last executing test programs: 6.374534435s ago: executing program 5 (id=339): pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) ioctl$WSDISPLAYIO_LDFONT(r0, 0x8058574d, &(0x7f0000000040)={'./file0\x00', 0x7, 0x7, 0x80000000, 0x0, 0x0, 0x6, 0x6, 0x1, 0x1, 0x5, 0xffffffffffffffff}) (async) ioctl$WSDISPLAYIO_LDFONT(r0, 0x8058574d, &(0x7f0000000040)={'./file0\x00', 0x7, 0x7, 0x80000000, 0x0, 0x0, 0x6, 0x6, 0x1, 0x1, 0x5, 0xffffffffffffffff}) r2 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0) ioctl$WSDISPLAYIO_ADDSCREEN(r2, 0x80245753, &(0x7f0000000100)={0xffff8001, './file0\x00', './file0\x00'}) getpeername$unix(r0, &(0x7f0000000140)=@abs, &(0x7f0000000180)=0x8) (async) getpeername$unix(r0, &(0x7f0000000140)=@abs, &(0x7f0000000180)=0x8) ioctl$WSDISPLAYIO_GETSUPPORTEDDEPTH(0xffffffffffffff9c, 0x4004575c, &(0x7f00000001c0)) chroot(&(0x7f0000000200)='./file0\x00') ioctl$PCIOCGETROM(r0, 0xc0107005, &(0x7f0000000280)={{0xfd, 0xd, 0xe0}, 0x2, &(0x7f0000000240)=[0x0, 0x0]}) ioctl$WSDISPLAYIO_GETSCREEN(r1, 0xc0245755, &(0x7f00000002c0)={0x8001, './file0\x00', './file0\x00'}) ioctl$VT_GETSTATE(r2, 0x40067664, &(0x7f0000000300)) closefrom(r2) (async) closefrom(r2) ioctl$VT_GETSTATE(r0, 0x40067664, &(0x7f0000000340)) socketpair(0x18, 0x4000, 0x5, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000003c0)=@file={0xf, 0x1, './file0\x00'}, 0xa) mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4) ioctl$DIOCGETSYNFLWATS(r0, 0xc0084463, &(0x7f0000000400)) (async) ioctl$DIOCGETSYNFLWATS(r0, 0xc0084463, &(0x7f0000000400)) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000440)={0x4, 0x2, r1}) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000440)={0x4, 0x2, r1}) ioctl$WSDISPLAYIO_DELFONT(r2, 0x8058574f, &(0x7f0000000480)={'./file0\x00', 0x9, 0x7, 0x2, 0x0, 0x37, 0x499309d6, 0x8001, 0x1, 0x0, 0x5, 0x7}) accept4(r1, &(0x7f0000000500)=@in, &(0x7f0000000540)=0x10, 0x0) (async) r5 = accept4(r1, &(0x7f0000000500)=@in, &(0x7f0000000540)=0x10, 0x0) ioctl$DIOCSETSTATUSIF(r4, 0xc0284414, &(0x7f00000005c0)={'./file0\x00', &(0x7f0000000580)=""/63, 0x3ff, 0x7, 0x9, 0xfff}) (async) ioctl$DIOCSETSTATUSIF(r4, 0xc0284414, &(0x7f00000005c0)={'./file0\x00', &(0x7f0000000580)=""/63, 0x3ff, 0x7, 0x9, 0xfff}) ioctl$WSDISPLAYIO_GETSCREENTYPE(r4, 0xc028575d, &(0x7f0000000600)={0x5, 0xabb7, './file0\x00', 0x9, 0x3, 0x2, 0xfffffffe}) ioctl$DIOCNATLOOK(r1, 0xc0504417, &(0x7f0000000640)={@v6=@loopback, @v4, @v4=@multicast2, @v4=@local={0xac, 0x14, 0x0}, 0xfffc, 0x0, 0x404a, 0x5, 0x2, 0x7ff, 0x18, 0x1, 0x2}) mkfifoat(r4, &(0x7f00000006c0)='./file0\x00', 0xe4) ioctl$FIOGETOWN(r2, 0x4004667b, &(0x7f0000000700)) (async) ioctl$FIOGETOWN(r2, 0x4004667b, &(0x7f0000000700)) ioctl$DIOCCLRSTATUS(r0, 0xc0284416, &(0x7f00000007c0)={'./file0\x00', &(0x7f0000000740)=""/98, 0x5, 0xfffffffe, 0x0, 0x200}) (async) ioctl$DIOCCLRSTATUS(r0, 0xc0284416, &(0x7f00000007c0)={'./file0\x00', &(0x7f0000000740)=""/98, 0x5, 0xfffffffe, 0x0, 0x200}) socket(0x20, 0x4, 0xb0) mkdir(&(0x7f0000000800)='./file0\x00', 0x1) shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil) (async) shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil) getsockname$unix(r5, &(0x7f0000000840)=@file={0x0, 0x0, ""/503}, &(0x7f0000000a40)=0x1f9) mkdir(&(0x7f0000000a80)='./file0\x00', 0x9) 6.25580757s ago: executing program 5 (id=342): unveil(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='x\x00') sendto$inet(0xffffffffffffffff, &(0x7f0000000080)="a7ceb8c0b2f73511375f26631c8384ca98bf89a504bec767876717e7819ba3ca0588f350e2f05e7e1078bac6ef43ab8471073110edea8099eb70d0a00531127a3bb38c465f4377095dc42fbfaa21d9074e86710e8050fd21bc409c6282b24194b51bcb86f09871b2b9d69b22305af206b0e9171afd3758161f9b81e529782d1003b690496c65cda6133279ccb3fc7d16b5e810bfe5e3c9ca7db68df7c1cdd624aca6a88da5562e2d1356462ae2bad4e6d330460c3db5f0bbdf481041175aaf47a4dd0111136aca8ef349175583953163", 0xd0, 0x40e, &(0x7f0000000180)={0x10, 0x2, 0x3, 0x8001}, 0x10) r0 = open$dir(&(0x7f00000001c0)='./file0\x00', 0x80, 0xb8) utimensat(r0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={{0x8, 0xa5}, {0x6, 0x5482}}, 0x0) r1 = openat$tty(0xffffffffffffff9c, &(0x7f0000000280), 0x8, 0x0) ioctl$TIOCSTART(r1, 0x2000746e) ioctl$TIOCOUTQ(r1, 0x40047473, &(0x7f00000002c0)) r2 = syz_open_pts() ioctl$TIOCSDTR(r2, 0x20007479) r3 = openat$pf(0xffffffffffffff9c, &(0x7f0000000300), 0x40000, 0x0) ioctl$DIOCGETQUEUE(r3, 0xc148445f, &(0x7f0000000340)={0x8, 0x7, {'\x00', './file0\x00', './file0\x00', './file0\x00', {{0x6, 0x1000}, {0x6, 0x80}, 0x5}, {{0xfffffffffffffff9}, {}, 0xd}, {{0x3, 0x80}, {0x6, 0x1}, 0xfff}, {0x4, 0x6ad, 0x7, 0x7ff}, 0x0, 0xfffffff9, 0xb3e, 0xffffffef, 0xc296}}) pwrite(r1, &(0x7f00000004c0), 0x0, 0x7) chroot(&(0x7f0000000500)='./file0\x00') sysctl$kern(&(0x7f0000000540)={0x1, 0x17}, 0x2, &(0x7f0000000580)="24720675c6112ca6f7e6571647ce4b", &(0x7f00000005c0)=0xf, &(0x7f0000000600)="ea527e75948182ae7f52e149cc2bc538aa88575f7f4ee5a33dbcc84490a1f555fcebca6269075e3464786949fe4a35535c01c8caf4627c17da206e209126dcb6e8055885e3500ad8eae3c0c6409a9e4935f57a1b8565c39a7988651fab1170b1be7b3c735ec3fe41ff800071ced1ed496df9f1d66a48b6d66647899eba417b64588a1187cb18d926ceb85b26ff27e3641e0ff543b7b6a92a914e8ca0b0b172af", 0xa0) setrlimit(0x3, &(0x7f00000006c0)={0x100000, 0xff}) sysctl$kern(&(0x7f0000000700)={0x1, 0x50}, 0x2, &(0x7f0000000740)="ed3dc93a4de0f00fa3b95dbcd1cbfb3ae6ce60d6628a3350d31cabd550130703e5bb7702155f0b633ef6d0102d534614a01fbdd819a13e658e039fd292ff93dcc5c10b847d108005447917dcd20e8eb3e28a632c9131babfa7797b852458146fbaa6979b5cd85223661d7c116bd216b1856e62acda3ac70b0c4a1522b539939b95eb9bd93f2cd60f8692c63f0c776738c511d40bbe08dfe739acfee6b76b5ebcc50ea62ad39956667de78aa60fd5ba4a3db4ae682391db5e173f4b221b2d239d625652af484f94b9bb4fdd6ef22edfcd5f7b34e9", &(0x7f0000000840)=0xd4, &(0x7f0000000880)="83ac6eda3206809ed867d608846c1cd196461ee05a98df50f5b238532e0e69ec7000feafe6f39f502167816446cf4a15734721e2a2978ec298c334867f7521a52ba23de798", 0x45) ioctl$TIOCFLUSH(r2, 0x80047410, &(0x7f0000000900)=0x1) r4 = getppid() ktrace(&(0x7f0000000940)='.\x00', 0x0, 0x220a, r4) ioctl$FIONBIO(r2, 0x8004667e, &(0x7f0000000980)=0x944) chroot(&(0x7f00000009c0)='./file0\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r5, &(0x7f0000001e80)={&(0x7f0000000a40)=@abs={0x9, 0x1, 0x0, 0x1}, 0x8, &(0x7f0000001dc0)=[{&(0x7f0000000a80)="3e4142691390c55d05a10ab1ad05e524bd669dd9958a729cafd8af6352", 0x1d}, {&(0x7f0000000ac0)="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", 0x1000}, {&(0x7f0000001ac0)="5c897c9705302978a2a1e35b5b31493254250ba13a0bdd29eb8238e6497e7907481de767acfd6c0dd7fd8851c7a234b954845ff5f0d46cb2375e9ce8021ed4f88d09ca52d48d148c37bb3d557121c673339fb917e86ef215c7923557a12621566c5af1811c7056ba4914a8d9afba7cb6c84b1adac8d642bdb26ef0f83e1b87e2d2b65d73f09dcfaf94bb9b3c275400a11bb86521cbba3b3f6a645b6cec5944d41e8179bca2bf1097351a159c08855a968bbe926f54074f6ddd9f14d9c65562e1d6fd95d6a56878689029c429", 0xcc}, {&(0x7f0000001bc0)="152c0db7fd26a4706c7eb3a859199084d9fc2970854ddf13ac69feb5dabb2d281f118e58a729689e93f9807f119e99e27151411c89dd6f78c23159f448fabe3db23aa259c0055d73768b39dea3a47232abf53c123ca72b68e0e5607c933a567c28b963e6b70c", 0x66}, {&(0x7f0000001c40)="152d48e39b40b49e7bbef7cec093c851e8f7e5660067fb247809e3b6f6c6e5a06c9a1540b416d76207c1cd47292f801acfe3cfdcbbf7341004e54d4e42199d9bcce4fef55efbe92c6afcdb2cd318ded5652bbb", 0x53}, {&(0x7f0000001cc0)="13010cc45b64a6e4fb0ed7aed6c58a30ec6d41", 0x13}, {&(0x7f0000001d00)="e9a93c642452e76b2a84c6dd14a605f5a7d78e9681951b89822793ed87f9f8ba2cb8d7e9ecc68b6e76b95aa13550243e1b4a05beb7b19fdcbe001ea66f3d6b2f133748d4c5ab759de74ee2bd8f69a9abbf4f12999909d09f529e0543d3bf47cfec75c23661f049a83eb8606f2b9c5d5c0d0779749ba47ff13f6a5e659b15cc0176a9702dfd00d88b0fd8afb17ffeb53c82d233809c3d7c85ffd1ed6138e7c33ff1474cd13cdad0aa14", 0xa9}], 0x7, &(0x7f0000001e40)=[@rights={0x1c, 0xffff, 0x1, [r0, r3, r0, r3]}], 0x1c, 0x404}, 0x3) getrlimit(0x0, &(0x7f0000001ec0)) chflagsat(r0, &(0x7f0000001f00)='./file0\x00', 0x0, 0x2) pipe(&(0x7f0000001f40)) fstat(r5, &(0x7f0000001f80)) r6 = openat$bpf(0xffffffffffffff9c, &(0x7f0000002000), 0x400, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0xa010, r6, 0xfffffffffffffffe) preadv(0xffffffffffffff9c, &(0x7f0000002100)=[{&(0x7f0000002040)=""/153, 0x99}], 0x1, 0xb) 6.250948341s ago: executing program 5 (id=344): r0 = msgget$private(0x0, 0x1ba) msgrcv(r0, 0x0, 0x0, 0x3, 0x1000) msgctl$IPC_RMID(r0, 0x1000000) msgrcv(r0, &(0x7f0000000000)={0x0, ""/199}, 0xcf, 0x1, 0x1000) getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000180)={0x0, 0x0}, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$sock_cred(r3, 0xffff, 0x1022, &(0x7f0000000580)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, r4}}) r5 = getpid() ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x510, r5) getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f00000001c0)={0x0}, 0xc) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000200)={{0x0, r1, r2, r4, 0xbb, 0x8, 0x0, 0x0, 0xfffffffffffffffa}, 0x0, 0x0, 0xe, 0x4, 0xfffffffffffff77f, r5, r6, 0x9, 0x0, 0xffffffffffffe1b6, 0x0, 0x10}) 2.56916308s ago: executing program 5 (id=384): r0 = semget$private(0x0, 0x1, 0x7) semctl$SETALL(r0, 0x0, 0x9, &(0x7f0000000000)=[0x7, 0x401, 0x40, 0x40]) 2.526649134s ago: executing program 5 (id=391): r0 = socket$inet(0x18, 0x3, 0x102) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x7, 0x33, 0x80, 0x5}, {0x5, 0x3b, 0x8}, {0x6, 0x81, 0x4, 0xfffff806}]}) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000080)={'tap', 0x0}) syz_emit_ethernet(0x1000e, &(0x7f00000015c0)=ANY=[]) sendmsg(r0, &(0x7f0000000240)={&(0x7f0000000280)=@in6={0x1c, 0x18, 0x1, 0x7, "00000000000000000000040000000001", 0x101}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000040)="630c00000000119a8c51f6f2efa24a85abdd612dd68e59adfebb93232d44372e9bc47e84f7c477d2", 0x28}], 0x1, 0x0}, 0x0) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4) r2 = semget(0x0, 0x1, 0x281) semctl$IPC_SET(r2, 0x0, 0x1, 0x0) semctl$SETVAL(r2, 0x3, 0x8, 0x0) semctl$GETPID(r2, 0x1, 0x4, &(0x7f00000002c0)=""/241) 2.499013176s ago: executing program 5 (id=395): r0 = dup(0xffffffffffffff9c) ioctl$TIOCSTSTAMP(r0, 0x8008745a, &(0x7f0000000000)={0x3}) (async, rerun: 32) r1 = openat$tty(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) (rerun: 32) ioctl$TIOCSETD(r1, 0x8004741b, &(0x7f0000000080)=0x8) (async) r2 = socket$unix(0x1, 0x1, 0x0) (async) openat$klog(0xffffffffffffff9c, &(0x7f00000000c0), 0x10000, 0x0) (async) r3 = socket$inet(0x2, 0x4, 0x1) ppoll(&(0x7f0000000100)=[{r3, 0x8}, {r2}, {r2, 0x40}], 0x3, &(0x7f0000000140)={0x9, 0x2}, 0x0) execve(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)=[&(0x7f00000001c0)='#&](.