last executing test programs: 13.596212531s ago: executing program 2 (id=3): open(&(0x7f0000000080)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7949) select(0x40, &(0x7f00000000c0)={0x8, 0x0, 0x3, 0x2, 0x100000, 0x7, 0x2, 0x3}, 0x0, 0x0, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x615, 0x0) r0 = semget$private(0x0, 0x4, 0x2c3) semop(r0, &(0x7f0000000040)=[{0x4, 0xf21b, 0x800}], 0x1) r1 = syz_open_pts() fcntl$lock(r1, 0x9, &(0x7f0000000140)={0xfffffffffffffca3, 0x0, 0x0, 0x100000001, 0x2}) setrlimit(0x8, &(0x7f0000000180)={0x42, 0x65}) r2 = syz_open_pts() ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000001c0)={0xb, 0x4, r2}) r4 = openat$pf(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) ioctl$TIOCSETA(r4, 0xc0284459, &(0x7f0000000240)={0x48, 0xfffffffd, 0x4, 0x5, "0003000700", 0x9a0, 0x8007}) r5 = open(&(0x7f0000000280)='./file0\x00', 0x615, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) select(0x40, &(0x7f0000000300)={0x400}, &(0x7f0000000340)={0x0, 0x1}, &(0x7f0000000380)={0xcb}, &(0x7f00000003c0)={0x0, 0x4}) r6 = socket(0x2, 0x3, 0x0) setsockopt$inet_opts(r6, 0x0, 0x15, &(0x7f0000000400), 0x0) lseek(r6, 0x7, 0x3) ioctl$DIOCRDELADDRS(r3, 0xc4504444, &(0x7f0000000440)={{'./file0\x00', './file0\x00', 0x5c, 0x6}, &(0x7f00000008c0)=[{@broadcast, '\x00', './file0\x00', 0xffff791c, 0x2, 0x2, 0x0, 0xb, 0x9, 0x37}, {@local={0xac, 0x14, 0x0}, '\x00', './bus\x00', 0x2e, 0x800, 0x0, 0xf, 0x3, 0x2}], 0x7, 0x2, 0x5, 0x81, 0x0, 0xeb38, 0x0, 0x9e}) closefrom(r5) socket$inet(0x2, 0x2, 0x0) ioctl$DIOCIGETIFACES(0xffffffffffffffff, 0xc0284457, &(0x7f0000000940)={'./file0\x00', &(0x7f0000000980)=""/66, 0x2, 0x0, 0x2, 0xfffffffe}) ktrace(&(0x7f0000000a00)='./file0\x00', 0x4, 0x538, 0x0) syz_emit_ethernet(0x1000e, &(0x7f0000000a40)={@random="b905f0ffffff", @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0xffb0, 0x0, 0x1, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0x0}, @broadcast}, @icmp=@info_request={0xf, 0x0, 0x0, 0x205c, 0x3}}}}}) setrlimit(0x1, &(0x7f0000000a80)={0xad, 0x1fd}) ftruncate(0xffffffffffffffff, 0x8531) mknod(&(0x7f0000000ac0)='./bus\x00', 0x2000, 0x6d4) semctl$SETALL(r0, 0x0, 0x9, &(0x7f0000000000)=[0x3]) 13.400403735s ago: executing program 2 (id=17): mkdir(&(0x7f00000000c0)='./file2\x00', 0xc1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt(r0, 0x6, 0x2, &(0x7f0000000040)="c16a187b", 0x4) sysctl$kern(&(0x7f0000000000)={0x1, 0x28}, 0x2, 0x0, 0x0, 0x0, 0x0) rename(&(0x7f0000000140)='./file2\x00', &(0x7f0000000180)='./file0\x00') 13.151355824s ago: executing program 2 (id=20): setrlimit(0x1, &(0x7f0000000000)={0xfffffffffff7fffa, 0xffffffffffffffff}) (async) r0 = open(&(0x7f0000000080)='./file1\x00', 0x18289, 0x1f5) write(r0, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) (async) acct(&(0x7f0000000280)='./file1\x00') (async) msgsnd(0x0, 0x0, 0x401, 0x0) (async) msgsnd(0x0, 0x0, 0x401, 0x0) mknod(&(0x7f0000000200)='./file0\x00', 0x2000, 0x0) (async) r1 = open(&(0x7f00000003c0)='./file0\x00', 0x80, 0x83) ioctl$TIOCMSET(r1, 0x8004746d, &(0x7f0000000400)=0x9) setuid(0xffffffffffffffff) (async) execve(&(0x7f0000000580)='./file0\x00', &(0x7f0000000640)=[&(0x7f00000005c0)=':\x00', &(0x7f0000000600)=':\x00'], &(0x7f00000007c0)=[&(0x7f0000000680)='c\x00', &(0x7f00000006c0)='c\x00', &(0x7f0000000700)='#^\x00', &(0x7f0000000740)='-\x00', &(0x7f0000000780)='\x00']) (async) rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)='./file0\x00') unveil(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)='c\x00') (async) r2 = socket$inet(0x2, 0x8000, 0x0) getsockopt(r2, 0x0, 0x1f, 0x0, 0x0) (async) r3 = socket$unix(0x1, 0x1, 0x0) (async) r4 = socket(0x18, 0x3, 0x3a) sendmsg(r4, &(0x7f0000000440)={&(0x7f0000000480)=@in6={0x1c, 0x18, 0x0, 0x4, "feff000000002000000000000000004b", 0x3}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000540)="63d6d1fa99be0254baa1792ec060774d26e08091", 0x14}], 0x1, 0x0}, 0x0) bind$unix(r3, &(0x7f0000000100)=@abs={0x9, 0x1, 0x0, 0x2}, 0x8) (async) linkat(r0, &(0x7f0000000300)='./file1\x00', r0, &(0x7f0000000340)='./file2\x00', 0x0) (async) mkdir(&(0x7f0000000040)='./file2\x00', 0xc1) (async) rename(&(0x7f0000000180)='./file2\x00', &(0x7f00000001c0)='./file0\x00') mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/../file0\x00', 0x2000, 0x5cd9) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) 8.628106003s ago: executing program 2 (id=20): setrlimit(0x1, &(0x7f0000000000)={0xfffffffffff7fffa, 0xffffffffffffffff}) (async) r0 = open(&(0x7f0000000080)='./file1\x00', 0x18289, 0x1f5) write(r0, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) (async) acct(&(0x7f0000000280)='./file1\x00') (async) msgsnd(0x0, 0x0, 0x401, 0x0) (async) msgsnd(0x0, 0x0, 0x401, 0x0) mknod(&(0x7f0000000200)='./file0\x00', 0x2000, 0x0) (async) r1 = open(&(0x7f00000003c0)='./file0\x00', 0x80, 0x83) ioctl$TIOCMSET(r1, 0x8004746d, &(0x7f0000000400)=0x9) setuid(0xffffffffffffffff) (async) execve(&(0x7f0000000580)='./file0\x00', &(0x7f0000000640)=[&(0x7f00000005c0)=':\x00', &(0x7f0000000600)=':\x00'], &(0x7f00000007c0)=[&(0x7f0000000680)='c\x00', &(0x7f00000006c0)='c\x00', &(0x7f0000000700)='#^\x00', &(0x7f0000000740)='-\x00', &(0x7f0000000780)='\x00']) (async) rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)='./file0\x00') unveil(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)='c\x00') (async) r2 = socket$inet(0x2, 0x8000, 0x0) getsockopt(r2, 0x0, 0x1f, 0x0, 0x0) (async) r3 = socket$unix(0x1, 0x1, 0x0) (async) r4 = socket(0x18, 0x3, 0x3a) sendmsg(r4, &(0x7f0000000440)={&(0x7f0000000480)=@in6={0x1c, 0x18, 0x0, 0x4, "feff000000002000000000000000004b", 0x3}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000540)="63d6d1fa99be0254baa1792ec060774d26e08091", 0x14}], 0x1, 0x0}, 0x0) bind$unix(r3, &(0x7f0000000100)=@abs={0x9, 0x1, 0x0, 0x2}, 0x8) (async) linkat(r0, &(0x7f0000000300)='./file1\x00', r0, &(0x7f0000000340)='./file2\x00', 0x0) (async) mkdir(&(0x7f0000000040)='./file2\x00', 0xc1) (async) rename(&(0x7f0000000180)='./file2\x00', &(0x7f00000001c0)='./file0\x00') mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/../file0\x00', 0x2000, 0x5cd9) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) 8.507790011s ago: executing program 5 (id=54): r0 = shmget$private(0x0, 0x1000, 0x2, &(0x7f0000ffc000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) (async, rerun: 32) r1 = socket$inet(0x18, 0x3, 0x102) (rerun: 32) sendmsg(r1, &(0x7f00000001c0)={&(0x7f0000000200)=@in6={0x1c, 0x18, 0x0, 0x7, '\x00', 0x101}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000280)="638802000000339a6578b6e0822b5466abdd612dd68e59adfecf93233e", 0x1d}, {&(0x7f00000002c0)="a2", 0x1}, {&(0x7f0000000300)="3a01c42b3fe12e2f861d", 0xa}], 0x3, 0x0}, 0x402) (async) r2 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000340)="4239b99039cd96c5ac732d745c24e5fa5d8d240728816239277357eab87c4e9831c6ccff473bb5a4b3eebb137a7f65df228d9a1532ccad7212d4205342f543f604ca9a13bb4a6b72bc614ed5a35bc12422a0e0433b5e3b9fb1c40a8d19cbe363a315b45e5d540d5e574d82d66d78e54bd32d518ae9d26419875f6fbfa974761b98081f1f2730be7e01e2474b890236b0a333db4b0292459d4d0ba36fdc117acc2ab5c0e935f8373e4a7d38708df7d0d9ab2712c3b61625414c82bad42b206641090af6d08972ec50014a2a25851df10ca04effe02ecfe6fed95f2098403228727c23f50ac5af4b", 0xe7}, {&(0x7f00000000c0)="5c42ccab0d318b15b454ebb6bd708200ca02b689b02d1bf37a462d41", 0x1c}], 0x2) writev(r2, &(0x7f0000000100)=[{&(0x7f0000000140)="518f7ce11d64b05fb2d4fcab2e94bfc3f9dc2da527b9a0cf55574f6c", 0x1c}], 0x1) unveil(0x0, &(0x7f0000000180)='w\x00') (async) r3 = shmat(r0, &(0x7f0000fee000/0x3000)=nil, 0x3000) shmdt(r3) 7.677819177s ago: executing program 0 (id=113): r0 = socket$inet6(0x18, 0x8000, 0x1) bind$inet6(r0, &(0x7f0000000040)={0x1c, 0x18, 0x1, 0x4, '\x00', 0x407}, 0x1c) syz_emit_ethernet(0x136, &(0x7f0000000100)={@random="66ba1f207303", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x100, 0x6, 0x1, @rand_addr="000000000100000000007e000100", @local={0xfe, 0x80, '\x00', 0x0}, {[], @udp={{0x0, 0x3, 0x8}, {"76e3dc7c401940121257a4bd28e12b54e9206db167dd781a6b0b8cc73cf2eca46e9bb0294680667475b1e0bc4d280a58ae45e4e7a905b855aac47a8b4d4e518b3719c02e52e6aaca7190648ec958984c9a478c1c72a9112b704f3b50fb5760eb8ce71e46cfe230b0ff8329dea9af7f1d46273f1d27ab0ba5714786d69887dca992fdba0ef2dd85a4e89c95cd83363e83d7dffb2022cb67b3b1c89e38c4cba7268a83e6b8776429172412e739dd89ae2924f4dcd97bd1bef6c40ec208e31748d3d42c545816a6f5eddc80604e04497b030bab51e43e44045945bfbe92bbaff5eb911a05bf3fdc12f5af46e4483706be657aed8c92522350e3"}}}}}}}) connect(r0, &(0x7f0000000000)=@un=@file={0x8, 0x0, './file0\x00'}, 0xa) 6.421850493s ago: executing program 0 (id=115): r0 = socket(0x1, 0x8002, 0x1) r1 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$WSMOUSEIO_SETPARAMS(r1, 0x80105728, &(0x7f0000000080)={&(0x7f00000000c0)=[{0x2, 0x7f}, {0x22, 0x67}], 0x2}) r2 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000100), 0x8, 0x0) ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000140)={0x0, [{0x2}, {0x3}, {0x0, 0x1}, {0x3}, {0x2, 0x4000}, {0x2, 0xf}, {0x0, 0x10}, {0x3, 0x1000001}, {}, {0x4}, {0x1}, {0x1}, {0x1, 0x2}, {0x1, 0x100000}, {0x2}, {}, {0x3, 0x4}, {0x1, 0x4}, {0x2, 0xffffffff}, {}, {}, {0x0, 0x5}, {0x2}, {0x2}, {0x0, 0x2000}, {0x0, 0x7ff}, {0x0, 0x1}, {0x0, 0x40000000}, {0x2, 0x80000000}, {0x1, 0x6}, {0x0, 0x8}, {0x1}]}) ioctl$TIOCSETD(0xffffffffffffffff, 0x8004741b, &(0x7f0000000280)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000d40)={0xffffffffffffffff}) getsockopt$sock_cred(r3, 0xffff, 0x1022, &(0x7f0000000d80), &(0x7f0000000dc0)=0xc) recvmsg(r3, &(0x7f0000000e00)={&(0x7f0000000e40)=@in6, 0x1c, &(0x7f0000000e80)=[{&(0x7f0000000ec0)=""/190, 0xbe}, {&(0x7f0000000f80)=""/245, 