last executing test programs: 901.02006ms ago: executing program 1 (id=2): mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x2000, 0x1003) r0 = kqueue() r1 = open(&(0x7f00000000c0)='./file0\x00', 0x80, 0x2) ioctl$DIOCRGETTABLES(r1, 0xc450443f, &(0x7f0000001140)={{'./file1\x00', './file0\x00', 0x40, 0xff}, &(0x7f00000004c0)=[{'./file0\x00', './file0\x00', 0x2, 0x6}, {'./file0\x00', './file0\x00', 0x50, 0x9}, {'./file0\x00', './file0\x00', 0x45, 0xfe}], 0x5, 0x3, 0x2, 0x8, 0x80000001, 0x1ff, 0x76}) sysctl$hw(&(0x7f0000000100)={0x6, 0xe}, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffd91) r2 = open(&(0x7f0000000140)='./file0\x00', 0x10686, 0x8) closefrom(r2) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x5, 0x10, r2, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x8) r3 = open(&(0x7f0000000180)='./file0\x00', 0x80000000000206, 0x0) ioctl$TIOCSETA(r3, 0x802c7414, &(0x7f0000000480)={0x8, 0x7, 0x800, 0x10000, "09de252a475f2c03e2a8fb7f64be7b12c87139f4", 0x1, 0x800}) kevent(r0, &(0x7f0000000000), 0x96, &(0x7f0000000540), 0xfffa4961, 0x0) setitimer(0x1, &(0x7f0000001240)={{0x3, 0xbc}, {0x0, 0x8}}, 0x0) r4 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x7e, 0x0) pipe(0x0) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f0000000080)={0x10, 0x3, [{&(0x7f00007ab000/0x3000)=nil, &(0x7f0000ec8000/0x3000)=nil, 0x2}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x100000001}, {&(0x7f0000a1c000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x4}, {&(0x7f0000a6b000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x3}, {&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x100000000}, {&(0x7f0000800000/0x800000)=nil, &(0x7f0000ccd000/0x1000)=nil}, {&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000843000/0x1000)=nil, 0x3}, {&(0x7f000046c000/0x2000)=nil, &(0x7f0000efd000/0x1000)=nil, 0xfffe}, {&(0x7f0000a98000/0x4000)=nil, &(0x7f0000a3d000/0xd000)=nil}, {&(0x7f0000d3d000/0x4000)=nil, &(0x7f0000aff000/0x1000)=nil, 0xe}, {&(0x7f0000f6a000/0x2000)=nil, &(0x7f0000887000/0x4000)=nil}, {&(0x7f0000795000/0x1000)=nil, &(0x7f0000ff2000/0x1000)=nil}, {&(0x7f0000e0f000/0x2000)=nil, &(0x7f0000e03000/0x3000)=nil, 0x3c}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x2}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f00003b5000/0x2000)=nil, 0xfefffffffffffffc}, {&(0x7f00000c6000/0x4000)=nil, &(0x7f0000c5e000/0x4000)=nil}], './file0\x00', 0x81, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f5]}) r5 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) ioctl$VNDIOCSET(r5, 0xc0384600, &(0x7f0000000180)={0x0, 0x152, 0x0}) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x4}], 0x1, 0xffffffff) setresuid(0xee00, 0xee00, 0x0) setresuid(0x0, 0xee01, 0x0) close(0xffffffffffffffff) ioctl$TIOCSETA(r4, 0xcd60441a, &(0x7f0000000040)={0x1, 0x2, 0x7, 0x2f, "2000030100010000000000000068a95a010400", 0x6, 0x2}) setsockopt(0xffffffffffffffff, 0x1000000000029, 0x4, 0x0, 0x0) r6 = openat$pf(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$unix(r6, 0x0, 0x0) r7 = socket(0x2, 0x2, 0x0) connect$inet(r7, &(0x7f0000000000)={0x10, 0x2, 0x1}, 0x10) sendmmsg(r7, &(0x7f0000002940)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x60}}, 0x38, 0xc) 885.73803ms ago: executing program 3 (id=4): setrlimit(0x8, &(0x7f0000000080)={0xe, 0x51}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffff9c, 0xc00c642e, &(0x7f0000000000)={0x4138f7cc, 0x3, 0xffffffffffffff9c}) ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000040)={0x7, 0xd8, 0xfff, 0x0, "f4ae5882d19eed9b3d76b131ba3e866ad99af70d", 0x12b7}) ioctl$AUDIO_START(r0, 0x20004126) r1 = syz_open_pts() close(r1) syz_open_pts() ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f00000001c0)={0xffffff89, 0x6, 0xfffffff8, 0x5, "08d0ffff006575ec00", 0x0, 0xff}) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) 883.714687ms ago: executing program 7 (id=8): r0 = syz_open_pts() setsid() ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000380)={0x10000, [{0x3, 0x2}, {0x0, 0xfffffffb}, {}, {0x0, 0x1}, {0x1, 0x9}, {0x0, 0x4}, {0x3, 0x8}, {0x0, 0xc8}, {0x5}, {0x0, 0xff}, {0x2}, {0x3, 0x204}, {0x1, 0xfffffffd}, {}, {0x0, 0x7fffffff}, {0x0, 0x7}, {0x2, 0x6}, {0x1, 0x7}, {0x3, 0x2000000}, {0x0, 0x3}, {0x3, 0x70}, {0x1, 0xfffffffc}, {0x1}, {0x0, 0x3}, {}, {0x1, 0x7}, {0x2, 0x3}, {0x3}, {0x1}, {0x3}, {0x0, 0x2}, {0x1, 0x57fd}]}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) ioctl$TIOCSCTTY(r0, 0x20007461) syz_open_pts() 709.321794ms ago: executing program 7 (id=9): r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000001000), 0x10000, 0x0) ioctl$DIOCRCLRTSTATS(r0, 0xc0884450, &(0x7f0000002100)={{'./file0\x00', './file0\x00', 0x20, 0xfd}, 0x0, 0x428, 0x0, 0x9, 0x0, 0x9, 0x8, 0x12, 0x40000008}) sysctl$net_inet_ip(&(0x7f0000000000)={0x4, 0x2, 0x0, 0x1a}, 0x4, 0x0, 0x0, &(0x7f00000001c0)='Hm', 0xffffffffffffff90) 706.694568ms ago: executing program 0 (id=1): pwritev(0xffffffffffffffff, 0x0, 0x0, 0x7) openat$zero(0xffffffffffffff9c, &(0x7f0000000440), 0x80, 0x0) msync(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4) r0 = open(0x0, 0x18289, 0x110) write(r0, 0x0, 0x0) ioctl$FIONBIO(r0, 0x8004667e, &(0x7f0000000000)=0x2) stat(0x0, 0x0) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$DIOCGETSTATE(0xffffffffffffffff, 0xc1084413, &(0x7f0000000040)={{0x3, './file0\x00', [{[@v6=@empty, @v4=@loopback], [0xd, 0x40], 0x0, 0x2}, {[@v4, @v4=@multicast2], [0x46, 0x800], 0x2006, 0x18}], {{0x246, 0x48, 0xfb, 0x7ff}, 0x6543, 0x409, 0xfff00000, 0x7b3e, 0x800, 0x17, 0x7}, {{0x0, 0x7, 0x1, 0x800005}, 0x8001, 0xc86, 0x10007, 0x6, 0x3fd, 0xf0}, @v6=@ipv4, 0x0, 0xffffffff, 0xe5, 0x1000000, 0x5, [[0x8, 0xd], [0x3, 0x8344]], [[0xfc000002, 0x4], [0xfffffff7, 0x10003]], 0x40000009, [0x1d9, 0x77], 0x1, 0x3, 0x5, 0x1, 0x0, 0x3, 0xc, 0x83, 0x5, 0x8, 0x1, 0xce57}}) ioctl$TIOCSETA(r1, 0xc1084425, &(0x7f0000000040)={0x1, 0x0, 0xfffffffe, 0x3, "210d0000000200000006000000000200007fffff", 0x7ffffffe}) 703.148764ms ago: executing program 5 (id=6): chmod(&(0x7f0000000040)='.\x00', 0x35e) r0 = getthrid() unveil(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='r\x00') ktrace(&(0x7f0000000000)='./file0\x00', 0x4, 0x40002018, r0) clock_getres(0x0, &(0x7f00000000c0)) sysctl$kern(&(0x7f00000000c0)={0x1, 0x3d}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x74, 0x0, 0x37) setuid(0xffffffffffffffff) r1 = socket(0x18, 0x1, 0x0) setsockopt(r1, 0x1000000029, 0x37, &(0x7f0000000000)="030000e3", 0x4) r2 = syz_open_pts() close(r2) ioctl$FIOASYNC(r2, 0x80047466, &(0x7f0000000200)=0x5) r3 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0xd6) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000280)='#!', 0x10}, {&(0x7f0000000000)="8d6bb85551ec8430877ae32fe9bbe42cc8f2147a3eba8e1969f0435119cf4c071c8aee7ef2921be5d7d4796c5566c95989acb3d185587234186e96b8fde9ffac51de05a87b8b893e2abd154dd886eafbe03881d25b7b13b4c32227fc9e5a86a06f59f701322b3a109a13436e486b0a", 0x6f}], 0x2) ppoll(&(0x7f0000000380)=[{r2, 0x20}, {r3, 0x80}, {r1, 0x4}, {r1, 0x4}], 0x4, &(0x7f0000000400)={0x80, 0xac}, &(0x7f0000000440)={0x3}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0xc4) mprotect(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0) r4 = socket$inet(0x18, 0x3, 0x102) fstat(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r5) sendmsg(r4, &(0x7f0000000240)={&(0x7f0000000280)=@in6={0x1c, 0x18, 0x0, 0x7, "00000000000000000000000000000001", 0x101}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000180)="6388020000003a9afe51f6f2efa24a85abdd612dd68e59adfecf9323100084410a8591426ee03e", 0x27}, {&(0x7f0000000040)="a2a62d242940a2d9f8", 0x9}], 0x2, 0x0}, 0x402) sysctl$kern(&(0x7f0000000080)={0x1, 0xa}, 0x2, &(0x7f00000011c0)="1a4f0000", &(0x7f0000000040)=0x4, 0x0, 0x0) rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)='./file2\x00') 513.444582ms ago: executing program 0 (id=12): sysctl$vfs_ffs(&(0x7f0000000040)={0x4, 0x1, 0x5}, 0x3, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$net_inet_tcp(&(0x7f0000000040)={0x7, 0x2, 0x2, 0x3}, 0x4, 0x0, 0x0, 0x0, 0xfffffda1) 458.677876ms ago: executing program 0 (id=13): r0 = socket(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1003, 0x0, 0x0) r1 = openat$audioctl(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$FIONREAD(r1, 0x4004667f, &(0x7f0000000440)) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3) 452.599482ms ago: executing program 7 (id=15): mknod(&(0x7f0000000200)='./file0\x00', 0x2000, 0x6381) r0 = open(&(0x7f0000000080)='./file0\x00', 0x2, 0x102) mknod(&(0x7f00000000c0)='./file1\x00', 0x2000, 0x637d) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x6384) r1 = open(&(0x7f0000000040)='./bus\x00', 0x80, 0x100) open(&(0x7f0000000080)='./file1\x00', 0x40, 0x132) r2 = open(&(0x7f0000000080)='./file0\x00', 0x2, 0x0) close(r2) ioctl$WSDISPLAYIO_SMODE(r2, 0x8004574c, &(0x7f00000001c0)=0x1) write(r0, 0x0, 0x0) r3 = semget(0x2, 0x1, 0x1) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$sock_cred(r6, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, 0x0, 0x0}, &(0x7f0000000340)=0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$sock_cred(r9, 0xffff, 0x1022, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) setresgid(0x0, r8, r10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r11, 0xffff, 0x1022, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000380)=0xc) sysctl$kern(&(0x7f00000000c0)={0x1, 0x4e}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000180)=0xb, 0x0, 0x27) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) setresgid(r10, r10, r10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$sock_cred(r13, 0xffff, 0x1022, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) setresgid(r14, 0x0, 0x0) setresgid(r5, r14, r5) setresgid(r8, 0x0, 0x0) getsockopt$SO_PEERCRED(r1, 0xffff, 0x1022, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0xc) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000002c0)={{r4, r14, r12, r10, 0x20, 0x8001}, 0x7ff, r7, 0x0, 0x3ff, 0x0, 0x1, 0x5, 0x8, 0x9, 0x949, 0x5}) semctl$IPC_SET(r3, 0x0, 0x1, &(0x7f0000000240)={{r12, r8, 0xffffffffffffffff, r15, 0x8d, 0x4, 0x0, 0x0, 0x7}, 0x0, 0x3, 0x0, 0x0, 0x4, 0x0, 0x4f2}) 383.010984ms ago: executing program 4 (id=5): getentropy(&(0x7f0000000000)=""/40, 0x28) getentropy(&(0x7f0000000040)=""/39, 0x27) getentropy(&(0x7f0000000080)=""/91, 0x5b) getentropy(&(0x7f0000000100)=""/130, 0x82) getentropy(&(0x7f00000001c0)=""/54, 0x36) getentropy(&(0x7f0000000200)=""/201, 0xc9) getentropy(&(0x7f0000000300)=""/61, 0x3d) getentropy(&(0x7f0000000340)=""/92, 0x5c) getentropy(&(0x7f00000003c0)=""/168, 0xa8) getentropy(&(0x7f0000000480)=""/182, 0xb6) getentropy(&(0x7f0000000540)=""/164, 0xa4) getentropy(&(0x7f0000000600)=""/244, 0xf4) getentropy(&(0x7f0000000700)=""/82, 0x52) getentropy(&(0x7f0000000780)=""/85, 0x55) getentropy(&(0x7f0000000800)=""/149, 0x95) getentropy(&(0x7f00000008c0)=""/216, 0xd8) getentropy(&(0x7f00000009c0)=""/62, 0x3e) getentropy(&(0x7f0000000a00)=""/4096, 0x1000) getentropy(&(0x7f0000001a00)=""/20, 0x14) getentropy(&(0x7f0000001a40), 0x0) getentropy(&(0x7f0000001a80)=""/4096, 0x1000) getentropy(&(0x7f0000002a80)=""/26, 0x1a) getentropy(&(0x7f0000002ac0)=""/182, 0xb6) getentropy(&(0x7f0000002b80)=""/4096, 0x1000) getentropy(&(0x7f0000003b80)=""/42, 0x2a) getentropy(&(0x7f0000003bc0)=""/222, 0xde) getentropy(&(0x7f0000003cc0)=""/210, 0xd2) getentropy(&(0x7f0000003dc0)=""/143, 0x8f) getentropy(&(0x7f0000003e80)=""/207, 0xcf) getentropy(&(0x7f0000003f80)=""/8, 0x8) 382.732792ms ago: executing program 0 (id=17): r0 = syz_open_pts() ioctl$TIOCSCTTY(r0, 0x20007461) ioctl$TIOCFLUSH(r0, 0x80047476, &(0x7f0000000080)=0xffff) fstat(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r1) setgroups(0x0, 0x0) setuid(0xffffffffffffffff) rename(&(0x7f0000000200)='.\x00', 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x40000802) r2 = open(&(0x7f0000000040)='./file0\x00', 0x12, 0x10) ioctl$TIOCCDTR(r2, 0x20007478) ioctl$TIOCGETD(r2, 0x4004741a, &(0x7f0000000240)) r3 = syz_open_pts() ioctl$FIOASYNC(r3, 0x80047460, &(0x7f00000000c0)=0x4) ioctl$TIOCSETA(r3, 0x802c7414, &(0x7f0000000000)={0x6, 0x0, 0x4, 0x5, "13a36ac20292ec261df2bc0589247033493980c9", 0x7fffffff, 0x7}) ioctl$TIOCSTAT(r3, 0x20007465) socket$inet(0x2, 0x8003, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r4, 0xffff, 0x1022, &(0x7f00000000c0), &(0x7f0000000040)=0xc) sysctl$kern(&(0x7f00000000c0)={0x1, 0x4e}, 0x3, &(0x7f0000000100)="71f91e3471ac1658bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000180)=0x66, 0x0, 0x27) 381.976063ms ago: executing program 4 (id=18): open$dir(&(0x7f00000000c0)='./file0\x00', 0x80, 0x186) rename(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') symlink(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000700)='./file0\x00') sysctl$kern(&(0x7f0000000040)={0x1, 0x41}, 0x2, &(0x7f0000000340)="3bf2925f", &(0x7f0000000080)=0x4, &(0x7f0000000240), 0x0) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x40, 0x9, 0xf7, 0x10002}, {0x9b1d, 0xfe, 0xf4, 0x4000800}]}) syz_emit_ethernet(0xa3, &(0x7f0000000840)={@random="b905f0ffff00", @empty, [], {@ipv4={0x800, {{0x17, 0x4, 0x1, 0xa, 0x95, 0x67, 0x46, 0x38, 0xf0, 0x0, @empty, @rand_addr=0x20000000, {[@generic={0x82, 0x5, "09b4e8"}, @noop, @ssrr={0x89, 0x13, 0x3, [@rand_addr=0x8862, @local={0xac, 0x14, 0x0}, @remote={0xac, 0x14, 0x0}, @remote={0xac, 0x14, 0x0}]}, @ra={0x94, 0x4, 0x2c4}, @rr={0x7, 0xf, 0x3, [@rand_addr=0x5, @multicast2, @rand_addr=0x9]}, @generic={0x8e, 0x5, "0de761"}, @generic={0x1, 0x8, "aa4038da080b"}, @generic={0x88, 0x7, "43ad14a8af"}, @ssrr={0x89, 0x7, 0x9, [@empty]}]}}, @udp={{0x2, 0x2, 0x8}, {"d236a415464c039b9ed81aaf94b1aba4062e0449f67aeaf4d2990b2265248c97d17f28c6ee251ec5a7e3860a739948a44f"}}}}}}) r1 = open$dir(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', 0x10, 0x1cc) mkdirat(r1, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2) 360.416495ms ago: executing program 3 (id=20): mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1000, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x80, 0x2) openat$diskmap(0xffffffffffffff9c, &(0x7f0000001500), 0x80, 0x0) openat$diskmap(0xffffffffffffff9c, &(0x7f0000000080), 0x8, 0x0) setuid(0xffffffffffffffff) getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) r1 = semget(0x0, 0x1, 