last executing test programs: 8.221507293s ago: executing program 4 (id=24): r0 = socket(0x18, 0x0, 0x29) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) getsockopt$sock_int(r1, 0xffff, 0x1002, &(0x7f0000000000), &(0x7f0000000100)=0x4) getsockopt$sock_int(r0, 0xffff, 0x92b, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 8.220912156s ago: executing program 4 (id=25): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) sysctl$vfs_ffs(&(0x7f0000001100)={0xa, 0x1, 0x12}, 0x3, 0x0, 0x0, 0x0, 0x0) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000240)={{0x4, 0x0, 0x0, 0x0, 0xffffffffffffffe7, 0x3, 0x7}, 0x5, 0x0, 0x0, 0x0, 0x1, 0x1, 0x800000800000000}) sysctl$hw(&(0x7f0000000040)={0x7, 0x10}, 0x2, &(0x7f0000000080)="006400f0cee7686b", &(0x7f0000000000)=0x8, 0x0, 0x0) shmat(r0, &(0x7f0000001000/0x3000)=nil, 0x0) sysctl$net_inet_tcp(&(0x7f0000001140)={0x4, 0x2, 0x6, 0x9}, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000026c0)={{0x0, 0x0, 0x0, 0x0, 0x0}, 0x3}, 0x38, 0x800, 0x0) madvise(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$unix(0xffffffffffffffff, &(0x7f0000002980)={0x0, 0x0, 0x0}, 0x2) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) (async) sysctl$vfs_ffs(&(0x7f0000001100)={0xa, 0x1, 0x12}, 0x3, 0x0, 0x0, 0x0, 0x0) (async) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) (async) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000240)={{0x4, 0x0, 0x0, 0x0, 0xffffffffffffffe7, 0x3, 0x7}, 0x5, 0x0, 0x0, 0x0, 0x1, 0x1, 0x800000800000000}) (async) sysctl$hw(&(0x7f0000000040)={0x7, 0x10}, 0x2, &(0x7f0000000080)="006400f0cee7686b", &(0x7f0000000000)=0x8, 0x0, 0x0) (async) shmat(r0, &(0x7f0000001000/0x3000)=nil, 0x0) (async) sysctl$net_inet_tcp(&(0x7f0000001140)={0x4, 0x2, 0x6, 0x9}, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0) (async) recvmmsg(0xffffffffffffffff, &(0x7f00000026c0)={{0x0, 0x0, 0x0, 0x0, 0x0}, 0x3}, 0x38, 0x800, 0x0) (async) madvise(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) sendmsg$unix(0xffffffffffffffff, &(0x7f0000002980)={0x0, 0x0, 0x0}, 0x2) (async) 7.319992015s ago: executing program 4 (id=60): r0 = syz_open_pts() pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setstatus(r1, 0x4, 0x4) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="19", 0xfffffe98}], 0x1) ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000300)={0x65000000, 0x9, 0xfbfffffe, 0x10000, "d76c7c46fbff0f676bfb00", 0x800}) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="80fb6fdf5a6283ae982e2c21415054e52481ee2932581165c1120d50632492f72addccfb7b0b9cd07d5db095220401b8b7ce175f596ae9095ea0eac71a11d955144c1c12568c8e85cb86fde992ffa850a04e23397f85e46d015b8ad6e687f1e97d5295aca3098e76", 0x68}], 0x1) syz_open_pts() symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') open(&(0x7f0000000000)='./file0\x00', 0x9cab835cfdc52675, 0xa2) 6.374640648s ago: executing program 4 (id=60): r0 = syz_open_pts() pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setstatus(r1, 0x4, 0x4) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="19", 0xfffffe98}], 0x1) ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000300)={0x65000000, 0x9, 0xfbfffffe, 0x10000, "d76c7c46fbff0f676bfb00", 0x800}) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="80fb6fdf5a6283ae982e2c21415054e52481ee2932581165c1120d50632492f72addccfb7b0b9cd07d5db095220401b8b7ce175f596ae9095ea0eac71a11d955144c1c12568c8e85cb86fde992ffa850a04e23397f85e46d015b8ad6e687f1e97d5295aca3098e76", 0x68}], 0x1) syz_open_pts() symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') open(&(0x7f0000000000)='./file0\x00', 0x9cab835cfdc52675, 0xa2) 5.890005912s ago: executing program 6 (id=83): open(&(0x7f0000000380)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7949) sysctl$kern(&(0x7f00000000c0)={0x1, 0x5}, 0x2, 0x0, 0x0, 0x0, 0x0) setrlimit(0x8, &(0x7f00000000c0)={0x45, 0x56}) syz_open_pts() syz_emit_ethernet(0x136d, &(0x7f0000000cc0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd60db090013370000fed38d0000000200000000000000274fff020000000000000000000000000001880090"]) r0 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_int(r0, 0xffff, 0x20, 0x0, 0x0) r1 = openat$audioctl(0xffffffffffffff9c, &(0x7f0000000000), 0x8, 0x0) ioctl$AUDIO_GETPOS_ctl(r1, 0x40104123, &(0x7f0000000200)) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0x80000000, 0xffff63de, 0x7, 0x2, 0x8, 0x3, 0x40, 0x10, [{0x40, 0x3, 0x775, 0x80000201}, {0x8, 0x8, 0x9, 0xfff}, {0x7, 0xfdfffffe, 0x7, 0x20000}, {0x5, 0x2, 0xf}, {0x0, 0x7, 0xf11, 0xb}, {0x3, 0xffff, 0x80d0, 0x1}, {0x3, 0x801, 0x100, 0x5}, {0x3, 0x40009, 0xfffffffb, 0xfbffe2e9}, {0x9b, 0xffe, 0x9, 0x7fff}, {0x3, 0xfffffff8, 0x5, 0x8bfe}, {0x2, 0x8000000, 0x44d2, 0x2}, {0x4, 0xc7ce, 0x800000, 0x5}, {0xd6, 0x106, 0x8, 0x3e}, {0x200003, 0x80000000, 0x9, 0x6f5fc48b}, {0x81, 0x0, 0x1001, 0x5}, {0x9be2, 0x8001, 0x5, 0x69}]}) r2 = syz_open_pts() mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2, 0x5010, r1, 0x6cb4) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000280)='\x00', 0x1}], 0x1) setrlimit(0x3, &(0x7f00000001c0)={0xa, 0xef}) ioctl$TIOCDRAIN(r2, 0x2000745e) symlink(&(0x7f0000000180)='.\x00', &(0x7f0000000040)='./file0\x00') chflagsat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0/..\x00', 0x10000, 0x0) mkdir(&(0x7f0000000040)='./file2\x00', 0x1c1) mkdir(&(0x7f0000000000)='./file2/file0\x00', 0xa3) writev(r1, &(0x7f00000008c0)=[{&(0x7f00000002c0)="1032a95d3be4209f356c2a38ebec52a897a06c8f8c467bc91ebb77de16abe22f552ed7c6c9f6b99c082cbd509e226ce9231f3d8fa72f644bac42780680f17cea10456943fe7ee1d2b1c384bcba9438d3a7e234c549342185e9a6c9e5a5ae85683748330dc18838875e6bac25086f211a7fd5fe738cd2b2a7b7ed324bda6b0e43526b12c0d8eeb25c3e85e11e2882709c4a66af984236aae1c0670d7fdc6038ccea6962965484abf10c64df3db85c619dfa0873657f19004f3e2951", 0xbb}, {&(0x7f00000003c0)="ed22451893bc4f9e443340dcbb5b15dca72a58e11dda5b8bd344fde2d5c1f5dac230907c756cf3564c4c3767813f06ef6e0db79f0faffa835c0cffa0b9fb8e726ee0872ee29c0582f22f131f91c51634b215081492c04a5b224bddb02adcb90c3b2cb4e7fe952be3b6eadf4b250399157f0b936fdd42578bfbef59c3279fc40590b54d5008397085a8839b06723eb750cec114d19098ccc6c49f9c9a72e1d8ce167844a4da7d75f6ab5dc67aec9f9eb61a968c8df8e62471af6d4fb1968b2c2cd9864809848e1974ebc273a45d6d475d2269b815f829ffc09909f065612d05051647b15e05c5e87cff4b7472184f", 0xee}, {&(0x7f00000004c0)="5137d6e92af42cca38e46f4263dc9c4abf3f79e966b0c44f940793da7f8eae75fe35f1a0215a239960909cb11ba7e13db4d349e7f2d8a71815012d26b4229f33747af785ccf08d1102b973170eb0784aa55a8666b4d7f2d1017de8f737894c621a1044051df514e811efd54b5f1e8c6e34b0ed4ce95444a803722264e3ecc67d27eda23a321db0a009bdc740ba0788cae3c25b84f49909ac13f7e8b3973a2c22193ac7725cfd328d39ae9daab134150cdff3be2ecb7ced66fa0bc7d35dce2b77ae18b03367c4f1bfc9183e58024a80e66fc56354c2dcdd0db79a0c0235ad9916fda686982bbe7ec09805ebaa", 0xec}, {&(0x7f00000005c0)="4833af2258f7a7e0934acd74221bc23ed9be2ae6234ff90901e9f13d57befdbdab24996ae4abb32cb428a490954ad2feb7ca953dec7539626c068139deb5ea9cf2c76a48b278100c7fd7e572bbda9d177d871b83e22a288389d97d0eac03145b6b1ddddd8eda519b7e1e6798b1d06b111544aeceebe6ced841102bce69a226776ea732a40154bb3a4828edab31603cc5b7c616cdc7a7742788a6e648e459bdaef60da3630e2e8869fcd7703e0747aa75958183d10b7e77f515abb4b1e44109a80ca9481c", 0xc4}, {&(0x7f00000006c0)="ef61a1594062c1e6e72a15f3867f79279f3843ab35a48c6a0a582b9616465e4a7adb9f143d41f217ca8c79dfa2a6ab4ed7cd677bc1acc63a3e4f634dafc008b066015c9e782a612e2d855d0440ba25bd6c7f2fe53f56faead9b61d6205639846a566c863dddcf575185437b29151081c629a03d93a1cc177ac8500d319cc06ea2525dfabdfa726130d06aadc6271b139a9166f3c47a0c0e0b45e2fe62148cba628cffd4b965de44501aca3f4c70782061bd4628da9fc8e6cb5d155bd97349caa1d6c48a3054df7509b76a499d3c65b77549bd8c59fc6d842797a8a10fdc0a0", 0xdf}, {&(0x7f00000007c0)="89d30cfc07f9f12271052930ffbb9a6cb54b874db7bff41bf007ea86e27049f79393abe96e8e6cc31dee4d3a598cc7005176a59f814d541bdb02406fd3", 0x3d}, {&(0x7f0000000800)="ab660f199052e83145cdd049630eea83986655f8487ae2ad4ed563963fb5faebc5502e59e6f35c58892bc00bbd3a3d9fb0f949295e773a0c791c330c371223678bf7b89d24266188cece966d2789066f7f06bce026765b87199b06532de52a19340fdc6fc95b8eaa2b876b448a85aabd2bcb55bd06ea5b40b5cc355a1992ccf4e3e45f6363ffb9728916097042d4a711c03aa3555ba1f126460ed873baafba4378f3", 0xa2}], 0x7) closefrom(r2) poll(&(0x7f0000000000), 0x35, 0x0) execve(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) 5.814588955s ago: executing program 6 (id=85): ioctl$BIOCSETWF(0xffffffffffffff9c, 0x80104277, &(0x7f0000000040)={0x2, &(0x7f00000000c0)=[{0x1ff, 0x3, 0x26}, {0x5, 0x0, 0x0, 0x4}]}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x31}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setrlimit(0x8, &(0x7f0000000580)={0x0, 0x56}) sendmsg$unix(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="28000000ffff000001"], 0x28, 0x402}, 0x0) recvmmsg(r0, &(0x7f0000000280)={{0x0, 0x0, &(0x7f00000025c0)=[{&(0x7f00000001c0)=""/151, 0x97}, {&(0x7f0000000300)=""/54, 0x36}, {&(0x7f00000002c0)=""/26, 0x1a}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/4096, 0x1000}], 0x5, &(0x7f0000000180)}, 0x1}, 0x38, 0x2000, 0x0) r2 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$VT_OPENQRY(r2, 0x40047601, &(0x7f0000000100)) sysctl$net_inet_icmp(&(0x7f00000000c0)={0x4, 0x2, 0x1, 0x5}, 0x4, 0x0, 0x0, 0x0, 0x0) 5.812277235s ago: executing program 6 (id=87): sysctl$hw(&(0x7f0000000000)={0x6, 0x6}, 0x2, 0x0, 0x0, 0x0, 0x0) unveil(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='c\x00') sysctl$hw(&(0x7f0000000000)={0x6, 0x16}, 