last executing test programs: 1.019630105s ago: executing program 6 (id=7): sysctl$hw(&(0x7f00000000c0)={0x6, 0x18}, 0x2, 0x0, &(0x7f0000000080), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sysctl$hw(&(0x7f00000000c0), 0x2, &(0x7f00000001c0), &(0x7f0000000080), 0x0, 0x0) sysctl$net_inet_ip(&(0x7f0000000080)={0x4, 0x2, 0x0, 0x6}, 0x4, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff7e6209066dbd86dd60db834400081100fe0000000000000000000000000000bbff0200000000000000000000000000014e204e20000800"]) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@local, @broadcast, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x1, 0x0, @broadcast, @empty, {[@lsrr={0x83, 0x3}]}}, @icmp=@mask_request}}}}) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff"]) 1.003505818s ago: executing program 3 (id=4): open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x186) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x5a) faccessat(r0, &(0x7f0000000140)='./file0\x00', 0x80, 0x3) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) select(0xf4240, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x7ffe}) openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) socketpair(0x10, 0x4, 0x2, &(0x7f0000000180)) fcntl$lock(r2, 0x8, &(0x7f0000000000)={0x1, 0x1, 0x0, 0x300000006}) fcntl$lock(r1, 0x9, &(0x7f0000000040)={0x2, 0x1, 0x7, 0x100000003}) r3 = socket(0x18, 0x2, 0x0) setsockopt(r3, 0x1000000000029, 0xa, &(0x7f0000003680)='\x00\x00\x00\x00', 0x4) setsockopt(r3, 0x2a, 0x1000000d, &(0x7f00000001c0)="b7139945115e841e5c5add9781008000001989c2e4eedb18c31483aabb3bd3a7e49721f69d0763e67c8dde18b1bec67dc3658e9d3c17a9e5c1dd736f8a0dd6a606a75200000000aac16b0858f299f6429018628cb2839daad94c3940092e8be69fb3433ee3c97e8979907fd617d996a4b03a8a9b9ffbfd778dcc0caa594534832be0200f214c29e4f7ea5630c25aa9965fdae3b247915f5861663097a4b4df9d515b201c001773296bf2", 0x4c) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x6f8, 0x0) fcntl$lock(r1, 0x9, &(0x7f0000000000)={0x2, 0x2, 0xffffffff00000000, 0x2fffffffc}) 916.375837ms ago: executing program 6 (id=9): madvise(&(0x7f0000000000/0x4000)=nil, 0x0, 0x0) r0 = socket(0x1, 0x4002, 0x1) sendmsg(r0, &(0x7f00000021c0)={&(0x7f0000000a40)=@in6={0x18, 0x3, 0x0, 0x6a4eec00}, 0xc, 0x0, 0x0, &(0x7f0000001e00)=[{0x10, 0x1, 0xd0b}], 0x10}, 0x406) mquery(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x1, 0x0, r0, 0x2) 913.900024ms ago: executing program 6 (id=11): mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x49b, 0x0) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@in, 0xc, &(0x7f0000000140)=[{&(0x7f0000000080)=""/163, 0xa3}], 0x1, &(0x7f0000000180)=""/150, 0x96}, 0x1800) sendmsg(r0, &(0x7f0000000ac0)={&(0x7f0000000280)=@in6={0x18, 0x1, 0x2, 0x3}, 0xc, &(0x7f00000006c0)=[{&(0x7f00000002c0)="29e21c875327ba1091b7eb6f43e98a0ffdb5d9664e81b9c763803c46b34b5efe82020ff9a8594fb55e4cfb0bc61d3a3b92f03d5718f8af3f443f13ea24b3cba6f5631d29ff9a030f31ff1f1ad09d92582e6f7c346c55e3d8df436fd2806a4754087509f34f2e9b2881037481a27f6132133a8aa6b1760e1adbc50d90e3597c8210730825a5b322585de1e1aece70a1473ba03e5fb0441533a9b1e3e9d2c94c4003c4925a5e56c904e06e0bfd8c58cf46e6a9286f036a70341b24755071f62612a78fde", 0xc3}, {&(0x7f00000003c0)="f54c", 0x2}, {&(0x7f0000000400)="7f073e0b72142e10270f4ce80539b413a90d18240f0fbfe3f44d604c94", 0x1d}, {&(0x7f0000000440)="10c5fbcda9c0677a468ec618f84ddb466b2946bb9b5cd98833ac75de15096756c617678d43a230369d22c18cd9fb7d429f991f3cf5280102000a60906a5399bf61295ef3e96225db1ef45bad79fd1623e5d04c2c57f6c66469c0f16e2d1b821a2c7d8edd5149d50ec107fb714d60a649b94aa039603cc6", 0x77}, {&(0x7f00000004c0)="ed1e32f645fe7f638f867bf5cd2067eb053b92d4399dd531c448e705a9c5a4355a6ac0147f1c46283cb2648c1685258d93a9f56331586ca051b924cf21c8f64b6094ffc5606b3a2e124706c3de8ad036c816b2529ea6e0731739710f5281cb769f6faf7c29431af4780dcc7c9167d239a0ee4bb69ae31545b49ef2828fa7c3", 0x7f}, {&(0x7f0000000540)="f494fd76dbca56267ebac3227738ece1f03510162df73fe9c801f3f393bf9eec2c0abb715071e873a45f0bcd2fd6583e8fb4c45cf479fe460f6af07d545fdd89215b164e0f76d243edf7076521d3ad6e99019f3e0c9d6aa955bbf46aadee2929e9d3465bd82dab0d6ced80ce0861e5bdc9581bda930eaf520634655c61e9c10c02044b168ca2d4af3716152dcb1338b481b2338bb2cac18d087d05c7c9c03aba99dfcf4464f26b00dad84300de9ce59aaf00286a40faf4e2a7c8aa4084bf91a3daf5824c290a33aae8944c56354c2f3873433533eba475664f7bccd2dafed2f197b5c720485fd5494dab9a", 0xeb}, {&(0x7f0000000640)="85b94a758aba267471fb1d3f85b70d865bf94c2d9749b286e7fcd993c1ee5707983a95a577e648a5169629434c1e81cd02f1c25e410da385c786d0712963f7fd2fd2", 0x42}], 0x7, &(0x7f0000000740)=[{0x48, 0x1, 0x7, "cca4f90dd243633285705b3d7b188ca147e2c2d66ec05c279ae153acdbfbb282204195cb78af03076a1469bc353af87406"}, {0x80, 0xffff, 0x6, "4576b37a7e3ffbc631afe1f1fa9cf3f4376a037f22759b088046ebafacdfc9d8381816372ca4a3081a7295b511beabef2e5923bb246eb4b8b002b414b01fc2f7a13cacc1cf0a12b5311b54e8cfd7452c7dd66b478030de03813e3c96c94493e6af10ded5236a612fb8"}, {0xf0, 0x1, 0x81, "3964c5d0539c510da7bd4ff6703e2f8dac46ceca91d1e36326d58833c5aa44a02f505c7d8604ea033f0cccfb5bb739b89c98fff511b2145bed1c5908cd1c554ae3b44361052181babf389622f3f5d9976ddf4f30949a015b536477ac9b108ae620175a93f1e78918d177f2eae53e9c938d3c76bf4c4a8ab24d189c16cf52349e631077a5e2a5a743f132155cb0c9f99660332c32356a236d918ca67513a58ad3bccfaf8a8da35bef41ab5ee5b4bf635cac97f61ece566182f0ccc1df9e3ae9e49a3da4a7587e3220ba1466e3980711e54e5787fe0bdbe2c0be8bb0776f440d"}, {0x78, 0x0, 0x2, "9821de7a92da3854098c33e34f97cbdf6b797ba9fcdcdcf10ed8eb146244f47f5708336e61e565f5f79ad3439415b78fbc0e829592f64edb14275b46f635d2cbd746ce9d32744969d6430a46dfc9af0f1dae28a01951910469f00fdc3429fc578ac13c"}, {0x10, 0xffff, 0x9}, {0xc8, 0xffff, 0xa0e9, "54daebbb0e725670a4fd63a896e6df6d45f2dca36e7114aa0ab4d93c4534cd22e2eea695efa049775ce93551203690256fb9b3852b6ecac1a43fbfa8c729696884ab3f18b0bb68acc0e4c759d75678b6dc81cef0d6e0609de9d9fe4060ab3f6e6d65de2a7dfb6343799cdb51bc092630091d575c869c3423d19c1e907b1807c51ca1b090f9ca0728d1262be9c24da1520619b2fda9ff8b1515e5965a5bcaa494b32a3a4778be3551b4c213140896b2e00686f7fa053d03f7"}, {0x58, 0xffff, 0x3, "492968ae7f0524d13eb71de626dd8d614b1da1a21d724c749ebbca9ab5468b851b607853b095d7b1f727b46eca20c81ee9bf77827b1e5a345a9787548b014bbda8d25c291452"}], 0x360}, 0x4) ioctl$TIOCSETD(r0, 0x8004741b, &(0x7f0000000b00)=0x80000000) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) unlinkat(r1, &(0x7f0000000b40)='./file0\x00', 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x810, r0, 0x10001) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000b80), 0x80, 0x0) ioctl$BIOCGFILDROP(r0, 0x40044278, &(0x7f0000000bc0)) connect$unix(r1, &(0x7f0000000c00)=@abs={0x1, 0x0, 0x2}, 0x8) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000c40), 0x20002, 0x0) r4 = open$dir(&(0x7f0000000c80)='./file0\x00', 0x100, 0x40) fchmod(r4, 0x80) r5 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000cc0), 0x8000, 0x0) ioctl$BIOCSRSIG(r5, 0x80044272, &(0x7f0000000d00)=0x3) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4) ioctl$TIOCSETVERAUTH(r3, 0x8004741c, &(0x7f0000000d40)=0x40) r6 = openat$tty(0xffffffffffffff9c, &(0x7f0000000d80), 0x10, 0x0) r7 = open$dir(&(0x7f0000000dc0)='./file0\x00', 0x2, 0x5f) poll(&(0x7f0000000e00)=[{r2, 0x10}, {r6, 0x80}, {r7, 0x8d}, {r1, 0x4}, {r2, 0x1}, {r4, 0x20}, {r5, 0x1}, {r1, 0x4}], 0x8, 0x7fff) connect$unix(r2, &(0x7f0000000e40)=@abs={0x7ee7598c44aa8c1e, 0x0, 0x0}, 0x8) ioctl$WSDISPLAYIO_SBURNER(r1, 0x800c5751, &(0x7f0000000e80)={0x80000001, 0x5}) socket(0x2, 0x1, 0x7) close(r4) connect$unix(r4, &(0x7f0000000ec0)=@abs={0x1, 0x0, 0x2}, 0x8) ioctl$DIOCMAP(r1, 0xc0106477, &(0x7f0000000f40)={&(0x7f0000000f00)='./file0\x00', r4}) sendto$inet(r0, &(0x7f0000000f80), 0x0, 0x0, &(0x7f0000000fc0)={0x2, 0x0}, 0xc) unveil(&(0x7f0000001000)='./file0\x00', &(0x7f0000001040)='W\x00') semctl$SETALL(0x0, 0x0, 0x9, &(0x7f0000001080)=[0x5]) 912.986947ms ago: executing program 1 (id=2): setrlimit(0x8, &(0x7f0000000080)={0x5, 0x65}) (async, rerun: 32) r0 = syz_open_pts() (rerun: 32) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x20, 0x0) fcntl$lock(r1, 0x9, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x300000003}) (async) kqueue() (async) sysctl$net_inet6_ip6(&(0x7f0000000180)={0x4, 0x18, 0x29, 0x33}, 0x4, 0x0, 0x0, 0x0, 0x0) (async) getrlimit(0x2, &(0x7f00000000c0)) (async) select(0x40, &(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x0, 0x0) (async, rerun: 64) close(r0) (async, rerun: 64) ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000040)={0xf4d, 0x4, 0xfffffffe, 0x8, "6597c8f9631b9b37318a1af8bdbac6767bd946e9", 0x0, 0x3ff}) 911.607421ms ago: executing program 5 (id=12): r0 = socket(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0xffff, 0x10, &(0x7f0000000100)=0x20000, 0x4) pledge(0x0, &(0x7f00000000c0)='\x00') (async, rerun: 64) pledge(&(0x7f0000000000)='tty \x00\x02\x00!\a\x9bp^|#\xcbhl\x97\xa3_\xbc\x04\x9d!