last executing test programs: 4.465872743s ago: executing program 2 (id=366): r0 = open(&(0x7f0000000140)='./file0\x00', 0x78e, 0x8) ktrace(&(0x7f0000000280)='./file0\x00', 0x0, 0x928, 0x0) mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x5, 0x10, r0, 0x0) openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) socket(0x18, 0x3, 0x1) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000580), 0x40, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) r2 = socket(0x2, 0x2, 0x0) r3 = socket(0x2, 0x400000000002, 0x0) setsockopt(r3, 0x0, 0x23, &(0x7f0000000180)="b1f5d915", 0x4) dup2(r3, r2) select(0x40, &(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x0, 0x0) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) bind(r2, &(0x7f0000000000), 0x10) r4 = socket(0x2, 0x2, 0x0) connect$unix(r4, &(0x7f0000000000), 0x10) sendmsg$unix(r4, &(0x7f0000002a40)={0x0, 0x0, 0x0}, 0x0) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x25, 0xfa, 0x0, 0x4}, {0xffff, 0x11, 0x2, 0x4}, {0x816, 0x3, 0x7f, 0x9}]}) pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000380)="fd729b5aa219c774341eb16d5b96b06bd34c0700240382f6525ec2a2c0a8d52ed642100efc578c9712adec97ce1b4323a65726e3246a8bdd11823da9026132852fa3b797621dc0f9", 0x48}], 0x1, 0xc) socket(0x18, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0xe, &(0x7f0000000240)=ANY=[]) nanosleep(&(0x7f0000000000)={0x9}, 0x0) 4.402504061s ago: executing program 2 (id=371): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x50, 0x1, 0x4, 0x4}, {0xff, 0x10, 0x4, 0x441}, {0x6, 0x4, 0x0, 0xfffffffe}]}) syz_emit_ethernet(0x10004, &(0x7f0000000300)=ANY=[]) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r2 = socket(0x800000018, 0x2, 0x0) setsockopt$sock_int(r2, 0xffff, 0x1003, 0x0, 0x0) ioctl$BIOCSETWF(r1, 0x80104277, &(0x7f00000000c0)={0x5, &(0x7f0000000000)=[{0x1d, 0x1, 0x3, 0x6}, {0xe7, 0x0, 0x51, 0x3c}, {0x802, 0x7, 0xdc, 0x57afcf56}, {0x5c, 0xfe, 0x4, 0x3}, {0x6, 0x3, 0x2, 0x2b8}]}) write(r1, &(0x7f0000000280)="23c37e853a8a5e7e078c0ce7b080", 0xe) 4.302678561s ago: executing program 2 (id=375): geteuid() shmget(0x0, 0x4000, 0x620, &(0x7f0000ffb000/0x4000)=nil) shmget(0x0, 0x2000, 0x3f0, &(0x7f0000ffd000/0x2000)=nil) r0 = socket(0x800000018, 0x1, 0x0) getsockname(r0, 0x0, 0x0) unveil(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='W\x00') r1 = open(&(0x7f0000000000)='./file0\x00', 0x9cab835cfdc52675, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0xa011, r1, 0x0) ftruncate(r1, 0x79c8) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) ioctl$BIOCIMMEDIATE(r2, 0x80044270, &(0x7f00000000c0)=0x4) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x8000, 0x0, 0x49a06d6f3f622349, 0x0, @multicast2, @loopback}, @tcp={{0x2, 0x2, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x20, 0x8, 0x0, 0xcafc}}}}}}) select(0x40, &(0x7f0000000000)={0x9, 0xfffffffffffffa72, 0xfffffffffffffff9, 0x0, 0xffffffffffffffff, 0x10000000000, 0x0, 0x7d}, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000001480)=[{0x0}], 0x1) r3 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) ioctl$WSKBDIO_SETMODE(r3, 0x80045713, &(0x7f0000000180)=0xcbb3e54aa3e6b2e8) madvise(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) msync(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) openat$bpf(0xffffffffffffff9c, &(0x7f0000000580), 0x40, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x1) r4 = accept(0xffffffffffffff9c, 0x0, &(0x7f0000000000)) mquery(&(0x7f0000ffa000/0x5000)=nil, 0x5000, 0x4, 0x0, r4, 0x1) 2.603923144s ago: executing program 2 (id=413): r0 = shmget$private(0x0, 0xc00000, 0x480, &(0x7f00003fe000/0xc00000)=nil) shmctl$SHM_UNLOCK(r0, 0x4) select(0x40, &(0x7f0000000000)={0x10001, 0x7fff, 0x5, 0x9, 0x9027, 0x9, 0x4, 0x4}, &(0x7f0000000040)={0x7, 0x5, 0x1000, 0xc0, 0x1ff, 0x5, 0x2, 0xfffffffffffffffc}, &(0x7f0000000080)={0x8000, 0x75, 0x8, 0x3, 0x0, 0x9, 0x6c1, 0x3}, &(0x7f00000000c0)={0x4, 0x10001}) r1 = dup(0xffffffffffffff9c) poll(&(0x7f0000000100)=[{0xffffffffffffffff, 0x4}, {r1, 0x4}], 0x2, 0xa8) getsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f0000000140)={0x0, 0x0}, &(0x7f0000000180)=0xc) r3 = getegid() getsockopt$SO_PEERCRED(r1, 0xffff, 0x1022, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0xc) getsockopt$SO_PEERCRED(r1, 0xffff, 0x1022, &(0x7f0000000200)={0x0}, 0xc) r6 = fcntl$getown(r1, 0x5) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000240)={{0x10001, r2, r3, 0xffffffffffffffff, r4, 0x118, 0x6}, 0x1, 0x9, r5, r6, 0x1, 0x1ff, 0xffffffff}) syz_emit_ethernet(0xbf, &(0x7f00000002c0)={@random="49598a2747e9", @broadcast, [], {@generic={0x3c01, "4f7295ab802ad769dbda8141c7e9cead0428297803c93eae017294ac502ff3ff903521bd069b97ee5f77d9aa98f1691297bcc3f172a7b87ca909a2c67b3a287d21a3a1b8577084c5b3dcf26328f652bfada8e99a82bac5355c4ef92ac8ff2df0b0a47281e3a1e67a1bd6a214b27a3d85380ca68e7abc35e4ea73d097f75917a50652b07823e77b298357703a03332cd921012bc4b0fb552de2d8f37385f8f552f15e978341b71a4126d77fb6a288579bca"}}}) syz_extract_tcp_res$synack(&(0x7f0000000380), 0x1, 0x0) syz_extract_tcp_res(&(0x7f00000003c0), 0x9e, 0x4) r7 = semget$private(0x0, 0x3, 0x202) semctl$IPC_RMID(r7, 0x0, 0x0) r8 = openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000000400), 0x80, 0x0) r9 = socket$inet6(0x18, 0x2, 0xc) poll(&(0x7f0000000440)=[{r1, 0x2}, {r8, 0x1}, {r1, 0x8}, {r9, 0x1}, {r1, 0xa2}], 0x5, 0x765e) shmctl$SHM_LOCK(r0, 0x3) sendto$inet(r8, &(0x7f0000000480)="de8f9db82a644b3340cb840464a3e54c07d7943ae70562c56a5ad46a0dfc891f8cfa82d28907474f4bee5e8e285f4c546b0f6d72d89bdb8fa4446b7760009dcaac2fdd9dafc99e7acc59058b7b48ca44730dc264549edefd3a0be0ca1d27f706f5e3536d484fae6fb8d43fb6d6782b8c", 0x70, 0x402, &(0x7f0000000500)={0x2, 0x3}, 0xc) r10 = semget$private(0x0, 0x4, 0x200) semctl$GETZCNT(r10, 0x2, 0x7, &(0x7f0000000540)=""/3) getsockopt$sock_cred(r8, 0xffff, 0x1022, &(0x7f0000000580)={0x0, 0x0}, &(0x7f00000005c0)=0xc) getsockopt$sock_cred(r8, 0xffff, 0x1022, &(0x7f0000000600)={0x0, 0x0}, &(0x7f0000000640)=0xc) setreuid(r11, r12) r13 = socket(0x2, 0x2, 0x2) getsockopt(r13, 0x11, 0xfffffffa, &(0x7f0000000680)=""/190, &(0x7f0000000740)=0xbe) ioctl$FIOASYNC(r1, 0x8004667d, &(0x7f0000000780)=0x2) sysctl$vm_swapencrypt(&(0x7f00000007c0)={0x2, 0x5, 0x1}, 0x3, &(0x7f0000000800)="779a8605e474b8ad7d225697a941d7f8f11f578787d868745cb8ce4e4312a557e1b428c32de79697e727606f", &(0x7f0000000840)=0x2c, &(0x7f0000000880)="f8", 0x1) 1.556400125s ago: executing program 2 (id=413): r0 = shmget$private(0x0, 0xc00000, 0x480, &(0x7f00003fe000/0xc00000)=nil) shmctl$SHM_UNLOCK(r0, 0x4) select(0x40, &(0x7f0000000000)={0x10001, 0x7fff, 0x5, 0x9, 0x9027, 0x9, 0x4, 0x4}, &(0x7f0000000040)={0x7, 0x5, 0x1000, 0xc0, 0x1ff, 0x5, 0x2, 0xfffffffffffffffc}, &(0x7f0000000080)={0x8000, 0x75, 0x8, 0x3, 0x0, 0x9, 0x6c1, 0x3}, &(0x7f00000000c0)={0x4, 0x10001}) r1 = dup(0xffffffffffffff9c) poll(&(0x7f0000000100)=[{0xffffffffffffffff, 0x4}, {r1, 0x4}], 