last executing test programs: 1.224905769s ago: executing program 0 (id=63): r0 = socket(0x18, 0x2, 0x0) r1 = socket(0x800000018, 0x2, 0x0) getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sysctl$net_inet_ip(&(0x7f00000000c0)={0x4, 0x2, 0x0, 0xf}, 0x4, 0x0, 0x0, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x9, 0x8}, 0x96085d202e23254d) syz_emit_ethernet(0x8e, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6b000001000000000000006bceb1cb1eedc0754f15dd5ff9ff020000000000000000000000000001890900000000000005020956050280010001000105000000000004015001030000000001000106000000000000c204"]) msgctl$IPC_SET(0x0, 0x1, &(0x7f00000000c0)={{0x0, r3, 0x0, r3, 0x0, 0x22}, 0x1, 0xfffa, 0x0, r2, 0x0, 0x1, 0xa3d6}) r4 = msgget$private(0x0, 0x730) msgctl$IPC_STAT(r4, 0x2, 0x0) sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b1000504600000000000000007000000331c13fecea10500fef9e906c72fd3357ae320b37b673039d2d236073705ae04be38164991f7accf5f882b297be1aa5b236deb51e2f0ac3ebbc257699a5f139b672f4d335d223e7d029d6ba8af6300372821", 0x62, 0x404, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r5 = dup(r1) ioctl$TIOCSETA(r5, 0x802c7414, &(0x7f0000000380)={0x6, 0x6, 0x100, 0x7f, "a1df9cdbad9447aa36d5e33daf9633cf5394826a", 0xfffffffb, 0x1000}) sysctl$hw(&(0x7f00000019c0)={0x6, 0x5}, 0x2, &(0x7f0000000080), 0x0, 0x0, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x4, 0x0, 0x0, 0x6}, {0x3, 0x0, 0x0, 0xffffffff}, {0x7f, 0x0, 0x0, 0xbc2}]}) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r6 = socket(0x11, 0x3, 0x0) sendto$unix(r6, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x2, 0x0, 0x0) 1.223915872s ago: executing program 0 (id=64): r0 = socket(0x2, 0x2, 0x0) dup(r0) mprotect(&(0x7f000061a000/0x1000)=nil, 0x1000, 0x4) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) socket(0x18, 0x1, 0x0) syz_open_pts() ioctl$FIONREAD(r0, 0x80206982, &(0x7f00000001c0)) socket$inet6(0x18, 0x4, 0x1) getsockopt$sock_int(r0, 0xffff, 0x1001, 0x0, 0x0) getgroups(0x9a, 0xfffffffffffffffe) semget(0x3, 0x2, 0x200) socket(0x2, 0x2, 0x0) (async) dup(r0) (async) mprotect(&(0x7f000061a000/0x1000)=nil, 0x1000, 0x4) (async) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) (async) socket(0x18, 0x1, 0x0) (async) syz_open_pts() (async) ioctl$FIONREAD(r0, 0x80206982, &(0x7f00000001c0)) (async) socket$inet6(0x18, 0x4, 0x1) (async) getsockopt$sock_int(r0, 0xffff, 0x1001, 0x0, 0x0) (async) getgroups(0x9a, 0xfffffffffffffffe) (async) semget(0x3, 0x2, 0x200) (async) 1.187199724s ago: executing program 0 (id=65): r0 = socket(0x18, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0xa, 0xffffffffffffffff) close(r1) (async) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000180)="3622946e18d8c0299689ff4189146fd8659cc6e393bf624d6528e5d3a62673752550edee1cce34357529f9682f3a606ca0ee2f4e278b3c819247f8384e5832d6b4de47206056354683a4f23006f494744bb4a2aad111462471c41d4ab69c610a99978656f52964501be46bd5c6974f5b546b96c7da439b08edaf0d92be3638e4e60d7cb933d23d8c6585807b0b92511aa5c35c1d0e9464ac687d02a26e8b4ad7e02501357b0a0930cc5e89bfba539ba84230424f1b3e80d92a367121b199f428311b82635bebe046b7458b9366e806e939ea785797b983", 0xd7}], 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$sock_int(r0, 0xffff, 0x1003, &(0x7f00000000c0)=0xf8, 0x4) (async) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="89000000ffff000001"], 0x9}, 0x0) (async) sendmsg(r2, &(0x7f0000000380)={0x0, 0x32c, 0x0, 0x0, &(0x7f0000000000), 0x90}, 0x0) (async) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0xe8, 0x0) setsockopt$sock_linger(0xffffffffffffff9c, 0xffff, 0x80, &(0x7f0000000280)={0x7, 0x1000}, 0x8) (async) getsockname(0xffffffffffffffff, &(0x7f0000000100)=@in, &(0x7f0000000140)=0xc) (async) fcntl$lock(r3, 0x7, &(0x7f0000000000)={0x2, 0x0, 0x6, 0x1000300000084, 0xffffffffffffffff}) (async) sysctl$kern(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x1000e, &(0x7f0000000000)=ANY=[@ANYRES32=r3]) 1.089599445s ago: executing program 0 (id=73): mkdirat(0xffffffffffffff9c, &(0x7f00000011c0)='./file0\x00', 0x14e) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffff06000000aa"]) r0 = kqueue() kevent(r0, &(0x7f00000025c0)=[{{}, 0xfffffffffffffff9, 0x5, 0x2, 0xcd9e, 0x9}], 0x7fff, &(0x7f0000002640)=[{{}, 0xfffffffffffffff9, 0xd1, 0x2, 0x8002, 0x2}], 0x5c2c, 0x0) symlink(&(0x7f00000000c0)='.\x00', &(0x7f0000000180)='./file0\x00') unveil(&(0x7f0000000040)='./file0/file0/..\x00', &(0x7f0000000000)='r\x00') unveil(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='c\x00') lchown(&(0x7f0000000080)='./file0/file0/..\x00', 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000000c0)=ANY=[@ANYRES64=r0]) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket(0x2, 0x4001, 0x0) r2 = dup(r1) r3 = fcntl$dupfd(r2, 0x2, 0xffffffffffffffff) close(r3) r4 = socket(0x2, 0x2, 0x0) bind(r4, &(0x7f0000000000), 0x10) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x10000) readv(r5, &(0x7f0000000040)=[{&(0x7f0000000240)=""/193, 0xfffffdf0}], 0x1) select(0x40, &(0x7f0000000000)={0xfffffffffffffffd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400000000}, 0x0, 0x0, 0x0) execve(0x0, 0x0, 0x0) connect$unix(r4, &(0x7f0000000000), 0x10) write(r4, 0x0, 0x0) setsockopt$sock_int(r3, 0xffff, 0x1023, &(0x7f0000000080), 0x4) close(r4) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 1.089334128s ago: executing program 5 (id=74): ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000040)={0x3, &(0x7f00000000c0)=[{0x0, 0x20}, {0x3, 0x0, 0x0, 0x49}, {0x81, 0x0, 0x0, 0x1}]}) sysctl$net_inet_esp(&(0x7f0000000000)={0x4, 0x2, 0x2, 0x11}, 0xa, 0x0, 0x0, 0x0, 0x0) sysctl$kern(&(0x7f0000000000)={0x1, 0x31}, 0xa, &(0x7f0000000040), 0x0, 0x0, 0xfedc) sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1934, 0x0, 0x94e88e483d20a485) sysctl$kern(&(0x7f0000000000)={0x1, 0x3b}, 0x2, &(0x7f0000000140)="cd754f97e9648ac8d4ac19e58510437ff613914226e1757897b2d1b9f163ecf37c8ba43b12502c108339b381e5b876f7", &(0x7f0000000180)=0x30, &(0x7f00000001c0)="bc1ba0964ddaec69a4d95260e4e5b1c878a0675217b7156539cbffa15e6deefa1c7018a4a6d5de07987aa8f7663bccea469c252a4d839d05b0c6c630905fa8f962c0ca6c7dc0ebe96ded22", 0x4b) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0x37) 1.08868821s ago: executing program 6 (id=75): r0 = socket$inet6(0x18, 0x1, 0x5) poll(&(0x7f0000000000)=[{r0}], 0x1, 0x0) pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0xd4e688a67930cd) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000000)="94", 0x1}], 0x1) (async) sendto$inet6(r0, &(0x7f0000000080)="232097a7159fb8995bd870621b25170d69898e063b2ee1d6fa072de1dd3457f2a31e3a5ba7e76c8ab8bd076459609298", 0x30, 0x1, &(0x7f00000000c0)={0x18, 0x2, 0xd, 0x9}, 0xc) close(r1) r3 = syz_open_pts() pwritev(r3, &(0x7f0000000140)=[{0x0}], 0x1, 0x1) (async) r4 = socket(0x2, 0x2, 0x0) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0xaf, 0xffff63de, 0x7, 0x9, 0x8, 0x3, 0x40, 0x10, [{0x3, 0x40000000, 0x775, 0x32e}, {0x2, 0x8, 0x6, 0xfff}, {0x7, 0xfe000002, 0x7, 0x20001}, {0x5, 0xdf, 0xf}, {0x0, 0x7, 0xf15, 0xb}, {0x3, 0xffff, 0x80cf, 0x1}, {0x23, 0x800, 0x100, 0x5}, {0x0, 0x40009, 0xfffffffb, 0xfbffe2e9}, {0x9b, 0xffe, 0x9, 0x7fff}, {0x3, 0xfffffff8, 0x5, 0x8bfd}, {0x0, 0x8000004, 0x101, 0x800007}, {0x4, 0xc7ce, 0x800000, 0x5}, {0x401, 0xc, 0x92fb, 0x40}, {0x4200003, 0x80000000, 0x9, 0x7}, {0x81, 0x101, 0x1003, 0x5}, {0x9be2, 0x80000001, 0x6, 0x69}]}) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) recvmmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x6}, 0x10, 0x60, 0x0) (async) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) (async) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000200)=@abs={0x0, 0x0, 0x3}, 0x8, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="14"], 0x18}, 0x0) r5 = socket(0x18, 0x2, 0x0) setsockopt(r5, 0x1000000000029, 0xb, &(0x7f0000003680)='\x00\x00\x00\x00', 0x4) (async) setsockopt(r5, 0x1000000029, 0xc, 0x0, 0x0) (async) r6 = socket(0x2, 0x2, 0x0) ioctl$TIOCSETAF(r2, 0x802c7416, &(0x7f0000000180)={0x8000, 0x9, 0x8e100, 0x2, "d7d99ffc1a47cb633e19846f72240582532a0b35", 0x548, 0x4}) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) sendmsg$unix(r6, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x0) (async) open$dir(&(0x7f0000000040)='./file0\x00', 0x10, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) connect$unix(r4, &(0x7f0000000000), 0x10) (async) execve(0x0, 0x0, 0x0) 1.085671052s ago: executing program 5 (id=78): sysctl$hw(&(0x7f00000000c0)={0x6, 0x8}, 0x3d, 0x0, &(0x7f0000000000), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)="76e5eac907f9ccf7a251ceddcec7d6aa45cffe2c63a56077123a276d3ba4e9d17eb3eb5db12a3783a8e0620d357de1fe04fa9465b5bd1286e9624dec06a00c222f", 0x25}], 0x1) rename(&(0x7f0000000100)='./file0\x00', 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='.