last executing test programs: 7.234403855s ago: executing program 4 (id=85): r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffff9c) read(r0, &(0x7f0000000000)=""/158, 0x9e) (async) ioctl$WSMUXIO_LIST_DEVICES(r0, 0xc1045763, &(0x7f00000000c0)={0x3, [{0x2}, {0x3, 0x1}, {0x2, 0x4}, {0x3, 0x5}, {0x1}, {0x3, 0x4}, {0x2, 0x1ff}, {0x0, 0x7fffffff}, {0x3, 0xffffffff}, {0x1, 0x7fff}, {0x2, 0x10000}, {0x3, 0x7921}, {0x2, 0xb3a}, {0x3, 0x6}, {0x3, 0xa342}, {0x2, 0xaa2}, {0x3, 0x7}, {0x3, 0x7}, {0x3, 0x2}, {0x2, 0x1}, {0x3, 0x800}, {0x8a4a0dcda962603f, 0x10001}, {0x3, 0x6}, {0x1}, {0x1, 0xf}, {0x2, 0x5}, {0x1, 0x5d700}, {0x2, 0x5}, {0x2, 0xfffffff7}, {0x1}, {0x1, 0x1}, {0x2, 0x4}]}) (async) write(r0, 0xfffffffffffffffe, 0x0) (async, rerun: 32) r1 = socket$unix(0x1, 0x2, 0x0) (rerun: 32) sendto(r1, &(0x7f0000000200)="c7336731734ac63e87cd0fe41b5da7e53f61be0c40e52800c5afe1486116ddd9edcc66d5011c38834aaf0a56ec95247b8dcf6c1dda451d2a865e81f09e0533e9f9cb66bc8b7970aa4f4726ea4e48b8417160d318e208850bcd53cc5794ceca030db970a770d30cc00e911e5cbb8a1e876b1a776073e8a276c0281fe7ab95640e73446db0491a73c50598208611dcb729d3079dc92c44cd2306d841b87d50fd9aa5", 0xa1, 0x400, &(0x7f00000002c0)=@in={0x2, 0x0}, 0xc) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000300), 0x80, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x4010, r2, 0x10001) (async, rerun: 32) ioctl$BIOCGFILDROP(r0, 0x40044278, &(0x7f0000000340)) (async, rerun: 32) r3 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000380), 0x1, 0x0) r4 = fcntl$dupfd(r0, 0x0, r3) (async) mkdirat(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', 0x122) (async) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x10000) pwritev(r5, &(0x7f0000000700)=[{&(0x7f0000000440)="a1535845cf8af368c4d7cddaf787c484ee6adfc806f8ddeb37946f786e5b40d730711c41841d753dec11798eba04d0c89935a9d9a43340c034be19fe871a9d4bbb1cfaf18d981dbb2c6114b456a1b9453f2f9ecac6e4b357b8afde1778231bc4de30335e545983854e49a4c90ac9136742bb809bc67de7690835fe70cb568b1ca75791ea370f81c4fd7699fbae4a3e7563327c545da7d89e46c769d8a8f7802eb32ee1b4b4be4d8f0cd8f165770a05310d417525577532630c3555a94c2e1f52b9e86a591c1937efd2", 0xc9}, {&(0x7f0000000540)="3e82cf340dd2031e7fe87c53dd014336f6b42f7c8e9a2f8b1d279e4b901ce189b785df3ffb0ab706d74dfaa226da53c29c6cc6325146ea3c2aa2ca0584bfd82096678960480dfcc4b93ac8dfedc67a88958e20e567837eb3df7d4ac26e264b7a6abe72e86dd1384fa9b590bf042a99479d9e1f2e6f7e750a98b07325e83483c8e0cf7cb3299509c658629939f4afacc3bead8e4f69bbbd6d37e4bff875e3353c9969c221f7c82affc510e4fdf5f998ebf0f4185c20842ce16edf60efee1403523c23ea5ae7ab644a5bde7f55d0bd842b1a0b05c994ea9e96cbbe", 0xda}, {&(0x7f0000000640)="bd8892f88fa31592c1a1262164086803d2de8986fe1ce1e936157cc220a17730303c2deb05ac704f538d13eccbc6c431fd5265ea736f272b0ff10b6ebbd69690e8", 0x41}, {&(0x7f00000006c0)}], 0x4, 0xffffffffffffffff) r7 = syz_open_pts() (async) r8 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000740), 0x20000, 0x0) kevent(r5, &(0x7f0000000780)=[{{r7}, 0xfffffffffffffff9, 0x1a, 0x2, 0xe3, 0x10000}, {{r4}, 0xfffffffffffffffb, 0x32, 0x8, 0x0, 0x4}, {{r0}, 0xfffffffffffffffe, 0xe6, 0xf0000000, 0x4, 0x1}, {{r6}, 0xfffffffffffffffb, 0x2, 0x20000045, 0x36c6edff, 0xfffffffffffffffc}, {{r0}, 0xfffffffffffffff9, 0xa0, 0x40}, {{r8}, 0xfffffffffffffffa, 0x23, 0x2, 0x5, 0x5}, {{r6}, 0xfffffffffffffffc, 0x4, 0x20, 0x100000001, 0x1}, {{0xffffffffffffff9c}, 0xffffffffffffffff, 0x42, 0x20000000, 0x3, 0x4}], 0xc1, &(0x7f0000000880), 0x73f330d5, &(0x7f00000008c0)={0x3, 0x8}) (async) setsockopt$sock_int(r6, 0xffff, 0x1008, &(0x7f0000000900), 0x4) (async) unveil(&(0x7f0000000940)='./file1\x00', &(0x7f0000000980)='x\x00') (async) ioctl$WSDISPLAYIO_GETSCREEN(r0, 0xc0245755, &(0x7f00000009c0)={0x8, './file1\x00', './file0\x00'}) mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4) mkdirat(r0, &(0x7f0000000a00)='./file1\x00', 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000a40)='./file0\x00', 0x80) readv(0xffffffffffffff9c, &(0x7f0000001cc0)=[{&(0x7f0000000a80)=""/59, 0x3b}, {&(0x7f0000000ac0)=""/4096, 0x1000}, {&(0x7f0000001ac0)=""/178, 0xb2}, {&(0x7f0000001b80)=""/99, 0x63}, {&(0x7f0000001c00)=""/136, 0x88}], 0x5) (async) execve(&(0x7f0000001d40)='./file1/file0\x00', &(0x7f0000001dc0)=[&(0x7f0000001d80)=']@\xe6\xa3\x00'], &(0x7f0000001ec0)=[&(0x7f0000001e00)='\x00', &(0x7f0000001e40)='*(,+,.^\x00', &(0x7f0000001e80)='\x00']) (async) ioctl$FIOASYNC(r7, 0x8004667d, &(0x7f0000001f00)=0x3) (async) open(&(0x7f0000001f40)='./file1/file0\x00', 0x10000, 0x44) (async) getsockopt$sock_timeval(r4, 0xffff, 0x1006, &(0x7f0000001f80), &(0x7f0000001fc0)=0x10) utimensat(r5, &(0x7f0000002000)='./file1\x00', &(0x7f0000002040)={{0x6, 0xd8}, {0x8, 0x5}}, 0x0) (async) writev(r1, &(0x7f0000002180)=[{&(0x7f0000002080)="c6c9092928dbd1876bdb5039125f84641103", 0x12}, {&(0x7f00000020c0)="86a47672f2da349d85da8bd58247d973ca7e17f188cf350313c7ad3da3b3ea81cc93cd52aa5ce37b537795af715963f96b5e5f15b334cb595f5b70f974321f3a174d99e4f3459fd56536aec04fab880af408951a1659f84020dac44fe607f3b3bad8dc03847906011a300671134af348ac6ac95f541ee1215334b34ed79d834c9a1c8950419a60ef5af04881d1", 0x8d}], 0x2) 7.215604819s ago: executing program 4 (id=90): socket$inet(0x2, 0x2, 0x0) open$dir(&(0x7f0000000b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xa7210e10bc3c9def) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xa7210e10bc3c9def) sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b10005130000000000003e0004100000000013fecea10500fef96ecf2bc72fd3357ae30200004e3039d2d236acf20b7804be38164991f7c8cf7f882b297be1aa0500100051e2f0ad3ebbc257699a1f139b672f335c223e7d0c032bfa896443a410b6ff46d6819d47fbb12cea0f555002000000720fd38bfbb770a8f5a872c88106002ec589040000000000000036", 0x8e, 0x0, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f0000000300)=@abs={0x0, 0x0, 0x3}, 0x2, 0x0, 0x5e}, 0x403) bind$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) (async) bind$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x10000000000001}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x18, 0x1, 0x0) close(r0) (async) close(r0) socket(0x18, 0x2, 0x0) (async) r1 = socket(0x18, 0x2, 0x0) setsockopt(r1, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) sendmsg$unix(r0, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x402}, 0x0) r2 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000005c0)='\x00', r2, &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') open$dir(&(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x0) (async) open$dir(&(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x0) mkdir(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x51) (async) mkdir(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x51) symlinkat(&(0x7f0000000dc0)='./file0\x00', r2, &(0x7f0000000ec0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') kevent(0xffffffffffffffff, &(0x7f0000000040)=[{{}, 0xfffffffffffffffa, 0x6b, 0x11, 0x200000000000001, 0x101}], 0x203, 0x0, 0x0, 0x0) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0xffffffff, 0x20b, {0x0, 0x6}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) socket(0x18, 0x1, 0x0) (async) r3 = socket(0x18, 0x1, 0x0) setsockopt(r3, 0x1000000029, 0xc, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) setsockopt(r3, 0x1000000029, 0xc, &(0x7f0000000040)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) (async) setsockopt(r3, 0x1000000029, 0xc, &(0x7f0000000040)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) setsockopt(r3, 0x1000000029, 0xd, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) madvise(&(0x7f0000000000/0x600000)=nil, 0xffffffffffffffff, 0x11) rename(&(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000980)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000a80)='./file0\x00') unlink(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mkdirat(r2, &(0x7f00000006c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10) (async) mkdirat(r2, &(0x7f00000006c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10) 7.12317355s ago: executing program 4 (id=99): r0 = socket$inet(0x2, 0x2, 0x0) syz_open_pts() read(r0, &(0x7f0000000040)=""/78, 0x4e) r1 = syz_open_pts() syz_emit_ethernet(0x7ea, 0x0) pledge(0x0, &(0x7f0000000000)='tty\x00\x00\x00!\a\x9bp^|#\xcbhl\x97\xaa\xe0\r\xe7\xb9E\xdf\x1d\x96\x01\x98/\x0e\x17\x95 \x95Mj\x84+\xf0B\xaaYu^\xa0\xc9j\xdd-I\x01R\x00wY\x1d\xd7\f>\x88_\xeb\at\x91\xd3\xbf\xea\xddt\xe0\bt\x06S,\xdbH\xa7-\xaaw\xcet\x044\xc5\xa9e\xa9\xf6\x1b,\x99\x8e\x05\x86\x91IsC}~K\xd97\xae\xb9u\x1c\xfc\xb4Nwl\xaeu\xad\x9b\xaf\x04\xc4\x03\"F\x8f\xd5\xde\r\x8d\xa1\x00\xcc\xd7\xb6\xe1\xeb\xc1>\xbd\t\xc8\x15\v\xb0, \xee\x9d\xb8\xbd\xfd4\xe0\xbf\xa0\x1es\x01=\xdbd\xf0?=\x8af\nn\xd4<\x00\xec\xe4^\x00\x00\x00\xca\x90L\x98\xc9gty\xce\xab\xd2\xa1\x85E\xe2\xa9\xd5\xab\x83\xda?w\x83\xbc\xcf\xd20(L&b\xed\x8c\x1d\x1a\x9fd\x99H\x9e\x82\x10\xea\x05\xe9A\xe3{\x8d\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00zq\xdb\xee\xa1|a\xb4\xb5)t\x95S\xc5\xec\x10\xc7\r\xe4\xfb`R\xc5&\x9f\x90<\x81pc\x1a\xfa\xe1\xc3\x15$\xd2\xaa46\x8a`\xf0\xc5\x12\xe6\xd5\x9d\xb9%\xd8\xa8\xa6rN}\xe2\x9b\xb4\xfc=G\xc5\x03\x91\x86\xf5\r\x01\x00\x01\x00'/415) open$dir(0x0, 0x201, 0x80) syz_emit_ethernet(0x2a, &(0x7f0000000a40)={@broadcast, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x5}, @udp={{0x2, 0x3, 0x8}}}}}}) syz_emit_ethernet(0x10d, &(0x7f0000000500)=ANY=[@ANYBLOB]) syz_emit_ethernet(0x122, &(0x7f0000000200)={@broadcast, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x114, 0x0, 0x2000, 0x4, 0x0, 0x0, @rand_addr}, @tcp={{0x3, 0x1, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x7, 0x0, 0xf3}, {"a30e76cb3f6121b2d66550f5fd227c6cec208240e1fd4b42301fbce20dca03b048c1f7d03ef0c1695badab700c5bd7ffafeab2cafc67e4ee6bc4b704da7f72bd92dc8ca145ab196319a64fba250c317ac4ce2c0e3c4e2afbc156f50f848b7e45e8133dbd035e7e2fc2847f9751d836de04e527c46587a830fff210efd250da4f72dfde1b0ee3f77ea5efa03015857225e13612f518c39feab00a51c323d2509829fb72b5af2e23bdbc4a22196a14a7a175e38b1aa5333e657ba7e7c770144b4250c7e92558d04f0c0939c2dfdfedc38c4d0f6a894342cbc97a116e106ae2be206b538d3dbc5ab23296712e22"}}}}}}) openat$tty(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) ioctl$TIOCSTAT(r1, 0x20007465, 0x0) ioctl$TIOCSETAF(0xffffffffffffffff, 0x802c7416, &(0x7f0000000000)={0x40000, 0x2, 0x4, 0x0, "fc05d65c20963c000000001f00", 0x2}) sysctl$kern(&(0x7f0000000000)={0x1, 0x45}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sysctl$vm_swapencrypt(&(0x7f0000000000), 0x3, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_opts(r0, 0x0, 0x200100000001d, &(0x7f0000000000), 0x4) 6.546873417s ago: executing program 7 (id=106): setrlimit(0x8, &(0x7f0000000980)={0xb, 