last executing test programs: 2.271652325s ago: executing program 0 (id=168): mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x2, 0x2813, 0xffffffffffffffff, 0x81) setsockopt(0xffffffffffffffff, 0x1000000029, 0xc, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) setsockopt(0xffffffffffffffff, 0x1000000029, 0xc, &(0x7f0000000040)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYRES32], 0x9}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r1 = shmget$private(0x0, 0x3000, 0x552, &(0x7f0000ffa000/0x3000)=nil) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000500)={{0x200, 0x0, 0x0, 0x0, 0x0, 0x55}, 0x6, 0xaea2, 0x0, 0x0, 0x9, 0x80000001}) shmat(r1, &(0x7f0000001000/0x3000)=nil, 0x1000) madvise(&(0x7f0000000000/0x14000)=nil, 0x14000, 0x2) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000001a00)={{0x7, 0x0, 0x0, 0x0, 0x0, 0x8, 0x906e}, 0x10, 0xfffffffffffffffe, 0x8}) r2 = open$dir(&(0x7f0000002000)='./file0\x00', 0x80, 0x6) syz_emit_ethernet(0x1096, &(0x7f00000009c0)=ANY=[]) sendmsg(r0, &(0x7f0000000380)={0x0, 0x32c, 0x0, 0x0, &(0x7f0000000000), 0x90}, 0x0) r3 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r3, 0xc0106924, &(0x7f00000001c0)) r4 = socket(0x18, 0x1, 0x0) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) munlockall() r5 = socket$inet(0x2, 0x2, 0x0) close(r5) r6 = socket$inet(0x2, 0x2, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000040)=@file={0xd19450564dee018c, './file0\x00'}, 0xa) ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x0, 0x0, {[0xfffffbfffffffffb, 0x2000001, 0x2, 0x1, 0xfffffffffffffffa, 0x0, 0xdf5e, 0x0, 0x0, 0x2f01, 0x0, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2, 0xce5], [0xfffffffffffffffe, 0x80000002, 0x6, 0xffffffff, 0x100, 0x7b99, 0x1fe, 0x3, 0x10000000000001], [0x100000001, 0x2, 0x40000000, 0x0, 0x2, 0x101, 0x1], [0x100, 0x2, 0x401, 0x3, 0xffffffffffeffffe, 0x8], [{0x0, 0x4, 0x0, 0x7d06}, {0xfffc, 0x2, 0x5, 0x2}, {0x0, 0x0, 0xfffffffe, 0x5}, {0x3, 0x7, 0x6, 0x80000001}, {0x0, 0x2, 0x0, 0x808}, {0x9, 0x2003, 0x3, 0x1fffffffffffffff}, {0x0, 0x0, 0x3}, {0x0, 0x962, 0x0, 0x200000000008}], {0x2000, 0x1000001, 0x5}, {0x0, 0x0, 0x8, 0x3}}}) r7 = kqueue() kevent(r7, &(0x7f00000003c0)=[{{r7}, 0xfffffffffffffff9, 0x8, 0x20, 0x434c, 0xffffffffffffff4a}, {{r6}, 0xfffffffffffffffc, 0xeb, 0x80, 0x9, 0xffffffff}, {{r2}, 0xfffffffffffffffe, 0x40, 0x4, 0x3, 0x6c3bfb0d}, {{r4}, 0xfffffffffffffffa, 0x4c, 0x80000000, 0xe, 0x140000000000}, {{r3}, 0xfffffffffffffffb, 0x10, 0x2, 0x9, 0xfbfc}], 0x30, 0x0, 0x57d, 0x0) r8 = kqueue() kevent(r8, &(0x7f0000000000), 0x3ff, 0x0, 0x8000800, 0x0) close(r7) ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x0, 0xb3f, {[0xfffffbfffffffffb, 0x0, 0x8, 0x100200000, 0x3, 0x8, 0xdf60, 0xfffffffffffffffe, 0x0, 0x2f01, 0x93, 0x3, 0xffffffffffffffff, 0x200000000002, 0xf, 0x4, 0xfffffffffffffffe, 0x400000000100], [0xfffffffffffffffe, 0x80000001, 0xfffffffffffffffd, 0x525, 0x8, 0x200000000207b98, 0x80000000000001fe, 0x0, 0x0, 0x8], [0x100000001, 0x8000, 0x3ffffffe, 0x0, 0xb, 0x11004, 0xffffffff00000001], [0x104, 0x1fffffffffb, 0x7ffffffffffffffc, 0x100000000, 0xfffffffffffffffe, 0x1], [{0x0, 0x0, 0x0, 0x7d02}, {0x6, 0x22, 0x5, 0xfffffffffffffff9}, {0x4, 0x4, 0xfa, 0x80}, {0x2, 0xd, 0x5, 0xffffffffffffffff}, {0x0, 0x1000002, 0x207f, 0xb}, {0x0, 0x9, 0x9, 0x4}, {0x0, 0x0, 0xfffffff9}, {0x0, 0x100, 0x0, 0x8}], {0x1, 0x5, 0x7, 0x3}, {0xfbfe, 0x5, 0x6d5, 0x4}}}) 2.208328936s ago: executing program 4 (id=174): sync() sync() r0 = open(&(0x7f0000000000)='./file0\x00', 0x9cab835cfdc52675, 0x40) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0xa010, r0, 0x0) sync() r1 = syz_open_pts() syz_open_pts() syz_open_pts() lseek(r1, 0x3, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r2 = socket(0x11, 0x3, 0x0) recvfrom$unix(r2, &(0x7f0000000180)=""/144, 0x90, 0xc02, 0x0, 0x0) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r3, 0x0, 0x200000000000b, &(0x7f0000000080)='\x00', 0x1) setsockopt$inet_opts(r3, 0x0, 0x9, &(0x7f0000000040)="10abf6a36383a428e1a90468", 0xc) sync() 1.843637278s ago: executing program 0 (id=182): r0 = socket(0x18, 0x2, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) close(r1) sysctl$net_inet_esp(&(0x7f0000000240)={0x4, 0x1e, 0x2, 0x6}, 0x4, 0x0, 0x0, 0x0, 0x11) r2 = socket$inet(0x2, 0x2, 0x0) close(r2) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r3, 0x0, 0x9, &(0x7f0000000240)="ea00000100000000", 0xc) setsockopt$inet_opts(r2, 0x0, 0x200000000000c, &(0x7f0000000000)="ea00000100000000", 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setsockopt$inet_opts(r1, 0x0, 0xd, &(0x7f0000000240)="e200000100000000", 0x8) setsockopt(r0, 0x1000000000029, 0x9, &(0x7f0000000040)="03000000", 0x4) setsockopt(r0, 0x1000000029, 0xd, 0x0, 0x0) sysctl$net_inet_tcp(&(0x7f00000002c0)={0x4, 0x2, 0x6, 0x18}, 0x4, &(0x7f0000000540)="cfbcda99810cb355236c01889b0db4443afcc0e5aced44f579e8e5320564f4432b436bef10f29a175e0e66daa0e2b2dc940f8738b15aad0a83b046076bddbeae23adf042c01bd41759fe8a59a95bca833e9baa6a341c02d8056b2a0877996ee1986b16f4e905c41b8a4c52233a5dc5294981a0db786c781b19b0031bc7b1e13169cd72666f886e9d43deb117b242f6eb02e8b3ecce0ee8394b9181c0e8d5e63ebae3ecf4a3e10d618c240ee1e127e00d8a6592791a7a98244444f9086b42f5d3ff6e81eba0850ea5ccf20e00"/218, &(0x7f0000000280)=0xda, &(0x7f0000000440)="234e0222f4e6628b6ba5c0960bd3feb1cec293e2058fcbc1e3761b7a953296383bded4df5169e04368fe8802d807e398290e9e5b04fd5b42dc6565c9f0a3cd5d19fa073ec52287939b96a3a898a5a5044cef86d9c940592a7c17e5cc9bc9beed4a620f3b3de80f33379a72dc9ee148010000000000000066660fc354f3a4fab09ce9e6fd8a04000000010000004387da889fa077f6dd49ce17dc93ed97ce2fc648349fb7128abe73054704a9726485c8bac9492c0be453385108c39b478cfdaa8e461a8659e064cdf269c4ed7dda48126557cc7c8e0e6fed4c", 0xd9) connect$unix(r0, &(0x7f0000000000)=@abs={0x0, 0x0, 0x3}, 0x8) fchmod(0xffffffffffffffff, 0x69002dbd31d75e08) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000000)={{}, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x11}, 0x4000000000000006, 0x0, 0x0, 0x0, 0x0) socket(0x18, 0x1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r4 = socket(0x2, 0x4001, 0x0) r5 = dup(r4) r6 = fcntl$dupfd(r4, 0x0, 0xffffffffffffffff) r7 = dup2(r4, r6) dup(r7) syz_emit_ethernet(0x52, &(0x7f0000000380)=ANY=[@ANYBLOB="e6ff2a29e148f8dfde7c0386dd6000f180011c0000fed38d5bb10b9e61cd0a535a98000000aa29234e210000000034a5db1ccf11c9088ca4000000002b82ced9502550a489891ef852ef25bc1110aefb23c5922b32c7b1a660b5fb6cd922f0fec0fa98b21e98d47a20a9c8c7b99589a3db20dae556da3976978eec66e19ad198768f56232b73", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="510007cc90780fff"]) r8 = getpid() wait4(r8, 0x0, 0xa, &(0x7f0000000080)) listen(r5, 0xb) sysctl$hw(&(0x7f00000000c0)={0x6, 0x14}, 0x2, &(0x7f0000000080), 0x0, 0x0, 0x0) 1.698644086s ago: executing program 0 (id=187): syz_emit_ethernet(0x5a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6000000000242b00fe8000000000000017000000000000aafe8000000000ba3e4f"]) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) mlock(&(0x7f00003b0000/0x2000)=nil, 0x2000) sysctl$kern(&(0x7f0000000000)={0x1, 0x1b}, 0x2, &(0x7f0000001940), &(0x7f0000000040)=0xffffffffffffff2a, 0x0, 0xffffffffffffffb7) r0 = socket(0x6, 0x1, 0xa4) setsockopt$sock_linger(r0, 0xffff, 0x80, &(0x7f0000000080)={0x8000, 0x9}, 0x8) munmap(&(0x7f00003e8000/0x4000)=nil, 0x4000) syz_extract_tcp_res(&(0x7f0000000040), 0x2, 0x0) 1.698260364s ago: executing program 0 (id=188): ioctl$TIOCSETAF(0xffffffffffffffff, 0x802c7416, &(0x7f0000000040)={0x9, 0x1, 0x3, 0x1a9, "bfe749eefcb1a919bf16be5b6fc98e8b95b7c19c", 0x101, 0x65}) sysctl$kern(&(0x7f0000000040)={0x1, 0x3f}, 0x4, &(0x7f0000000040), 0x0, 0x0, 0xfffffffffffffda3) (async) sysctl$kern(&(0x7f0000000040)={0x1, 0x3f}, 0x4, &(0x7f0000000040), 0x0, 0x0, 0xfffffffffffffda3) socket(0x1, 0x5, 0x0) (async) r0 = socket(0x1, 0x5, 0x0) close(r0) getgroups(0xa5b44471283886f3, 0xffffffffffffffff) open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x186) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000080)="76e5eac907f9ccf7a251ceddcec7d6aa45cffe2c63a56077123a276d3ba4e9d17eb3eb5db12a3783a8e0620d357de1fe04fa9465b5bd1286e9624dec06a00c222f", 0x41}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) unveil(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000100)='W\x00') mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x8, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BIOCSETWF(r1, 0x80104277, &(0x7f0000000240)={0x1, &(0x7f00000001c0)=[{0x6, 0x4, 0x6, 0x5}]}) recvmmsg(r2, &(0x7f0000000300)={0x0, 0x1}, 0x10, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x3, 0x2, 0x0, 0x100000000000000}) semop(0x0, &(0x7f00000000c0)=[{0x2}, {0x0, 0x2ff, 0x800}], 0x2) r3 = socket(0x18, 0x3, 0x0) connect$unix(r3, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) socket(0x800000018, 0x2, 0x0) (async) r4 = socket(0x800000018, 0x2, 0x0) bind$unix(r4, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) (async) bind$unix(r4, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) setsockopt$sock_int(r4, 0xffff, 0x800, &(0x7f0000000040)=0xd, 0x4) (async) setsockopt$sock_int(r4, 0xffff, 0x800, &(0x7f0000000040)=0xd, 0x4) sendto$unix(r3, &(0x7f0000000100)="5970975e10975a756b417783216712bbcd25df945c308a717accc6d2b2fbb3626735bdf9ecc3da0dae209f9376db303051e74243054726ea87ecaa7e9160f7a34add448aba012cdd0bb1efff3ac258d2a4e6a0c4361fae11985b8b2c94da07db7bc3c9d1578860b54bac9e2321df332cfd76a78652484578dbf934b71a3e16a54c179e0b176c4acfc438", 0x8a, 0x6, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0xa) (async) sendto$unix(r3, &(0x7f0000000100)="5970975e10975a756b417783216712bbcd25df945c308a717accc6d2b2fbb3626735bdf9ecc3da0dae209f9376db303051e74243054726ea87ecaa7e9160f7a34add448aba012cdd0bb1efff3ac258d2a4e6a0c4361fae11985b8b2c94da07db7bc3c9d1578860b54bac9e2321df332cfd76a78652484578dbf934b71a3e16a54c179e0b176c4acfc438", 0x8a, 0x6, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0xa) write(r0, 0x0, 0x0) select(0x0, 0x0, 0x0, &(0x7f00000000c0)={0x4, 0x7fffffffffffffff, 0x9, 0x6, 0xfffffffffffffff9, 0x800000000001, 0x7fffffff, 0x7fffffffffffffff}, 0x0) syz_emit_ethernet(0x126f, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd609ded1a12390000c4a4e3434e58d025a6a8a81cf312b8befe80"]) 1.532733554s ago: executing program 6 (id=198): r0 = syz_open_pts() ioctl$TIOCSTOP(r0, 0x2000746f) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000300)='#', 0x1}], 0x1) sysctl$kern(&(0x7f0000000040)={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0xffff, 0x20, &(0x7f0000000000), &(0x7f0000000080)=0x4) mprotect(&(0x7f00004ed000/0x1000)=nil, 0x1000, 0x4) syz_emit_ethernet(0x2a, &(0x7f0000000500)=ANY=[@ANYBLOB="aaaaaaaaaaaaaac7aaaa000005ff9078ffffffff75f2b9f44f74c0a4023ccaf4064064030000000000000000000000000089fd10f6150d579ed5eefcdf7e5e62b6931e4f286f27b6e168a1e5a6afe7933ec76142575f5f07f0e0ae6d5840e05cfdd0d0ec22b36bc6acbee1042523b59cbc154c897bd3dec6e62a674bd35a819a7afcd31e8c399b536fdfec61ad1b6a6a627511"]) sysctl$kern(&(0x7f0000000100)={0x1, 0x11}, 0x9, &(0x7f00000001c0)="da41ba1e00fea80d7be70a8bcccfb73c68392bcb95a34b8e5f84cfe5a7e72efec372827b520cac06000016f6c68d1f837d792765fd6455206dc5a1edddca847a4450e79514dbf24f706dce4d1db03bc7ecb23f4383b1d4d3", &(0x7f0000000080)=0x58, 0x0, 0x0) ioctl$TIOCSTOP(r0, 