last executing test programs:

2.331783996s ago: executing program 0 (id=1):
r0 = shmget$private(0x0, 0x2000, 0x190, &(0x7f0000ffd000/0x2000)=nil)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
getsockopt$sock_int(r1, 0xffff, 0x1002, &(0x7f0000000300), &(0x7f0000000340)=0x4)
ktrace(0x0, 0x1, 0x0, 0x0)
r2 = getuid()
shmctl$IPC_SET(r0, 0x1, &(0x7f0000000040)={{0x8, 0xffffffffffffffff, 0x0, r2, 0x0, 0x10a, 0x9}, 0x2, 0x0, 0x0, 0x0, 0x7, 0x9, 0x7})
getgroups(0x2, &(0x7f0000000140)=[<r3=>0x0, 0xffffffffffffffff])
sysctl$net_inet6_ip6(&(0x7f00000001c0)={0x4, 0x18, 0x29, 0x36}, 0x4, 0x0, 0x0, 0x0, 0x0)
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, r2, r3, r2, r3, 0x14}, 0x0, 0x1})
ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x10000000000001}})
connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7, 0x3}, 0x8)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r4 = socket(0x1, 0x1, 0x0)
close(r4)
socket(0x1, 0x3, 0x6)
r5 = socket(0x18, 0x2, 0x0)
setsockopt(r5, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14)
connect$unix(r4, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c)
sendto$inet(r4, &(0x7f0000000900)="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", 0x7a6, 0x2, 0x0, 0x0)
shmget$private(0x0, 0x2000, 0x190, &(0x7f0000ffd000/0x2000)=nil) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) (async)
getsockopt$sock_int(r1, 0xffff, 0x1002, &(0x7f0000000300), &(0x7f0000000340)=0x4) (async)
ktrace(0x0, 0x1, 0x0, 0x0) (async)
getuid() (async)
shmctl$IPC_SET(r0, 0x1, &(0x7f0000000040)={{0x8, 0xffffffffffffffff, 0x0, r2, 0x0, 0x10a, 0x9}, 0x2, 0x0, 0x0, 0x0, 0x7, 0x9, 0x7}) (async)
getgroups(0x2, &(0x7f0000000140)=[0x0, 0xffffffffffffffff]) (async)
sysctl$net_inet6_ip6(&(0x7f00000001c0)={0x4, 0x18, 0x29, 0x36}, 0x4, 0x0, 0x0, 0x0, 0x0) (async)
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, r2, r3, r2, r3, 0x14}, 0x0, 0x1}) (async)
ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x10000000000001}}) (async)
connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7, 0x3}, 0x8) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
socket(0x1, 0x1, 0x0) (async)
close(r4) (async)
socket(0x1, 0x3, 0x6) (async)
socket(0x18, 0x2, 0x0) (async)
setsockopt(r5, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) (async)
connect$unix(r4, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) (async)
sendto$inet(r4, &(0x7f0000000900)="2117cecd05058af5fbce692fb209c0a9047b41d6e3ae771b0ad4031990ec2e2dde0df1fdf6e6a6be5dd94d4f404a8a50ec891bd907fcf8cd4339a97014ee830ec9fb5289f68bd993ae017c359e2f2b656c164c662350cfd3dc778b43352b22c8bc6d9163fa7f245783877b4e079b27ae9b51327132faae536f9006c5d632ae323eb4fc169738c872d524c2cc8451eeef5aca89298580c2e9377d2e967a8e32c5352db2ae293fb6081ab052d1ef19c73c38f4ebdb48d8e2d08e865f9ce0cc5a45beb520e2f24582721811d7c25b3461f53e71f78f0104a532cefe4b2299d4c9196b2cf30629cbfc65a076962ca893ed597e1f55786b272f2d7ec76d925f6f7f7c17dea858469f89e90f45ae03aefcd7906d010060f0a2206e16fc0ad156ce8c3bca6f8a55ab64a15cf548868d091d26c6cb0b000000000000067b04680f4b84734717c23165cb1a5557d6b75fc53c723deddea0e49c8776cbe8dcdfea616e86825bfb31f2b22f368aae1f287d3ddc0aa878bb1a13559b248d12bcce19914ef04299699fee55cb48ca16b7eecc0c4dc9ec7768afb4ce3638266fbad4b8de0d796ca7b0b57ac809608bddc34ddbf2dfd588d3628aa6783c41cbca4e7c9b4a94a67e050010ea1888e3757edb45c7dd184b4aa7c6601fc222f436f9e93a86ccba0b9a8f495840139999fe411afc67ef1bb6734d62a032ba3a2620f695740993d3700849409940728e393b64aa6aa5ebd4caebd7832e3af32b6a9b77f70c4e168d5ac0f0a9f90bbe93dfdb0f017ddc752b08ec6d29f6b8886686e2132917a04fb3bfa11c5820406352788a1b4ec9486508bdf4a3053e02f8195ad4011a8272807ef271e59355bcaca5e9277d7299520c91f322178bfd9cd215a0294b415eb239b96a6b09e8b66ab911f9fb5981675f0b0f641c9fdcccb442a7eb4e998b03c02803ba8f5b93e7c9f1a53fa8caf072e80973e682d9cb97dd3d036907830714a791f665c684269c93c552459c8336724342d0387142e5c6dc530584a01bfa8b4a8affa4ddf7578a95c95abcb5bed8baa966651872dec1d582d17c6fb077f621e0eca00010ca7170281046c7db83ed38448234841cbb661c0cf331ca42cca0253195394e1ce570ed0d9008e31171c2bcb62f1af19abf97840ede00c8fe0f00d205d955e9bfb1328348b4a0adccf847adfa9a7875b8ce79a8b79a16fddbc4773d70bae3e75b3eb8e4bd105f31762e7bca015329561c9d480a95936fa42362607f5de2fa87bd8dbef3e54905b437f27d7a4286418f661771ac5cf9ce11ff861094933e5ffd6bc81b5ae88fe6f38ee5a77305a3f161bb20ed402ccd487288ae8e2db673b2c307d652e16f8bcfe2b4e6c90801228b5c2be7446011bd1f4d10781b204a2aa581215f2ed227b5dcab7026c70e2d90f30af451ac69c478c2f2af58ac2e90b104842f7594cc522750161b933ae722606094c94aa256cbaab34f2aa78907b33bf25fc262261893b64a83446e34444a918bce76921fe4ec70d85c996edf0864230779436add2bcd5646797331ad5931824ff8311e436462fd30ee2ab745533bf61c79d12818bcbd34803d0090ed93dbea03f20ade53223f02d1a6b04fc09ef5d612c6da30dbca5e75bed1ef6b73fb5ee7eafc78580b126fe4cf2c4ecda8539b83ee785f8e6c9de1de1ad612c8b5190e7451fe9bb0e207a86373860ffdedcde9eca740d4741f2664e23a125f25c023041e2d98b5ab290d05d098c974f9fa896bb4c987f35342813d96e451b06afa738a0621711779cc91058c30c34b71038190ed171100a8b994b333f70b3cc457608be4549854f87cd9f075a25d9e4039a9442df45ed2c45f63ca9c4d51b7fe5da01815afcd269a788e38fc4599985bd68782f58754fb209d970f6f928cab2f77707d3991c66a9d2e7ec42f014297d433bc5feb51f383db02febea974260f0aa3e5534cc18ee9fa395f8499b76e7544132218f8a66a0e16d284ed82ce72cbe1e5faed12bc82b3e8c0e4ad6fe6808da69b8eecf9a7818086360cdb6ef4d0fe54a6fe3d5a3420fba7420d4baed661840d632d8fc743cba7534bf8048327ebc380b8d0b4452b5f243a847e57da11b5dd6079000021bb75a24b3e98b12832f849d2dbf5105e3143c97a94d1e7540790aea9390b731017b60555d9cafdcea78aabda58f70f76958b16b9991a50200037380a0dc9e83973824ec8ab3ce0c6c783cc290f1b5e2af7fc60f44fbc8fb1e0ad63741eaab19131d0185040f9af984314c04d3781f7a9bc95828c14a88b601bfb5023f16a1fd5e6bf561ba2b3ad3ac4ce95be2549d7f3263915e43c97c8094ccbf1babef210fad5c84125ed9821e6bfd0012b8f9667872ceab4a0a1a1fb7f48345737e5e31368a1b35f3bba42935cf1c5e7d7f03a27184d124ee4ec14011ea600b303d62f0a0b5c1e8743a7e2f559d4064814640041ccebd6f272a13f1893b94da9fa7596fbd629d83a1fada7c60b0690ff04e3f316ab0021505cd7d1641d34ceae5eae7d815481c6f2267678ffd791d1361875af012b1a5963c34880c40fb367e85d812d7155b78798a841e4b7b611ff35dffdfc8ae6805df82e12e815d1292d78d5b00c78903b7cc7b27bd027b1eb50a2758c52740390175de8a8b1d3024849e4e24686df5b7589c4cfc86f0fbad23d3b21c8db836c58c0a8837c4e746e3ab7cff593284f98620ece686977cb52f8fd744706747b4f70695eb929f8b63d76084d263a3efb2b33124360c3b9e2fc6d", 0x7a6, 0x2, 0x0, 0x0) (async)

2.319683682s ago: executing program 1 (id=2):
r0 = socket(0x18, 0x1, 0x0)
setsockopt(r0, 0x1000000029, 0x33, &(0x7f0000000080)="d7112e22", 0x4)
syz_emit_ethernet(0x126f, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd609ded1a12390000c4a4e3"])
syz_emit_ethernet(0x17a, &(0x7f00000001c0)=ANY=[@ANYBLOB="f3a2a8908a86aaaaaaaaaabb86dd601ab5b60000100000004e95"])
syz_emit_ethernet(0x126f, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"])
sysctl$kern(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)="55f8f5782087a072a82ec35f78d14780f518", 0x12)
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0})
r1 = socket(0x18, 0x2, 0x0)
ioctl$FIONREAD(r1, 0xc1206949, &(0x7f00000001c0))
connect$unix(r0, &(0x7f0000000000)=@abs={0x1, 0x0, 0x3}, 0x8)
ioctl$TIOCSETAF(0xffffffffffffffff, 0x802c7416, &(0x7f0000000000)={0x0, 0xffffff49, 0x7, 0x5bc, "225e00d1554709aa0900fa4ab1896c04aec100", 0x3, 0x69400})
sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b1000504000004000000000007", 0xd, 0x400, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r2 = socket(0x11, 0x3, 0x0)
sendto$unix(r2, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a378343712051eea040000000000", 0xb1, 0x16, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
sendmsg$unix(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x409}, 0x3)
fcntl$dupfd(r0, 0x0, r0)

2.280307742s ago: executing program 0 (id=9):
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0)
ftruncate(r0, 0xb026)
poll(0x0, 0x0, 0xfde9)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
ioctl$WSDISPLAYIO_GBURNER(r1, 0x400c5752, &(0x7f0000000040))

2.276681811s ago: executing program 1 (id=10):
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x20, 0x0)
r1 = semget$private(0x0, 0x6, 0x583)
semop(r1, &(0x7f0000000000)=[{0x2, 0x7fff}, {0x2, 0x7fff, 0x1000}, {0x3, 0x9}, {0x3, 0x1, 0x1000}], 0x4)
semctl$IPC_RMID(r1, 0x0, 0x0)
ioctl$BIOCLOCK(r0, 0x20004276)
mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0)
open(&(0x7f00000000c0)='./file0\x00', 0x20, 0x9)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110)
write(r2, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
recvmsg(r3, &(0x7f00000005c0)={&(0x7f0000001300)=@in6, 0xc, 0x0, 0x0, &(0x7f0000000380)=""/164, 0xa4}, 0x2)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
sendmsg$unix(r4, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x608)
fcntl$lock(0xffffffffffffffff, 0xf, &(0x7f0000000040)={0x1, 0x1, 0x800000, 0x0, 0xffffffffffffffff})
mprotect(&(0x7f00000b1000/0x3000)=nil, 0x3000, 0x0)
r5 = socket(0x18, 0x2, 0x0)
setsockopt(r5, 0x1000000000029, 0x2a, &(0x7f0000000040)='\x00\x00\x00\x00', 0x4)
setsockopt$sock_int(r5, 0xffff, 0x1007, &(0x7f0000000080)=0xffffff80, 0x4)

2.114216636s ago: executing program 3 (id=4):
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000100)={0x0, &(0x7f0000000080)})
sysctl$kern(&(0x7f0000000080)={0x1, 0x31}, 0x4000000000000004, 0x0, 0x0, 0x0, 0x0)
r0 = socket(0x2, 0x4001, 0x0)
r1 = dup(r0)
r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff)
close(r2)
select(0x40, &(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x0, 0x0)
syz_emit_ethernet(0x138, &(0x7f0000000040)=ANY=[@ANYBLOB="53f9aaffcfef60e9dfce10975002"])
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r3 = socket(0x2, 0x2, 0x0)
bind(r3, &(0x7f0000000000), 0x10)
connect$unix(r3, &(0x7f0000000000), 0x10)
sendto$inet(r3, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$sock_int(r2, 0xffff, 0x1023, &(0x7f0000000080), 0x4)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1800)

2.113905755s ago: executing program 1 (id=15):
r0 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
ioctl$WSDISPLAYIO_LSFONT(r0, 0xc058574e, &(0x7f0000000040))
ioctl$VT_SETMODE(r0, 0x80087602, &(0x7f00000000c0)={0x1, 0x3, 0x3, 0xfff, 0x7})
r1 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$WSDISPLAYIO_GETEMULTYPE(r1, 0xc014575e, &(0x7f0000000140)={0x40, './file0\x00'})
msgget$private(0x0, 0x20)
utimensat(r0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={{0x8, 0xd}, {0x9, 0x2}}, 0x2)
r2 = msgget$private(0x0, 0x1d1)
msgctl$IPC_STAT(r2, 0x2, &(0x7f0000000200)=""/127)
ioctl$WSDISPLAYIO_GETEMULTYPE(r1, 0xc014575e, &(0x7f0000000280)={0x6, './file0\x00'})
ioctl$VT_GETMODE(r0, 0x40087603, &(0x7f00000002c0))
r3 = getpid()
ktrace(&(0x7f0000000300)='./file0\x00', 0x0, 0x208, r3)
r4 = getpgid(0xffffffffffffffff)
getsockopt$sock_linger(r0, 0xffff, 0x80, &(0x7f0000000340), &(0x7f0000000380)=0x8)
getppid()
r5 = msgget(0x1, 0x404)
msgsnd(r5, &(0x7f00000003c0)={0x1, "29f41672ddc2de14d6eba6299de6d053cf7a5caeb42b6d2049d1ece82d06857f12d8848bd3a103b7ccd46f24708bf1e4e54f6dc7db98c0c698136690c034366d942eca7102eff34d6c5fa733d77a5b24"}, 0x58, 0x0)
getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000000440), &(0x7f0000000480)=0xc)
ioctl$WSDISPLAYIO_SBURNER(r0, 0x800c5751, &(0x7f00000004c0)={0x0, 0x4, 0x2})
r6 = getpid()
fcntl$setown(r0, 0x6, r6)
ioctl$TIOCSBRK(r0, 0x2000747b)
mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0)
mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4)
msgctl$IPC_STAT(r5, 0x2, &(0x7f0000000500)=""/154)
ktrace(&(0x7f00000005c0)='./file0\x00', 0x1, 0x100, r4)
r7 = msgget(0x3, 0x82)
msgctl$IPC_STAT(r7, 0x2, &(0x7f0000000600)=""/121)
poll(&(0x7f0000000680)=[{r1, 0x4}, {r1, 0x100}, {r1, 0x8}], 0x3, 0x6)

2.095634772s ago: executing program 3 (id=17):
r0 = socket(0x18, 0x2, 0x0)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
poll(&(0x7f0000000040)=[{r1, 0x80}, {0xffffffffffffffff, 0x4}, {r1, 0x4}], 0x3, 0x3)
r2 = openat$wskbd(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0)
ioctl$FIONBIO(r2, 0x8004667e, &(0x7f0000000100)=0x8000)
mkdirat(0xffffffffffffff9c, &(0x7f00000011c0)='./file0\x00', 0x14e)
unveil(&(0x7f0000000200)='./file0/../file0\x00', &(0x7f0000000140)='x\x00')
open$dir(&(0x7f0000000180)='./file0/../file0\x00', 0x1, 0x0)
shmctl$IPC_SET(0x0, 0x1, 0xffffffffffffffff)
connect$unix(r0, &(0x7f00000001c0)=@file={0x1, './file0/../file0\x00'}, 0x3)

