kern.securelevel: 0 -> 1 creating runtime link editor directory cache. preserving editor files. starting network daemons: sshd. starting local daemons:. Wed Mar 20 10:35:03 PDT 2019 OpenBSD/amd64 (ci-openbsd-main-7.c.syzkaller.internal) (tty00) Warning: Permanently added '10.128.15.211' (ECDSA) to the list of known hosts. 2019/03/20 10:35:26 fuzzer started 2019/03/20 10:35:32 dialing manager at 10.128.15.235:34291 2019/03/20 10:35:32 syscalls: 1 2019/03/20 10:35:32 code coverage: enabled 2019/03/20 10:35:32 comparison tracing: enabled 2019/03/20 10:35:32 extra coverage: support is not implemented in syzkaller 2019/03/20 10:35:32 setuid sandbox: enabled 2019/03/20 10:35:32 namespace sandbox: support is not implemented in syzkaller 2019/03/20 10:35:32 Android sandbox: support is not implemented in syzkaller 2019/03/20 10:35:32 fault injection: support is not implemented in syzkaller 2019/03/20 10:35:32 leak checking: support is not implemented in syzkaller 2019/03/20 10:35:32 net packet injection: enabled 2019/03/20 10:35:32 net device setup: support is not implemented in syzkaller 10:35:36 executing program 1: pledge(&(0x7f0000000000)='\xd9\x00', &(0x7f0000000040)=',:\x8a\xbf\x00') r0 = shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x1000) shmdt(r0) r1 = getegid() symlink(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00') mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r2 = openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000000100)='/dev/wskbd\x00', 0x88, 0x0) r3 = semget$private(0x0, 0x7, 0x40) r4 = socket(0x26, 0x5, 0x63) readv(r2, &(0x7f00000014c0)=[{&(0x7f0000000140)=""/4096, 0x1000}, {&(0x7f0000001140)=""/209, 0xd1}, {&(0x7f0000001240)=""/244, 0xf4}, {&(0x7f0000001340)=""/65, 0x41}, {&(0x7f00000013c0)=""/81, 0x51}, {&(0x7f0000001440)=""/110, 0x6e}], 0x6) connect(r4, &(0x7f0000001540)=@in6={0x18, 0x0, 0x7, 0x6}, 0xc) r5 = semget$private(0x0, 0x0, 0xa8) getsockopt$SO_PEERCRED(r4, 0xffff, 0x1022, &(0x7f0000001580)={0x0, 0x0, 0x0}, 0xc) getsockopt$sock_cred(r4, 0xffff, 0x1022, &(0x7f00000015c0)={0x0, 0x0, 0x0}, &(0x7f0000001600)=0xc) semctl$IPC_SET(r5, 0x0, 0x1, &(0x7f0000001640)={{0x100, r7, r1, r10, r1, 0x0, 0x3}, 0x7fff, 0xfab, 0x5}) rename(&(0x7f00000016c0)='./file0\x00', &(0x7f0000001700)='./file0\x00') r12 = getpgrp() setpgid(r6, r12) sendmsg$unix(r4, &(0x7f00000029c0)={&(0x7f0000001740)=@abs={0x1, 0x0, 0x1}, 0x8, &(0x7f0000002900)=[{&(0x7f0000001780)="f91caf71cf7b5a6192e55afe05b75f62202114a2f439b6a0b460bce559dd1b92e409f657211810cf9ef2565a71510c6bacb94116314b5166bd34ff1dcbabdafefaeb3e32bf4c886bd92d236962f1824324f0dc594fdbb4cefd10b6fdd91710728c4896d7e16c9e49", 0x68}, {&(0x7f0000001800)="369a007547c03e418e55f805dab0afa92afe2a495b17b541c6ff4d111895dffb239145b59b312d287b2745ef5130f7580738cbda8a0482d043acf55be923eed83e180166e63d0e45cfacf3f55e34fbf26a2fd66c1a10bf8a316663cc43653cfc8548b55dd4f6c617f6e2bdfd22ba56da34a04ed1ad47ce3d1671404fc0291487b41566540302150deaa79c8b2276fdbc2bb9498787d47562316751", 0x9b}, {&(0x7f00000018c0)="0c390a7a744cc440941b6b0fa746ab1b1bbc76b2b740bb63146604a86d492171ff5d895f9e6ea37aac80d2326fbcea8cd11643f28b9409f9a61c04b5bf932af051d05bdc57b8e2b1da6c217afa0f8e915a695381064003eff8c8206dcd5c64d93ba62f166203b3df504c1ccc21598c9c1829a52641ac6cff7a1f84f1f394d88d4824266fd8bce6f1f613b356092f1f8420f531c816ccfd906815d9a42c65cfc0b40eb3d81a06cfb912c450fcfee94258cabc7fa28a8da2a51a7101f156ba93eb655cfccf2b220032bd85244fc79b532654d1d3c50e57507dab9e1f7ea4cac8834d9e03c4635bc1a60446ba1b6b2bcd9d844830057baaf338c98c70059e5c7bda3341982ea72650defb967fb2b46a016051f59c9d4a6f0c0cc6cfa5ae1bdab2f3cbd6342458724be707e161e3c5622e8a9573e9e47d34c312e22a496f6e0c8c90a397685ae2c7e9bf1867cb56a7fd606afecee16882bfb1ff604c3b9dd45ba174ec586e0ae1686025039abd5a236e11c49621000d32f5e8bdd5a86d35dcf0f87ef2729bf632ad5826419050cf425a510d8c66f0d249d6b7d12f28d300df74084ca88958234a5af1ee6cc165b558fa62df77b2e7cbe88d921750eaa5bd9b48199af301577f18d24ee0e6a9c6faf7316a4295905a26188739b57484857261df3033217762197ba9897da627c5656ef5fbc0db54d7cf9fee5f447747f3af76554fbc76c360316b62e7027d983963fafc9177cc9d706e9bc1370f692dfce27ff8cf3d5cd63e51fb1f65d324bdb163ab3d9408cdff7683f606b91a241e53a232858c431149894f388037d91fcdd1e6fa91838a4ccf51b2e26a9b5e224acf1d076d9c6da4084956b44700461bcb5be2e38077bd30620a264a9ccc748c08432aa344df10211f819f7bd570953ea8daddf2c67dca953565268a3ba6ff4245460f626c4aa3dde743478a2c88913e51a3ce0f6d0662b5fb0a5e634e49e9b68d2f3311bcd39e86a6c84acf9c6ce3636db6c61727e432c49828982b84d1c8ff6a9aba8ecfbeb367bcff33e3ff782fc928da8ea180635028533f79e57839f1937fccf1ca3db6afce8f2cf2d56ea77208c843f199b8ae1a78f566ebbe0e0702737f8a8f1e8de8f7d3c96c9c909bf4f5958d7dc47dd21e240e309b4ca94c9c1171443c562d74c1e1a7d1c4d9deb7acbd61df39bfce0022118b414f04fa2cb9016590d37042756bb6cbe4fdf8d8324997f5a1fd848708cdee6340a694c5c153c615c07976bc95734393658763989684d356eeeb088cd2ce74830b03fed43fe852bf871749e97f562161fe9047ed74fbbf670e9bee0dc3d64971bf50c5073c2be8dd79ee7729b1e1f2ba2406ebc7c4734d8373e752a1228169bf87b3fa40b75a428bd1a292b710a5d7a45f8e5a4584aa13595039dc14e0dd4b19578e49099ad0a8589c28b903aacd0cd981768ad4d767a6b3f93425eb2d1d2d61b65a157f6886f85cad85de3ab253