last executing test programs: 12.910026474s ago: executing program 5 (id=22): r0 = socket(0x2, 0x2, 0x0) ioctl$FIONREAD(r0, 0xc0207534, &(0x7f0000000000)) 12.820493661s ago: executing program 5 (id=25): r0 = socket(0x18, 0x1, 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x1ffa, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1, 0x0) r2 = socket(0x18, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000003c0)=0xc) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000340)={{0xffffffff, 0x0, 0x0, r4, 0x0, 0x1ec}, 0x0, 0x8, r3}) r5 = socket(0x18, 0x1, 0x0) r6 = syz_open_pts() ioctl$TIOCSETA(r6, 0x802c7414, &(0x7f00000007c0)={0x0, 0x1, 0xffefbff6, 0x0, "0000ffffffffff9b752d0200"}) writev(r6, &(0x7f0000000100)=[{&(0x7f0000000140)="7659aeb94832406f050635f0b67c483a24febaee7e5f3d48e6cb95bdcc0fc869e646ecfa588c53283c4dd3ed77706f3868cacea79983bdfb42d2706563dca286f58274eac945d5ffe9054ffd5b7724b408516b9ed309d475", 0x58}, {&(0x7f00000000c0)="00007d481eef6461909f9a3014", 0xd}], 0x2) r7 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r7, 0x0, 0x200000000000c, &(0x7f0000000000)="e600100000000000", 0x8) setsockopt$inet_opts(r7, 0x0, 0xd, &(0x7f0000000240)="ea00000100000000", 0x8) ioctl$TIOCFLUSH(r6, 0x80047410, &(0x7f0000000080)) connect$unix(r5, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) getsockname$inet(r5, &(0x7f00000000c0), &(0x7f0000000000)=0xffffffffffffff35) r8 = msgget$private(0x0, 0xfffffffffffffb99) msgsnd(r8, &(0x7f00000000c0)=ANY=[@ANYRESHEX], 0x298, 0x800) msgrcv(r8, 0xffffffffffffffff, 0x0, 0x0, 0x800) listen(0xffffffffffffffff, 0x9045) setsockopt$sock_timeval(0xffffffffffffffff, 0xffff, 0x0, &(0x7f00000000c0)={0x0, 0x1ff}, 0x10) connect$unix(r2, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) sendto$unix(r2, &(0x7f0000000140)="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", 0x1dc, 0x0, 0x0, 0x0) ioctl$FIONREAD(r1, 0x8020697a, &(0x7f0000000100)) setsockopt(r0, 0x1000000029, 0xc, 0x0, 0x0) 12.50908199s ago: executing program 5 (id=41): r0 = socket(0x2, 0x4001, 0x0) r1 = dup(r0) r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) close(r2) mknod(&(0x7f0000000000)='./file0\x00', 0xc000, 0x0) r3 = socket(0x2, 0x2, 0x0) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) shutdown(r2, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r4 = socket(0x2, 0x4001, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="89000000ffff000001"], 0x9}, 0x0) r5 = socket(0x2, 0x2, 0x0) r6 = dup(r5) setsockopt$inet_opts(r6, 0x0, 0x24, &(0x7f0000000040)="fd0cc085", 0x4) sendmsg$unix(r5, &(0x7f0000000440)={&(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x8, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="140000000000000024"], 0xe0}, 0x0) shmget$private(0x0, 0x1000, 0x80, &(0x7f0000fff000/0x1000)=nil) ioctl$WSDISPLAYIO_DELFONT(r1, 0x8058574f, &(0x7f00000000c0)={'./file0\x00', 0x8001, 0x8001, 0x4, 0x1, 0x0, 0x8, 0x200000, 0x2, 0x0, 0x5, 0x3}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r8, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f00000024c0)=""/227, 0xe3}, 0x0) sendmsg(r7, &(0x7f0000000380)={0x0, 0x32c, 0x0, 0x0, &(0x7f0000000000), 0x90}, 0x0) r9 = dup(r4) r10 = fcntl$dupfd(r9, 0x2, 0xffffffffffffffff) close(r10) openat$wsmuxmouse(0xffffffffffffff9c, 0x0, 0x200, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x2, 0x32) connect$unix(r3, &(0x7f0000000000), 0x10) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x1010, r0, 0x100000000) setsockopt$sock_int(r2, 0xffff, 0x1023, &(0x7f0000000040), 0x4) 12.50773146s ago: executing program 5 (id=43): mkdir(&(0x7f0000000000)='./file0\x00', 0x1) (async, rerun: 32) r0 = syz_open_pts() (rerun: 32) ioctl$TIOCSWINSZ(r0, 0x80087467, &(0x7f0000002240)={0x6, 0x401, 0x1, 0x9567}) (async, rerun: 64) chmod(&(0x7f0000000080)='./file0\x00', 0x2ea) (rerun: 64) chdir(&(0x7f0000000100)='./file0\x00') mkdir(&(0x7f0000000040)='./file2\x00', 0xc1) mkdir(&(0x7f0000000300)='./file1\x00', 0xc2) (async) rename(&(0x7f0000000140)='./file1\x00', &(0x7f0000000340)='./file2\x00') 12.308362398s ago: executing program 5 (id=46): fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x500, 0x0) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000000)={0x2, &(0x7f0000000080)=[{0x7, 0xf7, 0xff, 0x9}, {0xc, 0x3d, 0x4, 0xa1}]}) r0 = socket$inet(0x2, 0x2, 0x0) r1 = openat$diskmap(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$DIOCMAP(r1, 0xc0106477, &(0x7f0000000140)={&(0x7f0000000100)='./file0\x00', r0, 0x3}) r2 = socket(0x2, 0x1, 0x0) connect$unix(r2, &(0x7f0000000000), 0x10) setsockopt$inet_opts(r2, 0x0, 0x1, &(0x7f0000000040)="27913c11b3c9e91fbdf59c32417020e3a81e536e", 0x14) write(r2, &(0x7f0000000080)="d99aca906c", 0x1dd6) shutdown(r2, 0x2) write(r2, &(0x7f0000000180)="c53c8bd02bf523bc3b822553e9b542cb44ce28db5935301a318fbd5d2658227197d6d56d8e815e11580336baa41932b0eb5980aa270d254c4824012360750de16b91baa4ca1071538b1824610d6b4bed1898ae881d63384cec403f018a333086debeed8cccafacf42c62fd7948501b19bd7e773ae6bc3142f6e4996ad762b6e457dd31fa9e702b17ebae7f79d5c375d6ad5a3d46a34661446a937c9fdd2d2e98f38427f87399445dabdeaf2c9bdc208531f23fa9d50f74c8eb2e94db44ed12e919d37d01d5176536a477c0116f477af9b591329e407b5d35754b6338ae42de23804a20c84b14bd3a75f5cc98145d", 0xee) setsockopt$inet_opts(r0, 0x0, 0x13, &(0x7f0000000000), 0x4) r3 = syz_open_pts() ioctl$TIOCSWINSZ(r3, 0x80087467, &(0x7f0000002240)={0x6, 0x401, 0x1, 0x9567}) ioctl$FIONBIO(r3, 0x8004667e, &(0x7f0000000040)=0x2) dup2(r3, r3) bind(r0, &(0x7f0000000280)=@in={0x2, 0x3}, 0xc) 12.17860952s ago: executing program 5 (id=50): r0 = socket$inet6(0x18, 0x8005, 0x5) sendto$inet6(r0, &(0x7f00000001c0)="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", 0xff, 0x2, &(0x7f0000000080)={0x18, 0x1, 0x40, 0x9}, 0xc) msgctl$IPC_SET(0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0xb2}, 0x0, 0x0, 0xffffffffffffffff}) setitimer(0x0, &(0x7f0000000040)={{0x6, 0x8}, {0x7ff, 0xfff}}, &(0x7f0000000080)) setitimer(0x0, 0x0, &(0x7f00000004c0)) r1 = socket(0x18, 0x1, 0x0) connect$unix(r1, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) getsockname$inet(r1, &(0x7f00000000c0), &(0x7f0000000600)=0xfffffc6f) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) fcntl$lock(r2, 0x7, &(0x7f00000000c0)={0x0, 0x0, 0xfffffffffffffffc, 0x1000500000007}) r3 = socket(0x18, 0x1, 0x0) close(r3) r4 = socket(0x2, 0x2, 0x0) r5 = dup(r4) setsockopt$inet_opts(r5, 0x0, 0x15, &(0x7f0000000040)="fd04c085", 0x4) r6 = accept$inet(r1, &(0x7f0000000000), &(0x7f0000000040)=0xc) ioctl$BIOCGRSIG(r5, 0x40044273, &(0x7f0000000300)) write(r6, &(0x7f0000000140)="ec3fc33ffe543aba9cb47933211e1effdb7283d75c641aa8c0d287b987789445dc86bc34b66a20e4221c13c3c9f30bacf684d49071b385ffcdc52a5ce857b2143f22980155b067dfcf8f528407186d6e9034", 0x52) mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) r7 = open$dir(&(0x7f00000002c0)='./file0\x00', 0x2, 0x102) ioctl$FIONREAD(r7, 0x8028698c, &(0x7f0000000180)) r8 = socket(0x18, 0x2, 0x0) r9 = dup2(r1, r8) connect$unix(r3, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) ioctl$VMM_IOC_READREGS(r9, 0xc050756a, &(0x7f0000000640)) 12.177101741s ago: executing program 32 (id=50): r0 = socket$inet6(0x18, 0x8005, 0x5) sendto$inet6(r0, &(0x7f00000001c0)="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", 0xff, 0x2, &(0x7f0000000080)={0x18, 0x1, 0x40, 0x9}, 0xc) msgctl$IPC_SET(0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0xb2}, 0x0, 0x0, 0xffffffffffffffff}) setitimer(0x0, &(0x7f0000000040)={{0x6, 0x8}, {0x7ff, 0xfff}}, &(0x7f0000000080)) setitimer(0x0, 0x0, &(0x7f00000004c0)) r1 = socket(0x18, 0x1, 0x0) connect$unix(r1, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) getsockname$inet(r1, &(0x7f00000000c0), &(0x7f0000000600)=0xfffffc6f) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) fcntl$lock(r2, 0x7, &(0x7f00000000c0)={0x0, 0x0, 0xfffffffffffffffc, 0x1000500000007}) r3 = socket(0x18, 0x1, 0x0) close(r3) r4 = socket(0x2, 0x2, 0x0) r5 = dup(r4) setsockopt$inet_opts(r5, 0x0, 0x15, &(0x7f0000000040)="fd04c085", 0x4) r6 = accept$inet(r1, &(0x7f0000000000), &(0x7f0000000040)=0xc) ioctl$BIOCGRSIG(r5, 0x40044273, &(0x7f0000000300)) write(r6, &(0x7f0000000140)="ec3fc33ffe543aba9cb47933211e1effdb7283d75c641aa8c0d287b987789445dc86bc34b66a20e4221c13c3c9f30bacf684d49071b385ffcdc52a5ce857b2143f22980155b067dfcf8f528407186d6e9034", 0x52) mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) r7 = open$dir(&(0x7f00000002c0)='./file0\x00', 0x2, 0x102) ioctl$FIONREAD(r7, 0x8028698c, &(0x7f0000000180)) r8 = socket(0x18, 0x2, 0x0) r9 = dup2(r1, r8) connect$unix(r3, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) ioctl$VMM_IOC_READREGS(r9, 0xc050756a, &(0x7f0000000640)) 9.800475275s ago: executing program 8 (id=51): r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x2a216df866a95d83, 0x11) syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "6aa63f", 0x0, 0x2b, 0x0, @remote={0xfe, 0x80, '\x00', 0x0}, @loopback={0x4}}}}}) r1 = socket(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0xffff, 0x1023, &(0x7f0000000040)=0x7, 0x31) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x2) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x550f) ftruncate(r2, 0x8531) truncate(&(0x7f0000000000)='./file0\x00', 0x3) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) close(r0) 9.015387692s ago: executing program 8 (id=51): r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x2a216df866a95d83, 0x11) syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "6aa63f", 0x0, 0x2b, 0x0, @remote={0xfe, 0x80, '\x00', 0x0}, @loopback={0x4}}}}}) r1 = socket(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0xffff, 0x1023, &(0x7f0000000040)=0x7, 0x31) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x2) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x550f) ftruncate(r2, 0x8531) truncate(&(0x7f0000000000)='./file0\x00', 0x3) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) close(r0) 7.971094381s ago: executing program 8 (id=51): r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x2a216df866a95d83, 0x11) syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "6aa63f", 0x0, 0x2b, 0x0, @remote={0xfe, 0x80, '\x00', 0x0}, @loopback={0x4}}}}}) r1 = socket(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0xffff, 0x1023, &(0x7f0000000040)=0x7, 0x31) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x2) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x550f) ftruncate(r2, 