last executing test programs: 1.731489315s ago: executing program 4 (id=5): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x11, 0x3, 0x0) setrlimit(0x8, &(0x7f0000000980)={0x45, 0x62}) r1 = syz_open_pts() sysctl$net_inet_tcp(&(0x7f00000000c0)={0x4, 0x2, 0x6, 0x11}, 0x4, &(0x7f0000001340), 0x0, 0x0, 0x0) socket(0x18, 0x8000, 0xd) close(r1) r2 = socket(0x18, 0x2, 0x0) getsockopt(r2, 0x29, 0x37, 0x0, 0x0) r3 = syz_open_pts() ioctl$TIOCGETA(r3, 0x402c7413, &(0x7f0000000000)) ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f00000000c0)={0x7f0, 0x8ed, 0x9, 0x160350f, "cc14ee0d2100caa26a364fa8a325850d1ec100", 0x200003, 0xa}) nanosleep(&(0x7f0000000040)={0x0, 0x164d8c86}, 0x0) unveil(0x0, &(0x7f0000000100)='r\x00') writev(r1, &(0x7f0000000640)=[{&(0x7f0000000040)="b0ebe12b6270d7a763078447812500e969ad3b21064715d724d75935195b729932fa50fefadc19a9b4c589d415948867bf3ae79ff88b5fda95dcadcb681ab7cb30a3e8d282ba37a572f8a44ca5191b9980d051ee95560778f573af4b13046927cbfbbf1f4325c2bf3d7c7ab2d0e28aad100a", 0x72}], 0x1) setsockopt(r0, 0x11, 0x3, &(0x7f0000000340)="81000170", 0x4) 1.480614215s ago: executing program 4 (id=9): select(0x40, &(0x7f0000000940)={0x9, 0xfffffffffffffff7, 0x9, 0x7f, 0x2638, 0xe6fc, 0x4, 0xffff}, 0x0, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) r0 = socket(0x18, 0x2, 0x0) setsockopt(r0, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) (async, rerun: 64) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (async, rerun: 64) r1 = dup2(r0, r0) sendmmsg(r1, &(0x7f0000000200)={{&(0x7f0000000140)=@in6={0x1c, 0x18, 0x3, 0x7, "ff0100", 0x3}, 0x1c, 0x0, 0x0, 0x0}}, 0x38, 0x8) (async, rerun: 64) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) (rerun: 64) recvfrom$unix(r2, &(0x7f00000001c0)=""/24, 0x18, 0x4ac9fd991a4dc54e, 0x0, 0x0) closefrom(0xffffffffffffffff) (async, rerun: 64) syz_open_pts() (rerun: 64) 1.398048657s ago: executing program 2 (id=15): sysctl$net_inet_ip(&(0x7f0000000200)={0x4, 0x2, 0x0, 0x19}, 0x4, 0x0, 0x0, 0x0, 0x0) setrlimit(0x8, &(0x7f0000000300)={0x46, 0x63}) r0 = syz_open_pts() close(r0) r1 = syz_open_pts() ioctl$TIOCSETAW(r1, 0x802c7415, &(0x7f0000000080)={0x2d757368, 0x3ff, 0x200009, 0xffffffed, "0e6400b76d7639c50400957000c600", 0x5, 0x100000e}) writev(r0, &(0x7f0000000000)=[{&(0x7f00000008c0)="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", 0x57f}], 0x1) 1.377457306s ago: executing program 6 (id=7): r0 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x3e) write(r0, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) (async, rerun: 32) r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x11) (async, rerun: 32) r2 = msgget$private(0x0, 0x1ba) msgsnd(r2, &(0x7f0000000dc0)=ANY=[@ANYRESOCT], 0x401, 0x0) select(0x40, &(0x7f0000000940)={0x9, 0xfffffffffffffff7, 0x9, 0x7f, 0x2638, 0xe6fc, 0x4, 0xffff}, 0x0, 0x0, 0x0) (async) r3 = open$dir(&(0x7f0000000b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x129) (async) unlink(&(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (async, rerun: 64) r4 = kqueue() (rerun: 64) kevent(r0, &(0x7f0000000140)=[{{r3}, 0xfffffffffffffffd, 0xb, 0x4, 0x8, 0x9}], 0x1, &(0x7f0000000180)=[{{r1}, 0xffffffffffffffff, 0x41, 0x215ccd4f37430105, 0x81, 0xfffffffffffffff9}, {{r3}, 0xfffffffffffffff7, 0x83, 0x1, 0xffffffffffffffff, 0xfffffffffffffffe}], 0x9, &(0x7f00000001c0)={0x8, 0x3}) (async, rerun: 64) kevent(r4, &(0x7f00000000c0), 0xd1e9, 0x0, 0x10000, 0x0) (rerun: 64) sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b100050400000000000008000101000000000000cea1fea7fef96ecfc73fd3357ae27caa0416fa4f376336acf00b7804be781e4991a74228", 0x38, 0x0, 0x0, 0x0) sysctl$vm(&(0x7f0000000100)={0x2, 0xc}, 0x2, &(0x7f0000000380), 0x0, 0x0, 0x0) syz_emit_ethernet(0x1000e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd60db090000280000fed38d5ba80b9e61470c535a98000000ff020000000000000000000000000001"]) (async, rerun: 64) syz_open_pts() (async, rerun: 64) sysctl$net_inet_tcp(&(0x7f0000000040)={0x4, 0x2, 0x6, 0x9}, 0x4, &(0x7f0000000540)="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", &(0x7f00000002c0)=0x210, 0x0, 0x0) (async) select(0x40, &(0x7f0000000200)={0x5, 0xfffffffffffffffa, 0x368, 0x6e1, 0x400, 0xfffffffffffffffa, 0x8, 0xfffffffffffffff7}, &(0x7f0000000240)={0x6, 0x39c7, 0x364, 0x4, 0x0, 0x1, 0x7, 0xc}, &(0x7f0000000280)={0x100, 0x2, 0x80000000000, 0x1ff, 0x520f57fe, 0x5, 0x1, 0x7}, &(0x7f0000000340)={0x3c, 0x9}) (async) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) (async, rerun: 64) r5 = socket(0x18, 0x2, 0x0) (rerun: 64) ioctl$FIONREAD(r5, 0x8020691f, &(0x7f00000001c0)) (async) munmap(&(0x7f000030e000/0x2000)=nil, 0x2000) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xd) 1.162927707s ago: executing program 5 (id=18): r0 = openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) ioctl$WSKBDIO_GETBELL(r0, 0x40105704, &(0x7f0000000040)) fstatat(r0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2) getresgid(&(0x7f0000000140)=0x0, &(0x7f0000000180), &(0x7f00000001c0)=0x0) fchown(r0, r1, r3) setresgid(r4, r3, r2) ioctl$BIOCVERSION(r0, 0x40044271, &(0x7f0000000200)) ioctl$WSKBDIO_SETBELL(r0, 0x80105703, &(0x7f0000000240)={0xff, 0x1, 0xfffffffd, 0x6}) r5 = openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) setgid(r3) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4) ioctl$WSKBDIO_SETBELL(r5, 0x80105703, &(0x7f00000002c0)={0x9, 0x7, 0xfffffbff, 0x81}) r6 = getuid() fchown(r5, r6, r4) ioctl$WSDISPLAYIO_DELSCREEN(r5, 0x80085754, &(0x7f0000000300)={0x6, 0x7}) ioctl$DRM_IOCTL_VERSION(r5, 0xc0406400, &(0x7f0000000580)={0x0, 0x8, 0x40008000, 0x5c, &(0x7f0000000340)=""/92, 0x86, &(0x7f00000003c0)=""/134, 0xd6, &(0x7f0000000480)=""/214}) ioctl$WSKBDIO_SETDEFAULTKEYREPEAT(r5, 0x800c5709, &(0x7f00000005c0)={0xfffffff8, 0x5, 0x2}) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000600)={0x0, 0x12b0, 0x7, 0x7, 0x4, 0x3}) ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000640)=r7) r8 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000680), 0xdf77509051922303, 0x0) ioctl$WSKBDIO_BELL(r8, 0x20005701) r9 = openat$pf(0xffffffffffffff9c, &(0x7f00000006c0), 0x40, 0x0) ioctl$DIOCGETQUEUE(r9, 0xc148445f, &(0x7f0000000700)={0xdb1, 0x1, {'\x00', './file0\x00', './file0\x00', './file0\x00', {{0x6, 0x3}, {0x1000, 0x8}}, {{0x2, 0x4ea7}, {0x0, 0x9}, 0xd}, {{0x5, 0x8000}, {0x3}}, {0x3ff, 0x8, 0x5, 0x200}, 0x0, 0x4, 0x7, 0x3, 0x9}}) lstat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)) ioctl$VT_GETSTATE(r5, 0x40067664, &(0x7f0000000940)) getresuid(&(0x7f0000000980), &(0x7f00000009c0), &(0x7f0000000a00)=0x0) seteuid(r10) ioctl$WSKBDIO_SETBACKLIGHT(r8, 0x800c5712, &(0x7f0000000a40)={0x9, 0x7}) ioctl$WSKBDIO_GETDEFAULTBELL(r0, 0x40105706, &(0x7f0000000a80)) ioctl$WSKBDIO_COMPLEXBELL(r0, 0x80105702, &(0x7f0000000ac0)={0xc, 0x0, 0x80, 0x595}) 1.15995773s ago: executing program 0 (id=19): r0 = socket$inet(0x2, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x5, 0x1, './file0\x00'}, 0xa) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0xfffffffffffffffd, [{&(0x7f00000c7000/0x3000)=nil, &(0x7f0000ff6000/0x6000)=nil, 0x1}, {&(0x7f00004d7000/0x2000)=nil, &(0x7f0000698000/0x1000)=nil, 0x3}, {&(0x7f00005fd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x1}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff7000/0x3000)=nil, 0x80}, {&(0x7f00007f7000/0x3000)=nil, &(0x7f0000ff1000/0x1000)=nil, 0xc}, {&(0x7f00004f8000/0x2000)=nil, &(0x7f000068e000/0x12000)=nil, 0x2000000000000000}, {&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff2000/0x2000)=nil, 0x7}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000696000/0x2000)=nil, 0xffffffffffffffff}, {&(0x7f000013f000/0x2000)=nil, &(0x7f0000445000/0x3000)=nil, 0xfffffffffffffffd}, {&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000445000/0x4000)=nil, 0x8}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000695000/0x1000)=nil, 0xffffffff}, {&(0x7f00007f8000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x43}, {&(0x7f00000c6000/0x2000)=nil, &(0x7f0000668000/0x4000)=nil}, {&(0x7f000051f000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x4}, {&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffa000/0x6000)=nil}, {&(0x7f0000ff1000/0x1000)=nil, &(0x7f0000010000/0x3000)=nil, 0x1}], './file0\x00', 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdb, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}) close(0x3) r1 = socket(0x18, 0x2, 0x0) getsockopt(r1, 0x29, 0x2, 0x0, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x9, &(0x7f0000000240)="ea00000100000000", 0xc) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setsockopt$inet_opts(r0, 0x0, 0x200000000000b, &(0x7f0000000080)='\x00', 0x1) setrlimit(0x8, &(0x7f0000000980)={0x47, 0x62}) ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f00000000c0)={0x100, 0x1ff, 0x81, 0x64a, "cc14ee0d2100caa26a364fa8a325850d1efb1e00", 0xa0a, 0x9}) r3 = syz_open_pts() close(r3) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0x2, 0x2, 0xffffffff}, 0x10) getrusage(0xffffffffffffffff, &(0x7f0000000cc0)) syz_open_pts() clock_getres(0x2, &(0x7f0000000000)) unveil(&(0x7f0000000040)='./file0\x00', &(0x7f0000000340)='r\x00') r4 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x2, 0x0) ioctl$TIOCSETA(r3, 0x802c7414, &(0x7f0000000100)={0x920f, 0x9, 0xffffdf7f, 0xffffffd0, "08954c1cfabb0af609cad05d71e47c3785000200", 0x3, 0x100}) ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, &(0x7f00000000c0)={0xa, 0x88000148, {[0x8, 0x40, 0x6, 0x6, 0x3, 0x8000, 0x6, 0x40000000001, 0x7, 0x1, 0x9, 0x91c, 0x8, 0x2000180, 0x0, 0xd3, 0x76, 0xffffffffffffbff7], [0x5438b950, 0x5, 0x1004, 0x5, 0x1, 0x1, 0x9, 0x2, 0xffffffffffffffff, 0x3], [0x6, 0x4, 0x8, 0x8000000008, 0x1, 0x210, 0x1000002], [0x100000000, 0x10801, 0x2, 0x5, 0x3], [{0x0, 0x7, 