0xf5}, {&(0x7f0000001080)=""/46, 0x2e}], 0x3, &(0x7f00000010c0)=""/97, 0x61}, 0x3007) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$VMM_IOC_CREATE(r2, 0xca605601, &(0x7f00000002c0)={0x10, 0x9, [{&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x9}, {&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0xffffffffffff822d}, {&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x10}, {&(0x7f0000ffa000/0x3000)=nil, &(0x7f000002b000/0x2000)=nil, 0x3}, {&(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x10000}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0xffffffffffffff89}, {&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0xffffffffffffffff}, {&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x4000000001000a}, {&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000407000/0x1000)=nil, 0x6}, {&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x762c}, {&(0x7f0000ffb000/0x4000)=nil, &(0x7f00000d1000/0x2000)=nil, 0x80000000000006}, {&(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x4}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x2}, {&(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x7fffffff}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f000059f000/0x4000)=nil, 0x8001}, {&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, 0xfffffffe}], './file0\x00', 0x5, 0x9}) connect$unix(r0, &(0x7f0000000000)=@file={0x10, 0x1, './file1\x00'}, 0xa) 6.42100835s ago: executing program 0 (id=116): r0 = shmget(0x2, 0x3000, 0x201, &(0x7f0000ffc000/0x3000)=nil) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000100)={0x48, &(0x7f0000000140)}) r2 = socket(0x18, 0x3, 0x0) r3 = socket$inet6(0x18, 0x3, 0x2) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x80087467, &(0x7f0000001300)={0x1, 0x1, 0x9, 0x3ff}) connect$inet6(r3, &(0x7f0000000140)={0x1c, 0x18, 0x1, 0x85, "fe80000400000000000000000000fdff", 0x9}, 0x1c) setsockopt$sock_int(r3, 0xffff, 0x2000, &(0x7f0000000200)=0x200, 0x4) sendmmsg(r3, &(0x7f0000000240)={{0x0, 0x0, &(0x7f0000000280)=[{0x0}, {&(0x7f00000002c0)="8dfbd47ae67a553e804923abb4bdd1bebd0cee9877a10b0917ca", 0x1a}, {&(0x7f0000000300)="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", 0xf57}], 0x3, 0x0}}, 0x38, 0x0) r4 = socket$inet(0x2, 0x3, 0x20) sysctl$net_inet_ip(&(0x7f0000001380)={0x4, 0x2, 0x0, 0x17}, 0x4, &(0x7f00000013c0)="0c7291f1fedb7df173c34660d0e43b5b7e428f1baa9b4a6e4f929a645b5d3ba639913eafdddb8b343dcb31c07c7d2fc8808250bbc5d1677934ef7d6c7583528c7275531645a072e0dee70bed6ecc2675184d938a35bd210eb7f8d9a1222834b30fa61026f6ecbb8c7d12cc1d276065ad28652bf13a484a5098401c92f45f1337df86bf49e797b8c81dd4259421a887caab32c67bc346188b87ba879f50f8b3f95f8456f22850033780a234f6a31d52429d5f8aa7b2addee4c166cf3a02102631ef584be343dfd380f201e4d60db7eb", &(0x7f00000014c0)=0xcf, &(0x7f0000001500)="470eba633aa1aeb2eb3d608d794f99f319f21078438a68f83fceca323b7c6dda91a38aa68b8f7e3963c0d33cb2ff7c9225481b6ace66cd841990a2abeef802132480b255cde6ab6e73da5648951531f12a29fa292250fb29a8e0178674045513de9293ef91c2401b6637e01d5e4337e940fc48a0c228f88d6ad186db7bfa1c4b1645f042ef374fed79954a6916c5ee6362268d90375541e8c75033a99ab424b800b3cb022742df779585dff6", 0xac) setsockopt$inet_opts(r4, 0x0, 0x67, &(0x7f0000001340)="ea00", 0x2) ioctl$FIONREAD(r2, 0xc0106924, &(0x7f0000000180)) ioctl$FIONREAD(r2, 0x80206999, &(0x7f00000001c0)) getsockopt$sock_cred(r1, 0xffff, 0x1024, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) setuid(r5) r6 = socket(0x2, 0x2, 0x0) connect$inet(r6, &(0x7f0000001280)={0x10, 0x2, 0x3, 0xb}, 0x10) sendmmsg(r6, &(0x7f00000012c0)={{0x0, 0x61, 0x0, 0x0, &(0x7f0000001300)=ANY=[], 0xa0}}, 0x38, 0x8) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000080)={{r5, 0x0, 0x0, 0x0, 0x8, 0x10, 0x2}, 0x40, 0x0, 0x0, 0x466, 0x0, 0x6, 0x1, 0x401, 0x3, 0x9, 0x8000000000000000}) setreuid(r5, 0x0) setreuid(0x0, 0xffffffffffffffff) 6.419501562s ago: executing program 6 (id=100): openat$bpf(0xffffffffffffff9c, &(0x7f0000000140), 0x20000, 0x0) (async) socketpair(0x18, 0x4000, 0x29, 0x0) (async) sysctl$net_inet_tcp(&(0x7f0000000180)={0x7, 0x2, 0x2, 0x1}, 0x4, 0x0, 0x0, 0x0, 0x0) (async) sysctl$net_inet_ip(&(0x7f00000001c0)={0x4, 0x2, 0x0, 0x1b}, 0x4, &(0x7f0000000200)="ee41ad5a", &(0x7f0000000240)=0x4, 0x0, 0x0) (async) setsid() socket$unix(0x1, 0x1, 0x0) setpgid(0x0, 0x0) (async) setgroups(0x0, 0x0) (async) r0 = semget$private(0x0, 0x4, 0x11) setgid(0xffffffffffffffff) (async) setuid(0xffffffffffffffff) (async) r1 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) write(r1, 0x0, 0x0) semctl$GETALL(r0, 0x0, 0x6, 0x0) r2 = socket$inet(0x18, 0x3, 0x102) sendmsg(r2, &(0x7f0000000300)={&(0x7f0000000340)=@in6={0x1c, 0x18, 0x0, 0x7, '\x00', 0x101}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000003c0)="638802000000339afe51f6f2efa24a85abdd612dd68e59adfecf9323100084410a8591426ee03e", 0x27}, {&(0x7f0000000400)="a2", 0x1}, {&(0x7f0000000440)="0601c42b3fe12e2f861d72ab2950f9c36e9fc97007db16", 0x17}, {&(0x7f0000000480)="91a83cd126a859d9c4fb4fab96beae936f039af6551a2d98c7d8ebe38fa9076b042c6f02b5a658025e88a06bcc90ff4ea4d3a23dee295b3d65c6c675a562f928ee96067c00912b966c0d6bf2ef5e57fa27974d87d2c3440de97452691028279b", 0x60}], 0x4, 0x0}, 0x402) sysctl$kern(&(0x7f00000002c0)={0xa}, 0x7, &(0x7f0000000300), 0x0, 0x0, 0x24) (async) sysctl$hw(&(0x7f0000000280)={0x6, 0x15}, 0x2, &(0x7f0000001280), 0x0, 0x0, 0x0) (async) sysctl$hw(&(0x7f0000000000)={0x6, 0x1a}, 0x2, &(0x7f0000000040)="260402592c4717af696de029c200dec879c2", &(0x7f0000000080)=0x12, &(0x7f00000000c0)="8db0eb1799976b3495403056a7c28907d235e8101735d4fad192c39bceaf140fa10e7ffc222833355313966409a5591e5b77aa6352728445fda12d82cca493ae4b0ad01201c022e2826de50768659ff49e906188c60e618f", 0x58) 6.419353597s ago: executing program 6 (id=117): r0 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000080), 0x89, 0x0) (async) r1 = socket(0x2, 0x1, 0x0) (async) setgid(0xffffffffffffffff) (async) r2 = syz_open_pts() (async) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt(r3, 0x6, 0x10, &(0x7f00000000c0), 0x0) (async) fcntl$lock(r2, 0x8, &(0x7f0000000100)={0x1, 0x2, 0x5, 0x1, 0x2}) flock(r2, 0x1) r4 = getpgid(0xffffffffffffffff) fcntl$lock(r0, 0x8, &(0x7f00000001c0)={0x3, 0x0, r4, 0x100000001}) (async) syz_open_pts() syz_open_pts() syz_open_pts() (async) r5 = socket$inet(0x2, 0x3, 0x102) (async) r6 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x8, 0x0) ioctl$BIOCGBLEN(r6, 0x40044266, &(0x7f0000000040)) (async) dup2(r5, r1) (async) ioctl$WSMOUSEIO_SETPARAMS(r0, 0x80047476, &(0x7f0000000180)={0x0}) (async) setpgid(r4, r4) 6.199967987s ago: executing program 0 (id=119): syz_emit_ethernet(0x137, &(0x7f0000001f00)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb080040"]) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)=[&(0x7f0000000040)='$#.\x00', &(0x7f0000000080)='(],,\xee:\x00', &(0x7f00000000c0)='\x00', &(0x7f0000000100)='\xa5\x00', &(0x7f0000000140)='{:+\x00', &(0x7f0000000180)='\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000200)='\x00'], &(0x7f0000000480)=[&(0x7f0000000280)='$\x00', &(0x7f00000002c0)='%\'!:\x00', &(0x7f0000000300)='#&.F\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='\x99^$],@(+}\x00', &(0x7f00000003c0)=',/\x84:/\x00', &(0x7f0000000400)=']{,\xd0\x00', &(0x7f0000000440)='\x00']) 6.194348882s ago: executing program 5 (id=54): r0 = shmget$private(0x0, 0x1000, 0x2, &(0x7f0000ffc000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) (async, rerun: 32) r1 = socket$inet(0x18, 0x3, 0x102) (rerun: 32) sendmsg(r1, &(0x7f00000001c0)={&(0x7f0000000200)=@in6={0x1c, 0x18, 0x0, 0x7, '\x00', 0x101}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000280)="638802000000339a6578b6e0822b5466abdd612dd68e59adfecf93233e", 0x1d}, {&(0x7f00000002c0)="a2", 0x1}, {&(0x7f0000000300)="3a01c42b3fe12e2f861d", 0xa}], 0x3, 0x0}, 0x402) (async) r2 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000340)="4239b99039cd96c5ac732d745c24e5fa5d8d240728816239277357eab87c4e9831c6ccff473bb5a4b3eebb137a7f65df228d9a1532ccad7212d4205342f543f604ca9a13bb4a6b72bc614ed5a35bc12422a0e0433b5e3b9fb1c40a8d19cbe363a315b45e5d540d5e574d82d66d78e54bd32d518ae9d26419875f6fbfa974761b98081f1f2730be7e01e2474b890236b0a333db4b0292459d4d0ba36fdc117acc2ab5c0e935f8373e4a7d38708df7d0d9ab2712c3b61625414c82bad42b206641090af6d08972ec50014a2a25851df10ca04effe02ecfe6fed95f2098403228727c23f50ac5af4b", 0xe7}, {&(0x7f00000000c0)="5c42ccab0d318b15b454ebb6bd708200ca02b689b02d1bf37a462d41", 0x1c}], 0x2) writev(r2, &(0x7f0000000100)=[{&(0x7f0000000140)="518f7ce11d64b05fb2d4fcab2e94bfc3f9dc2da527b9a0cf55574f6c", 0x1c}], 0x1) unveil(0x0, &(0x7f0000000180)='w\x00') (async) r3 = shmat(r0, &(0x7f0000fee000/0x3000)=nil, 0x3000) shmdt(r3) 6.193037895s ago: executing program 0 (id=121): setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) r0 = open(&(0x7f0000000080)='./file1\x00', 0x18289, 0x1f5) write(r0, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) acct(&(0x7f0000000280)='./file1\x00') r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000040)=@file={0x6, 0x1, './file0\x00'}, 0xa) closefrom(r1) ioctl$DIOCADDRULE(r0, 0xcd604404, &(0x7f0000000500)={0xffff, 0x8, 0xff, './file0\x00', './file0\x00', 0x0, "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"}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket(0x2, 0x1001, 0x0) sendmsg$unix(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x409) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) (async) open(&(0x7f0000000080)='./file1\x00', 0x18289, 0x1f5) (async) write(r0, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) (async) acct(&(0x7f0000000280)='./file1\x00') (async) socket$unix(0x1, 0x1, 0x0) (async) bind$unix(r1, &(0x7f0000000040)=@file={0x6, 0x1, './file0\x00'}, 