last executing test programs: 2.605730289s ago: executing program 4 (id=5): mknod(&(0x7f0000000100)='./bus\x00', 0x2000, 0xd02) (async) munmap(&(0x7f0000001000/0x2000)=nil, 0x2000) (async) msync(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4) (async) r0 = shmget$private(0x0, 0x2000, 0x3b4, &(0x7f0000001000/0x2000)=nil) shmat(r0, &(0x7f0000001000/0x3000)=nil, 0x0) (async) r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x139) (async) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) (async) ioctl$BIOCSETF(r2, 0x80104267, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x0, 0x7, 0x5, 0x9}, {0x5, 0x7f, 0x2, 0x1}, {0x84, 0xf, 0xd2, 0xd}, {0x991e, 0x4, 0xd5, 0x2}]}) syz_emit_ethernet(0x66, &(0x7f0000000140)=ANY=[]) (async) preadv(r1, &(0x7f0000000300)=[{&(0x7f0000000200)=""/104, 0x68}, {&(0x7f0000000140)=""/192, 0xc0}, {&(0x7f0000000340)=""/175, 0xffffffffffffff91}, {&(0x7f0000000000)=""/18, 0x12}], 0x4, 0x0) 2.440222259s ago: executing program 4 (id=9): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) r0 = syz_open_pts() ioctl$FIOASYNC(r0, 0x80047460, &(0x7f0000000040)=0x5) ioctl$TIOCMGET(r0, 0x4004746a, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) open(&(0x7f0000000000)='./file0\x00', 0x615, 0x166) lstat(&(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000080)=@abs={0x1, 0x1, 0x0, 0x1}, 0x8) r3 = open(&(0x7f0000000240)='./file0\x00', 0x70e, 0x24) write(r3, &(0x7f0000000500)="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", 0xffffff9c) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) recvmmsg(r1, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000009}, 0x93, 0x3800, 0x0) 2.43835843s ago: executing program 1 (id=2): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) socket$unix(0x1, 0x2, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket(0x11, 0x3, 0x0) sendto$unix(r2, &(0x7f0000000200)="b1000502b10000000000003401000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc256699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x0, 0x0, 0x2b) fcntl$setflags(r0, 0x2, 0x5) ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, &(0x7f0000000100)={0x1, 0x0, {[0xb, 0x1, 0x5, 0x1, 0xfffffffffffffffe, 0x0, 0xdf5a, 0xffffffffffffffff, 0x0, 0x2eff, 0x5, 0x3, 0xffffffffffffffff, 0x0, 0x8000000, 0xa8, 0x100000001, 0xce7], [0xfffffffffffffffe, 0x2, 0xfffffffffffffffa, 0x8000ffffffff, 0x100, 0x7b99, 0x1fe, 0xb, 0x1, 0x8], [0x100000001, 0xfffffffffffffffe, 0x40000000, 0x6, 0xffffffffffffffff, 0x4, 0xfffffffffffffffe], [0x100, 0x5, 0x401, 0x100000000, 0xffffffffffefffff, 0x6], [{0x8, 0x5, 0x0, 0x7}, {0xfffc, 0x5, 0x5}, {0x10, 0x80000001, 0x5bea, 0x814}, {0xf801, 0x5, 0x7, 0x8000000c}, {0x10, 0x2, 0x4, 0x808}, {0x400b, 0x40, 0x40000, 0x4}, {0xa, 0x20000, 0x4, 0x8}, {0x800, 0x965, 0x3, 0x8}], {0x2000, 0x8, 0x10000}, {0x0, 0x0, 0x3, 0x2}}}) r3 = kqueue() kevent(r3, &(0x7f0000000040), 0x30, 0x0, 0x57d, 0x0) bind$unix(r1, &(0x7f00000000c0)=@file={0xe, 0x1, './file0\x00'}, 0xa) listen(r1, 0x1) r4 = openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0x80000000, 0x2, 0xe9, 0x3, 0xb, 0x4, 0x1, 0x10, [{0x0, 0x80000002, 0x5, 0x80000002}, {0xe9, 0xe7, 0x1000002, 0x55df}, {0x10cd1, 0x4baa, 0x9, 0x4}, {0x7, 0x10000, 0x4000000f, 0x8cce}, {0x4, 0x2000008, 0x0, 0x1}, {0x388d, 0xffffffff, 0x85, 0x3}, {0x9, 0xa00, 0x20004, 0x2}, {0x208, 0xfffffffd, 0x5, 0xffffe2e8}, {0x10007, 0x1000, 0x3, 0x7ffd}, {0x3f8, 0xfefffffd, 0x1ff, 0x12}, {0x82, 0x0, 0x8a3a0001, 0xfffffff0}, {0x10002, 0xfffffffe, 0x650, 0x200a68}, {0x401, 0x6, 0x1, 0xa5}, {0x6, 0xfffffffe, 0x102}, {0xffffffff, 0x20000007, 0x200, 0x7}, {0x89be2, 0x1, 0x2, 0x3ff}]}) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6f03816a001c063000f8ff00000000000000000000000000fe8000000000000000000000000000aa8bd30dffffffffffdfffffab7f251578602c84a5549a85cdcab05cbe"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$TIOCSETA(r4, 0x80d04466, &(0x7f0000000140)={0x9, 0xa525, 0x4, 0x127492, "08e50000000000000100", 0x20004110, 0x6}) r5 = socket$unix(0x1, 0x1, 0x0) connect$unix(r5, &(0x7f0000000080)=@file={0x7, 0x1, './file0\x00'}, 0xa) r6 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000040), 0x8, 0x0) ioctl$WSMOUSEIO_GETPARAMS(r6, 0x80105727, &(0x7f0000001480)={&(0x7f0000001440)=[{0x23, 0xfffffffd}, {0x5, 0xc2d835c3}, {0x7, 0xfffffffa}], 0x3}) accept4(r1, 0x0, 0x0, 0x4000) 2.344540517s ago: executing program 3 (id=13): syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x8, 0x11, 0x0, @rand_addr="fed38d5ba80b9e61cd0c535a9800", @local={0xfe, 0x80, '\x00', 0x0}, {[], @udp={{0x3, 0x2, 0x8}}}}}}}) (async) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x8, 0x11, 0x0, @rand_addr="fed38d5ba80b9e61cd0c535a9800", @local={0xfe, 0x80, '\x00', 0x0}, {[], @udp={{0x3, 0x2, 0x8}}}}}}}) syz_extract_tcp_res$synack(&(0x7f0000000040), 0x1, 0x0) 2.343855914s ago: executing program 0 (id=1): mknod(&(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0xd02) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) link(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000d40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') link(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000a80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') unlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000e40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000580)='./file2\x00') mknod(&(0x7f0000000000)='./bus\x00', 0x2000, 0x0) r0 = open(&(0x7f0000000040)='./bus\x00', 0x200, 0x1a1) fcntl$getown(r0, 0x5) symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mknod(&(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0xd02) rename(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 2.341021234s ago: executing program 5 (id=6): r0 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) r1 = socket(0x11, 0x3, 0x0) sendto$unix(r1, &(0x7f0000000000)="b10005016000009f0500060190000000331c13fecea10500fef96ecfc72fd3357af302b37b673039d2d236acf20b7804be38224991f7c8cf5f88882b297be1aa5b23edeb51e2f0ac3ebbc257699a1f139b672f4d335c223e7d026ba8af630037281802000000720fd38bfbb770c1f572ca81ea77b3c5890400000000000000361b1257aea8c500002002fbffec2200008abfba090000001d89e400040700000080042000"/177, 0xb1, 0x0, 0x0, 0x0) write(r0, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) ioctl$BIOCGHDRCMPLT(r0, 0x40044274, &(0x7f00000000c0)) ioctl$DIOCRCLRTSTATS(r0, 0xc4504441, &(0x7f0000001680)={{'./file0\x00', './file0\x00', 0x0, 0x8}, &(0x7f00000005c0)=[{'./file1\x00', './file0\x00', 0x16, 0x9}, {'./file0\x00', './file0\x00', 0x40, 0x4}, {'./file0\x00', './file0\x00', 0x34, 0x1}, {'./file0\x00', './file0\x00', 0x1, 0x5d}], 0x3068, 0x4, 0x1, 0x1, 0x1, 0x3, 0x4a, 0x5}) truncate(&(0x7f0000000000)='./file0\x00', 0xafffe) symlink(&(0x7f00000008c0)='./file0\x00', &(0x7f0000000900)='./file0\x00') readlink(&(0x7f00000017c0)='./file0\x00', &(0x7f0000001800)=""/156, 0x9c) r2 = socket(0x18, 0xc003, 0x3a) ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f0000000040)={0xfffffffd, 0x2, 0x3, 0x5, "01000000d000", 0x0, 0x4}) sysctl$kern(&(0x7f0000000040)={0x1, 0x3e}, 0x3ffffffffffffdf3, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$vm_swapencrypt(&(0x7f0000000040), 0x3, 0x0, 0x0, &(0x7f0000001180)='\x00\x00\x00\x00', 0x4) sysctl$kern(&(0x7f0000000000)={0x1, 0x48}, 0x2, 0x0, &(0x7f00000000c0), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sysctl$kern(&(0x7f0000000000)={0x1, 0x4d}, 0x2, &(0x7f0000000180)="5f2a1ff1", &(0x7f00000000c0)=0x4, &(0x7f0000001180), 0x4) setsockopt(r2, 0x29, 0x6c, 0x0, 0x0) syz_emit_ethernet(0xe, &(0x7f0000000200)={@local, @empty, [{[{0x88a8, 0x1, 0x1}], {0x8100, 0x7, 0x1, 0x2}}], {@arp={0x806, @generic={0xf, 0x8100, 0x6, 0x3, 0x8, @local, "a2c035", @broadcast, "b4161f81816c9b6996a99264cb1c58f3"}}}}) r3 = open(&(0x7f0000000040)='./file0\x00', 0x2, 0x0) preadv(r3, &(0x7f0000000340)=[{&(0x7f0000000240)=""/229, 0xe5}, {&(0x7f0000000140)=""/139, 0xffffffbc}], 0x2, 0x0) sysctl$kern(&(0x7f0000000380)={0x1, 0x3b}, 0x2, &(0x7f00000003c0)="9b0c87bd0d7cc8a230fa028bb3f48dbb468f884cdac12ebbee2bf759ed9a664d977e6a79b116697fb2430559280ad341b4237066312a27e23b48b0e22fb5232478031da51a2846371616f2077dfab4b8ecca1c525857e57db22466054f395209741c692000779549c4387eee4a507983e7c3819a7b7386cd60cb05c52664473d5897d5708c34dd754ae793015b83ed8d34206c02665a50c55426844855515f7152a14d7004127d6d6c17227d194a63610580", &(0x7f0000000480)=0xb2, &(0x7f0000000500)="f9aa9cab8ebf0bf9ad9c7f1088bd9e57b35cbac1443e4d43c9f66f18eab5b01e57df117778b00c2bf0d3f4dfd45c87a3f4e24bb60788be4708e6f281dec670c53d2c38cfd29c47db77d61e539e11ff7a0737488532bdff3f2b32488e3ac882884d8fc837c7d52b0adc873250314b59f1fc77de5f624be67abafd6e1a0832c50abd194e1400c33974b49d21cbc3f90f1df0201c7d068688", 0x97) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) access(&(0x7f0000000100)='./file0\x00', 0x2) 2.33907827s ago: executing program 3 (id=16): r0 = shmget$private(0x0, 0x3000, 0x9, &(0x7f0000ffd000/0x3000)=nil) (async) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xca605601, &(0x7f0000000040)={0x10, 0x6b, [{&(0x7f0000cf9000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x3}, {&(0x7f00009e0000/0x1000)=nil, &(0x7f0000ebf000/0x1000)=nil, 0x1}, {&(0x7f0000f6c000/0x1000)=nil, &(0x7f00007a4000/0x3000)=nil}, {&(0x7f0000038000/0x1000)=nil, &(0x7f000058e000/0x2000)=nil, 0xffffffffffffffff}, {&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000bee000/0x4000)=nil, 0x3}, {&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000c77000/0x1000)=nil, 0x8}, {&(0x7f00002fc000/0xd000)=nil, &(0x7f0000622000/0x1000)=nil, 0x9}, {&(0x7f0000bc5000/0x3000)=nil, &(0x7f0000e23000/0x4000)=nil, 0x3}, {&(0x7f0000208000/0x1000)=nil, &(0x7f00002de000/0x3000)=nil, 0x3}, {&(0x7f0000c91000/0x1000)=nil, &(0x7f0000402000/0x2000)=nil, 0x8000000000000000}, {&(0x7f0000025000/0x1000)=nil, &(0x7f0000b0b000/0x1000)=nil, 