0x281) semctl$IPC_SET(r1, 0x0, 0x1, &(0x7f0000000780)={{0x0, 0x0, 0x0, r0, 0x8f, 0x25, 0x0, 0x0, 0xfffffffffffffffb}, 0x0, 0x6, 0x0, 0x0, 0x6, 0x0, 0x8}) getppid() semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000003c0)={{0x0, 0x0, 0x0, 0x0, 0x184, 0x2, 0x0, 0x0, 0xe000000000000}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x100000000008}) semctl$SETALL(0x0, 0x0, 0x9, &(0x7f0000000000)) 262.870677ms ago: executing program 4 (id=22): r0 = semget$private(0x0, 0x8, 0x188) semop(r0, &(0x7f00000012c0)=[{0x1, 0xc917}, {0x2, 0x2b45, 0x800}, {0x4, 0x6, 0x800}], 0x3) 154.818991ms ago: executing program 6 (id=29): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000000)=@file={0x0, 0x1, './file0\x00'}, 0xa) bind$unix(r1, &(0x7f0000000140)=@abs={0x7, 0x0, 0x0, 0x1}, 0x8) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x3, 0x3, 0x1, 0xa}, {0x24, 0xc9, 0xfe, 0x8}, {0x9b1e, 0x22, 0xf, 0x40207ff}]}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000000)={0x4, &(0x7f0000000080)=[{0x2, 0xb, 0x7, 0x9}, {0x35, 0x0, 0x2, 0x4}, {0x80, 0x9, 0x5}, {0x4, 0x1, 0x9, 0x1000}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = msgget$private(0x0, 0x0) msgsnd(r2, &(0x7f0000000040)=ANY=[@ANYRESOCT], 0x401, 0x0) msgsnd(r2, 0x0, 0x444, 0x800) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x1000e, &(0x7f00000003c0)=ANY=[]) 153.54848ms ago: executing program 2 (id=30): r0 = msgget(0x0, 0x2) fstat(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = geteuid() lstat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000140)={0x0}, &(0x7f0000000180)=0xc) r7 = fcntl$getown(0xffffffffffffff9c, 0x5) msgctl$IPC_SET(r0, 0x1, &(0x7f00000001c0)={{0x0, r2, r3, r5, 0x20, 0x5}, 0x0, 0x0, 0x2, 0x8abd, 0x8000000, r6, r7, 0x8, 0x0, 0xfffffffffffffff8, 0x0, 0x7b}) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0xffffffffffffffff, r8) r10 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000340), 0x80, 0x0) fcntl$setown(r10, 0x6, r7) pipe2(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x10000) kevent(r11, &(0x7f00000003c0)=[{{r10}, 0xfffffffffffffffd, 0x0, 0x1, 0x2a, 0x8000}, {{r10}, 0xfffffffffffffff8, 0x20, 0x2, 0x8, 0x9350}, {{r10}, 0xfffffffffffffffb, 0x0, 0x20000000, 0x88, 0x2}, {{r10}, 0xfffffffffffffff7, 0x2, 0x2, 0x4, 0x6}, {{r10}, 0xfffffffffffffff9, 0x26, 0x40000002, 0x81, 0x6}, {{r10}, 0xfffffffffffffff8, 0xa, 0x40, 0x4, 0x5}], 0x5, &(0x7f0000000480)=[{{r10}, 0xfffffffffffffffa, 0x4, 0x4, 0x3, 0xfffffffffffffff7}, {{r10}, 0xfffffffffffffffb, 0x54, 0x40, 0x0, 0x1ff}, {{r10}, 0xffffffffffffffff, 0x35, 0x4, 0x6, 0x6}, {{r10}, 0xfffffffffffffffc, 0x41, 0x1, 0x1000, 0xfffffffffffffff9}, {{r10}, 0xfffffffffffffffc, 0xa4, 0xfff73, 0x1ff, 0x7}, {{r10}, 0xfffffffffffffff7, 0x4, 0x40000082, 0xfffffffffffffffc, 0x8}], 0x97, &(0x7f0000000540)={0x7fff, 0x9}) sendto$unix(r12, &(0x7f0000000580)="b020055750ef97602a94ee2048beb5207a23a4cea269bcb28ce53ac46c35d90cd367b02ead07102f91f68af26895ea2380ab8f2b3275be8d05bd1c6d0ed37ecce02443b2ad0835ea7fe9f465b4f391b4819b099dc97562ea2401aee0025e7c07298e800e4483e26a5325b10f8704e70943e7b73769501c312111ef7d3bcee4f80e2763b86287dc", 0x87, 0x7, &(0x7f0000000640)=@file={0x1, 0x1, './file0\x00'}, 0xa) setegid(r9) ioctl$WSMUXIO_LIST_DEVICES(r12, 0xc1045763, &(0x7f0000000680)={0x6, [{0x2, 0x400}, {0x1, 0x80}, {0x3, 0xf4}, {0x1, 0xb}, {0x3, 0x100}, {0x3, 0x5}, {0x1, 0x66}, {0x1, 0x8}, {0x2, 0xe}, {0x1, 0x9}, {0x1, 0x8}, {0x2, 0x8}, {0x2, 0x1000}, {0x2, 0x1ec}, {0x1, 0x8001}, {0x2, 0xdeb}, {0x2, 0x83d}, {0x3, 0x2}, {0x1, 0x1}, {0x2, 0x7}, {0x3, 0x4}, {0x1}, {0x3, 0x7}, {0x3, 0x7ff}, {0x1, 0x3ff}, {0x1, 0xf6}, {0x0, 0x80}, {0x3, 0x4}, {0x2, 0x4}, {0x1, 0x8}, {0x3, 0x2}, {0x2, 0x40}]}) msgget(0x1, 0x0) r13 = geteuid() msgctl$IPC_SET(r0, 0x1, &(0x7f00000007c0)={{r4, r2, r13, 0x0, 0x10, 0xc, 0x0, 0x0, 0xfffffffffffffffa}, 0x0, 0x0, 0x2, 0x1, 0x6, r7, r7, 0x3, 0x0, 0x3}) ioctl$TIOCSETVERAUTH(r12, 0x8004741c, &(0x7f0000000880)=0x140) r14 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f00000008c0), 0x1, 0x0) ioctl$WSDISPLAYIO_GETSCREEN(r14, 0xc0245755, &(0x7f0000000900)={0x1, './file0\x00', './file0\x00'}) r15 = openat$zero(0xffffffffffffff9c, &(0x7f0000000940), 0x100, 0x0) ftruncate(r15, 0x1) r16 = accept$unix(r15, &(0x7f0000000980)=@file={0x0, 0x0, ""/504}, &(0x7f0000000b80)=0x1fa) ioctl$FIONBIO(r16, 0x8004667e, &(0x7f0000000bc0)=0x38a6) ioctl$DRM_IOCTL_MODE_ATOMIC(r15, 0xc03864bc, &(0x7f0000000d00)={0x601, 0x6, &(0x7f0000000c00)=[0x401, 0x9, 0xda92, 0x8, 0x8, 0x7c74], &(0x7f0000000c40), &(0x7f0000000c80)=[0x3, 0x401, 0x1000, 0x40, 0x68e5, 0x5], &(0x7f0000000cc0)=[0x6, 0x204, 0x7f, 0x7], 0x0, 0x8000}) r17 = semget(0x2, 0x4, 0x300) semctl$IPC_SET(r17, 0x0, 0x1, &(0x7f0000000d40)={{r1, r2, r8, r2, 0x2, 0x5, 0x0, 0x0, 0x8}, 0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x7fffffff}) recvmmsg(r15, &(0x7f00000010c0)={{&(0x7f0000000dc0)=@in, 0x10, &(0x7f0000000f80)=[{&(0x7f0000000e00)=""/180, 0xb4}, {&(0x7f0000000ec0)=""/114, 0x72}, {&(0x7f0000000f40)=""/16, 0x10}], 0x3, &(0x7f0000000fc0)=""/218, 0xda}, 0x3}, 0x38, 0x2802, &(0x7f0000001100)={0x3ff, 0x1}) 152.000565ms ago: executing program 6 (id=31): setrlimit(0x8, &(0x7f0000000080)={0x42, 0x1}) r0 = syz_open_pts() close(r0) r1 = socket(0x18, 0x1, 0x0) ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x2000, 0x0, {[0xfffffbeffffffffb, 0x0, 0x4787, 0x1002, 0x8001, 0x0, 0x6, 0xffffffffffffffff, 0x0, 0x2f00, 0x0, 0x3, 0xfffffffffffbffff, 0x400000002000000, 0x0, 0xffffffffffffffa8, 0x0, 0xce5], [0xfffffffffffffffe, 0x80000001, 0xfffffffffffffffd, 0x100000000, 0x5, 0x7b98, 0x6, 0x0, 0x80000001], [0x5ad8, 0x2, 0x40000000, 0x0, 0xffffffffffffffff, 0x2, 0xfffffffffffffffa], [0x100, 0x20000000000, 0xfffffffffffffffc, 0x8000000100000000, 0xfffffffffffffffe, 0x2], [{0x0, 0x4, 0x0, 0x7d06}, {0xfffc, 0x2, 0x80, 0x10}, {0x0, 0x0, 0x0, 0x81}, {0x3, 0x100, 0x3, 0xffffffffffffffff}, {0x0, 0x2, 0x0, 0x8}, {0x0, 0x2006, 0x40000, 0x2000000000000000}, {0x6b7, 0x0, 0x1}, {0x8, 0xfffffffe, 0x0, 0x8}], {0x2, 0x6, 0x8}, {0x21, 0x6, 0x100000b0, 0x2}}}) getsockopt$sock_cred(r1, 0xffff, 0x1024, &(0x7f0000000240)={0x0}, &(0x7f0000000280)=0x2) kill(r2, 0x1a) syz_open_pts() ioctl$TIOCSETAW(r0, 0x802c7415, &(0x7f0000000000)={0x7fffffff, 0x6, 0x5, 0xffff7df8, "0a6400b728022400060000d40400000000000080", 0x81000003, 0x5}) r3 = openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSETA(r4, 0xc0284459, &(0x7f00000001c0)={0x44, 0x0, 0x7, 0x449e, "00ecffffff0000010000000400", 0x5, 0x7}) close(r4) setrlimit(0x8, &(0x7f00000000c0)={0x101, 0x7}) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x1012, 0xffffffffffffffff, 0x10003) select(0x40, &(0x7f0000000180)={0x6, 0xfc12, 0x1, 0x800, 0x1, 0x5, 0xfd, 0xffffffffffffff84}, 0x0, &(0x7f0000001240)={0x3e, 0x40, 0x404000000000, 0x7, 0x5b00f9c3, 0x7fffffffffffffff, 0x2, 0x4}, 0x0) ioctl$DIOCRSETTFLAGS(r3, 0xc450444a, &(0x7f0000000280)={{'./file0\x00', './file0\x00', 0x7, 0x2}, 0x0, 0x0, 0x0, 0x1, 0xf5b8, 0x2d, 0x6f8, 0xc6}) writev(r0, &(0x7f0000000040)=[{&(0x7f0000001380)="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", 0x4ba}], 0x1) setrlimit(0x8, &(0x7f0000000080)={0x42, 0x1}) (async) syz_open_pts() (async) close(r0) (async) socket(0x18, 