\x00'], &(0x7f0000000280)=[&(0x7f0000000240)='+\x00']) (async) socketpair(0x10, 0x4000, 0xb, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setstatus(r5, 0x4, 0xa3ecbe469478c132) (async) r6 = openat$audioctl(0xffffffffffffff9c, &(0x7f0000000300), 0x10000, 0x0) (async, rerun: 32) execve(&(0x7f0000000340)='./file0\x00', &(0x7f0000000500)=[&(0x7f0000000380)='(^*\xa4:^\x00', &(0x7f00000003c0)='\\&*-\x00', &(0x7f0000000400)='/dev/klog\x00', &(0x7f0000000440)='\x00', &(0x7f0000000480)='/dev/audioctl\x00', &(0x7f00000004c0)='-d${([##,\\\x00'], &(0x7f0000000600)=[&(0x7f0000000540)='+\x00', &(0x7f0000000580)='+\x00', &(0x7f00000005c0)='/dev/klog\x00']) (rerun: 32) setuid(0x0) (async) ioctl$TIOCSETVERAUTH(r1, 0x8004741c, &(0x7f0000000640)=0x401) sendmmsg(r5, &(0x7f0000000d00)={{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000680)="2cfe469b8374978bb813390f5ebdc7a0ac5bbb", 0x13}, {&(0x7f00000006c0)="07474b8e8ddc56c51bf5dcc1b101c60c772c41e5e9bed74173acc8e496f437b7d625891da54ee7d3c80da34f927be61c39bc63cfd09b4ff56483c3a9ac41bd7a77f67f3ab698c5c3502d10ba42b770118e42d63d3dddce51a6decd54e433ca4e9ac1993ed9fda1b54339d02fe506f3e368d161afde94acc9eb52b6855af78f70210582b3352757c8f8b329f03ab37c9e5f29832b3a1ea98c4c53413c7b8be2f8891b6f5bd41255d1c6c4aad87cc1bf4f2e6e5cf8fe1425fa4eec688f55ba9459b81fd88c8071ac1d0d7696c302c1de28c3138ca1b28a6dc08855097a3481ce8ef48558b4121b14fe6af73dce20", 0xed}, {&(0x7f00000007c0)="00a9b8985896020836e3cc8b3c76dd874fd8e501f4c6ca01afaf1b21e508a1b51e8135e4fe97cf970683e2143b4b70ebf179b98c32c1edcd1c6c2493a62bb03afa939acc05c3d4b1119a7a05ffeb8cf662518988e3a10b96b2f2ee1186e244979c68f4aded167ee9b10f462f81eb4a1ce8a9e6273ae170ef9500d51c9c2604125475fedeb66f564a7e453f18446759f0d07efe7142e2107b7954939d573efafc9a4f2fd4857b032a517fa4dcc06bcf59f47db808f1bde4d100f999226821f8b7a1c1363e616f2e34e448f75d256f6ca7c888e903f9bfffde2081110d77", 0xdd}, {&(0x7f00000008c0)="b7376bbc4e46fa82cb3654ed9965218b99bc936c35511e7db3c0d78bb4222e17b0248562dd76ebccf67835b88a36c43db7c97ff76cb1cfb38c13fa6601478d11095d285a6b2fccda26cf6f477e05a52af8b53094f63668aeba4f824da9ac88e72cd3a5fd66b2cc3fce063f654909996d1c78e689dfb498a6c43d98c0a1826024811a64c397425fd2365f4eaa80f5cf4bdee7f7828943db99de8dd0f73048f8c148298fcfe51123e49c5ee56b11d3dddb38de92a42c9d431e572294d1932b8392ac334ecf0c92d774ff3dfd40de14b971f2", 0xd1}, {&(0x7f00000009c0)="6c4b3e5457613ae694317d5e9bcabbf5e6c00f8aafcd4d7e55327092783aff103b0224716eb578dc641952d5792937c898a588ea30d7076b0407c7b5d739eaa0e4a50ff335f5278ea0150480b41ce8ce8adfdd6bd0f5fc5216961bb832208059743248b290a150b2794a86f2ab14c27e0b92ab1e9ff5a24f2195a04631e1eaa9cb184dda51bd9271095c2d693e8556e21f64f6f104c3c9b7cf773a7d6c8488b7187ab037370cd4608ed2e79a17d5103e20e1bcce8a91c9d5377e0aaffc671b598962430e82528134b221abeecd14cbf51a59dbe21cc0a10c43a033e93b01b6c191d3df3f50c0", 0xe6}, {&(0x7f0000000ac0)="c20ed76ed2aa9768014f54b9d22794bd2021e5e436bb327018288a67ed4f842223ac55dae7c776fdeb34ef649e90bcd1de4d650882f2f5d657afa48b85eae9a45945c4077718b67f914da3b7adcdbd43be092354779a79aaa921023fc4745eaafe036204070d701ce8d06073d9d1e7fa706ff9fd6c25d98c6eb0dd646a1764740f4dbd79695ee1c8a3662cfb87ff7621e6f24e7a9517", 0x96}], 0x6, &(0x7f0000000c00)=[{0x74, 0xffff, 0x4, "587d9d9e38efc69a1811a5aa2bd72ae8c726d1f18c333de2a9b2db4f7edafd8feba2f1e7652e0447a7af6cc45f96520f9e6396cc7df0ef9449e185f8ca1cc490130d24c28788563c6adef299ff39584ba4a3fda9c22b820895319f0e4bb9cb885fbde0ff1c745e"}, {0x64, 0x1, 0x40, "5c894c00a813925193c8161d44a30049f95374d0ea5fe9b698cf7af26e8a3dd16950bad984127d3495c104caa0968f9752d807f93b4b0270f1fbbd81347da39a1c4553c3b0a5c54b7f61e8c751b556a247a70c821e"}], 0xd8}}, 0x38, 0x0) (async) getsockopt$sock_cred(r5, 0xffff, 0x1022, &(0x7f0000000d40), &(0x7f0000000d80)=0xc) mkdir(&(0x7f0000000dc0)='./file0\x00', 0x1) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2) (async) open$dir(&(0x7f0000000e00)='./file1\x00', 0x8, 0x0) (async) ioctl$TIOCSCTTY(r0, 0x20007461) (async) r7 = dup(r4) ioctl$WSMUXIO_LIST_DEVICES(r7, 0xc1045763, &(0x7f0000000e40)={0x6, [{0x1, 0x7}, {0x2, 0x1}, {0x3, 0x4}, {0x3}, {0x3, 0x22}, {0x1, 0x200}, {0x3, 0x1}, {0x3, 0x4}, {0x1, 0x6}, {0x2, 0x5}, {0x1, 0x7}, {0x2, 0x5b06}, {0x1, 0x8}, {0x3, 0x1}, {0x2, 0x9}, {0x1, 0xa8}, {0x1, 0x7}, {0x3, 0x883}, {0x3, 0x6e}, {0x2, 0x4}, {0x1, 0x5}, {0x2, 0x5}, {0x3, 0x5}, {0x3, 0x3}, {0x3, 0xfffeffff}, {0x2, 0xdf}, {0x2, 0x8}, {0x7, 0x8}, {0x1, 0x7}, {0x3, 0x1}, {0x3, 0x7}, {0x1, 0x7}]}) (async) socket$inet6(0x18, 0x3, 0x0) (async, rerun: 64) ioctl$FIONBIO(r6, 0x8004667e, &(0x7f0000000f80)=0x2) (async, rerun: 64) socket(0x20, 0x1000, 0x9) (async, rerun: 64) link(&(0x7f0000000fc0)='./file0\x00', &(0x7f0000001000)='./file1\x00') (async, rerun: 64) mknod$loop(&(0x7f0000001040)='./file0\x00', 0x6000, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001080)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r8, &(0x7f00000010c0)="b12cec40e169", 0x6, 0x3, &(0x7f0000001100)=@abs={0xd, 0x0, 0x0, 0x3}, 0x8) 2.068041569s ago: executing program 3 (id=429): r0 = kqueue() r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x200, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000840), 0x200, 0x0) read(r2, 0x0, 0x0) kevent(r0, &(0x7f0000000180)=[{{r1}, 0xffffffffffffffff, 0xa1, 0x2, 0x0, 0x1}, {{r0}, 0xffffffffffffffff, 0x17, 0x80000000, 0x3ac, 0xa}], 0x8c0, 0x0, 0x0, 0x0) kevent(r0, 0x0, 0x0, 0x0, 0x653, 0x0) kqueue() (async) open$dir(&(0x7f0000000040)='./file0\x00', 0x200, 0x0) (async) openat$audio(0xffffffffffffff9c, &(0x7f0000000840), 0x200, 0x0) (async) read(r2, 0x0, 0x0) (async) kevent(r0, &(0x7f0000000180)=[{{r1}, 0xffffffffffffffff, 0xa1, 0x2, 0x0, 0x1}, {{r0}, 0xffffffffffffffff, 0x17, 0x80000000, 0x3ac, 0xa}], 0x8c0, 0x0, 0x0, 0x0) (async) kevent(r0, 0x0, 0x0, 0x0, 0x653, 0x0) (async) 1.009213978s ago: executing program 3 (id=436): r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETA(r0, 0xc0284457, &(0x7f00000000c0)={0x7fffffff, 0xfffffff6, 0x1000, 0x1, "080000000000000000010000f000", 0xfffffffe, 0x5}) mknod(&(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1d02) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f00000001c0), 0x8000, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000000)={0x3, &(0x7f0000000080)=[{0x3, 0x4, 0x80, 0x8}, {0x14, 0x9e, 0x23, 0x3}, {0x9b1e, 0x7, 0xff, 0x200000}]}) syz_extract_tcp_res(0x0, 0xa93f, 0xfff) chmod(&(0x7f0000000040)='.\x00', 0x35e) setegid(0xffffffffffffffff) setregid(0x0, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) sysctl$kern(&(0x7f0000000040)={0x1, 0x53}, 0x2, &(0x7f0000001940), &(0x7f0000000100)=0xffffffffffffff90, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000200)=ANY=[@ANYBLOB="03000000000000009078ffffffffac1400aa030390780008000045aa000400660ecd043b0ab7e00000020300000062a89b2e95a392988d52ac9f353757646e76e9af6becd2794878368ba8223995fdba0ec017cc8b35a8d974a5b947253c4bfc71a2a3d3fc93a7dcffd6d3c8f22196403dc5d154cd0dec23fba4381298b390a9d48517454ff53e04256772fd10d25c032a2be7dc0e9c12985d22447ace5a19bfcb32c5dbe4b9d7474f8043e071ced0de7cf0bafd3cf18197ac73d7e0c4d16ed197b96c4709a552c70ab071134a875dffa66d498545ca0a6adbe5afbecd41853f1cba32c4b57e43816ec29b221d0e8538"]) rename(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 894.685616ms ago: executing program 2 (id=444): r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x10, 0x0) ioctl$TIOCSETAF(0xffffffffffffffff, 0x802c7416, &(0x7f0000000180)={0x806378, 0xb, 0x40, 0x800104, "bb00c30000ec2d0a436079c10d00000900", 0x8f4c, 0x107}) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = socket(0x18, 0x3, 0x4) setsockopt(r1, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) sendmsg(r1, &(0x7f0000000240)={&(0x7f0000000280)=@in6={0x1c, 0x18, 0x1, 0xfffffffd, "00000000000000000000000000000001", 0x101}, 0x1c, 0x0, 0x0, 0x0}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = openat$tty(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) mknod(&(0x7f0000000480)='./bus\x00', 0x2000, 0x412dff) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) readv(r3, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4117, 0x1015}, {&(0x7f0000002540)=""/4118, 0x1016}], 0x2) ioctl$VMM_IOC_WRITEREGS(0xffffffffffffffff, 0x82485608, &(0x7f0000000100)={0xa7, 0x300, 0x0, {[0x5, 0x802, 0xffffffffffffffd, 0x1, 0xc, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffb, 0xfffffffffffffffb, 0x1], [0x63, 0x5, 0x4, 0x10000, 0x0, 0x7, 0x5, 0x0, 0x80000000, 0xfffffffffffffff8], [0x7fffffffffffffff, 0x8, 0x0, 0x0, 0x9, 0x6], [0xdb9d, 0x0, 0x0, 0x165, 0x0, 0xb], [{0x0, 0x10, 0x0, 0x8000000000000}, {0x0, 0x0, 0x6, 0x2}, {0x1000, 0xa, 0x0, 0x1}, {0x0, 0x1000, 0xfffd, 0x1}, {0x0, 0x0, 0xc8, 0x7ffffffffffffffe}, {0x9, 0x5, 0x0, 0x5}, {0x0, 0x0, 0xaa, 0x101}, {0x0, 0xfffffff5, 0xc00000, 0x8}], {0xffeb, 0xfffffffd, 0x20000003, 0xf5a752c}, {0x0, 0x6, 0x10000000}}}) open$dir(&(0x7f00000000c0)='./file0\x00', 0x200, 0x1c6) socket$unix(0x1, 0x1, 0x0) setrlimit(0x1, &(0x7f0000000240)={0xad, 0x1fd}) r4 = getpid() setgroups(0x0, 0x0) ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x510, r4) setuid(0xffffffffffffffff) r5 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) ioctl$FIONREAD(r5, 0x4004667f, &(0x7f0000000340)) ioctl$DIOCGETSTATES(r5, 0xc0104419, &(0x7f00000006c0)={0x3, &(0x7f0000000380)=[{0x0, ""/16, [{[@v4=@rand_addr, @v4=@multicast1]}, {[@v4=@loopback, @v6=@remote]}], {}, {}, @v6=@remote}, {0x0, ""/16, [{[@v6=@local, @v6=@local]}, {[@v6=@empty, @v6=@local]}], {}, {}, @v6=@loopback}, {0x0, ""/16, [{[@v6=@loopback, @v4=@local]}, {[@v6=@ipv4={""/10, ""/2, @local}, @v4=@multicast2]}], {}, {}, @v6=@local}]}) poll(0x0, 0x0, 0x0) closefrom(r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) writev(0xffffffffffffffff, &(0x7f0000000280)=[{0x0}], 0x1) utimensat(0xffffffffffffffff, 0x0, &(0x7f0000000180)={{0xfffffffffffffffe, 0xffffffffffffffff}, {0x0, 0xfdffffff}}, 0x2) ioctl$TIOCSCTTY(r2, 0x20007461) 824.323609ms ago: executing program 2 (id=448): r0 = getpid() (async) r1 = syz_open_pts() ioctl$TIOCSCTTY(r1, 0x20007461) (async) r2 = fcntl$getown(r1, 0x5) (async) r3 = syz_open_pts() setsid() (async) ioctl$TIOCSCTTY(r3, 0x20007461) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(0xffffffffffffffff, 0xc01064ac, &(0x7f0000000100)={0x0, 0x49, &(0x7f0000000080)=""/73}) ioctl$TIOCGTSTAMP(0xffffffffffffff9c, 0x4010745b, &(0x7f0000000180)) (async) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r3, 0xc01064ac, &(0x7f0000000140)={r4, 0x0, 0x0}) (async) ioctl$FIOSETOWN(r3, 0x8004667c, &(0x7f0000000000)=0xfffffffd) (async) r5 = open(&(0x7f0000000040)='./file0\x00', 0x200, 0x1) fcntl$setown(r5, 0x6, r2) setpgid(r0, r2) 728.570143ms ago: executing program 3 (id=454): mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e60) r0 = socket(0x18, 0x1, 0x0) setsockopt(r0, 0x6, 0x8, &(0x7f0000000040)="ebffcbff", 0x4) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) pread(r1, 0x0, 0x0, 0x5) accept4(r0, &(0x7f0000000240)=@in6, &(0x7f00000002c0)=0x1c, 0x6000) accept$unix(r0, 0x0, &(0x7f0000000000)) ioctl$DIOCKILLSTATES(0xffffffffffffffff, 0x0, &(0x7f0000000d40)={{0x643, 0x9e}, 0x18, '\x00', 0xfffffffc, {@any={'\x00', 0x0, 0x1, 0x8}, [0x5, 0x7], 0x3, 0x6, 0x4}, {@addrmask={@v6=@mcast1, @v4=@local={0xac, 0x14, 0x0}, 0x0, 0x0, 0x8}, [0x0, 0xf3c], 0x0, 0x8, 0x1}, './file0\x00', './file0\x00', 0x6, 0x1}) r2 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, 0x0) ioctl$TIOCSETA(r2, 