last executing test programs: 3.841280461s ago: executing program 5 (id=66): sysctl$net_inet_tcp(&(0x7f0000001540)={0x4, 0x2, 0x6, 0x13}, 0x4, &(0x7f0000001500), 0x0, 0x0, 0x0) r0 = msgget$private(0x0, 0x1ba) msgsnd(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="63a0342245470e6115bdca9b677cf9e36493624a9b54d734eafe2bacb0b8eb4297e80d6f4b36c47d537dff14035fc8400c324cb903773918623df5e66e3ee04a59b609e8e364a39a7b5f2bb7116be3c43a264b2e819044503dd958b4d8fad4e5a9bda1d88ce613983133b3fe62ee8edd12aa5a5c0d7365c79abe29e3de9dcc9ce5a0722faf9ab58977d49e8a8da4fdbec7deda9da3c36f0a57371c3897ebce699cbc1741b1757aa690991498325d794a9d406800c0c0ba545d322fac83397092146f77fcef5644f63d8cd876b67a4ca660b5ac714e74a743461a0729a2a62f440fd4dbbb"], 0x8, 0x800) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xa7210e10bc3c9def) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) pledge(0x0, &(0x7f00000000c0)='\x00') pledge(0x0, &(0x7f0000000400)='tty\x00\x00\x00\x00m\x87\xb3\xda\x85\xe2\x82\x90\x89,\x02\x00!\xb7\x9bp^|#\xcbhl\x97\xa3_\xbc\x04\x9d!\xd9\x9f\x9f\xb4\x96\x13\x12\xe0\r\xe7\xb9E\b\x00\x00\x00l\xaaY\xe1Q<\x19\xc0\xf6Yf\x9au^\xa0\xc9j\xdd-I\x01R\x00\x03\x00\x00\x00\xa6\x82aY\x1d\xd7\f>Y\x06\"\xad\xb6\x88_\xeb\at\x91\xd3\xbf\xea\xddt\xe0\bt\x06S,\xdbH\xa7ZK-\xaaw\xcet\x044\x01\xa9e\xe2e\xe9\xd0\x05\x86\x91IsC\xb9ul\xaeu\x94\x9b\xaf\x04\xc4\x03\"F\x8f\xd5\xe8\r\x8d\xa1\x00\xcc\xd7\xa0\xe1\xeb\xc1>\xbd\t\xc8\x15\v\xb0, \xee\xa4\xa6\xb9a\x01&\xadrj\xd5\xc26p\xa14\xe0\xbf\xa0\x1es\x01=\xdbd\xf0?=\x8afcJ\x8eYEn\xd4<\x00\xec\xe4^\x00\x00\x00\xca\x90\xfa\x98\xc9gty\xce\xab\xd2\xa1\x85E\xe4\xa9\xd5\xab\x83\xda?w\x83\xbc\xcf\xeaU\xc7\x83\x1d\x12+e\x1d\x1a\x9fd\x99H\x9e\x82\x10\xea\x05\xf8\xff\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\xa6\x8c\x05n\x83\x83\x12+\x16\xc1\x00\x04\x00\x00\x13:o\x0f\x1fB\xa4\x00wB\x92h\xde\xfal3\x88e\x04J\\\x00D\xae`\x8e\xadd\xa8;\xee\xc4K\xe8]\x84\x90\xb8d\xfb\x95\xb1\xe9\x1eL\xaa\xeci\x9d\xc9k\xe9L\xd6\x8c\"\x1c(x_\x80]\xadW\xd5\xa9\xaa\xe5\x90\x85\x16\xd1DV\x13\x01\xab\x01\xf0\x8f\x02\xc2\xc8\x9b\x03\x1f\xd7\xdbN\\\xc0\xcd?Pg\xd5q\x13\xbd \xfa\xab\xccJK\x11\\\x16~#P.\xc9K\x15r\x04\xd9Z;\xc0\x84Oze\x96\xe9\xc3\x93\xed\x94.\xc2\xa0\x1fU#\x96\xe6\xb6C\xfa\x03/\x8b\x0e2\xec\x96v\x9b/.\v\x9e\x80\x18e\xae.\xf4\x14KS`\x87\x8b4\t\x00\x87{\xa8@e\xbfe\xeb\xee\xa2b\x04\xdf\xe2\xc0\xf0FV\'m\xcbm\x80%\xfc\x9e\x9f\x87\x80A\xbe\xc2\x00\x00\x00\x00\x00\x006\x96\xbb\x9f\x00\x00\x00\x00\x00\x00\x00\x05\xfe\x82jz&\x90\xa7\xc4\xcd\xb0\b9G\xca8\xbd\xdd\xd9\xc9\x93a]q\xd2\x9b\a\x1e\xf8\xc3\"\xc8:\xb8$\x9f\'P\x17\xc5\xf1(O\xf4}\xfa\xf3Xa\trB-\xf2g\xe6Z\xd5F\xd2\x80\xe0\x99\"\xc12\xe8\b\xc58\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00,\x86A\xa4\xc9\x8c\xb0\'\xd8\xa2\x93\xaf\x1az\xe7\xd8\xa0\xd4\xc8\x990\x1ar\xf0\xff\x11\x89\xee\x01\x00z\xeaW\xd2\t\xf9\x04\xbd\xc0E\x04hx\x13;\xb8\xb5\xef\x99\x1d.&F\xf8z\xach\x9fG3m\xafj\x14\x17*{\xdf\xeeJ9\x04T\x8f\xf6\x8cTD\x19\x10X\x0fIx\xbde)\xe4)\x10Y\xc5z\xe8&\xa3\x93\xcb\xfe\xa5v\xffq\xed\vap\xaa\b\x04\xf8\xa0c\x00\x00\x00\x00\x00\x00\x00\x00ZF\x80V?\xb6j\xc0\x89\x17\x95\xc6\xa2BDG\xfd\x00\x1e\b\xad\xd2\a/\x87Nn\xf5|\xb6\x82\x99\x1bv(\xc0\xc0\x9c\xc8\x1b\x96\xb0J\xc1v7\xe528^A\x95\xac\xe1X\xe3\x91#?\x923\xa1\b\b\x81DR\xf9]e') msgctl$IPC_RMID(r0, 0x0) sysctl$net_inet_icmp(&(0x7f0000002600)={0x4, 0x2, 0x1, 0x5}, 0x4, &(0x7f0000000040)="cf262d62", &(0x7f00000026c0)=0x4, 0x0, 0x0) rename(&(0x7f00000012c0)='./file2\x00', &(0x7f0000000180)='./file1\x00') 3.835897072s ago: executing program 5 (id=70): r0 = socket(0x18, 0x2, 0x0) setsockopt(r0, 0x1000000000029, 0xa, &(0x7f00000002c0)="03000000", 0x4) setsockopt(r0, 0x1000000000029, 0x9, &(0x7f0000000000), 0x0) mmap(&(0x7f0000ff3000/0xb000)=nil, 0xb000, 0x1, 0x810, r0, 0xd1a) syz_emit_ethernet(0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa0800401b00480068000705589078ac1400bbe00000d29404010044207fa10000ffffac1402aa00000096ffa0e7ffffff00000002e00000010000000882051d04b80000004e214e2200089078864d10f30be6df869129372fc0f8f5a6ee3d1cdef58ad3296a116bf1fd4d"]) pwrite(0xffffffffffffffff, &(0x7f00000003c0)="00007c417f0bc44cb5ebab50f5e9c9280f0fc4082ac82244aa45d75a1ae10d85e0ee5c48ceec2696aa1983946ba61a3e65f29f21c75e85565c540cc080e985411a1b2ccd959793164fac745a96c836438245c939f262780a87fff26ac6ea2528e533af1024b010a398c22db0c63cf135dafec74fb75b9dc38211aa6ed5558f4b01155a2285bca3ea94f17fa2015585bbebf827652135596fd70be52e356437d7278e9b663adaa45130017238027f1a2bf6e36997179a57d3453b995d57943be25d", 0xffffffffffffff8e, 0x10) 3.626643838s ago: executing program 5 (id=72): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = semget$private(0x0, 0xe, 0x790) semctl$GETNCNT(r0, 0x2, 0x3, 0x0) mprotect(&(0x7f0000b0b000/0x2000)=nil, 0x2000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sysctl$hw(&(0x7f0000000280)={0x7, 0x4}, 0x2, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f000062a000/0x4000)=nil, 0x4000) utimes(0x0, &(0x7f0000000080)={{0x5, 0xc}, {0x1, 0x344ca849}}) mmap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x1011, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) semget$private(0x0, 0xe, 0x790) (async) semctl$GETNCNT(r0, 0x2, 0x3, 0x0) (async) mprotect(&(0x7f0000b0b000/0x2000)=nil, 0x2000, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) sysctl$hw(&(0x7f0000000280)={0x7, 0x4}, 0x2, 0x0, 0x0, 0x0, 0x0) (async) mlock(&(0x7f000062a000/0x4000)=nil, 0x4000) (async) utimes(0x0, &(0x7f0000000080)={{0x5, 0xc}, {0x1, 0x344ca849}}) (async) mmap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x1011, 0xffffffffffffffff, 0x0) (async) 3.416750023s ago: executing program 5 (id=78): syz_emit_ethernet(0x52, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6099cea6001c2c03cb697a653e336f000000500000000000ff0200000000000000000000000000011100002e"]) (async) syz_emit_ethernet(0x4e, &(0x7f0000000240)={@broadcast, @random="12263abc614e", [], {@ipv6={0x86dd, {0x0, 0x6, "f53200", 0x18, 0x2c, 0x3, @rand_addr="cb697a653e336f0000005000", @mcast2, {[], @icmpv6=@ndisc_ns}}}}}) r0 = socket(0x2, 0x8002, 0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) ioctl$VMM_IOC_RESETCPU(r1, 0x82405605, &(0x7f0000000140)={0x6, 0x9, {[0xd21, 0xcc7d, 0x3, 0x7, 0x100000000, 0x1, 0x0, 0xde, 0x7, 0x1, 0x7, 0x9, 0x3, 0xff, 0x100000001, 0xc, 0x3, 0x89], [0x6, 0x9, 0xba, 0x1, 0xa90, 0x2176, 0x0, 0x2, 0x4, 0x5], [0x6, 0xd3, 0xb, 0x9, 0x5, 0x8, 0x5], [0xe, 0x5, 0x6, 0x4, 0x0, 0x5], [{0xb, 0x80, 0x5, 0x6}, {0x1000, 0x14d, 0x5, 0x101}, {0x623, 0x8, 0x10, 0x8}, {0x5, 0x4b77, 0x6, 0xd47c}, {0x1c, 0x800, 0x7fffffff, 0x8b}, {0x12, 0xb, 0x2}, {0x9, 0xfffffffb, 0x1ff, 0x703c}, {0x800, 0xe9, 0xe7, 0xfff}], {0xfff9, 0x5, 0x4, 0x3}, {0x1000, 0x800, 0x5, 0x3}}}) closefrom(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="28000000ffff000001"], 0x28}, 0x0) (async) recvmsg(r2, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000009c0)=""/81, 0x51}, 0x1800) 3.329885205s ago: executing program 5 (id=80): pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) r3 = open$dir(&(0x7f0000000040)='./file0\x00', 0x20000, 0x2) sendto$unix(0xffffffffffffffff, &(0x7f00000000c0)="b10005030000040005000000070000003300080000a11800fef96ec0c72fd3357ae30200004e3039d2d236acf20b7804be3816499104000000882b297be1aa0500000051e2f0ad09000000000000009b672f4d335c223e7d0c032bfa896443a42118000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b1257af", 0x84, 0x0, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setown(r4, 0x6, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r5 = socket(0x18, 0x1, 0x0) getsockopt$sock_cred(r5, 0xffff, 0x1024, &(0x7f0000000140)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0xc) kill(0x0, 0xf) r8 = fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) closefrom(r8) r9 = openat$pf(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) kevent(r2, &(0x7f0000000100)=[{{r1}, 0xfffffffffffffffd, 0x4, 0x80, 0xf, 0x9}, {{r3}, 0xa, 0x7e, 0x20000000, 0x7, 0x81}, {{r2}, 0xfffffffffffffffd, 0x0, 0x40000000, 0x0, 0x80000000}, {{r8}, 0xfffffffffffffff9, 0xb0d6ef194d7a635b, 0x40, 0x1, 0x5}, {{r2}, 0xfffffffffffffff7, 0xbe, 0x4, 0x3, 0xa}, {{r1}, 0xfffffffffffffff7, 0x41, 0x1, 0x82000000, 0x200000009}, {{r0}, 0xfffffffffffffff8, 0x2, 0x8, 0x3, 0x80000000}, {{r1}, 0xfffffffffffffff8, 0x2b, 0x2, 0x5c94, 0x3}], 0x4, &(0x7f0000000280)=[{{r9}, 0xfffffffffffffffa, 0x80, 0x2, 0xfff, 0x6}, {{r0}, 0xfffffffffffffffd, 0x44, 0xd000001b, 0x7, 0xfffffffffffffffe}, {{r1}, 0x7fffffffffffffff, 0x50, 0x4, 0x8000000000000001, 0xf00}, {{r8}, 0xfffffffffffffff6, 0xea, 0x80, 0x3, 0x7}, {{r0}, 0xfffffffffffffff8, 0x12, 0x40, 0x1, 0x5}, {{r0}, 0xfffffffffffffff6, 0x4, 0x1, 0x6, 0x8}], 0x6, &(0x7f0000000340)={0x6f, 0xbec}) select(0x40, &(0x7f00000016c0)={0xf99, 0x80000001, 0x7fffffffffffffff, 0xb, 0x6, 0x4, 0x0, 0x4aa}, 0x0, 0x0, 0x0) r10 = semget$private(0x0, 0x3, 0x4) r11 = geteuid() getresgid(0x0, 0x0, &(0x7f0000000240)=0x0) getresgid(0x0, 0x0, &(0x7f0000000340)=0x0) setregid(r12, r13) semctl$IPC_SET(r10, 0x0, 0x1, &(0x7f0000000380)={{r11, r13, r6, r7, 0x109, 0x100, 0x0, 0x0, 0x80000000}, 0x0, 0xf, 0x0, 0x0, 0x4, 0x0, 0x7c0}) read(r2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xa7210e10bc3c9def) r14 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x80, 0xbaf3819aeb3e8fc0) rmdir(&(0x7f0000000180)='./file1\x00') fchdir(r14) mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) r15 = open$dir(&(0x7f0000000440)='.