last executing test programs: 812.556042ms ago: executing program 6 (id=9): fstatat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2) lchown(&(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, r1) r2 = openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) r3 = getuid() r4 = open$dir(&(0x7f0000000140)='./file0\x00', 0x8000, 0x80) stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f0000000240)='./file0\x00', r3, r1) renameat(r4, &(0x7f0000000280)='./file0\x00', r4, &(0x7f00000002c0)='./file0\x00') ioctl$VNDIOCSET(r2, 0xc0384600, &(0x7f0000000380)={&(0x7f0000000300)='./file0\x00', 0xc, &(0x7f0000000340)='./file0\x00', 0x8}) r6 = socket$inet(0x2, 0x2, 0x0) r7 = accept(r6, &(0x7f00000003c0)=@in, &(0x7f0000000400)=0x10) rmdir(&(0x7f0000000440)='./file0\x00') setsockopt(r6, 0x1, 0xff, &(0x7f0000000480)="135470785ffb2dba7b2d43163e421a8c00c227cbcf49184063a3c92bf41d7b762f30cd458a4bae7c2daeb9c859d6afe0120690aa691ccfa133ecc861753cce4e68be7434b7e9ff2f1200e13183e3fdab07b80da8e473", 0x56) ioctl$WSDISPLAYIO_GBURNER(r2, 0x400c5752, &(0x7f0000000500)) r8 = shmget$private(0x0, 0x3000, 0x600, &(0x7f0000ffd000/0x3000)=nil) lstat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}) r10 = getpid() getsockopt$SO_PEERCRED(r2, 0xffff, 0x1022, &(0x7f0000000600)={0x0}, 0xc) shmctl$IPC_SET(r8, 0x1, &(0x7f0000000640)={{r0, 0xffffffffffffffff, r9, r5, 0x4, 0x3, 0x0, 0x0, 0x3}, 0x62b59a54, r10, r11, 0x1ff, 0x0, 0x10, 0x1, 0x78, 0x7, 0x9, 0x5}) connect$unix(r2, &(0x7f00000006c0)=@abs={0x8, 0x0, 0x0, 0x3}, 0x8) ioctl$DIOCADDQUEUE(r2, 0xc148445d, &(0x7f0000000700)={0xc2ca, 0x2, {'\x00', './file0\x00', './file0/file0\x00', './file0\x00', {{0xf, 0x2}, {0x100000001, 0x7}, 0xa}, {{0xc, 0x3b8d}, {0xff, 0x8}, 0x5}, {{0xf, 0x2}, {0x7fffffff}, 0x401}, {0xef, 0x1, 0x7}, 0x0, 0x1, 0x5, 0x7fff, 0xb9}}) r12 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000880), 0x10480, 0x0) sendto(r12, &(0x7f00000008c0)="c55bebcddbb9758bdf9c215f7e3a8272b13bb78cfe7915339f0ab30b2948bb19757f185112ac1992bafd72ffc55c55bea70fc79a19c250e58b0c39c7c5f9fa560d6cfac6654886d71b543022f1d6c3c8b85550f1888224a7dd502ae50f5fd06254a673b980bda1da8b2797c8c5494bd7d4a6af25d2c4b6dea6438e36bf7d7c02b754bb37825d0e79e781bcbff19d8249e1257c3127e52882b18fef", 0x9b, 0x2, 0x0, 0x0) r13 = openat$pf(0xffffffffffffff9c, &(0x7f0000000980), 0x10, 0x0) ioctl$DIOCGETSTATE(r13, 0xc1084413, &(0x7f00000009c0)={{0x7fff, './file0\x00', [{[@v6=@mcast1, @v6=@mcast1], [0x1, 0xfff], 0xfffc, 0x2}, {[@v6=@empty, @v4=@loopback], [0x5, 0x1], 0x100, 0x18}], {{0x6, 0xe, 0xd7, 0x7}, 0x3, 0xc2, 0x3, 0x788, 0x3, 0xc7, 0xa}, {{0xfff, 0x6, 0x6, 0x1}, 0x7fff, 0x0, 0xff, 0x4, 0x3, 0x0, 0x5}, @v4, 0xc155, 0x7f, 0x947, 0x6, 0x2, [[0x5, 0x9], [0x1, 0xfffffff7]], [[0x1, 0x2], [0x101, 0x3ff]], 0xabb2, [0x5, 0x5], 0x0, 0x2, 0x4, 0x0, 0x8b, 0x2, 0x8, 0x10, 0x9, 0x10, 0x5, 0x2, "c7fa"}}) getsockopt$sock_cred(r7, 0xffff, 0x1022, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) getthrid() getsockopt$sock_cred(r2, 0xffff, 0x1022, &(0x7f0000000b80), &(0x7f0000000bc0)=0xc) r14 = openat$pf(0xffffffffffffff9c, &(0x7f0000000c00), 0x40, 0x0) ioctl$DIOCGETRULE(r14, 0xcd604407, &(0x7f0000000c40)={0x1, 0x6, 0x8001, './file0\x00', './file0\x00', 0x0, "05cecf0d995689dd37af8462394a1c444b53f22592e7197a824cbb7a1bade366ebb60a1c124bd798027f3fb5ed97b80cb615eefdf63e834d871ecdde768f3be5c6d7adea003174c63086cb4c35d7e054ce2844c2de96704c62abe8e64343730c77bf4efa40232f84e25f74b0c0a355d5999c9832b44fb437651695ba970ecf271f64d931d9b32bd39af4e1f46ac2aebd56a812c608346c72a0f547273a216bfd20d2d50c097ca362a7cb252f1b4d7741e51740d444fd12f78792e20f39d2fc04d4bf971d18bdf41a6bf94efd5a6cc739babc699906bc17bf011216930b9e85ad30ae8ac56bb4bedb133f791b60fa73d6acc8aba5a687084186725be6747a3b4bb44454edab25ad2a27efa00927e688b6bb36db9dd802bae285f1719c4c69fb062c760002ddac8f4a453d725f35ad44dd65fd583fdbf55248ed155877e29c102a6eb1659d72b482f6003d809a1883d9ef3f5559b260324f9091964d16a21cce759fe4f391c296c8d77cd08ece04b134d30927d7d36b909ed7a8431cea77f695a20a4142e52d7fb22b28f4623ee61d05448063f15125e242d714be91f00f7645ff2d72d883648fe13ab444ab54dbc91c2894c657c1b9305189f0d6ce08925364c9f8f24f5e61973aa6dab23a59585c9a791f990fb5a6d336e0ba4f3260228d5cd5f7d338580feac5d08c9a297c6abecf57acb439b034908d2629098edb77788756ca2072d92a3e30cb059271334b5ace6a8ba2a1789bc3f375256b240e30c7670fea8b3aaa0b973f11f2ffe4ed3ecb0ff45799290888573bebd7e4e2eabba4d0cb72286ce6417590ce4422c6520e8d860b0e81e86cd8e4eadc9d53fe94727bd9debd0e63f309ea10864015f98661bf6119c9920a8578db114b24374aaa7ce71820891344ea1f4228a157e7f809822f034bb8f93f3823b1cd3a4af6d2d9cd2102cc1c2e4ef28399a9725ee00ac7c7f0ca13287135b61ad5db43e69c2aef984ed693e8e2c098e4e9b433e965868face829fd65902504ae15cfa0bd706dd2682884b9def9cbe868d2a7d0d49b449d22d04bb27d099a408d7c5c66c6d4c1639ed5bbef2a82c0422dd8f335f14e39aa29eeb96c6e0bf5b6d63c36b75de7a2aa06475fa22922c0b93690de5f6e73697e7bf80021cb53254066235641230893ef8cc47940a2e25f94bd47324f2b50ff43e42f7a7c931ece126e4ab61741a0093bcc4ad83a50626f9492860f12cc3e5d257bfb32941599ac3bf5c4cc9577b2b145f05dc58d8fc995e8320726578897977f57c0c57d1ee1531fdf728b16b7af5edaa6925972fd1d96b1eda6a8ce77ca91ea5ca611412175e1ae25d2293a08acf7ade395666af81c02f74de3ac5814746b2fa0cc21dfbabfb62b2883c05d76054ffd86418a333fa77653846140f8941fae53ef6d6c041dd04af0cbaaaabb8f668b541367d07825558dfed06eb610aa72289d2dbafd4fb682447a737e61e40cc057ccfe8db8b15fbe6a574e10e311699841fa07a0c17f3b38d8678d6c7098afa0d48c0cd7cdf8f503ac342a2cf4e3dc4c85fdae5c1c25f4dc9294254a6d5b58b92c77bb6b86459d06f7f8519f15bca9b2d455959ab463ddf1db0b5885fb347df04d8dece20a1c204f43b7d235d5be955ca0f01000511d27b8d21e3f6df2fd3b6b815324288c37a68ac895957041d0397d016d672c9e68f3e68a6e96d7824621755f03663684cf508469eb9935596a500232586c44af30fd03a27ad25f2ed1905e1fe716b8ecabf3ffaad66e512517446f0fd12d8a8d422d7fe09a05519c8aee66f87c75f13989336bc3cd89751c089c992d5345de7bf9ea5a0ca7d3acb29cadd461c0ec044de532761b296328b24b4a925003b4278a1e4285c3196c1eb1a081d66aa9238b5a9f7807214039343d4534f33ef65c588a4a"}) 812.012507ms ago: executing program 3 (id=4): r0 = kqueue1(0x10000) r1 = socket$inet(0x2, 0x3, 0x1) sendmsg(r1, &(0x7f0000000400)={&(0x7f00000001c0)=@in={0x10, 0x2, 