last executing test programs: 5.023260425s ago: executing program 6 (id=240): syz_emit_ethernet(0x36, &(0x7f0000000000)={@random="e727dc07001f", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "9907a6", 0x0, 0x0, 0x3, @rand_addr="cb697a653e336f0000005000", @mcast2}}}}) syz_emit_ethernet(0x75, &(0x7f0000000040)={@broadcast, @random="d9c1e2816c8d", [], {@generic={0x8148, "cdca84d9bf676f3d5a4bb259ce75d3747adc8167642ba701272a081bbc6201d8d96edecd7945bc2419bde498b8eee7419aef5e1ac7668b721893be9c55ac5edaa9fa10b7ac0bdfac97d9effb01ef5d89fa0400af9e04bc43468e2f09473651d21deef5d8629000"}}}) 4.996422141s ago: executing program 6 (id=243): r0 = socket(0x18, 0x3, 0x1) setrlimit(0x8, &(0x7f0000000980)={0x8, 0x54}) r1 = syz_open_pts() close(r1) r2 = syz_open_pts() close(r2) ioctl$TIOCSETD(r1, 0x8004741b, &(0x7f0000000000)=0x4) r3 = socket$inet(0x2, 0x3, 0x1) setsockopt$inet_opts(r3, 0x0, 0x200000000000a, &(0x7f0000000000)="ea00005c00000000", 0x1) setsockopt$inet_opts(r3, 0x0, 0x200000000000a, 0x0, 0x0) ioctl$TIOCSETAF(r1, 0x802c7416, &(0x7f0000000300)={0x409787, 0x10005, 0xf8d8, 0xfffffffb, "bb08000100f167d910508bc49d7323000000007e", 0x0, 0x4}) writev(r1, &(0x7f0000000700)=[{&(0x7f0000000080)="34eb", 0x2}], 0x1) ioctl$TIOCDRAIN(r1, 0x2000745e) socketpair(0x20, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt(r4, 0x40000029, 0xdd5b, 0x0, 0x0) sysctl$vm(&(0x7f0000000080)={0x2, 0x7}, 0x2, &(0x7f0000000000)='\x00\x00\x00\x00', &(0x7f0000000540)=0x4, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x810, r0, 0x4) 4.911023839s ago: executing program 0 (id=248): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x10, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) setsockopt(r1, 0x1000000029, 0xc, &(0x7f0000000000)="ebff", 0x2) ioctl$FIONREAD(r1, 0x80206979, &(0x7f0000000000)) ioctl$TIOCSETAF(0xffffffffffffffff, 0x802c7416, &(0x7f0000000100)={0xc0000000, 0x4003, 0x420001ff, 0x81, "afa40f3c000000000200", 0x0, 0x49e22}) bind$unix(0xffffffffffffffff, &(0x7f0000000100)=@abs={0x1f95d27d48731892, 0x0, 0x1}, 0x8) clock_settime(0x100000000000000, 0x0) semctl$GETVAL(0x0, 0xe520b27c8b3f67df, 0x5, 0x0) setreuid(0xee00, 0x0) mknod(&(0x7f0000000000)='./bus\x00', 0x2000, 0x1600) open(&(0x7f0000000040)='./bus\x00', 0x200, 0xaf) r2 = kqueue() r3 = fcntl$getown(r0, 0x5) fcntl$lock(r2, 0x0, &(0x7f00000003c0)={0x1, 0x0, 0x7fffffffffffffff, 0x40, r3}) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) fcntl$lock(r4, 0x9, &(0x7f0000000040)={0x2, 0x2, 0xfffffffffffffffc, 0x1000300000004}) fcntl$lock(r0, 0x8, &(0x7f0000000000)={0x3, 0x1, 0x4, 0x100000802}) 4.781810856s ago: executing program 3 (id=258): open(&(0x7f0000000240)='./file0\x00', 0x205, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)="76e5eac907f9ccf7a251ceddcec7d6aa45cffe2c63a56077123a276d3ba4e9d17eb3eb5db12a3783a8e0620d357de1fe04fa9465b5bd1286e9624dec06a00c222f", 0x41}], 0x1) mknod(&(0x7f0000000180)='./bus\x00', 0x40, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x800, 0x86) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) unveil(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000300)='W\x00') select(0x40, &(0x7f0000000040)={0x8000010000000000, 0xaa71, 0x0, 0x4, 0x4, 0x6, 0x0, 0x5}, &(0x7f0000000080)={0x3, 0x4, 0x7fff, 0x2, 0x80000000000008, 0x102, 0x0, 0x497}, 0x0, 0x0) r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) sysctl$hw(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) close(r0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000000)='./file1\x00', 0x2000, 0x285b9a) select(0x40, &(0x7f0000000180)={0xfffffffffffffffd, 0x5, 0x200, 0xfffffffefffffffd, 0x4000000000005, 0x800000000210, 0xb, 0x7}, 0x0, 0x0, 0x0) r1 = kqueue() kevent(r1, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) r2 = open(&(0x7f0000000080)='./file1\x00', 0x0, 0x132) ioctl$FIONBIO(r2, 0x82907003, &(0x7f0000000140)=0x2) link(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r3 = socket(0x2, 0x3, 0x2f) r4 = dup(r3) setsockopt$inet_opts(r4, 0x0, 0x22, &(0x7f0000000040)="fd0cc085", 0x4) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r5 = socket(0x2, 0x3, 0x0) r6 = dup(r4) dup2(r6, r5) connect$unix(r5, &(0x7f0000000000), 0x10) sendto$inet(r4, &(0x7f00000001c0)="5e1351d18b9da08c", 0x90, 0x0, 0x0, 0x0) 4.780952134s ago: executing program 1 (id=259): execve(0x0, 0x0, 0x0) mknod(&(0x7f00000002c0)='./file0\x00', 0x1ffa, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x2, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) mknod(&(0x7f0000000040)='./bus\x00', 0x100000000205f, 0x2802) r0 = open(&(0x7f0000000280)='./bus\x00', 0x0, 0x0) sysctl$net_inet_esp(&(0x7f0000000240)={0x4, 0x1e, 0x2, 0x3}, 0x4, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r1, 0x0, 0x9, &(0x7f0000000240)="ea00000100000000", 0xc) setsockopt$inet_opts(r1, 0x0, 0x200000000000a, &(0x7f0000000100), 0x0) close(0xffffffffffffffff) pread(r0, &(0x7f0000000440)='+', 0x1, 0x80000002) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) execve(0x0, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) shmget$private(0x0, 0x2000, 0x20, &(0x7f0000ffc000/0x2000)=nil) r2 = open(&(0x7f0000000080)='./file0\x00', 0x1, 0x0) r3 = shmget(0x3, 0x2000, 0x740, &(0x7f0000ffc000/0x2000)=nil) shmat(r3, &(0x7f0000ffa000/0x3000)=nil, 0x3000) ioctl$FIONREAD(r2, 0x80206979, &(0x7f0000000100)) 3.647420541s ago: executing program 3 (id=260): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x84, 0x91, 0xff, 0x47}, {0x40, 0xf3, 0x8, 0xd}, {0x6, 0x80, 0x8, 0xfffff7fe}]}) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) sysctl$hw(0x0, 0x0, &(0x7f00000002c0)="c21761035c2532d761849f7a610000000000000800000023da0000004b56b4f6f5121762d0fdf83c", &(0x7f0000000000)=0x28, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000040)={0x0, 0x0}) write(r0, &(0x7f00000003c0)="f81ad30100060000000100000000", 0xe) ioctl$TIOCSETA(0xffffffffffffffff, 0xcd50441a, &(0x7f0000000040)={0x6, 0x7fff, 0x7, 0xd5, "00000000000000000000001500", 0x3, 0x1}) r1 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000500), 0x8, 0x0) ioctl$VMM_IOC_INTR(r1, 0xca605601, &(0x7f0000000040)={0x1, 0x0, 0x2005}) r2 = openat$tty(0xffffffffffffff9c, &(0x7f0000000000), 0x20, 0x0) ioctl$TIOCGETA(r2, 0x402c7413, &(0x7f0000000040)) syz_emit_ethernet(0x66, &(0x7f0000000280)=ANY=[@ANYBLOB="8f6f77ede655ffffffffffff86dd605f6ad900103a0000000000001000000000000000000000fe8000000000000000000000000000aa8f"]) syz_extract_tcp_res(&(0x7f0000000080), 0x1, 0x4) 3.644451576s ago: executing program 3 (id=262): setrlimit(0x8, &(0x7f0000000980)={0xb, 0x54}) (async) r0 = syz_open_pts() (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r2, 0x0) sendmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="10000000ffff000001"], 0x10, 0xe}, 0x8) (async) close(r0) r3 = syz_open_pts() (async) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) (async) setrlimit(0x8, &(0x7f0000000980)={0xb, 0x54}) getrlimit(0x1, &(0x7f0000000100)) (async) getrlimit(0x8, &(0x7f0000000080)) r4 = syz_open_pts() close(r4) r5 = syz_open_pts() openat$wskbd(0xffffffffffffff9c, &(0x7f00000000c0), 0x10000, 0x0) ioctl$TIOCSETA(r4, 0x802c7414, &(0x7f0000000340)={0x8, 0x5, 0xffffdf82, 0xffffff8c, "08ed95990000000000000000ffffffffffffffe6", 0x4, 0x4}) (async) writev(r4, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) readv(r5, &(0x7f0000000040)=[{&(0x7f0000000000)=""/18, 0x12}], 0x1) (async) r6 = socket$inet(0x2, 0x3, 0xfc) ioctl$FIONREAD(r6, 0x80206979, &(0x7f0000000000)) (async) ioctl$TIOCSETA(r3, 0x802c7414, &(0x7f0000000000)={0xbfffffff, 0x6, 0x0, 0xffffd6c8, "e435b3ff00000030c300046291bf9400", 0x543, 0x2}) sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) select(0x40, &(0x7f0000000080)={0xc5, 0x4, 0x0, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffe, 0x7fffffff}, 0x0, 0x0, 0x0) nanosleep(0xffffffffffffffff, 0x0) 3.63747476s ago: executing program 5 (id=263): r0 = open$dir(&(0x7f0000000000)='./file1\x00', 0x0, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r1, 0x0, 0x200100000001d, &(0x7f0000000600)="7d0db77e8301b1b0fe02d8e20558551c1e8548abe80ef0abb788fabf782c7c7700132767a6a1e4599df6091527c47d5d7e357e53b0f5e032555ed7970185194fb5195e973fad57b9d902e7bea07b5ffc924f71c818f8ad72f32a3528bcfb2aa8a2f844bf00af4a6661ff1d341cd002d84d74c31c81e02d9050426edbc791935700f02318fd99d9aff2984d472082b531a84519ce20c3d03f81ed881e007349e4c82c20bdf013c3c2ff3da6a105067381e694ce588bfdc065af30da28b9f6a237334862", 0xc3) lseek(r0, 0x9, 0x2) setuid(0xee01) socket(0x2, 0x2, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, 0x0) execve(0x0, 0x0, 0x0) sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x1, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0xa) accept$unix(0xffffffffffffffff, &(0x7f0000000040)=@abs, &(0x7f0000000080)=0x8) ioctl$BIOCGHDRCMPLT(0xffffffffffffffff, 0x40044274, 0x0) r2 = openat$speaker(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) pwritev(r2, &(0x7f0000000080), 0x0, 0xfffffffffffff217) writev(r2, 0x0, 0x0) pipe(0x0) shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x0) shmctl$IPC_STAT(0x0, 0x2, 0x0) r3 = semget(0x0, 0x0, 0xc6) semctl$GETPID(r3, 0x0, 0x4, 0x0) semop(r3, &(0x7f0000000140)=[{0x3, 0x6, 0x800}, {0x2, 0x6, 0x1800}, {0x3, 0x9, 0x1000}, {0x4, 0x7, 0xc00}], 0x4) r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000140), 0x8000, 0x0) ioctl$BIOCSFILDROP(r4, 0x80044279, &(0x7f0000000080)=0x9) r5 = socket(0x2, 0x4001, 0x0) setsockopt(r5, 0x6, 0x4, 0x0, 0x0) semctl$GETZCNT(r3, 0x7, 0x7, &(0x7f0000000180)=""/43) shmat(0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000) getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000200), &(0x7f0000000240)=0xc) r6 = semget$private(0x0, 0x2, 0x244) semctl$GETALL(r6, 0x0, 0x6, &(0x7f0000000300)=""/237) ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x2, 0xb3f, {[0xfffffbfffffffffb, 0x0, 0x2, 0x100200000, 0x6, 0x7, 0xdf60, 0xfffffffffffffffe, 0xfffffffffffffffe, 0x2f01, 0x93, 0x3, 0xffffffffffffffff, 0x200000000003, 0xd, 0x4, 0xfffffffffffffffe, 0x400000000100], [0xfffffffffffffffe, 0x80000001, 0xfffffffffffffffd, 0x20000001, 0x5e, 0x7b98, 0x80000000000001fe], [0x91f, 0x8000, 0x40000000, 0x0, 0xb, 0x11000, 0xffffffff00000000], [0x7c8, 0x1fffffffffb, 0xfffffffffffffffe, 0x100000003, 0x52adeb15, 0xb], [{0x4, 0x0, 0x0, 0x5}, {0xfffc, 0x22, 0x5}, {0x0, 0x0, 0xfffffffb, 0x80}, {0x5, 0x4, 0x5, 0xffffffffffffffff}, {0x0, 0x2, 0x7f, 0x8}, {0x0, 0x9, 0x2, 0x2000000000000000}, {0x0, 0x0, 0xfffffff9}, {0x5, 0x100, 0xf, 0xb}], {0x1, 0x5, 0x6, 0x3}, {0xfffe, 0x45, 0x6d5, 0x6}}}) 3.636512224s ago: executing program 0 (id=265): mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x2000, 0x4800) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x80, 0x0) mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0x881) open$dir(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2000, 0x801) open(&(0x7f00000000c0)='./file0\x00', 0x70e, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000080)={'tap', 0x0}) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000580)={0x3, &(0x7f0000000040)=[{0x1, 0xf9, 0xc, 0x2}, {0x81, 0x3, 0x9, 0x6}, {0xfffe, 0x3, 0xff, 0x5}]}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = getppid() fcntl$setown(r2, 0x6, r3) fcntl$setown(r1, 0x6, r3) fcntl$setown(r1, 0x6, r3) ktrace(&(0x7f0000000500)='./bus\x00', 0x1, 0x200, r3) syz_emit_ethernet(0x1000e, &(0x7f0000000080)={@random="b905f0ffffff", @empty, [], {@ipv4={0x8847, {{0x5, 0x4, 0x0, 0x0, 0xe6, 0x0, 0x1, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0x0}, @broadcast}, @icmp=@info_request={0xf, 0x0, 0x0, 0x205c, 0x3}}}}}) r4 = open(&(0x7f0000000040)='./bus\x00', 0x20000, 0x9) recvmmsg(r4, &(0x7f0000000480)={&(0x7f0000000440)={&(0x7f0000000080)=@in, 0xc, &(0x7f00000003c0)=[{&(0x7f0000000100)=""/200, 0xc8}, {&(0x7f0000000200)=""/192, 0xc0}, {&(0x7f0000000300)=""/131, 0x83}], 0x3, &(0x7f0000000400)=""/45, 0x2d}, 0xfff}, 0x10, 0x2, &(0x7f00000004c0)={0x6, 0x5}) r5 = syz_open_pts() writev(r5, &(0x7f0000000140)=[{&(0x7f0000000100)}], 0x1) sysctl$vm(&(0x7f0000000000)={0x2, 0x1}, 0x2, 0x0, &(0x7f0000000540), &(0x7f00000001c0), 0x0) ioctl$FIOASYNC(r4, 0xc0107008, &(0x7f00000000c0)=0x1f) 3.583418455s ago: executing program 6 (id=266): socket(0x6, 0x8000, 0x80) ioctl$TIOCSETA(0xffffffffffffff9c, 0x802c7414, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x0, "01000000d0ea5ea41e00", 0x0, 0x4}) (async) sysctl$kern(&(0x7f0000000040)={0x1, 0x3e}, 0x2, 0x0, 0x0, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) mknod(&(0x7f0000000280)='./file0\x00', 0x1100, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) (async, rerun: 32) r0 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000140), 0x20000, 0x0) (rerun: 32) ioctl$TIOCCBRK(r0, 0x2000747a) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x7, 0x0, 0x0, 0x0, 0x0, 0xa6, 0x3ff}, 0x400, 0x9, 0x0, 0x0, 0x200000003, 0x80000000000000c, 0x4, 0x7}) open(&(0x7f0000000000)='./file0\x00', 0x2, 0x100) (async, rerun: 32) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (rerun: 32) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) r2 = fcntl$dupfd(r1, 0x2, r1) close(r2) r3 = socket(0x2, 0x2, 0x0) connect$unix(r3, &(0x7f0000000000), 0x10) (async) r4 = socket(0x18, 0x2, 0x0) setsockopt$sock_int(r4, 0xffff, 0x1023, &(0x7f0000000080)=0x83, 0x4) (async) setsockopt$sock_int(r4, 0xffff, 0x1023, &(0x7f0000000080)=0x200, 0x4) (async, rerun: 64) sysctl$kern(&(0x7f00000000c0)={0x1, 0x31}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xff0a, 0x0, 0x37) (async, rerun: 64) ioctl$VMM_IOC_WRITEREGS(0xffffffffffffffff, 0x82485608, &(0x7f0000000240)={0x0, 0x0, 0x0, {[0x0, 0x0, 0x3, 0xffffffffffffffff], [], [], [0x0, 0x0, 0xffffffffffffffff], [{}, {}, {0x0, 0x0, 0x0, 0x800000000000}]}}) (async) r5 = kqueue() kevent(r5, &(0x7f00000000c0), 0x30, 0x0, 0x57d, 0x0) (async) r6 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) setreuid(0x0, 0xee01) (async) ioctl$WSKBDIO_SETDEFAULTKEYREPEAT(r6, 0x800c5709, &(0x7f0000000080)={0x4fa, 0x1, 0x6}) kevent(r5, 0x0, 0x0, &(0x7f0000000600), 0x2, 0x0) (async, rerun: 32) sysctl$kern(&(0x7f0000000040), 0x3, 0x0, 0x0, &(0x7f0000000080)="4f1d4c6344b80ed788b6a4515248df3aa745bb992c574ab4cdf5587145812eab4a988f7fafd7a01d99776d988908cd186b51f34f8c15ffa0c685ad4116c783959eff4278384b4000384dbb1c2aaeff10b4135529a1da6fda67c67469d954be811b25ec5521559154c586eefff122009f659cd3e27e98a3241495005f102d9101d158284c0ee3250aa7c11042330de22a299ab00894fdc9bac6042d", 0x4) (rerun: 32) 3.582443261s ago: executing program 5 (id=267): r0 = openat$speaker(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000b40)="825a4f47c21e02d7eda0f5903abf65b18d7c51050006ccffb40500007e515b7178642408fafd5793776666d4cd12c63d34", 0x31}], 0x1, 0x0, 0x0, 0x40d}, 0x40e) (async, rerun: 64) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x200, 0x0) (rerun: 64) ioctl$TIOCSETA(r1, 0xc4504449, &(0x7f0000000740)={0x0, 0x4000, 0x2f00, 0xf, "3901224200", 0x2007, 0x10}) (async, rerun: 64) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000940)="7e2fc545c6f4fa07800b52c5c3e4e8633db877462de6763508573b51b3d11ecd65fa4971c286e0f3f4f346c385a8f392951e2f7bd17a2fdc790e9a7ef2a10abfd79f91120e50bce1566f4c", 0x4b}], 0x1) (rerun: 64) unveil(0x0, &(0x7f00000000c0)='W\x00') 3.573269001s ago: executing program 3 (id=269): writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000080)='#', 0x1}], 0x1) ioctl$TIOCSETAF(0xffffffffffffffff, 0x802c7416, &(0x7f0000000000)={0x6, 0xfffffffe, 0xe5, 0x543, "22f00600000000e714db9b0e13edbe0000037600", 0xffff, 0x7498}) (async) mknod(&(0x7f0000000080)='./file0\x00', 0x2000, 0x5200) (async) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) socket(0x2, 0x8000, 0x8) setuid(0xffffffffffffffff) (async) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0x10, 0x0) ioctl$BIOCSDLT(r0, 0x8004427a, &(0x7f0000000200)=0x2) (async) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000240), 0x80, 0x0) ioctl$FIONREAD(r1, 0x80286987, &(0x7f0000000280)) (async) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) (async) open(&(0x7f00000000c0)='./file0\x00', 0x200, 0x0) sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b10005040000040000", 0x9, 0x400, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r2 = socket(0x11, 0x3, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) r3 = socket(0x18, 0x1, 0x0) setsockopt(r3, 0x1000000029, 0x35, &(0x7f0000000040)="03000000", 0x4) (async) sendto$unix(r2, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a378343712051eea040000000000", 0xb1, 0x0, 0x0, 0x0) r4 = socket(0x800000018, 0x1, 0x0) setsockopt$sock_int(r4, 0xffff, 0x4, &(0x7f0000000180)=0x7, 0x4) (async) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x2000000000000243, &(0x7f0000000100)}) r5 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r5, 0xc0106924, &(0x7f00000001c0)) (async) r6 = socket(0x18, 0x3, 0x0) ioctl$FIONREAD(r6, 0x801869a3, &(0x7f0000000100)) listen(r4, 0x1) setsockopt$sock_linger(r2, 0xffff, 0x80, &(0x7f00000000c0)={0x100, 0x2}, 0x8) (async) sendto$unix(r6, &(0x7f00000002c0)="2363cca2be9cfa5db751617b8793c9650d0b0f65802e0e93f7", 0x19, 0x405, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0xa) 3.502937749s ago: executing program 0 (id=271): mknod(&(0x7f0000000040)='./bus\x00', 0x100000000205f, 0x2801) r0 = open(&(0x7f0000000280)='./bus\x00', 0x690, 0x0) ioctl$VNDIOCCLR(r0, 0x80384601, &(0x7f00000000c0)={&(0x7f0000000000)='./bus\x00', 0x4, &(0x7f0000000080)='./bus\x00', 0x6}) (async) ioctl$VNDIOCCLR(r0, 0x80384601, &(0x7f00000000c0)={&(0x7f0000000000)='./bus\x00', 0x4, &(0x7f0000000080)='./bus\x00', 0x6}) 3.489584727s ago: executing program 3 (id=273): ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x0, [{0x1, 0x7}, {0x2, 0xff03}, {0x1, 0x101}, {0x0, 0x80c}, {0x3}, {0x5}, {0x2, 0xaa59}, {0x3, 0xb59}, {0x1, 0x1}, {0x2, 0x100}, {0x1, 0x1}, {0x3, 0x80000000}, {0x3, 0x5}, {}, {0x2, 0x5}, {0x1, 0xffffffff}, {0x3, 0x1}, {0x2}, {0x3, 0xdffffffc}, {0x3, 0x7ff}, {0xbb08c0840fa32129, 0x6}, {0x1, 0xf}, {0x1}, {0x0, 0xf208}, {0x2, 0x6}, {0x2, 0x1}, {0x4, 0x1fc}, {0x1, 0x800002}, {0x2, 0xffffffff}, {0x0, 0x9}, {0x1, 0x5}, {0x1, 0x4}]}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x37}, 0x2, 0x0, 0x0, 0x0, 0x0) setreuid(0x0, 0xee01) setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="00006885ac14"]) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) (async) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket(0x2, 0x2, 0x0) bind(r0, &(0x7f0000000000), 0x10) (async) bind(r0, &(0x7f0000000000), 0x10) ioctl$TIOCSETA(0xffffffffffffff9c, 0x802c7414, &(0x7f0000000040)={0x0, 0x0, 0x1, 0x0, "01000000d000"}) (async) ioctl$TIOCSETA(0xffffffffffffff9c, 0x802c7414, &(0x7f0000000040)={0x0, 0x0, 0x1, 0x0, "01000000d000"}) sysctl$kern(&(0x7f0000000040)={0x1, 0x3e}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$kern(&(0x7f0000000040), 0x3, 0x0, 0x0, &(0x7f0000000080)="4f1d4c6344b80ed788b6a4515248df3aa745bb992c574ab4cdf5587145812eab4a988f7fafd7a01d99776d988908cd186b51f34f8c15ffa0c685ad4116c783959eff4278384b4000384dbb1c2aaeff10b4135529a1da6fda67c67469d954be811b25ec5521559154c586eefff122009f659cd3e27e98a3241495005f102d9101d158284c0ee3250aa7c11042330de22a299ab00894fdc9bac6042d", 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sysctl$kern(&(0x7f00000000c0)={0x1, 0x37}, 0x4, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000140)=0x2c, 0x0, 0x2e) open(&(0x7f0000000040)='./file0\x00', 0x200, 0x0) (async) r1 = open(&(0x7f0000000040)='./file0\x00', 0x200, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x10, r1, 