0x2, 0xa8) getsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f0000000140)={0x0, 0x0}, &(0x7f0000000180)=0xc) r3 = getegid() getsockopt$SO_PEERCRED(r1, 0xffff, 0x1022, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0xc) getsockopt$SO_PEERCRED(r1, 0xffff, 0x1022, &(0x7f0000000200)={0x0}, 0xc) r6 = fcntl$getown(r1, 0x5) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000240)={{0x10001, r2, r3, 0xffffffffffffffff, r4, 0x118, 0x6}, 0x1, 0x9, r5, r6, 0x1, 0x1ff, 0xffffffff}) syz_emit_ethernet(0xbf, &(0x7f00000002c0)={@random="49598a2747e9", @broadcast, [], {@generic={0x3c01, "4f7295ab802ad769dbda8141c7e9cead0428297803c93eae017294ac502ff3ff903521bd069b97ee5f77d9aa98f1691297bcc3f172a7b87ca909a2c67b3a287d21a3a1b8577084c5b3dcf26328f652bfada8e99a82bac5355c4ef92ac8ff2df0b0a47281e3a1e67a1bd6a214b27a3d85380ca68e7abc35e4ea73d097f75917a50652b07823e77b298357703a03332cd921012bc4b0fb552de2d8f37385f8f552f15e978341b71a4126d77fb6a288579bca"}}}) syz_extract_tcp_res$synack(&(0x7f0000000380), 0x1, 0x0) syz_extract_tcp_res(&(0x7f00000003c0), 0x9e, 0x4) r7 = semget$private(0x0, 0x3, 0x202) semctl$IPC_RMID(r7, 0x0, 0x0) r8 = openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000000400), 0x80, 0x0) r9 = socket$inet6(0x18, 0x2, 0xc) poll(&(0x7f0000000440)=[{r1, 0x2}, {r8, 0x1}, {r1, 0x8}, {r9, 0x1}, {r1, 0xa2}], 0x5, 0x765e) shmctl$SHM_LOCK(r0, 0x3) sendto$inet(r8, &(0x7f0000000480)="de8f9db82a644b3340cb840464a3e54c07d7943ae70562c56a5ad46a0dfc891f8cfa82d28907474f4bee5e8e285f4c546b0f6d72d89bdb8fa4446b7760009dcaac2fdd9dafc99e7acc59058b7b48ca44730dc264549edefd3a0be0ca1d27f706f5e3536d484fae6fb8d43fb6d6782b8c", 0x70, 0x402, &(0x7f0000000500)={0x2, 0x3}, 0xc) r10 = semget$private(0x0, 0x4, 0x200) semctl$GETZCNT(r10, 0x2, 0x7, &(0x7f0000000540)=""/3) getsockopt$sock_cred(r8, 0xffff, 0x1022, &(0x7f0000000580)={0x0, 0x0}, &(0x7f00000005c0)=0xc) getsockopt$sock_cred(r8, 0xffff, 0x1022, &(0x7f0000000600)={0x0, 0x0}, &(0x7f0000000640)=0xc) setreuid(r11, r12) r13 = socket(0x2, 0x2, 0x2) getsockopt(r13, 0x11, 0xfffffffa, &(0x7f0000000680)=""/190, &(0x7f0000000740)=0xbe) ioctl$FIOASYNC(r1, 0x8004667d, &(0x7f0000000780)=0x2) sysctl$vm_swapencrypt(&(0x7f00000007c0)={0x2, 0x5, 0x1}, 0x3, &(0x7f0000000800)="779a8605e474b8ad7d225697a941d7f8f11f578787d868745cb8ce4e4312a557e1b428c32de79697e727606f", &(0x7f0000000840)=0x2c, &(0x7f0000000880)="f8", 0x1) 1.399773327s ago: executing program 1 (id=471): ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) socket(0x2, 0x8000, 0xb) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f00000000c0), 0x1c, 0x0}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket(0x18, 0x1, 0x0) close(r0) r1 = socket(0x18, 0x2, 0x0) setsockopt(r1, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) sendmsg$unix(r0, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0) 1.345784421s ago: executing program 7 (id=479): clock_getres(0xa, 0x0) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000001100)="7cd75ef3bababf34d8cc0974aa2953675f2b217a9b2c63b888b4027fc2e61a58d4aaee16b666dfe2e3", 0x29}], 0x1) r0 = open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="099f9148783f3afb501b60", 0xb}], 0x1) mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x3, 0x10, r0, 0x0) pwrite(r0, &(0x7f0000001080)='q', 0x1, 0x9) r1 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) close(r1) r2 = openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x1, 0x0) ioctl$TIOCSETA(r2, 0xc4504440, &(0x7f0000000740)={0x0, 0x2, 0x0, 0x0, "d6a249ebb178926c79486b47c1d100"}) 1.183642138s ago: executing program 7 (id=487): fcntl$lock(0xffffffffffffff9c, 0x9, &(0x7f0000000040)={0x2, 0x0, 0x1000000000003, 0x100000001}) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) (async) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r0 = socket(0x2, 0x3, 0x0) ioctl$FIONREAD(r0, 0x8020699f, &(0x7f00000001c0)) (async) ioctl$FIONREAD(r0, 0x8020699f, &(0x7f00000001c0)) getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f00000000c0), 0x0) (async) getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f00000000c0), 0x0) setsockopt(r0, 0x6, 0x7f, 0x0, 0x0) (async) setsockopt(r0, 0x6, 0x7f, 0x0, 0x0) r1 = openat$bpf(0xffffffffffffff9c, 0x0, 0x1, 0x0) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0xd02) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r2 = shmget$private(0x0, 0x3000, 0x24, &(0x7f0000ffa000/0x3000)=nil) shmat(r2, &(0x7f0000001000/0x3000)=nil, 0x96dba8100d9a48bd) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) (async) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000002a40)={&(0x7f0000000000), 0x10, 0x0}, 0x0) r4 = socket(0x2, 0x2, 0x0) select(0x40, &(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x0, 0x0) socket$inet(0x2, 0x3, 0x16) (async) r5 = socket$inet(0x2, 0x3, 0x16) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000280)='S', 0x1}], 0x1) (async) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000280)='S', 0x1}], 0x1) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setsockopt$inet_opts(r5, 0x0, 0x9, &(0x7f0000000240)="ea00000100000000", 0xc) dup2(r5, r4) sendmsg$unix(r4, &(0x7f0000002a40)={0x0, 0xffffffffffffff89, 0x0, 0x6e}, 0x0) pread(r3, &(0x7f0000000040)="3cd15db7c30016", 0x50cc00, 0x0) madvise(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x6) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) setuid(0xffffffffffffffff) (async) setuid(0xffffffffffffffff) shmget$private(0x0, 0x3000, 0x5a5, &(0x7f0000ffd000/0x3000)=nil) (async) r6 = shmget$private(0x0, 0x3000, 0x5a5, &(0x7f0000ffd000/0x3000)=nil) shmat(r6, &(0x7f0000075000/0x4000)=nil, 0x3000) shmctl$IPC_RMID(r6, 0x0) (async) shmctl$IPC_RMID(r6, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) 1.017162364s ago: executing program 1 (id=489): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x100, 0x822dd76a08bed8fc) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x2, 0x0) close(r0) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)="94c79bd261e1e88e83beb11c0a3e154df77b5335bd1667d9fd77c59297b3cad0ade427f63f2912518a179b7c207bc5ba040a20b5c36bfaca54e49900550bad2f165552f266a6b12d4900c56a22e814223e67a3fdf5ae19bcbb5d0a815015db8752d03d1b08f84b4976ec52d4a82598424ed3a6a523a3591db0e862a2f4dd1168cb17845fff1fb5df5535cae3e20e2bdb92138d0c1b0720e1c121ccb763f092cd5dcaa3d901", 0x2cfea}], 0x10000000000001fc) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x2) munmap(&(0x7f000006f000/0x1000)=nil, 0x1000) 1.015045915s ago: executing program 1 (id=493): syz_emit_ethernet(0x0, 0x0) r0 = socket(0x0, 0x2, 0x0) setsockopt$sock_int(r0, 0xffff, 0x20, &(0x7f0000000040)=0x2, 0x1) socket(0x18, 0x2, 0x0) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x62}) r1 = syz_open_pts() r2 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mknodat(r2, &(0x7f0000000040)='./file0\x00', 0x2000, 0x3361) r3 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7949) ioctl$VNDIOCCLR(r3, 