0xa) (async) closefrom(r1) (async) ioctl$DIOCADDRULE(r0, 0xcd604404, &(0x7f0000000500)={0xffff, 0x8, 0xff, './file0\x00', './file0\x00', 0x0, "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"}) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) socket(0x2, 0x1001, 0x0) (async) sendmsg$unix(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x409) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) (async) 5.112752602s ago: executing program 6 (id=117): r0 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000080), 0x89, 0x0) (async) r1 = socket(0x2, 0x1, 0x0) (async) setgid(0xffffffffffffffff) (async) r2 = syz_open_pts() (async) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt(r3, 0x6, 0x10, &(0x7f00000000c0), 0x0) (async) fcntl$lock(r2, 0x8, &(0x7f0000000100)={0x1, 0x2, 0x5, 0x1, 0x2}) flock(r2, 0x1) r4 = getpgid(0xffffffffffffffff) fcntl$lock(r0, 0x8, &(0x7f00000001c0)={0x3, 0x0, r4, 0x100000001}) (async) syz_open_pts() syz_open_pts() syz_open_pts() (async) r5 = socket$inet(0x2, 0x3, 0x102) (async) r6 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x8, 0x0) ioctl$BIOCGBLEN(r6, 0x40044266, &(0x7f0000000040)) (async) dup2(r5, r1) (async) ioctl$WSMOUSEIO_SETPARAMS(r0, 0x80047476, &(0x7f0000000180)={0x0}) (async) setpgid(r4, r4) 5.109145858s ago: executing program 2 (id=20): setrlimit(0x1, &(0x7f0000000000)={0xfffffffffff7fffa, 0xffffffffffffffff}) (async) r0 = open(&(0x7f0000000080)='./file1\x00', 0x18289, 0x1f5) write(r0, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) (async) acct(&(0x7f0000000280)='./file1\x00') (async) msgsnd(0x0, 0x0, 0x401, 0x0) (async) msgsnd(0x0, 0x0, 0x401, 0x0) mknod(&(0x7f0000000200)='./file0\x00', 0x2000, 0x0) (async) r1 = open(&(0x7f00000003c0)='./file0\x00', 0x80, 0x83) ioctl$TIOCMSET(r1, 0x8004746d, &(0x7f0000000400)=0x9) setuid(0xffffffffffffffff) (async) execve(&(0x7f0000000580)='./file0\x00', &(0x7f0000000640)=[&(0x7f00000005c0)=':\x00', &(0x7f0000000600)=':\x00'], &(0x7f00000007c0)=[&(0x7f0000000680)='c\x00', &(0x7f00000006c0)='c\x00', &(0x7f0000000700)='#^\x00', &(0x7f0000000740)='-\x00', &(0x7f0000000780)='\x00']) (async) rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)='./file0\x00') unveil(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)='c\x00') (async) r2 = socket$inet(0x2, 0x8000, 0x0) getsockopt(r2, 0x0, 0x1f, 0x0, 0x0) (async) r3 = socket$unix(0x1, 0x1, 0x0) (async) r4 = socket(0x18, 0x3, 0x3a) sendmsg(r4, &(0x7f0000000440)={&(0x7f0000000480)=@in6={0x1c, 0x18, 0x0, 0x4, "feff000000002000000000000000004b", 0x3}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000540)="63d6d1fa99be0254baa1792ec060774d26e08091", 0x14}], 0x1, 0x0}, 0x0) bind$unix(r3, &(0x7f0000000100)=@abs={0x9, 0x1, 0x0, 0x2}, 0x8) (async) linkat(r0, &(0x7f0000000300)='./file1\x00', r0, &(0x7f0000000340)='./file2\x00', 0x0) (async) mkdir(&(0x7f0000000040)='./file2\x00', 0xc1) (async) rename(&(0x7f0000000180)='./file2\x00', &(0x7f00000001c0)='./file0\x00') mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/../file0\x00', 0x2000, 0x5cd9) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) 4.751007553s ago: executing program 5 (id=54): r0 = shmget$private(0x0, 0x1000, 0x2, &(0x7f0000ffc000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) (async, rerun: 32) r1 = socket$inet(0x18, 0x3, 0x102) (rerun: 32) sendmsg(r1, &(0x7f00000001c0)={&(0x7f0000000200)=@in6={0x1c, 0x18, 0x0, 0x7, '\x00', 0x101}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000280)="638802000000339a6578b6e0822b5466abdd612dd68e59adfecf93233e", 0x1d}, {&(0x7f00000002c0)="a2", 0x1}, {&(0x7f0000000300)="3a01c42b3fe12e2f861d", 0xa}], 0x3, 0x0}, 0x402) (async) r2 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000340)="4239b99039cd96c5ac732d745c24e5fa5d8d240728816239277357eab87c4e9831c6ccff473bb5a4b3eebb137a7f65df228d9a1532ccad7212d4205342f543f604ca9a13bb4a6b72bc614ed5a35bc12422a0e0433b5e3b9fb1c40a8d19cbe363a315b45e5d540d5e574d82d66d78e54bd32d518ae9d26419875f6fbfa974761b98081f1f2730be7e01e2474b890236b0a333db4b0292459d4d0ba36fdc117acc2ab5c0e935f8373e4a7d38708df7d0d9ab2712c3b61625414c82bad42b206641090af6d08972ec50014a2a25851df10ca04effe02ecfe6fed95f2098403228727c23f50ac5af4b", 0xe7}, {&(0x7f00000000c0)="5c42ccab0d318b15b454ebb6bd708200ca02b689b02d1bf37a462d41", 0x1c}], 0x2) writev(r2, &(0x7f0000000100)=[{&(0x7f0000000140)="518f7ce11d64b05fb2d4fcab2e94bfc3f9dc2da527b9a0cf55574f6c", 0x1c}], 0x1) unveil(0x0, &(0x7f0000000180)='w\x00') (async) r3 = shmat(r0, &(0x7f0000fee000/0x3000)=nil, 0x3000) shmdt(r3) 4.750964039s ago: executing program 7 (id=131): r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000001340), 0x10422, 0x0) ioctl$DIOCADDQUEUE(r0, 0xc148445d, &(0x7f0000002b40)={0xffffffbf, 0x10000, {'\x00', './file0\x00', './file0\x00', './file0/../file0', {{0x7, 0x5}, {0x7ff, 0x1ff}, 0xa1}, {{0x0, 0x3}, {0x2, 0x4}, 0x8}, {{0x5, 0x5}, {0x7fffffff}, 0x8}, {0x4, 0x7, 0xc5e4, 0x1}, 0x0, 0x10, 0x9, 0x7}}) 3.441152309s ago: executing program 7 (id=134): r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x82, 0x0) setitimer(0x2, &(0x7f00000000c0)={{0x3, 0x122800000000009}, {0x6, 0x8020000000000000}}, 0x0) sysctl$hw(&(0x7f0000000740)={0x6, 0x1}, 0x2, &(0x7f0000000780)="99c5069e7aab", &(0x7f00000007c0)=0x6, 0x0, 0x0) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f00000005c0)={0x1000, 0x9, 0x3, 0x3, 0x1000005, 0x4, 0x0, 0x10, [{0x8001, 0xc, 0x6, 0x10000}, {0xdfc, 0x7e4, 0x7f, 0x23}, {0x3b56, 0x10, 0x2, 0x8}, {0x1, 0x40000000, 0xb, 0x10000004}, {0x3, 0xfffffff8, 0x4dd3, 0x7ffffffc}, {0xfff, 0x71, 0x8e}, {0x5, 0x9, 0x6, 0xfffffff5}, {0x3, 0x0, 0xfffffffa, 0x3}, {0x4004, 0x8000eca, 0x9, 0xdac}, {0x5, 0x72800000, 0x4c, 0x20002}, {0x8, 0x8, 0x2, 0x369}, {0x3, 0x1, 0x2, 0x2}, {0x8, 0x7, 0x8, 0x70d80}, {0x2, 0x0, 0x80009, 0x8}, {0xa, 0x3fc, 0x398}, {0x5, 0x7, 0xd}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$TIOCSETA(r0, 0xcd60441a, &(0x7f0000000700)={0x8, 0x100, 0x8001, 0x403, "200000000a00000f000000aff0338a6b4fc6d700", 0x8, 0x7}) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x200, 0x186) ktrace(&(0x7f0000000140)='./file0\x00', 0x4, 0xd27d43220c7fd9f, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x2015, r1, 0x0) sysctl$net_inet_icmp(&(0x7f0000000000)={0x4, 0x2, 0x1, 0x1}, 0x4, &(0x7f0000000240)="8d386206194900c0b0983b9019e8b7c9edfef06135d8ffc327786704a33829de359e62586cdc0423d2099df3d8a67b16a2dc19ed92e95d71a750898808277b3bdb674f88a663ecf04cf5c70c24ed34e5a3f52f99181c592c86b69d173f35e0f42bdf506174f5834bd7a553bee337beac154358e7cd0e135576a635f6b784f7d7afe3014f0915fb9431991cbed2e390ef6998b47e0217267a5089792a11a3b06fa3de012305c9477318b931a562956200bce0714375a5152f1ed7dcd3f960d68c075cc823d19eb8f5c17e4f73ded700c104c3fdc7aef9a809c40e56eede", &(0x7f0000000340)=0xdd, &(0x7f0000000380)="09b76ce14d9c7ceb647294c9ee79d7705fb6dc47a406e1f791844b1a709484e5b19b52df64aea85553c7ed517e2be99b12e3ad40c7d37e390625c394efd14141b8fc936f10e602dd70fabd99d68ac101d40732a52e748108", 0x58) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000180)={{0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0xab}, 0x0, 0x0, 0x2, 0xc80000000000000, 0x4, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x7f}) sysctl$vm_swapencrypt(&(0x7f0000000040), 0x3, &(0x7f0000000400)="f7e28331141169a168880257caf3b7b8ad49c11a8411ba6dd1c07d274c0b1bcff5534239e2dced572d3500ab2d8b2f0ed2c7dc7f5c5b6491d5c851f9759dbbebcb8a0726e7dd5f40c5227235c7c1381ef33d3c5353b0f653433119605c4bcdf41d28bca4625af713d84fc3568a1202eb1b1c303814d49c02c82a3406dcb23503538377aa0fa8e7490e57fcd2e170fcc88071a561470438abdbe927a4aeaf89c88494073655f06a8adef95049863d47c9209faa4fd7453c1b71979bdebbb6e6d8a90ed4c8972d4a597e9811851af21bbed4a8d62c596db4fbda91af3e8238ca87496ef7d6293046c5c42c4b7686e102d3556df5142f2e42fc3f", &(0x7f0000000500)=0xf9, &(0x7f0000000540)="4f9405850f83e2dd078ad16111ebd1a708192c8688ac1d4cd1eff7d9ca8f1ba1cbb36750e9d9da023cdaa76cc221b3004cce43485d57e6720cba23f68f8d6c8831af02176fbab526d771066eefb6e4e2d20e623c5412104e6319", 0x5a) 3.221787076s ago: executing program 3 (id=135): mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e60) (async) r0 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x4, 0x4a, 0x2100009, 0x5c0, 0x1, 0x3, 0x5d7227f9, 0x10, [{0x3, 0x10007, 0x6, 0x71001}, {0x9, 0xc, 0x1, 0x2901f03c}, {0x1000008, 0xf88, 0x0, 0x9}, {0x1, 0x800, 0x800a}, {0x401, 0x200726, 0x2800, 0x7}, {0x2, 0x203, 0x2, 0x99}, {0xce1, 0x0, 0x4f8, 0x20a}, {0x6, 0x300, 0x57, 0x2}, {0x2, 0x10, 0x7, 0x8}, {0x8007, 0x8001, 0x0, 0x103}, {0x1cc, 0x10001, 0xfa, 0x1}, {0x5b9a, 0x0, 0xfffffffd, 0x1}, {0x7, 0x5, 0x200008, 0xb}, {0x29a71717, 0x80, 0x0, 0xc377}, {0x0, 0x427, 0x69}, {0x8000, 0x40, 0xe0, 0x30000}]}) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0x800, 0x0, 0x0, 0x0, 0x0}) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000380)='./file1\x00', 0x2000, 0x8052a) r1 = socket(0x18, 0x3, 0xa3) r2 = dup3(r1, r0, 0x10004) ioctl$VMM_IOC_CREATE(r2, 0xca605601, &(0x7f0000000f80)={0x10, 0x7, [{&(0x7f0000165000/0x1000)=nil, &(0x7f00004d7000/0x3000)=nil, 0x3, 0x1}, {&(0x7f00001dd000/0x1000)=nil, &(0x7f000072e000/0x3000)=nil, 0x3da}, {&(0x7f000060e000/0x4000)=nil, &(0x7f0000281000/0x2000)=nil, 0x0, 0x2}, {&(0x7f0000053000/0x4000)=nil, &(0x7f000049d000/0x1000)=nil, 0x10001}, {&(0x7f00000fc000/0x1000)=nil, &(0x7f0000376000/0x4000)=nil, 0x1}, {&(0x7f0000654000/0x2000)=nil, &(0x7f0000141000/0x2000)=nil, 0x1}, {&(0x7f00005ee000/0xa000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x47}, {&(0x7f0000508000/0x2000)=nil, &(0x7f000060b000/0x2000)=nil, 0xfb}, {&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x60da, 0x1}, {&(0x7f0000018000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0xfffffffffffffffa}, {&(0x7f0000172000/0x2000)=nil, &(0x7f00004b4000/0x2000)=nil, 