last executing test programs: 1.778911184s ago: executing program 3 (id=62): sysctl$kern(0x0, 0x0, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec370", 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x40}, 0x10, 0x1801, 0x0) 1.773270268s ago: executing program 3 (id=64): setrlimit(0x8, &(0x7f0000000980)={0x42, 0x62}) r0 = syz_open_pts() close(r0) r1 = syz_open_pts() ioctl$FIOASYNC(r1, 0x80047460, &(0x7f00000000c0)=0x4) ioctl$TIOCMBIS(r0, 0x8004746c, &(0x7f0000000000)=0xfffffffd) ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000340)={0x8, 0x5, 0xffffdf82, 0xffffff8c, "08ed95990000000000000000ffffffffffffffe6", 0x4, 0x4}) fchflags(r1, 0x0) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000100)="7915407d1528140414febecd80bff04084986c5cce72898d4dcc9e7b1aa90a4f46b3b806aaffc4de33a5ca7e486e69beff93e3b4203c8ea035916b38ce09d4", 0x3f}], 0x1) 1.39792659s ago: executing program 0 (id=81): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) r0 = kqueue() syz_open_pts() syz_open_pts() syz_open_pts() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) select(0x40, &(0x7f0000000080)={0xc5, 0x5, 0x0, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x7fffffff}, 0x0, &(0x7f00000000c0)={0x1ff, 0x800000000000000, 0x0, 0x4, 0x0, 0x10000000, 0x5, 0x1}, 0x0) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0x3, [{&(0x7f0000ffd000/0x3000)=nil, &(0x7f00002a1000/0x3000)=nil, 0x200007fffffffffd}, {&(0x7f0000e4e000/0x4000)=nil, &(0x7f0000417000/0x3000)=nil}, {&(0x7f00003d9000/0x2000)=nil, &(0x7f0000aa5000/0x2000)=nil}, {&(0x7f0000318000/0x2000)=nil, &(0x7f00000d6000/0x1000)=nil, 0x1}, {&(0x7f000024d000/0x1000)=nil, &(0x7f0000188000/0x2000)=nil, 0x2000000000009}, {&(0x7f0000034000/0x1000)=nil, &(0x7f0000095000/0x3000)=nil, 0x7}, {&(0x7f000055e000/0x4000)=nil, &(0x7f00000bf000/0x3000)=nil, 0x8}, {&(0x7f0000096000/0x2000)=nil, &(0x7f0000e4d000/0x3000)=nil, 0x403}, {&(0x7f000032e000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil}, {&(0x7f00004e5000/0x7000)=nil, &(0x7f0000632000/0x4000)=nil, 0x10000}, {&(0x7f0000196000/0x4000)=nil, &(0x7f00004e6000/0x3000)=nil, 0x3240}, {&(0x7f0000074000/0x4000)=nil, &(0x7f0000688000/0x4000)=nil, 0xffffffff}, {&(0x7f000055e000/0x2000)=nil, &(0x7f0000689000/0x2000)=nil, 0x6}, {&(0x7f00001c8000/0x2000)=nil, &(0x7f000053a000/0x1000)=nil, 0xfffffffffffffffa}, {&(0x7f0000318000/0x3000)=nil, &(0x7f000068b000/0x2000)=nil, 0x2000001000039f7}, {&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000073000/0x7000)=nil, 0x4}], './file0\x00', 0xfffffffa}) mknod(&(0x7f00000000c0)='./file0\x00', 0x1ffa, 0x0) r1 = open(&(0x7f0000000400)='./file0\x00', 0x2, 0x0) ioctl$FIONREAD(r1, 0xc028698d, &(0x7f00000001c0)) kevent(r0, &(0x7f0000000040), 0xe4a, 0x0, 0xa9fa, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) 1.201711418s ago: executing program 0 (id=88): msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x80007, 0x0, 0x0, 0x0, 0x0, 0x199, 0x7}, 0x85c, 0x4, 0x0, 0x0, 0x80000000003, 0xfffffffffffffffe, 0x5, 0x8000004}) (async) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x80007, 0x0, 0x0, 0x0, 0x0, 0x199, 0x7}, 0x85c, 0x4, 0x0, 0x0, 0x80000000003, 0xfffffffffffffffe, 0x5, 0x8000004}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x29}, 0x2, 0x0, 0x0, 0x0, 0x0) msgget$private(0x0, 0x1ba) (async) r0 = msgget$private(0x0, 0x1ba) msgsnd(r0, &(0x7f00000000c0)=ANY=[@ANYRESOCT], 0x401, 0x0) r1 = getuid() setreuid(0xffffffffffffffff, r1) r2 = getuid() r3 = getpid() r4 = getpgrp() msgctl$IPC_SET(r0, 0x1, &(0x7f0000000140)={{0x6, r1, 0xffffffffffffffff, r2, 0x0, 0x81, 0x8}, 0x9, 0x0, r3, r4, 0x1, 0x4, 0x4, 0x8000000000000001}) msgsnd(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="03"], 0x8, 0x0) (async) msgsnd(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="03"], 0x8, 0x0) msgctl$IPC_RMID(r0, 0x0) (async) msgctl$IPC_RMID(r0, 0x0) msgctl$IPC_STAT(r0, 0x2, &(0x7f0000000000)=""/85) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) sysctl$kern(&(0x7f00000000c0)={0x1, 0x2c}, 0x2, &(0x7f0000000100), &(0x7f0000000080), 0x0, 0x0) (async) sysctl$kern(&(0x7f00000000c0)={0x1, 0x2c}, 0x2, &(0x7f0000000100), &(0x7f0000000080), 0x0, 0x0) 1.198290643s ago: executing program 5 (id=89): shmget$private(0x0, 0x0, 0x0, &(0x7f0000b39000/0x3000)=nil) ktrace(0x0, 0x1, 0x10c, 0x0) r0 = syz_open_pts() fcntl$setstatus(r0, 0x4, 0x4) ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000040)={0x8200004, 0x7fffffff, 0x8cba, 0x8, "909c99e300000000000a00", 0x3, 0x7e}) mkdirat(0xffffffffffffff9c, &(0x7f00000011c0)='./file0\x00', 0x14e) unveil(&(0x7f0000000480)='./file0/file1\x00', &(0x7f00000004c0)='c\x00') unveil(&(0x7f00000000c0)='.\x00', &(0x7f0000000100)='r\x00') openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x8, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) unveil(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000300)='W\x00') open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x186) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000300)="8269cd28367f22fc85ef3a6eb30547a68400fffb8db76e74c03d6cc2eea2782146294dcbb86fb2c2ccc1624d4a3e35d69a1c9c89b74aacaa51d8dd7c50553dbd58a011716f9f1dcbf02eaf668240b786e4dbbd5f2fd65b9098e719c6f8fbd20506dfbadc0d", 0x65}], 0x1) openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) 1.197960933s ago: executing program 1 (id=90): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = shmget$private(0x0, 0x2000, 0x3b2, &(0x7f0000255000/0x2000)=nil) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r1, 0x0, 0x200000000000c, &(0x7f0000000240)="ea00eb0100000000", 0x8) setsockopt$inet_opts(r1, 0x0, 0xd, 0x0, 0x0) madvise(&(0x7f00002ab000/0x3000)=nil, 0x3000, 0x2) shmat(r0, &(0x7f0000001000/0x3000)=nil, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) 1.196400733s ago: executing program 1 (id=91): syz_emit_ethernet(0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd609ac9d000002b000000000000000000aafe80000600000000000000000000aa"]) r0 = socket(0x1, 0x2, 0x8) recvmmsg(r0, &(0x7f0000000200)={&(0x7f00000001c0)={&(0x7f0000000000)=@in6, 0xc, &(0x7f0000000080)=[{&(0x7f0000000040)=""/5, 0x5}, {&(0x7f0000000100)=""/88, 0x58}], 0x2, &(0x7f0000000180)=""/21, 0x15}, 0x7}, 0x10, 0x803, &(0x7f0000000240)={0x8, 0x100000000}) 1.191492487s ago: executing program 5 (id=92): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000080)={0x6, &(0x7f0000000040)=[{0x40, 0x4, 0xe, 0x6}, {0x1ff, 0xe8, 0x9, 0x1}, {0xe, 0x0, 0x0, 0x1}, {0x7, 0x81, 0x0, 0x4}, {0x2, 0xf, 0xb3, 0x5}, {0xffff, 0x7, 0x8a, 0x10001}]}) (async) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) syz_open_pts() (async) chmod(&(0x7f0000000140)='./file0\x00', 0x3ea) open(&(0x7f0000000c00)='./file0\x00', 0x0, 0x0) (async) sysctl$net_inet_carp(&(0x7f0000000300)={0x4, 0x2, 0x70, 0x4}, 0xc, 0x0, 0x0, 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xa7210e10bc3c9dd1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) sysctl$kern(&(0x7f00000000c0)={0x1, 0x2a}, 0x2, &(0x7f0000001480), 0x0, 0x0, 0x0) (async) sysctl$kern(&(0x7f00000001c0)={0x1, 0x2d}, 0x2, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000200)=0x1c, 0x0, 0x3) (async) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000001480)=@abs={0x0, 0x0, 0x3}, 0x8, 0x0, 0x0, 0x0, 0x20, 0x401}, 0x2) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) select(0x7, &(0x7f0000000000)={0x400}, &(0x7f0000000040), &(0x7f0000000080)={0xcb}, &(0x7f0000000180)) (async) r1 = socket(0x18, 0x2, 0x0) setsockopt(r1, 0x1000000000029, 0xa, &(0x7f0000003680)='\x00\x00\x00\x00', 0x4) (async) r2 = socket(0x18, 0x2, 0x0) setsockopt$sock_int(r2, 0xffff, 0x1003, &(0x7f0000000080)=0x3, 0x1) (async) setsockopt(r1, 0x1000000029, 0xd, &(0x7f0000000000), 0x14) 1.087160962s ago: executing program 7 (id=93): r0 = kqueue() pipe(&(0x7f0000000640)={0xffffffffffffffff}) (async) ioctl$TIOCSETAF(0xffffffffffffffff, 0x802c7416, &(0x7f0000000000)={0x8, 0x8000, 0x8, 0x543, "225e196f00000000000000000edd0000f400", 0xfffffffc, 0x3fc}) (async) sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b10005040000040000", 0x9, 0x400, 0x0, 0x0) (async) unveil(&(0x7f0000000080)='.\x00', 0x0) r2 = socket(0x11, 0x3, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) sendto$unix(r2, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a378343712051eea040000000000", 0xb1, 0x0, 0x0, 0x0) write(r1, &(0x7f00000001c0)="38511c27e39edecf6bed5037742e2f87a972d16e41f809cf308495c2c344ce6893468dae6ef00c6a772c27b3d648e057c898010e81d04c7dd3911e1604204d3a22c35af8fccb1ce1e4ddadb5d123ae2d5262788cdcb5c37ca78b5add1bf3af6cc58ba428b004486ea719f665e4a3f092f7064731058ca8bf9aa457ac5a31464dc0c45e7d10b5e36c578476469e635c4c92392444e483dc293d928bafcca6cc0ec76256c6c938ff969416f9540798ce6a2338ca038da605888ad3a75d27015e25530d4fe7fc0212a8dab1ea566bf5cfd4bf1d19f16a465a1e5c2985472365e7273de3c0ff19abe9d7766115b717cf94934704931372e52fdec6e90b04608555484fe1407fce0ec0d12b803a2496f096864426a223c226296c8f78fb91c9dc92f5fb5d189a0293f27529ec471e705bb36eb6e3fc6780fa278572257176b649bce403792e7637e5aebc15666362767bb480383636ef894f30afae1190004eff9c989089fb8f012916668c4d40c138186486e591dcd545eaa029c5c68e2e66b394e2e7126c235f344db676951ea5b6fb52f221f130d23da3879c083a63b4bf453f3ddebcf9d0e2263df3", 0x1a8) (async) sysctl$net_inet_ip(&(0x7f0000000000)={0x4, 0x2, 0x0, 0x17}, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffd4d) (async) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000040)="f3a2", 0x2}], 0x1) (async) close(r1) execve(0x0, 0x0, 0x0) (async) kevent(r0, &(0x7f0000000000)=[{{}, 0xfffffffffffffff9, 0x17, 0x10, 0x40000000000000}], 0x29f, 0x0, 0x8001, 0x0) 1.08522416s ago: executing program 2 (id=95): symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') writev(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000080)='g;', 0x2}], 0x1) faccessat(0xffffffffffffffff, &(0x7f00000000c0)='./file0/file0/..\x00', 0x4b, 0x7) (async) setrlimit(0x8, &(0x7f0000000980)={0xb, 0x56}) (async) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc5005601, &(0x7f0000000000)={0x10, 0xffffffffffffffff, [{&(0x7f0000347000/0x3000)=nil, &(0x7f0000663000/0x4000)=nil, 0x5}, {&(0x7f00005c9000/0x2000)=nil, &(0x7f0000826000/0x4000)=nil}, {&(0x7f0000060000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil}, {0x0, &(0x7f0000ffb000/0x3000)=nil, 0x1}, {&(0x7f000017c000/0x3000)=nil, &(0x7f00004cc000/0x3000)=nil}, {&(0x7f0000000000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, 0xa}, {0x0, 0x0, 0xfffffffffffffffc}, {&(0x7f000000e000/0x3000)=nil, &(0x7f00000c4000/0x10000)=nil, 0x8}, {&(0x7f000000d000/0x4000)=nil, &(0x7f0000826000/0x1000)=nil, 0x2}, {&(0x7f00004c2000/0x1000)=nil, &(0x7f0000661000/0x3000)=nil}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000573000/0x2000)=nil, 0x40000016}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil}, {&(0x7f000038f000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x100000000}, {&(0x7f00004c1000/0x2000)=nil, 0x0, 0x9bbf}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000142000/0x4000)=nil}, {&(0x7f0000573000/0x2000)=nil, &(0x7f0000ff5000/0xb000)=nil}], './file0\x00', 0x9}) ioctl$TIOCSETAF(0xffffffffffffffff, 0x802c7416, &(0x7f0000000000)={0x8, 0x8000, 0x8, 0x543, "225e196f00000000000000000edd0000f400", 0xfffffffc, 0x3fc}) (async) sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b10005040000040000", 0x9, 0x400, 0x0, 0x0) (async) unveil(&(0x7f0000000080)='.