0x14c}, {&(0x7f00009ee000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x6}, {&(0x7f0000c71000/0x8000)=nil, &(0x7f0000ab6000/0x2000)=nil, 0x9}, {&(0x7f0000a97000/0x2000)=nil, &(0x7f000065f000/0x4000)=nil, 0x7}, {&(0x7f000034c000/0x4000)=nil, &(0x7f0000d60000/0x4000)=nil, 0x1}, {&(0x7f0000018000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x7}], './file0\x00', 0x299c, 0xfffffffa, 0x8b, 0x81, [0x7, 0x7, 0x7, 0x3, 0x6, 0x6, 0x33, 0x669, 0x7, 0x80000001, 0x4e00, 0x7f, 0xfffffc00, 0xd, 0x0, 0x9, 0x5, 0x787c5a33, 0x4, 0x4e, 0xd9, 0x6, 0x6, 0x4, 0x6, 0x4, 0x10, 0x0, 0x7839, 0x8, 0xfffffff8, 0x7fffffff, 0xffff, 0x80000000, 0x2, 0x5a, 0x2, 0x7, 0x5ca5, 0x2, 0x9, 0x3, 0x0, 0x100, 0x3ff, 0xee, 0x4, 0x1, 0x81, 0x5, 0x30, 0x100, 0x4, 0x3, 0xcb, 0x6760, 0x2, 0x9, 0xa, 0x5, 0x6, 0x1, 0x800, 0xb31b, 0x8, 0x1250, 0x6, 0x9, 0x7, 0x1, 0x68b, 0x7, 0x5, 0x0, 0xf, 0x80, 0x1, 0x400, 0x0, 0x82, 0x3ff, 0xdd2f, 0x9ce, 0x10001, 0x3, 0x2, 0xfffffff8, 0x0, 0x0, 0x401, 0xcd, 0x6, 0x5, 0xe3b, 0x401, 0x11f5, 0x8, 0x69e8, 0x24d5, 0x69, 0xfffffffe, 0x5, 0x7, 0x1, 0x2, 0x6, 0x200, 0x7, 0x80000000, 0x8, 0x0, 0x632ffa74, 0x3ff, 0x6, 0xb510, 0x0, 0x3, 0xc, 0xa5, 0x0, 0x2, 0xfff, 0x5ec1, 0x7, 0x8, 0x0, 0xfffffba7, 0xff, 0x2, 0x1, 0x377, 0x9, 0x654, 0xe, 0x8, 0x2540000, 0x1f00, 0xc2, 0x8, 0xc, 0x5, 0x4, 0x3, 0x4, 0x0, 0x3ff, 0x8, 0xfffffff0, 0x3, 0x380, 0x3, 0x1, 0xffffffff, 0xdf, 0x8, 0x0, 0x9, 0x5, 0x5, 0x5, 0x9, 0x640, 0xfff, 0x0, 0x10, 0x4, 0x1000, 0x69db78bf, 0x321fc0, 0xfda, 0x5, 0x1, 0x7f, 0xfffffffb, 0x4ffc, 0xdba1, 0x7f, 0x10, 0x9, 0x4, 0xffff0000, 0xd8fe, 0x1, 0x7ff, 0x700000, 0x5, 0x81, 0x2, 0x6, 0x5, 0x1, 0x85cd, 0x5, 0xbaf, 0x26b, 0x80000000, 0x1, 0x8, 0x5ed, 0x10, 0x5, 0xf, 0x400, 0xffffff07, 0xfffffffa, 0x401, 0x7, 0x7, 0x101, 0x200, 0x8, 0x9, 0x1, 0x8000, 0x10000, 0x3, 0x2, 0x81, 0xc00000, 0x2, 0x6, 0x9, 0x10000, 0x80, 0x3, 0xd, 0x7, 0x5, 0x3, 0x7, 0x30, 0x9, 0x3de57e0b, 0x80, 0x7, 0x5, 0x97, 0x3, 0x53c9, 0x9, 0x7, 0x5, 0x10, 0x4, 0x7, 0x7f, 0x1, 0x8001, 0x0, 0x80, 0x1, 0x7ff, 0x10001, 0x9, 0x80000000, 0x9, 0x8, 0x2, 0x9, 0x30, 0x0, 0x4, 0x7ff, 0x7, 0x10001, 0xbeb, 0xf73, 0x8, 0x7, 0x2, 0xa92, 0x5, 0x7c, 0x6, 0x7ff, 0x53f, 0x200, 0x9, 0x4, 0x0, 0x3, 0x8, 0x9, 0x101, 0x9, 0x7, 0x10, 0x7fffffff, 0x0, 0xbf, 0x8000, 0xa, 0x8, 0x81, 0x80000000, 0x8, 0x101, 0x8, 0xad, 0x594, 0x3, 0xf31c, 0x1, 0x9, 0x9, 0x7, 0xfffffffc, 0x8, 0x0, 0x0, 0xfffffffa, 0x47, 0x8, 0x7, 0x800, 0x5, 0x101, 0xffffffff, 0x7fff, 0x74c, 0x79, 0x7, 0x9, 0xbebb, 0x448b, 0x7ff, 0x7, 0x32fe, 0xffffffff, 0x9, 0x2, 0x90, 0x7, 0x6df, 0x3, 0x9, 0xfffffff8, 0x8, 0x0, 0x8001, 0x3ff, 0x9e, 0x1, 0x7, 0x6, 0x9ff, 0x8, 0xb6b4, 0xa, 0x0, 0x4, 0x14400000, 0x7ff, 0x6, 0x400, 0xc, 0x0, 0x2, 0xfd, 0x4, 0x80000001, 0x6, 0x1000, 0x9f, 0xd7d, 0x7ffffffc, 0x7f, 0x40, 0x2, 0x1f, 0xfbb, 0x6, 0x4, 0x0, 0x0, 0x0, 0x914, 0x5, 0x4, 0xdffffff9, 0x6, 0xdd0, 0x1, 0x4, 0xf, 0x6, 0x6, 0x7, 0x4, 0x8000, 0x100, 0x1, 0x7, 0x7, 0xf9, 0x5, 0x4, 0x6, 0xc, 0x5cb7, 0x6db, 0x2, 0x1, 0xf, 0x3, 0x9, 0x6, 0x6, 0x10000, 0xbe9, 0x0, 0x5141, 0x0, 0x3, 0x3, 0x400, 0xe, 0x0, 0x6, 0x4, 0x3, 0x10000000, 0x7fff, 0xfffffffb, 0x7, 0x9, 0x0, 0x43c, 0x9, 0x3c00000, 0x7fff, 0x4, 0xfff, 0x1, 0x800, 0x1, 0x1, 0xf7, 0x4, 0x81, 0x0, 0x8, 0x2, 0x1, 0x0, 0x80000000, 0x7, 0x7, 0x7, 0x10000, 0x27, 0x80000001, 0x1, 0x3, 0x9, 0x7, 0x7f, 0x2, 0x1, 0x9, 0x8f, 0x7, 0x5, 0x7, 0x3, 0xd25, 0x5, 0xc922, 0xca86, 0x10000, 0x10, 0x0, 0x3ff, 0x1, 0x5, 0xfff, 0x10, 0x9518, 0x25c, 0x9, 0x8, 0xe9, 0x585, 0x5, 0x800, 0x7, 0x9, 0x58, 0x6, 0xffffffff, 0xfffffff9, 0x6, 0x8, 0x5b74ed42, 0xf, 0x8001, 0x3, 0x7fffffff, 0x7, 0x5, 0x5, 0xa1c, 0x5, 0xa, 0xfffffff7, 0x1, 0x3ca29155, 0x1, 0x1, 0xb10, 0x9, 0x12991041]}) (async) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0xbe, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) syz_open_pts() (async) ioctl$BIOCGDLTLIST(r1, 0xc010427b, &(0x7f0000000140)={0x0, 0x0}) setuid(0xffffffffffffffff) (async) r2 = semget(0x2, 0x4, 0x608) semctl$IPC_SET(r2, 0x0, 0x1, &(0x7f00000003c0)={{0x0, 0x0, 0x0, 0x0, 0x1c2, 0x2, 0x0, 0x0, 0xdffffffffffff}, 0x0, 0xfffe, 0x0, 0x0, 0x2, 0x0, 0xf9}) (async) ioctl$WSKBDIO_BELL(0xffffffffffffffff, 0x20005701) (async) r3 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) ioctl$VNDIOCSET(r3, 0xc0384600, &(0x7f0000000180)={&(0x7f0000000140)='./file0\x00', 0x152, 0x0}) r4 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x2811, r4, 0x0) semctl$GETVAL(r2, 0x3, 0x5, &(0x7f0000000f40)=""/176) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000000)=""/81) 2.268526899s ago: executing program 4 (id=17): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000380), 0x20, 0x0) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) sendto$unix(r1, &(0x7f0000000180)="ac2740c6d63124acd7d21972817267b5ab7037a43a29d21f9ddfa7cc2a9c202dbc7765095d5315a53a318705639f0b1400049f29f71c31238df64bf6b32f43ac81f08132062d7621991e9cf881ad439e3be48e738487c5ed9d7b9a66b3f8042aa9c8e9d9d8c793192280a72a4bf7dbce4627f7a2c6202be2a701aa406abe3dc5bccc5ea46816de894a7bf9a77f6ff46ea6b3ef089e6cb6285da4c9450f2910c1018db944226ba44f67c1739caf839c53fbe112f28569ce977de80e4780c6b9b1e118", 0xc2, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r2, &(0x7f0000000080)=@file={0x2, 0x2246a43d017b734c, './file0\x00'}, 0xa) sysctl$net_inet_tcp(&(0x7f0000000040)={0x4, 0x2, 0x6, 0x13}, 0x4, 0x0, 0x0, &(0x7f0000000140)="53183374", 0xffffffba) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) r3 = socket$inet(0x2, 0x3, 0x0) ioctl$FIONREAD(r3, 0x80206979, &(0x7f0000000100)) 2.259529384s ago: executing program 7 (id=19): r0 = socket(0x11, 0x3, 0x0) r1 = socket(0x18, 0x2, 0x0) mknod(&(0x7f00000001c0)='./file1\x00', 0x2000, 0x285b9a) r2 = socket$inet(0x2, 0x8003, 0xff) setsockopt(r2, 0x0, 0x23, &(0x7f0000000340), 0x0) r3 = open(&(0x7f0000000800)='./file1\x00', 0x800, 0x120) readv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000080)=""/71, 0x47}], 0x1) ioctl$FIONBIO(r3, 0x82907003, &(0x7f0000000140)=0x3) sysctl$net_pipex(&(0x7f0000000000)={0x4, 0x23, 0x1}, 0x3, 0x0, 0x0, 0x0, 0x0) r4 = socket(0x11, 0x3, 0x0) getpeername$inet(r4, 0x0, &(0x7f0000000200)) sysctl$kern(&(0x7f0000000000)={0x1, 0x27}, 0x9, 0x0, 0x0, 0x0, 0xfffffe0c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$net_inet_tcp(&(0x7f0000000000)={0x4, 0x2, 0x6, 0xf}, 0x4, 0x0, 0x0, 0x0, 0x0) setsockopt(r1, 0x1000000000029, 0x9, &(0x7f0000000040)="03000000", 0x4) setitimer(0x2, &(0x7f0000000080)={{0x8000000000000001, 0xa0000000000003}, {0x4, 0x400000000006}}, 0x0) setsockopt(r1, 0x1000000029, 0xd, &(0x7f0000000000), 0x14) setrlimit(0x8, &(0x7f0000000140)={0xa, 0x5a}) r5 = syz_open_pts() close(r5) r6 = syz_open_pts() dup2(r6, r5) ioctl$TIOCSETA(r5, 0x802c7414, &(0x7f0000000000)={0x4, 0x407, 0x20000000, 0xffffd6c6, "ecd73d210e00d2e100000000210900", 0x546}) select(0x40, &(0x7f0000000180)={0xc5, 0x4, 0x0, 0x40008, 0xfffffffffffffffd, 0x0, 0x7ffffffc, 0xc}, 0x0, 0x0, 0x0) sendto$unix(r0, &(0x7f0000000300)="b100050300000400000000b107000000331c13fedca10500fef96ec0c72fd3357ae30200004e3039d2d236acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad0900000000000c009b672f4d335c223e7d0c032bfa896443842102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b1257aea8c500002002fbfe0c230000a37f50b60900000008e371a3f83400"/177, 0xb1, 0x0, 0x0, 0x0) 2.137263287s ago: executing program 0 (id=21): mknod(&(0x7f0000000200)='./file0\x00', 0x2000, 0x4287e) r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$DIOCRDELADDRS(r0, 0xc4504444, &(0x7f0000000340)={{'./file0\x00', './file0\x00', 0x10, 0x3}, &(0x7f0000000240)=[{@remote={0xac, 0x14, 0x0}, '\x00', './file0\x00', 0x6, 0x0, 0x1a, 0xe, 0x3, 0x8, 0x1}, {@rand_addr=0xe, '\x00', './file0\x00', 0x0, 0x401, 0x0, 0x4, 0x10, 0x0, 0x18}, {@remote={0xac, 0x14, 0x0}, '\x00', './file0\x00', 0x2, 0x100, 0x18, 0x2, 0x9, 0xff, 0x4}, {@loopback, '\x00', './file0\x00', 0xc, 0x7, 0x18, 0x8, 0x6, 0x80, 0x8}], 0x1800, 0x4, 0x1, 0xfffffff5, 0x3, 0x6, 0x44, 0x8}) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000200)={@local, @broadcast, [], {@ipv6={0x86dd, {0x7, 0x6, "384a90", 0x28, 0x50, 0x5, @loopback, @empty, {[], @icmpv6=@ndisc_redir={0x89, 0x0, 0x0, '\x00', @mcast2, @local={0xfe, 0x80, '\x00', 0x0}}}}}}}) r2 = kqueue() kevent(r2, &(0x7f00000000c0), 0x100, &(0x7f0000000180)=[{{r1}, 0xffffffffffffffff, 0x13, 0x2, 0x8000000000000000}, {{r1}, 0xffffffffffffffff, 0x62}], 0x6, 0x0) 2.121776932s ago: executing program 6 (id=22): r0 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) ioctl$DIOCRCLRADDRS(r0, 0xc4504442, &(0x7f0000000280)={{'./file1\x00', './file0\x00', 0x0, 0x1}, 0x0, 0x0, 0x0, 0xffffffff, 0xec1, 0x2, 0x7f, 0x4a, 0x8}) utimes(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={{0x3ff, 0xa0cd}, {0x2, 0x5}}) getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000100)=0xc) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(r0, &(0x7f0000000080)='./file0\x00', r1, r2, 0x2) 2.121134628s ago: executing program 5 (id=23): mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x800) (async) ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000340)={0x1002, 0x180, {[0xfffffbeffffffff7, 0x0, 0x4787, 0x1002, 0x8001, 0x0, 0x3, 0x9, 0x6, 0x2eff, 0x7, 0x3, 0xfffffffffffbffff, 0x8400000002000000, 0x0, 0xffffffffffffffa8, 0x82, 0xce9], [0x0, 0x7ffffffe, 0x0, 0x100000000, 0x80000000002, 0x9, 0x6, 0x7fffffff, 0x1, 0x4], [0x5, 0x1000409, 0x8, 0xfffffffffffffffc, 0xffffffffffffffff, 0x6, 0x2ba5], [0x6, 0x1, 0xfffffffffffffffc, 0x800000000000000a, 0xfffffffffffffffe, 0x6], [{0x0, 0x8000, 0x9, 0x7d03}, {0xfffc, 0x2, 0x5, 0x100000000}, {0x0, 0xffffffff, 0xfffffffe, 0xc}, {0x3, 0x103, 0x3, 0xffffffffffffefff}, {0x0, 0x2, 0x7, 0x2}, {0x200, 0x2106, 0xf2, 0x2000000000000000}, {0xb054, 0x0, 0xfffffe01, 0x1}, {0x8, 0xd, 0xffff, 0x2}], {0xc001, 0x25e, 0x28, 0x4000000000000000}, {0x3, 0x6, 0x9, 0xaf3}}}) (async) r0 = shmget$private(0x0, 0x1000, 