0x2, &(0x7f0000000100)="8b85", &(0x7f0000000140)=0x2, &(0x7f0000000180)="b9fbbaa5f923912fe5b326ac24f252c21b92e9b072dc03550c1484c53090d31a42200573e04ea22609349984c6da952f0ff62f37b44d6f000c080569be05a6c354d553f531ded98b633894fa3c16a5202bb3284525a6fce47f3f343542c9a2210793ff3a60d29f339c506cfd1f594d8de8fc81b66b5c0b196b4257d79cfba3f74f020ba63d5f34d2763ad570dea92ef28714b3d3", 0x94) sysctl$hw(&(0x7f0000000240)={0x6, 0x19}, 0x2, &(0x7f0000000280)="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", &(0x7f0000001280)=0x1000, &(0x7f00000012c0)="6e4076e46e93c085827c2bca8af6c8c88cd7ec9cfbac988a9d38222ef55ac1cefaad2d0404628ad38191e3b13c2bf80610ec1ca572a6b1be8a56a7d59cae4e67fc3a15dd6b757a362dc309cc69584b322db77787246c152610d773e21c12d5e3ab6aa5de01700275df71be97c7f5c9e69b69d2ff14f80ca196715bc15fb8ce0d4ba90622e3e8919727fedcb8eb71f89e0a308387a8010c2784aa741668a0841adf756f320f71a93b780038178ffd70ff25e19cd8b9745409721425b7f56c1513a8782eb71c141a7a61f04752cc2b49a75799063e1ffda59feb9e8cd4674cd249d3d99a9ba5f2287cf2847007d1656f73de153f201c043e64", 0xf8) openat$wsdisplay(0xffffffffffffff9c, &(0x7f00000000c0), 0x180, 0x0) 5.688727521s ago: executing program 6 (id=91): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f00000000c0)=@file={0xe, 0x1, './file0\x00'}, 0xa) open(&(0x7f0000000000)='./file0\x00', 0x9cab835cfdc52675, 0x100) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x0, 0x0, 0x0, 0x0, 0x10, 0x85, 0x48e, 0x0, 0x5}, 0x5, 0x4, 0x800000000, 0x0, 0x2, 0x4000000000003, 0x20000000007f, 0x40000200000002}) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0x80000000, 0xffff63de, 0x7, 0x1, 0x8, 0x3, 0x40, 0x10, [{0x40, 0x3, 0x775, 0x80000201}, {0x8, 0x8, 0x9, 0xfff}, {0x8, 0xfdfffffe, 0x7, 0x20000}, {0x5, 0x6, 0x3}, {0x0, 0x7, 0xf11, 0xb}, {0x3, 0xffff, 0x80d0, 0x1}, {0x7f, 0x801, 0x100, 0x5}, {0x3, 0x40009, 0xfffffffb, 0xfbffe2e9}, {0x9b, 0xffe, 0x9, 0x7fff}, {0x3, 0xfffffff8, 0x5, 0x8bfe}, {0x2, 0x8000000, 0x44d2, 0x2}, {0x4, 0xc7ce, 0x800000, 0x5}, {0xd6, 0x106, 0x92fb, 0x3e}, {0x200003, 0x80000000, 0x9, 0x6f5fc48b}, {0x81, 0x0, 0x1001, 0x5}, {0x9be2, 0x8001, 0x5, 0x69}]}) execve(0x0, &(0x7f00000002c0)=[&(0x7f0000000100)='tap'], 0x0) r1 = socket(0x1, 0x1, 0x0) ioctl$FIONREAD(r1, 0xc028698a, &(0x7f0000000100)) r2 = socket(0x2, 0x400000000002, 0x0) setsockopt(r2, 0x0, 0x7, &(0x7f00000000c0), 0x0) sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0x37) write(r1, &(0x7f0000000180)="bf5f52c899452d55e62002e4493fdde343a26754363efd65beb70128ace5404eff609644e85f15babaa953feac3722b419f3a85f2058ec280e88f04cdfb2e0e2f28ec6e5ad125af567d133ac555de111d24744ed0495f8b44f2c8f44e9b53a8f273a438cce10dd4eb1064cd5c53b96d19742b409aa7421ebcf36af4e3006182873ff4afb25a99dc8f27eaecf72fde9efba9835681392820df2df551c9116d1de663775a31d2d154997687820286efb13b6cacf37925a11af24522d97043455ab3b813e297c90012f4f57463d53a021478494a2cbda6fb14254c5e8d1f7f6c21df0d42c0dbaee848e76c01320807a", 0xee) 5.685654636s ago: executing program 6 (id=94): open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x186) open$dir(&(0x7f0000000040)='./file0\x00', 0xf02, 0x186) ktrace(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) select(0x40, &(0x7f0000000940)={0x9, 0xffffffeffffffff7, 0x8b, 0x7f, 0x2639, 0x90, 0x4, 0xffff}, 0x0, 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x9cab835cfdc52675, 0xdc) 5.640135548s ago: executing program 6 (id=96): r0 = syz_open_pts() ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000340)={0x5, 0x90000000, 0xfffffffe, 0x966b, "ff14e7130b1e586ca6294000", 0x44, 0x3effd}) (async) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r1, 0x0, 0x200000000000b, &(0x7f0000000080)='\x00', 0x1) (async) setsockopt$inet_opts(r1, 0x0, 0x9, &(0x7f00000000c0), 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000380)="079facfaaed69aea4dc561c3b736feac0a2a76087be8b904ddc6f90b66e0f69b6dfba683b348224cf0ccc2a39b0f79389a2bd9b211424a22ca014b9231e253e257706c75b3f320166475c72455021edf575fab8b5d65b8d261c87c3ccc4e784ea7462f3723edabb8e26d27acb1797e2ef4db27270a", 0xffffff01}], 0x1) (async) syz_open_pts() (async) ioctl$TIOCSTAT(r0, 0x20007465) 4.481677441s ago: executing program 7 (id=127): r0 = syz_open_pts() ioctl$TIOCSCTTY(r0, 0x20007461) (async) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x800, 0x0) fcntl$lock(r1, 0x7, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffd, 0x20001fffffffd}) (async) r2 = syz_open_pts() close(r2) (async) ioctl$FIONBIO(r2, 0x8004667e, &(0x7f0000000140)=0x6) (async) ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f0000000100)={0x920e, 0x9, 0xffffdf7f, 0xffffffd0, "08954c1cfabb0a0004293cfcef0800", 0x3, 0x100}) (async) writev(r2, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) (async) r3 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r4, &(0x7f0000000880)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x5d}, 0x7}, 0x38, 0x1842, 0x0) (async) r5 = kqueue1(0x10002) ppoll(&(0x7f0000000040)=[{r0, 0x20}, {r1, 0x40}, {0xffffffffffffffff, 0x4}, {r2, 0x4}, {r3, 0x20}, {r4, 0x10}, {r5, 0x80}], 0x7, &(0x7f0000000080)={0x5, 0xb}, &(0x7f00000000c0)={0x80000001}) 4.481398941s ago: executing program 7 (id=128): r0 = socket(0x2, 0x8002, 0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socket(0x2, 0x2, 0x0) syz_open_pts() (async) syz_open_pts() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setrlimit(0x8, &(0x7f0000000580)={0xa, 0x56}) sendmsg$unix(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="28000000ffff000001"], 0x28, 0x402}, 0x0) sysctl$net_inet_tcp(&(0x7f0000000000)={0x4, 0x2, 0x6, 0x19}, 0x4, 0x0, 0x0, 0x0, 0x0) openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f00000003c0), 0x800, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000380), 0x20000, 0x0) recvmmsg(r2, &(0x7f0000000000)={{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000180), 0xfffffffffffffd46}, 0xfffffffd}, 0x10, 0x2000, 0x0) closefrom(r1) (async) closefrom(r1) ioctl$DRM_IOCTL_MODE_CURSOR2(0xffffffffffffff9c, 0xc02464bb, &(0x7f0000000000)={0x1, 0x582c, 0x81, 0x4, 0x7, 0x1, 0x0, 0x8001, 0x6}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000080)={r4}) mkdir(&(0x7f0000000040)='./file2\x00', 0xc1) mkdir(&(0x7f00000000c0)='./file2/../file0\x00', 0xc2) (async) mkdir(&(0x7f00000000c0)='./file2/../file0\x00', 0xc2) rename(&(0x7f0000000100)='./file2/../file0/../file0\x00', &(0x7f0000000140)='./file2/../file0\x00') (async) rename(&(0x7f0000000100)='./file2/../file0/../file0\x00', &(0x7f0000000140)='./file2/../file0\x00') r6 = socket(0x18, 0x400000000002, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) socket(0x1, 0x2, 0x0) (async) r7 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r7, 0xc0106924, &(0x7f00000001c0)) (async) ioctl$FIONREAD(r7, 0xc0106924, &(0x7f00000001c0)) ioctl$FIONREAD(r6, 0xc1206949, &(0x7f0000000100)) sysctl$net_inet_udp(&(0x7f0000000040)={0x4, 0x2, 0x11, 0x2}, 0xb, &(0x7f0000000080), 0x0, 0x0, 0xffffffffffffff98) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB(r1, 0xc01c64ad, &(0x7f0000000100)={0x0, 0x6, 0x7, 0x6, 0xb, 0x7, r4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000140)={0x9, 0x6, 0x401}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000140)={0x9, 0x6, 0x401, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f0000000180)={0x0, 0x9, 0x100, 0x0, 0x2, [r8, r9, r5, r10], [0xfff, 0x0, 0x81, 0xfffe], [0xe, 0x4, 0xfffff170, 0x6fa], [0x0, 0x3, 0x4a4, 0x6]}) openat$dri(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dri/card0\x00', 0x800, 0x0) (async) r11 = openat$dri(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dri/card0\x00', 0x800, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r11, 0xc04064a0, &(0x7f0000000340)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], 0x8, 0x3, 0x1, 0x4, 0x5, 0x8, 0x5, 0x1}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r11, 0xc04064a0, &(0x7f0000000340)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], 0x8, 0x3, 0x1, 0x4, 0x5, 0x8, 0x5, 0x1}) 4.23142954s ago: executing program 7 (id=129): ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000040)={0x2, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x10000}, {0x2}]}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x33}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x24, 0x0, 0xffffffffffffffb8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) sysctl$kern(&(0x7f00000000c0)={0x1, 0x4e}, 0x3, &(0x7f0000000100)="71f95f84cf71b59c7afec37582", &(0x7f0000000080)=0x2, 0x0, 0x37) r0 = socket(0x18, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000240)={0x1c, 0x18, 0x0, 0xc, "fff500000002000044e4e86fcd070063", 0x8}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$net_inet_tcp(&(0x7f00000000c0)={0x4, 0x2, 0x6, 0x9}, 0x4, &(0x7f0000000140), &(0x7f0000000040), 0x0, 0x0) 4.229332456s ago: executing program 7 (id=132): setrlimit(0x8, &(0x7f00000000c0)={0x45, 0x56}) (async) r0 = syz_open_pts() close(r0) r1 = syz_open_pts() ioctl$FIOASYNC(r0, 0x80047470, &(0x7f0000000000)=0x9) (async, rerun: 64) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) getsockopt$sock_cred(r2, 0xffff, 0x1024, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) kill(r3, 0x13) fcntl$lock(r1, 0x9, &(0x7f0000000100)={0x1, 0x1, 0xcc, 0x9, r3}) (async) ioctl$FIOASYNC(r1, 0x80047460, &(0x7f0000000080)=0x58) ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000040)={0xfffffffc, 0xff, 0x400003, 0x1, "372ffc92ee467de500adbc00001300", 0x4, 0x9}) fcntl$setstatus(r1, 0x4, 0x8) (async) sysctl$vfs_ffs(&(0x7f0000001140)={0x4, 0x1, 0x1}, 0x3, 0x0, 0x0, 0x0, 0x0) 4.228946864s ago: executing program 7 (id=133): r0 = syz_open_pts() ioctl$TIOCGETD(r0, 