last executing test programs: 12.19081621s ago: executing program 1 (id=2): sendmsg$unix(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f00000000c0), 0x1c, 0x0}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x18, 0x1, 0x0) close(r0) r1 = socket(0x18, 0x2, 0x0) setsockopt(r0, 0x1000000029, 0x1, &(0x7f0000000140)="ff00cbff13b9ca", 0x7) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) sendmsg$unix(r1, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x400) 11.915313472s ago: executing program 1 (id=9): open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x1) execve(&(0x7f0000001700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) chmod(&(0x7f0000000700)='.\x00', 0x49) setrlimit(0x8, &(0x7f0000000980)={0xb, 0x54}) r0 = syz_open_pts() close(r0) r1 = syz_open_pts() writev(r0, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000000)={0x7ffffffe, 0xf, 0x8001, 0x70d0b42b, "88b4e4d6a24bfdfffffffff4ff10235300", 0x1}) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000040)="9977b8bd688706", 0x7}, {&(0x7f00000000c0)="c89259cae81280435751c2bf564297107e7631c13c1e5850a26c7a453d5e1b226d65611212dc4ed0a7ef7cfe2ae84a46241ca50e64fac94863129d1ede029b6b598fad7da0f90f11f6d0a2cc1f10dd8550860a1c6105bd36a406d9bac439b063659f720b2a52db172896322ab4f96aa8a107874868107c768a29b30c436446dc735043d6e09e6a6be1ea59b0bf448dc8f7219d05d95433eaccb3f41fe7c99e0b072c8b1e9f526e23711704936250c4a884987b880c77bfcd4ab76537b497cb16ea9a043899fd06530c", 0xc9}, {&(0x7f0000000300)="1b479fe4037c7c9f3b54a68c1ab6ffa8c9cbafefbd1032be195cd2186ac852", 0x1f}], 0x3) read(r1, &(0x7f0000000200)=""/255, 0xff) unveil(&(0x7f0000000c40)='./file0\x00', &(0x7f0000000d40)='x\x00') 11.377221304s ago: executing program 1 (id=15): r0 = open(&(0x7f0000000080)='./file0\x00', 0x18289, 0x138) setrlimit(0x8, &(0x7f00000000c0)={0x45, 0x56}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = syz_open_pts() close(r1) syz_open_pts() ioctl$FIOASYNC(r1, 0x80047466, &(0x7f0000000200)=0x5) pwrite(r0, &(0x7f0000000100)='\x00\x00', 0x2, 0x20000000008001) ioctl$WSKBDIO_SETDEFAULTKEYREPEAT(r0, 0x800c5709, &(0x7f00000000c0)={0x8, 0x4, 0x5}) r2 = syz_open_pts() fcntl$lock(r2, 0x9, &(0x7f0000000000)={0x3, 0x0, 0x0, 0x1000300000080}) flock(r2, 0x1) sysctl$net_inet_udp(&(0x7f0000000080)={0x4, 0x2, 0x11, 0x5}, 0x4, 0x0, 0x0, 0x0, 0x0) flock(r2, 0x3) fcntl$lock(r2, 0x8, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x100000001}) syz_open_pts() syz_open_pts() 11.156990845s ago: executing program 1 (id=22): r0 = socket$inet(0x2, 0x2, 0x0) (async) r1 = open(&(0x7f0000000180)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf79e5) writev(r1, &(0x7f0000000100)=[{&(0x7f0000001200)='#', 0x1}, {&(0x7f0000000040)="2187fe", 0x1}], 0x2) (async) r2 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7959) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000000)="7f454c4602df7a264ee4975f55011a49b70cb710aa950000000a52e92a24d18fcf8fd1f9794ffa08bb11bafcdc24ff4c5d0b5c7b1ad1a2ec434c500191", 0x3d}, {&(0x7f0000000340)="1551e6", 0x3}], 0x2) (async) write(r1, &(0x7f00000003c0)='\t ', 0x2) (async) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) (async) setsockopt$inet_opts(r0, 0x0, 0x200000000000b, &(0x7f0000000080)='\x00', 0x1) (async) r3 = open(&(0x7f0000000040)='./file0\x00', 0x2, 0x0) (async) r4 = getpgid(0x0) fcntl$setown(r3, 0x6, r4) fcntl$setown(r3, 0x6, 0x0) (async) mquery(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r3, 0x7) (async) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000000)="ea00e8b56c5ab247", 0x8) 11.156511724s ago: executing program 32 (id=22): r0 = socket$inet(0x2, 0x2, 0x0) (async) r1 = open(&(0x7f0000000180)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf79e5) writev(r1, &(0x7f0000000100)=[{&(0x7f0000001200)='#', 0x1}, {&(0x7f0000000040)="2187fe", 0x1}], 0x2) (async) r2 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7959) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000000)="7f454c4602df7a264ee4975f55011a49b70cb710aa950000000a52e92a24d18fcf8fd1f9794ffa08bb11bafcdc24ff4c5d0b5c7b1ad1a2ec434c500191", 0x3d}, {&(0x7f0000000340)="1551e6", 0x3}], 0x2) (async) write(r1, &(0x7f00000003c0)='\t ', 0x2) (async) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) (async) setsockopt$inet_opts(r0, 0x0, 0x200000000000b, &(0x7f0000000080)='\x00', 0x1) (async) r3 = open(&(0x7f0000000040)='./file0\x00', 0x2, 0x0) (async) r4 = getpgid(0x0) fcntl$setown(r3, 0x6, r4) fcntl$setown(r3, 0x6, 0x0) (async) mquery(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r3, 0x7) (async) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000000)="ea00e8b56c5ab247", 0x8) 11.115267552s ago: executing program 8 (id=23): syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt(r0, 0x0, 0x5, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = socket(0x2, 0x1, 0x0) connect$unix(r1, &(0x7f0000000000), 0x10) write(r1, &(0x7f0000000080)="d99aca906c", 0xfd23) syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[@ANYBLOB="69e1629b6174391e7dd7a2d786dd60b6000000302c03cb697a653e336f000000500000000000ff02000000000000000000000000000111"]) 10.984474688s ago: executing program 8 (id=23): syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt(r0, 0x0, 0x5, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = socket(0x2, 0x1, 0x0) connect$unix(r1, &(0x7f0000000000), 0x10) write(r1, &(0x7f0000000080)="d99aca906c", 0xfd23) syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[@ANYBLOB="69e1629b6174391e7dd7a2d786dd60b6000000302c03cb697a653e336f000000500000000000ff02000000000000000000000000000111"]) 8.014677021s ago: executing program 8 (id=23): syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt(r0, 0x0, 0x5, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = socket(0x2, 0x1, 0x0) connect$unix(r1, &(0x7f0000000000), 0x10) write(r1, &(0x7f0000000080)="d99aca906c", 0xfd23) syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[@ANYBLOB="69e1629b6174391e7dd7a2d786dd60b6000000302c03cb697a653e336f000000500000000000ff02000000000000000000000000000111"]) 6.690030336s ago: executing program 8 (id=23): syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt(r0, 0x0, 0x5, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = socket(0x2, 0x1, 0x0) connect$unix(r1, &(0x7f0000000000), 0x10) write(r1, &(0x7f0000000080)="d99aca906c", 0xfd23) syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[@ANYBLOB="69e1629b6174391e7dd7a2d786dd60b6000000302c03cb697a653e336f000000500000000000ff02000000000000000000000000000111"]) 6.071834402s ago: executing program 3 (id=65): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt(r0, 0x0, 0x5, 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r1, 0x1) ioctl$KDDISABIO(0xffffffffffffffff, 0x20004b3d) r3 = dup(r2) recvmmsg(r3, &(0x7f0000000440)={&(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{0x0}, {0x0}, {&(0x7f0000000240)=""/90, 0x5a}], 0x3, 0x0}, 0x1}, 0x10, 0x0, 0x0) dup2(r1, r3) ioctl$KDSETLED(r3, 0x20004b42, &(0x7f0000000000)=0x4) 5.800398015s ago: executing program 8 (id=23): syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt(r0, 0x0, 0x5, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = socket(0x2, 0x1, 0x0) connect$unix(r1, &(0x7f0000000000), 0x10) write(r1, &(0x7f0000000080)="d99aca906c", 0xfd23) syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[@ANYBLOB="69e1629b6174391e7dd7a2d786dd60b6000000302c03cb697a653e336f000000500000000000ff02000000000000000000000000000111"]) 5.154640558s ago: executing program 3 (id=73): setrlimit(0x8, &(0x7f0000000980)={0x42, 0x62}) r0 = syz_open_pts() close(r0) syz_open_pts() ioctl$FIOASYNC(r0, 0x80047466, &(0x7f0000000200)=0x5) r1 = socket(0x18, 0x1, 0x0) setsockopt(r1, 0x1000000029, 0x37, &(0x7f0000000040)="03000000", 0x4) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0xfe, 0x100000000000000, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) connect$unix(r1, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) unveil(0x0, &(0x7f0000000100)='W\x00') setrlimit(0x8, &(0x7f0000000040)={0x44, 0x65}) r2 = syz_open_pts() close(r2) r3 = syz_open_pts() ioctl$TIOCSETA(r3, 0x802c7414, &(0x7f00000000c0)={0x401, 0xcad0, 0x9, 0x160350b, "cc14ee0d2100caa26a364fa8a325850d1ec100", 0x200001, 0x6}) writev(r2, &(0x7f0000000240)=[{&(0x7f0000000080)=')', 0x1}], 0x1) ioctl$TIOCCBRK(r0, 0x2000747a) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) select(0x40, &(0x7f0000000140)={0xc8, 