last executing test programs: 3.432221732s ago: executing program 2 (id=3): bind$unix(0xffffffffffffffff, &(0x7f0000000100)=@abs={0x1f95d27d48731892, 0x0, 0x1}, 0x8) sysctl$hw(&(0x7f0000001100)={0x7, 0xf}, 0x2, &(0x7f0000001100), 0x0, 0x0, 0x0) sysctl$net_inet_tcp(&(0x7f00000000c0)={0x4, 0x2, 0x6, 0x9}, 0x4, &(0x7f0000000000)="9b1809ffffffffffffff7f473f11e1a4e5f2f9f220ef7f0abdbc34fe42021588dc8ff44f4b76c76d41859d85ea800dabe467badf35b6fd74c94d1b44", &(0x7f0000000040)=0x10011, 0x0, 0x0) 3.248961609s ago: executing program 2 (id=9): setrlimit(0x8, &(0x7f0000000040)={0x7, 0x50}) r0 = syz_open_pts() close(r0) syz_open_pts() r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) close(r2) r3 = syz_open_pts() ioctl$TIOCSETAW(r3, 0x802c7415, &(0x7f0000000080)={0x29f56361, 0x1, 0xffffffff, 0xfffffff8, "097237e31201f1774af00a56d864d3c3a3f4d3c0", 0xa, 0x9}) openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) lseek(r0, 0x2, 0x2) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000440)="d126ab9b5b57b110acb13c1c0d5aed1f576511ba2ff570d1bd75ce8a03e122196adf24e7729eaac022fb5610927b3d8dd6b932c181c3afadd99db8f321362c45dc80f52a9e8f2efedb2c48426e79903746f33ee9ceb1ea342aef9e50680db3e07432edf66e1bd0ea6ef0af7fbe805abcc386f00de0f4c337aa8f9aa0f429458e255776554a2d7e97c39b56aa80b9e30556b448395d50782211780de2d509b9ab69", 0xa1}], 0x1) 3.248550781s ago: executing program 2 (id=10): mkdir(&(0x7f0000000040)='./file2\x00', 0xc1) sysctl$hw(&(0x7f0000000040)={0x7, 0x10}, 0x2, &(0x7f00000000c0)="0ff3324c596fd435", &(0x7f0000000080)=0x8, 0x0, 0x0) open$dir(&(0x7f0000000140)='./file2/file0\x00', 0x200, 0x2) mknod(&(0x7f00000001c0)='./file2/file0\x00', 0x2000, 0x8) r0 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0) getdents(r0, 0x0, 0x1285ffa2) rename(&(0x7f00000003c0)='.\x00', &(0x7f0000000400)='.\x00') socketpair$unix(0x1, 0x5, 0x0, 0xffffffffffffffff) 3.247938439s ago: executing program 4 (id=5): msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000000)={{0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f00000003c0)={0x0, 0x0, {[0x2be00000000000, 0x1, 0x2, 0x1, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x2eff, 0x2, 0x3, 0xffffffffffffffff, 0x0, 0x8000000, 0xaa, 0x2000000000002, 0xce7], [0xfffffffffffffffe, 0x1, 0xfffffffffffffffb, 0x8000ffffffff, 0xf9, 0x7b99, 0x201, 0x2000c, 0x6, 0x3], [0x2, 0xfffffffffffffffb, 0x40000000, 0x4, 0xffffffffffffffff, 0x10fff, 0xfff7fffffffffffe], [0x3, 0x20000000000, 0x401, 0x100000000, 0xffffffffffefffff, 0x6], [{0x8, 0x5, 0x400, 0x7d06}, {0xfffc, 0x7, 0x5, 0x2}, {0x10, 0x101, 0x1, 0x814}, {0x3, 0x5, 0x9, 0x80000004}, {0x10, 0x2, 0x0, 0x80a}, {0x400b, 0x2003, 0x3fffe, 0x4}, {0x1, 0x20000, 0x4, 0x9}, {0x0, 0x965, 0x3, 0x9}], {0x2400, 0x8, 0x10000}, {0x0, 0xfffffffc, 0x3, 0x2}}}) setrlimit(0x8, &(0x7f0000000980)={0xa, 0x54}) r0 = syz_open_pts() close(r0) syz_open_pts() ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000380)={0x751, 0x80806b, 0xd, 0xa, "03cc00", 0x2000008a, 0x5}) write(r0, &(0x7f0000000240)="c570a4a5bbebc12d2a91854a3269facb1316b1dbefdc29ce59a480cfbf608dea9c620e5c769e41325bb05beb095558da1082977cecf0ae7465d33a476b2bf8d8323faf622b829cdd2def3aebda43f9d65bdedac3153eaa24e781fe6c886078dc1997598181a8a2b44b588cefa7fe886b4990181ebd182952bc83b084eeaf3c75abd47f349f01f6", 0xfead) r1 = socket(0x18, 0x1, 0x0) setsockopt(r1, 0x1000000029, 0xc, &(0x7f0000000040)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) setsockopt(r1, 0x1000000029, 0xd, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x80000000002) 3.229877685s ago: executing program 2 (id=12): mknod(&(0x7f0000000240)='./file0\x00', 0x1ffa, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x8, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x800, 0x92) r0 = open(&(0x7f0000000080)='./file0\x00', 0x18289, 0x138) sysctl$kern(&(0x7f00000000c0)={0x1, 0x45}, 0x3, &(0x7f0000002480)="71f91eca6e530c79e2f8e2a2ce3471ac0058bc5a91501d94a34bfec38a820600000000000000dc0225f0e4cf52b7d99d15d923", &(0x7f0000000080)=0x1232, 0x0, 0xfffffffffffffe4d) pwrite(r0, 0x0, 0x0, 0x8001) 3.15008597s ago: executing program 0 (id=1): setrlimit(0x8, &(0x7f0000000980)={0x8, 0x54}) close(0xffffffffffffffff) syz_open_pts() msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0xb, 0x0, 0x0, 0x0, 0x0, 0x84, 0x3ff}, 0x400, 0xe, 0x0, 0x0, 0x200000001, 0x80000000000010c, 0x4, 0x6}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xff0a, 0x0, 0x37) ioctl$TIOCSETD(0xffffffffffffffff, 0x8004741b, 0x0) getgroups(0x1, &(0x7f0000000140)=[0xffffffffffffffff]) mknod(&(0x7f0000000040)='./file0\x00', 0x118a, 0x0) open$dir(&(0x7f0000000040)='./file0\x00', 0x200, 0x0) ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x100, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000040)={0x2, &(0x7f00000000c0)=[{0x0, 0x0, 0x5, 0x2}, {0x3, 0x0, 0x0, 0x4}]}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x31}, 0x4, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0x37) select(0x40, &(0x7f0000000000)={0xfffffffffffffffd, 0x0, 0xdc4, 0x564, 0x9ce8, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0) select(0x40, &(0x7f0000000000)={0xbffffffffffffffd, 0xfffffffffffffffe, 0x5, 0x564, 0x9ce5, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffd}, 0x0, 0x0, 0x0) setregid(r0, r0) ioctl$TIOCSETAF(0xffffffffffffffff, 0x802c7416, 0x0) writev(0xffffffffffffffff, &(0x7f0000000700)=[{&(0x7f0000000080)="34eb", 0x2}], 0x1) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0xffffffff, 0xb, {0x0, 0x1}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket(0x18, 0x1, 0x0) setsockopt(r1, 0x1000000029, 0xc, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) setsockopt(r1, 0x1000000029, 0xa, 0x0, 0x0) ioctl$TIOCDRAIN(0xffffffffffffffff, 0x2000745e) unveil(0x0, &(0x7f0000000080)='c\x00') 3.075219588s ago: executing program 4 (id=20): mknod(&(0x7f00000000c0)='./file0\x00', 0x1ffa, 0x0) sysctl$hw(&(0x7f0000000080)={0x6, 0x18}, 0x2, &(0x7f0000001540)="4f3c0000f0a2ff3c", &(0x7f0000000000)=0x8, 0x0, 0x0) r0 = socket(0x1, 0x2, 0x1) ioctl$FIONREAD(r0, 0xc0106978, &(0x7f00000001c0)) sendto$inet(r0, &(0x7f0000000100)="077fa211376aa548129fc42e96a5c66fbeda4bddb78b05f0c7d600eedc213aff4fe3315791e99410654a796b123876f13d20bf6186b8b48d491aded778d7335f7f232b06", 0x44, 0x6, &(0x7f0000000180)={0x2, 0x3}, 0xc) lchown(&(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, 0xffffffffffffffff) r1 = openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$WSDISPLAYIO_GETEMULTYPE(r1, 0xc014575e, &(0x7f0000000080)={0x4f, '.\x00'}) 2.988364884s ago: executing program 2 (id=22): msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x4, 0x0, 0x0, 0x0, 0x0, 0x199, 0x7}, 0x85c, 0x4, 0x0, 0x0, 0x80000000003, 0x4000000000007b, 0x2, 0x8000004}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x45}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$kern(&(0x7f0000000100)={0x1, 0x2d}, 0x400000000000023e, &(0x7f0000000200)="71f908000043000000000000e621eb6bba0b87cb2c0c9b48", &(0x7f00000001c0)=0x1c, 0x0, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="00001c00ac14"]) pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = getppid() fcntl$setown(r1, 0x6, r2) syz_emit_ethernet(0x138, &(0x7f0000000140)=ANY=[@ANYRESOCT=r2]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r3 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) close(r3) r4 = socket(0x18, 0x1, 0x0) setsockopt(r4, 0x1000000000029, 0x9, &(0x7f0000000040)="03000000", 0x4) setsockopt(r4, 0x1000000000029, 0xa, &(0x7f0000000340)='\x00\"\x00\x00', 0x4) sendmsg$unix(0xffffffffffffffff, &(0x7f0000002a40)={0x0, 0xffffffffffffff89, 0x0, 0x6e}, 0x0) r5 = socket(0x2, 0x2, 0x0) connect$unix(r5, &(0x7f0000000040)=@abs={0x0, 0x0, 0x1}, 0x8) r6 = socket(0x2, 0x4001, 0x0) setsockopt$sock_int(r6, 0xffff, 0x4, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) sendmmsg(r3, &(0x7f0000000380)={0x0, 0x8}, 0xa66f1f68c3106312, 0x0) ioctl$KDDISABIO(r0, 0x20004b3d) 2.987447625s ago: executing program 32 (id=22): msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x4, 0x0, 0x0, 0x0, 0x0, 0x199, 0x7}, 0x85c, 0x4, 0x0, 0x0, 0x80000000003, 0x4000000000007b, 0x2, 0x8000004}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x45}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$kern(&(0x7f0000000100)={0x1, 0x2d}, 0x400000000000023e, &(0x7f0000000200)="71f908000043000000000000e621eb6bba0b87cb2c0c9b48", &(0x7f00000001c0)=0x1c, 0x0, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="00001c00ac14"]) pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = getppid() fcntl$setown(r1, 0x6, r2) syz_emit_ethernet(0x138, &(0x7f0000000140)=ANY=[@ANYRESOCT=r2]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r3 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) close(r3) r4 = socket(0x18, 0x1, 0x0) setsockopt(r4, 0x1000000000029, 0x9, &(0x7f0000000040)="03000000", 0x4) setsockopt(r4, 0x1000000000029, 0xa, &(0x7f0000000340)='\x00\"\x00\x00', 0x4) sendmsg$unix(0xffffffffffffffff, &(0x7f0000002a40)={0x0, 0xffffffffffffff89, 0x0, 0x6e}, 0x0) r5 = socket(0x2, 0x2, 0x0) connect$unix(r5, &(0x7f0000000040)=@abs={0x0, 0x0, 0x1}, 0x8) r6 = socket(0x2, 0x4001, 0x0) setsockopt$sock_int(r6, 0xffff, 0x4, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) sendmmsg(r3, &(0x7f0000000380)={0x0, 0x8}, 0xa66f1f68c3106312, 0x0) ioctl$KDDISABIO(r0, 0x20004b3d) 2.868456492s ago: executing program 4 (id=26): open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x186) (async) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x186) r1 = syz_open_pts() ioctl$TIOCFLUSH(r1, 0x80047410, &(0x7f00000012c0)=0x4) r2 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket(0x18, 0x2, 0x0) setsockopt(r3, 0x1000000029, 0x3b, 0x0, 0x0) ioctl$WSDISPLAYIO_USEFONT(r2, 0x80585750, &(0x7f0000000100)={'./file0\x00', 