last executing test programs: 843.889116ms ago: executing program 3 (id=4): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x84, 0x8, 0x5, 0x9}, {0x6, 0x5, 0xff, 0x9}]}) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000440)={'tap', 0x0}) syz_emit_ethernet(0x2a, &(0x7f0000000780)={@broadcast, @random="88a056b0fdac", [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0xa, @remote, @empty, @random="a3498d302bad", @multicast2}}}}) 841.114288ms ago: executing program 1 (id=10): r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=0x1c) ioctl$FIOASYNC(r0, 0x8004667d, &(0x7f0000000100)=0x3fc) sysctl$net_inet_tcp(&(0x7f0000000080)={0x4, 0x2, 0x6, 0x4}, 0x4, &(0x7f00000000c0), 0x0, 0x0, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0x80047308, &(0x7f0000001840)={0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0x80047308, &(0x7f0000001840)={0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff}) closefrom(r3) r4 = socket$inet6(0x18, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000040)={0x1c, 0x18, 0x2, 0x0, "fffe0000000000000000008000", 0xfffffff5}, 0x1c) utimensat(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={{0x0, 0x6c}, {0xbc98, 0xffffffffffffffff}}, 0x2) connect$inet6(r4, &(0x7f0000000080)={0x1c, 0x18, 0x0, 0x8a, "0a5be30e01a3d3d1793c1db58465282f", 0x308}, 0x1c) getegid() r5 = socket$inet6(0x18, 0x4003, 0x17) setsockopt$sock_cred(r5, 0xffff, 0x1023, &(0x7f00000003c0), 0x20) closefrom(r2) r6 = open(&(0x7f0000000180)='./file0\x00', 0x200, 0xcf) mmap(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x2, 0x10, r6, 0x1fff) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0) sendto$inet6(r6, &(0x7f00000001c0)="c76c1ac87601b47814f59b1106dd76ba284c65c34c941d587943bee9e1934d76f7cb90857780cffeb5a980fa1e3569f098de41fddfdfee6d23e48cb2f9d4c13c7829830fec3fd080653d4b4238381f54c5d2c3e5184814a5d06207d3fe27b2c489f35ec35031f55bafa0a2caf09b", 0x6e, 0x6, &(0x7f0000000240)={0x1c, 0x18, 0x0, 0x9ecb, "8f2882423433e28ddfa92e44cca5b103", 0x6}, 0x1c) sysctl$kern(&(0x7f0000000040)={0x1, 0x9}, 0x2, 0x0, 0x0, &(0x7f0000000000)="2ad51380", 0x4) 840.289618ms ago: executing program 3 (id=11): recvmmsg(0xffffffffffffffff, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 0x0}, 0xa}, 0xffffffffffffff03, 0x2000, &(0x7f00000027c0)={0x16f5, 0x5f}) r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000001700), 0x8840, 0x0) ioctl$DIOCIGETIFACES(r0, 0xc0404469, &(0x7f00000017c0)={'./file0\x00', 0x0, 0x100, 0x20003, 0x38}) open$dir(&(0x7f00000001c0)='./file0\x00', 0x200, 0x80) r1 = semget(0x2, 0x7, 0x240) r2 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) openat$pf(0xffffffffffffff9c, 0x0, 0x40000, 0x0) ioctl$DIOCRADDTABLES(r2, 0xc450443d, &(0x7f0000000f80)={{'./file1\x00', './file1\x00', 0x10, 0xfa}, 0x0, 0x428, 0x0, 0x5, 0x7, 0x6a4, 0xfffffffd, 0x4e, 0x7ff}) ioctl$DIOCCLRSTATES(r2, 0x0, 0x0) r3 = semget(0x1, 0x7, 0x200) semop(r1, &(0x7f0000000100), 0x0) open(&(0x7f0000000180)='./file0\x00', 0x200, 0x2c) mkdir(&(0x7f0000001f40)='./file0\x00', 0x90) semctl$SETVAL(r3, 0x2, 0x8, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001c80)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_int(r4, 0xffff, 0x1002, &(0x7f0000000040), &(0x7f0000000300)=0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r5, &(0x7f0000000440)=[{&(0x7f0000002800)="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", 0x1000}, {&(0x7f0000003800)="03c5d7877017b05be0efd49314ee5eb529a61a480356cab46eb1413be67189072388da55d9bdc003cf795c68da280fdf126bc5d1f88497ea6b8a180a74d0d21b9a9d32f85a88cfa783936b688ff4028f4f03e6cd5b4a359ab25525e543f7276eaf07583609a71970367105840dc1da96450af27494c713fb0ca80ffba57727b392fc1acdd0288ed358d75db0fe0595c865b400237011e2d7985337d2c316e258173fdbaf735df6897c26c10bd52a8809dd45f650a998f9c672034e09e3e04d7fcaf588e3375c4f077b7aaed58f3265d3d1199850345f61", 0xd7}, {&(0x7f0000003900)="a944821837b1132634f5ed796806f2468c33d26620a59af37942c30522c9992c0f2c276449c692d4fa1d40d48b75337a57d432818741719cbc9538f8b0ca1f7633316c7392adee5de74ab0007190cda85e2b338b947e9604de9ca174828a8af09dd7ac59d612ebb3ea16e96918a3626122e913bd72ff6ac41bb2caf498b5067b4d974e8873", 0x85}, {&(0x7f00000003c0)="eddb9dee61a33003ee4cad71c2cddbf47eb0e2d93dc9c8fd5b8f96979dc6c558e90454b6e161e942c80604be0e5a4afae5160b52f42574b3fd9308acca54a5aab06e9b976f58617a01c4d0de457b3501bc4c9a696d3c28ff9fd5cd2772270f6e64f2fe1579662e129dbd7e82", 0x6c}], 0x4) recvfrom$unix(r6, &(0x7f00000000c0)=""/46, 0x2e, 0x2002, 0x0, 0x0) chmod(&(0x7f00000000c0)='./file1\x00', 0x41) mknod(&(0x7f0000000000)='./file0\x00', 0x2008, 0x1ea8) open(&(0x7f00000002c0)='./file1\x00', 0x800, 0x49) r7 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r8 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r8, &(0x7f0000000100)=[{&(0x7f00000006c0)="aaae9c43ae291599a4b230a4d2e2caec54d50e422b072dc147", 0x19}], 0x1) unveil(0x0, &(0x7f0000000080)='w\x00') ioctl$BIOCSETF(r7, 0x80104267, &(0x7f0000000100)={0x14, &(0x7f0000000000)=[{0x9a2d, 0x8, 0x5}]}) ioctl$DIOCGETQUEUES(0xffffffffffffffff, 0x80184404, &(0x7f0000000040)={0x1, 0x1, {'\x00', './file1\x00', './file1\x00', './file1\x00', {{0x4, 0x2}, {0x6, 0x13}, 0x2}, {{0x9, 0x5}, {0x2f19, 0x526}, 0x9}, {{0x800000000000000c, 0x2}, {0x9, 0x1000}, 0x40000000}, {0x7, 0x0, 0x0, 0x4}, 0x0, 0x10000, 0x6, 0x7, 0x4}}) mkfifo(&(0x7f0000000280)='./file0\x00', 0x154) setsid() 837.487326ms ago: executing program 1 (id=12): r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000001a40), 0x10, 0x0) ioctl$DIOCRCLRADDRS(r0, 0xc4504442, &(0x7f0000001e80)={{'./file0\x00', './file0\x00', 0x50}, 0x0, 0x0, 0x0, 0x40, 0xe, 0x80000001, 0xc, 0x2, 0xe}) (async) sysctl$net_inet_tcp(&(0x7f0000000080)={0x4, 0x2, 0x6, 0x11}, 0x4, &(0x7f00000000c0), 0x0, 0x0, 0x0) 788.411962ms ago: executing program 7 (id=8): r0 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000040)={0x3, 0xfffff87b, r0}) (async, rerun: 32) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0xfffffffffffffff7}) (rerun: 32) r1 = kqueue1(0x10000) kevent(r1, &(0x7f0000000140), 0x3ff, 0x0, 0xb592, 0x0) 700.509729ms ago: executing program 6 (id=7): syz_emit_ethernet(0x98, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaa6e9c087a255786dd6700000000623c3800000000000000000000000000000000fe8000000000000000000000000000aa3c02000000000000010100c204000000040401ffc204000000080000000000004e224e20", @ANYRES32=0x41424344, @ANYRESOCT, @ANYBLOB="500600090400000068b7d374e32083d3505a602fb0fe3f387c694b1af9b7df361d073e6ad083cadb682f8f823b3132c63e074251d445e6afebcf37534ac40e60a35b8abaca024582299b867d2d16a5c7b39013307d72316c1d98f7b9dc171cff83ac03fe57dc6405d041440f964d2c4076e84c13b14f7af25bb68c3978763945b48593b99e"]) r0 = getpgrp() r1 = syz_open_pts() ktrace(&(0x7f0000000000)='./file0\x00', 0x1, 0x200, r0) mknod(&(0x7f0000000040)='./file0\x00', 0x2000, 0xf11) open$dir(&(0x7f00000002c0)='./file0\x00', 0x2, 0x3c) r2 = getpgid(r0) fcntl$setown(r1, 0x6, r2) 633.085678ms ago: executing program 4 (id=5): open(&(0x7f0000000180)='./file0\x00', 0xa60, 0xcf) ktrace(&(0x7f0000000040)='./file0\x00', 0x4, 0x814, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1, 0x5) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000180)="19a0", 0x2}], 0x1) r1 = open(&(0x7f0000001980)='./file0\x00', 0x80, 0xc3) ioctl$TIOCCONS(r1, 0xc0a86b05, &(0x7f0000000140)=0x1) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x5], 0x1, 0x10000}) r2 = socket$inet(0x2, 0x1, 0x0) connect(r2, &(0x7f0000000040)=@in6={0x1c, 0x18, 0x3, 0x1, "5cd7f65b594e045266e1eb8f6c9df391", 0x1}, 0x1c) mknod(&(0x7f0000000300)='./file0\x00', 0x2000, 0x33a5) mkfifo(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40) rename(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000000)='./file1\x00') symlink(&(0x7f0000000180)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000440)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 505.276167ms ago: executing program 4 (id=13): getgroups(0x7, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]) setresgid(r1, r0, 0x0) setgid(0x0) sysctl$kern(&(0x7f0000000000)={0x0}, 0x0, &(0x7f0000000040)="a5e384d8382f56d4fbe676c58127981e0609e1c1af9da33e10ff93e17e34adeab3f48e3bd2131e905b8ecf24b6", &(0x7f0000000080)=0x2d, &(0x7f00000000c0)="4eb0a0322e45aec89f4fff10c50bcf0713e1bcb93511f877cb46d741e63aaba0a9af75f893da26bfebdb0b2ed66c747908ffeaa757cfe8fe2a4f9106448c58b946ba7d8567c2e035e9b2bd7d7286a5327fefe28b2df731ab1901b04fd3062df41227a5112fde4f985ac6698996869192e8b74f8f95cb980455cf5dd9bad070c33f7c8d3ee8b45298a9d1deda443188f8f03b3e3f3904f52353b71d196076293924ef141809185653097705878828dcc6e4ac1b52e4e96d473635d5aeaf6c9bbcc57bce048fb4ee0a08fe16be96432326bfb3f4693afa9792a6713496841fcd0b20", 0xe1) syz_emit_ethernet(0x36, &(0x7f0000000300)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x2, 0x36, 0x28, 0x68, 0x0, 0x5, 0x11, 0x0, @multicast1, @local={0xac, 0x14, 0x0}}, @tcp={{0x1, 0x0, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x40, 0x1, 0x0, 0x4}}}}}}) 504.2098ms ago: executing program 4 (id=14): socket$unix(0x1, 0x2, 0x0) (async) socket$inet6(0x18, 0x3, 0x3) (async) setrlimit(0x8, &(0x7f0000001ec0)={0x9, 0x37e1790c}) pipe(&(0x7f00000004c0)) (async) kqueue1(0x0) (async) setreuid(0x0, 0x0) r0 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) (async) getresgid(&(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)) (async) mkdir(&(0x7f0000000640)='./file0\x00', 0x40) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffff9c, 0xc00c642e, &(0x7f0000000680)={0x2, 0x4f3cfd7e, r0}) socket$inet6(0x18, 0x3, 0x7) (async) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0xffff6383) socket$inet6(0x18, 0x2, 0x0) (async) ioctl$VMM_IOC_WRITEREGS(0xffffffffffffffff, 0xc0205609, &(0x7f0000000040)={0x6, 0x4, 0x100, {[0x8, 0x4, 0x6f6, 0x7, 0xffffffffffff7a4f, 0xfffffffffffffffa, 0x6, 0x6, 0xda7, 0x80, 0x3, 0xdde0, 0x9, 0x1, 0x8, 0x2, 0x1, 0x6], [0x5, 0x7, 0xfffffffffffffffa, 0xd, 0xffff, 0x9, 0x3, 0x100000000, 0x6, 0x81], [0x6, 0x7, 0x4, 0x3ff, 0x8, 0x7, 0x1], [0x7ff, 0x8, 0x1, 0x7cee, 0x0, 0x7], [{0x0, 0x5, 0xffffff01, 0x80}, {0x2, 0x4, 0x6, 0x67}, {0x5, 0x4, 0x6, 0x2c2}, {0x9, 0x6, 0x30, 0x5}, {0x4, 0x3, 0x7, 0x4}, {0x9557, 0x9, 0x5, 0x33f}, {0x47, 0x8000, 0x9, 0x8}, {0x4, 0x3, 0x1e, 0x8}], {0x40, 0x8, 0x3, 0x5}, {0x0, 0x9, 0x7}}}) (async) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x672) (async) open(&(0x7f0000001980)='./file0\x00', 0x80, 0x0) (async) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x40}, {0xffffffffffffffff, 0x1a0}, {0xffffffffffffffff, 0x10}, {0xffffffffffffffff, 0x1}], 0x55, 0x1) r1 = open(&(0x7f0000001980)='./file0\x00', 0x80, 0xc3) ioctl$WSDISPLAYIO_SVIDEO(r1, 0x4004667f, &(0x7f0000001bc0)=0x1) (async) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0xd01) r2 = open(&(0x7f0000001980)='./file0\x00', 0x80, 0xc3) (async) r3 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) fcntl$lock(r3, 0x9, &(0x7f0000000040)={0x1, 0x0, 0x5, 0x2000100000005}) (async) fcntl$lock(r3, 0x7, &(0x7f0000000040)={0x3, 0x0, 0x3, 0x2000100000005}) (async) ioctl$FIONBIO(r3, 0x8004667e, &(0x7f00000002c0)=0x1e20) (async) ioctl$TIOCSETD(r2, 0x40086475, &(0x7f0000000080)=0x3) 503.770736ms ago: executing program 6 (id=15): r0 = socket$unix(0x1, 0x2, 0x0) setsockopt(r0, 0x40, 0xfffffff9, &(0x7f0000000000), 0x0) setsockopt$sock_int(r0, 0xffff, 0x1001, 0x0, 0x0) 503.12385ms ago: executing program 3 (id=16): munmap(&(0x7f0000000000/0x9000)=nil, 0x9000) setgroups(0x1, &(0x7f0000000140)=[0x0]) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0xffff6383) r0 = open$dir(&(0x7f00000001c0)='./file0\x00', 0x200, 0x80) r1 = kqueue1(0x10000) kevent(r1, 0x0, 0x9, &(0x7f0000000240)=[{{r0}, 0xffffffffffffffff, 0x2, 0xfffff, 0x4, 0x1ff}], 0x0, 0x0) kevent(r1, &(0x7f0000000200)=[{{r0}, 0xffffffffffffffff, 0x1, 0x20, 0x6, 0x3}], 0x7d, 0x0, 