0x8531) truncate(&(0x7f0000000000)='./file0\x00', 0x3) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) close(r0) 6.459161557s ago: executing program 8 (id=51): r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x2a216df866a95d83, 0x11) syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "6aa63f", 0x0, 0x2b, 0x0, @remote={0xfe, 0x80, '\x00', 0x0}, @loopback={0x4}}}}}) r1 = socket(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0xffff, 0x1023, &(0x7f0000000040)=0x7, 0x31) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x2) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x550f) ftruncate(r2, 0x8531) truncate(&(0x7f0000000000)='./file0\x00', 0x3) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) close(r0) 5.445778919s ago: executing program 0 (id=109): r0 = syz_open_pts() readv(r0, &(0x7f00000012c0)=[{0x0}], 0x1) syz_emit_ethernet(0x3e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa94ea09066dbd86dd60db834400083a00fed38d5ba80b9e61cd0c535a98000000fe80"]) (async) syz_emit_ethernet(0x3e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa94ea09066dbd86dd60db834400083a00fed38d5ba80b9e61cd0c535a98000000fe80"]) 5.439293964s ago: executing program 2 (id=111): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r1, &(0x7f0000000080)={0x0}, 0x10, 0x0) select(0x40, &(0x7f00000004c0)={0x7, 0x8a0, 0x7, 0x5, 0x6, 0xe, 0x5, 0x4}, &(0x7f0000000500)={0xff, 0x129, 0x0, 0x986, 0x25ffefb, 0xad8, 0x2, 0x4}, 0x0, 0x0) recvfrom$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x1000e, &(0x7f0000000500)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd6017b29100a4280000000000fc6a00000000000000000000ff020000000000000000000000000001"]) r2 = socket$unix(0x1, 0x5, 0x0) recvfrom$unix(r2, &(0x7f0000000000)=""/33, 0x21, 0x1043, 0x0, 0x0) 5.407567083s ago: executing program 0 (id=115): r0 = socket(0x11, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f0000000200)=@file={0xd570d0466b6018f, './file0\x00'}, 0xa) getsockname$unix(r1, 0x0, &(0x7f0000000140)) r2 = syz_open_pts() syz_emit_ethernet(0x3e, &(0x7f0000000140)=ANY=[@ANYBLOB="ffff0100000001010000000000000073d47700080000002751406bdf8a85196673c0000000007f0000000000000000000000000008000000000008000000"]) readv(r2, &(0x7f00000012c0)=[{&(0x7f0000000300)=""/14, 0xe}], 0x1) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002c40)=ANY=[@ANYBLOB="1000"], 0x10, 0x8}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) sendmmsg(r3, &(0x7f0000001440)={0x0}, 0x10, 0x0) ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f0000000540)={0xfffffffd, 0x8000000, 0xfbfffffa, 0x9, "7b00000000000000000000000000000000ce9b00", 0x2, 0x75}) r4 = syz_open_pts() ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f00000000c0)={0x3, &(0x7f0000000040)=[{}, {}, {0x4, 0x0, 0x0, 0x3}]}) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x11}, 0x6, &(0x7f0000000080)="ae215599fed2fce97f573b9c553a0e622d29cd093849cd4fe42e0f5d2d06a4e744f0713d1fcaa1b8274dffd067d413ef9d2224d3fddc171f73a295b6ed18b3d0588be75e78a1d734e15bfe", 0x0, 0x0, 0xfffffffffffffd37) ioctl$TIOCSETAF(r2, 0x802c7416, &(0x7f0000000640)={0x0, 0x20000002, 0x8, 0x100, "0021ac878d335e3d6fa9c86a47f9bc2f35f3bf05", 0xffffffff, 0x4}) syz_emit_ethernet(0x138, 0x0) openat$klog(0xffffffffffffff9c, &(0x7f0000000000), 0x10, 0x0) fchdir(r4) sendto$unix(r0, &(0x7f0000000180)="b1000504600000000000000007000000331c13fecea10500fef9ed061ddd1efb7ae320b37b673039d2d236073705ae04be38164991f7b85143222b297be1aa5b236deb51e2f0ac3ebbc257699a5f139b672f4d335d223e7d029d6ba8af630037282102000000720f70c1f5a472c881ea6e69e0bb76d907a900000200361b1257aea8c5ec0000000000000000008abfba090008efffffffff803712051eadb71d89e0000000000000004000000000000000", 0xb1, 0x408, 0x0, 0x96) 5.372104214s ago: executing program 2 (id=117): r0 = socket(0x20, 0x4000, 0xc0) getsockopt(r0, 0x29, 0x24, 0x0, 0x0) 5.369709585s ago: executing program 2 (id=119): socket(0x18, 0x1, 0x0) (async) socket(0x18, 0x1, 0x0) open(&(0x7f0000000b40)='./file0\x00', 0x200, 0x20) (async) r0 = open(&(0x7f0000000b40)='./file0\x00', 0x200, 0x20) socket(0x18, 0x1, 0x0) (async) r1 = socket(0x18, 0x1, 0x0) close(r1) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0xfffffffffffffffc, 0x100000000000000, 0xffffffffffffffff}) (async) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0xfffffffffffffffc, 0x100000000000000, 0xffffffffffffffff}) r2 = socket(0x18, 0x2, 0x0) connect$unix(r2, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) semctl$IPC_SET(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000)={{0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x141, 0x280}, 0x80001, 0x80000000, 0x1}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setsockopt(r1, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) syz_open_pts() (async) r3 = syz_open_pts() close(r3) setrlimit(0x8, &(0x7f0000000040)={0x7, 0x50}) syz_open_pts() (async) r4 = syz_open_pts() close(r4) r5 = syz_open_pts() fcntl$getflags(r0, 0x1) ioctl$TIOCSETAW(r5, 0x802c7415, &(0x7f0000000000)={0x29f57365, 0x7fff, 0x1f, 0xffffffff, "8b030003000100787d902b56d864d3c3a3f4d3c9"}) ioctl$TIOCSETD(r3, 0x8004745f, &(0x7f0000000000)=0x1d) (async) ioctl$TIOCSETD(r3, 0x8004745f, &(0x7f0000000000)=0x1d) connect$unix(r1, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socket(0x800000018, 0x1, 0x0) (async) r7 = socket(0x800000018, 0x1, 0x0) setsockopt$sock_int(0xffffffffffffff9c, 0xffff, 0x1001, &(0x7f0000000080)=0x9, 0x2f) shutdown(r7, 0x1) close(r6) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) 5.346801708s ago: executing program 8 (id=51): r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x2a216df866a95d83, 0x11) syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "6aa63f", 0x0, 0x2b, 0x0, @remote={0xfe, 0x80, '\x00', 0x0}, @loopback={0x4}}}}}) r1 = socket(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0xffff, 0x1023, &(0x7f0000000040)=0x7, 0x31) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x2) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x550f) ftruncate(r2, 0x8531) truncate(&(0x7f0000000000)='./file0\x00', 0x3) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) close(r0) 4.237705913s ago: executing program 0 (id=120): r0 = socket$inet(0x2, 0x2, 0x0) socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x200000000000c, &(0x7f0000000240)="ea00aa6600000000", 0x8) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000280), 0x0) r1 = socket(0x2, 0x4001, 0x0) r2 = dup(r1) r3 = fcntl$dupfd(r2, 0x2, 0xffffffffffffffff) close(r3) socket(0x2, 0x4001, 0x0) poll(&(0x7f0000000140)=[{r3, 0x44}], 0x1, 0x50aa) r4 = socket(0x2, 0x4001, 0x0) r5 = dup(r4) r6 = fcntl$dupfd(r5, 0x2, 0xffffffffffffffff) r7 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r7, &(0x7f0000000080)={&(0x7f0000000040)=@file={0x170, './file0\x00'}, 0xa, 0x0}, 0x0) close(r6) 4.223832s ago: executing program 2 (id=122): sysctl$kern(&(0x7f0000000000)={0x1, 0x56}, 0x2, 0x0, 0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f00000000c0)={0x0, 0x1, 0x6, 0x1000100000007}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0x37) ioctl$TIOCSTSTAMP(0xffffffffffffffff, 0x8008745a, &(0x7f00000006c0)={0x6c3, 0x8}) 4.22338752s ago: executing program 3 (id=123): setrlimit(0x8, &(0x7f0000000580)={0xa, 0x56}) r0 = syz_open_pts() (async) syz_emit_ethernet(0x56, &(0x7f0000000340)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "826e03", 0x20, 0x0, 0x0, @rand_addr="00000000000000050e14fc11133f6400", @local={0xfe, 0x80, '\x00', 0x0}, {[@dstopts={0x2b, 0x1, '\x00', [@ra, @ra]}], @icmpv6=@ndisc_ra}}}}}) close(r0) (async) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x0, @random="41daf82a3630", @empty, @local, @local={0xac, 0x14, 0x0}}}}}) (async) syz_open_pts() (async) ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000240)={0x7fffffff, 0x7bef, 0xffffdf82, 0xffffff8c, "1826ff7f0d010004000004e3ffffffffffffff00", 0x7fffffff, 0x4}) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) 4.00629377s ago: executing program 3 (id=128): setitimer(0x0, &(0x7f0000000100)={{0xffffffff}, {0x800000, 0xea253}}, 0x0) (async) sysctl$net_inet_ip(&(0x7f0000000140)={0x4, 0x2, 0x0, 0x11}, 0x4, &(0x7f0000000000)="8e07b0306591ab22f8b3a835b1412d3d4d230767ae94ccef9dfe1e5bcec9392577bb1d368a06ec631de76b51fef65738fb8077e8cea60587c4ce9a3f6e8d895e8143b8d077c3f2515b3c79905195f3d41a80", 0x0, 0x0, 0x0) (async, rerun: 32) symlinkat(&(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00') (rerun: 32) socket(0x10, 0x4000, 0xd) 3.940092433s ago: executing program 6 (id=130): syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "0000c0", 0x14, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local={0xac, 0x14, 0x0}}, @rand_addr="00fe000001000800001a000000000004", {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x4, 0x8003, 0x0, 0x7ffe}}}}}}}) r0 = socket(0x1, 0x2, 0x0) socket(0x20, 0x2, 0xf7) ioctl$FIONREAD(r0, 0xc0106978, &(0x7f00000001c0)) 3.938144585s ago: executing program 3 (id=132): r0 = open(&(0x7f0000000000)='./file0\x00', 0x9cab835cfdc52675, 0x0) flock(r0, 0xc) (async) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x3, 0x0, 0x1ff}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f0000000080), 0x1c, 0x0}, 0x0) (async) syz_emit_ethernet(0x98, &(0x7f0000000000)={@broadcast, @random="94ea09066dbd", [], {@ipv6={0x86dd, {0x0, 0x6, "db8344", 0x8, 0x11, 0x0, @empty, @mcast2, {[], @udp={{0x0, 0x0, 0x8}}}}}}}) (async) bind$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) (async, rerun: 32) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x8) (async, rerun: 32) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) r1 = socket(0x18, 0x1, 0x0) close(r1) socket(0x18, 0x2, 0x0) (async) connect$unix(r1, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) (async) sendmsg$unix(r1, &(0x7f0000001700)={0x0, 0x5d, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x400) (async) r2 = kqueue() kevent(r2, &(0x7f0000000040), 0x7fffffff, 0x0, 0xffffffff, 0x0) (async, rerun: 32) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (rerun: 32) munmap(&(0x7f0000078000/0x4000)=nil, 0x4000) (async, rerun: 32) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0xa011, r0, 0x0) (async, rerun: 32) r3 = fcntl$dupfd(r0, 0x0, r0) ftruncate(r3, 0x4) (async, rerun: 32) madvise(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x6) (rerun: 32) 3.790155522s ago: executing program 6 (id=133): msgctl$IPC_SET(0x0, 