last executing test programs: 1.668857223s ago: executing program 7 (id=8): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt(r0, 0x0, 0x18, 0x0, 0x0) (async) sysctl$kern(&(0x7f00000000c0)={0x1, 0x22}, 0x2, 0x0, 0x0, 0x0, 0x0) (async) fchflags(r0, 0x0) (async) setsockopt$inet_opts(r0, 0x0, 0x1, &(0x7f0000000180)="49bfafae45", 0x5) (async) read(0xffffffffffffffff, &(0x7f0000000000)=""/218, 0xda) (async) r1 = socket$inet6(0x18, 0x4000, 0x2) getsockopt(r1, 0x29, 0x40, 0x0, 0x0) (async) sendto(r1, &(0x7f00000001c0)="f62f9d9eafb922072e3494ac49d2010175c158a369b7c6b6639f87e79254f82ff879c8029d0d3c1585de7de14517161abf8df219c479a73d9b0656022e76cbca54bef25b19786fb1ccbbb5545a9d081f0bfc4dda0aebdb9d22544be4fbd870e56d15af43cb435c12dff34dc3053ed53ac1857e1bbe595b2ac65c929a6496abaf1510768779cea2e7845a", 0x8a, 0x40a, &(0x7f0000000280)=@un=@abs={0x0, 0x0, 0x0}, 0x8) (async) r2 = openat$pci(0xffffffffffffff9c, &(0x7f0000000100), 0x10, 0x0) ftruncate(r2, 0xf15a) (async) setsockopt$inet6_MRT6_DEL_MFC(r1, 0x29, 0x69, &(0x7f0000000140)={{0x18, 0x1, 0xfffffff0, 0x7}, {0x18, 0x0, 0x6, 0x4}, 0x6, [0x3ff, 0xe, 0x278c, 0xb7b, 0x0, 0x0, 0x7, 0x8]}, 0x3c) 1.570935451s ago: executing program 7 (id=11): setrlimit(0x8, &(0x7f0000000980)={0xb, 0x54}) (async) r0 = syz_open_pts() close(r0) syz_open_pts() (async) ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000380)={0xf66c, 0x1, 0x9, 0x5fffff5f, "9cdc452e307e088e68cd330400", 0x3fd, 0xfffff196}) (async) writev(r0, &(0x7f0000000000)=[{&(0x7f00000009c0)="f284547ec87ae3ad1aad0ee27ee88eacb67a08038280f2a01ae7a48358ae16e2fba4ee0ddad57fa2b502658b5723516552c4349404b44e61906eb367dd016164244e321c3f3fa4a301cca907a63fe5682806e86f7b9ed732b01c843a7c13b71430810706a94f10d2cb6414e1fffa7b8cceb21a5bb7f7e286998196fa9ddbf1180a09fbdfb5fa39c5351cac68378d67e9655cdbf971126f853c896ee40a964e51b93e9f8cd2761da19460ae1277fee651ab0c75d0c5b1bf66cfd5838c158d811facece8dcef640f9c9eb9530e6d8ee418a92276e3f27224433eef1cb72de8961a15ff100acd28426503cae730e81dafef5299f8cae80f54b022a9ae3164b69a08b6460d25fba9fe6c6d07c1d5893bbd9f8b78b80fa1c3bf9209558ad46ae1f00a2ee2221f62071fc8687045f65f847000e0bcff4de28560bc948c5f780cc109d10a8fdad1599932daa727ee06845b7bb5d0462606567e6827a47aeaf012f8ebcc6007d3733a5230347e33c24e68fbf757c7fba0f3f9097dd6c24c6732753aac4cc5aa43378d32e28fad0dda633e1362a5e3a1da302e5c1b07103d306d92c663aa9717d106f6f9c944e2c7de93d0fc0ab40b4a4d6416c476337bf94f4a9a6248abfd8e612758b0167f5a0a002b405bc30f8b6e9f9778db29d03789e7293f6d5049bdd713a9ca84764fa65433f3c35334a05b1bf10b14d73506495614913013f2120359ab76806bfc6c5d597786da32ae3d2868d5c692e6bb98413ae8e822b002f3ecdc844354e3eafa64f9a2a90a6f1bff8c9b8ba073203b2396221ca58d38ceb75f42fc4a0c72dc0dc2349bcc3681ca430908cf926861f0aec3b28d2ea59d0ee36f14ea06345e7136dec7c9ba6e3925c4ef813a2c83d4b213b266c26f04e204fbda47ee410ee0ae002e7163492e1929b9279b29e6ed90986de6d05f40b50248f7aa97f03cc09c1082e5119f9491e0f980e9d6bc7407c2a2ec625b902e39085f792fa9217f143349b1b08fb1647b1b694e544d9f33f3bdc4f77f55858cf9f2751ec683512630fa72236d127bff3449692fffb710d8dfe730df8733bb1d59202f2e126e8a77479d461910dfa5664b6fb27fe479774c0ae1190fe35b40c831e6a77f02da283b96686a47adcfbb07950e99dfe251ec21e20d36f868f2ddbb532de5fff1ffbfcede623df3517fb836ba8c48d8848784614ed65a0cf6dfe38b1ecf79942c185c7fb4110f2113794c96e5ecaa33df181357743c2047c01a856846e6f23465b340cc35d88f9ddb966492562f05245ee167b7a97f26a460b3e1632aeb18779cacfbe57a79ef107aa8d9304a45dc195143cacae3e78b1606408d5465d80600d6683fe41838f6212025a9f82a31602775d09d1b8892090bfe17c2269e27682ef898852c65d54c720559b8c4a05c9858c0a1b380824b0282609e7f0dc597f30047d0be06d2c4a44d894d44bd9463d43a795fd2a13bbed1c213602a3fc8931ab00e45a1d0fd2160741ae3868023f4f633eda272a117bf38a1d094f8fb75e55856b6f5fbb7a5595ddc4d9ce6a10e87ce411ae30ad4a61469864a6511e949ad9f4c3230fe05cd4b43b7666d66bdbdcd0ca2fd02dfee6670a9515cfb626e46e7df970f645c673a5e36844062c38fd862e57fd0f053b3ed71fc26bff73bf2ca24e664665a2c7329858ce8d9fc7f18e5f42f217f6b3e64466a28b3c207d67fce58294b2e3b4afe29551e69decffbfb8e8b9df5821094c2b9cb4ca887e295aedb2f2d3a6f6412abfc3793387d6161f03fc8e18fc9227e73bcfd42334365996ec6e85343f0b0dd731c92cee894003311edbf18ddd70445c5c875b007a91a7b7dc6f4dd04e49adfe7d484708152c5c4a55b32e26ffdad79948dc118e0c9a0707f729913bdb63fc8a29c89e2a6b44c942d45de15570ec7ceda9ed638e41008b93fc13eb6e0b0a55a5272ec2e7966efcc5d58fc2d83c5aa7d09e7e65b2612a63698a4654c0f7d253d7556d1b757201803f77de0c6c2e8fc853e7571579f761e1d16bcbe61a7d77e90", 0x5a3}], 0x1) (async, rerun: 64) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') (async, rerun: 64) open(&(0x7f0000000080)='./file0/file0/..\x00', 0x10000, 0x57) link(&(0x7f00000001c0)='./file1/file0\x00', 0x0) 1.436613266s ago: executing program 6 (id=7): r0 = fcntl$dupfd(0xffffffffffffff9c, 0xa, 0xffffffffffffff9c) r1 = dup2(0xffffffffffffffff, r0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff}) r2 = socket(0x18, 0x1, 0x0) r3 = socket$inet(0x2, 0x2, 0x3) getpeername$inet(r3, &(0x7f0000000100), &(0x7f0000000140)=0xc) r4 = socket(0x18, 0x1, 0x0) r5 = socket(0x2, 0x1, 0x0) select(0x40, &(0x7f0000000080)={0xfffffffffffffffd, 0x0, 0x1, 0x0, 0x2000, 0x0, 0x7}, 0x0, 0x0, 0x0) (async) select(0x40, &(0x7f0000000080)={0xfffffffffffffffd, 0x0, 0x1, 0x0, 0x2000, 0x0, 0x7}, 0x0, 0x0, 0x0) listen(r5, 0x8) shutdown(r5, 0x0) (async) shutdown(r5, 0x0) select(0x40, &(0x7f0000000040)={0x9, 0x7, 0x1, 0x0, 0x2, 0xfffffffffffffff9, 0xf37, 0x8}, 0x0, 0x0, 0x0) setsockopt(r4, 0x1000000029, 0x2f, &(0x7f0000000000), 0x0) connect$unix(r2, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) getsockname$inet(r2, &(0x7f00000000c0), &(0x7f0000000000)=0xffffffffffffff35) (async) getsockname$inet(r2, &(0x7f00000000c0), &(0x7f0000000000)=0xffffffffffffff35) r6 = socket(0x18, 0x2, 0x0) semop(0x0, &(0x7f00000000c0)=[{}, {0x0, 0x2ff}], 0x2) connect$unix(r6, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) (async) connect$unix(r6, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) writev(r6, &(0x7f0000000300)=[{&(0x7f0000000240)="dbd9225b22244823c2c2da4d4f34bc95ab4661e2f29351a347bfc1e59d1d6dc5b53063e26611bb816ac81d7503070d25342f1661f7f06451ea7ce6d5d2bdaebcff3f052fd92bf33494cbbb2d70ae66841edf48fe8b5816e5c555cfffae6c55faf6ed1f4d33718abec40066ecc88736afa9ed74d876f41c1239fa48a807727f8340966b928931e5f3398dcc5614bf989735c8d3b9c4679a7d7a1fa3aa310a7548705929662d12abd633faa9", 0xab}, {&(0x7f00000003c0)="5a78d8bf16c5046ec48078fc93c9b965a45a436e9b0bcd95ce8d5abeb9791f1a0b63e16b36979970deb3d84293d0ac586f09ebafdf3c7774ad327fb40b65e65f15608be40f0069054d1f591027d17cd7c997a1c14bc6e1b1d37a972d19afb8577039f7c6438d8bcb18913c976622a42318f5c89b5b8c110e9facbce0996b7830e44c1b556d7ff5", 0x87}], 0x2) (async) writev(r6, &(0x7f0000000300)=[{&(0x7f0000000240)="dbd9225b22244823c2c2da4d4f34bc95ab4661e2f29351a347bfc1e59d1d6dc5b53063e26611bb816ac81d7503070d25342f1661f7f06451ea7ce6d5d2bdaebcff3f052fd92bf33494cbbb2d70ae66841edf48fe8b5816e5c555cfffae6c55faf6ed1f4d33718abec40066ecc88736afa9ed74d876f41c1239fa48a807727f8340966b928931e5f3398dcc5614bf989735c8d3b9c4679a7d7a1fa3aa310a7548705929662d12abd633faa9", 0xab}, {&(0x7f00000003c0)="5a78d8bf16c5046ec48078fc93c9b965a45a436e9b0bcd95ce8d5abeb9791f1a0b63e16b36979970deb3d84293d0ac586f09ebafdf3c7774ad327fb40b65e65f15608be40f0069054d1f591027d17cd7c997a1c14bc6e1b1d37a972d19afb8577039f7c6438d8bcb18913c976622a42318f5c89b5b8c110e9facbce0996b7830e44c1b556d7ff5", 0x87}], 0x2) socket(0x2, 0x1, 0x0) (async) r7 = socket(0x2, 0x1, 0x0) setsockopt$sock_int(r7, 0xffff, 0x1, &(0x7f00000000c0)=0x8001, 0x4) (async) setsockopt$sock_int(r7, 0xffff, 0x1, &(0x7f00000000c0)=0x8001, 0x4) connect$unix(r7, &(0x7f0000000000), 0x10) getpeername$inet6(r4, &(0x7f00000001c0), &(0x7f0000000200)=0xc) (async) getpeername$inet6(r4, &(0x7f00000001c0), &(0x7f0000000200)=0xc) getsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f0000000340)={0x0, 0x0}, &(0x7f0000000380)=0xc) fchown(r7, r8, 0xffffffffffffffff) recvfrom(r7, &(0x7f0000000480)=""/220, 0xdc, 0x800, &(0x7f0000000180)=@un=@file={0x0, './file0\x00'}, 0xa) 1.225487203s ago: executing program 4 (id=16): r0 = socket(0x11, 0x3, 0x4) sendto$unix(r0, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x0, 0x0, 0x0) r1 = socket(0x2, 0x2, 0x0) r2 = socket(0x2, 0x400000000002, 0x38) setsockopt(r2, 0x0, 0x8000, &(0x7f0000000080)="01000000", 0x4) dup2(r1, r1) select(0x40, &(0x7f0000000000)={0xfffffffffffffffd, 0x0, 0xdc4, 0x564, 0x9ce8, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) bind(r1, &(0x7f0000000000), 0x10) r3 = socket(0x2, 0x2, 0x0) syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) writev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000000)="c886b4d3e0", 0x5}], 0x1) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r4 = socket(0x2, 0x2, 0x0) bind(r4, &(0x7f0000000000), 0x10) connect$unix(r4, &(0x7f0000000000), 0x10) sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_int(r3, 0xffff, 0x20, &(0x7f0000000080)=0x6, 0x4) unveil(&(0x7f0000000300)='.\x00', &(0x7f0000000340)='r\x00') open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) connect$unix(r3, &(0x7f0000000000), 0x10) openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) write(r3, 0x0, 0x0) r5 = kqueue() kevent(r5, &(0x7f0000000080)=[{{r5}, 0xfffffffffffffff9, 0x39, 0x13}], 0x4, 0x0, 0x7fa8, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000180)=ANY=[@ANYBLOB="69e1629b6174aaaaaaaaaabb86dd6000100000402c00fe697a653e336f000000500000000000ff0200000000000000000000000000013c000000000000000401070900000000020090780000000369c46dea0006ff0826650652e2a60a3a6863278000fc4357ff020000000000000000000000000001"]) 1.215587083s ago: executing program 4 (id=18): socket(0x20, 0x3, 0x1) sysctl$net_inet_ah(&(0x7f0000000000)={0x4, 0x1e, 0x2, 0x6}, 0x4, 0x0, 0x0, 0x0, 0x0) sysctl$kern(&(0x7f0000000000)={0xa}, 0x7, &(0x7f0000000080), 0x0, 0x0, 0x24) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0x0, [{&(0x7f0000ffd000/0x3000)=nil, &(0x7f000017c000/0x3000)=nil, 0x200007fffffffffe}, {&(0x7f0000ff3000/0xb000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0xffffffffffffff7c}, {&(0x7f00006b3000/0x4000)=nil, &(0x7f000027e000/0x4000)=nil, 0x8000000000b936}, {&(0x7f00001da000/0x4000)=nil, &(0x7f00000d6000/0x1000)=nil, 0xfffffffffffffffd}, {&(0x7f000024d000/0x1000)=nil, &(0x7f0000180000/0x4000)=nil, 0x401}, {&(0x7f000060b000/0x2000)=nil, &(0x7f0000095000/0x3000)=nil, 0x80000000}, {&(0x7f000055e000/0x4000)=nil, &(0x7f0000054000/0x3000)=nil, 0x8}, {&(0x7f0000ffe000/0x2000)=nil, &(0x7f00000ce000/0x4000)=nil, 0x5}, {&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil}, {&(0x7f00003bc000/0x3000)=nil, &(0x7f00003f2000/0x2000)=nil, 