last executing test programs: 4.604301353s ago: executing program 5 (id=6): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) syz_emit_ethernet(0x98, &(0x7f0000000040)=ANY=[@ANYBLOB="efffffffffff94ea09066dbd86dd60db8344000811000000000008000000479c6a73b3120000000000000000ff"]) (async, rerun: 64) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000540)) (async, rerun: 64) unveil(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000300)='c\x00') (async) openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) (async) r1 = open(&(0x7f0000000380)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7949) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r1, 0x0) (async) ioctl$VMM_IOC_RESETCPU(r1, 0x82405605, &(0x7f0000000580)={0x0, 0x640f, {[0x1, 0x9, 0x5, 0x100, 0x7, 0x2, 0xff, 0xffffffff, 0x1, 0x6, 0xa326, 0x3, 0xffffffffffff8b67, 0xa338, 0x6, 0x1, 0x81, 0x9], [0x948, 0x9, 0x8001, 0x5, 0x8, 0x5f, 0x2, 0x10001, 0x3, 0x100000001], [0x5, 0x1241, 0x7, 0x4, 0x6, 0x0, 0x8], [0x7fffffffffffffff, 0x5, 0xf8, 0x1, 0x5, 0x714], [{0x7228, 0x3a, 0xd61f}, {0x8, 0xac1f, 0x2, 0xc}, {0x7, 0x3, 0xc, 0x4}, {0xd1, 0xfb, 0x864, 0x100000001}, {0x4, 0x7, 0xffffffff, 0xbde9}, {0x40, 0x3, 0x0, 0x6}, {0x3, 0x5, 0x80000001, 0x100000001}, {0xe, 0x3, 0x80, 0x5}], {0x8000, 0x0, 0x6, 0xcd4a}, {0x589b, 0xa49, 0x2, 0x50}}}) (async) poll(&(0x7f0000000840)=[{r0, 0xc1}], 0x1, 0x50) (async, rerun: 32) r2 = open(&(0x7f0000000180)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf79e5) (rerun: 32) readv(r2, &(0x7f0000002e40)=[{&(0x7f0000000a80)=""/146, 0x92}], 0x1) (async) dup3(r2, r0, 0x10004) 4.508801745s ago: executing program 5 (id=34): bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0x1c, 0x18, 0x1, 0x4, "01000000000000000000000000000001", 0x2}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = socket(0x1, 0x2, 0x0) r1 = dup(r0) getsockopt$sock_int(r1, 0xffff, 0x1002, &(0x7f0000000000), &(0x7f0000000040)=0x4) 4.395680165s ago: executing program 5 (id=38): symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') sysctl$net_inet_ip(&(0x7f00000010c0)={0x4, 0x2, 0x0, 0xe}, 0x4, 0x0, 0x0, 0x0, 0x5a) sysctl$net_inet6_ip6(&(0x7f0000000040)={0x4, 0x18, 0x29, 0x35}, 0x4, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) (async) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) sysctl$net_inet6_ip6(&(0x7f0000000080)={0x4, 0x18, 0x29, 0x3}, 0x4, &(0x7f0000000200)="37818641ece2c5a0898e50809e370e0ac972ced885bcd2dfd93c5a88bc98c3d83eeac24a4fbda74ea4dd10774c920ff04c4466921b972e5ee7ae52cc49422ab2f587c65b55f0ed48d5d71bcc209f8e8d39a2898f11161eb2bb7195c1beac89062cafdf4cf47b6e078602677e67a5657872eccffff78917c979e1ce0cb6778ea215be81cbb03a57f7b6b3b2885b6e080a6eb085d92cfa201112f090a3149479219ce21cf4a6a8b7a7a5b6719dc1acd42abc7fc1bcda54", &(0x7f00000002c0)=0xb6, &(0x7f0000000300)="81abc6b82d40253c03be314fb83668dcf07eb3ae9b47c0", 0x17) sysctl$net_inet_divert(&(0x7f0000000040)={0x4, 0x1e, 0x2, 0x2}, 0x4, 0x0, 0x0, 0x0, 0x0) sysctl$net_inet_ipip(&(0x7f0000000340), 0x4, &(0x7f0000000380)="44d6fc0d4780097f732867e44a84ccbdb4666584c0320d92fde4d047260b12c6f702e92a7a24d9ae1a7455afbe80c2227a8009b974252d643e5485122a61e7e8ebd9f413d15fc913942091914ea6d6b54c4854f1f76f247f30312015e21f8b9f3df0977755540cf3184459bc4be8009a93e7d5e5750b7a1065ee0e51b35fdca27cdb36a0148df316532f422424aad209a5dba4c411a3196a4f0ac5c5d9377cef0da501426ef12e5a7853cfa86e266ec6dabefa581cfb6c90c93fc2fdcbc2115063349b0d356a3dc26a1c", &(0x7f0000000480)=0xca, &(0x7f00000004c0)="b62a9ea0db14c16f907d7d9f0c92d5c27c7f222d7b44ce91320bf14832354c153b0991ce14f126dd9b5acb29342394dc604a6797080f5e8c251045b7105c121c712dd48a630bdb001f3aa3b4f1a68f6c7c46293d55398ddc3757170365dc4f6505f59c638f022833082c970eb98d218a58356e5efeb2f62f3879dac651de6f2228e9653cecfaff44293a13e2c96caa21bd79c8383878f83d35f1f72a24bbc171c93532d990b2f11b3f5de3bbc510f3cc6f428675ac766e035cfbaf9dfd181a252db42739ad167a51e77cd2ebf21b620e6d1d596283f368eeb391b6e21ab5121d9e0f0aa5d35f29", 0xe7) unveil(&(0x7f00000001c0)='./file0/file0/..\x00', &(0x7f0000000180)='c\x00') unveil(&(0x7f00000000c0)='./file0/file0/..\x00', &(0x7f0000000140)='r\x00') (async) unveil(&(0x7f00000000c0)='./file0/file0/..\x00', &(0x7f0000000140)='r\x00') r0 = socket(0x18, 0x2, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0) (async) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt(r1, 0x0, 0x4, &(0x7f0000000280), 0x0) open(&(0x7f0000000100)='.\x00', 0x0, 0x0) (async) open(&(0x7f0000000100)='.\x00', 0x0, 0x0) 4.391901444s ago: executing program 5 (id=40): ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x100000000000000, 0x10040000000001}}) kevent(0xffffffffffffffff, &(0x7f0000000040)=[{{}, 0xfffffffffffffffa, 0x6b, 0x11, 0x200000000000001, 0x101}], 0x202, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket(0x18, 0x1, 0x0) setsockopt(r0, 0x1000000029, 0xc, &(0x7f0000000040)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) setsockopt(r0, 0x1000000029, 0xc, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) r1 = socket(0x18, 0x2, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x20, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4, 0x12, r2, 0x0) r3 = open(&(0x7f0000005840)='./file0\x00', 0x200, 0xb) mknod(&(0x7f00000000c0)='./file0\x00', 0x1ffa, 0x0) r4 = open(&(0x7f0000000400)='./file0\x00', 0x2, 0x0) ioctl$FIONREAD(r4, 0xc028698d, &(0x7f0000000000)) futimes(r3, &(0x7f0000005880)=[{0x8000, 0x3}, {0x7, 0xb}]) ppoll(0x0, 0x0, &(0x7f0000000100)={0xe7, 0x3b9ac9fd}, 0x0) futimens(0xffffffffffffff9c, 0xfffffffffffffffe) r5 = accept$unix(r1, 0x0, &(0x7f00000001c0)) r6 = syz_open_pts() setsid() ioctl$TIOCSCTTY(r6, 0x20007461) ioctl$TIOCSTAT(r6, 0x20007465) ioctl$FIONREAD(r5, 0x4004667f, &(0x7f0000000200)) readv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000180)=""/61, 0x3d}], 0x1) kevent(r2, &(0x7f0000000280)=[{{r1}, 0xfffffffffffffff7, 0x26, 0x40, 0x1000, 0x10002}], 0x7, &(0x7f00000003c0)=[{{r1}, 0xfffffffffffffffb, 0x8, 0x2, 0x8000000000000001, 0xfff}, {{r6}, 0xfffffffffffffffc, 0x52, 0x2, 0x1000, 0x5c3b}, {{r5}, 0xffffffffffffffff, 0x40, 0x80000000, 0x58, 0x1}, {{r6}, 0xfffffffffffffff9, 0x51, 0x80, 0x7, 0x8001}, {{r1}, 0xffffffffffffffff, 0x0, 0x40, 0x8}], 0x2d0, &(0x7f0000000580)={0xffffffffffffffff, 0x8000}) sysctl$kern(&(0x7f0000000140)={0x1, 0x29}, 0x2, 0x0, 0x0, 0x0, 0x0) sendmsg$unix(r1, &(0x7f0000000040)={&(0x7f0000000240), 0x2, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="15"], 0x18, 0x401}, 0x0) 2.63664796s ago: executing program 2 (id=138): r0 = socket(0x2, 0x4001, 0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) kevent(0xffffffffffffffff, 0x0, 0x7ffe, 0x0, 0x7, &(0x7f0000000240)={0xd07, 0x200000001}) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x9, &(0x7f0000000240)="ea00000100000000", 0xc) sendto$inet(r2, 0x0, 0x0, 0x404, &(0x7f0000000000)={0x10, 0x2, 0x1, 0xe0000001}, 0x10) close(r1) socket$inet(0x2, 0x1, 0x0) r3 = socket(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0xffff, 0x1023, &(0x7f00000004c0), 0x4) select(0x1, &(0x7f00000000c0)={0x4, 0xe9, 0x8, 0x81, 0x2, 0x4, 0x8000000000000000, 0xb}, &(0x7f0000000140)={0x1, 0xffffffffffffcca3, 0x101, 0x40000000003, 0x5, 0x7, 0x0, 0x6}, &(0x7f0000000100)={0x4, 0x8000000000000000, 0x3d, 0x100, 0x9, 0xda0, 0x5, 0xe}, 0x0) sysctl$hw(&(0x7f0000000040)={0x7, 0x3}, 0x2, 0x0, 0x0, 0x0, 0x0) sysctl$hw(&(0x7f0000000240)={0x6, 0x8}, 0x2, &(0x7f0000000280)="20668b9893902f321d98b80acbe7105933fdfb624c5ac5d6658be52e8a3f86b9ee72", &(0x7f00000002c0)=0x22, &(0x7f0000000300)="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", 0x1000) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000001300), 0x1, 0x0) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r5, 0x0, 0x200000000000a, &(0x7f0000000040)='\x00', 0x1) sendto$inet(r5, 0x0, 0x0, 0x40c, &(0x7f0000000540)={0x10, 0x2, 0x1, 0xffffffff}, 0x10) ioctl$BIOCSETIF(r4, 0x8020426c, &(0x7f0000001340)={'tap', 0x0}) sysctl$hw(&(0x7f0000000000)={0x6, 0x8}, 0x2, &(0x7f0000000080)="76989f55714e71e423c876d558709f3331fe7360", &(0x7f0000000180)=0x14, &(0x7f00000001c0)="16358a818ea96f6c6278845f18570f0752df2b8758f2c1ac208703f039ec4829445c7dd68247a06ed68ec46b5fb98cc74cfd46b757ce5aed82b9cc18f6743a8e124d3660c842e67b11598613a14f03177db7d88bf473fbe189a7f418c48379411b003137c638f1c412a0faf77ff95ebf85", 0x71) 1.828608914s ago: executing program 0 (id=196): mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x1, 0x8) unveil(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='r\x00') open(&(0x7f0000000480)='./file0\x00', 0x80, 0x4ebfac6bbaf7959) pipe(&(0x7f0000000000)) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r1, 0x0, 0x200100000001d, &(0x7f0000000000), 0x4) ioctl$FIONREAD(r0, 0x8028698c, &(0x7f0000000100)) sysctl$kern(&(0x7f00000000c0)={0xa, 0x3}, 0x7, &(0x7f0000000100)="efc1ac94697268ba13553be526b97d4e90f512be1dd9c07055692807da6695631ef4d0efc885198e969e2c683a0acc0330575db66578ac4c098a5fcc67597247ac9eb4a49b1ccc7570440eb320b81b76db2c7104f109d66af358a48692a008e2e70714653f901409b45fd0d23036035426069bffed7148af6d5c0f98807148ce7f5a12b884c2f7353066be17263b29f2f028ebe516a057f8b818bfbd10afe688839606e36d8b0c82ab4a7ff8e0a57993a11dca2b00510692f9a657162bef61ced2b3cfcd9330290bf4a3ba713701cd1cdcde002fb1852d754282c35e0ae9327466ff08545a", 0x0, 0x0, 0xd) mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) (async) open(&(0x7f0000000040)='./file0\x00', 0x1, 0x8) (async) unveil(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='r\x00') (async) open(&(0x7f0000000480)='./file0\x00', 0x80, 0x4ebfac6bbaf7959) (async) pipe(&(0x7f0000000000)) (async) socket$inet(0x2, 0x2, 0x0) (async) setsockopt$inet_opts(r1, 0x0, 0x200100000001d, &(0x7f0000000000), 0x4) (async) ioctl$FIONREAD(r0, 0x8028698c, &(0x7f0000000100)) (async) sysctl$kern(&(0x7f00000000c0)={0xa, 0x3}, 0x7, &(0x7f0000000100)="efc1ac94697268ba13553be526b97d4e90f512be1dd9c07055692807da6695631ef4d0efc885198e969e2c683a0acc0330575db66578ac4c098a5fcc67597247ac9eb4a49b1ccc7570440eb320b81b76db2c7104f109d66af358a48692a008e2e70714653f901409b45fd0d23036035426069bffed7148af6d5c0f98807148ce7f5a12b884c2f7353066be17263b29f2f028ebe516a057f8b818bfbd10afe688839606e36d8b0c82ab4a7ff8e0a57993a11dca2b00510692f9a657162bef61ced2b3cfcd9330290bf4a3ba713701cd1cdcde002fb1852d754282c35e0ae9327466ff08545a", 