0x22, &(0x7f0000ffd000/0x1000)=nil) r1 = shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x3000) shmctl$IPC_RMID(r0, 0x0) (async) shmdt(r1) (async) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0xd02) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BIOCSETIF(r2, 0x80045102, &(0x7f0000000400)={'tap', 0x0}) (async) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb5219f1000b913f1, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) bind$unix(r3, &(0x7f00000000c0)=@file={0x4, 0x1, './file0\x00'}, 0xa) chmod(&(0x7f0000000180)='./file0\x00', 0x13) (async) setuid(0xffffffffffffffff) r4 = socket$unix(0x1, 0x1, 0x0) connect$unix(r4, &(0x7f0000000080)=@file={0x5, 0x1, './file0\x00'}, 0xa) (async) link(&(0x7f0000000340)='./bus\x00', 0x0) 2.041316685s ago: executing program 5 (id=24): open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x186) ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7ffbf, 0x0) readv(0xffffffffffffffff, &(0x7f0000000a40)=[{0x0}, {&(0x7f0000000600)=""/251, 0xfb}], 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f00000002c0)="ed", 0x1) recvmmsg(r1, &(0x7f0000000880)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x5286}, 0x38, 0x840, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) execve(0x0, 0x0, 0x0) clock_gettime(0x2, &(0x7f0000000080)) 2.033123635s ago: executing program 6 (id=27): setrlimit(0x8, &(0x7f0000000980)={0xb, 0x4e}) r0 = syz_open_pts() close(r0) syz_open_pts() sysctl$kern(&(0x7f0000000000)={0x1, 0x59}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xff0a, 0x0, 0x37) r1 = socket$inet(0x2, 0x2, 0x0) getsockopt(r1, 0x0, 0x8, 0x0, 0x0) ioctl$FIOASYNC(r0, 0x80047469, &(0x7f00000000c0)=0x47) writev(r0, &(0x7f0000000040)=[{&(0x7f00000005c0)="5790ca6cc32be3d62952e0cc3cd2d3da3b000000000000f1016e6e81e60c69408d0e5eb488d9a4f836b66b966879748a51b90be3e53627015a2a14557ad05e05f4f17d0d5daef0b3", 0x2000}], 0x1) 2.027135422s ago: executing program 6 (id=28): mknod(&(0x7f0000000000)='./file0\x00', 0x2, 0x5901) (async) r0 = open(&(0x7f0000000000)='./file0\x00', 0x400, 0x9bf2d37258647599) (async) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) ioctl$BIOCSETWF(r1, 0x80104277, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x19c, 0x70, 0x3, 0xc}]}) ioctl$BIOCSETIF(r0, 0x80084904, &(0x7f0000000380)={'tap', 0x0}) select(0x40, &(0x7f0000000180)={0xfffffffffffffffd, 0x44809e9b, 0xfffffffffffffffb, 0x9, 0x2000000000000000, 0x210, 0x8, 0x3}, 0x0, 0x0, 0x0) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) 2.022900982s ago: executing program 2 (id=29): r0 = open(&(0x7f0000000040)='./file0\x00', 0x615, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0) ftruncate(r0, 0x8531) mlock(&(0x7f0000000000/0x2000)=nil, 0x2000) sysctl$kern(&(0x7f0000000000)={0x1, 0x4b}, 0x2, &(0x7f0000000080)="1aeb7b9ac7e8537b2368d44cb9d77f535cff26b39da36cc5c3162b385d1e24474ed9e607fe53f3b3362122552abb985a3de887efecb913b8f0992241568f392d6e5da9ca3fb32526a3e1e07dbc162846fc4c80d3f1572f07b6111335283669aead84b7341ad0b619fd6e649d59cf4640aa0ffff215f88adec4a2d408e52276fce035b4d4f5e5a7006bec7a371bf2c34a8ff4e8ad2a75410517a9fde020a6d18b0a69c5c58819dc36e3b1e5c553173e91c9acb9", &(0x7f0000000180)=0xb3, &(0x7f00000001c0)="b9a1c8b00a0a6a7525dded4aafad8994f97e9aec960d2fee3020abd6a7487c9e26ad99d4e5c10c2eb56a47ef58a6084470e6ba2cacb4553315e2d4d84384aba5fae52567f8fee1769dfebf3b13838dcccfd2ad41310bbd3ba959c5caf50a6100dd51c1e770935c9b064ef545ec8ca5037d9fa768f978846ec41829b38379388cfae547cf122ec158c7cf071a987da740b679b09330245b54e2edafc0452e3c0549a0c992f6796809c1dc352f2cc5158a497a76c271c5a6ae3d9a5ea48b4420bb1ab8c25750ee7e3a59de1e68dce1d2ffe220fa5bc680", 0xd6) r1 = open(&(0x7f0000000140)='./file0\x00', 0x10686, 0x8) sysctl$hw(&(0x7f0000001d40)={0x6, 0x5}, 0x2, &(0x7f0000001d80)="bcdd138a", &(0x7f0000001e00)=0x4, &(0x7f0000001e40), 0x0) msync(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x8010, r1, 0x0) 1.837902045s ago: executing program 6 (id=30): r0 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) ioctl$VNDIOCSET(r0, 0xc0384600, &(0x7f0000000380)={0x0, 0x0, 0x0}) (async, rerun: 32) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7fb, 0x1080, 0x3, 0xfe, 0x4, 0x5, 0x45, 0x10, [{0x3, 0x2, 0x8a, 0x71800}, {0x3, 0xb7fe, 0x800002}, {0x100006, 0x401, 0x208}, {0xffffffff, 0x80ff, 0x200, 0xfffffffb}, {0x10000, 0x3, 0x80000001, 0x7}, {0x2, 0x7f, 0x14000007, 0xf}, {0x5, 0xbffffff9, 0x1, 0x6d}, {0x2400a, 0x3, 0xfdf0, 0x4}, {0x0, 0x2, 0x9, 0x9}, {0x401, 0xfffffffd, 0x8001, 0x4}, {0x800a44f, 0xfff9, 0x166, 0x15}, {0x8, 0x20002, 0x9, 0xb}, {0x2000df, 0x29, 0x5, 0x3ff}, {0x8, 0xfffffffc, 0x100, 0xffffffb8}, {0xb3, 0x3, 0x26, 0x3}, {0xfffffffd, 0xd654, 0x3, 0x6}]}) (async, rerun: 32) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) (async) r1 = socket(0x18, 0x3, 0x0) ioctl$FIONREAD(r1, 0xc0106924, &(0x7f00000001c0)) (async) setitimer(0x1, &(0x7f0000000140)={{0x0, 0x100900000000009}, {0xdffffffffffffdff, 0x7fff}}, 0x0) (async) r2 = socket(0x18, 0x3, 0x0) ioctl$FIONREAD(r2, 0x8080691a, &(0x7f0000000100)) (async) r3 = socket(0x18, 0x2, 0x0) sendmsg$unix(r3, &(0x7f0000000400)={&(0x7f00000000c0)=@file={0x81, 0x1, './file1\x00'}, 0xa, 0x0, 0x0, 0x0, 0x0, 0x415}, 0x1) (async) ioctl$VNDIOCGET(r3, 0xc4104603, &(0x7f0000000440)={'./file1\x00', 0x10000, 0x5, 0xffffffff92e780f5}) 1.837247796s ago: executing program 6 (id=31): r0 = open(&(0x7f0000000000)='./file0\x00', 0x9cab835cfdc52675, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0xa011, r0, 0x0) ftruncate(r0, 0x79c8) sysctl$kern(&(0x7f0000000040)={0x1, 0x50}, 0x2, 0x0, 0x0, 0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x800, 0x0) fcntl$lock(r1, 0x9, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x20001fffffffd}) flock(r1, 0x3) sysctl$kern(&(0x7f0000000140)={0x1, 0x9}, 0x2, 0x0, &(0x7f0000000240), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sysctl$kern(&(0x7f0000000140)={0x1, 0x9}, 0x2, &(0x7f0000000840), &(0x7f0000000240), 0x0, 0x0) fcntl$lock(r1, 0x9, &(0x7f00000000c0)={0x2, 0x0, 0x6, 0x200000005}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$kern(&(0x7f0000000040)={0x1, 0x47}, 0x3, 0x0, 0x0, &(0x7f0000000080)="4f1d4c6344b80ed788b6a4515248df3aa745bb992c574ab4cdf5587145812eab4a988f7fafd7a01d99776d988908cd186b51f34f8c15ffa0c685ad4116c783959eff4278384b4000384dbb1c2aaeff10b4135529a1da6fda67c67469d954be811b25ec5521559154c586eefff122009f659cd3e27e98a3241495005f102d9101d158284c0ee3250aa7c11042330de22a299ab00894fdc9bac6042d", 0x4) open$dir(0x0, 0x200, 0x186) msgsnd(0x0, 0x0, 0x8, 0x0) setrlimit(0x1, &(0x7f0000000000)) sync() sysctl$kern(0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)="bba3371c93", 0x5) r2 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) writev(r2, &(0x7f0000000100)=[{&(0x7f00000000c0)="209c935db726d63cb14ddbc95f4a9adbedd560112a273f6e92f87439", 0x1c}], 0x1) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4) ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x20, [{0x2, 0x7}, {0x2, 0xff03}, {0x1, 0xd57}, {0x0, 0x6}, {0x3}, {0x3, 0x1}, {0x0, 0xaa59}, {0x3, 0x5}, {0x1, 0x1}, {0x3, 0x100}, {0x3, 0x1}, {0x3, 0x80000000}, {0x2, 0x20003}, {}, {0x1, 0x5}, {0x1, 0x1}, {0x3, 0x1}, {0x3, 0x100}, {0x3, 0xfffffffe}, {0x1, 0x7ff}, {0xbb08c0840fa32129, 0x6}, {0x3, 0x2}, {0x1}, {0x0, 0xf205}, {0x2, 0xffffff}, {0x1, 0x1}, {0x0, 0x1ff}, {0x3, 0x2}, {0x2, 0xffffffff}, {0x3, 0xb}, {0x1, 0x5}, {0x2}]}) sysctl$net_inet_ip(&(0x7f0000000000)={0x4, 0x2, 0x0, 0x1a}, 0x4, 0x0, 0x0, &(0x7f00000001c0)='Hm', 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) getsockopt$sock_cred(r3, 0xffff, 0x1022, &(0x7f00000000c0), &(0x7f0000000240)=0xc) r4 = socket(0x18, 0x1, 0x0) listen(r4, 0x0) shutdown(r4, 0x2) closefrom(r4) sysctl$kern(&(0x7f00000000c0)={0x1, 0x37}, 0x4, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000140), 0x0, 0x2e) 1.836707046s ago: executing program 0 (id=32): mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x5900) r0 = open(&(0x7f0000000000)='./file0\x00', 0x200, 0x16) ioctl$BIOCSETIF(r0, 0x80084904, &(0x7f0000000380)={'tap', 0x0}) ioctl$BIOCSETIF(r0, 0x40384900, 0x0) closefrom(r0) 1.836405425s ago: executing program 5 (id=33): mknod(&(0x7f0000000240)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x2000, 0x1e5f) (async, rerun: 64) open(&(0x7f0000000040)='./file0\x00', 0x80, 0x95) (async, rerun: 64) select(0x40, &(0x7f0000001c40)={0x7, 0x4e5, 0x8e, 0x4, 0x200, 0x9, 0x1, 0x7}, 0x0, &(0x7f0000001cc0)={0x8, 0x0, 0x7ffffffffffffffd, 0xf3f, 0x5, 0x200, 0x10, 0x2}, &(0x7f0000001d00)={0x0, 0x401}) 1.835804385s ago: executing program 3 (id=34): mknod(&(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0xd02) sysctl$vm(&(0x7f0000000000)={0x2, 0x7}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$ddb(&(0x7f0000000000)={0x9, 0x5}, 0x2, 0x0, 0x0, &(0x7f0000001080), 0x4) syz_emit_ethernet(0x1000e, &(0x7f0000000080)=ANY=[@ANYBLOB="69e1629b6174391e7dd7a2d786dd60b6000000302c03fe697a653e336f000000500000000000ff02000000000000000100000000000111000003"]) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r0 = socket(0x18, 0x2, 0x0) ioctl$FIONREAD(r0, 0xc018696c, &(0x7f00000001c0)) setsid() r1 = dup3(0xffffffffffffff9c, 0xffffffffffffffff, 0x10000) ioctl$TIOCSCTTY(r1, 0x20007461) r2 = socket(0x2, 0x1, 0x0) getsockopt(r2, 0x29, 0x31, 0x0, 0x0) r3 = syz_open_pts() fcntl$lock(r3, 0x9, &(0x7f0000000000)={0x3, 0x0, 0x0, 0x1000300000080}) fcntl$lock(r3, 0x8, &(0x7f0000000080)={0x0, 0x0, 0x300, 0x100000001}) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x1000000003fb}) ioctl$DIOCMAP(0xffffffffffffffff, 0xc0106477, &(0x7f0000000000)={&(0x7f0000000140)='./file0\x00', 0xffffffffffffffff, 0x1}) sendmsg(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x308}, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = socket(0x18, 0x1, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) readv(r6, &(0x7f0000000080)=[{&(0x7f0000000040)=""/50, 