0x5c}) setitimer(0x2, &(0x7f0000001a80)={{0x7f}, {0x0, 0x2}}, &(0x7f0000000040)) r0 = openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x20000, 0x80) write(r0, &(0x7f0000000240)="60c267967b4ef7545c43fc7524787e7e4441ee095dd0a4902d1eee138c3c78879e0f669aba58ec6ba24adc8990256fddd2b46ffa737730e5a09970fdafe5e5dc1d4a55bd42b5ba54d8265a7118ab0414eb2335e7b869965833713c6429c036e7ebfb2f8c450fbee358", 0x69) r1 = syz_open_pts() pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) ioctl$KDGETLED(r2, 0x40044b41, &(0x7f0000000000)) r3 = semget$private(0x0, 0x1, 0x222) semctl$IPC_SET(r3, 0x0, 0x1, &(0x7f0000000180)={{0x401, 0x0, 0x0, 0x0, 0x0, 0x168, 0x1}, 0x4, 0x8000000000000001, 0x1d2}) setsockopt(0xffffffffffffffff, 0x0, 0x1f, &(0x7f0000000080)="c5", 0x1) select(0x40, &(0x7f0000000000)={0xfffffffffffffffd, 0x0, 0x0, 0x564, 0x9ce8, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r4 = socket(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0xffff, 0x20, &(0x7f0000000080)=0x7, 0x4) connect$unix(r4, &(0x7f00000002c0)=@file={0x1, './file0\x00'}, 0xa) write(r4, &(0x7f0000001000)="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", 0x62b) r5 = getuid() setegid(0x0) r6 = geteuid() lchown(&(0x7f0000000080)='./file0\x00', r6, 0xffffffffffffffff) semctl$IPC_SET(r3, 0x0, 0x1, &(0x7f0000000600)={{0x1, r5, 0x0, r6, 0x0, 0x2, 0x8001}, 0x9, 0x0, 0xb}) close(r1) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000040)={0x3, &(0x7f00000000c0)=[{0x0, 0x8}, {0x3, 0x0, 0x2f, 0xfffffffd}, {0x1, 0x0, 0x0, 0x20}]}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xff0a, 0x0, 0x37) r7 = syz_open_pts() ioctl$TIOCSETA(r7, 0x802c7414, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000480)={0xf66c, 0x21e, 0xffffffff, 0x5ffbfb5f, "428f67177c7cfc4dff00008000", 0x10003fd, 0xfffffffd}) 6.398858643s ago: executing program 7 (id=112): kqueue() r0 = msgget$private(0x0, 0x5bd) msgsnd(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="030000"], 0x8, 0x800) (async) open$dir(&(0x7f0000000b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x0) r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlink(&(0x7f0000000300)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000440)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) symlinkat(&(0x7f00000005c0)='\x00', r1, &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mkdir(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x51) symlinkat(&(0x7f0000000dc0)='./file0\x00', r1, &(0x7f0000000ec0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) rename(&(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000980)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000a80)='./file0\x00') rename(&(0x7f0000000d80)='./file0\x00', &(0x7f0000000180)='./file1\x00') (async) r2 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000dc0)='./file0\x00', r2, &(0x7f0000000ec0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) rename(&(0x7f0000000fc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000010c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) rename(&(0x7f0000000040)='./file1\x00', &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0x0, [{&(0x7f0000af7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil}, {&(0x7f00004f8000/0x1000)=nil, &(0x7f0000159000/0x2000)=nil}, {&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000690000/0x4000)=nil}, {&(0x7f0000987000/0x3000)=nil, &(0x7f0000b0a000/0x4000)=nil, 0x1000000000000000}, {&(0x7f00004f3000/0xa000)=nil, &(0x7f0000ff1000/0x1000)=nil, 0x2}, {&(0x7f0000690000/0x4000)=nil, &(0x7f0000168000/0x2000)=nil}, {&(0x7f0000021000/0x1000)=nil, &(0x7f0000ff2000/0x2000)=nil}, {&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000673000/0x2000)=nil, 0x100000000}, {&(0x7f00004f6000/0x4000)=nil, &(0x7f000071b000/0x3000)=nil}, {&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0xfffffffffffffffd}, {&(0x7f0000ffa000/0x4000)=nil, &(0x7f00002e1000/0xc00000)=nil, 0x14b}, {&(0x7f00008c9000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil}, {&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x6}, {&(0x7f00004f6000/0x2000)=nil, &(0x7f00009a6000/0x1000)=nil, 0x5}, {&(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ff7000/0x2000)=nil}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ead000/0x1000)=nil}], './file0\x00'}) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) (async) getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0xc) r5 = getuid() (async) r6 = syz_open_pts() ioctl$TIOCSETD(r6, 0x8004741b, &(0x7f0000000040)=0x7) (async) r7 = semget$private(0x0, 0x4, 0x200) semctl$IPC_SET(r7, 0x0, 0x1, &(0x7f00000015c0)={{0xffffffff, r5, r4, r3, 0xffffffffffffffff, 0xa5, 0x1}, 0x8, 0x8, 0x9}) (async) msgctl$IPC_SET(r0, 0x1, &(0x7f00000001c0)={{0xac4, 0x0, 0x0, r5, 0xffffffffffffffff, 0x38, 0x40}, 0x9, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x5, 0x8, 0x40000000001551}) msgrcv(r0, 0x0, 0x0, 0x3, 0x400) (async) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f00000000c0), 0x1c, 0x0}, 0x0) (async) r8 = socket(0x10, 0x1, 0xff) getsockname$inet(r8, 0x0, 0x0) (async) setsockopt$sock_timeval(r8, 0xffff, 0x0, &(0x7f00000000c0)={0x4, 0x1ff}, 0x10) 5.051543144s ago: executing program 7 (id=133): poll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x1}], 0x1, 0x0) setrlimit(0x8, &(0x7f0000000980)={0xb, 0x53}) r0 = syz_open_pts() close(r0) syz_open_pts() ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000080)={0x1000f66c, 0x6, 0x7, 0x5fffff5f, "9cdc452e307e0804002f4c0000002f9e68cd3304", 0xffffffff, 0x9}) writev(r0, &(0x7f0000000000)=[{&(0x7f00000009c0)="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", 0x693}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000000)={{0x81ff, 0x0, 0x0, 0x0, 0x0, 0x118, 0xffff}, 0x557a, 0x7, 0x7}) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x1ff}) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = socket(0x20, 0x1, 0x0) close(r1) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) preadv(r2, &(0x7f0000000640)=[{&(0x7f0000000380)=""/197, 0xc5}, {&(0x7f0000000480)=""/148, 0x94}], 0x2, 0xffff) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) r3 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r3, 0xc0106924, &(0x7f00000001c0)) r4 = kqueue() kevent(r4, &(0x7f00000000c0), 0x101, &(0x7f0000000180), 0x6, 0x0) r5 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r5, 0x8020690c, &(0x7f00000001c0)) r6 = socket(0x18, 0x2, 0x0) setsockopt(r6, 0x1000000000029, 0x9, &(0x7f0000000140)='\x00\x00\x00G', 0x4) setsockopt(r6, 0x1000000029, 0x2e, 0x0, 0x0) connect$unix(r1, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) poll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x40}], 0x1, 0x0) sysctl$net_inet_ip(&(0x7f0000000100)={0x4, 0x2, 0x0, 0x25}, 0x4, 0x0, 0x0, 0x0, 0x0) 4.222901523s ago: executing program 7 (id=162): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) bind$inet6(r0, &(0x7f0000000040)={0x18, 0x2, 0x7, 0x2}, 0xc) r1 = syz_open_pts() getitimer(0x0, &(0x7f0000000080)) getsockname$inet6(r0, &(0x7f00000000c0), &(0x7f0000000100)=0xc) utimensat(r0, &(0x7f0000000140)='.\x00', &(0x7f0000000180)={{0xce1, 0x8}, {0x78a, 0x6}}, 0x2) getpeername$inet6(r0, &(0x7f00000001c0), &(0x7f0000000200)=0xc) getitimer(0x2, &(0x7f0000000240)) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0x66, &(0x7f0000000280)={0x3, 0x1, 0x97, 0x5191, 0x7fff}, 0xc) getpeername$inet6(r1, &(0x7f00000002c0), &(0x7f0000000300)=0xc) getsockopt$sock_int(r0, 0xffff, 0x1001, &(0x7f0000000340), &(0x7f0000000380)=0x4) utimes(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={{0x9f37, 0x1}, {0x5, 0x4}}) getsockname$inet6(0xffffffffffffff9c, &(0x7f0000000440), &(0x7f0000000480)=0xc) getsockopt$SO_PEERCRED(r0, 0xffff, 0x1022, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0xc) ioctl$BIOCGBLEN(r0, 0x40044266, &(0x7f0000000500)) fcntl$lock(r1, 0x7, &(0x7f0000000540)={0x2, 0x2, 0x9a5, 0x7fffffff, r2}) bind$inet6(r0, &(0x7f0000000580)={0x18, 0x0, 0xbb4, 0x8}, 0xc) ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f00000005c0)={0xf, 0x1000, 0x9, 0x0, "043572b0f81938ff9ab319518c065196f1c0e208", 0x2, 0x8}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r5, &(0x7f0000000780)={&(0x7f0000000740)={0x0, 0x0, &(0x7f0000000640), 0x0, &(0x7f0000000680)=[{0xa0, 0x1, 0x2, "b5a39b44179c74c6f48d0187eb2cb840384040fa6ff52d8c506d927bb479c15dd8874c963dc90170a4bcdc1b97842f6af1db5539bbad93dea31d601fa0856014dea875aba2cc276677794f429023cc0631da9828b5041dce3dcde90b83fc74e8b044266d8edbad553dd9b64ed03d1207face2da23dc5368b274d9c7e8750dd566110af64a334cb32a872"}], 0xa0}, 0xff}, 0x10, 0x2) ioctl$FIOSETOWN(r0, 0x8004667c, &(0x7f00000007c0)=0xb) ioctl$WSDISPLAYIO_GVIDEO(r0, 0x40045744, &(0x7f0000000800)) r7 = dup(r5) r8 = openat$vmm(0xffffffffffffff9c, &(0x7f00000009c0), 0x100, 0x0) r9 = getuid() r10 = dup(r0) r11 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000a00), 0x200, 0x0) r12 = geteuid() sendmsg$unix(r7, &(0x7f0000000b80)={&(0x7f0000000840)=@abs={0x0, 0x0, 0x3}, 0x8, &(0x7f0000000980)=[{&(0x7f0000000880)}, {&(0x7f00000008c0)="ffa53027e16c9b84f8e69cda90523d6e6bf678d7a5ab01e7424785aaa9d5e83ad2ce5670f22da9789fd3992129b9252fea32b4108c6e778cc2d638c5fa2a5c4361043d8e0e2a5d0d6d443b21efee253f43718d84f9b3ae9f51c2419ba2fe5979a9302f526ff45a97b5b234eb6cbeee6373381914906d31fd65e4125032107582f26071d2ae118cdd0c389fc91ce40059d38dbb4e90782141828f776fd0d1dbbc3fe7e0f75f0803ab4d8ca7e8", 0xac}], 0x2, &(0x7f0000000a40)=[@rights={0x20, 0xffff, 0x1, [r1, r0, r1]}, @rights={0x20, 0xffff, 0x1, [r5, r1, r8]}, @rights={0x30, 0xffff, 0x1, [r5, r1, r0, r6, r5, r6, r0, r0]}, @rights={0x20, 0xffff, 0x1, [r6, r5, r6, r1]}, @rights={0x18, 0xffff, 0x1, [r1]}, @cred={0x20, 0xffff, 0x0, r2, r9, r4}, @cred={0x20, 0xffff, 0x0, r2, r3, r4}, @rights={0x20, 0xffff, 0x1, [r10, r6, r11]}, @cred={0x20, 0xffff, 0x0, r2, r12, r4}], 0x128, 0x5}, 0x1) fcntl$lock(r11, 0x8, &(0x7f0000000c00)={0x1, 0x1, 0x4, 0x6}) 4.22182252s ago: executing program 7 (id=163): mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x20, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x9}) (async) r1 = socket(0x2, 0x1, 0x0) setsockopt(r1, 0x6, 0x8, &(0x7f00000000c0), 0x0) (async) setsockopt$inet_opts(r0, 0x0, 0x0, &(0x7f00000000c0)="97a8507f2adfe484c0a32855ea14963a2e7369efe7be792d5aae47cd1babf930ce10dfcd7679bbb9b0cc8aea1fb37d447515a8c53cb5ebcc1f8641b9676acbbf08653e598818d1544808c2eaec29b85ad891666b9cf03b5cde6038a773a91782a9ffff661042064f22f13765571d577ee7be988f1ca989d1790ce7", 0x7b) r2 = open(&(0x7f0000000000)='./file0\x00', 0x4, 0x180) syz_emit_ethernet(0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6089958900002b00fec000000000000000000000000000aafe"]) (async) fcntl$lock(r2, 