last executing test programs: 621.457921ms ago: executing program 0 (id=1): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000000080)={0x0}, &(0x7f00000000c0)=0xc) ktrace(0x0, 0x1, 0x1142, r1) syz_emit_ethernet(0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB="0000000000000001", @ANYBLOB="184e3d273aff50cfcd5f4abcfc626e33115f00fc2027d563cec3c5158eeb29a16f869368e9b8e87909001d65a2400822548c03eb8ed4418a1a0e"]) mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) r2 = open(&(0x7f0000000140)='\x00', 0x994, 0x0) r3 = syz_open_pts() flock(r3, 0x5) open$dir(&(0x7f00000000c0)='./file0\x00', 0x200, 0x186) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb5219f1000b913f1, 0x0) pwrite(r4, &(0x7f00000000c0)="a7", 0x1, 0x40007) truncate(&(0x7f0000000140)='./file0\x00', 0x30000) poll(&(0x7f0000000000)=[{r2, 0x4}], 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) writev(0xffffffffffffffff, &(0x7f0000000100), 0xffffffffffffe80) syz_emit_ethernet(0x22, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa080000000000bb00"]) sysctl$kern(&(0x7f0000000000)={0x1, 0x3e}, 0x2, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r5 = socket(0x2, 0x2, 0x0) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) fcntl$lock(r6, 0x9, &(0x7f0000000000)={0x2, 0x0, 0xffffffff00000000, 0x2ffffffff, 0xffffffffffffffff}) r7 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r7, 0x0, 0x200000000000a, &(0x7f0000000040)='\x00', 0x1) setrlimit(0x8, &(0x7f0000000100)={0x0, 0x4}) pipe(0x0) r8 = dup(r7) dup2(r8, r5) connect$unix(r5, &(0x7f0000000000), 0x10) sendmsg$unix(r8, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0) 472.039658ms ago: executing program 6 (id=7): syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) (async) writev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000000)="c886b4d3e0", 0x5}], 0x1) (async, rerun: 32) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) (rerun: 32) mprotect(&(0x7f000015f000/0x3000)=nil, 0x3000, 0x4) (async) r0 = open(&(0x7f0000000000)='./file0\x00', 0x9cab835cfdc52675, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0xa011, r0, 0x0) setrlimit(0x8, &(0x7f0000000100)={0x7, 0x54}) r1 = syz_open_pts() close(r1) r2 = syz_open_pts() ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f00000000c0)={0x0, 0x4, 0x8a38, 0x0, "07160a009cef01098b748200"}) writev(r1, &(0x7f0000001480)=[{&(0x7f0000000340)="9bc6751607aedc3a8ce50b413ac5ed925cfda44eade1d63d8387e68ea8c066c00322bb7e64bf98c1a1618c803b12a663939fd5ea4239811a22fcfcad40f5f98a90b455a14e2741a5e6a765d82628670ab90811a23e7d3ee74fdc9f2e90749682916545a85ff4caac1f9f9ffb6e155f4b2933e857c8bcc6bb30d5ad7a9fe82d59e098b7cd4a409f9e4728396cf543b23bdcbb40466a1c959576caa186dde1d380f133138aaeb7d7a22b68f0850a4cc9ba751be09a1c0fe14d5a1e88f62b530678621c6da5dcb7b77e95ba92aa886692ba2208d00728949312debcebaf573d06067c67dff676", 0xe5}], 0x1) r3 = dup2(r2, r1) ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f0000000040)={0xffffffff, 0x1, 0x9, 0x7fc, "2cf9892af9a5e4cb52e88608007673ca9a5fd700", 0x206, 0x4}) (async) poll(&(0x7f0000000000)=[{r3, 0x40}], 0x1, 0x0) (async) ftruncate(r0, 0x79c8) setrlimit(0x1, &(0x7f0000000ec0)) (async) munmap(&(0x7f0000000000/0x4000)=nil, 0x4000) (async) r4 = socket(0x2, 0x2, 0x0) setsockopt$inet_opts(r4, 0x0, 0x1, &(0x7f0000000080)="0315f1d89ec5a317a9357682", 0xc) (async) sysctl$kern(&(0x7f0000000080)={0x1, 0x44}, 0x4000000000000004, 0x0, 0x0, 0x0, 0x0) connect$unix(r4, &(0x7f0000000000), 0x10) write(r4, &(0x7f00000000c0)="6bbc4044635cdfa0130442359ce30f1d6397d3e99e3a21cac54252de3f31068e94599964f0992fc4f57a21f3e43840110c5aedadf134eb754e43cfefbf30d1873b41d1b6db5ac9b567031f5f94e299e42815a09a0b895b7d71fbe32bbcc6eb773fd30096f35767d120948e67b7183f75f955cebe0ab31be9a3471867737ede7592cb85a0a3fa080000009b265a129a79ed9980eaaacbcce224abc7b30926aef1d2c9497b96374901fd3f0fa136327cedf27ab77a7bd690a931e870d6576296ea83f54541af73092ebe7575a3899854202d3ae7ed09d9cb3895d29f8722ad1fc4315f2c7a83cfba586bf6cf2b232222ba0315879fcc0c5c729cbafa39551ad6d7bf1fe58fefee90cd34bebbc4ba6faf759e1647ee8384574e91bb29d971700c1f0f2b2c27263a73328833bd4bc5577fd4521ff3ce1257081533ede709c175acf59272ef759399e20f7f3ebedcdb6485ae8b72228ef2a8172601ce45147783ee8e3186f8e0acb23c55df91e99a27c8bc1358", 0x171) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$kern(&(0x7f0000000080)={0x1, 0x27}, 0x4000000000000004, 0x0, 0x0, 0x0, 0x0) (async) r5 = socket$unix(0x1, 0x5, 0x0) setsockopt$sock_timeval(r5, 0xffff, 0x1005, &(0x7f00000000c0)={0x4f05, 0x80}, 0x10) getsockopt$sock_timeval(r5, 0xffff, 0x1005, 0x0, 0x0) readv(r5, &(0x7f00000006c0)=[{&(0x7f0000000780)=""/185, 0xb9}, {&(0x7f0000000040), 0xfffffffffffffd19}, {&(0x7f0000000300)=""/64, 0x40}, {&(0x7f0000000340)=""/38, 0x26}, {&(0x7f0000000380)=""/96, 0x60}, {&(0x7f0000000400)=""/237, 0xed}, {&(0x7f0000000500)=""/33, 0x21}, {&(0x7f00000005c0)=""/75, 0x4b}, {&(0x7f0000000640)=""/110, 0x6e}, {&(0x7f0000000540)=""/16, 0x10}], 0xa) (async, rerun: 64) ioctl$FIONBIO(r5, 0x8004667e, &(0x7f0000000240)=0x9) (rerun: 64) 382.871917ms ago: executing program 7 (id=8): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async, rerun: 64) r0 = socket(0x18, 0x2, 0x0) (rerun: 64) getrlimit(0x4, &(0x7f00000002c0)) (async) connect$unix(r0, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) ftruncate(0xffffffffffffffff, 0x25b3) (async) r1 = socket(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0xffff, 0x1023, &(0x7f0000000040)=0x3, 0x4) (async) close(r0) (async) sysctl$net_inet_udp(&(0x7f00000004c0)={0x4, 0x2, 0x11, 0x6}, 0x4, &(0x7f0000000340)="320f9fa4d27de4aa2e900a82b789c8c4d481a307db05074140a710072248635b6db80d1605ec5b613dd036ecc32d78b55657298b8ec87abc8e483bb1906e610ba10b20a1f5b7f57a7bb82e7103a197d16e8ef17ca20e0ca8443e45ec3f116430cf1f3139516cbd485c0dcb02e4", 0x0, 0x0, 0x56) sysctl$net_inet_tcp(&(0x7f0000000140)={0x4, 0x2, 0x6, 0x19}, 0x4, &(0x7f0000000180), 0x0, 0x0, 0x0) (async) msgctl$IPC_SET(0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0xb2}, 0x0, 0x0, 0xffffffffffffffff}) (async) r2 = socket(0x18, 0x1, 0x0) connect$unix(r2, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) (async) getsockname$inet(r2, &(0x7f00000000c0), &(0x7f0000000240)=0xc) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) r3 = socket(0x18, 0x1, 0x0) close(r3) (async) r4 = socket(0x18, 0x2, 0x0) (async) connect$unix(r3, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) getpeername$unix(r4, 0x0, &(0x7f0000000100)) (async, rerun: 32) fchownat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4) (async, rerun: 32) open(&(0x7f0000000300)='./file0/file0\x00', 0x80, 0xa4) (async, rerun: 32) r5 = socket$inet(0x2, 0x2, 0x0) (rerun: 32) close(r5) (async) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x0, 0x3, 0x0, 0x4}, {0x7, 0x0, 0x40, 0x20000}, {0x3, 0x0, 0x0, 0x4}]}) (async, rerun: 64) sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0x37) (rerun: 64) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0x3, [{&(0x7f0000695000/0x3000)=nil, &(0x7f000051f000/0x4000)=nil}, {&(0x7f0000695000/0x2000)=nil, &(0x7f0000ff2000/0x4000)=nil, 0x8000000000000001}, {&(0x7f00005fd000/0x1000)=nil, &(0x7f0000690000/0x4000)=nil, 