last executing test programs: 1.595259625s ago: executing program 5 (id=6): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000040)={'tap', 0x0}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000140)={0x3, &(0x7f0000000000)=[{0x2c, 0x0, 0x2, 0x6}, {0x1, 0xff, 0x30, 0x20407}, {0x6, 0x4, 0x7, 0x7ed}]}) symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') execve(0x0, &(0x7f00000001c0)=[0x0, &(0x7f00000000c0)='/dev/speaker\x00'], 0x0) r1 = socket(0x1, 0x2, 0x0) syz_emit_ethernet(0x17a, &(0x7f00000006c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa08004806016c006400030629907800000000ffffffff070b1eac1400bb00000010004e224e20", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="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"]) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r2 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x17, 0x2000007, 0x101, 0x80000001, 0x80000001, 0x10001, 0x10, [{0x0, 0x7, 0x4, 0x71000}, {0x7, 0x8, 0x8, 0xfffffff9}, {0x8, 0xf86, 0x0, 0x9}, {0x1, 0x800, 0x8007}, {0x401, 0x200726, 0x2800, 0x7}, {0x2, 0x6, 0x3, 0x99}, {0xce1, 0xffffffff, 0x4f8, 0x6d}, {0x6, 0x803, 0x14, 0x8}, {0x2, 0x82, 0x5, 0x9}, {0x4, 0x8001, 0xd1b, 0x88}, {0x1ce, 0x10001, 0xc, 0x3}, {0x7ff, 0x9, 0x8, 0x9}, {0xb8c, 0x4, 0x8, 0x4}, {0x29a71717, 0xfffffffa, 0x1, 0x6}, {0xc, 0x7, 0x5}, {0x0, 0x1, 0x1002, 0x30004}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r2, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r2, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) r3 = kqueue() kevent(r3, &(0x7f0000000080), 0xe4a, 0x0, 0x4000a9fa, 0x0) ioctl$FIONREAD(r1, 0xc0106924, &(0x7f00000001c0)) r4 = socket(0x2, 0x2, 0x0) ioctl$FIONREAD(r4, 0x80206979, &(0x7f00000000c0)) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x24, 0x9, 0x2, 0x2}, {0xb1, 0x10, 0xe4}, {0x6, 0xa, 0x83, 0x4000400f}]}) openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x100, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000000c0)="5421f0aec05abf43838f2b5503a1000000000000fe1fc05faec2a8beac000000", 0x20}], 0x1, 0x200805) sysctl$kern(0x0, 0x0, &(0x7f0000000100)='q', &(0x7f0000000080)=0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r5 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCSETIF(r5, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) ioctl$BIOCSETWF(r5, 0x80104277, &(0x7f0000000040)={0x19, 0x0}) 1.413040652s ago: executing program 7 (id=9): mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x205b9a) r0 = open(&(0x7f0000000040)='./file0\x00', 0x40, 0x100) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$BIOCIMMEDIATE(r1, 0x80044270, &(0x7f0000000080)=0x9) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$FIOASYNC(r1, 0x8004667d, &(0x7f0000000200)=0x7) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x5900) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$BIOCSETIF(r2, 0x80084904, &(0x7f0000000380)={'tap', 0x0}) syz_extract_tcp_res(0x0, 0x4, 0x5) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000000)={'tap', 0x0}) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$FIONREAD(r3, 0x80206979, &(0x7f0000000000)) select(0x40, &(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x0, 0x0) close(r0) 1.412517154s ago: executing program 4 (id=5): sysctl$net_inet_icmp(&(0x7f0000000040)={0x4, 0x2, 0x1, 0x5}, 0x4, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x11}, 0x6, &(0x7f0000000080)="ae215599fed2fce97f573b9c553a0e622d29cd093849cd4fe42e0f5d2d06a4e744f0713d1fcaa1b8274dffd067d413ef9d2224d3fddc171f73a295b6ed18b3d0588be75e78a1d734e15bfe", 0x0, 0x0, 0xfffffffffffffd37) setuid(0xffffffffffffffff) writev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000000)="c886b4d3e0", 0x5}], 0x1) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket(0x2, 0x2, 0x0) bind(r0, &(0x7f0000000000), 0x10) 1.409879115s ago: executing program 1 (id=2): socket(0x11, 0x3, 0x0) (async) r0 = socket(0x11, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x20, 0x0) sendmsg$unix(r1, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1800"], 0x18}, 0x0) (async) sendmsg$unix(r1, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1800"], 0x18}, 0x0) syz_emit_ethernet(0xda, &(0x7f00000003c0)={@local, @random="5fbb8af09d48", [], {@ipv6={0x86dd, {0x6, 0x6, "e22945", 0xa4, 0x33, 0x8, @local={0xfe, 0x80, '\x00', 0x0}, @rand_addr="b13c0811bdcbcd4b93f63f5806ba09f1", {[@hopopts={0x6, 0x1, '\x00', [@jumbo, @padn={0x1, 0x1, [0x0]}]}, @hopopts={0x62, 0xe, '\x00', [@enc_lim={0x4, 0x1, 0x3}, @pad1, @ra={0x5, 0x2, 0x5}, @padn={0x1, 0x2, [0x0, 0x0]}, @generic={0x40, 0x5a, "daeb0de4e2f037179a6a58638e4467c3e866762afe463ed9cce626728de1bc0ac29edbf64d632154869d56509cbef2ae2f060873b6e40666986769d0a2787cb9de42db456b6b30c16724fea6ee5fe1e9a7bcc73a8c3d80bf81c1"}, @jumbo={0xc2, 0x4, 0x7}]}], @tcp={{0x3, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x80, 0x4, 0x0, 0x4}}}}}}}) (async) syz_emit_ethernet(0xda, &(0x7f00000003c0)={@local, @random="5fbb8af09d48", [], {@ipv6={0x86dd, {0x6, 0x6, "e22945", 0xa4, 0x33, 0x8, @local={0xfe, 0x80, '\x00', 0x0}, @rand_addr="b13c0811bdcbcd4b93f63f5806ba09f1", {[@hopopts={0x6, 0x1, '\x00', [@jumbo, @padn={0x1, 0x1, [0x0]}]}, @hopopts={0x62, 0xe, '\x00', [@enc_lim={0x4, 0x1, 0x3}, @pad1, @ra={0x5, 0x2, 0x5}, @padn={0x1, 0x2, [0x0, 0x0]}, @generic={0x40, 0x5a, "daeb0de4e2f037179a6a58638e4467c3e866762afe463ed9cce626728de1bc0ac29edbf64d632154869d56509cbef2ae2f060873b6e40666986769d0a2787cb9de42db456b6b30c16724fea6ee5fe1e9a7bcc73a8c3d80bf81c1"}, @jumbo={0xc2, 0x4, 0x7}]}], @tcp={{0x3, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x80, 0x4, 0x0, 0x4}}}}}}}) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0xe5, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4004}, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x1ff, 0x7, 0xa, 0xb}) semget$private(0x0, 0x2, 0x2) r2 = socket(0x18, 0x2, 0x0) connect$unix(r2, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) (async) connect$unix(r2, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) writev(r2, &(0x7f00000006c0)=[{0x0}], 0x1) sendmmsg(r1, &(0x7f0000000480)={0x0}, 0x10, 0x0) sendto$unix(r0, &(0x7f00000000c0)="b10005166000009f0000000000070000001c130500000000fef96ecfc72fd3357ae380b37b673039d2d236acf60b7804be78164991f7c8cf5f882b297be1aa5b23edeb51e2f0ac3ebbc215000000eeffffff028ea8af630037282102000000720fd38bfbb770c1f572c881ea772ec592040000000000ff0c2300008abfba0900000008e371a3f8343712051eeab71d89e0442c5e52000080042000"/177, 0xb1, 0x0, 0x0, 0x0) 1.408523439s ago: executing program 4 (id=10): r0 = socket(0x20, 0x2, 0x4) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) (async) ioctl$FIONREAD(r0, 0x802069b4, &(0x7f00000001c0)) r1 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$WSKBDIO_SETMODE(r1, 0x8004667c, &(0x7f00000000c0)=0x1) 1.408219659s ago: executing program 4 (id=11): setuid(0xffffffffffffffff) utimes(0x0, 0x0) geteuid() shmget(0x0, 0x4000, 0x627, &(0x7f0000ffb000/0x4000)=nil) readlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/186, 0xba) shmget(0x0, 0x2000, 0x3f0, &(0x7f0000ffd000/0x2000)=nil) 1.400784878s ago: executing program 4 (id=12): r0 = socket(0x6, 0x2, 0x4) r1 = dup(r0) r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) close(r2) mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r3 = socket(0x2, 0x2, 