last executing test programs: 416.439243ms ago: executing program 7 (id=8): syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x201, 0x80) munmap(&(0x7f0000000000/0xf000)=nil, 0xf000) ftruncate(r0, 0x40002) pwrite(r0, &(0x7f0000000100)="93", 0x1, 0x5) r1 = socket(0x2, 0x1, 0x0) dup(r1) connect$unix(r1, &(0x7f0000000000), 0x10) sendto$inet(r1, &(0x7f0000000440)='u', 0xfe00, 0x401, 0x0, 0x0) close(r1) r2 = socket(0x2, 0x1, 0x0) setsockopt$inet_opts(r2, 0x0, 0x1, &(0x7f0000000040)="27913c11b3c9e91fbdf59c32417020e3a81e536e", 0x14) connect$unix(r2, &(0x7f0000000080)=@abs={0x1, 0x0, 0x3}, 0x8) ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f0000000040)={0x1, 0x8, 0xc, 0x8, "5869329923ec05c4699b35a35ce501eacdb95ed2", 0x2, 0x8}) 414.737486ms ago: executing program 1 (id=2): pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) (async) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0x80000000, 0xffff63de, 0x2, 0x2, 0x8, 0x100003, 0x40, 0x10, [{0x5, 0x3, 0x775, 0x80000201}, {0x2, 0x8, 0x6, 0xfff}, {0x7, 0xfffffffe, 0x2006, 0x1}, {0x2, 0x7, 0xf}, {0xfffffffc, 0x7, 0xf11, 0x7}, {0x3, 0xffff, 0x80d2}, {0x2024, 0x1, 0x85, 0x5}, {0x0, 0x40009, 0xfffffff8, 0xfbffe2e9}, {0x8, 0xffa, 0x6, 0x7fff}, {0x0, 0xfffffff8, 0x400005, 0x8bfb}, {0xfffff0d1, 0x8000000, 0x8, 0x7}, {0x4, 0xc7cb, 0x3, 0x2}, {0x401, 0x106, 0x9, 0x40}, {0x200003, 0xee6, 0x2, 0x6f5fc48b}, {0x7e, 0x5, 0x1, 0x5}, {0x9be2, 0x6, 0x6, 0x69}]}) (async) poll(&(0x7f0000000000), 0x35, 0x0) (async) sysctl$net_inet_ip(&(0x7f0000000000)={0x4, 0x2, 0x0, 0x14}, 0x4, 0x0, 0x0, 0x0, 0x0) write(r0, &(0x7f0000000340), 0xd4e688a67930cd) (async) dup2(r0, r1) (async) openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) 401.961867ms ago: executing program 4 (id=5): mkdir(&(0x7f0000000080)='./file0\x00', 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, 0x0, 0x0) (async) poll(0xffffffffffffffff, 0x0, 0x2) (async) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) setsockopt$sock_int(r0, 0xffff, 0x4, &(0x7f0000000000)=0xd, 0x4) (async) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000040)) 307.311146ms ago: executing program 1 (id=10): sysctl$kern(&(0x7f00000000c0)={0x1, 0x47}, 0x4000000000000003, 0x0, 0x0, 0x0, 0xfffffffffffffeb0) syz_emit_ethernet(0x23a7, &(0x7f0000000080)=ANY=[@ANYRES64]) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff94ea09066dbd86dd60db834400081101fed38d5ba80b9e61eacdd0e598000000ff0200000000000000000000000000014e234e2200089078"]) r0 = socket(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0xffff, 0x200, &(0x7f0000000080)=0x6, 0x0) sendsyslog(0x0, 0xfffffffffffffef5, 0x2d) r1 = syz_open_pts() mquery(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r1, 0x995) 298.217643ms ago: executing program 0 (id=11): r0 = socket(0x11, 0x3, 0x0) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b1000504000004000000000007", 0xd, 0x405, 0x0, 0x0) (async) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x100000000000000, 0x7}}) kevent(0xffffffffffffffff, &(0x7f0000000040)=[{{}, 0xfffffffffffffffa, 0x6b, 0x11, 0x200000000000001, 0x101}], 0x203, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x2, 0x0, 0x1c}, 0x4, 0x0, 0x0, 0x0, 0x0) (async) r1 = socket(0x18, 0x1, 0x0) setsockopt(r1, 0x1000000029, 0xc, &(0x7f0000000040)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) (async) setsockopt(r1, 0x1000000029, 0xc, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r2 = socket(0x11, 0x3, 0x0) (async) connect(r0, &(0x7f0000000140)=@in6={0x18, 0x2, 0x0, 0xffffa5e8}, 0x84) setrlimit(0x3, &(0x7f0000000100)={0x7, 0x100000}) (async) setsockopt$sock_int(r0, 0xffff, 0x1002, &(0x7f0000000240)=0xff, 0x4) (async) sendto$unix(r2, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42118000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x406, 0x0, 0x0) 294.675501ms ago: executing program 4 (id=12): close(0xffffffffffffffff) ioctl$FIOASYNC(0xffffffffffffffff, 0x80047470, &(0x7f0000000140)=0x2) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffff06000000aa"]) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="00001c00ac14"]) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) socketpair(0x20, 0x0, 0x1, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt(r0, 0x7fffffff, 0xfffffbff, &(0x7f0000000180)="bea456816bbfb71ca4234888fdb31dfeade04ff97ff5fbbcc209514027aeb70fca4107ec3499e8b1e85cce5308c25938f5988a52692339e5b7472f7ce7ecf0da779aa392e6438d85354c784959f5025be349431599af6084e76c082a3fed1bac1e31f995b712b0e7ce1e6815788645a351d0bdad05ec4bc791c82d15bc3babab331f22de2b58c2", 0x87) r1 = socket(0x2, 0x1, 0x0) sysctl$net_inet_tcp(&(0x7f0000000040)={0x4, 0x2, 0x6, 0x18}, 0x4, &(0x7f0000000080), 0x0, 0x0, 0x0) bind(r1, &(0x7f0000000000), 0x10) listen(r1, 0x0) r2 = socket(0x2, 0x1, 0x0) accept$unix(r1, &(0x7f0000000080)=@abs, &(0x7f0000000140)=0x8) connect$unix(r2, &(0x7f0000000000), 0x10) 277.158005ms ago: executing program 7 (id=13): open(&(0x7f0000000100)='./file0\x00', 0x9cab835cfdc52675, 0xba) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0x8, 0x8, 0x7, 0x2, 0x8, 0x3, 0x40, 0x10, [{0x5, 0x3, 0x7fff, 0x80000201}, {0x4, 0x8, 0x6, 0xfff}, {0x1, 0xfffffffe, 0x6, 0x2}, {0x2, 0xdf, 0xf, 0x40}, {0x2, 0x7, 0xf11, 0x7}, {0x800, 0xffbf, 0x80cf}, {0x1, 0x5, 0x85, 0x2}, {0x0, 0x1, 0xfffffff8, 0xfbffe2e9}, {0x8, 0xffe, 0x6, 0x17fff}, {0x3, 0x0, 0x5, 0x7}, {0x8, 0x8000000, 0x8, 0x7}, {0x4, 0xc7cb, 0x800000, 0xa66}, {0x401, 0x10a, 0x9, 0x9}, {0x200003, 0xee2, 0x4, 0x6f5fc48f}, {0x81, 0x101, 0x3, 0x7fff}, {0xffffffff, 0x8003, 0x6, 0x69}]}) setrlimit(0x8, &(0x7f00000000c0)={0x45, 0x56}) r0 = syz_open_pts() close(r0) r1 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0) ioctl$TIOCSETVERAUTH(r1, 0x8004741c, &(0x7f00000001c0)=0x6) syz_open_pts() ioctl$FIOASYNC(r0, 0x80047466, &(0x7f0000000200)=0x5) ioctl$TIOCSBRK(r0, 0x2000747b) poll(&(0x7f0000000000), 0x35, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r3, &(0x7f0000001300), 0x0) sendmmsg(r2, &(0x7f0000002c40)={&(0x7f0000002c00)={&(0x7f0000000140)=@in={0x2, 0x0}, 0xc, 0x0, 0x0, 0x0}, 0xd2}, 0x10, 0xc) syz_emit_ethernet(0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="ffffffffffffca0f0000000008004a4800280066000fffffffffffffdfffffff07037a441008f1ffffffff04000012000000080007fd3cc07d6a4aa218e9978361018a"]) 276.537795ms ago: executing program 7 (id=14): r0 = socket(0x1, 0x5, 0x0) close(r0) r1 = socket(0x2, 0x1, 0x0) syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) setsockopt(r1, 0x6, 0x8, &(0x7f0000001300)="6d2322a0", 0x4) connect$unix(r1, &(0x7f0000000000), 0x10) fcntl$dupfd(r1, 0x0, r1) write(r0, &(0x7f0000000140)="24bdfaa9aec43050006123339a346f731573d8d508753f95b7688a858b8cf6bbca32ec975d185cfcadf68ed7796e53e0000400007a20746f313da7dc6c5133407dbcafaea3077475df6575658bc77274869b4cf11d1374cacc8af0e6508712b97dd66229e96593f6a8822b437639678a1cc3702368dc70dccbc24df5f1329123aaebf2429a7e1582005bed8a072a9c3310cdeeb79f221bda2b2ccef950b12ea84e60e401ed6abbac6c034a7d182a13e31f491b6f624148710ee7f3278e676ec4708853588d97fc458e5807859417c4cc81f0f51d2f4718ce77baaadf64199ef12945bb150600"/246, 0xf6) socket(0x1, 0x5, 0x0) (async) close(r0) (async) socket(0x2, 0x1, 0x0) (async) syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) (async) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1) (async) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) setsockopt(r1, 0x6, 0x8, &(0x7f0000001300)="6d2322a0", 0x4) (async) connect$unix(r1, &(0x7f0000000000), 0x10) (async) fcntl$dupfd(r1, 0x0, r1) (async) write(r0, &(0x7f0000000140)="24bdfaa9aec43050006123339a346f731573d8d508753f95b7688a858b8cf6bbca32ec975d185cfcadf68ed7796e53e0000400007a20746f313da7dc6c5133407dbcafaea3077475df6575658bc77274869b4cf11d1374cacc8af0e6508712b97dd66229e96593f6a8822b437639678a1cc3702368dc70dccbc24df5f1329123aaebf2429a7e1582005bed8a072a9c3310cdeeb79f221bda2b2ccef950b12ea84e60e401ed6abbac6c034a7d182a13e31f491b6f624148710ee7f3278e676ec4708853588d97fc458e5807859417c4cc81f0f51d2f4718ce77baaadf64199ef12945bb150600"/246, 0xf6) (async) 275.514713ms ago: executing program 0 (id=15): sendmsg$unix(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f0000000080), 0x1c, 0x0}, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0xc8d2b21d9a355508, 0x8}, 0x0, 0xe, 0x0, 0x0, 0x0, 0x71ae, 0x5}) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) socket(0x18, 0x1, 0x0) (async) r0 = socket(0x18, 0x1, 0x0) close(r0) socket(0x18, 0x2, 0x0) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) sendmsg$unix(r0, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$unix(r0, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0) sysctl$kern(&(0x7f0000000100)={0x1, 0xa}, 0x2, &(0x7f00000011c0)="71f91e", &(0x7f0000000000)=0x3, 0x0, 0x0) (async) sysctl$kern(&(0x7f0000000100)={0x1, 0xa}, 0x2, &(0x7f00000011c0)="71f91e", &(0x7f0000000000)=0x3, 0x0, 0x0) sysctl$net_inet_ip(&(0x7f00000002c0)={0x4, 0x2, 0x0, 0xd}, 0x4, 0x0, 0x0, 0x0, 0x0) 274.850733ms ago: executing program 1 (id=16): symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async, rerun: 64) r0 = socket(0x18, 0x1, 0x0) (rerun: 64) getsockopt$sock_timeval(r0, 0xffff, 0x1006, 0x0, 0x0) (async, rerun: 32) shmctl$IPC_RMID(0xffffffffffffffff, 0x0) (rerun: 32) unveil(&(0x7f00000000c0)='./file0/file0/..