0x9, 0xb882, 0x5b, 0x1, 0x3, 0x7ca, 0x1, 0x1, 0x2, 0x8, 0xffffffffffffff81}) (async) ioctl$WSDISPLAYIO_USEFONT(r2, 0x80585750, &(0x7f0000000100)={'./file0\x00', 0x9, 0xb882, 0x5b, 0x1, 0x3, 0x7ca, 0x1, 0x1, 0x2, 0x8, 0xffffffffffffff81}) syz_open_pts() (async) r4 = syz_open_pts() preadv(0xffffffffffffffff, &(0x7f0000000700)=[{0x0}], 0x1, 0x5) poll(&(0x7f0000000040)=[{r4, 0xa1}], 0x1, 0x7ff) dup2(r0, r4) 2.748054408s ago: executing program 6 (id=32): r0 = socket$inet(0x2, 0x2, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) r1 = open(&(0x7f0000000040)='./file0\x00', 0x2, 0x102) ioctl$FIONREAD(r1, 0xc0206983, &(0x7f0000000100)) lseek(0xffffffffffffffff, 0x800, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x1042, 0x0, 0x0) 2.716875754s ago: executing program 0 (id=33): r0 = socket(0x2, 0x1, 0x0) ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x0, 0xb3f, {[0xfffffbfffffffffb, 0x0, 0x8, 0x100200000, 0x6, 0x7, 0xdf60, 0xfffffffffffffffe, 0x0, 0x2f01, 0x93, 0x3, 0xffffffffffffffff, 0x200000000002, 0xf, 0x4, 0xfffffffffffffffe, 0x400000000100], [0xfffffffffffffffe, 0x80000001, 0xfffffffffffffffd, 0x20000001, 0x5e, 0x200000000207b98, 0x80000000000001fe, 0x0, 0x0, 0x9], [0x100000001, 0x8000, 0x40000000, 0x0, 0xb, 0x11000, 0xffffffff00000000], [0x104, 0x1fffffffffb, 0x7ffffffffffffffc, 0x100000000, 0xfffffffffffffffe, 0x1], [{0x0, 0x0, 0x0, 0x7d02}, {0xfffc, 0x22, 0x5, 0xfffffffffffffff9}, {0x4, 0x0, 0xfffffffe, 0x80}, {0x3, 0x4, 0x5, 0xffffffffffffffff}, {0x0, 0x2, 0x7f, 0x8}, {0x0, 0x9, 0x9, 0x2000000000000002}, {0x0, 0x0, 0xfffffff9}, {0x0, 0x100, 0x0, 0x8}], {0x1, 0x5, 0x7, 0x3}, {0xfbfe, 0x3, 0x6d5, 0x4}}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r2, &(0x7f0000000200)={0x0}, 0x10, 0x1800, &(0x7f00000005c0)={0x3}) r3 = shmget$private(0x0, 0x3000, 0x602, &(0x7f0000ffa000/0x3000)=nil) shmctl$IPC_SET(r3, 0x1, 0x0) shmat(r3, &(0x7f0000001000/0x3000)=nil, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r4 = socket(0x2, 0x400000000002, 0x0) setsockopt(r4, 0x0, 0x6, &(0x7f0000000180)="b1f5d915", 0x4) setsockopt$sock_int(r0, 0xffff, 0x1021, &(0x7f0000000040)=0x5, 0x4) 2.716467952s ago: executing program 1 (id=34): r0 = socket(0x2, 0x2, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="00001c00ac14"]) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) connect$unix(r0, &(0x7f0000000000), 0x10) write(r0, 0x0, 0x0) close(r0) mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) r1 = open(&(0x7f0000000040)='./file0\x00', 0x2, 0x102) ioctl$FIONREAD(r1, 0xc02069a0, &(0x7f0000000100)) ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x0, 0xb3f, {[0xfffffbfffffffffb, 0x0, 0x8, 0x100200000, 0x6, 0x7, 0xdf60, 0xfffffffffffffffe, 0x0, 0x2f01, 0x93, 0x3, 0xffffffffffffffff, 0x200000000002, 0xf, 0x4, 0xfffffffffffffffe, 0x400000000100], [0xfffffffffffffffe, 0x80000001, 0xfffffffffffffffd, 0x525, 0x5e, 0x200000000207b98, 0x80000000000001fe, 0x0, 0x0, 0x9], [0x100000001, 0x8000, 0x3ffffffe, 0x0, 0xb, 0x11000, 0xffffffff00000000], [0x104, 0x1fffffffffb, 0x7ffffffffffffffc, 0x100000000, 0xfffffffffffffffe, 0x1], [{0x0, 0x0, 0x0, 0x7d02}, {0xfffc, 0x22, 0x5, 0xfffffffffffffff9}, {0x4, 0x0, 0xfffffffe, 0x80}, {0x3, 0x4, 0x5, 0xffffffffffffffff}, {0x0, 0x2, 0x7f, 0x8}, {0x0, 0x9, 0x9, 0x2000000000000002}, {0x0, 0x1000, 0xfffffff9}, {0x0, 0x100, 0x0, 0x8}], {0x1, 0x5, 0x7, 0x3}, {0x3, 0x3, 0x6d5, 0x4}}}) r2 = kqueue() socket(0x11, 0x3, 0x0) kevent(r2, &(0x7f0000000000), 0x3ff, 0x0, 0x8000800, 0x0) 2.716009471s ago: executing program 8 (id=23): ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x4, 0x0, 0x0, 0xfffffffe}, {0x2, 0x0, 0x0, 0xffffffff}, {0x2, 0x0, 0x0, 0xffffffff}]}) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$BIOCSRTIMEOUT(r0, 0x8010426d, &(0x7f0000000140)={0xc000000000, 0x9}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0xffac) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x4, 0x0, 0x0, 0xfffffffe}, {0x2, 0x0, 0x0, 0xffffffff}, {0x2, 0x0, 0x0, 0xffffffff}]}) (async) openat$bpf(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) (async) ioctl$BIOCSRTIMEOUT(r0, 0x8010426d, &(0x7f0000000140)={0xc000000000, 0x9}) (async) sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0xffac) (async) 2.71122151s ago: executing program 6 (id=37): r0 = fcntl$dupfd(0xffffffffffffff9c, 0xa, 0xffffffffffffff9c) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0x800000004, [{&(0x7f0000ffd000/0x3000)=nil, &(0x7f00000b7000/0x3000)=nil, 0x200007fffffffffe}, {&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000417000/0x3000)=nil, 0x7fffffffffffffff}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000795000/0x2000)=nil, 0xb93a}, {&(0x7f00001da000/0x4000)=nil, &(0x7f00006d4000/0x2000)=nil, 0xfdfffffffffffff9}, {&(0x7f00000f4000/0x3000)=nil, &(0x7f0000025000/0x3000)=nil, 0x4001}, {&(0x7f000060b000/0x2000)=nil, &(0x7f0000095000/0x3000)=nil, 0x1}, {&(0x7f0000123000/0x3000)=nil, &(0x7f000014d000/0x4000)=nil, 0x4}, {&(0x7f00002f3000/0x3000)=nil, &(0x7f000063b000/0x2000)=nil}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x6}, {&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000632000/0x4000)=nil, 0xc6}, {&(0x7f000064b000/0x2000)=nil, &(0x7f000038f000/0x4000)=nil, 0x1000}, {&(0x7f00006b8000/0x4000)=nil, &(0x7f0000688000/0x4000)=nil, 0x6}, {&(0x7f0000ff9000/0x3000)=nil, &(0x7f0000508000/0x2000)=nil, 0x51c}, {&(0x7f0000349000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0xfffffffffffffff9}, {&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x1000039fb}, {&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000754000/0x4000)=nil, 0x9e}], './file0\x00', 0xfffffffa}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = msgget$private(0x0, 0x1) msgctl$IPC_SET(r1, 0x1, &(0x7f0000000080)={{0x1000000a, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8000}, 0x1000001266, 0x2000000000003, 0x0, 0x0, 0x80000001, 0xfb5f, 0x8, 0x2}) msgget$private(0x0, 0x1) msgctl$IPC_RMID(r1, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x19, 0x0) fcntl$dupfd(r2, 0x2, 0xffffffffffffffff) r3 = dup2(r0, r2) sendto$inet6(r0, &(0x7f00000000c0)="d4cac357f18fd8d19f6afcad029ce9eef3e3dae8977c51953a615cb3fcef9b2eeb32bb2324a22a2dc46c771faaf41b7c8b87e578f63483d11910815f5fd10d2957dbd5788b595710dd010e47e089540679fd5dc756aab6d40b1389caa7b9f9a3dac229dd54ad2b72690513848cdfea9c4282a0e5e210356402e2d8ade017303e31b2f4d6d5e9b0e4b59118b17aeecbeed83a04d39946e1d80163806c61cb9fcff8de1f5a1c8459d43a1c07076075ea4a69e8dbfc1b386ddc19abca1715247470acba2283495cda25599bcd7bf6713a37bdfc4564757c8b63c41cb8080280b525e3c81d4c72b47beda8", 0xe9, 0x402, &(0x7f0000000040)={0x18, 0x3, 0x9}, 0xc) r4 = geteuid() setreuid(r4, 0xffffffffffffffff) sysctl$hw(&(0x7f0000000080)={0x6, 0x18}, 0x2, &(0x7f0000001540)="4f3c0000f0a2ff3c", &(0x7f0000000000)=0x8, 0x0, 0x0) setsockopt$inet6_MRT6_DEL_MFC(r3, 0x29, 0x69, &(0x7f00000001c0)={{0x18, 0x0, 0x6, 0x10001}, {0x18, 0x0, 0x8, 0x1d}, 0x9, [0x9, 0x800, 0xd, 0xe, 0x5, 0x9, 0x8, 0x2]}, 0x3c) fcntl$dupfd(0xffffffffffffff9c, 0xa, 0xffffffffffffff9c) (async) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0x800000004, [{&(0x7f0000ffd000/0x3000)=nil, &(0x7f00000b7000/0x3000)=nil, 0x200007fffffffffe}, {&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000417000/0x3000)=nil, 0x7fffffffffffffff}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000795000/0x2000)=nil, 0xb93a}, {&(0x7f00001da000/0x4000)=nil, &(0x7f00006d4000/0x2000)=nil, 0xfdfffffffffffff9}, {&(0x7f00000f4000/0x3000)=nil, &(0x7f0000025000/0x3000)=nil, 0x4001}, {&(0x7f000060b000/0x2000)=nil, &(0x7f0000095000/0x3000)=nil, 0x1}, {&(0x7f0000123000/0x3000)=nil, &(0x7f000014d000/0x4000)=nil, 0x4}, {&(0x7f00002f3000/0x3000)=nil, &(0x7f000063b000/0x2000)=nil}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x6}, {&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000632000/0x4000)=nil, 0xc6}, {&(0x7f000064b000/0x2000)=nil, &(0x7f000038f000/0x4000)=nil, 0x1000}, {&(0x7f00006b8000/0x4000)=nil, &(0x7f0000688000/0x4000)=nil, 0x6}, {&(0x7f0000ff9000/0x3000)=nil, &(0x7f0000508000/0x2000)=nil, 0x51c}, {&(0x7f0000349000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0xfffffffffffffff9}, {&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x1000039fb}, {&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000754000/0x4000)=nil, 0x9e}], './file0\x00', 0xfffffffa}) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) msgget$private(0x0, 0x1) (async) msgctl$IPC_SET(r1, 0x1, &(0x7f0000000080)={{0x1000000a, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8000}, 0x1000001266, 0x2000000000003, 0x0, 0x0, 0x80000001, 0xfb5f, 0x8, 0x2}) (async) msgget$private(0x0, 0x1) (async) msgctl$IPC_RMID(r1, 0x0) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x19, 0x0) (async) fcntl$dupfd(r2, 0x2, 0xffffffffffffffff) (async) dup2(r0, r2) (async) sendto$inet6(r0, &(0x7f00000000c0)="d4cac357f18fd8d19f6afcad029ce9eef3e3dae8977c51953a615cb3fcef9b2eeb32bb2324a22a2dc46c771faaf41b7c8b87e578f63483d11910815f5fd10d2957dbd5788b595710dd010e47e089540679fd5dc756aab6d40b1389caa7b9f9a3dac229dd54ad2b72690513848cdfea9c4282a0e5e210356402e2d8ade017303e31b2f4d6d5e9b0e4b59118b17aeecbeed83a04d39946e1d80163806c61cb9fcff8de1f5a1c8459d43a1c07076075ea4a69e8dbfc1b386ddc19abca1715247470acba2283495cda25599bcd7bf6713a37bdfc4564757c8b63c41cb8080280b525e3c81d4c72b47beda8", 0xe9, 0x402, &(0x7f0000000040)={0x18, 0x3, 0x9}, 0xc) (async) geteuid() (async) setreuid(r4, 0xffffffffffffffff) (async) sysctl$hw(&(0x7f0000000080)={0x6, 0x18}, 0x2, &(0x7f0000001540)="4f3c0000f0a2ff3c", &(0x7f0000000000)=0x8, 0x0, 0x0) (async) setsockopt$inet6_MRT6_DEL_MFC(r3, 0x29, 0x69, &(0x7f00000001c0)={{0x18, 0x0, 0x6, 0x10001}, {0x18, 0x0, 0x8, 0x1d}, 0x9, [0x9, 0x800, 0xd, 0xe, 0x5, 0x9, 0x8, 