\x00', 0x0) (async) r0 = socket(0x11, 0x3, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendto$unix(r0, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a378343712051eea040000000000", 0xb1, 0x0, 0x0, 0x0) (async) r1 = syz_open_pts() (async) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0x100100000000000}) (async) r2 = socket(0x18, 0x2, 0x0) socket(0x800000018, 0x1, 0x0) (async) connect$unix(r2, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) close(r1) r3 = syz_open_pts() ioctl$TIOCSETA(r3, 0x802c7414, &(0x7f0000000040)={0x1000f66c, 0x9, 0x7, 0x5fffdf5f, "9cdc452e307e0804002f4c0000002f9e68cd3304", 0xffffffff, 0x9}) r4 = msgget$private(0x0, 0x1c0) msgrcv(r4, 0x0, 0x0, 0x1, 0x0) (async) msgrcv(r4, 0x0, 0x0, 0x0, 0x800) (async) writev(r1, &(0x7f00000001c0)=[{&(0x7f00000009c0)="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", 0x403}], 0x1) (async) ioctl$FIOASYNC(r3, 0x8004667d, &(0x7f0000000240)=0x4) (async) r5 = socket(0x2, 0x0, 0x9) chown(&(0x7f0000000000)='.\x00', 0xffffffffffffffff, 0x0) (async) getpeername(0xffffffffffffffff, &(0x7f0000000180)=@un=@abs, &(0x7f0000000200)=0x8) (async) write(r5, &(0x7f0000000100)="2126e2acff9ef0dadfe7bab1fc0b7e96b4e5bac16b78eb00920c44a4a40e8c14b87b1cef7970bf7ce4b082c9e833f5a0b0c6152d6fca1047e1e401493dbdb529439d16a1a1e16afc2175273ec20bbb", 0x4f) (async) sysctl$vm(&(0x7f0000000000)={0x2, 0x7}, 0x2, &(0x7f0000001240)="8d960000", &(0x7f0000000080)=0x4, 0x0, 0x0) (async) mprotect(&(0x7f0000680000/0x4000)=nil, 0x4000, 0x9c747b8a67ca29ca) 1.084932109s ago: executing program 0 (id=96): ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000140)={0x3, &(0x7f0000000040)=[{0x0, 0xfe, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x4}, {0x1, 0x0, 0x0, 0xbfffffff}]}) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x11}, 0x6, &(0x7f0000000080)="ae215599fed2fce97f573b9c553a0e622d29cd093849cd4fe42e0f5d2d06a4e744f0713d1fcaa1b8274dffd067d413ef9d2224d3fddc171f73a295b6ed18b3d0588be75e78a1d734e15bfe", 0x0, 0x0, 0xfffffffffffffd37) r0 = socket$inet(0x2, 0x2, 0x0) r1 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000340)={@broadcast, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0xff, 0x0, @broadcast, @rand_addr=0xac1400fc}, @icmp=@redirect={0x5, 0x1, 0x0, @broadcast, {0x5, 0x4, 0x3, 0x3c, 0x3, 0x66, 0x6, 0x0, 0xff, 0x1, @loopback, @rand_addr=0x1}}}}}}) ioctl$VMM_IOC_CREATE(r1, 0xc2585601, &(0x7f0000000280)={0x10, 0x1, [{&(0x7f0000ff5000/0x8000)=nil, &(0x7f0000ff8000/0x1000)=nil, 0x4}, {&(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x3000)=nil, 0x7}, {&(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x2}, {&(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x2}, {&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x7}, {&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff7000/0x3000)=nil, 0x8}, {&(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff6000/0x1000)=nil, 0x9}, {&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0xfffffffffffffe00}, {&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x3}, {&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x3}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x4}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x9}, {&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, 0xd}, {&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff6000/0x1000)=nil, 0x1}, {&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x1}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff2000/0x3000)=nil, 0x2}], './file0\x00', 0x8}) setsockopt$inet_opts(r0, 0x0, 0x200000000000b, &(0x7f0000000080)='\x00', 0x1) setrlimit(0x8, &(0x7f0000000980)={0xb, 0x54}) r2 = syz_open_pts() close(r2) r3 = syz_open_pts() ioctl$TIOCSETA(r3, 0x802c7414, &(0x7f0000000180)={0x7ffffffc, 0xcacf, 0xdffdff7e, 0x1e03d0a, "04e4577e06ffe00007e3de0016dc5463199800", 0x6, 0x8}) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000001b00)="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", 0x171}], 0x1) setsockopt$inet_opts(r0, 0x0, 0x200000000000c, &(0x7f0000000240)="ea10070000000000", 0x8) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000240)="ea00aa6600000000", 0x8) 1.081656367s ago: executing program 1 (id=98): r0 = openat$tty(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$TIOCGETA(r0, 0x402c7413, &(0x7f0000000040)) ioctl$TIOCSETAW(r0, 0x802c7415, &(0x7f0000000080)={0x1, 0x8, 0xfffffffa, 0x4, "146d1b29acdf69310e8098479973d3b10c30520d", 0x2, 0x4}) ioctl$TIOCSTART(0xffffffffffffff9c, 0x2000746e) r1 = syz_open_pts() ioctl$TIOCNXCL(r1, 0x2000740e) ioctl$TIOCSTOP(r0, 0x2000746f) ioctl$TIOCFLUSH(r0, 0x80047410, &(0x7f00000000c0)) ioctl$TIOCSFLAGS(r1, 0x8004745c, &(0x7f0000000100)=0x1b6f) ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000140)={0x4e, 0x7, 0xad, 0x8, "77321c626bc256c4b585520008f61f6ddbbe4c3b", 0x101, 0x400}) r2 = fcntl$getown(r0, 0x5) ioctl$TIOCSTAT(r0, 0x20007465, &(0x7f0000000180)) fcntl$setown(r1, 0x6, r2) execve(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000440)=[&(0x7f0000000200)='-\x00', &(0x7f0000000240)='/dev/tty\x00', &(0x7f0000000280)='/dev/tty\x00', &(0x7f00000002c0)='/dev/tty\x00', &(0x7f0000000300)='/dev/tty\x00', &(0x7f0000000340)='/dev/tty\x00', &(0x7f0000000380)='/dev/tty\x00', &(0x7f00000003c0)='/dev/tty\x00', &(0x7f0000000400)=',*$\\:\x00'], &(0x7f0000000700)=[&(0x7f00000004c0)='\',!}]$>\x00', &(0x7f0000000500)='%-\x00', &(0x7f0000000540)='/dev/tty\x00', &(0x7f0000000580)='/dev/tty\x00', &(0x7f00000005c0)='/\x00', &(0x7f0000000600)='/dev/tty\x00', &(0x7f0000000640)='/dev/tty\x00', &(0x7f0000000680)='\x00', &(0x7f00000006c0)='/dev/tty\x00']) r3 = fcntl$dupfd(r0, 0xa, r1) ioctl$FIONREAD(r3, 0x4004667f, &(0x7f0000000780)) ioctl$TIOCSDTR(r1, 0x20007479) ioctl$TIOCMGET(r1, 0x4004746a, &(0x7f00000007c0)) ioctl$TIOCSETAW(r0, 0x802c7415, &(0x7f0000000800)={0x7, 0xf3b, 0xfffffff7, 0x5, "7cf6fd7a7b94c7c03f66f48a1140023594bbc14b", 0x9, 0x2265}) mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4) getsockopt$sock_int(r3, 0xffff, 0x1823, &(0x7f0000000840), &(0x7f0000000880)=0x4) ioctl$TIOCFLUSH(r3, 0x80047410, &(0x7f00000008c0)=0xfffffff9) symlinkat(&(0x7f0000000900)='./file0\x00', r3, &(0x7f0000000940)='./file0\x00') getsockopt$sock_cred(r3, 0xffff, 0x1022, &(0x7f0000000bc0)={0x0, 0x0}, &(0x7f0000000c00)=0xc) getgroups(0x8, &(0x7f0000000c40)=[0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]) r6 = getuid() getsockopt$SO_PEERCRED(r3, 0xffff, 0x1022, &(0x7f0000000c80)={0x0, 0x0, 0x0}, 0xc) sendmsg$unix(r3, &(0x7f0000000d00)={&(0x7f0000000980)=@file={0x0, './file0\x00'}, 0xa, &(0x7f0000000b80)=[{&(0x7f00000009c0)="cc3100466fa3b49fa8b18ee3fd9395ac484d56e437a4d0c4da549545418daa24c8246ab7434b82ecca9e0224acc5ba8df297e11ce1ee0475aa9e6adece21a453dc8ab2dc9e52a5c06a7e1ae959ff422b90e5c4528aa8edac073e85ab2a5c414981e07f2365f4126f033e61d431b609655c07ad6d0b78dff28f393a09e36ea29a7dcf2a2c4a2d20c929a60c48389cc77d59414bce4303efeb0b6893a25b602e88fc2c0e59b33aa597429210c0abae35bacec406b92b12c2bd0598e07bf1fef4cd9af03f1e4ac45e83dc61c6de89d46ccd0377842e8ce5e935622d416f14c3bd", 0xdf}, {&(0x7f0000000ac0)="e6aa3c71625ecfe8463866900cdf5e4f9a042603c38310b1a86cac0bb1ff46b4f212aeebc161afa42c786600f9932c089ed219eff0a105084d48da38e3447633c37fb72a91ba42cfdcc71f81a8ae271d0dca09414afad392753a9ed788242b1d39778d53363550a603c6475ec510b37dd887f0469478b037533e859c2c5294401eb3bbad593f4bc3f5ce998c4e", 0x8d}], 0x2, &(0x7f0000000cc0)=[@cred={0x20, 0xffff, 0x0, r2, r4, r5}, @cred={0x20, 0xffff, 0x0, r2, r6, r7}], 0x40, 0x1}, 0x40d) ioctl$TIOCSWINSZ(r3, 0x80087467, &(0x7f0000000d40)={0xf, 0x6, 0x30, 0x3}) ioctl$TIOCMSET(r1, 0x8004746d, &(0x7f0000000d80)=0x1) 1.080719662s ago: executing program 5 (id=99): r0 = socket(0x2, 0x2, 0x0) sendmsg(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000000)="fe463626877c09de0e91ddde39846a08ee5d13bda28ed2e2ba3128929f438d987954b08e4ddc19c624ccfd136fad6f9b3db87e6395873224ab13e3a0a00428b281e86a398865afe2bc85f94cc5031fe0e8d85f19b712c889983ce26ca2160fa0f2e98828f425f858b06a130e3c059257c92add67c9469004772b4b90caf03395c78876e2709e082b267ca33c7e0bdf143fc4dd94894ac9a68f8144d572fafd48a1e2b52c5b5f797688b58e477be850a5c6a69a0982f035319143378e0bf1fcde89c5a1e6d5e4c45a23fe94d7941e8a68c130da00c110c0", 0xd7}, {&(0x7f0000000200)="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", 0x1000}, {&(0x7f0000000100)="0586d1c3df9334b60f55", 0xa}, {&(0x7f0000001200)="2b79bf43d2971991c52dd0bc72cacb394a68acaa559a7c05f10e069160bcbda4eba7414f836fe531b764fc5627ccfb5bb35dca1b3f3414c0cebab76c1ecf30fcb1d829a768d6ca7bb6f1fa36ff25e58c6064ae4fda2734b4a990c3197e4c7dab6f4c76846394b641a30d224fe01b08fddbbe029f02dcadca7659fa2894574733c877b5d9cdd5c1a4cf01f77fc96f239fb954dada161484843be9cf9c7593c05f6e9a5f5f9181e855a377f2a1b630df61c434b044aa2845cbb51cdceda30263db122fc34a9b7f515f7590a61876c1aa6a956094a4572a44bf43", 0xd9}, {&(0x7f0000000140)="9d274b7ccea9b2876b60a35575f993dbc79ffe45029cdbffc1d466d6a453a10d51e06ecdb200db2006", 0x29}, {&(0x7f0000001300)="24ff61b5c2f42938e391bcc0f922c79d905e340f1ddfe512b15b1f3dc9418de4223260a9b3a993691af601fdad11d18551b39681c31c6372701b0889c9169f6f3ad6b4538744e65f525febceda55f331c388a4670ebcbd747fae093395d4ec706a38b01c71bb69e56f369369e267bea6046bd11359a28f4a4df7d256dfd08287de29a5d45e670e6c9bb0959d7e69d676a97423acfad4ccfdaf720493904118666d2f241e9e042d27ac69fcc9c87c283cb33fd27bde2d38917c164cdd3b183944b8b3f7f7b3145287e2c53eae4f9b9b5b08bce384a1fcbbc177", 0xd9}, {&(0x7f0000000180)="5605cc38083bdd542319355097516a40741346a3601509160e538b090be2c69cd5f8b5f305d1a7693f12", 0x2a}, {&(0x7f0000001400)}, {&(0x7f0000001440)="aa23779409c02762706125155aeaf8a6ad5920abd65e99240b090a8441a18416968da5187bddcc8f908f934e5d3df7f89650bc93f0e34ea487c6ecc1337b208f5b8cf632a4f1e50ae8821d12d811a2bd65f4e6b95f93441732d9f508dc2c585ecd11dadd7f70c910d82e60558cb08517d9c898750b00c1f8e055fd42", 0x7c}], 0x9, &(0x7f0000001580)=[{0xc0, 0x10000, 