0xc0a86b02, &(0x7f0000000200)={0x0, 0x10000, 0x0}) close(r1) r4 = syz_open_pts() getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000100)=0xc) lchown(&(0x7f0000000080)='./file0\x00', r5, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f00000002c0)="0002000004", 0x2a}], 0x1) ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f00000001c0)={0x200000, 0x0, 0xfffffffe, 0x10001, "21000000000000001f0000e005a77600"}) readv(r4, &(0x7f0000000280)=[{&(0x7f0000000480)=""/131, 0x83}], 0x1) execve(0x0, 0x0, 0x0) 846.263127ms ago: executing program 7 (id=501): mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6381) select(0x40, &(0x7f0000000180)={0xfffffffffffffffd, 0x44809e9d, 0xffffffffffffffff, 0x1, 0x2000000000000000, 0x181c, 0x8, 0x9}, 0x0, 0x0, 0x0) r0 = kqueue() kevent(r0, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) nanosleep(&(0x7f0000000080)={0x1a, 0xffffffffffffffff}, &(0x7f00000000c0)) mknod(&(0x7f0000000000)='./file1\x00', 0x2000, 0x285b9a) r2 = open(&(0x7f0000000800)='./file1\x00', 0x800, 0x120) ioctl$FIONBIO(r2, 0x82907003, &(0x7f0000000140)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) ioctl$FIONBIO(r1, 0x82907003, &(0x7f0000000140)=0x1) dup2(r0, r1) 805.991376ms ago: executing program 5 (id=503): mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x45d48) (async) ktrace(&(0x7f0000000000)='./file0\x00', 0x1, 0x40000846, 0x0) (async) r0 = socket(0x18, 0x1, 0x0) getsockopt$sock_int(r0, 0xffff, 0x20, &(0x7f0000000140), &(0x7f0000000180)=0x4) fcntl$getown(r0, 0x5) 695.694772ms ago: executing program 5 (id=504): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000580), 0x40, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x0, &(0x7f0000000080)}) sysctl$kern(0x0, 0x0, &(0x7f0000000140)="71f91ee83471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1d, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) bind$unix(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x25, 0x0, 0x0, 0xfffffffc}, {0xae, 0x14, 0xff}, {0x16, 0xf8, 0x7b, 0x400f}]}) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000580), 0x40, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) mmap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x11, r2, 0x0) mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) openat$bpf(0xffffffffffffff9c, 0x0, 0x462, 0x0) r4 = socket(0x0, 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sysctl$vfs_ffs(&(0x7f0000000000)={0x4}, 0x3, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_int(r4, 0xffff, 0x0, &(0x7f0000000000)=0x7, 0xffffffffffffffc1) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) sysctl$vfs_nfs(&(0x7f0000000000), 0x3, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000c50000/0x2000)=nil, 0x2000) mmap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x10, r3, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000a00)='\t', 0x1}], 0x1, 0x1) sysctl$kern(0x0, 0x0, &(0x7f00000014c0)="74055c96000504000cce20095d8a106ac7bd49e7500000000000000079eec0b656ffe5b08554a5ccfa6d04fd6618eed4ce500d150389834af46e4abe04643154", &(0x7f0000000080)=0x40, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x3e, &(0x7f0000001340)=ANY=[]) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) 663.032822ms ago: executing program 5 (id=508): r0 = shmat(0xffffffffffffffff, &(0x7f0000ffc000/0x1000)=nil, 0x0) shmdt(r0) mknod(&(0x7f0000000180)='./bus\x00', 0x2000, 0xd01) r1 = open(&(0x7f00000004c0)='./bus\x00', 0x0, 0x0) ioctl$VNDIOCSET(r1, 0x40086475, &(0x7f0000000500)={0x0, 0x0, 0x0}) 636.473676ms ago: executing program 6 (id=510): r0 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000040)='./file0\x00', 0x2000, 0x3361) syz_emit_ethernet(0x62, &(0x7f0000001640)={@random="3929c6f14e16", @remote, [], {@ipv4={0x800, {{0x15, 0x4, 0x2, 0xb, 0x54, 0x66, 0xfb99, 0x3, 0x50, 0x0, @multicast1, @broadcast, {[@rr={0x7, 0x1f, 0xf, [@loopback, @broadcast, @broadcast, @empty, @local={0xac, 0x14, 0x0}, @broadcast, @local={0xac, 0x14, 0x0}]}, @noop, @noop, @timestamp={0x44, 0x1c, 0x0, 0x3, 0x9, [{[], 0x400}, {[], 0x4f6}, {[], 0x8}, {[], 0x7}, {[@broadcast], 0x7}]}]}}}}}}) r1 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7949) ioctl$VNDIOCCLR(r1, 0xc0a86b02, &(0x7f00000000c0)={0x0, 0x8000000008001, 0x0}) 631.952413ms ago: executing program 5 (id=512): ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, 0x0) socket(0x18, 0x2, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, 0x0) socket(0x2, 0x2, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000500)={0x3, &(0x7f00000000c0)=[{}, {0x1, 0x0, 0x0, 0x2}, {0x6}]}) socket(0x2, 0x1, 0x0) sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xff0a, 0x0, 0x37) r0 = open(0x0, 0x70e, 0x0) writev(r0, 0x0, 0x0) sysctl$kern(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket(0x1, 0x5, 0x0) setsockopt$sock_int(r1, 0xffff, 0x20, 0x0, 0x3f) syz_emit_ethernet(0xa5, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd6028aa60006f060000000000000000000000edd3b6de7b8beed300000000000000000000000000bb99da597213a061543c6c0e7f84d4"]) 609.080029ms ago: executing program 6 (id=514): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x10, 0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) close(r1) select(0x40, &(0x7f0000000000)={0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x3, 0x401}, 0x0, 0x0, 0x0) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket(0x2, 0x2, 0x0) bind(r2, &(0x7f0000000000), 0x10) connect$unix(r2, &(0x7f0000000000), 0x10) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_int(r2, 0xffff, 0x1023, &(0x7f00000004c0), 0x4) recvfrom(r1, &(0x7f0000000200)=""/134, 0x86, 0x802, 0x0, 0x0) syz_emit_ethernet(0xd8, &(0x7f0000000100)={@broadcast, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0xca, 0x1, 0x0, 0x1, 0x1, 0x0, @remote={0xac, 0x14, 0x0}, @rand_addr=0x5}, @icmp=@echo_reply={0x0, 0x0, 0x0, 0x65, 0x9, "ba3e104c3f5e1c691a5955d2f7ac67e3aea1b020e848115196f4b1e3dfbe7ac43cbba4bad025002de4d1426848eb93a6889909c20f2e6a8a80e7900a12576c0feedae67f9eafd5aeaec44f480d701934a7bf6a36e19aa28a1f9b494861f8d81a81c3185a65ed8a2c0be187d86361981566df04b599c443110d4c54339327b329207ed73f349e7086fe6bc120d874ec112a7d4848606cdd2bb74135a7364380b9d857dddf8ab2bc7396a858425d12"}}}}}) syz_extract_tcp_res(&(0x7f0000000000), 0x2, 0x1) 608.290017ms ago: executing program 5 (id=515): r0 = openat$tty(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) r1 = openat$tty(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) dup2(r0, r1) r2 = socket(0x800000018, 0x1, 0x0) bind$unix(r2, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x8) 534.421988ms ago: executing program 6 (id=516): syz_emit_ethernet(0x13a, &(0x7f0000000000)={@broadcast, @random="a5152d1e9920", [], {@ipv6={0x86dd, {0x3, 0x6, "c15d21", 0x104, 0x6c, 0x4, @local={0xfe, 0x80, '\x00', 0x0}, @remote={0xfe, 0x80, '\x00', 0x0}, {[@fragment={0x2c, 0x0, 0x5, 0x1, 0x0, 0x0, 0x66}, @hopopts={0x29, 