last executing test programs: 3.549133603s ago: executing program 2 (id=3): open(&(0x7f0000000000)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf79e5) open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x9cab835cfdc52675, 0x58) sysctl$hw(&(0x7f0000000280)={0x6, 0x2}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) sysctl$hw(&(0x7f0000000280)={0x6, 0x8}, 0x2, &(0x7f0000000000), 0x0, 0x0, 0x0) 3.3683542s ago: executing program 6 (id=14): open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x0, 0x9, {[0xfffffbfffffffffb, 0x4, 0x2, 0x100200000, 0x6, 0x7, 0xdf60, 0xffffffffffffffff, 0x0, 0x2f01, 0x93, 0x3, 0xffffffffffffffff, 0x200000000002, 0xd, 0x4, 0xfffffffffffffffe, 0x400000000100], [0xfffffffffffffffe, 0x80000001, 0xfffffffffffffffa, 0x20200001, 0x5e, 0xf0, 0x800, 0x9, 0x0, 0xfffffffffffffffe], [0x100000001, 0x8000, 0x40000000, 0x0, 0xb, 0x11000, 0xffffffff00000000], [0x9, 0x1fffffffffb, 0x80000001, 0x4000000, 0xfffffffffffffffe, 0x90000000], [{0x4000, 0x0, 0x0, 0x7d06}, {0x9, 0x22, 0x5}, {0x4, 0x0, 0xfffefffe, 0x280}, {0x3, 0x4, 0x5, 0xffffffffffffffff}, {0x0, 0x2, 0x7f, 0x8}, {0x0, 0x7, 0x9, 0x2000000000000000}, {0x5, 0x0, 0xfffffff9, 0xb}, {0xe, 0xfc, 0xfffffffe, 0xb}], {0x7, 0x8, 0x80000006, 0x3}, {0xfffe, 0x5, 0x6d5, 0x6}}}) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0xe8, 0x0) close(0x3) r1 = fcntl$dupfd(r0, 0x3, 0xffffffffffffffff) dup(r1) r2 = getpid() writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000380)="673bb5b8cc0c16ed08f1b8d24ec34555a65007857cf49811f88d01f1fc94794643e7eca455061c9c3ce6abbbdabb26", 0x2f}], 0x1) sysctl$kern(&(0x7f0000000140)={0x1, 0x29}, 0x2, 0x0, 0x0, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000000)=@abs={0x1, 0x0, 0x1}, 0x8, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="10"], 0x20}, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r3 = socket(0x18, 0x1, 0x0) close(r3) socket(0x18, 0x2, 0x0) sendmsg$unix(r3, &(0x7f0000000040)={0x0, 0x26, 0x0, 0x0, 0x0, 0x1f, 0x2}, 0x806) fcntl$setown(r0, 0x6, r2) r4 = kqueue() kevent(r4, &(0x7f00000000c0), 0x138, 0x0, 0xffffffff, 0x0) listen(0xffffffffffffffff, 0x7fff) syz_emit_ethernet(0x36, &(0x7f0000000240)={@local, @random="b21eca4f35af", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x3d, 0x28, 0x67, 0x0, 0x0, 0x6, 0x0, @remote={0xac, 0x14, 0x0}, @local={0xac, 0x14, 0x0}}, @tcp={{0x3, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x8200, 0x0, 0xfffc}}}}}}) 3.308085549s ago: executing program 6 (id=16): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) semctl$IPC_RMID(0x0, 0x0, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) r0 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r0, 0xc0106924, &(0x7f00000001c0)) r1 = socket(0x2, 0x1, 0x0) ioctl$FIONREAD(r1, 0x80206913, &(0x7f0000000100)) shmget(0x1, 0x1000, 0x100, &(0x7f0000ffc000/0x1000)=nil) select(0x2a, 0x0, &(0x7f0000000340), &(0x7f0000001900)={0x100000000000000}, &(0x7f0000000440)) 3.306119189s ago: executing program 2 (id=18): open(&(0x7f0000000100)='.\x00', 0x0, 0x0) pselect(0x40, &(0x7f0000000000)={0x7, 0x4, 0x0, 0x2, 0x83a8, 0x9, 0x6, 0x6}, &(0x7f0000000080)={0xfffffffffffffffa, 0xfffffffffffffffb, 0x5, 0x1f9, 0x5, 0xa, 0x9, 0x3}, 0x0, 0x0, 0x0) (async) socket(0x18, 0x4000, 0x3) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0e99db6de761f86, 0x0) 3.296698935s ago: executing program 6 (id=19): getgroups(0xffffffffffffff8c, 0xffffffffffffffff) sysctl$kern(&(0x7f0000000040)={0x1, 0x28}, 0x2, 0x0, 0x0, 0x0, 0x0) r0 = semget(0x0, 0x1, 0x281) semop(r0, &(0x7f0000000000), 0x23) semctl$SETALL(r0, 0x0, 0x9, &(0x7f0000000000)=[0x171, 0x7]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r1 = socket(0x18, 0x2, 0x0) getsockopt(r1, 0x29, 0x2b, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = kqueue1(0x2000c) mmap(&(0x7f0000524000/0x4000)=nil, 0x4000, 0x1, 0x1010, r2, 0x1) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r3, 0x0, 0x200000000000a, 0x0, 0x0) futimes(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x6}]) 3.186823005s ago: executing program 2 (id=24): r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x184) mprotect(&(0x7f000007e000/0x1000)=nil, 0x1000, 0x0) mmap(&(0x7f0000234000/0x3000)=nil, 0x3000, 0x5, 0x11, r0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) getpeername(r1, 0x0, &(0x7f0000001180)) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x184) (async) mprotect(&(0x7f000007e000/0x1000)=nil, 0x1000, 0x0) (async) mmap(&(0x7f0000234000/0x3000)=nil, 0x3000, 0x5, 0x11, r0, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) (async) getpeername(r1, 0x0, &(0x7f0000001180)) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) 3.185477827s ago: executing program 2 (id=25): setrlimit(0x8, &(0x7f0000000980)={0xb, 0x54}) r0 = syz_open_pts() symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') chdir(&(0x7f0000000080)='./file0/file0/..\x00') rename(&(0x7f00000001c0)='.\x00', 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x9cab835cfdc52675, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0xa011, r1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r2, &(0x7f0000000c80)={{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f00000000c0)=""/23, 0x17}], 0x1, 0x0}, 0x10000}, 0x38, 0x40, 0x0) recvmmsg(r2, &(0x7f00000005c0)={{0x0, 0x0, 0x0, 0x0, 0x0}, 0x6b}, 0x38, 0x0, 0x0) close(r0) syz_open_pts() setsid() ioctl$TIOCSCTTY(r0, 0x20007461) openat$tty(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) 3.103821504s ago: executing program 4 (id=29): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mprotect(&(0x7f0000334000/0x4000)=nil, 0x4000, 0x2) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x2, 0xf9, 0x2, 0x6df}, {0x8, 0x5, 0x4, 0xa3}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = syz_open_pts() readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000340)=""/4085, 0xff5}], 0x1) r1 = socket(0x18, 0x1, 0x0) setsockopt(r1, 0xec4b, 0x8, &(0x7f0000000140)="a0ed78d7ddd8d2e1dda90e7b8bc7b48201324089f1edc7842066c4c6b2f3f3ce61051c43f7a7e66091b1333b40c1b00cff66c318b65fc7b0325242472e407df17a97a28758dc6aa07b36702f710eb43b04ecf1793ed87b7b300e17d459a1b5103aeb270f6eb6a3c16957482b6a30c31dcb25e669c8bf2a5bdf9ed1f2e5a6178676e29eaba1833fd8409f2605c890339f14b97490ca4c5d8f43b3fe8f5d97b600ca37f3f9d90603352712b596b2430a8b68420280bb8d226caa586a18c994da3dab7b2027bb305e1e6e795ed70987d0919cd6ef95d7d2842d5ecaaecc41d2d0ac77e66a082632d06800b95056ec68a7ff1698ab6f17ca21b520", 0xf9) connect$inet6(r1, &(0x7f0000000000)={0x1c, 0x18, 0x0, 0x4ce, "fe805cea4b2e0e9aa5bb00"}, 0x1c) ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000100)={0x1, 0x1, 0x6, 0x5, "d76c1f46000000ef1f0160fbff2000404b00", 0x6}) syz_open_pts() symlink(&(0x7f00000010c0)='./file0\x00', &(0x7f0000000040)='./file1\x00') readlink(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 3.02120102s ago: executing program 5 (id=33): munmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000) r0 = socket(0x18, 0x1, 0x0) setsockopt(r0, 0x1000000029, 0xc, &(0x7f0000000000)="ebffcbff13b9fd812eaa4eee9c1d3d13471cd671", 0x14) sendmsg(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=ANY=[], 0x308}, 0xc) socketpair$unix(0x1, 0x1, 0x0, 0xfffffffffffffffe) sendmmsg(0xffffffffffffffff, &(0x7f00000003c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x454}, 0x4008}, 0x38, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x18289, 0x1f4) ftruncate(r1, 0xfffd) r2 = open(0x0, 0x200, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x10, r2, 0x0) ioctl$BIOCSETWF(0xffffffffffffff9c, 0x80104277, &(0x7f0000000040)={0x2, &(0x7f00000000c0)=[{0x0, 0x2, 0x26}, {0x2, 0x0, 0x0, 0x7}]}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x31}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sysctl$kern(&(0x7f00000000c0)={0x1, 0x40}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x74d, 0x0, 0x37) sysctl$net_inet_carp(0x0, 0x0, &(0x7f0000000080)="fdb80f0b3611e89cf7a1d8eb6590379b30ceefdfc0", 0x0, 0x0, 0x0) sendto$unix(0xffffffffffffff9c, &(0x7f0000000000)="b1000504600000000000000007000000331c13fecea10500fef9e906c72fd3357ae320b37b673039d2d236073705ae04be38164991f7accf5f882b297be1aa5b236deb51e2f0ac3ebbc257699a5f139b672f4d335d223e7d029d6ba8af630037280200000000720f70c1f5a472c881ea6e69e0bb76d907c400000200361b1257aea8c5000020020000000000008abfba09", 0x91, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r3 = socket(0x11, 0x3, 0x0) sendto$unix(r3, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x0, 0x0, 0x0) msync(&(0x7f000098b000/0x4000)=nil, 0x4000, 0x3) minherit(&(0x7f0000c4e000/0x2000)=nil, 0x2000, 0x1) r4 = openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x8, 0x0) ioctl$DIOCGETQUEUE(r4, 0xc148445f, &(0x7f0000000080)={0xd, 0x800, {'\x00', './file0\x00', './file0\x00', './file0\x00', {{0x9}, {0x80, 0x5}, 0xc}, {{0xffff, 0x1000}, {0x7, 0x4}, 0x7}, {{0x4, 0x3}, {0x4114, 0x3c800}, 0xfffffe00}, {0x2, 0x9, 0x8}, 0x0, 0x6, 0x5, 0x6}}) munmap(&(0x7f0000800000/0x800000)=nil, 0x800000) 2.926566008s ago: executing program 5 (id=35): r0 = socket(0x2, 0x1, 0x0) sendto(r0, &(0x7f00000002c0)='\n', 0xffffffffffffffe3, 0x407, 0x0, 0x0) r1 = syz_open_pts() setsid() (async) ioctl$TIOCSCTTY(r1, 0x20007461) (async) ioctl$TIOCSBRK(r1, 0x40047463) (async) recvmsg(r0, &(0x7f00000003c0)={&(0x7f0000000000)=@in, 0x10, &(0x7f0000000300)=[{&(0x7f0000000040)=""/126, 0x7e}, {&(0x7f00000000c0)=""/130, 0x82}, {&(0x7f0000000180)=""/142, 0x8e}, {&(0x7f0000000240)=""/72, 0x48}], 0x4, &(0x7f0000000340)=""/99, 0x63}, 0x803) 2.92591231s ago: executing program 5 (id=36): r0 = open(&(0x7f00000000c0)='./file0\x00', 0x2, 0x0) close(0x3) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0) 2.925588122s ago: executing program 5 (id=37): r0 = socket(0x2, 0x4001, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1, &(0x7f0000000080)=0x1fc, 0x4) fstat(r0, &(0x7f0000000000)) 2.924968772s ago: executing program 5 (id=38): pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000440)=""/66, 0x42}], 0x0) execve(0x0, 0x0, 0x0) rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00') writev(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="19", 0xfffffe98}], 0x1) unlinkat(0xffffffffffffffff, 0x0, 0x0) r2 = socket(0x11, 0x3, 0x0) setsockopt(r2, 0x11, 0x3, &(0x7f00000000c0), 0x0) r3 = socket$inet(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000000)={0x10, 0x2, 0x3}, 0x10) listen(r3, 0x7fff) syz_emit_ethernet(0x3e, &(0x7f0000000240)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x8, 0x30, 0x0, 0x0, 0x5, 0x6, 0x0, @remote={0xac, 0x14, 0x0}, @local={0xac, 0x14, 0x0}}, @tcp={{0x1, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0xa7, 0x0, 0x0, {[@sack_perm={0x4, 0x2}, @window={0x3, 0x3, 