0x7fffffffffffffff}, {&(0x7f000064b000/0x2000)=nil, &(0x7f000038f000/0x4000)=nil, 0x12b}, {&(0x7f0000008000/0x3000)=nil, &(0x7f0000688000/0x4000)=nil, 0x1000000000000}, {&(0x7f0000196000/0x3000)=nil, &(0x7f00003e4000/0x2000)=nil, 0x4}, {&(0x7f000024b000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x7e}, {&(0x7f00001f9000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x1000039f7}, {&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000001000/0x800000)=nil, 0x8}], './file0\x00', 0xfffffffe}) mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x2, 0x0) ioctl$FIONREAD(r0, 0xc028698d, &(0x7f00000001c0)) syz_emit_ethernet(0xfffffffffffffe5f, &(0x7f0000000400)={@broadcast, @empty, [], {@ipv4={0x800, {{0x9, 0x4, 0x1, 0x39, 0x38, 0x64, 0x6, 0xc1, 0x1d, 0x0, @multicast1, @remote={0xac, 0x14, 0x0}}, @tcp={{0x1, 0x1, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x80, 0x5}}}}}}) 963.847911ms ago: executing program 4 (id=19): pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x10000) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000240)=""/193, 0xfffffdf0}], 0x1) writev(r1, &(0x7f0000000200)=[{0x0}], 0x1) close(r0) 844.198122ms ago: executing program 5 (id=22): ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x0, 0xb3f, {[0xfffffbfffffffffb, 0x0, 0x8, 0x100200004, 0x6, 0x7, 0xdf60, 0xfffffffffffffffe, 0x1, 0x2f01, 0x93, 0x3, 0xffffffffffffffff, 0x200000000002, 0xf, 0x4, 0xfffffffffffffffe, 0x400000000100], [0xfffffffffffffffe, 0x80000001, 0x1, 0x20000001, 0x5e, 0x200000000207b98, 0x80000000000001fe, 0x0, 0x0, 0x9], [0x100000001, 0x8000, 0x40000000, 0x0, 0xb, 0x11000, 0xffffffff00000000], [0x104, 0x1fffffffffb, 0x7ffffffffffffffc, 0x100000000, 0xfffffffffffffffe, 0x1], [{0x0, 0x0, 0x0, 0x7d02}, {0xfffc, 0x22, 0x5, 0xfffffffffffffff9}, {0x4, 0x0, 0xfffffffe, 0x80}, {0x3, 0x4, 0x5, 0xffffffffffffffff}, {0x0, 0x2, 0x7f, 0xc}, {0x0, 0x9, 0x9, 0x2000000000000002}, {0x0, 0x0, 0xfffffff9, 0x5}, {0x0, 0x100, 0x3, 0x8}], {0x1, 0x5, 0x7, 0x3}, {0xfbfe, 0x3, 0x6d5, 0x4}}}) (async) ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x0, 0xb3f, {[0xfffffbfffffffffb, 0x0, 0x8, 0x100200004, 0x6, 0x7, 0xdf60, 0xfffffffffffffffe, 0x1, 0x2f01, 0x93, 0x3, 0xffffffffffffffff, 0x200000000002, 0xf, 0x4, 0xfffffffffffffffe, 0x400000000100], [0xfffffffffffffffe, 0x80000001, 0x1, 0x20000001, 0x5e, 0x200000000207b98, 0x80000000000001fe, 0x0, 0x0, 0x9], [0x100000001, 0x8000, 0x40000000, 0x0, 0xb, 0x11000, 0xffffffff00000000], [0x104, 0x1fffffffffb, 0x7ffffffffffffffc, 0x100000000, 0xfffffffffffffffe, 0x1], [{0x0, 0x0, 0x0, 0x7d02}, {0xfffc, 0x22, 0x5, 0xfffffffffffffff9}, {0x4, 0x0, 0xfffffffe, 0x80}, {0x3, 0x4, 0x5, 0xffffffffffffffff}, {0x0, 0x2, 0x7f, 0xc}, {0x0, 0x9, 0x9, 0x2000000000000002}, {0x0, 0x0, 0xfffffff9, 0x5}, {0x0, 0x100, 0x3, 0x8}], {0x1, 0x5, 0x7, 0x3}, {0xfbfe, 0x3, 0x6d5, 0x4}}}) r0 = fcntl$getown(0xffffffffffffffff, 0x5) setreuid(0xee00, 0x0) socket$inet(0x2, 0x2, 0x6) (async) socket$inet(0x2, 0x2, 0x6) socketpair(0x10, 0x1, 0x6, &(0x7f0000000040)) (async) socketpair(0x10, 0x1, 0x6, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r2, 0x8, &(0x7f0000000140)={0x0, 0x0, 0xfffffffffffffff6, 0x1000100010008, r0}) r3 = kqueue() kevent(r3, 0x0, 0xfffffffd, &(0x7f0000000040), 0x5, 0x0) (async) kevent(r3, 0x0, 0xfffffffd, &(0x7f0000000040), 0x5, 0x0) kevent(r3, &(0x7f0000000000), 0x3ff, 0x0, 0x8000800, 0x0) r4 = kqueue() kevent(r4, &(0x7f0000000040), 0x400, &(0x7f00000002c0), 0x5f, 0x0) r5 = kqueue() kevent(r5, &(0x7f00000000c0), 0x4000800, 0x0, 0x101, 0x0) socket$inet(0x2, 0x2, 0x0) (async) r6 = socket$inet(0x2, 0x2, 0x0) close(r6) socket$inet(0x2, 0x2, 0x0) (async) r7 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r7, 0x0, 0x200000000000c, &(0x7f0000000080)="eaef125c00000000", 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000480), 0x8002, 0x0) (async) r8 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000480), 0x8002, 0x0) r9 = socket$inet6(0x18, 0x4000, 0x4) getsockopt$SO_PEERCRED(r7, 0xffff, 0x1022, &(0x7f00000004c0)={0x0, 0x0}, 0xc) r11 = getegid() getsockopt$SO_PEERCRED(r7, 0xffff, 0x1022, &(0x7f0000000500)={0x0, 0x0}, 0xc) getgroups(0x6, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0]) getuid() (async) r14 = getuid() getgroups(0x2, &(0x7f0000000580)=[0xffffffffffffffff, 0x0]) getgroups(0x5, &(0x7f00000005c0)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0]) sendmsg$unix(r1, &(0x7f0000000700)={&(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000000440)=[{&(0x7f0000000340)="c7d48d32f344579ac7b9ba54530017a8a12f3bc4868b969fe8487bdb9e77fce845815969eb6a5b0947b224031e387940346394e855e816e5f4f7cb8b7e8e45b2d7e65866a2059d257759b378f03076e9bd6baaab07c96425bbf3f0edcfe131ca90c21464e9d35be7b3abf1f95aa49248704e57a5dfb7a60db5e29d2fc82548456dfce9665f0294e70c933144cec797b44779bca3bb50005cda2188ea089e6f6de22789be28bccfa53b1b74624f62c050eafc1a30f1616d366c8282b918d812a3751a606a8532ca9a13e14f2581ac6424891d1752ae839ebde5691567488dfcfc659a484c18", 0xe5}], 0x1, &(0x7f0000000600)=[@rights={0x18, 0xffff, 0x1, [r8, r9]}, @cred={0x20, 0xffff, 0x0, r0, r10, r11}, @cred={0x20, 0xffff, 0x0, r0, r12, r13}, @cred={0x20, 0xffff, 0x0, r0, r14, r15}, @cred={0x20, 0xffff, 0x0, r0, 0x0, r16}, @rights={0x10}, @rights={0x20, 0xffff, 0x1, [r4, r6, r4, r7]}], 0xc8, 0x40e}, 0xf) (async) sendmsg$unix(r1, &(0x7f0000000700)={&(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000000440)=[{&(0x7f0000000340)="c7d48d32f344579ac7b9ba54530017a8a12f3bc4868b969fe8487bdb9e77fce845815969eb6a5b0947b224031e387940346394e855e816e5f4f7cb8b7e8e45b2d7e65866a2059d257759b378f03076e9bd6baaab07c96425bbf3f0edcfe131ca90c21464e9d35be7b3abf1f95aa49248704e57a5dfb7a60db5e29d2fc82548456dfce9665f0294e70c933144cec797b44779bca3bb50005cda2188ea089e6f6de22789be28bccfa53b1b74624f62c050eafc1a30f1616d366c8282b918d812a3751a606a8532ca9a13e14f2581ac6424891d1752ae839ebde5691567488dfcfc659a484c18", 0xe5}], 0x1, &(0x7f0000000600)=[@rights={0x18, 0xffff, 0x1, [r8, r9]}, @cred={0x20, 0xffff, 0x0, r0, r10, r11}, @cred={0x20, 0xffff, 0x0, r0, r12, r13}, @cred={0x20, 0xffff, 0x0, r0, r14, r15}, @cred={0x20, 0xffff, 0x0, r0, 0x0, r16}, @rights={0x10}, @rights={0x20, 0xffff, 0x1, [r4, r6, r4, r7]}], 0xc8, 0x40e}, 0xf) setsockopt$inet_opts(r6, 0x0, 0x200000000000c, &(0x7f0000000000)="e600100000000000", 0x7) 772.316749ms ago: executing program 5 (id=31): r0 = socket$unix(0x1, 0x5, 0x0) shutdown(r0, 0x0) r1 = getpid() r2 = getpgid(r1) setpgid(r1, r2) setsockopt$sock_int(r0, 0xffff, 0x1008, &(0x7f0000000040)=0x2, 0x4) 662.906931ms ago: executing program 7 (id=35): pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x10000) r2 = socket(0x18, 0x1, 0x0) close(r2) r3 = socket(0x18, 0x1, 0x0) setsockopt(r3, 0x1000000029, 0x31, 0x0, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) r4 = socket(0x18, 0x2, 0x0) ioctl$FIONREAD(r4, 0xc0106924, &(0x7f00000001c0)) ioctl$FIONREAD(r4, 0xc1206951, &(0x7f0000000100)) getsockopt(r2, 0x29, 0x2e, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000040)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x8, 0x4, 0x0, 0x0, 0x28, 0x0, 0x2000, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0x0}, @empty, {[@timestamp={0x44, 0xc, 0xf0, 0x0, 0x0, [{[@multicast1]}]}]}}, @icmp=@mask_request={0x11, 0x0, 0x0, 0x3}}}}}) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/50, 0xfd9f}], 0x2f) close(r0) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="19", 0x3a4e1e905c56cdb7}], 0x1) 661.332648ms ago: executing program 5 (id=36): r0 = socket(0x2, 0x2, 0x0) setsockopt$sock_timeval(r0, 0xffff, 0x1006, &(0x7f0000000140)={0xfffffffffffffc01, 0x9}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xa7210e10bc3c9def) mknod(&(0x7f00000000c0)='./file1/file0\x00', 0x1ffa, 0xd95e) 661.028486ms ago: executing program 0 (id=37): r0 = socket(0x2, 0x4001, 0x0) syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) (async) syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) r1 = socket(0x18, 0x2, 0x0) setsockopt(r1, 0x1000000000029, 0xa, &(0x7f0000000040)="03000000", 0x4) getpeername$unix(r0, &(0x7f0000000080)=@file={0x0, ""/4101}, &(0x7f00000010c0)=0x1007) setsockopt(r1, 0x1000000000029, 0xc, &(0x7f0000000000), 0x14) (async) setsockopt(r1, 0x1000000000029, 0xc, &(0x7f0000000000), 0x14) getsockopt(r0, 0x6, 0x2c84, 0x0, 0x0) 660.752251ms ago: executing program 5 (id=38): r0 = socket(0x18, 0x2, 0x0) setsockopt(r0, 0x1000000000029, 0x9, &(0x7f0000000040)="03000000", 0x4) mquery(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7c118903850f19c0, 0x0, 0xffffffffffffffff, 0x0) setsockopt(r0, 0x1000000000029, 0xa, 0x0, 0x0) 659.727493ms ago: executing program 0 (id=39): r0 = socket(0x18, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) getsockname$inet(r0, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f00000000c0), 0x1c, 0x0}, 0x0) r1 = socket(0x800000018, 0x2, 0x0) bind$unix(r1, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendmsg$unix(r1, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x404) r2 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000040), 0x240, 0x0) r3 = socket(0x11, 0x3, 0x0) setsockopt$sock_int(r3, 0xffff, 0x1002, &(0x7f0000000180)=0x7, 0x4) getsockname$inet(r2, &(0x7f00000001c0), &(0x7f0000000200)=0xc) r4 = socket(0x11, 0x5, 0x20) getsockopt$sock_cred(r2, 0xffff, 0x1022, &(0x7f0000000000), &(0x7f0000000080)=0xc) sendto$unix(r4, &(0x7f00000000c0)="b1000504000004000000100003000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5fb003000000000000000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102d30ee8491ac673a17a617a86ba609ddfdb000000720fd18bfbb670c1f5a872c881ea6e2ec5890000eeff7f00361b4cc702fac5000028000000000000008abfba221554f4e0f668266c0900000008e3", 0xb1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x11000)=nil, 0x11000, 0x0, 0x2812, r2, 0x1) r5 = socket(0x2, 0x2, 0x0) r6 = semget$private(0x0, 0x1, 0x420) semop(r6, &(0x7f0000000240)=[{0x1, 0x8}, {0x2, 0x7}, {0x2, 0x400, 0x800}], 0x3) sendmsg$unix(r5, &(0x7f00000000c0)={&(0x7f0000000280)=@abs={0x1, 0x0, 0x0}, 0x8, 0x0, 0x0, &(0x7f0000000240)=ANY=[], 0x20, 0x2}, 0x1) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) socket(0x1, 0x3, 0x81) 608.432037ms ago: executing program 5 (id=41): sysctl$hw(&(0x7f00000000c0)={0x6, 0x9}, 0x2, 0x0, &(0x7f0000000080), 0x0, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) chmod(&(0x7f0000000140)='./file0\x00', 