0x4004741a, &(0x7f0000000040)) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) fcntl$lock(r1, 0x9, &(0x7f0000000000)={0x1, 0x1, 0x88, 0x300100001}) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x10091, 0x0) connect(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x1c, 0x18, 0x2, 0x8f38, '\x00', 0x1}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r3 = socket(0x18, 0x2, 0x0) setsockopt(r3, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) futimens(r2, &(0x7f0000000100)=[{0x8000000000000001, 0x4c8e}, {0x8, 0xfd}]) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) connect$inet6(r3, &(0x7f00000002c0)={0x1c, 0x18, 0x0, 0x7, "fe8000040000000000ff00", 0x4}, 0x1c) openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x10091, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @broadcast, [], {@ipv6={0x86dd, {0x8, 0x6, "e62820", 0x14, 0x4, 0x5, @local={0xfe, 0x80, '\x00', 0x0}, @loopback, {[], @tcp={{0x3, 0x1, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x8, 0x5, 0x0, 0xe6e1}}}}}}}) r4 = socket(0x18, 0x1, 0x0) dup(0xffffffffffffffff) setrlimit(0x8, &(0x7f0000000980)={0xb, 0x54}) r5 = syz_open_pts() close(r5) syz_open_pts() ioctl$TIOCSETA(r5, 0x802c7414, &(0x7f0000000300)={0x83, 0x1, 0xfbfffffe, 0xfffffe5b, "d76c1f0000000000000000000000000000000080", 0x800, 0x2}) writev(r5, &(0x7f0000000480)=[{&(0x7f0000000580)="ce257a1418e361cd3c6f73d95e6b764d7f191e805bd1b48758a87dce279f1f992dd1d7ca3273bce827ed09", 0x2b}], 0x1) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) ioctl$FIONREAD(r4, 0xc020699c, &(0x7f00000001c0)) ioctl$DIOCXBEGIN(r1, 0xc0104451, &(0x7f00000022c0)={0x7, 0x81, &(0x7f0000002300)=[{0x0, './file0\x00', 0x4}, {0x0, './file0\x00', 0x8}, {0x1, './file0\x00', 0x800}, {0x1, './file0\x00', 0x6cb}, {0x0, './file0\x00', 0x7fffffff}, {0x1, './file0\x00', 0xffff}, {0x0, './file0\x00', 0x7}]}) unveil(0x0, &(0x7f0000000640)='w\x00') 4.003553108s ago: executing program 7 (id=136): syz_emit_ethernet(0xe, &(0x7f00000000c0)=ANY=[@ANYBLOB="a260000000000001d2e8242b032139c3d8546bb0ef1f938d269387f24fa819cab58345888c76d08bd623160469a8b47bc7373d6411d5fed9b8716cb216d3730fcb36f99e"]) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[]) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x186) r1 = open(&(0x7f0000000040)='./file0\x00', 0x2, 0x3e) write(r1, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) truncate(&(0x7f0000000000)='./file0\x00', 0xafffe) open(&(0x7f0000000040)='./file0\x00', 0x200, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x10, r0, 0x1) ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffff9c, 0xc1045763, &(0x7f0000000040)={0x20001, [{0x2, 0xffffff02}, {0x3}, {0x3, 0x7fff}, {0x1, 0xf}, {}, {0x0, 0x9}, {0x2, 0x1}, {0x0, 0xfffffffd}, {0x0, 0x1}, {0x2, 0x1}, {0x1, 0x9}, {0x0, 0x6}, {0x3, 0x2}, {0x3}, {0x2, 0x20}, {0x0, 0x5}, {0x0, 0x1}, {0x2, 0x4000006}, {0x1, 0x1}, {}, {}, {0x2}, {0x0, 0xfff7fc00}, {0x0, 0x9}, {0x0, 0x3}, {0x3, 0x800}, {0x3, 0xffffff7f}, {0x1}, {0xadaea67572c8f458, 0xfffffffd}, {0x1}, {0x2, 0x8001}, {0x1, 0x200060}]}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x29}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$kern(&(0x7f00000000c0)={0x1, 0x32}, 0x2, &(0x7f0000000100), &(0x7f0000000140), 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket(0x2, 0x1, 0x0) connect$unix(r2, &(0x7f0000000000), 0x10) ioctl$TIOCSETAF(0xffffffffffffff9c, 0x802c7416, &(0x7f0000000000)={0x4, 0xffffff46, 0x2, 0x315a, "225e00d1b37377310900fa4ab1896c04aec100", 0x8, 0xf1}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_emit_ethernet(0x2e, &(0x7f0000000040)={@local, @empty, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x1, 0x20, 0x65, 0x0, 0x7d, 0x1, 0x0, @rand_addr=0x5, @multicast2, {[@timestamp={0x44, 0x4, 0x1, 0x0, 0x1}]}}, @icmp=@echo={0x8, 0x0, 0x0, 0x3a2, 0x1}}}}}) select(0x7, &(0x7f0000000000)={0x400}, &(0x7f0000000040), &(0x7f0000000080)={0xcb}, &(0x7f0000000180)) r3 = syz_open_pts() ioctl$TIOCSETA(r3, 0x802c7414, &(0x7f0000000000)={0x5, 0x80001000, 0xfffffffe, 0xffffff81, "35a7fc000000f100004000000000000021000500", 0x4000041, 0x5}) ioctl$TIOCSTAT(r3, 0x20007465) 2.392099736s ago: executing program 2 (id=185): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000400)=@file={0x81, 0x1, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}, 0x6a) (async) setrlimit(0x8, &(0x7f0000000980)={0xb, 0x53}) (async) r1 = syz_open_pts() close(r1) (async) syz_open_pts() (async) r2 = open(&(0x7f0000000000)='./file0\x00', 0x9cab835cfdc52675, 0xa2) r3 = socket(0x2, 0x4001, 0x0) r4 = fcntl$dupfd(r3, 0x2, 0xffffffffffffffff) closefrom(r4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0xa011, r2, 0x0) r5 = syz_open_pts() (async) r6 = syz_open_pts() close(r6) (async) setrlimit(0x8, &(0x7f0000000980)={0xb, 0x53}) (async) r7 = syz_open_pts() close(r7) (async) syz_open_pts() ioctl$TIOCSETA(r6, 0x802c7414, &(0x7f0000000040)={0x920e, 0xfffffffe, 0x1, 0xffffffce, "b69e0c003666000140f079210000810008002000", 0x8, 0x100}) (async) writev(r7, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) (async) close(r5) (async, rerun: 64) syz_open_pts() (async, rerun: 64) syz_open_pts() 2.06541s ago: executing program 2 (id=194): r0 = socket(0x2, 0x2, 0x0) setsid() r1 = syz_open_pts() r2 = kqueue() ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, &(0x7f0000000340)={0x1ffd, 0x0, {[0xfffffbeffffffffb, 0x0, 0x4787, 0x1002, 0x8001, 0xfffffffffffffffc, 0x2, 0x8000, 0x0, 0x4, 0x0, 0x3, 0xfffffffffffbffff, 0x400000002000000, 0x6, 0x632e, 0xffff, 0xce5], [0xfffffffffffffffe, 0x80000001, 0xfffffffffffffffd, 0x2, 0xffff, 0x7b98, 0x6, 0x0, 0xfffffffffffffffe], [0x5ad8, 0x2, 0x40000000, 0x3, 0xffffffffffffffff, 0x6, 0xfffffffffffffffa], [0x100, 0x20000000000, 0xfffffffffffffffc, 0x8000000100000000, 0xffffffffffffffff, 0x3], [{0x6, 0x4, 0x0, 0x7d06}, {0xfffc, 0x2, 0x5, 0x10}, {0x0, 0x0, 0xfffffffe, 0x1000000000081}, {0x3, 0x100, 0x3, 0xffffffffffffffff}, {0x0, 0x5cc2, 0x3, 0x8}, {0xfffe, 0x2006, 0x8, 0x2000000000000000}, {0x6b7, 0x0, 0x1}, {0x8008, 0x965, 0x0, 0x8}], {0x2, 0x6, 0x8}, {0x21, 0x7, 0x100000b0, 0x8000000000000000}}}) kevent(r2, &(0x7f0000000080), 0xe4a, 0x0, 0xa9fa, 0x0) ioctl$TIOCSCTTY(r1, 0x20007461) r3 = fcntl$getown(r1, 0x5) ktrace(0x0, 0x1, 0x1800, r3) ioctl$TIOCSCTTY(r1, 0x20007461) setsockopt$sock_int(r0, 0xffff, 0x1001, &(0x7f0000000100)=0x20000, 0x4) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x405, &(0x7f0000000000)={0x10, 0x2, 0x1, 0xe0000001}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) connect$unix(r0, &(0x7f0000000080)=@abs={0x2, 0x1, 0x0, 0x3}, 0x8) sysctl$kern(&(0x7f0000000100)={0x1, 0x35}, 0x3, &(0x7f00000011c0)="71f91e5a91501d94a34bdf536647f49a902027647169000000000000", &(0x7f0000000000)=0xfe10, 0x0, 0x33) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2040, 0x0) sysctl$net_inet6_ip6(&(0x7f0000000040)={0x4, 0x18, 0x29, 0x2c}, 0x4, 0x0, 0x0, 0x0, 0x0) write(r0, &(0x7f0000000700)="14bdfa5d1d34e2fecb284a9969e7eccda9aec48650036123339a346f737850551408b3f4466c00000000e1dd5489e7bafc58d3e5823757ae8b630719ef187ccad995f13dbe19a6dd4e6902bd8297b0799b426aabe9fad9db6996571c6d9f8bb5d542c2148aa42be940970fe88d34d8f99afe7e782023740000000000800000010000000000000000000022182c4f8b238c366fa51ac4df5753f4a0bf9a540279222fef644e70911345dbc09698b7496ac3b158b64f89", 0x2480) r4 = socket(0x2, 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) setsockopt$inet_opts(r4, 0x0, 0x1, &(0x7f00000000c0)="9876d692a3ef9c7ab923a2f0", 0xc) setsockopt$inet_opts(r4, 0x0, 0x1, &(0x7f0000000080), 0x0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0xe8, 0x0) r6 = fcntl$dupfd(r5, 0x0, r0) ppoll(&(0x7f0000000080)=[{r6, 0x45}], 0x1, 0x0, 0x0) ioctl$VMM_IOC_INFO(r6, 0xc0185603, &(0x7f00000000c0)={0x15, 0x4d, &(0x7f0000000140)=""/21}) 1.876157123s ago: executing program 2 (id=194): r0 = socket(0x2, 0x2, 0x0) setsid() r1 = syz_open_pts() r2 = kqueue() ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, &(0x7f0000000340)={0x1ffd, 0x0, {[0xfffffbeffffffffb, 0x0, 0x4787, 0x1002, 0x8001, 0xfffffffffffffffc, 0x2, 0x8000, 0x0, 0x4, 0x0, 0x3, 0xfffffffffffbffff, 0x400000002000000, 0x6, 0x632e, 0xffff, 0xce5], [0xfffffffffffffffe, 0x80000001, 0xfffffffffffffffd, 0x2, 0xffff, 0x7b98, 0x6, 0x0, 0xfffffffffffffffe], [0x5ad8, 0x2, 0x40000000, 0x3, 0xffffffffffffffff, 0x6, 0xfffffffffffffffa], [0x100, 0x20000000000, 0xfffffffffffffffc, 0x8000000100000000, 0xffffffffffffffff, 0x3], [{0x6, 0x4, 0x0, 0x7d06}, {0xfffc, 0x2, 0x5, 0x10}, {0x0, 0x0, 0xfffffffe, 0x1000000000081}, {0x3, 0x100, 0x3, 0xffffffffffffffff}, {0x0, 0x5cc2, 0x3, 0x8}, {0xfffe, 0x2006, 0x8, 0x2000000000000000}, {0x6b7, 0x0, 0x1}, {0x8008, 0x965, 0x0, 0x8}], {0x2, 0x6, 0x8}, {0x21, 0x7, 0x100000b0, 0x8000000000000000}}}) kevent(r2, &(0x7f0000000080), 0xe4a, 0x0, 0xa9fa, 0x0) ioctl$TIOCSCTTY(r1, 0x20007461) r3 = fcntl$getown(r1, 0x5) ktrace(0x0, 0x1, 0x1800, r3) ioctl$TIOCSCTTY(r1, 0x20007461) setsockopt$sock_int(r0, 0xffff, 0x1001, &(0x7f0000000100)=0x20000, 0x4) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x405, &(0x7f0000000000)={0x10, 0x2, 0x1, 0xe0000001}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) connect$unix(r0, &(0x7f0000000080)=@abs={0x2, 0x1, 0x0, 0x3}, 0x8) sysctl$kern(&(0x7f0000000100)={0x1, 0x35}, 0x3, &(0x7f00000011c0)="71f91e5a91501d94a34bdf536647f49a902027647169000000000000", &(0x7f0000000000)=0xfe10, 0x0, 0x33) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2040, 0x0) sysctl$net_inet6_ip6(&(0x7f0000000040)={0x4, 0x18, 0x29, 0x2c}, 0x4, 0x0, 0x0, 0x0, 