\x00', &(0x7f0000000100)='r\x00') (async) r1 = open$dir(&(0x7f0000000200)='./file0\x00', 0x80, 0x0) linkat(r1, &(0x7f0000000240)='./file0\x00', 0xffffffffffffffff, 0x0, 0x0) 109.633634ms ago: executing program 0 (id=17): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) sysctl$net_pipex(&(0x7f00000000c0)={0x4, 0x22, 0x1}, 0x3, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) select(0x2, &(0x7f0000000000)={0x8000000000000001, 0x1f5, 0xfffffffffffffffb, 0x4, 0x7, 0x3, 0x6, 0x8}, &(0x7f0000000080)={0x8, 0xff, 0x7, 0x5, 0x7, 0xf9bc, 0xd47a, 0x2}, &(0x7f00000000c0)={0x4, 0x7fffffffffffffff, 0x9, 0x6, 0xfffffffffffffff9, 0x1, 0x7fffffff, 0x7fffffffffffffff}, &(0x7f0000000100)={0x40, 0x2}) setrlimit(0x8, &(0x7f0000000980)={0x8, 0x54}) syz_open_pts() syz_open_pts() r0 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0xd6) socket(0x2, 0x2, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000280)='#!', 0x10}, {&(0x7f0000000000)="8d6bb85551ec8430877ae32fe9bbe42cc8f2147a3eba8e1969f0435119cf4c071c8aee7ef2921be5d7d4796c5566c95989acb3d185587234186e96b8fde9ffac51de05a87b8b893e2abd154dd886eafbe03881d25b7b13b4c32227fc9e5a86a06f59f701322b3a109a13436e486b0a", 0x6f}], 0x2) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 109.049535ms ago: executing program 2 (id=3): r0 = open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x101) pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000440)='\x00', 0x1}], 0x1, 0x3effc) fchownat(r0, &(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, 0xffffffffffffffff, 0x4) r1 = open(&(0x7f0000000040)='./file0\x00', 0x200, 0x0) msgget$private(0x0, 0x20) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x1, 0x10, r1, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) r3 = socket(0x18, 0x1, 0x0) setsockopt(r3, 0x1000000029, 0x23, &(0x7f0000000000), 0x0) setsockopt(r2, 0x0, 0x5, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 108.819967ms ago: executing program 3 (id=4): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f00000000c0), &(0x7f0000000240)=0x5d) r1 = syz_open_pts() ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000000)={0x7, 0x0, 0xfffffffe, 0x5, "ff14e7130b1e586ca6294000", 0x40, 0x5}) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000380)="079facfaaed69aea4dc561c3b736feac0a2a76087be8b904ddc6f90b66e0f69b6dfba683b348224cf0ccc2a39b0f79389a2bd9b211424a22ca014b9231e253e257706c75b3f320166475c72455021edf575fab8b5d65b8d261c87c3ccc4e784ea7462f3723edabb8e26d27acb1797e2ef4db27270a", 0xffffff01}], 0x1) ioctl$TIOCNXCL(r1, 0x2000740e) syz_open_pts() ioctl$TIOCSTAT(r1, 0x20007465, 0x0) sysctl$kern(&(0x7f00000000c0)={0x1, 0x50}, 0x3, &(0x7f0000000100)="00e0ae5b7e0d0000bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x50, 0x0, 0x37) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$kern(&(0x7f00000000c0)={0x1, 0x5b}, 0x2, &(0x7f00000004c0)="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", &(0x7f0000000080)=0x14b, 0x0, 0x0) 108.430642ms ago: executing program 7 (id=18): r0 = socket(0x2, 0x2, 0x0) r1 = socket(0x2, 0x2, 0x0) r2 = dup(r1) setsockopt$inet_opts(r2, 0x0, 0x16, &(0x7f0000000000)="04000000", 0x4) r3 = dup(r2) r4 = dup2(r3, r0) sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b100050160", 0x5, 0x0, 0x0, 0x0) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) connect$unix(r0, &(0x7f0000000000), 0x10) sendto(r4, 0x0, 0x0, 0x0, 0x0, 0x0) sysctl$kern(&(0x7f0000000040)={0xa}, 0x2, &(0x7f0000000080), 0x0, 0x0, 0x0) 108.212148ms ago: executing program 7 (id=19): r0 = shmget$private(0x0, 0x1000, 0x95a999646a72d594, &(0x7f0000001000/0x1000)=nil) shmctl$IPC_RMID(r0, 0x0) shmat(r0, &(0x7f0000001000/0x3000)=nil, 0x2000) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffff9c, 0x29, 0x66, &(0x7f0000000000)={0x7de, 0x1, 0x39, 0x39fd, 0x2d8}, 0xc) mknodat(0xffffffffffffff9c, 0x0, 0xc000, 0x0) 107.684924ms ago: executing program 1 (id=20): r0 = socket(0x11, 0x3, 0x0) sendto$unix(r0, &(0x7f0000001540)="b100050400000000000008000301000000000000cea1fea7fef96ecfc73fd3357ae27caa0416fa4f376336acf00b7804be781e4991f7c8df5f88ed00f4c8b2ca3ebb4257699a1f13a8af63ff37282902e4fd007f720fd3873babfbb770a2f5a872c881ff7cc53c8943310b404f36a01f90006ee01bc43eaea8c5090000000000a800001f020208a371a316a6000000000000000001000000000000001000"/170, 0xaa, 0x40a, 0x0, 0x0) 107.034382ms ago: executing program 0 (id=21): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) write(r0, &(0x7f0000000000)="ed", 0x1) r1 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r1, 0xc0106924, &(0x7f00000001c0)) recvmmsg(r1, &(0x7f0000000880)={&(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000080)=""/161, 0xa1}, {&(0x7f0000000140)}, {&(0x7f0000000300)=""/192, 0xc0}, {&(0x7f0000000180)=""/121, 0x79}, {&(0x7f00000003c0)=""/150, 0x96}, {&(0x7f0000000240)=""/12, 0xc}, {&(0x7f0000000480)=""/110, 0x6e}, {&(0x7f0000000500)=""/65, 0x41}, {&(0x7f00000018c0)=""/4096, 0x1000}], 0x9, 0x0}, 0xf7fffffd}, 0x10, 0xc0, 0x0) writev(r0, &(0x7f0000000740)=[{&(0x7f0000000200)="d72e3ef4", 0x4}], 0x1) close(r0) 8.962018ms ago: executing program 1 (id=22): mprotect(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) getgid() shmctl$IPC_SET(r0, 0x1, 0x0) shmat(r0, &(0x7f0000001000/0x3000)=nil, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) sysctl$kern(&(0x7f00000000c0)={0x1, 0x5}, 0x2, &(0x7f0000000540), 0x0, 0x0, 0x0) sysctl$kern(&(0x7f00000000c0)={0x1, 0x50}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xfe10, 0x0, 0x37) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) r1 = open(&(0x7f0000000240)='./file0\x00', 0x615, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r1, 0x0) ftruncate(r1, 0x8531) sysctl$kern(&(0x7f0000000000)={0x1, 0x1b}, 0x2, &(0x7f0000001940), &(0x7f0000000040)=0xffffffffffffff2a, 0x0, 0xffffffffffffffb7) msync(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r2 = socket(0x18, 0x1, 0x0) setsockopt(r2, 0x1000000029, 0xc, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x62}) r3 = syz_open_pts() close(r1) syz_open_pts() ioctl$FIOASYNC(r3, 0x80047466, &(0x7f0000000200)=0x5) ioctl$TIOCCBRK(r3, 0x2000747a) setsockopt(r2, 0x9c, 0xc, &(0x7f0000000280)="eb92964800"/20, 0x14) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') unveil(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='r\x00') unveil(&(0x7f0000000080)='./file0/file0/..\x00', &(0x7f00000004c0)='x\x00') writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000080)="76e5eac907f9ccf7a251ceddcec7d6aa45cffe2c63a56077123a276d3ba4e9d17eb3eb5db12a3783a8e0620d357de1fe04fa9465b5bd1286e9624dec06a00c222f", 0x41}], 0x1) r4 = socket(0x18, 0x1, 0x0) setsockopt(r4, 0x1000000000029, 0xa, &(0x7f0000000340), 0x0) 7.866491ms ago: executing program 5 (id=6): sysctl$kern(&(0x7f0000000000)={0x1, 0x47}, 0x3, &(0x7f0000000080)="b9d55a65edf95074454cbeef747750212b261340975c61c98fc44606f6c84c8106c596189f2824da6ce26ef22601faa932f8506c338734f736b71fe63c3db1e9d4ed2ce08ee7f16195ac49fb6ee8486b47aae9157492458d108d0fcface1392fdf88be327280a9ccb04d81e8c6efb7ee", &(0x7f0000000100)=0x70, 0x0, 0x0) r0 = socket(0x1, 0x8000, 0x4) setsockopt(r0, 0x1000000029, 0x39, &(0x7f0000000000), 0x4) chflags(&(0x7f0000000000)='./file0\x00', 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r1 = open$dir(&(0x7f0000000140)='./file0\x00', 0x8002, 0x0) getdents(r1, 0x0, 0x0) r2 = socket(0x18, 0x1, 0x0) getsockopt(r2, 0x29, 0x9, 0x0, 0x0) open$dir(&(0x7f0000000040)='./file1\x00', 0x0, 0x18) r3 = semget(0x2, 0x0, 0x53) r4 = geteuid() getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0xc) r6 = getuid() getsockopt$sock_cred(r2, 0xffff, 0x1022, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000240)=0xc) semctl$IPC_SET(r3, 0x0, 0x1, &(0x7f0000000280)={{0x1000, r4, r5, r6, r7, 0x10, 0x7}, 0x4, 0x6, 0x4}) symlink(&(0x7f0000000480)='./file1\x00', &(0x7f00000004c0)='./file0\x00') 2.140884ms ago: executing program 7 (id=23): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) msgrcv(0x0, 0x0, 0x0, 0x3, 0x1c00) rename(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = shmget$private(0x0, 0x4000, 0x400, &(0x7f0000002000/0x4000)=nil) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000080)={{0x1000400, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x32}, 0x0, 0x8}) shmat(r1, &(0x7f0000ffa000/0x4000)=nil, 0x3000) shmat(r1, &(0x7f0000ffd000/0x3000)=nil, 0x1000) ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x0, 0xffffffff, {[0xfffefbfffffffffa, 0x1, 0x2, 0x1, 0x0, 0x0, 0xdf5a, 0x0, 0x0, 0x2eff, 0x5, 0x8, 0xffffffffffffffff, 0x0, 0x8010000, 0xa8, 0x2, 0xce7], [0xfffffffffffffffe, 0x1, 0xfffffffffffffffb, 0x8000ffffffff, 0x100, 0x7b99, 0x1fe, 0xb], [0x100000001, 0x2, 0x40000000, 0x4, 0xffffffffffffffff, 0x11003, 0xfffffffffffffffe], [0x100, 0x20000000000, 0x401, 0x100000000, 0xffffffffffefffff, 0x6], [{0x8, 0x5, 0x0, 0xb}, {0xfffc, 0x7, 0x5, 0x2}, {0x10, 0x1, 0x3daa, 0x814}, {0x3, 0x5, 0x7, 0x80000001}, {0x10, 0x2, 0x0, 0x808}, {0x400b, 0x2003, 0x40000, 0x4}, {0x1, 0x20000, 0x4, 0x8}, {0x0, 0x965, 0x3, 0x4}], {0x2000, 0x8, 0x10000}, {0x0, 0x0, 0x3, 0x2}}}) r2 = kqueue() kevent(r2, &(0x7f0000000040), 0x30, 0x0, 0x57d, 0x0) sendmmsg(r0, &(0x7f0000001440)={0x0, 0x1}, 0x10, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000340), 0x80, 0x0) symlink(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00') clock_gettime(0x2, &(0x7f0000000000)) 1.67216ms ago: executing program 0 (id=24): open$dir(&(0x7f0000000b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="7461743bad48c9a7a756ffc74e228a9a00", 0x11}], 0x12, 0x0, 0xffffffffffffffd3, 0x4}, 0x400) sendmmsg(r0, &(0x7f0000000200)={0x0, 0x2}, 0x10, 0x40a) recvmsg(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000100)=""/178, 0xb2}], 0x1, 0x0}, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000001c0)={0x10, 0xb, [{&(0x7f00005b3000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x10}, {&(0x7f00003c6000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x3}, {&(0x7f0000301000/0x1000)=nil, &(0x7f00003f3000/0x3000)=nil, 0x6}, {&(0x7f0000456000/0x1000)=nil, &(0x7f000065b000/0x4000)=nil}, {&(0x7f00003a0000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x3}, {&(0x7f00002b8000/0x4000)=nil, &(0x7f00003c8000/0x1000)=nil, 0x2dc}, {&(0x7f00002bb000/0x1000)=nil, &(0x7f00000ce000/0x3000)=nil, 0x2000000009}, {&(0x7f00001f4000/0x2000)=nil, &(0x7f000019e000/0x4000)=nil, 0xffffffff}, {&(0x7f00000cc000/0x2000)=nil, &(0x7f0000375000/0x1000)=nil, 