0x0) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) connect$unix(r3, &(0x7f0000000000), 0x10) r4 = socket(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0xffff, 0x1023, &(0x7f0000000040), 0xe0) setsockopt$sock_int(r2, 0xffff, 0x1023, 0x0, 0x0) sysctl$vfs_nfs(&(0x7f0000000200)={0xa, 0x2, 0x1}, 0x3, &(0x7f0000000240), 0x0, 0x0, 0x0) 1.400319674s ago: executing program 0 (id=1): r0 = syz_open_pts() ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000040)={0x1, 0x5, 0x8cbe, 0x9, "909c992f86cd2092107e9479749d3b6d7f164aeb", 0x8, 0x7f}) ioctl$FIONREAD(r0, 0x4004667f, &(0x7f0000000000)) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000300)="8269cd28367f22fc85ef3a6eb30547a68400fffb8db76e74c03d6cc2eea2782146294dcbb86fb2c2ccc1624d4a3e35d69a1c9c89b74aacaa51d8dd7c50553dbd58a011716f9f1dcbf02eaf668240b786e4dbbd5f2fd65b9098e719c6f8fbd20506dfbadc0d", 0x65}], 0x1) write(r0, &(0x7f0000000380)="964f278f5748071431237f1b15ffc9c588174052f328c93a0b85e9896ccfec65efaf734466aa1fb0cfdacef96d2e673bbee98c515b13c924dfcb3a42989ba25b48fbb9a907c1ce62f3dbb15f7018fd1dbf7cfdfce84fd61466523bdbb8f69ce3daec8310a92cd5848bab3a0360b812", 0x6f) syz_open_pts() ioctl$TIOCSETAF(r0, 0x802c7416, &(0x7f0000000180)={0x105, 0xffffffff, 0x8000000, 0xfffffffe, "a8a39cefab00", 0xa2}) ioctl$TIOCFLUSH(r0, 0x80047410, &(0x7f0000000080)) openat$wskbd(0xffffffffffffff9c, 0x0, 0x1, 0x0) 1.399606675s ago: executing program 1 (id=13): writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000009c0)="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", 0x180}], 0x1) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000b40)="825a4f47c21e6ed7eda0f5903abf65b18d7c51f78b06ccffb40500000000000000000000fafd3493776665d4cd12c63d34", 0x31}], 0x1, 0x0, 0x0, 0x406}, 0x0) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x200, 0xd) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x7}, 0x85c, 0x8000000000000007, 0x0, 0x0, 0x1, 0x7b, 0x7, 0x4}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x33}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x3414, 0x0, 0xffffffffffffff5a) faccessat(r0, &(0x7f0000000080)='./file0\x00', 0x20, 0x1) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r2 = syz_open_pts() ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f0000000080)={0xffff464c, 0x9, 0x1, 0xd2c, "de81f97e9102839071cb075ac23b500d01000019", 0x5, 0x5}) writev(r2, &(0x7f0000000700)=[{&(0x7f00000009c0)="7529eb67b3503c43df84995fb9bb20b2180b46e264d2ae6cc2765d865d739938189f36e8cbd621af8f481e18f672359ec8e94070c744a346a63ae47cd4e9489b950e8f5fb25dc5cbba81735a94dd33a2f237b78f52a7c3d6c361d0ab55ef37d67f4113a8ff5f506e8197dbc730ccea5789393c91dcb76d9aa0a988f2516c96683ab4829b85e50254fab96647164cac6d03c94bddd663ec6bd29a8b238724d87e72584abd20261f8febac4813f236755a45089c938e5a7ddcdab0bf57c21ab8a5fbe9e27a743a230c008bea4e32cb28812e67e0963161223e25654ea78497704d6238e9ab05ca7ec43a8c93c02b37fbe411b0bf8fe0afcbc2f88da75421bb5104dd4fb8a37a341d01", 0x108}], 0x1) r3 = openat(0xffffffffffffffff, &(0x7f0000000080)='.\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/239, 0xef}], 0x1, 0x0}, 0x40) write(r5, &(0x7f0000000440)="c24f1ed0ee7501c96edee9cd791ddb5625b58ec0378b8d9031de53043e140fc303704fac6aaedd7670c313d01d816c8d93054adc24038b5a89745ab62ce57da45e613f4063ecb0aee97ac5275240ffc9a5e35d7d91752b42fe5abe5f49665782f726eee3a28f1962b521955cfa2140809e5681cc62a0140f45ea7aadf38dcfcff415715cdd7fc2adfad588d7617ea30dbc", 0xef) ioctl$TIOCSETAF(r3, 0x802c7416, &(0x7f0000000000)={0x4, 0x1, 0xc, 0x54c, "22de190400000000ebe1de00", 0x2003, 0x4dc82f7e}) sendto$unix(r3, &(0x7f0000000000)="b10005040000040000", 0x9, 0x400, 0x0, 0x0) r6 = socket(0x11, 0x3, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$net_inet6_ip6(&(0x7f0000000040)={0x4, 0x18, 0x29, 0x33}, 0x4, 0x0, 0x0, 0x0, 0x0) sendto$unix(r6, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a378343712051eea040000000000", 0xb1, 0x0, 0x0, 0x0) ioctl$TIOCSETA(r1, 0xc4504444, &(0x7f0000000740)={0xfffff944, 0x400ffef, 0x3, 0x20000006, "0400000000800000ebb178d90000d31962fff0d1", 0xafd3, 0x1}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x24, 0x9, 0x2, 0x2}, {0xb1, 0x10, 0xe4}]}) openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x10000, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) writev(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f00000005c0)="c5eabfedf9e2015c9271000000000000b66d296b3c00", 0x16}, {&(0x7f0000000300)="84c7c32cf32c7b3eee14ff20d54292f8bf03cbe05ecc899e969ab424f95f56e3f8517604f93a31ec4177b122a93be0e212eb70956fbd4d27f4a7f4163e76e604956b53113ff57b8e33a5e7043227", 0x4e}, {&(0x7f0000000400)="9133b3ca0ec969ed71ec6b5a87d89c603ff0872e0d7d10112229027aab6b624b", 0x20}], 0x3) sysctl$kern(0x0, 0x0, &(0x7f0000000180)="ee72e2feb4363843ad056b0f079f8697b7b983c0359778d9c06a9803d7ed0a4a760bf7ca8ecd78721f56840f2b47ae4b3a5180436fe7562a449721cf58f027e2330d527a71fd612c", &(0x7f0000000080)=0x48, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r7 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCSETIF(r7, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) ioctl$BIOCSETWF(r7, 0x80104277, &(0x7f0000000040)={0x19, 0x0}) 1.397823466s ago: executing program 3 (id=4): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000000)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffff9c, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0xcb, 0x2, 0x1, 0x440}, {0x81, 0x0, 0x0, 0xfffffffc}, {0x6, 0x0, 0xfd, 0x48a0}]}) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000640)="ddee36ee6e0e1b0378c5bd98e071b6e8e656195650092e23f040951877a81a874917137ea121c33c5d207987f6", 0x2d}], 0x1) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1000, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$DIOCMAP(r2, 0xc0106477, &(0x7f00000000c0)={&(0x7f0000000080)='./file0\x00', r1, 0x2}) close(r1) open(&(0x7f0000000000)='./file0\x00', 0x9cab835cfdc52675, 0x0) sysctl$kern(0x0, 0x0, &(0x7f0000000100)="71f91e34", &(0x7f0000000080)=0x4, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x32, &(0x7f0000000580)=ANY=[]) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x205, 0x0) fcntl$lock(r3, 0x9, &(0x7f0000000040)={0x0, 0x1, 0x8000000000000001, 0x1000300010005}) 1.257413012s ago: executing program 5 (id=14): r0 = msgget$private(0x0, 0x0) r1 = socket(0x18, 0x2, 0x0) setsockopt(r1, 0x1000000029, 0x3e, &(0x7f0000000080)="6700d6e5", 0x4) msgrcv(r0, &(0x7f0000000000)={0x0, ""/226}, 0xea, 0x0, 0x3000) msgctl$IPC_SET(r0, 0x1, &(0x7f0000258f88)={{0x1, 0x0, 0x0, 0x0, 0x0, 0x170}, 0x0, 0x0, 0x800000000000000, 0x6, 0xffffffffffffffff, 0x0, 0x3, 0xe8}) msgsnd(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0200c7"], 0xe, 0x800) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x100000000000000, 0xffffffffffffffff}) socket(0x18, 0x2, 0x0) (async) r2 = socket(0x18, 0x2, 0x0) close(r2) r3 = socket(0x800000018, 0x2, 0x0) bind$unix(r3, &(0x7f0000000080)=@abs={0x0, 0x7}, 0x8) (async) bind$unix(r3, &(0x7f0000000080)=@abs={0x0, 0x7}, 0x8) connect$unix(r2, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) (async) connect$unix(r2, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) socket(0x800000018, 0x2, 0x0) (async) r4 = socket(0x800000018, 0x2, 0x0) pread(r4, &(0x7f0000000300)="43312d8edeaf28a2dc3c81d876310cd8bede0e155939db3e66696fefd3a894f8aad3575637d463254268fd220b49e7c6aee1873bdeb52505689fb254ba0e4ae5dd2bca27979eb4a0c3c6c9444958d3deca17463be8a2fbd1c7d6fc46485c0425deb25c107c151c72d9c583d412912aa89555bb3181c92f9521ec463cc77cfccd73c3e3c8", 