last executing test programs: 4.626439347s ago: executing program 1 (id=2): setitimer(0x1, 0x0, 0x0) pledge(&(0x7f0000000d80)='\xa1\x9e\\\xe3\x80\xd9|i\x1a\x8e\x97~\xa7e &\x97\xf0\xb7\x1e\xe7\x8eA\xb0j{\xc4z\xb7\xf7;\xa9\x8fK\x83Yh\xb5\xb4\x8eBbr\xfb\xc8\xf9G\x88\x1d\xb6\xce\f.\xa8P\xb6\x1a\x00\xfb\x80W\xa2\x1c\b\xeeT7\xbd\xeb`;\xf1~D\xca\x12\xeb\xbc\xc0,\x15\\\xc3\x11\xce\fQ\x1e\xc8\x1f`#X\xa5\xce\xf2\xb05=\xdb\xda0q\xd2u<\rV\x7fJ\xfd\x8eq\xd1b\xe0\xfcM\xda\x00\x81l\xd9\xb2r\xb2\xc8D\xf4\x99A\f\xa2\xaa_QW\x1d\xdc\f\xb9!\x11\xf3\xe3mT\xfa\xf7\xb5a\x9c\xca\x01\x1a\xcflo\xe3^]\xdf,u\xb8\x83\x18mi-\b\x9a\xbf\x19\x85[\x95\xeeU\xc3\xd7\xe5\'9;\x90\xf1\xf4\xc8cVD\xfd0x41424344}, 0xa, 0x6) syz_extract_tcp_res$synack(&(0x7f0000000280)={0x41424344}, 0x1, 0x0) r3 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$DIOCXBEGIN(r3, 0xc0104451, &(0x7f0000000040)={0x0, 0x408, 0x0}) pledge(&(0x7f0000000240)='\x00', &(0x7f0000001500)='\xa1\x9e\\\xe3\x80\xd9|i\x1a\x8e\x97~\xa7e &\x97\xf0\xb7\x1e\xe7\x8eA\xb0j{\xc4z\xb7\xf7;\xa9\x8fK\x83Yh\xb5\xb4\x8eBbr\xfb\xc8\xf9G\x88\x1d\xb6\xce\f.\xa8P\xb6\x1a\x00\xfb\x80W\xa2\x1c\b\xeeT7\xbd\xeb`;\xf1~D\xca\x12\xeb\xbc\xc0,\x15\\\xc3\x11\xce\fQ\x1e\xc8\x1f`#X\xa5\xce\xf2\xb05=\xdb\xda0q\xd2u<\rV\x7fJ\xfd\x8eq\xd1b\xe0\xfcM\xda\x00\x81l\xd9\xb2r\xb2\xc8D\xf4\x99A\f\xa2\xaa_QW\x1d\xdc\f\xb9!\x11\xf3\xe3mT\xfa\xf7\xb5a\x9c\xca\x01\x1a\xcflo\xe3^]\xdf,u\xb8\x83\x18mi-\b\x9a\xbf\x19\x85[\x95\xeeU\xc3\xd7\xe5\'9;\x90\xf1\xf4\xc8cVD\xfd0x0) getgroups(0x7, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, r4, r4, r4]) setresgid(0xffffffffffffffff, r7, 0x0) r8 = semget$private(0x0, 0x4, 0x80) r9 = getuid() r10 = geteuid() setuid(r10) semctl$IPC_SET(r8, 0x0, 0x1, &(0x7f0000001680)={{r9, r5, r10, r6, 0x0, 0x7, 0x0, 0x0, 0x2}, 0x0, 0x4, 0x0, 0x0, 0x3, 0x0, 0x9}) socket$inet(0x2, 0x1000, 0x6d) 4.418668668s ago: executing program 6 (id=7): ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x6, 0x81, 0x24468b9, 0x1, 0x401, 0x8, 0x7, 0xf, 0x7], 0x9, 0x10000, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffff9c, 0xc05064a7, &(0x7f0000000340)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x7, 0xa, 0x0, 0x0, 0x14, 0xd9, 0x0, 0x7, 0x2f4, 0x78}) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x3, 0x4, 0x0, 0x10, 0x8, 0xfffffff5, 0x2, 0x5, 0x100}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000440)={&(0x7f00000003c0)=[r2], 0x1, r3, 0x0, 0x6, 0x40, 0x8000, 0x4, {0xdc, 0x2, 0x4, 0x9, 0x1, 0x0, 0x3, 0x9, 0x0, 0x10, 0x84b0, 0x7, 0x4, 0x5, "cdcaf94a5c4421128089f1e563d6e6c75ea031002a4c3b9c5937e719dc2d9345"}}) r5 = openat$pf(0xffffffffffffff9c, &(0x7f00000004c0), 0x67e56fcfaff95ef4, 0x0) ioctl$DIOCXROLLBACK(r5, 0xc0104453, &(0x7f0000000d40)={0x2, 0x5, &(0x7f0000000500)=[{0x1, './file0\x00', 0x5}, {0x0, './file0\x00', 0x101}]}) r6 = semget$private(0x0, 0x2, 0x414) semctl$GETNCNT(r6, 0x4, 0x3, &(0x7f0000000d80)=""/50) semctl$GETPID(r6, 0x4, 0x4, &(0x7f0000000dc0)=""/161) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, &(0x7f0000000e80)={r0}) ioctl$DRM_IOCTL_MODE_ADDFB(r1, 0xc01c64ae, &(0x7f0000000ec0)={r4, 0x80000001, 0x4, 0x600, 0x2, 0xb, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000f00)={0x0, 0x0, 0x90000, 0x40, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000f40)={0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000f80)={0x0}) ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f0000000fc0)={0x0, 0xe, 0xa, 0x30334258, 0x2, [r7, r8, r9, r10], [0x2, 0x8, 0x2, 0x80a], [0x6, 0x6, 0x5, 0xf], [0x8001, 0xfffffffffffffffe, 0xffffffff, 0x100000001]}) r11 = accept$inet6(0xffffffffffffff9c, &(0x7f0000001040), &(0x7f0000001080)=0x1c) getresuid(&(0x7f00000010c0), &(0x7f0000001100)=0x0, &(0x7f0000001140)) stat(&(0x7f0000001180)='./file0\x00', &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r11, 0xffff, 0x1022, &(0x7f0000001240)={0xffffffffffffffff, r12, r13}, 0xc) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000001280)={0x0, 0x0}) semop(r6, &(0x7f00000012c0)=[{0x4, 0x8001}, {0x1, 0xc9ae, 0x800}, {}], 0x3) connect$unix(0xffffffffffffff9c, &(0x7f0000001300)=@abs={0x3, 0x0, 0x0, 0x3}, 0x8) fstatat(0xffffffffffffff9c, &(0x7f0000001380)='./file0\x00', &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) fstat(r11, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f0000001340)='./file0\x00', r15, r16) ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f00000014c0)={0x0, 0xffffffe0, 0x38b, 0x32315852, 0x3, [r9, r8, r8, r14], [0x6, 0x20000, 0x10001, 0x8b31], [0x0, 0x4, 0x401, 0x8], [0x64, 0x0, 0x2, 0x6]}) ioctl$DRM_IOCTL_MODE_ADDFB(0xffffffffffffff9c, 0xc01c64ae, &(0x7f0000001540)={r4, 0x8, 0x99, 0x3aa8, 0x2, 0x8000, r17}) fsync(0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001580)) semctl$GETVAL(r6, 0x3, 0x5, &(0x7f00000015c0)=""/74) 4.330456249s ago: executing program 7 (id=8): symlink(&(0x7f0000000180)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001d80)='./file1\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r0, 0x0, 0x0, 0x404, 0x0, 0x0) truncate(&(0x7f0000000140)='./file1\x00', 0x1229) rename(&(0x7f0000000000)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000002c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 4.220312554s ago: executing program 5 (id=6): mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x674) r0 = open(&(0x7f0000001980)='./file0\x00', 0x80, 0x0) ioctl$TIOCSETA(r0, 0x80047466, &(0x7f0000000500)={0x3, 0xffffffff, 0x519, 0x3, "4522ab1c59b3f1beca704340880e1a5213513f4c", 0x2c1, 0x4}) r1 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000680), 0x1, 0x0) ioctl$WSMOUSEIO_SETPARAMS(r1, 0x80105728, &(0x7f00000007c0)={&(0x7f0000000780)=[{0x101, 0xffffffff}, {0x24, 0x73b}], 0x2}) sysctl$kern(&(0x7f0000000040)={0x1, 0x18}, 0x2, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCSBRK(r0, 0x2000747b) pselect(0x40, &(0x7f0000000040)={0x0, 0x21a, 0x8, 0x6, 0x1834, 0x140, 0xf, 0x5}, 0x0, &(0x7f0000000100)={0x7fff, 0x654, 0x10001, 0xffffffffffffffff, 0x2, 0x5, 0x7fffffff, 0x7fff}, 0x0, 0x0) 3.922290791s ago: executing program 7 (id=9): munmap(&(0x7f0000000000/0x9000)=nil, 0x9000) getsockopt$sock_timeval(0xffffffffffffffff, 0xffff, 0x1005, 0x0, 0x0) r0 = shmget$private(0x0, 0x3000, 0x2e, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000000000/0x800000)=nil, 0x1000) sysctl$vfs_nfs(&(0x7f0000000000)={0xa, 0x2, 0x1}, 0x3, 0x0, 0x0, 0x0, 0x0) sysctl$kern(&(0x7f0000000000)={0x1, 0x33}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x4) sysctl$vm_swapencrypt(&(0x7f0000000100), 0x3, 0x0, 0x0, 0x0, 0x0) mkfifo(&(0x7f00000020c0)='./file0\x00', 0x11) syz_emit_ethernet(0x56, &(0x7f0000000300)={@local, @local, [], {@ipv6={0x86dd, {0xf, 0x6, "61184a", 0x20, 0x6, 0x1, @remote={0xfe, 0x80, '\x00', 0x0}, @local={0xfe, 0x80, '\x00', 0x0}, {[], @udp={{0x2, 0x2, 0x8}, {"cac7b94a86028ed6d6535d2243d0609e29473a29b9fcaab6"}}}}}}}) madvise(&(0x7f0000001000/0x9000)=nil, 0x9000, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) r1 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000040), 0x48129, 0x0) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000580)={'tap', 0x0}) pselect(0x40, &(0x7f0000000000)={0x49f, 0x1, 0x8000000000000001, 0x1, 0x9, 0x6, 0x8, 0x8}, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) r3 = socket$inet(0x2, 0x3, 0x14) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x4, 0x6, "31f05f", 0x8, 0x11, 0x91, @empty, @local={0xfe, 0x80, '\x00', 0x0}, {[], @udp={{0x1, 0x3, 0x8}}}}}}}) syz_emit_ethernet(0xfff9, &(0x7f0000000000)=ANY=[]) ioctl$FIOASYNC(r3, 0x80206979, &(0x7f0000000580)=0x7) writev(r1, &(0x7f0000000240)=[{0x0}], 