0x3, '\x00', [@padn={0x1, 0x2, [0x0, 0x0]}, @padn={0x1, 0x2, [0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x8001}, @jumbo={0xc2, 0x4, 0x2}, @pad1, @enc_lim]}, @fragment={0x2, 0x0, 0x40, 0x0, 0x0, 0x4, 0x64}, @fragment={0x16, 0x0, 0x4, 0x1, 0x0, 0x4, 0x64}, @fragment={0xff, 0x0, 0x7, 0x1, 0x0, 0xc}, @routing={0xd6, 0x2, 0x0, 0x4, 0x0, [@mcast1]}, @dstopts={0x2c, 0x0, '\x00', [@pad1]}], @generic="1f717a340b47ad60d018959281d51281731fed5918618ca303e852f95b31855a241573c107057367729547e61d6c33ae585f1093a50092fe7b8285370c52f73d47c9cc5adb586f3a799e1c30cbf101bb38cb47bfe86d476b81a607aa461029572bab353984d676d6e68d1cc60552ccbf0afa5cb51d72c97442188ff2be050575addceeb0ae5694da5db5c72e47f3c4f7d1168822"}}}}}) 530.366542ms ago: executing program 5 (id=517): syz_emit_ethernet(0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="89ffa23f3c252adb0070162e86dd6009000000200600030000000000000037f87ccdc0c4a92cff0000000001ea443d080000000001004e204e22", @ANYRES32=0x0, @ANYRES32=0x41424344, @ANYBLOB='[B']) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x205a9a) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = syz_open_pts() close(r1) r2 = syz_open_pts() ioctl$FIOASYNC(r1, 0x80047460, &(0x7f00000000c0)=0x1000) ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f00000001c0)={0x6, 0x56f, 0xeffffefa, 0xff, "ffe7c969dd10f509a90800e13e668400", 0x210000, 0x2}) writev(r2, &(0x7f0000000680)=[{&(0x7f0000000400)="0647ecd16c696de52cb68824a20938b7292f17702c62867412936ef890a75544de9acfca0199594af2b88c998b6e5ba303a284057bac", 0x36}, {0x0}], 0x2) ioctl$FIONBIO(r0, 0x82907003, &(0x7f0000000140)=0x1) bind$unix(r0, &(0x7f0000000080)=@abs={0x1, 0x0, 0x1}, 0x8) syz_emit_ethernet(0x1000e, &(0x7f0000000000)=ANY=[]) 529.589184ms ago: executing program 3 (id=518): ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x25, 0x0, 0x0, 0xfffffffc}, {0xb1, 0x10, 0x2}, {0x16, 0x7, 0x7f, 0x400f}]}) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000580), 0x40, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="092f5d01000040", 0x7}], 0x1, 0x1) sysctl$kern(0x0, 0x0, &(0x7f0000000180)="74055c96000504000cce20095d8a106ac700537ac2bc83bd49e7500000000000000079eec0b656ffe5b08554a5ccff6d04fd6618eed4ce500d15038923bdb38e23c4677d", &(0x7f0000000080)=0x44, 0x0, 0x0) sysctl$net_inet_udp(&(0x7f0000000000)={0x4, 0x2, 0x11, 0x2}, 0x4, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0xfffe, 0x0, 0x9}, {0x4, 0x0, 0x0, 0x9}, {0x2, 0x0, 0x0, 0x40806}]}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0x37) syz_emit_ethernet(0x3e, &(0x7f0000000bc0)={@broadcast, @random="891991d7d4b0", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x17, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @empty, @multicast1}, @icmp=@parameter_prob={0xc, 0x2, 0x0, 0x8, 0x0, 0x0, {0x5, 0x4, 0x0, 0x1b, 0xffbc, 0x0, 0x2, 0x0, 0x1, 0x0, @local={0xac, 0x14, 0x0}, @loopback}}}}}}) 528.806268ms ago: executing program 6 (id=519): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000580), 0x8000, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) (async) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x25, 0x0, 0xa, 0x9}, {0xb1, 0x11, 0x2, 0x9}, {0xfff, 0x7, 0x7f, 0x6}]}) sysctl$kern(0x0, 0x0, &(0x7f0000000180)="5f5c3c03b72fc22f129d9dff8d09697eed837e3dbbf06ea0a61d479b8940020500008d8f274164c7", &(0x7f0000000080)=0x28, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x50, &(0x7f00000001c0)=ANY=[@ANYRES64=r0]) msync(&(0x7f000069f000/0x3000)=nil, 0x3000, 0x6) 528.520249ms ago: executing program 2 (id=520): r0 = socket(0x18, 0x2, 0x0) setsockopt(r0, 0x1000000029, 0x3d, 0x0, 0x0) setrlimit(0x8, &(0x7f0000000980)={0x7, 0x54}) r1 = syz_open_pts() close(r1) syz_open_pts() ioctl$TIOCSETD(r1, 0x8004741b, &(0x7f0000000000)=0x7fff) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r2 = socket(0x2, 0x3, 0x0) ioctl$FIONREAD(r2, 0x80606954, &(0x7f00000001c0)) r3 = syz_open_pts() syz_open_pts() poll(&(0x7f0000000080)=[{r3, 0xe65dc00084cf4bdf}], 0x1, 0xffffffff) writev(r1, &(0x7f00000008c0)=[{&(0x7f00000007c0)="46b7aaaaf49049868955eec256a9d2e60873ca4370bcdcb88e0203", 0x1b}], 0x1) r4 = socket$unix(0x1, 0x2, 0x0) poll(&(0x7f0000000040)=[{r1, 0x2}, {r1, 0x8}, {r4, 0x20}, {r1, 0x2}], 0x4, 0xfffffff9) 522.526903ms ago: executing program 6 (id=521): mknod(&(0x7f0000000140)='./bus\x00', 0x80, 0x205310) r0 = open$dir(&(0x7f0000000080)='./bus\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) openat$vnd(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) ktrace(&(0x7f0000000000)='./file0\x00', 0x1, 0x40001600, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000040)={0x20000052, &(0x7f0000000100)}) r1 = socket(0x1, 0x2, 0x0) sysctl$kern(&(0x7f0000000000)={0x1, 0x45}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sysctl$kern(&(0x7f0000000000)={0x1, 0x49}, 0x6, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r2 = socket(0x2, 0x3, 0x0) setsockopt$sock_int(r2, 0xffff, 0x1001, &(0x7f0000000100)=0x20000, 0x4) syz_emit_ethernet(0x138, &(0x7f0000000200)=ANY=[@ANYRES64=r0]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) connect$unix(r2, &(0x7f0000000000), 0x10) write(r2, 0x0, 0x0) r3 = socket(0x2, 0x3, 0x0) connect$unix(r3, &(0x7f0000000000), 0x10) write(r3, 0x0, 0x0) mknod(&(0x7f0000000080)='./bus\x00', 0x2000, 0xbd1) open(&(0x7f0000000080)='./bus\x00', 0x2, 0x0) ioctl$FIONREAD(r1, 0xc0106924, &(0x7f00000001c0)) r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x80, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) openat$pf(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r5 = openat$pf(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) ioctl$BIOCSETIF(r5, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) ioctl$BIOCPROMISC(r4, 0x20004269) 460.486162ms ago: executing program 3 (id=522): select(0x40, &(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x0, 0x0) r0 = openat$vmm(0xffffffffffffff9c, &(0x7f0000003980), 0x10, 0x0) ioctl$VMM_IOC_WRITEREGS(r0, 0x82485608, &(0x7f00000039c0)={0x3, 0x0, 0xd6, {[0xfffffffffffffffa, 0x3, 0x49def5a3, 0x4, 0x2, 0x7fffffffffffffff, 0x6, 0x2, 0xe1, 0x5eb4, 0x4, 0x2, 0x2000, 0x4, 0x8, 0xb, 0x1], [0xffff, 0x0, 0x4, 0x2, 0x1, 0x8, 0x3ff, 0xb, 0x7, 0x1], [0xb417, 0x0, 0x6, 0xfffffffffffffffb, 0x6, 0x6, 0x8], [0x10000, 0x7, 0x2, 0xce8, 0xba, 0x1], [{0xff, 0x8, 0x84, 0xde}, {0xc03c, 0x6, 0x8001, 0xc}, {0x2, 0x7, 0xd, 0x2}, {0x200, 0xfffffff8, 0x101, 0xa04}, {0x72, 0x7e6, 0x47800000, 0xfffffffffffffff7}, {0x0, 0x273, 0x40, 0x543426d7}, {0x1000, 0x80000000, 0xfffffffb, 0x6}, {0xffff, 0xaa, 0x6d, 0x6}], {0x2, 0x3, 0x6, 0x5}, {0x200, 0x3ff, 0xd9, 0x800}}}) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendto$unix(r1, &(0x7f0000000180)="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", 0x12e, 0x408, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0xa) r2 = openat$pf(0xffffffffffffff9c, &(0x7f0000000140), 0x202, 0x0) ioctl$TIOCSETA(r2, 