last executing test programs: 6.347383979s ago: executing program 2 (id=3): r0 = syz_open_pts() ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000340)={0x0, 0x0, 0xfffffffe, 0x8000, "ff14e700", 0x3, 0x40000}) r1 = kqueue() kevent(r1, &(0x7f0000000040)=[{{}, 0xfffffffffffffff9, 0x6b, 0x11, 0x200000000000001}], 0x203, 0x0, 0x0, 0x0) setrlimit(0x8, &(0x7f0000000980)={0x9, 0x51}) r2 = syz_open_pts() syz_open_pts() writev(r2, 0x0, 0x0) ioctl$TIOCSETAW(r2, 0x802c7415, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) select(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x80000}, &(0x7f00000024c0)={0x1fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc28}, 0x0, 0x0) ioctl$WSMUXIO_REMOVE_DEVICE(0xffffffffffffffff, 0x80085762, 0x0) select(0x7, &(0x7f0000000000)={0x400}, &(0x7f0000000040), &(0x7f0000000080)={0xcb}, &(0x7f0000000180)) write(r0, &(0x7f0000000080)="8fb769", 0x3) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000380)="079facfaaed69aea4dc561c3b736feac0a2a76087be8b904ddc6f90b66e0f69b6dfba683b348224cf0ccc2a39b0f79389a2bd9b211424a22ca014b9231e253e257706c75b3f320166475c72455021edf575fab8b5d65b8d261c87c3ccc4e784ea7462f3723edabb8e26d27acb1797e2ef4db27270a", 0xffffff01}], 0x1) sysctl$net_inet_ip(&(0x7f0000001080)={0x4, 0x2, 0x0, 0x15}, 0x4, 0x0, 0x0, 0x0, 0x0) syz_open_pts() ioctl$TIOCFLUSH(r0, 0x80047410, &(0x7f0000000000)=0x7) 1.842734659s ago: executing program 3 (id=116): clock_gettime(0x4, 0xffffffffffffffff) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x20000000, {0xa, 0x1}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x18, 0x1, 0x0) r1 = kqueue() ioctl$FIOASYNC(r1, 0x8004667d, &(0x7f00000000c0)=0x80) setsockopt(r0, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbdf13b9fd812eaa4e713048e69931929648", 0x14) sysctl$kern(&(0x7f0000000040)={0x3, 0x1}, 0x2, 0x0, 0x0, 0x0, 0x0) 1.84248996s ago: executing program 4 (id=117): symlink(0x0, &(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = semget$private(0x0, 0x4, 0x5ea614f0394d1dcb) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, 0x0, 0x29, 0xb3}, 0xa3f, 0x8000000000000000, 0x4}) semctl$GETALL(r0, 0x0, 0x6, 0x0) sysctl$kern(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = semget$private(0x0, 0x1, 0x20) semctl$GETPID(r0, 0x2, 0x4, &(0x7f00000002c0)=""/218) semctl$GETALL(r1, 0x0, 0x6, &(0x7f0000000000)) symlink(0x0, &(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) semget$private(0x0, 0x4, 0x5ea614f0394d1dcb) (async) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, 0x0, 0x29, 0xb3}, 0xa3f, 0x8000000000000000, 0x4}) (async) semctl$GETALL(r0, 0x0, 0x6, 0x0) (async) sysctl$kern(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) semget$private(0x0, 0x1, 0x20) (async) semctl$GETPID(r0, 0x2, 0x4, &(0x7f00000002c0)=""/218) (async) semctl$GETALL(r1, 0x0, 0x6, &(0x7f0000000000)) (async) 1.744897906s ago: executing program 3 (id=120): syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000000)="b886b4e47f", 0xfffffffffffffee7}], 0x1) r0 = socket$inet(0x2, 0x1, 0x0) close(r0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r1, 0x0, 0x200000000000a, &(0x7f0000000000)="ea00005c00000000", 0x1) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000240)="ea00000100000000", 0x8) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) fcntl$lock(r2, 0x9, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$FIOASYNC(r3, 0x8004667d, &(0x7f0000000000)=0x5) bind$unix(r3, &(0x7f0000000200)=@file={0xd570d0466b6018f, './file0\x00'}, 0xa) sendmsg$unix(r3, &(0x7f0000000080)={&(0x7f0000000040)=@file={0x170, './file0\x00'}, 0xa, 0x0}, 0x0) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) r4 = socket(0x2, 0x1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) bind(r4, &(0x7f0000000000), 0x10) listen(r4, 0x0) r5 = socket(0x2, 0x1, 0x0) connect$unix(r5, &(0x7f0000000000), 0x10) select(0x40, &(0x7f0000000000)={0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x0) 1.744639279s ago: executing program 4 (id=121): msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x149, 0x6}, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x200023, 0xfffffffffffffffc}) recvmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540), 0x0, 0x0}, 0x42) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = msgget(0x2, 0x210) msgsnd(r0, 0x0, 0x1008, 0x800) msgctl$IPC_RMID(r0, 0x0) r1 = socket(0x18, 0x1, 0x0) r2 = socket(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0xffff, 0x800, 0x0, 0x0) setsockopt(r1, 0x1000000029, 0x2e, &(0x7f0000000040)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) setsockopt(r1, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbdf13b9fd812eaa4e713048e69931929648", 0x14) 1.727961149s ago: executing program 3 (id=125): fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff}) (async) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet(0x2, 0x1, 0x0) (async) r2 = socket$inet(0x2, 0x1, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) r3 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r3, 0xc0106924, &(0x7f00000001c0)) (async) ioctl$FIONREAD(r3, 0xc0106924, &(0x7f00000001c0)) ioctl$FIONREAD(r2, 0x80206931, &(0x7f0000000100)) sendmsg$unix(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="28000000ffff000001"], 0x28}, 0x0) recvmmsg(r0, &(0x7f0000000080)={0x0}, 0x10, 0x0, 0x0) (async) recvmmsg(r0, &(0x7f0000000080)={0x0}, 0x10, 0x0, 0x0) read(r0, &(0x7f0000000040)=""/54, 0x36) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_opts(r3, 0x0, 0x0, &(0x7f00000003c0)=""/24, &(0x7f0000000400)=0x18) write(r4, &(0x7f00000001c0)="a4", 0x1) utimes(&(0x7f0000000180)='./file0\x00', &(0x7f0000000380)={{0xffffffffffffff00, 0x8000000000000000}, {0x8, 0x100}}) recvmmsg(r4, &(0x7f0000000080)={&(0x7f0000000840)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000240)=""/245, 0xf5}, {&(0x7f00000018c0)=""/4108, 0x100c}], 0x2, 0x0}, 0xfffffffa}, 0x10, 0x40, 0x0) (async) recvmmsg(r4, &(0x7f0000000080)={&(0x7f0000000840)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000240)=""/245, 0xf5}, {&(0x7f00000018c0)=""/4108, 0x100c}], 0x2, 0x0}, 0xfffffffa}, 0x10, 0x40, 0x0) recvmsg(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/121, 0x79}], 0x1, 0x0}, 0x1842) setrlimit(0x8, &(0x7f0000000980)={0x46, 0x56}) syz_open_pts() (async) r6 = syz_open_pts() close(r6) (async) close(r6) syz_open_pts() (async) r7 = syz_open_pts() ioctl$TIOCSETA(r7, 0x802c7414, &(0x7f0000000100)={0x0, 0x9, 0x7ffc, 0x200498, "ff79235db98e667f3f08000000000000000800", 0x896, 0x7}) readv(r7, &(0x7f0000000440), 0x0) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000600)="7e746376ab", 0x5}], 0x1) setitimer(0x2, &(0x7f00000000c0)={{0x0, 0xff}}, 0x0) 1.72727083s ago: executing program 4 (id=126): syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) writev(0xffffffffffffffff, &(0x7f0000000240), 0x0) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket(0x2, 0x1, 0x0) connect$unix(r0, &(0x7f0000000000), 0x10) sendto(r0, &(0x7f0000000080)="0101", 0xfd84, 0xe1, 0x0, 0x0) recvfrom(r0, &(0x7f0000000340)=""/135, 0x87, 0x1040, 0x0, 0x0) 1.512922306s ago: executing program 4 (id=132): setrlimit(0x8, &(0x7f0000000980)={0x7, 0x51}) r0 = syz_open_pts() close(r0) setitimer(0x0, &(0x7f0000000340)={{0xd80, 0x80}, {0x0, 0x8}}, 0x0) ioctl$FIOASYNC(0xffffffffffffffff, 0x8004667d, &(0x7f00000000c0)=0xd8) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x200000000000a, &(0x7f0000000000)="ea00005c00000000", 0x1) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x200000000000c, &(0x7f00000001c0), 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) socket(0x18, 0x2, 0x0) setitimer(0x0, &(0x7f0000002840)={{0x6a, 0xde1}, {0x4a70, 0x7}}, &(0x7f0000002880)) 1.394934994s ago: executing program 4 (id=138): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) select(0x40, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0, 0x20000000000000, 0x7, 0x6}, 0x0, 0x0, 0x0) select(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, &(0x7f00000024c0)={0x1fe, 0x10000, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000480)=""/253, 0xfd}], 0x1, 0x0}, 0x6}, 0x10, 0x40, 0x0) close(r0) r1 = socket(0x18, 0x2, 0x0) close(r1) fcntl$setown(0xffffffffffffffff, 0x6, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff7e6209066dbd86dd60db834400081100fe0000000000000000000000000000bbff0200000000000000000000000000014e204e20000800"]) sysctl$kern(&(0x7f0000000040)={0x1, 0x48}, 0x2, 0x0, 