1.866450952s ago: executing program 1 (id=22):
mkdir(&(0x7f0000000040)='./file2\x00', 0xc1)
open(&(0x7f0000000080)='./file2/file0\x00', 0xae38ac560ef87f54, 0x3e)
syz_emit_ethernet(0x34, &(0x7f00000000c0)={@empty, @remote, [], {@generic={0x806, "9480cc9b3d35ad6a3dfb10b6b39496a64c1834a3400718af12bb3a92b2974bb400b27d69f687"}}})
unveil(&(0x7f0000000280)='.\x00', &(0x7f00000002c0)='r\x00')
execve(&(0x7f0000000200)='./file2/file0\x00', 0x0, 0x0)
mkdir(&(0x7f0000000040)='./file2\x00', 0x0)
open(&(0x7f0000000000)='./file2\x00', 0x2, 0xb2)

1.825162566s ago: executing program 5 (id=25):
r0 = open(&(0x7f00000000c0)='./file1\x00', 0x2, 0x1aa)
r1 = getppid()
ioctl$WSDISPLAYIO_GETSCREENTYPE(r0, 0xc028575d, &(0x7f0000000000)={0x8, 0x1, './file1\x00', 0x5, 0x4, 0x6})
r2 = socket(0x18, 0x1, 0x0)
setsockopt(r2, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14)
ktrace(&(0x7f0000000100)='./file0\x00', 0x0, 0x800, r1)
fcntl$getown(0xffffffffffffffff, 0x5)

1.824821916s ago: executing program 32 (id=25):
r0 = open(&(0x7f00000000c0)='./file1\x00', 0x2, 0x1aa)
r1 = getppid()
ioctl$WSDISPLAYIO_GETSCREENTYPE(r0, 0xc028575d, &(0x7f0000000000)={0x8, 0x1, './file1\x00', 0x5, 0x4, 0x6})
r2 = socket(0x18, 0x1, 0x0)
setsockopt(r2, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14)
ktrace(&(0x7f0000000100)='./file0\x00', 0x0, 0x800, r1)
fcntl$getown(0xffffffffffffffff, 0x5)

1.824659405s ago: executing program 6 (id=26):
r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x201, 0x80)
pwritev(r0, &(0x7f0000000380)=[{&(0x7f00000003c0)="63dd81", 0x3}], 0x1, 0x3fffe)
ftruncate(r0, 0x40000) (async)
pwrite(r0, &(0x7f0000000100)="93d4", 0x2, 0x5) (async)
open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) (async, rerun: 64)
r1 = socket$unix(0x1, 0x5, 0x0) (rerun: 64)
bind$unix(r1, &(0x7f0000000080)=@abs={0x1, 0x0, 0x1}, 0x8) (async)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0)

1.8243244s ago: executing program 1 (id=27):
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)})
r0 = socket(0x1, 0x2, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
setrlimit(0x8, &(0x7f0000000980)={0x7, 0x54})
socket$inet(0x2, 0x1, 0x0)
ioctl$FIONREAD(r0, 0xc0106924, &(0x7f00000001c0))
r1 = socket(0x18, 0x1, 0x0)
ioctl$FIONREAD(r1, 0xc1206925, &(0x7f0000000100))

1.537209116s ago: executing program 6 (id=31):
r0 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000080), 0x8, 0x0)
ioctl$VT_GETACTIVE(r0, 0x40047607, &(0x7f00000000c0))
fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1000300000003})
semctl$SETALL(0x0, 0x0, 0x9, &(0x7f0000000040)=[0x7ff])
select(0x0, 0x0, 0x0, 0x0, 0x0)
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"])
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r1 = socket(0x18, 0x1, 0x0)
close(r1)
r2 = socket(0x18, 0x1, 0x0)
setsockopt(r2, 0x1000000029, 0xc, &(0x7f0000000040)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14)
setsockopt(r1, 0x1000000029, 0xc, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14)
setsockopt(r1, 0x1000000029, 0xd, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14)

1.536872704s ago: executing program 2 (id=32):
sysctl$vm(&(0x7f0000000080)={0x6, 0x19}, 0x2, &(0x7f0000000000)="f640a79c145e52b10d15de132bfa951eb379743fbd17e866093871888ee2", 0x0, 0x0, 0xffffffffffffffd6)

1.408013313s ago: executing program 1 (id=33):
sysctl$net_inet6_ip6(&(0x7f0000000080)={0x4, 0x18, 0x29, 0x6}, 0x4, 0x0, 0x0, 0x0, 0x0)

1.407498658s ago: executing program 33 (id=33):
sysctl$net_inet6_ip6(&(0x7f0000000080)={0x4, 0x18, 0x29, 0x6}, 0x4, 0x0, 0x0, 0x0, 0x0)

1.407407082s ago: executing program 2 (id=35):
fchflags(0xffffffffffffffff, 0x10001)
sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x2, 0x0, 0x1d}, 0x4, &(0x7f0000000380)="b0321c3e69162d85", &(0x7f0000000180)=0x8, 0x0, 0x0)
fchflags(0xffffffffffffffff, 0x10001) (async)
sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x2, 0x0, 0x1d}, 0x4, &(0x7f0000000380)="b0321c3e69162d85", &(0x7f0000000180)=0x8, 0x0, 0x0) (async)

1.40606829s ago: executing program 3 (id=36):
setregid(0xffffffffffffffff, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0xc82, 0x5c)
close(r0)
r1 = fcntl$getown(0xffffffffffffffff, 0x5)
r2 = getuid()
shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x7, r2, 0x0, r2, 0x0, 0x14, 0x6}, 0x2, 0x5, 0x0, 0x0, 0x8000000000000000, 0x10000, 0x5})
r3 = getgid()
r4 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x2, 0x63)
r5 = getpgid(0x0)
fcntl$setown(r4, 0x6, r5)
r6 = geteuid()
recvmmsg(0xffffffffffffffff, &(0x7f0000004dc0)={0x0}, 0x10, 0x0, &(0x7f0000004e00)={0x0, 0x3a082e27})
getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f00000004c0)={0x0, 0x0, <r7=>0x0}, &(0x7f0000000500)=0xc)
r8 = getpid()
r9 = getuid()
r10 = getpgrp()
r11 = shmget$private(0x0, 0x2000, 0x190, &(0x7f0000ffd000/0x2000)=nil)
r12 = getuid()
shmctl$IPC_SET(r11, 0x1, &(0x7f0000000040)={{0x8, 0xffffffffffffffff, 0x0, r12, 0x0, 0x10a, 0x9}, 0x2, 0x0, 0x0, 0x0, 0x7, 0x9, 0x7})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r13=>0xffffffffffffffff})
getsockopt$sock_cred(r13, 0xffff, 0x1022, &(0x7f0000000280)={0x0, 0x0, <r14=>0x0}, &(0x7f0000000140)=0xc)
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, r14}})
r15 = socket(0x18, 0x2, 0x0)
ioctl$FIOASYNC(r15, 0x8004667d, &(0x7f0000000100)=0x1)
r16 = getpgid(0x0)
fcntl$setown(r15, 0x6, r16)
r17 = getuid()
setreuid(r17, 0xffffffffffffffff)
getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000540)={0x0, 0x0, <r18=>0x0}, 0xc)
sendmsg$unix(r0, &(0x7f0000000640)={&(0x7f0000000000)=@abs={0x1, 0x0, 0x3}, 0x8, &(0x7f0000000440)=[{&(0x7f0000000040)="b7ecd483b1ff33d974f21e758ab8030b2cb0ffba2ae3f1dd230d7dbbdd30db6c4e70cccf4ab5f139794350dd4941a7bcad8cc4e251ad0679adcf49ba3797a942c383a3377a555b56a5117fbc299741dd184a4595cf06716ae03bc059bfeac8729535d85adf8aa0539f81d30bf3ab8d925ca866b249c9761cd6fa196de33451f1f2e7a4417e12a7d311b9994a92ef85e14f5076da3bc3e085", 0x98}, {&(0x7f0000000100)="cf692f8e149968d00be9ca5629422e8fd7140efb69778e94e90b06392fdd89b45a3e42fdc1e03e10b84064e2996ea786e69f84acf61ec817363bc2eea6486fa12278f64a27e400dbd71edabbb6d9eff953d533af8c2f8d3b38c4373340dc67c2a1c91296b335f60ba305e3efa48f63b7f369b56ef439ed23fb841d9789c1f218d555f30ecafd29f79a2e0396069ad12086423d7d79599d1dbf44782820b2ac10131577ef2f36e5d210c66a9c3cc55a401b451851646ef2e85eb063a2094c23", 0xbf}, {&(0x7f00000001c0)="3892f9792756660588a1b45a1c716cbf99123b8054941b97e12f9fe7f0fdc3b25ad006cd6fa581f3c13b7326b1b4b48a3e06c99a2ba3aac7ded9c8be8755e007859d81ce3c95fa4cecc71e8888bfbe2893582bcf7c4bbf91b1ced19511671b4cecaa079b031f51f185b4e59315b06fb6b445bb6d986d74ed", 0x78}, {&(0x7f0000000240)="a5d1e1e85ae18e5428369bb145b82fef288efcc0747e04b4793dfe020391978879e675ff42573787b852baed6809737ed7cd27962dd60eeda4db2d0bc7968cf2bd261080ecf15146f6fae36339424b8e697e5aac2faf2fc38659b96a887b81da969a34a6f5869f65d127f47325e40e66c65be35854160e5d42f107cd0b8940921dd920600903b1085142759a5de43d", 0x8f}, {&(0x7f0000000300)="9908947c44bfaa78e2804af666c5c1d8d74e9c9a0661ac4c23dfd1891ba9e237ce46055a167e939252f62ffa3ae8436f6beb4c3380ca4d3d631d0022357fd93e437e784862b6cb13d16501be56a75948e27ea8f005ee60a8d62a4a31046e52681d5bc7d97f07af02b6681a", 0x6b}, {&(0x7f0000000380)="dfac8293a408a538a311d9ec86958a5e483e1c74d8dfc3dea59f10d675263edfeae75d66ef02939d1c4a48e7cd59bbd9b708bd8a0d3dc0af154c3cc5f3a23851088c2766d82a97ef2cb4936d70a930fb99440daf0499e86f0e0d301e2628e894fd0ba1d3a37ad714c46230d74443315aca8fed0adaa513cef20d5fb8ab5825eacd89fcad6beaca43534d95", 0x8b}], 0x6, &(0x7f0000000580)=[@cred={0x20, 0xffff, 0x0, r1, r2, r3}, @cred={0x20, 0xffff, 0x0, r5, r6, r7}, @cred={0x20, 0xffff, 0x0, r8, r9}, @cred={0x20, 0xffff, 0x0, r10, r12, r14}, @cred={0x20, 0xffff, 0x0, r16, r17, r18}], 0xa0, 0xc}, 0x9)

1.405779879s ago: executing program 0 (id=37):
socket(0x2, 0x2, 0x0)
setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x200000000000c, &(0x7f0000000000)="ea00000100000000", 0x8)
r0 = socket$inet(0x2, 0x2, 0x0)
close(r0)
r1 = socket(0x18, 0x2, 0x0)
shutdown(r1, 0x0)
r2 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0xd6)
mkdir(&(0x7f0000000280)='./file0\x00', 0x8)
writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000280)='#!', 0x10}, {&(0x7f0000000000)="8d6bb85551ec8430877ae32fe9bbe42cc8f2147a3eba8e1969f0435119cf4c071c8aee7ef2921be5d7d4796c5566c95989acb3d185587234186e96b8fde9ffac51de05a87b8b893e2abd154dd886eafbe03881d25b7b13b4c32227fc9e5a86a06f59f701322b3a109a13436e486b0a", 0x6f}], 0x2)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x100000000000000, 0xffffffffffffffff})
ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x9}})
setsockopt$sock_timeval(0xffffffffffffffff, 0xffff, 0x0, &(0x7f00000000c0)={0x0, 0x1ff}, 0x10)
connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r3 = socket(0x18, 0x1, 0x0)
close(r3)
r4 = socket(0x18, 0x2, 0x0)
setsockopt(r3, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14)
connect$unix(r3, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c)
write(r4, 0x0, 0x0)
r5 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_opts(r5, 0x0, 0x200000000000c, &(0x7f0000000000)="ea00000100000000", 0x8)
setsockopt$inet_opts(r0, 0x0, 0x0, &(0x7f00000000c0)="ea00eb010000e5006ffd392e04bbd5dfb5c5525a01f40446e95f4e099ebfbe784fe688a335a7fa5089284814319b8fe63ff4dfd825e69ca6f370b7107bf5506502bcb6065dabdfb02c98b55e5b2a76b329e46da38e8fb16fbfee468346c4c59d9e7875cd778f55a97a4149df129e5986ff1ff525a4e364559f9c5cb872b1f05cf6e425fe02a5afd81155445d3cbb3c30fb202cd09fbf543054bdd35cc301aafeedc2d2278e2213e0b218148681115db90000678751299f8d5cbcebabe8126bfe1ce563b085d1dd49f4db7c394e9042ee0b8cd941edd55989972f613b82c049cb6e07ad009bd3fc140f24a02b03f77b96aa3d78a2438d6d", 0xf7)
setsockopt$inet_opts(r0, 0x0, 0x200000000000c, &(0x7f0000000000)="e600100000000000", 0x8)
setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000240)="ea00000100000000", 0x8)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
open$dir(&(0x7f0000000000)='.\x00', 0x5b42972446101eca, 0x0)
r6 = syz_open_pts()
readv(r6, &(0x7f00000012c0), 0x0)

1.380742563s ago: executing program 2 (id=38):
r0 = open(&(0x7f0000000380)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7949)
writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)='#!b', 0x3}], 0x1)
execve(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000002a40)={&(0x7f0000000000), 0x10, 0x0}, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1)
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"])
clock_gettime(0x6, &(0x7f0000000340))
madvise(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x3)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
r2 = socket(0x2, 0x2, 0x0)
syz_emit_ethernet(0x46, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaabbaaaaaaaaaaaa8100b3e6b5ed406775340008060018814906100008ffffffffffff31f220bfdecd44fdf75ec43639d9505b78155b460ac76e9db97e179ac43ff4"])
connect$unix(r2, &(0x7f0000000000), 0x10)
sendmsg$unix(r2, &(0x7f0000002a40)={0x0, 0x0, 0x0}, 0x0)
fchmod(r1, 0x3c)
accept$unix(r1, &(0x7f00000000c0)=@file={0x0, ""/509}, &(0x7f0000000000)=0x1ff)
open(&(0x7f0000000380)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7949) (async)
writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)='#!b', 0x3}], 0x1) (async)
execve(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) (async)
openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) (async)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000002a40)={&(0x7f0000000000), 0x10, 0x0}, 0x0) (async)
writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1) (async)
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) (async)
clock_gettime(0x6, &(0x7f0000000340)) (async)
madvise(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x3) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async)
socket(0x2, 0x2, 0x0) (async)
syz_emit_ethernet(0x46, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaabbaaaaaaaaaaaa8100b3e6b5ed406775340008060018814906100008ffffffffffff31f220bfdecd44fdf75ec43639d9505b78155b460ac76e9db97e179ac43ff4"]) (async)
connect$unix(r2, &(0x7f0000000000), 0x10) (async)
sendmsg$unix(r2, &(0x7f0000002a40)={0x0, 0x0, 0x0}, 0x0) (async)
fchmod(r1, 0x3c) (async)
accept$unix(r1, &(0x7f00000000c0)=@file={0x0, ""/509}, &(0x7f0000000000)=0x1ff) (async)

1.163349061s ago: executing program 2 (id=41):
mkdir(&(0x7f0000000040)='./file2\x00', 0xc1)
mkdir(&(0x7f0000000300)='./file2/file0\x00', 0x1ce)
unveil(&(0x7f0000000080)='./file2\x00', &(0x7f0000000000)='c\x00')
open(&(0x7f00000001c0)='./file2/file0\x00', 0x18289, 0x110)