a11cd0757ebe0defedab397a81c088d07e872ef08523c95069791a00dea4ae053f9b714a16f632c9423836a9aa4c28349c357fa064c83efc2405548faf151ebc99d4eb73bb66e22e37999ef4ce6dd4ed38543b5398ba1041b2c4f2837c7c57452ac4a192a1b32a947884c72325b4509e404309e87d6952b0a9f1a9911e8d1815e0be0d5b3b7f0b180820916d11da6c09a3f0b2b072b289d21e09362ba25ba9317a51bb15050d078246b4395cd2f8a16e1254c54a518893390055c69d8b978033a38941262fd0b04c98ea66ae945934da3b0d09861996ec84ed58a0609c485f83ba335c9f1975922c0ef9fb6b3827090d8207e4dfdad81dc01e33e22c46e2becca3d32a0029b2ec4be96512749d051ee5183a4469a10390d6ef5845f409517f3b373a8761d3849cf91a9154a8a15e07ff2e93dbeb308f2f245dc2052774e802d7022c627176d270b104ec48462868c338358e3ad632c96ee4a1b6242d125c56cbc001c1d7e334af05d64042b6014e9a7b545a5fee3bed4f3c06bcc01e51997532461207e3c735161011882a695f1eb029a0220d115568390d7d99f301b0874523d488eeab89a5fb20c7bf06bab2ab299894bbf74fdac661ce98072eb018686be40278db28e2e70c678fee41cf2a5d66f5b7af8c40fa6fb9030b1f02af9813b0563b399d51748e92abebfbf38e6d601fa8f57a8322a756a17b0988e77394e909fcc8a60dcfa79e4c6b44911b35cd6863288b2a872440e10c2ed7bb07a52cadabf58977c99fae25aea32f3f912109e92eca558fc9d06b6e554451b7ba0eab4c2b14d8af0965bf07f7d6d856f72a13a2052f39b88777f0de58680db2722781dbbc65540504b8953fb95c8fdb31a5ee9b2cd452eff146fbad85187ff040205aaf54da17c6a476e46db792753c666b6a79cd1267c5b36bab06313a156617da7e7dda49fd8b95c878379670a61b8dc16f84747d7810db876599e6aee5b94383360af0545c354d9903055bd952602b54646907ac270b6159913598b558397f605d427246b3c40ac8bf0688c2239d8d148a051c5446eee91003fd60b0b5222696e9179199f9b08f8930afd8e82f43e4ba6b36581b508df05e573ad74dc10b2fa7cc4e9c07b1cd50b7f5f02da5193d6a9bff6187e70293fde3359baa9bfbcf9f2e6a686ce9feb22ee246fe9a643d4d22f235b559ae1bbd8fe33eddc7150abb823d0cd26ea90363b9b12adc2a42cd20260f2d9fc0d49f986ea5bc2515a8b4d4d03af66dd7630eda51c5cb97a79faad399e27f62af826df2b1d506139215557a64da546c51d03fca36293e1bb735265ead404341b60fd83862c792e61c3827cb49a01ec54f357f3ae8bfbb149fbdef277044d2d18545aebc23888753416195137e7dedda9c4dbf2fef288ea746aa3d83a2df7e0e6c1368c0d56030f913055b179f3d9bd029f1dd349a72b5ff1e2870bbdcd94113af2555f1006a50917d71f05ef3fd22d71b5b932cb5d34563a1663b02da5a04334353b63e0d4b26aef339c41bed03afb0b7c320a0e57171c8469597ef5d0c8e8911626381d5d638e879a4ec25c0b7dc3eb12155298c36828b480ba726f050a670fafad38b88f992370b01fed5c652bdd9954a4c69381dca6ac845e846f6d92325382cf2d7aabd3320dcf85664e1442fab768832765871dcfdea6a6b4ca5777c5a9c8b89c64127089784c5e898862e1b00a70a15dcf0f7074b42ab135870373b4a99a2257081e36d402d1fad3048caf426ab9c0b533207f63ee5b69efb7ee9f6bbed0312729b9a2fc0e15c10555e205c59586a9ffd894e98c669ba21e8d90ec1104ea201b9bb000c9cad03e2b33f13e332670b5ba28b036fab6ad0d21cb2586729844367f4864709de19faa0bb62379c7779f717c106cd51af7017d752307808cb04fdb20ab1e86fd279fbb7bd8647241f230b12f20b058511d0a9e8d1df2ced355a02af4687e47059d80a16d6cdbd9e4277acc724437eeac0dc243f6970c5b345c097dd4a4c6db87506c41588746042900e36df21baf1bbce841945785717fa88599145c15a974ea413f425ee89b14aea03a0ef42776c0432da51e60ea8b3cedcd446a38381ad1d1df4f77fe39267a512aea87c77354c7b14dfd7f24712c72da3a9188fbd29391b89533b3103d6d355488c2ccd499cdab6e7f508babe95a262136930a201c51b34b4fe90856b89f7d41146cddce9787615ac599c2b52f811e5697716c77f2b1256b10dffe45099a03203764372561d15ef4f88577e429ae145098ae1b8ec2236c664b4cc2e768fcc4932bce2324d7d67e88dfae9b79497c75bd34478fc125d5b960383c107dbce02030990ee2f651acd4712c0140cf130d2f0e2952eead56f6a2ddef9a1402d6c1f766b08e138c2bbbd36fe0a9db3739503ea53f271b8b4f7f2d93473713f06303356abaaafbbd1f7dc2297afba1b163e2f2244e4d62b773c09a30f34d826ac61658d632621b0dba04c18e562dd3d76bdb68cdd3fa07f2734696d570c363cd48c4272a32bdb8fe72e053706f3bf87d67b522df2d315f20f70a4713aacdda041edb1a3091d7e0d93f9cc67776012e8f6a2c4426db36c3e5dcde6b742cb07cd741ded379005836afa8722503c67abfb63398f5b1f0789b50ef14dd5d1ab98acdd62f73b9d7329df413bbafc301ed6b5088550dd97d4be9bee4d8a039591dd9df6a87bfac2de9f1a8815cc0600d455ddba33352c874cf7e3b5ac23ab610d60d06f29cd4969daaceff0a2c0199ef5d1f370a675eb7b68bbebeaab2b8faffac25b39bbb9220d5e0564c3b97d04aadd5b421f321e68b0ad5af542b56836fba1c690e8d3dd7199f1acfa6ef626ca7f347441977215aa4efb046bfc4959c11ea97865b2d6ff479b131ec23919f037f17152af93eb86cacc35709cea7f7ca94afb19ae1188c53d3092c2586a7c74d74c8c93ec48f5bb8d7850c1028f4017e95c6fe0f57b5d47d6f01530e373aa48fa961abe4fdf3b4a91e1a995409334a3aba47799afd1368fd7e84cd4d251e8a734cbd96657427fc50ba4ce152ba45d706ffbc0a4413eff59612365b1a7146562365d32bd3096088de472d9a61e469a6c7d1300b8a6765a6538a2cabe4d01ca9c7333b88ba26a516ed6d44b929912266925ce6a2447823cefa7a85d9a08695193b98a99b157f301168c67865b18c11e5081876be53610213627f99fdcbf0f10fd7af60faeb7c1bac4c007c8db8169d82304c42174a2aeb7e980b32f33c627ba8058ccbc5debfbb5c1523a0ccbd2ba2cf224ab62b159dfc74131757bf04294c6a1145904162fed41aa0a2206be3a95741f830b24b2404eae821eb499009da3dc58fc4c39ac56b332ea251591955718dc17a007cd5793db22aeeebdbc397c6e996ba99e64ff6f2a246382abfe3fe442f65ae2e1a97aa844f322ce2923dca82571c5e8cf0da99ae40242c71590a30f75fa1ca50265ff314d83401eeaf544a0a568eba8e5bffc1be006b6853f2c80cc3e4e9f6d1fcc656905628c0c4afd2bd4d4cd239943a41f2dccd31a867c66f88856f355294a6836a8ff6efcd96b07a0e32e8e255055dc489f6a454dbe73f082916c33bb5e8857df1de18f042e9ab