\xd9\x9f\x9f\xb4\x96\x13\x12\xe0\r\xe7\xb9E\b\x00\x00\x00B\xaaY\xe1Q<\x19\xc0\xf6Yf\x9au^\xa0\xc9j\xdd-I\x01R\x00w\xf7\x15\x04\xa6\x82aY\x1d\xd7\f>Y\x06\"\xad\xb6\x88_\xeb\at\x91\xd3\xbf\xea\xddt\xe0\bt\x06S,\x1f\x1fj\xa5H\x01nz\x947\xf8Q|o\x80\xdbH\xa7-\xaaw\xcet\x044\xc5\xa9e\xa9\xf6\x1b\x8e\x05\x86\x91IsC\xb9ul\xaeu\xad\x9b\xaf\x04\xc4\x03\"F\x8f\xd5\xe8\r\x8d\xa1\x00\xcc\xd7\xa0\xe1\xeb\xc1>\xbd\t\xc8\x15\v\xb0, \xee\xa4\xa6\xb9a\x01&\xadrj\xd5\xc26p\xa14\xe0\xbf\xa0\x1es\x01=\xdbd\xf0?=\x8afcJ\x8e\xf7\nn\xd4<\x00\xec\xe4^\x00\x00\x00\xca\x90\xfa\x98\xc9gty\xce\xab\xd2\xa1\x85E\xe4\xa9\xd5\xab\x83\xda?w\x83\xbc\xcf\xd20(L&b\xed\x8c\x1d\x1a\x9fd\x99H\x9e\x82\x10\xea\x05\xf8\xff\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\xa6\x8c\x05n\x83\x83\x12+\x16\xc1\x00\x04\x00\x00\x13:o\x0f\x1fB\xa4\xddwB\x92h\xde\xfal3\x88e\x04J\\\x00D\xae`\x8e\xadd\xa8;\xee\xc4K\xe8]\x84\x90\xb8d\xfb\x95\xb3\xe9(x_\x80]\xadW\xd5\xa9\xaa\x03\x9c6\xa9\xc4\x01\x03\xea\xe5\x90\x85\x16\xb0DV\x13\x01\xab\x01\xf0\x8f\x02\xc2\xc89\x19o\xf5zJ\x9b\x03\x1f\xd7\xdbN\\\xc0\xcd?Pg\xd5q\x13\xbd \xfa\xab\xccJK\x11\\\x16~#P.\xc9K\x15r\xab\xda\xe2\xd4\xec8\x8b\xb6e\x96\xe9\xc3\x93\xed\x94.\xc2\xa0\x1fU#\x96\xe6\xb6C\xfa\x03/\x8b\x0e2\xec\x96v\x9b/.\v\x9e\x80\x18s\xae.\xf4\x14KS`\x87\x8b4\t\x00\x87{\xa8@e\xbfe\xeb\xee\xa2\xe72\xb8Q:\x9f\xc2ym\x86\xc4\xcbm\x80%\xfc\x9e\x9f', &(0x7f0000002840)='tty \x00\x02\x00!\a\x9bp^|#\xcbhl\x97\xa3_\xbc\x04\x9d!\xd9\x9f\x9f\xb4\x96\x13\x12\xe0\r\xe7\xb9E\b\x00\x00\x00l\xaaY\xe1Q<\x19\xc0\xf6Yf\x9au^\xa0\xc9j\xdd-I\x01R\x00w\xf7\x15\x04\xa6\x82aY\x1d\xd7\f>Y\x06\"\xad\xb6\x88_\xeb\at\x91\xd3\xbf\xea\xddt\xe0\bt\x06S,\xdbH\xa7-\xaaw\xcet\x044\xc5\xa9e\xa9\xf6\x1b\x8e\x05\x86\x91IsC\xb9ul\xaeu\x94\x9b\xaf\x04\xc4\x03\"F\x8f\xd5\xe8\r\x8d\xa1\x00\xcc\xd7\xa0\xe1\xeb\xc1>\xbd\t\xc8\x15\v\xb0, \xee\xa4\xa6\xb9a\x01&\xadrj\xd5\xc26p\xa14\xe0\xbf\xa0\x1es\x01=\xdbd\xf0?=\x8afcJ\x8eYEn\xd4<\x00\xec\xe4^\x00\x00\x00\xca\x90\xfa\x98\xc9gty\xce\xab\xd2\xa1\x85E\xe4\xa9\xd5\xab\x83\xda?w\x83\xbc\xcf\xd20(L&b\xed\x8c\x1d\x1a\x9fd\x99H\x9e\x82\x10\xea\x05\xf8\xff\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\xa6\x8c\x05n\x83\x83\x12+\x16\xc1\x00\x04\x00\x00\x13:o\x0f\x1fB\xa4\x00wB\x92h\xde\xfal3\x88e\x04J\\\x00D\xae`\x8e\xadd\xa8;\xee\xc4K\xe8]\x84\x90\xb8d\xfb\x95\xb3\xe9(x_\x80]\xadW\xd5\xa9\xaa\x03\x9c6\xa9\xc4\x01\x03\xea\xe5\x90\x85\x16\xb0DV\x13\x01\xab\x01\xf0\x8f\x02\xc2\xc8\x9b\x03\x1f\xd7\xdbN\\\xc0\xcd?Pg\xd5q\x13\xbd \xfa\xab\xccJK\x11\\\x16~#P.\xc9K\x15r\x04\xd9Z;\xc0\x8dOze\x96\xe9\xc3\x93\xed\x94.\xc2\xa0\x1fU#\x96\xe6\xb6C\xfa\x03/\x8b\x0e2\xec\x96v\x9b/.\v\x9e\x80\x18s\xae.\xf4\x14KS`\x87\x8b4\t\x00\x87{\xa8@e\xbfe\xeb\xee\xa2\xe72\xb8Q:\x9f\xc2b\x897\xbe\r\x04\xdf\xe2\xc0\xf0FV\'m\xcbm\x80%\xfc\x9e\x9f\x87\x80A\xbe\xc2\x00\x00\x00\x00\x00\x006\x96\xbb\x9f\x85\x98\xbb\xbc;\xaa\x97c\xfe\x82jz&t\xa7\xc4\xcd\xb0\b9G\xcag\fY\xe6\r\xcdT\xd3\x1c(\xef\xc0\x038\xbd\xdd\xd9\xc9\x93a]q\xd2\x9b\a\x1e\xf8\xc3\"\xc8:\xb8$\x9f\'P\x17\xfa\xf3Xa\trB-\xf2g\xe6Z\xd5F\xd2\x80\xe0\x99\"\xc12\xe8\b\xc58\x00'/659) (async, rerun: 64) ioctl$FIOASYNC(0xffffffffffffffff, 0x80047460, &(0x7f00000000c0)=0x80b7e) (async) syz_emit_ethernet(0x138, &(0x7f00000003c0)=ANY=[@ANYRES8=r0]) (async, rerun: 64) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async, rerun: 64) connect$unix(r0, &(0x7f0000000000)=@file={0x1}, 0x2) (async) ioctl$WSMOUSEIO_SETPARAMS(0xffffffffffffffff, 0x80105728, &(0x7f0000000100)={&(0x7f0000000040)}) (async, rerun: 64) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (rerun: 64) r1 = socket(0x18, 0x1, 0x0) getsockopt$sock_int(r1, 0xffff, 0x1003, &(0x7f00000000c0), &(0x7f0000000100)=0x4) setsockopt$inet_opts(r0, 0x0, 0x1, &(0x7f00000000c0)="9876d692a3ef9c7ab923a2f0", 0xc) (async) r2 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$WSMOUSEIO_GETPARAMS(r2, 0x80105727, &(0x7f0000000380)={&(0x7f0000000340)}) write(r0, &(0x7f0000000240)="14bdfa5d1d34e2fecb284a6498307dcda9aec43050036123339a346f737850551408753f95b7688ad4c4e1dd5489e7bafc58d3e5823757ae8b630719ef187ccad995f13dbe19a6dd4e6902bd8297b0799b426aabe9fad9db6996571c6d9f8bb5d542c2148aa42be940970fe88d34d8f99afe7e7820237400000000008000000100"/138, 0xfc7e) 905.307598ms ago: executing program 6 (id=13): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000700)={0xffffffffffffffff}) getsockopt$sock_linger(r0, 0xffff, 0x80, 0x0, 0x0) r1 = open(&(0x7f0000000380)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7949) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000040)='#!', 0x2}], 0x1) write(r1, &(0x7f0000000000)="09cf1029dee8a18b402819090000000000ff4278ad530a", 0x17) sysctl$kern(&(0x7f0000000000)={0xa, 0x5}, 0x2, &(0x7f00000000c0)="dca21ede19585af862e8f72a7cc60c432cee0ca8e6b10eb90988", 0x0, 0x0, 0x0) execve(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$tty(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 899.071826ms ago: executing program 5 (id=14): writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) r0 = socket(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1, &(0x7f0000000080)=0x1fc, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x7b) unveil(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='W\x00') connect$unix(r0, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0xa) sendto(r0, &(0x7f00000000c0)='_w', 0x2, 0x7, 0x0, 0x0) 786.269061ms ago: executing program 6 (id=15): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r1 = socket(0x18, 0x2, 0x0) ioctl$FIONREAD(r1, 0x802069dc, &(0x7f00000001c0)) r2 = syz_open_pts() fcntl$lock(r2, 0x9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000300000000}) flock(r2, 0x1) flock(r2, 0x1) fcntl$lock(r2, 0x8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x100000001}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x4b, &(0x7f0000000340)=[{&(0x7f00000001c0)="23b30925c0da23211e7bf4abd439a5476c02", 0x12}], 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r3 = socket(0x18, 0x1, 0x0) getsockopt(r3, 0x6, 0xc, 0x0, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x400}, 0x1000001268, 0x8b, 0x0, 0x0, 0x7ffffff9, 0xfb5f, 0x8, 0x8000008000000e62}) sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b1000504600000000000000007000000331c13fecea10500fef9e906c72fd3357ae320b37b673039d2d236073705ae04be38164991f7accf5f882b297be1aa5b236deb51e2f0ac3ebbc257699a5f139b672f4d335d223e7d029d6ba8af630037282102000000720f70c1f5a472c881ea6e69e0bb76d907c400000200361b1257aea8c5000020020000000000008abfba09", 0x91, 0x404, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r4 = socket(0x11, 0x3, 0x0) sendto$unix(r4, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x2, 0x0, 0x0) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) r5 = socket(0x11, 0x3, 0x0) sendto$unix(r5, &(0x7f0000000000)="b100050400000400000000ba9f3b2eab0001000200331c13fecea10500fef96ec0c72fd3357ae30200ceb15b92ccbb69004e3003000004be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0cf22bfa89b334bcbd6443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c09000000080000000000", 0xb1, 0x0, 0x0, 0x0) setrlimit(0x8, &(0x7f0000000980)={0x8, 0x54}) r6 = syz_open_pts() close(r6) r7 = syz_open_pts() sysctl$kern(&(0x7f0000000000)={0x1, 0x4e}, 0x5, 0x0, 0x0, 0x0, 0x0) close(r7) readv(r6, &(0x7f0000000500)=[{&(0x7f00000000c0)=""/75, 0x4b}], 0x1) r8 = socket(0x2, 0x2, 0x0) ioctl$FIONREAD(r8, 0xc0206921, &(0x7f00000001c0)) 783.749587ms ago: executing program 1 (id=16): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) write(r0, &(0x7f0000000280)="5e2be230ce388bee0241684f8b78e501a205e3ccee47031c51e64446ef70acb5de6770a2aca5e19fa422aba162e4935829447cb8fe11491f0aa2daa316150f4f14c70c5b2f7f835fd956794e7493259aaed7c78047c3fe5aeffebce05f245f35e6b7831dca06e42e519c7650891f16320e7f497b591e4b92a3ec10c72e0b84d1e91542a29bc8786748c707b15cab4a72", 0x90) r1 = socket(0x18, 0x2, 0x0) r2 = kqueue() r3 = kqueue() kevent(r3, 0x0, 0x80000001, 0x0, 0x1000800, 0x0) kevent(r2, &(0x7f0000000080)=[{{r1}, 0xfffffffffffffffe, 0xb, 0x4141733800ee6be4, 0x7, 0x2}], 0x101, 0x0, 0x5, 0x0) r4 = openat$pci(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) kevent(r2, &(0x7f0000000200)=[{{r4}, 0xfffffffffffffff6, 0x9, 0xf27ff7794bbc9c2d, 0xfd, 0x10000}], 0x1, 0x0, 0x9b68, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) kevent(0xffffffffffffffff, &(0x7f0000001780)=[{{r5}, 0xffffffffffffffff, 0x3, 0x1, 0x0, 0x9}, {{r5}, 0xffffffffffffffff, 0x2, 0x4, 0x80000001}], 0x138, 0x0, 0xffffffff, 0x0) r6 = kqueue() kevent(r6, &(0x7f00000000c0), 0x138, 0x0, 0xffffffff, 0x0) msgctl$IPC_STAT(0x0, 0x2, 0x0) close(r2) 783.287445ms ago: executing program 7 (id=8): sysctl$vfs_fuse(&(0x7f0000000000)={0xa, 0x12, 0x3}, 0x3, &(0x7f0000000040)="833d5b1133c802e9e20c8f0edb88450aa37a919b8383e2d9bd2ac11e86f6b28554ead5ea5a234a0c4ee192f97edd9d26687a153d5edeb4a6dea2517e00cce70a281efd4906869941994d1b9d825d0da5bc4c3e0fa4b66c4575c3e9a21c3303a7baf42e5c720b0fbcc1683c598e476ebe28d96f5c440a09385882b117bc3b3cd9e2", &(0x7f0000000100)=0x81, &(0x7f0000000280)="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", 