1.055258405s ago: executing program 3 (id=42):
r0 = syz_open_pts()
r1 = socket(0x18, 0x2, 0x0)
r2 = socket(0x18, 0x2, 0x0)
setsockopt(r2, 0x1000000000029, 0x3f, &(0x7f0000000240), 0x0)
setsockopt(r1, 0x1000000000029, 0xa, &(0x7f0000000040)='\x00\x00\x00\x00', 0x4)
setsockopt(r1, 0x29, 0xb, &(0x7f0000000100)="00000001", 0x4)
readv(r0, &(0x7f0000000040)=[{&(0x7f0000000000)=""/1, 0x1}], 0x1)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0xc0, 0x0)
close(r3)
getpeername(r3, 0x0, 0x0)
ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000140)={0x0, 0x0, 0xfbffffff, 0x5, "d76c1f46000000ef1f0160fbf520000002000f00", 0x7, 0x3})
syz_open_pts()

1.045094364s ago: executing program 0 (id=43):
r0 = socket$unix(0x1, 0x5, 0x0)
bind$unix(r0, &(0x7f0000000200)=@file={0xd570d0466b6018f, './file0\x00'}, 0xa)
listen(r0, 0x0)
r1 = socket$unix(0x1, 0x5, 0x0)
shutdown(r0, 0x2)
connect$unix(r1, &(0x7f0000000000)=@file={0xd1653077bafa0114, './file0\x00'}, 0xa)
mkdirat(0xffffffffffffff9c, &(0x7f00000011c0)='./file0\x00', 0x14e)
unveil(&(0x7f0000000480)='./file0/file1\x00', &(0x7f00000004c0)='c\x00')
unveil(&(0x7f00000000c0)='.\x00', &(0x7f0000000100)='r\x00')
chdir(&(0x7f0000000140)='./file0\x00')

835.299221ms ago: executing program 2 (id=44):
writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000080)="76e5eac907f9ccf7a251ceddcec7d6aa45cffe2c63a56077123a276d3ba4e9d17eb3eb5db12a3783a8e0620d357de1fe04fa9465b5bd1286e9624dec06a00c222f", 0x41}], 0x1) (async)
writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000080)="76e5eac907f9ccf7a251ceddcec7d6aa45cffe2c63a56077123a276d3ba4e9d17eb3eb5db12a3783a8e0620d357de1fe04fa9465b5bd1286e9624dec06a00c222f", 0x41}], 0x1)
openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0xe8, 0x0)
syz_emit_ethernet(0x66, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd605d34520030000000000000000000000000000000000000000000009f0500040000000000000001010090780000000060397772"])
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff})
fcntl$setstatus(r0, 0x4, 0xc0) (async)
fcntl$setstatus(r0, 0x4, 0xc0)
close(r0) (async)
close(r0)
syz_emit_ethernet(0x126, &(0x7f0000000340)={@local, @random="643195cf0b9a", [], {@ipv6={0x86dd, {0x1, 0x6, "97f9e6", 0xf0, 0x2, 0x80, @mcast1, @mcast1, {[@fragment={0x67, 0x0, 0x7, 0x0, 0x0, 0x0, 0x66}, @hopopts={0x1d, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0xd3}, @enc_lim={0x4, 0x1, 0x8b}]}, @dstopts={0x70, 0x14, '\x00', [@jumbo={0xc2, 0x4, 0xef}, @ra={0x5, 0x2, 0x7f}, @padn={0x1, 0x2, [0x0, 0x0]}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @generic={0x4, 0x8a, "c8591c6bd8f40c45cf8d18b1703eb77bd564992a8fcc2e83879218bcc3ea6b97ae7d5d846be8dc0e373403bfefb0d86d1c9d700ba5c6d91247de8d0571cdfea745654e7da0db1e600811422459cfb8e388091dc9cd44c0030d2a5bed3059b10552e14936c777d83476210e5e069f27fbb73ef4f1d4a64d2bf2baa34e6a172508039eebd992ee8b64df27"}, @pad1]}, @fragment={0x2b, 0x0, 0x7, 0x0, 0x0, 0x6, 0x68}, @fragment={0x0, 0x0, 0xf9, 0x1, 0x0, 0x13, 0x65}], @icmpv6=@mld={0x1, 0x0, 0x0, 0xb492, 0x5198, @rand_addr="67e2aefc8b53a9ac73d7727506644e89"}}}}}})
unveil(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000300)='W\x00')
openat$bpf(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0)

834.407801ms ago: executing program 0 (id=45):
r0 = socket(0x18, 0x1, 0x0)
msgget(0x1, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmmsg(r1, &(0x7f0000000440)={&(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{0x0}, {0x0}, {&(0x7f0000000300)=""/101, 0x5a}], 0x3, 0x0}}, 0xffffffffffffff2e, 0x0, 0x0)
execve(0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000000000)={0x0, 0x2}, 0x10, 0xe)
setsockopt(r0, 0x1000000029, 0x1, 0x0, 0x0)
write(r0, &(0x7f0000000000)="8ed6419166373884c47776e5cccad9fc52", 0x11)

832.89535ms ago: executing program 4 (id=46):
r0 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
poll(&(0x7f00000000c0)=[{r0, 0x4}], 0x1, 0xee6)
syz_emit_ethernet(0x5e, &(0x7f0000000100)={@broadcast, @random="94ea09066dbd", [], {@ipv6={0x86dd, {0x0, 0x6, "db8344", 0x28, 0x0, 0x0, @rand_addr="fed38d5ba80b9e61cd0c535a9800", @mcast2, {[@dstopts={0x8, 0x2, '\x00', [@enc_lim={0x4, 0x1, 0xa}, @enc_lim={0x4, 0x1, 0x9}, @generic={0x1}, @padn={0x1, 0x1, [0x0]}, @jumbo={0xc2, 0x4, 0x3eb}]}], @udp={{0x0, 0x2, 0x8}}}}}}})
shmget$private(0x0, 0x800000, 0x2, &(0x7f0000800000/0x800000)=nil)
mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0)

829.527296ms ago: executing program 0 (id=47):
mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff})
connect$unix(r0, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0xa) (async, rerun: 64)
r1 = msgget$private(0x0, 0x5bd) (rerun: 64)
msgsnd(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="0300000f0200"], 0x8, 0x800)
msgsnd(r1, &(0x7f0000000d00)=ANY=[@ANYRESHEX=r1], 0x401, 0x0)
msgsnd(r1, &(0x7f0000000100)={0x3, "30573f8601"}, 0xd, 0xbeaec740cadcb78b) (async)
msgrcv(r1, 0x0, 0x0, 0x1, 0x800) (async)
open(&(0x7f0000000000)='./file0\x00', 0x2, 0x0) (async)
sendmmsg(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0xd1}, 0x10, 0x1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
recvmmsg(r2, &(0x7f0000000080)={&(0x7f0000000100)={&(0x7f0000000480)=@un=@file={0x0, ""/537}, 0x21b, 0x0, 0x0, 0x0, 0xffffffffffffff3f}}, 0x10, 0x0, 0x0)
r3 = open$dir(&(0x7f0000000040)='./file0\x00', 0x200, 0xa0) (async)
r4 = socket(0x2, 0x2, 0x0)
setsockopt$sock_int(r4, 0xffff, 0x1001, &(0x7f0000000100)=0x20000, 0x4) (async)
select(0x40, &(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x0, 0x0) (async)
r5 = getuid()
setreuid(r5, 0xffffffffffffffff)
r6 = getuid() (async)
getsockopt$SO_PEERCRED(r4, 0xffff, 0x1022, &(0x7f0000000140)={0x0, 0x0, <r7=>0x0}, 0xc) (async)
r8 = getppid()
msgctl$IPC_SET(r1, 0x1, &(0x7f0000000180)={{0x10, r5, r7, r6, r7, 0x2}, 0xffffffffffffffff, 0x860, r8, 0x0, 0x8, 0xe69a, 0x8, 0xd}) (async)
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) (async, rerun: 32)
sysctl$kern(&(0x7f00000000c0)={0x1, 0x2a}, 0x2, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
connect$unix(r4, &(0x7f0000000000), 0x10) (async)
munlock(&(0x7f0000698000/0x4000)=nil, 0x4000) (async)
setsockopt$inet_opts(r4, 0x0, 0x1, &(0x7f00000000c0)="9876d692a3ef9c7ab923a2f0", 0xc) (async)
write(r4, &(0x7f0000000240)="14bdfa5d1d34e2fecb284a6498307dcda9aec43050036123339a346f737850551408753f95b7688ad4c4e1dd5489e7bafc58d3e5823757ae8b630719ef187ccad995f13dbe19a6dd4e6902bd8297b0799b426aabe9fad9db6996571c6d9f8bb5d542c2148aa42be940970fe88d34d8f99afe7e7820237400000000008000000100"/138, 0xfc7e) (async)
fcntl$lock(r3, 0x7, &(0x7f0000000100)={0x2, 0x0, 0x40000000000, 0x6})

789.349783ms ago: executing program 4 (id=48):
r0 = open(&(0x7f0000000000)='./file0\x00', 0x9cab835cfdc52675, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0xa011, r0, 0x0)
ftruncate(r0, 0x79c8)
setsockopt(0xffffffffffffffff, 0x800, 0x9, &(0x7f0000000f00)="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", 0x101)
setrlimit(0x1, &(0x7f0000000ec0))
r1 = socket(0x2, 0x2, 0x10)
ioctl$FIOASYNC(r1, 0x8004667d, &(0x7f0000000100)=0x3)
ioctl$FIONBIO(r1, 0x8004667e, &(0x7f0000000000)=0x10000)
connect$unix(r1, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0xa)
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x2000000000000243, &(0x7f0000000100)})
r2 = socket(0x1, 0x2, 0x0)
ioctl$FIONREAD(r2, 0xc0106924, &(0x7f00000001c0))
r3 = kqueue()
kevent(r3, &(0x7f00000000c0), 0x101, &(0x7f0000000180), 0x6, 0x0)
r4 = socket(0x2, 0x2, 0x0)
ioctl$FIONREAD(r4, 0x802069b0, &(0x7f00000001c0))
msync(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4)

787.902563ms ago: executing program 6 (id=49):
r0 = socket(0x11, 0x3, 0x0)
setsockopt(r0, 0x11, 0x1, &(0x7f0000000280)="12000000", 0x4)
r1 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_opts(r1, 0x0, 0x200000000000c, &(0x7f0000000080)="eaef125c00000000", 0x8)
r2 = socket$inet(0x2, 0x2, 0x0)
r3 = socket(0x11, 0x3, 0x0)
listen(r3, 0xffff7590)
setsockopt$inet_opts(r2, 0x0, 0x200000000000c, &(0x7f0000000080)="eaef125c00000000", 0x8)
close(r2)
r4 = socket(0x11, 0x3, 0x0)
sendto$unix(r4, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be381649ce5e7d5c5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x400, 0x0, 0x0)
pipe(&(0x7f00000000c0)={<r5=>0xffffffffffffffff})
ioctl$VNDIOCSET(r5, 0xc0384600, &(0x7f0000000180)={&(0x7f0000000100)='./file0\x00', 0x5, &(0x7f0000000140)='./file0\x00', 0x8})

787.168633ms ago: executing program 2 (id=50):
r0 = socket(0x2, 0x2, 0x0)
r1 = socket(0x2, 0x400000000002, 0x0)
setsockopt(r1, 0x0, 0x21, &(0x7f0000000180)="b1f5d915", 0x4)
setsockopt$sock_int(r1, 0xffff, 0x800, &(0x7f0000000040)=0x3, 0x4)
dup2(r1, r0)
select(0x40, &(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x0, 0x0)
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"])
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r2 = socket(0x2, 0x2, 0x0)
connect$unix(r2, &(0x7f0000000000), 0x10)
bind(r0, &(0x7f0000000000), 0x10)
write(r2, 0x0, 0x0)
r3 = socket(0x2, 0x2, 0x0)
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0})
ioctl$FIONREAD(r3, 0x802069b4, &(0x7f00000001c0))
recvmmsg(r0, &(0x7f0000000100)={0x0, 0x4}, 0x10, 0x2, 0x0)

782.268217ms ago: executing program 34 (id=50):
r0 = socket(0x2, 0x2, 0x0)
r1 = socket(0x2, 0x400000000002, 0x0)
setsockopt(r1, 0x0, 0x21, &(0x7f0000000180)="b1f5d915", 0x4)
setsockopt$sock_int(r1, 0xffff, 0x800, &(0x7f0000000040)=0x3, 0x4)
dup2(r1, r0)
select(0x40, &(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x0, 0x0)
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"])
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r2 = socket(0x2, 0x2, 0x0)
connect$unix(r2, &(0x7f0000000000), 0x10)
bind(r0, &(0x7f0000000000), 0x10)
write(r2, 0x0, 0x0)
r3 = socket(0x2, 0x2, 0x0)
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0})
ioctl$FIONREAD(r3, 0x802069b4, &(0x7f00000001c0))
recvmmsg(r0, &(0x7f0000000100)={0x0, 0x4}, 0x10, 0x2, 0x0)

680.089733ms ago: executing program 4 (id=51):
symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00')
r0 = socket(0x18, 0x1, 0x0)
poll(&(0x7f0000000080)=[{r0, 0x108}, {r0, 0x125}, {r0, 0x8}], 0x3, 0x2c37)
shutdown(r0, 0x2)
rename(&(0x7f0000000140)='./file0/file0/..\x00', &(0x7f00000001c0)='./file0/file1\x00')

673.21158ms ago: executing program 6 (id=52):
writev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000300)="c8860400e0892c94ac431e9e3c8cb78535da21e591bcde1dbb5ee5d94da6edcf1faa41c11b", 0x25}], 0x1)
syz_emit_ethernet(0x138, &(0x7f0000000080)=ANY=[@ANYRES64=0x0])
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
r0 = socket(0x2, 0x2, 0x0)
r1 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_opts(r1, 0x0, 0x200000000000a, &(0x7f0000000040)='\x00', 0x1)
r2 = socket(0x2, 0x1, 0x0)
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0})
ioctl$FIONREAD(r2, 0x81286947, &(0x7f00000001c0))
r3 = dup(r1)
ioctl$DIOCMAP(r3, 0xc0106477, &(0x7f0000000200)={&(0x7f0000000280)='./file0\x00', r1, 0x6})
dup2(r3, r0)
rename(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)='./file1\x00')
connect$unix(r0, &(0x7f0000000000), 0x10)
sysctl$hw(&(0x7f0000000040)={0x6, 0x2}, 0x2, &(0x7f0000000100)="39bbe1c7c4fbdc44a3d37521a4d3e6376ae2811442f9add6f93d5d92f0aaf4e0c23087150b17ee7239e8f070a818b1d0eed828293d3cee2761579fa870a7113a6a996ad506fc1edbea5c7f80e5f963c82129ab665e6b0b7fde7cad291e3bb778c7ef69ed7d633d263e622cafb7ed40aaf576812c02744935be6b7473706a95db58b2636f2b5d149134e6e968c612549fe9d9f40ae56096c0acc5b99bdc8ddf58048c0f62497e89fdbdd952d00bb0145fbb9c9bb2fe195ce4043ee75679e94760ef69", &(0x7f00000000c0)=0xc2, 0x0, 0x0)

671.87374ms ago: executing program 6 (id=53):
r0 = open(&(0x7f0000000080)='./file0\x00', 0x18289, 0x190)
ftruncate(r0, 0x10000)
sysctl$net_inet_tcp(&(0x7f0000000000)={0x4, 0x2, 0x6, 0xe}, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffe7a)
sysctl$vm_swapencrypt(&(0x7f0000000000)={0x2, 0x5, 0x2}, 0x3, 0x0, 0x0, 0x0, 0x0)
sysctl$kern(&(0x7f0000000000)={0xa}, 0x3, 0x0, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r1 = socket$unix(0x1, 0x5, 0x0)
close(r1)
mknod(&(0x7f0000000000)='./file0\x00', 0x1ffa, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x9cab835cfdc52675, 0x109)
mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0)
open(&(0x7f0000000600)='./file0\x00', 0x0, 0x0)
r2 = kqueue()
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
open(&(0x7f0000000180)='./file0\x00', 0x80000000000206, 0x0)
select(0x40, &(0x7f0000000000)={0xb, 0x1, 0x9, 0xb37, 0x0, 0x2, 0x0, 0x4}, 0x0, 0x0, 0x0)
dup2(r2, r1)
sysctl$kern(&(0x7f0000000000), 0x6, 0x0, 0x0, 0x0, 0x0)
r3 = open(&(0x7f0000000040)='./file0\x00', 0x200, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x10, r3, 0x0)
clock_getres(0x4, &(0x7f0000000000))

