1 0 8 0 zombiepl 144 520 0 520 1 0 1 1 0 8 1 processpl 1232 555 0 520 5 0 5 5 0 8 0 procpl 664 700 0 657 5 0 5 5 0 8 0 sosppl 176 3 0 3 1 0 1 1 0 8 1 sockpl 752 265 0 262 4 0 4 4 0 8 2 mcl64k 65536 2 0 0 1 0 1 1 0 8 0 mcl16k 16384 2 0 0 1 0 1 1 0 8 0 mcl12k 12288 1 0 0 1 0 1 1 0 8 0 mcl9k128 9344 1 0 0 1 0 1 1 0 8 0 mcl8k 8192 4 0 0 1 0 1 1 0 8 0 mcl4k 4096 123 0 0 16 0 16 16 0 8 1 mcl2k 2048 18 0 0 3 0 3 3 0 8 0 mextrefs 64 18 0 0 1 0 1 1 0 8 0 mtagpl 96 2 0 0 1 0 1 1 0 8 0 mbufpl 256 253 0 0 16 0 16 16 0 8 0 bufpl 272 4008 0 105 261 0 261 261 0 8 0 anonpl 32 3804 0 0 31 0 31 31 0 222 0 amapchunkpl 152 11307 0 10980 20 0 20 20 0 158 4 amappl16 200 1830 0 1808 5 3 2 5 0 8 0 amappl15 192 5 0 5 1 0 1 1 0 8 1 amappl14 184 449 0 449 1 0 1 1 0 8 1 amappl13 176 128 0 127 1 0 1 1 0 8 0 amappl12 168 830 0 812 2 0 2 2 0 8 0 amappl11 160 35 0 35 1 1 0 1 0 8 0 amappl10 152 64 0 64 1 0 1 1 0 8 1 amappl9 144 280 0 280 1 1 0 1 0 8 0 amappl8 136 99 0 99 1 0 1 1 0 8 1 amappl7 128 158 0 156 1 0 1 1 0 8 0 amappl6 120 158 0 158 1 0 1 1 0 8 1 amappl5 112 111 0 110 1 0 1 1 0 8 0 amappl4 104 303 0 301 1 0 1 1 0 8 0 amappl3 96 2068 0 1992 3 0 3 3 0 8 0 amappl2 88 567 0 559 2 0 2 2 0 8 0 amappl1 80 11017 0 10896 15 1 14 15 0 8 8 amappl 88 3145 0 3037 4 0 4 4 0 92 0 uvmvnodes 80 100 0 0 3 0 3 3 0 8 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 8 0 1 1 0 1 1 0 8 0 uaddrrnd 24 539 0 520 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 539 0 520 1 0 1 1 0 8 0 vmmpekpl 168 6485 0 6450 2 0 2 2 0 8 0 vmmpepl 168 43996 0 43159 87 0 87 87 0 357 47 vmsppl 488 538 0 520 5 0 5 5 0 8 2 rwobjpl 80 15677 0 15268 24 0 24 24 0 8 1 pdppl 4096 1086 0 1040 100 52 48 88 0 8 2 pvpl 32 9573 0 0 78 0 78 78 0 265 0 pmappl 256 538 0 520 3 0 3 3 0 8 0 extentpl 40 46 0 28 1 0 1 1 0 8 0 phpool 120 542 0 55 16 0 16 16 0 8 0 ddb{1}> machine ddbcpu 0 Stopped at x86_ipi_db+0x19: leave x86_ipi_db(ffffffff851e9ff0) at x86_ipi_db+0x19 x86_ipi_handler() at x86_ipi_handler+0x112 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __mp_lock(ffffffff85d51b80) at __mp_lock+0x272 intr_handler(ffff80002e2d42f0,ffff800000170180) at intr_handler+0x113 Xintr_ioapic_edge23_untramp() at Xintr_ioapic_edge23_untramp+0x18f end of kernel end trace frame: 0x7d33e256dc80, count: 9 ddb{0}> trace x86_ipi_db(ffffffff851e9ff0) at x86_ipi_db+0x19 x86_ipi_handler() at x86_ipi_handler+0x112 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __mp_lock(ffffffff85d51b80) at __mp_lock+0x272 intr_handler(ffff80002e2d42f0,ffff800000170180) at intr_handler+0x113 Xintr_ioapic_edge23_untramp() at Xintr_ioapic_edge23_untramp+0x18f end of kernel end trace frame: 0x7d33e256dc80, count: -6 ddb{0}> machine ddbcpu 1 Stopped at db_enter+0x17: popq %rbp db_enter() at db_enter+0x17 panic(ffffffff84d8d160) at panic+0x270 sleep_setup(ffff800001be1550,11,ffffffff84692e40) at sleep_setup+0x3b2 tsleep_nsec(ffff800001be1550,11,ffffffff84692e40,ffffffffffffffff) at tsleep_nsec+0x29c getblk(ffff800000d8e948,65560,4000,0,ffffffffffffffff) at getblk+0x23a bread(ffff800000d8e948,65560,4000,ffff80002993e9c0) at bread+0x47 ffs_update(ffff8000018ddd18,1) at ffs_update+0x3e4 ffs_truncate(ffff8000018ddd18,0,0,ffffffffffffffff) at ffs_truncate+0x12f0 ufs_inactive(ffff80002993eda0) at ufs_inactive+0x2cb VOP_INACTIVE(ffff8000016ab6f8,ffff800029912a70) at VOP_INACTIVE+0x1bb vrele(ffff8000016ab6f8) at vrele+0x16a ktrsettrace(ffff800029915820,80000300,ffff8000019062d0,ffff8000001194e0) at ktrsettrace+0x16c ktrops(ffff800029912a70,ffff800029915820,0,80000300,ffff8000019062d0,ffff8000001194e0) at ktrops+0x338 doktrace(ffff8000019062d0,4,300,0,ffff800029912a70) at doktrace+0xa72 end trace frame: 0xffff80002993f290, count: 0 ddb{1}> trace db_enter() at db_enter+0x17 panic(ffffffff84d8d160) at panic+0x270 sleep_setup(ffff800001be1550,11,ffffffff84692e40) at sleep_setup+0x3b2 tsleep_nsec(ffff800001be1550,11,ffffffff84692e40,ffffffffffffffff) at tsleep_nsec+0x29c getblk(ffff800000d8e948,65560,4000,0,ffffffffffffffff) at getblk+0x23a bread(ffff800000d8e948,65560,4000,ffff80002993e9c0) at bread+0x47 ffs_update(ffff8000018ddd18,1) at ffs_update+0x3e4 ffs_truncate(ffff8000018ddd18,0,0,ffffffffffffffff) at ffs_truncate+0x12f0 ufs_inactive(ffff80002993eda0) at ufs_inactive+0x2cb VOP_INACTIVE(ffff8000016ab6f8,ffff800029912a70) at VOP_INACTIVE+0x1bb vrele(ffff8000016ab6f8) at vrele+0x16a ktrsettrace(ffff800029915820,80000300,ffff8000019062d0,ffff8000001194e0) at ktrsettrace+0x16c ktrops(ffff800029912a70,ffff800029915820,0,80000300,ffff8000019062d0,ffff8000001194e0) at ktrops+0x338 doktrace(ffff8000019062d0,4,300,0,ffff800029912a70) at doktrace+0xa72 sys_ktrace(ffff800029912a70,ffff80002993f410,ffff80002993f380) at sys_ktrace+0x1f6 syscall(ffff80002993f410) at syscall+0x1089 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xd8c32839300, count: -17 ddb{1}>