0x4}, {&(0x7f0000164000/0x6000)=nil, &(0x7f0000591000/0x2000)=nil, 0x3ff}, {&(0x7f00001a0000/0x2000)=nil, &(0x7f00005b1000/0x4000)=nil, 0x2}, {&(0x7f0000fff000/0x1000)=nil, &(0x7f0000168000/0x1000)=nil, 0x4}, {&(0x7f00000c8000/0x4000)=nil, &(0x7f00001f4000/0x3000)=nil, 0xffffffffffffffff}, {&(0x7f00003f2000/0x3000)=nil, &(0x7f00005b1000/0x1000)=nil, 0x8}, {&(0x7f0000199000/0xb000)=nil, &(0x7f0000ffb000/0x4000)=nil}, {&(0x7f00000f7000/0x1000)=nil, &(0x7f00000cc000/0x3000)=nil, 0xfffffffffffffff8}], './file0\x00', 0x84}) setrlimit(0x8, &(0x7f0000000980)={0xb, 0x54}) close(0xffffffffffffffff) syz_open_pts() writev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) writev(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000040)="11", 0x1}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) read(0xffffffffffffffff, &(0x7f0000000200)=""/239, 0xef) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x10, 0xffffffffffffffff, 0xac72800000000000) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="89000000ffff000001"], 0x9, 0x4}, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) readv(r4, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/50, 0xfd9f}], 0x2f) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) writev(r5, &(0x7f0000000200)=[{0x0}], 0x1) setsockopt$sock_int(r3, 0xffff, 0x10, &(0x7f0000000140)=0x4, 0x4) sendmsg(r2, &(0x7f0000000380)={0x0, 0x32c, 0x0, 0x0, &(0x7f0000000000), 0x90}, 0x0) r6 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) open$dir(&(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x0) symlinkat(&(0x7f0000000dc0)='./file0\x00', r6, &(0x7f0000000ec0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mkdirat(r6, &(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rmdir(&(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) 580.468µs ago: executing program 5 (id=25): writev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000000)="d33fcbc2997ea669d5a30c138679165f05015a03d8e0de2dd2930d0de2f87883b5ea180519423a7575d19aaf43d172529ce843830328727f2555e7d6e05a328e3e2479b4b0fc5ab2fd86b8abbf64d01f0bea568fd9be272a48fab5490ce8091b765a5ba1", 0x64}, {&(0x7f0000000100)="8f7d0ab43dd31a343a85ad29b31b682f90511020b4e44cd5fdb1b7fd137d8ca310edd36150d6d97a822c81cb3ef4ef1e0f9f7ceed4978233a3818490c6e1d8be61d953185cb3ce62fbb34de8c2f8bd82c9a728b9d45866a0e60261af7195b7516fdb589247", 0xffffffffffffff5f}, {&(0x7f0000000180)="0dc07ac46f980c73c9ac4bfa037ef7b08038f5e3c7d77de1618a071043f574bea1114f3d933a1437e830103029fa266d54bd74627abffff06268d66132e8ce4cceac06155eb8ffee8f9f8b8c19da3d47f78cfbcb2b66e100b878ef1c36eaa3904291436cbcf07141d127b2fe2b32d8662b14c94cd4a07fdedcd90302", 0x7c}, {&(0x7f0000000480)="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", 0xe1}], 0x4) setrlimit(0x8, &(0x7f0000000980)={0xb, 0x54}) r0 = syz_open_pts() close(r0) syz_open_pts() ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f00000000c0)={0x9, 0x9, 0xfffdff80, 0x160350d, "04f0ee091a00041300000fe0ff2285080800", 0x1000004, 0x42}) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) 0s ago: executing program 0 (id=26): r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r0) setsockopt(r0, 0x8c5, 0x6, &(0x7f0000000040)="72d3dde9f0cdea935f7e3dd1b4392ef52ef7a576444974c069fb0bce20ac069b296766adb7970e46ab19a369de9ec9f2c902eca16332fa4b30238b80c81df1893c0de20c417f579523b3dd3bc37b11b641333b466e0fd67f2a67c103a61a2e1a9af140d685e1c3765c860d78c56f28e4e86334", 0x73) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000100)={0x6, &(0x7f00000000c0)=[{0x5, 0x8, 0x4, 0x7ccd}, {0x5, 0x81, 0x58, 0x8000}, {0x0, 0x8, 0x11, 0x6}, {0x1, 0x4, 0x10, 0x10000}, {0x9, 0x54, 0x8, 0x4}, {0x101, 0x8, 0x40, 0x9}]}) sendto$inet(r0, &(0x7f0000000140)="b681ab70bb56749731123bd6ac33a8a22ecf75de80450a8f3bdbe275f05f9b7e5a80e43468d4561cafbdf2284c3a5a28b91ff5180188b413a2d372a69b825d0a0a4f778eadee3969db39f4c9b27945008f397bff600bf632875c15fe733bc0368652738e7c8a8510ceab091bf61869f1baa46e8d4ff0d034acfd01317024227e84dd14a4dac4f6ea3dbc463493aaf0c9ec0909ee6ebda3805988edeca931e493e7618e36f07c319a66eb3ed4b3f9b66235758381c9926b3bc64352ac0e13415eb73a7c486d42e1be7d828487f7f681d6611cff1078b0957dd1fbf0f678ae2d2049c808f92e81082e3b0ce8388ab9dd610092fd09f43761", 0xf7, 0xc, &(0x7f0000000240)={0x2, 0x1}, 0xc) bind$unix(r0, &(0x7f0000000280)=@file={0x1, './file0\x00'}, 0xa) r1 = accept$inet6(r0, &(0x7f00000002c0), &(0x7f0000000300)=0xc) sysctl$kern(&(0x7f0000000340)={0x1, 0x12}, 0x2, &(0x7f0000000380)="92bd55f5d0f48907c4e68f1d4b33102480a7b58f673a91b5982dd37e3a65bc0d0033ed69d23cd758f956acfcd4620fb8ac21f784ed522aaf7bc6a06a9345ef7133e8df235547a85df27991eac08069bd7330fb55171fc985f224381266ab0ab7b6577dec430c48dc89c88b5d23a7066edcb1984d70b69264b63570920afb932b7c9fb0c1d8e083105c0f1f566272447823b8770875c1bdfe1abab9094fa49e1bbad241c0a706c9099420b92426626131d176eaecf3c61df03591699c50218476657dae", &(0x7f0000000480)=0xc3, &(0x7f00000004c0)="6514529a96f65852f0b1b1c6c8764f625586c59e52e98ba4c1aeff57f5c8f8dc4326b4cdcb4d522be0349f89074bf4343f0c8ed74f94ffc94a4da465554d6470e96fa10ca0b711ebfc6865", 