last executing test programs: 1.536259442s ago: executing program 6 (id=7): socketpair(0x1, 0x3, 0x7, 0x0) r0 = openat$speaker(0xffffffffffffff9c, &(0x7f0000001740), 0x80, 0x0) readv(r0, &(0x7f0000001600)=[{&(0x7f0000000040)=""/35, 0x23}, {&(0x7f0000000080)=""/232, 0xe8}, {&(0x7f0000000180)=""/173, 0xad}, {&(0x7f0000000240)=""/130, 0x82}, {&(0x7f0000000300)=""/66, 0x42}, {&(0x7f0000000380)=""/254, 0xfe}, {&(0x7f0000000480)=""/111, 0x6f}, {&(0x7f0000000500)=""/113, 0x71}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/98, 0x62}], 0xa) r1 = openat$speaker(0xffffffffffffff9c, &(0x7f00000016c0), 0x20000, 0x0) ioctl$SPKRTONE(r1, 0x80085301, &(0x7f0000001700)={0x0, 0x4}) r2 = getpgrp() fcntl$setown(r0, 0x6, r2) fcntl$setstatus(r0, 0x4, 0x8) socketpair(0x1, 0x3, 0x7, 0x0) (async) openat$speaker(0xffffffffffffff9c, &(0x7f0000001740), 0x80, 0x0) (async) readv(r0, &(0x7f0000001600)=[{&(0x7f0000000040)=""/35, 0x23}, {&(0x7f0000000080)=""/232, 0xe8}, {&(0x7f0000000180)=""/173, 0xad}, {&(0x7f0000000240)=""/130, 0x82}, {&(0x7f0000000300)=""/66, 0x42}, {&(0x7f0000000380)=""/254, 0xfe}, {&(0x7f0000000480)=""/111, 0x6f}, {&(0x7f0000000500)=""/113, 0x71}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/98, 0x62}], 0xa) (async) openat$speaker(0xffffffffffffff9c, &(0x7f00000016c0), 0x20000, 0x0) (async) ioctl$SPKRTONE(r1, 0x80085301, &(0x7f0000001700)={0x0, 0x4}) (async) getpgrp() (async) fcntl$setown(r0, 0x6, r2) (async) fcntl$setstatus(r0, 0x4, 0x8) (async) 1.472265203s ago: executing program 1 (id=2): syz_emit_ethernet(0x82, &(0x7f00000001c0)={@broadcast, @local, [{[], {0x8100, 0x0, 0x0, 0x2}}], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x2000, 0x0, 0x0, 0x0, @rand_addr}, @icmp=@parameter_prob={0xc, 0x1, 0x0, 0xb, 0x5, 0x0, {0x14, 0x4, 0x1, 0x39, 0x401, 0x66, 0x3, 0x1, 0xff, 0x2, @local={0xac, 0x14, 0x0}, @empty, {[@end, @timestamp={0x44, 0x38, 0x7, 0x0, 0x5, [{[], 0x2}, {[], 0x1c08990d}, {[@multicast2], 0x4}, {[@loopback], 0x4}, {[], 0x5}, {[], 0x3}, {}, {[@remote={0xac, 0x14, 0x0}], 0x7}, {[], 0x1}, {[], 0x1}]}]}}, "11d74819"}}}}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x18, 0x2, 0x0) setsockopt(r0, 0x1000000000029, 0xa, &(0x7f0000000040)='\t\x00\x00\x00', 0x4) r1 = socket$inet(0x2, 0x1, 0x0) getsockopt(r1, 0x0, 0x22, 0x0, 0x0) sendto$unix(r0, &(0x7f0000000080)="9316bf075eef60b57721e0279f31e59c343fc3f4e3b64634cbe156a9591c9767ec8817798a10d7017e3dc7d42e8e34e17f82adeeeb0d3003cdfe04cb2bbf139048f32ffb3e6fc242b52d15c9e02bcb914ce25e8c74dcee231db8c1f4103279c9a538fa8eba24413c98e4a24ca21da17d13f7443ddd900579f0938b5628e654c7145e975db3fad6626b7ea4d65b3ebbd07820e24e7bf2e666c762a723eb34501e59b64d3c5de4b590470c0a8204284322f66e4f659d051a919da78797d1bd46581a6a02ed2ebb0ae872c5d9cd3485b1475fb96d46679b31b351696abe2d46bad3434ab1d4c7644e28c005ec92", 0xec, 0x9, &(0x7f0000000000)=@abs={0x1, 0x0, 0x2}, 0x8) 1.471425623s ago: executing program 2 (id=3): truncate(&(0x7f0000000080)='./file0\x00', 0x9) openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) fcntl$lock(r0, 0x9, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x1000300000004}) openat$zero(0xffffffffffffff9c, &(0x7f0000000980), 0xe8, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0xe8, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) execve(0x0, 0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) fcntl$lock(r1, 0x9, &(0x7f0000000080)={0x3, 0x0, 0xfffffffffffffff8, 0x20001fffffffc}) 1.471253815s ago: executing program 0 (id=1): openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) r0 = socket(0x2, 0x4001, 0x0) shutdown(r0, 0x0) poll(&(0x7f0000000500)=[{r0, 0x8c}, {0xffffffffffffffff, 0x4}], 0x2, 0x18e) r1 = dup(r0) r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) close(r2) r3 = socket(0x2, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000080)={0x18, 0x1, 0x2c8a}, 0xc) dup2(r1, r2) recvmmsg(r0, &(0x7f00000002c0)={0x0}, 0x10, 0x0, 0x0) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) connect$unix(r3, &(0x7f0000000000), 0x10) setsockopt$sock_int(r2, 0xffff, 0x1023, &(0x7f0000000040), 0x4) 1.259572496s ago: executing program 1 (id=13): r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000200)=@file={0xd570d0466b6018f, './file0\x00'}, 0xa) listen(r0, 0x7) r1 = socket$unix(0x1, 0x5, 0x0) open$dir(0x0, 0x200, 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000) mlock(&(0x7f0000ff1000/0xf000)=nil, 0xf000) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000000c0)={{0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}) r2 = kqueue() kevent(r2, &(0x7f0000000000), 0x29f, 0x0, 0x8001, 0x0) rename(&(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') select(0x40, &(0x7f0000000040)={0xeffffffffffffffd, 0x1fb, 0x2, 0x4889, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x0) connect$unix(r1, &(0x7f0000000000)=@file={0xd1653077bafa0114, './file0\x00'}, 0xa) 1.201352833s ago: executing program 1 (id=16): r0 = getgid() sysctl$net_inet_etherip(&(0x7f0000000040)={0x4, 0x2, 0xf0, 0x1}, 0x4, 0x0, 0x0, 0x0, 0x0) setregid(r0, 0x0) r1 = msgget$private(0x0, 0xfffffffffffffffd) msgrcv(r1, 0x0, 0x0, 0x3, 0x1000) r2 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_int(r2, 0xffff, 0x200, 0x0, 0x0) (async) getsockopt$sock_int(r2, 0xffff, 0x200, 0x0, 0x0) ioctl$DIOCMAP(0xffffffffffffff9c, 0xc0106477, &(0x7f0000000080)={0xffffffffffffffff, r2, 0x2}) msgrcv(r1, 0x0, 0x0, 0x3, 0x0) msgctl$IPC_SET(r1, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x101}, 0x8000000, 0x0, 0x0, 0x0, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) fcntl$lock(0xffffffffffffffff, 0xf, &(0x7f0000000040)={0x1, 0x0, 0x800000, 0x0, 0xffffffffffffffff}) msgget(0x1, 0x240) (async) r3 = msgget(0x1, 0x240) msgsnd(r3, &(0x7f0000000000)={0x0, "1722b70e8416a184e50f2c011bf7c33ec253ea277bdbb0abd624840160d2f392a29f3b81d9e780bae961898465c664d7f92a87981238dbe4"}, 0x40, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r4 = socket(0x1, 0x1, 0x0) close(r4) mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) (async) mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) munlockall() (async) munlockall() socket(0x18, 0x2, 0x0) (async) r5 = socket(0x18, 0x2, 0x0) setsockopt(r5, 0x1000000000029, 0x2a, &(0x7f0000000040)='\x00\x00\x00\x00', 0x4) (async) setsockopt(r5, 0x1000000000029, 0x2a, &(0x7f0000000040)='\x00\x00\x00\x00', 0x4) connect$unix(r4, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) write(r5, &(0x7f0000000200)="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", 0x2400) (async) write(r5, &(0x7f0000000200)="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", 0x2400) socket(0x18, 0x4000, 0x8) (async) socket(0x18, 0x4000, 0x8) readv(r4, &(0x7f0000000d40)=[{&(0x7f0000000700)=""/211, 0xd3}, {&(0x7f0000000800)=""/223, 0xdf}, {&(0x7f0000000140)=""/139, 0x8b}, {&(0x7f0000000900)=""/105, 0x69}, {&(0x7f0000000980)=""/219, 0xdb}, {&(0x7f0000000a80)=""/196, 0xc4}, {&(0x7f0000000b80)=""/164, 0xa4}, {&(0x7f0000000c40)=""/67, 0x43}, {&(0x7f0000000cc0)=""/116, 0x74}], 0x9) syz_emit_ethernet(0xda, &(0x7f0000000500)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd6017b29100a4000000000000fc6a00000000000000000000ff0200000000000000000000000000013a0400008c"]) 1.124574131s ago: executing program 5 (id=20): sysctl$net_inet_ip(&(0x7f0000000100)={0x4, 0x2, 0x0, 0x25}, 0x4, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000f97000/0x4000)=nil, 0x4000, 0x3, 0x1011, 0xffffffffffffffff, 0x0) 1.124350292s ago: executing program 6 (id=21): r0 = socket(0x11, 0x3, 0x0) getpid() getegid() connect$unix(r0, &(0x7f0000001180)=@file={0x0, './file0\x00'}, 0xa) syz_emit_ethernet(0x126f, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd609ded1a12390000c4a4e3434e58d025a6a8a81cf312b8befe80a999ec58294de0a09d11201df69e8ded49944b65d252808514fca9d4a0114abe203975a0a1164f1b4e922548de065a08b08e742d75f11cb5c302f3d287844f8437dec8df6f6df16daf664bc5fe404af95723c54e9fc1b0a9c10a128461dc814577d7939956cc74aa6a0ebbcd300a8a4612bad9ac2ef0fc65d19dcdffa5850ddf48128394fb9525845fafd737e42c1b1cf3d9"]) sysctl$vm(&(0x7f0000000000)={0x2, 0x4}, 0x2, 0x0, 0x0, 0x0, 0x0) select(0x5, &(0x7f0000000040), 0x0, &(0x7f00000000c0)={0x1ff}, 0x0) sysctl$kern(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 1.122729034s ago: executing program 5 (id=22): r0 = socket$inet(0x2, 0x2, 0x0) semget$private(0x0, 0x3, 0x2) getsockopt(r0, 0x0, 0x17, 0x0, 0x0) 1.119170416s ago: executing program 6 (id=23): r0 = socket(0x2, 0x2, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x3, 0x0, 0x0, 0x0, @multicast2, @broadcast}, @tcp={{0x3, 0x2, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}) setsockopt$sock_int(r0, 0xffff, 0x1023, &(0x7f00000000c0), 