0x0, 0x0, 0x0) sysctl$hw(&(0x7f0000000040)={0x6, 0xc}, 0x2, &(0x7f00000001c0)="328100a0b5", &(0x7f0000000000)=0x5, 0x0, 0x0) 1.392591626s ago: executing program 6 (id=140): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) fcntl$lock(r0, 0x9, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2020001fffffffd}) (async) mknod(&(0x7f0000000000)='./file0\x00', 0x1ffa, 0x0) (async, rerun: 64) setrlimit(0x8, &(0x7f0000000040)={0x42, 0x62}) (async, rerun: 64) r1 = syz_open_pts() close(r1) syz_open_pts() (async) ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000100)={0x0, 0x80000001, 0x8, 0xfffff158, "d8e175d3e2096491b5bbb2589c66000400000400", 0x8001, 0x20000000}) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) (async) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x2c) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r3 = syz_open_pts() ioctl$TIOCSWINSZ(r3, 0x80087467, &(0x7f0000002240)={0x6, 0x401, 0x1, 0x9567}) (async, rerun: 64) open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x42) (rerun: 64) ioctl$FIONREAD(r2, 0x4004667f, &(0x7f0000000140)) 1.202582608s ago: executing program 6 (id=145): r0 = socket(0x2, 0x1, 0x0) sysctl$hw(&(0x7f0000000000)={0x7, 0x10}, 0x2, &(0x7f0000000240), 0x0, 0x0, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1, &(0x7f0000000340)=0x101, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket$inet(0x2, 0x4, 0xfd) getsockopt$sock_int(r2, 0xffff, 0x1021, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="17d59299482daaaaaaaaaaaa803500010800"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) getsockopt$sock_int(r1, 0xffff, 0x1001, 0x0, 0x0) getsockname(r0, 0x0, &(0x7f0000000080)) 1.201748478s ago: executing program 6 (id=146): r0 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000180)="04b1b57f0f12b17ca674f5dcb52f6198671bdcf2baf7b0568c954158686adcbfc2f7a1c64327ccf11d2d0422997939cd800f2ec509f63f2cdc9c01f43cde1dd09771970f9eb4cd37d561b2f0fa67b371601d707ef302", 0x56}], 0x1, 0x80000001) setrlimit(0x8, &(0x7f0000000580)={0xa, 0x56}) r1 = syz_open_pts() syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) writev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000000)="b886b4e47f", 0x5}], 0x1) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) dup(0xffffffffffffffff) accept$inet(0xffffffffffffffff, 0x0, 0x0) r2 = socket(0x2, 0x1, 0x0) connect$unix(r2, &(0x7f0000000000), 0x10) connect$unix(r2, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x0}, 0x8) close(r1) syz_open_pts() ioctl$VT_SETMODE(r0, 0x80087602, &(0x7f0000000140)={0x0, 0x9, 0x6, 0x6, 0x7}) ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000380)={0x7fffffff, 0x7bed, 0xffffdf82, 0xffffff8d, "182628040200c2a6d203680023e0ff7f0d000004", 0x1, 0x1ffff}) writev(r1, &(0x7f0000000240)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000000)={'tap', 0x0}) r3 = socket(0x2, 0x400000000002, 0x0) sendmsg$unix(r3, &(0x7f0000002500)={&(0x7f0000000080)=@abs={0x1, 0x0, 0x1}, 0x8, 0x0, 0x0, &(0x7f0000002440)=ANY=[@ANYBLOB='#'], 0x30, 0x1}, 0x40a) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) r4 = socket(0x1, 0x2, 0xe6) ftruncate(r1, 0x3f) r5 = open$dir(&(0x7f0000000040)='./file0\x00', 0x80, 0x1e7) r6 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) poll(&(0x7f0000000280)=[{r4, 0x2}, {r0, 0x10}, {r6, 0x40}], 0x3, 0x1) clock_getres(0x69f84b4504433004, 0x0) symlinkat(&(0x7f0000000800)='./file0\x00', r5, &(0x7f0000000400)='./file1\x00') rename(&(0x7f0000000100)='./file1\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1.187527017s ago: executing program 6 (id=150): r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) fcntl$lock(r0, 0x8, &(0x7f0000000180)={0x1, 0x0, 0x69, 0x20001bffffffd}) r1 = socket(0x10, 0x3, 0x0) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f00000001c0)={0x0, &(0x7f0000000100)}) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') faccessat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0/..\x00', 0x4, 0x0) r2 = socket(0x18, 0x3, 0x27) ioctl$FIONREAD(r2, 0xc0106924, &(0x7f00000001c0)) syz_emit_ethernet(0x4f, &(0x7f00000000c0)={@random="fb00", @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "832003", 0x19, 0x0, 0x0, @rand_addr="002000000000000000000500", @local={0xfe, 0x80, '\x00', 0x0}, {[], @tcp={{0x0, 0x3, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x1, 0x5, 0x0, 0x4}, {"a26c47e06c"}}}}}}}) ioctl$FIONREAD(r1, 0xc1206949, &(0x7f0000000100)) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x10, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0xe8, 0x0) close(r3) 1.101023537s ago: executing program 1 (id=152): r0 = kqueue() symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') chdir(&(0x7f0000000080)='./file0/file0/..\x00') symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') faccessat(0xffffffffffffffff, &(0x7f00000000c0)='./file0/file0/..\x00', 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0xffff, 0x100, &(0x7f0000000080)=0xf9, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) r1 = socket(0x18, 0x2, 0x0) setsockopt(r1, 0x1000000000029, 0x6, &(0x7f0000000100)='\x00\x00\x00\x00', 0xffffffffffffff53) r2 = dup(r1) setsockopt(r2, 0x1000000000029, 0xc, &(0x7f0000000140)="ff00055e473e00"/20, 0x14) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x183) rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00') kevent(r0, &(0x7f0000000180)=[{{r0}, 0xfffffffffffffffa, 0xa9}, {{r0}, 0xfffffffffffffffa, 0xf6, 0x2, 0x6, 0x8}], 0x8, 0x0, 0x0, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0xe8, 0x0) r4 = fcntl$dupfd(r3, 0x3, 0xffffffffffffff9c) poll(&(0x7f0000000080)=[{r4, 0x4}], 0x1, 0x5) poll(&(0x7f00000000c0), 0x0, 0x0) setrlimit(0x8, &(0x7f0000000040)={0x7, 0x50}) r5 = syz_open_pts() close(r5) syz_open_pts() r6 = getuid() setreuid(r6, r6) write(r3, &(0x7f00000002c0)="ab062e9599825682ee788422fb2b367f3b16d39196a9b9a8b2e29c5eaeceb6e9f14fe89d87f875f6c3988dae895cd2fcea8922a2363ddfa2fd10b0f68076d41e39e37abdf647f69e1530afb045851287aee675aac9c0a06be445b194a8a51d563f1dad6f1fa55b811808f84d13e4a1dadbc6acb80ed609b8228deec73ec601ac4758fa76f8c81c9f26c447980eabdc07d66230ce66d868682b06215c1b7026a6f230b61feaee2f5a23196b7326ea48678f83c3426fb5e0de68d5b3ba1a1ebba79d3750148b0584bf3745e76cc50e39", 0xcf) ioctl$TIOCSETAW(r5, 0x802c7415, &(0x7f0000000000)={0x2df77365, 0x1, 0x40005, 0xffffff0f, "0203005cbe6057b2ba09f47342d3c3a3f4d3c900", 0x29, 0x3}) syz_emit_ethernet(0x3a, &(0x7f0000000400)=ANY=[@ANYRES8=r3]) writev(r5, &(0x7f0000000280)=[{&(0x7f0000001f80)="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", 0x6c4}], 0x1) sysctl$kern(&(0x7f0000000240)={0x1, 0x7a}, 0x2, &(0x7f00000001c0)="e488043acfc3893e834f1bbc9552b1570522965bec0329ca6bd95c9e5684ed1d0b7e6a1d0c09ea275167d5d0c9dc752bf25d69cdc6171cc59a320ec69b2de161c05ca4", 0x0, 0x0, 0x0) 1.100433736s ago: executing program 7 (id=154): setrlimit(0x8, &(0x7f0000000580)={0xa, 0x56}) r0 = syz_open_pts() close(r0) syz_open_pts() ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f00000000c0)={0x7fffffff, 0x7bed, 0x1, 0x160350c, "0000e404032b0000a10000000000000000004000", 0x7ff}) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) setrlimit(0x8, &(0x7f0000000580)={0xa, 0x56}) (async) syz_open_pts() (async) close(r0) (async) syz_open_pts() (async) ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f00000000c0)={0x7fffffff, 0x7bed, 0x1, 0x160350c, "0000e404032b0000a10000000000000000004000", 0x7ff}) (async) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) (async) 1.038761317s ago: executing program 1 (id=157): r0 = socket(0x18, 0x2, 0x0) select(0x40, &(0x7f0000000000)={0xff, 0x0, 0x0, 0x0, 0x3, 0xe2}, 0x0, 0x0, 0x0) setsockopt(r0, 0x1000000000029, 0x9, &(0x7f0000000040)="03000000", 0x4) r1 = dup(r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setsockopt(r1, 0x1000000000029, 0xd, &(0x7f0000000000)="ffdaf64c000000004f0527000000055e473e0000", 0x14) 868.629595ms ago: executing program 1 (id=159): munmap(&(0x7f0000000000/0xf000)=nil, 0xf000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) minherit(&(0x7f000000e000/0x2000)=nil, 0x2000, 0x3) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup2(r1, r0) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0xffffffff, 0xb, {0x0, 0x1}}) r3 = socket(0x2, 0x8000, 0x0) r4 = kqueue() r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) kevent(r4, &(0x7f0000000240)=[{{}, 0xfffffffffffffff9, 0x9, 0x0, 0x4}, {{r5}, 0xfffffffffffffff8, 0x12, 0xb, 0x2b3e14f0, 