last executing test programs: 5.702012171s ago: executing program 7 (id=8): r0 = syz_open_pts() ioctl$TIOCNOTTY(r0, 0x20007471) ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000000)={0x4, 0x1, 0x7, 0x3, "47ea111042fea213e6c809b7154f1175efc5ed90", 0x9, 0x9}) ioctl$TIOCFLUSH(r0, 0x80047410, &(0x7f0000000040)=0xcf5e) ioctl$TIOCSTOP(r0, 0x2000746f) ioctl$TIOCGETD(r0, 0x4004741a, &(0x7f0000000080)) ioctl$TIOCGWINSZ(r0, 0x40087468, &(0x7f00000000c0)) r1 = openat$tty(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) ioctl$TIOCCBRK(r1, 0x2000747a) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3, 0x4010, r1, 0x4) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) ioctl$TIOCMBIC(r2, 0x8004746b, &(0x7f0000000180)=0x40004) getpid() ioctl$TIOCSDTR(r1, 0x20007479) ioctl$BIOCSDLT(r3, 0x8004427a, &(0x7f00000001c0)) ioctl$TIOCMGET(r1, 0x4004746a, &(0x7f0000000200)) ioctl$FIONBIO(r2, 0x8004667e, &(0x7f0000000240)=0x31e8cc05) r4 = syz_open_pts() ioctl$TIOCGTSTAMP(r4, 0x4010745b, &(0x7f0000000280)) ioctl$TIOCCHKVERAUTH(r4, 0x2000741e) ioctl$KDMKTONE(r3, 0x20004b08, &(0x7f00000002c0)=0x3ff) r5 = openat$pf(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0) ioctl$TIOCSCTTY(r5, 0x20007461) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000340)="bc37744c061a882e638e1a66e3c66f7eb4afc4352b1e7286226a9e07c1b50edd71e2a34f95bf0f7797c758c4d94785690c57272bbdf4463c9037a6e1a388907b9636ebd446615ffbaa570c248933a94bcd00426244b7dc849f0e4a69632191b027b0bb065a1ebdb9c8ee726da45aadb761e251aa9e58e6e398c2cb41fd56c5d81280e0f42767320594f97de9ab5d6ba1d26b879ce006414faa4c669597b87a83a69dd3c43c632c248e8efbc5298d054849ea651f3ad57fbb37b2bc7856c6e670fa8981081652d21546d004b84182", 0xce}, {&(0x7f0000000440)="fb5bd75862ce10825490615f8806b8954f1abb06ab8951c7199dc8d69d5c5595afa691d7ff43c8a04c2ec5efa2b5b554af6e23a1e5d870a88c7e34809e4c89a318ad2bc5aab46a76ac826eaac558fe6c032923bfeed3bdaa2587f042325391f282b3c3", 0x63}, {&(0x7f00000004c0)="bfad71f54cb033fd873f355800cae1fc15278fd02456ef6a6b", 0x19}, {&(0x7f0000000500)="d8f27812985f18820218c1bacb36b43782069633bba5177a54d01768595edbf7a6186b61bb5cdbd43b775b70fdc9d7d117972ffb82f028bd8a6b1271caa6b466bd5b3aa8d5bdd797cc935061a57fc5671f9c328e23ce1047ca522704a8a6202d1656eb34bcbd7269adf03d88c205539f45af41843d2dbde930a1a187ddc56b52e75be63ddeec885a2f599fee418a0a60c09e0ea9373970fec2", 0x99}], 0x4) pread(r0, &(0x7f0000000600)="fdab49a6c90bec14b96f84d73f965e79988f5d79dbeffe155e25c0f4f2c490461ec79b061923bb77de44b3ceefe4af1de05cbe680dbda3617a8afdbc793c061e09c50baad103306fad2cd54f70a7bdfea462abe547361cc446a670eb7ed8564bbac1d11edf328b3750be26a2d1daa0f37aa67527797e65c8883f6f7bfbea62a1781d5626431f3b0adef5da3c022b8d6527e3f883b59fae82fcc47c55f1028f0bde6c8bba97096112fb8e07009189ac1fbb35522d", 0xb4, 0x0) socket$unix(0x1, 0x2, 0x0) ioctl$TIOCOUTQ(r3, 0x40047473, &(0x7f00000006c0)=0x7) setsockopt$inet_opts(r3, 0x0, 0x0, &(0x7f0000000700)="f5eaa457fd3d9d96251d00f8fee686667a995da560794e8eecd2d76a72058cc540c1ac11a741c7df5e54849f05967af9a8abaf14cb5cd0e02139d8a28f35791a01b96f3d5fd133f953c70f365446c5fbcf1f4a75fadae218330e6c0ad2643d912ea8ae29c73d11ecf0df13f86e1d2c68321f4cd63542b2a75b8d24489ad9cdcb03c284f6017ebc426c03f7130c26be7afcfa2059a27a3b232a695d9c13b3", 0x9e) openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f00000007c0), 0x800, 0x0) ioctl$TIOCSETD(r4, 0x8004741b, &(0x7f0000000800)=0x1) 4.10032218s ago: executing program 5 (id=47): getpid() (async, rerun: 64) sysctl$vm(&(0x7f0000000000)={0x2, 0x1}, 0x2, 0x0, 0x0, 0x0, 0x0) (rerun: 64) 3.974021964s ago: executing program 5 (id=48): sysctl$net_inet_ipip(&(0x7f0000000300)={0xa}, 0x4, 0x0, 0x0, 0x0, 0x0) (async) ioctl$TIOCSTSTAMP(0xffffffffffffffff, 0x8008745a, &(0x7f0000000040)={0xe89, 0x3}) (async) syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) (async) r0 = socket(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0xffff, 0x100, &(0x7f0000000180)=0x8, 0x4) syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) (async) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) connect$unix(r0, &(0x7f0000000000), 0x10) (async) write(r0, &(0x7f0000000240)="14bdfa5d1d34e2fecb284a6498307dcda9aec43050036123339a346f737850551408753f95b7688ad4c4e1dd5489e7bafc58d3e5823757ae8b630719ef187ccad995f13dbe19a6dd4e6902bd8297b0799b426aabe9fad9db6996571c6d9f8bb5d542c2148aa42be940970fe88d34d8f99afe7e7820237400000000008000000100"/138, 0xfc7e) (async) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1) (async) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) r1 = syz_open_pts() ioctl$TIOCCBRK(r1, 0x2000747a) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r2 = socket(0x2, 0x1, 0x0) fcntl$lock(0xffffffffffffffff, 0x9, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x100800000000000, 0xffffffffffffffff}) r3 = socket(0x18, 0x2, 0x0) close(r3) (async) r4 = socket(0x2, 0x1, 0x26) setsockopt(r4, 0x29, 0xe, &(0x7f0000000000)="02000000", 0x4) connect$unix(r3, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7, 0x1}, 0x8) (async) ioctl$TIOCFLUSH(0xffffffffffffff9c, 0x80047410, &(0x7f0000000100)=0x40) (async) connect$unix(r2, &(0x7f0000000000), 0x10) (async) r5 = openat$klog(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) fcntl$dupfd(r4, 0x0, r5) (async) setsockopt$inet_opts(r2, 0x0, 0x1, &(0x7f0000000040)="27913c11b3c9e91fbdf59c32417020e3a81e536e", 0x14) (async) sendto$inet(r2, &(0x7f0000000340)="3684af472a20605db56654444530db55e32d18a350e237a22b0d745c7cd16f2c2e6cb647d0873f17a747d211b2be7e453f4564729e305de8e574af453096e88646da6baaa50d472b39b49f3b65df72dd7476ae2aca133fe51fbbdbbe97b68e79031f519c3826089a324844a5b3f69c0ecd33fd9d74a964d8e657e19e37c2cd89240a6d1f7893df63e565f883034cbfcfa543ab37a17fd4a093b95cb5296a740fbe95f050d73865d9f4a8ac0414e52226087ad171763fa34dbf92634e7963880f9f29a36af63af1a22ff9da0fdd11a94334eceea718f513ff0362238f8d0fe597ea0704", 0xe3, 0x405, 0x0, 0x0) write(r2, &(0x7f0000000280)="d99aca90b9366c0642178c40c1d3cf306b7a66c62a47996bd165f6ba26b6711dea6129e6674a702251da5fab7be1a1ef4a2afdbf8bad62158635197f29724c185d1c9bf9dde95089119845b679d29cdf4673bc4bbe2d3b4f350a93bbf3b77c8e311f22c7f563a11bd5d87fec3b39097e888ef9202ba40eee494e01000000000000205ef0bba7f4913e0b56000000", 0x8e) 3.972745805s ago: executing program 5 (id=49): sysctl$kern(&(0x7f0000000040)={0x1, 0x16}, 0x2, 0x0, 0x0, 0x0, 0x0) (async) mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1) (async) r0 = msgget$private(0x0, 0x5bd) msgsnd(r0, &(0x7f0000000500)=ANY=[@ANYRESDEC], 0x401, 0x0) msgrcv(r0, &(0x7f0000000cc0)={0x0, ""/208}, 0xd8, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sysctl$hw(&(0x7f0000000040)={0x6, 0xf}, 0x2, &(0x7f0000000080), 0x0, 0x0, 0x0) 3.965828419s ago: executing program 5 (id=50): ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x0, [{0x2, 0x800}, {}, {0x0, 0x7fff}, {}, {}, {0x0, 0x9}, {0x1}, {}, {0x0, 0x1}, {0x2, 0x1}, {}, {0x0, 0x6}, {0x3}, {}, {}, {0x0, 0x5}, {0x0, 0x1}, {0x1}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x9}, {0x0, 0x9}, {}, {0x3, 0x800}, {}, {0x3}, {0x3}, {}, {0x2, 0x8001}, {0x0, 0x4}]}) (async) r0 = syz_open_pts() ioctl$TIOCSETAW(r0, 0x802c7415, &(0x7f0000000900)={0x8, 0xb, 0x9e, 0x9bb, "0b48a5a4ac1444c1e55496c0e21bf990bf7978d0", 0xffffffff, 0x8000}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x36}, 0x2, &(0x7f00000002c0)="71f91e3471ac0058bc5a00000000b34b8e5f84cf71dd9c7afec37082778b520e983c3842ffadcc7f34aa4e0975f674d999374ce93c23bb524503000000422a0c2f15ff43a3d55f9a328d3871fe667f045fdf41291783f1aaa8f28b83b2faa1aec33e857b05746d85a63493bc98308cdf92cca682eed6da47e631f5cdb48f9bf98ca7edd295f828514bde3ffd4ffbe2ea53f2b64e60e7bf97134481a88851f5a01b285129ec17c3043bbc63c093f550a6fdaa94676e84f5398b9a1cd739cf47831b7c431be5748cd97958551d2d533ec882c2c84e3578a6068b9c013942de6bbd9f2112cca97b799892ac24d813904cf3d226df51da014ec1270d8c0fa238701fcb4390417295495e7e2647acba0c02778a6907dc", &(0x7f0000000140)=0x114, 0x0, 0x0) 3.950480119s ago: executing program 5 (id=51): mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1) (async) munmap(&(0x7f0000ff7000/0x9000)=nil, 0x9000) (async) getrusage(0x0, &(0x7f0000000040)) 3.949598067s ago: executing program 5 (id=52): setrlimit(0x6, &(0x7f0000000000)={0x42, 0x63}) syz_extract_tcp_res(&(0x7f0000000040)={0x41424344, 0x41424344}, 0x80000000, 0x8) syz_extract_tcp_res$synack(&(0x7f0000000080)={0x41424344}, 0x1, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffff000000000000080045000040000001030000907800000000000000004e204e22", @ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="b0db000490780003021264040000130ddd1044f6a80000000300000000000000"]) syz_emit_ethernet(0x4a, &(0x7f0000000340)={@local, @broadcast, [], {@ipv6={0x86dd, {0x7, 0x6, "001410", 0x14, 0x0, 0x2, @empty, @local={0xfe, 0x80, '\x00', 0x0}, {[], @tcp={{0x0, 0x3, r1, 0x41424344, 0x0, 0x0, 0x5, 0x20, 0x1, 0x0, 0x5}}}}}}}) r2 = syz_open_pts() r3 = msgget$private(0x0, 0x1ba) msgsnd(r3, &(0x7f0000000040)=ANY=[@ANYRES32], 0x401, 0x0) msgsnd(r3, 0x0, 0x401, 0x0) msgrcv(r3, &(0x7f0000000080)={0x0, ""/150}, 0xc5, 0x1, 0x1800) close(r2) utimensat(0xffffffffffffffff, 0x0, &(0x7f0000004540)={{}, {0x1ff, 0x7fffffff}}, 0x0) lchown(0x0, 0x0, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) fcntl$lock(r4, 0x9, &(0x7f0000000040)={0x3, 0x1, 0x0, 0x1000300000004}) close(r2) openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0xe8, 0x0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) fcntl$lock(r5, 0x9, &(0x7f00000003c0)={0x0, 0x0, 0x7fffffffffffffff, 0x200000040}) r6 = syz_open_pts() writev(r6, &(0x7f00000001c0)=[{&(0x7f00000002c0)="5088e36ab09bae785e1b3b0e8c48dd80d569d4c64fec1681ee984d4c26fd6cce74cd15b15768557b731d6923257386fab527a502ba25c39b60495357ea59bba2f7b5d9b0ffd2e56562f2dfbbb4f7b16e3ecc6dcddc9505f195f035805e54256cc4ca3a56807163a0b687ddfa3cf9db891c9ff22f4c07584a9bb508b86e9fe95283f31c5a78687e4e22722ebfd33fc6", 0x8f}], 0x1) ioctl$TIOCSBRK(r2, 0x2000747b) ioctl$FIOASYNC(r2, 0x80047466, &(0x7f0000000200)=0x5) read(r2, &(0x7f0000000140)=""/106, 0x6a) 3.01822648s ago: executing program 6 (id=87): mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1) setrlimit(0x8, &(0x7f0000000000)={0x42, 0x62}) r0 = syz_open_pts() (async, rerun: 32) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000080)="76e5eac907f9ccf7a251ceddcec7d6aa45cffe2c63a56077123a276d3ba4e9d17eb3eb5db12a3783a8e0620d357de1fe04fa9465b5bd1286e9624dec06a00c222f", 0x41}], 0x1) (async, rerun: 32) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) (async) fcntl$lock(0xffffffffffffffff, 0x9, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x100800000000000, 0xffffffffffffffff}) r1 = socket(0x18, 0x2, 0x0) close(r1) socket(0x800000018, 0x1, 0x0) (async) bind$unix(r1, &(0x7f0000000200)=@abs={0x1, 0x0, 0x2}, 0x8) connect$unix(r1, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) (async, rerun: 32) r2 = socket(0x800000018, 0x1, 0x0) (rerun: 32) bind$unix(r2, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) (async) unveil(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='c\x00') (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) unveil(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000300)='W\x00') syz_open_pts() (async) syz_emit_ethernet(0x22, &(0x7f0000000000)={@broadcast, @remote, [], {@generic={0x6001, "ac19d125c79d6897be20cb7029fe5909645db3c1"}}}) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) select(0x40, &(0x7f0000000000)={0x1b, 0x6, 0x4, 0x8, 0x0, 0xfffffffffffffff5, 0x200, 0xfffffffffffffffc}, 0x0, 0x0, 0x0) write(r3, &(0x7f00000001c0)="ed", 0x1) recvmmsg(r4, &(0x7f0000000880)={&(0x7f0000000580)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f00000005c0)=""/196, 0xc4}], 0x1, 0x0}}, 0x10, 0x1862, 0x0) (async) close(r3) (async) pipe(&(0x7f0000000180)) select(0x40, &(0x7f0000000140)={0x7f, 0x8000000000000002, 0xf, 0x7, 0x8000000000000002, 0xffffffffffffd9b8, 0x20000000005, 0x8}, 0x0, 0x0, 0x0) (async) syz_open_pts() (async, rerun: 32) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) (rerun: 32) 2.978524215s ago: executing program 6 (id=89): r0 = socket(0x18, 0x2, 0x0) kevent(0xffffffffffffffff, &(0x7f0000000040)=[{{}, 0x0, 0x0, 0x0, 0x3}], 0x0, 0x0, 0x0, 0x0) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x11, 0x0, 0x2}, 0x6, &(0x7f0000000080), 0x0, 0x0, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0xb0}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x4) r1 = socket(0x18, 0x1, 0x0) connect$unix(r1, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) getsockname$inet(r1, &(0x7f00000000c0), &(0x7f0000000000)=0xffffffffffffff35) setsockopt$sock_timeval(0xffffffffffffffff, 0xffff, 0x0, &(0x7f00000000c0)={0x0, 0x1ff}, 0x10) recvfrom$inet(r0, &(0x7f0000000180)=""/11, 0xb, 0x40, &(0x7f0000000200)={0x2, 0x3}, 0xc) connect$unix(r0, &(0x7f0000000240)=@file={0x1, './file0\x00'}, 0xa) r2 = socket$inet6(0x18, 0x1, 0x1) getpeername$inet6(r2, &(0x7f0000000080), &(0x7f0000000140)=0xc) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r3 = socket(0x18, 0x1, 0x0) ioctl$FIONREAD(r3, 0x802069a6, &(0x7f00000001c0)) sendto$unix(r0, &(0x7f0000000400)="b10005040000040000c2030001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335dd4e3cc7d345f75e4b45c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221500f4e0f668246c0900000008e371a3ade937ac987d0185c21e6a2759015f1f74240acef9a16c41428db2bdf7448a40e7f2131df3ab9324925cd014278ce64189f721363c11eb60f099966d9ca40b15f37d33f2e11938bead9851d48da7e0f811ac7d079ad3f851ae47006701504b21ebdd0a0e6bee66bfaa9632f87f79dcb238fe063c68f98050791d3e576a2f556e1b65ab1eb7de9a0e8ac14e3e3252e7845848073b04aa16bccacd30932a4a3d434e6be0f236f50a4a31aaf72c179edee46a5c14852627d5d4aae6e11f8886dc30b656af35e91d02db493b58c1f95a646e3c7d003f20f56e9a3432c42b2a4004828a57f3029c06a055e8eaba81a8e82ba1ff6ca35fc52db4d39b524e2182c3cdab0da42f6fbabdd4429ed6b8bbbd78aa0dbb6032f45babd38368240eddfc77e6016eb54d1cd0184df5f040e51439df52b5530060ff8d920f20ca38e1adbf3d7fb5a2b09c7f4af9b4867fa0cfc1941b8575bb614476ce03af04f6ad74b3417dbaaf85f42037e7c8f96a04b87eab37cd2444d64f47d5d8fa88a718f273f0fb265f69f9c91b889c8de31d57134c9e715880bb1f480837c4bc468d1d7daea797a003bb7a0f1e041237cef0a45023deb78eb47eb06b71d72f6500bf8d3805a65851398377180af8c1d75c125cce37309cc727556fcba6276137fe9f5414bf2e5d08f673d1b8edac0590e7e5883ea3577ec31be61bbac4daac9b1d9f3fc6c583719ffd3620d13fe44f9a43e5b70cc9d763fc948fd2c94b176d80e25477b1d6b1c47d4123915cc4b86e9d2d6fa3668df793e1173033e8f873ad6e3f0d2576a73a93f593986e91363d900f514e", 0x2f6, 0x0, 0x0, 0x0) 2.974475881s ago: executing program 6 (id=91): r0 = socket(0x11, 0x3, 0x0) syz_emit_ethernet(0x26, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"]) (async) setsockopt(r0, 0x11, 0x2, &(0x7f0000000000), 0x4) (async) munmap(&(0x7f000000c000/0x4000)=nil, 0x4000) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (async, rerun: 32) setrlimit(0x8, &(0x7f0000000580)={0xa, 0x56}) (async, rerun: 32) r1 = syz_open_pts() close(r1) (async) r2 = syz_open_pts() ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f0000000000)={0x7fffffff, 0xfff, 0xffffdf84, 0x5, "1823d5ff7f0d01000400000400", 0x7ffffff8, 0xa}) writev(0xffffffffffffffff, &(0x7f0000000440), 0x0) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) r3 = socket(0x2, 0x1, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) (async) ioctl$FIONREAD(r3, 0x81286947, &(0x7f00000001c0)) (async) unveil(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000240)='x\x00') (async) open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x186) (async, rerun: 64) r4 = msgget$private(0x0, 0xfffffffffffffffd) (async, rerun: 64) r5 = msgget$private(0x0, 0x5bd) msgrcv(r5, 0x0, 0xffffffffffffff19, 0x0, 0x0) (async) msgrcv(r5, 0x0, 0x0, 0x1, 0x800) (async) msgsnd(r4, &(0x7f0000001140)=ANY=[@ANYBLOB="03"], 0xe9, 0x800) (async) clock_getres(0x6, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) writev(r6, &(0x7f0000000540)=[{&(0x7f0000000300)="2976ab4e33e4cd14691c1cb0b8fe33e2fc7d62ae8d07bdfec4aebc605d99b69a6a54c5903ba99d58c53853cf881bbb1f3c5fa02d4f8616384d5aa427f44920c9cc733bbd3170f434f4e8c1116db06e602cee9bce4254c7e1addee24c0a5f5955b3989268a9e3c03368426c5cbdbf4995f891a64eeef7ff0c10aa44d6f3a3facb2e96d9f0", 0x84}, {&(0x7f00000004c0)="4405249eb494756a0a9d63fb1b", 0xd}], 0x2) (async) write(r6, &(0x7f0000000180)="f28207ba9b3c370c7f1018e7f4ce8fb91a5a511ec090fdf836c1a2d027d0023bcec53ded912d97df2a75be157d7a029ba4cc3528313de7a698532f752290b4f4a996fc736996d7b3f4c5405290530277a07ddc5302d8a0251c5349e7c26320f38b7317a7a35d809eb582045304a2ad34c3bd5ed14f1480888b14253b0a787ab0cf346bde658be7660441e4e565334df9a472", 0x92) (async) r7 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r7, 0xffff, 0x4, &(0x7f0000000740), 0x1) (async) msgsnd(r4, &(0x7f0000000140)=ANY=[@ANYBLOB="e90000"], 0xc4, 0x800) (async) msgrcv(r4, 0x0, 0x0, 0x1, 0x1000) 2.943785152s ago: executing program 6 (id=92): syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) writev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000000)="c886b4d3e0", 0x5}], 0x1) r0 = socket(0x18, 0x1, 0x0) close(r0) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) write(r0, &(0x7f0000000100)="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", 0x4d1) syz_emit_ethernet(0x138, &(0x7f0000000600)=ANY=[@ANYRES16=r0]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = socket(0x2, 0x2, 0x0) r2 = socket(0x2, 0x2, 0x0) getsockopt$sock_cred(r2, 0xffff, 0x1022, &(0x7f0000000080), &(0x7f00000000c0)=0xc) close(r2) r3 = socket(0x2, 0x2, 0x0) bind(r3, &(0x7f0000000000), 0x10) connect$unix(r3, &(0x7f0000000000), 0x10) connect$unix(r2, &(0x7f0000000000), 0x10) connect$unix(r1, &(0x7f0000000000), 0x10) sendmsg$unix(r1, &(0x7f0000002a40)={0x0, 0x0, 0x0}, 0x0) r4 = openat$tty(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) ioctl$TIOCSDTR(r4, 0x20007479) sendmsg(0xffffffffffffffff, 0x0, 0x0) 2.94110658s ago: executing program 6 (id=94): r0 = socket(0x11, 0x3, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x4) getdents(r1, 0x0, 0x0) sendto$unix(r0, &(0x7f0000000380)="b1000504000004000000080003000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102d3db000000720fd18bfbb670c1f5a872c881ea6e2ec5890000eeff7f00361b4cc702fac5000010000000000000008abfba221554f4e0f668266c0900000008e371a3f8343712051eea040000000400", 0xffffffffffffffdd, 0x0, 0x0, 0x0) 2.869733898s ago: executing program 6 (id=97): r0 = syz_open_pts() ioctl$TIOCSTAT(r0, 0x20007465, 0x0) ioctl$TIOCSETD(r0, 0x8004741b, &(0x7f0000000080)=0x9) execve(0x0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0xffffffffffffffff, 0x4a, 0x0) ftruncate(0xffffffffffffffff, 0x8000) 2.29808149s ago: executing program 2 (id=110): r0 = open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x3, 0x10, r0, 0x0) recvfrom$unix(r0, &(0x7f0000000080)=""/120, 0x78, 0x1, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0xa) pwrite(r0, &(0x7f00000001c0)="90039f", 0x3, 0xe5) 2.297448456s ago: executing program 2 (id=111): setrlimit(0x8, &(0x7f00000008c0)={0x42, 0x61}) r0 = syz_open_pts() close(r0) r1 = syz_open_pts() ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000040)={0x27ffb, 0x4b6d, 0xffff, 0x21d8b788, "070002007e74fea407128efcfffa000800", 0x8001, 0x4}) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x186) r3 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) write(r3, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) mmap(&(0x7f0000603000/0x3000)=nil, 0x3000, 0x4, 0x10, r2, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000900)="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", 0x60f}], 0x1) 2.078242883s ago: executing program 2 (id=115): r0 = open(&(0x7f0000000000)='./file0\x00', 0x9cab835cfdc52675, 0x0) (async) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x100000000000000, 0x10040000000001}}) (async) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7, 0x1}, 0x8) (async) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) (async, rerun: 32) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async, rerun: 32) r1 = socket(0x18, 0x1, 0x0) close(r1) (async) r2 = socket(0x18, 0x2, 0x0) setsockopt(r2, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) (async) connect$unix(r1, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0xa011, r0, 0x0) (async) ftruncate(r0, 0x79c8) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1) (async, rerun: 32) getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1024, 0x0, &(0x7f0000001880)) (async, rerun: 32) ftruncate(0xffffffffffffffff, 0x79c8) setrlimit(0x1, &(0x7f0000000ec0)) (async, rerun: 64) munmap(&(0x7f0000000000/0x4000)=nil, 0x4000) (async, rerun: 64) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4) 2.076615146s ago: executing program 2 (id=116): r0 = open(&(0x7f0000000000)='./file0\x00', 0x9cab835cfdc52675, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x18) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r1 = socket(0x18, 0x1, 0x0) ioctl$FIONREAD(r1, 0xc1206951, &(0x7f00000001c0)) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0xa011, r0, 0x0) ftruncate(r0, 0x79c8) r2 = open(&(0x7f0000000040)='./file0\x00', 0x200, 0x8) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x10, r2, 0x0) utimensat(0xffffffffffffffff, 0x0, &(0x7f0000000080)={{0xa63, 0x2}, {0xfffffffffffffffb, 0x8000100000000002}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000001740)=[{0x0}], 0x1) r3 = fcntl$dupfd(r0, 0xa, r2) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x1) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4) kqueue() msync(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2) recvmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}, 0xfe3531454c7f7697) munmap(&(0x7f0000000000/0x5000)=nil, 0x5000) 2.076288144s ago: executing program 2 (id=117): recvmmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)={&(0x7f0000000240)=@un=@file={0x0, ""/529}, 0x213, 0x0, 0x0, 0x0}}, 0x3, 0x0, 0x0) (async) recvmmsg(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1003f8d}, 0x10, 0x1001, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r0, &(0x7f0000000080)={0x0}, 0x6a, 0x0) (async) sendmsg$unix(r0, &(0x7f0000003ac0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[@cred={0x20}], 0x20}, 0x404) close(r0) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) (async, rerun: 32) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (rerun: 32) r1 = socket(0x18, 0x1, 0x0) close(r1) (async, rerun: 32) sendto(r0, &(0x7f0000000480)="550e31b0877a8142754727cd96b8298b9bb8c0b3eb1dd62e72724968d5381dec9a702cb4278bdf7fe95ffa1411bf69b8c107b8bc83f9b1ea34821c61c0725ae1a535c46b1fb69a99cb37848e4dc502e91c2b30cf2725b6de8c09ae0fe5104a81adf6a7fa56b6108a742d505a1d2d232596b7f35ba2a9633b8f3b9b0d27f325f4d2ac3999ccd800c3feb4e5f7", 0x8c, 0x408, 0x0, 0x0) (async, rerun: 32) r2 = socket(0x18, 0x2, 0x0) r3 = openat$tty(0xffffffffffffff9c, &(0x7f0000000140), 0x40000, 0x0) ioctl$TIOCMSET(r3, 0x8004746d, &(0x7f0000000180)=0x32) (async) setsockopt(r2, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) connect$unix(r1, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) r4 = syz_open_pts() (async) setitimer(0x0, &(0x7f0000000080)={{0x277, 0x4}, {0x5, 0xfffffffffffffffc}}, 0x0) (async, rerun: 32) sendto(0xffffffffffffffff, 0x0, 0x58, 0x0, &(0x7f0000000080)=@in6={0x18, 0x3, 0x0, 0x1ff}, 0xc) (async, rerun: 32) bind$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c) (async) sysctl$net_inet_tcp(&(0x7f00000000c0)={0x4, 0x2, 0x6, 0x9}, 0x4, &(0x7f0000000180)="9b1809ffffffffffffff7f473f11e1a4e5f2f9f220ef7f0abdbc34fe42021588dc8ff44f4b76c76d41859d85ea800dabe467badf35b6fd74c94d1b44162df3867d25aff254e68dbf44ff53559bdaccfdf6b9e3957261167908bdf9ab63a1900bb07c4a19fe9c74c43e44665d8aa04db2150d2379c95abab88ba171048ff14200a5133cab96cb52dc062c67abb716c06191ca3a1528fd52a92bd16fe9e644b5465e76e17a9df0821b2bf250fa4298ed528be8a422cbea36aceaa0bce82558eadcb5904a61b694ccd0d6fc6ddafdd6224fb0c7a8ffd13019f8edee2119978b8832e94a404d59383d8b4380a6efbe86282b2a44", &(0x7f0000000040)=0x10011, 0x0, 0x5a) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$net_inet_ip(&(0x7f00000000c0)={0x4, 0x2, 0x0, 0x5}, 0x4, &(0x7f0000000080), &(0x7f0000000040), 0x0, 0x0) (async) ftruncate(r4, 0x361) accept$unix(0xffffffffffffff9c, 0x0, &(0x7f0000000200)) unveil(0x0, &(0x7f00000000c0)='r\x00') 1.811892717s ago: executing program 2 (id=119): mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4) (async) r0 = syz_open_pts() fcntl$lock(r0, 0x8, &(0x7f0000000080)={0x0, 0x1, 0x2, 0x100000001}) (async) syz_emit_ethernet(0x2e, &(0x7f0000000200)=ANY=[@ANYRES8=0x0, @ANYBLOB="d7071db2a8e4615b74c3e52af9b3f3d648199fdec1905d8e4552eba5435d32a0be77a5ef561a4f9635967990a3694e7febdfb05cf82c5348e00250b89ce445fed5bac0897cad7d0bd65129c47f731b3eb662344baea75eea58ba5db1e19b67144f449966433efe7d8b1a4574764d879047a6bc629753fcbf8fd9c2b4bae6d35e710eaeccc04fe6a64cc1b12e0ca780e0c163e8eab0"]) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) fcntl$lock(r1, 0x9, &(0x7f0000000080)={0x3, 0xba7290143f0a6f7b, 0x8000000000000000, 0x2000200000001}) (async) r2 = syz_open_pts() ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f0000000340)={0x7, 0x0, 0xfffffffe, 0x5, "ff14e7130b1e586ca6294000", 0x40, 0x3effc}) (async) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000380)="079facfaaed69aea4dc561c3b736feac0a2a76087be8b904ddc6f90b66e0f69b6dfba683b348224cf0ccc2a39b0f79389a2bd9b211424a22ca014b9231e253e257706c75b3f320166475c72455021edf575fab8b5d65b8d261c87c3ccc4e784ea7462f3723edabb8e26d27acb1797e2ef4db27270a", 0xffffff01}], 0x1) (async) ioctl$TIOCSETAW(r2, 0x802c7415, &(0x7f0000000000)={0x6, 0x7cd, 0x400, 0x0, "296438fe6c90e90f06142dbd32b73669cad5a2db", 0x7fffffff}) writev(r2, &(0x7f0000000180)=[{&(0x7f0000000080)='5', 0x1}], 0x1) (async) r3 = syz_open_pts() ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f0000000140)={0x2, 0x7, 0x5, 0x4, "62b14dbd8f061ea52d0a78d49996b3e93a9aae2a", 0x7, 0x2}) (async) ioctl$TIOCFLUSH(r2, 0x80047410, &(0x7f0000000780)=0x7) unveil(0x0, &(0x7f00000002c0)='r\x00') ioctl$TIOCSTAT(r3, 0x20007465, &(0x7f0000000100)) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd606aa63f00102b00fe8000000000000000000000000000bb000000000000000400000000000000012c00000000000000050200c3"]) (async) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x8) (async) sysctl$vfs_nfs(&(0x7f0000000000)={0xa, 0x2, 0x3}, 0x3, &(0x7f0000000040)="7e0593f10a", &(0x7f0000000080)=0x5, 0x0, 0x0) 940.468538ms ago: executing program 1 (id=154): socket(0x6, 0x8000, 0xf0) bind$unix(0xffffffffffffffff, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x1, 0x1, 0x0, 0x100000000000000}) r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) fcntl$lock(r0, 0x9, &(0x7f0000000080)={0x3, 0xba7290143f0a6f7b, 0x8000000000000000, 0x2000200000001}) pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{}], 0x1, 0xffbf) syz_emit_ethernet(0x5e, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd60000900052800006e1aa4058b74adad9a4e721f5b293380ff02000000000000000000000000000100010502"]) r1 = socket$inet6(0x18, 0x4000, 0x8) mlock(&(0x7f000034e000/0x4000)=nil, 0x4000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) connect$inet6(r1, &(0x7f0000000000)={0x18, 0x1, 0x8, 0x3}, 0xc) ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f00000000c0)={0x2007, 0xffffff01, 0x3, 0xc, "090e4de6d30aa692318d7e0022f9ffffff00", 0x0, 0x10000000}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x3e}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x10, 0x0, 0x37) r2 = shmget(0x3, 0x2000, 0x20, &(0x7f0000699000/0x2000)=nil) shmat(r2, &(0x7f00003bc000/0x2000)=nil, 0x1000) semop(0x0, &(0x7f00000000c0)=[{}, {0x0, 0x2ff, 0x800}], 0x2) r3 = socket(0x18, 0x2, 0x0) connect$unix(r3, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) writev(r3, &(0x7f0000000040)=[{&(0x7f0000001240)="eb30c9663da41a6d623e03ff227d65c96d2cdfa65329b20f306417c70f07d811287c744e5a4a81d1e985445b051849d47f312536c80487a185a9b76182c123b1392309a47c88d06917412286771303159dbec308bf7344f5aa910f1a6a3c8fb01f95440df763a00078be24928bb7da178652d18857bebae36eab007acafd46333e06ed84056be8fc80", 0x89}, {&(0x7f0000001300)="9d3b43ac83843b7c811e89b485106b83d7378ab7e8fe5944d74a714f33df2726521b4e66aeff", 0x26}, {&(0x7f0000001340)="db", 