0x6, 0x0, 0xad, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x7ff00003, 0x4}, 0x0, &(0x7f00000000c0)={0x1ff, 0x1, 0x0, 0x3, 0x0, 0x2, 0xfffffffffffffffc, 0x1}, 0x0) accept$unix(0xffffffffffffffff, 0x0, 0x0) select(0x40, &(0x7f0000000000)={0xfffffffffffffffd, 0x2, 0x0, 0x0, 0x0, 0xc8, 0x2}, 0x0, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffff06000000"]) syz_emit_ethernet(0x2a, &(0x7f00000001c0)=ANY=[@ANYRESHEX]) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) ioctl$TIOCSETA(r4, 0x802c7414, &(0x7f0000000080)={0x0, 0x4df, 0x9, 0x9, "cc991f7a266af811cb56641dc4e403ec91ecfa88", 0x6, 0xfe1}) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0e99db6de761f86, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) connect$unix(0xffffffffffffffff, &(0x7f0000000000), 0x10) 4.905541335s ago: executing program 6 (id=80): writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000200)="673bb5b8cc0c16ed08f1b8d24e2217f981aa6a78ef1d357e382526b1573271aeabc1b798e5806ce228c9299f7504ece5be73983b5ee545a916d1cba8ee64", 0x3e}], 0x1) sysctl$kern(&(0x7f0000000140)={0x1, 0x29}, 0x2, 0x0, 0x0, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000000)=@abs={0x1, 0x0, 0x1}, 0x8, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="10"], 0x20}, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x18, 0x1, 0x0) close(r0) socket(0x18, 0x2, 0x0) sendmsg$unix(r0, &(0x7f0000000040)={0x0, 0x26, 0x0, 0x0, 0x0, 0x1f, 0x2}, 0x806) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x100, 0x2) r1 = open(&(0x7f0000000100)='./file0\x00', 0x70e, 0x88) readv(r1, &(0x7f0000000640)=[{&(0x7f0000000380)=""/163, 0xa3}], 0x1) utimes(0x0, &(0x7f00000011c0)={{0x9, 0x2}, {0x401, 0x8000000000000000}}) 4.04024223s ago: executing program 3 (id=83): sysctl$net_inet6_ip6(&(0x7f0000000240)={0x4, 0x18, 0x29, 0x2b}, 0x4, &(0x7f0000000140)="9a6fc62f", &(0x7f0000000000)=0x4, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @random="7df55d1972ab", [], {@ipv6={0x86dd, {0x0, 0x6, "db8344", 0x8, 0x11, 0x0, @rand_addr="fe000000fd0000ff80d1440100435300", @local={0xfe, 0x80, '\x00', 0x0}, {[], @udp={{0x0, 0x0, 0x8}}}}}}}) 4.038114348s ago: executing program 6 (id=86): sysctl$vm_swapencrypt(&(0x7f0000000040)={0x6, 0x1b, 0x2}, 0x3, 0x0, 0x0, 0x0, 0x0) setrlimit(0x8, &(0x7f0000000980)={0x43, 0x62}) r0 = syz_open_pts() close(r0) r1 = syz_open_pts() ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f00000003c0)={0x6, 0xfffffffb, 0x10040ae9, 0xff7ffff8, "ff0f2000001100000000e2ffffffff00000200", 0x7, 0x8}) writev(r0, &(0x7f0000000480)=[{&(0x7f00000001c0)="ffc05f8031236d97ffaa55dc0d6f58863d6dc81afa1976415a402b5f69b848c70a", 0x21}], 0x1) readv(r1, &(0x7f0000000140)=[{&(0x7f0000000000)=""/201, 0xc9}], 0x1) sysctl$kern(&(0x7f0000000100)={0x1, 0x3f}, 0x2, &(0x7f0000000040), 0x0, 0x0, 0x0) 4.034112749s ago: executing program 7 (id=87): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0x8, 0x8, 0x7, 0x2, 0x8, 0x3, 0x40, 0x10, [{0x5, 0x3, 0x7fff, 0x80000201}, {0x4, 0x8, 0x6, 0xfff}, {0x1, 0xfffffffe, 0x6, 0x2}, {0x2, 0xdf, 0xf, 0x40}, {0x2, 0x7, 0xf11, 0x7}, {0x800, 0x0, 0x80cf}, {0x1, 0x5, 0x85, 0x2}, {0x0, 0x1, 0xfffffff8, 0xfbffe2e9}, {0x8, 0xffe, 0x6, 0x17fff}, {0x3, 0x0, 0x5, 0x7}, {0x8, 0x8000000, 0x8, 0x40000007}, {0x4, 0xc7cb, 0x800000}, {0x401, 0x10a, 0x9, 0x9}, {0x200003, 0xee2, 0x4, 0x6f5fc48f}, {0x81, 0x101, 0x3, 0x7fff}, {0xffffffff, 0x8003, 0x6, 0x69}]}) r1 = socket(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0xffff, 0x4, &(0x7f0000000300)=0x20001, 0x2) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) poll(&(0x7f0000000000), 0x35, 0x0) r2 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7959) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000000)="7f454c4602df7a264ee4975f55011a49b70cb710aa950000000a52e92a24d18fcf8fd1f9794ffa08bb11bafcdc24ff4c5d0b5c7b1ad1a2ec434c500191", 0x3d}, {&(0x7f0000000340)="1551e6", 0x3}], 0x2) mkdirat(r2, &(0x7f0000000180)='./file0\x00', 0x0) 3.799464021s ago: executing program 4 (id=89): madvise(&(0x7f000000d000/0x4000)=nil, 0x4000, 0x7b70f11079d0e69e) (async) r0 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0xd6) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000280)='#!', 0x10}, {&(0x7f0000000000)="8d6bb85551ec8430877ae32fe9bbe42cc8f2147a3eba8e1969f0435119cf4c071c8aee7ef2921be5d7d4796c5566c95989acb3d185587234186e96b8fde9ffac51de05a87b8b893e2abd154dd886eafbe03881d25b7b13b4c32227fc9e5a86a06f59f701322b3a109a13436e486b0a", 0x6f}], 0x2) (async) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000400001803c1, 0x0) pwritev(r1, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) (async) r2 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r2, 0xc0286988, &(0x7f00000001c0)) fcntl$dupfd(r0, 0xa, r2) 3.799099874s ago: executing program 6 (id=90): r0 = syz_open_pts() ioctl$TIOCOUTQ(r0, 0x40047473, &(0x7f0000000000)=0x48) syz_emit_ethernet(0x3e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd6000000000082b00fe8000000000000000000000000000bb000000000000000000000001"]) 3.795626083s ago: executing program 7 (id=91): mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) munmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000) r0 = syz_open_pts() syz_open_pts() ioctl$TIOCSTAT(r0, 0x20007465, 0x0) shmget$private(0x0, 0x2000, 0x2, &(0x7f0000ffe000/0x2000)=nil) 2.887720485s ago: executing program 0 (id=92): syz_emit_ethernet(0x19c, &(0x7f0000000280)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6099cea601662c03cb697a653e336f000000500000000000ff0200000000000000000000000000016200002e"]) r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) fcntl$lock(r0, 0x9, &(0x7f0000000140)={0x0, 0x0, 0xdffffffffffffff6, 0x1000100010008}) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r1 = socket(0x18, 0x2, 0x0) ioctl$FIONREAD(r1, 0xc1206949, &(0x7f00000001c0)) syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[@ANYBLOB="69e1629b6174391e7dd7a2d786dd60b6000000302c03cb697a653e336f000000500000000000ff02000000000000000000000000000102000003"]) 2.886936577s ago: executing program 3 (id=93): socket(0x1, 0x2, 0x0) (async) r0 = socket(0x18, 0x2, 0x0) setsockopt(r0, 0x1000000000029, 0x2b, &(0x7f0000003680)='\x00\x00\x00\x00', 0x4) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) (async) select(0x40, &(0x7f0000000080)={0x77ffffffffffffff, 0x2, 0x59, 0x2, 0x6, 0x7f, 0x7ff, 0x7}, 0x0, 0x0, 0x0) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) (async) poll(&(0x7f00000000c0), 0x0, 0x9) r2 = socket$inet(0x2, 0x5, 0x2) write(r2, &(0x7f0000000040)="d0e9d512a49c1931", 0x8) (async) getsockname$inet(r2, 0x0, &(0x7f00000004c0)) (async) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) setsockopt$inet_opts(r3, 0x0, 0x0, &(0x7f0000000100)="4577cfd7f86dd37db573", 0xa) 2.886625524s ago: executing program 4 (id=94): sendmsg$unix(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f0000000000)=@abs={0x0, 0x0, 0x2}, 0xa, 0x0, 0xffffffffffffff14, &(0x7f0000000140)=[@rights={0x10}], 0x10, 0x1}, 0x400) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket(0x2, 0x4001, 0x0) r1 = fcntl$dupfd(r0, 0x2, r0) close(r1) r2 = socket(0x2, 0x1, 0x0) connect$unix(r2, &(0x7f0000000000), 0x10) setsockopt$sock_int(r1, 0xffff, 0x1023, &(0x7f0000000080), 0x4) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) shutdown(r1, 0x1) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x4, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x5, 0x2a2, 0xffffffffffffffff, 0x0, 0x8000000000000003, 0x80000000000000c, 0x100000001, 0x40}) connect$unix(r1, &(0x7f0000000040)=@abs={0x0, 0x0, 0x0}, 0x8) sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xff0a, 0x0, 0x37) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r3 = socket(0x18, 0x2, 0x0) setsockopt(r3, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) sendmsg$unix(r3, &(0x7f0000001700)={0x0, 0xffffffb3, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0) 2.876471296s ago: executing program 6 (id=96): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x19, 0x0) syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) writev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000000)="c886b4d3e0", 0x5}], 0x1) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r1 = fcntl$dupfd(r0, 0x0, r0) close(r1) syz_emit_ethernet(0x3e, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6000000800082b00fe80f302759f4ab58c00000000000000000000000000bb"]) r2 = socket(0x2, 0x2, 0x0) semop(0x0, &(0x7f00000000c0)=[{0x2}, {0x0, 0x2ff, 0x800}], 0x2) r3 = socket(0x18, 0x1, 0x0) socket(0x800000018, 0x1, 0x0) setsockopt$sock_int(r3, 0xffff, 0x1, &(0x7f0000000180)=0xec, 0x4) connect$unix(r3, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) bind(r2, &(0x7f0000000000), 0x10) sysctl$vm(&(0x7f00000000c0)={0x2, 0x5}, 0x2, 0x0, 0x0, 0x0, 0x0) connect$unix(r2, &(0x7f0000000000), 0x10) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_int(r2, 0xffff, 0x1023, &(0x7f00000004c0), 0x4) recvfrom$inet(r2, &(0x7f0000000380)=""/172, 0xac, 0x40, 0x0, 0x0) 2.849960548s ago: executing program 7 (id=97): r0 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KDGKBMODE(r0, 0x40044b06) unveil(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='x\x00') ioctl$KDENABIO(r0, 0x20004b3c) ioctl$DIOCMAP(0xffffffffffffffff, 0xc0106477, &(0x7f0000000100)={&(0x7f00000000c0)='./file0\x00', r0, 0x2}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x10004) ioctl$TIOCSTSTAMP(r1, 0x8008745a, &(0x7f0000000180)={0x0, 0x7fff}) ioctl$TIOCSETVERAUTH(r0, 0x8004741c, &(0x7f00000001c0)=0x1) ioctl$FIOSETOWN(0xffffffffffffffff, 0x8004667c, &(0x7f0000000200)) ioctl$WSDISPLAYIO_DELSCREEN(r1, 0x80085754, &(0x7f0000000240)={0xa, 0x2}) ioctl$FIONBIO(r2, 0x8004667e, &(0x7f0000000280)=0x101) close(r1) ioctl$WSKBDIO_SETMODE(r0, 0x80045713, &(0x7f00000002c0)=0x805f2e52b5a329c4) ioctl$TIOCGETA(r2, 0x402c7413, &(0x7f0000000300)) ioctl$TIOCSDTR(r1, 0x20007479) ioctl$TIOCSDTR(r1, 0x20007479) ioctl$KDDISABIO(r2, 0x20004b3d) ioctl$KDSETMODE(r2, 0x20004b0a, &(0x7f0000000340)) ioctl$TIOCMSET(r1, 0x8004746d, &(0x7f0000000380)=0x2) recvfrom$inet(r0, &(0x7f00000003c0)=""/64, 0x40, 0x3041, &(0x7f0000000400)={0x2, 0x1}, 0xc) ioctl$TIOCNXCL(r2, 0x2000740e) ioctl$TIOCOUTQ(r1, 0x40047473, &(0x7f0000000440)=0xff) r3 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000480), 0x10, 0x0) ioctl$WSDISPLAYIO_LDFONT(r3, 0x8058574d, &(0x7f00000004c0)={'./file0\x00', 0x7, 0x7, 0x2, 0x0, 0x0, 0x9, 0x9, 0x2, 0x1, 0x2, 0x3}) connect(r1, &(0x7f0000000540)=@in={0x2, 0x0}, 0xc) fcntl$setflags(r1, 0x2, 0x1) truncate(&(0x7f0000000580)='./file0\x00', 0xfffffffffffffffb) r4 = getppid() fcntl$setown(r3, 0x6, r4) readlink(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)=""/38, 0x26) 2.847488572s ago: executing program 5 (id=98): r0 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$FIOASYNC(r0, 0x8004667d, &(0x7f0000000040)=0x6) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) preadv(r2, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/250, 0xfa}, {&(0x7f00000001c0)=""/112, 0x70}, {&(0x7f0000000240)=""/235, 0xeb}, {&(0x7f0000000340)=""/149, 0x95}], 0x4, 0x43f) (async) write(r0, &(0x7f0000000440)="cc88de2d9699ee79a0c02ee31e723303a4bdf42502b3817a3900d925c25682f7ec683217", 0x24) munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) (async) r3 = dup(r1) getdents(r2, &(0x7f0000000480)=""/187, 0xbb) (async) ioctl$BIOCIMMEDIATE(r3, 0x80044270, &(0x7f0000000540)=0x9) (async) write(r1, &(0x7f0000000580)="a4fcdda337446e75e888bb3c4aaa0c98874ddb3146968edb8d4a73b12062abcbd83e88343d153fff0c6839ec5f4347f50c0204d40ecac73698a8d52a508328d3d7822ea03f6dab08", 0x48) (async) ioctl$WSKBDIO_GETDEFAULTBELL(r3, 0x40105706, &(0x7f0000000600)) (async) bind$unix(r1, &(0x7f0000000640)=@abs={0x1, 0x0, 0x1}, 0x8) mquery(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x800) (async) munlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) renameat(r0, &(0x7f0000000680)='./file0\x00', r0, &(0x7f00000006c0)='./file0\x00') (async) sysctl$net_inet_icmp(&(0x7f0000000700)={0x4, 0x2, 0x1, 0x4}, 0x4, &(0x7f0000000740)="aced2d15ad1e8544bc523c35ae2413f12ee5ccf88711673e207572a65f8d771d2b3ee65ab808ca7aa93040c40b3ec581669a082bd6a3ee0ecf8cdce5e1b847a96e8d1d115ac2a0023449bad536affc4668fe691edd1b266ed2bcb646db8fe93c37fc6e936df2edcae0e82ec2038b170cfd018f7425aeeff490", &(0x7f00000007c0)=0x79, &(0x7f0000000800)="ec1b186534e877a690258f72212fd5066b51efd016a3753f0a15f2dfd55bdae3de0e27cb5f1aca7f205eefbc3a73de3dcdc4351c1435df917160a665e7c59ddd898e3d4cacc28ac6131115ea18800eebf18dc6f4a3d77ea63ad84cc6613de02129ba5265e0d71eb8c658f38f4a90a22c4cd8ad498b284fad67e50c81b800bca3c3ed6b999ac03fb2b87bcf0272213a81ece17adb8527d5b273fa90079ecf99c431f0ecb07c", 0xa5) (async) mknodat(r1, &(0x7f00000008c0)='./file0\x00', 0x4, 0x8001) (async) rmdir(&(0x7f0000000900)='./file0\x00') accept$inet6(r2, &(0x7f0000000940), &(0x7f0000000980)=0xc) (async) open$dir(&(0x7f00000009c0)='./file0/../file0\x00', 0x80, 0x61) (async) ioctl$FIONREAD(r3, 0x4004667f, &(0x7f0000000a00)) (async) shutdown(r2, 0x2) (async) ioctl$WSKBDIO_GETDEFAULTBELL(r1, 0x40105706, &(0x7f0000000a40)) (async) ioctl$TIOCCHKVERAUTH(r1, 0x2000741e) r4 = open$dir(&(0x7f0000000a80)='./file0/../file0\x00', 0x8, 0x88) chflagsat(r4, &(0x7f0000000ac0)='./file0/../file0\x00', 0x0, 0x0) kqueue() (async) connect$unix(0xffffffffffffffff, &(0x7f0000000b00)=@abs={0x1, 0x0, 0x3}, 0x8) (async) shutdown(r0, 0x1) open(&(0x7f0000000b40)='./file0/../file0\x00', 0x200, 0x101) 2.767946384s ago: executing program 5 (id=99): r0 = socket(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1021, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) accept$unix(0xffffffffffffffff, &(0x7f00000010c0)=@abs, &(0x7f0000001100)=0x8) 2.766735972s ago: executing program 0 (id=100): r0 = socket(0x18, 0x2, 0x0) close(r0) close(0xffffffffffffffff) r1 = socket(0x18, 0x0, 0x1) fcntl$lock(0xffffffffffffffff, 0x9, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x100400000000000}) connect$unix(r1, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc5005601, &(0x7f0000000000)={0x10, 0xffffffffffffffff, [{&(0x7f00001d0000/0x4000)=nil, &(0x7f0000663000/0x4000)=nil, 0xfffffffffffff801}, {&(0x7f00006ac000/0x4000)=nil, &(0x7f0000826000/0x4000)=nil, 0x8}, {&(0x7f0000060000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil}, {0x0, &(0x7f00007ae000/0x1000)=nil, 0x4bb6}, {0x0, &(0x7f0000ffb000/0x1000)=nil}, {&(0x7f0000000000/0x2000)=nil, &(0x7f00001f5000/0x4000)=nil, 0x6}, {0x0, 0x0, 0xfffffffffffffffc}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil}, {&(0x7f0000212000/0x1000)=nil, &(0x7f0000826000/0x1000)=nil, 0x40}, {&(0x7f0000110000/0x2000)=nil, &(0x7f0000501000/0x1000)=nil}, {0x0, &(0x7f0000156000/0x1000)=nil, 0x1}, {&(0x7f0000027000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil}, {0x0, &(0x7f0000ffd000/0x3000)=nil, 0x4}, {&(0x7f00004c1000/0x2000)=nil, &(0x7f00001d1000/0x3000)=nil, 0x9bc0}, {&(0x7f00001cf000/0x4000)=nil}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000358000/0x2000)=nil}], './file0\x00'}) setsockopt(r0, 0x6, 0x4, &(0x7f0000000040)="03000000", 0x4) connect$unix(r0, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) 2.766120768s ago: executing program 5 (id=101): ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, &(0x7f00000000c0)={0xa, 0x8000148, {[0x8002000000000003, 0x0, 0x6, 0x6, 0x3, 0x8000, 0x1, 0x8, 0x7, 0x2, 0x9, 0x91c, 0x8, 0x180, 0x0, 0xd5, 0x76, 0xfffffffffffffff7], [0x5438b950, 0x5, 0x1004, 0x7, 0x1, 0x2, 0x9, 0x7, 0xffffffffffffffff, 0x3], [0x6, 0x0, 0x8, 0x8000000008, 0xae, 0x200, 0x2], [0x100000000, 0x10801, 0x0, 0x5, 0x2, 0x6], [{0x5ad, 0x7, 0xfffffffb, 0x6}, {0x2, 0x925, 0x3, 0x338}, {0x1000, 0x7fffffff, 0x0, 0x5}, {0x8, 0x2, 0x1, 0x895}, {0x4, 0x3, 0x2, 0x9}, {0x1f, 0x4, 0x0, 0x7}, {0xe4, 0xffffff81, 0x1ff, 0x1}, {0x88, 0x10000, 0x8001, 0x5}], {0x52b, 0x4, 0xff, 0x8}, {0xfffb, 0xffffbfc0, 0x8}}}) (async) sysctl$kern(&(0x7f00000000c0)={0x1, 0x45}, 0x2, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) (async, rerun: 64) sysctl$kern(&(0x7f00000000c0)={0x1, 0x4f}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x33, 0x0, 0x37) 2.763235889s ago: executing program 0 (id=102): unveil(&(0x7f0000000280)='.