0x1}]}}}}}}}) mmap(&(0x7f0000638000/0x3000)=nil, 0x3000, 0x2, 0x3010, 0xffffffffffffffff, 0x8000000000000000) pipe2(&(0x7f0000000000), 0x0) (async) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000440)=""/66, 0x42}], 0x0) (async) execve(0x0, 0x0, 0x0) (async) rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00') (async) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="19", 0xfffffe98}], 0x1) (async) unlinkat(0xffffffffffffffff, 0x0, 0x0) (async) socket(0x11, 0x3, 0x0) (async) setsockopt(r2, 0x11, 0x3, &(0x7f00000000c0), 0x0) (async) socket$inet(0x2, 0x1, 0x0) (async) bind$inet(r3, &(0x7f0000000000)={0x10, 0x2, 0x3}, 0x10) (async) listen(r3, 0x7fff) (async) syz_emit_ethernet(0x3e, &(0x7f0000000240)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x8, 0x30, 0x0, 0x0, 0x5, 0x6, 0x0, @remote={0xac, 0x14, 0x0}, @local={0xac, 0x14, 0x0}}, @tcp={{0x1, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0xa7, 0x0, 0x0, {[@sack_perm={0x4, 0x2}, @window={0x3, 0x3, 0x1}]}}}}}}}) (async) mmap(&(0x7f0000638000/0x3000)=nil, 0x3000, 0x2, 0x3010, 0xffffffffffffffff, 0x8000000000000000) (async) 2.787097062s ago: executing program 4 (id=42): r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x1c) stat(&(0x7f0000000140)='./file1\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) open$dir(&(0x7f00000001c0)='./file1\x00', 0x1, 0x8048ed08611fd804) fstat(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r1, r2) semget(0x0, 0x3, 0x140) 2.762441048s ago: executing program 4 (id=45): r0 = socket(0x2, 0x4001, 0x0) kill(0xffffffffffffffff, 0x14) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r1, 0x0, 0x200000000000c, &(0x7f0000000240)="e000000000000000", 0x8) r2 = socket$unix(0x1, 0x1, 0x0) readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) bind$unix(r2, &(0x7f00000000c0)=@file={0xe, 0x1, './file0\x00'}, 0xa) setrlimit(0x8, &(0x7f0000000980)={0x7, 0x54}) r3 = syz_open_pts() close(r3) r4 = syz_open_pts() ioctl$TIOCSETA(r3, 0x802c7414, &(0x7f0000000040)={0x10001, 0x7ff, 0x2, 0xfffff85a, "df149e5ef64d33f134e98d488031616ef0fec959", 0xfff, 0x7}) setsid() fcntl$lock(0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x1, 0x1, 0x8000, 0x3}) sysctl$net_inet_tcp(0x0, 0x0, &(0x7f00000000c0)="9b180bc3eb987ab7fe", 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r5 = socket(0x1, 0x1000, 0x0) ioctl$TIOCSETAF(0xffffffffffffffff, 0x802c7416, &(0x7f0000000100)={0x2, 0x5, 0x4886, 0x800000d6, "eef46a5a77fee336a2ef0b58f92b77e91ba279b3", 0xc8, 0x8}) close(r5) r6 = socket(0x6, 0x1, 0xfe) setsockopt(r6, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) shmget(0x2, 0x1000, 0x248, &(0x7f0000ffd000/0x1000)=nil) shmget(0x2, 0x3000, 0x40, &(0x7f0000ffb000/0x3000)=nil) connect$unix(r5, &(0x7f0000000080)=@abs={0x7, 0x0, 0x0, 0x3}, 0xfc96) sysctl$net_inet_ip(&(0x7f00000010c0)={0x4, 0x2, 0x0, 0xe}, 0x4, 0x0, 0x0, 0x0, 0x5a) ioctl$TIOCSCTTY(r4, 0x20007461) ioctl$TIOCSETD(r3, 0x8004745f, &(0x7f0000000000)=0x1d) bind$unix(r2, &(0x7f0000000300)=@abs={0xb, 0xcc7a1262259365ed, 0x0, 0x2}, 0x8) r7 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) closefrom(r7) 2.758186239s ago: executing program 7 (id=46): ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0x5, [{&(0x7f0000ccc000/0x1000)=nil, &(0x7f0000685000/0x3000)=nil, 0xd}, {&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000fa3000/0x2000)=nil, 0x4}, {&(0x7f0000f08000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x100000001}, {&(0x7f0000672000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x2}, {&(0x7f0000422000/0x4000)=nil, &(0x7f000069a000/0x1000)=nil, 0xffffffffffffffff}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000c00000/0x400000)=nil, 0x91e8}, {&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000c44000/0x2000)=nil, 0x4}, {&(0x7f0000def000/0x4000)=nil, &(0x7f0000ff5000/0x4000)=nil, 0x6}, {&(0x7f0000c18000/0x4000)=nil, &(0x7f0000cc4000/0x2000)=nil, 0x7f}, {&(0x7f0000d84000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x80080000000000}, {&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000e82000/0x2000)=nil, 0x2ff}, {&(0x7f000000e000/0x4000)=nil, &(0x7f00000f4000/0x1000)=nil, 0x3bf87730}, {&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f00000dd000/0xa000)=nil, 0x1}, {&(0x7f0000d1d000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x5}, {&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x380b00a4}], './file0\x00', 0x20000, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x146e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x6c25aa0a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x400, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}) semop(0x0, &(0x7f0000000100)=[{0x2, 0x3, 0x1800}, {0x4, 0x10}, {0x0, 0x8, 0x1800}], 0x3) execve(0x0, &(0x7f00000002c0)=[&(0x7f0000000100)='tap'], 0x0) r0 = socket(0x1, 0x1, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x10091, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x10091, 0x0) fcntl$lock(r1, 0x9, &(0x7f00000001c0)={0x3, 0x0, 0x3, 0x300000003}) close(r1) execve(0x0, 0x0, 0x0) ioctl$FIONREAD(r0, 0xc028698a, &(0x7f0000000100)) 2.757289391s ago: executing program 0 (id=48): r0 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000000), 0x10580, 0x0) msgget(0x1, 0x220) msgget(0x1, 0x700) ioctl$WSKBDIO_BELL(r0, 0x20005701) syz_emit_ethernet(0x62, &(0x7f0000000580)={@broadcast, @local, [], {@ipv6={0x86dd, {0x4, 0x6, "a71331", 0x2c, 0x3c, 0x6, @remote={0xfe, 0x80, '\x00', 0x0}, @local={0xfe, 0x80, '\x00', 0x0}, {[@hopopts={0x61, 0x1, '\x00', [@generic={0x6}, @generic={0xf8}, @enc_lim={0x4, 0x1, 0x90}, @generic={0x4}]}], @tcp={{0x1, 0x3, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x0, 0x401, 0x0, 0x1000}}}}}}}) 2.754734282s ago: executing program 4 (id=49): r0 = socket$inet(0x2, 0x1, 0x0) select(0x40, &(0x7f0000000000)={0x2, 0xe2, 0x0, 0x9, 0xfffffffffffffff7, 0x8, 0x6, 0x7}, &(0x7f0000000040)={0x8, 0x8, 0x4, 0x7, 0x2, 0xffffffff, 0xb7, 0x8}, &(0x7f0000000080)={0x3, 0xd, 0x7, 0xa169, 0x4, 0x8, 0x4000000, 0x80000001}, &(0x7f00000000c0)={0x1, 0x8}) getsockopt(r0, 0x0, 0x5, 0x0, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000200), 0x20, 0x0) flock(r1, 0x1) syz_open_pts() 2.686494978s ago: executing program 0 (id=50): pselect(0x40, &(0x7f0000000000)={0x7ff, 0x4, 0x7, 0x7, 0x9, 0x200000000000c36, 0x3, 0xfffffffffffffffe}, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)={0x81, 0x1, 0xffffffffffffffff}) closefrom(r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket(0x1b, 0x1, 0x0) setsockopt(r1, 0x1000000029, 0xc, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) setsid() r2 = socket(0x1, 0x1, 0x0) r3 = syz_open_pts() ioctl$TIOCSCTTY(r3, 0x20007461) r4 = fcntl$getown(r3, 0x5) fcntl$setown(r2, 0x6, r4) ioctl$FIOASYNC(r2, 0x8004667d, &(0x7f0000000000)=0x6) shutdown(r2, 0x2) setsockopt(r1, 0x1000000029, 0xc, 0x0, 0x0) setsockopt(r1, 0x1000000029, 0x1000003, &(0x7f00000000c0)="ebffcbff13b9fd812eaa4e713048e69931929648965b74b3f5a2437caf142fb8320362885231619c7db259c3fc19557c3cdb7d5089b5c118c703101fcdeb806881120079536aad16b7065fe1c7ca0312f8572832dea1ffcf6019c9b06f54f63c6e672c0aab652785d949a50e2695965b7056bcc61935faf845fc8b0a65d06bd94debcb1c942ad913b95fb5849f6badaf9a5b5a36a3b7e0582bd450c76c2e262ccf3fbe0df71ebb13d5c208d15e9ba45ff8c9c81bbe326554e8eeb3f6", 0x1c) 2.678031578s ago: executing program 0 (id=51): open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x186) (async) r0 = accept$inet(0xffffffffffffff9c, &(0x7f0000000180), &(0x7f0000000200)=0x10) setsockopt$sock_int(r0, 0xffff, 0x1000, &(0x7f0000000240)=0x4, 0x4) (async) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0x8, 0x8, 0x80, 0x2, 0x8, 0x3, 0x40, 0x10, [{0x5, 0x3, 0x7fff, 0x80000201}, {0x4, 0x8, 0x6, 0xfff}, {0x1, 0xfffffffe, 0x5, 0x2}, {0x2, 0xdf, 0xf, 0x40}, {0x2, 0x7, 0xf11, 0x7}, {0x800, 0xffbf, 0x80cf}, {0x1, 0x5, 0x85, 0x2}, {0x0, 0x1, 0xfffffff8, 0x3}, {0x8, 0xffe, 0x6, 0x17fff}, {0x3, 0x0, 0x3, 0x7}, {0x8, 0x8000000, 0x108, 0x7}, {0x4, 0xc7cb, 0x800000, 0xa66}, {0x401, 0x10a, 0x9, 0x9}, {0x200003, 0xee2, 0x4, 0x5}, {0x81, 0x101, 0x3, 0x7fff}, {0xffffffff, 0x8003, 0x6, 0x69}]}) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') unveil(&(0x7f00000000c0)='./file0/file0/..\x00', &(0x7f0000000100)='c\x00') unveil(&(0x7f0000000480)='./file0/file1\x00', &(0x7f00000004c0)='c\x00') (async, rerun: 64) mkdir(&(0x7f0000000040)='./file2\x00', 0xc1) (async, rerun: 64) unveil(&(0x7f0000000080)='./file2/file0\x00', &(0x7f00000002c0)='x\x00') (async) symlink(&(0x7f00000001c0)='.\x02/file1/file0\x00', &(0x7f0000000140)='./file2\x00') (async) poll(&(0x7f0000000000), 0x35, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x101) 2.672026358s ago: executing program 7 (id=52): ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x10000100000004}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x18, 0x2, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000440)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x8, 0xff, 0x0, @local={0xac, 0x14, 0x0}, @rand_addr=0xac1400ff}, @tcp={{0x1, 0x3, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x8, 0xff, 0x0, 0x8}}}}}}) setsockopt(r0, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)=@in6={0x1c, 0x18, 0x1, 0x4, '\x00', 0xffffffc0}, 0x1c) 2.659716896s ago: executing program 0 (id=53): socket$inet(0x2, 0x1, 0x0) mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x2, 0x173) ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f00000003c0)={0x0, 0x9, {[0xfffffbfffffffffb, 0x1, 0x2, 0x100200000, 0x6, 0x7, 0x81b, 0xffffffffffffffff, 0x0, 0x6, 0x93, 0x4, 0xfffffffffffbffff, 0x200000000002, 0xd, 0x4, 0xfffffffffffffffe, 0x100], [0x8, 0x80000001, 0xfffffffffffffffa, 0xa, 0x5e, 0x100000000007b98, 0x800, 0x9, 0x0, 0xfffffffffffffffe], [0x20100000001, 0x8000, 0x40000000, 0xfffffffffffffff9, 0xb, 0x411000, 0xffffffff00000000], [0x9, 0x1fffffffffb, 0x80000001, 0x4000000, 0x5, 0x8fffffff], [{0x0, 0x0, 0x0, 0x7d06}, {0x1, 0x22, 0x5, 0xfffffffffffffffd}, {0x4, 0x0, 0xfffefffe, 0x280}, {0x3, 0x4, 0x5, 0xffffffffffffffff}, {0x0, 0x5, 0x7f, 0x8}, {0x0, 0x8, 0x9, 0x2000000000000000}, {0x5, 0x0, 0xfffffff7, 0x8}, {0xe, 0x100, 0x1, 0xb}], {0x1, 0x8, 0x80200006, 0x3}, {0xfffe, 0x6, 0xb, 0x6}}}) sysctl$net_inet_tcp(&(0x7f00000000c0)={0x4, 0x2, 0x6, 0x6}, 0x4, &(0x7f0000000040), 0x0, 0x0, 0x0) r0 = kqueue() syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff"]) r1 = socket(0x18, 0x2, 0x0) setsockopt(r1, 0x1000000000029, 0xa, &(0x7f00000001c0)="03000000", 0x4) setsockopt(r1, 0x1000000029, 0xd, &(0x7f0000000000), 0x14) r2 = syz_open_pts() ioctl$TIOCGWINSZ(r2, 0x40087468, &(0x7f0000000000)) kevent(r0, &(0x7f0000000080), 0xe4a, 0x0, 0xa9fa, 0x0) 2.633777755s ago: executing program 