0x0) write(r0, &(0x7f0000000700)="14bdfa5d1d34e2fecb284a9969e7eccda9aec48650036123339a346f737850551408b3f4466c00000000e1dd5489e7bafc58d3e5823757ae8b630719ef187ccad995f13dbe19a6dd4e6902bd8297b0799b426aabe9fad9db6996571c6d9f8bb5d542c2148aa42be940970fe88d34d8f99afe7e782023740000000000800000010000000000000000000022182c4f8b238c366fa51ac4df5753f4a0bf9a540279222fef644e70911345dbc09698b7496ac3b158b64f89", 0x2480) r4 = socket(0x2, 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) setsockopt$inet_opts(r4, 0x0, 0x1, &(0x7f00000000c0)="9876d692a3ef9c7ab923a2f0", 0xc) setsockopt$inet_opts(r4, 0x0, 0x1, &(0x7f0000000080), 0x0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0xe8, 0x0) r6 = fcntl$dupfd(r5, 0x0, r0) ppoll(&(0x7f0000000080)=[{r6, 0x45}], 0x1, 0x0, 0x0) ioctl$VMM_IOC_INFO(r6, 0xc0185603, &(0x7f00000000c0)={0x15, 0x4d, &(0x7f0000000140)=""/21}) 1.606831089s ago: executing program 5 (id=203): r0 = socket(0x18, 0x2, 0x0) closefrom(r0) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0xffff, 0xffff63df, 0x3, 0x2, 0x1, 0x3, 0x40, 0x10, [{0x5, 0x3, 0x6, 0x80000201}, {0x4, 0x8, 0xffffffff, 0xfff}, {0x1, 0xfffffffe, 0x6, 0x1}, {0x2, 0xdf, 0x13, 0x40}, {0x2, 0x7, 0xf11, 0x7}, {0x803, 0xffff, 0x80cf}, {0x1, 0x4, 0x0, 0x2}, {0x7, 0x1, 0xfffffff8, 0xfbffe2eb}, {0x8, 0xffe, 0x6, 0x20}, {0x3, 0x0, 0x5, 0x8bfd}, {0x8, 0x8000000, 0x5, 0x6}, {0x4, 0xc7cb, 0x800000, 0xa6d}, {0x401, 0x10a, 0x6, 0xd}, {0x200003, 0x1, 0x2, 0x6f5fc48f}, {0x81, 0x101, 0x3, 0x5}, {0xffffffff, 0x8003, 0x6, 0x69}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) kqueue() munmap(&(0x7f000000e000/0x400000)=nil, 0x400000) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0x80000000, 0xffff63db, 0x5, 0x2, 0xa, 0x6, 0x9, 0x10, [{0x3, 0x3, 0xffff7115, 0x80000001}, {0xfffffffb, 0xffffff7e, 0x40006, 0x2000fff}, {0x1, 0x4bad, 0x3, 0x9}, {0x4, 0xe2, 0xd, 0x100}, {0x0, 0x7, 0xf15, 0x1000084}, {0x2, 0xa, 0x8, 0x2}, {0x4, 0x800, 0x3, 0xfffffffe}, {0xff, 0xb16c, 0x28000, 0xffffe2eb}, {0x4, 0x1000, 0x6, 0x20008001}, {0x5, 0x5, 0xb, 0x3}, {0x5, 0x0, 0xc, 0x6}, {0x1000fffc, 0xfffffffd, 0x800001, 0x1}, {0x401, 0x4, 0xa, 0x402}, {0x3, 0x6, 0x2, 0x1}, {0x3, 0xfffffffd, 0x3, 0x9}, {0x20009be2, 0x1, 0x1000002, 0x8e}]}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xfffffffffffffe3c, 0x0, 0x37) r1 = socket(0x18, 0x1, 0x0) setsockopt(r1, 0x1000000029, 0xc, &(0x7f0000000040)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) setsockopt(r0, 0x1000000029, 0xd, 0x0, 0x0) clock_getres(0x4, 0x0) 1.559728358s ago: executing program 5 (id=205): r0 = shmget(0x3, 0x2000, 0x208, &(0x7f0000ffc000/0x2000)=nil) r1 = semget$private(0x0, 0x4, 0x0) semctl$IPC_SET(r1, 0x0, 0x1, &(0x7f0000000400)={{0x0, 0x0, 0x0, 0x0, 0x36, 0x207e, 0x0, 0x0, 0x1}, 0x0, 0x103, 0x0, 0x0, 0xffff, 0x0, 0x9}) semctl$GETNCNT(r1, 0x2f22b6eec652d9dc, 0x3, 0x0) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x0) 1.558501938s ago: executing program 5 (id=206): syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="7995cda15be3b55d145e54af88e7"]) (async, rerun: 32) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async, rerun: 32) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="28000000ffff000001"], 0x28}, 0x0) (async) syz_emit_ethernet(0xe, &(0x7f0000000040)=ANY=[@ANYRESDEC, @ANYRESOCT=r1, @ANYRES16=r0, @ANYRES8=r0]) 1.555920813s ago: executing program 5 (id=208): mkfifoat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x84) r0 = syz_open_pts() fcntl$lock(r0, 0x9, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x1000300010080}) flock(r0, 0x1) fcntl$lock(r0, 0x8, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x100000003}) r1 = socket(0x11, 0x3, 0x0) sendto$unix(r1, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$VMM_IOC_RUN(0xffffffffffffffff, 0xc0285602, &(0x7f00000003c0)={0x3, 0x2, {0x80, 0x7}, 0x1, &(0x7f0000000140)={{0xa, 0x10, 0x8, 0x84, 0x4, 0x1000, 0x1452, 0x1}, {[0x10, 0xfffffffffffffff7, 0x2, 0x3d4, 0x1e58, 0x7, 0xa, 0xa7bf, 0x68, 0x2, 0x7, 0x8, 0x8, 0x1, 0x7, 0x1, 0xa, 0x6], [0x0, 0x3, 0x5, 0x1, 0x2, 0x7fffffff, 0x3, 0x10001, 0x7fffffffffffffff, 0x10], [0x80000001, 0xfffffffffffffff8, 0x80000000000, 0x7fffffff, 0x5, 0x7, 0xf], [0x5, 0x5], [{0x60, 0x3, 0x0, 0x2}, {0x9, 0x55, 0x7f0, 0xffffffffffffffff}, {0x1ff, 0x5, 0x9855, 0xc0000000000}, {0x555, 0xc3, 0x9, 0x1}, {0x7, 0x4, 0x8, 0x40}, {0x27, 0xb, 0x3, 0xa9}, {0x2, 0x8e, 0xffff8001}, {0x7ff, 0x4, 0x2, 0x7fffffff}], {0xb, 0x6, 0xff, 0x80000000}, {0x8001, 0x0, 0x7ff, 0x200}}, 0x4}, 0x9, 0x1}) getpgid(0x0) r2 = accept$unix(r1, &(0x7f0000000080)=@abs, &(0x7f00000000c0)=0x8) shutdown(r2, 0x1) lchown(&(0x7f0000000100)='./file0\x00', 0xffffffffffffffff, 0xffffffffffffffff) 1.108965855s ago: executing program 3 (id=224): ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffff9c, 0xc1045763, &(0x7f0000000040)={0x1, [{0x2, 0xffffff02}, {0x2}, {0x3, 0x4}, {0x1, 0x10f}, {}, {0x2, 0x9}, {0x2, 0x1}, {0x1, 0xffffffff}, {0x0, 0x3}, {0x2}, {0x1, 0x10000000}, {0x1, 0x4}, {0x3, 0x7}, {0x2}, {0x0, 0x20}, {0x0, 0x5}, {0x0, 0x1}, {0x2, 0x4000006}, {0x1, 0x1}, {}, {0x0, 0x3}, {0x2, 0x84000001}, {0x0, 0xfff7fc00}, {0x0, 0x9}, {0x2, 0x3}, {0x3, 0x803}, {0x3, 0xffffff7f}, {0x1}, {0x2, 0xffff}, {0x1, 0x6d7}, {0x2, 0x8001}, {0x1, 0x200064}]}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x2c}, 0x2, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1c, 0x0, 0x0) 1.021006624s ago: executing program 2 (id=229): r0 = semget$private(0x0, 0x1, 0x6c) semctl$GETPID(r0, 0x3, 0x4, &(0x7f0000000000)=""/13) semctl$IPC_RMID(r0, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)={0x5, 0x3, 0xffffffffffffff9c}) ioctl$FIONREAD(r1, 0x4004667f, &(0x7f0000000080)) (async) semctl$IPC_RMID(0x0, 0x0, 0x0) (async) semget(0x3, 0x0, 0x13b) (async, rerun: 32) ioctl$WSMOUSEIO_SRES(r1, 0x80045721, &(0x7f00000000c0)=0xa2) (async, rerun: 32) fcntl$getflags(r1, 0x1) (async, rerun: 32) semget$private(0x0, 0x1, 0x2ae) (async, rerun: 32) semctl$SETVAL(r0, 0x1, 0x8, &(0x7f0000000100)=0x67b4) r2 = semget(0x3, 0x1, 0x28) semctl$GETNCNT(r2, 0x4, 0x3, &(0x7f0000000140)=""/4096) unlinkat(r1, &(0x7f0000001140)='./file0\x00', 0x8) semctl$SETALL(r0, 0x0, 0x9, &(0x7f0000001180)=[0x7, 0x7, 0x8, 0x401]) semop(r0, &(0x7f00000011c0)=[{0x0, 0x100}, {0x4, 0x3, 0x1000}, {0x2, 0xb3, 0x800}, {0x4, 0xffff}], 0x4) (async, rerun: 32) r3 = semget$private(0x0, 0xea1506507746ac44, 0x400) (async, rerun: 32) r4 = semget$private(0x0, 0x2, 0x10) r5 = shmget(0x0, 0x2000, 0x4, &(0x7f0000ffc000/0x2000)=nil) shmctl$IPC_RMID(r5, 0x0) mlockall(0x1) (async) semctl$GETNCNT(r4, 0x4, 0x3, &(0x7f0000001200)=""/244) (async) semctl$SETVAL(r3, 0x4, 0x8, &(0x7f0000001300)=0x4) semctl$GETPID(r2, 0x3, 0x4, &(0x7f0000001340)=""/35) shmctl$SHM_UNLOCK(r5, 0x4) (async) mlockall(0x0) (async) semctl$IPC_RMID(r4, 0x0, 0x0) (async) semctl$IPC_RMID(r3, 0x0, 0x0) (async) semop(0x0, &(0x7f0000001380)=[{0x4, 0xf000, 0x1800}, {0x2, 0x3, 0x1800}, {0x0, 0x0, 0x1800}, {0x1, 0x7fff}], 0x4) (async, rerun: 32) semctl$GETVAL(0x0, 0x3, 0x5, &(0x7f00000013c0)=""/170) (rerun: 32) 966.73848ms ago: executing program 0 (id=232): r0 = open(&(0x7f0000000040)='./file0\x00', 0x200, 0x0) openat$pci(0xffffffffffffff9c, &(0x7f0000000000), 0x300, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) (async) bind$unix(r0, 0x0, 0x0) 965.014651ms ago: executing program 0 (id=233): r0 = socket$inet(0x2, 0x2, 0x0) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0x80000000, 0xffff63db, 0x5, 0x2, 0x8, 0x6, 0x9, 0x10, [{0x3, 0x3, 0xfffff115, 0x80000001}, {0xfffffffb, 0xffffffff, 0x6, 0x2000fff}, {0x1, 0x4baa, 0x3, 0x9}, {0x4, 0xe2, 0xf, 0x100}, {0x0, 0x7, 0xf15, 0x1000084}, {0x788c, 0xa, 0x8, 0x2}, {0x4, 0x800, 0x3, 0xfffffffe}, {0xff, 0xd33, 0x28000, 0xffffe2eb}, {0x4, 0x1000, 0x6, 0x20008001}, {0x3, 0x5, 0x6, 0x8bfd}, {0x0, 0x0, 0x8, 0x6}, {0x10010000, 0x0, 0x800002, 0x1}, {0x401, 0x4, 0x9, 0x3ff}, {0x3, 0x6e2, 0x2, 0x1}, {0x3, 0x0, 0x3, 0x9}, {0x9be2, 0x1, 0x1000003, 0x8e}]}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x27}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0x37) setsockopt$inet_opts(r0, 0x0, 0x1, &(0x7f0000000000)="60141faf60628bb67aff0354536e5e7247d1b392eecb952c046ad9", 0x1b) sendmsg(r0, &(0x7f0000000680)={&(0x7f0000000080)=@un=@abs={0x1}, 0x8, 0x0, 0x0, &(0x7f0000000280)=ANY=[], 0x18}, 0x0) 755.916522ms ago: executing program 0 (id=234): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) sendmmsg(r0, &(0x7f0000001940)={{0x0, 0x0, 0x0, 0x0, 0x0}}, 0xfffffffffffffd52, 0x4) sendto(r0, &(0x7f0000000100)="950597", 0x3, 0x402, 0x0, 0x0) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffff9c, 0x81205724, &(0x7f0000000040)={0x80000000, 0x8, 0x7, 0xf45d, 0x3, 0x3, 0x40, 0x10, [{0x5, 0x3, 0x776, 0xc}, {0x2, 0x8, 0x6, 0xfff}, {0x1, 0xfffffffe, 0x6, 0x1}, {0x2, 0xdf, 0xf}, {0xfffff57b, 0xeb8, 0xf11, 0x7}, {0x3, 0xffff, 0x6, 0x40}, {0x5, 0xb50b, 0x89, 0x2}, {0x1, 0x40009, 0xfffffffb, 0xfbffe2e9}, {0x1, 0x6, 0x6, 0x7fff}, {0xa, 0xfffffff8, 0x5, 0x3ff}, {0xffffeffe, 0x8000000, 0x8, 0x7}, {0x7, 0xc7cb, 0x40800000, 0xa66}, {0x401, 0x106, 0x9, 0x44}, {0x200003, 0xee3, 0x2, 0x6f5fc48b}, {0x4, 0x100, 0x8001, 0xd7f}, {0x9be2, 0x8000, 0x6, 0x69}]}) preadv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000480)=""/240, 0xf0}], 0x1, 0x0) r1 = socket(0x18, 0x1, 0x0) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffff9c, 0x81205724, &(0x7f0000000040)={0x80000000, 0x8, 0x7, 0xf45d, 0x3, 0x3, 0x40, 0x10, [{0x5, 0x3, 0x776, 0xc}, {0x2, 0x8, 0x6, 0xfff}, {0x1, 0xfffffffe, 0x6, 0x1}, {0x2, 0xdf, 0xf}, {0xfffff57b, 0xeb8, 0xf11, 0x7}, {0x3, 0xffff, 0x6, 0x40}, {0x5, 0xb50b, 0x89, 0x2}, {0x1, 