\x00', 0x0, 0xc4) fcntl$lock(r15, 0x9, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffd, 0x1000300000001}) sysctl$hw(&(0x7f0000000040)={0x6, 0x14}, 0x2, &(0x7f0000000080), 0x0, 0x0, 0x0) 3.328229868s ago: executing program 6 (id=81): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x10, 0x2, 0x3}, 0x10) listen(r0, 0xfffffffa) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x3d, 0x3c, 0x2066, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x5, @local={0xac, 0x14, 0x0}}, @tcp={{0x3, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x8200, 0x0, 0xfffc, {[@md5sig={0x13, 0x12, "8094d3555ee04e56ede729d2fc7bad30"}, @sack_perm={0x4, 0x2}]}}}}}}}) r1 = getpgrp() syz_emit_ethernet(0x3e, &(0x7f0000000480)=ANY=[@ANYBLOB="ffffffffffff94ea09066dbd86dd60db834400082c00fe8000000001000000000000000000bbff0200000000000000000000000000014e209089"]) fcntl$setown(r0, 0x6, r1) 3.29318748s ago: executing program 3 (id=82): shutdown(0xffffffffffffffff, 0x0) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x100000000000000, 0x10040100000003}}) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff"]) setsockopt(0xffffffffffffffff, 0x1000000000029, 0xa, &(0x7f00000001c0)="03000000", 0x4) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) chmod(&(0x7f0000000140)='./file0\x00', 0x3ea) ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x0, 0x0, {[0xfffffbfffffffffe, 0x0, 0x8, 0x100200000, 0x3, 0x7, 0xdf61, 0xfffffffffffffffe, 0x0, 0x2f01, 0x93, 0x3, 0xffffffffffffffff, 0x200000000002, 0xf, 0x6, 0xfffffffffffffffe, 0x400000000100], [0xfffffffffffffffe, 0x9, 0xfffffffffffffffd, 0x525, 0x5e, 0x200000000207b98, 0x80000000000001fe, 0x0, 0x0, 0x9], [0x100000001, 0x8000, 0x3ffffffe, 0x6, 0x8001, 0x11000, 0xffffffff00000000], [0x104, 0x1fffffffffb, 0x84, 0x1, 0xfffffffffffffffe, 0x1], [{0x0, 0x0, 0xfffffffa, 0x7d02}, {0x1, 0x22, 0x5, 0xfffffffffffffff9}, {0x4, 0x0, 0xfffffffe, 0x80}, {0x3, 0x0, 0x5, 0xffffffffffffffff}, {0x0, 0x5, 0x7f, 0x8}, {0xfffd, 0x9, 0x9, 0x2000000000000002}, {0x0, 0x0, 0xfffffff9}, {0x0, 0x100, 0x0, 0x8}], {0x1, 0x81, 0x1, 0x3}, {0xfbfe, 0x4, 0x6d9, 0x3}}}) sysctl$net_inet_ip(&(0x7f00000000c0)={0x4, 0x2, 0x0, 0x13}, 0x4, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x2, 0x9e) ioctl$FIONREAD(r0, 0x4004667f, &(0x7f0000000080)) readv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000280)=""/47, 0x2f}], 0x1) sysctl$kern(&(0x7f0000000140)={0x1, 0x29}, 0x2, 0x0, 0x0, 0x0, 0x0) sysctl$vm(&(0x7f0000000000)={0x2, 0x7}, 0x2, 0x0, 0x0, 0x0, 0x0) r1 = socket(0x18, 0x2, 0x0) openat$tty(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0xc2, 0x9) unveil(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='c\x00') unveil(&(0x7f0000000140)='./file0/file0/..\x00', &(0x7f00000001c0)='w\x00') mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) unveil(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000300)='x\x00') sendmsg$unix(r1, &(0x7f0000000040)={&(0x7f0000000240)=@file={0x0, 0x1}, 0x2, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="14"], 0x18, 0x401}, 0x0) mkdir(&(0x7f0000000040)='./file2\x00', 0xc1) mkdir(&(0x7f0000000300)='./file2/file0\x00', 0xc2) rename(&(0x7f0000000000)='./file2/file0\x00', &(0x7f0000000080)='./file0\x00') ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000380)={0x1, 0x0, &(0x7f0000000340)=[0x0]}) r2 = socket(0x18, 0x2, 0x0) getsockopt$sock_int(r2, 0xffff, 0x1021, 0x0, 0x0) setsockopt(0xffffffffffffffff, 0x1000000029, 0xd, &(0x7f0000000000), 0x14) 3.29261624s ago: executing program 5 (id=83): sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x404, &(0x7f0000000000)={0x10, 0x2, 0x1, 0xe0000001}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) r0 = socket(0x2, 0x2, 0x0) connect$unix(r0, &(0x7f0000000000), 0x10) (async) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xca605601, &(0x7f0000000540)={0x10, 0xffffffff, [{&(0x7f0000520000/0x4000)=nil, &(0x7f000049b000/0x1000)=nil, 0x2}, {&(0x7f000025f000/0x3000)=nil, &(0x7f0000316000/0x3000)=nil, 0x1}, {&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000117000/0x1000)=nil, 0xead}, {&(0x7f0000158000/0x4000)=nil, &(0x7f0000645000/0x4000)=nil}, {&(0x7f0000798000/0x1000)=nil, &(0x7f0000637000/0x1000)=nil, 0x8}, {&(0x7f000025f000/0x1000)=nil, &(0x7f00006eb000/0x4000)=nil, 0x2}, {&(0x7f0000098000/0x1000)=nil, &(0x7f0000502000/0x3000)=nil}, {&(0x7f0000387000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x1}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f000048c000/0x3000)=nil, 0xd}, {&(0x7f00003b0000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x3875}, {&(0x7f00001b3000/0x3000)=nil, &(0x7f0000717000/0x1000)=nil, 0x1}, {&(0x7f000002e000/0x1000)=nil, &(0x7f00000e9000/0x3000)=nil, 0x4}, {&(0x7f0000031000/0x2000)=nil, &(0x7f00002ea000/0x3000)=nil, 0x9}, {&(0x7f0000365000/0x2000)=nil, &(0x7f00001aa000/0x3000)=nil, 0x3}, {&(0x7f0000693000/0x2000)=nil, &(0x7f000036a000/0x3000)=nil, 0x2}, {&(0x7f000025a000/0x4000)=nil, &(0x7f000075f000/0x2000)=nil, 0xffffffffffffffff}], './file0\x00', 0x10, 0x7, 0x3, 0x75, [0x8, 0x9, 0x4, 0xffff, 0x8, 0x9, 0x3, 0x1000, 0xfffffff7, 0x8, 0x100000, 0x8000, 0xd, 0x6, 0xfddd, 0x8, 0xfffffff7, 0x8001, 0x3, 0x2, 0x7fff, 0x2, 0x0, 0x7, 0x0, 0xbc42, 0x6, 0x8, 0x81, 0x7, 0xffffffff, 0x9, 0x8001, 0x80, 0x7fffffff, 0x4, 0x7fff, 0x3, 0x5, 0x1, 0xa, 0xb, 0x6, 0x6, 0x5, 0x3c, 0x0, 0xfffffff8, 0xd8b, 0x6, 0x3, 0x6, 0x3f45, 0x10001, 0xfff, 0x1ea3, 0xc, 0x4, 0x81, 0x7fffffff, 0x8, 0xfffffffa, 0x10, 0x0, 0x3, 0x0, 0x2, 0x4, 0x81, 0x9, 0xa1a, 0x6, 0x8, 0x3, 0x9, 0x8, 0x7fff, 0x1, 0x86b, 0x2, 0x101, 0x7f, 0x1ff, 0x1000, 0xfffffffb, 0xc4c, 0xda, 0x3, 0x4, 0x5, 0x0, 0xe6, 0x9, 0x1, 0xff, 0x6, 0x1f, 0x4, 0x2a02, 0x5, 0xac1c, 0x0, 0xce, 0x8, 0xb, 0x3, 0x1, 0x80000000, 0xff, 0x100, 0x4, 0x3, 0x9, 0x1, 0x9, 0x1, 0xb89b, 0x1, 0x3, 0x8001, 0x3, 0x0, 0x80, 0x0, 0x5, 0xfffffffa, 0x1, 0x3, 0x95d5, 0xfffffff8, 0xfffffffa, 0x2, 0x9, 0x40, 0x100, 0xb, 0x2, 0x8, 0x0, 0x2de, 0x2, 0x5, 0x9, 0x0, 0x6, 0x2, 0xfffffbff, 0x86, 0x8, 0x7fff, 0xb379, 0x10, 0x9, 0x7, 0x1, 0x80, 0xffff, 0x95ce, 0x2, 0xffffffff, 0x2, 0x10, 0x5, 0x0, 0x1000, 0x36d, 0x8, 0x3, 0x93c5, 0x6, 0x8, 0xffff, 0x8, 0x0, 0x3, 0x9, 0x4, 0x4, 0x80000000, 0x6, 0x6, 0x0, 0xffffff01, 0x3, 0x9, 0x3, 0x3, 0x9, 0x6, 0x7, 0x3, 0x4f, 0x3fb, 0x8, 0x9, 0x64dd, 0x0, 0x8, 0x7, 0x7, 0xe, 0x6bd3, 0xfb24, 0x4, 0x200, 0x9353, 0x8, 0x7fff, 0x101, 0xfffffffb, 0xfffffffe, 0x80000001, 0xe8, 0x2, 0xffff, 0x8001, 0x1, 0x35d, 0xfa, 0xc, 0x3c19, 0xb2, 0x5, 0x0, 0xe, 0x2, 0x9611, 0x5, 0xfffffff8, 0x0, 0x5, 0x8000, 0xfffffffd, 0x4, 0x400, 0x1, 0x5, 0x7, 0x1000, 0x7, 0x800, 0x1, 0x8, 0xe9, 0xe, 0x6, 0x80000001, 0x5, 0x4, 0xf, 0x0, 0x1, 0x6, 0x40, 0x3, 0x80000000, 0x4, 0x10001, 0x6, 0x5, 0x10001, 0xffff, 0x10001, 0xffff, 0xfffffffc, 0x1, 0x8, 0x1, 0x5, 0x9, 0x5, 0x8, 0xffffef8b, 0xfffffffa, 0x0, 0xb6e8, 0xfffffff9, 0x40, 0x1e, 0x4, 0x0, 0x80, 0xaa69, 0xd, 0xfffff33e, 0x5, 0x6, 0xfff, 0x8, 0x3, 0x80, 0x5, 0xfffffff5, 0x9, 0x5, 0x5, 0x200, 0x1, 0x1, 0x53, 0x5, 0x40, 0x5, 0x8, 0x9, 0x9, 0xffff8000, 0x3, 0x9, 0x8, 0x0, 0x5, 0xff, 0x400, 0x7f, 0x8, 0x4, 0x6, 0xe4, 0xf488, 0x7, 0x600, 0xd63, 0x100010, 0x200, 0x6df2, 0x2, 0x7, 0x6, 0x5, 0x5, 0x8, 0x7ff, 0x4, 0x8, 0x9, 0xe35, 0x6, 0xfff80000, 0x1, 0x3, 0x7, 0xa1ce, 0x9, 0x2, 0x7, 0x0, 0xffffffff, 0x0, 0x6, 0x7, 0xe, 0x7, 0x7, 0x2, 0x40, 0x4a, 0x40, 0x7fff, 0x75df93ed, 0x100, 0x4, 0x3ff, 0xe3, 0xfad, 0x1, 0x101, 0x9, 0xd, 0x3ff, 0x557, 0x8, 0x7, 0x9, 0x3, 0xfffffff1, 0x8, 0xcc38, 0x0, 0x4, 0x6, 0x0, 0x8, 0xfff, 0x1, 0x6, 0x8, 0x15, 0x5, 0x7, 0xa, 0x400, 0x0, 0x5, 0x0, 0x100, 0x641, 0xdb, 0x1, 0x2, 0x9, 0x8, 0xe, 0x1, 0x3, 0x8, 0x2, 0xe7, 0x1, 0x0, 0xd, 0x1, 0x80000000, 0x1, 0x3, 0x5, 0xe29, 0xa0e3, 0x8, 0x401, 0x4, 0x4, 0x9, 0x31a, 0x4, 0x7fffffff, 0x4, 0xff, 0x6, 0x0, 0x7, 0x8, 0x80, 0x5, 0x981, 0x425, 0x263, 0x4c90, 0x3, 0x8, 0xf1d4, 0x0, 0x6, 0x1, 0x7, 0xf007, 0x5, 0x0, 0x1ce726b4, 0x219c302a, 0x8, 0x9, 0x9, 0x3, 0xa6, 0xfffffffe, 0x7, 0xb, 0x100, 0x8001, 0x4, 0x4, 0x80000000, 0x6, 0x6, 0x2, 0x3, 0x6, 0xffffff2f, 0x26a82e, 0x7, 0x2, 0x8, 0x8, 0x3, 0x80000001, 0x1, 0x10, 0x8, 0x1, 0x400, 0x9, 0x3, 0xad6, 0xac4f, 0xaa08, 0x4, 0x1, 0x7fffffff, 0x8, 0x9, 0xb07b, 0x3, 0x5d, 0xfffffff8, 0x8, 0x80000000, 0x1, 0x3, 0x4, 0x7fffffff, 0xffffffff, 0x1, 0x1, 0xfff, 0x6, 0x0, 0x8, 0x3, 0x2, 0xe, 0x1]}) (async, rerun: 32) write(r0, &(0x7f0000000440)="14bdfa5d1d34e2fecb0020433b07b7f0e3aec430d2cb3799339a346f737850550700000095b7688ad4c4e1dd5489e7bafc58d3e5823757ae8b630719ef187ccad995f13dbe19a6dd4e6902bd8297b0799b426aabe9fad9db6996571c6d9f8b09d542c2148aa42be940970fe88d34d8f99afe7e782023740000000000800000010000000000000000000036d698af38942d3f2320e7d4fb9d111b702be8dc7bac90f17e563cbd0609c598f0148be2ca25d8b2e87f9791f8bf441559b253953f163b37d58fcee4", 0x819) (rerun: 32) 3.283520687s ago: executing program 32 (id=83): sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x404, &(0x7f0000000000)={0x10, 0x2, 0x1, 0xe0000001}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) r0 = socket(0x2, 0x2, 0x0) connect$unix(r0, &(0x7f0000000000), 0x10) (async) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xca605601, &(0x7f0000000540)={0x10, 0xffffffff, [{&(0x7f0000520000/0x4000)=nil, &(0x7f000049b000/0x1000)=nil, 0x2}, {&(0x7f000025f000/0x3000)=nil, &(0x7f0000316000/0x3000)=nil, 0x1}, {&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000117000/0x1000)=nil, 0xead}, {&(0x7f0000158000/0x4000)=nil, &(0x7f0000645000/0x4000)=nil}, {&(0x7f0000798000/0x1000)=nil, &(0x7f0000637000/0x1000)=nil, 0x8}, {&(0x7f000025f000/0x1000)=nil, &(0x7f00006eb000/0x4000)=nil, 0x2}, {&(0x7f0000098000/0x1000)=nil, &(0x7f0000502000/0x3000)=nil}, {&(0x7f0000387000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x1}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f000048c000/0x3000)=nil, 0xd}, {&(0x7f00003b0000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x3875}, {&(0x7f00001b3000/0x3000)=nil, &(0x7f0000717000/0x1000)=nil, 0x1}, {&(0x7f000002e000/0x1000)=nil, &(0x7f00000e9000/0x3000)=nil, 0x4}, {&(0x7f0000031000/0x2000)=nil, &(0x7f00002ea000/0x3000)=nil, 0x9}, {&(0x7f0000365000/0x2000)=nil, &(0x7f00001aa000/0x3000)=nil, 0x3}, {&(0x7f0000693000/0x2000)=nil, &(0x7f000036a000/0x3000)=nil, 0x2}, {&(0x7f000025a000/0x4000)=nil, &(0x7f000075f000/0x2000)=nil, 0xffffffffffffffff}], './file0\x00', 0x10, 0x7, 0x3, 0x75, [0x8, 0x9, 0x4, 0xffff, 0x8, 0x9, 0x3, 0x1000, 0xfffffff7, 0x8, 0x100000, 0x8000, 0xd, 0x6, 0xfddd, 0x8, 0xfffffff7, 0x8001, 0x3, 0x2, 0x7fff, 0x2, 0x0, 0x7, 0x0, 0xbc42, 0x6, 0x8, 0x81, 0x7, 0xffffffff, 0x9, 0x8001, 0x80, 0x7fffffff, 0x4, 0x7fff, 0x3, 0x5, 0x1, 0xa, 0xb, 0x6, 0x6, 0x5, 0x3c, 0x0, 0xfffffff8, 0xd8b, 0x6, 0x3, 0x6, 0x3f45, 0x10001, 0xfff, 0x1ea3, 0xc, 0x4, 0x81, 0x7fffffff, 0x8, 0xfffffffa, 0x10, 0x0, 0x3, 0x0, 0x2, 0x4, 0x81, 0x9, 0xa1a, 0x6, 0x8, 0x3, 0x9, 0x8, 0x7fff, 0x1, 0x86b, 0x2, 0x101, 0x7f, 0x1ff, 0x1000, 0xfffffffb, 0xc4c, 0xda, 0x3, 0x4, 0x5, 0x0, 0xe6, 0x9, 0x1, 0xff, 0x6, 0x1f, 0x4, 0x2a02, 0x5, 0xac1c, 0x0, 0xce, 0x8, 0xb, 0x3, 0x1, 0x80000000, 0xff, 0x100, 0x4, 0x3, 0x9, 0x1, 0x9, 0x1, 0xb89b, 0x1, 0x3, 0x8001, 0x3, 0x0, 0x80, 0x0, 0x5, 0xfffffffa, 0x1, 0x3, 0x95d5, 0xfffffff8, 0xfffffffa, 0x2, 0x9, 0x40, 0x100, 0xb, 0x2, 0x8, 0x0, 0x2de, 0x2, 0x5, 0x9, 0x0, 0x6, 0x2, 0xfffffbff, 0x86, 0x8, 0x7fff, 0xb379, 0x10, 0x9, 0x7, 0x1, 0x80, 0xffff, 0x95ce, 0x2, 0xffffffff, 0x2, 0x10, 