0x4) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') open$dir(&(0x7f0000000080)='./file0\x00', 0x800, 0x101) rename(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='./file0/file0\x00') 897.311021ms ago: executing program 6 (id=24): pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x0) ioctl$FIOASYNC(r0, 0x8004667d, &(0x7f0000000000)) semop(0x0, &(0x7f00000000c0)=[{0x4}, {0x2, 0x2ff, 0x1800}], 0x2) (async) semop(0x0, &(0x7f00000000c0)=[{0x4}, {0x2, 0x2ff, 0x1800}], 0x2) socket(0x1, 0x400000002, 0x0) (async) r1 = socket(0x1, 0x400000002, 0x0) socket(0x18, 0x2, 0x0) (async) r2 = socket(0x18, 0x2, 0x0) connect$unix(r2, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) select(0x40, &(0x7f0000000000)={0x1b, 0x5, 0x4, 0x0, 0x0, 0xfffffffffffffff9, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0) (async) select(0x40, &(0x7f0000000000)={0x1b, 0x5, 0x4, 0x0, 0x0, 0xfffffffffffffff9, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0) sysctl$kern(&(0x7f0000000000)={0x1, 0x42}, 0x6, 0x0, 0x0, 0x0, 0x0) dup2(r2, r1) sysctl$kern(&(0x7f0000000000)={0x1, 0x4d}, 0x2, 0x0, 0x0, 0x0, 0x0) poll(&(0x7f0000000080)=[{r1, 0x20}], 0x1, 0x20000201) execve(0x0, 0x0, 0x0) (async) execve(0x0, 0x0, 0x0) sysctl$vm_swapencrypt(&(0x7f0000000040)={0x6, 0xb, 0x1}, 0x3, 0x0, 0x0, 0x0, 0x5e) getsockopt(r1, 0x29, 0x2c, 0x0, 0x0) sysctl$hw(&(0x7f0000000080)={0x6, 0x16}, 0x2, &(0x7f0000000400), 0x0, 0x0, 0x0) (async) sysctl$hw(&(0x7f0000000080)={0x6, 0x16}, 0x2, &(0x7f0000000400), 0x0, 0x0, 0x0) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x0}, 0x8) syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) socket(0x2, 0x1, 0x0) (async) r3 = socket(0x2, 0x1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r4 = semget$private(0x0, 0x2, 0x0) semctl$GETVAL(r4, 0x4, 0x5, 0x0) semctl$GETNCNT(r4, 0x0, 0x3, &(0x7f0000000140)=""/145) semctl$SETALL(r4, 0x0, 0x9, 0xfffffffffffffffe) bind(r3, &(0x7f0000000000), 0x10) mlockall(0x0) 895.126681ms ago: executing program 3 (id=25): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0xe8, 0x0) r1 = fcntl$dupfd(r0, 0x3, 0xffffffffffffffff) pread(r1, &(0x7f0000000100)="cc", 0x1, 0x1) r2 = semget(0x0, 0x2, 0x324) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000002) semctl$GETVAL(r2, 0xdda4fe82da11790e, 0x5, 0x0) semctl$GETNCNT(r2, 0x1, 0x3, 0x0) setrlimit(0x3, &(0x7f0000000000)={0x100000, 0x100000}) r3 = kqueue() kevent(r3, &(0x7f0000000180)=[{{r3}, 0xfffffffffffffffa, 0xa9, 0x1}, {{r3}, 0xfffffffffffffffa, 0xe4, 0x2, 0x6, 0x8}], 0x8, 0x0, 0x7, 0x0) sysctl$net_inet_divert(&(0x7f0000000040)={0x4, 0x18, 0x102, 0x3}, 0x4, 0x0, 0x0, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0xe8, 0x0) (async) fcntl$dupfd(r0, 0x3, 0xffffffffffffffff) (async) pread(r1, &(0x7f0000000100)="cc", 0x1, 0x1) (async) semget(0x0, 0x2, 0x324) (async) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000002) (async) semctl$GETVAL(r2, 0xdda4fe82da11790e, 0x5, 0x0) (async) semctl$GETNCNT(r2, 0x1, 0x3, 0x0) (async) setrlimit(0x3, &(0x7f0000000000)={0x100000, 0x100000}) (async) kqueue() (async) kevent(r3, &(0x7f0000000180)=[{{r3}, 0xfffffffffffffffa, 0xa9, 0x1}, {{r3}, 0xfffffffffffffffa, 0xe4, 0x2, 0x6, 0x8}], 0x8, 0x0, 0x7, 0x0) (async) sysctl$net_inet_divert(&(0x7f0000000040)={0x4, 0x18, 0x102, 0x3}, 0x4, 0x0, 0x0, 0x0, 0x0) (async) 894.641533ms ago: executing program 5 (id=26): syz_emit_ethernet(0x36, &(0x7f0000000000)={@random="0d86e654d750", @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @rand_addr}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}) (async) syz_emit_ethernet(0x36, &(0x7f0000000000)={@random="0d86e654d750", @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @rand_addr}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket$inet6(0x18, 0x1, 0x0) getsockopt(r0, 0x29, 0x3c, 0x0, 0x0) socket(0x18, 0x2, 0x0) (async) r1 = socket(0x18, 0x2, 0x0) setsockopt(r1, 0x1000000000029, 0xa, &(0x7f0000003680)='\x00\x00\x00\x00', 0x4) setsockopt(r1, 0x1000000029, 0xd, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) (async) setsockopt(r1, 0x1000000029, 0xd, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) r2 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mmap(&(0x7f0000312000/0x2000)=nil, 0x2000, 0x4, 0x810, r2, 0x10000) getrlimit(0x3, 0x0) 893.116289ms ago: executing program 6 (id=27): mkdir(&(0x7f0000000080)='./file0\x00', 0x0) (async) chmod(&(0x7f0000000080)='./file0\x00', 0x2ea) (async) chdir(&(0x7f0000000100)='./file0\x00') (async) symlink(&(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) fcntl$lock(0xffffffffffffffff, 0xc, &(0x7f0000000040)={0x1, 0x0, 0xfffffffffffffffe, 0x7ff}) sysctl$kern(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) semctl$SETALL(0x0, 0x0, 0x9, &(0x7f0000000040)=[0x7ff]) (async) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) r0 = socket(0x18, 0x1, 0x0) setsockopt(r0, 0x1000000029, 0xc, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) (async) setsockopt(r0, 0x1000000029, 0xc, &(0x7f0000000040)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0e99db6de761f86, 0x0) (async) rename(&(0x7f00000007c0)='./file0\x00', &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) r1 = openat(0xffffffffffffffff, &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8, 0x0) ioctl$TIOCCBRK(r1, 0x2000747a) 892.498739ms ago: executing program 3 (id=28): syz_emit_ethernet(0x26, &(0x7f0000000100)={@local, @empty, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @empty, @remote={0xac, 0x14, 0x0}, @random="d42e8e425bca", @loopback}}}}) r0 = socket(0x2, 0x2, 0x0) r1 = socket(0x2, 0x400000000002, 0x0) setsockopt(r1, 0x0, 0x21, &(0x7f0000000180)="b1f5d915", 0x4) setsockopt$sock_int(r1, 0xffff, 0x800, &(0x7f0000000040)=0x3, 0x4) dup2(r1, r0) select(0x40, &(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x0, 0x0) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket(0x2, 0x2, 0x0) connect$unix(r2, &(0x7f0000000000), 0x10) bind(r0, &(0x7f0000000000), 0x10) write(r2, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000100)={0x0, 0x4}, 0x10, 0x2, 0x0) mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1) r3 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x10, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_timeval(r4, 0xffff, 0x1006, &(0x7f0000000080), &(0x7f00000000c0)=0x10) getsockopt$sock_int(r4, 0xffff, 0x1008, 0x0, 0x0) poll(&(0x7f0000000040)=[{r3}, {r4, 0x10}], 0x2, 0x887e) execve(0x0, 0x0, 0x0) 878.8223ms ago: executing program 6 (id=29): ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x100000000000000, 0x10040000000001}}) r0 = accept$inet(0xffffffffffffff9c, &(0x7f0000000140), &(0x7f0000000180)=0xc) r1 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000240), 0x20, 0x0) ioctl$WSDISPLAYIO_DELFONT(r1, 0x8058574f, &(0x7f0000000280)={'./file0\x00', 0x7, 0x9, 0x401, 0x1, 0x6, 0x2, 0x1ff, 0x2, 0x1, 0x52b, 0x101}) close(r0) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x74, 0x0, 0x8, 0x2}, {0x87, 0xc, 0xfe}, {0x16, 0x0, 0x2, 0x40cfc8e0}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket(0x18, 0x2, 0x0) setsockopt(r2, 0x1000000000029, 0x9, &(0x7f0000000040)="03000000", 0x4) r3 = socket$unix(0x1, 0x5, 0x0) bind$unix(r3, &(0x7f0000000200)=@file={0xd570d0466b6018f, './file0\x00'}, 0xa) listen(r3, 0x7) r4 = socket$unix(0x1, 0x5, 0x0) select(0x40, &(0x7f00000001c0)={0xfffffffffffffffd}, 0x0, 0x0, 0x0) connect$unix(r4, &(0x7f0000000000)=@file={0xd1653077bafa0114, './file0\x00'}, 0xa) accept$unix(r3, 0x0, 0x0) r5 = openat$tty(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) ioctl$TIOCGTSTAMP(r5, 0x4010745b, &(0x7f0000000100)) r6 = dup(r2) setsockopt(r6, 0x1000000000029, 0xc, &(0x7f0000000000)="ffdaf64c000000004f0527000000055e473e0000", 0x14) 833.543169ms ago: executing program 0 (id=31): open(&(0x7f00000003c0)='./file0\x00', 0x0, 0xbe) r0 = msgget$private(0x0, 0x5bd) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) preadv(r1, &(0x7f0000000080)=[{&(0x7f0000000100)=""/254, 0xfffffc47}, {&(0x7f0000000200)=""/171, 0xab}, {&(0x7f00000002c0)=""/243, 0xe2}], 0x50, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) fchownat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4) unveil(&(0x7f00000000c0)='./file0\x00', &(0x7f00000008c0)='c\x00') mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) msgctl$IPC_RMID(r0, 0x2000000) msgget(0x3, 0x89) semop(0x0, &(0x7f00000000c0)=[{0x2}, {0x0, 0x2ff, 0x800}], 0x2) r2 = socket(0x18, 0x2, 0x0) r3 = socket(0x18, 0x1, 0x7) setsockopt$sock_linger(r3, 0xffff, 0x80, &(0x7f0000000400)={0x7fff, 0x2}, 