0x1, 0x0) (async) ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x2000, 0x0, {[0xfffffbeffffffffb, 0x0, 0x4787, 0x1002, 0x8001, 0x0, 0x6, 0xffffffffffffffff, 0x0, 0x2f00, 0x0, 0x3, 0xfffffffffffbffff, 0x400000002000000, 0x0, 0xffffffffffffffa8, 0x0, 0xce5], [0xfffffffffffffffe, 0x80000001, 0xfffffffffffffffd, 0x100000000, 0x5, 0x7b98, 0x6, 0x0, 0x80000001], [0x5ad8, 0x2, 0x40000000, 0x0, 0xffffffffffffffff, 0x2, 0xfffffffffffffffa], [0x100, 0x20000000000, 0xfffffffffffffffc, 0x8000000100000000, 0xfffffffffffffffe, 0x2], [{0x0, 0x4, 0x0, 0x7d06}, {0xfffc, 0x2, 0x80, 0x10}, {0x0, 0x0, 0x0, 0x81}, {0x3, 0x100, 0x3, 0xffffffffffffffff}, {0x0, 0x2, 0x0, 0x8}, {0x0, 0x2006, 0x40000, 0x2000000000000000}, {0x6b7, 0x0, 0x1}, {0x8, 0xfffffffe, 0x0, 0x8}], {0x2, 0x6, 0x8}, {0x21, 0x6, 0x100000b0, 0x2}}}) (async) getsockopt$sock_cred(r1, 0xffff, 0x1024, &(0x7f0000000240), &(0x7f0000000280)=0x2) (async) kill(r2, 0x1a) (async) syz_open_pts() (async) ioctl$TIOCSETAW(r0, 0x802c7415, &(0x7f0000000000)={0x7fffffff, 0x6, 0x5, 0xffff7df8, "0a6400b728022400060000d40400000000000080", 0x81000003, 0x5}) (async) openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$TIOCSETA(r4, 0xc0284459, &(0x7f00000001c0)={0x44, 0x0, 0x7, 0x449e, "00ecffffff0000010000000400", 0x5, 0x7}) (async) close(r4) (async) setrlimit(0x8, &(0x7f00000000c0)={0x101, 0x7}) (async) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x1012, 0xffffffffffffffff, 0x10003) (async) select(0x40, &(0x7f0000000180)={0x6, 0xfc12, 0x1, 0x800, 0x1, 0x5, 0xfd, 0xffffffffffffff84}, 0x0, &(0x7f0000001240)={0x3e, 0x40, 0x404000000000, 0x7, 0x5b00f9c3, 0x7fffffffffffffff, 0x2, 0x4}, 0x0) (async) ioctl$DIOCRSETTFLAGS(r3, 0xc450444a, &(0x7f0000000280)={{'./file0\x00', './file0\x00', 0x7, 0x2}, 0x0, 0x0, 0x0, 0x1, 0xf5b8, 0x2d, 0x6f8, 0xc6}) (async) writev(r0, &(0x7f0000000040)=[{&(0x7f0000001380)="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", 0x4ba}], 0x1) (async) 151.469736ms ago: executing program 2 (id=32): r0 = open(&(0x7f0000000380)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7949) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000040)='#!', 0x2}], 0x1) write(r0, &(0x7f0000000180)="092020090900db0000ff4278ad535c2a415642000000005624b77b6a0a", 0x1d) execve(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) getpid() 122.800008ms ago: executing program 2 (id=33): r0 = syz_open_pts() r1 = socket$inet6(0x18, 0x1, 0x6) fstat(r1, &(0x7f0000000180)) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x200200) chmod(&(0x7f0000000040)='.\x00', 0x35e) setuid(0xee01) open(&(0x7f0000000380)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7949) execve(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x8, 0x180) setsid() ioctl$TIOCEXCL(r0, 0x2000740d) ioctl$TIOCSCTTY(r0, 0x20007461) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x2, 0x2, 0x40000000000009, 0x40300000006}) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x11}, 0x4000000000000007, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000040)={0x6b0, 0x6, 0x0, 0x8, "bf219e5e0e844bd16b589a105fe928b5d81d379c", 0x3, 0x465}) setuid(0xee01) 120.695684ms ago: executing program 6 (id=34): r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) ioctl$DIOCCLRSTATES(r0, 0x0, &(0x7f0000000000)={{0x15c, 0x1, 0x3}, 0x2, '\x00', 0x2, {@addrmask={@v4=@multicast2, @v6=@remote={0xfe, 0x80, '\x00', 0x0}, 0x0, 0x0, 0x5}, [0x1, 0xebf4], 0x7f, 0x2, 0x400}, {@addrmask={@v4=@multicast1, @v6=@rand_addr="d748cdc1ddf7113598cf1b8a79ede082", 0x0, 0x0, 0xff}, [0x3000, 0xbcc], 0x8a, 0x0, 0x5}, './file0\x00', './file0\x00', 0x6, 0x4}) r1 = getpid() getresuid(&(0x7f0000000280), &(0x7f00000002c0)=0x0, &(0x7f0000000300)) getresgid(&(0x7f0000000340), &(0x7f0000000380)=0x0, &(0x7f00000003c0)) r4 = getpgid(0x0) lstat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$SO_PEERCRED(r0, 0xffff, 0x1022, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0xc) r7 = getsid(0x0) fstatat(r0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2) r10 = fcntl$getown(r0, 0x5) r11 = getuid() sendmsg$unix(0xffffffffffffff9c, &(0x7f0000000640)={&(0x7f0000000100)=@abs={0x6, 0x0, 0x0, 0x1}, 0x8, &(0x7f0000000240)=[{&(0x7f0000000140)="ee85cfe9a3b7c1d7b3f802aa58945201dc2af3f97e970a80d6bb3e79b2a180f29da85b70cf117a52556c1c9e5126d0ba6ee9ef38e626e155cc1fd514a2db19ba6eb7617fb63fc3cf539574657a2c61cc004abede552e01cdef28c3eccabcad5730789a5a93ebf002e23913370244328b1bbafb240d38cea45bf7e549b972be3d704cae84b6e5148a9a26e35258433d0e7f7d6a1c0ca90e1b4a03ca07677990357786dc35d039c51c172a442bc191657b066ccc0f1477080c5125f224cc4ac1c0f71c6027432274a62418e1d6366d47c69c26d1c5963fc10929191a19ab1c7a47caffb14f271ebbab548bd96006", 0xed}], 0x1, &(0x7f00000005c0)=[@cred={0x18, 0xffff, 0x0, r1, r2, r3}, @cred={0x18, 0xffff, 0x0, r4, r5, r6}, @rights={0x18, 0xffff, 0x1, [r0, r0, r0]}, @cred={0x18, 0xffff, 0x0, r7, r8, 0xffffffffffffffff}, @cred={0x18, 0xffff, 0x0, r10, r11, 0xffffffffffffffff}], 0x78, 0xc}, 0x409) r12 = openat$null(0xffffffffffffff9c, &(0x7f0000001c00), 0x0, 0x0) r13 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c40), 0x40, 0x0) sendmsg$unix(r0, &(0x7f0000001cc0)={&(0x7f0000000680)=@file={0x3, 0x0, './file0\x00'}, 0xa, &(0x7f0000001b40)=[{&(0x7f00000006c0)="982d5cb7a4434de5567e18e790f80694853285cff16a08ce31c7105f73bc95a6242c0901e9b0afa970b5c411b2b181f0eeef1c36b33a7eece37956bd43c99205dc68cf9d3d2b535e8ad4102028dd3c64be0d3e90a6068ce9f1a1a3ba746790bde453f1ddeed68611a4489d510f124d1bfcd72e597b05d68e2fa0a11ee1d62efe26b89197f64b321b1c3154a9fc48129d50cabeb38383789c2a8414d9b4304a118c4b49ddc5659c34ecf7c293da66ac6a1db11e051852c34df1431544322f4c762cf5aea9a37082bfa3373a888c611ed083be640243bc0f00903cdb9a3b9bb0f50309e3afb5b4fbc09e3421b32955a8d87a94e36ef51187973b6faa350057cf3b278aec90c0215ffc1c1a68f88d69aec219f2c048a7a72687f88e805d1a1c13c190aa3fbe9e95c6ffb37a81831eb12de254a8e2ee15744bd58dc30d084ec131fe5a0bfcc645cf8482b6ebe0cf4d784018e11238096259437ea2b595a286a4e4a931ce22b598b358b2dc166eee7b355ead1e0b97145194fb9ff27b7f0a99d5ae74edc16d6d1b842fefa9494cbd9928a02daf76dfb053a19fbdf47d385eab260ad1e2345f056823a75962ece846d1a2f913897d599d89bc7116bf22f2a1c7a0ccbe714a5203ea9f104b243394b77e085f637d38d8573da60bae2c5e0fc0ac8b9d069d5782d797bd3f0affa082b6c3276a247b86f1e957730b22ab72b69a710ea37053c8ec5e7e4b002055eb4ed8a54c8fcb6a3822dc3dc4861d830226d778b591fb570abb2a023b1cc4116cf9629e2630e4be197e9eec3f5ee57f8c8b1cbc3fc9420f83da2422183b5505966198d73f29dc95bcc950361928b220f2cbf24d97f7d9453ec9dc4db03e9afcbb9d269a8c386adcb79e1320a0818979ec76e1aa11db82d9270d81c4013d6c55b78c32bc1bc59d640af821a799711369ff068f872b2d7d957f131cdca6002a91059d603be88bc8df20c4050bf50d99fb05a65cae6260dd677b5b477410cd165f5c7401b315bcc8959fa4cd09c02d40ecc552758dad07861c0fcfcea36fc228df80080c09bf28edd15b0b055a105a698f147a37e60d38f76fc464b74ff4a7f8196d0591001d78c12272ce05b14199f1646a2f8107f1c2bcc118e1c64dbf832955be8bb338968515b9bc0cfee7113cad01ec0634fe4e1c34eea2c83452e800fc1aa03fb471651844d7f2f1d036aab077c4afcb61f0a67b5067814d8971951544cc88ea595bfb5910cc05867084733737297d18b843ae4ec8141c753ca8e6a03504fb6f9492d8f4302bbc1623f50fd6cb2f63bfdbf3ed1920a960d03df02c1c27fe4acf5308c7440f90cd8876751f25a3e027