0x7, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000300)=ANY=[@ANYBLOB="bce2b891f943aaaaaaaaaabb86dd62000000000867813061498fc24dc0616d7c496f78ec1641ff0100ff0000000000000000000000014e234e2200089078"]) sysctl$net_inet_ip(&(0x7f0000000140)={0x4, 0x2, 0x0, 0x25}, 0x4, 0x0, 0x0, &(0x7f0000000240), 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000440)={'tap', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) syz_emit_ethernet(0xc4, &(0x7f0000000300)=ANY=[]) syz_extract_tcp_res(&(0x7f0000000000), 0x7, 0x400) 414.75596ms ago: executing program 6 (id=17): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000300), 0x40000, 0x0) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000000)={0x3, &(0x7f0000000100)=[{0x7, 0x40, 0x1, 0x101}, {0x3c, 0x9a, 0x8, 0x202}, {0x216, 0x4, 0x9, 0xb4d3}]}) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[]) ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f0000000000)={0x3, 0x5, 0x3, 0x494, "2f35b570dd26498b62ac4a6196e913eac1b1549b", 0x2, 0x6}) r1 = syz_open_pts() ioctl$TIOCSETAW(r1, 0x802c7415, &(0x7f0000000000)={0x1007, 0x3, 0xffffffc0, 0xffffffff, "fe8323860000c2e59897e4abb68600", 0x2, 0xcfe}) ioctl$TIOCSTAT(r1, 0x20007465) ioctl$TIOCSTAT(r1, 0x20007465) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) sysctl$vfs_nfs(&(0x7f0000000000)={0xa, 0x2, 0x1}, 0x3, 0x0, 0x0, 0x0, 0x0) r2 = semget$private(0x0, 0x3, 0x284) semctl$IPC_STAT(r2, 0x0, 0x2, &(0x7f0000000040)=""/218) 414.028236ms ago: executing program 4 (id=18): pipe(&(0x7f0000000280)={0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0x80047308, &(0x7f0000001840)={0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0x80047308, &(0x7f0000001840)={0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff}) closefrom(r2) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0x80047308, 0x0) closefrom(0xffffffffffffffff) r3 = socket$inet6(0x18, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000040)={0x1c, 0x18, 0x2, 0x0, "fffe0000000000000000008000", 0xfffffff5}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0x1c, 0x18, 0x0, 0x8a, "0a5be30e01a3d3d1793c1db58465282f", 0x308}, 0x1c) setsockopt$sock_cred(r3, 0xffff, 0x1023, &(0x7f00000003c0), 0x20) setsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1023, &(0x7f00000003c0), 0x20) closefrom(r1) 413.54592ms ago: executing program 7 (id=19): pipe2(&(0x7f0000000680)={0xffffffffffffffff}, 0x10000) listen(r0, 0xffff) open$dir(&(0x7f00000001c0)='./file0\x00', 0x200, 0x80) unveil(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='w\x00') ktrace(&(0x7f00000001c0)='./file0\x00', 0x0, 0x40002300, 0x0) r1 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) fcntl$lock(r1, 0x9, &(0x7f0000000040)={0x1, 0x0, 0x5, 0x2000100000005}) r2 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000240), 0x8, 0x0) fcntl$lock(r1, 0x7, &(0x7f0000000040)={0x3, 0x0, 0x1, 0x2000100000005}) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) fcntl$lock(r2, 0x8, &(0x7f0000000040)={0x2, 0x0, 0x3, 0x2000100000006}) r3 = semget$private(0x0, 0x4, 0x40) setgroups(0x0, 0x0) seteuid(0xffffffffffffffff) syz_open_pts() semctl$GETVAL(r3, 0x2, 0x5, &(0x7f00000000c0)=""/240) r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r5 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) ioctl$VMM_IOC_CREATE(r5, 0xca605601, &(0x7f0000000300)={0x10, 0xcf, [{&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x3}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x3}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x6b12bf3f}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x4}, {&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x5}, {&(0x7f0000fec000/0x14000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x2b9f}, {&(0x7f0000ff0000/0x2000)=nil, &(0x7f0000fed000/0x1000)=nil, 0x81}, {&(0x7f0000ffb000/0x5000)=nil, &(0x7f0000ff1000/0x4000)=nil, 0x8000000000000001}, {&(0x7f0000ff4000/0x3000)=nil, &(0x7f0000ff7000/0x2000)=nil, 0x8903}, {&(0x7f0000ff3000/0xd000)=nil, &(0x7f0000ff3000/0x4000)=nil, 0xc3}, {&(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, 0x3}, {&(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x4}, {&(0x7f0000ff3000/0x1000)=nil, &(0x7f0000ff1000/0x4000)=nil, 0x4}, {&(0x7f0000fef000/0x1000)=nil, &(0x7f0000fec000/0x3000)=nil, 0x7}, {&(0x7f0000ff0000/0x5000)=nil, &(0x7f0000ffa000/0x6000)=nil, 0x6}], './file0\x00', 0x9, 0x1, 0x7, 0x80, [0x4, 0x40, 0x4, 0x2, 0x800000, 0xfff, 0x3, 0xa, 0x81, 0x2, 0x222, 0x8, 0x401, 0x3, 0x1ff, 0x4, 0x9, 0xffff, 0x43c4, 0x0, 0x10, 0x9, 0x7, 0x47, 0x6, 0x7, 0x8001, 0x0, 0x800, 0x0, 0x0, 0x5, 0xb, 0xd, 0x3, 0x5, 0x4, 0x8, 0x4, 0x0, 0x9, 0x0, 0x9, 0x7, 0x2, 0x3e0ea836, 0xb, 0x9519, 0x3, 0x166, 0x8, 0x9, 0x800, 0x6, 0x9, 0x7, 0x8, 0x3, 0x8000, 0x10000, 0xa6, 0x7, 0x9, 0x10001, 0x3, 0x5, 0xb8, 0x2, 0xffff, 0x4, 0x7, 0x10, 0x4, 0x7e1, 0x4, 0x3, 0x6, 0xfffffff9, 0x1, 0x5, 0x7, 0x5, 0x8, 0x80000001, 0x2, 0x8, 0x2, 0x5, 0x0, 0x200, 0x3, 0xe, 0x7, 0x7, 0x4, 0x1, 0x1, 0x8000, 0x5, 0x2, 0x7, 0x5, 0x9, 0xa, 0x9, 0x5, 0xff7d, 0x60a, 0x401, 0x8, 0x6f2a, 0x5, 0xe25, 0x4, 0x1, 0x9, 0x3, 0x76fc, 0x2, 0x8, 0x7fffffff, 0x8, 0x1, 0x1, 0xff, 0x0, 0x2, 0xc, 0xc4, 0x7, 0x2f8e, 0x6, 0x6, 0x8, 0x9, 0x7, 0x2, 0xd8, 0x3, 0x8, 0x8d, 0x4, 0xfffffffa, 0x7, 0x9, 0x8, 0x4, 0x5, 0xb, 0x6, 0x6, 0xf, 0x3ff, 0x3, 0x200, 0xd58, 0xffffffff, 0x4, 0x9, 0x2, 0x800, 0x2, 0x800, 0x48, 0x9, 0x9, 0x0, 0x3, 0xffff, 0xfffffc00, 0x3cf, 0x2, 0x8, 0x4, 0x4, 0x8, 0x674, 0x1, 0x9, 0x1, 0x2, 0x401, 0x4, 0x32fb3af2, 0x4, 0x9, 0x81, 0x7, 0x9, 0x3, 0x7fffffff, 0x6, 0x2, 0x80, 0x6, 0x7, 0x7, 0x5, 0x5, 0x40, 0x4, 0x3, 0x3ff, 0x8000, 0x9, 0x8, 0xb73e, 0x8001, 0x8001, 0x7, 0x0, 0x1, 0x1, 0x8, 0x7f8, 0x9, 0x6, 0xaa, 0x4, 0x51ae77ca, 0x3, 0x863, 0x5, 0x1, 0x1, 0x9, 0x0, 0x3, 0x7, 0x34c, 0x7, 0x3, 0x2, 0xffffffff, 0x1, 0x100, 0x6f, 0xb, 0x8, 0xd8d, 0x5, 0x401, 0x1, 0xfffffffd, 0x0, 0xe53, 0x100, 0x32e78901, 0x5, 0x5, 0x8, 0x36, 0x1, 