last executing test programs: 2.687612694s ago: executing program 5 (id=6): r0 = socket(0x11, 0x3, 0x0) setsockopt(r0, 0x11, 0x2, 0x0, 0x0) setsockopt(r0, 0xfffffffa, 0x1d9, &(0x7f0000000180)="a6ad8129a250ed98d9532c1edfd3464a86869a1f34e5cc048cd0a5fd754d101bd8fa490016f57cbb74126f13", 0x2c) ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0xfffffffd, [{0x2, 0xffffff02}, {0x0, 0x100000}, {0x3, 0x6}, {0x1, 0xf}, {}, {0x0, 0xfffffffd}, {0x2, 0x2}, {0x0, 0xfffffffe}, {0x0, 0x1}, {0x2, 0x1}, {0x1, 0x10000000}, {0x3, 0x6}, {0x3, 0x9}, {0x3}, {0x1, 0x23}, {0x0, 0x5}, {}, {0x1, 0x4000006}, {0x2, 0x1}, {0x0, 0x1}, {}, {}, {0x3, 0xfff7fc00}, {0x0, 0x9}, {0x0, 0x6}, {0x2, 0x800}, {0x3, 0xffffff7f}, {0x1}, {0x2, 0xfffffffd}, {0x1, 0x2}, {0x0, 0x8001}, {0x1, 0x200060}]}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x37}, 0x4, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000140)=0xffbc, 0x0, 0x2e) pledge(&(0x7f0000000340)='ttW\xfb{\f\'\x81\xcb\xeb\x14\xc0\x84\x89dWK-\xef\xa6 \x00\x02\x00!\a\x9bp^|#\xcbhd\x97\xa3_\xbc\x04\x9d\x9f\xb4\x96\x03\x12\xe0\r\xe7\xb9E\b\x00\x1e\x00B\xaaY\xe1Q<\x19\xc0\xf6Yf\x9au^\xa0\xc9j\xdd-I\x01R\x00w\xf7\x15\x04\xa6\x82aY\x1d\xd7\f>Y\x06\"\xad\xb6\x88_\xeb\at\x91\xd3\xbf\xea\xddY\xe0\bt\x06S,\x1f\x1fjH\xbe\x01nz\x947\xf8Q|o\x80\xdbH\xa7-\xe3\xaaw\xcet\x044\xc5\xa9e\xa9\xf6\x1b\x8e\x05\x86\x91IsC\xb9ul\xaeu\xad\x9b\xaf\x04\xc4\x03\"F\x8f\xd5\xe8\r\x8d\xa1\x00\xcc\xd7\xa0\xe1\xeb\xc1>\xbd\t\xc8\x95\v\xb0, \xee\xa4\xa6\xb9a\x01&\xadrj\xd5\xc26P\xa14\xe0\xbf\xa04\x03@p\x1b\x06l@m\xffIM\x1es\x01=\xdbd\xf0?=\x8afcJ\x8e\xf7\nn\xd4<\x00\xec\xe4^\x00\x00\x00\xca\x90\xfa\x98\xc9gty\xce\xab\xd2\xa1\x85E\xe4\xa9\xd5\xab\x83\xda?w\x83\xbc\xcf\xd20(L&b\xed\x8c\x1d\x1a\x9fd\x99H\x9e\x82\x10\xea\x05\xf8\xff\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\xa6\x8c\x05n\x83\x83\x12+\x16\xc1\x00\x04\x00\x00\x13:o\x0f\x1fB\xa4\xddwB\x92h\xde\xfal3\x88e\x04J\\\x00D\xae`\x8e\xadd\xa8;\xee\xc4K\xe8]\x84\x90\xb8d\xfb\x95\xb3\xe9(x_\x80]\xadW\xd5\xa9\xaa\x03\x9c6\xa9\xc4\x01\x03\xea\xe5\x90\x85\x16\xb0DV\x13\x01\xab\x01\xf0\x8f\x02\xc2\xc89\x19o\xf5zJ\x9b\x03\x1f\xd7\xdbN\\\xc0\xcd?Pg\xd5q\x13\xfa\xab\xccJK\x11\\\x16~#P.\xc9K\x15r\xab\xda\xe2\xd4\xec8\x8b\xb6e\x96\xe9\xc3\x93\xed\x94.\xc2\xa0\x1fU#\x96\xe6\xb6C\xfa\x03/\x8b\x0e2\xec\x96v\x9b/.\v\x9e\x80\x18s\xae.\xf4\x14KS`\x87\x8b4\t\x00\x87{\xa8@e\xdc\xd7u!\x95\x91\xff,\x9c\x98\x001AK-\xee\xca\xda\x95\xc7C\x92\x91y(%\xc6\b\fM\x18\xd4\x062U]\xc3|\xf7\xfc\x7f\x83q\x15\xd0\x017oyd\xd7\x86\xda \xd7\x88\x18e\xba\x1a-\xb0\x9b\xfe&$\xecO\xdf\xc1\xba?\x02\xc4\xd2\xa7\xb1\xfe\x1a\xff\xee?\b\xdc#\x1a\xdb\x85\x84\xed\xfeP\x99R\x92\x00\xb3i\xd7\xd9\xba1\xe6\xf8f.[\xda\xf5\x7f\xaf\xe8\xc0\x97\xe0\xe6\xcf\x10\xce\x8c\xc00\xc2\x02\xedv\x80\xb9.\xeeghtz\t,\'y\x99\x01\xc0i\b\xda_+Q\x12\x9cX\x13\x7f\x9d\xcf\x92\xbc\tP\x86\xe6D\xae.+\x0f*\x1d5\x9d8W\xeb\xda\xfc%LS\x88\xa2\xc3\v\xb4N\x90Q\x90\xef\xa7NC\x84\x91\xed^\xbb\x02\xa6\xee\x00\x00q\xc9\xb3\x90\x8d\x1c\x11l\x1d\xd2f\xcb\xd8\xf6\x1b\xf1F\xd5\xa9\xd8\x1c\xa7]7\xf7}\x93Z\xdf(\"\xc3\x1af\xa9\xe7o\xc4\x85\x97Y\x06\"\xad\xb6\x88_\xeb\at\x91\xd3\xbf\xea\xddY\xe0\bt\x06S,\x1f\x1fjH\xbe\x01nz\x947\xf8Q|o\x80\xdbH\xa7-\xe3\xaaw\xcet\x044\xc5\xa9e\xa9\xf6\x1b\x8e\x05\x86\x91IsC\xb9ul\xaeu\xad\x9b\xaf\x04\xc4\x03\"F\x8f\xd5\xe8\r\x8d\xa1\x00\xcc\xd7\xa0\xe1\xeb\xc1>\xbd\t\xc8\x95\v\xb0, \xee\xa4\xa6\xb9a\x01&\xadrj\xd5\xc26P\xa14\xe0\xbf\xa04\x03@p\x1b\x06l@m\xffIM\x1es\x01=\xdbd\xf0?=\x8afcJ\x8e\xf7\nn\xd4<\x00\xec\xe4^\x00\x00\x00\xca\x90\xfa\x98\xc9gty\xce\xab\xd2\xa1\x85E\xe4\xa9\xd5\xab\x83\xda?w\x83\xbc\xcf\xd20(L&b\xed\x8c\x1d\x1a\x9fd\x99H\x9e\x82\x10\xea\x05\xf8\xff\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\xa6\x8c\x05n\x83\x83\x12+\x16\xc1\x00\x04\x00\x00\x13:o\x0f\x1fB\xa4\xddwB\x92h\xde\xfal3\x88e\x04J\\\x00D\xae`\x8e\xadd\xa8;\xee\xc4K\xe8]\x84\x90\xb8d\xfb\x95\xb3\xe9(x_\x80]\xadW\xd5\xa9\xaa\x03\x9c6\xa9\xc4\x01\x03\xea\xe5\x90\x85\x16\xb0DV\x13\x01\xab\x01\xf0\x8f\x02\xc2\xc89\x19o\xf5zJ\x9b\x03\x1f\xd7\xdbN\\\xc0\xcd?Pg\xd5q\x13\xfa\xab\xccJK\x11\\\x16~#P.\xc9K\x15r\xab\xda\xe2\xd4\xec8\x8b\xb6e\x96\xe9\xc3\x93\xed\x94.\xc2\xa0\x1fU#\x96\xe6\xb6C\xfa\x03/\x8b\x0e2\xec\x96v\x9b/.\v\x9e\x80\x18s\xae.\xf4\x14KS`\x87\x8b4\t\x00\x87{\xa8@e\xdc\xd7u!\x95\x91\xff,\x9c\x98\x001AK-\xee\xca\xda\x95\xc7C\x92\x91y(%\xc6\b\fM\x18\xd4\x062U]\xc3|\xf7\xfc\x7f\x83q\x15\xd0\x017oyd\xd7\x86\xda \xd7\x88\x18e\xba\x1a-\xb0\x9b\xfe&$\xecO\xdf\xc1\xba?\x02\xc4\xd2\xa7\xb1\xfe\x1a\xff\xee?\b\xdc#\x1a\xdb\x85\x84\xed\xfeP\x99R\x92\x00\xb3i\xd7\xd9\xba1\xe6\xf8f.[\xda\xf5\x7f\xaf\xe8\xc0\x97\xe0\xe6\xcf\x10\xce\x8c\xc00\xc2\x02\xedv\x80\xb9.\xeeghtz\t,\'y\x99\x01\xc0i\b\xda_+Q\x12\x9cX\x13\x7f\x9d\xcf\x92\xbc\tP\x86\xe6D\xae.+\x0f*\x1d5\x9d8W\xeb\xda\xfc%LS\x88\xa2\xc3\v\xb4N\x90Q\x90\xef\xa7NC\x84\x91\xed^\xbb\x02\xa6\xee\x00\x00q\xc9\xb3\x90\x8d\x1c\x11l\x1d\xd2f\xcb\xd8\xf6\x1b\xf1F\xd5\xa9\xd8\x1c\xa7]7\xf7}\x93Z\xdf(\"\xc3\x1af\xa9\xe7o\xc4\x85\x970xffffffffffffffff}) bind(r1, &(0x7f0000002200)=@in={0x10, 0x2, 0x0, 0x9}, 0x10) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (async) r2 = dup2(r0, r0) sendmmsg(r2, &(0x7f0000000200)={{&(0x7f0000000140)=@in6={0x1c, 0x18, 0x3, 0x7, "ff0100", 0x3}, 0x1c, 0x0, 0x0, 0x0}}, 0x38, 0x8) (async) ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, &(0x7f00000000c0)={0x8000a, 0x88000148, {[0x1, 0x40, 0x1100000006, 0x6, 0x3, 0x8000, 0x6, 0x40000000000, 0x7, 0x1, 0x8000000009, 0x91b, 0x8, 0x2000180, 0xfff, 0xd3, 0x76, 0x5], [0x5438b950, 0x5, 0x80, 0x5, 0x1, 0xe3f, 0x9, 0x2, 0xffffffffffffffff, 0x3], [0x6, 0x3, 0x8, 0x0, 0x1, 0x210, 0x1002002], [0x4000100000004, 0x3, 0x1002, 0x5, 0x3], [{0x0, 0x7, 0x10, 0x80000000005}, {0x2, 0x66bbe6ef, 0x3, 0x338}, {0x1000, 0xff, 0x0, 0x5}, {0xb, 0x9, 0x2, 0x1}, {0x3, 0x3, 0x2, 0x8}, {0x1f, 0x4, 0x0, 0x7}, {0xe8, 0x5, 0x1ff, 0x4}, {0x3, 0x10000, 0xffff, 0x5}], {0x28, 0x4, 0x401, 0x8}, {0x9, 0xffffbfc0, 0x6}}}) (async) sysctl$kern(&(0x7f00000000c0)={0x1, 0x54}, 0x2, 0x0, 0x0, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) sysctl$kern(&(0x7f00000000c0)={0x1, 0x3e}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x10, 0x0, 0x37) (async) r3 = syz_open_pts() (async) r4 = socket$inet(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000000)={0x10, 0x2, 0x3}, 0x10) (async) listen(r4, 0x7fff) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x3d, 0x28, 0x66, 0x0, 0x0, 0x6, 0x0, @remote={0xac, 0x14, 0x0}, @local={0xac, 0x14, 0x0}}, @tcp={{0x3, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x8200, 0x0, 0xfffc}}}}}}) syz_emit_ethernet(0x36, &(0x7f0000000340)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x3d, 0x28, 0x65, 0x0, 0x0, 0x6, 0x0, @remote={0xac, 0x14, 0x0}, @local={0xac, 0x14, 0x0}}, @tcp={{0x3, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x8200, 0x0, 0xfffc}}}}}}) syz_open_pts() (async) syz_emit_ethernet(0x11b, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd684498fb00e53c0b33a8020fc8d98480657b31de55aacc0eff0200000000000000000000000000012b050000000000000502000304015ba41f39fec785be51dc84e28f56b5df54432be6fc920ba1cddac8b5b3dea2f24677020090"]) (async) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) (async) sysctl$vfs_nfs(&(0x7f0000002580)={0xa, 0x2, 0x1}, 0x3, &(0x7f0000000080)="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", &(0x7f00000035c0)=0x270, 0x0, 0x0) (async) ioctl$TIOCSTAT(r3, 0x20007465) (async) r5 = socket(0x11, 0x3, 0x0) sendto$unix(r5, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a378343712051eea040000000000", 0xb1, 0x1a, 0x0, 0x0) r6 = setsid() getsid(r6) (async) close(r5) mmap(&(0x7f00002d9000/0xd000)=nil, 0xd000, 0x2, 0x10, r2, 0x0) 1.996062368s ago: executing program 1 (id=33): r0 = open(&(0x7f0000000000)='./file0\x00', 0x9cab835cfdc52675, 0xa2) preadv(r0, &(0x7f00000012c0)=[{&(0x7f0000000040)=""/58, 0x3a}, {&(0x7f0000000140)=""/242, 0xf2}, {&(0x7f0000000240)=""/93, 0x5d}, {&(0x7f00000002c0)=""/4096, 0x1000}], 0x4, 0xdbf) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0xa011, r0, 0x0) ftruncate(r0, 0x79c8) sysctl$kern(&(0x7f00000000c0)={0x1, 0x4e}, 0x3, &(0x7f0000000100)="71f95f84cf71b59c7afec37582", &(0x7f0000000080)=0x2000, 0x0, 0x37) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1000e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd60db090000280000fed38d5ba80b9e61470c535a98000000ff0200000000000000000000000000012c"]) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd6000000800082b00fe8000000000000000000000000000bbfe"]) 1.960142622s ago: executing program 1 (id=38): open$dir(&(0x7f0000000040)='./file0/file0\x00', 0x402, 0x54) ioctl$TIOCSETAF(0xffffffffffffffff, 0x802c7416, &(0x7f0000000180)={0x10f278, 0x5, 0x3, 0xb218, "bb080007020101d9000081000000000000002000", 0x4}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) unveil(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='x\x00') open$dir(&(0x7f0000000040)='./file0/file0\x00', 0x402, 0x54) (async) ioctl$TIOCSETAF(0xffffffffffffffff, 0x802c7416, &(0x7f0000000180)={0x10f278, 0x5, 0x3, 0xb218, "bb080007020101d9000081000000000000002000", 0x4}) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) (async) unveil(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='x\x00') (async) 1.610708598s ago: executing program 1 (id=54): sendto$unix(0xffffffffffffff9c, &(0x7f0000000000)="b1000504600000000000000007000000331c13fecea10500fef9e906c72fd3357ae320b37b673039d2d236073705ae04be38164991f7accf5f882b297be1aa5b236deb51e2f0ac3ebbc257699a5f139b672f4d335d223e7d029d6ba8af630037280200000000720f70c1f5a472c881ea6e69e0bb76d907c400000200361b1257aea8c5000020020000000000008abfba09", 0x91, 0x0, 0x0, 0x0) mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1) (async) mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1) r0 = socket(0x11, 0x3, 0x0) r1 = socket(0x18, 0x1, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) (async) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) sendmsg(0xffffffffffffffff, &(0x7f0000000f80)={0x0, 0x0, &(0x7f00000002c0)=[{0x0}, {&(0x7f0000000140)="9880", 0x2}], 0x170, 0x0}, 0x2) (async) sendmsg(0xffffffffffffffff, &(0x7f0000000f80)={0x0, 0x0, &(0x7f00000002c0)=[{0x0}, {&(0x7f0000000140)="9880", 0x2}], 0x170, 0x0}, 0x2) ioctl$FIONREAD(r1, 0xc020691b, &(0x7f00000001c0)) getsockopt$sock_timeval(r0, 0xffff, 0x1005, &(0x7f00000000c0), &(0x7f0000000100)=0x10) sendto$unix(r0, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500000721fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x404, 0x0, 0x0) 1.398022885s ago: executing program 6 (id=62): r0 = socket(0x18, 0x1, 0x0) (async, rerun: 64) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) (rerun: 64) close(0x3) (async) mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000180)={@local, @remote, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x2003, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0x0}, @broadcast, {[@end]}}, @udp={{0x1, 0x2, 0x8}}}}}}) syz_emit_ethernet(0x3a, &(0x7f00000000c0)={@local, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0xc, 0x2c, 0x0, 0x1, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0x0}, @broadcast}, @udp={{0x1, 0x0, 0x8}, {"e3c4fc985f1034d9e8011e714f720000"}}}}}}) (async) open(&(0x7f0000000040)='./file0\x00', 0x2, 0x102) (async) ioctl$FIONREAD(r0, 0xc0206917, &(0x7f00000001c0)) 1.397252077s ago: executing program 6 (id=63): r0 = socket(0x18, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0x1c, 0x18, 0x1, 0x5, "00000000000000000000000000000001", 0xc}, 0x1c) semget$private(0x0, 0x3, 0x4) unveil(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='x\x00') openat$dri(0xffffffffffffff9c, &(0x7f0000000300)='/dev/dri/card0\x00', 0x800, 0x0) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x18, 0x3, 0x6, '\x00\x00\x00\x00\x00\x00\x00\x00\"\x00\x00\x00\x00\x00\x00\b', 0x6}, 0x1c) sendmsg$unix(r0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={0x18}], 0x18, 0xc}, 0x4) open$dir(&(0x7f0000000140)='.\x00', 0x0, 0x0) pselect(0x40, &(0x7f0000000000)={0x2, 0x4, 0x0, 0x6, 0x9, 0xfffffffffffffc42, 0x3, 0x6}, &(0x7f0000000080)={0xfffffffffffffffa, 0xfffffffffffffffb, 0x5, 0xd4b1, 0xfffffffffffffff9, 0x40000009, 0x9, 0x3}, 0x0, 0x0, 0x0) r1 = openat$klog(0xffffffffffffff9c, &(0x7f0000000200), 0x8, 0x0) ioctl$LIOCSFD(r1, 0x80046c7f, &(0x7f0000000340)=r0) r2 = shmget$private(0x0, 0x4000, 0x95a999646a72d5f2, &(0x7f0000022000/0x4000)=nil) getpeername$inet6(r0, &(0x7f0000000180), &(0x7f00000001c0)=0x1c) shmat(r2, &(0x7f0000001000/0x3000)=nil, 0x2000) shmat(r2, &(0x7f0000024000/0x4000)=nil, 0x2000) shmat(r2, &(0x7f0000ffb000/0x3000)=nil, 0x5000) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0x200, 0xffff63de, 0x7, 0x0, 0x1000008, 0x3, 0x40, 0x10, [{0x25, 0x3, 0x6, 0x80000201}, {0x7, 0x8, 0x6, 0xffd}, {0x7, 0xfdfffffe, 0x7, 0x20001}, {0x2, 0xdc, 0x5}, {0x0, 0x8, 0xf11, 0xb}, {0x3, 0xffff, 0x80ce, 0x4}, {0x3, 0x52e, 0x10100, 0x5}, {0x0, 0x40009, 0xfffffffb, 0xfbffeae9}, {0x9b, 0xffe, 0x9, 0x7fff}, {0x3, 0xfffffff8, 0x5, 0x8bfd}, {0x0, 0x8000000, 0x0, 0x800007}, {0x4, 0xc7ce, 0x800001, 0x8}, {0x401, 0x106, 0x92fb, 0x40}, {0x200003, 0x80000000, 0x9, 0x6f5fc48b}, {0x81, 0x101, 0x1003, 0x9}, {0x9be2, 0x8001, 0x6, 0x8000069}]}) r3 = socket(0x2, 0x1, 0x0) getsockopt(r3, 0x6, 0x4, 0x0, 0x0) poll(&(0x7f0000000000), 0x35, 0x0) 1.396155414s ago: executing program 7 (id=64): mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x5) (async, rerun: 64) r0 = open(&(0x7f0000000000)='./file0\x00', 0x100, 0x30) (async, rerun: 64) ktrace(&(0x7f0000000040)='./file0\x00', 0x4, 0x22, 0x0) mkdirat(r0, &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x120) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) ioctl$FIONREAD(r1, 0x80286989, &(0x7f00000001c0)) (async, rerun: 32) r2 = open$dir(&(0x7f0000000b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x11) (rerun: 32) write(r2, 0x0, 0x0) (async) utimensat(r0, &(0x7f0000000180)='./file0\x00', &(0x7f00000002c0)={{0x0, 0xffffffffffff89f2}, {0x0, 0xa7b0}}, 0x0) (async, rerun: 64) ioctl$FIONREAD(r0, 0x40047307, &(0x7f0000000140)) (rerun: 64) 1.23271053s ago: executing program 7 (id=67): ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x4, 0xfd, 0x0, 0xfffffffe}, {0x2, 0x0, 0x0, 0xffffffff}, {0x17f, 0x0, 0x0, 0xbc2}]}) r0 = open(&(0x7f0000000000)='./file0\x00', 0x9cab835cfdc52675, 0xa2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0xa011, r0, 0x0) ioctl$AUDIO_GETPAR_ctl(r0, 0x40404124, &(0x7f0000000040)) (async) sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xfffffffffffffe3c, 0x0, 0x37) 1.223058151s ago: executing program 6 (id=68): ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f0000000100)={0xa, 0x3512, 0x1, 0x5, "3fbb0b0c0a706adc2a7ba8a282033262bef47620", 0x7, 0x5}) ioctl$TIOCSETAF(0xffffffffffffff9c, 0x802c7416, &(0x7f0000000000)={0x4, 0xffffff46, 0x2, 0x315a, "225e00d1b37377310900fa4ab1896c04aec100", 0x8, 0xf1}) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x404, &(0x7f0000000000)={0x10, 0x2, 0x1, 0xe0000001}, 0x10) (async) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x404, &(0x7f0000000000)={0x10, 0x2, 0x1, 0xe0000001}, 0x10) mkdir(&(0x7f0000000680)='./file0\x00', 0x0) rename(&(0x7f0000004580)='.\x00', &(0x7f00000045c0)='./file0\x00') (async) rename(&(0x7f0000004580)='.\x00', &(0x7f00000045c0)='./file0\x00') mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket(0x2, 0x2, 0x0) connect$unix(r0, &(0x7f0000000000), 0x10) ioctl$TIOCSTSTAMP(0xffffffffffffffff, 0x8008745a, &(0x7f00000002c0)={0x1, 0x8}) write(r0, &(0x7f0000000440)="14bdfa5d1d34e2fecb0020433b07b7f0e3aec430d2cb3799339a346f737850550700000095b7688ad4c4e1dd5489e7bafc58d3e5823757ae8b630719ef187ccad995f13dbe19a6dd4e6902bd8297b0799b426aabe9fad9db6996571c6d9f8b09d542c2148aa42be940970fe88d34d8f99afe7e782023740000000000800000010000000000000000000036d698af38942d3f2320e7d4fb9d111b702be8dc7bac90f17e563cbd0609c598f0148be2ca25d8b2e87f9791f8bf441559b253953f163b37d58fcee4", 0x7c4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x2, 0x1f) (async) r1 = open(&(0x7f0000000040)='./file0\x00', 0x2, 0x1f) ioctl$FIONREAD(r1, 0xc028698d, &(0x7f0000000100)) sysctl$kern(&(0x7f00000000c0)={0x1, 0x2c}, 0x4, &(0x7f0000000200)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec370823f4dc9562c038a6eee77ead68ec80199fea385f35c62aa35fd51a36189858bfa1bb9b6ca1308137ef5196c1231deee9976ba6f2e990a5f38f2ecf849e21304d396fac7be44476859df2d7a77a10ac3ef7e62c0d0e7f74c28b51a6218c1f23a99dc99d71d6e6e913636d6ff46b613556215d090a4fc998400c1c0eb7e845c8b95", &(0x7f0000000080)=0x3, 0x0, 0x84) (async) sysctl$kern(&(0x7f00000000c0)={0x1, 0x2c}, 0x4, &(0x7f0000000200)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec370823f4dc9562c038a6eee77ead68ec80199fea385f35c62aa35fd51a36189858bfa1bb9b6ca1308137ef5196c1231deee9976ba6f2e990a5f38f2ecf849e21304d396fac7be44476859df2d7a77a10ac3ef7e62c0d0e7f74c28b51a6218c1f23a99dc99d71d6e6e913636d6ff46b613556215d090a4fc998400c1c0eb7e845c8b95", &(0x7f0000000080)=0x3, 0x0, 0x84) select(0x40, &(0x7f0000000000)={0x400, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000000040), &(0x7f0000000080)={0xcb, 0x2}, &(0x7f0000000180)) (async) select(0x40, &(0x7f0000000000)={0x400, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000000040), &(0x7f0000000080)={0xcb, 0x2}, &(0x7f0000000180)) sysctl$kern(&(0x7f0000000080)={0x1, 0x10}, 0x2, 0x0, 0x0, 0x0, 0x0) lstat(&(0x7f0000000000)='./file0\x00', 0x0) getresuid(&(0x7f0000000100), 0x0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f00000000c0)=@file={0xe, 0x1, './file0\x00'}, 0xa) listen(r2, 0x1) r3 = socket$unix(0x1, 0x1, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x5, 0x1, './file0\x00'}, 0xa) (async) connect$unix(r3, &(0x7f0000000080)=@file={0x5, 0x1, './file0\x00'}, 0xa) listen(r2, 0x1) (async) listen(r2, 0x1) mprotect(&(0x7f00004f6000/0x3000)=nil, 0x3000, 0x6) sysctl$net_inet_ip(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0x18, 0x1, 0x0) (async) r4 = socket(0x18, 0x1, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) (async) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) ioctl$FIONREAD(r4, 0x8020697f, &(0x7f00000001c0)) 1.181616193s ago: executing program 7 (id=70): r0 = msgget$private(0x0, 0x1ba) ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffff9c, 0xc1045763, &(0x7f0000000040)={0x1, [{0x2, 0xffffff02}, {0x2}, {0x3, 0x7fff}, {0x1, 0x10f}, {}, {0x2, 0x9}, {0x2, 0x1}, {0x1}, {0x0, 0x2}, {0x2}, {0x1, 0x10000000}, {0x1, 0x4}, {0x2, 0x2}, {0x2}, {0x0, 0x20}, {0x0, 0x5}, {0x0, 0x1}, {0x2, 0x4000006}, {0x1, 0x1}, {}, {0x0, 0x3}, {0x2, 0x80000001}, {0x0, 0xfff7fc00}, {0x0, 0x9}, {0x0, 0x3}, {0x3, 0x800}, {0x3, 0xffffff7f}, {0x1}, {0x2, 0xffff}, {0x1, 0x6d7}, {0x2, 0x8001}, {0x1, 0x200064}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sysctl$kern(&(0x7f0000000100)={0x1, 0x20}, 0x2, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000300)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb80350001080006040004aa"]) msgsnd(r0, &(0x7f0000000180)=ANY=[@ANYRESOCT=r0], 0x401, 0x0) msgsnd(r0, 0x0, 0x45e, 0x800) msgrcv(r0, &(0x7f00000002c0)={0x0, ""/38}, 0x2e, 0x2, 0x1000) pselect(0x40, &(0x7f0000000500)={0x2, 0xf, 0x9, 0x9, 0xd4b500, 0xe, 0x17bbdb77, 0xf3}, 0x0, &(0x7f0000000580)={0x3ff, 0x9, 0x91c, 0x4, 0xd, 0xfffffffffffffff7, 0x5f47, 0xc}, &(0x7f00000005c0)={0x6, 0xff}, 0x0) syz_emit_ethernet(0x34, &(0x7f0000000600)=ANY=[@ANYBLOB="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"]) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x8001, 