0x0, 0x0, 0xd) (async) 1.705866832s ago: executing program 2 (id=200): ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x200000000000b, &(0x7f0000000080)='\x00', 0x1) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000240)="ea00aa6600000000", 0x8) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0x1c, 0x18, 0x1, 0x4, "00000000000000000000000000000001", 0x7}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) (async) r1 = socket(0x1, 0x2, 0x0) r2 = dup(r1) getsockopt$sock_int(r2, 0xffff, 0x1002, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) r3 = socket(0x18, 0x1, 0x0) ioctl$FIONREAD(r3, 0x8020699b, &(0x7f00000001c0)) (async, rerun: 32) pipe(&(0x7f0000000000)={0xffffffffffffffff}) (async, rerun: 32) sysctl$hw(&(0x7f0000000080)={0x6, 0x1c}, 0x2, &(0x7f0000000000), 0x0, 0x0, 0x0) (async) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$dupfd(r4, 0xa, r5) 1.705246943s ago: executing program 2 (id=201): r0 = open(&(0x7f0000000040)='./file0\x00', 0x2, 0x102) ioctl$FIONREAD(r0, 0xc0286988, &(0x7f0000000100)) r1 = socket$inet6(0x18, 0x8000, 0x5) ioctl$LIOCSFD(r0, 0x80046c7f, &(0x7f0000000000)=r1) sysctl$kern(&(0x7f00000000c0)={0x1, 0x4f}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x33, 0x0, 0x37) r2 = kqueue() kevent(r2, &(0x7f0000000180)=[{{}, 0xfffffffffffffff6, 0x81, 0x8, 0x4, 0x3}, {{}, 0xfffffffffffffff6, 0x2e, 0x2, 0x400, 0x100000000}], 0x3, 0x0, 0x100009, 0x0) 1.702426201s ago: executing program 2 (id=204): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, &(0x7f0000000100)={0x0, 0x4, {[0xfffffbeffffffffb, 0x0, 0xffffffff841212aa, 0x2, 0x8001, 0x0, 0x6, 0xffffffffffffffff, 0x80000001, 0x2f00, 0x0, 0x3, 0xffffffffffffffff, 0x3fffffffffffffc, 0x0, 0xffffffffffffffa5, 0x82, 0xce5], [0xfffffffffffffffe, 0x80000001, 0xffffffffffdffff9, 0x2, 0x0, 0x7b98, 0x200, 0x0, 0xfffffffffffffffe, 0x9], [0x5ad8, 0x2, 0x40000000, 0x0, 0xfffffffffffffffb, 0x11006, 0x4], [0x100, 0x20000000000, 0xfffffffffffffffc, 0x5f25, 0xfffffffffffffffa, 0x3], [{0x3, 0x4, 0x0, 0x7d06}, {0x10, 0x6}, {0x0, 0xfffffffc, 0x80000001, 0x80}, {0x3, 0xd, 0x4, 0xffffffffffffffff}, {0x0, 0x2, 0x0, 0x8}, {0x0, 0x2003, 0x40000, 0x6}, {0x6b7, 0x8, 0x6dd7}, {0x0, 0x965, 0xfffffffc, 0x9}], {0x2000, 0x7, 0x5, 0xffffffffffffffff}, {0x29, 0x6, 0xb0, 0x200}}}) r1 = accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) recvmmsg(r0, &(0x7f0000001cc0)={{0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000000340)=""/181, 0xb5}, {&(0x7f00000004c0)=""/202, 0xca}, {&(0x7f00000005c0)=""/218, 0xda}, {&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f00000016c0)=""/193, 0xc1}, {&(0x7f00000017c0)=""/188, 0xbc}, {&(0x7f0000001880)=""/202, 0xca}, {&(0x7f0000001980)=""/95, 0x5f}, {&(0x7f0000001a00)=""/228, 0xe4}], 0x9, &(0x7f0000001bc0)=""/245, 0xf5}, 0x1000}, 0x38, 0x40, &(0x7f0000001d00)={0x4}) sendto$inet(r1, &(0x7f0000000040)="8682194727bdce41ab504b1434b2c74f6ed42c14fc6fe601d2452d4efbda4ec5c943992f47eb999ca2b0d022956b", 0x2e, 0x402, &(0x7f0000000080)={0x10, 0x2, 0x2, 0x80000001}, 0x10) r2 = kqueue() kevent(r2, &(0x7f0000000000), 0x96, &(0x7f0000000540), 0xfffb4961, 0x0) 1.621030434s ago: executing program 3 (id=205): sysctl$net_inet6_ip6(0x0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) (async) sysctl$net_inet6_ip6(0x0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) syz_open_pts() (async) r0 = syz_open_pts() connect(0xffffffffffffffff, &(0x7f00000000c0)=@in6={0x1c, 0x18, 0x3, 0x8, "4c9eae2b27a419d8010ff3ea8dbd98ab", 0x8}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) socket(0x1, 0x5, 0x2) (async) r1 = socket(0x1, 0x5, 0x2) setsockopt$sock_int(r1, 0xffff, 0x1, &(0x7f0000000000)=0xffffc5db, 0x4) connect$inet6(r1, &(0x7f0000000000)={0x1c, 0x18, 0x3, 0x3, "fe8234022c23bdd0e86bc2a6b5ae30dd", 0x3}, 0x1c) ioctl$TIOCGETA(r0, 0x402c7413, &(0x7f0000000140)) socket(0x11, 0x3, 0x0) (async) r2 = socket(0x11, 0x3, 0x0) r3 = socket(0x18, 0x1, 0x0) setsockopt(r3, 0x1000000029, 0x9, &(0x7f0000000080), 0x0) connect(r2, &(0x7f0000000040)=@in={0x10, 0x2, 0x0, 0x800}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x10, 0x2, 0x1, 0xeca}, 0x10) mprotect(&(0x7f00005d1000/0x4000)=nil, 0x4000, 0x2) (async) mprotect(&(0x7f00005d1000/0x4000)=nil, 0x4000, 0x2) syz_open_pts() (async) r4 = syz_open_pts() sendto(r1, &(0x7f0000000180)="370482a53d3cad2f447fc948b4ff1509ccd87e742f219d9cd7176480939baf182b73c7b0505cb836cc0fa7109de3cc5160eff96878a0c555061a44b5ced4811dc982009a5da22a29f8411133fb83c63284ce1978aa07b82fb7e13a7e2a01d3d5f21e2a5d442071a3d3e2d493db1046fc7f09bedd206bc308fa1e25a37b2e4b860a5fbda8aee1793e9d2e2ac54a421ceb0f73f4476fe22553f11c3258711f3963c735453b70b15b90e0e9e5787980fc577a97e55dbeed2f96c1", 0xb9, 0x9, &(0x7f0000000240)=@in6={0x1c, 0x18, 0x0, 0x100, "e781061a5d291d4ccc70d28b8cafe64e", 0x20}, 0x1c) ioctl$TIOCSETA(r4, 0x802c7414, &(0x7f0000000300)={0x80, 0x1, 0xfbfffffe, 0x10000, "d76c1f46000000ef1f0160fbff2000404b00", 0x800}) ioctl$TIOCSETAF(r4, 0x802c7416, &(0x7f0000000140)={0xdc, 0xfffffffe, 0x9448, 0x59b1, "5901138e6f275a080000fcc398b184fbdf001000", 0x8, 0x2}) munmap(&(0x7f0000000000/0xf000)=nil, 0xf000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) 1.618550051s ago: executing program 3 (id=208): r0 = socket(0x20, 0x1000, 0x7) setsockopt$sock_int(r0, 0xffff, 0x1804, &(0x7f0000000100)=0xffffffc0, 0x4) setsockopt(r0, 0x0, 0x24, 0x0, 0x0) sysctl$kern(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)="55f8f5782087a072a82ec35f78d14780f518", 0x12) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r1 = socket(0x18, 0x2, 0x0) ioctl$FIONREAD(r1, 0xc1206949, &(0x7f00000001c0)) recvfrom(r0, &(0x7f0000000000)=""/172, 0xac, 0x42, &(0x7f00000000c0)=@in6={0x1c, 0x18, 0x1, 0x5, "eccc4f818cd69a1fca777c6f63b961b4", 0x3}, 0x1c) clock_getres(0x0, 0xfffffffffffffffe) 1.610669437s ago: executing program 3 (id=210): r0 = socket$inet6(0x18, 0x1, 0x6) bind$inet6(r0, &(0x7f0000000040)={0x1c, 0x18, 0x1, 0x4, "00000000000000000000000000000001", 0x7}, 0x1c) execve(0x0, &(0x7f00000001c0)=[0x0, &(0x7f00000000c0)='/dev/speaker\x00'], 0x0) syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x8, 0x4, 0x2, 0x1, 0x34, 0x64, 0x3, 0x6, 0x9d, 0x0, @broadcast, @broadcast, {[@rr={0x7, 0xb, 0x1e, [@local={0xac, 0x14, 0x0}, @loopback]}]}}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0xb, 0x8, 0x3fc, 0x4, 0x9}}}}}) ioctl$FIONREAD(0xffffffffffffffff, 0xc0106924, &(0x7f00000001c0)) r1 = kqueue() kevent(r1, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) r2 = socket(0x18, 0x2, 0x0) ioctl$FIONREAD(r2, 0x801869a3, &(0x7f00000001c0)) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x18, 0x2, 0xf, "00000000000000000000001745160004", 0x80000000}, 0x1c) r3 = socket$inet6(0x18, 0x1, 0x6) bind$inet6(r3, &(0x7f0000000040)={0x1c, 0x18, 0x1, 0x5, '\x00', 0x5}, 0x1c) socket(0x2, 0x1, 0x0) syz_emit_ethernet(0xe, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000000000001"]) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1) r4 = socket(0x2, 0x4001, 0x0) r5 = fcntl$dupfd(r4, 0x2, 0xffffffffffffffff) sysctl$net_inet_ip(&(0x7f0000000080)={0x4, 0x2, 0x0, 0x5}, 0x4, &(0x7f0000000180), 0x0, 0x0, 0x0) close(r5) socket(0x2, 0x4001, 0x0) setsockopt$sock_int(r4, 0xffff, 0x2220, &(0x7f0000000040)=0x4b, 0x4) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)="76e5eac907f9ccf7a251ceddcec7d6aa45cffe2c63a56077123a276d3ba4e9d17eb3eb5db12a3783a8e0620d357de1fe04fa9465b5bd1286e9624dec06a00c222f", 0x41}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) unveil(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000300)='r\x00') mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) openat$tty(0xffffffffffffff9c, &(0x7f0000000000), 0x8, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 1.578945878s ago: executing program 3 (id=212): r0 = openat$tty(0xffffffffffffff9c, &(0x7f0000000000), 0x408, 0x0) ioctl$TIOCGTSTAMP(r0, 0x4010745b, &(0x7f0000000040)) (async) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) ioctl$DIOCRCLRTSTATS(r1, 0xc4504441, &(0x7f0000000d40)={{'./file0\x00', './file0\x00', 0x45, 0x2}, &(0x7f00000000c0)=[{'./file0\x00', './file0\x00', 0x2, 0x8}, {'./file0\x00', './file0\x00', 0x20, 0x4}, {'./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', './file0\x00', 0xf, 0x7}], 0x1, 0x3, 0xd3c, 0x5, 0x0, 0x3, 0x52, 0x14b7}) (async) ioctl$DIOCADDQUEUE(r1, 0xc148445d, &(0x7f00000011c0)={0x3, 0xfffffffd, {'\x00', './file0/file0\x00', './file1\x00', './file1\x00', {{0x3}, {0xfffffffffffffffc, 0x8000}, 0x4}, {{0xd, 0x7f}, {0xb69, 0xffff}, 0x4}, {{0xe, 0x2000000}, {0x9, 0x7ff}, 0x2}, {0x7, 0x101, 0x9, 0x1}, 0x0, 0x4, 0xa, 0x0, 0x7ff}}) ioctl$WSDISPLAYIO_DELFONT(0xffffffffffffff9c, 0x8058574f, &(0x7f0000001340)={'./file0aaaaaaaaaaaaaaaaaaaaaaaaa', 0xffffff01, 0x9, 0x100, 0x0, 0x3, 0x4, 0xfffffffa, 0x2, 0x0, 0x7fff, 0xaa80}) (async) r2 = open(&(0x7f00000013c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x100, 0x103) ioctl$DIOCSETSYNCOOKIES(r2, 0xc0014462, &(0x7f00000014c0)=0x2) ioctl$TIOCSCTTY(r0, 0x20007461) (async, rerun: 64) linkat(r2, &(0x7f0000001500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r2, &(0x7f0000001600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4) (rerun: 64) r3 = openat$pf(0xffffffffffffff9c, &(0x7f0000001640), 0x1, 0x0) ioctl$DIOCSETLIMIT(r3, 0xc0084428, &(0x7f0000001680)={0x5, 0x5}) read$audio(0xffffffffffffffff, &(0x7f00000016c0)=""/34, 0x22) (async) ioctl$DIOCRCLRTSTATS(r2, 0xc4504441, &(0x7f0000002c00)={{'./file0/file0\x00', './file1/file0\x00', 0x10, 0x7}, &(0x7f0000001700)=[{'./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', './file1\x00', 0x5, 0xf}, {'./file0\x00', './file1\x00', 0x0, 0x6}, {'./file1\x00', './file0/file0/file0\x00', 0x21, 0x3}, {'./file0\x00', './file0aaaaaaaaaaaaaaaaaaaaaaaaa', 0x2, 0x2}, {'./file0/file0\x00', './file0aaaaaaaaaaaaaaaaaaaaaaaaa', 0x38, 0x2}], 0x10000, 0x5, 0x400, 0x7fff, 0x8, 0x0, 0xc, 0x4}) (async) r4 = accept4(r2, &(0x7f0000003080)=@un=@abs, &(0x7f00000030c0)=0x8, 