7 (id=54): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x200000000000b, &(0x7f0000000080)='\x00', 0x1) setsockopt$inet_opts(r0, 0x0, 0x200000000000c, &(0x7f0000000240)="ea10070000000000", 0x8) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x186) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r1, 0x0) 2.590327809s ago: executing program 7 (id=55): setsockopt$sock_int(0xffffffffffffffff, 0xffff, 0x10, &(0x7f0000000000)=0x1, 0x4) shutdown(0xffffffffffffffff, 0x0) r0 = semget(0x0, 0x1, 0x281) semop(r0, &(0x7f0000000000), 0x23) sysctl$net_inet_divert(&(0x7f0000000040)={0x4, 0x1e, 0x2, 0x2}, 0x4, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x11, 0x0, 0x2}, 0x6, &(0x7f0000000080), 0x0, 0x0, 0x0) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4) 2.582919852s ago: executing program 7 (id=56): ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x100000000000000, 0x10040000000001}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x18, 0x2, 0x0) setsockopt(r0, 0x1000000029, 0x2d, &(0x7f00000001c0)="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", 0x10f) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f0000000040)={0x1c, 0x18, 0x1, 0x4, "ff3177f8ffff00200000004000000001", 0x7}, 0x1c) mknod(&(0x7f0000000040)='./file0\x00', 0x118a, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x200, 0x186) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x200007, 0x7, 0x101, 0x7, 0x7, 0x10001, 0x10, [{0x0, 0x7, 0x4, 0x35}, {0x7, 0xfffffffc, 0x8, 0xfffffff8}, {0x9, 0xf86, 0x0, 0xaf9}, {0x1, 0x800, 0x8, 0x400}, {0x401, 0x4, 0xe, 0x3}, {0x2, 0x6, 0x3, 0x99}, {0xddf, 0x1, 0x40000005, 0x101}, {0x7, 0x7ff, 0x14, 0x8}, {0x5, 0x7fffffff, 0x1, 0x9}, {0xfffffffe, 0x7, 0xc8, 0x88}, {0x3, 0x50001, 0x9, 0xaec}, {0x7ff, 0x9, 0x3, 0x4}, {0xb8c, 0x4, 0x5, 0x6}, {0x29a71717, 0xfffffffa, 0x2, 0x6}, {0x4, 0x80000004, 0x6}, {0x0, 0x132e, 0x2, 0xfe}]}) r1 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) write(r1, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) r2 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x22) readv(r2, &(0x7f0000000640)=[{&(0x7f0000000540)=""/230, 0xe6}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)=@in6={0x1c, 0x18, 0x1, 0x4, "0000000000000000000000700100", 0xffffffc0}, 0x1c) sysctl$net_inet_ip(&(0x7f00000000c0)={0x4, 0x2, 0x0, 0x11}, 0x4, 0x0, 0x0, 0x0, 0x0) 2.581770086s ago: executing program 0 (id=57): r0 = socket(0x2, 0x2, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x2000000000000243, &(0x7f0000000100)}) ioctl$FIONREAD(r0, 0xc0106924, &(0x7f00000001c0)) r1 = kqueue() kevent(r1, &(0x7f00000000c0), 0x101, &(0x7f0000000180), 0x6, 0x0) ioctl$FIONREAD(r0, 0xc0206921, &(0x7f00000001c0)) r2 = socket(0x2, 0x2, 0x0) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) ioctl$FIONREAD(r2, 0xc0206923, &(0x7f00000001c0)) ioctl$FIONREAD(r1, 0x4004667f, &(0x7f0000000240)) setrlimit(0x8, &(0x7f00000000c0)={0x45, 0x56}) r3 = syz_open_pts() close(r3) syz_open_pts() close(r3) ioctl$FIOASYNC(r3, 0x80047466, &(0x7f0000000200)=0x5) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0xffff, 0xffff63df, 0x7, 0x5, 0x8, 0x3, 0x40, 0x10, [{0x5, 0xfffffffb, 0x6, 0x80000201}, {0x6, 0x6, 0xffffffff}, {0x1, 0x1, 0x6, 0x1}, {0xfffffffe, 0xdf, 0xf, 0x40}, {0x2, 0x7, 0x6, 0x7}, {0x800, 0xffff, 0x80cf}, {0x1, 0x3, 0x85, 0x9f8f}, {0x7, 0x1, 0xfffffff8, 0xfbffe2eb}, {0x8, 0xffe, 0x6, 0x20}, {0x3, 0x0, 0x5, 0x8bfd}, {0x8, 0x8000000, 0x8, 0x7}, {0x14, 0xc7cd, 0x800000, 0x10001}, {0x401, 0x10a, 0x9, 0x40}, {0x200003, 0xfffffffe, 0x2, 0x6f5fc48f}, {0xa1, 0x101, 0x3, 0x5}, {0xffffffff, 0x8003, 0x6, 0x69}]}) poll(&(0x7f0000000000), 0x35, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$FIOASYNC(r4, 0x8004667d, &(0x7f00000016c0)=0x4) shutdown(r4, 0x1) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x62}) r5 = syz_open_pts() close(r5) syz_open_pts() r6 = syz_open_pts() ioctl$TIOCSETA(r6, 0x802c7414, &(0x7f0000000340)={0x5, 0x1, 0xfffffffe, 0x966b, "ff14e7130b1e586ca6294000", 0x40, 0x80}) ioctl$FIONREAD(r6, 0x4004667f, 0x0) writev(r6, &(0x7f0000001840)=[{&(0x7f0000000000)="eab25cba3a42973eeb090c76679086309a8501ff4f01d36df7fa3e3774894a88068514e8f3f142d6fbba462f7cac15d878041a67a01d7bd4851fb07b4c1829938d0857362b2939ffb1f20061f1c8fa4725440d457d617afaddece1f4e263bd53350c68aec7775361b4619e98cd36b405dde494c2fafb6d276f92efc879e71115478de83d5eeeff45fa6ba242f9b40bbd26552ef3bb38587f5739666e97402aa93e851a7e2cf4ce53ce8768b2868f6b78a27f81d066b7cfddb2416d78cc5575aec6fb9b63b34dfeeb", 0xc8}, {&(0x7f0000000100)="a53636f029a9ee9b9f278e0d", 0xc}], 0x2) syz_open_pts() 2.515821677s ago: executing program 1 (id=58): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f00000000c0), &(0x7f0000000240)=0x5d) syz_extract_tcp_res$synack(&(0x7f0000000140)={0x41424344, 0x41424344}, 0x1, 0x0) (async) syz_extract_tcp_res(&(0x7f0000000180)={0x41424344, 0x41424344}, 0x5, 0x7f) syz_emit_ethernet(0xe3, &(0x7f0000000380)={@remote, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x2, 0x1, 0xd5, 0x67, 0x3, 0x6, 0x9d, 0x0, @broadcast}, @tcp={{0x1, 0x2, r1, r2, 0x0, 0x0, 0xb, 0x1, 0xb95, 0x0, 0x1, {[@sack_perm={0x4, 0x2}, @eol, @generic={0x3, 0xa, "02f22d175b91d244"}, @sack={0x5, 0x6, [0x1]}, @eol, @sack_perm={0x4, 0x2}]}}, {"3a0b3b141a0736fbe59366da50e892b1d315cc0b9a79f8685dacb88f800465536fc63b52a1b540f5df869bda0f4241a4e8fb9e79bd414c9e9147b6ba0ab036d902bbfbe5176cdb827288c9acdf6616a60fff7750e66493b9d61160b823b01b7177787781673cda48c8eb0e6a185bdfe04189cb788f33959ea31afe03b797c5befb68a100da68d59799dae3974a62d15d8dc7fcbbf4"}}}}}}) (async) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000240)={0x2, &(0x7f00000000c0)=[{0x0, 0x1}, {0x1, 0x0, 0x0, 0x2}]}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x3f}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x2000, 0x0, 0x2a) sysctl$kern(&(0x7f00000000c0)={0x1, 0x4e}, 0x3, &(0x7f0000000100)="71f95f84cf71b59c7afec37582", &(0x7f0000000080)=0x2, 0x0, 0x37) 2.515114435s ago: executing program 3 (id=59): kill(0xffffffffffffffff, 0x12) r0 = getpid() kqueue() setrlimit(0x8, &(0x7f0000000980)={0x8, 0x54}) r1 = syz_open_pts() close(r1) syz_open_pts() r2 = socket(0x2, 0x4001, 0x0) dup(r2) r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) r4 = fcntl$dupfd(r3, 0x3, r3) open(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x615, 0x0) unveil(&(0x7f0000002400)='.\x00', &(0x7f0000000080)='c\x00') execve(&(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) fcntl$setown(r4, 0x6, r0) r5 = socket$inet6(0x18, 0x1, 0x6) setsockopt$sock_int(r5, 0xffff, 0x1000, 0x0, 0x0) fcntl$setown(r4, 0x6, r0) r6 = socket(0x18, 0x2, 0x0) r7 = getpid() fcntl$setown(r6, 0x6, r7) setpgid(r0, r7) 2.514599292s ago: executing program 3 (id=60): r0 = socket(0x2, 0x1, 0x0) setitimer(0x2, &(0x7f00000000c0)={{0x6fadbba0, 0x4}, {0xffffffff, 0x1}}, 0x0) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0x80000000, 0xffff63de, 0x2, 0x2, 0x8, 0x100003, 0x40, 0x10, [{0x5, 0x400006, 0x775, 0x80000201}, {0x2, 0x8, 0x6, 0xfff}, {0x7, 0xfffffffe, 0x2006, 0x1}, {0xfffffffe, 0x7, 0xf}, {0xfffffffc, 0x7, 0xf11, 0x7}, {0x3, 0xffff, 0x80d2}, {0x2024, 0x1, 0x85, 0x5}, {0x0, 0x40009, 0xfffffff8, 0xfbffe2e9}, {0x8, 0xffa, 0x6, 0x7fff}, {0x0, 0xfffffff8, 0x400005, 0x5}, {0xfffff0d1, 0x8000000, 0x8, 0x7}, {0x4, 0xc7cb, 0x3, 0x2}, {0x401, 0x106, 0x9, 0x40}, {0x200003, 0xee6, 0x2, 0x6f5fc48b}, {0x7e, 0x5, 0x1, 0x5}, {0x9be2, 0x6, 0x6, 0x69}]}) poll(&(0x7f0000000000), 0x35, 0x0) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f00000011c0)='./file0\x00', 0x14e) ioctl$WSDISPLAYIO_DELFONT(0xffffffffffffff9c, 0x8058574f, &(0x7f0000000180)={'./file0\x00', 0x3, 0x4, 0x3, 0x0, 0x7fff, 0x5982d553, 0x9, 0x0, 0x2, 0x9}) unveil(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='c\x00') rmdir(&(0x7f0000000080)='./file0\x00') unveil(&(0x7f00000000c0)='.\x00', &(0x7f0000000100)='r\x00') ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{}, {0x3}]}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x33}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x3414, 0x0, 0x37) 2.513426293s ago: executing program 1 (id=61): setrlimit(0x3, &(0x7f0000000000)={0x10000, 0x100000}) r0 = kqueue() kevent(r0, &(0x7f0000000040), 0xe4a, 0x0, 0xa9fa, 0x0) writev(r0, &(0x7f0000000380)=[{&(0x7f0000000180)="aa17084ecad6dc1fed71a88f8932df79799de1137d3f563a6c7b650909b94ed5820f37e581025154909f05d8ca8c59c065e141", 0x33}, {&(0x7f00000001c0)="6122660e1d600e977533169e947a4897b847", 0x12}, {&(0x7f0000000200)="a2582c7cf4ea2b11032c8d43b1b9bf38b1227cb2da7024197b5d69d9a4c67adb927e", 0x22}, {&(0x7f0000000240)="fe8219144ffc5fca9a5214910af73329cc8369073eb7b61a7cdf86050db537c27f9340df57fbb5aea23dbb2a5e43186069f824a975221f395d4da4991e0eda5632550ff4fa59252786b2759b461c312412e89cc489cfaa635e7b6de1d6c4ad422b67abeae5debd102cbdfa5d70fb029872aac14ee2b4325ca7871b4c07", 0x7d}, {&(0x7f00000002c0)="2a63138df5c45e2f528f2aafe88758da0ddf6a9d984c822f5f3d9834990da9575b403be697f7bb21e38adadd1a6b866e73eb64e2849bd90f378b28a72b3a1b5ecd7b0f52e7ced382c6bbe26a5237d3d05012c4cd227308e3ac939cc084924bdb97433c0f41fe2caac10545a6837c9f534879878a1c216b71345fe59183a7335d5492498409712ece5862251f3915f2a7e998f174", 0x94}], 0x5) ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x0, [{0x2, 0x800}, {}, {0x0, 0x7fff}, {}, {}, {0x0, 0x9}, {0x1}, {}, {0x0, 0x1}, {0x2, 0x1}, {}, {0x0, 0x6}, {0x3}, {}, {}, {0x0, 0x5}, {0x0, 0x1}, {0x1}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x9}, {0x0, 0x9}, {}, {0x3, 0x800}, {}, {0x3}, {0x1}, {}, {0x2, 0x8001}, {0x0, 0x4}]}) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket(0x2, 0x4001, 0x0) r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) close(r2) r3 = socket(0x2, 0x4001, 0x0) connect$unix(r3, &(0x7f0000000000), 0x10) setsockopt$sock_int(r2, 0xffff, 0x1023, &(0x7f0000000040), 0xe0) setrlimit(0x7, &(0x7f0000000000)={0x207, 0x100000}) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) sysctl$vm(&(0x7f0000000000)={0x2, 0x9}, 0x2, &(0x7f0000001240)="8d9621a4", &(0x7f0000000040)=0x4, 0x0, 0x0) 2.423671323s ago: executing program 6 (id=62): syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[@ANYBLOB="69e1629b6174391e7dd7a2d786dd60b6000000302c03cb697a653e336f000000500000000000ff020000000000000000000000000001"]) (async) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) r0 = syz_open_pts() (async) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x8, 0x0) r2 = shmget$private(0x0, 0x3000, 0x95a999646a72d1b6, &(0x7f0000ffc000/0x3000)=nil) r3 = shmat(r2, &(0x7f0000001000/0x3000)=nil, 0x2000) shmctl$IPC_RMID(r2, 0x0) (async, rerun: 64) shmdt(r3) (async, rerun: 64) clock_getres(0x6, 0x0) (async) shmat(r2, &(0x7f0000003000/0x4000)=nil, 0x0) r4 