0x2000746f) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000080)="76e5eac907f9ccf7a251ceddcec7d6aa45cffe2c63a56077123a276d3ba4e9d17eb3eb5db12a3783a8e0620d357de1fe04fa9465b5bd1286e9624dec06a00c222f", 0x41}], 0x1) semop(0x0, &(0x7f00000000c0)=[{0x0, 0x3}, {0x4, 0x1ff}], 0x27fd) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket(0x18, 0x4, 0x0) close(r1) socket(0x18, 0x2, 0x0) setsockopt(r1, 0x800, 0xa, &(0x7f00000005c0)="ebbf796869feb1ddb16d86fe8d9818380adf92bd7a9932bc3dfe92e20507218561eead6a8f756e34470a92838c2680bf6e6de6d85159677323cd37e1ceed68998d4fd629d39a1967fd1246fa4cba0d4cc2f1f498a6254c13344fad37ec856a39c5aeed44f93aba", 0x5f) setsockopt(r1, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) connect$unix(r1, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) sendto$unix(r1, 0x0, 0x0, 0x404, 0x0, 0x0) setrlimit(0x8, &(0x7f0000000180)={0x8, 0x34}) r2 = syz_open_pts() close(r2) r3 = syz_open_pts() readv(r3, &(0x7f0000000680)=[{&(0x7f0000000380)=""/227, 0xe3}], 0x28d) execve(0x0, 0x0, 0x0) writev(r2, &(0x7f0000001880)=[{&(0x7f00000004c0)="33f57cbd9b7a3dce024abd0a", 0xc}], 0x1) ioctl$TIOCSFLAGS(r0, 0x8004745c, &(0x7f0000000000)=0x1) openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x8, 0x0) 1.484334047s ago: executing program 6 (id=201): setrlimit(0x8, &(0x7f0000000980)={0x42, 0x62}) r0 = syz_open_pts() close(r0) syz_open_pts() ioctl$TIOCSETAW(r0, 0x802c7415, &(0x7f0000000000)={0x3, 0xad, 0x3, 0xfffffdfe, "0a6400b72860147bccc7020400060000d4620300", 0x80000005, 0x5}) writev(r0, &(0x7f0000000300)=[{&(0x7f0000001640)="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", 0x6f7}], 0x1) ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x0, [{0x0, 0xd30d}, {0x0, 0x79}, {0x3, 0x9}, {0x0, 0x3}, {0x3}, {0x2, 0x4}, {}, {0x3, 0x5}, {0x3, 0x4}, {0x2, 0x1}, {0x1, 0x81}, {0x1, 0x4}, {0x1, 0xa17}, {0x2}, {0x0, 0xfffffffc}, {}, {0x1}, {}, {}, {0x0, 0x401}, {}, {0x0, 0x1}, {0x3, 0x1}, {0x2, 0xffffffff}, {0x3, 0x1000002}, {0x0, 0x5}, {0x0, 0x2}, {0x0, 0x3}, {0x1, 0x7}, {0x2, 0x6}, {0x1}, {0x0, 0x280000}]}) sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b1000504600000000000000007000000331c13fecea10500fef9e906c72fd3357ae320b37b673039d2d236073705ae04be38164991f7accf5f882b297be1aa5b236deb51e2f0ac3ebbc257699a5f139b672f4d335d223e7d029d6ba8af630037282102000000720f70c1f5a472c881ea6e69e0bb76d907c400000200361b1257aea8c5000020020000000000008abfba09", 0x91, 0x0, 0x0, 0x3a) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r1 = socket(0x11, 0x3, 0x0) sendto$unix(r1, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x0, 0x0, 0x0) 1.305722917s ago: executing program 4 (id=204): r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x186) mmap(&(0x7f0000324000/0x1000)=nil, 0x1000, 0x4, 0x10, r0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x615, 0x1a) mmap(&(0x7f000033f000/0x14000)=nil, 0x14000, 0x2, 0x11, r1, 0x0) truncate(&(0x7f0000000140)='./file0\x00', 0x30001) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ftruncate(r0, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x186) (async) mmap(&(0x7f0000324000/0x1000)=nil, 0x1000, 0x4, 0x10, r0, 0x0) (async) open(&(0x7f0000000180)='./file0\x00', 0x615, 0x1a) (async) mmap(&(0x7f000033f000/0x14000)=nil, 0x14000, 0x2, 0x11, r1, 0x0) (async) truncate(&(0x7f0000000140)='./file0\x00', 0x30001) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) ftruncate(r0, 0x1) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) 1.304620495s ago: executing program 3 (id=206): sendto$unix(0xffffffffffffffff, &(0x7f0000000040)="b100050400000000000008000101000000000000cea1fea7fef96ecfc73fd3357ae27caa0416fa4f376336acf00b7804be781e4991f7c8df5f882b297be1aa5b23", 0x41, 0x0, 0x0, 0x0) (async) sendto$unix(0xffffffffffffffff, &(0x7f0000000040)="b100050400000000000008000101000000000000cea1fea7fef96ecfc73fd3357ae27caa0416fa4f376336acf00b7804be781e4991f7c8df5f882b297be1aa5b23", 0x41, 0x0, 0x0, 0x0) select(0x40, &(0x7f0000000000)={0xfffffffffffffffd, 0x2, 0x0, 0x0, 0x0, 0xc8, 0x2}, 0x0, 0x0, 0x0) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socket(0x18, 0x1, 0x0) (async) r1 = socket(0x18, 0x1, 0x0) setsockopt(r1, 0x6, 0x2, &(0x7f0000000040)="3b94c5a3", 0x4) ioctl$BIOCSRTIMEOUT(r0, 0x8010426d, &(0x7f0000000100)={0xe88, 0x6}) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffff06000000"]) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="00001c00ac14"]) (async) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="00001c00ac14"]) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket(0x2, 0x2, 0x0) socket$inet(0x2, 0x2, 0x0) (async) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r3, 0x0, 0x200000000000c, 0x0, 0x0) r4 = getpgid(0x0) ktrace(0x0, 0x1, 0x40000002, r4) (async) ktrace(0x0, 0x1, 0x40000002, r4) setsockopt$sock_int(r2, 0xffff, 0x20, &(0x7f0000000080)=0x6, 0x4) connect$unix(r2, &(0x7f0000000000), 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @random="e476cae4cedc", [], {@ipv6={0x86dd, {0x0, 0x6, "db0900", 0x8, 0x89, 0x0, @rand_addr="fed38d00", @ipv4={'\x00', '\xff\xff', @remote={0xac, 0x14, 0x0}}, {[], @udp={{0x1, 0x1, 0x8}}}}}}}) sendto$unix(r2, &(0x7f00000016c0)="b10005040000", 0x6, 0x408, 0x0, 0x0) (async) sendto$unix(r2, &(0x7f00000016c0)="b10005040000", 0x6, 0x408, 0x0, 0x0) 1.303996485s ago: executing program 4 (id=207): mknod(&(0x7f0000000000)='./file0\x00', 0x40, 0x9) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x40, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x101) pwritev(r1, &(0x7f0000000480)=[{&(0x7f00000000c0)='3', 0x1}], 0x1, 0x2effd) renameat(r0, &(0x7f0000000080)='./file0\x00', r1, &(0x7f00000000c0)='./file0\x00') 1.181802386s ago: executing program 6 (id=211): ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r0 = socket(0x2, 0x1, 0x0) ioctl$FIONREAD(r0, 0xc02069a5, &(0x7f00000001c0)) syz_emit_ethernet(0x56, &(0x7f0000000000)={@broadcast, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "db0900", 0x20, 0x0, 0x0, @rand_addr="fed38d5ba80b9e61cd0c535a9800", @mcast2, {[@routing={0x7e, 0x2, 0x0, 0x7, 0x0, [@ipv4={'\x00', '\xff\xff', @broadcast}]}], @udp={{0x1, 0x1, 0x8}}}}}}}) 1.179193676s ago: executing program 4 (id=212): syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) writev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000000)="c886b4d3e0", 0x5}], 0x1) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket(0x2, 0x2, 0x0) close(r0) poll(&(0x7f00000001c0), 0x29, 0xfd) execve(0x0, 0x0, 0x0) r1 = socket(0x2, 0x2, 0x0) bind(r1, &(0x7f0000000000), 0x10) connect$unix(r1, &(0x7f0000000000), 0x10) connect$unix(r0, &(0x7f0000000000), 0x10) mprotect(&(0x7f0000162000/0x1000)=nil, 0x1000, 0x4) sendto$inet(r0, 0x0, 0x0, 0x406, 0x0, 0x0) 1.17892228s ago: executing program 3 (id=213): setrlimit(0x8, &(0x7f0000000980)={0x42, 0x61}) r0 = syz_open_pts() close(r0) r1 = syz_open_pts() ioctl$FIOASYNC(r0, 0x80047470, &(0x7f0000000000)=0x1) ioctl$FIOASYNC(r1, 0x80047460, &(0x7f00000000c0)=0x4) ioctl$TIOCSETAF(r0, 0x802c7416, &(0x7f0000000080)={0x1, 0xff, 0x3, 0x1ff, "69f785d33cb696343f192974121a727233a129d3", 0x2, 0xfffffff9}) sysctl$hw(&(0x7f0000000040)={0x6, 0x8}, 0x2, &(0x7f0000000080)="bd0f192eec490c682241f7898d1a068d156ec160c3", &(0x7f0000000000)=0x15, 0x0, 0x0) 1.177606281s ago: executing program 3 (id=214): r0 = socket(0x11, 0x3, 0x0) accept(r0, &(0x7f00000001c0)=@in, &(0x7f0000000200)=0xc) sendto$unix(r0, 0x0, 0x0, 0x8, 0x0, 0x0) r1 = msgget$private(0x0, 0x596) msgrcv(r1, 0x0, 0x0, 0x0, 0x2000) r2 = socket(0x18, 0x1, 0x0) getsockopt$sock_cred(r2, 0xffff, 0x1024, &(0x7f0000000140)={0x0}, &(0x7f0000000280)=0xc) msgctl$IPC_SET(r1, 0x1, &(0x7f0000000080)={{0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x5, 0x6, r3, 0x0, 0x7, 0x1, 0x3, 0x6}) (async) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/65, 0x41}, {&(0x7f0000000080)=""/144, 0x90}], 0x2) (async) syz_emit_ethernet(0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="ffffffff7fffffffffffffff080045ec14ffff4e204e2300"/38, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5080000090780002"]) (async, rerun: 64) socket$inet(0x2, 0x3, 0x6) (rerun: 64) 1.150279625s ago: executing program 6 (id=216): open(&(0x7f0000000000)='./file0\x00', 0x615, 0x166) (async) ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9f, 0x0) (async) setitimer(0x0, &(0x7f0000000040)={{0x10001, 0xeed}, {0x2, 0x202}}, 0x0) getitimer(0x0, &(0x7f0000000080)) (async) utimes(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={{0x5, 0x63806ed1}, {0x8, 0x9}}) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000100)=@in, 0x0, 0x0, 0x0, &(0x7f0000000380)=""/136, 0x88}, 0x40040) (async) setitimer(0x0, &(0x7f00000000c0)={{0x9, 0x80}, {0x0, 0xfe}}, &(0x7f0000000100)) 1.071165299s ago: executing program 4 (id=222): symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') unveil(&(0x7f0000000080)='./file0/file0/..\x00', &(0x7f00000004c0)='x\x00') (async) r0 = open(&(0x7f0000000080)='./file0\x00', 0x18289, 0x190) ioctl$FIONREAD(r0, 0xc028698b, &(0x7f0000000100)) (async) mknod(0x0, 0x2000, 0x6381) kqueue() (async) r1 = socket(0x800000018, 0x1, 0x0) bind$unix(r1, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) listen(r1, 0x1) (async) r2 = socket(0x18, 0x4001, 0x0) fcntl$lock(0xffffffffffffffff, 0x9, &(0x7f00000000c0)={0x1, 0x1, 0x0, 0x100000000000000}) (async) connect$unix(r2, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) (async) sendto$inet(r2, &(0x7f0000000a00)="a0f4", 0x2, 0x7, 0x0, 0x0) (async) accept(r1, 0x0, 0x0) (async) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0xa6, 0x3, 0x8, 0x80000001, 0xa1b0, 0x10001, 0x10, [{0xfffffffc, 0x2890, 0x4, 0x5}, {0x5, 0x9, 0x8, 0xfffffff7}, {0x1, 0xfffffffa, 0xfffffffc, 0x9}, {0x4, 0x800, 0x8007, 0x7}, {0x401, 0x3, 0x2800, 0xb}, {0x1, 0x4, 0x3, 0x9b}, {0xce1, 0xffffffff, 0x4f0, 0x3}, {0x6, 0x803, 0x3, 0x7}, {0xd0f5, 0x82, 0x5, 0x9}, {0x6a75, 0x8009, 0x1000, 0x4}, {0x1cc, 0x10001, 0xc, 0x3}, {0x7, 0xa, 0x8}, {0x3, 0x7, 0x6, 0x4}, {0x6, 0xfffffffa, 0x60, 0x6}, {0x10008, 0x5, 0x5, 0x4}, {0x0, 0xfffffffe, 0xfff, 0x30004}]}) (async) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) (async) sysctl$kern(&(0x7f00000000c0)={0x1, 0x12}, 0x2, 0x0, 0x0, 0x0, 0x0) (async) ioctl$WSDISPLAYIO_LDFONT(r0, 0x8058574d, &(0x7f0000000100)={'./file0/file0/..