0xe000) getpeername(r4, &(0x7f0000003100)=@in6, &(0x7f0000003140)=0x1c) (async) ioctl$DIOCSETHOSTID(r1, 0xc0044456, &(0x7f0000003180)=0x1) ioctl$DIOCGETQUEUE(r2, 0xc148445f, &(0x7f00000031c0)={0x8e, 0x9, {'\x00', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', './file0/file0/file1\x00', './file0aaaaaaaaa', {{0x1000, 0x100}, {0x716b, 0xf52d}, 0xba27}, {{0x8, 0x7}, {0x4, 0x5}, 0x80000001}, {{0x1, 0x7}, {0x5, 0x8}, 0x7ff}, {0x66, 0x8, 0x5, 0x6}, 0x0, 0x800, 0xffffffff, 0xfff, 0x6037}}) ioctl$DIOCCLRSRCNODES(r2, 0x20004455) (async) ioctl$DIOCSETSYNFLWATS(r3, 0xc0084461, &(0x7f0000003340)={0x731a, 0x8}) (async) r5 = openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000003380), 0x40, 0x0) ioctl$DIOCRTSTADDRS(r5, 0xc4504449, &(0x7f0000003580)={{'./file2\x00', './file1/file0\x00', 0x30, 0x2e}, &(0x7f00000033c0)=[{@empty, '\x00', './file1\x00', 0x2, 0x7, 0x2, 0x6, 0x8, 0xbe, 0x7}, {@loopback, '\x00', './file0/file0\x00', 0x80000000, 0x200, 0x2, 0x2, 0x0, 0x7f}, {@broadcast, '\x00', './file0aaaaaaaaa', 0x8, 0x47, 0x1a, 0xf, 0xc, 0x7, 0x6}, {@empty, '\x00', './file0/file0/fi', 0x9, 0x7, 0x2, 0x8, 0x0, 0x6}, {@loopback, '\x00', './file0/file0/fi', 0xfffffff8, 0xdec, 0x1, 0x40, 0x7, 0x3, 0x5}, {@empty, '\x00', './file0aaaaaaaaa', 0xffff0001, 0x380, 0x0, 0x2, 0x8e, 0x6, 0x4}, {@local={0xac, 0x14, 0x0}, '\x00', './file0\x00', 0x80000001, 0x4, 0x2, 0xb, 0x1, 0x6, 0x2}, {@rand_addr=0x1, '\x00', './file1/file0\x00', 0xfffeffff, 0xffff, 0x30, 0x10, 0x8, 0x0, 0x8}], 0x1, 0x8, 0x6, 0x6, 0x0, 0x3, 0x28, 0x8}) (async) ioctl$DIOCXBEGIN(r1, 0xc0104451, &(0x7f0000006280)={0xa, 0x7, &(0x7f0000003a00)=[{0x0, './file2\x00', 0x5}, {0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xfff}, {0x1, './file0aaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xff}, {0x1, './file0/file0/file0\x00', 0x6}, {0x1, './file0aaaaaaaaa\x00', 0x8000}, {0x1, './file1\x00', 0x5}, {0x0, './file2\x00', 0x5de61044}, {0x1, './file0/file0/fi\x00', 0x4}, {0x1, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800}, {0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1}]}) (async) ioctl$DIOCKILLSTATES(r1, 0x0, &(0x7f00000062c0)={{0x2, 0x8, 0x3}, 0x1e, '\x00', 0x81, {@table={'./file2\x00', 0x0, 0x3, 0x96}, [0x6, 0xff81], 0xf0, 0x1, 0x7}, {@table={'./file0aaaaaaaaaaaaaaaaaaaaaaaaa', 0x0, 0x3, 0x4b}, [0x6, 0x1], 0xb, 0x3, 0xfffe}, './file0/file0/fi', './file0aaaaaaaaa\x00', 0x5, 0x8}) (async, rerun: 32) preadv(r5, &(0x7f0000006400)=[{&(0x7f00000063c0)=""/10, 0xa}], 0x1, 0x8) (async, rerun: 32) closefrom(r3) (async, rerun: 32) ioctl$DIOCCHANGERULE(r2, 0xcd60441a, &(0x7f0000006440)={0xefd, 0x5, 0x2, './file0aaaaaaaaa\x00', '\x00', 0x0, "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"}) (async, rerun: 32) ioctl$DIOCRGETTABLES(r5, 0xc450443f, &(0x7f0000007e40)={{'./file0/file0/file0\x00', './file0/file0/fi\x00', 0x28, 0x6b}, &(0x7f00000071c0)=[{'./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', './file0/file0/fi\x00', 0x15, 0xe}, {'./file0\x00', './file2\x00', 0xd, 0x4}, {'./file0/file0/file0\x00', './file0aaaaaaaaa\x00', 0x1, 0x7}], 0x8, 0x3, 0x7, 0x3, 0x7f, 0x8, 0x668c9a1eeb38a979, 0xdb4}) (async) ioctl$WSDISPLAYIO_DELFONT(r2, 0x8058574f, &(0x7f00000082c0)={'./file1\x00', 0x6, 0x6, 0x2, 0x1, 0x6, 0x92, 0x10000, 0x1, 0x0, 0x0, 0x200}) ioctl$DIOCSETSYNFLWATS(r2, 0xc0084461, &(0x7f0000008340)={0x4, 0x7}) 1.563541557s ago: executing program 3 (id=214): setitimer(0x2, &(0x7f00000000c0)={{0x1, 0x2}, {0x0, 0xffffeffffffffff8}}, 0x0) (async) sysctl$kern(&(0x7f00000000c0)={0x1, 0x33}, 0x2, 0x0, 0x0, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$kern(&(0x7f00000000c0)={0x1, 0x47}, 0x4000000000000003, 0x0, 0x0, 0x0, 0xfffffffffffffe1a) writev(0xffffffffffffffff, 0x0, 0x0) sysctl$net_inet_icmp(&(0x7f0000000000)={0x4, 0x2, 0x1, 0x7}, 0x4, 0x0, 0x0, 0x0, 0x0) (async) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x200000000000c, &(0x7f0000000000)="ea00000100000000", 0x8) (async) setsockopt$inet_opts(r0, 0x0, 0x200000000000c, &(0x7f0000000240)="ea00eb0100000000", 0x8) (async) setsockopt$inet_opts(r0, 0x0, 0x200000000000c, &(0x7f00000001c0)="cf0100030000cb40e942c6b11ef1160000", 0x11) setrlimit(0x8, &(0x7f0000000980)={0xb, 0x54}) r1 = syz_open_pts() (async) r2 = openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) ioctl$DIOCXCOMMIT(r2, 0xc0104452, &(0x7f00000000c0)={0x3, 0x1, &(0x7f0000001280)=[{0x1, './file0\x00', 0xfffffff5}, {0x1, './file0\x00', 0xe}, {0x1, './file0\x00', 0x80}]}) (async) close(r1) (async) r3 = syz_open_pts() lseek(r3, 0x7fffffffffffffff, 0x2) syz_open_pts() (async) setrlimit(0x8, &(0x7f00000000c0)={0x45, 0x56}) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="28000000ffff000001"], 0x28}, 0x0) (async) recvmsg(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000080)=""/10, 0xa}], 0x1, 0x0}, 0x40) (async) close(r4) (async) r6 = syz_open_pts() close(r6) (async) ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f0000000200)={0xfffff77b, 0xfffffffc, 0x3, 0xffdffffa, "18264e026c8c0100ff7f4d01000400000400", 0x6, 0x5}) (async) writev(r6, &(0x7f0000001240)=[{&(0x7f0000000240)="2cda63d7c4d67427b10249ee452b5ad4a0f1aa5b9c4c63b4a680e9410a9a62db32d2a7b2cfb242e2627099db9cbcb28a633cd4c8e53dd343a2abf2a4eed84cba14104af263f484c34f917090c3b131ff", 0xfffe}], 0x1) (async) ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000000)={0x7fffffff, 0xcad1, 0xdffdff7e, 0x1613528, "04e4577e011b0900000000000000000000010400", 0x200101, 0xfff}) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000140)="3a81c11d8215a0a53a9e36d236ce1bffbc323ecba88d2aef49", 0x19}], 0x1) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) 1.355414826s ago: executing program 3 (id=215): r0 = syz_open_pts() ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000340)={0x80000000, 0x5, 0xfffffffe, 0x45, "ff14e713000000000000000000000048dd00", 0x4000040, 0x30000083}) r1 = socket$inet6(0x18, 0x1, 0x6) bind$inet6(r1, &(0x7f0000000040)={0x1c, 0x18, 0x1, 0x4, "fe0400000000000000001000", 0xc}, 0x1c) r2 = openat$pf(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) ioctl$DIOCSETHOSTID(r2, 0xc0044456, &(0x7f0000000100)=0x9) syz_open_pts() ioctl$TIOCOUTQ(r0, 0x40047473, &(0x7f0000000000)) ioctl$TIOCSTAT(r0, 0x20007465) r3 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) ioctl$KDMKTONE(r3, 0x20004b08, &(0x7f0000000080)=0x7) 991.271381ms ago: executing program 7 (id=235): r0 = socket$inet(0x2, 0x1000, 0xf) (async) sysctl$net_inet_ip(&(0x7f00000001c0)={0x4, 0x2, 0x0, 0x13}, 0x4, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) mprotect(&(0x7f00000be000/0x1000)=nil, 0x1000, 0x2) (async, rerun: 64) r1 = socket(0x800000018, 0x1001, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) setsockopt$sock_int(r2, 0xffff, 0x20, 0x0, 0x0) ioctl$FIONREAD(r1, 0x4004667f, 0x0) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r3, 0x0) (async) ftruncate(r3, 0x8531) (async) mlock(&(0x7f0000000000/0x2000)=nil, 0x2000) setsockopt(r0, 0x8000, 0x0, &(0x7f0000000000)="d4a6effdfb007c021a58226b445fd7ac78ad3e44d11258f8f959caf9ed47865204373541213889e4a20d4ace8e5b178eb546aca5e63a0054c6cb93132a9d44c5855fca1ceb781c49f01bb5b061e91044029883a66276e6e090ceffb6a0e6bfefdd4611e3a4507706df7be42ae6003522c7db17c8264fd0cf5dd53505fc759a88c7e7e58e8e5aace515bb217e6b9fab132815cd4879915ecd6067b053093ecb6b8343be7db98e364b72a9dd3be2d2a8bce03e8c36aa037f193296d41cfa6f710723dbe6374cbe47555120c577f72a1321ab4dbe96346ea4cb23376b031a", 0xdd) r4 = socket(0x10, 0x1, 0x8) (async) closefrom(r1) r5 = socket$unix(0x1, 0x1, 0x0) r6 = syz_open_pts() close(r6) fsync(r6) (async, rerun: 64) read(r4, &(0x7f0000000140)=""/223, 0xdf) (async, rerun: 64) ioctl$FIONREAD(r5, 0x80206979, &(0x7f0000000100)) 983.507396ms ago: executing program 0 (id=237): setrlimit(0x8, &(0x7f0000000140)={0xa, 0x5a}) setrlimit(0x3, &(0x7f0000000080)={0x3, 0x6}) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000040)={0x2, &(0x7f00000000c0)=[{0x0, 0x8, 0x5, 0x2}, {0x5, 0x0, 0x0, 0x4}]}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x31}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = dup(0xffffffffffffffff) sendto(r0, &(0x7f0000000180)="dc8514e4c637fefd0fbdf82e488ebe2800", 0x11, 0x0, &(0x7f00000001c0)=@in6={0x1c, 0x18, 0x3, 0x80000000, "b4bc2b59b6714ed3c8915334248cfafd", 0x3}, 0x1c) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{}, {0x1}]}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x33}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x3414, 0x0, 0x37) sysctl$kern(&(0x7f0000000000)={0x1, 0x33}, 0x2, &(0x7f0000000100)="71f91e3471ecfffbff1e53501d94a34b8c5f84cf2d", &(0x7f0000000140)=0x15, 0x0, 0x0) mlock(&(0x7f00004f2000/0xd000)=nil, 0xd000) 974.532452ms ago: executing program 0 (id=239): socket(0x18, 0x1, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x8401, 0x0) recvfrom(r0, 0x0, 0x0, 0x800, 0x0, 0x0) (async) recvfrom(r0, 0x0, 0x0, 0x800, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x18, 0x3, 0x5, "fe80000400000000000000000041fdff", 0x16}, 0x1c) unveil(0x0, &(0x7f0000000080)='c\x00') 973.801425ms ago: executing program 6 (id=240): socket(0x2, 0x4001, 0x0) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0x80000000, 0xffff63de, 0x2, 0x2, 0x8, 0x100003, 0x40, 0x10, [{0x5, 0x6, 0x80000001, 0x80000201}, {0x2, 0xfffffffb, 0x6, 0xfff}, {0x7, 0xfffffffe, 0x2006, 0x1}, {0x4000002, 0x7, 0xf, 0xc422}, {0xfffffffc, 0x7, 0xf11, 0x7}, {0x3, 0xffff, 0x80d2}, {0x2024, 0x0, 0x85, 0x5}, {0x0, 0x40009, 0xfffffffb, 0xfbffe2e9}, {0x8, 0xffa, 0x6, 0x7fff}, {0x0, 0xfffffff8, 0x400005, 0x8bfb}, {0xfffff0d1, 0x8000000, 0x8, 0x7}, {0x4, 0xc7cb, 0x3, 0x2}, {0x401, 0x800108, 0x9, 0x40}, {0x200003, 0xee6, 0x2, 0x6f5fc48b}, {0x7e, 0x5, 0x1, 0x5}, {0x9be2, 0x6, 0x6, 0x69}]}) sysctl$kern(&(0x7f0000000140)={0x1, 0x24}, 0x2, 0xfffffffffffffffe, 0x0, 0x0, 0x0) r0 = syz_open_pts() ioctl$TIOCSETAF(r0, 0x802c7416, &(0x7f0000000180)={0x6, 0x2, 0x5, 0x20000004, "e255795509001a0063a134fe00000200", 0xa, 0x5}) open(&(0x7f0000000100)='.\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)="76e5eac907f9ccf7a251ceddcec7d6aa45cffe2c63a56077123a276d3ba4e9d17eb3eb5db12a3783a8e0620d357de1fe04fa9465b5bd1286e9624dec06a00c222f", 0x41}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) unveil(&(0x7f00000000c0)='./file0/file0/..