0x2]}, 0x3c) (async) 2.648770745s ago: executing program 5 (id=40): syz_open_pts() syz_open_pts() r0 = syz_open_pts() fsync(r0) 2.648301518s ago: executing program 6 (id=41): r0 = socket(0x11, 0x3, 0x0) setrlimit(0x8, &(0x7f0000000980)={0xb, 0x5c}) r1 = syz_open_pts() close(r1) syz_open_pts() ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000480)={0x5bd630b6, 0xac, 0x1, 0x5ffbfb60, "428f67177c7cfc4dff0000800000002100", 0x5, 0xffffffff}) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="608827623c64fc385cef418ac2e7b20d37c92fab4bac2ff8b8391d7a9771dca877b0a9ceee3063abae"}], 0x4) setrlimit(0x8, &(0x7f0000000980)={0x8, 0x54}) r2 = syz_open_pts() close(r2) r3 = syz_open_pts() close(r3) ioctl$TIOCSETD(r2, 0x8004741b, &(0x7f0000000000)=0x2) setsockopt$sock_linger(0xffffffffffffffff, 0xffff, 0x80, &(0x7f0000000080)={0x48}, 0x8) syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) writev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000000)="b886b4e47f", 0x5}], 0x1) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r4 = socket(0x2, 0x1, 0x0) bind(r4, &(0x7f0000000000), 0x10) r5 = dup(r4) listen(r5, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000000), 0x10) close(0xffffffffffffffff) accept$unix(r4, 0x0, 0x0) ioctl$TIOCSETAF(r2, 0x802c7416, &(0x7f0000000180)={0x409789, 0x10001, 0xfffffc08, 0x7df, "bb08000100f167d910508bc49d7323000000007e", 0x68, 0x4}) writev(r2, &(0x7f0000000700)=[{&(0x7f0000000080)="34eb4cd59e8456ebc0881681c60e1cd9e0bf01b618b3cb934394c5951c1db0fd943a", 0xff99}], 0x1) ioctl$TIOCDRAIN(r2, 0x2000745e) setsockopt(r0, 0x11, 0x3, &(0x7f0000000140)="12000000", 0x4) 2.200943583s ago: executing program 0 (id=42): r0 = open(&(0x7f0000000080)='./file0\x00', 0x18289, 0x190) socket$inet(0x2, 0x2, 0x0) socket$unix(0x1, 0x5, 0x0) socket(0x11, 0x3, 0x0) ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x7, 0x9, {[0xfffffbfffffffffb, 0x1, 0x2, 0x100200000, 0x6, 0x7, 0xdf60, 0xffffffffffffffff, 0x0, 0x5, 0x93, 0xfffffffffffffff8, 0x3, 0x200000000002, 0xd, 0x4, 0xfffffffffffffffe, 0x400000000100], [0xfffffffffffffffe, 0x80000001, 0xfffffffffffffffa, 0x20200001, 0x5e, 0x100000000007b98, 0x800, 0x9, 0x0, 0xfffffffffffffffe], [0x100000001, 0x8000, 0x40000000, 0x0, 0xb, 0x11000, 0xffffffff00000000], [0x9, 0x1fffffffffb, 0x7a, 0x4000000, 0xfffffffffffffffe, 0x90000000], [{0x0, 0x0, 0x0, 0x7d06}, {0x9, 0x22, 0x5}, {0x4, 0x0, 0xfffefffe, 0x280}, {0x3, 0x4, 0x5, 0xffffffffffffffff}, {0x0, 0x2, 0x7f, 0x8}, {0x0, 0x9, 0x9, 0x2000000000000000}, {0x5, 0x0, 0xfffffff7, 0xb}, {0xe, 0x100, 0x1, 0xb}], {0x1, 0x8, 0x80000006, 0x10}, {0xfffe, 0x6, 0x6d5, 0x6}}}) r1 = kqueue() kevent(r1, &(0x7f00000000c0), 0x138, 0x0, 0xffffffff, 0x0) r2 = socket(0x11, 0x3, 0x0) sendto$unix(r2, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a378343712051eea040000000000", 0xb1, 0x0, 0x0, 0x0) r3 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VMM_IOC_RESETCPU(r3, 0x82405605, &(0x7f0000000180)={0x1, 0x4, {[0x3, 0x101, 0xffffffffae4e045f, 0x7, 0x400, 0xff, 0x7, 0x9, 0x3, 0x8000000000000001, 0x1000, 0x7, 0x7, 0xffffffff, 0x9, 0x1000, 0x4, 0x7fffffffffffffff], [0xffffffffffff581f, 0x1, 0x9, 0x1, 0x8, 0x3, 0x3, 0xaf7f, 0x6, 0x4], [0x5c4, 0xda2, 0x8, 0x7f, 0xffffffff, 0xfff, 0x81], [0x1, 0x6, 0xb, 0x1, 0x1, 0x23], [{0x9, 0x800, 0xb7, 0x7}, {0x8, 0x80000000, 0x5, 0xd3}, {0xcf0b, 0xff, 0x7, 0xfff}, {0x117, 0xfe5b, 0x4, 0x5}, {0xd1, 0x7, 0x8000, 0x2}, {0x34ec, 0x5, 0x8, 0xfffffffffffffff7}, {0x144, 0xc, 0x8, 0x7}, {0x0, 0x9, 0x8, 0x2}], {0x3, 0x3, 0x6, 0x8}, {0x2, 0xd, 0x47c, 0xd}}}) ftruncate(r0, 0x4) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000100)={0x4, &(0x7f00000000c0)=[{0xa4, 0x8, 0x60, 0x6}, {0x4, 0x4, 0x7, 0x2}, {0x4, 0x40, 0x70, 0x81}, {0x2, 0xda, 0xb, 0x9c92268c}]}) r4 = open(&(0x7f0000000040)='./file0\x00', 0x200, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x10, r4, 0x0) sysctl$net_inet6_ip6(&(0x7f00000002c0)={0x4, 0x18, 0x29, 0x34}, 0x4, &(0x7f0000000780), 0x0, 0x0, 0x0) truncate(&(0x7f0000000140)='./file0\x00', 0x30001) 2.19729503s ago: executing program 1 (id=43): setrlimit(0x8, &(0x7f0000000980)={0x42, 0x62}) r0 = syz_open_pts() close(r0) r1 = syz_open_pts() ioctl$TIOCSETAW(r0, 0x802c7415, &(0x7f0000000480)={0x2df57366, 0x8, 0x5, 0xfffffff8, "0a6400b72860147bcc0100d49a4184de82e1c800", 0x2, 0x100000c}) writev(r0, &(0x7f0000000380)=[{&(0x7f0000000100)="c7eb51954dc529619a238de199ee652325ae1d7f5841dc7feee80717fee2afbcf96e4ebeac6638b3d51a56350e32b5a2f413a9e3a7151dcaa78dd41c862461e738", 0x41}, {&(0x7f0000000040)="629b956ca504aec150d80b18476a73b07e0c9ce4e5a9277cfde80373e18d39347c7c73dd3d6db6496dcce274fcf892f240fd03b364963306005648055c4bbdacd88248a1b20d39", 0x47}, {&(0x7f0000000200)="5b116e2355a3ef6453168cfd07722236f36b726997f25c8083e552b3b5bcae37847201171c6c1a47f3233ca580dbd1446c81ce14dc355d064a86b084e1b4417ec87e3812a82af8b11f6b269e2ed8ff0056a5171c11f108668dcc28747b67ff9e9860441c19ae5d00a28db183c18a1f060a59f134cd0884df5b511cf005f816bb27cbfd4d69707216c30f46bbe29562a42716eebea74a9c1b797cc1a37b171e00f38b97255be992f151e90adc6bb390a913428d", 0xb3}, {&(0x7f00000002c0)="ebd801ac6e58e0cab4d79cf78ef7ba36c995999bbcc5fd8b2b2269dd503749957099e0971b7d02be92e8759508b01ae662a9587de40f06f220b3a446f0bbd487fe29d1ff0fd538738fa61b9dbadd08ae048a56fa3c5f4a24230597672322944197cbe9a01bb20fbc9ae462839787c1c53d8242b0a7552b1a8908f636f0e5cbe83c6b943e", 0x84}, {&(0x7f00000009c0)="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", 0x38e}], 0x5) close(r1) sysctl$kern(&(0x7f0000000000)={0x1, 0x2f}, 0x2, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_pts() ioctl$TIOCSTAT(r2, 0x20007465, 0x0) 2.19614327s ago: executing program 3 (id=44): r0 = socket(0x18, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000300)="673bb5b8cc0c16ed08f1b8d24e2217f981aa6a78ef1d35e6abbbdabb26a52ad7f4601faa903493e339865dce0f225d", 0x2f}], 0x1) r1 = open$dir(&(0x7f00000000c0)='.\x00', 0x80, 0x64) mknodat(r1, &(0x7f0000000100)='./file0\x00', 0x80, 0x6) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc5005601, &(0x7f0000000000)={0x10, 0x0, [{&(0x7f0000347000/0x3000)=nil, &(0x7f0000663000/0x4000)=nil, 0x5}, {&(0x7f00005c9000/0x2000)=nil, &(0x7f0000826000/0x4000)=nil, 0x6}, {&(0x7f0000060000/0x2000)=nil, &(0x7f00000d0000/0x4000)=nil}, {0x0, &(0x7f0000ff0000/0x4000)=nil, 0x1}, {&(0x7f00000cc000/0x4000)=nil, &(0x7f00004cc000/0x3000)=nil}, {&(0x7f0000000000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x6}, {0x0, 0x0, 0xfffffffffffffffc}, {&(0x7f0000ff0000/0xf000)=nil, &(0x7f00000c4000/0x10000)=nil, 0x800000000004}, {&(0x7f000000d000/0x4000)=nil, &(0x7f0000826000/0x1000)=nil, 0x2}, {&(0x7f00004cc000/0x2000)=nil, &(0x7f0000661000/0x1000)=nil, 0x3}, {0x0, &(0x7f0000156000/0x1000)=nil, 0x52}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil}, {&(0x7f000038f000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x100000000}, {&(0x7f0000156000/0x1000)=nil, 0x0, 0x9bbf}, {&(0x7f0000349000/0x1000)=nil, &(0x7f0000142000/0x4000)=nil}, {&(0x7f0000573000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil}], './file0\x00', 0x80000}) (async) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4}, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r3, &(0x7f0000000040)={0x0}, 0x10, 0x40, 0x0) sendmmsg(r2, &(0x7f00000003c0)={0x0, 0x6}, 0x10, 0x4) (async) sysctl$kern(&(0x7f0000000140)={0x1, 0x29}, 0x2, 0x0, 0x0, 0x0, 0x0) (async) sendmsg$unix(r0, &(0x7f0000000040)={&(0x7f0000000240)=@file={0x0, './file0\x00'}, 0xa, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="14"], 0x20, 0x401}, 0x0) (async) getpeername$inet6(r0, &(0x7f0000000000), &(0x7f0000000080)=0xc) 2.195816096s ago: executing program 5 (id=45): r0 = msgget$private(0x0, 0x200) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000080)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x85, 0x1b}, 0x7297, 0x3d3, 0xffffffffffffffff, 0x0, 0x8000000000000000, 0x9, 0x0, 0xfffffffffffffbe5}) r1 = socket(0x18, 0x2, 0x0) close(r1) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) fcntl$lock(r2, 0x9, &(0x7f0000000080)={0x3, 0x0, 0x300, 0x20001fffffffd}) socket(0x10, 0x1, 0x0) bind$unix(r1, &(0x7f0000000040)=@abs={0x0, 0x0, 0x3}, 0x8) connect$unix(r1, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) r3 = socket(0x800000018, 0x1, 0x0) ioctl$WSDISPLAYIO_GBURNER(0xffffffffffffff9c, 0x400c5752, &(0x7f0000000000)) bind$unix(r3, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) msgget$private(0x0, 0x200) (async) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000080)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x85, 0x1b}, 0x7297, 0x3d3, 0xffffffffffffffff, 0x0, 0x8000000000000000, 0x9, 0x0, 0xfffffffffffffbe5}) (async) socket(0x18, 0x2, 0x0) (async) close(r1) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) fcntl$lock(r2, 0x9, &(0x7f0000000080)={0x3, 0x0, 0x300, 0x20001fffffffd}) (async) socket(0x10, 0x1, 0x0) (async) bind$unix(r1, &(0x7f0000000040)=@abs={0x0, 0x0, 0x3}, 0x8) (async) connect$unix(r1, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) (async) socket(0x800000018, 0x1, 0x0) (async) ioctl$WSDISPLAYIO_GBURNER(0xffffffffffffff9c, 0x400c5752, &(0x7f0000000000)) (async) bind$unix(r3, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) (async) 2.195319704s ago: executing program 6 (id=46): r0 = open(&(0x7f0000000080)='./file0\x00', 0x18289, 0x190) ftruncate(r0, 0x10000) r1 = open(&(0x7f0000000040)='./file0\x00', 0x200, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x10, r1, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x80, 0x8) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3) r2 = kqueue() kevent(r2, &(0x7f00000000c0), 0x138, 0x0, 0xffffffff, 0x0) r3 = socket(0x2, 0x2, 0x0) r4 = socket(0x2, 0x400000000002, 0x0) setsockopt(r4, 0x0, 0x1f, &(0x7f0000000080)="c5f5d915", 