0x8, "23d2e0602c625dc1debac5f5c1f73148a26b1caf9d7322ed5f5d7fbdcb49d58eb296e62a13507eb54fbae9e3af9db2dc8c4ffa481afe989f0c83103f6b5cff3bacf4c49c741552ea7e3edb890821d7d852e7e379a4eaf6b1fbc25c69e91a53b7bf46eeb54f3ebb2670c41bc36b10e1be4b6ca3ee7ff6bf0db0fcfc82ed24afd99e231bccba76ef8e50d1f11963fea187374b5785d92ef429ef7639e31b120fb8942f8fd596eb383db8cd"}, {0xd8, 0x1, 0xe, "0f9b27602b661a3205a7a8fe12ba01a494d19cdf2d91761894a361f618eca763fc6a22a05bf5fc0fdf197db96b987a4b8ead3328aa4de929a182841543c86e5eb1a1dd292963cb27f6e91c088aedb61e30943252677aa8140b0cb9df8f55e0db6c9156b3a63560f9a74db95dd5021fd3078bd0c61c25c2371be9e8542631780b22d5951f3c70c1d843873af45d66e4ca94361d765a87e9df80ac3680c0c24be71ae57abf5642f73745f67656150a250de7bf7a78eb991c29eccf95ed7e8032658a"}, {0xd0, 0xffff, 0x80000001, "2ad144356d5c4b97578ba907347a9adedc43cade19e5559d2a219fdcf5aa5181a71d2a98359d03bddc43311c26c7e8ba99e078b1d412b082f12c328efb31b2f2be9061d58b464ad7c06fdb5a67170a232815eb9c3b7ff500d968d4b1b8af6b019c2d49e71200b0467371d9dc6faa0c4dbaf5b842864484e53e3ecd77460a4b0104fce97f40fc6a1f5c08bd0d01d29e269cc6c7c1edfa263921d93c58223e93d597310d33cb5e678e83b5d0c3b725e8be2a8fcf581e65985e9230c3f813c9"}, {0xc0, 0xffff, 0x5, "8eb2576e072ac9571caba92391aa655be6ee8d89a47e17e1ed25a9a9f99f40b5183a287fe7629306b27d47fb461df936b7e2f2b89f657c1891d0b01bd9534c6cadfd2ffb94296ca8d9296ae342f16d8a03b48be5b3283e3753f295b45d58c1dfa54bf9772edd8dca269213dc94f7fa6da7f797e8db6cb59d09d79c9f22992e74ee010ef0d967d4a171b44f6e858742ccc4e41eb4f88a33d6de9e047aec0c700e63d8095ce90406f1daca2172d7893a93"}], 0x328}, 0x8) (async) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r1 = socket(0x2, 0x2, 0x0) ftruncate(r0, 0x10001) (async) ioctl$FIONREAD(r1, 0xc0206923, &(0x7f00000001c0)) ioctl$FIONREAD(r0, 0xc0206925, &(0x7f00000001c0)) 1.073196386s ago: executing program 7 (id=100): sysctl$kern(&(0x7f00000000c0)={0x1, 0x33}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x3414, 0x0, 0x37) r0 = semget(0x1, 0x0, 0x201) r1 = geteuid() getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0xc) r3 = getuid() r4 = getegid() lchown(&(0x7f0000000340)='./file0\x00', r3, r4) r5 = syz_open_pts() fcntl$lock(r5, 0x9, &(0x7f0000000000)={0x3, 0x0, 0x0, 0x1000300000080}) flock(r5, 0x1) flock(r5, 0x3) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0x80000000, 0xffff63de, 0x2, 0x2, 0x1, 0x100003, 0x40, 0x10, [{0x6, 0x80000000, 0x20000775, 0x84100201}, {0xffffff25, 0x8, 0x6, 0xfff}, {0x800, 0xfffffffe, 0x20002005, 0x1}, {0x0, 0x1000007, 0xf}, {0xfffffffc, 0x9, 0xf11, 0x4000007}, {0x2, 0xffff, 0x80d2}, {0x2024, 0x8001, 0x85, 0x9}, {0x1000000, 0x800, 0x7, 0xfbffe2e9}, {0x8, 0x6, 0x6, 0x7fff}, {0x0, 0xfffffff8, 0x61b, 0x8bfb}, {0xfffff0d1, 0x8000000, 0x8, 0x7}, {0x4, 0xc7cb, 0x3, 0x1}, {0x401, 0x106, 0x9, 0x4040}, {0x200003, 0xee6, 0x2, 0x6f5fc487}, {0x82, 0x5, 0xfffffffe, 0x1}, {0x4, 0x6, 0x6, 0x10069}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x19, 0x0) writev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000000)="c886b4", 0x3}], 0x1) semop(0x0, 0x0, 0x0) setsockopt(r6, 0x3, 0x72, 0x0, 0x0) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r7 = fcntl$dupfd(r6, 0x2, 0xffffffffffffffff) close(r7) r8 = socket(0x2, 0x2, 0x0) connect$unix(r8, &(0x7f0000000000), 0x10) r9 = socket(0x2, 0x2, 0x0) setsockopt$sock_int(r9, 0xffff, 0x1023, &(0x7f0000000040), 0xe0) select(0x40, &(0x7f0000000000)={0xfffffffffffffffd, 0x0, 0x0, 0x564, 0x9ce8, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x41) fcntl$lock(r5, 0x8, &(0x7f0000000080)={0x3, 0x0, 0x0, 0x100000001}) getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000200)={{0x4, r1, r2, r3, r10, 0xd0}, 0x101, 0x2, 0xfffffffffffffff9}) 966.471396ms ago: executing program 5 (id=102): r0 = geteuid() getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0xc) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, r1, r0, 0x0, 0xc8d2b21d9a355508, 0x8}, 0x0, 0xe, 0x0, 0x0, 0x0, 0x71ae, 0x5}) r2 = socket(0x18, 0x2, 0x0) close(r2) r3 = socket(0x800000018, 0x1, 0x0) r4 = open(&(0x7f0000000080)='./file0\x00', 0x18289, 0x190) ftruncate(r4, 0x10000) r5 = open(&(0x7f0000000040)='./file0\x00', 0x200, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x10, r5, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r6 = shmget$private(0x0, 0x3000, 0x43a, &(0x7f0000ffa000/0x3000)=nil) shmctl$IPC_SET(r6, 0x1, &(0x7f0000000240)={{0x4, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x7}, 0x5, 0xfffc, 0x0, 0x0, 0x1, 0x0, 0x800000800000000}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) shmat(r6, &(0x7f0000001000/0x3000)=nil, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r3, 0xffff, 0x1, &(0x7f00000000c0)=0x6, 0x4) connect$unix(r2, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) geteuid() (async) getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000000), 0xc) (async) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, r1, r0, 0x0, 0xc8d2b21d9a355508, 0x8}, 0x0, 0xe, 0x0, 0x0, 0x0, 0x71ae, 0x5}) (async) socket(0x18, 0x2, 0x0) (async) close(r2) (async) socket(0x800000018, 0x1, 0x0) (async) open(&(0x7f0000000080)='./file0\x00', 0x18289, 0x190) (async) ftruncate(r4, 0x10000) (async) open(&(0x7f0000000040)='./file0\x00', 0x200, 0x0) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x10, r5, 0x0) (async) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) (async) shmget$private(0x0, 0x3000, 0x43a, &(0x7f0000ffa000/0x3000)=nil) (async) shmctl$IPC_SET(r6, 0x1, &(0x7f0000000240)={{0x4, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x7}, 0x5, 0xfffc, 0x0, 0x0, 0x1, 0x0, 0x800000800000000}) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) shmat(r6, &(0x7f0000001000/0x3000)=nil, 0x0) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (async) setsockopt$sock_int(r3, 0xffff, 0x1, &(0x7f00000000c0)=0x6, 0x4) (async) connect$unix(r2, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) (async) 966.274704ms ago: executing program 4 (id=103): select(0x40, &(0x7f0000000100)={0x2, 0x800, 0x0, 0x2, 0x200, 0x27, 0xfffffffffffffffd, 0x80000001}, 0x0, 0x0, 0x0) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x65}) (async) r0 = syz_open_pts() close(r0) r1 = syz_open_pts() ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000140)={0x400, 0x9, 0xffffdf86, 0xffffff8c, "08ed95990000000000000001000004fb0400", 0x4, 0x4}) (async) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) (async) readv(r1, &(0x7f0000000040)=[{&(0x7f0000000000)=""/18, 0x12}], 0x1) (async) sysctl$vfs_nfs(&(0x7f00000000c0)={0xa, 0x2, 0x3}, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffed4) (async) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0xe8, 0x0) r3 = fcntl$dupfd(r2, 0x3, 0xffffffffffffffff) ioctl$FIONREAD(r3, 0x800474c4, &(0x7f00000000c0)) (async) getpeername$inet(r2, &(0x7f0000000180), &(0x7f00000001c0)=0xc) (async) syz_emit_ethernet(0xaa, &(0x7f0000000000)=ANY=[@ANYRES8=r3, @ANYRES8=r2]) (async) ioctl$TIOCCBRK(r2, 0x2000747a) 965.963378ms ago: executing program 5 (id=104): r0 = open(&(0x7f0000000080)='./file0\x00', 0x18289, 0x190) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000400001803c1, 0x162) ftruncate(r1, 0x80002) truncate(&(0x7f0000000140)='./file0\x00', 0x30001) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) chmod(&(0x7f0000000140)='./file0\x00', 0x3ea) faccessat(r0, &(0x7f0000000600)='./file0/file0/../../file0\x00', 0x0, 0x2) r2 = open(&(0x7f0000000c00)='./file0\x00', 0x0, 0x0) r3 = open(&(0x7f0000000380)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf79e5) writev(r3, &(0x7f0000000100)=[{&(0x7f0000001200)='#', 0x1}, {&(0x7f0000000900)='!', 0x1}], 0x2) write(r3, &(0x7f0000000140)="6a49c6fad20749526aeec7a22020000a", 0x10) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) fchdir(r2) getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000000380)={0x0, 0x0}, &(0x7f00000003c0)=0xc) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0xfffffffe, 0x0, 0x0, r4, 0x0, 0xc0}, 0x1000004, 0x2, 0x0, 0x0, 0x60000000000004, 0x803, 0x7, 0x4}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r5, 0x0, 0x24, &(0x7f0000000180)="fd0cc085", 0x4) unveil(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='c\x00') symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') sendmsg(r2, &(0x7f0000000340)={&(0x7f00000001c0)=@un=@abs={0x0, 0x0, 0x0}, 0x8, &(0x7f0000000300)=[{&(0x7f0000000240)="c855113ca2157b23049e1945c52e125372f47f46d9a040c8bf4d6179dbb12357bfcb94f5cabdbc10c5cd197bf250ff1823f62466e5f18fc07a37204211e7a173d0be75b7a0b02265621f27df4c09d8ba7f2167ccf38de3eff37c1ddbd60d9124e55e8a4f72cbbc586ff5be4e86a7d9e82f37ad46f9ff03a6d64ea296e7159c2da9832bbb352a2cb3fce64a8a4bb53ed78af922d3d479849b6df4e9d76e3313d4fe6cc3b2cd5461cf6ff8ee03cfb8", 0xae}], 0x1, &(0x7f0000000440)=[{0x20, 0xffff, 0xf, "4bb7d2fc8520b28adc42b05b9ad9"}, {0xc0, 0xffff, 0xffffffff, "a89ead4c8e867175ed5e3d3c91c9cfc732416ca5591f423e78887c5491568064cb83f5beab343b34186a288f6f7d1285f6d7ba02a54b853f24f66beb396845ad7bb219e420de7ebba2f7ae9509625adeed5d510390d0a6521f4b423d40ff2db9d60f144db565fc9c3c1e23a9444bb15a727b6c7d612ab1508a42efeb17c92bb948500ea94aeb8d963d838c191742e071697af1d8ea465bd42e1f05028c19e9ed04672c4240b61b5b40abaa"}, {0xd8, 0x1, 0x800, "08dd40d2d2a6fa1491f7727647f433c45344060b9420137d2e12411e7c600ca687f828566f94f9e67c1948af7d1761953315c13f95285da3762a713639ba9401240b9b6052cea18f57551665967facff00e87e05bf3356e68e6dd56f185d8fe65ec6d143a4a68e58a2cb26e9e2b08416e13c2fd7c0404ad71fe0cde3d976cd9bfb2ef240dff77860c3b98d313c5fc89e8d51fb9d4b4b43b1f5e8afbb95482e862c5aaa4874edf97a07ac0149f11970d50e2f086e1e08a7631e44651b65f0c7225ead5418450ba8"}], 0x1b8}, 0x4) unveil(&(0x7f0000000080)='./file0/file0/../../file0\x00', &(0x7f0000000400)='x\x00') r6 = syz_open_pts() ioctl$TIOCSETD(r6, 0x8004741b, &(0x7f0000000180)=0x9) r7 = open(&(0x7f00000000c0)='./file0\x00', 0x80000000000206, 0x0) writev(r7, &(0x7f0000000100)=[{&(0x7f0000000040)="2000019c0a", 0xffffff7e}], 0x1) 965.691157ms ago: executing program 1 (id=105): r0 = open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x101) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000440)="e9", 0x1}], 0x1, 0x3effd) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r1, 0x0, 0x200000000000c, &(0x7f0000000000)="ea00000100005a21", 0x8) mlock(&(0x7f00000ca000/0x1000)=nil, 0x1000) r2 = open(&(0x7f0000000040)='./file0\x00', 0x200, 0x0) mmap(&(0x7f00000c8000/0x3000)=nil, 0x3000, 0x1, 0x812, r2, 0x0) select(0x2, &(0x7f0000000000)={0x8000000000000001, 0x1f5, 0xfffffffffffffffb, 0x4, 0x7, 0x3, 0x6, 0x8}, &(0x7f0000000080)={0x8, 0xff, 0x7, 0x5, 0x7, 0xf9bc, 0xd47a, 0x2}, &(0x7f00000000c0)={0x4, 0x7fffffffffffffff, 0x9, 0x6, 0xfffffffffffffff9, 0x1, 0x7fffffff, 0x7fffffffffffffff}, &(0x7f0000000100)={0x40, 