0x10c) (async) r0 = socket(0x11, 0x3, 0x0) (async) sysctl$kern(0x0, 0x0, &(0x7f00000001c0)="71ac00", 0x0, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x9, 0x0, 0x0, 0x0, 0x0, 0xf8, 0x7}, 0x80, 0x2000000000003, 0x0, 0x0, 0x80000001, 0x1, 0x8, 0x8001008000000e62}) sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b1000504600000000000000007000000331c13fecea10500fef9e906c72fd3357ae320b37b673039d2d236073705ae04be38164991f7accf5f882b297be1aa5b236deb51e2f0ac3ebbc257699a5f139b672f4d335d223e7d029d6ba8af630037282102000000720f70c1f5a472c881ea6e69e0bb76d907c400000200361b1257aea8c5000020020000000000008abfba09", 0x91, 0x404, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r1 = socket(0x11, 0x3, 0x0) sendto$unix(r1, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x2, 0x0, 0x0) (async) r2 = socket(0x18, 0x2, 0x0) setsockopt(r2, 0x1000000000029, 0x9, &(0x7f0000000040)="03000000", 0x4) (async) setsockopt(r2, 0x1000000000029, 0xb, &(0x7f0000000140)='\x00\x00\x00\x00', 0x4) (async) minherit(&(0x7f0000023000/0x1000)=nil, 0x1000, 0x2) sysctl$vfs_fuse(&(0x7f0000000200)={0xa, 0x12, 0x4}, 0x3, &(0x7f00000003c0)="dd8f548b917d0ae0d765d42774db1261386f1e7167f2c2eab1732acaf03778b6adbec75af082dd6b45a4c1b4e78762e3bbe545827d37a1d2d85efa194e828a27d23da07c7be5604345529f103aeefcc9306e3ff4f97f4f9190aa3640105f5f78caf665b1a0b5d416a91047b08dfdb139312ba2c40444f0733006a96700234d8f9a2a7f0344fa1c4cb2fc239237d5b2a038cd323660de2a123d7a420e818e1e2d0118977f9bce6b", &(0x7f0000000240)=0xa7, &(0x7f0000000480)="1658a3baa509312a32eac72ac5dc3d471822838ff6d002d0c2c1177587cfd49a926cfa3f2fccfae239d27fdb62b752ce60ad6a63465bdbcefaf113167e8d1f322bc27280904e6820cb9ac52e588a7092e07541819ef1b7e90720cbd4efcbfc3325073ef83e04509a644752e5473965ac42e59db582be7d7a28aabf7473016eaf67a4d3a4373918f7b14f96d87a987639c563912848acc4a88bd6de245d97870a6ffdba02eea43dfd28d50b989bb883d2099a74c2836a6229ca641e79133c6c0c437ee3e7ddec793e92108c54376aa822bf597c501b62d43b3c833e48700a104dad58efa6ba33ab227c79021a", 0xec) sysctl$hw(&(0x7f0000000040)={0x6, 0xe}, 0x2, &(0x7f00000001c0)="af3d513e355ff1", &(0x7f0000000100)=0x7, 0x0, 0x0) (async) sysctl$hw(&(0x7f0000000100)={0x6, 0x10}, 0x2, 0x0, 0x0, 0x0, 0x0) getsockopt$sock_int(r0, 0xffff, 0x1004, &(0x7f0000000180), &(0x7f0000000140)=0x4) 781.484972ms ago: executing program 2 (id=3): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x2000000000000243, &(0x7f0000000100)}) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r2 = socket(0x2, 0x2, 0x0) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r3 = socket(0x2, 0x4001, 0x0) r4 = dup(r3) r5 = fcntl$dupfd(r4, 0x2, 0xffffffffffffffff) close(r5) r6 = socket(0x2, 0x2, 0x0) connect$unix(r6, &(0x7f0000000000), 0x10) setsockopt$sock_int(r2, 0xffff, 0x1023, &(0x7f0000000040)=0x4, 0x4) recvmsg(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r7 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r7, 0xc0106924, &(0x7f00000001c0)) r8 = kqueue() symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') utimes(&(0x7f0000000080)='./file0/file0/..\x00', &(0x7f00000000c0)={{0x0, 0x1}, {0xfffffffffffffffe, 0x9}}) kevent(r8, &(0x7f0000000100), 0x13e, &(0x7f0000000180), 0x6, 0x0) sysctl$net_inet_ip(&(0x7f0000000000)={0x4, 0x2, 0x0, 0x20}, 0x4, &(0x7f0000000040), 0x0, 0x0, 0x0) r9 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r9, 0xc0406938, &(0x7f00000001c0)) socket(0x1, 0x1, 0x3) write(r0, &(0x7f0000000000)="ed", 0x1) recvmmsg(r1, &(0x7f0000000880)={&(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/176, 0xb0}], 0x1, 0x0}, 0x3}, 0x10, 0x42, 0x0) openat(0xffffffffffffffff, &(0x7f0000000200)='./file0/file0/..\x00', 0x800, 0x51) r10 = kqueue() kevent(r10, &(0x7f00000000c0)=[{{r10}, 0xfffffffffffffff9, 0x9, 0x2, 0x8000000000000000, 0x4}], 0x127, 0x0, 0x400, 0x0) 781.119654ms ago: executing program 7 (id=17): getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) r3 = getegid() r4 = getgid() setgroups(0x3, &(0x7f0000000080)=[r2, r3, r4]) lchown(&(0x7f00000000c0)='./file0\x00', r1, r4) setregid(r4, r4) chmod(&(0x7f0000000100)='./file0\x00', 0xa0) r5 = accept$inet6(0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000180)=0xc) setsockopt$sock_timeval(r5, 0xffff, 0x1006, &(0x7f00000001c0)={0xfff, 0x2}, 0x10) sendto(r5, &(0x7f0000000200)="1e666a6ab2e2772c683c7ba1a0d9398f49d49c984c0014d8b7cce9c681346ca74fc2400fcae17c3a36ecc6ff510e845385778e892a96241e65fdd5b04f01af5349a9552ffd0ee5db5c4449484dc1e29cd09c7eb7b8f0904c02ac33a54c", 0x5d, 0x801, 0x0, 0x0) chown(&(0x7f0000000280)='./file0\x00', r1, r4) r6 = open$dir(&(0x7f00000002c0)='./file0\x00', 0x10000, 0x9b) chmod(&(0x7f0000000300)='./file1\x00', 0x32) getsockopt$sock_cred(r5, 0xffff, 0x1022, &(0x7f0000000340)={0x0, 0x0, 0x0}, &(0x7f0000000380)=0xc) msgctl$IPC_SET(0x0, 0x1, &(0x7f00000003c0)={{0x1, r1, r8, 0x0, r3, 0xeb, 0x180}, 0xbf8, 0x3, r0, r0, 0x1, 0x80, 0x4, 0x2}) write(r6, &(0x7f0000000440)="52572cf02f8ada5d7721eb57c4f1ed71b3cfdc927708221ee37de880c80db8115f5820cf9530fa5b7798d3365e9cdea03b14648aa9803e158b746bd1b701b832ee47c3b7990f9d6249cd35da0d514d8ecb7da2da9617cafa82ebc8722cc9a09cbb9837fddd65f6efa2b08520fefa870ab7803d6e5b70df43d87a66189e246903ebc79ede7944ac95529249745828799e43b68fbbf386cf570ab342f2840bd191cea87b4bf7e176", 0xa7) chmod(&(0x7f0000000500)='./file0\x00', 0x20) semctl$GETALL(0xffffffffffffffff, 0x0, 0x6, &(0x7f0000000540)=""/63) r9 = getegid() getpeername$inet6(r5, &(0x7f0000000580), &(0x7f00000005c0)=0xc) getsockopt$sock_cred(r5, 0xffff, 0x1022, &(0x7f0000000600)={0x0, 0x0}, &(0x7f0000000640)=0xc) recvfrom(r5, &(0x7f0000000680)=""/151, 0x97, 0x40, &(0x7f0000000740)=@in6={0x18, 0x0, 0x5, 0x2}, 0xc) sysctl$net_inet_ip(&(0x7f0000000780)={0x4, 0x2, 0x0, 0xc}, 0x4, &(0x7f00000007c0)="83e5be56b312fdbc000027738bf118e4368cd1569e8175b6664593f39d21755fb0e77c02e353eb7aef2f3dc7959b71350933eac16c70ceab9cf379f2e04d502bb4abbcda36abe181e2346c253489b7ea1e21b6cf44c46437e871ad307b778ae519794ecc941ea229d8867817dc81462a27d98c734c03d8b7eb1856ba2d7013a7a497fc8688ff361338861e", &(0x7f0000000880)=0x8b, &(0x7f00000008c0)="3d7201c9f441f8cf7cb8b4a94e6130f8214e5626915752c5bd6c68cadeec80bb57967ae2e43d53cdf1adbaaabea81f92354eabe943c5a8da", 0x38) fchown(r6, r7, r9) r12 = socket(0x10, 0x8000, 0x0) dup2(r5, r12) chmod(&(0x7f0000000900)='./file1\x00', 0x80) getsockname$unix(r12, &(0x7f0000000940)=@file={0x0, ""/4096}, &(0x7f0000001980)=0x1002) r13 = msgget$private(0x0, 0x490) msgctl$IPC_SET(r13, 0x1, &(0x7f00000019c0)={{0x9, r11, r2, 0x0, r4, 0x8}, 0x2, 0x998a, r10, r10, 0xffffffffffff41d9, 0x9, 0x1ff, 0x8000000000000001}) 780.82446ms ago: executing program 7 (id=18): r0 = shmget$private(0x0, 0x4000, 0x400, &(0x7f0000002000/0x4000)=nil) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000080)={{0x1000400, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x32}, 0x0, 0x8}) r1 = shmat(r0, &(0x7f0000001000/0x3000)=nil, 0x2000) r2 = kqueue() mkdir(&(0x7f0000000040)='./file2\x00', 0xc1) mkdir(&(0x7f0000000300)='./file2/file0\x00', 0xc2) mknod(&(0x7f0000000080)='./file2/file0\x00', 0x10, 0x1) kevent(r2, &(0x7f0000000000), 0x203ff, 0x0, 0x8000800, 0x0) shmctl$IPC_RMID(r0, 0x0) shmdt(r1) 779.648691ms ago: executing program 5 (id=19): symlink(&(0x7f00000016c0)='./file0\x00', &(0x7f0000001700)='./file0\x00') (async) clock_gettime(0x3, 0xfffffffffffffffe) (async) readlink(&(0x7f0000001840)='./file0\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x200000000000a, &(0x7f0000000000)="ea00005c00000000", 0x1) (async) setsockopt$inet_opts(r0, 0x0, 0x9, 0x0, 0x0) (async) accept(r0, &(0x7f0000000080)=@un=@abs, &(0x7f00000000c0)=0x8) unlink(&(0x7f0000000140)='./file0\x00') (async) setrlimit(0x8, &(0x7f0000000580)={0xa, 0x56}) r1 = syz_open_pts() close(r1) (async) syz_open_pts() (async) ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000180)={0x7fff, 0x52, 0xffffdf85, 0xfffffbff, "ffff0201000480000000ff00", 0x9, 0xfd8}) (async) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000280)="77a75324f1fbf5ba2f1afde8dd51e28473fd6a3d07b9c9b8845de1c6651e4255768e2627bb11c178af8e6492504b4a6c2b743357d5e97258c0acf24753bb7b287f903a51404060b27d0a1b9b1449b328d536e0673f9eb25bce7742242899db21edec3a39e0edb22402b0f5b6b56daa8d99d999f2889d35c11539c5979f01c645cfe0803bd6e6eea0f3bfbebed721ae54d4ff263b090429c60a7bb73b79d8347cdb82e0b081c7ebb78eebdeb37ab2c57f1845801651d7c3d8139c4138d4a5a0f3fd475958e2bf16bafda1c29fae36c54a3e30740809d1f080bb74df17608f6c40a91f5bb3d4fc68515b5c983defc532adade7e249e89b", 0xf6}, {&(0x7f00000005c0)="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", 0xe68}], 0x2) (async) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x10000) readv(r2, &(0x7f0000000040)=[{&(0x7f0000000480)=""/193, 0xc1}], 0x1) setrlimit(0x5, &(0x7f0000000980)={0xb, 0x52}) r4 = syz_open_pts() close(r4) (async) syz_open_pts() ioctl$TIOCSETA(r4, 0x802c7414, &(0x7f0000000380)={0xf66c, 