last executing test programs:

19.098881866s ago: executing program 0 (id=1):
r0 = socket$unix(0x1, 0x5, 0x0)
bind$unix(r0, &(0x7f0000000200)=@file={0xd570d0466b6018f, './file0\x00'}, 0xa)
listen(r0, 0x1)
accept$unix(r0, 0x0, 0x0)
close(r0)
r1 = socket$unix(0x1, 0x5, 0x0)
ioctl$FIOASYNC(r0, 0x8004667d, &(0x7f0000000040)=0x3)
connect$unix(r1, &(0x7f0000000000)=@file={0xd1653077bafa0114, './file0\x00'}, 0xa)
r2 = syz_open_pts()
ioctl$FIOASYNC(r2, 0x8004667d, &(0x7f0000000040)=0x1ff)
syz_open_pts()
r3 = socket(0x11, 0x3, 0x0)
socket(0x11, 0x3, 0x0)
r4 = socket(0x18, 0x2, 0x0)
getsockopt(r4, 0x29, 0x1b, 0x0, 0x0)
close(r3)
syz_open_pts()

18.932652918s ago: executing program 0 (id=33):
mkdir(&(0x7f0000000040)='./file2\x00', 0xc1)
mkdir(&(0x7f0000000300)='./file2/file0\x00', 0xc2) (async)
chmod(&(0x7f0000000080)='./file2/file0\x00', 0x8)
unveil(&(0x7f00000000c0)='./file2/file0\x00', &(0x7f0000000100)='x\x00') (async)
r0 = socket(0x18, 0x2, 0x0)
connect$unix(r0, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) (async)
getsockname$inet(r0, &(0x7f0000000080), &(0x7f0000000000)=0xfffffffffffffe22) (async)
r1 = socket(0x18, 0x2, 0x0)
close(r1) (async)
r2 = socket(0x18, 0x1, 0x0)
bind$unix(r2, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0xa)
fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x80000000, 0xffffffffffffffff}) (async)
setsockopt(r1, 0x1000000029, 0x2e, 0x0, 0x0) (async)
connect$unix(r1, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c)

18.710364251s ago: executing program 0 (id=42):
setrlimit(0x8, &(0x7f0000000980)={0x8, 0x54})
r0 = syz_open_pts()
close(r0)
r1 = syz_open_pts()
ioctl$TIOCSETAF(r1, 0x802c7416, &(0x7f0000000180)={0x40978b, 0x10001, 0xfffffc03, 0x80a19f, "bb08000100f167d910508b000000000000000080"})
ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f0000000380)={0xf66e, 0x0, 0x9, 0x10001, "9cdc453b070000000000000000002f9e78cd3300", 0x0, 0x80000000})
writev(r0, &(0x7f0000000700)=[{&(0x7f0000000080)="34eb4cd59e8456ebc0881681c60e1cd9e0bf01b618b3cb934394c5951c1db0fd943a", 0xff99}], 0x1)
getrlimit(0x5, &(0x7f0000000000))
ftruncate(r0, 0x7)

18.484623862s ago: executing program 0 (id=50):
r0 = socket$unix(0x1, 0x5, 0x0)
bind$unix(r0, &(0x7f0000000200)=@file={0xd570d0466b6018f, './file0\x00'}, 0xa)
open(&(0x7f00000000c0)='./file0\x00', 0x80000000000206, 0x84)
mkdir(&(0x7f0000000000)='./file1\x00', 0x0)

18.48406499s ago: executing program 32 (id=50):
r0 = socket$unix(0x1, 0x5, 0x0)
bind$unix(r0, &(0x7f0000000200)=@file={0xd570d0466b6018f, './file0\x00'}, 0xa)
open(&(0x7f00000000c0)='./file0\x00', 0x80000000000206, 0x84)
mkdir(&(0x7f0000000000)='./file1\x00', 0x0)

12.03448814s ago: executing program 8 (id=51):
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
socket$unix(0x1, 0x5, 0x0) (async)
r0 = socket$unix(0x1, 0x5, 0x0)
getsockopt$sock_cred(r0, 0xffff, 0x1024, 0x0, 0x0)
setrlimit(0x3, &(0x7f0000000080)={0x2795, 0x100000})
setrlimit(0x3, &(0x7f0000000000)={0x7fff, 0x100000})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
nanosleep(&(0x7f0000000140), &(0x7f0000000180))
open$dir(&(0x7f0000000080)='./file0\x00', 0x800, 0xb)
open$dir(0x0, 0x100, 0xa1) (async)
open$dir(0x0, 0x100, 0xa1)
rename(&(0x7f0000000dc0)='./file1\x00', &(0x7f0000000e00)='./file1\x00')
mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) (async)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0)
writev(r1, &(0x7f00000008c0)=[{0x0}], 0x1) (async)
writev(r1, &(0x7f00000008c0)=[{0x0}], 0x1)
open(&(0x7f0000000100)='./file0\x00', 0x712, 0x0)
r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
setitimer(0x1, 0x0, 0xffffffffffffffff)
fcntl$lock(r2, 0x9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x20001fffffffd})
ioctl$WSKBDIO_SETENCODING(r2, 0x80045710, &(0x7f0000000040)=0x2)
close(r2) (async)
close(r2)

10.73507773s ago: executing program 8 (id=51):
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
socket$unix(0x1, 0x5, 0x0) (async)
r0 = socket$unix(0x1, 0x5, 0x0)
getsockopt$sock_cred(r0, 0xffff, 0x1024, 0x0, 0x0)
setrlimit(0x3, &(0x7f0000000080)={0x2795, 0x100000})
setrlimit(0x3, &(0x7f0000000000)={0x7fff, 0x100000})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
nanosleep(&(0x7f0000000140), &(0x7f0000000180))
open$dir(&(0x7f0000000080)='./file0\x00', 0x800, 0xb)
open$dir(0x0, 0x100, 0xa1) (async)
open$dir(0x0, 0x100, 0xa1)
rename(&(0x7f0000000dc0)='./file1\x00', &(0x7f0000000e00)='./file1\x00')
mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) (async)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0)
writev(r1, &(0x7f00000008c0)=[{0x0}], 0x1) (async)
writev(r1, &(0x7f00000008c0)=[{0x0}], 0x1)
open(&(0x7f0000000100)='./file0\x00', 0x712, 0x0)
r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
setitimer(0x1, 0x0, 0xffffffffffffffff)
fcntl$lock(r2, 0x9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x20001fffffffd})
ioctl$WSKBDIO_SETENCODING(r2, 0x80045710, &(0x7f0000000040)=0x2)
close(r2) (async)
close(r2)

9.237341007s ago: executing program 8 (id=51):
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
socket$unix(0x1, 0x5, 0x0) (async)
r0 = socket$unix(0x1, 0x5, 0x0)
getsockopt$sock_cred(r0, 0xffff, 0x1024, 0x0, 0x0)
setrlimit(0x3, &(0x7f0000000080)={0x2795, 0x100000})
setrlimit(0x3, &(0x7f0000000000)={0x7fff, 0x100000})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
nanosleep(&(0x7f0000000140), &(0x7f0000000180))
open$dir(&(0x7f0000000080)='./file0\x00', 0x800, 0xb)
open$dir(0x0, 0x100, 0xa1) (async)
open$dir(0x0, 0x100, 0xa1)
rename(&(0x7f0000000dc0)='./file1\x00', &(0x7f0000000e00)='./file1\x00')
mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) (async)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0)
writev(r1, &(0x7f00000008c0)=[{0x0}], 0x1) (async)
writev(r1, &(0x7f00000008c0)=[{0x0}], 0x1)
open(&(0x7f0000000100)='./file0\x00', 0x712, 0x0)
r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
setitimer(0x1, 0x0, 0xffffffffffffffff)
fcntl$lock(r2, 0x9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x20001fffffffd})
ioctl$WSKBDIO_SETENCODING(r2, 0x80045710, &(0x7f0000000040)=0x2)
close(r2) (async)
close(r2)

8.185532226s ago: executing program 4 (id=156):
r0 = getegid()
setregid(r0, r0) (async)
setregid(r0, r0)
getuid() (async)
r1 = getuid()
r2 = getegid()
chown(&(0x7f0000000100)='./file0\x00', r1, r2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
getsockopt$sock_cred(r4, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, <r5=>0x0}, &(0x7f0000000200)=0xc)
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, r5}})
select(0x40, &(0x7f0000000140)={0x0, 0x22, 0x100000001, 0x6, 0x7, 0xffffffffffffffff, 0x0, 0x5}, &(0x7f0000000180)={0xe, 0x3, 0x9, 0x4, 0x0, 0x1, 0x10, 0x4}, &(0x7f00000001c0)={0x100000000, 0x0, 0x100, 0x8, 0x24, 0x8, 0x4, 0x3}, &(0x7f0000000280)={0x3fc, 0x9})
getegid() (async)
r6 = getegid()
r7 = getgid()
connect$unix(r3, &(0x7f00000002c0)=@abs={0x0, 0x0, 0x0}, 0x8)
msgctl$IPC_SET(0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0x0, 0x0, r7, 0xb0, 0x2000}, 0x0, 0x4003fffffffa})
getgroups(0x4, &(0x7f0000000040)=[0x0, 0x0, 0x0, <r8=>0xffffffffffffffff])
r9 = getegid()
getgroups(0x7, &(0x7f0000000080)=[r0, r2, r5, r6, r7, r8, r9]) (async)
getgroups(0x7, &(0x7f0000000080)=[r0, r2, r5, r6, r7, r8, r9])
sysctl$net_inet_ip(&(0x7f0000000000)={0x4, 0x2, 0x0, 0x1c}, 0x4, &(0x7f0000000280), 0x0, 0x0, 0x0) (async)
sysctl$net_inet_ip(&(0x7f0000000000)={0x4, 0x2, 0x0, 0x1c}, 0x4, &(0x7f0000000280), 0x0, 0x0, 0x0)

6.75142916s ago: executing program 1 (id=163):
getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000040)={<r0=>0x0, <r1=>0x0}, &(0x7f0000000080)=0xc)
getgroups(0x8, &(0x7f00000000c0)=[<r2=>0x0, <r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff, 0x0, 0xffffffffffffffff, <r5=>0x0, 0x0, 0x0])
chown(&(0x7f0000000000)='./file0\x00', r1, r2)
r6 = accept(0xffffffffffffff9c, &(0x7f00000014c0)=@in6, &(0x7f0000001500)=0xc)
r7 = openat$pf(0xffffffffffffff9c, &(0x7f0000001540), 0x8, 0x0)
r8 = accept$inet(0xffffffffffffffff, &(0x7f0000001580), &(0x7f00000015c0)=0xc)
r9 = openat$pf(0xffffffffffffff9c, &(0x7f0000001600), 0x1, 0x0)
r10 = openat$klog(0xffffffffffffff9c, &(0x7f0000001640), 0x200, 0x0)
pipe2(&(0x7f0000001680)={<r11=>0xffffffffffffffff, <r12=>0xffffffffffffffff}, 0x10000)
r13 = openat$zero(0xffffffffffffff9c, &(0x7f00000016c0), 0x10, 0x0)
r14 = socket$unix(0x1, 0x2, 0x0)
r15 = socket$inet6(0x18, 0x1, 0x7)
sendmsg$unix(0xffffffffffffff9c, &(0x7f0000001780)={&(0x7f0000000100)=@abs={0x0, 0x0, 0x0}, 0x8, &(0x7f0000001440)=[{&(0x7f0000000140)="1bf06b3930d99ba56cfa098f570cd63c93b09010b326ba883aa16e7cd329b83b21a7414449c54b7efef39f88c2bb0e459853af405e7fd1b078dd02c66ee344337dff8083819d0d47db5af6af0e60022a238a1dc1f463af311822d73d2d75bbf77d97d2b17a193413a7848e5d83a095f08ac383fc4d35f3a8072e3f6bfa110b9d76f2e62d3cff1f24b0329b7dadb7a726e2ebcef78e2fdaf7a61b341e8ba4e0725ff0bf1a0beee516abc5ed679f3953241cd90b2f48f118df91867e0a970f736bc37a", 0xc2}, {&(0x7f0000000240)="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", 0x1000}, {&(0x7f0000001240)}, {&(0x7f0000001280)="dfab4b37c32c871da9ffa9253346257d9fd407ff8e2a043e780b6ef8ab031ced0cf96df938ed1487bd0fac3b92d13aa8f8672f1c3e86365ff06c1768cf2d45957790635eef00dc27206058f2a252c3799c3cea288c57cd630348e873b9fb399444f1b359a518dc0776ee3f302dbbc134a07c65bbeb707c51a9fa676fbda4cd6a04aba6b1bc6d79637454f12adff80babb58ab2c574982e44a40c2ed8b0fd876edb3b44c34c3012f71b44fe8d8b6e512f957848fabf96ca2f2ceae7e5871c46e4653ae139b91b737b4bb7f3eb4bfde93264c40d2352773a4f43c8fc53b2dea058789f7df45f8a335bcfd895d4cc898949eb98e0a9", 0xf4}, {&(0x7f0000001380)="006fbea61504a074007f257a326c527132f8426ab669ffc00ae634", 0x1b}, {&(0x7f00000013c0)="928ba60ed093c2da590fa2465e765573d0f807b95763939138d5d7d9260705916fff8fd6c520a5c70fd6316ae59411ab661e4eadffd794f82f4f2b4d8d670ad6436f2d409ef6326f5e6c095728d2337c3160c4e9", 0x54}], 0x6, &(0x7f0000001700)=[@rights={0x18, 0xffff, 0x1, [0xffffffffffffffff, r6]}, @rights={0x30, 0xffff, 0x1, [r7, r8, r9, r10, r11, r13, r14, r15]}, @cred={0x20, 0xffff, 0x0, r0, r1, r3}], 0x68, 0x4}, 0x4)
r16 = accept(r8, &(0x7f00000017c0)=@un=@file={0x0, ""/248}, &(0x7f00000018c0)=0xfa)
fcntl$setown(r16, 0x6, r0)
r17 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000001900), 0x40, 0x0)
ioctl$WSKBDIO_GETKEYREPEAT(r17, 0x400c5708, &(0x7f0000001940))
r18 = dup2(r12, r7)
setitimer(0x2, &(0x7f0000001980)={{0x0, 0xffffffffffffc5cb}, {0x9c00, 0x800000000}}, &(0x7f00000019c0))
r19 = accept$unix(r11, 0x0, &(0x7f0000001a00))
r20 = fcntl$dupfd(r10, 0xa, r18)
r21 = openat$pci(0xffffffffffffff9c, &(0x7f0000001c80), 0x20000, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001cc0)={0xffffffffffffffff, <r22=>0xffffffffffffffff})
r23 = getpgid(r0)
getsockopt$SO_PEERCRED(r12, 0xffff, 0x1022, &(0x7f0000001d00)={0x0, <r24=>0x0}, 0xc)
sendmsg$unix(r19, &(0x7f0000001e80)={&(0x7f0000001a40)=@abs={0x1, 0x0, 0x0}, 0x8, &(0x7f0000001c40)=[{&(0x7f0000001a80)="f5b4749554920659dc232343d003870d95ad07bd8a1d680b61c2628363fd64d609eaabeee849ffd076afd1976bd5a7895ca65544f76a373da66396a1a918e2228675307fdbb2ffc6e6c5d134ec4c2431871d3be9e08f75b24bdb2c602b", 0x5d}, {&(0x7f0000001b00)="496854d15bc37e85a85ba68e246189f857a6a769ce2bf385fa5c4328892919996390dbaf5d80e4771c8fa4e54037f9c0e070d2ce360b62040843eb0a6398c618bdc2046fe8c1ac9e838838226954b59c3256872a2f32eb899e3fad427a37bae110b806e918c0181e54b84c2761b5cdf5705f2d8fa909b6ff7957f050c52a1051bdeb5e745b60697d8ec4e24b34190ebb9584ef599e7859180a2e03997944ae39211ad879f3c09273eb174ce497", 0xad}, {&(0x7f0000001bc0)="e0af797e34cf6d86c79d55c65f5b7edb1931b6e5d817227e86d0cb529a3ac9c2e2a560b5dabe34928d549900155c411335bec697a7a04309606ff6e3811b9d194472d05a16", 0x45}], 0x3, &(0x7f0000001d40)=[@rights={0x28, 0xffff, 0x1, [r12, r11, r17, r21, r8]}, @rights={0x38, 0xffff, 0x1, [r20, r13, r20, r12, r8, r20, r15, r6, r18, r22]}, @rights={0x18, 0xffff, 0x1, [r10]}, @cred={0x20, 0xffff, 0x0, r0, r1, r3}, @cred={0x20, 0xffff, 0x0, r0, r1, r4}, @rights={0x18, 0xffff, 0x1, [r14]}, @cred={0x20, 0xffff, 0x0, r23, r24, r5}, @rights={0x18, 0xffff, 0x1, [r20, r18]}, @cred={0x20, 0xffff, 0x0, r0, r1, r5}], 0x128, 0x3}, 0x4)
kqueue()
ioctl$WSDISPLAYIO_LSFONT(r11, 0xc058574e, &(0x7f0000001ec0))
r25 = semget$private(0x0, 0x2, 0x640)
semop(r25, &(0x7f0000001f40)=[{0x4, 0x800, 0x1000}, {0x3, 0x5, 0x1000}, {0x0, 0x400, 0x1800}], 0x3)