0xfffffffb, 0x0, 0xea1, 0x5, 0xffff, 0x1ff, 0x1, 0x2, 0x6, 0x6, 0xffff, 0x2, 0x0, 0x0, 0x3, 0x52f73c4b, 0x3a, 0x5f, 0x3ff, 0x8, 0x8001, 0x3, 0x6, 0x9c1, 0x2, 0x4e30, 0x80000000, 0x1, 0xf, 0x5, 0x1, 0x2, 0x8, 0x6, 0x5, 0xb3ac, 0x8, 0x2, 0x2, 0xbd, 0x5, 0x9, 0x596390a0, 0x2, 0xd0, 0x4, 0x7, 0x800, 0x4000000, 0xffffffff, 0xa1, 0xd, 0x7, 0x7, 0x1, 0x148a, 0x8, 0x6, 0x6, 0x7fff, 0x94f, 0x6, 0x1, 0x6, 0x7, 0x8001, 0xc9, 0xf549, 0x7f, 0x9, 0x81, 0x9, 0x9, 0x0, 0x800, 0xa, 0x6, 0xffff0000, 0x0, 0xffffffff, 0x1, 0x6, 0xfffffff8, 0x81, 0x0, 0x800, 0x6, 0x2, 0x7c63, 0x3, 0x126112b3, 0x1, 0x2, 0x800, 0x401, 0x10000, 0x6, 0x44db, 0x70f, 0x4, 0x2000, 0x66, 0x8, 0x7, 0x8, 0x0, 0x0, 0x40, 0x100, 0xfffffffd, 0x0, 0x1, 0x2, 0x10001, 0xf53, 0x7, 0x0, 0x1, 0x1ff, 0xd75, 0x10000, 0x31, 0x97, 0x8000, 0x9, 0x29, 0x80, 0x3, 0x100, 0xfffffe00, 0x8, 0x800, 0x0, 0x1, 0xbec3, 0x0, 0x5, 0x80000000, 0x1ff, 0x2, 0xffff8000, 0xb20c, 0x7, 0xc0000000, 0x5, 0x2, 0x2, 0x80, 0xffff0001, 0xfff, 0x2, 0xff, 0x6, 0xfffffffb, 0x80, 0x7, 0x4, 0x1ff, 0x5, 0x7ff, 0x4, 0x3, 0xef, 0x7, 0x9, 0x6, 0x0, 0x0, 0x6, 0x9, 0xfc, 0x2f, 0x7ff, 0xffff7fff, 0x8, 0xc6, 0xfffffffb, 0x7, 0x8, 0xffffffff, 0xcf4, 0x7, 0x9, 0x81, 0x9, 0x8, 0x9, 0x9, 0x8, 0x0, 0x0, 0xff, 0x4, 0x2, 0xb, 0x3, 0x2, 0x1, 0x5, 0x0, 0x8, 0x100, 0x80000001, 0x9, 0xc50, 0x3, 0x4, 0x81, 0xd, 0x7, 0x4, 0x1, 0x32, 0x400, 0x82, 0xa8c, 0x3, 0x3ff, 0x6, 0x0, 0xa, 0x2, 0x1, 0x72e2bb9f, 0x0, 0xa, 0xbdce, 0x1, 0x6, 0x2, 0x8001, 0x2, 0x6, 0x44f, 0x3, 0xf02d, 0x0, 0x9998, 0x40, 0x41, 0x9, 0x8, 0x8, 0xe18, 0xfffff001, 0x140000, 0xf92d, 0x1, 0x5, 0x2, 0x7f, 0x1, 0x200, 0x5, 0x7ff, 0x10000, 0x9, 0x28ab, 0xd]}) ioctl$BIOCSETF(r4, 0x80104267, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x7, 0x65, 0x5, 0x5}, {0x80, 0x7, 0x4, 0x6}, {0xfffe, 0x0, 0x1c, 0x3}]}) ioctl$BIOCSETIF(r4, 0x8020426c, &(0x7f0000000440)={'tap', 0x0}) syz_emit_ethernet(0x4a, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd67d6c7c3001433c5fe8000000000000000000000000000bbfe8000000000000000000000000000aa4e234e21", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="005a0f00000000000000"]) 406.116258ms ago: executing program 6 (id=20): r0 = socket$inet(0x2, 0x1, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x7) r1 = open(&(0x7f0000000180)='./file0\x00', 0x200, 0xef) ioctl$TIOCSFLAGS(r1, 0x8004745c, &(0x7f0000000040)=0xfffffef9) setsockopt(r0, 0x6, 0x8, 0x0, 0x0) ioctl$VMM_IOC_INFO(r1, 0xc0185603, &(0x7f00000001c0)={0xcd, 0xa0, &(0x7f0000000080)=""/205}) getrusage(0xf423f, 0x0) 405.445331ms ago: executing program 3 (id=21): pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x10000) readlinkat(r0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=""/131, 0x83) (async) sysctl$ddb(&(0x7f0000000040)={0x9, 0xa}, 0x2, 0x0, 0x0, &(0x7f0000000100), 0x0) r1 = socket$inet(0x2, 0x5, 0x8) (async) sysctl$net_inet_icmp(&(0x7f0000000000)={0x4, 0x2, 0x1, 0x5}, 0x4, 0x0, 0x0, 0x0, 0x0) sysctl$kern(&(0x7f0000000000)={0x1, 0x3f}, 0x7, 0x0, 0x0, 0x0, 0x0) (async) sysctl$kern(&(0x7f0000000000)={0x1, 0x35}, 0x2, 0x0, 0x0, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) (async) sysctl$net_inet_icmp(&(0x7f0000000240)={0x4, 0x2, 0x1, 0x2}, 0x4, &(0x7f0000000280)="e763a94a054ddc63f0833626cb4bf5f658ee5fafbaf4e8f592e4a4f25f199a0870749c4e04e0086e723f56", &(0x7f00000002c0)=0x2b, &(0x7f00000003c0)="6da2920eb017a731d4b94471e059c1c0c83bf473c81fac2e63d7022188ce7f78d5eda6562f2a8e526e1a7b41819907a5286cd005757c4dd390b7502fedf019528acafbbb3dbdfc8b0812313b06e9802dd0f7bc6ab2deb28cd4e2877edead424f8c667fb367cab9bdfc2ca730b87a4877ea009617c6c393a795a05adee393654e5f63e065d7a78264f34a8480bbff677416e0144cfcd92cd1cf4bd6e79352d45e4ff9c304", 0xa4) (async) sysctl$net_inet_tcp(&(0x7f0000000000)={0x4, 0x2, 0x6, 0x11}, 0x4, 0x0, 0x0, &(0x7f0000000040)="283e36a0", 0x4) r2 = syz_open_pts() openat$bpf(0xffffffffffffff9c, &(0x7f0000001ec0), 0x20, 0x0) (async) r3 = socket$unix(0x1, 0x1, 0x0) closefrom(r3) (async) setrlimit(0x8, &(0x7f0000001ec0)={0x9, 0x37e1790c}) r4 = syz_open_pts() ioctl$TIOCSETA(r4, 0x802c7414, &(0x7f0000000040)={0x105, 0x5, 0xfffffbfa, 0xde6, "8efa6eb5a63215e6ffffffaea427df00", 0x8acd6, 0x200004}) ioctl$TIOCSTOP(r4, 0x2000746f) write(r2, &(0x7f0000000100)="97348c2c1102d4b56465370759a5e2f2d667aabf429921f8df", 0x19) (async) connect$inet(r1, &(0x7f0000000040)={0x10, 0x2, 0x2}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x10, 0x2, 0x3, 0x8}, 0x10) mknod(&(0x7f0000000000)='./file0\x00', 0x2008, 0x1ea8) sysctl$net_inet_tcp(&(0x7f0000000080)={0x4, 0x2, 0x6, 0x19}, 0x4, &(0x7f0000000100), 0x0, 0x0, 0x0) (async) r5 = open(&(0x7f0000000200)='./file0\x00', 0x9da, 0xc9) read$audio(r5, &(0x7f0000000300)=""/190, 0xbe) unveil(0x0, &(0x7f0000000040)='c\x00') (async) openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) 166.904211ms ago: executing program 4 (id=22): mkfifo(&(0x7f0000001380)='./file0\x00', 0x8) r0 = fcntl$getown(0xffffffffffffff9c, 0x5) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x4f14) ktrace(&(0x7f0000000080)='./file0\x00', 0x0, 0x80000000, 0x0) ktrace(&(0x7f0000000100)='./file0\x00', 0x1, 0x100, r0) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x28dd) r1 = open(&(0x7f0000000180)='./file0\x00', 0x19083084ca9cf73d, 0x6) writev(r1, &(0x7f0000000300)=[{&(0x7f00000000c0)="410946ec", 0x4}], 0x1) open$dir(&(0x7f00000001c0)='./file0\x00', 0x200, 0x80) ktrace(&(0x7f0000000040)='./file0\x00', 0x4, 0x814, 0x0) r2 = getpid() ktrace(&(0x7f0000000080)='./file0\x00', 0x0, 0x1400, r2) unveil(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='c\x00') 165.685924ms ago: executing program 3 (id=23): ioctl$VMM_IOC_WRITEREGS(0xffffffffffffffff, 0x82485608, &(0x7f0000000100)={0x3, 0x6, 0x401, {[0x6, 0x2, 0x80000001, 0x0, 0x7, 0x200, 0x80000001, 0x9, 0x0, 0x0, 0x1ff, 0xffff, 0x7fff, 0x692, 0x0, 0x22, 0x2, 0xf], [0x3, 0x7fffffff, 0x7, 0x6, 0x8001, 0x101, 0x18000000, 0x2, 0x5, 0x1], [0x2, 0x2, 0x1, 0x80, 0x3, 