\x00', &(0x7f0000000100)='r\x00') poll(&(0x7f0000000000), 0x35, 0x0) syz_open_pts() socket(0x18, 0x4000, 0xff) socket(0x2, 0x4001, 0x0) (async) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0x80000000, 0xffff63de, 0x2, 0x2, 0x8, 0x100003, 0x40, 0x10, [{0x5, 0x6, 0x80000001, 0x80000201}, {0x2, 0xfffffffb, 0x6, 0xfff}, {0x7, 0xfffffffe, 0x2006, 0x1}, {0x4000002, 0x7, 0xf, 0xc422}, {0xfffffffc, 0x7, 0xf11, 0x7}, {0x3, 0xffff, 0x80d2}, {0x2024, 0x0, 0x85, 0x5}, {0x0, 0x40009, 0xfffffffb, 0xfbffe2e9}, {0x8, 0xffa, 0x6, 0x7fff}, {0x0, 0xfffffff8, 0x400005, 0x8bfb}, {0xfffff0d1, 0x8000000, 0x8, 0x7}, {0x4, 0xc7cb, 0x3, 0x2}, {0x401, 0x800108, 0x9, 0x40}, {0x200003, 0xee6, 0x2, 0x6f5fc48b}, {0x7e, 0x5, 0x1, 0x5}, {0x9be2, 0x6, 0x6, 0x69}]}) (async) sysctl$kern(&(0x7f0000000140)={0x1, 0x24}, 0x2, 0xfffffffffffffffe, 0x0, 0x0, 0x0) (async) syz_open_pts() (async) ioctl$TIOCSETAF(r0, 0x802c7416, &(0x7f0000000180)={0x6, 0x2, 0x5, 0x20000004, "e255795509001a0063a134fe00000200", 0xa, 0x5}) (async) open(&(0x7f0000000100)='.\x00', 0x0, 0x0) (async) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)="76e5eac907f9ccf7a251ceddcec7d6aa45cffe2c63a56077123a276d3ba4e9d17eb3eb5db12a3783a8e0620d357de1fe04fa9465b5bd1286e9624dec06a00c222f", 0x41}], 0x1) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) unveil(&(0x7f00000000c0)='./file0/file0/..\x00', &(0x7f0000000100)='r\x00') (async) poll(&(0x7f0000000000), 0x35, 0x0) (async) syz_open_pts() (async) socket(0x18, 0x4000, 0xff) (async) 973.53719ms ago: executing program 7 (id=241): setrlimit(0x8, &(0x7f0000000980)={0x42, 0x62}) r0 = socket(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000100)={0x10, 0x2, 0x2, 0xfffffffd}, 0x10) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bind$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) sysctl$hw(&(0x7f00000000c0)={0x7, 0xf}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$kern(&(0x7f00000000c0)={0x1, 0x37}, 0x2, &(0x7f0000000100), 0x0, 0x0, 0x0) sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x2, &(0x7f0000000100), &(0x7f0000000080), 0x0, 0x0) accept4(0xffffffffffffffff, &(0x7f0000000ec0)=@in6, 0xffffffffffffffff, 0x4000) sendmmsg(r0, &(0x7f0000000500)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x20}}, 0x38, 0x400) 871.009561ms ago: executing program 1 (id=242): msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000000)={{0x7, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xcbdf4d1d31039b30, 0x4}, 0xbbd7, 0x4, 0x0, 0x0, 0x3, 0x2, 0x77, 0x9}) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x2, 0x0, 0x1e}, 0x5, &(0x7f0000000140)="e33745e84d5ebfb9cc2f7fa3a7f7891721720e69dac610a4fb5eaf3e3c6e1d648a8ca6ebc70f949c442aee9dc79e2cd74f4e106f382caf01ada3bc4efb0f6bc50690e5d879fac2492f4a0491b1ea3359aa5c5164ad97ac7c3aaddd498c0f962f5167b69cfdc8287fc34b8138340e60c404a855858ea5fc", &(0x7f0000000000)=0x59, 0x0, 0xfffffdfd) sysctl$net_inet_ip(&(0x7f00000000c0)={0x4, 0x2, 0x0, 0x1f}, 0x4, &(0x7f0000000100)="cb91882ca9b9d1ffe9a24906de4079ae2720774c62e1237a19", &(0x7f00000001c0)=0x19, &(0x7f0000000200)="5a4fe16f0b0257cf92ea97b293a57e970a5ca3439c0daeaa0bc01421d61266472a2d0e58c8bc24bc56e020df9d059e4bb02bea78b5786ff1061a2573097ae32b397209bc075c2de3e0d022f06588e41b33212ce3181e333cb674ec080f7f1cda843ee2fb80d9e9482ea267fc6d4b093bf430c0953ccf7be225018f0cdc3a", 0x7e) 867.646709ms ago: executing program 0 (id=243): r0 = open(&(0x7f0000000080)='./file0\x00', 0x18289, 0x1f4) ftruncate(r0, 0xfffd) r1 = open(&(0x7f0000000040)='./file1\x00', 0x200, 0x8) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x10, r1, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r2, &(0x7f0000000880)={{0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffd}, 0x38, 0x1042, 0x0) 865.084816ms ago: executing program 1 (id=244): msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0xb, 0x0, 0x0, 0x0, 0x0, 0x84, 0x3ff}, 0x400, 0x40000010000, 0x0, 0x0, 0x200000001, 0x80000000000010c, 0x4, 0x6}) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000040)={0x5, &(0x7f00000008c0)=[{0x3}, {0x1, 0x0, 0x0, 0x1}, {0x6, 0x5, 0xe, 0x7}, {0x4, 0x5, 0x0, 0x200}, {0x1, 0xb9, 0x9, 0x5}]}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xff0a, 0x0, 0x37) r0 = socket(0x18, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="28000000ffff000001"], 0x28}, 0x0) recvmmsg(r1, &(0x7f0000000000)={{}, 0xfffffffd}, 0x15, 0x2000, 0x0) read(r1, &(0x7f0000000040)=""/28, 0x1c) recvmmsg(r0, &(0x7f00000007c0)={{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000240)=""/80, 0x50}, {&(0x7f00000002c0)=""/69, 0x45}, {&(0x7f0000000340)=""/173, 0xad}, {&(0x7f0000000400)=""/18, 0x12}, {&(0x7f0000000440)=""/209, 0xd1}, {&(0x7f0000000540)=""/140, 0x8c}, {&(0x7f0000000600)=""/244, 0xf4}], 0x7, &(0x7f0000000780)=""/14, 0xe}, 0x7}, 0x38, 0x40, &(0x7f0000000800)={0xa, 0x8}) setsockopt$sock_int(r0, 0xffff, 0x100, 0x0, 0x0) setrlimit(0x8, &(0x7f0000000980)={0x45, 0x62}) syz_open_pts() r3 = openat$pf(0xffffffffffffff9c, &(0x7f0000000840), 0x80, 0x0) ioctl$DIOCRSETADDRS(r3, 0xc4504445, &(0x7f0000000a00)={{'./file0\x00', './file0\x00', 0x9, 0x1f}, &(0x7f0000000880)=[{@multicast1, '\x00', './file0\x00', 0x1ff, 0x8, 0x2, 0x1, 0x0, 0x92, 0x5a}], 0x80000000, 0x1, 0x7ff, 0xffffaecc, 0x2801, 0x8, 0x4c, 0x1}) setrlimit(0x8, &(0x7f00000000c0)={0x45, 0x56}) r4 = syz_open_pts() close(r4) syz_open_pts() ioctl$FIOASYNC(r4, 0x80047466, &(0x7f0000000200)=0x5) ioctl$FIOASYNC(r4, 0x80047470, &(0x7f0000000440)=0x80000000) openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0) select(0x40, &(0x7f0000000940)={0x9, 0xfffffffffffffff7, 0x9, 0x7f, 0x2638, 0xe6fc, 0x4, 0xffff}, 0x0, &(0x7f00000009c0)={0xff, 0x0, 0x7, 0x7fffffffffffffff, 0x1, 0x9, 0x3, 0x8}, 0x0) select(0x40, &(0x7f0000000940)={0x9, 0xfffffffffffffff7, 0x9, 0x7f, 0x2638, 0xe6fc, 0x4, 0xffff}, 0x0, &(0x7f00000009c0)={0xff, 0x0, 0x7, 0x7fffffffffffffff, 0x1, 0x9, 0x3, 0x8}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffff9c) sysctl$kern(&(0x7f0000000000)={0x1, 0x55}, 0x2, &(0x7f0000000140)="c31725b70fdf8748a22d7b3850a45eb9735d05fe4facf5ed10787ff14c3d1546a3068adcb28df946ef590d1b768e0c3a3ed435c98c55c23822e12108f5694fba05a5d9cc8db68d43f2243cb17c6334ad5143ec66c9", &(0x7f00000001c0)=0x55, &(0x7f0000000200)="bf3f056343973d55b8edcc39e4ca2001899da3dd9f9d696cdcbf99639c8c27243def4308c9d74be8bf0fc7ef8df30ed9096e1e275981e35689667e", 0x3b) 864.918328ms ago: executing program 0 (id=245): r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x10, 0x2, 0x1, 0xffffffff}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) r2 = getpgrp() fcntl$lock(r0, 0x7, &(0x7f0000000080)={0x2, 0x1, 0x0, 0x8, r2}) sendto$inet(r1, 0x0, 0x0, 0x404, &(0x7f0000000000)={0x10, 0x2, 0x1, 0xe0000001}, 0x10) pipe(&(0x7f0000000040)) socket(0x18, 0x8000, 0x1) 862.622765ms ago: executing program 6 (id=246): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0xffffffffffffffff, 0x41, 0x4c, 0x6}, 0x80000000, 0xfffffffffffffffd, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x200023}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000500)={0x3, &(0x7f00000000c0)=[{0xfffe}, {0x1, 0x0, 0x0, 0x2}, {0x4, 0x0, 0x0, 0xff}]}) sysctl$net_inet_ip(&(0x7f00000000c0)={0x4, 0x11, 0x0, 0x26}, 0x3, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x200000000000b, &(0x7f0000000080)='Q', 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xfffffffffffffe3c, 0x0, 0x37) 737.795441ms ago: executing program 2 (id=247): execve(0x0, &(0x7f00000002c0)=[&(0x7f0000000100)='tap'], 0x0) r0 = socket(0x1, 0x1, 0x0) ioctl$FIONREAD(r0, 0xc028698b, &(0x7f0000000100)) select(0x40, &(0x7f0000001080)={0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0xf, 0x401}, 0x0, 0x0, &(0x7f0000000240)) 736.162642ms ago: executing program 7 (id=248): ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{}, {0x3}]}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x33}, 0x2, &(0x7f0000000180)="71f91e3471ac0058bc71b59c7afec37082000000", &(0x7f0000000080)=0x14, 0x0, 0x0) r0 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) futimes(r0, &(0x7f0000000140)=[{0xff80000000000000, 0x7ff}, {0x80000001, 0x7}]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$kern(&(0x7f00000000c0)={0x1, 0x50}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xfe10, 0x0, 0x37) 735.928466ms ago: executing program 6 (id=249): sendmsg$unix(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000080)=@file={0x1, 0x0, './file0\x00'}, 0xa, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x406) (async, rerun: 64) r0 = syz_open_pts() (rerun: 64) fcntl$lock(r0, 0x8, &(0x7f0000000080)={0x0, 0x0, 0x300, 0x100000001}) (async) fcntl$lock(r0, 0x9, &(0x7f00000001c0)={0x3, 0x0, 0x0, 0x300000003}) (async, rerun: 64) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000000)={0x0, &(0x7f0000000180)}) (async, rerun: 64) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket(0x18, 0x2, 0x0) setsockopt(r1, 0x1000000029, 0x2e, &(0x7f0000000040)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) (async) setsockopt(r1, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbdf13b9fd812eaa4e713048e69931929648", 0x14) (async) ioctl$TIOCSTOP(r0, 0x2000746f) 735.301122ms ago: executing program 7 (id=250): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket(0x2, 0x8002, 0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) socket$inet(0x2, 0x3, 0x9) recvmsg(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xffffffffffffff98, &(0x7f00000003c0)=""/232, 0x17}, 0x0) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000140)={0x3, &(0x7f0000000040)=[{0x0, 0xfe, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x4}, {0x1, 0x0, 0x0, 0xbfffffff}]}) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x11}, 0x6, &(0x7f0000000080)="ae215599fed2fce97f573b9c553a0e622d29cd093849cd4fe42e0f5d2d06a4e744f0713d1fcaa1b8274dffd067d413ef9d2224d3fddc171f73a295b6ed18b3d0588be75e78a1d734e15bfe", 0x0, 0x0, 0xfffffffffffffd37) r2 = socket(0x18, 0x3, 0x0) setsockopt(r2, 0x1000000000029, 0x24, 