0xfffffffffffffffc}, {&(0x7f00002fc000/0x1000)=nil, &(0x7f0000ff7000/0x3000)=nil}, {&(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x1000)=nil, 0x100000000000}, {&(0x7f00004f8000/0x2000)=nil, &(0x7f000068e000/0x12000)=nil}, {&(0x7f00005e4000/0x4000)=nil, &(0x7f000032a000/0x1000)=nil, 0xffffffffffffffff}, {&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil}, {&(0x7f000013f000/0x2000)=nil, &(0x7f0000604000/0x3000)=nil, 0xfffffffffffffffc}, {&(0x7f000015a000/0x1000)=nil, &(0x7f00004f6000/0x3000)=nil, 0x8}, {&(0x7f0000ffe000/0x2000)=nil, &(0x7f00004e6000/0x3000)=nil}, {&(0x7f00007f8000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x80000000010001}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil}, {&(0x7f00003f2000/0x2000)=nil, &(0x7f00005e4000/0x1000)=nil}, {&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil}, {&(0x7f0000705000/0x2000)=nil, &(0x7f0000ff3000/0x2000)=nil, 0x2}], './file0/file0\x00'}) r6 = socket$inet(0x2, 0x4002, 0x0) setsockopt$inet_opts(r6, 0x0, 0x9, &(0x7f0000000240)="ea00000100000000", 0xc) (async, rerun: 64) setsockopt$inet_opts(r5, 0x0, 0x200000000000c, &(0x7f0000000240)="ea00aa660096373a", 0x8) (rerun: 64) 299.64302ms ago: executing program 3 (id=4): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0xe8, 0x0) ioctl$TIOCSTSTAMP(0xffffffffffffffff, 0x8008745a, &(0x7f0000000040)={0xe89, 0x3}) syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="6dc1000002", 0x5}], 0x1) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) fcntl$lock(0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x0, 0x9, 0x100000001}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = socket(0x18, 0x2, 0x0) setsockopt(r1, 0x1000000000029, 0xb, &(0x7f0000000040)='\x00\x00\x00\x00', 0x4) setsockopt(r1, 0x1000000029, 0xd, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) mprotect(&(0x7f000004b000/0x4000)=nil, 0x4000, 0x1) r2 = socket(0x2, 0x1, 0x0) connect$unix(r2, &(0x7f0000000000), 0x10) setsockopt$inet_opts(r2, 0x0, 0x1, &(0x7f0000000040)="27913c11b3c9e91fbdf59c32417020e3a81e536e", 0x14) sendto$inet(r2, &(0x7f00000000c0)="3684af472a20605db56654444530db55e32d18a350e237a22b0d745c7cd16f2c2e6cb647d0873f17a747d211b2be7e453f4564729e305de8e574af453096e88646da6baaa50d472b39b49f3b65df72dd7476ae2aca133fe51fbbdbbe97b68e79031f519c3826089a324844a5b3f69c0ecd33fd9d74a974d8e657e19e37c2cd89240a6d1f7893df63e565f883034cbfcfa55ce0", 0x93, 0x6, 0x0, 0x0) write(r2, &(0x7f0000000080)="d99aca906c", 0x7fcc) recvmsg(r0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1001) r3 = socket(0x10, 0x1, 0x0) r4 = socket(0x18, 0x2, 0x0) setsockopt(r4, 0x1000000029, 0x41, 0x0, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r5 = socket(0x2, 0x2, 0x0) r6 = syz_open_pts() fcntl$lock(r6, 0x9, 0xfffffffffffffffe) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$FIONREAD(r5, 0xc0286988, &(0x7f00000001c0)) setsockopt$sock_int(r3, 0xffff, 0x4, 0x0, 0x0) mmap(&(0x7f000075c000/0x1000)=nil, 0x1000, 0x4, 0x4012, r0, 0xf) sysctl$vm_swapencrypt(&(0x7f00000000c0), 0x3, &(0x7f0000000100)="688b20b5", &(0x7f00000001c0)=0x4, 0x0, 0x0) select(0xe, &(0x7f0000000000)={0x7}, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x2}) 290.891039ms ago: executing program 4 (id=12): r0 = open(&(0x7f0000000000)='./file0\x00', 0x9cab835cfdc52675, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0xa011, r0, 0x0) ftruncate(r0, 0x79c8) r1 = getuid() getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0xc) fchown(r0, r1, r2) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000200)="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", 0xe5}], 0x3b) pipe(&(0x7f00000000c0)) 289.575389ms ago: executing program 4 (id=13): sysctl$hw(&(0x7f0000000000)={0x6, 0x18}, 0x2, &(0x7f0000000040)='|.EM', &(0x7f0000000240)=0x4, 0x0, 0x0) sysctl$hw(&(0x7f0000000080)={0x6, 0x15}, 0x2, &(0x7f00000000c0)="831db4cdb3f48633776908878702289041c8d1f22c21ba5d3dce8f3d588059c0163b9c0d022e945deb72bfc4f4dbc7dff80df4722de3ab5ae4578f3b", &(0x7f0000000200)=0x3c, &(0x7f0000000280)="282be6b1d213e87fa14ee1679e7e5fde42db1d52cac5b3b02e26e9fff63e944a6eaac9ac75c9d64ec84e5043c9b61f1aa2a681a1c9e0ea22b41874c638d62bdae56dee5610f4cc446ca408b90abfc3c3b2dcc95ab4df2410e2e1d3e6afbe7e96d8de8f76d2c17a7762a13f5f7759b026acda462b4a69ac628c0d57a4f9ab", 0x7e) r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket(0x18, 0x2, 0x0) connect$unix(r1, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) getsockname$inet(r1, &(0x7f0000000080), &(0x7f0000000000)=0xfffffffffffffe22) r2 = socket(0x10, 0x8000, 0xf0) getsockname$inet(r2, &(0x7f0000000080), &(0x7f0000000040)=0xc) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r3 = socket(0x800000018, 0x1, 0x0) bind$unix(r3, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) bind$unix(r0, &(0x7f0000000040)=@file={0xd570d0466b6018f, './file0\x00'}, 0xa) socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r1, &(0x7f0000000080)={&(0x7f00000006c0)=@abs={0x0, 0x0, 0x1}, 0x8, 0x0}, 0x3) close(r0) r4 = socket$unix(0x1, 0x5, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendto(r0, &(0x7f0000000380)="f04eea7a32764f94d21b7b31afe714554dd3d4b623e20d1742e0d70bb76a07eac87819d1be9a1e5a616b210bb561e8b55f6cc78fd904dbba1b4f831d1b4a01661a114f783233293ddda5ce7e0d6433ad22fef1154188dc0131a19c63006e122dc6f08605c6aed32e06e34dc6d7a9241ae23e24b2b8a7ffe9fde4bb26ecedaa6feaf5859b95af2c92d69b0947e2", 0x8d, 0x400, &(0x7f0000000100)=@in={0x2, 0x0}, 0xc) r5 = socket(0x2, 0x4001, 0x0) getsockopt$sock_int(r5, 0xffff, 0x1024, 0x0, 0x0) connect$unix(r4, &(0x7f0000000000)=@file={0xd1653077bafa0114, './file0\x00'}, 0xa) sysctl$net_inet_tcp(&(0x7f0000000000)={0x4, 0x2, 0x6, 0x2}, 0x4, &(0x7f0000000140)="87de5256", &(0x7f0000000340)=0x4, 0x0, 0x0) 288.590327ms ago: executing program 3 (id=14): getrusage(0xffffffffffffffff, 0x0) 286.833083ms ago: executing program 6 (id=15): syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0) (async) syz_extract_tcp_res(&(0x7f0000000040), 0x10001, 0x6) (async) syz_emit_ethernet(0x1522, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x5, 0x6, 'tmB', 0x14ec, 0x67, 0x80, @empty, @empty, {[@routing={0x1, 0x2, 0x0, 0x4, 0x0, [@ipv4={'\x00', '\xff\xff', @loopback}]}, @routing={0x2c, 0x8, 0x0, 0x5, 0x0, [@rand_addr="0155c12a6542adcacd54c7485ba7e94f", @remote={0xfe, 0x80, '\x00', 0x0}, @mcast1, @rand_addr="e8a095c42d51c03b7147413c179699f6"]}, @hopopts={0x3b, 0x215, '\x00', [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @pad1, @generic={0x0, 0x1000, "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"}, @enc_lim={0x4, 0x1, 0x1}, @generic={0x9, 0x9a, "5712473ff1ffa62fc940557686cc3c7e0a36050ada298d5a48bf0f29d2d3f483704d0a74fa1355830d170f30c11392a1ad1ec7b768cb764b1b2c1659a43cf86cdbb845217f00917234a90969bdbd3e1c932193bcc13b059658d125d16a788eb416a7ed2695e232680ae9f2dd4b264ed83f4f24e1ce93d24796a8d87d056ad79f5d747b365cb4eb7b4a173c963abd27276db919cc047c6677ad74"}]}, @dstopts={0x4, 0x8, '\x00', [@generic={0x9, 0x3f, "d3e2a5ac5d1cb6f51aee3f709706c0d22de16d34dafc9aec55fc42999b6983156cbcd3853bf9d3e556bb0437c05ee2ba5bd8acda2c1f18a6cd08ddba85991b"}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}], @icmpv6=@time_exceed={0x3, 