0x0) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x10, r1, 0x0) connect$unix(r1, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0xa) (async) connect$unix(r1, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0xa) 3.440654827s ago: executing program 3 (id=276): setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) (async) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x186) (async) r1 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) write(r1, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) (async, rerun: 64) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x2012, r0, 0x0) (async, rerun: 64) r2 = syz_open_pts() (async) sendto$inet(r1, &(0x7f00000001c0)="bfae74ee3dca716905decac44bef4cc2a9397fb16ebd9805c239aa95dba480416f2c06e0047e3b46d44e2d004bf3ef2bf79f920b68735d5036d31b10e2afcbe6dae4e0f1c3b1f3bc79dae10ba91ec377ee5f18e4fe6b5f2048bba83244457a150559ae19b4168d5ecbbdb14aea7283bfa36aabd6e9572b97232c888c9184a61753c031e34764e876434b7f8724ea567a178ea8ebef07be85bcdcb3ceeb9e14f430acd376f4403dcdb9b482b5a14d72ea67c519b1596cce", 0xb7, 0xc, &(0x7f0000000080)={0x2, 0x3}, 0xc) fcntl$lock(r2, 0x9, 0x0) select(0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) sysctl$kern(&(0x7f0000000000)={0x1, 0x48}, 0x2, 0x0, &(0x7f00000000c0), 0x0, 0x0) (async, rerun: 64) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) sysctl$kern(&(0x7f0000000000)={0x1, 0x4d}, 0x2, &(0x7f0000000180)="5f2a1ff1", &(0x7f00000000c0)=0x4, &(0x7f0000001180), 0x4) (async, rerun: 64) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, 0x0) (async, rerun: 64) sysctl$kern(&(0x7f0000000100)={0x1, 0x48}, 0x2, &(0x7f0000000280)="db6314c8cacf7390f70debde6b044dcab894990e513237d44500a23b1052073f0ae48b9f7946f9835a1158c0e95028ab7acc9d0d6a0a0c3a06b66f23e04ceaf556631d2a410f83b1ef8d3cca29c0b142adad0c35d8af0ef86ef4ed9e58577090bfb207ab062dd5f930609d92c6bf", &(0x7f0000000140)=0x6e, &(0x7f0000000500)="5faa9220a8d53825a53e68ba92d056c2795964003c42369225b9a6d7e709f4aa1805253a8ec1d9757cf17794b1d47ce69ea1123fd46d93a131fc7b8a844f8c68e2c0d76f9cff17bdb6359e2cbea4013a67ec5c9d9ddb048147beb60b39053a1013608455f18477433a54f46ce143b97ae680f28fb49d0c4a575a2b0a0533fc771e1635c3198c5200ef3677efb25ed557206de23384a564b35a0f4d507e7208d9169fb1fb55fe173848eef6e5841ca32676a33158d013c642d109a4acd9e2042ee3c485569b6cc578d09a1aa2dfcf1bb7a046ed37261f0e8f5199ca19f75dca493360c911f115981279faeb41b18dbf5ee09c717b8f8f97993f649014eb04e4af607246b88357e288eee843cad45abb4b2612f0bb6328ea55ce7df6286806be948cebc369df06078181717b4f1167bb6267b10ae7733956b51afc32e6c0b8b48065dae7e78e016dde952128732a175af4dc40100d42b810fa6d811b79109f95c4eb5aa8d6777ee6ae9f0b35a46a51e9397c7281cd1099b6bb88b46af9c5905c6e9074dfbe4d65e8f7bcda19ce74b009e5cf4aae58f0a219e485964ecbafe3411dbc08e3267f042c899db18965de265df7e0d4256dd708cd03d75ce2269257939766b371eb0d52c9678f44f40c71f2945d9bb2225507b91ad1abb7d4cc785bf383f0d6c88eff2e92e4b776b76388d2c0df11fe2f3ca1e82284f1e4fe390c6922586c31cea850d48f39d44fb79753f6e96f4ed9b8403cdd683b48d7386c754f265859901cfdf66adf5a78aecae01dbe69dbbecefb461ace93444caa322d91be14c7973f6119dfe22d44537354a377806abc2b6b07bce0bf620b715be061e50680ba9f6e60b8e37adeb538d63bad4966610f1e4f5be518ae110c6745e21dae5ffc023fa1ad108eea0f32ad00491ccd4177fb10a3b3b42be0061af437659d1d0119eba5a6b94a580760cf1924c20c6fb11da90918a580028385744753bdc36a19377058652916f14e4b0757cbc8c46a4cd2791859432589199c20c1bb4efa3f6d6ab373d0753ce259ba090823a6862b4eb314f0d3094d3364e1edf305c635d590acd67fc3f9853bb9216b72e8ca8256af8f98fb9e8a9fbb1616614379fb90795724cd33d33053ad025639d5637a183c9006c79f47c7421d04f930f443c8c13ee8089d3b87dfec5cb3e10d3e38ece4ba511cf56309bbf0a8767b6ca8e3873fa85b2fcb2e72248b14c24750f4b526b4bba152a7cc902ac4e1cdd0ac332effa4b308faedfae1b93aeb2030927ee395f38469c263b349882049e59f292edfe70ad481c1dcd5f78b41b699bf9b3b1daa8fb578f6f52cb6b4fc026902ce50359dd2ac05760904b2ee1dffe832257f7df828155452b3e3d9323ab0a70ad4bcc2c48d55c6bb63eef717908a711159fbdb89c3ab485239fd212966dffb3d409f56ee55696c6b6f1dd3f9895160ee7f9f7d6aa55c32878daba430d18d08bcf8c8550f5dd9ea46f64c6d8997f2857ea6a637856c820eb4bf7f5529370dc7d401f1a930f3732f13f79d68d5c771afe8b1a6aba65094fec81a9b6bc481d57f37d3f23d71f94ddca9882732b10bc438b04fbb5f7bdb3592cb7ea4e7b261687dfe8f282c219b04e2f9ab37e98e202ec027495bfd0f1d631de3b9bbf528d3097f647c3db11026b1993159a3156368027629f39d83835e8a3f3eed48dcb46c0018a431f71b7e9096363396648c6f9776e01e3ba58ce2e7390d1494595f9707cc10f59a6b619ba6871156925490e9c025c0dab7d405de92cfccc2cb06a1ac4271918b05906179a7c5c434f8e0b66c826d3fca576462635e0687167587c254fc0dd7d436d25c40d5be93a2dff2d4bb2220d81014c4901a79a9ac645e4f909212b18fa53f61f432c4daedc12890f5920b91c8d1dc25972f5b41274404caa7b5092c539ddcb76de07ce040d548dd95f0ff3af6eaaabbbdc0c8a8dd75a527b1d26d21db9af3c8b7eff5325960fe51d53b5f63bfb7d3f3a2455e2c0baa99f3ff2cab2528f01b8d24bf4e066bba1f419be28487eb8ca3b42995cb78ce8e94625f050cdf7de3d1d724c22bbaba0a6c5f6c68c92f476998e61dd03a31e8ddff268e515065478d526aa43096ef34fb0f7612998328fca2737d00551f1049750adbddb133a6c5ea0997bb10b31491a998c292e362dc302dc7223bf02e20bbba60ae94b26feb700e1b8c02350f637c911a2876e053e43ffc53b3cb84562a114686b9250f6bc92aadcdd7891e7040640f525667201d84c3e8a11bebb8dd0d2d27be4aba5b7106ce08713214ec99c8ad9661d7c43007691bd23c5922123daf68cd80ec0e667e08f7efb2ffca1a9ab2efd3c112b049c4f2a081402b4e237203e719e0547a0c492738c0a87c2396b98e3f024701c8c79e5b0eda96c63375534cce86568b051cb703bebe7fe12622e2a82156b5c7146ac94590cd9f3153fff7be8538af5412cdd0462dd791c508b9d41c2b9414e9b4af80108c90e95079c193b4d3edb7049ee6a3028d78e0248e2707b941a318203f45b3aacfb8878c1a1a9af2527ef17577fee37b806224e2a1cb876453521fed1d2c29500aabb3a76fe96e1d7711ea79bf7eac64dad967b54e710b6881a39b16a3e6342ba4e281d2b51cee3c023015f303a991ae10c8790294927ea241250775b63cc9b0d1266dd39672f321de231e232bc03dde3d51a5989af8d0d05247c055a7308657190bb4431a43c346164e2351a5c3fb5498dfe3355d13fe60c410aad5e7859d11f815e63fac7ed7e0d243cceeb6d2f4f1f8ea9103a7b05694211663eb7c0557adee68793ca2eecbbf1dc77e6799818ca4e0839656214832511e848a848f723190fe00ca340a66e5dfc6c487141660d4a800a81d0d0fc7c7ff6ef22f52e7236d8e8f312d09ba5a9fd548d50677254c25318da190ab4e46d455fdbfde5ddd402d2be4194842b3dbfc6f415378ad3e6e9170dd5d1557d806d9a3188687fd1342a6a8074d57670b6e8155dd8c7f78c7d68cfa15ad7a3de269307fe59af3a7d66585c2dcd7ebb4f3c3b33a5ca2d49c28262839bfecb36f09a5d570b2f94b95047fa57cda9105701df022e217d800e56413fab104e6e33d628a83285568a48a72c248be3d39fbcfee3b202b87835a6431588c6c1a6a48fa2c46468576331b911fbd3b0fc43444b316e45fbe62a2037151fa0e4e9da16844563da1ba93dfda2fb15e