0xffff, 0x1}, {&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000519000/0x1000)=nil, 0xa9}, {&(0x7f000023c000/0x4000)=nil, &(0x7f00004f0000/0x3000)=nil, 0xc6d0, 0x2}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f000058f000/0x3000)=nil, 0x100000001}, {&(0x7f0000ff7000/0x6000)=nil, &(0x7f0000528000/0x3000)=nil, 0x5, 0x2}, {&(0x7f00002eb000/0x1000)=nil, &(0x7f000036b000/0x3000)=nil, 0x0, 0x2}], './file1\x00', 0x1, 0x4}) (async) sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b10005016000009f05003f04070000000018", 0x12, 0x14, 0x0, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000040)={'tap', 0x0}) sendmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000400)="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", 0xac1}], 0x0, 0x0}, 0x8) (async) mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) (async) sysctl$hw(&(0x7f0000000f00)={0x6, 0x1d}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$ddb(&(0x7f0000000f40)={0x9, 0x5}, 0x2, 0x0, 0x0, &(0x7f0000000f80), 0x4) ioctl$FIONREAD(r1, 0x81206919, &(0x7f00000000c0)) (async) open(&(0x7f00000003c0)='./file0\x00', 0x80, 0x120) 2.469536468s ago: executing program 1 (id=137): r0 = socket$inet6(0x18, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0x1c, 0x18, 0x1, 0x4, "fffffef8000f00000000000207000001", 0x4cdee064}, 0x1c) setuid(0xee01) socket(0x24, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0x1c, 0x18, 0x1, 0xf1e, "000000008026885600000800", 0x1}, 0x1c) ioctl$VMM_IOC_WRITEREGS(0xffffffffffffffff, 0x82485608, &(0x7f00000003c0)={0x101, 0x1c, {[0x7, 0x9, 0x10, 0x1, 0x6, 0x9, 0x9, 0x1, 0x3, 0x6, 0x9, 0xffffffff, 0x9, 0x5, 0x4, 0x7ff, 0x4, 0xb69], [0x6, 0xf0fe, 0x7ff, 0x2, 0x401, 0x4, 0x9, 0x0, 0x5, 0x4], [0xffffffffffffffff, 0x2, 0x861b, 0x6, 0xffffffffffffffff, 0x9, 0x1], [0xd2, 0x26, 0xab0, 0xa, 0x400000001, 0x1], [{0x9, 0x40, 0x2, 0xffffffffffffffa3}, {0x6, 0x6, 0xff}, {0x9, 0x6e, 0x26, 0x12}, {0x1, 0xffffffff, 0x9003, 0xa}, {0x0, 0x6, 0x3, 0x7fffffffffffffff}, {0x3, 0x9, 0xc, 0x800}, {0x2, 0x0, 0xde}, {0x2, 0x9, 0xffffffff, 0xb}], {0x3, 0x6, 0x900000, 0x10}, {0xe42, 0x5, 0x7, 0x8000000000000001}}}) mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xc0e99db6de761f86, 0x0) r1 = open(&(0x7f00000006c0)='./file0\x00', 0x2, 0x0) sendto$unix(0xffffffffffffffff, &(0x7f0000000700)="b5263a85b689e8d32fc305a92b041c676a3403b80d1eb91e0e81d6e076027552a4c323ceda487bba51278a4e519497515cef12fa4ccb04fe80f11d88ed3888418c3bbaa022c49c295fc598679a4852696eae57578b728a578b97273ad4af", 0x5e, 0xa, 0x0, 0x0) ioctl$FIONREAD(r1, 0xc028698d, &(0x7f0000000780)) r2 = openat$pf(0xffffffffffffff9c, &(0x7f0000000640), 0x1, 0x0) ioctl$TIOCSETA(r2, 0xcd604404, &(0x7f0000000680)={0x4, 0x3, 0x2, 0x9, "5ade6806180000f5ffffffffffffff00", 0xb, 0xdb5d}) socket$inet6(0x18, 0x4000, 0x5) sendto$inet6(r0, 0x0, 0x0, 0xb, &(0x7f0000000380)={0x1c, 0x18, 0x1, 0x1fe, '\x00\x00\x00\x00\x00 \x00', 0x40000010}, 0x1c) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000140)=@file={0x48, 0x0, './file0\x00'}, 0xa) listen(r3, 0xe) shutdown(r3, 0x0) poll(&(0x7f0000000180)=[{r3, 0x40}], 0x1, 0x8) r4 = openat$dri(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dri/renderD128\x00', 0x400, 0x0) futimens(r4, &(0x7f0000000340)=[{0x8000006, 0xc4}, {0x886a, 0x1}]) socket(0x21, 0x4, 0x1) r5 = socket(0x18, 0x1, 0x0) r6 = socket(0x2, 0x8002, 0x0) r7 = fcntl$dupfd(r6, 0x2, 0xffffffffffffffff) closefrom(r7) ioctl$VT_WAITACTIVE(r7, 0x20007606, &(0x7f0000000100)=0x5058) sysctl$kern(&(0x7f00000001c0)={0x1, 0x48}, 0x2, &(0x7f0000000300), 0x0, 0x0, 0x0) recvfrom(r5, &(0x7f0000000240)=""/134, 0x86, 0x801, &(0x7f0000000200)=@in={0x10, 0x2, 0x3, 0x2}, 0x10) openat$speaker(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0) 2.469314884s ago: executing program 3 (id=138): r0 = kqueue() fcntl$setstatus(r0, 0x4, 0x80) sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91504694a14b8e5f84cf71b59c7afec34f82", &(0x7f0000000080)=0x1fde, 0x0, 0xffffffffffffff06) 2.468879964s ago: executing program 6 (id=117): r0 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000080), 0x89, 0x0) (async) r1 = socket(0x2, 0x1, 0x0) (async) setgid(0xffffffffffffffff) (async) r2 = syz_open_pts() (async) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt(r3, 0x6, 0x10, &(0x7f00000000c0), 0x0) (async) fcntl$lock(r2, 0x8, &(0x7f0000000100)={0x1, 0x2, 0x5, 0x1, 0x2}) flock(r2, 0x1) r4 = getpgid(0xffffffffffffffff) fcntl$lock(r0, 0x8, &(0x7f00000001c0)={0x3, 0x0, r4, 0x100000001}) (async) syz_open_pts() syz_open_pts() syz_open_pts() (async) r5 = socket$inet(0x2, 0x3, 0x102) (async) r6 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x8, 0x0) ioctl$BIOCGBLEN(r6, 0x40044266, &(0x7f0000000040)) (async) dup2(r5, r1) (async) ioctl$WSMOUSEIO_SETPARAMS(r0, 0x80047476, &(0x7f0000000180)={0x0}) (async) setpgid(r4, r4) 2.468713408s ago: executing program 7 (id=140): r0 = socket(0x18, 0x2, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r1 = socket(0x2, 0x2, 0x0) ioctl$FIONREAD(r1, 0x80146959, &(0x7f0000000200)) setsockopt(r0, 0x1000000000029, 0xb, &(0x7f0000000000), 0x0) getgroups(0x1, &(0x7f0000000000)=[0xffffffffffffffff]) r3 = getegid() open(&(0x7f0000000100)='./file0\x00', 0x611, 0x0) r4 = getpid() ktrace(&(0x7f0000000140)='./file0\x00', 0x4, 0x40001514, r4) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x10000) r6 = socket$inet(0x2, 0x1, 0x6) bind$inet(r6, &(0x7f0000000080)={0x10, 0x2, 0x1}, 0x10) listen(r6, 0xfffffffd) r7 = socket(0x2, 0x1, 0x0) connect$inet(r7, &(0x7f00000000c0)={0x10, 0x2, 0x1, 0xac1402aa}, 0x10) shutdown(r7, 0x1) closefrom(r5) setresgid(r2, r3, 0xffffffffffffffff) setitimer(0x0, &(0x7f0000000180)={{0x0, 0x1000}, {0x0, 0xf2}}, 0x0) getitimer(0x0, 0x0) 2.377911408s ago: executing program 0 (id=121): setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) r0 = open(&(0x7f0000000080)='./file1\x00', 0x18289, 0x1f5) write(r0, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) acct(&(0x7f0000000280)='./file1\x00') r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000040)=@file={0x6, 0x1, './file0\x00'}, 0xa) closefrom(r1) ioctl$DIOCADDRULE(r0, 0xcd604404, &(0x7f0000000500)={0xffff, 0x8, 0xff, './file0\x00', './file0\x00', 0x0, "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"}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket(0x2, 0x1001, 0x0) sendmsg$unix(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x409) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) (async) open(&(0x7f0000000080)='./file1\x00', 0x18289, 0x1f5) (async) write(r0, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) (async) acct(&(0x7f0000000280)='./file1\x00') (async) socket$unix(0x1, 0x1, 0x0) (async) bind$unix(r1, &(0x7f0000000040)=@file={0x6, 0x1, './file0\x00'}, 0xa) (async) closefrom(r1) (async) ioctl$DIOCADDRULE(r0, 0xcd604404, &(0x7f0000000500)={0xffff, 0x8, 0xff, './file0\x00', './file0\x00', 0x0, "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"}) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) socket(0x2, 0x1001, 0x0) (async) sendmsg$unix(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x409) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) (async) 2.171902346s ago: executing program 3 (id=141): socketpair(0x18, 0x3, 0x6, 0x0) r0 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$SPKRTONE(r0, 0x80085301, &(0x7f00000001c0)={0x1, 0x5}) sysctl$kern(&(0x7f0000000000)={0x1, 0x14}, 0x2, &(0x7f0000000040)="2ffc943072a4c4557cdab170be0e0048008f6065607da2c939c3da976aced09b9d7391a8bf", &(0x7f0000000080)=0x25, &(0x7f00000000c0)="a742decae38594e8937c0947d2d484f003b6ef49f1dc85386bcca17e68dd7eab856d957e2e8d0f8ecf1d60a6e705a948bd10a9d2f5cd2da6449bbf99a5f47b5e02823c4b569c0f5e4f25d291503f7710d26a0b33610b5ceb903523543be79dd5330a2458c594f658a79124cac9b8f6431b123b7d55693539e6a59e8896813bc23712ff4f956af54cad1cb0bcbdf090065cd0bbc45e", 0x95) 1.931768348s ago: executing program 1 (id=142): r0 = socket(0x2, 0x4000, 0x4) getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000000000), &(0x7f0000000100)=0xc) setsockopt(0xffffffffffffffff, 0x11, 0x3, &(0x7f0000000340)='!\x00\x00\x00', 0x4) syz_emit_ethernet(0x2a, &(0x7f00000001c0)={@local, @broadcast, [], {@arp={0x8035, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @remote, @multicast2, @remote, @loopback}}}}) sendto$unix(r0, &(0x7f0000000040)="b1000501000000ae05003f01070000000e08000000000500fef96ecfc72fd3357ae30200004e30ffecb92819f20bf404be01000000f7c8cf5f882b297de1aa050400ce9462f0ad3ebbc257e4411f139b672f335c22db830c032bfa896443c32118210000720fd38bfb0000fd54c125191b1257aea8c500001602fbfe0c2300000100be1f25a2e791505c47f8343712cc11fffffffffffffc00"/177, 0xb1, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000140)=[0x0, 0x8], 0x2, 0x10000, 0x0, 0xffffffffffffffff}) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) closefrom(r1) fcntl$setflags(r0, 0x2, 0x0) getthrid() 1.931396238s ago: executing program 3 (id=143): sysctl$net_inet_icmp(&(0x7f0000000040)={0x4, 0x2, 0x1, 0x5}, 0x4, 0x0, 0x0, 0x0, 0x0) sysctl$kern(&(0x7f0000000000)={0x1, 0x23}, 0x2, &(0x7f0000000080)="217de1617b6279ce1f8147eac00455fddbd0f1619ba87c371e96e26085251285de26735598a28d6abf1efd3c4d5f1ce679dcabff6ebaf273524433014a3761bc31000d415ce0bbc7e662ad54c0f565f6439668", &(0x7f0000000100)=0x53, &(0x7f0000000140)="2ab0b6f2a7f9e7e33654b1eb36c0d3831acd2e9e9e74dde66aca55312b139f8fc86f04ada16219a33f22bf404613b54d9cce5a10cb2831ca569b4ca5090a206243454c5868b354747cb5bc26e5b651c2146f94a416595000d0bab19d58a0e679bc732586afda2b86991806bda7407abbf5bdbb2f101c843ec433679443f8cef8464e64200cf50bbe35881b1d4163ae0614f15ed51e64bbdd47240b02504018a818b278a2ce9639bb31e62cc0896e2c8016ad3f24b4a668d06ae742ae9e35199c7bad69c5e20cc11f91e98a447c6a6b08cd", 