3b8cc242af1c1fa9514e54823a364e96f1b1d72524a2f528f1896a6b4d7ceb13f718e8c38309c0206a4d08bfd2ff2decf7133f8fcfc9db51f95fe03cab343fbce012d30bb3e9fb780664ab26359d119b804fde7fc9e77a6c49f5f2db27a85383453ce71081409125a7cea7e61ec7b242d5923fceb42b6a4b81210f7f06193156d56a960b7cda66e7495c39dff819a1fea256be93c5b2157b00325f82cd932dc457316b9bef5b3c0c0b4df6d981421c87f36d7d449138f1f7e6fcd5170de9ed114ffd2b5e6826a468623a7e8ca6d31db5f29d031443c1f5ae8e65d2c25353deb2d0e0ceeb829b25c0898ccb08d526eb31126e67d9a0c39510d83bef9d07ef089323e835c08a6ef1714fa4a6f4f66d87a2d4ccaf38d4fbf2b1fdc972237cb4bc18478856f060bd4c804e60b98bd413f540c5733addcb9b808e73db5f1c2252991bb8f8043f577f3ac64d757b9c88bba0cd7506a0553c002c02c2215019be40d014d7f2bb767546a3403b09a14ee05b49203070efb632cbf6cc3b35bb2c09262f61570eeea9dff9bbabae8ff51a1fa849ad3a7ec1d803bd9cb20b4e471201e36342088c9484239a85b0406b658e251efc3729d8bf3d15ffc8017538f011b87d1de01fca57040f2b2f31eee9af2b4f2899c11f941c80fc86314c02e689b0b999655b8084e", 0x1000}, {&(0x7f00000028c0)="0c2d0382cb5f6fec4acd8e3d84070a5e2b185b39e650f0ab3c64f7b2cc4f6842f2f94d2863c4b055bd1d09fe", 0x2c}], 0x4, &(0x7f0000002940)=[@rights={0x20, 0xffff, 0x1, [r2, r4, r2]}, @rights={0x28, 0xffff, 0x1, [r2, r4, r4, r4, r4]}, @cred={0x20, 0xffff, 0x0, r9, r7, r1}], 0x68, 0x8}, 0x2) semctl$IPC_SET(r3, 0x0, 0x1, &(0x7f0000002a00)={{0x4, r10, r8, r10, r11, 0x2, 0x20}, 0x0, 0x3, 0x80000001}) semctl$IPC_RMID(r5, 0x0, 0x0) getsockopt$inet_opts(r4, 0x0, 0x1, &(0x7f0000002a80)=""/37, &(0x7f0000002ac0)=0x25) semctl$IPC_SET(r3, 0x0, 0x1, &(0x7f0000002b00)={{0xa769, r7, r8, r10, r1, 0x20, 0x8f9}, 0x2, 0x8001, 0x1}) semget$private(0x0, 0x4, 0x18) pipe2(&(0x7f0000002b80)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$WSDISPLAYIO_USEFONT(r14, 0x80585750, &(0x7f0000002bc0)={'./file0\x00', 0x8, 0x9, 0x1, 0x1, 0xa5ba, 0x3, 0x2430, 0x1, 0x2, 0x2c96}) getrusage(0x0, &(0x7f0000002c40)) renameat(r13, &(0x7f0000002d00)='./file0\x00', r13, &(0x7f0000002d40)='./file0\x00') ioctl$TIOCDRAIN(r13, 0x2000745e) syz_open_pts() 10:35:36 executing program 0: socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$unix(r1, &(0x7f0000000040)=""/150, 0x96, 0x2, &(0x7f0000000100)=@abs={0x1, 0x0, 0x1}, 0x8) chroot(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f0000000180)='./file0\x00', 0x2000, 0x2) r2 = shmget(0x2, 0x600000, 0x2, &(0x7f00009fe000/0x600000)=nil) shmctl$SHM_LOCK(r2, 0x3) mkdir(&(0x7f00000001c0)='./file0\x00', 0x1ec) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fchdir(r3) r5 = open(&(0x7f0000000240)='./file0\x00', 0x20011, 0x0) ioctl$WSKBDIO_GETMODE(r4, 0x40045714, &(0x7f0000000280)) getsockopt$sock_int(r5, 0xffff, 0x1, &(0x7f00000002c0), &(0x7f0000000300)=0x4) connect(r5, &(0x7f0000000340)=@un=@abs={0x1, 0x0, 0x1}, 0x8) shmat(r2, &(0x7f0000af5000/0x1000)=nil, 0x1000) fchdir(r1) r6 = openat(r4, &(0x7f0000000380)='./file0\x00', 0x80, 0x10) utimensat(r6, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={{0x401, 0x401}, {0x9, 0x5}}, 0x2) getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000000440)={0x0}, &(0x7f0000000480)=0xc) fcntl$lock(r3, 0xf, &(0x7f00000004c0)={0x3, 0x2, 0x5, 0x5, r7}) sendmsg(r4, &(0x7f0000000cc0)={&(0x7f0000000500)=@in6={0x18, 0x3, 0xe0, 0x3}, 0xc, &(0x7f0000000900)=[{&(0x7f0000000540)="0adb3b80a93a50f05e0321a8745f44f4d25f0ec708c7c4eaf2c13dbb4e4578f83b94163c6f42baf72f5ce9f457b42bdb4521fd2295e282110c202058e118ca1545ad7ab9cccdfd27a71e905af63176e5594130b76b4292a3dfb4e4cca8950bea7e72514e4c87977207ec0856f7a8", 0x6e}, {&(0x7f00000005c0)}, {&(0x7f0000000600)="e9aab3eb0e03e787a7a44ad3d868b3c0c78e5fa1c912d6fa8d49582d6f73fbe678c8c2e51b53feb01abf668f898d77618dddbf02ff5a198e4f005567653f6735a77e2e95368b106839f1d70f29e876b21bd167fe0b6795f1b76003317c8dd734d79c5e1d2b0e6a2dcf583af1b9bf1c704745038d438623511aa7489889b6ba8fd40e843b69be9fa25eea146397b76bbe673ebf0aca102514893e573a399e5f3d823c07ba6f823667714f8b064a0dedbf2c4cf5ecc80efc1eedc834c6672f24ef4131b8403c283cbf13914a447249cfa7f3198b", 0xd3}, {&(0x7f0000000700)="e55634a4448f049c86cc287841d655860cec0c7e514b489327e7bd503a3c33e6945a15ba1236caa43d9917acb64ae0379434067812d8073df4963e5109f14c2d29538a375a0ff6af", 0x48}, {&(0x7f0000000780)="84c4a362cac8cb84c681860b296ce954967a140e5d5015104f84fb7bb017bbf30dab06f97eacb69f4c33c79885949727e706aa8c3c1c856dbce8b2e6a2436584ac36230d73c47e96a7fce6e766dded32d1778e27649abb198a8e156842423d751cedadae35c09a7b9c7c7aaf2554250cdcf2cd04b1c7543dd33804f2ac100534771dd4668510a51873db42aede4df36cb77ecc5f5769259e627a2a3ab37afb0146070cbf00951ebce9a3a2d1ae59ffb6857dbc9545a5a30594c3b193fafcaacc990517bd622924db8d134e6b401c2f", 0xcf}, {&(0x7f0000000880)="a0d9762f814c517224ab565b2fae813a2cfd71a2e39f8db24ecae0e1addbd1a4e5a7ca2bece9325357fa055f8978c16215116d860b6b554d9fbd716904c0cdac6cc2f224befdfbabdbc73be1d72be73a5ac8f32af8ab1b39036eccfe64428a80b2f302d5a45e2c93", 0x68}], 0x6, &(0x7f0000000980)=[{0xd8, 0x1, 0x7ff, "2ab790c01a9a630af4e44d0035e46d52c8efd56b59e34c56b6f5b792e12515b57b801a17a3e0a3cf1a351fed08c7c4109bd004e2ba165afca33b712958151a014614e362ec695f2bd69b75283cfc77c7061ba458d08512248fcad4a9dbca84397dd85433ea5723c24104d34b92e252afc604822c588b3e2d0d3bc1e67a35e8048e1af85b68ffb863e88ca4cf27e377b26232c74cedcb7d9e6c0e34d8230fdea0d1d757bc319916887ba46e033afa8f8fabd453197deed022de9412e10ee3893e7d3376"}, {0x60, 