0xcd604404, &(0x7f0000000080)={0x1, 0x2, 0x87a, 0x2f, "2000030000000000000000000068a95a010400", 0x6, 0x2}) sysctl$hw(&(0x7f00000000c0)={0x7, 0xd}, 0x2, &(0x7f0000000200)="749b3e32", &(0x7f0000000180)=0x4, 0x0, 0x0) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x200, 0x4c) r4 = socket(0x18, 0x1, 0x0) getsockopt(r4, 0x6, 0x8, 0x0, 0x0) r5 = accept4(0xffffffffffffff9c, &(0x7f0000000300)=@in, &(0x7f0000000340)=0x10, 0x8000) dup2(r5, r1) ioctl$WSMOUSEIO_SCALIBCOORDS(r3, 0x81205724, &(0x7f0000000100)={0x1, 0xffffaf35, 0x7f, 0x5, 0x80000001, 0x7fbffffd, 0x5, 0x10, [{0x10000000, 0x40, 0x3, 0x3}, {0xfffffff3, 0xfffffffe, 0x9, 0x2}, {0x20007, 0x8000b86, 0xffffff79, 0x9}, {0xa, 0x6, 0x2, 0x200}, {0x42, 0x8, 0x2, 0x800007}, {0x20002, 0x8, 0x8, 0x95}, {0xcdf, 0xdf61, 0x200004f8, 0x10}, {0x8, 0xf, 0x5, 0x8d}, {0xfffffffd, 0xe2b5, 0x40000003, 0x6}, {0x4, 0x2d1, 0x410001, 0x1ff}, {0x1e7, 0x400fff9, 0x927c, 0x4}, {0x1016, 0x25, 0x9, 0x2d0b}, {0x3, 0x4f6, 0x80000001, 0x408}, {0x29a71718, 0x4, 0x3, 0x2579}, {0x0, 0xf8f, 0x8}, {0x1, 0x800bd3d, 0xf778, 0x8}]}) r6 = openat$bpf(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0) ioctl$BIOCSETIF(r6, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSETF(r6, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000600)=[{0x28, 0x1, 0x2, 0x5}, {0x7, 0x5, 0xf4, 0xf}, {0x9b1e, 0x3, 0xf4, 0x2}]}) syz_emit_ethernet(0x1000e, &(0x7f00000015c0)=ANY=[]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r3, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r3, 0x80044403, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0}) socket$inet(0x2, 0x8000, 0x102) 719.701334ms ago: executing program 3 (id=458): setrlimit(0x8, &(0x7f0000000440)={0x45, 0x56}) r0 = syz_open_pts() r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e60) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x200, 0x4c) ioctl$WSMOUSEIO_SCALIBCOORDS(r2, 0x81205724, &(0x7f0000000100)={0x1, 0xffffaf35, 0x7f, 0x5, 0x80000001, 0x7fbffffd, 0x5, 0x10, [{0x10000000, 0x40, 0x3, 0x3}, {0xfffffff3, 0xfffffffe, 0x9, 0x2}, {0x20007, 0x8000b86, 0xffffff79, 0x9}, {0x73f0, 0x6, 0x2, 0x200}, {0x42, 0x8, 0x2, 0x800007}, {0x20002, 0x8, 0x8, 0x95}, {0xcdf, 0xdf61, 0x200004f8, 0x10}, {0x8, 0xf, 0x14, 0xe}, {0xfffffffd, 0xe2b4, 0x40000003, 0x6}, {0x4, 0x8a, 0x410001, 0x1ff}, {0x1e6, 0x400fff9, 0x927c, 0x4}, {0x1016, 0x25, 0x9, 0x2d0b}, {0x3, 0x2, 0x80000001, 0x408}, {0x29a71718, 0x4, 0x3, 0x2579}, {0x0, 0xf8f, 0x8, 0x6}, {0xfffffffd, 0x800bd3d, 0xf778, 0x8}]}) ioctl$VNDIOCSET(r2, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$DIOCRSETTFLAGS(r1, 0xc450444a, &(0x7f0000000680)={{'./file0\x00', './file0\x00', 0x0, 0xfa}, 0x0, 0x428, 0x0, 0x0, 0x3, 0x1, 0x2, 0x2, 0x10001}) close(r0) r3 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_cred(r3, 0xffff, 0x1024, &(0x7f0000000480)={0x0}, &(0x7f0000000580)=0xc) ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x0, 0xb3f, {[0x7, 0x0, 0x8, 0x100200000, 0x8, 0x8, 0xdf60, 0xfffffffffffffffe, 0x0, 0x2f01, 0x101, 0x3, 0xffffffffffffffff, 0x200000000002, 0xf, 0x4, 0xfffffffffffffffe, 0x8000000000000001], [0xfffffe0000000002, 0x80000001, 0x1, 0x525, 0x6, 0x200000000207b98, 0x80000000000001fe, 0x0, 0x0, 0x8], [0x100000001, 0x8000, 0x3ffffffe, 0x0, 0xb, 0x11004, 0xffffffff00000001], [0x1, 0x1fffffffffb, 0x7ffffffffffffffc, 0x100000000, 0xfffffffffffffffe, 0x1], [{0x0, 0x0, 0x0, 0x7d02}, {0x8, 0x22, 0x5, 0xffffffbffffffff9}, {0x4, 0x4, 0xfffffffe, 0x80}, {0x2, 0xd, 0x5, 0xffffffffffffffff}, {0x0, 0x2, 0x207f, 0xb}, {0x0, 0x100009, 0xe7, 0x2000000000000002}, {0x7f, 0x0, 0xfffffff9}, {0x0, 0x100, 0x0, 0x8}], {0x1, 0x5, 0x2, 0x3}, {0xfbfe, 0x6811, 0x6d9, 0x4}}}) r5 = kqueue() kevent(r5, &(0x7f0000000000), 0x3ff, 0x0, 0x8000800, 0x0) kill(r4, 0x13) r6 = syz_open_pts() ioctl$FIOASYNC(r0, 0x80047466, &(0x7f0000000200)=0x5) ioctl$TIOCCBRK(r6, 0x2000747a) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x8, 0xffffffffffffffff, 0xfffffffffffffffd, 0x800, 0x181c, 0xa, 0x2}, 0x0, 0x0, 0x0) r7 = kqueue() kevent(r7, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x9, 0x0) kevent(0xffffffffffffffff, 0x0, 0x1, 0x0, 0xb19, 0x0) sysctl$hw(&(0x7f0000000000)={0x6, 0x13}, 0x2, &(0x7f0000000080), 0x0, 0x0, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6381) r8 = open(&(0x7f0000000080)='./file0\x00', 0x2, 0x88) ioctl$FIONBIO(r8, 0x82907003, &(0x7f0000000140)=0x2) ioctl$FIONBIO(r8, 0xc0307004, &(0x7f0000000140)=0x1) setresuid(0xee00, 0xee00, 0x0) 674.464991ms ago: executing program 3 (id=460): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1, &(0x7f0000000080)=0x4, 0x4) (async) bind$inet(r0, &(0x7f0000000000)={0x10, 0x2, 0x3}, 0x10) (async) listen(r0, 0x7fff) syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x3d, 0x28, 0x67, 0x0, 0x0, 0x6, 0x0, @multicast1, @local={0xac, 0x14, 0x0}}, @tcp={{0x2, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x8200, 0x0, 0xfffc}}}}}}) (async) syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x3d, 0x28, 0x67, 0x0, 0x0, 0x6, 0x0, @multicast1, @local={0xac, 0x14, 0x0}}, @tcp={{0x2, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x8200, 0x0, 0xfffc}}}}}}) (async) mkdir(&(0x7f0000000180)='./file0\x00', 0x80) (async) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) rename(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000003c0)='./file0/file0/../../file0\x00') (async) access(&(0x7f0000000200)='./file0/file0/../../file0/file0\x00', 0x1) 583.58228ms ago: executing program 3 (id=463): openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) (async) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x19, 0x0) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) close(r1) r2 = socket(0x2, 0x1, 0x0) connect$unix(r2, &(0x7f0000000000), 0x10) shutdown(r1, 0x0) (async) setsockopt$sock_int(r1, 0xffff, 0x1023, &(0x7f00000004c0)=0x200, 0x4) (async) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0xfffffff9, 0x6, 0x5, 0x181, 0x1, 0x1, 0x3, 0x10, [{0x20005, 0xfe3, 0xffffff26, 0x71800}, {0x1, 0xb7fe, 0xf, 0x7}, {0x100004, 0x4, 0x1fc000, 0x2}, {0x274, 0x9, 0x200, 0xfffffffb}, {0x4, 0x3, 0xe, 0x7}, {0x2000002, 0x20048000, 0x5, 0xff}, {0x80000000, 0xbffffff5, 0x4, 0x6d}, {0x99d, 0x8, 0xfded, 0x4}, {0x80f, 0x44c7, 0x1, 0x8000}, {0xfffffc00, 0x0, 0x10001, 0x1}, {0x800, 0xfff8, 0x2, 0xe1}, {0x8000, 0x5, 0x8, 0x8}, {0x2000df, 0x9, 0x5, 0x3ff}, {0x8000, 0x0, 0xffff0001, 0xfffffff8}, {0x2, 0x5, 0x172000, 0x2000b}, {0x81, 0xf3, 0x7, 0x4}]}) (async) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) (async) r3 = socket(0x18, 0x3, 0x0) ioctl$FIONREAD(r3, 0xc0106924, &(0x7f00000001c0)) (async) ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file0\x00', 0x938, 0x20800c1, 0xf, 0x0, 0x1040807, 0x10050001, 0xfffffffe, 0x2, 0x2, 0xd, 0xf5fffffffffffff9}) (async) r4 = socket(0x18, 0x3, 0x0) ioctl$FIONREAD(r4, 0x8080691a, &(0x7f0000000100)) (async) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x0) r5 = open(&(0x7f0000000240)='./file0\x00', 0x70e, 0x24) ioctl$TIOCSETA(r5, 0x802c7414, &(0x7f0000000080)={0x3, 0xffffffff, 0x200, 0x8623, "0100012d29fb000700000000098002005e00", 0x4}) (async) ioctl$FIOGETOWN(r5, 0x4004667b, &(0x7f0000000040)) (async) msgctl$IPC_RMID(0xffffffffffffffff, 0x0) 513.962595ms ago: executing program 2 (id=468): msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x8001, 0x0, 0x0, 0x0, 0x0, 0x85, 0x48e}, 0x5, 0x4, 0x800000000000000, 0x5, 0x100000005, 0x4000000000003, 0x0, 0x40000200000002}) r0 = kqueue() r1 = socket(0x24, 0x2, 0x6) r2 = openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) ioctl$DIOCADDQUEUE(r2, 0xc148445d, &(0x7f0000000180)={0x9, 0x8, {'\x00', './file0\x00', './file0\x00', './file0\x00', {{}, {0xd3a5, 0x1}, 0x7000000}, {{0x4, 0x8}, {0x85, 0x3}, 0x3}, {{0x1, 0x80000}, {0x6, 0x3}, 0xfffffff7}, {0x6, 0xd, 0x80000001, 0xfffffff3}, 0x0, 0x33f, 0x80, 0xb, 0x4}}) sendmmsg(r1, &(0x7f0000000140)={{&(0x7f0000000000)=@in6={0x1c, 0x18, 0x2, 0x6, "450a93157bdc3752559c60a171000b1b", 0x5}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=[{0x10, 0x1, 0x6, "092d1b"}], 0x10}}, 0x38, 0x8) kevent(r0, &(0x7f0000000040), 0x10100, &(0x7f00000001c0), 0x642705db, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000b40)="825a4f47c21e6ed7eda0f5903abf65b18d7c51f78b06ccffb40500000000000000000000fafd3493776665d4cd12c63d34", 0x31}], 0x1, 0x0, 0x0, 0x6}, 0x2) r3 = openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) ioctl$TIOCSETA(r3, 0xc4504449, &(0x7f0000000740)={0x0, 0x0, 0xfffffffd, 0x0, "5b2038e9ff4855b4ebb178926cc9795a6b47c1f1", 0x80000000, 0x2}) 431.749111ms ago: executing program 2 (id=470): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket(0x18, 0x2, 0x0) setsockopt(r0, 0x2c, 0x3e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x0) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f00000000c0), 0x20, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000680)={0x3, &(0x7f0000000040)=[{0x84, 0x10, 0xe, 0x7}, {0x4, 0x40, 0xff, 0x1000}, {0x6, 0x1, 0xe, 0xffffffff}]}) syz_emit_ethernet(0x1000e, &(0x7f0000000080)=ANY=[]) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) setsockopt(r0, 0x1000000000029, 0x9, &(0x7f0000000040)="03000000", 0x4) r2 = dup2(r0, r0) sendmmsg(r2, &(0x7f0000000200)={{&(0x7f0000000140)=@in6={0x1c, 0x18, 0x3, 0x7, "ff0100", 0x3}, 0x1c, 0x0, 0x0, 0x0}}, 0x38, 0x8) 427.443741ms ago: executing program 7 (id=472): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f00000000c0)={0x6, &(0x7f0000000080)=[{0x5, 0x8, 0x6, 0x7fff}, {0xcfb, 0x7, 0xfe, 0x5}, {0x9, 0x1, 0x4, 0xc8c}, {0x8, 0x87, 0x0, 0x7}, {0x2, 0x7, 0x4, 0x9}, {0xe6f, 0x0, 0x0, 0x95a}]}) (async) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000180)={'tap', 0x0}) (async, rerun: 64) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x3, 0x6, 0x7, 0x8}, {0x28, 0xf0, 0xff, 0x10001}, {0x6, 0x2, 0xb6, 0xf}]}) (async, rerun: 64) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0xbe, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) (async) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000600)=[{0x80, 0xff, 0x2, 0x9}, {0x28, 0x1, 0x2, 0x5}, {0x9b1e, 0x13, 0x4, 0x2}]}) (async, rerun: 32) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async, rerun: 32) ioctl$BIOCSETWF(r1, 0x80104277, &(0x7f0000000040)={0x28, 0x0}) r2 = kqueue() ioctl$VMM_IOC_WRITEREGS(0xffffffffffffffff, 0x82485608, &(0x7f0000000100)={0x0, 0x4, 0x1, {[0x0, 0x8, 0xfffffffffffffffd, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x6, 0x0, 0x9, 0x0, 0x5f2aba80, 0x3, 0x800a, 0x0, 0x2], [0x0, 0x0, 0x0, 0x0, 0x800000000000, 0x0, 0xfffffffffffffffc, 0x8], [0x0, 0x6, 0x0, 0xffff, 0x3, 0x0, 0x1], [0x1, 0x0, 0x401, 0x0, 0x1, 0x80000], [{0x0, 0x1}, {0xfffd, 0xffffffff, 0x3ac6}, {0xfffe, 0x0, 0x5, 0xffffffffffdffffd}, {0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0xc8, 0xffffffffffffffff}, {0x0, 0x0, 0xfffffffe}, {0x0, 0x10000, 0x0, 0xf}, {0x0, 0x20000, 0x1000}], {}, {0x0, 0x40000, 0x5}}}) (async) kevent(r2, &(0x7f0000000000), 0x3ff, 0x0, 0x8000800, 0x0) write(r1, &(0x7f0000000180)="460cf2c05e3e45fc20107b65d551", 