0x1, &(0x7f00000000c0)={{0xc, 0x0, 0x0, 0x0, 0x0, 0x46, 0x100}, 0x0, 0x5, 0x0, 0x0, 0x8, 0x80, 0x0, 0x8000000000000004}) r0 = socket(0x18, 0x1, 0x0) open$dir(&(0x7f00000001c0)='./file0\x00', 0x1, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0xe8, 0x0) r2 = fcntl$dupfd(r1, 0x3, 0xffffffffffffffff) ioctl$FIONREAD(r2, 0x800474c4, &(0x7f00000001c0)) shutdown(r0, 0x0) connect$unix(r0, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) msgctl$IPC_SET(0x0, 0x1, &(0x7f00000000c0)={{0xc, 0x0, 0x0, 0x0, 0x0, 0x46, 0x100}, 0x0, 0x5, 0x0, 0x0, 0x8, 0x80, 0x0, 0x8000000000000004}) (async) socket(0x18, 0x1, 0x0) (async) open$dir(&(0x7f00000001c0)='./file0\x00', 0x1, 0x0) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0xe8, 0x0) (async) fcntl$dupfd(r1, 0x3, 0xffffffffffffffff) (async) ioctl$FIONREAD(r2, 0x800474c4, &(0x7f00000001c0)) (async) shutdown(r0, 0x0) (async) connect$unix(r0, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) (async) 3.788616297s ago: executing program 0 (id=134): ioctl$WSKBDIO_SETDEFAULTKEYREPEAT(0xffffffffffffffff, 0x800c5709, &(0x7f0000000000)={0x7f, 0x3, 0x7ff}) r0 = open(&(0x7f0000001640)='./file0\x00', 0x8, 0x80) r1 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000001680), 0x20000, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000016c0), 0x20000, 0x0) r3 = getpgid(0xffffffffffffffff) r4 = getpgid(0xffffffffffffffff) r5 = geteuid() r6 = getegid() r7 = accept$unix(0xffffffffffffff9c, 0x0, &(0x7f0000001700)) pipe2(&(0x7f0000001740)={0xffffffffffffffff}, 0x4) r9 = openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000001780), 0x20, 0x0) r10 = openat$vmm(0xffffffffffffff9c, &(0x7f00000017c0), 0x80, 0x0) r11 = accept$inet6(0xffffffffffffffff, &(0x7f0000001800), &(0x7f0000001840)=0xc) r12 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000001880), 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000018c0)={0xffffffffffffffff}) r14 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000001900), 0x200, 0x0) r15 = openat$vmm(0xffffffffffffff9c, &(0x7f0000001940), 0x100, 0x0) r16 = getuid() r17 = getgid() r18 = getppid() getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000001980)={0x0, 0x0, 0x0}, 0xc) r21 = openat$bpf(0xffffffffffffff9c, &(0x7f00000019c0), 0x2, 0x0) sendmsg$unix(0xffffffffffffff9c, &(0x7f0000001b00)={&(0x7f0000000040)=@abs={0x0, 0x0, 0x2}, 0x8, &(0x7f0000001580)=[{&(0x7f0000000080)="ac9d53e0d1d3930d90a53e3538553e79e0a61bcd4039e23fdf34ac484963964b6e33657c5ec74de1061e9b02cdd666004d54914096c44fa9223fa95c5981904afe4873652a2c678d51ca922764534569b77a4c119285a5bcd45a6f4c805348025f1b91e2760e5fa0ab2dc0a554ca88c8391fb8d6beb6fe5c724a5c24240aba0b231f9b268aed9c0d8000f0ff055222403544391fff683f880a3cb0e4337579e813df590070dc076a1b193f", 0xab}, {&(0x7f0000000140)="eb837ea0071fcbd28d3a5ecef43104b34431b9d21031d613961728f048da557674a816de164016a3019182e9a78332b542fbeec27cb1d12b7705fbc1667d151b5f273d71618fc3d481ad334371a367ff1338b671d68d131a33036535729747a32465e507cf004fa34732223df8706c2061e3cd479dc4de6f2885a4c5b450e38ce7637377ca40945f7650cddaeda832980594e01900bb19fd9713fe65920f9f9bfc696a201b26b4a47d03f44ef7608ba5af3164f6fe042125245e3eb2ca0cc7957a62012a7958fc874df3fd63eb420a67786755ea08d1ab2f8c9e0d4fea42440e2c9d5f1a", 0xe4}, {&(0x7f0000000240)="3241781bb3d9b36be1415e4267c337b6bcf2aff2584e34bbc9deaecf5466c91fb1ff648b8b81b250c6a849ec810feaed06f0759f64dd4c28d593ec582df0a14378039fb89e8857998c4058ec21deab8bb13f7ad32403a3691db39aa2f5ce486354f06be5f48e", 0x66}, {&(0x7f00000002c0)="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", 0x1000}, {&(0x7f00000012c0)="f5c12af210fa7799b69b2305628ad476af81c71d36e4fd49823a9a5c1ff2a2c29e8abdee28d6e4616657c171209d210a2db8baab76bbc45333a33e5a75d45e52ef4835cb782495d7fb1cfdb3c11d72b7cb5ca08456ec46cc21a3c8360b8ac4f7ada21807d4bb8877fc871bcb389fdb9a6bc07b99f1e28d783fab653ae118fef3111b5eb121148187119a5b325e688d0c71d45bd5f9211224c63c691f157d8782565689988210f62c793689635178e48f5370", 0xb2}, {&(0x7f0000001380)="7c587b2e23763e73c1d7b38d755acacec4150361215df0f1e663678c5e822f3b7fed485c6cbf38f1955ed2804b14d91e062d2b6ccb32929a1ebc5ec026b7fb2a833551e50454", 0x46}, {&(0x7f0000001400)="06b5550aae682f268e0793ca93ffd7aebd0dad37a12356715da2d1157f9d9e4b1c030e69bb81dab880a6ea1902172a21c81d4b7ef71638a3d5094f887ca73ed3d4d8d2b7ebd82ac0d529f9cc96b55224332eef644aa84f531785837c659b", 0x5e}, {&(0x7f0000001480)="1f5e4ddd2bcdc02f8ce7f8684eb0c6449b60aef82da9b3326bc13d2d8fabe8bd998576063530d348bb7e5100009cc9bf9add248b093192129ac24dc8ed3cc6b724d48318c872d2bcb80f122a88cd5a0db1747e44adb72daea5c3d08866ccfcc5d76e1b2945506a72e962c25dcd642113939e93a30f0d30c6379cc45edd908fd5a8e3697b0ed78cd79cb07699837b1d42", 0x90}, {&(0x7f0000001540)="c9", 0x1}], 0x9, &(0x7f0000001a00)=[@rights={0x18, 0xffff, 0x1, [0xffffffffffffffff, r0]}, @rights={0x18, 0xffff, 0x1, [r1, r2]}, @cred={0x20, 0xffff, 0x0, r3, 0xffffffffffffffff, 0xffffffffffffffff}, @cred={0x20, 0xffff, 0x0, r4, r5, r6}, @rights={0x38, 0xffff, 0x1, [r7, r8, r9, r10, r11, r12, r13, r14, r15]}, @cred={0x20, 0xffff, 0x0, 0x0, r16, r17}, @cred={0x20, 0xffff, 0x0, r18, 0x0, r20}, @rights={0x18, 0xffff, 0x1, [r21]}], 0x100, 0x8}, 0xb) syz_extract_tcp_res$synack(&(0x7f0000001b40), 0x1, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000001b80)={@local, @local, [{[], {0x8100, 0x0, 0x1, 0x1}}], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @local, @loopback, @local, @local={0xac, 0x14, 0x0}}}}}) r22 = getpgrp() wait4(r22, &(0x7f0000001bc0), 0x9, &(0x7f0000001c00)) lchown(&(0x7f0000001cc0)='./file0\x00', r19, r17) ioctl$WSKBDIO_GETMAP(r0, 0xc010570d, &(0x7f0000001d40)={0x1, &(0x7f0000001d00)=[{0x2, 0x8000, 0x3, 0x6, 0x2}]}) clock_settime(0x3, &(0x7f0000001d80)={0x81}) 3.786938046s ago: executing program 7 (id=135): r0 = syz_open_pts() fcntl$setown(r0, 0x6, 0x0) sysctl$net_inet6_ip6(&(0x7f0000000000)={0x4, 0x18, 0x29, 0x1}, 0x4, &(0x7f0000000300), 0x0, 0x0, 0x0) r1 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) r2 = geteuid() shmctl$IPC_SET(r1, 0x1, &(0x7f0000000240)={{0x3, r2, 0x0, r2, 0x0, 0x82, 0x3}, 0x10000, 0x9, 0x0, 0x0, 0x0, 0x3, 0x1000}) getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0xc) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000001c0)={{0x40000, r2, 0x0, 0xffffffffffffffff, r3, 0x0, 0x3}, 0xf8fffffdffffffff}) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r4 = socket(0x18, 0x1, 0x0) ioctl$FIONREAD(r4, 0xc038694e, &(0x7f00000001c0)) r5 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7960) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000180)="7f37ce070000003d965a1564287bafc1d6d531c28c4a7eaa13e5232a74bba3779ca27b8e0d00000004fe8a4cc330bb35350cb60a9a374aa8a836289681106692", 0x40}], 0x1) execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) ioctl$FIOSETOWN(r5, 0x8004667c, &(0x7f0000000040)=0x9) 3.786613742s ago: executing program 6 (id=136): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000000)=""/173, 0xaf}], 0x0, 0x0, 0x5e}, 0x40) (async) recvmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000000)=""/173, 0xaf}], 0x0, 0x0, 0x5e}, 0x40) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = open$dir(&(0x7f0000000040)='./file0\x00', 0x8b41, 0x0) kqueue() (async) r3 = kqueue() open(&(0x7f0000000000)='./file0\x00', 0x9cab835cfdc52675, 0x0) (async) r4 = open(&(0x7f0000000000)='./file0\x00', 0x9cab835cfdc52675, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0xa010, r4, 0x10000000000000) select(0x40, &(0x7f0000000000)={0xfffffffffffffffd, 0x0, 0x2, 0x4, 0x100, 0x0, 0x6c67}, 0x0, 0x0, 0x0) (async) select(0x40, &(0x7f0000000000)={0xfffffffffffffffd, 0x0, 0x2, 0x4, 0x100, 0x0, 0x6c67}, 0x0, 0x0, 0x0) kevent(r3, &(0x7f00000002c0)=[{{r2}, 0xfffffffffffffffe, 0xb, 0x2, 0x0, 0x100000000}], 0x1, 0x0, 0xc0fe, 0x0) close(r3) socket$inet(0x2, 0x2, 0x0) select(0x40, &(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x0, 0x0) dup2(r1, r1) 3.786092328s ago: executing program 0 (id=137): pipe(&(0x7f0000000000)) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket(0x2, 0x1, 0x0) connect$unix(r0, &(0x7f0000000000), 0x10) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f0000000080)={0x10, 0x0, [{&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x5000)=nil}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil}, {&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil}, {&(0x7f0000da6000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil}, {&(0x7f0000800000/0x800000)=nil, &(0x7f0000d91000/0x4000)=nil}, {&(0x7f0000f56000/0x1000)=nil, &(0x7f00008fb000/0x2000)=nil}, {&(0x7f0000e4c000/0x4000)=nil, &(0x7f0000efd000/0x1000)=nil}, {&(0x7f0000cd3000/0x1000)=nil, &(0x7f0000862000/0x2000)=nil}, {&(0x7f0000d3d000/0x4000)=nil, &(0x7f0000aff000/0x1000)=nil}, {&(0x7f0000f6a000/0x2000)=nil, &(0x7f0000887000/0x4000)=nil}, {&(0x7f0000da1000/0x4000)=nil, &(0x7f0000ff2000/0x1000)=nil}, {&(0x7f0000e0f000/0x2000)=nil, &(0x7f0000e03000/0x3000)=nil, 0x100000001}, {&(0x7f0000c64000/0x14000)=nil, &(0x7f0000d93000/0x3000)=nil}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f00003b5000/0x2000)=nil}, {&(0x7f0000913000/0x2000)=nil, &(0x7f0000c5a000/0x3000)=nil}], './file0\x00'}) r1 = socket(0x2, 0x2, 0x0) semget$private(0x0, 0x4, 0x8) r2 = socket(0x2, 0x400000000002, 0x0) setsockopt(r2, 0x0, 0x21, &(0x7f0000000180)="b1f5d915", 0x4) setsockopt$sock_int(r2, 0xffff, 0x800, &(0x7f0000000040)=0x3, 0x4) r3 = dup2(r2, r1) select(0x40, &(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x0, 0x0) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r4 = socket(0x2, 0x2, 0x0) sendto$unix(r3, &(0x7f0000000280)="7d24283b90d80cf9410eedc46e4ebf51542f14ac3d0c9d09cc067ccd8cd7f922cb331d51ae6097d401dfcf3c721d6ae2f49544616dd27663f0ebe748450e7da33ad20fa627920de2a0dfdbacbf348fc8045612086ce3f87a3de62493bb6d18e7f3372a88f5bfc24fe18857dffc472ab3930cbd64adf1c353d427605236853621fa10634332b71a67d8434b44ddc31d1b010fc6fb92cac60727f1e624759d8d3340de9bdd950190abcac56057825d6e4472e08e41931f9d044e679ccdc939f71566a55140a84732af287eff6856ba699d92137b6b1e712627095ebb", 0xdb, 0x40b, 0x0, 0x0) connect$unix(r4, &(0x7f0000000000), 0x10) bind(r1, &(0x7f0000000000), 0x10) write(r4, 0x0, 0x0) r5 = dup(r3) ioctl$BIOCGRTIMEOUT(r5, 0x4010426e, &(0x7f0000000380)) recvmmsg(r3, &(0x7f0000000100)={0x0}, 0x10, 0x0, 0x0) 3.770708716s ago: executing program 7 (id=138): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0e99db6de761f86, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x80000000000206, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)="ee11d2ac4a36", 