0x3ea) chdir(&(0x7f0000000100)='./file0\x00') mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) open$dir(&(0x7f0000000b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x0) rename(&(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000300)='./file0\x00') mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x10091, 0x0) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) mquery(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2, 0x0, 0xffffffffffffffff, 0x80000001) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000400001803c1, 0xd0) pwritev(r0, &(0x7f00000003c0)=[{&(0x7f0000000400)='3', 0x1}], 0x1, 0x3ffff) pipe(&(0x7f0000000000)) mkdirat(r0, &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x127) sysctl$hw(&(0x7f00000000c0)={0x6, 0x9}, 0x2, 0x0, &(0x7f0000000080), 0x0, 0x0) (async) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) (async) chmod(&(0x7f0000000140)='./file0\x00', 0x3ea) (async) chdir(&(0x7f0000000100)='./file0\x00') (async) mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) (async) open$dir(&(0x7f0000000b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x0) (async) rename(&(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) rename(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000300)='./file0\x00') (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) (async) openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x10091, 0x0) (async) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) (async) mquery(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2, 0x0, 0xffffffffffffffff, 0x80000001) (async) open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000400001803c1, 0xd0) (async) pwritev(r0, &(0x7f00000003c0)=[{&(0x7f0000000400)='3', 0x1}], 0x1, 0x3ffff) (async) pipe(&(0x7f0000000000)) (async) mkdirat(r0, &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x127) (async) 604.823884ms ago: executing program 0 (id=43): r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) fcntl$lock(r1, 0x9, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x300000003}) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x6f8, 0x0) r2 = socket(0x2, 0x4001, 0x0) r3 = fcntl$dupfd(r2, 0x2, r2) close(r3) listen(r3, 0xffffffff) fcntl$lock(0xffffffffffffffff, 0x9, &(0x7f0000000000)={0x3, 0x1, 0x410, 0x1}) ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x0, [{}, {0x3}, {0x0, 0x300}, {0x0, 0x4}, {}, {0x2}, {}, {0x3, 0x1}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {0x2}, {0x0, 0xb4}, {0x1}, {}, {}, {0x0, 0x4}, {0x2}, {0x2}, {0x3}, {0x0, 0x5}, {0x0, 0x1}, {0x0, 0x10000}, {0x1, 0x80000000}, {0x1, 0x6}]}) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r4 = socket(0x2, 0x4001, 0x0) r5 = dup(r4) r6 = fcntl$dupfd(r5, 0x2, 0xffffffffffffffff) close(r6) r7 = socket(0x2, 0x2, 0x0) connect$unix(r7, &(0x7f0000000000), 0x10) setsockopt$sock_int(r6, 0xffff, 0x1023, &(0x7f0000000040), 0xe0) fcntl$lock(r0, 0x9, &(0x7f0000000000)={0x2, 0x2, 0xffffffff00000000, 0x2fffffffc}) openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) (async) fcntl$lock(r1, 0x9, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x300000003}) (async) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x6f8, 0x0) (async) socket(0x2, 0x4001, 0x0) (async) fcntl$dupfd(r2, 0x2, r2) (async) close(r3) (async) listen(r3, 0xffffffff) (async) fcntl$lock(0xffffffffffffffff, 0x9, &(0x7f0000000000)={0x3, 0x1, 0x410, 0x1}) (async) ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x0, [{}, {0x3}, {0x0, 0x300}, {0x0, 0x4}, {}, {0x2}, {}, {0x3, 0x1}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {0x2}, {0x0, 0xb4}, {0x1}, {}, {}, {0x0, 0x4}, {0x2}, {0x2}, {0x3}, {0x0, 0x5}, {0x0, 0x1}, {0x0, 0x10000}, {0x1, 0x80000000}, {0x1, 0x6}]}) (async) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) socket(0x2, 0x4001, 0x0) (async) dup(r4) (async) fcntl$dupfd(r5, 0x2, 0xffffffffffffffff) (async) close(r6) (async) socket(0x2, 0x2, 0x0) (async) connect$unix(r7, &(0x7f0000000000), 0x10) (async) setsockopt$sock_int(r6, 0xffff, 0x1023, &(0x7f0000000040), 0xe0) (async) fcntl$lock(r0, 0x9, &(0x7f0000000000)={0x2, 0x2, 0xffffffff00000000, 0x2fffffffc}) (async) 525.352393ms ago: executing program 3 (id=44): sysctl$vm(&(0x7f00000000c0)={0x2, 0x8}, 0x2, &(0x7f0000000340)="592e128d", &(0x7f00000015c0)=0x4, 0x0, 0x0) sysctl$kern(&(0x7f00000000c0)={0x1, 0x2c}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0x37) r0 = open(&(0x7f0000000080)='./file0\x00', 0x18289, 0x190) flock(r0, 0x2) open(&(0x7f0000000000)='./file0\x00', 0x9cab835cfdc52675, 0x260) 521.604727ms ago: executing program 6 (id=45): fcntl$lock(0xffffffffffffffff, 0x9, &(0x7f0000000000)={0x3, 0x1, 0x410, 0x1}) ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x0, [{}, {0x3}, {0x0, 0x300}, {0x0, 0x5}, {}, {0x2}, {}, {0x3, 0x1}, {}, {0x3}, {0x1}, {}, {}, {}, {}, {}, {0x2}, {0x0, 0xb4}, {0x1}, {}, {}, {0x0, 0x4}, {0x2}, {0x2}, {0x3}, {0x0, 0x5}, {0x0, 0x1}, {0x0, 0x10000}, {0x1, 0x80000000}, {0x1, 0x6}]}) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x2, 0x4001, 0x0) ktrace(&(0x7f0000000000)='./file0\x00', 0x4, 0x40000814, 0x0) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000002c0)={0x10, 0x0, [{&(0x7f0000695000/0x3000)=nil, &(0x7f000051f000/0x4000)=nil}, {&(0x7f0000695000/0x2000)=nil, &(0x7f0000159000/0x2000)=nil}, {&(0x7f00005fd000/0x1000)=nil, &(0x7f0000690000/0x4000)=nil, 0xfffffffffffffffc}, {&(0x7f0000692000/0x3000)=nil, &(0x7f0000234000/0x2000)=nil}, {&(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x1000)=nil, 0x100000000000}, {&(0x7f00004f8000/0x2000)=nil, &(0x7f000068e000/0x12000)=nil}, {&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff2000/0x2000)=nil}, {&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000750000/0x4000)=nil}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f00004f6000/0x3000)=nil, 0x8}, {&(0x7f0000ffd000/0x3000)=nil, &(0x7f00004e6000/0x3000)=nil}, {&(0x7f00007f8000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil}, {&(0x7f00003f2000/0x2000)=nil, &(0x7f00005e4000/0x1000)=nil}, {&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil}, {&(0x7f0000ff1000/0x1000)=nil, &(0x7f0000ff3000/0x2000)=nil, 0x2}], './file0/file0\x00'}) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket(0x18, 0x1, 0x0) close(r1) r2 = socket(0x18, 0x2, 0x0) setsockopt(r2, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) connect$unix(r1, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) r3 = dup(r0) r4 = fcntl$dupfd(r3, 0x2, 0xffffffffffffffff) close(r4) accept$unix(r4, &(0x7f0000000180)=@abs, &(0x7f00000001c0)=0x8) dup2(r1, r3) r5 = socket(0x2, 0x2, 0x0) connect$unix(r5, &(0x7f0000000000), 0x10) sysctl$hw(&(0x7f00000000c0)={0x6, 0x9}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$kern(&(0x7f00000000c0)={0x1, 0x3d}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x74, 0x0, 0x37) setsockopt$sock_int(r4, 0xffff, 0x1023, &(0x7f0000000040), 0xe0) poll(0x0, 0x0, 0x1400) poll(&(0x7f0000000000), 0x35, 0x0) 520.9357ms ago: executing program 1 (id=46): writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000300)='#', 0x1}], 0x1) r0 = socket(0x18, 0x8000, 0x0) setsockopt(r0, 0x1000000000029, 0xa, &(0x7f0000000040)="8300e3ff", 0x4) fcntl$dupfd(0xffffffffffffffff, 0xa, r0) sysctl$kern(&(0x7f00000000c0)={0x1, 0x3e}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sysctl$vfs_nfs(&(0x7f00000000c0)={0xa, 0x2, 0x1}, 0x3, 0x0, 0x0, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="89000000ffff000001"], 0x9}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FIOASYNC(r3, 0x8004667d, &(0x7f0000000040)=0x5) shutdown(r3, 0x2) r4 = socket(0x2, 0x1, 0x0) setsockopt$sock_int(r4, 0xffff, 0x1004, &(0x7f0000000080)=0x1fc, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) connect$unix(r4, &(0x7f0000000000), 0x10) read(r4, &(0x7f00000000c0)=""/249, 0xf9) sendto$unix(r4, &(0x7f0000000280)="4f5cc16b", 0x4, 0x2, 0x0, 0x0) r5 = open(&(0x7f00000002c0)='./file0\x00', 0x200, 0x3a) mkdirat(r5, &(0x7f0000000340)='./file0\x00', 0x8) recvmsg(r2, &(0x7f0000000280)={0x0, 0x31, 0x0, 0x0, &(0x7f0000000180)=""/225, 0xe1}, 0x800) sendmsg(r1, &(0x7f0000000380)={0x0, 0x32c, 0x0, 0x0, &(0x7f0000000000), 0x90}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x3fb}) syz_open_pts() setsockopt(r2, 0x9, 0x4, &(0x7f00000003c0)="3779d8b0dbe8c861263e7caa05924b095f252e97dba903eedfae87e3e3e8e33c484a2b42609f5bca3c8ab241835cb7507cb21e4671c5007df83b228a98737f314d5d77c743ac957e2930cbe0e41761af76551f147b4d40102cc65d4110d8cd68beca8065131302871aff07cdb86644ccfbcd32723ad5cb1bdcc96f6e43ad57b3864d5e3a2a64ae7ecc172254127f806f8e0f8336a6e1a7c2b196e3f2128b974894c924fc113b67d0bd08611c4415dd15a0790c1be7e69a86980974c5268e27558590cae712452c15", 0xc8) sysctl$kern(&(0x7f0000000000)={0x1, 0x26}, 0x2, &(0x7f0000000100)="7940e824bb4c4a91fd00dbffa2ef457a19b400a9e33fb387cf1e3f74e8eabd8b6e40448aa45b332c732e7467e0bb14349d9e5c899cad580322a4bab137593fc5fb24c7b52775d769eb16f5cd0e4ffa1fa8ed1e730bfc61fbcc288e97d4afbb0077fd387b82a731635f9306d9e5cdaaf48981e2c9664a2a57878d40742fc6517fe7e1a5fae59918a0287cc0c2c298383fd30106c05620ca38d3ffc82007d8e1f94c42bdd0e570f2d47152dcd85b0534f1143057fbd95999140eda4e917865eecd079b4c103246e435a32426d33dcbabecc26b6d1dcc6e96a3ea26f5f2ad251f5d8f", &(0x7f0000000040)=0xe1, &(0x7f0000000080)="3cec3d046c2560b203", 0x9) 520.612479ms ago: executing program 1 (id=47): sysctl$vfs_ffs(&(0x7f0000000080)={0x4, 0x1, 0x2}, 0x3, 0x0, 0x0, 0x0, 0x0) unveil(&(0x7f0000006640)='./file0\x00', &(0x7f0000006680)='c\x00') open$dir(&(0x7f0000000000)='./file0\x00', 0x2, 0x8) mkdir(&(0x7f0000006840)='./file0\x00', 0xe81adf8edcce9ed5) open$dir(&(0x7f0000006880)='./file0\x00', 0x20000, 0x61) 478.493466ms ago: executing program 1 (id=48): ioctl$TIOCSETAW(0xffffffffffffffff, 0x802c7415, &(0x7f0000000040)={0x2ec8, 0xb, 0x5, 0x80000008, "d0c661999daca17d00", 0x941, 0x1000}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mkdir(&(0x7f0000000040)='./file2\x00', 0xc1) open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) rmdir(&(0x7f0000000040)='./file1\x00') (async) rmdir(&(0x7f0000000040)='./file1\x00') r0 = syz_open_pts() ioctl$TIOCSTOP(r0, 0x2000746f) sysctl$net_inet_ip(&(0x7f0000000000)={0x4, 0x18, 0x29, 0x4}, 0xc, 0x0, 0x0, 0x0, 0x0) (async) sysctl$net_inet_ip(&(0x7f0000000000)={0x4, 0x18, 0x29, 0x4}, 0xc, 0x0, 0x0, 0x0, 0x0) 461.327533ms ago: executing program 7 (id=49): ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f00000000c0)={0x2007, 0x7fffffff, 0x4, 0xf, "090e4de6d30aa692318c7e0002f9ffffff00"}) r0 = socket(0x2, 0x4001, 0x0) r1 = fcntl$dupfd(r0, 