0x1, 0x0, 0x4, '\x00', {0x3, 0x6, "087f04", 0x6, 0x1d, 0x7d, @rand_addr="3f55044ea74e2d767e871a517cd59fa9", @ipv4={'\x00', '\xff\xff', @rand_addr=0x9}, [@hopopts={0x2c, 0x14, '\x00', [@enc_lim={0x4, 0x1, 0x3}, @ra={0x5, 0x2, 0x4}, @enc_lim={0x4, 0x1, 0x7}, @pad1, @jumbo={0xc2, 0x4, 0x6}, @jumbo={0xc2, 0x4, 0x81}, @generic={0x9, 0x86, "c00becc23a01ffdd97d509aa882dd555cd0b5e685716f45e83751361eada9ed4420bda44d0c90870ac3692a3d1d618b336239b145ef55758a902c6ae53ba9507a4c3b0a107aa2ad76d388c71621d3746da9a1a76010aaf2636e3bcae060277a29ae8895b1ea7ac6fb5f4a684308e3e45c583185820fe9148e4c70f864fec175c9ce9434a3fc5"}]}, @dstopts={0x64}, @dstopts={0x3c, 0xf, '\x00', [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @generic={0x6, 0x40, "88c3a660b3a8d82ccfcaa57316c6a78c174744341fda50cdfe7f5b1509b00a444a342a62200c430039cbf46f346ae3963c4e2a2ff0561054aa488771a391ee03"}, @ra={0x5, 0x2, 0x44d}, @generic={0x7, 0x2a, "741f11acfa9aecdf4c4f01606349073e7de8cddb1384b2bb2f9e8d1b883b2b0a78cfd180875bfd2f22e2"}, @jumbo={0xc2, 0x4, 0x4}]}, @hopopts={0x89, 0x1c, '\x00', [@padn={0x1, 0x1, [0x0]}, @jumbo={0xc2, 0x4, 0x7}, @padn={0x1, 0x2, [0x0, 0x0]}, @padn={0x1, 0x1, [0x0]}, @generic={0x3a, 0xcc, "195fc4e8476b8fcc49329e22ce9eacbfebe17a99643dded0e243e934e0ad83da67a644f584af05188853c46085db6d5b965d8ad530a6594246e204d792a6b325da85fceddb11fdddae2b29126830c3afac5cc27c3bc6fb449e2d6eb18941f5f9576a98a0f142eb9745c315b94f9ec6d56ffc1d8ff296850540fc1d2cee988b9d2aae10998ce2d24c7bf47ebc0a28d72b364228c9b0125311e5e8ba285e5268f8f35ff0db87ef1b32739982f50d9c73cb90f0a7ca8748fd9e4b012568198d2126f328513430eabd5002ffe994"}, @pad1]}, @routing={0x89, 0xe, 0x0, 0x9, 0x0, [@remote={0xfe, 0x80, '\x00', 0x0}, @loopback, @remote={0xfe, 0x80, '\x00', 0x0}, @mcast1, @remote={0xfe, 0x80, '\x00', 0x0}, @mcast1, @mcast2]}, @routing={0x11, 0x2, 0x0, 0x1, 0x0, [@local={0xfe, 0x80, '\x00', 0x0}]}], "dae51964e99e0483d9ce15059263ed29f00b34214ad90d12270f061b5fa27f1d7539557708f4f0d9fd141701d5d91dd9503fbabde1bd77eb87c8aa30afb5a1bb42a8ea5e6b7797a97781ba8cb4e27f326d079500770b7b5557552c84afd45b149e6e40cc626fed024a3ab1b70ce9b21e83a94ba0a5114c71ca5117ff160855e5e86fc8d4015b7ed2b71ef56d8d6674b9a50b552c"}}}}}}}) (async) syz_extract_tcp_res(&(0x7f00000015c0), 0x1ff, 0x1a4f) syz_extract_tcp_res$synack(&(0x7f0000001600), 0x1, 0x0) (async) syz_extract_tcp_res$synack(&(0x7f0000001640), 0x1, 0x0) syz_extract_tcp_res$synack(&(0x7f0000001680), 0x1, 0x0) syz_extract_tcp_res$synack(&(0x7f00000016c0), 0x1, 0x0) (async, rerun: 32) syz_extract_tcp_res(&(0x7f0000001700), 0xff, 0x0) (async, rerun: 32) socket(0x18, 0x2, 0xa9) (async) syz_extract_tcp_res$synack(&(0x7f0000001740), 0x1, 0x0) (async) syz_extract_tcp_res$synack(&(0x7f0000001780), 0x1, 0x0) sysctl$vm(&(0x7f00000017c0)={0x2, 0x1}, 0x2, &(0x7f0000001800)="88dfcd4848f4b301879da4a0f6e5f3bd45892b2742b4266edf63320a85524f50316be80a67aae115160523f2eea46699300782ffd5eaa5210096290e738b580e59dd8b4cf988be073238927df4854f420c4da8ee5ad79bb7ec049fd10592ce8d8d59d36cb88cb487abce46fbe36d3a557a7917e17b5534e84c7f46c92270b4f16df740eae0e8a1dfef310e9ac2361b2c50702791ee66ed34", &(0x7f00000018c0)=0x98, &(0x7f0000001900)="4b31f85cf59bb75afe70c28d358737ec2e4d7c8043be0ccdfcebed5a03a5207bfdb75bd9dd3ec6da2e732522394d30ced3dbb4798a15fcac4d8cd775c9bb6931ac56df0c7e4c5ac3770a0a58266590a14a45920914e87ed850305a6f20c7eac3815d434d535bc11ec4a9e6ee995ade69d90b1db26139f120592ddc6d2ae6ef0d98e945e398cd79465ab54ea864ecffa6d61543f61ab8b4e5a9b2ab067e30934419e1cdb8ce60f14050d7ea8fb52e0fee8f5a08f4916cfa1cdfedcd5b720739083b48e84231e4652d2372a7ab40ae0180", 0xd0) (async) syz_extract_tcp_res$synack(&(0x7f0000001a00), 0x1, 0x0) syz_extract_tcp_res$synack(&(0x7f0000001a40), 0x1, 0x0) syz_emit_ethernet(0x7c, &(0x7f0000001a80)={@broadcast, @random="72cdb968a207", [], {@generic={0x8041, "d8298b1394ec14b524355faad3df0b0baed938f1056d4a77d0a823cef24c704698f662a7119656fa03e8ce2e04cc30ae6de8da3163c3f079d592ec65657ffb78d0293c0bae395265496f3f879127507b098492c0633d337f56982c7c86152d3383c455f615d33142323fde0bb4a5"}}}) (async) syz_extract_tcp_res$synack(&(0x7f0000001b00), 0x1, 0x0) (async) syz_emit_ethernet(0x2a, &(0x7f0000001b40)={@remote, @random="e9e89ec7995e", [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x3, @random="a47d0dc18f19", @rand_addr=0xffffffff, @broadcast, @broadcast}}}}) (async) mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) (async) syz_emit_ethernet(0x7e, &(0x7f0000001b80)={@random="d63cc39a39de", @empty, [], {@ipv6={0x86dd, {0x4, 0x6, "d8569b", 0x48, 0x45, 0xe, @mcast2, @mcast2, {[@routing={0x0, 0x4, 0x0, 0xf8, 0x0, [@remote={0xfe, 0x80, '\x00', 0x0}, @remote={0xfe, 0x80, '\x00', 0x0}]}, @fragment={0x3b, 0x0, 0x9, 0x0, 0x0, 0x15, 0x65}], @icmpv6=@mld={0x83, 0x0, 0x0, 0x1, 0xff, @mcast1}}}}}}) (async, rerun: 64) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001c00)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) setsockopt(r0, 0x4, 0x6, &(0x7f0000001c40)="86b87079fc4ac7141ba83e55aa7aa4", 0xf) (async) syz_extract_tcp_res$synack(&(0x7f0000001c80), 0x1, 0x0) (async) r2 = accept$unix(r1, &(0x7f0000001cc0)=@abs, &(0x7f0000001d00)=0x8) setsockopt$sock_int(r2, 0xffff, 0x800, &(0x7f0000001d40)=0x6, 0x4) r3 = socket$inet(0x2, 0x1, 0x0) close(r3) (async, rerun: 32) syz_extract_tcp_res$synack(&(0x7f0000001d80), 0x1, 0x0) (async, rerun: 32) syz_extract_tcp_res(&(0x7f0000001dc0), 0x9, 0xe0b) (async) syz_emit_ethernet(0x38, &(0x7f0000001e00)={@broadcast, @broadcast, [{[{0x88a8, 0x0, 0x1, 0x4}], {0x8100, 0x4, 0x1, 0x1}}], {@generic={0x7000, "5d4654d49e6ac74b447a95241ba3eff858399cca18af4d9424b1b4efe8cb54cac57f"}}}) 226.277428ms ago: executing program 4 (id=16): unlink(&(0x7f0000000000)='.\x00') 224.645103ms ago: executing program 1 (id=2): recvmmsg(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{0x0}, {0x0}, {&(0x7f00000000c0)=""/110, 0x6e}], 0x10000000000002db, 0x0, 0xfffffeff}}, 0x10, 0x0, 0x0) r0 = socket(0x18, 0x1, 0x0) kevent(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x3, 0x7fffffff}) r1 = kqueue() kevent(r1, &(0x7f00000000c0), 0x30, 0x0, 0x57d, 0x0) listen(r0, 0x0) shutdown(r0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0}, 0x10, 0x0, 0x0) linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x3cb6894ae2b90e0d) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x6, &(0x7f0000000100)="71f51e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0x37) 223.986188ms ago: executing program 6 (id=17): r0 = socket(0x18, 0x2, 0x0) connect$unix(r0, &(0x7f0000000000)=@file={0x0, './file1\x00'}, 0xa) bind(r0, &(0x7f0000000080)=@un=@file={0x1, './file1\x00'}, 0xa) syz_emit_ethernet(0x7e, &(0x7f0000000340)={@broadcast, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "826e03", 0x48, 0x0, 0x0, @rand_addr="00000000a3e3ea000000000000000100", @local={0xfe, 0x80, '\x00', 0x0}, {[@hopopts={0x32, 0x1, '\x00', [@pad1, @jumbo={0xc2, 0x4, 0x8591}]}], @icmpv6=@dest_unreach={0x1, 0x3, 0x0, 0xa, '\x00', {0x0, 0x6, "848733", 0x9, 0x66, 0xc, @mcast2, @loopback}}}}}}}) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0x0, [{&(0x7f0000ffb000/0x2000)=nil, &(0x7f00001a5000/0x3000)=nil}, {&(0x7f0000695000/0x2000)=nil, &(0x7f0000417000/0x3000)=nil, 