0x4) r5 = dup2(r4, r3) setsockopt$sock_int(r5, 0xffff, 0x800, &(0x7f0000000040)=0x9, 0x4) select(0x40, &(0x7f0000000000)={0xfffffffffffffffd, 0x0, 0x0, 0x564, 0x9ce8, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) bind(r3, &(0x7f0000000000), 0x10) r6 = socket(0x2, 0x2, 0x0) read(r3, &(0x7f0000000400)=""/275, 0x132) setsockopt$sock_int(r5, 0xffff, 0x80, &(0x7f0000000140)=0xb, 0x4) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000180)={0x3, &(0x7f00000000c0)=[{0xbffd, 0x72, 0x1}, {0x4, 0x0, 0x0, 0x800}, {0x2}]}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0x37) connect$unix(r6, &(0x7f0000000000), 0x10) write(r6, 0x0, 0x0) r7 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) socket$unix(0x1, 0x2, 0x0) syz_extract_tcp_res(&(0x7f0000001980), 0x3, 0x9910) syz_extract_tcp_res(&(0x7f0000001a40), 0xa, 0x800) shmctl$IPC_SET(r7, 0x1, &(0x7f0000000240)={{0x4, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x9}, 0x5, 0xbffc, 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x2}) 2.19123387s ago: executing program 7 (id=47): setrlimit(0x8, &(0x7f0000000980)={0xb, 0x5c}) (async) r0 = syz_open_pts() close(r0) (async, rerun: 32) syz_open_pts() (rerun: 32) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) (async) r1 = syz_open_pts() close(r1) ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f00000000c0)={0x9, 0x9, 0xfffdff80, 0x160350d, "04f0ee091a00041300000fe0ff2285080800", 0x1000004, 0x42}) (async) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) (async) ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000000)={0xf66c, 0x2, 0xfffbffff, 0x5ffbfb5d, "428fe7177c7cfc4dff0000800000002100", 0x4, 0x371}) (async) write(r0, &(0x7f0000000cc0)="46999524eb070f90597b02a5fe1ba25042060bee3cf15fa999783a2af03072c8aa6419ed1e9132b276722f765133a8f2b884d8b700c024d0fbcb6e0c48265f147a90714159dad86d5e723fb828a6825cf8333390d2f4cd0f7fdf54413fbaf1f183ad5739fc", 0x65) 1.898631049s ago: executing program 0 (id=48): r0 = shmget$private(0x0, 0x3000, 0x602, &(0x7f0000ffa000/0x3000)=nil) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000240)={{0x8, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xaaa4bc4d2a9ccc89, 0x7}, 0x1, 0xfffc, 0x0, 0x0, 0x0, 0x7, 0x8000007fffffffc}) shmctl$IPC_STAT(r0, 0x2, 0xffffffffffffffff) fcntl$getflags(0xffffffffffffffff, 0x3) 1.898108723s ago: executing program 7 (id=49): symlink(&(0x7f0000000200)='./bus/\x00', &(0x7f0000000240)='./bus\x00') r0 = openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) ioctl$VMM_IOC_READREGS(r0, 0xc2485607, &(0x7f0000000280)) unlink(&(0x7f0000000000)='./bus/\x00') faccessat(r0, &(0x7f0000000080)='./bus/\x00', 0x2, 0x0) symlink(&(0x7f0000000200)='./bus/\x00', &(0x7f0000000240)='./bus\x00') (async) openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) (async) ioctl$VMM_IOC_READREGS(r0, 0xc2485607, &(0x7f0000000280)) (async) unlink(&(0x7f0000000000)='./bus/\x00') (async) faccessat(r0, &(0x7f0000000080)='./bus/\x00', 0x2, 0x0) (async) 1.896680791s ago: executing program 4 (id=50): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) sysctl$hw(&(0x7f00000000c0)={0x6, 0x13}, 0x2, 0x0, 0x0, 0x0, 0x0) sysctl$kern(&(0x7f0000000100)={0x1, 0x4b}, 0x2, &(0x7f00000011c0)="71f91e5a", &(0x7f0000000000)=0x4, 0x0, 0x0) r0 = kqueue() fcntl$lock(r0, 0x9, &(0x7f0000000000)={0x0, 0x0, 0xbffffffffffffffd, 0x90002fffffffe}) r1 = socket(0x18, 0x2, 0x0) setsockopt$sock_int(r1, 0xffff, 0x1023, &(0x7f0000000000)=0xfffffffd, 0x64) 1.554719473s ago: executing program 0 (id=51): sendmsg$unix(0xffffffffffffffff, &(0x7f0000002a40)={0x0, 0xffffffffffffff89, 0x0, 0x6e}, 0x0) r0 = socket(0x11, 0x3, 0x0) read(r0, &(0x7f0000000700)=""/4096, 0x1000) getsockopt$sock_timeval(r0, 0xffff, 0x1005, &(0x7f0000000000), &(0x7f0000000040)=0x10) 1.554199259s ago: executing program 3 (id=52): ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f00000000c0)={0x2007, 0x7fffffff, 0x3, 0xf, "090e4de6d30aa692318c7e0002f9ffffff00", 0x0, 0x7}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x3e}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$net_pipex(&(0x7f00000000c0)={0x4, 0x22, 0x1}, 0x3, 0x0, 0x0, 0x0, 0x0) socket(0x1e, 0x4000, 0x0) r0 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r1 = syz_open_pts() setrlimit(0x8, &(0x7f0000000980)={0xb, 0x54}) r2 = syz_open_pts() close(r2) syz_open_pts() ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f0000001200)={0x766b, 0x5, 0xcfe, 0xfffffeff, "030000000000000013006b08fc5f81e601c4a104", 0x103, 0x9}) writev(r2, &(0x7f0000000000)=[{&(0x7f00000009c0)="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", 0xfd98}], 0x1) poll(&(0x7f0000000000)=[{r1, 0x1}], 0x1, 0x0) ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000180)={0x7, 0xd3, 0x80000001, 0x1, "1341610a47720aac7f0cf2f61926293596c3d55e", 0x0, 0xedfc}) ioctl$TIOCSETAW(r1, 0x802c7415, &(0x7f0000002880)={0x7, 0xf47, 0xfffffff9, 0x100, "e1e214a3626f5f8ed624c9be1ab2c578f7a8ecc6", 0x1, 0x7}) ioctl$WSMUXIO_LIST_DEVICES(r0, 0xc1045763, &(0x7f0000000040)={0x7, [{0x2, 0x9}, {0x3, 0x10}, {0x2, 0x8000}, {0x1, 0xc44a}, {0x1, 0x3}, {0x3, 0x7}, {0x3, 0x6bba}, {0x1, 0x801}, {0x2, 0x6}, {0x1, 0x105}, {0x1, 0x2}, {0x1, 0x9}, {0x1, 0x4}, {0x2, 0xab28}, {0x3, 0x10}, {0x1, 0x8937}, {0x3, 0xfffffffa}, {0x1, 0x7fff}, {0x3, 0x5}, {0x2, 0xe69f}, {0x1, 0x5}, {0x1, 0x8}, {0x2, 0x6}, {0x3, 0x9}, {0x3, 0x3}, {0x2, 0x800}, {0x3, 0x7f}, {0x2, 0xe70}, {0x2, 0x7}, {0x1}, {0x1, 0x41}, {0x2, 0xffff0b45}]}) r3 = socket(0x18, 0x2, 0x0) setsockopt(r3, 0x1000000029, 0xc, 0x0, 0x0) 1.552793575s ago: executing program 4 (id=53): r0 = syz_open_pts() (async) setrlimit(0x8, &(0x7f0000000040)={0x7, 0x50}) r1 = syz_open_pts() close(r1) (async) syz_open_pts() (async) openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x10091, 0x0) kqueue() (async) ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000340)={0x5, 0x1, 0xfffffffe, 0x966d, "ff14e7130b1e586ca6294000", 0x40, 0x3effe}) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000380)='\a', 0x1}], 0x1) (async) ioctl$TIOCSETD(r0, 0x8004741b, &(0x7f0000000000)=0x9) (async) r2 = socket(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0xffff, 0x1001, &(0x7f0000000100)=0x20000, 0x4) (async) pledge(0x0, &(0x7f00000000c0)='\x00') (async) pledge(&(0x7f0000000000)='tty \x00\x02\x00!\a\x9bp^|#\xcbhl\x97\xa3_\xbc\x04\x9d!\xd9\x9f\x9f\xb4\x96\x13\x12\xe0\r\xe7\xb9E\b\x00\x00\x00B\xaaY\xe1Q<\x19\xc0\xf6Yf\x9au^\xa0\xc9j\xdd-I\x01R\x00w\xf7\x15\x04\xa6\x82aY\x1d\xd7\f>Y\x06\"\xad\xb6\x88_\xeb\at\x91\xd3\xbf\xea\xddt\xe0\bt\x06S,\x1f\x1fj\xa5H\x01nz\x947\xf8Q|o\x80\xdbH\xa7-\xaaw\xcet\x044\xc5\xa9e\xa9\xf6\x1b\x8e\x05\x86\x91IsC\xb9ul\xaeu\xad\x9b\xaf\x04\xc4\x03\"F\x8f\xd5\xe8\r\x8d\xa1\x00\xcc\xd7\xa0\xe1\xeb\xc1>\xbd\t\xc8\x15\v\xb0, \xee\xa4\xa6\xb9a\x01&\xadrj\xd5\xc26p\xa14\xe0\xbf\xa0\x1es\x01=\xdbd\xf0?=\x8afcJ\x8e\xf7\nn\xd4<\x00\xec\xe4^\x00\x00\x00\xca\x90\xfa\x98\xc9gty\xce\xab\xd2\xa1\x85E\xe4\xa9\xd5\xab\x83\xda?w\x83\xbc\xcf\xd20(L&b\xed\x8c\x1d\x1a\x9fd\x99H\x9e\x82\x10\xea\x05\xf8\xff\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\xa6\x8c\x05n\x83\x83\x12+\x16\xc1\x00\x04\x00\x00\x13:o\x0f\x1fB\xa4\xddwB\x92h\xde\xfal3\x88e\x04J\\\x00D\xae`\x8e\xadd\xa8;\xee\xc4K\xe8]\x84\x90\xb8d\xfb\x95\xb3\xe9(x_\x80]\xadW\xd5\xa9\xaa\x03\x9c6\xa9\xc4\x01\x03\xea\xe5\x90\x85\x16\xb0DV\x13\x01\xab\x01\xf0\x8f\x02\xc2\xc89\x19o\xf5zJ\x9b\x03\x1f\xd7\xdbN\\\xc0\xcd?Pg\xd5q\x13\xbd \xfa\xab\xccJK\x11\\\x16~#P.\xc9K\x15r\xab\xda\xe2\xd4\xec8\x8b\xb6e\x96\xe9\xc3\x93\xed\x94.\xc2\xa0\x1fU#\x96\xe6\xb6C\xfa\x03/\x8b\x0e2\xec\x96v\x9b/.\v\x9e\x80\x18s\xae.\xf4\x14KS`\x87\x8b4\t\x00\x87{\xa8@e\xbfe\xeb\xee\xa2\xe72\xb8Q:\x9f\xc2ym\x86\xc4\xcbm\x80%\xfc\x9e\x9f', &(0x7f0000002840)='tty \x00\x02\x00!\a\x9bp^|#\xcbhl\x97\xa3_\xbc\x04\x9d!\xd9\x9f\x9f\xb4\x96\x13\x12\xe0\r\xe7\xb9E\b\x00\x00\x00l\xaaY\xe1Q<\x19\xc0\xf6Yf\x9au^\xa0\xc9j\xdd-I\x01R\x00w\xf7\x15\x04\xa6\x82aY\x1d\xd7\f>Y\x06\"\xad\xb6\x88_\xeb\at\x91\xd3\xbf\xea\xddt\xe0\bt\x06S,\xdbH\xa7-\xaaw\xcet\x044\xc5\xa9e\xa9\xf6\x1b\x8e\x05\x86\x91IsC\xb9ul\xaeu\x94\x9b\xaf\x04\xc4\x03\"F\x8f\xd5\xe8\r\x8d\xa1\x00\xcc\xd7\xa0\xe1\xeb\xc1>\xbd\t\xc8\x15\v\xb0, \xee\xa4\xa6\xb9a\x01&\xadrj\xd5\xc26p\xa14\xe0\xbf\xa0\x1es\x01=\xdbd\xf0?=\x8afcJ\x8eYEn\xd4<\x00\xec\xe4^\x00\x00\x00\xca\x90\xfa\x98\xc9gty\xce\xab\xd2\xa1\x85E\xe4\xa9\xd5\xab\x83\xda?w\x83\xbc\xcf\xd20(L&b\xed\x8c\x1d\x1a\x9fd\x99H\x9e\x82\x10\xea\x05\xf8\xff\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\xa6\x8c\x05n\x83\x83\x12+\x16\xc1\x00\x04\x00\x00\x13:o\x0f\x1fB\xa4\x00wB\x92h\xde\xfal3\x88e\x04J\\\x00D\xae`\x8e\xadd\xa8;\xee\xc4K\xe8]\x84\x90\xb8d\xfb\x95\xb3\xe9(x_\x80]\xadW\xd5\xa9\xaa\x03\x9c6\xa9\xc4\x01\x03\xea\xe5\x90\x85\x16\xb0DV\x13\x01\xab\x01\xf0\x8f\x02\xc2\xc8\x9b\x03\x1f\xd7\xdbN\\\xc0\xcd?Pg\xd5q\x13\xbd \xfa\xab\xccJK\x11\\\x16~#P.\xc9K\x15r\x04\xd9Z;\xc0\x8dOze\x96\xe9\xc3\x93\xed\x94.\xc2\xa0\x1fU#\x96\xe6\xb6C\xfa\x03/\x8b\x0e2\xec\x96v\x9b/.\v\x9e\x80\x18s\xae.