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0) mkdirat(r4, &(0x7f0000000540)='./file0\x00', 0x184) (async) r5 = socket(0x18, 0x1, 0x0) getsockopt(r5, 0x29, 0x4, 0x0, 0x0) renameat(r4, &(0x7f00000025c0)='./file0\x00', r4, &(0x7f0000002600)='./file1\x00') (async, rerun: 32) access(&(0x7f0000000000)='./file1\x00', 0x0) (async, rerun: 32) fcntl$lock(r1, 0x7, &(0x7f0000000140)={0x0, 0x0, 0xdffffffffffffff4, 0x1000900010008}) (async) ioctl$TIOCCONS(r0, 0x80047462, &(0x7f0000000040)=0xfff) 2.421813988s ago: executing program 3 (id=63): socket(0x1, 0x8000, 0x0) r0 = socket$inet6(0x18, 0x1, 0x81) setsockopt(r0, 0x0, 0x1e, &(0x7f0000000040), 0x0) 2.421347629s ago: executing program 1 (id=64): pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x10004) syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1) syz_emit_ethernet(0x138, &(0x7f0000000080)=ANY=[@ANYBLOB="ff02", @ANYRESDEC=r0]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r2 = socket(0x2, 0x2, 0x0) connect$unix(r2, &(0x7f0000000000), 0x10) socket$unix(0x1, 0x5, 0x0) setsockopt$inet_opts(r2, 0x0, 0x1, &(0x7f0000000040)="27913c11b3c9e91fbdf59c32417020e3a81e536e", 0x14) sendto$unix(r2, &(0x7f0000000280)="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", 0x171, 0x0, 0x0, 0x0) write(r1, &(0x7f0000000240)="d4f866ad2d", 0x5) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="19", 0xfffffe98}], 0x1) socket(0x1, 0x2, 0x5) 2.420859658s ago: executing program 6 (id=65): r0 = open(&(0x7f0000000080)='./file0\x00', 0x18289, 0x190) ftruncate(r0, 0x10000) socket(0x11, 0x3, 0x0) kill(0xffffffffffffffff, 0xf) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb5219f1000b913f1, 0x0) ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9f, 0x0) pwrite(r1, &(0x7f00000000c0)="a7", 0x1, 0x40007) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x8001, 0x0, 0x0, 0x0, 0x0, 0xc5, 0x48e}, 0x5, 0x8, 0x0, 0x0, 0x100000002, 0x4000000000003, 0x20000000007f, 0x40000000000000}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0x37) 2.420355306s ago: executing program 3 (id=66): getpid() (async) r0 = getpid() kill(r0, 0x0) 2.385368906s ago: executing program 1 (id=67): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7949) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)='#!', 0x2}], 0x1) write(r0, &(0x7f0000000040)="89202009095c2a415642000000005624b77b6a0a", 0x14) pwrite(r0, &(0x7f0000000080)="871f", 0x2, 0x5) execve(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) setitimer(0x1, &(0x7f00000000c0)={{0x8000007, 0x3}, {0x6, 0x2004}}, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000040)={0x2, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x10000}, {0x2}]}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x33}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x3414, 0x0, 0xffffffffffffffb8) sysctl$vm_swapencrypt(&(0x7f00000000c0), 0x3, &(0x7f0000000100)="688b20b5", &(0x7f00000001c0)=0x4, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$kern(&(0x7f0000000100)={0x1, 0x35}, 0x3, &(0x7f00000011c0)="71f91e5a91501d94a34bdf536647f49a902027647169000000000000", &(0x7f0000000000)=0xfe10, 0x0, 0x33) sysctl$kern(&(0x7f00000000c0)={0x1, 0x33}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x3414, 0x0, 0xffffffffffffffb8) 2.381413254s ago: executing program 3 (id=68): open$dir(&(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x10) open$dir(&(0x7f0000000300)='./file1\x00', 0x0, 0x0) rename(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) readv(r0, &(0x7f0000000280)=[{0x0}], 0x1) closefrom(r0) rename(&(0x7f00000012c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000180)='./file1\x00') 2.380989631s ago: executing program 32 (id=68): open$dir(&(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x10) open$dir(&(0x7f0000000300)='./file1\x00', 0x0, 0x0) rename(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) readv(r0, &(0x7f0000000280)=[{0x0}], 0x1) closefrom(r0) rename(&(0x7f00000012c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000180)='./file1\x00') 2.380733273s ago: executing program 0 (id=69): syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) r0 = socket(0x2, 0x2, 0x0) ioctl$FIOASYNC(r0, 0x8004667d, &(0x7f0000000040)=0x5) connect$inet(r0, &(0x7f0000000000)={0x10, 0x2, 0x1, 0x200000e3}, 0x10) (async) connect$inet(r0, &(0x7f0000000000)={0x10, 0x2, 0x1, 0x200000e3}, 0x10) writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1) syz_emit_ethernet(0x138, &(0x7f0000000080)=ANY=[@ANYRESDEC=r0]) socket(0x2, 0x4001, 0x0) (async) r1 = socket(0x2, 0x4001, 0x0) r2 = kqueue() kevent(r2, &(0x7f0000000040)=[{{}, 0xfffffffffffffff9, 0x6b, 0x11, 0x200000000000001, 0x101}], 0x203, 0x0, 0x0, 0x0) (async) kevent(r2, &(0x7f0000000040)=[{{}, 0xfffffffffffffff9, 0x6b, 0x11, 0x200000000000001, 0x101}], 0x203, 0x0, 0x0, 0x0) shutdown(r1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) connect$unix(r1, &(0x7f0000000000), 0x10) (async) connect$unix(r1, &(0x7f0000000000), 0x10) close(r1) 2.378923904s ago: executing program 33 (id=69): syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) r0 = socket(0x2, 0x2, 0x0) ioctl$FIOASYNC(r0, 0x8004667d, &(0x7f0000000040)=0x5) connect$inet(r0, &(0x7f0000000000)={0x10, 0x2, 0x1, 0x200000e3}, 0x10) (async) connect$inet(r0, &(0x7f0000000000)={0x10, 0x2, 0x1, 0x200000e3}, 0x10) writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1) syz_emit_ethernet(0x138, &(0x7f0000000080)=ANY=[@ANYRESDEC=r0]) socket(0x2, 0x4001, 0x0) (async) r1 = socket(0x2, 0x4001, 0x0) r2 = kqueue() kevent(r2, &(0x7f0000000040)=[{{}, 0xfffffffffffffff9, 0x6b, 0x11, 0x200000000000001, 0x101}], 0x203, 0x0, 0x0, 0x0) (async) kevent(r2, &(0x7f0000000040)=[{{}, 0xfffffffffffffff9, 0x6b, 0x11, 0x200000000000001, 0x101}], 0x203, 0x0, 0x0, 0x0) shutdown(r1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) connect$unix(r1, &(0x7f0000000000), 0x10) (async) connect$unix(r1, &(0x7f0000000000), 0x10) close(r1) 2.378624791s ago: executing program 2 (id=70): ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, &(0x7f00000000c0)={0xa, 0x8000148, {[0x100000000003, 0x0, 0x6, 0x6, 0x3, 0x8000, 0x8000, 0x0, 0x7, 0x2, 0x9, 0x91c, 0xb, 0x180, 0x0, 0xb8, 0xfffffffffffffff9, 0xfffffffefffffff7], [0x5438b950, 0x3, 0xfff, 0x5, 0x1, 0x1, 0xb, 0x7, 0x1, 0x3], [0x400000007f, 0x9, 0x10000, 0x8000000008, 0x10000, 0x9, 0x2], [0x100000000, 0x10801, 0x0, 0x10000000000005, 0x3, 0xa], [{0x5ad, 0x7, 0xfffffffb, 0x5}, {0x2, 0x924, 0x3, 0x338}, {0x1000, 0x1, 0x0, 0x5}, {0x8, 0x2, 0x1003, 0x895}, {0x4, 0x3, 0x2, 0x9}, {0xeff8, 0x4, 0x0, 0x7}, {0x5f, 0xffffff81, 0x1ff, 0x1}, {0x3, 0x10000, 0x6, 0x5}], {0x52b, 0x4, 0x8000, 0x8}, {0xfffb, 0x3, 0x40000008, 0xfffffffffffffffe}}}) sendmsg(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000080)=@in={0x2}, 0xc, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000000000000000000000000000014"], 0x180}, 0xe) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) r0 = open(&(0x7f00000005c0)='./file0\x00', 0x400, 0x4ebfac6bbaf79e5) ioctl$FIONREAD(0xffffffffffffffff, 0x4004667f, &(0x7f0000000600)) r1 = openat$klog(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) r2 = socket(0x18, 0x1, 0x6) setsockopt(r2, 0x1000000000029, 0xb, &(0x7f0000000080)='\x00\x00\x00\x00', 0x4) setsockopt(r2, 0x1000000000029, 0xa, &(0x7f0000000040)="88cc2ba1", 0x4) r3 = kqueue() r4 = openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) r5 = socket$inet6(0x18, 0x2, 0x8) execve(0x0, &(0x7f0000000280)=[&(0x7f0000000080)='%-[//&$[U(\\\x00', &(0x7f00000000c0)='$\x00'], 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r7, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 0x0}}, 0x38, 0x40, 0x0) r8 = dup2(r6, r7) execve(0x0, 0x0, 0x0) sendmmsg(r8, &(0x7f00000003c0)={{0x0, 0x0, 0x0, 0x0, 0x0}, 0x6}, 0x2, 0x404) r9 = openat$dri(0xffffffffffffff9c, &(0x7f0000000300)='/dev/dri/renderD128\x00', 0x8, 0x0) r10 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000340), 0x800, 0x0) r11 = dup(0xffffffffffffff9c) r12 = openat$zero(0xffffffffffffff9c, &(0x7f00000004c0), 0x1, 0x0) kevent(r0, &(0x7f0000000380)=[{{r1}, 0xfffffffffffffffb, 0x1, 0x4, 0x3, 0x65}, {{r2}, 0xfffffffffffffffb, 0x20, 0x4, 0x200000000008}, {{r3}, 0xfffffffffffffff7, 0x10, 0x4, 0xb1d2, 0x2}, {{r4}, 0xfffffffffffffff8, 0x28, 0x20000000, 0xeb, 0x5}, {{0xffffffffffffff9c}, 0xfffffffffffffff6, 0x10, 0x913f28371ee50cdf, 0x6, 0x6}, {{r5}, 0x7ffffffffffffffe, 0x41, 0x40, 0x0, 0x80000000}, {{r9}, 0xfffffffffffffffb, 0xfc, 0x2, 0x7, 0x5e41}, {{r10}, 0xfffffffffffffff7, 0x2, 0x20000000, 0x1, 0x8}, {{0xffffffffffffff9c}, 0xfffffffffffffff7, 0x80, 0x20, 0x400, 0xb57}], 0x33a, &(0x7f0000000500)=[{{0xffffffffffffff9c}, 0xfffffffffffffffa, 0x28, 0x1, 0x7, 0x7}, {{r11}, 0xfffffffffffffffb, 0x10, 0xfffff, 0x0, 0x7fffffffffffffff}, {{r12}, 0xfffffffffffffffe, 0xf, 0x20000000, 0x2, 0x3ff}], 0x10, &(0x7f0000000580)={0x0, 0x7ff}) socket$inet(0x2, 0x2, 0x0) semget$private(0x0, 0xb, 0x19f) fstat(0xffffffffffffff9c, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r14 = getegid() setresgid(r14, 0x0, r13) unveil(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='r\x00') socket$unix(0x1, 0x1, 0x0) 2.378298104s ago: executing program 34 (id=70): ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, &(0x7f00000000c0)={0xa, 0x8000148, {[0x100000000003, 0x0, 0x6, 0x6, 0x3, 0x8000, 0x8000, 0x0, 0x7, 0x2, 0x9, 0x91c, 0xb, 0x180, 0x0, 0xb8, 0xfffffffffffffff9, 0xfffffffefffffff7], [0x5438b950, 0x3, 0xfff, 0x5, 0x1, 0x1, 0xb, 0x7, 0x1, 0x3], [0x400000007f, 0x9, 0x10000, 0x8000000008, 0x10000, 0x9, 0x2], [0x100000000, 0x10801, 0x0, 0x10000000000005, 0x3, 0xa], [{0x5ad, 0x7, 0xfffffffb, 0x5}, {0x2, 0x924, 0x3, 0x338}, {0x1000, 0x1, 0x0, 0x5}, {0x8, 0x2, 0x1003, 0x895}, {0x4, 0x3, 0x2, 0x9}, {0xeff8, 0x4, 0x0, 0x7}, {0x5f, 0xffffff81, 0x1ff, 0x1}, {0x3, 0x10000, 0x6, 0x5}], {0x52b, 0x4, 0x8000, 0x8}, {0xfffb, 0x3, 0x40000008, 0xfffffffffffffffe}}}) sendmsg(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000080)=@in={0x2}, 0xc, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000000000000000000000000000014"], 0x180}, 0xe) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) r0 = open(&(0x7f00000005c0)='./file0\x00', 0x400, 0x4ebfac6bbaf79e5) ioctl$FIONREAD(0xffffffffffffffff, 0x4004667f, &(0x7f0000000600)) r1 = openat$klog(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) r2 = socket(0x18, 0x1, 0x6) setsockopt(r2, 0x1000000000029, 0xb, &(0x7f0000000080)='\x00\x00\x00\x00', 0x4) setsockopt(r2, 0x1000000000029, 0xa, &(0x7f0000000040)="88cc2ba1", 0x4) r3 = kqueue() r4 = openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) r5 = socket$inet6(0x18, 0x2, 0x8) execve(0x0, &(0x7f0000000280)=[&(0x7f0000000080)='%-[//&$[U(\\\x00', &(0x7f00000000c0)='$\x00'], 