\x00', 0x81, 0x0, 0x80, 0x1, 0x9, 0x4, 0x7, 0x2, 0x2, 0x8, 0x5}) (async) ktrace(&(0x7f00000000c0)='./file0\x00', 0x1, 0x1236, 0x0) 1.014347665s ago: executing program 1 (id=226): sendmsg$unix(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000ffff000001"], 0x10, 0x4}, 0x40a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg(r0, &(0x7f00000003c0)={0x0, 0x6}, 0x10, 0x4) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f00000000c0), 0x1c, 0x0}, 0x0) r1 = socket(0x18, 0x2, 0x0) connect$unix(r1, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) getsockname$inet(r1, &(0x7f00000000c0), &(0x7f0000000380)=0xffffffffffffff24) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket(0x18, 0x2, 0x0) setsockopt(r2, 0x1000000029, 0x2e, &(0x7f0000000040)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) setrlimit(0x8, &(0x7f00000008c0)={0x42, 0x61}) socket(0x2, 0x1, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f00000000c0)={{0x6}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="28000000ffff000001"], 0x28}, 0x0) recvmmsg(r3, &(0x7f0000000000)={&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/25, 0xfffffec6}, 0xfffffffd}, 0x15, 0x2000, 0x0) r5 = syz_open_pts() close(r5) syz_open_pts() ioctl$TIOCSETA(r5, 0x802c7414, &(0x7f0000000040)={0x27ffe, 0xffffa5a6, 0x405, 0x4f216db9, "102e26181b7b6e3ceb00", 0xc, 0xb}) writev(r5, &(0x7f0000000700)=[{&(0x7f00000001c0)="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", 0x3f8}], 0x1) sendmsg$unix(r2, &(0x7f0000001700)={0x0, 0xffffffb3, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0) 1.012563948s ago: executing program 1 (id=229): r0 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) ioctl$WSMUXIO_INJECTEVENT(r0, 0x80185760, &(0x7f0000000080)={0xc07, 0x5, {0x2, 0x5}}) r1 = semget$private(0x0, 0x7, 0x27) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r2 = socket(0x2, 0x2, 0x0) ioctl$FIONREAD(r2, 0xc0206921, &(0x7f00000001c0)) r3 = semget(0x0, 0x1, 0x281) semop(r3, &(0x7f0000001080)=[{0x0, 0xfff9}], 0x1) semctl$SETALL(r3, 0x0, 0x9, &(0x7f0000000000)=[0x9]) semctl$GETPID(r3, 0x2, 0x4, &(0x7f00000000c0)=""/91) r4 = socket(0x2, 0x2, 0x0) ioctl$FIONREAD(r4, 0xc0206923, &(0x7f00000001c0)) semctl$SETALL(r1, 0x0, 0x9, &(0x7f0000000000)) 960.527508ms ago: executing program 7 (id=231): fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff}) r0 = socket(0x18, 0x1, 0x0) connect$unix(r0, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) getsockname$inet(r0, &(0x7f00000000c0), &(0x7f0000000000)=0xffffffffffffff35) semop(0x0, &(0x7f00000000c0)=[{}, {0x0, 0x2ff}], 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket(0x18, 0x1, 0x0) setsockopt(r1, 0x1000000000029, 0xa, &(0x7f00000001c0)='\x00\x00\x00\x00', 0x4) setsockopt(r1, 0x1000000000029, 0xb, &(0x7f0000000040)="8858cd06", 0x4) r2 = socket(0x18, 0x1, 0x0) shutdown(r2, 0xefe218e6f6e765d4) r3 = socket(0x18, 0x2, 0x0) connect$unix(r3, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) r4 = open(&(0x7f0000000040)='./file0\x00', 0x800, 0x24) r5 = open(&(0x7f0000000000)='./file0\x00', 0x9cab835cfdc52675, 0x0) r6 = socket$inet(0x2, 0x5, 0x8b) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) read(r7, &(0x7f0000000140)=""/159, 0x9f) writev(r8, &(0x7f0000000200)=[{&(0x7f0000000100)='s', 0x1}], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0xa011, r6, 0x0) ftruncate(r5, 0x79c8) sysctl$net_inet_ip(0x0, 0x0, 0x0, 0x0, &(0x7f00000011c0)="01", 0x1) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4) getsockopt$sock_int(r4, 0xffff, 0x1, &(0x7f0000000100), &(0x7f0000000140)=0x4) unlink(&(0x7f0000000040)='./file0\x00') msync(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) r9 = shmget(0x2, 0xc00000, 0x360, &(0x7f0000400000/0xc00000)=nil) shmctl$IPC_RMID(r9, 0x0) sendto$inet(r7, &(0x7f0000000240)="757ba3156d5de03f7cc506c676e83833938dd891b86d71784c35490ccde5", 0x1e, 0x486c20c45c19a60d, 0x0, 0x0) 952.185153ms ago: executing program 7 (id=232): ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, &(0x7f00000000c0)={0xa, 0x8000148, {[0x3, 0x0, 0x6, 0x6, 0x7fff, 0x8000, 0x1, 0x8, 0x7, 0x2, 0x9, 0x91c, 0x8, 0x180, 0x0, 0xd3, 0x76, 0xfffffffffffffff7], [0x5478b950, 0x5, 0x1004, 0xa, 0x1, 0x1, 0x9, 0x0, 0xffffffffffffffff, 0x3], [0x6, 0x9, 0x8, 0x9, 0xae, 0x1, 0x2], [0x3, 0x10801, 0x0, 0x2000000005, 0x2, 0x6], [{0x5ad, 0x7, 0xffeffffb, 0x6}, {0x2, 0x925, 0x3, 0x338}, {0x9, 0x7fffffff, 0x0, 0x7}, {0x8, 0x2, 0x1, 0x895}, {0x4, 0x3, 0x3, 0xc}, {0x1f, 0x4, 0x0, 0x7}, {0xe4, 0xffffff81, 0x1ff, 0x1}, {0x15, 0x10000, 0x8001, 0x5}], {0x52b, 0x4, 0xfffffffd, 0x8}, {0x38, 0xffffbfc0, 0x8}}}) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000200)="673bb5b8cc0c16ed08f1b8d24e2217f981aa6a78ef1d357e382526b1573271aeabc1b798e5806ce228c9299f7504ec", 0x2f}], 0x1) sysctl$kern(&(0x7f0000000140)={0x1, 0x29}, 0x2, 0x0, 0x0, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000001480)=@file={0x1, './file0\x00'}, 0xa, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="14"], 0x20, 0x401}, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x18, 0x1, 0x0) close(r0) socket(0x18, 0x2, 0x0) sendmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x806) sysctl$net_inet_ip(&(0x7f0000001080)={0x4, 0x2, 0x0, 0x15}, 0x4, 0x0, 0x0, 0x0, 0x0) 893.929954ms ago: executing program 7 (id=234): recvmmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)={&(0x7f0000000240)=@un=@file={0x0, ""/529}, 0x52, 0x0, 0x0, 0x0}, 0x4000}, 0x10, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0x1f1, &(0x7f0000000480)={@empty, @local, [], {@ipv6={0x86dd, {0x1, 0x6, "c49d5f", 0x1bb, 0x16, 0xf4, @ipv4={'\x00', '\xff\xff', @broadcast}, @empty, {[@dstopts={0x33, 0x2, '\x00', [@ra={0x5, 0x2, 0x800}, @ra={0x5, 0x2, 0x6}, @enc_lim={0x4, 0x1, 0x4}, @jumbo]}, @fragment={0x6, 0x0, 0x6, 0x0, 0x0, 0x7, 0x66}, @dstopts={0x89, 0x1, '\x00', [@padn={0x1, 0x2, [0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x7}, @pad1]}, @fragment={0x1, 0x0, 0xf, 0x1, 0x0, 0x6, 0x68}, @routing={0x50, 0xc, 0x0, 0x2, 0x0, [@loopback, @mcast1, @rand_addr="faf068dab9ef16e3ace51d55d22c30fe", @rand_addr="ff592ada191a2bb21ec9d2b744df7076", @ipv4={'\x00', '\xff\xff', @local={0xac, 0x14, 0x0}}, @ipv4={'\x00', '\xff\xff', @broadcast}]}, @hopopts={0x29}, @fragment={0xf0, 0x0, 0x6, 0x0, 0x0, 0x14, 0x66}], @generic="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"}}}}}) sendmmsg(r0, &(0x7f0000000080)={0x0}, 0x6a, 0x0) 892.399761ms ago: executing program 1 (id=237): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="28000000ffff000001"], 0x28}, 0x0) ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x0, 0xb3f, {[0xfffffbfffffffffb, 0x0, 0x9, 0x100200000, 0x6, 0x0, 0xdf60, 0xfffffffffffffffe, 0x0, 0x2f01, 0x93, 0x3, 0x3, 0x200000000002, 0xf, 0x4, 0xfffffffffffffffe, 0x400000000100], [0x4, 0x80000001, 0x6, 0x525, 0x5e, 0x200000000207f98, 0x80000000000001fe, 0x0, 0x0, 0x9], [0xa, 0x8000, 0x3ffffffe, 0x0, 0xb, 0x11000, 0xffffffff00000000], [0x104, 0x1fffffffffb, 0x7ffffffffffffffc, 0x100000000, 0xfffffffffffffffe, 0x1], [{0x0, 0x6, 0x0, 0x7d02}, {0xfffc, 0x22, 0x5, 0xfffffffffffffff9}, {0x8000, 0x0, 0xffffffbe, 0x80}, {0x3, 0x80004, 0x5, 0xffffffffffffffff}, {0x0, 0x2, 0x7f, 0x6}, {0x0, 0x9, 0x20007, 0x2000000000000002}, {0x400, 0x5, 0xfffffff9}, {0x0, 0x100, 0x0, 0x8}], {0x1, 0x0, 0x7, 0x3}, {0xfbfe, 0x3, 0x6d5, 0x4}}}) r2 = kqueue() kevent(r2, &(0x7f0000000000), 0x3ff, 0x0, 0x8000800, 0x0) recvmmsg(r0, &(0x7f0000000000)={0x0}, 0x10, 0x0, 0x0) r3 = open(&(0x7f0000000100)='./file0\x00', 0x80000000000206, 0x0) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x66}) r4 = syz_open_pts() close(r4) r5 = syz_open_pts() ioctl$TIOCSETA(r4, 0x802c7414, &(0x7f0000000340)={0x8, 0x5, 0x719, 0xffffff8c, "08ed95990000000000000000ffffffffffffffe6", 0x4, 0x4}) ioctl$TIOCSFLAGS(r4, 0x8004745c, &(0x7f00000000c0)=0x1) writev(r4, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) r6 = getuid() getsockopt$SO_PEERCRED(r3, 0xffff, 0x1022, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0xc) fchown(r5, r6, r8) readv(r5, &(0x7f0000000380)=[{&(0x7f0000000000)=""/18, 0x12}], 0x1) r9 = semget$private(0x0, 0x4, 0x28c) semop(r9, &(0x7f0000000000)=[{0x1, 0x2, 0x1000}, {0x1, 0x7, 0x1000}], 0x2) semctl$IPC_SET(r9, 0x0, 0x1, &(0x7f00000001c0)={{0xf, r7, r8, 0x0, r8, 0x1a0, 0xa03}, 0x1, 0x5, 0x100000001}) ioctl$TIOCSPGRP(r3, 0x40047477, &(0x7f0000000040)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) open(&(0x7f0000000000)='./file0\x00', 0x411, 0x50) ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f0000000180)={'tap', 0x0}) 892.130869ms ago: executing program 7 (id=238): open(&(0x7f00000010c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x615, 0x84) (async, rerun: 64) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc0e99db6de761f86, 0x0) (async, rerun: 64) rename(&(0x7f0000000fc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) symlink(&(0x7f0000000300)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000440)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) mkdir(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x51) (async, rerun: 64) openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) (rerun: 64) r0 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000dc0)='./file0\x00', r0, &(0x7f0000000ec0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async, rerun: 64) rename(&(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async, rerun: 64) r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000005c0)='\x00', r1, &(0x7f0000001780)='./file1\x00') 680.801623ms ago: executing program 7 (id=240): sysctl$hw(&(0x7f0000000440)={0x6, 0x12}, 0x2, 0x0, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)="76e5eac907f9ccf7a251ceddcec7d6aa45cffe2c63a56077123a276d3ba4e9d17eb3eb5db12a3783a8e0620d357de1fe04fa9465b5bd1286e9624dec06a00c222f", 0x25}], 0x1) rename(&(0x7f0000000100)='./file0\x00', 0x0) readlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000300)=""/4096, 0x1000) sysctl$kern(0x0, 0x0, &(0x7f0000000380)="d635d193c28030954f5c28352d7a2adbb6c61e795f08f832cadb22afa34d00e429ba19a40eeb5d89d3c64f02d1216fa7fd82d6356fa1cf2ea4d887e04c1ab966cb0c1c43a6342e54c3ccad38040896f4f4d87b45623bf27a71881365e9ca86cb8b7c9488ddc5f408206f9076074f462a41634347f6ae324ed84e8825ffd13e14bd3a6dc9c22676f06c5e0ef9981ad89dde98079bab0b11562a8969412a60b7d84245ec5600719a88e645198373ae579cc5ec968ffc20ec0c063fa661ff13702406aee0ccb9b48151d1c2fe3e812de473f6da005c9731341f7f829f9564f5570a16540063bd4c6751d89207c9084123d67d96679da5193580cb6c845dacb045d164408c9e82aee08d9630dbb2f1567a0a9afe8a8321bddbcd356950758554c77e1603626c0718369f31ad54c909ba", &(0x7f0000000080)=0x12e, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xa7210e10bc3c9de9) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) fchdir(r0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f00000000c0), &(0x7f0000000040)=0xc) sysctl$kern(&(0x7f00000000c0)={0x1, 0x4e}, 0x3, &(0x7f0000000100)="71f95f84cf71b59c7afec37582", &(0x7f0000000080)=0x2, 0x0, 0x37) sysctl$kern(&(0x7f0000000000)={0x1, 0x2f}, 0x2, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0xff, &(0x7f0000001300)={@broadcast, @empty, [], {@generic={0x8888, "95dae471759c69c144637ddd5693c4724d377a67b9d4e6bb23178fad07ce29f94d43ddd4ea98b627b619abd1fdef35232289d54e396d7fa2443958a7c858080000007955a0bc530b5f98149b14969aa0b21586bf54190c5ac554705fc9ce4a1257f8aba8ed1b7dcbe2faee0b80c807442aa47e760625bf1dcff51b1515ac1b20e29bd1c34fc425a0243c6c7ea931053496b4552c109f9ad6f45370021b6bd188c8cfdf1fdf743bc86e136a1e767f875184c3ce4862a0d93862cf5752f51d180d536b5ed5e3d1f15fde1b187fdf927f72a25de56119aff5516c1b01e8c02741baffc2ef1fb58000"/241}}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='.