0x800}, {&(0x7f000063a000/0x4000)=nil, &(0x7f000013c000/0x4000)=nil}, {&(0x7f0000076000/0x3000)=nil, &(0x7f0000ff7000/0x3000)=nil, 0x3}, {&(0x7f000048b000/0x1000)=nil, &(0x7f0000188000/0x2000)=nil, 0xfffffffffffffffc}, {&(0x7f000069d000/0x4000)=nil, &(0x7f0000049000/0x3000)=nil}, {&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil}, {&(0x7f00003d7000/0x4000)=nil, &(0x7f0000159000/0x4000)=nil}, {&(0x7f00003ee000/0x2000)=nil, &(0x7f0000729000/0x1000)=nil}, {&(0x7f000015b000/0x3000)=nil, &(0x7f00004f6000/0x3000)=nil}, {&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0xf}, {&(0x7f00005fd000/0x2000)=nil, &(0x7f0000729000/0x1000)=nil, 0x5}, {&(0x7f0000691000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil}, {&(0x7f0000ff2000/0x2000)=nil, &(0x7f000015a000/0x1000)=nil}, {&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x4}, {&(0x7f0000696000/0x1000)=nil, &(0x7f0000001000/0x800000)=nil, 0x8}], './file0\x00', 0xfffffffb}) mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) r1 = open$dir(&(0x7f00000002c0)='./file0\x00', 0x2, 0x102) ioctl$FIONREAD(r1, 0xc028698d, &(0x7f00000000c0)) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0e99db6de761f86, 0x0) socket(0x18, 0x2, 0x0) (async) connect$unix(r0, &(0x7f0000000000)=@file={0x0, './file1\x00'}, 0xa) (async) bind(r0, &(0x7f0000000080)=@un=@file={0x1, './file1\x00'}, 0xa) (async) syz_emit_ethernet(0x7e, &(0x7f0000000340)={@broadcast, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "826e03", 0x48, 0x0, 0x0, @rand_addr="00000000a3e3ea000000000000000100", @local={0xfe, 0x80, '\x00', 0x0}, {[@hopopts={0x32, 0x1, '\x00', [@pad1, @jumbo={0xc2, 0x4, 0x8591}]}], @icmpv6=@dest_unreach={0x1, 0x3, 0x0, 0xa, '\x00', {0x0, 0x6, "848733", 0x9, 0x66, 0xc, @mcast2, @loopback}}}}}}}) (async) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0x0, [{&(0x7f0000ffb000/0x2000)=nil, &(0x7f00001a5000/0x3000)=nil}, {&(0x7f0000695000/0x2000)=nil, &(0x7f0000417000/0x3000)=nil, 0x800}, {&(0x7f000063a000/0x4000)=nil, &(0x7f000013c000/0x4000)=nil}, {&(0x7f0000076000/0x3000)=nil, &(0x7f0000ff7000/0x3000)=nil, 0x3}, {&(0x7f000048b000/0x1000)=nil, &(0x7f0000188000/0x2000)=nil, 0xfffffffffffffffc}, {&(0x7f000069d000/0x4000)=nil, &(0x7f0000049000/0x3000)=nil}, {&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil}, {&(0x7f00003d7000/0x4000)=nil, &(0x7f0000159000/0x4000)=nil}, {&(0x7f00003ee000/0x2000)=nil, &(0x7f0000729000/0x1000)=nil}, {&(0x7f000015b000/0x3000)=nil, &(0x7f00004f6000/0x3000)=nil}, {&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0xf}, {&(0x7f00005fd000/0x2000)=nil, &(0x7f0000729000/0x1000)=nil, 0x5}, {&(0x7f0000691000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil}, {&(0x7f0000ff2000/0x2000)=nil, &(0x7f000015a000/0x1000)=nil}, {&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x4}, {&(0x7f0000696000/0x1000)=nil, &(0x7f0000001000/0x800000)=nil, 0x8}], './file0\x00', 0xfffffffb}) (async) mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) (async) open$dir(&(0x7f00000002c0)='./file0\x00', 0x2, 0x102) (async) ioctl$FIONREAD(r1, 0xc028698d, &(0x7f00000000c0)) (async) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0e99db6de761f86, 0x0) (async) 222.358012ms ago: executing program 4 (id=18): msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x10, 0x0, 0x0, 0x0, 0x0, 0xb0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) (async, rerun: 64) setitimer(0x0, 0x0, 0x0) (async, rerun: 64) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{}, {0x86}]}) (async) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e7, 0x7}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000000640)='\t', 0x1}], 0x2) (async) setsockopt$sock_timeval(0xffffffffffffffff, 0xffff, 0x0, &(0x7f00000000c0)={0xd, 0x1ff}, 0x10) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f00000000c0), 0x1c, 0x0}, 0x0) (async) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) (async) r0 = socket(0x18, 0x400000002, 0x0) r1 = socket(0x18, 0x1, 0x0) r2 = dup2(r0, r1) sendmsg$unix(r2, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0) (async) r3 = socket(0x18, 0x1, 0x0) fcntl$lock(0xffffffffffffffff, 0x9, &(0x7f00000000c0)={0x0, 0x2, 0x4, 0x100010000000a}) (async) sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0x37) (async, rerun: 64) close(r3) (async, rerun: 64) r4 = socket(0x18, 0x2, 0x0) setsockopt(r4, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) (async) connect$unix(r3, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) r5 = socket(0x18, 0x1, 0x0) (async) r6 = open$dir(&(0x7f0000000140)='./file0\x00', 0x40, 0x8) dup2(r6, r6) (async) utimensat(r6, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={{0x116000000, 0xfffffffffffffffe}, {0x7fffffffffffffff, 0x8}}, 0x0) setsockopt$sock_int(r5, 0xffff, 0x1, &(0x7f0000000080)=0xc00, 0x4) connect$unix(r5, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0xa) getsockname$inet(r5, 0x0, &(0x7f0000000000)) (async) r7 = dup(r5) ioctl$PCIOCREAD(r7, 0xc0107002, &(0x7f0000000040)) 222.17393ms ago: executing program 6 (id=19): r0 = socket(0x2, 0x2, 0x0) setsockopt(r0, 0x0, 0x7, &(0x7f0000000080), 0x0) (async, rerun: 64) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000040)="c19a", 0x2}], 0x1) (async, rerun: 64) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r1, 0x0, 0x200000000000c, &(0x7f0000000240)="ea00000100000000", 0xc) 219.966412ms ago: executing program 3 (id=20): setrlimit(0x8, &(0x7f0000000980)={0x7, 0x54}) (async) r0 = syz_open_pts() (async) socket(0x11, 0x3, 0x0) close(r0) (async) r1 = socket(0x2, 0x1, 0x0) shutdown(r1, 0x2) (async) recvmmsg(r1, &(0x7f0000001340)={0x0, 0x9}, 0x10, 0x1, 0x0) r2 = socket(0x18, 0x2, 0x0) getsockopt$SO_PEERCRED(r2, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0xc) msgctl$IPC_SET(0x0, 0x1, &(0x7f00000000c0)={{0x0, r4, r5, 0x0, 0x0, 0xb0}, 0x4000000000000, 0xfffffffffffff000, 0x0, r3, 0x80000}) r6 = socket(0x18, 0x1, 0x0) connect$unix(r6, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) (async) getsockname$inet(r6, &(0x7f00000000c0), &(0x7f0000000000)=0xffffffffffffff35) (async) setsockopt$sock_timeval(0xffffffffffffffff, 0xffff, 0x0, &(0x7f00000000c0)={0x0, 0x1ff}, 0x6) (async) connect$unix(r2, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) (async) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000200)="67a5e153c14f1b4d6639a7f9e5707428d1578496838bef4dfa051c4e9aa4dea8b542be24e452bf80752f54bfcfe84f0f45d7dd6c336d5c7bf6a1e4d67778ba8ea7e86130263da72568b5627aa52174b7dd15912d80aa14d432892df98dc878f498b438cf1d615d9df637a92e58f9", 0x6e}], 0x1) 218.92209ms ago: executing program 4 (id=21): r0 = openat$tty(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f00000000c0)={0x0, 0x3, 0x4, 0xfffd, "031f2f15a703857c222e00bfc000cd00008c00ff", 0x0, 0x3}) r1 = geteuid() lchown(&(0x7f0000001e40)='./file0\x00', r1, 0x0) openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x17d) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) rename(&(0x7f0000000080)='./file2/file0\x00', &(0x7f0000000000)='./file0\x00') getgroups(0x2, &(0x7f0000000040)=[0xffffffffffffffff, 0xffffffffffffffff]) fchown(r0, r1, r2) sysctl$kern(&(0x7f00000000c0)={0x1, 