0xc4504441, &(0x7f00000000c0)={0x3, 0x1003e3, 0x6, 0x4000a0, "87a200000020fcf30000000000000000000800", 0x6, 0x7fffffff}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r3 = socket(0x2, 0x2, 0x0) connect$unix(r3, &(0x7f0000000000), 0x10) sendto$inet(r3, &(0x7f00000006c0)="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", 0x462, 0x0, 0x0, 0x0) 458.497793ms ago: executing program 6 (id=524): r0 = socket(0x18, 0x3, 0x0) r1 = socket(0x1, 0x2, 0x0) r2 = syz_open_pts() getsockopt$sock_timeval(r1, 0xffff, 0x1005, &(0x7f00000002c0), &(0x7f0000000300)=0x10) getsockopt(r0, 0x5, 0x7, &(0x7f0000000180)=""/216, &(0x7f0000000280)=0xd8) syz_open_pts() poll(&(0x7f0000000080)=[{r2, 0xe65dc00084cf4bdf}], 0x1, 0xfffffffc) read(r0, &(0x7f0000000340)=""/149, 0x95) ioctl$FIONREAD(r1, 0xc0106924, &(0x7f00000000c0)) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x6, &(0x7f0000000140)=[{0x6d9, 0x8, 0x6, 0x400}, {0x4, 0x3, 0xa, 0x2}, {0x6, 0xa, 0x1, 0x1}, {0x4, 0xfd, 0x7, 0x9}, {0x9, 0x7, 0x4, 0x49}, {0x4, 0x93, 0x6, 0x101}]}) r3 = socket(0x18, 0x3, 0x0) r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000580), 0x40, 0x0) ioctl$BIOCSRSIG(r4, 0x80044272, &(0x7f0000000000)=0x34) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{}, {0x0, 0x0, 0x40}, {0xa, 0x0, 0x0, 0x85}]}) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x2, 0x0, 0x0, 0x7}, {0x4, 0x0, 0x0, 0x800}]}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0x37) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) ioctl$FIONREAD(r3, 0x8080691a, &(0x7f0000000100)) ioctl$FIONREAD(r0, 0x81206919, &(0x7f0000000100)) 455.917581ms ago: executing program 7 (id=526): sysctl$hw(&(0x7f00000001c0)={0x6, 0x1c}, 0x2, 0x0, 0x0, &(0x7f0000000080), 0x0) sysctl$hw(&(0x7f0000000000)={0x6, 0x15}, 0x2, &(0x7f0000000040)="047a5ac0db356143cbe620678de2f26ac42355c6799003b742b7c82c1912d3f006a8e475555fccf6262d322f9b3dab5c80279fccc1b9e8f0a85afed86defb661ac258d941a32a47a0d952ef569c40ca33fbd56af0d0a00069fd2c46012c69b6a28682db54928fc6c064265ef7806597ad87301ffb29f40a48e02481edd501b9e2527812edd32ba7c838c8c794167a52ba428a4ecd32e0feadfbf355792fa5c418dfa2ef538c1ec3c8f622a789fb80afcead3a54fc22591f76b132b1d7fe62ace7a9c44ef092bb00eb3c581eb40dd74c58e", &(0x7f0000000140)=0xd1, &(0x7f0000000200)="9534494d74102a371b9460015bb99c26018529a428632eaa147e78986ed787c662b79147bb167071a0219117a15aba7f1a96e7f68d6cc8346b7e389cadf001f537d5c99847c41ab5202eed63a15c9640c5feeca4b1fc5c685d8f4c97e11db78db3af80", 0x63) 407.59905ms ago: executing program 7 (id=529): sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b1000504600000000000000007000000331c13fecea10500fef9ed06c72fd3357ae320b37b673039d2d236073705ae04be38164991f7accf5f882b297be1aa5b236deb51e2f0ac3ebbc257699a5f139b672f4d335d223e7d029d6ba8af6300372821", 0x62, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) r0 = socket(0x11, 0x3, 0x0) sendto$unix(r0, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x0, 0x0, 0x0) (async) mknod(&(0x7f0000000000)='./file1\x00', 0x8, 0x205a9a) (async) r1 = socket(0x6, 0x3, 0x8) ioctl$BIOCSETWF(0xffffffffffffff9c, 0x80104277, &(0x7f0000000180)={0x2, &(0x7f00000000c0)=[{}, {0x5}]}) (async) sysctl$kern(&(0x7f00000000c0)={0x1, 0x2c}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0xfffffffffffffef1) (async) sysctl$ddb(&(0x7f0000000000)={0x9, 0x5}, 0x2, &(0x7f00000000c0)="c79b9758", &(0x7f0000000040)=0x4, &(0x7f00000001c0)='\x00\x00\x00\x00', 0x4) (async) getsockopt$sock_int(r1, 0xffff, 0x1004, 0x0, 0x0) r2 = getuid() fchown(r1, r2, 0x0) (async) syz_emit_ethernet(0x7e, &(0x7f0000000240)=ANY=[@ANYBLOB="8f6f77ede655ffffffffffff86dd605f6ad900483a0000000000000014000000000000000000fe8000000000000001000000000000aa02009078000000006006c33e00000000fe800000000000bd00000000000000aaff02000000000000000000000000000188010000000000000100c204000000000401050000000000"]) (async) syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) (async) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1) (async) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYRES16]) mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0x450a) r3 = open(&(0x7f0000000800)='./file1\x00', 0x800, 0x120) ioctl$FIONBIO(r3, 0x82907003, &(0x7f0000000140)=0x2) ioctl$VNDIOCCLR(r3, 0x80384601, &(0x7f0000000200)={&(0x7f0000000040)='./bus\x00', 0xc6c6, &(0x7f00000001c0)='./file0\x00', 0x8}) (async) r4 = open(&(0x7f00000002c0)='./bus\x00', 0x2, 0x0) ioctl$WSMUXIO_INJECTEVENT(r4, 0x80185760, &(0x7f0000000140)={0x2, 0x0, {0x0, 0xffffffffffffdfff}}) (async) read(r4, &(0x7f0000000300)=""/145, 0x91) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) r5 = socket(0x2, 0x1, 0x0) setsockopt$sock_int(r5, 0xffff, 0x1001, &(0x7f0000000100)=0x7, 0x4) (async) sendto(r5, &(0x7f00000000c0)="a3", 0x1, 0x400, 0x0, 0x0) ioctl$FIONBIO(0xffffffffffffffff, 0x82907003, &(0x7f0000000140)=0x1) (async) mkdir(&(0x7f0000000300)='./file1\x00', 0x0) (async) mknodat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x2, 0xfffffff0) 407.165865ms ago: executing program 4 (id=530): syz_emit_ethernet(0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaa"]) sysctl$net_inet_ip(&(0x7f0000000080)={0x4, 0x2, 0x0, 0x5}, 0x4, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) select(0x2, 0x0, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)) 406.600925ms ago: executing program 0 (id=531): r0 = socket(0x2, 0x2, 0x0) getsockname$unix(r0, &(0x7f0000000000)=@abs, &(0x7f0000001200)=0x8) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket(0x2, 0x3, 0x0) connect$unix(r1, &(0x7f0000000000), 0x10) (async) sysctl$net_inet_ip(&(0x7f00000027c0)={0x4, 0x11}, 0x4, 0x0, 0x0, &(0x7f0000002900), 0x0) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) (async) ioctl$BIOCSETF(r2, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x81, 0x1, 0x4, 0x4}, {0x2c, 0x0, 0x4, 0x441}, {0x6, 0x0, 0x0, 0xfffffffe}]}) (async) syz_emit_ethernet(0x10004, &(0x7f0000000000)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "db8344", 0x8, 0x11, 0x0, @rand_addr="fe000000000000ff80d14400002000", @local={0xfe, 0x80, '\x00', 0x0}, {[], @udp={{0x0, 0x2, 0x8}}}}}}}) (async) close(r1) 405.727442ms ago: executing program 3 (id=532): mknod(&(0x7f0000000480)='./file1\x00', 0x2000, 0x201b1a) mknod$loop(&(0x7f0000000000)='./file0/file1\x00', 0x2000, 0x1) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)="76e5eac907e413f7a251ceddcec7d6aa45cffe2c63a56077123a276d3ba4e9d17eb353c6bc033783a8e0620d357de1febf019465b5bd1086e9624dec06a00c222f", 0x41}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) unveil(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000300)='W\x00') mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) unveil(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='c\x00') mkdir(&(0x7f0000000740)='./file0/file1\x00', 0x0) chroot(&(0x7f0000000100)='./file0/file1\x00') r0 = socket(0x18, 0x2, 0x0) setsockopt(r0, 0x1000000029, 0x3e, &(0x7f0000000000)="5ab7776a", 0x4) r1 = socket$inet6(0x18, 0x3, 0x0) dup2(r0, r1) getsockopt(r1, 0x29, 0x31, 0x0, 0x0) unveil(&(0x7f0000000080)='./file0/file1\x00', &(0x7f00000000c0)='r\x00') unlink(&(0x7f0000000300)='.