662.133494ms ago: executing program 6 (id=54):
sysctl$vm_swapencrypt(&(0x7f0000000040)={0x7, 0x2, 0x2}, 0x3, 0x0, 0x0, 0x0, 0x0) (async)
sysctl$vm_swapencrypt(&(0x7f0000000040)={0x7, 0x2, 0x2}, 0x3, 0x0, 0x0, 0x0, 0x0)
sysctl$kern(&(0x7f0000000040)={0x1, 0x31}, 0x3, &(0x7f0000000040), 0x0, 0x0, 0xfffffffffffffda3)
ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x0, 0x0, {[0xfffffffffffffffb, 0x0, 0x2, 0x100000000, 0x0, 0x0, 0xdf5e, 0x0, 0x0, 0x2f01, 0x0, 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x2, 0x100], [0xfffffffffffffffe, 0x0, 0xfffffffffffffffd, 0x20000000, 0x0, 0x7b98, 0x1fe], [0x100000001, 0x2, 0x0, 0x0, 0x0, 0x11000], [0x100, 0x20000000000, 0x0, 0x100000000, 0xfffffffffffffffe], [{0x0, 0x4, 0x0, 0x7d06}, {0xfffc, 0x2, 0x5}, {0x0, 0x0, 0xfffffffe, 0x80}, {0x3, 0x5, 0x6, 0xffffffffffffffff}, {0xcc8b, 0x2, 0x0, 0x8}, {0x0, 0x2003, 0x40000, 0x2000000000000000}, {}, {0x0, 0x965, 0x0, 0x8}], {0x1ee, 0x5, 0x1}, {0x0, 0x0, 0x0, 0x2}}})
setrlimit(0x8, &(0x7f0000000980)={0x42, 0x62})
r0 = syz_open_pts()
close(r0)
syz_open_pts() (async)
r1 = syz_open_pts()
writev(r0, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) (async)
writev(r0, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1)
ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000040)={0x38a, 0x7fd, 0xfffff348, 0xffffffff, "34db416df13a6ebdba5f581e21bebf32dec4a6ec", 0xe1, 0x1ff})
read(r1, &(0x7f0000000200)=""/243, 0xf3)

415.945066ms ago: executing program 4 (id=55):
clock_getres(0x2, 0xffffffffffffffff)
writev(0xffffffffffffffff, &(0x7f0000000100)=[{0x0}], 0x1)
getitimer(0x2, &(0x7f0000000200))
clock_settime(0x2, &(0x7f0000000000)={0x0, 0x1fd})

407.367794ms ago: executing program 9 (id=34):
r0 = msgget$private(0x0, 0x5eb)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmmsg(r1, &(0x7f0000000000)={&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)=""/8, 0x8}}, 0x10, 0x0, 0x0)
sysctl$kern(&(0x7f0000000000), 0x6, 0x0, 0x0, 0x0, 0x0)
execve(0x0, 0x0, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0xe8, 0x0)
ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, &(0x7f0000000100)={0x4, 0x0, {[0x0, 0x1, 0x8, 0xfffffffffffffff9, 0x0, 0x0, 0xdf5e, 0x0, 0x0, 0x2f01, 0x3, 0x0, 0xffffffffffffffff, 0x2, 0x800000, 0x0, 0x1, 0x100], [0x2, 0x0, 0xfffffffffffffffa, 0x1ffffffe, 0x0, 0x7b98, 0x0, 0x0, 0x800000000000000], [0x100000004, 0x2, 0x0, 0x10000, 0x81, 0x11000, 0x8], [0xff, 0x20000000000, 0x1, 0x100000001, 0xfffffffffffffffe], [{0x0, 0x9, 0x0, 0x7d06}, {0xfffc, 0x2, 0x1ff}, {0x0, 0x0, 0x80, 0x80}, {0x3, 0x5, 0x6, 0xfffffffffffffffe}, {0xcc8b, 0x2, 0x0, 0x48}, {0x0, 0x2003, 0x40000, 0x2000000000000000}, {}, {0x1, 0x963, 0x5, 0x8}], {0x0, 0x5, 0x1}, {0x0, 0x0, 0x0, 0x4}}})
recvmsg(r2, &(0x7f00000008c0)={&(0x7f00000003c0)=@un=@abs, 0x8, &(0x7f0000000800)=[{&(0x7f0000000400)=""/29, 0x1d}, {&(0x7f0000000440)=""/116, 0x74}, {&(0x7f00000004c0)}, {&(0x7f0000000540)=""/162, 0xa2}, {&(0x7f0000000600)=""/144, 0x90}, {&(0x7f00000025c0)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/240, 0xf0}, {&(0x7f00000007c0)=""/64, 0x40}], 0x8, &(0x7f0000000880)=""/44, 0x2c}, 0x0)
select(0x40, &(0x7f0000000080)={0x8, 0x8, 0x6, 0xd, 0x2, 0x1, 0x3ff, 0x9}, &(0x7f00000000c0)={0x8, 0x4, 0x8000, 0x8, 0x5, 0x100, 0x2, 0xb7}, &(0x7f0000000340)={0x4, 0x7, 0x5, 0xfffffffffffffff7, 0x1, 0x1, 0x4, 0x8000000000000000}, &(0x7f0000000380)={0x8, 0x101})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000900))
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000e80)={&(0x7f0000000bc0)=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000000d40)=[{&(0x7f0000000c00)="8658e801597b265d7f54b2a26737f2e956db43d88031c9be6d909473fe7d76b8932f0d4485c00ef084d7639615f31eed4c749198ee5870692ac0ec8d795e78b130c50d63a176367b0d5428290db646b6c3f32c06286d664a154b6c14a72e1b", 0x5f}, {&(0x7f0000000c80)="50bb9d4ecffe5d31f1c213bf6ec43e7bc80b57fc7f1eeaeb", 0x18}, {&(0x7f0000000cc0)="900f405885701bfaaf642716aac7dfa5363562b6c8d099fb6eb8ae9fc17959b8d8e00511d3ab0d446277c94b06c0e80cce2abfcf2a6228085802aa112cf6badebfef7627a1a5a8b6", 0x48}], 0x3, &(0x7f0000000e40)=[@cred={0x20}, @cred={0x20, 0xffff, 0x0, 0x0, 0xffffffffffffffff}], 0x40, 0x2}, 0x402)
socket(0x18, 0x400000002, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
getrusage(0x1, 0x0)
socket(0x2, 0x8002, 0x0)
r4 = kqueue()
kevent(r4, &(0x7f0000000d80)=[{{}, 0xfffffffffffffffb, 0x14, 0x8, 0x2, 0x7ff}, {{r3}, 0xffffffffffffffff, 0x80, 0x1, 0xfffffffffffffffe, 0xffffffffffffffff}, {{}, 0xfffffffffffffffb, 0xd0, 0x0, 0x4, 0xfff}, {{r2}, 0xfffffffffffffffe, 0x61, 0xc01a237e6bfff449, 0x2, 0x1}, {{r2}, 0xfffffffffffffffb, 0x42, 0x80, 0x800, 0xf}, {{r3}, 0xfffffffffffffff8, 0x20, 0x6691d423f7cec594, 0x8000, 0xf}], 0x3ff, 0x0, 0x6, 0x0)
r5 = open(&(0x7f0000000100)='.\x00', 0x400, 0x100)
mkdirat(r5, &(0x7f0000000540)='./file0\x00', 0x184)
renameat(r5, &(0x7f00000025c0)='./file0\x00', r5, &(0x7f0000002600)='./file1\x00')
ioctl$VMM_IOC_RESETCPU(r5, 0x82405605, &(0x7f0000000940)={0x3, 0x15e, {[0x8, 0x8000, 0x9, 0x9, 0x7, 0x800000, 0x3e6e, 0xbf3, 0x3, 0x2, 0x3, 0x5, 0x401, 0x0, 0x7, 0xe1db, 0x2, 0xcba4], [0x0, 0x23c, 0x200, 0x7fff, 0x9, 0x1, 0x10, 0x80000000, 0x80000000, 0x6], [0x6, 0x0, 0x6, 0x2, 0x7, 0x5], [0xf, 0xb0b, 0x6, 0x5, 0x6, 0xa5], [{0xf7, 0x4, 0xffffffff, 0x9}, {0x6, 0x3b5, 0x4, 0xffffffffffffffff}, {0xe8, 0x2e8, 0x6, 0x8000}, {0x100, 0xd, 0x6, 0x200}, {0x3, 0x73, 0x10, 0xfff}, {0x0, 0x0, 0x7, 0x2}, {0x5, 0x3, 0x7, 0x1}, {0x4, 0x2, 0x6, 0x1}], {0x7, 0x5, 0x800, 0xec7e}, {0x81, 0xfffffffc, 0x3}}})
setrlimit(0x8, &(0x7f0000000980)={0x42, 0x61})
r6 = syz_open_pts()
close(r6)
syz_open_pts()
read(r6, &(0x7f0000000240)=""/211, 0xd3)
ioctl$FIOASYNC(r6, 0x80047470, &(0x7f0000000000)=0x2)
ioctl$TIOCSETA(r6, 0x802c7414, &(0x7f0000000180)={0x81, 0x10001, 0x6375, 0x5, "a12724198fd32d3c27fd6ee6435740de617a60d7", 0x1, 0x10000})
msgsnd(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="02"], 0xe1, 0x0)
msgrcv(r0, &(0x7f0000001580)={0x0, ""/4102}, 0x100e, 0x0, 0x1000)

407.336541ms ago: executing program 8 (id=28):
r0 = socket$inet(0x2, 0x2, 0x0)
close(r0)
fchdir(r0)
r1 = msgget$private(0x0, 0xfffffffffffffffd)
msgrcv(r1, 0x0, 0x0, 0x0, 0x0)
msgsnd(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="03"], 0xe1, 0x0)

407.109393ms ago: executing program 9 (id=34):
r0 = msgget$private(0x0, 0x5eb)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmmsg(r1, &(0x7f0000000000)={&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)=""/8, 0x8}}, 0x10, 0x0, 0x0)
sysctl$kern(&(0x7f0000000000), 0x6, 0x0, 0x0, 0x0, 0x0)
execve(0x0, 0x0, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0xe8, 0x0)
ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, &(0x7f0000000100)={0x4, 0x0, {[0x0, 0x1, 0x8, 0xfffffffffffffff9, 0x0, 0x0, 0xdf5e, 0x0, 0x0, 0x2f01, 0x3, 0x0, 0xffffffffffffffff, 0x2, 0x800000, 0x0, 0x1, 0x100], [0x2, 0x0, 0xfffffffffffffffa, 0x1ffffffe, 0x0, 0x7b98, 0x0, 0x0, 0x800000000000000], [0x100000004, 0x2, 0x0, 0x10000, 0x81, 0x11000, 0x8], [0xff, 0x20000000000, 0x1, 0x100000001, 0xfffffffffffffffe], [{0x0, 0x9, 0x0, 0x7d06}, {0xfffc, 0x2, 0x1ff}, {0x0, 0x0, 0x80, 0x80}, {0x3, 0x5, 0x6, 0xfffffffffffffffe}, {0xcc8b, 0x2, 0x0, 0x48}, {0x0, 0x2003, 0x40000, 0x2000000000000000}, {}, {0x1, 0x963, 0x5, 0x8}], {0x0, 0x5, 0x1}, {0x0, 0x0, 0x0, 0x4}}})
recvmsg(r2, &(0x7f00000008c0)={&(0x7f00000003c0)=@un=@abs, 0x8, &(0x7f0000000800)=[{&(0x7f0000000400)=""/29, 0x1d}, {&(0x7f0000000440)=""/116, 0x74}, {&(0x7f00000004c0)}, {&(0x7f0000000540)=""/162, 0xa2}, {&(0x7f0000000600)=""/144, 0x90}, {&(0x7f00000025c0)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/240, 0xf0}, {&(0x7f00000007c0)=""/64, 0x40}], 0x8, &(0x7f0000000880)=""/44, 0x2c}, 0x0)
select(0x40, &(0x7f0000000080)={0x8, 0x8, 0x6, 0xd, 0x2, 0x1, 0x3ff, 0x9}, &(0x7f00000000c0)={0x8, 0x4, 0x8000, 0x8, 0x5, 0x100, 0x2, 0xb7}, &(0x7f0000000340)={0x4, 0x7, 0x5, 0xfffffffffffffff7, 0x1, 0x1, 0x4, 0x8000000000000000}, &(0x7f0000000380)={0x8, 0x101})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000900))
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000e80)={&(0x7f0000000bc0)=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000000d40)=[{&(0x7f0000000c00)="8658e801597b265d7f54b2a26737f2e956db43d88031c9be6d909473fe7d76b8932f0d4485c00ef084d7639615f31eed4c749198ee5870692ac0ec8d795e78b130c50d63a176367b0d5428290db646b6c3f32c06286d664a154b6c14a72e1b", 0x5f}, {&(0x7f0000000c80)="50bb9d4ecffe5d31f1c213bf6ec43e7bc80b57fc7f1eeaeb", 0x18}, {&(0x7f0000000cc0)="900f405885701bfaaf642716aac7dfa5363562b6c8d099fb6eb8ae9fc17959b8d8e00511d3ab0d446277c94b06c0e80cce2abfcf2a6228085802aa112cf6badebfef7627a1a5a8b6", 0x48}], 0x3, &(0x7f0000000e40)=[@cred={0x20}, @cred={0x20, 0xffff, 0x0, 0x0, 0xffffffffffffffff}], 0x40, 0x2}, 0x402)
socket(0x18, 0x400000002, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
getrusage(0x1, 0x0)
socket(0x2, 0x8002, 0x0)
r4 = kqueue()
kevent(r4, &(0x7f0000000d80)=[{{}, 0xfffffffffffffffb, 0x14, 0x8, 0x2, 0x7ff}, {{r3}, 0xffffffffffffffff, 0x80, 0x1, 0xfffffffffffffffe, 0xffffffffffffffff}, {{}, 0xfffffffffffffffb, 0xd0, 0x0, 0x4, 0xfff}, {{r2}, 0xfffffffffffffffe, 0x61, 0xc01a237e6bfff449, 0x2, 0x1}, {{r2}, 0xfffffffffffffffb, 0x42, 0x80, 0x800, 0xf}, {{r3}, 0xfffffffffffffff8, 0x20, 0x6691d423f7cec594, 0x8000, 0xf}], 0x3ff, 0x0, 0x6, 0x0)
r5 = open(&(0x7f0000000100)='.\x00', 0x400, 0x100)
mkdirat(r5, &(0x7f0000000540)='./file0\x00', 0x184)
renameat(r5, &(0x7f00000025c0)='./file0\x00', r5, &(0x7f0000002600)='./file1\x00')
ioctl$VMM_IOC_RESETCPU(r5, 0x82405605, &(0x7f0000000940)={0x3, 0x15e, {[0x8, 0x8000, 0x9, 0x9, 0x7, 0x800000, 0x3e6e, 0xbf3, 0x3, 0x2, 0x3, 0x5, 0x401, 0x0, 0x7, 0xe1db, 0x2, 0xcba4], [0x0, 0x23c, 0x200, 0x7fff, 0x9, 0x1, 0x10, 0x80000000, 0x80000000, 0x6], [0x6, 0x0, 0x6, 0x2, 0x7, 0x5], [0xf, 0xb0b, 0x6, 0x5, 0x6, 0xa5], [{0xf7, 0x4, 0xffffffff, 0x9}, {0x6, 0x3b5, 0x4, 0xffffffffffffffff}, {0xe8, 0x2e8, 0x6, 0x8000}, {0x100, 0xd, 0x6, 0x200}, {0x3, 0x73, 0x10, 0xfff}, {0x0, 0x0, 0x7, 0x2}, {0x5, 0x3, 0x7, 0x1}, {0x4, 0x2, 0x6, 0x1}], {0x7, 0x5, 0x800, 0xec7e}, {0x81, 0xfffffffc, 0x3}}})
setrlimit(0x8, &(0x7f0000000980)={0x42, 0x61})
r6 = syz_open_pts()
close(r6)
syz_open_pts()
read(r6, &(0x7f0000000240)=""/211, 0xd3)
ioctl$FIOASYNC(r6, 0x80047470, &(0x7f0000000000)=0x2)
ioctl$TIOCSETA(r6, 0x802c7414, &(0x7f0000000180)={0x81, 0x10001, 0x6375, 0x5, "a12724198fd32d3c27fd6ee6435740de617a60d7", 0x1, 0x10000})
msgsnd(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="02"], 0xe1, 0x0)
msgrcv(r0, &(0x7f0000001580)={0x0, ""/4102}, 0x100e, 0x0, 0x1000)