0xffff, 0x0, "5ef7c4bab0b0e4523b433d927d02a301f2cfdf313d4e46f36fee229e2866236d415d4d3fb2be5204a8ab651610f9d560ea8737db1c70049b583b5298cf4bcb1e42d8c74ffb85c6866f528c338eb887b0"}, {0x100, 0xffff, 0x13, "3009c5f0313b2504ff7b95c8bb9b97ddc63b196cb47d645cce989c684fad81e3a9e5fe66759b87bd2fc6c9042fcfe3d70dbe839c007a0d6f02018cbfad7344f60659fc0e76869dc30ceebc752c9498de2fb28181537dcd4c437f3151adb14b0a0008c598428a25d8c61eea077805ecdb05600b5538888f263e75762b3bbeea55eadb942f8d347c034b02916fac9517ce83b02d04d0194b794f7625c8d7ed87a85b51a727b3878ed241e509c09c7479eca81b2bb2881ba048c3ff50925773440be5a37c7721502c82af72f24aca1ed120639321dee340edcd650c1ce5895840e8b5df7c2a1673200d70c8fea1b7"}, {0x108, 0x1, 0xfff, "d9574d003a244aa2efbdacecc3253d1c769ef889278bd2b91a2ae7413e03e961c61fde215d792e1b4159db90f0e9df58c1cdef5cb5be94722b38c63f4defe163673ac3c7250df467095243fd446d5b6f0c042939ad993a22232b011ede24929c19fcafcefe1cba494564189e50253a48aba954867c2961dab243d039bb280a5366a4dc88512e9c07cc008eaaca9645fc3d604eb52a94b75eb3c6b255577eede8926ed61ca2ce4310567fdf4ffc7bcfb10605fbc26a42cbdd0fb815a9cb9c4d0878005c069078430e2a3b7ed21010ec1b0ff6e05340bec68c55c22104d96ca48b605399758e66ce1b6d73ecc1217f8a0ab5ac37d5fa97ed60"}], 0x340}, 0x88087753cb241ea2) lstat(&(0x7f0000000d00)='./file0\x00', &(0x7f0000000d40)) ioctl$TIOCGETD(r5, 0x4004741a, &(0x7f0000000dc0)) ioctl$WSDISPLAYIO_GETSCREEN(r5, 0xc0245755, &(0x7f0000000e00)={0x3, './file0\x00', './file0\x00'}) ioctl$WSDISPLAYIO_GVIDEO(r5, 0x40045744, &(0x7f0000000e40)) ioctl$KDSETLED(r5, 0x20004b42, &(0x7f0000000e80)=0x7) r8 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000ec0)='/dev/wskbd0\x00', 0x10, 0x0) poll(&(0x7f0000000f00)=[{r1}, {r4, 0x6}, {r8, 0x2}, {r3}, {r4, 0xc6}, {r0, 0x2}, {r5, 0x10}], 0x7, 0x8) connect(r6, &(0x7f0000000f40)=@un=@abs={0x1, 0x0, 0x2}, 0x8) ioctl$WSDISPLAYIO_GETSCREEN(r3, 0xc0245755, &(0x7f0000000f80)={0x8, './file0\x00', './file0/file0\x00'}) ioctl$TIOCSTAT(r6, 0x20007465, &(0x7f0000000fc0)) login: pckbd_enable: command error 10:35:37 executing program 1: munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) mknod(&(0x7f0000000180)='./file0\x00', 0x2000000006002, 0x401) r0 = open$dir(&(0x7f0000001240)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x0, 0x0) r1 = dup(r0) ioctl$TIOCSETD(r1, 0x8004741b, &(0x7f0000000000)=0x9) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) ioctl$TIOCSETAF(r1, 0x802c7416, &(0x7f0000000040)={0x2, 0x4, 0x0, 0x7, "260f96904fb1515305808684d8e3da9edfd7da34", 0x262b, 0xffff}) pckbd_enable: command error 10:35:39 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0xffff, 0x100001008, 0x0, 0xffffffffffffff99) sendto(r0, &(0x7f0000000040)="d331ce374c13c9d569a57a20abe8914585ed65fd6d1755db26ae2a771c8c261dd770604da27b5ec31a9f28df135f57c7d1c7ab3d7207b3d2fa139e0e79599eacc1c5821724587abc9c8cb26325749b4c8e31ab7b2cb671179bfd4123f5b631e77f1003fa550ff160e2d56ec14b3a7d74e464df257bff20be6d6873", 0x7b, 0x401, &(0x7f00000000c0)=@in={0x2, 0x1}, 0xc) 10:35:39 executing program 0: r0 = syz_open_pts() kevent(0xffffffffffffffff, &(0x7f0000000180)=[{{r0}, 0xfffffffffffffffe, 0xcd}], 0x0, 0x0, 0x0, 0x0) r1 = kqueue() kevent(r1, &(0x7f0000000000)=[{{r0}, 0xffffffffffffffff, 0xb9}], 0x66, 0x0, 0x81, 0x0) r2 = accept(0xffffffffffffff9c, &(0x7f0000000040)=@in, &(0x7f0000000080)=0xc) connect$unix(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0xa) close(r0) pckbd_enable: command error 10:35:39 executing program 1: mknod(&(0x7f0000000040)='./file0\x00', 0x2003, 0x1700) mknod(&(0x7f0000000080)='./file0\x00', 0x30, 0x5) r0 = open$dir(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write(r0, &(0x7f00000000c0)="0a52eea3b26febf75153c5d34b7d7d3c61a0a2134f3938124d2b59b236289ab1d0f3bd9e7ff2b0448d6177cd22def325573a796290250146b0db181b34fe140ad85543159d94ae780d4189857a89deaa88c9c204ba5c243e3a815f94c50210f74d8ecfc5316ee7bd4f767ff60969ef7d39bd0c376c8b0cf70fa0", 0x7a) ioctl$TIOCCONS(r1, 0x20004276, 0x0) ioctl$TIOCMSET(r1, 0x8004667c, &(0x7f0000000000)) 10:35:39 executing program 0: mknod(&(0x7f0000000100)='./bus\x00', 0x3a0914c44f7b2026, 0x1b00) r0 = accept$inet(0xffffffffffffff9c, &(0x7f0000000000), &(0x7f0000000040)=0xc) sendmsg(r0, &(0x7f0000000800)={&(0x7f0000000080)=@un=@file={0x1, './bus\x00'}, 0x8, &(0x7f00000003c0)=[{&(0x7f0000000280)="505bdbb24ee550a917ce5202a4608d3f40b7b3fbe9aabf1be647dd808e8692e4adb14433fe74eb1eb0af199c919eedcaf552ee85e63defd03d132ff0a7f320b317bd6e2536438780234f15da2f3e616277d02d53cf59534bd80129010fe8f3ff7878b6a81089e609dbcf24e8bef0a20363abf7343fbc8ef80ad5", 0x7a}, {&(0x7f0000000300)="b3b54506b50280c752376ed2320d2b55e6d434015a9f2674eab61082a880f1fbde7ebe9f031317f3a3326c30df0ed29a0cfe64e83a0159e5ea38d81784845ba077efcbefae00e601ead9b3a8744da4d5e3fa352257a99918e32c0b62a3f7cf37fae7fc8b660c6ddcc0f9bae9f362d1dbd401ac7ffc5f1f9a1098ee90099fb31a37b803623b44bbdff64eff3c13859944f858306e84a3cca31a3d328344868e7c1a1b7f5ff4ef", 0xa6}], 0x2, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x3e8}, 0x9) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x11, 