\x00') mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000c00)='./file0\x00', 0x0, 0x0) fchdir(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000000880)={&(0x7f0000000000)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000700)=""/265, 0xfd}], 0x1, 0x0, 0xfffffffffffffd8d}, 0x6}, 0x10, 0x40, 0x0) close(r1) r2 = socket$unix(0x1, 0x5, 0x0) bind$unix(r2, &(0x7f0000000200)=@file={0xd570d0466b6018f, './file0\x00'}, 0xa) listen(r2, 0x0) execve(0x0, 0x0, 0x0) accept$unix(r1, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r3, 0xffff, 0x1022, &(0x7f00000000c0), &(0x7f0000000040)=0xc) sysctl$kern(&(0x7f00000000c0)={0x1, 0x4e}, 0x3, &(0x7f0000000100)="71f95f84cf71b59c7afec37582", &(0x7f0000000080)=0x2, 0x0, 0x37) sysctl$hw(&(0x7f00000000c0), 0x2, &(0x7f00000001c0), &(0x7f0000000080), 0x0, 0x0) 995.268837ms ago: executing program 3 (id=80): r0 = getegid() truncate(&(0x7f0000000000)='./file0\x00', 0x20a748) r1 = syz_open_pts() fcntl$lock(r1, 0x9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000300000000}) flock(r1, 0x1) flock(r1, 0x1) fcntl$lock(r1, 0x8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x100000001}) unveil(&(0x7f0000000240)='./file0/file0/../file0\x00', 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x9, &(0x7f0000000240)="ea00000100000000", 0xc) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000000)={{0x0, 0x0, r0, 0xffffffffffffffff, 0x0, 0x21, 0x1}, 0x80000000, 0xffc, 0xffffffffffffffff, 0x0, 0x0, 0x9, 0x200023, 0xfffffffffffffffc}) munmap(&(0x7f0000000000/0xf000)=nil, 0xf000) r3 = socket$inet(0x2, 0x2, 0x0) getsockopt(r3, 0x0, 0xc, 0x0, 0x0) minherit(&(0x7f000000e000/0x2000)=nil, 0x2000, 0x3) mknod(&(0x7f00000000c0)='./file0\x00', 0x1ffa, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x10, 0x1fb) open(&(0x7f0000000100)='./file0\x00', 0x70e, 0x88) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r4 = socket(0x18, 0x1, 0x0) setsockopt(r4, 0x1000000029, 0x3, &(0x7f0000000040)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) setsockopt(r4, 0x1000000029, 0xc, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) r5 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_int(r5, 0xffff, 0x1025, 0x0, 0x0) mkdir(&(0x7f0000000040)='./file2\x00', 0xc1) mkdir(&(0x7f0000000300)='./file2/file0\x00', 0xc2) rename(&(0x7f0000000140)='./file2\x00', &(0x7f00000000c0)='./file2/file0/file0\x00') 990.041242ms ago: executing program 6 (id=81): r0 = socket(0x18, 0x2, 0x0) r1 = socket(0x800000018, 0x2, 0x0) getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sysctl$net_inet_ip(&(0x7f00000000c0)={0x4, 0x2, 0x0, 0xf}, 0x4, 0x0, 0x0, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x9, 0x8}, 0x96085d202e23254d) syz_emit_ethernet(0x8e, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6b000001000000000000006bceb1cb1eedc0754f15dd5ff9ff020000000000000000000000000001890900000000000005020956050280010001000105000000000004015001030000000001000106000000000000c204"]) msgctl$IPC_SET(0x0, 0x1, &(0x7f00000000c0)={{0x0, r3, 0x0, r3, 0x0, 0x22}, 0x1, 0xfffa, 0x0, r2, 0x0, 0x1, 0xa3d6}) r4 = msgget$private(0x0, 0x730) msgctl$IPC_STAT(r4, 0x2, 0x0) sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b1000504600000000000000007000000331c13fecea10500fef9e906c72fd3357ae320b37b673039d2d236073705ae04be38164991f7accf5f882b297be1aa5b236deb51e2f0ac3ebbc257699a5f139b672f4d335d223e7d029d6ba8af6300372821", 0x62, 0x404, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r5 = dup(r1) ioctl$TIOCSETA(r5, 0x802c7414, &(0x7f0000000380)={0x6, 0x6, 0x100, 0x7f, "a1df9cdbad9447aa36d5e33daf9633cf5394826a", 0xfffffffb, 0x1000}) sysctl$hw(&(0x7f00000019c0)={0x6, 0x5}, 0x2, &(0x7f0000000080), 0x0, 0x0, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x4, 0x0, 0x0, 0x6}, {0x3, 0x0, 0x0, 0xffffffff}, {0x7f, 0x0, 0x0, 0xbc2}]}) r6 = socket(0x11, 0x3, 0x0) sendto$unix(r6, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x2, 0x0, 0x0) 989.858723ms ago: executing program 0 (id=82): open$dir(&(0x7f00000000c0)='./file0\x00', 0x200, 0x186) utimes(0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000000)='./file0\x00', 0x9cab835cfdc52675, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0xa011, r0, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x10000, 0x8) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0xa011, r1, 0x0) 967.601625ms ago: executing program 6 (id=83): r0 = socket$inet(0x2, 0x1, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0xe8, 0x0) r2 = fcntl$dupfd(r1, 0x3, 0xffffffffffffffff) ioctl$WSKBDIO_GETMAP(r2, 0x400474c4, 0x0) r3 = getpid() fcntl$setown(r0, 0x6, r3) ioctl$FIOASYNC(r0, 0x8004667d, &(0x7f0000000180)=0x3) shutdown(r0, 0x2) 967.361486ms ago: executing program 0 (id=84): r0 = syz_open_pts() ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000040)={0x1, 0x5, 0x8cbe, 0x9, "909c992f86cd2092107e9479749d3b6d7f164aeb", 0x8, 0x7f}) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r1 = socket(0x2, 0x2, 0x0) ioctl$FIONREAD(r1, 0xc0206983, &(0x7f00000001c0)) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000300)="8269cd28", 0x4}], 0x1) r2 = socket(0x11, 0x3, 0x0) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x80, 0x80) unveil(&(0x7f0000001980)='./file0/../file0\x00', &(0x7f00000019c0)='x\x00') sendto$unix(r2, &(0x7f00000001c0)="b1000504000008000000000000000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfe896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f54f4e0f668246c0900000008e371a378343712051eea04000000000000000000000000ec04fcfe3e66e65fac00632385bfabfacf77220800000000000000", 0xcc, 0xc, 0x0, 0x0) ioctl$WSDISPLAYIO_LSFONT(r3, 0xc058574e, &(0x7f0000000340)) recvmsg(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140), 0x0, 0x0, 0x59}, 0x1002) sendto$inet(r2, &(0x7f0000000080)="177d686e8c1423d91cae22fb23ae43db71793627aba6090d15e735b4382689163f1440897a5b5752bdc4c4afe0112c9a7847c74e6838ed8f27139dd940b35b0a69e5844416eba6b8a95cc55c34593e694dff358450d1aad36ed9a21244b6e7265bd67530c169db1be8acd7c20712aac599d6b86c6aa4445b40810134325d87", 0x7f, 0x8, &(0x7f0000000000)={0x2, 0x3}, 0xc) syz_open_pts() ioctl$TIOCSETAF(r0, 0x802c7416, &(0x7f0000000180)={0x105, 0xffffffff, 0x8000000, 0xfffffffe, "a8a39cefab00", 0xa2}) 819.270209ms ago: executing program 1 (id=85): sysctl$ddb(&(0x7f0000000000)={0x9, 0x7}, 0xa, &(0x7f0000000040)="b7d5755db47f9b4aa73ec15c7f06e13d55eff5b083b627f0fb97d7c4c9251c19708fdf41c3c1852b187fc1d3f257d116e9ee870b26737d8719ed95c5", &(0x7f00000000c0)=0x4, 0x0, 0x15) sysctl$ddb(&(0x7f0000000080)={0x9, 0x7}, 0x2, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="4971f3b689717a9080ae50fa3688d4f909adb82fccc55a822a7ee72f9fb9ed28c5b143ab4fcabef597d815f2ec9728512fb37f974022650f98e08554e5495e293d3095ec595a5bf340300b846fa5938cd4fd9dea4f78c0f0621b15c49aeaaebcf970e5078a86a1411a1dd0b9f27be89777fe88bb3ff6246d95a07d753071b8ef669cb0e8af79a104cb9fa11fbcf977a027229ec32160ccf4566d277bfabec78ea52f", 0xa2) sysctl$ddb(&(0x7f0000000100)={0x9, 0xb}, 0x2, &(0x7f0000000240)="392fa0667fcdef3f7f5fa2f7972ac279b897b6958096c8df15a791ce6f558d95bc50ace27d96c792c691e97bd9d925f1f4f5272ed6bfb4a1f5ee25499cc171", &(0x7f0000000280)=0x3f, &(0x7f00000002c0)="41850e2b3d2a7283bb51911ddc669076d105ba00231af310214923456610e0e7659b17d01ece84da0f7f2a1e7ad770fbbd3cedb048f8122984560c787dd2c64568fd8102909722a855d60a877d04e3fed0caa193", 0x54) 818.77151ms ago: executing program 1 (id=87): r0 = socket$unix(0x1, 0x5, 0x0) pipe2(&(0x7f0000000040), 0x10000) r1 = accept$unix(r0, &(0x7f0000000080)=@file={0x0, ""/92}, &(0x7f0000000000)=0x5e) connect$unix(r1, &(0x7f0000000100)=@abs={0x1, 0x0, 0x0}, 0xf) 811.466803ms ago: executing program 1 (id=88): ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0xbffd, 0x72, 0x1}, {0x4, 0x0, 0x0, 0x800}, {0x2, 0xfc, 0x0, 0x6}]}) (async, rerun: 32) sysctl$kern(&(0x7f0000000140)={0x1, 0x49}, 0x2, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d7afec3708200"/28, &(0x7f0000000080)=0x1c, 0x0, 0x0) (rerun: 32) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') truncate(&(0x7f0000000280)='./file0/file0/..\x00', 0x8) (async) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x11}, 0x4000000000000007, 0x0, 0x0, 0x0, 0x0) 776.631843ms ago: executing program 1 (id=91): r0 = semget(0x0, 0x1, 0x281) r1 = open(&(0x7f0000000080)='./file0\x00', 0x18289, 0x190) ftruncate(r1, 0x10000) socket$inet(0x2, 0x2, 0x0) r2 = socket(0x18, 0x2, 0x0) r3 = msgget$private(0x0, 0x5bd) msgrcv(r3, 0x0, 0x0, 0x3, 0x1000) msgsnd(r3, &(0x7f0000000000)={0x1}, 0x8, 0x0) msgsnd(r3, &(0x7f0000000040)={0x3}, 0x8, 0x800) msgctl$IPC_RMID(r3, 0x0) connect$unix(r2, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) setsockopt$sock_int(r2, 0xffff, 0x1023, &(0x7f0000000040)=0x3, 0x4) ioctl$WSKBDIO_GETKEYREPEAT(r1, 0x400c5708, &(0x7f0000000100)) r4 = socket(0x18, 0x1, 0x0) semctl$GETPID(r0, 0x4, 0x4, &(0x7f0000000000)=""/164) flock(r4, 0x0) r5 = open(&(0x7f0000000200)='./file0\x00', 0x80000000000206, 0xd6) ioctl$WSKBDIO_SETBELL(r1, 0x80105703, &(0x7f0000000280)={0x1, 0x401, 0x1ff}) writev(r5, &(0x7f00000002c0), 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) unveil(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='x\x00') 769.889203ms ago: executing program 3 (id=92): ioctl$TIOCSTSTAMP(0xffffffffffffffff, 0x8008745a, &(0x7f0000000040)={0x20e89, 0xd}) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffff06000000aa"]) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="00001c00ac14"]) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x2, 0x1, 0x0) listen(r0, 0x0) r1 = socket(0x2, 0x3, 0x0) syz_extract_tcp_res(&(0x7f00000000c0), 0x5, 0x400) connect$unix(r1, &(0x7f0000000000), 0x10) setsockopt$inet_opts(r1, 0x0, 