0x1}, {&(0x7f0000001740)="8bc6bbe1cbe23930efc8d71cc567887584a870a61ba2543a61c23a882034532c26ffc572d2aeb2862679e3debdd2352cce769696269f43f877205a160922d2b59606e204b84bce101b3fa81fc471e4aed6cc5e296c4dd5a5524f5b826248f6ba27e87aa728c1a26d21b028d691250373bd9f3e4bf48b05a39555fc41e272b5954084a5013e59bd621f7b9201aa4e7d46eb43ffdbc95d83eba566bb8debd0930bb7f62996dbe0a3dd860da87cf177c42a76b5727e2ffd1a83b69f23896cb1ffb8fa6330aa00ce1ed04eeb2b534ed17a0e8597e73c65179fc5f4cf5e4f2dd67f821c020b2f2c9152a7a6af2a45f07ec80a2db8492a03a1c9b8c3ff0f3eec40aa3bd50d798508df96123d8e09538194bfa7de444522942daedb3d49c332ec121fe29fe729467b8c299a7e65da0626308d81d85c8afc480b3111733cdd922ccb1bb14e5ddac29df2ecbc237335695133cef578efb25172df33a7d0f01c5d24b02c52a9afc03d5dd472d3cdd41ae5b86e925c68730672c1369d3443a1083fdb7dfa4e6a4edbccc3fc1e2d77fc67eab8d28a0a5292b773ad7f8f03cfe4533e0528c507f2ad407a335348b4b50ba460a85932d20eb619a6fba54dcfbd2d61d22f01a829423ec57956402597f704f96e0a3e9b85fc556848f4d54d4ff684b32fdaef5723c6e719a85f1751c3ce984be62097edc1a5a37a1f33412f116aaf6e9d89e6295919472386b9b3c15efcd1f673deedb869606798305f1f65e8e4c5e6c70e64026aa8580f4369c76cb4c8c14f2e1be893923cc5846589270faed5fae7f88fdab69ded5c33c287fff42f6bb71328037cfffbd875b0f61004a0ecc1b77410590c9859bb34d07e34ac10236fa70ce1c4ad26b1fb1a56dbdfb10ed395075c3b1a0c9bb95b2ee5d82074bcc4ae2780c61211a9c8c501e4016b07f5954dd113700d8a88211034976fbf7b90ab43780418afead69bd451d7acc709f89b04108e06a89f1359ba895e41689d136f80e604f2f7327565c98189b9055ce4baecf446dce1c0d4db09a256a6a1b1376dcb88855e7e58364267c5c2e306e302f62a8a2637b6b4a2a5b7ce3956ffd61fb51e132c60154e11a00f8cc65383d43677fd205a6324dea5b2cc901299fe7df0b3d30f183499887388028f94755a088c608426107d049b6baf9548f5b0f6dcceb65dff40d77757e4e3563686366350b8b72e7af60068aeb7d40852fab8d5a617dd7bcb0bf5a419b3769e015664abe2884d6d33daf9f4e38fc6982460d267094b8c39700e826ba78e7315e62b2ee4528530008bbaad922ec2f8269fc382f358c31909833b64a4db800110c286094ef323609c60d528c8db3d7f4b948f348139dcc66f1ff646743bfc7bccc1fb1f7706d256118926df6ff281dfb3a44d4db523895bb754deffaf6bca266dc016042531b507521fc68b86435f29f0a73ff6364f98b802ceeace90e986b05cd07534fb4da6dce280e55b61bd7853de", 0x421}], 0x4) 938.05998ms ago: executing program 1 (id=156): r0 = shmget$private(0x0, 0x1000, 0x400, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000080)={{0x1000400, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x32}, 0x0, 0x8}) (async) r1 = shmat(r0, &(0x7f0000001000/0x3000)=nil, 0x2000) r2 = kqueue() kevent(r2, &(0x7f0000000000), 0x3ff, 0x0, 0x8000800, 0x0) shmctl$IPC_RMID(r0, 0x0) (async) shmdt(r1) (async) shmdt(r1) 873.878907ms ago: executing program 1 (id=157): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0xe8, 0x0) setsockopt(r0, 0x8, 0xfffffff8, &(0x7f0000000100)="cc8094abf83d7c00b1f29da0c4c2285abf4edc155548a2277a0dbfed4862f0fcfa917431614dabd3fb37505a621dc6ea96706facc9a62407f599ff5c8a7a99d41497c601d11eec605f306322ca18de03e4bd3516899856e091209fabe8caed8e9c915cf1ed0aa60794c9c4", 0x6b) r1 = fcntl$dupfd(r0, 0x3, 0xffffffffffffffff) ioctl$FIONREAD(r1, 0x800474c4, &(0x7f00000000c0)) munmap(&(0x7f0000000000/0x1000)=nil, 0x1000) syz_emit_ethernet(0x42, 0x0) syz_emit_ethernet(0x1000e, &(0x7f0000000480)={@broadcast, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0xffffffffffffffcc, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x4, @broadcast}, @icmp=@time_exceeded={0xb, 0x1, 0x0, 0x0, 0xb, 0x0, {0x5, 0x4, 0x1, 0x2, 0x2, 0x68, 0x1, 0xed, 0x11, 0x61a, @broadcast}}}}}}) 873.307535ms ago: executing program 1 (id=158): getuid() (async) r0 = getuid() msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000000)={{0x0, r0, 0x0, r0, 0x0, 0x0, 0x6}, 0x80000003, 0x0, 0x0, 0x0, 0x80, 0x8000, 0x200023, 0xb2e}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket(0x18, 0x1, 0x0) setsockopt(r1, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbdf13b9fd812eaa4e713048e69931929648", 0x14) select(0x40, &(0x7f0000000000)={0xfffffffffffffffd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400000000}, 0x0, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffff06000000"]) (async) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffff06000000"]) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="00001c00ac14"]) (async) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="00001c00ac14"]) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xa7210e10bc3c9def) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="00001c00ac14"]) pipe(&(0x7f0000000640)={0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0xd4e688a67930cd) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000000)="94", 0xffd0}], 0x1) close(r2) (async) close(r2) r3 = socket(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0xffff, 0x1001, &(0x7f0000000100)=0x20002, 0x4) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) connect$unix(r3, &(0x7f0000000000), 0x10) (async) connect$unix(r3, &(0x7f0000000000), 0x10) execve(0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r4 = socket(0x2, 0x2, 0x0) syz_emit_ethernet(0xdc, &(0x7f00000001c0)={@local, @random="36f445ea3725", [{[{0x88a8, 0x3, 0x1, 0x2}], {0x8100, 0x6, 0x1, 0x2}}], {@ipv4={0x800, {{0x1d, 0x4, 0x1, 0x4, 0xc6, 0x68, 0x10, 0x9, 0x3c, 0x0, @broadcast, @empty, {[@ssrr={0x89, 0x13, 0xa, [@multicast1, @multicast1, @loopback, @rand_addr=0x8000]}, @timestamp={0x44, 0x1c, 0x69, 0x1, 0x4, [{[@multicast2], 0x8001}, {[], 0x7}, {[@loopback], 0xf}, {[], 0x6}]}, @noop, @ssrr={0x89, 0x1b, 0xf, [@remote={0xac, 0x14, 0x0}, @broadcast, @loopback, @broadcast, @broadcast, @loopback]}, @ssrr={0x89, 0x13, 0xf, [@empty, @remote={0xac, 0x14, 0x0}, @remote={0xac, 0x14, 0x0}, @loopback]}]}}, @udp={{0x2, 0x3, 0x8}, {"47ab1d26f6b168b75a21078a712ad2bf3169fbcfa47338e60f2211b497a2a42821931c2af06c6214d8aee08446b0c61258c91f92efa65ef551276feba3acd3fde69da434fa05e023ed61"}}}}}}) (async) syz_emit_ethernet(0xdc, &(0x7f00000001c0)={@local, @random="36f445ea3725", [{[{0x88a8, 0x3, 0x1, 0x2}], {0x8100, 0x6, 0x1, 0x2}}], {@ipv4={0x800, {{0x1d, 0x4, 0x1, 0x4, 0xc6, 0x68, 0x10, 0x9, 0x3c, 0x0, @broadcast, @empty, {[@ssrr={0x89, 0x13, 0xa, [@multicast1, @multicast1, @loopback, @rand_addr=0x8000]}, @timestamp={0x44, 0x1c, 0x69, 0x1, 0x4, [{[@multicast2], 0x8001}, {[], 0x7}, {[@loopback], 0xf}, {[], 0x6}]}, @noop, @ssrr={0x89, 0x1b, 0xf, [@remote={0xac, 0x14, 0x0}, @broadcast, @loopback, @broadcast, @broadcast, @loopback]}, @ssrr={0x89, 0x13, 0xf, [@empty, @remote={0xac, 0x14, 0x0}, @remote={0xac, 0x14, 0x0}, @loopback]}]}}, @udp={{0x2, 0x3, 0x8}, {"47ab1d26f6b168b75a21078a712ad2bf3169fbcfa47338e60f2211b497a2a42821931c2af06c6214d8aee08446b0c61258c91f92efa65ef551276feba3acd3fde69da434fa05e023ed61"}}}}}}) setsockopt$sock_int(r4, 0xffff, 0x20, &(0x7f0000000080)=0x6, 0x4) (async) setsockopt$sock_int(r4, 0xffff, 0x20, &(0x7f0000000080)=0x6, 0x4) connect$unix(r4, &(0x7f0000000000), 0x10) (async) connect$unix(r4, &(0x7f0000000000), 0x10) write(r4, 0x0, 0x0) 853.500662ms ago: executing program 1 (id=160): mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) ioctl$VNDIOCCLR(0xffffffffffffff9c, 0x80384601, &(0x7f0000000140)={&(0x7f00000000c0)='./file0\x00', 0xf945, &(0x7f0000000100)='./file0\x00', 0x8}) open(&(0x7f0000000080)='./file0\x00', 0x220, 0x0) flock(0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x2, 0x0) getsockopt$inet_opts(r0, 0x0, 0x0, 0x0, 0x0) read(0xffffffffffffffff, &(0x7f0000000300)=""/83, 0xfffffffffffffc47) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) r2 = fcntl$dupfd(r1, 0x3, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000)=""/4096, 0x1000}, 0x2) mmap(&(0x7f0000345000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x8000000000000) shutdown(r4, 0x2) ioctl$FIONREAD(r2, 0xc0206921, &(0x7f0000000080)) ioctl$WSDISPLAYIO_ADDSCREEN(r2, 0x80245753, &(0x7f0000000180)={0xffff, './file0\x00', './file0\x00'}) ioctl$TIOCFLUSH(0xffffffffffffffff, 0x80047410, &(0x7f0000000100)=0x9) syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1) syz_emit_ethernet(0x138, &(0x7f00000002c0)=ANY=[]) sysctl$kern(&(0x7f0000000240)={0x1, 0x24}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r5 = socket(0x2, 0x1, 0x0) connect$unix(r5, &(0x7f0000000000), 0x10) shutdown(r5, 0x0) sendto$inet(r5, &(0x7f0000000200)="757bb30f7637301176e828131fb5cb91", 0x10, 0x402, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) setsockopt$sock_linger(r6, 0xffff, 0x80, &(0x7f0000000000)={0x7ff, 0x8}, 0x8) open(&(0x7f0000000380)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7949) munmap(&(0x7f00005fd000/0x1000)=nil, 0x1000) msgget$private(0x0, 0x5bd) 853.075651ms ago: executing program 3 (id=161): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) fchownat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4) syz_emit_ethernet(0x36, &(0x7f0000000180)={@broadcast, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x1, 0x0, 0x67}, @tcp={{0x2, 0x1, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x20, 0x2, 0x0, 0x233}}}}}}) rename(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') mknod(&(0x7f0000000080)='./file0\x00', 0x1ffa, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0xc82, 0x5c) ioctl$FIONREAD(r0, 0x80206979, &(0x7f0000000000)) mlock(&(0x7f00000d8000/0x1000)=nil, 0x1000) sysctl$net_inet6_ip6(&(0x7f0000000040)={0x4, 0x18, 0x29, 0x35}, 0x4, &(0x7f0000000080)="ab", &(0x7f0000000000)=0x20000, 0x0, 0x0) 849.776306ms ago: executing program 3 (id=162): r0 = socket(0x18, 0x2, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffff06000000aa"]) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="00001c00ac14"]) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mknod(&(0x7f00000000c0)='./file0\x00', 0x1ffa, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x70e, 0x0) fcntl$lock(r1, 0x7, &(0x7f0000000000)={0x7, 