6.745603653s ago: executing program 2 (id=164):
mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) (async)
mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) (async)
preadv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000003c0)=""/171, 0xab}, {&(0x7f0000000180)=""/236, 0xec}], 0x2, 0x9)
r0 = socket(0x800000018, 0x8002, 0x0)
bind$unix(r0, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) (async)
open(&(0x7f0000000000)='./file0\x00', 0x0, 0x2c)
open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x42) (async)
writev(0xffffffffffffffff, 0x0, 0x0) (async)
fchmod(0xffffffffffffffff, 0x10) (async)
shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f00000000c0)={{0x3, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff}) (async)
r1 = kqueue()
kevent(r1, 0x0, 0x0, 0x0, 0x7, 0x0) (async)
kevent(r1, &(0x7f0000000000), 0x29f, 0x0, 0x8001, 0x0) (async)
syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffff"]) (async)
socket(0x6, 0x4, 0x1) (async)
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
r2 = socket(0x2, 0x4001, 0x0)
r3 = dup(r2)
r4 = fcntl$dupfd(r3, 0x2, 0xffffffffffffffff)
close(r4) (async)
r5 = socket(0x2, 0x2, 0x0) (async)
syz_extract_tcp_res(&(0x7f0000000140), 0x5, 0xff)
connect$unix(r5, &(0x7f0000000000), 0x10)
r6 = socket(0x2, 0x2, 0x0)
setsockopt$sock_int(r6, 0xffff, 0x1023, &(0x7f0000000040)=0x3, 0x4) (async)
setsockopt$sock_int(r4, 0xffff, 0x1023, &(0x7f0000000080), 0x4) (async)
open(&(0x7f0000000040)='./file0\x00', 0xc82, 0x5c)
close(r4) (async)
socket(0x1, 0x2, 0x0)

6.743089685s ago: executing program 4 (id=166):
syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"])
writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000000)="b886b4e47f", 0xfffffffffffffee7}], 0x1)
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"])
r0 = socket(0x2, 0x1, 0x0)
r1 = syz_open_pts()
close(r1)
setrlimit(0x8, &(0x7f0000000040)={0x7, 0x50})
r2 = syz_open_pts()
close(r2)
r3 = syz_open_pts()
ioctl$TIOCSETAW(r3, 0x802c7415, &(0x7f0000000000)={0x29f57365, 0x7fff, 0x1f, 0xffffffff, "8b030003000100787d902b56d864d3c3a3f4d3c9"})
ioctl$TIOCSETD(r1, 0x8004745f, &(0x7f0000000000)=0x1d)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
bind(r0, &(0x7f0000000000), 0x10)
listen(r0, 0x0)
r4 = socket(0x2, 0x1, 0x0)
connect$unix(r4, &(0x7f0000000000), 0x10)
select(0x40, &(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x0, 0x0)

6.742428613s ago: executing program 5 (id=167):
sysctl$net_inet_ah(&(0x7f0000000000)={0x4, 0x1e, 0x2, 0x3}, 0x4, 0x0, 0x0, 0x0, 0x0)
sysctl$kern(&(0x7f0000000000)={0xa}, 0x7, &(0x7f0000000080), 0x0, 0x0, 0x24)
r0 = socket(0x11, 0x3, 0x0)
r1 = socket(0x11, 0x3, 0x0)
setsockopt(r1, 0x11, 0x4, &(0x7f00000000c0)="12000000", 0x4)
sendto$unix(r0, &(0x7f0000000100)="b1000504000004000000130001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20be32fa8aae9f0d7fcc8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac5000020215c5187d28dacefecc143daae4929fbfa0c0f00008abfba111554f4e0f668246c0900000008e371", 0xb1, 0x0, 0x0, 0x0)

6.741876099s ago: executing program 6 (id=168):
mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0)
open(&(0x7f0000000180)='./file0\x00', 0x80000000000206, 0x0)
r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
flock(r0, 0x1)
close(r0)
sysctl$kern(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_emit_ethernet(0x32, &(0x7f0000000080)={@local, @empty, [], {@ipv4={0x800, {{0x9, 0x4, 0x0, 0x0, 0x24, 0x66, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0x0}, @local={0xac, 0x14, 0x0}, {[@timestamp={0x44, 0x10, 0x6, 0x3, 0xb, [{[], 0x40}, {[], 0x9}, {[], 0x3}]}]}}}}}})

6.522466195s ago: executing program 1 (id=170):
r0 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7959)
syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"])
writev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000000)="b886b4e47f", 0x5}], 0x1)
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"])
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
r1 = dup(0xffffffffffffffff)
r2 = accept$inet(0xffffffffffffffff, 0x0, 0x0)
r3 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000240), 0x10000, 0x0)
r4 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0)
r5 = syz_open_pts()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
getsockopt$SO_PEERCRED(r6, 0xffff, 0x1022, &(0x7f0000000400)={0x0, <r8=>0x0}, 0xc)
fchown(r2, r8, 0x0)
r9 = getpid()
fcntl$setown(r7, 0x6, r9)
r10 = geteuid()
r11 = getgid()
r12 = accept(r2, &(0x7f00000002c0)=@in, &(0x7f0000000300)=0xc)
sendmsg$unix(r0, &(0x7f00000003c0)={&(0x7f0000000080)=@abs={0x1, 0x0, 0x3}, 0x8, &(0x7f0000000200)=[{&(0x7f0000000100)="825f3f0340b48e70a1c4e1e5", 0xc}, {&(0x7f0000000180)="2300288af874165190bb4fc054a26f276306a3ecf20a92303075ad8ca22b35aef080442b7a8527b002b7ad0c44132fe890f975ba03607002e59a4ea153bcf527ee0d2cd125141dcd3a9fa8a71eb642e7e3779ee3ab61f238b9544822362b30c43d87", 0x62}], 0x2, &(0x7f0000000340)=ANY=[@ANYBLOB="2800000000000000ffff000001000000", @ANYRES32=r3, @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r5, @ANYBLOB="20009843800000ffff000000000000", @ANYRES32=r9, @ANYRES32=r10, @ANYRES32=r11, @ANYBLOB="000000002800000000000000ffff000001000000", @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r12, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00'], 0x70, 0x40f}, 0x41c)
r13 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0xe8, 0x0)
r14 = fcntl$dupfd(r13, 0x3, 0xffffffffffffff9c)
ioctl$WSMOUSEIO_GCALIBCOORDS(r14, 0x41205725, 0x0)
r15 = socket(0x2, 0x1, 0x0)
connect$unix(r15, &(0x7f0000000000), 0x10)
connect$unix(r15, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x0}, 0x8)
writev(r0, &(0x7f0000000000)=[{&(0x7f00000007c0)="7f454435c5c41a49b7f865d14b16a2299bb881794ffa08bb11bafcdc202a294097b327baaedbae6826050800eb0600"/64, 0x40}], 0x1)
execve(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)

6.518017202s ago: executing program 8 (id=51):
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
socket$unix(0x1, 0x5, 0x0) (async)
r0 = socket$unix(0x1, 0x5, 0x0)
getsockopt$sock_cred(r0, 0xffff, 0x1024, 0x0, 0x0)
setrlimit(0x3, &(0x7f0000000080)={0x2795, 0x100000})
setrlimit(0x3, &(0x7f0000000000)={0x7fff, 0x100000})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
nanosleep(&(0x7f0000000140), &(0x7f0000000180))
open$dir(&(0x7f0000000080)='./file0\x00', 0x800, 0xb)
open$dir(0x0, 0x100, 0xa1) (async)
open$dir(0x0, 0x100, 0xa1)
rename(&(0x7f0000000dc0)='./file1\x00', &(0x7f0000000e00)='./file1\x00')
mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) (async)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0)
writev(r1, &(0x7f00000008c0)=[{0x0}], 0x1) (async)
writev(r1, &(0x7f00000008c0)=[{0x0}], 0x1)
open(&(0x7f0000000100)='./file0\x00', 0x712, 0x0)
r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
setitimer(0x1, 0x0, 0xffffffffffffffff)
fcntl$lock(r2, 0x9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x20001fffffffd})
ioctl$WSKBDIO_SETENCODING(r2, 0x80045710, &(0x7f0000000040)=0x2)
close(r2) (async)
close(r2)

5.269045273s ago: executing program 1 (id=171):
pipe2(0x0, 0x10002)
r0 = kqueue()
kevent(r0, &(0x7f0000000040)=[{{}, 0xfffffffffffffff9, 0x101, 0x3, 0xffffffffffff564e}], 0x1, 0x0, 0x0, 0x0)
r1 = syz_open_pts()
ioctl$TIOCGETD(r1, 0x4004741a, &(0x7f0000000000))

5.268075976s ago: executing program 2 (id=172):
r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
flock(r0, 0x2)
ioctl$TIOCGETD(r0, 0x4004741a, &(0x7f0000000040))
r1 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0)
ioctl$DIOCMAP(r1, 0xc0106477, &(0x7f0000000100)={&(0x7f00000000c0)='./file0\x00', r0, 0x2})
r2 = openat$klog(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0)
setrlimit(0x7, &(0x7f0000000180)={0x80000000, 0x2e})
mknod(&(0x7f00000001c0)='./file0\x00', 0x2000, 0xfffffff9)
ioctl$BIOCVERSION(r0, 0x40044271, &(0x7f0000000200))
ioctl$TIOCSETAF(r0, 0x802c7416, &(0x7f0000000240)={0x926f, 0x277, 0x5, 0x5, "fd7214f9bf4a7a6a2000fda6b66dc3b3dbaea1a5", 0x7, 0xe9})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
setsockopt$sock_int(r3, 0xffff, 0x1004, &(0x7f00000002c0)=0x3, 0x4)
bind$unix(r3, &(0x7f0000000300)=@abs={0x0, 0x0, 0x1}, 0x8)
pwritev(r2, &(0x7f00000003c0)=[{&(0x7f0000000340)="358458f9ab1a26148c10123d3d1b5add779263027cb0ffd05364d3621d90a1478a5f83a3d8fd80b6a63c78399a6033e82321cfd0781046c235bdac4c31d755ad0d0b53021d1cb6ced13195596b7d056756938472ee415e5b", 0x58}], 0x1, 0x3)
r5 = kqueue()
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000440)={0x5, &(0x7f0000000400)=[{0x6e, 0x3, 0x9, 0x3}, {0x6, 0x6, 0x85, 0x8}, {0x6, 0xdc, 0x5, 0x8}, {0x1ff, 0x5, 0x40, 0x46}, {0xa, 0x1, 0x6, 0xffff}]})
ioctl$TIOCGETD(0xffffffffffffff9c, 0x4004741a, &(0x7f0000000480))
recvmmsg(r0, &(0x7f0000000740)={&(0x7f0000000700)={&(0x7f00000004c0)=@un=@file={0x0, ""/81}, 0x53, &(0x7f00000005c0)=[{&(0x7f0000000540)=""/108, 0x6c}], 0x1, &(0x7f0000000600)=""/237, 0xed}, 0x9}, 0x10, 0xc03, &(0x7f0000000780)={0x5, 0x6})
r6 = socket(0x1, 0x3, 0xc9)
r7 = socket(0x6, 0x0, 0x1)
pipe2(&(0x7f00000009c0)={0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x4)
sendmsg$unix(0xffffffffffffff9c, &(0x7f0000000a80)={&(0x7f00000007c0)=@abs={0x0, 0x0, 0x1}, 0x8, &(0x7f0000000980)=[{&(0x7f0000000800)="133d7e4be65f9ca883f60adec357efcfcca2872001bba4a973523350b7cbc610710f35a72012f69f7d3e86f3e03477481faf814ee0014af3c7567a604c188b3957a4861e0543e56330e45aedbcd5ccc4aa0a943776f4426cc88d95301332cb83a8ab481d", 0x64}, {&(0x7f0000000880)="67cbc129e3592b2dbe9a8dee9ee1780ddee7b4620fe5b0b5a7f304786f34a1", 0x1f}, {&(0x7f00000008c0)="eddf89bfffeab798d0e8a628fb8bb02866856060f492fa4569a381fd6ffa37b16a2e0181040647dde92cfaf6e7fe6753d9b00351f7a45d93aa9109dd1e7959", 0x3f}, {&(0x7f0000000900)="10085bdd32c2bf550af75d6298df5f215b4fbe20dd0713c05a5de9430e8874b74c7b6dcac47133d1f8f10e20b39d7c022bb26ebabe0a06ed8f15a06f5f5045378b48fa4021151d7b3b", 0x49}], 0x4, &(0x7f0000000a00)=[@rights={0x28, 0xffff, 0x1, [r4, r6, r1, r5, r5, r7]}, @rights={0x28, 0xffff, 0x1, [r5, r8, r2, r2, r2, r3]}], 0x50}, 0x80b)
ioctl$VMM_IOC_CREATE(r8, 0xc2585601, &(0x7f0000000ac0)={0x10, 0x4, [{&(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0xfffffffffffffff8}, {&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0xffffffff}, {&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0xffffffffffffff36}, {&(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff9000/0x1000)=nil, 0x5}, {&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x101}, {&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, 0xffffffff}, {&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil}, {&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x6}, {&(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0xe}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000800000/0x800000)=nil, 0xffffffffffff76d3}, {&(0x7f0000850000/0x3000)=nil, &(0x7f0000c05000/0x1000)=nil, 0x8}, {&(0x7f0000e64000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x2}, {&(0x7f0000d80000/0x1000)=nil, &(0x7f0000a41000/0x1000)=nil, 0x5}, {&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000de5000/0x2000)=nil, 0x8}, {&(0x7f00009e8000/0x2000)=nil, &(0x7f0000b15000/0x3000)=nil, 0x7fffffffffffffff}, {&(0x7f0000b88000/0x4000)=nil, &(0x7f0000ce8000/0x1000)=nil, 0x7}], './file0\x00', 0xfffffff7})
mprotect(&(0x7f0000c87000/0x1000)=nil, 0x1000, 0x5)
ioctl$FIOGETOWN(r1, 0x4004667b, &(0x7f0000000cc0))
r9 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000d00), 0x80, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r6, 0x29, 0x69, &(0x7f0000000d40)={{0x18, 0x2, 0x7c, 0x1355}, {0x18, 0x2, 0x401, 0x9}, 0x3, [0x8, 0x0, 0xd, 0x82e6, 0x8, 0xffffffff, 0x101, 0x1]}, 0x3c)
ioctl$FIOASYNC(r1, 0x8004667d, &(0x7f0000000d80)=0x9)
write(r9, &(0x7f0000000dc0)="131c78c29a12b4f6dceb46ace439512cf4a2b561d743216bacfc9d9aa6c2ac138adab924c02ab8d1b259c1ae8392818b829e2b6b7b1f", 0x36)