0x0) ioctl$WSDISPLAYIO_SMODE(r1, 0x8004574c, &(0x7f0000000840)=0x1) ioctl$WSMUXIO_LIST_DEVICES(r1, 0x20005302, &(0x7f0000000140)={0x0, [{0x9, 0x2}, {0x1}]}) 10:35:39 executing program 1: chmod(&(0x7f0000000080)='./file0\x00', 0x180) r0 = socket(0x10000000011, 0x8000000003, 0x0) r1 = dup(r0) ioctl$TIOCMBIS(r1, 0x8004746c, &(0x7f0000000180)=0x4) mknod(&(0x7f0000000000)='./bus\x00', 0x80002000, 0x801) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x8004741b, &(0x7f00000000c0)) setsockopt$sock_int(r0, 0xffff, 0x2000, &(0x7f0000000100)=0x2, 0x235) getsockname(r0, &(0x7f0000000000)=@in6, &(0x7f0000000040)=0xc) munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000) r3 = semget$private(0x0, 0x1, 0x40) semctl$GETZCNT(r3, 0x0, 0x7, 0xffffffffffffffff) sendto$unix(r0, 0x0, 0x0, 0x40c, 0x0, 0x0) fcntl$getown(r1, 0x5) semget$private(0x0, 0x2, 0x160) fchmod(r0, 0x1) unveil(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140)='x\x00') preadv(r1, &(0x7f0000000740)=[{&(0x7f00000001c0)=""/213, 0xd5}, {&(0x7f00000002c0)=""/239, 0xef}, {&(0x7f00000003c0)=""/86, 0x56}, {&(0x7f0000000440)=""/41, 0x29}, {&(0x7f0000000480)=""/58, 0x3a}, {&(0x7f00000004c0)=""/97, 0x61}, {&(0x7f0000000540)=""/185, 0xb9}, {&(0x7f0000000600)=""/126, 0x7e}, {&(0x7f0000000680)=""/190, 0xbe}], 0x9, 0x0) 10:35:39 executing program 1: ioctl$TIOCSETAF(0xffffffffffffffff, 0x802c7416, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, "0100000000000200"}) mprotect(&(0x7f00001b3000/0x3000)=nil, 0x3000, 0x5) r0 = socket(0x18, 0x1, 0x0) setsockopt(r0, 0x29, 0xc, &(0x7f0000000140)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) setsockopt(r0, 0x29, 0xd, &(0x7f0000000140)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) 10:35:39 executing program 0: symlink(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file1\x00') mkdir(&(0x7f00000001c0)='./file1\x00', 0x1) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) unveil(&(0x7f0000000140)='./file1\x00', &(0x7f0000000080)='rc') rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='./file0\x00') 10:35:39 executing program 1: r0 = syz_open_pts() ioctl$TIOCSETAF(r0, 0x802c7416, &(0x7f0000000040)={0x0, 0x0, 0x90d0, 0x0, "d730c1e7bb6fc6e23c5b00000000000000e74de4"}) write(r0, &(0x7f0000000180)="582720efabd16ebae63225259560f8e5815f73f2a044fd33055552fbd5e41789632dfc94ff334a5619515a4c8ab06198824b3da025bbd47b3bf579456fc7d4096e8c8b6b87cb2d72b8bcdb9ad8a4f5f728193ef16ab93f12fc4d5f16b136a5d00d1628b53a", 0x65) write(r0, &(0x7f00000005c0)="bdfa4d2582c321a8cf9884fa33e98e4a8051bd24313dea8d0343d605e285c6a19e1a3fbed9d7c7f5ecd505370f55d9bb05dc03e23aa168a0237f559b7cb5e32d0ff2d4e7199679daa987423cab21c6b2748aaa5e78947da61d75bc9028a2b887f01309bbe061a751731e5c2091f3e9bdd11c4518138f7d1d6a2e60fbf34315cecdd79cd66c31400b4dc386972d2eae1f50146ed5ead47dfc43c6c3b018be5455ba5fe808f9840f9e13da075ee59b09d7b8b0cf8959330d23aafbaf89e60f5f308aa69dd5a40d178c370f8d7b603d1179d96837b2b0064a4370ec77628cc100", 0xffffffffffffff08) r1 = syz_open_pts() close(r0) dup(r1) r2 = syz_open_pts() ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f0000000140)={0x0, 0x0, 0x3, 0x0, "85495500020000000000001167f5bfa600"}) ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f0000000280)={0x0, 0xffffffeffffffffd, 0x20003, 0xd9f, "0000000000000000000000000000000400"}) readv(r2, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/45, 0x2d}], 0x1) 10:35:39 executing program 0: r0 = socket(0x800000018, 0x1, 0x0) kevent(0xffffffffffffffff, &(0x7f0000000080)=[{{}, 0x0, 0x0, 0x0, 0x100000000000000}], 0x0, 0x0, 0x0, 0x0) r1 = dup(r0) ioctl$TIOCSWINSZ(r1, 0x80087467, &(0x7f0000000040)={0x8, 0x4, 0x1, 0x6}) bind$unix(r0, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0xa) r2 = socket(0x39, 0x400000000001, 0xfffffffffffffffb) r3 = socket(0x800000018, 0x1, 0x0) setsockopt$sock_int(r3, 0xffff, 0x200001000, &(0x7f0000000000)=0x4ef2a2e3, 0x4) ioctl$TIOCSETAF(0xffffffffffffffff, 0x802c7416, &(0x7f0000000080)={0xfffffffffffffffc, 0x0, 0x0, 0x0, "6fc6e23c5b00000000000000e74de400"}) bind$unix(r3, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0xf) setsockopt$sock_int(r2, 0xffff, 0x1000, &(0x7f00000000c0)=0xc8be, 0x4) ioctl$TIOCSETAF(0xffffffffffffffff, 0x802c7416, &(0x7f0000000080)={0xfffffffffffffffd, 0x0, 0x0, 0x4, "d730c1e7bb6fda02394e0f200d8900400e000100"}) bind$unix(r2, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c) 10:35:39 executing program 0: kevent(0xffffffffffffffff, &(0x7f0000000000)=[{{}, 0x0, 0x0, 0x0, 0x1}], 0x0, 0x0, 0x0, 0x0) ioctl$TIOCSETAF(0xffffffffffffffff, 0x802c7416, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, "010000000000000000ffffff7f00"}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x18, 0x1, 0x0) setsockopt(r0, 0x29, 0xc, &(0x7f0000000140)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) mknod(&(0x7f0000000100)='./bus\x00', 0x3a0934c44f7b202b, 0x1b00) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x11, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x200, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ioctl$WSMUXIO_LIST_DEVICES(r1, 0x20005302, &(0x7f0000000140)) setsockopt(r0, 