0x84, 0x1000) kqueue() (async) r5 = kqueue() kevent(r5, &(0x7f0000000080)=[{{r5}, 0xffffffffffffffff, 0x13e, 0x40000000, 0x0, 0xb9b}], 0x40, 0x0, 0xa, 0x0) open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7949) (async) r6 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7949) r7 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000000), 0x10, 0x0) ioctl$VNDIOCGET(r7, 0xc4104603, &(0x7f0000000040)={'./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffff, 0x0, 0xfffffffffffffffe}) writev(r6, &(0x7f0000000100)=[{&(0x7f0000000040)="00000018", 0x4}], 0x1) (async) writev(r6, &(0x7f0000000100)=[{&(0x7f0000000040)="00000018", 0x4}], 0x1) readv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000180)=""/15, 0xf}], 0x1) socket$unix(0x1, 0x5, 0x0) (async) r8 = socket$unix(0x1, 0x5, 0x0) bind$unix(r8, &(0x7f0000000200)=@file={0xd570d0466b6018f, './file0\x00'}, 0xa) (async) bind$unix(r8, &(0x7f0000000200)=@file={0xd570d0466b6018f, './file0\x00'}, 0xa) listen(r8, 0x4) r9 = socket$unix(0x1, 0x5, 0x0) connect$unix(r9, &(0x7f0000000040)=@file={0xd1653077bafa0114, './file0\x00'}, 0xa) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) accept$unix(r8, &(0x7f0000000100)=@file={0x0, ""/89}, &(0x7f0000000000)=0x5b) (async) accept$unix(r8, &(0x7f0000000100)=@file={0x0, ""/89}, &(0x7f0000000000)=0x5b) ioctl$VMM_IOC_CREATE(r6, 0xc2585601, &(0x7f0000000100)={0x10, 0xa, [{&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, 0x1e58}, {&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x3a7f}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x3}, {&(0x7f0000ff8000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x7}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x7f}, {&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff7000/0x2000)=nil, 0x4}, {&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0xc}, {&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x4}, {&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x9}, {&(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x4}, {&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x6}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x1000)=nil, 0x34}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x4}, {&(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff6000/0x4000)=nil, 0xffff}, {&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0xa9ab}, {&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x7fffffff}], './file0\x00', 0x101}) bind$unix(r4, &(0x7f0000000000)=@abs={0x1f95d27d48731892, 0x7}, 0x8) 1.240796009s ago: executing program 5 (id=15): ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x24, 0x9, 0x2, 0x2}, {0xb1, 0x10, 0xe4}, {0x6, 0xa, 0x83, 0x400f}]}) openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000005c0)="c5eabfedf9e2015c9271000000000000b6396d296b3ceeceedf043984f89c271", 0x20}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) sysctl$net_inet_ip(&(0x7f0000000080)={0x4, 0x2, 0x0, 0x14}, 0x4, 0x0, 0x0, &(0x7f0000000040)="be0673a8", 0x4) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000040)={0x19, 0x0}) write(r0, &(0x7f0000000000)="bb89a7a58919b0f928e41c8a84e1", 0xe) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000000)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffff9c, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0xcb, 0x2, 0x1, 0x440}, {0x81, 0x0, 0x0, 0xfffffffc}, {0x6, 0x0, 0xfd, 0x48a0}]}) sysctl$kern(0x0, 0x0, &(0x7f0000000100)="71f91e3471", &(0x7f0000000080)=0x5, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x32, &(0x7f0000000580)=ANY=[]) syz_emit_ethernet(0x86, &(0x7f0000000180)=ANY=[@ANYBLOB="8f6f77ede655aebfeea6d8c486dd605f6ad900503a7f00000000000000000000000000000000fe8000000000000000000000000000aa02009078000000006006c33e00003a00fe8000000000000000000000000000aaff020000000000000000000000000001c8"]) 1.238324498s ago: executing program 2 (id=3): r0 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$WSKBDIO_SETENCODING(r0, 0x80045710, &(0x7f0000000040)=0xc) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0xe8, 0x8000}, 0x3fe}) r1 = socket(0x18, 0x3, 0x0) connect$unix(r1, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) r2 = open(&(0x7f0000000180)='./file0\x00', 0x615, 0x0) open(&(0x7f0000000300)='./file0\x00', 0x11, 0x0) close(r2) 1.237879128s ago: executing program 5 (id=16): r0 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = socket(0x18, 0x2, 0x0) setsockopt(r1, 0x1000000000029, 0xe, &(0x7f00000000c0), 0x0) mknodat(r0, &(0x7f0000000240)='./file0\x00', 0x2000, 0x4e5a6060) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x4040000000000000}) r2 = socket(0x18, 0x1, 0x0) connect$unix(r2, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) mknod(&(0x7f0000000000)='./bus\x00', 0x2000, 0x0) r3 = open(&(0x7f0000000140)='./bus\x00', 0x8, 0x43) ioctl$PCIOCREAD(r3, 0x80047462, &(0x7f0000000080)) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$FIONBIO(r4, 0x8004667e, &(0x7f0000000300)=0x7) r5 = socket(0x18, 0x2, 0x0) r6 = getuid() ftruncate(0xffffffffffffffff, 0xff) r7 = getgid() semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0xffffffffffffffff, 0x0, r7, 0x2, 0x200}}) r8 = socket(0x18, 0x3, 0x0) connect$unix(r8, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) getsockname$inet(r8, &(0x7f00000000c0), &(0x7f0000000000)=0xffffffffffffff35) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r9 = socket(0x18, 0x1, 0x0) close(r9) r10 = socket(0x18, 0x1, 0x3a) connect$unix(r9, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) sendto(r10, &(0x7f0000000180)="55a88cf450ab54bceb7c562daaa8df08e30d4b0a", 0x14, 0x2, 0x0, 0x0) fchown(r4, r6, r7) r11 = accept$inet6(r1, 0x0, &(0x7f0000000180)) r12 = openat$null(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) kevent(r3, &(0x7f00000001c0)=[{{r5}, 0x0, 0x90, 0xe00fffbc, 0xa7, 0xa}, {{r11}, 0xfffffffffffffffd, 0x10, 0xf0000000, 0x0, 0x2}], 0x7, &(0x7f0000000280)=[{{r5}, 0xfffffffffffffffa, 0x4, 0x40, 0x80000001, 0x5}, {{r12}, 0xfffffffffffffffe, 0x40, 0x80000000, 0xfffffffffffff801, 0x7}], 0x0, &(0x7f00000002c0)={0x101, 0x1}) 178.279464ms ago: executing program 5 (id=17): accept$inet6(0xffffffffffffffff, 0x0, 0x0) socket(0x18, 0x1, 0xf7) r0 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r0, 0xc0106924, 0x0) setrlimit(0x3, &(0x7f0000000200)={0x100000, 0x100000}) mknod(&(0x7f0000000400)='./file0\x00', 0x2000, 0x5c4a) r1 = open(&(0x7f00000002c0)='./file0\x00', 0x8000, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIONREAD(r1, 0x4004667f, 0x0) r2 = syz_open_pts() close(r2) syz_open_pts() ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f0000000040)={0x7ff, 0x1c, 0xffff, 0x200499, "084880fa870000bdda0988d11554e90d6602ff07", 0x0, 0x3}) writev(r2, &(0x7f0000000240)=[{&(0x7f00000000c0)="a8a3f5f1a24ae0e82f9f6552797ce4f0c43f8156431c20175ca5e2760418fcda14001c49f1246567e6dd8bd4077f8486f361fb10c6cbde718e346f00f616f63f4a0554285d054b82225beba037ccdf6c91e88d21718431bd2c32ad110acce6f14c2412f8a14138c3a2f3b3d2e486d84e21ee03be62590c067ff3e44b57f58fc6c50000000000000000", 0xd5}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r3 = socket$inet(0x2, 0x2, 0x0) close(r3) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r4, 0x0, 