0x5, 0x0, 0x1000, 0x36d, 0x8, 0x3, 0x93c5, 0x6, 0x8, 0xffff, 0x8, 0x0, 0x3, 0x9, 0x4, 0x4, 0x80000000, 0x6, 0x6, 0x0, 0xffffff01, 0x3, 0x9, 0x3, 0x3, 0x9, 0x6, 0x7, 0x3, 0x4f, 0x3fb, 0x8, 0x9, 0x64dd, 0x0, 0x8, 0x7, 0x7, 0xe, 0x6bd3, 0xfb24, 0x4, 0x200, 0x9353, 0x8, 0x7fff, 0x101, 0xfffffffb, 0xfffffffe, 0x80000001, 0xe8, 0x2, 0xffff, 0x8001, 0x1, 0x35d, 0xfa, 0xc, 0x3c19, 0xb2, 0x5, 0x0, 0xe, 0x2, 0x9611, 0x5, 0xfffffff8, 0x0, 0x5, 0x8000, 0xfffffffd, 0x4, 0x400, 0x1, 0x5, 0x7, 0x1000, 0x7, 0x800, 0x1, 0x8, 0xe9, 0xe, 0x6, 0x80000001, 0x5, 0x4, 0xf, 0x0, 0x1, 0x6, 0x40, 0x3, 0x80000000, 0x4, 0x10001, 0x6, 0x5, 0x10001, 0xffff, 0x10001, 0xffff, 0xfffffffc, 0x1, 0x8, 0x1, 0x5, 0x9, 0x5, 0x8, 0xffffef8b, 0xfffffffa, 0x0, 0xb6e8, 0xfffffff9, 0x40, 0x1e, 0x4, 0x0, 0x80, 0xaa69, 0xd, 0xfffff33e, 0x5, 0x6, 0xfff, 0x8, 0x3, 0x80, 0x5, 0xfffffff5, 0x9, 0x5, 0x5, 0x200, 0x1, 0x1, 0x53, 0x5, 0x40, 0x5, 0x8, 0x9, 0x9, 0xffff8000, 0x3, 0x9, 0x8, 0x0, 0x5, 0xff, 0x400, 0x7f, 0x8, 0x4, 0x6, 0xe4, 0xf488, 0x7, 0x600, 0xd63, 0x100010, 0x200, 0x6df2, 0x2, 0x7, 0x6, 0x5, 0x5, 0x8, 0x7ff, 0x4, 0x8, 0x9, 0xe35, 0x6, 0xfff80000, 0x1, 0x3, 0x7, 0xa1ce, 0x9, 0x2, 0x7, 0x0, 0xffffffff, 0x0, 0x6, 0x7, 0xe, 0x7, 0x7, 0x2, 0x40, 0x4a, 0x40, 0x7fff, 0x75df93ed, 0x100, 0x4, 0x3ff, 0xe3, 0xfad, 0x1, 0x101, 0x9, 0xd, 0x3ff, 0x557, 0x8, 0x7, 0x9, 0x3, 0xfffffff1, 0x8, 0xcc38, 0x0, 0x4, 0x6, 0x0, 0x8, 0xfff, 0x1, 0x6, 0x8, 0x15, 0x5, 0x7, 0xa, 0x400, 0x0, 0x5, 0x0, 0x100, 0x641, 0xdb, 0x1, 0x2, 0x9, 0x8, 0xe, 0x1, 0x3, 0x8, 0x2, 0xe7, 0x1, 0x0, 0xd, 0x1, 0x80000000, 0x1, 0x3, 0x5, 0xe29, 0xa0e3, 0x8, 0x401, 0x4, 0x4, 0x9, 0x31a, 0x4, 0x7fffffff, 0x4, 0xff, 0x6, 0x0, 0x7, 0x8, 0x80, 0x5, 0x981, 0x425, 0x263, 0x4c90, 0x3, 0x8, 0xf1d4, 0x0, 0x6, 0x1, 0x7, 0xf007, 0x5, 0x0, 0x1ce726b4, 0x219c302a, 0x8, 0x9, 0x9, 0x3, 0xa6, 0xfffffffe, 0x7, 0xb, 0x100, 0x8001, 0x4, 0x4, 0x80000000, 0x6, 0x6, 0x2, 0x3, 0x6, 0xffffff2f, 0x26a82e, 0x7, 0x2, 0x8, 0x8, 0x3, 0x80000001, 0x1, 0x10, 0x8, 0x1, 0x400, 0x9, 0x3, 0xad6, 0xac4f, 0xaa08, 0x4, 0x1, 0x7fffffff, 0x8, 0x9, 0xb07b, 0x3, 0x5d, 0xfffffff8, 0x8, 0x80000000, 0x1, 0x3, 0x4, 0x7fffffff, 0xffffffff, 0x1, 0x1, 0xfff, 0x6, 0x0, 0x8, 0x3, 0x2, 0xe, 0x1]}) (async, rerun: 32) write(r0, &(0x7f0000000440)="14bdfa5d1d34e2fecb0020433b07b7f0e3aec430d2cb3799339a346f737850550700000095b7688ad4c4e1dd5489e7bafc58d3e5823757ae8b630719ef187ccad995f13dbe19a6dd4e6902bd8297b0799b426aabe9fad9db6996571c6d9f8b09d542c2148aa42be940970fe88d34d8f99afe7e782023740000000000800000010000000000000000000036d698af38942d3f2320e7d4fb9d111b702be8dc7bac90f17e563cbd0609c598f0148be2ca25d8b2e87f9791f8bf441559b253953f163b37d58fcee4", 0x819) (rerun: 32) 3.278145093s ago: executing program 6 (id=84): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r0, &(0x7f0000001940)={{0x0, 0x0, 0x0, 0x0, 0x0}}, 0x38, 0x40c) setitimer(0x1, &(0x7f0000001a80)={{0xffffffff}, {0x8d, 0x200}}, &(0x7f0000001ac0)) r2 = kqueue() kevent(r2, &(0x7f0000000040)=[{{r2}, 0xfffffffffffffffa, 0x33, 0x20000008, 0xc, 0x4}], 0x1, 0x0, 0x5, 0x0) kill(0x0, 0x3) recvmsg(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/111, 0x6f}], 0x1, 0x0}, 0x0) 3.227092912s ago: executing program 2 (id=87): r0 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) closefrom(r0) mprotect(&(0x7f000002a000/0x3000)=nil, 0x3000, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000080)={&(0x7f0000000000)="fc8c5acdc23a80b032cb8959ff82ec5046e71718becf821937047bf011d70f3b6e837c69a2104f8130e99ec4d1e6db82180eea52fc00e491cca0718430f0deba23f3288a0d55309d984eed7ea252a74d6e66dafcaeb214fc94e6960fa96e4613dde111f30e27bf9c22", 0x69}) socketpair$unix(0x1, 0x2, 0x0, 0x0) 3.22315216s ago: executing program 3 (id=90): ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0xffffff00, 0x8000000, {[0xfffffbeffffffffb, 0x0, 0x4787, 0x10001002, 0xb7c6, 0xfffefffffffffffc, 0x6, 0x20000008000, 0x0, 0x4, 0x1, 0x3, 0xfffffffffffbffff, 0x9, 0x2, 0x632c, 0xffff, 0x100000001], [0xfffffffffffffffe, 0x80000001, 0xfffffffffffffffd, 0x2, 0x4, 0x7b98, 0x6, 0x0, 0xfffffffffffffffe], [0x5ad8, 0x5, 0x40000000, 0x0, 0xfffffffffffffffc, 0x6, 0xfffffffffffffff8], [0x100, 0x20000000000, 0xfffffffffffffffc, 0x8000000100000000, 0xffffffffffffffff, 0x3], [{0x0, 0x4, 0x0, 0x7d06}, {0xfffc, 0x2, 0x5, 0x10}, {0x0, 0x0, 0xfffffffe, 0x1000000000081}, {0x7, 0x0, 0x3, 0xffffffffffffffff}, {0x0, 0x80000001, 0x0, 0x8}, {0xfffe, 0x2006, 0x8, 0x2000000000000000}, {0x6b7, 0x0, 0x1}, {0x8008, 0x965, 0x0, 0x8}], {0x2, 0x0, 0x8}, {0x21, 0x6, 0x100000b0, 0x7ffffffffffffffc}}}) unveil(0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0xe8, 0x0) r0 = kqueue() ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, &(0x7f0000000100)={0x1ffd, 0x0, {[0xfffffbeffffffffb, 0x0, 0x4787, 0x1002, 0x8001, 0xfffffffffffffffc, 0x2, 0x8000, 0x0, 0x4, 0x0, 0x3, 0xfffffffffffbffff, 0x400000002000000, 0x0, 0x632e, 0xffff, 0xce5], [0xfffffffffffffffe, 0x80000001, 0xfffffffffffffffd, 0x2, 0xffff, 0x7b98, 0x6, 0x0, 0xfffffffffffffffe], [0x5ad8, 0x2, 0x40000000, 0x0, 0xffffffffffffffff, 0x6, 0xfffffffffffffffa], [0x100, 0x20000000000, 0xfffffffffffffffc, 0x8000000100000000, 0xffffffffffffffff, 0x3], [{0x0, 0x4, 0x0, 0x7d06}, {0xfffc, 0x2, 0x5, 0x10}, {0x0, 0x0, 0xfffffffe, 0x1000000000081}, {0x3, 0x100, 0x3, 0xffffffffffffffff}, {0x0, 0x5cc2, 0x3, 0x8}, {0xfffe, 0x2006, 0x8, 0x2000000000000000}, {0x6b7, 0x0, 0x1}, {0x8008, 0x965, 0x0, 0x8}], {0x2, 0x6, 0x8}, {0x21, 0x7, 0x100000b0, 0x8000000000000000}}}) kevent(r0, &(0x7f0000000080), 0xe4a, 0x0, 0xa9fa, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0xe8, 0x0) r2 = getpid() r3 = fcntl$dupfd(r1, 0x3, 0xffffffffffffffff) fcntl$setown(r3, 0x6, r2) fcntl$setown(r3, 0x6, r2) close(r0) unveil(&(0x7f0000000080)='./file1\x00', 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) select(0x1, &(0x7f00000000c0)={0x4, 0xe9, 0x8, 0x81, 0x2, 0x4, 0x8000000000000000, 0xb}, &(0x7f0000000140)={0x1, 0xffffffffffffcca3, 0x101, 0x40000000003, 0x5, 0x7, 0x0, 0x6}, &(0x7f0000000100)={0x4, 0x8000000000000000, 0x3d, 0x100, 0x9, 0xda0, 0x5, 0xe}, 0x0) accept$inet(r3, &(0x7f00000003c0), &(0x7f0000000400)=0x10) shmget$private(0x0, 0x1000, 0x698, &(0x7f0000ffd000/0x1000)=nil) pselect(0x40, &(0x7f0000000000)={0xea, 0x9, 0x5, 0x4, 0x4, 0x1, 0x2, 0x5}, &(0x7f0000000040)={0x681, 0xe240000, 0x9, 0x6, 0x7f, 0x4, 0xf, 0x2}, &(0x7f0000000080)={0xffffffffffffffff, 0x8, 0x1, 0x3, 0x3, 0x7fffffff, 0x2, 0x6}, &(0x7f0000000340), &(0x7f0000000380)={0x2000000}) 3.169735249s ago: executing program 7 (id=91): r0 = semget$private(0x0, 0x4, 0x0) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000400)={{0x0, 0x0, 0x0, 0x0, 0x1c8, 0x207e, 0x0, 0x0, 0x1}, 0x0, 0x103, 0x0, 0x0, 0x40000000000001, 0x0, 0x9}) fstatat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2) setuid(r1) semop(r0, &(0x7f0000000040)=[{0x0, 0xfffc, 0x1000}], 0x1) r2 = semget$private(0x0, 0xb, 0x19f) semop(r2, &(0x7f0000000080)=[{0x0, 0x7, 0x800}, {0x2, 0x8, 0x1800}, {0x1, 0x4, 0x1000}, {0x1, 0x4, 0x4798105b3b9404d}, {0x2, 0x0, 0x1800}], 0x5) semctl$SETALL(r0, 0x0, 0x9, &(0x7f0000000000)=[0x4]) 3.168504536s ago: executing program 0 (id=93): kevent(0xffffffffffffffff, &(0x7f0000000000)=[{{}, 0xfffffffffffffffc, 0xda, 0x13, 0x5, 0x1}], 0x0, 0x0, 0x0, 0x0) r0 = socket(0x18, 0x2, 0x0) closefrom(r0) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0xffff, 0xffff63df, 0x3, 0x2, 0x1, 0x3, 0x40, 0x10, [{0x5, 0x3, 0x6, 0x80000201}, {0x4, 0x8, 0xffffffff, 0xfff}, {0x1, 0xfffffffe, 0x6, 0x1}, {0x2, 0xdf, 0xf, 0x40}, {0x2, 0x7, 0xf11, 0x7}, {0x803, 0xffff, 0x80cf}, {0x1, 0x4, 0x0, 0x2}, {0x7, 0x1, 0xfffffff8, 0xfbffe2eb}, {0x8, 0xffe, 0x6, 0x20}, {0x3, 0x0, 0x5, 0x8bfd}, {0x8, 0x8000000, 0x8, 0x6}, {0x4, 0xc7cb, 0x800000, 0xa66}, {0x401, 0x10a, 0x6, 0xd}, {0x200003, 0xee2, 0x2, 0x6f5fc48f}, {0x81, 0x101, 0x3, 0x5}, {0xffffffff, 0x8003, 0x6, 0x69}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket(0x18, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xa7210e10bc3c9def) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x80, 0xbaf3819aeb3e8fc0) rmdir(&(0x7f0000000180)='./file1\x00') fchdir(r2) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0x1c, 0x18, 0x3, 0x800, "fe80000800fdff000000000200"}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) mkdir(&(0x7f0000000000)='./file2/file0\x00', 0xa3) setsockopt(r1, 0x1000000029, 0xc, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) setsockopt(r1, 0x1000000029, 0xc, &(0x7f0000000040)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) setsockopt(r0, 0x1000000000029, 0xc, &(0x7f0000000000), 0x14) 3.020895251s ago: executing program 2 (id=94): r0 = socket(0x2, 0x4001, 0x0) ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, &(0x7f0000000100)={0x1ffd, 0x0, {[0xfffffbeffffffffb, 0x0, 0x4787, 0x1002, 0x8001, 0xfffffffffffffffc, 0x2, 0x8002, 0x0, 0x4, 0x0, 0x3, 0xfffffffffffbfffc, 0x400000002000002, 0x0, 0x632e, 0xffff, 0xce5], [0xfffffffffffffffe, 0x80000001, 0xfffffffffffffffd, 0x2, 0xffff, 0x7b98, 0x6, 0x0, 0xfffffffffffffffe], [0x5ad8, 0x2, 0x40000000, 0x0, 0xffffffffffffffff, 0x6, 0xfffffffffffffffa], [0x5, 0x20000000000, 0xfffffffffffffffc, 0x8000000100000000, 0xffffffffffffffff, 0x3], [{0x0, 0x4, 0x0, 0x7d06}, {0xfffc, 0x2, 0x5, 0x10}, {0x0, 0x0, 0xfffffffe, 0x3ff}, {0x3, 0x100, 0x3, 0xffffffffffffffff}, {0x0, 0x5cc2, 0x3, 0x8}, {0xfffe, 0x2006, 0x8, 0x2000000000000000}, {0x6b7, 0x0, 0x1}, {0x8008, 0x965, 0x0, 0x8}], {0x2, 0x6, 0x8}, {0x21, 0x7, 0x100000b0, 0x8000000000000000}}}) r1 = kqueue() pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x4) ioctl$FIONREAD(r2, 0x4004667f, &(0x7f0000000180)) kevent(r1, 0x0, 0x0, 0x0, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x9, &(0x7f0000000140)={0x0, 0x0, 0xdffffffffffffff6, 0x1000100010008}) kevent(0xffffffffffffffff, &(0x7f0000000180)=[{{r1}, 0xffffffffffffffff, 0x1, 0x2, 0x7fff, 0x6}], 0xc, 0x0, 0xb, 0x0) kevent(r1, &(0x7f0000000000), 0x3ff, 0x0, 0x8000800, 0x0) close(0xffffffffffffffff) setsockopt$sock_linger(r0, 0xffff, 0x80, &(0x7f00000000c0)={0x8, 0x8d}, 0x8) syz_emit_ethernet(0x3b, &(0x7f0000000080)=ANY=[@ANYBLOB="b905f0ffffffaaaaaaaaaabb08004500002d0000000100009078ac1400bbffffdac64108cb6391327fbd0901ffff4e224e2300089078e3c4fc107f"]) syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @remote, [], {@ipv4={0x800, {{0x8, 0x4, 0x0, 0x0, 0x28, 0x0, 