a723042092bc9701d65db864a7e9b069f322910c0f7ee9fe8faddb6fb0bf91de670dd76289aa8a020dbf5238b0d7893883eb9d2edab6fcfcbf2370432db6a518deb43213900b22306074290269bc56775a4cdadf21c274c862ed74c00a671a0c0ecc32cddbea0b7576b8a4c28dbd25f822ae89665540f49a701f6c586eb088657e373fd69d226c3c93a4bb261c3b4d84a3c95b697297bbdf8c1fa75d0aab6fd03ab0c314d66c0cc351701b36ca0562128770ad8071e6898a5e8a4df7b39947f360620eedf6b11a873089aba03749a322dfb7df73920de192ba627c06cc1fc18f172cd45c1a03b406e1393c3164dc6190fc971b1ccaaedc72b1075718df3c1ac93c1ceb00a1894e59aad527b4ba215e7d4e41b03d8a6e743514f6fd39ee21d6264a9e336d8fe9a6f67f53ae18dc05771e1024289d00edb48223b459c44b1ad690c80a16cbac703610199bc9716dbfbb43781a9dbddc702ce6356c69369b64c1fcd408ae3abd883dcf0fd6fe41d769c48e0ec2e2ee967089b0437f79d2027983776eb05b90ec714fc469148e2e804e30917187f668c46e7e7741eeb41590ab50c8bb89d79460e25c1f97db134f55241974623bce3bd6f8dfdac803b1b4282f7092948f62703c33fe6b50ab49d1210857d2a798f99302b06d2785179ae84d3936aa57dd06fba781afa9c60d4b7c03e6c001448991eda0f1f6a6d618e3eca8288b2df2ec3d966d31302afc229c6c5dacc50422981744106d8fd4ca2f495febe39e773691f0fe059e8aea72bddc9e6ff21c45bbdd76289ebba6bd19756285e40b6936f9031242bea94e85c014e075ec4a64a5e3d1d25ada3c3dbf878fbbee144ee662677d3a2f7a73710244edd110204bceb51e6615beb9a687cd7cea46ae0169482c9ce5256b982073976f95b729a98cb207630bdf3647e96d0fe7d957bce526660f45a49b8774e69fdfeb6af01ed2e623ab149569f857d4aabf0d0b9c1eb7703028419408a926e16d55926dc53e724d2893411df5b7b030cd6f8abd04b882aa6dd50ae76f96b66eec01cb413db6249bbdd973b347799362603cc96e6a562872b7fbb2079e675aacb54716f24eaef20a3b139da06caf7cf7bb8eb44a195005a4a0256731850ef62bf4c05d76cf81a88e057e2e1505820be731454ceec4a9be318234719039902b53c188f755a6c761459c65ce1420ddf19a1cff8d172dbfb20614a0c2ced174e42895e894ae43751073cc35a418bac49deea885f94227bf31f672185352d4a5a8609d07202a0322b478875850c58325594da3974bc85a0344801c7b1279d78ba67efa86abb14bc57ba16ade29e26277f7a0cdd44c54a18b8394e2f7b3c3d0278195a4ba960b4d73877bff3eea23839f1ab091b0d40c3fc7b8f6c596439caee22800f5368319eb8506b23bdf5d0150330434e62eef8057cd62746378624b47a75bf082f817ddbec07a41e719378043746039877d4ac8a776de639dcfa20010a9e27b620c39fe1c3b585c7747be60c488be63537ad7f85e1dbade385d5c3411ad04bb90f852986bc78f7e33c6be037eda8221f998a0db424eefec728f520baa8e0f21c418222a848a6c770a3639d913e2e174fd6017dd0d2e59afea02c79416bf6328d91b42d6e097b14e3c2df6ca7a72614f1eb67d83afe72e1daf805c620741cfa7d363ac2c3e464da826004ce5d4b1c7e43d811566a05f136203d15b6412ddeb69a311c21d65c2d75149015ec9828acd086221a5dcb94fdccfa79b24108f1cbf8e4701468b36e9546bfe28a222d3f6cc960fdc10dbd5d1ab6cc28183f889c41aa414d198e09f29b4851f780ecc439f7c06af9004b3fb7531ab6928ae402a6956cd8e1aeb100719c407f7deed98b7c1d9b0eaecc93db69ee5c632822f2df67af6ab641fbb15af82b877b7ac10a3aea41064f85a67bdee943a467ae5ce5c6ad8873769108aef8935592a00102fbfbb2685cbaf79633b7a8a2f0c9d7168bee70a0ed6355bd6e75eb6bd5f2e1918cd1722a6956e260a077f9fc93383aebe2f5aa6c522d8150c234a112dca837d957c40f8dceba7607bd9ecf04c6149e8cf1d59b9da5dccd13059dcb0d2df98a8e91628b0cc93ee9c54eadc97b9496a9d54326f2aeb6b10824ba8ff6dc86428f861a735e86a622592caa08e7a6970e610a279ae7974c61dba8e5ba15072154bec64e6708165e87860263a6c22bd967dd33bdff3c53420c1469b522783f030e9544c31df4519e87e63262bd8c010899e3a7b9b7ae0c1cee66e05b5c3bc5121a590838061fbafddd9549f13e311f61cf01af7584a0995925d0f37257e69d52160b16611d1cb120eb5b4d831656898f6f9a2103f689da1e7d7e9777f77d2e7a7545bd12c47a66e61500c5434041995f5bc8a4e297a1bde378dc0be75ce0e1efcfa41b13c09ddc7bfbb78f04f723afe9f5ad5893f0a4f1aa104c98b00645867579882c1e3ff3a2ed8bde3af3e873660bde25f3d00d58cd9a5ae317234828ee5f5776067cfa4d07a09218d06fb902e8b78e5855a68e905903dc6d1be08e7dc228f7132f5772b765eb14833212ebbb5b376e7a75077c35bea08fa3b7d8bfc43740798db9cbd6ac1cd9641662355a2045398cc0e64db4d9ed360e9c4ef5c142c2b0eb2405d4e924677d1abf64adb866e2913a329880c447c9fc4af72343e3c97971594ffe73bf7c610452362c3339baf143e4a0ef1907b2798a029a0c4df4b2a6f8fd4e73ac701414d8cd4a0272d1e5c9919298389c8a73d52d2800c2203b6bd904da2cd2dfcce8a80d692f57eac0a085598e1c89e1c14901431cf46677a84cc64feb089944466901ac91a6805058a946404c80041a9ed0e10633393ca0ef444958ed6fa2c55237c2147cbb938f2d44bc169a33590c2756af3521f2eb0500cbdf80ef67a029a61c5f0389e42ababf8333d6b7740504e3106d32a83788cfedf8d954b1fd0bd78278fefd9a54e265a22b68ddfa4ed0d0ce8552cde198d0e22c36a687c902db69ac3b701f8f3b3657ed77e9d111e54ba0cc8060d948c3952eb2cf88474ff070ff88ea9641824d5aca061fa2e15e9cfdeda002ce7d18bbeb4eab68be0fe93963fd0d5950f17044fcb9c9f5bb40dca5082b5a8c31034fbd955eaea6f7e3ea9ac03eac3571b2b27201f0515acd9806899257806631ddee6ca1afc16df2ab64a47da70e7269fcae5a778cde21dc25ea0c0c8fce20877f1b291e87dd8713bb8609a2c88505b6f617087c7cf288a3a51192424a77101b4af08892e0701f247bcab55729a9f3d29aeca0f7d238a0a5d52e37fba0dea7b66f5012a420f03608ad5ee392350895fde910e33b614343f4a77ab5cd1930500349e0b1883a8e808ab043f0cbcb2dd625f4e6b1f899f504ee34d01eb969f9f54f5c7cab2bb4d5af90d0e4314cce68226b855c8ad670da1df6f6b1b507ed25478b25e53a261a9e4d602c6f0858d499ccec22938ae1457ef0a24ad0cf7728d6fa9f5f9dcf3ace0c9ca69664e289e15fc1f94bb2b46b4db581383216732b94867631bca9d5c5f5c9dadc26e7f4fd51d3f17a84040a9fdb5ac2a1e74c43bd8559780c7c86baa87c3f852ad9745db88ca3e30954b92d9bf06d9718b653ce962d4c6a22eef6d928b7e8cb8d7dc1f4621f231f1d846a486363810568a28844971862ab46ef8f5328902efef090ddc78c4209d0445805d072fcca4676553d52fe3115e9ac21224d942ab58c9ce2172d8b1f4102647ff57440a57f3a9714f3ad0ce321cd0b47e7d1c70965c495dd9c80386f864908c9409755db4809765854f9363fdec55503ccd54ab469b362b8e3cd9c8a661435157ad79fc845f71b5a7b3fe92759fc8acdbb747d1d8c15786b4dbc291354470a2e9ac4171835e66dc88bb0934661c09b421f57d31e1d4dd888229772b47f2cb7b40a04afcc157cbc2ab3e5e2ad54927e834fff594b4418d29b10b040caeeba797cb173746271fac6078e7c890318d4f649025e7c3a97657b034123fd4262be1ce55108d98a12b66393f7644bf27564fd0be10bf834c183a0cd4705eba58adca7f54a06d006c20b24ea9cda575a72914f6f8124584073ee020c5ee02b8336dcdfb339aeca86a35931be745967f23f6c4d54f89864b0b493a651da4ac6a6e6f467f7f8efa3ffba1b99c415982107073cb868ebe4c8561140b6d54bf73e3ed5ccae75f708468e086e5add6eb0e6ccea696e15c6f3022e48d0b75f5b370b16fd7fe1717fb40e62226a5a587a07161318a3a386c9b688ecc7d6c751f9d87efb78dd55f7cce5c8ad2c04449a4d3a74a7fc0a42acfe201f4e0975992b331cba7c6a30b5021e3134c83be663a35a87d917b57e1a073bfc41710f18912aea086de8d50220b8fd6dac31cbdf9791867cc883b8947ab6cb16fe9354eedd5b88f4b62ff3efe8f10680e74307736afd11048b451d87592ea", 0x1000}, {&(0x7f00000016c0)="f8bfcd4a9485566fb3d7be6088d1d14c5e78c9455caf51d67ed69bbd69c5256b35230d703a2e6688b114ce0b7ad6bfbf5b", 0x31}, {&(0x7f0000001700)="ea6715339423de3f74b218fd2feaaac679b91ea2ad75b94ce395ed182ac87a5f4284a38441871fdd0c38b230c1a955061faf9d027cf4ee9638a07a88158eff5ab0c581a2ce408c7d94336bd6426c847f6d8b2669c6c116ce42e2f91c0f63e3f2c4b301", 0x63}, {&(0x7f0000001780)="de112dd07aa32509ecd2867d", 0xc}, {&(0x7f00000017c0)="c212fcd849de8653524c0046b2c440468f4fe70868b4eb0edb451b15f83ab3d6ecf9ca4db531487576ce12cdb7d5edfa960443000d08bb98fa457ca28f92147a0705874bb6ae30400011991317b921ab2627338e06fcc3b6bea0e8bad61df6a0f97041aa21454e51a41f45315c1587fc033b4f856f957bc2b629fe589c84770260a4f1cdf65dc7969c5c4de67fee8ede00e58d1c395a0cd7966fa8d349216ee15ea233dfe2b2841de23953", 0xab}, {&(0x7f0000001880)="c5cbc26bb15e291af5570ae9404d453cd7f10f835277f9e11d6654c53c4cb52fc0f841ca3d1fbeec86d24ff41cfe", 