0x6}, {{r4}, 0xfffffffffffffff9, 0x29, 0xfffff, 0x6, 0x9}, {{r5}, 0xffffffffffffffff, 0x0, 0x1, 0x86a0, 0x8}, {{r0}, 0xfffffffffffffffb, 0x0, 0x1, 0x2, 0x3}, {{r2}, 0xfffffffffffffffe, 0x20, 0x2, 0x1, 0x5}, {{r1}, 0xfffffffffffffff8, 0x8, 0x1, 0x2, 0x80}, {{r4}, 0xfffffffffffffffe, 0x9b, 0xf0000000, 0x7f, 0x6}], 0x137, 0x0, 0x400, 0x0) setsockopt(r3, 0x1000000029, 0xc, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b1000504000004000000000007000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000022acf2047804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0e032bfa896443a42102", 0x62, 0x0, 0x0, 0x0) r6 = socket(0x11, 0x3, 0x0) open$dir(&(0x7f00000001c0)='./file0\x00', 0x200, 0x186) r7 = open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) r8 = open(&(0x7f0000000000)='./file0\x00', 0x9cab835cfdc52675, 0x0) ftruncate(r8, 0x79c8) pwritev(r7, &(0x7f0000000380)=[{&(0x7f0000000440)="e9", 0x1}], 0x1, 0xe2) truncate(&(0x7f0000000140)='./file0\x00', 0x30001) open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) ioctl$TIOCSETAF(0xffffffffffffffff, 0x802c7416, &(0x7f00000003c0)={0x413b, 0x4, 0x5, 0xcb1, "b13d0f7c5e57a9d7c38f006356a305feddc6c9b7", 0x1, 0x5}) ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f0000000080)={0x3, 0x7fffffff, 0x5, 0x7, "05ffffd1c004631400e40400", 0x0, 0x3fb}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) sendto$unix(r6, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x406, 0x0, 0x0) setsockopt(r3, 0x3, 0x8, &(0x7f00000000c0), 0x0) ioctl$TIOCCBRK(r1, 0x2000747a) ioctl$FIOASYNC(r0, 0x8004667d, &(0x7f0000000140)=0x2) pledge(0x0, &(0x7f0000000000)='tty\x00\x00\x00!\a\x9bp^|#\xcbhl\x97\xaa\xe0\r\xe7\xb9E\xdf\x1d\x96\x01\x98/\x0e\x17\x95 \x95Mj\x84+\xf0B\xaaYu^\xa0\xc9j\xdd-I\x01R\x00wY\x1d\xd7\f>\x88_\xeb\at\x91\xd3\xbf\xea\xddt\xe0\bt\x06S,\xdbH\xa7-\xaaw\xcet\x044\xc5\xa9e\xa9\xf6\x1b,\x99\x8e\x05\x86\x91IsC}~K\xd97\xae\xb9u\x1c\xfc\xb4Nwl\xaeu\xad\x9b\xaf\x04\xc4\x03\"F\x8f\xd5\xde\r\x8d\xa1\x00\xcc\xd7\xb6\xe1\xeb\xc1>\xbd\t\xc8\x15\v\xb0, \xee\x9d\xb8\xbd\xfd4\xe0\xbf\xa0\x1es\x01=\xdbd\xf0?=\x8af\nn\xd4<\x00\xec\xe4^\x00\x00\x00\xca\x90L\x98\xc9gty\xce\xab\xd2\xa1\x85E\xe2\xa9\xd5\xab\x83\xda?w\x83\xbc\xcf\xd20(L&b\xed\x8c\x1d\x1a\x9fd\x99H\x9e\x82\x10\xea\x05\xe9A\xe3{\x8d\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00zq\xdb\xee\xa1|a\xb4\xb5)t\x95S\xc5\xec\x10\xc7\r\xe4\xfb`R\xc5&\x9f\x90<\x81pc\x1a\xfa\xe1\xc3\x15$\xd2\xaa46\x8a`\xf0\xc5\x12\xe6\xd5\x9d\xb9%\xd8\xa8\xa6rN}\xe2\x9b\xb4\xfc=G\xc5\x03\x91\x86\xf5\r\x01\x00\x01\x00'/415) select(0x40, &(0x7f0000000000)={0x7fff, 0x1, 0x0, 0x8, 0x8, 0x100000000, 0xffffffffffffffc0, 0x1ff}, 0x0, 0x0, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="19", 0x3a4e1e905c56cdb7}], 0x1) 867.778609ms ago: executing program 6 (id=161): r0 = socket(0x18, 0x2, 0x0) connect$unix(r0, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) r1 = socket(0x2, 0x2, 0x0) r2 = semget$private(0x0, 0x4, 0x1a3) semctl$IPC_SET(r2, 0x0, 0x1, &(0x7f00000001c0)={{0x2, 0x0, 0x0, 0x0, 0x0, 0x1b, 0xb3}, 0xa3b, 0x80000000, 0x5}) semctl$GETVAL(r2, 0x2, 0x5, 0x0) semctl$SETALL(r2, 0x0, 0x9, &(0x7f0000000140)=[0x4, 0x1ff, 0x1b6, 0x5, 0xfffb, 0x6, 0x1ff, 0x7, 0x7]) setsockopt$sock_int(r1, 0xffff, 0x1023, &(0x7f0000000040)=0x3, 0x4) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x0, 0x0, 0x4}, {0x1, 0x0, 0x0, 0x2}, {0x4, 0x0, 0x0, 0x101}]}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0x37) 722.55445ms ago: executing program 1 (id=162): mknod(&(0x7f0000000000)='./file0\x00', 0x1ffa, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = openat$tty(0xffffffffffffff9c, &(0x7f0000000100), 0x20, 0x0) ioctl$TIOCSTSTAMP(r0, 0x8008745a, &(0x7f0000000140)={0x10}) (async) ioctl$TIOCSTSTAMP(r0, 0x8008745a, &(0x7f0000000140)={0x10}) setrlimit(0x0, &(0x7f00000003c0)={0xfffd, 0x54}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket(0x18, 0x2, 0x0) (async) r3 = socket(0x18, 0x2, 0x0) recvfrom(r1, &(0x7f0000000180)=""/60, 0x3c, 0x1, 0x0, 0x0) getsockopt(r3, 0x29, 0x2b, 0x0, 0x0) (async) getsockopt(r3, 0x29, 0x2b, 0x0, 0x0) utimensat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x7fff, 0xffffffffffffffff}, {0xffffffffffffffff, 0xfffffffffffffffe}}, 0x2) (async) utimensat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x7fff, 0xffffffffffffffff}, {0xffffffffffffffff, 0xfffffffffffffffe}}, 0x2) ioctl$FIOSETOWN(r2, 0x8004667c, &(0x7f00000000c0)=0x80) 721.479194ms ago: executing program 3 (id=163): socket(0x30, 0x4000, 0xfa) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, r1}}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x4e}, 0x3, &(0x7f00000001c0)="6ff91ecd378a4e588e5f84cf71b59c7af6c37013fc5dda17179a14ee0a20de8db3a97d2b3e090c33208c7538ef29d0c651d294979a3a9ab1e2dcf76dc09959f2677341c041790689e64d4f8dc54b31558eed21bc", &(0x7f0000000240)=0xffb5, 0x0, 0x37) 655.419864ms ago: executing program 6 (id=166): unveil(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='c\x00') openat$wsmouse(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) unveil(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000300)='W\x00') syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000000)="b886b4e47f", 0xfffffffffffffee7}], 0x1) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) r0 = socket(0x2, 0x1, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) fcntl$lock(r1, 0x9, &(0x7f0000000140)={0x0, 0x0, 0xfffffffffffffffc, 0x1000100000007}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) bind(r0, &(0x7f0000000000), 0x10) listen(r0, 0x0) r2 = socket(0x2, 0x1, 0x0) connect$unix(r2, &(0x7f0000000000), 0x10) select(0x40, &(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x0, 0x0) 646.007338ms ago: executing program 3 (id=169): open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x186) r0 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) sendto$inet(r0, &(0x7f0000000500)="e30a34a2fa83b25420bb8a0dcc7adbf9b38b1c91b7bd18d21dbcb0f8d48cb010c544d763a5551c53a9058b1db75428684b20ec14dcdb11fdeb168e5fcdf71c33cf2260db1b2361964650ae96ee1db7e967ee9b9a9b1d4112047f7b4935aa988e6164fb20de4bc6a7637e8211d94c56ff4adbe6ed5f0a45f40345d9ca65c70eeab841cebd0b66e0c5549ac886d99ef0e198dc4effd229463e29a99905c710e2f0f0c6c4e5594649996e7a1de30417ce41f071b0c26e4312375db37b0b0f8403f3b197ee3c063e9cfcd0f203ad919657093481f2c37459a9b17dc894a83cce963bbeb0fbc548292d15258a01c457f8970a708de2967e802a204f0f79ae43f08d66992ffb0f4a96be5ca866ca092f15617de3a91793b213eac0f11fba0ac9f79728357d13cf4d322c27324cfe1127f79db821db883f99223d7f3136df69d3e9adf9781c77fa8d3cd7472643572b23d117a60680dc661a7b3d71b3afe910e46cd72691ec67f804f29a1b2faf0f7b6dde1bd10e06fdf1d4458d604f83e6c1cdb6929105fce42365b193c9c96cd5fd7bab62b6da8ac193c835042dd3a1abe058a1d2ab9fd00ef81f5c20c492f1adff492b036823c0fe6e14d462d28136aff67c6d7c83878fcf832eb80bfd62eb93322bff07acac073d72a31f23fd05b108fb47b0c066c33f95776b8c01c9ff95805efa30aecaa2d5b4b5d1999e9840e8bf5ef2c0b41ac9012f719d5efaf40a80f3f0a758aa68b08933f2938928895825725e9d53ddf82011d15384b4592488b985342f2def5e2bbc14ee4b8c6958ac1380d58158feaa0f444b449989cb053971d6c08485a483ea0800bd8957c312f15486aa605f54fbb13b22d7e9ccd05e2d3dbdb58bc0658bb2ae7e1fb61dc5b8d7dfa8e4081defe115e56aa246f0993666dba09e16f61fddb2f111c1ff77ae7ee058cca2f598df31d83a65ddb62acb4b7e82389afe108b3a9a3a6baa16616f25430e3ae2a9e2ba65cc1ee0dcbada7cc55003478943d26cc75e6d7c2e8e73ad0e423cb6f8f939e9bfed7ac449d983e47898ce37e19a37925942113e68a1b1ca2b72989b486edc219f9067bb0efb1a320c135dcbc475c102a58c7ac39db4af9658a8858b0275ab4c5b009ec539303086f87c5cd304f4f45d127912d545ad2d65d7ed1c61c203c569ad0e27815c1779a18fe3add8d7ce19626f37f1dacac5c3aa1a14b2201ab111eb3eb3e6184a5448b46b78bc5db5c0c1dd37a5c9ced4ead48dc17ee74887ad22e99a08c67dcb52e244f804d6f1cfdba6d611bd9d2503c48470ca6c45457487c4f098fa29ec9ffdd7bed5c23883ef730d3ee6b1b5a07f58f49b7efa68931c06d5371d260232709db07c9ed55289a7c1c5b3c86bc910b521473bcb4836c51540d56471c44391e2df223d767a183932a45bf0c349af0d8d7eddb1b81a43ae90836ce33129510a5ec4c1755d1c1f98e4747145445f8ed6cfe35eecb442c3544731f24489345bfef256bfadf9433bb7b7017c57f8623d106859542e8caa85571ab4b55a20510f8a40d1aef6646c6e7a5cf3b18f0b83c3dc53f6b511e277a30ccb9882342c7066627729c0b7b49a08a3c7735b7a9bc8e6d8acd47cd20d91eb1afb099ebafe48761c528844f8157a031c77b49d8015571db4c957bb3bf10b84ac7328da50e55509e2bf8c9089aa3b4306c9f92c48dba1fae776f7c1e9b02948e2e34fc708ef21d48c894c2953c8bcb71d1edd6b60e9cba521e98d6268547e7d3791c5b0a7c9aed56b57a6ba7ea1a7e9d5db0b60b21663