5.266240492s ago: executing program 4 (id=174):
r0 = msgget$private(0x0, 0x562)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
getsockopt$sock_int(r2, 0xffff, 0x800, &(0x7f0000000000), &(0x7f0000000080)=0x4)
shutdown(r1, 0x2)
sendmsg$unix(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="28000000ffff000001"], 0x28}, 0x0)
select(0x40, &(0x7f0000000180)={0xec48, 0x47e, 0x7, 0x0, 0x1, 0x71bb, 0x4, 0x2}, &(0x7f00000001c0)={0x8000, 0x4, 0x3, 0x6, 0x4, 0xa5, 0x6, 0x2}, &(0x7f0000000200)={0x4, 0x4, 0xfffffffffffffff9, 0x9, 0x100000000, 0x1, 0x6, 0x20}, &(0x7f0000000240)={0x878, 0x4})
mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2)
msgsnd(r0, &(0x7f0000001180), 0x8, 0x800)
sysctl$hw(&(0x7f0000000540)={0x6, 0xc}, 0x2, &(0x7f0000000000), 0x0, 0x0, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
fcntl$lock(r3, 0x8, &(0x7f0000000040)={0x1, 0x1, 0x7fffffffffffffff, 0x1000300000004})
sysctl$vm_swapencrypt(&(0x7f0000000040)={0x6, 0x1b}, 0x3, 0x0, 0x0, 0x0, 0x46)

5.260909534s ago: executing program 5 (id=175):
sendmsg$unix(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f0000000080), 0x1c, 0x0}, 0x0)
sysctl$net_inet_tcp(0x0, 0x0, &(0x7f0000000080)="9b180bc3eb987aa9feb1", 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r0 = socket(0x18, 0x1, 0x0)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmsg(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
socket(0x18, 0x2, 0x0)
sendmsg$unix(r0, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0)
r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
mkdirat(r2, &(0x7f0000000080)='./file1\x00', 0xa7210e10bc3c9de5)
r3 = dup(0xffffffffffffffff)
close(r3)
ioctl$VMM_IOC_READREGS(r2, 0xc028756b, &(0x7f0000000800))
syz_open_pts()
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0)
r4 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0)
mkdirat(r4, &(0x7f0000000180)='./file0\x00', 0x184)
renameat(r4, &(0x7f00000025c0)='./file0\x00', r4, &(0x7f0000002600)='./file1\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xa7210e10bc3c9def)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0)
r6 = open(&(0x7f0000000100)='.\x00', 0x200, 0x0)
mkdirat(r6, &(0x7f0000000540)='./file0\x00', 0x184)
renameat(r6, &(0x7f00000025c0)='./file0\x00', r6, &(0x7f0000002600)='./file1\x00')
fchdir(r5)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0)
unlinkat(r4, &(0x7f0000000140)='./file1\x00', 0x8)
setsockopt(r3, 0x9, 0x9, &(0x7f00000002c0)="280d528353dbc611b8207bc29b12ee359e9a9a746e61677fa34e7ce8b6a46f470c76df5f441b081dfd354f01ffb5ff6509973ef0f356eb1d7695d3991ed9c36d2616f3b06cc6648fd25d30b7b4f7bc0882967b06704e47652b7f8c357768254455402e49a3465bd7418e1ae8fb8f8b436de0ae7ecf067321a47f6ce1096f4395918e06d09e46bfd70855cfaabc93518ea7c9d0ac8a4e3b95b163e1a985ac1827c629cd8fa9de92611a5415a73fd3c6530241b03476d38d08f413c26dbb851b8bfd39913d21aab63e98e794fef0", 0xcd)

5.252422076s ago: executing program 6 (id=176):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmsg(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000003c0)=""/193, 0xc1}], 0x1, 0x0}, 0x402)
mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1)
sendto$unix(r0, &(0x7f00000002c0)="b100050400000400000000002101000000000000cea18500fef96ec0050000007ae30200004e3039d2d236acf20b7804be38164991f7aacf5f882b295dbdaa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfb695564b6700000008000361b1257aea8c500002002fbfe0c2300008abfba65c08f4d08e371a3f8343732051eeab71d89e000040502000000140000003e4b45a827dde6d6be812292692c592a628f52d469f566fb252e6378", 0xc2, 0x406, 0x0, 0x0)
syz_emit_ethernet(0x26, &(0x7f0000000040)={@local, @empty, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0x0}, @local={0xac, 0x14, 0x0}, {[@rr={0x7, 0x3, 0x3}]}}}}}})
madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0)

5.251808274s ago: executing program 7 (id=177):
sysctl$net_inet_ah(&(0x7f0000000000)={0x4, 0x1e, 0x2, 0x6}, 0x4, 0x0, 0x0, 0x0, 0x0)
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1e5, 0x80}, 0x3, 0x5, 0x0, 0x0, 0x1, 0x0, 0x9, 0xfffffffffffffffc})
poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0)
sysctl$kern(&(0x7f00000000c0)={0x1, 0x37}, 0x2, 0x0, 0x0, 0x0, 0x0)
poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x100}], 0x20000000000000e7, 0x8000)
r0 = kqueue()
kevent(r0, 0x0, 0x0, 0x0, 0xa50, 0x0)
execve(0x0, 0x0, 0x0)
sysctl$kern(&(0x7f0000000000)={0xa}, 0x7, &(0x7f0000000080), 0x0, 0x0, 0x24)

5.251288458s ago: executing program 3 (id=178):
shutdown(0xffffffffffffffff, 0x0) (async)
mlock(&(0x7f0000ff7000/0x3000)=nil, 0x3000) (async)
sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x2, 0x0, 0x11}, 0x4, 0x0, 0x0, 0x0, 0x0)
munlock(&(0x7f0000ff4000/0x4000)=nil, 0x4000) (async)
recvmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)

5.129700211s ago: executing program 3 (id=179):
syz_emit_ethernet(0x90, &(0x7f00000000c0)={@broadcast, @broadcast, [{[{0x88a8, 0x1, 0x0, 0x2}], {0x8100, 0x1, 0x1, 0x2}}], {@ipv4={0x800, {{0xb, 0x4, 0x3, 0x3, 0x7a, 0x6c, 0x0, 0xd, 0x29, 0x0, @local={0xac, 0x14, 0x0}, @rand_addr=0x4e2b, {[@end, @timestamp={0x44, 0x14, 0x6, 0x3, 0x1, [{[@remote={0xac, 0x14, 0x0}], 0x3}, {[@empty], 0xff}]}]}}, @icmp=@parameter_prob={0xc, 0x2, 0x0, 0xdf, 0x8, 0x0, {0x11, 0x4, 0x3, 0x3b, 0x3, 0x66, 0x3, 0x9, 0x0, 0x6, @empty, @multicast2, {[@ssrr={0x89, 0x23, 0x0, [@remote={0xac, 0x14, 0x0}, @rand_addr=0x6f4a, @multicast2, @rand_addr=0xffffffc0, @multicast1, @multicast2, @broadcast, @loopback]}, @rr={0x7, 0xb, 0x7, [@multicast2, @empty]}]}}, "4980"}}}}})
r0 = socket(0x18, 0x400000002, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r1 = socket(0x18, 0x2, 0x0)
setsockopt(r1, 0x1000000000029, 0x9, &(0x7f0000000040)="03000000", 0x4)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
chmod(&(0x7f0000000080)='./file0\x00', 0x2ea)
chdir(&(0x7f0000000100)='./file0\x00')
symlink(&(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0e99db6de761f86, 0x0)
rename(&(0x7f00000007c0)='./file0\x00', &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
getsockopt(r0, 0x29, 0x24, 0x0, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0xeb67c48e72571aff)
rename(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./file0\x00')
socket(0x1, 0x4, 0xa)

5.128857588s ago: executing program 3 (id=180):
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000000200)=@file={0xd570d0466b6018f, './file0\x00'}, 0xa)
listen(r0, 0x0)
shmctl$IPC_SET(0x0, 0x1, &(0x7f00000000c0)={{0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6})
ioctl$VMM_IOC_WRITEREGS(0xffffffffffffffff, 0x82485608, &(0x7f0000000240)={0x0, 0x0, 0xfffffffffffffffd, {[0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000], [0x0, 0x80000], [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffc9], [{}, {}, {0x0, 0xfffffffe}, {}, {}, {}, {0x0, 0x0, 0x8}]}})
r1 = kqueue() (async)
kqueue()
kevent(r1, &(0x7f00000000c0), 0x30, 0x0, 0x57d, 0x0)

5.122168292s ago: executing program 5 (id=181):
fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x0, 0xfffffffffffffffd, 0x1})
semctl$SETALL(0x0, 0x0, 0x9, &(0x7f0000000040)=[0x7ff])
ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x1}})
getegid()
getgroups(0x0, &(0x7f0000000000))
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r0 = socket(0x18, 0x1, 0x0)
setsockopt(r0, 0x1000000029, 0xc, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14)
setsockopt(r0, 0x1000000029, 0xc, &(0x7f0000000040)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14)
setsockopt(r0, 0x1000000029, 0xd, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14)
r1 = socket(0x2, 0x2, 0x0)
ioctl$FIOASYNC(0xffffffffffffffff, 0x80047460, &(0x7f00000000c0)=0xbfe)
openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
setsockopt$sock_int(r1, 0xffff, 0x1001, &(0x7f0000000100)=0x20000, 0x4)
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"])
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
connect$unix(r1, &(0x7f0000000000), 0x10)
setsockopt$inet_opts(r1, 0x0, 0x1, &(0x7f00000000c0)="9876d692a3ef9c7ab923a2f0", 0xc)
write(r1, &(0x7f0000000240)="14bdfa5d1d34e2fecb284a6498307dcda9aec43050036123339a346f737850551408753f95b7688ad4c4e1dd5489e7bafc58d3e5823757ae8b630719ef187ccad995f13dbe19a6dd4e6902bd8297b0799b426aabe9fad9db6996571c6d9f8bb5d542c2148aa42be940970fe88d34d8f99afe7e7820237400000000008000000100"/138, 0xfc7e)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
r4 = kqueue()
kevent(r4, &(0x7f00000002c0)=[{{r3}, 0xfffffffffffffffe, 0x9, 0x1, 0x200, 0x4}], 0xe4a, 0x0, 0x9, 0x0)

5.121731372s ago: executing program 2 (id=182):
mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1)
r0 = socket(0x11, 0x3, 0x0)
sendto$unix(r0, &(0x7f0000000000)="b10005040000", 0x6, 0x0, 0x0, 0x0)
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{}, {0x1, 0x0, 0x0, 0x1}, {0x88d}]})
setrlimit(0x8, &(0x7f0000000980)={0x7, 0x51})
openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0)
r1 = socket(0x18, 0x1, 0x0)
setsockopt(r1, 0x1000000029, 0x25, &(0x7f0000000000), 0x4)
r2 = syz_open_pts()
close(r2)
setrlimit(0x8, &(0x7f00000001c0)={0x3ff, 0x6})
syz_open_pts()
poll(&(0x7f0000000080)=[{r2, 0x10}], 0x1, 0x50)
r3 = socket(0x2, 0x4002, 0x0)
munmap(&(0x7f0000000000/0x1000)=nil, 0x1000)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
getsockopt$inet_opts(r3, 0x0, 0x1, 0x0, 0x0)
sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xff0a, 0x0, 0x37)
sysctl$kern(&(0x7f0000000040)={0x1, 0x5}, 0x2, &(0x7f0000000140)="a7e29b864f280645ac12c9fa9c61a2737efdea031455ed3ce885e240b76c97c65d02dd923d91cbbfa77542cf1ffbbb13c99f97273b3ef1512b", &(0x7f0000000180)=0x39, &(0x7f00000001c0), 0x0)

5.121353218s ago: executing program 8 (id=51):
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
socket$unix(0x1, 0x5, 0x0) (async)
r0 = socket$unix(0x1, 0x5, 0x0)
getsockopt$sock_cred(r0, 0xffff, 0x1024, 0x0, 0x0)
setrlimit(0x3, &(0x7f0000000080)={0x2795, 0x100000})
setrlimit(0x3, &(0x7f0000000000)={0x7fff, 0x100000})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
nanosleep(&(0x7f0000000140), &(0x7f0000000180))
open$dir(&(0x7f0000000080)='./file0\x00', 0x800, 0xb)
open$dir(0x0, 0x100, 0xa1) (async)
open$dir(0x0, 0x100, 0xa1)
rename(&(0x7f0000000dc0)='./file1\x00', &(0x7f0000000e00)='./file1\x00')
mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) (async)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0)
writev(r1, &(0x7f00000008c0)=[{0x0}], 0x1) (async)
writev(r1, &(0x7f00000008c0)=[{0x0}], 0x1)
open(&(0x7f0000000100)='./file0\x00', 0x712, 0x0)
r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
setitimer(0x1, 0x0, 0xffffffffffffffff)
fcntl$lock(r2, 0x9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x20001fffffffd})
ioctl$WSKBDIO_SETENCODING(r2, 0x80045710, &(0x7f0000000040)=0x2)
close(r2) (async)
close(r2)

3.606549241s ago: executing program 1 (id=183):
r0 = socket(0x18, 0x2, 0x0)
select(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, &(0x7f0000000240)={0x3ff}, 0x0)
connect$unix(r0, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c)
fchdir(0xffffffffffffffff)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sysctl$vfs_fuse(&(0x7f0000000040)={0xa, 0x12, 0x1}, 0x3, 0x0, 0x0, 0x0, 0x0)
recvfrom$unix(r1, &(0x7f0000000040)=""/85, 0x55, 0x40, &(0x7f0000000140)=@abs={0x0, 0x0, 0x0}, 0x8)
open(&(0x7f0000000180)='./file0\x00', 0x200, 0x0)
socket(0x18, 0x2, 0x0)
sysctl$hw(&(0x7f0000000100)={0x6, 0x10}, 0x2, 0x0, 0x0, 0x0, 0x0)

