last executing test programs: 2.838942487s ago: executing program 6 (id=616): recvmmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)={&(0x7f0000000240)=@un=@file={0x0, ""/529}, 0x213, 0x0, 0x0, 0x0}, 0x4000}, 0x60, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1003f8d}, 0x2b, 0x1001, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r0, &(0x7f0000000080)={0x0}, 0x6a, 0x0) pipe(&(0x7f0000000080)) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x62}) r1 = syz_open_pts() close(r1) r2 = syz_open_pts() ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000340)={0x8, 0x5, 0xffffdf82, 0xffffff8c, "08ed95990000000000000000ffffffffffffffe6", 0x4, 0x4}) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) readv(r2, &(0x7f0000000040)=[{&(0x7f0000000000)=""/18, 0x12}], 0x1) connect$unix(0xffffffffffffffff, &(0x7f0000000000)=@file={0xd1653077bafa0114, './file0\x00'}, 0xa) sendmsg$unix(r0, &(0x7f0000003ac0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB=' \x00'/16, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00('], 0x48, 0xf8f45ad47d2d40ee}, 0x404) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) close(r0) r3 = socket(0x2, 0x2, 0x0) connect$unix(r3, &(0x7f0000000000), 0x10) unveil(0x0, &(0x7f00000000c0)='r\x00') 2.155012937s ago: executing program 6 (id=639): r0 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000340), 0x200, 0x0) (async) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x8, 0x2000000000000004}, 0x0, 0x0, 0x0) (async) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)="76e5eac907f9ccf7a251ceddcec7d6aa45cffe2c63a56077123a276d3ba4e9d17eb3eb5db12a3783a8e0620d357de1fe04fa9465b5bd1286e9624dec06a00c222f", 0x25}], 0x1) (async) rename(&(0x7f0000000100)='./file0\x00', 0x0) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) (async) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='.\x00') (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (async) r1 = open(&(0x7f0000000c00)='./file0\x00', 0x0, 0x0) unveil(&(0x7f0000000280)='.\x00', &(0x7f00000002c0)='r\x00') (async) fchdir(r1) chdir(0x0) (async) unveil(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000300)='x\x00') unveil(&(0x7f0000000280)='.\x00', &(0x7f00000002c0)='r\x00') (async) poll(0x0, 0x0, 0x20000100) (async) close(r0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) dup2(r3, r2) 1.714453763s ago: executing program 3 (id=663): mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x412dff) getsockname$unix(0xffffffffffffffff, 0x0, 0x0) mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) r0 = syz_open_pts() ioctl$TIOCSETD(r0, 0x40047463, 0x0) r1 = openat$diskmap(0xffffffffffffff9c, 0x0, 0x1, 0x0) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000300)=[&(0x7f0000000040)=')@$+.-!\x00', &(0x7f0000000140)='/dev/diskmap\x00', &(0x7f00000001c0)='/dev/diskm!p\x00', &(0x7f0000000200)='\x00', &(0x7f0000000240)='\x00', &(0x7f00000002c0)='/dev/diskmap\x00'], &(0x7f0000000400)=[&(0x7f0000000340)='/dev/diskmap\x00', &(0x7f0000000380)='/dev/diskmap\x00', &(0x7f0000000180)='\x00']) ioctl$FIONREAD(r0, 0x4004667f, &(0x7f00000004c0)) ioctl$DIOCMAP(r1, 0xc0106477, &(0x7f0000000080)={&(0x7f00000000c0)='./file0\x00', r0, 0x1}) close(r1) mknod(0x0, 0x2000, 0xd02) select(0x40, &(0x7f0000000040)={0x8, 0x5, 0x8, 0xf, 0x3, 0x1000000000090, 0x45d, 0x7}, 0x0, 0x0, 0x0) ioctl$WSMUXIO_REMOVE_DEVICE(0xffffffffffffffff, 0x80085762, &(0x7f0000000040)={0x1}) r2 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$VMM_IOC_READREGS(r2, 0xc2485607, &(0x7f0000000040)) r3 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000240), 0x80, 0x0) ioctl$VNDIOCSET(r3, 0xc0384600, &(0x7f0000000440)={&(0x7f0000000280)='./bus\x00', 0xb, 0x0, 0x36}) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x412dff) (async) getsockname$unix(0xffffffffffffffff, 0x0, 0x0) (async) mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) (async) syz_open_pts() (async) ioctl$TIOCSETD(r0, 0x40047463, 0x0) (async) openat$diskmap(0xffffffffffffff9c, 0x0, 0x1, 0x0) (async) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000300)=[&(0x7f0000000040)=')@$+.-!\x00', &(0x7f0000000140)='/dev/diskmap\x00', &(0x7f00000001c0)='/dev/diskm!p\x00', &(0x7f0000000200)='\x00', &(0x7f0000000240)='\x00', &(0x7f00000002c0)='/dev/diskmap\x00'], &(0x7f0000000400)=[&(0x7f0000000340)='/dev/diskmap\x00', &(0x7f0000000380)='/dev/diskmap\x00', &(0x7f0000000180)='\x00']) (async) ioctl$FIONREAD(r0, 0x4004667f, &(0x7f00000004c0)) (async) ioctl$DIOCMAP(r1, 0xc0106477, &(0x7f0000000080)={&(0x7f00000000c0)='./file0\x00', r0, 0x1}) (async) close(r1) (async) mknod(0x0, 0x2000, 0xd02) (async) select(0x40, &(0x7f0000000040)={0x8, 0x5, 0x8, 0xf, 0x3, 0x1000000000090, 0x45d, 0x7}, 0x0, 0x0, 0x0) (async) ioctl$WSMUXIO_REMOVE_DEVICE(0xffffffffffffffff, 0x80085762, &(0x7f0000000040)={0x1}) (async) openat$vmm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) (async) ioctl$VMM_IOC_READREGS(r2, 0xc2485607, &(0x7f0000000040)) (async) openat$vnd(0xffffffffffffff9c, &(0x7f0000000240), 0x80, 0x0) (async) ioctl$VNDIOCSET(r3, 0xc0384600, &(0x7f0000000440)={&(0x7f0000000280)='./bus\x00', 0xb, 0x0, 0x36}) (async) 1.713093311s ago: executing program 3 (id=665): mknod(&(0x7f0000000200)='./file0\x00', 0x2000, 0x4287e) r0 = openat$pf(0xffffffffffffff9c, 0x0, 0x8000, 0x0) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x5d4a) setsockopt(r0, 0xffffffff, 0x5, &(0x7f0000000000)="159d9e0969a2a2e1e9458a39168a44b7b2c680342882ca1bae5397cefd84aec1f4dd09f62df44f9f42b2ef043da6e9a6a094e4fa7150f372721a42bb4af2868630a2f1299fa1caa18526e20e2159a586dc55dead6bb88731bb5d9e04f45fafc6cd410dfa6b7694695bda6a5e1fdc799ee05ae626d743f67023b7c867ffd1994ccb46095f6d29cf4f9d1faa866cd958702fcea5c04f5a40c5", 0x98) r1 = open(&(0x7f0000000100)='./file0\x00', 0x70e, 0x0) ioctl$FIONREAD(r1, 0xc0206921, &(0x7f00000001c0)) write(0xffffffffffffffff, 0x0, 0x0) 1.242584465s ago: executing program 6 (id=682): msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xd4, 0x19}, 0x1, 0x2, 0xffffffffffffffff, 0x0, 0xfffffffffffffff8, 0x9, 0x40000000000, 0xffe}) r0 = socket(0x18, 0x2, 0x0) close(r0) r1 = socket(0x800000018, 0x1, 0x0) bind$unix(r1, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000280), 0x20480, 0x0) ioctl$BIOCSBLEN(r2, 0xc0044266, &(0x7f00000002c0)=0xfffffff7) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x80) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000100)="cc", 0x1}], 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r3, 0x0) connect$unix(r3, &(0x7f0000000340)=@file={0x1, './file0\x00'}, 0xa) sysctl$hw(&(0x7f0000000000)={0x6, 0x19}, 0x2, &(0x7f0000000100)="b8da2b6c59770416510f381bee3e8a20635ebbbdab56c16552ea4ddeebf122d1b619edf372775749f0ca9e73792f31656b37b006764ab4fe2fd5b93dc34dd7cb071314f4e08d323ab377b3280680adb3ee75f93c9a8b46d0f1b8a4245912cb3c6c78acf126e693129f43c5dc57f39ba92b88e3c2e0314084f8df14851a4ae3c8613089b66c9176b8ba2f3ce610ea3f54c802dfa917ef03", &(0x7f0000000040)=0x97, &(0x7f00000001c0)="3740ce47f999eeb162bb5e3f03852f76fdc0989d95b9f5e23893ad495864d8a91563acb22fee4188b37019371eeee0e267d8e4149d60be2a92b6564c081744306b19", 0x42) r4 = socket(0x800000018, 0x1, 0x0) r5 = openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) ioctl$TIOCSETA(r5, 0xc0104419, &(0x7f0000000000)={0x2, 0xffffffff, 0x9, 0x2000, "01d00180000000020000000000003c00", 0xfffffff8, 0x6}) ioctl$TIOCGFLAGS(r5, 0x4004745d, &(0x7f0000000240)) bind$unix(r4, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) 1.094495307s ago: executing program 6 (id=687): r0 = getegid() setgid(r0) (async) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) r1 = socket(0x18, 0x3, 0x0) r2 = socket(0x1, 0x2, 0x0) (async) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r3, 0x0, 0x24, 0x0, 0x0) sendmsg(r3, 0x0, 0x4) (async) ioctl$FIONREAD(r2, 0xc0106924, &(0x7f00000001c0)) setitimer(0x0, &(0x7f0000000140)={{0x7eb, 0x5}, {0xffffffffffffefff, 0xffff}}, 0x0) (async) ioctl$FIONREAD(r1, 0x8080691a, &(0x7f0000000100)) (async) r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000340), 0x40, 0x0) ioctl$BIOCSETIF(r4, 0x8020426c, &(0x7f0000000240)={'tap', 0x0}) (async) ioctl$BIOCSETF(r4, 0x80104267, &(0x7f00000000c0)={0x3, &(0x7f0000000080)=[{0x61, 0x80, 0x37, 0x1}, {0x3c, 0xf8, 0xf9, 0x9}, {0x6, 0x4, 0x4, 0x20000008}]}) (async) syz_emit_ethernet(0x1000e, &(0x7f00000001c0)=ANY=[]) (async) mknod(&(0x7f00000000c0)='./file0\x00', 0x1ffa, 0x0) (async) getgroups(0x1, &(0x7f0000000000)=[0xffffffffffffffff]) getgroups(0x2, &(0x7f0000000040)=[0x0, 0x0]) getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0xc) (async) getgroups(0x1, &(0x7f0000000140)=[0xffffffffffffffff]) setgroups(0x6, &(0x7f0000000180)=[r5, r6, r7, r8, 0xffffffffffffffff, 0x0]) 1.090721765s ago: executing program 3 (id=690): r0 = socket(0x10, 0x0, 0x0) r1 = socket(0x2, 0x400000000002, 0x0) setsockopt(r1, 0x0, 0x1f, &(0x7f0000000080)="c5f5d915", 0x4) dup2(r1, r0) select(0x40, &(0x7f0000000000)={0xfffffffffffffffd, 0x0, 0x0, 0x564, 0x9ce8, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) bind(r0, &(0x7f0000000000), 0x10) r2 = socket(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0xffff, 0x20, &(0x7f0000000080)=0x6, 0x4) connect$unix(r2, &(0x7f0000000000), 0x10) write(r2, 0x0, 0x0) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0xfdd1, 0x0}, 0x1002) 1.023248018s ago: executing program 1 (id=696): syz_emit_ethernet(0x2a, &(0x7f0000000240)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x8000, 