0x2000, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0x0}, @broadcast, {[@timestamp={0x44, 0xc, 0x5, 0x1, 0x0, [{[@multicast1], 0x81821028}]}]}}, @udp={{0x1, 0x2, 0x8}}}}}}) r3 = socket(0x2, 0x2, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x404, &(0x7f0000000000)={0x10, 0x2, 0x1, 0xe0000001}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) bind$inet(r3, &(0x7f0000000000)={0x10, 0x2, 0x3, 0xfffffff8}, 0x10) connect$unix(r3, &(0x7f0000000000)=@file={0x8}, 0x2) write(r3, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0xffff, 0x1023, &(0x7f0000000040), 0x4) recvmsg(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) 3.016231058s ago: executing program 7 (id=97): mkdir(&(0x7f0000000080)='./file0\x00', 0x0) chmod(&(0x7f0000000140)='./file0\x00', 0x3aa) mkfifo(&(0x7f0000000380)='./file0\x00', 0x30) mknod(&(0x7f00000003c0)='./file0\x00', 0x1000, 0x1001) r0 = open(&(0x7f0000000c00)='./file0\x00', 0x18000, 0x0) fchdir(r0) fchmod(r0, 0x21) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) getsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f00000000c0), &(0x7f00000001c0)=0x11) sysctl$kern(&(0x7f00000000c0)={0x1, 0x4e}, 0x3, &(0x7f0000000100)="71f95f84cf71b59c7afec37582", &(0x7f0000000080)=0x2000, 0x0, 0x37) rename(0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb5219f1000b913f1, 0x0) r3 = socket(0x6, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000040)={0x1c, 0x18, 0x1, 0x5, "00000000000000000000000000000001", 0x100000c}, 0x1c) connect$inet6(r3, &(0x7f0000000000)={0x1c, 0x18, 0x3, 0x6, '\x00\x00\x00\x00\x00\x00\x00\x00\"\x00\x00\x00\x00\x00\x00\b', 0x6}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendmsg$unix(r2, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x4) writev(r2, &(0x7f00000006c0)=[{&(0x7f0000000200)="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", 0x161}], 0x1) pwrite(r2, &(0x7f00000000c0)="a7", 0x1, 0x8008) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r4, 0x0, 0x200000000000c, &(0x7f0000000000)="ea00000100000000", 0x8) r5 = open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x186) r6 = kqueue() kevent(r6, &(0x7f0000000180)=[{{r0}, 0xfffffffffffffffb, 0x11, 0x6, 0xfffffffffffffffe, 0x4}, {{r5}, 0xffffffffffffffff, 0x4, 0xfffff, 0x5, 0x2}], 0x10010, 0x0, 0x80000001, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x8401, 0x0) r7 = socket$inet(0x2, 0x3, 0x5) accept4(r7, &(0x7f00000000c0)=@in6, &(0x7f0000000080)=0x1c, 0x4000) syz_open_pts() 2.677341843s ago: executing program 0 (id=100): r0 = open(&(0x7f0000000040)='./file0\x00', 0x200, 0x0) bind$unix(r0, 0x0, 0x0) r1 = socket(0x2, 0x2, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x2000000000000243, &(0x7f0000000100)}) ioctl$FIONREAD(r1, 0xc0106924, &(0x7f00000001c0)) mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x2, 0x1f) ioctl$FIONREAD(r2, 0xc020699e, &(0x7f0000000100)) ioctl$FIONREAD(r1, 0xc0206922, &(0x7f0000000100)) r3 = kqueue() mknod(&(0x7f00000000c0)='./file0\x00', 0x1ffa, 0x0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x5b24e0d6859e34c, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) dup2(r3, r4) write(r5, 0x0, 0x0) 2.558984904s ago: executing program 4 (id=101): sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x2, 0x0, 0x1c}, 0x4, 0x0, 0x0, 0x0, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x8001, 0x0, 0x0, 0x0, 0x0, 0xc5, 0x48e}, 0x5, 0x8, 0x0, 0x0, 0x100000002, 0x4000000000003, 0x20000000007f, 0x40000000000000}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sysctl$net_inet_tcp(&(0x7f0000000040)={0x4, 0x2, 0x6, 0x19}, 0x4, 0xfffffffffffffffe, &(0x7f0000000080)=0x42, 0x0, 0x0) 2.558717168s ago: executing program 4 (id=102): mprotect(&(0x7f00000bd000/0x1000)=nil, 0x1000, 0x1) (async) mprotect(&(0x7f00000bd000/0x1000)=nil, 0x1000, 0x1) syz_emit_ethernet(0x36, &(0x7f0000000000)={@broadcast, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x6, 0x65, 0x0, 0x4, 0x1, 0x0, @multicast1, @rand_addr=0x1e}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x3, 0x3, 0x41, 0x1, 0xfffe}}}}}) munlock(&(0x7f00000bd000/0x2000)=nil, 0x2000) 2.541966027s ago: executing program 4 (id=103): sysctl$kern(&(0x7f0000000040)={0x1, 0x3b}, 0x2, &(0x7f0000000000), 0x0, 0x0, 0x0) recvfrom$unix(0xffffffffffffffff, 0x0, 0x20, 0x1000, &(0x7f0000000440)=@abs={0xb, 0x1, 0x0, 0x1}, 0x8) r0 = open(&(0x7f0000000000)='./file0\x00', 0x9cab835cfdc52675, 0xa2) mknod(&(0x7f00000000c0)='./file0\x00', 0x1ffa, 0x0) sysctl$kern(0x0, 0x0, &(0x7f0000000600)="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", 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x2, 0x0) ioctl$FIONREAD(r1, 0xc0106924, &(0x7f00000001c0)) pwrite(r0, &(0x7f00000001c0)='M', 0x1, 0x4) sysctl$net_inet_ip(&(0x7f0000000100)={0x4, 0x2, 0x0, 0x12}, 0x4, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0xa812, r0, 0x0) execve(&(0x7f0000000180)='./file0\x00', &(0x7f0000000380)=[&(0x7f0000000280)='!{---&@@^\x00', &(0x7f00000002c0)='%([\'\x9f,#.\x8b\x00', &(0x7f0000000300)='/dev\xe3`\xa6/wsk', &(0x7f0000000340)='/dev/wskb$\x00'], &(0x7f0000000480)=[&(0x7f00000003c0)='\'l}}\xe9&\xfa(\x00']) ioctl$WSDISPLAYIO_DELFONT(r1, 0x8058574f, &(0x7f0000000200)={'./file0\x00', 0x4, 0x2, 0x5, 0x0, 0x6, 0xfffffffd, 0x6, 0x0, 0x2, 0x1, 0x7fff}) r2 = openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) fcntl$dupfd(r0, 0xa, r2) mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7949) socket(0x18, 0x5, 0x0) ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x0, 0xb3f, {[0xfffffbfffffffffb, 0x0, 0x8, 0x4, 0x6, 0x7, 0xdf60, 0xfffffffffffffffe, 0x0, 0x2f01, 0x93, 0x3, 0x1, 0x200000000002, 0xf, 0x4, 0xfffffffffffffffe, 0x400000000100], [0xfffffffffffffffe, 0x80000001, 0xfffffffffffffff9, 0x525, 0x5e, 0x200000000207b98, 0x80000000000001fe, 0x1, 0x0, 0x9], [0x100000001, 0x8000, 0x3ffffffe, 0x0, 0xb, 0x11000, 0xffffffff00000800], [0x104, 0x1fffffffffb, 0x7ffffffffffffffc, 0x100000000, 0xfffffffffffffffe, 0x1], [{0x0, 0x0, 0x2000000, 0x7d02}, {0xfffc, 0x22, 0x5, 0xfffffffffffffff9}, {0x4, 0x0, 0xfffffffe, 0x80}, {0x3, 0x4, 0x5, 0xffffffffffffffff}, {0x0, 0x2, 0x7f, 0x8}, {0x0, 0x7, 0x9, 0x2000000000000002}, {0x0, 0x2c, 0xfffffff9}, {0x0, 0x100, 0x0, 0x8}], {0x1, 0x5, 0x7, 0x1}, {0xfbfe, 0x3, 0x6d5, 0x2}}}) r3 = socket(0x18, 0x1, 0x0) mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) close(r3) open(&(0x7f00000000c0)='./file0\x00', 0x2, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) ioctl$FIONREAD(r3, 0xc020699c, &(0x7f00000001c0)) r4 = kqueue() kevent(r4, &(0x7f0000000000), 0x3ff, 0x0, 0x8000800, 0x0) connect$inet6(r1, &(0x7f0000000000)={0x1c, 0x18, 0x0, 0x7fd, "fecc3a8d9ac0b935f087e3223be400", 0x2}, 0x1c) sysctl$hw(&(0x7f0000000100)={0x7, 0xf}, 0x2, &(0x7f0000000140)='\x00d\x00Q', &(0x7f0000000000)=0x4, 0x0, 0x0) r5 = syz_open_pts() fcntl$lock(r5, 0x8, &(0x7f0000000080)={0x3, 0x0, 0xa, 0x100000001}) 2.194029527s ago: executing program 0 (id=104): r0 = socket(0x18, 0x1, 0x0) close(0x3) r1 = socket(0x18, 0x2, 0x0) setsockopt(r1, 0x1000000029, 0x2e, 0x0, 0x0) getsockopt(r0, 0x29, 0x2e, 0x0, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000040)=ANY=[@ANYBLOB="63e1a0395451000000000000810028019078ac1400aa1400000083037f0000209078000a000123cb2c9e7ed279c60000001f1b8000009bd37ba9b2a8c13f88167c51ca33ebc0060a0981"]) syz_emit_ethernet(0x5a, &(0x7f00000000c0)={@broadcast, @random="06303a82dd52", [], {@ipv4={0x800, {{0xc, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x10, 0x0, 0x11, 0x0, @rand_addr=0x4, @broadcast, {[@timestamp={0x44, 0x1c, 0xa, 0x0, 0x5, [{[], 0x80}, {[], 0xf}, {[], 0x3ff}, {[@remote={0xac, 0x14, 0x0}], 0x5}, {[], 0x1c6}]}]}}, @icmp=@time_exceeded={0xb, 0x1, 0x0, 0x0, 0xb, 0x0, {0x5, 0x4, 0x1, 0x2, 0x2, 0x68, 0x1, 0xed, 0x11, 0x61a, @broadcast}}}}}}) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6) 2.192885476s ago: executing program 1 (id=105): sendmmsg(0xffffffffffffffff, &(0x7f0000000200)={{&(0x7f00000000c0)=@in6={0x1c, 0x18, 0x2, 0xac, "ff010000000000000000000000000001", 0x6}, 0x1c, 0x0, 0x0, 0x0}}, 0x38, 0x4) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fcntl$lock(r0, 0x7607b6c2e60de5a5, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket(0x18, 0x2, 0x0) (async) r2 = socket(0x18, 0x2, 0x0) setsockopt(r2, 0x1000000000029, 0xa, &(0x7f0000000080)='\x00\x00\x00\x00', 0x4) r3 = dup2(r2, r1) sendmmsg(r3, &(0x7f0000000200)={{0x0, 0x0, 0x0, 0x0, 0x0}}, 0x38, 0x8) 2.192391784s ago: executing program 2 (id=106): pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0xfffc, 0xffff63df, 0x7, 0x2, 0x8, 0x3, 0x40, 0x10, [{0x5, 0x3, 0x6, 0x80000201}, {0x4, 0x8, 0xffffffff, 0xfff}, {0x1, 0xfffffffe, 0x6, 0x3}, {0x2, 0xdf, 0xf, 0x3c}, {0x1, 0x7, 0xf11, 0x7}, {0x800, 0xffff, 0x80cf}, {0x0, 0x3, 0xc5, 0x9}, {0x7, 0x1, 0xfffffff8, 0xf3ffe2eb}, {0x8, 0xfff, 0x6, 0x20}, {0x3, 0x0, 0x5, 0x8bfd}, {0x8, 0x8000000, 0x8, 0x7}, {0x4, 0xc7ce, 0x800000, 0xa66}, {0x401, 0x10a, 0x9, 0x3e}, {0x200003, 0xee2, 0x2, 0x6f5fc48f}, {0x81, 0xd54a, 0x3, 0x5}, {0xffffffff, 0x8003, 0x6, 0x869}]}) poll(&(0x7f0000000000)=[{r1, 0x80}, {0xffffffffffffff9c, 0x2}, {r0, 0x4}, {0xffffffffffffffff, 0x20}, {r0, 0x100}, {r1, 0x40}], 0x6, 0x400000) poll(&(0x7f0000000000), 0x35, 0x0) dup2(r0, r1) r2 = syz_open_pts() setsid() semget(0x1, 0x2, 0x220) r3 = msgget$private(0x0, 0x1ba) msgsnd(r3, &(0x7f0000000100)={0x3}, 0x8, 0x800) ioctl$TIOCSCTTY(r2, 0x20007461) openat$tty(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0x80000000, 0xffff63de, 0x2, 0x2, 0x8, 0x100003, 0x40, 0x10, [{0x5, 0x3, 0x775, 0x80000201}, {0x2, 0x8, 0x6, 0xfff}, {0x7, 0xfffffffe, 0x200a, 0x1}, {0x2, 0x7, 0xf}, {0xfffffffc, 0x7, 0xf11, 0x7}, {0x3, 0xffff, 0x80d2}, {0x2024, 0x1, 0x85, 0x5}, {0x0, 0x40009, 0xfffffff8, 0xfbffe2e9}, {0x8, 0xffa, 0x6, 0x7fff}, {0x0, 0xfffffff8, 0x400005, 0x8bfb}, {0xfffff0d1, 0x8000000, 0x8, 0x7}, {0x4, 0xc7cb, 0x3, 0x2}, {0x401, 0x106, 0x9, 0x40}, {0x200003, 0xee6, 0x2, 0x6f5fc48b}, {0x156d0b12, 0x5, 0x1, 0x5}, {0x9be2, 0x6, 0x6, 0x69}]}) poll(&(0x7f0000000000), 0x35, 0x0) poll(&(0x7f0000000000), 0x35, 0x0) getrusage(0xde753060a4ec4a4a, 0x0) 2.174284295s ago: executing program 3 (id=107): sendmmsg(0xffffffffffffffff, &(0x7f0000000200)={{&(0x7f00000000c0)=@in6={0x1c, 0x18, 0x2, 0xac, "ff010000000000000000000000000001", 0x3}, 0x1c, 0x0, 0x0, 0x0}}, 0x38, 0xe) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x10, 0x2, 0x3}, 0x10) listen(r0, 0x7fff) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x3d, 0x28, 0x65, 0x0, 0x0, 0x6, 0x0, @remote={0xac, 0x14, 0x0}, @local={0xac, 0x14, 0x0}}, @tcp={{0x3, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x8200, 0x0, 0xfffc}}}}}}) sysctl$net_inet_tcp(&(0x7f0000000000)={0x4, 0x2, 0x6, 0x15}, 0x4, 0x0, 0x0, 0x0, 0x0) semop(0x0, &(0x7f00000000c0)=[{0x4, 0x0, 0xc00}, {0x4, 0x2ff, 0x1800}], 0x2) sysctl$net_inet_tcp(0x0, 0x0, &(0x7f00000000c0)="9b180b", 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket(0x18, 0x1, 0x0) close(r1) socket(0x18, 0x2, 0x0) connect$unix(r1, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) sendto$inet(r1, 0x0, 0x0, 0x2, 0x0, 0x0) 2.148450867s ago: executing program 4 (id=108): ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r0 = socket(0x2, 0x5001, 0x0) ioctl$FIONREAD(r0, 0x80146950, &(0x7f00000001c0)) 2.144507118s ago: executing program 6 (id=109): r0 = socket(0x18, 0x2, 0x0) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x100000000000000, 0x10040000000001}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket(0x18, 0x2, 0x0) setsockopt(r1, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000100)={0x1c, 0x18, 0x0, 0xabec, "fe80ff04000100000001000000fe2300", 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x18, 0x3, 0x4000800, "feee0004210000000000000000000100", 0x802}, 0x1c) getpeername(r0, 0x0, &(0x7f0000000100)) 2.144223248s ago: executing program 7 (id=110): symlink(&(0x7f00000002c0)='./file0/file0/..