3.606130112s ago: executing program 2 (id=184):
sysctl$net_inet6_ip6(&(0x7f0000000040)={0x4, 0x18, 0x29, 0x34}, 0x4, &(0x7f0000000540), 0x0, 0x0, 0x0)
mknod(&(0x7f0000000000)='./file0\x00', 0x1ffa, 0x0)
r0 = getgid()
setegid(r0)
utimensat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0)

3.605529717s ago: executing program 3 (id=185):
setreuid(0xffffffffffffffff, 0xffffffffffffffff)
getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000140)={0x0, <r0=>0x0}, 0xc)
getgroups(0x1, &(0x7f0000000180)=[<r1=>0xffffffffffffffff])
chown(&(0x7f0000000100)='./file0\x00', r0, r1)
r2 = semget$private(0x0, 0x7, 0x3c0)
semop(r2, &(0x7f0000000280)=[{0x3, 0x8, 0x1000}, {0x0, 0x3, 0x1800}], 0x2)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r3 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_opts(r3, 0x0, 0x200000000000c, &(0x7f0000000240)="ea", 0x1)
sysctl$kern(0x0, 0x0, &(0x7f0000000080)="71f91e3471ac0058bc5a91501d94a34b8e5f84cc42c3fbe6edf28f03055a7b8379c80000ff7f000000000000000000", &(0x7f0000000040)=0x2f, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r4 = open$dir(&(0x7f0000000040)='./file0\x00', 0x200, 0xa0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x2031, r4, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6)
unveil(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='r\x00')
openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0xe8, 0x0)
setsockopt(0xffffffffffffffff, 0x1000000029, 0xc, 0x0, 0x0)
semop(r2, &(0x7f0000000000)=[{0x0, 0xfffc, 0x1000}], 0x1)
getitimer(0x300, 0xfffffffffffffffe)
syz_emit_ethernet(0xdd, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"])

3.604813866s ago: executing program 4 (id=186):
r0 = open$dir(&(0x7f0000000440)='.\x00', 0x0, 0xc4)
mkdirat(r0, &(0x7f0000000a80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
open$dir(&(0x7f0000000b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x0)
r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(r1, &(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x2, 0x0, 0x1d}, 0x4, &(0x7f0000000380)="b0321c3e69162d85", &(0x7f0000000180)=0x8, 0x0, 0x0)
symlinkat(&(0x7f0000000700)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r1, &(0x7f0000000200)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
poll(&(0x7f00000000c0)=[{r1, 0x4}], 0x1, 0xee6)
symlinkat(&(0x7f0000000800)='./file0\x00', r1, &(0x7f0000000400)='./file1\x00')
rename(&(0x7f0000000100)='./file1\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
unlink(&(0x7f0000001080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
rename(&(0x7f0000000e80)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
r2 = socket(0x10, 0x3, 0x0)
close(r2)
r3 = socket(0x800000018, 0x1, 0x0)
getsockopt$sock_cred(r2, 0xffff, 0x1022, &(0x7f0000000140)={0x0, 0x0, <r4=>0x0}, &(0x7f00000001c0)=0xc)
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x4, 0x0, 0x0, 0x0, r4, 0x12, 0x6}, 0xfff})
bind$unix(r3, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7, 0x3}, 0x8)
connect$unix(r2, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c)
r5 = socket(0x800000018, 0x1, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
setsockopt$sock_int(r5, 0xffff, 0x4, &(0x7f0000000000)=0x2000080, 0x4)
bind$unix(r5, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c)

3.604519494s ago: executing program 5 (id=187):
r0 = kqueue()
kevent(r0, &(0x7f0000000180)=[{{r0}, 0xfffffffffffffff9, 0x31, 0x2, 0x6, 0x7}], 0x0, 0x0, 0x7f, 0x0)
kevent(r0, 0x0, 0xffffffc0, 0x0, 0x1, 0x0)
kevent(r0, &(0x7f0000000000), 0x3ff, 0x0, 0x8000800, 0x0)
r1 = semget$private(0x0, 0x1, 0x88)
r2 = socket(0x11, 0x3, 0x0)
sendto$unix(r2, &(0x7f0000000000)="b1000504600000000000000001200000331c13fecea10500fef96ecfc72fd3357ae320b305673039d2d036073705ae04be38164911f7c8cf5f882b297be1aa5b239b672f4d335d223e7d026ba8af630037282102000000720fd38bfbb770c1f5a872c881ea6e69e0bb76d9ec0020020000000000008abfba0900000008e3710100000012051eadb71d89e000040781e4b2fff86700"/163, 0xffffffffffffff47, 0x40e, 0x0, 0x0)
semop(r1, 0x0, 0x10)
kqueue() (async)
kevent(r0, &(0x7f0000000180)=[{{r0}, 0xfffffffffffffff9, 0x31, 0x2, 0x6, 0x7}], 0x0, 0x0, 0x7f, 0x0) (async)
kevent(r0, 0x0, 0xffffffc0, 0x0, 0x1, 0x0) (async)
kevent(r0, &(0x7f0000000000), 0x3ff, 0x0, 0x8000800, 0x0) (async)
semget$private(0x0, 0x1, 0x88) (async)
socket(0x11, 0x3, 0x0) (async)
sendto$unix(r2, &(0x7f0000000000)="b1000504600000000000000001200000331c13fecea10500fef96ecfc72fd3357ae320b305673039d2d036073705ae04be38164911f7c8cf5f882b297be1aa5b239b672f4d335d223e7d026ba8af630037282102000000720fd38bfbb770c1f5a872c881ea6e69e0bb76d9ec0020020000000000008abfba0900000008e3710100000012051eadb71d89e000040781e4b2fff86700"/163, 0xffffffffffffff47, 0x40e, 0x0, 0x0) (async)
semop(r1, 0x0, 0x10) (async)

3.595782961s ago: executing program 6 (id=188):
munmap(&(0x7f0000000000/0xf000)=nil, 0xf000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
r2 = socket(0x18, 0x1, 0x0)
close(r2)
preadv(r2, &(0x7f0000000340)=[{0x0}], 0x1, 0x3)
close(r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
bind$unix(r3, &(0x7f0000000040)=@file={0xd19450564dee018c, './file0\x00'}, 0xa)
sysctl$net_inet_ah(&(0x7f0000000000)={0x4, 0x1e, 0x2, 0x6}, 0x4, 0x0, 0x0, 0x0, 0x0)
sysctl$kern(&(0x7f0000000000)={0xa}, 0x7, &(0x7f0000000080), 0x0, 0x0, 0x24)
connect$unix(r3, &(0x7f0000000000)=@file={0xd1653077bafa0114, './file0\x00'}, 0xa)
r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0)
fcntl$dupfd(r4, 0xa, r1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r5, &(0x7f0000000000)=@file={0xd1653077bafa0114, './file0\x00'}, 0xa)
dup2(r0, r1)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x9810, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)

3.585632948s ago: executing program 7 (id=189):
ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f00000000c0)={0x0, 0x4, 0x8a38, 0x0, "07160a009cef01098b748200"})
r0 = socket(0x11, 0x3, 0x0)
sendto$unix(r0, &(0x7f0000000280)="b1000503200004000000000003000000331c13fecea10500fef96ec0c72fd3357ae30200004e3039d2d236acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b1257aea8c500002002fbfe0c2300008abfba0900000008e371a3f8343712051eeab71d89e00004070000000013000000", 0xb1, 0x8, 0x0, 0x0)
r1 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0)
r2 = socket$unix(0x1, 0x2, 0x0)
connect$unix(r2, &(0x7f0000000000)=@file={0xd1653077bafa0114, './file0\x00'}, 0xa)
sendmsg$unix(r1, &(0x7f0000000340)={&(0x7f0000000040)=@file={0x1, './file0\x00'}, 0xa, &(0x7f00000002c0)=[{&(0x7f0000000140)="4ef369bd543f7b84fc046b6a7e673fee1c18275d8acedb0b1eb3c786503bb2feab314851902b94a0da141f9a0de1bad7aad89d0f824bd8feab8283440081becbe446492c0ae13669145f7565a341c15b575aaac1b41dc2ffa17b7dede07c0b45a7c3f48ac236151d57a0d683aa59c4520e31225ada4be0464652983741598ea44fdef60cefcc477ce89f3f08c6cda1f7fe355295f121c26f5da8e504b050d44ba05a0d25ba79edb9c16337f848b56505acbb06f40ddfcbaf0d0254eeb1f9a0632142ffa0dc1c78", 0xc7}, {&(0x7f0000000240)="8de2f9577b3070800bc8e87dce7400ac7c19be4dc97afbc1b3334f4817803c66d81b149428da31dafc46ad52f9f8dfe4c86a9f3a6e74ac42af160bdc2d56604e00833ecb03e4bb85028c15036c62bacb7adacc7f4e2245d77f5c699ee0", 0x5d}], 0x2, &(0x7f0000000300)=[@rights={0x18, 0xffff, 0x1, [r2]}], 0x18, 0x1}, 0x3)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="89000000ffff000001"], 0x9}, 0x0)
recvmsg(r4, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f00000024c0)=""/236, 0xec}, 0x0)
setrlimit(0x8, &(0x7f0000000980))
sendmsg(r3, &(0x7f0000000380)={0x0, 0x32c, 0x0, 0x0, &(0x7f0000000000), 0x90}, 0x0)
sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xff0a, 0x0, 0x37)

3.373068696s ago: executing program 6 (id=190):
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket(0x11, 0x3, 0xfe)
sendto$unix(r2, &(0x7f00000000c0)="b10005136000009f050000b10010000000000000cea10500fef96ecfc727d3357ae302b37b67ca1f2d61db7f4de57804be381606000000cf5f882b297be1aa5b23edeb51e2f0ac3ebbc257699a1f139b672f4d335d223e7db3008b95665bc614221800000000000000fbb770c1f5a872c881ea772ec5890405b3b9c2668396f4cd1257aea8c500002002fbfc0c2300008abfba0900000008e37f71a3f8343712051eeab71d89e000040381ecb664000000", 0xb1, 0x0, 0x0, 0xfffffe41)
fcntl$setstatus(r0, 0x4, 0xc0)
r3 = semget$private(0x0, 0x2, 0xa)
semop(r3, &(0x7f0000000240)=[{0x4, 0x8000, 0x800}, {0x3, 0x200, 0x800}, {0x4, 0x9}, {0x0, 0xff, 0x800}, {0x0, 0xd, 0x800}, {0x3, 0x1, 0x1000}, {0x0, 0x7fff, 0x800}], 0x7)
r4 = getppid()
connect$unix(r1, &(0x7f0000000380)=@abs={0x1, 0x0, 0x3}, 0x8)
msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f00000000c0)={{}, 0x0, 0x0, r4, 0x0, 0x7})
pipe(&(0x7f00000001c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$WSKBDIO_GETMAP(r5, 0x80047476, &(0x7f0000000100)={0x0, 0x0})
r7 = fcntl$getown(r5, 0x5)
syz_emit_ethernet(0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="aaa8aaaaaaaaffffffffffff86dd607aa63f00002b00fe8000000000000000000000000020bb00000000000000040000000000000001fd0e666c5e970a5b0386d1bdcf4d39e261a4666fd2b3201a9cca9a5bbb16796cebbfeeb2a13faafda797cdb8de3ecd9b00008b672ad42f4b9fee2a29a33319a40ab608f76fc0f113b14131e4d4579a1a180854c64372f741f209e2ffa94701000080000000000d055f1a05a744d56640965dfd6a93ba406d177ce615c61a904fc2e776b23ba37783e88e632c33a436ff00"/212])
r8 = open(&(0x7f0000000000)='./file0\x00', 0x9cab835cfdc52675, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0xa011, r8, 0x0)
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x32, 0x1b}, 0x80000000000002, 0x3d3, 0xffffffffffffffff, 0x0, 0x8000000000000000, 0x9, 0x0, 0xffe})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
sysctl$net_inet_udp(&(0x7f0000000000)={0x4, 0x2, 0x11, 0x2}, 0x4, 0x0, 0x0, 0x0, 0x0)
socket$inet(0x18, 0x3, 0x102)
r9 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0)
preadv(0xffffffffffffffff, 0x0, 0xffffff85, 0x1ff)
fcntl$dupfd(r6, 0xa, r9)
mprotect(&(0x7f0000002000/0x11000)=nil, 0x11000, 0x6)
symlink(0x0, &(0x7f0000000100)='.\x00')
clock_gettime(0x2, &(0x7f0000000040))
fcntl$setown(r0, 0x6, r7)
close(r1)
pipe(&(0x7f0000000200))

1.927475673s ago: executing program 1 (id=191):
geteuid()
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{}, {0x1, 0x0, 0x0, 0x2}]})
pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000440)}], 0xe, 0x3fffd)
ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, 0x0)
setrlimit(0x8, &(0x7f0000000980)={0x42, 0x62})
r0 = syz_open_pts()
close(r0)
syz_open_pts()
writev(r0, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1)
setrlimit(0x4, &(0x7f0000000140)={0x9, 0x52})
ioctl$TIOCSBRK(r0, 0x2000747b)
r1 = syz_open_pts()
close(r1)
mknod(&(0x7f0000000000)='./file0\x00', 0x1ffa, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
sysctl$kern(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
shutdown(0xffffffffffffffff, 0x1)
sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
r2 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
shmctl$IPC_SET(r2, 0x1, &(0x7f0000000240)={{0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x7}, 0x0, 0xfffc, 0x0, 0x0, 0x4, 0x0, 0x800000800000000})
shmat(r2, &(0x7f0000001000/0x3000)=nil, 0x0)
writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000001600)='\t', 0x1}], 0x1)
madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000002)
socketpair(0x1, 0x2, 0x0, &(0x7f0000001640)={<r3=>0xffffffffffffffff})
recvmmsg(r3, &(0x7f0000001dc0)={0x0}, 0xb, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200, 0x52)
open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110)
ioctl$FIONBIO(r1, 0x8004667e, &(0x7f0000000280)=0xffffffff)

1.927220712s ago: executing program 2 (id=192):
r0 = getppid()
msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f00000000c0)={{}, 0x0, 0x0, r0, 0x0, 0x7})
open(&(0x7f0000000240)='./file0\x00', 0x80000000000206, 0xd6)
r1 = socket(0x11, 0x3, 0x0)
sendto$unix(r1, &(0x7f0000000000)="b1000504000004000000000007000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4fcf668246c0900e1937c727a4bdb8d000008e371a3f834371205", 0xb1, 0x0, 0x0, 0x0)
r2 = socket(0x18, 0x2, 0x0)
setsockopt(r2, 0x1000000000029, 0xa, &(0x7f0000003680)='\x00\x00\x00\x00', 0x4)
setsockopt(r2, 0x1000000029, 0xd, &(0x7f0000000140), 0x0)
pipe(&(0x7f00000001c0)={<r3=>0xffffffffffffffff})
ioctl$WSKBDIO_GETMAP(r3, 0x80047476, &(0x7f0000000100)={0x0, 0x0})
socket$inet6(0x18, 0x5, 0x3)
sysctl$kern(&(0x7f0000003740)={0x1, 0x16}, 0x2, &(0x7f0000000140), 0x0, 0x0, 0x0)
r4 = fcntl$getown(r1, 0x5)
ktrace(&(0x7f0000000140)='./file0\x00', 0x4, 0x40000124, r4)