742c2620afe47a944c1a6bfed90491d8996a51a67dedcac3f425e20ec550dbb4bbe382976f518263149685c57d356f9e272b4d0e12532c9c02c12cfe9d1ae2ee92b5ff2cd3e3ab46055a8dac13f02bae875a0376df50fc88f72804563d2d5dbe7e1d01c6ad8f196bbaac90d08b26e3b7453321e772e68f1228c3f8f6acbfbe7b815bb29c3995577d5c83fdd60f6aa6bae0062401ba8c7f7a28068c7b8ff2c8517633e47294225978c24d829d730a13b1e47f56424653e22859a385b2eea3cb993e9e9386b9985950c786586b5ca73404715987b63b90626cdd62518ef811a0fb095e93883ede6c206825a8955747515c9c79606acddfabe6b5b10622f7aba1d751285a51e583871a84b708b6307ff2adb20d0c0a560df778f4112a15d4c08a2eea927f37e62a6ca2a4c669affd7c22d0a6b4cd149b1601d9f736ade9b0fa3ac64c1594c74ab542f75c1f88aa66369c6f9372399683f42cdd9823de1731a3625d3e855bceaaeab7e168beed8b6b538e32677fc61fd4bd57e16b299ebf2272495046d4644ef12c402ee87098ff6ed10be3ad0efd434888dc2cd25943dc34ecabd3e6c5206d436d677cea6a5a0529ce6059c25490faca6c28321bdad4099a874dba5aeccdadaa51c2647e362f052ab67a5793544b0dc39c028ad0ac214b13320dbac74d30736a2e5415a63904252b2138c935c84b46f8478342901a1ef32a5bc7f7d8760a65daead0cdc9cc8906085cbe9b89560e3d8f470d0b42d920ad40a3423b6bef4608d9444818a37c9485790618179b04fcc7311371b3271af985401c3a5ddf6be812c7b1fb619759d8b05a02f44915e9b7fc0ba0f2e3b2effe62d91794119bba93e97afd8879f70322b81cc27bfbc78f2cd8bb75aeac074accb3db46084a15ea17357057206b77f0ee1cf49210707b93e277a21dc942f0146f351950c09d99ad3bd027f3cfe186600656cc609a322de93b00be3ff65fa5eec19732868ddf77c41b3e89e4d8e2deacab5f2f7d3e92ee7bd43f933964ea27772ddbc4e932fbb346f185a21b1a5e0ece8330b6b9edeec1ec4eebffeaa97c1c32b59417f372aefd1a3bdf6851bf468f12b891fe3d0dac762fb851b9bd1229714e7f78aad3f6fd3a1cdcc8d6e998d4919b457c5574a7b494f3a682983bb1257af50b8d971a0122752f8d3ba69e33d9d8d0af50cc9278d6d73fd5b5f17398b0129d7cd05bfcda4672703b9c7f93bb769bbaa62fe2ccc4471ea8c4e9f672757d8a2219f778a7f1658e47c612032817527270f9ca2ffe17aefee2feb24c723017a225da9f162f595c850f5a2d2de515266178bfd56cb6bf530fd343bec454d16705657838f92ebed8b889b7e6ea76215e1e927a2ceac1b9f55e3de3effbe0c5440b7d6bcdd278cd846752cac56cd3684c5bc0769baccfccdf0ab08a390d7e48ecb851aab81d618dd3b3e1599258676793e77637df63784c35028e14054c9184db21641c52194cf7679844dd62a37b219160a053a92f252b8951852aa064d9736881b2e759ae622e6e02c46611b1ec51575f7f1a36aecfe436eac075858229e0c4f4f7c3daac948a514de1a5b09fc141617d9ba4842c1a98639c81aecae48d9efd50bb68e6d32407303765b09d2e3f8b19f91fa792fd91bf8d6a8a0ff82674db3f6d6cf53ae66a5bf61ae7f5c66447d3c8717bd534a10b796f463c0c65ce1fc9c71660db99ec00c75b0ea3bcbebb4dcdc96b271d95fa752a8568e561735b992228a8eb455573f30bcedf757354471b4c3d35fa9a6060e3e849184aca6ce336165861caf68feb6d6d668c4681b22ddc5fcf4dbfa77619b894bbbdefe218d24fc70c82a80d6a66f157c4f91ecc9de925736387ccc44cd057dfe5e26c84709c086648088d7b18926120dfd0430bccbc7e38823605e39d139c50ef5b51b066fb5b696d8a15143229217de15025a0ddd6426f70d7ac89c217b940018006335e6db2ebb2b0fc144e582217d280784985b37d6130999637bd5b7ad99b24dde849d9e064050e04ad3eadffb335bcf7c6b596594db30f1dbdc2cd5e413336ef9ce73afcf8e565ee4b31317c51ebe081d98cf889966482bc90bd65b148e604d28cb33031cb58ec841f963cecdbb8cd2ef8659c73eb9599a2b575538aa109b1de28bfc77733ee620f99b090b9406e597277f752f95c78d0209f6246abc17d3ad0054506ff446534c6f7a1a5d7914d4475d5cd8ef4ade59efcd4f72b1fe6b601dd0ec87daf6a7fe0f39a96c49ddc4638ac32f0440454c2087e2828e85f412b8f5a7d184b046bf0d3e0bd01ffa06f04d1b4e309ce63ee50e3c2f477aa7657806f642bed6f5b1e90d4f3ffa20e0f20d8455e68d7da8e444b5304a6437483ac6958aa19ad5f27e5e3e380efe6208ae9db608bef9a362a38c485293a5c0d91359ef6317c49df771d41aad3f76a5657b08e15db9f3ca87b5e76810972784bc9dfed6c8f4cbd199786e620eba363e26de27f4cb570bbf2bc4ac47793171c28fc794543dd271ed977b259028fdd9be0af80bbf0a6a48c079a3fa56938433bbb0a2886ab65d845171bc172d8abba8c63", 0x1000) (async) fcntl$lock(0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x3, 0x0, 0x0, 0x100000001}) sysctl$kern(&(0x7f0000000000)={0x1, 0x42}, 0x6, 0x0, 0x0, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) 3.176858203s ago: executing program 0 (id=294): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) unveil(&(0x7f0000000240)='./file0/file0/../file0\x00', &(0x7f00000000c0)='x\x00') unveil(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='r\x00') unveil(&(0x7f0000000340)='./file1\x00', &(0x7f0000000140)='r\x00') unveil(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='c\x00') 3.090052213s ago: executing program 0 (id=295): r0 = socket(0x2, 0x2, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r1 = socket(0x2, 0x1, 0x0) ioctl$FIONREAD(r1, 0xc0206923, &(0x7f00000001c0)) ioctl$FIONREAD(r0, 0x8040691a, &(0x7f00000001c0)) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1) sysctl$kern(&(0x7f0000000100)={0x1, 0x32}, 0x2, 0x0, 0x0, &(0x7f0000001440)="02000000", 0x4) open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x1700) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000380)={0x10000, [{0x1, 0x2}, {0x0, 0xfffffffb}, {}, {0x0, 0x1}, {0x0, 0x9}, {0x0, 0x4}, {0x3, 0x8}, {0x0, 0xc8}, {0x5, 0x2}, {0x0, 0xff}, {0x2}, {0x3, 0x204}, {0x3, 0xfffffffd}, {}, {0x2, 0x7fffffff}, {0x0, 0x7}, {0x1, 0x6}, {0x1, 0x7ff}, {0x0, 0x2000000}, {0x0, 0x3}, {0x1}, {0x1, 0xfffffffc}, {0x2}, {0x0, 0x6}, {}, {0x1}, {0x2, 0x3}, {0x3}, {0x1}, {}, {}, {0x1, 0x57fd}]}) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) r2 = socket$inet(0x2, 0x3, 0x0) ioctl$FIONREAD(r2, 0x80206979, &(0x7f0000000100)) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000000)={0x4, &(0x7f0000000040)=[{0x7, 0x3d, 0x3, 0x9}, {0x2, 0x9, 0x3, 0x8}, {0x1, 0x8, 0x4, 0x7ffc}, {0x3c56, 0x0, 0xc, 0xffffffd5}]}) syz_emit_ethernet(0x1000e, &(0x7f00000001c0)=ANY=[]) 3.089274479s ago: executing program 4 (id=296): r0 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000380), 0x8, 0x0) readv(r0, &(0x7f0000000080), 0x31) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) open(&(0x7f0000000040)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf79ea) setuid(0xffffffffffffffff) execve(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) ioctl$FIONREAD(r0, 0x4004667f, &(0x7f0000000100)) r2 = socket(0x2, 0x3, 0x2f) r3 = dup(r2) setsockopt$inet_opts(r3, 0x0, 0x22, &(0x7f0000000040)="fd0cc085", 0x4) sendmsg$unix(r2, &(0x7f0000002a40)={&(0x7f0000000000), 0x2, 0x0}, 0x0) socket(0x18, 0x3, 0xf2) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x80, 0x0) ioctl$BIOCSETIF(r4, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x84, 0x91, 0xff, 0x47}, {0x40, 0xf3, 0xff, 0x9}, {0x6, 0x80, 0x8, 0xfffff7fe}]}) sysctl$hw(0x0, 