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r7, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 0x0}}, 0x38, 0x40, 0x0) r8 = dup2(r6, r7) execve(0x0, 0x0, 0x0) sendmmsg(r8, &(0x7f00000003c0)={{0x0, 0x0, 0x0, 0x0, 0x0}, 0x6}, 0x2, 0x404) r9 = openat$dri(0xffffffffffffff9c, &(0x7f0000000300)='/dev/dri/renderD128\x00', 0x8, 0x0) r10 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000340), 0x800, 0x0) r11 = dup(0xffffffffffffff9c) r12 = openat$zero(0xffffffffffffff9c, &(0x7f00000004c0), 0x1, 0x0) kevent(r0, &(0x7f0000000380)=[{{r1}, 0xfffffffffffffffb, 0x1, 0x4, 0x3, 0x65}, {{r2}, 0xfffffffffffffffb, 0x20, 0x4, 0x200000000008}, {{r3}, 0xfffffffffffffff7, 0x10, 0x4, 0xb1d2, 0x2}, {{r4}, 0xfffffffffffffff8, 0x28, 0x20000000, 0xeb, 0x5}, {{0xffffffffffffff9c}, 0xfffffffffffffff6, 0x10, 0x913f28371ee50cdf, 0x6, 0x6}, {{r5}, 0x7ffffffffffffffe, 0x41, 0x40, 0x0, 0x80000000}, {{r9}, 0xfffffffffffffffb, 0xfc, 0x2, 0x7, 0x5e41}, {{r10}, 0xfffffffffffffff7, 0x2, 0x20000000, 0x1, 0x8}, {{0xffffffffffffff9c}, 0xfffffffffffffff7, 0x80, 0x20, 0x400, 0xb57}], 0x33a, &(0x7f0000000500)=[{{0xffffffffffffff9c}, 0xfffffffffffffffa, 0x28, 0x1, 0x7, 0x7}, {{r11}, 0xfffffffffffffffb, 0x10, 0xfffff, 0x0, 0x7fffffffffffffff}, {{r12}, 0xfffffffffffffffe, 0xf, 0x20000000, 0x2, 0x3ff}], 0x10, &(0x7f0000000580)={0x0, 0x7ff}) socket$inet(0x2, 0x2, 0x0) semget$private(0x0, 0xb, 0x19f) fstat(0xffffffffffffff9c, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r14 = getegid() setresgid(r14, 0x0, r13) unveil(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='r\x00') socket$unix(0x1, 0x1, 0x0) 2.378103095s ago: executing program 4 (id=72): mknod(&(0x7f0000000240)='./file0\x00', 0x1ffa, 0x0) r0 = open$dir(&(0x7f0000000280)='./file0\x00', 0x40, 0x392) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x2000000000000243, &(0x7f0000000100)}) r1 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r1, 0xc0106924, &(0x7f00000001c0)) r2 = open(&(0x7f0000000040)='./file0\x00', 0x2, 0x102) ioctl$FIONREAD(r0, 0xc020691b, &(0x7f0000000100)) setrlimit(0x8, &(0x7f0000000980)={0xb, 0x54}) syz_open_pts() ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x0, 0xb3f, {[0xfffffbfffffffffb, 0x0, 0x8, 0x100200000, 0x6, 0x7, 0xdf60, 0xfffffffffffffffe, 0x0, 0x2f01, 0x93, 0x8, 0xffffffffffffffff, 0x9, 0xf, 0x4, 0xfffffffffffffffe, 0x400000000100], [0xfffffffffffffffe, 0x80000001, 0xfffffffffffffffd, 0x525, 0x5e, 0x200000000207b98, 0x80000000000001fe, 0x0, 0x0, 0x9], [0x100000001, 0x0, 0x3ffffffe, 0x0, 0xb, 0x11000, 0xffffffff00000000], [0x104, 0x1fffffffffb, 0x7ffffffffffffffc, 0x100000001, 0xfffffffffffffffe, 0x1], [{0x0, 0x0, 0x0, 0x7d02}, {0xfffc, 0x22, 0x5, 0xfffffffffffffff9}, {0x4, 0x0, 0xfffffffe, 0xfffffffffffffff0}, {0x3, 0x4, 0x5, 0xffffffffffffffff}, {0x0, 0x2, 0x7f, 0x8}, {0x0, 0x9, 0x9, 0x2000000000000002}, {0x0, 0x0, 0xfffffff9}, {0x0, 0x100, 0x0, 0x8}], {0x1, 0x5, 0x7, 0x3}, {0xfbfe, 0x3, 0x6d5, 0x4}}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000001700)={&(0x7f0000000100)=@abs={0x80, 0x0, 0x0, 0x1}, 0x8, 0x0, 0x0, &(0x7f00000016c0)=[@rights={0x10, 0xffff, 0x1, [r3]}], 0x10, 0xa}, 0x8) r4 = kqueue() kevent(r4, &(0x7f0000000000), 0x3ff, 0x0, 0x8000800, 0x0) ioctl$BIOCGRTIMEOUT(r2, 0x4010426e, &(0x7f0000000000)) 2.374851184s ago: executing program 35 (id=72): mknod(&(0x7f0000000240)='./file0\x00', 0x1ffa, 0x0) r0 = open$dir(&(0x7f0000000280)='./file0\x00', 0x40, 0x392) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x2000000000000243, &(0x7f0000000100)}) r1 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r1, 0xc0106924, &(0x7f00000001c0)) r2 = open(&(0x7f0000000040)='./file0\x00', 0x2, 0x102) ioctl$FIONREAD(r0, 0xc020691b, &(0x7f0000000100)) setrlimit(0x8, &(0x7f0000000980)={0xb, 0x54}) syz_open_pts() ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x0, 0xb3f, {[0xfffffbfffffffffb, 0x0, 0x8, 0x100200000, 0x6, 0x7, 0xdf60, 0xfffffffffffffffe, 0x0, 0x2f01, 0x93, 0x8, 0xffffffffffffffff, 0x9, 0xf, 0x4, 0xfffffffffffffffe, 0x400000000100], [0xfffffffffffffffe, 0x80000001, 0xfffffffffffffffd, 0x525, 0x5e, 0x200000000207b98, 0x80000000000001fe, 0x0, 0x0, 0x9], [0x100000001, 0x0, 0x3ffffffe, 0x0, 0xb, 0x11000, 0xffffffff00000000], [0x104, 0x1fffffffffb, 0x7ffffffffffffffc, 0x100000001, 0xfffffffffffffffe, 0x1], [{0x0, 0x0, 0x0, 0x7d02}, {0xfffc, 0x22, 0x5, 0xfffffffffffffff9}, {0x4, 0x0, 0xfffffffe, 0xfffffffffffffff0}, {0x3, 0x4, 0x5, 0xffffffffffffffff}, {0x0, 0x2, 0x7f, 0x8}, {0x0, 0x9, 0x9, 0x2000000000000002}, {0x0, 0x0, 0xfffffff9}, {0x0, 0x100, 0x0, 0x8}], {0x1, 0x5, 0x7, 0x3}, {0xfbfe, 0x3, 0x6d5, 0x4}}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000001700)={&(0x7f0000000100)=@abs={0x80, 0x0, 0x0, 0x1}, 0x8, 0x0, 0x0, &(0x7f00000016c0)=[@rights={0x10, 0xffff, 0x1, [r3]}], 0x10, 0xa}, 0x8) r4 = kqueue() kevent(r4, &(0x7f0000000000), 0x3ff, 0x0, 0x8000800, 0x0) ioctl$BIOCGRTIMEOUT(r2, 0x4010426e, &(0x7f0000000000)) 2.248046581s ago: executing program 7 (id=73): r0 = socket$inet(0x2, 0x1, 0x6) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) (async) r2 = open(&(0x7f0000000200)='./file0\x00', 0x200, 0x0) fcntl$lock(r2, 0x8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x100000001}) (async) flock(r2, 0x5) close(r2) ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x0, [{0x2, 0x7}, {0x2, 0xff03}, {0x1, 0xd57}, {0x0, 0x2800}, {0x3}, {0x3, 0x1}, {0x0, 0x3}, {0x3, 0x5}, {0x1, 0x1}, {0x1, 0x100}, {0x1, 0x1}, {0x3, 0x80000000}, {0x2, 0x3}, {}, {0x2, 0x5}, {0x1, 0xffffffff}, {0x3, 0x1}, {0x3}, {0x3, 0xfffffffe}, {0x3, 0x7ff}, {0xbb08c0840fa32129, 0x6}, {0x0, 0x1}, {0x1}, {0x0, 0xf205}, {0x2, 0xffffff}, {0x1, 0x1}, {0x0, 0x1ff}, {0x3, 0x2}, {0x2, 0xffffffff}, {0x0, 0x9}, {0x1, 0x5}, {0x3}]}) (async) getsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f00000000c0), &(0x7f0000000180)=0xc) sysctl$kern(&(0x7f00000000c0)={0x1, 0x37}, 0x4, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000140)=0x2c, 0x0, 0x2e) (async) setsockopt$sock_timeval(r0, 0xffff, 0x1005, 0x0, 0x0) (async) r3 = socket$inet(0x2, 0x2, 0x3) syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @broadcast, [], {@ipv4={0x800, {{0x9, 0x4, 0x2, 0x1, 0x38, 0x67, 0xfffc, 0x6, 0x9d, 0x0, @broadcast, @rand_addr=0x70000000, {[@rr={0x7, 0x3, 0x5}, @timestamp={0x44, 0xc, 0xd, 0x3, 0xe, [{[], 0x9}, {}]}]}}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0xb, 0x8, 0x3fc, 0x4, 0x9}}}}}) (async) getsockopt(r3, 0x0, 0x25, 0x0, 0x0) 2.247119566s ago: executing program 36 (id=73): r0 = socket$inet(0x2, 0x1, 0x6) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) (async) r2 = open(&(0x7f0000000200)='./file0\x00', 0x200, 0x0) fcntl$lock(r2, 0x8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x100000001}) (async) flock(r2, 0x5) close(r2) ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x0, [{0x2, 0x7}, {0x2, 0xff03}, {0x1, 0xd57}, {0x0, 0x2800}, {0x3}, {0x3, 0x1}, {0x0, 0x3}, {0x3, 0x5}, {0x1, 0x1}, {0x1, 0x100}, {0x1, 0x1}, {0x3, 0x80000000}, {0x2, 0x3}, {}, {0x2, 0x5}, {0x1, 0xffffffff}, {0x3, 0x1}, {0x3}, {0x3, 0xfffffffe}, {0x3, 0x7ff}, {0xbb08c0840fa32129, 0x6}, {0x0, 0x1}, {0x1}, {0x0, 0xf205}, {0x2, 0xffffff}, {0x1, 0x1}, {0x0, 0x1ff}, {0x3, 0x2}, {0x2, 0xffffffff}, {0x0, 0x9}, {0x1, 0x5}, {0x3}]}) (async) getsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f00000000c0), &(0x7f0000000180)=0xc) sysctl$kern(&(0x7f00000000c0)={0x1, 0x37}, 0x4, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000140)=0x2c, 0x0, 0x2e) (async) setsockopt$sock_timeval(r0, 0xffff, 0x1005, 0x0, 0x0) (async) r3 = socket$inet(0x2, 0x2, 0x3) syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @broadcast, [], {@ipv4={0x800, {{0x9, 0x4, 0x2, 0x1, 0x38, 0x67, 0xfffc, 0x6, 0x9d, 0x0, @broadcast, @rand_addr=0x70000000, {[@rr={0x7, 0x3, 0x5}, @timestamp={0x44, 0xc, 0xd, 0x3, 0xe, [{[], 0x9}, {}]}]}}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0xb, 0x8, 0x3fc, 0x4, 0x9}}}}}) (async) getsockopt(r3, 0x0, 0x25, 0x0, 0x0) 2.246880939s ago: executing program 1 (id=74): syz_emit_ethernet(0x93, &(0x7f0000000000)={@broadcast, @random="94ea09066dbd", [], {@ipv6={0x86dd, {0x0, 0x6, "db8344", 0x8, 0x2c, 0x0, @remote={0xfe, 0x80, '\x00', 0x0}, @mcast2, {[], @udp={{0x0, 0x0, 0x8}}}}}}}) (async) syz_emit_ethernet(0x93, &(0x7f0000000000)={@broadcast, @random="94ea09066dbd", [], {@ipv6={0x86dd, {0x0, 0x6, "db8344", 0x8, 0x2c, 0x0, @remote={0xfe, 0x80, '\x00', 0x0}, @mcast2, {[], @udp={{0x0, 0x0, 0x8}}}}}}}) syz_emit_ethernet(0x2e, &(0x7f0000000140)={@local, @random="429b00", [], {@ipv4={0x800, {{0x8, 0x4, 0x0, 0x3d, 0x20, 0x67, 0x0, 0x0, 0x6, 0x0, @multicast2, @local={0xac, 0x14, 0x0}, {[@timestamp={0x44, 0xc, 0x5, 0x1, 0x6, [{[@multicast2], 0xffffffff}]}]}}}}}}) r0 = socket(0x18, 0x1, 0x0) ioctl$FIONREAD(r0, 0xc028698b, &(0x7f0000000100)) sysctl$net_inet6_ip6(&(0x7f0000000040)={0x4, 0x18, 0x29, 0x33}, 0x4, 0x0, 0x0, 0x0, 0xf6) 2.246477653s ago: executing program 37 (id=74): syz_emit_ethernet(0x93, &(0x7f0000000000)={@broadcast, @random="94ea09066dbd", [], {@ipv6={0x86dd, {0x0, 0x6, "db8344", 0x8, 0x2c, 0x0, @remote={0xfe, 0x80, '\x00', 0x0}, @mcast2, {[], @udp={{0x0, 0x0, 0x8}}}}}}}) (async) syz_emit_ethernet(0x93, &(0x7f0000000000)={@broadcast, @random="94ea09066dbd", [], {@ipv6={0x86dd, {0x0, 0x6, "db8344", 0x8, 0x2c, 0x0, @remote={0xfe, 0x80, '\x00', 0x0}, @mcast2, {[], @udp={{0x0, 0x0, 0x8}}}}}}}) syz_emit_ethernet(0x2e, &(0x7f0000000140)={@local, @random="429b00", [], {@ipv4={0x800, {{0x8, 0x4, 0x0, 0x3d, 0x20, 0x67, 0x0, 0x0, 0x6, 0x0, @multicast2, @local={0xac, 0x14, 0x0}, {[@timestamp={0x44, 0xc, 0x5, 0x1, 0x6, [{[@multicast2], 0xffffffff}]}]}}}}}}) r0 = socket(0x18, 0x1, 0x0) ioctl$FIONREAD(r0, 0xc028698b, &(0x7f0000000100)) sysctl$net_inet6_ip6(&(0x7f0000000040)={0x4, 0x18, 0x29, 0x33}, 0x4, 0x0, 0x0, 0x0, 0xf6) 2.246369613s ago: executing program 5 (id=77): setrlimit(0x8, &(0x7f00000000c0)={0x45, 0x56}) r0 = syz_open_pts() close(r0) socket(0x800000018, 0x8000, 0x0) kqueue() 2.242980693s ago: executing program 38 (id=77): setrlimit(0x8, &(0x7f00000000c0)={0x45, 0x56}) r0 = syz_open_pts() close(r0) socket(0x800000018, 0x8000, 0x0) kqueue() 2.234229877s ago: executing program 6 (id=78): openat$vnd(0xffffffffffffff9c, &(0x7f0000000000), 0x20689, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x0, 0x3, 0x2, 0x6df}]}) sysctl$hw(&(0x7f0000000080)={0x6, 0x2}, 0x2, &(0x7f0000000140)="05000000e4", &(0x7f0000000040)=0xfffffe13, 0x0, 0x0) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x2, 0x2, 0x0) r1 = syz_open_pts() fchown(r1, 0xffffffffffffffff, 0xffffffffffffffff) r2 = dup(r0) setsockopt$inet_opts(r2, 0x0, 0x13, &(0x7f0000000040)="fd0cc085", 0x4) connect$unix(r0, &(0x7f0000000000), 0x10) 2.230669213s