0x0, 0x0, 0x0, 0x0, 0xc5, 0x48e}, 0x5, 0x8, 0x0, 0x0, 0x1, 0x4000000000003, 0x20000000007f, 0x40000000000000}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x6, 0xfffffffffffffffe, &(0x7f0000000080)=0xff0a, 0x0, 0xffffffc9) r1 = socket(0x2, 0x2, 0x9) sendto$unix(r1, &(0x7f0000000000)="b100050400000000000008000120000000000000cea1fea7fef96ecfc73fd3357ae27caa0416fa4f376336acf00b7804be781e4991a742282765a3f7c8df5f886b297b61aa5b23ed00f4d682c8b2ca3ebb4257699a07000000acbdd602000d7d026ba8af63ff3728290200f5a872c881ff7cc53c8943310b404f36a00f90006ee01bc42caea8c50000bfb558fce91d50d8020208a371a3f800040000000000000001fbff00000000001000000000000000", 0xb1, 0x0, 0x0, 0x0) sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0x37) msgrcv(r0, &(0x7f00000001c0)={0x0, ""/229}, 0xed, 0x2, 0x1000) 1.150116187s ago: executing program 7 (id=72): pipe(&(0x7f0000000640)={0xffffffffffffffff}) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0xfffc, 0xffff63df, 0x7, 0x2, 0x8, 0x3, 0x40, 0x10, [{0x5, 0x3, 0x6, 0x80000201}, {0x4, 0x8, 0xffffffff, 0xfff}, {0x1, 0xfffffffe, 0x6, 0x3}, {0x2, 0xdf, 0xf, 0x3c}, {0x1, 0x7, 0xf11, 0x7}, {0x800, 0xffff, 0x80cf}, {0x0, 0x3, 0xc5, 0x9}, {0x7, 0x1, 0xfffffff8, 0xf3ffe2eb}, {0x8, 0xfff, 0x6, 0x20}, {0x3, 0x0, 0x5, 0x8bfd}, {0x8, 0x8000000, 0x8, 0x7}, {0x4, 0xc7ce, 0x800000, 0xa66}, {0x401, 0x10a, 0x9, 0x3e}, {0x200003, 0xee2, 0x2, 0x6f5fc48f}, {0x81, 0xd54a, 0x3, 0x5}, {0xffffffff, 0x8003, 0x6, 0x869}]}) r1 = socket(0x18, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0x1c, 0x18, 0x1, 0x5, "00000000000000000000000000000001", 0xc}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0x1c, 0x18, 0x1, 0xfffffffe, "00000000000000000000002caf616200", 0x6}, 0x1c) sendto(r1, 0x0, 0x0, 0x0, &(0x7f00000010c0)=@in6={0x1c, 0x18, 0x3, 0x3, '\x00', 0x2000b}, 0x1c) write(r0, &(0x7f0000000340), 0xd4e688a67930cd) poll(&(0x7f0000000000), 0x35, 0x0) 1.088928099s ago: executing program 6 (id=73): ioctl$WSMUXIO_REMOVE_DEVICE(0xffffffffffffffff, 0x80085762, &(0x7f0000000000)={0x0, 0x9}) r0 = socket(0x18, 0x2, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000040)={0x0, 0x3, r0}) r2 = socket$inet(0x2, 0x3, 0x0) setsockopt$inet_opts(r2, 0x0, 0x24, &(0x7f0000000000), 0x0) r3 = socket(0x2, 0x3, 0x0) getsockopt(r3, 0x29, 0x26, 0x0, 0x0) ioctl$KDMKTONE(r1, 0x20004b08, &(0x7f00000000c0)=0x8) bind(0xffffffffffffffff, &(0x7f0000000080)=@un=@file={0xe, 0x1, './file0\x00'}, 0xa) sysctl$net_inet_ah(&(0x7f00000000c0)={0x4, 0x1e, 0x2, 0x3}, 0x34, 0x0, 0x0, 0x0, 0x42) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sysctl$kern(&(0x7f00000000c0)={0x1, 0x31}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xff0a, 0x0, 0x37) setsockopt(r0, 0x1000000000029, 0xa, &(0x7f00000001c0)="03000000", 0x4) getsockopt(0xffffffffffffff9c, 0x1, 0x9, &(0x7f0000000100)=""/149, &(0x7f0000000200)=0x95) setsockopt(r0, 0x1000000029, 0xd, &(0x7f0000000000), 0x14) ioctl$WSMUXIO_REMOVE_DEVICE(0xffffffffffffffff, 0x80085762, &(0x7f0000000000)={0x0, 0x9}) (async) socket(0x18, 0x2, 0x0) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000040)={0x0, 0x3, r0}) (async) socket$inet(0x2, 0x3, 0x0) (async) setsockopt$inet_opts(r2, 0x0, 0x24, &(0x7f0000000000), 0x0) (async) socket(0x2, 0x3, 0x0) (async) getsockopt(r3, 0x29, 0x26, 0x0, 0x0) (async) ioctl$KDMKTONE(r1, 0x20004b08, &(0x7f00000000c0)=0x8) (async) bind(0xffffffffffffffff, &(0x7f0000000080)=@un=@file={0xe, 0x1, './file0\x00'}, 0xa) (async) sysctl$net_inet_ah(&(0x7f00000000c0)={0x4, 0x1e, 0x2, 0x3}, 0x34, 0x0, 0x0, 0x0, 0x42) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) sysctl$kern(&(0x7f00000000c0)={0x1, 0x31}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xff0a, 0x0, 0x37) (async) setsockopt(r0, 0x1000000000029, 0xa, &(0x7f00000001c0)="03000000", 0x4) (async) getsockopt(0xffffffffffffff9c, 0x1, 0x9, &(0x7f0000000100)=""/149, &(0x7f0000000200)=0x95) (async) setsockopt(r0, 0x1000000029, 0xd, &(0x7f0000000000), 0x14) (async) 977.634915ms ago: executing program 1 (id=54): sendto$unix(0xffffffffffffff9c, &(0x7f0000000000)="b1000504600000000000000007000000331c13fecea10500fef9e906c72fd3357ae320b37b673039d2d236073705ae04be38164991f7accf5f882b297be1aa5b236deb51e2f0ac3ebbc257699a5f139b672f4d335d223e7d029d6ba8af630037280200000000720f70c1f5a472c881ea6e69e0bb76d907c400000200361b1257aea8c5000020020000000000008abfba09", 0x91, 0x0, 0x0, 0x0) mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1) (async) mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1) r0 = socket(0x11, 0x3, 0x0) r1 = socket(0x18, 0x1, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) (async) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) sendmsg(0xffffffffffffffff, &(0x7f0000000f80)={0x0, 0x0, &(0x7f00000002c0)=[{0x0}, {&(0x7f0000000140)="9880", 0x2}], 0x170, 0x0}, 0x2) (async) sendmsg(0xffffffffffffffff, &(0x7f0000000f80)={0x0, 0x0, &(0x7f00000002c0)=[{0x0}, {&(0x7f0000000140)="9880", 0x2}], 0x170, 0x0}, 0x2) ioctl$FIONREAD(r1, 0xc020691b, &(0x7f00000001c0)) getsockopt$sock_timeval(r0, 0xffff, 0x1005, &(0x7f00000000c0), &(0x7f0000000100)=0x10) sendto$unix(r0, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500000721fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x404, 0x0, 0x0) 976.92459ms ago: executing program 1 (id=82): r0 = semget$private(0x0, 0x2, 0x2e4) r1 = getgid() semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000140)={{0x0, 0x0, 0x0, r1, 0x10c, 0x82fd, 0x0, 0x0, 0xc}, 0x0, 0x3, 0x0, 0x0, 0x7, 0x0, 0x4}) getgid() semctl$GETALL(r0, 0x0, 0x6, &(0x7f0000000200)=""/131) r2 = semget$private(0x0, 0x1, 0x4) semctl$GETZCNT(r2, 0x1, 0x7, &(0x7f0000000080)=""/173) semget$private(0x0, 0x2, 0x2e4) (async) getgid() (async) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000140)={{0x0, 0x0, 0x0, r1, 0x10c, 0x82fd, 0x0, 0x0, 0xc}, 0x0, 0x3, 0x0, 0x0, 0x7, 0x0, 0x4}) (async) getgid() (async) semctl$GETALL(r0, 0x0, 0x6, &(0x7f0000000200)=""/131) (async) semget$private(0x0, 0x1, 0x4) (async) semctl$GETZCNT(r2, 0x1, 0x7, &(0x7f0000000080)=""/173) (async) 740.546542ms ago: executing program 6 (id=83): mmap(&(0x7f00004b2000/0x3000)=nil, 0x3000, 0x4, 0x5010, 0xffffffffffffffff, 0x400) r0 = kqueue() kevent(r0, &(0x7f00000000c0), 0xd1e9, 0x0, 0x10000, 0x0) ftruncate(r0, 0x6c97) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) r1 = syz_open_pts() readv(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSTAT(r1, 0x20007465) ioctl$TIOCSETAF(r1, 0x802c7416, &(0x7f0000000180)={0x1040978c, 0x0, 0xf7fffbfc, 0x80a19f, "bb08000100f167d910508b000000000000000080", 0x100, 0x4000002}) ioctl$TIOCCBRK(r1, 0x2000747a) ioctl$TIOCSETAF(r1, 0x802c7416, &(0x7f00000002c0)={0x8, 0x8, 0x4, 0x80000000, "572934a1c2883249e772cc71b237c46fcd4eaeab", 0x3, 0x8}) writev(r1, &(0x7f0000000700)=[{&(0x7f0000000080)="34eb4cd59e8456ebc0881681c60e1cd9e0bf01b618b3cb934394c5951c1db0fd943a", 0xff99}], 0x1000000000000252) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) readv(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/50, 0xfd9f}], 0x2f) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000380)={0x103, 0x5, &(0x7f0000000040)=[0x9, 0x7fffffff, 0x5, 0x3, 0x0], &(0x7f0000000100)=[0x2067, 0xffff363d], &(0x7f0000000300)=[0x9a23, 0x80000001, 0x7e51, 0x9c, 0x8, 0x3, 0x80000000, 0x8000], &(0x7f0000000340)=[0x3, 0x8b, 0x5, 0x6], 0x0, 0xf8a}) closefrom(r1) r3 = socket(0x18, 0x2, 0x0) getsockopt$sock_int(r3, 0xffff, 0x20, &(0x7f00000000c0), &(0x7f0000000040)=0xfffffffffffffdee) sendto(0xffffffffffffffff, 0x0, 0xfffffffb, 0x4, &(0x7f00000000c0)=@in6={0x1c, 0x18, 0x2, 0xa8c, "a6ff0e6eeb81795d897d2270b307ea49", 0x8000}, 0x1c) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) ioctl$FIOASYNC(r0, 0x8004667d, &(0x7f0000000000)=0xa) sysctl$kern(&(0x7f0000000280)={0xa, 0x4}, 0x7, &(0x7f0000000140)="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", 0x0, 0x0, 0x5d) 655.503147ms ago: executing program 0 (id=87): r0 = shmget$private(0x0, 0x3000, 0x65d, &(0x7f0000ffa000/0x3000)=nil) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000000)=""/95) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000240)={{0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x7}, 0x0, 0xfffc, 0x0, 0x0, 0x4, 0x0, 0x800000800000000}) r1 = socket$inet(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x10, 0x2, 0x3}, 0x10) listen(r1, 0x7fff) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x3d, 0x28, 0x65, 0x0, 0x0, 0x6, 0x0, @remote={0xac, 0x14, 0x0}, @local={0xac, 0x14, 0x0}}, @tcp={{0x3, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x8200, 0x0, 0xfffc}}}}}}) syz_emit_ethernet(0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa000000000000080045f400280067000000069078e0000001ac1400aa4e234e23", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50d413b36b816a30"]) close(0x3) munmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000) shmctl$IPC_RMID(r0, 0x0) 655.25484ms ago: executing program 4 (id=88): syz_emit_ethernet(0x2a, &(0x7f0000000040)={@local, @random="aebf526c3a87", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x3d, 0x1c, 0x65, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x4, @local={0xac, 0x14, 0x0}}, @udp={{0x1, 0x0, 0x8}}}}}}) syz_extract_tcp_res(&(0x7f0000000000), 0x9, 0xffffc311) 654.310315ms ago: executing program 4 (id=89): symlink(&(0x7f0000000140)='./file1\x00', &(0x7f0000000000)='./file0\x00') open(&(0x7f0000000380)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf79e5) 647.743618ms ago: executing program 0 (id=90): symlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000d80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') symlink(&(0x7f0000000300)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000440)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') chdir(&(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 646.850253ms ago: executing program 2 (id=91): sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x404, &(0x7f0000000000)={0x10, 0x2, 0x1, 0xe0000001}, 0x10) r0 = socket(0x18, 0x1, 0x0) ioctl$FIONREAD(r0, 0xc0206917, &(0x7f00000001c0)) getpeername$inet(r0, &(0x7f0000000140), &(0x7f0000000180)=0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = socket(0x2, 0x2, 0x0) connect$unix(r1, &(0x7f0000000000), 0x10) r2 = semget$private(0x0, 0xb, 0x19f) semop(r2, &(0x7f0000000040)=[{0x3, 0x5, 0x1800}, {0x4, 0x3, 0x1800}, {0x4, 0x9, 0x1800}, {0x0, 0x7, 0x1800}, {0x3, 0x3e, 0x1800}, {0x0, 0x26, 0x1800}, {0x3}], 0x7) semop(r2, 0x0, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) r3 = socket(0x18, 0x1, 0x0) ioctl$FIONREAD(r3, 0xc0106924, &(0x7f00000001c0)) semctl$SETVAL(r2, 0x1, 0x8, 0x0) sendto$inet(r1, &(0x7f0000000080)="ace17458a479e6c980de1753323a866f6f3261b4266f86b9102100c034d435abc9170d9ef2a56c10b785ad70d9aaf06af22f644b53bec0da75b7d13d7bca932d95050353d9adbf1927d3883d73c48f6b19a75348f3b1", 0x56, 0xb, &(0x7f0000000100)={0x10, 0x2, 0x0, 0x9}, 0x10) recvmsg(r1, &(0x7f0000001480)={&(0x7f00000002c0)=@un=@file={0x0, 0x0, ""/4090}, 0xffc, &(0x7f0000001340)=[{&(0x7f00000012c0)=""/123, 0x7b}], 0x1, &(0x7f0000001380)=""/231, 0xe7}, 0x1) write(r1, &(0x7f0000000200)="14bdfa5d1d34e2fecb284a6498307dcda9aec43050036123339a346f737850551408753f95b7688ad477cf807815cc174c5e1bc4e1dd5489e7bafc58d3e5823757ae8b630719ef187ccad995f13dbe19a6dd4e6902bd8297b0799b426aabe9fad9db6996571c6d9f8bb5d542c2148aa42be940970fe88d34d8f99afe7e78202374000000000080000001000000000000000000", 0x2400) 533.699768ms ago: executing program 2 (id=92): open$dir(&(0x7f0000000040)='./file0\x00', 0xf02, 0x186) r0 = open(&(0x7f0000000040)='./file0\x00', 0x1, 0x90) write(r0, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) r1 = socket(0x18, 0x2, 0x0) setsockopt(r1, 0x1000000029, 0xd, &(0x7f0000000580), 0x0) r2 = socket(0x18, 0x2, 0x0) close(0x3) socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0xffff, 0x4, &(0x7f0000000040)=0x3, 0x4) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') unveil(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='c\x00') symlink(&(0x7f0000000300)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000d80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') bind$unix(r2, &(0x7f00000000c0)=@file={0x4c, 0x1, './file0\x00'}, 0xa) mkfifo(&(0x7f0000000000)='./file0\x00', 0xf) ktrace(&(0x7f0000000080)='./file0\x00', 0x4, 0x1108, 0x0) ioctl$VNDIOCCLR(r0, 0x80384601, &(0x7f0000000200)={&(0x7f0000000100)='./file0\x00', 0x2, &(0x7f00000001c0)='./file0\x00', 0x8}) syz_emit_ethernet(0x6a, &(0x7f0000000140)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "408e03", 0x34, 0x2b, 0x3, @local={0xfe, 0x80, '\x00', 0x0}, @local={0xfe, 0x80, '\x00', 0x0}, {[@hopopts={0x29}, @routing={0xc, 0x2, 0x0, 0xe1, 0x0, [@loopback]}], @tcp={{0x3, 0x1, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x80, 0x6, 0x0, 0xabd2}}}}}}}) 523.565719ms ago: executing program 4 (id=93): kill(0xffffffffffffffff, 0x1f) (async) r0 = accept(0xffffffffffffff9c, &(0x7f0000000000)=@un=@abs, &(0x7f0000000040)=0x8) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setrlimit(0x8, &(0x7f0000000980)={0x5, 0x5}) (async) socket(0x18, 0x1, 0x0) (async) r2 = socket(0x18, 0x2, 0x0) setsockopt(r2, 0x1000000000029, 0x24, &(0x7f0000000080)="00ef0004", 0x4) (async) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmsg(r1, &(0x7f0000000340)={&(0x7f0000000100)=@un=@file={0x0, 0x0, ""/251}, 0xfd, &(0x7f00000002c0)=[{&(0x7f0000000200)=""/161, 0xa1}], 0x1, &(0x7f0000000300)=""/29, 0x1d}, 0x1) r3 = fcntl$getown(0xffffffffffffffff, 0x5) fcntl$lock(r0, 0x9, &(0x7f00000000c0)={0x3, 0x0, 0x4, 0x4, r3}) 523.110506ms ago: executing program 4 (id=94): mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) (async) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0) ioctl$DIOCXBEGIN(r0, 0xc0104451, &(0x7f0000001940)={0x6, 0x6, &(0x7f0000000100)=[{0x0, './file0\x00', 0x81}, {0x1, './file1\x00', 0x3800}, {0x1, './file0\x00', 0x90b0}, {0x1, './file0\x00', 0x3}, {0x0, './file0\x00', 0x5}, {0x1, './file0\x00', 0x2}]}) 509.514704ms ago: executing program 4 (id=95): r0 = socket$inet(0x2, 0x1, 0x4) setsockopt$inet_opts(r0, 0x0, 0x200000000000c, &(0x7f0000000000)="ea40000100000000", 0x8) r1 = getthrid() r2 = getpgid(0xffffffffffffffff) setpgid(r1, r2) setsockopt$inet_opts(r0, 0x0, 0x200000000000c, &(0x7f0000000240)="ea00eb0100000000", 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) fsync(0xffffffffffffffff) setsockopt$inet_opts(r0, 0x0, 0x200000000000c, &(0x7f0000000240)="eaf5ff0800000000", 0x8) 508.933609ms ago: executing program 2 (id=96): pipe2(&(0x7f0000000000), 0x0) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x0, 0x9, {[0xfffffbfffffffffb, 0x2, 0x2, 0x100200000, 0x100000000, 0x7, 0xdf60, 0xfffffffffffffffb, 0x0, 0xffffffffffffffec, 0x93, 0xfffffffffffffff8, 0xffffffffffffffff, 0x200000000002, 0xb76, 0x4, 0xfffffffffffffffe, 0x400000000100], [0x8, 0x81, 0xfffffffffffffffa, 0xff, 0xa, 0x100000000007b98, 0x800, 0x9, 0x20000000000, 0x5], [0xfffffffe, 0x40000000008000, 0x40000000, 0x0, 0xb, 0x11000, 0xffffffff00000000], [0xb, 0x800001ffff7ffffb, 0x2, 0x9, 0xfffffffffffffffe, 0x5], [{0x0, 0x400000, 0x0, 0x7d06}, {0x1, 0x22, 0x5, 0x20000000000000}, {0x4, 0x0, 0xfffefffe, 0x280}, {0x3, 0x80004, 0x5, 0xfffffffffffffff8}, {0xfffe, 0x2, 0xffff, 0x1}, {0x0, 0x9, 0x9, 0xfffffffffffff281}, {0x5, 0x0, 0xfffffff7, 0xe}, {0xe, 0x100, 0x1, 0xb}], {0x1, 0x800008, 0x80000006, 0x3}, {0xe, 0x6, 0x6d5, 0x6}}}) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r1, 0x0, 0x200000000000c, &(0x7f0000000240)="ea00000100000000", 0xc) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r2 = socket(0x18, 0x2, 0x0) setsockopt(r2, 0x1000000000029, 0x40, &(0x7f0000000080)="00ef0004", 0x4) closefrom(r0) open$dir(&(0x7f0000000040)='./file0\x00', 0xf02, 0x186) chflags(&(0x7f0000000180)='./file0\x00', 0x10001) r3 = socket(0x6, 0x4001, 0x0) mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) open$dir(&(0x7f00000001c0)='./file0\x00', 0x1, 0x101) unveil(0x0, &(0x7f0000000080)='c\x00') r4 = fcntl$dupfd(r3, 0x2, 0xffffffffffffffff) socket(0x11, 0x3, 0x0) select(0x7, &(0x7f0000000000)={0x400}, &(0x7f0000000040), &(0x7f0000000080)={0xcb}, &(0x7f0000000180)) setsockopt$inet_opts(r0, 0x0, 0x1, &(0x7f0000000340)="33cd0de7783d56562e9f18db7df7817f6017124053f31f631202b23a2297acea378a69506255b769d911188e394556ff654787f04bc203555e30b342f181a45b2419c0cba09953604f5d45a555dd13c497d4590313665a5085b2694cd758b6fc7eda3e89b22b3d1c0f723907d45298b051d8f27e5bfcb27a4b423032", 0x7c) select(0x7, &(0x7f0000000000)={0x400}, &(0x7f0000000040), &(0x7f0000000080)={0xcb}, &(0x7f0000000180)) clock_gettime(0x3, 0xfffffffffffffffe) closefrom(r4) r5 = socket(0x18, 0x2, 0xd7) connect$inet6(r5, &(0x7f0000000000)={0x1c, 0x18, 0x3, 0x800, "fe80000800fdff000000000200"}, 0x1c) shutdown(r5, 0x1) r6 = socket(0x2, 0x2, 0x0) r7 = socket(0x1, 0x4001, 0x0) fcntl$dupfd(r6, 0xa, r7) r8 = socket$inet6(0x18, 0x5, 0x2) setsockopt$sock_int(r8, 0xffff, 0x8, &(0x7f0000000040)=0x74, 0x4) 505.801552ms ago: executing program 0 (id=97): r0 = socket(0x18, 0x2, 0x0) getsockopt(r0, 0x29, 0x25, 0x0, 0x0) r1 = socket(0x2, 0x4001, 0x0) r2 = socket(0x18, 0x1, 0x0) getsockopt(r2, 0x29, 0x32, 0x0, 0x0) r3 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) closefrom(r3) setsockopt$sock_int(r3, 0xffff, 0x1023, &(0x7f0000000040), 0xe0) ioctl$DIOCCHANGERULE(r3, 0xcd60441a, &(0x7f0000000000)={0x8a, 0x3, 0x7fff, './file0\x00', './file0\x00', 0x0, "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"}) 501.959665ms ago: executing program 6 (id=83): mmap(&(0x7f00004b2000/0x3000)=nil, 0x3000, 0x4, 0x5010, 0xffffffffffffffff, 0x400) r0 = kqueue() kevent(r0, &(0x7f00000000c0), 0xd1e9, 0x0, 0x10000, 0x0) ftruncate(r0, 0x6c97) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) r1 = syz_open_pts() readv(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSTAT(r1, 0x20007465) ioctl$TIOCSETAF(r1, 0x802c7416, &(0x7f0000000180)={0x1040978c, 0x0, 0xf7fffbfc, 0x80a19f, "bb08000100f167d910508b000000000000000080", 0x100, 0x4000002}) ioctl$TIOCCBRK(r1, 0x2000747a) ioctl$TIOCSETAF(r1, 0x802c7416, &(0x7f00000002c0)={0x8, 0x8, 0x4, 0x80000000, "572934a1c2883249e772cc71b237c46fcd4eaeab", 0x3, 0x8}) writev(r1, &(0x7f0000000700)=[{&(0x7f0000000080)="34eb4cd59e8456ebc0881681c60e1cd9e0bf01b618b3cb934394c5951c1db0fd943a", 0xff99}], 0x1000000000000252) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) readv(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/50, 0xfd9f}], 0x2f) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000380)={0x103, 0x5, &(0x7f0000000040)=[0x9, 0x7fffffff, 0x5, 0x3, 0x0], &(0x7f0000000100)=[0x2067, 0xffff363d], &(0x7f0000000300)=[0x9a23, 0x80000001, 0x7e51, 0x9c, 0x8, 0x3, 0x80000000, 0x8000], &(0x7f0000000340)=[0x3, 0x8b, 0x5, 0x6], 0x0, 0xf8a}) closefrom(r1) r3 = socket(0x18, 0x2, 0x0) getsockopt$sock_int(r3, 0xffff, 0x20, &(0x7f00000000c0), &(0x7f0000000040)=0xfffffffffffffdee) sendto(0xffffffffffffffff, 0x0, 0xfffffffb, 0x4, &(0x7f00000000c0)=@in6={0x1c, 0x18, 0x2, 0xa8c, "a6ff0e6eeb81795d897d2270b307ea49", 0x8000}, 0x1c) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) ioctl$FIOASYNC(r0, 0x8004667d, &(0x7f0000000000)=0xa) sysctl$kern(&(0x7f0000000280)={0xa, 0x4}, 0x7, &(0x7f0000000140)="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", 0x0, 0x0, 0x5d) 501.794823ms ago: executing program 4 (id=98): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) (async, rerun: 