0x1, &(0x7f0000000040)="27913c11b3c9e91fbdf59c32417020e3a81e536e", 0x14) write(r1, &(0x7f0000000080)="d99aca906c", 0xfd23) shutdown(r1, 0x2) 767.920684ms ago: executing program 6 (id=94): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x18, 0x2, 0x0) r3 = kqueue() kevent(r3, &(0x7f00000000c0)=[{{}, 0xfffffffffffffff9, 0x9, 0x3, 0x8000000000000000, 0x4}], 0x127, 0x0, 0x400, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000480)={@broadcast, @random="94ea09066dbd", [{[{0x88a8, 0x0, 0x0, 0x4}], {0x8100, 0x5, 0x1, 0x3}}], {@ipv6={0x86dd, {0x0, 0x6, "db8344", 0x8, 0x11, 0x0, @rand_addr="fed38d5ba80b9e61cd0c535a9800", @mcast2, {[], @udp={{0x3, 0x2, 0x8}}}}}}}) setsockopt(r2, 0x1000000000029, 0x9, &(0x7f0000000040)="03000000", 0x4) setsockopt(r2, 0x1000000000029, 0xc, &(0x7f0000000000), 0x14) recvmmsg(r1, &(0x7f0000000880)={&(0x7f0000000000)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000700)=""/265, 0xfd}], 0x1, 0x0, 0xfffffffffffffd8d}, 0x6}, 0x10, 0x40, 0x0) close(r1) r4 = socket$unix(0x1, 0x5, 0x0) bind$unix(r4, &(0x7f0000000200)=@abs={0x1, 0x0, 0x3}, 0x8) listen(r4, 0x0) execve(0x0, 0x0, 0x0) writev(r3, &(0x7f0000000180)=[{&(0x7f0000000240)="d0388061c0aea1f5ed0b2f960b4542ffd49eaa2c503fa5102bdd47bad035266cbaba2424e81b6571cbcfa6d237205e533e3a421a612afcd7a38b7cef7f882d10ba7451951b155fdc227d918936d6d47f6005beda3f4122c0821862277b6bb4565b9f91298cfa8659a42acb6bb35acd690fa97b3b8a404e87d79baa19cc3acd81854ffff682d296f23a616b0f1304ce2323ca6f1d36be49fa8438e4287557ebfef89a3350b8a7931e1f3b91da1a8897d98dd26ecccc0d2c9184ae3f473bc6f5d72cc46cb46137944117b36056f4992ed25a6c4a474077", 0xd6}], 0x1) r5 = openat$pf(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) getsockopt$SO_PEERCRED(r2, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, 0x0}, 0xc) getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000000400)={0x0, 0x0, 0x0}, &(0x7f0000000440)=0xc) fchownat(r5, &(0x7f0000000380)='./file0\x00', r6, r7, 0x4) ioctl$SPKRTUNE(r5, 0x20005302, &(0x7f0000000500)={0x10, 0x1}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) msgsnd(0x0, 0x0, 0x7f, 0x800) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r8 = semget(0x0, 0x1, 0x281) semctl$SETVAL(r8, 0x0, 0x8, &(0x7f0000000080)=0x4) semop(r8, &(0x7f0000000000)=[{0x0, 0xfff9, 0x1000}], 0x1) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0x8, 0x8, 0x7, 0x2, 0x8, 0x3, 0x40, 0x10, [{0x5, 0x3, 0x7fff, 0x80000201}, {0x4, 0x8, 0x6, 0xfff}, {0x1, 0xfffffffe, 0x6, 0x1}, {0x2, 0xdf, 0xf, 0x40}, {0x2, 0x7, 0xf11, 0x7}, {0x800, 0xffbf, 0x80cf}, {0x1, 0x5, 0x85, 0x5}, {0x0, 0x1, 0xfffffff8, 0xfbffe2e9}, {0x8, 0xffe, 0x6, 0x17fff}, {0x3, 0x0, 0x5, 0x7}, {0x8, 0x8000000, 0x8, 0x7}, {0x4, 0xc7cb, 0x800000, 0xa66}, {0x401, 0x10a, 0x9, 0x40}, {0x200003, 0xee2, 0x4, 0x6f5fc48f}, {0x81, 0x101, 0x3, 0x7fff}, {0xffffffff, 0x8003, 0x6, 0x69}]}) poll(&(0x7f0000000000), 0x35, 0x0) 653.748761ms ago: executing program 3 (id=97): r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000200)=@file={0xd570d0466b6018f, './file0\x00'}, 0xa) listen(r0, 0x0) kevent(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000100)={0x3, 0x7fffffff}) r1 = kqueue() kevent(r1, &(0x7f0000000040), 0x30, 0x0, 0x57d, 0x0) 646.595486ms ago: executing program 3 (id=99): r0 = socket(0x18, 0x2, 0x0) r1 = socket(0x800000018, 0x2, 0x0) getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sysctl$net_inet_ip(&(0x7f00000000c0)={0x4, 0x2, 0x0, 0xf}, 0x4, 0x0, 0x0, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x9, 0x8}, 0x96085d202e23254d) syz_emit_ethernet(0x8e, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6b000001000000000000006bceb1cb1eedc0754f15dd5ff9ff020000000000000000000000000001890900000000000005020956050280010001000105000000000004015001030000000001000106000000000000c204"]) msgctl$IPC_SET(0x0, 0x1, &(0x7f00000000c0)={{0x0, r3, 0x0, r3, 0x0, 0x22}, 0x1, 0xfffa, 0x0, r2, 0x0, 0x1, 0xa3d6}) r4 = msgget$private(0x0, 0x730) msgctl$IPC_STAT(r4, 0x2, 0x0) sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b1000504600000000000000007000000331c13fecea10500fef9e906c72fd3357ae320b37b673039d2d236073705ae04be38164991f7accf5f882b297be1aa5b236deb51e2f0ac3ebbc257699a5f139b672f4d335d223e7d029d6ba8af6300372821", 0x62, 0x404, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r5 = dup(r1) ioctl$TIOCSETA(r5, 0x802c7414, &(0x7f0000000380)={0x6, 0x6, 0x100, 0x7f, "a1df9cdbad9447aa36d5e33daf9633cf5394826a", 0xfffffffb, 0x1000}) sysctl$hw(&(0x7f00000019c0)={0x6, 0x5}, 0x2, &(0x7f0000000080), 0x0, 0x0, 0x0) r6 = socket(0x11, 0x3, 0x0) sendto$unix(r6, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x2, 0x0, 0x0) 645.712131ms ago: executing program 3 (id=100): writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000080)="673bb5b8cc0c16ed08f1b8d24e2207f981aa6a78ef1d35e6abbbdabb26a52ad7f46003d52c000f06c166", 0x2a}], 0x1) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r0 = socket(0x18, 0x1, 0x0) ioctl$FIONREAD(r0, 0x802069db, &(0x7f00000001c0)) open(&(0x7f0000000140)='./file0\x00', 0x78e, 0xd9) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x61}) syz_open_pts() socket(0x18, 0x2, 0x0) ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x0, [{0x0, 0xd30d}, {0x0, 0x79}, {0x1, 0x300}, {0x0, 0x5}, {0x3, 0x9}, {0x2}, {0x0, 0xfa}, {0x3, 0x5}, {}, {0x2}, {0x1, 0x81}, {0x3}, {0x0, 0xa17}, {}, {}, {}, {0x1}, {}, {}, {0x0, 0x4000401}, {0x0, 0x2}, {0x0, 0x4}, {0x2}, {0x1, 0xffffffff}, {0x3, 0x2}, {0x0, 0x5}, {0x0, 0x2}, {0x0, 0x2}, {}, {0x1, 0x6}, {}, {0x3, 0x280000}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) select(0x40, &(0x7f0000000040)={0x4, 0x102, 0x3, 0x7, 0x7fb, 0x8, 0x2, 0x20000000002}, 0x0, &(0x7f0000000100)={0x96, 0x400000001d7435a0, 0x101, 0x8001, 0x9, 0x5ed3, 0x200a, 0x8}, 0x0) poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x20}], 0x1, 0x7fff) execve(0x0, 0x0, 0x0) r1 = socket(0x18, 0x2, 0x0) sendmsg$unix(r1, &(0x7f0000000200)={&(0x7f0000000100)=@file={0x0, './file0\x00'}, 0xa, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="14"], 0x18, 0x401}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000080)="673bb5b8cc0c16ed08f1b8d24e2207f981aa6a78ef1d35e6abbbdabb26a52ad7f46003d52c000f06c166", 0x2a}], 0x1) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (async) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) (async) socket(0x18, 0x1, 0x0) (async) ioctl$FIONREAD(r0, 0x802069db, &(0x7f00000001c0)) (async) open(&(0x7f0000000140)='./file0\x00', 0x78e, 0xd9) (async) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x61}) (async) syz_open_pts() (async) socket(0x18, 0x2, 0x0) (async) ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x0, [{0x0, 0xd30d}, {0x0, 0x79}, {0x1, 0x300}, {0x0, 0x5}, {0x3, 0x9}, {0x2}, {0x0, 0xfa}, {0x3, 0x5}, {}, {0x2}, {0x1, 0x81}, {0x3}, {0x0, 0xa17}, {}, {}, {}, {0x1}, {}, {}, {0x0, 0x4000401}, {0x0, 0x2}, {0x0, 0x4}, {0x2}, {0x1, 0xffffffff}, {0x3, 0x2}, {0x0, 0x5}, {0x0, 0x2}, {0x0, 0x2}, {}, {0x1, 0x6}, {}, {0x3, 0x280000}]}) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) select(0x40, &(0x7f0000000040)={0x4, 0x102, 0x3, 0x7, 0x7fb, 0x8, 0x2, 0x20000000002}, 0x0, &(0x7f0000000100)={0x96, 0x400000001d7435a0, 0x101, 0x8001, 0x9, 0x5ed3, 0x200a, 0x8}, 0x0) (async) poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x20}], 0x1, 0x7fff) (async) execve(0x0, 0x0, 0x0) (async) socket(0x18, 0x2, 0x0) (async) sendmsg$unix(r1, &(0x7f0000000200)={&(0x7f0000000100)=@file={0x0, './file0\x00'}, 0xa, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="14"], 0x18, 0x401}, 0x0) (async) 558.113315ms ago: executing program 1 (id=104): symlink(&(0x7f0000000480)='./file0/file0\x00', &(0x7f0000000040)='./file0\x00') kevent(0xffffffffffffffff, &(0x7f0000000040)=[{{}, 0xfffffffffffffffa, 0x6b, 0x11, 0x200000000000001, 0x101}], 0x203, 0x0, 0x0, 0x0) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0xffffffff, 0x20b, {0x0, 0x6}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket(0x18, 0x1, 0x0) setsockopt(r0, 0x1000000029, 0xc, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) setsockopt(r0, 0x1000000029, 0xc, &(0x7f0000000040)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) setsockopt(r0, 0x1000000029, 0xd, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) rename(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0/file0/..