0x200000000000a, &(0x7f0000000000)="ea00005c00000000", 0x1) setsockopt$inet_opts(r3, 0x0, 0x200000000000c, &(0x7f0000000240)="ea00aa6600000000", 0x8) r5 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) writev(r5, &(0x7f00000001c0)=[{&(0x7f00000002c0)="23180596c9095449483e68bf39cb85705a226281f2b44595aaedcb5f134c99d5293bc09edcab079034fb4752fe6b83389fcb5279ea8969c4fb347bf688ac55cd175f650b94b946e78421ecdb4000c85d6c18e801a83065f13e012746cb42553f1a742729ae3fc076aed8e69b5730f95f81462e", 0x73}], 0x1) writev(r5, &(0x7f0000000280)=[{&(0x7f0000000080)="96e9cf1c159f0b69904fabf735bd3794417a80412b81b220a2be41ca6ac25ac05e6f4c", 0x23}], 0x1) r6 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f00000000c0), 0x84c7aa6835e42185, 0x0) ioctl$WSMUXIO_ADD_DEVICE(r6, 0x80085761, &(0x7f0000000100)={0x2, 0x1}) setsockopt(0xffffffffffffffff, 0x80000001, 0x10, &(0x7f0000000340)="349d49ff5ff777e70000629aa8b2c7cfe862240111833d0f128b500844de14b9847467cd68420979f9d78cba936e3c5151454d", 0x33) r7 = socket(0x1e, 0x3, 0x0) sendmsg$unix(r7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=ANY=[], 0xb0}, 0x0) execve(0x0, 0x0, 0x0) 176.867608ms ago: executing program 7 (id=18): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$BIOCGDIRFILT(r0, 0x20007461, 0x0) r1 = syz_open_pts() open$dir(&(0x7f0000000b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x0) open$dir(&(0x7f0000000040)='./file0\x00', 0x200, 0x185) r2 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000005c0)='\x00', r2, &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') open$dir(&(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x0) symlinkat(&(0x7f0000000dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r2, &(0x7f0000000ec0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mkdirat(r2, &(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rmdir(&(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000980)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000a80)='./file0\x00') unlink(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000d80)='./file0\x00', &(0x7f0000000180)='./file1\x00') r3 = socket(0x11, 0x3, 0x0) r4 = kqueue() kevent(r4, &(0x7f0000000080)=[{{r4}, 0xfffffffffffffffb, 0x13e, 0x40000000, 0x0, 0xb9b}, {{r4}, 0xffffffffffffffff, 0x4f, 0x4, 0x9, 0x4}], 0x40, 0x0, 0xa, 0x0) kevent(r4, &(0x7f0000000000)=[{{r4}, 0xfffffffffffffff9, 0x17, 0x10}], 0x29f, 0x0, 0x8001, 0x0) sendto$unix(r3, &(0x7f00000000c0)="b100051660000004000000000700000008008106cfa1e4fffdf96ecfc73fd3357ae36caa0416fa4f376b36acf00b7805be301e4991f7c8cf5f3fc303ebe1aa5323edeb51e2f0ca3ebbc257699a1f133ea7acb5d602000d7d026ba8af6300371c2102000000720fd38bfbb770c1f5a8aec872ea772ec58904000000008d9800361b1257aba8c500002012010000de5000"/177, 0xb1, 0x0, 0x0, 0x4f) rename(&(0x7f0000000fc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000010c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000040)='./file1\x00', &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') ioctl$TIOCDRAIN(r1, 0x2000745e) 168.840615ms ago: executing program 6 (id=7): mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x5d4a) mknod(&(0x7f0000000200)='./file0\x00', 0x2000, 0x4004287d) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$FIOASYNC(r0, 0x8004667d, &(0x7f0000000040)=0xdaf6) r1 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0) ioctl$DIOCMAP(r1, 0xc0106477, &(0x7f00000000c0)={&(0x7f0000000140)='./file0\x00', r1, 0x3}) 104.13279ms ago: executing program 0 (id=19): r0 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000080), 0x10000, 0x0) ioctl$VMM_IOC_WRITEREGS(r0, 0x82485608, &(0x7f0000000200)={0x8000, 0x1, 0x80, {[0x0, 0xd0b3, 0x3, 0x8, 0x7, 0xb41f, 0xff, 0x2, 0x4, 0x3, 0x12640e9e, 0x8, 0x4, 0x9, 0x3, 0x1, 0x6, 0xa3e], [0x8000000000000000, 0xc, 0x7, 0x3, 0x6, 0x3, 0x8000000000000001, 0x8, 0x8, 0x3], [0x3, 0x10001, 0x4, 0x2, 0x9, 0x9, 0x5], [0x401, 0x2, 0xed31, 0x5, 0x41bf, 0x6], [{0x4, 0x80, 0x7, 0x8}, {0x4, 0x1, 0xfffffff0, 0x4}, {0x0, 0x6, 0xc, 0xdd1b}, {0x5, 0x101, 0x3, 0xd9}, {0x3, 0x8, 0x1f74a5e0, 0x5}, {0x0, 0x5, 0x74ff, 0x4950}, {0x4, 0x3, 0xed00}, {0x8, 0x9, 0x6, 0x7}], {0x8, 0x970, 0x2400000, 0x5}, {0x5, 0x4, 0x9, 0xfffffffffffffff9}}}) kqueue() select(0x0, 0x0, 0x0, &(0x7f0000000100)={0xad2d, 0x1c, 0x0, 0x3, 0x1, 0x8000000000000000, 0x1, 0xb}, 0x0) r1 = socket(0x11, 0x3, 0x0) sendto$unix(r1, &(0x7f0000000000)="b10005130000000000003e0004000000000013fecea10500fef96ecf2ac72fd3357ae30200004e3039d2d236acf20b7804be38164991f7c8cf7f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f335c223e7d0c032bfa896443a41018000000720fd38bfbb770c1f5a872c88106002ec5890400000000000000361b1257aea8c500002002fbfe0c2300008abfba0900000008e371a3f8343712051eeab7196fcbd80407000000c011200000", 0xb1, 0x0, 0x0, 0x0) r2 = socket(0x18, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x2, 0xffffffffffffffff) close(r3) r4 = syz_open_pts() syz_open_pts() syz_open_pts() fcntl$lock(r4, 0x9, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1000300000000}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="28000000ffff000001"], 0x28}, 0x0) sysctl$machdep(&(0x7f0000000000)={0x7, 0x1}, 0x2, &(0x7f00000000c0)="28b36f629f0252fc4ff98018faf5a438a816bef3d166a4ca7420cd6fcae35effe8bae4eb4ebfd2a0f3fcb264fd1eeb7e5037abc212ba85301a55244755d4ba8df72cb1036e45e0cba41dec4f3c5b53da6c1a5b0db1a61dc3ac662072daaaeaa408153c966c7283397fb1542578db896e1d2817b23525867b46799b9c51a8e8c1b554552394443d410a5c2f060424fb5a35475e4e13cf90726ea4b6854de328026be3b922fd62", &(0x7f0000000040)=0xa6, &(0x7f0000000180)="da3cbabd27bdb0ebd479c47e79174e78d07003d370bcde50303da66220e17e31574e8137f7aaa3e715bf45693435f7b119d67efddf75bfc45b84b29a818460e4bd7f5bcbbb428ab074f4cbef5a0cf4", 0x4f) 103.208468ms ago: executing program 3 (id=20): mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6381) ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x0, [{}, {0x3}, {0x0, 0x300}, {0x0, 0x4}, {0x0, 0x10}, {0x2}, {}, {0x3, 0x5}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {0x2}, {0x0, 0xb4}, {0x1}, {}, {}, {0x0, 0x4}, {0x2}, {0x2}, {0x3}, {0x0, 0x5}, {0x0, 0x1}, {}, {0x1, 0x80000000}, {0x1, 0x6}, {0x2}, {0x0, 0x4ab60683}]}) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) r0 = semget$private(0x0, 0x8, 0xa) semctl$SETALL(r0, 0x0, 0x9, &(0x7f00000001c0)) semop(r0, 0x0, 0x0) semop(r0, &(0x7f0000000300)=[{0x1, 0x6, 0x1800}, {0x4, 0x9a4, 0x1000}, {0x2, 0x7, 0x1000}], 0x3) semop(r0, &(0x7f0000000040)=[{0x2, 0x3, 0x2000}, {0x0, 0xffff}, {0x2, 0x97f, 0x1000}, {0x0, 0x7, 0x1000}, {0x2, 0x4, 0x1800}], 0x5) semctl$SETVAL(r0, 0x1, 0x8, &(0x7f0000000280)=0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket(0x2, 0x4001, 0x0) r2 = dup(r1) r3 = fcntl$dupfd(r2, 0x2, 0xffffffffffffffff) close(r3) r4 = socket(0x2, 0x2, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000b40)="825a4f47c21e6ed7eda0f5903abf65b18d7c51f78b06ccffb40500000000000000000000fafd3493776665d4cd12c63d34", 0x31}], 0x1, 0x0, 0x0, 0x406}, 0x0) openat$pf(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$TIOCSETA(r3, 0xc4504444, &(0x7f0000000740)={0xfffff944, 0x400ffef, 0x3, 0x20000006, "0400000000800000ebb178d90000d31962fff0d1", 0xafd3, 0x1}) connect$unix(r4, &(0x7f0000000000), 0x10) setsockopt$sock_int(r3, 0xffff, 0x1023, &(0x7f0000000040), 0xe0) semget(0x1, 0x0, 0x2) 102.791337ms ago: executing program 4 (id=21): r0 = socket$unix(0x1, 0x5, 0x0) listen(r0, 