406.91123ms ago: executing program 5 (id=60):
r0 = open(&(0x7f0000000040)='./file0\x00', 0x1, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0xa011, r0, 0x0)
sysctl$net_inet_tcp(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0x81, [{&(0x7f0000eb3000/0x2000)=nil, &(0x7f0000ae8000/0x3000)=nil, 0x5}, {&(0x7f0000836000/0x2000)=nil, &(0x7f0000228000/0x1000)=nil, 0xfffffffffffffffd}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f000040b000/0x1000)=nil, 0xb9b9}, {&(0x7f0000692000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0xfffffffffffffffd}, {&(0x7f0000484000/0x3000)=nil, &(0x7f0000022000/0x1000)=nil, 0x1}, {&(0x7f0000430000/0x4000)=nil, &(0x7f0000049000/0x3000)=nil, 0x8}, {&(0x7f0000c9e000/0x2000)=nil, &(0x7f00007b1000/0x1000)=nil, 0xfffffffffffffffd}, {&(0x7f00003b5000/0x1000)=nil, &(0x7f0000688000/0x4000)=nil, 0x7ff}, {&(0x7f0000d23000/0x4000)=nil, &(0x7f0000729000/0x1000)=nil, 0x1}, {&(0x7f00007a1000/0x800000)=nil, &(0x7f000025b000/0x2000)=nil, 0xe11}, {&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000375000/0x1000)=nil, 0xffffffffffffffff}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f000038c000/0x2000)=nil}, {&(0x7f0000691000/0x2000)=nil, &(0x7f00007da000/0x4000)=nil}, {&(0x7f0000527000/0x2000)=nil, &(0x7f000015a000/0x1000)=nil, 0xca}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x808}, {&(0x7f0000696000/0x1000)=nil, &(0x7f0000494000/0x3000)=nil}], './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', 0x40})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r1 = semget(0x0, 0x1, 0x281)
setsockopt(r0, 0x3, 0x0, &(0x7f00000002c0)="42f28bc4aa88e433d2a2db88e79fe845a8186ab6f462d9bc67a959deb8c65e03871cca452220f31917b114ce521d19a72d6213674c2b9491395e37b43dd99ce0d7f5b50c3214d623d0b1bac8b82c8cfffe8bd1a0b9b6f3cf868c341ac6490ce17d10b95072afaeda4d4d46ca580846c41a0e7247087f1343217c1cbf007499bb876d6f5ccb5716750b6190c5fdaa38e330935aca8d4770ce587825a63f2fabca71b43cd54c53b425046cdd1c3f878e86073f39ae2bc2bdfd4f559d6178f1b6d7e422", 0xc2)
semctl$IPC_SET(r1, 0x0, 0x1, &(0x7f0000000100)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0x10, 0x8})
semctl$SETVAL(r1, 0x2, 0x8, 0x0)
ftruncate(r0, 0x79c8)
setsockopt(0xffffffffffffffff, 0x800, 0x9, &(0x7f0000000f00)="e1379fb0f18d8250af7705bdf4d71eac35454478cf1a38e571bf9079b247702025a044a20038108719a5d26fcb95d0d3a6396ad24315c75e63c3af6dc5a5e310d8cfb6ec54f7382c7b3db50cbec83b56b0c4d245ca60ab898692ef32cf77e93991933e407b19f91e3d1f0dcfeeaf0efd9d26b9ed7527eb87306f21c4a1cd676c600ec7491ecce34ff256e293e4d96bf323077b6259c54bfb656b6903f8dd4cbd891303b117ce9d6719f7b1fbfc9d91e03e229252de6ff184305bca37d6a1a90c1ce54ef4ea7bf9a217d5842bf607e9e76932960692c5a120d8ca4467f7ec1db0ccf33698db989eb94cb5474380cef78e50b134b61556d38b2f1148515790d6cd54", 0x101)
setrlimit(0x1, &(0x7f0000000ec0))
msync(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4)

406.551103ms ago: executing program 4 (id=56):
syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[])

405.926073ms ago: executing program 8 (id=28):
r0 = socket$inet(0x2, 0x2, 0x0)
close(r0)
fchdir(r0)
r1 = msgget$private(0x0, 0xfffffffffffffffd)
msgrcv(r1, 0x0, 0x0, 0x0, 0x0)
msgsnd(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="03"], 0xe1, 0x0)

405.640465ms ago: executing program 9 (id=34):
r0 = msgget$private(0x0, 0x5eb)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmmsg(r1, &(0x7f0000000000)={&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)=""/8, 0x8}}, 0x10, 0x0, 0x0)
sysctl$kern(&(0x7f0000000000), 0x6, 0x0, 0x0, 0x0, 0x0)
execve(0x0, 0x0, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0xe8, 0x0)
ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, &(0x7f0000000100)={0x4, 0x0, {[0x0, 0x1, 0x8, 0xfffffffffffffff9, 0x0, 0x0, 0xdf5e, 0x0, 0x0, 0x2f01, 0x3, 0x0, 0xffffffffffffffff, 0x2, 0x800000, 0x0, 0x1, 0x100], [0x2, 0x0, 0xfffffffffffffffa, 0x1ffffffe, 0x0, 0x7b98, 0x0, 0x0, 0x800000000000000], [0x100000004, 0x2, 0x0, 0x10000, 0x81, 0x11000, 0x8], [0xff, 0x20000000000, 0x1, 0x100000001, 0xfffffffffffffffe], [{0x0, 0x9, 0x0, 0x7d06}, {0xfffc, 0x2, 0x1ff}, {0x0, 0x0, 0x80, 0x80}, {0x3, 0x5, 0x6, 0xfffffffffffffffe}, {0xcc8b, 0x2, 0x0, 0x48}, {0x0, 0x2003, 0x40000, 0x2000000000000000}, {}, {0x1, 0x963, 0x5, 0x8}], {0x0, 0x5, 0x1}, {0x0, 0x0, 0x0, 0x4}}})
recvmsg(r2, &(0x7f00000008c0)={&(0x7f00000003c0)=@un=@abs, 0x8, &(0x7f0000000800)=[{&(0x7f0000000400)=""/29, 0x1d}, {&(0x7f0000000440)=""/116, 0x74}, {&(0x7f00000004c0)}, {&(0x7f0000000540)=""/162, 0xa2}, {&(0x7f0000000600)=""/144, 0x90}, {&(0x7f00000025c0)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/240, 0xf0}, {&(0x7f00000007c0)=""/64, 0x40}], 0x8, &(0x7f0000000880)=""/44, 0x2c}, 0x0)
select(0x40, &(0x7f0000000080)={0x8, 0x8, 0x6, 0xd, 0x2, 0x1, 0x3ff, 0x9}, &(0x7f00000000c0)={0x8, 0x4, 0x8000, 0x8, 0x5, 0x100, 0x2, 0xb7}, &(0x7f0000000340)={0x4, 0x7, 0x5, 0xfffffffffffffff7, 0x1, 0x1, 0x4, 0x8000000000000000}, &(0x7f0000000380)={0x8, 0x101})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000900))
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000e80)={&(0x7f0000000bc0)=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000000d40)=[{&(0x7f0000000c00)="8658e801597b265d7f54b2a26737f2e956db43d88031c9be6d909473fe7d76b8932f0d4485c00ef084d7639615f31eed4c749198ee5870692ac0ec8d795e78b130c50d63a176367b0d5428290db646b6c3f32c06286d664a154b6c14a72e1b", 0x5f}, {&(0x7f0000000c80)="50bb9d4ecffe5d31f1c213bf6ec43e7bc80b57fc7f1eeaeb", 0x18}, {&(0x7f0000000cc0)="900f405885701bfaaf642716aac7dfa5363562b6c8d099fb6eb8ae9fc17959b8d8e00511d3ab0d446277c94b06c0e80cce2abfcf2a6228085802aa112cf6badebfef7627a1a5a8b6", 0x48}], 0x3, &(0x7f0000000e40)=[@cred={0x20}, @cred={0x20, 0xffff, 0x0, 0x0, 0xffffffffffffffff}], 0x40, 0x2}, 0x402)
socket(0x18, 0x400000002, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
getrusage(0x1, 0x0)
socket(0x2, 0x8002, 0x0)
r4 = kqueue()
kevent(r4, &(0x7f0000000d80)=[{{}, 0xfffffffffffffffb, 0x14, 0x8, 0x2, 0x7ff}, {{r3}, 0xffffffffffffffff, 0x80, 0x1, 0xfffffffffffffffe, 0xffffffffffffffff}, {{}, 0xfffffffffffffffb, 0xd0, 0x0, 0x4, 0xfff}, {{r2}, 0xfffffffffffffffe, 0x61, 0xc01a237e6bfff449, 0x2, 0x1}, {{r2}, 0xfffffffffffffffb, 0x42, 0x80, 0x800, 0xf}, {{r3}, 0xfffffffffffffff8, 0x20, 0x6691d423f7cec594, 0x8000, 0xf}], 0x3ff, 0x0, 0x6, 0x0)
r5 = open(&(0x7f0000000100)='.\x00', 0x400, 0x100)
mkdirat(r5, &(0x7f0000000540)='./file0\x00', 0x184)
renameat(r5, &(0x7f00000025c0)='./file0\x00', r5, &(0x7f0000002600)='./file1\x00')
ioctl$VMM_IOC_RESETCPU(r5, 0x82405605, &(0x7f0000000940)={0x3, 0x15e, {[0x8, 0x8000, 0x9, 0x9, 0x7, 0x800000, 0x3e6e, 0xbf3, 0x3, 0x2, 0x3, 0x5, 0x401, 0x0, 0x7, 0xe1db, 0x2, 0xcba4], [0x0, 0x23c, 0x200, 0x7fff, 0x9, 0x1, 0x10, 0x80000000, 0x80000000, 0x6], [0x6, 0x0, 0x6, 0x2, 0x7, 0x5], [0xf, 0xb0b, 0x6, 0x5, 0x6, 0xa5], [{0xf7, 0x4, 0xffffffff, 0x9}, {0x6, 0x3b5, 0x4, 0xffffffffffffffff}, {0xe8, 0x2e8, 0x6, 0x8000}, {0x100, 0xd, 0x6, 0x200}, {0x3, 0x73, 0x10, 0xfff}, {0x0, 0x0, 0x7, 0x2}, {0x5, 0x3, 0x7, 0x1}, {0x4, 0x2, 0x6, 0x1}], {0x7, 0x5, 0x800, 0xec7e}, {0x81, 0xfffffffc, 0x3}}})
setrlimit(0x8, &(0x7f0000000980)={0x42, 0x61})
r6 = syz_open_pts()
close(r6)
syz_open_pts()
read(r6, &(0x7f0000000240)=""/211, 0xd3)
ioctl$FIOASYNC(r6, 0x80047470, &(0x7f0000000000)=0x2)
ioctl$TIOCSETA(r6, 0x802c7414, &(0x7f0000000180)={0x81, 0x10001, 0x6375, 0x5, "a12724198fd32d3c27fd6ee6435740de617a60d7", 0x1, 0x10000})
msgsnd(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="02"], 0xe1, 0x0)
msgrcv(r0, &(0x7f0000001580)={0x0, ""/4102}, 0x100e, 0x0, 0x1000)

187.462415ms ago: executing program 5 (id=57):
r0 = socket$inet(0x2, 0x5, 0x4)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x2}, 0xc)
close(0xffffffffffffffff)
r1 = socket$inet(0x2, 0x2, 0x1)
syz_open_pts()
sysctl$net_inet6_ip6(&(0x7f0000000080)={0x4, 0x18, 0x29, 0x6}, 0x4, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_opts(r1, 0x0, 0x200000000000a, &(0x7f0000000000)='\x00', 0x1)
setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000240)="ea00000100000001", 0x8)
close(r0)

185.909733ms ago: executing program 4 (id=58):
r0 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
ioctl$WSKBDIO_GETENCODINGS(r0, 0xc0105715, 0x0)
pipe(&(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
pipe(&(0x7f0000000180)={<r3=>0xffffffffffffffff})
pwrite(0xffffffffffffffff, 0x0, 0x0, 0x40007)
r4 = fcntl$dupfd(r3, 0x3, 0xffffffffffffffff)
write(r4, &(0x7f0000000100), 0xfffffe5d)
openat$vmm(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0)
ioctl$TIOCEXCL(r4, 0x2000740d)
r5 = dup(r2)
r6 = fcntl$dupfd(r1, 0xa, r5)
write(r6, &(0x7f0000000100), 0xfffffe5d)

184.965557ms ago: executing program 8 (id=28):
r0 = socket$inet(0x2, 0x2, 0x0)
close(r0)
fchdir(r0)
r1 = msgget$private(0x0, 0xfffffffffffffffd)
msgrcv(r1, 0x0, 0x0, 0x0, 0x0)
msgsnd(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="03"], 0xe1, 0x0)