d60490598ea01ecf47ba2fca838cc9fdaf8cc4b84a282f3b52ddaca10fa77d6c94fb20bf34e7b96b570241c72ed61163406b90aa5f233db78a4c971a9dbaa3f7b1898c6503cdf035fa33b1f1eb3c45722786e9eb3ecdc65ae266f152470e9d3190772bf29cda69fd07b6e83914501f733fd1d86d28c2243f4267828c9a28c1a633041727c0185f39260a1872bfb77a3a8d2009dc5b744e6964ef0fef66b033101ebcca80ee1be632dcc51f7c1d4b8f3cd87acc42f94a1e9ee35c7b8d8a4a87d72fd3a78237aa9e5d5b5eb7dbe46bfbc1b9453bbeab2d626d87fea3a52dffadb8f0a9765ed9ead2b0043ecb41c60669af497074cbd25a6d2b704d12379bc16466d3d930db1684ebe7ec5e5c9ffcf8ad40507502671864635653372e3c086a3e7f9e2ee5b953c92397cf6fe482d82dce809e0498d13cd3bc0bf5fec3077af642db74f58dd8e52b6c747ca08d6c7f0f7ee7889469afa37a48086f2cd70ce1ae85f580b504c79df6e70a0972ea5e357938ee3bee3ced68faf68895ec2a5a7e59b0ae490fb5365adc05e8948a9975d1235c1ca4255ad7d4b95c9bf1de0c95cab81ab74bf6795e0ae71fd3c07fa4c44a8601439a5e8e7877538854ac39b8d1cb28cf52192b708254dbc2c1abaef4fec2b6baee3aa6fd673aeb45a70023d113558033e299661ab890b8bf4d888208415f2b4824d54332ba57ef65d5cc7bf269c2db5d866312c82f06c366f2d8e375ed8880166d489266c065c1c02eedb55789e7d799a827c66dc350c98dab383786f645f88b130b287a0e0d1c85dab5ee4c4fe2c1f973a28792fb3a90523a4387c373ae44a41846cb9c475787d2564958abed1f957354eb19eef850c14990c39ef65b99abac3482456d4ef0cc323ae7b614fa05b3e5ccea5cae71d521654d8bd7b358318fbdf01adaba155a989490342ba5362f751b0ea6318b5da5c4ef56cea2cff7d1102b423d35e2b72bd142013ab2d1ecd3e8b892bbc6512b53e0508f0a9572cd22ea9b0f24f1999945781b04292d3b8e26835ceef252cdbd809a256cb1199691cbcfbac102a342752ddf22233d97726ef2933c66e09fc420d63d21429becb70fb5511836013055c17a25624a4f537100370f584541f0159d6b031e1c8da5903cf4e39853ed638419f0b23615aadcdcb4f5f3b07cbc828654f9dfcd8a19812f13564b7042e416536455a7bbc28755bf5e3512aa78f177a6b3cc426ebfb4a5f7a8e6ccd6c3caed80065cb3179cc7f1dbffc5d82a4a6368ffc117136401aacc38ec27d33384d1832dea44912d5b4c4ede2e4f746a31e6a7b39f40c70c1030c2982446ad5ca4a20fe02fd7eecd5e82a6aeb1a65705abf842fc7fae13db4b74251107650bd6f481f7b4b9254969e67c35f0f026d299e51fda28f4764a61af8fc2a20db2829f01144d29a277dc35164abeae6149e68705b77c014d5c4cb2e2a3e15cbdf5f4d6d7c56f183b735e91cd7b54be833884a4316171b2a99d3ce70df8445133b6f2fe93ec3e584f88b0aa1f3f5eb9e6bc28c532ba081b14d2af00be98b21e3bdf3d1786bfef3ddd435fb59a050cebf2efb3d2d455ac455a28bb9a93a6fd4347df4b80f30b57380b748d715c740c2fdf7f8074fd8a38b1d1d0ea5f50d34ee721f751eb3673de760cde9dee1aeff71b1bae2147d60b647e687b97cb70e210c28d72f38cb1fc82ef0a26131d5568dcafb8baba0248bd900730f1207e90fd7901485c528c87f16591ed4ce04ec301881f16bb4ad8c1502f6889da8a97f4be2f8e2180e3c3b3c0d8ef838c0adb96db35f9d183ce914532a0aacf66663203b919b57f717428c53a99332c1e9e4ded9574cd30a5ae86919d169a6b1bc4ee9c63ed22e16ed493c923fb0af822b841103b34d377b613e1f1e5bafcd8e9ad1c5c38d6ef84b576e9c8d5fc7d48f4f4d33d560a2110ce1ba4f8258310131b65a15187bd1ca04307e9d405ab6ec07f8a05e9e618fd7a573891c1e320f5a30f92a9fe02054824c218d362600f51a2840600092daf02dd14a8cea8b9fa3270ecab27089c1f0a72671f642bec5fc9d310365a53c6a16ef7a01d6c7e29a235bc4c95d2d2fb60849585907ecd363e9764e309bd4581d878c720879defeff127a801b1e2f98f3a7546eaeeceaa447e1aad1b08e5e3429d5edd95eb15a95b7378304a981b0b58745a407fdf72345512d082bd34c4b5aa67cb5cd7762020073718e240f9eac212a67c333b7ba2078952d0bfb585ab6ad153dd48b307bab2a34bef80428368d1d3dd4285fa5614f53e0f5d73b41fc4671be737386a3c7ca044d649da95a6d7771fb2c71604a5f369673ebf8472ac331da545405425e8384b45b7540bfc6698fe2d384bb46d55cb7eff3c707d53bab1e95cbbeb054c884a8e6a7c24235284c598bb4bebe21b2c2e8d97f6d776cfa1462d158811fa253af3b9d732b9f18eaa09e84e42201077d661aea949bdf147de2a3f0415fa8e0805e70f674e4259909369fa70180bbe11ce66fd0545f0cbd1f0ab55236831c5da0fc2e79645e678c8f3052ad0d1219c112b4a7d9f4468ed84e7082d14fa822830c45d43c1a33bc4c12facb027ae63fe1186982564c28ebcec4b31bd377d143cf337f2dbaa4a4c79699a5f745e2c77bb7a8b92ce7c8b1e194406cdafc5538b9c4796e9dec4d9e7237d81d167a8ac9302b73978036779e3946cebede26dc58a37907f01a9db496048960ac726ae29b9b15b4650af76c43d77d33300af02c74e46b138fb14592b7017eabf4c40a17c35511f8ae8c5181726c21ba3dd5bbafebf255311a80af3db71f3cdea312955010f0ef86446f2397c9393b0184f843f86d4e1f498cb04bd3cf3bbf34c274e021ce95cef175689946e4e4c864096470e18e6b4770b00d7eab16cf968f1fb1dbc42cc5db139d895f7cc9f3a3f6962fccbed3ea0c6b46006ca34163ae8e46c9db2a5784f5e6e5cc126ca6081469aa773d0af4c53ee02ae412615a4874b26c078a7264bbf8172529ff6b32f2fbc07f83d0a49422016ed03c31914a62971b9600d2fa5c6bff159666b9cf89e9dcde54c2d3e1fcdb409ef525b436163a5a71267201ee86792c0e34fc15e60f4cb1ae9e810dab6e36c54a736d1f2fa2d0e4ab17586aa58dc4485c0956fc979f0d732d1f785abdef8d696f5d4c35bbfee9de1ce6bf45f60f1298c91d12c7d9f0e8e98122b864f3d3a5b53b0b952eea01592c0e86403f1955252e13008495877eedd18af382c9b8a6677c76c3b79dc1833e608d12c78633b46744b6de377a78cf89a0ef002f543f6368534e3f3ca24a196a08b4852b03febfeb57627620a5088255e19132470b3ac348054467ec40f6924f115b094188cdc6d5d215400b48617e17678f67ce3e1d9eb25ce4359e8e4dd2bf823c132c90f2ce6534b616ba30781022a1179e67507b1cdf6844e9d280ed8bc60cc799574dca11ede3aa214b71dd21e50f0d9d09f9d33255bc9b2befa0babd95e657a5e463d51725df7e776b25c1013711517613ada36f523da6e9f5a49b09c6d580338a0323ee0b0100ef83c3c3e535b88cfb1d8b9ea9782a98e3bac75dde8a5996039dab008ef95a2a46030172c17e9c5c19866cb3fdc038bdd456274c98ed89d64efd9a9d0dc8502b031539102db4e8ae52de67623609a86f378d653187fc5843f1957f652052fea7bd52c47b83447b8dbcc913713cdf24d412c1f46444319ab4162268c9d092498aad012325eb5ab32abf7a3307390e469222cea65f3104a6773143926ad369c5fa6d951b484186a6185befdb74dccac07ac6735d71ebceb0f7d17991b80002c64e110c4f26f5903fb74ed662329f40ce1e9e33bcdc2596976b15277c5e9f2a7ce1b52b5ad3bdb96655eb769907f71884bfbaa8fc7033a852b752590e0a0f5e67d41da3b52e74e6952a53077c0fff3ea9f62693c9da0e4fa6ef0f0cfc0217c5865f94f9a0d69a9028f817114919375433dd875532a443b629b3a4742bfa78461", 0xffd, 0x5, &(0x7f0000000140)={0x2, 0x0}, 0xc) write(r0, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) r1 = open(&(0x7f0000000000)='./file0\x00', 0x800, 0x8) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0xa011, r1, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = socket$inet(0x2, 0x2, 0x0) getsockopt$sock_int(r2, 0xffff, 0x40, &(0x7f0000000000), &(0x7f0000000040)=0x4) 602.660448ms ago: executing program 7 (id=170): r0 = socket(0x2, 0x1, 0x0) setsockopt(r0, 0x6, 0x4, &(0x7f0000000200), 0xe0) sysctl$net_inet_ip(&(0x7f0000000000)={0x4, 0x2, 0x0, 0x25}, 0x4, 0x0, 0x0, 0x0, 0x19) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x2, 0x0, 0x17}, 0x4, &(0x7f0000000080)="6eb32c7184d9114ae016a69a02195cbd96644e79d47fb59734d5f02f61fa62029ccbed274cdb8ae4c7d3e07e714f049ae19736b5dfc8dd03bf53c47eddeb9124c0c2e5341f412fb1bb3e5e01c5fd9412f848e0feef18c9634903a960ce38c0e18e99497bf4ee30d64e92be60e2f13287508e3e380511960d833fdcb8b9045e3015f0873ac1d6d1be577c6d50d6f9a825a1f9b4a38cb1be3ec5f090592cf01f4c23ceb9f4cd0d813145ea9f59a80ce24fec3de22ed375b1", &(0x7f0000000140)=0xb7, &(0x7f0000000180)="9ef0f1da441e", 0x6) mmap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x1011, 0xffffffffffffffff, 0x0) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0xecdb1f631ef4aa36, 0x114) syz_emit_ethernet(0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd606a4c3f00002b00fe8000000000000000000000000000bb0000000000c1"]) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) read(r2, &(0x7f0000000040)=""/4096, 0x1000) writev(r3, &(0x7f00000018c0)=[{&(0x7f0000001400)='D', 0x1}], 0x1) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, r1, 0x0) ftruncate(0xffffffffffffffff, 0x100000000) 601.758693ms ago: executing program 1 (id=171): openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) r0 = socket(0x2, 0x4001, 0x0) shutdown(r0, 0x0) poll(&(0x7f0000000500)=[{r0, 0x8c}, {0xffffffffffffffff, 0x4}], 0x2, 0x18e) r1 = dup(r0) r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) sendmsg$unix(r3, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x409) close(r2) r4 = socket(0x2, 0x2, 0x0) dup2(r1, r2) recvmmsg(r0, &(0x7f00000002c0)={0x0}, 0x10, 0x0, 0x0) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYRES16=r2]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) connect$unix(r4, &(0x7f0000000000), 0x10) setsockopt$sock_int(r2, 0xffff, 0x1023, &(0x7f0000000040), 0x4) 600.372356ms ago: executing program 5 (id=172): munmap(&(0x7f0000000000/0x4000)=nil, 0x4000) r0 = kqueue() kevent(r0, 0x0, 0x10fc, 0x0, 0x700, &(0x7f0000000000)={0x8, 0x16e}) 544.521901ms ago: executing program 5 (id=174): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb5219f1000b913f1, 0x0) ftruncate(r0, 0x8) r1 = socket(0x18, 0x2, 