0x0, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) closefrom(r1) socket(0x18, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r3, 0xffff, 0x1001, &(0x7f0000000140)=0x3, 0x4) sendmsg$unix(r3, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x28}, 0x0) unveil(0x0, &(0x7f0000001640)='r\x00') pipe2(0x0, 0x10004) ioctl$BIOCVERSION(r1, 0x40044271, &(0x7f0000000000)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) socket(0x2, 0x8002, 0x0) (async) fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) (async) socket$inet(0x2, 0x3, 0x9) (async) recvmsg(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xffffffffffffff98, &(0x7f00000003c0)=""/232, 0x17}, 0x0) (async) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000140)={0x3, &(0x7f0000000040)=[{0x0, 0xfe, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x4}, {0x1, 0x0, 0x0, 0xbfffffff}]}) (async) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x11}, 0x6, &(0x7f0000000080)="ae215599fed2fce97f573b9c553a0e622d29cd093849cd4fe42e0f5d2d06a4e744f0713d1fcaa1b8274dffd067d413ef9d2224d3fddc171f73a295b6ed18b3d0588be75e78a1d734e15bfe", 0x0, 0x0, 0xfffffffffffffd37) (async) socket(0x18, 0x3, 0x0) (async) setsockopt(r2, 0x1000000000029, 0x24, 0x0, 0x0) (async) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) (async) closefrom(r1) (async) socket(0x18, 0x2, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) (async) setsockopt$sock_int(r3, 0xffff, 0x1001, &(0x7f0000000140)=0x3, 0x4) (async) sendmsg$unix(r3, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x28}, 0x0) (async) unveil(0x0, &(0x7f0000001640)='r\x00') (async) pipe2(0x0, 0x10004) (async) ioctl$BIOCVERSION(r1, 0x40044271, &(0x7f0000000000)) (async) 708.463ms ago: executing program 6 (id=252): sysctl$vm_swapencrypt(&(0x7f0000000140)={0x7, 0x2}, 0x3, 0x0, 0x0, 0x0, 0x0) (async) symlink(&(0x7f0000000000)='./file0\x00', 0x0) sysctl$vm_swapencrypt(&(0x7f0000000040)={0x2, 0x5, 0x1}, 0x3, &(0x7f0000000080)="7fe143da757502bcc07edf100a436fff4a166df2e880d2f13ccfcbf20909ae7b01d728edaa8df6947fcd68620f5d2885704e40ce2fe0901d515d87bd8a6e317b8f8478bc6ba412c14907af4e1f943d1499220de0e389f0a10f277d058436fdd377aac1dec337991086151ce09ed9437402b5abbf187cd2d2fed9e3b1abde2bdbd6a5696d97ab727bc5582c3c617d115ff167436abde4e0c77caf68e9355367554621429ef7a4ec504a24d51161ae04b14b", &(0x7f0000000180)=0xb1, &(0x7f00000001c0)="9e16ac74ab274c2edc956639dbcb73f80e08154bfbf9e89121c60deae8fd29ab3fdaec495ef9d1e552e644bd5ce28bf20a37d3", 0x33) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x15, &(0x7f0000000000), 0x4) 703.731523ms ago: executing program 6 (id=254): r0 = socket(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1001, &(0x7f0000000100)=0x20000, 0x4) syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) writev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000000)="c886b4d3e0", 0x5}], 0x1) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) r1 = socket$unix(0x1, 0x2, 0x0) sendmmsg(r1, &(0x7f0000000180)={{&(0x7f00000001c0)=@un=@file={0x0, 0x1, './file2/file0\x00'}, 0xa, 0x0, 0x0, 0x0, 0xffc8}}, 0x38, 0x402) bind$unix(r1, &(0x7f0000000040)=@file={0x83, 0x0, './file0\x00'}, 0xa) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) connect$unix(r0, &(0x7f0000000000), 0x10) setsockopt$inet_opts(r0, 0x0, 0x1, &(0x7f00000000c0)="9876d692a3ef9c7ab923a2f0", 0xc) write(r0, &(0x7f0000000240)="14bdfa5d1d34e2fecb284a6498307dcda9aec43050036123339a346f737850551408753f95b7688ad4c4e1dd5489e7bafc58d3e5823757ae8b630719ef187ccad995f13dbe19a6dd4e6902bd8297b0799b426aabe9fad9db6996571c6d9f8bb5d542c2148aa42be940970fe88d34d8f99afe7e7820237400000000008000000100"/138, 0xfc7e) 703.235167ms ago: executing program 2 (id=255): r0 = syz_open_pts() ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000040)={0x27ffb, 0x4b6b, 0xfff7, 0x21d8b78c, "2700a460990d000009000000ff00", 0x40004, 0x40}) ioctl$TIOCSTAT(r0, 0x20007465) r1 = socket(0x18, 0x2, 0x0) mprotect(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x1) recvfrom(r1, &(0x7f0000000140)=""/170, 0xaa, 0x2002, 0x0, 0x0) r2 = semget$private(0x0, 0xb, 0x19f) semop(r2, &(0x7f0000000080)=[{0x0, 0x4, 0x1400}, {0x1, 0xfeff, 0x1800}], 0x2) unveil(0x0, &(0x7f0000000080)='c\x00') r3 = socket$inet(0x2, 0x2, 0x0) getsockopt(r3, 0x0, 0x25, 0x0, 0x0) getsockname$inet(r3, &(0x7f0000000000), &(0x7f0000000040)=0x10) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x2, 0x11, 0xffffffffffffffff, 0x39b) 702.055737ms ago: executing program 0 (id=256): r0 = syz_open_pts() mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0/../file0\x00', 0x80, 0x88) fcntl$lock(r0, 0x9, &(0x7f0000000000)={0x1, 0x0, 0x400, 0x1000300000080}) r1 = getpid() r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0xe8, 0x0) r3 = fcntl$dupfd(r2, 0x3, r2) fcntl$setown(r3, 0x6, r1) fcntl$setown(r3, 0x6, r1) flock(r0, 0x1) flock(r0, 0x3) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0x1c, 0x18, 0x0, 0xc, "6d22d04267836382ec3db0d8a65baf46", 0x7}, 0x1c) ioctl$TIOCSETAF(0xffffffffffffff9c, 0x802c7416, &(0x7f0000000000)={0x4, 0xffffff46, 0x2, 0x315a, "225e00d1b37377310900fa4ab1896c04aec100", 0x8, 0xf1}) sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b1000504000004000000000007", 0xd, 0x400, 0x0, 0x0) r4 = socket(0x11, 0x3, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendto$unix(r4, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a378343712051eea040000000000", 0xb1, 0x16, 0x0, 0x0) fcntl$lock(r0, 0x8, &(0x7f0000000080)={0x3, 0x0, 0x0, 0x100000003}) 586.590828ms ago: executing program 7 (id=259): open$dir(&(0x7f0000000b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x0) (async) sysctl$hw(&(0x7f0000000280)={0x6, 0x9}, 0x2, 0x0, &(0x7f0000000240), 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) (async) sysctl$hw(&(0x7f0000000280)={0x6, 0xb}, 0x2, &(0x7f0000000000), &(0x7f0000000240), 0x0, 0x0) (async) symlink(&(0x7f0000000300)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000d80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) r0 = socket(0x18, 0x4000, 0x0) setsockopt(r0, 0x1000000000029, 0x41, 0x0, 0x0) r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r1, &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) openat(r1, &(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80, 0x15) (async) open$dir(&(0x7f0000000800)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x10) (async) symlink(&(0x7f00000001c0)='.\x02/file1/file0\x00', &(0x7f00000011c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') unlink(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) futimens(0xffffffffffffffff, &(0x7f0000000180)=[{0x6, 0xff}, {0x3, 0xffffffffffffffff}]) (async) rename(&(0x7f0000000fc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000010c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 585.386944ms ago: executing program 4 (id=260): r0 = socket(0x2, 0x2, 0x0) getsockopt(r0, 0x0, 0x8, &(0x7f0000000300)=""/152, &(0x7f00000003c0)=0x98) (async) r1 = shmget$private(0x0, 0x4000, 0x95a999646a72d5f2, &(0x7f0000022000/0x4000)=nil) r2 = shmat(r1, &(0x7f0000001000/0x3000)=nil, 0x2000) shmctl$IPC_RMID(r1, 0x0) (async) shmdt(r2) (async) shmat(r1, &(0x7f0000ffd000/0x3000)=nil, 0x2000) 583.663321ms ago: executing program 7 (id=261): setreuid(0xffffffffffffffff, 0x0) sysctl$kern(&(0x7f0000000000)={0x1, 0x16}, 0x2, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x1, 0x2) (async, rerun: 64) setreuid(0x0, 0x0) (async, rerun: 64) open$dir(&(0x7f0000000200)='.\x02/file1/file0\x00', 0x1, 0x102) r1 = open(&(0x7f0000000080)='./file0\x00', 0x18289, 0x190) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x186) (async) open(&(0x7f0000000380)='./file0\x00', 0x797743c9af2d5307, 0x4ebfac6bbaf79e5) (async) r3 = socket(0x18, 0x1, 0x0) close(r3) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) fcntl$lock(r4, 0x9, &(0x7f0000000000)={0x2, 0x2, 0xffffffff00000000, 0x2fffffffc}) r5 = socket(0x18, 0x1, 0x0) setsockopt(r5, 0x1000000029, 0x37, &(0x7f0000000040)="03000000", 0x4) (async) connect$inet6(r3, &(0x7f0000000000)={0x1c, 0x18, 0x3, 0x3, "fe8234022c23bdd0e86bc2a6b5ae30dd", 0x3}, 0x1c) (async) writev(r1, &(0x7f0000000100), 0x0) (async) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x2012, r2, 0x0) (async) open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (async) write(r3, &(0x7f0000000140)="b96abc6559ef20e242ad8d29a5240a6b54d2f903befa42420f587d85d72248fc9b0f3b8cc6f221b12a2107801b7cb2dc43e6f03c4bc2182aec524ddf71a6cb9572e121c933b831ed7f93dec0849e63704d3586d83703b9fa5f1101b8", 0x5c) (async, rerun: 32) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb5219f1000b913f1, 0x0) (rerun: 32) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) (async) getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f00000001c0), &(0x7f0000000100)=0xc) 408.979718ms ago: executing program 6 (id=262): r0 = openat$dri(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card0\x00', 0x8, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffff9c, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], &(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x1, 0x1, 0x1, 0x3, 0x2ee, 0x0, 0x6, 0x100}) ioctl$DRM_IOCTL_MODE_CURSOR(0xffffffffffffffff, 0xc01c64a3, &(0x7f0000000180)={0x2, 0x1, 0x7, 0x4, 0x8000, 0x9, 0x0}) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={r1, 0x180000, 0x4, 0x3, 0x3, 0x6, r3}) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f0000000240)={r1, 0x2, 0x8, 0x2, &(0x7f0000000200)=[{0x7b4, 0x7, 0x3, 0x1}, {0xc383, 0x74a4, 0xe, 0x4}]}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000280)={r2, r5, 0xb, 0x0, 0x7}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = accept(r7, &(0x7f0000000300)=@in, &(0x7f0000000340)=0x10) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000380)={r4, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f00000003c0)={r9}) getsockopt$sock_cred(r6, 0xffff, 0x1022, &(0x7f0000000400)={0x0}, &(0x7f0000000440)=0xc) fcntl$setown(r7, 0x6, r10) getsockopt$sock_linger(r7, 0xffff, 0x80, &(0x7f0000000480), &(0x7f00000004c0)=0x8) ioctl$DRM_IOCTL_SET_MASTER(r0, 0x2000641e) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000600)={&(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0], 