0x0, 0x4a3, 0x20001fffffffd}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket(0x2, 0x4001, 0x0) r3 = dup(r2) r4 = fcntl$dupfd(r3, 0xa, r0) close(r4) r5 = socket(0x2, 0x2, 0x0) connect$unix(r5, &(0x7f0000000000), 0x10) write(r4, 0x0, 0x0) setsockopt$sock_int(r4, 0xffff, 0x1023, &(0x7f0000000080), 0x4) socketpair(0x1, 0x1, 0x3, &(0x7f0000000040)={0xffffffffffffffff}) poll(&(0x7f00000000c0)=[{r4, 0x4}, {r0, 0x20}, {r6, 0x8}, {r2, 0x228}], 0x4, 0xffff) select(0x40, &(0x7f0000000000)={0x42d}, 0x0, 0x0, 0x0) 650.393575ms ago: executing program 3 (id=163): r0 = kqueue() (async) r1 = open(&(0x7f0000000080)='./file0\x00', 0x18289, 0x190) ftruncate(r1, 0x10000) r2 = open(&(0x7f0000000040)='./file0\x00', 0x200, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x10, r2, 0x0) (async) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x2000000000000243, &(0x7f0000000100)}) (async) r3 = socket(0x1, 0x2, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "0000c0", 0x14, 0x0, 0xf9, @ipv4={'\x00', '\xff\xff', @local={0xac, 0x14, 0x0}}, @rand_addr="00fe000001000800001a000000000004", {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x4, 0x8003, 0x0, 0x7ffe}}}}}}}) (async) ioctl$FIONREAD(r3, 0xc0106924, &(0x7f00000001c0)) (async) kevent(r0, &(0x7f0000000080), 0xe4a, 0x0, 0x4000a9fa, 0x0) (async) r4 = semget$private(0x0, 0x7, 0x3c0) semop(r4, &(0x7f0000000100)=[{0x3, 0x5, 0x1800}, {0x0, 0x9, 0x1000}, {0x1, 0x5707, 0x56d919c7a5a5a94e}, {0x1, 0xf6, 0x1000}, {0x0, 0x8, 0x800}, {0x4, 0x0, 0x800}], 0x6) (async) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') chdir(&(0x7f0000000080)='./file0/file0/..\x00') (async) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') faccessat(0xffffffffffffffff, &(0x7f00000000c0)='./file0/file0/..\x00', 0x0, 0x0) (async) socketpair(0x1, 0x1, 0x1, &(0x7f0000000080)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) mkdir(0x0, 0x97) rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00') semop(r4, &(0x7f0000000000)=[{0x3, 0xffff, 0x1800}], 0x1) (async) sysctl$kern(&(0x7f0000000080)={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) 649.971162ms ago: executing program 3 (id=164): open(&(0x7f0000000300)='./file0\x00', 0x400, 0xc7) truncate(&(0x7f0000000140)='./file0\x00', 0x30001) r0 = open(&(0x7f0000000380)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf79e5) writev(r0, &(0x7f00000011c0)=[{&(0x7f0000000040)="23212fa1e5ab5ff81157502000", 0xd}], 0x1) write(r0, &(0x7f00000003c0)="092020406575e1ef00a2e29be2e79448e009ce9d0a", 0x15) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) (async) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) (async) open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) 649.624797ms ago: executing program 3 (id=165): r0 = socket(0x18, 0x1, 0x0) shutdown(r0, 0x2) (async) shutdown(r0, 0x2) connect$unix(r0, &(0x7f0000000000)=@abs={0x0, 0x0, 0x1}, 0x8) r1 = socket$unix(0x1, 0x1, 0x0) getsockopt$sock_int(r1, 0xffff, 0x2000, 0x0, 0x0) rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00') sysctl$net_pipex(&(0x7f0000000000)={0x4, 0x23, 0x1}, 0x3, &(0x7f0000000100), &(0x7f0000000040), 0x0, 0x0) (async) sysctl$net_pipex(&(0x7f0000000000)={0x4, 0x23, 0x1}, 0x3, &(0x7f0000000100), &(0x7f0000000040), 0x0, 0x0) 649.405058ms ago: executing program 3 (id=166): r0 = socket(0x2, 0x2, 0x0) ioctl$FIOASYNC(0xffffffffffffffff, 0x80047460, &(0x7f00000000c0)=0xc06) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1001, &(0x7f0000000100)=0x20000, 0x4) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) connect$unix(r0, &(0x7f0000000000), 0x10) setsockopt$inet_opts(r0, 0x0, 0x1, &(0x7f00000000c0)="9876d692a3ef9c7ab923a2f0", 0xc) write(r0, &(0x7f0000000240)="14bdfa5d1d34e2fecb284a6498307dcda9aec43050036123339a346f737850551408753f95b7688ad4c4e1dd5489e7bafc58d3e5823757ae8b630719ef187ccad995f13dbe19a6dd4e6902bd8297b0799b426aabe9fad9db6996571c6d9f8bb5d542c2148aa42be940970fe88d34d8f99afe7e7820237400000000008000000100"/138, 0xfc7e) r2 = msgget$private(0x0, 0x1ba) msgrcv(r2, 0x0, 0x0, 0x1, 0x1000) msgctl$IPC_STAT(r2, 0x2, &(0x7f0000000180)=""/245) ioctl$KDSETLED(r1, 0x20004b42, &(0x7f0000000040)=0x2) 534.948377ms ago: executing program 7 (id=170): mkdir(&(0x7f0000000040)='./file2\x00', 0xc1) r0 = open(&(0x7f0000000000)='./file2\x00', 0x10000, 0x166) setsockopt(r0, 0x9, 0x200, &(0x7f0000000100)="b8faf000b9346e0e2d8f49b86a04e65e5a5e48d5ca154b6cbc004e455e3db00697a3a6bc5681d1a228a23a4f2261972ca12b3816cde84f8ac5f8475c661e9a903d43b1da708a14b326555a1c7f935ec361b7607b671c4c3fbd5ffdf2f2dbfbbda950c38fb3b49d1210b498fadfd5e9432ca9bba5f8c39275b7348bcb33890d499eb7d2de5f9904c15d5106cfe03804133c648c95fc70f0500a566758d6bd84a720acf200247ae09a672bb8eca2272526c2fed07adf43d7e63230e9d98cd94e0a2dc490dafdf3e708822a8d4280d99472ff7a75dcdbc8997bc7d51e9da7f2833c70a92f09f9451bc4a262", 0xea) connect(r0, &(0x7f00000000c0)=@un=@file={0x1, './file2\x00'}, 0xa) mkdir(&(0x7f0000000300)='./file2/file0\x00', 0xc2) chmod(&(0x7f0000000080)='./file2/file0\x00', 0x0) 462.887962ms ago: executing program 7 (id=176): r0 = socket(0x11, 0x3, 0x0) sysctl$hw(&(0x7f0000000000)={0x6, 0x1c}, 0x2, 0x0, 0x0, 0x0, 0x0) sysctl$kern(0x0, 0x0, &(0x7f0000000180)="ee", &(0x7f0000000080)=0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$kern(&(0x7f0000000000)={0x1, 0x10}, 0x2, &(0x7f0000000280), &(0x7f0000000080), 0x0, 0x0) sendto$unix(r0, &(0x7f0000000100)="b100050460000000000000001025000000000000cea10500fef900000000d3357ae320b37b673039d2d236073705ae04be38164991f7c8cf5f882b297be1aa5b236deb51e2f0ac7ebbb7d5699a5f139b672f4d335d223e7d026ba8af630037282112000000720fd38bfbb770c1f5a872c881ea6e69e0bb7600000000000200361b1277aea8c5000020020000000000008abfba0900000008e371a3f8343712051eadb71d89e000040781e4b2c03a000000", 0xb1, 0x0, 0x0, 0x0) sysctl$kern(&(0x7f0000000000)={0x1, 0x57}, 0x2, &(0x7f00000000c0)="e1298e4feec76a87d0482e96c76f41ff89dd031a450ebb8e4fd92ddd414487105646764b2c81e9411142b1919dc92176a25c522091ac09cddb9d25c987aa38aa42897e8e66982d7ea27c565c2a5fba7e2d56662dae953373032df8de8bed282e", &(0x7f0000000080)=0x60, 0x0, 0x0) 332.212517ms ago: executing program 0 (id=179): r0 = open$dir(&(0x7f0000000000)='.\x00', 0x8000, 0xa) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000080)={'tap', 0x0}) select(0x40, &(0x7f0000000100)={0x1, 0xffffffffffffffff, 0x0, 0x20000000000000, 0x100000000000007, 0x4, 0x0, 0xc1eb}, &(0x7f0000000140)={0x1000000000007f, 0xa, 0x1080000000000, 0x4, 0x0, 0x0, 0xfffffffffffffffe, 0x40000000000000}, 0x0, 0x0) mkdirat(r0, &(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 331.591471ms ago: executing program 0 (id=180): mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) r0 = open(&(0x7f0000000600)='./file0\x00', 0x2, 0xbc) sysctl$vfs_nfs(&(0x7f00000000c0)={0xa, 0x2, 0x2}, 0x3, &(0x7f0000000240), 0x0, 0x0, 0x0) ioctl$VMM_IOC_RESETCPU(r0, 0x82405605, &(0x7f0000000640)={0x57e, 0x19, {[0x1, 0x3, 0x80000001, 0x434dcec4, 0x2, 0x7, 0x2, 0x2, 0x100000001, 0x40, 0x1, 0x7, 0x3, 0xecfd, 0x5, 0xffffffffffffffff, 0x2, 0xa4], [0xfffffffffffffffb, 0x4, 0x7fffffff, 0x9819, 0x8, 0x9, 0x8, 0x5, 0x7, 0x2], [0x5, 0x200, 0x8000000000000000, 0x5, 0x0, 0xe, 0x100000000000000], [0x4, 0x8118, 0x0, 0x484c, 0x5, 0x1], [{0x6, 0x101, 0x9, 0xc}, {0x6c0d, 0x19cc, 0x1}, {0x8, 0x27, 0x10001, 0x9}, {0xd, 0xb238, 0x0, 0x20000}, {0x4, 0x6, 0x2, 0x7}, {0x1, 0x7, 0xc, 0x2f17}, {0x8, 0x4, 0x200, 0x1000000000000005}, {0x1, 0x4, 0x1000, 0x9}], {0x9, 0x8000, 0xf, 0x6}, {0x8001, 0x7e1, 0x2, 0x2}}}) 325.827949ms ago: executing program 0 (id=182): r0 = open(&(0x7f0000000080)='./file0\x00', 0x18289, 0x190) ftruncate(r0, 0x10000) ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x0, [{0x2, 0x2}, {0x0, 0xfffffffb}, {}, {0x0, 0x1}, {0x0, 0x7fffffff}, {0x0, 0x4}, {0x3}, {0x0, 0xc8}, {0x5, 0x2}, {0x0, 0xff}, {0x2}, {0x3}, {0x1, 0xfffffffd}, {}, {}, {0x1, 0x1ff}, {0x1, 0x8}, {0x2, 0xfffeffff}, {}, {0x0, 0x3}, {}, {0x1, 0xfffffffc}, {0x2}, {}, {}, {0x2}, {0x0, 0x3}, {}, {}, {}, {}, {0x1, 0x57fd}]}) (async) ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x0, [{0x2, 0x2}, {0x0, 0xfffffffb}, {}, {0x0, 0x1}, {0x0, 0x7fffffff}, {0x0, 0x4}, {0x3}, {0x0, 0xc8}, {0x5, 0x2}, {0x0, 0xff}, {0x2}, {0x3}, {0x1, 0xfffffffd}, {}, {}, {0x1, 0x1ff}, {0x1, 0x8}, {0x2, 0xfffeffff}, {}, {0x0, 0x3}, {}, {0x1, 0xfffffffc}, {0x2}, {}, {}, {0x2}, {0x0, 0x3}, {}, {}, {}, {}, {0x1, 0x57fd}]}) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) syz_emit_ethernet(0x0, 0x0) (async) syz_emit_ethernet(0x0, 0x0) select(0x40, &(0x7f0000000000)={0x7, 0x3ff, 0xb0, 0x0, 0x3, 0x4, 0x4, 0xfffffffffffffffb}, 0x0, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) (async) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0xfffffffffffffe59) r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) close(r2) open(&(0x7f0000000040)='./file0\x00', 0x200, 0x0) (async) r3 = open(&(0x7f0000000040)='./file0\x00', 0x200, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x10, r3, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x2000000000000243, &(0x7f0000000100)}) r4 = socket(0x1, 0x2, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "0000c0", 0x14, 0x0, 0xf9, @ipv4={'\x00', '\xff\xff', @local={0xac, 0x14, 0x0}}, @rand_addr="00fe000001000800001a000000000004", {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x4, 0x8003, 0x0, 0x7ffe}}}}}}}) (async) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "0000c0", 0x14, 0x0, 0xf9, @ipv4={'\x00', '\xff\xff', @local={0xac, 0x14, 