1.926963581s ago: executing program 3 (id=193):
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$setstatus(r0, 0x4, 0xc0)
write(r1, &(0x7f00000002c0)="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", 0xfffffdaf)
execve(0x0, 0x0, 0x0)
r2 = socket$inet6(0x18, 0x5, 0x5)
fcntl$setown(r2, 0x6, 0x0)
recvfrom(r1, &(0x7f0000000140)=""/156, 0x9c, 0x1003, &(0x7f0000000000)=@un=@abs={0x0, 0x0, 0x3}, 0x8)

1.926510023s ago: executing program 4 (id=194):
semop(0x0, &(0x7f00000000c0)=[{0x4}, {0x2, 0x2ff, 0x1800}], 0x2) (async, rerun: 32)
r0 = socket(0x1, 0x400000002, 0x0) (rerun: 32)
r1 = socket(0x18, 0x2, 0x0)
connect$unix(r1, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) (async, rerun: 32)
r2 = dup2(r1, r0) (async, rerun: 32)
poll(&(0x7f0000000080)=[{r0, 0x1}], 0x1, 0x20000201)
execve(0x0, 0x0, 0x0) (async)
r3 = open(&(0x7f00000000c0)='./file0\x00', 0x70e, 0x198)
mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x3, 0x2010, r3, 0x0) (async, rerun: 64)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff}) (rerun: 64)
poll(&(0x7f0000000100)=[{r3, 0x2}, {r4, 0x4}, {r0, 0x20}, {r0, 0x8}, {r2, 0x100}, {r0, 0x2}, {r2, 0x2}], 0x7, 0x4) (async)
getsockopt(r0, 0x29, 0x2c, 0x0, 0x0) (async)
connect$unix(r0, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0xa)

1.926295497s ago: executing program 5 (id=195):
r0 = syz_open_pts()
setrlimit(0x8, &(0x7f00000001c0)={0x42, 0x62})
syz_open_pts() (async)
r1 = syz_open_pts()
close(r1)
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000040)={0x6, &(0x7f0000000000)=[{0x3, 0x0, 0x9c, 0x1}, {0xdae, 0xb1, 0x1, 0x7}, {0xfa, 0x3, 0x0, 0xe}, {0x5, 0x8, 0x4, 0xff0}, {0x0, 0x9, 0x4, 0xee4}, {0x9, 0x1, 0xfb, 0xfffffffe}]}) (async)
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000040)={0x6, &(0x7f0000000000)=[{0x3, 0x0, 0x9c, 0x1}, {0xdae, 0xb1, 0x1, 0x7}, {0xfa, 0x3, 0x0, 0xe}, {0x5, 0x8, 0x4, 0xff0}, {0x0, 0x9, 0x4, 0xee4}, {0x9, 0x1, 0xfb, 0xfffffffe}]})
sysctl$kern(&(0x7f00000000c0)={0x1, 0x37}, 0x4, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x3, 0x0, 0x2e)
syz_open_pts()
readv(r1, &(0x7f0000000200)=[{&(0x7f0000000100)=""/185, 0xb9}], 0x1) (async)
readv(r1, &(0x7f0000000200)=[{&(0x7f0000000100)=""/185, 0xb9}], 0x1)
execve(0x0, 0x0, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6089958900002b00fe8000000000000000000000000000aafe80000000000000000000dd"])
ioctl$TIOCSETD(r0, 0x8004741b, &(0x7f0000000040)=0x401)

1.925937944s ago: executing program 6 (id=196):
r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x186)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x7b)
write(r1, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c)
sysctl$net_inet_ip(&(0x7f0000000080)={0x4, 0x2, 0x0, 0x1f}, 0x4, 0x0, 0x0, 0x0, 0x0)
fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x1ff})
sendmsg$unix(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f0000000080), 0x1c, 0x0}, 0x0)
getsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f0000000640)={0x0, <r2=>0x0}, &(0x7f0000000680)=0xc)
getgroups(0x3, &(0x7f00000006c0)=[0x0, <r3=>0x0, 0x0])
sendmsg$unix(r1, &(0x7f0000000740)={&(0x7f0000000100)=@abs={0x1, 0x0, 0x0}, 0x8, &(0x7f0000000200)=[{&(0x7f0000000380)="afd132189865432788447b32bae1e7a937435fa99bbf44fb521bcfa2c992c6b8a0e763a41b8c3ed0ec933eea453da07a740064c1a5a9aa4332f888a132a5fac75c6f49fa27ec60ed59cc6a7cdbce79011ea7de8e71e9919a8a1258a72e619e80584f4b", 0x63}, {&(0x7f0000000400)="4815138774d2f8fb26dd2192c8ed15842cbbdfc1c7d1dc98a73163ba62e25ff7fd8f6de7bbc987c5b4dfbfa0a63a000a958e8a93f6f2dfb34bda857277d5c620ebed4cedcde9cb34683aa51f8cb9c02c76421646f7fe7b7c87f435059ca053511b95702bffd037d251fb0b4d7e0a5546fc6511be9b437a8f2dcf059cd1b76c0e9b636793f37fca0733d62888654dc7c8fe4cb9289681d2c2354993e7cc6f23dcbb80213ecd03d05890117dad9502c74dcf47fd", 0xb3}, {&(0x7f0000000500)="2b8c3f7dbebd3e983782ebc7eb3a1509100bc00d289b115393ce35a0b59d27464e525f49b998bbcc6a1a1ed6e215cf44b384d2889b92708ae60db6105f6c00a162f0eaaeddc02897f04c7751e98b83db5d735d36040fae960b985e0a8d", 0x5d}, {&(0x7f0000000580)="cbd18abc35106e18ce1b9dc98d3a9b2b8450a3ab10fd7ac046a3aa9631bc1f60dd104416f7a632e545c3c390de7ff166aa722b440dcb7db17a989a3cd3271969f14a9d527a16c017383e77639fd24790e016f415f40c0bcbd626c4e7c292d2e92f0837dcfc4942587793306514e5626c08b681712855738a24f19e916a2da908f96502a44552a1c6748a", 0x8a}], 0x4, &(0x7f0000000700)=[@cred={0x20, 0xffff, 0x0, 0xffffffffffffffff, r2, r3}, @rights={0x20, 0xffff, 0x1, [r0, r1, r0]}], 0x40, 0x405}, 0x2)
r4 = socket(0x18, 0x2, 0x0)
connect$unix(r4, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c)
r5 = socket(0x2, 0x4001, 0x0)
mmap(&(0x7f0000235000/0x3000)=nil, 0x3000, 0x2, 0x1012, r5, 0x40000000000)
socket(0x10, 0x2, 0x72)
getsockname$inet(r4, &(0x7f0000000080), &(0x7f0000000000)=0xc)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r6 = socket(0x18, 0x2, 0x0)
setsockopt(r6, 0x1000000000029, 0xb, &(0x7f0000000040)='\x00\x00\x00\x00', 0x4)
shmget(0x2, 0x1000, 0x10, &(0x7f0000fff000/0x1000)=nil)
setsockopt(r6, 0x1000000000029, 0xa, 0x0, 0x0)
sendmsg$unix(r4, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x2)
truncate(&(0x7f0000000000)='./file0\x00', 0x2fffe)
r7 = open(&(0x7f0000000040)='./file0\x00', 0x2, 0x0)
preadv(r7, &(0x7f0000000340)=[{&(0x7f0000000240)=""/229, 0xe5}, {&(0x7f0000000140)=""/139, 0xffffffbc}], 0x2, 0x0)
socket(0x10, 0x4000, 0x4)
truncate(&(0x7f0000000000)='./file0\x00', 0x3)

1.925793481s ago: executing program 7 (id=197):
socket(0x18, 0x2, 0x0)
select(0x40, &(0x7f0000000000)={0xff, 0x0, 0x0, 0x2, 0x1, 0xe2}, 0x0, 0x0, 0x0)
select(0x40, &(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x0, 0x0)

1.71299799s ago: executing program 7 (id=198):
openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f00000000c0)={{0x3, 0x0, 0xffffffffffffffff, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff})
r0 = kqueue()
r1 = socket(0x1, 0x2, 0x0)
setsockopt$sock_int(r1, 0xffff, 0x1023, 0x0, 0x0)
kevent(r0, 0x0, 0x0, 0x0, 0x7, 0x0)
kevent(r0, &(0x7f0000000000), 0x297, 0x0, 0x8001, 0x0)

1.712657874s ago: executing program 7 (id=199):
setrlimit(0x8, &(0x7f0000000980)={0x42, 0x62})
r0 = syz_open_pts()
close(r0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={<r1=>0xffffffffffffffff})
sendmsg$unix(r1, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f00000004c0)="7935c54c7801c92b7604b6671eb8623cf28d7af7d90a730085ffd9621180099a5d168ca6582a7af1bcf43fc4599cd3ed5b05d00dd261565e5296b3563c712abc5ba13f3333ce5e3bedee67fcb72ba0f97e7a1944dd73dd9c3df831ddabc7694522a8d37cd3b7ecc34b0d280d54f63eca7071cd8d688083acc916fbb1b809eff130c43c185a677dd6c037fa3b08e3fbc5c539bbc538f34f39b79e102e5f048ce04d08b1471ee665b43f505db28b95ce63b690dce15ee14779", 0xb8}], 0x10000000000001ad, &(0x7f0000001a80)=ANY=[@ANYBLOB="10000000ffff000001"], 0x10}, 0x0)
r2 = syz_open_pts()
ioctl$TIOCSETAF(r0, 0x802c7416, &(0x7f0000000100)={0x0, 0x0, 0x7, 0xfffffff7, "f5ff1d67147d5fe4b57d0002005fd70400"})
ioctl$TIOCSTOP(r2, 0x2000746f)
writev(r0, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1)

1.712428432s ago: executing program 8 (id=51):
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
socket$unix(0x1, 0x5, 0x0) (async)
r0 = socket$unix(0x1, 0x5, 0x0)
getsockopt$sock_cred(r0, 0xffff, 0x1024, 0x0, 0x0)
setrlimit(0x3, &(0x7f0000000080)={0x2795, 0x100000})
setrlimit(0x3, &(0x7f0000000000)={0x7fff, 0x100000})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
nanosleep(&(0x7f0000000140), &(0x7f0000000180))
open$dir(&(0x7f0000000080)='./file0\x00', 0x800, 0xb)
open$dir(0x0, 0x100, 0xa1) (async)
open$dir(0x0, 0x100, 0xa1)
rename(&(0x7f0000000dc0)='./file1\x00', &(0x7f0000000e00)='./file1\x00')
mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) (async)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0)
writev(r1, &(0x7f00000008c0)=[{0x0}], 0x1) (async)
writev(r1, &(0x7f00000008c0)=[{0x0}], 0x1)
open(&(0x7f0000000100)='./file0\x00', 0x712, 0x0)
r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
setitimer(0x1, 0x0, 0xffffffffffffffff)
fcntl$lock(r2, 0x9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x20001fffffffd})
ioctl$WSKBDIO_SETENCODING(r2, 0x80045710, &(0x7f0000000040)=0x2)
close(r2) (async)
close(r2)

7.390363ms ago: executing program 1 (id=200):
setrlimit(0x8, &(0x7f0000000100)={0x7, 0x54})
r0 = syz_open_pts()
open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0xe8, 0x0)
r2 = fcntl$dupfd(r1, 0x3, 0xffffffffffffffff)
ioctl$FIONREAD(r2, 0x800c745b, &(0x7f0000000080))
close(r0)
r3 = syz_open_pts()
ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f00000000c0)={0x0, 0x0, 0x8a38, 0x0, "ffff09009cef01098b748200"})
syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"])
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080))
writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1)
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"])
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
r4 = socket(0x2, 0x1, 0x0)
setsockopt$sock_linger(r4, 0xffff, 0x80, &(0x7f0000000080)={0x3, 0x2}, 0x8)
connect$unix(r4, &(0x7f0000000000), 0x10)
close(r4)
writev(r0, &(0x7f0000000400)=[{&(0x7f0000000340)="35f484c7aea419b86d49f2c3e7232d867a9f5218091b1af529f004626ff41494a045493dd87ad4e1852be74d45b125d4dbcb8a090091ee8f713ae4d20c4950eb2547e4b2e91b63975d1f84ca191c1a90e672b206224e1564dae689a4088e662ba2f04eca4557dbe63acb3aa62e584423541ac224cde655893403744d0e364ceeb17a8136f0cc5e7a8851646abd67fa6c10606a7ce25cb5db71ed014a5c3d23ee2377020000", 0xf5}], 0x1)
dup2(r3, r0)
r5 = dup(r3)
poll(&(0x7f0000000000)=[{r5, 0x40}], 0x1, 0x0)
select(0x40, &(0x7f00000000c0)={0xfffffffffffffff8, 0x0, 0x4000000003, 0x4, 0xdf, 0x4, 0x4, 0x40000000002}, 0x0, 0x0, 0x0)
poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0)

6.778308ms ago: executing program 2 (id=201):
setrlimit(0x8, &(0x7f0000000580)={0xa, 0x56})
r0 = syz_open_pts()
close(r0)
sysctl$kern(&(0x7f00000000c0)={0x1, 0x12}, 0x2, 0x0, 0x0, 0x0, 0x0)
r1 = syz_open_pts()
ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000040)={0x7fffffff, 0x8001, 0x59, 0xffffff8d, "1826284ed92ca2e4aa13e4fcff0300", 0x0, 0x3})
read(r1, &(0x7f0000000080)=""/107, 0x6b)
writev(r0, &(0x7f0000000300)=[{&(0x7f0000000000)="987e", 0x2}], 0x1)
syz_open_pts()
writev(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f00000003c0)="70bfd7084e25953c42980539410184f14294d68632d8d26900000000c53b1793f1ac085e7c773d9ec757a519c83b3d4566d3ae6ffc480ccadfd69a7533916b3e5a8604a6bebcc6b5d82003ba258a3ebba44287a1f5634fce286db6eb7c128921f017dd359aafa4f98f46d552fec971650015a5daa856ad196033e2188fe4a1bca55579877762ab3d4f7a921036d9d267575f36cc3d9694fe5e0d03f83d741cfb427403a478d1ea191a86e0a129f48862d7de4f5244286f66d4d73e85f1650d9521c0f0683fc5ad55089b0b57104252edb0061b44689bbe7d4b", 0xd9}], 0x1)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x2f, 0x0}, 0x2)
r2 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
shmctl$IPC_SET(r2, 0x1, 0x0)
shmat(r2, &(0x7f0000001000/0x3000)=nil, 0x0)
ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f00000019c0)={0xfffffffc, 0xfffffffe, {[0xfffffffffffffffc, 0x8, 0x2, 0x100000000, 0x0, 0x0, 0x2e, 0x0, 0x0, 0x2f01, 0x4, 0x0, 0x0, 0x1, 0x4, 0x4, 0x2, 0x100], [0x5, 0x5, 0xfffffffffffffff8, 0x0, 0x1, 0x80000000, 0x0, 0x0, 0x0, 0x43], [0x8, 0x2, 0x100000000000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe], [0x100, 0x20000000000, 0x0, 0x100000000, 0xfffffffffffffffe], [{0x0, 0xc, 0x0, 0x7d06}, {0x2, 0x2, 0x1, 0x3}, {0x0, 0x0, 0xfffffffe, 0x1000}, {0x8, 0x0, 0x6, 0xfffffffffffffffe}, {0x0, 0x400, 0xd, 0x40}, {0x7ffe, 0x2000, 0x40003, 0x1}, {0xfffe}, {0x0, 0x95b, 0x0, 0x8}], {0x0, 0x5}, {0x203, 0x10, 0x4, 0x2}}})
r3 = kqueue()
kevent(r3, &(0x7f0000000080), 0xe4a, 0x0, 0x4000a9fa, 0x0)
sysctl$kern(&(0x7f0000000040)={0x1, 0x1a}, 0x2, 0x0, 0x0, 0x0, 0x0)