0xfffffbfb, 0x80000000005}, {0x2, 0x925, 0x3, 0x338}, {0x1000, 0x7fffffff, 0x0, 0x5}, {0xb, 0xfffffbff, 0x2, 0x1}, {0x4, 0x3, 0x2, 0x8}, {0x1f, 0x4, 0xffffffff, 0x7}, {0xe4, 0xffffff81, 0x1ff, 0x7ff}, {0x3, 0x10000, 0x8001, 0x5}], {0x52b, 0x4, 0x401, 0x8}, {0x9, 0xffffbfc0, 0x808}}}) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r5 = socket(0x2, 0x2, 0x0) ioctl$FIONREAD(r5, 0xc0206923, &(0x7f00000001c0)) ioctl$TIOCOUTQ(r3, 0x40047473, &(0x7f0000000000)) sysctl$net_inet_tcp(&(0x7f00000000c0)={0x4, 0x2, 0x6, 0x12}, 0x4, 0x0, 0x0, 0x0, 0x0) ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, &(0x7f0000000480)={0x0, 0xb3f, {[0x1, 0x82, 0x8, 0x100200001, 0x6, 0x7, 0x5, 0x4000003, 0x8, 0x2f00, 0x93, 0x7ff, 0x4, 0x200000000002, 0xfffffffffffffffd, 0x2, 0xfffffffffffffffe, 0x400000000120], [0xdfd, 0x80000001, 0xf800000000010000, 0x8, 0x20000000000005e, 0x200000000207b9d, 0x80000000000001fa, 0x0, 0x0, 0x9], [0x400100000001, 0x1, 0x3ffffffe, 0x107, 0x6, 0x5, 0xffffffff00000000], [0x104, 0x1fffffffffb, 0x7ffffffffffffffc, 0x7d, 0xffffffffffffffff, 0x3], [{0x0, 0x0, 0x101, 0x7d05}, {0xfffc, 0x22, 0xefd, 0xfffffdfffffffff9}, {0x4, 0xa, 0x0, 0x80}, {0x3, 0xb7, 0x5, 0xffffbffffffffffb}, {0xfff7, 0x2, 0x7f, 0x4000008}, {0x0, 0x5, 0x9, 0x2000000000000002}, {0x0, 0x4000000, 0xfffffff9}, {0x0, 0x4, 0x0, 0x8}], {0x1, 0xfffffffb, 0x7, 0x200000003}, {0xde80, 0x1, 0x6d5, 0x1}}}) writev(r3, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) dup3(0xffffffffffffff9c, r4, 0x10000) 1.15783378s ago: executing program 1 (id=20): symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') unveil(&(0x7f00000000c0)='./file0/file0/..\x00', &(0x7f0000000100)='r\x00') r0 = open$dir(&(0x7f0000000180)='./file0\x00', 0x40000, 0x21) mkdirat(r0, &(0x7f00000001c0)='./file0/file0\x00', 0x0) symlink(&(0x7f0000000300)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000d80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000fc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') symlink(&(0x7f0000000300)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000d80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') symlink(&(0x7f0000000ec0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000440)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') open$dir(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0xe3) open$dir(&(0x7f0000000b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x11) rename(&(0x7f00000000c0)='.\x00', 0x0) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') (async) unveil(&(0x7f00000000c0)='./file0/file0/..\x00', &(0x7f0000000100)='r\x00') (async) open$dir(&(0x7f0000000180)='./file0\x00', 0x40000, 0x21) (async) mkdirat(r0, &(0x7f00000001c0)='./file0/file0\x00', 0x0) (async) symlink(&(0x7f0000000300)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000d80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) rename(&(0x7f0000000fc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) symlink(&(0x7f0000000300)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000d80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) symlink(&(0x7f0000000ec0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000440)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) open$dir(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0xe3) (async) open$dir(&(0x7f0000000b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x11) (async) rename(&(0x7f00000000c0)='.\x00', 0x0) (async) 1.154904651s ago: executing program 5 (id=21): setrlimit(0x8, &(0x7f0000000980)={0x42, 0x65}) r0 = syz_open_pts() r1 = socket(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0xffff, 0x1, &(0x7f0000000280)=0x3, 0x4) sysctl$hw(&(0x7f00000000c0)={0x6, 0x12}, 0x2, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0xffff, 0x8, &(0x7f00000000c0)=0x4, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sysctl$kern(&(0x7f00000000c0)={0x1, 0x4e}, 0x3, &(0x7f0000000100)="71f95f84cf71b59c7afec37582", &(0x7f0000000080)=0x2, 0x0, 0x37) shutdown(r1, 0x1) close(r0) r2 = syz_open_pts() ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f0000000140)={0xcda9, 0x9429, 0x6fab, 0xfff7ff9f, "08005c47006505009c67081c0000110100", 0xf, 0xffff}) writev(r0, &(0x7f00000004c0), 0x0) sysctl$net_inet_ah(&(0x7f0000000000)={0x4, 0x2, 0x33, 0x923d4db53c092209}, 0x4, &(0x7f0000000180)="41e3b9ddd1885d73e0eca58f6d0741406df7e7cd0fd61c98b327e220b6271a4b1b73f2a5ce704d5597583a745fc0bf3230fdfc9ff23af02cfe7fced56752ae2437550b", &(0x7f0000000200)=0x43, &(0x7f00000002c0)="308583f1eabf77d4ad3d3bf70451d63661e6d697dc84771268305f454bc05b732d6c34509a95360e378142d89b51c20cc84d249c6b2e4ab0a5f75ad45be82908c7e74d9e3baaa4c753967777e24a1a2dbdf72c041c", 0x55) 1.043636863s ago: executing program 0 (id=22): ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000040)={0x3, &(0x7f00000000c0)=[{0x0, 0x20}, {0x3, 0x0, 0x0, 0x49}, {0x81, 0x0, 0x0, 0x1}]}) sysctl$kern(&(0x7f0000000000)={0x1, 0x28}, 0x2, &(0x7f0000000140)="493cc3acbd319935502987280a79b86487a289225b21390c72228b03c20c8c8522964f93ef91c6d4e346090ac2efc014d06b9cc15bc81e2da3ecd53e712f010862f65b5c002d2747dff57af7bd7bf8d021523db1aa1076c686c768331ea8ed68bda7a0f9b6e6c0db72ab632937aa7dba3a40d57079f8511f6106d8a8339a58a1f1", &(0x7f0000000200)=0x81, &(0x7f0000000240)="b2f2dedb82b1a64366d91ccd4251eea71a730c38d07d8e3007c603b56de132848ced205056cae9fce7d9c907c9ae9635153f870f9cb4872ff9fb82c0d4555e3fa3dca80b6b7e2bf9505e3e4d29f919cf3c827ce853d9b33fac6ea96afbc77428358fc785c07796319890c7e8185e9ee9c7b968bec5eac497cff5ab643430caf83452256ed50f080ac45cd05c864ee1ae37d5e74586cdf35647c2bb84e20cc1281889fe44ca257bb97f5144549a4a31823fb0d9150cff35f1010f0f69945ce94b83b9f5", 0xc3) sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xff0a, 0x0, 0x37) sysctl$kern(&(0x7f00000000c0)={0x1, 0x37}, 0x4, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x3, 0x0, 0x2e) 1.042620281s ago: executing program 5 (id=23): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0xe8, 0x0) r1 = fcntl$dupfd(r0, 0x3, r0) fcntl$dupfd(r1, 0xc, r0) r2 = socket$inet(0x2, 0x2, 0x0) getsockopt$inet_opts(r2, 0x0, 0x1, 0x0, 0x0) ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x0, 0x9, {[0xfffffbfffffffffb, 0x2, 0x2, 0x100200000, 0x100000000, 0x7, 0xdf60, 0xfffffffffffffffb, 0x0, 0xffffffffffffffec, 0x93, 0xfffffffffffffff8, 0xffffffffffffffff, 0x200000000002, 0xb76, 0x4, 0xfffffffffffffffe, 0x400000000100], [0x8, 0x81, 0xfffffffffffffffa, 0xff, 0xa, 0x100000000007b98, 0x800, 0x9, 0x20000000000, 0x5], [0xfffffffe, 0x40000000008000, 0x40000000, 0x0, 0xb, 0x11000, 0xffffffff00000000], [0xb, 0x800001ffff7ffffb, 0x2, 0x9, 0xfffffffffffffffe, 0x5], [{0x0, 0x400000, 0x0, 0x7d06}, {0x1, 0x22, 0x5, 0x20000000000000}, {0x4, 0x0, 0xfffefffe, 0x280}, {0x3, 0x80004, 0x5, 0xfffffffffffffff8}, {0x1, 0x2, 0xffff, 0x1}, {0x0, 0x9, 0x9, 0xfffffffffffff281}, {0x5, 0x0, 0xfffffff7, 0xe}, {0xe, 0x100, 0x1, 0xb}], {0x1, 0x800008, 0x80000006, 0x3}, {0xe, 0x6, 0x6d5, 0x6}}}) r3 = kqueue() kevent(r3, &(0x7f0000000080), 0xe4a, 0x0, 0xa9fa, 0x0) 1.042359137s ago: executing program 1 (id=24): r0 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x3e) symlink(0x0, &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r1 = kqueue() close(r1) socket$inet(0x2, 0x1, 0x0) kevent(r1, 0x0, 0x403, 0x0, 0x8000800, 0x0) write(r0, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) bind$unix(r2, &(0x7f0000000140)=@file={0x4, 0x1, './file0\x00'}, 0xa) kevent(0xffffffffffffffff, 0x0, 0x6, 0x0, 0x40000007, &(0x7f0000000240)={0xd07, 0x2}) r3 = socket$inet(0x2, 0x2, 0x0) close(0x3) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r4, 0x0, 0x9, &(0x7f0000000240)="ea00000100000000", 0xc) setsockopt$inet_opts(r3, 0x0, 0x200000000000c, &(0x7f0000000240), 0x0) connect(r2, &(0x7f0000000000)=@un=@file={0x9, 0x1, './file0\x00'}, 0xa) 1.041734147s ago: executing program 0 (id=25): r0 = socket(0x18, 0x2, 0x0) fcntl$setstatus(r0, 0x4, 0x4c) ioctl$FIOASYNC(r0, 0x8004667d, &(0x7f0000000100)) r1 = open(&(0x7f0000000380)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7949) sendmsg$unix(r1, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001980)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0, 0x0, 0x404}, 0x404) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x18, 0x2, 0x80000000, "fe80000400000d00009c180400", 0x3}, 0x1c) sysctl$kern(&(0x7f00000000c0)={0x1, 0x32}, 0x2, &(0x7f0000000000)="006b199b", &(0x7f0000000080)=0x4, 0x0, 0x0) ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x0, 0x0, {[0xfffffbfffffffffe, 0x4, 0x8, 0x100200000, 0x6, 0x7, 0xdf60, 0xfffffffffffffffe, 0x2000000, 0x2f01, 0x93, 0x6, 0xffffffffffffffff, 0x200000000002, 0xf, 0x6, 0xfffffffffffffffe, 0x400000000100], [0xfffffffffffffffe, 0x80000001, 0xfffffffffffffffd, 0x525, 0x5e, 0x200000000207b98, 0x2000000000000000, 0x0, 0x0, 0xcedc], [0x100000001, 0xc000, 0x3ffffffe, 0x6, 0x8001, 0x11000, 0xffffffff08000000], [0x104, 0x1fffffffffb, 0x2, 0x4, 0xfffffffffffffffe, 0x2], [{0x0, 0x0, 0xfffffffa, 0x7d02}, {0x1, 0x22, 0x5, 0xfffffffffffffff9}, {0x4, 0x0, 0xfffffffd, 0x80}, {0x3, 0x0, 0x45, 0xffffffffffffffff}, {0x0, 0x2, 0x81, 0x8}, {0xfffd, 0x9, 0x9, 0x2000000000000002}, {0x0, 0x0, 0xfffffff9}, {0x0, 0x103, 0x0, 0x8}], {0x1, 0x81, 0x1, 0xffffffffffffffff}, {0xfbfe, 0x2, 0x6d9, 0x3}}}) r2 = socket(0x2, 0x2, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000080)=@file={0x0, 0x1, './file0\x00'}, 0xa, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xa) connect$inet(r2, &(0x7f0000000a00)={0x10, 0x2, 0x2, 0xfffffffd}, 0x10) sendmmsg(r2, &(0x7f0000000500)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x20}}, 0x38, 0x400) sysctl$kern(&(0x7f00000000c0)={0x1, 0x44}, 0x2, &(0x7f0000000100)='\x00\x00\x00', &(0x7f0000000080)=0x3, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x97) rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r3 = syz_open_pts() socket$inet6(0x18, 0x1, 0x6) poll(&(0x7f0000000ac0), 0x20000000000000c7, 0x887f) unveil(0x0, &(0x7f0000000240)='x\x00') ioctl$TIOCSETA(r3, 0x802c7414, &(0x7f0000000040)={0x9530, 0x8001, 0x0, 0x81f, "8091d4fd5128bdf62a4a5cded2fb1787ff40a168", 0xe164, 0x5}) minherit(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3) 1.040189952s ago: executing program 5 (id=26): r0 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) accept$unix(0xffffffffffffff9c, &(0x7f0000000280)=@abs, &(0x7f00000002c0)=0x8) fcntl$lock(r0, 0x9, &(0x7f0000000000)={0x1, 0x1, 0x88, 0x300100001}) getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000000040)={0x0}, &(0x7f0000000100)=0xc) fcntl$lock(r0, 0x9, &(0x7f0000000140)={0x2, 0x1, 0x5, 0x3, r1}) ioctl$DIOCCLRSTATES(r0, 0x0, &(0x7f0000000180)={{0x0, 0x7, 0x2}, 0x2, '\x00', 0x10001, {@any={'\x00', 0x0, 0x5, 0x6}, [0xe59e, 0x5], 0x7, 0x7, 0x8}, {@addrmask={@v4=@remote={0xac, 0x14, 0x0}, @v4=@broadcast, 0x0, 0x0, 0x3}, [0x2, 0x2], 0x34, 0x5, 0x5}, './file0\x00', './file0\x00', 0x10001, 0x10}) openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x10091, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x10091, 0x0) unveil(0x0, &(0x7f0000000640)='w\x00') 903.166146ms ago: executing program 1 (id=27): ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r0 = socket(0x18, 0x1, 0x0) ioctl$FIONREAD(r0, 0x802069db, &(0x7f00000001c0)) symlink(&(0x7f0000000300)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000d80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') sysctl$net_inet_tcp(0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)="052b8b3eb86181dd28002e78f4aa018fc590fdc9d1d76c7177b5e126f6147e53c7ee6d15e0d22c88d7365ca82ae9c43e68bd017db2593395bfab067aaf9e720c3dc5f803cfc2b0663b109be872bed831a1cf404a1d114646692bd8fe12f15785aab8392ea35d81aae6fc864261cae5af3fd180d83fa2d86d859894fc7c", 0x7d) getresuid(&(0x7f0000000180), &(0x7f00000001c0), 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$pci(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) open(&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8901, 0x80) openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x8, 0x0) r4 = dup3(r3, r2, 0x0) clock_getres(0x4, 0xfffffffffffffffe) poll(&(0x7f0000001640)=[{r1, 0x4}], 0x1, 0x0) getsockopt$SO_PEERCRED(r4, 0xffff, 0x1022, &(0x7f0000000000), 0xc) symlink(&(0x7f0000000300)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000440)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r5 = socket(0x18, 0x2, 0x0) setsockopt(r5, 0x1000000000029, 0xb, &(0x7f0000003680)='\x00\x00\x00\x00', 0x4) open(&(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x400, 0x0) setsockopt(r5, 0x1000000029, 0xd, &(0x7f00000003c0), 0x0) open$dir(&(0x7f0000000080)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xf02, 0x186) open$dir(&(0x7f0000000b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x11) rename(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 902.833966ms ago: executing program 2 (id=28): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x200000000000b, &(0x7f0000000080)='\x00', 0x1) setsockopt$inet_opts(r0, 0x0, 0x200000000000c, &(0x7f0000000240)="ea10000000000020", 0x8) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x8, 0x0) ioctl$WSKBDIO_COMPLEXBELL(r2, 0x80105702, &(0x7f0000000240)={0xfffffc01, 0x0, 0x80, 0x8}) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r3 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r3, 0x80146952, &(0x7f00000001c0)) ftruncate(r1, 0xb) setrlimit(0x1, 0xfffffffffffffffe) msync(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3) 901.577091ms ago: executing program 1 (id=29): openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000240), 0x8000, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x9810, 0xffffffffffffffff, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) r0 = socket(0x18, 0x1, 0x0) r1 = dup(r0) ioctl$FIONREAD(r0, 0xc0106924, &(0x7f00000001c0)) ioctl$FIONREAD(r1, 0x80206997, &(0x7f0000000100)) setrlimit(0x8, &(0x7f0000000980)={0x8, 0x54}) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)="76e5eac907f9ccf7a251ceddcec7d6aa45cffe2c63a56077123a276d3ba4e9d17eb3eb5db12a3783a8e0620d357de1fe04fa9465b5bd1286e9624dec06a00c222f", 0x25}], 0x1) r2 = syz_open_pts() r3 = syz_open_pts() ioctl$TIOCSETA(r3, 0x802c7414, &(0x7f0000000300)={0x83, 0x1, 0xfbfffffe, 0xfffffe5b, "d76c1f000000000000000000000073e226c00080", 0x800, 0x7}) fcntl$lock(0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffe, 0x17fdffffffffc}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) syz_open_pts() ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f0000000000)={0xf66d, 0x9, 0x0, 0x5effff5f, "9cdc452ecd33040000000000000700", 0x8, 0x5}) rename(&(0x7f0000000100)='./file0\x00', 0x0) mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1) sysctl$hw(&(0x7f0000000180)={0x6, 0x15}, 0x2, &(0x7f0000000300)="e5822d7a5c9ce21536c808815529247db00bae3f848dec405b1711c46234ac4c7f49d3e658d7ee763845ff3b23107debbf0141a24641c3e7c76879ec07b009e527f17fff5e04cc29371a90713dc1cf8a54ab8adfa8bb39e60bc71abfcab4afc680502c7404242aed1b1fbad6e48bfdda8b40d4c2ed57ffdbed924236ab7d6c1f1c9b75f7e47389588d84e18f8810e0d3473d5dede99cb0d142f2ac7ed61d4fe09a77d574c78cda429c942fce85d0e7dda956d8f46816ede0c2f016d46d8cddb47da8922d614e603d597b2f", &(0x7f0000000400)=0xcb, &(0x7f0000000440)="9eeb0d69bed2e650d2caf92fce401b1e95684e80822de279baf0ba8d86349a5a93b56d53432c979c79060b93860c41fb9a0a1b18039694d9e9a3996840e2754eb6f9cf5158dd895cfb418b3af328c8a77d0f9b5d618f888b67408ea77ee59c42bdf782c9eee4f465b846760e1e172eb60fc2895b9e3a324aaa78b6d982e315c2e6f95087a7ee66a0ea68c165cbef9015348c50faf54cffb1a6ff3549f4699e8528fe79bc7ad52d5cbe6c5f8f083aa82d064d1bcead0c82337134ec60dcf9bf94adbb113520352319a372f038464c47e52deb13106f9ebbac62d07b9fb71facf017d850a4eacdf9b6e5d37d3fd2e2e2c930e4cd", 0xf3) mprotect(&(0x7f000074a000/0x1000)=nil, 0x1000, 0x1) symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='.\x00') r4 = semget$private(0x0, 0xe, 0x790) fcntl$lock(0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x3, 0x2, 0x1, 0x100000000000000}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x3d}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sysctl$net_pipex(&(0x7f00000000c0)={0x4, 0x23, 0x2}, 0x3, 0x0, 0x0, 0x0, 0x0) semop(r4, &(0x7f0000000080)=[{0x1, 0x5}, {0x1, 0xfffc, 0x1800}, {0x1, 0x7, 0x1800}, {0x1, 0xfffd, 0x1800}], 0x4) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x4, 0x5012, 0xffffffffffffffff, 0x0) unveil(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='w\x00') 901.211373ms ago: executing program 2 (id=30): r0 = kqueue() fstat(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1024, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x2, 0x3d}, 0x6205, 0x2a3, 0x6, 0x2, 0x400000000000004, r3, r3, 0x40, 0x0, 0x3, 0x0, 0x100000000}) (async) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x1, r2, r1, 0x0, 0x0, 0x3e, 0x0, 0x0, 0xffff}, 0x6205, 0x2a3, 0x0, 0x3, 0x4000000004000004, r3, 0xffffffffffffffff, 0x41, 0x0, 0x80000000}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x3e}, 0x2, 0x0, 0x0, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) sysctl$vm_swapencrypt(&(0x7f00000000c0), 0x3, 0x0, 0x0, 0x0, 0x0) (async) kevent(r0, &(0x7f00000003c0)=[{{r0}, 0xfffffffffffffff6, 0x11, 0x40, 0x808, 0x80}, {{r0}, 0xfffffffffffffff6, 0x60, 0x80000000, 0x40000000e, 0xfffffffffffffffb}], 0x8a8a, 0x0, 0xc0000000, 0x0) sysctl$kern(&(0x7f0000000000)={0x1, 0x38}, 0x2, &(0x7f0000000140)="819f37793208ccb83205712bd29a6117f668670f6cd1488d9bb59dfa93eff0ef93b4500453ddc51c43fb74a2f44ac0374582014465be6b41137ffcc580239f6f9de13f3a21a2a323742ea73f677b", &(0x7f00000001c0)=0x4e, &(0x7f0000000200)="c1d2bd8a768c87756bfa78706c4f0e73a60826e963aa6207f2ff823353f640d87f53a261dedb4374b8cde96e4df053fba9c98e2dbf3ea6ea8fd2344a741e6ce3ecd14a79f2d5ce9ab4a4f8dbb4253743ca88abfcc94ee1f6bca8079b77a0dc8aabd22a10b2e375adbcf708154ee4c32b4a77725dd3f16d9657a0a88e72a1b3b53d18bbca9840fdb1d2751b1f6f4a05a145c9a906988e1fcdac46b24a4cf01b41364164fca8b6f0d7318aefa1cba0be49df797b112c1a34a165", 0xb9) 778.664949ms ago: executing program 5 (id=31): pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VMM_IOC_WRITEREGS(r0, 0x82485608, &(0x7f0000000180)={0x5, 0x5, 0x3, {[0x9, 0xc, 0x3, 0xf, 0x3, 0xcb, 0x5, 0x5, 0x1000, 0x2, 0xf8, 0xfffffffffffffffd, 0xfffffffffffffffe, 0x8000000000000000, 0x7, 0x6, 0xb, 0x3], [0xffffffff, 0x6, 0x30000000000000, 0x1ef8, 0x6, 0x7fffffff, 0x813a, 0xaf2, 0x8001, 0x8], [0x2, 0x7, 0xfff, 0xb, 0xe73, 0x4, 0x3], [0x7, 0x8, 0x8, 0x6, 0xda9, 0x6c9f], [{0x8001, 0x0, 0x800, 0x3}, {0x9, 0x0, 0x5674, 0xf7b}, {0x3eb5, 0x800, 0x8, 0x4}, {0x0, 0x8000, 0x9, 0x62}, {0x1ff, 0x20000000, 0xffff, 0x9}, {0x6, 0x4, 0x7, 0x8}, {0x4, 0x9, 0xf, 0x1}, {0x5, 0x6, 0x80, 0x9}], {0x4a3f, 0x8, 0x3}, {0x1, 0x7, 0x3, 0x5}}}) kevent(0xffffffffffffffff, &(0x7f0000000000)=[{{}, 0xfffffffffffffffc, 0xda, 0x13, 0x5, 0x1}], 0x0, 0x0, 0x0, 0x0) sysctl$net_inet6_ip6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket(0x18, 0x1, 0x0) setsockopt(r2, 0x1000000029, 0xc, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) setsockopt(r2, 0x1000000029, 0xc, &(0x7f0000000040)="ebffcbff13b9fd812eaa4e713048e6993192", 0x12) ioctl$DIOCADDQUEUE(r1, 0xc148445d, &(0x7f0000000400)={0x9, 0x10001, {'\x00', './file0\x00', './file0\x00', './file0\x00', {{0x6, 0xbd}, {0x8, 0x80000001}, 0x3}, {{0xe4, 0x8}, {0x8, 0x2}, 0x2}, {{0xd, 0x5}, {0x6, 0x3}, 0x3}, {0x1, 0x3, 0xfffffff7, 0xfffffff4}, 0x0, 0x8, 0xa0, 0x9, 0x100020}}) syz_open_pts() socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r3, 0xffff, 0x1003, 0x0, 0x0) r4 = syz_open_pts() mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) openat$wskbd(0xffffffffffffff9c, 