0x0, 0x1, 0x0, @empty=0x2000000, @empty=0x23}, @icmp=@mask_reply={0x12, 0x0, 0x0, 0xfffffff9}}}}}) (async) ioctl$TIOCSETAW(0xffffffffffffffff, 0x802c7415, &(0x7f0000000080)={0xffffffff, 0xb, 0xffd7fdff, 0xfffffffd, "09032e4faceb089b351c0a164dc016b0763047c9", 0x26, 0xfffffffe}) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) 1.022101336s ago: executing program 6 (id=697): ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000300)={0x400007ff, 0x801c, 0x2000007, 0x0, 0x80000001, 0xba4c, 0xe, 0x10, [{0xffffffd8, 0x4, 0x4001, 0x6}, {0x804, 0x1, 0xa, 0xffbffffa}, {0x104, 0xf89, 0x100000, 0x9}, {0x801, 0x0, 0x9}, {0x401, 0x200727, 0x400, 0x3}, {0xfffffffa, 0x650, 0x1, 0x99}, {0x2cf1, 0x0, 0x80, 0x6d}, {0x6, 0x80000000, 0xf, 0x5}, {0x2, 0x7d, 0x5, 0x400000ed}, {0xffff, 0x8001, 0xd14, 0x480000}, {0x2, 0x64e, 0x4, 0x7f}, {0x0, 0xffff, 0x63e, 0xa}, {0xb8c, 0xc, 0x8, 0x7}, {0x40000, 0xfffffffa, 0x3ff}, {0xc, 0x5, 0x204, 0xf85b}, {0x2000001, 0xfffffff8, 0x3, 0x31004}]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x0) getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000100)={0x0}, 0xc) fcntl$setown(r0, 0x6, r1) setrlimit(0x8, &(0x7f0000000580)={0xa, 0x56}) r2 = syz_open_pts() close(r2) r3 = syz_open_pts() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r4, &(0x7f0000000880)={&(0x7f0000000000)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000700)=""/265, 0x153}], 0x0, 0x0, 0xfffffffffffffd8d}, 0x6}, 0x10, 0x0, 0x0) poll(&(0x7f0000000000)=[{r4, 0x4}, {r3, 0x1}, {r3, 0x2}], 0x3, 0x0) ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f0000000140)={0x820e, 0x6, 0xffffdf82, 0xffffff90, "08955c1cfac164e261150e00000009ffe600", 0x4000000, 0x1a7}) writev(r2, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) 1.019271104s ago: executing program 1 (id=699): r0 = open(&(0x7f0000000040)='./file0\x00', 0x200, 0x54) acct(&(0x7f0000000080)='./file0\x00') fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0xff}) openat$vmm(0xffffffffffffff9c, &(0x7f0000000240), 0x10000, 0x0) sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0x37) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) ioctl$VMM_IOC_CREATE(r0, 0xc2585601, &(0x7f00000002c0)={0x10, 0xc7, [{&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000672000/0x4000)=nil, 0x3}, {&(0x7f00007d1000/0x3000)=nil, &(0x7f0000139000/0x4000)=nil, 0x6}, {&(0x7f000018a000/0x3000)=nil, &(0x7f0000012000/0x2000)=nil, 0x10001}, {&(0x7f00000dc000/0x2000)=nil, &(0x7f0000000000/0xc00000)=nil, 0xc9}, {&(0x7f0000712000/0x2000)=nil, &(0x7f0000ae9000/0x4000)=nil, 0x5}, {&(0x7f000012d000/0x1000)=nil, &(0x7f00005b8000/0x3000)=nil, 0x4}, {&(0x7f000079f000/0x2000)=nil, &(0x7f00000a2000/0x2000)=nil}, {&(0x7f000090d000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x3}, {&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000062000/0x2000)=nil, 0x2}, {&(0x7f0000435000/0x3000)=nil, &(0x7f000098c000/0x3000)=nil, 0x6}, {&(0x7f0000147000/0x4000)=nil, &(0x7f0000173000/0x3000)=nil, 0x1}, {&(0x7f0000ffe000/0x1000)=nil, &(0x7f000008c000/0x2000)=nil}, {&(0x7f0000ffd000/0x3000)=nil, &(0x7f00000cb000/0x1000)=nil, 0x10}, {&(0x7f0000ac8000/0x1000)=nil, &(0x7f0000aa1000/0x1000)=nil, 0xd}, {&(0x7f00008be000/0x4000)=nil, &(0x7f000046b000/0x2000)=nil, 0x1f9}, {&(0x7f00000c2000/0x3000)=nil, &(0x7f0000837000/0x3000)=nil, 0x4}], './file0\x00', 0x80000000}) r1 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x29) ioctl$WSMOUSEIO_SCALIBCOORDS(r1, 0x81205724, &(0x7f0000000100)={0x7ff, 0x8018, 0x2000007, 0x101, 0x80000001, 0x81b0, 0x10001, 0x10, [{0x0, 0x2890, 0xdb2, 0x71002}, {0x6, 0x9, 0x8, 0xfffffff9}, {0x104, 0xf88, 0x0, 0x9}, {0x4, 0x800, 0x8007, 0x7}, {0x401, 0x3, 0x1002800, 0x7}, {0x5, 0x650, 0x3, 0x99}, {0xce1, 0xffffffff, 0x4f8, 0x6d}, {0x6, 0x4, 0x14, 0x8}, {0x2, 0x82, 0x5, 0x5}, {0x3, 0x8001, 0x1000, 0x4}, {0x1cc, 0x10001, 0xc, 0x3}, {0x8, 0x9, 0x8, 0xffffff81}, {0xb94, 0x7, 0x4, 0x1}, {0x29a71717, 0xfffffffa, 0x1, 0x6}, {0x1000c, 0x5, 0x5, 0x10000000}, {0x0, 0x1, 0xfff, 0x30004}]}) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000080)="76e5eac907f9ccf7a251ceddcec7d6aa45cffe2c63a56077123a276d3ba4e9d17eb3eb5db12a3783a8e0620d357de1fe04fa9465b5bd1286e9624dec06a00c222f", 0x41}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) getdents(r2, &(0x7f0000000e80)=""/4091, 0xffaa) getdents(r2, &(0x7f0000001e80)=""/4096, 0x1000) mknod$loop(&(0x7f00000004c0)='./file0\x00', 0x80, 0x0) unveil(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='W\x00') mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r1, 0x80184404, &(0x7f00000001c0)={0x0, 0x8, 0x0}) ioctl$VNDIOCSET(r1, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) mquery(&(0x7f00000ab000/0x2000)=nil, 0x2000, 0x2, 0x0, r1, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x0, &(0x7f00000000c0)=[{0x0, 0x3, 0x0, 0x4}, {0x7, 0x5, 0x43, 0x20000}, {0x103, 0x0, 0x0, 0x10001}]}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0x37) 948.275932ms ago: executing program 1 (id=700): r0 = open(&(0x7f0000000040)='./file0\x00', 0x2, 0x1f6) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x2, 0x0) rename(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='./file0\x00') writev(r1, &(0x7f0000000340)=[{&(0x7f0000000000), 0x2cfea}], 0x1000000000000013) mknod(0x0, 0x2000, 0x205b9a) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x2, 0x0) r3 = open(&(0x7f0000000200)='./file0\x00', 0x1, 0x0) ioctl$FIONREAD(r3, 0x80206979, &(0x7f0000000100)) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x6, 0x2d, 0x0, 0x9}, {0x5c, 0x7b, 0x0, 0x7}, {0x6, 0x90, 0x8, 0x5}]}) r4 = socket(0x800000018, 0x3, 0x0) setsockopt$sock_int(r4, 0xffff, 0x1000, &(0x7f0000000280)=0x8cf04, 0x4) bind$unix(r4, 0x0, 0x0) sysctl$hw(0x0, 0x0, &(0x7f00000000c0)="000000685761799b1ae640c75f82d979d821c9ac9d6338b68da12d20bdf4f1bed5b722fa5f74ce32", &(0x7f0000000000)=0x28, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$FIONBIO(0xffffffffffffffff, 0x8004667e, 0x0) ioctl$BIOCSETWF(r2, 0x80104277, &(0x7f0000000040)={0x0, 0x0}) write(r2, &(0x7f0000000240)="d814cfe4a4ecb304ee01004b3700", 0xe) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x10, r0, 0x0) read(r1, &(0x7f00000000c0)=""/254, 0xfe) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) connect$unix(r0, &(0x7f00000002c0)=@file={0x1, './file0\x00'}, 0xa) r5 = kqueue() kevent(r5, &(0x7f0000000300)=[{{}, 0xfffffffffffffff9, 0x189, 0x10, 0x3, 0xb2}, {{}, 0xfffffffffffffff9, 0x5c, 0x10, 0x2, 0x5}], 0x4, 0x0, 0x4, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r6 = openat$tty(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, r6, 0x0) 857.46504ms ago: executing program 7 (id=705): setuid(0xffffffffffffffff) r0 = socket$unix(0x1, 0x5, 0x0) ioctl$FIONREAD(r0, 0x8028698c, &(0x7f0000000100)) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f0000000080)=@abs={0x0, 0x0, 0x3}, 0xfffffcea) listen(r1, 0x0) accept(r1, 0x0, 0x0) close(r1) open(&(0x7f0000000240)='.\x00', 0xa40, 0x1a) r2 = socket$unix(0x1, 0x5, 0x0) connect$unix(r2, &(0x7f0000000040)=@file={0xd1653077bafa0114, './file0\x00'}, 0xa) sysctl$kern(&(0x7f0000000340)={0x1, 0x46}, 0x2, 0x0, 0x0, &(0x7f0000001440), 0x0) 852.23217ms ago: executing program 3 (id=706): sysctl$kern(&(0x7f0000000000)={0x1, 0x32}, 0x2, 0x0, &(0x7f00000000c0), 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0x5012, 0xffffffffffffffff, 0x7) r0 = socket$inet(0x2, 0x3, 0x102) close(r0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r1 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) shmat(r1, &(0x7f0000001000/0x3000)=nil, 0x0) sysctl$kern(&(0x7f0000000040)={0x1, 0x36}, 0x2, &(0x7f0000001940), 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) lseek(r0, 0x80000000000, 0x1) sysctl$vfs_nfs(&(0x7f00000000c0)={0xa, 0x2, 0x1}, 0x3, &(0x7f0000000280)="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", 0x0, 0x0, 0x0) sysctl$hw(&(0x7f0000000040)={0x6, 0xc}, 0x2, 0x0, 0x0, &(0x7f0000000280), 0x5f) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$kern(&(0x7f0000000000)={0x1, 0x4d}, 0x2, &(0x7f0000000180)="5f2a1ff1", &(0x7f00000000c0)=0x4, &(0x7f0000000040)="e216119c00113817140fe08189a4cbe548ab023ab9cbbd1ebdf0427c60e2e7ae25f9c1192bda63f6df8cfddeaa004aa09350123cd3c3aed7bae662f6161f3f9516577396e8c0d795e9eb85a8936b92068437a051427291b776a4c875e8124f6f839a27bf4072e096de0ba00db233205ea3caf7f97c6308e999", 0x79) 850.869173ms ago: executing program 7 (id=707): syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) (async) syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) setrlimit(0x5, &(0x7f0000000040)={0x8, 0x7}) writev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000000)="c886b4d3e0", 0x5}], 0x1) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) (async) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket(0x2, 0x2, 0x0) close(r0) sysctl$kern(0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)="5a67923ef0cb189971421989ebcff78831a7581e2f27caa362f1363042efb27688b2c899220fb2fe37e467d974592496856ca7b78060998608c2f952e43bc0bf11555cc5cb0fe97b2ec1be389871829bfe10dd1dc09dc4fa89a217458bdaed31003fdc3a7323189ba3ccbad6c8af17516e4557f61ad238a7317e73650b8b125f568ca7d3396b9057255f381855110eb3a673713716cdf010ddfa7977f92cf061ad125ca607353b45d53aae196b68ec00271f9d3452b523b3dea22d602762561431", 