\x00', &(0x7f0000000000)='./file1\x00') (async) symlink(&(0x7f00000002c0)='./file0/file0/..\x00', &(0x7f0000000000)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x100) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x100) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x10004) r1 = socket(0x18, 0x1, 0x0) mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) close(r1) open(&(0x7f00000000c0)='./file0\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000240)={&(0x7f0000000180)=[0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x4, 0xdededede}) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) ioctl$FIONREAD(r1, 0xc02069a5, &(0x7f00000001c0)) (async) ioctl$FIONREAD(r1, 0xc02069a5, &(0x7f00000001c0)) fchdir(r0) (async) fchdir(r0) rename(&(0x7f0000000100)='./file0/file0/..\x00', &(0x7f00000000c0)='./file1\x00') r2 = geteuid() getsockopt$SO_PEERCRED(r1, 0xffff, 0x1022, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0xc) chown(&(0x7f0000000040)='./file1\x00', r2, r3) (async) chown(&(0x7f0000000040)='./file1\x00', r2, r3) 2.143862423s ago: executing program 0 (id=111): r0 = syz_open_pts() flock(r0, 0x1) (async) fcntl$lock(r0, 0x8, &(0x7f0000000080)={0x0, 0x0, 0x300, 0x100000001}) (async) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x1, 0x2, 0x81, 0x6}) 2.143550755s ago: executing program 3 (id=112): r0 = socket$inet(0x2, 0x2, 0x0) r1 = dup(r0) setsockopt$inet_opts(r1, 0x0, 0x22, &(0x7f0000000040)="fd0cc085", 0x4) (async, rerun: 32) sendmsg(r1, &(0x7f00000003c0)={&(0x7f0000000380)=@in6={0x1c, 0x18, 0x2, 0x263, "046c4f79da306de4f1fef64e4836642c", 0x8004a}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000400)="3b128ef8450742bd", 0x8}], 0x1, 0x0}, 0xc) (rerun: 32) ioctl$WSMOUSEIO_GCALIBCOORDS(r1, 0x41205725, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}) (async, rerun: 32) r2 = socket(0x2, 0x1, 0x0) (rerun: 32) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x0, 0x0, 0x0, 0x0, 0x109, 0xff, 0x0, 0x0, 0x67}, 0xfffffffffffffff9, 0x8000000000001, 0x7, 0x7ffffefffffbffff, 0x5, 0x0, 0x0, 0x8, 0x0, 0x5, 0x0, 0x2}) (async) sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b1000504600000000000000007000000331c13fece38164991f7accf578dae53e60f20f50b0e6dc75f882b297be1aa5b236deb51e2f0ac3ebbc257699a5f139b672f4d335d223e7d029d6ba8af6300372821000000", 0x55, 0x41a, 0x0, 0x0) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x5) (async) r3 = socket(0x11, 0x3, 0x0) sendto$unix(r3, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x0, 0x0, 0x0) accept4(r2, 0x0, 0x0, 0xc000) semop(0xffffffffffffffff, 0x0, 0x0) (async) shutdown(r2, 0x2) 2.094252137s ago: executing program 8 (id=96): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket(0x18, 0x1, 0x0) setsockopt(r1, 0x1000000000029, 0x37, 0x0, 0x0) setsockopt$sock_linger(r0, 0xffff, 0x80, &(0x7f0000000000)={0x80000001, 0x4}, 0x8) bind$unix(r0, &(0x7f00000000c0)=@file={0xe, 0x1, './file0\x00'}, 0xa) listen(r0, 0x1) 1.525792023s ago: executing program 0 (id=113): open(&(0x7f0000000000)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf79e5) getresuid(0x0, &(0x7f0000000140)=0x0, 0x0) r1 = getegid() r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket(0x2, 0x8002, 0x0) r4 = fcntl$dupfd(r3, 0x2, 0xffffffffffffffff) closefrom(r4) connect$unix(r2, 0x0, 0x0) chown(&(0x7f0000000080)='./file0\x00', r0, r1) 1.521038431s ago: executing program 1 (id=114): socket$inet(0x2, 0x1, 0xff) (async) r0 = socket$inet(0x2, 0x1, 0xff) mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) open(&(0x7f0000000000)='./file0\x00', 0x80, 0x0) select(0x40, &(0x7f0000000040)={0xfffffffffffffffe, 0x9, 0x5, 0x8001, 0x0, 0x89, 0x800000000000005, 0xf}, 0x0, 0x0, 0x0) closefrom(r0) (async) closefrom(r0) 1.520322896s ago: executing program 2 (id=115): syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff8864"]) setrlimit(0x8, &(0x7f0000000980)={0xb, 0x52}) r0 = syz_open_pts() getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000800)={0x0, 0x0, 0x0}, &(0x7f0000000840)=0xc) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x5, {0x100000002, 0x10040000000001}}) sysctl$kern(&(0x7f0000000000)={0x1, 0x49}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sysctl$kern(&(0x7f0000000000)={0x1, 0x42}, 0x6, 0x0, 0x0, 0x0, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000380)={{0x0, 0x0, r2, r3, 0xa, 0x0, 0x6, 0x0, 0xffffffffffffffff}, 0x80000000, 0xfffffffffffffffd, 0x0, 0x80000000000000, 0xfffffffffffffffd, r1, 0x0, 0x4000000000, 0x0, 0x7, 0x0, 0x4}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r4 = socket(0x18, 0x2, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x44, 0x6, 0x0, 0xfffffffffffffffd}, 0x80000000, 0xfffffffffffffffd, 0x8, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, 0x1, 0x0, 0xbb9}) setsockopt(r4, 0x1000000000029, 0xc, &(0x7f0000000000), 0x14) r5 = socket(0x18, 0x5, 0x44) setsockopt(r5, 0x1000000000029, 0x40, 0x0, 0x0) r6 = socket(0x1, 0x3, 0x5b) setsockopt(r6, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0xff69) sysctl$ddb(&(0x7f0000000040)={0x9, 0x8}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sysctl$net_inet_tcp(&(0x7f0000000040)={0x4, 0x2, 0x6, 0x18}, 0x4, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000000)=ANY=[]) syz_emit_ethernet(0xe, &(0x7f00000000c0)=ANY=[@ANYBLOB="7fb6e79876ec7b136cac67328ebac268c8ca124186f834107ec19b2282df822b50eb7d35f6d9a5aa55d10adfb23d0afa616c5d53f23f2f0f915a6564a295883772f41ceb389d3100ec926823c626856678083246fe895a91b91d01a53e2bd582d9dc2dbf81733b903e94e49def706dbd4068638637c4a16a5d7f8421a02569ed806c4868861ef91b2c034acffffdf2aecbf5b2dc1948574c96a201c474eb3c8c02ed0621d9b87a7d0f5e58621a3b544287150275057bd0ee62ecb7701c975e91df79f530bb4864d8d34b2d58344c141acfe0598c8e01b3d3ce5860fe2ceea629", @ANYBLOB="c853797115da754b52c6e96a549c48ebee400f1165b280bc16ce9c9e43a7bc44795057e0ad5ba14591cfbb51384d9868188c2dc3a4032460b34a753f85ba7ef3056eb28379e330d61b636e144a8d3cf2f020094f7d17478d0e62ba8aabf6d684ad89ba2310dc6b2567e8fff417b94b248c67cd7a452ef816f0c5ba7e67df336a3ca9b2c3b003ed62f4698842772a581586f3dc7f39111216ad67f5b3d0cbf9e2182f94d02d", @ANYRES16=r6, @ANYRES16=r0, @ANYBLOB="e6197182ae3ccd8ab32ac8d4c95722a4f24ebda84c799a4c4156b4853be1a90e59a90408261aafbf7e3a02ef8ef8"]) r7 = open(&(0x7f0000000040)='./file1\x00', 0x1, 0x0) ioctl$FIONREAD(0xffffffffffffffff, 0xc028698b, &(0x7f0000000080)) close(r7) syz_open_pts() r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000000740), 0x40000, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000880), 0x1, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r8, 0xc02864c3, &(0x7f00000007c0)={&(0x7f00000003c0), 0x401, 0x0, 0xd, 0x0, 0x0, 0x5}) ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000280)={0x10, 0x1, 0x7, 0x3, "9cdc459bb7a5cfd62367e80000002f9e68cd3304", 0x102, 0x7ef}) 1.519399577s ago: executing program 3 (id=116): mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc0e99db6de761f86, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x100, 0x120) open(&(0x7f0000000040)='./file0\x00', 0x20000, 0x1b4) 1.519002353s ago: executing program 4 (id=117): r0 = socket(0x18, 0x4, 0x0) setsockopt(r0, 0x1000000029, 0x35, &(0x7f0000000040)="03000000", 0x4) r1 = open(&(0x7f0000000040)='./file0\x00', 0x800, 0x110) write(r1, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0x80000000, 0xffff63de, 0x7, 0x2, 0x8, 0x6, 0x40, 0x10, [{0x5, 0x3, 0x4c, 0x80000201}, {0x8, 0x6, 0x6, 0xfff}, {0x7, 0xfdfffffe, 0x7, 0xb}, {0x5, 0xdf, 0xf, 0xfffffffe}, {0x0, 0x7, 0xf11, 0xb}, {0x3, 0x7, 0x80cf, 0x1}, {0x3, 0x7fd, 0x100, 0x5}, {0x0, 0x40009, 0xfffffffb, 0xfbffe2e9}, {0x9b, 0xffe, 0x9, 0x7fff}, {0x3, 0xfffffff8, 0x5, 0x8bfd}, {0x0, 0x8000000, 0x44d2, 0x2}, {0x4, 0xc7ce, 0x800000, 0x5}, {0x401, 0x106, 0x92fb, 0x40}, {0x200003, 0x80000000, 0x9, 0x6f5fc48b}, {0x81, 0x0, 0x1001, 0x5}, {0x9be2, 0x8001, 0x5, 0x69}]}) poll(&(0x7f0000000000), 0x0, 0x3) munmap(&(0x7f000000e000/0x400000)=nil, 0x400000) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0xe8, 0x0) r3 = fcntl$dupfd(r2, 0x3, 0xffffffffffffffff) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x100000000000000, 0x10040100000003}}) ioctl$TIOCSETA(r3, 0x802c7414, &(0x7f00000001c0)={0xd65, 0x6, 0xfffffff7, 0x6, "2145720e579f0ebfa9bca3b02df389120e6656c4", 0x14a, 0x101}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r4 = socket(0x18, 0x2, 0x0) r5 = getpid() fcntl$lock(r1, 0x0, &(0x7f0000000180)={0x1, 0x2, 0x5, 0x43, r5}) msync(&(0x7f00000b7000/0x3000)=nil, 0x3000, 0x6) setsockopt(r4, 0x1000000029, 0xe, &(0x7f0000000200)="09ffcb0f0000000000080031fdf4d99a4e004159a10b61e66738fe68fb384ebbd63c0f3fef9c89951fb325a4bad9b4771befc7e8c54de87e95abfaf445ffc82165e1d9a40d7871c7682bbf00", 0x4c) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) unveil(&(0x7f0000000140)='./file0/file0/..