0x8) connect$unix(r2, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000140)="ace7161d1481e1b19bff8db9627bc78d7e57691536ff08062f853c6e5c1e190ed895b4ae41c09afc4292377d29dfda8ce5f01d4005ca759fa39f9511236a7d788aa31f76f6a4148b5a0c49c7b37870d3e2cea9388e7b8f0f4f23010f4f975a5932d8021579292ff7c8f214ae10f196cdc078552907063ca4040d1e89a599eeb93f5162d9473d29245df0d46c5c89fdd9e519a26fb9ccb2482ce6c7217dc45f4eeeac1e6c69a303a93ef7e5aac595f0f1248ea27ee1d5d3629fb787e628f4fd31c671db17b9351a65518d22965f981ef1cb80928e58ce9e53d36dcb1a283c3538955ffba0dd8c143e89", 0xe9}, {&(0x7f0000000000)="3f46655ad0d324e1f4d0d2826d2bb4d28e763e632a8d58ff860984a4cb5e39c0b437e2cc080d3e", 0x27}], 0x2) sysctl$kern(&(0x7f0000000040)={0x1, 0x39}, 0x2, 0x0, 0x0, 0x0, 0x0) 695.659331ms ago: executing program 3 (id=32): ioctl$TIOCSTSTAMP(0xffffffffffffff9c, 0x8008745a, &(0x7f0000000100)={0x2, 0x200}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) mlockall(0x1) getsockname$unix(r0, &(0x7f0000002740)=@file={0x0, ""/4094}, &(0x7f0000000180)=0x1000) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) sysctl$kern(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)="eb9d80c7a471fe07df585ca865793466d8", 0x11) readv(0xffffffffffffffff, &(0x7f0000000100)=[{0x0}], 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="28000000ffff000001"], 0x28}, 0x0) r3 = socket(0x11, 0x3, 0x8) ioctl$FIONREAD(r1, 0x4004667f, &(0x7f0000000040)) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x40001ff, 0x0, {0x0, 0x2}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r4 = socket(0x18, 0x1, 0x0) setsockopt(r4, 0x1000000029, 0xc, &(0x7f0000000080)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) sendto$unix(r3, &(0x7f0000000100)="b10005016000009f05000e0007000000001813fecea10516d09a32693f316e357ae302b37b673039d2d236acf20b7804be38164991f7c8cf5f882b297be1aa5b23edeb51e2f0ac3ebbc257699a1f139b672f4d335c223e7d026ba8af6300372821020000000000008bfbb770c116a972c881ea772ec5890400000000ff0000361b1257aea8c500002002fbff0c1300008a09000000000008e38295f80004073da51a221f00000080042000000000000000", 0xb1, 0x0, 0x0, 0x0) madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2) msgsnd(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="030000000000000059f7d203a24c14e4571c6145fcfc479164ac2d975c97217b1c6b183c7296e740c0db1624078a50bdbe68466f4e9476c3d29b735202d4dfdbb310963ad0f4fd0c026e4c0c392c5e60ae6c6feed9e035ab61a1066c8246d480826222bd9362ddb5f174d216500dea7a04535d46369f61e53999c1eb5702f0f9c08345caef0e1bbd5b62538a31ec7e707353d066a53e34407412753e2a99e939103294cafd3d726b3ecc88909b212d06e767af255b44f8fecd390e07217352211744f64355116d63e40cd59f77c6bc18a324"], 0x49, 0x800) 694.986133ms ago: executing program 5 (id=34): r0 = socket(0x11, 0x3, 0x0) sendto$unix(r0, &(0x7f0000000040)="b100050400000000000008000101000000000000cea1fea7fef96ecfc73fd335ca087ae27caa0416fa4f376336acf00b7804be781e4991f7c8df5f882b297be1aa5b23ed00f4c8b2ca3ebb4257699a1f132e27acbdd602000d7d026ba8af63ff37282902e4fd007f720fd3873babfbb770a2f5a872c881ff7cc53c8943310b404f36a00f90006ee01bc43eaea8c500000002000000000000020208a371a3f8000400000000000000010000000000000010", 0xb1, 0x8, 0x0, 0x0) r1 = kqueue() kevent(r1, &(0x7f0000000080)=[{}, {{}, 0xfffffffffffffffa}, {}, {}, {{}, 0xfffffffffffffff9, 0x9, 0x3, 0xffffffff}], 0x5, 0x0, 0xcb, 0x0) r2 = socket(0x11, 0x3, 0x0) sendto$unix(r2, &(0x7f00000000c0)="b10005040000000000000000340000001a5113fecea10500fef96ecfc72fd3357a89583535673039d2d236acf20b7804be38164991f7c8cf5f882b297be1aa5b23edeb51e2f0ac3ebbc2feb3fda1139b672f4d3360223e7d026ba8af630037a840c4f2bd53eb067e7335a069d7ac434e0c0000000000008904000000000022830cf41bed66f40066ccdcf3e4999d9d20002002c5dbfad800000008e371a3f8340412051e00000000000002000000000000", 0xb1, 0x0, 0x0, 0x0) connect$unix(r0, &(0x7f0000000000)=@abs={0x1, 0x0, 0x2}, 0x8) 694.183909ms ago: executing program 3 (id=35): sysctl$hw(&(0x7f0000000100)={0x6, 0x10}, 0x2, 0x0, 0x0, 0x0, 0x0) sysctl$net_inet6_icmp6(&(0x7f0000000000)={0x4, 0x18, 0x3a, 0x1}, 0x4, 0x0, 0x0, 0x0, 0x0) clock_getres(0x1, 0x0) sysctl$kern(&(0x7f0000000000)={0xa}, 0x3, 0x0, 0x0, 0x0, 0x0) 637.033401ms ago: executing program 5 (id=36): sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b1000504600000000000000007000000331c13fecea10500fef9e906c72fd3357ae320b37b673039d2d236073705ae04be38164991f7accf5f882b297be1aa5b236deb51e2f0ac3ebbc257699a5f139b672f4d335d223e7d029d6ba8af6300372821", 0x62, 0x404, 0x0, 0x0) setitimer(0x0, &(0x7f0000000080)={{0x0, 0x4}, {0x3, 0x6}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x11, 0x3, 0x0) sendto$unix(r0, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x0, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@local, @local, [], {@arp={0x8035, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x4, @empty, @empty, @random="6a134f0fe734", @local={0xac, 0x14, 0x0}}}}}) 634.339763ms ago: executing program 3 (id=37): ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0xfffffffc, {0x1, 0x5}}) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x6}, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x200023}) (async) r0 = semget$private(0x0, 0x7, 0x3c0) semop(r0, &(0x7f00000001c0)=[{0x1, 0x800}, {0x1, 0x7}, {0x1, 0x5, 0x1000}, {0x3, 0x0, 0x800}, {0x1, 0xfc01}], 0x5) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket(0x18, 0x2, 0x0) setsockopt(r1, 0x1000000000029, 0xb, &(0x7f0000000040)='\x00\x00\x00\x00', 0xfffffffffffffd71) setsockopt(r1, 0x1000000029, 0xd, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) r2 = socket$inet(0x2, 0x2, 0x0) close(r2) (async) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r3, 0x0, 0x200000000000b, &(0x7f0000000040)='\x00', 0x1) setsockopt$inet_opts(r2, 0x0, 0x200000000000c, 0x0, 0x0) (async) r4 = socket(0x18, 0x1, 0x0) setsockopt(r4, 0x1000000029, 0xc, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) 604.564436ms ago: executing program 5 (id=38): sendmsg$unix(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002c40)=ANY=[@ANYBLOB="10000000ffff000001"], 0x10}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f00000003c0)={&(0x7f00000000c0)=@in, 0xc, 0x0, 0x0, &(0x7f00000002c0)=""/132, 0x84}, 0x40) sendmmsg(r0, &(0x7f0000001600)={0x0}, 0x10, 0x0) sysctl$vm(&(0x7f0000000080)={0x2, 0x7}, 0x2, &(0x7f0000000040)="592e128d", &(0x7f00000015c0)=0x4, 0x0, 0x0) r2 = open(&(0x7f0000000140)='./file0\x00', 0x80000000000206, 0x64) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)='#', 0x1}, {&(0x7f0000000040)='FE', 0x2}], 0x2) execve(&(0x7f0000000580)='./file0\x00', 0x0, 0x0) msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000080)={{0x5, 0x0, 0x0, 0x0, 0x0, 0x185, 0x4000}, 0x6, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffff7ffe, 0x8, 0x9, 0xffffffffffffffff}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x10, 0x0) r4 = fcntl$dupfd(r3, 0x2, 0xffffffffffffffff) close(r4) setsockopt$sock_int(r4, 0xffff, 0x80, &(0x7f0000000100)=0x9, 0x4) close(r0) open(0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x0, 0x7, 0x3}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r5 = semget(0x0, 0x1, 0x281) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000002) unveil(0x0, 0x0) sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x4, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0xfffffffffffffe59) unveil(0x0, &(0x7f0000000100)='r\x00') sysctl$kern(&(0x7f0000002240), 0x2, 0x0, 0x0, 0x0, 0x0) semop(r5, &(0x7f00000000c0)=[{}], 0x1) sysctl$hw(&(0x7f0000000000)={0x6, 0x1c}, 0x2, &(0x7f00000001c0), 0x0, 0x0, 0x0) 602.376436ms ago: executing program 3 (id=39): r0 = shmget$private(0x0, 0x1000, 0x150, &(0x7f0000ffa000/0x1000)=nil) r1 = shmat(r0, &(0x7f0000ff9000/0x3000)=nil, 0x3000) shmdt(r1) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x200000000000b, &(0x7f0000000040)='\x00', 0x1) setsockopt$inet_opts(r2, 0x0, 0x200000000000b, 0x0, 0x0) r3 = socket(0x18, 0x1, 0x0) r4 = getppid() msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f00000000c0)={{}, 0x0, 0x0, r4, 0x0, 0x7}) open(&(0x7f0000000240)='./file0\x00', 0x80000000000206, 0xd6) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) getpgrp() ioctl$WSKBDIO_GETMAP(r5, 0x80047476, &(0x7f0000000100)={0x0, 0x0}) r6 = fcntl$getown(r5, 0x5) ktrace(0x0, 0x1, 0x500, r6) r7 = open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x3, 0x10, r7, 0x0) r8 = msgget$private(0x0, 0xfffffffffffffffd) msgrcv(r8, 0x0, 0x0, 0x3, 0x0) msgsnd(r8, 0x0, 0xe4, 0x0) geteuid() msgctl$IPC_SET(r8, 0x1, 0x0) setsockopt(r3, 0x1000000029, 0x25, &(0x7f0000000000), 0x4) 600.670283ms ago: executing program 2 (id=41): r0 = syz_open_pts() ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f00000007c0)={0x0, 0x1, 0xffefbff6, 0x0, "0000ffffffffff9b752d0200"}) writev(r0, &(0x7f0000000100)=[{&(0x7f00000003c0)="7659aeb94832406f050635f0b67c483a24febaee7e5f3d48e6cb95bdcc0fc869e646ecfa588c53283c4dd3ed77706f3868cacea79983bdfb42d2706563dca286f58274eac945d5ffe9054ffd5b7724b408516b9ed309d475", 