0x0, &(0x7f00000002c0)="00231b000f4070632c2dec30c21761035c2532d7a0ea9200001f00385c24fc3be7b6e1a884658496a8347a5a477e20fb60c2339e6da0145cbf8af67160d9e0355b87b25f0088222d05f9e9e8837631dd666bb275", &(0x7f0000000000)=0x54, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETF(r4, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x5e, &(0x7f0000000340)=ANY=[]) sendmsg$unix(r2, &(0x7f0000002a40)={0x0, 0x0, 0x0, 0x34}, 0x0) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x5dee, 0x91, 0xfd, 0x802}, {0x6c, 0x72, 0xff, 0x9}, {0x6, 0x80, 0x8, 0xfffff7fe}]}) sysctl$hw(0x0, 0x0, &(0x7f0000000140)="0021054d3d00000004346ff1234cb715de5ee647b7230e9b93a8f33376f3a025f643aa5151e6c6af1fe33acba438fb80fc00000000000000000000000061b17dbdb3edcb8b3d17897c8a5132581966d1a43d0101000000000000a7d903e126661afb62319e2adb61e2015235", &(0x7f0000000000)=0x6c, 0x0, 0x0) dup2(r1, r1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mlock(&(0x7f0000685000/0x2000)=nil, 0x2000) ioctl$BIOCSETWF(r1, 0x80104277, &(0x7f0000000040)={0x0, 0x0}) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f00000000c0)={0x4, &(0x7f0000000080)=[{0x2, 0x2, 0x66, 0xc}, {0x1, 0x5, 0x0, 0x7}, {0xfffd, 0x0, 0x6a, 0x800}, {0x2, 0x7, 0x7f, 0xd57}]}) 3.081032333s ago: executing program 4 (id=298): open(&(0x7f0000000000)='./file0\x00', 0x615, 0x166) ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9f, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000240)=""/91, 0x5b}], 0x1) dup2(r1, r0) execve(0x0, 0x0, 0x0) select(0x40, &(0x7f0000000000)={0xfffffffffffffffd, 0x0, 0xdc4, 0x564, 0x9ce8, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0) unveil(0x0, &(0x7f0000000080)='c\x00') syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket(0x2, 0x2, 0x0) r3 = socket(0x2, 0x400000000002, 0x0) setsockopt(r3, 0x0, 0x20, &(0x7f0000000080)="01000000", 0x4) dup2(r3, r2) bind(r2, &(0x7f0000000000), 0x10) r4 = socket(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0xffff, 0x20, &(0x7f0000000080)=0x6, 0x4) connect$unix(r4, &(0x7f0000000000), 0x10) write(r4, 0x0, 0x0) 2.95197513s ago: executing program 4 (id=300): mknod(&(0x7f0000000040)='./file0\x00', 0x6000, 0x80000001) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x18, 0x1, 0x0) setsockopt(r0, 0x1000000029, 0x35, &(0x7f0000000040)="03000000", 0x4) ioctl$TIOCSTAT(0xffffffffffffffff, 0x20007465, &(0x7f0000000040)) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) execve(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = socket$inet(0x2, 0x3, 0x102) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = getppid() ftruncate(r1, 0x8e54) fcntl$setown(r2, 0x6, r4) write(r3, &(0x7f00000002c0)="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", 0xfffffdaf) close(r2) shutdown(r1, 0x2) r5 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x480, 0x0) read(r5, &(0x7f0000000300)=""/10, 0xa) 2.949676998s ago: executing program 1 (id=301): r0 = socket(0x11, 0x3, 0x0) (async) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x4000000000000003}}) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x8) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) r1 = socket(0x18, 0x1, 0x0) close(r1) r2 = socket(0x18, 0x2, 0x0) setsockopt(r2, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) (async) connect$unix(r1, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) (async, rerun: 64) dup2(r0, r2) (async, rerun: 64) mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0xd02) (async) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mlock(&(0x7f000002a000/0x2000)=nil, 0x2000) (async) preadv(r3, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/104}, {&(0x7f0000000140)=""/192, 0x100000}, {&(0x7f0000000340)=""/175}, {&(0x7f0000000000)=""/18}], 0x10000000000002b8, 0x0) sysctl$net_inet_icmp(&(0x7f0000000040)={0x4, 0x2, 0x1, 0x5}, 0x4, 0x0, 0x0, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async, rerun: 32) syz_emit_ethernet(0x4e, &(0x7f0000000100)={@random="8f6f77ede655", @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "5f6ad9", 0x18, 0x3a, 0x1, @remote={0xfe, 0x80, '\x00', 0x0}, @local={0xfe, 0x80, '\x00', 0x0}, {[], @icmpv6=@mld={0x82, 0x0, 0x0, 0x2, 0xa47, @mcast1}}}}}}) (async, rerun: 32) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x11}, 0x4000000000000007, 0x0, 0x0, 0x0, 0x0) (async) kqueue() 1.846233919s ago: executing program 4 (id=303): r0 = semget(0x2, 0x0, 0xa0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001600)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$unix(0x1, 0x5, 0x0) sendto$unix(r3, &(0x7f0000000180)="b3a9bf551b56cd7eea54c0b2b81159ac7a1fadda7ba14ede8376e3f6041c2568e189cf7a4861844c72d0b6189cf7815863051918e62edf1b69fc2ab38800a3115fa208d1924643a30cc052c7c754bc96907420a63f9ba140157b3a10dabd8c0d0000000000000075e48be7f77b828eab3fc52e234d195c97088a94b26cfd46a1c971c23b590745a7de283a7212ab811940866a03f4548fceaf796a478e434f6a79d2e98a51b6f2a796", 0xa9, 0x4, &(0x7f0000000080)=@abs={0x0, 0x0, 0x3}, 0x8) read(r1, &(0x7f0000000000)=""/59, 0x3b) r4 = openat$pf(0xffffffffffffff9c, &(0x7f0000000380), 0x8, 0x0) ioctl$TIOCSETA(r4, 0x802c7414, &(0x7f0000000040)={0x0, 0x0, 0x1, 0x0, "0000001b000000080000000000000a00", 0xffffffff, 0x4}) sysctl$net_inet6_ip6(&(0x7f0000000040)={0x4, 0x18, 0x29, 0x33}, 0x5, 0x0, 0x0, &(0x7f00000001c0)="21007c323fee01c24c68495c241b8efa7ce8c04d13fe4e00fd88ff12d38acc1e1b9749f986f9385e4a908a12a93fe2af746c8fc36c1aefb8e5831d0dc22a4dc5d35ea319f29bd959c4b7d25bcf7d0f7264f138b5f0cfa818dca3a50bbca323f676af51783744b98611bc47c1c0bdf068ab6af6d74e7f7cd0972a8b750910573ac3c225835f6c337d5da9879e97f7a79100"/154, 0x3) r5 = open(&(0x7f0000000800)='./file1\x00', 0x800, 0x120) ioctl$FIONBIO(r5, 0x82907003, &(0x7f0000000140)=0x1) ioctl$BIOCGSTATS(r5, 0x4008426f, &(0x7f0000000300)) ioctl$FIONBIO(r2, 0x8004667e, &(0x7f0000000340)=0x80000000) setrlimit(0x8, &(0x7f00000000c0)={0x7, 0x54}) r6 = syz_open_pts() sysctl$net_inet6_ip6(&(0x7f0000000400)={0x4, 0x18, 0x29, 0x10}, 0x4, &(0x7f0000000840)="610bb43e80a488c2baffbfa90a51ec8c7d53e95d5512247adc1b1a9f88df6b8833535d9fe50a813011daeb0883c2e70806c2f6506cde09a0c5babbcce2e17423e3aefb846a01078b3000e761d664b4c73fd90c9acd04eda46af6288b33181228514ffb1ead8e8757453b9afd94ebfdb058670bc5f1bdd99eff8d42bd4a948e20e452374fcbb5aa8ee4de3dbaf49d8a135a0abc74b4f42ebe682e23016d177916790d0d1ab46e34acd696778b6fb2dcb59373258400b793eedeb427598d55522ce1", &(0x7f0000000440)=0xc1, &(0x7f0000000940)="d42dd42402f42eb56a5d8ba0d4787d3878b8e30342765015d06fa832df022dfc5e6415fe7a44c108035c09fa0c7f16851eccfec145fb0b15db911e827d036c1e9f07e8d7d4ef373fc79c056dfb7b96589a4f2e0f426bc60c456bed8405e8922f987778a86bf9c5bf79356af77dc9b34679c7678a94b3f37a71d30d69092cc65c55617d72e6e564289073aa5841a870daf736d80758fe63d1dee0b24e600315e4348588f5086d50d0206dafa93e6b2f283bad56e141f2216fe4a8c436e065d66920f553de97fb39ce18d63eadd41593", 0xcf) close(r6) r7 = syz_open_pts() ioctl$TIOCSETD(r7, 0x8004741b, &(0x7f0000000500)=0x7) setsockopt(r5, 0x4, 0xa6, &(0x7f0000000100)="2efb62b42c2cd57415b9a1cff76dce2f1e4b056b39404c7f055b9e495c2baabfb4303ab162", 0x25) writev(r6, &(0x7f0000000480)=[{&(0x7f0000000540)="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", 0xffffffffffffffe7}], 0x1) unveil(&(0x7f0000000280)='.