ago: executing program 39 (id=78): openat$vnd(0xffffffffffffff9c, &(0x7f0000000000), 0x20689, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x0, 0x3, 0x2, 0x6df}]}) sysctl$hw(&(0x7f0000000080)={0x6, 0x2}, 0x2, &(0x7f0000000140)="05000000e4", &(0x7f0000000040)=0xfffffe13, 0x0, 0x0) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x2, 0x2, 0x0) r1 = syz_open_pts() fchown(r1, 0xffffffffffffffff, 0xffffffffffffffff) r2 = dup(r0) setsockopt$inet_opts(r2, 0x0, 0x13, &(0x7f0000000040)="fd0cc085", 0x4) connect$unix(r0, &(0x7f0000000000), 0x10) 722.413131ms ago: executing program 8 (id=71): syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) r0 = openat$klog(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) writev(r0, &(0x7f00000004c0)=[{&(0x7f00000000c0)="6d04219d150de9c38d9c6e5be15700167f793202cc78308662f6f72fa000733e1683c717f71a28542546bb796afdec9114459df4cc3bf012efaf817fea9adec38195308957b7fd5f4c9879ef93235ce0b0062bb65dafc7f3a2", 0x59}, {&(0x7f0000000140)="6b211f48c9e462bf4adf67b3e3e38b43fa1c993a3ca704744a62ac103daf6407aad74f1b8f9de4bd86e71e9a4b799ce75d24fe8fe0b778d2b7777b7bd9e224a019b7569d35244157cbc6", 0x4a}, {&(0x7f00000001c0)="35dcf1633cdeb01828252740077bebbc3c9e317f64710d02928f4aa4d905c27c940de4ee1d42ecaa16894e32c5ef54f31433d1fd5127f268181b1aa3ffc8c35dd905b2f3c286e2ce9c78f38de575323a3ac967c29f09f28d782f2e3ea9b94da27d16aad5f79f52ca4552c4d9b17a1bba8a204e9cf024d605e1e09467a95aeee8425b94d32c0a1795b13fbaef9ed2ece6400f6c668d5e77c1ac00f4f0a7ff1ee58aecaf2eaa01b723c55c61ef73552ef6d2acd0f5f3b06d6bacfbb4dae37eaa62fa715204ef8bb96a62b17ecdac7733647770bb60754b3604c73383661962edd880c488f2b374b226f2a9f6984aaa569f23e98f5ca4e99e8e03", 0xf9}, {&(0x7f0000000300)="6a435d823ae103a4a2e0908ebddd6b221e1f54cb4a287ee79550818874a74b795e7060950555870f1b62888e50df300818e85a0204f3404c7dd16f3b1365f2f55480f88993f2a12cc7267704c7f7709856a0d1e7ede804fb4671a1c5ae62cad814098f9cddb81f7ee332e36244f0cae3b173b6db0b829b7910f54d39c228c39abd79a50a4fddf61b78a839741befca00f545c94ac99a5e8bd339e39b8862227469895c0dccb1598a6b7b9654337b3a6d23aacb9616104ea625d9a2b7970373e5b78a4d481e27d116b16c1a6b573e0ff978d84be6520c6102866e755449600734", 0xe0}, {&(0x7f0000000400)="63eecf28b9bfc1e4b0f35b56e0", 0xd}, {&(0x7f0000000540)="198ade734fe6566eb7f67732c64d7ae70aea39fcf53c7fbd44f83af02886663a9906168b3c0100000000000000f07d284a8ad20238578e229a81d08c288ee8f1ad256fae03000c005f5e37f126720e651826b333d49feb50654a0db127b3e51d6970d05adbad95a4e96b10528f3593c9c9b9a2a24f7c8e2012b607", 0x7b}], 0x6) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) r1 = socket(0x2, 0x4001, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffff9c, 0xc02064b9, &(0x7f0000000480)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x3, 0xeeeeeeee}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) connect$unix(r1, &(0x7f0000000000), 0x10) shutdown(r1, 0x1) r2 = socket(0x2, 0x8002, 0x0) r3 = fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) closefrom(r3) open(&(0x7f00000002c0)='./file1/../file0\x00', 0x0, 0x0) 722.339294ms ago: executing program 9 (id=83): r0 = socket(0x2, 0x1, 0x0) syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1000000000000123) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) setsockopt(r0, 0x7, 0x28, &(0x7f0000000080)="09b4964c12925a7f35cf1fa2b9aad07dda13b446e76c436a42c970648654ab0e98afe258801d540a674fc9256682d0ba6e6a0a05bf628bdb5d96", 0x3a) connect$unix(r0, &(0x7f0000000000), 0x10) sendto$unix(r0, &(0x7f0000000280)="4ceb2588", 0xffffff5e, 0x4e1, 0x0, 0x0) close(0x3) 505.913654ms ago: executing program 8 (id=71): syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) r0 = openat$klog(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) writev(r0, &(0x7f00000004c0)=[{&(0x7f00000000c0)="6d04219d150de9c38d9c6e5be15700167f793202cc78308662f6f72fa000733e1683c717f71a28542546bb796afdec9114459df4cc3bf012efaf817fea9adec38195308957b7fd5f4c9879ef93235ce0b0062bb65dafc7f3a2", 0x59}, {&(0x7f0000000140)="6b211f48c9e462bf4adf67b3e3e38b43fa1c993a3ca704744a62ac103daf6407aad74f1b8f9de4bd86e71e9a4b799ce75d24fe8fe0b778d2b7777b7bd9e224a019b7569d35244157cbc6", 0x4a}, {&(0x7f00000001c0)="35dcf1633cdeb01828252740077bebbc3c9e317f64710d02928f4aa4d905c27c940de4ee1d42ecaa16894e32c5ef54f31433d1fd5127f268181b1aa3ffc8c35dd905b2f3c286e2ce9c78f38de575323a3ac967c29f09f28d782f2e3ea9b94da27d16aad5f79f52ca4552c4d9b17a1bba8a204e9cf024d605e1e09467a95aeee8425b94d32c0a1795b13fbaef9ed2ece6400f6c668d5e77c1ac00f4f0a7ff1ee58aecaf2eaa01b723c55c61ef73552ef6d2acd0f5f3b06d6bacfbb4dae37eaa62fa715204ef8bb96a62b17ecdac7733647770bb60754b3604c73383661962edd880c488f2b374b226f2a9f6984aaa569f23e98f5ca4e99e8e03", 0xf9}, {&(0x7f0000000300)="6a435d823ae103a4a2e0908ebddd6b221e1f54cb4a287ee79550818874a74b795e7060950555870f1b62888e50df300818e85a0204f3404c7dd16f3b1365f2f55480f88993f2a12cc7267704c7f7709856a0d1e7ede804fb4671a1c5ae62cad814098f9cddb81f7ee332e36244f0cae3b173b6db0b829b7910f54d39c228c39abd79a50a4fddf61b78a839741befca00f545c94ac99a5e8bd339e39b8862227469895c0dccb1598a6b7b9654337b3a6d23aacb9616104ea625d9a2b7970373e5b78a4d481e27d116b16c1a6b573e0ff978d84be6520c6102866e755449600734", 0xe0}, {&(0x7f0000000400)="63eecf28b9bfc1e4b0f35b56e0", 0xd}, {&(0x7f0000000540)="198ade734fe6566eb7f67732c64d7ae70aea39fcf53c7fbd44f83af02886663a9906168b3c0100000000000000f07d284a8ad20238578e229a81d08c288ee8f1ad256fae03000c005f5e37f126720e651826b333d49feb50654a0db127b3e51d6970d05adbad95a4e96b10528f3593c9c9b9a2a24f7c8e2012b607", 0x7b}], 0x6) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) r1 = socket(0x2, 0x4001, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffff9c, 0xc02064b9, &(0x7f0000000480)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x3, 0xeeeeeeee}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) connect$unix(r1, &(0x7f0000000000), 0x10) shutdown(r1, 0x1) r2 = socket(0x2, 0x8002, 0x0) r3 = fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) closefrom(r3) open(&(0x7f00000002c0)='./file1/../file0\x00', 0x0, 0x0) 505.723254ms ago: executing program 9 (id=83): r0 = socket(0x2, 0x1, 0x0) syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1000000000000123) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) setsockopt(r0, 0x7, 0x28, &(0x7f0000000080)="09b4964c12925a7f35cf1fa2b9aad07dda13b446e76c436a42c970648654ab0e98afe258801d540a674fc9256682d0ba6e6a0a05bf628bdb5d96", 0x3a) connect$unix(r0, &(0x7f0000000000), 0x10) sendto$unix(r0, &(0x7f0000000280)="4ceb2588", 0xffffff5e, 0x4e1, 0x0, 0x0) close(0x3) 505.505927ms ago: executing program 8 (id=71): syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) r0 = openat$klog(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) writev(r0, &(0x7f00000004c0)=[{&(0x7f00000000c0)="6d04219d150de9c38d9c6e5be15700167f793202cc78308662f6f72fa000733e1683c717f71a28542546bb796afdec9114459df4cc3bf012efaf817fea9adec38195308957b7fd5f4c9879ef93235ce0b0062bb65dafc7f3a2", 0x59}, {&(0x7f0000000140)="6b211f48c9e462bf4adf67b3e3e38b43fa1c993a3ca704744a62ac103daf6407aad74f1b8f9de4bd86e71e9a4b799ce75d24fe8fe0b778d2b7777b7bd9e224a019b7569d35244157cbc6", 0x4a}, {&(0x7f00000001c0)="35dcf1633cdeb01828252740077bebbc3c9e317f64710d02928f4aa4d905c27c940de4ee1d42ecaa16894e32c5ef54f31433d1fd5127f268181b1aa3ffc8c35dd905b2f3c286e2ce9c78f38de575323a3ac967c29f09f28d782f2e3ea9b94da27d16aad5f79f52ca4552c4d9b17a1bba8a204e9cf024d605e1e09467a95aeee8425b94d32c0a1795b13fbaef9ed2ece6400f6c668d5e77c1ac00f4f0a7ff1ee58aecaf2eaa01b723c55c61ef73552ef6d2acd0f5f3b06d6bacfbb4dae37eaa62fa715204ef8bb96a62b17ecdac7733647770bb60754b3604c73383661962edd880c488f2b374b226f2a9f6984aaa569f23e98f5ca4e99e8e03", 0xf9}, {&(0x7f0000000300)="6a435d823ae103a4a2e0908ebddd6b221e1f54cb4a287ee79550818874a74b795e7060950555870f1b62888e50df300818e85a0204f3404c7dd16f3b1365f2f55480f88993f2a12cc7267704c7f7709856a0d1e7ede804fb4671a1c5ae62cad814098f9cddb81f7ee332e36244f0cae3b173b6db0b829b7910f54d39c228c39abd79a50a4fddf61b78a839741befca00f545c94ac99a5e8bd339e39b8862227469895c0dccb1598a6b7b9654337b3a6d23aacb9616104ea625d9a2b7970373e5b78a4d481e27d116b16c1a6b573e0ff978d84be6520c6102866e755449600734", 0xe0}, {&(0x7f0000000400)="63eecf28b9bfc1e4b0f35b56e0", 0xd}, {&(0x7f0000000540)="198ade734fe6566eb7f67732c64d7ae70aea39fcf53c7fbd44f83af02886663a9906168b3c0100000000000000f07d284a8ad20238578e229a81d08c288ee8f1ad256fae03000c005f5e37f126720e651826b333d49feb50654a0db127b3e51d6970d05adbad95a4e96b10528f3593c9c9b9a2a24f7c8e2012b607", 0x7b}], 0x6) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) r1 = socket(0x2, 0x4001, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffff9c, 0xc02064b9, &(0x7f0000000480)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x3, 0xeeeeeeee}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) connect$unix(r1, &(0x7f0000000000), 0x10) shutdown(r1, 0x1) r2 = socket(0x2, 0x8002, 0x0) r3 = fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) closefrom(r3) open(&(0x7f00000002c0)='./file1/../file0\x00', 0x0, 0x0) 505.460134ms ago: executing program 9 (id=83): r0 = socket(0x2, 0x1, 0x0) syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1000000000000123) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) setsockopt(r0, 0x7, 0x28, &(0x7f0000000080)="09b4964c12925a7f35cf1fa2b9aad07dda13b446e76c436a42c970648654ab0e98afe258801d540a674fc9256682d0ba6e6a0a05bf628bdb5d96", 0x3a) connect$unix(r0, &(0x7f0000000000), 0x10) sendto$unix(r0, &(0x7f0000000280)="4ceb2588", 0xffffff5e, 0x4e1, 0x0, 0x0) close(0x3) 301.555352ms ago: executing program 8 (id=71): syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) r0 = openat$klog(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) writev(r0, &(0x7f00000004c0)=[{&(0x7f00000000c0)="6d04219d150de9c38d9c6e5be15700167f793202cc78308662f6f72fa000733e1683c717f71a28542546bb796afdec9114459df4cc3bf012efaf817fea9adec38195308957b7fd5f4c9879ef93235ce0b0062bb65dafc7f3a2", 0x59}, {&(0x7f0000000140)="6b211f48c9e462bf4adf67b3e3e38b43fa1c993a3ca704744a62ac103daf6407aad74f1b8f9de4bd86e71e9a4b799ce75d24fe8fe0b778d2b7777b7bd9e224a019b7569d35244157cbc6", 0x4a}, {&(0x7f00000001c0)="35dcf1633cdeb01828252740077bebbc3c9e317f64710d02928f4aa4d905c27c940de4ee1d42ecaa16894e32c5ef54f31433d1fd5127f268181b1aa3ffc8c35dd905b2f3c286e2ce9c78f38de575323a3ac967c29f09f28d782f2e3ea9b94da27d16aad5f79f52ca4552c4d9b17a1bba8a204e9cf024d605e1e09467a95aeee8425b94d32c0a1795b13fbaef9ed2ece6400f6c668d5e77c1ac00f4f0a7ff1ee58aecaf2eaa01b723c55c61ef73552ef6d2acd0f5f3b06d6bacfbb4dae37eaa62fa715204ef8bb96a62b17ecdac7733647770bb60754b3604c73383661962edd880c488f2b374b226f2a9f6984aaa569f23e98f5ca4e99e8e03", 