\x00') mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x4, 0x7010, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0xc0e99db6de761f86, 0xffffffff) syz_emit_ethernet(0x5e, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaa000000282b00fe8000000000000000000000000000bb000000000000000400000000000000013a04000700000000ff010000000000000000000000000001ff020000000000000000000000000001"]) rename(&(0x7f0000000140)='./file0/../file0\x00', 0x0) syz_emit_ethernet(0x5a, &(0x7f0000000000)=ANY=[]) 673.930486ms ago: executing program 0 (id=241): r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x86) ioctl$WSKBDIO_GETMAP(r0, 0xc010570d, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0xb, 0x7, 0x3, 0xaf, 0x9}]}) fcntl$setown(r0, 0x6, 0xffffffffffffffff) close(r0) ioctl$FIONBIO(r0, 0x8004667e, &(0x7f00000000c0)=0x7) shutdown(r0, 0x2) close(r0) lseek(r0, 0x68, 0x1) fchflags(r0, 0x1) truncate(&(0x7f0000000100)='./file0\x00', 0x2) poll(&(0x7f0000000140)=[{r0, 0x4}], 0x1, 0x311) pwrite(r0, &(0x7f0000000180)="c88c8a0ce8aa5c5999d843034b94175c2ce36ddd2d013f7ab312b95c9a2d7898120f5f91ca8fc990f59db9d15222fbf3f8fdfec6d8591219472d692b4379ca34bd37838ae341d7970c963197e6a143445b49c737fb3f84d604e7fa93df4dfdc80ea3594fa55f8504fd8d7c4c9050e5a4ac266bcd6673b5a2158d200fa39ac0c58ce45996e26652984662bbc68ba912b659f885bbe60cddd42235ff104ea05e46fb7034164550981104ef95c5c0eb26e621b8742ab1cc5a533d754bc530835728f27c469c6f40ec8966840556439eb2ed5671487baccde48e038c9f", 0xdb, 0x6) r1 = socket$unix(0x1, 0x0, 0x0) read(r0, &(0x7f0000000280)=""/172, 0xac) pwritev(r0, &(0x7f0000000440)=[{&(0x7f0000000340)="3025af15d3e4cdda9aee478b50434d0d693070bb9d8467e6d485135bc212ba9fcded7827e7f62555a63a57f0240f13c55206528d89ceea256c587a1ae518706347bd75babf46bd421281a748bfac88c6388a46f3976f62666217d829cd9333502a3fa295d584e9e42e197eba6e4f9a11ccc4518ed79b489b721331c2780ccad2c2e78e02c22bed4051381ea36ee0fe3da42f957f4450ad1cf902d38e05e621a4cdb04659a145ebfa9b8c9d1e283d23d0003f104929e5c62982203be3e53fb082a5927c23407dcfa01432", 0xca}], 0x1, 0x2) connect(r0, &(0x7f0000000480)=@in6={0x18, 0x3, 0x68f, 0x8ca}, 0xc) getsockname$unix(r1, &(0x7f00000004c0)=@file={0x0, ""/512}, &(0x7f0000000700)=0x202) bind$unix(r1, &(0x7f0000000740)=@file={0x1, './file0\x00'}, 0xa) r2 = socket$unix(0x1, 0x5, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$KDMKTONE(r0, 0x20004b08, &(0x7f0000000780)=0xc) ioctl$DIOCMAP(r0, 0xc0106477, &(0x7f0000000800)={&(0x7f00000007c0)='./file0\x00', r2, 0x1}) r4 = accept$unix(r1, 0x0, &(0x7f0000000840)) execve(&(0x7f0000000880)='./file0\x00', &(0x7f0000000940)=[&(0x7f00000008c0)='[$-\x00', &(0x7f0000000900)='\x00'], &(0x7f0000000b80)=[&(0x7f0000000980)='\\\x00', &(0x7f00000009c0)='!+\x00', &(0x7f0000000a00)='/\x17 *\x00', &(0x7f0000000a40)='\x00', &(0x7f0000000a80)='\x7f\x00', &(0x7f0000000ac0)='\xc0\x00', &(0x7f0000000b00)='\\!\x00', &(0x7f0000000b40)='\x00']) r5 = getpid() getsockopt$sock_cred(r2, 0xffff, 0x1022, &(0x7f00000010c0)={0x0, 0x0}, &(0x7f0000001100)=0xc) getsockopt$SO_PEERCRED(r2, 0xffff, 0x1022, &(0x7f0000001140)={0x0, 0x0, 0x0}, 0xc) r8 = getpgrp() getsockopt$SO_PEERCRED(r4, 0xffff, 0x1022, &(0x7f0000001180)={0x0, 0x0}, 0xc) sendmsg$unix(r0, &(0x7f0000001240)={&(0x7f0000000bc0)=@abs={0x0, 0x0, 0x1}, 0x8, &(0x7f0000001000)=[{&(0x7f0000000c00)="51b73a5719e927f83bd94678f188e62f3ef7d56456237ca7a605260add0932c4f191c395338b9e3587a220f86fd0cdb545c059d9f33748f7b6b1c46206f106827b33fc93fc4f452b121897c4e9243bdb4343fc1a4e8241a03781898bd4ad7e9c5064beb8df4134e1c33c8f3fd61e0ad95f1ade94c076ff", 0x77}, {&(0x7f0000000c80)="67ffbd91876c31b521cd2f3af550eb42db12660bf0ec7bbcf8c3e0297e88613ed4cce9ba55d14ac9bc199b29eaf2ac787d1631c82857bd831066e33202f5cb0280a0da5a4aeacd730fa94d4e9d9352da02a0ecf92ca0d056866675f0550b7d23ebfe", 0x62}, {&(0x7f0000000d00)="bf3b974c22fbab62a3e0df0c60d9d5973519ad9f08a9c4a6e351d872438e9158606adb92f5c9f20d729b9ddff46e0cef2c8e29e008ea4c3a5237de6e1bfdda6c1549bdb144b4f035496cf893fea625a5a5d722543ba1fe5e601d16a4e3235d111eed6364c8baf274ed264b3008b3b30eff854ec10279", 0x76}, {&(0x7f0000000d80)="db5871390ad51ed767e1622558715242df47", 0x12}, {&(0x7f0000000dc0)="9bd600bc8b48a4f78fc4d9743f60cfbda5be1e0bcd3fae69028a9b1e3b58b56b80462e846c1b8eac08b3c785f46575a43098daef0f4f94f8a38cdddded0233aa27c4be1ece92b8fce4da22925689dc36e441217ddd18d49871d827e77ffae1a3ef630d8f5407da5eb2b079eb60eacaf2", 0x70}, {&(0x7f0000000e40)="274abc031719c39052a964cc2b4145f324cdb2f8a36a94b868b664908d6c5c397e8326ee416e69f94f1eceffb4de7084e3c2e69385f31577b99f05713a39573157328c16be28dce4164fc4083b17dbac7047a948e105cac1c943037e706fe6d92afab3a77e3e93c118a25e78f8714645692381cd0ff403cbd9844ada917c2b5fb6bfa5daeba1162feb21d162c1f0045dce3d", 0x92}, {&(0x7f0000000f00)="d519f9470652a9bda35fc79280217c2f96c54b7b9438d09f8a5b03df64a733e5b1f9414ce39e5fa67103c261810017ddf133c5e01db94e99e00cdc1dec299e163944c45f6778d7e128", 0x49}, {&(0x7f0000000f80)="dd8671fa31c59e5e21965ffa40bea03c5b71d84b9759d1894e7fb8722b5b94c3b02236", 0x23}, {&(0x7f0000000fc0)="9cbbc6", 0x3}], 0x9, &(0x7f00000011c0)=[@cred={0x20, 0xffff, 0x0, r5, r6, r7}, @cred={0x20, 0xffff, 0x0, r8, r9}, @rights={0x18, 0xffff, 0x1, [r3]}, @rights={0x20, 0xffff, 0x1, [r0, r3, r2, r2]}], 0x78, 0x404}, 0x0) 673.381794ms ago: executing program 2 (id=242): setrlimit(0x8, &(0x7f0000000100)={0xc, 0x6c}) r0 = syz_open_pts() syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @local, [], {@ipv4={0x800, {{0x9, 0x4, 0x0, 0x2, 0x38, 0x0, 0x4000, 0x0, 0x1, 0x0, @multicast2, @remote={0xac, 0x14, 0x0}, {[@timestamp={0x44, 0x10, 0x9, 0x1, 0xc, [{[@broadcast], 0xb}, {[], 0x4}]}]}}, @tcp={{0x0, 0x2, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x2, 0x0, 0x9}}}}}}) close(r0) r1 = syz_open_pts() ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000000)={0x5, 0xa, 0x400101, 0x5ffffd58, "9d1cff7f00052b961985921707700000ed009700", 0x203fb, 0xe32b}) openat$vnd(0xffffffffffffff9c, &(0x7f0000000000), 0x20689, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x2, 0xf9, 0x2, 0x6df}, {0x8, 0x5, 0x4, 0xa3}]}) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket(0x2, 0x2, 0x0) r3 = dup(r2) setsockopt$inet_opts(r3, 0x0, 0x13, &(0x7f0000000040)="fd0cc085", 0x4) connect$unix(r2, &(0x7f0000000000), 0x10) writev(r0, &(0x7f0000000400), 0x2c) 586.184332ms ago: executing program 2 (id=243): fcntl$lock(0xffffffffffffffff, 0x9, 0x0) r0 = openat$null(0xffffffffffffff9c, 0x0, 0x10091, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x3, 0xffffffffffffffff) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x200000000000c, 0x0, 0x0) syz_open_pts() r1 = semget(0x0, 0x4, 0x283) semop(r1, 0x0, 0x0) r2 = semget(0x2, 0x5, 0x300) close(r0) semctl$GETALL(r2, 0x0, 0x6, &(0x7f0000000280)=""/218) 585.655758ms ago: executing program 2 (id=244): msgsnd(0x0, &(0x7f0000000a80)=ANY=[@ANYRESOCT], 0x401, 0x0) r0 = msgget$private(0x0, 0x40) msgrcv(r0, &(0x7f0000000100)={0x0, ""/126}, 0x86, 0x2, 0x0) setrlimit(0x8, &(0x7f0000000080)={0xe, 0x51}) r1 = syz_open_pts() close(r1) r2 = syz_open_pts() ioctl$FIOASYNC(r1, 0x80047469, &(0x7f00000000c0)=0x5) getrlimit(0x0, &(0x7f0000000000)) readv(r2, &(0x7f0000000680)=[{&(0x7f0000000380)=""/227, 0xe3}], 0x28d) writev(r1, &(0x7f0000001880)=[{&(0x7f00000004c0)="33f57cbd9b7a3dce024abd0a4458ebe67b96abcc9815f01b7384118224bac83dd8e2f9bac9fcf5581b498f230fc2c56937691faa0a6fbc6ec7d970f3e70feb02fcbb032f1cd7719778b73a00610bbc2cda7a2357f162165a18ec7a8361d61e5f202c9c6839ada531b7f39a0c09140e3052f9116a0a4d3d422542a855d3257c406d5788afe863c7854a8c4906fe9008dcaf7540ee", 0xfdf5}, {&(0x7f00000001c0)="4ac86e07b6f5cf353ce773366d0d1462532e49bb326d1951a16fadedf93ecbca2089c60264be4f5368f05fb89ffcee8bcc1f30c0cd028f53323eed00", 0x3c}, {&(0x7f00000002c0)="8072f965e5368d8a2ce261ea12ce28665881a3c985", 0x15}], 0x3) 585.277768ms ago: executing program 1 (id=245): ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000240)={0x2, &(0x7f00000000c0)=[{0x0, 0x1}, {0x1, 0x0, 0x0, 0x2}]}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x37}, 0x4, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x3, 0x0, 0x2e) (async) r0 = shmget$private(0x0, 0x800000, 0x95a999646a72d594, &(0x7f0000005000/0x800000)=nil) r1 = shmat(r0, &(0x7f0000001000/0x3000)=nil, 0x2000) (async) r2 = kqueue() socket(0x2, 0x0, 0x9) (async) kevent(r2, &(0x7f0000000080), 0xe46, 0x0, 0xa9f6, 0x0) shmctl$IPC_RMID(r0, 0x0) (async) shmdt(r1) (async) syz_emit_ethernet(0x5a, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6000000000242b00fe8000000000000000000000000000aafe80000003"]) (async) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) r3 = socket(0x18, 0x1, 0x0) setsockopt(r3, 0x1000000000029, 0xb, &(0x7f00000001c0)='\x00\x00@\x00', 0x4) (async) setsockopt(r3, 0x1000000000029, 0xa, &(0x7f0000000200), 0x0) mlockall(0x1) (async) sysctl$vm(&(0x7f0000000080)={0x2, 0xc}, 0x2, 0x0, 0x0, 0x0, 0x0) 584.838559ms ago: executing program 7 (id=246): r0 = openat$wskbd(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) fcntl$lock(r0, 0x9, &(0x7f0000000280)={0x6, 0x1, 0x7, 0x8000005}) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x11, 0x0, 0x2}, 0x6, &(0x7f0000000080), 0x0, 0x0, 0x0) execve(0x0, &(0x7f00000001c0)=[0x0, &(0x7f00000000c0)='/dev/speaker\x00'], 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = socket(0x1, 0x2, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x8, 0x4, 0x2, 0x1, 0x34, 0x64, 0x3, 0x6, 0x9d, 0x0, @local={0xac, 0x14, 0x0}, @broadcast, {[@rr={0x7, 0xb, 0x1a, [@local={0xac, 0x14, 0x0}, @loopback]}]}}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x20b, 0x8, 0x3fc, 0x4, 0x9}}}}}) ioctl$FIONREAD(r1, 0xc0106924, &(0x7f00000001c0)) r2 = kqueue() ioctl$FIONREAD(r1, 0x4004667f, &(0x7f0000000200)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r3, &(0x7f0000000880)={&(0x7f0000000000)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000700)=""/265, 0xfd}], 0x1, 0x0, 0xfffffffffffffd8d}, 0x6}, 0x10, 0x40, 0x0) close(r3) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000000200)=@file={0xd570d0466b6018f, './file0\x00'}, 0xa) listen(r4, 0x0) execve(0x0, 0x0, 0x0) accept$unix(r4, 0x0, 0x0) kevent(r2, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) r5 = socket(0x2, 0x2, 0x0) ioctl$FIONREAD(r5, 0x80206919, &(0x7f00000001c0)) r6 = getpid() fcntl$setown(r2, 0x6, r6) sysctl$net_inet_udp(&(0x7f0000000000)={0x4, 0x2, 0x11, 0x5}, 0x4, &(0x7f0000000080)="85026f0dba282eda362819ca950e95ad53008e5557af1d9b059f54e4da43cc5daabab857917ef82a1b8e9ccf1e1b64c412cc112fb796103bfad079232960c93dd5d699f02e145d6bbc2b2d590c0bed64142914c9bb55d8cc375d6854293c942411e57f5e829932b153fa58", &(0x7f0000000100)=0x6b, &(0x7f0000000140)="f2482c4a782e8fb554e0a0a28169623b294d240aa64eb07539dd6f16", 0x1c) 524.112536ms ago: executing program 1 (id=247): r0 = geteuid() r1 = getgid() setregid(r1, r1) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x1011, 0xffffffffffffffff, 0x0) socket$unix(0x1, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = kqueue() setrlimit(0x8, &(0x7f0000000980)={0x8, 0x56}) sendmsg(0xffffffffffffffff, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x5) r4 = syz_open_pts() close(r4) syz_open_pts() ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f0000000340)={0x2, 0xe, 0xffffffff, 0x1, "ff14e7130b1e588ba6294000", 0x40, 0x3effc}) writev(r4, &(0x7f0000000700)=[{&(0x7f0000000080)="34eb4cd59e8456ebc0881681c60e1cd9e0bf01b618b3cb934394c5951c1db0fd943a", 0xff99}], 0x1) r5 = kqueue() kevent(r5, &(0x7f00000000c0)=[{{r4}, 0xfffffffffffffffe, 0x25, 0x20000000, 0x1, 0x9}], 0x3, 0x0, 0xc8aa, 0x0) ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f00000019c0)={0x3, 0xfffffffe, {[0xfffffffffffffffc, 0xa, 0x5, 0x100000000, 0xffffffffffffffff, 0x80008000, 0x8000002e, 0x3, 0xffffffff, 0x2f01, 0x2, 0x3, 0xfffffffffffffffe, 0x2, 0x6, 0x4, 0xfffffffffffffff5, 0x100], [0x81, 0x5, 0xfffffffbfffffff8, 0x0, 0x1, 0x80000000, 0x800ee4, 0x0, 0x0, 0x800000047], [0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0xfffffffffffffffe], [0x3, 0x1ffffffffff, 0x0, 0x100000002, 0xfffffffffffffffe], [{0x0, 0xc, 0x36a, 0x7d06}, {0x2, 0x2, 0x1, 0x3}, {0x0, 0xfffffffd, 0xfffffffd, 0xffc}, {0x1008, 0x0, 0x6, 0xfffffffffffffffe}, {0x4, 0x400, 0xd, 0x40}, {0x7ffe, 0x2000, 0x40003, 0x1}, {0x6, 0x1, 0x7, 0x7}, {0x9, 0x95b, 0x200, 0xf}], {0x9b8f, 0x5, 