64) r0 = shmget$private(0x0, 0x3000, 0x65d, &(0x7f0000ffa000/0x3000)=nil) (rerun: 64) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000240)={{0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x9, 0x7}, 0x0, 0xfffc, 0x0, 0x0, 0x4, 0x1000000, 0x800000800000000}) (async) shmat(r0, &(0x7f0000001000/0x3000)=nil, 0x1000) (async, rerun: 64) shmctl$IPC_RMID(r0, 0x0) (async, rerun: 64) mprotect(&(0x7f0000101000/0x1000)=nil, 0x1000, 0x2) 477.029882ms ago: executing program 0 (id=99): r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUDIO_START(r0, 0x20004126) r1 = socket$inet6(0x18, 0x9002, 0x6) bind$inet6(r1, &(0x7f0000000040)={0x1c, 0x18, 0x3, 0x1003, "00000000000000000000000000200001", 0x4}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0x1c, 0x18, 0x2, 0xe, "000000000000000000e0000000000a00", 0x80000005}, 0x1c) 257.378903ms ago: executing program 2 (id=100): syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[]) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[]) (async) 253.859068ms ago: executing program 7 (id=101): mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) r0 = socket(0x18, 0x1, 0x0) r1 = dup(r0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) symlink(&(0x7f0000000300)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000d80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') symlink(&(0x7f0000000300)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000440)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') open$dir(&(0x7f0000000080)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xf02, 0x186) open$dir(&(0x7f0000000b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x0) rename(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 253.443607ms ago: executing program 0 (id=102): mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1) ioctl$TIOCSETAF(0xffffffffffffff9c, 0x802c7416, &(0x7f0000000040)={0x1, 0x3c, 0x5, 0x3, "dcb280faf2742f3e5100", 0x5, 0x6}) (async) ioctl$TIOCSETAF(0xffffffffffffff9c, 0x802c7416, &(0x7f0000000040)={0x1, 0x3c, 0x5, 0x3, "dcb280faf2742f3e5100", 0x5, 0x6}) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x0, 0x20}]}) (async) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x0, 0x20}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$vm_swapencrypt(&(0x7f0000000040)={0x6, 0x1b}, 0x3, 0x0, 0x0, 0x0, 0x0) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') unveil(&(0x7f0000000140)='./file0/file0/..\x00', &(0x7f00000004c0)='c\x00') unveil(&(0x7f0000000080)='./file0\x00', &(0x7f00000004c0)='x\x00') writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)="76e5eac907f9ccf7a251ceddcec7d6aa45cffe2c63a56077123a276d3ba4e9d17eb3eb5db12a3783a8e0620d357de1fe04fa9465b5bd1286e9624dec06a00c222f", 0x25}], 0x1) (async) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)="76e5eac907f9ccf7a251ceddcec7d6aa45cffe2c63a56077123a276d3ba4e9d17eb3eb5db12a3783a8e0620d357de1fe04fa9465b5bd1286e9624dec06a00c222f", 0x25}], 0x1) r0 = socket(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1001, &(0x7f0000000100)=0x20000, 0x4) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x404, &(0x7f0000000000)={0x10, 0x2, 0x1, 0xe0000001}, 0x10) (async) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x404, &(0x7f0000000000)={0x10, 0x2, 0x1, 0xe0000001}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) connect$unix(r0, &(0x7f0000000000), 0x10) write(r0, &(0x7f0000000700)="14bdfa5d1d34e2fecb284a9969e7eccda9aec48650036123339a346f737850551408b3f4466c00000000e1dd5489e7bafc58d3e5823757ae8b630719ef187ccad995f13dbe19a6dd4e6902bd8297b0799b426aabe9fad9db6996571c6d9f8bb5d542c2148aa42be940970fe88d34d8f99afe7e782023740000000000800000010000000000000000000022182c4f8b238c366fa51ac4df5753f4a0bf9a540279222fef644e70911345dbc09698b7496ac3b158b64f89", 0xfcb9) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) openat$tty(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0xc, 0x0, 0x3ff, 0x0, 0x81}, 0x400, 0xfffffffffffffff9, 0x0, 0x4, 0x40000001, 0x800000000000108, 0x24, 0x6, 0x0, 0xfffffffffff}) (async) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0xc, 0x0, 0x3ff, 0x0, 0x81}, 0x400, 0xfffffffffffffff9, 0x0, 0x4, 0x40000001, 0x800000000000108, 0x24, 0x6, 0x0, 0xfffffffffff}) openat$tty(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0x37) 246.639525ms ago: executing program 3 (id=103): mkdir(&(0x7f00000000c0)='./file2/file0\x00', 0x1d0) mkdir(&(0x7f0000000300)='./file2/file0\x00', 0xc2) rename(&(0x7f0000000000)='./file2/file0\x00', &(0x7f0000000080)='./file0\x00') 246.184896ms ago: executing program 1 (id=104): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r0, 0xffff, 0x1024, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x0, 0x3d}, 0x6205, 0x2a3, 0xffffffffffffffff, 0x2, 0x4, 0x3, r1, 0x40, 0x0, 0xffffffff, 0x0, 0x100000000}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x31}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xff0a, 0x0, 0x37) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$kern(&(0x7f0000000040)={0x1, 0x49}, 0x2, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1c, 0x0, 0x0) r2 = socket(0x18, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000000)={0x1c, 0x18, 0x0, 0x7, "fe8000f9000000000000397800", 0x9}, 0x1c) 111.520309ms ago: executing program 7 (id=105): r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x186) sysctl$kern(&(0x7f00000000c0)={0x1, 0x55}, 0x2, 0x0, 0x0, 0x0, 0x26) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0x37) r1 = openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4, 0x6012, r1, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x40000, 0x100) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0x1c, 0x18, 0x0, 0x4, "ff4100e88400000002ec800201001500", 0x9}, 0x1c) sysctl$net_inet_tcp(&(0x7f00000000c0)={0x4, 0x2, 0x6, 0x9}, 0x4, &(0x7f0000000000)="9b1809fffffffffffeff7f473f11e1a4e5f2f9f220ef7f0abdbc34fe42021588dc8ff44f4b76c76d41859d85ea800dabe467badf35b6fd74c94d1b44", &(0x7f0000000040)=0x10011, 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0xa011, r2, 0x0) socketpair(0x10, 0x5, 0x2, &(0x7f0000000080)={0xffffffffffffffff}) r4 = openat(r0, &(0x7f00000001c0)='./file0\x00', 0x20, 0xc0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(r2, 0xc01864c1, &(0x7f0000000200)={0x0, 0x2, 0xffffffffffffffff, 0x0, 0x3}) r6 = socket$unix(0x1, 0x2, 0x0) kevent(r2, &(0x7f0000000100)=[{{r0}, 0xfffffffffffffffe, 0x0, 0xf0000000, 0x4, 0x6}, {{r3}, 0xfffffffffffffff6, 0x81, 0x1, 0x3, 0x4}, {{r0}, 0xffffffffffffffff, 0x0, 0x591d84d5091a8c02, 0x1da, 0x7}, {{r1}, 0xfffffffffffffffc, 0x2e, 0x20, 0x6, 0x6}, {{r2}, 0xfffffffffffffffa, 0x92, 0x4, 0x2, 0x9}], 0x2, &(0x7f0000000240)=[{{r1}, 0xd8dda1fc3753a353, 0x4, 0x1, 0x200, 0x6}, {{r0}, 0xfffffffffffffff9, 0x12, 0x90000000, 0x5, 0x1000}, {{r4}, 0xfffffffffffffffc, 0xc0, 0x40, 0x8000000000000000, 0x5}, {{r5}, 0xfffffffffffffff8, 0x68, 0x1, 0x9, 0x7fff}, {{r0}, 0xffffffffffffffff, 0x36, 0x20, 0x4, 0x7fffffffffffffff}, {{r6}, 0xfffffffffffffff8, 0x59, 0x1, 0x1d3, 0x2}, {{r1}, 0xfffffffffffffffd, 0x30, 0x80, 0xfff, 0xfffffffffffffffc}, {{r2}, 0xfffffffffffffff7, 0x0, 0xf0000000, 0xec1, 0xdec5}, {{r0}, 0xfffffffffffffffb, 0x20, 0x10, 0xe0b, 0x3}, {{r0}, 0xfffffffffffffffb, 0x8a, 0x2, 0xffff, 0x4}], 0xf, &(0x7f0000000380)={0x7, 0xa4a8}) ftruncate(r2, 0x79c8) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 111.056371ms ago: executing program 2 (id=106): unveil(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='c\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000140)=@file={0x4, 0x1, './file0\x00'}, 0xa) execve(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) r2 = syz_open_pts() flock(r2, 0x14) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffff9c, 0xc00c642e, &(0x7f0000000040)={0x101, 0x728, r1}) ioctl$WSMOUSEIO_GETPARAMS(r3, 0x80105727, &(0x7f0000000180)={&(0x7f0000000100)=[{0x23, 0x1}, {0x81, 0xc}, {0x4, 0x9}], 0x3}) ioctl$DIOCXROLLBACK(r3, 0xc0104453, &(0x7f0000002b80)={0x9, 0x67b, &(0x7f0000000700)=[{0x1, './file0\x00', 0x8}, {0x0, './file0\x00', 0x2c46}, {0x1, './file0\x00', 0x4}, {0x0, './file0\x00', 0xad8f450c}, {0x1, './file0\x00', 0x9}, {0x0, './file0\x00', 0x6}, {0x1, './file0\x00', 0x8}, {0x0, './file0\x00', 0x8973}, {0x0, './file0\x00', 0x80a}]}) ioctl$VNDIOCGET(r3, 0xc4104603, &(0x7f00000002c0)={'./file0\x00', 0x2a, 0xfe0, 0x401}) 109.508749ms ago: executing program 3 (id=107): mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) sysctl$hw(&(0x7f0000000040)={0x6, 0x1d}, 0x2, &(0x7f0000000100)="5660b0", &(0x7f0000000000)=0x3, 0x0, 0x0) 109.101261ms ago: executing program 3 (id=108): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$hw(&(0x7f00000000c0)={0x7, 0x1}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = syz_open_pts() ioctl$TIOCSWINSZ(r0, 0x80087467, &(0x7f0000000000)={0x74, 0x7fff, 0xe0, 0x35b}) r1 = socket$unix(0x1, 0x5, 0x0) accept$unix(r1, &(0x7f0000000200)=@abs, &(0x7f0000000240)=0x8) r2 = socket(0x18, 0x1, 0x0) setsockopt(r2, 0x80, 0xb, &(0x7f0000000280)="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", 0x112) setsockopt(r2, 0x1000000029, 0xc, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) recvmsg(r2, &(0x7f00000001c0)={&(0x7f0000000040)=@un=@abs, 0x8, &(0x7f0000000100)=[{&(0x7f0000000080)=""/124, 0x7c}], 0x1, &(0x7f0000000140)=""/76, 0x4c}, 0x2001) 106.651651ms ago: executing program 3 (id=109): sysctl$net_inet_icmp(&(0x7f0000000100)={0x4, 0x2, 0x1, 0x7}, 0x4, 0x0, 0x0, 0x0, 0x0) kill(0xffffffffffffffff, 0x17) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x6, 0xfffffffffffffff7}) 105.843134ms ago: executing program 2 (id=110): r0 = semget$private(0x0, 0xb, 