0xe) (async) setuid(0xee01) (async) r3 = msgget$private(0x0, 0x1ba) msgctl$IPC_SET(r3, 0x1, &(0x7f0000000340)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x100, 0x6}, 0x0, 0x0, 0x4, 0x1, 0x5, 0x0, 0x0, 0x3, 0x0, 0x101, 0x0, 0x5}) msgrcv(r3, 0x0, 0x0, 0x1, 0x1000) (async) r4 = openat$bpf(0xffffffffffffff9c, &(0x7f00000001c0), 0x8000, 0x0) ioctl$BIOCGSTATS(r4, 0x4008426f, &(0x7f0000000240)) msgctl$IPC_SET(r3, 0x1, &(0x7f0000000400)={{0x0, 0x0, 0x0, 0x0, 0x4, 0x2, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xe, 0x401, 0x392ef342, 0xffffffffffffffff, 0xffffffffffffffff, 0x8, 0x0, 0x3, 0x0, 0xfffffffffffffffc}) (async) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000000)={0x0, &(0x7f0000000080)}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x1000e, &(0x7f00000015c0)=ANY=[]) 426.850663ms ago: executing program 2 (id=473): setrlimit(0x8, &(0x7f0000000980)={0x42, 0x62}) r0 = syz_open_pts() close(r0) (async, rerun: 64) syz_open_pts() (async, rerun: 64) r1 = socket(0x18, 0x2, 0x0) setsockopt(r1, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd31929648160000000000000000", 0x14) (async, rerun: 64) setsockopt(r1, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbdf13b9fd812eaa4e713048e69931929648", 0x14) (rerun: 64) ioctl$TIOCSETAF(r0, 0x802c7416, &(0x7f0000000180)={0x42b788, 0x9, 0x7, 0x86a19c, "bb080006020900d910040801b7cd0d8c00004000", 0x0, 0x220}) (async) writev(r0, &(0x7f0000000700)=[{&(0x7f0000000080)="34eb4cd59e8456ebc0881681c60e1cd9e0bf01b618b3cb934394c5951c1db0fd943a", 0xff99}], 0x1) syz_open_pts() 426.673969ms ago: executing program 7 (id=474): sysctl$net_inet_carp(&(0x7f0000000040)={0x4, 0x2, 0x6, 0x19}, 0x4, 0x0, 0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x100000000000000}) sysctl$net_inet_tcp(0x0, 0x0, &(0x7f00000000c0)="9b18", 0x0, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket(0x18, 0x1, 0x0) unveil(&(0x7f00000000c0)='.\x00', &(0x7f0000000100)='r\x00') (async) open$dir(&(0x7f00000003c0)='./file0\x00', 0x200, 0x12) (async, rerun: 32) setsockopt(r0, 0x1000000029, 0x36, &(0x7f0000000040)="03000000", 0x4) (async, rerun: 32) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) r1 = syz_open_pts() setsid() (async) sysctl$net_inet_tcp(&(0x7f0000000080)={0x4, 0x2, 0x6, 0x17}, 0x4, &(0x7f0000000140)="17f83d282bd7fe0000cf9069e87393a625fb5cc4981c3c82a86d3dd45e9bbc11ba66689a54d33118398fd022c215bd019c5e6c", &(0x7f0000000180)=0x33, &(0x7f0000000400)="20748e356045372f812dff5b380c9bf01f3fb9f10185c42b9aa812d3e2db40ed31877714f37300388e05ee3fa88eb5b498cc1d6f062a1f60008a18f30467c128cf4fb6f9d01e18c816eb817cd8c98d5d2883b557b92293b56bcaaa6fcf9808f975eea5c4399496ea6008b40e1aa70c3069467f806a16e8b715aa6805000000000000000f6fce038a9b79d2c539a417bad81147331d39cd67ab395ff0c6dcb27e8f005e286b0cf4eedd09c7fbe7b3a3cb2d9023be00ca2f242271c197930958bf6a5b53267b331287ac6bef6d9c5b4d52", 0xd0) ioctl$TIOCSCTTY(r1, 0x20007461) (async) ioctl$FIOSETOWN(r1, 0x8004667c, &(0x7f0000000000)=0xfffffffd) (async, rerun: 64) execve(0x0, 0x0, 0x0) (rerun: 64) 426.423809ms ago: executing program 1 (id=475): r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0x40000, 0x0) ioctl$DIOCXBEGIN(r0, 0xc0104451, &(0x7f0000000140)={0x1, 0x408, &(0x7f0000000180)=[{0x1000000, './file0\x00', 0x40bd}]}) r1 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$WSKBDIO_GETDEFAULTBELL(r1, 0x40105706, &(0x7f0000000040)) r2 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) sysctl$hw(&(0x7f0000000000)={0x7, 0x4}, 0x2, 0x0, 0x0, 0x0, 0x0) close(r2) shmctl$IPC_SET(0x0, 0x1, 0xffffffffffffffff) r3 = shmget$private(0x0, 0x1000, 0x57, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_STAT(r3, 0x2, &(0x7f0000000000)=""/168) 285.399591ms ago: executing program 2 (id=477): setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) r0 = open(&(0x7f0000000040)='./file1\x00', 0x18289, 0x100) write(r0, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) mknod(&(0x7f00000000c0)='./file1\x00', 0x2000, 0x637d) (async) getrusage(0xffffffffffffffff, 0x0) (async, rerun: 32) open(&(0x7f0000000800)='./file1\x00', 0x8000, 0xba) (async, rerun: 32) fsync(r0) (async) close(r0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) 284.672003ms ago: executing program 1 (id=478): r0 = socket$inet(0x18, 0x3, 0x102) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) r2 = open$dir(&(0x7f0000000180)='./file0\x00', 0x0, 0x1) getdents(r2, &(0x7f00000001c0)=""/112, 0x70) (async) ioctl$BIOCSETWF(r1, 0x80104277, &(0x7f00000000c0)={0x3, &(0x7f0000000080)=[{0x3, 0x10, 0x7}, {0x0, 0x2, 0xff, 0x1ff}, {0x7, 0x8, 0x18, 0x2}]}) (async) sendmsg(r0, &(0x7f0000000240)={&(0x7f0000000100)=@in6={0x1c, 0x18, 0x0, 0x4, "ae4a4191a1325d203417402b3b3a1e7b", 0x2}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)="6788020000003a9aff51f60900000085aba700008000009323100084430a833ec5950b5a9fad40abe400008000000000", 0x30}], 0x1, 0x0}, 0x400) 283.40953ms ago: executing program 1 (id=480): setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) r0 = socket(0x18, 0x3, 0x0) connect$unix(r0, &(0x7f0000000040)=@file={0x0, 0x0, './file0\x00'}, 0xa) r1 = open(&(0x7f0000000040)='./file1\x00', 0x18289, 0x100) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) bind$unix(r2, &(0x7f0000000080)=@file={0x3, 0x1, './file0\x00'}, 0xa) sendmmsg(r2, &(0x7f0000000000)={{0x0, 0xfffffffffffffe36, 0x0, 0x0, 0x0, 0xfffffffffffffff6}}, 0x42, 0x410) write(r1, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) ftruncate(r1, 0x2) getgroups(0x7, &(0x7f00000002c0)=[0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0]) setresgid(0x0, 0x0, 0x0) setuid(0xffffffffffffffff) setresgid(0x0, r3, 0x0) r4 = openat$bpf(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0) ioctl$BIOCSETF(r4, 0x80104267, &(0x7f0000000000)={0x2000000000000094}) close(r1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) rmdir(0x0) 282.230488ms ago: executing program 7 (id=481): getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, 0x0}, 0xc) (async) getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) setsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f00000000c0)={0xffffffffffffffff, r1, r4}, 0xc) r5 = openat$dri(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dri/renderD128\x00', 0x20000, 0x0) close(r5) (async) ioctl$TIOCNOTTY(0xffffffffffffff9c, 0x20007471) setsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000140)={r0, r3, r4}, 0xc) wait4(r0, 0x0, 0x9, &(0x7f0000000180)) (async) ioctl$TIOCSETAW(0xffffffffffffffff, 0x802c7415, &(0x7f0000000240)={0x6, 0x401, 0x4, 0x5, "407981d815f5e7e379d8f7b579004701ffb184c5", 0x10000, 0x25bd}) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(r5, 0xc01864c1, &(0x7f0000000280)={0x0, 0x2, 0xffffffffffffffff, 0x0, 0xd}) close(r6) (async) fcntl$lock(r6, 0x8, &(0x7f00000002c0)={0x2, 0x0, 0x8, 0x10000, r2}) getsockopt$sock_int(r6, 0xffff, 0x1008, &(0x7f0000000300), &(0x7f0000000340)=0x4) (async) ioctl$BIOCGSTATS(r6, 0x4008426f, &(0x7f0000000380)) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(r6, 0xc01864c2, &(0x7f00000003c0)={0x0, 0x0, r6}) (async) setsid() (async) ioctl$DRM_IOCTL_MODE_SETCRTC(r6, 0xc06864a2, &(0x7f0000000440)={&(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, 0x0, 0x0, 0x8, 0x8000, 0x400, {0x0, 0x8000, 0x0, 0x8, 0x2, 0x1, 0xff, 0x7, 0x0, 0x0, 0x8, 0x101, 0x18000, 0x20, "f16348da10809900fd786c5cf1abe5d93f9b223adb40b01923ef9acb9912451f"}}) ioctl$DRM_IOCTL_MODE_CLOSEFB(r6, 0xc00864d0, &(0x7f00000004c0)={r8}) ioctl$TIOCSTAT(r6, 0x20007465) (async) ioctl$TIOCSETA(r6, 0x802c7414, &(0x7f0000000500)={0x9c, 0x118, 0x100, 0x40, "627c4aa14c891124fbf1a8f54a2814ef2b5ebdc9", 0x9, 0x4}) (async) ioctl$TIOCSETD(r6, 0x8004741b, &(0x7f0000000540)=0x3) (async) getsid(r0) ioctl$DRM_IOCTL_SYNCOBJ_RESET(r6, 0xc01064c4, &(0x7f00000005c0)={&(0x7f0000000580)=[r7, r7], 0x2}) (async) ioctl$TIOCSETVERAUTH(r6, 0x8004741c, &(0x7f0000000600)=0x8) (async) mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1) ioctl$TIOCGETD(r6, 0x4004741a, &(0x7f0000000640)) lseek(r6, 0x6000000000, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f00000006c0)={&(0x7f0000000680)=[0xffff8001, 0x0, 0x400, 0xfffffffe], 0x4, 0x0, 0x0, 0xffffffffffffffff}) fcntl$setflags(r9, 0x2, 0x4) (async) poll(&(0x7f0000000700)=[{r6, 0x40}, {r5, 0x20}, {r6, 0x2}], 0x3, 0x9) 217.152288ms ago: executing program 7 (id=485): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) (async) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x14, 0xfc, 0x1, 0x4008}, {0x30, 0x10, 0x7, 0x2}, {0x9b1e, 0x12, 0xf7, 0xb}]}) r1 = openat$dri(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dri/card0\x00', 0x8, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000140)={0x10, 0xfffffbff, 0x7, 0x8000}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000140)={0x10, 0xfffffbff, 0x7, 0x8000, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000180)={0x0, 0x8, 0x1, 0x7, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffff9c, 0xc010640b, &(0x7f0000000200)={0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB(0xffffffffffffffff, 0xc01c64ad, &(0x7f0000000240)={0x0, 0x8, 0x0, 0x9, 0x0, 0x9}) (async) ioctl$DRM_IOCTL_MODE_GETFB(0xffffffffffffffff, 0xc01c64ad, &(0x7f0000000240)={0x0, 0x8, 0x0, 0x9, 0x0, 0x9, 0x0}) ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f0000000280)={0x0, 0x169, 0x0, 0x20203443, 0x2, [r2, r3, r4, r5], [0x8, 0x4, 0x2840, 0x8538], [0xfffffffe, 0x96e3, 0xfff80000, 0x9], [0x9, 0x1, 0x86a, 0xe]}) syz_emit_ethernet(0x3e, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaef0aaaaaaaaaaaaaabb080045f4003000660000042c907800000000e00000010c0290780804000045a76393006700016c540004ac14009f3ad3bbe0"]) 211.176603ms ago: executing program 7 (id=488): r0 = kqueue() ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, &(0x7f0000000100)={0x10, 0x0, {[0x7, 0x1, 0x2, 0xffffffffffffc5fd, 0x2, 0x0, 0x8, 0x1, 0x4, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x2, 0x8000000, 0x20000000001000a8, 0x8000002, 0x4752], [0x7ffffffd, 0x80000001, 0xfffffffffffffffd, 0x4, 0x4, 0x7bd7, 0x200001fe, 0x0, 0x7, 0xffffffffff7fffc1], [0x100000101, 0x2, 0x802f, 0x9, 0xfffffffffbffefff, 0x1000000000011006, 0xfffffffffffffffe], [0x105, 0x8, 0x403, 0x3, 0xffffffffffefffff, 0x815], [{0x800, 0x5, 0xfffffffb, 0x9}, {0x1, 0x0, 0x4e, 0x400000000003}, {0x1, 0x10000, 0x7795957e, 0x810}, {0x3, 0x800001, 0x4, 0x80000003}, {0xd, 0xfffffffe, 0x3, 0xa000001}, {0x5dc, 0x0, 0x3fffe, 0x7}, {0x76, 0x805, 0x10001, 0x7}, {0x1004, 0x9, 0x0, 0x100000001}], {0x1, 0xfffffffe, 0x10000}, {0x8000, 0xa18, 0x3, 0x8000000000000007}}}) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x404, &(0x7f0000000000)={0x10, 0x2, 0x0, 0xe0000801}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket(0x1, 0x4001, 0x0) fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) (async) r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) close(r2) r3 = socket(0x2, 0x2, 0x0) connect$unix(r3, &(0x7f0000000000), 0x10) r4 = socket(0x18, 0x2, 0x0) setsockopt$sock_int(r4, 0xffff, 0x1023, &(0x7f0000000040)=0x4, 