\xf4\x14KS`\x87\x8b4\t\x00\x87{\xa8@e\xbfe\xeb\xee\xa2\xe72\xb8Q:\x9f\xc2b\x897\xbe\r\x04\xdf\xe2\xc0\xf0FV\'m\xcbm\x80%\xfc\x9e\x9f\x87\x80A\xbe\xc2\x00\x00\x00\x00\x00\x006\x96\xbb\x9f\x85\x98\xbb\xbc;\xaa\x97c\xfe\x82jz&t\xa7\xc4\xcd\xb0\b9G\xcag\fY\xe6\r\xcdT\xd3\x1c(\xef\xc0\x038\xbd\xdd\xd9\xc9\x93a]q\xd2\x9b\a\x1e\xf8\xc3\"\xc8:\xb8$\x9f\'P\x17\xfa\xf3Xa\trB-\xf2g\xe6Z\xd5F\xd2\x80\xe0\x99\"\xc12\xe8\b\xc58\x00'/659) (async) ioctl$FIOASYNC(0xffffffffffffffff, 0x80047460, &(0x7f00000000c0)=0x80b7e) writev(0xffffffffffffffff, &(0x7f0000000140)=[{}], 0x1) (async) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000040)={0x2, &(0x7f00000000c0)=[{0x0, 0xfd, 0x5, 0x2}, {0x5, 0x0, 0x0, 0x4}]}) (async) sysctl$kern(&(0x7f00000000c0)={0x1, 0x31}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) sysctl$kern(&(0x7f00000000c0)={0x1, 0x37}, 0x4, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000140)=0x2c, 0x0, 0x2e) (async) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) connect$unix(r2, &(0x7f0000000000), 0x10) setsockopt$inet_opts(r2, 0x0, 0x1, &(0x7f00000000c0)="9876d692a3ef9c7ab923a2f0", 0xc) (async) write(r2, &(0x7f0000000240)="14bdfa5d1d34e2fecb284a6498307dcda9aec43050036123339a346f737850551408753f95b7688ad4c4e1dd5489e7bafc58d3e5823757ae8b630719ef187ccad995f13dbe19a6dd4e6902bd8297b0799b426aabe9fad9db6996571c6d9f8bb5d542c2148aa42be940970fe88d34d8f99afe7e7820237400000000008000000100"/138, 0xfc7e) (async) syz_open_pts() 1.545324282s ago: executing program 5 (id=54): sysctl$net_inet_tcp(&(0x7f0000000000)={0x7, 0x2, 0x2}, 0x4, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f000072f000/0x3000)=nil, 0x3000, 0x5) setitimer(0x1, &(0x7f0000000000)={{0x202, 0x5}, {0x13, 0x19a}}, 0x0) sysctl$kern(&(0x7f0000000040)={0x1, 0x51}, 0x2, 0x0, 0x0, 0x0, 0x0) shmget(0x1, 0x2000, 0xc, &(0x7f0000730000/0x2000)=nil) sysctl$kern(&(0x7f0000000000)={0x1, 0x23}, 0x2, 0x0, &(0x7f0000001240), 0x0, 0x0) 1.545011485s ago: executing program 7 (id=55): ioctl$VT_WAITACTIVE(0xffffffffffffffff, 0x20007606, &(0x7f0000000000)=0x927b) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$hw(&(0x7f0000000000)={0x6, 0x5}, 0x2, 0x0, 0x0, 0x0, 0xfdbd) getrlimit(0x5, 0x0) 1.509845836s ago: executing program 8 (id=23): ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x4, 0x0, 0x0, 0xfffffffe}, {0x2, 0x0, 0x0, 0xffffffff}, {0x2, 0x0, 0x0, 0xffffffff}]}) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$BIOCSRTIMEOUT(r0, 0x8010426d, &(0x7f0000000140)={0xc000000000, 0x9}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0xffac) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x4, 0x0, 0x0, 0xfffffffe}, {0x2, 0x0, 0x0, 0xffffffff}, {0x2, 0x0, 0x0, 0xffffffff}]}) (async) openat$bpf(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) (async) ioctl$BIOCSRTIMEOUT(r0, 0x8010426d, &(0x7f0000000140)={0xc000000000, 0x9}) (async) sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0xffac) (async) 896.096249ms ago: executing program 1 (id=56): unveil(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='c\x00') (async, rerun: 64) r0 = socket(0x11, 0x3, 0x0) (rerun: 64) sendto$unix(r0, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42118000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x406, 0x0, 0x0) (async) clock_gettime(0x4, 0xffffffffffffffff) clock_getres(0x3, &(0x7f0000000000)) (async) mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4) 895.537132ms ago: executing program 3 (id=57): open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) sysctl$net_inet_tcp(&(0x7f00000000c0)={0x4, 0x2, 0x6, 0x6}, 0x4, &(0x7f0000000000)="9b1809ffffffffffffff7f473f11e1a4e5f2f9f220ef7f0abdbc34fe42021588dc8ff44f4b76c76d41859d85ea800dabe467badf35b6fd74c94d1b44", &(0x7f0000000100)=0xfcbb, 0x0, 0x0) symlink(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00') 895.113913ms ago: executing program 5 (id=58): r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) fcntl$lock(r0, 0x9, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x300000003}) (async) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) fcntl$lock(r1, 0x9, &(0x7f0000000040)={0x3, 0x0, 0x8, 0x100000003}) (async) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) fcntl$lock(r0, 0x9, &(0x7f0000000000)={0x3, 0x0, 0xffffffff00000005, 0x2ffffffff}) (async) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sysctl$net_inet_tcp(&(0x7f00000000c0)={0x4, 0x2, 0x6, 0x13}, 0x4, 0x0, 0x0, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) sysctl$kern(&(0x7f00000000c0)={0x1, 0x55}, 0x3, &(0x7f0000000000)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec370824a8876eaed1a9d70b5bc5bbb2f68d6c9", &(0x7f0000000080)=0xffa2, 0x0, 0x37) (async) fcntl$lock(r2, 0x8, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffefe, 0x1000300000084, 0xffffffffffffffff}) (async) mknod(&(0x7f00000000c0)='./file0\x00', 0x1ffa, 0x0) (async) ktrace(&(0x7f0000000000)='./file0\x00', 0x1, 0x40000000, 0x0) (async) socket(0x18, 0x1, 0x0) open(0x0, 0x80000000000206, 0x4ebfac6bbaf79e5) (async) socketpair$unix(0x1, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) (async) fcntl$lock(0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x3, 0x1, 0x2, 0x7}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x54}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8f5f84cf71b59c7a00c37082", &(0x7f0000000080)=0x3d, 0x0, 0xffffffffffffff57) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000380), 0x0, 0x0}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) (async) r3 = semget$private(0x0, 0x3, 0x55e) semctl$IPC_SET(r3, 0x0, 0x1, &(0x7f0000000180)={{0x401, 0x0, 0x0, 0x0, 0x0, 0x188, 0xffff}, 0xaad3, 0x9e, 0x7}) (async) semop(r3, &(0x7f0000000040)=[{0x3, 0x1, 0x800}, {0x1, 0x0, 0x1800}], 0x2) (async) open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) (async) ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x0, [{0x2, 0x7}, {}, {0x0, 0x7fff}, {}, {0x0, 0x80}, {0x2, 0x9}, {0x3}, {}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x0, 0x6}, {0x3}, {}, {}, {0x0, 0x5}, {0x1}, {0x1}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x9}, {0x2, 0x9}, {}, {0x3, 0x800}, {0x1}, {0x3}, {0x3}, {}, {0x2, 0x8001}, {0x0, 0x4}]}) sysctl$kern(&(0x7f0000000180)={0x1, 0x14}, 0x2, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000140)=0x1c, 0x0, 0x0) (async) r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) (async) sysctl$ddb(&(0x7f0000000200)={0x9, 0x3}, 0x2, &(0x7f0000000240)="1466c162f102356b61b7f366be51d1a64dcbbc3accd577c3c5c7c55d34d19538974a606735070df01ec1f8074b278e49555e3a02f5a3195d073f82f8258824db", &(0x7f00000002c0)=0x40, &(0x7f0000000300)="c56bd8422926aaf96a551f126afbce3dbcbd325f8cb009caa7f5c585d64ac10a75715ac16e5db7ee3fe0a8c519c7ed1e35364c924fbceb44f9bdec49b7208ad60c0014d738461528a013842d7363d940c3672ba1d99a69d5df2bbcf3a8becc2c494e827f9e12f4e9684af2652e8280834951215302862943ad0ee0666f8b8c20af0321267e9fbdeac2a6381d50ddbb27d6675f61bce12a19e1bc2325b46c4fb8c1e1a64ab188cd008a439c5ce1ec31802f0ca90f43a3763c9e7df94e8bde14a475d9e50399252e9cbc9b31922fe481026484fb4675edc7893db7946d9af87287c65aa9bdd14f8adbc169e1a6580376211054", 0xf2) ioctl$BIOCGETIF(r4, 0x4020426b, &(0x7f0000000040)={""/16, @ifru_media}) 884.292145ms ago: executing program 6 (id=59): r0 = syz_open_pts() r1 = socket$inet6(0x18, 0x8000, 0x6d) r2 = openat$tty(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0xa, 0xffffffffffffff9c) r5 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000080), 0x8, 0x0) r6 = openat$pci(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) r7 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000100), 0x240, 0x0) poll(&(0x7f0000000140)=[{r0, 0x2}, {r1, 0x40}, {r2, 0x100}, {r3, 0x40}, {0xffffffffffffffff, 0x20}, {r4, 0x2}, {0xffffffffffffff9c, 0x4}, {r5, 0x10}, {r6, 0x40}, {r7}], 0xa, 0x7fffffff) ioctl$TIOCSETA(r4, 0x802c7414, &(0x7f00000001c0)={0xc8ae, 0x0, 0x2ebc, 0x10, "4bb25e05ace35d6598bb2901ad44e7f278530322", 0x13a1cb0f, 0x72a}) socket(0x2, 0x4000, 0x3) ioctl$WSMOUSEIO_GCALIBCOORDS(r4, 0x41205725, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}) r8 = openat$tty(0xffffffffffffff9c, &(0x7f0000000340), 0x10, 0x0) ioctl$TIOCCDTR(r8, 0x20007478) ioctl$FIONREAD(r8, 0x4004667f, &(0x7f0000000380)) openat$wsmouse(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) ioctl$TIOCSBRK(r8, 0x2000747b) ioctl$TIOCCHKVERAUTH(r0, 0x2000741e) mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) ioctl$TIOCSFLAGS(r2, 0x8004745c, &(0x7f0000000400)) syz_emit_ethernet(0x42, &(0x7f0000000440)={@broadcast, @random="08e3e2f1a1f0", [], {@arp={0x806, @generic={0x1, 0x8013, 0x6, 0x10, 0x4, @empty, "115a4e2c1b755576ba8b525630cd5309", @empty, "9283f31162020ce2d884d542880edc33"}}}}) r9 = socket(0x4, 0x4, 0x5) syz_extract_tcp_res$synack(&(0x7f00000004c0), 0x1, 0x0) socket(0x2, 0x0, 0x4) recvfrom(r9, &(0x7f0000000500)=""/192, 0xc0, 0x41, &(0x7f00000005c0)=@in={0x2, 0x3}, 0xc) recvmmsg(r9, &(0x7f0000000880)={&(0x7f0000000840)={&(0x7f0000000600)=@un=@file={0x0, ""/58}, 0x3c, &(0x7f0000000780)=[{&(0x7f0000000640)=""/130, 0x82}, {&(0x7f0000000700)=""/2, 0x2}, {&(0x7f0000000740)=""/9, 0x9}], 0x3, &(0x7f00000007c0)=""/78, 0x4e}, 0x1}, 0x10, 0x840, &(0x7f00000008c0)={0x10000, 0x7}) fchdir(r6) unveil(&(0x7f0000000900)='./file0\x00', &(0x7f0000000940)='c\x00') syz_open_pts() close(0xffffffffffffffff) 883.087395ms ago: executing program 7 (id=60): r0 = socket(0x2, 0x2, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1001, &(0x7f0000000100)=0x20000, 0x4) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x1, 0x7, 0x101, 0x4, 0x80002001, 0x3, 0x10, [{0x4, 0xfe3, 0x6, 0x71800}, {0x23, 0x4, 0x1, 0x7}, {0x6, 0x1, 0x8, 0xaf9}, {0x2, 0x0, 0x4f, 0xfffffffe}, {0x101, 0x3, 0x9, 0x7}, {0x2, 0x47fff, 0x10000009, 0x5}, {0x80000cdb, 0xbffffff5, 0x4, 0x6d}, {0x2000a, 0x803, 0xfdf0, 0x8}, {0x8, 0x83, 0xfffffffd, 0x82}, {0xfffffc00, 0x2, 0x5, 0x1}, {0xa44b, 0xfff9, 0x48a, 0x8}, {0xcb, 0x2, 0x8, 0x6}, {0x2000e0, 0x9, 0x4, 0x403}, {0xb, 0xfffffffc, 0xfffffff5, 0x100006}, {0x2006, 0x0, 0x26, 0x3}, {0x81, 0x33, 0x3, 0x2}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_int(r1, 0xffff, 0x1008, &(0x7f0000000140), &(0x7f0000000180)=0x4) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xebabb00f3fe59d73) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) connect$unix(r0, &(0x7f0000000000), 0x10) setsockopt$inet_opts(r0, 0x0, 0x1, &(0x7f0000000300)="9876d692a3ef9c7ab923a2f0", 