0x4b) fcntl$getown(r1, 0x5) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000540), 0x10000, 0x0) accept$inet(r2, &(0x7f0000000580), &(0x7f00000005c0)=0xc) r3 = fcntl$dupfd(r0, 0xa, r0) sysctl$kern(&(0x7f0000000600)={0x0}, 0x0, &(0x7f0000000640)="09bfc3ff5d581df56fe071c5357cc324bb05cb3708f970d412cef5e83d1390e0b948406c03df1ade57077fac926bcafa515feaa8cb3a93d3dbd4b154f5a8458dd1413a690ba9b7c4aa0d0a5b9e21ae270cd6", &(0x7f00000006c0)=0x52, &(0x7f0000000700)="929571caf1efcffd3486231191b8d6680c755e78ddf38febef7f3fc2d876ed2b12a59738cb3c2627bbb4a632285ac7e1fe7e72a53f90411ae5d737f34e5d7c4aa739fb242d49cf214b17b2064a025c0be9fa14d66b54362ceac59a487506f085856b074895bf6dc1f31c0b8bd2eb2ac1e3f0f34fa4777ae0cb75614544dd1e1790ebd4a9b13f6c0597a130a477feccd78e8e0010fbac5207d8aa2bfa864c3f8d72d825b96f96f157eecfc02b2daca53828876d4ed17a9d1b51fa6653ada99e0aa63fa3a7423558f2d1b8f4af8fd2fcef", 0xd0) connect$unix(r2, &(0x7f0000000800)=@file={0x1, './file0\x00'}, 0xa) r4 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000840), 0x100, 0x0) ioctl$WSKBDIO_SETDEFAULTKEYREPEAT(r4, 0x800c5709, &(0x7f0000000880)={0xf43, 0xffffffff, 0x4}) ioctl$WSKBDIO_SETBELL(r2, 0x80105703, &(0x7f00000008c0)={0x8, 0x9, 0x7, 0x1000}) clock_gettime(0x2, &(0x7f0000000900)) close(r3) clock_gettime(0x4, &(0x7f0000000940)) sendto$unix(r0, &(0x7f0000000980)="fc5291896e396a0ce1caa7af17775eb98b", 0x11, 0x2, &(0x7f00000009c0)=@abs={0x0, 0x0, 0x1}, 0x8) clock_gettime(0x0, &(0x7f0000000a00)) recvfrom$inet6(r3, &(0x7f0000000a40)=""/62, 0x3e, 0x41, &(0x7f0000000a80)={0x18, 0x0, 0x1}, 0xc) kqueue() getsockopt$sock_linger(r1, 0xffff, 0x80, &(0x7f0000000ac0), &(0x7f0000000b00)=0x8) ioctl$TIOCSFLAGS(r3, 0x8004745c, &(0x7f0000000b40)=0xffffffff) getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000000bc0)={0x0, 0x0}, &(0x7f0000000c00)=0xc) getsockopt$SO_PEERCRED(r1, 0xffff, 0x1022, &(0x7f0000000c40)={0x0, 0x0, 0x0}, 0xc) chown(&(0x7f0000000b80)='./file0\x00', r5, r6) bind$unix(0xffffffffffffffff, &(0x7f0000000d00)=@abs={0x1, 0x0, 0x0}, 0x8) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.118' (ED25519) to the list of known hosts. panic: kernel diagnostic assertion "(pg->pg_flags & (PQ_INACTIVE|PQ_ACTIVE)) == 0" failed: file "/syzkaller/managers/setuid/kernel/sys/uvm/uvm_page.c", line 1268 Stopped at db_enter+0x25: addq $0x8,%rsp TID PID UID PRFLAGS PFLAGS CPU COMMAND 54958 91296 0 0x2 0 0 arp db_enter() at db_enter+0x25 panic(ffffffff833b03e7) at panic+0x1e5 __assert(ffffffff833f1046,ffffffff8333fc7a,4f4,ffffffff8341c20c) at __assert+0x29 uvm_pagedeactivate(fffffd80080e1ee0) at uvm_pagedeactivate+0x2d8 uvn_flush(fffffd8075c33d78,0,0,14) at uvn_flush+0x43b uvn_detach(fffffd8075c33d78) at uvn_detach+0x19e uvm_unmap_detach(ffff8000377ea100,0) at uvm_unmap_detach+0x15e uvm_map_teardown(fffffd800f7b5030) at uvm_map_teardown+0x360 exit1(ffff8000fffe6fb0,0,0,1) at exit1+0x6fc sys_exit(ffff8000fffe6fb0,ffff8000377ea2d0,ffff8000377ea220) at sys_exit+0x1a syscall(ffff8000377ea2d0) at syscall+0xb17 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x79362511d110, count: 3 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{1}> ddb{1}> set $lines = 0 ddb{1}> set $maxwidth = 0 ddb{1}> show panic *cpu1: kernel diagnostic assertion "(pg->pg_flags & (PQ_INACTIVE|PQ_ACTIVE)) == 0" failed: file "/syzkaller/managers/setuid/kernel/sys/uvm/uvm_page.c", line 1268 ddb{1}> trace db_enter() at db_enter+0x25 panic(ffffffff833b03e7) at panic+0x1e5 __assert(ffffffff833f1046,ffffffff8333fc7a,4f4,ffffffff8341c20c) at __assert+0x29 uvm_pagedeactivate(fffffd80080e1ee0) at uvm_pagedeactivate+0x2d8 uvn_flush(fffffd8075c33d78,0,0,14) at uvn_flush+0x43b uvn_detach(fffffd8075c33d78) at uvn_detach+0x19e uvm_unmap_detach(ffff8000377ea100,0) at uvm_unmap_detach+0x15e uvm_map_teardown(fffffd800f7b5030) at uvm_map_teardown+0x360 exit1(ffff8000fffe6fb0,0,0,1) at exit1+0x6fc sys_exit(ffff8000fffe6fb0,ffff8000377ea2d0,ffff8000377ea220) at sys_exit+0x1a syscall(ffff8000377ea2d0) at syscall+0xb17 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x79362511d110, count: -12 ddb{1}> show registers rdi 0 rsi 0x1 rbp 0xffff8000377e9e00 rbx 0xffff8000299eee07 rdx 0 rcx 0xffff8000fffe6fb0 rax 0xffff8000299edff0 r8 0x101010101010101 r9 0x8080808080808080 r10 0x1942e83476641407 r11 0x9f6144c0a5bcb523 r12 0xffff8000299eec08 r13 0 r14 0 r15 0x1 rip 0xffffffff81e1ce35 db_enter+0x25 cs 0x8 rflags 0x246 rsp 0xffff8000377e9df0 ss 0 db_enter+0x25: addq $0x8,%rsp ddb{1}> show proc PROC (syz-executor) tid=368666 pid=99999 tcnt=0 stat=onproc flags process=1018 proc=2000 runpri=32, usrpri=86, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0xffff8000fffe6fb0 scnt=-1 ecnt=1 forw=0xffffffffffffffff, list=0xffff80003c432d20,0xffff8000fffe6560 process=0xffff80003c41e1d0 user=0xffff8000377e5000, vmspace=0xfffffd800f7b5030 