0xffffffb8}], 0x1) select(0x40, &(0x7f0000000000)={0x9, 0x3ff, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7}, &(0x7f0000000380)={0xffb, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x80, 0xe158f79bce329024) readv(r1, &(0x7f0000000140)=[{&(0x7f0000000100)=""/62, 0x3e}], 0x1) open(&(0x7f0000000080)='./bus/\x00', 0x200, 0x0) 3.454750349s ago: executing program 6 (id=139): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) (async) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r1 = geteuid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@cred={0x20, 0xffff, 0x0, 0x0, r1}], 0x20, 0x402}, 0x40a) (async) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = getppid() (async) open(&(0x7f0000000000)='./file0\x00', 0x9cab835cfdc52675, 0x0) ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x0, 0x0, {[0xfffffffffffffffb, 0x8, 0x2, 0x100000000, 0xfffffffffffffffc, 0x0, 0xdf5e, 0x0, 0x0, 0x2f01, 0xdbcf, 0x0, 0xfffffffffffffffd, 0x1, 0x0, 0x0, 0x2, 0x8], [0x4, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x20000000, 0x0, 0x7b98, 0x1fe, 0x0, 0xbee], [0x100000001, 0xfffffffffffffffe, 0x0, 0x9, 0x0, 0x11000], [0x100, 0x20000000000, 0x0, 0x100000000, 0xfffffffffffffffe], [{0x0, 0x4, 0x2, 0x7d06}, {0xf7fc, 0x401, 0x5}, {0x0, 0x0, 0xfffffffb, 0x80}, {0x3, 0x5, 0x6, 0xffffffffffffffff}, {0xcc8b, 0x1, 0x0, 0x8}, {0x0, 0x2002, 0x40000, 0x2000000000000000}, {}, {0x0, 0x965, 0x0, 0x8}], {0x0, 0x5, 0x1}, {0x0, 0x0, 0x0, 0x2}}}) r4 = socket(0x2, 0x4001, 0x0) r5 = dup(r4) r6 = fcntl$dupfd(r5, 0x2, 0xffffffffffffffff) close(r6) (async) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) r7 = socket(0x2, 0x2, 0x0) connect$unix(r7, &(0x7f0000000000), 0x10) (async) r8 = socket(0x2, 0x2, 0x0) setsockopt$sock_int(r8, 0xffff, 0x1003, &(0x7f0000000040)=0x1, 0x4) r9 = kqueue() kevent(r9, &(0x7f0000000080), 0xe4a, 0x0, 0x4000a9fa, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r11 = dup2(r2, r10) fcntl$setown(r11, 0x6, r3) fcntl$setown(r10, 0x6, r3) (async) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000240)={{0x0, 0x0, 0x0, r1, 0xffffffffffffffff, 0x160, 0x7}, 0xffffffff, 0xfffc, 0x0, r3, 0x4, 0x0, 0xf2a}) (async) shmat(r0, &(0x7f0000001000/0x3000)=nil, 0x0) (async) munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) (async) shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x2000) (async) shmdt(0x0) 3.45359895s ago: executing program 0 (id=140): r0 = syz_open_pts() ioctl$TIOCSTAT(r0, 0x20007465, 0x0) ioctl$TIOCSETD(r0, 0x8004741b, &(0x7f00000008c0)=0x9) 3.450946966s ago: executing program 6 (id=141): ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000500)={0x2, &(0x7f00000000c0)=[{0x0, 0x0, 0x2, 0xfffffffd}, {0x2, 0x0, 0x0, 0xffffffff}]}) (async) sysctl$kern(&(0x7f00000000c0)={0x1, 0x2c}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0x37) (async) mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4) (async) minherit(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3) 3.45017123s ago: executing program 6 (id=142): r0 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x8, 0x0) (async) r1 = getppid() fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x1, 0x2, 0x7, 0xfa, r1}) (async) getpgrp() (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) ioctl$TIOCCDTR(r0, 0x20007478) (async) ioctl$TIOCSWINSZ(r0, 0x80087467, &(0x7f00000000c0)={0xf001, 0x4, 0x89, 0x3}) (async) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$WSDISPLAYIO_DELSCREEN(r3, 0x80085754, &(0x7f0000000140)={0xe6, 0x3}) (async) writev(r3, &(0x7f0000000400)=[{&(0x7f0000000180)="a6f21113e7b3c61e7c1da816a9c1868593130b6c79c6d354d517e7622751e044c987f642c5ffe2235aeec73622fa4710dc1d4248d9aa8e9eec182960efd19f2055996dc52c62739f61bcb3b870c04e93855088020f4c65355c7ef3bef19ab3c720b52c39b0040dd4ad18a4fe500591ee4de0a570d575097bb09fedf4380a8910a5a77be020e5d6b77137ff5a0446e23b7322e7da3adcc6c18ee168566e6aed199f9600ea4713aac9e99bfede1a302d489772d7f91f32bc7fb30521d0b2c73f9ca8a53975", 0xc4}, {&(0x7f0000000280)="30adf47377f05120fcd5ffff8b60f5506cc6fd1653fd6ba4352d2837afa0bedb991f678bfd0a0941cc7d34c98c331099a8e8adb78b118ac12d9d84952090f5c3c03950549a9eaa36e9040a428548c06316be3254aaf5c4d302840db0bc376bfe5938f6d9b908a8a229b3d6daeb7afda4094983c0a72c241abd31b547c1cd672376e3b5f08a9d7dd5ae27dfa23616a3d74fe16f4217fffe3a085824146f2d182ae567704d64fff7373c804287dd839e421c6cbf73e958e036e919e38be2f74a711738f27ca79088f5f9bdce65d0b76266cc85fb8517a157608ed23733c5", 0xdd}, {&(0x7f0000000380)="ff88284adc882c6fe57f5a63b3a3160ec875fc00ee39074b167eae60e932a10d6bde1e1cb2ec9cb097760024a2d8d44b7e1e37e61d02519350e8d47b5097f29c6b72a530acf1c4396571d099cf2adefcf64b9566dd63f2c29edafdca1c17daca346194ff885b464696960642cc750b3f", 0x70}], 0x3) (async) ioctl$TIOCSCTTY(r4, 0x20007461) (async) r6 = syz_open_pts() ioctl$TIOCSTAT(r6, 0x20007465, &(0x7f0000000440)) r7 = geteuid() getsockopt$SO_PEERCRED(r2, 0xffff, 0x1022, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0xc) (async) r9 = getppid() (async) r10 = getuid() (async) r11 = getegid() sendmsg$unix(r2, &(0x7f0000000bc0)={&(0x7f0000000480)=@abs={0x0, 0x0, 0x1}, 0x8, &(0x7f0000000a80)=[{&(0x7f00000004c0)="15b4c6f2fb0995f2f963f77c45ac88030135e0b562b8a87bdfa76126d368aeb8ea427ca039f389eadcc2546c8a86ecd88583ce1c63908d36006dfffd4ed275b5df3b", 0x42}, {&(0x7f0000000540)="844cdc65c29c0b33f696e4a0f013065b2c658d86e85d3061526b782fa84a932b9392332a02c78838b3f6d8f0eae6df5b3a4312c282cc7d7ce73c773cf3909bac9314b8b1eabbe11afb51f3cbf599f6231f365f3b1dbd0bcb1354bc75ad563ef2e04487ae8cbcb51e91eb64e58d0772cfafb62d5db32a", 0x76}, {&(0x7f00000005c0)="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", 0xfb}, {&(0x7f00000006c0)="3a353342c474603fa6950c039d5c3c5397b784cb87c35e3360255ef8f19d1ee29339ae8859a7b909719b288b5d3f389c5635524e003259ef5f7254d786d15a25666c0b652ea7516708f96e4682f67ffa4da81279a634587688fc0f3250dc2c5fab7c715ad723bc30c5d89f1770c103e1a5bc2d05595bc5d8a716f854decb7b72d5c3a573177c7d937ad3f9dcd86dd74e3ec25e2d29727c3e8f612a10a4116db653e14af0d21ffbeae13355f8ae78ec51cc54de24f0de1384", 0xb8}, {&(0x7f0000000780)="d97411239f7bcfa4da2ccb7e081ebf4b86f75fe66ebeb7273878e115a69b810168c93ca5380f4096c66eaf3cea576f657d7597d98a71ebe7f4213dba6ba9e8939d682e83b803f3ecd384fd0295b836f5c2a9b603496b310e242dab53bc79eaa7cf856adab93bd32fc0bf175f0ac774dd0fe2ad7f38dde42d797ef29edd29a7fa63a91b4b03afabf2c7fc56714bd0a3f90263438678b752d1", 0x98}, {&(0x7f0000000840)="1a2117be26ccfaad435bf6ecc0f1577f30c9326adfe5db366f77d42c89029532346e26af277271eefc8746570cc8e848969554a952", 0x35}, {&(0x7f0000000880)="4bca7be95efcdcaa0a266bceb883e92d89d270f32f2d14cf62a923e2b410f06e560cc3bbf5cfd2051ab6721edae19afa1d1f228b67a353c2435d06c994d77955c39e0e832992ae735261c75a0a997978e6a8a33a67d3c080bde1c5647a36c16e327c40ea5eefcf5c87da4c56b9e6ec81b7a56693a6e65243060888a3b5449a3341a4a4f3dd3ab0542738f7626c003c8eedcf981f25211e70b64787e146e3786fa7a69a2107dd3833ea8193df27d8dd3929d43c3216572e8d6f20e34027cbb6ffcbd3775387a437667b150e", 0xcb}, {&(0x7f0000000980)="7d74fbc1aeeb9595655375c1b624c2c4293601da137ab847b5b6b390ef9062d183f91902b082b5e3a94f3ba5094f3a84b2a98a53bc98a60dfa4138f608a880d91cebf1b237874f8ca42e12121fd9143b796927d67a836cd5616d46eba5331504ed1dce01883416cdf28e35e08e11364ba39edcc2dc4f90c1ff189bea74ff1e72a3f5c89862b3f6400f2b06cd34c037e20650c7246a026791463dbf4c43f0741f472f24865e8bdb310eca47690ea14f675ed8d384f945b797c565c786fe217c2a56bed3bd7448cd09062f5d46f742e9646023fcac87c0579e02331651c889490f201ea8b6e630e875", 0xe8}], 0x8, &(0x7f0000000b40)=[@cred={0x20, 0xffff, 0x0, r1, r7, r8}, @cred={0x20, 0xffff, 0x0, r9, r10, r11}, @rights={0x28, 0xffff, 0x1, [r4, r3, r3, r6, r2]}], 0x68, 0x1}, 0xd) (async) close(r0) (async) ioctl$TIOCSTAT(r0, 0x20007465, &(0x7f0000000c00)) (async) ioctl$TIOCMGET(0xffffffffffffff9c, 0x4004746a, &(0x7f0000000c40)) (async) ioctl$TIOCSWINSZ(r3, 0x80087467, &(0x7f0000000c80)={0xe4, 0x9, 0xf, 0x7}) (async) ioctl$TIOCDRAIN(r6, 0x2000745e) sync() (async) ioctl$TIOCSETAF(r6, 0x802c7416, &(0x7f0000000cc0)={0x2, 0xff, 0x4, 0x7fffffff, "81b987e883e9627cf8f50f61e80b5a08c3ce5092", 0xc, 0x7}) (async) ioctl$WSKBDIO_GETDEFAULTKEYREPEAT(r3, 0x400c570a, &(0x7f0000000d00)) (async) ioctl$TIOCSBRK(r2, 0x2000747b) faccessat(r4, &(0x7f0000000d40)='./file0\x00', 0x0, 0x2) (async) ioctl$BIOCGSTATS(r5, 0x4008426f, &(0x7f0000000d80)) 3.254642287s ago: executing program 4 (id=147): r0 = dup2(0xffffffffffffff9c, 0xffffffffffffff9c) ioctl$WSKBDIO_SETENCODING(r0, 0x80045710, &(0x7f00000000c0)=0xfffffffb) (async) ioctl$VMM_IOC_INTR(r0, 0x800c5606, &(0x7f0000000040)={0x6, 0x8001, 0xa}) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) r1 = syz_open_pts() readv(r1, &(0x7f00000012c0)=[{&(0x7f0000000300)=""/14, 0xe}], 0x1) ioctl$TIOCSETAF(r1, 0x802c7416, &(0x7f0000000640)={0x0, 0x58, 0x8, 0x81, "1a34f3bf050000f2ffffff45000100000500", 0x801, 0x4}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xb5219f1000b913f1, 0x80) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff}) (async) select(0x40, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x20000000000000, 0x7, 0x4}, &(0x7f0000000140)={0x1000000000007f, 0x9, 0x80000000000, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0) r4 = fcntl$dupfd(r2, 0xa, r3) write(r4, &(0x7f0000000100), 0xfffffe5d) (async) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{}, {0x0, 0x0, 0x40}, {0xa, 0x0, 0x0, 0x85}]}) (async) sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0x37) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) (async) syz_open_pts() (async) setitimer(0x0, &(0x7f0000000000)={{0x8, 0x1}, {0x9, 0xb}}, 0x0) (async) sysctl$vm_swapencrypt(&(0x7f0000000000)={0x2, 0x5, 0x3}, 0x3, 0x0, 0x0, 0x0, 0x0) (async) sysctl$kern(&(0x7f0000000000)={0x1, 0x42}, 0x6, 0x0, 0x0, 0x0, 0x0) (async) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4020) 3.159956318s ago: executing program 1 (id=148): setrlimit(0x8, &(0x7f0000000980)={0x7, 0x54}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="28000000ffff000001"], 0x28}, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x10, 0x1, 0x0) sysctl$kern(&(0x7f00000000c0)={0x1, 0x11}, 0x2, 0x0, 0x0, 0x0, 0x0) 2.941410588s ago: executing program 1 (id=149): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket$inet(0x2, 0x1, 0x0) kevent(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x2}) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r1, 0x0, 