0xd1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) mlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000) sysctl$net_inet_carp(&(0x7f0000000040)={0x4, 0x2, 0x6, 0x4}, 0x4, 0x0, 0x0, &(0x7f00000010c0)="e50000b9", 0x4) 1.931158455s ago: executing program 4 (id=144): r0 = getuid() r1 = syz_open_pts() fstatat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6) r3 = semget$private(0x0, 0x1, 0x99) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup3(r4, r5, 0x0) getsockopt$sock_cred(r6, 0xffff, 0x1022, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0xc) semctl$IPC_SET(r3, 0x0, 0x1, &(0x7f0000000200)={{0x0, r8, r7, r7, 0x34, 0x6}, 0x0, 0x4, 0x0, 0x0, 0x4}) chown(&(0x7f0000000040)='./file0\x00', r2, r7) ioctl$TIOCSETD(r1, 0x8004741b, &(0x7f0000000000)=0x5) setreuid(0xffffffffffffffff, r0) seteuid(r0) 1.930937606s ago: executing program 5 (id=54): r0 = shmget$private(0x0, 0x1000, 0x2, &(0x7f0000ffc000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) (async, rerun: 32) r1 = socket$inet(0x18, 0x3, 0x102) (rerun: 32) sendmsg(r1, &(0x7f00000001c0)={&(0x7f0000000200)=@in6={0x1c, 0x18, 0x0, 0x7, '\x00', 0x101}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000280)="638802000000339a6578b6e0822b5466abdd612dd68e59adfecf93233e", 0x1d}, {&(0x7f00000002c0)="a2", 0x1}, {&(0x7f0000000300)="3a01c42b3fe12e2f861d", 0xa}], 0x3, 0x0}, 0x402) (async) r2 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000340)="4239b99039cd96c5ac732d745c24e5fa5d8d240728816239277357eab87c4e9831c6ccff473bb5a4b3eebb137a7f65df228d9a1532ccad7212d4205342f543f604ca9a13bb4a6b72bc614ed5a35bc12422a0e0433b5e3b9fb1c40a8d19cbe363a315b45e5d540d5e574d82d66d78e54bd32d518ae9d26419875f6fbfa974761b98081f1f2730be7e01e2474b890236b0a333db4b0292459d4d0ba36fdc117acc2ab5c0e935f8373e4a7d38708df7d0d9ab2712c3b61625414c82bad42b206641090af6d08972ec50014a2a25851df10ca04effe02ecfe6fed95f2098403228727c23f50ac5af4b", 0xe7}, {&(0x7f00000000c0)="5c42ccab0d318b15b454ebb6bd708200ca02b689b02d1bf37a462d41", 0x1c}], 0x2) writev(r2, &(0x7f0000000100)=[{&(0x7f0000000140)="518f7ce11d64b05fb2d4fcab2e94bfc3f9dc2da527b9a0cf55574f6c", 0x1c}], 0x1) unveil(0x0, &(0x7f0000000180)='w\x00') (async) r3 = shmat(r0, &(0x7f0000fee000/0x3000)=nil, 0x3000) shmdt(r3) 1.930779111s ago: executing program 7 (id=145): mknod(&(0x7f0000000080)='./file0\x00', 0x2000, 0x4287e) (async) mknod(&(0x7f0000000080)='./file0\x00', 0x2000, 0x4287e) open(&(0x7f00000000c0)='./file0\x00', 0x80000000000206, 0x20) (async) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x80000000000206, 0x20) pwritev(r0, &(0x7f0000000100)=[{&(0x7f0000000140)="a0522902", 0x4}, {&(0x7f0000000180)="36353b6965554c5276681f63734b263659c268711b", 0x15}], 0x2, 0x2) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = getpid() fcntl$setown(r2, 0x6, r3) fcntl$setown(r1, 0x6, r3) fcntl$setown(r1, 0x6, 0x0) setreuid(0xee00, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6000, 0x3d1e) (async) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6000, 0x3d1e) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) (async) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_open_pts() 1.252101851s ago: executing program 1 (id=146): ioctl$VNDIOCGET(0xffffffffffffffff, 0xc4104603, &(0x7f0000000040)={'./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) sysctl$net_inet_tcp(&(0x7f0000000480)={0x4, 0x1e, 0x2}, 0x6, &(0x7f00000004c0)="808f643b27da5db78de07d2b0ffbc05bc906aa654bb4ae3384fe6f5b54eb996eacaf981c99c213e2bba73f4133a5d70d759d3c86801b4d07a6a9b001c0b4297151cc28e2dbd90de9418cee114caf8de15b81540bec2bacf4b8991b2fa225e6c000000000", 0x0, 0x0, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000000)={@broadcast, @broadcast, [{[{0x88a8, 0x4, 0x1, 0x3}], {0x8100, 0x4, 0x0, 0x5}}], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast, @loopback, @local, @broadcast}}}}) 1.251734691s ago: executing program 4 (id=147): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x1, &(0x7f0000000080)="27913c11b3c9e91fbdf5", 0xa) setsockopt$inet_opts(r0, 0x0, 0x1, &(0x7f0000000100), 0x0) 1.122171905s ago: executing program 1 (id=148): r0 = socket$unix(0x1, 0x2, 0x0) sysctl$kern(&(0x7f0000000000)={0x1, 0x4}, 0x2, 0x0, 0x0, 0x0, 0x0) getsockopt$sock_int(r0, 0xffff, 0x100, &(0x7f0000000080), &(0x7f00000001c0)=0x4) 1.121736967s ago: executing program 2 (id=20): setrlimit(0x1, &(0x7f0000000000)={0xfffffffffff7fffa, 0xffffffffffffffff}) (async) r0 = open(&(0x7f0000000080)='./file1\x00', 0x18289, 0x1f5) write(r0, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) (async) acct(&(0x7f0000000280)='./file1\x00') (async) msgsnd(0x0, 0x0, 0x401, 0x0) (async) msgsnd(0x0, 0x0, 0x401, 0x0) mknod(&(0x7f0000000200)='./file0\x00', 0x2000, 0x0) (async) r1 = open(&(0x7f00000003c0)='./file0\x00', 0x80, 0x83) ioctl$TIOCMSET(r1, 0x8004746d, &(0x7f0000000400)=0x9) setuid(0xffffffffffffffff) (async) execve(&(0x7f0000000580)='./file0\x00', &(0x7f0000000640)=[&(0x7f00000005c0)=':\x00', &(0x7f0000000600)=':\x00'], &(0x7f00000007c0)=[&(0x7f0000000680)='c\x00', &(0x7f00000006c0)='c\x00', &(0x7f0000000700)='#^\x00', &(0x7f0000000740)='-\x00', &(0x7f0000000780)='\x00']) (async) rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)='./file0\x00') unveil(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)='c\x00') (async) r2 = socket$inet(0x2, 0x8000, 0x0) getsockopt(r2, 0x0, 0x1f, 0x0, 0x0) (async) r3 = socket$unix(0x1, 0x1, 0x0) (async) r4 = socket(0x18, 0x3, 0x3a) sendmsg(r4, &(0x7f0000000440)={&(0x7f0000000480)=@in6={0x1c, 0x18, 0x0, 0x4, "feff000000002000000000000000004b", 0x3}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000540)="63d6d1fa99be0254baa1792ec060774d26e08091", 0x14}], 0x1, 0x0}, 0x0) bind$unix(r3, &(0x7f0000000100)=@abs={0x9, 0x1, 0x0, 0x2}, 0x8) (async) linkat(r0, &(0x7f0000000300)='./file1\x00', r0, &(0x7f0000000340)='./file2\x00', 0x0) (async) mkdir(&(0x7f0000000040)='./file2\x00', 0xc1) (async) rename(&(0x7f0000000180)='./file2\x00', &(0x7f00000001c0)='./file0\x00') mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/../file0\x00', 0x2000, 0x5cd9) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) 1.121546645s ago: executing program 3 (id=149): accept(0xffffffffffffffff, &(0x7f0000000000)=@un=@abs, 0xfffffffffffffffe) (async) ioctl$DIOCGETSTATE(0xffffffffffffffff, 0xc1084413, &(0x7f0000000040)={{0x3976fdec, './file0\x00', [{[@v4=@loopback, @v6=@local={0xfe, 0x80, '\x00', 0x0}], [0x8006, 0x4], 0xfffe}, {[@v6=@mcast1, @v6=@rand_addr="25a1a300"], [0x800, 0x2], 0x7, 0x1a}], {{0x24b, 0x3, 0x1, 0x7ff}, 0x3, 0x2, 0x80, 0xfff, 0x7d, 0x17, 0x10}, {{0x5, 0x81, 0x46, 0x5}, 0x8002, 0x5, 0x1, 0x2, 0xffff, 0xfd, 0xf}, @v4, 0x2, 0x6, 0xf450, 0xc, 0x2, [[0x8, 0x4], [0x5, 0x8350]], [[0x4, 0x603f], [0x3, 0x3]], 0x1, [0x0, 0xd], 0x2, 0x18, 0x3, 0x2, 0x0, 0x3, 0x9, 0x83, 0x4, 0x80, 0xb, 0xce51, "04da"}}) (async) socket(0x14, 0x4000, 0x7f) (async) r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) (async) setsid() r1 = socket$inet(0x2, 0x2, 0x0) getdents(r1, 0x0, 0x0) r2 = syz_open_pts() ioctl$TIOCSCTTY(r2, 0x20007461) (async) ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f0000000180)={0x8, 0x8, 0x3ff, 0xbaf, "e65bdafa942cfd524986e1e61ab56e7776412d88", 0x1, 0x6}) (async) select(0x0, 0x0, &(0x7f0000000040)={0xd68e, 0x0, 0xffffffbfffffffff}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8000000000000001, 0x1, 0x6352329f, 0x100000}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) ioctl$TIOCSETA(r0, 0xc1084425, &(0x7f0000000040)={0xffffffff, 0x0, 0xfffffffd, 0x3, "210d0000000200000006000000000200007fffff", 0x7fffffde, 0x88004}) 1.121309303s ago: executing program 4 (id=150): r0 = getpid() setuid(0xee01) (async) ktrace(0x0, 0x5, 0xd27d43260c7d39d, r0) (async) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{}, {0x4}]}) sysctl$kern(&(0x7f0000000080)={0x1, 0x2c}, 0x3, &(0x7f00000000c0)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000100)=0x1918, 0x0, 0xfffffffffffffef1) (async) mmap(&(0x7f00004d8000/0x2000)=nil, 0x2000, 0x4, 0x9013, 0xffffffffffffffff, 0x80000000) 1.121024597s ago: executing program 5 (id=151): open$dir(&(0x7f0000000200)='./file0\x00', 0x0, 0xa4) (async) r0 = open$dir(&(0x7f0000000200)='./file0\x00', 0x0, 0xa4) mmap(&(0x7f00008b8000/0x4000)=nil, 0x4000, 0x1, 0x2015, r0, 0x0) (async) mmap(&(0x7f00008b8000/0x4000)=nil, 0x4000, 0x1, 0x2015, r0, 0x0) openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x10, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000040)={'tap', 0x0}) r1 = socket$inet(0x2, 0x3, 0x0) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sysctl$kern(&(0x7f00000006c0)={0x1, 0x4b}, 0x2, 0x0, 0x0, 0x0, 0x19) (async) sysctl$kern(&(0x7f00000006c0)={0x1, 0x4b}, 0x2, 0x0, 0x0, 0x0, 0x19) ioctl$BIOCSBLEN(r2, 0xc0044266, &(0x7f0000000100)=0x34) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) pread(r2, &(0x7f0000000180)="e7077b6629e0397383eaeac9193e79db7bbbad786e7bbb921dff532158d0b49a3e7de9f2d8fdefa9e6fddc16bcd369b9fc28dc5e", 0x34, 0x1) openat$speaker(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) (async) r3 = openat$speaker(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="c5aad0d00fc41d55a7466b14613eb32471a246ef04ece1c8af2787d1f87bac8b27a6325792808f660aaf7085be8af2925065f2e1a48408db6ccc63fb978fc5aa79b7be5dcf92b62a29d527184036e72ba5e5722ca713e1f10a953a70870f3e13e40a9ac3f10a6a8c050b608551cf3c4a06f12ae6dce574ba418cf71bfa4408cf1076bcd8ae3aae9d6553875f8d05924dbe3dd8d4bfb3c21f104f9522daab8bd55ed33ac656563e71e45fcaa6039b229c46f1b509a6afeb3d1e4e664634", 0xbd}, {&(0x7f0000000340)="00136f80f0b31544d7fdbfa7bf70351e", 0x10}], 