6.408012ms ago: executing program 3 (id=202):
clock_settime(0xffffffffffffffff, &(0x7f0000000000)={0x2a6, 0x2})
sysctl$kern(&(0x7f00000000c0)={0x1, 0x41}, 0x2, &(0x7f0000000100)="71f91e34", &(0x7f0000000080)=0x4, 0x0, 0x0)

6.201106ms ago: executing program 4 (id=203):
r0 = kqueue()
kevent(r0, &(0x7f0000000000)=[{{}, 0xfffffffffffffff9, 0x17, 0x10, 0x40000000000000}], 0x29f, 0x0, 0x8001, 0x0)
sysctl$net_inet_carp(&(0x7f0000000040)={0x4, 0x2, 0x70, 0x4}, 0x4, &(0x7f0000001180), 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
select(0x40, &(0x7f0000000000)={0xfffffffffffffffd, 0x288, 0x1000000000000049, 0xffffffffffffffff, 0x8000007}, 0x0, 0x0, 0x0)
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"])
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r1 = socket(0x2, 0x2, 0x0)
connect$unix(r1, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0xa)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000001a00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[], 0x18}, 0x0)
sysctl$kern(0x0, 0x0, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f", &(0x7f0000000080)=0x12, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000000500)={0x0, 0x3}, 0x90, 0x0)
r2 = socket(0x18, 0x1, 0x0)
listen(r2, 0x7)
setsockopt(r2, 0x1000000029, 0x1b, &(0x7f0000000040)="6700d6e5", 0x4)
minherit(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3)

5.643663ms ago: executing program 5 (id=204):
syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) (async)
writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000000)="b886b4e47f", 0xfffffffffffffee7}], 0x1)
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"])
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) (async)
r0 = socket(0x2, 0x1, 0x0) (async)
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000500)={0x3, &(0x7f00000000c0)=[{0x0, 0x0, 0x2, 0xfffffffd}, {0x2, 0x0, 0x0, 0xffffffff}, {0x6, 0x0, 0x0, 0x41f41c8b}]})
r1 = socket(0x18, 0x1, 0x0)
setsockopt(r1, 0x1000000029, 0x33, &(0x7f0000000080), 0x0)
sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xff0a, 0x0, 0x37) (async)
setsockopt$sock_int(r0, 0xffff, 0x800, &(0x7f0000000340)=0x101, 0x4)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) (async)
r2 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) (async)
syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) (async)
writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000000)="b886b4e47f", 0xfffffffffffffee7}], 0x1) (async)
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) (async)
r3 = socket(0x2, 0x1, 0x0)
setsockopt$sock_int(r3, 0xffff, 0x1, &(0x7f0000000340)=0x101, 0x4) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
bind(r3, &(0x7f0000000000), 0x10)
listen(r3, 0x0)
r4 = socket(0x2, 0x1, 0x0)
connect$unix(r4, &(0x7f0000000000), 0x10) (async)
close(r3)
open(&(0x7f00000001c0)='./file0\x00', 0x2, 0xe2) (async)
ktrace(&(0x7f0000000100)='./file0\x00', 0x0, 0x800, 0xffffffffffffffff) (async)
shmctl$IPC_SET(r2, 0x1, &(0x7f0000000000)={{0x0, 0x0, 0xffffffffffffffff}})
shmat(r2, &(0x7f000026d000/0x2000)=nil, 0x0) (async)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0) (async)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6)

5.258428ms ago: executing program 6 (id=205):
syz_emit_ethernet(0xb6, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "6aa63f", 0x80, 0x2b, 0x0, @remote={0xfe, 0x80, '\x00', 0x0}, @loopback={0x4}, {[@dstopts={0x33}], @generic="425a1bbb3a5e94c174bc14ac4671cb501750e69315c0dcc120bffe40cb8c00565af13df55d545463f198ac4a3b591d15814959bfbf0d39c51dde8851903632b0ecd03022b2ca730e491bea1d52463f9c1ded628cadd4a7fc40de89ca98a607b9f513a3f7b2ad31fd860962bc76d4d23316a32449bc36bdba"}}}}})