0xd4) kevent(r0, &(0x7f0000000000), 0x96, 0x0, 0xfffa4961, 0x0) sysctl$net_inet_tcp(&(0x7f0000000300)={0x4, 0x2, 0x6, 0x12}, 0x4, 0x0, 0x0, &(0x7f0000000440), 0x0) (async) sysctl$net_inet_tcp(&(0x7f0000000300)={0x4, 0x2, 0x6, 0x12}, 0x4, 0x0, 0x0, &(0x7f0000000440), 0x0) setgroups(0x0, 0x0) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000340)={0x0, 0x8, 0x24577a12, 0x6, 0x8, 0x1, 0x1000003, 0x10, [{0x5, 0x3, 0x8001, 0x80000201}, {0x4, 0x0, 0x4, 0xfdf}, {0x1, 0xfffffffc, 0x6, 0xd45}, {0x2, 0x5, 0x0, 0x3}, {0x2, 0x10001, 0x20000004, 0x7}, {0x800800, 0xffbf, 0x80cf, 0x3}, {0x5, 0x4, 0x84, 0x2}, {0x0, 0xf4, 0xfffffff8, 0xfbffe2e9}, {0x4, 0xffe, 0x6, 0xffff}, {0x1, 0x0, 0x5, 0x7}, {0x8, 0x8000000, 0x9, 0x5}, {0xfff, 0xc7cb, 0x800002, 0xd}, {0x401, 0x10a, 0x9, 0x9}, {0x0, 0x9, 0x4, 0x80006}, {0x81, 0x104, 0xfffffffc, 0xb08}, {0x40007, 0x8003, 0x1000006, 0x69}]}) execve(0x0, &(0x7f00000002c0)=[&(0x7f0000000100)='tap'], 0x0) socket$inet(0x2, 0x3, 0x2) (async) r5 = socket$inet(0x2, 0x3, 0x2) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) (async) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @remote, [], {@ipv6={0x86dd, {0x8, 0x6, "4498fb", 0x8, 0x2c, 0xb, @local={0xfe, 0x80, '\x00', 0x0}, @mcast2, {[@hopopts={0x2b}]}}}}}) r6 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r6, 0xc0106924, &(0x7f00000001c0)) (async) ioctl$FIONREAD(r6, 0xc0106924, &(0x7f00000001c0)) ioctl$FIONREAD(r5, 0xc0206981, &(0x7f0000000100)) (async) ioctl$FIONREAD(r5, 0xc0206981, &(0x7f0000000100)) r7 = socket(0x18, 0x3, 0x10) ioctl$FIONREAD(r7, 0xc028698a, &(0x7f0000000100)) (async) ioctl$FIONREAD(r7, 0xc028698a, &(0x7f0000000100)) setuid(0xee01) select(0x40, &(0x7f0000000000)={0x0, 0x1}, 0x0, 0x0, 0x0) syz_open_pts() (async) syz_open_pts() 194.842848ms ago: executing program 4 (id=489): chmod(&(0x7f0000000040)='.\x00', 0x35e) setuid(0xee01) (async) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000200)=@file={0x30, 0x1, './file0\x00'}, 0xa) (async) r1 = socket$unix(0x1, 0x1, 0x0) close(r0) (async, rerun: 64) connect$unix(r1, &(0x7f0000000080)=@file={0x5, 0x1, './file0\x00'}, 0xa) (async, rerun: 64) chmod(&(0x7f0000000040)='.\x00', 0x35e) setuid(0xee01) (async) mkdir(&(0x7f0000000100)='./file0\x00', 0x78) (async) unveil(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='x\x00') 194.539168ms ago: executing program 6 (id=490): r0 = socket(0x11, 0x3, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$WSMUXIO_REMOVE_DEVICE(0xffffffffffffffff, 0x80085762, &(0x7f0000000040)={0x1}) r3 = socket(0x18, 0xc003, 0x3a) setsockopt(r3, 0x2a, 0xd000, &(0x7f0000000040), 0x0) r4 = getpid() setsockopt$inet6_MRT6_ADD_MIF(r3, 0x29, 0x66, &(0x7f00000003c0)={0x0, 0x1, 0x10, 0x5, 0x2}, 0xc) closefrom(r2) sendto$unix(r0, &(0x7f0000000000)="b1000503000004000000000105000000331c01040100008000000000ff0100007ae302fffe4e3039d2d236acf20b7810be38164991f7c8cf5f881029ffffff7fda0000510100ad090000006c0000009b672f4d335c223e7d0c032bfa896443a42102000000720fc18bfbb670c1f5a8b67114d66e2ec589040000000000800078e36b361b1257aea8063076000000000000000004bfba353e537e2ba37f50b609f4f707e37183f834371205d1a7f1c057aa", 0xb1, 0x804, 0x0, 0x0) fcntl$setown(r1, 0x6, r4) 194.117496ms ago: executing program 7 (id=491): mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) r0 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$DIOCMAP(r0, 0xc0106477, &(0x7f0000001800)={&(0x7f0000000040)='./file0\x00', r0}) open(&(0x7f0000000000)='./file0\x00', 0x615, 0x1c) ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000480)={0x3, 0xb3f, {[0xfffffbfffffffffb, 0x0, 0x2, 0x100000000, 0x4, 0x0, 0xdf60, 0xfffffffffffffffe, 0x0, 0x2f01, 0xfffffffffffffffc, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x2, 0x100], [0xfffffffffffffffe, 0x80000001, 0xfffffffffffffffd, 0x20000001, 0x5e, 0x7b98, 0x1fe, 0x0, 0x6], [0xc41, 0x2, 0x101, 0x0, 0xb, 0x11000, 0xffffffff00000000], [0x5, 0x1ffffffffff, 0x7ffffffffffffffc, 0x2, 0xfffffffffffffffe, 0xfffffffffffffffa], [{0x1, 0x4, 0x0, 0x7d06}, {0xfffc, 0x2, 0x5}, {0x4, 0x0, 0xfffffffe, 0x20000080}, {0x3, 0x5, 0x6, 0x2}, {0x0, 0x2000002, 0x3, 0x8}, {0x0, 0x401, 0x3, 0x1000}, {}, {0x2, 0x100, 0x31, 0x8}], {0x0, 0x5, 0x5}, {0xfffe, 0x80000000, 0x6d5, 0x1002}}}) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) mknod(&(0x7f0000000180)='./bus\x00', 0x2000, 0xd01) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc5005601, &(0x7f0000000000)={0x10, 0x0, [{&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000663000/0x4000)=nil, 0xfffffffffffff801}, {&(0x7f00006ac000/0x4000)=nil, 0x0, 0x3}, {&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil}, {0x0, &(0x7f0000b1b000/0x2000)=nil}, {&(0x7f000067c000/0x10000)=nil, &(0x7f0000ffb000/0x1000)=nil}, {&(0x7f0000088000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil}, {0x0, 0x0, 0x7fff}, {&(0x7f0000727000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil}, {&(0x7f0000593000/0x2000)=nil, &(0x7f0000826000/0x1000)=nil}, {&(0x7f0000110000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil}, {0x0, &(0x7f000065d000/0x2000)=nil, 0xdc9}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0xfffffffffffffffc}, {0x0, &(0x7f0000ffd000/0x3000)=nil}, {&(0x7f00004c1000/0x2000)=nil}, {&(0x7f00001cf000/0x4000)=nil}, {&(0x7f0000355000/0x13000)=nil, &(0x7f0000358000/0x2000)=nil, 0x1}], './file0\x00', 0x7, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1135, 0x0, 0x0, 0x80c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc87, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x15, 0x0, 0x0, 0x15340, 0x0, 0x0, 0x80, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0xd824, 0x0, 0x0, 0x800000, 0x0, 0xfffffffc, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0xfe7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xffffffff]}) r1 = open(&(0x7f0000000240)='./bus\x00', 0x2, 0x111) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0xffffffff, 0xb, {0x0, 0x1}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) faccessat(r1, &(0x7f0000000a00)='./file0\x00', 0xa, 0x2) sysctl$net_inet_divert(&(0x7f0000000040)={0x4, 0x2, 0xf0}, 0x4, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x6, 0x28, 0x6b, 0x0, 0x0, 0x6, 0x0, @empty, @local={0xac, 0x14, 0x0}}, @tcp={{0x0, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x6bed7258f1bf5d94, 0x8, 0x0, 0xfffc}}}}}}) syz_emit_ethernet(0x126f, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]) sysctl$kern(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)="55f8f5782087a072a82ec35f78d14780f518", 0x12) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r2 = socket(0x18, 0x3, 0x85) ioctl$FIONREAD(r2, 0xc1206949, &(0x7f00000001c0)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x11}, 0x4000000000000007, 0x0, 0x0, 0x0, 0x0) ioctl$VNDIOCSET(r1, 0x84946467, &(0x7f0000000000)={0x0, 0xffffffffffffffba, 0x0}) symlink(&(0x7f0000000200)='\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 154.584575ms ago: executing program 4 (id=492): socket$inet(0x2, 0x3, 0x2) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x1c, 0x18, 0x1, 0x4, "ffffffffffff00000000000000000001", 0x7}, 0x1c) (async) ioctl$SPKRTONE(0xffffffffffffffff, 0x80085301, &(0x7f0000000100)={0x1}) (async) r0 = syz_open_pts() (async) unveil(0x0, &(0x7f0000000180)='x\x00') (async) mknod(0x0, 0x2000, 0x6d4) r1 = open(0x0, 0x8, 0x80) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x10000100000001}}) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000b40)="825a4f47c21e6ed7eda0f5903abf65b18d7c51f78b06ccffb4050000000000009dd52840fafd3493776665d4cd12c63d34", 0x31}], 0x1, 0x0, 0x0, 0x406}, 0x0) (async) ioctl$DIOCCHANGERULE(r1, 0xcd60441a, &(0x7f0000000b80)={0x2, 0xc0000000, 0x0, './file0\x00', './file0\x00', 0x0, "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"}) r2 = openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async, rerun: 64) writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000680)="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", 0x4c0}], 0x1) (rerun: 64) ioctl$TIOCSETA(r2, 0xc4504443, &(0x7f0000000740)={0x0, 0x2, 0x0, 0x0, "01d04b0a0047c1d100", 0x6, 0x6}) r3 = socket(0x18, 0x1, 0x0) setsockopt(r3, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) (async) connect$unix(r3, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) (async) ioctl$TIOCSETD(r0, 0x8004741b, &(0x7f0000000040)=0x3ff) 150.213034ms ago: executing program 6 (id=493): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) poll(&(0x7f0000000000)=[{r0}], 0x1, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r1, 0x0) ftruncate(r1, 0x8531) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x22, 0x0, 0xfc, 0x8000003}, {0x0, 0x0, 0x40}, {0x46, 0x0, 0x0, 0x37f}]}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0xffac) r2 = kqueue() kevent(r2, 0x0, 0x6, &(0x7f00000000c0)=[{{r2}, 0xffffffffffffffff, 0x25, 0xd3, 0x7, 0x40}], 0x8, 0x0) sysctl$net_inet_icmp(&(0x7f0000000000)={0x4, 0x2, 0x1, 0x4}, 0x4, &(0x7f0000000100)="c99a45fc9e1508c3b12f8ea31bc1acbaad7bf036d50b3a3e891712b53330ae5c593a9d49c43f5d15c358d97170c95f7b1c751e1f23133ca7f30a37bfed436e909bc2f5a4262e29bfb5301fed23442e2c086b731fac2b0d04a8391290df24dd958aa003cb224f43e27f63752f8bb48db6c2f637a84fc2cc12c3bd2acf774aa93e2e14797047d2eb94b56b651e40318eb85c15f33e7eb54164850aceacd1d2da1afca766932a98eb95c7f7ae66adb877aed33a3c902279a3d49d5402", &(0x7f00000001c0)=0xbb, &(0x7f0000000200)="609986dff27a81e52b3a178d75ae2c5cea4dee45c10d6ee78eb965ccc1bbfd44f6a6319d0bbde58dddddec0aa87e3952a5c3603af4bb15a3b268dd693da46601eeaeefb1b5434e007fca366ef0b359570b9d5f69d0f453f0f6cc90f148b82b2a5bd4dd61c89aba31c4691ce6720f7d1ffbebec6e4c0dec1d95a310c99ca9452e44edeea1f1d63268242b01840f270282654c1bf46aa7c5b63f1121b2e2feabe13655a4333c4a9845f38fe5efd770", 0xae) kevent(r2, &(0x7f0000000040)=[{{}, 0xfffffffffffffff9, 0x5, 0x10}], 0x0, 0x0, 0x4, 0x0) kevent(r2, &(0x7f0000000000), 0x3ff, 0x0, 0x8000800, 0x0) 142.370957ms ago: executing program 4 (id=496): syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = getpgrp() r1 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) fcntl$setown(r1, 0x6, r0) fcntl$setown(r1, 0x6, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) r3 = socket$inet(0x2, 0x5, 0x3) r4 = dup2(r3, r2) bind$inet(r2, &(0x7f0000000000)={0x10, 0x2, 0x3}, 0x10) r5 = socket$inet(0x2, 0x3, 0x2) sendto$inet(r4, &(0x7f0000000040)="423faad20b32a51e37e05e62574abd7c1d61e5d1ca5f960066a9a19d5626258778d8ad075681155f027e2437975f55f9349fa485093ab64355e3e1641fc8781c5030f11819db21416a6bcc2a6664582fd6c9bc1012fea2115a0bc2d30d593350fea870f80428846e8e3c1d92be053f88135f51e6eb57de534a1049b379eabe2f742170745e7c", 0x86, 0x7, &(0x7f0000000100)={0x10, 0x2, 0x3, 0x1}, 0x10) ioctl$FIONREAD(r5, 0xc0207534, &(0x7f0000000340)) 130.535352ms ago: executing program 4 (id=498): r0 = socket$inet(0x2, 0x8003, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x2100, 0x5f00) r1 = open(&(0x7f0000000100)='./file0\x00', 0x2, 0x58) ioctl$VMM_IOC_RUN(r1, 0xc0205602, &(0x7f0000000480)={0x0, 0x0, {}, 0x0, 