\x00') 543.124675ms ago: executing program 6 (id=105): r0 = accept$inet6(0xffffffffffffff9c, &(0x7f0000000040), &(0x7f0000000080)=0xc) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0x69, &(0x7f0000000100)={{0x18, 0x2, 0xffff, 0x5}, {0x18, 0x2, 0xbd20, 0x1}, 0xff41, [0x1e0, 0x7, 0x0, 0x0, 0x0, 0x6, 0x8, 0x1]}, 0x3c) r1 = socket(0x18, 0x2, 0x0) connect$unix(r1, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) r2 = socket(0x18, 0x2, 0x0) setsockopt$sock_int(r2, 0xffff, 0x1023, &(0x7f0000000000)=0x3, 0x4) recvmmsg(r2, &(0x7f0000001740)={0x0, 0x7}, 0x10, 0x0, 0x0) accept$inet6(0xffffffffffffff9c, &(0x7f0000000040), &(0x7f0000000080)=0xc) (async) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0x69, &(0x7f0000000100)={{0x18, 0x2, 0xffff, 0x5}, {0x18, 0x2, 0xbd20, 0x1}, 0xff41, [0x1e0, 0x7, 0x0, 0x0, 0x0, 0x6, 0x8, 0x1]}, 0x3c) (async) socket(0x18, 0x2, 0x0) (async) connect$unix(r1, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) (async) socket(0x18, 0x2, 0x0) (async) setsockopt$sock_int(r2, 0xffff, 0x1023, &(0x7f0000000000)=0x3, 0x4) (async) recvmmsg(r2, &(0x7f0000001740)={0x0, 0x7}, 0x10, 0x0, 0x0) (async) 542.800426ms ago: executing program 1 (id=106): pread(0xffffffffffffff9c, &(0x7f0000000000)="e5bcaf95a965e7ec6c3b67e6374e3ec3fb25ca567bbb3aef3a135a3ef7b897ed7b2f927e5b6f387c9426a9c7e7e434aa4757dedfd8dffd7698258d67979ac08c07980b7b8f66f6b0b47c27d9e36fb08842f08868baf1b8baf7d695fc5f2dbaaa162babcc29026f8a17cd1c9f38bcc0ddaee4dd4267e433787a13815d0b8ed0bfde", 0x81, 0xf3) r0 = syz_open_pts() ioctl$TIOCMBIS(r0, 0x8004746c, &(0x7f00000000c0)=0x2) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000100)="8768eada06c704899295ab3dcd27a639afac98e5b46456e854a85d41e3145294be3ff8ad01b3f97b044b192ab1e99d3ae1e1665b937b18cb21b1139a4d21a60b30c9708aee580492d9fbd5154a2188b1232b85504a9d282b09e5d8bd97e81f4e68be56cb9d0f5239b3290fcdb3de714160705c7c692371c7ba4a8f90fa8d342850d1a54a63151db7b539e7dba8271b48184d4d01b3c0b3bcdfe827", 0x9b}, {&(0x7f00000001c0)="bc1c73b56ddb4bdb0843335f1a52a746d7f5df499be23ef0879c1980cbe11f43c77ca98d83c18c196a074612dc88654c574a1414f1ab87a6fb47f349f8af2c3d53d416fb40737a3b806d742ca9f29d551c297a8f25", 0x55}], 0x2, 0x3) ioctl$TIOCSTART(r0, 0x2000746e) ioctl$TIOCSTAT(r0, 0x20007465, &(0x7f0000000280)) close(r0) fchflags(r0, 0x10001) setrlimit(0x8, &(0x7f00000002c0)={0x4, 0x30000000}) r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x18) r2 = dup2(r0, r0) writev(r2, &(0x7f00000005c0)=[{&(0x7f0000000340)="4979953679cab1c64b71f8df96be3c41ff8bafe82abe99bd9edbbf52841223141f24c758ec4e2c4aa06b3408fddc2cdbd27de7ab5559aeaba0ce1469f895d7998a983bb27b696a2db524d09e27004420b4a6fa4123780b2a", 0x58}, {&(0x7f00000003c0)="d48c03868b88ae83cfaa2bef8350ce09a51b6891d22448bdb0c72cc5453eca7376e07beac96f8429281bcda40edb2d2c5a739431b4eedb3eea12600ed40bc6697ea4ed28a40af51c6cbf5f26bc013ea9f23bd7bca6e3dd7666fe2e5c42d053c098c8fadaf9c214514c39385a2ebab797db1ceb7a745709951e124b0ba63b891d365f82f3613ac311681221399c242a3a68023f1b0b99b88d7753c0bac2115fd5a4c372bc60272019a97d26c2ef91ac3039436c896ef02f2dfa8c621f5a248c550c322b7c7c39ac8d63e1a5c2e4d6c88ca9efbef4047b7bb74270", 0xda}, {&(0x7f00000004c0)="5d3ab955ae090cf54b5c6c3fafe733a981b61936f2a9b9031edae2d8daa7724f0572bbb9be7669037780430a935c2b343949efb946cd63f6e80518a64172e63913e0c996d944b963786facd3ce7fe2ff2c19729b91299437177137e9dbd8ac8d36aa3b82179007e722ca2619f256946def5e6daf559acd713fec330df45c78a788e35decb9b8804929a46a90d005756f1e58b80cef130eeeea6e9bf747802ca4266ae3d42ef10175b5cb84d09f7fbf384f2e26725388fc8387f6cef468f54007958e23219c416707c945bfe63f9a31e0c8fe10a3d2f00cce42e94284e70c", 0xde}], 0x3) ioctl$TIOCNXCL(r1, 0x2000740e) ioctl$TIOCCBRK(r1, 0x2000747a) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600), 0x8, 0x0) ioctl$TIOCOUTQ(r3, 0x40047473, &(0x7f0000000640)=0xd) ioctl$TIOCSTAT(r3, 0x20007465, &(0x7f0000000680)) ioctl$TIOCSETAF(r0, 0x802c7416, &(0x7f00000006c0)={0x6, 0x1, 0x200, 0x6, "0c93544b10b401037db4115ca38b6ebec1fe5252", 0x6, 0x4}) close(r1) r4 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000700), 0x10, 0x0) ioctl$KDMKTONE(r4, 0x20004b08, &(0x7f0000000740)=0xfffffff9) r5 = openat$tty(0xffffffffffffff9c, &(0x7f0000000780), 0x20000, 0x0) ioctl$TIOCNOTTY(r5, 0x20007471) ioctl$TIOCSTOP(r1, 0x2000746f) open$dir(&(0x7f00000007c0)='./file0\x00', 0x2, 0x184) ioctl$TIOCSTOP(r5, 0x2000746f) ioctl$BIOCIMMEDIATE(r3, 0x80044270, &(0x7f0000000800)=0x8) ioctl$TIOCSETVERAUTH(r5, 0x8004741c, &(0x7f0000000840)=0x5) r6 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000880), 0x40, 0x0) ioctl$WSDISPLAYIO_GVIDEO(r6, 0x40045744, &(0x7f00000008c0)) 502.713081ms ago: executing program 6 (id=109): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) read(r0, &(0x7f00000011c0)=""/171, 0xab) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0x80000000, 0xffff63de, 0x7, 0x2, 0x8, 0x100002, 0x40, 0x10, [{0x5, 0x3, 0x775, 0x4}, {0x2, 0x8, 0x6, 0xfff}, {0x7, 0xfffffffe, 0x2006, 0x1}, {0x2, 0x7}, {0x0, 0x7, 0xf11, 0x7}, {0x7, 0xffff, 0x80d2}, {0x27, 0x5, 0x85, 0x84}, {0x0, 0x40009, 0xfffffff8, 0xfbffe2e9}, {0x8, 0xffa, 0x6, 0x7fff}, {0x0, 0xfffffff8, 0x400005, 0x8bfb}, {0xfffff0d1, 0x8000000, 0x8, 0x7}, {0x4, 0xc7cc, 0x3, 0x2}, {0x401, 0x106, 0x9, 0x20000040}, {0x200003, 0x6e6, 0x2, 0x6f5fc48b}, {0x7e, 0x5, 0x3, 0x5}, {0x3, 0x108001, 0x6, 0x69}]}) syz_open_pts() r2 = socket(0x2, 0x2, 0x0) sendmmsg(r2, &(0x7f0000000500)={&(0x7f00000004c0)={&(0x7f0000000280)=@in6={0x18, 0x1, 0x6}, 0xc, 0x0, 0x0, 0x0}}, 0x10, 0x208) poll(&(0x7f0000000000), 0x35, 0x0) ioctl$WSMOUSEIO_SRES(r1, 0x80045721, &(0x7f0000000000)=0x7) ioctl$FIOGETOWN(0xffffffffffffffff, 0x4004667b, &(0x7f00000001c0)) fcntl$setstatus(r0, 0x4, 0xc0) connect$inet6(r1, &(0x7f0000000200)={0x18, 0x2, 0x892, 0xfffffb67}, 0xc) syz_emit_ethernet(0x42, &(0x7f0000000100)={@local, @empty, [], {@ipv4={0x800, {{0x8, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x1, 0x0, @multicast2, @broadcast, {[@timestamp={0x44, 0xc, 0xf9, 0x3, 0xf, [{[@multicast2], 0x3}]}]}}, @icmp=@timestamp}}}}) chflagsat(r0, &(0x7f0000000180)='./file0\x00', 0x0, 0x2) close(r2) 502.436327ms ago: executing program 3 (id=110): r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0xc) socketpair$unix(0x1, 0x5, 0x0, 0xffffffffffffffff) close(r0) r1 = msgget$private(0x0, 0xfffffffffffffffd) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x9, 0x0, 0x0, 0x0, 0x0, 0xf8}, 0x1000001268, 0x2000000000003, 0x0, 0x0, 0x80000001, 0x1, 0x8, 0x8000008000000e62}) sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b1000504600000000000000007000000331c13fecea10500fef9e906c72fd3357ae320b37b673039d2d236073705ae04be38164991f7accf5f882b297be1aa5b236deb51e2f0ac3ebbc257699a5f139b672f4d335d223e7d029d6ba8af630037282102000000720f70c1f5a472c881ea6e69e0bb76d907c400000200361b1257aea8c5000020020000000000008abfba09", 0x91, 0x404, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r2 = socket(0x11, 0x3, 0x0) sendto$unix(r2, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x2, 0x0, 0x0) msgget$private(0x0, 0x40) msgrcv(r1, 0x0, 0x0, 0x0, 0x0) msgctl$IPC_STAT(r1, 0x2, &(0x7f0000000140)=""/182) 408.442828ms ago: executing program 7 (id=113): open(&(0x7f0000000080)='./file0\x00', 0x18289, 0x190) (async) r0 = open(&(0x7f0000000080)='./file0\x00', 0x18289, 0x190) ftruncate(r0, 0x10000) r1 = socket(0x18, 0x2, 0x0) close(r1) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) (async) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) setitimer(0x0, &(0x7f0000001a80)={{0xffffffff}}, 0x0) (async) setitimer(0x0, &(0x7f0000001a80)={{0xffffffff}}, 0x0) r3 = socket(0x18, 0x1, 0x0) setsockopt$sock_int(r3, 0xffff, 0x200, &(0x7f0000000000)=0x2c, 0x4) socket$unix(0x1, 0x5, 0x0) (async) r4 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_cred(r4, 0xffff, 0x1024, &(0x7f0000000280)={0x0}, &(0x7f0000000180)=0xc) setpgid(0x0, r5) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x100000000000000, r5}) (async) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x100000000000000, r5}) sysctl$net_inet_ip(&(0x7f0000000000)={0x4, 0x2, 0x0, 0x23}, 0x4, 0x0, 0x0, 0x0, 0x0) connect$unix(r1, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "9ac9d0", 0x0, 0x33, 0x0, @local={0xfe, 0x80, '\x00', 0x0}, @rand_addr="b82957248c3701367c9909fa96bf7cb7"}}}}) r6 = socket$inet(0x2, 0x2, 0x0) close(r6) socket$inet(0x2, 0x2, 0x0) (async) r7 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r7, 0x0, 0x200000000000c, &(0x7f0000000000)="ea00000100000000", 0x8) setsockopt$inet_opts(r7, 0x0, 0x200000000000c, &(0x7f0000000240)="ea00eb0100000000", 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x104}, 0x8) read(r8, &(0x7f0000001340)=""/106, 0x6a) setsockopt$inet_opts(r6, 0x0, 0xd, &(0x7f0000000240)="ea00000100000000", 0x8) (async) setsockopt$inet_opts(r6, 0x0, 0xd, &(0x7f0000000240)="ea00000100000000", 0x8) syz_emit_ethernet(0xc8, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000088a80204810008008048f122d9576317457bce6d080c47fc6dc30aa0f7cb9caa71671cddb7bb35414552f62121c00c65077dd83a3ef1ca686087911930d8010a3d94a29f26f6482b6f31b84a02765000a1375a6bbadccadfaa93d5de2bd0d3078497879b13a9fd636d182bf911878b788e69b3f813bc59a14abe4b6ff20d38cb8301d74d94cec4f40dea6084b940da9d80d6579cac646b318a8fe5199c362ad9ffbd990ca8b30b72f9b1200938ed087913751545f6465f02a6f39ee4"]) ioctl$TIOCGWINSZ(r0, 0x40087468, &(0x7f0000000000)) (async) ioctl$TIOCGWINSZ(r0, 0x40087468, &(0x7f0000000000)) sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0x37) (async) sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0x37) write(r0, &(0x7f0000000380)="a0b9", 0x2) 263.676275ms ago: executing program 7 (id=119): r0 = open(&(0x7f0000000080)='./file0\x00', 0x18289, 0x190) ftruncate(r0, 0x10000) (async) r1 = open(&(0x7f0000000040)='./file0\x00', 0x200, 0x82) close(r1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x10, r1, 0x0) (async) open(&(0x7f0000000000)='./file0\x00', 0x9cab835cfdc52675, 0x0) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000002) (async) open(&(0x7f0000001900)='./file1\x00', 0x8000, 0x2) 213.693566ms ago: executing program 2 (id=123): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xa7210e10bc3c9def) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) open(&(0x7f0000000100)='.