0x8, 0x9, 0x5fffff5f, "9cdc452e307e0804002f4c0000002f9e68cd3304", 0x400, 0xfffff196}) writev(r4, &(0x7f0000000000)=[{&(0x7f00000009c0)="f284547ec87ae3ad1aad0ee27ee88eacb67a08038280f2a01ae7a48358ae16e2fba4ee0ddad57fa2b502658b5723516552c4349404b44e61906eb367dd016164244e321c3f3fa4a301cca907a63fe5682806e86f7b9ed732b01c843a7c13b71430810706a94f10d2cb6414e1fffa7b8cceb21a5bb7f7e286998196fa9ddbf1180a09fbdfb5fa39c5351cac68378d67e9655cdbf971126f853c896ee40a964e51b93e9f8cd2761da19460ae1277fee651ab0c75d0c5b1bf66cfd5838c158d811facece8dcef640f9c9eb9530e6d8ee418a92276e3f27224433eef1cb72de8961a15ff100acd28426503cae730e81dafef5299f8cae80f54b022a9ae3164b69a08b6460d25fba9fe6c6d07c1d5893bbd9f8b78b80fa1c3bf9209558ad46ae1f00a2ee2221f62071fc8687045f65f847000e0bcff4de28560bc948c5f780cc109d10a8fdad1599932daa727ee06845b7bb5d0462606567e6827a47aeaf012f8ebcc6007d3733a5230347e33c24e68fbf757c7fba0f3f9097dd6c24c6732753aac4cc5aa43378d32e28fad0dda633e1362a5e3a1da302e5c1b07103d306d92c663aa9717d106f6f9c944e2c7de93d0fc0ab40b4a4d6416c476337bf94f4a9a6248abfd8e612758b0167f5a0a002b405bc30f8b6e9f9778db29d03789e7293f6d5049bdd713a9ca84764fa65433f3c35334a05b1bf10b14d73506495614913013f2120359ab76806bfc6c5d597786da32ae3d2868d5c692e6bb98413ae8e822b002f3ecdc844354e3eafa64f9a2a90a6f1bff8c9b8ba073203b2396221ca58d38ceb75f42fc4a0c72dc0dc2349bcc3681ca430908cf926861f0aec3b28d2ea59d0ee36f14ea06345e7136dec7c9ba6e3925c4ef813a2c83d4b213b266c26f04e204fbda47ee410ee0ae002e7163492e1929b9279b29e6ed90986de6d05f40b50248f7aa97f03cc09c1082e5119f9491e0f980e9d6bc7407c2a2ec625b902e39085f792fa9217f143349b1b08fb1647b1b694e544d9f33f3bdc4f77f55858cf9f2751ec683512630fa72236d127bff3449692fffb710d8dfe730df8733bb1d59202f2e126e8a77479d461910dfa5664b6fb27fe479774c0ae1190fe35b40c831e6a77f02da283b96686a47adcfbb07950e99dfe251ec21e20d36f868f2ddbb532de5fff1ffbfcede623df3517fb836ba8c48d8848784614ed65a0cf6dfe38b1ecf79942c185c7fb4110f2113794c96e5ecaa33df181357743c2047c01a856846e6f23465b340cc35d88f9ddb966492562f05245ee167b7a97f26a460b3e1632aeb18779cacfbe57a79ef107aa8d9304a45dc195143cacae3e78b1606408d5465d80600d6683fe41838f6212025a9f82a31602775d09d1b8892090bfe17c2269e27682ef898852c65d54c720559b8c4a05c9858c0a1b380824b0282609e7f0dc597f30047d0be06d2c4a44d894d44bd9463d43a795fd2a13bbed1c213602a3fc8931ab00e45a1d0fd2160741ae3868023f4f633eda272a117bf38a1d094f8fb75e55856b6f5fbb7a5595ddc4d9ce6a10e87ce411ae30ad4a61469864a6511e949ad9f4c3230fe05cd4b43b7666d66bdbdcd0ca2fd02dfee6670a9515cfb626e46e7df970f645c673a5e36844062c38fd862e57fd0f053b3ed71fc26bff73bf2ca24e664665a2c7329858ce8d9fc7f18e5f42f217f6b3e64466a28b3c207d67fce58294b2e3b4afe29551e69decffbfb8e8b9df5821094c2b9cb4ca887e295aedb2f2d3a6f6412abfc3793387d6161f03fc8e18fc9227e73bcfd42334365996ec6e85343f0b0dd731c92cee894003311edbf18ddd70445c5c875b007a91a7b7dc6f4dd04e49adfe7d484708152c5c4a55b32e26ffdad79948dc118e0c9a0707f729913bdb63fc8a29c89e2a6b44c942d45de15570ec7ceda9ed638e41008b93fc13eb6e0b0a55a5272ec2e7966efcc5d58fc2d83c5aa7d09e7e65b2612a63698a4654c0f7d253d7556d1b757201803f77de0c6c2e8fc853e7571579f761e1d16bcbe61a7d77e90bf32162a644da6772df67f13fd6becebbc7b4a849283c8bd879ee75f885b3adbebf376568c3ba030de0cdacce12ac404352c0e9dbc6b79d103ccda9ea17f619a1286528c08644293be3b4a9cde83633842e181c003a8c2ddca9b4968273fec75ebdee0538b1cd61bbb2a22dbf3eb5fc58bdb583f7e3cc508f9edac0dbcdb1d95e4b3a202a487ba7bc05ba7a9d428215499e9f4c0ee4516e85efebf96d12d5312a6af261b53d482b66879de906e9914eb63cdc360db0882dade69d9341e39816410dc0bf2d45e6abf4bee9e0c424434595ac438df5c28cccea19f4324c23154c64ea395782f3f8301000000010000002e", 0x693}], 0x1) dup2(r3, r2) (async) writev(r3, &(0x7f0000000200)=[{&(0x7f0000000100)="19", 0x3a4e1e905c56cdb7}], 0x1) 694.454084ms ago: executing program 5 (id=20): r0 = socket(0x18, 0x2, 0x0) setsockopt(r0, 0x1000000000029, 0x9, &(0x7f0000000040)="03000000", 0x4) ktrace(&(0x7f0000000000)='./file0\x00', 0x4, 0x40000814, 0x0) setsockopt(r0, 0x1000000000029, 0xc, &(0x7f0000000000), 0x14) (async) setsockopt(r0, 0x1000000000029, 0xc, &(0x7f0000000000), 0x14) open$dir(&(0x7f0000000080)='./file0\x00', 0x80, 0x130) (async) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x80, 0x130) open$dir(&(0x7f0000000100)='./file0\x00', 0x40, 0x2) (async) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x40, 0x2) linkat(r1, &(0x7f00000000c0)='./file0\x00', r2, &(0x7f0000000140)='./file0\x00', 0x4) r3 = socket(0x800000018, 0x2, 0x0) getsockname(r3, 0x0, &(0x7f0000000000)) 693.508948ms ago: executing program 2 (id=21): shmget$private(0x0, 0x3000, 0x537, &(0x7f0000253000/0x3000)=nil) 692.851969ms ago: executing program 2 (id=22): r0 = semget(0x0, 0x1, 0x281) semop(r0, 0x0, 0x0) semctl$GETNCNT(r0, 0x1, 0x3, 0x0) semop(r0, &(0x7f00000000c0)=[{0x0, 0x2ff, 0x1800}], 0x1) open(0x0, 0x8000, 0x80) r1 = semget$private(0x0, 0x7, 0x3c0) semop(r1, &(0x7f0000000900)=[{0x4, 0x3ff, 0x1000}], 0x1) semctl$SETVAL(r1, 0x4, 0x8, 0x0) semop(r0, &(0x7f0000000080)=[{0x4, 0x9, 0x800}, {0x4, 0x7}, {0x3, 0xe, 0x800}, {0x4, 0x6, 0x400}, {0x7, 0xb9d0, 0x800}, {0x0, 0x8f, 0x1000}, {0x3, 0x1020, 0x1000}, {0x2, 0x6, 0x1800}, {0x4, 0x9, 0x1000}], 0x9) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) close(r2) sysctl$kern(&(0x7f00000002c0)={0x1, 0x9}, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffffc7) r3 = kqueue() ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f00000019c0)={0xfffffffc, 0xfffffffe, {[0xfffffffffffffffc, 0x8, 0x5, 0x100000000, 0xc05, 0x80000000, 0x8000002e, 0x0, 0x0, 0x2f01, 0x1, 0x3, 0xfffffffffffffffe, 0x1, 0x4, 0x4, 0xfffffffffffffff7, 0x100], [0x5, 0x5, 0xfffffffffffffff8, 0x0, 0x1, 0x80000000, 0x0, 0x0, 0x0, 0x48], [0x8, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0xfffffffffffffffe], [0x3, 0x20000000000, 0x0, 0x100000002, 0xfffffffffffffffe], [{0x0, 0xc, 0xfffffffe, 0x7d06}, {0x2, 0x2, 0x1, 0x3}, {0x0, 0xfffffffd, 0xfffffffe, 0xffc}, {0x1008, 0x0, 0x8, 0xfffffffffffffffe}, {0x0, 0x400, 0xd, 0x5}, {0x7ffe, 0x2000, 0x40003, 0x1}, {0xfffe, 0x0, 0x7}, {0x0, 0x95b, 0x1fd, 0xc}], {0x0, 0x5, 0x1, 0x849}, {0x203, 0x40010, 0x4, 0x2}}}) semget$private(0x0, 0x1, 0x1) kevent(r3, &(0x7f00000000c0), 0x138, 0x0, 0xffffffff, 0x0) semctl$SETVAL(r1, 0x2, 0x8, &(0x7f0000000040)=0x8) semget(0x0, 0x1, 0x281) (async) semop(r0, 0x0, 0x0) (async) semctl$GETNCNT(r0, 0x1, 0x3, 0x0) (async) semop(r0, &(0x7f00000000c0)=[{0x0, 0x2ff, 0x1800}], 0x1) (async) open(0x0, 0x8000, 0x80) (async) semget$private(0x0, 0x7, 0x3c0) (async) semop(r1, &(0x7f0000000900)=[{0x4, 0x3ff, 0x1000}], 0x1) (async) semctl$SETVAL(r1, 0x4, 0x8, 0x0) (async) semop(r0, &(0x7f0000000080)=[{0x4, 0x9, 0x800}, {0x4, 0x7}, {0x3, 0xe, 0x800}, {0x4, 0x6, 0x400}, {0x7, 0xb9d0, 0x800}, {0x0, 0x8f, 0x1000}, {0x3, 0x1020, 0x1000}, {0x2, 0x6, 0x1800}, {0x4, 0x9, 0x1000}], 0x9) (async) pipe2(&(0x7f0000000000), 0x0) (async) close(r2) (async) sysctl$kern(&(0x7f00000002c0)={0x1, 0x9}, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffffc7) (async) kqueue() (async) ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f00000019c0)={0xfffffffc, 0xfffffffe, {[0xfffffffffffffffc, 0x8, 0x5, 0x100000000, 0xc05, 0x80000000, 0x8000002e, 0x0, 0x0, 0x2f01, 0x1, 0x3, 0xfffffffffffffffe, 0x1, 0x4, 0x4, 0xfffffffffffffff7, 0x100], [0x5, 0x5, 0xfffffffffffffff8, 0x0, 0x1, 0x80000000, 0x0, 0x0, 0x0, 0x48], [0x8, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0xfffffffffffffffe], [0x3, 0x20000000000, 0x0, 0x100000002, 0xfffffffffffffffe], [{0x0, 0xc, 0xfffffffe, 0x7d06}, {0x2, 0x2, 0x1, 0x3}, {0x0, 0xfffffffd, 0xfffffffe, 0xffc}, {0x1008, 0x0, 0x8, 0xfffffffffffffffe}, {0x0, 0x400, 0xd, 0x5}, {0x7ffe, 0x2000, 0x40003, 0x1}, {0xfffe, 0x0, 0x7}, {0x0, 0x95b, 0x1fd, 0xc}], {0x0, 0x5, 0x1, 0x849}, {0x203, 0x40010, 0x4, 0x2}}}) (async) semget$private(0x0, 0x1, 0x1) (async) kevent(r3, &(0x7f00000000c0), 0x138, 0x0, 0xffffffff, 0x0) (async) semctl$SETVAL(r1, 0x2, 0x8, &(0x7f0000000040)=0x8) (async) 687.595737ms ago: executing program 5 (id=24): munmap(&(0x7f0000800000/0x800000)=nil, 0x800000) (async, rerun: 32) r0 = socket$inet(0x2, 0x4000, 0x6) (rerun: 32) mmap(&(0x7f0000f97000/0x4000)=nil, 0x4000, 0x0, 0x1013, r0, 0xfffffffffffffffe) (async) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r1, 0x0, 0x200000000000a, &(0x7f0000000040)='\x00', 0x1) r2 = socket$unix(0x1, 0x1, 0x0) r3 = accept$unix(r2, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x8) connect$unix(r3, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0xa) (async, rerun: 32) setsockopt$inet_opts(r1, 0x0, 0x9, &(0x7f00000000c0), 0x0) (rerun: 32) syz_emit_ethernet(0x46, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd606aa63f00102b00fe8000000000000000000000000000bb000000000000f9"]) 183.750178ms ago: executing program 0 (id=27): open$dir(&(0x7f0000000b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x0) r0 = open$dir(&(0x7f0000000040)='./file1\x00', 0x9fcfc4761a0cc4e2, 