estcpu=36, cpticks=5, pctcpu=0.0, user=0, sys=2, intr=0 ddb{1}> ps PID TID PPID UID S FLAGS WAIT COMMAND 91296 54958 87541 0 7 0x2 arp 49612 247921 93920 32767 2 0x10 syz-executor 49612 317468 93920 32767 3 0x4000090 fsleep syz-executor 21034 139374 94502 32767 2 0x10 syz-executor 21034 255379 94502 32767 3 0x4000090 fsleep syz-executor 69816 503450 2756 32767 2 0x10 syz-executor 69816 255871 2756 32767 3 0x4000090 ttyretype syz-executor 57698 473492 13600 32767 2 0x10 syz-executor 57698 53594 13600 32767 3 0x4000090 fsleep syz-executor 64596 108237 91463 32767 2 0x10 syz-executor 64596 432671 91463 32767 3 0x4000090 fsleep syz-executor 71834 348167 23571 32767 3 0x90 nanoslp syz-executor 71834 287662 23571 32767 3 0x4000090 netacc syz-executor 71834 467882 23571 32767 3 0x4000090 fsleep syz-executor 87541 205419 12283 0 3 0x10008a sigsusp sh 13600 178974 66318 32767 3 0x90 nanoslp syz-executor 12283 88366 59366 0 3 0x80 wait syz-executor 23571 67751 79803 32767 3 0x90 nanoslp syz-executor 91463 445567 87582 32767 3 0x90 nanoslp syz-executor 2756 258246 13945 32767 3 0x90 nanoslp syz-executor 94502 382766 52962 32767 3 0x90 nanoslp syz-executor 93920 499104 70178 32767 3 0x90 nanoslp syz-executor 84065 368505 4084 32767 3 0x90 nanoslp syz-executor 66318 37987 69452 0 3 0x82 wait syz-executor 59366 474609 69452 0 3 0x82 wait syz-executor 13945 158177 69452 0 3 0x82 wait syz-executor 79803 453629 69452 0 3 0x82 wait syz-executor 70178 456978 69452 0 3 0x82 wait syz-executor 4084 411666 69452 0 3 0x82 wait syz-executor 87582 487688 69452 0 3 0x82 wait syz-executor 52962 174125 69452 0 3 0x82 wait syz-executor 69452 17767 57284 0 3 0x82 kqread syz-executor 57284 310568 20715 0 3 0x10008a sigsusp ksh 20715 213855 8627 0 3 0x98 kqread sshd-session 8627 423211 97544 0 3 0x92 kqread sshd-session 97991 345524 1 0 3 0x100083 ttyin getty 97544 77786 1 0 3 0x88 kqread sshd 27615 223010 87791 73 3 0x1100090 kqread syslogd 87791 345742 1 0 3 0x100082 sbwait syslogd 8996 488593 1 0 3 0x100080 kqread resolvd 51612 407915 89086 77 3 0x100092 kqread dhcpleased 31722 204128 89086 77 3 0x100092 kqread dhcpleased 89086 106735 1 0 3 0x80 kqread dhcpleased 58811 28834 0 0 3 0x14200 bored smr 38926 12281 0 0 2 0x14200 zerothread 6202 163605 0 0 3 0x14200 aiodoned aiodoned 56303 90114 0 0 3 0x14200 syncer update 48012 35523 0 0 3 0x14200 cleaner cleaner 80090 100933 0 0 3 0x14200 reaper reaper 8683 49014 0 0 3 0x14200 pgdaemon pagedaemon 84801 226458 0 0 3 0x14200 bored viomb 52679 278829 0 0 3 0x40014200 acpi0 acpi0 40670 293130 0 0 3 0x40014200 idle1 63327 315177 0 0 3 0x14200 bored softnet1 4009 221207 0 0 3 0x14200 bored softnet0 3252 274141 0 0 3 0x14200 bored systqmp 25022 130098 0 0 3 0x14200 bored systq 14447 105556 0 0 3 0x14200 tmoslp softclockmp 99050 111392 0 0 3 0x40014200 tmoslp softclock 83026 318643 0 0 3 0x40014200 idle0 1 444134 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb{1}> show all locks Process 91296 (arp) thread 0xffff8000fffeed10 (54958) shared rwlock vmmaplk r = 0 (0xfffffd800f7b5ca0) #0 witness_lock+0x5f1 #1 rw_do_enter_read+0x3e8 #2 uvm_map_inentry_fix+0xd2 #3 uvm_map_inentry+0xf8 #4 usertrap+0x3ef #5 recall_trap+0x8 ddb{1}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 10184 10957K 10973K 166960K 11275 0 pcb 17 12K 12K 166960K 17 0 rtable 221 6K 6K 166960K 323 0 pf 31 16K 16K 166960K 31 0 ifaddr 40 7K 7K 166960K 42 0 ifgroup 50 2K 2K 166960K 50 0 sysctl 1 1K 9K 166960K 6 0 counters 70 37K 37K 166960K 70 0 ioctlops 0 0K 2K 166960K 28 0 iov 0 0K 1K 166960K 3 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1335 84K 84K 166960K 1356 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 4 9K 9K 166960K 5 0 VM map 2 1K 1K 166960K 2 0 sem 2 0K 0K 166960K 2 0 dirhash 12 2K 2K 166960K 12 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 26 97K 125K 166960K 160 0 proc 58 99K 147K 166960K 465 0 subproc 72 4K 4K 166960K 72 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 1 0 in_multi 89 6K 6K 166960K 91 0 ether_multi 1 0K 0K 166960K 2 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 37 175K 175K 166960K 37 0 exec 0 0K 1K 166960K 346 0 fusefs mount 1 32K 32K 166960K 1 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 250 170K 186K 166960K 2996 0 UVM aobj 5 2K 2K 166960K 6 0 pinsyscall 47 94K 112K 166960K 1198 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 0K 166960K 1 0 NDP 25 1K 1K 166960K 25 0 temp 35 8666K 8730K 166960K 3800 0 kqueue 15 22K 22K 166960K 26 0 SYN cache 2 16K 16K 166960K 2 0 ddb{1}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 26 0 0 1 0 1 1 0 8 0 rtpcb 120 34 0 31 1 0 1 1 0 8 0 rtentry 176 103 0 1 5 0 5 5 0 8 0 unpcb 144 55 0 38 1 0 1 1 0 8 0 syncache 336 5 0 5 1 0 1 1 0 8 1 tcpqe 32 1 0 1 1 0 1 1 0 8 1 tcpcb 736 87 0 79 7 0 7 7 0 8 5 arp 136 17 0 0 1 0 1 1 0 8 0 inpcb 328 141 0 130 7 0 7 7 0 8 6 nd6 152 21 0 0 1 0 1 1 0 8 0 kcovpl 48 8 0 0 1 0 1 1 0 8 0 