0x0}) shutdown(r0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffff00000000000008000000001c00000000003253854aba19d715009078e0000002000000000800907800000000"]) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0xbe, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000b40)="825a4f47c21e6ed7eda0f5903a3f65b18d7c51f78b06ccffb4050000001436fb28d52840fafd3493776665d4cd12c63d34", 0x31}], 0x1, 0x0, 0x0, 0x406}, 0x0) r3 = openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TIOCSETA(r3, 0xc4504443, &(0x7f0000000740)={0x0, 0xfffffffe, 0x0, 0xfffffffe, "01d04b0a0047c1d100", 0xfffffff0, 0x6}) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x65, 0x36, 0x7, 0x5}, {0x40, 0xf0, 0xff, 0x20}, {0x6, 0x7f, 0xb6, 0xfffff805}]}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000000)={0x0, 0x0}) sysctl$kern(0x0, 0x0, &(0x7f0000000300)="916b6308312ea02f8ba2c84bc7d0287eada800000f00000000000000000000f3006b1bf0f6167be8b335215b4de6c6eeba427f775bde31e3a21fdc55b200927c", &(0x7f0000000000)=0x40, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETWF(r2, 0x80104277, &(0x7f0000000040)={0x28, 0x0}) write(r2, &(0x7f0000000180)="460cf2c05e3e45fc20107b65d551", 0xe) sysctl$net_inet_tcp(&(0x7f0000000040)={0x4, 0x2, 0x6, 0x19}, 0x4, 0xfffffffffffffffe, 0x0, 0x0, 0x0) mprotect(&(0x7f0000437000/0x2000)=nil, 0x2000, 0x4) sysctl$net_inet_carp(&(0x7f0000000040)={0x4, 0x2, 0x6, 0x17}, 0x4, 0x0, 0x0, &(0x7f00000010c0)="e1000000", 0x4) 79.552249ms ago: executing program 4 (id=501): sysctl$net_pipex(&(0x7f00000000c0)={0x4, 0x22, 0x1}, 0x3, 0x0, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x1, 0x0) r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = socket(0x1, 0x8000, 0x32) setsockopt(r1, 0x6, 0x8, &(0x7f0000000040)="ebffcbff", 0x4) r2 = open(&(0x7f0000000000)='./file0\x00', 0x9cab835cfdc52675, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0xa011, r2, 0x0) ftruncate(r2, 0x79c8) syz_emit_ethernet(0x2a, &(0x7f0000000180)=ANY=[@ANYRESDEC=r0]) pipe2(&(0x7f0000000140), 0x10000) r3 = socket$inet(0x2, 0x1, 0x8) getgroups(0x7, &(0x7f0000001100)=[0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]) setregid(0x0, r5) setresgid(r4, 0x0, r5) setsockopt$sock_int(r3, 0xffff, 0x1021, &(0x7f0000000040)=0x5, 0x4) sysctl$kern(0x0, 0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4) execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000080)="76e5eac907f9ccf7a251ceddcec7d6aa45cffe2c63a56077123a276d3ba4e9d17eb3eb5db12a3783a8e0620d357de1fe04fa9465b5bd1286e9624dec06a00c222f", 0x41}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) unveil(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000100)='c\x00') openat$pf(0xffffffffffffff9c, &(0x7f0000001000), 0x10000, 0x0) msync(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4) ioctl$DIOCRSETTFLAGS(r0, 0xc450444a, &(0x7f0000000680)={{'./file0\x00', './file0\x00', 0x0, 0xfa}, 0x0, 0x428, 0x0, 0x3, 0x3, 0x1, 0x2, 0x2, 0x10001}) 78.239828ms ago: executing program 0 (id=502): setresuid(0x0, 0xee00, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setstatus(r0, 0x4, 0xc0) r2 = getpid() getresuid(&(0x7f0000000040), &(0x7f00000000c0), 0x0) fcntl$setown(r0, 0x6, r2) r3 = geteuid() setresuid(r3, 0x0, 0x0) setitimer(0x2, &(0x7f0000000000)={{0x1000000, 0xb00}, {0xffffffff}}, 0x0) close(r1) 75.194619ms ago: executing program 0 (id=503): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) shmat(r0, &(0x7f0000001000/0x3000)=nil, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000002) (async) mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0x450a) (async) r1 = open(&(0x7f00000002c0)='./bus\x00', 0x2, 0x80) (async) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r2 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a) (async) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0xf, 0x4e, 0x2100007, 0x6, 0x1, 0x6, 0x5d7227f9, 0x10, [{0x3, 0x7, 0x4, 0x71000}, {0x8, 0x9, 0x1, 0x2901f03c}, {0x1000008, 0xf86, 0x0, 0x9}, {0x7, 0x800, 0x800a}, {0x401, 0x200726, 0x2800, 0x7}, {0x2, 0x7, 0x3, 0x99}, {0xce1, 0x2, 0x4f8, 0x6d}, {0x6, 0x300, 0x55, 0x8}, {0x2, 0x82, 0x5, 0x9}, {0x7, 0x8001, 0x91b, 0x103}, {0x1cc, 0x10001, 0xf7, 0x1}, {0x200007ff, 0x9, 0xfffffffd, 0x9}, {0xb8c, 0x5, 0x8, 0x4}, {0x29a71717, 0x80, 0x1, 0xc373}, {0xb6f, 0x407, 0x4}, {0x7ffc, 0x1, 0x101002, 0x30004}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r2, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r2, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffe, 0x0}) (async) ioctl$WSMOUSEIO_GCALIBCOORDS(r1, 0x41205725, 0x0) 74.661959ms ago: executing program 0 (id=504): ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0x1, [{&(0x7f0000695000/0x3000)=nil, &(0x7f00003cf000/0x1000)=nil, 0xd}, {&(0x7f0000ff6000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil}, {&(0x7f0000f08000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x3}, {&(0x7f0000693000/0x3000)=nil, &(0x7f0000698000/0x3000)=nil}, {&(0x7f0000422000/0x4000)=nil, &(0x7f000069a000/0x1000)=nil, 0x5}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff4000/0xc000)=nil, 0x91e8}, {&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000c44000/0x2000)=nil, 0x5}, {&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000000/0xc00000)=nil, 0x4}, {&(0x7f0000c18000/0x4000)=nil, &(0x7f0000cc4000/0x2000)=nil, 0x7f}, {&(0x7f00002a4000/0x4000)=nil, &(0x7f0000693000/0x1000)=nil, 0x80080000000000}, {&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c0c000/0x2000)=nil, 0x6}, {&(0x7f000000e000/0x4000)=nil, &(0x7f00000f4000/0x1000)=nil, 0x7fffffff}, {&(0x7f00000e0000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil}, {&(0x7f00002e6000/0x3000)=nil, &(0x7f00000dd000/0xa000)=nil, 0x10001}, {&(0x7f0000394000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil}, {&(0x7f0000265000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x380b00a4}], './file0\x00', 0xffffffff, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) (async, rerun: 64) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) (rerun: 64) setreuid(0x0, 0xee01) (async) r0 = socket(0x2, 0x1, 0x0) ioctl$FIONREAD(r0, 0x8020690c, &(0x7f00000001c0)) (async) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) (async) r1 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000240), 0x80, 0x0) close(r1) (async) fchdir(r1) (async) r2 = open(&(0x7f0000000080)='./file1\x00', 0x18289, 0x1f0) write(r2, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$BIOCLOCK(r3, 0x20004276) (async) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1000, 0x0) (async) syz_open_pts() (async) r4 = open(&(0x7f0000000100)='./file0\x00', 0x70e, 0x0) ioctl$FIONREAD(r4, 0x8020691f, &(0x7f00000001c0)) 73.84046ms ago: executing program 6 (id=505): sysctl$net_inet_udp(&(0x7f0000000040)={0x4, 0x2, 0x11, 0x1}, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffff3b) 45.54022ms ago: executing program 6 (id=506): r0 = socket(0x11, 0x3, 0x0) sendto$unix(r0, &(0x7f00000000c0)="b100050160000004200000000700000001008106cfa1e4fffdf96ecfc73fd3357ae36caa0416fa4f376b36acf00b7805be301e4991f7c8cf5f3fc303ebe1aa5323edeb51e2f0ca3ebbc257699a1f1318000000000000007d026ba8af6300371c2102000000720fd38bfbb770c1f5a8aec872ea772ec58904000000008d9800361b1257aba9c500022012010000de5000"/177, 0xb1, 0x800, 0x0, 0x33) sysctl$net_inet_tcp(&(0x7f0000000000)={0x4, 0x2, 0x6, 0xe}, 0x4, 0x0, 0x0, 0x0, 0x0) sysctl$vm_swapencrypt(&(0x7f0000000000)={0x6, 0xb}, 0x5, &(0x7f0000000500), 0x0, 0x0, 0xffffffffffffff10) 43.35068ms ago: executing program 0 (id=507): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f00000001c0), 0x8000, 0x0) r1 = socket$inet(0x2, 0x3, 0x102) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000500)={0x3, &(0x7f00000000c0)=[{0xfffe}, {0x1, 0x0, 0x0, 0x2}, {0x4, 0x0, 0x0, 0x5}]}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xfffffffffffffe3c, 0x0, 0x37) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000000)={0x3, &(0x7f0000000080)=[{0x4c, 0xfe, 0x4, 0x5}, {0x4, 0x1, 0x23, 0x7}, {0x9b1e, 0x7, 0xff, 0x1ffffc}]}) syz_emit_ethernet(0x1000e, &(0x7f0000000380)=ANY=[]) close(r1) 41.99405ms ago: executing program 6 (id=508): r0 = socket$inet(0x2, 0x3, 0x2) pipe2(0x0, 0x4) setsockopt$inet_opts(r0, 0x0, 0x1, &(0x7f0000000240)='>', 0x1) bind$inet6(0xffffffffffffffff, &(0x7f0000000280)={0x1c, 0x18, 0x1, 0x4, "ffffffffffff00000000000000000001", 0x7}, 0x1c) ioctl$SPKRTONE(0xffffffffffffffff, 0x80085301, &(0x7f0000000100)={0x1}) r1 = syz_open_pts() mmap(&(0x7f00002eb000/0x1000)=nil, 0x1000, 0x1, 0x2012, r1, 0x5) unveil(0x0, &(0x7f0000000180)='x\x00') mknod(0x0, 0x2000, 0x6d4) open(0x0, 0x8, 0x80) sysctl$net_inet_tcp(0x0, 0x0, &(0x7f00000000c0)="9b180bc3eb987ab7fe", 0x0, 0x0, 0x0) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x10000100000001}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket(0x18, 0x1, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="89000000ffff000001"], 0x9}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r4, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/240, 0xf0}, 0x0) sendmsg(r3, &(0x7f0000000380)={0x0, 0x32c, 0x0, 0x0, &(0x7f0000000000), 0x90}, 0x0) close(0x3) dup2(r4, r3) setsockopt(r2, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) select(0x40, &(0x7f0000000300)={0x8, 0x9, 0x8000000000000000, 0xffffffffffffffff, 0x40d26129, 0xffffffffffffffff, 0xbe4d, 0xffffffffffffffff}, &(0x7f00000002c0)={0x1000, 0xbc, 0x7, 0xffffffffffff8001, 0x3, 0x7, 0x52, 0xe}, &(0x7f0000000140)={0x87a1, 0xcc, 0xfffffffffffffff7, 0x80, 0x4, 0x6, 0x8, 0x8000000}, &(0x7f00000001c0)={0xae6, 0x400}) munmap(&(0x7f0000800000/0x800000)=nil, 0x800000) mprotect(&(0x7f0000ff7000/0x4000)=nil, 0x5e07963dbfff, 0x2) munmap(&(0x7f0000f97000/0x3000)=nil, 0x3000) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000b40)="825a4f47c21e6ed7eda0f5903abf65b18d7c51f78b06ccffb40500000000000000000000fafd3493776665d4cd12c63d34", 0x31}], 0x1, 0x0, 0x0, 0x6}, 0x2) r5 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x81, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$TIOCSETA(r5, 0xc450444d, &(0x7f0000000740)={0x0, 0x1, 0xfffffffd, 0x4, "97a2224ff1ebb1000000000000000000ff00", 0x4, 0x5}) connect$unix(r2, &(0x7f0000000200)=@abs={0xe, 0x0, 0x0, 0x3}, 0x8) 41.857206ms ago: executing program 0 (id=509): mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0xd02) r0 = open(&(0x7f0000000080)='./bus\x00', 0x880, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) r1 = socket(0x18, 0x3, 0x0) ioctl$FIONREAD(r1, 0xc0106924, &(0x7f00000001c0)) r2 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r2, 0xc0406938, &(0x7f0000000100)) ioctl$VNDIOCSET(r0, 0xc0785101, &(0x7f0000000040)={0x0, 0x0, 0x0}) 33.035676ms ago: executing program 1 (id=510): r0 = socket(0x2, 0x1, 0x0) r1 = dup(r0) (async) r2 = socket$inet(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000000)={0x10, 0x2, 0x3}, 0x10) setsockopt$sock_int(r2, 0xffff, 0x1021, &(0x7f0000000040)=0x5, 0x4) (async) r3 = open(&(0x7f0000000100)='./file0\x00', 0x80, 0x83) ioctl$TIOCCONS(r3, 0x80047462, &(0x7f0000000040)=0x10004) (async) ioctl$TIOCCONS(r3, 