0x1) sendsyslog(&(0x7f0000000040)="022425ea1ac11993bedae65a842d6a2fa301a8e85267ceb4217e239f92c01b627e1bef58a41204c044d6ff696b923d1d1c39fef0f71f9a5b95a1fbe1238ca6351d6c4cbdb72e4bf693bd5411c8b434b834069f9309d762c9662d8001000000f06d5532b20819fd210900125104fba86fec73e1ada10b90c9ca513d0be89374f2d8de97de536b2e7b5557f6957eb0331ce143e13012b3bba16fb0ae10f59821040e546a919114d4978a73213f56e6a1a7b4a49b09862986875ea1b0b14a", 0xfffffc78, 0x26) sysctl$kern(&(0x7f0000000000)={0x1, 0x3f}, 0x2, 0x0, 0x0, 0x0, 0x0) 3.9219248s ago: executing program 0 (id=1): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000080)={0x7ff, 0x2, r0}) read$audioctl(r1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@rights={0x1c, 0xffff, 0x1, [r1, r2, r2, r3]}], 0x1c, 0x40a}, 0x404) getpid() syz_open_pts() syz_open_pts() openat$speaker(0xffffffffffffff9c, &(0x7f0000000000), 0x880, 0x0) r4 = kqueue1(0x0) kevent(r4, 0x0, 0x8, 0x0, 0x400, 0x0) closefrom(r4) setrlimit(0x8, &(0x7f0000001ec0)={0x9, 0x37e1790c}) recvmmsg(r3, &(0x7f0000002ac0)={{0x0, 0x0, 0x0, 0x0, &(0x7f00000029c0)=""/241, 0xf1}, 0x6}, 0x38, 0x1c00, 0x0) 3.921342868s ago: executing program 5 (id=10): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) r1 = dup(r0) ioctl$BIOCLOCK(r0, 0x20004276) r2 = socket$inet(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f0000000000)={0x10, 0x2, 0x1, 0x7fffffff}, 0x10) sendmmsg(r2, &(0x7f0000000500)={{0x0, 0x0, 0x0, 0x0, 0x0}}, 0x38, 0x400) r3 = socket$inet6(0x18, 0x1, 0x6) r4 = socket(0x1, 0x5, 0x1) getpeername$unix(r4, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000000)={0x1c, 0x18, 0x1, 0x3e, "febf00000080007f7400", 0x6}, 0x1c) connect$inet6(r3, &(0x7f0000000040)={0x1c, 0x18, 0x0, 0x6, "c8855f239547bd3563df2b037867b10e"}, 0x1c) ioctl$BIOCSETIF(r1, 0x4010427e, 0x0) 3.921157025s ago: executing program 4 (id=5): syz_emit_ethernet(0x46, &(0x7f0000000040)=ANY=[@ANYBLOB="69e8aaaaaaaaffffffffffff8848"]) r0 = openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000e40), 0x0, 0x0) ioctl$DIOCXEND(r1, 0xc0044464, &(0x7f0000000e80)=0xe51) ppoll(&(0x7f0000000000)=[{r1, 0x100}, {r1, 0x10}], 0x2, &(0x7f0000000040)={0x10, 0x100000000}, &(0x7f0000000080)={0x1}) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$BIOCSETF(r2, 0x80104267, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x14, 0xb, 0x1, 0xfffffffe}, {0x1, 0xff, 0x45, 0x5}, {0x6, 0xf, 0x2e, 0x7}]}) mkdir(&(0x7f0000000400)='./file0\x00', 0x148) sysctl$net_inet_tcp(&(0x7f0000000000)={0x4, 0x2, 0x6, 0x11}, 0x4, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000200)='./file0/file0\x00', 0x120) rename(&(0x7f0000000140)='./file0\x00', &(0x7f00000000c0)='./file0/file0/file0\x00') ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000440)={'tap', 0x0}) syz_emit_ethernet(0x2a, &(0x7f00000000c0)=ANY=[]) ioctl$FIOGETOWN(r0, 0x4004667b, 0x0) 3.920909044s ago: executing program 3 (id=4): r0 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$VNDIOCSET(r0, 0x84946466, &(0x7f00000000c0)={0x0, 0x7, 0x0}) setitimer(0x0, &(0x7f0000000040)={{0x6, 0x1}, {0x8000, 0x652f}}, 0x0) setitimer(0x0, &(0x7f0000000180)={{0x9d94, 0x100000000000004}, {0xd, 0x40}}, &(0x7f00000001c0)) pipe(&(0x7f0000003540)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r3, &(0x7f0000002e40)={{0x0, 0x0, &(0x7f0000002dc0)=[{&(0x7f0000001cc0)=""/4096, 0x1000}], 0x1, 0x0}, 0x7}, 0x38, 0x6042, 0x0) sendmsg$unix(r2, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x4) r4 = socket$inet6(0x18, 0x3, 0x7) getsockopt$sock_int(r4, 0xffff, 0x1021, &(0x7f0000000040), &(0x7f0000000080)=0x4) syz_emit_ethernet(0x2a, &(0x7f0000001740)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaab408"]) r5 = socket$inet6(0x18, 0x2, 0x0) setsockopt$sock_int(r5, 0xffff, 0x1000, &(0x7f00000002c0)=0x6, 0x4) bind$inet6(r1, &(0x7f0000000040)={0x1c, 0x18, 0x3, 0xd, "060000001e00f08f08428400", 0x1000004}, 0x1c) r6 = socket$inet6(0x18, 0x2, 0x0) setsockopt$sock_int(r6, 0xffff, 0x1000, &(0x7f00000002c0)=0x6, 0x4) bind$inet6(r6, &(0x7f0000000000)={0x1c, 0x18, 0x3, 0x1, "b828d120ce902010b2f52f3991ae2628", 0x80000000}, 0x1c) syz_emit_ethernet(0xea, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd67d6c7c300b42cc5fe8000000000000000000000000000bbfe8000000000000000000000000000bb33000001", @ANYBLOB="9dae2a4b06"]) symlink(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000600)='./file0\x00') open(&(0x7f0000000180)='./file0\x00', 0x19083084ca9cf73d, 0x2) 3.920508099s ago: executing program 4 (id=11): mkdir(&(0x7f0000000400)='./file0\x00', 0x148) chmod(&(0x7f00000000c0)='./file0\x00', 0x19b) getgroups(0x40000000000001f6, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]) setresgid(r5, r4, 0x0) r6 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SPKRTUNE(r6, 0x20005302, &(0x7f0000000140)={0x2, 0x2}) setgroups(0x0, 0x0) seteuid(0xffffffffffffffff) fstatat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x6) setgroups(0x7, &(0x7f0000000180)=[r0, r2, r7, r0, r3, r5, r1]) unveil(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000340)='w\x00') 3.857383735s ago: executing program 2 (id=3): setitimer(0x0, &(0x7f0000000100)={{0x7, 0x2}, {0x0, 0x6}}, &(0x7f0000000140)) r0 = openat$vnd(0xffffffffffffff9c, &(0x7f0000002a80), 0x80, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x20c0, 0x0) ioctl$VNDIOCSET(r0, 0xc0384600, &(0x7f0000002b00)={&(0x7f0000002ac0)='./file0\x00', 0x5, 0x0}) mknod(&(0x7f0000000180)='./file0\x00', 0x100, 0x5d42) utimensat(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={{0x0, 0x6c}, {0xbc98, 0xffffffffffffffff}}, 0x2) mknod(&(0x7f0000000080)='./file0\x00', 0x2000, 0x800) r1 = open$dir(&(0x7f0000001880)='./file0\x00', 0x80, 0x105) r2 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x10, 0x0) ioctl$DIOCGETRULES(r2, 0xcd604406, &(0x7f00000001c0)={0x8, 0x4, 0x1, './file0\x00', './file0\x00', 0x0, "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"}) fcntl$getown(r1, 0x5) ktrace(&(0x7f0000000080)='./file0\x00', 0x1, 0x1400, 0x0) 3.823909416s ago: executing program 0 (id=12): open$dir(&(0x7f0000000080)='./file0\x00', 0x200, 0x0) (async) ktrace(&(0x7f0000000040)='./file0\x00', 0x4, 0x300, 0x0) (async) select(0x40, &(0x7f0000000000)={0x7ff, 0xb9e, 0xfffffffffffff801, 0x9, 0x5, 0x8, 0x6, 0x2}, &(0x7f00000000c0)={0x8, 0x0, 0x7fffffff, 0x7, 0x7, 0x4, 0x4, 0x100000000}, &(0x7f0000000100)={0x0, 0x65d3, 0x0, 0x3, 0x8, 0x7, 0x8, 0x9}, &(0x7f0000000140)={0x5, 0x4}) mkfifo(&(0x7f0000001800)='./file0\x00', 0x8) (async) r0 = open$dir(&(0x7f0000000bc0)='./file0\x00', 0x881, 0x0) (async) open$dir(&(0x7f00000002c0)='./file0\x00', 0x2, 0x3c) (async, rerun: 32) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) (rerun: 32) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f00000000c0)={0x3, &(0x7f0000000040)=[{0x4, 0x40, 0x0, 0x2000003}, {0x14, 0x6, 0x5, 0x4}, {0x6, 0xe, 0x5, 0xfe}]}) (async) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000440)={'tap', 0x0}) syz_emit_ethernet(0x2a, &(0x7f0000000200)=ANY=[]) (async) fcntl$lock(r0, 0x8, &(0x7f0000000040)={0x2, 0x2, 0x0, 0x100000001}) 3.784942204s ago: executing program 5 (id=13): sysctl$hw(&(0x7f0000000040)={0x6, 0x1c}, 0x2, &(0x7f0000000080), 0x0, 0x0, 0x0) syz_emit_ethernet(0xea, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd67d6c7c300b42cc5fe8000000000000000000000000000bbfe8000000000000000000000000000bb33000001", @ANYBLOB="9dae2a4b06"]) r0 = syz_open_pts() read(r0, &(0x7f0000000b40)=""/81, 0x51) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) ioctl$TIOCSETAF(r0, 0x802c7416, &(0x7f0000000040)={0x4, 0x5, 0x5938, 0x30000000, '\x00', 0x8000, 0x2}) r1 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000002300), 0x1, 0x0) ioctl$WSKBDIO_SETKEYREPEAT(r1, 0x40047477, 0x0) r2 = syz_open_pts() ioctl$TIOCMBIS(r2, 0x8004746c, &(0x7f0000000000)=0x400) syz_emit_ethernet(0x13a1, &(0x7f0000000280)=ANY=[]) ioctl$TIOCGETD(r0, 