0x80000000000029, 0xc, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) r2 = socket(0x18, 0x1, 0x0) setsockopt(r2, 0x29, 0x80000000000000c, &(0x7f0000000140)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) 10:35:39 executing program 0: r0 = syz_open_pts() ioctl$TIOCSETD(r0, 0x8004741b, &(0x7f00000000c0)=0x9) write(r0, &(0x7f0000000100)='J', 0x1) ioctl$TIOCSETD(r0, 0x8004741b, &(0x7f0000000040)) execve(0x0, 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$WSMUXIO_INJECTEVENT(r1, 0x80185760, &(0x7f0000000000)={0x4, 0x6f, {0xf68f, 0xffff}}) 10:35:40 executing program 1: r0 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/wsmouse\x00', 0x20100, 0x0) fcntl$setstatus(r0, 0x4, 0x44) ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f00000000c0)={0x0, 0x0, 0x7ff, 0x0, "b0d4000200fe4cf8000100"}) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) sendmsg(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2dfaea38af9ea07114bae521dfe4128690782d783ffcfeeedf370f599fc0e6ef160344eac8f9e556bf823410222212f53f12a44484ebc8fedc7e7f609f19a64d70fb11c8b6388d64d9833844fef9b373ac7b138ab80ff67006eab84dd32d3f4e288958ce839b2bb56c3fe5b817143c1139730c078c5af3ef77a43012437bf323aef6d5fe5663e2c54822fa1ecfbac706adb72c84a7818e879ca331939af7e879dddf688b7d112edbbc202132d821344402c113dfca61f06b334763659fc719ba93d12b5bb2d0ea7cab8f288b16d57383b114ffbe729458e6a2c0ad04659cefea3843c27271c1f4950882055887823689a859782f00", 0xf5}, {&(0x7f0000000200)="e1debe8bf994eaa5573dc4651a09592943d3c0c1719e084f5f79863f1378bb705859c300a1946710efb3deb7fd40c14a39900468c54b8f531ba9b3ce5f58eace1df7e3637d6f9e1a885d61ef752576eb41ba15b6d56fd205eb1a7a05edfb96d6335f64db3490d4fab9a5aa0b8e52df3b207eb40a727709c51e2dec728e5d5b8c2b10f994da7efc856ccc60b1d908416796c64d787385eae3f6a627a11190bd8a8706edf9aa79b4802561af5fbbd6", 0xae}], 0x2, &(0x7f00000002c0)=[{0x20, 0x0, 0x401, "3ee2e700f0841397935b9b216e3e"}], 0x20}, 0x1) r2 = socket(0x100000018, 0x3, 0x6) connect$unix(r2, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) write(r2, 0x0, 0x0) 10:35:40 executing program 0: r0 = syz_open_pts() ioctl$TIOCSETAF(r0, 0x802c7416, &(0x7f0000000080)={0x0, 0x0, 0x90d2, 0x0, "d730c1e7bb6fc6e23c5b00000000000000e74de4"}) write(r0, &(0x7f0000000200)="582720efabd16ebae63225259560f8e5815f73f2a044fd33055552fbd5e41789632dfc94ff334a5619515a4c8ab06131bb0398824b3da025bbd45d3bf579456fc7d40906008b6b87cb2d72b8c9db939e9ad8a4f5f728193e00000000000000000000000000", 0x65) write(r0, &(0x7f0000000700)="bdfa4d2582c321a8cf98848e4a8051bd24313dea8d0343d605e2d3280d33ee6185c6a19e1a3fbed9d7c7f5ecd505370f55d9bb05dc03e23aa168a0237f559b7cb5e32d0ff2d4e7199679da01000080ab21c6b2748aaa78947da61d75bc9028a2b887f01309bbe061a751731e5c2091f3e9bdd11c4518138f7d1d6a2e60e1f34322c0cdf8648b48935d14a79a15cecdd79cd66c31400b4dc386972d2eae1f50146ed5ead47dfc43c6c3b018be5455ba5fe808f984", 0xb4) r1 = syz_open_pts() close(r0) dup(r1) r2 = syz_open_pts() ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f0000000140)={0x0, 0x4, 0x3, 0x0, "85ff3aff00", 0x0, 0x80000000000000}) ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f0000000000)={0xd4f8, 0x400a4b, 0x3, 0x4000000008d9f, "b08d16c6663104000000000000af8a210524d8e5"}) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000280)=""/23}, {&(0x7f00000002c0)=""/172}], 0x1e6) syz_open_pts() 10:35:40 executing program 1: r0 = syz_open_pts() ioctl$TIOCSETAF(r0, 0x802c7416, &(0x7f0000000080)={0x0, 0x0, 0x90d2, 0x0, "d730c1e7ab6fc6e23c5b00000000000000e74de4"}) write(r0, &(0x7f0000000180)="582720efabd16ebae63225259560f8e5815f73f2a044fd33055552fbd5e41789632dfc94ff334a5619515a4c8ab06198824b3da025bbd47b3bf579456fc7d4096e8c8b6b87cb2d72b8bcdb9ad8a4f5f728193ef16ab93f12fc4d5f16b136a5d00d1628b53a", 0x65) write(r0, &(0x7f0000000480)="bd0c4e2591c321a8cf98848e4a8051bd24313dea8d03c50e05e2d3280d33ee6185c6a19e1a3fbed9d7c7f5ecd505370f55d9bb05dc03e23ac168a0237f559b7cb5e32d0ff2d4e7199679daa987423cab21c6b2748aaa78947da61d75bc902887f01309bbe061a751731e5c2091f3e9bdd11c4518138f7d1d07000000f34322c0cdf8648bc7c2dbc9a839cfebcdd79cd66c3140972d2eae1f3c146ed5ead47dfc43c6c3b0", 0xa4) r1 = syz_open_pts() close(r0) read(r0, &(0x7f0000000300)=""/134, 0x86) r2 = dup(r1) r3 = syz_open_pts() fcntl$setstatus(r3, 0x4, 0x48) ioctl$TIOCSETA(r3, 0x802c7414, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x0, "85495510020000000000001167f5bfa600"}) shmget$private(0x0, 0x4000, 0x4, &(0x7f0000ff9000/0x4000)=nil) ioctl$TIOCSTOP(r3, 0x2000746f) ioctl$TIOCSETA(r3, 0x802c7414, &(0x7f00000000c0)={0x0, 0x0, 0x1, 0x1000000d0f, "b04d7426c32a100000a0059ed20a8357d3c000"}) write(r2, &(0x7f0000000200)="13647915598d4bf9d4952d89fd88c410570e4bfffaecadee941cc47a449966753375aeb4a1cee402f5475c70ea100abd170f0c2b03125be46bb7285830f93573bfc73c76bdbdec5a88423538a0ad6400ffd6522aa38e6daa90198044bf47166473e61de9088c41be7230d853cb586620c86317b46b73b31b0f5f211cb7ed743c981010e49da1071ee51627ed9119d25bdf076fded99ef5970ebf4aecf35dec60fc38eb686eb1477b6d7f2cf79e6e84d70f332892d90e9c6d3069cbafa798ad5be14ac2af6e1473289e1988db9dae6530562103", 0xd3) read(r3, &(0x7f0000000880)=""/161, 0xa1) ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000000)={0x7, 