0x9, 0x5, 0x4, 0x1, 0x100, 0x3, 0x63, 0x5}) kill(r10, 0x18) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000640)={0x4, 0x4, 0xffff7fff}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000680)={r3}) write(r7, &(0x7f00000006c0)="de2e9bc9ab497f22a3320be6c1b02a6ac1a068d7d5ddb41ca59544e3b8dbcb993368ca", 0x23) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000740)={&(0x7f0000000700)=[r13, r15, 0x0, r14], 0x4, r12, r11, 0xcc4, 0xd, 0x6, 0x3, {0x1, 0xe, 0xb80, 0x4, 0x56b, 0x40, 0x6, 0x6b2, 0x200, 0x6, 0x81, 0x8001, 0x80000, 0x10, "f0e51dabd265195ad9bfa82e4b046b569b237c4287131fd7aee72eb698b9c8ad"}}) ioctl$DRM_IOCTL_AUTH_MAGIC(r0, 0x80046411, &(0x7f00000007c0)) mkfifoat(0xffffffffffffff9c, &(0x7f0000000800)='./file0\x00', 0x10d) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000840)={r17}) closefrom(r7) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000b80)={r16, 0x5, 0x0, 0x101, 0x7fff}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000bc0)={&(0x7f0000000880)=[0x0, 0x0, 0x0], &(0x7f00000008c0)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000b00)=[0x0, 0x0, 0x0], &(0x7f0000000b40)=[0x0, 0x0], 0x8, 0x3, 0x3, r18, r15, 0x4, 0x0, 0x3ff, 0x25, 0x0, 0x8}) r19 = openat$audioctl(0xffffffffffffff9c, &(0x7f0000000c40), 0x1, 0x0) fchmod(r8, 0x98) r20 = accept$inet6(r19, &(0x7f0000000c80), &(0x7f0000000cc0)=0x1c) ppoll(&(0x7f0000000d00)=[{r8, 0x20}, {r20, 0x1}, {r20, 0x10}, {r6, 0x8}, {r19, 0x100}], 0x5, &(0x7f0000000d40)={0xffff, 0x7}, 0x0) 396.178197ms ago: executing program 4 (id=263): r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x201, 0x80) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)="a9bea4776010", 0x6}], 0x1, 0x40000) (async) r1 = getegid() (async) r2 = socket$unix(0x1, 0x1, 0x0) fstat(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r3, 0xffffffffffffffff) setgroups(0x2, &(0x7f0000000040)=[r1, r3]) sysctl$net_inet_ah(&(0x7f0000000000), 0x4, 0x0, 0x0, 0x0, 0x0) 395.483101ms ago: executing program 4 (id=264): open$dir(&(0x7f0000000040)='./file0\x00', 0x8, 0x0) r0 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = syz_open_pts() readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/115, 0x73}], 0x1) ioctl$FIONBIO(r1, 0x8004667e, &(0x7f0000000080)=0x2) execve(0x0, 0x0, 0x0) symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') syz_emit_ethernet(0xaa, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffff00000000000086dd6097520800000000000000b10000000000000000000000bbff020000000000000000000000000001000a00c2", @ANYRES8=r0, @ANYRES8=r0]) 393.94818ms ago: executing program 4 (id=265): r0 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) ioctl$WSKBDIO_SETBELL(r0, 0x80105703, &(0x7f0000000040)={0x3, 0xe90, 0x6, 0x3}) ioctl$WSKBDIO_COMPLEXBELL(r0, 0x80105702, &(0x7f0000000080)={0x1, 0x8, 0x7fffffff, 0x3}) (async) ioctl$VT_SETMODE(0xffffffffffffff9c, 0x80087602, &(0x7f00000000c0)={0x0, 0xfa, 0xb1, 0x5, 0x100}) (async) r1 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$WSDISPLAYIO_SETSCREEN(r1, 0x80045756, &(0x7f0000000140)=0x80000001) (async) unveil(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='w\x00') (async) unveil(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='x\x00') (async, rerun: 64) ioctl$DIOCGETRULE(0xffffffffffffffff, 0xcd604407, &(0x7f0000000280)={0x2, 0x18, 0x8, './file0\x00', './file0\x00', 0x0, "052630ddc8c39b16ae2e8d6e115d6bb024e9447f6f4c830a86a1bde3e725f77a39a14380b5d9e8c14a5bbcda7e0556d03e8c835c20e40124c6c5621793816b21e171daeeeeae866a6883326a40d0bb23509b9bc0e01dd70185613ef8da3240890879aa5c9b41fc4da29280129d93a96d2a5e64823cd42def6ffb37c87649b646b517587be87771d8beb7bf1f12ac77e284f41d26a4e35e505b35d3296366f9730ef7a6cc70754cee442791b9269553d62a917a3f37c00886c7e37564a8e8a3a80626c65502b21885b22ab965a2aa130b4886f03b3cc96d49e2439be80f14a91d02ca82aa5ad549032eefb3d6ad849c7f784b27c4ff87e30d1f5e6b60b217ed22a8571071ca96e1f26f81653b8880a9b04dbf977962913b1fd94dc7801eb60d2938ca22c4e8be4825a7d5b2150dc92d0d640e6ef61f00ab63350cd534b337d2b1987649384aa2946bb30a412853fa1649d38bc126eb6c8d84d8ec1fc38b5803b3be96ca9e1fa44c0951c1a1d14f73fa8e0ab20edef02cc61c8e6161cd41021528af42da12820de027145c5c11fea01ae9617f306bf18faef4428b8c914d8b4852ec61aeba14a985c5d4d65e473b87239ed45fb5f2e36e285f47bd6e26da5e211376f0caeee8d14654cd8dc925de8d6099387692e686d9d54d49821d04787e63d0371b5e3d151e0546c9378c8f0ace457fa87ca72fc57d3f4510225c167768a27659e97d6a72e9f58668ef31180287a34be669890547764f8139db7aec8bcbf6665a18ec64f45542edc5362a5fa47178cc6ee1661e211ae780e568dc20635ff06fd3f1ba897bbb1865824389b543e029517807716345deda152b3544a87ade061c6f046989e987833bb3665b3021f708279c03153aeaa3afd2aa0fa489f646ee342f4e33c4b7d9ee11774a3be0d297d353b5329ffbf68332a6ed7773f09369c1fc5a3b6e1e1a77fa167774f5cc6109ae99ee88218fd7ebab0a2613ce39797b112b187ebb5134e0bccaf2c7d00bb983cc4c71da7207c215c0b64f05553f6f95d415b091f27b5ef8b1940409a22fb1f060e8c554410220746e607b9c61f0f6044153764f4818a5116c836ca2dc82acca3fcd07d429b42a7b6fbd69de53da01a62fa972acbf8bb760fb02abf3411d979fd73fed4b54292e619e2431601e3a734d8e7a96f18bc1f36a1d166f993e8aa400df68bbfab5b9105ec937c4eea33bcc3102d2a989793bf927d14a969171cd29248e53db077dcc1b25a65c887ae77ae72e2041f1bfc7fdf932c956a85d25b252235353429e4553c4633d231e4d7fee17a5496ccaff6be99d8beee5b12e9fc6ebaab395881c625a8ba7fbd3039638812464bc6d2fb826403324f5fccbc7e41dad740a1bde265cac7efafc4a2c5494110eceac7b8e4cedf414a23dd512ac1753e0897e3595e0fce30b0cecf31f909af0baf9434d49730f56aca53a4337dae49c781aa215b22c412c86ce71b341dbc8b6e0cedeb5bdd1c2128571cf3d4a33043267613f6820059245648dad4585c8f8ba9cfa700e5a4b896a4733a8685cbef02908b9cd37f73d21503e33b02e39ccb0b6f247763952386428a205e43127f506a5c2707de83c328ec1b149a80b26117efc991f8be86cc86c71225d136c93b3d98beb5ffb8e2258dee917e1b3aebe857d881143932644fd27c00fddc9bf66a703c3ce41f6c2743b62b1c878a11a1af6d71aa4f1c62399f1a54be10ee2ae395fc759782d8c597144f311e4e2f6a00c7051da649ca83a6a12eb14866c0c7495673467a9e22262ae2d47e37846492a4d869daabda286d97103ff165b05236368155dfbf9699231d66a02e64257b0605606145e188945ba946d7e750c4299647a11e78239ad1a50902fd8842746271f43a07373c73b76f0f91381f13e1522b24e27f8a9abfce236"}) (async, rerun: 64) r2 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000001000), 0x8000, 0x0) ioctl$WSKBDIO_GETMODE(r2, 0x40045714, &(0x7f0000001040)) (async) ioctl$VT_WAITACTIVE(r1, 0x20007606, &(0x7f0000001080)) (async) unveil(&(0x7f00000010c0)='./file0\x00', &(0x7f0000001100)='c\x00') (async, rerun: 32) mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2) (async, rerun: 32) ioctl$KDMKTONE(r2, 0x20004b08, &(0x7f0000001140)=0x1) ioctl$WSDISPLAYIO_GETSUPPORTEDDEPTH(r1, 0x4004575c, &(0x7f0000001180)) r3 = setsid() fcntl$setown(r1, 0x6, r3) ioctl$WSDISPLAYIO_GETPARAM(r2, 0xc0205759, &(0x7f00000011c0)={0x3, 0x9, 0x1, 0x116}) (async) r4 = socket$unix(0x1, 0x5, 0x0) getpeername$unix(r4, &(0x7f0000001200)=@abs, &(0x7f0000001240)=0x8) (async) ioctl$WSDISPLAYIO_SETSCREEN(r2, 0x80045756, &(0x7f0000001280)=0x5) recvfrom$unix(r4, &(0x7f00000012c0)=""/4096, 0x1000, 0x1003, &(0x7f00000022c0)=@abs={0x5, 0x0, 0x0, 0x1}, 0x8) (async) ioctl$VT_RELDISP(0xffffffffffffff9c, 0x20007604, &(0x7f0000002300)) r5 = open$dir(&(0x7f0000002380)='./file1\x00', 0x8, 0x8) symlinkat(&(0x7f0000002340)='./file0\x00', r5, &(0x7f00000023c0)='./file0/file0\x00') (async) unlinkat(r5, &(0x7f0000002400)='./file0/file0\x00', 0x8) socket$unix(0x1, 0x5, 0x0) (async) unveil(&(0x7f0000002440)='./file1\x00', &(0x7f0000002480)='r\x00') (async, rerun: 64) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x810, r4, 0x5) (rerun: 64) 393.61037ms ago: executing program 4 (id=266): r0 = syz_open_pts() setsid() (async) ioctl$TIOCSCTTY(r0, 0x20007461) (async) r1 = openat$tty(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCNOTTY(r1, 0x20007471) (async) readv(0xffffffffffffffff, &(0x7f0000000a40)=[{0x0}, {&(0x7f0000000600)=""/251, 0xfb}], 0x2) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0xffffffffffffffff, 0x41, 0x44, 0x6}, 0x80000000, 0xfffffffffffffffd, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x200023}) (async) r4 = socket(0x18, 0x2, 0x0) setsockopt(r4, 0x1000000000029, 0xc, &(0x7f0000000000), 0x14) (async) write(r2, &(0x7f0000000080)="ed", 0x1) recvmmsg(r3, &(0x7f0000000880)={{0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffd}, 0x38, 0x1042, 0x0) (async) r5 = accept$inet(0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000000c0)=0x10) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') unveil(&(0x7f00000000c0)='./file0/file0/..\x00', &(0x7f0000000100)='c\x00') (async, rerun: 32) unveil(&(0x7f0000000480)='./file0/file1\x00', &(0x7f00000004c0)='c\x00') (async, rerun: 32) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) (async) sendto$inet(r4, &(0x7f0000000380)="2ba60f22e3129a32d1539f57aacd9c542bfacfc8ab51a4e51d689f7fe676b9206f8dc256525dd90c3d4e67ed07cfab1c65763f12128db9cbacca4807ca11c60501ac3bcaa4b6b278eff2e5066149dc34f1472ac4cc976254584911636aee85b73d70d2fcfd2ac292c35d093f16a643df9c692acbb949905a5bfe6314e39e1b2bd1b0a14e28b365fa52e89b1492a9b2dee59db7e4c91ef50c9ded413c279fdfab92faccbd37c9a0752b2f53a17e27b3659d655a02d96931061670b2", 0xbb, 0x1, &(0x7f0000000440)={0x10, 0x2, 0x0}, 0x10) (async) getpeername$inet(r5, &(0x7f00000001c0), &(0x7f0000000200)=0x10) read(r3, 0x0, 0x0) (async, rerun: 32) recvfrom(r2, &(0x7f0000000280)=""/13, 0xd, 0x2, &(0x7f00000002c0)=@un=@abs={0x1, 0x0, 0x0, 0x3}, 0x8) (async, rerun: 32) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0xe8, 0x0) r7 = fcntl$dupfd(r6, 0x3, r6) ioctl$WSKBDIO_GETMAP(r7, 0x200074c4, 0x0) (async, rerun: 32) ioctl$DIOCRGETADDRS(r7, 0xc4504446, &(0x7f0000000a80)={{'./file0\x00', './file0\x00', 0x8, 0x6}, &(0x7f0000000300)=[{@rand_addr=0x3, '\x00', './file0\x00', 0x100, 0xd0, 0x18, 0x2, 0xd, 0x3, 0x6c}, {@loopback, '\x00', './file0\x00', 0x2, 0x7, 0x2, 0x4, 0x0, 0xfd, 0x10}], 0x2, 0x2, 0xfffffffd, 0x10, 0x3ff, 0x8, 0x2, 0x9}) (async, rerun: 32) r8 = socket$inet(0x2, 0x1, 0x0) setsockopt(r8, 0x0, 0x6, &(0x7f0000000000), 0x0) (async) execve(0x0, 0x0, 0x0) (async) pwrite(r3, &(0x7f0000000240)='c', 0x1, 0x4) 392.530033ms ago: executing program 4 (id=267): msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x7, 0x0, 0x0, 0x0, 0x0, 0xffff, 0xfff8}, 0xe, 0x2b1, 0x9, 0x9d25, 0x805, 0x800000000000013, 0x10001, 0x40}) (async) sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0x37) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0xb, 0x0, 0x0, 0x0, 0x180, 0x4a, 0x3ff}, 0x400, 0x44000010003, 0x0, 0x0, 0x200000002, 0x80000000000010c, 0x4, 0x6}) (async) sysctl$kern(&(0x7f00000000c0)={0x1, 0x27}, 0x4, &(0x7f0000000000)="71f91e3471ac0058bc5a91501d942400b5e1a0757cb9af769c7afec37082", &(0x7f0000000080)=0x306, 0x0, 0x2e) (async) r0 = msgget$private(0x0, 0x8) (async) fstatat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) fstat(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) setegid(r2) (async) write(r3, &(0x7f00000002c0)="3dacaf2007efe7f2aacb103ef5614b7ee991217204933059d9fcfbc5d67adfc708ba90e85c3252b8101709dc11c37cee01b0a4070000005e0984f204ef676d7a15176cbe2584124bbc6eaeffa4739da44ab12627c0b68f4f6b2a5fa778b0241132b072462a736f1b3a5227eb254db06f148a13f278b8f1efb35410a0a7febc5571457cab4d2763c894eb64c90f92efc71616839cd5b627c5e619747c135a97a2e37ccf6b1bc0dd5d56d3cecd8029ecfb924772ed6fe4798b990c82e93aab095f25642c116a27a7babca09430204e2ee06ac8cce7404e", 0xffffff33) sched_yield() (async) r4 = getuid() (async) getresgid(0x0, &(0x7f0000000040)=0x0, 0x0) setresgid(r5, 0xffffffffffffffff, r5) (async) r6 = getppid() r7 = syz_open_pts() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) (async) ioctl$TIOCSCTTY(r7, 0x20007461) r10 = fcntl$getown(r7, 0x5) fcntl$setown(r9, 0x6, r10) fcntl$setown(r8, 0x6, r10) (async) connect$unix(0xffffffffffffffff, &(0x7f0000000000)=@file={0x1, 0x1, './file2/file0\x00'}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) r11 = syz_open_pts() ioctl$TIOCSETAW(r11, 0x802c7415, &(0x7f0000000000)={0xfffffffc, 0xa, 0x2, 0x938, "b61617cf9a58344a55a833808eb03fb2ebb02320", 0x100, 0x40004}) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000240)={{r1, r2, r4, r5, 0x160, 0x6, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xc1, 0xd, 0x7, r6, r10, 0x7, 0x0, 0x10, 0x0, 0x2}) 1.690938ms ago: executing program 1 (id=268): open(&(0x7f0000000040)='./file1\x00', 0x18289, 0x110) mlock(&(0x7f00002d0000/0x3000)=nil, 0x3000) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) 597.622µs ago: executing program 1 (id=269): r0 = open(&(0x7f0000000000)='./file0\x00', 0x9cab835cfdc52675, 0x4) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$WSMOUSEIO_SETPARAMS(r0, 0x80105728, &(0x7f0000000200)={&(0x7f00000006c0)}) msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000080)={{0x0, 0x0, 0x0, 0x0, 0x40, 0x10, 0xa142, 0x0, 0xfffffffffffffffe}, 0x400, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x401}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x3e}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) sysctl$vm_swapencrypt(&(0x7f00000000c0), 0x3, 0x0, 0x0, 0x0, 0x0) open$dir(&(0x7f0000000b00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x1c) open$dir(&(0x7f0000000b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x0) r1 = socket(0x18, 0x1, 0x0) setsockopt(r1, 0x1000000029, 0x4, 0x0, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x87ae, 0x0) fcntl$lock(r2, 0x7, &(0x7f0000000000)={0x2, 0x2, 0xf}) getrusage(0x0, 0xffffffffffffffff) symlink(&(0x7f0000000000)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000d80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r3 = open(&(0x7f0000000380)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf79e5) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0x80000000, 0xffff63db, 0x5, 0x2, 0x8, 0x6, 0x9, 0x10, [{0x3, 0x3, 0xfffff115, 0x80000001}, {0xffffffff, 0xffffffff, 0x6, 0x2000fff}, {0x1, 0x4baa, 0x3, 0x9}, {0x900, 0xe2, 0xf, 0x100}, {0x0, 0x7, 0xf15, 0x1000084}, {0x788c, 0xa, 0x8, 0x2}, {0x4, 0x800, 0x4, 0xfffffffe}, {0x100, 0xffffffff, 0x28000, 0xffffe2eb}, {0x4, 0x1000, 0x6, 0x20008001}, {0x3, 0x5, 0x6, 0x8bfd}, {0x0, 0x4, 0x8, 0x6}, {0x10010000, 0x0, 0x800001, 0x1}, {0x401, 0x4, 0x9, 0x3ff}, {0x5, 0x6e2, 0x2, 0x1}, {0x3, 0x0, 0x10000, 0x9}, {0x9be2, 0x1, 0x1000002, 0xd9}]}) symlinkat(&(0x7f0000000580)='.\x02/file1/file0\x00', r3, &(0x7f00000005c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') sysctl$kern(&(0x7f00000000c0)={0x1, 0x50}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xfe10, 0x0, 0x37) ioctl$DIOCRGETTABLES(r3, 0xc450443f, &(0x7f0000006480)={{'./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', './file0aaaaaaaaaaaaaaaaaaaaaaaaa', 0x20, 0x81}, &(0x7f0000004740)=[{'./file1\x00', './file1aaaaaaaaaaaaaaaaaaaaaaaaa', 0x24, 0x6}, {'./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', './file1aaaaaaaaaaaaaaaaaaaaaaaaa', 0x30, 0xe}, {'./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', './file1aaaaaaaaaaaaaaaaaaaaaaaaa', 0x40, 0x6}, {'./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', '.\x02/file1/file0\x00', 0x6, 0x20}, {'./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', './file0\x00', 0x8, 0xff}, {'./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', './file0aaaaaaaaaaaaaaaaaaaaaaaaa', 0x20, 0x3}, {'./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', './file1aaaaaaaaaaaaaaaaaaaaaaaaa', 0x2, 0x1}], 0x0, 0x7, 0x0, 0xd953, 0x231, 0x7f, 0x0, 0x5}) open$dir(&(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x10) ioctl$WSDISPLAYIO_LSFONT(r3, 0xc058574e, &(0x7f0000000500)={'./file0aaaaaaaaaaaaaaaaaaaaaaaaa', 0x2, 0xffffffff, 0x3, 0x0, 0xffe0, 0x8, 0xe88, 0x2, 0x0, 0x800, 0x7}) syz_open_pts() r4 = getppid() ktrace(0x0, 0x5, 0x128, r4) wait4(r4, &(0x7f0000000740), 0x0, &(0x7f0000000940)) open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x4) accept$inet(0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000180)=0x10) sysctl$net_inet6_ip6(&(0x7f0000000040)={0x4, 0x18, 0x29, 0x7}, 0x4, &(0x7f00000002c0)="74000006ed4f09ae9b5241e472d95ca54ff48a75197b00530df9e70000000008d285a55e3af63af4873675baa2fc349d09ef79c5c1d5002a44e289582fc12e510f8843abc68e24348f0607f55a77a5152e75045417d147a67d05035c8a999735eac47c012790d004f9", &(0x7f0000000140)=0x69, 0x0, 0x0) 239.154µs ago: executing program 1 (id=270): r0 = socket$inet(0x2, 0x2, 0x0) fcntl$getown(r0, 0x5) close(0x3) (async) r1 = socket(0x18, 0x1, 0x0) setsockopt(r1, 0x1000000000029, 0x3e, &(0x7f0000000180), 0x0) (async) kevent(0xffffffffffffffff, 0x0, 0xf064, 0x0, 0x7, &(0x7f0000000240)={0x7fffffffffffffff, 0x2000000000000002}) (async) r2 = socket$inet(0x2, 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) setsockopt$inet_opts(r2, 0x0, 0x9, &(0x7f0000000240)="ea00000100000000", 0xc) (async) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000240)="ea00aa6600000000", 0x8) 0s ago: executing program 1 (id=271): r0 = socket(0x3e, 0x4, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000000c0)=@file={0xe, 0x1, './file0\x00'}, 0xa) listen(r1, 0x1) accept$unix(r1, 0x0, 0x0) shmget(0x0, 0x1000, 0x34c, &(0x7f0000ffd000/0x1000)=nil) shmget(0x0, 0x1000, 0x600, &(0x7f0000ff0000/0x1000)=nil) close(0x3) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(r2, &(0x7f0000000080)=@file={0x5, 0x1, './file0\x00'}, 0xa) sysctl$kern(0x0, 0x0, &(0x7f0000000100)="71f91e34", &(0x7f0000000080)=0x4, 0x0, 0x0) sysctl$vm_swapencrypt(&(0x7f00000000c0), 0x3, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$kern(&(0x7f00000000c0)={0x1, 0x4e}, 0x2, &(0x7f0000000000)="71f95f84cf71b59c7afec37582", &(0x7f0000000080)=0xd, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setsockopt(r0, 0x1000000029, 0x36, &(0x7f0000000040)="03000000", 0x4) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.125' (ED25519) to the list of known hosts. panic: pool_do_get: shmpl free list modified: page 0xfffffd806dc7a000; item addr 0xfffffd806dc7a5b0; offset 0x40=0x6a0134c4 Stopped at db_enter+0x25: addq $0x8,%rsp TID PID UID PRFLAGS PFLAGS CPU COMMAND 26134 45645 32767 0x10 0 0 syz-executor * 25023 45645 32767 0x10 0x4000000 1K syz-executor db_enter() at db_enter+0x25 panic(ffffffff8344c04b) at panic+0x1e5 pool_do_get(ffffffff83a2c018,2,ffff800033bb6338) at pool_do_get+0x5df pool_get(ffffffff83a2c018,2) at pool_get+0x162 shmget_allocate_segment(ffff80003c3f2030,ffff800033bb6590,14c,ffff800033bb64e0) at shmget_allocate_segment+0x1af sys_shmget(ffff80003c3f2030,ffff800033bb6590,ffff800033bb64e0) at sys_shmget+0x195 syscall(ffff800033bb6590) at syscall+0xb17 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x97d23c284b0, count: 7 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{1}> ddb{1}> set $lines = 0 ddb{1}> set $maxwidth = 0 ddb{1}> show panic *cpu1: pool_do_get: shmpl free list modified: page 0xfffffd806dc7a000; item addr 0xfffffd806dc7a5b0; offset 0x40=0x6a0134c4 ddb{1}> trace db_enter() at db_enter+0x25 panic(ffffffff8344c04b) at panic+0x1e5 pool_do_get(ffffffff83a2c018,2,ffff800033bb6338) at pool_do_get+0x5df pool_get(ffffffff83a2c018,2) at pool_get+0x162 shmget_allocate_segment(ffff80003c3f2030,ffff800033bb6590,14c,ffff800033bb64e0) at shmget_allocate_segment+0x1af sys_shmget(ffff80003c3f2030,ffff800033bb6590,ffff800033bb64e0) at sys_shmget+0x195 syscall(ffff800033bb6590) at syscall+0xb17 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x97d23c284b0, count: -8 ddb{1}> show registers rdi 0 rsi 0x1 rbp 0xffff800033bb6160 rbx 0xffff8000299aee07 rdx 0xffff80000159d880 rcx 0xffff80003c3f2030 rax 0xffff8000299adff0 r8 0x101010101010101 r9 0x8080808080808080 r10 0xca0aef75897b47c1 r11 0xf97a76d1081b9deb r12 0xffff8000299aec08 r13 0 r14 0 r15 0x1 rip 0xffffffff81e61b65 db_enter+0x25 cs 0x8 rflags 0x246 rsp 0xffff800033bb6150 ss 0x10 db_enter+0x25: addq $0x8,%rsp ddb{1}> show proc PROC (syz-executor) tid=25023 pid=45645 tcnt=3 stat=onproc flags process=10 proc=4000000 runpri=86, usrpri=86, slppri=17, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff80003c3f34f0,0xffffffff8396deb8 process=0xffff80003c3df510 user=0xffff800033bb1000, vmspace=0xfffffd806c76a030 estcpu=36, cpticks=1, pctcpu=0.0, user=0, sys=1, intr=0 ddb{1}> ps PID TID PPID UID S FLAGS WAIT COMMAND 45645 26134 4389 32767 7 0x10 syz-executor 45645 313814 4389 32767 3 