0x40009, 0xfffffffb, 0xfbffe2e9}, {0x1, 0x6, 0x6, 0x7fff}, {0xa, 0xfffffff8, 0x5, 0x3ff}, {0xffffeffe, 0x8000000, 0x8, 0x7}, {0x7, 0xc7cb, 0x40800000, 0xa66}, {0x401, 0x106, 0x9, 0x44}, {0x200003, 0xee3, 0x2, 0x6f5fc48b}, {0x4, 0x100, 0x8001, 0xd7f}, {0x9be2, 0x8000, 0x6, 0x69}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mprotect(&(0x7f0000566000/0x4000)=nil, 0x4000, 0x2) getsockopt$sock_int(r1, 0xffff, 0x2000, &(0x7f0000000000), &(0x7f0000000040)=0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) select(0x40, &(0x7f0000000000)={0x400, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000000040)={0x0, 0x0, 0x25}, &(0x7f00000001c0)={0xa, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, &(0x7f0000000180)={0x0, 0xfffffffffffffffd}) 531.805581ms ago: executing program 5 (id=235): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1, &(0x7f0000000080)=0x1, 0x4) (async) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$FIOASYNC(r1, 0x8004667d, &(0x7f0000000040)=0x8) (async) bind$unix(r1, &(0x7f0000000000)=@file={0x3, 0x1, './file0\x00'}, 0xa) (async, rerun: 32) r2 = getpid() (rerun: 32) fcntl$setown(r1, 0x6, r2) sendmsg$unix(r1, &(0x7f0000001400)={&(0x7f0000001300)=@file={0x92, 0x1, './file0\x00'}, 0xa, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xa) (async) bind$inet(r0, &(0x7f0000000000)={0x10, 0x2, 0x3}, 0x10) (async) openat$vnd(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) poll(&(0x7f0000000000), 0x35, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) r3 = socket(0x18, 0x1, 0x0) (async, rerun: 32) r4 = kqueue1(0x4) (rerun: 32) kevent(r4, &(0x7f0000001b80), 0x4, 0x0, 0x200, 0x0) (async) r5 = socket$inet(0x2, 0x1, 0x6) (async) r6 = socket(0x18, 0x1, 0x0) (async) connect$inet6(r3, &(0x7f0000000100)={0x1c, 0x18, 0x2, 0xffff, "845dc0dfb460d4e2ca014a56083bbdc5", 0x3}, 0x1c) getsockopt$sock_cred(r6, 0xffff, 0x1024, &(0x7f0000000000), &(0x7f0000000280)=0xc) (async) setsockopt$inet_opts(r5, 0x0, 0x14, &(0x7f0000000000), 0x4) (async) ioctl$BIOCSETIF(r6, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) ioctl$FIONREAD(r6, 0x8020690c, &(0x7f0000000240)) (async) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) (async) r7 = open(&(0x7f00000000c0)='./file0\x00', 0x9cab835cfdc52675, 0xe4) (async, rerun: 32) kqueue() (async, rerun: 32) ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0x80047476, &(0x7f0000000080)={0xa0000, [{0x2, 0x103}, {0x2, 0x5}, {0x2, 0x800}, {0x3, 0x5}, {0x2, 0xd98}, {0x2, 0xfffffffd}, {0x2, 0x2}, {0x2, 0x8}, {0x1, 0x3}, {0x1, 0x80000000}, {0x1, 0xe}, {0x1, 0xeee5}, {0x2, 0x3}, {0x3}, {0x2, 0x200}, {0x2, 0xa224}, {0x2, 0xf1}, {0x3, 0xb4}, {0x2, 0x1}, {0x2, 0x8}, {0x3, 0x6}, {0x2, 0x1}, {0x1, 0x9f3}, {0x2, 0x40}, {0x1, 0x10000}, {0xc844ca12ff01e3b3, 0xaec}, {0x3, 0xffff}, {0x1, 0x5}, {0x1, 0x7}, {0x3, 0x80000001}, {0x1, 0x83ff}, {0x3, 0x4}]}) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) mmap(&(0x7f0000088000/0x3000)=nil, 0x3000, 0x2, 0x10, r1, 0xfffffffffffffff8) (async) syz_emit_ethernet(0xa5, &(0x7f0000000000)=ANY=[@ANYRESOCT=r7]) 530.389627ms ago: executing program 2 (id=236): sysctl$hw(&(0x7f00000000c0)={0x7, 0xa}, 0x2, &(0x7f0000000100), 0x0, 0x0, 0x0) (async) mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) 529.424586ms ago: executing program 3 (id=224): ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffff9c, 0xc1045763, &(0x7f0000000040)={0x1, [{0x2, 0xffffff02}, {0x2}, {0x3, 0x4}, {0x1, 0x10f}, {}, {0x2, 0x9}, {0x2, 0x1}, {0x1, 0xffffffff}, {0x0, 0x3}, {0x2}, {0x1, 0x10000000}, {0x1, 0x4}, {0x3, 0x7}, {0x2}, {0x0, 0x20}, {0x0, 0x5}, {0x0, 0x1}, {0x2, 0x4000006}, {0x1, 0x1}, {}, {0x0, 0x3}, {0x2, 0x84000001}, {0x0, 0xfff7fc00}, {0x0, 0x9}, {0x2, 0x3}, {0x3, 0x803}, {0x3, 0xffffff7f}, {0x1}, {0x2, 0xffff}, {0x1, 0x6d7}, {0x2, 0x8001}, {0x1, 0x200064}]}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x2c}, 0x2, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1c, 0x0, 0x0) 529.038191ms ago: executing program 3 (id=237): r0 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0xd6) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000040)="2302", 0x2}, {&(0x7f00000001c0)="5e858eb8b26c2bd91057783239912c9274c75bc933bc2d05a964133437f015dc63ac72c47bfabb38e57292007d45c93a90c42863e09195508d225cba1ca350887b551a7283bd4ca3fd6ebadcd3ae9419d9892a12c8a21332737e1beedd3e3363859b04ba3cb1738e5527e61a43db2aed0d1ae9297359361a1c1271fa4602e44fce8fd601e67b6e62b64c9a967f5240abc55b7cdf2f9007ac0fd9ddf6af729ec0d0ac0d5123598ef2ffcaa707f619dcc85f640bb095d39daf9e5d9380d07b8f68114413cbb5aea44a2dba", 0xca}], 0x2) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 528.531128ms ago: executing program 3 (id=238): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0xe8, 0x0) r1 = fcntl$dupfd(r0, 0x3, 0xffffffffffffffff) r2 = fcntl$dupfd(r1, 0xc, r0) syz_emit_ethernet(0x2a, &(0x7f0000000080)=ANY=[@ANYRES16=r2, @ANYBLOB="513dc67d184b31f6d306c0f5237382c6324af474e3ac3c7b0b150b4bd9e35bf58a4443182f8e9427419a38b9d0b22df3e55432cfe0c55f27a6db620f7192836bc135999796906e579dc72cc72d23491104d650b62065cb546a1ff4e699df4c217620adbf6b46e7d348d77ed0dc9aa3095cad0f99618bfa07fb9d0815c50e71734d3447575c6f794a613c445329d5d62040107e7497ec616a90f36382c3e8409bc82b5132ae6205b6c7", @ANYRES16=0x0, @ANYRESHEX=0x0]) 528.218984ms ago: executing program 3 (id=239): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x10, 0x2, 0x3}, 0x10) listen(r0, 0x7fff) setsockopt$sock_int(r0, 0xffff, 0x1, &(0x7f0000000100)=0x7f, 0x4) syz_emit_ethernet(0xe, &(0x7f00000001c0)={@broadcast, @broadcast, [], {@generic={0x8863}}}) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x3d, 0x28, 0x67, 0x0, 0x0, 0x6, 0x0, @multicast1, @local={0xac, 0x14, 0x0}}, @tcp={{0x3, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x8200, 0x0, 0xfffc}}}}}}) r1 = socket(0x1, 0x2, 0x1) fcntl$lock(r1, 0x9, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x3d, 0x28, 0x67, 0x0, 0x0, 0x6, 0x0, @multicast1, @local={0xac, 0x14, 0x0}}, @tcp={{0x3, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x4, 0x8200, 0x0, 0xfffc}}}}}}) 527.609375ms ago: executing program 3 (id=240): syz_emit_ethernet(0x4a, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaf017000000000000000014063000000000000000000000000000000000fe80000000000000edfd6d4bde8e5d83841900000000000000aa4e224e23", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5040004390780007"]) utimensat(0xffffffffffffffff, 0x0, &(0x7f0000002d40)={{0x82d5, 0xfffffffffffffffd}, {0x3, 0x3}}, 0x2) open(&(0x7f0000000380)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf79e5) r0 = socket(0x2, 0x8002, 0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="28000000ffff000001"], 0x28}, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) recvmmsg(r2, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffb}, 0x38, 0x2000, 0x0) recvfrom$unix(r2, &(0x7f0000000180)=""/27, 0x1b, 0x3040, 0x0, 0x0) closefrom(r1) ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x0, 0x0, {[0x2be00000000000, 0x1, 0x3, 0x1, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x2eff, 0x2, 0x1, 0xffffffffffffffff, 0x0, 0x8000000, 0xaa, 0x2000000000002, 0xce7], [0xfffffffffffffffe, 0x1, 0xfffffffffffffffb, 0x8000ffffffff, 0xf9, 0x7b99, 0x201, 0x2000c, 0x6], [0x2, 0xfffffffffffffffb, 0x40000000, 0x4, 0xffffffffffffffff, 0x10ffc, 0xfff7fffffffffffe], [0x4, 0x20000000000, 0x401, 0x100000000, 0xffffffffffefffff, 0x6], [{0x8, 0x5, 0x0, 0x7d06}, {0xfffc, 0x7, 0x9, 0x2}, {0x10, 0x100, 0x1, 0x814}, {0x3, 0x7, 0x9, 0x80000004}, {0x10, 0x2, 0x0, 0x808}, {0x400b, 0x2003, 0x40000, 0x4}, {0x1, 0x20000, 0x4, 0xf6}, {0x0, 0x965, 0x3, 0xffffffff}], {0x2400, 0x8, 0x10000, 0x803}, {0x0, 0xfffffffc, 0x3, 0x2}}}) open$dir(&(0x7f0000000440)='.\x00', 0x40000, 0x108) r4 = kqueue() kevent(r4, &(0x7f0000000000), 0x3ff, 0x0, 0x8000800, 0x0) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000780), 0x800, 0x0) readv(r5, &(0x7f0000002000)=[{&(0x7f0000000b00)=""/62, 0x3e}], 0x1) link(&(0x7f0000000100)='./file0\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$FIONREAD(r6, 0x8020697a, &(0x7f0000000240)) msgrcv(0x0, &(0x7f0000000000)={0x0, ""/183}, 0xbf, 0x0, 0x0) msgctl$IPC_RMID(0x0, 0x500) syz_extract_tcp_res(&(0x7f0000000000), 0x96, 0x2) 306.351987ms ago: executing program 4 (id=241): syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "db8344", 0x0, 0x2c, 0x0, @empty, @mcast2, {[], @udp={{0x0, 0x1, 0x8}}}}}}}) setitimer(0x1, &(0x7f00000000c0)={{0xffffffff}, {0xffffffff}}, 0x0) 305.861501ms ago: executing program 4 (id=242): pledge(&(0x7f0000000000)='\x00', &(0x7f0000000040)='#@$%*{\\\x00') r0 = semget$private(0x0, 0x4, 0x202) semctl$GETVAL(r0, 0x4, 0x5, &(0x7f0000000080)=""/199) (async) semop(0x0, &(0x7f0000000180)=[{0x1, 0xfffe, 0x800}, {0x4, 0x100}, {0x4, 0x9, 0x800}], 0x3) semctl$SETALL(r0, 0x0, 0x9, &(0x7f00000001c0)=[0x6]) (async) r1 = semget$private(0x0, 0x2, 0x100) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000000200)=""/12) (async) pledge(&(0x7f0000000240)='$%)\f]\\\'\x00', &(0x7f0000000280)='\x00') (async) semctl$GETPID(r1, 0x3, 0x4, &(0x7f00000002c0)=""/44) (async) semctl$SETVAL(r0, 0x4, 0x8, &(0x7f0000000300)=0x6) (async) r2 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000340), 0x80, 0x0) ioctl$WSKBDIO_GETBELL(r2, 0x40105704, &(0x7f0000000380)) (async) ioctl$WSKBDIO_GETDEFAULTBELL(r2, 0x40105706, &(0x7f00000003c0)) semctl$IPC_RMID(r0, 0x0, 0x0) (async) semctl$GETNCNT(r0, 0x4, 0x3, &(0x7f0000000400)=""/170) r3 = dup(r2) ioctl$TIOCCONS(r3, 0x80047462, &(0x7f00000004c0)=0x6) ioctl$TIOCSETAW(r3, 0x802c7415, &(0x7f0000000500)={0x0, 