0x2, 0x9}, 0x10, 0x0, 0x0, 0x0}, 0x40a) symlinkat(&(0x7f00000003c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00') rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file1\x00') ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffff9c, 0xc00c642e, &(0x7f0000000100)={0x6, 0x7fffffff, r1}) ioctl$DIOCSETHOSTID(r2, 0xc0044456, &(0x7f0000000140)=0x200) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FIOASYNC(r3, 0x8004667d, &(0x7f0000000a40)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000000)=[0x632, 0x1, 0x7], 0x3}) kevent(r0, &(0x7f0000000040)=[{{r0}, 0xfffffffffffffffa, 0x19, 0x20000000, 0x2, 0x35}], 0x7, 0x0, 0x8, 0x0) 717.108472ms ago: executing program 2 (id=3): lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0xc) setresgid(r1, 0xffffffffffffffff, r3) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000140)=[0x1], 0x1, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_VERSION(r4, 0xc0406400, &(0x7f0000001380)={0x4, 0x9, 0x400, 0xa0, &(0x7f00000001c0)=""/160, 0xc9, &(0x7f0000000280)=""/201, 0x1000, &(0x7f0000000380)=""/4096}) fcntl$lock(r4, 0x7, &(0x7f00000013c0)={0x3, 0x1, 0x9, 0x10000, r2}) r5 = socket$unix(0x1, 0x2, 0x0) pipe2(&(0x7f0000001400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) execve(&(0x7f0000001440)='./file0\x00', &(0x7f00000015c0)=[&(0x7f0000001480)='}:\x00', &(0x7f00000014c0)='$%@/%*}\x00', &(0x7f0000001500)='))@\x00', &(0x7f0000001540)='\x00', &(0x7f0000001580)='(*++\x00'], &(0x7f0000001780)=[&(0x7f0000001600)='\x00', &(0x7f0000001640)='\x00', &(0x7f0000001680)='\\$/[@\x00', &(0x7f00000016c0)='$[\x00', &(0x7f0000001700)='\x00', &(0x7f0000001740)='\x00']) r8 = openat$klog(0xffffffffffffff9c, &(0x7f00000017c0), 0x530, 0x0) ioctl$LIOCSFD(r8, 0x80046c7f, &(0x7f0000001800)=r7) getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000001880)={0x0, 0x0, 0x0}, 0xc) fchownat(r6, &(0x7f0000001840)='./file0\x00', r0, r9, 0x2) ioctl$WSKBDIO_GETENCODING(r7, 0x4004570f, &(0x7f00000018c0)) ioctl$VMM_IOC_READREGS(r6, 0xc2485607, &(0x7f0000001900)={0x5, 0x3, 0x0, {[0x7, 0x80, 0x7, 0x7f, 0x1, 0x4, 0x8, 0x0, 0x0, 0x1, 0x40, 0x2, 0x401, 0xffffffffffffffff, 0xff, 0x0, 0x8b], [0x511, 0x8000, 0x1, 0x7, 0xffffffffffffff81, 0x7, 0xffffffffffffffff, 0x8, 0x8, 0x1], [0x2, 0x1, 0x7, 0x4, 0xaf6], [0x4, 0x6, 0x3, 0x5, 0x9, 0x5], [{0x8, 0x2, 0x4, 0x5}, {0x1ff, 0xf166, 0x5, 0x3}, {0x1000, 0x4, 0x5, 0x7fffffffffffffff}, {0x7ff, 0x10, 0xfff, 0xd390}, {0x1, 0x6, 0x7, 0xbb6}, {0x8, 0x9, 0x2, 0x86e7}, {0x5, 0x2, 0xc09, 0x7}, {0x8, 0x7, 0x9, 0x4}], {0x8, 0x7, 0xe}, {0x5, 0xc, 0x3, 0x8}}}) ioctl$WSDISPLAYIO_GETEMULTYPE(r7, 0xc014575e, &(0x7f0000001b80)={0x1, './file0\x00'}) readv(r4, &(0x7f0000001e80)=[{&(0x7f0000001bc0)=""/180, 0xb4}, {&(0x7f0000001c80)=""/230, 0xe6}, {&(0x7f0000001d80)=""/243, 0xf3}], 0x3) ioctl$AUDIO_GETDEV(r6, 0x4030411b, &(0x7f0000001ec0)) read$audioctl(r6, &(0x7f0000001f00)=""/195, 0xc3) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f0000002040)={&(0x7f0000002000)=[0x7, 0xbf8, 0x2, 0x8], 0x4, 0x4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r10, 0xc00864bf, &(0x7f0000002080)) accept$unix(r5, &(0x7f00000020c0)=@abs, &(0x7f0000002100)=0x8) pipe2(&(0x7f0000002140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) ioctl$TIOCMGET(r12, 0x4004746a, &(0x7f0000002180)) open$dir(&(0x7f00000021c0)='./file0\x00', 0x200, 0x101) closefrom(r11) ioctl$DIOCCLRSTATES(0xffffffffffffffff, 0x0, &(0x7f0000002200)={{0x5, 0xfffffffc}, 0x1a, '\x00', 0x0, {@any={'\x00', 0x0, 0x4, 0x5}, [0x1ff, 0x6f40], 0x8, 0x6, 0x3}, {@any={'\x00', 0x0, 0x6, 0x8}, [0x0, 0xb7f], 0x2a, 0x6, 0x88c4}, './file0\x00', './file0\x00', 0x6}) truncate(&(0x7f0000002300)='./file0\x00', 0x1) futimens(r10, &(0x7f0000002340)=[{0x3, 0x80000001}, {0xa99, 0x5}]) ioctl$WSKBDIO_GETKEYREPEAT(r11, 0x400c5708, &(0x7f0000002380)) 675.039257ms ago: executing program 5 (id=6): r0 = kqueue1(0x10000) kevent(r0, &(0x7f0000000380)=[{{r0}, 0xfffffffffffffff9, 0x91, 0x2, 0x0, 0x6fe}], 0x4003ff, 0x0, 0x8, 0x0) pselect(0x40, &(0x7f0000000000)={0x8, 0x3, 0x4, 0x2, 0x7fffffff, 0x1, 0xbf, 0x1}, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) lseek(0xffffffffffffffff, 0x100000001, 0x0) r3 = syz_open_pts() r4 = dup2(r3, r3) r5 = syz_open_pts() ioctl$TIOCSETAW(r5, 0x802c7415, &(0x7f0000000000)={0x4, 0xec49, 0x9, 0xb17a, "a71fa4ed8d3b13b3008b0f60495c48cd27aba779", 0x6, 0x8}) ioctl$TIOCSTAT(r5, 0x20007465) ioctl$TIOCSETA(r4, 0x802c7414, &(0x7f0000000000)={0x7, 0x9e0d, 0xcbaa, 0xfff, "57ecde2ba30023f5e3f34000", 0x1, 0x8}) poll(&(0x7f00000000c0)=[{r3, 0x2}], 0x1, 0x9) r6 = socket$inet6(0x18, 0x1, 0x6) listen(r6, 0x0) accept$inet6(r6, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000001740)=ANY=[@ANYBLOB="ffffffffffffaaaaaabf0cbb0800451c001c0065ffff04029078e0000001000000004e234e2100089078"]) getgroups(0x7, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]) setresgid(r8, r7, 0x0) setresgid(0x0, 0xffffffffffffffff, 0xffffffffffffffff) unveil(0x0, &(0x7f0000000340)='w\x00') recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x3040, &(0x7f0000000040)={0x1c, 0x18, 0x2, 0x6, "5c6ff86b2cd5dccdbf40062bd2a446d5"}, 0x1c) pselect(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xfffffffffffffffa, 0x7}, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffff9c, 0xc00c642e, &(0x7f0000000080)={0x8, 0x9, r1}) poll(&(0x7f00000000c0)=[{r1, 0x40}, {r2, 0x10}, {r2, 0x40}, {r2, 0x40}, {r9, 0x4}], 0x5, 0x400008) 610.513999ms ago: executing program 1 (id=2): syz_extract_tcp_res(&(0x7f0000000000), 0x0, 0x40) syz_emit_ethernet(0xd2, &(0x7f0000000040)={@local, @remote, [], {@ipv6={0x86dd, {0x7, 0x6, "820a00", 0x9c, 0x2c, 0x5, @remote={0xfe, 0x80, '\x00', 0x0}, @remote={0xfe, 0x80, '\x00', 0x0}, {[], @udp={{0x2, 0x0, 0x8}, {"9cdc935435b9cd61b182614e89152a4af1b744d795e4a181ae685324307dd5dcf47edd1a86b2b606c8dcc318693ffbf1db3f3c85ccaec2f218257481ecc9841cb765272f32cbe30daf5214edcb12c0de24a4c75ef7398e360aa62657e2d8aadb7d835d3ce44581d417f85d4462e1e441060773f07df9806fd67e56af085f6da6fddfef0b17a726c4895d4e2903a80d4fb6aca10d"}}}}}}}) (async) syz_emit_ethernet(0xd2, &(0x7f0000000040)={@local, @remote, [], {@ipv6={0x86dd, {0x7, 