0xc1) (async) sysctl$kern(0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)="5a67923ef0cb189971421989ebcff78831a7581e2f27caa362f1363042efb27688b2c899220fb2fe37e467d974592496856ca7b78060998608c2f952e43bc0bf11555cc5cb0fe97b2ec1be389871829bfe10dd1dc09dc4fa89a217458bdaed31003fdc3a7323189ba3ccbad6c8af17516e4557f61ad238a7317e73650b8b125f568ca7d3396b9057255f381855110eb3a673713716cdf010ddfa7977f92cf061ad125ca607353b45d53aae196b68ec00271f9d3452b523b3dea22d602762561431", 0xc1) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x82, 0x0) ioctl$TIOCSETA(r1, 0xc4504442, &(0x7f0000000000)={0x32, 0xffffffff, 0x0, 0x4000, "97a2224ff1c14a06ebb178926cc9795a6b47c1d1", 0x1, 0xfffffffe}) (async) ioctl$TIOCSETA(r1, 0xc4504442, &(0x7f0000000000)={0x32, 0xffffffff, 0x0, 0x4000, "97a2224ff1c14a06ebb178926cc9795a6b47c1d1", 0x1, 0xfffffffe}) munmap(&(0x7f0000587000/0x3000)=nil, 0x3000) r2 = socket(0x2, 0x3, 0xfe) setsockopt$sock_int(r2, 0xffff, 0x1000, &(0x7f0000000000)=0x4, 0x4) bind(r2, &(0x7f0000000000), 0x10) connect$unix(r0, &(0x7f0000000000), 0x10) (async) connect$unix(r0, &(0x7f0000000000), 0x10) writev(r0, &(0x7f0000000100)=[{0x0}], 0x1) 611.553838ms ago: executing program 0 (id=708): mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1, 0x4c) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x6, 0x9e, 0x2000007, 0x100, 0x80000001, 0x80000001, 0x82, 0x10, [{0x10000000, 0x0, 0x3, 0x71000}, {0x101, 0x8, 0x9}, {0x7, 0x8000b86, 0xffffff7c, 0x9}, {0x73f0, 0x6, 0x4, 0x2}, {0x401, 0x4, 0x2800, 0x7}, {0x2, 0x6, 0x3, 0x99}, {0xcdf, 0xdf61, 0x200004f8, 0x10}, {0x6, 0x9, 0x16, 0xb}, {0xffffffff, 0x84, 0x4, 0x3}, {0x4, 0x7, 0x93, 0x1ff}, {0x1df, 0xfffb, 0x7ff, 0x7}, {0x9, 0x29, 0x9, 0x5}, {0xb8c, 0x401, 0x80000003, 0x80405}, {0x29a71717, 0xfffffffa, 0x0, 0x6}, {0xc, 0xf8f, 0x6}, {0xfffffff8, 0x800bc3d, 0x4, 0x1}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffe, 0x0, 0x4c}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000080)="76e5eac907f9ccf7a251ceddcec7d6aa45cffe2c63a56077123a276d3ba4e9d17eb3eb5db12a3783a8e0620d357de1fe04fa9465b5bd1286e9624dec06a00c222f", 0x41}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setgid(0xffffffffffffffff) setgroups(0x0, 0x0) setuid(0xffffffffffffffff) unveil(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000300)='W\x00') r1 = socket$inet(0x2, 0x3, 0xb) setsockopt$inet_opts(r1, 0x0, 0x200000000000c, &(0x7f0000000240)="ea00000100000000", 0x8) r2 = socket$inet(0x2, 0x2, 0x7) setsockopt$inet_opts(r2, 0x0, 0x200000000000c, &(0x7f0000000000)="ea00000100000000", 0x8) 608.676157ms ago: executing program 7 (id=710): syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@local, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x2000, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0x0}, @broadcast}, @udp={{0x1, 0x2, 0x8}}}}}}) syz_emit_ethernet(0x1000e, &(0x7f0000000080)={@random="b905f0ffffff", @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0xffffffffffffff08, 0x0, 0x1, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0x0}, @broadcast}, @icmp=@info_request={0xf, 0x0, 0x0, 0x205c, 0x3}}}}}) select(0x40, &(0x7f0000000000)={0x2, 0x2, 0x98e098e, 0x71, 0x2, 0x0, 0x4, 0x7}, &(0x7f0000000040)={0x8001, 0x80, 0x5, 0x10000, 0x4, 0x9, 0x0, 0x4}, &(0x7f0000000100)={0xa, 0x5, 0x7f, 0x6, 0x2, 0x1, 0x1, 0xfffffffffffffff7}, &(0x7f0000000140)={0xffffffffffffffff, 0x1255}) 605.269462ms ago: executing program 7 (id=711): r0 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6381) sysctl$net_inet_tcp(&(0x7f0000000040)={0x4, 0x2, 0x6, 0x6}, 0x4, 0x0, 0x0, 0xfffffffffffffffe, 0x39) r1 = open(&(0x7f0000000140)='./file0\x00', 0x40, 0x1a) r2 = kqueue() kevent(r1, &(0x7f0000000180)=[{{}, 0xfffffffffffffff6, 0x3, 0xf27ff7794bbc9c2d, 0xfd, 0x10000}, {{r2}, 0xfffffffffffffffd, 0x20, 0x1, 0x3, 0x7}, {{r1}, 0xfffffffffffffffb, 0x18, 0x80000000, 0x5, 0xfff}], 0x1, 0x0, 0x9b68, 0x0) kevent(r2, &(0x7f0000000240)=[{{}, 0xfffffffffffffff6, 0x28, 0xf27ff7791bbc9c0f, 0xfd, 0x13fff}], 0x1, 0x0, 0xfffffff8, 0x0) kevent(r2, &(0x7f0000000040), 0xe4a, 0x0, 0xa9fa, 0x0) r3 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000340), 0x210, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x4011, r3, 0x9) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5, 0x10, r1, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000240)="9082c784b04ad92e7fc4bbcc192af4250f6a63340bd4489f1558a1c21c8ba7cf06be6cfa68cf4f2465889cb9d4702cb1f92b5dffb8c7cdd529715865a820ca1170b388838d683a17e2d45fb92b9d83d63ac1765d845cd64aa4b13ffd536f66a7c893892b61c22de70ca4d0725b754e62d3b28330445906d2676a59c23acd05b0c3672f3a682b4f7d54813ef1cdcd15efd13312db515296191fbd20de9a878cde57bf2e25c5c0f00071e723ed", 0xac}, {&(0x7f00000003c0)="f433f4c77e74b275d0f255249c2fee812bf73493981f13f7396c92dc3746ac528bdacdb22ac055bfb123d046a999b3001bf59df38ef31d01a71d260cebf0a5eab0e2c9a3fa85f0f18a8bfabc357c1645c2ec2858d5eca85e740debfd69b6b55f0b5ee776c8fd1813f00cec4f1c8cf4dcab8538bf5c4b9650d68ef441310e67a7c3ffd7375184b195bfde50fdd68b4be62aa5cb35c520bd293b2e1ee62e850982049dfa9fa09d3fa9ef48fedc2d3b530cf049b0146ff3fdcda33f9f1acab7c88c32a53ca9619b5509bbf1cb3a613ccdc114edfc15672ef827957387be1dd58a81f0f3605bbac010eda61f082131b5b437d84cadcd4397", 0xf6}, {&(0x7f00000004c0)="1896b37f8c515f5515fc308ee6be6b89eff3152ffd5a954cb45d60de61f9c75095744fa223c9f18fcbc595f4cb60ed4035af9119faf6ebd44da3569b8d0e5c3df1aa81623f208583adb1547021e0d4f7d9a12a6ac69c547ad913dc3a8762fc73b8de713769b48b9281133accb29adcbcdf1e70437ce995f1c7bfd6efcb00b1fd5ab170a32ec514c5b8524fbfb66bdcccb78b5abe62d6f3ed2becc6620b32b96cdee929447b106109c0b628e7acbcbc4459", 0xb1}, {&(0x7f0000000580)="dccdb51387647e50ea766e28b403cbf55730791b5bade420433b9de2fce16136565e9793f012371231eb796f438e850fd1687eba404bfcce2efcce5106cbec663d9f9cf1a37be4e822fa27cf7b7ec24dce388b7299c30a51a06d5df062579307eff2f927e89f27915014a5772ec06670a54cbc68fe378da53768cc2fbbef3789702979b5f7fb00fd1f1add42c274a05fe60fe5bd07607fa7ed23287bfa12891be9cbffdc42dbd61a3012e046dffc8e546cbc90876ea1", 0xb6}, {&(0x7f0000000640)="fd33eec8dc7ba126eadf82c714ac59dfaad4494fbc56b7f0cf756fbf7aea96448ab2d5cea05b09572ee00962abe143dcb812faf2c3764a634d87d5b7cfe64c53fdbd44669b1fa65ac0d24e32188c158f0b30ca305757206c3cd914fafe2d7c69fe677a15042057ea34dbff531a0930b793112bd63e126f9efd21976a2764bcc3c7aa57bf4065105ab893248676101c8b5838fc6fecf9726fc0a43aeb431c8128cbea6fcd57abfda1db28d422ae32fd4e6d119d907c224acf7c249f649201c3e65acf97436821a23d6660a965149ebc9e5ffd3fb6790c0d14f1196d1652b5c10e0dc1fd4be3a556131ee8326ad4", 0xed}], 0x5, 0xf) r4 = dup(r1) ioctl$WSDISPLAYIO_GETSCREEN(r4, 0xc0245755, &(0x7f0000000080)={0xc212, './file0\x00', './file0\x00'}) r5 = socket(0x18, 0x3, 0x0) getsockopt(r5, 0x29, 0x40, 0x0, 0x0) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000200)="4f6c892ebc2ed0a3f1634e0eb3", 0xd}], 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000740)=""/251, 0xfb}], 0x1, 0x0}, 0x42) sendto$unix(r7, &(0x7f0000001040)="03efdae86298207d6fc08a14b164ce", 0xf, 0x400, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) write(r7, &(0x7f0000000040)="7cc97585253a5126a4ac0678c6d790b6c33b3e6e763c38371579343e19562401b7b74f0055ce1abc9e74072d11b74b65d267fefb275700f04cc1f8f490e5bb72db73bf3b59d1ae962bb0e2c9b3a30412087b7513d03b26bbcb131156c5b601d726737abaed6fc41250440030cd1135475f8fb9431d3b5f1c987229bc588ee7fdc124c69fc4f8337a514e971c8b2da6c7bb34732e903bd7aa1143b450bd07e39bf8c1a49d7d5bff56c0c51ac6983a1c1820f7b3ae7e9d9e93525f7dcf8e322b9dbe76baa19915307b384bf3afecbab8a53cf1c3162610d96adc5a602165529e0406a344ac30584f7663d0b22103", 0xed) syz_emit_ethernet(0x22, &(0x7f0000000380)=ANY=[@ANYBLOB="7fffffffffffaaaaaaaaaabb0800458100140000000000ff9078ffffffffac14ffff"]) chmod(&(0x7f0000000040)='.\x00', 0x35e) setuid(0xee01) mkdir(&(0x7f0000000000)='./file0\x00', 0x60) unveil(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000140)='c\x00') ioctl$WSDISPLAYIO_WSMOUSED(r2, 0x80185758, &(0x7f0000000300)={0x6, 0xe1, {0x10, 0x7fffffff}}) 540.893951ms ago: executing program 5 (id=714): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) symlinkat(&(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0\x00') ioctl$WSDISPLAYIO_DELFONT(r1, 0x8058574f, &(0x7f00000000c0)={'./file0\x00', 0xa3ba, 0x4, 0x10, 0x0, 0x7, 0x0, 0x400, 0x2, 0x2, 0x7fff, 0x4}) fchmodat(r1, &(0x7f0000000140)='./file1\x00', 0xcd, 0x8) r2 = dup(r1) ioctl$DIOCMAP(r2, 0xc0106477, &(0x7f00000001c0)={&(0x7f0000000180)='./file0\x00', r1, 0x3}) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) chflagsat(r1, &(0x7f0000000200)='./file0\x00', 0x10000, 0x2) r3 = openat(r1, &(0x7f0000000240)='./file1\x00', 0x0, 0xd5) r4 = open(&(0x7f0000000280)='./file0\x00', 0x800, 0x81) r5 = geteuid() ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f00000002c0)={0x9, 0x2, 0x1b724000, 0x3, "383645c194c941d096baaa57bb2849dc79620d05", 0x0, 0x5}) fcntl$dupfd(r2, 0xa, r4) mknod(&(0x7f0000000300)='./file0\x00', 0x4, 0x1) recvfrom$inet(r0, &(0x7f0000000340)=""/173, 0xad, 0x1803, &(0x7f0000000400)={0x2, 0x2}, 0xc) connect$unix(r3, &(0x7f0000000440)=@file={0x0, './file1\x00'}, 0xa) ioctl$WSDISPLAYIO_LDFONT(r3, 0x8058574d, &(0x7f0000000480)={'./file0\x00', 0x5, 0x7, 0x6, 0x0, 0x4, 0x0, 0xfffffffb, 0x1, 0x2, 0x9000000000000, 0x3}) unveil(&(0x7f0000000500)='./file1\x00', &(0x7f0000000540)='x\x00') r6 = socket$inet(0x2, 0x4000, 0x7) recvfrom$inet(r6, &(0x7f0000000580)=""/251, 0xfb, 0x840, &(0x7f0000000680)={0x2, 0x3}, 