\x00', 0x0, 0x0) (async) r1 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000540)='./file0\x00', 0x184) (async) mkdirat(r1, &(0x7f0000000540)='./file0\x00', 0x184) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x21, 0x6}, 0x80000000, 0xfff, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x200023}) (async) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x21, 0x6}, 0x80000000, 0xfff, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x200023}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket(0x18, 0x1, 0x0) setsockopt(r2, 0x1000000029, 0xc, &(0x7f0000000040)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) setsockopt(r2, 0x1000000029, 0x4, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) renameat(r1, &(0x7f00000025c0)='./file0\x00', r1, &(0x7f0000002600)='./file1\x00') (async) renameat(r1, &(0x7f00000025c0)='./file0\x00', r1, &(0x7f0000002600)='./file1\x00') fchdir(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r3, 0xffff, 0x1022, &(0x7f00000000c0), &(0x7f0000000140)=0xc) r4 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_cred(r4, 0xffff, 0x1024, &(0x7f0000000280)={0x0}, &(0x7f0000000180)=0xc) setpgid(0x0, r5) (async) setpgid(0x0, r5) sysctl$kern(&(0x7f00000000c0)={0x1, 0x4e}, 0x3, &(0x7f0000000100)="71f95f84cf71b59c7afec37582", &(0x7f0000000080)=0x2, 0x0, 0x37) 212.46683ms ago: executing program 7 (id=125): r0 = msgget$private(0x0, 0x7fc) msgrcv(r0, &(0x7f00000002c0)={0x0, ""/160}, 0xa8, 0x0, 0x0) msgrcv(r0, 0x0, 0x0, 0x0, 0x0) execve(0x0, 0x0, 0x0) msgsnd(r0, &(0x7f0000000600)={0x2}, 0x8, 0x0) semctl$IPC_STAT(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000080)=""/79) msgsnd(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="03"], 0x0, 0x0) 212.110707ms ago: executing program 2 (id=126): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="10000000ffff000001"], 0x10, 0x4}, 0x40a) (async) r2 = socket(0x11, 0x3, 0xfd) sendto$unix(r2, &(0x7f0000000180)="b1000504600000000000000007000000331c13fecea10500fef9ed06c72fd3357ae320b37b673039d2d236073705ae04be38164991f7accf5f882b297be1aa5b236deb51e2f0ac3ebbc257699a5f139b672f4d335d223e7d029d6ba8af630037282102000000720f70c1f5a472c881d0f58230ba576367c400000200361b1257aea8c5000020020000000000008abfba09001d89f000000000ffff008000ff00"/177, 0xb1, 0x4, 0x0, 0x0) (async) r3 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0xde) writev(r3, &(0x7f0000000300)=[{&(0x7f0000000340)="7fffffffffffffffbab768a1", 0xc}, {&(0x7f0000000000)="8d6bb85551ec8430877ae32fe9bbe42cc8f2147a3eba8e1969f0535119cf4c071c8aee7ef2921be5d7d4796c5566c95989acb3d1", 0x34}], 0x2) syz_emit_ethernet(0x7ea, &(0x7f0000000080)=ANY=[@ANYBLOB="ff03000000002702000000000000006279be389a4b67ecc7d0fd7bf36ba8bbfeaddfd5704418539a4043065c8fdbd2c59071de59b0ec6cc22a4360f4d8bda5d55b868a98c856b9769efdf9deba0a8ae798c6c5c709abb0d0", @ANYRESHEX=r0, @ANYRES32=r0, @ANYRESDEC=r1, @ANYRESDEC=r3]) 211.807849ms ago: executing program 4 (id=127): poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x2, 0x2, 0x0) connect$unix(r0, &(0x7f0000000000), 0x10) connect$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0xa) r1 = socket(0x18, 0x1, 0x0) close(r1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r2 = socket(0x18, 0x2, 0x0) setsockopt(r2, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) getsockopt(r1, 0x29, 0x2e, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x9, &(0x7f00000000c0)={0x0, 0x0, 0xfffffffffffffffe, 0x1}) r3 = socket(0x18, 0x2, 0x0) connect$unix(r3, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0xa) recvmmsg(r0, &(0x7f00000017c0)={&(0x7f0000001780)={&(0x7f0000000200)=@un=@abs, 0x8, &(0x7f00000016c0)=[{&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000000240)=""/158, 0x9e}, {&(0x7f0000000300)=""/69, 0x45}, {&(0x7f0000000380)=""/113, 0x71}, {&(0x7f0000000400)=""/171, 0xab}, {&(0x7f0000001500)=""/176, 0xb0}, {&(0x7f00000015c0)=""/208, 0xd0}], 0x7, &(0x7f0000001740)=""/10, 0xa}, 0xb63}, 0x10, 0x1, &(0x7f0000001800)={0x1, 0x3095}) setsockopt(r3, 0x1000000029, 0x3f, &(0x7f0000000040)="6700d6e5", 0x4) close(r3) socket(0x20, 0x3, 0x0) writev(r3, &(0x7f00000004c0)=[{0x0}], 0x1) sysctl$vm(&(0x7f0000000180)={0x2, 0x4}, 0x2, &(0x7f00000001c0)='.O\x002', &(0x7f0000000140)=0x4, 0x0, 0x0) 148.05683ms ago: executing program 5 (id=128): clock_getres(0x4, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r1, &(0x7f0000000040)=@file={0xd19450564dee018c, './file0\x00'}, 0xa) connect$unix(r1, &(0x7f0000000000)=@file={0xd1653077bafa0114, './file0\x00'}, 0xa) connect$unix(r0, &(0x7f0000000480)=@abs={0x1, 0x0, 0x0}, 0x8) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f0000000080), 0x1c, 0x0}, 0x0) setitimer(0x2, &(0x7f0000000080)={{0xfffffffffffffff7, 0x8876}, {0x7fffd, 0x6}}, 0x0) r2 = socket(0x6, 0x2, 0x0) connect$unix(r2, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) getsockname$inet(r2, &(0x7f0000000080), &(0x7f0000000000)=0xc) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x8, {0x0, 0x8}}) semctl$IPC_SET(0x0, 0x0, 0x1, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7, 0x1}, 0x8) syz_emit_ethernet(0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa9b86dd600000000000000100000000000000000000000000000e000000000000000000000047"]) munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r3 = socket(0x18, 0x2, 0x0) sendmsg$unix(r3, &(0x7f0000001700)={0x0, 0xffffffb3, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0) 145.940797ms ago: executing program 2 (id=129): execve(0x0, &(0x7f0000000000)=[&(0x7f0000000040)='//\x00'], 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) r0 = socket(0x2, 0x4001, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1, &(0x7f0000000080)=0x1fc, 0x4) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) connect$unix(r0, &(0x7f0000000000), 0x10) mkdir(&(0x7f0000000040)='./file2\x00', 0xc1) 145.517157ms ago: executing program 2 (id=130): setitimer(0x2, &(0x7f0000000140)={{0x0, 0x7}, {0x0, 0x8003}}, 0x0) r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) unveil(&(0x7f0000000280)='.\x00', &(0x7f00000002c0)='r\x00') mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) ioctl$VMM_IOC_CREATE(r0, 0xc2585601, &(0x7f0000000180)={0x10, 0x401, [{&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x3}, {&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x3}, {&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x5}, {&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x1}, {&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil}, {&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x40006}, {&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x19664a65}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f00005f9000/0x4000)=nil, 0x81}, {&(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x400}, {&(0x7f0000398000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0xe1a}, {&(0x7f0000fef000/0xe000)=nil, &(0x7f0000ff1000/0x3000)=nil, 0x3}, {&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x2000)=nil, 0x7ff}, {&(0x7f0000ff3000/0x4000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x20000000003}, {&(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ff3000/0x2000)=nil, 0x100}, {&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff2000/0x4000)=nil, 0x7}, {&(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff1000/0x2000)=nil, 0x40}], './file0\x00', 0x6a6}) rename(&(0x7f0000001ac0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) readv(r0, &(0x7f00000019c0)=[{&(0x7f0000000380)=""/234, 0xea}, {&(0x7f0000000480)=""/253, 0xfd}, {&(0x7f0000000580)=""/104, 0x68}, {&(0x7f0000000600)=""/232, 0xe8}, {&(0x7f0000000700)=""/103, 0x67}, {&(0x7f0000000780)=""/88, 0x58}, {&(0x7f0000000800)=""/211, 0xd3}, {&(0x7f0000000900)=""/140, 0x8c}, {&(0x7f00000009c0)=""/4096, 0x1000}], 0x9) clock_gettime(0x3, 0xfffffffffffffffe) r1 = socket(0x20, 0x3, 0x0) ioctl$TIOCSETAF(0xffffffffffffffff, 0x802c7416, &(0x7f0000000000)={0x6, 0x1000004, 0x7, 0x546, "22f006000000009ba340c3000000000000007600", 0x3, 0xf}) sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b10005040000040000", 0x9, 0x400, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r2 = socket(0x11, 0x3, 0x0) sysctl$net_inet6_icmp6(&(0x7f0000002ac0)={0x4, 0x18, 0x3a, 0xe}, 0x4, &(0x7f0000002b00)="52675f5d4beaad25e4a2d751ec7947536f6b", &(0x7f0000002b40)=0x12, &(0x7f0000002b80)="f9537845d7410d4a3a93ce34eb15dd1727e854796a9f2a227473fec589a23638f1572d68a2b2d58905b79c6f8da94db4465484e7a044c037ef2bfbe23e88e8e40e07ab14cc8413a920300c3fb0a6bd5de69f6d78b0fe370e11a6875cd7ee0d6617821f7402ab92870e8e57b301715b5542259eb14df9a98e61dff826ca7e4fc3879e363e0021abde69033117cbc5a8f3f8b792e4348c152166bc06c317b517b718a2321bcc3ec9d8e61a6cd1f15de970447fc319e62bbc500a250915ea9c8a4515fcf2cda41da2c59e730be94510cebb342f6d3d9de711df190ad5ad247c3aed7fb63f695f9cb6acfcf6602affc2b8425b950b3a3e59", 0xf6) sendto$unix(r2, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a378343712051eea040000000000", 0xb1, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f00000000c0)="b1000513b100009f050000002010000000000000cea10500fef96ecfc727d3357ae302b37b67ca1f2d61db7f4de57804be38164991f7c8cf5f882b297be1aa5b23edeb51e2f0ac3ebbc257699a1f139b672f4d335d223e7db3008b95665bc6fc211800b100e4ff0000fbb770c1f5a872c881ea772ec5890405b3b9c2668396f4cd125707000000002002fbfc0c2300008abfba0900000008e37f71a3f8343712051eeab71d89e000040381ecb664000000", 