0x2, r0) close(r1) r2 = socket(0x11, 0x3, 0x0) sysctl$net_inet_tcp(&(0x7f0000000000)={0x4, 0x2, 0x6, 0x5}, 0x4, 0x0, 0x0, 0x0, 0x0) setsockopt(r2, 0x11, 0x2, &(0x7f0000000000), 0x4) listen(r1, 0xffffffff) setsockopt$sock_int(r1, 0xffff, 0x1023, &(0x7f0000000080), 0x4) ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000140)={0x5, 0x1, 0x3, 0x1, "81250ee9dd788f91ef6a9a7db50a9990e4292a1b", 0x1ff, 0xa}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x3e}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x10, 0x0, 0x37) ioctl$TIOCSETAW(0xffffffffffffffff, 0x802c7415, &(0x7f0000000000)={0x8001, 0xd98, 0x6, 0x6346, "a8014c2215996636c6ebea7df99448637f3c3a6e", 0x3, 0x8}) sysctl$kern(&(0x7f0000000180)={0x1, 0x4a}, 0x2, &(0x7f00000001c0)="e923156bc8671017818b485718634d9b14737b0cb6453e12e0b52dfbd8b963102ff60b070b1f80937e8773a03e65bde2fe8a70d2f219be9eebf6df75a954eef013469ad2b692fcb6308d92e1859a17fd12b9321e26515c48d76ec221bd8f3480d613733121b9d6dd1b2406ccc1c4435a3fada09891ff5949b4039b683f19515e27807ad5f49d4fd248024d98a9abebbafe48085d9bb3f16ccef99f9ed5abc73a2ba0baae97ada94789841efdf50d3c985436907da69335d942659f87750aa2bc238886250499fbf1520ced17f5929d8f9fd5525efca8b660590b288e91c7a724d2305d9a18321e704e", &(0x7f00000002c0)=0xe9, &(0x7f0000000300)="3d3eb11845e072f655d38576ab052a01b146d08a974a41557c7c2c9ec4376984f6dfdecff9fa1b11dbdf7f95605b3e8865e08959bb8714586a3edb87c88d1b4dc1201f08f3430c51b8ce7f0a32e48b322211944cd5542d4fe0bf805832ce7675ebbb12682cb419d8d5a144c178b190b8071b465b075935b734e5c4130d82b74698fd6871235ccb30e1f8997f79e6275cea61827680f397fbc5ae0477193776d6", 0xa0) setitimer(0x0, 0x0, 0xffffffffffffffff) sysctl$hw(&(0x7f0000000040)={0x7, 0x6}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_emit_ethernet(0x0, 0x0) sysctl$kern(&(0x7f0000000040)={0x1, 0x3f}, 0x4, &(0x7f0000000040), 0x0, 0x0, 0xfffffffffffffda3) openat$tty(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) 451.975979ms ago: executing program 0 (id=50): r0 = semget$private(0x0, 0x4, 0x160) semctl$GETZCNT(r0, 0x4, 0x7, &(0x7f0000000000)=""/248) r1 = geteuid() r2 = getegid() r3 = getegid() semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000100)={{0x10000, r1, r2, 0xffffffffffffffff, r3, 0x100, 0xfff9}, 0x1, 0x1, 0x6}) setgid(r2) r4 = getgid() setregid(r3, r4) r5 = semget(0x0, 0x1, 0x80) semctl$IPC_SET(r5, 0x0, 0x1, &(0x7f0000000180)={{0x8, r1, r3, r1, r2, 0x1c8, 0x9}, 0x8000000000000001, 0x3, 0x401}) setregid(r2, r4) semop(r0, &(0x7f0000000200)=[{0x0, 0x3}, {0x2, 0x9, 0x1800}], 0x2) semctl$GETPID(r0, 0x0, 0x4, &(0x7f0000000240)=""/15) r6 = shmget(0x0, 0x1000, 0x11, &(0x7f0000ffd000/0x1000)=nil) r7 = fcntl$getown(0xffffffffffffffff, 0x5) r8 = getpgrp() shmctl$IPC_SET(r6, 0x1, &(0x7f0000000280)={{0xf, r1, r3, 0xffffffffffffffff, r4, 0x1, 0x9}, 0x2400, 0x2, r7, r8, 0xfffffffffffffffc, 0x1, 0x2}) r9 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000300), 0x200, 0x0) ioctl$WSKBDIO_SETMAP(r9, 0x8010570e, &(0x7f0000000380)={0x6, &(0x7f0000000340)=[{0xb000, 0xa1, 0x4, 0x7, 0x1}, {0x80, 0x1, 0x9, 0x3}, {0xb099, 0x200, 0x1, 0x4, 0x2114}, {0x0, 0x6, 0x5, 0xc, 0x3}, {0x9, 0x8000, 0x1000, 0xf}, {0x7, 0x81, 0x7, 0x4, 0x7}]}) getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, 0x0, 0x0}, &(0x7f0000000400)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000440)={0x0, 0x0, 0x0}, &(0x7f0000000480)=0xc) shmctl$IPC_SET(r6, 0x1, &(0x7f00000004c0)={{0x4, r10, r12, r1, r2, 0x128, 0x7391}, 0x1, 0x5, r8, r7, 0x8, 0x6, 0xa}) sysctl$kern(&(0x7f0000000540)={0x1, 0x28}, 0x2, &(0x7f0000000580)="149e7d2f6913c481bb4bea6abc06a5a4d86396da7dd8ee6bff943390de6de2037091c5c59519ebdf4538c01e6912a38524826d7e5722b49efc94bbb0cffe0e2742fe4841784f5a191c30f5312c815eb92d65cf6b9a5e1b59af6e8062e3915cc654e07da0eaf93ba8db4aad016e1e7a979a89455a12d264457fcb100b609bd4b9d2750f393535e162c5aefdb7122cc4a22646fb7e9fe95d0bf43c685f593ee4204dfad7ae2542f0a679edb24b70fd0bb07ba2d6f19f42d8a4a4", &(0x7f0000000640)=0xb9, &(0x7f0000000680)="aa0a44207067211b612fd9ac2c1d30e001721c845d5a7fca992446e442a9407d043fc31bd93188875d9714bb11e315d993545111aa2b9a566e94db10f349b1728add94efa85e06c060b9133362193aafa98deb68fdb19864fe268fbeeffacb", 0x5f) getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000740)={0x0, 0x0}, &(0x7f0000000780)=0xc) chown(&(0x7f0000000700)='./file0\x00', r13, r11) r14 = geteuid() lchown(&(0x7f00000007c0)='./file0\x00', r14, r2) r15 = shmget$private(0x0, 0x3000, 0x118, &(0x7f0000ffa000/0x3000)=nil) shmctl$SHM_UNLOCK(r15, 0x4) 451.74192ms ago: executing program 2 (id=51): setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x200000000000c, &(0x7f0000000080)="ea", 0x1) sysctl$hw(&(0x7f00000000c0)={0x6, 0x6}, 0x2, 0x0, 0x0, 0x0, 0x0) (async) sysctl$hw(&(0x7f00000000c0)={0x6, 0x6}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket$inet(0x2, 0x4000, 0x0) getsockopt$inet_opts(r0, 0x0, 0x1, &(0x7f0000000000)=""/91, &(0x7f0000000100)=0x5b) (async) getsockopt$inet_opts(r0, 0x0, 0x1, &(0x7f0000000000)=""/91, &(0x7f0000000100)=0x5b) sysctl$kern(&(0x7f00000000c0)={0x1, 0x58}, 0x2, &(0x7f0000000100), &(0x7f0000000080), 0x0, 0x0) syz_emit_ethernet(0x22, &(0x7f0000000240)=ANY=[@ANYBLOB="993a0600000000000000f1f8080000000090787f00000100007400"]) 450.536774ms ago: executing program 3 (id=52): msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x5, 0x0, 0x0, 0x0, 0x0, 0x172, 0x3}, 0x80000002000007, 0x7, 0xffffffffffffffff, 0x0, 0x2, 0x400000000009, 0x800}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0x37) r0 = accept$inet6(0xffffffffffffff9c, &(0x7f0000000000), &(0x7f0000000040)=0xc) r1 = getuid() syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaa8aaaaaaaa86dd6089060000000000000000000000000000000000000000aaffff"]) getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000140)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) setsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f00000001c0)={0xffffffffffffffff, r1, r2}, 0xc) 450.033024ms ago: executing program 7 (id=53): clock_getres(0x4, 0x0) r0 = shmget$private(0x0, 0x800000, 0x95a999646a72d594, &(0x7f0000005000/0x800000)=nil) r1 = shmat(r0, &(0x7f0000001000/0x3000)=nil, 0x2000) fcntl$lock(0xffffffffffffffff, 0x9, &(0x7f00000000c0)={0x0, 0x0, 0xfffffffffffffffe, 0x5}) r2 = socket(0x18, 0x2, 0x0) connect$unix(r2, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) getpeername$unix(r2, 0x0, &(0x7f0000000180)=0xfe) r3 = kqueue() kevent(r3, &(0x7f0000000000), 0x203ff, 0x0, 0x8000800, 0x0) shmctl$IPC_RMID(r0, 0x0) shmdt(r1) 448.630316ms ago: executing program 0 (id=54): r0 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$WSDISPLAYIO_LDFONT(r0, 0x8058574d, &(0x7f0000000040)={'./file0\x00', 0xffffffff, 0x2, 0x401, 0x1, 0x400, 0x9, 0x1, 0x1, 0x2, 0x9, 0x80}) (async) ioctl$WSDISPLAYIO_GBURNER(r0, 0x400c5752, &(0x7f00000000c0)) (async) r1 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) ioctl$VNDIOCSET(r1, 0xc0384600, &(0x7f00000001c0)={&(0x7f0000000140)='./file0\x00', 0x3, &(0x7f0000000180)='./file0\x00', 0x8}) (async, rerun: 64) ioctl$WSDISPLAYIO_SBURNER(r0, 0x800c5751, &(0x7f0000000200)={0x1cac, 0x7}) (async, rerun: 64) syz_emit_ethernet(0x3c, &(0x7f0000000240)={@empty, @local, [{[], {0x8100, 0x7, 0x1, 0x3}}], {@generic={0x6558, "1898608519c4541a3d3eadea5975cbca75dee5c449502af73034364753818e8e388d39b9729022ac12ba"}}}) (async) r2 = accept$unix(0xffffffffffffff9c, 0x0, &(0x7f0000000280)) connect$unix(r2, &(0x7f00000002c0)=@file={0x1, './file0\x00'}, 0xa) (async) r3 = dup(0xffffffffffffff9c) getsockopt$SO_PEERCRED(r3, 0xffff, 0x1022, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0xc) lchown(&(0x7f0000000300)='./file0\x00', r4, 0xffffffffffffffff) setsockopt$inet_opts(r3, 0x0, 0x0, &(0x7f0000000380)="ddf08811aae1ba23edea4c4e994830e4d87b08a96c89c633d56aec7bd763ebbf00e742c31f29004d6353e34261a8d7213aa71f7f8580ec8d2e88fe5cbfce24ee3dde72a1393f264a26858032a7abe7eaf8e4df28aad3f694ca9dff06b90beaae064540c8a3e0414fc960b925473872aedc334d4d1993cd66a6549239ca932d076ea591ef315bec7385b345ccf7242c06fb90610f7aab58921b504a4bf42362781ec610b6b6f7368cde21a0faf4f246faf3ef5d07ff6a5d4eaa033786f3959ad12a3d6c23f1cdcbebafa8bea2e9c63c31f58ae67cffe15defdc31b0bbab40fa02bdb28745c34f0b2549fefc50b10e7315", 0xf0) (async) recvmmsg(r0, &(0x7f0000000840)={&(0x7f0000000800)={&(0x7f0000000480)=@un=@file={0x0, ""/516}, 0x206, &(0x7f0000000740)=[{&(0x7f00000006c0)=""/103, 0x67}], 0x1, &(0x7f0000000780)=""/88, 0x58}, 0x9}, 0x10, 0x0, &(0x7f0000000880)={0x81, 0x8001}) ioctl$WSMUXIO_INJECTEVENT(r3, 0x80185760, &(0x7f00000008c0)={0xf, 0xffffffc5, {0xc33, 0x7}}) (async) ioctl$WSDISPLAYIO_DELFONT(r3, 0x8058574f, &(0x7f0000000900)={'./file0\x00', 0x5, 0x1000, 0xf, 0x1, 0x8, 0x4, 0x6, 0x2, 0x1, 0x9, 0xefba}) ioctl$FIOSETOWN(r0, 0x8004667c, &(0x7f0000000980)=0x9) preadv(r2, &(0x7f0000001b80)=[{&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/18, 0x12}, {&(0x7f0000001a00)=""/243, 0xf3}, {&(0x7f0000001b00)=""/66, 0x42}], 0x4, 0xfffffffffffffff8) (async) ioctl$VT_GETSTATE(r0, 0x40067664, &(0x7f0000001bc0)) (async, rerun: 32) r6 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000001c00), 0x80, 0x0) (rerun: 32) ioctl$VT_WAITACTIVE(r6, 0x20007606, &(0x7f0000001c40)=0xc7) ioctl$KDMKTONE(r3, 0x20004b08, &(0x7f0000001c80)=0x61d) (async) dup(r2) (async, rerun: 64) ioctl$WSKBDIO_GETMODE(r2, 0x40045714, &(0x7f0000001cc0)) (async, rerun: 64) r7 = dup(r2) ioctl$SPKRTUNE(r7, 0x20005302, &(0x7f0000001d00)={0x3, 0xee87}) (async) open(&(0x7f0000001d40)='./file0\x00', 0x200, 0x40) (async) getsockname(r3, &(0x7f0000001d80)=@un=@abs, &(0x7f0000001dc0)=0x8) ftruncate(r0, 0x9) setgroups(0x1, &(0x7f0000001e00)=[r5]) 228.356373ms ago: executing program 2 (id=55): sysctl$kern(&(0x7f0000000000)={0xa}, 0x7, &(0x7f0000000080), 0x0, 0x0, 0x24) sysctl$kern(&(0x7f0000000000)={0xa}, 0x7, &(0x7f0000000080), 0x0, 0x0, 0x24) (async) 225.443682ms ago: executing program 5 (id=56): setrlimit(0x8, &(0x7f0000000980)={0x42, 0x62}) r0 = syz_open_pts() close(r0) r1 = syz_open_pts() ioctl$TIOCSETAW(r1, 0x802c7415, &(0x7f00000001c0)={0x2930c6bd, 0x3ff, 0x97, 0xd6f, "8b03007d693ecfd3f82e19c3a306d3c900", 0x15, 0x1}) setrlimit(0x8, &(0x7f0000000080)={0xe, 0x51}) r2 = syz_open_pts() close(r2) r3 = syz_open_pts() ioctl$FIOASYNC(r2, 0x80047469, &(0x7f0000000040)=0xfffffffc) readv(r3, &(0x7f0000000680)=[{&(0x7f0000000880)=""/241, 0xf1}], 0x1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000740)="f8f9e172699db815f2fb2d8efea057e1b056ef1641e3daccc34bee07e014b480136b457a639d27a3bd640d57dcc52fb78e4699abfdbc16acbefac3d0cca51206b5c60d6691c5a7fdb9e3c1fd49dfa7c3a22f1fb830c1ab96fbeb1a2a788b32e39f481a9e2b1544b7a1e000ee692e1fc9be85b340666e9b", 