0x2}) ftruncate(r0, 0x6) 924.194507ms ago: executing program 4 (id=106): fcntl$lock(0xffffffffffffffff, 0x9, &(0x7f00000001c0)={0x3, 0x0, 0x0, 0x300000003}) syz_emit_ethernet(0x22, &(0x7f0000000240)={@random="993a401d8936", @random="00dfa2a4f1f8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x3a, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @rand_addr=0x4d8a}}}}}) unveil(&(0x7f0000000140)='./file0aaaaaaaaa\x00', &(0x7f0000000180)='c\x00') unveil(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='x\x00') sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) unveil(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000300)='W\x00') unveil(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000280)='x\x00') 923.777955ms ago: executing program 4 (id=107): r0 = socket(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xa7210e10bc3c9de9) r1 = open$dir(&(0x7f0000000000)='./file1\x00', 0x20, 0x70) pread(r1, 0x0, 0x0, 0x7) setsockopt$sock_int(r0, 0xffff, 0x1001, &(0x7f0000000100)=0x20000, 0x4) pledge(0x0, &(0x7f00000000c0)='\x00') socket$unix(0x1, 0x2, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f00000000c0), 0x1c, 0x0}, 0x0) r2 = socket(0x18, 0x2, 0x0) close(r0) connect$unix(r2, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) getsockname$inet(r2, &(0x7f00000000c0), &(0x7f0000000380)=0xffffffffffffff24) ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f0000000000)={0xfba, 0x10000004, 0x5, 0xffffffdf, "a100ec00000000000000000000000a00", 0x461b, 0x1}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r3 = socket(0x18, 0x2, 0x0) setsockopt(r3, 0x1000000029, 0x2e, 0x0, 0x0) sendmsg$unix(r3, &(0x7f0000001700)={0x0, 0xffffffb3, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0x8, 0x8, 0x7, 0x2, 0x8, 0x3, 0x40, 0x10, [{0x5, 0x3, 0x7fff, 0x80000201}, {0x4, 0x8, 0x6, 0xfff}, {0x1, 0xfffffffe, 0x6, 0x2}, {0x2, 0xdf, 0xf, 0x40}, {0x2, 0x7, 0xf11, 0x7}, {0x800, 0xffbf, 0x80cf}, {0x1, 0x5, 0x85, 0x2}, {0x0, 0x1, 0xfffffff8, 0xfbffe2e9}, {0x8, 0xffe, 0x6, 0x17fff}, {0x3, 0x0, 0x5, 0x7}, {0x8, 0x8000000, 0x7, 0x7}, {0x4, 0xc7cb, 0x800000, 0xa66}, {0x401, 0x10a, 0x9, 0x9}, {0x200003, 0xee2, 0x4, 0x6f5fc48f}, {0x81, 0x401, 0x3, 0x7fff}, {0xffffffff, 0x8003, 0x6, 0x69}]}) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) poll(&(0x7f0000000000), 0x35, 0x0) pledge(&(0x7f0000000000)='tty \x00\x02\x00!\a\x9bp^|#\xcbhl\x97\xa3_\xbc\x04\x9d!\xd9\x9f\x9f\xb4\x96\x13\x12\xe0\r\xe7\xb9E\b\x00\x00\x00B\xaaY\xe1Q<\x19\xc0\xf6Yf\x9au^\xa0\xc9j\xdd-I\x01R\x00w\xf7\x15\x04\xa6\x82aY\x1d\xd7\f>Y\x06\"\xad\xb6\x88_\xeb\at\x91\xd3\xbf\xea\xddt\xe0\bt\x06S,\x1f\x1fj\xa5H\x01nz\x947\xf8Q|o\x80\xdbH\xa7-\xaaw\xcet\x044\xc5\xa9e\xa9\xf6\x1b\x8e\x05\x86\x91IsC\xb9ul\xaeu\xad\x9b\xaf\x04\xc4\x03\"F\x8f\xd5\xe8\r\x8d\xa1\x00\xcc\xd7\xa0\xe1\xeb\xc1>\xbd\t\xc8\x15\v\xb0, \xee\xa4\xa6\xb9a\x01&\xadrj\xd5\xc26p\xa14\xe0\xbf\xa0\x1es\x01=\xdbd\xf0?=\x8afcJ\x8e\xf7\nn\xd4<\x00\xec\xe4^\x00\x00\x00\xca\x90\xfa\x98\xc9gty\xce\xab\xd2\xa1\x85E\xe4\xa9\xd5\xab\x83\xda?w\x83\xbc\xcf\xd20(L&b\xed\x8c\x1d\x1a\x9fd\x99H\x9e\x82\x10\xea\x05\xf8\xff\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\xa6\x8c\x05n\x83\x83\x12+\x16\xc1\x00\x04\x00\x00\x13:o\x0f\x1fB\xa4\xddwB\x92h\xde\xfal3\x88e\x04J\\\x00D\xae`\x8e\xadd\xa8;\xee\xc4K\xe8]\x84\x90\xb8d\xfb\x95\xb3\xe9(x_\x80]\xadW\xd5\xa9\xaa\x03\x9c6\xa9\xc4\x01\x03\xea\xe5\x90\x85\x16\xb0DV\x13\x01\xab\x01\xf0\x8f\x02\xc2\xc89\x19o\xf5zJ\x9b\x03\x1f\xd7\xdbN\\\xc0\xcd?Pg\xd5q\x13\xbd \xfa\xab\xccJK\x11\\\x16~#P.\xc9K\x15r\xab\xda\xe2\xd4\xec8\x8b\xb6e\x96\xe9\xc3\x93\xed\x94.\xc2\xa0\x1fU#\x96\xe6\xb6C\xfa\x03/\x8b\x0e2\xec\x96v\x9b/.\v\x9e\x80\x18s\xae.\xf4\x14KS`\x87\x8b4\t\x00\x87{\xa8@e\xbfe\xeb\xee\xa2\xe72\xb8Q:\x9f\xc2ym\x86\xc4\xcbm\x80%\xfc\x9e\x9f', &(0x7f0000002840)='tty \x00\x02\x00!\a\x9bp^|#\xcbhl\x97\xa3_\xbc\x04\x9d!\xd9\x9f\x9f\xb4\x96\x13\x12\xe0\r\xe7\xb9E\b\x00\x00\x00l\xaaY\xe1Q<\x19\xc0\xf6Yf\x9au^\xa0\xc9j\xdd-I\x01R\x00w\xf7\x15\x04\xa6\x82aY\x1d\xd7\f>Y\x06\"\xad\xb6\x88_\xeb\at\x91\xd3\xbf\xea\xddt\xe0\bt\x06S,\xdbH\xa7-\xaaw\xcet\x044\xc5\xa9e\xa9\xf6\x1b\x8e\x05\x86\x91IsC\xb9ul\xaeu\x94\x9b\xaf\x04\xc4\x03\"F\x8f\xd5\xe8\r\x8d\xa1\x00\xcc\xd7\xa0\xe1\xeb\xc1>\xbd\t\xc8\x15\v\xb0, \xee\xa4\xa6\xb9a\x01&\xadrj\xd5\xc26p\xa14\xe0\xbf\xa0\x1es\x01=\xdbd\xf0?=\x8afcJ\x8eYEn\xd4<\x00\xec\xe4^\x00\x00\x00\xca\x90\xfa\x98\xc9gty\xce\xab\xd2\xa1\x85E\xe4\xa9\xd5\xab\x83\xda?w\x83\xbc\xcf\xd20(L&b\xed\x8c\x1d\x1a\x9fd\x99H\x9e\x82\x10\xea\x05\xf8\xff\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\xa6\x8c\x05n\x83\x83\x12+\x16\xc1\x00\x04\x00\x00\x13:o\x0f\x1fB\xa4\x00wB\x92h\xde\xfal3\x88e\x04J\\\x00D\xae`\x8e\xadd\xa8;\xee\xc4K\xe8]\x84\x90\xb8d\xfb\x95\xb3\xe9(x_\x80]\xadW\xd5\xa9\xaa\x03\x9c6\xa9\xc4\x01\x03\xea\xe5\x90\x85\x16\xb0DV\x13\x01\xab\x01\xf0\x8f\x02\xc2\xc8\x9b\x03\x1f\xd7\xdbN\\\xc0\xcd?Pg\xd5q\x13\xbd \xfa\xab\xccJK\x11\\\x16~#P.\xc9K\x15r\x04\xd9Z;\xc0\x8dOze\x96\xe9\xc3\x93\xed\x94.\xc2\xa0\x1fU#\x96\xe6\xb6C\xfa\x03/\x8b\x0e2\xec\x96v\x9b/.\v\x9e\x80\x18s\xae.\xf4\x14KS`\x87\x8b4\t\x00\x87{\xa8@e\xbfe\xeb\xee\xa2\xe72\xb8Q:\x9f\xc2b\x897\xbe\r\x04\xdf\xe2\xc0\xf0FV\'m\xcbm\x80%\xfc\x9e\x9f\x87\x80A\xbe\xc2\x00\x00\x00\x00\x00\x006\x96\xbb\x9f\x85\x98\xbb\xbc;\xaa\x97c\xfe\x82jz&t\xa7\xc4\xcd\xb0\b9G\xcag\fY\xe6\r\xcdT\xd3\x1c(\xef\xc0\x038\xbd\xdd\xd9\xc9\x93a]q\xd2\x9b\a\x1e\xf8\xc3\"\xc8:\xb8$\x9f\'P\x17\xfa\xf3Xa\trB-\xf2g\xe6Z\xd5F\xd2\x80\xe0\x99\"\xc12\xe8\b\xc58\x00'/659) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) sysctl$kern(&(0x7f00000000c0)={0x1, 0x45}, 0x2, 0x0, 0x0, 0x0, 0x0) pledge(&(0x7f0000000300)='#!\x00', &(0x7f0000000340)='.^(\\+\x00') mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) connect$unix(r0, &(0x7f0000000000), 0x10) setsockopt$inet_opts(r0, 0x0, 0x1, &(0x7f00000000c0)="9876d692a3ef9c7ab923a2f0", 0xc) shutdown(r0, 0x1) write(r0, &(0x7f0000000240)="14bdfa5d1d34e2fecb284a6498307dcda9aec43050036123339a346f737850551408753f95b7688ad4c4e1dd5489e7bafc58d3e5823757ae8b630719ef187ccad995f13dbe19a6dd4e6902bd8297b0799b426aabe9fad9db6996571c6d9f8bb5d542c2148aa42be940970fe88d34d8f99afe7e7820237400000000008000000100"/138, 0xfc7e) 923.175667ms ago: executing program 5 (id=109): r0 = syz_open_pts() munmap(&(0x7f00004ac000/0x3000)=nil, 0x3000) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r1, 0x0, 0x1, &(0x7f00000002c0)="ee0866", 0x3) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) sysctl$hw(&(0x7f00000000c0)={0x6, 0x8}, 0x2, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000040)={0x0, 0xffffffff, 0xffef9ff6, 0x2, "4b14a6bcff0300dba80000000000081000"}) mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) r2 = open(&(0x7f0000000040)='./file0\x00', 0x2, 0x102) ioctl$FIONREAD(r2, 0xc0206983, &(0x7f0000000100)) getsockopt$sock_cred(r2, 0xffff, 0x1022, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0xc) r4 = geteuid() r5 = open(&(0x7f0000000380)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf79e5) writev(r5, &(0x7f0000000140)=[{&(0x7f0000000080)='#', 0x1}, {&(0x7f0000000040)="2187", 0x2}], 0x2) write(r5, &(0x7f00000000c0)='\t', 0x1) write(r5, &(0x7f00000003c0)="090900409d0a", 0x6) execve(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) setreuid(r3, r4) getsockopt$sock_cred(r2, 0xffff, 0x1022, &(0x7f0000000240), &(0x7f00000002c0)=0xc) semop(0xffffffffffffffff, 0x0, 0x0) writev(r0, &(0x7f0000000500)=[{&(0x7f0000000000)="944713145761ef4626e1cc7f391f55166f838c5f5b0fe56316", 0x19}, {&(0x7f0000000140)="56accee1c3c4447919b68f12aed218a2919eb5ccedebf4bb4d9abb9514b0c2038aa1181aa3ad6b41c733bb946599ccb94bf562acbae2137ff769c5e2e2249e62a833b477a7fb6e099ad44c910e8ff7427010bba8fc0c6033", 0x58}], 0x2) ioctl$TIOCFLUSH(r0, 0x80047410, &(0x7f0000000080)=0x2) 830.268507ms ago: executing program 3 (id=110): r0 = semget(0x1, 0x2, 0x2) r1 = socket$inet(0x2, 0x2, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) preadv(r2, &(0x7f0000000080)=[{&(0x7f0000000480)=""/240, 0xfffffc47}, {&(0x7f00000000c0)=""/179, 0xfdac}, {&(0x7f00000002c0)=""/229, 0xe2}], 0x50, 0x0) mprotect(&(0x7f00001e8000/0x4000)=nil, 0x4000, 0x2) r3 = socket(0x2, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc5005601, &(0x7f0000000000)={0x10, 0x0, [{&(0x7f0000347000/0x3000)=nil, &(0x7f0000663000/0x4000)=nil, 0x5}, {&(0x7f00005c9000/0x2000)=nil, &(0x7f0000826000/0x4000)=nil}, {&(0x7f0000060000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil}, {0x0, &(0x7f0000ff0000/0x4000)=nil, 0x1}, {&(0x7f000017c000/0x3000)=nil, &(0x7f00004cc000/0x3000)=nil}, {&(0x7f0000000000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x6}, {0x0, 0x0, 0xfffffffffffffffc}, {&(0x7f0000ff0000/0xf000)=nil, &(0x7f00000c4000/0x10000)=nil, 0x4}, {&(0x7f000000d000/0x4000)=nil, &(0x7f0000826000/0x1000)=nil, 0x2}, {&(0x7f00004cc000/0x4000)=nil, &(0x7f0000661000/0x3000)=nil, 0x3}, {0x0, &(0x7f0000156000/0x1000)=nil, 0x7fff}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil}, {&(0x7f000038f000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x100000000}, {&(0x7f00004c1000/0x2000)=nil, 0x0, 0x9bbf}, {&(0x7f00001cf000/0x4000)=nil, &(0x7f0000142000/0x4000)=nil}, {&(0x7f0000573000/0x2000)=nil, &(0x7f00004e9000/0x4000)=nil}], './file0\x00'}) setsockopt$sock_timeval(r1, 0xffff, 0x1006, &(0x7f00000003c0)={0x0, 0xfffffffffffffffa}, 0x10) ioctl$FIONREAD(r3, 0xc0106978, &(0x7f0000000140)) getsockname$inet(r1, 0x0, &(0x7f00000004c0)) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000780)=@un=@abs={0x0, 0x0, 0x2}, 0x8, 0x0, 0x0, 0x0}, 0x8) setrlimit(0x8, &(0x7f0000000980)={0xb, 0x54}) r4 = syz_open_pts() close(r4) syz_open_pts() ioctl$TIOCSETA(r4, 0x802c7414, &(0x7f00000000c0)={0x9, 0x9, 0xfffdff80, 0x160350d, "04f0ee091a00041300000fe0ff2285080800", 0x1000004, 0x42}) writev(r4, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) semctl$GETVAL(r0, 0x1, 0x5, &(0x7f0000000200)=""/139) setitimer(0x19facee1de271b2e, 0x0, 0x0) 828.656907ms ago: executing program 0 (id=112): r0 = open(&(0x7f0000000040)='./file0\x00', 0x200, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x1, 0x2010, r0, 0x0) 828.201404ms ago: executing program 0 (id=114): r0 = socket(0x2, 0x4001, 0x0) r1 = dup(r0) r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="89000000ffff000001"], 0x9}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r4, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/244, 0xf4}, 0x0) sendmsg(r3, &(0x7f0000000380)={0x0, 0x32c, 0x0, 0x0, &(0x7f0000000000), 0x90}, 0x0) r5 = msgget(0x1, 0x40) msgctl$IPC_STAT(r5, 0x2, &(0x7f0000000180)=""/108) r6 = socket(0x18, 0x1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) unveil(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='c\x00') symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') unveil(&(0x7f00000000c0)='./file0/file0/..