0x32}], 0x1) recvfrom$inet6(r6, &(0x7f0000000200)=""/81, 0x51, 0x1001, 0x0, 0x0) closefrom(r5) sendmmsg(r4, &(0x7f00000003c0)={{0x0, 0x0, 0x0, 0x0, 0x0}, 0x4008}, 0x38, 0x9b5360ab9b745fb4) fcntl$lock(r3, 0x8, &(0x7f0000000180)={0x2ff, 0x0, 0x10, 0x300000000}) r7 = openat$tty(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$TIOCSETVERAUTH(r7, 0x8004741c, &(0x7f0000000040)=0x3) 1.802945847s ago: executing program 5 (id=35): r0 = socket(0x18, 0x3, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) ioctl$FIONREAD(r0, 0xc0106924, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) setitimer(0x0, &(0x7f0000000140)={{0x86, 0x9}, {0xb8e, 0x8001}}, 0x0) ioctl$FIONREAD(r0, 0x8080691a, &(0x7f0000000100)) 1.80239747s ago: executing program 0 (id=36): getgroups(0x7, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0]) sysctl$net_inet6_ip6(&(0x7f0000000000)={0x4, 0x18, 0x29, 0x35}, 0x4, 0x0, 0x0, 0x0, 0x0) sysctl$kern(&(0x7f0000000000)={0x1, 0x42}, 0x6, 0x0, 0x0, 0x0, 0x0) ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x0, [{0x0, 0xfffffffd}, {0x0, 0x8}, {}, {}, {}, {0x0, 0x3}, {}, {0x3}, {0x0, 0x1}, {0x0, 0x7}, {0x0, 0x7}, {}, {0x1}, {0x0, 0x1}, {0x2}, {}, {0x0, 0x1}, {0x1}, {}, {}, {}, {0x0, 0x4}, {}, {}, {0x3}, {}, {0x2}, {}, {}, {0x2}, {0x2, 0xd}, {0x1}]}) poll(0x0, 0x0, 0x90010000) sysctl$kern(&(0x7f00000000c0)={0x1, 0x37}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sysctl$kern(&(0x7f00000000c0)={0x1, 0x37}, 0x4, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000140)=0x2c, 0x0, 0x2e) 1.801795509s ago: executing program 3 (id=37): clock_getres(0x0, &(0x7f00000000c0)) sysctl$kern(&(0x7f00000000c0)={0x1, 0x3d}, 0x2, 0x0, 0x0, 0x0, 0x0) select(0x40, &(0x7f0000000180)={0xfffffffffffffffd, 0x44809e9b, 0xfffffffffffffffb, 0x9, 0x2000000000000000, 0x210, 0x8, 0x3}, 0x0, 0x0, 0x0) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x285b9c) r0 = kqueue1(0x10000) r1 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000100), 0x40000, 0x0) kevent(r0, &(0x7f00000000c0), 0x4, &(0x7f00000002c0)=[{{r0}, 0xfffffffffffffff6, 0x24, 0x80, 0x1, 0x4}, {{r0}, 0xfffffffffffffffa, 0x74, 0x1, 0x5, 0x8}, {{r0}, 0xfffffffffffffff9, 0x0, 0x2, 0x5, 0x2}, {{r1}, 0xfffffffffffffff9, 0x8, 0x4, 0x3}, {{r0}, 0xffffffffffffffff, 0x81, 0xfffff, 0xff, 0x5}], 0x13, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x10, 0x100) writev(0xffffffffffffffff, &(0x7f0000000140)=[{}], 0x1) ioctl$FIONBIO(r2, 0x82907003, &(0x7f0000000140)=0x2) ioctl$BIOCSRTIMEOUT(r2, 0xc0307006, &(0x7f0000000240)={0x2, 0xb}) r3 = openat$pf(0xffffffffffffff9c, &(0x7f0000001000), 0x10000, 0x0) ioctl$DIOCRCLRTSTATS(r3, 0xc4504441, &(0x7f0000002100)={{'./file0\x00', './file0\x00', 0x20, 0xfd}, 0x0, 0x428, 0x0, 0x7, 0x4, 0x3, 0x8, 0x76, 0x8}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$VMM_IOC_RESETCPU(r2, 0x82405605, &(0x7f0000000840)={0x1, 0xfffffff8, {[0x2, 0x5000000000, 0x1, 0x8, 0xdb27, 0x3, 0xfffffffffffffffd, 0xffffffffffffffff, 0x9, 0x0, 0x2, 0x7ff, 0x3ff, 0xffffffffffffffff, 0x5, 0x1, 0x2, 0x9], [0x5, 0x1, 0x9, 0x18, 0x1, 0x8, 0x41c6, 0x3, 0x8, 0x6], [0x8, 0xffff, 0x4, 0xfffffffffffffffb, 0x8, 0xffffffff, 0x4], [0x880, 0x10, 0x1315, 0x2, 0x9e, 0x8], [{0x2, 0x5, 0x8, 0x80}, {0x5, 0x2, 0x3, 0xffffffff}, {0x5, 0x7, 0xc, 0x3}, {0x4, 0x80000001, 0x8, 0x101}, {0x8, 0x518, 0x1, 0x9}, {0x3a2, 0x144, 0x0, 0xfffffffffffffdc2}, {0x1, 0xcf8b, 0x0, 0x6b1}, {0xfc01, 0x5, 0x1, 0x8}], {0xebf, 0x1, 0x5, 0x3}, {0x6, 0x9, 0x7, 0x7fffffff}}}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x45}, 0x3, &(0x7f0000002480)="71f91eca6e530c79e2f8e2a2ce3471ac0058bc5a91501d94a34bfec38a820600000000000000dc0225f0e4cf52b7d99d15d923", &(0x7f0000000080)=0x1232, 0x0, 0xfffffffffffffe4d) r4 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_cred(r4, 0xffff, 0x1024, &(0x7f0000000480)={0x0}, &(0x7f0000000580)=0xc) kill(r5, 0x5) mknod(&(0x7f00000000c0)='./file1\x00', 0x2000, 0x637d) r6 = open(&(0x7f0000000800)='./file1\x00', 0x8, 0x0) r7 = socket(0x11, 0x3, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) getsockopt$sock_int(r7, 0xffff, 0x100, 0x0, 0x0) preadv(r1, &(0x7f0000000640)=[{&(0x7f0000000380)=""/223, 0xdf}, {&(0x7f0000000480)=""/206, 0xce}, {&(0x7f0000000580)=""/178, 0xb2}], 0x3, 0x7) bind(r6, &(0x7f0000000000)=@in={0x10, 0x2, 0x0, 0x8ea}, 0x10) ioctl$BIOCGRTIMEOUT(r6, 0x4010426e, &(0x7f0000000040)) 1.801359195s ago: executing program 2 (id=38): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0xbe, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000080)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0xc0, 0x89, 0x2, 0x8}, {0xb1, 0x3, 0x20, 0x205}, {0x86, 0xfe, 0x9, 0x7fffffff}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$kern(&(0x7f00000000c0)={0x1, 0x53}, 0x2, &(0x7f0000000240), 0x0, 0x0, 0x0) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000040)={0x28, 0x0}) write(r0, &(0x7f0000000140)="090000000000000000c105f801dd", 0xe) 1.740608117s ago: executing program 3 (id=39): symlink(&(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) chmod(&(0x7f0000000040)='.\x00', 0x35e) (async) setuid(0xee01) (async, rerun: 32) mknod(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x0) (async, rerun: 32) r0 = openat$pci(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0) ioctl$PCIOCWRITE(r0, 0xc00c7007, &(0x7f00000005c0)={{0x0, 0x2, 0x5}, 0xfffffffe, 0x5, 0x6}) 1.739622582s ago: executing program 0 (id=40): r0 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) r3 = geteuid() setsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f00000000c0)={r1, r3}, 0xc) (async) futimes(r0, &(0x7f0000000100)=[{0x0, 0x3ddb}, {0x10000, 0x1}]) (async) ioctl$DIOCMAP(r0, 0xc0106477, &(0x7f0000000180)={&(0x7f0000000140)='./file0\x00', r0, 0x3}) (async) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x40046402, &(0x7f00000001c0)={0x0}) ioctl$DRM_IOCTL_AUTH_MAGIC(r0, 0x80046411, &(0x7f0000000200)={r4}) (async) setitimer(0x0, &(0x7f0000000240)={{0x3, 0x9}, {0x5, 0x9}}, &(0x7f0000000280)) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000002c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(r0, 0xc01864c1, &(0x7f0000000300)={r5, 0x2, 0xffffffffffffffff, 0x0, 0x5}) (async) r7 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r7, &(0x7f0000001740)={&(0x7f0000000340)=@file={0x8a, 0x1, './file0\x00'}, 0xa, &(0x7f00000016c0)=[{&(0x7f0000000380)}, {&(0x7f00000003c0)="924a2107bc7828b555e59aa83fec1a4bfa83355c54a12669ba42692df627f91f6eb535b37213597104e852e8", 0x2c}, {&(0x7f0000000400)="41904c4f75bf9b3805a6c3a51c99a57753c96989c82e0e79567e1156b9b400ad06b6f5f8e2fc9a8544df13f8170beea34fe329286fc0b537121a5ea2f623edf4625ae29099fd9801e5f1eeb753ac3fee521b03365c82830ed12e59544fb4d9a56bf10e05ca9109ab9a2a0eaea62a5a746dfecc80bac35e46c7e699dc22dc0b123793bb9d36aac98330a1ac9f4485dc4eac2ec2a5a6b0d8f0e96bbffd62af1b7e0d11a15954d21394f970622d3812327fef455cd5586418ad5b64e8b5bcaf4e959e", 0xc1}, {&(0x7f0000000500)="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", 0x1000}, {&(0x7f0000001500)="d76d4813c4b6b34d7982b301170935bd643e6807e0b10512a4df39300741237b5b9bd8b129282c0cc642ef3247cdff68e300af3c961fa65216938e19c04ccf83c294ec655c5cdda41a60560bcca7a42fea640c81b36fff6fd2638a013eb7f34bd5352e496e5de1a5aed844e70310537babc44a049820f9aa6155f9578d86c5000f280a7490da03d0a518e4207b585c415c83bf5f862db6642e71", 0x9a}, {&(0x7f00000015c0)="71b848fc2432c029ec3b6acd94fa78b2ee33323ece87cbcf8663f7c6026d066144295516391fa19788223f20ef08ef46efa9b1f5f432262a039527d01792d2334eaa8e4a0fb7c722b1cf3d77320582879e5c0320620ab168763ff4674a8171f4dd1905037e2620d371079d326698f97a99fc9069cd7f1c2e46e06a023b0d433a6cfb215b07521f0a2c25a7ad5fccf935e8d19bd85afb7d75ee2413eccb9e3951f06aca8085a6eef5388aec438d5232b1171a0bbdc952baea0f6e5d18c27f03343e25c5a4a59813d4ad8511b48748c4442b8515578bcf08b6f3be39ecd9071bd4941da4326e0a1b613a5748b0822e06", 0xef}], 0x6, 0x0, 0x0, 0x1}, 0x4) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(r6, 0xc01864c1, &(0x7f0000001780)={r5, 0x1, 0xffffffffffffffff, 0x0, 0xe}) ioctl$VNDIOCCLR(r8, 0x80384601, &(0x7f0000001840)={&(0x7f00000017c0)='./file0/file0\x00', 0xd58e, &(0x7f0000001800)='./file0\x00', 0x8}) (async) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f0000001880)={r5}) (async) setitimer(0x1, &(0x7f00000018c0)={{0x9, 0x4}, {0x9f69, 0x4}}, &(0x7f0000001900)) (async) fstat(r0, &(0x7f0000001940)) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(r0, 0xc01864c2, &(0x7f00000019c0)={0x0, 0x1, r6, 0x0, 0x7}) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000001a40)={&(0x7f0000001a00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, 0x0, 0x0, 0xc11, 0xe, 0xfffffffd, {0xd4c1, 0x0, 0x9, 0x101, 0x0, 0x5, 0x8, 0x5, 0x0, 0xb2c5, 0x4, 0x74, 0x40104, 0x68, "071303154473640e91703ba40428f9f976e9ea3568bb7d1ac7602a8441e65532"}}) (async) ioctl$DRM_IOCTL_MODE_GETFB(r6, 0xc01c64ad, &(0x7f0000001ac0)={0x0, 0x8, 0xff, 0x7, 0x6, 0x4, 0x0}) ioctl$DRM_IOCTL_MODE_ADDFB(r8, 0xc01c64ae, &(0x7f0000001b00)={r9, 0xfffffffc, 0x3, 0x6, 0x2, 0x80000000, r10}) (async) connect$unix(r0, &(0x7f0000001b40)=@abs={0xf9, 0x0, 0x0, 0x0}, 0x8) (async) getpgid(r1) (async) getresuid(&(0x7f0000001b80), &(0x7f0000001bc0)=0x0, &(0x7f0000001c00)) setreuid(r2, r11) (async) openat$speaker(0xffffffffffffff9c, &(0x7f0000001c40), 0x100, 0x0) (async) setitimer(0x2, &(0x7f0000001c80)={{0xeee, 0x1000}, {0xffff, 0x2}}, &(0x7f0000001cc0)) (async) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r6, 0xc01064c7, &(0x7f0000001d40)={0x9, 0x0, &(0x7f0000001d00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) pwritev(r8, &(0x7f0000001f40)=[{&(0x7f0000001d80)="efca96e068eafcf0cb3e1b508a39292f7248c795ac9a17b697a92025b7f2e4176676bbc63a6c6e1abe069798f1da25bb426f4b4b974b3763411e95715cf0cc786682359e314d01da7262ea8de8f53065ef4e4702f1dd59", 