0x9, 0x6, 0x81, "d1e87f40e86147c0a093701846060949344b6e5c", 0x66b491fc, 0x98fa}) (async) mlockall(0x0) r4 = shmget$private(0x0, 0x1000, 0x14c, &(0x7f0000ffe000/0x1000)=nil) (async) getgroups(0x1, &(0x7f0000000540)=[0xffffffffffffffff]) (async) lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) getsockopt$SO_PEERCRED(r3, 0xffff, 0x1022, &(0x7f0000000640)={0x0}, 0xc) (async) r8 = setsid() shmctl$IPC_SET(r4, 0x1, &(0x7f0000000680)={{0xffffffffffffffff, r5, 0x0, r6, 0x40, 0xd, 0x0, 0x0, 0x2}, 0x5, r7, r8, 0xfff7, 0x0, 0x3, 0x400, 0x8, 0x2, 0x0, 0x9}) (async) r9 = openat$tty(0xffffffffffffff9c, &(0x7f0000000700), 0x81, 0x0) ioctl$TIOCSBRK(r9, 0x2000747b) (async) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2) (async) semctl$SETALL(r0, 0x0, 0x9, &(0x7f0000000740)=[0x800, 0x1, 0x8, 0xfffc]) (async) mlockall(0x0) 305.420546ms ago: executing program 5 (id=243): setsid() setrlimit(0x8, &(0x7f0000000980)={0x42, 0x62}) (async) r0 = syz_open_pts() close(r0) (async) setsid() (async) r1 = syz_open_pts() ioctl$TIOCSCTTY(r1, 0x20007461) (async, rerun: 64) ioctl$FIOASYNC(r0, 0x80047469, &(0x7f0000000240)=0x6) (async, rerun: 64) readv(r1, &(0x7f00000005c0)=[{&(0x7f0000000100)=""/110, 0x6e}], 0x1) (async) writev(r0, &(0x7f00000006c0)=[{&(0x7f0000000180)="5af626681f", 0x5}], 0x1) sysctl$kern(&(0x7f0000000040)={0x1, 0x3f}, 0x4, &(0x7f0000000040), 0x0, 0x0, 0xfffffffffffffda3) (async, rerun: 64) r2 = getsid(0x0) (rerun: 64) getsid(r2) mlock(&(0x7f000033f000/0x2000)=nil, 0x2000) (async, rerun: 64) r3 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (rerun: 64) ioctl$WSMOUSEIO_SCALIBCOORDS(r3, 0x81205724, &(0x7f0000000280)={0x2, 0x6, 0x3, 0x6, 0x4, 0x20a9f3d3, 0x5, 0x10, [{0x9, 0x7, 0x7, 0x6}, {0x9, 0x1ff, 0x3, 0x1}, {0xfff, 0x27d43998, 0x9f6, 0x1}, {0x8000, 0x9, 0xd8, 0x6}, {0x8, 0x7, 0x3, 0x6}, {0x1, 0x7fff, 0x80000001, 0x10001}, {0x5, 0x34a9, 0x5, 0x2}, {0x1000, 0x40, 0x6, 0x8001}, {0x90d, 0x67, 0x5, 0x7ff}, {0x48, 0x7f, 0x5, 0x3ff}, {0xfffffeff, 0x0, 0x9, 0xfffffff3}, {0x10, 0xf, 0x2, 0x3}, {0x1, 0x8, 0x7, 0x5f7}, {0x100, 0x37, 0x8, 0x400}, {0x7, 0xdbc, 0xc8, 0x1}, {0x0, 0x2, 0x9, 0x8dc}]}) (async, rerun: 64) r4 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x800, 0x0) (async, rerun: 64) r5 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$setstatus(r5, 0x4, 0x40) fcntl$lock(r4, 0x7, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffd, 0x20001fffffffd}) (async) r6 = socket(0x2, 0x1, 0x0) getsockopt(r6, 0x6, 0x9, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) 246.505409ms ago: executing program 1 (id=246): chmod(&(0x7f0000000700)='.\x00', 0x49) (async) chmod(&(0x7f0000000700)='.\x00', 0x49) r0 = socket(0x18, 0x2, 0x0) setsockopt(r0, 0x1000000000029, 0x9, 0x0, 0x0) open$dir(&(0x7f0000000000)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x80, 0x8) getresuid(0x0, &(0x7f0000000300)=0x0, 0x0) setreuid(0xffffffffffffffff, r1) (async) setreuid(0xffffffffffffffff, r1) unveil(&(0x7f0000000c40)='./file0\x00', &(0x7f0000000d40)='x\x00') 242.693455ms ago: executing program 1 (id=247): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f00000000c0)=@file={0xe, 0x1, './file0\x00'}, 0xa) listen(r0, 0x1) kevent(0xffffffffffffffff, 0x0, 0x6, 0x0, 0x40000007, &(0x7f0000000240)={0xd07, 0x2}) r1 = socket$inet(0x2, 0x2, 0x0) close(0x3) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x9, &(0x7f0000000240)="ea00000100000000", 0xc) ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x0, 0x9, {[0xfffffbfffffffffb, 0xfffffffffffbfffe, 0x40000002, 0x100200000, 0x1000100000000, 0x7, 0xdf60, 0xffffffffffffffff, 0x0, 0x6, 0x93, 0x8001, 0xffffffffffffffff, 0x200000000002, 0xb72, 0x4, 0xfffffffffffffffe], [0x8, 0x9, 0xfffffffffffffffa, 0xff, 0xa, 0x100000000007b98, 0x800, 0xd, 0x20000000000, 0x5], [0xfffffffe, 0x40000000008000, 0x40000000, 0x0, 0x80, 0x11000, 0xffffffff00000000], [0xb, 0x800001ffff7ffffb, 0x8000000000000000, 0x4000000, 0xfffffffffffffffe, 0x90000000], [{0x0, 0x400000, 0x0, 0x7d06}, {0x2, 0x1e, 0x9, 0x20000000000000}, {0x4, 0x0, 0xfffefffe, 0x280}, {0x8, 0x80004, 0x5, 0xfffffffffffffff8}, {0xfffe, 0x102, 0xffff, 0x7}, {0x0, 0x9, 0x9, 0xfffffffffffff280}, {0x5, 0x0, 0xfffffff7, 0xb}, {0xe, 0x3, 0x1, 0xb}], {0x1, 0xffffffff, 0x31, 0x3}, {0xf, 0x6, 0x6d4, 0x6}}}) setsockopt$inet_opts(r1, 0x0, 0x200000000000c, &(0x7f0000000240)="ea00000100000000", 0xc) accept$unix(r0, &(0x7f0000000000)=@abs, &(0x7f0000000040)=0x8) r3 = socket$unix(0x1, 0x1, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x5, 0x1, './file0\x00'}, 0xa) 229.792999ms ago: executing program 1 (id=248): r0 = open(&(0x7f0000000380)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7949) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc5005601, &(0x7f0000000000)={0x10, 0x0, [{&(0x7f0000347000/0x3000)=nil, &(0x7f0000663000/0x4000)=nil, 0x5}, {&(0x7f00005c9000/0x2000)=nil, &(0x7f0000826000/0x4000)=nil}, {&(0x7f0000060000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x20400000}, {0x0, &(0x7f0000ffb000/0x3000)=nil, 0x1}, {&(0x7f000017c000/0x3000)=nil, &(0x7f00003e7000/0x3000)=nil}, {&(0x7f0000049000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x1000000020006}, {0x0, 0x0, 0xfffffffffffffffc}, {&(0x7f0000ff0000/0xf000)=nil, &(0x7f0000131000/0x2000)=nil, 0xfffffffffffffffe}, {&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x10000}, {&(0x7f00004cc000/0x4000)=nil, &(0x7f0000661000/0x3000)=nil, 0x7}, {&(0x7f000062b000/0x2000)=nil, &(0x7f0000706000/0x1000)=nil, 0x14}, {&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil}, {&(0x7f000038f000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x100000000}, {&(0x7f0000795000/0x9000)=nil, 0x0, 0x9bbf}, {&(0x7f00001cf000/0x4000)=nil, &(0x7f0000142000/0x4000)=nil}, {&(0x7f0000573000/0x2000)=nil, &(0x7f000013d000/0x1000)=nil}], './file0\x00', 0x1, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e45, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b]}) sendto$unix(0xffffffffffffff9c, &(0x7f0000000000)="b1000504600000000000000007000000331c13fecea10500fef9e906c72fd3357ae320b37b673039d2d236073705ae04be38164991f7accf5f882b297be1aa5b236deb51e2f0ac3ebbc257699a5f139b672f4d335d223e7d029d6ba8af6300372802", 0x62, 0x0, 0x0, 0x0) (async, rerun: 32) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) (async, rerun: 32) r1 = socket(0x11, 0x3, 0x0) sendto$unix(r1, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x0, 0x0, 0x0) ioctl$VMM_IOC_RESETCPU(r0, 0x82405605, &(0x7f0000000140)={0x16, 0x9, {[0xe, 0x3, 0xe, 0x8000000000000001, 0x3, 0x1, 0x7, 0x859, 0x8000, 0x3, 0x2, 0x8, 0x101, 0x4, 0x6, 0xc, 0x3ff], [0x3, 0x269c26bf, 0x7fffffffffffffff, 0x314, 0x6, 0x8, 0x2, 0x4, 0x7b83530d, 0x80000000], [0x10000, 0x0, 0x1, 0xffffffffffffff80, 0x7, 0x6, 0x100000001], [0xb5aa, 0x3, 0x8000000000000001, 0x7, 0xf74, 0x5], [{0x7, 0x3, 0x3a, 0x7}, {0x0, 0xa, 0x8, 0xc7}, {0x5, 0x7, 0x3, 0x7}, {0x8, 0x4, 0xb, 0xb483}, {0x8, 0x0, 0xe3e, 0x2d2a}, {0x4, 0x9, 0xf9e, 0x9}, {0xffc, 0x3, 0x9, 0x100000000000000}, {0x50, 0x9, 0x401, 0x7b8}], {0xffff, 0x80000000, 0xfffffff9, 0x8000}, {0x5, 0xb, 0x7f, 0x18}}}) execve(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) 228.329465ms ago: executing program 1 (id=249): r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x184) mmap(&(0x7f0000234000/0x3000)=nil, 0x3000, 0x5, 0x11, r0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x2, 0x0, 0x11}, 0x4, 0x0, 0x0, 0x0, 0xffffffffffffffa2) syz_open_pts() r1 = socket$inet(0x2, 0x1, 0x0) syz_emit_ethernet(0x3a, &(0x7f00000000c0)={@local, @local, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x2c, 0xffff, 0x0, 0x8, 0xff, 0x0, @local={0xac, 0x14, 0x0}, @rand_addr=0xac1400ff, {[@ra={0x94, 0x4, 0xd3f}]}}, @tcp={{0x1, 0x3, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x10, 0x2ff, 0x0, 0x8}}}}}}) setsockopt$sock_int(r1, 0xffff, 0x1, 0x0, 0x0) r2 = openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) ioctl$DIOCGETSTATES(r2, 0xc0104419, 0x0) ioctl$AUDIO_START(0xffffffffffffffff, 0x20004126) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) 7.07593ms ago: executing program 1 (id=250): syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "408e03", 0x14, 0x2b, 0x3, @local={0xfe, 0x80, '\x00', 0x0}, @local={0xfe, 0x80, '\x00', 0x0}, {[], @tcp={{0x3, 0x1, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x80, 0x6, 0x0, 0xabd2}}}}}}}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) shutdown(r0, 0x2) syz_emit_ethernet(0x7e, &(0x7f0000000080)=ANY=[@ANYRESHEX=r0]) 6.18823ms ago: executing program 0 (id=251): msgget$private(0x0, 0x602) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) sendmmsg(r0, &(0x7f0000001940)={{0x0, 0x0, 0x0, 0x0, 0x0}}, 0xfffffffffffffee9, 0x8) sendto(r0, &(0x7f0000000100)="9505", 0x2, 0x402, 0x0, 0x0) unveil(0x0, &(0x7f0000000040)='x\x00') 1.658558ms ago: executing program 1 (id=252): r0 = open(&(0x7f0000000000)='./file0\x00', 0x9cab835cfdc52675, 0x0) ioctl$WSMOUSEIO_SCALIBCOORDS(r0, 0x81205724, &(0x7f0000000200)={0xd, 0x3, 0x9, 0x5, 0x8, 0x1ff, 0x10, 0x10, [{0x1, 0x9, 0x5, 0x4}, {0x2, 0xfffffffd, 0x4, 0x8}, {0x6, 0xe, 0x5, 0x8}, {0x8, 0x81, 0x4, 0x5}, {0x9, 0x4, 0x7ff, 0xa}, {0x2, 0x0, 0x9, 0x99c}, {0xfbb3, 0x2, 0x8001, 0x5}, {0x29d526ec, 0xffff8000, 0x5, 0xfffffffc}, {0x5, 0x7, 0x0, 0x873}, {0x82a, 0xffff, 0x1ff, 0x4}, {0x5, 0xc, 0x20004, 0x80000001}, {0xa96f, 0x101, 0x8001, 0xd}, {0x200, 0x3, 0xfff, 0x6}, {0x31, 0x6, 0x2, 0xa603}, {0x16, 0x3, 0x6, 0x7}, {0x9, 0xd, 0x3, 0xab}]}) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x200000000000c, &(0x7f0000000000)="ea000001", 