0x19f) semop(r0, &(0x7f0000000340)=[{0x0, 0x4, 0x1000}, {0x4, 0x7, 0x1800}], 0x2) r1 = semget$private(0x0, 0x7, 0x293) semctl$SETALL(r1, 0x0, 0x9, &(0x7f0000000000)) semctl$IPC_RMID(r0, 0x0, 0x0) sysctl$hw(&(0x7f00000000c0)={0x7, 0x5}, 0x7, &(0x7f00000014c0)="a3086eb27292b677a1937e83966895dfc71a032c27b582384907f0aae12f1cf9b7615a2fc0507fe44082e4e5647826b11d970fc5b506007cc67271ef49cb2b1459b100475bd137db85986fc0995abb403247e953c78c564635144ce861", &(0x7f0000000000)=0x4, 0x0, 0x2e) sysctl$hw(&(0x7f0000000000)={0x4, 0x4}, 0x2, 0x0, 0x0, 0x0, 0x0) (async) sysctl$hw(&(0x7f0000000000)={0x4, 0x4}, 0x2, 0x0, 0x0, 0x0, 0x0) syz_open_pts() (async) r2 = syz_open_pts() sysctl$net_inet_tcp(&(0x7f00000000c0)={0x4, 0x2, 0x6, 0x3}, 0x4, 0x0, 0x0, 0x0, 0x0) (async) sysctl$net_inet_tcp(&(0x7f00000000c0)={0x4, 0x2, 0x6, 0x3}, 0x4, 0x0, 0x0, 0x0, 0x0) clock_getres(0x3, &(0x7f0000000000)) ioctl$TIOCGETD(r2, 0x4004741a, &(0x7f00000002c0)) r3 = socket(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(0x3) (async) close(0x3) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000000)="7f454c4602df7a264ee4975f55011a49b70cb710aa950000000a52e92a24d18fcf8fd1f9794ffa08bb11bafcdc24ff4c5d0b5c7b1ad1a2ec434c500191", 0x3d}], 0x1) (async) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000000)="7f454c4602df7a264ee4975f55011a49b70cb710aa950000000a52e92a24d18fcf8fd1f9794ffa08bb11bafcdc24ff4c5d0b5c7b1ad1a2ec434c500191", 0x3d}], 0x1) sysctl$kern(&(0x7f0000000140)={0x1, 0x29}, 0x2, 0x0, 0x0, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000001480)=@file={0x1}, 0x2, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1c"], 0x20, 0x400}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r5 = socket(0x18, 0x1, 0x0) close(r5) socket(0x18, 0x2, 0x0) sendmsg$unix(r5, &(0x7f0000000040)={0x0, 0x26, 0x0, 0x0, 0x0, 0xffffffffffffff3b, 0x2}, 0x806) (async) sendmsg$unix(r5, &(0x7f0000000040)={0x0, 0x26, 0x0, 0x0, 0x0, 0xffffffffffffff3b, 0x2}, 0x806) r6 = socket(0x18, 0x2, 0x0) sendmmsg(r6, &(0x7f0000000200)={{&(0x7f0000000000)=@in6={0x1c, 0x18, 0x0, 0xaa, "ff010000000000000000000000000001", 0x6}, 0x1c, 0x0, 0x0, 0x0}}, 0x38, 0x4) recvmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2042) semget$private(0x0, 0x4, 0x1c1) (async) r7 = semget$private(0x0, 0x4, 0x1c1) semctl$GETALL(r7, 0x0, 0x6, 0xfffffffffffffffe) sysctl$vm(&(0x7f0000000080)={0x2, 0x4}, 0x2, &(0x7f00000003c0)="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", &(0x7f00000013c0)=0xff3, &(0x7f0000001400)="5650c5f79bdc66e8363370c6a95acae2809bdfdb343bd274e541b58d1d3eba571359adbcec1e07e02324c012e85536e8a1c017bcc307b96e5cf41f1138c6fa663f52643686a1cbc263a688c7c4ae330c0ed3d3aafbd34eff8b42b4a0befd3a0b6b0d01fe94b2847fa5b6e895758933029feb3dc1800f1da7fc91977d07acb0efce20a769cee73756e4a128c79cb72f8d4a1f8058b3bac961a0c9c1385728626ae9c2ae213526486e954c", 0xaa) (async) sysctl$vm(&(0x7f0000000080)={0x2, 0x4}, 0x2, &(0x7f00000003c0)="2dde4e64d3350c074789229d794b864da8010c5ca31dee0552931b20d22d425c09a8b411b5adc64216e654d02bd5056ffd52fe050f6f4e98acf43601ac9a76fc5c2e07298b735a349d7eacf153cda020c459a4f2524165a301b857eca29e8952f29f34a7764972358ac261a505369156d3a6db28e68d3712e9fbd290c0dab549008ddf761c39f31cc214f2d5b86a862e52ab6532fc6ed5bb24fd32c6325a3623f8315b9942aeed805ed977da3033cc1e6767d0aacc6967acc8c8925e98ceb3c342fabaf143e5e6b7d039ac71ddd28f02bbb4c371f68112e99bced6dba1b684e6e4adf638f9c3a83d2f6650a1416d64803b90fe9ae9120217555e2fe3132791434017309660f63bcb38b39da116c4796ca004f39a442f80694cfb78911102a7360134a331f160bfac4d763e6ec2765de3bb7f273dd06642c6b4485fef0c6467ded5cb49460b0505ee8af332e90689aa25c1db76ef659fae3a12490a801a063112d7d220993456848d659d6c8faab62777147a59f94a6f78960e98a6a57cd962b44e5146323fcf2469fa56072d3ba1ebf72ec173319b179aacd33190a69b3a280e01db2a817da53729c59e170e27d3634fe2ca85de85e9166c652e0eec93f9abde4d6b4ad982d3610bebbb555797d227ec80ae72ed94b3999086f0eaa32eee68e7de6a0accc8e2347797e13f1d31eea7e527b7631a1b36ae5a3bd334c21787c2c899c44e3ef87e31af61b691d3db27a8cc5f1eb6879b38c1085eb68bd1f5afcad2e0ab0e0006e5a93ca1a6cc19231536b65b42d4dd5bc3106af7666493f43139c46310e39ba19ec87a30cd9778f3c568893cc3d803103f4a2472a6f5c434e783cba153da14e42fc4b7235bd72181be3ebced123120c88c0ea610b28e7d6269d17b81495f064c5656a28e68d05d3157b3c7b19e482535eafea5f64b372b8023e4733b5bed68a5cd7cc2e24838e21d8bbaacb12555ef1772fc28f81ea02fc7d3142225507e8529943167b9e64b07be4c16314c1c287a60258f2787d05ba579c6a30eb41cbb93439c063a9e9e5875c9a872776711a0178250a6c808b70c33b2ad65f6e4a62a306a6e1ba75f2afa78f3142aa28febeac6190ff96c82ef91420b27e85be7054086abd3a1aeec253859a7d0508157c790bcf73fdf6ce4dfd5326ac557a31bdb7e65dcf5ac226c0fbbc3c3d7446056a751facc38febeb5fb064a1694db2d02a963ddf7ab8379a5dbf2f13dc5f88573d8550eb715202477d0a94e60ef80b519d0cdb147065c75e9d767d7dd517535e2601e2b4f92625ba77cf2c4901b5d3d72d760249c25509d54315e8135003deaa54e33c0893f02d24770aed54eac3670d42939d04810bc6ca08f2c39d56c50ed85d99ed0cb5bd3018b22e0a10eec88b81d444ae9ee92c0a7c134a38d351f62de36c31d97bec419ac72c764f78dd7d045dbb7f46b9c60d68fdf741c3b429f405ea1c3f4957b44f1ef086b16b5ce4babfdc97b6b993907a4ad051376822daf55d6c4cfe3aa91779c84e264bd1a99c4023e283cee471f115a161a3e1aa8672cdcdf65e47543b41aee2b541c70715496b36c0822066fb153d4367fbe5abc559febdeb2d591c5872485c01730ace7a00898d83182d95cf46152c2cb44eacd6496a5dbf8eeae2874577054db4d6a5b081616d946c5fbc0c9170c92283ff4e689f8a49a004bdb7063e749c2444af59268b9cbdf3e7f6317ef4df7262e1e922f948d6923830649025c56b7cd1f2f0c8fa2a7e7d236e4dfea2622fe62695c8012f8c2b33a57656a80d3ed38b7f3f95f23b019939e39232bc3643a87fcf4aaa981824784816a30a60bdd9988cead80a3e30e56c266ae20481d29acabaad65472d502e47cf819f1f6ccbec92e2c7d61b8ef49d0be0af27f62274698b23a223bd986c20c3c6950c8537097c5da62cd2772cd56cc23c0869015dfb2d0c24e564e9464867f394257f3e9207eabbf5626110066e33dfad2e3f25c3c9928d271e64f8a53b7f189efa0c13ed09bd3cd37a1a0775592bb39c1b776538a1e217add6396102d334d766c8097c0c7f8c7d5c28e2f8a0a7a6525a7436428d21ce761ef9d363b3258603f3fb7938e1b2d0f726ef7d86cf21e144382f350b79108b8cca0a48606e9e118ddca3254102f7d897da5de5c21102d55ff2611b78907a6238b8ce8517b9424ee0438ed6ce3b403670dce6da280f82eb8b858aba400ef1c9906295ddab979505f44473f4cf01479fdad37ccb7f581c18a9d993c64dbe45e7f71f06021efed0fabaef4cd101620ec604424028632675d935118214433f0d16d55b9d7ea62b56d972bc4847a259023a3bfcbb96d0462b0317c02bec38c22272358c5699d932e153914bea1c69cedb436adb5d5a36a2418b930b12b8e095ee2f5eae876bc49de816e9b9fa52dba07a50c4dcff9d30865c4e7b97f8f8706711bccfe5580e8ebe0aa6543d77cd52ab0f7a1a7781f491edb3af03970c191ef827c7fd13db2e1a5d089c4f03b70a1792be9790ca7ed0fe20ffff8f1238f2d14d9468a1ba6e5d242ab09d1ef0071ec28edeeefe5cfd6dee3e34df0ce42b85083d302fa8d3bed00d2158697dc3b5ff5a65d46d367255869695c2038317a2c1f371636775f16944dc9ed4375c4f4ffa7e5afd2963664eabf45a007a249e718f9d47b5b735c39cfac08b5afe115bc48c85010895a3b023a7bce710b2ffdd9e4cc974f3ccf4d951f2b4206472c2a95f4b58f4aec564fd627218dddfed443073e04ede2856770cff0af292d305523807a7effa124bc58b710e88a9faaa52f212fba0c6cd7675aa41e8d388fe4fd29117278a7851cdb232566814ecf1ea43826c9d812c3d8ca128ec8a99dd6ccc4dfda32ff618a564ab672de2936378cc285a8b2c42c974d63566f3efd3c165c766572bb4ff50da11c4ca9d56fddbc102f7833649abf44d450df830611113c448c2f86d5466cb0e2746885145af3f029ca19cf8c1686af1512730cac5e524b75fe0263cf3c4eb49fb41d3e72b55ef643439bd6ab89ae8bd25d221fb56554698e0bdb3654fcadd7e26942cadc50a5366d0400c06049b86daa908399dcf4f41ed050763c26d4e1104de9061a4c14ac0390e4c666fad09aedc95d46aff7160f9c88adc910185525da42ca8c7356221687c0816d45c5ae6fd10e79762fa2729df736d66ab39c544b30109732141122efe8c16100e8d5ff9bcfa875a08dc2faaf64083263d9ed66c5c6f9867fe83132cdb68ffc760b693b5d438040322c2f2707b8a528612bd56ccbd1a49b335043476301fd16f5f4f9c2c110daa071cc92c04f87215406f4088e4ab6e57cc9fecd24ed4c2c7efdf017c5c9e830b4b11a66b92b7cb41a058a7105426f2822ba611b8f6e524367219191e416953ebb5a0210b46067c832440dc2d4769d7bb82cf9fe9949a1595d4e9387d7cfb0d170a52fcbae652cce49a39ab506a6fe4112b6db024651155602caa25c5eeb1888ad009a681601f07855d8c50edf7f6c8400c1316f3cb6173ed295e109ecd1814d9f045c205fd7c569d53db60e16bef82b4a7bb0aa70e4a92634b04e8033a487ff5e2d513f54293715ebf7f59d644a8725f84bc8af4fd7ae384b39a2dedb484b2e6a556f975b60fe0bb37df08968dc8100d8f84215b9c7b25dd54990e6e2d9a338ff3f51dd7cd648fe2628686ca047deebfdc5d84ee08f6e2c5a7bd0cd1a522380f80a92a86afab9100c582ff0794f2033e62790449df0b83e3ac2b74e9d9d8fd37f92f85f58a5cac9a8d9dde186f1b8b28b652f71ee7171964066a8a782184bed5a3c320a0fd58e2e88e323d9f488b22439f5b98abe9f8ff6e8192fb03cb6bc10b51e623a5592c61358659adfab138bcca5eb734fc60c4433142b844fbc6b52c9a6207796c3a645231a09e9deb7c3b4ea9069e0acc595452da4959e00c6836989aee358a59f8fb5f99c70d6236244f27106787965eb57b91bdc52f1c5375213e56ca742debfeb605b015c51f803b58b16badeac92ade2207f79f9429ef939ebfa76089ab5b2b0fe88c889e5e53112e93b6a135174cd6597a9ff0ffd670770f0538c8b88d2fd4598a08f33683693e14ba900e03cc576208ab68717c16a4dbcd061651356b74b5696e0a06697241a6f422b06cfd53fc259a2e1bf9dd39fa397cb582458f7f0c17593c59d356e36f139fec7b7590957f75c020c2b79fae9a3ddb866d6545c72b53b54a9fb728a35f2abdedeca163af1a8a8d52d35eaf67ef540524727a7fc28b02dd4777721ee59c55ae60bf6a01e11e06500a271ad91c1ad6794248fc0348f12f1638fd03e4ba5a7c4c47b3f89e69ff6b5e5b7c43fcd350f7acd9f71a0e18f67dcd00ff4a260d144a3d714a69d177f95d62a33f0e3663ec984032a1a16fe0b6a734bf5bd2f07595df164367627b30b995cd632381709198ab9124768bb53a59d047a82a0f5ac62b18f95e89e543ad7a9ac7ee4da3212447fde0fb6fe6f789725742c3e3477a12a46cfbda859a7280f7ffeb46b29304d79fdbea7426a58ad52150a58c909270974e68183c91dfca6d8802fa2ed406e03898914b9f6d249017351b16d0e655b697338c3109f8d6699f9626d7a8f6bb3c128d3827f5e71c375929773717e0712cb7d6fadf3ddac5619eb9922c415dd20c970711148404728aa2ee76e9489859587854a5f8cce1a484af32fa1e74ba900ee875b63d57a99a1c43b31bcc83e1d5e1e78489b47728be4f0a79cac10e53a79f11d3c976d7e341e34da26dbf9453cdac11e017d6f9494