0x0}}, @rand_addr="00fe000001000800001a000000000004", {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x4, 0x8003, 0x0, 0x7ffe}}}}}}}) ioctl$FIONREAD(r4, 0xc0106924, &(0x7f00000001c0)) r5 = open(&(0x7f0000000000)='./file0\x00', 0x9cab835cfdc52675, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) sysctl$net_inet6_ip6(&(0x7f0000000240)={0x4, 0x18, 0x29, 0x12}, 0x4, &(0x7f00000003c0)="b5fcd5dedd6b1e6b1a4c933b1e9c7fca50f754244b24704134a174a0bdbf7f061fb0c580361a6de5ca54325179e3b35585a3aec3e9480919f1f1318ee928bc49f5ef9abc94e427723f5937290f06a300120646d8378f2babfd46bfdb69347ce343535e8d5233dedfafad81f79d498ecc89cf837d31d363695b124992c4911304d60c600fcff74d2e2278345e01f61d28aba3cce44209ef196f9559d30ede45e02080678bd53e22ee03e2baac32ef4cbe6d052a0bce5f3c31c9064a4fb89ff33dbcf9c93af7278a4e89913af3c86629d15d1a1babf8f58bfc36033181dc3d154439a99bf4401d4ed4", &(0x7f0000000280)=0xe8, &(0x7f00000002c0)="ab1e25270cb49741", 0x8) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r9, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f00000024c0)=""/236, 0xec}, 0x0) sendmsg(r8, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) readv(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/50, 0x32}], 0x1) (async) readv(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/50, 0x32}], 0x1) close(r6) (async) close(r6) writev(r7, &(0x7f0000000200)=[{&(0x7f0000000100)="19", 0x3a4e1e905c56cdb7}], 0x1) (async) writev(r7, &(0x7f0000000200)=[{&(0x7f0000000100)="19", 0x3a4e1e905c56cdb7}], 0x1) fcntl$dupfd(r5, 0x0, r8) (async) fcntl$dupfd(r5, 0x0, r8) 178.216062ms ago: executing program 4 (id=184): r0 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$DIOCMAP(0xffffffffffffffff, 0xc0106477, &(0x7f0000000080)={&(0x7f0000000000)='./file0\x00', r0, 0x3}) 173.245016ms ago: executing program 4 (id=185): sysctl$hw(&(0x7f0000000000)={0x6, 0x1c}, 0x2, &(0x7f0000000100)="134200e5", &(0x7f0000000040), 0x0, 0x0) r0 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000080), 0x10000, 0x0) mquery(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x0, r0, 0x4) 171.7563ms ago: executing program 4 (id=186): setrlimit(0x8, &(0x7f00000001c0)={0xa, 0x50}) r0 = syz_open_pts() close(r0) r1 = open(&(0x7f0000000380)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7949) fsync(r1) syz_open_pts() writev(r0, &(0x7f0000000340)=[{&(0x7f0000001180)="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", 0x252}], 0x1) 171.502405ms ago: executing program 32 (id=176): r0 = socket(0x11, 0x3, 0x0) sysctl$hw(&(0x7f0000000000)={0x6, 0x1c}, 0x2, 0x0, 0x0, 0x0, 0x0) sysctl$kern(0x0, 0x0, &(0x7f0000000180)="ee", &(0x7f0000000080)=0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$kern(&(0x7f0000000000)={0x1, 0x10}, 0x2, &(0x7f0000000280), &(0x7f0000000080), 0x0, 0x0) sendto$unix(r0, &(0x7f0000000100)="b100050460000000000000001025000000000000cea10500fef900000000d3357ae320b37b673039d2d236073705ae04be38164991f7c8cf5f882b297be1aa5b236deb51e2f0ac7ebbb7d5699a5f139b672f4d335d223e7d026ba8af630037282112000000720fd38bfbb770c1f5a872c881ea6e69e0bb7600000000000200361b1277aea8c5000020020000000000008abfba0900000008e371a3f8343712051eadb71d89e000040781e4b2c03a000000", 0xb1, 0x0, 0x0, 0x0) sysctl$kern(&(0x7f0000000000)={0x1, 0x57}, 0x2, &(0x7f00000000c0)="e1298e4feec76a87d0482e96c76f41ff89dd031a450ebb8e4fd92ddd414487105646764b2c81e9411142b1919dc92176a25c522091ac09cddb9d25c987aa38aa42897e8e66982d7ea27c565c2a5fba7e2d56662dae953373032df8de8bed282e", &(0x7f0000000080)=0x60, 0x0, 0x0) 171.296962ms ago: executing program 4 (id=188): r0 = getuid() setuid(r0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x4, 0x0, 0x0, 0x0, 0x0, 0x199, 0x7}, 0x85c, 0x4, 0x0, 0x0, 0x80000000003, 0x4000000000007b, 0x5, 0x8000004}) sysctl$hw(&(0x7f0000000000)={0x7, 0xf}, 0x2, 0x0, 0x0, 0x0, 0x0) setrlimit(0xa, &(0x7f0000000380)={0x1, 0x2}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$kern(&(0x7f0000000000)={0x1, 0x51}, 0x2, &(0x7f0000000100), &(0x7f0000000080), 0x0, 0x0) minherit(&(0x7f00004b5000/0x4000)=nil, 0x4000, 0x1) sysctl$kern(&(0x7f0000000040)={0x0}, 0x0, &(0x7f0000000100)="ae3f34bd970ed7fce70aa510848128f7c67f63dbfa72064434422bdba28de78907ac63742a1f374cee3766424a34e87ef20e94135886a72d9d28236c9a833c3bde472490bb086f40aca6bc912bc8625e22ac97fbefe1d1a903926ba221c00e1019bfe70688e863c74cf931561c7366766b04e3c284b365d91aa9ca3b830f421a7812e4ea5ef4c98c429b5578c478f7c9c0db8d20a8b7078a3e94b6225046645720983a2bb5ac5c52352da8cec0f898dab4b27ccd467a292838b05aa5015eb96f8ebfd51084f3c847684adca346670a5e4d36df3bd74ef945d21da7", &(0x7f0000000200)=0xdb, &(0x7f0000000240)="8a52f1b9c63fcb5b5b750ff36a8c189814d61965268e408032b555e5b195d5ffb7ccfa11aa488b38bf89e3f25f99946080e709520d5b9781494e7683976d2211cef8adefd33e98981907f45ed1410e7cd9d8b18b9976b8b3b390e81f7199388a0e05eb5642bf6de3b5ae03699be5ae9193500002836b9336564e1e71b2ae80af52f8619c9afe1e16f4b017bfc987a310f8c650e1651befc6be3d8c09525ade23bec0589f5167b49804dabf8a25641a1557be5e8ae5ca110cc917a472c50f5f759a49221ddb8320b5c094621de1f1e37288bb6ae1ba011d725d9a891f707e2923386252d1d2764f38ab958330702fdf2f32330f3193", 0xf5) 171.012034ms ago: executing program 0 (id=189): r0 = socket(0x11, 0x3, 0x0) r1 = accept(r0, &(0x7f0000000000)=@un=@abs, &(0x7f0000000040)=0x8) (async) ioctl$FIONREAD(r0, 0x801169ab, &(0x7f00000001c0)) (async, rerun: 64) r2 = socket(0x18, 0x2, 0x0) (rerun: 64) setsockopt(r2, 0x1000000029, 0x3f, &(0x7f0000000040)="6700d6e5", 0x4) (async, rerun: 32) sendmmsg(r2, &(0x7f0000000600)={&(0x7f00000005c0)={&(0x7f0000000280)=@in6={0x18, 0x3, 0x3, 0xa000}, 0xc, 0x0, 0x0, 0x0}, 0x9}, 0x10, 0x4) (async, rerun: 32) r3 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0) mkdirat(r3, &(0x7f0000000540)='./file0\x00', 0x180) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x2, 0x0, 0x1a}, 0x4, 0x0, 0x0, 0x0, 0x0) renameat(r3, &(0x7f00000025c0)='./file0\x00', r3, &(0x7f0000002600)='./file1\x00') (async) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYRESOCT=r1, @ANYRESOCT=r0, @ANYRES32=r2, @ANYRESHEX=r0, @ANYRESHEX, @ANYRESDEC=r3]) 22.199764ms ago: executing program 4 (id=190): munmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000) minherit(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1) r0 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r0, &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000dc0)='./file0\x00', r1, &(0x7f0000000ec0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000980)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000a80)='./file0\x00') rename(&(0x7f0000000d80)='./file0\x00', &(0x7f0000000180)='./file1\x00') rename(&(0x7f0000000040)='./file1\x00', &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 21.347915ms ago: executing program 0 (id=191): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000f00)="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", 0x643) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000000)="0e2b220944c73c60396c0b3f2787e177c4c9ef6b716de4c7d982a75900da88c5fa12625fdd9090d7952532490dc707278e850c3c57994e14de746da241fdae77a041986175c9d5023cf2f6b5afe26534e1275d1687080748bfec92c4ab4d3f3eb038ef36dcba6496a6a95bc247016b62f485097fba11be413bcabac8d0801a70ece00afaf6988d2543b1508c21648bdd5f7e2d0561951b4efc9e49ebc2c4194025bd88d76ec5ed5a65a26d5db430b105f7c4fe5c7b7b0a71ee08d1cdf8ee9e35bdd9cbd0cfe185c63e6bf6da4bbd0932c014e6fc2c68189e420b3c2961b106820d", 0xec}, {&(0x7f0000000500)="cd6beb1a928efaefa90aac37010714ad689d4f5c29dc542943e1fa066e63d9715be2643b8ff9acf4e7b62b490211369ca1ea93ae28cf468a2039f5fea8f8c16ffc4bf0278fb60c96c8d42787c49b94dc3d4862c0eab1d9d31e99c2345a96c3a646f631633335fb7205a20678ffacc16a422e021e0d36b293bee50b195e6f533c4200dd", 0x83}, {&(0x7f00000001c0)="3cdf0c1666d0673694522020f1ca34f0cc09d6731e4eaab9d78e9e2d4a269e4c2fc32a622426d4ac35eebe3c187b7af058c088b5cb85fafbf408f63905c916001ac1bfdc07b0bf3b312e06a1cf65df83c8b345f2b1c0f4e58793ed71b02a", 0x5e}, {&(0x7f0000000c80)="281aa164182e05e378a764501897886670fb5d8362b78f51448e28eb0d753a93f3409926947bb26bc0afabd88ee6d74aefa7f46b749b9888b581945056618a0c018ccd787dcc71c096c47eb84ade1fae87879c6901436021e0d4f89df2a9917379e40f0eb2d650805bf730dca3bef55955ffb19ba90be94211bd566871265676f9997fa121013f1c27dfd13bbdbd8d1582e931d5e8872acfcaaf0a6b62570c0a7a42f1bb45c782dd275ebeadafe5a4ee030695dfe69f2bcb7a99f430b1b1c9605a2215169e7a46dd30c614e6387b5f0513b9d20527119cc6164496638711", 0xdc}, {&(0x7f0000000d80)="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", 0x6d}, {&(0x7f0000000400)="5cd9f97a6bae3ba53d9066a6047e894a1689d344a59c2957461d0c3c103b35b5cd9dda951690bfb0ff0329631cf7364def49ff095ed3ab13fef0795ba6c59b03aaa03d7b5368c1a5b17809440dcbb76a82fc38157bd8fabdc771b442b993329e04622bb0446f7b9f96", 0x69}, {&(0x7f0000000100)="c3acc4e29ff5d3dd837cf54a4b89fc8b3a55d992"}], 0x6) r2 = syz_open_pts() ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) syz_emit_ethernet(0x36, &(0x7f0000000140)={@broadcast, @remote, [], {@ipv6={0x86dd, {0x4, 0x6, "33046c", 0x0, 0x50, 0x96, @loopback, @empty}}}}) mprotect(&(0x7f0000fea000/0x13000)=nil, 0x13000, 0x2) sysctl$net_inet_divert(&(0x7f0000000040)={0x4, 0x1e, 0x2, 0x2}, 0x4, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) ioctl$FIONREAD(r3, 0xc020699c, &(0x7f00000001c0)) ioctl$TIOCSDTR(r2, 0x20007479) 21.024989ms ago: executing program 0 (id=192): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) readv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/19, 0x13}], 0x1) setrlimit(0x8, &(0x7f0000000980)={0xb, 0x4e}) r1 = syz_open_pts() close(r1) syz_open_pts() ioctl$FIOASYNC(r1, 