0xc) pread(r6, &(0x7f00000006c0)="309fd13a41283b424f6c553b4aa9944440f528e7c5a8cedc91516bca6e92788ba407c2dfb1ecc03d575a3c69203fe7fefb7e8f17881cd0bc812cc0a544800ab882baec92d347097df2110b8baa01d0b29fe79752c80a4e90cb8cf7cada9dfbfa8916fc269646d43b9af9755ff8c48f037901daea6ae25a250c94d7ed67ea7d1702fde1e45c2167534b75c388d7b688", 0x8f, 0x7) recvfrom(r0, &(0x7f0000000780)=""/214, 0xd6, 0x1800, &(0x7f0000000880)=@un=@file={0x0, './file1\x00'}, 0xa) ioctl$TIOCGTSTAMP(r1, 0x4010745b, &(0x7f00000008c0)) recvmmsg(r6, &(0x7f0000000c00)={&(0x7f0000000bc0)={&(0x7f0000000900)=@in, 0xc, &(0x7f0000000a80)=[{&(0x7f0000000940)=""/51, 0x33}, {&(0x7f0000000980)=""/11, 0xb}, {&(0x7f00000009c0)=""/140, 0x8c}], 0x3, &(0x7f0000000ac0)=""/253, 0xfd}, 0x8}, 0x10, 0x40, &(0x7f0000000c40)={0x6, 0x9}) socket(0x2, 0x1, 0x60) r7 = shmget(0x1, 0x6000, 0x0, &(0x7f0000ffa000/0x6000)=nil) shmat(r7, &(0x7f0000ffc000/0x4000)=nil, 0x3000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000c80)={0xffffffffffffffff}) ioctl$FIONREAD(r8, 0x4004667f, &(0x7f0000000cc0)) lchown(&(0x7f0000000d00)='./file0\x00', r5, 0x0) 528.475903ms ago: executing program 5 (id=715): mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x8) open(&(0x7f0000000040)='./file0\x00', 0x8000, 0xee4bce5bb233ab95) r0 = socket(0x2, 0x1, 0x0) r1 = openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0) r2 = socket(0x18, 0x2, 0x0) setsockopt(r2, 0x1000000000029, 0x3f, &(0x7f0000000200), 0x0) setrlimit(0x8, &(0x7f0000000980)={0xb, 0x54}) r3 = syz_open_pts() close(r3) syz_open_pts() ioctl$TIOCSETA(r3, 0x802c7414, &(0x7f0000000180)={0x7fffffff, 0xcacf, 0xdffdff7e, 0x1603528, "04e4577e010405010800", 0x200101, 0x5}) writev(r3, &(0x7f00000001c0)=[{&(0x7f00000009c0)="f0761f9d179395a3af23c11917f6a83776578fb081942e6285ad7c3687f6bb6ac7f174a78f07c5af3db69fb397c57b73801011b0509d11eb4cc1fb319add3ea4b54b040cb873a49a95f4db15119c66028ac18feb1317cb4497cea5572be8b32c90907dd3a71b2ad625b6bd5d86e6e74f80ca9359eb42804d58820966e4f4ec82ba2dda50e940dd1a659a5a7bc4fe9977f441ae7a7f769eb94ff1d2464a7e66f2ca838b3b1a2678ee54853e36f41143a3425233013f65218c5a08c3cc1e047f2666971cc82889b3f07c6bd9774ed02e4f1aea7d06f86e6d8018e39f96707368ab2f29bb9c8c8e541e07d1a5131face3c758982c4f9d8c2d25d3efa06c67b63f2b38f17948b6f73e1f932d372e40e25d2be34333377606f4c94ed889fe5fd732d86fb1662c7373711f736aa9b8829bc35c5e83ba", 0x133}], 0x1) setuid(0xee01) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r4 = socket(0x2, 0x1, 0x0) ioctl$FIONREAD(r4, 0x80206913, &(0x7f00000001c0)) open$dir(&(0x7f00000000c0)='./file0\x00', 0xa09b700ed22db685, 0x80) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc0e99db6de761f86, 0x0) r5 = open(&(0x7f0000000240)='./file0\x00', 0x205, 0x0) fcntl$lock(r5, 0x8, &(0x7f0000000000)={0x3, 0x0, 0x0, 0x369000000}) r6 = open(&(0x7f0000000200)='./file0\x00', 0x200, 0x0) fcntl$lock(r6, 0x8, &(0x7f0000000080)={0x1, 0x0, 0x8, 0x100000008}) r7 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$lock(r7, 0x8, &(0x7f0000000080)={0x0, 0x0, 0x200000, 0x100000401}) r8 = openat$pf(0xffffffffffffff9c, &(0x7f0000001b40), 0x1, 0x0) writev(r8, &(0x7f0000001bc0)=[{&(0x7f0000000440)="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", 0x34e}], 0x1) ioctl$TIOCSETA(r8, 0xc0504417, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x6, "00000000000000d500", 0x11, 0x1000a}) ioctl$WSMOUSEIO_SETPARAMS(r1, 0x80105728, &(0x7f0000000200)={&(0x7f00000001c0)=[{0x20, 0x80000000}, {0x3, 0x400}, {0x84, 0xfc6}, {0x83, 0x4}, {0xcd}, {0x1, 0x480000}], 0x6}) chflagsat(0xffffffffffffffff, 0x0, 0x1, 0x51f4a9df2c8ea2d) setsockopt(r0, 0x11, 0x2, &(0x7f0000000100)="6e5e7d1aa312786e6aa7f477a2875d0a821a430e15a17fd2918f62739793d8ee98aa7d294ed3af41d4", 0x29) 526.85967ms ago: executing program 3 (id=717): ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x3, 0x8e, 0x7f, 0x40000007}, {0x3, 0xf, 0x3, 0x4006}, {0x6, 0xd, 0x1, 0xfffffff2}]}) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)='\b\x00', 0x2}], 0x1) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) sysctl$hw(0x0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000040)={0x0, 0x0}) write(r0, &(0x7f0000000600)="d81ad30100000000000100000000", 0xe) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x7, 0x2d, 0x2, 0x4}, {0x40, 0x1, 0xff, 0x7}, {0x6, 0x15, 0x4, 0xfffffefe}]}) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000240)={'tap', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r2, &(0x7f0000000040)=@file={0xd19450564dee018c, './file0\x00'}, 0xa) write(r2, 0x0, 0x0) sysctl$hw(0x0, 0x0, &(0x7f0000000380)="050000003b12a840000018e1eee30d2b0100badb55abe01959c7dea800000000000000002006dfcd493796c1b9eb1c6b", &(0x7f0000000000)=0x30, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x1000e, &(0x7f00000001c0)=ANY=[]) 518.943541ms ago: executing program 2 (id=719): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x80, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000080)={'tap', 0x0}) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x54, 0x92, 0x47, 0xb1}, {0x406, 0x7, 0x2b, 0x5}]}) syz_emit_ethernet(0x7bf, &(0x7f0000000f40)=ANY=[]) 511.273037ms ago: executing program 3 (id=720): r0 = openat$speaker(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) mknod(0x0, 0x2000, 0x881) open$dir(0x0, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2000, 0x801) r1 = openat$speaker(0xffffffffffffff9c, 0x0, 0x2, 0x0) pwritev(r1, 0x0, 0x0, 0x2e95) writev(r1, 0x0, 0x0) write(r1, 0x0, 0x0) r2 = open(0x0, 0x200, 0x8a) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x10, r2, 0x0) close(0xffffffffffffffff) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000240)=[{0x2, 0x2d, 0x0, 0x1}, {0x50, 0x0, 0x3, 0x7}, {0x6, 0x80, 0x8, 0x800}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$BIOCSETWF(r3, 0x80104277, &(0x7f0000000040)={0x0, 0x0}) write(r3, &(0x7f00000003c0)="a40076d6c131b559aed135b247a0", 0xe) mlock(&(0x7f0000244000/0x1000)=nil, 0x1000) kqueue() r4 = semget(0x0, 0x1, 0x281) semctl$IPC_RMID(r4, 0x0, 0x0) r5 = semget$private(0x0, 0x6, 0x20) semop(r5, &(0x7f0000000200)=[{0x2, 0x8, 0x1000}, {0x3, 0x1006, 0x1000}, {0x4, 0xf985, 0x800}], 0x3) ioctl$SPKRTONE(r0, 0x80085301, &(0x7f0000000000)={0xffffffff, 0x5}) select(0x40, &(0x7f0000000040)={0x4, 0x7, 0x2f, 0x7, 0x0, 0xa6a, 0xffffffffffffff7f, 0x4}, &(0x7f0000000080)={0x1ff, 0xfffffffffffffffe, 0x8, 0x8000, 0x6, 0x80000000, 0x0, 0x9}, &(0x7f00000000c0)={0x6, 0x4, 0x7, 0x6, 0x8, 0x7fff, 0x0, 0x3}, &(0x7f0000000100)={0x7, 0x12}) 510.899249ms ago: executing program 0 (id=721): syz_emit_ethernet(0x4e, &(0x7f0000000080)={@broadcast, @remote, [], {@ipv4={0x800, {{0x7, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0xf0, 0x0, @broadcast, @rand_addr=0xb, {[@ra={0x94, 0x6, 0x7}]}}, @tcp={{0x0, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0x20, 0x7, 0x0, 0x81, {[@window={0x3, 0x3}, @generic={0x1, 0xd, "a2e7530019ed7db8747de7"}]}}}}}}}) 487.008392ms ago: executing program 2 (id=722): sysctl$net_inet6_ip6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)='y', 0x1) r0 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000040)='./file0\x00', 0x2000, 0x3361) open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7949) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = open(&(0x7f0000000480)='./file0\x00', 0x1, 0x4ebfac6bbaf782c) ioctl$VNDIOCCLR(r1, 0xc0a86b05, &(0x7f0000000200)={0x0, 0x10000, 0x0}) chmod(&(0x7f0000000040)='.\x00', 0x35e) setuid(0xee01) open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x80) 486.572634ms ago: executing program 0 (id=723): syz_emit_ethernet(0x138, &(0x7f0000000100)=ANY=[@ANYRESOCT]) (async) execve(0x0, &(0x7f0000000340)=[&(0x7f0000000100)='tap'], 0x0) kqueue() r0 = socket$inet(0x2, 0x1, 0x0) ioctl$FIONREAD(r0, 0x80206979, &(0x7f0000000040)) getgroups(0x6, &(0x7f0000000000)=[0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0]) r2 = getegid() setregid(r1, r2) 337.340524ms ago: executing program 0 (id=724): select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x8, 0x2000000000000004}, 0x0, 0x0, 0x0) r0 = kqueue() kevent(r0, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) r1 = accept$inet(0xffffffffffffff9c, &(0x7f0000000380), &(0x7f00000003c0)=0xc) setsockopt$inet_opts(r1, 0x0, 0x1, &(0x7f0000000400)="4d79e473796098f0574dfd2f278bc180a5343cce7977ca252c72acc6a6bf009ca9190e578b1c24d60bac2781158097e2915e31f7ccf5c27c06cc3ddfd0b8dea2b4b72c722b57598e11ba8f77feb2fa4caab526067474a33a7312ae6773bff9df942b3d3905c297396bf60341d5f37e65f6f67db9fb1960a1e5570157103a62ed20500e3b82e6cfd8934466cf4a0de2cbe2b74261ddeaf8d111624998d26c47fea9ca468c0e1d9d2ecc8fd9a0479685668d405d43386f898f25dfe9a48aaf633222e51275c9d98a33f0c861e739e980", 0xcf) ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file0\x00', 0x624, 0x297, 0xffff0000, 0x1, 0x5, 0xd87, 0x8000000a, 0x2, 0x0, 0x100000000644, 0xffffffffffffffc8}) mknod(&(0x7f0000000000)='./file1\x00', 0x2000, 0x637d) r2 = open(&(0x7f0000000800)='./file1\x00', 0x800, 0x120) ioctl$FIONBIO(r2, 0x82907003, &(0x7f0000000140)=0x1) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x637e) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x3, 0x7, 0xfd, 0x6}, {0x2, 0x10, 0x5, 0x1}, {0x9e, 0x19, 0x0, 0x40003}]}) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0) ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) sysctl$hw(0x0, 0x0, &(0x7f00000001c0)="0004849d0f3e8095043fa8985d012c00009351023cde4d22f887ee99c61d2f4b", &(0x7f0000000000)=0x20, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$BIOCSETF(r3, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x1000e, &(0x7f0000000340)=ANY=[]) r4 = syz_open_pts() close(r4) poll(&(0x7f00000000c0)=[{r4, 0x40}], 0x1, 0xcd) setgroups(0x33, 0x0) ioctl$WSMOUSEIO_SCALIBCOORDS(r2, 0x81205724, &(0x7f0000000240)={0x0, 0x2, 0x3, 0x46958b52, 0x6e, 0x4, 0xcd000000, 0x10, [{0x5484, 0x7, 0x4, 0xa}, {0x80000000, 0xfec, 0x4, 0xc1}, {0xc, 0x0, 0x1000, 0xc77}, {0x80000001, 0x6, 0xffffff0c, 0x2}, {0x100, 0xfea, 0x1, 0x1}, {0xe011, 0x3, 0x200, 0xfffffffe}, {0x1, 0x4, 0x4f628902, 0xea61}, {0x3, 0x10000, 0xa, 0xffffff00}, {0x5, 0x40, 0x7, 0x1000}, {0x9, 0x80000001, 0xb8, 0x2}, {0x8, 0xfff, 0xf6, 0x1}, {0x1, 0x2, 0x4, 0x2}, {0x0, 0x3, 0x9, 0x2}, {0x8, 0xfa2, 0x8, 0xd}, {0x0, 0x0, 0x9b, 0x1}, {0x3, 0x4, 0x3, 0x3}]}) r5 = open(&(0x7f0000000040)='./file0\x00', 0x40, 0x100) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x4, 0x1, 0x7, 0x6, 0x3, 0x80002001, 0x8, 0x10, [{0x0, 0x7, 0x4, 0x3}, {0x7, 0x4, 0x9, 0x7}, {0x6, 0xf86, 0x100, 0xaf9}, {0x5, 0x8, 0xb, 0x3}, {0x7, 0xfffffffb, 0xe, 0x7}, {0x2, 0x7, 0xffffffff, 0x9c}, {0x80000cdf, 0x1, 0x5, 0x6d}, {0x2000a, 0x803, 0x14, 0x4}, {0x3, 0x81, 0x1, 0x4000009}, {0x3ff, 0x8001, 0xc7, 0x87}, {0x4, 0x5, 0x9, 0x10aeb}, {0x803, 0x40, 0x1, 0x5}, {0xe0, 0x4, 0x5, 0x3ff}, {0x29a71717, 0xfffffffa, 0x6, 0x100006}, {0x4, 0x9, 0xfff}, {0x0, 0x5, 0x4, 0x30000}]}) accept(r2, &(0x7f0000000080)=@in6, &(0x7f00000000c0)=0xc) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0x0, 0xffff, 0x2800000000000000, 0x181c, 0x8, 0x2000000000000004}, 0x0, 0x0, 0x0) ioctl$FIONBIO(r5, 0x82907003, &(0x7f0000000140)=0x1) 336.861974ms ago: executing program 2 (id=725): r0 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000140), 0x782, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f00000000c0), 0x1c, 0x0}, 0x0) r1 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r1, 0x8020691f, 0x0) fcntl$lock(r1, 0x4fee08159a9d2be4, &(0x7f00000000c0)={0x0, 0x0, 0x400000, 0x6}) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e7, 0x7}, 0x8) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x10000000000002}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket(0x18, 0x2, 0x0) setsockopt(r2, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) sendmsg$unix(r2, &(0x7f0000001700)={0x0, 0xffffffb3, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0) ioctl$SPKRTUNE(r0, 0x20005302, &(0x7f00000007c0)={0x0, 0x30c}) unveil(0x0, &(0x7f0000000080)='c\x00') 335.949536ms ago: executing program 2 (id=726): symlink(&(0x7f0000000000)='\x00', &(0x7f0000000040)='./file0\x00') ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc5005601, &(0x7f0000000000)={0xe, 0x0, [{&(0x7f0000462000/0x2000)=nil, &(0x7f000057e000/0x2000)=nil, 0xfffffffffffffffe}, {&(0x7f00002cf000/0x1000)=nil}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0xfffffffffffffffd}, {0x0, &(0x7f00004f5000/0x4000)=nil, 0x10000}, {&(0x7f00003d5000/0x11000)=nil, &(0x7f000049e000/0x3000)=nil, 0x1}, {&(0x7f0000000000/0x2000)=nil, &(0x7f000036f000/0x2000)=nil, 0x2}, {&(0x7f000054a000/0x1000)=nil, &(0x7f000016f000/0x4000)=nil, 0xe04}, {&(0x7f00003de000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0xffdffbfffffffffe}, {&(0x7f0000065000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0xffffffffffffffff}, {&(0x7f0000523000/0x1000)=nil, &(0x7f0000063000/0x13000)=nil}, {&(0x7f0000181000/0x3000)=nil, &(0x7f0000243000/0x3000)=nil, 0x9}, {&(0x7f000025b000/0x3000)=nil, &(0x7f0000463000/0x1000)=nil, 0x3ffffffffffff}, {&(0x7f00004c1000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x6}, {&(0x7f00004c1000/0x2000)=nil, &(0x7f000006c000/0x4000)=nil, 0x2}, {&(0x7f00001cf000/0x4000)=nil, &(0x7f0000463000/0x3000)=nil, 0x4}, {&(0x7f00000cf000/0x1000)=nil, &(0x7f000016a000/0x1000)=nil, 0x9}], './file0\x00'}) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0xd02) r0 = open(&(0x7f0000000000)='./bus\x00', 0x1, 0x8e) ioctl$VNDIOCSET(r0, 0x81946467, &(0x7f0000000040)={0x0, 0x0, 0x0}) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc0e99db6de761f86, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) setreuid(0xee00, 0x0) r1 = getuid() getsockopt$SO_PEERCRED(r0, 0xffff, 0x1022, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0xc) lchown(&(0x7f0000000240)='./file0\x00', r1, r2) setgid(0xffffffffffffffff) setgroups(0x0, 0x0) setuid(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$sock_cred(r3, 0xffff, 0x1022, &(0x7f0000000580)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, r4}}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x4e}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000180)=0x66, 0x0, 0x27) unveil(0x0, 0x0) r5 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x4, 0x7, 0x2, 0x80000004}, {0x34, 0xfa, 0x3, 0x3}, {0x16, 0x0, 0x28, 0x3}]}) ioctl$BIOCSETIF(r5, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$VNDIOCSET(r0, 0xc0384600, &(0x7f0000000480)={&(0x7f00000002c0)='./bus\x00', 0x4, &(0x7f0000000400)='./bus\x00', 0x6}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$BIOCSETF(r5, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) ioctl$BIOCVERSION(r5, 0x40044271, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000380)=ANY=[]) syz_emit_ethernet(0x1000e, &(0x7f00000004c0)=ANY=[@ANYBLOB="b905080000000100000000000c004500ff080000000100009078ac1400bbffe94d3c5ba89c153f14ffffff0f009078205c0003"]) getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000300)={0x0}, 0xc) wait4(r6, &(0x7f0000000200), 0x9, &(0x7f0000000340)) 331.292895ms ago: executing program 1 (id=727): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=""/100, 0x64}, 0x80003f8d}, 0x10, 0x0, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) msync(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmmsg(r1, &(0x7f0000000080)={0x0}, 0x10, 0x0) getdents(0xffffffffffffffff, &(0x7f0000000400)=""/4096, 0xfffffed1) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r2 = socket(0x2, 0x2, 0x0) r3 = socket(0x2, 0x1, 0x0) ioctl$FIONREAD(r3, 0xc0206923, &(0x7f00000001c0)) ioctl$FIONREAD(r2, 0x80206916, &(0x7f00000001c0)) close(r1) fchflags(0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x8, 0x0) setitimer(0x0, &(0x7f0000000000)={{0x401, 0x3fc}, {0x1, 0xc0000}}, &(0x7f0000000140)) select(0x40, &(0x7f0000000300)={0x7, 0x5, 0x2, 0xbf, 0xa, 0x10000, 0x9, 0x101}, &(0x7f0000000340)={0x1, 0x4000000000000000, 0x2, 0x5, 0x8, 0x7c, 0x30886671, 0x3485}, &(0x7f0000000380)={0x9, 0x2, 0xffff, 0x5, 0x2, 0x5, 0xb682, 0xded}, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) (async) recvmmsg(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=""/100, 0x64}, 0x80003f8d}, 0x10, 0x0, 0x0) (async) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) (async) msync(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) sendmmsg(r1, &(0x7f0000000080)={0x0}, 0x10, 0x0) (async) getdents(0xffffffffffffffff, &(0x7f0000000400)=""/4096, 0xfffffed1) (async) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) (async) socket(0x2, 0x2, 0x0) (async) socket(0x2, 0x1, 0x0) (async) ioctl$FIONREAD(r3, 0xc0206923, &(0x7f00000001c0)) (async) ioctl$FIONREAD(r2, 0x80206916, &(0x7f00000001c0)) (async) close(r1) (async) fchflags(0xffffffffffffffff, 0x0) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x8, 0x0) (async) setitimer(0x0, &(0x7f0000000000)={{0x401, 0x3fc}, {0x1, 0xc0000}}, &(0x7f0000000140)) (async) select(0x40, &(0x7f0000000300)={0x7, 0x5, 0x2, 0xbf, 0xa, 0x10000, 0x9, 0x101}, &(0x7f0000000340)={0x1, 0x4000000000000000, 0x2, 0x5, 0x8, 0x7c, 0x30886671, 0x3485}, &(0x7f0000000380)={0x9, 0x2, 0xffff, 0x5, 0x2, 0x5, 0xb682, 0xded}, 0x0) (async) close(r0) (async) 280.682168ms ago: executing program 1 (id=728): r0 = open(&(0x7f0000000480)='\x00', 0x40, 0x4ebfac6bbaf7941) sendmsg$unix(0xffffffffffffffff, &(0x7f0000002a40)={&(0x7f0000000000), 0x10, 0x0}, 0x0) kevent(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x80000000, 0x3}) writev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000000)="c886b4d3e0", 0x5}], 0x1) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = socket(0x2, 0x2, 0x0) r2 = socket$inet(0x2, 0x3, 0x0) dup2(r1, r2) setsockopt$inet_opts(r2, 0x0, 0x9, &(0x7f0000000240)="ea00000100000000", 0xc) sendmsg$unix(r1, &(0x7f0000002a40)={0x0, 0xffffffffffffff89, 0x0, 0x6e}, 0x0) kqueue() r3 = getuid() r4 = socket(0x18, 0x1, 0x0) getsockopt$sock_cred(r4, 0xffff, 0x1024, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0xc) seteuid(r5) setreuid(r5, r3) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) lchown(&(0x7f0000000200)='./file1\x00', r5, r6) mkdir(&(0x7f0000000100)='./file0\x00', 0x49) ioctl$TIOCSETD(r0, 0x8004741b, &(0x7f0000000040)) setrlimit(0x8, &(0x7f0000000980)={0x8, 0x54}) r7 = syz_open_pts() close(r7) sysctl$net_inet_carp(&(0x7f0000000040)={0x4, 0x2, 0x6, 0x3}, 0x4, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$net_inet_carp(&(0x7f0000000040)={0x4, 0x2, 0x6, 0x2}, 0x4, 0x0, 0x0, &(0x7f00000010c0)="e1e10000", 0x4) r8 = syz_open_pts() ioctl$TIOCSETAF(r8, 0x802c7416, &(0x7f0000000180)={0x1040978a, 0xfe, 0xf7fffc00, 0x80a19f, "bb08000100f17bbc87a1da040200c50000000080", 0x0, 0x4}) writev(r7, &(0x7f0000000700)=[{&(0x7f0000000080)="34eb4cd59e8456ebc0881681c60e1cd9e0bf01b618b3cb934394c5951c1db0fd943a", 0xff99}], 0x1) 258.571625ms ago: executing program 0 (id=730): execve(0x0, &(0x7f0000000000)=[&(0x7f0000000100)='//\x00'], 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_int(r0, 0xffff, 