0x50) symlinkat(&(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r0, &(0x7f00000011c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') symlinkat(&(0x7f0000000dc0)='./file0\x00', r0, &(0x7f0000000ec0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mkdirat(r0, &(0x7f0000000600)='./file2\x00', 0x0) rename(&(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000980)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000a80)='./file0\x00') rename(&(0x7f0000000fc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000010c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 183.417959ms ago: executing program 0 (id=28): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x8, 0x8, 0x1}]}) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket(0x2, 0x2, 0x0) bind(r1, &(0x7f0000000000), 0x10) preadv(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f00000000c0)=""/179, 0xb3}], 0x2, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4, 0x10, r0, 0x0) 182.929751ms ago: executing program 0 (id=29): r0 = socket(0x11, 0x3, 0x0) setsockopt(r0, 0x11, 0x3, &(0x7f00000002c0), 0x0) r1 = syz_open_pts() mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4, 0x10, r1, 0x8) (async) open$dir(&(0x7f0000000b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x0) (async) r2 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x28) symlinkat(&(0x7f00000005c0)='\x00', r2, &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r3 = socket(0x11, 0x3, 0x0) sendto$unix(r3, &(0x7f0000000180)="b1000504600000000000000007000000331c13fecea10500fef96ecfc72fd3357ae320a77bff0100000000000005ae04be38164991f7c8cf5f882b297be1aa5b236deb51e2f0ac3ebbc257699a5f139b672f4d335d223e7d026ba8afa7d9f2642102410000720fd4d73f0b70c1f5a872c881ea6e69e0bb76d907c400000200361b1257aea8c5000020020000000000008abfb70900000008e371a3f8343712051eadb71d89e0", 0xa6, 0x8, 0x0, 0x0) (async) recvmsg(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)=""/237, 0xed}, {&(0x7f0000000100)=""/110, 0x6e}, {&(0x7f0000000180)=""/187, 0xbb}, {&(0x7f00000002c0)=""/109, 0x6d}, {&(0x7f0000000240)=""/48, 0x30}], 0x5, &(0x7f0000000540)=""/195, 0xc3}, 0x42) (async) open$dir(&(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x0) open(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10, 0x10) (async) symlinkat(&(0x7f0000000dc0)='./file0\x00', r2, &(0x7f0000000ec0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) r4 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) sysctl$vfs_ffs(&(0x7f0000000140)={0xa, 0x1, 0x1f}, 0x3, &(0x7f0000000180)="fa370a76828f18634f50c68b96bd53dac78de54401003c487533edc4fe8bbbbce9bc", &(0x7f0000000500)=0x22, &(0x7f0000000540)="71528c433a3020213fc71f427d623a7d74efa121d4fc05fc5556c7aa789b596c83fa18b6c60cc6d96f7ea392778d3ef3d04f52a080469dd67d003d522ba3e741354ff0e012c982950066db63142b65f28e23c3709af605", 0x57) (async) shmctl$IPC_SET(r4, 0x1, 0x0) (async) shmat(r4, &(0x7f0000001000/0x3000)=nil, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) (async) sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0x37) rmdir(&(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mkdirat(r2, &(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) (async) r5 = socket$inet(0x2, 0x1, 0x0) getsockopt(r5, 0x0, 0x1e, 0x0, 0x0) (async) open$dir(&(0x7f0000000040)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40, 0x90) (async) kevent(0xffffffffffffffff, &(0x7f0000000040)=[{{}, 0x0, 0x0, 0x0, 0x3}], 0x0, 0x0, 0x0, 0x0) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x11, 0x0, 0x2}, 0x6, &(0x7f0000000080), 0x0, 0x0, 0x0) (async) rmdir(&(0x7f00000002c0)='.\x00') (async) open$dir(&(0x7f0000000000)='./file0\x00', 0xf02, 0x0) (async) preadv(0xffffffffffffffff, 0x0, 0xffffff85, 0x1ff) 182.405752ms ago: executing program 0 (id=31): fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f00000000c0)={0x3, 0x1, 0x2, 0x7}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x3e}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1, 0x0, 0x37) sysctl$vm_swapencrypt(&(0x7f0000000040)={0x7, 0x2, 0x2}, 0x3, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x11}, 0x4000000000000006, 0x0, 0x0, 0x0, 0x0) sysctl$net_inet_ip(&(0x7f0000000100)={0x4, 0x12, 0x0, 0x25}, 0x4, 0x0, 0x0, 0x0, 0x0) 181.988945ms ago: executing program 4 (id=32): r0 = shmget(0x0, 0x3000, 0x20, &(0x7f0000ffb000/0x3000)=nil) shmctl$SHM_LOCK(r0, 0x3) r1 = shmget(0x2, 0x1000, 0x200, &(0x7f0000ffd000/0x1000)=nil) shmctl$SHM_LOCK(r1, 0x3) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000000)=""/63) r2 = getuid() getgroups(0x5, &(0x7f0000000040)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0]) r5 = getuid() r6 = getegid() getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000080)={0x0}, &(0x7f00000000c0)=0xc) r8 = getppid() shmctl$IPC_SET(r1, 0x1, &(0x7f0000000100)={{0xc, r2, r4, r5, r6, 0x6c, 0x7a}, 0x8, 0x6, r7, r8, 0x5, 0x4df, 0x100000001}) r9 = openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) r10 = fcntl$getown(r9, 0x5) fcntl$setown(r9, 0x6, r10) shmctl$SHM_UNLOCK(r0, 0x4) ioctl$BIOCSETWF(r9, 0x80104277, &(0x7f0000000200)={0x5, &(0x7f00000001c0)=[{0x4, 0x7, 0x7, 0x7}, {0x5, 0x8, 0x1, 0x401}, {0xffff, 0x8, 0x4, 0xc}, {0x8000, 0x3, 0xe7, 0x800}, {0x9, 0x9, 0x6, 0x3}]}) ftruncate(r9, 0x1000) bind$unix(r9, &(0x7f0000000240)=@abs={0x1, 0x0, 0x1}, 0x8) shmctl$SHM_UNLOCK(r1, 0x4) ioctl$FIONREAD(r9, 0x4004667f, &(0x7f0000000280)) shmget(0x1, 0x4000, 0x8, &(0x7f0000ffb000/0x4000)=nil) r11 = openat$zero(0xffffffffffffff9c, &(0x7f00000002c0), 0x20000, 0x0) getsockopt$SO_PEERCRED(r9, 0xffff, 0x1022, &(0x7f0000000340)={0x0, 0x0}, 0xc) lchown(&(0x7f0000000300)='./file0\x00', r12, r3) getegid() fcntl$lock(r9, 0x9, &(0x7f0000000380)={0x0, 0x1, 0x9, 0x2, r7}) r13 = semget$private(0x0, 0x2, 0x74) semctl$GETNCNT(r13, 0x4, 0x3, &(0x7f00000003c0)=""/215) getpeername$unix(r11, &(0x7f00000004c0)=@file={0x0, ""/4094}, &(0x7f00000014c0)=0x1000) 181.495247ms ago: executing program 0 (id=33): ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x200000000000018f, &(0x7f0000000100)}) r0 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r0, 0xc0106924, &(0x7f00000001c0)) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x62}) kqueue() r1 = syz_open_pts() close(r1) r2 = syz_open_pts() ioctl$TIOCSETAW(r2, 0x802c7415, &(0x7f0000000100)={0x2df57365, 0xa9, 0x20000011, 0xfffffffc, "086400b72860267eccc7020000060000008700", 0x6, 0x100000c}) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000440)="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", 0x3d6}], 0x1) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x200000000000c, &(0x7f0000000240)="ea", 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setitimer(0x0, &(0x7f00000000c0)={{0xffffffffffffffff}, {0xffffffff, 0x80}}, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r3, 0x0, 0x200000000000c, &(0x7f0000000240)="ea00070100000000", 0xc) sysctl$vfs_nfs(&(0x7f0000000000)={0xa, 0x2, 0x3}, 0x3, &(0x7f0000000040)="dd6f3e3cc05b375d499e2408a475f5126485dabb401d5b85e9c9c1c804ce1273220a4f1770bd442913c92dc7afc3f8e0ee35bca1c7d9090517dd2cb3fda6cd0ecde7fde028d3736403ef859ebfbcb7c12f985d10bf30524b8887d8517f253be9bfa610f16f04365ba12d939228fe909e67a1b59bd0f1ea085345652745b1", &(0x7f0000000140)=0x7e, &(0x7f0000000280)="21a298e8bcfd1fa74ff23470424e5fa1c11c8bfccc69e0e60abb83acaa8de878b666f0068f9842569c0250f0510dc005c1519fee109eaff5523b473ee482b8d81bc197d35bccb3d2a8d75f", 0x4b) 181.032313ms ago: executing program 4 (id=34): r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$WSKBDIO_COMPLEXBELL(r0, 0x80105702, &(0x7f0000000040)={0xb, 0x8, 0xfff, 0x200}) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0xd) r1 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) ioctl$FIONREAD(r1, 0x4004667f, &(0x7f00000000c0)) preadv(r0, &(0x7f0000000100), 0x0, 0x91) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}, 0x209) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) shmget$private(0x0, 0x1000, 0x102, &(0x7f0000ffe000/0x1000)=nil) r3 = kqueue() preadv(r2, &(0x7f00000004c0)=[{&(0x7f00000003c0)=""/91, 0x5b}, {&(0x7f0000000440)=""/100, 0x64}], 0x2, 0xbe0) ioctl$BIOCGSTATS(r0, 0x4008426f, &(0x7f0000000500)) ioctl$FIOGETOWN(r2, 0x4004667b, &(0x7f0000000540)) r4 = openat(r0, &(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x183, 0x26) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x4010, r4, 0x90) writev(r0, &(0x7f0000000a80)=[{&(0x7f00000007c0)="fbb412721975a5c2a39912b744de5e4e4ad61ab3c08963029bb516ae4fd57fca75f2508852ab819822083a662a3fc76aed11a9c3a37bac4a62f39d4cf389ad7db2c8465b123fc50c1eaee885178325350c68bea6d7806d705fe905b53d68788022a553f912c0f488542bf21cde3d324e2238878c5c89305f2fafd2fb312fcc1853a94de1401a8d7b4616a37d4d1cf922228d393b0abb04d5bab687d43eb80eb983ce6d1a4552e9d0f42d5e6c5e8bea4bc7e8dea2cc5aba037773a66b111222ab7e47c8eb9d4140afea57fc2ce9210e325f4e07ce05035445c0cf23cb8035c106334114efd621e60664dbb9cf0b0672f4dbfd385ca0591068", 