0x80047469, &(0x7f00000000c0)=0x5) writev(r1, &(0x7f0000000040)=[{0x0}], 0x1) write(r1, 0x0, 0x0) ioctl$FIONBIO(r1, 0x8004667e, &(0x7f0000000000)=0x8) execve(0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendmmsg(r0, &(0x7f00000000c0)={0x0, 0x9}, 0x10, 0x400) syz_emit_ethernet(0x4de, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa9cd7361987d486dd60ecea6604a80000fe8000000000000089750e6b000000aaff02000000000000000000000000000100209f"]) 17.18255ms ago: executing program 4 (id=193): r0 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$DIOCMAP(r0, 0xc0106477, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c, 0x2}) socketpair(0x20, 0x1, 0x8, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_pts() ioctl$TIOCMSET(r2, 0x8004746d, &(0x7f0000000100)=0x7) recvfrom(r1, &(0x7f0000000140)=""/36, 0x24, 0x40, 0x0, 0x0) getsockopt$inet_opts(r1, 0x0, 0x1, &(0x7f0000000180)=""/36, &(0x7f00000001c0)=0x24) r3 = dup(r2) r4 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$WSKBDIO_GETBELL(r4, 0x40105704, &(0x7f0000000240)) ioctl$TIOCSPGRP(r2, 0x40047477, &(0x7f0000000280)) r5 = getppid() fcntl$lock(r3, 0x9, &(0x7f00000002c0)={0x3, 0x1, 0x3, 0x2, r5}) ioctl$WSKBDIO_GETDEFAULTBELL(r4, 0x40105706, &(0x7f0000000300)) connect$unix(r1, &(0x7f0000000340)=@abs={0x0, 0x0, 0x3}, 0x8) openat$vnd(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) ktrace(&(0x7f00000003c0)='./file1\x00', 0x4, 0x400, r5) pipe(&(0x7f0000000400)) utimes(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={{0xffffffff, 0x2}, {0x8, 0x7}}) getsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f00000004c0)={0x0, 0x0, 0x0}, &(0x7f0000000500)=0xc) setgid(r7) sysctl$net_inet_ipcomp(&(0x7f0000000540), 0x4, &(0x7f0000000580)="8b05df6121024226a803ad4b068a9de24adf7e8e4d7408b60d9ce4602709bf56d5bb163a5c08a97eb62f4dd0d5538043e8eff8c5344123ac028a2590797e473ac0ca077236b6a00af2efcc999d3c4e93dbc002eb79b339a2eab469fe23f694f73701019bd5b1f0efdda2", &(0x7f0000000600)=0x6a, &(0x7f0000000640)="f2b5827b7b63fcc0f7162e544859e439afa07eae61bcdfe5187c3abb", 0x1c) openat$bpf(0xffffffffffffff9c, &(0x7f0000000680), 0x800, 0x0) sendmsg$unix(r3, &(0x7f0000000840)={&(0x7f00000006c0)=@file={0x1, './file1\x00'}, 0xa, &(0x7f0000000800)=[{&(0x7f0000000700)="0c80db5892155d0959dd8ac75776291df765cbff6489131a54544ed57ac6036c40e1df385cf042195cb5baf5baef7ffd86f5a8a640db198e5f0cfc8a8f045062d2909baa5f2fdc43ba6690713f1ed6e0e2d4cc4affda9e48055bd0cc9c540ddd54b70a4618357dede16eff5e34748fe4750dbe6885549c16b34b4ce01afb300da7abbaa9fe5750e88fe05db4faf741e750a725367dc4a8af6190a18bd10c84c3869df9f09c320b0d8bd9375cf2cb43f23b0a0f90cac6dee99a3e63f457b810fb3fac6549ca0fad69cbed817776d3", 0xce}], 0x1, 0x0, 0x0, 0x9}, 0x408) sysctl$net_inet_ipcomp(&(0x7f0000000880), 0x4, &(0x7f00000008c0)="a43a9ce08396f9c686d118825e3d3756b0", &(0x7f0000000900)=0x11, &(0x7f0000000940)="dca656d99d7ed308caec06113ff70237ca86bb76fd2a86e80668f923f13cace2c98cc5da9fe9ad033fbee66bf02d12459d98cdf45a9139a10dab9b6b2b5758eef394c634d4e7050b50a44f3b7b397e030ed45f666aa6127cb772dd1aa5f5874218f6f4863f487f7c94cf2972fcebb8ced4b7a0384335d0c382bd803eb222e14d7e88423e8426e6f0d85f2b968e24bf2ac5c574829fe864", 0x97) openat$zero(0xffffffffffffff9c, &(0x7f0000000a00), 0x80, 0x0) fcntl$lock(r0, 0x9, &(0x7f0000000a40)={0x1, 0x2, 0x400, 0x2, r6}) openat$tty(0xffffffffffffff9c, &(0x7f0000000a80), 0x8000, 0x0) getpid() dup(r0) 16.743715ms ago: executing program 1 (id=194): sysctl$vm_swapencrypt(&(0x7f0000000000)={0x6, 0xb, 0x1}, 0x3, 0x0, 0x0, 0x0, 0x0) sysctl$kern(&(0x7f0000000000)={0xa}, 0x7, &(0x7f00000000c0)="40cea6923e90b2c9ef2017082c42eb1ab6fd5a27f84fcc0a33bafccd623900d5cb958bd15460f872803363d8db4510989cad072ccb504bb68a32d145d6ed05b49315606e7bcac61238e3f2a864232f609c8f09c79a22b221b65b46a03a1400"/120, 0x0, 0x0, 0xffffffffffffff2f) syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000002000/0x11000)=nil, 0x11000, 0x6) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket(0x2, 0x1, 0x0) connect$unix(r0, &(0x7f0000000000), 0x10) socket(0x1, 0x1, 0x9) sendto(r0, &(0x7f0000000080)="0101", 0xfd84, 0xe1, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r1 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) sysctl$vm_swapencrypt(&(0x7f0000000040)={0x2, 0x5, 0x1}, 0x3, 0x0, 0x0, 0x0, 0x0) sysctl$kern(&(0x7f0000000040)={0x1, 0x59}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$hw(&(0x7f0000000040)={0x6, 0x14}, 0x3, &(0x7f00000005c0)="f1a42138cd18da8b26d7eefbeea93a3c0f70544fe00a8b1eaf558632116bb3d5df98c5917270301b52440e423f9df70000000080c4883320caaf634e6e1e6a4ea71e3f5a599315bbd6391f0313171c7ee65e9dd3203e4bfdea8bc367fad5e7f53923619f42e4806ff9e91249cbdb69529d7353cc49463b2929c538035bf4341b583f44287e8c4af81f18805a7e145f6a835cd1c99019d5fd29760b5f4cf339770401725b38249a198bada2ee8f39031fbc3a5b1451be45e66cad7f5d258f2a217b262c0d3e4dd2af23ed9bacb4412b4df11c8de6522f9881a09c9a9656f449149ad666513db557f70c026596835926d3a1491710fb8298e0b510eb07606391f26cb469dc3ba618b9949f925a218601d4e315d2763b6c7c002ac34f8ce41631e116c9ddd091d5e3f7f3c7dd2c08dc8ce2948c027ac30fbfef6665ef75e88700ffcc6738765e9bfb255711133eda05e0608f7b1eee8d4c1c350fcf50e6b42d5574c0e557840a722b7f3144451f1d2b614b550bd4b71c9ccf51abf21845ca3db2db28c362cbbd3f7cea906cc8002c35a46fdfd2c0fb3c9637907310f4237e412303e4bfd2a14abe1654b49293f5d98d5c9d7e866da306d90948e5ca0110db985dbf317ccefbf9cfd109a727098c303b9dede6ff353c7723b9c7f5d9f4f09f30af7f46e7c08d3e45972ae7ac599d5f0122b90ecc356dbe2a89afe87299dde139533d8cb6f37cda034e0d6167f9cac40c899b7d8b64bf636db8836c697f2a1fb3f87204ff6816857dab19f8f0420e1765dab91436948c34e0440162426ffb6c62361ff850623b9ac622d60ce44b4d12bba83f4bca51c339c595d00d4d4c428aed47c5e0fe740701d617f79f616dc43980775bb0e90f1cbd0ece20b44d9c8563459aed4d6adaf817fd1dec4596c73d1c1f9bee8d19c5455d0b3e0c7e00"/678, &(0x7f00000000c0)=0x9f, 0x0, 0x0) chmod(&(0x7f0000000040)='./file0\x00', 0x166) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000240)={{0x4, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x7}, 0x5, 0xfffc, 0x0, 0x0, 0x1, 0x0, 0x800000800000000}) shmat(r1, &(0x7f0000001000/0x3000)=nil, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) msync(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) recvfrom(r0, &(0x7f0000000340)=""/135, 0x87, 0x1040, 0x0, 0x0) sysctl$kern(&(0x7f00000000c0)={0x1, 0x59}, 0x2, &(0x7f0000000100)="71f91e2e71ac0058bc5a91501994a34b8e5f84cf71b59c7af6c37082", &(0x7f0000000080)=0x1c, 0x0, 0x0) 0s ago: executing program 8 (id=187): r0 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$WSDISPLAYIO_GVIDEO(r0, 0x40045744, &(0x7f0000000040)) sysctl$kern(&(0x7f00000000c0)={0x1, 0x24}, 0x2, 0x0, 0xfffffffffffffffe, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.55' (ED25519) to the list of known hosts. pmap_unwire: wiring for pmap 0xfffffd806c4a5400 va 0x20000000f000 didn't change! panic: pool_do_get: shmpl free list modified: page 0xfffffd806bd91000; item addr 0xfffffd806bd917e0; offset 0x40=0x683b4818 Stopped at db_enter+0x25: addq $0x8,%rsp TID PID UID PRFLAGS PFLAGS CPU COMMAND 273493 90351 32767 0x10 0 0 syz-executor *300593 90351 32767 0x10 0x4000000 1K syz-executor db_enter() at db_enter+0x25 panic(ffffffff833d2a48) at panic+0x1e5 pool_do_get(ffffffff838fec00,1,ffff80003b002cb8) at pool_do_get+0x5ea pool_get(ffffffff838fec00,1) at pool_get+0x149 shmget_allocate_segment(ffff8000fffe9c58,ffff80003b002f10,0,ffff80003b002e60) at shmget_allocate_segment+0x1a7 sys_shmget(ffff8000fffe9c58,ffff80003b002f10,ffff80003b002e60) at sys_shmget+0x1b2 syscall(ffff80003b002f10) at syscall+0xb08 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x48f5f3e0660, count: 7 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{1}> ddb{1}> set $lines = 0 ddb{1}> set $maxwidth = 0 ddb{1}> show panic *cpu1: pool_do_get: shmpl free list modified: page 0xfffffd806bd91000; item addr 0xfffffd806bd917e0; offset 0x40=0x683b4818 ddb{1}> trace db_enter() at db_enter+0x25 panic(ffffffff833d2a48) at panic+0x1e5 pool_do_get(ffffffff838fec00,1,ffff80003b002cb8) at pool_do_get+0x5ea pool_get(ffffffff838fec00,1) at pool_get+0x149 shmget_allocate_segment(ffff8000fffe9c58,ffff80003b002f10,0,ffff80003b002e60) at shmget_allocate_segment+0x1a7 sys_shmget(ffff8000fffe9c58,ffff80003b002f10,ffff80003b002e60) at sys_shmget+0x1b2 syscall(ffff80003b002f10) at syscall+0xb08 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x48f5f3e0660, count: -8 ddb{1}> show registers rdi 0 rsi 0x1 rbp 0xffff80003b002af0 rbx 0xffff8000299dedcf rdx 0xffff800001436e80 rcx 0xffff8000fffe9c58 rax 0xffff8000299ddff0 r8 0x101010101010101 r9 0x8080808080808080 r10 0x6bf7ab591ed4914d r11 0xb79ecd3acb5328bf r12 0xffff8000299debd0 r13 0 r14 0 r15 0x1 rip 0xffffffff81fc9f65 db_enter+0x25 cs 0x8 rflags 0x246 rsp 0xffff80003b002ae0 ss 0x10 db_enter+0x25: addq $0x8,%rsp ddb{1}> show proc PROC (syz-executor) tid=300593 pid=90351 tcnt=2 stat=onproc flags process=10 proc=4000000 runpri=32, usrpri=50, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff8000fffe8cf8,0xffff8000fffe99d8 process=0xffff8000fffe4ea8 user=0xffff80003affd000, vmspace=0xfffffd806c4ac5c0 estcpu=28, cpticks=1, pctcpu=0.0, user=0, sys=1, intr=0 ddb{1}> ps PID TID PPID UID S FLAGS WAIT COMMAND 34331 142947 51051 0 2 0x2 sshd-session 90351 273493 47258 32767 7 0x10 syz-executor *90351 300593 47258 32767 7 0x4000010 syz-executor 66721 78824 26255 32767 2 0x10 syz-executor 66721 132034 26255 32767 2 0x4000010 syz-executor 66107 150455 28712 32767 2 0x10 syz-executor 66107 