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 412 0 0 26 0 26 26 0 8 0 art_table 40 413 0 0 5 0 5 5 0 8 0 art_node 32 103 0 10 1 0 1 1 0 8 0 shmpl 112 3 0 1 1 0 1 1 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino2pl 256 1579 0 74 95 0 95 95 0 8 0 ffsino 296 1579 0 74 116 0 116 116 0 8 0 nchpl 144 1794 0 107 63 0 63 63 0 8 0 vnodes 216 1660 0 0 93 0 93 93 0 8 0 namei 1024 5142 0 5142 2 0 2 2 0 8 2 percpumem 16 50 0 0 1 0 1 1 0 8 0 kstatmem 264 24 0 0 2 0 2 2 0 8 0 scxspl 216 5882 0 5882 3 1 2 2 1 8 2 plimitpl 152 39 0 14 1 0 1 1 0 8 0 sigapl 424 442 0 387 7 0 7 7 0 8 0 knotepl 120 90 0 0 3 0 3 3 0 8 0 kqueuepl 224 24 0 13 1 0 1 1 0 8 0 pipepl 344 110 0 83 3 0 3 3 0 8 0 fdescpl 528 426 0 388 4 0 4 4 0 8 0 filepl 160 1548 0 1334 13 0 13 13 0 8 4 lockfpl 104 8 0 6 1 0 1 1 0 8 0 lockfspl 48 5 0 3 1 0 1 1 0 8 0 sessionpl 144 23 0 7 1 0 1 1 0 8 0 pgrppl 48 31 0 7 1 0 1 1 0 8 0 ucredpl 104 108 0 90 1 0 1 1 0 8 0 zombiepl 144 388 0 387 1 0 1 1 0 8 0 processpl 1232 442 0 387 5 0 5 5 0 8 0 procpl 664 482 0 420 6 0 6 6 0 8 0 sockpl 752 230 0 199 11 0 11 11 0 8 7 mcl9k 9216 1 0 0 1 0 1 1 0 8 0 mcl8k 8192 2 0 0 1 0 1 1 0 8 0 mcl4k 4096 122 0 0 16 0 16 16 0 8 0 mcl2k 2048 16 0 0 2 0 2 2 0 8 0 mtagpl 96 3 0 0 1 0 1 1 0 8 0 mbufpl 256 171 0 0 11 0 11 11 0 8 0 bufpl 280 2282 0 119 155 0 155 155 0 8 0 anonpl 32 5332 0 0 43 0 43 43 0 246 0 amapchunkpl 152 8016 0 7370 30 0 30 30 0 158 3 amappl16 200 456 0 439 3 0 3 3 0 8 2 amappl15 192 5 0 5 1 0 1 1 0 8 1 amappl14 184 2 0 2 1 0 1 1 0 8 1 amappl13 176 387 0 385 1 0 1 1 0 8 0 amappl12 168 752 0 707 3 0 3 3 0 8 0 amappl11 160 1 0 1 1 0 1 1 0 8 1 amappl10 152 69 0 59 1 0 1 1 0 8 0 amappl9 144 258 0 258 1 0 1 1 0 8 1 amappl8 136 17 0 16 1 0 1 1 0 8 0 amappl7 128 71 0 69 1 0 1 1 0 8 0 amappl6 120 252 0 240 1 0 1 1 0 8 0 amappl5 112 70 0 62 1 0 1 1 0 8 0 amappl4 104 363 0 340 1 0 1 1 0 8 0 amappl3 96 1365 0 1247 4 0 4 4 0 8 0 amappl2 88 492 0 439 2 0 2 2 0 8 0 amappl1 80 9244 0 8671 16 1 15 15 0 8 0 amappl 88 2328 0 2150 5 0 5 5 0 92 0 uvmvnodes 80 96 0 0 2 0 2 2 0 8 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 5 0 1 1 0 1 1 0 8 0 uaddrrnd 24 426 0 388 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 426 0 388 1 0 1 1 0 8 0 vmmpekpl 168 5259 0 5230 2 0 2 2 0 8 0 vmmpepl 168 34111 0 32081 100 0 100 100 0 357 5 vmsppl 488 425 0 387 7 1 6 6 0 8 0 rwobjpl 80 11901 0 10965 23 0 23 23 0 8 1 pdppl 4096 860 0 774 108 10 98 98 0 8 12 pvpl 32 13674 0 0 111 0 111 111 0 265 0 pmappl 256 425 0 387 4 1 3 3 0 8 0 extentpl 40 45 0 27 1 0 1 1 0 8 0 phpool 112 280 0 13 8 0 8 8 0 8 0 ddb{1}> machine ddbcpu 0 Stopped at x86_ipi_db+0x27: addq $0x8,%rsp x86_ipi_db(ffffffff837cfff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __mp_lock(ffffffff83a127c0) at __mp_lock+0x192 softintr_dispatch(0) at softintr_dispatch+0x125 dosoftint(0) at dosoftint+0x54 Xsoftclock() at Xsoftclock+0x27 __mp_lock(ffffffff83a127c0) at __mp_lock+0x199 syscall(ffff80003c462f50) at syscall+0xaf4 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7bc0089f05b0, count: 5 ddb{0}> trace x86_ipi_db(ffffffff837cfff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __mp_lock(ffffffff83a127c0) at __mp_lock+0x192 softintr_dispatch(0) at softintr_dispatch+0x125 dosoftint(0) at dosoftint+0x54 Xsoftclock() at Xsoftclock+0x27 __mp_lock(ffffffff83a127c0) at __mp_lock+0x199 syscall(ffff80003c462f50) at syscall+0xaf4 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7bc0089f05b0, count: -10 ddb{0}> machine ddbcpu 1 Stopped at db_enter+0x25: addq $0x8,%rsp db_enter() at db_enter+0x25 panic(ffffffff833b03e7) at panic+0x1e5 __assert(ffffffff833f1046,ffffffff8333fc7a,4f4,ffffffff8341c20c) at __assert+0x29 uvm_pagedeactivate(fffffd80080e1ee0) at uvm_pagedeactivate+0x2d8 uvn_flush(fffffd8075c33d78,0,0,14) at uvn_flush+0x43b uvn_detach(fffffd8075c33d78) at uvn_detach+0x19e uvm_unmap_detach(ffff8000377ea100,0) at uvm_unmap_detach+0x15e uvm_map_teardown(fffffd800f7b5030) at uvm_map_teardown+0x360 exit1(ffff8000fffe6fb0,0,0,1) at exit1+0x6fc sys_exit(ffff8000fffe6fb0,ffff8000377ea2d0,ffff8000377ea220) at sys_exit+0x1a syscall(ffff8000377ea2d0) at syscall+0xb17 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x79362511d110, count: 3 ddb{1}> trace db_enter() at db_enter+0x25 panic(ffffffff833b03e7) at panic+0x1e5 __assert(ffffffff833f1046,ffffffff8333fc7a,4f4,ffffffff8341c20c) at __assert+0x29 uvm_pagedeactivate(fffffd80080e1ee0) at uvm_pagedeactivate+0x2d8 uvn_flush(fffffd8075c33d78,0,0,14) at uvn_flush+0x43b uvn_detach(fffffd8075c33d78) at uvn_detach+0x19e uvm_unmap_detach(ffff8000377ea100,0) at uvm_unmap_detach+0x15e uvm_map_teardown(fffffd800f7b5030) at uvm_map_teardown+0x360 exit1(ffff8000fffe6fb0,0,0,1) at exit1+0x6fc sys_exit(ffff8000fffe6fb0,ffff8000377ea2d0,ffff8000377ea220) at sys_exit+0x1a syscall(ffff8000377ea2d0) at syscall+0xb17 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x79362511d110, count: -12