0x57}, {&(0x7f0000001e00)="4d0ff48542594dad1cb69a5c555880204e646384b43126af7c81a88eb5981c08e0e5b2a164c7b5c6e20b33fb3edbd7acdb2dc5d68bb332a6965622c291967801d450d731a5334a55ee52e6fdfd39ba10cf37cbb95fe8a0a9440231ee0c9b94e58c159c9a903d88abdd60c2aba2ea753294afcbb56cb0aa5b333125bccf39974e77f57eea2dce8a86c561694c9cb83d0687f5a4f786fde77f778cb3983e5b49198ee4bd46390f6d7d476d32443964222e3ab3a38e33", 0xb5}, {&(0x7f0000001ec0)="93236437541ee0a19929d600a5423a73cc9f29fb838152416d6202de84b5943d555797ce950be435cc0a735cb1a4b0a27e6f1a783decc206b0790ce89c3de0a4c16452772ae8f690f16261576c8d76eb565a060622ccbe5846bd4b99896a52462405a1d0c411d69ae8af8ee8c59b8758c904756c902fbaab202265f5", 0x7c}], 0x3, 0x8) 1.739066152s ago: executing program 2 (id=41): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000280)=""/240, 0xf0}, {&(0x7f00000000c0)=""/179, 0xb3}, {&(0x7f0000000400)=""/242, 0xf2}, {&(0x7f0000000180)=""/76, 0x4c}, {&(0x7f0000000380)=""/72, 0x48}], 0x5, 0x0) fcntl$setstatus(r0, 0x4, 0x80) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @remote, [], {@ipv6={0x86dd, {0x6, 0x6, '`\x00', 0x14, 0x6, 0x30, @local={0xfe, 0x80, '\x00', 0x0}, @local={0xfe, 0x80, '\x00', 0x0}, {[], @tcp={{0x1, 0x2, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x2, 0x5, 0x0, 0x5c}}}}}}}) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) r1 = socket(0x2, 0x3, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) connect$inet(r1, &(0x7f0000000000)={0x10, 0x2, 0x1, 0x200000e3}, 0x10) sysctl$net_inet_icmp(&(0x7f0000000040)={0x4, 0x2, 0x1, 0x5}, 0x4, 0x0, 0x0, 0x0, 0x0) munmap(&(0x7f0000800000/0x800000)=nil, 0x800000) 1.634029022s ago: executing program 3 (id=42): syz_emit_ethernet(0x5d, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004500004f00e7000000069078e0000001ac1400aa4e024e20000890789bbc82f4e1b3d758f9bf8bed000000000038c46e6326e98597ae7c29e5213ee8b498766b8fae9f030000000000000c20940f8918d6e7cb4db50be9933e0071"]) openat$wskbd(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) rename(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000240)='./file0/file0\x00') r0 = socket$inet(0x2, 0x8003, 0x0) r1 = socket(0x2, 0x3, 0x0) ioctl$VMM_IOC_WRITEREGS(0xffffffffffffffff, 0x82485608, &(0x7f0000000100)={0x80, 0x1, 0x0, {[0x7, 0x0, 0xffffffffffffffd, 0x2, 0x9, 0x0, 0x80, 0x0, 0x9, 0x2, 0x0, 0xfffffffffffffffd, 0x80, 0xffffffdfffffffff, 0x5, 0x1fc, 0x5, 0x1], [0x64, 0x2, 0x5, 0x80000000010000, 0x0, 0x0, 0x10, 0x9, 0x80000002, 0xfdfffffffffffffb], [0x7fffffffffffffff, 0x4000000000000, 0xfffffffffffffffe, 0xd34, 0x2009, 0x10000000000, 0x5], [0x81, 0x0, 0xfffffffffffffffc, 0x165, 0x200, 0xe], [{0x0, 0xf, 0x80000001, 0x7fffffffffffd}, {0x6, 0x0, 0x1002}, {0x1000, 0x3, 0xfffffffe, 0x4}, {0x0, 0x3, 0xfffd, 0x4000000000000001}, {0xfffd, 0xa832, 0xc8, 0x8}, {0x9, 0x2, 0x0, 0x1}, {0x0, 0x8, 0xaa, 0x4000000000000000}, {0x0, 0xfffffff1, 0xc00003}], {0xfffc, 0x10, 0x20000003, 0xf5a752c}, {0x0, 0x5, 0x401}}}) syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @random="b000", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x1, 0x28, 0xfffd, 0x0, 0x7, 0x1, 0x0, @rand_addr=0x5bf70c0e, @multicast1}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x7, 0xf2, 0x1, 0x1, 0x7}}}}}) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) socketpair(0x2, 0x8000, 0x2, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$FIONREAD(r2, 0x4004667f, &(0x7f0000000040)) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x3200) ioctl$WSMOUSEIO_SETPARAMS(0xffffffffffffffff, 0x80105728, &(0x7f0000000940)={&(0x7f0000000400)=[{0x26, 0x5}, {0x5, 0x9}], 0x2}) r3 = open(&(0x7f0000000080)='./bus\x00', 0x20, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x6e, &(0x7f0000000200), 0x0) preadv(r3, &(0x7f00000003c0), 0x1000000000000023, 0x6) ioctl$FIONREAD(r1, 0xc0106924, &(0x7f00000001c0)) ioctl$FIONREAD(r1, 0x8040691a, &(0x7f0000000100)) setsockopt(r0, 0x0, 0x7, &(0x7f0000000000), 0x0) r4 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000412000/0x2000)=nil) setuid(0xee01) shmctl$IPC_STAT(r4, 0x2, 0x0) getsockopt(r0, 0xfffffff9, 0x1, &(0x7f0000000280)=""/4096, &(0x7f0000001280)=0x1000) r5 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$WSKBDIO_SETENCODING(r5, 0x80045710, &(0x7f0000000040)=0x4) 1.632905055s ago: executing program 0 (id=43): r0 = getpid() kill(r0, 0x0) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x0, 0x2, 0x1, 0xa3}, {0x60, 0x80, 0xfc, 0x8}, {0x9b1e, 0x22, 0xf, 0x350e4000}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x8e, &(0x7f0000000200)={@local, @random="aa6d6500", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x2, 0x80, 0x67, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0x0}, @local={0xac, 0x14, 0x0}}, @tcp={{0x3, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0xd, 0x20, 0x8200, 0x0, 0xfffc, {[@sack={0x5, 0x1e, [0x4, 0x4, 0x7, 0x3, 0xfffffff9, 0xffffffff, 0x8]}]}}, {"f80b80c355e15f6da72b0c3ab00493bf9966dad50e09684406c14eeec4c698fa7081ac016604c9feb408be1de61cdbadd983357329b951f8"}}}}}}) r2 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmsg$unix(0xffffffffffffff9c, &(0x7f0000001f40)={0x0, 0x0, &(0x7f0000001a40)=[{&(0x7f0000000500)="370dc7cc4e61858942", 0x9}], 0x1, 0x0, 0x0, 0x406}, 0x8) r3 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) setuid(0xffffffffffffffff) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setstatus(r4, 0x4, 0xc0) setsid() r6 = syz_open_pts() ioctl$TIOCSCTTY(r6, 0x20007461) r7 = fcntl$getown(r6, 0x5) fcntl$setown(r4, 0x6, r7) close(r5) ioctl$TIOCSETA(r3, 0xc450443c, &(0x7f00000000c0)={0x72f, 0x1, 0x9, 0x3, "c9f7d2462f0000023beeca8f00875a6e80f775d2", 0x2}) sysctl$net_inet6_ip6(&(0x7f0000000000)={0x4, 0x18, 0x29, 0x35}, 0x4, 0xfffffffffffffffe, 0x0, 0x0, 0x0) ioctl$DIOCXBEGIN(0xffffffffffffffff, 0xc0104451, &(0x7f0000000040)={0x1, 0x408, &(0x7f0000001340)=[{0x1, '\x00', 0xa1}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$DIOCXCOMMIT(r2, 0xc0104452, &(0x7f0000000040)={0x0, 0x40a, 0x0}) r8 = open$dir(&(0x7f0000000080)='./file0\x00', 0x80, 0x1) openat(r8, &(0x7f0000000180)='./file0\x00', 0x800, 0x6) 636.468101ms ago: executing program 1 (id=44): sysctl$kern(&(0x7f00000000c0)={0x1, 0x53}, 0x2, &(0x7f0000000240), 0x0, 0x0, 0x0) socketpair(0x0, 0x5, 0x11, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000100)={0x0, 0x1b, &(0x7f0000000240)=[{&(0x7f0000000140)=""/218}, {&(0x7f00000002c0)=""/70}, {&(0x7f0000000340)=""/106}], 0x100000000000039d, 0x0, 0x24}, 0x0) ioctl$WSDISPLAYIO_LDFONT(0xffffffffffffffff, 0x8058574d, &(0x7f0000000140)={'./bus\x00', 0x1, 0x7, 0x5, 0x1, 0x8000, 0x18ae, 0x7, 0x0, 0x0, 0x9, 0x8}) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) setitimer(0x1, &(0x7f0000000000)={{0x404000, 0xffffffffffffffff}, {0xffffffff}}, 0x0) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0x80000000, 0xffff63d6, 0xe9, 0x2, 0xa, 0x3, 0x1, 0x10, [{0x0, 0x80000002, 0x5, 0x80000002}, {0xe9, 0xe7, 0x1000002, 0x6}, {0x10cd5, 0x4baa, 0x9, 0x4}, {0x7, 0x10000, 0x4000000f, 0x8cce}, {0x4, 0x2000008, 0x0, 0x1}, {0x388d, 0xffffffff, 0x85, 0x5}, {0x2, 0xa00, 0x20004, 0xffffffff}, {0x208, 0xfffffffd, 0x5, 0xffffe2e8}, {0x10007, 0x1000, 0x3, 0x7ffd}, {0x3f8, 0xfefffffd, 0x1ff, 0x12}, {0x82, 0x0, 0x8a3a0001, 0xfffffff4}, {0x10002, 0xfffffffe, 0x650, 0x200a68}, {0x401, 0x6, 0xa6ab, 0xa5}, {0x6, 0xfffffffe, 0x102}, {0xffffffff, 0x7, 0x81, 0x7}, {0x89be2, 0x1, 0x2, 0x3ff}]}) poll(&(0x7f0000000180)=[{0xffffffffffffffff, 0x80}, {r1, 0x40}], 0x2, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$TIOCSETA(r1, 0x80d04466, &(0x7f0000000140)={0x9, 0x2a, 0x4, 0x6ab7855f, "08e50000000000000100", 0x20004118, 0x5}) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x890, 0x0) ioctl$BIOCLOCK(r2, 0x20004276) ioctl$BIOCSRTIMEOUT(r2, 0x8010426d, &(0x7f0000000040)={0x20006, 0xa9e0}) r3 = fcntl$getown(r2, 0x5) semop(0xffffffffffffffff, 0x0, 0x0) kill(r3, 0xf) madvise(&(0x7f0000282000/0x3000)=nil, 0x3000, 0x0) 623.979638ms ago: executing program 7 (id=45): sysctl$kern(&(0x7f0000000180)={0x1, 0x30}, 0x2, 0x0, 0x0, &(0x7f0000000280), 0x0) r0 = socket$inet(0x18, 0x3, 0x102) sendmsg(r0, &(0x7f0000000240)={&(0x7f0000000280)=@in6={0x1c, 0x18, 0x0, 0x7, '\x00', 0x101}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000180)="638802000000339afe51f6f2efa24a85abdd612dd68e59adfecf9323100084410a8591426ee03e", 0x27}, {&(0x7f0000000680)="a2", 0xfdac}], 0x2, 0x0}, 0x402) getsockopt(r0, 0x8, 0x400, &(0x7f0000000000)=""/156, &(0x7f00000000c0)=0x9c) listen(r0, 0xfffffff7) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) accept$unix(0xffffffffffffffff, &(0x7f0000000bc0)=@file={0x0, 0x0, ""/4094}, &(0x7f0000001bc0)=0x1000) 598.72286ms ago: executing program 5 (id=46): setrlimit(0x8, &(0x7f0000000980)={0x42, 0x65}) r0 = syz_open_pts() close(r0) syz_open_pts() ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000000)={0x7f0, 0x807, 0x583, 0x160350d, "cc14ee112100caa26af961ef32e403008ec100", 0x7e, 0x6}) (async, rerun: 64) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) (rerun: 64) ioctl$TIOCSTOP(r0, 0x2000746f) unveil(0x0, &(0x7f00000002c0)='r\x00') (async) ioctl$TIOCSCTTY(r0, 0x20007461) 597.820255ms ago: executing program 7 (id=47): r0 = kqueue() kevent(r0, &(0x7f0000000000)=[{{}, 0xfffffffffffffff6, 0x8f, 0xf27ff7794bbc9c2d, 0xfd, 0x10000}], 0x1, 0x0, 0x9b68, 0x0) chmod(&(0x7f0000000040)='.