0x80047462, &(0x7f0000000080)) socketpair(0x2, 0x5, 0x9, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = kqueue() kevent(r6, 0x0, 0x8, 0x0, 0x15, 0x0) (async) r7 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) kevent(r1, &(0x7f0000000000)=[{{r2}, 0xfffffffffffffff7, 0x30, 0xfffff, 0x3, 0x5}, {{r0}, 0xfffffffffffffffb, 0x10, 0x1, 0x100, 0x2}, {{r0}, 0xfffffffffffffff9, 0x18, 0x2, 0x40, 0x7}, {{r0}, 0xfffffffffffffffd, 0x20, 0x1, 0x9, 0x5}, {{r1}, 0xfffffffffffffffd, 0x4, 0x20000000, 0x3, 0x6}, {{r0}, 0xfffffffffffffffd, 0x0, 0x80000000, 0xfffffffffffffffd, 0x1}, {{r3}, 0xfffffffffffffffa, 0x90, 0x2, 0x6a, 0x1}, {{r1}, 0xfffffffffffffffd, 0x27, 0x80, 0x3, 0x8000000000000001}], 0x6, &(0x7f00000003c0)=[{{r0}, 0xfffffffffffffff9, 0x18, 0x4, 0xf, 0x9c}, {{r4}, 0xfffffffffffffffb, 0x11, 0x0, 0x7f}, {{r1}, 0xfffffffffffffff6, 0x70, 0x80000000, 0x7, 0x3}, {{r0}, 0xfffffffffffffff9, 0x40, 0x1, 0x800, 0x800}, {{r0}, 0xfffffffffffffffa, 0x8a, 0x1, 0x3, 0x5}, {{r5}, 0xfffffffffffffff9, 0x40, 0x1, 0x8e, 0x4}, {{r1}, 0xfffffffffffffffc, 0x18, 0x10, 0x5, 0x7}, {{r6}, 0xfffffffffffffffa, 0x2, 0x8, 0xd, 0x800}, {{r7}, 0xfffffffffffffffb, 0x8, 0x40, 0x7}, {{r1}, 0xfffffffffffffffd, 0x48, 0x20, 0x6, 0x7fffffffffffffff}], 0x8, &(0x7f0000000500)={0x9, 0x6}) (async) setsockopt(r0, 0x6, 0x4, &(0x7f0000000240)="5194eb5d", 0x4) (async) connect$inet(r1, &(0x7f0000000640)={0x10, 0x2, 0x3, 0xba}, 0x10) (async, rerun: 32) connect(r0, &(0x7f0000000380)=@in={0x10, 0x2, 0x2, 0x8}, 0x10) (rerun: 32) 32.514809ms ago: executing program 0 (id=511): openat$pf(0xffffffffffffff9c, &(0x7f0000000140), 0x40, 0x0) (async) r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000140), 0x40, 0x0) ioctl$DIOCRCLRADDRS(r0, 0xc4504442, &(0x7f0000000500)={{'./file0\x00', './file0\x00', 0x30, 0x80}, 0x0, 0x0, 0x0, 0xfed, 0x1, 0x4, 0x4, 0x26, 0x2}) writev(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_pts() fcntl$lock(r1, 0x7, &(0x7f0000000340)={0x3, 0x0, 0x0, 0x200000000007eff}) open$dir(&(0x7f0000000040)='./file0\x00', 0xae828e137847f62, 0x8) setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) truncate(&(0x7f0000000080)='./file0\x00', 0xffffffff) (async) truncate(&(0x7f0000000080)='./file0\x00', 0xffffffff) truncate(&(0x7f0000000180)='./file0\x00', 0x100000000) writev(r1, &(0x7f0000000300)=[{&(0x7f0000000000)="ee24d977ed2e24f8c60e9e4fba0aa27f75725d62369989a8cb005cbe6b5f7174493371fa13f98c62aaa982308e1a166242a5052c40add5f6702322ca95fa505e5dd484bc128f9e5c45f234c7001ae080c49bf643c4dbc38d4c2cfb2fb2496582930acf20d585b74f399d13ef8f5381d4964db82f4122950175fc2d167ff90be2afddeee0b2a781df25ad414d1f3bbbfe491ecfcd350d8862fd5422f997f77ca141b28caf3fe35dd49f1a7426bd91fec8cb67495f8f6b96104549b6f2bbe577972454e2", 0xc3}, {&(0x7f0000000100)="b3734fbbd1c18e79e29d013a7ea0fa3a442137caa0a2a96851c70ebd77c2d653e9d4a7388e9855ac65a638018ccb949c618d95eb16c381ea5b8c6c78e7dca56c326a43fff4e61dcffb112f4c4b06a994281746b3b45063afeb40209c48c3243eb5664f7890dd3db972bc7edb25a30725a6cae22ac50336e0cd1f10d70bb04c505b500f79a74c42ed8ade7656b7e241ec4e9e276305d60e54cbeaddf53f18ea4640b56fe9a9a170e2202d21790b9379c58b72e318b6cb64782d66a4e5d79c8fa08a337b93a391fdb2b62b9a", 0xcb}, {&(0x7f0000000200)="a195396887f4cf08e689e2aad9addc5400a99438e093ce0a04a8917dd46945a31346ba0cf089bd9d88568429188b5538bd1e7fd02fd68a0da5917f10a70afeea747056d978f83f307358ae1421a402bb0b1c1ddbd93145777c8dcc07a0690c283949d7963d740378aa12ab1dbe106e4e1f2ffc9a6cdd4c19a9ad539e35fd65c917b7619705b101ae5ae15171f967e61ee067066ba29e01c6d608e601e300dbfffaeaa299ca141aedfaf4fabd49ba4458c07a9af6ef9e5455f100f8a5bb1d8500f33d8924727593bb7483b1790350cda41166e414adc5b2c0e1b0d4415d3b5775b173ef", 0xe3}], 0x3) (async) writev(r1, &(0x7f0000000300)=[{&(0x7f0000000000)="ee24d977ed2e24f8c60e9e4fba0aa27f75725d62369989a8cb005cbe6b5f7174493371fa13f98c62aaa982308e1a166242a5052c40add5f6702322ca95fa505e5dd484bc128f9e5c45f234c7001ae080c49bf643c4dbc38d4c2cfb2fb2496582930acf20d585b74f399d13ef8f5381d4964db82f4122950175fc2d167ff90be2afddeee0b2a781df25ad414d1f3bbbfe491ecfcd350d8862fd5422f997f77ca141b28caf3fe35dd49f1a7426bd91fec8cb67495f8f6b96104549b6f2bbe577972454e2", 0xc3}, {&(0x7f0000000100)="b3734fbbd1c18e79e29d013a7ea0fa3a442137caa0a2a96851c70ebd77c2d653e9d4a7388e9855ac65a638018ccb949c618d95eb16c381ea5b8c6c78e7dca56c326a43fff4e61dcffb112f4c4b06a994281746b3b45063afeb40209c48c3243eb5664f7890dd3db972bc7edb25a30725a6cae22ac50336e0cd1f10d70bb04c505b500f79a74c42ed8ade7656b7e241ec4e9e276305d60e54cbeaddf53f18ea4640b56fe9a9a170e2202d21790b9379c58b72e318b6cb64782d66a4e5d79c8fa08a337b93a391fdb2b62b9a", 0xcb}, {&(0x7f0000000200)="a195396887f4cf08e689e2aad9addc5400a99438e093ce0a04a8917dd46945a31346ba0cf089bd9d88568429188b5538bd1e7fd02fd68a0da5917f10a70afeea747056d978f83f307358ae1421a402bb0b1c1ddbd93145777c8dcc07a0690c283949d7963d740378aa12ab1dbe106e4e1f2ffc9a6cdd4c19a9ad539e35fd65c917b7619705b101ae5ae15171f967e61ee067066ba29e01c6d608e601e300dbfffaeaa299ca141aedfaf4fabd49ba4458c07a9af6ef9e5455f100f8a5bb1d8500f33d8924727593bb7483b1790350cda41166e414adc5b2c0e1b0d4415d3b5775b173ef", 0xe3}], 0x3) 32.142712ms ago: executing program 6 (id=512): r0 = open$dir(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) syz_emit_ethernet(0x21, &(0x7f00000000c0)={@local, @random="1a1148ee93f0", [], {@arp={0x8035, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @remote, @multicast1, @remote, @rand_addr=0x3ff}}}}) sysctl$net_inet_tcp(&(0x7f00000000c0)={0x4, 0x2, 0x6, 0x9}, 0x4, &(0x7f0000000180)="9b1809ffffffffffffff7f473f11e1a4e5f2f9f220ef7f0abdbc34fe42021588dc8ff44f4b76c76d41859d85ea800dabe467badf35b6fd74c94d1b44162df3867d25aff254e68dbf44ff53559bdaccfdf6b9e3957261167908bdf9ab63a1900bb07c4a19fe9c74c43e44665d8aa04db2150d2379c95abab88ba171048ff14200a5133cab96cb52dc062c67abb716c06191ca3a1528fd52a92bd16fe9e644b5465e76e17a9df0821b2bf250fa4298ed528be8a422cbea36aceaa0bce82558eadcb5904a61b694ccd0d6fc6ddafdd6224fb0c7a8ffd13019f8edee2119978b8832e94a404d59383d8b4380a6efbe86282b2a44", &(0x7f0000000040)=0x10011, 0x0, 0x5a) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$net_inet_tcp(&(0x7f00000000c0)={0x4, 0x2, 0x6, 0x3}, 0x4, 0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0) rename(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000008c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r1 = socket(0x2, 0x8000, 0x2) connect$inet(r1, &(0x7f0000000040)={0x10, 0x2, 0x1, 0xac1402aa}, 0xb0) 1.048287ms ago: executing program 1 (id=513): ioctl$TIOCSETA(0xffffffffffffffff, 0xcd504404, &(0x7f0000000040)={0x9, 0x2, 0x1, 0x2, "cd00220004000000000000000000000000008000", 0x40048003, 0x6}) sysctl$kern(&(0x7f0000000040)={0x1, 0x4f}, 0x2, 0x0, 0x0, 0x0, 0x0) sysctl$kern(&(0x7f00000000c0)={0x1, 0x27}, 0x6, 0xfffffffffffffffe, &(0x7f0000000080)=0xcc45, 0x0, 0xffffffce) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) sysctl$kern(&(0x7f0000000040)={0x1, 0x3e}, 0x3, &(0x7f00000000c0)="3bf2ee74e747c82dad6eb2a36fa755e1a3925fe49afca7e63b52fa65ccaa74d6e6b85b6cdced70357ef201f97842b1068dca31553fa2d7031f38c03e56ad0e24dfc4f97b8b7f81499647e6e7725765d61436c85e43c15d12a78cb8c57ddde87021d7b685507fd3e0652f35e45bdaa3afd86c4fe557433e4c2b632de71c951516adff26aa2e48b45f8ce92bcefd3eceefabee7e3ebe806fdb4f6af569ae94b5d127", &(0x7f0000000080)=0x4, &(0x7f0000000340)="5a67923ef0cb189971421989ebcff78831a7581e2f27caa362f1363042efb27688b2c899220fb2fe37e467d974592496856ca7b78060998608c2f952e43bc0bf11555cc5cb0fe17b2ec1be389871829bfe10dd4c4d2c8f9da2bd2868fd86791dc09dc4fa89a217458bdaed31003fdc3a7323189ba3ccbad6c8af17516e4557f61ad20180000000000000125f568ca7d3396b9057255f381855110eb3a673713716cdf010ddfa7977f92cf061ad125ca670353b45d53aae196b00271f9d3452b523b3dea22d6027625614312183724b71c7eb02083a410c1c99fa455013521f98686e472b70b560f7021f567adf4d", 0xfffffffffffffe37) pread(0xffffffffffffffff, &(0x7f0000000140)="43b1f3fca9eb9078d5345a2b2cc3f5b69d39", 0x12, 0x8000000000000) sysctl$net_inet_ip(&(0x7f0000000000)={0x4, 0x2, 0x0, 0x18}, 0x4, &(0x7f00000000c0)="4cde67a1eb91e7b09e8b214c40ef780ef866a0b8b2862ae81733c10c586288eb9ac6c68761ca9ba099bbcf9c2fce907334d282d8affacbd8d653b1a908081a03d0fcec21eb5bcdfcb488532d008ff7033577b943fbd20b1efd355aef90a1f557d6c8949baf438780254d46044be0b617479fda", &(0x7f00000001c0)=0x73, &(0x7f0000000280)="a5a0fbb01461690994756ec5df2539563b9f27c0b5b089bed6321d23c3655f418c3f945117a7e374f3f9fbc346614894b0abe25e860c5ceaf727429ecac5fe8751ca065490804a981f319e1315f4278a97d8e4c4b0db2d8b5335aec23965e2d103d6ede795095e9f991f29ae45945b7e2d8bb1da567406ff164189f89f391496195b19be3dfb8cb12d3021c2573433", 0x8f) openat$wskbd(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) r0 = socket(0x27929a09a142fa87, 0x2, 0x9) open$dir(&(0x7f00000000c0)='./file0\x00', 0x200, 0x1c6) setrlimit(0x1, &(0x7f0000000240)={0xad, 0x1fd}) r1 = getpid() setgroups(0x0, 0x0) ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x510, r1) setuid(0xffffffffffffffff) poll(0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) writev(0xffffffffffffffff, &(0x7f0000000280)=[{0x0}], 0x1) utimensat(0xffffffffffffffff, 0x0, &(0x7f0000000180)={{0xfffffffffffffffe, 0xffffffffffffffff}, {0x0, 0xfdffffff}}, 0x2) readv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000180)=""/61, 0x3d}], 0x1) sysctl$kern(&(0x7f0000000140)={0x1, 0x29}, 0x2, 0x0, 0x0, 0x0, 0x0) sendmsg$unix(r0, &(0x7f0000000080)={&(0x7f0000000240), 0x2, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="14"], 0x18, 0x401}, 0x0) 584.733µs ago: executing program 1 (id=514): setuid(0xee01) r0 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_cred(r0, 0xffff, 0x1024, &(0x7f0000000480)={0x0}, &(0x7f0000000580)=0xc) kill(r1, 0x13) sysctl$hw(&(0x7f0000000000)={0x7, 0x5}, 0x2, &(0x7f0000000040), 0x0, 0x0, 0x0) 0s ago: executing program 4 (id=515): r0 = syz_open_pts() ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000300)={0x80, 0x1, 0xfbfffffe, 0x10000, "d76c1f46000000ef1f0160fbff2000404b00", 0x800}) sysctl$hw(&(0x7f0000000000)={0x6, 0x13}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = socket(0x18, 0x2, 0x0) setsockopt(r1, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) setsockopt(r1, 0x1000000000029, 0xa, &(0x7f00000002c0)="03000000", 0x4) r2 = dup2(r1, r1) sendmmsg(r2, &(0x7f0000000200)={{&(0x7f0000000140)=@in6={0x1c, 0x18, 0x3, 0x7, "ff0100", 0x3}, 0x1c, 0x0, 0x0, 0x0}}, 0x38, 0x8) syz_open_pts() ioctl$TIOCSETAF(r0, 0x802c7416, &(0x7f0000000140)={0x0, 0xfffffffd, 0x944a, 0x8, "590113d22022b1cfc500fcc398b384fbdfc91000", 0x5}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.186' (ED25519) to the list of known hosts. pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error OpenBSD/amd64 (Amnesiac) (tty00) login: pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error uvm_fault(0xffffffff83aaac00, 0xffff800028362000, 0, 1) -> d kernel: page fault trap, code=0 Stopped at ffs2_balloc+0xa0a: movq 0(%rcx,%rax,8),%r14 TID PID UID PRFLAGS PFLAGS CPU COMMAND *248144 95150 0 0x2 0x1 0 syz-executor ffs2_balloc(fffffb806bf42c00,31088,58,fffffb8007ffd8f0,1,ffff80002a7f3218) at ffs2_balloc+0xa0a ffs_write(ffff80002a7f32a0) at