0s ago: executing program 7 (id=206):
r0 = open(&(0x7f0000000000)='./file0\x00', 0x9cab835cfdc52675, 0x11)
readv(r0, &(0x7f0000000240)=[{0x0}], 0x1)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb5219f1000b913f1, 0x0)
pipe(&(0x7f0000000080)) (async)
pipe(&(0x7f0000000080)={<r2=>0xffffffffffffffff})
fcntl$dupfd(r1, 0xa, r2) (async)
r3 = fcntl$dupfd(r1, 0xa, r2)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) (async)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2)
setrlimit(0x8, &(0x7f0000000000)={0x42, 0x62})
r4 = syz_open_pts()
close(r4)
lseek(0xffffffffffffffff, 0x4a, 0x2)
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x2000000000000243, &(0x7f0000000100)}) (async)
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x2000000000000243, &(0x7f0000000100)})
socket(0x1, 0x2, 0x0) (async)
socket(0x1, 0x2, 0x0)
socket(0x2, 0x2, 0x0) (async)
socket(0x2, 0x2, 0x0)
r5 = kqueue()
kevent(r5, &(0x7f0000000040), 0x7fffffff, 0x0, 0xffffffff, 0x0)
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
shmctl$IPC_SET(0x0, 0x1, 0x0) (async)
shmctl$IPC_SET(0x0, 0x1, 0x0)
mlock(&(0x7f000061e000/0x1000)=nil, 0x1000)
r6 = syz_open_pts()
ioctl$FIOASYNC(r4, 0x80047470, &(0x7f0000000140)=0x2)
ioctl$TIOCSTOP(r6, 0x2000746f) (async)
ioctl$TIOCSTOP(r6, 0x2000746f)
poll(&(0x7f00000001c0)=[{r4, 0xaeecaebf517d446a}], 0x1, 0x6)
write(r3, &(0x7f0000000100), 0xfffffe5d)
sysctl$machdep(&(0x7f0000000000), 0x2, &(0x7f0000000040)="569ab5dd33f360fc557a192a9a454f1d5775d6278d1e25633ee48f7ea8300a6f8852751113aebccdb0028099847709e6ffbe4457d7b9dca97bd136ac50033422aafbea2016e3ee333b38c4cf6bbf70b9676551ef7b21593ea1c104d4a95e2eae452c5337aa8c04e2111bfe633047e47a8b099933657442ab377d812690cd3f01f15eaba8539a47a981a9a12378c5de4d1d21b0d0a30d53b15ff27867f3c83f7e40002218971d8d9125a4d7d3b78eb6e741fc3dcdca58631d3fb2228d690523cb4437d37be4ea05f331a83ebd4c4c6daefa52461c1c71e9d35a4d4e303665a205530adc8e56e6faa87aaad1e3d654a23d84fabc216818e6a2131020cd862da6b05a9051317bdd80b92ca106d468956a2837e8cc92301e9f81f7ca8ee089ceb34ad7bf9d78400dbfb354a584be20153a41ac08f82f3a4300f4bdceb79973f289bb99a7d07473343a1577d9fecc87f4ca7fc2e62c7fc488e188599cce0ded832403ce8d9ba909523e3841e7230fbda6f41aee4b8f4f3c4eab133f520fe3e31e858df427fcabc0c0449cb84a9186bb9cdc18336d1d09a7a1a0750f0a8a978d940b779209eda5756bcae7c9bc4d52fb317234660dce31f442895851e2dc32b6b7b9af3790daf46b6e5c3047cba96855572eaac75339ab117fe8aa344db0f7ab99d78b458930571201e3ddcbafb05cf1b5ca8a617726db8384d4224914b328cdd0bfc601a14bf14d8e58f87590a723f09a663f42e1bde11729c4eaa1984e320c70d7a1e85eebfd85fc9c6b9d0a85874f67eea94d2c478d04bfec752e71300d46c6829280d6ba307bc74d0de5e9e5f596b1141d039452669c19bfda946f7c9000b537211a78c45f722584370272c669523da07b78a5b428c82fb67d1dd066cb3fc7157c6d645ca3fdf91b5c16c0ec935aec04854c397fd4649c69c06deef7e18af0bf87131e8e33ec95d4dcaed3daf556fd4e73dce3f969c7ceaa6ca9cd91f7b12adfb761ba4478bdf8259a734f450c7a9a3244b8d0c33f69ad1994aec8f2393694581f0873fc8c4559286a53d67128bd8ae7f4acf559d36566b242cf4316a32530340b8a838fbdf81115fac720e86ab784b801c23e6f1549b1ac97aa971e11281466ab76155ca1cb1d1cf593df559b7e7a1fd1f42f7a086e6fcff6b9eb3abbedf16c42b42aba9e74ff67671fff540762e903068d3cf722486269611e05b76c223d616ead55c6cd441dd2eb7c9a44e5256bdd6e09e60af47d12a67c01905350370687783b161ef53687e20a22a18f86e17909c285659397e6feedd82bcd595f85e3a79e2c1caef2099fb2e0996bbb7ed65570816e3f9d52bbce1e2d787de0c8797a011c01778d02bb0507eb54ccdd4e9da544ce02f00981c7690c65ed8233292bff28276cb57b8300ae49d1df3f4faed513ac8c8d267ca32de6cf3875dd6dfebdc80179fe999acf3f2f4e7cff1d9612d497659b1859b58300816966dca3539e227033ef919d33da83a6e2f36353ff736857be2efeafc06e21b4c7514243d701345605645b25868d09524c9ba669482b70b77ccdb9da063e224822b17cd22722d821af05a7d82e45b1a05adef1c529a707887ca34f6a37def608077384cacd5055fd0dc6ccf4e390f11a7e44878718a3b726afd5a583a322b522fc107b53aed54c630c8a983f950f5e340bd2c210c2f0109900ab337e824a0bc97a475015fcbb340d768af9329f1078400520a03fe6330519f67ac2b6a05631718224bcba981c16b222b1325f94067ae3c52225d9168d152f847460eb89e020696eb7c0d621d99e959ac0aa1b59693902c27e0b4fd3c4fc0b3cde5df702619de99cf7499114473cb44fc6555cd2737c251cddb622b0cd3955b5ecc055dd9d889d3a90bc568c3608c177c7a1fb3c06c84a1e1b27b46c948b1b4ab15ab4f8ecf4bb941cdfbd0d6d5ca5c307514997fe4f3743e9d2643ddfa69123724417ee78f75d3805760fd752bc6d34f2b8ac0c02fb13fd9a53d9654bcb75cf01f547fd52ffc110372fc1420595236864005f2117221d8a1c10d05a10bf506999c79062de71c7952ad8797de52d7108ae01f94cc767deb4f6e194fa2227127c7f7104261d231fbd07b1f48f1d398c913190e0abd7de137ba5c64b4179962074a817c5f77b0568bcf1f07f389b71bdceb0900ede937fd34a08237c55f72e0f1608ff486e153757303bfbec174c3efe283d56eaf9be67a5d5f0c427e0b1ed818252b75fdd99dc898b0960ea4bdbcc617c21a13bd8dd4cd26f19d00b046249b54d04ed1d9e69ec978293f895b3295d8d94494bf583381c4238943976cfe205c140db6006cc9880b99e1f8d2502604fd980b40f78f1721ed9519c5876833fa97b9b33a2791b2db7c36440de2ada9aa2d0d92a267cd506a44b5db7a178edb3bd11f1223e069e436045ce06ef38f233326f561172f5d5137fcba687ef0221846ea915581838d742cf6f5139c1afe5501f34d8497455941837a163448ec9974644e96236b4340360fadb24f7f874218edca3aa0de8acd555af103b7e02b36f49357269012f1359e95cfa1a9a1d1f388905a499103a9f58e6563c77d17be1201c653578eaf3f7412b2fe9c992ab5d43f6641032b5b14b66587da2acb0e37677610b51d6dd0d2b1cf946ba892ff0f1e4a2f7e375f8204786d76baf158ee3cb59b0349a6bf1404e562121b83a82254ebe0c9655889538337949bd9c9655423ef33cb504c6410aec157a1059690df2e5ac8b0120423c2ede7fe378d6de8cf44abf66b5ed8234df1f68c9c239683c74aee54a588018426bd604ee7ba32ea06a2d1799c456e29b28616dcc71b7d01d97c754def1a29cce04253bd356cd0aa51227fab0c5ef35ce9171a894d948d99206d0cf2c6aad4d6296d64c267e84f735c85385e1df463d719d4a8b461d453a14f87f989dbb3d206bfb7bdbc1c811f0fc2f18425f9b82230a1561bc7c06144429c50aff59a9f76709cb9fce1f3fab8e8fdeedd6da17d9b8497ba9c66bc139939c2f1b11e91fda0167ecebbe9ccc91c3acac45e912b10eec75408e5dbe2f9bea107afb1797ae5cd7c2dc3a0cbec6f7a9fea905ffac8d19a740f515cc55d348a6f73f8d1ac09e3226677ce3c9614c7f723a18f648f5404e25305acd486c7bfa6ad621a7731df34a36cd296258840cfacea2b34490eb0c995c7948376e85a81ac3bcc66d8d6773450af1131ad48ba6c25329931a07fd598dd53f472053f296ba0ee8d0edc19d819f195c4b66774ce037ff7a0af3848d3e5bcf8c683519ad6b4c8be66dba86b8513558b067725e0a12c4cc2a161a030647d19539a3d3beab301a4ab2ab1469619374cb9760aa7af41e6958d2f25c5143430c2e1b3ecf00c8fa64a38704ff7bb37dc2e6a0f650fe767bfcb895509f65475b89dc317b45d51a96e72be1cce4cfefb64b1f27149975b3faa76c65f29a177dcd2647cbb91e663ca79089555becfc64bcc0cf598b5b6e4af87ff9896db7ef2511740f349298dc101cd6af632bfd9840d9b5464577e1a4b31b90884da27a57a8b75f3b771c8083793d467cf3f071502740942e94acc1812c223f6f05fabaa9436c398615de2995e4e40fd0450f40a5081e9cca031ec703cbc9754603338f53768a03d3f87cb430398648747428f03ddc0e579d3a626d2395519aedf51385544a0e33d08111d43fcfc2e3e263f26af8f5a9e49f9a5edfa614783abf5cd9a6c52f51c8435c09083e543cf7fc5fa3c289bcf0906ec5f18af57e4df2996bdb8ae15bfaba3483eb81971cbcb610b114e83d21847bf4d7ac56069d2c86e35bf90e436a71da563489d1157bc83fd03170f1f4c1753430136b883da5e8361f674232c7143d740a4a0252c62f838b1c29a57fa00e0013dbfb205135a9a1df835ba8150f4a4ec62a87d4d49fd44f05a10348ba1106058f2118b1283e4a71e74525f9f01dde41e7d423aa79175475c836af93147a477593a002f8a88be263574ae93b5736e55743cc24d166347ec5334c68aaa6ac46c0c0d1fd5bd4393d3454eb27b9b9dc4a756ad0e672d0f2cbaf1456b463a1ecc78f1925e49ce55fe592150c757df96751837f23e7bab1d23dcf87228f4a9a4347ce6a258fc381551e8b3c710753274fc717c01dd7fa0b3761cbd8d9072661433290526a9bf6498ca9e189e126cb18ef84f21ab498aa6a0136b776388e6f6370d6df3c72b6de03c533e52112c28ec23537cda3506ee26b5138098bbd2467bee644d62315009a00c9412b3c216cc80ac6fb97dc445640f66bcb90cdc0503f7705c6956ded3f2049889a7bbc6b939e6038df2c4c5adb361765e5dafa3ca012f555da9e1040607e18c30fd36e52a366823a8cbc84c7339bd4b8a7b813bb76e6d497109a9e884306751a4f0f4e80eee2024f64a5fc37ed7ddf4e7783b048dc990ae11cdea4fe7da7f3fd150b1f1a506e0de45900162e030d31c944f5625b1cb6230185ee4d8342afbe7c9bb2168a561e9d10cd4ba263a144f3badb67ffb19af891045d1eb5fa7f441ea088fbb8ceec8d7aac516661d37c6f36194e8cc3edd390c40d996891b41377507e7a7177d312353592c19f22987bbe1c57012ae280b585177e26c83b6941f8d8ea9e2aa3f798af491ae0ff0aa60082311d85f83ced3655062b4b778cb3f0ad479498527328ba5e82e276a0eca2761036c550d94beedb859222ad135d60c56374bd4d1bfa627fd3d909924ea85a42b34548479bf098f72207913a9f987fe884d07e59873b6e638bf51fe6d6c5255c18a54a6955b152c9a9f40854f3c714e916bb29bf5ec8d641cdb7e82204b3c8a8f7be4872de41cead64e85559eca11926ab98132d9c3f4b9773ec0858c8ba7254a8e33c42cefe7e35fccbe4d18d1c9fbe767d30ef3052266a53d4db7ac8ef9c6c5037ea509d516c318e7a413c6b8b456f61cf1bab6499396bccf81690188c786ec44a8e4e0194061dac787d612cc4b25bfc133be23e9cead3ddd4df96e6e512644d3039b57703ab1dfaf27baa336aa69d4a0edbfe0fda62b94e458a1e652c255d5baf7e4c0e8b02981dcf59c1b313a2807ad56aab71eb0e7c9dbacaef5163cb4331b5acc6d9d91fc93eb91ee0b564a9f5437c877483bc5c6102e9022916e4efc0def09c0e26478baedb90bcb454c40446a6a040c525c044f02ae1d335a04ea34b007ba104b99b69e83622918733451347c1bace1be030e435309f7411deb3d4b5fb6340cb4057b5326c0bfca3f651fd78cac3324c914fed60384b3089cdc50a1d9ec4f4b49f782ebf7435f1b91ec76d43604d4cf56fb7a2da3e72d34252998e53a12b14110ebfb6ef8ece7d04de9bce272d41e540658cea25bbbd46c8049066f64fb7efa2e1ef37e265e132fe4ce0655782eeb9356e45f03898a643e10c07e615d3635c68c1fcadf37d5cdef3af193f9daeda29efc3e29d38cdaf91f8e44c8e619dd2d7948df1a193941ce0932bbaa5c41b1b54d76ad171ce12589a1deb5c642b2761027fb071f3b2672e347ab5c9d59c077288ee824f02ea31bd075da0f63b157c6bf01910139cca834c8ee693011306bfbec9bdfe1b1a3dc240b4e02f8e87c68c0a02690c7827073cc2d914a95d9b588679bdc707afbb41278bf1d3681cad161e142d87fde3199654409f2351e2ae20d9c783537d75b9fb775d57f56de76f6402a8bf2a363d6507c394ccbfe46bc039ebb458b1515a5729dc962746be50ef770a6984b43fe3c1e6f19f8fd4e4a44fdc7380a61ff5085a8bb7405cfaeee84db58e6d3e5687db777eb2dae3ae6d527748", &(0x7f0000001040)=0x1000, &(0x7f0000001080)="02fb677aeb93ecf780288804e73d282b83ca0049b14b11bebd97a88b75d9b4153177c57e6874b2c7793e1ef3f555d0cbdb15ee6bc08e03cd8891f9ae39025f1159132a41f8f14c99a6db27304b85be977985e71fba8a7fba704376b5eae61762051e903a854e3bdf4a5e4444bc6c85a3961de559f6e1206a44d983cb43137e862669da2af03febeff8991e7a482288e40f935d97d2e44045976d6253b65ed9524842d4437728764071f42eaf9c7acb3deee75ef01e08e48a3b802f311fd1c4a0", 0xc0)
setegid(0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.182' (ED25519) to the list of known hosts.
uvn_flush: obj=0xfffffd806b90e990, offset=0x0.  error during pageout.
uvn_flush: WARNING: changes to page may be lost!
panic: kernel diagnostic assertion "va >= entry->start" failed: file "/syzkaller/managers/setuid/kernel/sys/uvm/uvm_fault.c", line 1739
Stopped at      db_enter+0x25:  addq    $0x8,%rsp
    TID    PID    UID     PRFLAGS     PFLAGS  CPU  COMMAND
 517959  32949  32767        0x10          0    0  syz-executor
*246645  32949  32767        0x10  0x4000000    1K syz-executor
db_enter() at db_enter+0x25
panic(ffffffff83439658) at panic+0x1e5
__assert(ffffffff833e72a7,ffffffff8342b218,6cb,ffffffff8333e09f) at __assert+0x29
uvm_fault_unwire_locked(fffffd806bff2580,400000000000,400000006000) at uvm_fault_unwire_locked+0x4c1
uvm_fault_wire(fffffd806bff2580,400000000000,400000011000,3) at uvm_fault_wire+0x12d
sysctl_vslock(400000000100,ff0a) at sysctl_vslock+0x109
kern_sysctl_dirs(49,ffff8000364b4b78,4,400000000100,ffff8000364b4ba8,0,ecc06886f57ffe18,4) at kern_sysctl_dirs+0x247
kern_sysctl(ffff8000364b4b74,5,400000000100,ffff8000364b4ba8,0,37,8f41d913733a2dce) at kern_sysctl+0x12d
sys_sysctl(ffff8000ffff4f88,ffff8000364b4ce0,ffff8000364b4c30) at sys_sysctl+0x425
syscall(ffff8000364b4ce0) at syscall+0xbc6
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0xbe444038c90, count: 4
https://www.openbsd.org/ddb.html describes the minimum info required in bug
reports.  Insufficient info makes it difficult to find and fix bugs.
ddb{1}> 
ddb{1}> set $lines = 0
ddb{1}> set $maxwidth = 0
ddb{1}> show panic
*cpu1: kernel diagnostic assertion "va >= entry->start" failed: file "/syzkaller/managers/setuid/kernel/sys/uvm/uvm_fault.c", line 1739
ddb{1}> trace
db_enter() at db_enter+0x25
panic(ffffffff83439658) at panic+0x1e5
__assert(ffffffff833e72a7,ffffffff8342b218,6cb,ffffffff8333e09f) at __assert+0x29
uvm_fault_unwire_locked(fffffd806bff2580,400000000000,400000006000) at uvm_fault_unwire_locked+0x4c1
uvm_fault_wire(fffffd806bff2580,400000000000,400000011000,3) at uvm_fault_wire+0x12d
sysctl_vslock(400000000100,ff0a) at sysctl_vslock+0x109
kern_sysctl_dirs(49,ffff8000364b4b78,4,400000000100,ffff8000364b4ba8,0,ecc06886f57ffe18,4) at kern_sysctl_dirs+0x247
kern_sysctl(ffff8000364b4b74,5,400000000100,ffff8000364b4ba8,0,37,8f41d913733a2dce) at kern_sysctl+0x12d
sys_sysctl(ffff8000ffff4f88,ffff8000364b4ce0,ffff8000364b4c30) at sys_sysctl+0x425
syscall(ffff8000364b4ce0) at syscall+0xbc6
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0xbe444038c90, count: -11
ddb{1}> show registers
rdi                                0
rsi                              0x1
rbp               0xffff8000364b46e0
rbx               0xffff800029aacdc7
rdx                                0
rcx               0xffff8000ffff4f88
rax               0xffff800029aabff0
r8                 0x101010101010101
r9                0x8080808080808080
r10               0x4955ccae26a97e6a
r11               0x4e6acdcad77ce965
r12               0xffff800029aacbc8
r13                                0
r14                                0
r15                              0x1
rip               0xffffffff8177c835    db_enter+0x25
cs                               0x8
rflags                         0x246
rsp               0xffff8000364b46d0
ss                              0x10
db_enter+0x25:  addq    $0x8,%rsp
ddb{1}> show proc
PROC (syz-executor) tid=246645 pid=32949 tcnt=5 stat=onproc
    flags process=10<SUGID> proc=4000000<THREAD>
    runpri=36, usrpri=51, slppri=36, nice=20
    wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0
    forw=0xffffffffffffffff, list=0xffff8000ffff4028,0xffff8000ffff42c8
    process=0xffff80003c500250 user=0xffff8000364af000, vmspace=0xfffffd806bff2580
    estcpu=1, cpticks=2, pctcpu=0.0, user=0, sys=2, intr=0
ddb{1}> ps
   PID     TID   PPID    UID  S       FLAGS  WAIT          COMMAND
 78545  347495  64692  32767  2        0x10                syz-executor
 78545  137388  64692  32767  3   0x4000090  fsleep        syz-executor
 62075  124870   9236      0  2           0                syz-executor
 18261  412992  89207  32767  2        0x10                syz-executor
 32949  517959  12604  32767  7        0x10                syz-executor
*32949  246645  12604  32767  7   0x4000010                syz-executor
 32949  472894  12604  32767  2   0x4000010                syz-executor
 32949  294037  12604  32767  3   0x4000090  fsleep        syz-executor
 32949  507379  12604  32767  2   0x4000010                syz-executor
 59826   24839  95431  32767  2        0x10                syz-executor
 59826  405953  95431  32767  3   0x4000090  kqsel         syz-executor
  1820  290052  11250  32767  2        0x10                syz-executor
  1820  314400  11250  32767  3   0x4000090  ttyin         syz-executor
 16586  206327  12254  32767  2        0x10                syz-executor
  9236  324331    632      0  3        0x82  wait          syz-executor
 78476  272794      0      0  3     0x14200  bored         sosplice
 64692   65640  40691  32767  3        0x90  nanoslp       syz-executor
 12254  322927   3586  32767  3        0x90  nanoslp       syz-executor
 11250  418936  37416  32767  3        0x90  nanoslp       syz-executor
 20207  522101  31361  32767  3        0x10  biowait       syz-executor
 89207  234004  17756  32767  3        0x90  nanoslp       syz-executor
 12604  155416  49825  32767  3        0x90  nanoslp       syz-executor
 95431  319742  43606  32767  3        0x90  nanoslp       syz-executor
 17756  512314    632      0  3        0x82  wait          syz-executor
 31361  348493    632      0  3        0x82  wait          syz-executor
 49825  298310    632      0  3        0x82  wait          syz-executor
 43606  333042    632      0  3        0x82  wait          syz-executor
 40691  487988    632      0  3        0x82  wait          syz-executor
 37416  489574    632      0  3        0x82  wait          syz-executor
  3586   60462    632      0  3        0x82  wait          syz-executor
   632   71268  65227      0  3        0x82  kqread        syz-executor
 65227  216825  86754      0  3    0x10008a  sigsusp       ksh
 86754  237204  78095      0  3        0x98  kqread        sshd-session
 78095    9703  28952      0  3        0x92  kqread        sshd-session
 59445  392992      1      0  3    0x100083  ttyin         getty
 28952  322725      1      0  3        0x88  kqread        sshd
 96630  402358  36042     73  3   0x1100090  kqread        syslogd
 36042  204044      1      0  3    0x100082  sbwait        syslogd
 37840  279344      1      0  3    0x100080  kqread        resolvd
 11573  459995  20659     77  3    0x100092  kqread        dhcpleased
 73421  457459  20659     77  3    0x100092  kqread        dhcpleased
 20659  392649      1      0  3        0x80  kqread        dhcpleased