\x00', 0x35e) setuid(0xee01) write(0xffffffffffffffff, &(0x7f0000000600)="f81ad3010006000000010046f4b320d3b9c246f43bbc408e4e34695dc84b5d33", 0x20) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000001000), 0x10000, 0x0) ioctl$DIOCRCLRTSTATS(r1, 0xc4504441, &(0x7f0000002100)={{'./file0\x00', './file0\x00', 0x20, 0xfd}, &(0x7f0000000200), 0x428, 0x8a, 0x9, 0x0, 0x9, 0x8, 0x12, 0x40000008}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) unveil(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000300)='x\x00') syz_emit_ethernet(0x8c, &(0x7f00000001c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x8, 0x7e, 0x0, 0x0, 0x1, 0x6, 0x0, @remote={0xac, 0x14, 0x0}, @local={0xac, 0x14, 0x0}}, @tcp={{0x1, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x3, 0x2, 0x40, 0x0, 0x0, {[@generic={0x3, 0x2}, @mss={0x2, 0x4, 0x4}]}}, {"5578adb0238ca2d5ba7d92c0c3f170453bdfce76f9e7ce725c02176b04ba24e79aacee3d6ec8ddf4f0fa6a6ab4b7540b4a929a7745b97ba0bccb0a95aaaf03980b2d54effc6cee2b87b6a2c6d3a1"}}}}}}) sysctl$kern(&(0x7f0000000100)={0x1, 0x3b}, 0x2, &(0x7f0000000400)="f9e495405dc191f0f77e24d4d9d728e68c4141cac302f1ee5cc55c79e3f2564f0199f48420da1453915ab2e35208a9dad483c512f4cc1a3b3faeebba240c817af79a3ad115a58334610a3502e0998a853942b4be628be5796ea49044a050914aa392e3f9b1293d007b7e86080c0affbaec52ccfd5ac112607c412bdb19bfa373a26420c80fc87b921de4", &(0x7f0000000500)=0x8a, &(0x7f0000000540), 0x0) 597.153804ms ago: executing program 7 (id=48): ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0xc, 0x9, 0x5, 0x9}]}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x26}, 0x40f) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x2, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) close(r1) r2 = socket(0x2, 0x4001, 0x0) connect$unix(r2, &(0x7f0000000000), 0x10) setsockopt$sock_int(r1, 0xffff, 0x1023, &(0x7f0000000040), 0xe0) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSETF(r3, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f00000000c0)=[{0xfffd, 0x0, 0x3, 0x4}, {0x44, 0x9, 0xf7, 0x5}, {0x1b0e, 0x10, 0xf4, 0x4000802}]}) ioctl$BIOCSBLEN(0xffffffffffffffff, 0xc0044266, &(0x7f00000000c0)=0x2) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) ioctl$BIOCSETF(r3, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x1000e, &(0x7f0000000200)=ANY=[]) setuid(0xffffffffffffffff) r4 = msgget$private(0x0, 0x128) msgctl$IPC_RMID(r4, 0x0) 596.644775ms ago: executing program 2 (id=49): openat$speaker(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) 595.894363ms ago: executing program 7 (id=50): mkdir(&(0x7f0000000040)='./file2\x00', 0xc1) (async) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) (async) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000000)={0x3, &(0x7f0000000100)=[{0x1, 0x2, 0x1, 0x7}, {0x24, 0xc9, 0xfe, 0x88}, {0x9b1e, 0x28, 0xf, 0x40203ff}]}) (async) sysctl$kern(&(0x7f0000000000)={0x1, 0x48}, 0x2, 0x0, &(0x7f00000000c0), 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) sysctl$kern(&(0x7f0000000000)={0x1, 0x4d}, 0x2, &(0x7f0000000180)="5f2a1ff1", &(0x7f00000000c0)=0x4, &(0x7f0000001180), 0x4) (async) syz_emit_ethernet(0x1000e, &(0x7f0000000200)=ANY=[]) (async) r1 = open(&(0x7f0000000040)='./file2\x00', 0x10000, 0x121) ioctl$VMM_IOC_RESETCPU(r1, 0x82405605, &(0x7f0000000100)={0x0, 0x0, {[0xfffffbeffffffffb, 0x1, 0x2, 0x2, 0x8001, 0xfffffffffffffffe, 0x6, 0x7fffffffffffffff, 0x0, 0x9, 0x800, 0x3, 0xffffffffffffffff, 0x400000008000000, 0x3, 0xffffffffffffffa3, 0x82, 0xce5], [0xfffffffffffffffe, 0x80000001, 0xfffffffffffffff9, 0x2, 0x0, 0x7b98, 0x6, 0x0, 0xfffffffffffffffe], [0x5ad8, 0x6, 0x40000002, 0xa, 0xfffffffffffffffb, 0x11003, 0x4], [0xd, 0x20000000000, 0xfffffffffffffffc, 0x8040000100000000, 0xfffffffffffffff6, 0x4], [{0xdb6e, 0x4, 0x0, 0x40007d06}, {0xfffc, 0x2, 0x5}, {0x0, 0x0, 0xfffffffe, 0x80}, {0x4, 0x4b72, 0x3, 0xffffffffffffffff}, {0x0, 0xfffff3d8, 0x0, 0x8000000000000008}, {0x0, 0x2006, 0x40000, 0x6}, {0x6b7, 0x0, 0x2}, {0x0, 0x7, 0xfffffffc, 0xa}], {0x2000, 0x7, 0x8}, {0x29, 0x0, 0xb0, 0x2}}}) (async) r2 = kqueue() kevent(r2, &(0x7f00000000c0), 0x56, 0x0, 0x7fff, 0x0) (async) closefrom(r1) 557.027065ms ago: executing program 4 (id=51): r0 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0) r1 = socket(0x2, 0x1, 0x0) shutdown(r1, 0x2) mprotect(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0) sysctl$vfs_nfs(&(0x7f0000000900)={0xa, 0x2, 0x1}, 0x3, 0x0, &(0x7f0000001940), 0x0, 0x0) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0x80000000, 0xffff63de, 0x8000005, 0x5, 0x8, 0x3, 0xf7, 0x10, [{0x8, 0xb, 0xfffff116, 0x80000001}, {0x3, 0xffffffff, 0x4, 0xfff}, {0x4, 0x4baa, 0x3, 0xd}, {0x6, 0xe2, 0xf, 0x100}, {0x3, 0xfffff800, 0x5, 0xffffffff}, {0x7890, 0x10fffb, 0x8, 0x2}, {0x3, 0x800, 0x3, 0xfffffffa}, {0x204, 0x80, 0x27ffc, 0xffffe2e9}, {0x9, 0x1000, 0x6, 0x7fff}, {0x3, 0x11, 0x0, 0x8bfd}, {0xfffffffd, 0x0, 0xc, 0x6}, {0x9, 0x4, 0x800000, 0x5}, {0x401, 0x4, 0x40000b, 0x2}, {0x3, 0x6e2, 0x1, 0x6f5fc48f}, {0x3, 0x101, 0x3, 0x9}, {0x8ff9, 0x1, 0x100000, 0x400}]}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xfffffffffffffe3c, 0x0, 0x37) sysctl$kern(&(0x7f0000000100)={0x1, 0x4f}, 0x3, &(0x7f0000000140)="71f91e3871ac0058e05a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000200)=0xff55, 0x0, 0xffffff42) 554.935382ms ago: executing program 32 (id=44): sysctl$kern(&(0x7f00000000c0)={0x1, 0x53}, 0x2, &(0x7f0000000240), 0x0, 0x0, 0x0) socketpair(0x0, 0x5, 0x11, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000100)={0x0, 0x1b, &(0x7f0000000240)=[{&(0x7f0000000140)=""/218}, {&(0x7f00000002c0)=""/70}, {&(0x7f0000000340)=""/106}], 0x100000000000039d, 0x0, 0x24}, 0x0) ioctl$WSDISPLAYIO_LDFONT(0xffffffffffffffff, 0x8058574d, &(0x7f0000000140)={'./bus\x00', 0x1, 0x7, 0x5, 0x1, 0x8000, 0x18ae, 0x7, 0x0, 0x0, 0x9, 0x8}) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) setitimer(0x1, &(0x7f0000000000)={{0x404000, 0xffffffffffffffff}, {0xffffffff}}, 0x0) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0x80000000, 0xffff63d6, 0xe9, 0x2, 0xa, 0x3, 0x1, 0x10, [{0x0, 0x80000002, 0x5, 0x80000002}, {0xe9, 0xe7, 0x1000002, 0x6}, {0x10cd5, 0x4baa, 0x9, 0x4}, {0x7, 0x10000, 0x4000000f, 0x8cce}, {0x4, 0x2000008, 0x0, 0x1}, {0x388d, 0xffffffff, 0x85, 0x5}, {0x2, 0xa00, 0x20004, 0xffffffff}, {0x208, 0xfffffffd, 0x5, 0xffffe2e8}, {0x10007, 0x1000, 0x3, 0x7ffd}, {0x3f8, 0xfefffffd, 0x1ff, 0x12}, {0x82, 0x0, 0x8a3a0001, 0xfffffff4}, {0x10002, 0xfffffffe, 0x650, 0x200a68}, {0x401, 0x6, 0xa6ab, 0xa5}, {0x6, 0xfffffffe, 0x102}, {0xffffffff, 0x7, 0x81, 0x7}, {0x89be2, 0x1, 0x2, 0x3ff}]}) poll(&(0x7f0000000180)=[{0xffffffffffffffff, 0x80}, {r1, 0x40}], 0x2, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$TIOCSETA(r1, 0x80d04466, &(0x7f0000000140)={0x9, 0x2a, 0x4, 0x6ab7855f, "08e50000000000000100", 0x20004118, 0x5}) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x890, 0x0) ioctl$BIOCLOCK(r2, 0x20004276) ioctl$BIOCSRTIMEOUT(r2, 0x8010426d, &(0x7f0000000040)={0x20006, 0xa9e0}) r3 = fcntl$getown(r2, 0x5) semop(0xffffffffffffffff, 0x0, 0x0) kill(r3, 0xf) madvise(&(0x7f0000282000/0x3000)=nil, 0x3000, 0x0) 329.473634ms ago: executing program 2 (id=53): openat$pf(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) (async) r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000b40)="825a4f47c21e6ed7eda4f5903abf65b18d7c51f78b06cc3a5840c04c2a649b2000000000fafd3493776665d4cd12c63d34", 0x31}], 0x1, 0x0, 0x0, 0x205}, 0x0) r1 = kqueue() ioctl$FIONREAD(r1, 0x4004667f, &(0x7f0000000000)) ioctl$TIOCSETA(r0, 0xc4504445, &(0x7f0000000740)={0x20008, 0xffffffff, 0x2, 0x7, "04650000000100", 0x5, 0x4}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0xc4) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0xc4) rename(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0\x00') 315.03946ms ago: executing program 7 (id=54): setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffe, 0xffffffffffffffff}) r0 = open(&(0x7f0000000040)='./file1\x00', 0x18289, 0xa0) write(r0, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) ftruncate(r0, 0x1) fcntl$lock(0xffffffffffffffff, 0x2, 0x0) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0xfffffffffffffffd, [{&(0x7f00000c7000/0x3000)=nil, &(0x7f0000ff6000/0x6000)=nil, 0x1}, {&(0x7f00004d7000/0x2000)=nil, &(0x7f0000698000/0x1000)=nil, 0x4}, {&(0x7f00005fd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0xf}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x80}, {&(0x7f0000fff000/0x1000)=nil, &(0x7f00005dd000/0x3000)=nil, 0x8}, {&(0x7f0000ff3000/0x1000)=nil, &(0x7f000068e000/0x12000)=nil, 0x2000000000000000}, {&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff2000/0x2000)=nil, 0x40000000000007}, {&(0x7f0000636000/0x2000)=nil, &(0x7f0000696000/0x2000)=nil, 0xffffffffffffffff}, {&(0x7f0000696000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x7}, {&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x8}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000695000/0x1000)=nil, 0xffffffff}, {&(0x7f00007f8000/0x2000)=nil, &(0x7f0000371000/0x1000)=nil, 0xf}, {&(0x7f00000c6000/0x2000)=nil, &(0x7f0000668000/0x4000)=nil}, {&(0x7f0000693000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x4}, {&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffa000/0x6000)=nil}, {&(0x7f0000ff1000/0x1000)=nil, &(0x7f0000abf000/0x3000)=nil, 0x1ff}], './file0\x00', 0x8, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1ff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x44, 0x0, 0x6, 0x2, 0x94fd, 0xffffb6e0, 0x0, 0x0, 0x0, 0xb27d, 0x0, 0x2, 0x7, 0x0, 0x0, 0x20000, 0x7, 0x1, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0xae9, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xb, 0xfffffffd, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0xfffffffe, 0xffffff49, 0x9, 0x8000009, 0xfffffffb, 0x0, 0x6, 0xffc, 0x0, 0x4, 0x0, 0x5, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x100, 0x200, 0x3, 0x0, 0x3, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7, 0x3, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0xfffffffe, 0x0, 0x0, 0xfffffffd, 0x0, 0xfffffffc, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0xfffff001, 0x80, 0x0, 0x2, 0x1000000, 0x0, 0x2, 0x0, 0x0, 0x70000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x3d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x5, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x7, 