\x00', &(0x7f00000002c0)='x\x00') (async) setrlimit(0x0, &(0x7f0000000980)={0x101, 0x57}) r0 = syz_open_pts() close(r0) r1 = syz_open_pts() (async) r2 = getppid() fcntl$lock(r1, 0x9, &(0x7f0000000000)={0x3, 0x3edabecf81f5f871, 0x6b, 0xd27, r2}) (async) setrlimit(0x8, &(0x7f0000000980)={0xb, 0x5c}) r3 = syz_open_pts() close(r3) (async) syz_open_pts() writev(r3, &(0x7f0000000400)=[{&(0x7f00000009c0)="b8e041a083df24f9c53a9853f49596c0691c76b1c28fb9c8ad6338c9e2ee09322589f295af03c23c43342598a976ebdbdcf37ef69d0ec74c552d2835e4b108783bcad6b44b50558d981586ae0366f6b4c4856bf5e1212262c020d289ef69e71b1f6b624a91c3c631fa27ed138e29655fe7ada420f0f3f87c1c2aa8ad343fa6dcbfffcfe652892796a1dd14ecace5c8ea9b471acbc77c53906510e98eb871b557e819b76cb1596537b93b1f45fc32fe96b4e939daf50e06acd7bc3e72ab63373a0407572a150461fcdc2816fcda9b0f68b3a6dc27dd87b5248527d5e5e154cb13bfcfb955c465918661fe273854b478fc304613c20728670107986a785f5d6decbacae78e28fb7746385c2a6ed486a2dfe0ae5dfd82649588857fd86bc92e97af169a881dd2b1b1488287fa1b14677c95b22c8e96c8ea5db65d208f0d72d83cae330629c67fd131231706f29e0e6a1418db08b5a32fe1899e89898375fdc9ed4e2551990d39fa5fd983d0eb7efcc6d4c52130bdc58bcd12d6c1bca264fe59000d5039716c5c751fee89eaeff150fd862fb4fc71ccf3a6ad914cf29a00e1545eb874d4acbe957af6ffca296306679547ec459a92f80049d1f6b4e704873149e46fb7f245e42654fe3881a18174bb1627ab865b4343126d07bfd51c5ccf26e84630ee2524019d42fd5a1a39cf0fd345b2a96bc19135a6f0318f72b9fb4c637ee07c46d04a818a8ed9cf03555fd6209caded3a2bdc4a8933f4d93087293e65eb382eb4624ecce4d5f5df2322f1c0022e36872ebb5d277d27c203d5b67a652de9075f47d4d78c02994e1f2853adddee3a222b13243981d5919a0c78b41d4d1b8178ccf91da8388354da4fd822dd770a948a566a9b035c9cf2c20c3dbc9ace6d05f8fa4e13c66dc84d0a560be6554bdaea34dc00ce2f0f7a24c2741bb120d3a25875c1fa8bb1bd1d483345a6d2a19d67d708223ee0ca8ee0b7ddb61f9db353704eb06658a7e523bbc77acb1da2fa92b197a8cb1d5c1235d71fd11b62294fb5b361f2e7aa554196cd3903a89dea0808b4efd2e27808f0eb7ef0d2636b03c88881889c9bc2222e428e0c18ebca91fef87f611494657fab3f90903bb18b42c70b3958d6b2f49255f24fea2fd101468403d97554ecd490892b539af97b06f807d315ce41f657e710218c0fae2301fdeecf1aa5e537a65a96deb4699a55b792cb0c3b5b27ddf6fbb3617c4dd8d369a222f1d3be60597a571a2a9d18dc5fceb08da7a6a143a0f1f2b9d50d4e3b459437d7ae35e99aab26dda98e57250467769bf3c724179868e32a94afe0ac48da7b0d4f2e3db77151c9af2fe19ea7e6bdcf2a479e6754262d74d8ed03883f9161870b1caf194413d297156d70f0ce9e3b88c006f9ecb1a4f9058fc86fabf70d5a05511b9fb23990a7e41c21353c7acb509b37eaea5c12a847b625c6866575f09d8ccf092f1ec874e236541b2e8c6002ccd2ce192f4163d1cc87ab64d2938fc8bd520cb6822161045c0e38d6685f56aa04ed5e16aaec20a54311f992276d51f513b5d608da18c877adb8e81cb602bd9e20dcfd4a514dfb222c08f0dc21", 0x464}], 0x1) ioctl$TIOCSETA(r3, 0x802c7414, &(0x7f0000000480)={0xf66c, 0xfffffffd, 0xffffffff, 0x5ffbfb5d, "427d677c2be0acce00", 0x24, 0xfffffffd}) ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000140)={0xffff, 0x3, 0x3, 0xfffffb84, "9ddcac7d317d351d440000000000000400cd3314", 0x4, 0x90}) (async) writev(r0, &(0x7f0000000580)=[{&(0x7f00000009c0)="c8fefe9edef495fd0a4cfe4ecd6e8858b57daebd910704030b97c15195e26ebe8e83e6415b231be6a2e788583c780c7f824f5e8b9369e664fb3c024bee649bd4791cd8f92b2049c3f47442fc8a0b325336567082460c5ab4454f6528bd66712b408f930fe2c7634263f2d7d966acfb884c3cac5918ff782e43a4ec65850b07c2190909fdf9995d62cfa0abb22bbce82f53c342c7cfc7c0849cb105c4d75eb8db088bef702d8b84bb336d24945b44bf31366abf5337d376c9ade0f0afdc3b0063e661150a4d3a73e3c0282f19ebb3e6f847c52ee9afc49a495176254b046be87fc1e9626cae39bee8317e4ba637e8d0ff675c6f2f7c92650418e8b5fcda6908d77506b290c90960eb672e49498bc51444391a48835170be51f657aa12992b7d436d8517d347c499f61055c984dc59320fe6407fab4f8bbf64f6d8ffb67bfa963b0da70b7a999949ed7b75fbc1e140596d7a3f86df183402cbf80758284ee3614db9ef6c61b769451c827ad25f2744545942e8356eae819e11c643959eedf1d69ff892736994b1aa56d9417ee2a6db4adec7a39bf1597c3610667d6b2ad90f09a2893edff00d38f90ee04089fe997e25d6fdee4b8d4c636a6512578c9d5570c7e5a37508353469ffbe0058622f50ffbfcfbff3930fbbddb5ed62a5f5f5b708f65a8d5094d7bf238a4e70970c98152c300c0b47143f99ca3aae82356f7b8f1b23eb9d3969d9dbd422dd126fc2cc4148b285f9134f93b4c4c3ce4af370269082b63ad0d2dac19f2b0ba016e1fe4ee85f3d85f98e7f06c750799465e4c8475960f516c7a94d5b28bdfaf01f8c66788ab2547746cd119de42999149523fb162bdc2a226b79de65d4ad320d18f6552597d73b17ca67adfd68bb6d50b343cb68429503e3dc282a9192ca6740f84e9bd116f97058ef561d06d37b16a592dc8d6c4642b0c3faa09cc611a23f2b84a97af5360c6340f8f9c025fc68ed3e5e456846640aa9656691fd2e55afa5cd58ea31f34951f814214fcf2034ad984262edbde73a58c2d9d8c9f18da9193f848e0d5820b2a0374a1dcf18649e7fa826ff765be4f7ce083997fbb842cb1e856e1ba7c9cabf4f4c5a555c8ca1ac519dcfbd031e9e0741ac98e70f1d9dcd28a784f6790d5cd9767afdffffbc8a8539745d163c2d03bad0dffe6f5cfb2d3f8639ab13b08aff302a605c7337d8caed8ec213d9d58840e19389c97ef85ddaa745150142df6c87dc3f20643db4fd30d592fe2865c309ee51141ba99ce23bf4c102b27ea57cc7a8c174a5e9235cd47a1c522e5e19f70517cbac357efffad1b79f1d69911b8e9d6ead9faf2a028180b4fb146e3832dcd1c8d997591c30645b788f42846fb931a58f8ab864eb4e9bffabaff3c06c10ed881ee41ff1f0a695b964d2df037183e1d064c385368a7c73ba4b09e029a602fa383230bc42c088fcbf259c988e88678875f4621ca40628e38804a6358398c5a8441f3b8634efd05e92c10aab109e2820326f9ec7116c8c7b1fd97a82150a29eb6fc564d0d1074e94d67bae0f87e5f423d4422febddeb45849c94f77a35bbe0832b191b5416fd95dc10b39e106bd4839ba1ca89931983ddce8b129e6a135ff4b305fd099279f13617759c5be132140a6312f14e8e9a14371be803453b9618626dc42108b68b6d9371b7fc3817434eea806f90c920247c4b1197b6e03931feb417a4c94ad8c21ba4e0e754622e21872e8702689f15af2384de62c333fc9237b38599e7258d9c4114792d92751734b9baacbf9f185477e047c49c8cdfe884964d104d16a67348312a193acbed490bae4f7cef6e3e93fc3bba4922bc8e8ad7edcdd0cfdaff0b820a972512deb44c02dc82f69b8d71339b563f9f7ec66ea2ee738ce5076dc761a0e9357e08c8f2ba07a317810c21669c1beed666f975fa5636865c5007cb10382575e6fdc667b27de85162aa4deb6867ae6c5a227ebc053ce029d8a23aa80b352c0093fb6b593a46ee09d9020fdf74839079f0f2a2fbd6d03f49513766ccc22e8d0971324928897fe6aac9ec6df44c6813fea46b3ba58bfa2b1c2373c0512353eaa375a9ec3efbf63a74dd219e81086b3cffd0a110bde76057874a3876537dbabe4b06bfd324c6e67b37b47a2d5a5cca77bf9de8f449e4a4754db0c0c38b4c4dd377da187b3ca94879a024eb7ffab6569e4bb2aace36df5c813d8b2145c80698b02da015c1b1fe12f9901e725f599263f7d0a696d1c1d174b812ca0a147fac622441ebf80450a6721472545d4acbf3fdeb1c5df0c912a81c60099e4fb43cdda85da4eb968c960d89de9d0fd1446ae7b43e4d586f026c9c3615aef9a7ca89719d577ecaece3886815db08490b11d96f1ca1b87bb2d4e6db505118f548c774b0458bde0ec76d500b5db5346d257996b79f19d38d0ec741a3be3ac62df40688486266a9dbb41fdab5f6cfaeb8c53d4ae43cd7c77100bb8ba90f562f27e31ea813825c7217463e6c9f1a7561eb5c29", 0x6eb}], 0x1) (async) mknod(&(0x7f00000000c0)='.\x00', 0x40, 0x9) 2.761982112s ago: executing program 4 (id=103): r0 = socket(0x1, 0x5, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x406}, 0x409) r1 = socket(0x18, 0x400000002, 0x0) r2 = socket$inet(0x2, 0x1, 0x6) getsockopt(r2, 0x0, 0x15, 0xffffffffffffffff, &(0x7f0000000040)=0xfe) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000000)="07bc1d8911e0ce673b08f1b84ea0cb433a26b1000000000000002000"/42, 0x2a}], 0x1) sysctl$kern(&(0x7f0000000140)={0x1, 0x29}, 0x2, 0x0, 0x0, 0x0, 0x0) sendmsg$unix(r1, &(0x7f0000000040)={&(0x7f0000001480)=@file={0x1, './file0\x00'}, 0xa, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="14"], 0x20, 0x401}, 0x2) select(0x40, &(0x7f0000000000)={0x1b, 0x400, 0x6, 0x4, 0xa, 0xfffffffffffffff7, 0x200, 0xfffffffffffffffc}, 0x0, 0x0, 0x0) close(r0) r3 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$KDGKBMODE(r3, 0x40044b06) 2.757610137s ago: executing program 5 (id=104): open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x186) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (async) r0 = kqueue() kevent(r0, &(0x7f0000000000), 0x7fffffff, 0x0, 0x1000a9f6, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) truncate(&(0x7f0000000000)='./file0\x00', 0x2fffe) (async) r1 = open(&(0x7f0000000440)='./file0\x00', 0x1, 0x196) ftruncate(r1, 0x10000) 2.473100188s ago: executing program 0 (id=105): r0 = socket(0x18, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = socket(0x18, 0x1, 0x0) setsockopt(r2, 0x1000000029, 0x36, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000000)={0x0, 0xfffffffd}, 0x10, 0x2000, 0x0) open(0x0, 0x2, 0x102) r3 = semget$private(0x0, 0x5, 0xa8) semop(r3, &(0x7f0000000280), 0x0) semop(r3, &(0x7f0000000000)=[{0x4, 0x5, 0x1000}], 0x1) socketpair(0x18, 0x8000, 0x29, 0x0) r4 = semget$private(0x0, 0x3, 0x7c0) r5 = syz_open_pts() ioctl$FIOASYNC(0xffffffffffffffff, 0x80047460, 0x0) ioctl$TIOCSETA(r5, 0x802c7414, 0x0) semctl$SETVAL(r4, 0x0, 0x8, &(0x7f0000000000)=0x10001) socket$unix(0x1, 0x2, 0x0) sysctl$kern(&(0x7f0000000100)={0x1, 0x35}, 0x3, &(0x7f00000011c0)="71f91e5a91501d94a34bdf536647f49a902027647169000000000000", &(0x7f0000000000)=0xfe10, 0x0, 0x33) syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000040)="6dc100167f", 0x5}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r6 = socket(0x2, 0x1, 0x9) connect$inet(r6, &(0x7f0000000000), 