0x9, &(0x7f0000000240)="ea00000100000000", 0xc) setsockopt$inet_opts(r1, 0x0, 0x200000000000b, 0x0, 0x0) open$dir(&(0x7f0000000740)='./file0\x00', 0x302, 0x101) rmdir(&(0x7f0000000fc0)='./file0\x00') mkdir(&(0x7f0000000040)='./file2\x00', 0xc1) open(&(0x7f0000000080)='./file2/file0\x00', 0xae38ac560ef87f54, 0x3e) rmdir(&(0x7f0000000000)='./file2\x00') setsockopt(r0, 0x0, 0x5, &(0x7f0000000040)="5b294301", 0x4) sendto$inet(r0, &(0x7f0000000080)="6a5b953a387738ef165faf790d458a69da4f672fad2de0a213c0fc6f2da27eef40e611e2e52274384c71fc8507afbd2382292b4c8238904d314269dd13728fc8758d70f00ec0bfd418455ccebf3219eff21f8de568a4510be1fd0227623305a51d83d2aad64a334e829480df5b8ae27c51f2f6504086f82090da7306a233ff3e51827eeeb08c2d9e26d62161baf69c355ba53c2928fdc1a79376f36ebdd8d8514de429c39e34dd6f76add8334388363ab9ac68c90bc7680e625fc5e856f0f38e1ca1b545c06dd73e421dc7609114da9c23fcde803423ca090723f4c82ed6", 0xde, 0x3, &(0x7f0000000000)={0x2, 0x2}, 0xc) 2.93938217s ago: executing program 4 (id=150): r0 = socket$unix(0x1, 0x5, 0x0) connect$unix(r0, &(0x7f0000000540)=@file={0x1, './file0\x00'}, 0xa) select(0x40, &(0x7f0000000000)={0xfffffffffffffffd, 0x1, 0xffffffffffffffff, 0x1, 0x0, 0x6, 0x0, 0xfffffffffffffffa}, 0x0, 0x0, 0x0) (async) select(0x40, &(0x7f0000000000)={0xfffffffffffffffd, 0x1, 0xffffffffffffffff, 0x1, 0x0, 0x6, 0x0, 0xfffffffffffffffa}, 0x0, 0x0, 0x0) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket(0x2, 0x2, 0x0) connect$unix(r1, &(0x7f0000000000), 0x10) (async) connect$unix(r1, &(0x7f0000000000), 0x10) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000000400)={&(0x7f0000000300)={&(0x7f0000000040)=@in6, 0xc, &(0x7f0000000380)=[{&(0x7f0000000080)=""/115, 0x73}, {&(0x7f0000000100)=""/109, 0x6d}, {&(0x7f0000000180)=""/80, 0x50}, {&(0x7f0000000200)=""/103, 0x67}, {&(0x7f0000000280)=""/120, 0x78}], 0x5, &(0x7f0000000480)=""/114, 0x72}, 0xf}, 0x10, 0x1000, &(0x7f0000000500)={0x40000000, 0x6}) (async) recvmmsg(r1, &(0x7f0000000400)={&(0x7f0000000300)={&(0x7f0000000040)=@in6, 0xc, &(0x7f0000000380)=[{&(0x7f0000000080)=""/115, 0x73}, {&(0x7f0000000100)=""/109, 0x6d}, {&(0x7f0000000180)=""/80, 0x50}, {&(0x7f0000000200)=""/103, 0x67}, {&(0x7f0000000280)=""/120, 0x78}], 0x5, &(0x7f0000000480)=""/114, 0x72}, 0xf}, 0x10, 0x1000, &(0x7f0000000500)={0x40000000, 0x6}) sendmsg(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[{0x10, 0xffff}], 0x10}, 0x2) 2.939056411s ago: executing program 1 (id=151): r0 = socket$inet(0x2, 0x4001, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1021, &(0x7f0000000100), 0x2) bind(r0, &(0x7f0000000000)=@in={0x2, 0x0}, 0xc) socket$inet(0x2, 0x4001, 0x0) (async) setsockopt$sock_int(r0, 0xffff, 0x1021, &(0x7f0000000100), 0x2) (async) bind(r0, &(0x7f0000000000)=@in={0x2, 0x0}, 0xc) (async) 2.937044491s ago: executing program 1 (id=152): syz_emit_ethernet(0x3e, &(0x7f0000000200)={@local, @random="24967d1091eb", [], {@ipv4={0x800, {{0xa, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @multicast2, {[@rr={0x7, 0x13, 0xe, [@local={0xac, 0x14, 0x0}, @empty, @remote={0xac, 0x14, 0x0}, @multicast1]}]}}, @udp={{0x0, 0x3, 0x8}}}}}}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000002a40)={0x0, 0xffffffffffffff89, 0x0, 0x6e}, 0x0) 2.927561186s ago: executing program 4 (id=153): ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0x200000000, [{&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil}, {&(0x7f0000695000/0x2000)=nil, &(0x7f0000417000/0x3000)=nil, 0xffffffff00000000}, {&(0x7f000063a000/0x4000)=nil, &(0x7f000013c000/0x4000)=nil, 0xfffffffffffffffd}, {&(0x7f0000076000/0x3000)=nil, &(0x7f0000ff7000/0x3000)=nil, 0x3}, {&(0x7f000048b000/0x1000)=nil, &(0x7f0000188000/0x2000)=nil, 0xfffffffffffffffc}, {&(0x7f00000ea000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x7}, {&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x400}, {&(0x7f0000518000/0x3000)=nil, &(0x7f0000159000/0x4000)=nil}, {&(0x7f00003ee000/0x2000)=nil, &(0x7f0000041000/0x4000)=nil, 0x8000000000000001}, {&(0x7f00005cf000/0x1000)=nil, &(0x7f000078e000/0x1000)=nil}, {&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0xf}, {&(0x7f000070e000/0x3000)=nil, &(0x7f0000729000/0x1000)=nil, 0x9}, {&(0x7f0000691000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil}, {&(0x7f0000ff2000/0x2000)=nil, &(0x7f000015a000/0x1000)=nil}, {&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x8}, {&(0x7f0000696000/0x1000)=nil, &(0x7f0000001000/0x800000)=nil, 0x8}], './file0\x00', 0xfffffffb}) open$dir(&(0x7f0000000080)='.\x00', 0x8, 0x8) select(0x40, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0, 0x20000000000000, 0x7, 0x6}, 0x0, 0x0, 0x0) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x62}) r0 = syz_open_pts() close(r0) r1 = syz_open_pts() ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f00000000c0)={0xf7ffffff, 0xeb, 0xfffffffe, 0xd2f, "8717f905792e0500000000000091480d01000002", 0x0, 0x2}) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000280)="73592028bc4279a36908d90000008d", 0xf}], 0x1) r2 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r2, &(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rmdir(&(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r3 = semget(0x0, 0x1, 0x2f3) semop(r3, &(0x7f0000000080), 0x26) connect$unix(0xffffffffffffffff, 0x0, 0x0) semctl$SETALL(r3, 0x0, 0x9, &(0x7f0000000840)=[0x6]) 2.659517657s ago: executing program 4 (id=154): writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)="76e5eac907f9ccf7a251ceddcec7d6aa45cffe2c63a56077123a276d3ba4e9d17eb3eb5db12a3783a8e0620d357de1fe04fa9465b5bd1286e9624dec06a00c222f", 0x41}], 0x1) rename(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x2000000000000243, &(0x7f0000000100)}) r0 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r0, 0xc0106924, &(0x7f00000001c0)) syz_emit_ethernet(0x400e, &(0x7f0000000340)={@random="fb00", @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "826e03", 0x20, 0x0, 0x0, @rand_addr="00000000000000000e14fc11133f6400", @local={0xfe, 0x80, '\x00', 0x0}, {[@dstopts={0x0, 0x1, '\x00', [@ra, @ra]}], @icmpv6=@ndisc_ra}}}}}) r1 = kqueue() r2 = syz_open_pts() ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f0000000340)={0x0, 0x0, 0xfffffffe, 0x8000, "ff14e700", 0x3, 0x40000}) write(r2, &(0x7f0000000080)="8fb769", 0x3) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000380)="079facfaaed69aea4dc561c3b736feac0a2a76087be8b904ddc6f90b66e0f69b6dfba683b348224cf0ccc2a39b0f79389a2bd9b211424a22ca014b9231e253e257706c75b3f320166475c72455021edf575fab8b5d65b8d261c87c3ccc4e784ea7462f3723edabb8e26d27acb1797e2ef4db27270a", 0xffffff01}], 0x1) r3 = syz_open_pts() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) writev(r4, &(0x7f0000000640)=[{&(0x7f0000000140)="2d5dd10c1da2be890f855875c21996e2dc189591ab4e9bff0795e4fc0aa691c9520d2fc78230a86a29979dec37e0d1dbc823480023a8e520d2a07da635c6ddc469dcf19516aa", 0x46}, {&(0x7f00000026c0)="b6a0bbe1458e6ddb72275f4d53dbc768533990686977bf8c829c7dd499285bbb97d60fd2d7a8cc58965f2e5ecd986362a962fe4a68c5e5017241e8bc7c8f1b8c365079244668be445c1bd0f71f9ca9a0772b7e562df47f018886912b92f4e96ac940381f73cea775cf81ea3ab7430f515b67b2b9c8b5fb14a36e48020ae88f1f9f97ede7df9114448d7b8ae65b99629ae6f1d6d8db9a15f47c294bc100eebfad020d352508f0b675d0ebfaad966b4f2e3283f5f5583297afc2b7b172783674c279af400355a54e729e06249063c20de792a911ceea0b5b805bd56c16e29fbedb141c0a448688680bec416ab87e36412b4e1b1cd90e74a8b4ba5cb85f0fb34ec89b1e98013dd052d6f0bfd43b2cacce863c1da06ba8bc6f165fedfe0cc640e4d3482acfea230132f50a5429", 0x12b}], 0x2) r5 = openat$pci(0xffffffffffffff9c, &(0x7f0000000300), 0x20, 0x0) r6 = getegid() r7 = getuid() seteuid(r7) sendmsg$unix(r0, &(0x7f00000004c0)={&(0x7f0000000140)=@abs={0x1, 0x0, 0x3}, 0x8, &(0x7f0000000180)=[{&(0x7f0000000200)="e9db8d6b8db7859814239d4942af1dcc665ac6c052f53bbab5199dda872e04fa735543abcdc51973fda6ec29f9378453900279dbb3ae38130ad3cf843c74b71145d66c14d6c10f8ebe438933865045d5361bb688899e3ba42ac40e61273d1cb8896a1416f8945a2f3aa9fa6522942ddbad6069bac1b56ccd454d432f9116ce8d3c46b4314329bbaebd6ed01e22986941", 0x90}], 0x1, &(0x7f0000000400)=[@rights={0x18, 0xffff, 0x1, [r4, r5]}, @cred={0x20, 0xffff, 0x0, 0x0, 0x0, r6}, @cred={0x20, 0xffff, 0x0, 0x0, r7, 0xffffffffffffffff}, @rights={0x18, 0xffff, 0x1, [r0, r2]}, @rights={0x28, 0xffff, 0x1, [r1, r3, r1, r2, r0]}], 0x98, 0x408}, 0x0) ioctl$TIOCFLUSH(r2, 0x80047410, &(0x7f0000000000)=0x7) kevent(r1, &(0x7f00000000c0), 0x101, &(0x7f0000000180), 0x6, 0x0) r8 = socket(0x2, 0x2, 0x0) ioctl$FIONREAD(r8, 0x802069ad, &(0x7f00000001c0)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='.\x00') utimensat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) 2.658060938s ago: executing program 8 (id=51): r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x2a216df866a95d83, 0x11) syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "6aa63f", 0x0, 0x2b, 0x0, @remote={0xfe, 0x80, '\x00', 0x0}, @loopback={0x4}}}}}) r1 = socket(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0xffff, 0x1023, &(0x7f0000000040)=0x7, 0x31) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x2) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x550f) ftruncate(r2, 0x8531) truncate(&(0x7f0000000000)='./file0\x00', 0x3) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) close(r0) 1.491514667s ago: executing program 1 (id=155): r0 = openat$tty(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) open(&(0x7f0000000080)='./bus/\x00', 0x200, 0x0) ioctl$TIOCCONS(r0, 0x80047462, &(0x7f0000000040)=0x81) 1.490511175s ago: executing program 2 (id=156): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xa7210e10bc3c9def) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) (async) r1 = open(&(0x7f0000000100)='.