\x00', &(0x7f0000000100)='r\x00') r7 = open(&(0x7f0000000200)='./file0\x00', 0x200, 0x0) r8 = fcntl$dupfd(r6, 0x2, 0xffffffffffffffff) close(r8) write(r3, &(0x7f00000000c0)="018f37b18306afe515755a7af4575c3e8b0d1df53b235d985e63dc447d27cab4e8724ce2dc89adbd7fb40e8a555fc10fb8ddf1038fa34909cc704bff05c30face18018a9e2ff4ce3ebfd503acaac55be1b8a7b9fcefaa06d710f04fe2562cdead0ca065ed65d3492da8b5f44e649ac1227c5c20e84ca88c4ccf7b91a9c306cb6811e25f4d78b4062dd9b8bdd9b2acdb4f561d8d11996f3", 0x97) dup2(r1, r2) ioctl$VNDIOCCLR(r7, 0x80384601, &(0x7f00000002c0)={&(0x7f0000000240)='./file0/file0/..\x00', 0x9, &(0x7f0000000280)='./file0/file0/..\x00', 0x11}) 787.01011ms ago: executing program 4 (id=115): r0 = socket(0x2, 0x2, 0x0) syz_emit_ethernet(0x6e, &(0x7f00000005c0)=ANY=[@ANYRES16=r0, @ANYRES16=r0, @ANYBLOB="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"]) syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) r1 = socket(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0xffff, 0x200, &(0x7f00000000c0)=0x100, 0x4) writev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000000)="c886b4d3e0", 0x5}], 0x1) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) bind(r1, &(0x7f0000000000), 0x10) r2 = socket(0x2, 0x2, 0x0) connect$unix(r2, &(0x7f0000000000), 0x10) write(r2, 0x0, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x2000000000000243, &(0x7f0000000100)}) r3 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r3, 0xc0106924, &(0x7f00000001c0)) r4 = kqueue() r5 = socket(0x18, 0x2, 0x0) setsockopt(r5, 0x1000000000029, 0x9, &(0x7f0000000040)="03000000", 0x4) setsockopt(r5, 0x1000000000029, 0xa, 0x0, 0x0) kevent(r4, &(0x7f00000000c0), 0x101, &(0x7f0000000200)=[{{r0}, 0xffffffffffffffff, 0x1, 0x2, 0x7ff, 0x9}, {{r1}, 0xfffffffffffffffe, 0x21, 0x20, 0x100}, {{r2}, 0xffffffffffffffff, 0x61, 0xfffff, 0x0, 0x3}, {{r1}, 0xfffffffffffffff9, 0x14, 0x1d0000080, 0xb7, 0x3}, {{r1}, 0xfffffffffffffffb, 0xd4, 0x8, 0x8, 0xd6f}, {{r3}, 0x0, 0x0, 0x2, 0xffffffffffffff77, 0x101}, {{r2}, 0xfffffffffffffffc, 0x42, 0x10, 0x6, 0x400}, {{r5}, 0xfffffffffffffff8, 0x77, 0x80, 0x5, 0x1000}, {{r4}, 0xfffffffffffffffd, 0x4, 0x2, 0x0, 0x80000001}, {{r3}, 0xfffffffffffffffe, 0xa, 0x2, 0x6, 0x4}], 0x6, 0x0) ioctl$FIONREAD(r0, 0xc0206923, &(0x7f00000001c0)) 780.909045ms ago: executing program 4 (id=117): unveil(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='c\x00') shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000000)={{}, 0x800000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4}) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x11, 0x0, 0x1b}, 0x4000000000000007, 0x0, 0x0, 0x0, 0xfffffffffffffef2) open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) 369.734367ms ago: executing program 6 (id=119): open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x186) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0xe8, 0x0) r1 = fcntl$dupfd(r0, 0x3, r0) r2 = dup(r1) kevent(r2, 0x0, 0x814d, &(0x7f0000000340)=[{{r2}, 0xffffffffffffffff, 0x2, 0x2, 0x9, 0x9}], 0x40002, 0x0) kevent(r0, &(0x7f0000000200)=[{{r2}, 0xffffffffffffffff, 0x81, 0x20, 0x5, 0x6}], 0x0, &(0x7f0000000380), 0x4, 0x0) ioctl$WSDISPLAYIO_GETSCREENTYPE(r2, 0xc028575d, &(0x7f0000000000)={0x6, 0x6, './file0\x00', 0x6, 0xe685, 0x7}) ktrace(&(0x7f0000000140)='./file0\x00', 0x1, 0x0, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x186) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0xe8, 0x0) (async) fcntl$dupfd(r0, 0x3, r0) (async) dup(r1) (async) kevent(r2, 0x0, 0x814d, &(0x7f0000000340)=[{{r2}, 0xffffffffffffffff, 0x2, 0x2, 0x9, 0x9}], 0x40002, 0x0) (async) kevent(r0, &(0x7f0000000200)=[{{r2}, 0xffffffffffffffff, 0x81, 0x20, 0x5, 0x6}], 0x0, &(0x7f0000000380), 0x4, 0x0) (async) ioctl$WSDISPLAYIO_GETSCREENTYPE(r2, 0xc028575d, &(0x7f0000000000)={0x6, 0x6, './file0\x00', 0x6, 0xe685, 0x7}) (async) ktrace(&(0x7f0000000140)='./file0\x00', 0x1, 0x0, 0x0) (async) 368.296282ms ago: executing program 4 (id=120): setrlimit(0x8, &(0x7f0000000580)={0xa, 0x56}) setrlimit(0x3, &(0x7f0000000280)={0x8, 0x2}) r0 = socket(0x2, 0x400000000002, 0x0) setsockopt(r0, 0x0, 0x3, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc0e99db6de761f86, 0x0) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc5005601, &(0x7f0000000000)={0x10, 0x80000001, [{&(0x7f00000ca000/0x3000)=nil, &(0x7f0000663000/0x4000)=nil, 0x5}, {&(0x7f0000000000/0x3000)=nil, &(0x7f0000826000/0x4000)=nil}, {&(0x7f0000060000/0x2000)=nil, &(0x7f00000c5000/0x3000)=nil}, {0x0, &(0x7f0000ffb000/0x3000)=nil, 0x1}, {&(0x7f000017c000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x4000000000}, {&(0x7f0000000000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0xa}, {0x0, 0x0, 0xfffffffffffffffc}, {&(0x7f0000ff0000/0xf000)=nil, &(0x7f00000c4000/0x10000)=nil, 0x202000000000}, {&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000826000/0x1000)=nil, 0x2}, {&(0x7f00004c2000/0x1000)=nil, &(0x7f0000ff6000/0x4000)=nil}, {&(0x7f000038e000/0x3000)=nil, &(0x7f0000573000/0x2000)=nil, 0x40000018}, {&(0x7f000038f000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil}, {&(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x4}, {&(0x7f00004c1000/0x2000)=nil, 0x0, 0x9bbf}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000142000/0x4000)=nil}, {&(0x7f0000573000/0x2000)=nil, &(0x7f0000ff5000/0xb000)=nil}], './file0\x00', 0xffffffff}) r1 = open$dir(&(0x7f00000001c0)='./file0\x00', 0x2, 0x10b) ioctl$FIONREAD(r1, 0xc0106978, &(0x7f0000000140)) r2 = syz_open_pts() close(r2) r3 = syz_open_pts() ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f0000000180)={0x6, 0x1, 0x40001, 0xfff7ff93, "0800020000087db300000105001c670000000010", 0x7, 0x800001a3}) lstat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)) writev(r2, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) read(r3, &(0x7f0000000200)=""/98, 0x62) 367.409816ms ago: executing program 0 (id=121): r0 = socket(0x2, 0x4001, 0x0) r1 = dup(r0) r2 = open(&(0x7f0000000100)='./file0\x00', 0x9cab835cfdc52675, 0x58) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0xa011, r2, 0x0) msync(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5) r3 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) kevent(r3, &(0x7f00000000c0)=[{{r3}, 0xffffffffffffffff, 0x0, 0x1, 0x800, 0x9}, {{r1}, 0xffffffffffffffff, 0x20, 0x1, 0xfff, 0x5}, {{r1}, 0xfffffffffffffffe, 0x0, 0x1, 0x80000000, 0x8fe}, {{r1}, 0xfffffffffffffffc, 0x31, 0x20, 0x1, 0x8000}], 0x4fa, &(0x7f0000000140)=[{{0xffffffffffffff9c}, 0x2, 0x37, 0x80, 0x7fffffffffffffff, 0x3}, {{r3}, 0xfffffffffffffffe, 0x2, 0x20, 0x58d8, 0x100}, {{r1}, 0xfffffffffffffffa, 0x48, 0x40000000, 0x7, 0x1}, {{r1}, 0xffffffffffffffff, 0x44, 0x20, 0x3b, 0x4}, {{r3}, 0xffffffffffffffff, 0x1, 0x20, 0x0, 0x80000000}, {{r3}, 0xfffffffffffffffa, 0x40, 0x1, 0x4, 0xa85}, {{r3}, 0x0, 0x2, 0x80000000, 0x1ff, 0x9}], 0x9, &(0x7f0000000240)={0xfffffffffffffff8, 0x2}) close(r3) r4 = socket$unix(0x1, 0x1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x1063, &(0x7f0000001280)={0x8000000000000000, 0x80000000}) getsockopt$sock_timeval(r4, 0xffff, 0x1006, &(0x7f0000002640), 0x0) acct(&(0x7f0000000500)='./file1\x00') open$dir(&(0x7f00000004c0)='./file1\x00', 0x20, 0x0) r5 = accept(r0, &(0x7f0000000280)=@un=@abs, &(0x7f00000002c0)=0x8) recvmsg(r5, &(0x7f0000000480)={&(0x7f0000000300)=@in, 0xc, &(0x7f0000000400)=[{&(0x7f00000003c0)=""/63, 0x3f}], 0x1, &(0x7f0000000440)=""/15, 0xf}, 0x840) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="89000000ffff000001"], 0x9}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r8, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="28000000ffff000001"], 0x28}, 0x0) sendto(r8, &(0x7f0000000000)='\\', 0x1, 0x4, 0x0, 0x0) write(r8, 0x0, 0x0) sysctl$kern(&(0x7f0000000080)={0x1, 0x44}, 0x4000000000000004, 0x0, 0x0, 0x0, 0x0) recvmsg(r7, &(0x7f0000000340)={0x0, 0x34, 0x0, 0x0, &(0x7f0000000540)=""/244, 0xf4}, 0x40) sendmsg(r6, &(0x7f0000000380)={0x0, 0x32c, 0x0, 0x0, &(0x7f0000000000), 0x90}, 0x0) 367.096524ms ago: executing program 6 (id=122): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket(0x7a345dd3c2a9a6d5, 0x4000, 0x3) (async) write(r0, &(0x7f0000000000)="ed", 0x1) (async) sysctl$hw(&(0x7f0000000080)={0x6, 0x18}, 0x2, &(0x7f0000001540)="4f3c0000f0a2ff3c", &(0x7f0000000000)=0x8, 0x0, 0x0) (async) recvmmsg(r1, &(0x7f0000000880)={&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)=""/41, 0x29}, {&(0x7f00000000c0)=""/242, 0xf2}, {&(0x7f0000000200)=""/193, 0xc1}, {&(0x7f0000000500)=""/217, 0xd9}], 0x4, 0x0}}, 0x10, 0x2040, 0x0) (async) shutdown(r1, 0x2) (async) readv(r1, &(0x7f0000000380)=[{0x0}], 0x1) sysctl$net_inet_icmp(&(0x7f0000000480)={0x4, 0x2, 0x1, 0x3}, 0x4, &(0x7f0000000680)="273ca862ba98dea9ef77a1cf572286f88cdc40f01754156ecc1d6d846a7f3e597b40076a8943ed0bc31821907f00f61def0f2dc6d4af8e3eed5527d56aadd37280d38380ad8e65dc327194aba32b4c1228b9386cbb2f7e524e32c8583bbaa37a98f4d0acb8170c5d56f7c47ffbd8cb314517bcddf90cd200d7bab0b19c7a51fd202752e8d4b6015e14395cfdf42f04be3fe8836c2dcf2ea143ea487e24a1291b15cabdd8eb7a", &(0x7f0000000740)=0xa6, &(0x7f0000000780)="9e856aac4654fd7c99a81b52730539cb995e75e54542291a", 0x18) (async) close(r0) (async) sysctl$hw(&(0x7f00000001c0)={0x6, 0x13}, 0x2, &(0x7f00000003c0)="86ffc5ef50fb0282b107f10dd5e991a97927f705880ae70088b942bd33ff019d22a8126ecf78c03209085ceed2e0cd2899b7532d5f643aaf29fbe712b553c4be7fdfb5044052f6b80d50f880ef193da0d3360dbe30dbc1b6b57dfb59e51e98159fb69bc69cd28b9ac45f5ba753e15774ff041626d307c2ccd76c2db6f29334a84500741c01d7a8ee158954f61f6932ac8fd55b3a33cfc2ac487c", &(0x7f0000000340)=0x9a, &(0x7f0000000600)="c653d8cb8699987650244b6b69607d488965b9d5ccb9a5b281889ca977c6ad0cd916e81394ebadfa4f15c47ed00fc582caa6a02f5a42d842f55aa629725f1181e24137c897", 0x45) 219.548811ms ago: executing program 6 (id=123): r0 = socket(0x2, 0x4001, 0x0) r1 = dup(r0) ioctl$BIOCSETIF(0xffffffffffffff9c, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r2 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r2, 0xc0406938, &(0x7f00000001c0)) r3 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="89000000ffff000001"], 0x9}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/244, 0xf4}, 0x0) sendmsg(r4, &(0x7f0000000380)={0x0, 0x32c, 0x0, 0x0, &(0x7f0000000000), 0x90}, 0x0) r6 = socket(0x18, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x2, 0xffffffffffffffff) close(r7) dup2(r1, r3) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001780)={0x2, 0x2}, 0xc) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETAW(r8, 