0x37}, 0x4, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x3, 0x0, 0x2e) 73.203066ms ago: executing program 1 (id=22): ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0xfffffffc, 0x0, {[0xfffffffffffffffc, 0x0, 0x2, 0x100000000, 0x0, 0x0, 0x2e, 0x0, 0x0, 0x2f01, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2000000000, 0x2, 0x100], [0x5, 0x0, 0xfffffffffffffff7, 0x0, 0x0, 0x80000000, 0x1fe, 0x0, 0x3, 0x43], [0x0, 0x2], [0x100, 0x20000000000, 0x0, 0x100000000, 0xfffffffffffffffe], [{0x0, 0xa, 0x0, 0x7d06}, {0x0, 0x2, 0x1}, {0x0, 0x0, 0xfffffffe, 0x1000}, {0x8, 0x1, 0x6, 0xfffffffffffffffe}, {0x0, 0x400, 0x0, 0x3c}, {0x0, 0x2000, 0x40003, 0x1}, {}, {0x0, 0x3, 0x0, 0x8}], {0x0, 0x5}, {0x2, 0x0, 0x4, 0x2}}}) r0 = socket(0x2, 0x4001, 0x0) r1 = dup(r0) r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) close(r2) connect$unix(r0, &(0x7f0000000000)=@abs={0x0, 0x0, 0x3}, 0x8) getdents(r2, 0x0, 0x0) ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x0, 0x0, {[0xfffffffffffffffb, 0x0, 0x8, 0xc5f, 0x0, 0x0, 0xdf5e, 0x0, 0x0, 0x1, 0x3, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x2, 0x100], [0xfffffffffffffffe, 0x0, 0xfffffffffffffffd, 0x1ffffffe, 0x0, 0x7b98, 0x1fe], [0x100000001, 0x2, 0x0, 0x401, 0xffffffffffffffff, 0x11000], [0x100, 0x20000000000, 0x1, 0x100000000, 0xfffffffffffffffe], [{0x0, 0x2, 0x0, 0x7d06}, {0xfffc, 0x800002, 0x1ff}, {0x0, 0x1, 0xfffffffe, 0x40080}, {0x3, 0x5, 0x6, 0xffffffffffffffff}, {0xcc8b, 0x2, 0x0, 0x8}, {0x0, 0x6003, 0x40000, 0x2000000000000000}, {0x0, 0x403}, {0x0, 0x963, 0x5, 0x8}], {0x0, 0x5, 0x1}, {0x0, 0x0, 0x0, 0x2}}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r3 = syz_open_pts() ioctl$TIOCSETAF(r3, 0x802c7416, &(0x7f0000000240)={0x2, 0x1, 0x80000001, 0x400, "ee702d64110000445f69112295cf00a6e100", 0x7, 0xfffffff9}) read(r3, &(0x7f0000000100)=""/140, 0x8c) syz_open_pts() r4 = kqueue() kevent(r4, &(0x7f0000000080), 0xe4a, 0x0, 0x4000a9fa, 0x0) 68.634777ms ago: executing program 5 (id=6): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x200000000000c, &(0x7f0000000000)="e600100000000000", 0x8) r1 = socket(0x11, 0x3, 0x0) connect$unix(r1, &(0x7f0000001700)=@file={0x0, './file0\x00'}, 0xa) connect$unix(r1, &(0x7f0000000200)=@file={0x0, './file0/file0\x00'}, 0x10) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x2000000000000243, &(0x7f0000000100)}) ioctl$FIONREAD(r0, 0xc0106924, &(0x7f00000001c0)) clock_gettime(0x2, 0xffffffffffffffff) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000240)="ea", 0xfffffffffffffe7f) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setsockopt$inet_opts(r0, 0x0, 0x200000000000c, &(0x7f0000000240)="ea00aa6600000000", 0x8) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000240)="ea00000100000000", 0x8) r2 = open(&(0x7f0000000040)='./file0\x00', 0x8000, 0x20) recvfrom$inet(r2, &(0x7f0000000080)=""/196, 0xc4, 0x1, &(0x7f0000000180)={0x2, 0x1}, 0xc) getpeername$inet(r2, &(0x7f0000000200), &(0x7f0000000280)=0xc) 67.278115ms ago: executing program 6 (id=23): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCGTSTAMP(r0, 0x4010745b, &(0x7f0000000040)) ioctl$TIOCGFLAGS(r1, 0x4004745d, &(0x7f0000000080)) read(r0, &(0x7f00000000c0)=""/4096, 0x1000) setsockopt$sock_linger(r1, 0xffff, 0x80, &(0x7f00000010c0)={0x5, 0x8}, 0x8) connect$unix(r0, &(0x7f0000001100)=@abs={0x1, 0x0, 0x3}, 0x8) ioctl$TIOCGFLAGS(r0, 0x4004745d, &(0x7f0000001140)) ioctl$WSMUXIO_INJECTEVENT(r1, 0x80185760, &(0x7f0000001180)={0xa062, 0xffff5c06, {0x2, 0x7}}) connect(r1, &(0x7f00000011c0)=@in={0x2, 0x3}, 0xc) r2 = openat$tty(0xffffffffffffff9c, &(0x7f0000001200), 0x80, 0x0) ioctl$TIOCEXCL(r2, 0x2000740d) ioctl$TIOCGETD(r2, 0x4004741a, &(0x7f0000001240)) execve(&(0x7f0000001280)='./file0\x00', &(0x7f00000013c0)=[&(0x7f00000012c0)='.-\'++}}/-$\x00', &(0x7f0000001300)='#]\x00', &(0x7f0000001340)='{-}\x00', &(0x7f0000001380)='$\x00'], &(0x7f00000015c0)=[&(0x7f0000001400)='&:{%\x00', &(0x7f0000001440)='}#\x00', &(0x7f0000001480)='\x00', &(0x7f00000014c0)='/dev/tty\x00', &(0x7f0000001500)=':$*/^@\x00', &(0x7f0000001540)='&,\f[-(\x00', &(0x7f0000001580)='&@:/[[\x00']) ioctl$TIOCGTSTAMP(r0, 0x4010745b, &(0x7f0000001600)) r3 = openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000001640), 0x80, 0x0) close(r3) r4 = socket$inet6(0x18, 0x4, 0x40) setsockopt$sock_int(r4, 0xffff, 0x800, &(0x7f0000001680)=0x8, 0x4) r5 = getuid() getsockopt$SO_PEERCRED(r0, 0xffff, 0x1022, &(0x7f00000016c0)={0x0, 0x0, 0x0}, 0xc) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000001700)={{0x100, r5, 0xffffffffffffffff, 0x0, r6, 0x48, 0x100}, 0x2, 0x9, 0x1}) connect$unix(r0, &(0x7f0000001780)=@file={0x0, './file0\x00'}, 0xa) socket(0x18, 0x1, 0x1) ioctl$BIOCSRSIG(r0, 0x80044272, &(0x7f00000017c0)=0x1) ioctl$WSMUXIO_INJECTEVENT(r1, 0x80185760, &(0x7f0000001800)={0x318, 0x30f5, {0x2, 0x2}}) mkdir(&(0x7f0000001840)='./file0/../file0\x00', 0x20) ioctl$TIOCMBIS(r0, 0x8004746c, &(0x7f0000001880)=0xb22c) ioctl$WSDISPLAYIO_GETSCREENTYPE(r0, 0xc028575d, &(0x7f00000018c0)={0x200, 0x3, '.\x00', 0x4, 0x4, 0x6}) ioctl$BIOCPROMISC(r0, 0x20004269) getsockopt$sock_int(0xffffffffffffffff, 0xffff, 0x100, &(0x7f0000001900), &(0x7f0000001940)=0x4) 66.810594ms ago: executing program 4 (id=24): socket$inet6(0x18, 0x1, 0x0) openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) r0 = socket(0x2, 0x4001, 0x0) r1 = socket(0x18, 0x2, 0x0) connect$unix(r1, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) getsockname$inet(r1, &(0x7f0000000080), &(0x7f0000000000)=0xfffffffffffffe22) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x1, 0x180000000000000}) r2 = socket(0x18, 0x2, 0xfc) connect$unix(r2, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) getsockname$inet(r2, &(0x7f0000000080), &(0x7f0000000000)=0xc) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r3 = socket(0x800000018, 0x2, 0x0) r4 = socket(0x18, 0x1, 0x0) setsockopt(r4, 0x1000000029, 0xd, 0x0, 0x0) bind$unix(r3, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) shutdown(r0, 0x0) poll(&(0x7f0000000500)=[{r0, 0x8c}, {0xffffffffffffffff, 0x4}], 0x2, 0x192) r5 = dup(r0) r6 = fcntl$dupfd(r5, 0x2, 0xffffffffffffffff) close(r6) r7 = socket(0x2, 0x2, 0x0) dup2(r5, r6) recvmmsg(r0, &(0x7f00000002c0)={0x0}, 0x10, 0x0, 0x0) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) r8 = socket$inet(0x2, 0x2, 0x8) setsockopt$sock_int(r8, 0xffff, 0x20, &(0x7f0000000100)=0x6, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) connect$unix(r7, &(0x7f0000000000), 0x10) setsockopt$sock_int(r6, 0xffff, 0x1023, &(0x7f0000000040), 0x4) ioctl$VMM_IOC_INTR(0xffffffffffffffff, 0x800c5606, &(0x7f0000000000)={0x8, 0xfffffffd, 0xfff9}) 65.12626ms ago: executing program 7 (id=25): symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') chdir(&(0x7f0000000080)='./file0/file0/..