0xf9}, {&(0x7f0000000300)="6a435d823ae103a4a2e0908ebddd6b221e1f54cb4a287ee79550818874a74b795e7060950555870f1b62888e50df300818e85a0204f3404c7dd16f3b1365f2f55480f88993f2a12cc7267704c7f7709856a0d1e7ede804fb4671a1c5ae62cad814098f9cddb81f7ee332e36244f0cae3b173b6db0b829b7910f54d39c228c39abd79a50a4fddf61b78a839741befca00f545c94ac99a5e8bd339e39b8862227469895c0dccb1598a6b7b9654337b3a6d23aacb9616104ea625d9a2b7970373e5b78a4d481e27d116b16c1a6b573e0ff978d84be6520c6102866e755449600734", 0xe0}, {&(0x7f0000000400)="63eecf28b9bfc1e4b0f35b56e0", 0xd}, {&(0x7f0000000540)="198ade734fe6566eb7f67732c64d7ae70aea39fcf53c7fbd44f83af02886663a9906168b3c0100000000000000f07d284a8ad20238578e229a81d08c288ee8f1ad256fae03000c005f5e37f126720e651826b333d49feb50654a0db127b3e51d6970d05adbad95a4e96b10528f3593c9c9b9a2a24f7c8e2012b607", 0x7b}], 0x6) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) r1 = socket(0x2, 0x4001, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffff9c, 0xc02064b9, &(0x7f0000000480)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x3, 0xeeeeeeee}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) connect$unix(r1, &(0x7f0000000000), 0x10) shutdown(r1, 0x1) r2 = socket(0x2, 0x8002, 0x0) r3 = fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) closefrom(r3) open(&(0x7f00000002c0)='./file1/../file0\x00', 0x0, 0x0) 301.374941ms ago: executing program 9 (id=83): r0 = socket(0x2, 0x1, 0x0) syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1000000000000123) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) setsockopt(r0, 0x7, 0x28, &(0x7f0000000080)="09b4964c12925a7f35cf1fa2b9aad07dda13b446e76c436a42c970648654ab0e98afe258801d540a674fc9256682d0ba6e6a0a05bf628bdb5d96", 0x3a) connect$unix(r0, &(0x7f0000000000), 0x10) sendto$unix(r0, &(0x7f0000000280)="4ceb2588", 0xffffff5e, 0x4e1, 0x0, 0x0) close(0x3) 301.12749ms ago: executing program 8 (id=71): syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) r0 = openat$klog(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) writev(r0, &(0x7f00000004c0)=[{&(0x7f00000000c0)="6d04219d150de9c38d9c6e5be15700167f793202cc78308662f6f72fa000733e1683c717f71a28542546bb796afdec9114459df4cc3bf012efaf817fea9adec38195308957b7fd5f4c9879ef93235ce0b0062bb65dafc7f3a2", 0x59}, {&(0x7f0000000140)="6b211f48c9e462bf4adf67b3e3e38b43fa1c993a3ca704744a62ac103daf6407aad74f1b8f9de4bd86e71e9a4b799ce75d24fe8fe0b778d2b7777b7bd9e224a019b7569d35244157cbc6", 0x4a}, {&(0x7f00000001c0)="35dcf1633cdeb01828252740077bebbc3c9e317f64710d02928f4aa4d905c27c940de4ee1d42ecaa16894e32c5ef54f31433d1fd5127f268181b1aa3ffc8c35dd905b2f3c286e2ce9c78f38de575323a3ac967c29f09f28d782f2e3ea9b94da27d16aad5f79f52ca4552c4d9b17a1bba8a204e9cf024d605e1e09467a95aeee8425b94d32c0a1795b13fbaef9ed2ece6400f6c668d5e77c1ac00f4f0a7ff1ee58aecaf2eaa01b723c55c61ef73552ef6d2acd0f5f3b06d6bacfbb4dae37eaa62fa715204ef8bb96a62b17ecdac7733647770bb60754b3604c73383661962edd880c488f2b374b226f2a9f6984aaa569f23e98f5ca4e99e8e03", 0xf9}, {&(0x7f0000000300)="6a435d823ae103a4a2e0908ebddd6b221e1f54cb4a287ee79550818874a74b795e7060950555870f1b62888e50df300818e85a0204f3404c7dd16f3b1365f2f55480f88993f2a12cc7267704c7f7709856a0d1e7ede804fb4671a1c5ae62cad814098f9cddb81f7ee332e36244f0cae3b173b6db0b829b7910f54d39c228c39abd79a50a4fddf61b78a839741befca00f545c94ac99a5e8bd339e39b8862227469895c0dccb1598a6b7b9654337b3a6d23aacb9616104ea625d9a2b7970373e5b78a4d481e27d116b16c1a6b573e0ff978d84be6520c6102866e755449600734", 0xe0}, {&(0x7f0000000400)="63eecf28b9bfc1e4b0f35b56e0", 0xd}, {&(0x7f0000000540)="198ade734fe6566eb7f67732c64d7ae70aea39fcf53c7fbd44f83af02886663a9906168b3c0100000000000000f07d284a8ad20238578e229a81d08c288ee8f1ad256fae03000c005f5e37f126720e651826b333d49feb50654a0db127b3e51d6970d05adbad95a4e96b10528f3593c9c9b9a2a24f7c8e2012b607", 0x7b}], 0x6) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) r1 = socket(0x2, 0x4001, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffff9c, 0xc02064b9, &(0x7f0000000480)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x3, 0xeeeeeeee}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) connect$unix(r1, &(0x7f0000000000), 0x10) shutdown(r1, 0x1) r2 = socket(0x2, 0x8002, 0x0) r3 = fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) closefrom(r3) open(&(0x7f00000002c0)='./file1/../file0\x00', 0x0, 0x0) 90.75548ms ago: executing program 9 (id=83): r0 = socket(0x2, 0x1, 0x0) syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1000000000000123) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) setsockopt(r0, 0x7, 0x28, &(0x7f0000000080)="09b4964c12925a7f35cf1fa2b9aad07dda13b446e76c436a42c970648654ab0e98afe258801d540a674fc9256682d0ba6e6a0a05bf628bdb5d96", 0x3a) connect$unix(r0, &(0x7f0000000000), 0x10) sendto$unix(r0, &(0x7f0000000280)="4ceb2588", 0xffffff5e, 0x4e1, 0x0, 0x0) close(0x3) 88.800493ms ago: executing program 4 (id=84): r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x186) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x2012, r0, 0x0) (async) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x0, 0x3, 0x4, 0x4}, {0x7, 0x0, 0x40, 0x20000}, {0x103, 0x0, 0x0, 0x10001}]}) 83.762851ms ago: executing program 3 (id=75): sysctl$vm_swapencrypt(&(0x7f0000000040)={0x6, 0xb}, 0x40000307, 0x0, 0x0, 0x0, 0x0) 67.270571ms ago: executing program 8 (id=71): syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) r0 = openat$klog(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) writev(r0, &(0x7f00000004c0)=[{&(0x7f00000000c0)="6d04219d150de9c38d9c6e5be15700167f793202cc78308662f6f72fa000733e1683c717f71a28542546bb796afdec9114459df4cc3bf012efaf817fea9adec38195308957b7fd5f4c9879ef93235ce0b0062bb65dafc7f3a2", 0x59}, {&(0x7f0000000140)="6b211f48c9e462bf4adf67b3e3e38b43fa1c993a3ca704744a62ac103daf6407aad74f1b8f9de4bd86e71e9a4b799ce75d24fe8fe0b778d2b7777b7bd9e224a019b7569d35244157cbc6", 0x4a}, {&(0x7f00000001c0)="35dcf1633cdeb01828252740077bebbc3c9e317f64710d02928f4aa4d905c27c940de4ee1d42ecaa16894e32c5ef54f31433d1fd5127f268181b1aa3ffc8c35dd905b2f3c286e2ce9c78f38de575323a3ac967c29f09f28d782f2e3ea9b94da27d16aad5f79f52ca4552c4d9b17a1bba8a204e9cf024d605e1e09467a95aeee8425b94d32c0a1795b13fbaef9ed2ece6400f6c668d5e77c1ac00f4f0a7ff1ee58aecaf2eaa01b723c55c61ef73552ef6d2acd0f5f3b06d6bacfbb4dae37eaa62fa715204ef8bb96a62b17ecdac7733647770bb60754b3604c73383661962edd880c488f2b374b226f2a9f6984aaa569f23e98f5ca4e99e8e03", 0xf9}, {&(0x7f0000000300)="6a435d823ae103a4a2e0908ebddd6b221e1f54cb4a287ee79550818874a74b795e7060950555870f1b62888e50df300818e85a0204f3404c7dd16f3b1365f2f55480f88993f2a12cc7267704c7f7709856a0d1e7ede804fb4671a1c5ae62cad814098f9cddb81f7ee332e36244f0cae3b173b6db0b829b7910f54d39c228c39abd79a50a4fddf61b78a839741befca00f545c94ac99a5e8bd339e39b8862227469895c0dccb1598a6b7b9654337b3a6d23aacb9616104ea625d9a2b7970373e5b78a4d481e27d116b16c1a6b573e0ff978d84be6520c6102866e755449600734", 0xe0}, {&(0x7f0000000400)="63eecf28b9bfc1e4b0f35b56e0", 0xd}, {&(0x7f0000000540)="198ade734fe6566eb7f67732c64d7ae70aea39fcf53c7fbd44f83af02886663a9906168b3c0100000000000000f07d284a8ad20238578e229a81d08c288ee8f1ad256fae03000c005f5e37f126720e651826b333d49feb50654a0db127b3e51d6970d05adbad95a4e96b10528f3593c9c9b9a2a24f7c8e2012b607", 0x7b}], 0x6) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) r1 = socket(0x2, 0x4001, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffff9c, 0xc02064b9, &(0x7f0000000480)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x3, 0xeeeeeeee}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) connect$unix(r1, &(0x7f0000000000), 0x10) shutdown(r1, 0x1) r2 = socket(0x2, 0x8002, 0x0) r3 = fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) closefrom(r3) open(&(0x7f00000002c0)='./file1/../file0\x00', 0x0, 0x0) 31.393313ms ago: executing program 1 (id=81): r0 = socket$inet(0x2, 0x1, 0x0) r1 = socket(0x18, 0x1, 0x0) getsockopt$sock_cred(r1, 0xffff, 0x1024, &(0x7f0000000140)={0x0}, &(0x7f0000000280)=0xc) kill(r2, 0x18) setsockopt$inet_opts(r0, 0x0, 0x1, &(0x7f0000000200)="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", 0x1bd) (async) setsockopt$inet_opts(r0, 0x0, 0x1, &(0x7f0000000200)="15de3c4771a44bdc07c82e03211fd1fcaed960f84e2744d8b79744d91b82cfc2be872ebcf14bf0a3ec9710cb4346ccaeb65e03a4708c600135fd441b03ef175aa004a1c0a95df1456f930e918f9cfdc129a63699d45f80ff08c374bdf3c894c01db3965c390c495fac6a2b7f3413dd85a88c781020a0416b58f25d09407712a44544827b5161e59507a70322b4fc3e878293b61f0393cca3cedf7a798575c7323f022a56f1868e9d6a7e2335786d752a9aa009b30cb848eee271ffad3822833d3c9d60aa7ba3ec2b14a4a26ae72dbab7ed157ff7ff20e253dcf4a519d4921400e871e7a96cfaf407ef94e7a3e69a309ece2d01f6eb5212ff79f05c8332684822b4ae677fb647116888dc64f9ac5a6f1a5f610671e94fb1123becc7d2259957f15b98c06215f9b8a454c1318879574af0f94572f311a7965c29dd5e49ebe5711f7568ae3a5e507b04e54f0b446f89789e393e14f0c26acc8772698968f64b3e3451366b39cbff57f33cc57b67b89beef839ef3edeeb241c0e6f92d7e8e9fe4e77d58fb9328771e6d93c962a971fd33f10360cb5fb30850e9bcb2ee101c688dda380e5ffd9c2b8091f0b40277ea1019b9ccb609d5683bd4ab28b4fc24fd2", 0x1bd) 8.655204ms ago: executing program 2 (id=79): ioctl$TIOCSETAF(0xffffffffffffffff, 0x802c7416, &(0x7f0000000040)={0xed, 0x1, 0x3, 0x6, "bfe749eefcb1a919bf16be5b6fc98e8b95b7c19c", 0x101, 0x9}) (async, rerun: 64) sysctl$kern(&(0x7f0000000040)={0x1, 0x3f}, 0x4, &(0x7f0000000040), 0x0, 0x0, 0xfffffffffffffda3) (rerun: 64) r0 = shmget$private(0x0, 0x3000, 0x1b4, &(0x7f0000ffb000/0x3000)=nil) shmctl$IPC_STAT(r0, 0x2, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket(0x18, 0x2, 0x0) setsockopt(r1, 0x1000000000029, 0x40, &(0x7f0000000040)="00100000", 0x4) (async, rerun: 32) sysctl$kern(&(0x7f0000000000)={0x1, 0x32}, 0x2, &(0x7f0000000080)="d9b2c4aa961a946ab8119f64b1589dc2ea98eb8e040c1f2c699a7e03083e1740ebcf9b05ff7b52ddb6e4f47021b5c418e823b1ed8d632dc1670c3ecad85f9dedf72c", &(0x7f0000000100)=0x42, &(0x7f0000000140)="ee879384e85a87f8ab08952055e3ace091ad8201507592a8debee1b1a53b19c051b1804e1dbf60607a7236a91e516c48a3a82eb64996be437a9006bb432189e181b9086633b445097c1a0d0db405ed5561b66499aa04cbddefac63376daa7646ef22", 0x62) (rerun: 32) 0s ago: executing program 9 (id=83): r0 = socket(0x2, 0x1, 0x0) syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1000000000000123) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) setsockopt(r0, 0x7, 0x28, &(0x7f0000000080)="09b4964c12925a7f35cf1fa2b9aad07dda13b446e76c436a42c970648654ab0e98afe258801d540a674fc9256682d0ba6e6a0a05bf628bdb5d96", 0x3a) connect$unix(r0, &(0x7f0000000000), 0x10) sendto$unix(r0, &(0x7f0000000280)="4ceb2588", 0xffffff5e, 0x4e1, 0x0, 0x0) close(0x3) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.165' (ED25519) to the list of known hosts. panic: pool_do_get: shmpl free list modified: page 0xfffffd806b210000; item addr 0xfffffd806b210bd0; offset 0x40=0x69fe754b Stopped at db_enter+0x25: addq $0x8,%rsp TID PID UID PRFLAGS PFLAGS CPU COMMAND 193420 73858 32767 0x10 0 1 