0x0, 0x8000, 0x0) ioctl$TIOCCONS(r4, 0x80047462, &(0x7f0000000000)=0xf) connect$inet6(r0, &(0x7f0000000080)={0x1c, 0x18, 0x1, 0x6, "3eb9248b98d7cf81eebf37b4117e1671", 0x8}, 0x1c) dup2(r0, r1) pselect(0x40, &(0x7f00000000c0)={0x93, 0x6c3, 0x8, 0x9, 0x2, 0x61b8830b, 0x5, 0x1}, 0x0, &(0x7f0000000140)={0xfffffffffffffffb, 0x8, 0x40c, 0x2, 0x400000f26, 0x80006, 0x10, 0x7}, 0x0, 0x0) 774.296225ms ago: executing program 6 (id=32): r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x186) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x2012, r0, 0x0) truncate(&(0x7f0000000100)='./file0\x00', 0x2) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2040, &(0x7f0000003640)={0x9, 0x7}) r1 = kqueue() pipe(&(0x7f0000000080)={0xffffffffffffffff}) ioctl$KDSETRAD(r2, 0x20004b43) kevent(r1, &(0x7f0000000040)=[{{r0}, 0xfffffffffffffffa, 0x2, 0x10, 0x9, 0x100000010000}, {{r0}, 0xfffffffffffffffd, 0x1, 0x0, 0xffffffffffffffff, 0xdb8}], 0x10e4a, 0x0, 0xa9fa, 0x0) pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = getpid() fcntl$setown(r4, 0x6, r5) ioctl$FIOASYNC(r4, 0x8004667d, &(0x7f0000000000)=0x7) sysctl$net_inet_tcp(&(0x7f00000001c0)={0x4, 0x2, 0x6, 0x3}, 0x4, 0xfffffffffffffffe, 0x0, 0x0, 0x0) write(r3, &(0x7f0000000340), 0xd4e688a67930cd) sysctl$net_inet_ah(&(0x7f0000000140), 0x7, 0x0, 0x0, 0x0, 0x9) sysctl$vm(&(0x7f0000000000)={0x2, 0xa}, 0x2, 0x0, 0x0, 0x0, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x186) (async) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x2012, r0, 0x0) (async) truncate(&(0x7f0000000100)='./file0\x00', 0x2) (async) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2040, &(0x7f0000003640)={0x9, 0x7}) (async) kqueue() (async) pipe(&(0x7f0000000080)) (async) ioctl$KDSETRAD(r2, 0x20004b43) (async) kevent(r1, &(0x7f0000000040)=[{{r0}, 0xfffffffffffffffa, 0x2, 0x10, 0x9, 0x100000010000}, {{r0}, 0xfffffffffffffffd, 0x1, 0x0, 0xffffffffffffffff, 0xdb8}], 0x10e4a, 0x0, 0xa9fa, 0x0) (async) pipe(&(0x7f0000000640)) (async) getpid() (async) fcntl$setown(r4, 0x6, r5) (async) ioctl$FIOASYNC(r4, 0x8004667d, &(0x7f0000000000)=0x7) (async) sysctl$net_inet_tcp(&(0x7f00000001c0)={0x4, 0x2, 0x6, 0x3}, 0x4, 0xfffffffffffffffe, 0x0, 0x0, 0x0) (async) write(r3, &(0x7f0000000340), 0xd4e688a67930cd) (async) sysctl$net_inet_ah(&(0x7f0000000140), 0x7, 0x0, 0x0, 0x0, 0x9) (async) sysctl$vm(&(0x7f0000000000)={0x2, 0xa}, 0x2, 0x0, 0x0, 0x0, 0x0) (async) 753.604941ms ago: executing program 2 (id=33): setrlimit(0x8, &(0x7f0000000980)={0x46, 0x62}) r0 = syz_open_pts() close(r0) r1 = syz_open_pts() ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f00000000c0)={0x4000f609, 0x3ff, 0xfffdff82, 0x4000000c, "04f0ee09000407ffe00000000000000a00", 0x0, 0x709e}) setrlimit(0x2, &(0x7f0000000000)={0x60000000, 0x60000000}) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) 752.151528ms ago: executing program 4 (id=34): r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) r1 = getuid() setresuid(0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000340)={{r1, 0x0, 0x0, 0x0, 0xffffffffffffffdb, 0xf56, 0x7, 0x0, 0x400000}, 0x7, 0xffffffffffffffff, 0x0, 0x1, 0x1, 0x4, 0x100000000, 0x20000000, 0x6, 0xffffffff868a2c1a, 0x8}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) shmctl$IPC_STAT(r0, 0x2, 0x0) r2 = shmget(0x0, 0x1000, 0x36e, &(0x7f0000759000/0x1000)=nil) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) sendmmsg(r3, &(0x7f0000001940)={{0x0, 0x0, 0x0, 0x0, 0x0}}, 0xfffffffffffffd52, 0x4) sendto(r3, &(0x7f0000000100)="950597", 0x3, 0x402, 0x0, 0x0) r4 = accept$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, &(0x7f0000000040)=0x8) r5 = getppid() lstat(&(0x7f0000001400)='./file0\x00', &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x9, &(0x7f00000014c0)=[0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0]) sendmsg$unix(r4, &(0x7f0000001540)={&(0x7f0000000080)=@abs={0x3b, 0x1, 0x0, 0x2}, 0x8, &(0x7f00000013c0)=[{&(0x7f00000000c0)="bb32e9e4c3e5ebbcd6c4f9e7d94c85dae9d3e18e0509b0ef5b80fa44450c25dbe7f92b96231c99281ffa03dbf2", 0x2d}, {&(0x7f0000000100)="af14fce4813d2c8f2148fe28b6f54fea324da1c4622af0d708caf62763a1e68431ab96fe72955db2f0eaff65721f5b3f9bb1e7b41ed756bf8d55624a887e5962e9ca552c7516288c4f9aa8", 0x4b}, {&(0x7f00000003c0)="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", 0x1000}], 0x3, &(0x7f0000001500)=[@cred={0x18, 0xffff, 0x0, r5, r6, r7}], 0x18, 0x4}, 0x0) r8 = shmat(r2, &(0x7f0000ffe000/0x1000)=nil, 0x3000) shmctl$IPC_RMID(r2, 0x0) shmget$private(0x0, 0x2000, 0x104, &(0x7f0000ffd000/0x2000)=nil) shmdt(r8) 751.745072ms ago: executing program 1 (id=35): unveil(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='c\x00') openat$wsdisplay(0xffffffffffffff9c, &(0x7f00000000c0), 0x180, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) unveil(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='w\x00') 553.40978ms ago: executing program 7 (id=36): symlink(&(0x7f0000000300)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000d80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc5005601, &(0x7f0000000000)={0x10, 0x0, [{&(0x7f0000347000/0x3000)=nil, &(0x7f0000663000/0x4000)=nil, 0x5}, {&(0x7f00005c9000/0x2000)=nil, &(0x7f0000826000/0x4000)=nil}, {&(0x7f0000060000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x20400000}, {0x0, &(0x7f0000ffb000/0x3000)=nil, 0x1}, {&(0x7f000017c000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil}, {&(0x7f0000049000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x20006}, {0x0, 0x0, 0xfffffffffffffffc}, {&(0x7f0000ff0000/0xf000)=nil, &(0x7f0000131000/0x2000)=nil, 0xfffffffffffffffe}, {&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x10000}, {&(0x7f00004cc000/0x4000)=nil, &(0x7f0000661000/0x3000)=nil, 0x7}, {&(0x7f000062b000/0x2000)=nil, &(0x7f0000706000/0x1000)=nil, 0x14}, {&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil}, {&(0x7f000038f000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x100000000}, {&(0x7f0000795000/0x9000)=nil, 0x0, 0x9bbf}, {&(0x7f00001cf000/0x4000)=nil, &(0x7f0000142000/0x4000)=nil}, {&(0x7f0000573000/0x2000)=nil, &(0x7f000013d000/0x1000)=nil}], './file0\x00', 0x1, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e45, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc]}) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc0e99db6de761f86, 0x0) socket$inet(0x2, 0x3, 0xf) r0 = open$dir(&(0x7f00000001c0)='./file0\x00', 0x2, 0x101) ioctl$FIONREAD(r0, 0xc0106978, &(0x7f0000000140)) open$dir(&(0x7f0000000b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x11) rename(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000005c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') open$dir(&(0x7f0000000b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x0) symlink(&(0x7f0000000300)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000440)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') open$dir(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0xe3) rename(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f00000012c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000180)='./file1\x00') 440.8203ms ago: executing program 4 (id=37): ioctl$DIOCADDQUEUE(0xffffffffffffff9c, 0xc148445d, &(0x7f0000000180)={0x703, 0x5, {'\x00', './file0\x00', './file0\x00', './file0\x00', {{0x4, 0x3}, {0x3, 0x4636}, 0x101}, {{0x8, 0xffff946d}, {0x7, 0x5}, 0x200}, {{0x14, 0x3}, {0x7, 0x8}, 0xe8f}, {0x3, 0x2, 0x101, 0x6}, 0x0, 0x7, 0x3, 0x8, 0xd}}) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x65}) setrlimit(0x8, &(0x7f0000000980)={0xb, 0x54}) r0 = syz_open_pts() ioctl$TIOCSCTTY(r0, 0x20007461) r1 = syz_open_pts() munmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) close(r1) unlinkat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x8) chflags(&(0x7f0000000040)='./file0\x00', 0x0) r2 = syz_open_pts() ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f0000000300)={0x83, 0x1, 0xfbfffffe, 0xfffffe5b, "d76c1f000000000000000000000073e226c00080", 0x800, 0x7}) poll(&(0x7f0000002540)=[{r2, 0x40}], 0x1, 0x7) writev(r1, &(0x7f0000000480)=[{&(0x7f00000004c0)="ce", 0x1}], 0x1) ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000000)={0xf66d, 0x9, 0x0, 0x5effff5f, "9cdc452ecd33040000000000000700", 0x8, 0x5}) setrlimit(0x8, &(0x7f0000000980)={0xb, 0x4e}) r3 = syz_open_pts() close(r3) syz_open_pts() ioctl$TIOCSETA(r3, 0x802c7414, &(0x7f0000000040)={0x0, 0xcf, 0x5ed4e8f5, 0x8, "1bb7e60ab87aa57800000000d0d200000000fd00", 0x40, 0x3}) writev(r3, &(0x7f0000001b00)=[{&(0x7f00000009c0)="b08c67a745c24814ab08652c30a079a3ef720a4551046b74514af9eb5d46c13b72099fbe90ff621f9aa7cb41ce0c17cf260294acd3327607dae9fc53579d093f1aaedbf4a18091f122ae569e11eb5076de6045f7c6fb70d0ef97c5c2d414a3a7d65446339410db551d16091b48dd72a7352ba7d0d56e9983245bee71770c3273da04d63c99f0da4c5433dc20aa07120d0d73", 0x92}], 0x1) r4 = syz_open_pts() close(r1) r5 = syz_open_pts() r6 = semget$private(0x0, 0x2, 0x400) semctl$GETPID(r6, 0x0, 0x4, 0x0) ioctl$TIOCSETA(r5, 0x802c7414, &(0x7f0000000140)={0x2000020a, 0xe, 0x6fab, 0xfff7ff9f, "01c1d8e3006267041c1000050020f59c00", 0x0, 0x4000083c}) writev(r4, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) 438.313394ms ago: executing program 1 (id=38): pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0xe8, 0x0) mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x2, 0x102) ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, &(0x7f00000003c0)={0x6, 0x8009, {[0x3, 0x1, 0x2, 0x5, 0x6, 0x7, 0x4, 0xffffffffffffffff, 0x0, 0x6, 0x93, 0xfffffffffffffff8, 0xffffffffffffffff, 0x200000000002, 0xd, 0x4, 0xffffffffffffffff, 0x400000000100], [0xfffffffffffffffc, 0x80000001, 0xfffffffffffffffa, 0x8, 0x5e, 0x100000000007b98, 0x800, 0x9, 0x0, 0xfffffffffffffffe], [0x20100000001, 0x8000, 0x40000000, 0x0, 0xb, 0x411000, 