184.42181ms ago: executing program 9 (id=34):
r0 = msgget$private(0x0, 0x5eb)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmmsg(r1, &(0x7f0000000000)={&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)=""/8, 0x8}}, 0x10, 0x0, 0x0)
sysctl$kern(&(0x7f0000000000), 0x6, 0x0, 0x0, 0x0, 0x0)
execve(0x0, 0x0, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0xe8, 0x0)
ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, &(0x7f0000000100)={0x4, 0x0, {[0x0, 0x1, 0x8, 0xfffffffffffffff9, 0x0, 0x0, 0xdf5e, 0x0, 0x0, 0x2f01, 0x3, 0x0, 0xffffffffffffffff, 0x2, 0x800000, 0x0, 0x1, 0x100], [0x2, 0x0, 0xfffffffffffffffa, 0x1ffffffe, 0x0, 0x7b98, 0x0, 0x0, 0x800000000000000], [0x100000004, 0x2, 0x0, 0x10000, 0x81, 0x11000, 0x8], [0xff, 0x20000000000, 0x1, 0x100000001, 0xfffffffffffffffe], [{0x0, 0x9, 0x0, 0x7d06}, {0xfffc, 0x2, 0x1ff}, {0x0, 0x0, 0x80, 0x80}, {0x3, 0x5, 0x6, 0xfffffffffffffffe}, {0xcc8b, 0x2, 0x0, 0x48}, {0x0, 0x2003, 0x40000, 0x2000000000000000}, {}, {0x1, 0x963, 0x5, 0x8}], {0x0, 0x5, 0x1}, {0x0, 0x0, 0x0, 0x4}}})
recvmsg(r2, &(0x7f00000008c0)={&(0x7f00000003c0)=@un=@abs, 0x8, &(0x7f0000000800)=[{&(0x7f0000000400)=""/29, 0x1d}, {&(0x7f0000000440)=""/116, 0x74}, {&(0x7f00000004c0)}, {&(0x7f0000000540)=""/162, 0xa2}, {&(0x7f0000000600)=""/144, 0x90}, {&(0x7f00000025c0)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/240, 0xf0}, {&(0x7f00000007c0)=""/64, 0x40}], 0x8, &(0x7f0000000880)=""/44, 0x2c}, 0x0)
select(0x40, &(0x7f0000000080)={0x8, 0x8, 0x6, 0xd, 0x2, 0x1, 0x3ff, 0x9}, &(0x7f00000000c0)={0x8, 0x4, 0x8000, 0x8, 0x5, 0x100, 0x2, 0xb7}, &(0x7f0000000340)={0x4, 0x7, 0x5, 0xfffffffffffffff7, 0x1, 0x1, 0x4, 0x8000000000000000}, &(0x7f0000000380)={0x8, 0x101})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000900))
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000e80)={&(0x7f0000000bc0)=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000000d40)=[{&(0x7f0000000c00)="8658e801597b265d7f54b2a26737f2e956db43d88031c9be6d909473fe7d76b8932f0d4485c00ef084d7639615f31eed4c749198ee5870692ac0ec8d795e78b130c50d63a176367b0d5428290db646b6c3f32c06286d664a154b6c14a72e1b", 0x5f}, {&(0x7f0000000c80)="50bb9d4ecffe5d31f1c213bf6ec43e7bc80b57fc7f1eeaeb", 0x18}, {&(0x7f0000000cc0)="900f405885701bfaaf642716aac7dfa5363562b6c8d099fb6eb8ae9fc17959b8d8e00511d3ab0d446277c94b06c0e80cce2abfcf2a6228085802aa112cf6badebfef7627a1a5a8b6", 0x48}], 0x3, &(0x7f0000000e40)=[@cred={0x20}, @cred={0x20, 0xffff, 0x0, 0x0, 0xffffffffffffffff}], 0x40, 0x2}, 0x402)
socket(0x18, 0x400000002, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
getrusage(0x1, 0x0)
socket(0x2, 0x8002, 0x0)
r4 = kqueue()
kevent(r4, &(0x7f0000000d80)=[{{}, 0xfffffffffffffffb, 0x14, 0x8, 0x2, 0x7ff}, {{r3}, 0xffffffffffffffff, 0x80, 0x1, 0xfffffffffffffffe, 0xffffffffffffffff}, {{}, 0xfffffffffffffffb, 0xd0, 0x0, 0x4, 0xfff}, {{r2}, 0xfffffffffffffffe, 0x61, 0xc01a237e6bfff449, 0x2, 0x1}, {{r2}, 0xfffffffffffffffb, 0x42, 0x80, 0x800, 0xf}, {{r3}, 0xfffffffffffffff8, 0x20, 0x6691d423f7cec594, 0x8000, 0xf}], 0x3ff, 0x0, 0x6, 0x0)
r5 = open(&(0x7f0000000100)='.\x00', 0x400, 0x100)
mkdirat(r5, &(0x7f0000000540)='./file0\x00', 0x184)
renameat(r5, &(0x7f00000025c0)='./file0\x00', r5, &(0x7f0000002600)='./file1\x00')
ioctl$VMM_IOC_RESETCPU(r5, 0x82405605, &(0x7f0000000940)={0x3, 0x15e, {[0x8, 0x8000, 0x9, 0x9, 0x7, 0x800000, 0x3e6e, 0xbf3, 0x3, 0x2, 0x3, 0x5, 0x401, 0x0, 0x7, 0xe1db, 0x2, 0xcba4], [0x0, 0x23c, 0x200, 0x7fff, 0x9, 0x1, 0x10, 0x80000000, 0x80000000, 0x6], [0x6, 0x0, 0x6, 0x2, 0x7, 0x5], [0xf, 0xb0b, 0x6, 0x5, 0x6, 0xa5], [{0xf7, 0x4, 0xffffffff, 0x9}, {0x6, 0x3b5, 0x4, 0xffffffffffffffff}, {0xe8, 0x2e8, 0x6, 0x8000}, {0x100, 0xd, 0x6, 0x200}, {0x3, 0x73, 0x10, 0xfff}, {0x0, 0x0, 0x7, 0x2}, {0x5, 0x3, 0x7, 0x1}, {0x4, 0x2, 0x6, 0x1}], {0x7, 0x5, 0x800, 0xec7e}, {0x81, 0xfffffffc, 0x3}}})
setrlimit(0x8, &(0x7f0000000980)={0x42, 0x61})
r6 = syz_open_pts()
close(r6)
syz_open_pts()
read(r6, &(0x7f0000000240)=""/211, 0xd3)
ioctl$FIOASYNC(r6, 0x80047470, &(0x7f0000000000)=0x2)
ioctl$TIOCSETA(r6, 0x802c7414, &(0x7f0000000180)={0x81, 0x10001, 0x6375, 0x5, "a12724198fd32d3c27fd6ee6435740de617a60d7", 0x1, 0x10000})
msgsnd(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="02"], 0xe1, 0x0)
msgrcv(r0, &(0x7f0000001580)={0x0, ""/4102}, 0x100e, 0x0, 0x1000)

184.25109ms ago: executing program 5 (id=59):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="8900"], 0x9}, 0x0)
sendmsg(r0, &(0x7f0000000380)={0x0, 0x32c, 0x0, 0x0, &(0x7f0000000000), 0x90}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))
symlink(&(0x7f0000000500)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000580)='./file0\x00')
chown(&(0x7f0000000600)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0)
r1 = socket$inet(0x2, 0x2, 0x0)
close(r1)
setsockopt$inet_opts(r1, 0x0, 0x200000000000c, &(0x7f0000000000)="00000000f58bb805", 0x8)
recvfrom(r1, &(0x7f0000000080)=""/90, 0x5a, 0x1, 0x0, 0x0)
munmap(&(0x7f0000ff4000/0x1000)=nil, 0x1000)
mquery(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x0, 0xffffffffffffffff, 0xb07)
mmap(&(0x7f0000f97000/0x4000)=nil, 0x4000, 0x3, 0x1011, 0xffffffffffffffff, 0x0)
getpeername(r0, 0x0, &(0x7f0000000140))

182.487835ms ago: executing program 8 (id=28):
r0 = socket$inet(0x2, 0x2, 0x0)
close(r0)
fchdir(r0)
r1 = msgget$private(0x0, 0xfffffffffffffffd)
msgrcv(r1, 0x0, 0x0, 0x0, 0x0)
msgsnd(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="03"], 0xe1, 0x0)

182.130543ms ago: executing program 9 (id=34):
r0 = msgget$private(0x0, 0x5eb)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmmsg(r1, &(0x7f0000000000)={&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)=""/8, 0x8}}, 0x10, 0x0, 0x0)
sysctl$kern(&(0x7f0000000000), 0x6, 0x0, 0x0, 0x0, 0x0)
execve(0x0, 0x0, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0xe8, 0x0)
ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, &(0x7f0000000100)={0x4, 0x0, {[0x0, 0x1, 0x8, 0xfffffffffffffff9, 0x0, 0x0, 0xdf5e, 0x0, 0x0, 0x2f01, 0x3, 0x0, 0xffffffffffffffff, 0x2, 0x800000, 0x0, 0x1, 0x100], [0x2, 0x0, 0xfffffffffffffffa, 0x1ffffffe, 0x0, 0x7b98, 0x0, 0x0, 0x800000000000000], [0x100000004, 0x2, 0x0, 0x10000, 0x81, 0x11000, 0x8], [0xff, 0x20000000000, 0x1, 0x100000001, 0xfffffffffffffffe], [{0x0, 0x9, 0x0, 0x7d06}, {0xfffc, 0x2, 0x1ff}, {0x0, 0x0, 0x80, 0x80}, {0x3, 0x5, 0x6, 0xfffffffffffffffe}, {0xcc8b, 0x2, 0x0, 0x48}, {0x0, 0x2003, 0x40000, 0x2000000000000000}, {}, {0x1, 0x963, 0x5, 0x8}], {0x0, 0x5, 0x1}, {0x0, 0x0, 0x0, 0x4}}})
recvmsg(r2, &(0x7f00000008c0)={&(0x7f00000003c0)=@un=@abs, 0x8, &(0x7f0000000800)=[{&(0x7f0000000400)=""/29, 0x1d}, {&(0x7f0000000440)=""/116, 0x74}, {&(0x7f00000004c0)}, {&(0x7f0000000540)=""/162, 0xa2}, {&(0x7f0000000600)=""/144, 0x90}, {&(0x7f00000025c0)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/240, 0xf0}, {&(0x7f00000007c0)=""/64, 0x40}], 0x8, &(0x7f0000000880)=""/44, 0x2c}, 0x0)
select(0x40, &(0x7f0000000080)={0x8, 0x8, 0x6, 0xd, 0x2, 0x1, 0x3ff, 0x9}, &(0x7f00000000c0)={0x8, 0x4, 0x8000, 0x8, 0x5, 0x100, 0x2, 0xb7}, &(0x7f0000000340)={0x4, 0x7, 0x5, 0xfffffffffffffff7, 0x1, 0x1, 0x4, 0x8000000000000000}, &(0x7f0000000380)={0x8, 0x101})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000900))
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000e80)={&(0x7f0000000bc0)=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000000d40)=[{&(0x7f0000000c00)="8658e801597b265d7f54b2a26737f2e956db43d88031c9be6d909473fe7d76b8932f0d4485c00ef084d7639615f31eed4c749198ee5870692ac0ec8d795e78b130c50d63a176367b0d5428290db646b6c3f32c06286d664a154b6c14a72e1b", 0x5f}, {&(0x7f0000000c80)="50bb9d4ecffe5d31f1c213bf6ec43e7bc80b57fc7f1eeaeb", 0x18}, {&(0x7f0000000cc0)="900f405885701bfaaf642716aac7dfa5363562b6c8d099fb6eb8ae9fc17959b8d8e00511d3ab0d446277c94b06c0e80cce2abfcf2a6228085802aa112cf6badebfef7627a1a5a8b6", 0x48}], 0x3, &(0x7f0000000e40)=[@cred={0x20}, @cred={0x20, 0xffff, 0x0, 0x0, 0xffffffffffffffff}], 0x40, 0x2}, 0x402)
socket(0x18, 0x400000002, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
getrusage(0x1, 0x0)
socket(0x2, 0x8002, 0x0)
r4 = kqueue()
kevent(r4, &(0x7f0000000d80)=[{{}, 0xfffffffffffffffb, 0x14, 0x8, 0x2, 0x7ff}, {{r3}, 0xffffffffffffffff, 0x80, 0x1, 0xfffffffffffffffe, 0xffffffffffffffff}, {{}, 0xfffffffffffffffb, 0xd0, 0x0, 0x4, 0xfff}, {{r2}, 0xfffffffffffffffe, 0x61, 0xc01a237e6bfff449, 0x2, 0x1}, {{r2}, 0xfffffffffffffffb, 0x42, 0x80, 0x800, 0xf}, {{r3}, 0xfffffffffffffff8, 0x20, 0x6691d423f7cec594, 0x8000, 0xf}], 0x3ff, 0x0, 0x6, 0x0)
r5 = open(&(0x7f0000000100)='.\x00', 0x400, 0x100)
mkdirat(r5, &(0x7f0000000540)='./file0\x00', 0x184)
renameat(r5, &(0x7f00000025c0)='./file0\x00', r5, &(0x7f0000002600)='./file1\x00')
ioctl$VMM_IOC_RESETCPU(r5, 0x82405605, &(0x7f0000000940)={0x3, 0x15e, {[0x8, 0x8000, 0x9, 0x9, 0x7, 0x800000, 0x3e6e, 0xbf3, 0x3, 0x2, 0x3, 0x5, 0x401, 0x0, 0x7, 0xe1db, 0x2, 0xcba4], [0x0, 0x23c, 0x200, 0x7fff, 0x9, 0x1, 0x10, 0x80000000, 0x80000000, 0x6], [0x6, 0x0, 0x6, 0x2, 0x7, 0x5], [0xf, 0xb0b, 0x6, 0x5, 0x6, 0xa5], [{0xf7, 0x4, 0xffffffff, 0x9}, {0x6, 0x3b5, 0x4, 0xffffffffffffffff}, {0xe8, 0x2e8, 0x6, 0x8000}, {0x100, 0xd, 0x6, 0x200}, {0x3, 0x73, 0x10, 0xfff}, {0x0, 0x0, 0x7, 0x2}, {0x5, 0x3, 0x7, 0x1}, {0x4, 0x2, 0x6, 0x1}], {0x7, 0x5, 0x800, 0xec7e}, {0x81, 0xfffffffc, 0x3}}})
setrlimit(0x8, &(0x7f0000000980)={0x42, 0x61})
r6 = syz_open_pts()
close(r6)
syz_open_pts()
read(r6, &(0x7f0000000240)=""/211, 0xd3)
ioctl$FIOASYNC(r6, 0x80047470, &(0x7f0000000000)=0x2)
ioctl$TIOCSETA(r6, 0x802c7414, &(0x7f0000000180)={0x81, 0x10001, 0x6375, 0x5, "a12724198fd32d3c27fd6ee6435740de617a60d7", 0x1, 0x10000})
msgsnd(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="02"], 0xe1, 0x0)
msgrcv(r0, &(0x7f0000001580)={0x0, ""/4102}, 0x100e, 0x0, 0x1000)

9.135204ms ago: executing program 5 (id=61):
r0 = socket$inet(0x2, 0x1, 0x0)
setsockopt(r0, 0x0, 0x16, &(0x7f0000000080)="5801a932", 0x4)
r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0xf02, 0x0)
sysctl$net_inet_divert(&(0x7f0000000040)={0x4, 0x1e, 0x2, 0x1}, 0x4, &(0x7f0000000140), 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x2012, r1, 0x0)
setgid(0x0)
openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x20000, 0x120)
mprotect(&(0x7f00003e0000/0x2000)=nil, 0x2000, 0x5)
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x2000000000000243, &(0x7f0000000100)})
r2 = socket(0x21, 0x4, 0x0)
ioctl$FIONREAD(r2, 0xc0106924, &(0x7f00000001c0))
r3 = kqueue()
kevent(r3, &(0x7f00000000c0), 0x101, &(0x7f0000000180), 0x6, 0x0)
syz_emit_ethernet(0xffffffffffffff6c, 0x0)
r4 = socket(0x2, 0x1, 0x0)
ioctl$FIONREAD(r4, 0x80606942, &(0x7f00000001c0))
pipe2(&(0x7f0000000200)={0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x4)
poll(&(0x7f0000000100)=[{r5, 0x40}], 0x1, 0x9)
ioctl$FIOASYNC(r5, 0x8004667d, &(0x7f00000000c0)=0xd8)
acct(&(0x7f0000000140)='./file0\x00')
read(r5, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)

6.483935ms ago: executing program 3 (id=62):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
socket(0x11, 0x3, 0x0)
socket(0x2, 0x2, 0x0)
select(0xfc17, &(0x7f0000000100), &(0x7f00000024c0)={0x1fe, 0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0)
r0 = syz_open_pts()
ioctl$TIOCGWINSZ(r0, 0x40087468, &(0x7f0000000040)) (async)
ioctl$TIOCGWINSZ(r0, 0x40087468, &(0x7f0000000040))

5.411288ms ago: executing program 8 (id=28):
r0 = socket$inet(0x2, 0x2, 0x0)
close(r0)
fchdir(r0)
r1 = msgget$private(0x0, 0xfffffffffffffffd)
msgrcv(r1, 0x0, 0x0, 0x0, 0x0)
msgsnd(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="03"], 0xe1, 0x0)