0x58}, {&(0x7f00000000c0)="00000000f18e1a645b909f9a3014", 0xe}], 0x2) syz_open_pts() ioctl$TIOCSETAW(r0, 0x802c7415, &(0x7f0000000000)={0x1000, 0x1ff, 0xe, 0x4, "4dc2760206f345c2af095ee3d1898ec96a458c98", 0x9, 0x1}) ioctl$TIOCFLUSH(r0, 0x80047410, &(0x7f0000000040)=0x3ff) r1 = open(&(0x7f0000000000)='./file0\x00', 0x9cab835cfdc52675, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0xb010, r1, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x200000000000c, &(0x7f00000003c0)="ea00000100000000", 0x8) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r3 = socket(0x2, 0x1, 0x0) connect$unix(r3, &(0x7f0000000000), 0x2) sysctl$kern(&(0x7f0000000240)={0x1, 0x17}, 0x2, 0x0, 0x0, 0x0, 0x0) setsockopt(r2, 0x0, 0xa, &(0x7f0000000240), 0x1) ftruncate(r1, 0x79c8) setrlimit(0x1, &(0x7f0000000ec0)) msync(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0) 507.879039ms ago: executing program 4 (id=42): unveil(&(0x7f0000000440)='./file3\x00', &(0x7f0000000080)='c\x00') connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) getsockname$unix(0xffffffffffffff9c, &(0x7f0000000900)=@file={0x0, ""/4087}, &(0x7f0000000000)=0xff9) unveil(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='c\x00') mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) syz_emit_ethernet(0x2a, &(0x7f00000005c0)={@random="b90531074b01", @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x21, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0x0}, @broadcast}, @udp={{0x2, 0x0, 0x8}}}}}}) syz_emit_ethernet(0x3e, &(0x7f0000000100)={@local, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x8, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0x0}, @broadcast}, @icmp=@source_quench={0x4, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x9, 0x2, 0x66, 0x8000, 0x4, 0x33, 0xa322, @multicast2, @broadcast}}}}}}) syz_emit_ethernet(0x77, &(0x7f00000014c0)={@broadcast, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x69, 0x0, 0x1, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0x0}, @broadcast}, @icmp=@echo={0x8, 0x0, 0x0, 0x1, 0x2, "0d1472fe0ec74e960882f20e1a6ede692f446bf3380bb41eb6528e8388c1a2e01c61e97063bde3c4acc919df543dc431446fa0f0076b4a06b81b35b160e4379adf86294a707f54709ba6e0808a"}}}}}) unveil(&(0x7f00000000c0)='./file0\x00', &(0x7f00000008c0)='W\x00') open$dir(&(0x7f0000000040)='./file0/file0\x00', 0x10000, 0x20) unveil(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000200)='W\x00') 507.103525ms ago: executing program 0 (id=43): setrlimit(0x8, &(0x7f0000000580)={0xa, 0x56}) (async) r0 = syz_open_pts() close(r0) (async) r1 = syz_open_pts() ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000380)={0x7fffffff, 0x5, 0xffffdf7e, 0xffffff8a, "182628040200c2a6d203680023e0ff7f0d000004", 0x7, 0x1ffff}) (async) writev(r0, &(0x7f00000006c0)=[{&(0x7f0000000040)="db6dc9efa1bdf1dc0ff70a26072d9753546a56947be99cd29d015d07f3f01efd1f5b64847cd59f6107f12698a0af9aa9d16453970d0f92", 0x37}, {&(0x7f0000000080)="793c01b580660436587a23b1d0be7a904760fb3fd6fba37e75988e5da5a825b8db224af5cc599d69ee01a4ef135823959d071fffe06d0d263668fae6d7531e25f1907d81e11120db67af172dff4fd7bb954c4c19dd14dca6a9af", 0x5a}, {&(0x7f0000000100)="19b6caefc5fe0044ca4ad47e0565bc69ab176a01292b40f40c72195488f2449d2f46272ea65dcb50d7bb0bab64922fa8bad43f0ffa4edf59faf6c5480bcdf2fe2991505cfb996d12a416f01f71e7e314a59ce9708b3bb3a6be5a41748f7458b8289ac4db135faafb364812c9b526ecc1fb9172b75056e27fea8c97514b0f8e792b21e03b2889666f57dbe37442be9b4ba24259cd0cdbcd2bfdb05f764bae315a34bd208eb3d85bb23b64c2355fe17dca6afbee6e7a267838c0aa430a94f28beb08", 0xc1}, {&(0x7f0000000200)="fcbc520137e49d76f572c70a25890a35c90d7495a64882dd7e17e94640e76076f1e48758e777d14bab47cd1f9f7db85d43b028cce7951bd58d459eae52f455544c326c890cee51c1550693fdb484b13f38148e27c37233f7fa923f4c975b9c95c1dfd064262c7162d33df630f4f8a392536a90ba441a2ff9ad9b61899c825fada72ba93ad8b6d50ff760437da9944976", 0x90}, {&(0x7f00000002c0)="14781fb45bb1648ebdeb7249c64f13909eacd364c05f375685dd2c4a3d6bb0e2e39b150a0800462022ff1b43c15ae4f32de556e693bf3aab0f670008f1393ee76ebf3e84abe158d679523d06e2873530de6537b9bb4f90b7f984bf2809", 0x5d}, {&(0x7f00000003c0)="bbf3ee14305f97d2af8188b8a53d8b3ab0132d7332ac52e468fbffd666982a54a555a23b32f2de0f9aa826e71228b92c71b502ac075a53b74b4d320ef917a17e312a4ccb6958bada2b2f", 0x4a}, {&(0x7f0000000440)="5ff8308ed01eee96f83f155d28e23bb6508c09682d8b64e950b2ac3b226d60d48a2ee1e7c42c60349beaa598702df8a4b4c0bf3d714d63d95cba15494e19ea3310d44ba1db2082df10db9ab0605718acfac009be177e5f8428df215c3474840f759c9e275e4d9ebac16dcd3ad5567372f290079c11c528edb3a3d586cb055af09b3700b99fa6c16f9a30efdaf63e2a3e10393dee24ab9ef160b239d5a0b85c038ba7508c84af5df693c46c7b163cae911e3bdcef39a6ac482fa749df93489b3c68eb6d800406b8ca554c59cd40f33f08fb1f0b243cab7fbf413acb0f89db3bfeefff99ab8138167ef08e29b2dc02f3f4edf6e42a22", 0xf5}, {&(0x7f00000005c0)="b58badec086dc0c1d27353ba96ec812b4bd68444261e68711bd730f13913298388842a1e2868733773a28d414ccb025a5b17bdd2c52da229e2fec388304709df4c8430e67fd1a4ea893b18a7b543980e212ad9b4c707772de438a03337f6f50f24ae89eca4b6ac65de664a16ad6840b48bbbddd6e0e6b4bc2303c4629a9244984c00ba659671eb3552c2f42ec88227fb2baad4c97e6f98ae5b2cf145d3cfa06e0afcb98b5d56ecd169ba7315a4f9ba9652a32fe26aea2ef85de8bcc9ab390b0f5b228258ed5f03fda5aed988c29d670b80862c260cdd8607ec4ace08950f0eb911756e59e983b599ecef4df07b223e3ef9ed49320f91cd75", 0xf8}], 0x8) (async) getrlimit(0x3, &(0x7f0000000000)) 506.271634ms ago: executing program 2 (id=44): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) open$dir(&(0x7f00000011c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x0) open$dir(&(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x0) r0 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000dc0)='./file0\x00', r0, &(0x7f0000000ec0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mkdirat(r0, &(0x7f0000000600)='./file1aaaaaaaaa\x00', 0x2) rename(&(0x7f0000000980)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000a80)='./file0\x00') rename(&(0x7f0000000d80)='./file0\x00', &(0x7f0000000100)='./file2\x00') rename(&(0x7f0000000fc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000010c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000040)='./file1\x00', &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') sendmsg$unix(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f00000000c0), 0x1c, 0x0}, 0x0) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x100000000000000, 0x3}}) r1 = socket(0x18, 0x2, 0x0) connect$unix(r1, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) getsockname$inet(r1, &(0x7f00000000c0), &(0x7f0000000380)=0xffffffffffffff24) mprotect(&(0x7f0000460000/0x2000)=nil, 0x2000, 0x2) r2 = socket(0x18, 0x5, 0x40) close(r2) socket(0x18, 0x2, 0x0) setsockopt(0xffffffffffffffff, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) sendmsg$unix(r2, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0) r3 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000300)='./file0\x00', r3, &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') symlinkat(&(0x7f00000012c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r0, &(0x7f0000000ac0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mkdirat(r3, &(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) chflags(&(0x7f0000000080)='./file0\x00', 0x10000) rename(&(0x7f0000000980)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000a80)='./file0\x00') rmdir(&(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') unlink(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 444.879393ms ago: executing program 4 (id=47): r0 = socket$unix(0x1, 0x1, 0x0) recvfrom$unix(r0, &(0x7f00000003c0)=""/4096, 0x1000, 0x0, 0x0, 0x0) semop(0x0, &(0x7f0000000240)=[{0x0, 0x6, 0x1000}, {0x2, 0x7607}, {0x2, 0x2, 0x1000}, {0x4, 0x8000, 0x1000}, {}, {0x1, 0x4, 0x1000}, {0x3, 0x7, 0x1000}], 0x44) r1 = socket(0x18, 0x2, 0x0) sysctl$net_inet_tcp(&(0x7f0000000080)={0x4, 0x2, 0x6, 0x13}, 0x4, &(0x7f0000000040), 0x0, 0x0, 0x0) connect$unix(r1, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) sendto$unix(r1, &(0x7f0000000100)="e084a9f3e76b3a19a893d36717693f3287c406c36568266a72bc37694ee76e8028b7153a01955b9a8e798f460883b2efdf4cf2336f1da4d45c6a24b7279777d0abf072051769d0f36a11c39bbc6ae4208cec915dd533e81f3ba608e9f4d86e57335e54ba6f9c9783157d8a5621d57ab67ab8a47ff7e832c642ac144eff61659bbd50dc5eed71eaf414b7fcf0ef565043ab316ad57905122d805022adc9ca3a0f8cbf3f307f39b0ae47d5366f80a6a16e388a2ba153b9d923481e6cf98dd78fab289e90b3a16b65f01911230e0fa5f677c8e60ff9ccce275f90ba83573f52f1e046fe02851f74", 0xe6, 0x402, 0x0, 0x0) getsockname$inet(r1, &(0x7f00000000c0), &(0x7f0000000380)=0xffffffffffffff24) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x14, r2, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)="76e5eac907f9ccf7a251ceddcec7d6aa45cffe2c63a56077123a276d3ba4e9d17eb3eb5db12a3783a8e0620d357de1fe04fa9465b5bd1286e9624dec06a00c222f", 0x41}], 0x1) rename(&(0x7f0000000100)='./file0\x00', 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='.