0xffffffff02000000], [0x9, 0x1fffffffffb, 0x80000001, 0x4000000, 0x5, 0x90000000], [{0x0, 0x3ffe, 0x8, 0x7d06}, {0x9, 0x22, 0x5}, {0x4, 0x0, 0xfffeffff, 0x280}, {0x3, 0x4, 0x2, 0xffffffffffffffff}, {0x9, 0x400, 0x7f, 0x8}, {0x1, 0x9, 0xb, 0x2000000000000000}, {0x5, 0x0, 0xfffffff7, 0xb}, {0xe, 0x100, 0x1, 0xe}], {0x1, 0x8, 0x80200006, 0x3}, {0xfffe, 0x3, 0x6d3, 0x6}}}) r1 = kqueue() kevent(r1, &(0x7f0000000080), 0xe4a, 0x0, 0xa9fa, 0x0) r2 = socket(0x2, 0x2, 0x0) r3 = semget(0x0, 0x0, 0x48) sysctl$net_inet_tcp(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)="2b9bb7", 0x3) r4 = semget$private(0x0, 0x1, 0x102) semctl$GETALL(r4, 0x0, 0x6, &(0x7f0000000280)=""/61) getsockopt$sock_int(r2, 0xffff, 0x21, &(0x7f0000000040), &(0x7f0000000100)=0x4) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/50, 0xfd9f}], 0x2f) openat$audioctl(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) writev(r2, &(0x7f0000000140), 0x0) semctl$GETNCNT(r3, 0x3, 0x3, &(0x7f00000002c0)=""/218) 433.589201ms ago: executing program 4 (id=41): r0 = socket(0x1, 0x5, 0x0) close(r0) setsockopt$sock_int(r0, 0xffff, 0x1004, &(0x7f0000000140)=0x1fffe, 0x4) readv(0xffffffffffffffff, &(0x7f0000000a40)=[{&(0x7f0000000600)=""/251, 0xfb}], 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000000880)={{0x0, 0x37, 0x0, 0x0, 0x0}, 0x7}, 0x38, 0x3040, 0x0) write(r0, &(0x7f0000000200)="24bdfa5d1d2873c63e35348295b299ab09dbd0734449c365d05ba166e2fea9aec43050006123339a346f731573d8d508753f95b7688a858b8cf6bbca32ec975d185cfcadf68ed7796e53e0000400007a20746f313da7dc6c5133407dbcafaea3077475df6575658bc77274869b4cf11d1374cacc8af0e650876593f6a8822b437639678a1cc3702368dc70dcf2429a7e1582005bed8a072a9c3310cdeeb79f221bda2b2cce0d51b12ea84e60e401ed6abbac6c034a7d182a13e31f491b6f62414871", 0x10099) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc0e99db6de761f86, 0x0) r2 = open$dir(&(0x7f00000001c0)='./file0\x00', 0x2, 0x101) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x0, 0x0, 0x0, 0x0, 0x88, 0xc5, 0x48e}, 0x5, 0x8, 0x1, 0x0, 0x100000002, 0x4000000000003, 0x0, 0x40000000000000, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) syz_emit_ethernet(0x10ce, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffff94ea09066dbd86dd60db834410983c0000000000000000000000000000000000ff0200000000000000000000000000012b02"]) ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, &(0x7f00000000c0)={0xa, 0x88000148, {[0x3, 0x40, 0x6, 0x6, 0x3, 0x8000, 0x6, 0x40000000001, 0x7, 0x1, 0x9, 0x91c, 0x0, 0x2000180, 0x0, 0xd3, 0x76, 0xffffffffffffbff8], [0x5438b950, 0x5, 0x1004, 0x5, 0x1, 0x1, 0x9, 0x2, 0xfffffffeffffffff, 0x3], [0x3, 0x4, 0x8, 0x8000000008, 0x10000, 0x210, 0x1000002], [0x100000000, 0x10801, 0x3, 0x5, 0x3], [{0x0, 0x7, 0xfffffbfb, 0x80000000005}, {0x2, 0x925, 0x3, 0x338}, {0x1000, 0x7fffffff, 0x0, 0x5}, {0xb, 0xfffffbff, 0x2, 0x100000000}, {0x4, 0x3, 0x2, 0x8}, {0x1f, 0x24, 0xffffffff, 0x7}, {0xe4, 0xffffff81, 0x801ff, 0x7ff}, {0x3, 0x10000, 0x8001, 0x5}], {0x52c, 0x4, 0x401, 0x8}, {0x9, 0xffffbfc0, 0x805}}}) r3 = open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x186) r4 = kqueue() kevent(r4, &(0x7f0000000000)=[{{r3}, 0xfffffffffffffffc, 0x75, 0x1, 0x40000000000002, 0x7ffb}, {{r3}, 0xfffffffffffffffc, 0x73, 0xc, 0x862, 0xb2fb}], 0x2010, 0x0, 0x2, 0x0) ioctl$FIONREAD(r2, 0xc0106978, &(0x7f0000000140)) recvfrom$unix(r0, &(0x7f0000000000)=""/107, 0x6b, 0x1000, &(0x7f0000000080)=@file={0x88, 0x1, './file0\x00'}, 0xa) ioctl$FIONREAD(0xffffffffffffffff, 0xc028698b, &(0x7f0000000100)) 431.155833ms ago: executing program 2 (id=42): r0 = syz_open_pts() r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x271, 0x0) ppoll(&(0x7f00000000c0)=[{r0, 0x194}, {r1, 0x8}], 0x2, &(0x7f0000000100)={0x9, 0x7b}, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000080)={0x10, 0x2, 0x3, 0xac1402aa}, 0x10) futimens(0xffffffffffffffff, &(0x7f0000001300)=[{0xffffffffffffffff, 0x8}, {0x3, 0x7fffffffffffffff}]) getsockopt(r2, 0x3, 0x5, 0x0, 0x0) sysctl$vm_swapencrypt(&(0x7f0000000040)={0x6, 0x1b, 0x3}, 0x3, 0x0, 0x0, 0x0, 0x0) r3 = socket(0x18, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000040)={0x1c, 0x18, 0x1, 0x5, "00000000000000000000000000000001", 0xc}, 0x1c) connect$inet6(r3, &(0x7f0000001340)={0x1c, 0x18, 0x1, 0x1, "0700001f005430156500000000002000", 0x2}, 0x1c) sendto(r3, 0x0, 0x0, 0x4, &(0x7f00000010c0)=@in6={0x1c, 0x18, 0x3, 0x3, "00000000555da04d00", 0x2000b}, 0x1c) 427.977239ms ago: executing program 2 (id=43): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = getpid() fcntl$setown(r1, 0x6, r2) ioctl$FIOASYNC(r1, 0x8004667d, &(0x7f0000000000)=0x7) write(r0, &(0x7f0000000340), 0xd4e688a67930cd) 427.024331ms ago: executing program 4 (id=44): utimes(&(0x7f00000013c0)='.\x00', &(0x7f0000001400)={{0x1000, 0x2}, {0x3ff, 0x2}}) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) r0 = socket(0x2, 0x8002, 0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) closefrom(r1) (async) socket(0x1, 0x1, 0x0) (async) getsockopt$sock_timeval(r1, 0xffff, 0x1005, 0x0, 0x0) (async) setsid() (async) r2 = syz_open_pts() ioctl$TIOCSETAF(r2, 0x802c7416, &(0x7f0000000000)={0x44000f, 0x1, 0x7018a8c0, 0xcdd8, "5b0113d2200010341001fcc39802000000c91000", 0x6, 0x9}) (async) ioctl$TIOCSETAF(r2, 0x802c7416, &(0x7f0000000040)={0x1b8c, 0x10, 0x6, 0x5, "51d9acb75ce76a23c28b2ae06d6faecbf87d968f", 0x5, 0x80}) (async) ioctl$TIOCSCTTY(r2, 0x20007461) (async) ioctl$TIOCSETAW(r2, 0x802c7415, &(0x7f0000000080)={0xc, 0x9, 0xd835, 0x5, "5ccb008003000000b68ee4ea5ea6525c5e00", 0x15}) 282.270024ms ago: executing program 7 (id=45): socket(0x6, 0xc003, 0x7) 281.311714ms ago: executing program 3 (id=46): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x10, 0x2, 0x3}, 0x10) listen(r0, 0x7fff) setsockopt$sock_int(r0, 0xffff, 0x1, &(0x7f0000000100)=0x7f, 0x4) (async) setsockopt$sock_int(r0, 0xffff, 0x1, &(0x7f0000000100)=0x7f, 0x4) syz_emit_ethernet(0x36, &(0x7f0000000200)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x3d, 0x28, 0x67, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0x0}, @local={0xac, 0x14, 0x0}}, @tcp={{0x3, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x8200, 0x0, 0xfffc}}}}}}) openat$audioctl(0xffffffffffffff9c, &(0x7f00000001c0), 0x200, 0x0) (async) openat$audioctl(0xffffffffffffff9c, &(0x7f00000001c0), 0x200, 0x0) 280.84479ms ago: executing program 7 (id=47): sysctl$net_inet6_icmp6(&(0x7f0000000080)={0x4, 0x18, 0x3a, 0x1}, 0x4, 0x0, 0x0, 0x0, 0x0) kevent(0xffffffffffffffff, &(0x7f0000000040)=[{{}, 0xfffffffffffffff8, 0x6b, 0x11, 0x200000000000004, 0x101}], 0x203, 0x0, 0x0, 0x0) sysctl$vm_swapencrypt(&(0x7f0000000040)={0x6, 0x1b, 0x2}, 0x3, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x9cab835cfdc52675, 0xa2) r1 = socket(0x2, 0x1, 0x0) shutdown(r1, 0x2) shutdown(r1, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0xa011, r0, 0x0) ftruncate(r0, 0x79c8) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x20898, 0x0) r3 = socket$inet6(0x18, 0x4, 0x0) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt(r4, 0x0, 0x4, &(0x7f0000000040)="ffffffff", 0x4) r5 = socket(0x2, 0x1001, 0x0) connect$unix(r5, &(0x7f0000000840)=@file={0x7, 0x0, './file0\x00'}, 0xa) r6 = kqueue1(0x4) ioctl$TIOCNXCL(r2, 0x2000740e) kevent(r6, 0x0, 0x8, 0x0, 0x4, 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x1, 0x2576, 0x3, 0x8, 0x101], 0x5, 0x10000, 0x0, 0xffffffffffffffff}) r8 = socket$unix(0x1, 0x1, 0x0) connect$unix(r8, &(0x7f0000000080)=@file={0x5, 0x1, './file0\x00'}, 0xa) r9 = openat$null(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r10 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0) kevent(r0, &(0x7f0000000100)=[{{r2}, 0xfffffffffffffffb, 0x1, 0x2, 0x5, 0x9}, {{r3}, 0xffffffffffffffff, 0x1, 0x20, 0x4, 0x7fffffff}, {{r4}, 0xfffffffffffffff8, 0x44, 0x1, 0x8, 0x6}, {{r5}, 0xfffffffffffffffe, 0x23, 0x4, 0x3, 0x1}, {{r7}, 0xfffffffffffffffa, 0x3, 0x1, 0x5d}, {{}, 0xfffffffffffffffb, 0x2, 0xf0000000, 0x4, 0xad8}, {{r8}, 0xa, 0x1, 0x8, 0xffffffffffffff27}], 0x5, &(0x7f0000000280)=[{{r9}, 0xfffffffffffffff9, 0xc9, 0xfffff, 0x0, 0x6}, {{}, 0xfffffffffffffff6, 0x90, 0x1, 0x475, 0xff}, {{r10}, 0xfffffffffffffffb, 0x4e, 0xfffff, 0x1}], 0x8, &(0x7f0000000300)={0xff, 0x8000}) sysctl$kern(&(0x7f0000000040)={0x1, 0x3f}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sysctl$net_inet6_ip6(&(0x7f0000000040)={0x4, 0x18, 0x29, 0x7}, 0x4, 0x0, 0x0, 0x0, 0x0) 280.232891ms ago: executing program 3 (id=48): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)) r0 = socket(0x2, 0x400000000002, 0x0) setsockopt(r0, 0x0, 0x4, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="28000000ffff000001"], 0x28}, 0x0) r3 = open(&(0x7f0000000000)='./file0\x00', 0x9cab835cfdc52675, 0xa2) (async) r4 = socket(0x2, 0x4001, 0x0) r5 = fcntl$dupfd(r4, 0x2, 0xffffffffffffffff) closefrom(r5) sysctl$net_inet_icmp(&(0x7f00000000c0)={0x4, 0x2, 0x1, 0x5}, 0x4, 0x0, 0x0, 0x0, 0x0) (async) r6 = getsid(0x0) ktrace(0x0, 0x1, 0x224, r6) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0xa011, r3, 0x0) (async) recvmmsg(r1, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffb}, 0x38, 0x2000, 0x0) (async) recvfrom$unix(r1, &(0x7f0000000180)=""/18, 0x12, 0x3842, 0x0, 0x0) (async) sysctl$net_inet_icmp(&(0x7f0000002600)={0x4, 0x12, 0x1, 0x4}, 0x4, 0x0, 0x0, 0x0, 0x0) r7 = socket$inet(0x2, 0x1, 0x4b) pwritev(r7, &(0x7f0000000700)=[{&(0x7f00000002c0)="3d9fade6d77eaa0c7e3fac59d70793802bd2c6f312da908881144085258f64cbf66db1b5d043e9323bdafdc0eac0377c56f481a4b0c18b4a8ac1b1f33fd6a204b5c5b56cf68e953e57fc61634cf3d5accfed131c94cdadc65b1dd7a7cc99bf9dcb95c9ebb56a78fbdae256ce4feb54745428e78509e93524281d6c686d6f9c7d0b89721f7081a1c559acf18367c4c9575ba019f16d857c5e61cecdd2d94b9566c451096ff8a44552a192284618b5a18b6ac27822c37908ff1c8f6d75d101b97f1c87fe30ac075fa1442a4c349882bc9851f9c86d3a11b2dc1f87", 