0xf8}, {&(0x7f00000008c0)="25b16281b762b04f3a5872fd1dea10bf225b6509fac932096944274ba1fe7bd95b19cf4efb3307f67ff42b5371d241635230905d6a3e32ca9a9f18b8bcc5fcff6e0acfb94fa4c41188fe81be68cae90834bacae98c87d1772465e8d1db9425063440ad56d0ccbe5568aa29608ac3b317710e6955386e0462b94f43b9c16f3de7189152c09573d73aa37d5f0693a0e56518d1c60413506007394a07e4e0", 0x9d}, {&(0x7f0000000980)="86d6dd5eddf6cca3bd5c0e7a863bd7d19e0027a146754e322fb1db98da0125d54490", 0x22}, {&(0x7f00000009c0)="01f53e2c2e1612d01cef74af03ed9453", 0x10}, {&(0x7f0000000a00)="f16756cacf0b6d6460cbabfb3a84b59ff7786c911365e5e2333c35b9d5a1f37febb1806e4064b982739b7a2a6c7fbb4cec21ad3a1b67f9a9924333b9c39728f90d62e553c354fe8700a5483378efea83f2725cac05cdf5b53e86c0aef7097dbddf57f90de7e06e6f", 0x68}], 0x5) fcntl$getflags(0xffffffffffffffff, 0x3) msync(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1) chflags(&(0x7f0000000b00)='./file0\x00', 0x0) ioctl$WSDISPLAYIO_GETEMULTYPE(r1, 0xc014575e, &(0x7f0000000b40)={0xfffffffd, './file0aaaaaaaaa'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b80)={0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000bc0)=@file={0x1, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}, 0x209) setsockopt$sock_int(r4, 0xffff, 0x80, &(0x7f0000000e00)=0x8000, 0x4) rename(&(0x7f0000000e40)='./file0\x00', &(0x7f0000000e80)='./file0aaaaaaaaa\x00') ioctl$BIOCGSTATS(r1, 0x4008426f, &(0x7f0000000ec0)) ioctl$WSKBDIO_GETBACKLIGHT(r0, 0x400c5711, &(0x7f0000000f00)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000f40)) mquery(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x0, r3, 0x848) 180.783332ms ago: executing program 4 (id=35): ktrace(0x0, 0x2, 0x13a, 0xffffffffffffffff) 180.382628ms ago: executing program 4 (id=36): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000140)=""/246) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000240)={{0x4, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x7}, 0x5, 0xfffc, 0x0, 0x0, 0x2, 0x4, 0x8000007fffffffe}) shmat(r0, &(0x7f0000001000/0x3000)=nil, 0x0) sysctl$kern(&(0x7f0000000100)={0x1, 0x58}, 0x2, &(0x7f00000011c0)="71f91e34", &(0x7f0000000080)=0x4, 0x0, 0x0) 180.195936ms ago: executing program 4 (id=37): syz_emit_ethernet(0x2e, &(0x7f0000000140)={@local, @empty, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x16, 0x20, 0x68, 0x0, 0x2, 0xc, 0x0, @empty, @multicast1, {[@rr={0x7, 0x3, 0x3}]}}, @udp={{0x0, 0x0, 0x8}}}}}}) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x62}) r0 = syz_open_pts() close(r0) syz_open_pts() ioctl$FIONREAD(r0, 0x4004667f, 0x0) mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 177.531267ms ago: executing program 5 (id=38): r0 = getgid() fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f00000000c0)={0x0, 0x4, 0x6, 0x100010000000a}) (async) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f00000000c0)={0x0, 0x4, 0x6, 0x100010000000a}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0x37) setregid(r0, r0) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x62}) r1 = syz_open_pts() close(r1) r2 = syz_open_pts() ioctl$FIONREAD(r2, 0x4004667f, &(0x7f0000000000)) (async) ioctl$FIONREAD(r2, 0x4004667f, &(0x7f0000000000)) ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000040)={0x0, 0xcf, 0xd, 0x203519, "1bb7e60ab87aa57800000000d0d200000000fd00"}) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000100)="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", 0x6ac}, {&(0x7f00000007c0)="02a40bd452f8cca8759f6cc2b36d3ceb7c89c96bbbb392536a9decc786fd3494a4debed83f09c62c86545ea7858ca19efbc8515bfed71b170a7f0ed2b077371647c04b890380df672224d197e3991a80dca8ca34b422b42d64087abd8177e76aeb291ba76edde38d11a67e41d18e16d9d441214d313b4f5bcabab8", 0x7b}], 0x2) (async) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000100)="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", 0x6ac}, {&(0x7f00000007c0)="02a40bd452f8cca8759f6cc2b36d3ceb7c89c96bbbb392536a9decc786fd3494a4debed83f09c62c86545ea7858ca19efbc8515bfed71b170a7f0ed2b077371647c04b890380df672224d197e3991a80dca8ca34b422b42d64087abd8177e76aeb291ba76edde38d11a67e41d18e16d9d441214d313b4f5bcabab8", 0x7b}], 0x2) fcntl$dupfd(r2, 0xa, r2) (async) r3 = fcntl$dupfd(r2, 0xa, r2) setsockopt$inet_opts(r3, 0x0, 0x1, &(0x7f0000000840)="0f23eefbc861c71737c9376fc93c78172564d89ba23b5d44d44a84cd6663dd0399a83dc75d811594a795498935a7ea872800a615776f10c223a312aeee94f3809b498929db5b071a88f1d49e17810304e7", 0x51) 6.293252ms ago: executing program 3 (id=39): mkdir(&(0x7f0000000080)='./file0\x00', 0x0) (async, rerun: 32) chmod(&(0x7f0000000140)='./file0\x00', 0x3ea) (rerun: 32) chdir(&(0x7f0000000100)='./file0\x00') (async) mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) (async) rename(&(0x7f0000000980)='./file0\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) chmod(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x50) (async, rerun: 32) mkdir(&(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xac) (rerun: 32) 5.701979ms ago: executing program 4 (id=40): mknod(&(0x7f00000000c0)='./file0\x00', 0x1ffa, 0x0) socket$inet(0x2, 0x9c8ed1b0fca013ff, 0x80) socket(0x2, 0x400000000002, 0x8e) r0 = socket(0x18, 0x1, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0xb2, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xd11b}) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x8) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f0000000080), 0x1c, 0x0}, 0x0) sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b100050460000000000000002010000000000000cea10500fef900000000d3357ae320b37b673039d2d236073705ae04be38164991f7c8cf5f882b297be1aa5b236deb51e2f0ac7ebbc257699a5f139b672f4d335d223e7d026ba8af630037282102000000720fd38bfbb770c1f5a872c881ea6e69e0bb7600000000000200361b1257aea8c5000020", 0x89, 0x6, 0x0, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendmsg$unix(r0, &(0x7f0000001700)={0x0, 0x32, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x2, 0x65) r1 = kqueue() r2 = syz_open_pts() ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f00000001c0)={0x4006, 0x8, 0xffffffde, 0x5, "100000e500", 0xfffffffc, 0xe}) ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f00000019c0)={0xfffffffc, 0xfffffffe, {[0xfffffffffffffffc, 0x8, 0x5, 0x100000000, 0x0, 0x5, 0x80000000, 0x0, 0x0, 0x2f01, 0x3, 0x3, 0x2, 0x1, 0x4, 0x0, 0xfffffffffffffff7, 0x8], [0x6, 0x5, 0xfffffffffffffff8, 0x10000000, 0x10001, 0x80000000, 0x0, 0x5, 0x0, 0x47], [0x80, 0x2, 0x6, 0x8, 0x0, 0x0, 0xfffffffffffffffe], [0x3, 0x1fffffffffc, 0x28ec, 0x100000002, 0xfffffffffffffffe], [{0x0, 0xc, 0x4, 0xe}, {0x2, 0xffffffff, 0xfffffffd, 0x803}, {0x0, 0xfffffffd, 0xfffffffe, 0xffc}, {0x1008, 0x0, 0xa, 0xfffffffffffffffe}, {0x0, 0x400, 0xd, 0x10000000040}, {0x7ffe, 0x10002000, 0x40003, 0xffffffff}, {0xfffe, 0x0, 0x8}, {0xfffd, 0x85b, 0x4, 0x10}], {0x0, 0x3, 0x0, 0x849}, {0x201, 0x10, 0x8, 0x2}}}) kevent(r1, &(0x7f00000000c0), 0x138, 0x0, 0xffffffff, 0x0) r3 = open(&(0x7f0000000000)='./file0\x00', 0x9cab835cfdc52675, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0xa011, r3, 0x0) ftruncate(r3, 0x79c8) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f00000000c0), 0x1c, 0x0}, 0x0) ioctl$WSMUXIO_INJECTEVENT(r3, 0x80185760, &(0x7f0000000140)={0x0, 0x0, {0x10001, 0x7}}) r4 = socket(0x18, 0x2, 0x0) connect$unix(r4, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) getsockname$inet(r4, &(0x7f00000000c0), &(0x7f0000000380)=0xffffffffffffff24) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r5 = socket(0x18, 0x1, 0x0) close(r5) socket(0x18, 0x2, 0x0) 5.404013ms ago: executing program 3 (id=41): r0 = socket(0x2, 0x2, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1001, &(0x7f0000000100)=0x20001, 0x4) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x186) r1 = open(&(0x7f0000000040)='./file0\x00', 0x200, 0x50) r2 = open$dir(&(0x7f0000000040)='./file0\x00', 0x201, 0x80) getitimer(0x0, 0xfffffffffffffffe) pwritev(r2, &(0x7f00000003c0)=[{&(0x7f0000000380)="3389ed", 0xfe99}], 0x1, 0x3fffe) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) fcntl$lock(r4, 0x9, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x300000003}) fcntl$lock(r3, 0x9, &(0x7f0000000040)={0x2, 0x1, 0x7, 0x100000003}) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x6f8, 0x0) fcntl$lock(r3, 0x9, &(0x7f0000000000)={0x2, 0x2, 0xffffffff00000000, 0x2fffffffc}) r5 = shmget$private(0x0, 0x2000, 0x5a3, &(0x7f0000004000/0x2000)=nil) shmat(r5, &(0x7f0000000000/0x1000)=nil, 0x2000) shmat(r5, &(0x7f0000ffc000/0x3000)=nil, 0x1800) preadv(r1, &(0x7f0000000340)=[{&(0x7f0000000240)=""/229, 0xe5}, {&(0x7f0000000400)=""/139, 0x8b}], 0x2, 0x0) connect$unix(r0, &(0x7f0000000000), 0x10) write(r0, &(0x7f0000000240)="14bdfa5d1d34e2fecb284a6498307dcda9aec43050036123339a346f737850551408753f95b7688ad4c4e1dd5489e7bafc58d3e5823757ae8b630719ef187ccad995f13dbe19a6dd4e6902bd8297b0799b426aabe9fad9db6996571c6d9f8bb5d542c2148aa42be940970fe88d34d8f99afe7e7820237400000000008000000100"/138, 0x20000) sysctl$kern(&(0x7f0000001540)={0x1, 0x12}, 0x2, 