0x2e}, {&(0x7f00000018c0)="1214bf0c0b8f736677fc09c5d8f09b97dd9147a48c8e685a311bd038b23797eee1a6f43d81b1395b2a0bb6c2bd94ea6af442a46e6c096bc2135ec842b3b663331845a667e2484ed712b381cdbb875a6b3d10246566b544fdc6e2ebeeb055a78c7acff681125d97db7cdc44e94f49d912d41f32d46a4daa8fc79a93c4cbdebf80c4b7774816a2527f811cf8d6903768984e8199e3006e385540dab7cee6b83aa3d81f0ecb256033b238bb2f41652424c0014a0c10a33ddf9215847115dd32e1edccdd8ff6f52aae8b830e4641b91cfe734756f18c310714aa43ea2ccdd8eb8de29c8a23f4833075796e205045ef9e1bbb", 0xf0}, {&(0x7f00000019c0)="ec189d64164073c5006bb33ee0d5c74c4414de7d48e9a6b2de831390c413f05334be238ca35122c3827ef793490c96dd2b3a7aa79223ab7a13bc55bcd9760183007634e1fa047f12d5725a97675ee2d8dc0fe791805113b9780835593173a5c23a9b4e1f91449632ef58e1f1202c54df67485fd25360a9d4b0a1b1da829959e023528d01bde468aeca66eb9885d4e61c0a1e48d4fee1149bd9768f1f0510149e7fb0cb8d615ac7380ececbeb3e85474be79832b7aecc0eed8586bca53539dd620fd82e1bcbad7d37d1d0f738", 0xcc}, {&(0x7f0000001ac0)="d157c7526d20", 0x6}, {&(0x7f0000001b00)="842c97538c13f3111efcf1ed644923f60017d6139e6cb7989bae775565", 0x1d}], 0xa, &(0x7f0000001c80)=[@rights={0x14, 0xffff, 0x1, [r12, r0]}, @rights={0x28, 0xffff, 0x1, [r0, r0, r0, r0, r0, r13, r0]}], 0x3c, 0x8}, 0x4) mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) fcntl$setown(r12, 0x6, r1) fcntl$setown(r12, 0x6, r10) fcntl$lock(r13, 0x7, &(0x7f0000001d00)={0x2, 0x2, 0x1, 0x400, r10}) getsockopt$SO_PEERCRED(r0, 0xffff, 0x1022, &(0x7f0000001d40)={0x0}, 0xc) readv(r13, &(0x7f0000002300)=[{&(0x7f0000001d80)=""/231, 0xe7}, {&(0x7f0000001e80)=""/87, 0x57}, {&(0x7f0000001f00)=""/218, 0xda}, {&(0x7f0000002000)=""/75, 0x4b}, {&(0x7f0000002080)=""/129, 0x81}, {&(0x7f0000002140)=""/163, 0xa3}, {&(0x7f0000002200)=""/220, 0xdc}], 0x7) fstat(r12, &(0x7f00000023c0)={0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000002380)='./file1\x00', r15, r9) setpgid(r7, r14) readv(r13, &(0x7f00000035c0)=[{&(0x7f0000002440)=""/23, 0x17}, {&(0x7f0000002480)=""/139, 0x8b}, {&(0x7f0000002540)=""/4096, 0x1000}, {&(0x7f0000003540)=""/111, 0x6f}], 0x4) setuid(r2) r16 = fcntl$dupfd(r12, 0xc, r13) ioctl$BIOCGETIF(r16, 0x4020426b, &(0x7f0000003600)={""/16, @ifru_index}) sysctl$net_inet_ip(&(0x7f0000003640), 0x4, &(0x7f0000003680)="d7c2087a7e24b29edd60460dfb71b049932bfa6e63259a08a22618c9c81542553a2b", &(0x7f00000036c0)=0x22, &(0x7f0000003700)="584e432e8f59e92e6bcb6ccacedd1fee51dc6774b4da3cb5e56c985d6e92bb14ca2711ca81f057f46e35d6184456098323b3cb65fc395c99686ff056b206b951d0da03723c85658f9f33e69d43ddafea459edca41216bdac8e0c97b686edabdb719dc7f6b8b46fa055656fa50a5cfb16225f84e90b36dc0df117cfe890e73748cbecd58749637c2f11f5116f30902765689e4eb4b0e279e553b0026d2dee0056bccd72b32fdff3da04f9847970c34a5600", 0xb1) 120.179767ms ago: executing program 2 (id=35): setrlimit(0x8, &(0x7f0000000980)={0x8, 0x54}) syz_open_pts() (async) openat$wskbd(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r0 = socket$inet(0x2, 0x2, 0xfc) ioctl$FIONREAD(r0, 0x80206979, &(0x7f0000000000)) getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0}, 0xc) (async) r2 = syz_open_pts() ioctl$TIOCSETAF(r2, 0x802c7416, &(0x7f0000000100)={0xa3b, 0x80, 0x8, 0x1, "da4784ee14f298e51daa810cd04c85d7c89e92b5", 0x6, 0x9}) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x78e, 0x7) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) (async) truncate(&(0x7f0000000080)='./file0\x00', 0x40002ffff) (async) setreuid(0x0, r1) openat$vnd(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$VNDIOCSET(r3, 0xc0384600, &(0x7f00000000c0)={0x0, 0x8001, &(0x7f0000000080)='./file0\x00', 0x8}) (async, rerun: 64) ioctl$WSKBDIO_GETDEFAULTBELL(0xffffffffffffffff, 0x40105706, 0x0) (async, rerun: 64) setsockopt$sock_int(0xffffffffffffffff, 0xffff, 0x1000, 0x0, 0x0) (async, rerun: 64) r4 = socket(0x1, 0x2, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getrlimit(0x6, &(0x7f0000000140)) (async, rerun: 32) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(r3, 0xc01864c2, &(0x7f0000000180)={0x0, 0x0, r5, 0x0, 0xfff}) (async, rerun: 32) dup(r4) (async) r6 = semget(0x3, 0x1, 0x84) semctl$IPC_STAT(r6, 0x0, 0x2, &(0x7f0000000800)=""/229) (async) semget(0x0, 0x4, 0x531) (async) ktrace(0x0, 0x0, 0x7934d93b65e32d6c, 0x0) (async, rerun: 32) semctl$IPC_RMID(r6, 0x0, 0x0) (async, rerun: 32) madvise(&(0x7f0000038000/0x1000)=nil, 0x1000, 0x1) 119.750989ms ago: executing program 6 (id=36): r0 = syz_open_pts() close(r0) ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f00000001c0)={0xffffff89, 0x6, 0xfffffff8, 0x5, "08d0ffff006575ec00", 0x0, 0xff}) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) 74.703658ms ago: executing program 2 (id=37): syz_emit_ethernet(0x42, &(0x7f00000001c0)={@broadcast, @random="09cce9ad1b06", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x17, 0x34, 0x66, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x1, @multicast1}, @icmp=@echo={0x8, 0x0, 0x0, 0x8, 0x1bbc, "b1df7d08a7e1fc5415fd0b2166cad8ca6b4c031975408a28"}}}}}) 73.694637ms ago: executing program 6 (id=38): r0 = socket(0x18, 0x2, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1001, &(0x7f0000000340)=0x8029, 0x4) (async, rerun: 32) ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, &(0x7f0000000100)={0x0, 0xfffffffd, {[0xfffffbeffffffffb, 0x0, 0x3, 0x2, 0x8001, 0x0, 0x6, 0xffffffffffffffff, 0x0, 0x2f00, 0x0, 0x80000000000003, 0xffffffffffffffff, 0x400000000000000, 0x0, 0xffffffffffffffa5, 0x82, 0xce1], [0xfffffefffffffffe, 0x5, 0xfffffffffffffff9, 0x400000002, 0x9, 0x7b98, 0x200, 0x0, 0xfffffffffffffffe], [0x5ad8, 0x2, 0x40000000, 0x0, 0xbffffffefffffffb, 0x11003], [0x100, 0x20000000000, 0xfffffffffffffffc, 0x8040000100000002, 0xfffffffffffffffa, 0x5], [{0xdb6e, 0x4, 0x0, 0x7d06}, {0xfffc, 0x2, 0x5}, {0x2, 0x80000000, 0xfffffffe, 0x80}, {0x7, 0x4b72, 0x3, 0xffffffffffffffff}, {0x0, 0x42, 0x0, 0xfffffffffffffff8}, {0x0, 0x2003, 0x40000, 0x6}, {0x6b7}, {0x0, 0x965, 0xbffffffc, 0x9}], {0x2000, 0x7, 0x5, 0x8}, {0x29, 0x10000006, 0x6, 0x2}}}) (async, rerun: 32) r1 = kqueue() (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(0xffffffffffffff9c, 0xc01864c1, &(0x7f0000000040)={0x0, 0x1, 0xffffffffffffffff, 0x0, 0x10000}) fcntl$dupfd(r2, 0xa, r1) ioctl$WSMUXIO_REMOVE_DEVICE(0xffffffffffffffff, 0x80085762, &(0x7f0000000080)={0x1, 0x101}) (async) ioctl$DIOCXCOMMIT(0xffffffffffffffff, 0xc0104452, &(0x7f0000001c40)={0x0, 0x2, 0x0}) (async) kevent(r1, &(0x7f0000000040), 0x30, 0x0, 0x57d, 0x0) (async) sysctl$vfs_nfs(&(0x7f00000002c0)={0xa, 0x2, 0x2}, 0x3, 0x0, 0x0, &(0x7f0000000000)="e7b90000", 0x4) (async) setsockopt(r0, 0x1000000000029, 0xb, &(0x7f0000003680)='\x00\x00\x00\x00', 0x4) (async) syz_emit_ethernet(0xc6, &(0x7f00000005c0)=ANY=[@ANYBLOB="8f6f77ede655ffffffffffff86dd605f6ad900903afffe000000000000000000000000000000fe8000000000000000000000000000aa88"]) (async) setsockopt(r0, 0x1000000029, 0x9, &(0x7f0000000000), 0x0) (async, rerun: 32) r3 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) (rerun: 32) ioctl$WSMOUSEIO_SETPARAMS(r3, 0x80105728, &(0x7f00000000c0)={&(0x7f0000000000)=[{0x23, 0x40}, {0x8, 0x9}], 0x2}) 72.759894ms ago: executing program 2 (id=39): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x8, 0x2000000000000004}, 0x0, 0x0, 0x0) r1 = kqueue() kevent(r1, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6381) r2 = open(&(0x7f0000000080)='./file0\x00', 0x10, 0x100) ioctl$WSDISPLAYIO_USEFONT(r2, 0x80585750, &(0x7f0000000140)={'./file0\x00', 0x8, 0xa, 0x400, 0x1, 0xe522, 0x6, 0x0, 0x1, 0x0, 0x8c6d, 0x10001}) ioctl$FIONBIO(r2, 0x82907003, &(0x7f0000000140)=0x2) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) ioctl$FIONBIO(r2, 0x82907003, &(0x7f0000000140)=0x1) closefrom(r0) ioctl$DRM_IOCTL_MODE_GETENCODER(r2, 0xc01464a6, &(0x7f0000000240)={0x0, 0x9, 0x0, 0x6, 0x8}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000380)={&(0x7f0000000280)=[0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0], 0x1, 0x3, 0x1, 0x3, 0xf48, 0x9, 0x8, 0x7a61}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f00000003c0)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100), &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0], 0x0, 0x7, 0x9, r3, r4, 0x3, 0x1, 0x5, 0x5, 0x1, 0x8001}) 72.608566ms ago: executing program 6 (id=40): r0 = msgget(0x3, 0x280) sysctl$kern(&(0x7f0000000000)={0x1, 0x4d}, 0x2, 0x0, 0x0, &(0x7f0000001440)="02000000", 0x4) msgrcv(r0, 0x0, 0x0, 0x3, 0x0) unveil(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='c\x00') msgrcv(r0, 0x0, 0x0, 0x3, 0x1000) ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, &(0x7f0000000340)={0x7d38, 0x0, {[0xfffffbeffffffff7, 0x0, 0x4787, 0x1002, 0x8001, 0x3, 0x6, 0xffffffffffffffff, 0xf0cd, 0x2f00, 0x2, 0x3, 0xfffffffffffbffff, 0x400000002000000, 0x0, 0xffffffffffffffa8, 0x82, 0xce5], [0x0, 0x7fff, 0x8000000000000000, 0x4000000, 0x4000000000000fff, 0x26520a6c, 0x6, 0xfffffffffffffffc, 0x0, 0x4], [0x5ad8, 0x1004, 0xe, 0x400000000000, 0xffffffffffffffff, 0x6, 0xfffffffffffffffe], [0x40000000000000, 0x3, 0xfffffffffffffff9, 0x6, 0x2, 0x6], [{0x0, 0x2000004, 0xffffffff, 0x7d04}, {0xa, 0x2, 0x5, 0x100000000}, {0x0, 0x0, 0xfffffffe, 0x48}, {0x3, 0x100, 0x3, 0x80000001}, {0x0, 0xfffffffe, 0x0, 0x1}, {0x0, 0x2106, 0x40040, 0x2000000000000000}, {0xf054, 0x0, 0x1, 0x1}, {0x4, 0x8000001, 0x0, 0xfff}], {0x8082, 0x6, 0x8}, {0x4, 0x101, 0x20000001, 0x2}}}) mknod(&(0x7f0000000080)='./bus\x00', 0x6000, 0x9) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BIOCSETIF(r1, 0xc0785101, &(0x7f0000000400)={'tap', 0x0}) r2 = socket(0x11, 0x3, 0x0) setsockopt$sock_linger(r2, 0xffff, 0x80, &(0x7f0000000000)={0x800, 0x1c000000}, 0x1) unveil(0x0, &(0x7f0000000380)='c\x00') 1.204545ms ago: executing program 1 (id=41): ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}]}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x4e}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x2000, 0x0, 0x37) r0 = open(&(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40, 0x109) ioctl$TIOCSFLAGS(r0, 0x8004745c, &(0x7f0000000500)=0x7fffffff) ioctl$KDGETLED(r0, 0x40044b41, &(0x7f0000000000)) 0s ago: executing program 7 (id=42): r0 = openat$vmm(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$VMM_IOC_TERM(r0, 0x80045604, &(0x7f0000000240)={0x7d}) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) r2 = socket$inet(0x2, 0x3, 0x0) ioctl$FIONREAD(r2, 0x80206979, &(0x7f0000000100)) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.70' (ED25519) to the list of known hosts. uvm_fault(0xfffffd006a2aa200, 0x0, 0, 1) -> e kernel: page fault trap, code=0 Stopped at sys_shmat+0x453: movq 0(%r15),%rdi TID PID UID PRFLAGS PFLAGS CPU COMMAND *235559 40724 0 0 0x4000000 0 syz-executor 206280 50504 0 0x2 0x1 1 syz-executor sys_shmat(ffff80003c3aad20,ffff80003c46d590,ffff80003c46d4e0) at sys_shmat+0x453 syscall(ffff80003c46d590) at syscall+0xb17 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x47d440eeee0, count: 12 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{0}> ddb{0}> set $lines = 0 ddb{0}> set $maxwidth = 0 ddb{0}> show panic *cpu0: uvm_fault(0xfffffd006a2aa200, 0x0, 0, 1) -> e ddb{0}> trace sys_shmat(ffff80003c3aad20,ffff80003c46d590,ffff80003c46d4e0) at sys_shmat+0x453 syscall(ffff80003c46d590) at syscall+0xb17 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x47d440eeee0, count: -3 ddb{0}> show registers rdi 0 rsi 0x2000 __ALIGN_SIZE+0x1000 rbp 0xffff80003c46d4b0 rbx 0xfffffd006a092e70 rdx 0 rcx 0 rax 0 r8 0x100 r9 0xfffffd00097fd5b0 r10 0 r11 0xc433102999a3d599 r12 0xffff80003c3aad20 r13 0xffff8000015f9010 r14 0x1 r15 0 rip 0xffffffff82f18af3 sys_shmat+0x453 cs 0x8 rflags 0x10246 __ALIGN_SIZE+0xf246 rsp 0xffff80003c46d420 ss 0x10 sys_shmat+0x453: movq 0(%r15),%rdi ddb{0}> show proc PROC (syz-executor) tid=235559 pid=40724 tcnt=4 stat=onproc flags process=0 proc=4000000 runpri=50, usrpri=50, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff80003c3aba18,0xffff80003c3ab4f8 process=0xffff80003c459838 user=0xffff80003c468000, vmspace=0xfffffd006a2aa200 estcpu=36, cpticks=0, pctcpu=0.0, user=0, sys=0, intr=0 ddb{0}> ps PID TID PPID UID S FLAGS WAIT COMMAND 40724 222895 30560 0 2 0 syz-executor *40724 235559 30560 0 7 0x4000000 syz-executor 40724 449859 30560 0 3 0x4000080 fsleep syz-executor 40724 126412 30560 0 2 0x4000000 syz-executor 50576 279520 86163 0 2 0 syz-executor 50576 427029 86163 0 3 0x4000000 smrbar syz-executor 16556 316991 50504 0 2 0 syz-executor 16556 429888 50504 0 3 0x4000080 msgwait syz-executor 16556 44521 50504 0 3 0x4000080 msgwait syz-executor 68253 409891 0 0 3 0x14280 nfsidl nfsio 64861 424319 0 0 3 0x14280 nfsidl nfsio 34930 127609 0 0 3 0x14280 nfsidl nfsio 7986 510305 0 0 3 0x14280 nfsidl nfsio 24683 168645 0 0 3 0x14280 nfsidl nfsio 76018 442916 0 0 3 0x14280 nfsidl nfsio 34136 356507 0 0 3 0x14280 nfsidl nfsio 69285 504171 0 0 3 0x14280 nfsidl nfsio 52579 256719 0 0 3 0x14280 nfsidl nfsio 64589 461738 0 0 3 0x14280 nfsidl nfsio 16131 484587 0 0 3 0x14280 nfsidl nfsio 92230 421374 0 0 3 0x14280 nfsidl nfsio 11691 167457 0 0 3 0x14280 nfsidl nfsio 58276 95198 0 0 3 0x14280 nfsidl nfsio 60807 382142 0 0 3 0x14280 nfsidl nfsio 49619 11827 0 0 3 0x14280 nfsidl nfsio 92144 500762 0 0 3 0x14280 nfsidl nfsio 66970 463456 0 0 3 0x14280 nfsidl nfsio 29558 144517 0 0 3 0x14280 nfsidl nfsio 43248 66611 0 0 3 0x14280 nfsidl nfsio 57002 274998 93595 0 3 0x80 nanoslp syz-executor 57002 421331 93595 0 3 0x4000080 semwait syz-executor 33643 428267 79241 -1 3 0x90 nanoslp syz-executor 33643 461857 79241 -1 3 0x4000090 fifor syz-executor 33643 84932 79241 -1 3 0x4000090 fsleep syz-executor 9852 318315 78145 -1 3 0x90 nanoslp syz-executor 9852 218948 78145 -1 3 0x4000098 kqread syz-executor 9852 368950 78145 -1 3 0x4000090 fsleep syz-executor 86163 296524 92107 0 3 0x82 nanoslp syz-executor 50504 206280 92107 0 7 0x3 syz-executor 78145 27113 92107 0 3 0x82 nanoslp syz-executor 93595 43821 92107 0 3 0x82 nanoslp syz-executor 79241 150974 92107 0 3 0x82 nanoslp syz-executor 54044 101881 92107 0 2 0x2 syz-executor 30560 359991 92107 0 2 0xc82 syz-executor 53268 147370 92107 0 3 0x82 nanoslp syz-executor 92107 409533 17638 0 3 0x82 kqread syz-executor 17638 175014 59535 0 3 0x10008a sigsusp ksh 59535 492955 73960 0 3 0x98 kqread sshd-session 73960 376794 61339 0 3 0x92 kqread sshd-session 