\x00') open(&(0x7f0000000400)='./file1\x00', 0x0, 0x0) open$dir(&(0x7f0000000040)='./file0\x00', 0xae828e137847f62, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x2, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) setsockopt$sock_linger(r2, 0xffff, 0x80, &(0x7f0000000140)={0x101, 0x80000001}, 0x8) pwritev(0xffffffffffffff9c, &(0x7f00000001c0)=[{&(0x7f0000000200)="1cd2d1818ae70a76f4b803001d09936270286ea75b030083a9f154383900000000000ef9620000000000", 0x2a}], 0x1, 0xffffffffffffffff) r3 = open$dir(&(0x7f00000002c0)='./file0\x00', 0x1, 0xa) ftruncate(r3, 0x80002) r4 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) preadv(r4, &(0x7f00000004c0)=[{&(0x7f00000000c0)=""/99, 0xfffffd23}], 0x11, 0x0) 331.417045ms ago: executing program 4 (id=533): r0 = socket$unix(0x1, 0x5, 0x0) sysctl$net_pipex(&(0x7f0000006240)={0x4, 0x23, 0x3}, 0x3, 0x0, 0x0, &(0x7f00000001c0)="2830f3e60933aa52f5dc349de25b6f491c914311cbfea53f72f5c03f9cd452950ac5661ab22922f69168033e659dd979b72af17ae27264e9a767384551507fca4f0a3eac73f30210e71f7fe9fe1922f3cb954a8538ec0971ef0dae3b7d785d222dd4d964cd5e548be6ff26d9a612b055cf0a80ddea016257b4a7c6cde376437d9e1c892633ec59fb617950a69a016f47ae71b6756206de7106e20230a32431c79f80086278fca6589f4359db36", 0xad) bind$unix(r0, &(0x7f0000000040)=@abs={0x1, 0x0, 0x3}, 0x8) (async) madvise(&(0x7f0000000000/0x4000)=nil, 0x0, 0x3) (async) listen(r0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_opts(r1, 0x0, 0x64, &(0x7f0000000240)="01000000", 0x4) (async) r2 = socket$unix(0x1, 0x5, 0x0) (async) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x10, 0x0) r4 = semget$private(0x0, 0x3, 0x40) semctl$IPC_RMID(r4, 0x0, 0x0) (async) r5 = semget(0x1, 0x3, 0x420) semctl$SETVAL(r5, 0x3, 0x8, &(0x7f0000001000)=0xffffffff) (async) setuid(0xffffffffffffffff) semget(0x3, 0x4, 0x10) chdir(&(0x7f0000001080)='./file0\x00') (async) r6 = semget$private(0x0, 0x2, 0x40) (async) r7 = geteuid() getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f00000010c0)={0x0, 0x0, 0x0}, 0xc) (async) getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000001100)={0x0, 0x0}, 0xc) semctl$IPC_SET(r6, 0x0, 0x1, &(0x7f0000001180)={{0x4f, r7, r8, r9, 0x0, 0x8, 0x7}, 0x4, 0xdcc, 0x100}) (async) r10 = semget$private(0x0, 0x1, 0x400) semctl$SETVAL(r10, 0x1, 0x8, &(0x7f0000001240)) (async) ioctl$BIOCLOCK(r3, 0x20004276) (async) setreuid(0x0, 0xee01) (async) ioctl$BIOCGHDRCMPLT(r3, 0x40044274, &(0x7f00000001c0)) (async) r11 = socket$unix(0x1, 0x5, 0x0) connect$unix(r11, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x2}, 0x8) connect$unix(r2, &(0x7f0000000000)=@file={0xd1653077bafa0114, './file0\x00'}, 0xa) 329.261226ms ago: executing program 0 (id=534): semop(0x0, &(0x7f00000001c0)=[{0x4, 0xa5b, 0x1800}], 0x1) (async) ioctl$BIOCSRTIMEOUT(0xffffffffffffffff, 0x8010426d, &(0x7f0000000100)={0x4, 0x80}) r0 = semget(0x0, 0x1, 0x400) semctl$GETPID(r0, 0x67bb171bcfa50a75, 0x4, 0x0) (async) semctl$GETZCNT(r0, 0x1, 0x7, 0x0) (async) semop(r0, &(0x7f0000000040), 0x0) (async) setrlimit(0x8, &(0x7f0000000580)={0x8000000000000001, 0x56}) r1 = syz_open_pts() setrlimit(0x3, &(0x7f0000000000)={0x17b4, 0x9}) (async) openat(0xffffffffffffff9c, 0x0, 0x10000, 0x125) r2 = syz_open_pts() (async) semctl$SETVAL(r0, 0x1, 0x8, &(0x7f00000000c0)=0x8) syz_open_pts() syz_open_pts() flock(r2, 0x1) ktrace(0x0, 0x1, 0x1c32, 0x0) (async) mknod$loop(&(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x0) mkdir(&(0x7f0000000040)='./file2\x00', 0x0) (async) mkdir(&(0x7f0000000300)='./file2/file0\x00', 0x0) (async) rename(&(0x7f0000000080)='./file2/file0\x00', &(0x7f0000000000)='./file2\x00') (async) r3 = open$dir(&(0x7f0000000100)='.\x00', 0x0, 0xf) symlinkat(&(0x7f0000000080)='./file2\x00', r3, &(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) rename(&(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000700)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) unlink(&(0x7f0000000800)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) link(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) close(r1) rmdir(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) syz_open_pts() (async) ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000380)={0x7fffffff, 0x7bed, 0xffffdf82, 0xffffff8d, "24261f1ebc1280b67fe248460e00740400", 0x1, 0x4}) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) 328.49491ms ago: executing program 3 (id=535): r0 = socket(0x6, 0x5, 0x1) setsockopt(r0, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) setsockopt$sock_int(r0, 0xffff, 0x100, &(0x7f00000000c0)=0x7ff80000, 0x4) getsockopt$sock_linger(r0, 0xffff, 0x80, &(0x7f0000000040), &(0x7f0000000080)=0x8) 328.116283ms ago: executing program 7 (id=536): semop(0x0, &(0x7f00000001c0)=[{0x4, 0xa5b, 0x1800}], 0x1) ioctl$BIOCSRTIMEOUT(0xffffffffffffffff, 0x8010426d, &(0x7f0000000280)={0x2, 0x7f}) (async) ioctl$BIOCSRTIMEOUT(0xffffffffffffffff, 0x8010426d, &(0x7f0000000280)={0x2, 0x7f}) setrlimit(0x8, &(0x7f0000000580)={0xa, 0x56}) syz_open_pts() (async) r0 = syz_open_pts() openat(0xffffffffffffff9c, 0x0, 0x10000, 0x125) close(r0) r1 = syz_open_pts() ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000380)={0x7fffffff, 0x7bea, 0xffffdf82, 0xffffff8d, "24261f00000000480000519300", 0x1, 0x4}) poll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x6}], 0x1, 0x1) (async) poll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x6}], 0x1, 0x1) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x62}) r2 = syz_open_pts() close(r2) syz_open_pts() (async) syz_open_pts() ioctl$TIOCSETAW(r2, 0x802c7415, &(0x7f0000000000)={0xffffffff, 0x3d9, 0x1f, 0xeffdffdd, "8b03000900787d902b56d864d3c3a3f4d3c900", 0xfff7fffd}) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000240)="f8c6bbc38dd00a22b7b49bd84cfe3daca1e915338100", 0x16}], 0x1) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) (async) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) r3 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$TIOCSETA(r3, 0xc1584460, &(0x7f0000000340)={0x12e8, 0x8, 0x800, 0x8, "00000055bcda5400", 0xffffffff, 0x20000000}) (async) ioctl$TIOCSETA(r3, 0xc1584460, &(0x7f0000000340)={0x12e8, 0x8, 0x800, 0x8, "00000055bcda5400", 0xffffffff, 0x20000000}) mknod(&(0x7f00000002c0)='./file0\x00', 0x10, 0x45d48) open(&(0x7f00000000c0)='./file0\x00', 0x82, 0x0) (async) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x82, 0x0) ioctl$FIONREAD(r4, 0xc0206921, &(0x7f0000000380)) (async) ioctl$FIONREAD(r4, 0xc0206921, &(0x7f0000000380)) openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x10, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000180), &(0x7f0000000200)=0xc) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x25, 0x0, 0x0, 0xfffffffc}, {0xb1, 