0x7, &(0x7f0000000040)={0x1, 0x3, 0x2, 0x1000}) 4.220761463s ago: executing program 1 (id=164): ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, &(0x7f00000000c0)={0xa, 0x8000148, {[0x3, 0x0, 0x6, 0x6, 0x0, 0x8000, 0x1, 0x4, 0x7, 0x2, 0x9, 0x91c, 0xb, 0x180, 0x0, 0xd3, 0x76, 0xfffffffffffffff7], [0x5438b950, 0x5, 0x1001, 0x7, 0x1, 0x1, 0x9, 0x7, 0x1, 0x3], [0x6, 0x0, 0x8, 0x8, 0x10000, 0x200, 0x2], [0x100000000, 0x10001, 0x0, 0x20000000ff, 0x3, 0x6], [{0x9, 0x7, 0xfffffffb, 0x6}, {0x5, 0x100925, 0x3, 0x338}, {0x1000, 0x7fffffff, 0x0, 0x5}, {0x8, 0x2, 0x3, 0x895}, {0x4, 0x3, 0x2, 0x9}, {0xeff8, 0x4, 0x4, 0x7}, {0x17, 0xffffff81, 0x1ff, 0x1}, {0x7, 0x10000, 0x6, 0x5}], {0x52b, 0x4, 0xfffffffd, 0x8}, {0xfff7, 0xffffffc0, 0x8}}}) r0 = msgget$private(0x0, 0x7fc) msgrcv(r0, &(0x7f0000000080)={0x0, ""/177}, 0x119, 0x3, 0x1000) msgsnd(r0, &(0x7f0000001480)=ANY=[@ANYBLOB="03"], 0x145, 0x800) sysctl$net_inet_ah(&(0x7f0000000140)={0x4, 0x2, 0x33, 0x2}, 0x4, 0x0, 0x0, 0x0, 0x0) r1 = socket(0x18, 0x2, 0x0) sysctl$kern(&(0x7f0000000140)={0x1, 0x29}, 0x2, 0x0, 0x0, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18"], 0x20, 0x2}, 0x6) sendmsg$unix(r1, &(0x7f0000000040)={&(0x7f00000000c0)=@abs={0x1, 0x0, 0x2}, 0x8, 0x0, 0x0, &(0x7f0000000140)=ANY=[], 0x18, 0x401}, 0x4) 4.112688091s ago: executing program 7 (id=168): r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) shmctl$IPC_SET(r0, 0x1, 0x0) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc5005601, &(0x7f0000000000)={0x10, 0x2bf7, [{&(0x7f00001d0000/0x4000)=nil, &(0x7f0000663000/0x4000)=nil, 0xfffffffffffff801}, {&(0x7f00006ac000/0x4000)=nil, &(0x7f0000826000/0x4000)=nil}, {&(0x7f00001d2000/0x3000)=nil, &(0x7f00006ad000/0x1000)=nil}, {0x0, &(0x7f0000ffb000/0x3000)=nil}, {0x0, &(0x7f0000fff000/0x1000)=nil, 0x8}, {&(0x7f0000000000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil}, {0x0, 0x0, 0xfffffffffffffffc}, {&(0x7f00001c9000/0xb000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x3}, {&(0x7f000000d000/0x4000)=nil, &(0x7f0000826000/0x1000)=nil, 0x40}, {&(0x7f0000110000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil}, {0x0, &(0x7f0000156000/0x1000)=nil, 0x12}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil}, {0x0, &(0x7f0000ffd000/0x3000)=nil}, {&(0x7f00004c1000/0x2000)=nil, 0x0, 0x9bbf}, {&(0x7f00001cf000/0x4000)=nil}, {&(0x7f0000573000/0x2000)=nil, &(0x7f0000358000/0x2000)=nil}], './file0\x00'}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f0000000200)=@abs={0x1, 0x0, 0x3}, 0x8, 0x0}, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0xf4, 0x8}, 0x5, 0x0, 0xa7}) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7, 0x1}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket(0x18, 0x1, 0x0) close(r1) r2 = socket(0x18, 0x2, 0x0) connect$unix(r1, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) sendmsg$unix(r2, &(0x7f0000001700)={0x0, 0xffffffb3, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0) shmat(r0, &(0x7f0000001000/0x3000)=nil, 0x0) setrlimit(0x8, &(0x7f00000000c0)={0x45, 0x56}) r3 = syz_open_pts() close(r3) syz_open_pts() ioctl$FIOASYNC(r3, 0x80047466, &(0x7f0000001280)=0x4000006) read(r3, &(0x7f0000000240)=""/4096, 0x1000) write(r3, &(0x7f0000000100)="9d", 0x1) 4.108667116s ago: executing program 1 (id=170): setrlimit(0x0, &(0x7f0000000240)={0x21000000000000a, 0x53}) setrlimit(0x8, &(0x7f0000000000)={0x42, 0x62}) r0 = syz_open_pts() close(r0) syz_open_pts() ioctl$FIOASYNC(r0, 0x80047470, &(0x7f0000000140)=0x2) setrlimit(0x8, &(0x7f0000000040)={0x7, 0x50}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0xffff, 0x1023, &(0x7f0000000040), 0xe0) ioctl$FIOASYNC(r0, 0x80047460, &(0x7f00000000c0)=0x4) readv(r0, &(0x7f00000001c0)=[{&(0x7f00000013c0)=""/15, 0xf}], 0x10000000000001c5) 3.334835124s ago: executing program 0 (id=185): sysctl$net_inet_tcp(&(0x7f0000000080)={0x4, 0x2, 0x6, 0x14}, 0x4, &(0x7f00000000c0), 0x0, 0x0, 0x0) r0 = kqueue() kevent(r0, &(0x7f00000003c0)=[{{}, 0x9, 0xec, 0x4, 0x4, 0xffffffff}], 0xffffffff, 0x0, 0x9b68, 0x0) r1 = kqueue() kevent(r1, 0x0, 0x2000, 0x0, 0x1ff, 0x0) r2 = kqueue() r3 = socket(0x18, 0x1, 0x0) setsockopt(r3, 0x1000000000029, 0x26, 0x0, 0x0) kevent(r2, &(0x7f0000000040)=[{{r1}, 0xfffffffffffffff9, 0x43, 0x1, 0x1, 0xd}, {{r3}, 0xfffffffffffffffe, 0x2, 0x2, 0x8, 0x768}], 0x80ddd, 0x0, 0x10096b, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x10, 0x0) fcntl$lock(r4, 0xb, 0x0) 2.915420953s ago: executing program 1 (id=190): syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffff06000000aa"]) (async) r0 = syz_open_pts() close(r0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) fcntl$dupfd(r0, 0x0, r1) minherit(&(0x7f000000e000/0x2000)=nil, 0x2000, 0x3) setrlimit(0x8, &(0x7f0000000980)={0x8, 0x54}) (async) r2 = syz_open_pts() close(r2) (async) syz_open_pts() socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r4, 0x0, r3) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="00001c00ac14"]) (async) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r5 = socket(0x2, 0x4001, 0x0) r6 = dup(r5) r7 = fcntl$dupfd(r6, 0x2, 0xffffffffffffffff) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r8 = syz_open_pts() fcntl$lock(r8, 0x7, &(0x7f0000001500)={0x2, 0x2, 0x0, 0x10002ffffffff}) close(r7) r9 = socket(0x2, 0x2, 0x0) bind(r9, &(0x7f0000000000), 0x10) connect$unix(r9, &(0x7f0000000000), 0x10) (async) write(r9, &(0x7f0000000140)="f168cb824ee57f228cf0475e3a640fa3f8f65eda", 0x14) openat$klog(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) setsockopt$sock_int(r7, 0xffff, 0x1023, &(0x7f0000000080), 0x4) 2.914543922s ago: executing program 3 (id=191): r0 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x3) (async) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x2000000000000243, &(0x7f0000000100)}) (async) r1 = socket(0x1, 0x2, 0x0) (async) socket(0x2, 0x1, 0x0) (async, rerun: 32) socket(0x800000018, 0x2, 0x0) (async, rerun: 32) socket(0x18, 0x1, 0x0) (async) r2 = socket(0x2, 0x2, 0x0) (async) connect$unix(0xffffffffffffffff, &(0x7f0000000000)=@file={0xd1653077bafa0114, './file0\x00'}, 0xa) (async, rerun: 64) socketpair$unix(0x1, 0x1, 0x0, 0x0) (async, rerun: 64) recvmsg(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)=[{0x0}], 0x1, 0x0}, 0x40) (async) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xbd, &(0x7f0000000400)={@broadcast, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0xaf, 0x0, 0x8}, @generic="ba80ed93f6546bc6b6a4fc795886caf37126d04993d486b363b988e373d70527bf4b14ee0135b00d24239fb9f4feabe0d1fd05e3fdc95281cd92cd589deb212dea448acd5f7edbe82d9f504bc52ad6430acf62cdfb0f7115e91a65d33642645e328b102145da9a39bf23fc05e0c812d51a1916ab994b2fc529620340fcc6cc97437760cac3bab7d0ebe2319b1e7e010f5aed466752b94a8069f3bf"}}}}) (async) syz_emit_ethernet(0xe7, &(0x7f0000000680)={@broadcast, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0xd9, 0x0, 0x2, 0x4, 0x0, 0x0, @multicast1}, @udp={{0x1, 0x0, 0x8}, {"c98ba8984ba307e409a98f60cda784f72de0313efab793e9319f965f34b92c3d3810643ce8f19742bde15d4ad89382af9a80fe4473dd004dd773cc6c9553d2518033a68e07dfa557433ad95e3c0bc450853166685a7e65e4166699474c8b51ca95574cad40f30292a0645108587ad6550c3cae2e35ebe03be0d8c293d02d3404bc929e6e48ca2873b24fec00572b8491bde720b275a7ac4c35868d66e5ebde1d519e26c661249e59119993688f1b9c5ac5472d6e0e9cc2f27c17314b05"}}}}}}) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) r3 = kqueue() ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f00000019c0)={0xfffffffc, 0xfffffffe, {[0xfffffffffffffffc, 0x8, 0x5, 0x100000000, 0x0, 0x80000000, 0x8000002e, 0x0, 0x0, 0x2f01, 0x1, 0x3, 0xfffffffffffffffe, 0x1, 0x4, 0x4, 0xfffffffffffffff7, 0x100], [0x5, 0x5, 0xfffffffffffffff8, 0x0, 0x1, 0x80000000, 0x0, 0x0, 0x0, 0x47], [0x8, 0x2, 0x100000000000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe], [0x3, 0x20000000000, 0x0, 0x100000002, 0xfffffffffffffffe], [{0x0, 0xc, 0x4, 0x7d06}, {0x2, 0x2, 0x1, 0x3}, {0x0, 0xfffffffd, 0xfffffffe, 0xffc}, {0x1008, 0x0, 0x6, 0xfffffffffffffffe}, {0x0, 0x400, 0xd, 0x40}, {0x7ffe, 0x2000, 0x40003, 0x1}, {0xfffe, 0x0, 0x7}, {0x0, 0x95b, 0x200, 0xc}], {0x0, 0x5, 0x0, 0x849}, {0x203, 0x10, 0x4, 0x2}}}) (async) kevent(r3, &(0x7f00000000c0), 0x138, 0x0, 0xffffffff, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async, rerun: 32) connect$unix(r2, &(0x7f0000000000), 0x10) (async, rerun: 32) ioctl$FIONREAD(r1, 0xc0106924, &(0x7f00000001c0)) (async) sendmmsg(0xffffffffffffffff, 0xffffffffffffffff, 0x4a, 0x0) (async) r4 = kqueue() kevent(r4, &(0x7f00000000c0), 0x101, &(0x7f0000000180), 0x6, 0x0) (async, rerun: 32) r5 = socket(0x2, 0x2, 0x0) (rerun: 32) ioctl$FIONREAD(r5, 0x802069de, &(0x7f00000001c0)) (async) getdents(r0, &(0x7f0000001080)=""/4059, 0xfc40) 2.913809684s ago: executing program 5 (id=192): r0 = getpid() r1 = socket(0x11, 0x3, 0x3) r2 = socket(0x18, 0x2, 0x0) setsockopt(r2, 0x1000000000029, 0xa, &(0x7f0000000340)='\x00\x00\x00\x00', 0x4) setsockopt(r2, 0x29, 0xb, 0x0, 0x0) fcntl$setown(r1, 0x6, r0) setpgid(0x0, 0x0) fcntl$setown(r1, 0x6, r0) msgctl$IPC_SET(0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x0, 0x3, r0}) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r4 = getpgrp() fcntl$setown(r3, 0x6, r4) ioctl$WSKBDIO_GETMAP(r3, 0x80047476, &(0x7f0000000100)={0x0, 0x0}) 2.906319798s ago: executing program 3 (id=193): r0 = socket(0x2, 0x1, 0x0) r1 = dup(r0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r0, 0x1) (async) r3 = dup(r2) recvmmsg(r3, &(0x7f0000000440)={&(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)=[{0x0}, {0x0}, {&(0x7f0000000240)=""/90, 0x5a}], 0x3, 0x0}, 0x1}, 0x10, 0x0, 0x0) (async) r4 = dup2(r1, r3) execve(0x0, 0x0, 0x0) (async) shutdown(r4, 0x2) sysctl$net_inet_ip(&(0x7f0000000100)={0x4, 0x2, 0x0, 0x1b}, 0x4, &(0x7f0000000140)="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", &(0x7f0000000040)=0x173, 0x0, 0x0) 2.905479419s ago: executing program 1 (id=195): openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r0 = socket(0x18, 0x2, 0x0) setsockopt(r0, 0x1000000000029, 0x36, 0x0, 0x0) symlink(&(0x7f0000000480)='./file0/file0\x00', &(0x7f0000000040)='./file0\x00') rename(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0/file0/..