\x00') utimensat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) socket(0x18, 0x1, 0x0) r3 = socket(0x18, 0x2, 0x0) r4 = socket$inet(0x2, 0x2, 0x9) connect$inet(r4, &(0x7f0000000000)={0x2, 0x0}, 0xc) connect$unix(r2, &(0x7f0000000040)=@abs={0x682eb13985c518e6, 0x7}, 0x8) write(r3, 0x0, 0x0) 444.562585ms ago: executing program 7 (id=48): r0 = socket(0x18, 0x4000, 0x0) setsockopt(r0, 0x1000000029, 0x36, 0x0, 0x0) socket(0x18, 0x4000, 0x0) (async) setsockopt(r0, 0x1000000029, 0x36, 0x0, 0x0) (async) 443.291934ms ago: executing program 0 (id=49): r0 = openat$zero(0xffffffffffffff9c, 0x0, 0xe8, 0x0) fcntl$dupfd(r0, 0x3, 0xffffffffffffffff) open$dir(0x0, 0x200, 0x186) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=""/100, 0x64}, 0x80003f8b}, 0x10, 0x800, 0x0) sendmmsg(r1, &(0x7f0000000080)={0x0}, 0x10, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x3e}, 0x0) execve(0x0, 0x0, 0x0) recvfrom$unix(0xffffffffffffffff, &(0x7f00000000c0), 0x832f1f7d, 0x0, &(0x7f0000000000)=@abs, 0x2000c600) msgctl$IPC_STAT(0xffffffffffffffff, 0x2, &(0x7f00000000c0)=""/240) setuid(0x0) syz_open_pts() r2 = open(&(0x7f0000000000)='./file0\x00', 0x9cab835cfdc52675, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0xa011, r2, 0x0) ftruncate(r2, 0x79c8) writev(0xffffffffffffffff, &(0x7f0000001480)=[{&(0x7f00000024c0)="cc", 0x1}], 0x1) setrlimit(0x1, &(0x7f0000000ec0)) munmap(&(0x7f0000000000/0x4000)=nil, 0x4000) 442.706129ms ago: executing program 2 (id=50): syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) syz_extract_tcp_res$synack(&(0x7f0000000040), 0x1, 0x0) (async, rerun: 32) r0 = socket(0x18, 0x1, 0x0) (rerun: 32) setsockopt(r0, 0x1000000029, 0xd, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) 366.850101ms ago: executing program 4 (id=51): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) fcntl$lock(r0, 0x9, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x20001fffffffd}) accept$unix(r0, &(0x7f0000000040)=@abs, &(0x7f0000000080)=0x8) sysctl$net_inet_etherip(&(0x7f0000000000), 0x4, 0x0, 0x0, 0x0, 0x0) 365.062493ms ago: executing program 2 (id=52): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb5219f1000b913f1, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0xa, r1) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4) write(r2, &(0x7f0000000100), 0xfffffe5d) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb5219f1000b913f1, 0x0) (async) pipe(&(0x7f0000000080)) (async) fcntl$dupfd(r0, 0xa, r1) (async) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4) (async) write(r2, &(0x7f0000000100), 0xfffffe5d) (async) 364.531137ms ago: executing program 7 (id=53): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) r0 = socket(0x18, 0x3, 0x0) setsockopt(r0, 0x1000000000029, 0xb, &(0x7f0000000040)='\x00\x00\x00\x00', 0x4) (async) mquery(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x10, r0, 0x3) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x2000000000000243, &(0x7f0000000100)}) (async) r1 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r1, 0xc0106924, &(0x7f00000001c0)) (async) r2 = kqueue() kevent(r2, &(0x7f00000000c0), 0x101, &(0x7f0000000180), 0x6, 0x0) (async) ioctl$FIONREAD(r1, 0x80206913, &(0x7f00000001c0)) (async) setsockopt(r0, 0x28, 0xa, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) r3 = socket(0x18, 0x2, 0x0) ioctl$FIONREAD(r3, 0xc0207534, &(0x7f00000001c0)) 363.279717ms ago: executing program 7 (id=54): socket$unix(0x1, 0x2, 0x0) (async) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$FIOASYNC(r0, 0x8004667d, &(0x7f0000000000)=0x5) readlinkat(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) readlinkat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_emit_ethernet(0x317, &(0x7f0000000240)={@empty, @broadcast, [{[{0x88a8, 0x1, 0x0, 0x1}], {0x8100, 0x4, 0x0, 0x2}}], {@ipv6={0x86dd, {0x5, 0x6, "f4181d", 0x2d9, 0x0, 0x4f, @mcast1, @empty, {[@hopopts={0x62, 0x1, '\x00', [@ra={0x5, 0x2, 0x81}, @enc_lim={0x4, 0x1, 0x5}, @jumbo={0xc2, 0x4, 0x8}]}, @routing={0x3, 0x4, 0x0, 0x8, 0x0, [@ipv4, @remote={0xfe, 0x80, '\x00', 0x0}]}, @dstopts={0x2c, 0x2, '\x00', [@enc_lim={0x4, 0x1, 0x1}, @padn={0x1, 0x2, [0x0, 0x0]}, @pad1, @jumbo={0xc2, 0x4, 0x5}, @enc_lim={0x4, 0x1, 0x80}]}, @hopopts={0x37, 0xd, '\x00', [@ra={0x5, 0x2, 0x4}, @ra={0x5, 0x2, 0x6}, @ra={0x5, 0x2, 0xb}, @ra={0x5, 0x2, 0x5}, @ra={0x5, 0x2, 0x8001}, @generic={0xd4, 0x56, "dbb0953ec797ff744a1c48b7ba168744029d66fea60a7806c2f3ef89e1ab05ebdb805c48fdf7ec8246dfaad2554dbc4308b36e2c7d9b09fa0adeffeee61d79c5680ca01f84ee5476d83d2c0c9ecc3fce8ea4c6ce62d0"}]}, @routing={0x3b, 0x6, 0x0, 0x2, 0x0, [@empty, @loopback, @ipv4={'\x00', '\xff\xff', @local={0xac, 0x14, 0x0}}]}, @dstopts={0x50, 0x22, '\x00', [@ra={0x5, 0x2, 0x5}, @ra={0x5, 0x2, 0x7}, @pad1, @generic={0x40, 0x31, "489c22868e179a2b2536ce97de8e66f8eda0570a03d18880dc66b473cfe1a3c1889fe57b8cd8a1b93bcc1def531d7a3272"}, @ra={0x5, 0x2, 0x80}, @pad1, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x2}, @generic={0xe, 0xc1, "5000fe1b5478187afd0b4189829ca77859199d5c81d0f5ad0939b1b63de4193f4b798bf8c424d624faceee27d69f58a9de745ef2a964a3529d40f5c1115ec031077aa820c50433e458c118669c34f1a637035a7d0f11ad97edda565fc096eea9e27c821311d2ab68e6cc832c3ceb1d1bfdce1acd2a22ff174ab9c3cbf07cd0e9bbece90d0541d92b5aabd431b033e80e186465cf9b3421d2b8595badfe3d0728a6ef1a8fd7bd759c856bbc20490a5ab50913eb998bfc39d4eae914ec09391eea97"}]}, @dstopts={0x0, 0x1, '\x00', [@enc_lim={0x4, 0x1, 0x4}, @ra={0x5, 0x2, 0x3ff}, @enc_lim={0x4, 0x1, 0x4}]}], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0xaf64, {0xe, 0x6, "bfb077", 0xbb0d, 0x37, 0x7, @local={0xfe, 0x80, '\x00', 0x0}, @mcast1, [@dstopts={0x29}, @fragment={0x2f, 0x0, 0x3, 0x1, 0x0, 0x5, 0x66}], "751ed93d3e4449c2af9e0c751b6412343fac5db96becc2e3453fc36c4f99c50e8390af4f39ea1776211c9a3fc2ec9130bbbacada24bf64bfa8c8f3c685ebd3037571e2c9455dc1d3a39ae0851d270533a3"}}}}}}}) bind$unix(r0, &(0x7f0000000200)=@file={0xd570d0466b6018f, './file0\x00'}, 0xa) ioctl$WSMOUSEIO_GETPARAMS(0xffffffffffffffff, 0x80105727, &(0x7f0000000100)={&(0x7f00000000c0)=[{0x44, 0x8}, {0x7, 0x8001}, {0x80, 0xa}, {0x80, 0xcb}, {0x8a, 0xb}, {0x84, 0x5}], 0x6}) sendmsg$unix(r0, &(0x7f0000000080)={&(0x7f0000000040)=@file={0x170, './file0\x00'}, 0xa, 0x0}, 0x0) 362.557042ms ago: executing program 4 (id=55): sysctl$fs(&(0x7f0000000000)={0x3, 0x1}, 0x2, &(0x7f0000000080)="47a831239db5f31788bc486846191fb680ceebd613b57e4554706cd1180db87259882396be8c41bd28eb931bca0eb5ea857e38afe8d1", &(0x7f00000000c0)=0x36, &(0x7f0000000180)="c3d8c87931190dfa88b11e27a198276341da3f180f2ceeb4e6cb0281af2f0633b0842e03d1766e19dc55255bc42e031e31412dd1d8ce9a22894dc28557ef893c0f2c81576b3630c095040f309da55ccc0f8619f81563dd485c935c535cc258aacdae6c94bc70c0c1e77f727926f7349e3bb2dc3930c79b69b9d51da3c1930138738ec11002b3", 0x86) syz_emit_ethernet(0x26, &(0x7f0000000100)={@local, @empty, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @empty, @remote={0xac, 0x14, 0x0}, @random="d42e8e425bca", @loopback}}}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket$inet(0x2, 0x1, 0x0) getsockopt(r0, 0x0, 0x3, 0xffffffffffffffff, &(0x7f0000000040)=0x1e) sysctl$fs(&(0x7f0000000240)={0x3, 0x1}, 0x2, &(0x7f0000000280)="c611f1ac172fe235229e39bd1c084348b950dbdbd471c737b89f", &(0x7f00000002c0)=0x1a, &(0x7f0000000340)="17357dd51afb2d9374d2a27d09f088f9785631a8e7e4e634f6ad1968773dfd25cbdddb46a2da6231554bbf58142261e19b7f53e4abda23948b6a49b20af88dc040f2018aab50cc9e2e3cc72b7fa6af5ce1935c1b82a1ab3bb2101a814118c903e16d554275723a5db38e560e62cbda4c85672b896d68a0b22f327078bd395250", 0x80) mkdir(&(0x7f0000000040)='./file2\x00', 0xc1) mkdir(&(0x7f0000000300)='./file2/file0\x00', 0xc2) rename(&(0x7f0000000140)='./file2/file0\x00', &(0x7f0000000100)='./file2\x00') socket(0x10, 0x8000, 0x95) 362.130061ms ago: executing program 7 (id=56): pipe(&(0x7f0000000000)) semop(0x0, &(0x7f00000000c0)=[{0x2}, {0x0, 0x2ff, 0x800}], 0x2) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x18, 0x1, 0x0) close(r0) r1 = socket(0x18, 0x2, 0x0) setsockopt(r1, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) r2 = socket$unix(0x1, 0x2, 0x0) getsockname$unix(r2, &(0x7f00000000c0)=@abs, &(0x7f0000000100)=0x8) ioctl$FIOASYNC(r2, 0x8004667d, &(0x7f0000000000)=0x5) bind$unix(r2, &(0x7f0000000200)=@file={0xd570d0466b6018f, './file0\x00'}, 0xa) sendmsg$unix(r2, &(0x7f0000000080)={&(0x7f0000000040)=@file={0x170, './file0\x00'}, 