0x6, "820a00", 0x9c, 0x2c, 0x5, @remote={0xfe, 0x80, '\x00', 0x0}, @remote={0xfe, 0x80, '\x00', 0x0}, {[], @udp={{0x2, 0x0, 0x8}, {"9cdc935435b9cd61b182614e89152a4af1b744d795e4a181ae685324307dd5dcf47edd1a86b2b606c8dcc318693ffbf1db3f3c85ccaec2f218257481ecc9841cb765272f32cbe30daf5214edcb12c0de24a4c75ef7398e360aa62657e2d8aadb7d835d3ce44581d417f85d4462e1e441060773f07df9806fd67e56af085f6da6fddfef0b17a726c4895d4e2903a80d4fb6aca10d"}}}}}}}) 608.388705ms ago: executing program 3 (id=10): open(&(0x7f00000000c0)='./file0\x00', 0x200, 0x112) (async) openat$vmm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) munmap(&(0x7f0000ff5000/0x6000)=nil, 0x6000) mlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000) (async) kqueue() (async) getgroups(0x40000000000001f6, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]) setresgid(r1, r0, 0x0) (async) setgroups(0x0, 0x0) seteuid(0xffffffffffffffff) (async) openat$wskbd(0xffffffffffffff9c, &(0x7f0000002300), 0x1, 0x0) (async) pselect(0x40, &(0x7f0000000080)={0x400, 0xff, 0x101, 0x9, 0x0, 0x5, 0x9, 0x3}, &(0x7f00000000c0)={0xff, 0xffffffffffffff00, 0x7ff, 0x5, 0x0, 0xf, 0x2, 0xa}, 0x0, 0x0, 0x0) pselect(0x40, &(0x7f0000000100)={0x5, 0x8, 0x7fffffff, 0x10000, 0xfffffffffffffffd, 0x8, 0x3, 0x8}, &(0x7f0000000140)={0xfffffffffffff689, 0x80000000, 0xfff, 0x401, 0x7b, 0xff, 0x254c, 0x6}, 0x0, 0x0, 0x0) r2 = openat$speaker(0xffffffffffffff9c, &(0x7f0000001a00), 0x8000, 0x0) utimensat(0xffffffffffffffff, 0x0, &(0x7f0000001600)={{0x5, 0xffffffff}, {0x7fffffffffffffff, 0x2}}, 0x0) (async) fcntl$setflags(r2, 0x2, 0x4) 468.830452ms ago: executing program 1 (id=11): r0 = dup2(0xffffffffffffff9c, 0xffffffffffffff9c) ioctl$DIOCCHANGERULE(r0, 0xcd60441a, &(0x7f00000000c0)={0x7, 0x10, 0xb0, './file0\x00', './file0\x00', 0x0, "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"}) open$dir(&(0x7f0000000000)='./file0\x00', 0x20, 0xa0) ktrace(0x0, 0xe2fc5e0623494925, 0x814, 0x0) 468.163269ms ago: executing program 0 (id=1): sysctl$vfs_nfs(&(0x7f0000001d80)={0xa, 0x11, 0x2}, 0x3, 0x0, 0x0, 0x0, 0x0) ioctl$DIOCNATLOOK(0xffffffffffffffff, 0xc0504417, &(0x7f00000000c0)={@v6=@mcast2, @v4=@loopback, @v4=@local={0xac, 0x14, 0x0}, @v6=@remote={0xfe, 0x80, '\x00', 0x0}, 0x9, 0x1000, 0xe, 0x2, 0x16, 0x6, 0x18, 0xfa}) r0 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SPKRTUNE(r0, 0x20005302, &(0x7f00000000c0)={0x240000, 0x10}) unveil(0x0, &(0x7f0000000040)='r\x00') setitimer(0x1, &(0x7f0000001040)={{0x5, 0x1232}, {0xffffffff}}, 0x0) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000d00), 0x40000, 0x0) getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0xc) r5 = getgid() setresgid(0x0, r4, r5) r6 = socket$inet(0x2, 0x2, 0x0) connect$inet(r6, &(0x7f0000000040)={0x10, 0x2, 0x2, 0x7}, 0x10) connect$inet(r6, &(0x7f0000000000)={0x10, 0x2, 0x3, 0x8}, 0x10) write(r1, &(0x7f0000000040)="7ed980a5c6b759bdcfd19d9d95e8485f34", 0x11) kqueue1(0x10000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) munmap(&(0x7f0000000000/0x9000)=nil, 0x9000) r9 = shmget$private(0x0, 0x3000, 0x2ea, &(0x7f0000ffd000/0x3000)=nil) shmat(r9, &(0x7f0000000000/0x800000)=nil, 0x1000) r10 = openat$dri(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dri/card0\x00', 0x80, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r10, 0xc00c642d, &(0x7f0000000300)={0x8, 0x29b7e1cb, r8}) shmctl$IPC_SET(r9, 0x1, &(0x7f0000000200)={{r3, r4, r3, r5, 0x0, 0x9, 0x0, 0x0, 0x7ffffffffffffffa}, 0xa, r2, r2, 0x7, 0x0, 0x4, 0x5, 0x3, 0x76f, 0x19, 0xffffffffffffffff}) getsockopt$sock_int(r7, 0xffff, 0x20, &(0x7f00000001c0), &(0x7f0000000080)=0x4) r11 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r12 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) ioctl$BIOCGDLTLIST(r12, 0xc010427b, &(0x7f0000000280)={0x0, 0x0}) ioctl$SPKRTONE(r11, 0x80085301, &(0x7f0000000100)={0xfffffffa, 0xaa}) r13 = kqueue1(0x10000) kevent(r13, 0x0, 0x9, 0x0, 0x5, &(0x7f0000000340)={0xffffffffffffffff, 0x4}) ioctl$BIOCSETWF(r1, 0x80104277, &(0x7f0000000000)={0x5c}) 467.60515ms ago: executing program 7 (id=8): sysctl$kern(&(0x7f0000000000)={0x1, 0x28}, 0x2, 0x0, 0x0, 0x0, 0x0) r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000200), 0x200, 0x0) syz_emit_ethernet(0x166, &(0x7f0000000500)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000009f86dd648047f6013067fcfe8000000000000000000000000000bbfe80"]) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt(r1, 0x0, 0x5, &(0x7f0000000100)="9a355644", 0x4) ioctl$DIOCADDQUEUE(r0, 0xc148445d, &(0x7f0000000080)={0x0, 0x7, {'\x00', './file0\x00', './file0\x00', './file0\x00', {{0x0, 0x2}, {0x6, 0x2}, 0x4c5b}, {{0x0, 0x5}, {0x4, 0x3}, 0x80000001}, {{0x1, 0x401}, {0x7fff, 0x4}, 0x8}, {0x4, 0x4, 0x6, 0x8}, 0x0, 0x2, 0xf603, 0xf, 0x9}}) 467.128936ms ago: executing program 7 (id=12): sysctl$vm(&(0x7f0000000180)={0x2, 0x8}, 0x2, &(0x7f0000000000)="7f70f7d44fac10f5c620717a8a1e856c78dae41f19e4e29ed0e2cb79cd90cc9f4a9d0900d8f3ed6634d546db7676", 0x0, 0x0, 0x0) (async) socketpair(0x2, 0x1000, 0x2, 0x0) r0 = accept$inet(0xffffffffffffff9c, 0x0, &(0x7f0000000080)) getsockopt$sock_timeval(r0, 0xffff, 0x1005, &(0x7f00000000c0), &(0x7f0000000100)=0x10) (async) mkdir(&(0x7f0000000140)='./file0\x00', 0x96) (async) r1 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000f00), 0x0, 0x0) (async) open$dir(&(0x7f0000000100)='./file0\x00', 0x200, 0x80) (async) truncate(&(0x7f0000000040)='./file0\x00', 0x100000) ktrace(&(0x7f0000000180)='./file0\x00', 0x4, 0x4, 0x0) (async) r2 = shmget$private(0x0, 0x3000, 0x1, &(0x7f0000ffb000/0x3000)=nil) (async) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x5) shmctl$SHM_UNLOCK(r2, 0x4) r3 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000001140), 0x40, 0x0) ioctl$WSMOUSEIO_SETPARAMS(r3, 0x80105728, &(0x7f00000011c0)={&(0x7f0000001180)=[{0x26, 0x75}, {0x46, 0x67}], 0x2}) (async) closefrom(r1) (async) mkfifoat(r1, &(0x7f0000000040)='./file0\x00', 0x48) 466.607644ms ago: executing program 6 (id=13): mkfifo(&(0x7f0000001380)='./file0\x00', 0x8) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x10, 