\x00', &(0x7f00000004c0)='w\x00') open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) sendto(r4, 0x0, 0x0, 0x403, &(0x7f0000000040)=@in6={0x1c, 0x18, 0x1, 0x4, "00e9008010000000b2b200001800", 0xffffffc0}, 0x1c) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) r7 = semget$private(0x0, 0x4, 0x0) r8 = getuid() semctl$IPC_SET(r7, 0x0, 0x1, &(0x7f0000000400)={{0x0, 0x0, r8, 0x0, 0x129, 0x227e, 0x0, 0x0, 0x1}, 0x0, 0x103, 0x0, 0x0, 0x40000000000001, 0x0, 0xb}) semctl$GETNCNT(r7, 0xffffffffffffffff, 0x3, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x7011, r6, 0x40000) ioctl$FIONREAD(r3, 0xc0206921, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvfrom$unix(r9, &(0x7f0000000040)=""/24, 0x18, 0x4ac9fd991a4dc54e, 0x0, 0x0) 1.438821557s ago: executing program 6 (id=118): r0 = socket(0x18, 0x2, 0x0) setsockopt(r0, 0x1000000029, 0xd, &(0x7f0000000580), 0x0) r1 = socket(0x18, 0x2, 0x0) sysctl$net_inet_tcp(&(0x7f00000000c0)={0x4, 0x2, 0x6, 0x14}, 0x4, &(0x7f0000000000)="9b1809ff", &(0x7f0000000040)=0x4, 0x0, 0x0) sendmsg$unix(r1, &(0x7f0000000580)={&(0x7f0000000080)=@file={0x0, 0x1, './file0\x00'}, 0xa, 0x0, 0x0, &(0x7f0000000500)=[@rights={0x14, 0xffff, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}], 0x14, 0x1}, 0xa) socket(0x18, 0x2, 0x0) (async) setsockopt(r0, 0x1000000029, 0xd, &(0x7f0000000580), 0x0) (async) socket(0x18, 0x2, 0x0) (async) sysctl$net_inet_tcp(&(0x7f00000000c0)={0x4, 0x2, 0x6, 0x14}, 0x4, &(0x7f0000000000)="9b1809ff", &(0x7f0000000040)=0x4, 0x0, 0x0) (async) sendmsg$unix(r1, &(0x7f0000000580)={&(0x7f0000000080)=@file={0x0, 0x1, './file0\x00'}, 0xa, 0x0, 0x0, &(0x7f0000000500)=[@rights={0x14, 0xffff, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}], 0x14, 0x1}, 0xa) (async) 1.437727852s ago: executing program 7 (id=119): r0 = socket$inet(0x2, 0x1, 0x0) r1 = syz_open_pts() fcntl$lock(r1, 0x9, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x1000300000080}) fcntl$lock(r1, 0x9, &(0x7f0000000200)={0x2, 0x0, 0x1, 0x100000009}) r2 = socket$inet(0x2, 0x2, 0x0) ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, &(0x7f0000000100)={0x0, 0xb3f, {[0xfffffbfffffffffb, 0x80, 0x8, 0x100200001, 0x6, 0x7, 0x5, 0x4000003, 0x8, 0x2f00, 0x93, 0x3, 0x4, 0x200000000002, 0xfffffffffffffffd, 0x2, 0xfffffffffffffffe, 0x400000000120], [0xdfd, 0x80000001, 0xf800000000010000, 0x8, 0x20000000000005e, 0x200000000207b9d, 0x80000000000001fa, 0x0, 0x0, 0x9], [0x400100000001, 0x1, 0x3ffffffe, 0x10f, 0x6, 0x800011000, 0xffffffff00000000], [0x104, 0x1fffffffffb, 0x7ffffffffffffffc, 0x7d, 0xffffffffffffffff, 0x3], [{0x0, 0x0, 0x101, 0x7d05}, {0xfffc, 0x22, 0xefd, 0xfffffdfffffffff9}, {0x4, 0xa, 0xfffffffe, 0x80}, {0x3, 0xb7, 0x5, 0xfffffffffffffffb}, {0xfff7, 0x2, 0x7f, 0x4000008}, {0x0, 0x5, 0x9, 0x2000000000000002}, {0x0, 0x4000000, 0xfffffff9}, {0x0, 0x4, 0x0, 0x8}], {0x1, 0xfffffffb, 0x7, 0x200000003}, {0xde80, 0x1, 0x6d5}}}) setsockopt$inet_opts(r2, 0x0, 0x9, &(0x7f0000000240)="ea00000100000000", 0xc) sendto$inet(r2, 0x0, 0x0, 0xa, &(0x7f0000000380)={0x10, 0x2, 0x3, 0xffffffff}, 0x10) fcntl$lock(r1, 0x8, &(0x7f0000000080)={0x1, 0x0, 0x2, 0x100000003}) bind$inet(r0, &(0x7f0000000000)={0x10, 0x2, 0x3}, 0x10) r3 = socket(0x18, 0x2, 0x0) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc5005601, &(0x7f0000000000)={0x10, 0xffffffffffffffff, [{&(0x7f00001d0000/0x4000)=nil, &(0x7f0000663000/0x4000)=nil, 0xfffffffffffff801}, {&(0x7f00006ac000/0x4000)=nil, &(0x7f0000826000/0x4000)=nil, 0x8}, {&(0x7f0000060000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x4000}, {0x0, &(0x7f00007ae000/0x1000)=nil, 0x4bb6}, {0x0, &(0x7f0000ffb000/0x1000)=nil, 0x2}, {&(0x7f0000000000/0x2000)=nil, &(0x7f00001f5000/0x4000)=nil, 0x6}, {0x0, 0x0, 0xfffffffffffffffc}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x5}, {&(0x7f0000212000/0x1000)=nil, &(0x7f0000826000/0x1000)=nil, 0x9c}, {&(0x7f0000110000/0x2000)=nil, &(0x7f0000501000/0x1000)=nil}, {0x0, &(0x7f0000156000/0x1000)=nil, 0x1}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil}, {&(0x7f000005a000/0x4000)=nil, &(0x7f000005b000/0x1000)=nil, 0x4}, {&(0x7f00004c1000/0x2000)=nil, &(0x7f00001d1000/0x3000)=nil, 0x9bc0}, {&(0x7f00001cf000/0x4000)=nil, 0x0, 0xfffffffffffffffd}, {&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000358000/0x2000)=nil}], './file0\x00', 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xff, 0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3877, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x371, 0x0, 0x0, 0x1fffff, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x686, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xc000, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0xffffff6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8000, 0xd177, 0x0, 0x4, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffd]}) pipe2(&(0x7f0000000000), 0x10000) sysctl$kern(&(0x7f00000000c0)={0x1, 0x30}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) sysctl$hw(&(0x7f00000000c0)={0x7, 0x5}, 0x2, &(0x7f0000000040), &(0x7f0000000000), 0x0, 0x0) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff"]) setsockopt(r3, 0x1000000000029, 0x9, &(0x7f0000000040)="03000000", 0x4) openat$dri(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dri/renderD128\x00', 0x40032, 0x0) setsockopt(r3, 0x1000000029, 0xd, &(0x7f0000000000), 0x14) listen(r0, 0x7fff) syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x3d, 0x28, 0x67, 0x0, 0x0, 0x6, 0x0, @multicast1, @local={0xac, 0x14, 0x0}}, @tcp={{0x2, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x8200, 0x0, 0xfffc}}}}}}) syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x3d, 0x28, 0x67, 0x0, 0x0, 0x6, 0x0, @multicast1, @local={0xac, 0x14, 0x0}}, @tcp={{0x2, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x8200, 0x0, 0xfffc}}}}}}) 1.436139784s ago: executing program 0 (id=120): setrlimit(0x8, &(0x7f0000000980)={0xb, 0x54}) (async) r0 = syz_open_pts() close(r0) syz_open_pts() (async) mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0x1006, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x2, 0x0) (async) ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000040)={0x766b, 0x8, 0x7, 0xfffffb02, "9ddc4d80307eecfaffffffd7fc5b8196f2283f04", 0x400000b, 0x7}) (async) r1 = syz_open_pts() fchdir(r1) (async) ioctl$TIOCSETAF(r0, 0x802c7416, &(0x7f0000000000)={0x5, 0x5, 0x1, 0x80000001, "742db112ff8fb6f0be50135eac877fe2e25b2573", 0x3, 0x8}) (async) writev(r0, &(0x7f00000045c0)=[{&(0x7f0000002180)="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", 0xacf}], 0x1) 1.435594769s ago: executing program 1 (id=121): r0 = semget$private(0x0, 0x2, 0x84) semop(r0, &(0x7f0000000180)=[{0x1, 0x7, 0x1000}, {0x0, 0xfffe, 0x1000}, {0x0, 0x2, 0x1000}], 0x3) (async) semctl$SETVAL(r0, 0x0, 0x8, &(0x7f0000000100)=0x30f8) (async, rerun: 32) r1 = socket(0x24, 0x2, 0x0) (rerun: 32) getresgid(0x0, 0x0, &(0x7f0000000280)=0x0) setresgid(0xffffffffffffffff, r2, 0x0) socketpair(0x2, 0x5, 0x1, &(0x7f0000000000)={0xffffffffffffffff}) fstatat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2) (async) r5 = dup2(r1, r1) fstatat(r5, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4) mknod(&(0x7f00000001c0)='./file0\x00', 0x8000, 0x80000000) (async) fchown(r3, r4, r6) 1.428004391s ago: executing program 8 (id=96): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket(0x18, 0x1, 0x0) setsockopt(r1, 0x1000000000029, 0x37, 0x0, 0x0) setsockopt$sock_linger(r0, 0xffff, 0x80, &(0x7f0000000000)={0x80000001, 0x4}, 0x8) bind$unix(r0, &(0x7f00000000c0)=@file={0xe, 0x1, './file0\x00'}, 0xa) listen(r0, 0x1) 817.12965ms ago: executing program 1 (id=122): ioctl$BIOCSETWF(0xffffffffffffff9c, 0x80104277, &(0x7f0000000040)={0x2, &(0x7f00000000c0)=[{0x1ff, 0x3, 0x26}, {0x5, 0x0, 0x0, 0x4}]}) socket(0x18, 0x2, 0xf9) sysctl$kern(&(0x7f00000000c0)={0x1, 0x31}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sysctl$net_inet_tcp(&(0x7f00000000c0)={0x4, 0x2, 0x6, 0x9}, 0x4, 0x0, &(0x7f0000000040), 0x0, 0x0) ppoll(0x0, 0x54, 0xfffffffffffffffe, 0x0) sysctl$net_inet6_ip6(&(0x7f0000000000)={0x4, 0x18, 0x29, 0x2}, 0x4, 0x0, 0x0, 0x0, 0x0) 805.231719ms ago: executing program 2 (id=123): r0 = kqueue() kevent(r0, &(0x7f00000003c0)=[{{r0}, 0xfffffffffffffff6, 0x59, 0x40, 0x9, 0x3}, {{r0}, 0xfffffffffffffff6, 0x40, 0x40000000, 0x40010000e, 0xfffffffffffffffb}], 0x8a8a, 0x0, 0xbffffffd, 0x0) r1 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = syz_open_pts() openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) sendto$unix(0xffffffffffffffff, &(0x7f00000000c0)="b1000503", 0x4, 0x0, 0x0, 0x0) r3 = semget$private(0x0, 0x4, 0x0) semctl$IPC_SET(r3, 0x0, 0x1, &(0x7f0000000400)={{0x0, 0x0, 0x0, 0x0, 0x1c8, 0x207e, 0x0, 0x0, 0x1}, 0x0, 0x103, 0x0, 0x0, 0x40000000000001, 0x0, 0x9}) semop(r3, &(0x7f0000000040)=[{0x0, 0xfffc, 0x1000}], 0x1) semop(r3, &(0x7f0000000000)=[{0x0, 0x6, 0x1800}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r4 = socket(0x11, 0x3, 0x4) sendto$unix(r4, &(0x7f00000000c0)="b1000504000004000000000000110000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42118000000720fd18bfbb670c1f5a872c881ea6e3ec5890400000000008000361b44c702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900002008e371a3f8343712051eea040000000000c992913a57fd06b23a6ca26b7ce4f7b5caea06d6f7d73c64fcda1539a6265c3c43773dec4d5c1e7b02e1386c3c82f8b0f6ce8467a4dedcba02db380f7c63df096748f30fedb961ad4de37bb1426795289a74938e2696a48f6b18e47e0df4a23dd6e0d500f420df3117d4f5b7286ea735f24bc39b086585153b996882d1c7d1a625dd4c39dbd2874cea1f88435898ce07000000000000006d4068e62b90afde855730db573dab673decf2fe8bc09cbef4717b986d31f645b1ac82eb3c8d88feef3d05282c3489827d8d107646dd074f5e3554470625bf68ba6ea447a2188bdaab9464a49aad03335589afdeeeb79f0559d9a7c41381cc30aa62bb3f06c7b93eecb5da79765e359121c19f1e762841f1f7586e25e01353634323d45a2053", 0xb1, 0x0, 0x0, 0x59) semctl$IPC_STAT(r3, 0x0, 0x2, &(0x7f0000000480)=""/240) fcntl$setstatus(r2, 0x4, 0x4) ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f0000000040)={0x0, 0x1, 0xffef9ff6, 0x80, "4b06a6bcff0300dba800000000000800", 0x0, 0xd}) writev(r2, &(0x7f00000016c0)=[{&(0x7f0000000140)="85128fc99913dae488f2e7837b4d3db5afebc8d261f2bc77130911e4b6014f8a98b392c5e945875bb552c0fc62ba8499ec1a40484195354ff05f8a1b0e11141a7b177bce8c9e50f7ac882cea97943b853fd2e39a313501fb7762fc4bb5bac78ca6afec110d", 0x65}], 0x1) r5 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = kqueue1(0x10000) kevent(r0, &(0x7f0000000280)=[{{r0}, 