0xfffff800, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x2, 0xffffffff, 0x400000, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0xffffffff, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0xffffffff, 0x1, 0x2000000, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0xfdf7fffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0xfffffffc, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffc, 0x0, 0x0, 0x6, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x4000000, 0x1, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x644f, 0x0, 0x8, 0x7a1, 0x6, 0x0, 0x80000000, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0xfffffffd, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffc, 0x5, 0x80, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0xa, 0x2, 0x0, 0x3, 0x0, 0x0, 0x5, 0x800, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xfffffffe, 0x0, 0x100, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0xaa6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x5, 0x4, 0x7, 0x4, 0x4, 0x0, 0x200, 0x0, 0x0, 0x0, 0xb0, 0xffffff5c, 0x0, 0x0, 0xffffffff, 0x398, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x2, 0x0, 0x0, 0x403, 0x0, 0x5]}) r1 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) ioctl$TIOCSETA(r1, 0xcd604404, &(0x7f00000001c0)={0x1, 0x2, 0x7, 0x2f, "20180000000000002500", 0xfffffffb, 0xb}) ktrace(&(0x7f0000000200)='./file1\x00', 0x4, 0x40000220, 0x0) closefrom(r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) 314.527615ms ago: executing program 4 (id=55): r0 = socket$inet6(0x18, 0x1, 0x6) bind$inet6(r0, &(0x7f0000000240)={0x1c, 0x18, 0x0, 0xc, '\x00', 0x8}, 0x1c) (async) sysctl$net_inet_tcp(&(0x7f00000000c0)={0x4, 0x2, 0x6, 0x9}, 0x4, &(0x7f0000000140)="9b1809ffffffffffffff7f473f11e1a4e5f2f9f220ef7f0abdbc34fe42021588dc8ff44f4b76c76d41859d85ea800dabe467badf35b6fd74c94d1b44", &(0x7f0000000040)=0xaaac, 0x0, 0x0) (async) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x62}) r1 = syz_open_pts() close(r1) syz_open_pts() ioctl$TIOCSETAW(r1, 0x802c7415, &(0x7f0000000180)={0x2df57366, 0x108, 0xd, 0xffff7df8, "0e6402b7280224000600bfd4623ec6af4400", 0x80000004, 0x5}) (async) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000500)={0x3, &(0x7f00000000c0)=[{0xfffe, 0x0, 0x0, 0x10000}, {0x1, 0x0, 0x0, 0x2}, {0x4, 0x0, 0x0, 0x3}]}) (async) sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x6, 0xfffffffffffffffe, &(0x7f0000000080)=0xff0a, 0x0, 0xffffffc9) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0xffac) writev(r1, &(0x7f0000000480)=[{&(0x7f00000009c0)="b3ecd12f63dad4cc714df457ac9192a1e28fb31d097469f9bf4c8d7167197b532637a18ee6b82f66ce74346900810d6da1b62a78002a68fb2e533e", 0x3b}], 0x1) (async, rerun: 64) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async, rerun: 64) select(0x40, &(0x7f0000000180)={0xc5, 0x4, 0x0, 0x8, 0xfffffffffffffffd, 0x25a8, 0x7ffffffc, 0xc}, 0x0, 0x0, 0x0) 306.484688ms ago: executing program 2 (id=56): r0 = open(&(0x7f0000001700)='./file1\x00', 0x10e02, 0x2) r1 = getpid() (async) mknod(&(0x7f0000000100)='./file0\x00', 0x2000, 0x1e5f) r2 = open(&(0x7f0000000040)='./file0\x00', 0x80, 0x95) ioctl$BIOCSETWF(r2, 0xc0104401, &(0x7f0000001700)={0x0, 0x0}) (async) ktrace(&(0x7f0000001800)='./file0\x00', 0x4, 0x800, r1) (async, rerun: 32) ioctl$WSMOUSEIO_GCALIBCOORDS(r0, 0x41205725, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}) (async, rerun: 32) chroot(&(0x7f0000000000)='./file0\x00') 296.504098ms ago: executing program 4 (id=57): socketpair(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r0, 0xffff, 0x1006, &(0x7f0000000400)={0x60, 0x7ff}, 0x10) pwritev(0xffffffffffffffff, &(0x7f0000002440), 0x0, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x2000, 0x40000801) setsid() r1 = open(&(0x7f0000000000)='./file0\x00', 0x40000, 0xd0) ioctl$TIOCSCTTY(r1, 0x20007461) sysctl$net_inet_udp(&(0x7f0000000000)={0x4, 0x2, 0x11, 0x2}, 0x4, &(0x7f0000000500)="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"/302, &(0x7f00000000c0)=0xfffffffffffffe7a, &(0x7f0000000100)="c9edd234cce540433688fad55bfe3753888b46100000007f623cc289aa49f6f937b755be3b44b6f7424d512f3939c80abac35d8f02461863cb425949a67a821386c518e80c2861b40dc7321133189da8b0c2fa2ef9cb656b258126097075fe29cca92160124df3a52dc9c7d0e0e2c7154ee84bad040af64c73fbb2187825c34889fe1ec8ab94ef1effaa588f0e9f571d4baeba5102389cc22723602905f3d83b4ecd3df8fb098a18883f162dea6a4ac31ff1379c791412cc52a0fbab6c3d1d333b81379d50d3f1059b1153bb2a0e8b73a82935205a533b309e970705639712b87765ee8dd6902f280f865b2277706226", 0xf0) bind$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f0000000040)={0xfffffffd, 0x6, 0x3, 0x9, "01000100d100", 0x400, 0x4}) sysctl$kern(&(0x7f0000000040)={0x1, 0x3e}, 0x3ffffffffffffdf3, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sysctl$kern(&(0x7f0000000040)={0x1, 0x47}, 0x3, 0x0, 0x0, &(0x7f0000000080)="4f1d4c6344b80ed788b6a4515248df3aa745bb992c574ab4cdf5587145812eab4a988f7fafd7a01d99776d988908cd186b51f34f8c15ffa0c685ad4116c783959eff4278384b4000384dbb1c2aaeff10b4135529a1da6fda67c67469d954be811b25ec5521559154c586eefff122009f659cd3e27e98a3241495005f102d9101d158284c0ee3250aa7c11042330de22a299ab00894fdc9bac6042d", 0x4) r2 = open(&(0x7f0000000000)='./file0\x00', 0x1, 0x0) ioctl$TIOCSFLAGS(r2, 0x80047476, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CURSOR(r2, 0xc01c64a3, &(0x7f0000000200)={0x3, 0x6, 0x9, 0x2, 0x9dd, 0x8, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000240)={0x0}) ioctl$DRM_IOCTL_MODE_CURSOR(r2, 0xc01c64a3, &(0x7f0000000280)={0x3, 0xc, 0xe, 0x9, 0x3, 0x6, 0x0}) ioctl$TIOCOUTQ(r2, 0x40047473, &(0x7f0000000380)) ioctl$DRM_IOCTL_MODE_ADDFB(r1, 0xc01c64ae, &(0x7f00000002c0)={0x0, 0x2, 0xa206, 0x1, 0xa, 0xdfa2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000300)={0x0, 0x2, 0xfbd8, 0x30313259, 0x1, [r3, r4, r5, r6], [0x5, 0x3, 0xd536, 0x80000000], [0xfffffffc, 0x4, 0x2, 0xa8], [0x7fffffffffffffff, 0x9, 0x80000001, 0x800000]}) r7 = socket(0x18, 0x1, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) ioctl$DRM_IOCTL_DROP_MASTER(r1, 0x2000641f) ioctl$FIONREAD(r7, 0x8020699d, &(0x7f00000001c0)) 0s ago: executing program 6 (id=58): sysctl$hw(&(0x7f0000000040)={0x7, 0x10}, 0x2, &(0x7f0000000180), 0x0, 0x0, 0x0) ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f0000000000)={0x102, 0x6d, 0xff, 0xa, "00103a0000000000000000000000000000000400", 0xfffffffe, 0xae}) sysctl$vm_swapencrypt(&(0x7f0000000000)={0x6, 0xb, 0x1}, 0x5, 0x0, 0x0, 0x0, 0xfffffffffffffde7) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.96' (ED25519) to the list of known hosts. uvn_flush: obj=0xfffff28064cebf10, offset=0x0. error during pageout. uvn_flush: WARNING: changes to page may be lost! panic: pool_do_get: shmpl free list modified: page 0xfffff2806550a000; item addr 0xfffff2806550aaf0; offset 0x40=0x6a5d204d Stopped at db_enter+0x25: addq $0x8,%rsp TID PID UID PRFLAGS PFLAGS CPU COMMAND *135483 64209 0 0 0x4000000 0K syz-executor 503899 38147 0 0x2 0x1 1 syz-executor db_enter() at db_enter+0x25 panic(ffffffff834ad82e) at panic+0x1e5 pool_do_get(ffffffff83aac8a8,9,ffff80003c3ee528) at pool_do_get+0x5df pool_get(ffffffff83aac8a8,9) at pool_get+0x162 shmget_allocate_segment(ffff800045fe67f0,ffff80003c3ee780,0,ffff80003c3ee6d0) at shmget_allocate_segment+0x1af sys_shmget(ffff800045fe67f0,ffff80003c3ee780,ffff80003c3ee6d0) at sys_shmget+0x195 syscall(ffff80003c3ee780) at syscall+0xb17 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xdfbaa9b1d60, count: 7 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{0}> ddb{0}> set $lines = 0 ddb{0}> set $maxwidth = 0 ddb{0}> show panic *cpu0: pool_do_get: shmpl free list modified: page 0xfffff2806550a000; item addr 0xfffff2806550aaf0; offset 0x40=0x6a5d204d ddb{0}> show kasan No such command ddb{0}> trace db_enter() at db_enter+0x25 panic(ffffffff834ad82e) at panic+0x1e5 pool_do_get(ffffffff83aac8a8,9,ffff80003c3ee528) at pool_do_get+0x5df pool_get(ffffffff83aac8a8,9) at pool_get+0x162 shmget_allocate_segment(ffff800045fe67f0,ffff80003c3ee780,0,ffff80003c3ee6d0) at shmget_allocate_segment+0x1af sys_shmget(ffff800045fe67f0,ffff80003c3ee780,ffff80003c3ee6d0) at sys_shmget+0x195 syscall(ffff80003c3ee780) at syscall+0xb17 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xdfbaa9b1d60, count: -8 ddb{0}> show registers rdi 0 rsi 0x1 rbp 0xffff80003c3ee350 rbx 0xffffffff838f1e07 cpu_info_full_primary+0x2e07 rdx 0xffff800001600700 rcx 0xffff800045fe67f0 rax 0xffffffff838f0ff0 cpu_info_full_primary+0x1ff0 r8 0x101010101010101 r9 0x8080808080808080 r10 0x3607cc08bbb4221d r11 0x2b187f345669ef38 r12 0xffffffff838f1c08 cpu_info_full_primary+0x2c08 r13 0 r14 0 r15 0x1 rip 0xffffffff830b8535 db_enter+0x25 cs 0x8 rflags 0x246 rsp 0xffff80003c3ee340 ss 0x10 db_enter+0x25: addq $0x8,%rsp ddb{0}> show proc PROC (syz-executor) tid=135483 pid=64209 tcnt=3 stat=onproc flags process=0 proc=4000000 runpri=32, usrpri=73, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff800045fe7780,0xffff800045fe6fc8 process=0xffff800045fee698 user=0xffff80003c3e9000, vmspace=0xfffff2806cef67b8 estcpu=23, cpticks=103, pctcpu=1.2, user=0, sys=103, intr=0 ddb{0}> ps PID TID PPID UID S PRLAGS PFLAGS WAIT COMMAND 32717 494636 18681 0 2 0x2 0 syz-executor 53120 124685 96199 -1 2 0x10 0 syz-executor 53120 165228 96199 -1 3 0x10 0x4000080 fsleep syz-executor 85378 244303 36000 0 2 0 0 syz-executor 85378 193283 36000 0 3 0 0x4000080 fsleep syz-executor 64490 310184 38147 0 2 0 0 syz-executor 47187 219676 38842 0 2 0 0 syz-executor 47187 144893 38842 0 3 0 0x4000000 biowait syz-executor 47187 213475 38842 0 2 0 0x4000000 syz-executor 47187 514677 38842 0 3 0 0x4000000 inode syz-executor 65081 253711 78572 0 3 0 0x80 nanoslp syz-executor 65081 166820 78572 0 3 0 0x4000080 fsleep syz-executor 65081 384322 78572 0 3 0 0x4000080 ttyretype syz-executor 