0x10, 0x2}, {0x16, 0x7, 0x7f, 0x400f}]}) (async) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x25, 0x0, 0x0, 0xfffffffc}, {0xb1, 0x10, 0x2}, {0x16, 0x7, 0x7f, 0x400f}]}) r5 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000580), 0x40, 0x0) ioctl$BIOCSETIF(r5, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) (async) ioctl$BIOCSETIF(r5, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) sysctl$kern(0x0, 0x0, &(0x7f0000000100)="71f91e4ad5826621bf1ae87f761cc1bc3c129fe51249a4c0a1387c216a96996d", &(0x7f0000000080)=0x20, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETF(r5, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) 326.321596ms ago: executing program 4 (id=537): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000300)={0x3, &(0x7f0000000380)=[{0x6c, 0x0, 0xfa, 0x9}, {0x3c, 0x0, 0x0, 0x2}, {0x8016, 0x0, 0xa4, 0x800}]}) syz_emit_ethernet(0x2a, &(0x7f0000000080)=ANY=[]) 307.879213ms ago: executing program 0 (id=538): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000580), 0x40, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x25, 0x0, 0x0, 0x8000001}, {0x1, 0x10, 0x4, 0x9}, {0x16, 0xf2, 0x6f, 0x4003}]}) setrlimit(0x3, &(0x7f0000000180)={0xb66c, 0x100000}) setrlimit(0x7, &(0x7f0000000100)={0x164, 0x3d}) setrlimit(0x3, &(0x7f0000000000)={0x1791, 0x100000}) setrlimit(0x3, &(0x7f0000000040)={0x100000, 0x100000}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x1000e, &(0x7f00000003c0)={@broadcast, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0xffb0, 0x0, 0x1, 0xfc}}}}}) 298.896236ms ago: executing program 4 (id=539): ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0xa6a3, 0x84, 0x0, 0x8}, {0xb1, 0x10, 0x2, 0x7}, {0x16, 0x7, 0x7f, 0x400f}]}) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000580), 0x40, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) pwritev(r0, &(0x7f0000000080)=[{&(0x7f00000001c0)="19000000000000000000e900009cc608c4c01e980cbbefb86c6e49cd", 0x1c}], 0x1, 0x1) r1 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$WSMOUSEIO_SRES(r1, 0x80045721, &(0x7f0000000040)=0x8) sysctl$kern(0x0, 0x0, &(0x7f00000002c0)="741e5c96840caf00000000000504000cce20095d8a6acf00537ac20ea10385980a64bc83bd49e750b8baf5b680b453a6058c193b831a9bdd0e9640c634", &(0x7f0000000080)=0x3d, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) fchflags(r0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000bc0)=ANY=[]) r2 = socket$inet(0x2, 0x2, 0x0) close(r2) setsockopt$inet_opts(r2, 0x0, 0x200000000000c, 0x0, 0x0) ioctl$FIONBIO(r2, 0x8004667e, &(0x7f0000000000)=0x40) 153.984746ms ago: executing program 3 (id=540): pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r0, &(0x7f00000000c0), 0x3) 150.432839ms ago: executing program 4 (id=541): open$dir(&(0x7f0000000080)='./file0\x00', 0xae828e137847f62, 0x0) setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) truncate(&(0x7f00000000c0)='./file0\x00', 0x5ffffffffd) truncate(&(0x7f00000000c0)='./file0\x00', 0x6000000000) sysctl$net_inet_udp(&(0x7f0000000000)={0x4, 0x2, 0x11, 0x2}, 0x4, 0x0, 0x0, 0x0, 0x0) 149.785308ms ago: executing program 3 (id=542): r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0xae828e137847f62, 0x0) setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) ftruncate(r0, 0x40000000007) mknod(0x0, 0x2000, 0x3200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000000880)={&(0x7f0000000000)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000480)=""/253, 0xfd}], 0x1, 0x0}, 0x6}, 0x10, 0x40, 0x0) close(r1) r2 = socket$unix(0x1, 0x5, 0x0) r3 = dup2(r1, r1) bind$unix(r2, &(0x7f0000000200)=@file={0xd570d0466b6018f, './file0\x00'}, 0xa) listen(r2, 0x0) execve(0x0, 0x0, 0x0) accept$inet6(r3, 0x0, 0x0) r4 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) preadv(r4, &(0x7f00000004c0)=[{&(0x7f00000000c0)=""/99, 0xfffffd23}], 0x20, 0x0) truncate(&(0x7f00000000c0)='./file0\x00', 0x6000000000) connect(0xffffffffffffff9c, &(0x7f0000000080)=@in={0x2, 0x0}, 0xc) 146.47499ms ago: executing program 0 (id=543): sysctl$net_inet_tcp(&(0x7f0000000000)={0x4, 0x2, 0x6, 0x16}, 0x4, &(0x7f00000000c0)="1d8a0ec5a7581c71e01884aace77a7188a02f8e0ffa9d2d5d220258c8a437f1ab16f329105903e508b8048ee3efa0ea4d670f15432fac46f79ddb74fc2ab4c7a6a7851d5a050a8e34ab6bdb9e27b424df623ffeca215bb3cd1c729a34b9d9b79e2f62f8300c88ccea0ea3e3487355009fe39ffa4842285b4ce9af652aa3bc49d58448d1cae7e46d84f9ed252b8", &(0x7f0000000040)=0x8d, &(0x7f0000000180)="6e9350c800ea32b17256a10b58c2eb836fe6d9541062154de30fabb29756", 0x1e) openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x10021, 0x0) select(0x40, &(0x7f0000000300)={0xfffffffffffffff8, 0x5, 0x2, 0xbf, 0x5, 0x10000, 0x9, 0x101}, &(0x7f0000000340)={0x2, 0x4000000000000001, 0x80000000002, 0x75a, 0x8, 0x7c, 0x30886671, 0x3485}, &(0x7f0000000380)={0x9, 0x2, 0xffff, 0x5, 0x100, 0x5, 0xb682, 0xded}, 0x0) 146.293998ms ago: executing program 0 (id=544): sysctl$net_inet6_ip6(&(0x7f0000000000)={0x4, 0x18, 0x29, 0x36}, 0x4, &(0x7f00000000c0)="12eefd97010c182c5f368bfaa121089b", &(0x7f0000000100)=0x10, &(0x7f0000000180)="0ca53ea927f7cf6d8027860568a706fddd", 0x11) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = open(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x2010, r1, 0x80000000000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) recvmmsg(r0, &(0x7f0000000080)={&(0x7f0000000100)={&(0x7f0000000240)=@un=@file={0x0, ""/529}, 0x213, 0x0, 0x0, 0x0}}, 0x3, 0x0, 0x0) r2 = getpgrp() ktrace(&(0x7f0000000040)='./file0\x00', 0x1, 0x10, r2) select(0x40, &(0x7f00000000c0)={0x8000000000000000, 0x3, 0x3, 0x8000000005, 0x4, 0xffffffffffffffff, 0xc, 0x3ff}, 0x0, 0x0, 0x0) 145.250925ms ago: executing program 1 (id=545): ioctl$TIOCSETAW(0xffffffffffffffff, 0x802c7415, &(0x7f0000000000)={0x7, 0x7, 0x0, 0x7, "d8f8824298e03c2eb84ee08ac4b02ea554945a78", 0xfffffffa, 0x4}) r0 = openat$tty(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) ioctl$TIOCFLUSH(r0, 0x80047410, &(0x7f0000000080)=0x1) ioctl$FIONREAD(r0, 0x4004667f, &(0x7f00000000c0)) ioctl$FIONREAD(r0, 0x4004667f, &(0x7f0000000100)) ioctl$TIOCGTSTAMP(r0, 0x4010745b, &(0x7f0000000140)) fsync(r0) r1 = semget(0x3, 0x3, 0x5) r2 = geteuid() getgroups(0x5, &(0x7f0000000180)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff]) getsockopt$SO_PEERCRED(r0, 0xffff, 0x1022, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0xc) semctl$IPC_SET(r1, 0x0, 0x1, &(0x7f0000000200)={{0x1, r2, r3, 0xffffffffffffffff, r4, 0x102, 0x7}, 0xda34, 0x5, 0x7}) ioctl$FIONREAD(r0, 0x4004667f, 0x0) close(r0) r5 = socket$unix(0x1, 0x2, 0x0) sendmsg(r5, &(0x7f0000000440)={&(0x7f0000000280)=@in={0x2, 0x3}, 0xc, &(0x7f00000003c0)=[{&(0x7f00000002c0)="b1d094c5db735c05222182a1bbdaeebc8b69e988ede13ad81483ee0b9b555dfb872487a25df33c655a7aa28a29445e5e19de0dd5e509c706dcb7d88a2d041e9d360e3b9ffe69d12e38373c99d85911471228ce5cfc06fb12ec4d9afc42d28adb", 