0x77}, {&(0x7f0000000140)="df6b74d18e2c9918e91a83aa6bf45f4abe6aace104409601f57d2d7559cfbb3cf26e672ad531479f84c0faf9a2189cfb4672ac7c0692fd1d6392cc11671ee6b24bd101d6dc4fe98ec47aa314cd81bae30d8626bed4ba06bab9f7456b6fc7f2cef8592f0334c22a5279b03d05a80d5fc0fc856e71ee62eb5f3bfaea", 0x7b}], 0x2) r4 = socket(0x11, 0x3, 0x1) r5 = open(&(0x7f0000000080)='./file0\x00', 0x18289, 0x112) flock(r5, 0x2) open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) setsockopt$sock_int(r4, 0xffff, 0x8, 0x0, 0x0) writev(r0, &(0x7f0000000500)=[{&(0x7f00000019c0)="52880d3e3db033faa0f56b84da8e6d43644edd776de4534a75ba5c3ca0d05f7b677bf3879fc286cdcfaa2ccb0e68b1c297bbbcfa2d13e1980673e5e818ed11652adffbc1dea8d84ba3e79b9e8b566539f7b642af15dca62129a6480f1539cf4ba657161987efd986b890ed2d8f1e5e2aa96a6ab917cc4cf56360b0850b170ab72b6f2e019a7ae142d376d17c2f98b78eda686c3d3052dac79d2f079cf5142a85b300fbf5dc", 0xa5}], 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xa7210e10bc3c9def) mknod(&(0x7f00000000c0)='./file1/file0\x00', 0x1ffa, 0xd95e) 191.908784ms ago: executing program 1 (id=57): writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000080)="76e5eac907f9ccf7a251ceddcec7d6aa45cffe2c63a56077123a276d3ba4e9d17eb3eb5db12a3783a8e0620d357de1fe04fa9465b5bd1286e9624dec06a00c222f", 0x41}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) sysctl$vfs_nfs(&(0x7f00000000c0)={0xa, 0x2, 0x3}, 0x3, 0x0, 0x0, 0x0, 0x0) sysctl$kern(&(0x7f00000000c0)={0x1, 0x33}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x3414, 0x0, 0x37) sendto$inet6(0xffffffffffffff9c, &(0x7f0000000200)="6c615dc1c6fe8eab743cf087b694d524d0fd309dfbeaed880720baba77d84e", 0x1f, 0x409, &(0x7f0000000240)={0x18, 0x2, 0x688, 0xf}, 0xc) unveil(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='c\x00') mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) munmap(&(0x7f00002a7000/0x1000)=nil, 0x1000) sysctl$kern(&(0x7f0000000000)={0x1, 0x3f}, 0x2, &(0x7f0000000140)="53a9e0ef21a8b27d26e50b4fa6900fe1c6e00f7e53716c192e6040b722c0f55122eed1a922c094c624498b8327d88a473f95738cbee141da89d5dbd0aa1a86bfaaba67195463f2fd2b40861e378a27d91a062511f6c3e999", &(0x7f0000000040)=0x58, &(0x7f00000001c0)="b979f75347b096dc47646a93e7dc5813f9179e6174", 0x15) r0 = socket(0x800000018, 0x1, 0x0) setsockopt(r0, 0x1000000000029, 0x1b, &(0x7f0000000340), 0x0) unveil(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000300)='W\x00') mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) unveil(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='c\x00') 190.514189ms ago: executing program 0 (id=58): mkdirat(0xffffffffffffff9c, &(0x7f00000011c0)='./file0\x00', 0x14e) unveil(&(0x7f0000000480)='./file0/file1\x00', &(0x7f00000004c0)='c\x00') r0 = socket(0x18, 0x1, 0x0) getsockopt$sock_cred(r0, 0xffff, 0x1024, &(0x7f0000000140)={0x0}, &(0x7f0000000280)=0xc) sysctl$kern(&(0x7f0000000140)={0x1, 0x21}, 0x2, 0x0, 0x0, 0x0, 0x0) getsockopt$SO_PEERCRED(r0, 0xffff, 0x1022, &(0x7f0000000000), 0xc) ktrace(0x0, 0x5, 0x128, r1) unveil(&(0x7f00000000c0)='.\x00', &(0x7f0000000100)='r\x00') writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000080)="76e5eac907f9ccf7a251ceddcec7d6aa45cffe2c63a56077123a276d3ba4e9d17eb3eb5db12a3783a8e0620d357de1fe04fa9465b5bd1286e9624dec06a00c222f", 0x41}], 0x1) mprotect(&(0x7f0000601000/0x2000)=nil, 0x2000, 0x4) unveil(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='c\x00') 179.830014ms ago: executing program 7 (id=59): r0 = open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x101) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000440)="e9", 0x1}], 0x1, 0x3effd) syz_emit_ethernet(0x36, &(0x7f0000000080)=ANY=[]) open(&(0x7f0000000140)='./file0\x00', 0x78e, 0xd9) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x61}) syz_open_pts() socket(0x18, 0x2, 0x0) ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x0, [{0x0, 0xd30d}, {0x0, 0x79}, {0x1, 0x300}, {0x0, 0x5}, {0x3, 0x9}, {0x2}, {0x0, 0xfa}, {0x3, 0x5}, {}, {0x2}, {0x1, 0x81}, {0x3}, {0x0, 0xa17}, {}, {}, {}, {0x1}, {}, {}, {0x0, 0x4000401}, {0x0, 0x2}, {0x0, 0x4}, {0x2}, {0x1, 0xffffffff}, {0x3, 0x2}, {0x0, 0x5}, {0x0, 0x2}, {0x0, 0x2}, {}, {0x1, 0x6}, {}, {0x3, 0x280000}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) select(0x40, &(0x7f0000000040)={0x4, 0x102, 0x3, 0x7, 0x7fb, 0x8, 0x2, 0x20000000002}, 0x0, &(0x7f0000000100)={0x96, 0x400000001d7435a0, 0x101, 0x8001, 0x9, 0x5ed3, 0x200a, 0x8}, 0x0) poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x20}], 0x1, 0x7fff) execve(0x0, 0x0, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r1 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000240)={{0x4, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x7}, 0x5, 0xfffc, 0x0, 0x0, 0x1, 0x0, 0x800000800000000}) r2 = shmget$private(0x0, 0x4000, 0x4, &(0x7f0000635000/0x4000)=nil) shmat(r2, &(0x7f0000001000/0x3000)=nil, 0x0) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x62}) r3 = syz_open_pts() close(r3) r4 = syz_open_pts() ioctl$TIOCSETA(r4, 0x802c7414, &(0x7f0000000080)={0x5, 0xe000000, 0x10db, 0x0, "3749c7a40dea0000170000000000000000ff0100", 0x2, 0x3}) readv(r4, &(0x7f0000000200)=[{&(0x7f0000000380)=""/227, 0xe3}, {&(0x7f00000002c0)=""/48, 0x30}], 0x2) ioctl$TIOCSETAF(r3, 0x802c7416, &(0x7f0000000040)={0x4, 0x3, 0x7ff, 0x8, "3bc9717023503d7f20488f999dff16252a29e143", 0xd29, 0x7}) writev(r3, &(0x7f0000000700)=[{&(0x7f0000000000)="b962", 0x2}], 0x1) munmap(&(0x7f0000000000/0xf000)=nil, 0xf000) unveil(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='c\x00') symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') unveil(&(0x7f00000000c0)='./file0/file0/..\x00', &(0x7f0000000080)='c\x00') open$dir(&(0x7f0000000180)='./file0/file0/..\x00', 0x8000, 0x120) 177.757608ms ago: executing program 4 (id=60): r0 = socket(0x18, 0x2, 0x0) setsockopt(r0, 0x1000000000029, 0x9, &(0x7f0000000040)="03000000", 0x4) setsockopt(r0, 0x1000000000029, 0xa, &(0x7f0000000140), 0x4) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x186) r2 = syz_open_pts() ioctl$TIOCSETAW(r2, 0x802c7415, &(0x7f0000000180)={0x9, 0xffff, 0x6, 0x1, "b0dc502245b6fa8e097a5d2ce978080dc2b11617", 0xffffffff, 0x9}) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4, 0x5010, r1, 0xffffffffffffffff) syz_open_pts() r3 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) r4 = socket(0x2, 0x2, 0x0) ioctl$FIONREAD(r4, 0xc0207534, &(0x7f0000000100)) mmap(&(0x7f000051c000/0x1000)=nil, 0x1000, 0x2, 0x11, r3, 0x0) ftruncate(r3, 0x8531) mmap(&(0x7f0000179000/0x4000)=nil, 0x4000, 0x4, 0x12, r3, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) msync(&(0x7f000030d000/0x3000)=nil, 0x3000, 0x2) 176.536459ms ago: executing program 3 (id=61): r0 = syz_open_pts() socket(0x18, 0x400000002, 0x6) (async) r1 = socket(0x18, 0x400000002, 0x6) setsockopt(r1, 0x9, 0x5, &(0x7f0000000180)="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", 0x1000) r2 = socket(0x11, 0x3, 0x0) sendto$unix(r2, &(0x7f00000000c0)="b1000504000004000000080003000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5fb003000000000000000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102d30ee8491ac673a17a617a86ba609ddfdb000000720fd18bfbb670c1f5a872c881ea6e2ec5890000eeff7f00361b4cc702fac5000028000000000000008abfba221554f4e0f668266c0900000008e3", 0xb1, 0x0, 0x0, 0x0) getsockopt(r1, 0x29, 0x3b, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000000)="4046933a47a69c415f060296fec47f59af4c9ac461b2f64e5a071f1f4ef88e6ed19af27611d9f2d550e3a2ad79985131b5e053416136ea636a90a28aaa4058f04689213fada1c317", 0x48, 0x7, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0xa) ioctl$TIOCGTSTAMP(r0, 0x4010745b, &(0x7f0000002440)) (async) ioctl$TIOCGTSTAMP(r0, 0x4010745b, &(0x7f0000002440)) 175.653541ms ago: executing program 2 (id=62): sysctl$kern(&(0x7f0000000040)={0x1, 0x35}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sysctl$net_inet_divert(&(0x7f0000000040)={0x4, 0x2, 0x102, 0x3}, 0x4, &(0x7f0000000280), 0x0, 0x0, 0x0) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x11}, 0x4, &(0x7f00000002c0), 0x0, 0x0, 0x0) sysctl$net_inet_tcp(&(0x7f0000000000)={0x4, 0x2, 0x6, 0x11}, 0x4, &(0x7f0000000080)="0e1cdad9bf485df4d8822c87ddbd047f3bb9e6f5126c800ba90dd1dd8473b4c58b2907941c1e1e0b2c0316139176e98bcc9cd6cabedb78a374e156847000854ebc15d5a8c1db4a4180fdc4093c0333f05d316596897132c1a762d782b64720bda4fd374b40f906dae47380c686fc1d815e5e419822b71582e6ca404b7e367d66169c925278583c5af351359aaee4e81731019a052d64e206679e3b50724942938f2bafb60512aa42b3", &(0x7f0000000140)=0xa9, &(0x7f0000000180)="7abd308ca91e27e5656d1f1729f50ea158467955d12bd5fe125bd1360c757521ae6d7647d086ab", 0x27) 121.495889ms ago: executing program 3 (id=63): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) msync(&(0x7f0000475000/0x2000)=nil, 0x2000, 0x5) r0 = socket(0x2, 0x400000000002, 0x0) setsockopt(r0, 0x0, 0x21, &(0x7f0000000080)="c5f5d915", 0x4) (async) open(&(0x7f0000000000)='./file0\x00', 0x800, 0x4ebfac6bbaf7949) execve(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) (async) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x80000000002) 120.998902ms ago: executing program 2 (id=64): kevent(0xffffffffffffffff, &(0x7f0000000080)=[{{}, 0xffffffffffffffff, 0x43, 0xfffff, 0x0, 0x40}], 0x7, 0x0, 0x9, 0x0) sendto(0xffffffffffffffff, 0x0, 0x58, 0x0, &(0x7f0000000080)=@in6={0x18, 0x3, 0x0, 0x1ff}, 0xc) r0 = socket(0x800000018, 0x1, 0x0) bind$unix(r0, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) setrlimit(0x8, &(0x7f0000000040)={0x7, 0x50}) r2 = syz_open_pts() msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x0, 0x0, 0x0, 0x0, 0x0, 0xc0, 0x200}, 0x3, 0xffff, 0x0, 0x0, 0x7ffffffffffe0000, 0x9, 0x5, 0x9}) sendto$unix(0xffffffffffffff9c, &(0x7f0000000000)="b1000504600000000000000007000000331c13fecea10500fef9e906c72fd3357ae320b37b673039d2d236073705ae04be38164991f7accf5f882b297be1aa5b236deb51e2f0ac3ebbc257699a5f139b672f4d335d223e7d029d6ba8af630037282102000000720f70c1f5a472c881ea6e69e0bb76d907c400000200361b1257aea8c5000020020000000000008abfba09", 0x91, 0x404, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r3 = socket(0x11, 0x3, 0x0) sysctl$hw(&(0x7f0000000000)={0x6, 0x2}, 0x2, &(0x7f0000000040), 0x0, 0x0, 0x0) sendto$unix(r3, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x0, 0x0, 0x0) sysctl$kern(&(0x7f0000000140)={0x1, 0x56}, 0x2, &(0x7f0000002480), 0x0, 0x0, 0x0) close(r2) r4 = semget$private(0x0, 0x4, 0x25c) semop(r4, 0xfffffffffffffffe, 0x0) ioctl$WSMOUSEIO_GCALIBCOORDS(r1, 