\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sysctl$net_inet_ip(0x0, 0x0, &(0x7f00000002c0)="38c616b9f595595b0000007e9c521ebf", 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x53}, 0x10, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r1, &(0x7f0000000080)={0x0}, 0x6a, 0x0) getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0xc) r3 = open$dir(&(0x7f0000000000)='./file0\x00', 0xf02, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x2012, r3, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x2, 0x11, r3, 0x0) recvfrom$unix(0xffffffffffffffff, &(0x7f00000000c0), 0x832f1f7d, 0x0, &(0x7f0000000000)=@abs, 0x2000c600) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, r2}}) symlink(0x0, 0x0) ktrace(&(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x0, 0x0) rename(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./file0\x00') r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) fcntl$lock(r4, 0x7, &(0x7f0000000000)={0x1, 0x0, 0xfffffffffffffffe, 0x1400300800004}) open$dir(&(0x7f0000000280)='./file0/file0/..\x00', 0x0, 0x0) mprotect(&(0x7f000002d000/0x4000)=nil, 0x4000, 0x1) getsockopt(r0, 0xfffffffb, 0x9, &(0x7f0000000140)=""/191, &(0x7f00000002c0)=0xbf) r5 = socket(0x11, 0x3, 0x0) sendto$unix(r5, &(0x7f0000000500)="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", 0x194, 0x0, 0x0, 0x0) sysctl$kern(&(0x7f00000000c0)={0x1, 0x4e}, 0x3, &(0x7f0000000100)="71f95f84cf71b59c7afec37582", &(0x7f0000000080)=0x2, 0x0, 0x37) 61.859681ms ago: executing program 5 (id=26): open(&(0x7f0000000480)='./file0\x00', 0x80, 0x44) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x2, 0x192) poll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x160}, {0xffffffffffffff9c, 0x10}, {r0, 0x8}, {r0, 0x4}, {r0, 0x20}, {r0}, {r0, 0x4}], 0x7, 0xffffffff) ftruncate(0xffffffffffffffff, 0x100004) pread(r0, &(0x7f0000000100)="257e3a8f23c5c704d2f7e2e52ee6e92d3d963105aa12a21164799e3189e296607efe92c55dde8174ffefd8af007c64655c964dcdefd2527e6a925c32d1", 0x3d, 0x8000000000000001) ioctl$WSDISPLAYIO_DELFONT(0xffffffffffffffff, 0x8058574f, 0x0) r1 = geteuid() getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000400)={0x0, 0x0, 0x0}, &(0x7f0000000440)=0xc) chown(&(0x7f00000003c0)='./file0\x00', r1, r2) execve(0x0, 0x0, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0xe8, 0x0) r4 = fcntl$dupfd(r3, 0x3, 0xffffffffffffffff) ioctl$WSDISPLAYIO_SMODE(r3, 0x8004574c, &(0x7f0000000000)) ioctl$VMM_IOC_WRITEREGS(r4, 0x82485608, &(0x7f0000000140)={0x8, 0x1, 0xb15, {[0x101, 0xffffffffffffffff, 0x7, 0x9, 0x5, 0x9, 0x9, 0x8d5d, 0x8, 0xfffffffffffffeff, 0xff, 0x0, 0x0, 0xe29, 0x1, 0x6a4f, 0xffffffffffffffff, 0x4], [0x0, 0x5, 0x2902, 0x6, 0x5e61, 0x3, 0x8, 0x3, 0x0, 0xfffffffffffffffa], [0x10000, 0x4, 0x40, 0x3, 0x7, 0x7, 0xffffffff], [0xfc7a, 0x6, 0xb2e1, 0x1, 0x3, 0x1], [{0x4, 0xfffffff7, 0x100, 0x8}, {0x9, 0x4, 0xffffffff}, {0x0, 0x7, 0x9, 0x3}, {0x0, 0x6, 0x8, 0x53aa}, {0xe5, 0x10000, 0x0, 0x98d}, {0xecfb, 0x2, 0x0, 0x5}, {0x3, 0x8001, 0x0, 0x6}, {0x1, 0x1, 0x200, 0x7}], {0xba, 0xb, 0x4, 0x9}, {0x0, 0x5, 0x2b, 0x2}}}) 60.245539ms ago: executing program 3 (id=27): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socket(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r1) select(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x100000000}, &(0x7f00000024c0)={0x1fe, 0x8001, 0x2, 0x1}, 0x0, 0x0) (async) select(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x100000000}, &(0x7f00000024c0)={0x1fe, 0x8001, 0x2, 0x1}, 0x0, 0x0) select(0x19, &(0x7f0000000280)={0x1, 0x0, 0x10001, 0x0, 0x1000, 0x8000}, &(0x7f0000000200)={0x7f, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0) setsockopt$sock_int(r0, 0xffff, 0x80, &(0x7f0000000000)=0x1, 0x4) (async) setsockopt$sock_int(r0, 0xffff, 0x80, &(0x7f0000000000)=0x1, 0x4) 1.145345ms ago: executing program 7 (id=28): sysctl$net_inet_ip(&(0x7f0000000000)={0x4, 0x2, 0x0, 0xb}, 0x4, 0x0, 0x0, 0x0, 0x0) nanosleep(0xfffffffffffffffe, 0x0) r0 = socket(0x2, 0x4001, 0x0) clock_getres(0x4, &(0x7f0000000000)) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0xecdb1f631ef4aa36, 0x114) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, r1, 0x0) mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) setsockopt$sock_int(r0, 0xffff, 0x20, 0x0, 0x0) 785.094µs ago: executing program 3 (id=29): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) fcntl$lock(r0, 0x9, &(0x7f0000000080)={0x2, 0x0, 0x200000000, 0x3000200000001}) r1 = socket$inet(0x2, 0x2, 0x0) getsockname$inet(r1, &(0x7f0000000000), &(0x7f0000000100)=0xc) getsockopt(r1, 0x0, 0x17, 0x0, 0x0) syz_emit_ethernet(0x126f, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086"]) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x2}}) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7, 0x0}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket(0x18, 0x1, 0x0) close(r2) r3 = socket(0x18, 0x2, 0x0) setsockopt(r3, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) connect$unix(r2, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) close(r3) openat$vmm(0xffffffffffffff9c, &(0x7f00000000c0), 0x10, 0x0) getrlimit(0x8, &(0x7f0000000040)) socket$inet(0x2, 0x4, 0xf) clock_getres(0x3, &(0x7f0000000000)) ioctl$TIOCGETA(r0, 0x402c7413, &(0x7f0000000140)) sysctl$vm_swapencrypt(&(0x7f00000001c0)={0x7, 0x2}, 0x3, 0x0, 0x0, 0x0, 0x40) 454.136µs ago: executing program 3 (id=30): setrlimit(0x8, &(0x7f0000000040)={0x42, 0x62}) r0 = syz_open_pts() r1 = syz_open_pts() close(r1) close(r0) (async) r2 = syz_open_pts() writev(r1, &(0x7f0000000000)=[{&(0x7f0000000080)='\x00', 0x1}, {&(0x7f0000000180)="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", 0x130}], 0x2) close(r2) (async) execve(0x0, 0x0, 0x0) 0s ago: executing program 7 (id=31): ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x0, 0x0, {[0xfffffffffffffffb, 0x0, 0x2, 0x100000000, 0x0, 0x0, 0xdf5e, 0x0, 0x0, 0x2f01, 0x0, 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x2, 0x8], [0xfffffffffffffffe, 0x0, 0xfffffffffffffffd, 0x20000000, 0x0, 0x7b98, 0x1fe], [0x100000001, 0x2, 0x0, 0x9, 0x0, 0x11000], [0x100, 0x20000000000, 0x0, 0x100000000, 0xfffffffffffffffe], [{0x0, 0x4, 0x2, 0x7d06}, {0xf7fc, 0x2, 0x5}, {0x0, 0x0, 0xfffffffb, 0x80}, {0x3, 0x5, 0x6, 0xffffffffffffffff}, {0xcc8b, 0x2, 0x0, 0x8}, {0x0, 0x2003, 0x40000, 0x2000000000000000}, {}, {0xffff, 0x965, 0x0, 0x8}], {0x0, 0x5, 0x1}, {0x0, 0x0, 0x0, 0x2}}}) (async) sysctl$net_inet_tcp(&(0x7f00000014c0)={0x4, 0x2, 0x6, 0x14}, 0x4, 0x0, 0x0, 0x0, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) (async) sysctl$kern(&(0x7f00000000c0)={0x1, 0x37}, 0x6, &(0x7f0000000100)="71f959343efb71bcd0567b4d6a740a0000", &(0x7f0000000080)=0xff0a, 0x0, 0x67) (async) clock_getres(0x2, 0xffffffffffffffff) r0 = kqueue() kevent(r0, &(0x7f0000000080), 0xe4a, 0x0, 0x4000a9fa, 0x0) (async) mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) r1 = open(&(0x7f0000000140)='./file0\x00', 0x804, 0x0) ioctl$FIONREAD(r1, 0xc0106924, &(0x7f00000001c0)) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$WSKBDIO_SETBACKLIGHT(r2, 0x800c5712, &(0x7f0000000340)={0x7, 0x7, 0xffff}) (async) openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) setrlimit(0x8, &(0x7f0000000980)={0x8, 0x54}) (async) r3 = syz_open_pts() close(r3) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r4 = socket(0x2, 0x4001, 0x0) (async) r5 = socket(0x11, 0x3, 0x0) sendto$unix(r5, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x0, 0x0, 0x0) (async) r6 = fcntl$dupfd(r4, 