0x10) shutdown(r6, 0x1) close(r6) connect$unix(r0, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) r7 = socket(0x2, 0x2, 0x0) setsockopt$sock_int(r7, 0xffff, 0x1001, &(0x7f0000000100)=0x20000, 0x4) syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) writev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000000)="c886b4d3e0", 0x5}], 0x1) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) 2.472168347s ago: executing program 4 (id=106): setitimer(0x1, &(0x7f00000000c0)={{0x8000000000000003, 0x3}}, 0x0) sysctl$kern(&(0x7f00000000c0)={0x1, 0xa}, 0x2, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1c, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$kern(&(0x7f00000000c0)={0x1, 0x50}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xfe10, 0x0, 0x37) setitimer(0x1, &(0x7f00000000c0)={{0x8000000000000003, 0x3}}, 0x0) (async) sysctl$kern(&(0x7f00000000c0)={0x1, 0xa}, 0x2, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1c, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) sysctl$kern(&(0x7f00000000c0)={0x1, 0x50}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xfe10, 0x0, 0x37) (async) 2.47093374s ago: executing program 7 (id=107): r0 = socket(0x2, 0x1, 0x0) setsockopt(r0, 0x6, 0x10, &(0x7f00000000c0)='\x00\x00\x00\x00', 0x4) r1 = accept$inet(r0, &(0x7f0000000000), &(0x7f0000000040)=0xc) mquery(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0xfffffffffffffff7) 2.402028534s ago: executing program 8 (id=23): syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt(r0, 0x0, 0x5, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = socket(0x2, 0x1, 0x0) connect$unix(r1, &(0x7f0000000000), 0x10) write(r1, &(0x7f0000000080)="d99aca906c", 0xfd23) syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[@ANYBLOB="69e1629b6174391e7dd7a2d786dd60b6000000302c03cb697a653e336f000000500000000000ff02000000000000000000000000000111"]) 1.359218442s ago: executing program 3 (id=108): ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x40001d02, 0xffffffffffffffff) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket(0x18, 0x1, 0x0) setsockopt(r0, 0x1000000029, 0xc, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) setsockopt(r0, 0x1000000029, 0xc, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) 1.358427721s ago: executing program 6 (id=109): munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) r0 = shmget$private(0x0, 0x3000, 0x4, &(0x7f0000ffa000/0x3000)=nil) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000240)={{0x3, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x7}, 0x5, 0xfffc, 0x0, 0x0, 0x1, 0x0, 0x800000800000000}) (async) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000240)={{0x3, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x7}, 0x5, 0xfffc, 0x0, 0x0, 0x1, 0x0, 0x800000800000000}) mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) sysctl$net_inet_tcp(&(0x7f0000000240)={0x4, 0x1e, 0x6, 0x17}, 0x4, 0x0, 0x0, 0x0, 0x0) r1 = socket(0x2, 0x2, 0x0) setsockopt(r1, 0x0, 0x7, &(0x7f0000000080)="f5ffffff", 0x4) (async) setsockopt(r1, 0x0, 0x7, &(0x7f0000000080)="f5ffffff", 0x4) select(0x40, &(0x7f0000000000)={0xffffffffffffffff, 0x8, 0x8, 0x8, 0x9ce8, 0x0, 0x0, 0x9}, 0x0, 0x0, 0x0) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) bind(r1, &(0x7f0000000000), 0x10) r2 = socket(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0xffff, 0x20, &(0x7f0000000080)=0x6, 0x4) (async) setsockopt$sock_int(r2, 0xffff, 0x20, &(0x7f0000000080)=0x6, 0x4) connect$unix(r2, &(0x7f0000000000), 0x10) write(r2, 0x0, 0x0) pipe(&(0x7f0000000080)) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setown(r3, 0x6, 0xffffffffffffffff) (async) fcntl$setown(r3, 0x6, 0xffffffffffffffff) mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) (async) mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000001000/0x3000)=nil, 0x0) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000000)=""/201) shmget(0x3, 0x2000, 0x34, &(0x7f0000191000/0x2000)=nil) (async) shmget(0x3, 0x2000, 0x34, &(0x7f0000191000/0x2000)=nil) r4 = openat$tty(0xffffffffffffff9c, &(0x7f0000000100), 0x305f0, 0x0) ioctl$TIOCCHKVERAUTH(r4, 0x2000741e) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) 1.356827969s ago: executing program 0 (id=110): syz_emit_ethernet(0x36, &(0x7f0000007780)=ANY=[@ANYBLOB="aaaaaaaaaaaa8337fa524e7f86dd69199cb900da68e4c00000000000000000000000e6000000000000000000000000000000000008a2"]) setrlimit(0x8, &(0x7f0000000980)={0x8, 0x54}) r0 = syz_open_pts() syz_extract_tcp_res$synack(&(0x7f00000000c0), 0x1, 0x0) close(r0) r1 = syz_open_pts() ioctl$TIOCMBIS(r1, 0x8004746c, &(0x7f0000000040)=0x101) r2 = socket(0x11, 0x3, 0x0) sendto$unix(r2, &(0x7f00000001c0)="b1000504600000000000800007000000331c13fecea10500fef90c061ddd1efb7ae320b37b673039d2d236073705ae04be38164991f7b85143222b297be1aa5b0107e60fd5339d6a7c236deb51e2f03ebbc257699a5f139b672f4d335d223e7d029d6ba8af630037281802000000000000000000000081ea6e69e0bb76d907a900000200361b1257aea8c500002002000000ea57736e075b1e1b6cfa7ca500000600bfba090008effffeffffff3512b132", 0xb1, 0xc10, 0x0, 0x0) ioctl$TIOCSETAF(r1, 0x802c7416, &(0x7f0000000100)={0x9789, 0xfffffffb, 0xffffffff, 0x80a19f, "bb081aa9003721f7beae58be1b0000001d00", 0x0, 0x4}) open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x186) truncate(&(0x7f0000000000)='./file0\x00', 0x2fffe) r3 = open(&(0x7f0000000040)='./file0\x00', 0x2, 0x0) preadv(r3, &(0x7f0000000340)=[{&(0x7f0000000240)=""/229, 0xe5}, {&(0x7f0000000140)=""/139, 0xffffffbc}], 0x2, 0x0) sysctl$kern(&(0x7f0000000000)={0x1, 0x30}, 0x2, &(0x7f0000001940), &(0x7f0000000040)=0xfffffffffffffed0, 0x0, 0x0) sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804", 0x30, 0xa, 0x0, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x9, 0x4, 0x0, 0x2, 0x2c, 0x68, 0x9a7, 0x7, 0x1, 0x0, @multicast2, @broadcast, {[@noop, @timestamp={0x44, 0xc, 0x8, 0x0, 0x3, [{[], 0x61}, {[], 0x6}]}]}}, @icmp=@mask_request={0x11, 0x0, 0x0, 0x10}}}}}) socket(0x10, 0x1, 0x4) writev(r0, &(0x7f0000000700)=[{&(0x7f0000000080)="34eb4cd59e8456ebc0881681c60e1cd9e0bf01b618b3cb934394c5951c1db0fd943a", 0xff99}], 0x1) r4 = openat$pf(0xffffffffffffff9c, &(0x7f0000000140), 0x100, 0x0) read(r4, &(0x7f0000001a00)=""/4097, 0x1001) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) 1.35435334s ago: executing program 4 (id=111): setrlimit(0x7, &(0x7f0000000980)={0xb, 0x5c}) r0 = syz_open_pts() close(r0) (async) r1 = syz_open_pts() (async) r2 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) (async, rerun: 32) chdir(&(0x7f0000000380)='.\x00') (rerun: 32) ioctl$WSMUXIO_REMOVE_DEVICE(r2, 0x80085762, &(0x7f0000000040)={0x1, 0x2}) (async) ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f00000000c0)={0x0, 0xffffffff, 0x2, 0x820351a, "090e4de6d30aa692318c7e0002f9ffffff00", 0xb1a, 0x4000000}) (async, rerun: 32) setrlimit(0x8, &(0x7f0000000580)={0xa, 0x56}) (rerun: 32) r3 = syz_open_pts() (async, rerun: 64) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (rerun: 64) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r4, 0xffff, 0x1022, &(0x7f00000000c0), &(0x7f00000002c0)=0xc) (async) sysctl$kern(0x0, 0x0, &(0x7f0000000280)='q', &(0x7f0000000080)=0x1, 0x0, 0x0) rename(0x0, 0x0) (async) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') (async) chmod(&(0x7f0000000140)='./file0\x00', 0x3ea) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x97) (async) rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00') mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x95) rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00') (async, rerun: 64) syz_emit_ethernet(0x2a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa9f35aaaaaaaaaabb0508907800"/30]) (rerun: 64) syz_emit_ethernet(0x3a, &(0x7f0000000180)={@local, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x2000, 0x4, 0x0, 0x0, @remote={0xac, 0x14, 0x0}, @broadcast}, @generic="179d64ca430bb096c6832cde18679e29dba3ef488e11ee14"}}}}) (async) close(r3) syz_open_pts() (async, rerun: 32) ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000240)={0x2000000d, 0x1, 0x7, 0x4, "186d28106308001100530400000000098000", 0x80f, 0x4}) (async, rerun: 32) writev(r3, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) sysctl$kern(&(0x7f0000000100)={0x1, 0x47}, 0x4000000000000003, 0x0, 0x0, 0x0, 0xffffffffffffff54) (async) write(r1, &(0x7f0000000700)="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", 