0x81, 0x1, 0xd6, "32e70d5d0560d741e520dab67f4a1ad2f4360db2", 0x0, 0x5c}) 10:35:40 executing program 0: getgroups(0x7, &(0x7f0000000100)=[0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0]) getgroups(0x5, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, r0]) minherit(&(0x7f0000475000/0x4000)=nil, 0x4000, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket(0x18, 0x1, 0x0) setsockopt(r1, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) setsockopt(r1, 0x1000000029, 0x2e, &(0x7f0000000040)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) 10:35:40 executing program 1: socket$inet6(0x18, 0x2, 0x648) r0 = socket(0x18, 0x2, 0x0) setsockopt(r0, 0x1000000000029, 0x20000002a, &(0x7f00000001c0)="01000000", 0x4) 10:35:40 executing program 0: mknod(&(0x7f0000000040)='./bus\x00', 0x80002005, 0x4300) socket(0x1a, 0x4006, 0x80000000) r0 = open$dir(&(0x7f0000000080)='./bus\x00', 0x381, 0x0) r1 = dup2(r0, r0) ioctl$WSDISPLAYIO_WSMOUSED(r1, 0x80185758, &(0x7f0000000000)={0x0, 0xffffffff, {0xd8}}) r2 = dup(r0) ioctl$WSKBDIO_SETMODE(r2, 0x20005701, &(0x7f0000000140)=0x20000000001) 10:35:40 executing program 1: mknod(&(0x7f0000000000)='./bus\x00', 0x10000000002000, 0x4503) r0 = open(&(0x7f00000004c0)='./bus\x00', 0x200004000e, 0x0) ioctl$WSMUXIO_ADD_DEVICE(r0, 0x80085761, &(0x7f0000000080)={0x3}) ioctl$TIOCMGET(r0, 0x4004746a, &(0x7f0000000040)) ioctl$WSMUXIO_ADD_DEVICE(r0, 0x80085761, &(0x7f00000000c0)={0x3, 0xffffffff7fffffff}) ioctl$TIOCCLRVERAUTH(r0, 0x2000741d) openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/wsmouse\x00', 0x0, 0x0) 10:35:40 executing program 0: mknod(&(0x7f0000000040)='./file0\x00', 0x2003, 0x1700) r0 = open$dir(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TIOCCONS(r1, 0x20004276, 0x0) ioctl$TIOCCONS(r1, 0x80047462, &(0x7f0000000000)=0x7) ioctl$TIOCMSET(r1, 0x20004268, 0x0) panic: mallocarray: overflow 18446744071562067968 * 8 Stopped at db_enter+0x18: addq $0x8,%rsp TID PID UID PRFLAGS PFLAGS CPU COMMAND *187206 59077 0 0 0x4000000 0 syz-executor.1 db_enter() at db_enter+0x18 panic() at panic+0x15c filt_pppx_rdetach(ffffffff80000000) at filt_pppx_rdetach wsmux_getmux(7fffffff) at wsmux_getmux+0x71 wsmux_add_mux(7fffffff,ffff800001944800) at wsmux_add_mux+0x2f VOP_IOCTL(fffffd8032199bf0,80085761,ffff8000149fc370,f,fffffd803f7c6480,ffff8000ffff99d0) at VOP_IOCTL+0x9a vn_ioctl(fffffd802fa28010,80085761,ffff8000149fc370,ffff8000ffff99d0) at vn_ioctl+0xc9 sys_ioctl(ffff8000ffff99d0,ffff8000149fc4b8,ffff8000149fc4a0) at sys_ioctl+0x638 syscall(ffff8000149fc550) at syscall+0x541 Xsyscall(6,0,ffffffffffffff86,0,3,e58cf7d2010) at Xsyscall+0x128 end of kernel end trace frame: 0xe5b6259f060, count: 5 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb> ddb> set $lines = 0 ddb> set $maxwidth = 0 ddb> show panic mallocarray: overflow 18446744071562067968 * 8 ddb> trace db_enter() at db_enter+0x18 panic() at panic+0x15c filt_pppx_rdetach(ffffffff80000000) at filt_pppx_rdetach wsmux_getmux(7fffffff) at wsmux_getmux+0x71 wsmux_add_mux(7fffffff,ffff800001944800) at wsmux_add_mux+0x2f VOP_IOCTL(fffffd8032199bf0,80085761,ffff8000149fc370,f,fffffd803f7c6480,ffff8000ffff99d0) at VOP_IOCTL+0x9a vn_ioctl(fffffd802fa28010,80085761,ffff8000149fc370,ffff8000ffff99d0) at vn_ioctl+0xc9 sys_ioctl(ffff8000ffff99d0,ffff8000149fc4b8,ffff8000149fc4a0) at sys_ioctl+0x638 syscall(ffff8000149fc550) at syscall+0x541 Xsyscall(6,0,ffffffffffffff86,0,3,e58cf7d2010) at Xsyscall+0x128 end of kernel end trace frame: 0xe5b6259f060, count: -10 ddb> show registers rdi 0xffffffff81da7667 db_enter+0x17 rsi 0x18d2 __ALIGN_SIZE+0x8d2 rbp 0xffff8000149fbfb0 rbx 0xffff8000149fc060 rdx 0x18d3 __ALIGN_SIZE+0x8d3 rcx 0xffff80000093b000 rax 0xffff80000093b000 r8 0xffff8000149fbf70 r9 0x1 r10 0xffff8000009369c0 r11 0x5c4760ee296e57cd r12 0x3000000008 r13 0xffff8000149fbfc0 r14 0x100 r15 0x1 rip 0xffffffff81da7668 db_enter+0x18 cs 0x8 rflags 0x246 rsp 0xffff8000149fbfa0 ss 0x10 db_enter+0x18: addq $0x8,%rsp ddb> show proc PROC (syz-executor.1) pid=187206 stat=onproc flags process=0 proc=4000000 pri=50, usrpri=50, nice=20 forw=0xffffffffffffffff, list=0xffff8000ffff8008,0xffff8000ffff8720 process=0xffff8000ffff6010 user=0xffff8000149f7000, vmspace=0xfffffd803f014318 estcpu=0, cpticks=0, pctcpu=0.0 user=0, sys=0, intr=0 ddb> ps PID TID PPID UID S FLAGS WAIT COMMAND 96671 414525 39152 0 2 0 syz-executor.0 59077 219693 81595 0 2 0 syz-executor.1 *59077 187206 81595 0 7 0x4000000 syz-executor.1 39152 382676 49435 0 3 0x82 nanosleep syz-executor.0 81595 153485 49435 0 3 0x82 nanosleep syz-executor.1 49435 437617 11582 0 3 0x82 thrsleep syz-fuzzer 49435 52905 11582 0 3 0x4000082 thrsleep syz-fuzzer 49435 277711 11582 0 3 0x4000082 thrsleep syz-fuzzer 49435 326011 11582 0 3 0x4000082 thrsleep syz-fuzzer 49435 419962 11582 0 3 0x4000082 thrsleep syz-fuzzer 49435 431197 11582 0 3 0x4000082 thrsleep syz-fuzzer 49435 463012 11582 0 3 0x4000082 thrsleep syz-fuzzer 49435 34123 11582 0 3 0x4000082 kqread syz-fuzzer 11582 126600 38985 0 3 0x10008a pause ksh 38985 421475 45328 0 3 0x92 select sshd 69247 488297 1 0 3 0x100083 ttyin getty 45328 186585 1 