0xfffffffffffffffe, 0x1000], [0x10000, 0xd, 0x8000, 0x2, 0xd9, 0x9], [{0x400, 0x8, 0xce, 0x400}, {0x3, 0x2, 0x3, 0x400}, {0x1, 0x547, 0x4e0ec4e4, 0x6}, {0x6, 0xeb82, 0x7fffffff, 0x1b}, {0xd, 0x40000007, 0x6, 0x7}, {0x0, 0x1, 0x2, 0x1}, {0x4, 0xa, 0x1, 0x5}, {0x1, 0x6fb, 0x10000, 0x2}], {0x7fff, 0x0, 0xc687, 0x2}, {0x11b, 0x4, 0x80000000, 0xfffffffffffffffc}}}) mknod(&(0x7f0000000040)='./file0\x00', 0x2000, 0x33a5) r0 = open(&(0x7f0000001980)='./file0\x00', 0x80, 0xc3) ioctl$TIOCCONS(r0, 0xc0a86b03, &(0x7f0000000140)=0x1) mkdir(&(0x7f0000000400)='./file0\x00', 0x148) chmod(&(0x7f00000000c0)='./file0\x00', 0x19b) seteuid(0xffffffffffffffff) mkdir(&(0x7f0000000200)='./file0/file0\x00', 0x120) 164.463878ms ago: executing program 3 (id=24): mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0xd01) r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$DIOCRSETADDRS(r0, 0xc4504445, &(0x7f0000000900)={{'./file0\x00', './file0/file0\x00', 0x5}, &(0x7f0000000740)=[{@remote={0xac, 0x14, 0x0}, '\x00', './file0\x00', 0x7, 0xfff, 0x0, 0xda, 0x2, 0x4, 0x5}, {@local={0xac, 0x14, 0x0}, '\x00', './file0\x00', 0x3, 0x1000, 0x30, 0x6, 0x7, 0x9, 0x2b}, {@multicast2, '\x00', './file0\x00', 0x8, 0x2, 0x18, 0x7f, 0x4, 0x3, 0xff}, {@multicast1, '\x00', './file0/file0\x00', 0x7f, 0x6, 0x18, 0xff, 0xc2, 0x3, 0x79}, {@multicast2, '\x00', './file0\x00', 0x6, 0x6, 0x2, 0x6, 0xb, 0x9, 0x40}, {@loopback, '\x00', './file0\x00', 0x0, 0x9, 0x0, 0x5, 0xd, 0x5, 0x1c}, {@empty, '\x00', './file0\x00', 0x0, 0x1, 0x0, 0xe9, 0xf8, 0x2, 0x3}, {@broadcast, '\x00', './file0\x00', 0x0, 0x3, 0x0, 0x1, 0x1, 0x9, 0x3}], 0x2, 0x8, 0x5, 0x2, 0x0, 0x4, 0x5c, 0x80}) r1 = open(&(0x7f0000000180)='./file0\x00', 0x200, 0xcf) mmap(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x4, 0x2011, r1, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x2, 0xcf) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x11, r2, 0x0) mlock(&(0x7f0000ff5000/0xb000)=nil, 0xb000) ppoll(&(0x7f0000000640)=[{r2, 0x10}], 0x1, &(0x7f0000000680)={0x9, 0x9}, &(0x7f00000006c0)={0x6}) munmap(&(0x7f0000fea000/0x13000)=nil, 0x13000) r3 = open(&(0x7f0000001980)='./file0\x00', 0x80, 0xc3) socketpair(0x6, 0x1000, 0x8, &(0x7f0000000040)={0xffffffffffffffff}) pwritev(r4, &(0x7f00000005c0)=[{&(0x7f00000000c0)="e1ed2b39e75784a73a0124b772715f92da9b25224b7c5dca228e973f7812f2183e9aef86607f3742f971a77219e22ad30bbdebca0c1d3831ad77ae59a4fc490dbdefc26faa05a48f1b7e2f8589fb9ea340e7bee4e80a67e22fa191f7fa6db3841655f6f675e7e2bcd94b083f406ea1a34e054a1d1b8929d747f75ae5abf2664d3e63d20cc0bdbba2b208e7032e13", 0x8e}, {&(0x7f00000001c0)="49382dc223b47d5096426d22bcc327eda210c094bd7931d80d73fc8c085eb477f21c69401ae1d13de6c4ac0ea873cb44b98735804036381b70616eda96c5f09cc49dfc5e0540ca07d1e82042e36619e71b0e1125e70f73a1d698f584c5f9915c82726ccc929afee446d005710f90bb5a484010d0a2199588780ac4848bbde0fe502866f7348f0e6e18705825507210b9776c086c2b383cf57f5ee46db4a93a9c0ba6b6ad5c26b58b195439b7b5da9d8d679cd49ee08bd23af45f71126d687c46aabf6ddff0a790b665a2af14fa35adf85837fc48fa9527093934402f83239df006322f1af61695e34d8e7548c1dd76ce039dde2845f3", 0xf6}, {&(0x7f00000002c0)="7632564526d98b73515bd83d9e7057e24662358ebe33c933904257fb1c16a9236615ced99a01c0bbef6d0f7604f620e3e377f8193a536538", 0x38}, {&(0x7f0000000300)="14196629b86c328e2178d86a2ab83a36b075a579001506ae230bc6561bc7e0578e76b6d25b73043aea1e806a", 0x2c}, {&(0x7f0000000340)="5e2bb947871ececacc2c2899dc28e2ce55e621e6ce725da275e626b28a43ee58bfdb8e794c922b0840224860263778d6cad450b8cb533be34ff1144feb73185ae6fbfb4d9ac48ae68037061be25c6481931d5b77ec0a058c7a72abbd3db56c2b02782f9a054c7240536ffc496972e3a7c56398e291da1c1520738d0f491e7b8379a6c5b7b5a179ad52219b6237df8c93ae52380f078bbfa8577295e934bacea9fc6177a12159911b2f9f52e4c84ee3fc617c", 0xb2}, {&(0x7f0000000400)="8768d05dd431ff1a8718794dbfdd4cb83a1a6083825db156b7b16555f232dd42282224e69abc8959b05659d856eb605e849d1824f46fb63c3c3679f7f15228ad610344191efd010f8f488a040c0cc74d15c996c0fe120c227bbd0470d85c9255fa1b5ad32be09f8cf89223e837b75ecd921f6b4ae8b26b6b12786e98f613aaeaae00059e0512e425c434d6db0b9f578ab3747dc6b50bfb6afa843d42f66e9d2432ba0fac79c8639e55c831142e1b3fbebd0f779b0b2e06057dc63dcd1b0db8131011f6cc114ffb9a92d8dadb557206fa0233426693844787b626e7aeb2e2ba371485e662fc5c386ddd963aefd507", 0xee}, {&(0x7f0000000500)="c5765d320f2250d08e6c8a8734b29681caa389971c998e88bcc2ec090d821f90367ccb93822a5852846174e3e6e786ed7b4ae3a61f4db789e6cc5b6b87162bd19e6ae5c3118b8cf68e7f9fcc009698d4b6f35d4bcefb2a8e970fb696", 0x5c}, {&(0x7f0000000580)="f4c339d2d851c635a0d29f", 0xb}], 0x8, 0x4) execve(0x0, 0x0, &(0x7f00000002c0)=[&(0x7f0000000180)=')$/\x00-\x86Qw\xaaN\xd3[\x04\x95\xf7*\x12\x8f\xa4\v\x13$P\xe9\xb1\xf0M\x0f`,\f\x10\xdb\nh(\xff\xabD\x90\x06\x98\xeb\x9f\x9caB%\x92\xf2@\xc8\xe6w\xbd\xb1u\x82\x00*e\xdf\"\xbfF\xf7\xba\b\xb8\x12\xe4\xa6F\x00_k\xc2\x91t\xc8\xa6D\xae3\xbf\xd2(\f\x8b\x14\xcc\x1ckB\xc1$\xbb#\x80|\xb8{\xa6`\xdbYd\xa4?\xd1@\xca\xcf\xa0\xe7\xf3\xf3\x04\f\xe7\x82\x8d*wW\xb3Vw\x0f\xf4uI4\xe9\x0f_\x03~q\xfd\x18\xb9G\xba\b\x176?g\x8c\x12\b\xb724\b\"\xf7\x9c\x16\xfeq\xf3\xf6I>\xd0']) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) mkdir(&(0x7f0000000180)='./file0\x00', 0x2) msgrcv(0x0, 0x0, 0x0, 0x2, 0x1000) msgctl$IPC_SET(0x0, 0x1, 0x0) r5 = socket$inet6(0x18, 0x8000, 0x5) connect$inet6(r5, &(0x7f0000000000)={0x1c, 0x18, 0x1, 0x41, "000000000000000000000000000000fe", 0xc0000}, 0x1c) ioctl$TIOCSETD(r3, 0x44946472, &(0x7f0000000080)=0x3) 163.349482ms ago: executing program 1 (id=25): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) ioctl$BIOCSETF(r0, 0x80104267, 0xffffffffffffffff) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) preadv(r1, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/222, 0xde}], 0x1, 0xfffffffffffffffc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) syz_emit_ethernet(0x13a1, &(0x7f0000000280)=ANY=[]) 162.96914ms ago: executing program 5 (id=6): pselect(0x40, &(0x7f0000000000)={0x49f, 