0x4) recvmsg(r0, &(0x7f00000007c0)={&(0x7f0000000300)=@un=@abs, 0x8, &(0x7f0000000a00)=[{&(0x7f0000000380)=""/92, 0x5c}, {&(0x7f0000000680)=""/153, 0x99}, {&(0x7f00000004c0)=""/237, 0xed}, {&(0x7f00000005c0)=""/49, 0x31}, {&(0x7f0000000600)=""/74, 0x4a}, {&(0x7f0000000240)=""/134, 0x86}, {&(0x7f0000000840)=""/201, 0xc9}, {&(0x7f0000000740)=""/93, 0x5d}, {&(0x7f0000000940)=""/178, 0xb2}], 0x9, &(0x7f0000000ac0)=""/91, 0x5b}, 0x801) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000001c0)="23b30925c0da23211e7bf4abd439a5476c02", 0x12}], 0x1}, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1b}, 0x4, 0x3d3, 0xffffffffffffffff, 0x0, 0x7ffffffffffffffe, 0x9, 0x7fd, 0xffc}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0x37) ioctl$BIOCSETIF(0xffffffffffffff9c, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) ioctl$FIONREAD(r0, 0x4004667f, &(0x7f0000000080)) sysctl$hw(&(0x7f0000002980)={0x6, 0x6}, 0x2, &(0x7f00000029c0)="2a96293c", &(0x7f0000002a00)=0x4, &(0x7f0000002a40), 0x0) setuid(0xee01) r1 = shmget$private(0x0, 0x2000, 0xf9b189baf184c902, &(0x7f00007b2000/0x2000)=nil) shmat(r1, &(0x7f000058b000/0x3000)=nil, 0x3800) shmctl$IPC_RMID(r1, 0x0) r2 = socket(0x2, 0x2, 0x0) r3 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) ioctl$WSDISPLAYIO_LSFONT(r3, 0xc058574e, &(0x7f0000000ec0)) ioctl$FIONREAD(r2, 0x8020690e, &(0x7f00000001c0)) r4 = socket$unix(0x1, 0x5, 0x0) r5 = getppid() ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x2000000000000243, &(0x7f0000000100)}) r6 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r6, 0xc0106924, &(0x7f00000001c0)) r7 = kqueue() kevent(r7, &(0x7f00000000c0), 0x101, &(0x7f0000000180), 0x6, 0x0) r8 = socket(0x2, 0x2, 0x0) ioctl$FIONREAD(r8, 0x80206919, &(0x7f00000001c0)) fcntl$setown(r0, 0x6, r5) connect$unix(r4, &(0x7f0000000040)=@file={0xd1653077bafa0114, './file0\x00'}, 0xa) clock_getres(0x5, 0xffffffffffffffff) recvmmsg(r2, &(0x7f0000000e40)={&(0x7f0000000e00)={&(0x7f0000000b40)=@in, 0xc, &(0x7f0000000d80)=[{&(0x7f0000000b80)=""/1, 0x1}, {&(0x7f0000000bc0)=""/133, 0x85}, {&(0x7f0000000c80)=""/236, 0xec}], 0x3, &(0x7f0000000dc0)}, 0x23}, 0x10, 0x1800, &(0x7f0000000e80)={0x7f, 0x81}) 101.547778ms ago: executing program 7 (id=22): r0 = socket(0x11, 0x3, 0x0) setgroups(0x0, 0x0) setgid(0xffffffffffffffff) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) setreuid(0xee00, 0x0) r1 = getuid() chown(&(0x7f0000000180)='./file0\x00', r1, 0xffffffffffffffff) r2 = getuid() setreuid(0x0, r2) chmod(&(0x7f0000000080)='./file0\x00', 0x2ea) sendto$unix(r0, &(0x7f00000000c0)="b10005136000009f050000b10010000000000000cea10500fef96ecfc727d3357ae302b37b67ca1f2d61db7f4de57804be38164991f7c8cf5f882b297be1aa5b23edeb51e2f0ac3ebbc257699a1f139b672f4d335d223e7db3008b95665bc6fc210200b100e4ff0000fbb770c1f5a872c881ea772ec5890405b3b9c2668396f4cd125707000000002002fbfc0c2300008abfba0900000008e37f71a3f8343712051eeab71d89e000040381ecb664000000", 0xb1, 0xa, 0x0, 0x0) 5.157744ms ago: executing program 7 (id=23): mkdir(&(0x7f0000000180)='./file0\x00', 0x10) (async) r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETA(r0, 0xc0284457, &(0x7f0000000280)={0x3, 0xffffffff, 0xfeffffff, 0x9, "080014000000000000010000000100000f1eeaed", 0x10000000, 0x9}) (async, rerun: 64) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0xa, {0x7d3, 0xc}}) (async, rerun: 64) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) setsockopt(0xffffffffffffffff, 0x1000000029, 0xc, &(0x7f0000000040)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) (async) setsockopt(0xffffffffffffffff, 0x1000000029, 0xd, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) (async, rerun: 32) r1 = getgid() (rerun: 32) setregid(r1, 0x0) (async) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x0, 0x0, r1, 0x0, r1, 0x112, 0x1b}, 0x8000000000004, 0x3d3, 0xffffffffffffffff, 0x0, 0x7ffffffffffffffe, 0x9, 0x7fd, 0xe0f}) (async) sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0x37) socket(0x18, 0x2, 0x0) (async) r2 = socket(0x18, 0x8000, 0x7) setsockopt(r2, 0x1000000029, 0xd, &(0x7f0000000040)="99e76cdb8b41a5efae869ac9f9b3207b35ed706262db5bc4c2e16b5332142e7cb49db8264a867e8565cacfa802cd621913de0f1ae33538c8e4acbf328eba6795256850bef634b6859441569eb407d5d6011baed1c56244692e6e1e4109dd338214d5eba82540eb569e9fd8e6be19d8274125a8d65c46338da6bfced1ff315bff7dbb59f5fb186ce8ee30119dcd60ab962bf8229c17fb4146e7ecc152", 0xfffffffffffffd05) ioctl$TIOCSETA(0xffffffffffffffff, 0xcd50441a, &(0x7f0000000040)={0x6, 0x2, 0x8, 0xd5, "00000000000000000000001500", 0x3, 0x401}) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r4, &(0x7f0000000040)=@file={0xd19450564dee018c, './file0\x00'}, 0xa) connect$unix(r4, &(0x7f0000000000)=@file={0xd1653077bafa0114, './file0\x00'}, 0xa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000000)=@file={0xd1653077bafa0114, './file0\x00'}, 0xa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000000)=@file={0xd1653077bafa0114, './file0\x00'}, 0xa) connect$unix(r3, &(0x7f0000001b80)=@abs={0x0, 0x0, 0x1}, 0x60) mknod(&(0x7f0000000040)='./file0\x00', 0x4, 0xe02) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async, rerun: 32) r7 = socket(0x18, 0x1, 0x0) (rerun: 32) setsockopt(r7, 0x1000000029, 0x36, &(0x7f0000000040)="03000000", 0x4) (async, rerun: 32) openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) (async, rerun: 32) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 3.326674ms ago: executing program 2 (id=24): syz_emit_ethernet(0x2a, &(0x7f0000000080)={@random="91a6e341d8bb", @random="a462dbf28d4f", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x1, 0x0, 0x5, 0x1, 0x0, @rand_addr, @rand_addr=0x2}, @icmp=@mask_request={0x11, 0x0, 0x0, 0x8}}}}}) (async) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0xffffffff, 0xb, {0x0, 0x3}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f00000000c0), 0x10, 0x0) ioctl$DIOCMAP(0xffffffffffffff9c, 0xc0106477, &(0x7f0000000140)={&(0x7f0000000080)='./file0\x00', r0, 0x7}) r1 = socket$inet6(0x18, 0x3, 0x8) r2 = shmget$private(0x0, 0x4000, 0x40b, &(0x7f0000ffa000/0x4000)=nil) r3 = shmat(r2, &(0x7f0000ffd000/0x3000)=nil, 0x3000) shmctl$IPC_RMID(r2, 0x0) (async) shmdt(r3) (async) getsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f0000000000), &(0x7f0000000040)=0xc) (async) r4 = socket(0x2, 0x4001, 0x0) recvmmsg(r4, &(0x7f0000001700)={0x0, 0x40000000}, 0x10, 0x80, 0x0) (async) socketpair(0x18, 0x3, 0x6, 0x0) (async) r5 = socket(0x18, 0x1, 0x0) setsockopt(r5, 0x1000000029, 0xc, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) 1.682603ms ago: executing program 7 (id=25): r0 = socket$unix(0x1, 0x1, 0x0) sendto$unix(r0, &(0x7f0000000140)="f4fc14fa4740d4e4163aab80c6496042e90056067cd66b41c28bb237a2f930c2ce3bd76e2584db7761911f6ac86cf1e4dc380708700bf2bb5a286c89585a11db39a86da816968685", 0x48, 0x402, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x2}, 0x8) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BIOCSETWF(r1, 0x80104277, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x0, 0x0, 0x6}, {0x1, 0x0, 0x0, 0x4}, {0x4, 0x0, 0x0, 0x4}]}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xff0a, 0x0, 0x37) 670.05µs ago: executing program 2 (id=26): r0 = socket$unix(0x1, 0x1, 0x0) recvfrom(r0, &(0x7f0000000000)=""/23, 0x17, 0x821, &(0x7f0000000040)=@in6={0x18, 0x2, 0x81, 0xffffffff}, 0xc) (async) r1 = socket(0x2, 0x4, 0x7) sendto(r1, &(0x7f0000000080)="fde7c0613b2ee1656207cdb6a87aef1c208e31d786f76adce59f06a3ed536a342991456e28e546f8fac731daf814650fbad4bb486eea1030448f6ef7c7d5862adf9fdcbe5f68e059f2031027f398993a890f24969291991fe4b10bd24fa2bebba8c4538132f6e2c18054923d13eca60e404bb12fcaec99a1bf08fdab56a1e71c0d7c1fe9", 0x84, 0x3, &(0x7f0000000140)=@in={0x2, 0x0}, 0xc) connect(r0, &(0x7f0000000180)=@un=@abs={0x0, 0x0, 0x0}, 0x8) (async) getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000480)={0x0}, 0xc) (async, rerun: 64) getsockopt$SO_PEERCRED(r0, 0xffff, 0x1022, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0xc) (async, rerun: 64) getgroups(0x4, &(0x7f0000000500)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]) sendmsg$unix(r0, &(0x7f0000000580)={&(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0xa, &(0x7f0000000440)=[{&(0x7f0000000200)="2e228831325b521b122bcbd97aa9ed66d296bfb14c1d02ff7bfba89605873196dea274f43a462573349bc5eeffeafd82f049d5aa4d6a13571d38a53c84a414789957902eba3e96f5fd0c798417f11c2ed06c76cc1a443d7b86df", 0x5a}, {&(0x7f0000000280)="d73a6aae8c538a7e1e926dbc06c3ff276c9287b4cf88c1ac600347e5bae7d3ba72a88597862313b37d522dc5f619465425d03583639191d24ff1b080276e1958838dfaedb565c1718d36422f4ca49e9f0892b32958294571cd3295b9b25aece2a6b7c77a92e6d90ceb8ddbffefeb81f3b2f40ba773ee00d4e668d94ab39d4c9e0a2de17e538c7b6ea1bc59918a534d3cb3c2837b0029528c28188858a67a6fce85ec707e0f6053e9cb215e7101e60e8c928c7933192f6a1b407f8d37dc283011", 0xc0}, {&(0x7f0000000340)="3297cb4e11be3786479a38b66f941dfe2b8c4800ad6fd004172fab120f423bea16a946508daac8820565abaef2a72b83b071448e7470b531e8729cdf3e293585a55fad8d527929181d6035eeb26cfa0059ef4082ad6f13d4da1ab58050aa9d71097f0a4ea2bd19cd76e74daf89475d359ca28ccb3128329a2235ba7427e8a8157260a9f99342d3ee984089aa483ae8ef02bb6b0d3c60a957d061232b9509e578522ffb1699dc015c27ff2182d2299eb28eab6ddfed71fa47afbb37596c03e3389b156ab5d55a1147792771fdb47f6320e48e7a801307dc4669b620e6ded5d2a63487d379f44be4c04dac28ac65b0476dc4114d734090da", 0xf7}], 0x3, &(0x7f0000000540)=[@cred={0x20, 0xffff, 0x0, r2, r4, r6}], 0x20, 0x2}, 0x6a3d1bbd9ffc30ab) (async) setpgid(r3, r2) readv(r0, &(0x7f0000002840)=[{&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/7, 0x7}, {&(0x7f0000001600)=""/16, 0x10}, {&(0x7f0000001640)=""/84, 0x54}, {&(0x7f00000016c0)=""/4096, 0x1000}, {&(0x7f00000026c0)=""/58, 0x3a}, {&(0x7f0000002700)=""/2, 0x2}, {&(0x7f0000002740)=""/206, 0xce}], 0x8) write(r1, &(0x7f00000028c0)="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", 0x1000) getsockopt$sock_int(r1, 0xffff, 0x4, &(0x7f00000038c0), &(0x7f0000003900)=0x4) fcntl$setown(r0, 0x6, r3) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) (async) connect$unix(r0, &(0x7f0000003940)=@file={0x1, './file0\x00'}, 0xa) bind(r0, &(0x7f0000003980)=@un=@abs={0x0, 0x0, 0x2}, 0x8) (async) bind$unix(r0, &(0x7f00000039c0)=@file={0x0, './file0\x00'}, 0xa) (async) close(r0) (async, rerun: 32) r9 = getppid() (rerun: 32) fcntl$lock(r0, 0x8, &(0x7f0000003a00)={0x3, 0x0, 0xc, 0x9, r9}) (async, rerun: 32) r10 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000003a40), 0x8000, 0x0) (rerun: 32) ioctl$VT_GETSTATE(r10, 0x40067664, &(0x7f0000003a80)) write(r0, &(0x7f0000003ac0)="b8b4d9012715fbfe5dc311008d435d81a6d2625c71e734deb8eeb00c052d51e8e67fdce105455f9185e2cfe32db69f14e79f7c2a999c72527831cc7b75d869b257f54d788606cf9eeeb4d13d42aada7aa32336a0a05db91f2da35c346c042f1c92bb20166f4e122c17adaab04e5d10c54923b00630c4e80983c1ae5f07383128374f6cd02752b556e3f6f16380dee111", 0x90) (async) getsockopt$SO_PEERCRED(r0, 0xffff, 0x1022, &(0x7f0000003b80)={0x0, 0x0}, 0xc) r13 = openat$zero(0xffffffffffffff9c, &(0x7f0000003bc0), 0x80, 0x0) ioctl$WSKBDIO_GETMAP(r13, 0xc010570d, &(0x7f0000003c80)={0xa, &(0x7f0000003c00)=[{0x9cf, 0x8001, 0x0, 0x2, 0x78}, {0x8, 0x8fc, 0x6, 0x4, 0xe0}, {0x1, 0x9, 0x81, 0xa, 0xff00}, {0x1, 0x6f, 0x9, 0xfffa, 0xffbe}, {0x4, 0x3, 0x7, 0x2, 0x6}, {0x7, 0x5, 0xc, 0x7, 0x7fff}, {0x3, 0x10, 0xcb25, 0x0, 0x5}, {0x3, 0x6, 0x0, 0x1, 0x2}, {0x4, 0x2, 0x0, 0xa, 0x7}, {0xff, 0x0, 0x0, 0xff00, 0x1}]}) (async, rerun: 32) setsockopt$sock_linger(r1, 0xffff, 0x80, &(0x7f0000003cc0)={0x0, 0x1}, 0x8) (rerun: 32) getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000005240)={0x0, 0x0}, &(0x7f0000005280)=0xc) sendmsg$unix(r0, &(0x7f0000005340)={&(0x7f0000003d00)=@abs={0x1, 0x0, 0x3}, 0x8, &(0x7f00000051c0)=[{&(0x7f0000003d40)="e8aa9fcf3106966e5dc2368ec56e9d0b7e9d4fd25717adf78591e5ef829606dc33a372d367e6a0bf79f89788b2d2082df5400d4eb17100541a", 0x39}, {&(0x7f0000003d80)="213a88f3d56ffd613a07d83f6d4a9d7113d0c4b8ddf469c28c245f9c786464fd85f5505ac50844d1eee2ea759cb8ee2e18fad9a2b4e98e16826222cf7d84011b1205d61306d61328beda99ee54afa697b86346729b90ce0fa06c6a07cb635fddb089a3c758cfcfee1800da2bb57d4d02e13f91fb0860078fa24a4a5d0952a0538be8038431dddac47a24ee7c9ca01361c8aea35f81b590da2e9596b2adde5d274b2c37243a8f24fb541dc09caa53a37efeeb01e5711a5d61f824e86cbcf65c", 0xbf}, {&(0x7f0000003e40)="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", 0x1000}, {&(0x7f0000004e40)="850b8c18e140509ebaa3cd6f4027d114d5384e8347fd4a10c375654102e0baaf0d925b2368d9", 0x26}, {&(0x7f0000004e80)="213715373736748bf3e0bcb216bd8f4d1014098ba4ea6ae50a600cb4128078efc94031cd585f12510ef4941751e1c716e3974864523a6d6f2104885c5e0fd0083b172328de87aa3828237a9caa7fb1d5f7cf514f72fab2c99851de9f74dbde5ae1aa25c7a69eeff989eb04461f7517616992f59cc644086f6eecedcecc00967cc53df07adf12902faf1f50c36cc075ef3d4f06aa66828c53ae3aade9a26f844cc44e2b77f4b5b6b59ae7d07db2", 0xad}, {&(0x7f0000004f40)="a3d1aa6a1acfce5f39714efc2e4354c745d2b5451cdd6e99c7667490c7aa59a562ce7a888684049a2554ee52cf2878d7d9f838196ae490dbd614d52b93782746647d7fb3084cf509", 0x48}, {&(0x7f0000004fc0)="09d1a49162a7000795796a9ce8a9fe17b993ec89aba0191d24770d47e3b5d1965c3e2b3c3ba8bca2cf97dd68dd7311458b19bf361eb36fc42191541a7788917f988243fd9231b59d2a5ada3e9b9d8b9e8e7ba0858af3553616e9971cc7a1a89f42b21c3a7fccaec2261af753645c90faeb4721ddb4fb1a9937253263edeb405579398d6badae986116875360e688d644d046c701a773ec16ac0db00c1041fd13d973c8119c5daf0acaa8bc9fcbf637ef68491dddb0a1725dd7d05ee13dd6c96c90edd6dc7f076dbe55aa1f985ce7b8550a248a11d94f0647834ec0bbaf", 0xdd}, {&(0x7f00000050c0)="efde57049791236c1d3a08e7bc06ef915c4e5e526221e0a81f47bda7e4beca988343d80bcbb1877ead1ec6e825644afbd78e2eed968c8481317b63b2604a406acd37780dd4be2cf6e6ad04cae0453369182426375a3ae54a5156bd62746a8bf385dcb77ad9ec22b0ecf3a62a53c50bd97de3930673f872b87ee509e8d0f6c0f37818c34da6c2088c6d4d5d2310a75d5bb6ff416a4a94d63a661085dd5ec469450c6bbf10a6f42de7f297388472e17f58a65b01a34f45f7fdb451f5c282ea1133a2e017cf3cbe9714f433b8e8", 0xcc}], 0x8, &(0x7f00000052c0)=[@cred={0x20, 0xffff, 0x0, r9, r4, r8}, @cred={0x20, 0xffff, 0x0, r11, r12, r7}, @cred={0x20, 0xffff, 0x0, r9, r12, r5}, @cred={0x20, 0xffff, 0x0, r9, r14, r7}], 0x80, 0x40b}, 0x0) 0s ago: executing program 7 (id=27): ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, 0x0) ioctl$BIOCFLUSH(0xffffffffffffffff, 0x20004268) r0 = semget(0x0, 0x1, 0x281) setgid(0xffffffffffffffff) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) sysctl$kern(&(0x7f00000000c0)={0x1, 0x53}, 0x2, &(0x7f0000000240)="71f90200000000000000af6fb1fa62498e5f84cf71b59c7afec37082", &(0x7f0000000140)=0xfe1e, 0x0, 0x0) socket$unix(0x1, 0x5, 0x0) (async) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f0000000200)=@file={0xd570d0466b6018f, './file0\x00'}, 