0x4000090 netacc syz-executor *45645 25023 4389 32767 7 0x4000010 syz-executor 56170 351788 83500 32767 3 0x90 nanoslp syz-executor 56170 44563 83500 32767 3 0x4000090 fsleep syz-executor 56170 302179 83500 32767 3 0x4000090 sbwait syz-executor 56170 516393 83500 32767 3 0x4000090 fsleep syz-executor 48443 52195 63486 32767 3 0x90 nanoslp syz-executor 48443 39726 63486 32767 3 0x4000090 kqpoll syz-executor 89026 274792 13780 32767 3 0x90 nanoslp syz-executor 89026 166052 13780 32767 3 0x4000090 lockf syz-executor 89026 316694 13780 32767 3 0x4000090 fsleep syz-executor 83453 418377 21914 32767 3 0x90 nanoslp syz-executor 83453 87002 21914 32767 3 0x4000090 lockf syz-executor 83453 332047 21914 32767 3 0x4000090 lockf syz-executor 83453 394983 21914 32767 3 0x4000090 fsleep syz-executor 59107 318700 73854 32767 3 0x90 nanoslp syz-executor 59107 57614 73854 32767 3 0x4000090 sbwait syz-executor 59107 511537 73854 32767 3 0x4000090 fsleep syz-executor 63486 92202 3366 32767 3 0x90 nanoslp syz-executor 13780 130182 79577 32767 3 0x90 nanoslp syz-executor 91648 337268 79745 32767 3 0x90 wait syz-executor 83500 250784 91176 32767 3 0x90 nanoslp syz-executor 5620 126633 89004 32767 3 0x90 nanoslp syz-executor 4389 486103 6815 32767 3 0x90 nanoslp syz-executor 73854 217367 61158 32767 3 0x90 nanoslp syz-executor 21914 324827 99936 32767 3 0x90 nanoslp syz-executor 79577 510725 8184 0 3 0x82 wait syz-executor 3366 39022 8184 0 3 0x82 wait syz-executor 79745 94078 8184 0 3 0x82 wait syz-executor 91176 139301 8184 0 3 0x82 wait syz-executor 89004 299349 8184 0 3 0x82 wait syz-executor 61158 340075 8184 0 3 0x82 wait syz-executor 6815 63456 8184 0 3 0x82 wait syz-executor 99936 61650 8184 0 3 0x82 wait syz-executor 8184 324472 6453 0 3 0x82 kqread syz-executor 6453 336745 92642 0 3 0x10008a sigsusp ksh 92642 312257 26996 0 3 0x98 kqread sshd-session 26996 153064 40786 0 3 0x92 kqread sshd-session 76997 13337 1 0 3 0x100083 ttyin getty 40786 389569 1 0 3 0x88 kqread sshd 43532 303722 79688 73 3 0x1100090 kqread syslogd 79688 408550 1 0 3 0x100082 sbwait syslogd 38944 300407 1 0 3 0x100080 kqread resolvd 40963 243609 74695 77 3 0x100092 kqread dhcpleased 94840 375577 74695 77 3 0x100092 kqread dhcpleased 74695 387720 1 0 3 0x80 kqread dhcpleased 8996 417695 0 0 3 0x14200 bored smr 68259 504897 0 0 3 0x14200 pgzero zerothread 84076 227297 0 0 3 0x14200 aiodoned aiodoned 16078 89606 0 0 3 0x14200 syncer update 39146 82128 0 0 3 0x14200 cleaner cleaner 53827 2377 0 0 3 0x14200 reaper reaper 29539 89250 0 0 3 0x14200 pgdaemon pagedaemon 31033 467066 0 0 3 0x14200 bored viomb 77848 388215 0 0 3 0x40014200 acpi0 acpi0 606 201644 0 0 3 0x40014200 idle1 15544 320756 0 0 3 0x14200 bored softnet1 72454 452042 0 0 3 0x14200 bored softnet0 91586 363707 0 0 3 0x14200 bored systqmp 18356 342252 0 0 3 0x14200 bored systq 93303 496548 0 0 3 0x14200 tmoslp softclockmp 29037 9250 0 0 3 0x40014200 tmoslp softclock 83785 503225 0 0 3 0x40014200 idle0 1 425815 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb{1}> show all locks CPU 1: exclusive mutex shmpl r = 0 (0xffffffff83a2c030) #0 witness_lock+0x5f1 #1 mtx_enter+0x4b4 #2 pool_get+0x124 #3 shmget_allocate_segment+0x1af #4 sys_shmget+0x195 #5 syscall+0xb17 #6 Xsyscall+0x128 Process 45645 (syz-executor) thread 0xffff80003c3f2030 (25023) exclusive kernel_lock &kernel_lock r = 0 (0xffffffff83a24140) #0 witness_lock+0x5f1 #1 syscall+0xaf4 #2 Xsyscall+0x128 exclusive mutex shmpl r = 0 (0xffffffff83a2c030) #0 witness_lock+0x5f1 #1 mtx_enter+0x4b4 #2 pool_get+0x124 #3 shmget_allocate_segment+0x1af #4 sys_shmget+0x195 #5 syscall+0xb17 #6 Xsyscall+0x128 ddb{1}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 11061 12019K 12034K 166960K 12152 0 pcb 17 12K 12K 166960K 17 0 rtable 239 6K 7K 166960K 362 0 pf 31 16K 16K 166960K 31 0 ifaddr 42 7K 7K 166960K 44 0 ifgroup 50 2K 2K 166960K 50 0 sysctl 1 1K 9K 166960K 5 0 counters 70 37K 37K 166960K 70 0 ioctlops 0 0K 4K 166960K 37 0 iov 0 0K 16K 166960K 13 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1287 81K 81K 166960K 1460 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 5K 166960K 12 0 VM map 2 1K 1K 166960K 2 0 sem 12 1K 1K 166960K 20 0 dirhash 12 2K 2K 166960K 12 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 26 97K 121K 166960K 409 0 sigio 1 0K 0K 166960K 11 0 proc 58 99K 180K 166960K 512 0 subproc 72 4K 4K 166960K 72 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 73 0 in_multi 99 7K 7K 166960K 114 0 ether_multi 1 0K 0K 166960K 5 0 mrt 2 0K 0K 166960K 12 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 109 493K 493K 166960K 109 0 exec 0 0K 1K 166960K 373 0 fusefs mount 1 32K 32K 166960K 1 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 271 168K 187K 166960K 5297 0 UVM aobj 14 2K 2K 166960K 16 0 pinsyscall 47 94K 109K 166960K 1470 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 0K 166960K 18 0 NDP 11 0K 2K 166960K 27 0 temp 46 9072K 9136K 166960K 4947 0 kqueue 13 20K 29K 166960K 75 0 SYN cache 2 16K 16K 166960K 2 0 ddb{1}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 26 0 0 1 0 1 1 0 8 0 rtpcb 120 126 0 122 3 0 3 3 0 8 2 rtentry 176 113 0 2 6 0 6 6 0 8 0 unpcb 144 326 0 305 6 0 6 6 0 8 5 syncache 336 5 0 5 1 0 1 1 0 8 1 tcpcb 736 108 0 103 1 0 1 1 0 8 0 arp 136 18 0 0 1 0 1 1 0 8 0 ipq 40 3 0 0 1 0 1 1 0 8 0 ipqe 40 3 0 0 1 0 1 1 0 8 0 inpcb 328 286 0 276 2 0 2 2 0 8 0 ip6q 72 2 0 1 1 0 1 1 0 8 0 ip6af 40 4 0 3 1 0 1 1 0 8 0 nd6 152 26 0 1 1 0 1 1 0 8 0 kcovpl 48 8 0 0 1 0 1 1 0 8 0 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 456 0 2 29 0 29 29 0 8 0 art_table 40 457 0 2 5 0 5 5 0 8 0 art_node 32 113 0 12 1 0 1 1 0 8 0 sysvmsgpl 40 3 0 0 1 0 1 1 0 8 0 semapl 112 15 0 5 1 0 1 1 0 8 0 shmpl 112 13 0 2 1 0 1 1 0 8 0 pool(0xffffffff83a2c018:shmpl): page inconsistency: page 0xfffffd806dc7a000; 23 on list, 11 missing, 35 items per page dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino2pl 256 2014 0 553 92 0 92 92 0 8 0 ffsino 296 2014 0 553 113 0 113 113 0 8 0 nchpl 144 2631 0 938 63 0 63 63 0 8 0 vnodes 216 2095 0 0 117 0 117 117 0 8 0 namei 1024 8197 0 8197 2 0 2 2 0 8 2 percpumem 16 50 0 0 1 0 1 1 0 8 0 kstatmem 264 25 0 0 2 0 2 2 0 8 0 scxspl 216 8574 0 8574 4 3 1 3 1 8 1 plimitpl 152 72 0 48 2 0 2 2 0 8 1 sigapl 424 695 0 641 7 0 7 7 0 8 0 knotepl 120 289 0 0 9 0 9 9 0 8 0 kqueuepl 224 158 0 148 5 0 5 5 0 8 4 pipepl 344 209 0 182 9 0 9 9 0 8 6 fdescpl 528 679 0 641 3 0 3 3 0 8 0 filepl 160 3729 0 3495 18 0 18 18 0 8 6 lockfpl 104 90 0 82 1 0 1 1 0 8 0 lockfspl 48 37 0 32 1 0 1 1 0 8 0 sessionpl 144 38 0 21 1 0 1 1 0 8 0 pgrppl 48 50 0 25 1 0 1 1 0 8 0 ucredpl 104 783 0 764 1 0 1 1 0 8 0 zombiepl 144 643 0 641 1 0 1 1 0 8 0 processpl 1232 695 0 641 5 0 5 5 0 8 0 procpl 664 1138 0 1071 7 0 7 7 0 8 0 sockpl 752 747 0 712 16 5 11 16 0 8 7 mcl64k 65536 3 0 0 1 0 1 1 0 8 0 mcl8k 8192 2 0 0 1 0 1 1 0 8 0 mcl4k 4096 122 0 0 16 0 16 16 0 8 0 mcl2k2 2112 1 0 0 1 0 1 1 0 8 0 mcl2k 2048 27 0 0 4 0 4 4 0 8 0 mtagpl 96 3 0 0 1 0 1 1 0 8 0 mbufpl 256 365 0 0 23 0 23 23 0 8 0 bufpl 280 2915 0 102 201 0 201 201 0 8 0 anonpl 32 5425 0 0 44 0 44 44 0 246 0 amapchunkpl 152 16564 0 15952 31 0 31 31 0 158 7 amappl16 200 1973 0 1952 5 1 4 5 0 8 1 amappl15 192 8 0 8 1 1 0 1 0 8 0 amappl14 184 411 0 410 1 0 1 1 0 8 0 amappl13 176 108 0 98 1 0 1 1 0 8 0 amappl12 168 926 0 889 2 0 2 2 0 8 0 amappl11 160 8 0 8 1 1 0 1 0 8 0 amappl10 152 59 0 49 1 0 1 1 0 8 0 amappl9 144 264 0 263 2 1 1 1 0 8 0 amappl8 136 124 0 123 1 0 1 1 0 8 0 amappl7 128 158 0 146 1 0 1 1 0 8 0 amappl6 120 153 0 152 1 0 1 1 0 8 0 amappl5 112 83 0 76 1 0 1 1 0 8 0 amappl4 104 251 0 234 1 0 1 1 0 8 0 amappl3 96 3204 0 3061 5 1 4 4 0 8 0 amappl2 88 494 0 441 2 0 2 2 0 8 0 amappl1 80 10447 0 9861 17 0 17 17 0 8 2 amappl 88 4571 0 4366 5 0 5 5 0 92 0 uvmvnodes 80 110 0 0 3 0 3 3 0 8 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 15 0 2 1 0 1 1 0 8 0 uaddrrnd 24 679 0 641 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 679 0 641 1 0 1 1 0 8 0 vmmpekpl 168 7324 0 7293 2 0 2 2 0 8 0 vmmpepl 168 50152 0 48023 103 0 103 103 0 357 10 vmsppl 488 678 0 641 7 1 6 6 0 8 0 rwobjpl 80 16369 0 15371 24 0 24 24 0 8 2 pdppl 4096 1365 0 1282 105 22 83 95 0 8 0 pvpl 32 12521 0 0 102 1 101 101 0 265 0 pmappl 256 678 0 641 4 1 3 3 0 8 0 extentpl 40 45 0 27 1 0 1 1 0 8 0 phpool 112 286 0 25 8 0 8 8 0 8 0 ddb{1}> machine ddbcpu 0 Stopped at x86_ipi_db+0x27: addq $0x8,%rsp x86_ipi_db(ffffffff83881ff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __mp_lock(ffffffff83a23940) at __mp_lock+0x199 softintr_dispatch(0) at softintr_dispatch+0x125 dosoftint(0) at dosoftint+0x54 Xsoftclock() at Xsoftclock+0x27 end of kernel end trace frame: 0x74217e81eae0, count: 8 ddb{0}> trace x86_ipi_db(ffffffff83881ff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __mp_lock(ffffffff83a23940) at __mp_lock+0x199 softintr_dispatch(0) at softintr_dispatch+0x125 dosoftint(0) at dosoftint+0x54 Xsoftclock() at Xsoftclock+0x27 end of kernel end trace frame: 0x74217e81eae0, count: -7 ddb{0}> machine ddbcpu 1 Stopped at db_enter+0x25: addq $0x8,%rsp db_enter() at db_enter+0x25 panic(ffffffff8344c04b) at panic+0x1e5 pool_do_get(ffffffff83a2c018,2,ffff800033bb6338) at pool_do_get+0x5df pool_get(ffffffff83a2c018,2) at pool_get+0x162 shmget_allocate_segment(ffff80003c3f2030,ffff800033bb6590,14c,ffff800033bb64e0) at shmget_allocate_segment+0x1af sys_shmget(ffff80003c3f2030,ffff800033bb6590,ffff800033bb64e0) at sys_shmget+0x195 syscall(ffff800033bb6590) at syscall+0xb17 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x97d23c284b0, count: 7 ddb{1}> trace db_enter() at db_enter+0x25 panic(ffffffff8344c04b) at panic+0x1e5 pool_do_get(ffffffff83a2c018,2,ffff800033bb6338) at pool_do_get+0x5df pool_get(ffffffff83a2c018,2) at pool_get+0x162 shmget_allocate_segment(ffff80003c3f2030,ffff800033bb6590,14c,ffff800033bb64e0) at shmget_allocate_segment+0x1af sys_shmget(ffff80003c3f2030,ffff800033bb6590,ffff800033bb64e0) at sys_shmget+0x195 syscall(ffff800033bb6590) at syscall+0xb17 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x97d23c284b0, count: -8