\x00', &(0x7f00000002c0)='r\x00') mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) getsockopt$sock_cred(r2, 0xffff, 0x1022, &(0x7f00000003c0), &(0x7f0000000040)=0xc) semctl$IPC_RMID(r0, 0x0, 0x0) semget$private(0x0, 0x0, 0x450) semop(r0, 0x0, 0x0) 1.845868472s ago: executing program 1 (id=304): r0 = accept$unix(0xffffffffffffff9c, &(0x7f0000000000)=@abs, &(0x7f0000000040)=0x8) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x10000, 0x0) r4 = openat$tty(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) fcntl$dupfd(0xffffffffffffffff, 0xa, 0xffffffffffffff9c) (async) r5 = fcntl$dupfd(0xffffffffffffffff, 0xa, 0xffffffffffffff9c) openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0) (async) r6 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0) r7 = openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r8 = dup(0xffffffffffffffff) poll(&(0x7f00000001c0)=[{r0, 0x10}, {r1, 0x80}, {r2, 0x4}, {0xffffffffffffffff, 0x4}, {r3, 0x35}, {r4, 0x10}, {r5, 0x120}, {r6, 0x4}, {r7, 0x100}, {r8, 0x8}], 0xa, 0x2) ioctl$TIOCCHKVERAUTH(r8, 0x2000741e) (async) ioctl$TIOCCHKVERAUTH(r8, 0x2000741e) ioctl$WSKBDIO_SETMAP(r8, 0x8010570e, &(0x7f0000000280)={0x6, &(0x7f0000000240)=[{0x3, 0x4c2a, 0x40, 0xff, 0xfff8}, {0x7fff, 0x6, 0x5, 0x3, 0x3ff}, {0x3, 0x4, 0x9, 0x3, 0xfffa}, {0x8, 0x0, 0xc4d, 0x7, 0x7}, {0x3, 0x8180, 0x7, 0x8e11, 0x200}, {0x6, 0xb63d, 0x1000, 0x9, 0x4e}]}) fchmod(r3, 0x83) openat$speaker(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$LIOCSFD(r3, 0x80046c7f, &(0x7f0000000300)=r5) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x1012, r7, 0x0) (async) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x1012, r7, 0x0) ioctl$BIOCSETWF(r5, 0x80104277, &(0x7f0000000380)={0x6, &(0x7f0000000340)=[{0x1, 0x6, 0xd, 0x8}, {0x6, 0x7f, 0x4, 0x2}, {0x3, 0x35, 0x8, 0x8ff3}, {0x69c, 0x5, 0x2}, {0x4, 0x5, 0x2, 0x1}, {0x164, 0x7, 0xc6, 0x1}]}) (async) ioctl$BIOCSETWF(r5, 0x80104277, &(0x7f0000000380)={0x6, &(0x7f0000000340)=[{0x1, 0x6, 0xd, 0x8}, {0x6, 0x7f, 0x4, 0x2}, {0x3, 0x35, 0x8, 0x8ff3}, {0x69c, 0x5, 0x2}, {0x4, 0x5, 0x2, 0x1}, {0x164, 0x7, 0xc6, 0x1}]}) ioctl$VMM_IOC_CREATE(r3, 0xc2585601, &(0x7f00000003c0)={0x10, 0xbb1d, [{&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x401}, {&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x4}, {&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x6}, {&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff4000/0xc000)=nil, 0x299476f6}, {&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x4}, {&(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff6000/0x4000)=nil, 0x100000000}, {&(0x7f0000ff4000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil}, {&(0x7f0000ff6000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x7}, {&(0x7f0000ff6000/0x4000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0xee0}, {&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x1000)=nil, 0x9}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil}, {&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff7000/0x2000)=nil, 0x100000000}, {&(0x7f0000003000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x7ff}, {&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x8001}, {&(0x7f0000006000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x675}], '.\x00', 0x55c3}) ioctl$TIOCSTAT(r1, 0x20007465, &(0x7f00000005c0)) fcntl$getown(r8, 0x5) r9 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000600), 0x800, 0x0) ioctl$KDGKBMODE(r9, 0x40044b06) (async) ioctl$KDGKBMODE(r9, 0x40044b06) pwrite(r5, &(0x7f0000000640)="a6cb7ae91210b1edf41d763fe5704d82dc0cd4112b8b45b69b96778047bb4aeecc3e05b6bdc9f0c590e4177e1adf38e86cd45f0f7227951cd2688504a3e2c48bd80cefe7577a9b16b756aa0c904c637b76a5f6c183c31886bd887ef8b89b8e00ca499ddead557818abf88f488f0ce71a029dd1a7a74cc5e0caa54ef8416ff465f794f235de373f15d5065d11fbed1706baad9bd2b1fb92c988b3fe008673516ab9b969de5dea2cfa44ac12cfb58ecd0e7aa286d321f84ff097c4dbec2da311835bc83d04b84a5353a410fb85381feb9092201bad1f5f8bb07a5ac3", 0xdb, 0x7) getpid() writev(r2, &(0x7f0000000880)=[{&(0x7f0000000740)="c1deb2c82bddeeda892ffb351e4cb83eefb78088f3beb3740e7c14f3a741d5c8e671724cf7c22c2207e00d5c0d827d93ef432b7156ba3c8f032d158d965043cc", 0x40}, {&(0x7f0000000780)="e53c31b5bd454d9fab39efd197d4146ca5c5b9ba689b96864f636e4983efdc8536b74aeb3f3f6cda1ee175fd5e74e89aac00ae8185951c58fb0374f53ddf11df2ddd67ea324c9ceb5fb6af55b260d6e16146296f0b99b3ac837f40333b13aa86b6e5cb16ffcb292bbd3e13e85a615ce47a31c5280600d0e28e4a364687c55e40353f039573193c0593440f05a598576fa55444f20c3c8c5dd509e9afbeec695c02db5a0e057c578c7f4f23e95328bff4fb742f21a2d188720321a4137157a56b4a7b982cb5d429fbf59e5e8fb2c6acbb9d37", 0xd2}], 0x2) openat$wskbd(0xffffffffffffff9c, &(0x7f00000008c0), 0x100, 0x0) (async) r10 = openat$wskbd(0xffffffffffffff9c, &(0x7f00000008c0), 0x100, 0x0) ioctl$WSKBDIO_SETMAP(r10, 0x8010570e, &(0x7f0000000940)={0x1, &(0x7f0000000900)=[{0x8, 0xd6, 0x7, 0x0, 0x400}]}) (async) ioctl$WSKBDIO_SETMAP(r10, 0x8010570e, &(0x7f0000000940)={0x1, &(0x7f0000000900)=[{0x8, 0xd6, 0x7, 0x0, 0x400}]}) write(r0, &(0x7f0000000980)="5a248c82c3dadf3894cf1cc8bc", 0xd) (async) write(r0, &(0x7f0000000980)="5a248c82c3dadf3894cf1cc8bc", 0xd) chroot(&(0x7f00000009c0)='./file0\x00') (async) chroot(&(0x7f00000009c0)='./file0\x00') getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000a00), 0xc) 762.648988ms ago: executing program 5 (id=307): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) setrlimit(0x8, &(0x7f0000000580)={0xa, 0x5a}) r0 = syz_open_pts() ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc5005601, &(0x7f0000000000)={0x10, 0xffffffffffffffff, [{&(0x7f000046c000/0x3000)=nil, &(0x7f0000663000/0x4000)=nil, 0x5}, {&(0x7f00005c9000/0x2000)=nil, &(0x7f0000826000/0x4000)=nil}, {&(0x7f0000060000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil}, {0x0, &(0x7f000079a000/0x1000)=nil, 