\x00') mkdir(&(0x7f0000000040)='./file2\x00', 0xd1) r1 = open(&(0x7f0000000080)='./file2/file0\x00', 0xae38ac560ef87f54, 0x3e) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_emit_ethernet(0x10e1, &(0x7f00000004c0)={@broadcast, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "db0900", 0x10ab, 0x0, 0x0, @remote={0xfe, 0x80, '\x00', 0x0}, @mcast2, {[@dstopts={0x62, 0x203, '\x00', [@generic={0x4, 0x1000, "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"}, @ra={0x5, 0x2, 0x2ac4}, @pad1, @padn={0x1, 0x1, [0x0]}, @pad1, @enc_lim={0x4, 0x1, 0x5}, @jumbo={0xc2, 0x4, 0x5}, @enc_lim={0x4, 0x1, 0x10}, @ra={0x5, 0x2, 0x4}]}, @dstopts={0x2c, 0x0, '\x00', [@ra={0x5, 0x2, 0x2}]}], @generic="a56a698b84cd5a2e7f539904ed0b7c41a1017a75435b7db548b7f6dd2873151e87e080a9e0af8a959f2f57382e6eebc0d294ecb57abe897e55aab0347939c83bddde25b183bd9be715e576366e9b6b0faa056841ac9f42180ff3b45f2ede11fd778822d04bd71c58887aa47c51890cbf636ebf"}}}}}) rmdir(&(0x7f0000000040)='./file1\x00') ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x3, &(0x7f0000000140)=[{0xc001, 0x72, 0x1}, {0x4, 0x0, 0x0, 0x800}, {0x2, 0x0, 0x3, 0x6}]}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0x37) faccessat(r1, &(0x7f0000000180)='./file0/file0\x00', 0x143, 0x3) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="00b20fb0", 0x4}], 0x1) sysctl$kern(&(0x7f0000000080)={0x1, 0x3d}, 0x4000000000000003, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x3a, &(0x7f00000000c0)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "9ac9d0", 0x4, 0x2b, 0x0, @local={0xfe, 0x80, '\x00', 0x0}, @rand_addr="b82957248c3701367c9909fa96bf7cb7", {[], @generic="2b53e576"}}}}}) r2 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x20000, 0x34) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x970) 2.675444s ago: executing program 5 (id=196): setrlimit(0x8, &(0x7f00000008c0)={0x42, 0x61}) r0 = syz_open_pts() r1 = shmget$private(0x0, 0x800000, 0x95a999646a72d594, &(0x7f0000005000/0x800000)=nil) shmat(r1, &(0x7f0000001000/0x3000)=nil, 0x2000) r2 = kqueue() kevent(r2, &(0x7f0000000000), 0x203ff, 0x0, 0x8000800, 0x0) socket(0x1, 0x3, 0x0) r3 = syz_open_pts() ioctl$TIOCSETA(r3, 0x802c7414, &(0x7f0000000000)={0x7ffbffff, 0x9, 0xff, 0x21d8b78c, "102e2618237b53620dcc52696e0000535200", 0x9, 0xfff}) sysctl$kern(&(0x7f0000000040)={0x1, 0x35}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r4 = syz_open_pts() ioctl$TIOCSTAT(r4, 0x20007465, &(0x7f0000000080)) shutdown(0xffffffffffffffff, 0x2) r5 = syz_open_pts() ioctl$TIOCSETA(r5, 0x802c7414, &(0x7f00000001c0)={0x4006, 0x8, 0xffffffde, 0x5, "100000e500", 0x0, 0xe}) writev(r5, &(0x7f0000000180)=[{&(0x7f00000000c0)='\b', 0x1}], 0x1) close(r5) syz_open_pts() sysctl$net_inet_divert(&(0x7f0000000040)={0x4, 0x2, 0x102, 0x3}, 0x4, &(0x7f0000000280), 0x0, 0x0, 0x0) r6 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r6, &(0x7f0000000080)={&(0x7f0000000900)=@file={0x170, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}, 0x6a, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x0) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000940)="dc163e1c0617137d77dfef0cb87fe3b9da8e4dd521464373b58eb077a0d03d4bc98d180880eaa55e202ad669ce7b8ecb8f675538de65dc96de95e55542d694a3", 0x40}], 0x1) 2.075813305s ago: executing program 3 (id=198): syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @broadcast, [], {@ipv4={0x800, {{0xd, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x1, 0x0, @broadcast, @empty, {[@lsrr={0x83, 0x1f, 0x0, [@multicast2, @multicast1, @multicast2, @loopback, @local={0xac, 0x14, 0x0}, @empty, @loopback]}]}}, @icmp=@echo_reply={0x0, 0x0, 0x0, 0x67, 0xfffe}}}}}) 2.069663527s ago: executing program 1 (id=200): mkdir(&(0x7f0000000040)='./file2\x00', 0xd1) (async) r0 = socket(0x2, 0x1, 0x0) setsockopt(r0, 0x6, 0x4, &(0x7f00000000c0)="aef43c05", 0x4) setsockopt(r0, 0x6, 0x8, &(0x7f0000000040)="3b94c5a3", 0x4) (async) unveil(&(0x7f00000000c0)='./file2/file0\x00', &(0x7f0000000140)='r\x00') mkdir(&(0x7f0000000000)='./file0\x00', 0x168) (async) ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f0000000000)={0x4, 0x0, 0x9, 0xa, "010000001904edc2ad0ab7055f41f550c5d76806", 0xfd}) (async) sysctl$vm_swapencrypt(&(0x7f0000000000)={0x6, 0xb, 0x1}, 0x5, 0x0, 0x0, 0x0, 0xfffffffffffffde7) (async) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x100000000000000, 0x10040000000001}}) (async) r1 = socket(0x18, 0x2, 0x0) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) (async) setsockopt(r1, 0x1000000000029, 0xc, &(0x7f0000000000), 0x14) (async) fcntl$lock(0xffffffffffffffff, 0xd, &(0x7f0000000040)={0x1, 0x1, 0x4, 0x100000007}) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x11}, 0x4000000000000006, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x200000000000c, &(0x7f0000000000)="ea00000100000000", 0x8) (async) setsockopt$inet_opts(r2, 0x0, 0xd, &(0x7f0000000240)="0140000000000000", 0x8) syz_emit_ethernet(0xe4, &(0x7f0000000200)=ANY=[@ANYRESHEX=r2, @ANYRESOCT=r2]) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa17f7193403c6ab5, 0x0) (async) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x7fffffff, 0x0, {0x0, 0x1}}) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) r3 = socket(0x18, 0x1, 0x0) setsockopt(r3, 0x1000000029, 0xc, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) writev(r1, &(0x7f0000000280)=[{&(0x7f00000001c0)="ae3379d67b6a52cb8c10ff7253baef03a63a98f93c3ed4", 0x17}, {&(0x7f0000000340)="59a1dbe64301edba5a70ef82712aa7ad8531b1b2d0ea681e1ca12c8e703f8c8e3f244da178cca2dce758ba40563b40d6f89cbfef8e79e02bd43ad9021acf39de9aad2e36665f560df19e0bf4789017657adedc3f56124f0a155c6c00f4b281c84a4618a64d635d45db45ef237db2d476f1b4e53dfaf2bcfb5950bf6622b042a12f57f6bd8f92af58419f7909d0c0a64de1cc3b741bb366e745da021abfa4409ac24e5081f1a9f09348fb97ae22", 0xad}], 0x2) (async) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000300), 0x80, 0x0) (async) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) fcntl$lock(r5, 0x9, &(0x7f0000000100)={0x3, 0x1, 0xfffffffffffffffe, 0x300000003}) fcntl$lock(r4, 0x9, &(0x7f0000000040)={0x2, 0x1, 0x7, 0x100000003}) (async) setsockopt(r3, 0x1000000000029, 0xa, &(0x7f0000000100)="03000000", 0x4) (async) sysctl$kern(&(0x7f00000000c0)={0x1, 0x2a}, 0x2, &(0x7f0000000180)="62322a0cfce0a63e7d1eb5a4d5d64e7a2a81da2431c39699ac9436cd557957f758245bf9b3575e64f79ccbf0880b8eb5", &(0x7f0000000080)=0x30, 0x0, 0x0) 1.864780126s ago: executing program 3 (id=202): r0 = open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x101) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000440)="e9", 0x1}], 0x1, 0x3effd) r1 = open(&(0x7f0000000040)='./file0\x00', 0x200, 0x0) ioctl$FIOASYNC(r0, 0x8004667d, &(0x7f0000000080)=0xe) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x1, 0x10, r1, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1.86421641s ago: executing program 6 (id=203): r0 = socket(0x18, 0x1, 0x0) getsockopt$sock_int(r0, 0xffff, 0x20, &(0x7f0000000000), &(0x7f0000000180)=0x4) mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4) 1.86271813s ago: executing program 5 (id=204): socket(0x11, 0x3, 0x0) syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) r0 = syz_open_pts() kevent(0xffffffffffffffff, &(0x7f0000000100)=[{{r0}, 0xfffffffffffffffe, 0x51, 0x40000000, 0x8, 0x4}], 0x7f, 0x0, 0x80000001, 0x0) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1) openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x10, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) read(r1, &(0x7f00000011c0)=""/171, 0xab) poll(&(0x7f0000000000), 0x35, 0x0) close(r2) ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, 0x0) r3 = socket(0x2, 0x4001, 0x0) r4 = dup(r3) r5 = fcntl$dupfd(r4, 0x2, 0xffffffffffffffff) close(r5) socket(0x2, 0x2, 0x0) poll(0x0, 0x0, 0x1400) poll(&(0x7f0000000000), 0x35, 0x0) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) fcntl$lock(r6, 0x9, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x20001fffffffd}) r7 = socket$inet(0x2, 0x2, 0x0) r8 = dup2(r7, r7) getsockopt$sock_int(r8, 0xffff, 0x1023, 0x0, 0x0) fcntl$lock(r6, 0x7, &(0x7f00000003c0)) syz_emit_ethernet(0x36, &(0x7f0000000840)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6000000000000000000000000020e8000000000803710000000000000000000000df"]) sysctl$ddb(&(0x7f0000000380)={0x9, 0x2}, 0x2, &(0x7f00000001c0)="6b1cc124", &(0x7f00000000c0)=0x4, 0x0, 0x0) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r9 = socket(0x2, 0x1, 0x0) connect$unix(r9, &(0x7f0000000000), 0x10) 1.862283459s ago: executing program 6 (id=205): ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, &(0x7f00000000c0)={0xa, 0x8000148, {[0x3, 0x0, 0x6, 0x6, 0x0, 0x8000, 0x1, 0x4, 0x7, 0x2, 0x9, 0x91c, 0xb, 0x180, 0x0, 0xd3, 0x76, 0xfffffffffffffff7], [0x5438b950, 0x5, 0x1001, 0x7, 0x1, 0x1, 0x9, 0x7, 0x1, 0x3], [0x6, 0x0, 0x8, 0x8, 0x10000, 0x200, 0x2], [0x100000000, 0x10001, 0x0, 0x20000000ff, 0x3, 0x6], [{0x9, 0x7, 0xfffffffb, 0x6}, {0x5, 0x100925, 0x3, 0x338}, {0x1000, 0x7fffffff, 0x0, 0x5}, {0x8, 0x2, 0x3, 0x895}, {0x4, 0x3, 0x2, 0x9}, {0xeff8, 0x4, 0x4, 0x7}, {0x17, 0xffffff81, 0x1ff, 0x1}, {0x7, 0x10000, 0x6, 0x5}], {0x52b, 0x4, 0xfffffffd, 0x8}, {0xfff7, 0xffffffc0, 0x8}}}) r0 = msgget$private(0x0, 0x7fc) msgsnd(r0, &(0x7f0000001480)=ANY=[@ANYBLOB="03"], 0x145, 0x800) sysctl$net_inet_ah(&(0x7f0000000140)={0x4, 0x2, 0x33, 0x2}, 0x4, 0x0, 0x0, 0x0, 0x0) r1 = socket(0x18, 0x2, 0x0) sysctl$kern(&(0x7f0000000140)={0x1, 0x29}, 0x2, 0x0, 0x0, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18"], 0x20, 0x2}, 0x6) sendmsg$unix(r1, &(0x7f0000000040)={&(0x7f00000000c0)=@abs={0x1, 0x0, 0x2}, 0x8, 0x0, 0x0, &(0x7f0000000140)=ANY=[], 0x18, 0x401}, 0x4) 1.754247015s ago: executing program 6 (id=206): ioctl$WSDISPLAYIO_LDFONT(0xffffffffffffffff, 0x8058574d, &(0x7f00000001c0)={'./file0\x00', 0xf, 0x6, 0x22, 0x0, 0x3, 0x5, 0x4, 0x0, 0x0, 0xc9d, 0x5}) syz_emit_ethernet(0x3a, &(0x7f00000005c0)={@broadcast, @empty, [], {@ipv4={0x800, {{0x9, 0x4, 0x0, 0x0, 0x14, 0x0, 0x5, 0x0, 0x0, 0x0, @empty, @empty, {[@timestamp={0x44, 0x10, 0x7, 0x3, 0x2, [{[], 0x2}, {[], 0xffffffff}, {[], 0x4}]}]}}, @udp={{0x0, 0x0, 0x8}}}}}}) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') unveil(&(0x7f00000000c0)='./file0/file0/..