0x0) setsockopt(r1, 0x1000000000029, 0xa, 0x0, 0x0) pwrite(r0, &(0x7f0000000100)="14", 0xfffffffffffffc23, 0x40003) 543.966112ms ago: executing program 4 (id=176): r0 = socket(0x18, 0x2, 0x0) select(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt(r0, 0x1000000000029, 0x9, &(0x7f0000000040)="03000000", 0x4) r1 = dup(r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setsockopt(r1, 0x1000000000029, 0xd, &(0x7f0000000000)="ffdaf64c000000004f0527000000055e473e0000", 0x14) 539.430937ms ago: executing program 5 (id=177): setrlimit(0x8, &(0x7f0000000000)={0x42, 0x62}) (async, rerun: 64) r0 = syz_open_pts() (rerun: 64) sysctl$net_inet_ip(&(0x7f0000000000)={0x4, 0x2, 0x0, 0x1a}, 0x4, 0x0, 0x0, 0x0, 0x0) (async) close(r0) (async) r1 = syz_open_pts() close(r1) (async) readv(r0, &(0x7f00000001c0)=[{&(0x7f00000013c0)=""/15, 0xf}], 0x10000000000001c5) 483.32575ms ago: executing program 0 (id=178): ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f00000000c0)={0x0, 0x0, 0xfffffffe, 0x0, "031ffe4063000000000400bfc000eb00000000ff"}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f00000000c0), 0x1c, 0x0}, 0x0) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x100000000000000, 0x3}}) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x18, 0x1, 0x0) close(r0) r1 = socket(0x18, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000340)={&(0x7f0000000300)={&(0x7f0000000040)=@in, 0xc, &(0x7f0000000080)=[{&(0x7f0000000100)=""/246, 0xf6}], 0x1, &(0x7f0000000200)=""/212, 0xd4}, 0x8}, 0x10, 0x1001, &(0x7f0000000380)={0x6, 0x8001}) setsockopt(r1, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) sendmsg$unix(r0, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0) 482.656186ms ago: executing program 7 (id=179): r0 = syz_open_pts() syz_open_pts() syz_open_pts() munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r1 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000240)={{0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x7}, 0x0, 0xfffc, 0x0, 0x0, 0x4, 0x0, 0x800000800000000}) shmat(r1, &(0x7f0000001000/0x3000)=nil, 0x0) mlock(&(0x7f0000001000/0x2000)=nil, 0x2000) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4) fcntl$lock(r0, 0x8, &(0x7f0000000000)={0x0, 0x2, 0x0, 0x100000001, 0xffffffffffffffff}) 464.178699ms ago: executing program 0 (id=180): open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x186) r0 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) write(r0, &(0x7f00000004c0)="b96a", 0x2) open$dir(&(0x7f0000000b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000000c0)={{0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}) r1 = kqueue() kevent(r1, &(0x7f0000000000), 0x29f, 0x0, 0x8001, 0x0) ioctl$TIOCFLUSH(0xffffffffffffffff, 0x80047410, &(0x7f0000000100)=0xf) syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r2 = socket(0x2, 0x1, 0x0) connect$unix(r2, &(0x7f0000000000), 0x10) setsockopt$sock_int(r2, 0xffff, 0x1001, &(0x7f0000000100)=0x7, 0x4) setsockopt$inet_opts(r2, 0x0, 0x1, &(0x7f0000000040)="27913c11b3c9e91fbdf59c32417020e3a81e536e", 0x14) ioctl$KDSETMODE(0xffffffffffffffff, 0x20004b0a, &(0x7f0000001240)=0x1) r3 = shmget$private(0x0, 0x1000, 0x700, &(0x7f0000ffd000/0x1000)=nil) shmctl$IPC_STAT(r3, 0x2, &(0x7f0000001280)=""/6) sendto$inet(r2, &(0x7f0000000480)="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", 0x10b, 0x401, 0x0, 0x0) socket(0x18, 0x2, 0x0) select(0x40, &(0x7f0000000000)={0xff, 0x0, 0x0, 0x0, 0x3, 0xe2}, 0x0, 0x0, 0x0) 462.898105ms ago: executing program 7 (id=181): ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000010c0)={0x3, &(0x7f00000000c0)=[{}, {0x3, 0x0, 0x0, 0x7fff}, {0x3, 0x0, 0x0, 0xa}]}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x2, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afe", &(0x7f0000000080)=0x19, 0x0, 0x0) 446.613069ms ago: executing program 7 (id=182): mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) (async) r0 = socket$unix(0x1, 0x5, 0x0) sendmsg$unix(r0, &(0x7f0000000140)={&(0x7f0000000000)=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000000100)=[{&(0x7f0000000040)="af220a3e4bf9d3285fc0c293a1193b6c11fb477ca226906f602d55aee649906c73113f22d0", 0x25}, {&(0x7f0000000080)="732a0a57471168640e97e8601e0e5a456c7d5fe4038c2d4d58d478b1d4cb9cee87c5e357b12f42742c2dbc90862c7846e48ecd0c5db34e7acd2c2b30339e44099d490203e94603a84f9c39607445ce632de69cde377379fa498bcef924013cdda3edd650", 0x64}], 0x2, 0x0, 0x0, 0x401}, 0x402) r1 = accept$unix(r0, &(0x7f0000000180)=@abs, &(0x7f00000001c0)=0x8) (async) ioctl$VMM_IOC_CREATE(0xffffffffffffff9c, 0xc2585601, &(0x7f0000000200)={0x10, 0x40, [{&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x5}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0xfffffffffffffffc}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, 0x4}, {&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x101}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x8f2}, {&(0x7f0000ffa000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x8}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x5}, {&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x8000000000000001}, {&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x4}, {&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff7000/0x4000)=nil, 0x3}, {&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x4}, {&(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff5000/0x3000)=nil, 0x10001}, {&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff5000/0x2000)=nil, 0x5}, {&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x7}, {&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, 0x8000000000000000}, {&(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff0000/0xb000)=nil, 0x400}], './file0\x00', 0x8}) (async) madvise(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x2) (async) r2 = open$dir(&(0x7f0000000400)='./file0\x00', 0x80, 0x80) (async, rerun: 64) pipe2(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x10004) (rerun: 64) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x1, 0x2010, r0, 0x2) (async) mquery(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4, 0x10, r2, 0x80) r5 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000480), 0x8, 0x0) ioctl$WSDISPLAYIO_DELFONT(r5, 0x8058574f, &(0x7f00000004c0)={'./file0\x00', 0xfffffffb, 0x9cd, 0x80000001, 0x1, 0x401, 0xfffffff7, 0x5, 0x0, 0x1, 0x6, 0x1}) (async, rerun: 32) getdents(r3, &(0x7f0000000540)=""/237, 0xed) (rerun: 32) getgid() (async) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000640), 0x1, 0x0) close(r6) bind$unix(r4, &(0x7f0000000680)=@file={0x0, './file0\x00'}, 0xa) (async) r7 = fcntl$dupfd(r1, 0xa, r4) ioctl$VT_OPENQRY(r7, 0x40047601, &(0x7f00000006c0)) (async, rerun: 32) setsockopt$sock_int(r7, 0xffff, 0x100, &(0x7f0000000700)=0x46, 0x4) (async, rerun: 32) renameat(r4, &(0x7f0000000740)='./file0\x00', r3, &(0x7f0000000780)='./file0\x00') (async) r8 = open$dir(&(0x7f0000000800)='./file0\x00', 0x20, 0x20) symlinkat(&(0x7f00000007c0)='\x00', r8, &(0x7f0000000840)='./file0\x00') (async) pread(r7, &(0x7f0000000880)="04b325c20883f1a69592b7e453b214eab00afc5698e0c5a6b9d1db8c79584fbbdd2c6553daa05332b3e23dca29da851534e64e0e1d232d72e30d02e882a745075fdfb1b56b1d8b8a9c406cc27b2f6d403a6525dce23ee1dad55a2b6e8b28280f764cc9b545c5d237364785b2a563416958e316ccc60b69e986e1086763a680d307b84978d5dc2ed054ef5f75597bcc6f1432fe58d7d43f5a602cc29c79742b5b9bbf4140a966cf547e3a5bee17423043736e22f259b3c3407172d76f1daf521d97ae3471b53a", 0xc6, 0x65f) (async, rerun: 64) r9 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000980), 0x80, 0x0) (rerun: 64) ioctl$KDGKBMODE(r9, 0x40044b06) (async, rerun: 32) r10 = getppid() (rerun: 32) fcntl$lock(r1, 0x9, &(0x7f00000009c0)={0x2, 0x1, 0x8, 0x6786, r10}) (async) ioctl$WSKBDIO_SETMODE(r4, 0x80045713, &(0x7f0000000a00)=0x1) 345.499703ms ago: executing program 0 (id=183): unveil(&(0x7f0000000300)='.