0x2) (async) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="c5aad0d00fc41d55a7466b14613eb32471a246ef04ece1c8af2787d1f87bac8b27a6325792808f660aaf7085be8af2925065f2e1a48408db6ccc63fb978fc5aa79b7be5dcf92b62a29d527184036e72ba5e5722ca713e1f10a953a70870f3e13e40a9ac3f10a6a8c050b608551cf3c4a06f12ae6dce574ba418cf71bfa4408cf1076bcd8ae3aae9d6553875f8d05924dbe3dd8d4bfb3c21f104f9522daab8bd55ed33ac656563e71e45fcaa6039b229c46f1b509a6afeb3d1e4e664634", 0xbd}, {&(0x7f0000000340)="00136f80f0b31544d7fdbfa7bf70351e", 0x10}], 0x2) writev(r3, &(0x7f0000000380)=[{&(0x7f00000003c0)="6350247bd7e2f0e0561f29bbcfc718523af10e450e33af5e1fe8377d75ffff01ff680d615fbe0b1979d13c8fb6dc92b457c2f2700d7e915acd13f3e60a21cd00f95743b20cef0081f5b4a90b83f3ac9f2177207c1fc0f8efeb733dd2c42202be79e92ef3d99f5832b7859e6232eb683f5e1783717539f55c3c7e3372d30600000065a8aab570b05a121ba5cfb6374f4c", 0x90}], 0x1) unveil(0x0, &(0x7f0000000480)='x\x00') getresgid(&(0x7f00000004c0), &(0x7f0000000500)=0x0, &(0x7f0000000540)) fstatat(r0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0), 0x2) (async) fstatat(r0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2) getsockopt$SO_PEERCRED(r1, 0xffff, 0x1022, &(0x7f0000000640), 0xc) (async) getsockopt$SO_PEERCRED(r1, 0xffff, 0x1022, &(0x7f0000000640)={0x0, 0x0}, 0xc) setgroups(0x3, &(0x7f0000000680)=[r4, r5, r6]) ioctl$FIONREAD(r1, 0x80206979, &(0x7f00000001c0)) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) recvmmsg(0xffffffffffffffff, &(0x7f0000002980)={{0x0, 0x0, 0x0, 0x0, 0x0}, 0x7f}, 0x38, 0x0, 0x0) 1.120894791s ago: executing program 6 (id=117): r0 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000080), 0x89, 0x0) (async) r1 = socket(0x2, 0x1, 0x0) (async) setgid(0xffffffffffffffff) (async) r2 = syz_open_pts() (async) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt(r3, 0x6, 0x10, &(0x7f00000000c0), 0x0) (async) fcntl$lock(r2, 0x8, &(0x7f0000000100)={0x1, 0x2, 0x5, 0x1, 0x2}) flock(r2, 0x1) r4 = getpgid(0xffffffffffffffff) fcntl$lock(r0, 0x8, &(0x7f00000001c0)={0x3, 0x0, r4, 0x100000001}) (async) syz_open_pts() syz_open_pts() syz_open_pts() (async) r5 = socket$inet(0x2, 0x3, 0x102) (async) r6 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x8, 0x0) ioctl$BIOCGBLEN(r6, 0x40044266, &(0x7f0000000040)) (async) dup2(r5, r1) (async) ioctl$WSMOUSEIO_SETPARAMS(r0, 0x80047476, &(0x7f0000000180)={0x0}) (async) setpgid(r4, r4) 872.03831ms ago: executing program 1 (id=152): pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x10004) ioctl$BIOCSDIRFILT(r1, 0x8004427d, &(0x7f0000000040)=0x6) listen(r1, 0x3) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000100)={0x9, &(0x7f0000000080)=[{0x401, 0x2, 0x6}, {0x8, 0x5, 0x81, 0x1}, {0x6, 0xda, 0x47}, {0x2, 0x0, 0xea, 0x8}, {0x80, 0x81, 0x0, 0x1}, {0x4, 0xff, 0x74, 0xa6}, {0x8000, 0x1, 0x2, 0x8}, {0x7, 0xad, 0x1, 0x4}, {0xfff, 0x2, 0x0, 0x2}]}) futimens(r0, &(0x7f0000000140)=[{0xfffffffffffffff3}, {0x4, 0x6}]) ioctl$BIOCGHDRCMPLT(r0, 0x40044274, &(0x7f0000000180)) openat$wsmouse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x2000641f) ioctl$BIOCGHDRCMPLT(r0, 0x40044274, &(0x7f0000000200)) ioctl$BIOCVERSION(r0, 0x40044271, &(0x7f0000000240)) ioctl$DIOCSETDEBUG(r1, 0xc0044418, &(0x7f0000000280)=0x4) ioctl$DRM_IOCTL_MODE_CURSOR(r1, 0xc01c64a3, &(0x7f00000002c0)={0x3, 0xff, 0x8, 0x0, 0x1, 0x4}) ioctl$BIOCGBLEN(r1, 0x40044266, &(0x7f0000000300)) ioctl$DIOCXCOMMIT(r1, 0xc0104452, &(0x7f0000001380)={0x4, 0xecdd, &(0x7f0000000340)=[{0x1, './file0\x00', 0x9}, {0x1, './file0\x00', 0x62f}, {0x0, './file0\x00', 0x5}, {0x0, './file0\x00', 0x4}]}) nanosleep(&(0x7f00000013c0)={0x5, 0x8e}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000001440)={&(0x7f0000001400)=[0x2, 0x1, 0x2, 0x63a, 0x7], 0x5, 0x4, 0x0, 0xffffffffffffffff}) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000001480), 0x80, 0x0) ioctl$BIOCSFILDROP(r3, 0x80044279, &(0x7f00000014c0)) fstatat(r3, &(0x7f0000001500)='./file0\x00', &(0x7f0000001540), 0x6) ioctl$BIOCSDIRFILT(r0, 0x8004427d, &(0x7f00000015c0)=0x400) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000001600)={0xa, 0x8ac2, r3}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r4, 0xc04064aa, &(0x7f0000001700)={&(0x7f0000001640)=[0x0], &(0x7f0000001680)=[{}, {}, {}], 0x6, 0x0, ""/32, 0x1, 0x3}) ioctl$WSKBDIO_GETDEFAULTBELL(r3, 0x40105706, &(0x7f0000001740)) ioctl$VT_ACTIVATE(r4, 0x20007605, &(0x7f0000001780)=0x3) ioctl$DIOCRCLRADDRS(r1, 0xc4504442, &(0x7f00000017c0)={{'./file0\x00', './file0/file0aaaaaaaaaaaaaaaaaaa', 0x1, 0x5}, 0x0, 0x0, 0x0, 0x101, 0x4, 0x7, 0x7fffffff, 0x2, 0xb}) flock(r2, 0x4) lseek(r3, 0x1, 0x0) ioctl$BIOCSHDRCMPLT(r4, 0x80044275, &(0x7f0000001c40)=0x6) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000001c80)={0x7, 0x2}) lseek(r0, 0x0, 0x1) 871.814288ms ago: executing program 4 (id=153): r0 = socket(0x11, 0x3, 0x0) sendto$unix(r0, &(0x7f0000000000)="b1000504000004000000a30000110000331c13fecea16c269c6e0e1d37fbd3357ae30200004e3003000000acf20b7804be38164991f7c8df5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42112000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500ff1ad9b9660d0d915d3294434a3be80121fbfa0c0f0000f965fa20602ee2e1d3ceffa48abfba221554f4", 0xb1, 0x2, 0x0, 0x0) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) minherit(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) 252.061747ms ago: executing program 4 (id=154): setsid() r0 = open(&(0x7f00000001c0)='./file0\x00', 0x615, 0x8a) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x6013, 0xffffffffffffffff, 0x1000000) r1 = syz_open_pts() ioctl$TIOCSCTTY(r1, 0x20007461) r2 = socket(0x18, 0x3, 0x2) socket$unix(0x1, 0x2, 0x0) getsockopt$sock_cred(r2, 0xffff, 0x1024, &(0x7f00000002c0)={0x0}, &(0x7f0000000300)=0xc) ioctl$DIOCMAP(0xffffffffffffffff, 0xc0106477, &(0x7f0000000100)={&(0x7f0000000500)='./file0\x00', r0}) setresuid(0x0, r3, 0x0) open(&(0x7f00000003c0)='./file0\x00', 0x18289, 0x122) select(0x40, &(0x7f0000000440)={0xfffffffffffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181a, 0x8, 0x2000000000000004}, 0x0, 0x0, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000480)={'tap', 0x0}) ioctl$BIOCIMMEDIATE(0xffffffffffffffff, 0x80044270, &(0x7f00000004c0)=0x2) syz_emit_ethernet(0x4b, &(0x7f0000000140)=ANY=[@ANYBLOB="ffffffffffff844eb89e61ec809fa961417692facfc9c1ecdc0000a7a32ed335231c0b57338d508561c8bb79f315d0ba1b2d31ed0c6ef69f07f9f11cbd81c2d3b4de3463ed8b5db13e1956"]) select(0x40, &(0x7f0000000580)={0x9, 0x401, 0x2, 0x10, 0x2800000000000000, 0x181c, 0x8, 0xfffffffffffff000}, 0x0, 0x0, 0x0) r4 = socket(0x18, 0x1, 0x0) getsockopt$sock_cred(r4, 0xffff, 0x1024, &(0x7f0000000340)={0x0}, &(0x7f0000000380)=0x2) setresuid(0xffffffffffffffff, r3, r5) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000240)={'tap', 0x0}) ioctl$FIONREAD(r2, 0x80206918, &(0x7f0000000280)) r6 = syz_open_pts() r7 = syz_open_pts() setuid(0xee01) mknod(&(0x7f0000000000)='./file1\x00', 0x2000, 0x637d) r8 = open(&(0x7f0000000040)='./file1\x00', 0x8000, 0xba) ioctl$FIONREAD(r8, 0x4004667f, &(0x7f0000000080)) ioctl$TIOCSETD(r7, 0x8004741b, &(0x7f0000000200)=0x7) closefrom(r6) 251.888194ms ago: executing program 7 (id=145): mknod(&(0x7f0000000080)='./file0\x00', 0x2000, 0x4287e) (async) mknod(&(0x7f0000000080)='./file0\x00', 0x2000, 0x4287e) open(&(0x7f00000000c0)='./file0\x00', 0x80000000000206, 0x20) (async) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x80000000000206, 0x20) pwritev(r0, &(0x7f0000000100)=[{&(0x7f0000000140)="a0522902", 0x4}, {&(0x7f0000000180)="36353b6965554c5276681f63734b263659c268711b", 0x15}], 0x2, 0x2) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = getpid() fcntl$setown(r2, 0x6, r3) fcntl$setown(r1, 0x6, r3) fcntl$setown(r1, 0x6, 0x0) setreuid(0xee00, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6000, 0x3d1e) (async) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6000, 0x3d1e) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) (async) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_open_pts() 251.755375ms ago: executing program 3 (id=149): accept(0xffffffffffffffff, &(0x7f0000000000)=@un=@abs, 0xfffffffffffffffe) (async) ioctl$DIOCGETSTATE(0xffffffffffffffff, 0xc1084413, &(0x7f0000000040)={{0x3976fdec, './file0\x00', [{[@v4=@loopback, @v6=@local={0xfe, 0x80, '\x00', 0x0}], [0x8006, 0x4], 0xfffe}, {[@v6=@mcast1, @v6=@rand_addr="25a1a300"], [0x800, 0x2], 0x7, 0x1a}], {{0x24b, 0x3, 0x1, 0x7ff}, 0x3, 0x2, 0x80, 0xfff, 0x7d, 0x17, 0x10}, {{0x5, 0x81, 0x46, 0x5}, 0x8002, 0x5, 0x1, 0x2, 0xffff, 0xfd, 0xf}, @v4, 0x2, 0x6, 0xf450, 0xc, 0x2, [[0x8, 0x4], [0x5, 0x8350]], [[0x4, 0x603f], [0x3, 0x3]], 0x1, [0x0, 0xd], 0x2, 0x18, 0x3, 0x2, 0x0, 0x3, 0x9, 0x83, 0x4, 0x80, 0xb, 0xce51, "04da"}}) (async) socket(0x14, 0x4000, 0x7f) (async) r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) (async) setsid() r1 = socket$inet(0x2, 0x2, 0x0) getdents(r1, 0x0, 0x0) r2 = syz_open_pts() ioctl$TIOCSCTTY(r2, 0x20007461) (async) ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f0000000180)={0x8, 0x8, 0x3ff, 0xbaf, "e65bdafa942cfd524986e1e61ab56e7776412d88", 0x1, 0x6}) (async) select(0x0, 0x0, &(0x7f0000000040)={0xd68e, 0x0, 0xffffffbfffffffff}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8000000000000001, 0x1, 0x6352329f, 0x100000}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) ioctl$TIOCSETA(r0, 0xc1084425, &(0x7f0000000040)={0xffffffff, 0x0, 0xfffffffd, 0x3, "210d0000000200000006000000000200007fffff", 0x7fffffde, 0x88004}) 1.77935ms ago: executing program 1 (id=155): r0 = open(&(0x7f0000000840)='./file0\x00', 0x70e, 0x6e) ktrace(&(0x7f0000000880)='./file0\x00', 0x4, 0x538, 0x0) mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x3, 0x10, r0, 0x0) r1 = socket(0x11, 0x3, 