0x1008, &(0x7f0000000140), &(0x7f0000000180)=0x4) chroot(&(0x7f0000000100)='./file0\x00') r1 = syz_open_pts() kqueue() r2 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000000), 0x8009, 0x0) ioctl$WSKBDIO_GETENCODING(r2, 0x4004570f, &(0x7f0000000040)) ioctl$TIOCCBRK(r1, 0x2000747a) pipe(&(0x7f0000000000)) r3 = socket(0x11, 0x3, 0x3) sendto$unix(r3, &(0x7f0000000280)="b1000501600000001790000007000000045c13fecea10500fef96ecfc72fd3357ae320b37b673039d2d236a3f20b7804be38164991f7c8cf5f882b297be1aa5b236deb51e2f0ac3ebbc2576b9a5f139b672f4d335d223e7d026ba8af630037282102000000720fd38bfbb770c1f5a872c881ea6e69e0bb76d907c400000200361b1257aea8c500002002fb00000000008abfba09000000ec1d89e000040781e40500000000000000000900000000000000", 0xb1, 0x0, 0x0, 0x0) openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x8, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) fcntl$lock(r4, 0x9, &(0x7f0000000080)={0x3, 0x0, 0x0, 0x20001fffffffd}) fcntl$lock(r4, 0x9, &(0x7f0000000040)={0x2, 0x0, 0x4, 0x200000001}) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)=@in6={0x18, 0x1, 0x0, 0x5}, 0xc) r5 = socket(0x18, 0x3, 0x0) close(r5) r6 = socket(0x800000018, 0x1, 0x0) bind$unix(r6, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) setsockopt$sock_int(r5, 0xffff, 0x100, &(0x7f00000000c0), 0x4) getsockname(r6, 0x0, &(0x7f0000000040)) kevent(r4, &(0x7f0000000040), 0x8, 0x0, 0x7, 0x0) 252.4868ms ago: executing program 7 (id=731): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2000, 0x3ecc) r0 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) ioctl$WSMOUSEIO_SETPARAMS(r0, 0x80105727, &(0x7f0000000140)={&(0x7f0000000080)=[{0x0, 0x7}, {0x25, 0x1a000000}], 0x2}) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$TIOCSETA(r1, 0xc444443b, &(0x7f0000000040)={0x3, 0x2f, 0x9, 0xf4a, "a20000001a001800003200e1ffffff00", 0x4, 0x6}) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x10000, 0x189) 241.439056ms ago: executing program 1 (id=732): r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x186) r1 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) write(r1, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x2012, r0, 0x0) sysctl$net_inet_icmp(&(0x7f0000000040)={0x4, 0x2, 0x1, 0x5}, 0x4, 0x0, 0x0, 0x0, 0x0) sysctl$net_inet_icmp(&(0x7f0000000000)={0x4, 0x2, 0x1, 0x2}, 0x4, &(0x7f0000000100)="591616af66afed0d61ec92095d682ec87fa4f08fb56328f7e090b9d6a633155d5ad8c8c27799456484eedc899735bf3f418f401fc4a01119a3be701d402da73b2184ca8e3a5600eedb6a6205c73494fefbb166415dc553fb8bc44de771bba991e866d486645d56a841658ec42b0b50166e8329276a258e631fab424f93dc8761451225a3ea99f061342f896eef56e74a6bf2e2326f26ea003c70b3db63cfcaa0e52f", &(0x7f0000000080)=0xa2, &(0x7f00000001c0)="dfdfea46a238ba3f72c2a59c15ca39fed974d16eb1cb1eda4ff5884832ab35a101e9a89305af89be8dcb95bcb90936b2f9156415d1d940d1a9a78d08dfb26efb22b7c2480a6edaf18a0638462f810016851bce3a70def5ece7075dbd9c7c40879910618fdb2c6c23103d6598c47d3886724cd3fc48b05af1ce235024b608f4b2dcf1dfe697c5fd16a8cc07187eb88ec99b1b6f34a7e1cb49f3664b8fa1ad98970c", 0xa1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$net_inet_carp(&(0x7f0000000040)={0x4, 0x2, 0x6, 0x2}, 0x4, 0x0, 0x0, &(0x7f00000010c0)="e5000000", 0x4) open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x186) (async) open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) (async) write(r1, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) (async) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x2012, r0, 0x0) (async) sysctl$net_inet_icmp(&(0x7f0000000040)={0x4, 0x2, 0x1, 0x5}, 0x4, 0x0, 0x0, 0x0, 0x0) (async) sysctl$net_inet_icmp(&(0x7f0000000000)={0x4, 0x2, 0x1, 0x2}, 0x4, &(0x7f0000000100)="591616af66afed0d61ec92095d682ec87fa4f08fb56328f7e090b9d6a633155d5ad8c8c27799456484eedc899735bf3f418f401fc4a01119a3be701d402da73b2184ca8e3a5600eedb6a6205c73494fefbb166415dc553fb8bc44de771bba991e866d486645d56a841658ec42b0b50166e8329276a258e631fab424f93dc8761451225a3ea99f061342f896eef56e74a6bf2e2326f26ea003c70b3db63cfcaa0e52f", &(0x7f0000000080)=0xa2, &(0x7f00000001c0)="dfdfea46a238ba3f72c2a59c15ca39fed974d16eb1cb1eda4ff5884832ab35a101e9a89305af89be8dcb95bcb90936b2f9156415d1d940d1a9a78d08dfb26efb22b7c2480a6edaf18a0638462f810016851bce3a70def5ece7075dbd9c7c40879910618fdb2c6c23103d6598c47d3886724cd3fc48b05af1ce235024b608f4b2dcf1dfe697c5fd16a8cc07187eb88ec99b1b6f34a7e1cb49f3664b8fa1ad98970c", 0xa1) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) sysctl$net_inet_carp(&(0x7f0000000040)={0x4, 0x2, 0x6, 0x2}, 0x4, 0x0, 0x0, &(0x7f00000010c0)="e5000000", 0x4) (async) 240.262746ms ago: executing program 2 (id=733): sysctl$vm_swapencrypt(&(0x7f0000000000)={0x6, 0xb, 0x2}, 0x3, 0x0, 0x0, 0x0, 0x0) (async) fchmodat(0xffffffffffffffff, 0x0, 0x80, 0x4) (async, rerun: 64) sysctl$kern(&(0x7f0000000000)={0xa, 0x54}, 0x2, &(0x7f0000000040)="fc8ff7fcfc6016036038ddd86878270381b4506dee2bf032ff905593e5cada61d9471ce57f8d793a6e431726f4db1b9461f3d960ddd22ef8cce7e13ca926ba5633dd1976298f300183ae4484f5a77f9cf7cef3b4f0d09682b4514d000049ed3b37da013f9472e19e3c955bf853ad0d39a97f95f5015383add27d7cb92d85a9e350ff46c75ee10cc9bfb982128364f745f85ee90d6c17b4d23ce071f6368e65680417f304589547873b73066a887f5c17af169db9270aac7099c383401b90a96aa43b06750272dafa87aa0bd4fed46edc00"/221, 0x0, 0x0, 0x0) (rerun: 64) 239.943506ms ago: executing program 4 (id=734): ioctl$WSMUXIO_REMOVE_DEVICE(0xffffffffffffffff, 0x80085762, &(0x7f0000000040)={0x1}) r0 = socket(0x18, 0xc003, 0x3a) setsockopt(r0, 0x29, 0x6c, &(0x7f0000000040), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0x66, &(0x7f00000003c0)={0x1, 0x1, 0x10, 0x1}, 0xc) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x100000001}) r1 = openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0) mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) bind$unix(r2, &(0x7f0000000040)=@file={0xd19450564dee018c, './file0\x00'}, 0xa) r3 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r3, &(0x7f0000000080)={&(0x7f0000000040)=@file={0x170, './file0\x00'}, 0xa, 0x0}, 0xe) r4 = open(&(0x7f0000000000)='./file0\x00', 0x2, 0x0) poll(&(0x7f00000000c0)=[{r4, 0xae98cd7e8d4e801f}], 0x1, 0x9) close(r4) ioctl$TIOCNXCL(r1, 0x2000740e) r5 = socket$inet6(0x18, 0x4000, 0xc) kevent(0xffffffffffffff9c, &(0x7f0000000100)=[{{r5}, 0xfffffffffffffffc, 0x2, 0x2, 0x200000000000001, 0x20000000000008}], 0x200, 0x0, 0xd6, 0x0) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0xffffffff, 0xb, {0xfffffffffffffffe, 0x1}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r6 = socket(0x18, 0x1, 0x0) setsockopt(r6, 0x1000000029, 0xc, &(0x7f0000000000)="ebffcbff13b9fd812eaa04000000000000009648", 0x14) setsockopt(r6, 0x1000000029, 0xc, &(0x7f0000000040)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0xd02) r7 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x140) ioctl$VNDIOCSET(r7, 0xc0785101, &(0x7f0000000040)={0x0, 0x0, 0x0}) setsockopt(r6, 0x1000000029, 0xc, &(0x7f0000000080)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) close(r6) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) 236.344529ms ago: executing program 5 (id=735): getrlimit(0x2, 0xfffffffffffffffe) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) mprotect(&(0x7f00006d5000/0x1000)=nil, 0x1000, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2, 0x11, r0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000080)="76e5eac907f9ccf7a251ceddcec7d6aa45cffe2c63a56077123a276d3ba4e9d17eb3eb5db12a3783a8e0620d357de1fe04fa9465b5bd1286e9624dec06a00c222f", 0x41}], 0x1) rename(&(0x7f0000000100)='./file0\x00', 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='.\x00') r1 = accept$unix(r0, &(0x7f0000000000)=@abs, &(0x7f0000000140)=0x8) setsockopt$sock_int(r1, 0xffff, 0x1004, &(0x7f0000000180)=0x10001, 0x4) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000c00)='./file0\x00', 0x0, 0x0) fchdir(r2) socket(0x24, 0x2, 0x0) unveil(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='r\x00') openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x80, 0x0) shmget$private(0x0, 0x3000, 0x200, &(0x7f0000509000/0x3000)=nil) getrlimit(0x2, 0xfffffffffffffffe) (async) open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) (async) mprotect(&(0x7f00006d5000/0x1000)=nil, 0x1000, 0x0) (async) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2, 0x11, r0, 0x0) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000080)="76e5eac907f9ccf7a251ceddcec7d6aa45cffe2c63a56077123a276d3ba4e9d17eb3eb5db12a3783a8e0620d357de1fe04fa9465b5bd1286e9624dec06a00c222f", 0x41}], 0x1) (async) rename(&(0x7f0000000100)='./file0\x00', 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='.