0xc) write(r0, &(0x7f0000000240)="14bdfa5d1d34e2fecb284a6498307dcda9aec43050036123339a346f737850551408753f95b7688ad4c4e1dd5489e7bafc58d3e5823757ae8b630719ef187ccad995f13dbe19a6dd4e6902bd8297b0799b426aabe9fad9db6996571c6d9f8bb5d542c2148aa42be940970fe88d34d8f99afe7e7820237400000000008000000100"/138, 0xfc7e) 873.169339ms ago: executing program 3 (id=61): syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) (async) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) (async) sysctl$kern(&(0x7f0000000000)={0x1, 0x2f}, 0x2, 0x0, 0x0, 0x0, 0x0) (async) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000080)={0x35b, 0x6, 0x3, 0x172, 0x2, 0x4, 0x3, 0x10, [{0x9, 0x2, 0x1000, 0x6}, {0x9, 0xb, 0x100, 0x1ff}, {0x7, 0x6, 0x4e, 0x1008}, {0x0, 0x0, 0x7, 0x4013f}, {0x2, 0x7, 0x3, 0x9}, {0x3, 0x4, 0x245, 0x7}, {0x1000, 0x5, 0x8, 0x2}, {0xa, 0xea, 0x3, 0x2}, {0x6, 0x10006, 0x989, 0x5}, {0x8, 0x0, 0x7, 0x2}, {0x2000ffe, 0x2, 0xd9e, 0x3}, {0x8d6, 0x4, 0x2, 0x6}, {0x6c, 0xc3f5, 0x40000, 0x6bbc}, {0x6, 0x750eb550, 0x9, 0x7}, {0x7fff, 0x8, 0x7ffdffff, 0x9}, {0x8, 0x6, 0x2, 0x2b}]}) (async) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0xe8, 0x0) r1 = fcntl$dupfd(r0, 0x3, 0xffffffffffffffff) ioctl$FIONREAD(r1, 0x800c745b, &(0x7f0000000080)) (async) r2 = socket(0x2, 0x4001, 0x0) setsockopt$sock_int(r2, 0xffff, 0x1, &(0x7f0000000080)=0x1fc, 0x4) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) connect$unix(r2, &(0x7f0000000000), 0x10) sendmmsg(r2, &(0x7f00000007c0)={0x0, 0x7}, 0x10, 0x7) 870.264986ms ago: executing program 7 (id=62): socket(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) sysctl$vm_swapencrypt(&(0x7f00000000c0)={0x6, 0x1b, 0x1}, 0x3, &(0x7f0000000080), 0x0, 0x0, 0x0) sysctl$net_inet_icmp(&(0x7f0000000040)={0x4, 0x12, 0x1, 0x4}, 0x4, 0x0, 0x0, 0x0, 0x0) msgget$private(0x0, 0x28) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r0 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r0, 0x80206997, &(0x7f00000001c0)) r1 = socket(0x11, 0x3, 0x0) ftruncate(r0, 0x100000000) syz_emit_ethernet(0x3a, &(0x7f00000000c0)={@local, @local, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x1, 0x0, @multicast2, @empty, {[@lsrr={0x83, 0x3}]}}, @icmp=@timestamp_reply}}}}) sendto$unix(r1, &(0x7f00000000c0)="b10005040000000000000000070700000000000020a10500fef96ecf13ff9e0a0089583535673039d0d236acf2f97704be38164991f7c8cf5f882b293be1aa5b23edeb51e2f0ac3ebbd2feb3fda1139b672f4d3353eb067e7335000000000000000000000000000300c5e8ebcdd272000000000022831cf41bed66f40066ccf1f3e4999d9d20002002c5dbfad80000000800000000000100008000000000000000000000000000000000000000000000000000000000007f3b59cadbca84047ecc63fcf245bc6ebf0029b56246798f0000cb3483da3d4dce1398cd1ed23228ad", 0xe0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) msgget(0x3, 0x222) msgsnd(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0300000000000000019c3165bafba062e3ea7a84d2c8f15515f678f9ea98a5b868131f8b74b67826e25ce18ef07ab2e037265bfe10fab4410fab5cbc71cbe1c9b229b3c853d3556981c9d92df56e19e379c480bccae44f20ce34bb8fb9ff9c2a9a37794887e80aca0969e418bfbb3070cb12fb85c41060c245aff01e916432a7186a5f2f5c22e83aeb88562ea21f369a12fcc3eeb7eb7d3573d83b0b3fe8356348276048df560efd130eaed3b5288aee620b23c523eaa29e2c56eab3898830d0dee602bf9c26e9a6d5afea8192760faba34acb2749e49fdfa4ec2f6d04fda1d411fc5d574d47b5108303750942f161b10d289e40b4"], 0xf5, 0x0) chown(&(0x7f0000000000)='.\x00', 0xffffffffffffffff, 0x0) fcntl$lock(0xffffffffffffffff, 0x9, &(0x7f0000000000)={0x0, 0x0, 0x6, 0x300000003}) semop(0x0, &(0x7f00000000c0)=[{}, {0x0, 0x2ff}], 0x2) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket(0x18, 0x1, 0x0) close(r2) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000000)={{}, 0x800000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4}) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x11, 0x0, 0x1b}, 0x4000000000000007, 0x0, 0x0, 0x0, 0xfffffffffffffef2) r3 = socket(0x18, 0x2, 0x0) setsockopt(r3, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) connect$unix(r2, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) setrlimit(0x0, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 629.910628ms ago: executing program 1 (id=63): msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000000)={{0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}) syz_emit_ethernet(0x1000e, &(0x7f0000000000)={@broadcast, @random="94ea09066dbd", [], {@ipv6={0x86dd, {0x0, 0x6, "db8344", 0xffffffaa, 0x11, 0x0, @rand_addr="fed38d5ba80b9e61cd0c535a9800", @mcast2, {[], @udp={{0x3, 0x2, 0x8}}}}}}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x18, 0x1, 0x0) r1 = semget(0x1, 0x2, 0x40) setsockopt(r0, 0x4, 0x70b, &(0x7f00000000c0)="af2c28567cf9", 0x6) semop(r1, &(0x7f0000000080)=[{0x1, 0x8, 0x800}, {0x1, 0x3, 0x1000}, {0x4, 0xffff}, {0x2, 0x5, 0x1000}, {0x2, 0x1ff, 0x1800}, {0x2, 0x8}, {0x2, 0x4, 0x1000}, {0x2, 0x1}, {0x4, 0x2}], 0x9) setsockopt(r0, 0x1000000029, 0xc, &(0x7f0000000040)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) setsockopt(r0, 0x1000000029, 0xd, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) 626.517423ms ago: executing program 3 (id=64): r0 = socket(0x800000018, 0x1, 0x0) listen(r0, 0x1) sysctl$net_inet_tcp(&(0x7f0000000040)={0x4, 0x2, 0x6, 0x12}, 0x4, 0xfffffffffffffffe, 0x0, 0x0, 0x0) sysctl$vm_swapencrypt(&(0x7f0000000040)={0x6, 0x1b, 0x2}, 0x3, 0x0, 0x0, 0x0, 0x0) sysctl$kern(&(0x7f0000000040)={0x1, 0x3f}, 0x4, &(0x7f0000000040), 0x0, 0x0, 0xfffffffffffffda3) shutdown(r0, 0x1) sysctl$net_inet_tcp(&(0x7f0000000080)={0x4, 0x2, 0x6, 0x2}, 0x4, &(0x7f00000000c0)="14902a8ea429df2026d620718862bc87eba4b3ac216c121d65dde2806106a3d0d146c77a37b74e61fe07de20f7d80f394c6c277fb78beedbd01764296733535cda2f92612ef7412881f4f9d851bbbc207ad7af771d78d4d028b75ccdd8e70ec2f9a7f7c47d4db324878d165b374eaf803a390c7d10dc8d32ba4ec3a0da9f2afe77716cdb784851651458ef88e3c2e697ef795bcb6f7aa05c953e5c4ad417b345ac1af8ce5bee3e41cd20b84cb84f54b3a4f1e0907e056abb30c48efed0a58ba496226017d99d9a", &(0x7f00000001c0)=0xc7, &(0x7f0000000200)="075f325717bafc3acb18aef8c14ebbaef35070f7685738d1fd13c763aec64acec62244e7ebbe885e4b17f43fa6153ce01c494d8bc1a81611b1f8eedbbb70905d97e0401938f69a9e381ad5643466c4b094b5567da75fcbd091f9fd8338cb1f31e6129611696e08f8b1adebb25010d29f623412307be077a997c3ce94a3f10cc072679d2af33528413d5547f482a4f4987bf3098466d397e0357d15f76ecb3461269fc27516ee3a90fbd6", 0xaa) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) accept$inet6(r0, 0x0, 0x0) 625.300474ms ago: executing program 1 (id=65): r0 = socket(0x800000018, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0xa) setrlimit(0x8, &(0x7f0000000980)={0xb, 0xb}) r1 = syz_open_pts() close(r1) r2 = syz_open_pts() ioctl$FIOASYNC(r1, 0x80047469, &(0x7f00000000c0)=0x5) writev(r1, &(0x7f0000000240)=[{&(0x7f0000000200)="b9b3bd", 0x3}], 0x1) readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/115, 0x73}], 0x1) getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0xc) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000000)={{0x8, r4}, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x1, 0x102}) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x11}, 0x4000000000000007, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f00000001c0)='./file0\x00', 0x40, 0xb1c1) setsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000000280)={r3, r4, r5}, 0xc) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0) chdir(0x0) r7 = fcntl$dupfd(r6, 0x2, 0xffffffffffffffff) symlinkat(&(0x7f0000000100)='./file0\x00', r7, &(0x7f0000000200)='./file0\x00') utimensat(r6, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)={{0x7fff, 0xffffffffdfffffff}, {0x8000000000, 0xfffffffffffffffe}}, 0x0) 625.029425ms ago: executing program 5 (id=66): r0 = socket$unix(0x1, 0x5, 0x0) r1 = getpgid(0x0) fcntl$setown(r0, 0x6, r1) bind$unix(r0, &(0x7f0000000200)=@file={0xd570d0466b6018f, './file0\x00'}, 0xa) listen(r0, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) connect$unix(r2, &(0x7f0000000000)=@file={0xd1653077bafa0114, './file0\x00'}, 0xa) r3 = socket(0x2, 0x2, 0x0) connect$unix(r3, &(0x7f0000000000), 0x10) bind$unix(r3, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x10) close(r0) socket$unix(0x1, 0x5, 0x0) (async) getpgid(0x0) (async) fcntl$setown(r0, 0x6, r1) (async) bind$unix(r0, &(0x7f0000000200)=@file={0xd570d0466b6018f, './file0\x00'}, 0xa) (async) listen(r0, 0x0) (async) socket$unix(0x1, 0x5, 0x0) (async) connect$unix(r2, &(0x7f0000000000)=@file={0xd1653077bafa0114, './file0\x00'}, 0xa) (async) socket(0x2, 0x2, 0x0) (async) connect$unix(r3, &(0x7f0000000000), 0x10) (async) bind$unix(r3, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x10) (async) close(r0) (async) 624.77491ms ago: executing program 8 (id=23): ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x4, 0x0, 0x0, 0xfffffffe}, {0x2, 0x0, 0x0, 0xffffffff}, {0x2, 0x0, 0x0, 0xffffffff}]}) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$BIOCSRTIMEOUT(r0, 0x8010426d, &(0x7f0000000140)={0xc000000000, 0x9}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0xffac) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x4, 0x0, 0x0, 0xfffffffe}, {0x2, 0x0, 0x0, 0xffffffff}, {0x2, 0x0, 0x0, 0xffffffff}]}) (async) openat$bpf(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) (async) ioctl$BIOCSRTIMEOUT(r0, 0x8010426d, &(0x7f0000000140)={0xc000000000, 0x9}) (async) sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0xffac) (async) 14.505872ms ago: executing program 0 (id=67): r0 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000200)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd6000100000502c00fe697a653e336f400000500000000000fe8000000000000000000000000000aa3c000000000000006101000000000000c20400000007c20400008d6300000000020090780000000369c46dea0006ff0826650652e2a60a3a68632730c0fc4357ff020000000000000000000000000001"]) 13.148209ms ago: executing program 1 (id=68): socket(0x2, 