0x0) sendto$unix(r1, &(0x7f0000000000)="b10005016000009f0500050003000000331c13fecea10500fef96ecfc72fd3357af302b37b673039d2d236acf20b7804be38224991f7c8cf5f88882b297be1aa5b23edeb51e2f0ac3ebbc257699a1f139b672f4d335c223e7d026ba8af6300371c1802000000720fd38bfbb770c1f572ca81ea77b3c5890400000000000000361b1257aea8c500002002fbffec2200008abfba090000001d89e400040700000080042000"/177, 0xb1, 0x4, 0x0, 0x0) r2 = open(&(0x7f00000007c0)='./file0\x00', 0x9cab835cfdc52675, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0xa011, r2, 0x0) r3 = socket$inet(0x2, 0x5, 0x3) connect(r3, &(0x7f00000000c0)=@un=@abs={0x8, 0x0, 0x0, 0x1}, 0x8) open(&(0x7f0000000840)='./file0\x00', 0x70e, 0x6e) (async) ktrace(&(0x7f0000000880)='./file0\x00', 0x4, 0x538, 0x0) (async) mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x3, 0x10, r0, 0x0) (async) socket(0x11, 0x3, 0x0) (async) sendto$unix(r1, &(0x7f0000000000)="b10005016000009f0500050003000000331c13fecea10500fef96ecfc72fd3357af302b37b673039d2d236acf20b7804be38224991f7c8cf5f88882b297be1aa5b23edeb51e2f0ac3ebbc257699a1f139b672f4d335c223e7d026ba8af6300371c1802000000720fd38bfbb770c1f572ca81ea77b3c5890400000000000000361b1257aea8c500002002fbffec2200008abfba090000001d89e400040700000080042000"/177, 0xb1, 0x4, 0x0, 0x0) (async) open(&(0x7f00000007c0)='./file0\x00', 0x9cab835cfdc52675, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0xa011, r2, 0x0) (async) socket$inet(0x2, 0x5, 0x3) (async) connect(r3, &(0x7f00000000c0)=@un=@abs={0x8, 0x0, 0x0, 0x1}, 0x8) (async) 1.066186ms ago: executing program 4 (id=156): r0 = socket(0x11, 0x3, 0x8) r1 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$WSMUXIO_LIST_DEVICES(r1, 0xc1045763, &(0x7f0000000140)={0x178, [{0x1, 0x432}, {0x2, 0x8001}, {0x2, 0x7}, {0x0, 0x1}, {0x3, 0x7}, {0x1, 0x7f}, {0x1, 0x1}, {0x3, 0x9322}, {0x2, 0xff}, {0x3, 0x2}, {0x2, 0x8}, {0x1, 0x9}, {0x1, 0x8}, {0x3, 0x8}, {0x0, 0x4}, {0x3, 0x80000000}, {0x2, 0x7}, {0x3, 0x4}, {0x2, 0x3}, {0x1, 0x1}, {0x3, 0x5}, {0x2, 0x4}, {0x3, 0x3}, {0x3, 0x3}, {0x1, 0xc1b}, {0x3}, {0x3, 0x101}, {0x2, 0x4}, {0x2, 0x101}, {0x1}, {0x1, 0x8}, {0x3, 0x85b}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sysctl$net_inet6_ip6(&(0x7f0000000080)={0x4, 0x18, 0x29, 0x32}, 0x4, 0x0, 0x0, &(0x7f00000000c0)="01002fba", 0x4) connect(r2, &(0x7f0000000040)=@in={0x10, 0x2, 0x0, 0xf}, 0x10) sendto$unix(r0, &(0x7f0000000280)="b1000501600000001700200007000000085c13fecea10500fef96ecfc72fd3357ae320b37b673039d2d236a3f20b7804be38385291f7c8cf5f882b297be1aa5b236deb51e2f0ac3ebbc2576b9a5f139b672f4d335d223e7d026ba8af630037282118000000720fd38bfbb770c1f5a872c881ea6e69e0bb76d907c400000200361b1257aea8c500002002fb00000000008abfba09000000ec1d89e000040781e40500000000000000000900000000000000", 0xb1, 0xc, 0x0, 0x0) 846.457µs ago: executing program 5 (id=157): sysctl$net_inet_tcp(0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)="988c50fd5c", 0x5) sysctl$net_inet_ip(&(0x7f00000000c0)={0x4, 0x2, 0x0, 0x1c}, 0x4, 0x0, 0x0, &(0x7f0000000100), 0x4) r0 = getthrid() kill(r0, 0x17) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) fcntl$lock(r1, 0x7, &(0x7f0000000040)={0x401, 0x100, r0, 0x2, 0x2}) sysctl$net_inet6_ip6(&(0x7f0000000400)={0x4, 0x18, 0x29, 0x2b}, 0x4, 0x0, 0x0, &(0x7f0000000440)="01000000", 0x4) 322.979µs ago: executing program 6 (id=117): r0 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000080), 0x89, 0x0) (async) r1 = socket(0x2, 0x1, 0x0) (async) setgid(0xffffffffffffffff) (async) r2 = syz_open_pts() (async) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt(r3, 0x6, 0x10, &(0x7f00000000c0), 0x0) (async) fcntl$lock(r2, 0x8, &(0x7f0000000100)={0x1, 0x2, 0x5, 0x1, 0x2}) flock(r2, 0x1) r4 = getpgid(0xffffffffffffffff) fcntl$lock(r0, 0x8, &(0x7f00000001c0)={0x3, 0x0, r4, 0x100000001}) (async) syz_open_pts() syz_open_pts() syz_open_pts() (async) r5 = socket$inet(0x2, 0x3, 0x102) (async) r6 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x8, 0x0) ioctl$BIOCGBLEN(r6, 0x40044266, &(0x7f0000000040)) (async) dup2(r5, r1) (async) ioctl$WSMOUSEIO_SETPARAMS(r0, 0x80047476, &(0x7f0000000180)={0x0}) (async) setpgid(r4, r4) 0s ago: executing program 7 (id=158): setrlimit(0x8, &(0x7f0000000140)={0xa, 0x56}) r0 = syz_open_pts() close(r0) ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f0000000200)={0xfffffffe, 0x0, 0x1, 0x100, "019551f1257f00000000805e1f0d00", 0x0, 0x8}) sysctl$kern(&(0x7f0000000240)={0x1, 0x59}, 0x2, 0x0, 0x0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000500)={{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000005c0)="53a464c36b5c7890153c1a", 0xb}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5, 0x0}}, 0x38, 0x0) setrlimit(0x8, &(0x7f0000000600)={0x42, 0x65}) r1 = syz_open_pts() close(r1) r2 = syz_open_pts() writev(r1, &(0x7f0000000640)=[{&(0x7f0000000680)="34eb4cd59e8456ebc0881681c60e1cd9e0bf01b618b3cb934394c5951c1db0fd943a", 0xff99}], 0x1) read(r2, &(0x7f00000006c0)=""/122, 0x7a) pipe2(&(0x7f0000000740), 0x0) select(0x40, &(0x7f0000000780), &(0x7f00000007c0)={0x7fffffff}, 0x0, 0x0) unveil(0x0, &(0x7f0000000800)='r\x00') mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mknod(&(0x7f00000003c0)='./bus\x00', 0x2000, 0xd01) r3 = open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000440)=[{&(0x7f0000000480)=""/104, 0x68}], 0x1, 0x8000000000000000) sysctl$vm_swapencrypt(&(0x7f0000000280)={0x2, 0x5, 0x1}, 0x3, 0x0, 0x0, &(0x7f00000002c0), 0x0) mknod(&(0x7f0000000000)='./bus\x00', 0x2000, 0xd02) select(0x40, &(0x7f0000000040)={0x9, 0x7fffffff, 0x1000000000004, 0xb6f, 0x9ce8, 0x2000004, 0x6, 0xfffffffffffffff5}, 0x0, 0x0, 0x0) r4 = open(&(0x7f0000000080)='./bus\x00', 0x2, 0x111) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) mlock(&(0x7f000040f000/0x3000)=nil, 0x3000) ioctl$VNDIOCSET(r4, 0xc0285108, &(0x7f00000001c0)={0x0, 0xfffffffffffffbba, 0x0, 0x0, 0x4, &(0x7f0000001040)="10c62b2d7e834c244f9483e23c2bcb195ed3434066b71f2d6b85273de8a71ea2cb06a13e161f8b2c00a5ec7ac9dad319cf7aec6806beb595ab1ea681af9f666e870edc54a4b6a36b13763412a9b655f7171020f9d35cc5f61e000000", 0x5c}) setrlimit(0x4, &(0x7f0000000100)={0x9, 0x5}) ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f0000000180)={0x1800f66c, 0x0, 0x3, 0x5dffff5f, "9cdc452e307e0804002f4c0000002f9e68cd3304", 0xffffffff, 0x9}) writev(r0, &(0x7f0000000380)=[{&(0x7f0000000880)="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", 0x6d4}, {&(0x7f00000002c0)="53bc361f53c8870c72cf5411e441345da22ccaf68273d89dd971cfa5562b99b51a96f51a119581af7fc7b55c6b3dfab464a2788975555daeb89fbda155f58c4bf9dd1d78ab5d62b3b8366dfc0dd0e5c5e333a2027a5714d4f9b809e447ba4a7ded0d2985f7aee4880b2d57898ab3fb25322939d1f452c0cba09106a4ccd6bc4ef8349c5fbae053d00df324fbe9", 0x8d}], 0x2) syz_emit_ethernet(0x3c, &(0x7f0000000f80)=ANY=[@ANYBLOB="aaaaaaaaaaaa34f6cdd7150d080600066001060a0000aaaaaaaaaaaa40e6c230ba5ff0148477aaaaaaaaaaaaab2b59c48e7ba5c312e46a3206dd8101a246b0bc3913f9d91002555fbd9812ee4f9194ee3f7db95c608ec0749ad0590e85f2ab4a0ef5908967dbf446f2c8c2ec21610c1a4bca989a2ccbae4fa729b74f53295d5a7feabf3ac1843aa606ba82fae742e933ac79cf5b7f587317026a630bb912f41bce0dda52149b9be9e04c429c5f2a76baf31547fd857a056f48896dffb93377"]) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.81' (ED25519) to the list of known hosts. vnd0: sloppy read from proc 60135 (syz-executor): blkno 0 bcount 2909 vnd0: sloppy read from proc 60135 (syz-executor): blkno 64 bcount 2048 vnd0: sloppy read from proc 60135 (syz-executor): blkno 1024 bcount 2048 pckbd_enable: command error pckbd_enable: command error OpenBSD/amd64 (ci-openbsd-main-3.us-central1-a.c.syzkaller.internal) (tty00) login: pckbd_enable: command error pckbd_enable: command error panic: kernel diagnostic assertion "map->limit == rtmap_limit" failed: file "/syzkaller/managers/main/kernel/sys/net/rtable.c", line 132 Stopped at db_enter+0x25: addq $0x8,%rsp TID PID UID PRFLAGS PFLAGS CPU COMMAND *161240 20957 0 0 0x4000000 0 syz-executor db_enter() at db_enter+0x25 panic(ffffffff834b1b1e) at panic+0x1cf __assert(ffffffff834f0346,ffffffff834cb091,84,ffffffff8353f626) at __assert+0x29 rtmap_grow(18,21) at rtmap_grow+0x1f2 rtable_add(17) at rtable_add+0x279 route_output(fffff4807f221300,ffff800010fe1c10) at route_output+0x564 route_send(ffff800010fe1c10,fffff4807f221300,0,0) at route_send+0xd7 sosend(ffff800010fe1c10,0,ffff80003c513618,0,0,c) at sosend+0x7f4 sendit(ffff8000384b54f0,3,ffff80003c513710,c,ffff80003c5137b0) at sendit+0x5a5 sys_sendto(ffff8000384b54f0,ffff80003c513860,ffff80003c5137b0) at sys_sendto+0x8d syscall(ffff80003c513860) at syscall+0x962 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7dd2593f320, count: 3 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb> ddb> set $lines = 0 ddb> set $maxwidth = 0 ddb> show panic *cpu0: kernel diagnostic assertion "map->limit == rtmap_limit" failed: file "/syzkaller/managers/main/kernel/sys/net/rtable.c", line 132 ddb> show kasan No such command ddb> trace db_enter() at db_enter+0x25 panic(ffffffff834b1b1e) at panic+0x1cf __assert(ffffffff834f0346,ffffffff834cb091,84,ffffffff8353f626) at __assert+0x29 rtmap_grow(18,21) at rtmap_grow+0x1f2 rtable_add(17) at rtable_add+0x279 route_output(fffff4807f221300,ffff800010fe1c10) at route_output+0x564 route_send(ffff800010fe1c10,fffff4807f221300,0,0) at route_send+0xd7 sosend(ffff800010fe1c10,0,ffff80003c513618,0,0,c) at sosend+0x7f4 sendit(ffff8000384b54f0,3,ffff80003c513710,c,ffff80003c5137b0) at sendit+0x5a5 sys_sendto(ffff8000384b54f0,ffff80003c513860,ffff80003c5137b0) at sys_sendto+0x8d syscall(ffff80003c513860) at syscall+0x962 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7dd2593f320, count: -12 ddb> show registers rdi 0 rsi 0x1 rbp 0xffff80003c513230 rbx 0x21 rdx 0xffff8000015e7000 rcx 0 rax 0xffff8000384b54f0 r8 0x101010101010101 r9 0x8080808080808080 r10 0x5f2939b541524191 r11 0x2ab3eee784c0e2b1 r12 0 r13 0x1 r14 0 r15 0x1 