0x0, 0x0, 0x0, 0x0) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x62}) r6 = syz_open_pts() close(r6) syz_open_pts() ioctl$FIOASYNC(r6, 0x80047470, &(0x7f0000000000)=0x2) socket(0x800000018, 0x2, 0x0) ioctl$TIOCSTOP(r6, 0x2000746f) 4.0399ms ago: executing program 2 (id=42): open$dir(&(0x7f0000000000)='./file0\x00', 0x200, 0xd1) r0 = getpid() r1 = syz_open_pts() socket(0x18, 0x2, 0x0) socket(0x2, 0x400000000002, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x1, 0x13f) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) select(0x40, &(0x7f0000000100)={0x2d}, &(0x7f00000024c0)={0xda, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) r2 = semget(0x0, 0x2, 0x281) semop(r2, &(0x7f0000000000)=[{0x0, 0xfe78, 0x1000}], 0x1) semctl$SETALL(r2, 0x0, 0x9, &(0x7f0000000040)) setitimer(0x0, &(0x7f00000002c0)={{0x9, 0x7}, {0x4, 0x1000000000006}}, 0x0) getitimer(0x1, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x100000000000000, 0xffffffffffffffff}) r3 = socket(0x18, 0x2, 0x0) close(r3) unveil(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='r\x00') r4 = socket(0x18, 0x2, 0x0) connect$unix(r4, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x8) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x88, 0xfff9}, 0x0, 0x2}) connect$unix(r3, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) fcntl$lock(r1, 0x7, &(0x7f0000000040)={0x3, 0x0, 0x7fffffffffffffff, 0x1000200000000, r0}) sysctl$kern(&(0x7f0000000140)={0x1, 0x3a}, 0x2, &(0x7f0000000440)="71f91e347102000000000000007ea3e017ae9df0f69c1d7e1ddea900000000", &(0x7f0000000540)=0x1f, 0x0, 0x0) kqueue() writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000000)="d886b4", 0x3}], 0x1) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="89000000ffff000001"], 0x9}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) 3.501039ms ago: executing program 1 (id=43): msgctl$IPC_SET(0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x60}}) (async) r0 = socket(0x18, 0x1, 0x0) connect$unix(r0, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) (async) ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x1, [{0x2, 0x800}, {0x0, 0xfffffffc}, {0x0, 0x7fff}, {0x1}, {}, {0x2, 0x9}, {0x3}, {}, {0x0, 0x1}, {0x2, 0x1}, {0x0, 0x2}, {0x0, 0x6}, {0x1}, {}, {}, {0x1, 0x5}, {0x0, 0x6}, {0x1, 0xacc4}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {0x1, 0x9}, {0x0, 0x3}, {}, {0x3, 0x800}, {}, {0x3, 0x5}, {0x3, 0x1}, {}, {0x2, 0x8001}, {0x2, 0x4}]}) sendto(0xffffffffffffffff, 0x0, 0x58, 0x0, &(0x7f0000000080)=@in6={0x18, 0x3, 0x0, 0x1ff}, 0xc) (async) r1 = socket(0x800000018, 0x1, 0x0) setsockopt$sock_int(r1, 0xffff, 0x1, &(0x7f00000000c0)=0x6, 0x4) (async) bind$unix(r1, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) (async) getsockname$inet(r1, 0x0, &(0x7f0000000040)) 0s ago: executing program 0 (id=44): r0 = getgid() mkdir(&(0x7f0000000080)='./file0\x00', 0x0) chmod(&(0x7f00000000c0)='./file0\x00', 0x3ea) chdir(&(0x7f0000000100)='./file0\x00') r1 = getpgrp() ktrace(0x0, 0x5, 0x112a, r1) setitimer(0xec5d2d4f8c16df6, 0x0, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) unveil(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='x\x00') msgctl$IPC_SET(0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, r0, 0x0, 0x0, 0xb0}}) r2 = socket(0x18, 0x1, 0x0) getgroups(0x4, &(0x7f0000000280)=[r0, r0, r0, r0]) setregid(r3, r0) getsockopt$sock_timeval(r2, 0xffff, 0x1006, &(0x7f0000000140), &(0x7f0000000240)=0x10) setrlimit(0x8, &(0x7f0000000100)={0x7, 0x54}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$FIONBIO(r5, 0x8004667e, &(0x7f0000000080)=0xfffffffa) readv(r4, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/50, 0xfd9f}], 0x2f) writev(r5, &(0x7f0000000200)=[{&(0x7f0000000100)="19", 0x3a4e1e905c56cdb7}], 0x1) setsockopt$sock_int(r2, 0xffff, 0x1, &(0x7f0000000080)=0x3, 0x4) connect$unix(r2, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.162' (ED25519) to the list of known hosts. panic: pool_do_get: shmpl free list modified: page 0xfffffd806bd2a000; item addr 0xfffffd806bd2aee0; offset 0x40=0x686b2a15 Stopped at db_enter+0x25: addq $0x8,%rsp TID PID UID PRFLAGS PFLAGS CPU COMMAND 443192 88151 32767 0x10 0 0 syz-executor *215770 23217 32767 0x10 0x4000000 1K syz-executor db_enter() at db_enter+0x25 panic(ffffffff833d85ba) at panic+0x1e5 pool_do_get(ffffffff838de200,1,ffff80003c485198) at pool_do_get+0x5ea pool_get(ffffffff838de200,1) at pool_get+0x149 shmget_allocate_segment(ffff80003c41a550,ffff80003c4853f0,1a3,ffff80003c485340) at shmget_allocate_segment+0x1a7 sys_shmget(ffff80003c41a550,ffff80003c4853f0,ffff80003c485340) at sys_shmget+0x1b2 syscall(ffff80003c4853f0) at syscall+0xb08 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7914e879a10, count: 7 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{1}> ddb{1}> set $lines = 0 ddb{1}> set $maxwidth = 0 ddb{1}> show panic *cpu1: pool_do_get: shmpl free list modified: page 0xfffffd806bd2a000; item addr 0xfffffd806bd2aee0; offset 0x40=0x686b2a15 ddb{1}> trace db_enter() at db_enter+0x25 panic(ffffffff833d85ba) at panic+0x1e5 pool_do_get(ffffffff838de200,1,ffff80003c485198) at pool_do_get+0x5ea pool_get(ffffffff838de200,1) at pool_get+0x149 shmget_allocate_segment(ffff80003c41a550,ffff80003c4853f0,1a3,ffff80003c485340) at shmget_allocate_segment+0x1a7 sys_shmget(ffff80003c41a550,ffff80003c4853f0,ffff80003c485340) at sys_shmget+0x1b2 syscall(ffff80003c4853f0) at syscall+0xb08 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7914e879a10, count: -8 ddb{1}> show registers rdi 0 rsi 0x1 rbp 0xffff80003c484fd0 rbx 0xffff8000299dedd7 rdx 0xffff80000143c880 rcx 0xffff80003c41a550 rax 0xffff8000299ddff0 r8 0x101010101010101 r9 0x8080808080808080 r10 0xec265f3c7743ca1e r11 0xf1cfdf37ed3bc91b r12 0xffff8000299debd8 r13 0 r14 0 r15 0x1 rip 0xffffffff812833a5 db_enter+0x25 cs 0x8 rflags 0x246 rsp 0xffff80003c484fc0 ss 0x10 db_enter+0x25: addq $0x8,%rsp ddb{1}> show proc PROC (syz-executor) tid=215770 pid=23217 tcnt=2 stat=onproc flags process=10 proc=4000000 runpri=32, usrpri=50, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff80003c41b9d0,0xffff80003c41bc70 process=0xffff8000fffe66e0 user=0xffff80003c480000, vmspace=0xfffffd806c340d50 estcpu=1, cpticks=1, pctcpu=0.0, user=0, sys=1, intr=0 ddb{1}> ps PID TID PPID UID S FLAGS WAIT COMMAND 88151 443192 4669 32767 7 0x10 syz-executor 34773 375981 55215 32767 2 0x10 syz-executor 34773 414436 55215 32767 3 0x4000090 fsleep syz-executor 23217 56865 84061 32767 2 0x10 syz-executor *23217 215770 84061 32767 7 0x4000010 syz-executor 4614 330869 24178 32767 2 0x10 syz-executor 4614 353850 24178 32767 3 0x4000090 fsleep syz-executor 76992 201646 8856 32767 2 0x10 syz-executor 76992 441031 8856 32767 3 0x4000090 fsleep syz-executor 76992 203941 8856 32767 3 0x4000090 fsleep syz-executor 98766 309148 44817 32767 3 0x90 nanoslp syz-executor 98766 175489 44817 32767 2 0x4000010 syz-executor 98766 156815 44817 32767 3 0x4000090 fsleep syz-executor 98766 211162 44817 32767 3 0x4000090 fsleep syz-executor 21920 279646 86418 32767 2 0x10 syz-executor 21920 413834 86418 32767 3 0x4000090 fsleep syz-executor 21920 152885 86418 32767 3 0x4000090 fsleep syz-executor 21920 430161 86418 32767 3 0x4000090 fsleep syz-executor 73419 298279 0 0 3 0x14200 bored sosplice 55215 449292 78531 32767 3 0x90 nanoslp syz-executor 24178 231516 69326 32767 3 0x90 nanoslp syz-executor 84061 138486 87050 32767 3 0x90 nanoslp syz-executor 18576 188149 74834 32767 3 0x10 biowait syz-executor 8856 123897 60581 32767 3 0x90 nanoslp syz-executor 86418 142608 12253 32767 3 0x90 nanoslp syz-executor 44817 206573 19574 32767 3 0x90 nanoslp syz-executor 4669 108031 82345 32767 3 0x90 nanoslp syz-executor 19574 91101 94151 0 3 0x82 wait syz-executor 12253 275265 94151 0 3 0x82 wait syz-executor 60581 60994 94151 0 3 0x82 wait syz-executor 69326 474018 94151 0 3 0x82 wait syz-executor 87050 301549 94151 0 3 0x82 wait syz-executor 78531 138158 94151 0 3 0x82 wait syz-executor 82345 335596 94151 0 3 0x82 wait syz-executor 74834 347175 94151 0 3 0x82 wait syz-executor 94151 418471 46906 0 3 0x82 kqread syz-executor 46906 206521 39632 0 3 0x10008a sigsusp ksh 39632 206091 68888 0 3 0x98 kqread sshd-session 68888 267378 67380 0 3 0x92 kqread sshd-session 20573 166506 1 0 3 0x100083 ttyin getty 67380 81262 1 0 3 0x88 kqread sshd 37122 70968 44801 73 3 0x1100090 kqread syslogd 44801 330642 1 0 3 0x100082 sbwait syslogd 87969 486834 1 0 3 0x100080 kqread resolvd 30787 292333 83234 77 3 0x100092 kqread dhcpleased 98189 353450 83234 77 3 0x100092 kqread dhcpleased 83234 456245 1 0 3 0x80 kqread dhcpleased 48614 53594 0 0 3 0x14200 bored smr 75220 29624 0 0 2 0x14200 zerothread 50692 97802 0 0 3 0x14200 aiodoned aiodoned 14962 234263 0 0 3 0x14200 syncer update 70190 107274 0 0 3 0x14200 cleaner cleaner 80947 402498 0 0 3 0x14200 reaper reaper 40902 49636 0 0 3 0x14200 