\x00', 0x200, 0x118) r2 = socket(0x2, 0x4001, 0x0) r3 = dup(r2) r4 = fcntl$dupfd(r3, 0x2, 0xffffffffffffffff) close(r4) (async) select(0x40, &(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x0, 0x0) (async) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) r5 = socket(0x2, 0x2, 0x0) bind(r5, &(0x7f0000000000), 0x10) (async) connect$unix(r5, &(0x7f0000000000), 0x10) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) (async) setsockopt$sock_int(r4, 0xffff, 0x1023, &(0x7f0000000080), 0x4) (async) recvmmsg(r4, &(0x7f0000001680)={0x0, 0x4}, 0x10, 0x70226782d340c8f6, 0x0) (async) mkdirat(r1, &(0x7f0000000540)='./file0\x00', 0x184) (async) renameat(r1, &(0x7f00000025c0)='./file0\x00', r1, &(0x7f0000002600)='./file1\x00') fchdir(r0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r6, 0x0, 0xd, &(0x7f0000000240)="ea00000a00400000", 0x8) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x433, 0x0) 1.472586129s ago: executing program 3 (id=157): select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x801, 0x100000001}) 1.472020896s ago: executing program 4 (id=158): poll(0xffffffffffffffff, 0x0, 0x2) syz_emit_ethernet(0x46, &(0x7f00000001c0)=ANY=[@ANYBLOB="000000000000aaaaaaaaaabb88a83b0081004f00080600188102060c0009aaaaaaaaaaaa726f04f1c3c8c27d01edda13000000000000d8cb5096cfc21598b66c55a6b0601a36f9ce3bb442f517a7d4820efd0906d4e5f5e7"]) setrlimit(0x1, &(0x7f0000000980)={0x7, 0x54}) syz_emit_ethernet(0x8d9, &(0x7f0000000a00)=ANY=[@ANYBLOB="00000000000000000000000086dd6b14e93d08a3020a00000000000000000000000000000001fe8000000000000000000000000000bb4ea792e1405e234e204304c6c6fbbb9f573795ca73f98fad2092d60a9fe29340d7d5b067350ddb5be64e51dc0bb0342f7c136eec6d5c95eee1c9f303a872d2e0762d51808a50326b64bf77201d24e349f2db1e5072333de2b29be05328ff9b1967083a28a1b920e6bb004f18c9fe", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="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"]) setrlimit(0x8, &(0x7f0000000980)={0x8, 0x54}) r0 = syz_open_pts() close(r0) syz_open_pts() ioctl$TIOCSETAF(r0, 0x802c7416, &(0x7f0000000180)={0x40978b, 0x10001, 0xfffffc03, 0x80a1a0, "bb08000100f167d910508bc49d7323000000007e"}) writev(r0, &(0x7f0000000700)=[{&(0x7f0000000080)="34eb4cd59e8456ebc0881681c60e1cd9e0bf01b618b3cb934394c5951c1db0fd943a", 0xff99}], 0x1) r1 = syz_open_pts() close(r1) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) fcntl$lock(r3, 0x9, &(0x7f0000000000)={0x2, 0x1, 0xfffffffffffffffd, 0x300000003}) fcntl$lock(r2, 0x9, &(0x7f0000000040)={0x3, 0x0, 0x6, 0x100000002}) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x20, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) fcntl$lock(r4, 0x9, &(0x7f0000000000)={0x2, 0x0, 0x9, 0x2ffffffff, 0xffffffffffffffff}) r5 = syz_open_pts() ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000040)={0x4, 0x5, 0x1, 0xfffffffd, "fb000010000afffffffff700", 0x7f, 0x40000}) r6 = open(&(0x7f0000000000)='./file0\x00', 0x9cab835cfdc52675, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0xa011, r6, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x32, 0x1b}, 0x80000000000002, 0x3d3, 0xffffffffffffffff, 0x0, 0x8000000000000000, 0x9, 0x0, 0x1001}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) chdir(&(0x7f00000009c0)='./file0\x00') ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000080)={0x7c, 0x7fe0000, 0x6, 0xd8e, "1d05cf3302726c94b342bad46950f50463359380", 0x8001, 0x7}) setuid(0x0) write(r5, &(0x7f0000000140)="3a5379e976966f513a3fe8bacff6490096fd7e817e9c2d556f9604b6820743e97386058b3e306767701df7d490b2930f85b5481c17afe680f46804afb11aec223a15e1df0b3fd949aecf234a636793100f9b25699173b84754b3e0b701574d", 0x5f) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000300)="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", 0x235}], 0x1) 1.471405745s ago: executing program 7 (id=159): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0xe8, 0x0) r2 = fcntl$dupfd(r1, 0x3, 0xffffffffffffffff) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r3 = socket$inet(0x2, 0x1, 0x0) getsockopt$sock_timeval(r3, 0xffff, 0x1006, 0x0, 0x0) write(r1, &(0x7f0000000000)="ecaca7be9c99", 0x6) syz_open_pts() ioctl$FIONREAD(r2, 0x800474c4, &(0x7f00000001c0)) syz_extract_tcp_res$synack(&(0x7f0000000080)={0x41424344}, 0x1, 0x0) syz_extract_tcp_res$synack(&(0x7f00000000c0)={0x41424344}, 0x1, 0x0) syz_emit_ethernet(0xa5, &(0x7f0000000300)={@random, @local, [], {@ipv6={0x86dd, {0xc, 0x6, "4e3bd9", 0x6f, 0x2c, 0x9, @empty, @ipv4={'\x00', '\xff\xff', @local={0xac, 0x14, 0x0}}, {[@fragment={0x11, 0x0, 0xa, 0x0, 0x0, 0x15, 0x66}, @fragment={0x1d, 0x0, 0x2, 0x0, 0x0, 0x7, 0x66}], @tcp={{0x2, 0x1, r4, r5, 0x0, 0x0, 0x7, 0x8, 0x6, 0x0, 0x10, {[@window={0x3, 0x3, 0x4}, @mss={0x2, 0x22, 0x8}]}}, {"6963e66bf7ab38217d42f32d9fbd585b5bee84b2c4ae2bf2856fb1a570aac00a67dd2f5662a67c28dc54228b4ce6ee121c48d007fa032ddcb3477e046f2bc80f4efa6a"}}}}}}}) bind$unix(r0, &(0x7f0000000200)=@file={0xd19450564dee018c, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}, 0xff) 1.471009839s ago: executing program 3 (id=160): ioctl$BIOCSBLEN(0xffffffffffffffff, 0xc0044266, &(0x7f0000000140)=0x2664a4b) setitimer(0x1, &(0x7f0000000000), &(0x7f0000000080)) r0 = kqueue() fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x0, 0xfffffffffffffffd, 0x1}) semctl$SETALL(0x0, 0x0, 0x9, &(0x7f0000000040)=[0x7ff]) fcntl$lock(0xffffffffffffffff, 0x9, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x300000003}) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffff9c, 0x81205724, &(0x7f0000000200)={0x10100, 0x7, 0xe6, 0xf6, 0x9, 0x5, 0x200, 0x10, [{0x4, 0x5, 0x7fff}, {0x7f, 0xcab2, 0x1153, 0xe}, {0x4, 0x2, 0x1ff, 0x81}, {0xfffffffe, 0x80, 0x401, 0x400}, {0x9186, 0x1f34a9e3, 0x4a, 0x8}, {0xb8ed, 0x5, 0x8, 0x9}, {0x5, 0x6, 0xada, 0x1}, {0x7, 0xcdf1, 0x9, 0x2}, {0xcc59b44, 0x5, 0x1000, 0x9ca}, {0x7, 0x2, 0x5, 0xf0000000}, {0x7, 0x9, 0x8, 0xffff}, {0x1, 0x2, 0x10000, 0x8001}, {0x4, 0x7, 0x9, 0xaf}, {0x9, 0x5, 0x0, 0x8}, {0x3a29, 0xffffffff, 0x2, 0x7}, {0x401, 0x5, 0xd, 0x20}]}) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff"]) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{}, {0x0, 0x0, 0x40, 0x2}, {0xa, 0x0, 0x0, 0x2}]}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0x37) sysctl$net_inet_tcp(&(0x7f0000000080)={0x4, 0x2, 0x6, 0x13}, 0x4, &(0x7f0000000040), 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket(0x18, 0x1, 0x0) setsockopt(r1, 0x1000000029, 0xc, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) setsockopt(r1, 0x1000000029, 0xc, &(0x7f0000000040)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) writev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000000)="7f577ae67f", 0x5}], 0x1) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r2 = socket(0x2, 0x1, 0x0) bind(r2, &(0x7f0000000000), 0x10) r3 = dup(r2) listen(r3, 0x0) r4 = socket(0x2, 0x1, 0x0) connect$unix(r4, &(0x7f0000000000), 0x10) sendto$inet(r4, &(0x7f0000000240)="9f", 0x1, 0x195a05e282d6161, 0x0, 0x0) r5 = accept$unix(r2, 0x0, 0x0) recvfrom$unix(r5, 0x0, 0x0, 0xf5538bca495f07c9, 0x0, 0x0) setsockopt(r1, 0x1000000029, 0xd, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) kevent(r0, &(0x7f00000001c0)=[{{r0}, 0xfffffffffffffffc, 0x33, 0x1, 0x81, 0x8}], 0x6, 0x0, 0x547c, 0x0) 1.466786519s ago: executing program 7 (id=161): mkdir(&(0x7f0000000040)='./file2\x00', 0xc1) (async) mkdir(&(0x7f0000000040)='./file2\x00', 0xc1) sysctl$net_inet_tcp(&(0x7f00000014c0)={0x4, 0x2, 0x6, 0x9}, 0x4, 0x0, 0x0, 0x0, 0x0) pipe2(0x0, 0x0) sysctl$kern(&(0x7f00000000c0)={0x1, 0x21}, 0x2, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x2, 0x1, 0x0) shutdown(r0, 0x2) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) msgctl$IPC_STAT(0x0, 0x2, &(0x7f0000000080)=""/43) dup(0xffffffffffffffff) ioctl$KDMKTONE(0xffffffffffffffff, 0x20004b08, &(0x7f0000000000)=0x2) setitimer(0x2, &(0x7f0000000140)={{}, {0x0, 0x7fff}}, &(0x7f0000000200)) r1 = openat$tty(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0) close(r1) open$dir(&(0x7f0000000100)='.\x00', 0x0, 0x0) (async) r2 = open$dir(&(0x7f0000000100)='.\x00', 0x0, 0x0) open$dir(&(0x7f0000000b80)='./file0\x00', 0x200, 0x0) (async) open$dir(&(0x7f0000000b80)='./file0\x00', 0x200, 0x0) sysctl$net_inet_ip(&(0x7f0000000080)={0x4, 0x2, 0x0, 0x25}, 0x4, &(0x7f0000000140), 0x0, 0x0, 0x0) symlinkat(&(0x7f0000000480)='./file0\x00', r2, 0x0) socket(0x1, 0x2, 0x0) (async) socket(0x1, 0x2, 0x0) unveil(&(0x7f0000000280)='./file0\x00', &(0x7f0000000340)='c\x00') (async) unveil(&(0x7f0000000280)='./file0\x00', &(0x7f0000000340)='c\x00') open(&(0x7f0000000080)='./file2/file0\x00', 0x200, 0x1) (async) open(&(0x7f0000000080)='./file2/file0\x00', 0x200, 0x1) 1.199789803s ago: executing program 7 (id=162): r0 = socket(0x18, 0x1, 0x0) syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000000)="6dc100167f", 0xffffffef}], 0x1) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) sysctl$fs(0x0, 0x0, &(0x7f0000000080)="841fa398bd9bf8be51c118b636b86a482f0358dfccf172187e54c09bc866d280a6de71aeaabc8d8a56c6e690dddc705f4f3b3ad70504329e3d1e0dec2ca9d51b6fcee0e811a158c8d9da00fb69e39e7b13", 0x0, 0x0, 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x1ffa, 0x0) open(&(0x7f0000000600)='./file0\x00', 0x0, 0x0) r1 = open$dir(&(0x7f00000001c0)='./file0\x00', 0x1, 0x138) ioctl$FIONREAD(r1, 0xc028698d, &(0x7f00000000c0)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r2 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) close(r2) r3 = socket(0x2, 0x1, 0x0) connect$unix(r3, &(0x7f0000000000), 0x10) setsockopt$sock_int(r2, 0xffff, 0x1023, &(0x7f0000000080), 0x4) r4 = socket(0x18, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x2, 0xffffffffffffffff) close(r5) sysctl$hw(&(0x7f0000000000)={0x6, 0x8}, 0x2, &(0x7f0000000040)="820629fe00bf3b66e3f0b7e1b79ce5cedc5414985725e7467afe8aa7fcdead47b846bd49929d12984a1269d7d04a5737b713689f878bcb29897b09a43ce8ec111e6dbe087c2790121a34da29c801018a47bc1cd225b385940138cd219b1fb26ac135e872a8b46ba740c368077f872f0c1e156348a2936a9e3c2fe701727e2702557f2b6067e5f06cbc6e09e8a0618a49e5af4142da9bc0c24aba71ffe1801b66115f10cc894a9b661cd4e0d749abbc", 0x0, 0x0, 0x0) 67.952676ms ago: executing program 1 (id=163): sysctl$vm_swapencrypt(0x0, 0x0, &(0x7f0000000040)="b914f05a97cfe2811b523fac037f2653fca73bb9381276b8fca6d019213242a8df1debd8fdbdaf5772babc482c371a2f079f32887e59c1599a34c0d4aba0b52782492a", 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x15, &(0x7f0000000240), 0x0) r1 = socket(0x11, 0x3, 0x0) setsockopt(r1, 0x11, 0x2, &(0x7f0000000000), 0x0) syz_emit_ethernet(0x92, &(0x7f0000000000)=ANY=[@ANYBLOB="8f787321e3cfb000080000000008004f00008400820000030190787f000001000000004404000044400893ffffffff0000040000000080e000000226000002ac1400aa00000003ffffffff00000008ac1400aa0000ee40000000070000003aac1400bb00000003820ea63cd607782659e2506c2ee5440c09907f00000100008001"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) pwrite(0xffffffffffffffff, &(0x7f0000002840)="621890f58220e2f66f0ad455d8ae18aa34d883f90558d93b492625eb0b4bf9661d1bcd1b19fd616bffd1ffffece682f463e535e3f2a3d3810b5cc73b63557a58796d056639410fb45c5d83072cae699c42c0af4960c5f6a6adc92063c95d1422d0a46b610d67e98f40fd80b4994e639adebae3763e20e097cdf197a427c9ed6c0c38e6fb5915c32464d5e04480085bce1402ffee910ce3b21e56786c866e5763eda99f3f64603efa78bca98849e2349313b663f3d8b33c11d8dc9333d57ad1e7d768d1fa8702c1ead182d9294f3fdc20ae5b0354d19ef68425dd6f18b71a1ff8", 