0x52) mkfifo(&(0x7f0000001380)='./file0\x00', 0x8) syz_emit_ethernet(0x2e, &(0x7f0000000100)={@broadcast, @random="1a614393aeb6", [], {@ipv4={0x800, {{0x6, 0x4, 0x2, 0x4, 0x20, 0x69, 0x8, 0x9, 0x2, 0x0, @multicast1, @multicast1, {[@timestamp={0x44, 0x4, 0xa, 0x3, 0x7}]}}, @udp={{0x2, 0x3, 0x8}}}}}}) r0 = open$dir(&(0x7f0000002340)='./file0\x00', 0x80, 0x0) ktrace(&(0x7f0000000000)='./file0\x00', 0x1, 0x0, 0x0) readv(r0, &(0x7f00000005c0), 0x9) open(&(0x7f0000000040)='./file0/file0\x00', 0x19083084ca9cf73d, 0x2) sysctl$vm(&(0x7f0000000080)={0x2, 0x7}, 0x2, 0x0, 0x0, 0x0, 0x0) 254.193434ms ago: executing program 3 (id=14): r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) ioctl$DIOCCLRIFFLAG(r0, 0xc028445a, &(0x7f0000000100)={'./file0\x00', &(0x7f0000000040)=""/182, 0xf, 0x7, 0x401, 0x9}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffff9c, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000140)=[0xffffffac, 0x3, 0x1, 0x7, 0x101, 0x1, 0x9, 0xe00, 0x3, 0x7fffffff], 0xa, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETFB(r1, 0xc01c64ad, &(0x7f00000001c0)={0x0, 0x0, 0x9e6, 0x0, 0x10000, 0x8, 0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000200)={0x9, 0xa4a5, 0x7a, 0x6, 0x0}) rmdir(&(0x7f0000000240)='./file0\x00') ioctl$DRM_IOCTL_VERSION(r1, 0xc0406400, &(0x7f00000003c0)={0x3, 0xe10d, 0x3, 0x69, &(0x7f0000000280)=""/105, 0x30, &(0x7f0000000300)=""/48, 0x48, &(0x7f0000000340)=""/72}) (async) symlink(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='./file0\x00') ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000480)={0xfffffffa, 0x10001, r1}) preadv(r1, &(0x7f0000000540)=[{&(0x7f00000004c0)=""/71, 0x47}], 0x1, 0x8) ioctl$WSKBDIO_SETDEFAULTKEYREPEAT(r5, 0x800c5709, &(0x7f0000000580)={0xfffffff8, 0x2, 0x80000001}) (async) getsockopt$sock_cred(r5, 0xffff, 0x1022, &(0x7f00000005c0), &(0x7f0000000600)=0xc) (async) chdir(&(0x7f0000000640)='./file0\x00') r6 = socket$unix(0x1, 0x1, 0x0) r7 = fcntl$dupfd(r0, 0xc, r6) ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0xc06864a1, &(0x7f00000006c0)={&(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, r2, 0xf19b, 0x6, 0x6, 0x0, {0x2, 0x476, 0x7fff, 0xb7, 0x40, 0x8000, 0x0, 0x7f, 0x3, 0x4, 0x5, 0x58, 0xc000, 0x10, "44f40cff3d0f2734cda18b55207516da3ea38390adbc3802e9c3edfedccdce8d"}}) ioctl$DRM_IOCTL_MODE_GETFB(r5, 0xc01c64ad, &(0x7f0000000740)={r8, 0x2, 0x7, 0x8000, 0x200, 0x2, r4}) (async) ioctl$WSKBDIO_GETBELL(r5, 0x40105704, &(0x7f0000000780)) (async) utimes(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)={{0x4, 0x18}, {0x1, 0x6}}) (async) ioctl$TIOCMSET(r7, 0x8004746d, &(0x7f0000000840)=0x3) (async) r9 = openat$dri(0xffffffffffffff9c, &(0x7f0000000880)='/dev/dri/card0\x00', 0x1, 0x0) (async) ioctl$DRM_IOCTL_GEM_FLINK(r7, 0xc008640a, &(0x7f00000008c0)={r3, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r9, 0xc010640b, &(0x7f0000000900)={r10}) r11 = accept$inet(r7, &(0x7f0000000940), &(0x7f0000000980)=0x10) closefrom(r11) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(r1, 0xc01864c2, &(0x7f00000009c0)={0x0, 0x2, r1, 0x0, 0x10000}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000a00)={0x0}) (async) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r7, 0xc00864c0, &(0x7f0000000a40)={0x0}) (async) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r9, 0xc00864c0, &(0x7f0000000a80)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_RESET(0xffffffffffffff9c, 0xc01064c4, &(0x7f0000000b40)={&(0x7f0000000b00)=[r12, r13, r14, r15, 0x0], 0x5}) 253.730549ms ago: executing program 1 (id=15): pipe2(&(0x7f0000000040), 0x4) sysctl$kern(&(0x7f0000000000)={0x1, 0x32}, 0x41d9, 0x0, 0x0, &(0x7f0000000100), 0x0) pipe2(&(0x7f0000000040), 0x4) (async) sysctl$kern(&(0x7f0000000000)={0x1, 0x32}, 0x41d9, 0x0, 0x0, &(0x7f0000000100), 0x0) (async) 252.554369ms ago: executing program 4 (id=5): mkfifo(&(0x7f0000000000)='./file0\x00', 0x38) open$dir(&(0x7f00000002c0)='./file0\x00', 0x2, 0x3c) r0 = open$dir(&(0x7f00000001c0)='./file0\x00', 0x200, 0x87) r1 = kqueue1(0x10000) kevent(r1, &(0x7f00000000c0)=[{{r0}, 0xfffffffffffffff7, 0x1, 0x2, 0x8000000000000000, 0x9}], 0x40, 0x0, 0x1, 0x0) r2 = openat$pci(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PCIOCWRITE(r2, 0xc0107003, &(0x7f0000000080)={{0xd5, 0xd6, 0xe0}, 0x1, 0x6, 0xfff}) mkfifo(&(0x7f0000000000)='./file0\x00', 0x38) (async) open$dir(&(0x7f00000002c0)='./file0\x00', 0x2, 0x3c) (async) open$dir(&(0x7f00000001c0)='./file0\x00', 0x200, 0x87) (async) kqueue1(0x10000) (async) kevent(r1, &(0x7f00000000c0)=[{{r0}, 0xfffffffffffffff7, 0x1, 0x2, 0x8000000000000000, 0x9}], 0x40, 0x0, 0x1, 0x0) (async) openat$pci(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$PCIOCWRITE(r2, 0xc0107003, &(0x7f0000000080)={{0xd5, 0xd6, 0xe0}, 0x1, 0x6, 0xfff}) (async) 252.300332ms ago: executing program 6 (id=16): sysctl$net_inet6_ip6(&(0x7f0000000000)={0x4, 0x18, 0x29, 0x34}, 0x4, 0x0, 0x0, 0x0, 0x0) sysctl$net_inet6_ip6(&(0x7f0000000040)={0x4, 0x18, 0x29, 0x11}, 0x4, &(0x7f0000000080)="6868553f1566af4645f5e6486b427d4d54985cf815b6345b717ef615d6afd61ce34d68262ba13d621a96937044b4585ab353b977a9370452c676618da442674aa10570bcf2448a356be27d4310c0f8fe5163f09b70bf7ca29252ec437ea77eeae720ce03359a444e470b4a2fa0b6862a3999326dad9f5acd", &(0x7f0000000100)=0x78, &(0x7f0000000140)="a89feebfbb19de9a4b7bae4dfbfab36ecbe567a3a82b386c26314a46413d3ce3dfadc3213f4170fe067d89b26a9fae7c743dab35005462616f94104c2bd30f14142a300ed2d6c1cfc821", 0x4a) 251.904332ms ago: executing program 4 (id=17): syz_emit_ethernet(0x82, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa0300aaaaaaaaaa080045da00740068000005069078e0000001ac1400bb34f21b9371d67a17543bb91c76f103d6298aa491cc4a7b8dfa914bef57c0929e229ccb7d7aab194e8095bcbc34adc561fd76cc25282a11da44dc8fdd5b5c10171222e483a4cab54f03b45fe883a71ce17b5df0af54b04774b9066a7805519fa485faf752cd8cf104000000fbad9fc2cc660bcf491141e2245697023114e72ff5bcc09b1b8a306737ed1fe637d186ec7459f17956e33312cb14aac372a5bda45131d743d9478ef5f60bd0d35cfc0d78925ced549a368fa500f457c7fde123380cd3273985f068a6ef22734a8ae60f77a9f6631454ce0ce7f53056a09ed1c0eba0d8e5fc94cb7b3307c18576c0983a329eeef6b38750b622a00f2e8f7218f91f7d162b12af5c05e1b020c736b6a00cca160bdcc98a0dbc2dcef5c481e8dd577b4f2cbdaec99fc430211955d231b0eb49085d2b3393eed1e6152dd879438ae267e64eff0000000000000000b6d9bf6e7035f9538a83e49b737b8a0ce174eada9c4d76325428317618"]) syz_emit_ethernet(0x82, &(0x7f0000000000)=ANY=[@ANYBLOB="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"]) (async) 