0xa, 0x0}, 0x0) 361.225433ms ago: executing program 1 (id=57): r0 = open(&(0x7f0000000000)='./file0\x00', 0x9cab835cfdc52675, 0x0) r1 = kqueue() sysctl$vfs_nfs(&(0x7f0000002580)={0xa, 0x2, 0x1}, 0x3, &(0x7f00000025c0)="98bc902bdd8c387106145a3bd11d49e82f72d62aceaced0ab554b584112f5af83c14dd9126cede25b02cc7241810c404ad04ee8f1f275731874cbd0fad835ee0d263073d7b58ee1884347a07413b77be76ed7a7527e3003e645413b4134c6ebc54eee0f7f5f3d165f0f1914154d5bd4a4212477059eaaa6b5ba4ba32c1f60a7b5221c073bfe46f1fb9876e244fd223649482fd94fffd7139196c3c08b7a071cf335348274dcf0cea58bdaa4a32810aefd047667def19fc165112c3f92c4ff21c0d5d4c2bd3677132be8f816ba17f00787cdf3addb9b6707a4c074dfadccfa2dc9ce0c40bd478c433dfc9546777b90cddcd660de6d04b2a38739ed5e6ec254d5a9b7e0f61cb4a678d97fcb80c35a0ec157a3d326cf445c8e71aee2e5dc3a23f04680270b4e9ac7119c801c9c6e53aaf9d7dcf4b34d284aabd395f6a429dcdcb3f815cd36df05f5d1351b6399a354e1b792a2c17007cf64629deca763e1a40a4c38bee7cb1a8379999a5ada00410a255c8d08f34e7d6525ef267477dd33586d3427766d6e215c04d6f934b000ba5a7b1473f34e6aba7cd44fbf21a0d1997ad9195d7e16670cad0b581103ff8e3af4103473edffcc9a1aa3c5a04053b05b93f561997d360c7e234553733a8811eadce2339586e47c42378fff7215f3d66f515b1cdf43b2035fe4a5086a5051a814df33bdc162e19dbb4c11eb8bf44adbeb15ce4b98a8ef030eb61f42c559871963d52348841fbd356ad5a5f6e7c1151efe82554aacb23693d75a3226191b1b64121e743a4620dbbd3684415b04687de2bfaafb546a597e5087b52431b7e0d83ab99141e8ec9c33399ac33cd077abeeff507ca50b335bb57f48db4674c3e3905475c6428d33561194b5e96424eed5a31b1346a9a91ddad215ab6b4780f1f2f6b96e3f98a814766f6f5096df1d4bb515aae8e048884ab4772610495e6c82f6d214e540f6b088351568d54ca0f19d623f40b2f1efe58351fd7f1bd720f2c4b96468fda7789992cdf44bab28c9fb0dbedda4315b84a755a18e207a99297b97f90838d3919794550f1d01f336f846af2e10dd222bfc36f305e5567aac0ac7775698edf3fbc4bb401f00bdf49e878463e19929ee6306f42e68e26a7bd1f8c1dfdfe7cf26fe99ed18a050122f4e51e6f69dfac9210c3c3e0842719904c2c77f47a9aef56e4078d82adb27eb553a58ab6ba54f36fd0e76eba0dd824fee413c1640332cb2496f4e0cbf167274c3a569b823a6c96c9ea9b6891d6a51602f7cfaf0b50b62116ece308176029e1f3de6172b16e89720964ae390cdd1bd3e6556780428af5eb90fca97db2b0c347ee574abfc593a6ab3b8ef9d2f6f7ff03ffc5ed64b4c7762805ad84e6cee76907ad441c657774c9697c16adba010002c1597afffc33fcdcf880eac7008aaa41c489d5ed8d8ad38da91b3acbae5027b6629befe8f194a9ebc4bc132606014f2c28f612e71ab17cb06e481f96d6e28761b8ee149f20abeec037406d0969c7b02d53491fbd17ae7c3b64720820b6920daa3bff6c456cc3748360f9864ca0d90e9e02cd516be536392858a1b2c8c017109de36a1748d2e04f2beb31c20570b0b5e12ed25843823d765422b34aeb9fabee5aa59def5cb72c33f1aeb7b02d3fcb9e92797e470d80f6922fe21cc6a12aaeaf45315d45227cf1bff2340c1d823d02d010b57f19236efa017aebf35b4d5db26d07b8d5a2bf96fdfe99ee079fb7cc0758104b6195083c520ef8285c704815c47c08c4bd62bc2b84a6e05f4c76a12e0167f6f8cbc76cd4b784568a8784724bacd11ca2c91fbbb6bdf8f4dbfe2aa6d331a27e44b666fe02c7b89ef7f4db117e3c21261ee56921146647c34049bfa83002c1cc1b6a7ab350fb99c9034df8b77ec4e09335fcdcb776963f00c89e8b81660784ddca6f6ef0af5fa4815583b849bbd0386305ad8dfee25aa0c707985dfe7dc2081c7d2d52908e10f9e1cad1613247563edc89ecf1e560803cf247929de8bc29b1f07d99830dcc210bdf84be7b740dc3f2b822c6abbe01fa918286c6235324d7602dfb8402d0d83645b36205f38c3c4bdaf40e9993db88722dcc9e81e73b184e199553f22b3e41d16a9463d8a20848a3ad6f13433045138d092f0f153f786076ed5efca31fd46e9a0d18e9c3fbafae0b1d3adc4e3247ae5fac70e786310124fc6f190bfa13df804a63a3306af7fc9cca31a57e0aa4cab3c93ee0a3a579c2df66a628d36202ce99892fb03f57f67aaa30058325966a76e74cd8924aee14f9412805a51d0ae969424924e81b026a39d28ebde778ba585f84594a693e69a9bf4b0afc605a1894a8af5f0b0f10262e34e00524c00a92cc733c7dd1312137dacbf9f8849126a9aa0893ddbba1644fb3537bc9d4edefe9deefd040a56cd90a0b1c4e1c62f585733190f53a23ea23388fe46b3475449812cdd4b0286230e4250a643df22d09c767dc1518fec75080e86c86e707a9be32434fe36b75c2184c1306e1d4e73527ed5a50b03ca6bdeb4cd5b66a270fbc1ebb41c59bc52d8c4224074639b17e1cd2baf671a142b0d9976342d38eb3920327eeaebaaadc7fe451abd021c404f5db7c061412e11cc2c2663c14ed8f865b6f6ae6351f2d5340698ffdb6f8257b1127fe4eed023f2e6ba3621ace6060a51245a86e3cc6a0263a3effe746a83d6b740d029edeb95a273df7415e1a7a28fb6c301a46c33aa80ff6234c58d0cf5f37a2d1402b85461c6ed647d47e1aef598fda8bba8d0260209fd2de833ff0d1195affa79e5c5eda8e4e75c2fbf09254c6ec867f68a2137214eb95022a8281370ca67350f371eba35be5a90a2c01455752bb7bcfb6f6b84c3d9554f10ee21dd129b098f72658b5511b05775447d7c88714a5c79f57ed991951abcd2843b16f29db41883db7a3bd119ed20be0ef48189383848b722b6b4dd1f913707c78194b7eecddcd27571a1aecfc7c4714472a4ed96967b164eec03759256f25f1d17b7c8c4d0573b96b0d050a8dc861585352f965a631994c034d8034b19edbdb8ae84bd0855c152c51a2821c47eb8ade6f69df4345089d1a8b0c42a86c24651d9be6d7dc5a8ea195047d4892d3323ea763a34f4a7a8f3d25f7d695fc2d69466891c393143082957fa9c4776ca36ac3bbfa86a92aa4a818e61f58b4be5fe798de00649a519fd1e9e7d98037bc2173f7a41251b1b51712ca335a853d5edfd8b6da2c64dc10504a400df65fa0c1e01b50f5565e95704cf28485e71036a4225caae32e51e2e4d63008bc24cb1f290f8cceb74b7c4053940fb7ccd5ca7092c2c6353bc414537dd175b29539924863eaf7dac0fc6185d265f4878c599a69fd58713f5f605a3130ad509dd9524810e895cc2c103da732e6b45dc19274add3a1d0bb55a47d5b983216244d6b07fabe21776178723fccbcd984185f3d1aff5d2cf8c6cfdc8a3f8ba4473be31a219f1f24c52ee7cb5aafd46663b5fe0c7b399c75e5139ccea5199c74c68cb63b73e4d8d52a980ca9835f24f3b943c73dede58b1893dda8c3a3402ee79519b61b84fd110fe59cdeda3d1bdec24c0c02042d9dbae0cb189743fde32110edbae30a5ee0cb5acdb61f8b59465335a02bd6fa9bf9c0c160b3f9d435462fafcb4c9922e245eac4f3971ea5d4c0a6a9d15cb0705f383d3315a48ef939ccb34df90760aa3dc06dcc776bd0623d0a6ba5384d4568", &(0x7f00000035c0)=0xa41, 0x0, 0x0) (async) kevent(r1, &(0x7f0000000040), 0x7fffffff, 0x0, 0xffffffff, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0xa011, r0, 0x0) (async) syz_emit_ethernet(0x5e, &(0x7f0000000100)={@broadcast, @random="94ea09066dbd", [], {@ipv6={0x86dd, {0x0, 0x6, "db8344", 0x28, 0x0, 0x0, @rand_addr="fed38d5ba80b9e61cd0c535a9800", @mcast2, {[@dstopts={0x8, 0x2, '\x00', [@enc_lim={0x4, 0x1, 0xa}, @enc_lim={0x4, 0x1, 0x9}, @generic={0x1}, @padn={0x1, 0x1, [0x0]}, @jumbo={0xc2, 0x4, 0x3eb}]}], @udp={{0x0, 0x2, 0x8}}}}}}}) (async) ftruncate(r0, 0x79c8) (async) madvise(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x6) 229.44073ms ago: executing program 4 (id=58): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x3, 0xffffffffffffffff) (async) setitimer(0xec5d2d4f8c16df6, 0x0, 0x0) fcntl$getown(r1, 0x5) (async) write(r2, &(0x7f0000000000)="167b4664ea9bdb8504bd2f94c76c9c77", 0x10) (async) execve(0x0, 0x0, 0x0) 228.0302ms ago: executing program 7 (id=59): r0 = msgget$private(0x0, 0xaf7c2a72ea320c7e) r1 = syz_open_pts() close(r1) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) poll(&(0x7f0000000100)=[{r2, 0x40}], 0x1, 0x9) ioctl$FIOASYNC(r2, 0x8004667d, &(0x7f00000000c0)=0xd8) read(r2, 0x0, 0x0) r3 = syz_open_pts() fcntl$setstatus(r1, 0x4, 0x4) ioctl$TIOCSTOP(r3, 0x2000746f) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000340)="20c92c", 0xfd39}], 0x1) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000a00)="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", 0x604}], 0x1) msgsnd(r0, &(0x7f0000000040)=ANY=[@ANYRESDEC], 0x0, 0x0) setrlimit(0x8, &(0x7f0000000040)={0x7, 0x50}) r4 = syz_open_pts() close(r4) r5 = syz_open_pts() ioctl$TIOCSETAW(r5, 0x802c7415, &(0x7f0000000000)={0x29f57365, 0x9, 0x1f, 0xffffffff, "8b030003000100787d902b52d864d3c3a3f4d3c9"}) writev(r4, &(0x7f0000000300)=[{&(0x7f0000001680)="1d425e2f9492c6fd18645ad25488926295b423cb7c8e7f5a2aee8a2eae30fb0862987a46f2b761b3189705acdb7968de171f9652cc90795d9a7945f34210ac53e7f4fae4feb96d68b99594dc0c7e2bb983d80576b964a594b9a530b509724cdccbd42fe14892b3366cba7d0018ad369ce1d9279edca929609166a15ad2992bd7484dfb91da627b21d48708e22283e5a43d48e8a3b3f840649f9b41dcaeb5c06855496503364e398b41347041b531e2a64d77e7e5b09826e49938cc2ebc1b9b87db4e01d31f8d80b4f051735b894cbdc047088900", 0xd4}], 0x1) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) r6 = open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) ioctl$FIONREAD(r6, 0xc0206983, &(0x7f00000001c0)) msgrcv(r0, &(0x7f00000012c0)={0x0, ""/251}, 0x103, 0x1e979c62bc302e6a, 0x800) 227.551807ms ago: executing program 7 (id=60): r0 = open(&(0x7f0000000000)='./file0\x00', 0x9cab835cfdc52675, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0xa011, r0, 0x0) ftruncate(r0, 0x79c8) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000001f00)="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", 0x101}], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, r3, r2, 0x0, 0x1, 0xfffd}, 0x0, 0x8000}) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') chmod(&(0x7f0000000340)='./file0\x00', 0x9) sysctl$kern(&(0x7f00000000c0)={0x1, 0x4e}, 