5.08699ms ago: executing program 9 (id=34):
r0 = msgget$private(0x0, 0x5eb)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmmsg(r1, &(0x7f0000000000)={&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)=""/8, 0x8}}, 0x10, 0x0, 0x0)
sysctl$kern(&(0x7f0000000000), 0x6, 0x0, 0x0, 0x0, 0x0)
execve(0x0, 0x0, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0xe8, 0x0)
ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, &(0x7f0000000100)={0x4, 0x0, {[0x0, 0x1, 0x8, 0xfffffffffffffff9, 0x0, 0x0, 0xdf5e, 0x0, 0x0, 0x2f01, 0x3, 0x0, 0xffffffffffffffff, 0x2, 0x800000, 0x0, 0x1, 0x100], [0x2, 0x0, 0xfffffffffffffffa, 0x1ffffffe, 0x0, 0x7b98, 0x0, 0x0, 0x800000000000000], [0x100000004, 0x2, 0x0, 0x10000, 0x81, 0x11000, 0x8], [0xff, 0x20000000000, 0x1, 0x100000001, 0xfffffffffffffffe], [{0x0, 0x9, 0x0, 0x7d06}, {0xfffc, 0x2, 0x1ff}, {0x0, 0x0, 0x80, 0x80}, {0x3, 0x5, 0x6, 0xfffffffffffffffe}, {0xcc8b, 0x2, 0x0, 0x48}, {0x0, 0x2003, 0x40000, 0x2000000000000000}, {}, {0x1, 0x963, 0x5, 0x8}], {0x0, 0x5, 0x1}, {0x0, 0x0, 0x0, 0x4}}})
recvmsg(r2, &(0x7f00000008c0)={&(0x7f00000003c0)=@un=@abs, 0x8, &(0x7f0000000800)=[{&(0x7f0000000400)=""/29, 0x1d}, {&(0x7f0000000440)=""/116, 0x74}, {&(0x7f00000004c0)}, {&(0x7f0000000540)=""/162, 0xa2}, {&(0x7f0000000600)=""/144, 0x90}, {&(0x7f00000025c0)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/240, 0xf0}, {&(0x7f00000007c0)=""/64, 0x40}], 0x8, &(0x7f0000000880)=""/44, 0x2c}, 0x0)
select(0x40, &(0x7f0000000080)={0x8, 0x8, 0x6, 0xd, 0x2, 0x1, 0x3ff, 0x9}, &(0x7f00000000c0)={0x8, 0x4, 0x8000, 0x8, 0x5, 0x100, 0x2, 0xb7}, &(0x7f0000000340)={0x4, 0x7, 0x5, 0xfffffffffffffff7, 0x1, 0x1, 0x4, 0x8000000000000000}, &(0x7f0000000380)={0x8, 0x101})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000900))
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000e80)={&(0x7f0000000bc0)=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000000d40)=[{&(0x7f0000000c00)="8658e801597b265d7f54b2a26737f2e956db43d88031c9be6d909473fe7d76b8932f0d4485c00ef084d7639615f31eed4c749198ee5870692ac0ec8d795e78b130c50d63a176367b0d5428290db646b6c3f32c06286d664a154b6c14a72e1b", 0x5f}, {&(0x7f0000000c80)="50bb9d4ecffe5d31f1c213bf6ec43e7bc80b57fc7f1eeaeb", 0x18}, {&(0x7f0000000cc0)="900f405885701bfaaf642716aac7dfa5363562b6c8d099fb6eb8ae9fc17959b8d8e00511d3ab0d446277c94b06c0e80cce2abfcf2a6228085802aa112cf6badebfef7627a1a5a8b6", 0x48}], 0x3, &(0x7f0000000e40)=[@cred={0x20}, @cred={0x20, 0xffff, 0x0, 0x0, 0xffffffffffffffff}], 0x40, 0x2}, 0x402)
socket(0x18, 0x400000002, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
getrusage(0x1, 0x0)
socket(0x2, 0x8002, 0x0)
r4 = kqueue()
kevent(r4, &(0x7f0000000d80)=[{{}, 0xfffffffffffffffb, 0x14, 0x8, 0x2, 0x7ff}, {{r3}, 0xffffffffffffffff, 0x80, 0x1, 0xfffffffffffffffe, 0xffffffffffffffff}, {{}, 0xfffffffffffffffb, 0xd0, 0x0, 0x4, 0xfff}, {{r2}, 0xfffffffffffffffe, 0x61, 0xc01a237e6bfff449, 0x2, 0x1}, {{r2}, 0xfffffffffffffffb, 0x42, 0x80, 0x800, 0xf}, {{r3}, 0xfffffffffffffff8, 0x20, 0x6691d423f7cec594, 0x8000, 0xf}], 0x3ff, 0x0, 0x6, 0x0)
r5 = open(&(0x7f0000000100)='.\x00', 0x400, 0x100)
mkdirat(r5, &(0x7f0000000540)='./file0\x00', 0x184)
renameat(r5, &(0x7f00000025c0)='./file0\x00', r5, &(0x7f0000002600)='./file1\x00')
ioctl$VMM_IOC_RESETCPU(r5, 0x82405605, &(0x7f0000000940)={0x3, 0x15e, {[0x8, 0x8000, 0x9, 0x9, 0x7, 0x800000, 0x3e6e, 0xbf3, 0x3, 0x2, 0x3, 0x5, 0x401, 0x0, 0x7, 0xe1db, 0x2, 0xcba4], [0x0, 0x23c, 0x200, 0x7fff, 0x9, 0x1, 0x10, 0x80000000, 0x80000000, 0x6], [0x6, 0x0, 0x6, 0x2, 0x7, 0x5], [0xf, 0xb0b, 0x6, 0x5, 0x6, 0xa5], [{0xf7, 0x4, 0xffffffff, 0x9}, {0x6, 0x3b5, 0x4, 0xffffffffffffffff}, {0xe8, 0x2e8, 0x6, 0x8000}, {0x100, 0xd, 0x6, 0x200}, {0x3, 0x73, 0x10, 0xfff}, {0x0, 0x0, 0x7, 0x2}, {0x5, 0x3, 0x7, 0x1}, {0x4, 0x2, 0x6, 0x1}], {0x7, 0x5, 0x800, 0xec7e}, {0x81, 0xfffffffc, 0x3}}})
setrlimit(0x8, &(0x7f0000000980)={0x42, 0x61})
r6 = syz_open_pts()
close(r6)
syz_open_pts()
read(r6, &(0x7f0000000240)=""/211, 0xd3)
ioctl$FIOASYNC(r6, 0x80047470, &(0x7f0000000000)=0x2)
ioctl$TIOCSETA(r6, 0x802c7414, &(0x7f0000000180)={0x81, 0x10001, 0x6375, 0x5, "a12724198fd32d3c27fd6ee6435740de617a60d7", 0x1, 0x10000})
msgsnd(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="02"], 0xe1, 0x0)
msgrcv(r0, &(0x7f0000001580)={0x0, ""/4102}, 0x100e, 0x0, 0x1000)

4.748351ms ago: executing program 5 (id=63):
r0 = msgget$private(0x0, 0x5bd) (async)
ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f0000000080)={0x0, 0x400000, 0x0, 0x6, "28b77c09b87aa57800080017d0d2000010001c00", 0xffdffffc, 0x3})
setrlimit(0x8, &(0x7f0000000580)={0xa, 0x56}) (async)
r1 = syz_open_pts()
close(r1) (async)
r2 = syz_open_pts()
read(r2, &(0x7f00000005c0)=""/4096, 0x1000) (async)
ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f0000000380)={0x58d, 0x7bed, 0xffffdf82, 0xffffff8d, "1826281f0200c2a6d20351c623000400", 0x1, 0x1ffff}) (async)
syz_open_pts() (async)
writev(r1, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) (async)
r3 = msgget(0x1, 0x4a0)
msgrcv(r3, &(0x7f0000000240)={0x0, ""/67}, 0x4b, 0x0, 0x2000) (async)
msgsnd(r0, &(0x7f0000000500)=ANY=[@ANYRESDEC], 0x401, 0x0) (async)
msgrcv(r0, 0x0, 0x0, 0x3, 0x0) (async)
msgsnd(r0, 0x0, 0x401, 0x0) (async)
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) (async)
r4 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) (async)
ktrace(&(0x7f0000000100)='./file0\x00', 0x0, 0x800, 0xffffffffffffffff)
shmctl$IPC_SET(r4, 0x1, &(0x7f0000000000)={{0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}}) (async)
shmat(r4, &(0x7f0000001000/0x3000)=nil, 0x0)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0) (async)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) (async)
r5 = open(&(0x7f0000000000)='./file0\x00', 0x9cab835cfdc52675, 0x0)
ftruncate(r5, 0x79c8) (async)
writev(0xffffffffffffffff, &(0x7f0000001480)=[{0x0}], 0x1) (async)
setrlimit(0x1, &(0x7f0000000ec0)={0x0, 0x6}) (async)
msync(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2)
msgrcv(r0, &(0x7f0000000140)={0x0, ""/226}, 0xea, 0x0, 0x800) (async)
ioctl$FIOASYNC(r1, 0x8004667d, &(0x7f00000000c0)=0x800)
msgctl$IPC_RMID(r0, 0x0)

2.345363ms ago: executing program 3 (id=64):
fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff})
r0 = socket(0x10, 0x1, 0x6)
connect$unix(r0, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c)
openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0)
mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0x881)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmmsg(r1, &(0x7f0000000300)={0x0, 0x1}, 0x10, 0x0, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000080)="76e5eac907f9ccf7a251ceddcec7d6aa45cffe2c63a56077123a276d3ba4e9d17eb3eb5db12a3783a8e0620d357de1fe04fa9465b5bd1286e9624dec06a00c222f", 0x41}], 0x1)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
unveil(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000300)='W\x00')
openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0)
getsockname$inet(r0, &(0x7f00000000c0), &(0x7f0000000000)=0xffffffffffffff35)
r2 = socket(0x18, 0x2, 0x0)
connect$unix(r2, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0xa)
setsockopt(r2, 0x1000000029, 0x3e, &(0x7f0000000040)="6700d6e5", 0x4)
writev(r2, &(0x7f00000004c0)=[{0x0}], 0x1)