 61728   42700      0      0  3     0x14200  bored         smr
 30377  176606      0      0  2     0x14200                zerothread
 31089  510680      0      0  3     0x14200  aiodoned      aiodoned
  4781  184595      0      0  3     0x14200  syncer        update
 82515  235718      0      0  3     0x14200  cleaner       cleaner
 12681  421763      0      0  3     0x14200  reaper        reaper
 98787   25920      0      0  3     0x14200  pgdaemon      pagedaemon
  9691  505098      0      0  3     0x14200  bored         viomb
 53019  247807      0      0  3  0x40014200  acpi0         acpi0
 87800  360738      0      0  3  0x40014200                idle1
 59025  122344      0      0  3     0x14200  bored         softnet3
 35374   54642      0      0  3     0x14200  bored         softnet2
 82502  228123      0      0  3     0x14200  bored         softnet1
 88675  229017      0      0  3     0x14200  bored         softnet0
 78502  440626      0      0  3     0x14200  bored         systqmp
 35143  429834      0      0  3     0x14200  bored         systq
 69751   68879      0      0  3     0x14200  tmoslp        softclockmp
 72626  103177      0      0  3  0x40014200  tmoslp        softclock
 13476  501403      0      0  3  0x40014200                idle0
     1  182633      0      0  3        0x82  wait          init
     0       0     -1      0  3     0x10200  scheduler     swapper
ddb{1}> show all locks
Process 32949 (syz-executor) thread 0xffff8000ffff4f88 (246645)
exclusive rwlock amaplk r = 0 (0xfffffd8066114c60)
#0  witness_lock+0x5bb
#1  rw_do_enter_write+0x3ea
#2  uvm_map_lock_entry+0x51
#3  uvm_fault_unwire_locked+0x253
#4  uvm_fault_wire+0x12d
#5  sysctl_vslock+0x109
#6  kern_sysctl_dirs+0x247
#7  kern_sysctl+0x12d
#8  sys_sysctl+0x425
#9  syscall+0xbc6
#10 Xsyscall+0x128
shared rwlock vmmaplk r = 0 (0xfffffd806bff2680)
#0  witness_lock+0x5bb
#1  rw_do_enter_read+0x3af
#2  uvm_fault_wire+0x116
#3  sysctl_vslock+0x109
#4  kern_sysctl_dirs+0x247
#5  kern_sysctl+0x12d
#6  sys_sysctl+0x425
#7  syscall+0xbc6
#8  Xsyscall+0x128
exclusive kernel_lock &kernel_lock r = 0 (0xffffffff839b0070)
#0  witness_lock+0x5bb
#1  __mp_acquire_count+0x58
#2  mi_switch+0x4b7
#3  sleep_finish+0x24f
#4  rw_do_enter_read+0x2de
#5  uvmfault_lookup+0x122
#6  uvm_fault_check+0x4b
#7  uvm_fault+0x106
#8  uvm_fault_wire+0x73
#9  sysctl_vslock+0x109
#10 kern_sysctl_dirs+0x247
#11 kern_sysctl+0x12d
#12 sys_sysctl+0x425
#13 syscall+0xbc6
#14 Xsyscall+0x128
exclusive rwlock sysctllk r = 0 (0xffffffff83794ca8)
#0  witness_lock+0x5bb
#1  rw_do_enter_write+0x3ea
#2  sysctl_vslock+0x45
#3  kern_sysctl_dirs+0x247
#4  kern_sysctl+0x12d
#5  sys_sysctl+0x425
#6  syscall+0xbc6
#7  Xsyscall+0x128
Process 20207 (syz-executor) thread 0xffff8000ffff87c8 (522101)
exclusive rrwlock inode r = 0 (0xfffffd806af501f8)
#0  witness_lock+0x5bb
#1  rw_do_enter_write+0x3ea
#2  rrw_enter+0xc6
#3  VOP_LOCK+0xa6
#4  vn_lock+0xa4
#5  vget+0x2bd
#6  ufs_ihashget+0x185
#7  ffs_vget+0x8c
#8  ufs_lookup+0x19f8
#9  VOP_LOOKUP+0x6e
#10 vfs_lookup+0x8fa
#11 namei+0x7aa
#12 dounlinkat+0xc1
#13 syscall+0xb08
#14 Xsyscall+0x128
exclusive rrwlock inode r = 0 (0xfffffd806c28eab0)
#0  witness_lock+0x5bb
#1  rw_do_enter_write+0x3ea
#2  rrw_enter+0xc6
#3  VOP_LOCK+0xa6
#4  vn_lock+0xa4
#5  vfs_lookup+0x109
#6  namei+0x7aa
#7  dounlinkat+0xc1
#8  syscall+0xb08
#9  Xsyscall+0x128
ddb{1}> show malloc
           Type InUse  MemUse  HighUse   Limit  Requests Type Lim
         devbuf 10209  10955K   10966K 166960K     11292        0
            pcb    17     12K      12K 166960K        17        0
         rtable   214      6K       6K 166960K       353        0
             pf    29     16K      16K 166960K        31        0
         ifaddr    38      6K       7K 166960K        44        0
        ifgroup    46      2K       2K 166960K        50        0
         sysctl     2      1K       1K 166960K         2        0
       counters    62     36K      36K 166960K        64        0
       ioctlops     0      0K       2K 166960K        32        0
            iov     0      0K      16K 166960K        16        0
          mount     1      1K       1K 166960K         1        0
            log     0      0K       0K 166960K         4        0
         vnodes  1332     84K      84K 166960K      1529        0
      UFS quota     1     32K      32K 166960K         1        0
      UFS mount     5     36K      36K 166960K         5        0
            shm     2      1K       9K 166960K        12        0
         VM map     2      1K       1K 166960K         2        0
            sem    12      0K       1K 166960K        22        0
        dirhash    12      2K       2K 166960K        21        0
           ACPI  1692    195K     286K 166960K     12470        0
      file desc    24     89K     125K 166960K       415        0
          sigio     0      0K       0K 166960K         5        0
           proc    58     79K     115K 166960K       494        0
        subproc    72      4K       4K 166960K       234        0
    NFS srvsock     1      0K       0K 166960K         1        0
     NFS daemon     1     16K      16K 166960K         1        0
    ip_moptions     0      0K       0K 166960K        46        0
       in_multi    88      6K       7K 166960K       106        0
    ether_multi     1      0K       0K 166960K         2        0
            mrt     1      0K       0K 166960K         1        0
    ISOFS mount     1     32K      32K 166960K         1        0
  MSDOSFS mount     1     16K      16K 166960K         1        0
           ttys   217    970K     970K 166960K       217        0
           exec     0      0K       1K 166960K       380        0
   fusefs mount     1     32K      32K 166960K         1        0
            tdb     3      0K       0K 166960K         3        0
        VM swap     8     62K      64K 166960K        10        0
       UVM amap   221     73K      81K 166960K      4848        0
       UVM aobj    13      2K       2K 166960K        14        0
     pinsyscall    45     90K     113K 166960K      1410        0
        memdesc     1      4K       4K 166960K         1        0
    crypto data     1      1K       1K 166960K         1        0
    ip6_options     1      0K       0K 166960K        11        0
            NDP    10      0K       2K 166960K        27        0
           temp    46   8636K    8700K 166960K      7325        0
         kqueue    15     20K      27K 166960K        68        0
      SYN cache     2     16K      16K 166960K         2        0
ddb{1}> show all pools
Name      Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle
plcache    128       24    0        0     1     0     1     1     0     8    0
rtpcb      120       57    0       54     1     0     1     1     0     8    0
rtentry    112      112    0       12     4     0     4     4     0     8    0
unpcb      144      199    0      182     2     0     2     2     0     8    1
syncache   336        3    0        3     1     1     0     1     0     8    0
tcpcb      808       77    0       71     2     1     1     2     0     8    0
arp        120       18    0        2     1     0     1     1     0     8    0
ipq         40        1    0        0     1     0     1     1     0     8    0
ipqe        40        2    0        1     1     0     1     1     0     8    0
inpcb      376      276    0      267     5     3     2     5     0     8    0
nd6        136       25    0        3     1     0     1     1     0     8    0
kcovpl      48       26    0       18     1     0     1     1     0     8    0
art_heap8  4096       1    0        0     1     0     1     1     0     8    0
art_heap4  256      454    0       44    29     2    27    29     0     8    0
art_table   32      455    0       44     4     0     4     4     0     8    0
art_node    16      111    0       20     1     0     1     1     0     8    0
sysvmsgpl   40        8    0        4     1     0     1     1     0     8    0
semupl     112        2    0        2     1     1     0     1     0     8    0
semapl     112       20    0       10     1     0     1     1     0     8    0
shmpl      112       11    0        1     1     0     1     1     0     8    0
dirhash    1024      23    0        6     3     0     3     3     0     8    0
dino2pl    256     1873    0      352    96     0    96    96     0     8    0
ffsino     280     1873    0      352   109     0   109   109     0     8    0
nchpl      144     2339    0      651    63     0    63    63     0     8    0
uvmvnodes   80     2116    0        0    44     0    44    44     0     8    0
vnodes     216     2116    0        0   118     0   118   118     0     8    0
namei      1024    7265    0     7265     2     1     1     2     0     8    1
percpumem   16       46    0        1     1     0     1     1     0     8    0
kstatmem   264       22    0        2     2     0     2     2     0     8    0
scxspl     216     8074    0     8073    10     6     4     8     1     8    3
plimitpl   152      114    0       89     3     1     2     2     0     8    1
sigapl     424      651    0      596     8     1     7     8     0     8    0
futexpl     64     2983    0     2981     1     0     1     1     0     8    0
knotepl    120      322    0        0    10     0    10    10     0     8    0
kqueuepl   216       86    0       75     1     0     1     1     0     8    0
pipepl     328      240    0      213     8     0     8     8     0     8    5
fdescpl    504      632    0      596     7     1     6     6     0     8    1
filepl     152     3039    0     2828    16     1    15    15     0     8    6
lockfpl    104       53    0       51     1     0     1     1     0     8    0
lockfspl    48       26    0       24     1     0     1     1     0     8    0
sessionpl  144       39    0       23     1     0     1     1     0     8    0
pgrppl      48       70    0       46     1     0     1     1     0     8    0
ucredpl    104      426    0      408     1     0     1     1     0     8    0
zombiepl   144      596    0      596     1     0     1     1     0     8    1
processpl  1168     651    0      596     5     0     5     5     0     8    0
procpl     656      991    0      929     7     1     6     7     0     8    0
sosppl     168        4    0        4     1     0     1     1     0     8    1
sockpl     688      533    0      504     8     2     6     6     0     8    3
mcl64k     65536      2    0        0     1     0     1     1     0     8    0
mcl12k     12288      1    0        0     1     0     1     1     0     8    0
mcl8k      8192       3    0        0     1     0     1     1     0     8    0
mcl4k      4096     112    0        0    14     0    14    14     0     8    0
mcl2k      2048      21    0        0     3     0     3     3     0     8    0
mtagpl      96        2    0        0     1     0     1     1     0     8    0
mbufpl     256      206    0        0    13     0    13    13     0     8    0
bufpl      280     2783    0      124   190     0   190   190     0     8    0
anonpl      24   136037    0   131397    55     4    51    55     0   184   15
amapchunkpl 152   15584    0    15049    37     7    30    37     0   158    6
amappl16   200     3263    0     3215    22    12    10    16     0     8    5
amappl15   192       33    0       33     1     1     0     1     0     8    0
amappl14   184      133    0      123     1     0     1     1     0     8    0
amappl13   176       77    0       77     1     1     0     1     0     8    0
amappl12   168     1251    0     1218     2     0     2     2     0     8    0
amappl11   160       50    0       40     1     0     1     1     0     8    0
amappl10   152        2    0        2     1     1     0     1     0     8    0
amappl9    144      253    0      253     1     1     0     1     0     8    0
amappl8    136       50    0       48     1     0     1     1     0     8    0
amappl7    128      108    0       98     1     0     1     1     0     8    0
amappl6    120      187    0      184     1     0     1     1     0     8    0
amappl5    112      113    0      107     1     0     1     1     0     8    0
amappl4    104      279    0      263     1     0     1     1     0     8    0
amappl3     96     2637    0     2530     4     0     4     4     0     8    1
amappl2     88      595    0      540     2     0     2     2     0     8    0
amappl1     80     8094    0     7553    13     0    13    13     0     8    0
amappl      88     4469    0     4297     5     0     5     5     0    92    0
dma4096    4096       1    0        1     1     1     0     1     0     8    0
dma1024    1024       1    0        0     1     0     1     1     0     8    0
dma256     256        6    0        6     1     1     0     1     0     8    0
dma128     128      253    0      253     1     1     0     1     0     8    0
dma64       64        6    0        6     1     1     0     1     0     8    0
dma32       32        7    0        7     1     1     0     1     0     8    0
dma16       16       18    0       17     1     0     1     1     0     8    0
aobjpl      72       13    0        1     1     0     1     1     0     8    0
uaddrrnd    24      632    0      596     1     0     1     1     0     8    0
uaddrbest   32        2    0        0     1     0     1     1     0     8    0
uaddr       24      632    0      596     1     0     1     1     0     8    0
vmmpekpl   168     6826    0     6789     3     0     3     3     0     8    0
vmmpepl    168    46262    0    44315   100     9    91   100     0   357    4
vmsppl     456      631    0      596     7     2     5     6     0     8    0
rwobjpl     64    17802    0    14831    50     1    49    50     0     8    0
pdppl      4096    1272    0     1192   114    32    82    98     0     8    2
pvpl        32    16137    0        0   131     0   131   131     0   265    0
pmappl     248      631    0      596     4     1     3     3     0     8    0
extentpl    40       55    0       38     1     0     1     1     0     8    0
phpool     112      295    0       40     8     0     8     8     0     8    0
ddb{1}> machine ddbcpu 0
Stopped at      x86_ipi_db+0x27:        addq    $0x8,%rsp
x86_ipi_db(ffffffff837fbff0) at x86_ipi_db+0x27
x86_ipi_handler() at x86_ipi_handler+0xd9
Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27
__mp_lock(ffffffff839afe68) at __mp_lock+0x192
intr_handler(ffff80003c52c700,ffff800000079f00) at intr_handler+0xe1
Xintr_ioapic_edge23_untramp() at Xintr_ioapic_edge23_untramp+0x18f
__mp_lock(ffffffff839afe68) at __mp_lock+0x192
syscall(ffff80003c52c8d0) at syscall+0xae6
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x7787570284c0, count: 6
ddb{0}> trace
x86_ipi_db(ffffffff837fbff0) at x86_ipi_db+0x27
x86_ipi_handler() at x86_ipi_handler+0xd9
Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27
__mp_lock(ffffffff839afe68) at __mp_lock+0x192
intr_handler(ffff80003c52c700,ffff800000079f00) at intr_handler+0xe1
Xintr_ioapic_edge23_untramp() at Xintr_ioapic_edge23_untramp+0x18f
__mp_lock(ffffffff839afe68) at __mp_lock+0x192
syscall(ffff80003c52c8d0) at syscall+0xae6
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x7787570284c0, count: -9
ddb{0}> machine ddbcpu 1
Stopped at      db_enter+0x25:  addq    $0x8,%rsp
db_enter() at db_enter+0x25
panic(ffffffff83439658) at panic+0x1e5
__assert(ffffffff833e72a7,ffffffff8342b218,6cb,ffffffff8333e09f) at __assert+0x29
uvm_fault_unwire_locked(fffffd806bff2580,400000000000,400000006000) at uvm_fault_unwire_locked+0x4c1
uvm_fault_wire(fffffd806bff2580,400000000000,400000011000,3) at uvm_fault_wire+0x12d
sysctl_vslock(400000000100,ff0a) at sysctl_vslock+0x109
kern_sysctl_dirs(49,ffff8000364b4b78,4,400000000100,ffff8000364b4ba8,0,ecc06886f57ffe18,4) at kern_sysctl_dirs+0x247
kern_sysctl(ffff8000364b4b74,5,400000000100,ffff8000364b4ba8,0,37,8f41d913733a2dce) at kern_sysctl+0x12d
sys_sysctl(ffff8000ffff4f88,ffff8000364b4ce0,ffff8000364b4c30) at sys_sysctl+0x425
syscall(ffff8000364b4ce0) at syscall+0xbc6
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0xbe444038c90, count: 4
ddb{1}> trace
db_enter() at db_enter+0x25
panic(ffffffff83439658) at panic+0x1e5
__assert(ffffffff833e72a7,ffffffff8342b218,6cb,ffffffff8333e09f) at __assert+0x29
uvm_fault_unwire_locked(fffffd806bff2580,400000000000,400000006000) at uvm_fault_unwire_locked+0x4c1
uvm_fault_wire(fffffd806bff2580,400000000000,400000011000,3) at uvm_fault_wire+0x12d
sysctl_vslock(400000000100,ff0a) at sysctl_vslock+0x109
kern_sysctl_dirs(49,ffff8000364b4b78,4,400000000100,ffff8000364b4ba8,0,ecc06886f57ffe18,4) at kern_sysctl_dirs+0x247
kern_sysctl(ffff8000364b4b74,5,400000000100,ffff8000364b4ba8,0,37,8f41d913733a2dce) at kern_sysctl+0x12d
sys_sysctl(ffff8000ffff4f88,ffff8000364b4ce0,ffff8000364b4c30) at sys_sysctl+0x425
syscall(ffff8000364b4ce0) at syscall+0xbc6
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0xbe444038c90, count: -11