\x00') (async) accept$unix(r0, &(0x7f0000000000)=@abs, &(0x7f0000000140)=0x8) (async) setsockopt$sock_int(r1, 0xffff, 0x1004, &(0x7f0000000180)=0x10001, 0x4) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (async) open(&(0x7f0000000c00)='./file0\x00', 0x0, 0x0) (async) fchdir(r2) (async) socket(0x24, 0x2, 0x0) (async) unveil(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='r\x00') (async) openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x80, 0x0) (async) shmget$private(0x0, 0x3000, 0x200, &(0x7f0000509000/0x3000)=nil) (async) 236.017818ms ago: executing program 0 (id=736): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000240)=""/201, 0xc9}], 0x1, 0x0}, 0x1000) getpeername(r1, &(0x7f0000000000)=@in6, &(0x7f0000000080)=0xc) sendmmsg(r0, &(0x7f0000000040)={0x0, 0x7}, 0x10, 0x20a) 233.391684ms ago: executing program 7 (id=737): setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) r0 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) write(r0, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) truncate(&(0x7f0000000080)='./file0\x00', 0x7ffffffffff) ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x40000530, 0x0) fchown(r0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x3, 0x7, 0xfd, 0x6}, {0x40, 0x10, 0x25, 0x1}, {0x9e, 0x19, 0x0, 0x40003}]}) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000180), 0x200, 0x0) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000200)={0x3, &(0x7f00000001c0)=[{0xe3, 0x62, 0x0, 0x1}, {0x7ce0, 0xbf, 0x2, 0x4}, {0x3, 0x8, 0xe1, 0x8}]}) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2000, 0x801) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$TIOCSTOP(r2, 0x2000746f) r3 = open(&(0x7f0000000380)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7929) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000040)='#', 0x1}], 0x1) ioctl$WSMOUSEIO_SETPARAMS(0xffffffffffffffff, 0x80105727, &(0x7f0000000000)={0x0}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000380), 0x800, 0x0) ioctl$BIOCSETF(r6, 0x80104267, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x40, 0x8e, 0x7f, 0x40000007}]}) close(r4) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) mprotect(&(0x7f00004ea000/0x3000)=nil, 0x3000, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x1, 0x5e6c7c3f, 0xffffffffffffffff, 0x0, 0x8000000000000003, 0x80000000000000c, 0x100000001, 0x40}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xff0a, 0x0, 0x37) openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x80, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000500)=ANY=[@ANYBLOB="908686abbeb33624d311d6446c104aa66c219618562f1e1c81e2a75caaafbf7fdf693a1c031ecd22b35b937439925e22f33efbe5cfe4240cceb347462b7e446e71c3807b31a9b2862ad7ac70d6432ea66088ca59a6c0800258a446f6fe", @ANYRES32=r2, @ANYRES64=r2, @ANYRES64=r3, @ANYRESOCT=r1, @ANYRESOCT=r3, @ANYRESHEX=r6, @ANYRESHEX=r5]) ioctl$WSKBDIO_GETMAP(r4, 0x80047476, &(0x7f0000000100)={0x0, 0x0}) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) 175.560308ms ago: executing program 2 (id=738): ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x206, 0x7, 0xfd, 0x6}]}) (async) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x206, 0x7, 0xfd, 0x6}]}) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x100000000000000, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7, 0x0}, 0x8) (async) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7, 0x0}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x18, 0x1, 0x0) close(r0) (async) close(r0) r1 = socket(0x18, 0x1, 0x0) close(r1) r2 = socket(0x18, 0x2, 0x0) setsockopt(r2, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) connect$unix(r1, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) write(r1, 0x0, 0x0) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@random="5f29b1401eb6", @local, [], {@ipv4={0x800, {{0x7, 0x4, 0x0, 0x2, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @empty, @empty=0x6000000, {[@ra={0x94, 0x6, 0xfffffff1}]}}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x6, 0x7, 0xfd2, 0x49, 0x1}}}}}) 61.433426ms ago: executing program 4 (id=739): r0 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) shutdown(r0, 0x1) socketpair(0x1, 0x5, 0x4, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = accept(r1, 0x0, &(0x7f0000000040)) ioctl$FIOGETOWN(r2, 0x4004667b, &(0x7f0000000080)) 60.716555ms ago: executing program 4 (id=740): pledge(&(0x7f0000000700)='tty V\xef\x86\b3|#\xcbQ8\x19\xce\x89K\x1f\xeb\x11]\xafZ\x13\x12\xe0\x19\x9c\xe6\x98\x0f \x01\xa6~\xd0|/?\xc9\xd5k\xbe\xa9kGS\x00\x00K\x00\x00\x00\x00\x00\x10\xeb\x91vr)\\\x9el\x03(rut\xd4\x9a\xbak\x04\x88J\x19\x9aU8\xee\xcf\xb4B\x95\x15\xb6\r^o\xfa\x03\x8bgI\xbdf\xc0\x9ffXo\x95\xad\x1f\x88\xd5\x95\xd9?!`\xbf\x8a\xeb5&\xdf\xeb\x04rN\\\x10\x18\xc3Unm\x84\vg\xef\xe8\xe3\xb1\x01\xdfZ\xfe\xd0\xa3\xa9E?\xa0\xcc\xd8\x8f\xff\x1e\xcd\x87_\xb9\xc2I0xffffffffffffffff, 0xffffffffffffffff}) r3 = open(&(0x7f0000000380)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7949) writev(r3, &(0x7f0000000280)=[{&(0x7f0000000040)='#!', 0x2}], 0x1) (async) write(r3, &(0x7f00000003c0)="0d2020c9c5e943ca8bf2eeebece66b7e4229ba53cde5e4090900db00d2bf000000a11f077f9575159a6b5aba577d4b8fceb300000000000000005d15131df1c130874dcfe18da489c40c42ef9aea5c536e9b67d07600a9930a", 0x59) (async) execve(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) chmod(&(0x7f0000000040)='.\x00', 0x35e) (async) setuid(0xee01) (async) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) (async) chmod(&(0x7f0000000080)='./file0\x00', 0x2ea) (async) chdir(&(0x7f0000000100)='./file0\x00') symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) ioctl$TIOCCLRVERAUTH(r3, 0x2000741d) (async) ioctl$LIOCSFD(r0, 0x80046c7f, &(0x7f0000000080)=r1) (async) getsockopt$inet_opts(r2, 0x0, 0x1, &(0x7f00000000c0)=""/151, &(0x7f0000000180)=0x97) (async) unveil(&(0x7f0000000040)='./file0/file0/..\x00', &(0x7f0000000000)='x\x00') (async) unveil(&(0x7f0000000400)='./file0/file1\x00', &(0x7f00000000c0)='r\x00') ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x10000000000001}}) r4 = socket(0x18, 0x2, 0x0) setsockopt(r4, 0x1000000000029, 0xa, &(0x7f0000000040)="03000000", 0x4) (async) setsockopt(r4, 0x1000000000029, 0xc, &(0x7f0000000000), 0x14) r5 = open(&(0x7f0000000000)='./file0\x00', 0x9cab835cfdc52675, 0x0) linkat(r5, &(0x7f0000000300)='./file0\x00', r5, &(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0/file0\x00', 0x4) syz_emit_ethernet(0x4a, &(0x7f0000000440)=ANY=[@ANYBLOB="d1b88d2f31beb6444124b71686dd69b6435100143703000000006dd50000000000000000000000000000000000000000ffff"]) 54.095998ms ago: executing program 5 (id=742): msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x120, 0x3}, 0x55, 0x5, 0x0, 0x0, 0x3fffffffff, 0x2, 0x40000000000, 0xffff}) (async) r0 = open(&(0x7f0000000040)='./file0\x00', 0x40, 0x100) ioctl$FIONBIO(r0, 0x82907003, &(0x7f0000000140)=0x2) (async) ioctl$WSMUXIO_INJECTEVENT(r0, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x10000000000004}}) (async) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) r1 = socket(0x18, 0x1, 0x0) (async) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x3, 0x8e, 0x7f, 0x40000007}, {0x2c, 0xf, 0x3, 0x4006}, {0x6, 0x9, 0x1, 0xfffffff2}]}) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x0, 0x0}) (async) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) (async) sysctl$hw(0x0, 0x0, &(0x7f0000000340)="a2352f75fcb72f258152ea33cf03ebcc5800000d0060754473d45204b35bd22e7dfdffffff60da2adcc2db3d8d7b878ae6ec8101f61e5a25a8a5f74a594bd7b0b50000843f00185451dc8516ddf1345e2ef29971e3f7d7cd4f2f7ab199", &(0x7f0000000000)=0x5d, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) ioctl$BIOCSETWF(r2, 0x80104277, &(0x7f0000000040)={0x0, 0x0}) (async) r3 = socket(0x2, 0x3, 0x0) close(r3) (async) r4 = socket(0x18, 0x2, 0x0) (async) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200}, 0xc, 0x8001, 0x2}) r5 = socket(0x18, 0x3, 0x0) connect$unix(r5, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) (async) getsockname$inet(r5, &(0x7f00000000c0), &(0x7f0000000000)=0xffffffffffffff35) semop(0x0, &(0x7f00000000c0)=[{}, {0x0, 0x2ff}], 0x2) (async) connect$unix(r4, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) setsockopt$sock_int(r3, 0xffff, 0x1001, &(0x7f0000000100)=0x20000, 0x4) (async) write(r3, &(0x7f0000001680)="04bdfa5d1d2873c63e3534825ba166e2fea9aec43050006123339a346f731573d8d508753f95b7688ad48b8cf6bbca325cebc37fc4e1dd543dbe2da6dd", 0x1001c) (async) write(r2, &(0x7f0000000600)="d81ad30100000000000100000000", 0xe) close(r1) (async) r6 = socket(0x18, 0x3, 0x4) setsockopt(r6, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) (async) connect$unix(r1, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) 53.69524ms ago: executing program 6 (id=743): execve(0x0, &(0x7f0000000000)=[&(0x7f0000000100)='//\x00'], 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="8f6f77ede655", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "5f6ad9", 0x38, 0x3a, 0x0, @empty, @local={0xfe, 0x80, '\x00', 0x0}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "06c33e", 0x0, 0x3a, 0x80, @local={0xfe, 0x80, '\x00', 0x0}, @mcast2, [@hopopts={0x67}]}}}}}}}) chroot(&(0x7f00000001c0)='./file0/file0/file0\x00') mkdir(&(0x7f0000000100)='./file0\x00', 0x0) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1) syz_emit_ethernet(0x138, &(0x7f0000000180)=ANY=[@ANYBLOB="ff02", @ANYBLOB="56d727b39692"]) setreuid(0x0, 0xffffffffffffffff) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) r0 = socket(0x2, 0x1, 0x0) connect$unix(r0, &(0x7f0000000000), 0x10) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x420, 0xa9) openat(r1, &(0x7f0000000140)='./file0/file0\x00', 0x8000, 0x89) open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x15) 53.147099ms ago: executing program 4 (id=744): r0 = open(&(0x7f0000000800)='./file1\x00', 0x800, 0x120) ioctl$FIONBIO(r0, 0x82907003, &(0x7f0000000140)=0x1) ioctl$WSDISPLAYIO_SETSCREEN(r0, 0x80045756, &(0x7f0000000000)=0xe4) sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sysctl$hw(&(0x7f00000000c0)={0x6, 0x19}, 0x400000000000000c, 0x0, &(0x7f0000000080)=0x37, 0x0, 0x38) r1 = socket$inet(0x2, 0x1, 0x0) close(r1) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) open(&(0x7f0000000080)='./file0\x00', 