0x1, 0x0) (async) socket(0x2, 0x1, 0x0) sysctl$hw(&(0x7f0000000000)={0x7, 0xe}, 0x2, &(0x7f00000012c0), 0x0, 0x0, 0x0) socket(0x18, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) sysctl$net_inet_carp(&(0x7f0000000040)={0x4, 0x2, 0x6, 0x3}, 0x4, 0x0, 0x0, 0x0, 0x0) socket(0x10, 0x8000, 0x5) sendmsg(0xffffffffffffffff, 0x0, 0x0) r0 = openat$vmm(0xffffffffffffff9c, 0x0, 0x2, 0x0) readv(r0, 0x0, 0x0) (async) readv(r0, 0x0, 0x0) ioctl$WSDISPLAYIO_GETSCREENTYPE(0xffffffffffffffff, 0xc028575d, 0x0) ioctl$TIOCSETAF(0xffffffffffffffff, 0x802c7416, &(0x7f0000001540)={0xf, 0x2, 0x200, 0x661, "e37c3d81ff8bd4b7953e01e5d4ea7145151d4351", 0xffff, 0xffffffff}) (async) ioctl$TIOCSETAF(0xffffffffffffffff, 0x802c7416, &(0x7f0000001540)={0xf, 0x2, 0x200, 0x661, "e37c3d81ff8bd4b7953e01e5d4ea7145151d4351", 0xffff, 0xffffffff}) semget(0x2, 0x9, 0x6f0) semget(0x2, 0x0, 0x1) open(&(0x7f0000000000)='./file0\x00', 0x9cab835cfdc52675, 0x190) (async) r1 = open(&(0x7f0000000000)='./file0\x00', 0x9cab835cfdc52675, 0x190) r2 = socket(0x1, 0x5, 0x0) close(r2) syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) writev(0xffffffffffffffff, &(0x7f0000000680)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) (async) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) r3 = socket(0x2, 0x4001, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) connect$unix(r3, &(0x7f0000000000), 0x10) setsockopt$sock_int(r2, 0xffff, 0x1001, &(0x7f0000000100)=0x20000, 0x4) (async) setsockopt$sock_int(r2, 0xffff, 0x1001, &(0x7f0000000100)=0x20000, 0x4) write(r2, &(0x7f0000000140)='$', 0x1) shutdown(r2, 0x2) connect(r1, &(0x7f0000000180)=@in={0x2, 0x3}, 0xc) (async) connect(r1, &(0x7f0000000180)=@in={0x2, 0x3}, 0xc) open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000400001803c1, 0x0) (async) r4 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000400001803c1, 0x0) pwritev(r4, &(0x7f0000000080)=[{&(0x7f00000006c0), 0xf0f75}], 0x1, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0xa011, r1, 0x0) 12.440086ms ago: executing program 3 (id=69): r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x186) mmap(&(0x7f000028c000/0x1000)=nil, 0x1000, 0x1, 0x2016, r0, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) writev(r2, &(0x7f0000000240)=[{&(0x7f0000000100)="cc60d3d79a1a7122a5fb9de9ea6ca0b30fb2942ef7652736f10f86d45ae419b2ecf7af93d33b3de1f2c56c0d93da7484095d0d543baf7f0161a025c9c02a561f9a76d06f1eaec7d8df99d6c28b10fa891e47d6c3bba690a611889032ac7b3581d7c92d1c546e59764f069048316871794f0615dd4d8bb1057a61fb177be649004fb56a7d46c856a20d73f050bf29d58b803a676cc3761e8a47857f51d90a4465f9c605ab2829d78ea2571900", 0xac}, {&(0x7f0000001200)="b389e5aeb7b42eab8dd0017236f060f918503740799f35d7e2e733fc1ce9e45cfb279a7aeb65ad9859d427a701bb4c25773931def673bea9bf786061c13935cf58279287d41ec345ac1598b7b4e5c36a3d5ecc1893e17e380a226ad0d75529c4623ddfb51dbafffe78145aed33f3c482faf44cd4fbeadc3a67a824d08a4333b14f7a032ce11d5530043711766c9b6de2be6f02696bd39a7bab01735c492d971dbc56c0ac859c5c750dabb6962382008fbeb3d9d6eedc7eb2b0cdc5a6dcc08472c67d346a4c6c2944d777d2414c65d905235d", 0xd2}, {&(0x7f00000002c0)="5f6a7699da2aba83704ecd3621e69a2f818de84b4c5200000000000002cda4cedf13579996073843ec5cbabaadcec85d62a8a897a68307f3d2c30eea6356105ec8aaba86930f1aed0b3d110000", 0x4d}, {&(0x7f00000014c0)="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", 0xe45}, {&(0x7f0000000000)="f1cff94233ba0367f4aaab6055da5a33cb056966097686565303b8bc11", 0x1d}, {&(0x7f0000000080)="912fd187bf665c2d94908fbd155cd83185011a414c5bd4d3ce6cdd", 0x1b}], 0x6) mmap(&(0x7f00001f3000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0xfffffffffffffffd) mmap(&(0x7f0000362000/0x3000)=nil, 0x3000, 0x2, 0x11, r1, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x186) (async) mmap(&(0x7f000028c000/0x1000)=nil, 0x1000, 0x1, 0x2016, r0, 0x0) (async) open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) (async) open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) (async) writev(r2, &(0x7f0000000240)=[{&(0x7f0000000100)="cc60d3d79a1a7122a5fb9de9ea6ca0b30fb2942ef7652736f10f86d45ae419b2ecf7af93d33b3de1f2c56c0d93da7484095d0d543baf7f0161a025c9c02a561f9a76d06f1eaec7d8df99d6c28b10fa891e47d6c3bba690a611889032ac7b3581d7c92d1c546e59764f069048316871794f0615dd4d8bb1057a61fb177be649004fb56a7d46c856a20d73f050bf29d58b803a676cc3761e8a47857f51d90a4465f9c605ab2829d78ea2571900", 0xac}, {&(0x7f0000001200)="b389e5aeb7b42eab8dd0017236f060f918503740799f35d7e2e733fc1ce9e45cfb279a7aeb65ad9859d427a701bb4c25773931def673bea9bf786061c13935cf58279287d41ec345ac1598b7b4e5c36a3d5ecc1893e17e380a226ad0d75529c4623ddfb51dbafffe78145aed33f3c482faf44cd4fbeadc3a67a824d08a4333b14f7a032ce11d5530043711766c9b6de2be6f02696bd39a7bab01735c492d971dbc56c0ac859c5c750dabb6962382008fbeb3d9d6eedc7eb2b0cdc5a6dcc08472c67d346a4c6c2944d777d2414c65d905235d", 0xd2}, {&(0x7f00000002c0)="5f6a7699da2aba83704ecd3621e69a2f818de84b4c5200000000000002cda4cedf13579996073843ec5cbabaadcec85d62a8a897a68307f3d2c30eea6356105ec8aaba86930f1aed0b3d110000", 0x4d}, {&(0x7f00000014c0)="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", 0xe45}, {&(0x7f0000000000)="f1cff94233ba0367f4aaab6055da5a33cb056966097686565303b8bc11", 0x1d}, {&(0x7f0000000080)="912fd187bf665c2d94908fbd155cd83185011a414c5bd4d3ce6cdd", 0x1b}], 0x6) (async) mmap(&(0x7f00001f3000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0xfffffffffffffffd) (async) mmap(&(0x7f0000362000/0x3000)=nil, 0x3000, 0x2, 0x11, r1, 0x0) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) (async) 10.059486ms ago: executing program 5 (id=70): setitimer(0x0, &(0x7f0000000140)={{0x5, 0xa}, {0x2, 0xfff}}, 0x0) r0 = socket(0x18, 0x2, 0x0) setsockopt(r0, 0x1000000000029, 0x2a, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r1, 0xffff, 0x1022, 0x0, 0x0) r2 = socket(0x18, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x2, 0xffffffffffffffff) close(r3) kqueue() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = open(&(0x7f0000000380)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7949) r6 = getuid() r7 = getgid() fchown(r5, r6, r7) sendmsg$unix(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="28000000ffff000001"], 0x28, 0x402}, 0x0) setitimer(0x0, &(0x7f0000000080)={{0x93, 0x7}, {0x0, 0x5}}, 0x0) socket(0x2, 0x1, 0x6) 7.791669ms ago: executing program 6 (id=71): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) ioctl$TIOCSETA(0xffffffffffffffff, 0xc0084463, &(0x7f00000000c0)={0x8, 0xffeffffc, 0x7fff, 0x4, "c9f7550000000bca9853a4956b47c0d100", 0x7, 0x200}) getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sysctl$kern(&(0x7f00000000c0)={0x1, 0x37}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x1, 0x0, 0x6, 0x1}, {0x2, 0x0, 0x0, 0x4}, {0x2, 0x0, 0x0, 0x1}]}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xff0a, 0x0, 0x37) sysctl$kern(&(0x7f00000000c0)={0x1, 0x31}, 0x4, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0x37) 0s ago: executing program 7 (id=72): r0 = socket(0x800000018, 0x1, 0x0) bind$unix(r0, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) r1 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_cred(r1, 0xffff, 0x1022, 0x0, 0x0) listen(r0, 0x1) r2 = socket(0x18, 0x4001, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x100000000000000, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) setsockopt$sock_linger(r2, 0xffff, 0x80, &(0x7f0000000040)={0xe0a, 0x2}, 0x8) close(r2) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.219' (ED25519) to the list of known hosts. Wpanic: kernel diagnARNoIsNGt:ic S aPsL sertNOioTn L O"W(EpRgE-D O>N pSgY_SfClAaLLg s7 3 1& (0P4Q93952_0I NACTEIXVIE|T P0Q _aA CTIStopped at savectx+0xae: movl $0,%gs:0x688 TID PID UID PRFLAGS PFLAGS CPU COMMAND *497424 21229 0 0x2 0 1 sshd-session 119121 24304 32767 0x10 0x4000000 0K syz-executor savectx() at savectx+0xae end of kernel end trace frame: 0x751866e150c0, count: 14 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{1}> ddb{1}> set $lines = 0 ddb{1}> set $maxwidth = 0 ddb{1}> show panic *cpu0: kernel diagnostic assertion "(pg->pg_flags & (PQ_INACTIVE|PQ_ACTIVE)) == 0" failed: file "/syzkaller/managers/setuid/kernel/sys/uvm/uvm_page.c", line 1309 ddb{1}> trace savectx() at savectx+0xae end of kernel end trace frame: 0x751866e150c0, count: -1 ddb{1}> show registers rdi 0 rsi 0 rbp 0xffff80002a3104f0 rbx 0 rdx 0 rcx 0xffff800035809248 rax 0x3a r8 0xffff80002a310420 r9 0xffff80002a310170 r10 0xdeac80d60813a6fd r11 0x1eeceec3109ad549 r12 0 r13 0 r14 0xffff800035809248 r15 0 rip 0xffffffff832af3ee savectx+0xae cs 0x8 rflags 0x46 rsp 0xffff80002a310470 ss 0x10 savectx+0xae: movl $0,%gs:0x688 ddb{1}> show proc PROC (sshd-session) tid=497424 pid=21229 tcnt=1 stat=onproc flags process=2 proc=0 runpri=51, usrpri=52, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff800037c23780,0xffff8000358094f0 process=0xffff800037c279e0 user=0xffff80002a30b000, vmspace=0xfffffd806cc869b0 estcpu=2, cpticks=7, pctcpu=0.0, user=1, sys=5, intr=0 ddb{1}> ps PID TID PPID UID S FLAGS WAIT COMMAND *21229 497424 16666 0 7 0x2 sshd-session 24304 319960 64546 32767 2 0x10 syz-executor 24304 119121 64546 32767 7 0x4000010 syz-executor 86912 10634 3590 32767 2 0x10 syz-executor 86912 326047 3590 32767 3 0x4000090 fsleep syz-executor 86912 11046 3590 32767 3 0x4000090 fsleep syz-executor 49952 371248 17541 32767 3 0x90 piperd syz-executor 63240 351072 56238 32767 3 0x90 piperd syz-executor 95402 328560 32158 32767 2 0x10000010 syz-executor 75783 212603 12375 32767 2 0xc90 syz-executor 64546 244435 6711 32767 3 0x90 nanoslp syz-executor 32085 444398 22898 32767 3 0x90 piperd syz-executor 3590 501765 69976 32767 3 0x90 nanoslp syz-executor 17541 65884 99353 0 3 0x82 wait syz-executor 56238 226350 99353 0 3 0x82 wait syz-executor 32158 