rip 0xffffffff81c1f725 db_enter+0x25 cs 0x8 rflags 0x246 rsp 0xffff80003c513220 ss 0 db_enter+0x25: addq $0x8,%rsp ddb> show proc PROC (syz-executor) tid=161240 pid=20957 tcnt=2 stat=onproc flags process=0 proc=4000000 runpri=80, usrpri=80, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff8000384b5788,0xffff8000384b5cc8 process=0xffff80003c8ca458 user=0xffff80003c50e000, vmspace=0xfffff4807f220a10 estcpu=30, cpticks=1, pctcpu=0.0, user=0, sys=1, intr=0 ddb> ps PID TID PPID UID S PRLAGS PFLAGS WAIT COMMAND 68140 297196 64519 0 2 0 0 syz-executor 68140 234551 64519 0 3 0 0x4000080 fsleep syz-executor 81895 123936 97594 0 2 0 0 syz-executor 81895 66585 97594 0 2 0 0x4000000 syz-executor 52476 120804 7504 0 2 0x100002 0 sh 20957 253258 60906 0 2 0 0 syz-executor *20957 161240 60906 0 7 0 0x4000000 syz-executor 68255 312241 38755 0 2 0 0 syz-executor 68255 226627 38755 0 3 0 0x4000080 fsleep syz-executor 5874 479428 54951 0 2 0x10 0 syz-executor 5874 510668 54951 0 2 0x10 0x4000000 syz-executor 5874 124377 54951 0 3 0x10 0x4000080 fsleep syz-executor 5874 110772 54951 0 3 0x10 0x4000080 fsleep syz-executor 5874 522038 54951 0 2 0x10 0x4000000 syz-executor 7504 55906 88911 0 3 0x2 0x80 wait syz-executor 54951 230358 88911 0 3 0x2 0x80 nanoslp syz-executor 80762 48908 61125 0 3 0x1000 0x2000 suspend syz-executor 80762 142718 61125 0 2 0x1000 0x4080000 syz-executor 80762 169171 61125 0 3 0x1000 0x4080000 inode syz-executor 80762 367981 61125 0 3 0x1000 0x4080000 inode syz-executor 80762 392378 61125 0 3 0x1000 0x4080000 inode syz-executor 38755 434653 88911 0 3 0x2 0x80 nanoslp syz-executor 61125 27788 88911 0 2 0x2 0xc80 syz-executor 54927 5750 97226 0 3 0x1000 0x2000 suspend syz-executor 54927 880 97226 0 2 0x1000 0x4080000 syz-executor 54927 164423 97226 0 3 0x1000 0x4080000 inode syz-executor 54927 501367 97226 0 3 0x1000 0x4080000 inode syz-executor 97226 502677 88911 0 2 0x2 0xc80 syz-executor 64519 155221 88911 0 2 0x2 0xc80 syz-executor 60906 23117 88911 0 3 0x2 0x80 nanoslp syz-executor 40589 519275 0 0 3 0x14000 0x200 acct acct 94739 501224 1 0 3 0x100003 0x80 ttyin getty 97594 149174 88911 0 3 0x2 0x80 nanoslp syz-executor 88911 168129 79620 0 3 0x2 0x80 kqread syz-executor 79620 437728 52070 0 3 0x100002 0x88 sigsusp ksh 52070 324485 17898 0 3 0x10 0x88 kqread sshd-session 17898 90338 60636 0 3 0x12 0x80 kqread sshd-session 60636 158493 1 0 3 0 0x88 kqread sshd 67489 142105 29085 73 3 0x1100010 0x80 kqread syslogd 29085 506547 1 0 3 0x100002 0x80 sbwait syslogd-parent 53134 134491 1 0 3 0x100000 0x80 kqread resolvd 32482 110744 5614 77 3 0x100012 0x80 kqread dhcpleased 38307 111510 5614 77 3 0x100012 0x80 kqread dhcpleased 5614 260267 1 0 3 0 0x80 kqread dhcpleased 37896 454829 0 0 3 0x14000 0x200 bored smr 24045 314697 0 0 2 0x14000 0x200 zerothread 13959 263006 0 0 3 0x14000 0x200 aiodoned aiodoned 634 365632 0 0 3 0x14000 0x200 syncer update 41950 519590 0 0 3 0x14000 0x200 cleaner cleaner 78506 480868 0 0 3 0x14000 0x200 reaper reaper 52806 121005 0 0 3 0x14000 0x200 pgdaemon pagedaemon 93998 70552 0 0 3 0x14000 0x200 bored viomb 6231 486592 0 0 3 0x14000 0x40000200 acpi0 acpi0 98006 213086 0 0 3 0x14000 0x200 bored softnet0 45648 59001 0 0 3 0x14000 0x200 bored systqmp 83100 99866 0 0 3 0x14000 0x200 bored systq 41594 154959 0 0 3 0x14000 0x40000200 tmoslp softclock 10167 321480 0 0 3 0x14000 0x40000200 idle0 1 129744 0 0 3 0x2 0x80 wait init 0 0 -1 0 3 0x10000 0x200 scheduler swapper ddb> show all locks No such command ddb> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 11036 12117K 12640K 166960K 12493 0 pcb 17 12K 12K 166960K 47 0 rtable 225 7K 7K 166960K 1006 0 pf 36 14K 15K 166960K 96 0 ifaddr 40 7K 8K 166960K 140 0 ifgroup 53 2K 2K 166960K 159 0 sysctl 3 1K 9K 166960K 8 0 counters 34 17K 18K 166960K 62 0 ioctlops 0 0K 4K 166960K 84 0 iov 0 0K 16K 166960K 4 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1328 84K 84K 166960K 1719 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 9K 166960K 9 0 VM map 2 1K 1K 166960K 2 0 sem 16 1K 1K 166960K 20 0 dirhash 12 2K 2K 166960K 15 0 ACPI 1734 201K 291K 166960K 11964 0 file desc 18 65K 97K 166960K 630 0 sigio 0 0K 0K 166960K 3 0 proc 62 59K 124K 166960K 1107 0 subproc 72 4K 4K 166960K 270 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 10 0 in_multi 88 5K 6K 166960K 331 0 ether_multi 1 0K 0K 166960K 1 0 mrt 0 0K 0K 166960K 12 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 61 281K 281K 166960K 61 0 exec 0 0K 1K 166960K 663 0 fusefs mount 1 32K 32K 166960K 1 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 233 144K 157K 166960K 6237 0 UVM aobj 15 2K 2K 166960K 15 0 pinsyscall 39 78K 100K 166960K 2286 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 0K 166960K 1 0 NDP 16 0K 2K 166960K 98 0 temp 41 9119K 9183K 166960K 15336 0 kqueue 13 20K 24K 166960K 44 0 SYN cache 2 16K 16K 166960K 2 0 ddb> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle rtpcb 120 88 0 83 1 0 1 1 0 8 0 rtentry 136 345 0 245 4 0 4 4 0 8 0 unpcb 144 108 0 90 1 0 1 1 0 8 0 syncache 336 6 0 6 2 1 1 1 0 8 1 tcpcb 736 90 0 84 4 3 1 4 0 8 0 arp 96 61 0 45 1 0 1 1 0 8 0 ipq 40 2 0 0 1 0 1 1 0 8 0 ipqe 40 2 0 0 1 0 1 1 0 8 0 inpcb 328 608 0 599 7 0 7 7 0 8 6 nd6 112 88 0 66 1 0 1 1 0 8 0 pkpcb 40 2 0 2 1 1 0 1 0 8 0 kcovpl 48 30 0 22 1 0 1 1 0 8 0 ppxss 1072 5 0 4 1 0 1 1 0 8 0 pfstscr 40 2 0 2 1 1 0 1 0 8 0 pfstkey 128 3 0 3 2 1 1 1 0 8 1 pfstate 384 2 0 2 2 1 1 1 0 8 1 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 1389 0 972 32 3 29 29 0 8 0 art_table 40 1390 0 972 5 0 5 5 0 8 0 art_node 32 345 0 254 1 0 1 1 0 8 0 sysvmsgpl 40 10 0 8 1 0 1 1 0 8 0 semupl 112 4 0 4 1 1 0 1 0 8 0 semapl 72 17 0 3 1 0 1 1 0 8 0 shmpl 120 12 0 0 1 0 1 1 0 8 0 dirhash 1024 19 0 2 3 0 3 3 0 8 0 dino2pl 256 1900 0 388 95 0 95 95 0 8 0 ffsino 256 1900 0 388 95 0 95 95 0 8 0 nchpl 144 2323 0 551 66 0 66 66 0 8 0 vnodes 216 2282 0 0 127 0 127 127 0 8 0 namei 1024 10279 0 10274 5 2 3 3 0 8 1 kstatmem 264 81 0 56 2 0 2 2 0 8 0 scxspl 216 18726 0 18726 4 3 1 4 1 8 1 plimitpl 152 77 0 58 1 0 1 1 0 8 0 sigapl 424 878 0 834 7 1 6 6 0 8 0 knotepl 120 8761 0 8714 17 7 10 10 0 8 8 kqueuepl 184 54 0 45 1 0 1 1 0 8 0 pipepl 304 204 0 177 3 0 3 3 0 8 0 fdescpl 448 864 0 834 5 1 4 5 0 8 0 filepl 120 3313 0 3089 10 0 10 10 0 8 2 lockfpl 104 68 0 66 1 0 1 1 0 8 0 lockfspl 48 30 0 28 1 0 1 1 0 8 0 sessionpl 144 56 0 48 1 0 1 1 0 8 0 pgrppl 48 87 0 71 1 0 1 1 0 8 0 ucredpl 104 283 0 268 1 0 1 1 0 8 0 zombiepl 144 886 0 884 1 0 1 1 0 8 0 processpl 1160 878 0 834 4 0 4 4 0 8 0 procpl 664 1202 0 1143 8 1 7 7 0 8 1 sockpl 552 814 0 782 7 0 7 7 0 8 4 mcl64k 65536 4 0 4 2 1 1 1 0 8 1 mcl8k 8192 12 0 12 1 1 0 1 0 8 0 mcl4k 4096 2757 0 2700 14 6 8 14 0 8 0 mcl2k 2048 616 0 616 3 0 3 3 0 8 3 mextrefs 64 174 0 174 1 0 1 1 0 8 1 mtagpl 96 4 0 4 1 1 0 1 0 8 0 mbufpl 256 7734 0 7575 19 1 18 18 0 8 6 bufpl 272 8125 0 1899 416 0 416 416 0 8 0 anonpl 24 139927 0 131137 55 2 53 53 0 187 0 amapchunkpl 152 18161 0 17653 34 12 22 33 0 158 0 amappl16 200 2842 0 2472 25 5 20 20 0 8 0 amappl15 192 47 0 47 1 1 0 1 0 8 0 amappl14 184 653 0 650 1 0 1 1 0 8 0 amappl13 176 155 0 145 1 0 1 1 0 8 0 amappl12 168 1183 0 1154 2 0 2 2 0 8 0 amappl11 160 13 0 13 1 1 0 1 0 8 0 amappl10 152 61 0 53 1 0 1 1 0 8 0 amappl9 144 290 0 290 1 1 0 1 0 8 0 amappl8 136 170 0 169 1 0 1 1 0 8 0 amappl7 128 184 0 174 1 0 1 1 0 8 0 amappl6 120 243 0 241 1 0 1 1 0 8 0 amappl5 112 210 0 203 1 0 1 1 0 8 0 amappl4 104 329 0 315 1 0 1 1 0 8 0 amappl3 96 3575 0 3454 5 1 4 4 0 8 0 amappl2 88 539 0 489 2 0 2 2 0 8 0 amappl1 80 13270 0 12713 14 1 13 14 0 8 0 amappl 88 5176 0 5005 6 1 5 5 0 92 0 uvmvnodes 80 104 0 0 3 0 3 3 0 8 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 14 0 0 1 0 1 1 0 8 0 uaddrrnd 24 864 0 834 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 864 0 834 1 0 1 1 0 8 0 vmmpekpl 168 8186 0 8132 3 0 3 3 0 8 0 vmmpepl 168 65390 0 63235 94 0 94 94 0 357 0 vmsppl 368 863 0 834 4 1 3 4 0 8 0 rwobjpl 40 21325 0 19999 14 0 14 14 0 8 0 pdppl 4096 1734 0 1668 112 42 70 82 0 8 4 pvpl 32 364745 0 350692 125 11 114 114 0 265 0 pmappl 216 863 0 834 3 1 2 3 0 8 0 extentpl 40 46 0 28 1 0 1 1 0 8 0 phpool 112 816 0 64 22 0 22 22 0 8 0 ddb> machine ddbcpu 0 No such command ddb> trace db_enter() at db_enter+0x25 panic(ffffffff834b1b1e) at panic+0x1cf __assert(ffffffff834f0346,ffffffff834cb091,84,ffffffff8353f626) at __assert+0x29 rtmap_grow(18,21) at rtmap_grow+0x1f2 rtable_add(17) at rtable_add+0x279 route_output(fffff4807f221300,ffff800010fe1c10) at route_output+0x564 route_send(ffff800010fe1c10,fffff4807f221300,0,0) at route_send+0xd7 sosend(ffff800010fe1c10,0,ffff80003c513618,0,0,c) at sosend+0x7f4 sendit(ffff8000384b54f0,3,ffff80003c513710,c,ffff80003c5137b0) at sendit+0x5a5 sys_sendto(ffff8000384b54f0,ffff80003c513860,ffff80003c5137b0) at sys_sendto+0x8d syscall(ffff80003c513860) at syscall+0x962 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7dd2593f320, count: -12 ddb> machine ddbcpu 1 No such command ddb> trace db_enter() at db_enter+0x25 panic(ffffffff834b1b1e) at panic+0x1cf __assert(ffffffff834f0346,ffffffff834cb091,84,ffffffff8353f626) at __assert+0x29 rtmap_grow(18,21) at rtmap_grow+0x1f2 rtable_add(17) at rtable_add+0x279 route_output(fffff4807f221300,ffff800010fe1c10) at route_output+0x564 route_send(ffff800010fe1c10,fffff4807f221300,0,0) at route_send+0xd7 sosend(ffff800010fe1c10,0,ffff80003c513618,0,0,c) at sosend+0x7f4 sendit(ffff8000384b54f0,3,ffff80003c513710,c,ffff80003c5137b0) at sendit+0x5a5 sys_sendto(ffff8000384b54f0,ffff80003c513860,ffff80003c5137b0) at sys_sendto+0x8d syscall(ffff80003c513860) at syscall+0x962 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7dd2593f320, count: -12