0x0, 0x849}, {0x203, 0x10, 0x1, 0x1}}}) r6 = msgget$private(0x0, 0x0) msgrcv(r6, 0x0, 0x0, 0x0, 0x800) kevent(r3, &(0x7f0000000080), 0xe4a, 0x0, 0xa9fa, 0x0) sysctl$kern(&(0x7f00000000c0)={0x1, 0x3f}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x2000, 0x0, 0x2a) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', r0, r1, 0x6) 522.237925ms ago: executing program 0 (id=250): mknod(&(0x7f0000000280)='./file0\x00', 0x20, 0x0) r0 = syz_open_pts() fcntl$lock(r0, 0x9, &(0x7f0000000040)={0x3, 0x0, 0x40000000000000, 0x1000300000000}) flock(r0, 0x1) flock(r0, 0x3) fcntl$lock(r0, 0x8, &(0x7f0000000000)={0x1, 0x0, 0x6, 0x100000000}) execve(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) 372.928665ms ago: executing program 1 (id=251): clock_getres(0x52060998a7d5b004, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0xe8, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000240)={@random="d59aa4594d65", @broadcast, [], {@ipv4={0x800, {{0x9, 0x4, 0x3, 0x2, 0x38, 0x65, 0x400, 0xb0, 0x3, 0x0, @remote={0xac, 0x14, 0x0}, @broadcast, {[@rr={0x7, 0x3, 0x8}, @timestamp={0x44, 0xc, 0x9, 0x3, 0x7, [{[], 0x4}, {[], 0x3}]}]}}, @tcp={{0x0, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x400, 0x0, 0x636}}}}}}) socket$inet(0x2, 0x2, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0xe8, 0x0) ioctl$TIOCSETAF(0xffffffffffffffff, 0x802c7416, &(0x7f0000000000)={0x4, 0x100001, 0x8, 0x545, "225e7b88650000f400", 0xfffffff9, 0x400}) sendto$unix(0xffffffffffffff9c, &(0x7f0000000000)="b10005040000040000", 0x9, 0x400, 0x0, 0x28) r1 = socket(0x11, 0x3, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendto$unix(r1, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a378343712051eea040000000000", 0xb1, 0x0, 0x0, 0x0) ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x0, 0x9, {[0xfffffbfffffffffb, 0x1, 0x2, 0x100200000, 0x6, 0x7, 0xdf60, 0xffffffffffffffff, 0x0, 0x6, 0x93, 0xfffffffffffffff8, 0xffffffffffffffff, 0x200000000002, 0xd, 0x4, 0xfffffffffffffffe, 0x400000000100], [0xfffffffffffffffe, 0x80000001, 0xfffffffffffffffa, 0x20200001, 0x5e, 0x100000000007b98, 0x800, 0x9, 0x0, 0xfffffffffffffffe], [0x100000001, 0x8000, 0x40000000, 0x0, 0xb, 0x11000, 0xffffffff00000000], [0x9, 0x1fffffffffb, 0x80000001, 0x4000000, 0xfffffffffffffffe, 0x90000000], [{0x0, 0x0, 0x0, 0x7d06}, {0x9, 0x22, 0x5}, {0x4, 0x0, 0xfffefffe, 0x280}, {0x3, 0x4, 0x5, 0xffffffffffffffff}, {0x0, 0x2, 0x7f, 0x8}, {0x0, 0x9, 0x9, 0x2000000000000000}, {0x5, 0x0, 0xfffffff7, 0xb}, {0xe, 0x100, 0x1, 0xb}], {0x1, 0x8, 0x80000006, 0x3}, {0xfffe, 0x6, 0x6d5, 0x6}}}) r2 = kqueue() r3 = syz_open_pts() syz_open_pts() ioctl$TIOCSTAT(r3, 0x20007465, 0x0) kevent(r2, &(0x7f00000000c0), 0x138, 0x0, 0xffffffff, 0x0) r4 = fcntl$dupfd(r0, 0x3, 0xffffffffffffffff) ioctl$TIOCFLUSH(r4, 0x8020690c, &(0x7f0000000100)=0xfffffffa) sendsyslog(0x0, 0x0, 0x0) 371.83636ms ago: executing program 2 (id=252): open(&(0x7f0000000080)='./file0\x00', 0x18289, 0x190) r0 = open(&(0x7f0000000240)='./file0\x00', 0x615, 0x0) ftruncate(r0, 0x8531) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000400001803c1, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f00000006c0), 0xf0f75}], 0x1, 0x0) sysctl$kern(&(0x7f0000000000)={0x1, 0x58}, 0x2, &(0x7f0000000100)="a5b70a1a19e18450decdf3f0f608f14d784b02fa01f2e852d30036d8f11f2304dc17be3d47795888fdc251632339e8580701fbb18f2277af559b3ebd7966a78ba65799f0e0d0a0b8c16a8f908d2502f1e774e6df4ccb830c8f437b18ed4beeb84c46761f8b57a034f26562281cc4cc3d1da8f53ce774388f7297978a757f02cce796f81e0eab478f6a99f745e6a8be2f806c9d053657e237d7fdeeaa7f3aadb90c706deb47724375680761f847533df27e5ec8a80c95b36dbe753553ef9982744a863000bb7dfe1c9337cc8c591e6fdafa772fb49898ea0f9292da126fedabb200", &(0x7f0000000040)=0xe1, &(0x7f0000000280)="62e85cf62d71c3662d40c8cb061606adb97822cb9c9ace196316b8492eda787aab2e6c877aba8a94763f7c937b4afd2ec3513f99ad44a1e289dd5a5ac086b5915f5abec6ae70a7b2b79c3a58b4bf773a2d4c07838cb6c5b8e03b7ceab139d0c60a6cacd5802f8bc340d4bb48411654724a4e5349831048e99898e1b07a29667947ecbe6dcff33adcef6a7a921c484d30e4cf4352e1173cd042453bd13cd2e49da470cd185e164945fd504bf299442e34f8a006c9e93adc03bd00dd86e954f32808213070ef7e96c908ce143c86423da7496d7109883a8ce36894cbb35c5344b96f49ef5bc6a962b524", 0xe9) 367.292636ms ago: executing program 5 (id=253): syz_emit_ethernet(0x22, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff08004d"]) syz_extract_tcp_res(&(0x7f0000000000), 0xe, 0xe) 367.072021ms ago: executing program 3 (id=254): r0 = socket(0x18, 0x1, 0x0) setsockopt(r0, 0x1000000029, 0x35, &(0x7f0000000040)="03000000", 0x4) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x100000000000000, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) unveil(0x0, &(0x7f00000004c0)='c\x00') mprotect(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0) sysctl$kern(&(0x7f0000000140)={0x1, 0x9}, 0x2, &(0x7f0000002480)="71f91eca", &(0x7f0000000080)=0x4, 0x0, 0x0) 366.19837ms ago: executing program 5 (id=255): open(&(0x7f0000000380)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf79e5) select(0x40, &(0x7f0000000080)={0x7fffffff, 0x5, 0x5, 0x4, 0x80000000, 0x2000000000000001, 0x200000000000000, 0xfffffffffffffdff}, 0x0, 0x0, 0x0) mprotect(&(0x7f0000041000/0x2000)=nil, 0x2000, 0x2) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x201, 0x80) pwrite(r0, &(0x7f0000000100)="93d4", 0xfffffeca, 0x5) 271.058944ms ago: executing program 5 (id=256): ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0x3, [{&(0x7f0000ffd000/0x3000)=nil, &(0x7f00002a1000/0x3000)=nil, 0x200007fffffffffd}, {&(0x7f0000e4e000/0x4000)=nil, &(0x7f0000417000/0x3000)=nil, 0xfb}, {&(0x7f00003d9000/0x2000)=nil, &(0x7f0000aa5000/0x2000)=nil}, {&(0x7f0000318000/0x2000)=nil, &(0x7f00000d6000/0x1000)=nil, 0x1}, {&(0x7f000024d000/0x1000)=nil, &(0x7f0000188000/0x2000)=nil, 0x7f}, {&(0x7f0000034000/0x1000)=nil, &(0x7f0000095000/0x3000)=nil, 0x7}, {&(0x7f000034a000/0x4000)=nil, &(0x7f00000bf000/0x3000)=nil, 0x8}, {&(0x7f0000096000/0x2000)=nil, &(0x7f0000e4d000/0x3000)=nil, 0x403}, {&(0x7f000032e000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil}, {&(0x7f00004e5000/0x7000)=nil, &(0x7f0000632000/0x4000)=nil, 0x10000}, {&(0x7f0000196000/0x4000)=nil, &(0x7f00004e6000/0x3000)=nil, 0x8}, {&(0x7f0000074000/0x4000)=nil, &(0x7f00002a1000/0x2000)=nil, 0xffffffff}, {&(0x7f000055e000/0x2000)=nil, &(0x7f0000689000/0x2000)=nil, 0x6}, {&(0x7f00001c8000/0x2000)=nil, &(0x7f000053a000/0x1000)=nil, 0xfffffffffffffffa}, {&(0x7f0000318000/0x3000)=nil, &(0x7f000068b000/0x2000)=nil, 0x22000001000039f7}, {&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000073000/0x7000)=nil, 0xb}], './file0\x00', 0xfffffffa}) r0 = fcntl$dupfd(0xffffffffffffff9c, 0xa, 0xffffffffffffffff) flock(r0, 0x8) sysctl$kern(&(0x7f00000000c0)={0x1, 0x27}, 0x4, &(0x7f0000000000)="71f91e3471ac0058bc5a91501d942400b5e1a0757cb9af769c7afec37082", &(0x7f0000000080)=0x306, 0x0, 0x2e) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) mmap(&(0x7f00005ce000/0x1000)=nil, 0x1000, 0x1, 0x10, r1, 0xb389) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mprotect(&(0x7f0000713000/0x1000)=nil, 0x1000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$ddb(&(0x7f0000000380)={0x9, 0x5}, 0x2, 0x0, 0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x1, 0x7}, 0x8) r2 = openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000000040), 0x90, 0x0) r3 = getpid() getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f00000004c0)={0x0, 0x0}, 0xc) r5 = getegid() setgid(r5) sendmsg$unix(r2, &(0x7f0000000540)={&(0x7f00000002c0)=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000000480)=[{&(0x7f0000000300)="d1fe6f428dccf3e879b04d604d6602e982ef3c44c32fb80bc7a8784a1af1a1ebfdc850e20244b8d5024a8a6ef6450e88bf2f5106f3dd68c933e27f3ccdb21b97187f62c056c9b9531b4601e823a41c78f2e8f502985f97ee27c48ec08077516e12e97ece3c1c2c9e4399", 0x6a}, {&(0x7f00000003c0)="d876ace082c28f4d8047488ccf4af3ae70b680af75b8da0f47a09ef99c341997c26da9814a3bb21ac1cea60adab0f80ef74ef51c5c55dc03c27a36693df017db2e4e6b32f63cdede73ac5bf620ee7d9d21160f5f19b156f7ef760e04e930c7ff4a9afa7a07e60ce6a854ed0badbf6c85c17c59a006c6064ff742be23169428c9530c29a5eea5af993cbf2ac9fe", 0x8d}], 0x2, &(0x7f0000000500)=[@cred={0x20, 0xffff, 0x0, r3, r4, r5}], 0x20, 0x2}, 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) getpeername$unix(0xffffffffffffffff, 0x0, 0x0) 270.366099ms ago: executing program 6 (id=257): sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="89000000ffff000001"], 0x9}, 0x0) syz_open_pts() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/240, 0xf0}, 0x0) sendmsg(r0, &(0x7f0000000380)={0x0, 0x32c, 0x0, 0x0, &(0x7f0000000000), 0x90}, 0x0) r2 = socket(0x18, 0x1, 0x0) close(r2) connect$unix(r2, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) getsockname(r2, &(0x7f00000000c0)=@un=@abs, &(0x7f0000000100)=0x8) r3 = socket(0x18, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x2, 0xffffffffffffffff) close(r4) setrlimit(0x8, &(0x7f0000000980)={0xb, 0x54}) syz_open_pts() 269.049932ms ago: executing program 2 (id=258): r0 = socket$unix(0x1, 0x2, 0x0) r1 = accept$unix(r0, &(0x7f0000000000)=@file={0x0, ""/56}, &(0x7f0000000040)=0x3a) sendmsg(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="5906e6cc11a45088aa97bc4792d9e096969a6bb3c1ecec77bbdd6b47e35783f7c9cb10067b28c4c9d339eccaa5fed903e4fb1658a899b43eaaa9", 0x3a}, {&(0x7f00000000c0)="3141c50064efb2c87865b8d03d2631cc6f220ef0f92acc819aa3c5460e9867f68a2bece85b8a0d992003f6037256aa33c5af20530109da96182d07b32a421e09cd313656ba1557c879ffb6a9405e7b0437d71f890a91af194ca4484f209a1a2c41d5a19b755f755dc6a94e67b2c1a49cd79ad51ec8dc0fef079aa1ada0e6a4f8636b58dab6b4266cce40df3df46069ce97738e2a1acb095f6724f03945b3ec35cb9ce65faebcb3924e5abeeb6e7da48d355a4e5934d7c43f82717040b3d893632d", 0xc1}], 0x2, &(0x7f0000000200)=[{0x30, 0xffff, 0x5, "b7bae3b33aa35b147599ac0cbd4213f6e56ff59ffcaa98bdc83e1149"}, {0x60, 0xffff, 0x4, "08f250e948aedde9248d701d10c50e0132dcb8257d1298dd681b23c0bdba43eb73da8459fbe8be3acdb86e1ecb78c5f16132ccb9f0a4618ca28f60f53a9f58c2050589a6d4609bce2ace895af6"}, {0xe8, 0xffff, 0x1, "69a78c8a178fb6d7f9dbf7c5e627ad4e4694d1fb5e28855b6cc233ddaec798f47b2b191e0017c1816615ac905a854ab95c0076fce85d469edb45e9d0fe2b73ce0fd3db0f608d61ebefafb83f35f7a94d01d5339ff4a0ee497430193bb5f387db3bacb2984d7bbec7d909ff5581a91027074923cf69802c1e3084ae779d8662da61009d18277db9a92f6de331495675f8c64c3499d6a3ba115f055db1c9e59804c3289433f1b8a4829ab37be2235a082b9dd63abe689126e7cc05f96a5443dc102f43d74c3e907bcf3a57addad89b39f3875356471d"}, {0x80, 0x1, 0x4, "d28a0001f7ab0e5c8ccde58da6dc1b1c690dd7434dbd97228e150c05cf99296f0817992f58d0131bd37ef82ef23c491abfa37168becbdd8f1ac6aba46f2b9ef7ea747861411d6c187f863843ce81730da68ce321a449edff1d0b74afcc945089bd1006343bab08b147"}, {0x1010, 0x1, 