\x00', &(0x7f0000000100)='r\x00') r0 = open(&(0x7f0000000000)='./file0\x00', 0x9cab835cfdc52675, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="00b20fb0", 0x4}], 0x1) sysctl$kern(&(0x7f0000000080)={0x1, 0x3d}, 0x4000000000000003, 0x0, 0x0, 0x0, 0x0) fcntl$dupfd(r0, 0x0, r0) sysctl$net_inet_ip(&(0x7f0000000180)={0x4, 0x2, 0x0, 0x7c5e7e1fc2646be5}, 0x4, 0x0, 0x0, 0x0, 0x24) 1.745387168s ago: executing program 0 (id=208): syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[@ANYBLOB="e702f2ffef1f97b0ae1a006b86dd609907a600302c03cb697a653e336f000000500000000000ff020000000000000000000000000001d7ffffff"]) sysctl$hw(&(0x7f0000000040)={0x6, 0x14}, 0x2, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[@ANYBLOB="69e1629b6174391e7dd7a2d786dd60b6000000302c03cb697a653e336f000000500000000000ff02000000000000000000000000000102000003"]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0xa) sysctl$hw(&(0x7f0000000000)={0x6, 0x19}, 0x2, &(0x7f0000000040), 0x0, 0x0, 0x0) 1.74478026s ago: executing program 3 (id=209): r0 = socket(0x2, 0x400000000002, 0x0) setsockopt(r0, 0x0, 0x3, &(0x7f0000001a80), 0x0) 1.743027277s ago: executing program 1 (id=210): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000240)={{0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x7}, 0x9, 0xfffc, 0x0, 0x0, 0x4, 0x0, 0x800000800000000}) shmat(r0, &(0x7f0000001000/0x3000)=nil, 0x1000) r1 = socket(0x18, 0x2, 0x0) setsockopt(r1, 0x1000000000029, 0xb, &(0x7f0000003680)='\x00', 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x1011, 0xffffffffffffffff, 0x0) sysctl$hw(&(0x7f00000000c0)={0x6, 0xf}, 0x2, 0x0, &(0x7f0000000080), 0x0, 0x0) sysctl$kern(&(0x7f00000000c0)={0x1, 0x48}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$kern(&(0x7f00000000c0)={0x1, 0x4a}, 0x2, &(0x7f0000000240), &(0x7f0000000080)=0x34, 0x0, 0x0) r2 = kqueue() kevent(r2, &(0x7f0000000080), 0xe4a, 0x0, 0xa9fa, 0x0) 1.74267989s ago: executing program 32 (id=210): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000240)={{0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x7}, 0x9, 0xfffc, 0x0, 0x0, 0x4, 0x0, 0x800000800000000}) shmat(r0, &(0x7f0000001000/0x3000)=nil, 0x1000) r1 = socket(0x18, 0x2, 0x0) setsockopt(r1, 0x1000000000029, 0xb, &(0x7f0000003680)='\x00', 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x1011, 0xffffffffffffffff, 0x0) sysctl$hw(&(0x7f00000000c0)={0x6, 0xf}, 0x2, 0x0, &(0x7f0000000080), 0x0, 0x0) sysctl$kern(&(0x7f00000000c0)={0x1, 0x48}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$kern(&(0x7f00000000c0)={0x1, 0x4a}, 0x2, &(0x7f0000000240), &(0x7f0000000080)=0x34, 0x0, 0x0) r2 = kqueue() kevent(r2, &(0x7f0000000080), 0xe4a, 0x0, 0xa9fa, 0x0) 1.658443837s ago: executing program 3 (id=211): r0 = socket$inet(0x2, 0x2, 0x0) close(r0) open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x1d6) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000280)='#!', 0x2}, {&(0x7f0000000340)="8d6bb85551ec8430877ae32fe9bbe42cc8f2147a3eba8e1969f0435119cf4c071c8aee7ef2921be5d7d4796c5566c95989acb3d185587234186e96b8fde9ffac51de05a87b8b893e2abd154dd886eafbe03881d25b7b13b4c32227fc9e5a86a06f594520f701322b3a109a13436e486b0a", 0x71}], 0x2) r1 = shmget$private(0x0, 0x4000, 0x400, &(0x7f0000002000/0x4000)=nil) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000080)={{0x10003ff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x13e}, 0x0, 0x8, 0x0, 0x0, 0x6}) shmat(r1, &(0x7f0000001000/0x3000)=nil, 0x2000) shmat(r1, &(0x7f0000002000/0x800000)=nil, 0x3000) execve(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = socket(0x11, 0x3, 0x0) setrlimit(0x3, &(0x7f00000005c0)={0x100000, 0x100}) r3 = syz_open_pts() close(r3) syz_emit_ethernet(0x76, &(0x7f0000000180)={@random="69e1629b6174", @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "001000", 0x40, 0x2c, 0x0, @rand_addr="fe697a653e336f0000005000", @mcast2, {[@hopopts={0x3c, 0x0, '\x00', [@padn, @pad1, @generic={0x9}]}], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x3, {0x9, 0x6, "c46dea", 0x6, 0xff, 0x8, @rand_addr="26650652e2a60a3a68632730c0fc4357", @mcast2}}}}}}}) syz_open_pts() r4 = dup(r2) ioctl$TIOCSETA(r4, 0x802c7414, &(0x7f0000000040)={0x27ffb, 0x1, 0x7, 0x21d8b78d, "102e2618007bf533e2942a6c3ceb00", 0xc, 0x7f}) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000e40)="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", 0x53f}], 0x1) faccessat(r4, &(0x7f0000000580)='./file0\x00', 0x8, 0x2) recvmmsg(r2, &(0x7f0000000500)={&(0x7f00000004c0)={&(0x7f00000000c0)=@in6, 0xc, &(0x7f0000000400)=[{&(0x7f0000000100)=""/205, 0xcd}, {&(0x7f0000000200)=""/151, 0x97}, {&(0x7f00000002c0)=""/24, 0x18}, {&(0x7f0000000300)=""/225, 0xe1}], 0x4, &(0x7f0000000440)=""/88, 0x58}, 0xef}, 0x10, 0x821, &(0x7f0000000540)={0xcc, 0x14c0439}) sendto$unix(r2, &(0x7f0000000000)="b1000516001004000000080003000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5fb003000000000000000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a41f7fb92102d30ee8491ac673a17a617a86ba609ddfdb000000720fd18bfbb670c1f5a872c881ea6e2ec5890000eeff7f000800000002fac5000028000000000000008abfba221554f4e0f668266c090000", 0xb1, 0x0, 0x0, 0x0) 1.65781641s ago: executing program 0 (id=212): r0 = open(&(0x7f0000000080)='./file0\x00', 0x18289, 0x190) ftruncate(r0, 0x10000) r1 = open(&(0x7f0000000040)='./file0\x00', 0x200, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x10, r1, 0x2) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x2000000000000243, &(0x7f0000000100)}) r2 = socket(0x1, 0x2, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "0000c0", 0x14, 0x0, 0xf9, @ipv4={'\x00', '\xff\xff', @local={0xac, 0x14, 0x0}}, @rand_addr="00fe000001000800001a000000000004", {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x4, 0x8003, 0x0, 0xfffe}}}}}}}) ioctl$FIONREAD(r2, 0xc0106924, &(0x7f00000001c0)) 1.656946832s ago: executing program 6 (id=213): r0 = kqueue() kevent(r0, &(0x7f0000000000)=[{{}, 0xfffffffffffffff9, 0x9, 0x0, 0x8, 0x10000}], 0x1, &(0x7f00000000c0), 0x1, 0x0) write(r0, &(0x7f00000000c0)="a324ab3b3033c1c8a88a2e91eb808f7167bb7ce8f7fbcd7e74a148dc505d429f98ba92ff43b5aa726a38f5d8bad0d0d65d6240171f5c35d895a7aaa04ac77a7fdf265e4a19e787e8dcdb70fc873d87eb84dafe65c73dc276ec9a171f45c2b618f810602d0d59f1d3da4d31388a2c3eab55968ca897a7b88c84df8850271ed0e16b1fc6be3a6e4ac94e7a0ccda181b3fb3db6cbcd5d8d1a0d1a9d29b3c378a04d960d7ae32e1e3fe484a00bc39c85fc82480b77277626c415702010e79a393e023494e82957a6b70b1a41ac1d99a555e72840320455ba4086b8b48930e92947", 0xdf) preadv(r0, &(0x7f0000000700)=[{&(0x7f0000000400)=""/23, 0x17}, {&(0x7f0000000440)=""/240, 0xf0}, {&(0x7f0000000540)=""/55, 0x37}, {&(0x7f0000001200)=""/4096, 0x1000}, {&(0x7f0000000580)=""/182, 0xb6}, {&(0x7f0000000640)}, {&(0x7f0000000680)=""/87, 0x57}], 0x7, 0xffffffffffffffff) setrlimit(0x8, &(0x7f0000000980)={0xb, 0x54}) r1 = syz_open_pts() close(r1) syz_open_pts() ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000380)={0xf66b, 0xfffffffd, 0x9, 0x5fffff5f, "9cdc452e307e088e68cd330400", 0x3fd, 0xfffff196}) writev(r1, &(0x7f0000000000)=[{&(0x7f00000009c0)="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", 0x55a}], 0x1) r2 = shmget$private(0x0, 0x3000, 0x386, &(0x7f0000ffa000/0x3000)=nil) syz_emit_ethernet(0x98, &(0x7f0000000180)=ANY=[@ANYBLOB="ffffffffffff94ea09066dbd86dd60db83440008110000000000000000000000000000000000ff"]) select(0x40, &(0x7f0000000240)={0x6, 0xfffffffffffffeff, 0x80000000, 0x6, 0xcd, 0x9}, &(0x7f00000002c0)={0x5, 0xffffffffffff7cf7, 0xffffffffffffff81, 0x7, 0x1ff, 0x9, 0x8001, 0x6}, &(0x7f0000000300)={0x4, 0x1, 0x3, 0x202000, 0x6, 0x2, 0x100000001, 0x8}, &(0x7f0000000340)={0x4, 0xae}) ioctl$FIONREAD(r0, 0x4004667f, &(0x7f0000000380)) shmctl$IPC_STAT(r2, 0x2, 0x0) kevent(r0, &(0x7f0000000080), 0xe4a, 0x0, 0xa9fa, 0x0) sysctl$kern(&(0x7f00000000c0)={0x1, 0x59}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0x37) mkdirat(0xffffffffffffff9c, &(0x7f00000011c0)='./file0\x00', 0x14e) r3 = accept$inet(0xffffffffffffffff, &(0x7f0000000640), &(0x7f0000000780)=0xc) sendmsg(r3, &(0x7f0000000840)={&(0x7f00000007c0)=@in={0x2, 0x3}, 0xc, &(0x7f0000000800), 0x0, &(0x7f0000002200)=ANY=[@ANYBLOB="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"/4112], 0x1010}, 0x408) unveil(&(0x7f0000000280)='./file0\x00', &(0x7f0000000100)='r\x00') execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) sysctl$vm(&(0x7f0000000000)={0x2, 0x4}, 0x2, 0x0, 0x0, 0x0, 0x0) setitimer(0x0, &(0x7f00000003c0)={{0x80, 0x4be}, {0x1145, 0x1e8}}, 0x0) r4 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) socket(0x6, 0x4, 0x2) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x4, 0x0, 0x0, 0x0, 0x0, 0x199, 0x7}, 0x85c, 0x4, 0x0, 0x0, 0x80000000003, 0x2, 0x5, 0x8000004}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x3d}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x74, 0x0, 0x37) ioctl$WSDISPLAYIO_USEFONT(r4, 0x80585750, &(0x7f00000001c0)={'./file0\x00', 0x81, 0x3, 0x8, 0x1, 0x2, 0x8, 0x6, 0x0, 0x2, 0x0, 0xd69}) 1.656201399s ago: executing program 0 (id=215): r0 = msgget$private(0x0, 0xfffffffffffffffd) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f0000000280)={0x10, 0x4, [{&(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x4}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, 0x8}, {&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x4f}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0xaae5}, {&(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x8}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x1ff}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, 0xa7a}, {&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x3}, {&(0x7f0000ff6000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x6}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x4}, {&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, 0x7fffffff}, {&(0x7f0000fed000/0x10000)=nil, &(0x7f0000fee000/0x2000)=nil, 0x80000000}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x3}, {&(0x7f0000fee000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x2}, {&(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff7000/0x1000)=nil, 0x4}, {&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x1}], './file0\x00', 0x2}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) msgrcv(r0, 0x0, 0x0, 0x1, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000240)={{0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x10}, 0x1, 0x7, 0x0, 0x0, 0x8, 0x7, 0xe6, 0x5f}) msgctl$IPC_STAT(r0, 0x2, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000200)={@random="69e1629b6174", @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "001000", 0x10, 0x2c, 0x0, @local={0xfe, 0x80, '\x00', 0x0}, @mcast2, {[@hopopts={0x3c}], @icmpv6=@ndisc_rs}}}}}) 1.446631461s ago: executing program 2 (id=220): sysctl$net_inet_tcp(&(0x7f0000000080)={0x4, 0x2, 0x6, 0xe}, 0x4, 0x0, 0x0, 0x0, 0x12) sysctl$kern(&(0x7f0000000080)={0x1, 0x3d}, 0x4000000000000003, 0x0, 0x0, 0x0, 0x0) 1.195490559s ago: executing program 2 (id=221): sysctl$kern(&(0x7f0000000140)={0x1, 0x54}, 0x6, &(0x7f0000000100)="71f91e3471ac4058bc5a91501d94a34b8e5f84cf71b59c7afec30182", &(0x7f0000000080)=0x1918, 0x0, 0xe748bcfc86640731) setrlimit(0x8, &(0x7f0000000980)) socket(0x18, 0x1, 0x0) (async) syz_emit_ethernet(0x2e, &(0x7f0000000080)={@random="45cccd28d184", @random="0000000000b5", [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x20, 0x68, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x4, @broadcast, {[@timestamp={0x44, 0x4, 0x7, 0x0, 0x3}]}}, @icmp=@generic={0xa, 0x0, 0x0, "0879a5ae"}}}}}) 1.191879431s ago: executing program 2 (id=223): sysctl$net_inet_udp(&(0x7f0000000040)={0x4, 0x24, 0x11, 0x2}, 0x4, 0x0, 0x0, 0x0, 0x0) ioctl$DIOCMAP(0xffffffffffffffff, 0xc0106477, &(0x7f00000000c0)={&(0x7f0000000080)='.