pgdaemon pagedaemon 17458 438875 0 0 3 0x14200 bored viomb 93078 313633 0 0 3 0x40014200 acpi0 acpi0 91462 476177 0 0 3 0x40014200 idle1 5667 362270 0 0 3 0x14200 bored softnet3 19288 461409 0 0 3 0x14200 bored softnet2 34071 173854 0 0 3 0x14200 bored softnet1 58939 269839 0 0 3 0x14200 bored softnet0 90695 285061 0 0 3 0x14200 bored systqmp 56365 124072 0 0 3 0x14200 bored systq 95434 438693 0 0 3 0x14200 tmoslp softclockmp 66156 342053 0 0 3 0x40014200 tmoslp softclock 22485 121919 0 0 3 0x40014200 idle0 1 445541 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb{1}> show all locks CPU 1: exclusive mutex shmpl r = 0 (0xffffffff838de218) #0 witness_lock+0x5bb #1 mtx_enter_try+0x1ad #2 mtx_enter+0x62 #3 pool_get+0x10b #4 shmget_allocate_segment+0x1a7 #5 sys_shmget+0x1b2 #6 syscall+0xb08 #7 Xsyscall+0x128 Process 88151 (syz-executor) thread 0xffff80003c41bc60 (443192) exclusive rwlock amaplk r = 0 (0xfffffd80796b0d18) #0 witness_lock+0x5bb #1 rw_do_enter_write+0x377 #2 uvm_fault_check+0x5a9 #3 uvm_fault+0x106 #4 upageflttrap+0xa9 #5 usertrap+0x3e3 #6 recall_trap+0x8 shared rwlock vmmaplk r = 0 (0xfffffd806c3408b0) #0 witness_lock+0x5bb #1 rw_do_enter_read+0x36e #2 uvmfault_lookup+0x122 #3 uvm_fault_check+0x4a #4 uvm_fault+0x106 #5 upageflttrap+0xa9 #6 usertrap+0x3e3 #7 recall_trap+0x8 Process 23217 (syz-executor) thread 0xffff80003c41a550 (215770) exclusive kernel_lock &kernel_lock r = 0 (0xffffffff8396f670) #0 witness_lock+0x5bb #1 syscall+0xae6 #2 Xsyscall+0x128 exclusive mutex shmpl r = 0 (0xffffffff838de218) #0 witness_lock+0x5bb #1 mtx_enter_try+0x1ad #2 mtx_enter+0x62 #3 pool_get+0x10b #4 shmget_allocate_segment+0x1a7 #5 sys_shmget+0x1b2 #6 syscall+0xb08 #7 Xsyscall+0x128 Process 18576 (syz-executor) thread 0xffff8000ffff1c48 (188149) exclusive rrwlock inode r = 0 (0xfffffd806c1a60e0) #0 witness_lock+0x5bb #1 rw_do_enter_write+0x377 #2 rrw_enter+0xc6 #3 VOP_LOCK+0xa6 #4 ufs_ihashins+0x4f #5 ffs_vget+0x187 #6 ffs_inode_alloc+0x283 #7 ufs_mkdir+0x113 #8 VOP_MKDIR+0x102 #9 domkdirat+0x179 #10 syscall+0xb08 #11 Xsyscall+0x128 exclusive rrwlock inode r = 0 (0xfffffd807e44cac0) #0 witness_lock+0x5bb #1 rw_do_enter_write+0x377 #2 rrw_enter+0xc6 #3 VOP_LOCK+0xa6 #4 vn_lock+0xa4 #5 vfs_lookup+0x109 #6 namei+0x7aa #7 domkdirat+0x8b #8 syscall+0xb08 #9 Xsyscall+0x128 ddb{1}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 10188 10955K 10967K 166960K 11266 0 pcb 17 12K 12K 166960K 17 0 rtable 236 6K 6K 166960K 347 0 pf 31 16K 16K 166960K 31 0 ifaddr 42 7K 7K 166960K 44 0 ifgroup 50 2K 2K 166960K 50 0 sysctl 1 1K 9K 166960K 5 0 counters 68 36K 36K 166960K 68 0 ioctlops 0 0K 2K 166960K 29 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1334 84K 84K 166960K 1350 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 3 5K 9K 166960K 5 0 VM map 2 1K 1K 166960K 2 0 sem 7 0K 0K 166960K 9 0 dirhash 12 2K 2K 166960K 15 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 25 93K 129K 166960K 181 0 proc 58 79K 127K 166960K 476 0 subproc 72 4K 4K 166960K 72 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 10 0 in_multi 99 7K 7K 166960K 100 0 ether_multi 1 0K 0K 166960K 1 0 mrt 1 0K 0K 166960K 1 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 55 254K 254K 166960K 55 0 exec 0 0K 1K 166960K 339 0 fusefs mount 1 32K 32K 166960K 1 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 257 169K 179K 166960K 3073 0 UVM aobj 8 2K 2K 166960K 9 0 pinsyscall 46 92K 115K 166960K 1173 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 NDP 15 0K 2K 166960K 27 0 temp 35 8682K 8747K 166960K 3816 0 kqueue 14 22K 25K 166960K 31 0 SYN cache 2 16K 16K 166960K 2 0 ddb{1}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 26 0 0 1 0 1 1 0 8 0 rtpcb 120 36 0 32 1 0 1 1 0 8 0 rtentry 176 112 0 1 6 0 6 6 0 8 0 unpcb 144 52 0 37 1 0 1 1 0 8 0 syncache 336 3 0 3 1 0 1 1 0 8 1 tcpcb 736 16 0 10 1 0 1 1 0 8 0 arp 128 18 0 0 1 0 1 1 0 8 0 inpcb 328 83 0 72 2 0 2 2 0 8 0 nd6 144 25 0 0 1 0 1 1 0 8 0 kcovpl 48 8 0 0 1 0 1 1 0 8 0 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 455 0 0 29 0 29 29 0 8 0 art_table 32 456 0 0 4 0 4 4 0 8 0 art_node 16 111 0 10 1 0 1 1 0 8 0 semupl 112 1 0 1 1 0 1 1 0 8 1 semapl 112 6 0 1 1 0 1 1 0 8 0 shmpl 112 6 0 1 1 0 1 1 0 8 0 pool(0xffffffff838de200:shmpl): page inconsistency: page 0xfffffd806bd2a000; 29 on list, 5 missing, 35 items per page dirhash 1024 19 0 2 3 0 3 3 0 8 0 dino2pl 256 1599 0 91 95 0 95 95 0 8 0 ffsino 288 1599 0 91 108 0 108 108 0 8 0 nchpl 144 1841 0 163 63 0 63 63 0 8 0 uvmvnodes 80 1680 0 0 35 0 35 35 0 8 0 vnodes 216 1680 0 0 94 0 94 94 0 8 0 namei 1024 5525 0 5524 2 0 2 2 0 8 1 percpumem 16 49 0 0 1 0 1 1 0 8 0 kstatmem 264 24 0 0 2 0 2 2 0 8 0 scxspl 216 5933 0 5932 3 1 2 2 1 8 1 plimitpl 152 72 0 48 2 0 2 2 0 8 1 sigapl 424 452 0 396 8 0 8 8 0 8 0 knotepl 120 274 0 0 9 0 9 9 0 8 0 kqueuepl 224 35 0 23 1 0 1 1 0 8 0 pipepl 336 97 0 70 3 0 3 3 0 8 0 fdescpl 520 433 0 396 4 0 4 4 0 8 0 filepl 160 1544 0 1327 10 0 10 10 0 8 0 lockfpl 104 15 0 10 1 0 1 1 0 8 0 lockfspl 48 8 0 4 1 0 1 1 0 8 0 sessionpl 144 21 0 5 1 0 1 1 0 8 0 pgrppl 48 29 0 5 1 0 1 1 0 8 0 ucredpl 104 126 0 107 1 0 1 1 0 8 0 zombiepl 144 396 0 396 1 0 1 1 0 8 1 processpl 1240 452 0 396 5 0 5 5 0 8 0 procpl 656 526 0 459 7 0 7 7 0 8 0 sosppl 168 2 0 2 1 0 1 1 0 8 1 sockpl 728 171 0 141 4 0 4 4 0 8 0 mcl8k 8192 2 0 0 1 0 1 1 0 8 0 mcl4k 4096 131 0 0 17 0 17 17 0 8 0 mcl2k 2048 34 0 0 5 0 5 5 0 8 0 mtagpl 96 1 0 0 1 0 1 1 0 8 0 mbufpl 256 231 0 0 15 0 15 15 0 8 0 bufpl 280 2282 0 116 155 0 155 155 0 8 0 anonpl 32 6418 0 0 52 0 52 52 0 246 0 amapchunkpl 152 8864 0 8175 29 0 29 29 0 158 0 amappl16 200 1159 0 1073 5 0 5 5 0 8 0 amappl15 192 5 0 5 2 1 1 1 0 8 1 amappl14 184 101 0 91 1 0 1 1 0 8 0 amappl13 176 6 0 6 2 1 1 1 0 8 1 amappl12 168 1031 0 993 3 0 3 3 0 8 0 amappl11 160 51 0 41 1 0 1 1 0 8 0 amappl10 152 5 0 5 2 1 1 1 0 8 1 amappl9 144 252 0 252 1 0 1 1 0 8 1 amappl8 136 18 0 17 1 0 1 1 0 8 0 amappl7 128 104 0 94 1 0 1 1 0 8 0 amappl6 120 178 0 175 1 0 1 1 0 8 0 amappl5 112 115 0 109 1 0 1 1 0 8 0 amappl4 104 265 0 250 1 0 1 1 0 8 0 amappl3 96 1423 0 1293 4 0 4 4 0 8 0 amappl2 88 584 0 530 2 0 2 2 0 8 0 amappl1 80 7794 0 7222 14 0 14 14 0 8 0 amappl 88 2461 0 2270 5 0 5 5 0 92 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 8 0 1 1 0 1 1 0 8 0 uaddrrnd 24 433 0 396 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 433 0 396 1 0 1 1 0 8 0 vmmpekpl 168 4975 0 4938 2 0 2 2 0 8 0 vmmpepl 168 32863 0 30718 97 0 97 97 0 357 0 vmsppl 480 432 0 396 7 1 6 6 0 8 0 rwobjpl 72 12900 0 10309 48 0 48 48 0 8 0 pdppl 4096 873 0 792 109 16 93 99 0 8 12 pvpl 32 13377 0 0 109 1 108 108 0 265 0 pmappl 256 432 0 396 4 1 3 3 0 8 0 extentpl 40 45 0 27 1 0 1 1 0 8 0 phpool 112 397 0 19 11 0 11 11 0 8 0 ddb{1}> machine ddbcpu 0 Stopped at x86_ipi_db+0x27: addq $0x8,%rsp x86_ipi_db(ffffffff83824ff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __mp_lock(ffffffff8396f468) at __mp_lock+0x199 intr_handler(ffff8000363e7f80,ffff800000079a80) at intr_handler+0xe1 Xintr_ioapic_edge23_untramp() at Xintr_ioapic_edge23_untramp+0x18f __sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc+0x2c __mp_lock(ffffffff8396f468) at __mp_lock+0x1a3 syscall(ffff8000363e8160) at syscall+0xae6 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7ac439f0bdc0, count: 5 ddb{0}> trace x86_ipi_db(ffffffff83824ff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __mp_lock(ffffffff8396f468) at __mp_lock+0x199 intr_handler(ffff8000363e7f80,ffff800000079a80) at intr_handler+0xe1 Xintr_ioapic_edge23_untramp() at Xintr_ioapic_edge23_untramp+0x18f __sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc+0x2c __mp_lock(ffffffff8396f468) at __mp_lock+0x1a3 syscall(ffff8000363e8160) at syscall+0xae6 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7ac439f0bdc0, count: -10 ddb{0}> machine ddbcpu 1 Stopped at db_enter+0x25: addq $0x8,%rsp db_enter() at db_enter+0x25 panic(ffffffff833d85ba) at panic+0x1e5 pool_do_get(ffffffff838de200,1,ffff80003c485198) at pool_do_get+0x5ea pool_get(ffffffff838de200,1) at pool_get+0x149 shmget_allocate_segment(ffff80003c41a550,ffff80003c4853f0,1a3,ffff80003c485340) at shmget_allocate_segment+0x1a7 sys_shmget(ffff80003c41a550,ffff80003c4853f0,ffff80003c485340) at sys_shmget+0x1b2 syscall(ffff80003c4853f0) at syscall+0xb08 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7914e879a10, count: 7 ddb{1}> trace db_enter() at db_enter+0x25 panic(ffffffff833d85ba) at panic+0x1e5 pool_do_get(ffffffff838de200,1,ffff80003c485198) at pool_do_get+0x5ea pool_get(ffffffff838de200,1) at pool_get+0x149 shmget_allocate_segment(ffff80003c41a550,ffff80003c4853f0,1a3,ffff80003c485340) at shmget_allocate_segment+0x1a7 sys_shmget(ffff80003c41a550,ffff80003c4853f0,ffff80003c485340) at sys_shmget+0x1b2 syscall(ffff80003c4853f0) at syscall+0xb08 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7914e879a10, count: -8