0xd, "4096e41b014678323eeba1e9ab7dd96b76132af9db244966dffd43a77555d8f36eef1733274f66c5ffcf11c3e9abe5fa6a3f9ef5fb3f73b5113e3302c105f901848057705e55dab27128946a59301acc0c65ced5dc6964c5d5ba1eddb8b05d60d0d718533f4d46ca3de24577a841636f19b7ea5bbe91447bdcc5838fe9c3a6049f52433a048119bf1719da55ab41370981c04fb167f453a2bb8f845fb7f9f6a0f455a71a540cf7d69ea58027016b5d7caf0b9f15deff54b4ac824dfc7935a9f567d146f78ca376418a19b136e3642f2202b6506a9f20a78d2e666cb0599343d9070fce4a4b4029e82f0d169d07821ec1fd0cf205a6b2490f68637b57476afd4472837050ce013de67215dc48459db8f538f66dddf7f80b5e59ec3ae77e7d783793fb6e96bb0e02f82e78f2bfd38f73d90a30707d48d3dfc04b49886ec460a8ce58b0de7a3ae51072e1850d43d69d14598ee66c461f17950faa1b75963f8dcf0e6dfbae4305f6a41ab85d955a896a49abdb8e9ff15c3ea3c7744d094dc1cc11cdef45d61bdf6c08e2023e9fe59086dcce8158fc73a7e8b262168d12a1a1e0da0dac3cd1afb7c5a61d88539447874c2ce75899d841cdd0ef1b31a7d01efd3b2ac60dd6f36b1bd769a9f788937d405081e885e2a1804f3a7e4fdcc30c398a39ab4c179fa7ab11351ef4fe9738f7b15a8aefe8639c9c30d9e606044c7723754acfdc58209a0812ac81e339d76b92f176c3ce588d57ef49fcf37a308cd480b9ae5c83d2c81134899c6837fd51d6ae60e0bf96a4ab7af4cfffdd836c3b1e7fa2f434bdc6094d7cf2f8a07410d4069874f99c54d709f8862f16e70f79c0221e71b44655f072016d8d9749d3fb4b05211319f8462297f48a674e5d8418fb040baf625db79af2c2c640c204a2978611f3f9a7c77b0c8e3bd15b53211a20364161eb8987614fd9c95bc9819a248aaaf86cd1bcace7737b11ae181c8a7cd7a7314cf8e5acfcbf70ec178f149a2cfd771f795f61ab437df831b1fc5f52456e7b177c41e654203bc81da60268fa9668b619b77ac1422c0c66510ea064d8da8382f6f0f1a7fa7f458f7df0a828b085ab8473798fd2c67fe8f735780766602d6587d4e4c79a6b2ba09e85e492bf3d7d93e1c2b8e4e9d15f392332b0543029969d6a013041a4b9c6a572f6c635f9e70c9182d92502c0b631c9b90ff42f3c0708d78b2c4d03723d0ed8475ac6876dfc5a24560968bc2aa97e4b5d4ff96599f6a3c03533839e8b508c41902eb0996a478bfc0abad79b233b67e80b700b9920824fec1ff4d553a1751f2ceb0875b66bc5029f2d7917fe00e31647bb20e9725e91453f004037f9a1cb19e221bf16a5bd3642d96c01bab64190888b5e62485632db0e7a07c4e045712f9b895313101d054155840e60a8031db5d679383cc48eb5ca10237b57ba9755cfef69de1508d34681602d17ca7e3c1d8f53181dd14bc19843e12d7ca371b4ba99d455db625150711058b6f90414344883f00d411fd41f110f1a41a01b4cf28f35e8fee1cf43e67225272ed561b28acc93a22a420f26a01bffec5808a64e70d19c0e5163c121a1b01f40e0431d1dc4c741969b3036a3c27ae82ce6f9d6c31718ad7c465d92d995ced0f4f497e493635e21f537bc85feaf76edb3c71b8a5dcccfe002713588630339949324f3b869ceeff54c282571388b9e7b3fc3c24bebcb4455d3884928ad81bc328c9044215351f2e7edb1d6ac276502414e3ede78b11d13f92b7a4d24a30b5ad573958bfabd880ced3c29c4256f633f1f628bc56f4b318b7e04af4293054629d955ba1be72977443c426b7a8c2e245dc259075e64c263e91a4ec40535605f5bc440584cf602d360fd16cd868c5fb0a2b77fd3ce7646fa8969beb92ae7213c19a778d05b58960e35bc414f4ff06fa8be4ca9aa25c6525a854cd932a732b84e50a1ab71cc8136213750840587dcc98802de84c7b427e5b82ff2e1352014c96300f87b0ea9b1bbace877e79f790de609bf646d5ef6c725381d24c7682d83baf797837e36a1408c1d8201a9bb812ab79f0a426c1f5141bcdb0cfdcd9482ebf8a588f89f95cc2a081575c3a131d8428e46775ff2c1c3c8bfdfa27e297edf874591ac8e3e59f9b614d5597be136eb58bec38daac19389604e5ffd2b1a27313adbda2941be9005dd6e4b14a1c5bfcf2b0664d76e1955fa53e1cb425e1f642a9132eb5aa09cc608191a04f371a6ad264e8b933b6a3e481d2d3b7402fb876ae196a964f2f83c8e34767964b05fe2f7f5ef76d70729cbf32815f0ebde2425206458c4b52a1e7ac175a30270e9d865f604f3f3509232cf28143e36f0ba0ba65f68d82c3b995a947eccc85c2d3c1f002355f534db721a3a1c29f6a44ae1d076c96ebcf3582fe79343c0a951f2cbc04f0a775424d6f783dc87ddefb15dba90530d7da2cb67be4b22af3d6f05831da399fecb26ae738db5df986c8f4120c3f10afec3b1d85c176b5489a6572c1d0197b6e603de36bc7e605559e35682e4b55bed17be4e5bf85721ceb44bf22f3d554a543f9869c67a55680480dcf0a8b2a1e82a0ee87cacc29664fe5e764ea4d4b22f10f51052f6342da9de7a3eba362efd1febf4d2c959e568aeffca43dbb547613f244c9050fae884558301fe80a704e2b40e248afb369fb05de3e6db528d34282090a0ad937d22788326d9253806eb8b389c6a2b64524f15d38b1b1e171296eed1d92cebc889cff3182e62f412c3e596fad92a0b76314d82eaeb9574bf05d9072320c6b9dd65b2a5d891b8091203d63ea5f2f73c2fa37478a2f5a9081311e8ae3e96dae9472bcd454312d7d722283475fed8ba129489af6b09c4894a273c2a98ab90830ca9bb97c184ca4a50cb8f4a42c9ffe469bed5ce3ffd96f69a6f7405e55f176e4175ed663bc44020f607ce3b3b23ded62a900f4f72f5fed1abe4061e764219035177c324228926c227362e4752dcadf07c56e3a3c36b02d831528f90aade55d64c908de7902a41892b913ab3737b6655876b2b232a42e588de6cccbca6a874dd50905f0d0dcab2de39bc1dcf934785bb31df7ed8c215492ff23f3cfa5d32e5c2b8b7f88eba541ba849598b1591753cbac3952d7cc72fa663d96d76734479f2cf1a814d39764dde14ab64abe3fe2c43841f7d938fd11f99075c0c83edafa39bf7ea308035a747cb09e83f03ccf4549effb31582c427dac1df9f3350645475212eaf466ffbcaa626ed80ee721dfb0f74ff400002ea7e55c78af4a2be5b0a91d377398d95cd521c8474e64bcd2e96386c94110cddabb15d737d8ffb8bebdfd521a9fcd9039d04518e6b61ec05c90f8040ddb429d4da907612cc1a53542fde09c2b1ceb312620318c5e62eb33645eb97f51424a889e5085fde8d7b5acf8ffdc7bafebf4de6808b2fc3c179871f6da5d1b75d5afd52f6720c29292dde90d0ffa33d960d2714ab81a19088e9296e3a1a4826b88c119d603db91e5e83ffa1ec54b5c2cc0abd7eb1d14b30a5e381725928539e7cca5020fe965a34b9673899d4048fccf0189c9f0c13f7f8be4063f80f254b0ec75b3d8095093263e920fad5f19ecd818ac73de476dc563cb5f26219e75f2ea02da5e094f2e6b53b9aad85c879411bd52edda6b2a8c2100ed19df779fd00fd8810a6dc020d7047c58d87f8347c6d2c1355db3cd922efc3344a9fb83000eab88f343e86886fa7c8dbd8929d169d74a0044c8670c0965e5ac16398aa9d97f8deed2b70a482525f9a0f5f56a2b91ca40206378a120ec4a9487fd5954a960bb2db9ee58fcf9c58768a006ea67fa695afbed409d51d22757f98cf505f5b25e3acad93baecf1cbd7178479c1db79b918186f1f724819f82d8a7f4249f0bdb21568ba0b493835e0a8f3b7d30f11af3d19029c30ee0d2a5e2ec948396e7685082c1c8a4afed0967462215c27ebfe7c5d55410b0dc67e54cb3ae924daac43ac106667da874420f4b9aba583b9162368d55d6051fdbbaef31a0a40c5cae7ff5969c6a685a0f4ac713583c75c176add20e528a09cf473412712a9543b51adcc8ac428d10b2cc76b5e0001fdb0a3d47eef1c85750ce63e7bad825215cdb65bc704bb12ace9a0454c895b3feb26e4b5065606a829cb5526b90571d46ee30ef6ab23d14f551097174367bdbf221cc50fd0203675e0d3859bbf936ca1aa04f5625bab49b516f09b8932a9f8b2eb9264eaa4b48a04ed6e5e616efe53cef0dc6aa87412bea5b00e84441bd2fe008c690cbea3bf4dafdc23b9cb971eb66cd8b6794d97301ce2eabafa8bec6020d13bf272664c075507cf59205826e442f603b2e510156cb7779d67c49ad81cb508f407835eace498641c29a692019ea68bf7d6289c9796c2feb1fecdc70bcff2b065747f311f982d6e557375b8914c7e487bc01a57cdd52f0b73ae6450b0c1bc1bdcb72571a8a17c62f55296f3044fd4dd573a66953697d67bb316398b1f0fa06908506763e1907efc2d82177debff311e4ff9f881ad805307a5b2dbfc03bb12e21c337095eee0a03e7c696673541d8aad83576765c70121202d6f08c3214802136985dd88ff7248be561a3d22f9f340570cacf6fc95424b83e2db9ace05f050b369ff3cc04b2e2e62a7b6450f562996a7490c3ea2093aca008b7b08489a33772df6d9251fcd3dc6cca1bec3cfa90ed5a0690b43d2c272eb01b462140c49f1bb597a7d73c08ace85d0e7bdda0db3d0493f873751731c5ef9011f2873dfc8e2479942cae53a4bd5afc59ae2eddbf16afdbbf99ee2f5b627c549f8a071464f06aea0a5a2ac19d42b2a71178175e3a47cfca540b764681eb808e33d7d97b6e8befb7a6111508afe0cf537cdb0d1e77e3919e02ed33767bd4b572481cd77c3ef2082f97a6764d5a292a8f4a499251d231665661d6de13c20b308714aa830d1d1541f875d272be555e486972c13ad8371a39b17e020e1a58dba84f5a7f65f8aab55322c7df162fd539bea754f370253d377c5bf9677f6e8e41c7d84733fce897614e9b8c40f1b0fc33fafaad41016c8db07d52131eb3b80ca16f3dcbc3d47f679a1c0c033cef5e7864d76d87013c4830b9dc0ac36e525e8d2487336de6c02f5dfb1d1d6a994f6f4336a0ed624d9f30afd7f4e1f50bc187d6b68b89a7f956dd93b123b39ae6b052ffd0c2f94a318f8972a91fcb2528ab2c1858ba3c8d9db1b4dff5985f1adc415104db71d250de41099558e49f2508aade721c00aa6359b78ddb770e97f54ad045700eab9ad97f78509106d69fdb995bf31abd29e1ca308e9d5dedf31411e42df89de9c15fec4e09c3421a63277c1c4bc627d2c6039ad669fcc92110ca3684884c2350bb6b178bf744a89dc7382267672107da7a28f272a33050fe659e1f2070de4c8845af9eddab222a601c16d0f2b74e310e45fdc1adcd43810de1a3ea70e743af213d449f7f95f41eab9f8cd6d2acb8a29d2d058b30ae1ca735c5029ac72a5701601aa1bed247b581f75591be2e837ff2efe6a9a522d218e3e75ac44f875dbe5ba32345958436417e810b3a544f23ec7a1e80ee4f7b7254289e6eb772fc54b3c900b5b8b86b3e8cf1e49990d28fe38326f47b83c4d80c3d87b9c288cbd36c4f9bcd086a58823766948b52ce31d37a3bb7fc533b24d093dd40fbe0d0f9f66ae935cd643b59e19ec8e52db8572f983abfd41e780537c5b9785f21c209388124eba6e73632dea7e4e1d06acf13b77a0b0410d8c2f387eef83646b0bd6eee98a4c15a3269c46284c47561b754d774fd4442e98d1f6a5a21dac"}, {0xd8, 0xffff, 0x8, "967b8cf0c85f45dcabf6fb5f88b301f576097c4057830b961ce576bed0281e2613471f90b65eb541391be7a1a25b8a8c93851e5abbaef26d092e1d2afef8fa3fdea93eab69f5fd951396dd3033f5a6fbad0ff097a03addb8a9d1e7733ad9c51517c17ef7bb3a30df4993215c55ad1e8503413af788a9c781f01f43a11ff36b9c7d1ddc15418bc157c9bb7948d5b33062746b053af6fdb17c84eeda4f2366a0c7af5ad6cb46a168660c715f9a5227341f009e1c90ba66ebe7d7cc32370e93f8b45e0c8d378cf4ec"}, {0xb0, 0xffff, 0x401, "c8625b058ef02b46e87bf8b02bc739c73004f993d1d5099083a8bbf7e741433f4f122226354db76bba2f5d23cbaed0ba863e52cd2aa93d4be3519d8ff628d028f28f95f156e94f5f44e34be90cac27813bb5a20ce80a9e0bec31e0a5c6c9a36e4ac3bb6e9b9b1b0eefae87240ee78d73f80dde54f42f773e499fe208df9fbbc31a7fa105dcb0523eeca46ee7bad0f706eaf6e12497b1763f11"}, {0x88, 0xffff, 0x8741, "3f9402c5c41f301f2f5f73e1c93dda0b012cd91e216a0617700a37cfc936040eb4ee24bb6e6296cec3499f0de5c22f2933cc8deb0788d593518ef0882a4f5183a025e58fb8407b8b24d07989853481e4f4306f40023f6c9b5a0efa6570883cc8cca7e32fb641021fa2bc3ecca4babad3497e"}], 0x1418}, 0x401) (async, rerun: 32) sendmsg$unix(r1, &(0x7f0000001740)={&(0x7f0000001680)=@abs={0x1, 0x0, 0x1}, 0x8, &(0x7f0000001700)=[{&(0x7f00000016c0)="025955baa741ad9b9d4824c6", 0xc}], 0x1, 0x0, 0x0, 0x1}, 0x8) (async, rerun: 32) r2 = fcntl$dupfd(r1, 0x1e, r0) link(&(0x7f0000001780)='./file0\x00', &(0x7f00000017c0)='./file0\x00') (async) recvmmsg(0xffffffffffffff9c, &(0x7f00000029c0)={&(0x7f0000002980)={&(0x7f0000001800)=@in6, 0xc, &(0x7f0000002900)=[{&(0x7f0000001840)}, {&(0x7f0000001880)=""/93, 0x5d}, {&(0x7f0000001900)=""/4096, 0x1000}], 0x3, &(0x7f0000002940)=""/40, 0x28}}, 0x10, 0x2, &(0x7f0000002a00)={0x4}) (async, rerun: 64) r3 = fcntl$getown(r2, 0x5) (rerun: 64) r4 = getuid() getsockopt$sock_cred(r2, 0xffff, 0x1022, &(0x7f0000003200)={0x0, 0x0, 0x0}, &(0x7f0000003240)=0xc) r7 = getppid() (async) r8 = getgid() (async, rerun: 32) r9 = openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000003280), 0x400, 0x0) (async, rerun: 32) r10 = geteuid() getgroups(0x1, &(0x7f00000032c0)=[0xffffffffffffffff]) (async) r12 = getuid() (async) getsockopt$sock_cred(r2, 0xffff, 0x1022, &(0x7f0000003300)={0x0, 0x0, 0x0}, &(0x7f0000003340)=0xc) (async) r14 = openat$vnd(0xffffffffffffff9c, &(0x7f0000003380), 0x100, 0x0) sendmsg$unix(r0, &(0x7f0000003500)={&(0x7f0000002a40)=@abs={0x0, 0x0, 0x2}, 0x8, &(0x7f0000003140)=[{&(0x7f0000002a80)}, {&(0x7f0000002ac0)="d9ff3565ddcde23fe8e4cab71b71876563837dc68e94179d6da652001f4a548a0dc9206774e273e0f5d30314bb82b682ad7a400a7554c4861323dbdd7f5d49b19b99bbbd3a44b510a25b13922aac075a99b9f04828a894226ce42bfe27cf3644cd71d63f14c33e7ffb1e665b196c47879bbf27874bceedf7bf825de1fe17d938d90b09d782f9bc5bfb56a288861cf21d1c03463b8bc88f0d42f8a45020af0314aa6a51ebe3214e7c3052302ec50fa15fddddb84f249a54cc993f57a8cdc6bf136fe4", 0xc2}, {&(0x7f0000002bc0)="57c9325d17ea5fd270831e3b206b1b67ff32ef95138ab20f854487ed007aea83e0881567f0df24b4bb4e4fc3e656296203b606c269149a3ae5194787c9625a7d4aaa42d5e22db2fdbbd75f427a0411152f0bcee456cc84871278715c45a7147705d429dc32aaeae690bfdd639277ad97e62108e2bb972345dbb115f68e437de58156f05f324545e397cd53e96b63f2c148f9a4355dc97628f96f51faa69fb37851db61b057ecb4d3ba21c434559c2591986364658bd6a6d7a490170025445b0830c31d6700849c4e9971e8323f7b92144ac5643f2b0de38aa6bfaf5ce9a700f55e110e98797119b09a37d4828373a4cac9cb45af6c6afe58bbf0fa9b7d52ba", 0xff}, {&(0x7f0000002cc0)="4332c6df61f4ce13d530332a5c073d1d26656923edb8272a2b5fe8bc09648bc632e3ba6c00eef32bb646060e92a97c681e4ead74ab86c48609e1ddbe3a12756d983a9f890a9fc716aaec18", 0x4b}, {&(0x7f0000002d40)="cc57239d3e8ccc0d296762d906f8b5e4c1e1d36f8ab92a48d34ad6df5fbee9919f3ae5633a1dc2c9eb91eac6f15a5f55affa03f96e0defc993559b235cdc16e9ddb7561432904559285aa6521ed040bfa388e189ff14e5e8b05fd3d4776c2e488fef490803580cfe28442e8e55bd10080578593768a092288e273d914130bab0cdb6d64043dd04fa974b0c82eefcb5d7ca5b68bf53bd3790910058694c31cfa98a817ef2c47798e9e6de044659c387670848c76315c8846aa0438cbac2059e88f7dc0ac68fa7dd79cd06ece13a0aac55c499187d08f1a90a", 