\x00'}) ioctl$TIOCSETAF(0xffffffffffffffff, 0x802c7416, &(0x7f0000000000)={0x6, 0x4, 0x9, 0x543, "22f006000000009ba340c3000000000000007600", 0xff, 0xf}) sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b10005040000040000", 0x9, 0x400, 0x0, 0x0) sysctl$vm(&(0x7f0000000040)={0x2, 0x6}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = socket(0x2, 0x4000, 0x4) ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f0000000040)={0xfffffffe, 0xb, 0x3, 0x5, "001e3c36dbddfc0000004800cf00", 0x545, 0x5}) seteuid(0x0) sysctl$kern(&(0x7f0000000040)={0x1, 0x3f}, 0x4, &(0x7f0000000040), 0x0, 0x0, 0xfffffffffffffda3) setsockopt$sock_int(r0, 0xffff, 0x1008, &(0x7f00000001c0)=0x8, 0x4) sendto$unix(r0, &(0x7f0000000100)="b1000504000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a378343712051eea040000000000", 0xb1, 0x0, 0x0, 0x0) 1.19150006s ago: executing program 8 (id=222): ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, &(0x7f00000000c0)={0xa, 0x8000148, {[0x3, 0x0, 0x6, 0x6, 0x0, 0x8000, 0x1, 0x4, 0x7, 0x2, 0x9, 0x91c, 0xb, 0x180, 0x0, 0xd3, 0x76, 0xfffffffffffffff7], [0x5438b950, 0x5, 0x1001, 0x7, 0x1, 0x1, 0x9, 0x7, 0x1, 0x3], [0x6, 0x0, 0x8, 0x8, 0x10000, 0x200, 0x2], [0x100000000, 0x10001, 0x0, 0x20000000ff, 0x3, 0x6], [{0x9, 0x7, 0xfffffffb, 0x6}, {0x5, 0x100925, 0x3, 0x338}, {0x1000, 0x7fffffff, 0x0, 0x5}, {0x8, 0x2, 0x3, 0x895}, {0x4, 0x3, 0x2, 0x9}, {0xeff8, 0x4, 0x4, 0x7}, {0x17, 0xffffff81, 0x1ff, 0x1}, {0x7, 0x10000, 0x6, 0x5}], {0x52b, 0x4, 0xfffffffd, 0x8}, {0xfff7, 0xffffffc0, 0x8}}}) r0 = msgget$private(0x0, 0x7fc) msgsnd(r0, &(0x7f0000001480)=ANY=[@ANYBLOB="03"], 0x145, 0x800) sysctl$net_inet_ah(&(0x7f0000000140)={0x4, 0x2, 0x33, 0x2}, 0x4, 0x0, 0x0, 0x0, 0x0) r1 = socket(0x18, 0x2, 0x0) sysctl$kern(&(0x7f0000000140)={0x1, 0x29}, 0x2, 0x0, 0x0, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18"], 0x20, 0x2}, 0x6) sendmsg$unix(r1, &(0x7f0000000040)={&(0x7f00000000c0)=@abs={0x1, 0x0, 0x2}, 0x8, 0x0, 0x0, &(0x7f0000000140)=ANY=[], 0x18, 0x401}, 0x4) 907.470477ms ago: executing program 2 (id=224): setrlimit(0x8, &(0x7f0000000980)={0x8, 0x54}) (async, rerun: 32) r0 = syz_open_pts() (rerun: 32) close(r0) (async, rerun: 64) r1 = socket$inet(0x2, 0x1, 0x0) (rerun: 64) setsockopt(r1, 0x6, 0x10, &(0x7f0000000080)="6ff80600", 0x4) (async) r2 = syz_open_pts() close(r2) (async) socket(0x18, 0x1, 0x0) ioctl$TIOCSETD(r2, 0x8004741b, &(0x7f0000000040)=0x1e0f84f5) (async, rerun: 32) select(0x40, &(0x7f0000000000)={0xfffffffffffffffd, 0x0, 0xdc4, 0x564, 0x9ce8, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0) (rerun: 32) 906.510598ms ago: executing program 4 (id=225): r0 = getuid() r1 = socket$inet6(0x18, 0x3, 0x1) setsockopt(r1, 0x10, 0x5, &(0x7f0000000000)="cbe5cc8cf47856335fb64aca661b3a1ebe3e8e81f14f1018695910e6655f80931b382176b1c9e0a60d86f38460a138c2c4da19923646b241467ecdf560766ab69547f3bfacdde62540c4fd33a68e67ccbf22c74de02623af3743d5f65dd3ce928a4ded1d18a40a0291c557b250b1691270eee16634d2855cb43999650418c178fc9d4eb59d3b7b665c9d3b9bb7b322510a7e6059a00e24b346fc2a3dffdc5b574fa91317fba5c28157f23bc31995c335b7cbc339ce3142523b31a8fffb9290e1538255ea81b954aa8b26207045", 0xcd) (async) poll(&(0x7f0000000100)=[{r1, 0x100}, {r1, 0x110}, {r1, 0x2}], 0x3, 0x8) (async) r2 = msgget(0x3, 0x3a7) (async) getgroups(0x1, &(0x7f0000000140)=[0xffffffffffffffff]) (async) r4 = getgid() r5 = getpgrp() msgctl$IPC_SET(r2, 0x1, &(0x7f0000000180)={{0x7fff, r0, r3, r0, r4, 0x80, 0xfa}, 0x1, 0x1, 0xffffffffffffffff, r5, 0x6, 0x6, 0xff, 0x5}) (async) r6 = openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r7 = accept$unix(r6, 0x0, &(0x7f0000000240)) sendmsg$unix(r7, &(0x7f0000000840)={&(0x7f0000000280)=@abs={0xd59c2bcf63a0029d, 0x0, 0x0}, 0x8, &(0x7f0000000740)=[{&(0x7f00000002c0)="b0e0d7e4a7fddce31212186d4a1a569c90a1ea80bcc4e2a49e50d414d1eafaece77d5065fb3d73cb3d171fcc2335d311eb34068ef2e1d3962300900a1f4599933dbc4c236473f5589ea6042a458756602ae36a913064fc0a5734c229ba709a7f9494c99ff69e6f20c3622e3c88e579240109f18434c17012467d938ab5e078fab19c0bc23d442a0adaaf12f2043b4d3b6725c17edfbb5261f338f346fdb381fd7850df974187a9bdc81c72ff19150ca96ad346e9b70eb81ffef4976797f690365c442fdf73cd230e867e6e301239823f995698f373a350484125f6058d809f3a378612d3f74d9f24c032ead871e21f2a67b15988d2e8", 0xf6}, {&(0x7f00000003c0)="a28559f0d6dea08bd4da45c525cd31e88e47193ea31ba3f4e387664c73bdffab5ff33e90f951997186ffbe4e4f4e2f91bc69791fd37bbf439acd02cf0ead62aca44bf2527fe90daa51381f506ade70e5d89ecb8585a136cfd8730046b57d74b8f747124ef8cd538b67e247ed88b4a51d6f2f68ec3bc88cbb57ad5f622b553ae3fd", 0x81}, {&(0x7f0000000480)="da20aacc010584141615f36831fe4cde5f6c9f1b21e14ee6228dadbc700fd850efbf665e151752bbfaa8385d5370101c0d1d15abe19323b1904bb43664b3cb8b7faa2c41804156d4e70ab218d361cf6c49a4cf8b3e5ab1ae84004834795e5d0303d3a90d74ce541afd80ade3d54f7e23f0b0ba548f8263000a1d333a7c3d", 0x7e}, {&(0x7f0000000500)="7ee8ac7b03747228e02da834177acf17efcc225855da9eeedfbeab9f4a4d3cc7f2a7d5cd1c0cf75526620561db5b747120f146e6feb9423bef0a69a04ca58cc246a7b82934f3aaab76bdb0bfe2e18b733dc88779aba857395fad0b21301ba7637c5217a6bc1bfd23999086d064912ca5955ef475e79f0bcf2c53f6f2830152e627af090bbca99cd6f7935203c9539552eb0cded390f765e8ac38f3f83b1e9278f3a95b674546c2db7a2b", 0xaa}, {&(0x7f00000005c0)="555fa650e949c8a748b6b805ff6c207d2a80b68cb1a975818ac120b00f1665a13cb105a3ab353205761844fa5130ab5e16b0e543566b970197f6d88edbf8476b6398513e3bcecff3ad0f6c5e73e6d61c4c31a4ee290b3426c3eaaac8e650ad7c56e5d453e9bbf364ba822b47df223f9caf70604d4c115137c8a7c2fc663c19cf5d86bf068bfe6ec190b0489e6888fb6669db13ac577759b9f607", 0x9a}, {&(0x7f0000000680)="3d5478be87abedae5811b207dc1761f85f3618d2b86a13c89c62bf71ce246b483c523b6ebfc20671359f0d088fbb2244ef790ef58b7e3e07e4f43336ee5affbd0f606ba3d4cea66b4ad70e8cb84938a3379ef61bd27e5f965d17f3e0624458921192c4c0a433aec282cf678cfb404f33239bd2e94e2df9db502b0f94d06b5d236e9c8869654943470857d4e3b6175b940c47c52017d1b070ac3bb61a8d2d3862822ff83c751c845e784de6e7ba83864a", 0xb0}], 0x6, &(0x7f00000007c0)=[@cred={0x20, 0xffff, 0x0, r5, r0, r4}, @cred={0x20, 0xffff, 0x0, 0x0, r0, 0xffffffffffffffff}, @cred={0x20, 0xffff, 0x0, r5, r0, 0xffffffffffffffff}], 0x60, 0x4}, 0x0) (async) connect$unix(r7, &(0x7f0000000880)=@abs={0x0, 0x0, 0x0}, 0x8) (async) ioctl$WSDISPLAYIO_GETSCREEN(r6, 0xc0245755, &(0x7f00000008c0)={0x3, './file0\x00', './file0\x00'}) (async) ioctl$TIOCSETD(r6, 0x8004741b, &(0x7f0000000900)=0xf563) recvfrom$unix(r6, &(0x7f0000000940)=""/94, 0x5e, 0x3040, &(0x7f00000009c0)=@abs={0x1, 0x0, 0x0}, 0x8) (async) getgroups(0x5, &(0x7f0000000a00)=[r3, r4, r4, r4, 0x0]) getgroups(0x2, &(0x7f0000000a40)=[r4, r8]) getsockopt$sock_timeval(r6, 0xffff, 0x1006, &(0x7f0000000a80), &(0x7f0000000ac0)=0x10) (async) syz_open_pts() (async) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) ioctl$VT_GETACTIVE(r6, 0x40047607, &(0x7f0000000b00)) r11 = msgget(0x2, 0x80) (async) r12 = semget(0x1, 0x3, 0x60) semctl$IPC_SET(r12, 0x0, 0x1, &(0x7f0000000b40)={{0x9, r0, r9, r0, r3, 0x2, 0xd5a}, 0x81, 0x8, 0x8}) (async) sendmmsg(r1, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000bc0)="488758bae31f5b141f2fb7e427373c3d694a00e25b4dfd1da5230c34b0971303e6dea7d9b557d18ea2bdd61b8ea353c9cf714786a7d19a2766207aeb38eba3d8e449cf7a8e6e850a2eb7efaf6d2e2a92bb6576477a20d2d9c050127db87dcdea70e2846eb97563b9ceb5819572a9f7f843246252b9baf251e14c8ff26dd9d2993ba6371d94605bcc77be207ef1be632a48b02d4b8fe91367d376ddcfaaad5c7e912c758dfe44c4d126ad66aee7b0322f09bbe26fe030549952bc290c57fbbdeae8717e88018fb6ff613d044e0fdb729ae5e95673bd7c4425ce0a99075166dc3be61c06a2238aeba86b333f917dfbe8e1c0798ce5", 0xf4}], 0x1, &(0x7f0000000d00)=[{0x60, 0xffff, 0x101, "d7c7b8952fd84fec58d11e3778107fb48a3d078b2a8cf4bba68a4581a0503d360cdb708b437f5b7c9d968f3d6514eae09b61d9da6c6bbb1ee118849438edf32bf76cb76516a455ddd062d5e022"}], 0x60}, 0x10000}, 0x10, 0x400) (async) ioctl$VMM_IOC_INTR(r6, 0x800c5606, &(0x7f0000000e00)={0x2, 0x1, 0x4}) (async) msgsnd(r11, &(0x7f0000000e40)={0x0, "21b9a9446681365752bf80b96c8ca312442a94879a92fb24bae96b5ba3dd5e8e384bcfc9f790f2fa0219e7194b41fe74a97f82cfbc53298eda02322857857f5ad94c2e25a49a8b3bf5e25a1f8a8f0378a1525fa37dff37f22c1f30b467196af4a7dda1df4ade09d142fd85b0b4a68064fc4cf04da4a6de1624392c42aa"}, 0x85, 0x800) lchown(&(0x7f0000000f00)='./file0\x00', r0, r10) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000f80)={{0x8, 0x0, r3, 0xffffffffffffffff, r10, 0x80, 0x7}, 0x0, 0x1, r5, r5, 0x10000, 0x100, 0x4, 0x5}) 905.849275ms ago: executing program 5 (id=226): r0 = socket(0x10, 0x3, 0x8) setsockopt(r0, 0x1000000000029, 0xa, &(0x7f0000000040)="8300e3ff", 0x4) 879.592928ms ago: executing program 6 (id=227): r0 = shmget$private(0x0, 0x4000, 0x400, &(0x7f0000002000/0x4000)=nil) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000080)={{0x1000400, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x32}, 0x0, 0x8}) shmat(r0, &(0x7f0000001000/0x3000)=nil, 0x2000) r1 = kqueue() kevent(r1, &(0x7f0000000000), 0x203ff, 0x0, 0x8000800, 0x0) shmctl$IPC_RMID(r0, 0x0) (async) shmctl$IPC_RMID(r0, 0x0) r2 = shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x2000) shmdt(r2) (async) shmdt(r2) 876.422464ms ago: executing program 2 (id=228): open$dir(&(0x7f0000000b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x0) r0 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) open$dir(&(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x0) symlinkat(&(0x7f0000000dc0)='./file0\x00', r0, &(0x7f0000000ec0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mkdir(&(0x7f0000000040)='./file2\x00', 0xc1) mkdirat(r0, &(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rmdir(&(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000980)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') utimes(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={{0x3, 0x3}, {0x4, 0x6}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xa7210e10bc3c9def) open$dir(&(0x7f0000000b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x0) (async) open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) (async) open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) (async) open$dir(&(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x0) (async) symlinkat(&(0x7f0000000dc0)='./file0\x00', r0, &(0x7f0000000ec0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) mkdir(&(0x7f0000000040)='./file2\x00', 