0x800, 0x9b) sysctl$net_inet_ip(&(0x7f0000000000)={0x4, 0x2, 0x0, 0x10}, 0x4, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r2 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a) ioctl$VNDIOCSET(r2, 0x80184404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x5c}) ioctl$VNDIOCSET(r2, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r2, 0x80044403, &(0x7f00000001c0)={0x0, 0x80000011, 0x0}) close(r2) socket(0x24, 0x2, 0x0) syz_emit_ethernet(0x2a, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="89ffa23f3c252adb0070162e86dd6009000000200600030000000000000037f87ccdc0c4a92cff0000000001ea443d080000000001004e204e22", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='[B']) mknod(&(0x7f0000000200)='./file0\x00', 0x2000, 0xd02) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[]) syz_emit_ethernet(0x3e, &(0x7f00000001c0)=ANY=[@ANYBLOB]) setsockopt(r1, 0x6, 0x1, &(0x7f00000001c0), 0x0) socket(0x18, 0x1, 0x0) r3 = socket$inet6(0x18, 0x5, 0x4) getsockopt(r3, 0x29, 0x32, 0x0, 0x0) 3.039611ms ago: executing program 5 (id=745): setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) r0 = socket(0x2, 0x3, 0x4) connect$unix(r0, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0xa) r1 = socket(0x2, 0x5, 0x2) (async, rerun: 32) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) (async, rerun: 32) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x3, 0x7, 0xfd, 0x80000000}, {0x2, 0x10, 0x5, 0xfffffffd}, {0x9e, 0x19, 0x0, 0x40003}]}) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000180), 0x200, 0x0) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f00000002c0)={'tap', 0x0}) (async) bind$unix(0xffffffffffffffff, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x1) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r3 = socket(0x11, 0x3, 0x0) sendto$unix(r3, &(0x7f0000000000)="b10005016000009f0500000007000000331c13fecea10500fef96ecfc72fd3357a068da3a5673039d2d236acf20b7804be38164991f7cccf5f882b297be1aa5b23edeb51e2f0ac3ebbc257699a1f139b672f4d335c223e7d02565dfbdd60de5f231e000000720fd38bfbb770c1f5a872c881e2772ec5a10400000000000000361b1257aea8c5d0002012000000000000880d6633c556ae9be371a3f8343712051eeab71d89000407000000800420000000", 0xb1, 0x0, 0x0, 0x0) (async, rerun: 64) ioctl$BIOCSETF(r2, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) (rerun: 64) setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) (async) r4 = open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x186) (async) r5 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) (async) mprotect(&(0x7f0000591000/0x1000)=nil, 0x1000, 0x4) write(r5, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x2012, r4, 0x0) pipe2(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x6) writev(r6, &(0x7f0000000280)=[{&(0x7f0000001040)="bd", 0x1}], 0x1) (async) write(r6, &(0x7f0000000080)="c30516845e", 0xff55) (async, rerun: 64) close(r7) (async, rerun: 64) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) syz_emit_ethernet(0x1000e, &(0x7f0000000100)=ANY=[]) (async) ioctl$FIONREAD(r1, 0xc02069a5, &(0x7f0000000140)) (async, rerun: 64) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x10, 0xffffffffffffffff, 0xffffffffffffffff) (rerun: 64) mknod(&(0x7f0000000040)='./file0\x00', 0x6000, 0xe02) (async) chown(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) 267.451µs ago: executing program 5 (id=746): mknod(&(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0xd02) mknod(&(0x7f0000000080)='./bus\x00', 0x2000, 0x6d4) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) sysctl$kern(0x0, 0x0, &(0x7f0000000000)="30df20113723ab79090ef54fb5898fcb285fd747af062eae79a1c9411fbefb6b228d7fb5ac15579c0d9fe5d495ab92cb3b6b58ef57970b7c24c0bf31eb3f70b3605b76bc6b6f1afdcae37ef8d054c52fe479ed696f44b6cffc00b2e5826e5bcac1332877fd6f2ccf067c1bb03f2653719f5aae281b58c0629f53094debec9c0101249aed20ff3c2df9", 0x0, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f0000000080), 0x1c, 0x0}, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x3, 0x8e, 0x7f, 0x40000007}, {0x2c, 0xf, 0x3, 0x4006}, {0x6, 0x9, 0x1, 0xfffffff2}]}) r0 = socket(0x18, 0x3, 0x0) ioctl$FIONREAD(r0, 0x8028698c, &(0x7f0000000100)) rename(0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000280)='#', 0x1}], 0x1) setrlimit(0x8, 0x0) r1 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000500), 0x8, 0x0) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc5005601, &(0x7f0000000000)={0x10, 0x2, [{&(0x7f000063f000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0xfffffffffffffffc}, {0x0, &(0x7f0000ffe000/0x2000)=nil}, {&(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x1}, {&(0x7f0000000000/0x800000)=nil, &(0x7f000064c000/0x4000)=nil}, {0x0, &(0x7f0000567000/0x4000)=nil}, {&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x8000000000000000}, {&(0x7f0000ffd000/0x1000)=nil, 0x0, 0x1}, {&(0x7f000037d000/0x3000)=nil, &(0x7f0000002000/0x1000)=nil, 0x1}, {0x0, &(0x7f0000ffa000/0x4000)=nil}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x200000000000}, {&(0x7f0000000000/0x4000)=nil, &(0x7f0000ff9000/0x3000)=nil, 0x8000000000000000}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f00001f1000/0x1000)=nil}, {&(0x7f00004cb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil}, {0x0, &(0x7f0000ffe000/0x2000)=nil}, {&(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil}, {0x0, &(0x7f0000ffd000/0x3000)=nil}], './file0\x00'}) sysctl$kern(0x0, 0x0, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1c, 0x0, 0x0) ioctl$VMM_IOC_INTR(r1, 0xc0285602, &(0x7f0000000040)={0x1, 0x0, 0x1}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1) mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0) ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0xb95e, [{}, {}, {}, {0x0, 0x3}, {}, {}, {}, {}, {0x1, 0x1}, {0x0, 0x1000}, {}, {}, {0x2}, {0x0, 0x9c61}, {}, {}, {0x0, 0x1}, {0x1}, {0x4a0c09a17ced313b}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {0x2}]}) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) sysctl$hw(0x0, 0x0, &(0x7f00000001c0)="0004849d0f3e8095043fa8985d012c00009351023cde4d22f887ee99c61d2f4b37f1c56ee3de43c912e7ddbabfd7f2303116091287b681e70ca8d7a23f", 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETWF(r2, 0x80104277, &(0x7f0000000040)={0x0, 0x0}) write(r2, &(0x7f0000000200)="4afad126f1abed9ee28ee49e24fa1ba1de2ba85cd26234684b0ecb5b28ca2847e2dbfa75129effe9f82b7c4a531cd392c0975f4dbc1f461e3eb5b811c15d07efca5b226f0a334026bce7f17667da88", 0x4f) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0x10000000000000, [{&(0x7f0000753000/0x3000)=nil, &(0x7f00007f5000/0x3000)=nil, 0x7}, {&(0x7f0000ffe000/0x1000)=nil, &(0x7f00007aa000/0x5000)=nil, 0x6}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000095000/0x4000)=nil, 0x20000001}, {&(0x7f0000ffd000/0x2000)=nil, &(0x7f000007d000/0x4000)=nil, 0xfffffffffffffffc}, {&(0x7f000068b000/0x2000)=nil, &(0x7f0000188000/0x2000)=nil, 0x2000000000009}, {&(0x7f00003b7000/0x1000)=nil, &(0x7f0000095000/0x3000)=nil, 0x2}, {&(0x7f000055d000/0x4000)=nil, &(0x7f0000388000/0x1000)=nil, 0xb}, {&(0x7f0000787000/0x3000)=nil, &(0x7f00006e6000/0x3000)=nil, 0x4}, {&(0x7f00000b6000/0x3000)=nil, &(0x7f0000243000/0x4000)=nil}, {&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000261000/0x3000)=nil, 0x51}, {&(0x7f0000245000/0x2000)=nil, &(0x7f0000160000/0x4000)=nil, 0x9}, {&(0x7f000055d000/0x2000)=nil, &(0x7f00001c0000/0x4000)=nil, 0x6}, {&(0x7f0000fed000/0x10000)=nil, &(0x7f0000042000/0x3000)=nil, 0xfffffffffffbfffb}, {&(0x7f0000334000/0x1000)=nil, &(0x7f0000246000/0x2000)=nil, 0x6}, {&(0x7f00003e3000/0x1000)=nil, &(0x7f000059c000/0x3000)=nil, 0x1000039f8}, {&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x500ffffffd}], './bus\x00', 0x3ff}) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x10000000000001}}) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x8) sync() mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 0s ago: executing program 4 (id=747): r0 = syz_open_pts() syz_open_pts() ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f00000000c0)={0x1000, 0x8, 0xfffffffe, 0xfffffff3, "ff0107002015c8a32d00000065c0bdf9c6f04aaf", 0x9, 0x40000}) ioctl$TIOCSTAT(r0, 0x20007465, 0x0) setitimer(0x0, &(0x7f0000000080)={{0x1000000000000, 0x4}, {0x4, 0x6}}, 0x0) sysctl$kern(&(0x7f0000000080), 0x2, 0x0, 0x0, 0x0, 0x35) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) syz_emit_ethernet(0x4a, &(0x7f0000000440)=ANY=[@ANYBLOB="d1b88d2f31beb6444124b71686dd69b6435100143703000000006dd50000000000000000000000000000000000000000ffff"]) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x6) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) r1 = shmget$private(0x0, 0x1000, 0x272, &(0x7f0000ffb000/0x1000)=nil) shmctl$IPC_RMID(r1, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.170' (ED25519) to the list of known hosts. OpenBSD/amd64 (ci-openbsd-multicore-6.us-central1-b.c.syzkaller.internal) (tty00) login: pckbd_enable: command error pckbd_enable: command error             pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error wskbd0: can't attach mux (error=5) WARNING: thread `nfsio' (462744) exits with status -1 WARNING: thread `nfsio' (53590) exits with status -1 WARNING: thread `nfsio' (11748) exits with status -1 WARNING: thread `nfsio' (320308) exits with status -1 kernel: protection fault trap, code=0 Stopped at done_flush+0x38: movl %eax,%dr6