0x4004741a, &(0x7f00000000c0)) 3.784024393s ago: executing program 4 (id=14): r0 = syz_open_pts() ioctl$TIOCSETAW(r0, 0x802c7415, &(0x7f0000000100)={0x43, 0x233, 0xc, 0xfffffc03, "ff433c44ee6803daa58b8102b93dec0e000ae8fa", 0x7, 0x10040002}) pselect(0x40, &(0x7f0000000040)={0xe0, 0x0, 0x101, 0x22e8, 0x2, 0xffffffff, 0x80000000000b, 0x3}, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_pts() sysctl$net_inet_ip(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$bpf(0xffffffffffffff9c, &(0x7f0000001ec0), 0x20, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x7) r2 = open(&(0x7f0000001980)='./file0\x00', 0x80, 0x0) ioctl$TIOCSTOP(r2, 0x2000746f) open$dir(0x0, 0x200, 0x80) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x1, 0x128) writev(r3, &(0x7f0000000540)=[{&(0x7f0000000180)="19a09f0a20", 0x100000}], 0xfe) ioctl$TIOCSTART(r2, 0x2000746e) r4 = socket$unix(0x1, 0x1, 0x0) closefrom(r4) setrlimit(0x8, &(0x7f0000001ec0)={0x9, 0x37e1790c}) syz_open_pts() write(r1, &(0x7f0000000000)="570000560000000005c428c09fd6e507e577e29eb04bf68488500b02d4090000a4265b149ab74ad60719e6a0a94ecc60abcc29a1fc4efab85642ca15647fa9c81f65b7cd82dc", 0x46) r5 = socket$unix(0x1, 0x2, 0x0) ioctl$TIOCNXCL(r1, 0x2000740e) r6 = open(&(0x7f0000000180)='./file0\x00', 0x19083084ca9cf73d, 0x4a) fcntl$lock(r6, 0x7, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffe, 0x10000ffffbffe}) r7 = syz_open_pts() ioctl$TIOCSETA(r7, 0x802c7414, &(0x7f0000000040)={0x105, 0x5, 0xfffffbfa, 0xde5, "8efa6eb5a63215e6ffffffaea427df00", 0x8acd6, 0x200004}) write(r7, &(0x7f0000000100)="97348c2c", 0x4) closefrom(r5) r8 = kqueue() closefrom(r8) read(r1, &(0x7f0000000100)=""/50, 0x32) syz_open_pts() 3.781967019s ago: executing program 2 (id=15): r0 = socket$inet6(0x18, 0x3, 0x0) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x0, 0x67, 0x5, 0x5}, {0x2, 0x0, 0x4, 0x6}, {0xfffe, 0x2, 0x0, 0x3}]}) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000440)={'tap', 0x0}) syz_emit_ethernet(0x2a, &(0x7f0000001600)=ANY=[]) setsockopt$sock_int(r0, 0xffff, 0x1000, &(0x7f00000000c0)=0xa, 0x4) bind$inet6(r0, &(0x7f0000000040)={0x1c, 0x18, 0x3, 0x7f, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00', 0x1000004}, 0x1c) r2 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) close(r2) connect$inet6(r0, &(0x7f0000000300)={0x1c, 0x18, 0x1, 0xca, "afb3341358eada9f7b7971cbafeeb650", 0x1}, 0x1c) sendmsg(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[{0x18, 0xffff, 0x2, "440bd192ee7ae09874"}], 0x18}, 0x0) 3.743903747s ago: executing program 1 (id=16): r0 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) ioctl$WSKBDIO_SETENCODING(r0, 0x80045710, &(0x7f00000000c0)=0x81) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f00000002c0)=@abs={0x8, 0x0, 0x0, 0x0}, 0x8) getsockname$unix(r1, 0x0, &(0x7f0000000040)) openat$wskbd(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) (async) ioctl$WSKBDIO_SETENCODING(r0, 0x80045710, &(0x7f00000000c0)=0x81) (async) socket$unix(0x1, 0x2, 0x0) (async) bind$unix(r1, &(0x7f00000002c0)=@abs={0x8, 0x0, 0x0, 0x0}, 0x8) (async) getsockname$unix(r1, 0x0, &(0x7f0000000040)) (async) 2.594884188s ago: executing program 6 (id=17): pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup2(r1, r0) (async) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000300), 0x800, 0x0) (async, rerun: 64) r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) (rerun: 64) ioctl$BIOCSETWF(r4, 0x80104277, &(0x7f0000000380)={0x2, &(0x7f0000000340)=[{0x3d3c, 0x6, 0xa1, 0x2}, {0x7, 0x38, 0x5, 0x10}]}) (async) fcntl$lock(r3, 0x0, &(0x7f0000000040)={0x1, 0x1, 0xfffffffffffffffb, 0x2}) (async) ioctl$DIOCCLRSTATUS(r0, 0xc0284416, &(0x7f0000000080)={'./file0\x00', &(0x7f0000000000)=""/72, 0x6, 0x7, 0x5, 0x80}) (async) getthrid() mkfifo(&(0x7f00000000c0)='./file0\x00', 0xa) (async) ioctl$TIOCMBIC(r2, 0x8004746b, &(0x7f0000000100)=0x70599bf) (async) seteuid(0xffffffffffffffff) (async) ioctl$TIOCSETAF(0xffffffffffffffff, 0x802c7416, &(0x7f0000000000)={0xed, 0x5, 0xfffffffd, 0x8, "e700", 0x7}) (async) sysctl$kern(&(0x7f0000000000)={0x1, 0x37}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) (async) sysctl$net_inet6_icmp6(&(0x7f0000000000)={0x4, 0x18, 0x3a, 0xb}, 0x4, &(0x7f0000000040), 0x0, 0x0, 0x0) unveil(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='w\x00') 2.593380082s ago: executing program 3 (id=18): r0 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000001c80), 0x1, 0x0) ioctl$WSMUXIO_ADD_DEVICE(r0, 0x80085761, 0x0) (async) ioctl$WSKBDIO_SETMODE(r0, 0x80045713, &(0x7f0000000000)) (async) ioctl$TIOCGFLAGS(r0, 0x4004745d, &(0x7f0000000200)) (async) ioctl$WSMUXIO_REMOVE_DEVICE(r0, 0x80085762, &(0x7f0000000240)={0x1, 0x4}) (async, rerun: 64) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000040)="98cc055df5ca83662a3dd537211e8aac80e66a582fea90b438343ac2be0318157f7302490cb64f6447f64b466f72ea9f18890778ca2abf2fd467d4c3c198b46929b997039fb511024dbc058987c106a287eb19d324f4930d41baea906fdc34607539a8636f6f461aa14886202a1f8b2aac66921fc1618ea990058de6fb15ace5fa7d9043566ebee0598897eaf1e0b516d1bb06f42625cb8e", 0x98}, {&(0x7f0000000100)="ee970266fd05808206562636759208766cc00a3b6ed11161b6b26ee999f86b58d0d2c2f07cfd5a5a22832d9eca552d1dede61cf6a24f871a0aab17a62d76e84cef71706e7c6fb37bfe9c5ae530fb05067e8e6dbdf1b6f1dec630ffc72854bfafd760caebe3bb527fd8a8b9192a96e9f4e627c2b6c0faf596944e8fa457ef6d003ec99043487151824d30e2d95988a52d136f3877e81afad6dfc86b56fb1704dfb9f4b975d0ca2bb9fde058c6d78842b6a0d3b9bb182d183ed6f1ffc52fc037d004c0daaa3067a6fb65d8615f", 0xcc}, {&(0x7f0000000280)="6500042a26d6cf9fcef5a74a4c60fab1782c85a50fd1af203b699c4e92829210a8c988f1fa2c51c6b0abff4cf026c63386b56bd380cb813fd543c7a9efa472e09f84fbf7ece6fb416361bb2cfda7815bf299c268", 0x54}, {&(0x7f0000000300)="f7dfe770632276b99cf5288ff49239ac0acd97f138baefc7117b5a1690cd4759106e97aad293902d9713968e23901d26caf528bb71eecb0b3e64f7e4a0f77b6f", 0x40}, {&(0x7f0000000340)="5ec98993858dac7f8180f77f146b10dfdd08427180270f14abd37ed13e498940bee607a4eb6c3aa065b65b5bd800086141d0588a50e3fc845e0127358d0197d2784d11d7055b66f3b4c43de919dde94a3a0b8538888440705be05153e4327634a07566f06c956ff2234b872a17d1ff2a4f681597e2e81724041d40a64ad2e9daabf7ae945645f7e79f6f44275ab79805935b7d66e966d46a623c5b23e5e9c94f60114e3ee2ccbc0e7772", 0xaa}], 0x5) (rerun: 64) r1 = socket$inet(0x2, 0x1, 0x6) getsockopt(r1, 0x0, 0xc, 0x0, 0x0) (async) r2 = shmat(0xffffffffffffffff, &(0x7f0000ffb000/0x2000)=nil, 0x3000) (async, rerun: 32) r3 = shmget(0x2, 0x1000, 0x80, &(0x7f0000ffc000/0x1000)=nil) (rerun: 32) shmctl$SHM_UNLOCK(r3, 0x4) (async) shmdt(r2) 1.494380588s ago: executing program 0 (id=19): mkfifo(&(0x7f00000020c0)='./file0\x00', 0xa2) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000180), 0x10000, 0x0) fcntl$lock(r0, 0xb, 0x0) rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file1\x00') sysctl$net_inet_tcp(&(0x7f0000000140)={0x4, 0x2, 0x6, 0xf}, 0x4, 0x0, 0x0, 0x0, 0x0) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$DIOCNATLOOK(r1, 0xc0504417, &(0x7f0000001a00)={@v4=@rand_addr=0xfff, @v4=@rand_addr=0x200, @v4=@local={0xac, 0x14, 0x0}, @v6=@mcast1, 0x401, 0x8, 0x800, 0x200, 0x8, 0x5, 0x18, 0x1, 0x2}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) mkdir(&(0x7f0000000140)='./file0\x00', 0x25) unveil(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='w\x00') 1.493997245s ago: executing program 6 (id=20): openat$pf(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x4828a, 0x80) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) r0 = open(&(0x7f0000000000)='./file0\x00', 0x80, 0x0) ppoll(&(0x7f0000000080)=[{r0, 0x2}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) sysctl$net_inet_tcp(&(0x7f0000000080)={0x4, 