0xfffffffffffffd3f, 0x100009) r2 = socket(0x2, 0x4, 0x5) setsockopt$inet_opts(r2, 0x0, 0x1, &(0x7f0000000080)="0315f1d89ec5a317a9357682", 0x2c) syz_emit_ethernet(0x2a, &(0x7f0000000300)={@broadcast, @empty, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @broadcast, @empty, @remote, @multicast1}}}}) listen(r2, 0xb7) sysctl$vm_swapencrypt(&(0x7f0000000100)={0x2, 0x5, 0x2}, 0x3, &(0x7f0000000140)="2493cb6f788a861f4dc936fb3faecee2233ec27da665c95cc4289921422154e272eb15d15186f3d6cc2c9fbb484c4005d0fb7c92c64b2e759962be9eedf0c750ff66fd8f4fedb89ca414e81abd7d0c70f0e06b1f101158882e9669cdbc2643e07d8a0e9bb7ef9dcacca251f0", &(0x7f00000001c0)=0x6c, &(0x7f0000000200)="c7679de053c52f47b114d9a9239fd97c3734e427aafb549ef962bf2d164e58369f54b7657c9e72ec4ab7a179bb741669ec91428eb22e1de1cfd27a4ab7c79d0b338f474f2e010cfb1d4d44ac88b57fe63cad0e11c1ddf89ca836ddef4a292b2928d7180461052e27bdc7a9768d449469f308b715f9a88ee7481f2e9d409ec8353518b408d7f442ee06bd87e5942907b3f05a781c3940d4cefcbbc81b20f5d7ff9ac3568cb848dbc8188fdfd7b182f605b21c2b7bc30f4aaeff8a3a8f0b7ffb251c9aa6ec2e7360cfe753d20d8da035144bfdad3b8e6d9ed6c458328a89415e3b491681c0a7a26c3052757a81443d83264fe1", 0xf2) syz_emit_ethernet(0x46, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "832003", 0x10, 0x3b, 0x0, @rand_addr="000400fffdffffe90000000400", @local={0xfe, 0x80, '\x00', 0x0}, {[@hopopts={0x67, 0x0, '\x00', [@ra={0x5, 0x2, 0xfff}]}]}}}}}) 65.367548ms ago: executing program 2 (id=164): syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00']) writev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000000)="7f577ae67f", 0x5}], 0x1) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) socket(0x2, 0x2, 0x98) dup(0xffffffffffffffff) shutdown(0xffffffffffffffff, 0x2) r0 = socket(0x2, 0x1, 0x0) bind(r0, &(0x7f0000000000), 0x10) r1 = dup(r0) listen(r1, 0x0) r2 = socket(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) connect$unix(r2, &(0x7f0000000000), 0x10) sendto$inet(r2, &(0x7f0000000240)="9f", 0x1, 0x195a05e282d6161, 0x0, 0x0) r3 = accept$unix(r0, 0x0, 0x0) recvfrom$unix(r3, 0x0, 0x0, 0xf5538bca495f078b, 0x0, 0x0) 63.917186ms ago: executing program 3 (id=165): r0 = syz_open_pts() r1 = socket(0x18, 0x2, 0x0) setsockopt(r1, 0x1000000029, 0x33, &(0x7f00000001c0), 0x0) (async) select(0x40, &(0x7f0000000080)={0xa48, 0x7fffffff, 0x2, 0x10001, 0x3, 0x4, 0x8, 0x6}, &(0x7f0000000100)={0x9, 0x412c7164, 0x7e, 0xa, 0x3ff, 0xfffffffffffffffa, 0xffffffff, 0xd}, &(0x7f0000000140)={0x100000001, 0x4, 0x8, 0x1a, 0x0, 0x4, 0x5}, &(0x7f0000000280)={0x2, 0xfffffffffffff4cb}) (async) writev(r0, &(0x7f0000000180)=[{&(0x7f00000000c0)='\b', 0x1}], 0x1) close(r0) getsockopt$sock_int(r1, 0xffff, 0x8, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (async) sysctl$kern(&(0x7f00000000c0)={0x1, 0x4e}, 0x3, &(0x7f00000001c0)="6ff91ecd378a4e588e5f84cf71b59c7af6c37013fc5dda17179a14ee0a20de8db3a97d2b3e090c33208c7538ef29d0c651d294979a3a9ab1e2dcf76dc09959f2677341c041790689e64d4f8dc54b31558eed21bc", &(0x7f0000000240)=0xffb5, 0x0, 0x37) (async, rerun: 64) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) (rerun: 64) execve(0x0, 0x0, 0x0) (async) r2 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x10, 0x0) ioctl$VMM_IOC_CREATE(r2, 0xc2585601, &(0x7f0000000300)={0x10, 0x2, [{&(0x7f000013c000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0xe}, {&(0x7f0000141000/0x4000)=nil, &(0x7f000005b000/0x3000)=nil, 0x10001}, {&(0x7f0000232000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x6}, {&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x7}, {&(0x7f00001fb000/0x1000)=nil, &(0x7f00001e2000/0x3000)=nil, 0x7}, {&(0x7f00002ca000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil}, {&(0x7f0000ff0000/0xd000)=nil, &(0x7f000025b000/0x2000)=nil, 0x5e7}, {&(0x7f00002b3000/0x2000)=nil, &(0x7f00003af000/0x1000)=nil, 0x7}, {&(0x7f0000354000/0x8000)=nil, &(0x7f00001a5000/0x3000)=nil, 0xe7}, {&(0x7f0000006000/0x4000)=nil, &(0x7f00001e5000/0x2000)=nil, 0x7ff}, {&(0x7f00001b6000/0x3000)=nil, &(0x7f0000370000/0x2000)=nil, 0x4}, {&(0x7f00000fa000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0xfffffffffffffe01}, {&(0x7f00003f0000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x7}, {&(0x7f000024a000/0x2000)=nil, &(0x7f0000094000/0x3000)=nil, 0x7}, {&(0x7f0000177000/0x3000)=nil, &(0x7f0000064000/0x2000)=nil, 0x290e}, {&(0x7f00003b1000/0x1000)=nil, &(0x7f0000292000/0x4000)=nil, 0x4}], './file0\x00', 0x9}) 673.119µs ago: executing program 4 (id=166): select(0x40, &(0x7f00000001c0)={0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x5}, &(0x7f00000024c0)={0x1fe, 0x0, 0x0, 0x8000000000, 0x0, 0x4000, 0x4}, 0x0, 0x0) r0 = accept$unix(0xffffffffffffff9c, 0x0, &(0x7f0000000000)) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) accept$unix(r0, &(0x7f0000000200)=@file={0x0, ""/504}, &(0x7f0000000040)=0x1fa) 0s ago: executing program 7 (id=167): r0 = socket(0x2, 0x400000000002, 0x0) setsockopt(r0, 0x0, 0x1e, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0xe8, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) open$dir(&(0x7f00000000c0)='./file0\x00', 0x200, 0x186) r1 = open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) r2 = syz_open_pts() fcntl$lock(r2, 0x8, &(0x7f0000000140)={0x3, 0x0, 0x0, 0x10002fffffffc}) mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x2, 0x0) preadv(r1, &(0x7f0000000340)=[{0x0}], 0x1, 0x7) r3 = socket(0x2, 0x1, 0x0) connect$unix(r3, &(0x7f0000000040)=@abs={0x0, 0x0, 0x0}, 0x8) sysctl$kern(&(0x7f00000000c0)={0x1, 0x4c}, 0x2, 0x0, 0x0, 0x0, 0x0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x9cab835cfdc52675, 0x0) rmdir(&(0x7f0000000080)='./file0\x00') sysctl$net_inet_tcp(&(0x7f0000001100)={0x4, 0x2, 0x6, 0x2}, 0x4, &(0x7f0000001140), 0x0, 0x0, 0x0) ftruncate(r4, 0x79c8) writev(r1, &(0x7f0000000180)=[{&(0x7f00000001c0)="7c88d78e11b27d696098de17bfba175f1df5da9b4f3c38acf1320f4cb279a39ae7fa2198333c98f43606b87b47434f0d086b1b9ab6249430004ec10827ccc05f91cf712d64d6bd7944d286ca1ec51f8efe01149f2acc2e05a3dacd36be1b1f947cb48f27d2c4748254a40608516886b042f1d236a34668", 0x77}, {&(0x7f0000000480)="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", 0x5c2}], 0x2) pwritev(r1, &(0x7f0000000380)=[{&(0x7f0000000440)="e9", 0x1}], 0x1, 0x3fffd) rename(&(0x7f0000000040)='./file1\x00', 0x0) kernel console output (not intermixed with test programs): OpenBSD/amd64 (ci-openbsd-setuid-3.us-central1-b.c.syzkaller.internal) (tty00) Warning: Permanently added '10.128.1.46' (ED25519) to the list of known hosts. login: panic: kernel diagnostic assertion "va >= entry->start" failed: file "/syzkaller/managers/setuid/kernel/sys/uvm/uvm_fault.c", line 1739 Stopped at db_enter+0x25: addq $0x8,%rsp TID PID UID PRFLAGS PFLAGS CPU COMMAND *461677 11447 32767 0x10 0x4000000 1 syz-executor 413491 65707 0 0x2 0 0K syz-executor db_enter() at db_enter+0x25 panic(ffffffff83437867) at panic+0x1e5 __assert(ffffffff833e7433,ffffffff8342bb14,6cb,ffffffff8333e711) at __assert+0x29 uvm_fault_unwire_locked(fffffd806c16e018,400000000000,400000011000) at uvm_fault_unwire_locked+0x4c1 uvm_fault_unwire(fffffd806c16e018,400000000000,400000011000) at uvm_fault_unwire+0x55 kern_sysctl_dirs(4e,ffff80003c5046a8,1,4000000001c0,ffff80003c5046d8,0,c1e77edfdf7b6cc7,1) at kern_sysctl_dirs+0x363 kern_sysctl(ffff80003c5046a4,2,4000000001c0,ffff80003c5046d8,0,37,4b89659329c787a9) at kern_sysctl+0x12d sys_sysctl(ffff8000ffff6a60,ffff80003c504810,ffff80003c504760) at sys_sysctl+0x425 syscall(ffff80003c504810) at syscall+0xbc6 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x5194d7987b0, count: 5 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{1}> ddb{1}> set $lines = 0 ddb{1}> set $maxwidth = 0 ddb{1}> show panic *cpu1: kernel diagnostic assertion "va >= entry->start" failed: file "/syzkaller/managers/setuid/kernel/sys/uvm/uvm_fault.c", line 1739 ddb{1}> trace db_enter() at db_enter+0x25 panic(ffffffff83437867) at panic+0x1e5 __assert(ffffffff833e7433,ffffffff8342bb14,6cb,ffffffff8333e711) at __assert+0x29 uvm_fault_unwire_locked(fffffd806c16e018,400000000000,400000011000) at uvm_fault_unwire_locked+0x4c1 uvm_fault_unwire(fffffd806c16e018,400000000000,400000011000) at uvm_fault_unwire+0x55 kern_sysctl_dirs(4e,ffff80003c5046a8,1,4000000001c0,ffff80003c5046d8,0,c1e77edfdf7b6cc7,1) at kern_sysctl_dirs+0x363 kern_sysctl(ffff80003c5046a4,2,4000000001c0,ffff80003c5046d8,0,37,4b89659329c787a9) at kern_sysctl+0x12d sys_sysctl(ffff8000ffff6a60,ffff80003c504810,ffff80003c504760) at sys_sysctl+0x425 syscall(ffff80003c504810) at syscall+0xbc6 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x5194d7987b0, count: -10 ddb{1}> show registers rdi 0 rsi 0x1 rbp 0xffff80003c504280 rbx 0xffff800029aacdc7 rdx 0 rcx 0xffff8000ffff6a60 rax 0xffff800029aabff0 r8 0x101010101010101 r9 0x8080808080808080 r10 0x277720b44ea40de0 r11 0x347752ec9271ce3 r12 0xffff800029aacbc8 r13 0 r14 0 r15 0x1 rip 0xffffffff81eb5385 db_enter+0x25 cs 0x8 rflags 0x246 rsp 0xffff80003c504270 ss 0 db_enter+0x25: addq $0x8,%rsp ddb{1}> show proc PROC (syz-executor) tid=461677 pid=11447 tcnt=4 stat=onproc flags process=10 proc=4000000 runpri=32, usrpri=52, slppri=36, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff8000ffff7730,0xffff8000ffff6030 process=0xffff80003c4fc6f0 user=0xffff80003c4ff000, vmspace=0xfffffd806c16e018 estcpu=2, cpticks=2, pctcpu=0.0, user=0, sys=2, intr=0 ddb{1}> ps PID TID PPID UID S FLAGS WAIT COMMAND 53269 139956 65707 0 2 0 syz-executor 17571 311582 72076 32767 2 0x10 syz-executor 68225 228394 37515 32767 2 0x10 syz-executor 68225 494469 37515 32767 2 0x4000010 syz-executor 11447 422293 47863 32767 2 0x10 syz-executor 11447 106379 47863 32767 3 0x4000090 ttyout syz-executor *11447 461677 47863 32767 7 0x4000010 syz-executor 11447 119156 47863 32767 3 0x4000010 vmmaplk syz-executor 62270 270842 32132 32767 3 0x90 nanoslp syz-executor 62270 422454 32132 32767 3 0x4000090 netacc syz-executor 62270 457891 32132 32767 3 0x4000090 fsleep syz-executor 23621 412010 95703 32767 2 0x10 syz-executor 65707 413491 77167 0 7 0x2 syz-executor 10436 32789 0 0 3 0x14200 bored sosplice 37515 219692 81102 32767 2 0x490 syz-executor 34536 23807 75991 32767 3 0x90 wait syz-executor 