0xa) listen(r1, 0x0) (async) listen(r1, 0x0) shutdown(r1, 0x0) (async) shutdown(r1, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) connect$unix(r2, &(0x7f0000000000)=@file={0xd1653077bafa0114, './file0\x00'}, 0xa) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) setgroups(0x0, 0x0) setuid(0xffffffffffffffff) syz_emit_ethernet(0x2a, &(0x7f0000000080)=ANY=[@ANYBLOB="0000000000009693835bf25d08060001080006040003000200000000ac1400aaa29fe2bd3836ac1400bb"]) semop(r0, 0x0, 0x0) (async) semop(r0, 0x0, 0x0) syz_emit_ethernet(0xe, 0x0) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000000)='o', 0x1}], 0x1) sysctl$kern(&(0x7f0000000040)={0x1, 0x3e}, 0x3, &(0x7f00000000c0)="3bf2ee74e747c82dad6eb2a36fa755e1a3925fe49afca7e63b52fa65ccaa74d6e6b85b6cdced70357ef201f97842b1068dca31553fa2d7031f38c03e56ad0e24dfc4f97b8b7f81499647e6e7725765d61436c85e43c15d12a78cb8c57ddde87021d7b685507fd3e0652f35e45bdaa3afd86c4fe557433e4c2b632de71c951516adff26aa2e48b45f8ce92bcefd3eceefabee7e3ebe806fdb4f6af569ae94b5d127", &(0x7f0000000080)=0x4, &(0x7f0000000340)="5a67923ef0cb189971421989ebcff78831a7581e2f27caa362f1363042efb27688b2c899220fb2fe37e467d974592496856ca7b78060998608c2f952e43bc0bf11555cc5cb0fe17b2ec1be389871829bfe10dd4c4d2c8f9da2bd2868fd86791dc09dc4fa89a217458bdaed31003fdc3a7323189ba3ccbad6c8af17516e4557f61ad20180000000000000125f568ca7d3396b9057255f381855110eb3a673713716cdf010ddfa7977f92cf061ad125ca670353b45d53aae196b00271f9d3452b523b3dea22d6027625614312183724b71c7eb02083a410c1c99fa455013521f98686e472b70b560f7021f567adf4d", 0x4) sysctl$kern(&(0x7f00000000c0)={0x1, 0x40}, 0x2, &(0x7f0000000100)="71f91e347102a709ae1732f96ea5ac00586246242ba0150b421ba871a4f2086503cf318a4ebcd70a501d94a34b8e3f948711361057363b4bcc554e6c501d8b237358297246f782d8de709a30b055ff2c834dc147177e29398d1540c9515151802aea4be0d01ccde56297a8fd08b4a11dea3c8ae163962b20f7cf9289f26bcedb0db39ad4b8814275a46f611c4494679bfed8b6e3291215934a3e2bef2637168b", &(0x7f0000000000)=0xa0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/160, 0xa0}, 0x40) ioctl$FIOASYNC(r3, 0x8004667d, &(0x7f0000002d00)=0x9) (async) ioctl$FIOASYNC(r3, 0x8004667d, &(0x7f0000002d00)=0x9) shutdown(r3, 0x2) syz_extract_tcp_res$synack(&(0x7f00000001c0), 0x1, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.187' (ED25519) to the list of known hosts. panic: pool_do_get: shmpl free list modified: page 0xfffffd805faeb000; item addr 0xfffffd805faebd90; offset 0x40=0x682921ba Stopped at db_enter+0x25: addq $0x8,%rsp TID PID UID PRFLAGS PFLAGS CPU COMMAND *399215 3611 60929 0x10 0x4000000 0K syz-executor 468087 34128 0 0 0x4000000 1 syz-executor db_enter() at db_enter+0x25 panic(ffffffff833c9194) at panic+0x1e5 pool_do_get(ffffffff83917570,1,ffff800033fdbe18) at pool_do_get+0x5ea pool_get(ffffffff83917570,1) at pool_get+0x149 shmget_allocate_segment(ffff8000ffff2530,ffff800033fdc070,102,ffff800033fdbfc0) at shmget_allocate_segment+0x1a7 sys_shmget(ffff8000ffff2530,ffff800033fdc070,ffff800033fdbfc0) at sys_shmget+0x1b2 syscall(ffff800033fdc070) at syscall+0xb08 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x2057136c6a0, count: 7 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{0}> ddb{0}> set $lines = 0 ddb{0}> set $maxwidth = 0 ddb{0}> show panic *cpu0: pool_do_get: shmpl free list modified: page 0xfffffd805faeb000; item addr 0xfffffd805faebd90; offset 0x40=0x682921ba ddb{0}> trace db_enter() at db_enter+0x25 panic(ffffffff833c9194) at panic+0x1e5 pool_do_get(ffffffff83917570,1,ffff800033fdbe18) at pool_do_get+0x5ea pool_get(ffffffff83917570,1) at pool_get+0x149 shmget_allocate_segment(ffff8000ffff2530,ffff800033fdc070,102,ffff800033fdbfc0) at shmget_allocate_segment+0x1a7 sys_shmget(ffff8000ffff2530,ffff800033fdc070,ffff800033fdbfc0) at sys_shmget+0x1b2 syscall(ffff800033fdc070) at syscall+0xb08 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x2057136c6a0, count: -8 ddb{0}> show registers rdi 0 rsi 0x1 rbp 0xffff800033fdbc50 rbx 0xffffffff838a9dd7 cpu_info_full_primary+0x2dd7 rdx 0xffff80000002a580 rcx 0xffff8000ffff2530 rax 0xffffffff838a8ff0 cpu_info_full_primary+0x1ff0 r8 0x101010101010101 r9 0x8080808080808080 r10 0x42c0c89922df534d r11 0xbfb10822733c9cf5 r12 0xffffffff838a9bd8 cpu_info_full_primary+0x2bd8 r13 0 r14 0 r15 0x1 rip 0xffffffff8172fde5 db_enter+0x25 cs 0x8 rflags 0x246 rsp 0xffff800033fdbc40 ss 0x10 db_enter+0x25: addq $0x8,%rsp ddb{0}> show proc PROC (syz-executor) tid=399215 pid=3611 tcnt=2 stat=onproc flags process=10 proc=4000000 runpri=32, usrpri=75, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff80003c42bc58,0xffff8000ffff2020 process=0xffff80003c415c70 user=0xffff800033fd7000, vmspace=0xfffffd806bd2f200 estcpu=25, cpticks=1, pctcpu=0.0, user=0, sys=1, intr=0 ddb{0}> ps PID TID PPID UID S FLAGS WAIT COMMAND 65203 351899 87667 0 3 0x80 nanoslp syz-executor 65203 374845 87667 0 3 0x4000080 fsleep syz-executor 65203 34222 87667 0 3 0x4000080 fsleep syz-executor 70143 513399 77142 0 2 0 syz-executor 70143 484345 77142 0 3 0x4000080 semwait syz-executor 70143 110807 77142 0 3 0x4000080 fsleep syz-executor 3611 341535 18059 60929 2 0x10 syz-executor * 3611 399215 18059 60929 7 0x4000010 syz-executor 34128 333717 81789 0 2 0 syz-executor 34128 336505 81789 0 3 0x4000080 kqsel syz-executor 34128 468087 81789 0 7 0x4000000 syz-executor 47984 309148 0 0 3 0x14200 bored sosplice 78766 361144 13606 0 3 0x2 biowait syz-executor 27832 222610 13606 0 3 0x82 nanoslp syz-executor 58889 101322 13606 0 3 0x82 nanoslp syz-executor 18059 509751 13606 0 3 0x82 nanoslp syz-executor 77142 375189 13606 0 3 0x82 nanoslp syz-executor 87667 72060 13606 0 3 0x82 nanoslp syz-executor 98943 446124 13606 0 3 0x82 nanoslp syz-executor 81789 510985 13606 0 3 0x82 nanoslp syz-executor 13606 431930 37477 0 3 0x82 kqread syz-executor 37477 296957 78123 0 3 0x10008a sigsusp ksh 78123 190798 75573 0 3 0x98 kqread sshd-session 75573 270734 91585 0 3 0x92 kqread sshd-session 91504 469469 1 0 3 0x100083 ttyin getty 91585 336587 1 0 3 0x88 kqread sshd 13948 97467 30080 74 3 0x1100092 bpf pflogd 30080 511253 1 0 3 0x80 sbwait pflogd 72634 98720 41087 73 3 0x1100090 kqread syslogd 41087 468239 1 0 3 0x100082 sbwait syslogd 3724 318834 1 0 3 0x100080 kqread resolvd 81909 62893 94058 77 3 0x100092 kqread dhcpleased 48381 249924 94058 77 3 0x100092 kqread dhcpleased 94058 25281 1 0 3 0x80 kqread dhcpleased 82689 159056 0 0 3 0x14200 bored smr 82693 442020 0 0 2 0x14200 zerothread 17175 219877 0 0 3 0x14200 aiodoned aiodoned 63354 323618 0 0 3 0x14200 syncer update 76459 187166 0 0 3 0x14200 cleaner cleaner 55029 418544 0 0 3 0x14200 reaper reaper 61210 219967 0 0 3 0x14200 pgdaemon pagedaemon 14168 374084 0 0 3 0x14200 bored viomb 40551 296550 0 0 3 0x40014200 acpi0 acpi0 72272 262257 0 0 3 0x40014200 idle1 65452 497440 0 0 3 0x14200 bored softnet3 32982 145474 0 0 3 0x14200 bored softnet2 87884 478971 0 0 3 0x14200 bored softnet1 18151 192508 0 0 3 0x14200 bored softnet0 75115 400668 0 0 3 0x14200 bored systqmp 90232 359346 0 0 3 0x14200 bored systq 6622 147445 0 0 3 0x14200 tmoslp softclockmp 28181 204528 0 0 3 0x40014200 tmoslp softclock 86684 159729 0 0 3 0x40014200 idle0 1 401429 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb{0}> show all locks CPU 0: exclusive mutex shmpl r = 0 (0xffffffff83917588) #0 witness_lock+0x5bb #1 mtx_enter_try+0x178 #2 mtx_enter+0x60 #3 pool_get+0x10b #4 shmget_allocate_segment+0x1a7 #5 sys_shmget+0x1b2 #6 syscall+0xb08 #7 Xsyscall+0x128 Process 3611 (syz-executor) thread 0xffff8000ffff2530 (399215) exclusive kernel_lock &kernel_lock r = 0 (0xffffffff839408c0) #0 witness_lock+0x5bb #1 syscall+0xae6 #2 Xsyscall+0x128 exclusive mutex shmpl r = 0 (0xffffffff83917588) #0 witness_lock+0x5bb #1 mtx_enter_try+0x178 #2 mtx_enter+0x60 #3 pool_get+0x10b #4 shmget_allocate_segment+0x1a7 #5 sys_shmget+0x1b2 #6 syscall+0xb08 #7 Xsyscall+0x128 Process 78766 (syz-executor) thread 0xffff8000ffffdc38 (361144) exclusive rrwlock inode r = 0 (0xfffffd80620b3d00) #0 witness_lock+0x5bb #1 rw_do_enter_write+0x3ea #2 rrw_enter+0xc6 #3 VOP_LOCK+0xa6 #4 ufs_ihashins+0x4f #5 ffs_vget+0x187 #6 ffs_inode_alloc+0x283 #7 ufs_mkdir+0x113 #8 VOP_MKDIR+0x102 #9 domkdirat+0x179 #10 syscall+0xb08 #11 Xsyscall+0x128 exclusive rrwlock inode r = 0 (0xfffffd806c6f5c20) #0 witness_lock+0x5bb #1 rw_do_enter_write+0x3ea #2 rrw_enter+0xc6 #3 VOP_LOCK+0xa6 #4 vn_lock+0xa4 #5 vfs_lookup+0x109 #6 namei+0x7aa #7 domkdirat+0x8b #8 syscall+0xb08 #9 Xsyscall+0x128 ddb{0}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 10195 11022K 11235K 166960K 11314 0 pcb 17 12K 12K 166960K 20 0 rtable 212 6K 6K 166960K 361 0 pf 34 17K 81K 166960K 58 0 ifaddr 40 6K 7K 166960K 46 0 ifgroup 55 2K 2K 166960K 59 0 sysctl 1 1K 9K 166960K 5 0 counters 66 36K 36K 166960K 68 0 ioctlops 0 0K 4K 166960K 1487 0 iov 0 0K 16K 166960K 2 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1346 85K 85K 166960K 1383 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 5K 166960K 3 0 VM map 2 1K 1K 166960K 2 0 sem 4 0K 0K 166960K 4 0 dirhash 12 2K 2K 166960K 15 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 17 61K 93K 166960K 156 0 proc 72 91K 140K 166960K 531 0 subproc 72 4K 4K 166960K 72 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 2 0 in_multi 88 6K 7K 166960K 99 0 ether_multi 1 0K 0K 166960K 1 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 49 228K 228K 166960K 49 0 exec 0 0K 1K 166960K 375 0 fusefs mount 1 32K 32K 166960K 1 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 244 176K 186K 166960K 3199 0 UVM aobj 4 2K 2K 166960K 5 0 pinsyscall 42 84K 107K 166960K 1274 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 0K 166960K 1 0 NDP 12 0K 2K 166960K 29 0 temp 35 8670K 8734K 166960K 4101 0 kqueue 13 20K 22K 166960K 26 0 SYN cache 2 16K 16K 166960K 2 0 ddb{0}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 26 0 0 1 0 1 1 0 8 0 rtpcb 120 43 0 38 1 0 1 1 0 8 0 rtentry 176 111 0 12 5 0 5 5 0 8 0 unpcb 144 48 0 30 1 0 1 1 0 8 0 syncache 336 3 0 3 1 0 1 1 0 8 1 tcpcb 808 11 0 5 1 0 1 1 0 8 0 arp 128 18 0 2 1 0 1 1 0 8 0 inpcb 384 87 0 77 2 0 2 2 0 8 1 nd6 144 24 0 3 1 0 1 1 0 8 0 pkpcb 40 1 0 1 1 0 1 1 0 8 1 kcovpl 48 8 0 0 1 0 1 1 0 8 0 pfosfp 40 1428 0 1005 5 0 5 5 0 8 0 pfosfpen 112 1428 0 714 21 0 21 21 0 8 0 pfstitem 24 17 0 0 1 0 1 1 0 8 0 pfstkey 128 17 0 0 1 0 1 1 0 8 0 pfstate 384 17 0 0 2 0 2 2 0 8 0 pfrule 1344 21 0 16 2 1 1 2 0 8 0 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 453 0 44 29 0 29 29 0 8 1 art_table 32 454 0 44 4 0 4 4 0 8 0 art_node 16 110 0 20 1 0 1 1 0 8 0 sysvmsgpl 40 1 0 1 1 0 1 1 0 8 1 semupl 112 1 0 0 1 0 1 1 0 8 0 semapl 112 2 0 0 1 0 1 1 0 8 0 shmpl 112 2 0 1 1 0 1 1 0 8 0 pool(0xffffffff83917570:shmpl): page inconsistency: page 0xfffffd805faeb000; 33 on list, 1 missing, 35 items per page dirhash 1024 19 0 2 3 0 3 3 0 8 0 dino2pl 256 1601 0 89 96 0 96 96 0 8 0 ffsino 288 1601 0 89 109 0 109 109 0 8 0 nchpl 144 1810 0 118 64 0 64 64 0 8 0 uvmvnodes 80 1704 0 0 35 0 35 35 0 8 0 vnodes 216 1704 0 0 95 0 95 95 0 8 0 namei 1024 5625 0 5624 2 0 2 2 0 8 1 percpumem 16 49 0 1 1 0 1 1 0 8 0 kstatmem 264 28 0 2 2 0 2 2 0 8 0 scxspl 216 5882 0 5881 3 2 1 2 1 8 0 plimitpl 152 28 0 10 1 0 1 1 0 8 0 sigapl 424 467 0 417 7 0 7 7 0 8 1 knotepl 120 54 0 0 2 0 2 2 0 8 0 kqueuepl 224 25 0 14 1 0 1 1 0 8 0 pipepl 336 106 0 79 3 0 3 3 0 8 0 fdescpl 520 448 0 417 3 0 3 3 0 8 0 filepl 160 1615 0 1390 10 0 10 10 0 8 0 lockfpl 104 16 0 14 1 0 1 1 0 8 0 lockfspl 48 8 0 6 1 0 1 1 0 8 0 sessionpl 144 22 0 13 1 0 1 1 0 8 0 pgrppl 48 31 0 13 1 0 1 1 0 8 0 ucredpl 104 96 0 82 1 0 1 1 0 8 0 zombiepl 144 420 0 417 1 0 1 1 0 8 0 processpl 1208 467 0 417 5 0 5 5 0 8 0 procpl 656 516 0 459 6 0 6 6 0 8 0 srpgc 96 2 0 2 1 0 1 1 0 8 1 sockpl 728 179 0 146 4 0 4 4 0 8 0 mcl8k 8192 2 0 0 1 0 1 1 0 8 0 mcl4k 4096 127 0 0 16 0 16 16 0 8 0 mcl2k 2048 31 0 0 4 0 4 4 0 8 0 mtagpl 96 3 0 0 1 0 1 1 0 8 0 mbufpl 256 205 0 0 13 0 13 13 0 8 0 bufpl 280 2316 0 119 157 0 157 157 0 8 0 anonpl 32 3919 0 0 33 1 32 32 0 246 0 amapchunkpl 152 8913 0 8413 20 0 20 20 0 158 0 amappl16 200 1901 0 1880 5 1 4 5 0 8 2 amappl15 192 3 0 3 1 1 0 1 0 8 0 amappl14 184 111 0 99 1 0 1 1 0 8 0 amappl13 176 4 0 3 1 0 1 1 0 8 0 amappl12 168 1106 0 1075 4 1 3 3 0 8 0 amappl11 160 81 0 67 1 0 1 1 0 8 0 amappl10 152 22 0 21 2 1 1 1 0 8 0 amappl9 144 248 0 248 1 1 0 1 0 8 0 amappl8 136 89 0 87 1 0 1 1 0 8 0 amappl7 128 115 0 102 1 0 1 1 0 8 0 amappl6 120 182 0 179 1 0 1 1 0 8 0 amappl5 112 137 0 128 1 0 1 1 0 8 0 amappl4 104 328 0 308 1 0 1 1 0 8 0 amappl3 96 1418 0 1304 3 0 3 3 0 8 0 amappl2 88 642 0 583 2 0 2 2 0 8 0 amappl1 80 8298 0 7696 16 1 15 16 0 8 2 amappl 88 2494 0 2326 4 0 4 4 0 92 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 4 0 1 1 0 1 1 0 8 0 uaddrrnd 24 448 0 417 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 448 0 417 1 0 1 1 0 8 0 vmmpekpl 168 5399 0 5364 2 0 2 2 0 8 0 vmmpepl 168 35526 0 33563 90 0 90 90 0 357 3 vmsppl 480 447 0 417 5 0 5 5 0 8 1 rwobjpl 72 14391 0 11766 50 0 50 50 0 8 1 pdppl 4096 903 0 834 101 26 75 85 0 8 6 pvpl 32 10388 0 0 85 1 84 85 0 265 0 pmappl 256 447 0 417 3 0 3 3 0 8 0 extentpl 40 45 0 27 1 0 1 1 0 8 0 phpool 112 386 0 28 11 0 11 11 0 8 0 ddb{0}> machine ddbcpu 0 Invalid cpu 0 ddb{0}> trace db_enter() at db_enter+0x25 panic(ffffffff833c9194) at panic+0x1e5 pool_do_get(ffffffff83917570,1,ffff800033fdbe18) at pool_do_get+0x5ea pool_get(ffffffff83917570,1) at pool_get+0x149 shmget_allocate_segment(ffff8000ffff2530,ffff800033fdc070,102,ffff800033fdbfc0) at shmget_allocate_segment+0x1a7 sys_shmget(ffff8000ffff2530,ffff800033fdc070,ffff800033fdbfc0) at sys_shmget+0x1b2 syscall(ffff800033fdc070) at syscall+0xb08 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x2057136c6a0, count: -8 ddb{0}> machine ddbcpu 1 Stopped at x86_ipi_db+0x27: addq $0x8,%rsp x86_ipi_db(ffff8000299ddff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __mp_lock(ffffffff839406b8) at __mp_lock+0x192 vn_closefile(fffffd806208c728,ffff8000ffff27c0) at vn_closefile+0x41 fdrop(fffffd806208c728,ffff8000ffff27c0) at fdrop+0x126 closef(fffffd806208c728,ffff8000ffff27c0) at closef+0x192 syscall(ffff8000387f4c90) at syscall+0xbc6 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x43cb3171630, count: 6 ddb{1}> trace x86_ipi_db(ffff8000299ddff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __mp_lock(ffffffff839406b8) at __mp_lock+0x192 vn_closefile(fffffd806208c728,ffff8000ffff27c0) at vn_closefile+0x41 fdrop(fffffd806208c728,ffff8000ffff27c0) at fdrop+0x126 closef(fffffd806208c728,ffff8000ffff27c0) at closef+0x192 syscall(ffff8000387f4c90) at syscall+0xbc6 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x43cb3171630, count: -9