251.163819ms ago: executing program 6 (id=18): seteuid(0xffffffffffffffff) clock_settime(0x3, 0x0) mkfifo(&(0x7f0000001380)='./file0\x00', 0x8) r0 = open$dir(&(0x7f00000002c0)='./file0\x00', 0x2, 0x3c) write(r0, &(0x7f0000000000)="bd5b4aa1ea7f72b502106b0fd3106e997a29b3e626636b1f7d97e21d02d0a96a5fcbd55d1ec4c004485fdf5b808b7ec1286a74552e01ea967927fdc91872fe2f0fa7fad4e7402faf31a6425c8e66b7e304d3f1d93d715917ca1b16de59a9a0c5b167", 0x62) open$dir(&(0x7f00000002c0)='./file0\x00', 0x12, 0x3c) 192.727502ms ago: executing program 0 (id=19): syz_emit_ethernet(0x7c, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0]) r0 = msgget$private(0x0, 0x652) r1 = socket$inet(0x2, 0x1000, 0x5) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd"]) open$dir(&(0x7f0000000100)='./file0\x00', 0x10280, 0x120) sendto(r1, 0x0, 0x0, 0xc, &(0x7f0000000080)=@in={0x10, 0x2, 0x1, 0x7}, 0x8) getgroups(0x7, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]) setresgid(0x0, r3, r2) getgroups(0x7, &(0x7f0000001900)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]) setregid(0x0, r4) msgsnd(r0, &(0x7f0000000040)=ANY=[], 0x8, 0x0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000004480), 0x20, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) fchown(r5, 0x0, 0x0) listen(r5, 0x693c7386) syz_emit_ethernet(0x7c, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0]) (async) msgget$private(0x0, 0x652) (async) socket$inet(0x2, 0x1000, 0x5) (async) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd"]) (async) open$dir(&(0x7f0000000100)='./file0\x00', 0x10280, 0x120) (async) sendto(r1, 0x0, 0x0, 0xc, &(0x7f0000000080)=@in={0x10, 0x2, 0x1, 0x7}, 0x8) (async) getgroups(0x7, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]) (async) setresgid(0x0, r3, r2) (async) getgroups(0x7, &(0x7f0000001900)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]) (async) setregid(0x0, r4) (async) msgsnd(r0, &(0x7f0000000040)=ANY=[], 0x8, 0x0) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000004480), 0x20, 0x0) (async) openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) (async) fchown(r5, 0x0, 0x0) (async) listen(r5, 0x693c7386) (async) 191.170328ms ago: executing program 1 (id=20): r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000001700), 0x8840, 0x0) lseek(r0, 0x1, 0x0) futimens(r0, &(0x7f00000000c0)=[{0x1, 0xf}, {0x1, 0x7f}]) sysctl$hw(&(0x7f0000000100)={0x6, 0xe}, 0x2, &(0x7f0000000000)="da63b95bc8465f8b35b9fdc65d722728c27961f934e48dca042aeda70a27b7f1b52077c2cb5b7304683cc1840c511e011bbc89e90a992cba4e8f5da06c0e4a5f9f11a07ca1761bd1ce2495fa97e0cdf343b53528b3e2916b95ffc657ad359e0f8de6cc56d2afc5e32ec2cc590cf2fa826588dc26d24b2cfc04df0b4ea3ffd6d255f90ac6b2a8d3c5", 0x0, 0x0, 0x3a) 190.855204ms ago: executing program 3 (id=21): r0 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000040), 0x10, 0x0) munmap(&(0x7f0000753000/0x1000)=nil, 0x1000) (async) flock(r0, 0x6) (async, rerun: 64) mprotect(&(0x7f00000c2000/0x3000)=nil, 0x3000, 0x4) (rerun: 64) munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_int(r1, 0xffff, 0x100, &(0x7f00000000c0), &(0x7f0000000000)=0x4) (async, rerun: 64) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000080)={0xf, 0x101, r0}) (rerun: 64) ioctl$DIOCRDELTABLES(r2, 0xc450443e, &(0x7f00000017c0)={{'./file0\x00', './file0\x00', 0x1, 0xfb}, &(0x7f0000000700)=[{'./file0\x00', './file0\x00', 0x68, 0x8}, {'./file0\x00', './file0\x00', 0x19, 0x2}, {'./file0\x00', './file0\x00', 0x40, 0x5}, {'./file0\x00', './file0\x00', 0x28, 0x81}], 0x1, 0x4, 0x80000001, 0x20000000, 0x5, 0x8, 0x52, 0x5}) 190.261555ms ago: executing program 4 (id=22): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) getsockopt$sock_int(r0, 0xffff, 0x100, &(0x7f00000001c0), &(0x7f0000000200)=0x4) syz_emit_ethernet(0x2a, &(0x7f0000001740)={@broadcast, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x7, 0x1c, 0x65, 0xffff, 0x4, 0x2, 0x0, @multicast1, @empty=0xe0000001}, @udp={{0x3, 0x1, 0x8}}}}}}) r1 = socket$unix(0x1, 0x5, 0x0) shutdown(r1, 0x0) recvmsg(r1, &(0x7f00000001c0)={&(0x7f0000000000)=@un=@file={0x0, 0x0, ""/98}, 0x64, 0x0, 0x0, &(0x7f0000000100)=""/166, 0xa6}, 0x0) syz_open_pts() 104.699125ms ago: executing program 7 (id=23): r0 = socket$inet6(0x18, 0x3, 0x1) mprotect(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2) r1 = openat$pf(0xffffffffffffff9c, &(0x7f00000044c0), 0x2, 0x0) ioctl$DIOCSETTIMEOUT(r1, 0xc008441d, &(0x7f0000000040)={0x12}) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x18, 0x1, 0x7f, "080000000100", 0xc0000}, 0x1c) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt(r2, 0x0, 0x20, &(0x7f0000000100)="9a355644", 0x4) sendto$inet6(r0, 0x0, 0x0, 0x400, &(0x7f0000000140)={0x1c, 0x18, 0x3, 0x8, "02d835671ca7ac103f4725bd45088b77", 0x1000}, 0x1c) setsockopt(r0, 0xb, 0x1, &(0x7f0000000000)="1e080a5d5ff41a7a9e131ccfc3a4c173caf9e1d48b7e36fc848faedfb8", 0x1d) recvfrom(r0, &(0x7f0000000040)=""/55, 0x37, 0x1, &(0x7f00000000c0)=@in6={0x1c, 0x18, 0x0, 0x200, "ba3f781d0915934edffd61abcce95f13", 0x8001}, 0x1c) syz_emit_ethernet(0x39, &(0x7f0000000cc0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaab2aaaaaaaa080045da002b0065000005069078e0000001ac1400bb34f21b9371d67a17543bb91c76f103d6298aa491cc657b"]) 104.124827ms ago: executing program 4 (id=24): openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) (async) r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) fstat(r0, &(0x7f0000001800)) 103.604447ms ago: executing program 6 (id=25): r0 = openat$pf(0xffffffffffffff9c, &(0x7f00000023c0), 0x80, 0x0) ioctl$DIOCRSETTFLAGS(r0, 0xc450444a, &(0x7f0000003a80)={{'./file0/../file0\x00', './file3\x00', 0x75, 0x2}, 0x0, 0x0, 0x0, 0x9, 0xd, 0x4, 0x29, 0x10, 0x3}) mkdir(&(0x7f0000000400)='./file0\x00', 0x120) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) bind$unix(r1, &(0x7f0000000000)=@file={0x4, 0x1, '.