0x12d) 1.3531461s ago: executing program 5 (id=112): ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{}, {0x4, 0x0, 0x0, 0x3}]}) (async) sysctl$kern(&(0x7f00000000c0)={0x1, 0x2c}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0x37) (async) r0 = syz_open_pts() ioctl$TIOCGTSTAMP(r0, 0x4010745b, &(0x7f0000000200)) (async) r1 = socket(0x18, 0x1, 0x0) setsockopt(r1, 0x1000000029, 0x36, &(0x7f0000000040)="03000000", 0x4) (async) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x100000000000000, 0xffffffffffffffff}) (async) sysctl$kern(&(0x7f0000000140)={0x1, 0x37}, 0x2, &(0x7f0000000180)="16ce180fbc4a39c34168bd8153d505df8307ab27b71e466ef3b346f34454bcf414388947342feaeeb25d056ac50d7d4e2c84d076266ad4e7a88f34851f9878a9d4", &(0x7f0000000240)=0x41, &(0x7f0000000280)="27a2759a01ac30a2c771fcbaa406b1487da48a07517fb7cbe55efb31e26345f059a6458e55e467a25036160e1bd06340e3e7070daf2f4e12050314008f393700cf45e46b5ca7ece06827d139b8bb3a92898cac4392b4c7c32bf39344d49bd1484e3847bf41e76d9f606cf639a751f2d72ec0f7c922c2d7b2020ae23dd2478753d26a8003268b884a29734df9276cd27bfd1b7f0e449aee", 0x97) (async) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) r2 = socket(0x2, 0x2, 0x0) (async) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x2000000000000243, &(0x7f0000000100)}) ioctl$FIONREAD(r2, 0xc0106924, &(0x7f00000001c0)) r3 = kqueue() kevent(r3, &(0x7f00000000c0), 0x101, &(0x7f0000000180), 0x6, 0x0) (async) ioctl$FIONREAD(r2, 0xc0206921, &(0x7f00000001c0)) connect$unix(r1, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) syz_emit_ethernet(0x42, &(0x7f0000000080)={@local, @local, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x8, 0xff, 0x0, @local={0xac, 0x14, 0x0}, @rand_addr=0xac1400ff, {[@ssrr={0x89, 0x3, 0x6}]}}, @icmp=@redirect={0x5, 0x1, 0x0, @broadcast, {0x5, 0x4, 0x3, 0x3c, 0x3, 0x66, 0x6, 0x0, 0xff, 0x1, @multicast1, @rand_addr=0x1}}}}}}) 1.352555056s ago: executing program 7 (id=113): symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') unveil(&(0x7f00000000c0)='./file0/file0/..\x00', &(0x7f0000000100)='r\x00') mknod(&(0x7f0000000040)='./file0\x00', 0x118a, 0x0) sysctl$net_inet_tcp(&(0x7f0000000040)={0x4, 0x2, 0x6, 0x18}, 0x4, &(0x7f0000000080), 0x0, 0x0, 0x0) 7.612091ms ago: executing program 0 (id=114): r0 = open(&(0x7f0000000180)='./file0\x00', 0x80000000000206, 0x0) ioctl$TIOCNXCL(r0, 0x2000740e) setitimer(0x1, &(0x7f00000000c0)={{0x8000000000000003, 0x3}}, 0x0) sysctl$kern(&(0x7f00000000c0)={0x1, 0x33}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x14, 0x0, 0x37) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$kern(&(0x7f00000000c0)={0x1, 0x50}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xfe10, 0x0, 0x37) open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000400001803c1, 0x0) socket(0x2, 0x2, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f00000003c0)={0x0, 0x9, {[0xfffffbfffffffffb, 0x1, 0x2, 0x100200000, 0x6, 0x7, 0xdf60, 0xffffffffffffffff, 0x0, 0x6, 0x93, 0xfffffffffffffff8, 0xffffffffffffffff, 0x200000000002, 0xd, 0x4, 0xfffffffffffffffe, 0x2], [0xfffffffffffffffe, 0x80000001, 0xfffffffffffffffa, 0x8, 0x5e, 0x100000000007b98, 0x800, 0x9, 0x0, 0xfffffffffffffffe], [0x20100000001, 0x8000, 0x40000000, 0x0, 0xb, 0x411000, 0xffffffff00000000], [0x9, 0x1fffffffffb, 0x80000001, 0x4000000, 0x5, 0x90000000], [{0x0, 0x0, 0x0, 0x7d06}, {0x9, 0x22, 0x5}, {0x4, 0x0, 0xfffefffe, 0x280}, {0x3, 0x4, 0x5, 0xffffffffffffffff}, {0x0, 0x2, 0x7f, 0x8}, {0x0, 0x9, 0x9, 0x2000000000000000}, {0x5, 0x0, 0xffeffff7, 0xb}, {0xe, 0x100, 0x1, 0xb}], {0x1, 0x8, 0x80200006, 0x3}, {0xfffe, 0x6, 0x6d5, 0x6}}}) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x62}) r2 = syz_open_pts() close(r2) syz_open_pts() ioctl$TIOCSETAW(r2, 0x802c7415, &(0x7f0000000040)={0x2df57366, 0x3, 0xd, 0xfffffdfd, "0a6400b72860147bccc7020400060000d4620300", 0x80000005, 0x5}) writev(r2, &(0x7f0000000300)=[{&(0x7f0000001640)="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", 0x728}], 0x1) r3 = kqueue() kevent(r3, &(0x7f00000000c0), 0x138, 0x0, 0xffffffff, 0x0) close(r1) lseek(r0, 0xfffffffffffff800, 0x2) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x62}) r4 = syz_open_pts() close(r4) syz_open_pts() ioctl$FIOASYNC(r4, 0x80047470, &(0x7f0000000140)=0x2) ioctl$FIOASYNC(r4, 0x80047466, &(0x7f0000000200)=0x5) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DIOCMAP(r0, 0xc0106477, &(0x7f0000000080)={&(0x7f0000000000)='./file0\x00', r5, 0x3}) 5.494778ms ago: executing program 3 (id=115): r0 = socket(0x18, 0x2, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) setsockopt(r1, 0xdc53, 0x0, &(0x7f0000000080)='\x00\x00\x00\x00', 0x4) setsockopt(r0, 0x1000000029, 0xc, &(0x7f0000000000)='\t\x00', 0x2) setsockopt(r0, 0x1000000029, 0xd, &(0x7f0000000000), 0x14) 4.369996ms ago: executing program 4 (id=116): r0 = open(&(0x7f0000000040)='./file0\x00', 0x40, 0x80) r1 = socket(0x2, 0x400000000002, 0x0) setsockopt(r1, 0x0, 0x5, &(0x7f0000000080), 0x0) (async) connect(r0, &(0x7f0000000180)=@un=@file={0x1, './file0\x00'}, 0xa) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x10, r0, 0x0) (async) setitimer(0x1, &(0x7f0000000000)={{0x101, 0x3}, {0x8000000010, 0x3}}, 0x0) (async) sysctl$kern(&(0x7f0000000000)={0x1, 0x31}, 0x6, 0x0, 0x0, 0x0, 0x0) ioctl$WSDISPLAYIO_DELFONT(r0, 0x8058574f, &(0x7f0000000100)={'./file0\x00', 0x9, 0x5, 0x400, 0x1, 0x1, 0xfffff4b9, 0x5, 0x2, 0x1, 0x81}) (async) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x10091, 0x0) poll(&(0x7f0000000000)=[{r2, 0x4}], 0x1, 0x2) sysctl$vm_swapencrypt(&(0x7f0000000640), 0x3, 0x0, &(0x7f0000000700), 0x0, 0x0) (async, rerun: 64) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async, rerun: 64) sysctl$vm_swapencrypt(&(0x7f0000000640), 0x3, &(0x7f0000000680), &(0x7f0000000700), 0x0, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r3 = shmget$private(0x0, 0x3000, 0x65d, &(0x7f0000ffa000/0x3000)=nil) shmctl$IPC_SET(r3, 0x1, &(0x7f0000000240)={{0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x7}, 0x0, 0xfffc, 0x0, 0x0, 0x4, 0x0, 0x800000800000000}) (async, rerun: 32) shmat(r3, &(0x7f0000001000/0x3000)=nil, 0x0) (async, rerun: 32) r4 = shmget$private(0x0, 0x1000, 0x10, &(0x7f0000ffc000/0x1000)=nil) shmctl$IPC_SET(r4, 0x1, &(0x7f0000000240)={{0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x7}, 0x0, 0xfffc, 0x0, 0x0, 0x4, 0x0, 0x800000800000000}) (async) r5 = shmget$private(0x0, 0x2000, 0x513, &(0x7f00001e1000/0x2000)=nil) shmat(r5, &(0x7f00001e3000/0x2000)=nil, 0x3000) (async) r6 = shmat(r4, &(0x7f0000ffc000/0x3000)=nil, 0x2000) shmdt(r6) (async, rerun: 64) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) (async, rerun: 64) mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) (async) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) (async) syz_emit_ethernet(0x3a, &(0x7f0000000040)={@local, @random="b3b1a089010a", [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x3c, 0x2c, 0x67, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x7, @multicast1, {[@lsrr={0x83, 0x3, 0x9}]}}, @icmp=@timestamp={0xd, 0x0, 0x0, 0x9, 0x35, 0x80000001, 0x8, 0xa5}}}}}) fcntl$lock(r7, 0x9, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x300000023}) (async, rerun: 64) close(r2) (async, rerun: 64) openat(r2, &(0x7f0000000200)='./file0\x00', 0x100, 0x2) 4.062982ms ago: executing program 5 (id=117): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$hw(&(0x7f00000000c0)={0x6, 0xb}, 0x2, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x18, 0x1, 0x0) setsockopt(r0, 0x1000000029, 0x39, &(0x7f0000000040)="03000000", 0x4) mprotect(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0) sysctl$hw(&(0x7f0000000180)={0x7, 0x13}, 0x2, &(0x7f00000012c0)="a10c2049", &(0x7f0000000140)=0x4, 0x0, 0x0) sysctl$net_inet_icmp(&(0x7f0000000180)={0x4, 0x12, 0x1, 0x1}, 0x4, 0x0, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7959) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000000)="7f454c4602df7a264ee4975f55011a49b70cb710aa950000000a52e92a24d18fcf8fd1f9794ffa08bb11bafcdc24ff4c5d0b5c7b1ad1a2ec434c500191", 0x3d}, {&(0x7f0000000340)="1551e6", 0x3}], 0x2) ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000080)={0xd, 0xb, 0x1d, 0xe, "893c5da87582a5d11b5ebb3ac2209102c42c422c", 0x5b8, 0xf3}) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000040)={'tap', 0x0}) 2.708809ms ago: executing program 6 (id=118): ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x0, 0x0, {[0xfffffbfffffffffb, 0x2000001, 0x2, 0x1, 0xfffffffffffffffa, 0x0, 0xdf5e, 0x0, 0x0, 0x2f01, 0x0, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2, 0xce5], [0xfffffffffffffffe, 0x80000002, 0x6, 0xffffffff, 0x100, 0x7b99, 0x1fe, 0x3, 0x10000000000001], [0x100000001, 0x2, 0x40000000, 0x0, 0x2, 0x11000, 0x1], [0x100, 0x20000000000, 0x401, 0x3, 0xffffffffffeffffe, 0x8], [{0x0, 0x4, 0x0, 0x7d06}, {0xfffc, 0x2, 0x5, 0x2}, {0x0, 0x0, 0xfffffffe, 0x1}, {0x3, 0x7, 0x6, 0x80000001}, {0x0, 0x2, 0x0, 0x808}, {0xb, 0x2003, 0x3, 0x1fffffffffffffff}, {0x0, 0x0, 0x3}, {0x0, 0x962, 0x0, 0x200000000008}], {0x2000, 0x1000001, 0x5}, {0x0, 0x0, 0x73e8, 0x3}}}) r0 = kqueue() (async) r1 = shmget$private(0x0, 0x800000, 0x95a999646a72d594, &(0x7f0000005000/0x800000)=nil) r2 = shmat(r1, &(0x7f0000001000/0x3000)=nil, 0x2000) shmctl$IPC_RMID(r1, 0x0) (async) shmdt(r2) (async) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000180)="79f48026b8a3143cc0056b70a1dce008848d2e8f39e9ded6b0f9d4e54b6c42c4181b1ff92d67286961ef85059c9279c5b77222d555cfcf630e54097fd028362aaafd3a53d76a6a48d4a7272b08d5afb75baf93897401672d0733a6", 0x5b}], 0x1) (async) sysctl$hw(0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)="3ebf2da455551bbf7df3133ad39785daef8e2687677cc2df24c05b3ede8e20764ecddeff2443c62977ae1fe67fdf943dc8c8cd4c285c3369fd4e4ad72f0648b326079b9e17b71bc9e7668ee1eb0940c27b6ba950198e955e1fa4", 0x5a) (async) syz_emit_ethernet(0x126f, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]) sysctl$kern(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)="55f8f5782087a072a82ec35f78d14780f518", 0x12) (async) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) (async) r3 = socket(0x18, 0x2, 0x0) ioctl$FIONREAD(r3, 0xc1206949, &(0x7f00000001c0)) shmat(r1, &(0x7f0000ffa000/0x3000)=nil, 0x1000) kevent(r0, &(0x7f0000000040), 0x30, 0x0, 0x57d, 0x0) (async) r4 = kqueue() (async) r5 = syz_open_pts() readv(r5, &(0x7f00000014c0)=[{&(0x7f00000000c0)=""/47, 0x2f}], 0x1) (async) ioctl$TIOCSETA(r5, 0x802c7414, &(0x7f0000000080)={0x80, 0x0, 0xfbfffffe, 0x7f9, "d76c1f52000000ef000e00001d000000000400", 0x2}) (async) syz_open_pts() (async) ioctl$TIOCSETAF(r5, 0x802c7416, &(0x7f0000000000)={0xc6, 0x80000009, 0xfffffffe, 0x5, "bb000600180000ffffeb2d563fccc000", 0xffffffff, 0x8}) kevent(r4, &(0x7f0000000000), 0x3ff, 0x0, 0x8000800, 0x0) (async) clock_gettime(0x2, 0x0) (async) r6 = kqueue() r7 = kqueue() kevent(r7, &(0x7f00000000c0), 0x138, 0x0, 0xffffffff, 0x0) (async) nanosleep(&(0x7f00000000c0)={0x0, 0x5}, &(0x7f0000001080)) (async) kevent(r6, &(0x7f0000000040), 0xcbf, 0x0, 0x8, 0x0) (async) close(r0) pipe(&(0x7f0000000080)) 0s ago: executing program 7 (id=119): ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x7}, {0x4, 0x0, 0x0, 0x4}]}) r0 = socket(0x2, 0x2, 0x0) fcntl$setstatus(r0, 0x4, 0x4d523ac07cc2cfe4) connect$unix(r0, &(0x7f0000000000), 0x10) setsockopt$inet_opts(r0, 0x0, 0x1, &(0x7f0000000140)="9d534f62b817935a13ac64e071643e2eee4f2fc8af8bac2b05fc0ec72022c4b6f26878a3286f44695ccc6227221dfd19dab02e246f31c267391fe179807a88780c710467b182c1b1e51bae3e76089f525f3ebc06e68be6f03b25725600ee52ecf73aa117d04a4b684b1053764e25252bb5752a7902287e3a", 0x78) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$BIOCSETWF(r1, 0x80104277, &(0x7f0000000440)={0xa, &(0x7f00000003c0)=[{0x4, 0xf0, 0x7f, 0xd6b}, {0x622b, 0x9b, 0x2, 0xfffffffb}, {0x9, 0x5, 0x3, 0x65b}, {0x80, 0x9a, 0x1, 0xf}, {0x10, 0xab, 0x3, 0x2}, {0x6, 0x7f, 0x1}, {0x0, 0x7, 0x9, 0xfffffff5}, {0x2, 0x7, 0x8, 0x3}, {0x4, 0x7, 0x81, 0x9}, {0x1, 0x8, 0x7, 0x4c7}]}) r2 = msgget$private(0x0, 0x1ba) msgrcv(r2, 0x0, 0x0, 0x3, 0x1000) r3 = getpgrp() msgctl$IPC_SET(r2, 0x1, &(0x7f0000000040)={{0xfffffffa, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x99, 0xc65}, 0x4, 0x80, r3, 0x0, 0x9, 0x5, 0x2, 0x2}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x31}, 0x4, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0x37) syz_emit_ethernet(0x43d, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffffcefc93ba1fef86dd69529c37ffc8009600000000000000000000000000000000ff02000000000000000000000000000106000000000000000100000401070001000100000100000000000000000000008000907800010007da7b7ab9d3f6ee870a629e0d21ef12671180baaa8ddf6c14a1893b0f15e69c9e18d273a3bc51efa6d04c5c1af2d948a073639b28182abec874b8b17415b84f57e105fc0651fada843ed6e9261e2a94f7580e1602fa5f67b232f92ce7f79649b1e4d79ee11f673ba5d2e9afb54bf7466c227c3d35a021477f5740848fec4513"]) sysctl$hw(&(0x7f0000000080)={0x6, 0x18}, 0x2, &(0x7f0000000200)="4f3c00003c20223a0c3adc174644ea25c7853724c07520d7f766c293b9bac70cb5af69c629f8f2b66d75ad724cb07db4a839a45074cd650a1f8340efc1bc1c78b261a6adae", &(0x7f00000001c0)=0x45, 0x0, 0x0) fsync(r0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.86' (ED25519) to the list of known hosts. panic: pool_do_get: shmpl free list modified: page 0xfffffd806ce03000; item addr 0xfffffd806ce038c0; offset 0x40=0x695bef2c Stopped at db_enter+0x25: addq $0x8,%rsp TID PID UID PRFLAGS PFLAGS CPU COMMAND 5172 61288 32767 0x10 0 0 syz-executor * 75349 61288 32767 0x10 0x4000000 1K syz-executor db_enter() at db_enter+0x25 panic(ffffffff833a3708) at panic+0x1e5 pool_do_get(ffffffff839ff368,1,ffff80002a2f3e98) at pool_do_get+0x5df pool_get(ffffffff839ff368,1) at pool_get+0x162 shmget_allocate_segment(ffff800033fe3cb0,ffff80002a2f40f0,5d,ffff80002a2f4040) at shmget_allocate_segment+0x1af sys_shmget(ffff800033fe3cb0,ffff80002a2f40f0,ffff80002a2f4040) at sys_shmget+0x195 syscall(ffff80002a2f40f0) at syscall+0xb17 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x91459d09440, count: 7 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{1}> ddb{1}> set $lines = 0 ddb{1}> set $maxwidth = 0 ddb{1}> show panic *cpu1: pool_do_get: shmpl free list modified: page 0xfffffd806ce03000; item addr 0xfffffd806ce038c0; offset 0x40=0x695bef2c ddb{1}> trace db_enter() at db_enter+0x25 panic(ffffffff833a3708) at panic+0x1e5 pool_do_get(ffffffff839ff368,1,ffff80002a2f3e98) at pool_do_get+0x5df pool_get(ffffffff839ff368,1) at pool_get+0x162 shmget_allocate_segment(ffff800033fe3cb0,ffff80002a2f40f0,5d,ffff80002a2f4040) at shmget_allocate_segment+0x1af sys_shmget(ffff800033fe3cb0,ffff80002a2f40f0,ffff80002a2f4040) at sys_shmget+0x195 syscall(ffff80002a2f40f0) at syscall+0xb17 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x91459d09440, count: -8 ddb{1}> show registers rdi 0 rsi 0x1 rbp 0xffff80002a2f3cc0 rbx 0xffff8000299dee07 rdx 0xffff8000015801c0 rcx 0xffff800033fe3cb0 rax 0xffff8000299ddff0 r8 0x101010101010101 r9 0x8080808080808080 r10 0xc477b93462e5270a r11 0xc6a3c264a73ad5d7 r12 0xffff8000299dec08 r13 0 r14 0 r15 0x1 rip 0xffffffff817d67d5 db_enter+0x25 cs 0x8 rflags 0x246 rsp 0xffff80002a2f3cb0 ss 0x10 db_enter+0x25: addq $0x8,%rsp ddb{1}> show proc PROC (syz-executor) tid=75349 pid=61288 tcnt=3 stat=onproc flags process=10 proc=4000000 runpri=32, usrpri=79, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff800033fe2a88,0xffff800033fe2d30 process=0xffff80003a806b70 user=0xffff80002a2ef000, vmspace=0xfffffd806cc1db90 estcpu=29, cpticks=3, pctcpu=0.0, user=0, sys=3, intr=0 ddb{1}> ps PID TID PPID UID S FLAGS WAIT COMMAND 61288 5172 91948 32767 7 0x10 syz-executor *61288 75349 91948 32767 7 0x4000010 syz-executor 61288 150154 91948 32767 3 0x4000090 fsleep syz-executor 41146 105154 92989 32767 3 0x90 nanoslp syz-executor 41146 437423 92989 32767 3 0x4000090 kqsel syz-executor 41146 125860 92989 32767 3 0x4000090 fsleep syz-executor 21800 410935 14530 32767 3 0x90 nanoslp syz-executor 21800 379932 14530 32767 3 0x4000090 msgwait syz-executor 21800 451780 14530 32767 3 0x4000090 fsleep syz-executor 54037 221783 74064 0 3 0x100082 sbwait ndp 74064 214560 45827 0 3 0x10008a sigsusp sh 61631 14014 7594 32767 3 0x90 piperd syz-executor 91948 31099 69721 32767 3 0x90 nanoslp syz-executor 14530 458727 27753 32767 3 0x90 nanoslp syz-executor 70948 94040 8581 32767 3 0x90 piperd syz-executor 92989 503783 66660 32767 3 0x90 nanoslp syz-executor 28085 504686 68012 32767 3 0x90 piperd syz-executor 45827 455927 96479 0 3 0x80 wait syz-executor 27753 270128 18446 0 3 0x82 wait syz-executor 7594 470848 18446 0 3 0x82 wait syz-executor 69721 42986 18446 0 3 0x82 wait syz-executor 8581 254540 18446 0 3 0x82 wait syz-executor 66660 418181 18446 0 3 0x82 wait syz-executor 96479 266817 18446 0 3 0x82 wait syz-executor 