0xfffffffffffffffa, 0x9, 0x40000000, 0xffffffff, 0x101}, {{r5}, 0xfffffffffffffffd, 0xe0, 0x80000000, 0x3a56c656, 0x7f}, {{r2}, 0xfffffffffffffffd, 0x40, 0x80, 0x7fff, 0xe13}, {{r6}, 0xfffffffffffffff7, 0x83, 0x2, 0x2, 0xec}, {{r6}, 0xfffffffffffffffe, 0x0, 0x2, 0x1, 0x8}, {{r6}, 0xfffffffffffffffa, 0x43, 0x40, 0x0, 0x4}, {{r1}, 0xfffffffffffffffc, 0x40, 0x40, 0x4, 0x4}, {{r1}, 0xfffffffffffffffb, 0x2, 0x40, 0x1, 0x2}, {{r1}, 0xfffffffffffffffd, 0x52, 0x1, 0x5, 0x8000}], 0x8, &(0x7f00000001c0)=[{{r0}, 0xfffffffffffffffa, 0x0, 0x80000000, 0xe8, 0x5}, {{r0}, 0xfffffffffffffff6, 0x8, 0x4, 0xe91, 0x5}, {{r0}, 0xffffffffffffffff, 0x1, 0x1, 0x240000000000000, 0x50000000}, {{r0}, 0xffffffffffffffff, 0x0, 0x8, 0x8, 0x9}, {{r1}, 0xfffffffffffffffb, 0x56, 0x2, 0x0, 0x863}, {{r2}, 0xfffffffffffffff9, 0x49, 0x40000000, 0xfffffffffffffffb, 0x3}], 0x4, &(0x7f0000000140)={0x8001, 0xd7}) 804.167114ms ago: executing program 6 (id=124): sysctl$kern(&(0x7f0000000100)={0x1, 0x4b}, 0x8, &(0x7f0000000000)="71f960843c1c39b6f11e4df43187beeb7adac43e55fdeb4dda19fc56281569130ca9c0a74651c7f12bf5888ed74401dc066b90f1fc7843c9623d0714786ae60a728f1ef845e9ae51f50fecb103f8d224ba2c7b620711ee3ad322522054833d22d7b601d9fedbebda0938b536c09bb2ce11ceff1e149c290c2e28b9233ff67c10be1706891a1419ca9a187b19b1887ec76bfca7c5e264fb970911386783dd04a05afda44fbc4792766d159f78c19ad57a4aee36fffecfbeee16512a19c01b1d34c57398c444f73af8e9b36b3428619c0768ba5f8cc9d03a9b467028b49a21a8ac87a3df71cb5015241cb9403b", &(0x7f0000002a80)=0xec, 0x0, 0x0) 803.833671ms ago: executing program 7 (id=125): sysctl$hw(&(0x7f0000000080)={0x6, 0x4}, 0x40000000000000f7, &(0x7f0000000180)="bd000000aec9d132d2ae873b1a6986d05d5b730aac03000000000000000028004a2c06d1f5cdbe9db75a1bf83a86d67322a623b7ef52bdd845de0d2c05000000002d37884273f335546813a1772f689321ffe4025c1c7fd80dc3628ce8a7e681eeb34f97dadf574521953ae8b294230ccbca0457316d1cb914f83b9429a6d4671ca778885950", &(0x7f0000000000)=0xa1, 0x0, 0x0) socket(0x18, 0x1, 0x3) 589.295989ms ago: executing program 1 (id=126): issetugid() issetugid() issetugid() issetugid() issetugid() issetugid() issetugid() issetugid() issetugid() issetugid() issetugid() issetugid() issetugid() issetugid() issetugid() issetugid() issetugid() issetugid() issetugid() issetugid() issetugid() issetugid() issetugid() issetugid() issetugid() issetugid() issetugid() issetugid() issetugid() issetugid() 587.633338ms ago: executing program 8 (id=96): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket(0x18, 0x1, 0x0) setsockopt(r1, 0x1000000000029, 0x37, 0x0, 0x0) setsockopt$sock_linger(r0, 0xffff, 0x80, &(0x7f0000000000)={0x80000001, 0x4}, 0x8) bind$unix(r0, &(0x7f00000000c0)=@file={0xe, 0x1, './file0\x00'}, 0xa) listen(r0, 0x1) 56.6814ms ago: executing program 1 (id=127): msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000080)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa142, 0x0, 0xfffffffffffffffe}, 0x400, 0x3, 0xfffffffffffffff9, 0x3, 0x3, 0x0, 0x0, 0x8000000000000001, 0x0, 0x1}) (async, rerun: 64) sysctl$kern(&(0x7f00000000c0)={0x1, 0x33}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x3414, 0x0, 0x37) (async, rerun: 64) syz_emit_ethernet(0x12, &(0x7f0000000080)={@empty, @broadcast, [{[], {0x8100, 0x0, 0x0, 0x3}}], {@generic={0x8100}}}) 37.869107ms ago: executing program 2 (id=128): sysctl$net_inet_ipip(&(0x7f0000000000)={0x4, 0x2, 0x4, 0x1}, 0x4, 0x0, 0x0, 0x0, 0x0) sysctl$net_inet_ipip(&(0x7f0000000040)={0x4, 0x2, 0x4, 0x1}, 0x4, &(0x7f0000000080)="3a88ad74ff0168ccee6e4f4e15bdb17e94c6ef22f6d7870ff450e52ca0408a48922ecd060bcd65d49f752191d2e2d8d051802d974bc7133b826432a94671f6446ade9cb43054175164db5209b01a6499a78601b64197d1a9f81402c547ada1e06ea23e9cf4dfa12664582c34963072dbbde953a60747016c17bcd5d3e266ac61d12ac85053fcc3cc2a6e66361ef8b5e840f4d4b7040efbfb19cc8ad93be639f6ea3fa15444dc93a29f8a42ebf0b3323f680241", &(0x7f0000000140)=0xb3, &(0x7f0000000180)="f0158db3d4c6f540f192306dd54570b76563b4c0ac3006dc419b0b045535e88f560970b36b34e589bf7a7150cb5cee77245f20ad0fa03231d2c5a0dd963410c9cd2e448e13b114b19b566c03fbdc05033394919e6c0e1e2d278fda258aaaf2e2ab9fefb0c448386eca152349ffca35cde448247c752ebd21d840cb1e457bde081a6aa0d2607b0704a8fd40aaa76e4ccfe64ed345ce6fbdad68ac1202e22ac0e3a7420d736c43a4403f58870f1253619fef8a890aba4a569b69f620953a31b583f503cadaffc034204f425d72068ef816a0", 0xd1) 30.332451ms ago: executing program 3 (id=129): r0 = syz_open_pts() syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) (async) syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket$inet(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x10, 0x2, 0x2, 0xf6bb}, 0x10) (async) bind$inet(r1, &(0x7f0000000000)={0x10, 0x2, 0x2, 0xf6bb}, 0x10) ioctl$TIOCGETD(r0, 0x4004741a, &(0x7f0000000040)) 23.956703ms ago: executing program 4 (id=130): r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x1, 0x194) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(0xffffffffffffffff, 0xc01064c5, &(0x7f00000000c0)={&(0x7f0000000000)=[0x0], 0x1}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x33}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x3414, 0x0, 0xffffffffffffffb8) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(0xffffffffffffff9c, 0xc01864c2, &(0x7f00000000c0)={0x0, 0x2, r0, 0x0, 0x1}) nanosleep(&(0x7f0000000140)={0x0, 0x1}, &(0x7f0000000180)) setrlimit(0x8, &(0x7f0000000980)={0x8, 0x54}) r1 = syz_open_pts() close(r1) r2 = syz_open_pts() ioctl$TIOCSETAF(r2, 0x802c7416, &(0x7f0000000180)={0x3, 0x0, 0xf7fffbfc, 0x80a19f, "bd08040100b100000000008000", 0x100, 0x4000002}) writev(r1, &(0x7f0000000700)=[{&(0x7f0000000080)="34eb4cd59e8456ebc0881681c60e1cd9e0bf01b618b3cb934394c5951c1db0fd943a", 0xff99}], 0x1) closefrom(r1) unveil(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='x\x00') openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x1, 0x194) (async) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(0xffffffffffffffff, 0xc01064c5, &(0x7f00000000c0)={&(0x7f0000000000)=[0x0], 0x1}) (async) sysctl$kern(&(0x7f00000000c0)={0x1, 0x33}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x3414, 0x0, 0xffffffffffffffb8) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(0xffffffffffffff9c, 0xc01864c2, &(0x7f00000000c0)={0x0, 0x2, r0, 0x0, 0x1}) (async) nanosleep(&(0x7f0000000140)={0x0, 0x1}, &(0x7f0000000180)) (async) setrlimit(0x8, &(0x7f0000000980)={0x8, 0x54}) (async) syz_open_pts() (async) close(r1) (async) syz_open_pts() (async) ioctl$TIOCSETAF(r2, 0x802c7416, &(0x7f0000000180)={0x3, 0x0, 0xf7fffbfc, 0x80a19f, "bd08040100b100000000008000", 0x100, 0x4000002}) (async) writev(r1, &(0x7f0000000700)=[{&(0x7f0000000080)="34eb4cd59e8456ebc0881681c60e1cd9e0bf01b618b3cb934394c5951c1db0fd943a", 0xff99}], 0x1) (async) closefrom(r1) (async) unveil(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='x\x00') (async) 5.34257ms ago: executing program 6 (id=131): sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a421020000e8710f", 0x67, 0x0, 0x0, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x0, 0x0, 0x0, 0x0, 0x105, 0xfffe, 0x0, 0x0, 0x9}, 0xfffffffffffffff9, 0x8000000000001, 0x8, 0x6, 0xffffffffffffffff, 0x0, 0x400000000000a8, 0xffffffffffff0000, 0x0, 0xcf, 0x0, 0x2}) mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf794d) fcntl$lock(r0, 0x9, &(0x7f0000000000)={0x3, 0x2, 0x0, 0x2ffffffff}) sendto$unix(0xffffffffffffff9c, &(0x7f0000000000)="b1000504600000000000000007", 0xd, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r1 = socket(0x11, 0x3, 0x0) sendto$unix(r1, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a807c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343711051eea040000000000", 0xb1, 0x400, 0x0, 0x0) utimensat(0xffffffffffffffff, 0x0, 0x0, 0x2) 0s ago: executing program 7 (id=132): r0 = socket(0x2, 0x2, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) r1 = socket(0x2, 0x2, 0x0) (async) sysctl$kern(&(0x7f0000000040)={0x1, 0x48}, 0x2, 0x0, 0x0, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = dup(r1) setsockopt$inet_opts(r2, 0x0, 0x13, &(0x7f0000000040)="fd0cc085", 0x4) (async) setsockopt$inet_opts(r0, 0x0, 0x1, &(0x7f00000000c0)="9876d692a3ef9c7ab923a2f0", 0xc) (async) setsockopt$inet_opts(r0, 0x0, 0x1, &(0x7f0000000040)="0a38bbbd", 0x4) lchown(0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.234' (ED25519) to the list of known hosts. panic: unhandled af 0 Stopped at db_enter+0x25: addq $0x8,%rsp TID PID UID PRFLAGS PFLAGS CPU COMMAND *387025 42689 0 0x2 0 0 syz-executor 300310 43895 0 0x14000 0x200 1 reaper db_enter() at db_enter+0x25 panic(ffffffff834e6642) at panic+0x1e5 unhandled_af(0) at unhandled_af+0x1a if_output_tso(ffff80000004e858,ffff80002a287e50,ffff800000c43e50,fffff3006fb37790,5dc) at if_output_tso+0x22b ip_output(fffff3006ce30400,0,fffff3006fcdd1b8,800,0,fffff3006fcdd250,ae113080bf3a9093) at ip_output+0x107f tcp_output(ffff8000015b52e0) at tcp_output+0x36e3 tcp_send(ffff800010fde8e0,fffff3006ce2b100,0,0) at tcp_send+0x191 sosend(ffff800010fde8e0,0,ffff80002a288298,0,0,80) at sosend+0x804 dofilewritev(ffff800045ffc7d0,3,ffff80002a288298,0,ffff80002a288350) at dofilewritev+0x2bd sys_write(ffff800045ffc7d0,ffff80002a288400,ffff80002a288350) at sys_write+0xa2 syscall(ffff80002a288400) at syscall+0xbd4 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7dc8a6a6c5e0, count: 3 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{0}> ddb{0}> set $lines = 0 ddb{0}> set $maxwidth = 0 ddb{0}> show panic *cpu0: unhandled af 0 ddb{0}> show kasan No such command ddb{0}> trace db_enter() at db_enter+0x25 panic(ffffffff834e6642) at panic+0x1e5 unhandled_af(0) at unhandled_af+0x1a if_output_tso(ffff80000004e858,ffff80002a287e50,ffff800000c43e50,fffff3006fb37790,5dc) at if_output_tso+0x22b ip_output(fffff3006ce30400,0,fffff3006fcdd1b8,800,0,fffff3006fcdd250,ae113080bf3a9093) at ip_output+0x107f tcp_output(ffff8000015b52e0) at tcp_output+0x36e3 tcp_send(ffff800010fde8e0,fffff3006ce2b100,0,0) at tcp_send+0x191 sosend(ffff800010fde8e0,0,ffff80002a288298,0,0,80) at sosend+0x804 dofilewritev(ffff800045ffc7d0,3,ffff80002a288298,0,ffff80002a288350) at dofilewritev+0x2bd sys_write(ffff800045ffc7d0,ffff80002a288400,ffff80002a288350) at sys_write+0xa2 syscall(ffff80002a288400) at syscall+0xbd4 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7dc8a6a6c5e0, count: -12 ddb{0}> show registers