0 3 0x80 select sshd 69157 195067 14124 73 3 0x100090 kqread syslogd 14124 212195 1 0 3 0x100082 netio syslogd 39364 415687 1 77 3 0x100090 poll dhclient 10088 388235 1 0 3 0x80 poll dhclient 2523 501453 0 0 2 0x14200 zerothread 54133 384633 0 0 3 0x14200 aiodoned aiodoned 61773 100346 0 0 3 0x14200 syncer update 76704 435921 0 0 3 0x14200 cleaner cleaner 87960 256235 0 0 3 0x14200 reaper reaper 63639 15338 0 0 3 0x14200 pgdaemon pagedaemon 85391 336502 0 0 3 0x14200 bored crynlk 4977 236383 0 0 3 0x14200 bored crypto 29578 233799 0 0 3 0x40014200 acpi0 acpi0 38862 367101 0 0 3 0x14200 bored softnet 15743 256495 0 0 3 0x14200 bored systqmp 76445 101156 0 0 3 0x14200 bored systq 11942 25270 0 0 3 0x40014200 bored softclock 17716 257657 0 0 3 0x40014200 idle0 65250 30057 0 0 3 0x14200 bored smr 1 406412 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb> show all locks No such command ddb> show malloc Type InUse MemUse HighUse Limit Requests Type Lim Kern Lim devbuf 9442 6319K 6319K 78643K 10544 0 0 pcb 23 9K 9K 78643K 61 0 0 rtable 97 2K 2K 78643K 167 0 0 ifaddr 34 9K 9K 78643K 34 0 0 counters 19 16K 16K 78643K 19 0 0 ioctlops 0 0K 2K 78643K 15 0 0 iov 0 0K 8K 78643K 4 0 0 mount 1 1K 1K 78643K 1 0 0 vnodes 1198 75K 75K 78643K 1222 0 0 UFS quota 1 32K 32K 78643K 1 0 0 UFS mount 5 36K 36K 78643K 5 0 0 shm 2 1K 5K 78643K 4 0 0 VM map 2 0K 0K 78643K 2 0 0 sem 10 0K 0K 78643K 10 0 0 dirhash 12 2K 2K 78643K 12 0 0 ACPI 1793 195K 288K 78643K 12537 0 0 file desc 6 17K 21K 78643K 40 0 0 proc 40 30K 46K 78643K 251 0 0 subproc 64 65538K 67586K 78643K 68 0 0 NFS srvsock 1 0K 0K 78643K 1 0 0 NFS daemon 1 16K 16K 78643K 1 0 0 ip_moptions 0 0K 0K 78643K 7 0 0 in_multi 33 2K 2K 78643K 39 0 0 ether_multi 1 0K 0K 78643K 3 0 0 ISOFS mount 1 32K 32K 78643K 1 0 0 MSDOSFS mount 1 16K 16K 78643K 1 0 0 ttys 42 185K 185K 78643K 42 0 0 exec 0 0K 1K 78643K 165 0 0 pagedep 1 8K 8K 78643K 1 0 0 inodedep 1 32K 32K 78643K 1 0 0 newblk 1 0K 0K 78643K 1 0 0 VM swap 7 26K 26K 78643K 7 0 0 UVM amap 75 20K 20K 78643K 823 0 0 UVM aobj 4 2K 2K 78643K 4 0 0 memdesc 1 4K 4K 78643K 1 0 0 crypto data 1 1K 1K 78643K 1 0 0 ip6_options 0 0K 0K 78643K 5 0 0 NDP 5 0K 0K 78643K 9 0 0 temp 79 2344K 2408K 78643K 2839 0 0 SYN cache 2 16K 16K 78643K 2 0 0 ddb> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle arp 64 4 0 0 1 0 1 1 0 8 0 inpcbpl 280 44 0 37 1 0 1 1 0 8 0 plimitpl 152 14 0 7 1 0 1 1 0 8 0 rtentry 112 41 0 1 2 0 2 2 0 8 0 syncache 264 4 0 4 1 1 0 1 0 8 0 tcpcb 544 22 0 18 1 0 1 1 0 8 0 nd6 48 4 0 0 1 0 1 1 0 8 0 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 186 0 0 12 0 12 12 0 8 0 art_table 32 187 0 0 2 0 2 2 0 8 0 art_node 16 40 0 6 1 0 1 1 0 8 0 semapl 112 8 0 0 1 0 1 1 0 8 0 shmpl 112 2 0 0 1 0 1 1 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino1pl 128 1473 0 68 46 0 46 46 0 8 0 ffsino 240 1473 0 68 83 0 83 83 0 8 0 nchpl 144 1726 0 104 61 0 61 61 0 8 0 uvmvnodes 72 1518 0 0 28 0 28 28 0 8 0 vnodes 200 1518 0 0 80 0 80 80 0 8 0 namei 1024 4161 0 4161 2 1 1 1 0 8 1 scxspl 192 4072 0 4072 7 3 4 6 0 8 4 sigapl 432 208 0 194 2 0 2 2 0 8 0 futexpl 56 473 0 473 1 0 1 1 0 8 1 knotepl 112 67 0 40 2 0 2 2 0 8 1 kqueuepl 104 4 0 2 1 0 1 1 0 8 0 pipepl 112 138 0 119 2 1 1 1 0 8 0 fdescpl 424 209 0 194 2 0 2 2 0 8 0 filepl 120 1078 0 983 4 0 4 4 0 8 1 lockfpl 104 8 0 8 2 1 1 1 0 8 1 lockfspl 32 4 0 4 2 1 1 1 0 8 1 sessionpl 112 17 0 7 1 0 1 1 0 8 0 pgrppl 48 19 0 9 1 0 1 1 0 8 0 ucredpl 96 118 0 111 1 0 1 1 0 8 0 zombiepl 144 194 0 194 2 1 1 1 0 8 1 processpl 840 223 0 194 4 0 4 4 0 8 0 procpl 600 257 0 220 4 0 4 4 0 8 1 sockpl 384 88 0 71 3 0 3 3 0 8 1 mcl12k 12288 1 0 1 1 0 1 1 0 8 1 mcl8k 8192 1 0 1 1 0 1 1 0 8 1 mcl4k 4096 9 0 9 2 1 1 1 0 8 1 mcl2k 2048 46202 0 46167 12 2 10 10 0 8 5 mtagpl 80 2 0 2 1 1 0 1 0 8 0 mbufpl 256 75432 0 75349 8 2 6 6 0 8 0 bufpl 256 5295 0 1069 265 0 265 265 0 8 0 anonpl 16 28093 0 19830 36 2 34 34 0 62 0 amapchunkpl 152 802 0 722 5 0 5 5 0 158 1 amappl16 192 600 0 160 23 0 23 23 0 8 0 amappl15 184 13 0 10 1 0 1 1 0 8 0 amappl14 176 39 0 33 1 0 1 1 0 8 0 amappl13 168 23 0 20 1 0 1 1 0 8 0 amappl12 160 8 0 8 1 1 0 1 0 8 0 amappl11 152 189 0 179 1 0 1 1 0 8 0 amappl10 144 54 0 53 2 1 1 1 0 8 0 amappl9 136 352 0 348 1 0 1 1 0 8 0 amappl8 128 114 0 100 1 0 1 1 0 8 0 amappl7 120 21 0 19 1 0 1 1 0 8 0 amappl6 112 61 0 55 1 0 1 1 0 8 0 amappl5 104 136 0 124 1 0 1 1 0 8 0 amappl4 96 266 0 243 2 1 1 2 0 8 0 amappl3 88 126 0 118 1 0 1 1 0 8 0 amappl2 80 844 0 794 2 0 2 2 0 8 0 amappl1 72 12660 0 12252 25 10 15 19 0 8 5 amappl 72 467 0 435 1 0 1 1 0 75 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma64 64 259 0 259 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 17 0 17 1 1 0 1 0 8 0 aobjpl 64 3 0 0 1 0 1 1 0 8 0 uaddrrnd 24 209 0 194 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 209 0 194 1 0 1 1 0 8 0 vmmpekpl 168 5574 0 5558 1 0 1 1 0 8 0 vmmpepl 168 29033 0 27639 87 14 73 73 0 357 12 vmsppl 264 208 0 194 2 0 2 2 0 8 1 pdppl 4096 424 0 388 5 0 5 5 0 8 0 pvpl 32 107806 0 96578 100 5 95 97 0 265 3 pmappl 192 208 0 194 1 0 1 1 0 8 0 extentpl 40 39 0 25 1 0 1 1 0 8 0 phpool 112 397 0 8 12 0 12 12 0 8 0