0xd8}, {&(0x7f0000002e40)="2ea62347d2f499082b880b8db0f208d62198f1f2b4f7f998707edb39bb282364e79a2de2d5674207d8914857d15fda858e5ed41ed5a1feb43a889e5e3c9047a28345225fb517b0", 0x47}, {&(0x7f0000002ec0)="3cc8af8d5b38d6594941c919b4a2d5425ed27d173a55d11c1abd620bb5bd6d0d0947d5e2dbdc6585b65a61931f8d3941e58d0130889c215730e570cb726c3755849cf86121bc197c8be3341db8cb7bb2ed3e9dbe05a7c1060355f72a0e5a14ce8ce56dd9a31dccd5bf153c06be15098689c09cc7eb3478e5e0befed06e90c689c9e631ffe3fbfe0800aa2185eb32d5df794b530aab135ae27f5520cb6cad523abc9f28fbb744b1ff1e0ece4b15440a4a2cf577eab6392c5ccd1ff61b28d8438aec7b4fc95aa130d6a618a6e40231819ca2bb27e7c78b5a943cbcbb7f3da804db7c34f5ab23bfe2395538c820ab74ceb7f33c25e4340bb8b8bb", 0xf9}, {&(0x7f0000002fc0)="c8641e5e75568567bba78a3f4e86eb7b49943153f92bbcdb43a23ee5ecf3be3138024f4aeee59604211c328f572d32d0a4f05df618a90eeb8cc8f483038e26b8b7bdccc50ef3b6689362a31a0c15a7529ee2f6f180cd704237011bd7661c836e021b059975b6292ea8cb991b655804f12d07c922bd5579c375c779a8eca9f3f45dd3489acbe2e9f66e3e524826a06186b1f890da6eb29690d3b8726b37483910cef3352dec78739839396918f3875b9824a416f3cce52d4f394985e1b9cedc84225687e74f278dc2f738282812a4e95283e82b01c27c0d5022c3ee62a550a32862f5f6f8358ba106eb0de51d1ca3c50346a0", 0xf2}, {&(0x7f00000030c0)="e6d43938dd81e8d8de30a42a710475956d0a2cd11645c36410a0f50b466c10077f02caafea4eae87207b8483751d3ce0a91dc5b1653a30d7a0ebb7caa9812b83a90dba6808b760722c9574d87c82a54de908e9701b27c9a2d830256df1456a", 0x5f}], 0x9, &(0x7f00000033c0)=[@rights={0x18, 0xffff, 0x1, [r2, r0]}, @cred={0x20, 0xffff, 0x0, r3, r4, r6}, @cred={0x20, 0xffff, 0x0, r7, 0xffffffffffffffff, r8}, @rights={0x18, 0xffff, 0x1, [r9]}, @rights={0x18, 0xffff, 0x1, [r1]}, @cred={0x20, 0xffff, 0x0, 0xffffffffffffffff, r10, r11}, @cred={0x20, 0xffff, 0x0, 0x0, r12, r13}, @rights={0x28, 0xffff, 0x1, [r0, r1, r0, r1, r14, r1]}, @rights={0x18, 0xffff, 0x1, [r0]}, @rights={0x28, 0xffff, 0x1, [r0, r1, r2, r1, r0, r1]}], 0x130, 0x8}, 0x4) (async, rerun: 64) sendto(r1, &(0x7f0000003540)="6ce0c0f4c72d057db60411bff70791e4510bf976ed92202860cf85fd60795530794b420d993a4c40e9a63476e273cd3df429d4e2a5fdcaf8898b4fbac1a9b33fa69556f64c653c76ecfad8d55d760b9e6eb9f34658d7616f3a60224d", 0x5c, 0x2, &(0x7f00000035c0)=@un=@abs={0x0, 0x0, 0x1}, 0x8) (async, rerun: 64) socket(0x6, 0x2, 0x40) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x812, r14, 0x4) (async) ioctl$WSMUXIO_REMOVE_DEVICE(r2, 0x80085762, &(0x7f0000003600)={0x3, 0xa}) (async) msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000003640)={{0x9, r4, r13, r10, r6, 0x64, 0x9}, 0x4, 0x0, r5, r3, 0x8, 0x80000001, 0x10001, 0x7fffffff}) (async, rerun: 32) r15 = msgget(0x1, 0x24) (async, rerun: 32) r16 = getpid() msgctl$IPC_SET(r15, 0x1, &(0x7f00000036c0)={{0xc3d, r10, r8, r10, r13, 0x48}, 0xff, 0x95bd, r16, r3, 0x6, 0x1, 0x1, 0x7fff}) setegid(r11) msgget$private(0x0, 0xc3) (async) kevent(0xffffffffffffffff, &(0x7f0000003740)=[{{r9}, 0xfffffffffffffffe, 0x8, 0x2, 0x1000, 0x2}], 0x9, &(0x7f0000003780), 0xffffffff, &(0x7f00000037c0)={0x0, 0x7}) 268.342683ms ago: executing program 5 (id=259): utimensat(0xffffffffffffffff, 0x0, &(0x7f0000000080)={{0xfffffffffffffffe, 0xd7}, {0xfffffffffffdffff, 0xfffffffffffffffc}}, 0x0) sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b1000504600000000000000007000000331c13fecea10500fef9e906c72fd3357ae320b37b673039d2d236073705ae04be38164991f7accf5f882b297be1aa5b236deb51e2f0ac3ebbc257699a5f139b672f4d335d223e7d029d6ba8af630037282102000000720f70c1f5a472c881ea6e69e0bb76d907c400000200361b1257aea8c5000020020000000000008abfba09", 0x91, 0x404, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) madvise(&(0x7f00001bf000/0x4000)=nil, 0x4000, 0x0) r0 = socket(0x11, 0x3, 0x0) sendto$unix(r0, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x2, 0x0, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x186) execve(&(0x7f0000000140)='./file2/file0/file0\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000080)="673bb5b8cc0c16ed0898e17c03ce480135a128250801a22ed2b1ad6a78ef1d47e6abbbdabb26a5a12af0f460032b34b77a382d", 0x33}], 0x1) sysctl$kern(&(0x7f0000000140)={0x1, 0x29}, 0x2, 0x0, 0x0, 0x0, 0x0) r1 = socket(0x18, 0x2, 0x0) sendmsg$unix(r1, &(0x7f0000000040)={&(0x7f0000000000)=@abs={0x1, 0x0, 0x1}, 0x8, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18"], 0x20}, 0x4) ktrace(&(0x7f0000000000)='./file0\x00', 0x2, 0x100, 0x0) 268.120109ms ago: executing program 3 (id=260): r0 = open(&(0x7f0000000040)='./file0\x00', 0x40, 0xd) preadv(r0, &(0x7f0000000340)=[{0x0}], 0x1, 0x0) ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f00000000c0)={0x2007, 0x7fffffff, 0x8000002, 0x8001, "090e4d55c87e139200", 0xffff48e2, 0x2}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x3e}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x10, 0x0, 0x37) 212.624566ms ago: executing program 2 (id=261): setrlimit(0x8, &(0x7f0000000980)={0x8, 0x54}) r0 = syz_open_pts() ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, &(0x7f0000000740)={0x804, 0xfff, {[0x9, 0x1, 0x5, 0x7, 0x1, 0x6, 0x9d1, 0x1, 0x9fffffffffffffff, 0x2, 0x2, 0x3, 0x5, 0x1, 0xdf, 0x2, 0x5, 0x280000001], [0x80000001, 0xfffffffffffffffc, 0xe, 0xd83, 0x1, 0xc, 0x30ac00000, 0x2fc6476f], [0xffffffffffffff01, 0x5, 0xc, 0xa, 0xfffffffffffffff7, 0x6e, 0x6], [0xfffffffffffffff8, 0x6, 0x8c, 0x5, 0x400, 0x6], [{0x4, 0x1, 0xfffffff8, 0x800}, {0xc1c8, 0x3, 0x8, 0xdff}, {0x1000, 0x8cd4e02, 0x2b2, 0x8}, {0x0, 0x5, 0x10000, 0xdd}, {0x1, 0x8, 0x3, 0x4}, {0x200, 0x4, 0x9, 0x2}, {0x1, 0xe40b, 0x6, 0x5}, {0x9, 0x401, 0xb, 0x2}], {0x0, 0x8, 0xf7, 0x7}, {0xc1, 0x116dc000, 0x6, 0xfff}}}) close(r0) syz_open_pts() ioctl$TIOCSETAF(r0, 0x802c7416, &(0x7f0000000180)={0x1040978c, 0x9, 0xf7fffbfc, 0x80a19f, "bb08000100f167d910508b000000000000000080", 0x100, 0x4000001}) r1 = semget(0x2, 0x4, 0xad10430c640147b0) semctl$SETVAL(r1, 0x4, 0x10, 0x0) r2 = syz_open_pts() fcntl$lock(r2, 0x9, &(0x7f0000000000)={0x3, 0x0, 0x0, 0x1000300000080}) fcntl$lock(r2, 0x8, &(0x7f0000000080)={0x2, 0x0, 0xa, 0x100000001}) fcntl$lock(r2, 0x9, &(0x7f00000001c0)={0x3, 0x0, 0x7, 0x300000003}) ioctl$FIOASYNC(r2, 0x8004667d, &(0x7f0000000000)=0xff) writev(r0, &(0x7f0000000700)=[{&(0x7f0000000080)="34eb4cd59e8456ebc0881681c60e1cd9e0bf01b618b3cb934394c5951c1db0fd943a", 0xff99}], 0x1) 212.009369ms ago: executing program 5 (id=262): syz_emit_ethernet(0x3e, &(0x7f00000016c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd684498fb00083c0a7594e5ef97a1d27140e475c018e1ca9f5577433665ca53a20012e97e00c78354500010a864000000"]) syz_emit_ethernet(0x3e, &(0x7f00000016c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd684498fb00083c0a7594e5ef97a1d27140e475c018e1ca9f5577433665ca53a20012e97e00c78354500010a864000000"]) (async) 211.471231ms ago: executing program 3 (id=263): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f00000000c0), &(0x7f0000000240)=0x5d) r1 = socket(0x2, 0x1, 0x0) syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) setsockopt$sock_int(r1, 0xffff, 0x1, &(0x7f00000000c0)=0x8001, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) connect$unix(r1, &(0x7f0000000000), 0x10) sendto$unix(r1, &(0x7f0000000040)="658f58", 0x3, 0x603, 0x0, 0x0) sysctl$kern(&(0x7f0000000100)={0x1, 0x49}, 0x2, &(0x7f0000000140)="00e0ae5b7e0d2000bc5a91501d94a34b8e5f84cf71b59c3d67a3f28234788934b65f363726b20d1285ba124e8e0db5913085b79a11b0f149df9b4416948121c582b832ec81617bc65348f56e6d8eb08e0242471d9b5dcf5ed6edd915a2f8", &(0x7f0000000080)=0x5e, 0x0, 0x0) clock_gettime(0x0, 0xfffffffffffffffe) mknod(&(0x7f0000000000)='./file0\x00', 0x1ffa, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x80, 0x0) 210.183522ms ago: executing program 4 (id=264): execve(0x0, &(0x7f00000001c0)=[&(0x7f00000000c0)='/dev/speaker\x00'], 0x0) clock_getres(0x0, &(0x7f0000000000)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x18, 0x1, 0x0) setsockopt(r0, 0x1000000029, 0x2e, &(0x7f0000000040)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) setsockopt(r0, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbdf13b9fd812eaa4e713048e69931929648", 0x14) (async) setsockopt(r0, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbdf13b9fd812eaa4e713048e69931929648", 0x14) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) unveil(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000300)='W\x00') openat$vnd(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) (async) openat$vnd(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x80, {0x1000000ff}}) poll(&(0x7f0000000000), 0x35, 0x0) (async) poll(&(0x7f0000000000), 0x35, 0x0) sysctl$hw(&(0x7f0000000000)={0x4, 0x18}, 0x2, 0x0, 0x0, 0x0, 0x0) (async) sysctl$hw(&(0x7f0000000000)={0x4, 0x18}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sysctl$net_inet_tcp(&(0x7f0000000000)={0x4, 0x2, 0x6, 0x3}, 0x4, 0x0, 0x0, 0x0, 0x0) (async) sysctl$net_inet_tcp(&(0x7f0000000000)={0x4, 0x2, 0x6, 0x3}, 0x4, 0x0, 0x0, 0x0, 0x0) sysctl$vfs_ffs(&(0x7f0000000000)={0x7, 0x4, 0x11}, 0x3, 0x0, 0x0, 0x0, 0x0) 209.87016ms ago: executing program 6 (id=265): r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x186) mmap(&(0x7f0000324000/0x1000)=nil, 0x1000, 0x4, 0x10, r0, 0x0) (async) r1 = open(&(0x7f0000000180)='./file0\x00', 0x615, 0x1a) mmap(&(0x7f000033f000/0x14000)=nil, 0x14000, 0x2, 0x11, r1, 0x0) truncate(&(0x7f0000000000)='./file0\x00', 0x30001) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ftruncate(r0, 0x1) 0s ago: executing program 5 (id=266): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) select(0x40, &(0x7f0000000040)={0x2, 0x81, 0x7, 0x1, 0xffffffffffffffa5, 0x5, 0x3, 0xaeb3}, 0x0, &(0x7f00000000c0)={0x2, 0xac1e, 0xd, 0x8000089b7, 0x9, 0x7c, 0x85, 0x66}, &(0x7f0000000100)={0x0, 0x86c4}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.189' (ED25519) to the list of known hosts. uvn_flush: obj=0xfffffd806a916e20, offset=0x0. error during pageout. uvn_flush: WARNING: changes to page may be lost! panic: pool_do_get: shmpl free list modified: page 0xfffffd8069c11000; item addr 0xfffffd8069c11620; offset 0x40=0x69679d1a Stopped at db_enter+0x25: addq $0x8,%rsp TID PID UID PRFLAGS PFLAGS CPU COMMAND 170026 3035 32767 0x10 0 0 syz-executor *278330 3035 32767 0x10 0x4000000 1K syz-executor db_enter() at db_enter+0x25 panic(ffffffff8339f7d0) at panic+0x1e5 pool_do_get(ffffffff839519f0,1,ffff80003c462eb8) at pool_do_get+0x5df pool_get(ffffffff839519f0,1) at pool_get+0x162 shmget_allocate_segment(ffff80003c420558,ffff80003c463110,152,ffff80003c463060) at shmget_allocate_segment+0x1af sys_shmget(ffff80003c420558,ffff80003c463110,ffff80003c463060) at sys_shmget+0x195 syscall(ffff80003c463110) at syscall+0xb17 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xde1471bfad0, count: 7 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{1}> ddb{1}> set $lines = 0 ddb{1}> set $maxwidth = 0 ddb{1}> show panic *cpu1: pool_do_get: shmpl free list modified: page 0xfffffd8069c11000; item addr 0xfffffd8069c11620; offset 0x40=0x69679d1a ddb{1}> trace db_enter() at db_enter+0x25 panic(ffffffff8339f7d0) at panic+0x1e5 pool_do_get(ffffffff839519f0,1,ffff80003c462eb8) at pool_do_get+0x5df pool_get(ffffffff839519f0,1) at pool_get+0x162 