0xb1, 0x2, 0x0, 0x0) sysctl$kern(&(0x7f0000000040)={0x1, 0x3}, 0x2, &(0x7f0000001940), &(0x7f0000001a80), 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$BIOCIMMEDIATE(r3, 0x80044270, &(0x7f0000000080)) r4 = syz_open_pts() ioctl$TIOCDRAIN(r4, 0x2000745e) sysctl$net_inet6_ip6(&(0x7f0000000040)={0x4, 0x18, 0x29, 0x32}, 0x4, &(0x7f0000000100)="741ad85d", &(0x7f00000000c0)=0x4, 0x0, 0x0) 145.174948ms ago: executing program 4 (id=131): sysctl$hw(&(0x7f0000000000)={0x6, 0x1b}, 0x2, 0x0, 0x0, 0x0, 0x0) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x186) truncate(&(0x7f0000000000)='./file0\x00', 0x2fffe) r1 = socket(0x18, 0x2, 0x0) close(r1) msgctl$IPC_SET(0x0, 0x1, &(0x7f00000000c0)={{0x3, 0x0, 0x0, 0x0, 0x0, 0x1b4, 0x3}, 0x3fbb, 0x2, 0x0, 0x0, 0x0, 0x8, 0x100000000000}) r2 = socket(0x18, 0x1, 0x0) connect$unix(r2, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) connect$unix(r1, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) r3 = open(&(0x7f0000000040)='./file0\x00', 0x100, 0x0) r4 = socket(0x18, 0x2, 0x0) setsockopt(r4, 0x1000000000029, 0xb, &(0x7f00000000c0)='\x00\x00\x00\x00', 0x4) setsockopt(r4, 0x1000000029, 0xd, 0x0, 0x0) preadv(r3, &(0x7f0000000340)=[{&(0x7f0000000240)=""/229, 0xe5}, {&(0x7f0000000140)=""/139, 0xffffffbc}], 0x2, 0x0) sysctl$hw(&(0x7f0000000100)={0x6, 0xc}, 0x2, &(0x7f0000000380)="1c2cf70e655cad5f6f2c780c25bf9912caae2180f6f18adcbc337636de1b7135fb43a696ef7f455c39ad1492b084f80e842bef0ed0897b780b004cf86e57d01206586bba251187a5f4e9ded46dd37d29d0791e7440d4aa2c2e", &(0x7f0000000200)=0x59, &(0x7f0000000400)="7e155e85977558d0460e30ce34177b5a9c5758e2870c3f565a5e09ab4f1fbdae285910af5bf74ab4892d803770a5bd8ba0e23e2ca65ec460032ede1c1d30d9ff91db3cb015a35e615aa9e6cc5dd35f232d1f3eeba99e40ac7c4f78e2ac08aec064cd8ee062ce4df330e2a7bbbf949326debeec23ca3a9ecea37b0f40ac1e23108928cdd445f3d928f5867949ba88ff0430f07b4845023e322e93e4b085514789540789c3c1076723fa6e89f808958ff7446d26a987266a53cc544f07bb17889e3134cee836fc7abaad1dcee6e236d98aca5a28b59b8e079a947d", 0xda) mkdirat(r0, &(0x7f0000000080)='./file0\x00', 0x80) sysctl$hw(&(0x7f0000000000)={0x6, 0x1b}, 0x2, 0x0, 0x0, 0x0, 0x0) (async) open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x186) (async) truncate(&(0x7f0000000000)='./file0\x00', 0x2fffe) (async) socket(0x18, 0x2, 0x0) (async) close(r1) (async) msgctl$IPC_SET(0x0, 0x1, &(0x7f00000000c0)={{0x3, 0x0, 0x0, 0x0, 0x0, 0x1b4, 0x3}, 0x3fbb, 0x2, 0x0, 0x0, 0x0, 0x8, 0x100000000000}) (async) socket(0x18, 0x1, 0x0) (async) connect$unix(r2, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) (async) connect$unix(r1, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) (async) open(&(0x7f0000000040)='./file0\x00', 0x100, 0x0) (async) socket(0x18, 0x2, 0x0) (async) setsockopt(r4, 0x1000000000029, 0xb, &(0x7f00000000c0)='\x00\x00\x00\x00', 0x4) (async) setsockopt(r4, 0x1000000029, 0xd, 0x0, 0x0) (async) preadv(r3, &(0x7f0000000340)=[{&(0x7f0000000240)=""/229, 0xe5}, {&(0x7f0000000140)=""/139, 0xffffffbc}], 0x2, 0x0) (async) sysctl$hw(&(0x7f0000000100)={0x6, 0xc}, 0x2, &(0x7f0000000380)="1c2cf70e655cad5f6f2c780c25bf9912caae2180f6f18adcbc337636de1b7135fb43a696ef7f455c39ad1492b084f80e842bef0ed0897b780b004cf86e57d01206586bba251187a5f4e9ded46dd37d29d0791e7440d4aa2c2e", &(0x7f0000000200)=0x59, &(0x7f0000000400)="7e155e85977558d0460e30ce34177b5a9c5758e2870c3f565a5e09ab4f1fbdae285910af5bf74ab4892d803770a5bd8ba0e23e2ca65ec460032ede1c1d30d9ff91db3cb015a35e615aa9e6cc5dd35f232d1f3eeba99e40ac7c4f78e2ac08aec064cd8ee062ce4df330e2a7bbbf949326debeec23ca3a9ecea37b0f40ac1e23108928cdd445f3d928f5867949ba88ff0430f07b4845023e322e93e4b085514789540789c3c1076723fa6e89f808958ff7446d26a987266a53cc544f07bb17889e3134cee836fc7abaad1dcee6e236d98aca5a28b59b8e079a947d", 0xda) (async) mkdirat(r0, &(0x7f0000000080)='./file0\x00', 0x80) (async) 144.97118ms ago: executing program 5 (id=132): pipe(&(0x7f0000000640)={0xffffffffffffffff}) r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) lseek(r1, 0x1, 0x1) (async) lseek(r1, 0x1, 0x1) getdents(r1, &(0x7f0000001180)=""/4048, 0xfd0) writev(r0, &(0x7f0000000140)=[{0x0}], 0x1) 94.601784ms ago: executing program 5 (id=133): shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f00000000c0)={{0x3, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0xfffffff7, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3}) r0 = shmget$private(0x0, 0x2000, 0x513, &(0x7f00001e1000/0x2000)=nil) shmctl$IPC_SET(r0, 0x1, &(0x7f00000001c0)={{0xffffffff, 0x0, 0x0, 0x0, 0x140, 0x4}, 0x0, 0x8, 0x0, 0x0, 0x10000, 0x9, 0x80000000}) shmat(r0, &(0x7f000068c000/0x1000)=nil, 0x3000) shmat(r0, &(0x7f000068c000/0x2000)=nil, 0x3000) shmctl$SHM_LOCK(r0, 0x3) syz_emit_ethernet(0x46, &(0x7f00000000c0)={@broadcast, @empty, [], {@ipv4={0x800, {{0x9, 0x4, 0x0, 0x3f, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @multicast2, @broadcast, {[@rr={0x7, 0x3, 0x10}, @timestamp={0x44, 0xc, 0x5, 0x0, 0x2, [{[], 0xf}, {[], 0x307}]}]}}, @icmp=@timestamp={0xd, 0x0, 0x0, 0x0, 0x0, 0x2}}}}}) 93.834455ms ago: executing program 2 (id=134): syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffff06000000aa"]) (async) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="00001c00ac14"]) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000040)={0x2, &(0x7f00000000c0)=[{0x2, 0x2, 0x5, 0x2}, {0x5, 0x0, 0x0, 0x8}]}) (async) sysctl$kern(&(0x7f00000000c0)={0x1, 0x31}, 0x4, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0x37) (async) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) sysctl$kern(&(0x7f0000000140)={0x1, 0x3b}, 0x2, &(0x7f0000000180)="34029b882a581165d2483e82b0e1260145a16915bdcfab4ca6dd531dcc972a8b26bf44b5aefbf9afb6f3a317b77d472b", &(0x7f00000001c0)=0x30, &(0x7f0000000200)="d3be99f2216b56cf46785f9b2e69ffbb4edc79163c06230fe589138c63d6a745238f9caed1da267e741085a2f25c9e867bca99507b16cfa9c8c50cedd74538639cfea308d60dc9af718720c018fcec817b336faabcfd9f8fb08b4b49dc0cdf2442a79b7a0a51e2d182b716e02031b4a284c192e4f74a135974158e1ea9111a", 0x7f) (async) r0 = socket(0x2, 0x1, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) (async) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) ioctl$FIONREAD(r1, 0xc0106924, &(0x7f00000001c0)) (async) ioctl$FIONREAD(r2, 0x8080691a, &(0x7f0000000100)) (async) bind(r0, &(0x7f0000000000), 0x10) r3 = shmget$private(0x0, 0x3000, 0x386, &(0x7f0000ffa000/0x3000)=nil) shmctl$IPC_STAT(r3, 0x2, &(0x7f00000000c0)=""/4096) r4 = socket(0x2, 0x1, 0x0) setsockopt$sock_int(r4, 0xffff, 0x100, 0x0, 0x0) listen(r0, 0x0) (async) r5 = socket(0x2, 0x1, 0x0) connect$unix(r5, &(0x7f0000000000), 0x10) (async) select(0x40, &(0x7f0000000000)={0x400}, 0x0, 0x0, 0x0) (async) unveil(&(0x7f0000000300)='.\x00', &(0x7f0000000340)='r\x00') open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) 90.935032ms ago: executing program 4 (id=135): shmget$private(0x0, 0x3000, 0x100, &(0x7f0000ffd000/0x3000)=nil) setrlimit(0x8, &(0x7f0000000080)={0xe, 0x51}) r0 = syz_open_pts() r1 = socket(0x18, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) getsockname$inet(r1, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f00000000c0), 0x1c, 0x0}, 0x0) r2 = socket(0x800000018, 0x2, 0x0) bind$unix(r2, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendmsg$unix(r2, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x404) close(r0) r3 = socket$inet6(0x18, 0x1, 0x0) setsockopt(r3, 0x6, 0x8, 0x0, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6381) ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f0000000040)={0x0, 0xffff0937, 0xffefbff2, 0x0, "ffffffff9b752d022000", 0x401ff, 0x8}) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r4 = socket(0x2, 0x4001, 0x0) r5 = fcntl$dupfd(r4, 0x2, r4) close(r5) r6 = socket(0x2, 0x2, 0x0) connect$unix(r6, &(0x7f0000000000), 0x10) r7 = socket(0x2, 0x2, 0x0) setsockopt$sock_int(r7, 0xffff, 0x1023, &(0x7f0000000040), 0xe0) syz_open_pts() ioctl$FIOASYNC(r0, 0x80047469, &(0x7f0000000040)=0xfffffffc) readv(r0, &(0x7f0000000680)=[{&(0x7f0000000880)=""/241, 0xf1}], 0x1) 90.55454ms ago: executing program 5 (id=136): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x1}], 0x1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) r2 = socket(0x18, 0x2, 0x0) (async) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) fcntl$lock(r3, 0x9, &(0x7f0000000040)={0x2, 0x1, 0x7, 0x100000003}) (async) setsockopt(r2, 0x1000000000029, 0xb, &(0x7f0000003680)='\x00\x00\x00\x00', 0x4) (async) setsockopt(r2, 0x1000000029, 0xc, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) (async) semget(0x2, 0x4, 0x30) (async) write(r0, &(0x7f0000000100)="e8", 0xff25) select(0x40, &(0x7f0000000640)={0x5, 0x10000000, 0x0, 0x82, 0x0, 0x2}, &(0x7f00000024c0)={0x1fe, 0x10000, 0x0, 0x3000000, 0xffffffff, 0x0, 0x0, 0x4}, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000080)={0x0, 0x6}, 0x10, 0x60, 0x0) (async) r4 = socket$inet(0x2, 0x2, 0x0) getsockopt$sock_int(r4, 0xffff, 0x4, &(0x7f00000000c0), &(0x7f0000000000)=0x30) 88.409381ms ago: executing program 7 (id=137): r0 = socket(0x18, 0x2, 0x0) setsockopt(r0, 0x1000000029, 