68012 417164 18446 0 3 0x82 wait syz-executor 18446 270515 14540 0 3 0x82 nanoslp syz-executor 14540 276151 6026 0 3 0x10008a sigsusp ksh 6026 22736 9355 0 3 0x98 kqread sshd-session 9355 486642 74116 0 3 0x92 kqread sshd-session 72308 480839 1 0 3 0x100083 ttyin getty 74116 108579 1 0 3 0x88 kqread sshd 43273 137300 90944 73 3 0x1100090 kqread syslogd 90944 468970 1 0 3 0x100082 sbwait syslogd 51126 431808 1 0 3 0x100080 kqread resolvd 51067 167378 82896 77 3 0x100092 kqread dhcpleased 8171 455633 82896 77 3 0x100092 kqread dhcpleased 82896 327965 1 0 3 0x80 kqread dhcpleased 9815 480204 0 0 3 0x14200 bored smr 31903 147853 0 0 3 0x14200 pgzero zerothread 3350 393970 0 0 3 0x14200 aiodoned aiodoned 39908 314075 0 0 3 0x14200 syncer update 60395 481228 0 0 3 0x14200 cleaner cleaner 78143 153452 0 0 3 0x14200 reaper reaper 38827 192265 0 0 3 0x14200 pgdaemon pagedaemon 36328 512591 0 0 3 0x14200 bored viomb 41380 422181 0 0 3 0x40014200 acpi0 acpi0 83857 455878 0 0 3 0x40014200 idle1 35304 431371 0 0 3 0x14200 bored softnet1 90131 153767 0 0 2 0x14200 softnet0 14130 146615 0 0 3 0x14200 bored systqmp 42379 482945 0 0 3 0x14200 bored systq 61927 235804 0 0 3 0x14200 tmoslp softclockmp 36809 51894 0 0 3 0x40014200 tmoslp softclock 82014 317840 0 0 3 0x40014200 idle0 1 397765 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb{1}> show all locks CPU 1: exclusive mutex shmpl r = 0 (0xffffffff839ff380) #0 witness_lock+0x5f1 #1 mtx_enter+0x4b4 #2 pool_get+0x124 #3 shmget_allocate_segment+0x1af #4 sys_shmget+0x195 #5 syscall+0xb17 #6 Xsyscall+0x128 Process 61288 (syz-executor) thread 0xffff800033fe3cb0 (75349) exclusive kernel_lock &kernel_lock r = 0 (0xffffffff83a03bc8) #0 witness_lock+0x5f1 #1 syscall+0xaf4 #2 Xsyscall+0x128 exclusive mutex shmpl r = 0 (0xffffffff839ff380) #0 witness_lock+0x5f1 #1 mtx_enter+0x4b4 #2 pool_get+0x124 #3 shmget_allocate_segment+0x1af #4 sys_shmget+0x195 #5 syscall+0xb17 #6 Xsyscall+0x128 ddb{1}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 11050 12016K 12034K 166960K 12144 0 pcb 17 12K 12K 166960K 17 0 rtable 217 6K 7K 166960K 359 0 pf 29 16K 16K 166960K 31 0 ifaddr 38 6K 7K 166960K 44 0 ifgroup 46 2K 2K 166960K 50 0 sysctl 1 1K 9K 166960K 7 0 counters 68 36K 37K 166960K 70 0 ioctlops 0 0K 2K 166960K 32 0 iov 0 0K 12K 166960K 6 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1335 84K 84K 166960K 1512 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 5K 166960K 5 0 VM map 2 1K 1K 166960K 2 0 sem 8 0K 0K 166960K 9 0 dirhash 12 2K 2K 166960K 18 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 21 77K 125K 166960K 308 0 sigio 0 0K 0K 166960K 7 0 proc 58 99K 163K 166960K 493 0 subproc 63 3K 4K 166960K 189 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 22 0 in_multi 88 6K 7K 166960K 105 0 ether_multi 1 0K 0K 166960K 1 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 79 360K 360K 166960K 79 0 exec 0 0K 1K 166960K 435 0 fusefs mount 1 32K 32K 166960K 1 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 230 169K 187K 166960K 4200 0 UVM aobj 10 2K 3K 166960K 11 0 pinsyscall 43 86K 114K 166960K 1356 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 2 0K 0K 166960K 19 0 NDP 10 0K 2K 166960K 27 0 temp 35 8667K 8731K 166960K 4500 0 kqueue 13 20K 24K 166960K 42 0 SYN cache 2 16K 16K 166960K 2 0 ddb{1}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 26 0 0 1 0 1 1 0 8 0 rtpcb 120 43 0 39 1 0 1 1 0 8 0 rtentry 176 113 0 13 6 0 6 6 0 8 1 unpcb 144 102 0 87 1 0 1 1 0 8 0 syncache 336 6 0 6 1 0 1 1 0 8 1 tcpqe 32 3 0 3 1 0 1 1 0 8 1 tcpcb 736 54 0 47 2 1 1 2 0 8 0 arp 136 18 0 2 1 0 1 1 0 8 0 ipq 40 1 0 0 1 0 1 1 0 8 0 ipqe 40 2 0 1 1 0 1 1 0 8 0 inpcb 328 173 0 162 2 0 2 2 0 8 0 ip6q 72 1 0 1 1 0 1 1 0 8 1 ip6af 40 2 0 2 1 0 1 1 0 8 1 nd6 152 26 0 4 1 0 1 1 0 8 0 kcovpl 48 21 0 14 1 0 1 1 0 8 0 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 456 0 46 29 2 27 29 0 8 0 art_table 40 457 0 46 5 0 5 5 0 8 0 art_node 32 113 0 22 1 0 1 1 0 8 0 semupl 112 1 0 1 1 0 1 1 0 8 1 semapl 112 7 0 1 1 0 1 1 0 8 0 shmpl 112 8 0 1 1 0 1 1 0 8 0 pool(0xffffffff839ff368:shmpl): page inconsistency: page 0xfffffd806ce03000; 27 on list, 7 missing, 35 items per page dirhash 1024 21 0 4 3 0 3 3 0 8 0 dino2pl 256 1767 0 246 96 0 96 96 0 8 0 ffsino 296 1767 0 246 118 0 118 118 0 8 0 nchpl 144 2109 0 414 64 0 64 64 0 8 0 vnodes 216 1965 0 0 110 0 110 110 0 8 0 namei 1024 6393 0 6393 1 0 1 1 0 8 1 percpumem 16 50 0 1 1 0 1 1 0 8 0 kstatmem 264 24 0 2 2 0 2 2 0 8 0 scxspl 216 6746 0 6746 3 2 1 2 1 8 1 plimitpl 152 85 0 62 2 0 2 2 0 8 1 sigapl 424 564 0 515 7 0 7 7 0 8 0 knotepl 120 318 0 0 10 0 10 10 0 8 0 kqueuepl 224 54 0 44 1 0 1 1 0 8 0 pipepl 344 173 0 145 3 0 3 3 0 8 0 fdescpl 528 548 0 515 4 0 4 4 0 8 0 filepl 160 2354 0 2149 11 1 10 11 0 8 0 lockfpl 104 38 0 36 1 0 1 1 0 8 0 lockfspl 48 17 0 15 1 0 1 1 0 8 0 sessionpl 144 36 0 21 1 0 1 1 0 8 0 pgrppl 48 59 0 37 1 0 1 1 0 8 0 ucredpl 104 369 0 352 1 0 1 1 0 8 0 zombiepl 144 515 0 515 1 0 1 1 0 8 1 processpl 1232 564 0 515 5 0 5 5 0 8 0 procpl 664 778 0 723 6 0 6 6 0 8 0 sockpl 752 320 0 290 5 1 4 5 0 8 0 mcl64k 65536 3 0 0 1 0 1 1 0 8 0 mcl8k 8192 2 0 0 1 0 1 1 0 8 0 mcl4k 4096 122 0 0 16 0 16 16 0 8 0 mcl2k2 2112 1 0 0 1 0 1 1 0 8 0 mcl2k 2048 31 0 0 5 1 4 5 0 8 0 mtagpl 96 2 0 0 1 0 1 1 0 8 0 mbufpl 256 1208 0 0 76 0 76 76 0 8 0 bufpl 280 2392 0 119 163 0 163 163 0 8 0 anonpl 32 8879 0 0 72 0 72 72 0 246 0 amapchunkpl 152 12607 0 12178 25 1 24 25 0 158 3 amappl16 200 2394 0 2375 15 5 10 13 0 8 8 amappl15 192 34 0 34 1 1 0 1 0 8 0 amappl14 184 14 0 14 2 2 0 1 0 8 0 amappl13 176 399 0 397 1 0 1 1 0 8 0 amappl12 168 878 0 836 3 0 3 3 0 8 0 amappl11 160 6 0 6 1 1 0 1 0 8 0 amappl10 152 45 0 35 1 0 1 1 0 8 0 amappl9 144 297 0 297 1 1 0 1 0 8 0 amappl8 136 17 0 16 1 0 1 1 0 8 0 amappl7 128 87 0 86 1 0 1 1 0 8 0 amappl6 120 301 0 288 1 0 1 1 0 8 0 amappl5 112 97 0 90 1 0 1 1 0 8 0 amappl4 104 372 0 345 1 0 1 1 0 8 0 amappl3 96 1937 0 1860 3 0 3 3 0 8 0 amappl2 88 677 0 604 2 0 2 2 0 8 0 amappl1 80 9913 0 9355 14 0 14 14 0 8 0 amappl 88 3480 0 3328 5 0 5 5 0 92 0 uvmvnodes 80 97 0 0 2 0 2 2 0 8 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 10 0 1 1 0 1 1 0 8 0 uaddrrnd 24 548 0 515 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 548 0 515 1 0 1 1 0 8 0 vmmpekpl 168 6383 0 6335 3 0 3 3 0 8 0 vmmpepl 168 43558 0 41717 98 3 95 98 0 357 5 vmsppl 488 547 0 515 7 1 6 6 0 8 0 rwobjpl 80 15355 0 14432 25 0 25 25 0 8 1 pdppl 4096 1103 0 1030 115 34 81 97 0 8 8 pvpl 32 17582 0 0 142 0 142 142 0 265 0 pmappl 256 547 0 515 4 1 3 3 0 8 0 extentpl 40 45 0 27 1 0 1 1 0 8 0 phpool 112 354 0 41 10 0 10 10 0 8 0 ddb{1}> machine ddbcpu 0 Stopped at x86_ipi_db+0x27: addq $0x8,%rsp x86_ipi_db(ffffffff83842ff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __mp_lock(ffffffff83a039c0) at __mp_lock+0x199 softintr_dispatch(0) at softintr_dispatch+0x125 dosoftint(0) at dosoftint+0x54 Xsoftclock() at Xsoftclock+0x27 end of kernel end trace frame: 0x7574551dacf0, count: 8 ddb{0}> trace x86_ipi_db(ffffffff83842ff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __mp_lock(ffffffff83a039c0) at __mp_lock+0x199 softintr_dispatch(0) at softintr_dispatch+0x125 dosoftint(0) at dosoftint+0x54 Xsoftclock() at Xsoftclock+0x27 end of kernel end trace frame: 0x7574551dacf0, count: -7 ddb{0}> machine ddbcpu 1 Stopped at db_enter+0x25: addq $0x8,%rsp db_enter() at db_enter+0x25 panic(ffffffff833a3708) at panic+0x1e5 pool_do_get(ffffffff839ff368,1,ffff80002a2f3e98) at pool_do_get+0x5df pool_get(ffffffff839ff368,1) at pool_get+0x162 shmget_allocate_segment(ffff800033fe3cb0,ffff80002a2f40f0,5d,ffff80002a2f4040) at shmget_allocate_segment+0x1af sys_shmget(ffff800033fe3cb0,ffff80002a2f40f0,ffff80002a2f4040) at sys_shmget+0x195 syscall(ffff80002a2f40f0) at syscall+0xb17 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x91459d09440, count: 7 ddb{1}> trace db_enter() at db_enter+0x25 panic(ffffffff833a3708) at panic+0x1e5 pool_do_get(ffffffff839ff368,1,ffff80002a2f3e98) at pool_do_get+0x5df pool_get(ffffffff839ff368,1) at pool_get+0x162 shmget_allocate_segment(ffff800033fe3cb0,ffff80002a2f40f0,5d,ffff80002a2f4040) at shmget_allocate_segment+0x1af sys_shmget(ffff800033fe3cb0,ffff80002a2f40f0,ffff80002a2f4040) at sys_shmget+0x195 syscall(ffff80002a2f40f0) at syscall+0xb17 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x91459d09440, count: -8