0xda}, {&(0x7f00000003c0)="487e02a2caf1adc4d6ce762dd601c91030fe4b166528194781fac1d5041fe1733fdf94ce1998a05017020a6a5a", 0x2d}, {&(0x7f0000000400)="31047c52265f5ba11198ad9dddfe4bcbe15559f1718365835059b9641b5c91dce9e63ff931df4c09bfcce8d62a829d03221a3775515750d6f664d458fc9422b2145ec66ddf6394d68fe15df5049e2fb912f7e6bdbdd19f2e33b4e3d0a75d168d7a6118554b6438808f1e6980744a92bc6ceae2d461d4e6d01477646d6c19", 0x7e}, {&(0x7f0000000480)="b0501aa75188de3e3954413ae559382d4dc9e4eb3c6e4315f58a987f20e8792058e66a67d43281fc4406ef4e9851e03e7de56c9b75360559ef803223b510359a420bd09471fa773fdd6fc3ec79c38063e1e1ea45bb64bcf863e1d3e172a11b53892e4a783d85d4024e3dabef80d4b4d594914644ce0acdfdd9152912b835b92f150459d9cf19c2a8e24389ead4dfeff26b527b6af39d997efe7cf72a43dfe5667cf041d7ced4d683722d58128849cb75a5ff7e4c359a115659bebf7c9e88407d53e1b3b52ebec68ceb922b88037e0591ef9c651ac63a12809b5f9da15e76364c9222b883b1e479bebb36f7102d83a5f24657860601347c", 0xf7}, {&(0x7f0000000580)="437d343553f3e941d6560585a75b5f01261f5f59ac81fc6615d0144817737d9151a39e314d0ed91cb6f808d03bf0dc51a77026ec8239bd247c34528a9cfaf71ee9461de83d34b2d20d53217e1f3b7d189d9f8b2380d1184e9442", 0x5a}, {&(0x7f0000000600)="1805361cb470e0874aba3d81033628e93857c4afa0b44cecb1b94e7f54e836291a55efd0d336988a5661ff54bf669284d5fcf6a496888a3672ae318c57097b21224a266dd51f6c62ab8bbd4b44d72daf4b5a1d040698702863681eba328492aba5f9a0035adc987acac1bb65a7667d1c0c182fc3df5d11c7201221fb", 0x7c}, {&(0x7f0000000680)="d6c99756ed991d82af0a0d42c3c475674caa2e393d9bed29578ba684933be93434d378205153a20a6d8c313f8966520af448529885c61b38576d2b5e922ea7db7b0b30b7feba42126e0b476a457864ead7f8d17295efd2574445f496da88973604f0d3acf80586b467e352136fe16cd319bb63789333d8d95427178733e239", 0x7f}], 0x7, 0x6) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x10000) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(r8, 0xc01864c1, &(0x7f0000000080)={0x0, 0x1, 0xffffffffffffffff, 0x0, 0x4}) 279.801294ms ago: executing program 7 (id=49): writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)="76e5eac907f9ccf7a251ceddcec7d6aa45cffe2c63a56077123a276d3ba4e9d17eb3eb5db12a3783a8e0620d357de1fe04fa9465b5bd1286e9624dec06a00c222f", 0x25}], 0x1) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r0 = socket(0x18, 0x2, 0x0) accept(r0, 0x0, &(0x7f0000000000)) (async, rerun: 64) ioctl$FIONREAD(r0, 0xc0206983, &(0x7f00000001c0)) (rerun: 64) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x6, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0x0}, @loopback}, @icmp=@time_exceeded={0xb, 0x0, 0x0, 0x0, 0x8, 0x0, {0x5, 0x4, 0x0, 0x6, 0x0, 0x67, 0x67, 0x61, 0x1, 0x7fff, @rand_addr=0x8, @remote={0xac, 0x14, 0x0}}}}}}}) (async) openat$tty(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) 233.922864ms ago: executing program 3 (id=50): mprotect(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x1) socket(0x2, 0x2, 0x0) (async) r0 = socket(0x2, 0x2, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/194, 0xc2}, 0x2000) (async) recvmsg(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/194, 0xc2}, 0x2000) connect$inet(r0, &(0x7f0000000100)={0x10, 0x2, 0x2, 0xfffffffd}, 0x10) sendmmsg(r0, &(0x7f0000000500)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x20}}, 0x38, 0x400) sendto$inet(r0, &(0x7f0000000140)="4e705294cdfbbf1f18b5f999029ca8bc6311d677b3d4b06025636d4ce18cae95801ae73a8a62dfedd38e695345f44eb3144cd7ceaced72e067027ef79d2bd7ff7d1f0c3a61f406ad26b09b713a8d273712d3c161af1d10c10edbb3fa8c653f185449199356167415b863ce07543978e6ded43946c6b33f7f8da4ae2aee5aaad9d9c0661d6f589b4c8c73bef7503994e955cb08358774b1f449a9f513bcccc5c18e52704c1b98e07bc93d81a80af1a79098f2e25fe2b306874d85b47d8d26fcb61baf7887dcee93edb9e4958fda56ae7480bc2c5a924518c44a5270b9446ecf14", 0xe0, 0x0, 0x0, 0x0) accept$inet(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10) 233.514412ms ago: executing program 6 (id=32): r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x186) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x2012, r0, 0x0) truncate(&(0x7f0000000100)='./file0\x00', 0x2) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2040, &(0x7f0000003640)={0x9, 0x7}) r1 = kqueue() pipe(&(0x7f0000000080)={0xffffffffffffffff}) ioctl$KDSETRAD(r2, 0x20004b43) kevent(r1, &(0x7f0000000040)=[{{r0}, 0xfffffffffffffffa, 0x2, 0x10, 0x9, 0x100000010000}, {{r0}, 0xfffffffffffffffd, 0x1, 0x0, 0xffffffffffffffff, 0xdb8}], 0x10e4a, 0x0, 0xa9fa, 0x0) pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = getpid() fcntl$setown(r4, 0x6, r5) ioctl$FIOASYNC(r4, 0x8004667d, &(0x7f0000000000)=0x7) sysctl$net_inet_tcp(&(0x7f00000001c0)={0x4, 0x2, 0x6, 0x3}, 0x4, 0xfffffffffffffffe, 0x0, 0x0, 0x0) write(r3, &(0x7f0000000340), 0xd4e688a67930cd) sysctl$net_inet_ah(&(0x7f0000000140), 0x7, 0x0, 0x0, 0x0, 0x9) sysctl$vm(&(0x7f0000000000)={0x2, 0xa}, 0x2, 0x0, 0x0, 0x0, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x186) (async) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x2012, r0, 0x0) (async) truncate(&(0x7f0000000100)='./file0\x00', 0x2) (async) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2040, &(0x7f0000003640)={0x9, 0x7}) (async) kqueue() (async) pipe(&(0x7f0000000080)) (async) ioctl$KDSETRAD(r2, 0x20004b43) (async) kevent(r1, &(0x7f0000000040)=[{{r0}, 0xfffffffffffffffa, 0x2, 0x10, 0x9, 0x100000010000}, {{r0}, 0xfffffffffffffffd, 0x1, 0x0, 0xffffffffffffffff, 0xdb8}], 0x10e4a, 0x0, 0xa9fa, 0x0) (async) pipe(&(0x7f0000000640)) (async) getpid() (async) fcntl$setown(r4, 0x6, r5) (async) ioctl$FIOASYNC(r4, 0x8004667d, &(0x7f0000000000)=0x7) (async) sysctl$net_inet_tcp(&(0x7f00000001c0)={0x4, 0x2, 0x6, 0x3}, 0x4, 0xfffffffffffffffe, 0x0, 0x0, 0x0) (async) write(r3, &(0x7f0000000340), 0xd4e688a67930cd) (async) sysctl$net_inet_ah(&(0x7f0000000140), 0x7, 0x0, 0x0, 0x0, 0x9) (async) sysctl$vm(&(0x7f0000000000)={0x2, 0xa}, 0x2, 0x0, 0x0, 0x0, 0x0) (async) 233.281273ms ago: executing program 3 (id=51): r0 = shmget$private(0x0, 0x3000, 0x65d, &(0x7f0000ffa000/0x3000)=nil) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000240)={{0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x7}, 0x0, 0xfffc, 0x0, 0x0, 0x4, 0x0, 0x800000800000000}) shmctl$IPC_RMID(r0, 0x0) setrlimit(0x3, &(0x7f0000000040)={0x1, 0x6}) sysctl$kern(&(0x7f0000000000)={0x1, 0x46}, 0x2, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2) munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) kqueue() socket(0x18, 0x2, 0x0) ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x9, 0x9a37, {[0xfffffbfffffffffb, 0x0, 0x8, 0x100200000, 0x6, 0x7, 0x0, 0xfffffffffffffffe, 0x9, 0x2f01, 0x93, 0x3, 0xffffffffffffffff, 0x200000000002, 0xf, 0x4, 0x8, 0x400000000100], [0xfffffffffffffffe, 0x80000001, 0xfffffffffffffffd, 0x525, 0x5e, 0x200000000207b98, 0x80000000000001fa, 0x0, 0x2, 0x9], [0xa7, 0x8000, 0xfffffffffffffffc, 0x4, 0x10000000000009, 0x10ffe, 0xffffffff00000000], [0x100, 0x1fffffffffb, 0x7ffffffffffffffc, 0x100000000, 0x2, 0x3], [{0x0, 0x0, 0x0, 0x7d02}, {0x699d, 0x22, 0x5, 0xfffffffffffffff9}, {0x4, 0x0, 0xfffffffe, 0x80}, {0x3, 0x4, 0x5, 0xffffffffffffffff}, {0x0, 0x2, 0x7f, 0x8}, {0x2, 0x9, 0xfffc0000, 0x2000000000000002}, {0x5, 0x0, 0xfffffff9}, {0x0, 0x100, 0x0, 0x8}], {0x1, 0x5, 0x6, 0x8}, {0xfbfe, 0x3, 0x6d5}}}) kevent(0xffffffffffffffff, &(0x7f0000000000)=[{{}, 0xfffffffffffffff9, 0x5, 0x13, 0x1}], 0x0, 0x0, 0x0, 0x0) r1 = kqueue() kevent(r1, 0x0, 0x0, 0x0, 0x2, 0x0) kevent(r1, &(0x7f0000000000), 0x3ff, 0x0, 0x8000800, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) writev(r2, &(0x7f0000000080), 0x21) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x8010640d, &(0x7f0000000080)={0x6, 0x7f}) r3 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) shmctl$IPC_SET(r3, 0x1, &(0x7f0000000340)={{0x4, 0x0, 0x0, 0x0, 0xffffffffffffffdf, 0x3, 0x7}, 0x4, 0xfffc, 0x0, 0x0, 0x1, 0x5, 0x800000800000000, 0x0, 0x5, 0xffffffffe154f620}) shmat(r3, &(0x7f0000001000/0x3000)=nil, 0x0) sysctl$kern(&(0x7f00000000c0)={0x1, 0x14}, 0x2, 0x0, 0x0, 0x0, 0x0) shmctl$SHM_UNLOCK(r3, 0x4) 230.001269ms ago: executing program 7 (id=52): open$dir(&(0x7f0000000180)='./file0\x00', 0x1, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) setrlimit(0x8, &(0x7f0000000980)={0xb, 0x54}) r1 = syz_open_pts() close(r1) ioctl$TIOCCBRK(r0, 0x2000747a) r2 = syz_open_pts() r3 = socket(0x18, 0x1, 0x8) r4 = socket(0x2, 0x2, 0xbf) r5 = socket(0x20, 0x4000, 0x0) setsockopt(r5, 0x7f, 0x1f, &(0x7f0000000100)="0100f63f6f185ac80c05bd602c6ea52e45fdee9141950a3125189cf614ca5ff37e20d7f64f656478f05ad763531c3ce51ab0e611811641c5914522012d8d3165817ef325e6a094f6cc69436e967df5d1f3b897907d8a7e4016ca2a36e4c6", 0x5e) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x404, &(0x7f0000000000)={0x10, 0x2, 0x2, 0xe0000001}, 0xfffffffffffffee3) mprotect(&(0x7f0000247000/0x1000)=nil, 0x1000, 0x1) bind$inet(r4, &(0x7f0000000000)={0x10, 0x2, 0x1, 0xfffffff8}, 0x10) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x0, 0x1, './file0\x00'}, 0xa) write(r4, 0x0, 0x0) recvmsg(r5, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1842) setsockopt(r3, 0x1000000000029, 0xb, &(0x7f0000000200)='\x00\x00\x00\x00', 0x4) setsockopt(r3, 0x1000000000029, 0xa, &(0x7f0000000040), 0x0) setsid() sysctl$net_inet_tcp(&(0x7f00000000c0)={0x4, 0x2, 0x6, 0x12}, 0x4, 0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x8, 0x3e) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x10, r4, 0x0) kqueue() kevent(r0, &(0x7f00000000c0), 0xd1e9, 0x0, 0x10000, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) read(r1, &(0x7f0000000000)=""/50, 0x187ebd3c54e5e1e6) ioctl$TIOCSCTTY(r2, 0x20007461) ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000040)={0x7f, 0x4, 0x9, 0x5cffff5f, "9cdc452e307e7f000000000000002f9e68cd3304", 0x8, 