0s ago: executing program 8 (id=28):
r0 = socket$inet(0x2, 0x2, 0x0)
close(r0)
fchdir(r0)
r1 = msgget$private(0x0, 0xfffffffffffffffd)
msgrcv(r1, 0x0, 0x0, 0x0, 0x0)
msgsnd(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="03"], 0xe1, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.13' (ED25519) to the list of known hosts.
uvn_flush: obj=0xfffffd806ec3a3c0, offset=0x0.  error during pageout.
uvn_flush: WARNING: changes to page may be lost!
panic: kernel diagnostic assertion "va >= entry->start" failed: file "/syzkaller/managers/setuid/kernel/sys/uvm/uvm_fault.c", line 1741
Stopped at      db_enter+0x25:  addq    $0x8,%rsp
    TID    PID    UID     PRFLAGS     PFLAGS  CPU  COMMAND
*456515  35540  32767        0x10  0x4000000    1  syz-executor
 516407  69038  32767        0x10          0    0  syz-executor
db_enter() at db_enter+0x25
panic(ffffffff83438c99) at panic+0x1e5
__assert(ffffffff833ea060,ffffffff83425cda,6cd,ffffffff83338326) at __assert+0x29
uvm_fault_unwire_locked(fffffd806c122740,400000000000,400000010000) at uvm_fault_unwire_locked+0x4b4
uvm_fault_wire(fffffd806c122740,400000000000,400000011000,3) at uvm_fault_wire+0x12d
sysctl_vslock(4000000001c0,ffb5) at sysctl_vslock+0x109
kern_sysctl_dirs(4e,ffff80003b4c9728,1,4000000001c0,ffff80003b4c9758,0,4bc9c7a46c0be5c0,1) at kern_sysctl_dirs+0x266
kern_sysctl(ffff80003b4c9724,2,4000000001c0,ffff80003b4c9758,0,37,c3f3c3e583c26111) at kern_sysctl+0x12d
sys_sysctl(ffff80003c511218,ffff80003b4c9890,ffff80003b4c97e0) at sys_sysctl+0x425
syscall(ffff80003b4c9890) at syscall+0xbc6
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x7ebfa6a92a0, count: 4
https://www.openbsd.org/ddb.html describes the minimum info required in bug
reports.  Insufficient info makes it difficult to find and fix bugs.
ddb{1}> 
ddb{1}> set $lines = 0
ddb{1}> set $maxwidth = 0
ddb{1}> show panic
*cpu1: kernel diagnostic assertion "va >= entry->start" failed: file "/syzkaller/managers/setuid/kernel/sys/uvm/uvm_fault.c", line 1741
ddb{1}> trace
db_enter() at db_enter+0x25
panic(ffffffff83438c99) at panic+0x1e5
__assert(ffffffff833ea060,ffffffff83425cda,6cd,ffffffff83338326) at __assert+0x29
uvm_fault_unwire_locked(fffffd806c122740,400000000000,400000010000) at uvm_fault_unwire_locked+0x4b4
uvm_fault_wire(fffffd806c122740,400000000000,400000011000,3) at uvm_fault_wire+0x12d
sysctl_vslock(4000000001c0,ffb5) at sysctl_vslock+0x109
kern_sysctl_dirs(4e,ffff80003b4c9728,1,4000000001c0,ffff80003b4c9758,0,4bc9c7a46c0be5c0,1) at kern_sysctl_dirs+0x266
kern_sysctl(ffff80003b4c9724,2,4000000001c0,ffff80003b4c9758,0,37,c3f3c3e583c26111) at kern_sysctl+0x12d
sys_sysctl(ffff80003c511218,ffff80003b4c9890,ffff80003b4c97e0) at sys_sysctl+0x425
syscall(ffff80003b4c9890) at syscall+0xbc6
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x7ebfa6a92a0, count: -11
ddb{1}> show registers
rdi                                0
rsi                              0x1
rbp               0xffff80003b4c9290
rbx               0xffff800029a9cdc7
rdx                                0
rcx               0xffff80003c511218
rax               0xffff800029a9bff0
r8                 0x101010101010101
r9                0x8080808080808080
r10               0xa871965d7272f56e
r11               0x4897c17240e0ef7d
r12               0xffff800029a9cbc8
r13                                0
r14                                0
r15                              0x1
rip               0xffffffff816918b5    db_enter+0x25
cs                               0x8
rflags                         0x246
rsp               0xffff80003b4c9280
ss                              0x10
db_enter+0x25:  addq    $0x8,%rsp
ddb{1}> show proc
PROC (syz-executor) tid=456515 pid=35540 tcnt=4 stat=onproc
    flags process=10<SUGID> proc=4000000<THREAD>
    runpri=32, usrpri=51, slppri=32, nice=20
    wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0
    forw=0xffffffffffffffff, list=0xffff80003c510f88,0xffff80003c5114b8
    process=0xffff80002a48ae08 user=0xffff80003b4c4000, vmspace=0xfffffd806c122740
    estcpu=1, cpticks=1, pctcpu=0.0, user=0, sys=1, intr=0
ddb{1}> ps
   PID     TID   PPID    UID  S       FLAGS  WAIT          COMMAND
 35540  411182  61339  32767  3        0x10  vmmaplk       syz-executor
*35540  456515  61339  32767  7   0x4000010                syz-executor
 35540  448825  61339  32767  2   0x4000010                syz-executor
 35540  209778  61339  32767  3   0x4000010  vmmaplk       syz-executor
 61170  427010  25445      0  2         0x2                syz-executor
 69038  516407  70524  32767  7        0x10                syz-executor
 69038  472393  70524  32767  3   0x4000090  fsleep        syz-executor
 69038  253008  70524  32767  3   0x4000090  fsleep        syz-executor
 37899  406074  55485  32767  3      0x3010  suspend       syz-executor
 37899  107554  55485  32767  2   0x4081010                syz-executor
 55485  515230  39850  32767  2       0x490                syz-executor
 39850  258764  25445      0  3        0x82  wait          syz-executor
 62381  306966  86397      0  3        0x82  sbwait        sshd-session
  6223  503200      0      0  3     0x14200  bored         sosplice
 91830   70467  70714      0  3    0x100082  sbwait        arp
 70714    3732  16723      0  3    0x10008a  sigsusp       sh
 16723    4027  38515      0  3        0x80  wait          syz-executor
 20859  216795  25382  32767  3        0x90  piperd        syz-executor
 61339  115320  50104  32767  3        0x90  nanoslp       syz-executor
 70524  114889  73681  32767  3        0x90  nanoslp       syz-executor
 67344  314101  11083  32767  3        0x90  piperd        syz-executor
 38515  100430  25445      0  3        0x82  wait          syz-executor
 11083   99660  25445      0  3        0x82  wait          syz-executor
 25382  150042  25445      0  3        0x82  wait          syz-executor
 73681  433440  25445      0  3        0x82  wait          syz-executor
 50104  428853  25445      0  3        0x82  wait          syz-executor
 25445  294607   1389      0  3        0x82  nanoslp       syz-executor
  1389  471389  27148      0  3    0x10008a  sigsusp       ksh
 27148   50805  36886      0  3        0x98  kqread        sshd-session
 36886    4511  86397      0  3        0x92  kqread        sshd-session
 18101  418736      1      0  3    0x100083  ttyin         getty
 86397  128847      1      0  3        0x88  kqread        sshd
  8661  246989  15649     73  3   0x1100090  kqread        syslogd
 15649  125852      1      0  3    0x100082  sbwait        syslogd
 44634  246731      1      0  3    0x100080  kqread        resolvd
 23756   80807  32767     77  3    0x100092  kqread        dhcpleased
 28028  307047  32767     77  3    0x100092  kqread        dhcpleased
 32767  198381      1      0  3        0x80  kqread        dhcpleased
 39673  290168      0      0  3     0x14200  bored         smr
 63357  127405      0      0  2     0x14200                zerothread
 48422  485883      0      0  3     0x14200  aiodoned      aiodoned
 85918  337493      0      0  3     0x14200  syncer        update
 47623   62279      0      0  3     0x14200  cleaner       cleaner
 53342  298672      0      0  3     0x14200  reaper        reaper
 49239  212706      0      0  3     0x14200  pgdaemon      pagedaemon
 88832  465858      0      0  3     0x14200  bored         viomb
 99008  318867      0      0  3  0x40014200  acpi0         acpi0
 17921   39952      0      0  3  0x40014200                idle1
 33560  191052      0      0  3     0x14200  bored         softnet3
 23011  432422      0      0  3     0x14200  bored         softnet2
 57241   99548      0      0  3     0x14200  bored         softnet1
 71575  236922      0      0  3     0x14200  bored         softnet0
 76418  211688      0      0  3     0x14200  bored         systqmp
  2179   99456      0      0  3     0x14200  bored         systq
 61351  498540      0      0  3     0x14200  tmoslp        softclockmp
 32309  299467      0      0  3  0x40014200  tmoslp        softclock
 87201  322483      0      0  3  0x40014200                idle0
     1   83631      0      0  3        0x82  wait          init
     0       0     -1      0  3     0x10200  scheduler     swapper
ddb{1}> show all locks
Process 35540 (syz-executor) thread 0xffff80003c511218 (456515)
exclusive rwlock amaplk r = 0 (0xfffffd806029e468)
#0  witness_lock+0x5bb
#1  rw_do_enter_write+0x3ea
#2  uvm_map_lock_entry+0x51
#3  uvm_fault_unwire_locked+0x253
#4  uvm_fault_wire+0x12d
#5  sysctl_vslock+0x109
#6  kern_sysctl_dirs+0x266
#7  kern_sysctl+0x12d
#8  sys_sysctl+0x425
#9  syscall+0xbc6
#10 Xsyscall+0x128
shared rwlock vmmaplk r = 0 (0xfffffd806c122840)
#0  witness_lock+0x5bb
#1  rw_do_enter_read+0x3af
#2  uvm_fault_wire+0x116
#3  sysctl_vslock+0x109
#4  kern_sysctl_dirs+0x266
#5  kern_sysctl+0x12d
#6  sys_sysctl+0x425
#7  syscall+0xbc6
#8  Xsyscall+0x128
exclusive kernel_lock &kernel_lock r = 0 (0xffffffff838df1a0)
#0  witness_lock+0x5bb
#1  __mp_acquire_count+0x58
#2  mi_switch+0x4b7
#3  sleep_finish+0x24f
#4  rw_do_enter_write+0x1de
#5  vm_map_lock_ln+0x12e
#6  uvmfault_lookup+0xe8
#7  uvm_fault_check+0x987
#8  uvm_fault+0x106
#9  uvm_fault_wire+0x73
#10 sysctl_vslock+0x109
#11 kern_sysctl_dirs+0x266
#12 kern_sysctl+0x12d
#13 sys_sysctl+0x425
#14 syscall+0xbc6
#15 Xsyscall+0x128
exclusive rwlock sysctllk r = 0 (0xffffffff837a1058)
#0  witness_lock+0x5bb
#1  rw_do_enter_write+0x3ea
#2  sysctl_vslock+0x45
#3  kern_sysctl_dirs+0x266
#4  kern_sysctl+0x12d
#5  sys_sysctl+0x425
#6  syscall+0xbc6
#7  Xsyscall+0x128
ddb{1}> show malloc
           Type InUse  MemUse  HighUse   Limit  Requests Type Lim
         devbuf 10180  10949K   10966K 166960K     11268        0
            pcb    17     12K      12K 166960K        17        0
         rtable   174      4K       6K 166960K       363        0
             pf    27     16K      16K 166960K        33        0
         ifaddr    32      5K       7K 166960K        46        0
        ifgroup    42      1K       2K 166960K        54        0
         sysctl     1      1K       1K 166960K         1        0
       counters    60     35K      36K 166960K        66        0
       ioctlops     0      0K       2K 166960K        31        0
            iov     0      0K      12K 166960K         2        0
          mount     1      1K       1K 166960K         1        0
            log     0      0K       0K 166960K         4        0
         vnodes  1332     84K      84K 166960K      1573        0
      UFS quota     1     32K      32K 166960K         1        0
      UFS mount     5     36K      36K 166960K         5        0
            shm     3      5K       5K 166960K         3        0
         VM map     2      1K       1K 166960K         2        0
            sem     5      0K       0K 166960K         6        0
        dirhash    12      2K       2K 166960K        12        0
           ACPI  1692    195K     286K 166960K     12470        0
      file desc    20     73K     129K 166960K       301        0
          sigio     0      0K       0K 166960K         2        0
           proc    61     91K     115K 166960K       505        0
        subproc    58      3K       4K 166960K       292        0
    NFS srvsock     1      0K       0K 166960K         1        0
     NFS daemon     1     16K      16K 166960K         1        0
    ip_moptions     0      0K       0K 166960K        10        0
       in_multi    67      5K       6K 166960K       109        0
    ether_multi     1      0K       0K 166960K         2        0
    ISOFS mount     1     32K      32K 166960K         1        0
  MSDOSFS mount     1     16K      16K 166960K         1        0
           ttys    61    281K     281K 166960K        61        0
           exec     0      0K       1K 166960K       386        0
   fusefs mount     1     32K      32K 166960K         1        0
            tdb     3      0K       0K 166960K         3        0
        VM swap     8     62K      64K 166960K        10        0
       UVM amap   216     57K      74K 166960K      3458        0
       UVM aobj     8      3K       3K 166960K         8        0
     pinsyscall    44     88K     114K 166960K      1345        0
        memdesc     1      4K       4K 166960K         1        0
    crypto data     1      1K       1K 166960K         1        0
    ip6_options     0      0K       0K 166960K         6        0
            NDP     9      0K       1K 166960K        28        0
           temp    68   8687K    8752K 166960K      4551        0
         kqueue    13     20K      26K 166960K        30        0
      SYN cache     2     16K      16K 166960K         2        0
ddb{1}> show all pools
Name      Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle
plcache    128       24    0        0     1     0     1     1     0     8    0
rtpcb      120       42    0       38     1     0     1     1     0     8    0
rtentry    112      115    0       35     3     0     3     3     0     8    0
unpcb      144      153    0      136     4     0     4     4     0     8    2
syncache   336        4    0        4     1     0     1     1     0     8    1
tcpcb      808       29    0       23     1     0     1     1     0     8    0
arp        120       19    0        6     1     0     1     1     0     8    0
ipq         40        1    0        1     1     0     1     1     0     8    1
ipqe        40       44    0       44     1     0     1     1     0     8    1
inpcb      376      174    0      164     8     0     8     8     0     8    7
nd6        136       25    0       10     1     0     1     1     0     8    0
kcovpl      48       32    0       26     1     0     1     1     0     8    0
art_heap8  4096       1    0        0     1     0     1     1     0     8    0
art_heap4  256      456    0      134    26     0    26    26     0     8    5
art_table   32      457    0      134     4     0     4     4     0     8    0
art_node    16      114    0       41     1     0     1     1     0     8    0
sysvmsgpl   40        3    0        0     1     0     1     1     0     8    0
semupl     112        1    0        1     1     0     1     1     0     8    1
semapl     112        4    0        1     1     0     1     1     0     8    0
shmpl      112        5    0        0     1     0     1     1     0     8    0
dirhash    1024      17    0        0     3     0     3     3     0     8    0
dino2pl    256     1654    0      122    96     0    96    96     0     8    0
ffsino     280     1654    0      122   110     0   110   110     0     8    0
nchpl      144     1916    0      213    64     0    64    64     0     8    0
uvmvnodes   80     1955    0        0    40     0    40    40     0     8    0
vnodes     216     1955    0        0   109     0   109   109     0     8    0
namei      1024    6004    0     6004     2     0     2     2     0     8    2
percpumem   16       47    0        3     1     0     1     1     0     8    0
kstatmem   264       24    0        6     2     0     2     2     0     8    0
scxspl     216     6118    0     6118     3     2     1     2     1     8    1
plimitpl   152       96    0       74     2     0     2     2     0     8    1
sigapl     424      532    0      480     8     0     8     8     0     8    0
futexpl     64      808    0      806     1     0     1     1     0     8    0
knotepl    120       73    0        0     3     0     3     3     0     8    0
kqueuepl   216       34    0       25     1     0     1     1     0     8    0
pipepl     328      184    0      156     3     0     3     3     0     8    0
fdescpl    504      513    0      480     7     1     6     6     0     8    0
filepl     152     2153    0     1954    14     0    14    14     0     8    5
lockfpl    104       19    0       16     1     0     1     1     0     8    0
lockfspl    48       11    0        8     1     0     1     1     0     8    0
sessionpl  144       46    0       31     1     0     1     1     0     8    0
pgrppl      48       79    0       57     1     0     1     1     0     8    0
ucredpl    104      153    0      137     1     0     1     1     0     8    0
zombiepl   144      481    0      480     1     0     1     1     0     8    0
processpl  1176     532    0      480     5     0     5     5     0     8    0
procpl     656      639    0      581     6     0     6     6     0     8    0
sockpl     688      371    0      340    16     5    11    16     0     8    8
mcl64k     65536      3    0        0     1     0     1     1     0     8    0
mcl8k      8192       3    0        0     1     0     1     1     0     8    0
mcl4k      4096     114    0        0    15     0    15    15     0     8    0
mcl2k      2048      25    0        0     4     0     4     4     0     8    0
mtagpl      96        2    0        0     1     0     1     1     0     8    0
mbufpl     256      274    0        0    18     0    18    18     0     8    0
bufpl      280     2324    0      124   158     0   158   158     0     8    0
anonpl      24   103453    0   100232    33     0    33    33     0   184   11
amapchunkpl 152   10692    0    10234    27     0    27    27     0   158    6
amappl16   200     1854    0     1838     5     2     3     5     0     8    1
amappl15   192        6    0        6     1     1     0     1     0     8    0
amappl14   184      108    0       96     1     0     1     1     0     8    0
amappl13   176        6    0        6     1     1     0     1     0     8    0
amappl12   168     1136    0     1103     2     0     2     2     0     8    0
amappl11   160       42    0       32     1     0     1     1     0     8    0
amappl10   152        8    0        8     2     2     0     1     0     8    0
amappl9    144      243    0      243     1     1     0     1     0     8    0
amappl8    136       20    0       19     1     0     1     1     0     8    0
amappl7    128       93    0       81     1     0     1     1     0     8    0
amappl6    120      182    0      177     1     0     1     1     0     8    0
amappl5    112      119    0      113     1     0     1     1     0     8    0
amappl4    104      282    0      267     1     0     1     1     0     8    0
amappl3     96     1727    0     1620     4     0     4     4     0     8    0
amappl2     88      633    0      569     2     0     2     2     0     8    0
amappl1     80     8142    0     7509    14     0    14    14     0     8    0
amappl      88     3083    0     2923     5     0     5     5     0    92    0
dma4096    4096       1    0        1     1     1     0     1     0     8    0
dma1024    1024       1    0        0     1     0     1     1     0     8    0
dma256     256        6    0        6     1     1     0     1     0     8    0
dma128     128      253    0      253     1     1     0     1     0     8    0
dma64       64        6    0        6     1     1     0     1     0     8    0
dma32       32        7    0        7     1     1     0     1     0     8    0
dma16       16       18    0       17     1     0     1     1     0     8    0
aobjpl      72        7    0        0     1     0     1     1     0     8    0
uaddrrnd    24      513    0      480     1     0     1     1     0     8    0
uaddrbest   32        2    0        0     1     0     1     1     0     8    0
uaddr       24      513    0      480     1     0     1     1     0     8    0
vmmpekpl   168     6307    0     6259     3     0     3     3     0     8    0
vmmpepl    168    37557    0    35657    93     0    93    93     0   357    2
vmsppl     456      512    0      480     7     1     6     6     0     8    0
rwobjpl     64    15304    0    12403    48     0    48    48     0     8    0
pdppl      4096    1033    0      960   115    36    79    99     0     8    6
pvpl        32    12720    0        0   104     1   103   103     0   265    0
pmappl     248      512    0      480     4     1     3     3     0     8    0
extentpl    40       55    0       38     1     0     1     1     0     8    0
phpool     112      294    0       39     8     0     8     8     0     8    0
ddb{1}> machine ddbcpu 0
Stopped at      x86_ipi_db+0x27:        addq    $0x8,%rsp
x86_ipi_db(ffffffff8387dff0) at x86_ipi_db+0x27
x86_ipi_handler() at x86_ipi_handler+0xd9
Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27
__mp_lock(ffffffff838def98) at __mp_lock+0x199
softintr_dispatch(0) at softintr_dispatch+0x5b
Xsoftclock() at Xsoftclock+0x27
__sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc+0x33
__mp_lock(ffffffff838def98) at __mp_lock+0x1a3
uvm_fault(fffffd806c122020,eeb5e9aa000,0,1) at uvm_fault+0x1ee
upageflttrap(ffff80003c50fb50,eeb5e9aa000) at upageflttrap+0xa9
usertrap(ffff80003c50fb50) at usertrap+0x2d8
recall_trap() at recall_trap+0x8
end of kernel
end trace frame: 0x7b9e97cd5e20, count: 3
ddb{0}> trace
x86_ipi_db(ffffffff8387dff0) at x86_ipi_db+0x27
x86_ipi_handler() at x86_ipi_handler+0xd9
Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27
__mp_lock(ffffffff838def98) at __mp_lock+0x199
softintr_dispatch(0) at softintr_dispatch+0x5b
Xsoftclock() at Xsoftclock+0x27
__sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc+0x33
__mp_lock(ffffffff838def98) at __mp_lock+0x1a3
uvm_fault(fffffd806c122020,eeb5e9aa000,0,1) at uvm_fault+0x1ee
upageflttrap(ffff80003c50fb50,eeb5e9aa000) at upageflttrap+0xa9
usertrap(ffff80003c50fb50) at usertrap+0x2d8
recall_trap() at recall_trap+0x8
end of kernel
end trace frame: 0x7b9e97cd5e20, count: -12
ddb{0}> machine ddbcpu 1
Stopped at      db_enter+0x25:  addq    $0x8,%rsp
db_enter() at db_enter+0x25
panic(ffffffff83438c99) at panic+0x1e5
__assert(ffffffff833ea060,ffffffff83425cda,6cd,ffffffff83338326) at __assert+0x29
uvm_fault_unwire_locked(fffffd806c122740,400000000000,400000010000) at uvm_fault_unwire_locked+0x4b4
uvm_fault_wire(fffffd806c122740,400000000000,400000011000,3) at uvm_fault_wire+0x12d
sysctl_vslock(4000000001c0,ffb5) at sysctl_vslock+0x109
kern_sysctl_dirs(4e,ffff80003b4c9728,1,4000000001c0,ffff80003b4c9758,0,4bc9c7a46c0be5c0,1) at kern_sysctl_dirs+0x266
kern_sysctl(ffff80003b4c9724,2,4000000001c0,ffff80003b4c9758,0,37,c3f3c3e583c26111) at kern_sysctl+0x12d
sys_sysctl(ffff80003c511218,ffff80003b4c9890,ffff80003b4c97e0) at sys_sysctl+0x425
syscall(ffff80003b4c9890) at syscall+0xbc6
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x7ebfa6a92a0, count: 4
ddb{1}> trace
db_enter() at db_enter+0x25
panic(ffffffff83438c99) at panic+0x1e5
__assert(ffffffff833ea060,ffffffff83425cda,6cd,ffffffff83338326) at __assert+0x29
uvm_fault_unwire_locked(fffffd806c122740,400000000000,400000010000) at uvm_fault_unwire_locked+0x4b4
uvm_fault_wire(fffffd806c122740,400000000000,400000011000,3) at uvm_fault_wire+0x12d
sysctl_vslock(4000000001c0,ffb5) at sysctl_vslock+0x109
kern_sysctl_dirs(4e,ffff80003b4c9728,1,4000000001c0,ffff80003b4c9758,0,4bc9c7a46c0be5c0,1) at kern_sysctl_dirs+0x266
kern_sysctl(ffff80003b4c9724,2,4000000001c0,ffff80003b4c9758,0,37,c3f3c3e583c26111) at kern_sysctl+0x12d
sys_sysctl(ffff80003c511218,ffff80003b4c9890,ffff80003b4c97e0) at sys_sysctl+0x425
syscall(ffff80003b4c9890) at syscall+0xbc6
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x7ebfa6a92a0, count: -11