0x41205725, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}) r5 = syz_open_pts() ioctl$TIOCSETAW(r2, 0x802c7415, &(0x7f0000000000)={0x29f56361, 0x7fffffff, 0x3, 0xfffffff8, "098269e3120104787d900a56d864d3c3a3f4d3c9", 0x26}) writev(r2, &(0x7f0000002200)=[{&(0x7f0000000200)="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", 0x685}], 0x1) r6 = socket$inet(0x2, 0x4002, 0x0) setsockopt$inet_opts(r6, 0x0, 0x1, &(0x7f00000000c0)="89144c0129ea94f77ea66ed006e3bc58e261c99a", 0x14) setsockopt$inet_opts(r6, 0x0, 0x1, &(0x7f0000000000), 0x0) write(r6, 0x0, 0x0) r7 = getuid() r8 = getgid() fchown(0xffffffffffffffff, r7, r8) r9 = getgid() sendmsg$unix(r1, &(0x7f0000001040)={&(0x7f0000000100)=@abs={0x1, 0x0, 0x0}, 0x8, &(0x7f0000000d40)=[{&(0x7f0000000a00)="a48c88b63b6811c142df97ace92b60b27e9d4e53e927c86b5496550188804de29a3368995f9de43aa15e9bed825bc8ed97eeca1c62d744f2ead49832b191b7a1be59e2b93d7bf7e73d8ebf4394249512b0e556324f720999affb98c7ca8126018d932ab9498573c329d3b2b78e769e77a0bb4193f9781d6c093b0a10f97c93ebde84d6d9ecacda1fed88d69a1c173d5b833a78c1c470a36c7cd2d03490a08cd0131712e4709da37b2dc7b6f6e9637cb1a1daafe5a5efafdaa7011bec5fbef5b4b65c0ba3d7fa534e128a72ed01c2624839ffa3d67ad19a20992e6146dcd483402ead38bf5949aeacc3fcb027151fc937edacb1c09e5bd2b63e7a3626eda0", 0xfe}, {&(0x7f0000000180)="54e7fc39a8aac3535dbd65dbe1f01985963e0fc4225a58938192c9610c31310469901456525d46d6e2abc7296a8eacd945b329", 0x33}, {&(0x7f0000000b00)="4ec899fdbf0d3717988aefcc3b8a42ec25bf0742d4b584c5b291ece75fa7b1a30696a1ee4f2d80b16e640e148f1530ecac8f04e9d0b1d929a3a9cb17b7b38515e490eb27", 0x44}, {&(0x7f0000000b80)="3f0e61b26781ad4e07640e12adaa0ac29cab3b60408e6cc499f3c7d3cf77d6a041322cc638f1ee5d4ceb8cd97551207da6a7f5a356390258dec75b7f13a5d0a0c979517d932a587b66956e3208a78060e6be62e5774513ce51a4685d6bbb37869a2a38f4a2cedaad8dc6dcf02aa7ec5c4ccb38fcd66a560ce7612d10166d07a67e02aceddc52aede8ab32ef1bd84bcc291875aa8b89ac695e355367d7a905df430ad82723a", 0xa5}, {&(0x7f0000000c40)="c7f724634e8faa52a17d4c6b1f975a478240a936c5494ee5237d91e9368a2dbde73abf029bb87804074b37d956e34399d165c0b72d1315bd83693f1aa222c7b973e6e62e4ed77a8d332f0cb262feb7de9c4043e5067150ffbcc3d61165775498c0b7422bd9aa52b893d6fd2bcfc959f240f139a6455e3cc2635b041e1a7e0963abd6828617639b6bb2f21782f98864f8f7fce725a140d3477f333a205ca0bf751b089b0d37a21c6f17693493108ca376e870d179430123144bc44338be64f2eeee3f2d3ef788d275e21e64b0b6673e7e190999ad25ba48792c60e24ae04608f9871429", 0xe3}], 0x5, &(0x7f00000008c0)=ANY=[@ANYBLOB="2000000000000000ffff000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002800000000000000ffff000001000000", @ANYRES32=r2, @ANYRES32=r5, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r3, @ANYBLOB="000000002000000000000000ffff000001000000", @ANYRES32=0xffffffffffffff9c, @ANYRES32=r6, @ANYRES32=r1, @ANYBLOB="000000002000000000000000ffff000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001800000000000000ffff000001000000", @ANYRES32, @ANYBLOB="000000002000000000000000ffff000001000000", @ANYRES32=r1, @ANYRES32=r1, @ANYRESOCT=0x0, @ANYBLOB="000000002000000000000000ffff000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002000000000000000ffff000000000000", @ANYRES32=0x0, @ANYRES32=r7, @ANYRES32=r9, @ANYBLOB="eadfffff"], 0x100, 0x4}, 0x9) 120.562829ms ago: executing program 2 (id=65): r0 = socket(0x2, 0x2, 0x0) ioctl$FIOASYNC(0xffffffffffffffff, 0x80047460, &(0x7f00000000c0)=0xc0a) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1001, &(0x7f0000000100)=0x20000, 0x4) syz_emit_ethernet(0x138, &(0x7f0000000300)=ANY=[@ANYBLOB="ff031defa8ed334d41e14a7746bfd11bcba21c871aff1c0c0c6249a10a5b2b253885860aa1f9bdd90791ef6fd07af9a97e9664fabbc20fcc58605cd64479081149d56657d4df3d0c251675c48e4a828d1b9dc5dbf08342caf9506bf71e0e8e6957d686a02882c053e680e8108fe4cf430cff07afc9a916e8a85a5ba278e4df39ef6c66b9bef07ab5e05b6400e2eb4a9d7474b301423575ff405f3cfb06b3a9b709588f26e46fb39002100397c7532d6768bfb1c9141a7970026b1f2da061d5d66cf1bb750e", @ANYRESHEX=r1]) write(0xffffffffffffffff, &(0x7f00000000c0)="c3", 0xffffffed) syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) writev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000000)="c886b4d3e0", 0x5}], 0x1) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) getrlimit(0x2, 0x0) r2 = socket(0x2, 0x2, 0x0) bind(r2, &(0x7f0000000000), 0x10) connect$unix(r2, &(0x7f0000000000), 0x10) r3 = socket(0x2, 0x2, 0x0) connect$unix(r3, &(0x7f0000000000), 0x10) write(r3, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r4 = socket(0x800000018, 0x1, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000180)=ANY=[@ANYRESOCT=r4]) bind$unix(r4, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) connect$unix(r0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0xa) setsockopt$inet_opts(r0, 0x0, 0x1, &(0x7f00000000c0)="9876d692a3ef9c7ab923a2f0", 0xc) r5 = socket(0x2, 0x1, 0x0) r6 = socket$inet6(0x18, 0x1, 0x0) getsockopt(r6, 0x6, 0x1, 0x0, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$FIONREAD(r5, 0x8014695a, &(0x7f0000000100)) write(r0, &(0x7f0000000240)="14bdfa5d1d34e2fecb284a6498307dcda9aec43050036123339a346f737850551408753f95b7688ad4c4e1dd5489e7bafc58d3e5823757ae8b630719ef187ccad995f13dbe19a6dd4e6902bd8297b0799b426aabe9fad9db6996571c6d9f8bb5d542c2148aa42be940970fe88d34d8f99afe7e7820237400000000008000000100"/138, 0xfc7e) 114.505049ms ago: executing program 3 (id=66): sysctl$kern(&(0x7f0000000000)={0xa, 0xe}, 0x7, &(0x7f00000000c0)="40cea6923e90b2c9ef2017082c42eb1ab6fd5a27f84fcc0a33bafccd623900d5cb958bd15460f872803363d8db4510989cad072ccb504bb68a32d145d6ed05b49315606e7bcac61238e3f2a864232f609c8f09c79a22b221b65b46a03a14000000000000000f00"/120, 0x0, 0x0, 0xffffffffffffff31) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x2, 0x0, 0x12}, 0x4, &(0x7f0000000140)="fbf2805c753d558035dd6034ef3d08c9ce843f6aa0ffb7efd8d29144804939267b1408f77f2f4eb12ca1e062c6db0a52afb7a1ca4f7757358e6c27485f3fdb50087f197748", &(0x7f0000000080)=0x45, &(0x7f00000001c0)="ce826a2245e5db2286bb9d27731b2ac38c273a2fb531b260c88f86c366d661775faa7ec1426f80d0dde2ae906819353852eef4819f86ab664adb98c23f20375a8e363837f1751182295a15a64f6be0", 0x4f) 18.884086ms ago: executing program 2 (id=67): socket$inet(0x2, 0x5, 0x3) (async) r0 = socket$inet(0x2, 0x5, 0x3) mquery(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, 0x0, r0, 0x1) mquery(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3, 0x0, r0, 0x5) mquery(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2, 0x0, r0, 0x8) (async) mquery(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2, 0x0, r0, 0x8) poll(&(0x7f0000000000)=[{r0, 0x2}], 0x1, 0x1) (async) poll(&(0x7f0000000000)=[{r0, 0x2}], 0x1, 0x1) close(r0) recvmmsg(r0, &(0x7f0000001580)={&(0x7f0000001540)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000040)=""/82, 0x52}, {&(0x7f00000000c0)=""/243, 0xf3}, {&(0x7f00000001c0)=""/207, 0xcf}, {&(0x7f00000002c0)=""/175, 0xaf}, {&(0x7f0000000380)=""/86, 0x56}, {&(0x7f0000000400)=""/136, 0x88}], 0x6, &(0x7f0000000540)=""/4096, 0x1000}, 0x7}, 0x10, 0x43, &(0x7f00000015c0)={0xcad9, 0x1}) (async) recvmmsg(r0, &(0x7f0000001580)={&(0x7f0000001540)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000040)=""/82, 0x52}, {&(0x7f00000000c0)=""/243, 0xf3}, {&(0x7f00000001c0)=""/207, 0xcf}, {&(0x7f00000002c0)=""/175, 0xaf}, {&(0x7f0000000380)=""/86, 0x56}, {&(0x7f0000000400)=""/136, 0x88}], 0x6, &(0x7f0000000540)=""/4096, 0x1000}, 0x7}, 0x10, 0x43, &(0x7f00000015c0)={0xcad9, 0x1}) readv(r0, &(0x7f00000016c0)=[{&(0x7f0000001600)=""/176, 0xb0}], 0x1) (async) readv(r0, &(0x7f00000016c0)=[{&(0x7f0000001600)=""/176, 0xb0}], 0x1) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000001700)) (async) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000001700)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$unix(r1, &(0x7f0000001740)=""/174, 0xae, 0x1000, &(0x7f0000001800)=@file={0x1, '\x00'}, 0x3) close(r2) openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000001840), 0x10000, 0x0) (async) r3 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000001840), 0x10000, 0x0) ioctl$TIOCSETAW(r3, 0x802c7415, &(0x7f0000001880)={0x5, 0xb3ef, 0x5, 0x0, "e3367dfeee96a61a9c1d9bb443f1b2aeafe10f43", 0x4, 0xf}) flock(r2, 0x2) ioctl$TIOCCLRVERAUTH(r3, 0x2000741d) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) openat$vmm(0xffffffffffffff9c, &(0x7f00000018c0), 0x800, 0x0) (async) r4 = openat$vmm(0xffffffffffffff9c, &(0x7f00000018c0), 0x800, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x77) ioctl$VMM_IOC_CREATE(r4, 0xc2585601, &(0x7f0000001900)={0x10, 0x80000001, [{&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x7}, {&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, 0x7fffffff}, {&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x2}, {&(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x9}, {&(0x7f0000ff5000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0xfffffffffffffac3}, {&(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x9}, {&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff8000/0x8000)=nil, 0xcf}, {&(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x9}, {&(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ff6000/0x3000)=nil, 0x4}, {&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil}, {&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x7f}, {&(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, 0x7}, {&(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff7000/0x3000)=nil, 0xb}, {&(0x7f0000ff5000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil}, {&(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x8}, {&(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x1a6}], './file0\x00', 0x80000000}) r5 = openat$pci(0xffffffffffffff9c, &(0x7f0000001b00), 0x2, 0x0) mquery(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, r5, 0x10000) (async) mquery(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, r5, 0x10000) ioctl$VMM_IOC_RESETCPU(r3, 0x82405605, &(0x7f0000001b40)={0x6, 0x200000, {[0x6, 0x7, 0x7, 0x400, 0x408, 0x9, 0x83, 0x61, 0x0, 0x401, 0x33a08aac, 0x8, 0x4, 0x62, 0x4, 0x6, 0x9], [0x2, 0xd, 0x4, 0x4, 0x7b, 0x6df, 0xd60000, 0x4, 0x7, 0x9], [0x9, 0x1, 0x9, 0x1000, 0x400, 0x202c00000000, 0x79a], [0x80000001, 0xcc0, 0x6e, 0x1, 0x0, 0x2], [{0x4e2, 0x93d, 0xe, 0x3}, {0x0, 0x4, 0x2, 0x9}, {0x30, 0x800, 0x8, 0x7}, {0x8, 0x9, 0x6, 0x1}, {0x6, 0x4, 0x6, 0x7f}, {0x4, 0x80000001, 0x5, 0x1000000000000000}, {0x401, 0xb, 0x4}, {0x3b2, 0xfffffffd, 0x8, 0xf2ff}], {0x3, 0x10000, 0x9, 0x4}, {0x8, 0xbbc5, 0xfffffffb, 