0x10}) writev(r1, &(0x7f0000002600)=[{&(0x7f0000001240)="f22ac686cebffa96e22a175dc6576ae022f4c7818ad05ad93d1d218d93542d9850822b08a94b9eb2280d43f1223b123e550587d81bdb701d1ea5cfafe2cbb2af5061fbdddb7fa4d64050af988cfae7a97561b3024c0b946d75743e20da04ea17212f30cc277f563a7c44920d7d7de1064eecf4a0baa2226ab82ed342a75a1591f873ffe02e3ddb4b10dbae880f341636f47d694dc5c0e2efa0a2f51f448cbeefcc6a77143833", 0xa6}], 0x1) 219.312142ms ago: executing program 0 (id=53): symlink(&(0x7f0000000000)='\x00', &(0x7f0000000040)='./file0\x00') (async) unlink(&(0x7f0000000080)='./file0\x00') r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) fcntl$lock(r0, 0x9, &(0x7f0000000140)={0x3, 0x0, 0x0, 0x300000003}) (async) r1 = getpgid(0xffffffffffffffff) (async) sync() fcntl$lock(r0, 0x8, &(0x7f0000000040)={0x1, 0x0, 0xffffffffffffff81, 0x9bf, r1}) (async) r2 = semget$private(0x0, 0x2, 0x400) semctl$GETPID(r2, 0x0, 0x4, 0x0) (async, rerun: 32) r3 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) (rerun: 32) ioctl$VT_WAITACTIVE(r3, 0x20007606, &(0x7f00000001c0)=0x6) (async) sysctl$hw(&(0x7f00000000c0)={0x6, 0x12}, 0x2, 0x0, 0x0, 0x0, 0x0) socket$inet(0x2, 0x2, 0x0) (async, rerun: 32) setsockopt$sock_int(0xffffffffffffffff, 0xffff, 0x8, &(0x7f00000000c0)=0x4, 0x2) (rerun: 32) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async, rerun: 64) sysctl$kern(&(0x7f00000000c0)={0x1, 0x4e}, 0x3, &(0x7f0000000100)="71f95f84cf71b59c7afec37582", &(0x7f0000000080)=0x2, 0x0, 0x37) (async, rerun: 64) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$VT_GETMODE(r4, 0x40087603, &(0x7f0000000080)) fcntl$lock(r0, 0x9, &(0x7f0000000000)={0x1, 0x1, 0xe, 0x2ffffff7c}) 218.982784ms ago: executing program 3 (id=54): sysctl$hw(&(0x7f0000000c40)={0x7, 0x5}, 0x2, &(0x7f0000000d40)="ff1315e6", &(0x7f0000000d00)=0x4, 0x0, 0x0) kqueue() 117.819894ms ago: executing program 3 (id=55): r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x800, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffd, 0x20001fffffffd}) (async, rerun: 64) setrlimit(0x8, &(0x7f0000000980)={0xb, 0x54}) (async, rerun: 64) socket(0x2, 0x2, 0x0) (async) ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, &(0x7f00000003c0)={0x0, 0x8009, {[0x3, 0x4a, 0x9, 0x5, 0x6, 0x7, 0x4, 0xfffffffffffffffc, 0x0, 0x6, 0x93, 0xfffffffffffffff8, 0xffffffffffffffff, 0x202000000002, 0xd, 0x4, 0xffffffffffffffff, 0x400000000100], [0xfffffffffffffffc, 0x80000001, 0xfffffffffffffffa, 0x8, 0x5e, 0x100000000007b9a, 0x800, 0x9, 0xfffffffffffffffc, 0xfffe], [0x20100000001, 0x8000, 0x5, 0x0, 0xb, 0x411000, 0xffffffff02000000], [0x9, 0x1fffffffffb, 0x80000001, 0x4000000, 0x5, 0x2], [{0x0, 0x3ffe, 0x0, 0x7d06}, {0x9, 0xd, 0x5}, {0x4, 0x0, 0x2, 0x7}, {0x3, 0x4, 0x2, 0xffffffffffffffff}, {0x9, 0x3fe, 0xa, 0x8}, {0x1, 0x9, 0xb, 0x40}, {0x5, 0x0, 0xf7fffff7, 0xb}, {0xe, 0x100, 0x1, 0xe}], {0x1, 0x8, 0x4, 0x5}, {0xfffe, 0x7, 0x6d3, 0x6}}}) (async) r1 = kqueue() kevent(r1, &(0x7f0000000280)=[{{}, 0xfffffffffffffff8, 0xc4, 0x40, 0x6, 0x976}], 0x6, 0x0, 0xbfffffff, 0x0) r2 = syz_open_pts() (async) symlink(&(0x7f0000000180)='.\x00', &(0x7f0000000040)='./file0\x00') chflagsat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0/..\x00', 0x10000, 0x0) mkdir(&(0x7f0000000040)='./file2\x00', 0x1c1) mkdir(&(0x7f0000000240)='./file2/file0\x00', 0xe3) write(0xffffffffffffffff, &(0x7f0000001040)="a6a09bee3b0fc958e1f681e8b3f669376a5e48dc3c38123c00bfad65f4d21171", 0x20) (async) close(r1) (async) readv(0xffffffffffffffff, &(0x7f0000000a40)=[{0x0}, {&(0x7f0000000600)=""/251, 0xfb}], 0x2) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r4, &(0x7f0000000880)={{0x0, 0x0, 0x0, 0x0, 0x0}, 0x7}, 0x38, 0x3042, 0x0) (async) close(r3) (async) r5 = syz_open_pts() r6 = syz_open_pts() (async) setsid() ioctl$TIOCSCTTY(r6, 0x20007461) openat$tty(0xffffffffffffff9c, &(0x7f0000000200), 0x8, 0x0) (async) select(0x40, &(0x7f0000000940)={0xc, 0xffffffeffffffff7, 0x800000000008b, 0x7f, 0x5, 0x90, 0x4, 0x10001}, 0x0, 0x0, 0x0) (async) r7 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) fcntl$lock(r7, 0x8, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0x20001fffff7fd}) (async) ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f00000000c0)={0x7f, 0x4, 0x9, 0x5cffff5f, "9cdc452e307e7f000000000000002f9e68cd3304", 0x8, 0x10}) (async) getsockname$inet(r0, &(0x7f0000000080), &(0x7f0000000140)=0x10) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x2, 0x0, 0x10}, 0x4, 0x0, 0x0, 0x0, 0x37) (async) read(r5, &(0x7f0000000000)=""/77, 0x4d) 13.522206ms ago: executing program 0 (id=56): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xa7210e10bc3c9def) r0 = socket(0x11, 0x2, 0xff) sendto$unix(r0, &(0x7f0000000000)="b1000512000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x0, 0x0, 0x0) r1 = open$dir(&(0x7f0000000000)='./file1\x00', 0x80, 0x4) getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f00000001c0)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0xc) kill(r2, 0x1c) mkfifoat(r1, &(0x7f0000000140)='./file1\x00', 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x80, 0xbe) rmdir(&(0x7f0000000180)='./file1\x00') setgid(r3) getsockopt$inet_opts(r0, 0x0, 0x1, &(0x7f0000000280)=""/162, &(0x7f0000000340)=0xa2) fchdir(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r5, 0xffff, 0x1022, &(0x7f00000000c0), &(0x7f0000000240)=0x5d) sysctl$kern(&(0x7f00000000c0)={0x1, 0x4e}, 0x3, &(0x7f0000000100)="71f95f84cf71b59c7afec37582", &(0x7f0000000080)=0x2, 0x0, 0x37) 3.589519ms ago: executing program 0 (id=57): setitimer(0x0, &(0x7f0000000080)={{0x800, 0x5fe}, {0x0, 0xd185}}, 0x0) open$dir(&(0x7f0000000b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x0) rename(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000001c0)='./file1\x00') sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="89000000ffff000001"], 0x9}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x0, &(0x7f00000001c0)=""/240, 0xf0}, 0x0) syz_open_pts() sendmsg(r0, &(0x7f0000000380)={0x0, 0x32c, 0x0, 0x0, &(0x7f0000000000), 0x90}, 0x0) socket(0x18, 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setrlimit(0x8, &(0x7f00000000c0)={0x45, 0x56}) openat$zero(0xffffffffffffff9c, 0x0, 0x100, 0x0) rename(&(0x7f00000012c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000180)='./file1\x00') sysctl$net_inet_ip(&(0x7f0000000000)={0x4, 0x2, 0x0, 0x12}, 0x4, 0x0, 0x0, 0x0, 0x0) 3.2261ms ago: executing program 5 (id=58): r0 = msgget$private(0x0, 0x6c6) msgrcv(r0, 0x0, 0x0, 0x1, 0x0) msgctl$IPC_STAT(r0, 0x2, &(0x7f00000000c0)=""/214) msgrcv(r0, &(0x7f0000000000)={0x0, ""/181}, 0xbd, 0x0, 0x1000) 0s ago: executing program 7 (id=59): r0 = socket(0x18, 0x2, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0xe8, 0x0) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0x80000000, 0xffff63de, 0x2, 0x2, 0x8, 0x100003, 0x40, 0x10, [{0x5, 0x3, 0x775, 0x80000201}, {0x2, 0x8, 0x8, 0xfff}, {0x7, 0xfffffffe, 0x2006, 0x1}, {0x2, 0x7, 0xf}, {0xfffffffc, 0x7, 0xf11, 0x7}, {0x3, 0xffff, 0x80d2}, {0x2024, 0x1, 0x85, 0x5}, {0x0, 0x0, 0xfffffff8, 0xfbffe2e9}, {0x8, 0xffa, 0x3, 0x7fff}, {0x0, 0xfffffff8, 0x400005, 0x8bfb}, {0xfffff0d1, 0x8000000, 0x8, 0x7}, {0x4, 0xc7cb, 0x3, 0x2}, {0x401, 0x106, 0x9, 0x40}, {0x200003, 0xee6, 0x2, 0x6f5fc48b}, {0x7e, 0x5, 0x1, 0x5}, {0x9be2, 0x6, 0x6, 0x69}]}) r2 = fcntl$dupfd(r1, 0x3, 0xffffffffffffffff) ioctl$FIONREAD(r2, 0x800c745b, &(0x7f00000000c0)) r3 = socket(0x18, 0x2, 0x0) r4 = socket(0x2, 0x2, 0x0) sendmmsg(r4, &(0x7f0000000180)={{&(0x7f0000000140)=@in6={0x1c, 0x18, 0x2, 0x3, "cbaa3d390000e5a541711ef2fb590be6", 0x930}, 0x1c, 0x0, 0x0, &(0x7f0000000380)}}, 0x38, 0x400) socketpair(0x20, 0x2, 0x4, &(0x7f0000000080)) bind$inet6(r3, &(0x7f0000000040)={0x1c, 0x18, 0x1, 0x5, "00000000000000000000000000000001", 0xc}, 0x1c) connect$inet6(r3, &(0x7f0000000000)={0x1c, 0x18, 0x3, 0x6, "00000300000000002200000000000008", 0x6}, 0x1c) r5 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) ioctl$WSMUXIO_REMOVE_DEVICE(r5, 0x80085762, &(0x7f0000000100)={0x2, 0x7ff}) mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4) mprotect(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x1) sysctl$kern(&(0x7f00000000c0)={0x1, 0x48}, 0x2, &(0x7f0000002180)="71f91e34", &(0x7f0000000080)=0x4, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000040)={0x1c, 0x18, 0x1, 0x5, "00000000000000000000000000000001", 0xc}, 0x1c) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.62' (ED25519) to the list of known hosts. kernel: protection fault trap, code=0 Stopped at in_ifdetach+0x67: movzbl 0x1(%rax),%r12d ddb{0}> ddb{0}> set $lines = 0 ddb{0}> set $maxwidth = 0 ddb{0}> show panic the kernel did not panic ddb{0}> show kasan No such command ddb{0}> trace in_ifdetach(ffff800001602800) at in_ifdetach+0x67 if_detach(ffff800001602800) at if_detach+0x2fe tun_clone_destroy(ffff800001602800) at tun_clone_destroy+0x2ce if_clone_destroy(ffff800039fa8830) at if_clone_destroy+0x205 tun_dev_close(5d04,7) at tun_dev_close+0x1d9 spec_close(ffff800039fa88f0) at spec_close+0x417 VOP_CLOSE(fffff9006e2f7028,7,fffff900097fd680,ffff80002a22ba08) at VOP_CLOSE+0x132 vn_closefile(fffff9006cfe7360,ffff80002a22ba08) at vn_closefile+0x12b fdrop(fffff9006cfe7360,ffff80002a22ba08) at fdrop+0x121 closef(fffff9006cfe7360,ffff80002a22ba08) at closef+0x192 fdfree(ffff80002a22ba08) at fdfree+0x116 exit1(ffff80002a22ba08,43,0,1) at exit1+0x595 sys_exit(ffff80002a22ba08,ffff800039fa8c60,ffff800039fa8bb0) at sys_exit+0x1a syscall(ffff800039fa8c60) at syscall+0xb17 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x73d9a51f7350, count: -15 ddb{0}> show registers rdi 0 rsi 0 rbp 0xffff800039fa8720 rbx 0xffff80000163a780 rdx 0 rcx 0xffff80002a22ba08 rax 0xdead4110dead4110 r8 0x21 r9 0 r10 0xe5fd8a7db8dcb87d r11 0xc37e30ae7a557abd r12 0 r13 0xffff800001602848 r14 0xffff800001602800 r15 