0x802c7415, &(0x7f0000000180)={0x0, 0x0, 0x955, 0x9, "5cfacd6774a2c1026763559c5b4bf7d951fd22cc", 0x4edd, 0x2}) socket(0x2, 0x4001, 0x0) (async) dup(r0) (async) ioctl$BIOCSETIF(0xffffffffffffff9c, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) (async) socket(0x1, 0x2, 0x0) (async) ioctl$FIONREAD(r2, 0xc0406938, &(0x7f00000001c0)) (async) fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) (async) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="89000000ffff000001"], 0x9}, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) (async) recvmsg(r5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/244, 0xf4}, 0x0) (async) sendmsg(r4, &(0x7f0000000380)={0x0, 0x32c, 0x0, 0x0, &(0x7f0000000000), 0x90}, 0x0) (async) socket(0x18, 0x1, 0x0) (async) fcntl$dupfd(r6, 0x2, 0xffffffffffffffff) (async) close(r7) (async) dup2(r1, r3) (async) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001780)={0x2, 0x2}, 0xc) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$TIOCSETAW(r8, 0x802c7415, &(0x7f0000000180)={0x0, 0x0, 0x955, 0x9, "5cfacd6774a2c1026763559c5b4bf7d951fd22cc", 0x4edd, 0x2}) (async) 218.978923ms ago: executing program 3 (id=124): r0 = socket(0x11, 0x3, 0x0) sendto$unix(r0, &(0x7f0000000100)="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", 0x134, 0x400, 0x0, 0x0) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0xa) 218.725347ms ago: executing program 2 (id=125): r0 = syz_open_pts() (async) writev(0xffffffffffffffff, &(0x7f0000000140)=[{}], 0x1) (async) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x0, 0xfd, 0x5, 0x2}, {0x5, 0x4, 0x0, 0x4}]}) (async) sysctl$kern(&(0x7f00000000c0)={0x1, 0x31}, 0x2, 0x0, 0x0, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$kern(&(0x7f00000000c0)={0x1, 0x37}, 0x4, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000140)=0x2c, 0x0, 0x2e) (async) ioctl$TIOCSETAW(r0, 0x802c7415, &(0x7f0000000000)={0xaf7, 0x1, 0xfffffffc, 0x7, "5cc878a27149ed0b7abe46058556929636fafeb3", 0xb, 0x4}) r1 = fcntl$dupfd(r0, 0x3309fe3e1cefe354, r0) ioctl$TIOCSBRK(r1, 0x2000747b) 218.557361ms ago: executing program 2 (id=126): syz_emit_ethernet(0xaa, &(0x7f0000000080)={@local, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x2, 0x9c, 0x164, 0x0, 0x0, 0x6, 0x0, @multicast2, @local={0xac, 0x14, 0x0}}, @tcp={{0x0, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x1, 0x8000, 0x0, 0xfffc}, {"75bc3887ffeec4aac04f72275e67c8cb9bc432970cfa217850839c51124b296f7f7d7f55e29e09e63b68f53a959c8f3f3804d97b1aa774d171cc719b5589d1df525ea7eac8b42b10345f974508abf32cdcab5aaff6d0980b2a37102431a93e2cbd5b1d7d8c149951822ec0048fb4434786047f05"}}}}}}) syz_emit_ethernet(0x8e, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6b000001000000000000006bceb1cb1eedc0754f15dd5ff9ff020000000000000000000000000001890900000000000005020956050280010001000105000000000004015001030000000001000106000000000000c204"]) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x200000000000c, &(0x7f0000000000)="ea00000100005a21", 0x8) 98.445976ms ago: executing program 2 (id=127): ioctl$BIOCSETIF(0xffffffffffffff9c, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r0 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r0, 0x802069c1, &(0x7f00000001c0)) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000000)={{0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xcbdf4d1d31039a48, 0x4}, 0xbbd4, 0x4, 0x0, 0x0, 0xd4, 0x2, 0x4, 0x52fb}) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x2, 0x0, 0x1e}, 0x4, &(0x7f00000001c0)="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", &(0x7f0000000000)=0x154, 0x0, 0x0) setitimer(0x1, &(0x7f0000000000)={{0x0, 0x766}, {0x0, 0x3}}, 0x0) 98.137568ms ago: executing program 3 (id=128): r0 = socket(0x2, 0x2, 0x0) ioctl$FIONREAD(r0, 0x4004667f, &(0x7f00000001c0)) (async, rerun: 64) setsockopt(0xffffffffffffffff, 0x0, 0x21, &(0x7f0000000080)="c5", 0x1) (async, rerun: 64) setsockopt$sock_int(r0, 0xffff, 0x800, &(0x7f00000000c0)=0x400, 0x4) select(0x40, &(0x7f0000000000)={0xfffffffffffffffd, 0x0, 0xdc4, 0x564, 0x9ce8, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0) (async) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) (async, rerun: 64) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async, rerun: 64) bind(r0, &(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x3}, 0x8) r1 = socket(0x2, 0x2, 0x0) pread(r1, &(0x7f0000000100)="61a0eddd1aae3ed907831f23c952836c7d13c5366b7f84e8462b7d1180baedcfddafa54f4e7f969c775f9fb2f4c5b5336dc7e57d63e2f8838917f8239428dccedf330facacd33da9a2907a357dc6b394f5df9ea3143ccb2f3f39a9d372033f52ad63ca7a088c0c5b5a527cfc123a2b1730fb89269d91068fead69d350c095c99acebd3f821c5c4dbc2564f8c7c3ed956b42dcf5a790d13ce3ae387538c92103a8bb664", 0xa3, 0x1) setsockopt$sock_int(r1, 0xffff, 0x20, &(0x7f0000000080)=0x6, 0x4) (async) connect$unix(r1, &(0x7f0000000000), 0x10) (async, rerun: 64) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async, rerun: 64) select(0x0, 0x0, &(0x7f0000000340), &(0x7f0000001900)={0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000}, &(0x7f0000000440)) (async, rerun: 32) sendmmsg(r1, &(0x7f0000000800)={0x0, 0x7ff}, 0x10, 0x0) (rerun: 32) write(r1, 0x0, 0x0) mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) readlinkat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) (async, rerun: 64) readv(r0, &(0x7f0000003b00)=[{0x0, 0xffffffffffffff3a}], 0x1) (rerun: 64) 97.483889ms ago: executing program 2 (id=129): sysctl$net_inet_tcp(&(0x7f00000000c0)={0x4, 0x2, 0x6, 0x4}, 0x4, &(0x7f0000000140)="9b1809ff", &(0x7f0000000040)=0x4, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0e99db6de761f86, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) flock(r0, 0x3) close(r0) 95.713111ms ago: executing program 2 (id=130): r0 = socket$inet(0x2, 0x2, 0x0) setrlimit(0x8, &(0x7f0000000080)={0xe, 0x51}) r1 = syz_open_pts() close(r1) syz_open_pts() ioctl$FIOASYNC(r1, 0x80047469, &(0x7f00000000c0)=0x5) readv(r0, &(0x7f0000001840)=[{&(0x7f0000000580)=""/227, 0xe3}], 0x1) writev(r1, &(0x7f0000001880)=[{&(0x7f00000004c0)="33f57cbd9b7a3dce024abd0a4458ebe67b96abcc9815f01b7384118224bac83dd8e2f9bac9fcf5581b498f230fc2c56937691faa0a6fbc6ec7d970f3e70feb02fcbb032f1cd7719778b73a00610bbc2cda7a2357f162165a18ec7a8361d61e5f202c9c6839ada531b7f39a0c09140e3052f9116a0a4d3d422542a855d3257c406d5788afe863c7854a8c4906fe9008dcaf7540ee", 0x94}, {&(0x7f00000001c0)="4ac86e07b6f5cf353ce773366d0d1462532e49bb326d1951a16fadedf93ecbca2089c60264be4f5368f05fb89ffcee8bcc1f30c0cd028f53323eed00", 0x3c}, {&(0x7f00000002c0)="8072f965e5368d8a2ce261ea12ce28665881a3c9", 0x14}], 0x3) setsockopt$inet_opts(r0, 0x0, 0x200000000000c, &(0x7f0000000240)="ea00070100000000", 0xc) r2 = socket$inet(0x2, 0x5, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) setsockopt$inet_opts(r2, 0x0, 0x200000000000c, &(0x7f0000000240)="ea00000100000000", 0xc) setrlimit(0x6, &(0x7f0000000100)={0x4b, 0x54}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) close(r2) 95.51379ms ago: executing program 1 (id=131): r0 = shmget$private(0x0, 0x800000, 0x95a999646a72d594, &(0x7f0000005000/0x800000)=nil) r1 = shmat(r0, &(0x7f0000001000/0x3000)=nil, 0x2000) (async) r2 = kqueue() kevent(r2, &(0x7f0000000080), 0xe46, 0x0, 0xa9f6, 0x0) shmctl$IPC_RMID(r0, 0x0) (async) shmdt(r1) (async, rerun: 32) socketpair(0x18, 0x4, 0x29, 0x0) (async, rerun: 32) socket(0x2, 0x4, 0xb) 87.08373ms ago: executing program 1 (id=132): r0 = socket(0x2, 0x1, 0x90) listen(r0, 0x8) setrlimit(0x4, &(0x7f0000000580)={0xa, 0x56}) r1 = syz_open_pts() sysctl$kern(0x0, 0x0, &(0x7f0000000380)="d635d193c2", &(0x7f0000000080)=0x5, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x0, 0xc) fchdir(r2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r3, 0xffff, 0x1022, &(0x7f00000000c0), &(0x7f0000000040)=0xc) sysctl$kern(0x0, 0x0, &(0x7f0000000280)='q', &(0x7f0000000080)=0x1, 0x0, 0x0) r4 = semget(0x0, 0x1, 0x281) semctl$SETALL(r4, 0x0, 0x9, &(0x7f0000000040)=[0x1]) semop(r4, &(0x7f0000000000), 0x23) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x97) rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00') mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x97) rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00') close(r1) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r5) getdents(r5, 0x0, 0x0) r6 = syz_open_pts() ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000180)={0x6, 0x1, 0x40001, 0xfff7ff93, "0800020000087db300000105001c670000000010", 0x7, 0x800001a3}) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) read(r6, &(0x7f0000000200)=""/98, 0x62) accept$inet(r0, 0x0, 0x0) 86.753291ms ago: executing program 6 (id=133): mkdir(&(0x7f0000000080)='./file0\x00', 0x0) syz_open_pts() chmod(&(0x7f0000000140)='./file0\x00', 0x3ea) open(&(0x7f0000000c00)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xa7210e10bc3c9dd1) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000001480)=@abs={0x0, 0x0, 0x3}, 0x8, 0x0, 0x0, 0x0, 0x20, 0x401}, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) select(0x7, &(0x7f0000000000)={0x400}, &(0x7f0000000040), &(0x7f0000000080)={0xcb}, &(0x7f0000000180)) syz_open_pts() r0 = socket(0x2, 0x2, 0x0) r1 = socket(0x2, 0x2, 0x0) r2 = dup(r1) setsockopt$inet_opts(r2, 0x0, 0x16, &(0x7f00000002c0)="8e7badeaf7927cf85f49718e04548f81c105d96b221babe108a1a8df59f6ff9076023b3f880d1f2729b43bef96266f9310010d6886722b185510e403640b403678743fdf34a3dadb4b7d79eb771c79c02934146640975a09b4e030bb59caf991f87826fac556787eea671973e64de1c89875bdf3351331ec8296b7707ad0be49f2633f8cf5a8f000c832a191f79027e02ed53de5adbae330f0bf318793ab3b1e79bfd20e6ac5a7081fb1628bc943", 0xae) r3 = dup(r2) r4 = dup2(r3, r0) sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b100050160", 0x5, 0x0, 0x0, 0x0) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) connect$unix(r0, &(0x7f0000000000), 0x10) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000080)="76e5eac907f9ccf7a251ceddcec7d6aa45cffe2c63a56077123a276d3ba4e9d17eb3eb5db12a3783a8e0620d357de1fe04fa9465b5bd1286e9624dec06a00c222f", 0x41}], 0x1) rename(&(0x7f0000000100)='./file0\x00', 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='.