0x1, 0x40000008000039, 0x1, 0x1, 0x1, 0xb635, 0x7fff}, 0x0, 0x0, 0x0, 0x0) sysctl$kern(&(0x7f0000000000)={0x1, 0x42}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f000037b000/0x1000)=nil, 0x1000, 0x2) sysctl$kern(&(0x7f0000000000)={0x1, 0x49}, 0x6, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f0000000000)={0x4, 0x5, 0x9, 0x6, "2feac1b1549b000000c8bd00", 0x0, 0xf407}) wait4(0x0, 0x0, 0x1, 0x0) sysctl$kern(&(0x7f0000000000)={0x1, 0x33}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x4) r0 = syz_open_pts() getgroups(0x3, &(0x7f0000000280)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff]) getgroups(0x7, &(0x7f0000001900)=[0x0, 0x0, r2, r1, r2, r1, 0x0]) setregid(0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) getsockopt$sock_cred(r5, 0xffff, 0x1022, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000140)=0xc) setresuid(r6, r6, 0x0) r7 = semget$private(0x0, 0x4, 0x2b1) semctl$IPC_SET(r7, 0x0, 0x1, &(0x7f0000000180)={{r6, r3, r6, r4, 0x100, 0x8, 0x0, 0x0, 0x9}, 0x0, 0x6, 0x0, 0x0, 0xc, 0x0, 0x2d}) semctl$GETZCNT(r7, 0x2, 0x7, 0x0) r8 = getgid() lstat(&(0x7f0000000340)='./file0\x00', 0x0) semctl$IPC_SET(r7, 0x0, 0x1, &(0x7f00000002c0)={{0x0, r8, 0x0, 0x0, 0x14, 0x100, 0x0, 0x0, 0x50e}, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2}) openat$bpf(0xffffffffffffff9c, &(0x7f0000001ec0), 0x800, 0x0) closefrom(0xffffffffffffffff) setrlimit(0x8, &(0x7f0000000200)={0x9, 0x37e1790c}) syz_open_pts() chown(&(0x7f00000000c0)='./file0\x00', r6, 0x0) ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000000)={0x5, 0x7, 0xfffffc01, 0x80c2, "2f4aba96a953eac1b1549b00", 0x8acd7, 0x200006}) write(r0, &(0x7f0000000400)="97348c2c1102d4b56465370759a5e2f2d667aabf429921f8dfed8549da53f211b05a139150b97dc8c3914842eed8ac4a9809c6a6a48f0505b69c996663e15f87315b54eb1d1a3d1feebae92890", 0x4d) sysctl$vm_swapencrypt(&(0x7f0000000000), 0x3, 0x0, 0x0, 0x0, 0x0) sysctl$hw(&(0x7f0000000180)={0x6, 0x8}, 0x2, 0x0, 0x0, &(0x7f0000000040)="746cb98887235e9a1467b232901ee7470928f57e248ec601efee04bd77661c33a7f0f1035b2e7fad4f52b9a567cad9545d4477eaa8dc7a8d41f57c4623811a6212c8c5d3a2d33f78b10a5d1d70e57a5e1c1e116526692c79f52737a001000100cad3eb99123b6c6ff29a577a8d37a054f9c6db533e936e84", 0x78) 24.523508ms ago: executing program 7 (id=26): openat$pci(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) r0 = openat$pci(0xffffffffffffff9c, &(0x7f0000000600), 0x8000, 0x0) futimens(r0, &(0x7f0000000640)=[{0xece4, 0xfffffffffffffffe}, {0x7fff, 0x793}]) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x28dd) r1 = open(&(0x7f0000000180)='./file0\x00', 0x19083084ca9cf73d, 0x2) writev(r1, &(0x7f0000000300)=[{&(0x7f00000000c0)="410946ec", 0x4}], 0x1) ioctl$PCIOCREAD(r0, 0xc0107002, &(0x7f0000000040)={{0x0, 0x7}, 0xff, 0x4}) mknod(&(0x7f0000000000)='./file0\x00', 0x8080, 0x2005d42) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x200, 0x0) ioctl$FIOASYNC(r2, 0x400474c4, 0x0) 23.831368ms ago: executing program 1 (id=27): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x1, 0x68, 0x5, 0x5}, {0x80, 0x7, 0x9, 0x8000}, {0x6, 0x0, 0x1c, 0x3}]}) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) sysctl$kern(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) msgget(0x2, 0x203) getgroups(0x0, &(0x7f0000000140)) seteuid(0xffffffffffffffff) socket$inet6(0x18, 0x3, 0x2) mquery(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, 0xffffffffffffffff, 0xa) socket$unix(0x1, 0x5, 0x0) semget(0x3, 0x2, 0x219) seteuid(0xffffffffffffffff) semget(0x3, 0x1, 0x90) sysctl$kern(0x0, 0x0, &(0x7f0000000040)="624e27f6ecc28cf85e9960b325d5c24b0b6796a9b3af7f564015992ca8fc233ed4a7d2637c12a874feb3773130c9c6fce482474af3ad6b37286ecd681b798c8806c5653162b0000069cf22a7439e9d4d7c5a9e7c4c534af6f6461be335fb1fca7a10b7bdb26939687f1c5b9ea3008799ab22d1def7312a9fc163061561db3ea057d9c963f83590827c25adf2ea4145", 0x0, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000140)=ANY=[@ANYRES8]) 23.527718ms ago: executing program 1 (id=28): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000001100)='W', 0x1) dup2(r0, r1) fstat(r0, &(0x7f0000000040)) sysctl$net_inet6_ip6(&(0x7f00000001c0)={0x4, 0x18, 0x29, 0x2b}, 0x4, 0x0, 0x0, 0x0, 0x0) 22.511703ms ago: executing program 1 (id=29): recvmsg(0xffffffffffffffff, &(0x7f0000002040)={0x0, 0x0, 0x0, 0x7, &(0x7f0000001f80)=""/136, 0x88}, 0x0) chflags(&(0x7f0000000000)='./file0\x00', 0x10001) 22.246908ms ago: executing program 6 (id=30): mkdir(&(0x7f0000000640)='./file0\x00', 0x40) rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000080)='./file0\x00', 0x204) r0 = semget(0x2, 0x939e20d970dd89e9, 0x8) semctl$SETALL(r0, 0x0, 0x9, &(0x7f0000000180)=[0x7]) r1 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) ioctl$WSDISPLAYIO_USEFONT(r1, 0x80585750, &(0x7f0000000100)={'./file1/file0\x00', 0x9, 0xff, 0x1000, 0x0, 0x3, 0x200, 0x1, 0x1, 0x2, 0xa, 0x562}) rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file1\x00') 0s ago: executing program 0 (id=1): getgroups(0x40000000000001f6, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]) setresgid(r1, r0, 0x0) r2 = socket$inet(0x2, 0x8003, 0x1) getsockopt(r2, 0x0, 0x6a, 0x0, 0x0) setgroups(0x0, 0x0) seteuid(0xffffffffffffffff) r3 = syz_open_pts() ioctl$TIOCCONS(r3, 0x80047462, &(0x7f0000002a80)=0x8) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.216' (ED25519) to the list of known hosts. uvm_fault(0xffff800001c83b90, 0x0, 0, 1) -> e kernel: page fault trap, code=0 Stopped at sys_shmat+0x7e2: movq 0(%r12),%rdi TID PID UID PRFLAGS PFLAGS CPU COMMAND 274405 45313 0 0 0 0 syz-executor *199001 45313 0 0 0x4000000 1K syz-executor sys_shmat(ffff800045ff4a88,ffff80002e2e4c00,ffff80002e2e4b60) at sys_shmat+0x7e2 syscall(ffff80002e2e4c00) at syscall+0x1089 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xa198b5d070, count: 12 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{1}> ddb{1}> set $lines = 0 ddb{1}> set $maxwidth = 0 ddb{1}> show panic *cpu1: uvm_fault(0xffff800001c83b90, 0x0, 0, 1) -> e ddb{1}> show kasan kasan: no report recorded this boot ddb{1}> trace sys_shmat(ffff800045ff4a88,ffff80002e2e4c00,ffff80002e2e4b60) at sys_shmat+0x7e2 syscall(ffff80002e2e4c00) at syscall+0x1089 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xa198b5d070, count: -3 ddb{1}> show registers rdi 0 rsi 0x800000000000 rbp 0xffff80002e2e4a70 rbx 0xffff800001c30ee0 rdx 0x7 rcx 0xffff808000000000 rax 0x1 r8 0x8 r9 0x1 r10 0 r11 0xffffffff85548e58 kasan_depot_arena+0x74e58 r12 0 r13 0xffff800001c65008 r14 0x3 r15 0x2000 __ALIGN_SIZE+0x1000 rip 0xffffffff815cfee2 sys_shmat+0x7e2 cs 0x8 rflags 0x10282 __ALIGN_SIZE+0xf282 rsp 0xffff80002e2e4960 ss 0x10 sys_shmat+0x7e2: movq 0(%r12),%rdi ddb{1}> show proc PROC (syz-executor) tid=199001 pid=45313 tcnt=3 stat=onproc flags process=0 proc=4000000 runpri=62, usrpri=63, slppri=36, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff800045ff4028,0xffffffff85dd2f40 process=0xffff800045ff26a0 user=0xffff80002e2d9000, vmspace=0xffff800001c83b90 estcpu=13, cpticks=1, pctcpu=0.0, user=0, sys=1, intr=0 ddb{1}> ps PID TID PPID UID S PRLAGS PFLAGS WAIT COMMAND 45313 274405 79804 0 7 0 0 syz-executor 45313 400025 79804 0 2 0 0x4000000 syz-executor *45313 199001 79804 0 7 0 0x4000000 syz-executor 15560 347909 6518 0 2 0 0 syz-executor 54793 407981 58299 0 2 0 0 syz-executor 54793 524024 58299 0 3 0 0x4000080 fsleep syz-executor 54793 349216 58299 0 3 0 0x4000080 fsleep syz-executor 38760 242424 22230 0 2 0 0 syz-executor 79315 197259 80104 0 3 0 0x80 nanoslp syz-executor 79315 281978 80104 0 3 0 0x4000080 msgwait syz-executor 79315 15890 80104 0 3 0 0x4000080 fsleep syz-executor 79315 155081 80104 0 3 0 0x4000080 fsleep syz-executor 44286 477849 74697 0 3 0x2 0 biowait syz-executor 65665 362527 74697 0 2 0x2 0 syz-executor 22230 142568 74697 0 3 0x2 0x80 nanoslp syz-executor 79804 52438 74697 0 3 0x2 0x80 nanoslp syz-executor 80104 4315 74697 0 3 0x2 0x80 nanoslp syz-executor 89319 423886 74697 0 2 0x2 0 syz-executor 6518 186028 74697 0 3 0x2 0x80 nanoslp syz-executor 58299 419274 74697 0 3 0x2 0x80 nanoslp syz-executor 74697 160899 85932 0 3 0x2 0x80 kqread syz-executor 85932 266824 67465 0 3 0x100002 0x88 sigsusp ksh 67465 18190 86537 0 3 0x10 0x88 kqread sshd-session 86537 453543 43903 0 3 0x12 0x80 kqread sshd-session 61722 307972 1 0 3 0x100003 0x80 ttyin getty 43903 48112 1 0 3 0 0x88 kqread sshd 1050 62119 55030 74 3 0x1100012 0x80 bpf pflogd 55030 279601 1 0 3 0 0x80 sbwait pflogd 63168 11479 6914 73 3 0x1100010 0x80 kqread syslogd 6914 358837 1 0 3 0x100002 0x80 sbwait syslogd 99087 175023 1 0 3 0x100000 0x80 kqread resolvd 16284 279648 60906 77 3 0x100012 0x80 kqread dhcpleased 2697 334966 60906 77 3 0x100012 0x80 kqread dhcpleased 60906 398618 1 0 3 0 0x80 kqread dhcpleased 14 207748 0 0 3 0x14000 0x200 bored smr 493 391788 0 0 2 0x14000 0x200 zerothread 88078 334516 0 0 3 0x14000 0x200 aiodoned aiodoned 5582 109170 0 0 3 0x14000 0x200 syncer update 58466 296700 0 0 3 0x14000 0x200 cleaner cleaner 83951 412272 0 0 3 0x14000 0x200 reaper reaper 46334 201186 0 0 3 0x14000 0x200 pgdaemon pagedaemon 4976 486525 0 0 3 0x14000 0x200 bored viomb 88042 24812 0 0 3 0x14000 0x40000200 acpi0 acpi0 91503 264924 0 0 3 0x14000 0x40000200 idle1 59810 345455 0 0 3 0x14000 0x200 bored softnet1 38774 274630 0 0 3 0x14000 0x200 bored softnet0 97336 349920 0 0 3 0x14000 0x200 bored systqmp 5895 236432 0 0 3 0x14000 0x200 bored systq 170 80366 0 0 3 0x14000 0x200 tmoslp softclockmp 49207 461868 0 0 3 0x14000 0x40000200 tmoslp softclock 22489 514069 0 0 3 0x14000 0x40000200 idle0 1 96555 0 0 3 0x2 0x80 wait init 0 0 -1 0 3 0x10000 0x200 scheduler swapper ddb{1}> show all locks Process 45313 (syz-executor) thread 0xffff800045ff4a88 (199001) exclusive kernel_lock &kernel_lock r = 0 (0xffffffff85dbfe80) #0 witness_lock+0x632 #1 syscall+0x1048 #2 Xsyscall+0x128 Process 44286 (syz-executor) thread 0xffff800029942a78 (477849) exclusive rrwlock inode r = 0 (0xffff800001ced0f8) #0 witness_lock+0x632 #1 rw_do_enter_write+0x53e #2 rrw_enter+0xf0 #3 VOP_LOCK+0x17e #4 vn_lock+0xca #5 vget+0x321 #6 ufs_ihashget+0x233 #7 ffs_vget+0x10b #8 ufs_lookup+0x1529 #9 VOP_LOOKUP+0xda #10 vfs_lookup+0xfbd #11 namei+0xe19 #12 dounlinkat+0x102 #13 syscall+0x1089 #14 Xsyscall+0x128 exclusive rrwlock inode r = 0 (0xffff800001c20a30) #0 witness_lock+0x632 #1 rw_do_enter_write+0x53e #2 rrw_enter+0xf0 #3 VOP_LOCK+0x17e #4 vn_lock+0xca #5 vfs_lookup+0x1f7 #6 namei+0xe19 #7 dounlinkat+0x102 #8 syscall+0x1089 #9 Xsyscall+0x128 Process 65665 (syz-executor) thread 0xffff800029942d10 (362527) exclusive rwlock vmmaplk r = 0 (0xffff800001c83120) #0 witness_lock+0x632 #1 rw_do_enter_write+0x53e #2 vm_map_lock_ln+0x19f #3 uvmspace_fork+0x1a2 #4 process_new+0x6aa #5 fork1+0x533 #6 syscall+0x1089 #7 Xsyscall+0x128 exclusive rwlock vmmaplk r = 0 (0xffff800000d878a0) #0 witness_lock+0x632 #1 rw_do_enter_write+0x53e #2 vm_map_lock_ln+0x19f #3 uvmspace_fork+0x94 #4 process_new+0x6aa #5 fork1+0x533 #6 syscall+0x1089 #7 Xsyscall+0x128 ddb{1}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 11051 12242K 12317K 166960K 12165 0 pcb 17 24K 24K 166960K 19 0 rtable 223 11K 12K 166960K 333 0 pf 34 22K 23K 166960K 48 0 ifaddr 41 11K 11K 166960K 44 0 ifgroup 55 2K 2K 166960K 60 0 sysctl 1 1K 13K 166960K 5 0 counters 70 42K 43K 166960K 72 0 ioctlops 0 0K 4K 166960K 1488 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1292 83K 83K 166960K 1375 0 UFS quota 1 36K 36K 166960K 1 0 UFS mount 5 44K 44K 166960K 5 0 shm 3 6K 6K 166960K 3 0 VM map 2 1K 1K 166960K 2 0 sem 7 0K 0K 166960K 7 0 dirhash 12 2K 2K 166960K 12 0 ACPI 1734 201K 292K 166960K 11964 0 file desc 16 57K 93K 166960K 157 0 proc 69 128K 177K 166960K 550 0 subproc 72 9K 9K 166960K 72 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 20K 