fbc3c3a1b0a0ef8b5c30cdddc67b131acfcc529a4e5673a30f3a6c5e7c2a18c0e2213ffd572056d491bae3b5c5740290e133fac30a0780402c2a16fa0af4ca94ab01267945f4a53776169a6431ca33b0f45ddbc07d877cf50f167e8ce7f91255bbcc7ab7adb457d8078f11e4d7d51055a6cea41e18d03121a9a5966ad4bdb9d70e0e7794db68f42627c5b730092475b3e31ee450f94e1af503d7dc9715ad862d460238eb3955301bdab16f153b061735a446db602ce7614b4c57baa96fd8ff99507fa28bea7bbf02807e2a6202c5632376bb002e834ae3be3436e1333a42a090d4936de407e9fe2813dd14b99ae26e19870ca1d57123880728d2b67722a2631e53301440267d6bf2ce9b6f8696a2fe54c98ad5b5043f712dd701d791a242ba9d006ec2077f061ab270444ae62b1b9bb9a272881bcd6615f83462ff878cda1ba0a861c8d0ee3df863a76af39bfd350fe092b66c99c53bb2d53ed0738cc968415b63fff63896afc093fe29a0379f2f62cda861697f322f544c856941a07ac074658f7d78509cfcaa6433ee24747a8abc294fa634ecc1199c6bc7510c86edb17e1ddbf29de30465784a427dd59a3f5818dedb99184343035f58254e98f099052413dc7dc60a021a28cf4fd6e0cf6366ab489bc4d153f8f8e01b6cf3b7ee72a253c9bc701d6ea812b696805c0963b298b36306662ae05585f110f4914dc1ac788fc53372a6c3998701a8d09944c7bf63e98bc8821783d4af03007a53e5cf1265bc479ebcba769c50e8711b5e5c3a671cdc5b613ca07fd0be2379d0e88de52e9da780a9490e342bb2a18eea519f96f40a0f39d48287a4ca337ad225c56b710a91c90aa456571c39b4c70e050bad3a07dc821027b699458e0953cfce6a871c61b8f044eee75ec1a08904e607681e07147c5155988a4183581c3dd68e49e82f69451f672b752079e06651138261b53e512162727ab7b21b6a805a8760c10abd94", &(0x7f00000013c0)=0xff3, &(0x7f0000001400)="5650c5f79bdc66e8363370c6a95acae2809bdfdb343bd274e541b58d1d3eba571359adbcec1e07e02324c012e85536e8a1c017bcc307b96e5cf41f1138c6fa663f52643686a1cbc263a688c7c4ae330c0ed3d3aafbd34eff8b42b4a0befd3a0b6b0d01fe94b2847fa5b6e895758933029feb3dc1800f1da7fc91977d07acb0efce20a769cee73756e4a128c79cb72f8d4a1f8058b3bac961a0c9c1385728626ae9c2ae213526486e954c", 0xaa) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) connect$unix(r3, &(0x7f0000000100)=@file={0x0, 0x1, './file1\x00'}, 0xa) 101.776345ms ago: executing program 3 (id=111): r0 = socket(0x18, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x18, 0x0, 0x800, "fe80000400000000fdff00"}, 0x1c) syz_emit_ethernet(0xe, &(0x7f0000000840)=ANY=[@ANYBLOB="89cbd9ee6f4d3d6d708a03dd8848"]) r1 = fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) setsockopt$sock_int(r1, 0xffff, 0x1023, 0x0, 0x0) unveil(0x0, &(0x7f0000000240)='x\x00') open(&(0x7f0000000040)='./file0\x00', 0x100, 0xe) 35.70227ms ago: executing program 3 (id=112): chroot(0x0) getresuid(&(0x7f0000000140)=0x0, &(0x7f0000000180), &(0x7f00000001c0)) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x1, 0x0, r0, 0x0, 0x73, 0x91, 0xa142}, 0x7, 0x3, 0x8, 0x2000003, 0x2, 0x9e85, 0xfffffffffffffffe, 0x2}) (async) sysctl$kern(&(0x7f00000000c0)={0x1, 0x33}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x18, 0x0, 0x37) (async) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) setitimer(0x2, &(0x7f0000000000)={{0x6, 0x5}, {0x3, 0x6}}, &(0x7f0000000040)) syz_emit_ethernet(0xe6, &(0x7f0000000280)=ANY=[@ANYBLOB="aa75aaaaaaaaffffffffffff86dd6600000000b00630feffffff0000000000000099ea000000fe8000000000000000000000000000aa4e224e237f949db8119ebe4c9c25db78b41a6397c782b287f60078edf3679e1030b0e10ec91f51717f4a51dfaef870dbb0254f547c4044e68a210ceb1733c3c67f4513a6a455c9965d38cf8b8718906597cf529afcd286aa333155edadd508c3c00954010b98", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50020043907800073c1a3cdd98d6fea28a84681a056397e0a17211314f400c6da6799df8d43723ade2b818ccf32dc8fb56c49368a2b5344db73f345a7d155d7ae1fd0ff4828e043347b699d18baed1fc92b7b359a595d63eae2f00f929b58adc5716b917a483b9e4ef69d9391ca33a48924d7699970de5ffffffff1f383f48245e348802fe0405a153b68be9562ba4746bc05bceec3d9b6b05b0c57fee62533e3b4b95b3"]) 0s ago: executing program 0 (id=113): mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) r0 = syz_open_pts() ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f00000000c0)={0xf609, 0x8, 0xfffdff82, 0x1603508, "04f0ee090004000000000005ff22700907ffe000", 0xfffffffe, 0x43}) open$dir(&(0x7f00000001c0)='./file0\x00', 0x1, 0x101) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="89000000ffff000001"], 0x9}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x0, &(0x7f00000001c0)=""/240, 0xf0}, 0x0) sendmsg(r1, &(0x7f0000000380)={0x0, 0x32c, 0x0, 0x0, &(0x7f0000000000), 0x90}, 0x0) close(0x3) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) r3 = socket(0x18, 0x1, 0x0) r4 = dup(r3) ioctl$FIONREAD(r3, 0xc0106924, &(0x7f00000001c0)) ioctl$FIONREAD(r4, 0x80206997, &(0x7f0000000100)) r5 = kqueue() kevent(r5, 0x0, 0x3, 0x0, 0x10000, &(0x7f0000000740)={0xfffffffffffffffc, 0x72cf}) open$dir(&(0x7f0000000040)='./file0\x00', 0xf02, 0x186) chflags(&(0x7f0000000180)='./file0\x00', 0x10001) ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0xfffffffd, [{0x2, 0xffffff02}, {0x0, 0x100000}, {0x3, 0x6}, {0x1, 0xf}, {}, {0x0, 0xfffffffd}, {0x2, 0x1}, {0x0, 0xfffffffe}, {0x0, 0x1}, {0x2, 0x1}, {0x1, 0x10000000}, {0x3, 0x6}, {0x3, 0x9}, {0x3, 0x80000000}, {0x2, 0x23}, {0x0, 0x5}, {0x0, 0x1}, {0x3, 0x4000006}, {0x3, 0x1}, {0x0, 0x1}, {}, {}, {0x3, 0xfff7fc00}, {0x0, 0x9}, {0x3, 0x3}, {0x2, 0x800}, {0x3, 0xffffff7f}, {0x1}, {0x2, 0xfffffffd}, {0x1, 0x2}, {0x2, 0x8001}, {0x1, 0x200060}]}) syz_emit_ethernet(0xaa, &(0x7f00000003c0)=ANY=[@ANYBLOB="ffffffffffff00000000000086dd6097520800000000000000b10000000000000000000000bbff020000000000000000000000000001000a00c2"]) mmap(&(0x7f00000a5000/0x4000)=nil, 0x4000, 0x1, 0x1810, r1, 0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(0xffffffffffffffff, &(0x7f0000000080)=[{0x0}, {&(0x7f00000000c0)=""/179, 0xb3}], 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) recvmsg(r6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x802) execve(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r7 = socket$inet(0x2, 0x1, 0x0) setsockopt(r7, 0x0, 0x23, &(0x7f0000000040)="ffffffff", 0x4) unveil(0x0, &(0x7f0000000080)='c\x00') kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.155' (ED25519) to the list of known hosts. Data modified on freelist: word -35183597793266 of object 0xffff800001605660 size 0x20 previous type UVM amap (invalid addr 0xbda2627d64bdaf0e) panic: Data modified on freelist: word 4 of object 0xffff800001605660 size 0x20 previous type UVM amap (0x7fff != 0xdeafbead) Stopped at db_enter+0x25: addq $0x8,%rsp TID PID UID PRFLAGS PFLAGS CPU COMMAND *344665 93546 32767 0x10 0x4000000 0 syz-executor db_enter() at db_enter+0x25 panic(ffffffff83483db3) at panic+0x1e5 malloc(20,62,2) at malloc+0xdb6 amap_alloc1(40,2,0) at amap_alloc1+0x291 amap_alloc(40000,2,0) at amap_alloc+0xad amap_copy(ffffee006d043d80,ffffee006d0e2aa0,2,1,b48cd629000,b48cd629001) at amap_copy+0x6a8 uvm_fault_check(ffff80003c3d0620,ffff80003c3d0658,ffff80003c3d0690,0) at uvm_fault_check+0x473 uvm_fault(ffffee006d043d80,b48cd629000,0,2) at uvm_fault+0x106 upageflttrap(ffff80003c3d07c0,b48cd629000) at upageflttrap+0xa9 usertrap(ffff80003c3d07c0) at usertrap+0x430 recall_trap() at recall_trap+0x8 end of kernel end trace frame: 0xb48ddc33a70, count: 4 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{0}> ddb{0}> set $lines = 0 ddb{0}> set $maxwidth = 0 ddb{0}> show panic *cpu0: Data modified on freelist: word 4 of object 0xffff800001605660 size 0x20 previous type UVM amap (0x7fff != 0xdeafbead) ddb{0}> show kasan No such command ddb{0}> trace db_enter() at db_enter+0x25 panic(ffffffff83483db3) at panic+0x1e5 malloc(20,62,2) at malloc+0xdb6 amap_alloc1(40,2,0) at amap_alloc1+0x291 amap_alloc(40000,2,0) at amap_alloc+0xad amap_copy(ffffee006d043d80,ffffee006d0e2aa0,2,1,b48cd629000,b48cd629001) at amap_copy+0x6a8 uvm_fault_check(ffff80003c3d0620,ffff80003c3d0658,ffff80003c3d0690,0) at uvm_fault_check+0x473 uvm_fault(ffffee006d043d80,b48cd629000,0,2) at uvm_fault+0x106 upageflttrap(ffff80003c3d07c0,b48cd629000) at upageflttrap+0xa9 usertrap(ffff80003c3d07c0) at usertrap+0x430 recall_trap() at recall_trap+0x8 end of kernel end trace frame: 0xb48ddc33a70, count: -11 ddb{0}> show registers rdi 0 rsi 0x1 rbp 0xffff80003c3d0130 rbx 0xffffffff839a4e0f cpu_info_full_primary+0x2e0f rdx 0 rcx 0xffff8000363abcb0 rax 0xffffffff839a3ff0 cpu_info_full_primary+0x1ff0 r8 0x101010101010101 r9 0x8080808080808080 r10 0x7b9c01d79f0ffdce r11 0x60042cb7cd98d20c r12 0xffffffff839a4c10 cpu_info_full_primary+0x2c10 r13 0 r14 0 r15 0x1 rip 0xffffffff81f2e755 db_enter+0x25 cs 0x8 rflags 0x246 rsp 0xffff80003c3d0120 ss 0 db_enter+0x25: addq $0x8,%rsp ddb{0}> show proc PROC (syz-executor) tid=344665 pid=93546 tcnt=2 stat=onproc flags process=10 proc=4000000 runpri=50, usrpri=86, slppri=17, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff8000363aafb8,0xffff8000363ab790 process=0xffff800045ff1350 user=0xffff80003c3cb000, vmspace=0xffffee006d043d80 estcpu=36, cpticks=2, pctcpu=0.0, user=0, sys=2, intr=0 ddb{0}> ps PID TID PPID UID S PRLAGS PFLAGS WAIT COMMAND 97380 423197 94029 32767 2 0x10 0 syz-executor 5736 467207 8323 32767 2 0x10 0 syz-executor 5736 383980 8323 32767 3 0x10 0x4000080 fsleep syz-executor 61520 87747 99476 32767 3 0x4001010 0x2000 suspend syz-executor 61520 72169 99476 32767 2 0x4001010 0x4080080 syz-executor 61520 158495 99476 32767 2 0x4001010 0x4080080 syz-executor 93546 483365 24734 32767 2 0x10 0 syz-executor *93546 344665 24734 32767 7 0x10 0x4000000 syz-executor 5221 277887 66196 0 2 0x2 0 syz-executor 84582 476952 87560 32767 2 0x10 0 syz-executor 84582 282566 87560 32767 3 0x10 0x4000080 ttyout syz-executor 84582 31503 87560 32767 3 0x10 0x4000080 fsleep syz-executor 84582 65614 87560 32767 3 0x10 0x4000080 ttyout syz-executor 87560 308092 7844 32767 3 0x10 0x80 nanoslp syz-executor 7844 292778 66196 0 3 0x2 0x80 wait syz-executor 24734 133910 