0xdead0036dead4110 rip 0xffffffff818037c7 in_ifdetach+0x67 cs 0x8 rflags 0x10282 __ALIGN_SIZE+0xf282 rsp 0xffff800039fa86d0 ss 0 in_ifdetach+0x67: movzbl 0x1(%rax),%r12d ddb{0}> show proc PROC (syz-executor) tid=372416 pid=34798 tcnt=0 stat=onproc flags process=18 proc=2000 runpri=32, usrpri=50, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=1 forw=0xffffffffffffffff, list=0xffff80002a22b4d8,0xffff800045fe8a90 process=0xffff800045fec018 user=0xffff800039fa3000, vmspace=0xfffff9006d19b3f0 estcpu=6, cpticks=2, pctcpu=0.0, user=0, sys=0, intr=0 ddb{0}> ps PID TID PPID UID S PRLAGS PFLAGS WAIT COMMAND 26342 2509 1948 32767 2 0x10 0 syz-executor 29321 3536 95013 32767 2 0x10 0 syz-executor 29321 450918 95013 32767 3 0x10 0x4000080 fsleep syz-executor 87814 203728 93367 32767 2 0x10 0 syz-executor 87814 420776 93367 32767 3 0x10 0x4000080 sbwait syz-executor 47531 456143 20893 32767 2 0x10 0 syz-executor 47531 363573 20893 32767 3 0x10 0x4000080 fsleep syz-executor 78653 225062 33156 32767 2 0x10 0 syz-executor 78653 275711 33156 32767 3 0x10 0x4000080 pipewr syz-executor 78653 454096 33156 32767 7 0x10 0x4000000 syz-executor 56554 474127 81750 32767 3 0x10 0x80 nanoslp syz-executor 56554 64097 81750 32767 3 0x10 0x4000080 pipewr syz-executor 44981 467241 94434 32767 3 0x10 0x80 nanoslp syz-executor 44981 418879 94434 32767 3 0x10 0x4000080 piperd syz-executor 44981 32054 94434 32767 3 0x10 0x4000080 fsleep syz-executor 33156 146455 57594 32767 3 0x10 0x80 nanoslp syz-executor 57594 313064 65180 0 3 0x2 0x80 wait syz-executor 20893 2295 6856 32767 3 0x10 0x80 nanoslp syz-executor 95013 170476 43768 32767 3 0x10 0x80 nanoslp syz-executor 1948 213631 44663 32767 3 0x10 0x80 nanoslp syz-executor 94434 500982 37024 32767 3 0x10 0x80 nanoslp syz-executor 81750 127863 71992 32767 3 0x10 0x80 nanoslp syz-executor 93367 29174 53715 32767 3 0x10 0x80 nanoslp syz-executor 44663 148869 65180 0 3 0x2 0x80 wait syz-executor 43768 28568 65180 0 3 0x2 0x80 wait syz-executor 71087 411809 65180 0 3 0x2 0x80 wait syz-executor 6856 128135 65180 0 3 0x2 0x80 wait syz-executor 71992 387885 65180 0 3 0x2 0x80 wait syz-executor 37024 12560 65180 0 3 0x2 0x80 wait syz-executor 53715 433905 65180 0 3 0x2 0x80 wait syz-executor 65180 324303 49656 0 3 0x2 0x80 kqread syz-executor 49656 499594 60320 0 3 0x100002 0x88 sigsusp ksh 60320 142801 64252 0 3 0x10 0x88 kqread sshd-session 64252 156092 64784 0 3 0x12 0x80 kqread sshd-session 35524 406822 1 0 3 0x100003 0x80 ttyin getty 64784 13285 1 0 3 0 0x88 kqread sshd 2177 59069 18770 73 3 0x1100010 0x80 kqread syslogd 18770 299847 1 0 3 0x100002 0x80 sbwait syslogd 89448 151258 1 0 3 0x100000 0x80 kqread resolvd 49426 416222 11420 77 3 0x100012 0x80 kqread dhcpleased 42603 282699 11420 77 3 0x100012 0x80 kqread dhcpleased 11420 110036 1 0 3 0 0x80 kqread dhcpleased 73240 262403 0 0 3 0x14000 0x200 bored smr 97982 421797 0 0 2 0x14000 0x200 zerothread 79943 129644 0 0 3 0x14000 0x200 aiodoned aiodoned 41716 467922 0 0 3 0x14000 0x200 syncer update 91528 449082 0 0 3 0x14000 0x200 cleaner cleaner 26648 372148 0 0 3 0x14000 0x200 reaper reaper 87524 203402 0 0 3 0x14000 0x200 pgdaemon pagedaemon 32698 72468 0 0 3 0x14000 0x200 bored viomb 74344 504995 0 0 3 0x14000 0x40000200 acpi0 acpi0 63410 435727 0 0 3 0x14000 0x40000200 idle1 95866 276895 0 0 3 0x14000 0x200 bored softnet1 72414 188334 0 0 3 0x14000 0x200 bored softnet0 25955 196913 0 0 3 0x14000 0x200 bored systqmp 86291 247680 0 0 3 0x14000 0x200 bored systq 84256 205511 0 0 3 0x14000 0x200 tmoslp softclockmp 83194 27155 0 0 3 0x14000 0x40000200 tmoslp softclock 69161 317071 0 0 3 0x14000 0x40000200 idle0 1 394943 0 0 3 0x2 0x80 wait init 0 0 -1 0 3 0x10000 0x200 scheduler swapper ddb{0}> show all locks Process 78653 (syz-executor) thread 0xffff800045fe94e0 (454096) exclusive rwlock sysctllk r = 0 (0xffffffff83968368) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 sysctl_vslock+0x45 #3 sys_sysctl+0x371 #4 syscall+0xbd4 #5 Xsyscall+0x128 ddb{0}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 11051 12018K 12034K 166960K 12146 0 pcb 17 12K 12K 166960K 17 0 rtable 237 6K 7K 166960K 377 0 pf 31 16K 16K 166960K 33 0 ifaddr 42 7K 7K 166960K 48 0 ifgroup 50 2K 2K 166960K 54 0 sysctl 1 1K 9K 166960K 5 0 counters 70 37K 37K 166960K 72 0 ioctlops 0 0K 2K 166960K 33 0 iov 1 1K 5K 166960K 5 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1289 81K 81K 166960K 1434 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 5K 166960K 4 0 VM map 2 1K 1K 166960K 2 0 sem 8 0K 0K 166960K 8 0 dirhash 12 2K 2K 166960K 18 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 25 93K 121K 166960K 213 0 sigio 3 0K 0K 166960K 4 0 proc 58 99K 131K 166960K 530 0 subproc 72 4K 4K 166960K 81 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 13 0 in_multi 99 6K 6K 166960K 112 0 ether_multi 1 0K 0K 166960K 1 0 mrt 0 0K 0K 166960K 3 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 73 334K 334K 166960K 73 0 exec 0 0K 1K 166960K 370 0 fusefs mount 1 32K 32K 166960K 1 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 242 160K 177K 166960K 3564 0 UVM aobj 6 2K 2K 166960K 8 0 pinsyscall 46 92K 110K 166960K 1309 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 0K 166960K 34 0 NDP 13 0K 2K 166960K 30 0 temp 38 9115K 9132K 166960K 3552 0 kqueue 15 22K 28K 166960K 42 0 SYN cache 2 16K 16K 166960K 2 0 ddb{0}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 28 0 0 1 0 1 1 0 8 0 rtpcb 120 37 0 34 1 0 1 1 0 8 0 rtentry 176 122 0 12 6 0 6 6 0 8 0 unpcb 144 208 0 189 6 0 6 6 0 8 5 syncache 336 4 0 4 1 0 1 1 0 8 1 tcpcb 736 27 0 23 1 0 1 1 0 8 0 arp 136 20 0 2 1 0 1 1 0 8 0 inpcb 328 141 0 132 4 0 4 4 0 8 2 nd6 152 27 0 3 1 0 1 1 0 8 0 kcovpl 48 9 0 1 1 0 1 1 0 8 0 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 497 0 44 29 0 29 29 0 8 0 art_table 40 498 0 44 5 0 5 5 0 8 0 art_node 32 122 0 22 1 0 1 1 0 8 0 sysvmsgpl 40 2 0 1 1 0 1 1 0 8 0 semapl 72 6 0 0 1 0 1 1 0 8 0 shmpl 120 5 0 2 1 0 1 1 0 8 0 dirhash 1024 21 0 4 3 0 3 3 0 8 0 dino2pl 256 1711 0 241 93 0 93 93 0 8 0 ffsino 296 1711 0 241 114 0 114 114 0 8 0 nchpl 144 1974 0 274 64 0 64 64 0 8 1 vnodes 216 1801 0 0 101 0 101 101 0 8 0 namei 1024 6734 0 6734 4 1 3 3 0 8 3 percpumem 16 52 0 1 1 0 1 1 0 8 0 kstatmem 264 27 0 2 2 0 2 2 0 8 0 scxspl 216 7071 0 7071 6 2 4 4 1 8 4 plimitpl 152 122 0 97 2 0 2 2 0 8 0 sigapl 424 500 0 447 7 0 7 7 0 8 0 knotepl 120 253 0 0 8 0 8 8 0 8 0 kqueuepl 224 109 0 97 5 0 5 5 0 8 4 pipepl 344 132 0 101 3 0 3 3 0 8 0 fdescpl 528 484 0 447 3 0 3 3 0 8 0 filepl 160 2306 0 2081 22 3 19 22 0 8 8 lockfpl 104 37 0 34 1 0 1 1 0 8 0 lockfspl 48 15 0 12 1 0 1 1 0 8 0 sessionpl 144 27 0 11 1 0 1 1 0 8 0 pgrppl 48 36 0 12 1 0 1 1 0 8 0 ucredpl 104 374 0 355 1 0 1 1 0 8 0 zombiepl 144 448 0 447 1 0 1 1 0 8 0 processpl 1232 500 0 447 5 0 5 5 0 8 0 procpl 664 594 0 533 6 0 6 6 0 8 0 sockpl 752 388 0 357 17 0 17 17 0 8 13 mcl8k 8192 2 0 0 1 0 1 1 0 8 0 mcl4k 4096 137 0 0 18 0 18 18 0 8 0 mcl2k 2048 20 0 0 3 0 3 3 0 8 0 mextrefs 64 16 0 0 1 0 1 1 0 8 0 mtagpl 96 3 0 0 1 0 1 1 0 8 0 mbufpl 256 171 0 0 11 0 11 11 0 8 0 bufpl 272 2424 0 102 155 0 155 155 0 8 0 anonpl 32 3734 0 0 31 0 31 31 0 247 0 amapchunkpl 152 10164 0 9624 37 0 37 37 0 158 15 amappl16 200 1659 0 1617 5 1 4 5 0 8 1 amappl15 192 9 0 9 1 1 0 1 0 8 0 amappl14 184 414 0 413 1 0 1 1 0 8 0 amappl13 176 111 0 101 1 0 1 1 0 8 0 amappl12 168 719 0 684 2 0 2 2 0 8 0 amappl11 160 9 0 9 1 1 0 1 0 8 0 amappl10 152 58 0 48 1 0 1 1 0 8 0 amappl9 144 272 0 272 1 1 0 1 0 8 0 amappl8 136 108 0 107 1 0 1 1 0 8 0 amappl7 128 136 0 125 1 0 1 1 0 8 0 amappl6 120 160 0 158 1 0 1 1 0 8 0 amappl5 112 96 0 89 1 0 1 1 0 8 0 amappl4 104 259 0 244 1 0 1 1 0 8 0 amappl3 96 1688 0 1585 4 1 3 3 0 8 0 amappl2 88 602 0 525 2 0 2 2 0 8 0 amappl1 80 10413 0 9851 13 0 13 13 0 8 0 amappl 88 2869 0 2691 5 0 5 5 0 92 0 uvmvnodes 80 98 0 0 2 0 2 2 0 8 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 7 0 2 1 0 1 1 0 8 0 uaddrrnd 24 484 0 447 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 484 0 447 1 0 1 1 0 8 0 vmmpekpl 168 5735 0 5690 3 0 3 3 0 8 0 vmmpepl 168 40176 0 38128 93 0 93 93 0 357 3 vmsppl 488 483 0 447 7 1 6 6 0 8 0 rwobjpl 80 14633 0 13677 21 0 21 21 0 8 0 pdppl 4096 975 0 894 107 22 85 95 0 8 4 pvpl 32 11532 0 0 93 0 93 93 0 265 0 pmappl 256 483 0 447 4 1 3 3 0 8 0 extentpl 40 45 0 27 1 0 1 1 0 8 0 phpool 112 434 0 26 12 0 12 12 0 8 0 ddb{0}> machine ddbcpu 0 Invalid cpu 0 ddb{0}> trace in_ifdetach(ffff800001602800) at in_ifdetach+0x67 if_detach(ffff800001602800) at if_detach+0x2fe tun_clone_destroy(ffff800001602800) at tun_clone_destroy+0x2ce if_clone_destroy(ffff800039fa8830) at if_clone_destroy+0x205 tun_dev_close(5d04,7) at tun_dev_close+0x1d9 spec_close(ffff800039fa88f0) at spec_close+0x417 VOP_CLOSE(fffff9006e2f7028,7,fffff900097fd680,ffff80002a22ba08) at VOP_CLOSE+0x132 vn_closefile(fffff9006cfe7360,ffff80002a22ba08) at vn_closefile+0x12b fdrop(fffff9006cfe7360,ffff80002a22ba08) at fdrop+0x121 closef(fffff9006cfe7360,ffff80002a22ba08) at closef+0x192 fdfree(ffff80002a22ba08) at fdfree+0x116 exit1(ffff80002a22ba08,43,0,1) at exit1+0x595 sys_exit(ffff80002a22ba08,ffff800039fa8c60,ffff800039fa8bb0) at sys_exit+0x1a syscall(ffff800039fa8c60) at syscall+0xb17 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x73d9a51f7350, count: -15 ddb{0}> machine ddbcpu 1 Stopped at x86_ipi_db+0x27: addq $0x8,%rsp ddb{1}> trace x86_ipi_db(ffff80002999dff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __mp_lock(ffffffff83a98140) at __mp_lock+0x192 sysctl_vslock(0,0) at sysctl_vslock+0x80 sys_sysctl(ffff800045fe94e0,ffff80003c418cb0,ffff80003c418c00) at sys_sysctl+0x371 syscall(ffff80003c418cb0) at syscall+0xbd4 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xbe9259c8d00, count: -8