325752 28712 32767 3 0x4000090 fsleep syz-executor 66107 106944 28712 32767 3 0x4000090 fsleep syz-executor 88851 401624 8938 32767 3 0x90 nanoslp syz-executor 88851 362118 8938 32767 3 0x4000090 msgwait syz-executor 88851 154124 8938 32767 3 0x4000090 fsleep syz-executor 3969 162703 0 0 3 0x14200 bored sosplice 244 480268 67104 32767 3 0x90 nanoslp syz-executor 29963 144765 81088 32767 3 0x90 wait syz-executor 31336 82617 94619 32767 3 0x90 nanoslp syz-executor 26255 166981 73436 32767 3 0x90 nanoslp syz-executor 8938 330777 3855 32767 3 0x90 nanoslp syz-executor 47258 44311 42977 32767 3 0x90 nanoslp syz-executor 28712 260643 428 32767 3 0x90 nanoslp syz-executor 67104 257460 15762 0 3 0x82 wait syz-executor 81088 294018 15762 0 3 0x82 wait syz-executor 73436 390204 15762 0 3 0x82 wait syz-executor 3855 130590 15762 0 3 0x82 wait syz-executor 94619 114342 15762 0 3 0x82 wait syz-executor 42977 178981 15762 0 3 0x82 wait syz-executor 428 100177 15762 0 3 0x82 wait syz-executor 15762 121521 82097 0 3 0x82 nanoslp syz-executor 82097 492835 60398 0 3 0x10008a sigsusp ksh 60398 512818 36141 0 3 0x98 kqread sshd-session 36141 486110 51051 0 3 0x92 kqread sshd-session 41993 147675 1 0 3 0x100083 ttyin getty 51051 268735 1 0 3 0x88 kqread sshd 27848 490058 15359 73 3 0x1100090 kqread syslogd 15359 390142 1 0 3 0x100082 sbwait syslogd 91527 397717 1 0 3 0x100080 kqread resolvd 15580 283238 38728 77 3 0x100092 kqread dhcpleased 44893 408746 38728 77 3 0x100092 kqread dhcpleased 38728 28432 1 0 3 0x80 kqread dhcpleased 91237 270090 0 0 3 0x14200 bored smr 13341 142602 0 0 2 0x14200 zerothread 85336 330282 0 0 3 0x14200 aiodoned aiodoned 16618 488256 0 0 3 0x14200 syncer update 99975 494961 0 0 3 0x14200 cleaner cleaner 31292 395616 0 0 3 0x14200 reaper reaper 7031 26147 0 0 3 0x14200 pgdaemon pagedaemon 66362 373210 0 0 3 0x14200 bored viomb 53670 433187 0 0 3 0x40014200 acpi0 acpi0 14057 470319 0 0 3 0x40014200 idle1 22285 404036 0 0 3 0x14200 bored softnet3 37896 457542 0 0 3 0x14200 bored softnet2 99491 415300 0 0 3 0x14200 bored softnet1 85655 265288 0 0 3 0x14200 bored softnet0 28627 499676 0 0 3 0x14200 bored systqmp 28732 516485 0 0 3 0x14200 bored systq 84365 307111 0 0 3 0x14200 tmoslp softclockmp 33143 421286 0 0 3 0x40014200 tmoslp softclock 87688 285065 0 0 3 0x40014200 idle0 1 375904 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb{1}> show all locks CPU 1: exclusive mutex shmpl r = 0 (0xffffffff838fec18) #0 witness_lock+0x5bb #1 mtx_enter_try+0x1ad #2 mtx_enter+0x62 #3 pool_get+0x10b #4 shmget_allocate_segment+0x1a7 #5 sys_shmget+0x1b2 #6 syscall+0xb08 #7 Xsyscall+0x128 Process 90351 (syz-executor) thread 0xffff8000fffe9c58 (300593) exclusive kernel_lock &kernel_lock r = 0 (0xffffffff838fce30) #0 witness_lock+0x5bb #1 syscall+0xae6 #2 Xsyscall+0x128 exclusive mutex shmpl r = 0 (0xffffffff838fec18) #0 witness_lock+0x5bb #1 mtx_enter_try+0x1ad #2 mtx_enter+0x62 #3 pool_get+0x10b #4 shmget_allocate_segment+0x1a7 #5 sys_shmget+0x1b2 #6 syscall+0xb08 #7 Xsyscall+0x128 ddb{1}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 10194 10954K 10966K 166960K 11274 0 pcb 17 12K 12K 166960K 17 0 rtable 218 6K 7K 166960K 366 0 pf 29 16K 16K 166960K 31 0 ifaddr 38 6K 7K 166960K 44 0 ifgroup 46 2K 2K 166960K 50 0 sysctl 2 1K 9K 166960K 6 0 counters 66 36K 36K 166960K 68 0 ioctlops 0 0K 2K 166960K 33 0 iov 0 0K 12K 166960K 5 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1334 84K 84K 166960K 1437 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 5K 166960K 11 0 VM map 2 1K 1K 166960K 2 0 sem 11 0K 0K 166960K 13 0 dirhash 12 2K 2K 166960K 15 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 23 85K 125K 166960K 346 0 sigio 0 0K 0K 166960K 2 0 proc 58 79K 115K 166960K 503 0 subproc 63 3K 4K 166960K 108 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 61 0 in_multi 88 6K 7K 166960K 107 0 ether_multi 1 0K 0K 166960K 1 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 109 493K 493K 166960K 109 0 exec 0 0K 1K 166960K 386 0 fusefs mount 1 32K 32K 166960K 1 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 253 152K 186K 166960K 4769 0 UVM aobj 11 2K 2K 166960K 14 0 pinsyscall 45 90K 114K 166960K 1392 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 0K 166960K 14 0 NDP 10 0K 2K 166960K 27 0 temp 44 8689K 8753K 166960K 4654 0 kqueue 13 20K 26K 166960K 53 0 SYN cache 2 16K 16K 166960K 2 0 ddb{1}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 26 0 0 1 0 1 1 0 8 0 rtpcb 120 54 0 51 1 0 1 1 0 8 0 rtentry 176 114 0 12 6 0 6 6 0 8 0 unpcb 144 176 0 156 1 0 1 1 0 8 0 syncache 336 6 0 6 1 0 1 1 0 8 1 tcpcb 808 77 0 69 2 0 2 2 0 8 1 arp 128 20 0 2 1 0 1 1 0 8 0 ipq 40 1 0 0 1 0 1 1 0 8 0 ipqe 40 1 0 0 1 0 1 1 0 8 0 inpcb 384 337 0 324 8 0 8 8 0 8 6 nd6 144 25 0 3 1 0 1 1 0 8 0 kcovpl 48 12 0 5 1 0 1 1 0 8 0 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 455 0 44 29 0 29 29 0 8 2 art_table 32 456 0 44 4 0 4 4 0 8 0 art_node 16 113 0 20 1 0 1 1 0 8 0 sysvmsgpl 40 7 0 2 1 0 1 1 0 8 0 semupl 112 1 0 1 1 0 1 1 0 8 1 semapl 112 11 0 2 1 0 1 1 0 8 0 shmpl 112 11 0 3 1 0 1 1 0 8 0 pool(0xffffffff838fec00:shmpl): page inconsistency: page 0xfffffd806bd91000; 26 on list, 8 missing, 35 items per page dirhash 1024 19 0 2 3 0 3 3 0 8 0 dino2pl 256 1867 0 357 95 0 95 95 0 8 0 ffsino 288 1867 0 357 109 0 109 109 0 8 0 nchpl 144 2313 0 630 63 0 63 63 0 8 0 uvmvnodes 80 1984 0 0 41 0 41 41 0 8 0 vnodes 216 1984 0 0 111 0 111 111 0 8 0 namei 1024 7343 0 7343 1 0 1 1 0 8 1 percpumem 16 49 0 1 1 0 1 1 0 8 0 kstatmem 264 24 0 2 2 0 2 2 0 8 0 scxspl 216 7560 0 7560 3 2 1 2 1 8 1 plimitpl 152 86 0 62 2 0 2 2 0 8 0 sigapl 424 624 0 569 8 0 8 8 0 8 1 knotepl 120 309 0 0 10 0 10 10 0 8 0 kqueuepl 224 138 0 129 5 0 5 5 0 8 4 pipepl 336 132 0 105 3 0 3 3 0 8 0 fdescpl 520 605 0 569 4 0 4 4 0 8 0 filepl 160 2993 0 2783 15 0 15 15 0 8 3 lockfpl 104 73 0 71 1 0 1 1 0 8 0 lockfspl 48 28 0 26 1 0 1 1 0 8 0 sessionpl 144 28 0 12 1 0 1 1 0 8 0 pgrppl 48 43 0 20 1 0 1 1 0 8 0 ucredpl 104 441 0 423 1 0 1 1 0 8 0 zombiepl 144 572 0 569 1 0 1 1 0 8 0 processpl 1240 624 0 569 5 0 5 5 0 8 0 procpl 656 956 0 895 6 0 6 6 0 8 0 sosppl 168 1 0 1 1 0 1 1 0 8 1 sockpl 728 568 0 533 10 0 10 10 0 8 6 mcl64k 65536 5 0 0 1 0 1 1 0 8 0 mcl16k 16384 1 0 0 1 0 1 1 0 8 0 mcl8k 8192 3 0 0 1 0 1 1 0 8 0 mcl4k 4096 128 0 0 16 0 16 16 0 8 0 mcl2k 2048 21 0 0 3 0 3 3 0 8 0 mtagpl 96 1 0 0 1 0 1 1 0 8 0 mbufpl 256 280 0 0 18 0 18 18 0 8 0 bufpl 280 2664 0 116 182 0 182 182 0 8 0 anonpl 32 7390 0 0 60 0 60 60 0 246 0 amapchunkpl 152 14904 0 14348 30 0 30 30 0 158 4 amappl16 200 2151 0 2126 11 0 11 11 0 8 7 amappl15 192 8 0 8 1 1 0 1 0 8 0 amappl14 184 109 0 99 1 0 1 1 0 8 0 amappl13 176 10 0 10 1 1 0 1 0 8 0 amappl12 168 1217 0 1182 3 0 3 3 0 8 1 amappl11 160 43 0 33 1 0 1 1 0 8 0 amappl10 152 4 0 4 1 1 0 1 0 8 0 amappl9 144 247 0 246 1 0 1 1 0 8 0 amappl8 136 28 0 26 1 0 1 1 0 8 0 amappl7 128 103 0 93 1 0 1 1 0 8 0 amappl6 120 183 0 179 1 0 1 1 0 8 0 amappl5 112 116 0 110 1 0 1 1 0 8 0 amappl4 104 299 0 283 1 0 1 1 0 8 0 amappl3 96 2522 0 2394 4 0 4 4 0 8 0 amappl2 88 627 0 572 2 0 2 2 0 8 0 amappl1 80 9211 0 8646 15 0 15 15 0 8 1 amappl 88 4064 0 3876 5 0 5 5 0 92 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 13 0 3 1 0 1 1 0 8 0 uaddrrnd 24 605 0 569 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 605 0 569 1 0 1 1 0 8 0 vmmpekpl 168 6640 0 6601 3 0 3 3 0 8 0 vmmpepl 168 44805 0 42732 103 0 103 103 0 357 4 vmsppl 480 604 0 569 7 1 6 6 0 8 1 rwobjpl 72 16823 0 13990 52 0 52 52 0 8 0 pdppl 4096 1218 0 1138 112 28 84 98 0 8 4 pvpl 32 15436 0 0 126 1 125 125 0 265 0 pmappl 256 604 0 569 4 1 3 3 0 8 0 extentpl 40 45 0 27 1 0 1 1 0 8 0 phpool 112 403 0 31 11 0 11 11 0 8 0 ddb{1}> machine ddbcpu 0 Stopped at x86_ipi_db+0x27: addq $0x8,%rsp x86_ipi_db(ffffffff837dfff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __mp_lock(ffffffff838fcc28) at __mp_lock+0x192 softintr_dispatch(0) at softintr_dispatch+0x12a dosoftint(0) at dosoftint+0x54 Xsoftclock() at Xsoftclock+0x27 end of kernel end trace frame: 0x7273986ddbd0, count: 8 ddb{0}> trace x86_ipi_db(ffffffff837dfff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __mp_lock(ffffffff838fcc28) at __mp_lock+0x192 softintr_dispatch(0) at softintr_dispatch+0x12a dosoftint(0) at dosoftint+0x54 Xsoftclock() at Xsoftclock+0x27 end of kernel end trace frame: 0x7273986ddbd0, count: -7 ddb{0}> machine ddbcpu 1 Stopped at db_enter+0x25: addq $0x8,%rsp db_enter() at db_enter+0x25 panic(ffffffff833d2a48) at panic+0x1e5 pool_do_get(ffffffff838fec00,1,ffff80003b002cb8) at pool_do_get+0x5ea pool_get(ffffffff838fec00,1) at pool_get+0x149 shmget_allocate_segment(ffff8000fffe9c58,ffff80003b002f10,0,ffff80003b002e60) at shmget_allocate_segment+0x1a7 sys_shmget(ffff8000fffe9c58,ffff80003b002f10,ffff80003b002e60) at sys_shmget+0x1b2 syscall(ffff80003b002f10) at syscall+0xb08 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x48f5f3e0660, count: 7 ddb{1}> trace db_enter() at db_enter+0x25 panic(ffffffff833d2a48) at panic+0x1e5 pool_do_get(ffffffff838fec00,1,ffff80003b002cb8) at pool_do_get+0x5ea pool_get(ffffffff838fec00,1) at pool_get+0x149 shmget_allocate_segment(ffff8000fffe9c58,ffff80003b002f10,0,ffff80003b002e60) at shmget_allocate_segment+0x1a7 sys_shmget(ffff8000fffe9c58,ffff80003b002f10,ffff80003b002e60) at sys_shmget+0x1b2 syscall(ffff80003b002f10) at syscall+0xb08 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x48f5f3e0660, count: -8