0x2, 0x6, 0xb}, 0x4, 0x0, 0x0, 0x0, 0x0) 1.272526279s ago: executing program 7 (id=21): r0 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$VMM_IOC_READREGS(r0, 0xc2485607, &(0x7f0000000200)={0x4, 0x5, 0x4, {[0x5, 0x0, 0x2, 0x1c4, 0x8000000000000001, 0x4, 0x1, 0x0, 0x9, 0x81, 0x2, 0x3ff, 0x4, 0x4, 0x4, 0x6, 0x80, 0x9], [0x8000000000000000, 0x9, 0x10001, 0x6, 0x7, 0x2, 0x9, 0x4, 0x1ff, 0x9], [0x101, 0x9, 0x4, 0x6, 0x101, 0x4, 0xfffffffffffffff1], [0x5, 0x1fe0000000000, 0x6, 0xc43, 0xffffffffffffffff, 0x28], [{0x1, 0x200000, 0x10000, 0xf}, {0x1ff, 0xfff, 0xffff}, {0x5, 0x4783, 0x8, 0xffffffff80000001}, {0x8e, 0xc, 0x9, 0x8}, {0x6, 0x3b, 0x10000, 0x7}, {0x2, 0x9, 0x93d, 0x2e0}, {0xc, 0xfff, 0x8, 0x2}, {0x4b9, 0x6, 0x81c00, 0xa39}], {0x401, 0xe, 0xd49, 0xbbb4}, {0x4, 0x18fe, 0xfffffffa, 0x9}}}) (async) mkfifo(&(0x7f0000001380)='./file0\x00', 0x8) (async, rerun: 32) pipe(&(0x7f0000000280)={0xffffffffffffffff}) (async, rerun: 32) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt(r2, 0x0, 0x66, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0x80047308, &(0x7f0000001840)={0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff}) closefrom(r3) (async) socket$inet6(0x18, 0x2, 0x0) (async) openat$bpf(0xffffffffffffff9c, &(0x7f0000001ec0), 0x20, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) (async, rerun: 64) mknod(&(0x7f0000000040)='./file0\x00', 0x2000, 0x5388) (rerun: 64) openat$vnd(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) (async) open(&(0x7f00000000c0)='./file0\x00', 0x7c6, 0xea) open(&(0x7f00000000c0)='./file0\x00', 0x7c6, 0xea) (async) closefrom(r4) setrlimit(0x8, &(0x7f0000001ec0)={0x9, 0x37e1790c}) r5 = syz_open_pts() write(r5, &(0x7f00000002c0)="81a8ac66dd1df714801bbfa7daec7d901dccf2e81057c021791736d79533d6348f446c4627d792c00fd8c38fe8cc94e0afceba14a4ad4d526688b9bcde78b4d964bbe5dae9b538b3952edd5ee67ccbd61d5199ed0710ec1eca72d637150b4323d1f9b2073d", 0x65) (async) read$audioctl(r1, &(0x7f0000000680)=""/4096, 0x1000) (async) ktrace(&(0x7f0000000100)='./file0\x00', 0x1, 0x100, 0x0) (async, rerun: 64) open$dir(&(0x7f00000002c0)='./file0\x00', 0x40, 0x3c) (async, rerun: 64) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x40}, {0xffffffffffffffff, 0x1a0}, {0xffffffffffffffff, 0x10}, {0xffffffffffffffff, 0x1}], 0x55, 0x1) 1.269280549s ago: executing program 5 (id=22): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f00000000c0)={0x3, &(0x7f00000001c0)=[{0x7c, 0x8, 0x2, 0x1fd}, {0x7, 0x40, 0x1, 0x411}, {0x6, 0x1, 0x0, 0x101}]}) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000440)={'tap', 0x0}) mknod(&(0x7f0000000040)='./file0\x00', 0x2000, 0x33a5) r1 = open(&(0x7f0000001980)='./file0\x00', 0x80, 0xc3) ioctl$TIOCCONS(r1, 0xc0a86b02, &(0x7f0000000140)=0x1) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[]) getresgid(0x0, 0x0, &(0x7f0000000440)) syz_emit_ethernet(0x76, &(0x7f0000000200)={@random="85765e887502", @broadcast, [], {@ipv4={0x800, {{0x17, 0x4, 0x0, 0x2, 0x68, 0x65, 0x6, 0x0, 0xc, 0x0, @broadcast, @loopback, {[@noop, @end, @generic={0x7, 0x2}, @lsrr={0x83, 0x7, 0x7, [@empty]}, @lsrr={0x83, 0x1f, 0x0, [@broadcast, @broadcast, @empty, @multicast1, @empty, @remote={0xac, 0x14, 0x0}, @broadcast]}, @rr={0x7, 0x7, 0x1, [@multicast2]}, @generic={0x83, 0x10, "df5db0314173c3dd2582c69d5b57"}, @noop, @ra={0x94, 0x4}]}}, @icmp=@mask_reply={0x12, 0x0, 0x0, 0x40, 0x8001, 0x3}}}}}) 1.268152677s ago: executing program 3 (id=23): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000200)={0x3, &(0x7f0000000080)=[{0x6c, 0x6, 0x5, 0x2009}, {0x4, 0x40, 0xff, 0x1}, {0x2006, 0xe, 0x4, 0x1003}]}) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000440)={'tap', 0x0}) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) mkfifo(&(0x7f0000001380)='./file0\x00', 0x8) ktrace(&(0x7f0000000100)='./file0\x00', 0x1, 0x11c, 0x0) r1 = socket$inet(0x2, 0x3, 0xff) getsockopt$inet_opts(r1, 0x0, 0x1f, 0x0, 0x0) r2 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000040), 0x48129, 0x0) ioctl$WSMOUSEIO_GETPARAMS(r2, 0x80105727, &(0x7f0000000100)={0xffffffffffffffff, 0x11}) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt(r3, 0x0, 0x1f, &(0x7f0000000100)="9a355644", 0x4) r4 = open$dir(&(0x7f0000000240)='./file0\x00', 0x800, 0x100) munlockall() ioctl$FIOASYNC(r4, 0x40047307, &(0x7f0000000180)=0x80000004) 1.267826305s ago: executing program 7 (id=24): ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000000)={'tap', 0x0}) writev(0xffffffffffffffff, 0x0, 0x0) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f00000024c0), 0x8000, 0x0) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000002540)={0x1, &(0x7f0000002500)=[{0x6, 0x0, 0x56, 0xc}]}) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000140)={0x0, 0x0}) r1 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000040), 0x48129, 0x0) ioctl$WSMOUSEIO_SETPARAMS(r1, 0x80105728, &(0x7f0000000080)={&(0x7f00000003c0)=[{0x48, 0x7}, {0x25, 0xe363}, {0x0, 0x1}, {0x0, 0x5}, {0x47, 0x4}, {0x42, 0x7}, {0x8d, 0x6}, {0x87, 0x3}], 0x8}) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000180)="519a622201c0c3216cb6fc636e959d2d7ab2570360625a9a23932c85141242c5d3f2965542a7a3b8d6e6e5349971536c6333f237202f65c52be602c99b1c22e6ce51db34bbb39f28a4dd4b2a23aaa344a8", 0x51}, {&(0x7f0000000200)="402c347f118a42f9eb87623c16ba2a6c16d8f04f0e59a81a95e734c7595ac1c308bf3b864ec161062986e30923f28a820ba9268072bacd12b6c159f072d377f639cfafb02d5064b593", 0x49}, {&(0x7f0000000280)="f3a3d5eb71a0f47e0d770a1204596c36f82ddbcecd226a60ca2528084f6cc2836477a7cd05d38718a9952e8c45c7a5e1c6f233359f1578deda1a610212107cdb939d667ffb398004ca8fe02ca10e", 0x4e}], 0x3) r2 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0) r3 = open$dir(0x0, 0x8, 0x100) rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000000380)='./file1\x00') lstat(0x0, 0x0) mkdir(0x0, 0x204) fchmod(r2, 0xa0) rename(&(0x7f0000000040)='./file1\x00', &(0x7f00000000c0)='./file0/file0\x00') fchownat(r3, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x2) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r5 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) r6 = dup(r5) ioctl$BIOCSETIF(r6, 0x8020426c, &(0x7f0000000000)={'tap', 0x0}) writev(r5, &(0x7f0000000080)=[{0x0, 0x34}], 0x1) ioctl$SPKRTONE(r4, 0x80085301, &(0x7f0000000340)={0xfff, 0x9}) sched_yield() 227.45257ms ago: executing program 0 (id=25): syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @broadcast, [], {@ipv6={0x86dd, {0x1, 0x6, "6d3201", 0x14, 0x70, 0xc, @loopback, @loopback, {[], @tcp={{0x2, 0x2, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x4, 0x3, 0x0, 0x4}}}}}}}) madvise(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x5) r0 = semget$private(0x0, 0x1, 0xa) madvise(&(0x7f0000300000/0x2000)=nil, 0x2000, 0x6) open$dir(&(0x7f0000000080)='./file0\x00', 0x200, 0x0) ktrace(&(0x7f0000000000)='./file0\x00', 0x4, 0x1104, 0xffffffffffffffff) pselect(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0xc2d5, 0xffffffffffffffff}, 0x0) ioctl$WSMOUSEIO_SETPARAMS(0xffffffffffffffff, 0x80105728, &(0x7f00000000c0)={&(0x7f0000000000)=[{0x7, 0x5}], 0x1}) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) sysctl$kern(&(0x7f0000000000)={0x1, 0x37}, 0x2, 0x0, 0x0, 0x0, 0x0) setitimer(0x0, 0x0, 0x0) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0) fcntl$getflags(r1, 0x3) seteuid(0xffffffffffffffff) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000000100)=""/160) mknod$loop(0x0, 0x4, 0x0) semctl$SETVAL(r0, 0x1, 0x8, 0x0) semop(r0, 0x0, 0x0) syz_extract_tcp_res(&(0x7f0000000000), 0x80, 0x3) r2 = semget(0x0, 0x1, 0x488) semctl$GETNCNT(r2, 0x2, 0x3, &(0x7f0000000040)=""/26) 2.270287ms ago: executing program 4 (id=26): open$dir(&(0x7f0000000080)='./file0\x00', 0x40, 0x0) getgroups(0x7, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]) setresgid(r1, r0, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) getsockopt$sock_cred(r2, 0xffff, 0x1022, &(0x7f0000000100)={0x0, 0x0}, &(0x7f00000002c0)=0xc) setreuid(r3, 0xffffffffffffffff) shmget$private(0x0, 0xc00000, 0x4c0, &(0x7f0000400000/0xc00000)=nil) pipe(&(0x7f0000000080)) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0x46, &(0x7f0000000280)={@broadcast, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x2, 0x36, 0x38, 0x68, 0x0, 0x5, 0x1, 0x0, @local={0xac, 0x14, 0x0}, @multicast2}, @icmp=@dest_unreach={0x3, 0x2, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x6, 0xfff8, 0x64, 0x0, 0x0, 0x1, 0x6, @loopback=0xe0000002, @local={0xac, 0x14, 0x0}}, "6cdcf66d56497f52"}}}}}) (async) syz_emit_ethernet(0x46, &(0x7f0000000280)={@broadcast, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x2, 0x36, 0x38, 0x68, 0x0, 0x5, 0x1, 0x0, @local={0xac, 0x14, 0x0}, @multicast2}, @icmp=@dest_unreach={0x3, 0x2, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x6, 0xfff8, 0x64, 0x0, 0x0, 0x1, 0x6, @loopback=0xe0000002, @local={0xac, 0x14, 0x0}}, "6cdcf66d56497f52"}}}}}) close(r4) poll(&(0x7f0000000040)=[{r5, 0x80}], 0x1, 0x7) (async) poll(&(0x7f0000000040)=[{r5, 0x80}], 0x1, 0x7) r6 = open$dir(&(0x7f0000000080)='./file0\x00', 0x200, 0x0) truncate(&(0x7f0000000080)='./file0\x00', 0x100000) fchmodat(r6, &(0x7f0000000000)='./file0\x00', 0x0, 0x2) (async) fchmodat(r6, &(0x7f0000000000)='./file0\x00', 0x0, 0x2) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000000240)={&(0x7f00000001c0)=[0x3], 0x1, 0x10004}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000000240)={&(0x7f00000001c0)=[0x3], 0x1, 0x10004, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r7, 0xc00c642d, &(0x7f0000000280)={0x10001, 0x9, r4}) preadv(r6, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/219, 0xfffffed0}], 0x1, 0xefff) (async) preadv(r6, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/219, 0xfffffed0}], 0x1, 0xefff) ktrace(&(0x7f0000000040)='./file0\x00', 0x4, 0x300, 0x0) 1.268485ms ago: executing program 2 (id=27): r0 = open$dir(&(0x7f00000001c0)='./file0\x00', 0x200, 0x80) mknod(&(0x7f0000000500)='./file0\x00', 0x2000, 0x5be7) r1 = openat$vnd(0xffffffffffffff9c, &(0x7f0000002a80), 0x80, 0x0) r2 = syz_open_pts() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000480)=@file={0x1, 0x0, './file0\x00'}, 0xa) ioctl$VNDIOCSET(r1, 0xc0384600, &(0x7f0000000000)={&(0x7f0000002ac0)='./file0\x00', 0x5, 0x0}) readv(r0, &(0x7f00000003c0)=[{&(0x7f00000000c0)=""/98, 0x62}, {&(0x7f0000000140)=""/32, 0x20}, {&(0x7f0000000200)=""/95, 0x5f}, {&(0x7f0000000280)=""/115, 0x73}, {&(0x7f0000000300)=""/158, 0x9e}], 0x5) r5 = socket$inet(0x2, 0x3, 0x2) sendto$inet(r5, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x10, 0x2, 0x0, 0xffffffff}, 0x10) r6 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000780), 0x10, 0x0) sysctl$net_inet_carp(&(0x7f0000000040)={0x4, 0x2, 0x70, 0x4}, 0x400000000000000a, 0x0, 0x0, 0x0, 0x0) ioctl$BIOCSETF(r6, 0x80104267, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x7c, 0xf2, 0x0, 0x4}, {0x5dfe, 0x3, 0x0, 0x8000085}]}) ioctl$BIOCSETIF(r6, 0x8020426c, &(0x7f0000000040)={'tap', 0x0}) syz_emit_ethernet(0x66, &(0x7f0000000200)={@broadcast, @local, [], {@ipv6={0x86dd, {0xf, 0x6, "755803", 0x30, 0x3a, 0x0, @rand_addr="00d5e6b7ff0300000200001000", @local={0xfe, 0x80, '\x00', 0x0}, {[], @icmpv6=@time_exceed={0x3, 0x0, 0x0, 0xf, '\x00', {0x8, 0x6, '\x00', 0x6, 0x2b, 0x7c, @local={0xfe, 0x80, '\x00', 0x0}, @local={0xfe, 0x80, '\x00', 0x0}}}}}}}}) ktrace(&(0x7f0000000040)='./file0\x00', 0x4, 0x814, 0x0) r7 = socket$inet6(0x18, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000040)={0x1c, 0x18, 0x2, 0xfffffffd, "fffe0000000000000000008000", 0xfffffff5}, 0x1c) connect$inet6(r7, &(0x7f0000000080)={0x1c, 0x18, 0x3, 0x400, "000000000000f400", 0x9}, 0x1c) getsockopt$sock_cred(r5, 0xffff, 0x1022, &(0x7f0000000a40)={0x0}, &(0x7f0000000a80)=0xc) getsockopt$SO_PEERCRED(r3, 0xffff, 0x1022, &(0x7f0000000ac0)={0x0, 0x0, 0x0}, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = getpid() fcntl$setown(r11, 0x6, r13) fcntl$setown(r11, 0x6, r13) r14 = geteuid() setresuid(r14, 0x0, 0x0) sendmsg$unix(r3, &(0x7f0000000bc0)={&(0x7f0000000540)=@abs={0x0, 0x1, 0x0, 0x0}, 0x8, &(0x7f0000000840)=[{&(0x7f0000000580)="3133873cc51d4b3a3a6e7945636c835df4b3552c931f4fd9df6d378a8157b8c8d4fc575898e06c595abf55e99a24009e405540ed03c9ec9e591842d59b598b8c7fdbf5ba5251f017bb109f8e03adc3ff746d90e1bc3ddf16bcc515ea32cd368188cf9ee07dff0ea91dca3ecd39ad88eba2b7cd3cfcf00cef8b810dc7c89628829a33306e5c46f4fd044b89bb8b0a3ceb040e7ed5a2c6d329ead9e12d1c43e34eb0cfcbd0871ef61200270b7e1f27ad2b87624b72a349652043b7246f9853810e6ea7471a4033cc37bfe1ab3533cd3d55c8d9a1598d8f1231c0b9a8537c76827c56e3ec5d", 0xe4}, {&(0x7f0000000680)="7a2ed2f0d15d28d8a5ec329b78bfa8aa5ec79eb9e73c140a3aa1349b5db1400227e71477a152b4846868c9d86f2af7822433481e5f2f22a86c80dd101c8087ef29f4594f73dd2aef82bcde79a026921a29807ea6d5570df9ebe62e79315e08e043b55963473e12d98fda503d568baef015d2adad2f6d43203c359b995b4cc47062b6f7f11de6719d230f1908459c80afdf6383ee96924f76db950573", 0x9c}, {&(0x7f00000007c0)="0efea60b94b5d1f2113a194a5c7dc8d48ef1de058b69ba4cbbcc35519d7eadcb7b7ccf072036e265b5956a98d68ca86c73d70ce4a6432aab6a3356b9e4194a67ac72557d1e252470233f41b4bd4e4c32b74de95797bf79807c386a8901ce455dc64c5dbc0e632fd2d831b9770bfabd6fc010d86e702956e4", 0x78}], 0x3, &(0x7f0000000880)=[@rights={0x14, 0xffff, 0x1, [0xffffffffffffffff, r12]}, @rights={0x1c, 0xffff, 0x1, [r4, r2, r12, r11]}, @cred={0x18, 0xffff, 0x0, r8, r9, r10}, @cred={0x18, 0xffff, 0x0, r13, r14, r10}], 0x60, 0x6}, 0x8) ktrace(&(0x7f0000000180)='./file0\x00', 0x0, 0x40002004, 0x0) connect$inet(r5, &(0x7f00000004c0)={0x10, 0x2, 0x1, 0x5}, 0x10) 792.369µs ago: executing program 1 (id=28): r0 = socket$inet6(0x18, 0x2, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1000, &(0x7f00000002c0)=0x6, 0x4) (async) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0x69, &(0x7f0000000080)={{0x1c, 0x18, 0x2, 0x6, "06d1475a940446183a5e353a9c0afbe8", 0x5}, {0x1c, 0x18, 0x0, 0x4, "bafaac1b416e679393a154b4bb32e675", 0x2}, 0x4, [0x4, 0x1, 0xe291, 0x4, 0x3, 0x80000001, 0x9, 0xfcc4]}, 0x5c) (async) bind$inet6(r0, &(0x7f0000000040)={0x1c, 0x18, 0x3, 0xd, "0000000000000000000000001000", 0x1000004}, 0x1c) (async) r1 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) ppoll(&(0x7f0000000140)=[{r0, 0x20}, {r0, 0x40}, {r1, 0x40}], 0x3, &(0x7f0000000180)={0x2, 0x5}, &(0x7f00000001c0)={0x800}) (async) r2 = socket$inet6(0x18, 0x2, 0x0) (async) socket$inet6(0x18, 0x5, 0x40) (async) sysctl$kern(&(0x7f0000000040)={0x1, 0x32}, 0x2, 0x0, 0x0, &(0x7f0000000200)="040a0001", 0x4) setsockopt$sock_int(r2, 0xffff, 0x1000, &(0x7f00000002c0)=0x6, 0x4) bind$inet6(r2, &(0x7f0000000000)={0x1c, 0x18, 0x3, 0x1, "b828d120ce902010b2f52f3991ae2628", 0x80000000}, 0x1c) 0s ago: executing program 5 (id=29): r0 = openat$dri(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x20, 0x0) r1 = socket$inet6(0x18, 0x0, 0x4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000040)={0x2, 0x6, r1}) mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1) r3 = semget$private(0x0, 0x3, 0x0) semctl$GETALL(r3, 0x0, 0x6, &(0x7f0000000080)=""/92) sysctl$kern(&(0x7f0000000100)={0x1, 0x17}, 0x2, &(0x7f0000000140)="a392c92d8a05642658612edc437f78cd761a8597a55a0b", &(0x7f0000000180)=0x17, &(0x7f00000001c0)="bf1569a8f8a23c284f2a293ed987eb76ed6415d527a9e07389b78162f86b2a3e13779a4a69791fbe2c64d13406ac6e8900fe2000027379886901d5ad8bcd5a347a657659329aa1c338465388a7cb96b655144c78d30d0a5a3e6f52f2b6fc32df6e68ba5d10cb71b856be96e93ddb43f4cc97cb8b6d3d", 