\x00'}, 0x4) unveil(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='c\x00') r2 = getsid(0xffffffffffffffff) symlink(0x0, 0x0) r3 = socket$inet6(0x18, 0x1, 0x0) recvmmsg(r3, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x0, 0x0}, 0xa}, 0x38, 0x41, 0x0) ktrace(&(0x7f0000000080)='./file0\x00', 0x1, 0x40002c00, r2) unveil(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000340)='w\x00') 102.632861ms ago: executing program 3 (id=26): open$dir(&(0x7f0000000080)='./file0\x00', 0x40, 0x10) (async) mkfifo(&(0x7f0000000000)='./file0\x00', 0x70) (async) ktrace(&(0x7f0000000040)='./file0\x00', 0x4, 0x814, 0x0) (async) ktrace(&(0x7f0000000180)='./file0\x00', 0x4, 0x4, 0x0) 101.180384ms ago: executing program 4 (id=27): recvmmsg(0xffffffffffffffff, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0xfffffffffffffe8c, 0x0}, 0xb761}, 0x38, 0x5802, 0x0) ktrace(0x0, 0x4, 0x210a, 0x0) 100.803425ms ago: executing program 2 (id=28): sysctl$hw(&(0x7f0000000000)={0x6, 0x11}, 0x2, 0x0, 0x0, 0x0, 0x0) sysctl$hw(&(0x7f0000000040)={0x6, 0x17}, 0x2, &(0x7f0000000080)="d09313969b2e76d8686db3bb6d07467a0707a3bf31da32bf36fcda28a64dc8d83fd564fdabb11628b0f89814d2e0c63f46015d86", &(0x7f00000000c0)=0x34, &(0x7f0000000100)="a19e35f2480eb5416f4134355326a1c9ef168cc4ec01df72b9ce2b0ae1cc19fd9a22515b9ff84f9fad95dee623eaa342b9f930d558d08d964ea367c849fecbc983bf22e531238859e281a957fbddb818072c9375144ce110dfab1518080b6178d803715a5221a32f59606e6a1f7e715ed3e93190f0e197b9ca5505f3c017a19e3b1e72b6483faa81b86541a02daf72b5c2343afa2422d62ab174d1c46a9bd8b8b72dc3c75c370847edb5201cd50c0ad3629791c124affbf998ab4c1287b4062e143c08fcd7095926", 0xc8) sysctl$hw(&(0x7f0000000000)={0x6, 0x11}, 0x2, 0x0, 0x0, 0x0, 0x0) (async) sysctl$hw(&(0x7f0000000040)={0x6, 0x17}, 0x2, &(0x7f0000000080)="d09313969b2e76d8686db3bb6d07467a0707a3bf31da32bf36fcda28a64dc8d83fd564fdabb11628b0f89814d2e0c63f46015d86", &(0x7f00000000c0)=0x34, &(0x7f0000000100)="a19e35f2480eb5416f4134355326a1c9ef168cc4ec01df72b9ce2b0ae1cc19fd9a22515b9ff84f9fad95dee623eaa342b9f930d558d08d964ea367c849fecbc983bf22e531238859e281a957fbddb818072c9375144ce110dfab1518080b6178d803715a5221a32f59606e6a1f7e715ed3e93190f0e197b9ca5505f3c017a19e3b1e72b6483faa81b86541a02daf72b5c2343afa2422d62ab174d1c46a9bd8b8b72dc3c75c370847edb5201cd50c0ad3629791c124affbf998ab4c1287b4062e143c08fcd7095926", 0xc8) (async) 2.13498ms ago: executing program 0 (id=29): munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap(&(0x7f0000ff2000/0xe000)=nil, 0xe000, 0x2, 0x811, r0, 0x1) munmap(&(0x7f0000ff5000/0x6000)=nil, 0x6000) ioctl$WSDISPLAYIO_GETEMULTYPE(0xffffffffffffffff, 0xc014575e, &(0x7f0000000040)={0x7, './file0\x00'}) mprotect(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x1) 1.665931ms ago: executing program 6 (id=30): r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000dc0), 0x10000, 0x0) ioctl$DIOCRDELTABLES(r0, 0xc450443e, &(0x7f0000002300)={{'./file0\x00', './file0\x00', 0x0, 0x1}, 0x0, 0x4, 0x0, 0x6, 0x3, 0x5, 0xc, 0x2, 0x9}) r1 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0) getgroups(0x7, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]) setresgid(r3, r2, 0x0) getgroups(0x7, &(0x7f0000001900)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]) setregid(0x0, r4) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000380)={0xb, 0x2, 0xfffdffff, 0x80, 0x0}) ioctl$DRM_IOCTL_MODE_CURSOR(r1, 0xc01c64a3, &(0x7f0000000040)={0x2, 0x8, 0xab81, 0x7, 0x4, 0xa07, r5}) openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0) openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) sysctl$hw(&(0x7f0000000580)={0x6, 0x8}, 0x2, &(0x7f00000005c0)="e5867ecdf75530316376221c2d4b85ae0d9cb2d2f7", &(0x7f0000000640)=0x15, &(0x7f0000000680), 0x0) ioctl$DIOCSETLIMIT(r1, 0xc0084428, &(0x7f0000000180)={0x4, 0x14}) write$audio(r1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001c80)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_int(r6, 0xffff, 0x10, 0x0, 0x0) ioctl$BIOCGETIF(r1, 0x4020426b, &(0x7f0000000080)={""/16, @ifru_addr=@in}) sysctl$ddb(&(0x7f0000000000)={0x9, 0x5}, 0x2, 0x0, 0x0, &(0x7f0000001100), 0x0) 1.483997ms ago: executing program 2 (id=31): sysctl$kern(&(0x7f0000000000)={0x1, 0x51}, 0x2, &(0x7f0000000040)="40c2dad1", &(0x7f0000000080)=0x4, 0x0, 0x0) 353.072µs ago: executing program 0 (id=32): r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$DIOCCLRIFFLAG(r0, 0xc028445a, &(0x7f0000000c80)={'./file0\x00', 0x0, 0x75258b8d, 0xb, 0x30, 0xfffffff1}) 0s ago: executing program 4 (id=33): symlink(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000600)='./file0\x00') open$dir(&(0x7f0000000080)='./file0\x00', 0x200, 0x0) mkfifo(&(0x7f0000001380)='./file0\x00', 0x8) ktrace(&(0x7f0000000000)='./file0\x00', 0x1, 0x100, 0x0) setegid(0xffffffffffffffff) r0 = getegid() setresgid(r0, 0x0, r0) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000003580), 0x200, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000cc0)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x2, 0x36, 0x38, 0x68, 0x0, 0x5, 0x6, 0x0, @multicast1, @remote={0xac, 0x14, 0x0}}, @generic="34f21b9371d67a17543bb91c76f103d6298aa491cc4a7b8dfa914bef57c0929e229ccb7d"}}}}) r2 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$WSMOUSEIO_GETPARAMS(r2, 0x80105727, &(0x7f00000000c0)={&(0x7f0000000080)=[{0x20, 0xffffffff}], 0x1}) ioctl$DIOCGETRULE(r1, 0xcd604407, &(0x7f00000035c0)={0x400, 0xffffff80, 0x8, './file0\x00', './file0\x00', 0x0, "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"}) open$dir(&(0x7f00000002c0)='./file0\x00', 0x40, 0x3c) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.210' (ED25519) to the list of known hosts. pckbd_enable: command error WuARvNm_INfGau:l tS(0PxL ffNOffT8 0LO0W0E0R1E2De 7O3fN 0TR,AP 0ExX9I8T, 0a ,0 1)Stopped at proc_trampoline+0xc7: movl $0,%gs:0x688 TID PID UID PRFLAGS PFLAGS CPU COMMAND *340751 41961 0 0 0 0 syz-executor 410123 31315 0 0 0x4000000 1K syz-executor proc_trampoline() at proc_trampoline+0xc7 end of kernel end