0x3f, &(0x7f0000000040)="6700d6e5", 0x4) socket$inet(0x18, 0x3, 0x102) r1 = dup(r0) sendto$inet(r1, 0x0, 0x0, 0x8, &(0x7f0000000000)={0x2, 0x0}, 0xc) ioctl$WSDISPLAYIO_GETEMULTYPE(r1, 0xc014575e, &(0x7f0000000080)={0x72f, './file0\x00'}) getitimer(0x1, 0xfffffffffffffffe) open(&(0x7f0000000840)='./file0\x00', 0x70e, 0xa0) ktrace(&(0x7f00000003c0)='./file0\x00', 0x0, 0x20, 0x0) sysctl$net_inet_ip(&(0x7f00000000c0)={0x4, 0x2, 0x0, 0x5}, 0x4, &(0x7f0000000100)="41320608", &(0x7f0000000040)=0x4, 0x0, 0x0) getitimer(0x0, &(0x7f0000000000)) 87.980667ms ago: executing program 2 (id=138): writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000300)='#', 0x1}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket(0x2, 0x2, 0x0) r1 = dup(r0) setsockopt$inet_opts(r1, 0x0, 0x23, &(0x7f0000000040)="fd0cc085", 0xfffffc94) sysctl$kern(&(0x7f00000000c0)={0x1, 0x4f}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x33, 0x0, 0x37) select(0x406f205456671cf9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x5000000}, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3000000, 0x0, 0x0, 0xffffffffffffffff}, 0x0) 2.063971ms ago: executing program 4 (id=139): r0 = syz_open_pts() syz_open_pts() (async) syz_open_pts() syz_open_pts() (async) syz_open_pts() mquery(&(0x7f0000ff7000/0x8000)=nil, 0x8000, 0x0, 0x0, r0, 0x3) (async) mquery(&(0x7f0000ff7000/0x8000)=nil, 0x8000, 0x0, 0x0, r0, 0x3) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x80, 0x0) ioctl$FIONREAD(r1, 0xc0106978, &(0x7f00000001c0)) ioctl$TIOCEXCL(r1, 0x2000740d) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) utimes(0x0, &(0x7f00000000c0)={{0x7, 0x3}, {0x4, 0x8}}) 1.698867ms ago: executing program 7 (id=140): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x72) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x0, &(0x7f0000000140)}) sysctl$net_inet6_icmp6(&(0x7f0000001bc0)={0x4, 0x18, 0x3a, 0x3}, 0x4, &(0x7f0000001c00)="196ffa76", &(0x7f0000001c80)=0x4, 0x0, 0x0) setrlimit(0x8, &(0x7f0000000040)={0xa, 0x50}) sysctl$hw(&(0x7f0000000040)={0x6, 0xb}, 0x3, &(0x7f0000000080)="bd0f192e", &(0x7f00000000c0)=0x74, 0x0, 0x0) sysctl$ddb(&(0x7f0000000380)={0x9, 0x8}, 0x2, &(0x7f00000001c0)="6b1cc124", &(0x7f00000000c0)=0x4, 0x0, 0x0) r0 = socket$inet(0x2, 0x4, 0x6) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r1, 0x0, 0x200000000000b, &(0x7f0000000080)='\x00', 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) setsockopt$inet_opts(r1, 0x0, 0x9, &(0x7f00000001c0)="a3f7c0cdcc2ad2c755444c8e", 0xc) getsockname(r0, &(0x7f0000000140)=@in, &(0x7f0000000180)=0xc) sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0x37) execve(&(0x7f0000000200)='./file1\x00', &(0x7f0000000400)=[&(0x7f0000000240)='\',&\\\x00', &(0x7f0000000280)='#^\x00', &(0x7f00000002c0)='\x00', &(0x7f0000000300)='\x00', 0xfffffffffffffffe, &(0x7f0000000340)='\xfe]a/),.%', &(0x7f00000003c0)='#\xe4{\x00'], &(0x7f0000000480)=[&(0x7f0000000440)='.))\x00']) mknod(&(0x7f00000000c0)='./file1/file1\x00', 0x1ffa, 0xd95e) 836.964µs ago: executing program 4 (id=141): r0 = msgget$private(0x0, 0x400) msgsnd(r0, 0xfffffffffffffffe, 0xfffffffffffffe74, 0x800) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f0000000200)=@file={0xd570d0466b6018f, './file0\x00'}, 0xa) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="28000000ffff000001"], 0x28}, 0x0) listen(r1, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) connect$unix(r3, &(0x7f0000000040)=@file={0xd1653077bafa0114, './file0\x00'}, 0xa) close(r1) socket(0x18, 0x4000, 0x6d) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) fchown(r6, 0x0, 0x0) select(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) mkdirat(r4, &(0x7f0000000240)='./file0\x00', 0x1d0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f00000000c0), &(0x7f0000000040)=0xc) sysctl$kern(&(0x7f00000000c0)={0x1, 0x4e}, 0x2, &(0x7f0000000100), &(0x7f0000000080), 0x0, 0x0) setsockopt(r4, 0x9, 0x5, &(0x7f0000000000)="c05880d43e0aed319772b379e8f11a06f5496df1c421ac51780ef05b7849", 0x1e) 637.634µs ago: executing program 7 (id=142): setrlimit(0x3, &(0x7f00000008c0)={0x100000, 0x5}) r0 = syz_open_pts() close(r0) (async) syz_open_pts() writev(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="48494f3d23b2e41c65d6dd0a1a", 0xd}], 0x13) 0s ago: executing program 4 (id=143): mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) mknod(&(0x7f0000000100)='./file0\x00', 0x100, 0x8) open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x9cab835cfdc52675, 0x11) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000400001803c1, 0xd0) pwritev(r0, &(0x7f0000000400)=[{0x0}], 0x1, 0x732e) mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) getsockopt(r1, 0x0, 0x14, 0xffffffffffffffff, &(0x7f0000000040)) r2 = socket(0x1, 0x3, 0x4) kqueue() sysctl$kern(&(0x7f0000000140)={0x1, 0x38}, 0x2, 0x0, 0x0, 0x0, 0x0) sendto$unix(r2, &(0x7f0000000000)="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", 0x1e2, 0x404, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.197' (ED25519) to the list of known hosts. panic: mtx 0xffffffff83917148: locking against myself Stopped at db_enter+0x25: addq $0x8,%rsp TID PID UID PRFLAGS PFLAGS CPU COMMAND 22079 78724 32767 0x10 0 1 syz-executor *196147 60273 32767 0x10 0 0 syz-executor db_enter() at db_enter+0x25 panic(ffffffff83332f45) at panic+0x1e5 mtx_enter_try(ffffffff83917148) at mtx_enter_try+0x1da mtx_enter(ffffffff83917148) at mtx_enter+0x62 uvm_pageclean(fffffd8007fca088) at uvm_pageclean+0x28e uvm_pagefree(fffffd8007fca088) at uvm_pagefree+0x26 uvn_get(fffffd805f3c6af8,0,ffff80003201ef98,ffff80003201ef7c,0,2,94321fd4066e8c91,2) at uvn_get+0x686 uvm_fault_lower_io(ffff80003201f1b0,ffff80003201f1e8,ffff80003201f030,ffff80003201f018) at uvm_fault_lower_io+0x2cd uvm_fault_lower(ffff80003201f1b0,ffff80003201f1e8,ffff80003201f130) at uvm_fault_lower+0x2bb uvm_fault(fffffd8069dbb5e8,200000000000,0,2) at uvm_fault+0x274 upageflttrap(ffff80003201f340,2000000000c0) at upageflttrap+0xa9 usertrap(ffff80003201f340) at usertrap+0x3c6 recall_trap() at recall_trap+0x8 end of kernel end trace frame: 0x782735ac84d0, count: 2 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{0}> ddb{0}> set $lines = 0 ddb{0}> set $maxwidth = 0 ddb{0}> show panic *cpu0: mtx 0xffffffff83917148: locking against myself ddb{0}> trace db_enter() at db_enter+0x25 panic(ffffffff83332f45) at panic+0x1e5 mtx_enter_try(ffffffff83917148) at mtx_enter_try+0x1da mtx_enter(ffffffff83917148) at mtx_enter+0x62 uvm_pageclean(fffffd8007fca088) at uvm_pageclean+0x28e uvm_pagefree(fffffd8007fca088) at uvm_pagefree+0x26 uvn_get(fffffd805f3c6af8,0,ffff80003201ef98,ffff80003201ef7c,0,2,94321fd4066e8c91,2) at uvn_get+0x686 uvm_fault_lower_io(ffff80003201f1b0,ffff80003201f1e8,ffff80003201f030,ffff80003201f018) at uvm_fault_lower_io+0x2cd uvm_fault_lower(ffff80003201f1b0,ffff80003201f1e8,ffff80003201f130) at uvm_fault_lower+0x2bb uvm_fault(fffffd8069dbb5e8,200000000000,0,2) at uvm_fault+0x274 upageflttrap(ffff80003201f340,2000000000c0) at upageflttrap+0xa9 usertrap(ffff80003201f340) at usertrap+0x3c6 recall_trap() at recall_trap+0x8 end of kernel end trace frame: 0x782735ac84d0, count: -13 ddb{0}> show registers rdi 0 rsi 0x1 rbp 0xffff80003201ecd0 rbx 0xffffffff8379bddf cpu_info_full_primary+0x2ddf rdx 0 rcx 0xffff80002a2f4a80 rax 0xffffffff8379aff0 cpu_info_full_primary+0x1ff0 r8 0x101010101010101 r9 0x8080808080808080 r10 0xfc74a8db0a884fd6 r11 0x8a1ea0e920fe3eed r12 0xffffffff8379bbe0 cpu_info_full_primary+0x2be0 r13 0 r14 0 r15 0x1 rip 0xffffffff8180d925 db_enter+0x25 cs 0x8 rflags 0x246 rsp 0xffff80003201ecc0 ss 0 db_enter+0x25: addq $0x8,%rsp ddb{0}> show proc PROC (syz-executor) tid=196147 pid=60273 tcnt=4 stat=onproc flags process=10 proc=0 runpri=50, usrpri=50, slppri=17, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff80002a2f4020,0xffff80002a2f5788 process=0xffff80003c488030 user=0xffff80003201a000, vmspace=0xfffffd8069dbb5e8 estcpu=36, cpticks=1, pctcpu=0.0, user=1, sys=0, intr=0 ddb{0}> ps PID TID PPID UID S FLAGS WAIT COMMAND 78724 22079 42718 32767 7 0x10 syz-executor 78724 416115 42718 32767 2 0x4000010 syz-executor 78724 239762 42718 32767 2 0x4000010 syz-executor *60273 196147 19089 32767 7 0x10 syz-executor 60273 334183 19089 32767 3 0x4000090 fsleep syz-executor 60273 252520 19089 32767 3 0x4000010 biowait syz-executor 60273 157654 19089 32767 3 0x4000090 fsleep syz-executor 37226 145139 99438 32767 3 0x90 nanoslp syz-executor 37226 368880 99438 32767 3 0x4000090 kqsel syz-executor 70359 129009 4101 32767 2 0x10 syz-executor 70359 378053 4101 32767 3 0x4000090 msgwait syz-executor 70359 215102 4101 32767 3 0x4000090 fsleep syz-executor 94509 313798 50793 32767 3 0x90 nanoslp syz-executor 94509 4658 50793 32767 3 0x4000090 piperd syz-executor 94509 181579 50793 32767 3 0x4000090 fsleep syz-executor 66888 92441 92242 32767 3 0x90 nanoslp syz-executor 66888 443933 92242 32767 3 0x4000090 ttyout syz-executor 66888 22142 92242 32767 3 0x4000090 fsleep syz-executor 24008 245042 0 0 3 0x14200 bored sosplice 50793 287581 77444 32767 3 0x90 nanoslp syz-executor 80370 244090 3236 32767 3 0x90 nanoslp syz-executor 19089 64583 61755 32767 3 0x90 nanoslp syz-executor 4101 437955 5826 32767 3 0x90 nanoslp