0x76) ioctl$WSDISPLAYIO_GBURNER(r2, 0x400c5752, &(0x7f0000000240)) sysctl$net_inet_icmp(&(0x7f0000000280)={0x4, 0x2, 0x1, 0x5}, 0x4, &(0x7f00000002c0)="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", &(0x7f00000012c0)=0x1000, &(0x7f0000001300)="f50cf702a22599bf405fe90388bef94bb1c9e4bd57310ccb1311394c59aa16b3e56813b4b7df3d1b747dd7499ca8e25ae740d04acd5d5f6998cbec5245", 0x3d) r4 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000001340), 0x11, 0x0) sysctl$net_inet_icmp(&(0x7f0000001380)={0x4, 0x2, 0x1, 0x6}, 0x4, &(0x7f00000013c0)="85cf780cb34c06016701760d7553b79d822f224f849739fa0e1880781b3fd6af74dd69ac64c6deff51daf6078ec9f108332e25bbfceef234e0b429409f5d3a38b547f997dd5a9993d49637606ddd72281170cfd54fbc103a4548fb89715659f0c0abef49e9b764928afeceb9fb3b93e52f3394018de16a685573a946d9c9540693988e025a5fa7dbe9015bb7de629517ab3f120187573adea6ac544f0d", &(0x7f0000001480)=0x9d, &(0x7f00000014c0)="85c0045e20783c988e83cfb41cc8f234a378d7c22ebbd48f6f37bc780e5de2d6670ba717f15201dc467358356de2331534ddb7bbdbb87e1694cc66761d5a90fb8607974bb95c46a1cc81ec6e1c017786c50e", 0x52) r5 = semget(0x0, 0x1, 0x59) semctl$IPC_STAT(r5, 0x0, 0x2, &(0x7f0000001540)=""/67) ioctl$TIOCCONS(r2, 0x80047462, &(0x7f00000015c0)=0xfffffe01) utimensat(0xffffffffffffff9c, &(0x7f0000001600)='./file0\x00', &(0x7f0000001640)={{0x1, 0xfffffffffffffff4}, {0x8000, 0x9}}, 0x2) ioctl$WSDISPLAYIO_GVIDEO(r2, 0x40045744, &(0x7f0000001680)) sysctl$net_inet_icmp(&(0x7f00000016c0)={0x4, 0x2, 0x1, 0x3}, 0x4, &(0x7f0000001700)="931f89f3f549f496dcbf738eee", &(0x7f0000001740)=0xd, &(0x7f0000001780)="080f172719b88c9acac9f2c8dfee585475481d54fcfccea16c36ed0af500d29ef67982fc4779a52b849b439e8b2a6bb090da6149d6bef8a64cf609cc3456102b4e97604fbd6965a4a18bd4024daa918403e137da869def370943eff5b712796921d6b893b1a647d95d69a9abe273b4b1725d90e4c2e8a020694d899e54977198b361a47041061a1bb9ca787bae6a924149c5cb9068ef6925fa7c1fb044450baa67ff700e39ac510c4c362099cd7f9906e5b26c35f7", 0xb5) sysctl$net_inet6_icmp6(&(0x7f0000001840)={0x4, 0x18, 0x3a, 0xb}, 0x4, &(0x7f0000001880)="14f246938d15d83d3206c694529abde6bed5d45306302397559cade1d7879ee54d18fb7ed84b0459e646f0b208a1370a6b1089cb45509ddc3a53c1d07d07e2061eb6e2a994cdf9efadc5cee08c342a725df45a370657b32f84e7509966728cb1e26a24eccd3cf46a18ed483ba5f5d9d6eabb2d18e966f7e653b5ebbaa3b54d66194bf8fd4ad3d520d68f2e15f9d9778b7db34ff1f6cba1d2f14f16ba555323327072133c5e849c7baa3339ad92581eb1e0f23d313373ee0e8dfc7510ae3041e474255ecf0c505c434f3ddd2667d0b8fd8708774d4cfc6287c7c835980c86ae72c943a78e852181", &(0x7f0000001980)=0xe7, &(0x7f00000019c0)="38181c7a7fd2ac158e36b6e5ce4f3ccfac26c663431d82712e75986c20d338744d8e51387434597f82cf4edc19fa7eb6e2e3f9c4393adfd555761590a4bd448ce0aedba9e16212953ed01364d00c1e892d8cf9e4436a0dc2c645c1d3d8d809d5bbf8f57ba6ab2d68d8023073ebf369dcabf1aa3d5cd70f5e068b25a09c9060be6f36d6b22f59aaa5edc104d3b7c491fbdb5a2fe9ce20df5109d75df4e6e14533a1c2b3cd757fd2d793", 0xa9) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x13, r2, 0x6) ioctl$FIOASYNC(r4, 0x8004667d, &(0x7f0000001a80)=0x2) r6 = getppid() fcntl$setown(r1, 0x6, r6) ioctl$KDENABIO(r2, 0x20004b3c) syz_emit_ethernet(0x5d, &(0x7f0000001ac0)={@local, @remote, [{[], {0x8100, 0x2, 0x1, 0x2}}], {@generic={0x3c0b, "095baa75ad5f41bb4d36f7833f8323e7ad685f886bd485249c8de84010e7cf3dcbb596541cc9dd23c2a47d4b6e8d5d40896149e269d273e630e2a1ac3629713dde92c66148dfd995b7509d"}}}) sysctl$vfs_nfs(&(0x7f0000001b40), 0x3, &(0x7f0000001b80)="29f799970cd56c5707426519c7685b06dd8f99f1c1f6edda6ea5f2bafe2f46ae90fb31ab626436aebdf6383e4295f7d5bcff4755287e39c65db9feb444037c923a55dea9ab975a743a2f3aa316", &(0x7f0000001c00)=0x4d, &(0x7f0000001c40)="eb2c627b6b61c0037363cfa574b8b4b455c0e3b18749125c3d93188b87273c80b8899ed5e47bb565e0284f1044e01743a423b6b6d44a7510d0702e9eb056acabaadc9adad5d646b9faeebf0fc83ba1d58546d416ef7af762dda7569397f2dd14b0b337abe904886a75602ff99cb4c9278d517eec80a9e692cd8098f75b99a16cdff9e4f3a9dd44846025ad6433864f51a3d154700ea1e0d3355692d896e8f85533151a75b60322bf0e7e1b75f7ae40e01a8cee23ee0682651a", 0xb9) syz_emit_ethernet(0x135, &(0x7f0000001d00)={@local, @broadcast, [{[{0x88a8, 0x4, 0x0, 0x1}], {0x8100, 0x5, 0x0, 0x2}}], {@ipv4={0x800, {{0x8, 0x4, 0x2, 0x37, 0x11f, 0x66, 0x1, 0x6, 0x2, 0x0, @local={0xac, 0x14, 0x0}, @empty, {[@rr={0x7, 0x7, 0x6, [@broadcast]}, @ra={0x94, 0x4, 0xb}]}}, @udp={{0x3, 0x0, 0x8}, {"dd407a961ff5108c641fe93cade9aeec9e5187c25dd96cda622f8b97e94f6c2972232b6b73cae5638474bf8e323e5bf216a4cf616323212b7cb42da2e99ce4b9bed542990b326e5effc7c5751c33a32acfc80b4466c8fd8e99ca766ce3ccc3714bff1a37096e31b02c3c6169ab26a1d5b18d3856a12a330ebd84e7644202a3155bf40f8e7d8de3d6c8ca03c69e8c38120f98319378273a78a29f9b61a4ce4fb55988771f6c5c9f21d6d9241a7145068802401e69aedffc166b1698aec27ec047194690fdaad55c5834abbdf1dbb35850a9ae0ae6c393dc5bb20be9a285b0f0c4b81956e452b9808fb3ca2d31905cf37dc7d636a71e2658"}}}}}}) syz_extract_tcp_res(&(0x7f0000001e40), 0x0, 0x7ff) sysctl$kern(&(0x7f0000001e80)={0x1, 0x38}, 0x2, &(0x7f0000001ec0)="b2db6fc045b0f04238c78320ea6adfe62ae1e77f9819d9b42f8baec45d46086adeb627a7fdae1fc40d2f0c19036c6d96952c5677061d0f4d8ef81f8e62ed104788644afa4dc0872f41b14f0f87787136425b503280e681872c6faff22149adecc15c43fa4f4d125466e311abdfbcf71203503e8e034dd410a89859bdaafbfc92d46abd4a30521229aadfb97ebe016adf68a32f24708dd7eeb04e88a0e90e", &(0x7f0000001f80)=0x9e, &(0x7f0000001fc0)="242be894eaf19fc25ace0104138620fa9bb70b1abff6fa5ec076f347dfe5f57d79164dfc792eada5ba5ed1aee8aee38244f2df18c6f17627c1edc545bf6edf2d10052532d40d7ed6b833b3f5778633d0fcaad0", 0x53) openat$bpf(0xffffffffffffff9c, &(0x7f0000002040), 0x800, 0x0) ioctl$VMM_IOC_WRITEREGS(r2, 0x82485608, &(0x7f0000002080)={0x5, 0x5, 0x9, {[0x80000001, 0x7, 0x6, 0x8, 0xbb, 0x40, 0x55, 0x4a70, 0xca2b, 0x1ff, 0x4, 0xfffffffffffffbee, 0x85, 0x3, 0xffffffffffff0001, 0x66, 0x9, 0x7], [0xe, 0xfffffffffffffffe, 0x8, 0x2, 0x3, 0xc00000000000000, 0x537, 0x5, 0x5a4d, 0x3], [0x9, 0x4000000000000000, 0x6, 0x6, 0x1, 0x12d9, 0x3e], [0x3d, 0xffffffffffffffff, 0x7, 0x9, 0x8, 0x3ffc0000000000], [{0x8001, 0x3ff, 0x1, 0x7}, {0x1, 0xfffffffd, 0x1, 0xff}, {0x2, 0x0, 0x5, 0x8}, {0x4, 0x5c86691a, 0x2, 0x80000000}, {0x1, 0x1, 0x7, 0x4}, {0x63f, 0xd, 0x4, 0x6}, {0x10, 0x91a4, 0x400, 0x7}, {0x9, 0x9, 0x6, 0x2}], {0x7, 0x0, 0x9, 0x1f}, {0x10, 0x9, 0x7, 0x8000}}}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.48' (ED25519) to the list of known hosts. pckbd_enable: command error pckbd_enable: command error  Ÿ € panic: sleep: syz-executor[67474] slept inside a no-sleep walk bracket (raw pointer held across sleep, wmesg "getblk") Stopped at db_enter+0x17: popq %rbp TID PID UID PRFLAGS PFLAGS CPU COMMAND 171811 38348 0 0 0 0 syz-executor *412931 67474 0 0 0x4000010 1K syz-executor db_enter() at db_enter+0x17 panic(ffffffff84d8d160) at panic+0x270 sleep_setup(ffff800001bdd330,11,ffffffff84692e40) at sleep_setup+0x3b2 tsleep_nsec(ffff800001bdd330,11,ffffffff84692e40,ffffffffffffffff) at tsleep_nsec+0x29c getblk(ffff800000d8e798,65560,4000,0,ffffffffffffffff) at getblk+0x23a bread(ffff800000d8e798,65560,4000,ffff80003bbac2a0) at bread+0x47 ffs_update(ffff800001d18be8,1) at ffs_update+0x3e4 ffs_truncate(ffff800001d18be8,0,0,ffffffffffffffff) at ffs_truncate+0x12f0 ufs_inactive(ffff80003bbac680) at ufs_inactive+0x2cb VOP_INACTIVE(ffff800001d17988,ffff80003b713780) at VOP_INACTIVE+0x1bb vrele(ffff800001d17988) at vrele+0x16a ktrsettrace(ffff8000299179d0,80000814,ffff800001c80a58,ffff800000119270) at ktrsettrace+0x16c ktrops(ffff80003b713780,ffff8000299179d0,0,80000814,ffff800001c80a58,ffff800000119270) at ktrops+0x338 doktrace(ffff800001c80a58,4,814,0,ffff80003b713780) at doktrace+0xa72 end trace frame: 0xffff80003bbacb70, count: 0 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{1}> ddb{1}> set $lines = 0 ddb{1}> set $maxwidth = 0 ddb{1}> show panic *cpu1: sleep: syz-executor[67474] slept inside a no-sleep walk bracket (raw pointer held across sleep, wmesg "getblk") ddb{1}> show kasan kasan: no report recorded this boot ddb{1}> trace db_enter() at db_enter+0x17 panic(ffffffff84d8d160) at panic+0x270 sleep_setup(ffff800001bdd330,11,ffffffff84692e40) at sleep_setup+0x3b2 tsleep_nsec(ffff800001bdd330,11,ffffffff84692e40,ffffffffffffffff) at tsleep_nsec+0x29c getblk(ffff800000d8e798,65560,4000,0,ffffffffffffffff) at getblk+0x23a bread(ffff800000d8e798,65560,4000,ffff80003bbac2a0) at bread+0x47 ffs_update(ffff800001d18be8,1) at ffs_update+0x3e4 ffs_truncate(ffff800001d18be8,0,0,ffffffffffffffff) at ffs_truncate+0x12f0 ufs_inactive(ffff80003bbac680) at ufs_inactive+0x2cb VOP_INACTIVE(ffff800001d17988,ffff80003b713780) at VOP_INACTIVE+0x1bb vrele(ffff800001d17988) at vrele+0x16a ktrsettrace(ffff8000299179d0,80000814,ffff800001c80a58,ffff800000119270) at ktrsettrace+0x16c ktrops(ffff80003b713780,ffff8000299179d0,0,80000814,ffff800001c80a58,ffff800000119270) at ktrops+0x338 doktrace(ffff800001c80a58,4,814,0,ffff80003b713780) at doktrace+0xa72 sys_ktrace(ffff80003b713780,ffff80003bbacd00,ffff80003bbacc60) at sys_ktrace+0x1f6 syscall(ffff80003bbacd00) at syscall+0x1089 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x9e88b2dd780, count: -17 ddb{1}> show registers rdi 0 rsi 0x1 rbp 0xffff80003bbabd50 rbx 0xffff80003bbabdc0 rdx 0 rcx 0xffff800028fe3ff0 rax 0xffff80000015bb00 r8 0x101010101010101 r9 0x8080808080808080 r10 0 r11 0xffffffff83e54b70 x86_bus_space_io_read_1 r12 0xffffffff84d8d160 .str.9 r13 0xffff800028fe4c08 r14 0xffff800028fe4e07 r15 0x1 rip 0xffffffff82f1b577 db_enter+0x17 cs 0x8 rflags 0x246 rsp 0xffff80003bbabd50 ss 0x10 db_enter+0x17: popq %rbp ddb{1}> show proc PROC (syz-executor) tid=412931 pid=67474 tcnt=3 stat=onproc flags process=0 proc=4000010 runpri=32, usrpri=74, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff80003b7122c0,0xffff80003b713a28 process=0xffff800045ff3510 user=0xffff80003bba1000, vmspace=0xffff800001c833f0 estcpu=24, cpticks=3, pctcpu=0.0, user=0, sys=3, intr=0 ddb{1}> ps PID TID PPID UID S PRLAGS PFLAGS WAIT COMMAND 38348 171811 65031 0 7 0 0 syz-executor 47418 189809 35834 0 3 0 0x80 nanoslp syz-executor 47418 391451 35834 0 3 0 0x4000088 kqread syz-executor 47418 90731 35834 0 3 0 0x4000080 fsleep syz-executor 47418 445760 35834 0 3 0 0x4000080 fsleep syz-executor 57946 150222 32541 0 2 0 0 syz-executor 57946 165337 32541 0 3 0 0x4000080 fsleep syz-executor 57946 109791 32541 0 3 0 0x4000080 fsleep syz-executor 67474 17623 75400 0 2 0 0 syz-executor *67474 412931 75400 0 7 0 0x4000010 syz-executor 67474 454641 75400 0 3 0 0x4000080 fsleep syz-executor 43940 357345 19331 0 2 0 0 syz-executor 43940 426456 19331 0 2 0 0x4000000 syz-executor 6948 68771 69539 0 2 0 0 syz-executor 6948 400303 69539 0 3 0 0x4000080 fifow syz-executor 6948 154010 69539 0 3 0 0x4000080 lockf syz-executor 90526 117251 95305 0 3 0 0x80 nanoslp syz-executor 90526 119418 95305 0 3 0 0x4000080 kqpoll syz-executor 90526 424613 95305 0 3 0 0x4000080 fsleep syz-executor 19331 248276 65061 0 3 0x2 0x80 nanoslp syz-executor 95305 518391 65061 0 3 0x2 0x80 nanoslp syz-executor 65031 189754 65061 0 3 0x2 0x80 nanoslp syz-executor 60056 366132 65061 0 3 0x2 0 biowait syz-executor 69539 90482 65061 0 3 0x2 0x80 nanoslp syz-executor 75400 337847 65061 0 3 0x2 0x80 nanoslp syz-executor 35834 205017 65061 0 3 0x2 0x80 nanoslp syz-executor 32541 208373 65061 0 3 0x2 0x80 nanoslp syz-executor 65061 431184 7149 0 2 0x2 0 syz-executor 7149 394798 3222 0 3 0x100002 0x88 sigsusp ksh 3222 36865 42810 0 3 0x10 0x88 kqread sshd-session 42810 203130 40364 0 3 0x12 0x80 kqread sshd-session 23169 336507 1 0 3 0x100003 0x80 ttyin getty 40364 214371 1 0 3 0 0x88 kqread sshd 2319 187828 45507 74 3 0x1100012 0x80 bpf pflogd 45507 108839 1 0 3 0 0x80 sbwait pflogd 55843 99010 45657 73 3 0x1100010 0x80 kqread syslogd 45657 28442 1 0 3 0x100002 0x80 sbwait syslogd 26354 287419 1 0 3 0x100000 0x80 kqread resolvd 81479 453072 59358 77 3 0x100012 0x80 kqread dhcpleased 68806 480161 59358 77 3 0x100012 0x80 kqread dhcpleased 59358 77248 1 0 3 0 0x80 kqread dhcpleased 61559 172595 0 0 3 0x14000 0x200 bored smr 19324 313582 0 0 2 0x14000 0x200 zerothread 3558 446092 0 0 3 0x14000 0x200 aiodoned aiodoned 62043 335307 0 0 3 0x14000 0x200 syncer update 18095 459984 0 0 3 0x14000 0x200 cleaner cleaner 95892 88836 0 0 3 0x14000 0x200 reaper reaper 14612 270419 0 0 3 0x14000 0x200 pgdaemon pagedaemon 54759 149215 0 0 3 0x14000 0x200 bored viomb 76739 160950 0 0 3 0x14000 0x40000200 acpi0 acpi0 24633 402923 0 0 3 0x14000 0x40000200 idle1 65499 514937 0 0 3 0x14000 0x200 bored softnet1 31440 141827 0 0 3 0x14000 0x200 bored softnet0 69344 42004 0 0 3 0x14000 0x200 bored systqmp 42543 89166 0 0 3 0x14000 0x200 bored systq 72731 231065 0 0 3 0x14000 0x200 tmoslp softclockmp 33080 111327 0 0 3 0x14000 0x40000200 tmoslp softclock 23704 409690 0 0 3 0x14000 0x40000200 idle0 1 431275 0 0 3 0x2 0x80 wait init 0 0 -1 0 3 0x10000 0x200 scheduler swapper ddb{1}> show all locks Process 38348 (syz-executor) thread 0xffff800045ff5778 (171811) shared rwlock vmmaplk r = 0 (0xffff800001c83e78) #0 witness_lock+0x632 #1 rw_do_enter_read+0x55d #2 uvmfault_lookup+0x1a2 #3 uvm_fault_check+0x43 #4 uvm_fault+0x1e7 #5 upageflttrap+0xe0 #6 usertrap+0x4f9 #7 recall_trap+0x8 Process 67474 (syz-executor) thread 0xffff80003b713780 (412931) exclusive rrwlock inode r = 0 (0xffff800001d18c88) #0 witness_lock+0x632 #1 rw_do_enter_write+0x53e #2 rrw_enter+0xf0 #3 VOP_LOCK+0x17e #4 vn_lock+0xca #5 vrele+0x113 #6 ktrsettrace+0x16c #7 ktrops+0x338 #8 doktrace+0xa72 #9 sys_ktrace+0x1f6 #10 syscall+0x1089 #11 Xsyscall+0x128 exclusive kernel_lock &kernel_lock r = 0 (0xffffffff85d52380) #0 witness_lock+0x632 #1 syscall+0x1048 #2 Xsyscall+0x128 Process 60056 (syz-executor) thread 0xffff800045ffda08 (366132) exclusive rrwlock inode r = 0 (0xffff800001d18470) #0 witness_lock+0x632 #1 rw_do_enter_write+0x53e #2 rrw_enter+0xf0 #3 VOP_LOCK+0x17e #4 vn_lock+0xca #5 vget+0x321 #6 ufs_ihashget+0x233 #7 ffs_vget+0x10b #8 ufs_lookup+0x1529 #9 VOP_LOOKUP+0xda #10 vfs_lookup+0xfbd #11 namei+0xe19 #12 dounlinkat+0x102 #13 syscall+0x1089 #14 Xsyscall+0x128 exclusive rrwlock inode r = 0 (0xffff800001d18ed8) #0 witness_lock+0x632 #1 rw_do_enter_write+0x53e #2 rrw_enter+0xf0 #3 VOP_LOCK+0x17e #4 vn_lock+0xca #5 vget+0x321 #6 cache_lookup+0x579 #7 ufs_lookup+0x3c0 #8 VOP_LOOKUP+0xda #9 vfs_lookup+0xfbd #10 namei+0xe19 #11 dounlinkat+0x102 #12 syscall+0x1089 #13 Xsyscall+0x128 ddb{1}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 11073 12470K 12470K 166960K 12338 0 pcb 17 24K 24K 166960K 23 0 rtable 237 12K 13K 166960K 355 0 pf 34 22K 26K 166960K 48 0 ifaddr 43 12K 12K 166960K 45 0 ifgroup 55 2K 2K 166960K 55 0 sysctl 2 1K 13K 166960K 6 0 counters 70 42K 42K 166960K 70 0 ioctlops 0 0K 4K 166960K 1487 0 iov 0 0K 4K 166960K 1 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1446 93K 93K 166960K 1532 0 UFS quota 1 36K 36K 166960K 1 0 UFS mount 5 44K 44K 166960K 5 0 shm 2 2K 6K 166960K 4 0 VM map 2 1K 1K 166960K 2 0 sem 5 0K 0K 166960K 5 0 dirhash 12 2K 2K 166960K 12 0 ACPI 1734 201K 292K 166960K 11964 0 file desc 17 61K 97K 166960K 159 0 proc 70 128K 177K 166960K 558 0 subproc 72 9K 9K 166960K 72 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 20K 20K 166960K 1 0 in_multi 99 7K 7K 166960K 99 0 ether_multi 1 0K 0K 166960K 1 0 mrt 0 0K 0K 166960K 5 0 ISOFS mount 1 36K 36K 166960K 1 0 MSDOSFS mount 1 20K 20K 166960K 1 0 ttys 49 344K 344K 166960K 49 0 exec 0 0K 2K 166960K 388 0 fusefs mount 1 36K 36K 166960K 