rdi 0 rsi 0x1 rbp 0xffff80002a287c30 rbx 0xffffffff839d5e07 cpu_info_full_primary+0x2e07 rdx 0 rcx 0xffff800045ffc7d0 rax 0xffffffff839d4ff0 cpu_info_full_primary+0x1ff0 r8 0x101010101010101 r9 0x8080808080808080 r10 0x282e3dfded397bf8 r11 0xb04c67c80e3bef59 r12 0xffffffff839d5c08 cpu_info_full_primary+0x2c08 r13 0 r14 0 r15 0x1 rip 0xffffffff833d2055 db_enter+0x25 cs 0x8 rflags 0x246 rsp 0xffff80002a287c20 ss 0x10 db_enter+0x25: addq $0x8,%rsp ddb{0}> show proc PROC (syz-executor) tid=387025 pid=42689 tcnt=1 stat=onproc flags process=2 proc=0 runpri=75, usrpri=75, slppri=24, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff800045ffc008,0xffff800045ffdca0 process=0xffff800045ff5818 user=0xffff80002a283000, vmspace=0xfffff3000b1f77a0 estcpu=25, cpticks=15, pctcpu=0.9, user=0, sys=14, intr=1 ddb{0}> ps PID TID PPID UID S PRLAGS PFLAGS WAIT COMMAND 98472 104058 42653 32767 3 0x1010 0x2000 suspend syz-executor 98472 252247 42653 32767 2 0x1010 0x4080000 syz-executor 94400 187178 16597 32767 2 0x10 0 syz-executor 94400 499077 16597 32767 3 0x10 0x4000080 fsleep syz-executor 1126 172872 17481 32767 2 0x10 0 syz-executor 1126 452655 17481 32767 3 0x10 0x4000080 fsleep syz-executor 69472 223016 6443 32767 3 0x10 0x80 nanoslp syz-executor 69472 277680 6443 32767 2 0x10 0x4000000 syz-executor 69472 178231 6443 32767 3 0x10 0x4000080 fsleep syz-executor 72852 494635 56904 32767 2 0x10 0 syz-executor 72852 84867 56904 32767 3 0x10 0x4000080 fsleep syz-executor 72852 181432 56904 32767 3 0x10 0x4000080 fsleep syz-executor 72852 93163 56904 32767 2 0x10 0x4000000 syz-executor 17789 137524 42689 0 2 0x2 0 syz-executor 42653 121508 93034 32767 3 0x10 0x80 nanoslp syz-executor 40171 264170 38355 32767 3 0x10 0x80 nanoslp syz-executor 79293 492346 92489 32767 3 0x10 0x80 piperd syz-executor 56904 259157 64062 32767 3 0x10 0x80 nanoslp syz-executor 16597 160891 58654 32767 3 0x10 0x80 nanoslp syz-executor 6443 159669 56088 32767 3 0x10 0x80 nanoslp syz-executor 17481 327541 28254 32767 3 0x10 0x80 nanoslp syz-executor 93034 55626 42689 0 3 0x2 0x80 wait syz-executor 58654 420359 42689 0 3 0x2 0x80 wait syz-executor 28254 372563 42689 0 3 0x2 0x80 wait syz-executor 56088 140598 42689 0 3 0x2 0x80 wait syz-executor 92489 488711 42689 0 3 0x2 0x80 wait syz-executor 64062 101278 42689 0 3 0x2 0x80 wait syz-executor 38355 13432 42689 0 3 0x2 0x80 wait syz-executor *42689 387025 81553 0 7 0x2 0 syz-executor 81553 397364 11892 0 3 0x100002 0x88 sigsusp ksh 11892 399184 89469 0 3 0x10 0x88 kqread sshd-session 89469 142588 56074 0 3 0x12 0x80 kqread sshd-session 75824 314448 1 0 3 0x100003 0x80 ttyin getty 56074 222435 1 0 3 0 0x88 kqread sshd 57502 465872 896 73 3 0x1100010 0x80 kqread syslogd 896 264396 1 0 3 0x100002 0x80 sbwait syslogd 93095 337934 1 0 3 0x100000 0x80 kqread resolvd 91426 280173 72919 77 3 0x100012 0x80 kqread dhcpleased 59976 24196 72919 77 3 0x100012 0x80 kqread dhcpleased 72919 428698 1 0 3 0 0x80 kqread dhcpleased 84366 335914 0 0 3 0x14000 0x200 bored smr 98676 334293 0 0 2 0x14000 0x200 zerothread 68235 409265 0 0 3 0x14000 0x200 aiodoned aiodoned 72669 72775 0 0 3 0x14000 0x200 syncer update 59848 266878 0 0 3 0x14000 0x200 cleaner cleaner 43895 300310 0 0 7 0x14000 0x200 reaper 91328 500399 0 0 3 0x14000 0x200 pgdaemon pagedaemon 5650 301188 0 0 3 0x14000 0x200 bored viomb 32458 133392 0 0 3 0x14000 0x40000200 acpi0 acpi0 64759 142834 0 0 3 0x14000 0x40000200 idle1 62832 421891 0 0 3 0x14000 0x200 bored softnet1 55459 380237 0 0 3 0x14000 0x200 bored softnet0 75377 437232 0 0 3 0x14000 0x200 bored systqmp 92259 183894 0 0 3 0x14000 0x200 bored systq 28099 142936 0 0 3 0x14000 0x200 tmoslp softclockmp 83464 446909 0 0 3 0x14000 0x40000200 tmoslp softclock 61638 444810 0 0 3 0x14000 0x40000200 idle0 1 28833 0 0 3 0x2 0x80 wait init 0 0 -1 0 3 0x10000 0x200 scheduler swapper ddb{0}> show all locks Process 42689 (syz-executor) thread 0xffff800045ffc7d0 (387025) exclusive rwlock inet46 r = 0 (0xffff800010fde900) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 sosend+0x78e #3 dofilewritev+0x2bd #4 sys_write+0xa2 #5 syscall+0xbd4 #6 Xsyscall+0x128 shared rwlock netlock r = 0 (0xffffffff83903810) #0 witness_lock+0x5f1 #1 rw_do_enter_read+0x3e8 #2 solock_shared+0x6e #3 sosend+0x78e #4 dofilewritev+0x2bd #5 sys_write+0xa2 #6 syscall+0xbd4 #7 Xsyscall+0x128 exclusive rwlock sbufsnd r = 0 (0xffff800010fdeac8) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 sblock+0xb6 #3 sosend+0x2e9 #4 dofilewritev+0x2bd #5 sys_write+0xa2 #6 syscall+0xbd4 #7 Xsyscall+0x128 Process 43895 (reaper) thread 0xffff800045ffd760 (300310) exclusive rwlock kmmaplk r = 0 (0xffffffff83ae36e8) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 vm_map_lock_ln+0x12e #3 uvm_unmap+0x7d #4 km_free+0x85 #5 uvm_uarea_free+0x4f #6 reaper+0x1ca #7 proc_trampoline+0x10 ddb{0}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 11047 12016K 12034K 166960K 12141 0 pcb 17 12K 12K 166960K 17 0 rtable 217 6K 7K 166960K 356 0 pf 29 16K 16K 166960K 31 0 ifaddr 38 6K 7K 166960K 44 0 ifgroup 46 2K 2K 166960K 50 0 sysctl 1 1K 9K 166960K 5 0 counters 68 36K 37K 166960K 70 0 ioctlops 0 0K 4K 166960K 69 0 iov 0 0K 0K 166960K 1 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1296 82K 82K 166960K 1431 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 5K 166960K 6 0 VM map 2 1K 1K 166960K 2 0 sem 19 2K 2K 166960K 21 0 dirhash 12 2K 2K 166960K 12 0 ACPI 1734 201K 291K 166960K 11964 0 file desc 23 85K 129K 166960K 299 0 sigio 0 0K 0K 166960K 5 0 proc 58 99K 163K 166960K 505 0 subproc 70 4K 5K 166960K 142 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 25 0 in_multi 88 5K 6K 166960K 104 0 ether_multi 1 0K 0K 166960K 2 0 mrt 0 0K 0K 166960K 9 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 61 281K 281K 166960K 61 0 exec 0 0K 1K 166960K 372 0 fusefs mount 1 32K 32K 166960K 1 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 233 151K 184K 166960K 4081 0 UVM aobj 5 2K 3K 166960K 6 0 pinsyscall 44 88K 120K 166960K 1369 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 0K 166960K 11 0 NDP 10 0K 2K 166960K 27 0 temp 33 9114K 9134K 166960K 4126 0 kqueue 13 20K 30K 166960K 64 0 SYN cache 2 16K 16K 166960K 2 0 ddb{0}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 28 0 0 1 0 1 1 0 8 0 rtpcb 120 41 0 38 1 0 1 1 0 8 0 rtentry 176 112 0 12 6 0 6 6 0 8 0 unpcb 144 93 0 78 1 0 1 1 0 8 0 syncache 336 5 0 5 1 0 1 1 0 8 1 tcpcb 736 191 0 186 7 0 7 7 0 8 6 arp 136 18 0 2 1 0 1 1 0 8 0 ipq 40 5 0 1 1 0 1 1 0 8 0 ipqe 40 6 0 2 1 0 1 1 0 8 0 inpcb 328 312 0 304 7 0 7 7 0 8 5 ip6q 80 2 0 0 1 0 1 1 0 8 0 ip6af 40 3 0 0 1 0 1 1 0 8 0 nd6 152 25 0 3 1 0 1 1 0 8 0 kcovpl 48 15 0 8 1 0 1 1 0 8 0 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 467 0 44 30 0 30 30 0 8 1 art_table 40 468 0 44 5 0 5 5 0 8 0 art_node 32 112 0 21 1 0 1 1 0 8 0 sysvmsgpl 40 2 0 1 1 0 1 1 0 8 0 semupl 112 5 0 5 1 0 1 1 0 8 1 semapl 72 17 0 0 1 0 1 1 0 8 0 shmpl 112 3 0 1 1 0 1 1 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino2pl 256 1742 0 271 93 0 93 93 0 8 0 ffsino 296 1742 0 271 114 0 114 114 0 8 0 nchpl 144 2114 0 416 64 0 64 64 0 8 0 vnodes 216 1893 0 0 106 0 106 106 0 8 0 namei 1024 6300 0 6300 2 0 2 2 0 8 2 percpumem 16 51 0 1 1 0 1 1 0 8 0 kstatmem 264 25 0 2 2 0 2 2 0 8 0 scxspl 216 7026 0 7026 4 3 1 3 1 8 1 plimitpl 152 69 0 45 2 0 2 2 0 8 1 sigapl 424 572 0 521 7 0 7 7 0 8 1 knotepl 120 268 0 0 9 0 9 9 0 8 0 kqueuepl 224 59 0 50 1 0 1 1 0 8 0 pipepl 344 155 0 128 3 0 3 3 0 8 0 fdescpl 528 556 0 521 4 0 4 4 0 8 1 filepl 160 2284 0 2077 12 0 12 12 0 8 3 lockfpl 104 57 0 55 1 0 1 1 0 8 0 lockfspl 48 21 0 19 1 0 1 1 0 8 0 sessionpl 144 37 0 22 1 0 1 1 0 8 0 pgrppl 48 53 0 30 1 0 1 1 0 8 0 ucredpl 104 269 0 251 1 0 1 1 0 8 0 zombiepl 144 523 0 521 1 0 1 1 0 8 0 processpl 1232 572 0 521 5 0 5 5 0 8 0 procpl 664 788 0 729 6 0 6 6 0 8 0 sockpl 752 481 0 455 10 0 10 10 0 8 7 mcl64k 65536 3 0 0 1 0 1 1 0 8 0 mcl16k 16384 2 0 0 1 0 1 1 0 8 0 mcl8k 8192 4 0 0 1 0 1 1 0 8 0 mcl4k 4096 125 0 0 16 0 16 16 0 8 0 mcl2k 2048 18 0 0 3 0 3 3 0 8 0 mextrefs 64 17 0 0 1 0 1 1 0 8 0 mtagpl 96 3 0 0 1 0 1 1 0 8 0 mbufpl 256 1179 0 0 74 0 74 74 0 8 0 bufpl 272 2429 0 101 156 0 156 156 0 8 0 anonpl 32 6156 0 0 50 0 50 50 0 247 0 amapchunkpl 152 13135 0 12608 37 0 37 37 0 158 16 amappl16 200 1835 0 1811 6 1 5 5 0 8 1 amappl15 192 5 0 5 1 1 0 1 0 8 0 amappl14 184 399 0 398 1 0 1 1 0 8 0 amappl13 176 114 0 104 1 0 1 1 0 8 0 amappl12 168 787 0 753 2 0 2 2 0 8 0 amappl11 160 12 0 12 1 1 0 1 0 8 0 amappl10 152 60 0 50 1 0 1 1 0 8 0 amappl9 144 272 0 270 1 0 1 1 0 8 0 amappl8 136 88 0 87 1 0 1 1 0 8 0 amappl7 128 132 0 121 1 0 1 1 0 8 0 amappl6 120 150 0 149 1 0 1 1 0 8 0 amappl5 112 96 0 88 1 0 1 1 0 8 0 amappl4 104 259 0 242 1 0 1 1 0 8 0 amappl3 96 2117 0 2016 4 1 3 3 0 8 0 amappl2 88 676 0 602 2 0 2 2 0 8 0 amappl1 80 10555 0 9989 15 0 15 15 0 8 2 amappl 88 3383 0 3212 5 0 5 5 0 92 1 uvmvnodes 80 104 0 0 3 0 3 3 0 8 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 5 0 1 1 0 1 1 0 8 0 uaddrrnd 24 556 0 521 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 556 0 521 1 0 1 1 0 8 0 vmmpekpl 168 6386 0 6346 3 0 3 3 0 8 0 vmmpepl 168 43784 0 41808 95 0 95 95 0 357 7 vmsppl 488 555 0 521 7 1 6 6 0 8 1 rwobjpl 80 15325 0 14376 24 0 24 24 0 8 3 pdppl 4096 1119 0 1042 109 28 81 99 0 8 4 pvpl 32 14141 0 0 115 0 115 115 0 265 0 pmappl 256 555 0 521 4 1 3 3 0 8 0 extentpl 40 46 0 28 1 0 1 1 0 8 0 phpool 112 505 0 31 14 0 14 14 0 8 0 ddb{0}> machine ddbcpu 0 Invalid cpu 0 ddb{0}> trace db_enter() at db_enter+0x25 panic(ffffffff834e6642) at panic+0x1e5 unhandled_af(0) at unhandled_af+0x1a if_output_tso(ffff80000004e858,ffff80002a287e50,ffff800000c43e50,fffff3006fb37790,5dc) at if_output_tso+0x22b ip_output(fffff3006ce30400,0,fffff3006fcdd1b8,800,0,fffff3006fcdd250,ae113080bf3a9093) at ip_output+0x107f tcp_output(ffff8000015b52e0) at tcp_output+0x36e3 tcp_send(ffff800010fde8e0,fffff3006ce2b100,0,0) at tcp_send+0x191 sosend(ffff800010fde8e0,0,ffff80002a288298,0,0,80) at sosend+0x804 dofilewritev(ffff800045ffc7d0,3,ffff80002a288298,0,ffff80002a288350) at dofilewritev+0x2bd sys_write(ffff800045ffc7d0,ffff80002a288400,ffff80002a288350) at sys_write+0xa2 syscall(ffff80002a288400) at syscall+0xbd4 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7dc8a6a6c5e0, count: -12 ddb{0}> machine ddbcpu 1