0x60}, {&(0x7f0000000340)="7bd648b16281a8ab3cc92e7809ca0166e4c0c2dcb789b67f08d1dec93371947af4296c1e3929b20dcda0ef43339329260751ffcbee29e1e763b2b381938111e6597316a535a0b16ae4bc25d72b37f65c6bf759dc3bf45829ca809bdee42e00d639b8f1b2acc6dbfc24c588d234a843b280cf506a68e885d1bfc1e9f0714a4059", 0x80}], 0x2, &(0x7f0000000400)}, 0xc) semctl$GETPID(r1, 0x1, 0x4, &(0x7f0000000480)=""/179) r6 = open$dir(&(0x7f0000000540)='./file0\x00', 0x8000, 0x5) openat(r6, &(0x7f0000000580)='./file0\x00', 0x20000, 0x0) r7 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f00000005c0), 0x80, 0x0) fcntl$getflags(r5, 0x1) fcntl$getown(r7, 0x5) semctl$GETVAL(r1, 0x3, 0x5, &(0x7f0000000600)=""/56) r8 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000640), 0x10780, 0x0) ioctl$WSDISPLAYIO_SMODE(r8, 0x8004574c, &(0x7f0000000680)=0x2) fcntl$getown(r0, 0x5) close(r7) ioctl$FIOASYNC(r6, 0x8004667d, &(0x7f00000006c0)=0x68f) r9 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000700), 0x400, 0x0) ioctl$KDDISABIO(r9, 0x20004b3d) 838.901µs ago: executing program 0 (id=546): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000000)={0x6, &(0x7f0000000080)=[{0x8, 0x9, 0x48, 0x3}, {0x68, 0x9, 0x6, 0x7}, {0x800d, 0x36, 0x5, 0xfffffffd}, {0x7f, 0x44, 0x1, 0x4}, {0x6, 0x2, 0x3, 0x7}, {0x7, 0x7, 0x3, 0xf}]}) r1 = socket(0x1, 0x5, 0x0) getsockopt$sock_int(r1, 0xffff, 0x1021, 0x0, 0x0) write(r0, &(0x7f0000000200)="d81ad3d20cf7eb4e9be33bbd1a30", 0xe) munmap(&(0x7f0000ffb000/0x3000)=nil, 0xffffffffffffffff) r2 = openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$BIOCFLUSH(r2, 0x20004268) openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) (async) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) (async) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000000)={0x6, &(0x7f0000000080)=[{0x8, 0x9, 0x48, 0x3}, {0x68, 0x9, 0x6, 0x7}, {0x800d, 0x36, 0x5, 0xfffffffd}, {0x7f, 0x44, 0x1, 0x4}, {0x6, 0x2, 0x3, 0x7}, {0x7, 0x7, 0x3, 0xf}]}) (async) socket(0x1, 0x5, 0x0) (async) getsockopt$sock_int(r1, 0xffff, 0x1021, 0x0, 0x0) (async) write(r0, &(0x7f0000000200)="d81ad3d20cf7eb4e9be33bbd1a30", 0xe) (async) munmap(&(0x7f0000ffb000/0x3000)=nil, 0xffffffffffffffff) (async) openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) (async) ioctl$BIOCFLUSH(r2, 0x20004268) (async) 593.455µs ago: executing program 4 (id=547): sysctl$kern(&(0x7f0000000000), 0x2, &(0x7f0000000080)="71f91e3471ac0058bc5a91501d94a34b8e5f84cc42c3fbe6edf28f03055a7b8379c80000ff7f000000000000000000", &(0x7f0000000040)=0x2f, 0x0, 0x0) openat$wsmouse(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r1, 0x0, 0x200000000000b, &(0x7f0000000080)='\x00', 0x1) setsockopt$inet_opts(r1, 0x0, 0x9, &(0x7f0000001140)="ea0000001e00acdf192a459f", 0xc) unveil(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='r\x00') unveil(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000300)='W\x00') fchdir(r0) rename(&(0x7f0000000000)='./file0\x00', 0x0) r2 = socket(0x18, 0x3, 0x0) setsockopt(r2, 0x1000000029, 0x24, 0x0, 0x0) truncate(&(0x7f0000000140)='./file0\x00', 0xffffffffffffff81) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) readv(r3, &(0x7f0000000040)=[{&(0x7f0000000240)=""/193, 0xfffffdf0}], 0x1) r5 = socket(0x2, 0x2, 0x0) ioctl$FIONREAD(r5, 0xc020699e, &(0x7f00000001c0)) ioctl$KDSETLED(r4, 0x20004b42, &(0x7f0000000080)=0x3) r6 = socket(0x18, 0x3, 0x0) getsockopt(r6, 0x29, 0x2c, 0x0, 0x0) sysctl$vm(&(0x7f0000000040)={0x6, 0x1}, 0x2, 0x0, 0x0, 0x0, 0x0) munmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0) close(r5) setrlimit(0x0, &(0x7f0000000100)={0x7fffffffffffffff, 0xfffeffffffffff81}) writev(r4, &(0x7f0000000200)=[{&(0x7f0000000100)="19", 0x3a4e1e905c56cdb7}], 0x1) 369.077µs ago: executing program 1 (id=548): mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x205b9a) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIONBIO(r0, 0xc0307004, &(0x7f0000000140)=0x3) msgget(0x3, 0x200) r1 = socket(0x18, 0x2, 0x0) setsockopt(r1, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) 0s ago: executing program 1 (id=549): r0 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r0, 0xffff, 0x1024, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0x2) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) recvmmsg(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=""/100, 0x64}, 0x80003f8d}, 0x10, 0x0, 0x0) r3 = socket$inet(0x18, 0x2, 0x7) r4 = dup(r3) sendto$unix(r4, 0x0, 0x0, 0x0, &(0x7f0000000080)=@file={0x1800, './file0\x00'}, 0xa) (async) readv(0xffffffffffffffff, 0x0, 0x0) munmap(&(0x7f0000001000/0x2000)=nil, 0x2000) (async) r5 = shmget$private(0x0, 0x1000, 0xba9322d5054d6e2e, &(0x7f000000b000/0x1000)=nil) r6 = shmat(r5, &(0x7f0000002000/0x1000)=nil, 0x0) shmctl$IPC_RMID(r5, 0x0) (async) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) (async) shmdt(r6) (async) sendmmsg(r2, &(0x7f0000000080)={0x0}, 0x10, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async, rerun: 32) r7 = socket(0x18, 0x1, 0x0) (rerun: 32) getgroups(0x4, &(0x7f0000000000)=[0x0, r1, r1, r1]) (async) setuid(0xffffffffffffffff) (async) setsockopt(r7, 0x1000000029, 0x35, &(0x7f0000000040)="03000000", 0x4) shmctl$IPC_STAT(r5, 0x2, &(0x7f00000000c0)=""/141) (async) shutdown(r2, 0x2) (async) syz_open_pts() (async) r8 = openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000000000), 0x10002, 0x0) pwritev(r8, &(0x7f0000000140)=[{&(0x7f0000000080)="b7a7b5ec5deb0239bb1fd9b903549d1f95b6a532d74d0e897dc96901a37be88479b4063844ed37232781ec88f65a593e1342f985c4a7fceb2e15e9444b8c669e4d19ba9c4e4915120bde390d18376e1c6f775db79a150effc12dc80c079600b213383258f9f91428cd7e995472ac936a87e687ada21e825897eb0d6162d06e415c031c8ff77a7413b8076ba4a0641051c2f1c066df1c2e8078d9e5a63768ad80a6e8952b39e98a274d3269ddd9e72ce6538c29c75c2fb202", 0xb8}], 0x1, 0x9) r9 = dup2(r8, r8) ftruncate(r9, 0x8) (async, rerun: 32) ioctl$VT_GETMODE(r9, 0x40087603, &(0x7f0000000180)) (async, rerun: 32) r10 = openat$wsdisplay(0xffffffffffffff9c, 0x0, 0x200, 0x0) ioctl$WSDISPLAYIO_LSFONT(r10, 0xc058574e, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.57' (ED25519) to the list of known hosts. lo0: can't handle af0 pckbd_enable: command error pckbd_enable: command error 6~vvo+)й9ֳhd5'Nʭv${qq, Xy=òc=1ӪA?<T~NEkЯHOӁ0 3edpckbd_enable: command error OpenBSD/amd64 (Amnesiac) (tty00) login: panic: pool_do_get: shmpl free list modified: page 0xfffffd806b07f000; item addr 0xfffffd806b07f850; offset 0x40=0xfc1ecc81 Starting stack trace... panic(ffffffff833a5f20) at panic+0x1d0 pool_do_get(ffffffff839704c8,1,ffff80003c52e168) at pool_do_get+0x5da pool_get(ffffffff839704c8,1) at pool_get+0x149 shmget_allocate_segment(ffff80003a4ce2b8,ffff80003c52e3c0,a0,ffff80003c52e310) at shmget_allocate_segment+0x1a7 sys_shmget(ffff80003a4ce2b8,ffff80003c52e3c0,ffff80003c52e310) at sys_shmget+0x1b2 syscall(ffff80003c52e3c0) at syscall+0xb08 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x6197041b8a0, count: 250 End of stack trace.