1 0 tdb 3 1K 1K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 230 244K 264K 166960K 3387 0 UVM aobj 5 8K 8K 166960K 5 0 pinsyscall 1066 1722K 1727K 166960K 1335 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 NDP 12 0K 2K 166960K 28 0 temp 33 9162K 9172K 166960K 4156 0 kqueue 15 48K 56K 166960K 32 0 SYN cache 2 16K 16K 166960K 2 0 ddb{1}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 28 0 0 1 0 1 1 0 8 0 rtpcb 120 35 0 32 1 0 1 1 0 8 0 rtentry 176 111 0 1 5 0 5 5 0 8 0 unpcb 144 65 0 42 1 0 1 1 0 8 0 syncache 336 4 0 4 2 1 1 1 0 8 1 tcpcb 736 11 0 7 1 0 1 1 0 8 0 arp 136 18 0 0 1 0 1 1 0 8 0 inpcb 328 80 0 69 1 0 1 1 0 8 0 nd6 152 24 0 0 1 0 1 1 0 8 0 kcovpl 48 8 0 0 1 0 1 1 0 8 0 pffrent 40 2 0 2 1 0 1 1 0 8 1 pfosfp 40 1428 0 1005 5 0 5 5 0 8 0 pfosfpen 112 1428 0 714 21 0 21 21 0 8 0 pfstitem 24 24 0 0 1 0 1 1 0 8 0 pfstkey 128 24 0 0 1 0 1 1 0 8 0 pfstate 448 24 0 0 3 0 3 3 0 8 0 pfrule 1360 21 0 16 2 1 1 2 0 8 0 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 452 0 0 29 0 29 29 0 8 0 art_table 40 453 0 0 5 0 5 5 0 8 0 art_node 32 111 0 11 1 0 1 1 0 8 0 semapl 72 3 0 0 1 0 1 1 0 8 0 shmpl 112 2 0 0 1 0 1 1 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino2pl 256 1611 0 136 93 0 93 93 0 8 0 ffsino 296 1611 0 136 114 0 114 114 0 8 0 nchpl 144 1842 0 137 64 0 64 64 0 8 0 vnodes 216 1865 0 0 104 0 104 104 0 8 0 namei 1024 5865 0 5865 2 1 1 1 0 8 1 percpumem 16 51 0 0 1 0 1 1 0 8 0 kstatmem 264 27 0 0 2 0 2 2 0 8 0 scxspl 216 6808 0 6807 4 3 1 3 1 8 0 plimitpl 152 31 0 14 1 0 1 1 0 8 0 sigapl 424 482 0 435 7 0 7 7 0 8 1 knotepl 120 56 0 0 2 0 2 2 0 8 0 kqueuepl 224 32 0 21 1 0 1 1 0 8 0 pipepl 344 167 0 140 6 0 6 6 0 8 3 fdescpl 528 466 0 435 3 0 3 3 0 8 0 filepl 160 1946 0 1714 16 0 16 16 0 8 6 lockfpl 104 13 0 8 1 0 1 1 0 8 0 lockfspl 48 8 0 4 1 0 1 1 0 8 0 sessionpl 144 24 0 15 1 0 1 1 0 8 0 pgrppl 48 32 0 15 1 0 1 1 0 8 0 ucredpl 104 110 0 97 1 0 1 1 0 8 0 zombiepl 144 435 0 435 1 0 1 1 0 8 1 processpl 1232 482 0 435 5 0 5 5 0 8 0 procpl 664 539 0 480 6 0 6 6 0 8 0 sockpl 752 180 0 143 4 0 4 4 0 8 0 mcl64k 65536 2 0 0 1 0 1 1 0 8 0 mcl16k 16384 2 0 0 1 0 1 1 0 8 0 mcl9k128 9344 1 0 0 1 0 1 1 0 8 0 mcl8k 8192 1 0 0 1 0 1 1 0 8 0 mcl4k 4096 120 0 0 15 0 15 15 0 8 0 mcl2k 2048 20 0 0 3 0 3 3 0 8 0 mextrefs 64 20 0 0 1 0 1 1 0 8 0 mtagpl 96 3 0 0 1 0 1 1 0 8 0 mbufpl 256 140 0 0 9 0 9 9 0 8 0 bufpl 272 2414 0 105 154 0 154 154 0 8 0 anonpl 32 3856 0 0 32 0 32 32 0 222 0 amapchunkpl 152 9206 0 8736 20 0 20 20 0 158 0 amappl16 200 1928 0 1905 6 3 3 5 0 8 0 amappl15 192 1 0 1 1 1 0 1 0 8 0 amappl14 184 470 0 469 1 0 1 1 0 8 0 amappl13 176 160 0 147 1 0 1 1 0 8 0 amappl12 168 735 0 706 2 0 2 2 0 8 0 amappl11 160 6 0 6 1 1 0 1 0 8 0 amappl10 152 69 0 55 1 0 1 1 0 8 0 amappl9 144 276 0 276 1 1 0 1 0 8 0 amappl8 136 101 0 99 1 0 1 1 0 8 0 amappl7 128 148 0 135 1 0 1 1 0 8 0 amappl6 120 156 0 155 1 0 1 1 0 8 0 amappl5 112 112 0 101 1 0 1 1 0 8 0 amappl4 104 295 0 277 1 0 1 1 0 8 0 amappl3 96 1646 0 1538 3 0 3 3 0 8 0 amappl2 88 551 0 493 2 0 2 2 0 8 0 amappl1 80 10602 0 10000 16 1 15 15 0 8 2 amappl 88 2639 0 2480 4 0 4 4 0 92 0 uvmvnodes 80 98 0 0 2 0 2 2 0 8 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 4 0 0 1 0 1 1 0 8 0 uaddrrnd 24 466 0 435 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 466 0 435 1 0 1 1 0 8 0 vmmpekpl 168 6096 0 6060 2 0 2 2 0 8 0 vmmpepl 168 39782 0 37893 86 0 86 86 0 357 0 vmsppl 488 465 0 435 5 0 5 5 0 8 1 rwobjpl 80 15042 0 14027 24 0 24 24 0 8 1 pdppl 4096 940 0 870 100 26 74 88 0 8 4 pvpl 32 9958 0 0 82 1 81 81 0 265 0 pmappl 256 465 0 435 3 0 3 3 0 8 0 extentpl 40 46 0 28 1 0 1 1 0 8 0 phpool 120 426 0 31 13 0 13 13 0 8 0 ddb{1}> machine ddbcpu 0 Stopped at x86_ipi_db+0x19: leave x86_ipi_db(ffffffff851e9ff0) at x86_ipi_db+0x19 x86_ipi_handler() at x86_ipi_handler+0x112 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc+0x1a __mp_lock(ffffffff85d51b80) at __mp_lock+0x290 intr_handler(ffff800039f04730,ffff800000167780) at intr_handler+0x113 Xintr_ioapic_edge16_untramp() at Xintr_ioapic_edge16_untramp+0x18f __asan_load8_noabort(ffff800001ce2e70) at __asan_load8_noabort+0x2e uvm_map_lookup_entry(ffff800001c83d78,70aa95a2000,ffff800039f04a48) at uvm_map_lookup_entry+0x21a uvmfault_lookup(ffff800039f04a20,0) at uvmfault_lookup+0x1dd uvm_fault_check(ffff800039f04a20,ffff800039f049c8,ffff800039f049b8,0) at uvm_fault_check+0x43 uvm_fault(ffff800001c83d78,70aa95a2000,0,2) at uvm_fault+0x1e7 upageflttrap(ffff800039f04d00,70aa95a2f40) at upageflttrap+0xe0 usertrap(ffff800039f04d00) at usertrap+0x4f9 end trace frame: 0xffff800039f04d80, count: 0 ddb{0}> trace x86_ipi_db(ffffffff851e9ff0) at x86_ipi_db+0x19 x86_ipi_handler() at x86_ipi_handler+0x112 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc+0x1a __mp_lock(ffffffff85d51b80) at __mp_lock+0x290 intr_handler(ffff800039f04730,ffff800000167780) at intr_handler+0x113 Xintr_ioapic_edge16_untramp() at Xintr_ioapic_edge16_untramp+0x18f __asan_load8_noabort(ffff800001ce2e70) at __asan_load8_noabort+0x2e uvm_map_lookup_entry(ffff800001c83d78,70aa95a2000,ffff800039f04a48) at uvm_map_lookup_entry+0x21a uvmfault_lookup(ffff800039f04a20,0) at uvmfault_lookup+0x1dd uvm_fault_check(ffff800039f04a20,ffff800039f049c8,ffff800039f049b8,0) at uvm_fault_check+0x43 uvm_fault(ffff800001c83d78,70aa95a2000,0,2) at uvm_fault+0x1e7 upageflttrap(ffff800039f04d00,70aa95a2f40) at upageflttrap+0xe0 usertrap(ffff800039f04d00) at usertrap+0x4f9 recall_trap() at recall_trap+0x8 end of kernel end trace frame: 0x775d74d322f0, count: -15 ddb{0}> machine ddbcpu 1 Stopped at db_enter+0x17: popq %rbp db_enter() at db_enter+0x17 panic(ffffffff84d8d160) at panic+0x270 sleep_setup(ffff800001bdd330,11,ffffffff84692e40) at sleep_setup+0x3b2 tsleep_nsec(ffff800001bdd330,11,ffffffff84692e40,ffffffffffffffff) at tsleep_nsec+0x29c getblk(ffff800000d8e798,65560,4000,0,ffffffffffffffff) at getblk+0x23a bread(ffff800000d8e798,65560,4000,ffff80003bbac2a0) at bread+0x47 ffs_update(ffff800001d18be8,1) at ffs_update+0x3e4 ffs_truncate(ffff800001d18be8,0,0,ffffffffffffffff) at ffs_truncate+0x12f0 ufs_inactive(ffff80003bbac680) at ufs_inactive+0x2cb VOP_INACTIVE(ffff800001d17988,ffff80003b713780) at VOP_INACTIVE+0x1bb vrele(ffff800001d17988) at vrele+0x16a ktrsettrace(ffff8000299179d0,80000814,ffff800001c80a58,ffff800000119270) at ktrsettrace+0x16c ktrops(ffff80003b713780,ffff8000299179d0,0,80000814,ffff800001c80a58,ffff800000119270) at ktrops+0x338 doktrace(ffff800001c80a58,4,814,0,ffff80003b713780) at doktrace+0xa72 end trace frame: 0xffff80003bbacb70, count: 0 ddb{1}> trace db_enter() at db_enter+0x17 panic(ffffffff84d8d160) at panic+0x270 sleep_setup(ffff800001bdd330,11,ffffffff84692e40) at sleep_setup+0x3b2 tsleep_nsec(ffff800001bdd330,11,ffffffff84692e40,ffffffffffffffff) at tsleep_nsec+0x29c getblk(ffff800000d8e798,65560,4000,0,ffffffffffffffff) at getblk+0x23a bread(ffff800000d8e798,65560,4000,ffff80003bbac2a0) at bread+0x47 ffs_update(ffff800001d18be8,1) at ffs_update+0x3e4 ffs_truncate(ffff800001d18be8,0,0,ffffffffffffffff) at ffs_truncate+0x12f0 ufs_inactive(ffff80003bbac680) at ufs_inactive+0x2cb VOP_INACTIVE(ffff800001d17988,ffff80003b713780) at VOP_INACTIVE+0x1bb vrele(ffff800001d17988) at vrele+0x16a ktrsettrace(ffff8000299179d0,80000814,ffff800001c80a58,ffff800000119270) at ktrsettrace+0x16c ktrops(ffff80003b713780,ffff8000299179d0,0,80000814,ffff800001c80a58,ffff800000119270) at ktrops+0x338 doktrace(ffff800001c80a58,4,814,0,ffff80003b713780) at doktrace+0xa72 sys_ktrace(ffff80003b713780,ffff80003bbacd00,ffff80003bbacc60) at sys_ktrace+0x1f6 syscall(ffff80003bbacd00) at syscall+0x1089 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x9e88b2dd780, count: -17