syz-executor 42718 220533 39065 32767 3 0x90 nanoslp syz-executor 99438 112693 18761 32767 3 0x90 nanoslp syz-executor 92242 294499 5251 32767 3 0x90 nanoslp syz-executor 8170 180183 52763 32767 3 0x90 nanoslp syz-executor 3236 469611 42505 0 3 0x82 wait syz-executor 77444 139172 42505 0 3 0x82 wait syz-executor 61755 58656 42505 0 3 0x82 wait syz-executor 39065 461909 42505 0 3 0x82 wait syz-executor 5826 468880 42505 0 3 0x82 wait syz-executor 18761 322876 42505 0 3 0x82 wait syz-executor 5251 35328 42505 0 3 0x82 wait syz-executor 52763 230363 42505 0 3 0x82 wait syz-executor 42505 285624 88544 0 3 0x82 kqread syz-executor 88544 206987 78694 0 3 0x10008a sigsusp ksh 78694 153236 46390 0 3 0x98 kqread sshd-session 46390 247409 70658 0 3 0x92 kqread sshd-session 27547 391146 1 0 3 0x100083 ttyin getty 70658 95016 1 0 3 0x88 kqread sshd 26197 485424 117 73 3 0x1100090 kqread syslogd 117 77223 1 0 3 0x100082 sbwait syslogd 33456 365572 1 0 3 0x100080 kqread resolvd 89053 116019 22025 77 3 0x100092 kqread dhcpleased 83397 499687 22025 77 3 0x100092 kqread dhcpleased 22025 512860 1 0 3 0x80 kqread dhcpleased 79625 73425 0 0 3 0x14200 bored smr 30137 28076 0 0 2 0x14200 zerothread 75540 152173 0 0 3 0x14200 aiodoned aiodoned 44397 175087 0 0 3 0x14200 syncer update 39194 130577 0 0 3 0x14200 cleaner cleaner 75398 31699 0 0 3 0x14200 reaper reaper 42350 515893 0 0 3 0x14200 pgdaemon pagedaemon 17740 88263 0 0 3 0x14200 bored viomb 12209 468474 0 0 3 0x40014200 acpi0 acpi0 63603 141347 0 0 3 0x40014200 idle1 53640 430807 0 0 3 0x14200 bored softnet7 98178 501977 0 0 3 0x14200 bored softnet6 30025 246278 0 0 3 0x14200 bored softnet5 81640 523436 0 0 3 0x14200 bored softnet4 70017 346226 0 0 3 0x14200 bored softnet3 94397 316669 0 0 3 0x14200 bored softnet2 30512 48881 0 0 3 0x14200 bored softnet1 65202 180935 0 0 3 0x14200 bored softnet0 11190 464964 0 0 3 0x14200 bored systqmp 48085 492801 0 0 3 0x14200 bored systq 5538 4581 0 0 3 0x14200 tmoslp softclockmp 58688 212352 0 0 3 0x40014200 tmoslp softclock 89882 428936 0 0 3 0x40014200 idle0 1 287063 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb{0}> show all locks CPU 0: exclusive mutex &uvm.pageqlock r = 0 (0xffffffff83917158) #0 witness_lock+0x5f1 #1 mtx_enter_try+0x1ad #2 mtx_enter+0x62 #3 uvn_get+0x674 #4 uvm_fault_lower_io+0x2cd #5 uvm_fault_lower+0x2bb #6 uvm_fault+0x274 #7 upageflttrap+0xa9 #8 usertrap+0x3c6 #9 recall_trap+0x8 Process 60273 (syz-executor) thread 0xffff80002a2f4a80 (196147) exclusive rwlock uobjlk r = 0 (0xfffffd805f698390) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 uvn_io+0x667 #3 uvn_get+0x31d #4 uvm_fault_lower_io+0x2cd #5 uvm_fault_lower+0x2bb #6 uvm_fault+0x274 #7 upageflttrap+0xa9 #8 usertrap+0x3c6 #9 recall_trap+0x8 exclusive mutex &uvm.pageqlock r = 0 (0xffffffff83917158) #0 witness_lock+0x5f1 #1 mtx_enter_try+0x1ad #2 mtx_enter+0x62 #3 uvn_get+0x674 #4 uvm_fault_lower_io+0x2cd #5 uvm_fault_lower+0x2bb #6 uvm_fault+0x274 #7 upageflttrap+0xa9 #8 usertrap+0x3c6 #9 recall_trap+0x8 Process 60273 (syz-executor) thread 0xffff80002a2f4d18 (252520) exclusive rrwlock inode r = 0 (0xfffffd805fab5450) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 rrw_enter+0xc6 #3 VOP_LOCK+0xa3 #4 vn_lock+0xa4 #5 sys_ftruncate+0x1c1 #6 syscall+0xb17 #7 Xsyscall+0x128 ddb{0}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 10195 10956K 10968K 166960K 11273 0 pcb 17 12K 12K 166960K 17 0 rtable 207 5K 6K 166960K 271 0 pf 31 16K 16K 166960K 31 0 ifaddr 42 7K 7K 166960K 44 0 ifgroup 50 2K 2K 166960K 50 0 sysctl 3 1K 9K 166960K 8 0 counters 68 36K 36K 166960K 68 0 ioctlops 0 0K 2K 166960K 31 0 iov 0 0K 12K 166960K 12 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1334 84K 84K 166960K 1372 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 9K 166960K 9 0 VM map 2 1K 1K 166960K 2 0 sem 12 0K 0K 166960K 17 0 dirhash 12 2K 2K 166960K 15 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 26 97K 121K 166960K 285 0 sigio 1 0K 0K 166960K 3 0 proc 58 99K 179K 166960K 501 0 subproc 72 4K 4K 166960K 72 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 30 0 in_multi 99 7K 7K 166960K 108 0 ether_multi 1 0K 0K 166960K 4 0 mrt 1 0K 0K 166960K 1 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 73 334K 334K 166960K 73 0 exec 0 0K 1K 166960K 370 0 fusefs mount 1 32K 32K 166960K 1 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 260 160K 173K 166960K 4181 0 UVM aobj 11 2K 3K 166960K 12 0 pinsyscall 47 94K 109K 166960K 1322 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 0K 166960K 10 0 NDP 11 0K 2K 166960K 27 0 temp 47 8637K 8701K 166960K 4380 0 kqueue 14 22K 24K 166960K 55 0 SYN cache 2 16K 16K 166960K 2 0 ddb{0}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 26 0 0 1 0 1 1 0 8 0 rtpcb 120 118 0 114 3 0 3 3 0 8 2 rtentry 176 96 0 1 5 0 5 5 0 8 0 unpcb 144 128 0 113 1 0 1 1 0 8 0 syncache 336 6 0 6 1 0 1 1 0 8 1 tcpcb 736 105 0 101 4 0 4 4 0 8 3 arp 128 10 0 0 1 0 1 1 0 8 0 ipq 40 1 0 1 1 0 1 1 0 8 1 ipqe 40 2 0 2 1 0 1 1 0 8 1 inpcb 328 246 0 238 4 0 4 4 0 8 2 ip6q 72 2 0 0 1 0 1 1 0 8 0 ip6af 40 2 0 0 1 0 1 1 0 8 0 nd6 144 17 0 0 1 0 1 1 0 8 0 kcovpl 48 8 0 0 1 0 1 1 0 8 0 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 439 0 0 28 0 28 28 0 8 0 art_table 40 440 0 0 5 0 5 5 0 8 0 art_node 32 96 0 11 1 0 1 1 0 8 0 sysvmsgpl 40 3 0 2 1 0 1 1 0 8 0 semapl 112 14 0 4 1 0 1 1 0 8 0 shmpl 112 9 0 1 1 0 1 1 0 8 0 dirhash 1024 19 0 2 3 0 3 3 0 8 0 dino2pl 256 1776 0 272 95 0 95 95 0 8 0 ffsino 296 1776 0 272 117 0 117 117 0 8 0 nchpl 144 2176 0 497 63 0 63 63 0 8 0 uvmvnodes 80 1857 0 0 38 0 38 38 0 8 0 vnodes 216 1857 0 0 104 0 104 104 0 8 0 namei 1024 6566 0 6566 2 0 2 2 0 8 2 percpumem 16 49 0 0 1 0 1 1 0 8 0 kstatmem 264 24 0 0 2 0 2 2 0 8 0 scxspl 216 7426 0 7424 3 2 1 2 1 8 0 plimitpl 152 116 0 92 2 0 2 2 0 8 1 sigapl 424 572 0 511 8 0 8 8 0 8 0 knotepl 120 356 0 0 11 0 11 11 0 8 0 kqueuepl 224 191 0 180 5 0 5 5 0 8 4 pipepl 344 114 0 86 3 0 3 3 0 8 0 fdescpl 528 549 0 511 3 0 3 3 0 8 0 filepl 160 2368 0 2149 15 0 15 15 0 8 5 lockfpl 104 60 0 57 1 0 1 1 0 8 0 lockfspl 48 22 0 19 1 0 1 1 0 8 0 sessionpl 144 24 0 8 1 0 1 1 0 8 0 pgrppl 48 35 0 11 1 0 1 1 0 8 0 ucredpl 104 307 0 288 1 0 1 1 0 8 0 zombiepl 144 513 0 511 1 0 1 1 0 8 0 processpl 1248 572 0 511 7 1 6 6 0 8 0 procpl 664 838 0 765 7 0 7 7 0 8 0 sosppl 168 3 0 3 1 0 1 1 0 8 1 sockpl 752 496 0 469 11 0 11 11 0 8 7 mcl64k 65536 2 0 0 1 0 1 1 0 8 0 mcl16k 16384 1 0 0 1 0 1 1 0 8 0 mcl12k 12288 1 0 0 1 0 1 1 0 8 0 mcl8k 8192 3 0 0 1 0 1 1 0 8 0 mcl4k 4096 104 0 0 13 0 13 13 0 8 0 mcl2k2 2112 2 0 0 1 0 1 1 0 8 0 mcl2k 2048 23 0 0 3 0 3 3 0 8 0 mtagpl 96 1 0 0 1 0 1 1 0 8 0 mbufpl 256 362 0 0 23 0 23 23 0 8 0 bufpl 280 2996 0 112 206 0 206 206 0 8 0 anonpl 32 6030 0 0 49 0 49 49 0 246 0 amapchunkpl 152 12537 0 11956 32 4 28 28 0 158 4 amappl16 200 2578 0 2550 14 3 11 14 0 8 8 amappl15 192 6 0 6 1 1 0 1 0 8 0 amappl14 184 194 0 184 1 0 1 1 0 8 0 amappl13 176 8 0 8 1 1 0 1 0 8 0 amappl12 168 1162 0 1124 2 0 2 2 0 8 0 amappl11 160 43 0 33 1 0 1 1 0 8 0 amappl10 152 3 0 3 1 1 0 1 0 8 0 amappl9 144 247 0 246 1 0 1 1 0 8 0 amappl8 136 24 0 22 1 0 1 1 0 8 0 amappl7 128 99 0 89 1 0 1 1 0 8 0 amappl6 120 176 0 173 1 0 1 1 0 8 0 amappl5 112 126 0 120 1 0 1 1 0 8 0 amappl4 104 361 0 345 1 0 1 1 0 8 0 amappl3 96 2145 0 2008 4 0 4 4 0 8 0 amappl2 88 628 0 575 2 0 2 2 0 8 0 amappl1 80 9223 0 8646 14 0 14 14 0 8 0 amappl 88 3503 0 3308 5 0 5 5 0 92 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 11 0 1 1 0 1 1 0 8 0 uaddrrnd 24 549 0 511 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 549 0 511 1 0 1 1 0 8 0 vmmpekpl 168 6200 0 6162 3 0 3 3 0 8 0 vmmpepl 168 42370 0 40214 101 0 101 101 0 357 3 vmsppl 488 548 0 511 7 1 6 6 0 8 0 rwobjpl 80 16558 0 13834 57 0 57 57 0 8 0 pdppl 4096 1106 0 1022 112 26 86 96 0 8 2 pvpl 32 12600 0 0 102 0 102 102 0 265 0 pmappl 256 548 0 511 4 1 3 3 0 8 0 extentpl 40 45 0 27 1 0 1 1 0 8 0 phpool 112 295 0 29 8 0 8 8 0 8 0 ddb{0}> machine ddbcpu 0 Invalid cpu 0 ddb{0}> trace db_enter() at db_enter+0x25 panic(ffffffff83332f45) at panic+0x1e5 mtx_enter_try(ffffffff83917148) at mtx_enter_try+0x1da mtx_enter(ffffffff83917148) at mtx_enter+0x62 uvm_pageclean(fffffd8007fca088) at uvm_pageclean+0x28e uvm_pagefree(fffffd8007fca088) at uvm_pagefree+0x26 uvn_get(fffffd805f3c6af8,0,ffff80003201ef98,ffff80003201ef7c,0,2,94321fd4066e8c91,2) at uvn_get+0x686 uvm_fault_lower_io(ffff80003201f1b0,ffff80003201f1e8,ffff80003201f030,ffff80003201f018) at uvm_fault_lower_io+0x2cd uvm_fault_lower(ffff80003201f1b0,ffff80003201f1e8,ffff80003201f130) at uvm_fault_lower+0x2bb uvm_fault(fffffd8069dbb5e8,200000000000,0,2) at uvm_fault+0x274 upageflttrap(ffff80003201f340,2000000000c0) at upageflttrap+0xa9 usertrap(ffff80003201f340) at usertrap+0x3c6 recall_trap() at recall_trap+0x8 end of kernel end trace frame: 0x782735ac84d0, count: -13 ddb{0}> machine ddbcpu 1 Stopped at x86_ipi_db+0x27: addq $0x8,%rsp x86_ipi_db(ffff8000299fdff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 end of kernel end trace frame: 0x73ea3adab570, count: 12 ddb{1}> trace x86_ipi_db(ffff8000299fdff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 end of kernel end trace frame: 0x73ea3adab570, count: -3