\x00', &(0x7f0000000340)='c\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) r1 = open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x3, 0x10, r1, 0x0) sendto(r0, 0x0, 0x0, 0x408, &(0x7f0000000080)=@un=@file={0x1, './file0\x00'}, 0xa) open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) 344.866527ms ago: executing program 5 (id=184): syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) writev(0xffffffffffffffff, &(0x7f0000000240)=[{0x0}], 0x1) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket(0x2, 0x1, 0x0) connect$unix(r0, &(0x7f0000000000), 0x10) sendto(r0, &(0x7f0000000080)="0101", 0xfd84, 0xe1, 0x0, 0x0) recvfrom(r0, &(0x7f0000000340)=""/135, 0x87, 0x1040, 0x0, 0x0) 344.464605ms ago: executing program 0 (id=185): sysctl$net_inet_tcp(&(0x7f0000000040)={0x4, 0x2, 0x6, 0x6}, 0x4000000000000005, 0x0, 0x0, 0x0, 0x4d) (async) r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) (async) getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000080)={0x0}, &(0x7f0000000140)=0xc) (async) pipe(&(0x7f0000000640)={0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0xd4e688a67930cd) (async) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000000)="94", 0x1000f}], 0x1) (async) close(r2) r3 = socket(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0xffff, 0x1001, &(0x7f0000000100)=0x20002, 0x4) (async) writev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000000)="7f577a", 0x3}], 0x1) (async) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) connect$unix(r3, &(0x7f0000000000), 0x10) (async) execve(0x0, 0x0, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000000180)={0x1, 0x2, 0xa, 0x7, r1}) r4 = socket(0x18, 0x2, 0x0) (async) r5 = socket$inet(0x2, 0x2, 0x0) mprotect(&(0x7f0000041000/0x4000)=nil, 0x4000, 0x0) (async) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r6, 0x0, 0x9, &(0x7f0000000180)="eb0000c5", 0x4) (async) setsockopt$inet_opts(r6, 0x0, 0x0, &(0x7f0000000300)="945e1114bc7899d77379065d5260ea56f99ec2", 0x13) (async) ioctl$BIOCGDLTLIST(r0, 0xc010427b, &(0x7f0000000280)={0x2, &(0x7f0000000240)=[0x74d960a3, 0x8]}) (async) setsockopt$inet_opts(r5, 0x0, 0x9, &(0x7f0000000200)="9ec70fe7c5cbc16adbdaf23923bec008fc76ce7fbb3de33d143644887ac885f7bb", 0x21) (async) ioctl$FIOASYNC(r4, 0x8004667d, &(0x7f0000000100)=0x1) ioctl$KDGETLED(r0, 0x40044b41, &(0x7f00000002c0)) r7 = getpgid(0x0) fcntl$setown(r4, 0x6, r7) ioctl$FIONBIO(r4, 0x8004667e, &(0x7f0000000000)=0x10000) (async) r8 = socket$inet6(0x18, 0x8000, 0xa) fcntl$lock(r8, 0x7, &(0x7f00000000c0)={0x2, 0x2, 0x7, 0x8, r7}) 334.019889ms ago: executing program 5 (id=186): sysctl$net_inet_tcp(&(0x7f0000000000)={0x4, 0x2, 0x6, 0xe}, 0x4, 0x0, 0x0, 0x0, 0x0) sysctl$net_inet_tcp(&(0x7f0000000040)={0x4, 0x2, 0x6, 0x11}, 0x4, &(0x7f0000000080)="4e64a3163d397d5b521715abfc13bbed47bcb213f98150ca9eccb4057aa1a6a7a1d1b325f02ae2675c16c21b52bc9a1112f807d9fdfadcdee10f3ec216ee3c9d67f655d94f0e842f14b4d15cbdc772e426b03f4dd4a31dcaefd3118f402d342b091dcec3f1ce6d1dc429bb6925ab2dbb22e4f1fe547dbeaeac3d70bedaa3ea15141a12daeb5949e50a3c2901478fd0ce2f0feae50e511ad007fddfe08d", &(0x7f0000000140)=0x9d, &(0x7f0000000180)="1e912159ff04051ec10a23492f12ed69ae5079c8eeaf2229251e03a7f2dc5b59db8d508ff2d53b8018c92df3804e2a5ceb045f25d535c8e292080099460776bbf8b7cb470d5cc0d2a303d113f322dfc2d69cddcdb8f97d058fdd1e7440677af3bc0c0f7f3cf5106b356a62be179b94eea65c0641c9c0c5472c130fb71b4f6e9977effc04d9457e033f8f37e343d4251c960c99b8ecf5b5b598aa7e8af3530cf575e0175992917725802191766b194fd4ceaa65be21b9a02714e63d18fce2ed6bd08dc78d5abfc676ce6e8d0991ef37e1564283c339e9d7a79012c8bc6a534b3613", 0xe1) sysctl$vm_swapencrypt(&(0x7f0000000000)={0x2, 0x5, 0x2}, 0x3, 0x0, 0x0, 0x0, 0x0) sysctl$kern(&(0x7f0000000000)={0xa}, 0x3, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$kern(&(0x7f0000000000), 0x6, 0x0, 0x0, 0x0, 0x0) 295.775589ms ago: executing program 0 (id=187): r0 = socket(0x2, 0x2, 0x0) r1 = dup(r0) sync() setsockopt$inet_opts(r1, 0x0, 0x22, &(0x7f0000000040)="fd0cc085", 0x4) sendmsg$unix(r0, &(0x7f0000003c40)={&(0x7f0000003780)=@file={0x0, './file0\x00'}, 0xa, 0x0, 0x0, 0x0, 0x58, 0x8}, 0x2) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x2}}) ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f00000000c0)={0x400000, 0x0, 0x0, 0x0, "00000000000064834aae8b23c80b3200", 0x0, 0x10}) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket(0x18, 0x1, 0x0) getsockname$inet(r0, &(0x7f0000000080), &(0x7f0000000100)=0xc) setsockopt(r2, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) connect$unix(r2, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) 216.441324ms ago: executing program 3 (id=188): socket(0x2, 0x4001, 0x0) (async) r0 = socket(0x2, 0x4001, 0x0) r1 = dup(r0) fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) (async) r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) close(r2) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200, 0x1a0) (async) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200, 0x1a0) ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x0, 0x0, {[0xfffffffffffffffc, 0x0, 0x2, 0x100000000, 0x0, 0x0, 0xe, 0x0, 0x0, 0x2f01, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2000000000, 0x2, 0x100], [0xfffffffffffffffe, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x80000000, 0x1fe], [0x0, 0x2], [0x100, 0x20000000000, 0x0, 0x100000000, 0xfffffffffffffffe], [{0x0, 0x7, 0x0, 0x7d06}, {0x0, 0x2, 0x1}, {0x0, 0x0, 0xfffffffe}, {0x8, 0x0, 0x6, 0xffffffffffffffff}, {0x0, 0x400, 0x0, 0x40}, {0x0, 0x2000, 0x40000}, {}, {0x0, 0x0, 0x0, 0x8}], {0x0, 0x5}, {0x0, 0x0, 0x4, 0x2}}}) r3 = kqueue() kevent(r3, &(0x7f0000000040), 0x7fffffff, 0x0, 0xffffffff, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) kevent(r3, &(0x7f0000000080), 0xe4a, 0x0, 0x4000a9fa, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb5219f1000b913f1, 0x0) select(0x40, &(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x0, 0x0) (async) select(0x40, &(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x0, 0x0) pwrite(r4, &(0x7f0000000100)="14", 0x1, 0x40003) 215.22586ms ago: executing program 5 (id=189): writev(0xffffffffffffffff, 0x0, 0x0) sysctl$kern(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$TIOCDRAIN(r0, 0x2000745e) shutdown(0xffffffffffffffff, 0x1) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xa7210e10bc3c9def) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) fchdir(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$sock_cred(r2, 0xffff, 0x1022, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, r3}}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x4e}, 0x3, &(0x7f00000001c0)="6ff91ecd378a4e588e5f84cf71b59c7af6c37013fc5dda17179a14ee0a20de8db3a97d2b3e090c33208c7538ef29d0c651d294979a3a9ab1e2dcf76dc09959f2677341c041790689e64d4f8dc54b31558eed21bc", &(0x7f0000000240)=0xffb5, 0x0, 0x37) sysctl$kern(&(0x7f0000000000)={0x1, 0x55}, 0x2, &(0x7f0000000040)="f8a8b7b90bb1c310ba29b103a6e593518cc8db7c2ea87371425cf308a74825274c4629b8acac952e533cb5755fcd86c4c3ce02c36418fad47afd80d09245008e73b318b560b96e1333550952b8ee12164f28e06d5baa3050a69102925940a979ce858f589b93a56ac705b1e0992148a098056ae16eeac77a08c67e28a8a5023eb53ffb32f9f10e9dfb6ecf989c7745d8faa93d81ad932f52922e8b03d47f982c47fa9a4e82a0852686755ae417cdc3d4b62b137e465ccc3f33adf7fad669dbc0272114103e171e4100300108a732fc142401f9eb608dc892d76a24d619c859f0be95829fc3358b", &(0x7f0000000140)=0xe7, &(0x7f0000000300)="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", 0x1000) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f0000000080), 0x1c, 0x0}, 0x0) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x100000000000000, 0x10040000000002}}) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x0, 0x0, 0xffffffffffffffff}}) bind$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r4 = socket(0x18, 0x1, 0x0) close(r4) r5 = socket(0x18, 0x2, 0x0) setsockopt(r5, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) sendmsg$unix(r2, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r6 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) shmctl$IPC_SET(r6, 0x1, &(0x7f0000000240)={{0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x7}, 0x0, 0xfffc, 0x0, 0x0, 0x4, 0x0, 0x800000800000000}) shmat(r6, &(0x7f0000001000/0x3000)=nil, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000001600)='\t', 0x1}], 0x1) 213.722536ms ago: executing program 7 (id=190): munmap(&(0x7f0000000000/0x4000)=nil, 0x4000) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3) r0 = kqueue() kevent(r0, 0x0, 0x9, 0x0, 0x8, &(0x7f0000000680)={0x1, 0x2f0}) 874.907µs ago: executing program 1 (id=191): r0 = socket(0x1, 0x2, 0x0) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0x0, [{&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil}, {&(0x7f0000695000/0x2000)=nil, &(0x7f0000159000/0x2000)=nil}, {&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000698000/0x4000)=nil}, {&(0x7f0000692000/0x3000)=nil, &(0x7f0000ff7000/0x3000)=nil}, {&(0x7f0000010000/0x2000)=nil, &(0x7f0000ff1000/0x1000)=nil, 