97499 32767 3 0x10 0x80 nanoslp syz-executor 97499 342822 66196 0 3 0x2 0x80 wait syz-executor 94029 274911 49381 32767 3 0x10 0x80 nanoslp syz-executor 94312 126619 55154 32767 3 0x10 0x80 nanoslp syz-executor 99476 118888 21750 32767 3 0x10 0x80 nanoslp syz-executor 8323 340388 12370 32767 2 0x10 0 syz-executor 49381 376055 66196 0 3 0x2 0x80 wait syz-executor 55154 466081 66196 0 3 0x2 0x80 wait syz-executor 60666 52597 66196 0 2 0x2 0 syz-executor 21750 30395 66196 0 3 0x2 0x80 wait syz-executor 12370 102441 66196 0 3 0x2 0x80 wait syz-executor 66196 159288 89718 0 3 0x2 0x80 kqread syz-executor 89718 348067 63799 0 3 0x100002 0x88 sigsusp ksh 63799 84416 2933 0 3 0x10 0x88 kqread sshd-session 2933 450538 33139 0 3 0x12 0x80 kqread sshd-session 21147 290093 1 0 3 0x100003 0x80 ttyin getty 33139 443494 1 0 3 0 0x88 kqread sshd 68664 96872 21414 73 3 0x1100010 0x80 kqread syslogd 21414 24702 1 0 3 0x100002 0x80 sbwait syslogd 35151 364761 1 0 3 0x100000 0x80 kqread resolvd 90783 233287 40516 77 3 0x100012 0x80 kqread dhcpleased 69062 104891 40516 77 3 0x100012 0x80 kqread dhcpleased 40516 401075 1 0 3 0 0x80 kqread dhcpleased 26469 219510 0 0 3 0x14000 0x200 bored smr 35192 399318 0 0 2 0x14000 0x200 zerothread 99468 131853 0 0 3 0x14000 0x200 aiodoned aiodoned 59431 225111 0 0 3 0x14000 0x200 syncer update 26922 517514 0 0 3 0x14000 0x200 cleaner cleaner 83367 265398 0 0 3 0x14000 0x200 reaper reaper 28139 186602 0 0 3 0x14000 0x200 pgdaemon pagedaemon 55884 388855 0 0 3 0x14000 0x200 bored viomb 38148 499526 0 0 3 0x14000 0x40000200 acpi0 acpi0 81231 456472 0 0 3 0x14000 0x40000200 idle1 11923 460092 0 0 3 0x14000 0x200 bored softnet1 80217 255820 0 0 3 0x14000 0x200 bored softnet0 35530 189696 0 0 3 0x14000 0x200 smrbar systqmp 45566 187469 0 0 3 0x14000 0x200 bored systq 20130 438338 0 0 3 0x14000 0x200 tmoslp softclockmp 10795 463397 0 0 3 0x14000 0x40000200 tmoslp softclock 45612 495864 0 0 3 0x14000 0x40000200 idle0 1 264799 0 0 3 0x2 0x80 wait init 0 0 -1 0 3 0x10000 0x200 scheduler swapper ddb{0}> show all locks CPU 0: exclusive mutex /syzkaller/managers/setuid/kernel/sys/kern/kern_malloc.c:96 r = 0 (0xffffffff8390b858) #0 witness_lock+0x5f1 #1 mtx_enter+0x4b4 #2 malloc+0x2ef #3 amap_alloc1+0x291 #4 amap_alloc+0xad #5 amap_copy+0x6a8 #6 uvm_fault_check+0x473 #7 uvm_fault+0x106 #8 upageflttrap+0xa9 #9 usertrap+0x430 #10 recall_trap+0x8 Process 93546 (syz-executor) thread 0xffff8000363abcb0 (344665) exclusive rwlock vmmaplk r = 0 (0xffffee006d043e80) #0 witness_lock+0x5f1 #1 rw_do_enter_read+0x3e8 #2 uvmfault_lookup+0x122 #3 uvm_fault_check+0x4f #4 uvm_fault+0x106 #5 upageflttrap+0xa9 #6 usertrap+0x430 #7 recall_trap+0x8 exclusive mutex /syzkaller/managers/setuid/kernel/sys/kern/kern_malloc.c:96 r = 0 (0xffffffff8390b858) #0 witness_lock+0x5f1 #1 mtx_enter+0x4b4 #2 malloc+0x2ef #3 amap_alloc1+0x291 #4 amap_alloc+0xad #5 amap_copy+0x6a8 #6 uvm_fault_check+0x473 #7 uvm_fault+0x106 #8 upageflttrap+0xa9 #9 usertrap+0x430 #10 recall_trap+0x8 Process 35530 (systqmp) thread 0xffff800045ffea60 (189696) shared rwlock systqmp r = 0 (0xffffffff83914c58) #0 witness_lock+0x5f1 #1 taskq_thread+0x12a #2 proc_trampoline+0x10 ddb{0}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 11045 12014K 12034K 166960K 12154 0 pcb 17 12K 12K 166960K 17 0 rtable 193 5K 7K 166960K 485 0 pf 27 16K 16K 166960K 39 0 ifaddr 34 6K 7K 166960K 60 0 ifgroup 42 1K 2K 166960K 66 0 sysctl 3 1K 9K 166960K 7 0 counters 66 36K 37K 166960K 78 0 ioctlops 0 0K 4K 166960K 38 0 iov 0 0K 8K 166960K 2 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1288 81K 81K 166960K 1398 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 5K 166960K 5 0 VM map 2 1K 1K 166960K 2 0 sem 19 1K 2K 166960K 20 0 dirhash 12 2K 2K 166960K 15 0 ACPI 1734 201K 291K 166960K 11964 0 file desc 22 78K 121K 166960K 317 0 sigio 0 0K 0K 166960K 1 0 proc 58 99K 179K 166960K 639 0 subproc 63 3K 4K 166960K 108 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 15 0 in_multi 77 5K 6K 166960K 146 0 ether_multi 1 0K 0K 166960K 1 0 mrt 1 0K 0K 166960K 6 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 67 307K 307K 166960K 67 0 exec 0 0K 1K 166960K 434 0 fusefs mount 1 32K 32K 166960K 1 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 230 155K 177K 166960K 4422 0 UVM aobj 69 3K 3K 166960K 71 0 pinsyscall 43 86K 112K 166960K 1533 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 0K 166960K 3 0 NDP 11 0K 2K 166960K 39 0 temp 70 9123K 9144K 166960K 4606 0 kqueue 14 22K 26K 166960K 41 0 SYN cache 2 16K 16K 166960K 2 0 ddb{0}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 28 0 0 1 0 1 1 0 8 0 rtpcb 120 54 0 51 1 0 1 1 0 8 0 rtentry 176 157 0 69 6 0 6 6 0 8 0 unpcb 144 93 0 78 1 0 1 1 0 8 0 syncache 336 6 0 6 1 0 1 1 0 8 1 tcpcb 736 112 0 108 7 0 7 7 0 8 6 arp 136 26 0 12 1 0 1 1 0 8 0 ipq 40 1 0 0 1 0 1 1 0 8 0 ipqe 40 2 0 1 1 0 1 1 0 8 0 inpcb 328 233 0 226 7 0 7 7 0 8 6 ip6q 80 1 0 0 1 0 1 1 0 8 0 ip6af 40 1 0 0 1 0 1 1 0 8 0 nd6 152 38 0 20 2 0 2 2 0 8 0 kcovpl 48 12 0 5 1 0 1 1 0 8 0 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 643 0 235 32 0 32 32 0 8 4 art_table 40 644 0 235 6 0 6 6 0 8 0 art_node 32 157 0 67 1 0 1 1 0 8 0 sysvmsgpl 40 2 0 1 1 0 1 1 0 8 0 semupl 112 3 0 3 1 0 1 1 0 8 1 semapl 72 18 0 1 1 0 1 1 0 8 0 shmpl 112 68 0 2 2 0 2 2 0 8 0 dirhash 1024 19 0 2 3 0 3 3 0 8 0 dino2pl 256 1719 0 244 93 0 93 93 0 8 0 ffsino 296 1719 0 244 114 0 114 114 0 8 0 nchpl 144 2067 0 364 64 0 64 64 0 8 0 vnodes 216 1836 0 0 102 0 102 102 0 8 0 namei 1024 7590 0 7590 4 1 3 3 0 8 3 percpumem 16 55 0 6 1 0 1 1 0 8 0 kstatmem 264 33 0 12 2 0 2 2 0 8 0 scxspl 216 6969 0 6969 6 3 3 3 1 8 3 plimitpl 152 123 0 101 2 0 2 2 0 8 0 sigapl 424 609 0 559 7 0 7 7 0 8 0 knotepl 120 295 0 0 9 0 9 9 0 8 0 kqueuepl 224 47 0 36 1 0 1 1 0 8 0 pipepl 344 150 0 123 3 0 3 3 0 8 0 fdescpl 528 593 0 559 3 0 3 3 0 8 0 filepl 160 2344 0 2145 12 0 12 12 0 8 1 lockfpl 104 37 0 35 1 0 1 1 0 8 0 lockfspl 48 14 0 12 1 0 1 1 0 8 0 sessionpl 144 32 0 17 1 0 1 1 0 8 0 pgrppl 48 46 0 23 1 0 1 1 0 8 0 ucredpl 104 278 0 261 1 0 1 1 0 8 0 zombiepl 144 561 0 559 1 0 1 1 0 8 0 processpl 1232 609 0 559 5 0 5 5 0 8 0 procpl 664 809 0 751 6 0 6 6 0 8 0 sockpl 752 388 0 363 10 0 10 10 0 8 7 mcl64k 65536 1 0 0 1 0 1 1 0 8 0 mcl9k128 9344 2 0 0 1 0 1 1 0 8 0 mcl8k 8192 2 0 0 1 0 1 1 0 8 0 mcl4k 4096 122 0 0 16 0 16 16 0 8 0 mcl2k2 2112 1 0 0 1 0 1 1 0 8 0 mcl2k 2048 27 0 0 4 0 4 4 0 8 0 mextrefs 64 22 0 0 1 0 1 1 0 8 0 mtagpl 96 2 0 0 1 0 1 1 0 8 0 mbufpl 256 259 0 0 17 0 17 17 0 8 0 bufpl 272 2428 0 102 156 0 156 156 0 8 0 anonpl 32 5351 0 0 44 0 44 44 0 247 0 amapchunkpl 152 12794 0 12292 28 0 28 28 0 158 1 amappl16 200 2012 0 1999 5 1 4 5 0 8 2 amappl15 192 2 0 2 1 1 0 1 0 8 0 amappl14 184 461 0 460 1 0 1 1 0 8 0 amappl13 176 162 0 152 1 0 1 1 0 8 0 amappl12 168 849 0 817 2 0 2 2 0 8 0 amappl11 160 38 0 38 1 1 0 1 0 8 0 amappl10 152 66 0 55 1 0 1 1 0 8 0 amappl9 144 274 0 273 1 0 1 1 0 8 0 amappl8 136 107 0 105 1 0 1 1 0 8 0 amappl7 128 147 0 136 1 0 1 1 0 8 0 amappl6 120 188 0 187 1 0 1 1 0 8 0 amappl5 112 96 0 88 1 0 1 1 0 8 0 amappl4 104 281 0 265 1 0 1 1 0 8 0 amappl3 96 2212 0 2115 5 1 4 4 0 8 1 amappl2 88 715 0 644 2 0 2 2 0 8 0 amappl1 80 11624 0 11065 15 0 15 15 0 8 1 amappl 88 3634 0 3467 5 0 5 5 0 92 0 uvmvnodes 80 101 0 0 3 0 3 3 0 8 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 70 0 2 2 0 2 2 0 8 0 uaddrrnd 24 593 0 559 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 593 0 559 1 0 1 1 0 8 0 vmmpekpl 168 6771 0 6715 3 0 3 3 0 8 0 vmmpepl 168 47677 0 45771 98 0 98 98 0 357 7 vmsppl 488 592 0 559 7 1 6 6 0 8 0 rwobjpl 80 16976 0 15986 23 0 23 23 0 8 0 pdppl 4096 1193 0 1118 111 26 85 95 0 8 10 pvpl 32 12811 0 0 106 2 104 104 0 265 0 pmappl 256 592 0 559 4 1 3 3 0 8 0 extentpl 40 46 0 28 1 0 1 1 0 8 0 phpool 112 454 0 30 13 0 13 13 0 8 0 ddb{0}> machine ddbcpu 0 Invalid cpu 0 ddb{0}> trace db_enter() at db_enter+0x25 panic(ffffffff83483db3) at panic+0x1e5 malloc(20,62,2) at malloc+0xdb6 amap_alloc1(40,2,0) at amap_alloc1+0x291 amap_alloc(40000,2,0) at amap_alloc+0xad amap_copy(ffffee006d043d80,ffffee006d0e2aa0,2,1,b48cd629000,b48cd629001) at amap_copy+0x6a8 uvm_fault_check(ffff80003c3d0620,ffff80003c3d0658,ffff80003c3d0690,0) at uvm_fault_check+0x473 uvm_fault(ffffee006d043d80,b48cd629000,0,2) at uvm_fault+0x106 upageflttrap(ffff80003c3d07c0,b48cd629000) at upageflttrap+0xa9 usertrap(ffff80003c3d07c0) at usertrap+0x430 recall_trap() at recall_trap+0x8 end of kernel end trace frame: 0xb48ddc33a70, count: -11 ddb{0}> machine ddbcpu 1 Stopped at x86_ipi_db+0x27: addq $0x8,%rsp x86_ipi_db(ffff80002999dff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 mtx_enter(ffffffff8390b848) at mtx_enter+0x377 free(ffff8000015fa800,89,800) at free+0x9f KQRELE(ffffee0074d607e0) at KQRELE+0x273 kqpoll_exit() at kqpoll_exit+0xa8 exit1(ffff8000363aaa88,0,0,3) at exit1+0x4bf proc_suspend_check_locked(ffff8000363aaa88,0) at proc_suspend_check_locked+0x31d userret(ffff8000363aaa88) at userret+0x8c syscall(ffff80002a2a44e0) at syscall+0x9ce Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x5d87fc697e0, count: 3 ddb{1}> trace x86_ipi_db(ffff80002999dff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 mtx_enter(ffffffff8390b848) at mtx_enter+0x377 free(ffff8000015fa800,89,800) at free+0x9f KQRELE(ffffee0074d607e0) at KQRELE+0x273 kqpoll_exit() at kqpoll_exit+0xa8 exit1(ffff8000363aaa88,0,0,3) at exit1+0x4bf proc_suspend_check_locked(ffff8000363aaa88,0) at proc_suspend_check_locked+0x31d userret(ffff8000363aaa88) at userret+0x8c syscall(ffff80002a2a44e0) at syscall+0x9ce Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x5d87fc697e0, count: -12