72076 456460 28199 32767 3 0x90 nanoslp syz-executor 95703 185645 85392 32767 2 0x10 syz-executor 63055 144045 52635 32767 3 0x90 wait syz-executor 47863 263598 36906 32767 2 0x490 syz-executor 32132 203764 29137 32767 2 0x490 syz-executor 28199 456849 77167 0 3 0x82 wait syz-executor 52635 193518 77167 0 3 0x82 wait syz-executor 81102 514547 77167 0 3 0x82 wait syz-executor 36906 19238 77167 0 3 0x82 wait syz-executor 29137 18431 77167 0 3 0x82 wait syz-executor 85392 281463 77167 0 3 0x82 wait syz-executor 75991 183706 77167 0 3 0x82 wait syz-executor 77167 463922 78050 0 2 0x2 syz-executor 78050 466945 82971 0 3 0x10008a sigsusp ksh 82971 475482 25398 0 3 0x98 kqread sshd-session 25398 368066 17433 0 3 0x92 kqread sshd-session 5702 146939 1 0 3 0x100083 ttyin getty 17433 224850 1 0 3 0x88 kqread sshd 20585 19960 23745 73 3 0x1100090 kqread syslogd 23745 131029 1 0 3 0x100082 sbwait syslogd 70267 331723 1 0 3 0x100080 kqread resolvd 63182 63032 54716 77 3 0x100092 kqread dhcpleased 20567 214633 54716 77 3 0x100092 kqread dhcpleased 54716 491967 1 0 3 0x80 kqread dhcpleased 82 81526 0 0 3 0x14200 bored smr 53402 301504 0 0 2 0x14200 zerothread 56866 411050 0 0 3 0x14200 aiodoned aiodoned 18483 124458 0 0 3 0x14200 syncer update 67566 12054 0 0 3 0x14200 cleaner cleaner 51441 280952 0 0 3 0x14200 reaper reaper 58198 13013 0 0 3 0x14200 pgdaemon pagedaemon 79820 287943 0 0 3 0x14200 bored viomb 85117 133270 0 0 3 0x40014200 acpi0 acpi0 43906 84715 0 0 3 0x40014200 idle1 57597 490629 0 0 3 0x14200 bored softnet3 6081 327490 0 0 3 0x14200 bored softnet2 25072 350849 0 0 3 0x14200 bored softnet1 5546 193852 0 0 3 0x14200 bored softnet0 85054 439223 0 0 3 0x14200 bored systqmp 1041 485086 0 0 3 0x14200 bored systq 73057 488748 0 0 3 0x14200 tmoslp softclockmp 46493 45275 0 0 2 0x40014200 softclock 12156 376733 0 0 3 0x40014200 idle0 1 49315 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb{1}> show all locks Process 11447 (syz-executor) thread 0xffff8000ffff6a60 (461677) exclusive rwlock amaplk r = 0 (0xfffffd8068266b58) #0 witness_lock+0x5bb #1 rw_do_enter_write+0x3ea #2 uvm_map_lock_entry+0x51 #3 uvm_fault_unwire_locked+0x253 #4 uvm_fault_unwire+0x55 #5 kern_sysctl_dirs+0x363 #6 kern_sysctl+0x12d #7 sys_sysctl+0x425 #8 syscall+0xbc6 #9 Xsyscall+0x128 shared rwlock vmmaplk r = 0 (0xfffffd806c16e118) #0 witness_lock+0x5bb #1 rw_do_enter_read+0x3af #2 uvm_fault_unwire+0x3e #3 kern_sysctl_dirs+0x363 #4 kern_sysctl+0x12d #5 sys_sysctl+0x425 #6 syscall+0xbc6 #7 Xsyscall+0x128 exclusive kernel_lock &kernel_lock r = 0 (0xffffffff83933578) #0 witness_lock+0x5bb #1 __mp_acquire_count+0x58 #2 mi_switch+0x4b7 #3 sleep_finish+0x24f #4 rw_do_enter_write+0x1de #5 uvm_fault_check+0x54c #6 uvm_fault+0x106 #7 uvm_fault_wire+0x73 #8 sysctl_vslock+0x109 #9 kern_sysctl_dirs+0x266 #10 kern_sysctl+0x12d #11 sys_sysctl+0x425 #12 syscall+0xbc6 #13 Xsyscall+0x128 exclusive rwlock sysctllk r = 0 (0xffffffff8378cdb8) #0 witness_lock+0x5bb #1 rw_do_enter_write+0x3ea #2 sysctl_vslock+0x45 #3 kern_sysctl_dirs+0x266 #4 kern_sysctl+0x12d #5 sys_sysctl+0x425 #6 syscall+0xbc6 #7 Xsyscall+0x128 ddb{1}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 10189 10952K 10966K 166960K 11271 0 pcb 17 12K 12K 166960K 17 0 rtable 216 6K 6K 166960K 353 0 pf 29 16K 16K 166960K 31 0 ifaddr 38 6K 7K 166960K 44 0 ifgroup 46 2K 2K 166960K 50 0 sysctl 1 1K 1K 166960K 1 0 counters 62 36K 36K 166960K 64 0 ioctlops 0 0K 2K 166960K 30 0 iov 0 0K 12K 166960K 11 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1332 84K 84K 166960K 1524 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 9K 166960K 10 0 VM map 2 1K 1K 166960K 2 0 sem 12 0K 1K 166960K 16 0 dirhash 12 2K 2K 166960K 18 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 25 93K 129K 166960K 358 0 sigio 0 0K 0K 166960K 1 0 proc 58 79K 140K 166960K 498 0 subproc 72 4K 4K 166960K 198 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 29 0 in_multi 88 6K 7K 166960K 105 0 ether_multi 1 0K 0K 166960K 2 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 97 440K 440K 166960K 97 0 exec 0 0K 1K 166960K 364 0 fusefs mount 1 32K 32K 166960K 1 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 230 69K 83K 166960K 4365 0 UVM aobj 13 2K 4K 166960K 15 0 pinsyscall 46 92K 112K 166960K 1365 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 1 0K 0K 166960K 13 0 NDP 10 0K 2K 166960K 27 0 temp 40 8639K 8703K 166960K 4579 0 kqueue 13 20K 28K 166960K 60 0 SYN cache 2 16K 16K 166960K 2 0 ddb{1}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 24 0 0 1 0 1 1 0 8 0 rtpcb 120 46 0 43 1 0 1 1 0 8 0 rtentry 112 113 0 12 4 0 4 4 0 8 0 unpcb 144 166 0 151 1 0 1 1 0 8 0 syncache 336 6 0 6 1 0 1 1 0 8 1 tcpqe 32 2 0 2 1 0 1 1 0 8 1 tcpcb 808 137 0 129 5 3 2 5 0 8 1 arp 120 18 0 2 1 0 1 1 0 8 0 ipq 40 1 0 1 1 1 0 1 0 8 0 ipqe 40 44 0 44 1 1 0 1 0 8 0 inpcb 376 338 0 326 9 0 9 9 0 8 7 nd6 136 26 0 3 1 0 1 1 0 8 0 kcovpl 48 22 0 14 1 0 1 1 0 8 0 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 457 0 44 29 2 27 29 0 8 0 art_table 32 458 0 44 4 0 4 4 0 8 0 art_node 16 112 0 20 1 0 1 1 0 8 0 sysvmsgpl 40 1 0 0 1 0 1 1 0 8 0 semupl 112 3 0 3 1 0 1 1 0 8 1 semapl 112 12 0 2 1 0 1 1 0 8 0 shmpl 112 12 0 2 1 0 1 1 0 8 0 dirhash 1024 21 0 4 3 0 3 3 0 8 0 dino2pl 256 1836 0 320 95 0 95 95 0 8 0 ffsino 280 1836 0 320 109 0 109 109 0 8 0 nchpl 144 2219 0 534 63 0 63 63 0 8 0 uvmvnodes 80 2043 0 0 42 0 42 42 0 8 0 vnodes 216 2043 0 0 114 0 114 114 0 8 0 namei 1024 7130 0 7130 1 0 1 1 0 8 1 percpumem 16 46 0 1 1 0 1 1 0 8 0 kstatmem 264 22 0 2 2 0 2 2 0 8 0 scxspl 216 7524 0 7524 8 5 3 7 1 8 3 plimitpl 152 94 0 71 2 0 2 2 0 8 1 sigapl 424 604 0 548 8 1 7 8 0 8 0 futexpl 64 2545 0 2544 1 0 1 1 0 8 0 knotepl 120 321 0 0 10 0 10 10 0 8 0 kqueuepl 216 80 0 71 1 0 1 1 0 8 0 pipepl 328 169 0 142 3 0 3 3 0 8 0 fdescpl 504 585 0 548 6 1 5 6 0 8 0 filepl 152 2852 0 2640 14 0 14 14 0 8 5 lockfpl 104 49 0 47 1 0 1 1 0 8 0 lockfspl 48 22 0 20 1 0 1 1 0 8 0 sessionpl 144 37 0 22 1 0 1 1 0 8 0 pgrppl 48 59 0 36 1 0 1 1 0 8 0 ucredpl 104 492 0 474 1 0 1 1 0 8 0 zombiepl 144 550 0 548 1 0 1 1 0 8 0 processpl 1168 604 0 548 5 0 5 5 0 8 0 procpl 656 896 0 834 7 1 6 7 0 8 0 sosppl 168 1 0 1 1 1 0 1 0 8 0 sockpl 688 551 0 521 10 0 10 10 0 8 5 mcl64k 65536 3 0 0 1 0 1 1 0 8 0 mcl16k 16384 4 0 0 1 0 1 1 0 8 0 mcl8k 8192 4 0 0 1 0 1 1 0 8 0 mcl4k 4096 111 0 0 14 0 14 14 0 8 0 mcl2k 2048 39 0 0 5 0 5 5 0 8 0 mtagpl 96 3 0 0 1 0 1 1 0 8 0 mbufpl 256 296 0 0 19 0 19 19 0 8 0 bufpl 280 2509 0 123 171 0 171 171 0 8 0 anonpl 24 126496 0 123372 48 1 47 47 0 184 12 amapchunkpl 152 13655 0 13137 29 5 24 29 0 158 3 amappl16 200 2780 0 2760 22 10 12 14 0 8 8 amappl15 192 8 0 8 1 1 0 1 0 8 0 amappl14 184 106 0 96 1 0 1 1 0 8 0 amappl13 176 7 0 7 1 1 0 1 0 8 0 amappl12 168 1177 0 1143 2 0 2 2 0 8 0 amappl11 160 61 0 51 1 0 1 1 0 8 0 amappl10 152 12 0 12 1 1 0 1 0 8 0 amappl9 144 247 0 247 1 1 0 1 0 8 0 amappl8 136 19 0 18 1 0 1 1 0 8 0 amappl7 128 94 0 83 1 0 1 1 0 8 0 amappl6 120 177 0 174 1 0 1 1 0 8 0 amappl5 112 116 0 110 1 0 1 1 0 8 0 amappl4 104 297 0 285 1 0 1 1 0 8 0 amappl3 96 2339 0 2221 5 1 4 4 0 8 0 amappl2 88 625 0 571 2 0 2 2 0 8 0 amappl1 80 8736 0 8197 13 0 13 13 0 8 0 amappl 88 3992 0 3810 5 0 5 5 0 92 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 14 0 2 1 0 1 1 0 8 0 uaddrrnd 24 585 0 548 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 585 0 548 1 0 1 1 0 8 0 vmmpekpl 168 6777 0 6744 3 0 3 3 0 8 0 vmmpepl 168 43361 0 41396 100 0 100 100 0 357 13 vmsppl 456 584 0 548 6 0 6 6 0 8 1 rwobjpl 64 17467 0 14591 50 0 50 50 0 8 0 pdppl 4096 1178 0 1096 124 42 82 100 0 8 0 pvpl 32 14986 0 0 121 0 121 121 0 265 0 pmappl 248 584 0 548 3 0 3 3 0 8 0 extentpl 40 55 0 38 1 0 1 1 0 8 0 phpool 112 314 0 50 9 0 9 9 0 8 0 ddb{1}> machine ddbcpu 0 Stopped at x86_ipi_db+0x27: addq $0x8,%rsp x86_ipi_db(ffffffff83793ff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc+0x38 tsleep_nsec(ffff80003c4fb940,120,ffffffff8343f87e,ffffffffffffffff) at tsleep_nsec+0x5a dowait6(ffff8000ffff8018,0,0,ffff80002a44a9fc,26,0,e22ed199985e4adb,ffff80002a44ab30) at dowait6+0x54f sys_wait4(ffff8000ffff8018,ffff80002a44ab30,ffff80002a44aa80) at sys_wait4+0x13a syscall(ffff80002a44ab30) at syscall+0xb08 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7ee09b3636a0, count: 6 ddb{0}> trace x86_ipi_db(ffffffff83793ff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc+0x38 tsleep_nsec(ffff80003c4fb940,120,ffffffff8343f87e,ffffffffffffffff) at tsleep_nsec+0x5a dowait6(ffff8000ffff8018,0,0,ffff80002a44a9fc,26,0,e22ed199985e4adb,ffff80002a44ab30) at dowait6+0x54f sys_wait4(ffff8000ffff8018,ffff80002a44ab30,ffff80002a44aa80) at sys_wait4+0x13a syscall(ffff80002a44ab30) at syscall+0xb08 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7ee09b3636a0, count: -9 ddb{0}> machine ddbcpu 1 Stopped at db_enter+0x25: addq $0x8,%rsp db_enter() at db_enter+0x25 panic(ffffffff83437867) at panic+0x1e5 __assert(ffffffff833e7433,ffffffff8342bb14,6cb,ffffffff8333e711) at __assert+0x29 uvm_fault_unwire_locked(fffffd806c16e018,400000000000,400000011000) at uvm_fault_unwire_locked+0x4c1 uvm_fault_unwire(fffffd806c16e018,400000000000,400000011000) at uvm_fault_unwire+0x55 kern_sysctl_dirs(4e,ffff80003c5046a8,1,4000000001c0,ffff80003c5046d8,0,c1e77edfdf7b6cc7,1) at kern_sysctl_dirs+0x363 kern_sysctl(ffff80003c5046a4,2,4000000001c0,ffff80003c5046d8,0,37,4b89659329c787a9) at kern_sysctl+0x12d sys_sysctl(ffff8000ffff6a60,ffff80003c504810,ffff80003c504760) at sys_sysctl+0x425 syscall(ffff80003c504810) at syscall+0xbc6 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x5194d7987b0, count: 5 ddb{1}> trace db_enter() at db_enter+0x25 panic(ffffffff83437867) at panic+0x1e5 __assert(ffffffff833e7433,ffffffff8342bb14,6cb,ffffffff8333e711) at __assert+0x29 uvm_fault_unwire_locked(fffffd806c16e018,400000000000,400000011000) at uvm_fault_unwire_locked+0x4c1 uvm_fault_unwire(fffffd806c16e018,400000000000,400000011000) at uvm_fault_unwire+0x55 kern_sysctl_dirs(4e,ffff80003c5046a8,1,4000000001c0,ffff80003c5046d8,0,c1e77edfdf7b6cc7,1) at kern_sysctl_dirs+0x363 kern_sysctl(ffff80003c5046a4,2,4000000001c0,ffff80003c5046d8,0,37,4b89659329c787a9) at kern_sysctl+0x12d sys_sysctl(ffff8000ffff6a60,ffff80003c504810,ffff80003c504760) at sys_sysctl+0x425 syscall(ffff80003c504810) at syscall+0xbc6 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x5194d7987b0, count: -10