0xc1) (async) mkdirat(r0, &(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) (async) rename(&(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) rmdir(&(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) rename(&(0x7f0000000980)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) utimes(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={{0x3, 0x3}, {0x4, 0x6}}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xa7210e10bc3c9def) (async) 875.941593ms ago: executing program 4 (id=229): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000040)=@file={0xd19450564dee018c, './file0\x00'}, 0xa) connect$unix(r0, &(0x7f0000000000)=@file={0xd1653077bafa0114, './file0\x00'}, 0xa) close(r0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x2, 0x9011, 0xffffffffffffffff, 0x400000000000000) 875.585324ms ago: executing program 5 (id=230): r0 = open(&(0x7f0000000000)='./file0\x00', 0x9cab835cfdc52675, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0xa011, r0, 0x0) r1 = getpgrp() wait4(r1, 0x0, 0x3, 0x0) ftruncate(r0, 0x79c8) sysctl$kern(&(0x7f00000000c0)={0x1, 0x33}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x3414, 0x0, 0xffffffffffffffb8) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) 543.619081ms ago: executing program 8 (id=222): ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, &(0x7f00000000c0)={0xa, 0x8000148, {[0x3, 0x0, 0x6, 0x6, 0x0, 0x8000, 0x1, 0x4, 0x7, 0x2, 0x9, 0x91c, 0xb, 0x180, 0x0, 0xd3, 0x76, 0xfffffffffffffff7], [0x5438b950, 0x5, 0x1001, 0x7, 0x1, 0x1, 0x9, 0x7, 0x1, 0x3], [0x6, 0x0, 0x8, 0x8, 0x10000, 0x200, 0x2], [0x100000000, 0x10001, 0x0, 0x20000000ff, 0x3, 0x6], [{0x9, 0x7, 0xfffffffb, 0x6}, {0x5, 0x100925, 0x3, 0x338}, {0x1000, 0x7fffffff, 0x0, 0x5}, {0x8, 0x2, 0x3, 0x895}, {0x4, 0x3, 0x2, 0x9}, {0xeff8, 0x4, 0x4, 0x7}, {0x17, 0xffffff81, 0x1ff, 0x1}, {0x7, 0x10000, 0x6, 0x5}], {0x52b, 0x4, 0xfffffffd, 0x8}, {0xfff7, 0xffffffc0, 0x8}}}) r0 = msgget$private(0x0, 0x7fc) msgsnd(r0, &(0x7f0000001480)=ANY=[@ANYBLOB="03"], 0x145, 0x800) sysctl$net_inet_ah(&(0x7f0000000140)={0x4, 0x2, 0x33, 0x2}, 0x4, 0x0, 0x0, 0x0, 0x0) r1 = socket(0x18, 0x2, 0x0) sysctl$kern(&(0x7f0000000140)={0x1, 0x29}, 0x2, 0x0, 0x0, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18"], 0x20, 0x2}, 0x6) sendmsg$unix(r1, &(0x7f0000000040)={&(0x7f00000000c0)=@abs={0x1, 0x0, 0x2}, 0x8, 0x0, 0x0, &(0x7f0000000140)=ANY=[], 0x18, 0x401}, 0x4) 4.735208ms ago: executing program 0 (id=231): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) socket$inet(0x2, 0x4000, 0x9) (async) r0 = getgid() setregid(0xffffffffffffffff, r0) socket(0x18, 0x2, 0x5) 3.497107ms ago: executing program 2 (id=232): r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x10091, 0x0) fcntl$lock(r0, 0x9, &(0x7f00000001c0)={0x3, 0x0, 0x0, 0x300000003}) close(r0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) unveil(0x0, &(0x7f0000000280)='x\x00') r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) mquery(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4, 0x10, r2, 0x1) r3 = getppid() fcntl$lock(0xffffffffffffffff, 0x9, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0x4100000000000000, r3}) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$FIOGETOWN(r1, 0x4004667b, &(0x7f0000000000)) r4 = socket(0x18, 0x1, 0x0) connect$unix(r4, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) r5 = syz_open_pts() ioctl$TIOCSETA(r5, 0x802c7414, &(0x7f0000000340)={0x7, 0x0, 0xfffffffe, 0x5, "ff14e77dbf92a902ebf200", 0x40, 0x3effc}) syz_open_pts() ioctl$TIOCSTAT(r5, 0x20007465, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x10091, 0x0) (async) fcntl$lock(r0, 0x9, &(0x7f00000001c0)={0x3, 0x0, 0x0, 0x300000003}) (async) close(r0) (async) openat$null(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) unveil(0x0, &(0x7f0000000280)='x\x00') (async) openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) (async) mquery(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4, 0x10, r2, 0x1) (async) getppid() (async) fcntl$lock(0xffffffffffffffff, 0x9, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0x4100000000000000, r3}) (async) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x8) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) ioctl$FIOGETOWN(r1, 0x4004667b, &(0x7f0000000000)) (async) socket(0x18, 0x1, 0x0) (async) connect$unix(r4, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) (async) syz_open_pts() (async) ioctl$TIOCSETA(r5, 0x802c7414, &(0x7f0000000340)={0x7, 0x0, 0xfffffffe, 0x5, "ff14e77dbf92a902ebf200", 0x40, 0x3effc}) (async) syz_open_pts() (async) ioctl$TIOCSTAT(r5, 0x20007465, 0x0) (async) 2.838726ms ago: executing program 4 (id=233): r0 = socket$inet(0x2, 0x1, 0x0) r1 = getpid() fcntl$setown(r0, 0x6, r1) ioctl$FIOASYNC(r0, 0x8004667d, &(0x7f0000000180)=0x3) shutdown(r0, 0x2) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x42}, 0xfffffffe, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x8, 0x5}) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x11}, 0x4000000000000007, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$FIOASYNC(r2, 0x8004667d, &(0x7f0000000080)=0x7) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0xffff, 0xffff63df, 0x7, 0x2, 0x8, 0x3, 0x40, 0x10, [{0x5, 0x3, 0x7fff, 0x80000201}, {0x4, 0x8, 0x9, 0xfff}, {0x1, 0xfffffffe, 0x6, 0x1}, {0x2, 0xdf, 0xf, 0x40}, {0x2, 0x7, 0xf11, 0x7}, {0x800, 0xffff, 0x80cf}, {0x4, 0x5, 0x85, 0x5}, {0x0, 0x1, 0xfffffff8, 0xfbffe2e9}, {0x8, 0xffe, 0x6, 0x17fff}, {0x3, 0x0, 0x5, 0x8bfd}, {0x8, 0x8000000, 0x8, 0x7}, {0x4, 0xc7cb, 0x800000, 0xa66}, {0x401, 0x10a, 0x9, 0x40}, {0x200003, 0xee2, 0x2, 0x6f5fc48f}, {0x81, 0x101, 0x3, 0x5}, {0xffffffff, 0x8003, 0x6, 0x69}]}) poll(&(0x7f0000000000), 0x35, 0x0) writev(r3, &(0x7f0000000200)=[{&(0x7f0000000100)="19", 0x3a4e1e905c56cdb7}], 0x1) unveil(0x0, &(0x7f0000000040)='W\x00') 2.449952ms ago: executing program 5 (id=234): syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$TIOCSTSTAMP(0xffffffffffffffff, 0x8008745a, &(0x7f0000000040)={0x20e89, 0xd}) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffff06000000aa"]) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="00001c00ac14"]) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x2, 0x1, 0x0) bind(r0, &(0x7f0000000000), 0x10) listen(r0, 0x0) r1 = socket(0x2, 0x1, 0x0) connect$unix(r1, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0xa) setsockopt$inet_opts(r1, 0x0, 0x1, &(0x7f0000000040)="27913c11b3c9e91fbdf59c32417020e3a81e536e", 0x14) write(r1, &(0x7f0000000080)="d99aca906c", 0xfd23) shutdown(r1, 0x2) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffff06000000aa"]) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="00001c00ac14"]) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r2 = socket(0x2, 0x1, 0x0) bind(r2, &(0x7f0000000000), 0x10) listen(r2, 0x0) r3 = socket(0x2, 0xc001, 0x0) connect$unix(r3, &(0x7f0000000000), 0x10) socket(0x2, 0x1, 0x0) r4 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_timeval(r5, 0xffff, 0x1006, &(0x7f0000000480)={0x6, 0x7fff}, 0x1) shmctl$IPC_SET(r4, 0x1, &(0x7f0000000240)={{0x4, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x7}, 0x5, 0xfffc, 0x0, 0x0, 0x1, 0x0, 0x800000800000000}) shmat(r4, &(0x7f0000001000/0x3000)=nil, 0x0) 573.264µs ago: executing program 6 (id=235): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x1, &(0x7f0000000040)="27913c11b3c9e91fbdf59c32417020e3a81e536e", 0x14) setsockopt$inet_opts(r0, 0x0, 0x0, &(0x7f0000000080)="a8b4", 0x2) 0s ago: executing program 0 (id=236): open(&(0x7f0000000840)='./file2\x00', 0x70e, 0xa0) r0 = socket(0x800000018, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) ktrace(&(0x7f00000003c0)='./file0\x00', 0x0, 0x20, 0x0) mkdir(&(0x7f0000000040)='./file2\x00', 0xd1) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000000)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x11, 0x0, 0x1b}, 0x4000000000000007, 0x0, 0x0, 0x0, 0xfffffffffffffef2) sysctl$hw(&(0x7f0000000180)={0x7, 0xf}, 0x2, &(0x7f0000000040)="00010020", &(0x7f0000000000)=0x4, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file2/file0\x00', 0x8) unveil(&(0x7f00000000c0)='./file2/file0\x00', &(0x7f0000000140)='r\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000080)='./file2/file0\x00', 0x8) kernel console output (not intermixed with test programs): OpenBSD/amd64 (Amnesiac) (tty00) Warning: Permanently added '10.128.0.82' (ED25519) to the list of known hosts. login: panic: pool_do_get: shmpl free list modified: page 0xfffffd805f120000; item addr 0xfffffd805f120380; offset 0x40=0x68913758 Stopped at db_enter+0x25: addq $0x8,%rsp TID PID UID PRFLAGS PFLAGS CPU COMMAND *264495 58912 32767 0x10 0x4000000 1K syz-executor db_enter() at db_enter+0x25 panic(ffffffff83365bee) at panic+0x1e5 pool_do_get(ffffffff8387cca8,1,ffff80003c493998) at pool_do_get+0x5df pool_get(ffffffff8387cca8,1) at pool_get+0x162 shmget_allocate_segment(ffff80003c470d28,ffff80003c493bf0,0,ffff80003c493b40) at shmget_allocate_segment+0x1af sys_shmget(ffff80003c470d28,ffff80003c493bf0,ffff80003c493b40) at sys_shmget+0x195 syscall(ffff80003c493bf0) at syscall+0xb17 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x911b64ce330, count: 7 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{1}> ddb{1}> set $lines = 0 ddb{1}> set $maxwidth = 0 ddb{1}> show panic *cpu1: pool_do_get: shmpl free list modified: page 0xfffffd805f120000; item addr 0xfffffd805f120380; offset 0x40=0x68913758 ddb{1}> trace db_enter() at db_enter+0x25 panic(ffffffff83365bee) at panic+0x1e5 pool_do_get(ffffffff8387cca8,1,ffff80003c493998) at pool_do_get+0x5df pool_get(ffffffff8387cca8,1) at pool_get+0x162 shmget_allocate_segment(ffff80003c470d28,ffff80003c493bf0,0,ffff80003c493b40) at shmget_allocate_segment+0x1af sys_shmget(ffff80003c470d28,ffff80003c493bf0,ffff80003c493b40) at sys_shmget+0x195 syscall(ffff80003c493bf0) at syscall+0xb17 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x911b64ce330, count: -8 ddb{1}> show registers rdi 0 rsi 0x1 rbp 0xffff80003c4937c0 rbx 0xffff8000299eeddf rdx 0xffff80000145e7c0 rcx 0xffff80003c470d28 rax 0xffff8000299edff0 r8 0x101010101010101 r9 0x8080808080808080 r10 0x64d98fed872d827f r11 0x4bb0cf3086f929a1 r12 0xffff8000299eebe0 r13 0 r14 0 r15 0x1 rip 0xffffffff8216f0c5 db_enter+0x25 cs 0x8 rflags 0x246 rsp 0xffff80003c4937b0 ss 0x10 db_enter+0x25: addq $0x8,%rsp ddb{1}> show proc PROC (syz-executor) tid=264495 pid=58912 tcnt=2 stat=onproc flags process=10 proc=4000000 runpri=32, usrpri=76, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff80003c4714f0,0xffffffff838fb458 process=0xffff80003c476c08 user=0xffff80003c48e000, vmspace=0xfffffd806bb0b020 estcpu=36, cpticks=1, pctcpu=0.0, user=0, sys=1, intr=0 ddb{1}> ps PID TID PPID UID S FLAGS WAIT COMMAND 96486 