trace frame: 0x7530bddc3740, count: 14 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{0}> ddb{0}> set $lines = 0 ddb{0}> set $maxwidth = 0 ddb{0}> show panic *cpu1: uvm_fault(0xffff8000012e73f0, 0x98, 0, 1) -> e ddb{0}> trace proc_trampoline() at proc_trampoline+0xc7 end of kernel end trace frame: 0x7530bddc3740, count: -1 ddb{0}> show registers rdi 0xffffffff8324bee0 panicstr rsi 0xffffffff83093560 __sancov_gen_cov_switch_values.22 rbp 0xffff80003af57cb0 rbx 0 rdx 0 rcx 0xffffffff82f0bff0 cpu_info_full_primary+0x1ff0 rax 0x2a r8 0xffff80003af57b80 r9 0 r10 0 r11 0xffffffff813f8360 x86_bus_space_io_read_1 r12 0 r13 0 r14 0 r15 0 rip 0xffffffff81f9f427 proc_trampoline+0xc7 cs 0x8 rflags 0x246 rsp 0xffff80003af57c30 ss 0 proc_trampoline+0xc7: movl $0,%gs:0x688 ddb{0}> show proc PROC (syz-executor) tid=340751 pid=41961 tcnt=2 stat=onproc flags process=0 proc=0 runpri=75, usrpri=75, slppri=17, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff80003af51250,0xffff80003af50800 process=0xffff80002a331828 user=0xffff80003af52000, vmspace=0xffff8000012e75d8 estcpu=36, cpticks=2, pctcpu=0.0, user=0, sys=2, intr=0 ddb{0}> ps PID TID PPID UID S FLAGS WAIT COMMAND 54945 134099 853 0 2 0 syz-executor 54945 394500 853 0 3 0x4000080 fsleep syz-executor 90737 100249 7484 0 2 0 syz-executor *41961 340751 14957 0 7 0 syz-executor 41961 195281 14957 0 3 0x4000080 fsleep syz-executor 69719 162484 23093 0 2 0 syz-executor 69719 425888 23093 0 3 0x4000080 fsleep syz-executor 89563 349635 12913 0 3 0x80 nanoslp syz-executor 89563 289206 12913 0 3 0x4000080 fsleep syz-executor 89563 431005 12913 0 3 0x4000080 fsleep syz-executor 89563 235672 12913 0 3 0x4000080 fifow syz-executor 31315 437035 71234 0 2 0 syz-executor 31315 410123 71234 0 7 0x4000000 syz-executor 31315 257954 71234 0 3 0x4000080 fsleep syz-executor 75271 102326 75124 0 3 0x90 nanoslp syz-executor 75271 301406 75124 0 3 0x4000090 netacc syz-executor 75271 69483 75124 0 3 0x4000090 kqread syz-executor 14957 392689 86900 0 3 0x82 nanoslp syz-executor 853 156906 86900 0 3 0x82 nanoslp syz-executor 75124 305355 86900 0 3 0x82 nanoslp syz-executor 7484 226831 86900 0 3 0x82 nanoslp syz-executor 12913 395650 86900 0 3 0x82 nanoslp syz-executor 15362 49229 86900 0 3 0x2 biowait syz-executor 71234 409033 86900 0 3 0x82 nanoslp syz-executor 23093 165924 86900 0 3 0x82 nanoslp syz-executor 86900 260637 79972 0 3 0x82 kqread syz-executor 79972 194442 13147 0 3 0x10008a sigsusp ksh 13147 471238 74537 0 3 0x98 kqread sshd-session 74537 322755 69655 0 3 0x92 kqread sshd-session 76995 40405 1 0 3 0x100083 ttyin getty 69655 180916 1 0 3 0x88 kqread sshd 16656 466640 83191 74 3 0x1100092 bpf pflogd 83191 31286 1 0 3 0x80 sbwait pflogd 50814 332027 45097 73 3 0x1100090 kqread syslogd 45097 363615 1 0 3 0x100082 sbwait syslogd 86614 56707 1 0 3 0x100080 kqread resolvd 91529 245036 78541 77 3 0x100092 kqread dhcpleased 89991 165921 78541 77 3 0x100092 kqread dhcpleased 78541 340282 1 0 3 0x80 kqread dhcpleased 31318 244096 0 0 3 0x14200 bored smr 91790 293691 0 0 2 0x14200 zerothread 60196 160916 0 0 3 0x14200 aiodoned aiodoned 18109 100473 0 0 3 0x14200 syncer update 28316 258841 0 0 3 0x14200 cleaner cleaner 34068 217612 0 0 3 0x14200 reaper reaper 49 459828 0 0 3 0x14200 pgdaemon pagedaemon 38461 48929 0 0 3 0x14200 bored viomb 16751 8741 0 0 3 0x40014200 acpi0 acpi0 17319 307449 0 0 3 0x40014200 idle1 28937 271174 0 0 3 0x14200 bored softnet1 29918 244700 0 0 3 0x14200 bored softnet0 28999 69728 0 0 3 0x14200 bored systqmp 29145 76346 0 0 3 0x14200 bored systq 94573 368041 0 0 3 0x14200 tmoslp softclockmp 75953 345239 0 0 3 0x40014200 tmoslp softclock 7822 152430 0 0 3 0x40014200 idle0 1 128336 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb{0}> show all locks CPU 0: exclusive mutex &pmap->pm_mtx r = 0 (0xffff8000012e8f10) #0 witness_lock+0x632 #1 mtx_enter+0x683 #2 pmap_enter+0x288 #3 uvm_fault_lower+0xb50 #4 uvm_fault+0x3ef #5 upageflttrap+0xe0 #6 usertrap+0x4f9 #7 recall_trap+0x8 Process 41961 (syz-executor) thread 0xffff80003af50a88 (340751) exclusive rwlock amaplk r = 0 (0xffff80000133b540) #0 witness_lock+0x632 #1 rw_do_enter_write+0x53e #2 uvm_fault_check+0xf69 #3 uvm_fault+0x1e7 #4 upageflttrap+0xe0 #5 usertrap+0x4f9 #6 recall_trap+0x8 shared rwlock vmmaplk r = 0 (0xffff8000012e76d8) #0 witness_lock+0x632 #1 rw_do_enter_read+0x55d #2 uvmfault_lookup+0x1a2 #3 uvm_fault_check+0x43 #4 uvm_fault+0x1e7 #5 upageflttrap+0xe0 #6 usertrap+0x4f9 #7 recall_trap+0x8 exclusive mutex &pmap->pm_mtx r = 0 (0xffff8000012e8f10) #0 witness_lock+0x632 #1 mtx_enter+0x683 #2 pmap_enter+0x288 #3 uvm_fault_lower+0xb50 #4 uvm_fault+0x3ef #5 upageflttrap+0xe0 #6 usertrap+0x4f9 #7 recall_trap+0x8 Process 31315 (syz-executor) thread 0xffff800045fef4d8 (410123) exclusive kernel_lock &kernel_lock r = 0 (0xffffffff8322d3c0) #0 witness_lock+0x632 #1 syscall+0x1048 #2 Xsyscall+0x128 Process 15362 (syz-executor) thread 0xffff80002a1d2010 (49229) exclusive rrwlock inode r = 0 (0xffff8000013590c8) #0 witness_lock+0x632 #1 rw_do_enter_write+0x53e #2 rrw_enter+0xf0 #3 VOP_LOCK+0x17e #4 vn_lock+0xca #5 vget+0x321 #6 ufs_ihashget+0x233 #7 ffs_vget+0x10b #8 ufs_lookup+0x1529 #9 VOP_LOOKUP+0xda #10 vfs_lookup+0xfbd #11 namei+0xe19 #12 dounlinkat+0x102 #13 syscall+0x1089 #14 Xsyscall+0x128 exclusive rrwlock inode r = 0 (0xffff800001268d70) #0 witness_lock+0x632 #1 rw_do_enter_write+0x53e #2 rrw_enter+0xf0 #3 VOP_LOCK+0x17e #4 vn_lock+0xca #5 vfs_lookup+0x1f7 #6 namei+0xe19 #7 dounlinkat+0x102 #8 syscall+0x1089 #9 Xsyscall+0x128 ddb{0}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 11052 12242K 12260K 166960K 12150 0 pcb 18 24K 24K 166960K 18 0 rtable 239 12K 13K 166960K 357 0 pf 34 22K 22K 166960K 45 0 ifaddr 43 12K 12K 166960K 45 0 ifgroup 55 2K 2K 166960K 55 0 sysctl 3 1K 13K 166960K 7 0 counters 70 42K 42K 166960K 70 0 ioctlops 0 0K 4K 166960K 1489 0 iov 0 0K 0K 166960K 1 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1294 83K 83K 166960K 1376 0 UFS quota 1 36K 36K 166960K 1 0 UFS mount 5 44K 44K 166960K 5 0 shm 2 2K 6K 166960K 3 0 VM map 2 1K 1K 166960K 