5565 355171 33063 -1 2 0x10 0 syz-executor 5565 384847 33063 -1 3 0x10 0x4000080 fsleep syz-executor 64209 275465 56216 0 2 0 0 syz-executor *64209 135483 56216 0 7 0 0x4000000 syz-executor 64209 57632 56216 0 3 0 0x4000080 fsleep syz-executor 38842 393334 18681 0 3 0x2 0x80 nanoslp syz-executor 96199 347887 18681 0 3 0x2 0x80 nanoslp syz-executor 78572 250066 18681 0 3 0x2 0x80 nanoslp syz-executor 36000 457468 18681 0 3 0x2 0x80 nanoslp syz-executor 56216 279472 18681 0 3 0x2 0x80 nanoslp syz-executor 38147 503899 18681 0 7 0x2 0x1 syz-executor 33063 311358 18681 0 3 0x2 0x80 nanoslp syz-executor 18681 142994 99460 0 3 0x2 0x80 kqread syz-executor 99460 239053 18107 0 3 0x100002 0x88 sigsusp ksh 18107 2645 80655 0 3 0x10 0x88 kqread sshd-session 80655 333476 65909 0 3 0x12 0x80 kqread sshd-session 76218 173702 1 0 3 0x100003 0x80 ttyin getty 65909 384742 1 0 3 0 0x88 kqread sshd 19883 300196 72536 74 3 0x1100012 0x80 bpf pflogd 72536 443317 1 0 3 0 0x80 sbwait pflogd 67744 351951 69101 73 3 0x1100010 0x80 kqread syslogd 69101 165408 1 0 3 0x100002 0x80 sbwait syslogd 55195 272067 1 0 3 0x100000 0x80 kqread resolvd 94140 29555 87335 77 3 0x100012 0x80 kqread dhcpleased 50080 199664 87335 77 3 0x100012 0x80 kqread dhcpleased 87335 520758 1 0 3 0 0x80 kqread dhcpleased 84845 49153 0 0 3 0x14000 0x200 bored smr 61892 298623 0 0 2 0x14000 0x200 zerothread 14333 154632 0 0 3 0x14000 0x200 aiodoned aiodoned 1267 211441 0 0 3 0x14000 0x200 syncer update 71954 45614 0 0 3 0x14000 0x200 cleaner cleaner 32337 180756 0 0 3 0x14000 0x200 reaper reaper 405 345504 0 0 3 0x14000 0x200 pgdaemon pagedaemon 87511 235216 0 0 3 0x14000 0x200 bored viomb 95057 333301 0 0 3 0x14000 0x40000200 acpi0 acpi0 35664 510878 0 0 3 0x14000 0x40000200 idle1 43124 504431 0 0 3 0x14000 0x200 bored softnet1 47745 348887 0 0 3 0x14000 0x200 bored softnet0 98999 301003 0 0 3 0x14000 0x200 smrbar systqmp 73409 92777 0 0 3 0x14000 0x200 bored systq 1298 109539 0 0 3 0x14000 0x200 tmoslp softclockmp 12054 514839 0 0 3 0x14000 0x40000200 tmoslp softclock 41136 200540 0 0 3 0x14000 0x40000200 idle0 1 432998 0 0 3 0x2 0x80 wait init 0 0 -1 0 3 0x10000 0x200 scheduler swapper ddb{0}> show all locks CPU 0: exclusive mutex shmpl r = 0 (0xffffffff83aac8c0) #0 witness_lock+0x5f1 #1 mtx_enter+0x4b4 #2 pool_get+0x124 #3 shmget_allocate_segment+0x1af #4 sys_shmget+0x195 #5 syscall+0xb17 #6 Xsyscall+0x128 Process 47187 (syz-executor) thread 0xffff800045fe8fb0 (144893) exclusive rrwlock inode r = 0 (0xfffff28065695c58) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 rrw_enter+0xc6 #3 VOP_LOCK+0xbd #4 vn_lock+0xa4 #5 vn_write+0x18f #6 dofilewritev+0x2bd #7 sys_write+0xa2 #8 syscall+0xbd4 #9 Xsyscall+0x128 Process 47187 (syz-executor) thread 0xffff80002a222010 (514677) exclusive rrwlock inode r = 0 (0xfffff28065695a08) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 rrw_enter+0xc6 #3 VOP_LOCK+0xbd #4 vn_lock+0xa4 #5 vfs_lookup+0x12b #6 namei+0x7c5 #7 vn_open+0x178 #8 sys_ktrace+0x9a #9 syscall+0xb17 #10 Xsyscall+0x128 Process 64209 (syz-executor) thread 0xffff800045fe67f0 (135483) exclusive kernel_lock &kernel_lock r = 0 (0xffffffff83a59400) #0 witness_lock+0x5f1 #1 syscall+0xaf4 #2 Xsyscall+0x128 exclusive mutex shmpl r = 0 (0xffffffff83aac8c0) #0 witness_lock+0x5f1 #1 mtx_enter+0x4b4 #2 pool_get+0x124 #3 shmget_allocate_segment+0x1af #4 sys_shmget+0x195 #5 syscall+0xb17 #6 Xsyscall+0x128 Process 98999 (systqmp) thread 0xffff800045ffe298 (301003) shared rwlock systqmp r = 0 (0xffffffff839d4af8) #0 witness_lock+0x5f1 #1 taskq_thread+0x12a #2 proc_trampoline+0x10 ddb{0}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 11063 12162K 12221K 166960K 12190 0 pcb 18 12K 12K 166960K 30 0 rtable 201 6K 7K 166960K 371 0 pf 32 17K 18K 166960K 50 0 ifaddr 35 6K 7K 166960K 46 0 ifgroup 47 2K 2K 166960K 60 0 sysctl 1 1K 9K 166960K 5 0 counters 66 36K 37K 166960K 72 0 ioctlops 0 0K 4K 166960K 1498 0 iov 0 0K 16K 166960K 4 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1297 82K 82K 166960K 1427 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 5K 166960K 4 0 VM map 2 1K 1K 166960K 2 0 sem 4 0K 0K 166960K 4 0 dirhash 12 2K 3K 166960K 21 0 ACPI 1734 201K 291K 166960K 11964 0 file desc 17 61K 89K 166960K 197 0 sigio 1 0K 0K 166960K 1 0 proc 71 115K 164K 166960K 557 0 subproc 71 4K 5K 166960K 98 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 2 0 in_multi 77 5K 7K 166960K 99 0 ether_multi 1 0K 0K 166960K 1 0 mrt 0 0K 0K 166960K 4 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 55 254K 254K 166960K 55 0 exec 0 0K 1K 166960K 389 0 fusefs mount 1 32K 32K 166960K 1 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 231 167K 175K 166960K 3479 0 UVM aobj 5 2K 2K 166960K 6 0 pinsyscall 42 84K 103K 166960K 1363 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 0K 166960K 2 0 NDP 10 0K 2K 166960K 29 0 temp 35 9118K 9130K 166960K 7484 0 kqueue 13 20K 29K 166960K 44 0 SYN cache 2 16K 16K 166960K 2 0 ddb{0}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 28 0 0 1 0 1 1 0 8 0 rtpcb 120 39 0 36 1 0 1 1 0 8 0 rtentry 176 112 0 23 6 0 6 6 0 8 0 unpcb 144 64 0 43 1 0 1 1 0 8 0 syncache 336 4 0 4 1 0 1 1 0 8 1 tcpcb 736 21 0 17 1 0 1 1 0 8 0 arp 136 18 0 4 1 0 1 1 0 8 0 inpcb 328 102 0 92 2 0 2 2 0 8 0 nd6 152 24 0 6 1 0 1 1 0 8 0 kcovpl 48 10 0 3 1 0 1 1 0 8 0 pfstscr 40 2 0 2 1 0 1 1 0 8 1 pfosfp 40 1428 0 1005 5 0 5 5 0 8 0 pfosfpen 112 1428 0 714 21 0 21 21 0 8 0 pfstitem 24 25 0 0 1 0 1 1 0 8 0 pfstkey 128 27 0 2 1 0 1 1 0 8 0 pfstate 448 25 0 1 3 0 3 3 0 8 0 pfrule 1360 22 0 16 2 0 2 2 0 8 0 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 458 0 50 29 0 29 29 0 8 1 art_table 40 459 0 50 5 0 5 5 0 8 0 art_node 32 112 0 21 1 0 1 1 0 8 0 semapl 72 2 0 0 1 0 1 1 0 8 0 shmpl 112 3 0 1 1 0 1 1 0 8 0 pool(0xffffffff83aac8a8:shmpl): page inconsistency: page 0xfffff2806550a000; 32 on list, 2 missing, 35 items per page dirhash 1024 23 0 6 3 0 3 3 0 8 0 dino2pl 256 1682 0 213 93 0 93 93 0 8 0 ffsino 296 1682 0 213 114 0 114 114 0 8 0 nchpl 144 1936 0 228 64 0 64 64 0 8 0 vnodes 216 1814 0 0 101 0 101 101 0 8 0 namei 1024 6080 0 6079 1 0 1 1 0 8 0 percpumem 16 52 0 3 1 0 1 1 0 8 0 kstatmem 264 29 0 6 2 0 2 2 0 8 0 scsiplug 72 1 0 1 1 0 1 1 0 8 1 scxspl 216 7164 0 7163 9 1 8 8 1 8 7 plimitpl 152 39 0 20 1 0 1 1 0 8 0 sigapl 424 511 0 464 7 0 7 7 0 8 1 knotepl 120 299 0 0 10 0 10 10 0 8 0 kqueuepl 224 38 0 29 1 0 1 1 0 8 0 pipepl 344 139 0 112 3 0 3 3 0 8 0 fdescpl 528 495 0 464 3 0 3 3 0 8 0 filepl 160 1921 0 1696 11 0 11 11 0 8 0 lockfpl 104 34 0 31 1 0 1 1 0 8 0 lockfspl 48 17 0 14 1 0 1 1 0 8 0 sessionpl 144 30 0 19 1 0 1 1 0 8 0 pgrppl 48 41 0 22 1 0 1 1 0 8 0 ucredpl 104 135 0 120 1 0 1 1 0 8 0 zombiepl 144 464 0 464 1 0 1 1 0 8 1 processpl 1232 511 0 464 5 0 5 5 0 8 1 procpl 664 606 0 549 6 0 6 6 0 8 0 sosppl 176 1 0 1 1 0 1 1 0 8 1 sockpl 752 205 0 171 5 0 5 5 0 8 1 mcl64k 65536 3 0 0 1 0 1 1 0 8 0 mcl16k 16384 3 0 0 1 0 1 1 0 8 0 mcl12k 12288 1 0 0 1 0 1 1 0 8 0 mcl8k 8192 2 0 0 1 0 1 1 0 8 0 mcl4k 4096 117 0 0 15 0 15 15 0 8 0 mcl2k 2048 35 0 0 5 0 5 5 0 8 0 mextrefs 64 33 0 0 1 0 1 1 0 8 0 mtagpl 96 4 0 0 1 0 1 1 0 8 0 mbufpl 256 381 0 0 24 0 24 24 0 8 0 bufpl 272 2613 0 105 168 0 168 168 0 8 0 anonpl 32 3796 0 0 31 0 31 31 0 247 0 amapchunkpl 152 9363 0 8896 20 0 20 20 0 158 1 amappl16 200 1003 0 964 4 1 3 4 0 8 0 amappl15 192 3 0 3 1 1 0 1 0 8 0 amappl14 184 432 0 431 1 0 1 1 0 8 0 amappl13 176 123 0 111 1 0 1 1 0 8 0 amappl12 168 746 0 717 2 0 2 2 0 8 0 amappl11 160 32 0 31 1 0 1 1 0 8 0 amappl10 152 65 0 51 1 0 1 1 0 8 0 amappl9 144 277 0 277 1 1 0 1 0 8 0 amappl8 136 101 0 99 1 0 1 1 0 8 0 amappl7 128 144 0 131 1 0 1 1 0 8 0 amappl6 120 153 0 152 1 0 1 1 0 8 0 amappl5 112 101 0 89 1 0 1 1 0 8 0 amappl4 104 290 0 272 1 0 1 1 0 8 0 amappl3 96 1798 0 1689 4 1 3 3 0 8 0 amappl2 88 549 0 486 2 0 2 2 0 8 0 amappl1 80 10829 0 10231 14 0 14 14 0 8 0 amappl 88 2737 0 2579 4 0 4 4 0 92 0 uvmvnodes 80 101 0 0 3 0 3 3 0 8 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 254 0 254 2 1 1 1 0 8 1 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 5 0 1 1 0 1 1 0 8 0 uaddrrnd 24 495 0 464 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 495 0 464 1 0 1 1 0 8 0 vmmpekpl 168 6147 0 6106 3 0 3 3 0 8 0 vmmpepl 168 40157 0 38245 87 0 87 87 0 357 1 vmsppl 488 494 0 464 5 0 5 5 0 8 1 rwobjpl 80 14305 0 13268 23 0 23 23 0 8 1 pdppl 4096 997 0 928 97 26 71 83 0 8 2 pvpl 32 11622 0 0 94 0 94 94 0 265 0 pmappl 256 494 0 464 3 0 3 3 0 8 0 extentpl 40 46 0 28 1 0 1 1 0 8 0 phpool 112 452 0 28 13 0 13 13 0 8 0 ddb{0}> machine ddbcpu 0 Invalid cpu 0 ddb{0}> trace db_enter() at db_enter+0x25 panic(ffffffff834ad82e) at panic+0x1e5 pool_do_get(ffffffff83aac8a8,9,ffff80003c3ee528) at pool_do_get+0x5df pool_get(ffffffff83aac8a8,9) at pool_get+0x162 shmget_allocate_segment(ffff800045fe67f0,ffff80003c3ee780,0,ffff80003c3ee6d0) at shmget_allocate_segment+0x1af sys_shmget(ffff800045fe67f0,ffff80003c3ee780,ffff80003c3ee6d0) at sys_shmget+0x195 syscall(ffff80003c3ee780) at syscall+0xb17 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xdfbaa9b1d60, count: -8 ddb{0}> machine ddbcpu 1 Stopped at x86_ipi_db+0x27: addq $0x8,%rsp x86_ipi_db(ffff80002999dff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __mp_lock(ffffffff83a58c00) at __mp_lock+0x199 ktrsysret(ffff80002a222540,5b,0,ffff80002a2e6620) at ktrsysret+0xde syscall(ffff80002a2e66d0) at syscall+0xa51 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7c63bf4baa60, count: 8 ddb{1}> trace x86_ipi_db(ffff80002999dff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __mp_lock(ffffffff83a58c00) at __mp_lock+0x199 ktrsysret(ffff80002a222540,5b,0,ffff80002a2e6620) at ktrsysret+0xde syscall(ffff80002a2e66d0) at syscall+0xa51 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7c63bf4baa60, count: -7