0x4) openat$wskbd(0xffffffffffffff9c, &(0x7f00000000c0), 0x180, 0x0) sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b10005", 0x3, 0xe, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r1 = socket(0x11, 0x3, 0x0) sendto$unix(r1, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x0, 0x0, 0x0) syz_extract_tcp_res(&(0x7f0000000040)={0x41424344, 0x41424344}, 0xebb8, 0x5) open$dir(&(0x7f0000000100)='./file1\x00', 0xf02, 0x2) link(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file1\x00') syz_extract_tcp_res$synack(&(0x7f0000000100), 0x1, 0x0) syz_emit_ethernet(0x9f, &(0x7f0000000140)={@broadcast, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x91, 0x2, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x4, @broadcast}, @tcp={{0x3, 0x2, r3, r2, 0x1, 0x0, 0x13, 0x20, 0x10, 0x0, 0x4, {[@md5sig={0x13, 0x12, "03aa5c920f7215553c5c44002400323d"}, @md5sig={0x13, 0x12, "d79a58d779e0557d045c52bc11173786"}, @window={0x3, 0x3, 0x9}, @sack={0x5, 0xe, [0x827, 0x4, 0x8000]}]}}, {"0f65928accc47cf4210a6744d66a95e6becae0817ff8aea71ab5547db3068966d1ac54067cf9975ae3d60a5f31b302add5"}}}}}}) syz_emit_ethernet(0x1000e, &(0x7f0000000000)=ANY=[]) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x0, 0x1011, r0, 0xffffffffffffffff) open(&(0x7f0000000000)='./file0\x00', 0x9cab835cfdc52675, 0x0) (async) ioctl$WSMOUSEIO_SCALIBCOORDS(r0, 0x81205724, &(0x7f0000000200)={0xd, 0x3, 0x9, 0x5, 0x8, 0x1ff, 0x10, 0x10, [{0x1, 0x9, 0x5, 0x4}, {0x2, 0xfffffffd, 0x4, 0x8}, {0x6, 0xe, 0x5, 0x8}, {0x8, 0x81, 0x4, 0x5}, {0x9, 0x4, 0x7ff, 0xa}, {0x2, 0x0, 0x9, 0x99c}, {0xfbb3, 0x2, 0x8001, 0x5}, {0x29d526ec, 0xffff8000, 0x5, 0xfffffffc}, {0x5, 0x7, 0x0, 0x873}, {0x82a, 0xffff, 0x1ff, 0x4}, {0x5, 0xc, 0x20004, 0x80000001}, {0xa96f, 0x101, 0x8001, 0xd}, {0x200, 0x3, 0xfff, 0x6}, {0x31, 0x6, 0x2, 0xa603}, {0x16, 0x3, 0x6, 0x7}, {0x9, 0xd, 0x3, 0xab}]}) (async) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x200000000000c, &(0x7f0000000000)="ea000001", 0x4) (async) openat$wskbd(0xffffffffffffff9c, &(0x7f00000000c0), 0x180, 0x0) (async) sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b10005", 0x3, 0xe, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) (async) socket(0x11, 0x3, 0x0) (async) sendto$unix(r1, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x0, 0x0, 0x0) (async) syz_extract_tcp_res(&(0x7f0000000040), 0xebb8, 0x5) (async) open$dir(&(0x7f0000000100)='./file1\x00', 0xf02, 0x2) (async) link(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file1\x00') (async) syz_extract_tcp_res$synack(&(0x7f0000000100), 0x1, 0x0) (async) syz_emit_ethernet(0x9f, &(0x7f0000000140)={@broadcast, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x91, 0x2, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x4, @broadcast}, @tcp={{0x3, 0x2, r3, r2, 0x1, 0x0, 0x13, 0x20, 0x10, 0x0, 0x4, {[@md5sig={0x13, 0x12, "03aa5c920f7215553c5c44002400323d"}, @md5sig={0x13, 0x12, "d79a58d779e0557d045c52bc11173786"}, @window={0x3, 0x3, 0x9}, @sack={0x5, 0xe, [0x827, 0x4, 0x8000]}]}}, {"0f65928accc47cf4210a6744d66a95e6becae0817ff8aea71ab5547db3068966d1ac54067cf9975ae3d60a5f31b302add5"}}}}}}) (async) syz_emit_ethernet(0x1000e, &(0x7f0000000000)=ANY=[]) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x0, 0x1011, r0, 0xffffffffffffffff) (async) 1.144485ms ago: executing program 0 (id=253): select(0x2a, 0x0, &(0x7f0000000340), &(0x7f0000001900)={0x100000000000000}, &(0x7f0000000440)) (async) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x8, {0x100000000000000, 0x10040000000001}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) r0 = socket(0x18, 0x2, 0x0) setsockopt(r0, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (async) sendmmsg(r0, &(0x7f0000000200)={{&(0x7f00000000c0)=@in6={0x1c, 0x18, 0x2, 0xac, "ff010000000000000000000000000001", 0x3}, 0x1c, 0x0, 0x0, 0x0}}, 0x38, 0xa) (async) r1 = socket(0x11, 0x3, 0x0) sendto$unix(r1, &(0x7f0000000000)="b1000504000004000000080003000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x0, 0x0, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) sendto$unix(r2, &(0x7f0000000080)="cdce89db99488b290baba63588b21f98db76804f8ba752636d7f57be90247f79ebf90577de7cc7f791c825a03883cf3727a283dacad3b2f760d2c29709c472a6a82e2593a8dadc450471de7dd05a200358af37e577af6430e03db5dac8bbe7430165467e11df0685e564f61f73ca9603a370094b9513f296852e4976b965d97245a81209a898caa37d5e71901ef5af5d0f", 0x91, 0xc, 0x0, 0x0) mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x5) (async) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0xc, 0x5, 0x3ff, 0x0, 0x81}, 0x400, 0xfffffffffffffff9, 0x0, 0x4, 0x40000001, 0x800000000000108, 0x24, 0x6, 0x0, 0xfffffffffff}) (async) openat$tty(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) (async) sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0x37) (async) r3 = openat$pf(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0) ioctl$DIOCGETSTATE(r3, 0xc1084413, &(0x7f0000000180)={{0x2400000000000, './file0\x00', [{[@v6=@local={0xfe, 0x80, '\x00', 0x0}, @v6=@local={0xfe, 0x80, '\x00', 0x0}], [0xd51e, 0x1], 0x9, 0x2}, {[@v4=@local={0xac, 0x14, 0x0}, @v4=@multicast1], [0x3, 0x400], 0x1, 0x1a}], {{0x2614, 0x4, 0x2}, 0xac, 0x9, 0x10000, 0x1, 0xfff9, 0x6, 0x30}, {{0x5, 0x1b, 0x3, 0xdfc9}, 0x6, 0x6, 0x401, 0xfff4, 0x6, 0x1, 0x4}, @v4=@rand_addr=0x100, 0x4, 0x1, 0x9, 0x200, 0x6, [[0x10000, 0xd], [0x40, 0x74]], [[0x1, 0x7], [0x5, 0x7]], 0x88c, [0x6, 0xe0], 0x81, 0x18, 0x7f, 0x3, 0x3, 0x1, 0x7a, 0xf4, 0x3, 0x6, 0x6, 0x0, "b4e7"}}) 866.791µs ago: executing program 0 (id=254): r0 = kqueue1(0x4) closefrom(r0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0xe8, 0x0) r2 = fcntl$dupfd(r1, 0x3, 0xffffffffffffffff) ioctl$FIONREAD(r2, 0x800c745b, &(0x7f00000000c0)) getgroups(0x1, &(0x7f00000002c0)=[0xffffffffffffffff]) setregid(r3, r3) fstat(r0, 0x0) 0s ago: executing program 2 (id=236): sysctl$hw(&(0x7f00000000c0)={0x7, 0xa}, 0x2, &(0x7f0000000100), 0x0, 0x0, 0x0) (async) mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.115' (ED25519) to the list of known hosts. panic: free: non-malloced addr 0x6aa73e53 type ip_moptions Stopped at db_enter+0x25: addq $0x8,%rsp TID PID UID PRFLAGS PFLAGS CPU COMMAND db_enter() at db_enter+0x25 panic(ffffffff8346d89c) at panic+0x1e5 free(6aa73e53,35,0) at free+0x6b7 ip_freemoptions(ffff800000c406e0) at ip_freemoptions+0xea in_pcbdetach(fffff40078afc3d8) at in_pcbdetach+0xec udp_detach(ffff8000015b5790) at udp_detach+0x5a soclose(ffff8000015b5790,0) at soclose+0xb0 soo_close(fffff4006d0a04a0,ffff800045fec7e8) at soo_close+0x56 fdrop(fffff4006d0a04a0,ffff800045fec7e8) at fdrop+0x121 closef(fffff4006d0a04a0,ffff800045fec7e8) at closef+0x192 fdfree(ffff800045fec7e8) at fdfree+0x116 exit1(ffff800045fec7e8,0,0,1) at exit1+0x595 sys_exit(ffff800045fec7e8,ffff80002a3303f0,ffff80002a330340) at sys_exit+0x1a syscall(ffff80002a3303f0) at syscall+0xb17 end trace frame: 0xffff80002a330470, count: 0 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{1}> ddb{1}> set $lines = 0 ddb{1}> set $maxwidth = 0 ddb{1}> show panic *cpu1: free: non-malloced addr 0x6aa73e53 type ip_moptions ddb{1}> show kasan No such command ddb{1}> trace db_enter() at db_enter+0x25 panic(ffffffff8346d89c) at panic+0x1e5 free(6aa73e53,35,0) at free+0x6b7 ip_freemoptions(ffff800000c406e0) at ip_freemoptions+0xea in_pcbdetach(fffff40078afc3d8) at in_pcbdetach+0xec udp_detach(ffff8000015b5790) at udp_detach+0x5a soclose(ffff8000015b5790,0) at soclose+0xb0 soo_close(fffff4006d0a04a0,ffff800045fec7e8) at soo_close+0x56 fdrop(fffff4006d0a04a0,ffff800045fec7e8) at fdrop+0x121 closef(fffff4006d0a04a0,ffff800045fec7e8) at closef+0x192 fdfree(ffff800045fec7e8) at fdfree+0x116 exit1(ffff800045fec7e8,0,0,1) at exit1+0x595 sys_exit(ffff800045fec7e8,ffff80002a3303f0,ffff80002a330340) at sys_exit+0x1a syscall(ffff80002a3303f0) at syscall+0xb17 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x76614cbaa0c0, count: -15 ddb{1}> show registers rdi 0 rsi 0x1 rbp 0xffff80002a32fee0 rbx 0xffff80002999ee0f rdx 0 rcx 0xffff800045fec7e8 rax 0xffff80002999dff0 r8 0x101010101010101 r9 0x8080808080808080 r10 0xc4036a32948969e8 r11 0xde4c07b8d8212392 r12 0xffff80002999ec10 r13 0 r14 0 r15 0x1 rip 0xffffffff823a8245 db_enter+0x25 cs 0x8 rflags 0x246 rsp 0xffff80002a32fed0 ss 0x10 db_enter+0x25: addq $0x8,%rsp ddb{1}> show proc PROC (syz-executor) tid=147724 pid=84631 tcnt=0 stat=onproc flags process=1018 proc=2000 runpri=32, usrpri=86, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0xffff800045fec7e8 scnt=-1 ecnt=1 forw=0xffffffffffffffff, list=0xffff80002a220548,0xffff800045fecfc0 process=0xffff800045ff0018 user=0xffff80002a32b000, vmspace=0xfffff4007a4e3018 estcpu=36, cpticks=3, pctcpu=0.0, user=0, sys=1, intr=0 ddb{1}> ps PID TID PPID UID S PRLAGS PFLAGS WAIT COMMAND 49825 361007 79495 32767 2 0x10 0 syz-executor 49825 91694 79495 32767 3 0x10 0x4000080 fsleep syz-executor 49825 429005 79495 32767 3 0x10 0x4000080 kqsel syz-executor 49825 489077 79495 32767 3 0x10 0x4000080 fsleep syz-executor 23700 324908 98850 0 3 0 0x80 wait syz-executor 98850 264894 50166 0 3 0x2 0x80 wait syz-executor 69790 59280 49227 0 2 0x2 0 ifconfig 49227 193410 61008 0 3 0x100002 0x88 sigsusp sh 61008 176217 70690 0 3 0 0x80 wait syz-executor 70690 460459 50166 0 3 0x2 0x80 wait syz-executor 79495 8213 95219 32767 3 0x10 0x80 nanoslp syz-executor 95219 264246 50166 0 3 0x2 0x80 wait syz-executor 26026 485756 50166 0 3 0x2 0x80 wait syz-executor 70570 436618 50166 0 2 0x10000002 0 syz-executor 84867 121226 71028 32767 3 0x10 0x80 wait syz-executor 71028 513730 50166 