2 0 sem 2 0K 0K 166960K 2 0 dirhash 12 2K 2K 166960K 12 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 17 61K 89K 166960K 165 0 proc 69 128K 177K 166960K 554 0 subproc 72 9K 9K 166960K 72 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 20K 20K 166960K 1 0 in_multi 99 7K 7K 166960K 99 0 ether_multi 1 0K 0K 166960K 1 0 mrt 0 0K 0K 166960K 1 0 ISOFS mount 1 36K 36K 166960K 1 0 MSDOSFS mount 1 20K 20K 166960K 1 0 ttys 37 263K 263K 166960K 37 0 exec 0 0K 2K 166960K 389 0 fusefs mount 1 36K 36K 166960K 1 0 tdb 3 1K 1K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 227 244K 262K 166960K 3277 0 UVM aobj 6 4K 4K 166960K 6 0 pinsyscall 42 84K 104K 166960K 1341 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 NDP 17 0K 1K 166960K 28 0 temp 37 1814K 1824K 166960K 4003 0 kqueue 17 49K 49K 166960K 33 0 SYN cache 2 16K 16K 166960K 2 0 ddb{0}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle kctst 128 64 0 0 3 1 2 3 0 8 0 plcache 128 30 0 0 1 0 1 1 0 8 0 rtpcb 120 35 0 32 1 0 1 1 0 8 0 rtentry 176 112 0 1 6 0 6 6 0 8 0 unpcb 144 71 0 50 1 0 1 1 0 8 0 syncache 336 4 0 4 1 0 1 1 0 8 1 tcpcb 736 10 0 5 1 0 1 1 0 8 0 arp 136 18 0 0 1 0 1 1 0 8 0 inpcb 328 73 0 64 1 0 1 1 0 8 0 nd6 152 25 0 0 1 0 1 1 0 8 0 kcovpl 48 8 0 0 1 0 1 1 0 8 0 pffrag 232 1 0 1 1 0 1 1 0 482 1 pffrnode 88 1 0 1 1 0 1 1 0 8 1 pffrent 40 2 0 2 1 0 1 1 0 8 1 pfosfp 40 1428 0 1005 5 0 5 5 0 8 0 pfosfpen 112 1428 0 714 21 0 21 21 0 8 0 pfstitem 24 20 0 0 1 0 1 1 0 8 0 pfstkey 128 20 0 0 1 0 1 1 0 8 0 pfstate 448 20 0 0 3 0 3 3 0 8 0 pfrule 1360 21 0 15 2 0 2 2 0 8 0 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 454 0 0 29 0 29 29 0 8 0 art_table 40 455 0 0 5 0 5 5 0 8 0 art_node 32 112 0 11 1 0 1 1 0 8 0 sysvmsgpl 40 2 0 1 1 0 1 1 0 8 0 shmpl 112 3 0 0 1 0 1 1 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino2pl 256 1605 0 135 93 0 93 93 0 8 0 ffsino 296 1605 0 135 114 0 114 114 0 8 0 nchpl 144 1844 0 145 64 0 64 64 0 8 0 vnodes 216 1705 0 0 95 0 95 95 0 8 0 namei 1024 5656 0 5656 1 0 1 1 0 8 1 percpumem 16 52 0 0 1 0 1 1 0 8 0 kstatmem 264 27 0 0 2 0 2 2 0 8 0 scxspl 216 3185 0 3184 3 2 1 2 1 8 0 plimitpl 152 29 0 12 1 0 1 1 0 8 0 sigapl 424 488 0 441 7 0 7 7 0 8 1 knotepl 120 62 0 0 2 0 2 2 0 8 0 kqueuepl 224 33 0 21 1 0 1 1 0 8 0 pipepl 344 133 0 106 3 0 3 3 0 8 0 fdescpl 528 472 0 441 3 0 3 3 0 8 0 filepl 160 1709 0 1489 11 0 11 11 0 8 1 lockfpl 104 78 0 76 1 0 1 1 0 8 0 lockfspl 48 7 0 5 1 0 1 1 0 8 0 sessionpl 144 24 0 15 1 0 1 1 0 8 0 pgrppl 48 32 0 15 1 0 1 1 0 8 0 ucredpl 104 103 0 89 1 0 1 1 0 8 0 zombiepl 144 441 0 441 1 0 1 1 0 8 1 processpl 1232 488 0 441 5 0 5 5 0 8 1 procpl 664 546 0 489 6 0 6 6 0 8 0 sockpl 752 179 0 146 4 0 4 4 0 8 0 mcl64k 65536 1 0 0 1 0 1 1 0 8 0 mcl16k 16384 1 0 0 1 0 1 1 0 8 0 mcl12k 12288 1 0 0 1 0 1 1 0 8 0 mcl8k 8192 2 0 0 1 0 1 1 0 8 0 mcl4k 4096 129 0 0 17 0 17 17 0 8 0 mcl2k 2048 19 0 0 3 0 3 3 0 8 0 mextrefs 64 16 0 0 1 0 1 1 0 8 0 mtagpl 96 3 0 0 1 0 1 1 0 8 0 mbufpl 256 138 0 0 9 0 9 9 0 8 0 bufpl 272 2190 0 105 139 0 139 139 0 8 0 anonpl 32 3753 0 0 31 0 31 31 0 229 0 amapchunkpl 152 9076 0 8616 20 0 20 20 0 158 1 amappl16 200 1653 0 1631 5 2 3 5 0 8 1 amappl15 192 35 0 35 1 1 0 1 0 8 0 amappl14 184 435 0 434 1 0 1 1 0 8 0 amappl13 176 128 0 115 1 0 1 1 0 8 0 amappl12 168 725 0 696 2 0 2 2 0 8 0 amappl11 160 7 0 7 1 1 0 1 0 8 0 amappl10 152 109 0 95 1 0 1 1 0 8 0 amappl9 144 274 0 274 1 1 0 1 0 8 0 amappl8 136 101 0 99 1 0 1 1 0 8 0 amappl7 128 150 0 137 1 0 1 1 0 8 0 amappl6 120 155 0 154 1 0 1 1 0 8 0 amappl5 112 102 0 92 1 0 1 1 0 8 0 amappl4 104 294 0 277 1 0 1 1 0 8 0 amappl3 96 1658 0 1551 3 0 3 3 0 8 0 amappl2 88 555 0 495 2 0 2 2 0 8 0 amappl1 80 10777 0 10178 15 0 15 15 0 8 1 amappl 88 2532 0 2376 4 0 4 4 0 92 0 uvmvnodes 80 100 0 0 3 0 3 3 0 8 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 5 0 0 1 0 1 1 0 8 0 uaddrrnd 24 472 0 441 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 472 0 441 1 0 1 1 0 8 0 vmmpekpl 168 5870 0 5833 3 0 3 3 0 8 0 vmmpepl 168 39651 0 37771 86 0 86 86 0 357 2 vmsppl 488 471 0 441 5 0 5 5 0 8 0 rwobjpl 80 14826 0 13811 24 0 24 24 0 8 1 pdppl 4096 952 0 882 96 12 84 84 0 8 14 pvpl 32 9423 0 0 78 1 77 77 0 265 1 pmappl 256 471 0 441 3 0 3 3 0 8 0 extentpl 40 45 0 27 1 0 1 1 0 8 0 phpool 112 407 0 14 12 0 12 12 0 8 0 ddb{0}> machine ddbcpu 0 Invalid cpu 0 ddb{0}> trace proc_trampoline() at proc_trampoline+0xc7 end of kernel end trace frame: 0x7530bddc3740, count: -1 ddb{0}> machine ddbcpu 1 Stopped at x86_ipi_db+0x19: leave x86_ipi_db(ffff80002994dff0) at x86_ipi_db+0x19 x86_ipi_handler() at x86_ipi_handler+0x112 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 x86_bus_space_io_read_4(b008,0) at x86_bus_space_io_read_4+0x29 acpitimer_delay(1) at acpitimer_delay+0x8a comcnputc(800,29) at comcnputc+0x342 cnputc(29) at cnputc+0xaf db_putchar(29) at db_putchar+0x29f kprintf() at kprintf+0x2aad db_printf(ffffffff82e03580) at db_printf+0x102 fault(ffffffff82e030c0) at fault+0xfd kpageflttrap(ffff80003b36b130,98) at kpageflttrap+0x581 kerntrap(ffff80003b36b130) at kerntrap+0x1b6 alltraps_kern_meltdown() at alltraps_kern_meltdown+0x7b end trace frame: 0xffff80003b36b390, count: 0 ddb{1}> trace x86_ipi_db(ffff80002994dff0) at x86_ipi_db+0x19 x86_ipi_handler() at x86_ipi_handler+0x112 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 x86_bus_space_io_read_4(b008,0) at x86_bus_space_io_read_4+0x29 acpitimer_delay(1) at acpitimer_delay+0x8a comcnputc(800,29) at comcnputc+0x342 cnputc(29) at cnputc+0xaf db_putchar(29) at db_putchar+0x29f kprintf() at kprintf+0x2aad db_printf(ffffffff82e03580) at db_printf+0x102 fault(ffffffff82e030c0) at fault+0xfd kpageflttrap(ffff80003b36b130,98) at kpageflttrap+0x581 kerntrap(ffff80003b36b130) at kerntrap+0x1b6 alltraps_kern_meltdown() at alltraps_kern_meltdown+0x7b dovutimens(ffff800045fef4d8,ffff80000137e2a0,ffff80003b36b3e0) at dovutimens+0x522 sys_futimens(ffff800045fef4d8,ffff80003b36b620,ffff80003b36b580) at sys_futimens+0x2ef syscall(ffff80003b36b620) at syscall+0x1089 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xda22e011670, count: -18