0x3, &(0x7f00000001c0)="6ff91ecd378a4e588e5f84cf71b59c7af6c37013fc5dda17179a14ee0a20de8db3a97d2b3e090c33208c7538ef29d0c651d294979a3a9ab1e2dcf76dc09959f2677341c041790689e64d4f8dc54b31558eed21bc", &(0x7f0000000240)=0xffb5, 0x0, 0x37) munmap(&(0x7f0000000000/0x4000)=nil, 0x4000) 223.676646ms ago: executing program 4 (id=61): setsockopt$sock_int(0xffffffffffffffff, 0xffff, 0x800, &(0x7f0000000040)=0x3, 0x4) (async) setsockopt$sock_int(0xffffffffffffffff, 0xffff, 0x800, &(0x7f0000000040)=0x3, 0x4) accept$inet(0xffffffffffffffff, &(0x7f0000000040), 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f00000000c0), 0x1c, 0x0}, 0x0) (async) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f00000000c0), 0x1c, 0x0}, 0x0) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x100000000000000, 0x3}}) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x18, 0x1, 0x0) close(r0) socket(0x18, 0x1, 0x0) (async) r1 = socket(0x18, 0x1, 0x0) close(r1) r2 = socket(0x18, 0x2, 0x0) connect$unix(r2, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) setsockopt(r1, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) sendmsg$unix(r0, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$unix(r0, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') lchown(&(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, 0x0) (async) lchown(&(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, 0x0) 0s ago: executing program 2 (id=62): setrlimit(0x8, &(0x7f0000000000)={0x43, 0x62}) (async) r0 = syz_open_pts() sysctl$kern(&(0x7f00000000c0)={0x1, 0x12}, 0x2, 0x0, 0x0, 0x0, 0x0) (async) close(r0) r1 = syz_open_pts() ioctl$FIOASYNC(r0, 0x80047470, &(0x7f0000000140)=0x2) ioctl$TIOCSTOP(r1, 0x2000746f) (async) read(r0, &(0x7f0000000040)=""/239, 0xef) (async) poll(&(0x7f00000001c0)=[{r0, 0xaeecaebf517d446a}], 0x1, 0x6) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) ftruncate(r2, 0x9) (async) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r3, 0x0, 0x200000000000c, &(0x7f0000000000)="eaef125cee000000", 0x8) (async) ftruncate(r2, 0x3) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.121' (ED25519) to the list of known hosts. panic: uvm_fault_unwire_locked: address not in map Stopped at db_enter+0x25: addq $0x8,%rsp TID PID UID PRFLAGS PFLAGS CPU COMMAND *489452 50800 32767 0x10 0x4000000 1K syz-executor 463532 71549 32767 0x1010 0x4080000 0 syz-executor db_enter() at db_enter+0x25 panic(ffffffff83405d74) at panic+0x1e5 uvm_fault_unwire_locked(fffffd806bf99028,400000000000,400000011000) at uvm_fault_unwire_locked+0x48d uvm_fault_unwire(fffffd806bf99028,400000000000,400000011000) at uvm_fault_unwire+0x55 kern_sysctl_dirs(4e,ffff80003c584358,1,4000000001c0,ffff80003c584388,0,289eb1eaea22dc17,1) at kern_sysctl_dirs+0x340 kern_sysctl(ffff80003c584354,2,4000000001c0,ffff80003c584388,0,37,a42570926d27c9e8) at kern_sysctl+0x12d sys_sysctl(ffff8000ffff79c0,ffff80003c5844c0,ffff80003c584410) at sys_sysctl+0x425 syscall(ffff80003c5844c0) at syscall+0xbc6 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x43cc29d0f40, count: 6 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{1}> ddb{1}> set $lines = 0 ddb{1}> set $maxwidth = 0 ddb{1}> show panic *cpu1: uvm_fault_unwire_locked: address not in map ddb{1}> trace db_enter() at db_enter+0x25 panic(ffffffff83405d74) at panic+0x1e5 uvm_fault_unwire_locked(fffffd806bf99028,400000000000,400000011000) at uvm_fault_unwire_locked+0x48d uvm_fault_unwire(fffffd806bf99028,400000000000,400000011000) at uvm_fault_unwire+0x55 kern_sysctl_dirs(4e,ffff80003c584358,1,4000000001c0,ffff80003c584388,0,289eb1eaea22dc17,1) at kern_sysctl_dirs+0x340 kern_sysctl(ffff80003c584354,2,4000000001c0,ffff80003c584388,0,37,a42570926d27c9e8) at kern_sysctl+0x12d sys_sysctl(ffff8000ffff79c0,ffff80003c5844c0,ffff80003c584410) at sys_sysctl+0x425 syscall(ffff80003c5844c0) at syscall+0xbc6 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x43cc29d0f40, count: -9 ddb{1}> show registers rdi 0 rsi 0x1 rbp 0xffff80003c583f60 rbx 0xffff800029aacdc7 rdx 0xffff80000143ed80 rcx 0xffff8000ffff79c0 rax 0xffff800029aabff0 r8 0x101010101010101 r9 0x8080808080808080 r10 0x1aa9f13b12282368 r11 0x320b378f65c403af r12 0xffff800029aacbc8 r13 0 r14 0 r15 0x1 rip 0xffffffff82c3c5a5 db_enter+0x25 cs 0x8 rflags 0x246 rsp 0xffff80003c583f50 ss 0x10 db_enter+0x25: addq $0x8,%rsp ddb{1}> show proc PROC (syz-executor) tid=489452 pid=50800 tcnt=6 stat=onproc flags process=10 proc=4000000 runpri=32, usrpri=86, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff80002a42fc60,0xffff8000ffff7c60 process=0xffff80003c4fb020 user=0xffff80003c57f000, vmspace=0xfffffd806bf99028 estcpu=36, cpticks=0, pctcpu=0.0, user=0, sys=0, intr=0 ddb{1}> ps PID TID PPID UID S FLAGS WAIT COMMAND 50800 345339 13325 32767 3 0x90 nanoslp syz-executor 50800 431847 13325 32767 2 0x4000010 syz-executor 50800 356279 13325 32767 2 0x4000010 syz-executor 50800 405780 13325 32767 2 0x4000010 syz-executor *50800 489452 13325 32767 7 0x4000010 syz-executor 50800 448996 13325 32767 3 0x4000090 fsleep syz-executor 71549 244276 55638 32767 3 0x3010 suspend syz-executor 71549 463532 55638 32767 7 0x4081010 syz-executor 25624 408611 15540 32767 2 0x10 syz-executor 25624 512366 15540 32767 3 0x4000090 sbwait syz-executor 25624 173649 15540 32767 3 0x4000090 fsleep syz-executor 25624 208733 15540 32767 2 0x4000010 syz-executor 66719 157729 8227 32767 2 0x490 syz-executor 66719 417069 8227 32767 3 0x4000090 msgwait syz-executor 66719 17495 8227 32767 3 0x4000090 fsleep syz-executor 34642 78500 0 0 3 0x14200 bored sosplice 13325 257414 90572 32767 3 0x90 nanoslp syz-executor 63877 1092 87712 32767 2 0x10 syz-executor 12961 239280 3066 32767 3 0x10 biowait syz-executor 15540 162222 44326 32767 3 0x90 nanoslp syz-executor 15519 476977 47091 32767 2 0x10 syz-executor 8227 351404 66785 32767 3 0x90 nanoslp syz-executor 55638 237332 74989 32767 3 0x90 nanoslp syz-executor 48352 479670 80839 32767 2 0x10 syz-executor 90572 9161 20334 0 3 0x82 wait syz-executor 47091 269814 20334 0 3 0x82 wait syz-executor 80839 253380 20334 0 3 0x82 wait syz-executor 3066 385549 20334 0 3 0x82 wait syz-executor 66785 202080 20334 0 3 0x82 wait syz-executor 87712 503992 20334 0 3 0x82 wait syz-executor 74989 83797 20334 0 3 0x82 wait syz-executor 44326 394450 20334 0 3 0x82 wait syz-executor 20334 427781 34655 0 3 0x82 kqread syz-executor 34655 68784 25236 0 3 0x10008a sigsusp ksh 25236 159762 60252 0 3 0x98 kqread sshd-session 60252 314734 12504 0 3 0x92 kqread sshd-session 69669 225961 1 0 3 0x100083 ttyin getty 12504 283745 1 0 3 0x88 kqread sshd 34579 470357 51659 73 3 0x1100090 kqread syslogd 51659 153564 1 0 3 0x100082 sbwait syslogd 71636 376123 1 0 3 0x100080 kqread resolvd 21662 226000 47618 77 3 0x100092 kqread dhcpleased 96731 127349 47618 77 3 0x100092 kqread dhcpleased 47618 156946 1 0 3 0x80 kqread dhcpleased 53367 225415 0 0 3 0x14200 bored smr 17485 499226 0 0 3 0x14200 pgzero zerothread 24453 249182 0 0 3 0x14200 aiodoned aiodoned 56162 105542 0 0 3 0x14200 syncer update 21518 166357 0 0 3 0x14200 cleaner cleaner 23718 242491 0 0 3 0x14200 reaper reaper 21247 110959 0 0 3 0x14200 pgdaemon pagedaemon 33695 319328 0 0 3 0x14200 bored viomb 86851 315566 0 0 3 0x40014200 acpi0 acpi0 26693 349107 0 0 3 0x40014200 idle1 99040 407749 0 0 3 0x14200 bored softnet3 97471 446336 0 0 3 0x14200 bored softnet2 66664 179288 0 0 3 0x14200 bored softnet1 1089 456330 0 0 2 0x14200 softnet0 27221 299368 0 0 3 0x14200 bored systqmp 97855 454309 0 0 3 0x14200 bored systq 84437 159859 0 0 3 0x14200 tmoslp softclockmp 94562 269254 0 0 3 0x40014200 tmoslp softclock 39406 130792 0 0 3 0x40014200 idle0 1 116204 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb{1}> show all locks Process 50800 (syz-executor) thread 0xffff8000ffff79c0 (489452) shared rwlock vmmaplk r = 0 (0xfffffd806bf99128) #0 witness_lock+0x5bb #1 rw_do_enter_read+0x3af #2 uvm_fault_unwire+0x3e #3 kern_sysctl_dirs+0x340 #4 kern_sysctl+0x12d #5 sys_sysctl+0x425 #6 syscall+0xbc6 #7 Xsyscall+0x128 exclusive kernel_lock &kernel_lock r = 0 (0xffffffff838e8818) #0 witness_lock+0x5bb #1 __mp_acquire_count+0x58 #2 mi_switch+0x4b7 #3 sleep_finish+0x24f #4 rw_do_enter_write+0x1de #5 rrw_enter+0xc6 #6 VOP_LOCK+0xa6 #7 vn_lock+0xa4 #8 vfs_getcwd_common+0xd1 #9 sysctl_proc_cwd+0x2b2 #10 kern_sysctl_dirs+0x2d0 #11 kern_sysctl+0x12d #12 sys_sysctl+0x425 #13 syscall+0xbc6 #14 Xsyscall+0x128 exclusive rwlock sysctllk r = 0 (0xffffffff8383d028) #0 witness_lock+0x5bb #1 rw_do_enter_write+0x3ea #2 sysctl_vslock+0x45 #3 kern_sysctl_dirs+0x247 #4 kern_sysctl+0x12d #5 sys_sysctl+0x425 #6 syscall+0xbc6 #7 Xsyscall+0x128 Process 63877 (syz-executor) thread 0xffff8000ffff6a60 (1092) exclusive rrwlock inode r = 0 (0xfffffd8069c23bd0) #0 witness_lock+0x5bb #1 rw_do_enter_write+0x3ea #2 rrw_enter+0xc6 #3 VOP_LOCK+0xa6 #4 vn_lock+0xa4 #5 vn_closefile+0x111 #6 fdrop+0x126 #7 closef+0x192 #8 syscall+0xbc6 #9 Xsyscall+0x128 Process 12961 (syz-executor) thread 0xffff8000ffff6cf0 (239280) exclusive rrwlock inode r = 0 (0xfffffd8069c23ce8) #0 witness_lock+0x5bb #1 rw_do_enter_write+0x3ea #2 rrw_enter+0xc6 #3 VOP_LOCK+0xa6 #4 ufs_ihashins+0x4f #5 ffs_vget+0x187 #6 ffs_inode_alloc+0x283 #7 ufs_mkdir+0x113 #8 VOP_MKDIR+0x102 #9 domkdirat+0x179 #10 syscall+0xb08 #11 Xsyscall+0x128 exclusive rrwlock inode r = 0 (0xfffffd806c707aa8) #0 witness_lock+0x5bb #1 rw_do_enter_write+0x3ea #2 rrw_enter+0xc6 #3 VOP_LOCK+0xa6 #4 vn_lock+0xa4 #5 vfs_lookup+0x109 #6 namei+0x7aa #7 domkdirat+0x8b #8 syscall+0xb08 #9 Xsyscall+0x128 ddb{1}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 10183 10953K 10966K 166960K 11262 0 pcb 17 12K 12K 166960K 17 0 rtable 234 6K 6K 166960K 347 0 pf 31 16K 16K 166960K 31 0 ifaddr 42 7K 7K 166960K 44 0 ifgroup 50 2K 2K 166960K 50 0 sysctl 1 1K 1K 166960K 1 0 counters 64 36K 36K 166960K 64 0 ioctlops 0 0K 2K 166960K 29 0 iov 1 2K 12K 166960K 7 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1332 84K 84K 166960K 1350 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 3 5K 5K 166960K 5 0 VM map 2 1K 1K 166960K 2 0 sem 7 0K 0K 166960K 7 0 dirhash 12 2K 2K 166960K 15 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 22 81K 125K 166960K 198 0 sigio 1 0K 0K 166960K 1 0 proc 58 79K 127K 166960K 483 0 subproc 72 4K 4K 166960K 72 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 2 0K 0K 166960K 15 0 in_multi 99 7K 7K 166960K 100 0 ether_multi 1 0K 0K 166960K 1 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 43 201K 201K 166960K 43 0 exec 0 0K 1K 166960K 343 0 fusefs mount 1 32K 32K 166960K 1 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 236 75K 75K 166960K 3151 0 UVM aobj 8 2K 2K 166960K 8 0 pinsyscall 43 86K 113K 166960K 1190 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 0K 166960K 3 0 NDP 11 0K 2K 166960K 27 0 temp 42 8639K 8707K 166960K 6139 0 kqueue 13 20K 26K 166960K 38 0 SYN cache 2 16K 16K 166960K 2 0 ddb{1}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 24 0 0 1 0 1 1 0 8 0 rtpcb 120 38 0 35 1 0 1 1 0 8 0 rtentry 112 111 0 1 4 0 4 4 0 8 0 unpcb 144 76 0 57 1 0 1 1 0 8 0 syncache 336 3 0 3 1 0 1 1 0 8 1 tcpcb 808 52 0 47 4 0 4 4 0 8 3 arp 120 18 0 0 1 0 1 1 0 8 0 ipq 40 1 0 0 1 0 1 1 0 8 0 ipqe 40 1 0 0 1 0 1 1 0 8 0 inpcb 376 206 0 197 8 0 8 8 0 8 6 nd6 136 24 0 0 1 0 1 1 0 8 0 kcovpl 48 8 0 0 1 0 1 1 0 8 0 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 452 0 0 29 0 29 29 0 8 0 art_table 32 453 0 0 4 0 4 4 0 8 0 art_node 16 110 0 10 1 0 1 1 0 8 0 sysvmsgpl 40 1 0 1 1 0 1 1 0 8 1 semupl 112 1 0 1 1 0 1 1 0 8 1 semapl 112 5 0 0 1 0 1 1 0 8 0 shmpl 112 5 0 0 1 0 1 1 0 8 0 dirhash 1024 19 0 2 3 0 3 3 0 8 0 dino2pl 256 1626 0 122 95 0 95 95 0 8 0 ffsino 280 1626 0 122 108 0 108 108 0 8 0 nchpl 144 1888 0 210 63 0 63 63 0 8 0 uvmvnodes 80 1707 0 0 35 0 35 35 0 8 0 vnodes 216 1707 0 0 95 0 95 95 0 8 0 namei 1024 5468 0 5467 2 0 2 2 0 8 1 percpumem 16 46 0 0 1 0 1 1 0 8 0 kstatmem 264 22 0 0 2 0 2 2 0 8 0 scxspl 216 6194 0 6193 3 1 2 2 1 8 1 plimitpl 152 40 0 16 2 0 2 2 0 8 1 sigapl 424 469 0 416 8 0 8 8 0 8 0 futexpl 64 777 0 774 1 0 1 1 0 8 0 knotepl 120 71 0 0 3 0 3 3 0 8 0 kqueuepl 216 106 0 96 5 0 5 5 0 8 4 pipepl 328 106 0 78 3 0 3 3 0 8 0 fdescpl 504 450 0 416 7 1 6 6 0 8 1 filepl 152 1721 0 1504 12 0 12 12 0 8 3 lockfpl 104 34 0 30 1 0 1 1 0 8 0 lockfspl 48 13 0 9 1 0 1 1 0 8 0 sessionpl 144 21 0 5 1 0 1 1 0 8 0 pgrppl 48 30 0 6 1 0 1 1 0 8 0 ucredpl 104 120 0 101 1 0 1 1 0 8 0 zombiepl 144 417 0 416 1 0 1 1 0 8 0 processpl 1168 469 0 416 5 0 5 5 0 8 0 procpl 656 578 0 514 7 0 7 7 0 8 1 sosppl 168 1 0 1 1 0 1 1 0 8 1 sockpl 688 321 0 290 9 0 9 9 0 8 5 mcl64k 65536 1 0 0 1 0 1 1 0 8 0 mcl16k 16384 1 0 0 1 0 1 1 0 8 0 mcl8k 8192 3 0 0 1 0 1 1 0 8 0 mcl4k 4096 113 0 0 15 0 15 15 0 8 0 mcl2k 2048 16 0 0 2 0 2 2 0 8 0 mtagpl 96 2 0 0 1 0 1 1 0 8 0 mbufpl 256 188 0 0 12 0 12 12 0 8 0 bufpl 280 2364 0 124 160 0 160 160 0 8 0 anonpl 24 110110 0 103363 55 0 55 55 0 184 11 amapchunkpl 152 9874 0 9174 31 0 31 31 0 158 1 amappl16 200 2342 0 2290 16 0 16 16 0 8 9 amappl15 192 7 0 7 1 0 1 1 0 8 1 amappl14 184 100 0 90 1 0 1 1 0 8 0 amappl13 176 26 0 26 1 1 0 1 0 8 0 amappl12 168 1043 0 1009 2 0 2 2 0 8 0 amappl11 160 64 0 54 1 0 1 1 0 8 0 amappl10 152 6 0 6 1 1 0 1 0 8 0 amappl9 144 246 0 246 1 0 1 1 0 8 1 amappl8 136 21 0 19 1 0 1 1 0 8 0 amappl7 128 94 0 83 1 0 1 1 0 8 0 amappl6 120 181 0 178 1 0 1 1 0 8 0 amappl5 112 119 0 113 1 0 1 1 0 8 0 amappl4 104 282 0 266 1 0 1 1 0 8 0 amappl3 96 1578 0 1461 4 0 4 4 0 8 0 amappl2 88 591 0 538 2 0 2 2 0 8 0 amappl1 80 7524 0 6991 13 0 13 13 0 8 0 amappl 88 2819 0 2632 5 0 5 5 0 92 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 7 0 0 1 0 1 1 0 8 0 uaddrrnd 24 450 0 416 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 450 0 416 1 0 1 1 0 8 0 vmmpekpl 168 5203 0 5167 2 0 2 2 0 8 0 vmmpepl 168 34400 0 32501 102 0 102 102 0 357 6 vmsppl 456 449 0 416 7 1 6 6 0 8 1 rwobjpl 64 14676 0 12098 47 1 46 46 0 8 2 pdppl 4096 908 0 832 108 24 84 98 0 8 8 pvpl 32 16397 0 0 134 0 134 134 0 265 1 pmappl 248 449 0 416 4 1 3 3 0 8 0 extentpl 40 55 0 38 1 0 1 1 0 8 0 phpool 112 290 0 27 8 0 8 8 0 8 0 ddb{1}> machine ddbcpu 0 Stopped at x86_ipi_db+0x27: addq $0x8,%rsp x86_ipi_db(ffffffff83863ff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __mp_lock(ffffffff838e8610) at __mp_lock+0x192 intr_handler(ffff80003c504530,ffff800000079f00) at intr_handler+0xe1 Xintr_ioapic_edge23_untramp() at Xintr_ioapic_edge23_untramp+0x18f __mp_lock(ffffffff838e8610) at __mp_lock+0x192 softintr_dispatch(0) at softintr_dispatch+0x5b Xsoftclock() at Xsoftclock+0x27 __sanitizer_cov_trace_const_cmp4(ffff80003c504948,0) at __sanitizer_cov_trace_const_cmp4+0x3b uvm_fault_check(ffff80003c504948,ffff80003c504980,ffff80003c5049b0,0) at uvm_fault_check+0x4b uvm_fault(fffffd806bf993b8,40a000,0,2) at uvm_fault+0x106 kpageflttrap(ffff80003c504af0,40a140) at kpageflttrap+0x2d0 kerntrap(ffff80003c504af0) at kerntrap+0x14a end trace frame: 0xffff80003c504b70, count: 0 ddb{0}> trace x86_ipi_db(ffffffff83863ff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __mp_lock(ffffffff838e8610) at __mp_lock+0x192 intr_handler(ffff80003c504530,ffff800000079f00) at intr_handler+0xe1 Xintr_ioapic_edge23_untramp() at Xintr_ioapic_edge23_untramp+0x18f __mp_lock(ffffffff838e8610) at __mp_lock+0x192 softintr_dispatch(0) at softintr_dispatch+0x5b Xsoftclock() at Xsoftclock+0x27 __sanitizer_cov_trace_const_cmp4(ffff80003c504948,0) at __sanitizer_cov_trace_const_cmp4+0x3b uvm_fault_check(ffff80003c504948,ffff80003c504980,ffff80003c5049b0,0) at uvm_fault_check+0x4b uvm_fault(fffffd806bf993b8,40a000,0,2) at uvm_fault+0x106 kpageflttrap(ffff80003c504af0,40a140) at kpageflttrap+0x2d0 kerntrap(ffff80003c504af0) at kerntrap+0x14a alltraps_kern_meltdown() at alltraps_kern_meltdown+0x7b copyout() at copyout+0x57 syscall(ffff80003c504f40) at syscall+0xbc6 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xb7c532034d0, count: -18 ddb{0}> machine ddbcpu 1 Stopped at db_enter+0x25: addq $0x8,%rsp db_enter() at db_enter+0x25 panic(ffffffff83405d74) at panic+0x1e5 uvm_fault_unwire_locked(fffffd806bf99028,400000000000,400000011000) at uvm_fault_unwire_locked+0x48d uvm_fault_unwire(fffffd806bf99028,400000000000,400000011000) at uvm_fault_unwire+0x55 kern_sysctl_dirs(4e,ffff80003c584358,1,4000000001c0,ffff80003c584388,0,289eb1eaea22dc17,1) at kern_sysctl_dirs+0x340 kern_sysctl(ffff80003c584354,2,4000000001c0,ffff80003c584388,0,37,a42570926d27c9e8) at kern_sysctl+0x12d sys_sysctl(ffff8000ffff79c0,ffff80003c5844c0,ffff80003c584410) at sys_sysctl+0x425 syscall(ffff80003c5844c0) at syscall+0xbc6 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x43cc29d0f40, count: 6 ddb{1}> trace db_enter() at db_enter+0x25 panic(ffffffff83405d74) at panic+0x1e5 uvm_fault_unwire_locked(fffffd806bf99028,400000000000,400000011000) at uvm_fault_unwire_locked+0x48d uvm_fault_unwire(fffffd806bf99028,400000000000,400000011000) at uvm_fault_unwire+0x55 kern_sysctl_dirs(4e,ffff80003c584358,1,4000000001c0,ffff80003c584388,0,289eb1eaea22dc17,1) at kern_sysctl_dirs+0x340 kern_sysctl(ffff80003c584354,2,4000000001c0,ffff80003c584388,0,37,a42570926d27c9e8) at kern_sysctl+0x12d sys_sysctl(ffff8000ffff79c0,ffff80003c5844c0,ffff80003c584410) at sys_sysctl+0x425 syscall(ffff80003c5844c0) at syscall+0xbc6 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x43cc29d0f40, count: -9