0x7}}}) (async) ioctl$VMM_IOC_RESETCPU(r3, 0x82405605, &(0x7f0000001b40)={0x6, 0x200000, {[0x6, 0x7, 0x7, 0x400, 0x408, 0x9, 0x83, 0x61, 0x0, 0x401, 0x33a08aac, 0x8, 0x4, 0x62, 0x4, 0x6, 0x9], [0x2, 0xd, 0x4, 0x4, 0x7b, 0x6df, 0xd60000, 0x4, 0x7, 0x9], [0x9, 0x1, 0x9, 0x1000, 0x400, 0x202c00000000, 0x79a], [0x80000001, 0xcc0, 0x6e, 0x1, 0x0, 0x2], [{0x4e2, 0x93d, 0xe, 0x3}, {0x0, 0x4, 0x2, 0x9}, {0x30, 0x800, 0x8, 0x7}, {0x8, 0x9, 0x6, 0x1}, {0x6, 0x4, 0x6, 0x7f}, {0x4, 0x80000001, 0x5, 0x1000000000000000}, {0x401, 0xb, 0x4}, {0x3b2, 0xfffffffd, 0x8, 0xf2ff}], {0x3, 0x10000, 0x9, 0x4}, {0x8, 0xbbc5, 0xfffffffb, 0x7}}}) setsockopt(r0, 0x4, 0xbf0, &(0x7f0000001d80)="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", 0xfd) ioctl$VT_ACTIVATE(r3, 0x20007605, &(0x7f0000001e80)=0x7) mprotect(&(0x7f0000fef000/0x4000)=nil, 0x4000, 0x2) minherit(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3) mprotect(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x4) munlock(&(0x7f0000ffa000/0x1000)=nil, 0x1000) openat$null(0xffffffffffffff9c, &(0x7f0000001ec0), 0x200, 0x0) select(0x40, &(0x7f0000001f00)={0x1, 0x9, 0x2, 0x5, 0x2, 0x8, 0xbd, 0x39}, &(0x7f0000001f40)={0xabb, 0x0, 0x2, 0x8, 0x9, 0x3, 0x1, 0x1}, &(0x7f0000001f80)={0x8000000000000000, 0xffffffff7fffffff, 0x8, 0x8, 0x3, 0x1, 0x8c4, 0x2}, &(0x7f0000001fc0)={0x9, 0x400}) 16.411395ms ago: executing program 4 (id=68): open(&(0x7f0000000040)='./file0\x00', 0x1, 0x6) (async) r0 = open(&(0x7f0000000040)='./file0\x00', 0x1, 0x6) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0xa011, r0, 0x0) r1 = msgget$private(0x0, 0x20) socket$inet(0x2, 0x2, 0x0) (async) r2 = socket$inet(0x2, 0x2, 0x0) getsockopt(r2, 0x0, 0x20, 0x0, 0x0) msgctl$IPC_RMID(r1, 0x0) sysctl$kern(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) msync(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2) 15.942207ms ago: executing program 1 (id=69): kqueue() r0 = openat$tty(0xffffffffffffff9c, &(0x7f0000000140), 0x40, 0x0) pipe2(&(0x7f00000002c0)={0xffffffffffffffff}, 0x10004) sendmsg$unix(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000080)="4f60b2e34e54de57c71e1d176817fd4276dc4a643805e1e4102bdca9ef5598e41ec3f526c3bf09c56bbb73f86b2b7d38a5d6c91e51b3856f483c7eb78e0f628caafaf04166c7e207eecb408b878be469b5b082e546245f8d44bd9f9f16a472c71e11274b71ab4a33ba74725bc756b4ca1d49d78e2d1302faa0ac6d93bc95efff09c37be4f5c8c4d22dce109a696e17b2ba34d29d8167b45e10fabb993ea618f6165a", 0xa2}], 0xa, 0x0, 0x0, 0x2}, 0x1) ioctl$TIOCMBIS(r0, 0x8004746c, &(0x7f0000000300)=0x6) ioctl$TIOCOUTQ(r0, 0x40047473, &(0x7f0000000000)=0x99d) kevent(r1, &(0x7f0000000240)=[{{}, 0xfffffffffffffff9, 0x5, 0x2, 0x5, 0x9}], 0x8001, &(0x7f0000000280)=[{{r1}, 0xfffffffffffffffe, 0xba, 0x2, 0xa622, 0x7}, {{r0}, 0xfffffffffffffffa, 0x12, 0x1, 0x5, 0x7d7}], 0x5c2c, 0x0) 15.663772ms ago: executing program 3 (id=70): r0 = syz_open_pts() mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) clock_getres(0x4, 0x0) r1 = shmget$private(0x0, 0x800000, 0x95a999646a72d594, &(0x7f0000005000/0x800000)=nil) r2 = shmat(r1, &(0x7f0000001000/0x3000)=nil, 0x2000) (async) r3 = kqueue() kevent(r3, &(0x7f0000000000), 0x203ff, 0x0, 0x8000800, 0x0) (async) shmctl$IPC_RMID(r1, 0x0) (async) shmdt(r2) (async) r4 = socket$inet(0x2, 0x2, 0x0) close(r4) (async) r5 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r5, 0x0, 0x1, &(0x7f0000000040)='\x00F\x00\x00\x00\x00\x00\x00', 0x8) (async) setsockopt$inet_opts(r4, 0x0, 0xd, &(0x7f0000000240)="ea00000100000000", 0x8) (async) r6 = socket(0x18, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0x100000000000000}) (async) connect$unix(r6, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) (async) getsockname$inet(r6, &(0x7f0000000080), &(0x7f0000000100)=0xc) r7 = socket(0x800000018, 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) bind$unix(r7, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) (async) ioctl$TIOCGETA(r0, 0x402c7413, &(0x7f0000000240)) 7.518368ms ago: executing program 1 (id=71): r0 = socket$unix(0x1, 0x5, 0x0) listen(r0, 0x0) socket(0x2, 0x1, 0x0) socket(0x2, 0x400000000002, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x1, 0x13f) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r2 = kqueue() ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000480)={0xfffffffc, 0x0, {[0x6, 0x0, 0x80000000000002, 0x100000000, 0x0, 0xffff, 0x2e, 0x0, 0xfffffffffffffffe, 0x8, 0x0, 0x0, 0x1, 0x1, 0x7053, 0x2000000000, 0x2, 0x100], [0x2, 0x0, 0xfffffffffffffff9, 0x0, 0x0, 0x80000000, 0x8, 0x0, 0x0, 0x43], [0x0, 0x2, 0xfffffffffffffe8d], [0x100, 0x20000000000, 0x0, 0x100000000, 0xfffffffffffffffe, 0x3], [{0x0, 0xa, 0x0, 0x7d06}, {0x0, 0x2, 0x1}, {0x0, 0x0, 0xfffffffe, 0x1000}, {0x8, 0x0, 0x6, 0xfffffffffffffffe}, {0xfffc, 0x400, 0x0, 0x4}, {0x0, 0x2000, 0x40003, 0x1}, {}, {0x2, 0x3, 0xa, 0x8}], {0x0, 0xfff}, {0x3, 0xfffffffd, 0x4, 0x2}}}) msgget$private(0x0, 0x683) kevent(r2, &(0x7f00000000c0), 0x138, 0x0, 0xffffffff, 0x0) kevent(r2, 0x0, 0x0, &(0x7f00000003c0), 0x401, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)={&(0x7f0000000240)=@un=@file={0x0, ""/529}, 0x213, 0x0, 0x0, 0x0}}, 0x3, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1003f8d}, 0x10, 0x1001, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r3, &(0x7f0000000080)={0x0}, 0x6a, 0x0) close(r3) ioctl$PCIOCWRITE(r1, 0xc0107003, &(0x7f0000000140)={{0x2, 0x3, 0x2}, 0x3ff, 0x1, 0x4}) open$dir(&(0x7f0000001240)='.\x00', 0x0, 0x0) unveil(0x0, &(0x7f00000000c0)='r\x00') bind$unix(r0, &(0x7f0000000040)=@file={0xd570d0466b6018f, './file0\x00'}, 0xa) 0s ago: executing program 4 (id=72): ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0xfffffffffffffffe}}) sysctl$hw(&(0x7f0000000000)={0x4, 0x18}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sysctl$vm_swapencrypt(&(0x7f0000000000)={0x6, 0xb, 0x1}, 0x5, 0x0, 0x0, 0x0, 0xfffffffffffffde7) r0 = open$dir(&(0x7f0000000140)='.\x00', 0x200, 0x100) setrlimit(0xc, &(0x7f0000000980)={0xc, 0x54}) fcntl$setstatus(r0, 0x4, 0x40) poll(&(0x7f0000000100), 0x5d, 0x102) syz_emit_ethernet(0x46, &(0x7f00000012c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb0800450000380166000000069078e0000001ac1400aa4e204e2342841d56ea4ee5f042e5919beff0259e7bf0daa7b9bb4f9ae856d9c53fceb5437e095ab7e268924acd90760b84980f73e445e6d872e028bd4db1079036db8ed43eb443f1c8dc0b0ce8ea233aa0d2733835bb01b7ff14df17382c680707b409f79584b4def043a4add1133374164e8a489cd2b9259f89b2343f3927fcf297815b9586bdd2a19f9578555efb91ec6a1acc0f5dc792a5541ba5522c3ab1a7c7b38979c0025f6e15d3bbfa862a96abd73a0010f1acad366695d111858d340fbd169593f033eca8d2", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="900280009078fffc0101080a000000030000000800020000"]) sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b10005", 0x3, 0x406, 0x0, 0x0) kevent(0xffffffffffffffff, 0x0, 0x20000, 0x0, 0x7, &(0x7f0000000240)={0x2, 0x2}) setrlimit(0x0, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket(0x2, 0x2, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x9, &(0x7f0000000080)="ea00000100000000", 0x8) dup2(r2, r1) connect$unix(r1, &(0x7f0000000000), 0x10) mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x10000, 0x154) open(&(0x7f0000000180)='./file0\x00', 0x1, 0x6f) readv(r3, &(0x7f00000000c0)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1) clock_getres(0x2, &(0x7f0000000000)) openat$pf(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) unveil(&(0x7f0000000200)='./file0/file0\x00', &(0x7f00000002c0)='x\x00') mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) semget$private(0x0, 0x4, 0xc1) getgid() kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.25' (ED25519) to the list of known hosts. panic: pool_do_get: shmpl free list modified: page 0xfffffd805f99b000; item addr 0xfffffd805f99b9a0; offset 0x40=0x68867ef1 Stopped at db_enter+0x25: addq $0x8,%rsp TID PID UID PRFLAGS PFLAGS CPU COMMAND 116883 64150 32767 0x10 0 0 syz-executor * 56375 69000 32767 0x10 0x4000000 1K syz-executor db_enter() at db_enter+0x25 panic(ffffffff833da8a8) at panic+0x1e5 pool_do_get(ffffffff839521e0,1,ffff80003c477bf8) at pool_do_get+0x5ea pool_get(ffffffff839521e0,1) at pool_get+0x149 shmget_allocate_segment(ffff80003c47f9d0,ffff80003c477e50,0,ffff80003c477da0) at shmget_allocate_segment+0x1a7 sys_shmget(ffff80003c47f9d0,ffff80003c477e50,ffff80003c477da0) at sys_shmget+0x1b2 syscall(ffff80003c477e50) at syscall+0xb08 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x77c39935210, count: 7 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{1}> ddb{1}> set $lines = 0 ddb{1}> set $maxwidth = 0 ddb{1}> show panic *cpu1: pool_do_get: shmpl free list modified: page 0xfffffd805f99b000; item addr 0xfffffd805f99b9a0; offset 0x40=0x68867ef1 ddb{1}> trace db_enter() at db_enter+0x25 panic(ffffffff833da8a8) at panic+0x1e5 pool_do_get(ffffffff839521e0,1,ffff80003c477bf8) at pool_do_get+0x5ea pool_get(ffffffff839521e0,1) at pool_get+0x149 shmget_allocate_segment(ffff80003c47f9d0,ffff80003c477e50,0,ffff80003c477da0) at shmget_allocate_segment+0x1a7 sys_shmget(ffff80003c47f9d0,ffff80003c477e50,ffff80003c477da0) at sys_shmget+0x1b2 syscall(ffff80003c477e50) at syscall+0xb08 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x77c39935210, count: -8 ddb{1}> show registers rdi 0 rsi 0x1 rbp 0xffff80003c477a20 rbx 0xffff8000299deddf rdx 0xffff800001472900 rcx 0xffff80003c47f9d0 rax 0xffff8000299ddff0 r8 0x101010101010101 r9 0x8080808080808080 r10 0x428df63a30294db4 r11 0x17c31a07aaced1eb r12 0xffff8000299debe0 r13 0 r14 0 r15 0x1 rip 0xffffffff8139bc55 db_enter+0x25 cs 0x8 rflags 0x246 rsp 0xffff80003c477a10 ss 0x10 db_enter+0x25: addq $0x8,%rsp ddb{1}> show proc PROC (syz-executor) tid=56375 pid=69000 tcnt=3 stat=onproc flags process=10 proc=4000000 runpri=32, usrpri=73, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff80003c47e550,0xffff80003c47e040 process=0xffff80003c46a250 user=0xffff80003c472000, vmspace=0xfffffd806baa6028 estcpu=36, cpticks=1, pctcpu=0.0, user=0, sys=1, intr=0 ddb{1}> ps PID TID PPID UID S FLAGS WAIT COMMAND 26796 337507 1573 32767 2 0x10 syz-executor 26796 363551 1573 32767 3 0x4000090 fsleep syz-executor 26796 291842 1573 32767 3 0x4000090 kqread syz-executor 64150 116883 1165 32767 7 0x10 syz-executor 64150 197593 1165 32767 3 0x4000090 fifow syz-executor 56623 499231 27518 32767 2 0x10 syz-executor 56623 185055 27518 32767 3 0x4000090 fsleep syz-executor 56623 85940 27518 32767 3 0x4000090 fsleep syz-executor 69000 473679 65140 32767 2 0x10 syz-executor *69000 56375 