0xfffffffffffffffe}, {&(0x7f0000607000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil}, {&(0x7f000069a000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil}, {&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000159000/0x4000)=nil}, {&(0x7f00004f6000/0x4000)=nil, &(0x7f0000604000/0x3000)=nil}, {&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil}, {&(0x7f000000e000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x800000000004}, {&(0x7f0000691000/0x2000)=nil, &(0x7f0000606000/0x4000)=nil}, {&(0x7f0000ffc000/0x2000)=nil, &(0x7f000015a000/0x1000)=nil, 0x7}, {&(0x7f0000ff1000/0x1000)=nil, &(0x7f0000ff0000/0x4000)=nil, 0x8}, {&(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff3000/0x2000)=nil, 0xe12c}], './file0\x00'}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f00000000c0), 0x2, 0x0}, 0x9) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket(0x18, 0x1, 0x0) close(r1) socket(0x18, 0x2, 0x0) sendmsg$unix(r1, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000180)=ANY=[@ANYBLOB="000000000000aaaaaaaaaaaa86dd600000c00014060000000000000000000000ffffac1400aa00fe000001000800001a0000000000044e204e20", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5004800090788aff"]) ioctl$FIONREAD(r0, 0xc0106924, &(0x7f00000001c0)) 0s ago: executing program 0 (id=192): r0 = socket(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0210001f0000000048f1e48801"], 0x10}, 0x0) setsockopt$sock_int(r0, 0xffff, 0x200, &(0x7f0000000340)=0x101, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffff06000000aa"]) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="00001c00ac14"]) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket(0x2, 0x4001, 0x0) r3 = dup(r2) r4 = fcntl$dupfd(r3, 0x2, 0xffffffffffffffff) close(r4) r5 = socket(0x2, 0x2, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) symlink(0x0, &(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) munlock(&(0x7f0000183000/0x1000)=nil, 0x1000) r6 = semget$private(0x0, 0x4, 0x1a3) semctl$IPC_SET(r6, 0x0, 0x1, &(0x7f00000001c0)={{0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb3}, 0xa3b, 0x80000000, 0x5}) syz_open_pts() semctl$GETZCNT(r6, 0x1, 0x7, &(0x7f00000000c0)=""/4) r7 = socket(0x2, 0x2, 0x0) ioctl$FIONREAD(r7, 0x80206916, &(0x7f00000001c0)) bind(r5, &(0x7f0000000000), 0x10) connect$unix(r5, &(0x7f0000000000), 0x10) write(r4, &(0x7f00000000c0)="d695f284e44e4c8df9dd46bc1c35c38401c68855ea06", 0x16) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_int(r4, 0xffff, 0x1023, &(0x7f0000000080), 0x4) fcntl$setstatus(r0, 0x4, 0x80) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.26' (ED25519) to the list of known hosts. panic: kernel diagnostic assertion "va >= entry->start" failed: file "/syzkaller/managers/setuid/kernel/sys/uvm/uvm_fault.c", line 1739 Stopped at db_enter+0x25: addq $0x8,%rsp TID PID UID PRFLAGS PFLAGS CPU COMMAND * 11983 50877 32767 0x10 0x4000000 0K syz-executor 494829 72347 32767 0x10 0x4000000 1 syz-executor db_enter() at db_enter+0x25 panic(ffffffff8343f325) at panic+0x1e5 __assert(ffffffff833e6f56,ffffffff83422e1b,6cb,ffffffff83334d03) at __assert+0x29 uvm_fault_unwire_locked(fffffd8069de4ca8,400000000000,400000011000) at uvm_fault_unwire_locked+0x4c1 uvm_fault_unwire(fffffd8069de4ca8,400000000000,400000011000) at uvm_fault_unwire+0x55 kern_sysctl_dirs(4e,ffff80003c4f0558,1,4000000001c0,ffff80003c4f0588,0,172ee75a00070a27,1) at kern_sysctl_dirs+0x363 kern_sysctl(ffff80003c4f0554,2,4000000001c0,ffff80003c4f0588,0,37,611922d4bc36b9c) at kern_sysctl+0x12d sys_sysctl(ffff80003b0d19d0,ffff80003c4f06c0,ffff80003c4f0610) at sys_sysctl+0x425 syscall(ffff80003c4f06c0) at syscall+0xbc6 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x81d88857350, count: 5 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{0}> ddb{0}> set $lines = 0 ddb{0}> set $maxwidth = 0 ddb{0}> show panic *cpu0: kernel diagnostic assertion "va >= entry->start" failed: file "/syzkaller/managers/setuid/kernel/sys/uvm/uvm_fault.c", line 1739 ddb{0}> trace db_enter() at db_enter+0x25 panic(ffffffff8343f325) at panic+0x1e5 __assert(ffffffff833e6f56,ffffffff83422e1b,6cb,ffffffff83334d03) at __assert+0x29 uvm_fault_unwire_locked(fffffd8069de4ca8,400000000000,400000011000) at uvm_fault_unwire_locked+0x4c1 uvm_fault_unwire(fffffd8069de4ca8,400000000000,400000011000) at uvm_fault_unwire+0x55 kern_sysctl_dirs(4e,ffff80003c4f0558,1,4000000001c0,ffff80003c4f0588,0,172ee75a00070a27,1) at kern_sysctl_dirs+0x363 kern_sysctl(ffff80003c4f0554,2,4000000001c0,ffff80003c4f0588,0,37,611922d4bc36b9c) at kern_sysctl+0x12d sys_sysctl(ffff80003b0d19d0,ffff80003c4f06c0,ffff80003c4f0610) at sys_sysctl+0x425 syscall(ffff80003c4f06c0) at syscall+0xbc6 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x81d88857350, count: -10 ddb{0}> show registers rdi 0 rsi 0x1 rbp 0xffff80003c4f0130 rbx 0xffffffff83852dc7 cpu_info_full_primary+0x2dc7 rdx 0xffff8000014419c0 rcx 0xffff80003b0d19d0 rax 0xffffffff83851ff0 cpu_info_full_primary+0x1ff0 r8 0x101010101010101 r9 0x8080808080808080 r10 0x2cc8a3d4600041c9 r11 0xf1150b9e03fdef0f r12 0xffffffff83852bc8 cpu_info_full_primary+0x2bc8 r13 0 r14 0 r15 0x1 rip 0xffffffff81af0975 db_enter+0x25 cs 0x8 rflags 0x246 rsp 0xffff80003c4f0120 ss 0 db_enter+0x25: addq $0x8,%rsp ddb{0}> show proc PROC (syz-executor) tid=11983 pid=50877 tcnt=5 stat=onproc flags process=10 proc=4000000 runpri=32, usrpri=86, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff80003b0d14b0,0xffff80003b0d07f0 process=0xffff8000ffff1280 user=0xffff80003c4eb000, vmspace=0xfffffd8069de4ca8 estcpu=36, cpticks=1, pctcpu=0.0, user=0, sys=1, intr=0 ddb{0}> ps PID TID PPID UID S FLAGS WAIT COMMAND 49479 176014 50787 32767 2 0x10 syz-executor 50877 319575 63378 32767 2 0x490 syz-executor 50877 360331 63378 32767 2 0x4000010 syz-executor 50877 101889 63378 32767 2 0x4000010 syz-executor *50877 11983 63378 32767 7 0x4000010 syz-executor 50877 372110 63378 32767 3 0x4000090 fsleep syz-executor 72347 34082 58275 32767 2 0x10 syz-executor 72347 494829 58275 32767 7 0x4000010 syz-executor 72347 156030 58275 32767 3 0x4000090 fsleep syz-executor 72347 173734 58275 32767 3 0x4000090 fsleep syz-executor 22527 379369 51918 32767 2 0x490 syz-executor 22527 117253 51918 32767 3 0x4000090 kqsel syz-executor 22527 385534 51918 32767 3 0x4000090 fsleep syz-executor 32945 108383 98212 32767 2 0x10 syz-executor 32945 479773 98212 32767 3 0x4000090 kqsel syz-executor 34714 324735 46185 0 3 0x82 sbwait sshd-session 7546 39509 0 0 3 0x14200 bored sosplice 28096 324549 55864 32767 2 0x10 syz-executor 63378 358521 2169 32767 2 0x490 syz-executor 24945 437417 72896 32767 3 0x90 wait syz-executor 50787 523296 95265 32767 3 0x90 nanoslp syz-executor 70159 209040 29901 32767 2 0x10 syz-executor 98212 490653 7362 32767 2 0x490 syz-executor 51918 21279 10767 32767 2 0x490 syz-executor 58275 162308 86034 32767 2 0x490 syz-executor 29901 249804 66519 0 3 0x82 wait syz-executor 7362 58469 66519 0 3 0x82 wait syz-executor 2169 468651 66519 0 3 0x82 wait syz-executor 10767 227901 66519 0 3 0x82 wait syz-executor 86034 217315 66519 0 3 0x82 wait syz-executor 72896 364992 66519 0 3 0x82 wait syz-executor 95265 155813 66519 0 3 0x82 wait syz-executor 55864 74447 66519 0 3 0x82 wait syz-executor 66519 331790 23377 0 3 0x82 kqread syz-executor 23377 494087 78773 0 3 0x10008a sigsusp ksh 78773 438010 2528 0 3 0x98 kqread sshd-session 2528 348192 46185 0 3 0x92 kqread sshd-session 67716 286255 1 0 3 0x100083 ttyin getty 46185 105131 1 0 3 0x88 kqread sshd 73156 428900 24736 73 3 0x1100090 kqread syslogd 24736 317085 1 0 3 0x100082 sbwait syslogd 1517 190269 1 0 3 0x100080 kqread resolvd 42462 456821 75554 77 3 0x100092 kqread dhcpleased 20885 253305 75554 77 3 0x100092 kqread dhcpleased 75554 353247 1 0 3 0x80 kqread dhcpleased 7364 209286 0 0 3 0x14200 bored smr 10000 459339 0 0 3 0x14200 pgzero zerothread 19184 257585 0 0 3 0x14200 aiodoned aiodoned 49332 476487 0 0 3 0x14200 syncer update 29976 430578 0 0 3 0x14200 cleaner cleaner 46671 188468 0 0 3 0x14200 reaper reaper 38112 448001 0 0 3 0x14200 pgdaemon pagedaemon 20158 102754 0 0 3 0x14200 bored viomb 24702 84590 0 0 3 0x40014200 acpi0 acpi0 99951 289649 0 0 3 0x40014200 idle1 67711 499270 0 0 3 0x14200 bored softnet3 5980 330870 0 0 3 0x14200 bored softnet2 13878 225466 0 0 3 0x14200 bored softnet1 29022 63346 0 0 3 0x14200 bored softnet0 53834 371016 0 0 3 0x14200 