20K 166960K 1 0 in_multi 89 6K 6K 166960K 89 0 ether_multi 1 0K 0K 166960K 1 0 mrt 0 0K 0K 166960K 3 0 ISOFS mount 1 36K 36K 166960K 1 0 MSDOSFS mount 1 20K 20K 166960K 1 0 ttys 31 222K 222K 166960K 31 0 exec 0 0K 2K 166960K 379 0 fusefs mount 1 36K 36K 166960K 1 0 tdb 3 1K 1K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 215 232K 249K 166960K 3325 0 UVM aobj 3 4K 4K 166960K 3 0 pinsyscall 1065 1721K 1729K 166960K 1304 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 NDP 16 0K 1K 166960K 27 0 temp 37 9170K 9178K 166960K 4376 0 kqueue 14 44K 44K 166960K 27 0 SYN cache 2 16K 16K 166960K 2 0 ddb{1}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 28 0 0 1 0 1 1 0 8 0 rtpcb 120 32 0 29 1 0 1 1 0 8 0 rtentry 176 104 0 1 5 0 5 5 0 8 0 unpcb 144 59 0 42 1 0 1 1 0 8 0 syncache 336 4 0 4 2 2 0 1 0 8 0 tcpcb 736 10 0 6 1 0 1 1 0 8 0 arp 136 18 0 0 1 0 1 1 0 8 0 inpcb 328 70 0 63 1 0 1 1 0 8 0 nd6 152 21 0 0 1 0 1 1 0 8 0 kcovpl 48 8 0 0 1 0 1 1 0 8 0 pfosfp 40 1428 0 1005 5 0 5 5 0 8 0 pfosfpen 112 1428 0 714 21 0 21 21 0 8 0 pfstitem 24 17 0 0 1 0 1 1 0 8 0 pfstkey 128 17 0 0 1 0 1 1 0 8 0 pfstate 448 17 0 0 2 0 2 2 0 8 0 pfrule 1360 21 0 16 2 1 1 2 0 8 0 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 412 0 0 26 0 26 26 0 8 0 art_table 40 413 0 0 5 0 5 5 0 8 0 art_node 32 104 0 10 1 0 1 1 0 8 0 semapl 72 5 0 0 1 0 1 1 0 8 0 shmpl 112 1 0 0 1 0 1 1 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino2pl 256 1608 0 138 93 0 93 93 0 8 0 ffsino 296 1608 0 138 114 0 114 114 0 8 0 nchpl 144 1831 0 133 64 0 64 64 0 8 0 vnodes 216 1704 0 0 95 0 95 95 0 8 0 namei 1024 5577 0 5577 2 1 1 1 0 8 1 percpumem 16 52 0 1 1 0 1 1 0 8 0 kstatmem 264 29 0 2 2 0 2 2 0 8 0 scxspl 216 6788 0 6787 3 2 1 2 1 8 0 plimitpl 152 31 0 14 1 0 1 1 0 8 0 sigapl 424 474 0 428 8 1 7 7 0 8 1 knotepl 120 50 0 0 2 0 2 2 0 8 0 kqueuepl 224 25 0 15 1 0 1 1 0 8 0 pipepl 344 131 0 104 3 0 3 3 0 8 0 fdescpl 528 458 0 428 3 0 3 3 0 8 0 filepl 160 1660 0 1448 10 0 10 10 0 8 0 lockfpl 104 12 0 10 1 0 1 1 0 8 0 lockfspl 48 7 0 5 1 0 1 1 0 8 0 sessionpl 144 25 0 16 1 0 1 1 0 8 0 pgrppl 48 33 0 16 1 0 1 1 0 8 0 ucredpl 104 100 0 87 1 0 1 1 0 8 0 zombiepl 144 439 0 439 2 1 1 1 0 8 1 processpl 1232 474 0 428 5 0 5 5 0 8 0 procpl 664 519 0 466 6 0 6 6 0 8 0 sosppl 176 1 0 1 1 0 1 1 0 8 1 sockpl 752 162 0 135 4 0 4 4 0 8 1 mcl8k 8192 3 0 0 1 0 1 1 0 8 0 mcl4k 4096 120 0 0 15 0 15 15 0 8 0 mcl2k 2048 27 0 0 4 0 4 4 0 8 0 mextrefs 64 28 0 0 1 0 1 1 0 8 0 mtagpl 96 3 0 0 1 0 1 1 0 8 0 mbufpl 256 157 0 0 10 0 10 10 0 8 0 bufpl 272 2405 0 105 155 1 154 154 0 8 0 anonpl 32 3844 0 0 31 0 31 31 0 222 0 amapchunkpl 152 9080 0 8659 20 1 19 19 0 158 0 amappl16 200 1909 0 1894 5 4 1 5 0 8 0 amappl15 192 28 0 28 1 1 0 1 0 8 0 amappl14 184 428 0 427 1 0 1 1 0 8 0 amappl13 176 131 0 119 1 0 1 1 0 8 0 amappl12 168 723 0 695 2 0 2 2 0 8 0 amappl11 160 3 0 2 2 1 1 1 0 8 0 amappl10 152 73 0 58 1 0 1 1 0 8 0 amappl9 144 286 0 286 1 1 0 1 0 8 0 amappl8 136 134 0 132 1 0 1 1 0 8 0 amappl7 128 159 0 146 1 0 1 1 0 8 0 amappl6 120 154 0 152 1 0 1 1 0 8 0 amappl5 112 102 0 92 1 0 1 1 0 8 0 amappl4 104 292 0 272 1 0 1 1 0 8 0 amappl3 96 1595 0 1496 3 0 3 3 0 8 0 amappl2 88 538 0 479 2 0 2 2 0 8 0 amappl1 80 10469 0 9865 16 1 15 15 0 8 0 amappl 88 2599 0 2455 4 0 4 4 0 92 0 uvmvnodes 80 98 0 0 2 0 2 2 0 8 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 3 0 0 1 0 1 1 0 8 0 uaddrrnd 24 458 0 428 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 458 0 428 1 0 1 1 0 8 0 vmmpekpl 168 5895 0 5863 2 0 2 2 0 8 0 vmmpepl 168 38993 0 37195 89 1 88 88 0 357 3 vmsppl 488 457 0 428 5 0 5 5 0 8 1 rwobjpl 80 14821 0 13823 23 0 23 23 0 8 0 pdppl 4096 924 0 856 106 26 80 86 0 8 12 pvpl 32 9881 0 0 80 0 80 80 0 265 0 pmappl 256 457 0 428 3 0 3 3 0 8 0 extentpl 40 46 0 28 1 0 1 1 0 8 0 phpool 120 429 0 33 13 0 13 13 0 8 0 ddb{1}> machine ddbcpu 0 Stopped at x86_ipi_db+0x19: leave x86_ipi_db(ffffffff850c1ff0) at x86_ipi_db+0x19 x86_ipi_handler() at x86_ipi_handler+0x112 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __mp_lock(ffffffff85dbf680) at __mp_lock+0x272 intr_handler(ffff80003b350770,ffff800000170180) at intr_handler+0x113 Xintr_ioapic_edge23_untramp() at Xintr_ioapic_edge23_untramp+0x18f spllower(0) at spllower+0xf9 pvclock_get(ffffffff85203ec0) at pvclock_get+0x19b nanouptime(ffff80003b350ac0) at nanouptime+0x8b clock_gettime(ffff800045ff47f0,3,ffff80003b350ac0) at clock_gettime+0xef sys_clock_gettime(ffff800045ff47f0,ffff80003b350ce0,ffff80003b350c40) at sys_clock_gettime+0xa7 syscall(ffff80003b350ce0) at syscall+0x1089 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7ec7512ffe40, count: 2 ddb{0}> trace x86_ipi_db(ffffffff850c1ff0) at x86_ipi_db+0x19 x86_ipi_handler() at x86_ipi_handler+0x112 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __mp_lock(ffffffff85dbf680) at __mp_lock+0x272 intr_handler(ffff80003b350770,ffff800000170180) at intr_handler+0x113 Xintr_ioapic_edge23_untramp() at Xintr_ioapic_edge23_untramp+0x18f spllower(0) at spllower+0xf9 pvclock_get(ffffffff85203ec0) at pvclock_get+0x19b nanouptime(ffff80003b350ac0) at nanouptime+0x8b clock_gettime(ffff800045ff47f0,3,ffff80003b350ac0) at clock_gettime+0xef sys_clock_gettime(ffff800045ff47f0,ffff80003b350ce0,ffff80003b350c40) at sys_clock_gettime+0xa7 syscall(ffff80003b350ce0) at syscall+0x1089 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7ec7512ffe40, count: -13 ddb{0}> machine ddbcpu 1 Stopped at sys_shmat+0x7e2: movq 0(%r12),%rdi sys_shmat(ffff800045ff4a88,ffff80002e2e4c00,ffff80002e2e4b60) at sys_shmat+0x7e2 syscall(ffff80002e2e4c00) at syscall+0x1089 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xa198b5d070, count: 12 ddb{1}> trace sys_shmat(ffff800045ff4a88,ffff80002e2e4c00,ffff80002e2e4b60) at sys_shmat+0x7e2 syscall(ffff80002e2e4c00) at syscall+0x1089 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xa198b5d070, count: -3