65140 32767 7 0x4000010 syz-executor 69000 219212 65140 32767 3 0x4000090 fsleep syz-executor 18134 269929 56675 32767 2 0x10 syz-executor 18134 291363 56675 32767 3 0x4000090 fsleep syz-executor 31932 394368 6847 32767 2 0x10 syz-executor 31932 52904 6847 32767 3 0x4000090 fsleep syz-executor 31932 500327 6847 32767 3 0x4000090 fsleep syz-executor 3897 465234 0 0 3 0x14200 bored sosplice 58283 59859 31573 32767 3 0x90 nanoslp syz-executor 58283 323361 31573 32767 3 0x4000090 kqpoll syz-executor 58283 371869 31573 32767 3 0x4000090 fsleep syz-executor 1573 479631 98310 32767 3 0x90 nanoslp syz-executor 65140 366188 91468 32767 3 0x90 nanoslp syz-executor 31573 500388 52286 32767 3 0x90 nanoslp syz-executor 6847 298209 4055 32767 3 0x90 nanoslp syz-executor 7724 361540 75135 32767 3 0x10 biowait syz-executor 27518 301259 61776 32767 3 0x90 nanoslp syz-executor 1165 276336 56819 32767 3 0x90 nanoslp syz-executor 56675 149213 85939 32767 3 0x90 nanoslp syz-executor 91468 31253 85833 0 3 0x82 wait syz-executor 52286 284278 85833 0 3 0x82 wait syz-executor 4055 278034 85833 0 3 0x82 wait syz-executor 98310 155313 85833 0 3 0x82 wait syz-executor 75135 423914 85833 0 3 0x82 wait syz-executor 61776 282455 85833 0 3 0x82 wait syz-executor 56819 167754 85833 0 3 0x82 wait syz-executor 85939 408011 85833 0 3 0x82 wait syz-executor 85833 309348 35352 0 3 0x82 kqread syz-executor 35352 355878 79316 0 3 0x10008a sigsusp ksh 79316 17828 21804 0 3 0x98 kqread sshd-session 21804 395362 48376 0 3 0x92 kqread sshd-session 3564 16177 1 0 3 0x100083 ttyin getty 48376 191121 1 0 3 0x88 kqread sshd 22437 85506 12977 73 3 0x1100090 kqread syslogd 12977 242912 1 0 3 0x100082 sbwait syslogd 3275 222734 1 0 3 0x100080 kqread resolvd 28363 402475 79291 77 3 0x100092 kqread dhcpleased 86168 288685 79291 77 3 0x100092 kqread dhcpleased 79291 395169 1 0 3 0x80 kqread dhcpleased 23334 325004 0 0 3 0x14200 bored smr 85591 58963 0 0 2 0x14200 zerothread 86443 345816 0 0 3 0x14200 aiodoned aiodoned 66254 280170 0 0 3 0x14200 syncer update 3763 395862 0 0 3 0x14200 cleaner cleaner 84554 231183 0 0 3 0x14200 reaper reaper 89170 372904 0 0 3 0x14200 pgdaemon pagedaemon 13381 186825 0 0 3 0x14200 bored viomb 39221 182888 0 0 3 0x40014200 acpi0 acpi0 58029 491433 0 0 3 0x40014200 idle1 63307 437920 0 0 3 0x14200 bored softnet7 28391 375323 0 0 3 0x14200 bored softnet6 10415 113185 0 0 3 0x14200 bored softnet5 53577 287699 0 0 3 0x14200 bored softnet4 74233 373235 0 0 3 0x14200 bored softnet3 8838 407560 0 0 3 0x14200 bored softnet2 79070 322398 0 0 3 0x14200 bored softnet1 19191 421167 0 0 3 0x14200 bored softnet0 1756 206919 0 0 3 0x14200 bored systqmp 67733 162650 0 0 3 0x14200 bored systq 27863 12205 0 0 3 0x14200 tmoslp softclockmp 28764 30699 0 0 3 0x40014200 tmoslp softclock 56181 461665 0 0 3 0x40014200 idle0 1 307467 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb{1}> show all locks CPU 1: exclusive mutex shmpl r = 0 (0xffffffff839521f8) #0 witness_lock+0x5bb #1 mtx_enter_try+0x1ad #2 mtx_enter+0x62 #3 pool_get+0x10b #4 shmget_allocate_segment+0x1a7 #5 sys_shmget+0x1b2 #6 syscall+0xb08 #7 Xsyscall+0x128 Process 69000 (syz-executor) thread 0xffff80003c47f9d0 (56375) exclusive kernel_lock &kernel_lock r = 0 (0xffffffff839a0720) #0 witness_lock+0x5bb #1 syscall+0xae6 #2 Xsyscall+0x128 exclusive mutex shmpl r = 0 (0xffffffff839521f8) #0 witness_lock+0x5bb #1 mtx_enter_try+0x1ad #2 mtx_enter+0x62 #3 pool_get+0x10b #4 shmget_allocate_segment+0x1a7 #5 sys_shmget+0x1b2 #6 syscall+0xb08 #7 Xsyscall+0x128 Process 7724 (syz-executor) thread 0xffff80002a2d4540 (361540) exclusive rrwlock inode r = 0 (0xfffffd806e52b5b0) #0 witness_lock+0x5bb #1 rw_do_enter_write+0x42b #2 rrw_enter+0xc6 #3 VOP_LOCK+0xa6 #4 ufs_ihashins+0x4f #5 ffs_vget+0x187 #6 ffs_inode_alloc+0x283 #7 ufs_mkdir+0x113 #8 VOP_MKDIR+0x102 #9 domkdirat+0x179 #10 syscall+0xb08 #11 Xsyscall+0x128 exclusive rrwlock inode r = 0 (0xfffffd806ca80a08) #0 witness_lock+0x5bb #1 rw_do_enter_write+0x42b #2 rrw_enter+0xc6 #3 VOP_LOCK+0xa6 #4 vn_lock+0xa4 #5 vfs_lookup+0x109 #6 namei+0x7aa #7 domkdirat+0x8b #8 syscall+0xb08 #9 Xsyscall+0x128 ddb{1}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 10193 10956K 10968K 166960K 11271 0 pcb 17 12K 12K 166960K 17 0 rtable 205 5K 6K 166960K 256 0 pf 31 16K 16K 166960K 31 0 ifaddr 42 7K 7K 166960K 44 0 ifgroup 50 2K 2K 166960K 50 0 sysctl 3 1K 9K 166960K 7 0 counters 68 36K 36K 166960K 68 0 ioctlops 0 0K 2K 166960K 31 0 iov 0 0K 1K 166960K 2 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1335 84K 84K 166960K 1354 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 5K 166960K 5 0 VM map 2 1K 1K 166960K 2 0 sem 7 0K 0K 166960K 7 0 dirhash 12 2K 2K 166960K 12 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 25 93K 121K 166960K 210 0 proc 61 115K 131K 166960K 485 0 subproc 72 4K 4K 166960K 72 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 9 0 in_multi 99 7K 7K 166960K 100 0 ether_multi 1 0K 0K 166960K 1 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 61 281K 281K 166960K 61 0 exec 0 0K 1K 166960K 342 0 fusefs mount 1 32K 32K 166960K 1 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 245 151K 161K 166960K 3268 0 UVM aobj 5 2K 3K 166960K 7 0 pinsyscall 46 92K 108K 166960K 1207 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 2 0K 0K 166960K 6 0 NDP 11 0K 2K 166960K 27 0 temp 36 8671K 8736K 166960K 3898 0 kqueue 16 26K 31K 166960K 36 0 SYN cache 2 16K 16K 166960K 2 0 ddb{1}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 26 0 0 1 0 1 1 0 8 0 rtpcb 120 43 0 39 1 0 1 1 0 8 0 rtentry 176 95 0 1 5 0 5 5 0 8 0 unpcb 144 60 0 42 1 0 1 1 0 8 0 syncache 336 4 0 4 1 0 1 1 0 8 1 tcpcb 736 39 0 32 2 0 2 2 0 8 0 arp 128 10 0 0 1 0 1 1 0 8 0 ipq 40 2 0 0 1 0 1 1 0 8 0 ipqe 40 4 0 1 1 0 1 1 0 8 0 inpcb 328 126 0 112 2 0 2 2 0 8 0 nd6 144 16 0 0 1 0 1 1 0 8 0 kcovpl 48 8 0 0 1 0 1 1 0 8 0 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 437 0 0 28 0 28 28 0 8 0 art_table 40 438 0 0 5 0 5 5 0 8 0 art_node 32 95 0 11 1 0 1 1 0 8 0 semupl 112 1 0 1 1 0 1 1 0 8 1 semapl 112 5 0 0 1 0 1 1 0 8 0 shmpl 112 4 0 2 1 0 1 1 0 8 0 pool(0xffffffff839521e0:shmpl): page inconsistency: page 0xfffffd805f99b000; 32 on list, 2 missing, 35 items per page dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino2pl 256 1638 0 130 95 0 95 95 0 8 0 ffsino 296 1638 0 130 117 0 117 117 0 8 0 nchpl 144 1915 0 233 63 0 63 63 0 8 0 uvmvnodes 80 1719 0 0 36 0 36 36 0 8 0 vnodes 216 1719 0 0 96 0 96 96 0 8 0 namei 1024 5671 0 5670 1 0 1 1 0 8 0 percpumem 16 49 0 0 1 0 1 1 0 8 0 kstatmem 264 24 0 0 2 0 2 2 0 8 0 scxspl 216 6751 0 6750 3 1 2 2 1 8 1 plimitpl 152 47 0 21 2 0 2 2 0 8 0 sigapl 424 486 0 426 8 0 8 8 0 8 0 knotepl 120 336 0 0 11 0 11 11 0 8 0 kqueuepl 224 40 0 25 1 0 1 1 0 8 0 pipepl 344 104 0 77 3 0 3 3 0 8 0 fdescpl 528 463 0 426 3 0 3 3 0 8 0 filepl 160 1610 0 1386 10 0 10 10 0 8 0 lockfpl 104 20 0 17 1 0 1 1 0 8 0 lockfspl 48 10 0 7 1 0 1 1 0 8 0 sessionpl 144 22 0 6 1 0 1 1 0 8 0 pgrppl 48 32 0 8 1 0 1 1 0 8 0 ucredpl 104 157 0 138 1 0 1 1 0 8 0 zombiepl 144 426 0 426 1 0 1 1 0 8 1 processpl 1248 486 0 426 7 1 6 6 0 8 0 procpl 656 609 0 537 7 0 7 7 0 8 0 sosppl 168 1 0 1 1 0 1 1 0 8 1 sockpl 752 229 0 193 5 0 5 5 0 8 1 mcl64k 65536 2 0 0 1 0 1 1 0 8 0 mcl16k 16384 1 0 0 1 0 1 1 0 8 0 mcl8k 8192 2 0 0 1 0 1 1 0 8 0 mcl4k 4096 131 0 0 17 0 17 17 0 8 0 mcl2k 2048 19 0 0 3 0 3 3 0 8 0 mtagpl 96 1 0 0 1 0 1 1 0 8 0 mbufpl 256 185 0 0 12 0 12 12 0 8 0 bufpl 280 2900 0 112 200 0 200 200 0 8 0 anonpl 32 5383 0 0 44 0 44 44 0 246 0 amapchunkpl 152 8975 0 8429 31 3 28 28 0 158 4 amappl16 200 290 0 268 5 0 5 5 0 8 1 amappl15 192 2 0 2 1 1 0 1 0 8 0 amappl14 184 97 0 87 1 0 1 1 0 8 0 amappl13 176 4 0 3 1 0 1 1 0 8 0 amappl12 168 1051 0 1014 2 0 2 2 0 8 0 amappl11 160 41 0 31 1 0 1 1 0 8 0 amappl9 144 249 0 249 1 1 0 1 0 8 0 amappl8 136 20 0 19 1 0 1 1 0 8 0 amappl7 128 90 0 80 1 0 1 1 0 8 0 amappl6 120 160 0 157 1 0 1 1 0 8 0 amappl5 112 108 0 102 1 0 1 1 0 8 0 amappl4 104 249 0 234 1 0 1 1 0 8 0 amappl3 96 1642 0 1514 4 0 4 4 0 8 0 amappl2 88 590 0 537 2 0 2 2 0 8 0 amappl1 80 8120 0 7533 14 0 14 14 0 8 0 amappl 88 2645 0 2464 5 0 5 5 0 92 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 6 0 2 1 0 1 1 0 8 0 uaddrrnd 24 463 0 426 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 463 0 426 1 0 1 1 0 8 0 vmmpekpl 168 5278 0 5244 2 0 2 2 0 8 0 vmmpepl 168 33487 0 31379 100 0 100 100 0 357 3 vmsppl 488 462 0 426 7 1 6 6 0 8 1 rwobjpl 80 12483 0 9918 56 1 55 55 0 8 0 pdppl 4096 934 0 852 106 18 88 96 0 8 6 pvpl 32 12470 0 0 101 0 101 101 0 265 0 pmappl 256 462 0 426 4 1 3 3 0 8 0 extentpl 40 45 0 27 1 0 1 1 0 8 0 phpool 112 279 0 21 8 0 8 8 0 8 0 ddb{1}> machine ddbcpu 0 Stopped at x86_ipi_db+0x27: addq $0x8,%rsp x86_ipi_db(ffffffff837ecff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __mp_lock(ffffffff839a0518) at __mp_lock+0x192 intr_handler(ffff800030fff3d0,ffff800000079a80) at intr_handler+0xe1 Xintr_ioapic_edge23_untramp() at Xintr_ioapic_edge23_untramp+0x18f end of kernel end trace frame: 0x777a5db88340, count: 9 ddb{0}> trace x86_ipi_db(ffffffff837ecff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __mp_lock(ffffffff839a0518) at __mp_lock+0x192 intr_handler(ffff800030fff3d0,ffff800000079a80) at intr_handler+0xe1 Xintr_ioapic_edge23_untramp() at Xintr_ioapic_edge23_untramp+0x18f end of kernel end trace frame: 0x777a5db88340, count: -6 ddb{0}> machine ddbcpu 1 Stopped at db_enter+0x25: addq $0x8,%rsp db_enter() at db_enter+0x25 panic(ffffffff833da8a8) at panic+0x1e5 pool_do_get(ffffffff839521e0,1,ffff80003c477bf8) at pool_do_get+0x5ea pool_get(ffffffff839521e0,1) at pool_get+0x149 shmget_allocate_segment(ffff80003c47f9d0,ffff80003c477e50,0,ffff80003c477da0) at shmget_allocate_segment+0x1a7 sys_shmget(ffff80003c47f9d0,ffff80003c477e50,ffff80003c477da0) at sys_shmget+0x1b2 syscall(ffff80003c477e50) at syscall+0xb08 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x77c39935210, count: 7 ddb{1}> trace db_enter() at db_enter+0x25 panic(ffffffff833da8a8) at panic+0x1e5 pool_do_get(ffffffff839521e0,1,ffff80003c477bf8) at pool_do_get+0x5ea pool_get(ffffffff839521e0,1) at pool_get+0x149 shmget_allocate_segment(ffff80003c47f9d0,ffff80003c477e50,0,ffff80003c477da0) at shmget_allocate_segment+0x1a7 sys_shmget(ffff80003c47f9d0,ffff80003c477e50,ffff80003c477da0) at sys_shmget+0x1b2 syscall(ffff80003c477e50) at syscall+0xb08 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x77c39935210, count: -8