343762 40167 32767 2 0x10 syz-executor 96486 234420 40167 32767 3 0x4000090 fsleep syz-executor 21026 331600 31171 32767 2 0x10 syz-executor 21026 171572 31171 32767 3 0x4000090 fsleep syz-executor 58912 42623 64826 32767 2 0x10 syz-executor *58912 264495 64826 32767 7 0x4000010 syz-executor 13783 105406 88218 32767 2 0x10 syz-executor 13783 151663 88218 32767 3 0x4000090 pipewr syz-executor 81504 254891 97100 0 2 0x2 syz-executor 63082 310822 97555 0 3 0x82 sbwait sshd-session 89343 494196 0 0 3 0x14200 bored sosplice 73288 252018 93566 32767 3 0x90 nanoslp syz-executor 79936 246307 33628 32767 3 0x90 wait syz-executor 31171 83235 80938 32767 3 0x90 nanoslp syz-executor 40167 488468 63344 32767 3 0x90 nanoslp syz-executor 88218 48128 2405 32767 3 0x90 nanoslp syz-executor 64826 189489 33250 32767 3 0x90 nanoslp syz-executor 16935 125997 15652 32767 3 0x90 nanoslp syz-executor 33628 363285 97100 0 3 0x82 wait syz-executor 80938 416054 97100 0 3 0x82 wait syz-executor 33250 220346 97100 0 3 0x82 wait syz-executor 2405 78239 97100 0 3 0x82 wait syz-executor 93566 341379 97100 0 3 0x82 wait syz-executor 15652 460398 97100 0 3 0x82 wait syz-executor 63344 215268 97100 0 3 0x82 wait syz-executor 97100 481289 47606 0 3 0x82 kqread syz-executor 47606 366384 70973 0 3 0x10008a sigsusp ksh 70973 316418 94130 0 3 0x98 kqread sshd-session 94130 328731 97555 0 3 0x92 kqread sshd-session 6476 154707 1 0 3 0x100083 ttyin getty 97555 196210 1 0 3 0x88 kqread sshd 24046 512615 72140 73 3 0x1100090 kqread syslogd 72140 368296 1 0 3 0x100082 sbwait syslogd 35428 424700 1 0 3 0x100080 kqread resolvd 58354 381631 94940 77 3 0x100092 kqread dhcpleased 32346 238224 94940 77 3 0x100092 kqread dhcpleased 94940 490516 1 0 3 0x80 kqread dhcpleased 85454 93578 0 0 3 0x14200 bored smr 18057 284761 0 0 2 0x14200 zerothread 28851 109847 0 0 3 0x14200 aiodoned aiodoned 33085 104547 0 0 3 0x14200 syncer update 70832 40531 0 0 3 0x14200 cleaner cleaner 35024 462225 0 0 3 0x14200 reaper reaper 91140 248576 0 0 3 0x14200 pgdaemon pagedaemon 27260 234686 0 0 3 0x14200 bored viomb 78673 153846 0 0 3 0x40014200 acpi0 acpi0 69633 317899 0 0 3 0x40014200 idle1 42020 116704 0 0 3 0x14200 bored softnet7 70522 37700 0 0 3 0x14200 bored softnet6 85878 184742 0 0 3 0x14200 bored softnet5 29687 471468 0 0 3 0x14200 bored softnet4 89581 346304 0 0 3 0x14200 bored softnet3 40829 452956 0 0 3 0x14200 bored softnet2 20666 254798 0 0 3 0x14200 bored softnet1 12427 169904 0 0 3 0x14200 bored softnet0 34833 437183 0 0 3 0x14200 bored systqmp 29328 154893 0 0 3 0x14200 bored systq 71810 144981 0 0 3 0x14200 tmoslp softclockmp 18546 402868 0 0 3 0x40014200 tmoslp softclock 19168 258575 0 0 3 0x40014200 idle0 1 364563 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb{1}> show all locks CPU 0: exclusive mutex &(curpg)->mdpage.pv_mtx r = 0 (0xfffffd8008f53778) #0 witness_lock+0x5f1 #1 mtx_enter_try+0x1ad #2 mtx_enter+0x62 #3 pmap_remove_ptes+0x29f #4 pmap_do_remove+0x589 #5 uvm_unmap_kill_entry_withlock+0x269 #6 uvm_map_teardown+0x117 #7 exit1+0x6fc #8 sys_exit+0x1a #9 syscall+0xb17 #10 Xsyscall+0x128 exclusive mutex &pmap->pm_mtx r = 0 (0xfffffd800e701310) #0 witness_lock+0x5f1 #1 mtx_enter_try+0x1ad #2 mtx_enter+0x62 #3 pmap_do_remove+0xa9 #4 uvm_unmap_kill_entry_withlock+0x269 #5 uvm_map_teardown+0x117 #6 exit1+0x6fc #7 sys_exit+0x1a #8 syscall+0xb17 #9 Xsyscall+0x128 CPU 1: exclusive mutex shmpl r = 0 (0xffffffff8387ccc0) #0 witness_lock+0x5f1 #1 mtx_enter_try+0x1ad #2 mtx_enter+0x62 #3 pool_get+0x124 #4 shmget_allocate_segment+0x1af #5 sys_shmget+0x195 #6 syscall+0xb17 #7 Xsyscall+0x128 Process 58912 (syz-executor) thread 0xffff80003c470d28 (264495) exclusive kernel_lock &kernel_lock r = 0 (0xffffffff8388d158) #0 witness_lock+0x5f1 #1 syscall+0xaf4 #2 Xsyscall+0x128 exclusive mutex shmpl r = 0 (0xffffffff8387ccc0) #0 witness_lock+0x5f1 #1 mtx_enter_try+0x1ad #2 mtx_enter+0x62 #3 pool_get+0x124 #4 shmget_allocate_segment+0x1af #5 sys_shmget+0x195 #6 syscall+0xb17 #7 Xsyscall+0x128 ddb{1}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 10217 10958K 10968K 166960K 11300 0 pcb 17 12K 12K 166960K 17 0 rtable 189 5K 6K 166960K 268 0 pf 29 16K 16K 166960K 31 0 ifaddr 38 6K 7K 166960K 44 0 ifgroup 46 2K 2K 166960K 50 0 sysctl 3 1K 9K 166960K 8 0 counters 66 36K 36K 166960K 68 0 ioctlops 0 0K 2K 166960K 33 0 iov 0 0K 20K 166960K 21 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1334 84K 84K 166960K 1416 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 4 9K 13K 166960K 14 0 VM map 2 1K 1K 166960K 2 0 sem 12 0K 0K 166960K 13 0 dirhash 12 2K 2K 166960K 24 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 23 85K 121K 166960K 395 0 sigio 1 0K 0K 166960K 12 0 proc 58 99K 147K 166960K 523 0 subproc 66 4K 4K 166960K 120 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 29 0 in_multi 88 6K 7K 166960K 101 0 ether_multi 1 0K 0K 166960K 2 0 mrt 1 0K 0K 166960K 1 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 223 996K 996K 166960K 223 0 exec 0 0K 1K 166960K 369 0 fusefs mount 1 32K 32K 166960K 1 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 251 169K 179K 166960K 5151 0 UVM aobj 21 6K 6K 166960K 23 0 pinsyscall 46 92K 108K 166960K 1402 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 0K 166960K 21 0 NDP 10 0K 2K 166960K 27 0 temp 50 8646K 8710K 166960K 10462 0 kqueue 14 22K 28K 166960K 73 0 SYN cache 2 16K 16K 166960K 2 0 ddb{1}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 26 0 0 1 0 1 1 0 8 0 rtpcb 120 49 0 46 1 0 1 1 0 8 0 rtentry 176 99 0 13 5 0 5 5 0 8 0 unpcb 144 207 0 190 2 0 2 2 0 8 1 syncache 336 8 0 8 1 0 1 1 0 8 1 tcpcb 736 194 0 183 4 0 4 4 0 8 2 arp 128 11 0 1 1 0 1 1 0 8 0 ipq 40 1 0 0 1 0 1 1 0 8 0 ipqe 40 2 0 1 1 0 1 1 0 8 0 inpcb 328 386 0 372 5 0 5 5 0 8 3 ip6q 72 3 0 0 1 0 1 1 0 8 0 ip6af 40 3 0 0 1 0 1 1 0 8 0 nd6 144 19 0 5 1 0 1 1 0 8 0 kcovpl 48 13 0 6 1 0 1 1 0 8 0 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 475 0 80 30 0 30 30 0 8 3 art_table 40 476 0 80 5 0 5 5 0 8 0 art_node 32 99 0 22 1 0 1 1 0 8 0 sysvmsgpl 40 8 0 2 1 0 1 1 0 8 0 semapl 112 11 0 1 1 0 1 1 0 8 0 shmpl 112 20 0 2 1 0 1 1 0 8 0 pool(0xffffffff8387cca8:shmpl): page inconsistency: page 0xfffffd805f120000; 16 on list, 18 missing, 35 items per page dirhash 1024 25 0 8 3 0 3 3 0 8 0 dino2pl 256 1902 0 386 96 0 96 96 0 8 0 ffsino 296 1902 0 386 117 0 117 117 0 8 0 nchpl 144 2423 0 739 63 0 63 63 0 8 0 uvmvnodes 80 2031 0 0 42 0 42 42 0 8 0 vnodes 216 2031 0 0 113 0 113 113 0 8 0 namei 1024 7668 0 7668 2 1 1 2 0 8 1 percpumem 16 49 0 1 1 0 1 1 0 8 0 kstatmem 264 24 0 2 2 0 2 2 0 8 0 scxspl 216 8207 0 8207 3 2 1 2 1 8 1 plimitpl 152 141 0 118 2 0 2 2 0 8 1 sigapl 424 661 0 601 8 0 8 8 0 8 0 knotepl 120 294 0 0 9 0 9 9 0 8 0 kqueuepl 224 87 0 76 2 0 2 2 0 8 1 pipepl 344 199 0 171 3 0 3 3 0 8 0 fdescpl 528 638 0 602 3 0 3 3 0 8 0 filepl 160 3081 0 2866 14 0 14 14 0 8 4 lockfpl 104 77 0 75 1 0 1 1 0 8 0 lockfspl 48 29 0 27 1 0 1 1 0 8 0 sessionpl 144 29 0 13 1 0 1 1 0 8 0 pgrppl 48 45 0 21 1 0 1 1 0 8 0 ucredpl 104 460 0 442 1 0 1 1 0 8 0 zombiepl 144 604 0 601 1 0 1 1 0 8 0 processpl 1248 661 0 601 6 0 6 6 0 8 0 procpl 664 1083 0 1019 7 0 7 7 0 8 0 sockpl 752 647 0 611 8 0 8 8 0 8 3 mcl64k 65536 4 0 0 1 0 1 1 0 8 0 mcl16k 16384 1 0 0 1 0 1 1 0 8 0 mcl8k 8192 2 0 0 1 0 1 1 0 8 0 mcl4k 4096 119 0 0 15 0 15 15 0 8 0 mcl2k2 2112 1 0 0 1 0 1 1 0 8 0 mcl2k 2048 22 0 0 3 0 3 3 0 8 0 mtagpl 96 3 0 0 1 0 1 1 0 8 0 mbufpl 256 257 0 0 17 0 17 17 0 8 0 bufpl 280 3204 0 117 221 0 221 221 0 8 0 anonpl 32 10876 0 0 88 0 88 88 0 246 0 amapchunkpl 152 16688 0 16106 34 1 33 33 0 158 7 amappl16 200 3492 0 3390 24 2 22 22 0 8 8 amappl15 192 6 0 6 1 1 0 1 0 8 0 amappl14 184 106 0 95 1 0 1 1 0 8 0 amappl13 176 30 0 30 1 1 0 1 0 8 0 amappl12 168 1239 0 1203 3 1 2 2 0 8 0 amappl11 160 46 0 35 1 0 1 1 0 8 0 amappl10 152 8 0 8 1 1 0 1 0 8 0 amappl9 144 244 0 244 1 1 0 1 0 8 0 amappl8 136 26 0 24 1 0 1 1 0 8 0 amappl7 128 99 0 87 1 0 1 1 0 8 0 amappl6 120 168 0 164 1 0 1 1 0 8 0 amappl5 112 112 0 105 1 0 1 1 0 8 0 amappl4 104 266 0 250 1 0 1 1 0 8 0 amappl3 96 2815 0 2697 4 0 4 4 0 8 0 amappl2 88 631 0 569 2 0 2 2 0 8 0 amappl1 80 9456 0 8806 16 0 16 16 0 8 0 amappl 88 4471 0 4290 6 0 6 6 0 92 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 22 0 2 1 0 1 1 0 8 0 uaddrrnd 24 638 0 602 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 638 0 602 1 0 1 1 0 8 0 vmmpekpl 168 7074 0 7020 3 0 3 3 0 8 0 vmmpepl 168 48746 0 46524 118 0 118 118 0 357 8 vmsppl 488 637 0 601 6 1 5 6 0 8 0 rwobjpl 80 18677 0 15616 68 0 68 68 0 8 1 pdppl 4096 1284 0 1202 112 28 84 96 0 8 2 pvpl 32 18355 0 0 149 0 149 149 0 265 0 pmappl 256 637 0 601 3 0 3 3 0 8 0 extentpl 40 45 0 27 1 0 1 1 0 8 0 phpool 112 293 0 31 8 0 8 8 0 8 0 ddb{1}> machine ddbcpu 0 Stopped at x86_ipi_db+0x27: addq $0x8,%rsp x86_ipi_db(ffffffff8379bff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __mp_lock(ffffffff8388cf50) at __mp_lock+0x192 exit1(ffff80002a2b7a10,b,0,1) at exit1+0x701 sys_exit(ffff80002a2b7a10,ffff800033c07c50,ffff800033c07ba0) at sys_exit+0x1a syscall(ffff800033c07c50) at syscall+0xb17 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x701f2e9f1e70, count: 7 ddb{0}> trace x86_ipi_db(ffffffff8379bff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __mp_lock(ffffffff8388cf50) at __mp_lock+0x192 exit1(ffff80002a2b7a10,b,0,1) at exit1+0x701 sys_exit(ffff80002a2b7a10,ffff800033c07c50,ffff800033c07ba0) at sys_exit+0x1a syscall(ffff800033c07c50) at syscall+0xb17 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x701f2e9f1e70, count: -8 ddb{0}> machine ddbcpu 1 Stopped at db_enter+0x25: addq $0x8,%rsp db_enter() at db_enter+0x25 panic(ffffffff83365bee) at panic+0x1e5 pool_do_get(ffffffff8387cca8,1,ffff80003c493998) at pool_do_get+0x5df pool_get(ffffffff8387cca8,1) at pool_get+0x162 shmget_allocate_segment(ffff80003c470d28,ffff80003c493bf0,0,ffff80003c493b40) at shmget_allocate_segment+0x1af sys_shmget(ffff80003c470d28,ffff80003c493bf0,ffff80003c493b40) at sys_shmget+0x195 syscall(ffff80003c493bf0) at syscall+0xb17 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x911b64ce330, count: 7 ddb{1}> trace db_enter() at db_enter+0x25 panic(ffffffff83365bee) at panic+0x1e5 pool_do_get(ffffffff8387cca8,1,ffff80003c493998) at pool_do_get+0x5df pool_get(ffffffff8387cca8,1) at pool_get+0x162 shmget_allocate_segment(ffff80003c470d28,ffff80003c493bf0,0,ffff80003c493b40) at shmget_allocate_segment+0x1af sys_shmget(ffff80003c470d28,ffff80003c493bf0,ffff80003c493b40) at sys_shmget+0x195 syscall(ffff80003c493bf0) at syscall+0xb17 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x911b64ce330, count: -8