47055 310197 1 0 3 0x100083 ttyin getty 61339 511151 1 0 3 0x88 kqread sshd 69019 212438 87805 74 3 0x1100092 bpf pflogd 87805 172328 1 0 3 0x80 sbwait pflogd 34913 222291 40793 73 3 0x1100090 kqread syslogd 40793 142883 1 0 3 0x100082 sbwait syslogd 63419 266171 1 0 3 0x100080 kqread resolvd 84156 173533 32851 77 3 0x100092 kqread dhcpleased 71872 390753 32851 77 3 0x100092 kqread dhcpleased 32851 224430 1 0 3 0x80 kqread dhcpleased 51458 287 0 0 3 0x14200 bored smr 53992 232778 0 0 2 0x14200 zerothread 58990 59590 0 0 3 0x14200 aiodoned aiodoned 31182 490551 0 0 3 0x14200 syncer update 17999 58339 0 0 3 0x14200 cleaner cleaner 6555 153942 0 0 3 0x14200 reaper reaper 29000 73783 0 0 3 0x14200 pgdaemon pagedaemon 5452 392886 0 0 3 0x14200 bored viomb 32651 289598 0 0 3 0x40014200 acpi0 acpi0 90699 241446 0 0 3 0x40014200 idle1 87610 49046 0 0 3 0x14200 bored softnet1 73042 369501 0 0 3 0x14200 bored softnet0 25631 43690 0 0 3 0x14200 bored systqmp 3122 11527 0 0 3 0x14200 bored systq 67454 432523 0 0 3 0x14200 tmoslp softclockmp 22023 449212 0 0 2 0x40014200 softclock 48495 342510 0 0 3 0x40014200 idle0 1 27049 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb{0}> show all locks Process 40724 (syz-executor) thread 0xffff80003c3aad20 (235559) exclusive kernel_lock &kernel_lock r = 0 (0xffffffff83a3e000) #0 witness_lock+0x5f1 #1 __mp_acquire_count+0x58 #2 malloc+0xe3 #3 sys_shmat+0x9f #4 syscall+0xb17 #5 Xsyscall+0x128 Process 50576 (syz-executor) thread 0xffff807ffffee7e0 (427029) exclusive rwlock clonelk r = 0 (0xffffffff839b9bf8) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 if_clone_destroy+0x93 #3 ifioctl+0x59d #4 sys_ioctl+0x674 #5 syscall+0xbd4 #6 Xsyscall+0x128 Process 54044 (syz-executor) thread 0xffff80002a2122a8 (101881) exclusive rrwlock inode r = 0 (0xfffffd006a881e98) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 rrw_enter+0xc6 #3 VOP_LOCK+0xbd #4 vn_lock+0xa4 #5 vfs_lookup+0x12b #6 namei+0x7c5 #7 domkdirat+0x8b #8 syscall+0xb17 #9 Xsyscall+0x128 ddb{0}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 11059 12151K 12166K 166960K 12184 0 pcb 17 12K 12K 166960K 22 0 rtable 243 7K 7K 166960K 357 0 pf 37 18K 18K 166960K 56 0 ifaddr 43 7K 7K 166960K 51 0 ifgroup 55 2K 2K 166960K 63 0 sysctl 1 1K 9K 166960K 5 0 counters 70 37K 37K 166960K 82 0 ioctlops 0 0K 4K 166960K 1491 0 iov 0 0K 0K 166960K 1 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1292 81K 82K 166960K 1383 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 3 5K 5K 166960K 3 0 VM map 2 1K 1K 166960K 2 0 sem 6 0K 0K 166960K 6 0 dirhash 12 2K 2K 166960K 12 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 17 61K 93K 166960K 175 0 proc 78 147K 147K 166960K 560 0 subproc 72 4K 4K 166960K 72 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 2 0 in_multi 99 7K 7K 166960K 99 0 ether_multi 1 0K 0K 166960K 1 0 mrt 0 0K 0K 166960K 4 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 61 281K 281K 166960K 61 0 exec 0 0K 1K 166960K 387 0 fusefs mount 1 32K 32K 166960K 1 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 241 159K 169K 166960K 3449 0 UVM aobj 4 2K 2K 166960K 4 0 pinsyscall 42 84K 106K 166960K 1331 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 0K 166960K 2 0 NDP 18 0K 2K 166960K 32 0 temp 38 9118K 9130K 166960K 6310 0 kqueue 14 22K 24K 166960K 32 0 SYN cache 2 16K 16K 166960K 2 0 ddb{0}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 26 0 0 1 0 1 1 0 8 0 rtpcb 120 33 0 30 1 0 1 1 0 8 0 rtentry 176 112 0 1 6 0 6 6 0 8 0 unpcb 144 62 0 43 2 0 2 2 0 8 1 syncache 336 4 0 4 1 1 0 1 0 8 0 tcpcb 736 13 0 8 1 0 1 1 0 8 0 arp 136 18 0 0 1 0 1 1 0 8 0 inpcb 328 82 0 73 1 0 1 1 0 8 0 nd6 152 25 0 0 1 0 1 1 0 8 0 kcovpl 48 8 0 0 1 0 1 1 0 8 0 ppxss 1192 6 0 6 1 0 1 1 0 8 1 pfstscr 40 2 0 0 1 0 1 1 0 8 0 pffrag 232 1 0 0 1 0 1 1 0 482 0 pffrnode 88 1 0 0 1 0 1 1 0 8 0 pffrent 40 1 0 0 1 0 1 1 0 8 0 pfosfp 40 1428 0 1005 5 0 5 5 0 8 0 pfosfpen 112 1428 0 714 21 0 21 21 0 8 0 pfstitem 24 22 0 0 1 0 1 1 0 8 0 pfstkey 128 22 0 0 1 0 1 1 0 8 0 pfstate 448 21 0 0 3 0 3 3 0 8 0 pfrule 1360 22 0 16 2 1 1 2 0 8 0 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 454 0 0 29 0 29 29 0 8 0 art_table 40 455 0 0 5 0 5 5 0 8 0 art_node 32 112 0 11 1 0 1 1 0 8 0 sysvmsgpl 40 1 0 0 1 0 1 1 0 8 0 semapl 72 4 0 0 1 0 1 1 0 8 0 shmpl 112 1 0 0 1 0 1 1 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino2pl 256 1628 0 159 93 0 93 93 0 8 0 ffsino 296 1628 0 159 114 0 114 114 0 8 0 nchpl 144 1878 0 175 64 0 64 64 0 8 0 rtmask 32 2 0 2 1 0 1 1 0 8 1 vnodes 216 1728 0 0 96 0 96 96 0 8 0 namei 1024 5785 0 5784 3 2 1 2 0 8 0 percpumem 16 56 0 6 1 0 1 1 0 8 0 kstatmem 264 35 0 8 3 0 3 3 0 8 1 scsiplug 72 2 0 2 1 1 0 1 0 8 0 scxspl 216 6468 0 6468 4 3 1 3 1 8 1 plimitpl 152 36 0 19 1 0 1 1 0 8 0 sigapl 424 512 0 445 8 0 8 8 0 8 0 knotepl 120 290 0 0 9 0 9 9 0 8 0 kqueuepl 224 33 0 23 1 0 1 1 0 8 0 pipepl 344 130 0 103 3 0 3 3 0 8 0 fdescpl 528 476 0 445 3 0 3 3 0 8 0 filepl 160 1798 0 1581 11 1 10 11 0 8 0 lockfpl 104 18 0 16 1 0 1 1 0 8 0 lockfspl 48 10 0 8 1 0 1 1 0 8 0 sessionpl 144 26 0 17 1 0 1 1 0 8 0 pgrppl 48 37 0 20 1 0 1 1 0 8 0 ucredpl 104 164 0 148 1 0 1 1 0 8 0 zombiepl 144 450 0 449 1 0 1 1 0 8 0 processpl 1232 512 0 445 6 0 6 6 0 8 0 procpl 664 585 0 507 7 0 7 7 0 8 0 sockpl 752 180 0 149 5 0 5 5 0 8 1 mcl64k 65536 4 0 0 1 0 1 1 0 8 0 mcl16k 16384 2 0 0 1 0 1 1 0 8 0 mcl12k 12288 2 0 0 1 0 1 1 0 8 0 mcl8k 8192 2 0 0 1 0 1 1 0 8 0 mcl4k 4096 121 0 0 16 0 16 16 0 8 0 mcl2k 2048 17 0 0 3 0 3 3 0 8 0 mtagpl 96 2 0 0 1 0 1 1 0 8 0 mbufpl 256 138 0 0 9 0 9 9 0 8 0 bufpl 272 2396 0 105 153 0 153 153 0 8 0 anonpl 32 3609 0 0 30 0 30 30 0 115 0 amapchunkpl 152 9249 0 8733 23 1 22 22 0 158 0 amappl16 200 1354 0 1334 4 2 2 4 0 8 0 amappl15 192 16 0 16 1 1 0 1 0 8 0 amappl14 184 428 0 427 1 0 1 1 0 8 0 amappl13 176 122 0 110 1 0 1 1 0 8 0 amappl12 168 739 0 709 2 0 2 2 0 8 0 amappl11 160 23 0 23 1 1 0 1 0 8 0 amappl10 152 67 0 52 1 0 1 1 0 8 0 amappl9 144 299 0 299 1 1 0 1 0 8 0 amappl8 136 102 0 100 1 0 1 1 0 8 0 amappl7 128 151 0 138 1 0 1 1 0 8 0 amappl6 120 157 0 155 1 0 1 1 0 8 0 amappl5 112 99 0 89 1 0 1 1 0 8 0 amappl4 104 292 0 273 1 0 1 1 0 8 0 amappl3 96 1707 0 1585 4 0 4 4 0 8 0 amappl2 88 536 0 476 2 0 2 2 0 8 0 amappl1 80 10489 0 9882 15 1 14 15 0 8 0 amappl 88 2711 0 2543 4 0 4 4 0 92 0 uvmvnodes 80 100 0 0 3 0 3 3 0 8 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 3 0 0 1 0 1 1 0 8 0 uaddrrnd 24 476 0 445 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 476 0 445 1 0 1 1 0 8 0 vmmpekpl 168 5995 0 5959 2 0 2 2 0 8 0 vmmpepl 168 39356 0 37441 87 1 86 87 0 357 0 vmsppl 488 475 0 445 5 0 5 5 0 8 0 rwobjpl 80 14421 0 13385 25 3 22 24 0 8 0 pdppl 4096 959 0 890 99 28 71 85 0 8 2 pvpl 32 10716 0 0 87 0 87 87 0 265 0 pmappl 256 475 0 445 3 0 3 3 0 8 0 extentpl 40 45 0 27 1 0 1 1 0 8 0 phpool 112 425 0 34 12 0 12 12 0 8 0 ddb{0}> machine ddbcpu 0 Invalid cpu 0 ddb{0}> trace sys_shmat(ffff80003c3aad20,ffff80003c46d590,ffff80003c46d4e0) at sys_shmat+0x453 syscall(ffff80003c46d590) at syscall+0xb17 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x47d440eeee0, count: -3 ddb{0}> machine ddbcpu 1