0 3 0x2 0x80 wait syz-executor 91233 354648 30730 32767 3 0x10 0x80 nanoslp syz-executor 30730 254638 50166 0 3 0x2 0x80 wait syz-executor 72221 108483 17084 32767 3 0x10 0x80 wait syz-executor 17084 370273 50166 0 3 0x2 0x80 wait syz-executor 50166 128528 86502 0 3 0x2 0x80 kqread syz-executor 86502 246752 52215 0 3 0x100002 0x88 sigsusp ksh 52215 468505 95126 0 3 0x10 0x88 kqread sshd-session 95126 364858 21808 0 3 0x12 0x80 kqread sshd-session 19738 318569 1 0 3 0x100003 0x80 ttyin getty 21808 273146 1 0 3 0 0x88 kqread sshd 17570 108721 4262 73 3 0x1100010 0x80 kqread syslogd 4262 82713 1 0 3 0x100002 0x80 sbwait syslogd 24660 362002 1 0 3 0x100000 0x80 kqread resolvd 36851 302640 72606 77 3 0x100012 0x80 kqread dhcpleased 68657 288738 72606 77 3 0x100012 0x80 kqread dhcpleased 72606 420388 1 0 3 0 0x80 kqread dhcpleased 21286 52753 0 0 3 0x14000 0x200 bored smr 14500 414328 0 0 2 0x14000 0x200 zerothread 68598 420030 0 0 3 0x14000 0x200 aiodoned aiodoned 57693 460554 0 0 3 0x14000 0x200 syncer update 76453 282735 0 0 3 0x14000 0x200 cleaner cleaner 61470 342948 0 0 3 0x14000 0x200 reaper reaper 79929 7114 0 0 3 0x14000 0x200 pgdaemon pagedaemon 58422 398161 0 0 3 0x14000 0x200 bored viomb 62812 213208 0 0 3 0x14000 0x40000200 acpi0 acpi0 88550 360828 0 0 3 0x14000 0x40000200 idle1 16015 485282 0 0 3 0x14000 0x200 bored softnet1 32611 62728 0 0 3 0x14000 0x200 bored softnet0 59025 346458 0 0 3 0x14000 0x200 smrbar systqmp 93420 285126 0 0 3 0x14000 0x200 bored systq 78886 477312 0 0 3 0x14000 0x200 tmoslp softclockmp 41762 24011 0 0 3 0x14000 0x40000200 tmoslp softclock 34464 257448 0 0 3 0x14000 0x40000200 idle0 1 184826 0 0 3 0x2 0x80 wait init 0 0 -1 0 3 0x10000 0x200 scheduler swapper ddb{1}> show all locks CPU 0: exclusive mutex &sched_lock r = 0 (0xffffffff83a2ccb0) #0 witness_lock+0x5f1 #1 mtx_enter+0x4b4 #2 wakeup_n+0x54 #3 uvm_pmr_freepages+0x442 #4 pmap_do_remove+0x8af #5 uvm_unmap_kill_entry_withlock+0x269 #6 uvm_map_teardown+0x117 #7 exit1+0x71b #8 sys_exit+0x1a #9 syscall+0xb17 #10 Xsyscall+0x128 exclusive mutex &uvm.fpageqlock r = 0 (0xffffffff83a2cb28) #0 witness_lock+0x5f1 #1 mtx_enter+0x4b4 #2 uvm_pmr_freepages+0x1b6 #3 pmap_do_remove+0x8af #4 uvm_unmap_kill_entry_withlock+0x269 #5 uvm_map_teardown+0x117 #6 exit1+0x71b #7 sys_exit+0x1a #8 syscall+0xb17 #9 Xsyscall+0x128 Process 59025 (systqmp) thread 0xffff800045ffe298 (346458) shared rwlock systqmp r = 0 (0xffffffff83991df8) #0 witness_lock+0x5f1 #1 taskq_thread+0x12a #2 proc_trampoline+0x10 ddb{1}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 11066 12014K 12034K 166960K 12221 0 pcb 17 12K 12K 166960K 17 0 rtable 173 5K 7K 166960K 966 0 pf 25 16K 16K 166960K 67 0 ifaddr 33 6K 7K 166960K 118 0 ifgroup 38 1K 2K 166960K 122 0 sysctl 1 1K 9K 166960K 5 0 counters 64 36K 37K 166960K 106 0 ioctlops 0 0K 2K 166960K 57 0 iov 0 0K 12K 166960K 11 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1288 81K 81K 166960K 1578 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 5K 166960K 9 0 VM map 2 1K 1K 166960K 2 0 sem 3 8K 9K 166960K 6 0 dirhash 12 2K 2K 166960K 15 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 23 85K 121K 166960K 695 0 sigio 0 0K 0K 166960K 4 0 proc 65 115K 147K 166960K 1047 0 subproc 72 4K 4K 166960K 252 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 3 0K 0K 166960K 119 0 in_multi 67 4K 6K 166960K 306 0 ether_multi 1 0K 0K 166960K 3 0 mrt 1 0K 0K 166960K 13 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 211 943K 943K 166960K 211 0 exec 0 0K 1K 166960K 626 0 fusefs mount 1 32K 32K 166960K 1 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 224 144K 168K 166960K 6919 0 UVM aobj 46 2K 2K 166960K 47 0 pinsyscall 44 88K 110K 166960K 2261 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 0K 166960K 15 0 NDP 14 0K 1K 166960K 81 0 temp 41 9119K 9178K 166960K 6782 0 kqueue 13 20K 29K 166960K 85 0 SYN cache 2 16K 16K 166960K 2 0 ddb{1}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 28 0 0 1 0 1 1 0 8 0 rtpcb 120 84 0 81 1 0 1 1 0 8 0 rtentry 176 310 0 232 6 0 6 6 0 8 0 unpcb 144 485 0 468 6 0 6 6 0 8 5 syncache 336 10 0 10 1 0 1 1 0 8 1 tcpqe 32 1 0 1 1 0 1 1 0 8 1 tcpcb 736 87 0 81 1 0 1 1 0 8 0 arp 136 54 0 42 1 0 1 1 0 8 0 ipq 40 2 0 0 1 0 1 1 0 8 0 ipqe 40 2 0 0 1 0 1 1 0 8 0 inpcb 328 458 0 446 7 0 7 7 0 8 5 nd6 152 79 0 64 1 0 1 1 0 8 0 kcovpl 48 28 0 20 1 0 1 1 0 8 0 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 1261 0 849 32 0 32 32 0 8 6 art_table 40 1262 0 849 6 0 6 6 0 8 0 art_node 32 310 0 229 1 0 1 1 0 8 0 sysvmsgpl 40 5 0 4 1 0 1 1 0 8 0 semapl 72 2 0 1 1 0 1 1 0 8 0 shmpl 112 44 0 1 2 0 2 2 0 8 0 dirhash 1024 19 0 2 3 0 3 3 0 8 0 dino2pl 256 1960 0 454 95 0 95 95 0 8 0 ffsino 296 1960 0 454 116 0 116 116 0 8 0 nchpl 144 2520 0 775 65 0 65 65 0 8 0 vnodes 216 2221 0 0 124 0 124 124 0 8 0 namei 1024 10680 0 10680 3 2 1 2 0 8 1 percpumem 16 69 0 21 1 0 1 1 0 8 0 kstatmem 264 61 0 42 2 0 2 2 0 8 0 scxspl 216 8155 0 8155 4 3 1 3 1 8 1 plimitpl 152 140 0 115 2 0 2 2 0 8 0 sigapl 424 948 0 895 7 0 7 7 0 8 0 knotepl 120 296 0 0 9 0 9 9 0 8 0 kqueuepl 224 101 0 91 1 0 1 1 0 8 0 pipepl 344 299 0 272 9 0 9 9 0 8 6 fdescpl 528 932 0 897 3 0 3 3 0 8 0 filepl 160 4171 0 3959 16 0 16 16 0 8 4 lockfpl 104 92 0 90 1 0 1 1 0 8 0 lockfspl 48 37 0 35 1 0 1 1 0 8 0 sessionpl 144 123 0 107 1 0 1 1 0 8 0 pgrppl 48 152 0 128 1 0 1 1 0 8 0 ucredpl 104 680 0 663 1 0 1 1 0 8 0 zombiepl 144 901 0 895 1 0 1 1 0 8 0 processpl 1232 948 0 895 5 0 5 5 0 8 0 procpl 664 1392 0 1336 6 0 6 6 0 8 0 sockpl 752 1030 0 998 16 0 16 16 0 8 12 mcl64k 65536 3 0 0 1 0 1 1 0 8 0 mcl9k128 9344 1 0 0 1 0 1 1 0 8 0 mcl8k 8192 2 0 0 1 0 1 1 0 8 0 mcl4k 4096 122 0 0 16 0 16 16 0 8 0 mcl2k 2048 21 0 0 3 0 3 3 0 8 0 mextrefs 64 25 0 0 1 0 1 1 0 8 0 mtagpl 96 1 0 0 1 0 1 1 0 8 0 mbufpl 256 1224 0 0 77 0 77 77 0 8 0 bufpl 272 2680 0 102 172 0 172 172 0 8 0 anonpl 32 7997 0 0 65 0 65 65 0 247 0 amapchunkpl 152 21105 0 20622 33 0 33 33 0 158 8 amappl16 200 2600 0 2568 16 5 11 15 0 8 8 amappl15 192 4 0 4 1 1 0 1 0 8 0 amappl14 184 622 0 619 1 0 1 1 0 8 0 amappl13 176 159 0 149 1 0 1 1 0 8 0 amappl12 168 1240 0 1208 2 0 2 2 0 8 0 amappl11 160 7 0 7 2 2 0 1 0 8 0 amappl10 152 80 0 70 1 0 1 1 0 8 0 amappl9 144 286 0 286 1 1 0 1 0 8 0 amappl8 136 183 0 180 1 0 1 1 0 8 0 amappl7 128 182 0 170 1 0 1 1 0 8 0 amappl6 120 331 0 328 1 0 1 1 0 8 0 amappl5 112 102 0 94 1 0 1 1 0 8 0 amappl4 104 322 0 305 1 0 1 1 0 8 0 amappl3 96 3613 0 3524 5 1 4 4 0 8 1 amappl2 88 1001 0 928 3 0 3 3 0 8 1 amappl1 80 14578 0 14016 16 0 16 16 0 8 3 amappl 88 5875 0 5713 5 0 5 5 0 92 0 uvmvnodes 80 110 0 0 3 0 3 3 0 8 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 46 0 1 1 0 1 1 0 8 0 uaddrrnd 24 932 0 897 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 932 0 897 1 0 1 1 0 8 0 vmmpekpl 168 9626 0 9574 3 0 3 3 0 8 0 vmmpepl 168 69064 0 67150 106 0 106 106 0 357 13 vmsppl 488 931 0 896 7 1 6 6 0 8 0 rwobjpl 80 22456 0 21454 26 0 26 26 0 8 2 pdppl 4096 1871 0 1792 119 32 87 95 0 8 8 pvpl 32 16082 0 0 131 1 130 130 0 265 0 pmappl 256 931 0 896 4 1 3 3 0 8 0 extentpl 40 45 0 27 1 0 1 1 0 8 0 phpool 112 532 0 37 15 0 15 15 0 8 0 ddb{1}> machine ddbcpu 0 Stopped at x86_ipi_db+0x27: addq $0x8,%rsp x86_ipi_db(ffffffff8399bff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __mp_lock(ffffffff83a2e880) at __mp_lock+0x192 exit1(ffff80002a220548,1,0,1) at exit1+0x720 sys_exit(ffff80002a220548,ffff80002a2ea9c0,ffff80002a2ea910) at sys_exit+0x1a syscall(ffff80002a2ea9c0) at syscall+0xb17 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7c61c1489c60, count: 7 ddb{0}> trace x86_ipi_db(ffffffff8399bff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __mp_lock(ffffffff83a2e880) at __mp_lock+0x192 exit1(ffff80002a220548,1,0,1) at exit1+0x720 sys_exit(ffff80002a220548,ffff80002a2ea9c0,ffff80002a2ea910) at sys_exit+0x1a syscall(ffff80002a2ea9c0) at syscall+0xb17 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7c61c1489c60, count: -8 ddb{0}> machine ddbcpu 1 Stopped at db_enter+0x25: addq $0x8,%rsp db_enter() at db_enter+0x25 panic(ffffffff8346d89c) at panic+0x1e5 free(6aa73e53,35,0) at free+0x6b7 ip_freemoptions(ffff800000c406e0) at ip_freemoptions+0xea in_pcbdetach(fffff40078afc3d8) at in_pcbdetach+0xec udp_detach(ffff8000015b5790) at udp_detach+0x5a soclose(ffff8000015b5790,0) at soclose+0xb0 soo_close(fffff4006d0a04a0,ffff800045fec7e8) at soo_close+0x56 fdrop(fffff4006d0a04a0,ffff800045fec7e8) at fdrop+0x121 closef(fffff4006d0a04a0,ffff800045fec7e8) at closef+0x192 fdfree(ffff800045fec7e8) at fdfree+0x116 exit1(ffff800045fec7e8,0,0,1) at exit1+0x595 sys_exit(ffff800045fec7e8,ffff80002a3303f0,ffff80002a330340) at sys_exit+0x1a syscall(ffff80002a3303f0) at syscall+0xb17 end trace frame: 0xffff80002a330470, count: 0 ddb{1}> trace db_enter() at db_enter+0x25 panic(ffffffff8346d89c) at panic+0x1e5 free(6aa73e53,35,0) at free+0x6b7 ip_freemoptions(ffff800000c406e0) at ip_freemoptions+0xea in_pcbdetach(fffff40078afc3d8) at in_pcbdetach+0xec udp_detach(ffff8000015b5790) at udp_detach+0x5a soclose(ffff8000015b5790,0) at soclose+0xb0 soo_close(fffff4006d0a04a0,ffff800045fec7e8) at soo_close+0x56 fdrop(fffff4006d0a04a0,ffff800045fec7e8) at fdrop+0x121 closef(fffff4006d0a04a0,ffff800045fec7e8) at closef+0x192 fdfree(ffff800045fec7e8) at fdfree+0x116 exit1(ffff800045fec7e8,0,0,1) at exit1+0x595 sys_exit(ffff800045fec7e8,ffff80002a3303f0,ffff80002a330340) at sys_exit+0x1a syscall(ffff80002a3303f0) at syscall+0xb17 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x76614cbaa0c0, count: -15