\x00') mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000c00)='./file0\x00', 0x0, 0x0) fchdir(r5) unveil(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='r\x00') openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x80, 0x0) sendto(r4, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_pts() 44.356028ms ago: executing program 6 (id=134): ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x7d, 0x1ffe00, {0x1000000ff}}) sysctl$hw(&(0x7f0000000000)={0x4, 0x18}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sysctl$net_inet_etherip(&(0x7f0000000000)={0x4, 0x13, 0x61, 0x2}, 0x4, 0x0, 0x0, 0x0, 0x0) r0 = accept$inet(0xffffffffffffff9c, &(0x7f0000000040), &(0x7f0000000080)=0xc) getsockname$inet(r0, &(0x7f00000000c0), &(0x7f0000000100)=0xc) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x7d, 0x1ffe00, {0x1000000ff}}) (async) sysctl$hw(&(0x7f0000000000)={0x4, 0x18}, 0x2, 0x0, 0x0, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) sysctl$net_inet_etherip(&(0x7f0000000000)={0x4, 0x13, 0x61, 0x2}, 0x4, 0x0, 0x0, 0x0, 0x0) (async) accept$inet(0xffffffffffffff9c, &(0x7f0000000040), &(0x7f0000000080)=0xc) (async) getsockname$inet(r0, &(0x7f00000000c0), &(0x7f0000000100)=0xc) (async) 43.360234ms ago: executing program 7 (id=135): r0 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$VT_RELDISP(r0, 0x20007604, &(0x7f0000000040)) (async) r1 = getpgrp() fcntl$setown(r0, 0x6, r1) (async) ioctl$VT_WAITACTIVE(r0, 0x20007606, &(0x7f0000000080)=0x3) (async) ioctl$WSDISPLAYIO_LDFONT(r0, 0x8058574d, &(0x7f00000000c0)={'./file0\x00', 0x7, 0x8, 0x4, 0x1, 0xd7, 0x3, 0x6, 0x0, 0x0, 0x5}) (async) ioctl$WSDISPLAYIO_GVIDEO(r0, 0x40045744, &(0x7f0000000140)) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) ioctl$WSDISPLAYIO_LSFONT(r2, 0xc058574e, &(0x7f00000001c0)) ioctl$KDSETRAD(r0, 0x20004b43) fcntl$setown(0xffffffffffffffff, 0x6, r1) ioctl$KDSETMODE(0xffffffffffffffff, 0x20004b0a, &(0x7f0000000240)=0x1) (async) ioctl$WSDISPLAYIO_ADDSCREEN(r2, 0x80245753, &(0x7f0000000280)={0x1, './file0\x00', './file0\x00'}) (async) r4 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f00000002c0), 0x20, 0x0) ioctl$WSMUXIO_REMOVE_DEVICE(r4, 0x80085762, &(0x7f0000000300)={0x3, 0xa}) (async) r5 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$KDSETLED(r5, 0x20004b42, &(0x7f0000000380)=0x4) (async) ioctl$VT_ACTIVATE(r2, 0x20007605, &(0x7f00000003c0)=0x4) ioctl$VT_GETACTIVE(r4, 0x40047607, &(0x7f0000000400)) ioctl$WSDISPLAYIO_DELSCREEN(r0, 0x80085754, &(0x7f0000000440)={0x9, 0x2}) (async) ioctl$WSDISPLAYIO_GETEMULTYPE(r2, 0xc014575e, &(0x7f0000000480)={0x1ff, './file0\x00'}) (async) ioctl$WSKBDIO_GETMAP(r3, 0xc010570d, &(0x7f0000000500)={0x2, &(0x7f00000004c0)=[{0x2, 0x9, 0x480, 0x1ff, 0x6}, {0x0, 0x8, 0x3, 0xc, 0xae}]}) (async) ioctl$WSDISPLAYIO_LSFONT(r5, 0xc058574e, &(0x7f0000000540)) ioctl$KDSETRAD(r4, 0x20004b43) (async) ioctl$WSDISPLAYIO_GETSCREEN(r3, 0xc0245755, &(0x7f00000005c0)={0xbf7, './file0\x00', './file0\x00'}) (async) ioctl$WSMUXIO_INJECTEVENT(r0, 0x80185760, &(0x7f0000000600)={0x0, 0xfffffff8, {0x9}}) (async) execve(&(0x7f0000000640)='./file0\x00', &(0x7f0000000800)=[&(0x7f0000000680)='\x00', &(0x7f00000006c0)='\x00', &(0x7f0000000700)='%($@@%:\x00', &(0x7f0000000740)=',\x00', &(0x7f0000000780)='-(-@^%]\x00', &(0x7f00000007c0)='#^\x00'], &(0x7f0000000880)=[&(0x7f0000000840)='\x00']) open$dir(&(0x7f00000008c0)='./file0\x00', 0x100, 0x20) (async) open(&(0x7f0000000900)='./file1\x00', 0x400, 0x8) (async) sysctl$kern(&(0x7f0000000940)={0x1, 0x10}, 0x2, &(0x7f0000000980)="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", &(0x7f0000001980)=0x1000, &(0x7f00000019c0)="0cdd0a233b1c212b9f6acb0f97d0630888ba14ef32888442c118b55f364717add7e71c424d902e3f5d120ea3dbff9c5b6986621aff199d7f170d0f2c79176d28638bf1a1eddeb60cd14289f8d4f6b2cc64e07e8edcd02f9745ec1580def98b99c53c8631c1faeb77c609c14adc07ea387e11800c8319330d9e100a924d0df5966902d18ae3b242fed4ec0d8d5b495a96f11bb04d4f6bdf43bbf725f68377b8000f2bfcc543ee1f9b3fc81c7bea9a458f3c6038bcb5cb9519daa947734c7e4eb487811eee46c1b59c7345b3", 0xcb) 43.059668ms ago: executing program 7 (id=136): sysctl$hw(&(0x7f0000000040)={0x7, 0x14}, 0x2, &(0x7f00000000c0), 0x0, 0x0, 0x0) syz_emit_ethernet(0x1026, &(0x7f0000000140)={@random="91a6e34dd8bb", @local, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x1018, 0x0, 0x0, 0x0, 0x1, 0x0, @empty, @rand_addr, {[@noop, @ssrr={0x89, 0x3}]}}, @generic="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"}}}}) r0 = socket(0x2, 0x400000000002, 0xf0) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x3, {0x800000000, 0x800000004}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket(0x18, 0x1, 0x0) setsockopt(r1, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) setsockopt(r0, 0x0, 0x20, &(0x7f0000000080)="01000000", 0x4) setsockopt(r0, 0x5, 0xca8, &(0x7f0000000080)="41de6473079dda9029b576d42f598e72210fad30f265291bbfeac1652ff4220b3b85e561562368272d1a844e03d3d6d1895db197ed018c3e60a2f3e6ebd1d6eb3ab4927b62b0944afb978d372f2dc02c02fdeff6399a8ee91e148cb937b040bf242c71c369f9b3cc16d1782252e79958c7eeacd0d207c91664", 0x79) 4.442838ms ago: executing program 3 (id=137): symlink(&(0x7f0000000000)='.\x00', &(0x7f00000000c0)='./file0\x00') unveil(&(0x7f0000000080)='./file0/file0/..\x00', &(0x7f00000004c0)='x\x00') writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="6dc1", 0x2}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) open(&(0x7f0000000000)='./file0\x00', 0x9cab835cfdc52675, 0x40) sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xff0a, 0x0, 0x37) 1.138089ms ago: executing program 7 (id=138): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) r1 = fcntl$getown(r0, 0x5) r2 = accept$inet(r0, &(0x7f0000000040), &(0x7f0000000080)=0xc) recvmmsg(r2, &(0x7f00000014c0)={&(0x7f0000001480)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/215, 0xd7}, {&(0x7f00000001c0)=""/208, 0xd0}, {&(0x7f00000002c0)=""/13, 0xd}, {&(0x7f0000000300)=""/49, 0x31}, {&(0x7f0000000340)=""/91, 0x5b}, {&(0x7f00000003c0)=""/31, 0x1f}], 0x6, &(0x7f0000000480)=""/4096, 0x1000}, 0x7068}, 0x10, 0x842, &(0x7f0000001500)={0x2, 0x80000000}) r3 = openat$vnd(0xffffffffffffff9c, &(0x7f0000001540), 0x80, 0x0) fcntl$setown(r3, 0x6, r1) ioctl$WSMUXIO_ADD_DEVICE(r2, 0x80085761, &(0x7f0000001580)={0x2, 0x5}) lseek(r0, 0x0, 0x1) getsockopt$sock_cred(r2, 0xffff, 0x1022, &(0x7f00000015c0)={0x0}, &(0x7f0000001600)=0xc) fcntl$lock(r2, 0x7, &(0x7f0000001640)={0x2, 0x2, 0x3, 0x70, r4}) ioctl$BIOCGRSIG(r0, 0x40044273, &(0x7f0000001680)) r5 = socket$inet6(0x18, 0x5, 0x0) listen(r5, 0x8) r6 = openat$zero(0xffffffffffffff9c, &(0x7f00000016c0), 0x10, 0x0) setsockopt$inet_opts(r6, 0x0, 0x1, &(0x7f0000001700)="b5edd199af4ac4978a8de6c56ae4e06c414a016a681ba658", 0x18) flock(r6, 0x1) r7 = open(&(0x7f0000001740)='./file0\x00', 0x10000, 0x2) ioctl$FIOSETOWN(r5, 0x8004667c, &(0x7f0000001780)=0x10001) r8 = dup(r5) ioctl$PCIOCWRITE(r8, 0xc0107003, &(0x7f00000017c0)={{0x6, 0x8, 0x3}, 0xa, 0x6, 0x1}) ioctl$FIONBIO(r7, 0x8004667e, &(0x7f0000001800)) socket$inet(0x2, 0x4000, 0x9) ioctl$WSKBDIO_SETDEFAULTKEYREPEAT(r8, 0x800c5709, &(0x7f0000001840)={0x10001, 0x2, 0x4}) r9 = accept(r8, 0x0, &(0x7f0000001880)) ioctl$BIOCGETIF(r0, 0x4020426b, &(0x7f00000018c0)={""/16, @ifru_broadaddr=@in6}) pipe2(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) setsockopt$inet6_MRT6_DEL_MFC(r10, 0x29, 0x69, &(0x7f0000001940)={{0x18, 0x2, 0x6, 0xc}, {0x18, 0x3, 0x7, 0x100}, 0x8000, [0x81, 0x0, 0x3, 0x3, 0x1ff, 0x2, 0x800]}, 0x3c) r11 = dup(r9) write(r11, &(0x7f0000001980)="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", 0xfc) getsockname$unix(0xffffffffffffffff, &(0x7f0000001a80)=@abs, &(0x7f0000001ac0)=0x8) 306.957µs ago: executing program 6 (id=139): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket(0x2, 0x400000000002, 0x0) setsockopt(r0, 0x0, 0x7, &(0x7f0000000080)="c5f5d915", 0x4) sysctl$net_inet_ip(&(0x7f0000000000)={0x4, 0x2, 0x0, 0x10}, 0x4, 0x0, 0x0, 0x0, 0x0) unveil(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000100)='x\x00') unveil(&(0x7f00000001c0)='./file1\x00', &(0x7f00000002c0)='r\x00') (async) unveil(&(0x7f00000001c0)='./file1\x00', &(0x7f00000002c0)='r\x00') 0s ago: executing program 7 (id=140): open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x186) r0 = open(&(0x7f0000000080)='./file0\x00', 0x18289, 0x190) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='.\x00') unveil(&(0x7f0000002400)='.\x00', &(0x7f0000000080)='c\x00') mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc0e99db6de761f86, 0x0) ftruncate(r0, 0x8000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.105' (ED25519) to the list of known hosts. panic: pool_do_get: shmpl free list modified: page 0xfffffd806c9f4000; item addr 0xfffffd806c9f4af0; offset 0x40=0x6925b505 Stopped at db_enter+0x25: addq $0x8,%rsp TID PID UID PRFLAGS PFLAGS CPU COMMAND 283156 78228 32767 0x10 0 0 syz-executor *367880 78228 32767 0x10 0x4000000 1K syz-executor db_enter() at db_enter+0x25 panic(ffffffff8339c914) at panic+0x1e5 pool_do_get(ffffffff838fa400,1,ffff80003c44f3e8) at pool_do_get+0x5df pool_get(ffffffff838fa400,1) at pool_get+0x162 shmget_allocate_segment(ffff80003c420fb8,ffff80003c44f640,4,ffff80003c44f590) at shmget_allocate_segment+0x1af sys_shmget(ffff80003c420fb8,ffff80003c44f640,ffff80003c44f590) at sys_shmget+0x195 syscall(ffff80003c44f640) at syscall+0xb17 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x8efc5df7100, count: 7 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{1}> ddb{1}> set $lines = 0 ddb{1}> set $maxwidth = 0 ddb{1}> show panic *cpu1: pool_do_get: shmpl free list modified: page 0xfffffd806c9f4000; item addr 0xfffffd806c9f4af0; offset 0x40=0x6925b505 ddb{1}> trace db_enter() at db_enter+0x25 panic(ffffffff8339c914) at panic+0x1e5 pool_do_get(ffffffff838fa400,1,ffff80003c44f3e8) at pool_do_get+0x5df pool_get(ffffffff838fa400,1) at pool_get+0x162 shmget_allocate_segment(ffff80003c420fb8,ffff80003c44f640,4,ffff80003c44f590) at shmget_allocate_segment+0x1af sys_shmget(ffff80003c420fb8,ffff80003c44f640,ffff80003c44f590) at sys_shmget+0x195 syscall(ffff80003c44f640) at syscall+0xb17 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x8efc5df7100, count: -8 ddb{1}> show registers rdi 0 rsi 0x1 rbp 0xffff80003c44f210 rbx 0xffff8000299eee07 rdx 0xffff8000014669c0 rcx 0xffff80003c420fb8 rax 0xffff8000299edff0 r8 0x101010101010101 r9 0x8080808080808080 r10 0x985bc8e4e792c9f4 r11 0x9e079d67385ce6b3 r12 0xffff8000299eec08 r13 0 r14 0 r15 0x1 rip 0xffffffff82ab62b5 db_enter+0x25 cs 0x8 rflags 0x246 rsp 0xffff80003c44f200 ss 0x10 db_enter+0x25: addq $0x8,%rsp ddb{1}> show proc PROC (syz-executor) tid=367880 pid=78228 tcnt=2 stat=onproc flags process=10 proc=4000000 runpri=32, usrpri=50, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff80003c4207f0,0xffff80003c420a98 process=0xffff80003c41e6a0 user=0xffff80003c44a000, vmspace=0xfffffd806cc63b98 estcpu=36, cpticks=2, pctcpu=0.0, user=0, sys=2, intr=0 ddb{1}> ps PID TID PPID UID S FLAGS WAIT COMMAND 78228 283156 71497 32767 7 0x10 syz-executor *78228 367880 71497 32767 7 0x4000010 syz-executor 62268 