syz-executor * 76315 8344 32767 0x10 0x4000000 0 syz-executor db_enter() at db_enter+0x25 panic(ffffffff834446fb) at panic+0x1e5 pool_do_get(ffffffff83ac7490,1,ffff8000383c29c8) at pool_do_get+0x5df pool_get(ffffffff83ac7490,1) at pool_get+0x162 shmget_allocate_segment(ffff8000fffe7ca8,ffff8000383c2c20,1b4,ffff8000383c2b70) at shmget_allocate_segment+0x1af sys_shmget(ffff8000fffe7ca8,ffff8000383c2c20,ffff8000383c2b70) at sys_shmget+0x195 syscall(ffff8000383c2c20) at syscall+0xb17 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x9fc0d0f5a00, count: 7 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{0}> ddb{0}> set $lines = 0 ddb{0}> set $maxwidth = 0 ddb{0}> show panic *cpu0: pool_do_get: shmpl free list modified: page 0xfffffd806b210000; item addr 0xfffffd806b210bd0; offset 0x40=0x69fe754b ddb{0}> trace db_enter() at db_enter+0x25 panic(ffffffff834446fb) at panic+0x1e5 pool_do_get(ffffffff83ac7490,1,ffff8000383c29c8) at pool_do_get+0x5df pool_get(ffffffff83ac7490,1) at pool_get+0x162 shmget_allocate_segment(ffff8000fffe7ca8,ffff8000383c2c20,1b4,ffff8000383c2b70) at shmget_allocate_segment+0x1af sys_shmget(ffff8000fffe7ca8,ffff8000383c2c20,ffff8000383c2b70) at sys_shmget+0x195 syscall(ffff8000383c2c20) at syscall+0xb17 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x9fc0d0f5a00, count: -8 ddb{0}> show registers rdi 0 rsi 0x1 rbp 0xffff8000383c27f0 rbx 0xffffffff83915e07 cpu_info_full_primary+0x2e07 rdx 0 rcx 0xffff8000fffe7ca8 rax 0xffffffff83914ff0 cpu_info_full_primary+0x1ff0 r8 0x101010101010101 r9 0x8080808080808080 r10 0xc019084c13adcc19 r11 0xf94d8651f727566f r12 0xffffffff83915c08 cpu_info_full_primary+0x2c08 r13 0 r14 0 r15 0x1 rip 0xffffffff8259c4c5 db_enter+0x25 cs 0x8 rflags 0x246 rsp 0xffff8000383c27e0 ss 0x10 db_enter+0x25: addq $0x8,%rsp ddb{0}> show proc PROC (syz-executor) tid=76315 pid=8344 tcnt=3 stat=onproc flags process=10 proc=4000000 runpri=32, usrpri=86, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff8000fffe6fb0,0xffff8000fffe6a90 process=0xffff8000fffe09c0 user=0xffff8000383bd000, vmspace=0xfffffd806c7819b8 estcpu=36, cpticks=1, pctcpu=0.0, user=0, sys=1, intr=0 ddb{0}> ps PID TID PPID UID S FLAGS WAIT COMMAND 12515 73178 90341 0 2 0x100000 sh 73858 193420 11906 32767 7 0x10 syz-executor 73858 515268 11906 32767 2 0x4000090 syz-executor 547 155287 60114 0 2 0 syz-executor 60114 343404 55909 0 3 0x82 wait syz-executor 8344 464825 38812 32767 2 0x10 syz-executor * 8344 76315 38812 32767 7 0x4000010 syz-executor 8344 362412 38812 32767 3 0x4000090 fsleep syz-executor 86009 467846 43235 0 2 0x2 arp 43235 59383 29054 0 3 0x10008a sigsusp sh 90341 32793 59501 0 3 0x10008a sigsusp sh 97096 56135 99388 32767 3 0x90 piperd syz-executor 54122 395040 64752 32767 3 0x90 piperd syz-executor 29054 351689 49969 0 3 0x80 wait syz-executor 64752 57306 55909 0 3 0x82 wait syz-executor 99388 262392 55909 0 3 0x82 wait syz-executor 49969 302060 55909 0 3 0x82 wait syz-executor 38812 261933 82860 32767 3 0x90 nanoslp syz-executor 59501 440002 21955 0 3 0x80 wait syz-executor 11906 389958 12716 32767 3 0x90 nanoslp syz-executor 82860 403599 55909 0 3 0x82 wait syz-executor 21955 522952 55909 0 3 0x82 wait syz-executor 12716 166035 55909 0 3 0x82 wait syz-executor 55909 4298 8950 0 3 0x82 nanoslp syz-executor 8950 432616 90013 0 3 0x10008a sigsusp ksh 90013 427438 15155 0 3 0x98 kqread sshd-session 15155 117569 54947 0 3 0x92 kqread sshd-session 68378 398937 1 0 3 0x100083 ttyin getty 54947 220330 1 0 3 0x88 kqread sshd 51626 289546 72968 73 3 0x1100090 kqread syslogd 72968 507580 1 0 3 0x100082 sbwait syslogd 6720 256792 1 0 3 0x100080 kqread resolvd 17115 434953 80462 77 3 0x100092 kqread dhcpleased 30468 680 80462 77 3 0x100092 kqread dhcpleased 80462 233560 1 0 3 0x80 kqread dhcpleased 16262 199648 0 0 3 0x14200 bored smr 91906 422337 0 0 2 0x14200 zerothread 568 143880 0 0 3 0x14200 aiodoned aiodoned 86919 217706 0 0 3 0x14200 syncer update 25230 72345 0 0 3 0x14200 cleaner cleaner 98330 410433 0 0 3 0x14200 reaper reaper 64735 365320 0 0 3 0x14200 pgdaemon pagedaemon 50185 476647 0 0 3 0x14200 bored viomb 97946 261322 0 0 3 0x40014200 acpi0 acpi0 39810 513379 0 0 3 0x40014200 idle1 50335 349640 0 0 3 0x14200 bored softnet1 7858 73492 0 0 3 0x14200 bored softnet0 52414 351128 0 0 3 0x14200 bored systqmp 23405 209533 0 0 3 0x14200 bored systq 88503 488367 0 0 3 0x14200 tmoslp softclockmp 694 181036 0 0 3 0x40014200 tmoslp softclock 9079 263853 0 0 3 0x40014200 idle0 1 235425 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb{0}> show all locks CPU 0: exclusive mutex shmpl r = 0 (0xffffffff83ac74a8) #0 witness_lock+0x5f1 #1 mtx_enter+0x4b4 #2 pool_get+0x124 #3 shmget_allocate_segment+0x1af #4 sys_shmget+0x195 #5 syscall+0xb17 #6 Xsyscall+0x128 Process 8344 (syz-executor) thread 0xffff8000fffe7ca8 (76315) exclusive kernel_lock &kernel_lock r = 0 (0xffffffff83a37d80) #0 witness_lock+0x5f1 #1 syscall+0xaf4 #2 Xsyscall+0x128 exclusive mutex shmpl r = 0 (0xffffffff83ac74a8) #0 witness_lock+0x5f1 #1 mtx_enter+0x4b4 #2 pool_get+0x124 #3 shmget_allocate_segment+0x1af #4 sys_shmget+0x195 #5 syscall+0xb17 #6 Xsyscall+0x128 ddb{0}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 11050 12014K 12034K 166960K 12165 0 pcb 17 12K 12K 166960K 17 0 rtable 163 4K 7K 166960K 486 0 pf 27 16K 16K 166960K 44 0 ifaddr 30 5K 7K 166960K 66 0 ifgroup 42 1K 2K 166960K 75 0 sysctl 1 1K 9K 166960K 6 0 counters 66 36K 37K 166960K 82 0 ioctlops 0 0K 2K 166960K 33 0 iov 0 0K 16K 166960K 24 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1350 85K 85K 166960K 1790 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 5K 166960K 4 0 VM map 2 1K 1K 166960K 2 0 sem 6 0K 1K 166960K 8 0 dirhash 12 2K 2K 166960K 12 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 22 81K 135K 166960K 465 0 sigio 0 0K 0K 166960K 1 0 proc 58 99K 196K 166960K 667 0 subproc 63 3K 8K 166960K 504 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 11 0 in_multi 57 4K 7K 166960K 148 0 ether_multi 1 0K 0K 166960K 2 0 mrt 0 0K 0K 166960K 3 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 79 360K 360K 166960K 79 0 exec 0 0K 1K 166960K 470 0 fusefs mount 1 32K 32K 166960K 1 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 197 144K 214K 166960K 4376 0 UVM aobj 6 2K 2K 166960K 7 0 pinsyscall 44 88K 116K 166960K 1656 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 0K 166960K 6 0 NDP 17 1K 2K 166960K 41 0 temp 32 9074K 9138K 166960K 5627 0 kqueue 13 20K 26K 166960K 39 0 SYN cache 2 16K 16K 166960K 2 0 ddb{0}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 26 0 0 1 0 1 1 0 8 0 rtpcb 120 47 0 44 1 0 1 1 0 8 0 rtentry 176 162 0 89 5 0 5 5 0 8 1 unpcb 144 339 0 324 11 0 11 11 0 8 10 syncache 336 4 0 4 1 0 1 1 0 8 1 tcpcb 736 45 0 41 2 0 2 2 0 8 1 arp 136 29 0 16 1 0 1 1 0 8 0 inpcb 328 143 0 136 2 0 2 2 0 8 1 nd6 152 36 0 24 1 0 1 1 0 8 0 kcovpl 48 56 0 49 1 0 1 1 0 8 0 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 642 0 356 29 4 25 29 0 8 5 art_table 40 643 0 356 5 0 5 5 0 8 1 art_node 32 162 0 95 1 0 1 1 0 8 0 sysvmsgpl 40 3 0 2 1 0 1 1 0 8 0 semupl 112 2 0 2 1 0 1 1 0 8 1 semapl 112 4 0 0 1 0 1 1 0 8 0 shmpl 112 4 0 1 1 0 1 1 0 8 0 pool(0xffffffff83ac7490:shmpl): page inconsistency: page 0xfffffd806b210000; 31 on list, 3 missing, 35 items per page dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino2pl 256 1698 0 183 95 0 95 95 0 8 0 ffsino 296 1698 0 183 117 0 117 117 0 8 0 nchpl 144 1999 0 255 65 0 65 65 0 8 0 vnodes 216 2211 0 0 123 0 123 123 0 8 0 namei 1024 6830 0 6830 2 0 2 2 0 8 2 percpumem 16 56 0 8 1 0 1 1 0 8 0 kstatmem 264 37 0 16 2 0 2 2 0 8 0 scxspl 216 6775 0 6775 4 2 2 3 1 8 2 plimitpl 152 134 0 113 2 0 2 2 0 8 0 sigapl 424 653 0 603 8 0 8 8 0 8 0 knotepl 120 535 0 0 17 0 17 17 0 8 0 kqueuepl 224 39 0 30 1 0 1 1 0 8 0 pipepl 344 267 0 240 4 0 4 4 0 8 0 fdescpl 528 637 0 603 4 0 4 4 0 8 0 filepl 160 2770 0 2581 21 2 19 21 0 8 8 lockfpl 104 33 0 31 1 0 1 1 0 8 0 lockfspl 48 13 0 11 1 0 1 1 0 8 0 sessionpl 144 72 0 58 1 0 1 1 0 8 0 pgrppl 48 130 0 109 1 0 1 1 0 8 0 ucredpl 104 186 0 171 1 0 1 1 0 8 0 zombiepl 144 603 0 603 1 0 1 1 0 8 1 processpl 1232 653 0 603 5 0 5 5 0 8 0 procpl 664 777 0 724 6 0 6 6 0 8 1 sosppl 176 1 0 1 1 0 1 1 0 8 1 sockpl 752 530 0 505 31 20 11 31 0 8 8 mcl64k 65536 1 0 0 1 0 1 1 0 8 0 mcl8k 8192 2 0 0 1 0 1 1 0 8 0 mcl4k 4096 119 0 0 15 0 15 15 0 8 0 mcl2k 2048 23 0 0 3 0 3 3 0 8 0 mtagpl 96 3 0 0 1 0 1 1 0 8 0 mbufpl 256 210 0 0 14 0 14 14 0 8 0 bufpl 280 2460 0 102 169 0 169 169 0 8 0 anonpl 32 5386 0 0 44 0 44 44 0 246 0 amapchunkpl 152 12647 0 12267 29 0 29 29 0 158 11 amappl16 200 2073 0 2062 5 2 3 5 0 8 2 amappl15 192 95 0 95 1 1 0 1 0 8 0 amappl14 184 466 0 463 1 0 1 1 0 8 0 amappl13 176 121 0 110 1 0 1 1 0 8 0 amappl12 168 889 0 860 2 0 2 2 0 8 0 amappl11 160 3 0 3 1 1 0 1 0 8 0 amappl10 152 82 0 71 1 0 1 1 0 8 0 amappl9 144 262 0 262 1 1 0 1 0 8 0 amappl8 136 123 0 122 1 0 1 1 0 8 0 amappl7 128 145 0 133 1 0 1 1 0 8 0 amappl6 120 235 0 232 1 0 1 1 0 8 0 amappl5 112 110 0 103 1 0 1 1 0 8 0 amappl4 104 261 0 245 1 0 1 1 0 8 0 amappl3 96 2260 0 2168 5 1 4 4 0 8 1 amappl2 88 524 0 471 2 0 2 2 0 8 0 amappl1 80 10455 0 9882 14 0 14 14 0 8 0 amappl 88 3578 0 3447 5 0 5 5 0 92 1 uvmvnodes 80 101 0 0 3 0 3 3 0 8 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 6 0 1 1 0 1 1 0 8 0 uaddrrnd 24 637 0 603 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 637 0 603 1 0 1 1 0 8 0 vmmpekpl 168 7533 0 7481 4 0 4 4 0 8 0 vmmpepl 168 48122 0 46327 96 0 96 96 0 357 11 vmsppl 488 636 0 603 7 1 6 6 0 8 0 rwobjpl 80 15914 0 14997 25 1 24 24 0 8 0 pdppl 4096 1281 0 1206 125 34 91 101 0 8 16 pvpl 32 12924 0 0 106 1 105 105 0 265 0 pmappl 256 636 0 603 4 1 3 3 0 8 0 extentpl 40 45 0 27 1 0 1 1 0 8 0 phpool 112 299 0 41 8 0 8 8 0 8 0 ddb{0}> machine ddbcpu 0 Invalid cpu 0 ddb{0}> trace db_enter() at db_enter+0x25 panic(ffffffff834446fb) at panic+0x1e5 pool_do_get(ffffffff83ac7490,1,ffff8000383c29c8) at pool_do_get+0x5df pool_get(ffffffff83ac7490,1) at pool_get+0x162 shmget_allocate_segment(ffff8000fffe7ca8,ffff8000383c2c20,1b4,ffff8000383c2b70) at shmget_allocate_segment+0x1af sys_shmget(ffff8000fffe7ca8,ffff8000383c2c20,ffff8000383c2b70) at sys_shmget+0x195 syscall(ffff8000383c2c20) at syscall+0xb17 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x9fc0d0f5a00, count: -8 ddb{0}> machine ddbcpu 1 Stopped at x86_ipi_db+0x27: addq $0x8,%rsp x86_ipi_db(ffff8000299adff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 end of kernel end trace frame: 0x7a965842b3b0, count: 12 ddb{1}> trace x86_ipi_db(ffff8000299adff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 end of kernel end trace frame: 0x7a965842b3b0, count: -3