230729 99353 0 3 0x82 wait syz-executor 12375 430289 99353 0 3 0x82 wait syz-executor 6711 298415 99353 0 3 0x82 wait syz-executor 69976 156804 99353 0 3 0x82 wait syz-executor 22898 511064 99353 0 3 0x82 wait syz-executor 99353 291074 15161 0 3 0x82 nanoslp syz-executor 15161 186082 84329 0 3 0x10008a sigsusp ksh 84329 495986 96804 0 3 0x98 kqread sshd-session 96804 53764 16666 0 3 0x92 kqread sshd-session 7073 401753 1 0 3 0x100083 ttyin getty 16666 515278 1 0 3 0x88 kqread sshd 49289 372481 56067 73 3 0x1100090 kqread syslogd 56067 285508 1 0 3 0x100082 sbwait syslogd 69643 109275 1 0 3 0x100080 kqread resolvd 6097 160744 20295 77 3 0x100092 kqread dhcpleased 17255 154454 20295 77 3 0x100092 kqread dhcpleased 20295 173671 1 0 3 0x80 kqread dhcpleased 28083 91608 0 0 3 0x14200 bored smr 55064 337626 0 0 3 0x14200 pgzero zerothread 41972 176417 0 0 3 0x14200 aiodoned aiodoned 46106 117992 0 0 3 0x14200 syncer update 57835 68324 0 0 3 0x14200 cleaner cleaner 10322 332088 0 0 3 0x14200 reaper reaper 47628 181398 0 0 3 0x14200 pgdaemon pagedaemon 56730 523799 0 0 3 0x14200 bored viomb 65345 270472 0 0 3 0x40014200 acpi0 acpi0 8859 228176 0 0 3 0x40014200 idle1 29983 357455 0 0 3 0x14200 bored softnet1 33985 485511 0 0 3 0x14200 bored softnet0 20397 62915 0 0 3 0x14200 bored systqmp 38569 139779 0 0 3 0x14200 bored systq 98112 293654 0 0 3 0x14200 tmoslp softclockmp 35327 448444 0 0 3 0x40014200 tmoslp softclock 18105 303923 0 0 3 0x40014200 idle0 1 326035 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb{1}> show all locks CPU 1: exclusive mutex &map->flags_lock r = 0 (0xfffffd806cc86b28) #0 witness_lock+0x5f1 #1 mtx_enter_try+0x1ad #2 mtx_enter+0x62 #3 vm_map_lock_ln+0x13f #4 sys_munmap+0x1ca #5 syscall+0xbd4 #6 Xsyscall+0x128 Process 21229 (sshd-session) thread 0xffff800035809248 (497424) exclusive rwlock vmmaplk r = 0 (0xfffffd806cc86ab0) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 vm_map_lock_ln+0x12e #3 sys_munmap+0x1ca #4 syscall+0xbd4 #5 Xsyscall+0x128 exclusive mutex &map->flags_lock r = 0 (0xfffffd806cc86b28) #0 witness_lock+0x5f1 #1 mtx_enter_try+0x1ad #2 mtx_enter+0x62 #3 vm_map_lock_ln+0x13f #4 sys_munmap+0x1ca #5 syscall+0xbd4 #6 Xsyscall+0x128 Process 24304 (syz-executor) thread 0xffff8000358094e0 (119121) exclusive rwlock uobjlk r = 0 (0xfffffd806e0cfcf0) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 uvm_fault_lower_lookup+0x53 #3 uvm_fault_lower+0x89 #4 uvm_fault+0x274 #5 uvm_fault_wire+0x73 #6 uvm_map_pageable_wire+0x3dc #7 sys_mlock+0x23d #8 syscall+0xb17 #9 Xsyscall+0x128 exclusive rwlock amaplk r = 0 (0xfffffd806d3a9690) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 uvm_fault_check+0x8a9 #3 uvm_fault+0x106 #4 uvm_fault_wire+0x73 #5 uvm_map_pageable_wire+0x3dc #6 sys_mlock+0x23d #7 syscall+0xb17 #8 Xsyscall+0x128 shared rwlock vmmaplk r = 0 (0xfffffd806cd59c90) #0 witness_lock+0x5f1 #1 rw_do_enter_read+0x3e8 #2 uvmfault_lookup+0x122 #3 uvm_fault_check+0x4f #4 uvm_fault+0x106 #5 uvm_fault_wire+0x73 #6 uvm_map_pageable_wire+0x3dc #7 sys_mlock+0x23d #8 syscall+0xb17 #9 Xsyscall+0x128 exclusive kernel_lock &kernel_lock r = 0 (0xffffffff83a0f600) #0 witness_lock+0x5f1 #1 syscall+0xaf4 #2 Xsyscall+0x128 ddb{1}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 10188 10955K 10973K 166960K 11282 0 pcb 17 12K 12K 166960K 17 0 rtable 217 6K 7K 166960K 359 0 pf 29 16K 16K 166960K 31 0 ifaddr 38 6K 7K 166960K 44 0 ifgroup 46 2K 2K 166960K 50 0 sysctl 1 1K 9K 166960K 6 0 counters 68 36K 37K 166960K 70 0 ioctlops 0 0K 2K 166960K 31 0 iov 0 0K 12K 166960K 3 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1335 84K 84K 166960K 1433 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 5K 166960K 3 0 VM map 2 1K 1K 166960K 2 0 sem 5 0K 0K 166960K 6 0 dirhash 12 2K 2K 166960K 12 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 19 69K 125K 166960K 239 0 sigio 0 0K 0K 166960K 4 0 proc 58 99K 163K 166960K 479 0 subproc 63 3K 4K 166960K 144 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 4 0 in_multi 88 6K 7K 166960K 103 0 ether_multi 1 0K 0K 166960K 3 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 79 360K 360K 166960K 79 0 exec 0 0K 1K 166960K 370 0 fusefs mount 1 32K 32K 166960K 1 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 230 177K 185K 166960K 3669 0 UVM aobj 8 2K 2K 166960K 9 0 pinsyscall 42 84K 115K 166960K 1325 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 0K 166960K 4 0 NDP 10 0K 2K 166960K 27 0 temp 36 8667K 8731K 166960K 4301 0 kqueue 13 20K 26K 166960K 34 0 SYN cache 2 16K 16K 166960K 2 0 ddb{1}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 26 0 0 1 0 1 1 0 8 0 rtpcb 120 109 0 106 3 0 3 3 0 8 2 rtentry 176 112 0 12 6 0 6 6 0 8 0 unpcb 144 83 0 66 1 0 1 1 0 8 0 syncache 336 5 0 5 1 0 1 1 0 8 1 tcpcb 736 101 0 93 2 0 2 2 0 8 1 arp 136 19 0 2 1 0 1 1 0 8 0 inpcb 328 216 0 203 4 0 4 4 0 8 2 nd6 152 24 0 3 1 0 1 1 0 8 0 kcovpl 48 16 0 9 1 0 1 1 0 8 0 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 454 0 44 29 0 29 29 0 8 1 art_table 40 455 0 44 5 0 5 5 0 8 0 art_node 32 112 0 21 1 0 1 1 0 8 0 semapl 112 4 0 1 1 0 1 1 0 8 0 shmpl 112 6 0 1 1 0 1 1 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino2pl 256 1656 0 138 95 0 95 95 0 8 0 ffsino 296 1656 0 138 117 0 117 117 0 8 0 nchpl 144 1935 0 240 63 0 63 63 0 8 0 vnodes 216 1809 0 0 101 0 101 101 0 8 0 namei 1024 5973 0 5973 1 0 1 1 0 8 1 percpumem 16 50 0 1 1 0 1 1 0 8 0 kstatmem 264 24 0 2 2 0 2 2 0 8 0 scxspl 216 6266 0 6266 3 2 1 2 1 8 1 plimitpl 152 129 0 106 2 0 2 2 0 8 1 sigapl 424 517 0 468 7 0 7 7 0 8 0 knotepl 120 63 0 0 2 0 2 2 0 8 0 kqueuepl 224 32 0 22 1 0 1 1 0 8 0 pipepl 344 139 0 112 3 0 3 3 0 8 0 fdescpl 528 501 0 469 4 0 4 4 0 8 0 filepl 160 2058 0 1853 11 0 11 11 0 8 1 lockfpl 104 29 0 24 1 0 1 1 0 8 0 lockfspl 48 14 0 10 1 0 1 1 0 8 0 sessionpl 144 30 0 14 1 0 1 1 0 8 0 pgrppl 48 46 0 23 1 0 1 1 0 8 0 ucredpl 104 198 0 180 1 0 1 1 0 8 0 zombiepl 144 470 0 468 1 0 1 1 0 8 0 processpl 1232 517 0 468 5 0 5 5 0 8 0 procpl 664 632 0 580 6 0 6 6 0 8 0 sockpl 752 408 0 375 10 0 10 10 0 8 6 mcl64k 65536 1 0 0 1 0 1 1 0 8 0 mcl16k 16384 2 0 0 1 0 1 1 0 8 0 mcl12k 12288 1 0 0 1 0 1 1 0 8 0 mcl8k 8192 1 0 0 1 0 1 1 0 8 0 mcl4k 4096 111 0 0 14 0 14 14 0 8 0 mcl2k 2048 30 0 0 4 0 4 4 0 8 0 mtagpl 96 2 0 0 1 0 1 1 0 8 0 mbufpl 256 186 0 0 12 0 12 12 0 8 0 bufpl 280 2339 0 118 159 0 159 159 0 8 0 anonpl 32 5104 0 0 42 0 42 42 0 246 0 amapchunkpl 152 10823 0 10272 30 0 30 30 0 158 8 amappl16 200 2164 0 2145 6 2 4 6 0 8 2 amappl15 192 6 0 6 1 1 0 1 0 8 0 amappl14 184 5 0 5 1 1 0 1 0 8 0 amappl13 176 412 0 411 1 0 1 1 0 8 0 amappl12 168 842 0 800 3 0 3 3 0 8 0 amappl11 160 9 0 9 1 1 0 1 0 8 0 amappl10 152 49 0 39 1 0 1 1 0 8 0 amappl9 144 244 0 244 1 1 0 1 0 8 0 amappl8 136 18 0 17 1 0 1 1 0 8 0 amappl7 128 79 0 78 1 0 1 1 0 8 0 amappl6 120 270 0 258 1 0 1 1 0 8 0 amappl5 112 72 0 64 1 0 1 1 0 8 0 amappl4 104 410 0 387 1 0 1 1 0 8 0 amappl3 96 1750 0 1655 4 0 4 4 0 8 1 amappl2 88 512 0 455 2 0 2 2 0 8 0 amappl1 80 9394 0 8785 14 0 14 14 0 8 0 amappl 88 2949 0 2797 5 0 5 5 0 92 0 uvmvnodes 80 98 0 0 2 0 2 2 0 8 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 8 0 1 1 0 1 1 0 8 0 uaddrrnd 24 501 0 469 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 501 0 469 1 0 1 1 0 8 0 vmmpekpl 168 5894 0 5858 3 0 3 3 0 8 0 vmmpepl 168 40106 0 38227 93 0 93 93 0 357 8 vmsppl 488 500 0 469 7 1 6 6 0 8 0 rwobjpl 80 14347 0 13387 22 0 22 22 0 8 1 pdppl 4096 1009 0 938 115 34 81 97 0 8 10 pvpl 32 11909 0 0 97 0 97 97 0 265 0 pmappl 256 500 0 469 4 1 3 3 0 8 0 extentpl 40 45 0 27 1 0 1 1 0 8 0 phpool 112 287 0 37 8 0 8 8 0 8 0 ddb{1}> machine ddbcpu 0 Stopped at x86_ipi_db+0x27: addq $0x8,%rsp x86_ipi_db(ffffffff83875ff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 x86_bus_space_io_read_4(b008,0) at x86_bus_space_io_read_4+0x37 acpitimer_delay(1) at acpitimer_delay+0x76 comcnputc(800,49) at comcnputc+0x29b cnputc(49) at cnputc+0x67 db_putchar(49) at db_putchar+0x36d kprintf() at kprintf+0x29a5 db_printf(ffffffff83384bf9) at db_printf+0x9b panic(ffffffff833ad595) at panic+0x103 __assert(ffffffff833ee0ba,ffffffff8333debf,51d,ffffffff8341a036) at __assert+0x29 uvm_pageactivate(fffffd800820fd88) at uvm_pageactivate+0x1e3 uvm_fault_lower(ffff800030fe73d0,ffff800030fe7408,ffff800030fe7350) at uvm_fault_lower+0x25c end trace frame: 0xffff800030fe74a0, count: 0 ddb{0}> trace x86_ipi_db(ffffffff83875ff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 x86_bus_space_io_read_4(b008,0) at x86_bus_space_io_read_4+0x37 acpitimer_delay(1) at acpitimer_delay+0x76 comcnputc(800,49) at comcnputc+0x29b cnputc(49) at cnputc+0x67 db_putchar(49) at db_putchar+0x36d kprintf() at kprintf+0x29a5 db_printf(ffffffff83384bf9) at db_printf+0x9b panic(ffffffff833ad595) at panic+0x103 __assert(ffffffff833ee0ba,ffffffff8333debf,51d,ffffffff8341a036) at __assert+0x29 uvm_pageactivate(fffffd800820fd88) at uvm_pageactivate+0x1e3 uvm_fault_lower(ffff800030fe73d0,ffff800030fe7408,ffff800030fe7350) at uvm_fault_lower+0x25c uvm_fault(fffffd806cd59b90,20000028c000,2,1) at uvm_fault+0x274 uvm_fault_wire(fffffd806cd59b90,20000028c000,20000028d000,1) at uvm_fault_wire+0x73 uvm_map_pageable_wire(fffffd806cd59b90,fffffd806cbe9ac8,fffffd806cdbd5a8,ffff8000358094e0,0,0) at uvm_map_pageable_wire+0x3dc sys_mlock(ffff8000358094e0,ffff800030fe76f0,ffff800030fe7640) at sys_mlock+0x23d syscall(ffff800030fe76f0) at syscall+0xb17 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xf95573698e0, count: -20 ddb{0}> machine ddbcpu 1 Stopped at savectx+0xae: movl $0,%gs:0x688 savectx() at savectx+0xae end of kernel end trace frame: 0x751866e150c0, count: 14 ddb{1}> trace savectx() at savectx+0xae end of kernel end trace frame: 0x751866e150c0, count: -1