264883 82560 32767 2 0x10 syz-executor 62268 346608 82560 32767 3 0x4000090 pipewr syz-executor 58235 208445 23691 32767 2 0x10 syz-executor 58235 419251 23691 32767 3 0x4000090 semwait syz-executor 58235 24142 23691 32767 2 0x4000010 syz-executor 58235 296230 23691 32767 2 0x4000010 syz-executor 21214 51408 20150 32767 2 0x10 syz-executor 21214 280559 20150 32767 3 0x4000090 sbwait syz-executor 21214 508014 20150 32767 2 0x4000010 syz-executor 21214 334004 20150 32767 3 0x4000090 fsleep syz-executor 65120 346400 48667 32767 3 0x90 nanoslp syz-executor 65120 479882 48667 32767 3 0x4000090 sbwait syz-executor 65120 357084 48667 32767 3 0x4000090 fsleep syz-executor 89793 375895 65519 32767 3 0x90 nanoslp syz-executor 89793 9819 65519 32767 3 0x4000090 ttyretype syz-executor 89793 132197 65519 32767 3 0x4000090 fsleep syz-executor 48667 324085 30785 32767 3 0x90 nanoslp syz-executor 20150 369501 14049 32767 3 0x90 nanoslp syz-executor 28497 121081 53401 32767 3 0x90 nanoslp syz-executor 23691 112211 74403 32767 3 0x90 nanoslp syz-executor 71497 204660 79947 32767 3 0x90 nanoslp syz-executor 22085 185687 57356 32767 3 0x10 biowait syz-executor 65519 47243 17289 32767 3 0x90 nanoslp syz-executor 82560 480197 43102 32767 3 0x90 nanoslp syz-executor 79947 136137 699 0 3 0x82 wait syz-executor 57356 490923 699 0 3 0x82 wait syz-executor 53401 236556 699 0 3 0x82 wait syz-executor 17289 122827 699 0 3 0x82 wait syz-executor 43102 485151 699 0 3 0x82 wait syz-executor 14049 290209 699 0 3 0x82 wait syz-executor 74403 459651 699 0 3 0x82 wait syz-executor 30785 163583 699 0 3 0x82 wait syz-executor 699 360671 9782 0 3 0x82 kqread syz-executor 9782 501338 99334 0 3 0x10008a sigsusp ksh 99334 432579 56244 0 3 0x98 kqread sshd-session 56244 471708 15378 0 3 0x92 kqread sshd-session 94967 300249 1 0 3 0x100083 ttyin getty 15378 183270 1 0 3 0x88 kqread sshd 66021 490873 11726 73 3 0x1100090 kqread syslogd 11726 176335 1 0 3 0x100082 sbwait syslogd 46883 168557 1 0 3 0x100080 kqread resolvd 72584 54441 40764 77 3 0x100092 kqread dhcpleased 12470 439980 40764 77 3 0x100092 kqread dhcpleased 40764 75438 1 0 3 0x80 kqread dhcpleased 42065 431924 0 0 3 0x14200 bored smr 32964 272427 0 0 2 0x14200 zerothread 31650 431546 0 0 3 0x14200 aiodoned aiodoned 4946 394950 0 0 3 0x14200 syncer update 42276 97778 0 0 3 0x14200 cleaner cleaner 39059 114597 0 0 3 0x14200 reaper reaper 26134 257083 0 0 3 0x14200 pgdaemon pagedaemon 52128 307201 0 0 3 0x14200 bored viomb 80262 380700 0 0 3 0x40014200 acpi0 acpi0 46691 27815 0 0 3 0x40014200 idle1 37416 346886 0 0 3 0x14200 bored softnet1 23955 479709 0 0 3 0x14200 bored softnet0 82340 139461 0 0 3 0x14200 bored systqmp 55899 353126 0 0 3 0x14200 bored systq 46426 27588 0 0 3 0x14200 tmoslp softclockmp 88347 322049 0 0 3 0x40014200 tmoslp softclock 25265 36401 0 0 3 0x40014200 idle0 1 171389 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb{1}> show all locks CPU 1: exclusive mutex shmpl r = 0 (0xffffffff838fa418) #0 witness_lock+0x5f1 #1 mtx_enter_try+0x1ad #2 mtx_enter+0x62 #3 pool_get+0x124 #4 shmget_allocate_segment+0x1af #5 sys_shmget+0x195 #6 syscall+0xb17 #7 Xsyscall+0x128 Process 78228 (syz-executor) thread 0xffff80003c420fb8 (367880) exclusive kernel_lock &kernel_lock r = 0 (0xffffffff8393e9b0) #0 witness_lock+0x5f1 #1 syscall+0xaf4 #2 Xsyscall+0x128 exclusive mutex shmpl r = 0 (0xffffffff838fa418) #0 witness_lock+0x5f1 #1 mtx_enter_try+0x1ad #2 mtx_enter+0x62 #3 pool_get+0x124 #4 shmget_allocate_segment+0x1af #5 sys_shmget+0x195 #6 syscall+0xb17 #7 Xsyscall+0x128 Process 22085 (syz-executor) thread 0xffff8000fffeed10 (185687) exclusive rrwlock inode r = 0 (0xfffffd806c96fb48) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 rrw_enter+0xc6 #3 VOP_LOCK+0xa3 #4 vn_lock+0xa4 #5 vget+0x2a2 #6 ufs_ihashget+0x185 #7 ffs_vget+0x8c #8 ufs_lookup+0x1a36 #9 VOP_LOOKUP+0x6e #10 vfs_lookup+0x93a #11 namei+0x7ca #12 dounlinkat+0xc1 #13 syscall+0xb17 #14 Xsyscall+0x128 exclusive rrwlock inode r = 0 (0xfffffd806d2be0d0) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 rrw_enter+0xc6 #3 VOP_LOCK+0xa3 #4 vn_lock+0xa4 #5 vfs_lookup+0x11c #6 namei+0x7ca #7 dounlinkat+0xc1 #8 syscall+0xb17 #9 Xsyscall+0x128 ddb{1}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 10191 10958K 10973K 166960K 11282 0 pcb 17 12K 12K 166960K 17 0 rtable 243 6K 7K 166960K 365 0 pf 31 16K 16K 166960K 31 0 ifaddr 42 7K 7K 166960K 44 0 ifgroup 50 2K 2K 166960K 50 0 sysctl 3 1K 9K 166960K 7 0 counters 68 36K 36K 166960K 68 0 ioctlops 0 0K 2K 166960K 31 0 iov 0 0K 12K 166960K 41 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1338 84K 84K 166960K 1373 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 5K 166960K 7 0 VM map 2 1K 1K 166960K 2 0 sem 10 0K 0K 166960K 10 0 dirhash 12 2K 2K 166960K 12 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 25 93K 117K 166960K 280 0 sigio 0 0K 0K 166960K 3 0 proc 58 99K 147K 166960K 506 0 subproc 72 4K 4K 166960K 72 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 2 0K 0K 166960K 36 0 in_multi 100 7K 7K 166960K 109 0 ether_multi 1 0K 0K 166960K 4 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 79 360K 360K 166960K 79 0 exec 0 0K 1K 166960K 370 0 fusefs mount 1 32K 32K 166960K 1 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 260 168K 186K 166960K 4251 0 UVM aobj 8 2K 3K 166960K 10 0 pinsyscall 46 92K 106K 166960K 1358 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 0K 166960K 7 0 NDP 11 0K 2K 166960K 27 0 temp 41 8667K 8747K 166960K 4445 0 kqueue 13 20K 30K 166960K 53 0 SYN cache 2 16K 16K 166960K 2 0 ddb{1}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 26 0 0 1 0 1 1 0 8 0 rtpcb 120 78 0 75 2 0 2 2 0 8 1 rtentry 176 114 0 1 6 0 6 6 0 8 0 unpcb 144 222 0 191 4 0 4 4 0 8 2 syncache 336 6 0 6 1 0 1 1 0 8 1 tcpqe 32 2 0 2 1 0 1 1 0 8 1 tcpcb 736 144 0 137 4 0 4 4 0 8 2 arp 136 19 0 0 1 0 1 1 0 8 0 ipq 40 2 0 0 1 0 1 1 0 8 0 ipqe 40 2 0 0 1 0 1 1 0 8 0 inpcb 328 263 0 251 4 0 4 4 0 8 2 nd6 152 26 0 0 1 0 1 1 0 8 0 kcovpl 48 8 0 0 1 0 1 1 0 8 0 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 458 0 0 29 0 29 29 0 8 0 art_table 40 459 0 0 5 0 5 5 0 8 0 art_node 32 114 0 11 1 0 1 1 0 8 0 sysvmsgpl 40 37 0 37 1 0 1 1 0 8 1 semapl 112 7 0 0 1 0 1 1 0 8 0 shmpl 112 7 0 2 1 0 1 1 0 8 0 pool(0xffffffff838fa400:shmpl): page inconsistency: page 0xfffffd806c9f4000; 29 on list, 5 missing, 35 items per page dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino2pl 256 1759 0 247 95 0 95 95 0 8 0 ffsino 296 1759 0 247 117 0 117 117 0 8 0 nchpl 144 2155 0 464 63 0 63 63 0 8 0 vnodes 216 1840 0 0 103 0 103 103 0 8 0 namei 1024 6344 0 6344 1 0 1 1 0 8 1 percpumem 16 49 0 0 1 0 1 1 0 8 0 kstatmem 264 24 0 0 2 0 2 2 0 8 0 scxspl 216 7329 0 7328 9 1 8 8 1 8 7 plimitpl 152 55 0 28 2 0 2 2 0 8 0 sigapl 424 571 0 518 7 0 7 7 0 8 0 knotepl 120 492 0 0 15 0 15 15 0 8 0 kqueuepl 224 61 0 52 1 0 1 1 0 8 0 pipepl 344 126 0 98 3 0 3 3 0 8 0 fdescpl 528 555 0 518 3 0 3 3 0 8 0 filepl 160 2355 0 2123 12 0 12 12 0 8 2 lockfpl 104 46 0 43 1 0 1 1 0 8 0 lockfspl 48 19 0 16 1 0 1 1 0 8 0 sessionpl 144 23 0 7 1 0 1 1 0 8 0 pgrppl 48 31 0 7 1 0 1 1 0 8 0 ucredpl 104 315 0 296 1 0 1 1 0 8 0 zombiepl 144 519 0 518 1 0 1 1 0 8 0 processpl 1232 571 0 518 5 0 5 5 0 8 0 procpl 664 833 0 768 7 0 7 7 0 8 0 sockpl 752 563 0 517 11 0 11 11 0 8 5 mcl64k 65536 2 0 0 1 0 1 1 0 8 0 mcl8k 8192 2 0 0 1 0 1 1 0 8 0 mcl4k 4096 127 0 0 16 0 16 16 0 8 0 mcl2k 2048 38 0 0 5 0 5 5 0 8 0 mtagpl 96 1 0 0 1 0 1 1 0 8 0 mbufpl 256 313 0 0 20 0 20 20 0 8 0 bufpl 280 2582 0 115 177 0 177 177 0 8 0 anonpl 32 7427 0 0 60 0 60 60 0 246 0 amapchunkpl 152 13179 0 12621 41 0 41 41 0 158 17 amappl16 200 1713 0 1688 15 1 14 14 0 8 11 amappl15 192 36 0 36 1 1 0 1 0 8 0 amappl14 184 3 0 3 1 1 0 1 0 8 0 amappl13 176 404 0 403 1 0 1 1 0 8 0 amappl12 168 897 0 851 3 0 3 3 0 8 0 amappl11 160 7 0 7 1 1 0 1 0 8 0 amappl10 152 42 0 32 1 0 1 1 0 8 0 amappl9 144 258 0 258 1 1 0 1 0 8 0 amappl8 136 22 0 21 1 0 1 1 0 8 0 amappl7 128 77 0 75 1 0 1 1 0 8 0 amappl6 120 257 0 246 1 0 1 1 0 8 0 amappl5 112 72 0 65 1 0 1 1 0 8 0 amappl4 104 384 0 360 1 0 1 1 0 8 0 amappl3 96 2023 0 1920 3 0 3 3 0 8 0 amappl2 88 677 0 600 2 0 2 2 0 8 0 amappl1 80 9815 0 9246 14 0 14 14 0 8 0 amappl 88 3524 0 3334 5 0 5 5 0 92 0 uvmvnodes 80 104 0 0 3 0 3 3 0 8 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 9 0 2 1 0 1 1 0 8 0 uaddrrnd 24 555 0 518 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 555 0 518 1 0 1 1 0 8 0 vmmpekpl 168 6294 0 6260 2 0 2 2 0 8 0 vmmpepl 168 42805 0 40737 103 0 103 103 0 357 9 vmsppl 488 554 0 518 7 1 6 6 0 8 1 rwobjpl 80 14693 0 13740 25 0 25 25 0 8 2 pdppl 4096 1118 0 1036 108 22 86 94 0 8 4 pvpl 32 14830 0 0 120 0 120 120 0 265 0 pmappl 256 554 0 518 4 1 3 3 0 8 0 extentpl 40 45 0 27 1 0 1 1 0 8 0 phpool 112 292 0 25 8 0 8 8 0 8 0 ddb{1}> machine ddbcpu 0 Stopped at x86_ipi_db+0x27: addq $0x8,%rsp x86_ipi_db(ffffffff83837ff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __mp_lock(ffffffff8393e7a8) at __mp_lock+0x192 intr_handler(ffff80003c437c70,ffff80000006b400) at intr_handler+0xe9 Xintr_ioapic_edge23_untramp() at Xintr_ioapic_edge23_untramp+0x18f end of kernel end trace frame: 0x7c593b6a92f0, count: 9 ddb{0}> trace x86_ipi_db(ffffffff83837ff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __mp_lock(ffffffff8393e7a8) at __mp_lock+0x192 intr_handler(ffff80003c437c70,ffff80000006b400) at intr_handler+0xe9 Xintr_ioapic_edge23_untramp() at Xintr_ioapic_edge23_untramp+0x18f end of kernel end trace frame: 0x7c593b6a92f0, count: -6 ddb{0}> machine ddbcpu 1 Stopped at db_enter+0x25: addq $0x8,%rsp db_enter() at db_enter+0x25 panic(ffffffff8339c914) at panic+0x1e5 pool_do_get(ffffffff838fa400,1,ffff80003c44f3e8) at pool_do_get+0x5df pool_get(ffffffff838fa400,1) at pool_get+0x162 shmget_allocate_segment(ffff80003c420fb8,ffff80003c44f640,4,ffff80003c44f590) at shmget_allocate_segment+0x1af sys_shmget(ffff80003c420fb8,ffff80003c44f640,ffff80003c44f590) at sys_shmget+0x195 syscall(ffff80003c44f640) at syscall+0xb17 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x8efc5df7100, count: 7 ddb{1}> trace db_enter() at db_enter+0x25 panic(ffffffff8339c914) at panic+0x1e5 pool_do_get(ffffffff838fa400,1,ffff80003c44f3e8) at pool_do_get+0x5df pool_get(ffffffff838fa400,1) at pool_get+0x162 shmget_allocate_segment(ffff80003c420fb8,ffff80003c44f640,4,ffff80003c44f590) at shmget_allocate_segment+0x1af sys_shmget(ffff80003c420fb8,ffff80003c44f640,ffff80003c44f590) at sys_shmget+0x195 syscall(ffff80003c44f640) at syscall+0xb17 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x8efc5df7100, count: -8