0xa, r5) close(r6) (async) socket(0x18, 0x2, 0x0) (async) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) flock(r0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.136' (ED25519) to the list of known hosts. panic: kernel diagnostic assertion "va >= entry->start" failed: file "/syzkaller/managers/setuid/kernel/sys/uvm/uvm_fault.c", line 1739 Stopped at db_enter+0x25: addq $0x8,%rsp TID PID UID PRFLAGS PFLAGS CPU COMMAND 514128 95998 32767 0x10 0 0 syz-executor * 96096 95998 32767 0x10 0x4000000 1K syz-executor db_enter() at db_enter+0x25 panic(ffffffff83154ca0) at panic+0x1e5 __assert(ffffffff83108501,ffffffff8313fac2,6cb,ffffffff8306970c) at __assert+0x29 uvm_fault_unwire_locked(fffffd806c10f580,200000000000,200000011000) at uvm_fault_unwire_locked+0x4c1 uvm_fault_unwire(fffffd806c10f580,200000000000,200000011000) at uvm_fault_unwire+0x55 kern_sysctl_dirs(37,ffff80003c60a558,4,200000000100,ffff80003c60a588,0,810113cfe22cd051,4) at kern_sysctl_dirs+0x340 kern_sysctl(ffff80003c60a554,5,200000000100,ffff80003c60a588,0,67,8373db764118e59e) at kern_sysctl+0x12d sys_sysctl(ffff8000ffff7460,ffff80003c60a6c0,ffff80003c60a610) at sys_sysctl+0x425 syscall(ffff80003c60a6c0) at syscall+0xbc6 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x36ff0caea70, count: 5 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{1}> ddb{1}> set $lines = 0 ddb{1}> set $maxwidth = 0 ddb{1}> show panic *cpu1: kernel diagnostic assertion "va >= entry->start" failed: file "/syzkaller/managers/setuid/kernel/sys/uvm/uvm_fault.c", line 1739 ddb{1}> trace db_enter() at db_enter+0x25 panic(ffffffff83154ca0) at panic+0x1e5 __assert(ffffffff83108501,ffffffff8313fac2,6cb,ffffffff8306970c) at __assert+0x29 uvm_fault_unwire_locked(fffffd806c10f580,200000000000,200000011000) at uvm_fault_unwire_locked+0x4c1 uvm_fault_unwire(fffffd806c10f580,200000000000,200000011000) at uvm_fault_unwire+0x55 kern_sysctl_dirs(37,ffff80003c60a558,4,200000000100,ffff80003c60a588,0,810113cfe22cd051,4) at kern_sysctl_dirs+0x340 kern_sysctl(ffff80003c60a554,5,200000000100,ffff80003c60a588,0,67,8373db764118e59e) at kern_sysctl+0x12d sys_sysctl(ffff8000ffff7460,ffff80003c60a6c0,ffff80003c60a610) at sys_sysctl+0x425 syscall(ffff80003c60a6c0) at syscall+0xbc6 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x36ff0caea70, count: -10 ddb{1}> show registers rdi 0 rsi 0x1 rbp 0xffff80003c60a130 rbx 0xffff800029b5cdc7 rdx 0 rcx 0xffff8000ffff7460 rax 0xffff800029b5bff0 r8 0x101010101010101 r9 0x8080808080808080 r10 0x7d9a6b3790634141 r11 0x83dc116790c7c5e8 r12 0xffff800029b5cbc8 r13 0 r14 0 r15 0x1 rip 0xffffffff811c7ac5 db_enter+0x25 cs 0x8 rflags 0x246 rsp 0xffff80003c60a120 ss 0x10 db_enter+0x25: addq $0x8,%rsp ddb{1}> show proc PROC (syz-executor) tid=96096 pid=95998 tcnt=4 stat=onproc flags process=10 proc=4000000 runpri=32, usrpri=50, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff8000ffff6020,0xffff8000ffff96f0 process=0xffff80003bdaddc0 user=0xffff80003c605000, vmspace=0xfffffd806c10f580 estcpu=36, cpticks=2, pctcpu=0.0, user=0, sys=2, intr=0 ddb{1}> ps PID TID PPID UID S FLAGS WAIT COMMAND 95998 514128 47159 32767 7 0x10 syz-executor 95998 118200 47159 32767 3 0x4000090 fsleep syz-executor *95998 96096 47159 32767 7 0x4000010 syz-executor 95998 378086 47159 32767 2 0x4000010 syz-executor 18101 158748 62734 32767 3 0x90 nanoslp syz-executor 18101 363474 62734 32767 3 0x4000090 ttyout syz-executor 18101 313309 62734 32767 3 0x4000090 fsleep syz-executor 92829 134886 59446 32767 2 0x10 syz-executor 92829 439427 59446 32767 3 0x4000090 kqpoll syz-executor 32145 37131 62069 0 2 0x100000 sh 80343 85441 59403 32767 2 0x10 syz-executor 80343 230493 59403 32767 3 0x4000090 fsleep syz-executor 80343 283700 59403 32767 3 0x4000090 fsleep syz-executor 6729 296946 68594 32767 4 0x82010 syz-executor 6729 403021 68594 32767 4 0x4082010 syz-executor 6729 443509 68594 32767 2 0x4082010 syz-executor 6729 189754 68594 32767 3 0x4002010 suspend syz-executor 12870 156039 47289 32767 2 0x10 syz-executor 12870 290902 47289 32767 3 0x4000090 fsleep syz-executor 12870 100871 47289 32767 3 0x4000090 fsleep syz-executor 62069 123273 16938 0 3 0x10008a sigsusp sh 82097 392244 90367 32767 3 0x90 nanoslp syz-executor 82097 24053 90367 32767 3 0x4000090 fifor syz-executor 82097 233714 90367 32767 3 0x4000090 fsleep syz-executor 47159 101336 24454 32767 3 0x90 nanoslp syz-executor 68594 267010 95506 32767 3 0x90 nanoslp syz-executor 59446 132150 11258 32767 3 0x90 nanoslp syz-executor 62734 502349 96386 32767 3 0x90 nanoslp syz-executor 59403 29878 68881 32767 3 0x90 nanoslp syz-executor 47289 282874 50898 32767 3 0x90 nanoslp syz-executor 90367 323694 49237 32767 3 0x90 nanoslp syz-executor 16938 330943 20211 0 3 0x80 wait syz-executor 24454 457830 5569 0 3 0x82 wait syz-executor 95506 501255 5569 0 3 0x82 wait syz-executor 11258 128116 5569 0 3 0x82 wait syz-executor 68881 206476 5569 0 3 0x82 wait syz-executor 96386 319339 5569 0 3 0x82 wait syz-executor 20211 514313 5569 0 3 0x82 wait syz-executor 50898 337753 5569 0 3 0x82 wait syz-executor 49237 20444 5569 0 3 0x82 wait syz-executor 5569 489353 21060 0 3 0x82 kqread syz-executor 21060 104802 92462 0 3 0x10008a sigsusp ksh 92462 381591 94829 0 3 0x98 kqread sshd-session 94829 321289 97666 0 3 0x92 kqread sshd-session 50948 197197 1 0 3 0x100083 ttyin getty 97666 13885 1 0 3 0x88 kqread sshd 95137 295233 3320 73 3 0x1100090 kqread syslogd 3320 495453 1 0 3 0x100082 sbwait syslogd 82296 69452 1 0 3 0x100080 kqread resolvd 62076 124254 88593 77 3 0x100092 kqread dhcpleased 13803 200377 88593 77 3 0x100092 kqread dhcpleased 88593 463506 1 0 3 0x80 kqread dhcpleased 50566 51523 0 0 3 0x14200 bored smr 96756 435708 0 0 2 0x14200 zerothread 23928 207251 0 0 3 0x14200 aiodoned aiodoned 63163 436076 0 0 3 0x14200 syncer update 65100 432076 0 0 3 0x14200 cleaner cleaner 87382 342358 0 0 3 0x14200 reaper reaper 11488 300597 0 0 3 0x14200 pgdaemon pagedaemon 17708 228743 0 0 3 0x14200 bored viomb 27699 427797 0 0 3 0x40014200 acpi0 acpi0 73637 58711 0 0 3 0x40014200 idle1 78939 151326 0 0 3 0x14200 bored softnet3 62788 150484 0 0 3 0x14200 bored softnet2 35545 137620 0 0 3 0x14200 bored softnet1 59247 170371 0 0 3 0x14200 bored softnet0 38079 81772 0 0 3 0x14200 bored systqmp 26406 390167 0 0 3 0x14200 bored systq 4180 197514 0 0 3 0x14200 tmoslp softclockmp 29078 172180 0 0 3 0x40014200 tmoslp softclock 87241 233800 0 0 3 0x40014200 idle0 1 214918 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb{1}> show all locks Process 95998 (syz-executor) thread 0xffff8000ffff7460 (96096) exclusive rwlock amaplk r = 0 (0xfffffd80732043a0) #0 witness_lock+0x5bb #1 rw_do_enter_write+0x3ea #2 uvm_map_lock_entry+0x51 #3 uvm_fault_unwire_locked+0x253 #4 uvm_fault_unwire+0x55 #5 kern_sysctl_dirs+0x340 #6 kern_sysctl+0x12d #7 sys_sysctl+0x425 #8 syscall+0xbc6 #9 Xsyscall+0x128 shared rwlock vmmaplk r = 0 (0xfffffd806c10f680) #0 witness_lock+0x5bb #1 rw_do_enter_read+0x3af #2 uvm_fault_unwire+0x3e #3 kern_sysctl_dirs+0x340 #4 kern_sysctl+0x12d #5 sys_sysctl+0x425 #6 syscall+0xbc6 #7 Xsyscall+0x128 exclusive kernel_lock &kernel_lock r = 0 (0xffffffff835a18f0) #0 witness_lock+0x5bb #1 __mp_acquire_count+0x58 #2 mi_switch+0x4b7 #3 sleep_finish+0x24f #4 rw_do_enter_write+0x1de #5 vm_map_lock_ln+0x12e #6 uvmfault_lookup+0xe8 #7 uvm_fault_check+0x987 #8 uvm_fault+0x106 #9 uvm_fault_wire+0x73 #10 sysctl_vslock+0x109 #11 kern_sysctl_dirs+0x247 #12 kern_sysctl+0x12d #13 sys_sysctl+0x425 #14 syscall+0xbc6 #15 Xsyscall+0x128 exclusive rwlock sysctllk r = 0 (0xffffffff834e4ea8) #0 witness_lock+0x5bb #1 rw_do_enter_write+0x3ea #2 sysctl_vslock+0x45 #3 kern_sysctl_dirs+0x247 #4 kern_sysctl+0x12d #5 sys_sysctl+0x425 #6 syscall+0xbc6 #7 Xsyscall+0x128 ddb{1}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 10184 10953K 10966K 166960K 11263 0 pcb 17 12K 12K 166960K 17 0 rtable 232 6K 7K 166960K 339 0 pf 31 16K 16K 166960K 31 0 ifaddr 42 7K 7K 166960K 44 0 ifgroup 50 2K 2K 166960K 50 0 sysctl 1 1K 1K 166960K 1 0 counters 64 36K 36K 166960K 64 0 ioctlops 0 0K 2K 166960K 29 0 iov 0 0K 12K 166960K 4 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1333 84K 84K 166960K 1351 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 1K 166960K 2 0 VM map 2 1K 1K 166960K 2 0 sem 3 0K 0K 166960K 3 0 dirhash 12 2K 2K 166960K 12 0 ACPI 1690 195K 286K 166960K 12468 0 file desc 27 101K 117K 166960K 168 0 proc 58 79K 103K 166960K 473 0 subproc 72 4K 4K 166960K 72 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 2 0K 0K 166960K 9 0 in_multi 99 7K 7K 166960K 101 0 ether_multi 1 0K 0K 166960K 1 0 mrt 1 0K 0K 166960K 1 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 55 254K 254K 166960K 55 0 exec 0 0K 1K 166960K 335 0 fusefs mount 1 32K 32K 166960K 1 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 255 74K 91K 166960K 2864 0 UVM aobj 3 2K 2K 166960K 3 0 pinsyscall 48 96K 110K 166960K 1157 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 0K 166960K 2 0 NDP 27 2K 2K 166960K 27 0 temp 35 6886K 6950K 166960K 3685 0 kqueue 16 24K 28K 166960K 28 0 SYN cache 2 16K 16K 166960K 2 0 ddb{1}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 24 0 0 1 0 1 1 0 8 0 rtpcb 120 35 0 32 1 0 1 1 0 8 0 rtentry 112 110 0 1 4 0 4 4 0 8 0 unpcb 144 48 0 29 1 0 1 1 0 8 0 syncache 336 3 0 3 1 0 1 1 0 8 1 tcpcb 808 21 0 13 1 0 1 1 0 8 0 arp 120 18 0 0 1 0 1 1 0 8 0 inpcb 376 144 0 128 8 0 8 8 0 8 5 nd6 136 23 0 0 1 0 1 1 0 8 0 kcovpl 48 8 0 0 1 0 1 1 0 8 0 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 452 0 0 29 0 29 29 0 8 0 art_table 32 453 0 0 4 0 4 4 0 8 0 art_node 16 109 0 10 1 0 1 1 0 8 0 semapl 112 1 0 0 1 0 1 1 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino2pl 256 1575 0 74 94 0 94 94 0 8 0 ffsino 280 1575 0 74 108 0 108 108 0 8 0 nchpl 144 1799 0 125 63 0 63 63 0 8 0 uvmvnodes 80 1656 0 0 34 0 34 34 0 8 0 vnodes 216 1656 0 0 92 0 92 92 0 8 0 namei 1024 5205 0 5205 1 0 1 1 0 8 1 percpumem 16 46 0 0 1 0 1 1 0 8 0 kstatmem 264 22 0 0 2 0 2 2 0 8 0 scxspl 216 5312 0 5312 3 1 2 2 1 8 2 plimitpl 152 38 0 12 2 0 2 2 0 8 1 sigapl 424 438 0 381 7 0 7 7 0 8 0 futexpl 64 365 0 358 1 0 1 1 0 8 0 knotepl 120 67 0 0 3 0 3 3 0 8 0 kqueuepl 216 27 0 14 1 0 1 1 0 8 0 pipepl 328 101 0 73 3 0 3 3 0 8 0 fdescpl 504 420 0 381 7 1 6 6 0 8 0 filepl 152 1463 0 1235 11 0 11 11 0 8 1 lockfpl 104 17 0 14 1 0 1 1 0 8 0 lockfspl 48 10 0 7 1 0 1 1 0 8 0 sessionpl 144 21 0 5 1 0 1 1 0 8 0 pgrppl 48 29 0 5 1 0 1 1 0 8 0 ucredpl 104 114 0 96 1 0 1 1 0 8 0 zombiepl 144 381 0 381 1 0 1 1 0 8 1 processpl 1168 438 0 381 5 0 5 5 0 8 0 procpl 648 498 0 426 6 0 6 6 0 8 0 sockpl 688 227 0 189 9 0 9 9 0 8 5 mcl8k 8192 2 0 0 1 0 1 1 0 8 0 mcl4k 4096 117 0 0 15 0 15 15 0 8 0 mcl2k 2048 18 0 0 3 0 3 3 0 8 0 mtagpl 96 2 0 0 1 0 1 1 0 8 0 mbufpl 256 158 0 0 10 0 10 10 0 8 0 bufpl 280 2252 0 124 152 0 152 152 0 8 0 anonpl 24 98188 0 94790 23 0 23 23 0 185 2 amapchunkpl 152 8989 0 8391 29 0 29 29 0 158 6 amappl16 200 1945 0 1922 5 0 5 5 0 8 3 amappl15 192 9 0 9 1 0 1 1 0 8 1 amappl14 184 98 0 88 1 0 1 1 0 8 0 amappl13 176 8 0 8 1 0 1 1 0 8 1 amappl12 168 1009 0 971 2 0 2 2 0 8 0 amappl11 160 44 0 34 1 0 1 1 0 8 0 amappl10 152 6 0 6 1 0 1 1 0 8 1 amappl9 144 244 0 244 1 0 1 1 0 8 1 amappl8 136 20 0 19 1 0 1 1 0 8 0 amappl7 128 90 0 79 1 0 1 1 0 8 0 amappl6 120 171 0 167 1 0 1 1 0 8 0 amappl5 112 114 0 108 1 0 1 1 0 8 0 amappl4 104 274 0 259 1 0 1 1 0 8 0 amappl3 96 1353 0 1216 4 0 4 4 0 8 0 amappl2 88 586 0 533 2 0 2 2 0 8 0 amappl1 80 7389 0 6838 13 0 13 13 0 8 0 amappl 88 2536 0 2329 5 0 5 5 0 92 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 2 0 0 1 0 1 1 0 8 0 uaddrrnd 24 420 0 381 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 420 0 381 1 0 1 1 0 8 0 vmmpekpl 168 4957 0 4930 2 0 2 2 0 8 0 vmmpepl 168 32077 0 30030 90 0 90 90 0 357 0 vmsppl 456 419 0 381 7 1 6 6 0 8 0 rwobjpl 64 13817 0 11293 42 0 42 42 0 8 0 pdppl 4096 847 0 762 103 10 93 93 0 8 8 pvpl 32 10059 0 0 82 0 82 82 0 265 0 pmappl 248 419 0 381 4 1 3 3 0 8 0 extentpl 40 55 0 38 1 0 1 1 0 8 0 phpool 112 277 0 13 8 0 8 8 0 8 0 ddb{1}> machine ddbcpu 0 Stopped at x86_ipi_db+0x27: addq $0x8,%rsp x86_ipi_db(ffffffff834dfff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc+0x1a __mp_lock(ffffffff835a16e8) at __mp_lock+0x1a3 softintr_dispatch(0) at softintr_dispatch+0x5b Xsoftclock() at Xsoftclock+0x27 end of kernel end trace frame: 0x744d4edb8b60, count: 8 ddb{0}> trace x86_ipi_db(ffffffff834dfff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc+0x1a __mp_lock(ffffffff835a16e8) at __mp_lock+0x1a3 softintr_dispatch(0) at softintr_dispatch+0x5b Xsoftclock() at Xsoftclock+0x27 end of kernel end trace frame: 0x744d4edb8b60, count: -7 ddb{0}> machine ddbcpu 1 Stopped at db_enter+0x25: addq $0x8,%rsp db_enter() at db_enter+0x25 panic(ffffffff83154ca0) at panic+0x1e5 __assert(ffffffff83108501,ffffffff8313fac2,6cb,ffffffff8306970c) at __assert+0x29 uvm_fault_unwire_locked(fffffd806c10f580,200000000000,200000011000) at uvm_fault_unwire_locked+0x4c1 uvm_fault_unwire(fffffd806c10f580,200000000000,200000011000) at uvm_fault_unwire+0x55 kern_sysctl_dirs(37,ffff80003c60a558,4,200000000100,ffff80003c60a588,0,810113cfe22cd051,4) at kern_sysctl_dirs+0x340 kern_sysctl(ffff80003c60a554,5,200000000100,ffff80003c60a588,0,67,8373db764118e59e) at kern_sysctl+0x12d sys_sysctl(ffff8000ffff7460,ffff80003c60a6c0,ffff80003c60a610) at sys_sysctl+0x425 syscall(ffff80003c60a6c0) at syscall+0xbc6 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x36ff0caea70, count: 5 ddb{1}> trace db_enter() at db_enter+0x25 panic(ffffffff83154ca0) at panic+0x1e5 __assert(ffffffff83108501,ffffffff8313fac2,6cb,ffffffff8306970c) at __assert+0x29 uvm_fault_unwire_locked(fffffd806c10f580,200000000000,200000011000) at uvm_fault_unwire_locked+0x4c1 uvm_fault_unwire(fffffd806c10f580,200000000000,200000011000) at uvm_fault_unwire+0x55 kern_sysctl_dirs(37,ffff80003c60a558,4,200000000100,ffff80003c60a588,0,810113cfe22cd051,4) at kern_sysctl_dirs+0x340 kern_sysctl(ffff80003c60a554,5,200000000100,ffff80003c60a588,0,67,8373db764118e59e) at kern_sysctl+0x12d sys_sysctl(ffff8000ffff7460,ffff80003c60a6c0,ffff80003c60a610) at sys_sysctl+0x425 syscall(ffff80003c60a6c0) at syscall+0xbc6 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x36ff0caea70, count: -10