bored systqmp 40134 223453 0 0 3 0x14200 bored systq 7982 119065 0 0 3 0x14200 tmoslp softclockmp 43838 280133 0 0 3 0x40014200 tmoslp softclock 7964 369993 0 0 3 0x40014200 idle0 1 190193 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb{0}> show all locks Process 50877 (syz-executor) thread 0xffff80003b0d19d0 (11983) exclusive rwlock amaplk r = 0 (0xfffffd806c1681a0) #0 witness_lock+0x5bb #1 rw_do_enter_write+0x3ea #2 uvm_map_lock_entry+0x51 #3 uvm_fault_unwire_locked+0x253 #4 uvm_fault_unwire+0x55 #5 kern_sysctl_dirs+0x363 #6 kern_sysctl+0x12d #7 sys_sysctl+0x425 #8 syscall+0xbc6 #9 Xsyscall+0x128 shared rwlock vmmaplk r = 0 (0xfffffd8069de4da8) #0 witness_lock+0x5bb #1 rw_do_enter_read+0x3af #2 uvm_fault_unwire+0x3e #3 kern_sysctl_dirs+0x363 #4 kern_sysctl+0x12d #5 sys_sysctl+0x425 #6 syscall+0xbc6 #7 Xsyscall+0x128 exclusive kernel_lock &kernel_lock r = 0 (0xffffffff8397dd28) #0 witness_lock+0x5bb #1 __mp_acquire_count+0x58 #2 mi_switch+0x4b7 #3 sleep_finish+0x24f #4 rw_do_enter_write+0x1de #5 rrw_enter+0xc6 #6 VOP_LOCK+0xa6 #7 vn_lock+0xa4 #8 vfs_getcwd_common+0xd1 #9 sysctl_proc_cwd+0x2b2 #10 kern_sysctl_dirs+0x2ef #11 kern_sysctl+0x12d #12 sys_sysctl+0x425 #13 syscall+0xbc6 #14 Xsyscall+0x128 exclusive rwlock sysctllk r = 0 (0xffffffff837e4fb8) #0 witness_lock+0x5bb #1 rw_do_enter_write+0x3ea #2 sysctl_vslock+0x45 #3 kern_sysctl_dirs+0x266 #4 kern_sysctl+0x12d #5 sys_sysctl+0x425 #6 syscall+0xbc6 #7 Xsyscall+0x128 Process 28096 (syz-executor) thread 0xffff8000ffff8020 (324549) exclusive rrwlock inode r = 0 (0xfffffd8063751ce8) #0 witness_lock+0x5bb #1 rw_do_enter_write+0x3ea #2 rrw_enter+0xc6 #3 VOP_LOCK+0xa6 #4 ufs_ihashins+0x4f #5 ffs_vget+0x187 #6 ffs_inode_alloc+0x283 #7 ufs_mkdir+0x113 #8 VOP_MKDIR+0x102 #9 domkdirat+0x179 #10 syscall+0xb08 #11 Xsyscall+0x128 exclusive rrwlock inode r = 0 (0xfffffd806e5aa410) #0 witness_lock+0x5bb #1 rw_do_enter_write+0x3ea #2 rrw_enter+0xc6 #3 VOP_LOCK+0xa6 #4 vn_lock+0xa4 #5 vfs_lookup+0x109 #6 namei+0x7aa #7 domkdirat+0x8b #8 syscall+0xb08 #9 Xsyscall+0x128 Process 70159 (syz-executor) thread 0xffff8000fffface8 (209040) exclusive rrwlock inode r = 0 (0xfffffd806caa70d8) #0 witness_lock+0x5bb #1 rw_do_enter_write+0x3ea #2 rrw_enter+0xc6 #3 VOP_LOCK+0xa6 #4 vn_lock+0xa4 #5 vn_closefile+0x111 #6 fdrop+0x126 #7 closef+0x192 #8 syscall+0xbc6 #9 Xsyscall+0x128 ddb{0}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 10215 10958K 10966K 166960K 11296 0 pcb 17 12K 12K 166960K 17 0 rtable 236 6K 7K 166960K 362 0 pf 31 16K 16K 166960K 31 0 ifaddr 42 7K 7K 166960K 44 0 ifgroup 50 2K 2K 166960K 50 0 sysctl 1 1K 1K 166960K 1 0 counters 64 36K 36K 166960K 64 0 ioctlops 0 0K 2K 166960K 32 0 iov 0 0K 20K 166960K 13 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1332 84K 84K 166960K 1368 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 3 5K 5K 166960K 6 0 VM map 2 1K 1K 166960K 2 0 sem 12 0K 0K 166960K 15 0 dirhash 12 2K 2K 166960K 12 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 24 89K 121K 166960K 329 0 sigio 0 0K 0K 166960K 6 0 proc 63 91K 115K 166960K 486 0 subproc 72 4K 4K 166960K 72 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 1 0K 0K 166960K 22 0 in_multi 99 7K 7K 166960K 99 0 ether_multi 1 0K 0K 166960K 1 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 235 1049K 1049K 166960K 235 0 exec 0 0K 1K 166960K 357 0 fusefs mount 1 32K 32K 166960K 1 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 248 78K 88K 166960K 4362 0 UVM aobj 10 2K 2K 166960K 12 0 pinsyscall 47 94K 112K 166960K 1336 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 2 0K 0K 166960K 22 0 NDP 11 0K 2K 166960K 27 0 temp 48 8636K 8704K 166960K 7174 0 kqueue 14 22K 29K 166960K 65 0 SYN cache 2 16K 16K 166960K 2 0 ddb{0}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 24 0 0 1 0 1 1 0 8 0 rtpcb 120 59 0 56 1 0 1 1 0 8 0 rtentry 112 113 0 2 4 0 4 4 0 8 0 unpcb 144 153 0 136 2 0 2 2 0 8 1 syncache 336 8 0 8 1 0 1 1 0 8 1 tcpqe 32 1 0 1 1 0 1 1 0 8 1 tcpcb 808 177 0 166 6 0 6 6 0 8 4 arp 120 18 0 0 1 0 1 1 0 8 0 ipq 40 3 0 1 1 0 1 1 0 8 0 ipqe 40 47 0 44 1 0 1 1 0 8 0 inpcb 376 324 0 308 7 0 7 7 0 8 5 nd6 136 26 0 1 1 0 1 1 0 8 0 kcovpl 48 8 0 0 1 0 1 1 0 8 0 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 457 0 2 29 0 29 29 0 8 0 art_table 32 458 0 2 4 0 4 4 0 8 0 art_node 16 112 0 11 1 0 1 1 0 8 0 sysvmsgpl 40 4 0 2 1 0 1 1 0 8 0 semupl 112 1 0 1 1 0 1 1 0 8 1 semapl 112 13 0 3 1 0 1 1 0 8 0 shmpl 112 9 0 2 1 0 1 1 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino2pl 256 1805 0 300 95 0 95 95 0 8 0 ffsino 280 1805 0 300 108 0 108 108 0 8 0 nchpl 144 2236 0 560 63 0 63 63 0 8 0 uvmvnodes 80 1886 0 0 39 0 39 39 0 8 0 vnodes 216 1886 0 0 105 0 105 105 0 8 0 namei 1024 7375 0 7374 2 0 2 2 0 8 1 percpumem 16 46 0 0 1 0 1 1 0 8 0 kstatmem 264 22 0 0 2 0 2 2 0 8 0 scxspl 216 7489 0 7489 10 2 8 8 1 8 8 plimitpl 152 194 0 169 2 0 2 2 0 8 0 sigapl 424 603 0 547 7 0 7 7 0 8 0 futexpl 64 2653 0 2649 1 0 1 1 0 8 0 knotepl 120 311 0 0 10 0 10 10 0 8 0 kqueuepl 216 85 0 73 1 0 1 1 0 8 0 pipepl 328 351 0 323 13 2 11 13 0 8 8 fdescpl 504 584 0 547 7 1 6 6 0 8 0 filepl 152 3387 0 3162 18 0 18 18 0 8 8 lockfpl 104 75 0 73 1 0 1 1 0 8 0 lockfspl 48 28 0 26 1 0 1 1 0 8 0 sessionpl 144 24 0 7 1 0 1 1 0 8 0 pgrppl 48 33 0 8 1 0 1 1 0 8 0 ucredpl 104 480 0 461 1 0 1 1 0 8 0 zombiepl 144 548 0 547 1 0 1 1 0 8 0 processpl 1176 603 0 547 5 0 5 5 0 8 0 procpl 656 892 0 826 7 0 7 7 0 8 1 sosppl 168 2 0 2 1 0 1 1 0 8 1 sockpl 688 539 0 503 9 0 9 9 0 8 4 mcl64k 65536 6 0 0 1 0 1 1 0 8 0 mcl16k 16384 6 0 0 1 0 1 1 0 8 0 mcl12k 12288 2 0 0 1 0 1 1 0 8 0 mcl9k 9216 1 0 0 1 0 1 1 0 8 0 mcl8k 8192 5 0 0 1 0 1 1 0 8 0 mcl4k 4096 121 0 0 16 0 16 16 0 8 0 mcl2k 2048 29 0 0 4 0 4 4 0 8 0 mtagpl 96 3 0 0 1 0 1 1 0 8 0 mbufpl 256 336 0 0 21 0 21 21 0 8 0 bufpl 280 2659 0 124 182 0 182 182 0 8 0 anonpl 24 129513 0 123809 57 0 57 57 0 184 10 amapchunkpl 152 14355 0 13756 32 0 32 32 0 158 6 amappl16 200 2446 0 2359 15 2 13 15 0 8 8 amappl15 192 6 0 6 1 1 0 1 0 8 0 amappl14 184 105 0 94 1 0 1 1 0 8 0 amappl13 176 6 0 6 1 1 0 1 0 8 0 amappl12 168 1183 0 1147 2 0 2 2 0 8 0 amappl11 160 45 0 35 1 0 1 1 0 8 0 amappl10 152 5 0 5 1 1 0 1 0 8 0 amappl9 144 258 0 258 1 1 0 1 0 8 0 amappl8 136 21 0 19 1 0 1 1 0 8 0 amappl7 128 96 0 84 1 0 1 1 0 8 0 amappl6 120 172 0 168 1 0 1 1 0 8 0 amappl5 112 115 0 109 1 0 1 1 0 8 0 amappl4 104 278 0 263 1 0 1 1 0 8 0 amappl3 96 2407 0 2288 4 0 4 4 0 8 0 amappl2 88 626 0 565 2 0 2 2 0 8 0 amappl1 80 8638 0 8016 15 0 15 15 0 8 0 amappl 88 4004 0 3810 5 0 5 5 0 92 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 11 0 2 1 0 1 1 0 8 0 uaddrrnd 24 584 0 547 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 584 0 547 1 0 1 1 0 8 0 vmmpekpl 168 7201 0 7167 3 0 3 3 0 8 0 vmmpepl 168 42389 0 40247 105 0 105 105 0 357 3 vmsppl 456 583 0 547 7 1 6 6 0 8 0 rwobjpl 64 16826 0 13930 49 0 49 49 0 8 0 pdppl 4096 1176 0 1094 110 22 88 96 0 8 6 pvpl 32 18383 0 0 149 0 149 149 0 265 0 pmappl 248 583 0 547 4 1 3 3 0 8 0 extentpl 40 55 0 38 1 0 1 1 0 8 0 phpool 112 301 0 25 8 0 8 8 0 8 0 ddb{0}> machine ddbcpu 0 Invalid cpu 0 ddb{0}> trace db_enter() at db_enter+0x25 panic(ffffffff8343f325) at panic+0x1e5 __assert(ffffffff833e6f56,ffffffff83422e1b,6cb,ffffffff83334d03) at __assert+0x29 uvm_fault_unwire_locked(fffffd8069de4ca8,400000000000,400000011000) at uvm_fault_unwire_locked+0x4c1 uvm_fault_unwire(fffffd8069de4ca8,400000000000,400000011000) at uvm_fault_unwire+0x55 kern_sysctl_dirs(4e,ffff80003c4f0558,1,4000000001c0,ffff80003c4f0588,0,172ee75a00070a27,1) at kern_sysctl_dirs+0x363 kern_sysctl(ffff80003c4f0554,2,4000000001c0,ffff80003c4f0588,0,37,611922d4bc36b9c) at kern_sysctl+0x12d sys_sysctl(ffff80003b0d19d0,ffff80003c4f06c0,ffff80003c4f0610) at sys_sysctl+0x425 syscall(ffff80003c4f06c0) at syscall+0xbc6 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x81d88857350, count: -10 ddb{0}> machine ddbcpu 1 Stopped at x86_ipi_db+0x27: addq $0x8,%rsp x86_ipi_db(ffff800029a9bff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 copy_fault() at copy_fault syscall(ffff80003c540c50) at syscall+0xbc6 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xabf5d17bc30, count: 9 ddb{1}> trace x86_ipi_db(ffff800029a9bff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 copy_fault() at copy_fault syscall(ffff80003c540c50) at syscall+0xbc6 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xabf5d17bc30, count: -6