shmget_allocate_segment(ffff80003c420558,ffff80003c463110,152,ffff80003c463060) at shmget_allocate_segment+0x1af sys_shmget(ffff80003c420558,ffff80003c463110,ffff80003c463060) at sys_shmget+0x195 syscall(ffff80003c463110) at syscall+0xb17 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xde1471bfad0, count: -8 ddb{1}> show registers rdi 0 rsi 0x1 rbp 0xffff80003c462ce0 rbx 0xffff8000299eee07 rdx 0xffff80000156fc00 rcx 0xffff80003c420558 rax 0xffff8000299edff0 r8 0x101010101010101 r9 0x8080808080808080 r10 0x90449270836a69a8 r11 0xe622007035125ac7 r12 0xffff8000299eec08 r13 0 r14 0 r15 0x1 rip 0xffffffff831d6555 db_enter+0x25 cs 0x8 rflags 0x246 rsp 0xffff80003c462cd0 ss 0x10 db_enter+0x25: addq $0x8,%rsp ddb{1}> show proc PROC (syz-executor) tid=278330 pid=3035 tcnt=2 stat=onproc flags process=10 proc=4000000 runpri=32, usrpri=50, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff80003c421a18,0xffffffff839f5968 process=0xffff80003c41c4f0 user=0xffff80003c45e000, vmspace=0xfffffd806ad78210 estcpu=36, cpticks=1, pctcpu=0.0, user=0, sys=1, intr=0 ddb{1}> ps PID TID PPID UID S FLAGS WAIT COMMAND 31255 105827 8880 32767 2 0x10 syz-executor 3035 170026 54779 32767 7 0x10 syz-executor * 3035 278330 54779 32767 7 0x4000010 syz-executor 72092 163617 4388 32767 3 0x3010 suspend syz-executor 72092 120882 4388 32767 2 0x4081010 syz-executor 72092 134347 4388 32767 2 0x4081010 syz-executor 42537 124458 54126 32767 3 0x90 nanoslp syz-executor 42537 505632 54126 32767 3 0x4000090 fsleep syz-executor 17022 503542 19022 32767 2 0x10 syz-executor 17022 523398 19022 32767 3 0x4000090 fsleep syz-executor 29359 107676 34371 32767 3 0x90 nanoslp syz-executor 29359 280372 34371 32767 3 0x4000090 lockf syz-executor 29359 158594 34371 32767 3 0x4000090 fsleep syz-executor 9944 358087 71008 32767 3 0x90 nanoslp syz-executor 9944 465702 71008 32767 3 0x4000090 lockf syz-executor 9944 294409 71008 32767 3 0x4000090 lockf syz-executor 9944 330541 71008 32767 3 0x4000090 fsleep syz-executor 82072 311124 61509 32767 3 0x90 nanoslp syz-executor 82072 205556 61509 32767 3 0x4000090 netacc syz-executor 82072 139669 61509 32767 3 0x4000090 fsleep syz-executor 34371 39567 15022 32767 3 0x90 nanoslp syz-executor 4388 53083 13653 32767 3 0x90 nanoslp syz-executor 61509 293957 11351 32767 3 0x90 nanoslp syz-executor 54779 426577 823 32767 3 0x90 nanoslp syz-executor 8880 43533 78334 32767 3 0x90 nanoslp syz-executor 54126 376134 22015 32767 3 0x90 nanoslp syz-executor 19022 285426 88845 32767 3 0x90 nanoslp syz-executor 71008 497310 35745 32767 3 0x90 nanoslp syz-executor 11351 501785 18934 0 3 0x82 wait syz-executor 78334 195395 18934 0 3 0x82 wait syz-executor 823 120612 18934 0 3 0x82 wait syz-executor 22015 134668 18934 0 3 0x82 wait syz-executor 13653 278193 18934 0 3 0x82 wait syz-executor 88845 289267 18934 0 3 0x82 wait syz-executor 15022 163389 18934 0 3 0x82 wait syz-executor 35745 48454 18934 0 3 0x82 wait syz-executor 18934 403595 79484 0 3 0x82 kqread syz-executor 79484 454974 77031 0 3 0x10008a sigsusp ksh 77031 311647 78122 0 3 0x98 kqread sshd-session 78122 458400 35817 0 3 0x92 kqread sshd-session 40295 59511 1 0 3 0x100083 ttyin getty 35817 64821 1 0 3 0x88 kqread sshd 50980 25670 75136 73 3 0x1100090 kqread syslogd 75136 252712 1 0 3 0x100082 sbwait syslogd 76372 48278 1 0 3 0x100080 kqread resolvd 12884 494034 77028 77 3 0x100092 kqread dhcpleased 66566 103951 77028 77 3 0x100092 kqread dhcpleased 77028 57189 1 0 3 0x80 kqread dhcpleased 90427 32203 0 0 3 0x14200 bored smr 346 207670 0 0 2 0x14200 zerothread 29843 413223 0 0 3 0x14200 aiodoned aiodoned 1245 148419 0 0 3 0x14200 syncer update 73047 303958 0 0 3 0x14200 cleaner cleaner 5024 430607 0 0 3 0x14200 reaper reaper 2567 311633 0 0 3 0x14200 pgdaemon pagedaemon 53342 215307 0 0 3 0x14200 bored viomb 10400 95967 0 0 3 0x40014200 acpi0 acpi0 67346 354629 0 0 3 0x40014200 idle1 48238 50616 0 0 3 0x14200 bored softnet1 79347 386880 0 0 3 0x14200 bored softnet0 35405 56318 0 0 3 0x14200 bored systqmp 12120 333021 0 0 3 0x14200 bored systq 59632 478029 0 0 3 0x14200 tmoslp softclockmp 74309 206800 0 0 3 0x40014200 tmoslp softclock 69212 351833 0 0 3 0x40014200 idle0 1 486079 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb{1}> show all locks CPU 1: exclusive mutex shmpl r = 0 (0xffffffff83951a08) #0 witness_lock+0x5f1 #1 mtx_enter+0x4b4 #2 pool_get+0x124 #3 shmget_allocate_segment+0x1af #4 sys_shmget+0x195 #5 syscall+0xb17 #6 Xsyscall+0x128 Process 3035 (syz-executor) thread 0xffff80003c420558 (278330) exclusive kernel_lock &kernel_lock r = 0 (0xffffffff838fd748) #0 witness_lock+0x5f1 #1 syscall+0xaf4 #2 Xsyscall+0x128 exclusive mutex shmpl r = 0 (0xffffffff83951a08) #0 witness_lock+0x5f1 #1 mtx_enter+0x4b4 #2 pool_get+0x124 #3 shmget_allocate_segment+0x1af #4 sys_shmget+0x195 #5 syscall+0xb17 #6 Xsyscall+0x128 ddb{1}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 11079 12022K 12034K 166960K 12172 0 pcb 17 12K 12K 166960K 17 0 rtable 241 6K 7K 166960K 441 0 pf 31 16K 16K 166960K 31 0 ifaddr 42 7K 7K 166960K 44 0 ifgroup 50 2K 2K 166960K 50 0 sysctl 3 1K 9K 166960K 8 0 counters 70 37K 37K 166960K 70 0 ioctlops 0 0K 2K 166960K 31 0 iov 0 0K 16K 166960K 19 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1336 84K 84K 166960K 1374 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 9K 166960K 10 0 VM map 2 1K 1K 166960K 2 0 sem 12 0K 0K 166960K 25 0 dirhash 12 2K 2K 166960K 21 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 26 97K 117K 166960K 408 0 sigio 0 0K 0K 166960K 2 0 proc 58 99K 147K 166960K 517 0 subproc 72 4K 4K 166960K 72 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 2 0K 0K 166960K 95 0 in_multi 100 7K 7K 166960K 106 0 ether_multi 1 0K 0K 166960K 1 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 235 1049K 1049K 166960K 235 0 exec 0 0K 1K 166960K 391 0 fusefs mount 1 32K 32K 166960K 1 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 256 152K 165K 166960K 5454 0 UVM aobj 13 3K 5K 166960K 15 0 pinsyscall 47 94K 110K 166960K 1506 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 0K 166960K 30 0 NDP 11 0K 2K 166960K 27 0 temp 74 8676K 8740K 166960K 5075 0 kqueue 13 20K 29K 166960K 64 0 SYN cache 2 16K 16K 166960K 2 0 ddb{1}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 26 0 0 1 0 1 1 0 8 0 rtpcb 120 67 0 61 1 0 1 1 0 8 0 rtentry 176 113 0 1 6 0 6 6 0 8 0 unpcb 144 304 0 286 2 0 2 2 0 8 0 syncache 336 11 0 11 1 0 1 1 0 8 1 tcpqe 32 2 0 2 1 0 1 1 0 8 1 tcpcb 736 223 0 213 7 0 7 7 0 8 5 arp 136 18 0 0 1 0 1 1 0 8 0 ipq 40 3 0 0 1 0 1 1 0 8 0 ipqe 40 3 0 0 1 0 1 1 0 8 0 inpcb 328 539 0 523 12 2 10 12 0 8 8 nd6 152 26 0 0 1 0 1 1 0 8 0 kcovpl 48 8 0 0 1 0 1 1 0 8 0 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 470 0 0 30 0 30 30 0 8 0 art_table 40 471 0 0 5 0 5 5 0 8 0 art_node 32 113 0 11 1 0 1 1 0 8 0 sysvmsgpl 40 70 0 68 1 0 1 1 0 8 0 semupl 112 1 0 1 1 0 1 1 0 8 1 semapl 112 22 0 12 1 0 1 1 0 8 0 shmpl 112 12 0 2 1 0 1 1 0 8 0 pool(0xffffffff839519f0:shmpl): page inconsistency: page 0xfffffd8069c11000; 24 on list, 10 missing, 35 items per page dirhash 1024 23 0 6 3 0 3 3 0 8 0 dino2pl 256 1962 0 452 95 0 95 95 0 8 0 ffsino 296 1962 0 452 117 0 117 117 0 8 0 nchpl 144 2533 0 847 63 0 63 63 0 8 0 vnodes 216 2043 0 0 114 0 114 114 0 8 0 namei 1024 8516 0 8516 2 0 2 2 0 8 2 percpumem 16 50 0 0 1 0 1 1 0 8 0 kstatmem 264 24 0 0 2 0 2 2 0 8 0 scxspl 216 9123 0 9123 10 2 8 8 1 8 8 plimitpl 152 143 0 117 2 0 2 2 0 8 0 sigapl 424 703 0 649 7 0 7 7 0 8 0 knotepl 120 322 0 0 10 0 10 10 0 8 0 kqueuepl 224 149 0 138 5 0 5 5 0 8 4 pipepl 344 134 0 107 3 0 3 3 0 8 0 fdescpl 528 687 0 649 3 0 3 3 0 8 0 filepl 160 3986 0 3758 15 0 15 15 0 8 5 lockfpl 104 106 0 98 1 0 1 1 0 8 0 lockfspl 48 36 0 32 1 0 1 1 0 8 0 sessionpl 144 27 0 11 1 0 1 1 0 8 0 pgrppl 48 42 0 18 1 0 1 1 0 8 0 ucredpl 104 543 0 524 1 0 1 1 0 8 0 zombiepl 144 650 0 649 1 0 1 1 0 8 0 processpl 1232 703 0 649 5 0 5 5 0 8 0 procpl 664 1155 0 1089 7 0 7 7 0 8 0 sosppl 176 1 0 1 1 0 1 1 0 8 1 sockpl 752 984 0 944 17 5 12 17 0 8 7 mcl64k 65536 4 0 0 1 0 1 1 0 8 0 mcl16k 16384 2 0 0 1 0 1 1 0 8 0 mcl9k 9216 1 0 0 1 0 1 1 0 8 0 mcl8k 8192 3 0 0 1 0 1 1 0 8 0 mcl4k 4096 114 0 0 15 0 15 15 0 8 0 mcl2k 2048 54 0 0 7 0 7 7 0 8 0 mtagpl 96 1 0 0 1 0 1 1 0 8 0 mbufpl 256 261 0 0 17 0 17 17 0 8 0 bufpl 280 3072 0 114 212 0 212 212 0 8 0 anonpl 32 8953 0 0 73 0 73 73 0 246 0 amapchunkpl 152 17365 0 16810 30 0 30 30 0 158 3 amappl16 200 2622 0 2594 14 3 11 14 0 8 8 amappl15 192 37 0 37 1 1 0 1 0 8 0 amappl14 184 9 0 9 1 1 0 1 0 8 0 amappl13 176 409 0 407 1 0 1 1 0 8 0 amappl12 168 1059 0 1012 3 0 3 3 0 8 0 amappl11 160 8 0 8 1 1 0 1 0 8 0 amappl10 152 62 0 52 1 0 1 1 0 8 0 amappl9 144 253 0 253 1 1 0 1 0 8 0 amappl8 136 18 0 17 1 0 1 1 0 8 0 amappl7 128 75 0 74 1 0 1 1 0 8 0 amappl6 120 277 0 266 1 0 1 1 0 8 0 amappl5 112 76 0 68 1 0 1 1 0 8 0 amappl4 104 406 0 382 1 0 1 1 0 8 0 amappl3 96 2803 0 2700 3 0 3 3 0 8 0 amappl2 88 847 0 769 2 0 2 2 0 8 0 amappl1 80 11564 0 11000 15 1 14 15 0 8 0 amappl 88 4670 0 4485 5 0 5 5 0 92 0 uvmvnodes 80 105 0 0 3 0 3 3 0 8 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 14 0 2 1 0 1 1 0 8 0 uaddrrnd 24 687 0 649 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 687 0 649 1 0 1 1 0 8 0 vmmpekpl 168 7576 0 7546 2 0 2 2 0 8 0 vmmpepl 168 53174 0 51065 102 0 102 102 0 357 6 vmsppl 488 686 0 649 7 1 6 6 0 8 0 rwobjpl 80 18059 0 17095 26 0 26 26 0 8 2 pdppl 4096 1382 0 1298 112 26 86 94 0 8 2 pvpl 32 15399 0 0 125 0 125 125 0 265 0 pmappl 256 686 0 649 4 1 3 3 0 8 0 extentpl 40 45 0 27 1 0 1 1 0 8 0 phpool 112 300 0 29 8 0 8 8 0 8 0 ddb{1}> machine ddbcpu 0 Stopped at x86_ipi_db+0x27: addq $0x8,%rsp x86_ipi_db(ffffffff837d2ff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __mp_lock(ffffffff838fd540) at __mp_lock+0x192 softintr_dispatch(0) at softintr_dispatch+0x125 dosoftint(0) at dosoftint+0x54 Xsoftclock() at Xsoftclock+0x27 end of kernel end trace frame: 0x75d46b5b2390, count: 8 ddb{0}> trace x86_ipi_db(ffffffff837d2ff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __mp_lock(ffffffff838fd540) at __mp_lock+0x192 softintr_dispatch(0) at softintr_dispatch+0x125 dosoftint(0) at dosoftint+0x54 Xsoftclock() at Xsoftclock+0x27 end of kernel end trace frame: 0x75d46b5b2390, count: -7 ddb{0}> machine ddbcpu 1 Stopped at db_enter+0x25: addq $0x8,%rsp db_enter() at db_enter+0x25 panic(ffffffff8339f7d0) at panic+0x1e5 pool_do_get(ffffffff839519f0,1,ffff80003c462eb8) at pool_do_get+0x5df pool_get(ffffffff839519f0,1) at pool_get+0x162 shmget_allocate_segment(ffff80003c420558,ffff80003c463110,152,ffff80003c463060) at shmget_allocate_segment+0x1af sys_shmget(ffff80003c420558,ffff80003c463110,ffff80003c463060) at sys_shmget+0x195 syscall(ffff80003c463110) at syscall+0xb17 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xde1471bfad0, count: 7 ddb{1}> trace db_enter() at db_enter+0x25 panic(ffffffff8339f7d0) at panic+0x1e5 pool_do_get(ffffffff839519f0,1,ffff80003c462eb8) at pool_do_get+0x5df pool_get(ffffffff839519f0,1) at pool_get+0x162 shmget_allocate_segment(ffff80003c420558,ffff80003c463110,152,ffff80003c463060) at shmget_allocate_segment+0x1af sys_shmget(ffff80003c420558,ffff80003c463110,ffff80003c463060) at sys_shmget+0x195 syscall(ffff80003c463110) at syscall+0xb17 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xde1471bfad0, count: -8