ffs_write+0x4f9 VOP_WRITE(fffffb806a988e90,ffff80002a7f3350,3,fffffb8007ffd8f0) at VOP_WRITE+0x101 ktrwriteraw(ffff80002a779238,fffffb806a988e90,fffffb8007ffd8f0,ffff80002a7f3420,ffff80002a7f3400) at ktrwriteraw+0x19b ktrsyscall(ffff80002a779238,88,10,ffff80002a7f35a0) at ktrsyscall+0x332 syscall(ffff80002a7f35a0) at syscall+0x2bc Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7b00e76b3920, count: 8 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb> ddb> set $lines = 0 ddb> set $maxwidth = 0 ddb> show panic *cpu0: uvm_fault(0xffffffff83aaac00, 0xffff800028362000, 0, 1) -> d ddb> trace ffs2_balloc(fffffb806bf42c00,31088,58,fffffb8007ffd8f0,1,ffff80002a7f3218) at ffs2_balloc+0xa0a ffs_write(ffff80002a7f32a0) at ffs_write+0x4f9 VOP_WRITE(fffffb806a988e90,ffff80002a7f3350,3,fffffb8007ffd8f0) at VOP_WRITE+0x101 ktrwriteraw(ffff80002a779238,fffffb806a988e90,fffffb8007ffd8f0,ffff80002a7f3420,ffff80002a7f3400) at ktrwriteraw+0x19b ktrsyscall(ffff80002a779238,88,10,ffff80002a7f35a0) at ktrsyscall+0x332 syscall(ffff80002a7f35a0) at syscall+0x2bc Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7b00e76b3920, count: -7 ddb> show registers rdi 0 rsi 0 rbp 0xffff80002a7f31c0 rbx 0xfffffb806bf42c00 rdx 0 rcx 0xffff800028362000 rax 0 r8 0xffffffffffffffff r9 0xffff80002a7f3218 r10 0x746a9dc56b2ce483 r11 0x2f9ddabe6a20e0ce r12 0x1 r13 0xffff800000c47800 r14 0xffff80002a7f3060 r15 0xfffffb8068288aa8 rip 0xffffffff81f78c1a ffs2_balloc+0xa0a cs 0x8 rflags 0x10246 __ALIGN_SIZE+0xf246 rsp 0xffff80002a7f3050 ss 0x10 ffs2_balloc+0xa0a: movq 0(%rcx,%rax,8),%r14 ddb> show proc PROC (syz-executor) tid=248144 pid=95150 tcnt=1 stat=onproc flags process=2 proc=1 runpri=17, usrpri=86, slppri=17, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff80002a778540,0xffff80002a779ca8 process=0xffff80002a79db10 user=0xffff80002a7ee000, vmspace=0xfffffb807ec61e60 estcpu=36, cpticks=8, pctcpu=0.1, user=0, sys=8, intr=0 ddb> ps PID TID PPID UID S FLAGS WAIT COMMAND 97836 175680 55724 0 2 0 syz-executor 97836 285609 55724 0 2 0x4000000 syz-executor 97836 333884 55724 0 3 0x4000080 fsleep syz-executor 80257 79521 67563 0 3 0x3000 suspend syz-executor 80257 319139 67563 0 2 0x4081000 syz-executor 59745 269808 89493 0 2 0xc80 syz-executor 59745 95663 89493 0 3 0x4000080 netcon syz-executor 59745 56135 89493 0 3 0x4000080 fsleep syz-executor 95694 115948 90580 0 3 0x80 fsleep syz-executor 95694 153079 90580 0 3 0x4000080 kqread syz-executor 95694 318116 90580 0 3 0x4000080 fsleep syz-executor 16224 256552 64934 0 2 0xc82 syz-executor 37482 200758 1 0 3 0x100083 ttyin getty 99798 216423 0 0 3 0x14280 nfsidl nfsio 26398 38286 0 0 3 0x14280 nfsidl nfsio 97164 315700 0 0 3 0x14280 nfsidl nfsio 20496 365925 0 0 3 0x14280 nfsidl nfsio 99726 140364 0 0 3 0x14280 nfsidl nfsio 10416 309787 0 0 3 0x14280 nfsidl nfsio 68178 300588 0 0 3 0x14280 nfsidl nfsio 16685 266088 0 0 3 0x14280 nfsidl nfsio 60930 182385 0 0 3 0x14280 nfsidl nfsio 94603 472181 0 0 3 0x14280 nfsidl nfsio 70777 107285 0 0 3 0x14280 nfsidl nfsio 49220 472105 0 0 3 0x14280 nfsidl nfsio 73630 153859 0 0 3 0x14280 nfsidl nfsio 90856 395462 0 0 3 0x14280 nfsidl nfsio 13465 263121 0 0 3 0x14280 nfsidl nfsio 24203 523734 0 0 3 0x14280 nfsidl nfsio 84169 289658 0 0 3 0x14280 nfsidl nfsio 48212 75078 0 0 3 0x14280 nfsidl nfsio 18469 315562 0 0 3 0x14280 nfsidl nfsio 29415 145009 0 0 3 0x14280 nfsidl nfsio 4744 271358 64934 0 2 0x2 syz-executor 55724 97202 64934 0 2 0xc82 syz-executor 20627 9198 64934 0 2 0x2 syz-executor 90580 101731 64934 0 2 0xc82 syz-executor 89493 296236 64934 0 2 0xc82 syz-executor 67563 241262 64934 0 2 0xc82 syz-executor *95150 248144 64934 0 7 0x3 syz-executor 64934 92985 1 0 3 0x82 kqread syz-executor 77828 153562 79039 0 3 0x98 kqread sshd-session 79039 442750 1 0 3 0x92 kqread sshd-session 88375 43305 1 73 3 0x1100090 kqread syslogd 42336 364420 0 0 3 0x14200 bored smr 23331 363156 0 0 2 0x14200 zerothread 33932 387733 0 0 3 0x14200 aiodoned aiodoned 97298 8039 0 0 3 0x14200 syncer update 54053 466596 0 0 3 0x14200 cleaner cleaner 61377 461737 0 0 3 0x14200 reaper reaper 90015 367084 0 0 3 0x14200 pgdaemon pagedaemon 41479 149798 0 0 3 0x14200 bored viomb 44115 1254 0 0 3 0x40014200 acpi0 acpi0 77283 390599 0 0 3 0x14200 bored softnet0 60162 490845 0 0 3 0x14200 bored systqmp 55167 39307 0 0 3 0x14200 bored systq 65830 345925 0 0 2 0x40014200 softclock 32318 350867 0 0 3 0x40014200 idle0 1 336523 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb> show all locks No such command ddb> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 11052 12119K 12443K 166960K 13052 0 pcb 20 13K 14K 166960K 159 0 rtable 243 10K 10K 166960K 535 0 pf 31 13K 72K 166960K 92 0 ifaddr 43 7K 8K 166960K 73 0 ifgroup 50 2K 2K 166960K 106 0 sysctl 4 1K 9K 166960K 15 0 counters 33 17K 18K 166960K 59 0 ioctlops 0 0K 4K 166960K 265 0 iov 0 0K 16K 166960K 35 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1357 85K 86K 166960K 1932 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 5K 166960K 12 0 VM map 2 1K 1K 166960K 2 0 sem 12 0K 0K 166960K 36 0 dirhash 12 2K 2K 166960K 27 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 15 53K 81K 166960K 676 0 sigio 0 0K 0K 166960K 5 0 proc 20 25K 91K 166960K 634 0 subproc 72 4K 4K 166960K 90 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 134 0 in_multi 103 7K 7K 166960K 139 0 ether_multi 1 0K 0K 166960K 2 0 mrt 0 0K 0K 166960K 23 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 211 943K 943K 166960K 211 0 exec 0 0K 1K 166960K 666 0 fusefs mount 1 32K 32K 166960K 1 0 pfkey data 0 0K 0K 166960K 1 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 152 99K 177K 166960K 7675 0 UVM aobj 19 2K 2K 166960K 21 0 pinsyscall 23 46K 88K 166960K 1842 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 0K 166960K 33 0 NDP 11 0K 1K 166960K 49 0 temp 76 9116K 9135K 166960K 25690 0 kqueue 7 12K 30K 166960K 119 0 SYN cache 2 16K 16K 166960K 2 0 ddb> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle rtpcb 120 144 0 144 2 0 2 2 0 8 2 rtentry 136 147 0 44 4 0 4 4 0 8 0 unpcb 144 592 0 582 6 0 6 6 0 8 5 syncache 336 6 0 6 1 0 1 1 0 8 1 tcpcb 736 131 0 128 1 0 1 1 0 8 0 arp 96 24 0 5 1 0 1 1 0 8 0 ipq 40 1 0 1 1 0 1 1 0 8 1 ipqe 40 2 0 2 1 0 1 1 0 8 1 inpcb 328 506 0 500 4 0 4 4 0 8 3 nd6 112 35 0 9 1 0 1 1 0 8 0 pkpcb 40 4 0 4 1 0 1 1 0 8 1 kcovpl 48 10 0 2 1 0 1 1 0 8 0 mppekey 1024 1 0 1 1 0 1 1 0 8 1 ppxss 1072 18 0 18 1 0 1 1 0 8 1 pppxif 1416 1 0 1 1 0 1 1 0 8 1 pfstscr 40 1 0 0 1 0 1 1 0 8 0 pfosfp 40 1 0 0 1 0 1 1 0 8 0 pfosfpen 112 1 0 0 1 0 1 1 0 8 0 pfrktable 1344 1 0 1 1 0 1 1 0 8 1 pfsrclim 320 1 0 1 1 0 1 1 0 8 1 pftag 88 2 0 2 1 0 1 1 0 8 1 pfstitem 24 2 0 0 1 0 1 1 0 8 0 pfstkey 128 2 0 0 1 0 1 1 0 8 0 pfstate 384 1 0 0 1 0 1 1 0 8 0 pfrule 1360 6 0 6 1 0 1 1 0 8 1 rttmr 136 2 0 2 1 0 1 1 0 8 1 art_heap8 4096 2 0 0 2 0 2 2 0 8 0 art_heap4 256 676 0 191 32 0 32 32 0 8 1 art_table 40 678 0 191 6 0 6 6 0 8 0 art_node 32 146 0 54 1 0 1 1 0 8 0 sysvmsgpl 40 8 0 5 1 0 1 1 0 8 0 semapl 72 32 0 22 1 0 1 1 0 8 0 shmpl 112 18 0 2 1 0 1 1 0 8 0 dirhash 1024 27 0 10 3 0 3 3 0 8 0 dino2pl 256 2539 0 1070 93 0 93 93 0 8 0 ffsino 256 2539 0 1070 93 0 93 93 0 8 0 nchpl 144 3433 0 1732 64 0 64 64 0 8 0 rtmask 32 6 0 6 1 0 1 1 0 8 1 vnodes 216 2997 0 0 167 0 167 167 0 8 0 namei 1024 12312 0 12311 2 0 2 2 0 8 1 kstatmem 264 59 0 36 2 0 2 2 0 8 0 scsiplug 72 4 0 4 1 0 1 1 0 8 1 scxspl 216 17744 0 17744 8 0 8 8 1 8 8 plimitpl 152 163 0 148 1 0 1 1 0 8 0 sigapl 424 991 0 938 8 0 8 8 0 8 0 knotepl 120 21538 0 21298 10 0 10 10 0 8 2 kqueuepl 184 176 0 170 1 0 1 1 0 8 0 pipepl 304 334 0 307 5 0 5 5 0 8 2 fdescpl 448 958 0 938 4 0 4 4 0 8 0 filepl 120 5772 0 5584 14 0 14 14 0 8 5 lockfpl 104 222 0 221 1 0 1 1 0 8 0 lockfspl 48 100 0 99 1 0 1 1 0 8 0 sessionpl 144 112 0 107 1 0 1 1 0 8 0 pgrppl 48 127 0 114 1 0 1 1 0 8 0 ucredpl 104 792 0 784 1 0 1 1 0 8 0 zombiepl 144 940 0 938 1 0 1 1 0 8 0 processpl 1152 991 0 938 5 0 5 5 0 8 0 procpl 664 1762 0 1702 7 0 7 7 0 8 1 sosppl 176 3 0 2 1 0 1 1 0 8 0 sockpl 552 1273 0 1257 13 3 10 13 0 8 8 mcl64k 65536 23 0 23 1 0 1 1 0 8 1 mcl9k128 9344 2 0 2 1 0 1 1 0 8 1 mcl8k 8192 11 0 11 1 0 1 1 0 8 1 mcl4k 4096 3196 0 3140 15 0 15 15 0 8 7 mcl2k 2048 524 0 522 3 0 3 3 0 8 2 mtagpl 96 15 0 8 1 0 1 1 0 8 0 mbufpl 256 9756 0 9560 18 0 18 18 0 8 1 bufpl 272 7391 0 1175 415 0 415 415 0 8 0 anonpl 24 145192 0 142301 53 0 53 53 0 186 19 amapchunkpl 152 25429 0 25066 35 0 35 35 0 158 12 amappl16 200 2179 0 2107 19 4 15 19 0 8 8 amappl15 192 8 0 8 1 0 1 1 0 8 1 amappl14 184 450 0 450 1 0 1 1 0 8 1 amappl13 176 121 0 117 1 0 1 1 0 8 0 amappl12 168 1205 0 1186 2 0 2 2 0 8 0 amappl11 160 7 0 7 1 0 1 1 0 8 1 amappl10 152 58 0 56 1 0 1 1 0 8 0 amappl9 144 285 0 285 1 0 1 1 0 8 1 amappl8 136 102 0 101 1 0 1 1 0 8 0 amappl7 128 153 0 148 1 0 1 1 0 8 0 amappl6 120 198 0 197 1 0 1 1 0 8 0 amappl5 112 93 0 89 1 0 1 1 0 8 0 amappl4 104 270 0 264 1 0 1 1 0 8 0 amappl3 96 4877 0 4798 4 0 4 4 0 8 0 amappl2 88 557 0 532 2 0 2 2 0 8 0 amappl1 80 12544 0 12235 13 0 13 13 0 8 1 amappl 88 6796 0 6671 5 0 5 5 0 92 0 uvmvnodes 80 109 0 0 3 0 3 3 0 8 0 dma4096 4096 1 0 1 1 0 1 1 0 8 1 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 0 1 1 0 8 1 dma128 128 255 0 255 1 0 1 1 0 8 1 dma64 64 6 0 6 1 0 1 1 0 8 1 dma32 32 7 0 7 1 0 1 1 0 8 1 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 20 0 2 1 0 1 1 0 8 0 uaddrrnd 24 958 0 938 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 958 0 938 1 0 1 1 0 8 0 vmmpekpl 168 9759 0 9716 3 0 3 3 0 8 0 vmmpepl 168 67706 0 66518 94 0 94 94 0 357 19 vmsppl 368 957 0 938 4 0 4 4 0 8 1 rwobjpl 40 20140 0 19476 14 0 14 14 0 8 2 pdppl 4096 1922 0 1876 100 48 52 74 0 8 6 pvpl 32 417870 0 411475 124 0 124 124 0 265 42 pmappl 216 957 0 938 2 0 2 2 0 8 0 extentpl 40 45 0 27 1 0 1 1 0 8 0 phpool 112 793 0 48 22 0 22 22 0 8 0 ddb> machine ddbcpu 0 No such command ddb> trace ffs2_balloc(fffffb806bf42c00,31088,58,fffffb8007ffd8f0,1,ffff80002a7f3218) at ffs2_balloc+0xa0a ffs_write(ffff80002a7f32a0) at ffs_write+0x4f9 VOP_WRITE(fffffb806a988e90,ffff80002a7f3350,3,fffffb8007ffd8f0) at VOP_WRITE+0x101 ktrwriteraw(ffff80002a779238,fffffb806a988e90,fffffb8007ffd8f0,ffff80002a7f3420,ffff80002a7f3400) at ktrwriteraw+0x19b ktrsyscall(ffff80002a779238,88,10,ffff80002a7f35a0) at ktrsyscall+0x332 syscall(ffff80002a7f35a0) at syscall+0x2bc Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7b00e76b3920, count: -7 ddb> machine ddbcpu 1 No such command ddb> trace ffs2_balloc(fffffb806bf42c00,31088,58,fffffb8007ffd8f0,1,ffff80002a7f3218) at ffs2_balloc+0xa0a ffs_write(ffff80002a7f32a0) at ffs_write+0x4f9 VOP_WRITE(fffffb806a988e90,ffff80002a7f3350,3,fffffb8007ffd8f0) at VOP_WRITE+0x101 ktrwriteraw(ffff80002a779238,fffffb806a988e90,fffffb8007ffd8f0,ffff80002a7f3420,ffff80002a7f3400) at ktrwriteraw+0x19b ktrsyscall(ffff80002a779238,88,10,ffff80002a7f35a0) at ktrsyscall+0x332 syscall(ffff80002a7f35a0) at syscall+0x2bc Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7b00e76b3920, count: -7