0x1}, {&(0x7f000017c000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil}, {&(0x7f0000000000/0x2000)=nil, &(0x7f00005f6000/0x4000)=nil, 0x6}, {0x0, &(0x7f000014c000/0x2000)=nil, 0xfffffffffffffffa}, {&(0x7f0000ff0000/0xf000)=nil, &(0x7f00002c6000/0x4000)=nil, 0x200000000000}, {&(0x7f0000752000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x2}, {&(0x7f00004cc000/0x4000)=nil, &(0x7f0000661000/0x3000)=nil}, {0x0, &(0x7f0000156000/0x1000)=nil, 0x16}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0xc4}, {&(0x7f000038f000/0x1000)=nil, &(0x7f00007f6000/0x2000)=nil, 0x100000000}, {&(0x7f0000ffa000/0x4000)=nil, 0x0, 0x100000001}, {&(0x7f00001cf000/0x4000)=nil, &(0x7f0000142000/0x4000)=nil}, {&(0x7f0000573000/0x2000)=nil, &(0x7f000015d000/0x4000)=nil}], './file0\x00'}) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x10000000000001}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket(0x18, 0x1, 0x0) setsockopt(r1, 0x1000000029, 0xc, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) mprotect(&(0x7f000015d000/0x4000)=nil, 0x4000, 0x1) setsockopt(r1, 0x1000000029, 0xc, &(0x7f0000000080)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) close(r0) ioctl$TIOCSPGRP(r0, 0x40047477, &(0x7f0000000000)) r2 = syz_open_pts() mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r3 = open(&(0x7f0000000080)='./file0\x00', 0x200, 0x29) ioctl$WSMOUSEIO_SCALIBCOORDS(r3, 0x81205724, &(0x7f0000000100)={0x7ff, 0xa6, 0x2000027, 0x101, 0x4, 0xa1b0, 0x10001, 0x10, [{0x4, 0x288f, 0x2, 0x71002}, {0x3, 0x9, 0xfffffffd, 0xfffffff9}, {0x104, 0xf88, 0xfffffffc, 0x9}, {0x4, 0x1, 0x8007, 0x7}, {0x401, 0x3, 0x2800, 0x7}, {0x1, 0x650, 0x3, 0x9b}, {0xce1, 0xffffffff, 0x4f4, 0x10000}, {0x6, 0x803, 0x14, 0x8}, {0x2, 0x84, 0x5, 0xca9}, {0x8, 0x8009, 0x1000, 0x204}, {0x1cc, 0x10004, 0xc, 0x3}, {0x8, 0xa, 0x8}, {0xb94, 0x807, 0x4, 0x1}, {0x29a71717, 0xfffffffa, 0x60, 0x6}, {0x1000c, 0x5, 0x5, 0x3}, {0x0, 0x0, 0xfff, 0x20010001}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r3, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r3, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r4, 0x0, 0x9, &(0x7f00000000c0), 0x0) ioctl$TIOCSETAW(r0, 0x802c7415, &(0x7f0000000500)={0x80000002, 0x5, 0x1f, 0xfffff7b4, "8b02000300090a7837b13e13355f4fa7c2f4e300", 0xfffffffd, 0x2}) dup2(r0, r2) r5 = socket$inet(0x2, 0x8000, 0x97) getpeername$inet(r5, &(0x7f0000000240), &(0x7f00000002c0)=0xc) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) 760.595965ms ago: executing program 6 (id=308): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x80, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) msgget$private(0x0, 0x307) chmod(&(0x7f0000000040)='.\x00', 0x35e) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x205318) r1 = open(&(0x7f0000000000)='./bus\x00', 0x2, 0x0) select(0x40, &(0x7f0000000180)={0xfffffffffffffffd, 0x44809e9d, 0x401, 0x3, 0x1ffffffffffffffc, 0x181c, 0x8, 0x10000000009}, 0x0, 0x0, 0x0) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) r2 = syz_open_pts() ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x84, 0x91, 0xff, 0x47}, {0x6c, 0xf3, 0xff, 0x9}, {0x6, 0x80, 0x8, 0xfffff7fe}]}) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000240)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200}}) r3 = open$dir(&(0x7f0000000200)='./file0\x00', 0x80, 0x2) mmap(&(0x7f000028c000/0x1000)=nil, 0x1000, 0x1, 0x2016, r3, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f00000000c0)='./bus\x00', 0x20, 0x2) mmap(&(0x7f0000362000/0x3000)=nil, 0x3000, 0x2, 0x12, r4, 0x0) ioctl$FIONREAD(r2, 0x4004667f, &(0x7f00000001c0)) r5 = socket(0x18, 0x3, 0x0) connect$unix(r5, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) getsockname$inet(r5, &(0x7f0000000080), &(0x7f0000000000)=0xfffffffffffffe22) r6 = socket(0x800000018, 0x3, 0x1) bind$unix(r6, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000080)="fe6c7a4022fa6ed9f6829f7d89a54578fc2d2be8dcd4ea47f568418df305b73507f8009cca295e42", 0x28}], 0x1) sysctl$hw(0x0, 0x0, &(0x7f00000002c0)="00231b000f4070632c2dec30c21761035c2532d7a0ea9200001f00385c24fc3be7b6e1a884658496a8347a5a477e20fb60c2339e6da0145cbf8af67160d9e0355b87b25f0088222d05f9e9e8837631dd666bb275", &(0x7f0000000000)=0x54, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000140)={0x48, 0x0}) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) r7 = socket(0x11, 0x3, 0x0) setsockopt(r7, 0x11, 0x4, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) 759.026234ms ago: executing program 1 (id=309): mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x58fd) ioctl$VNDIOCSET(0xffffffffffffff9c, 0xc0384600, &(0x7f00000000c0)={&(0x7f0000000040)='./file0\x00', 0x3, &(0x7f0000000080)='./file0\x00', 0x8}) open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809ea0, 0xffffffffffffffff, 0x7, 0x2800000000000000, 0x181c, 0x7, 0x2000000000000004}, 0x0, 0x0, 0x0) (async) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809ea0, 0xffffffffffffffff, 0x7, 0x2800000000000000, 0x181c, 0x7, 0x2000000000000004}, 0x0, 0x0, 0x0) select(0x40, &(0x7f0000000180)={0xfffffffffffffffd, 0x44809e9d, 0xffffffffffffffff, 0xfffffffefffffffe, 0x2000000000000000, 0x210, 0x8, 0x7}, 0x0, 0x0, 0x0) 680.818334ms ago: executing program 0 (id=311): r0 = semget$private(0x0, 0x0, 0x492) semctl$GETALL(r0, 0x0, 0x6, &(0x7f0000000000)=""/25) r1 = semget(0x3, 0x4, 0x84) semctl$SETALL(r1, 0x0, 0x9, &(0x7f0000000040)=[0xffa9, 0xff01, 0x2, 0x2, 0xc6c]) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000000080)=""/98) semctl$SETVAL(r1, 0x2, 0x8, &(0x7f0000000100)=0x13d4) r2 = semget$private(0x0, 0x1, 0x40) semop(r2, &(0x7f0000000180)=[{0x0, 0x400, 0x1800}], 0x1) semop(r1, &(0x7f00000001c0)=[{0x1, 0x8001}], 0x1) r3 = msgget(0x0, 0x325) r4 = geteuid() getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000240)=0xc) r8 = geteuid() msgctl$IPC_SET(r3, 0x1, &(0x7f0000000300)={{0x3, r4, r7, r8, 0x0, 0x108, 0x6}, 0xffffffff, 0x100000000, 0x0, 0x0, 0x6, 0x0, 0x4, 0x5}) open(&(0x7f0000000000)='./file0\x00', 0x615, 0x166) ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9f, 0x0) r9 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x10, r9, 0x0) r10 = kqueue() kevent(r10, &(0x7f0000000340)=[{{}, 0xfffffffffffffffe, 0x4, 0x40000000, 0x8, 0x2}], 0xe4a, 0x0, 0x4000a9fa, 0x0) msgget$private(0x0, 0x41c) lchown(&(0x7f0000000400)='./file0\x00', r4, 0x0) ioctl$FIONREAD(0xffffffffffffffff, 0x4004667f, &(0x7f0000000440)) r11 = socket$unix(0x1, 0x5, 0x0) sendmsg$unix(r11, &(0x7f0000000700)={&(0x7f0000000480)=@abs={0x0, 0x0, 0x0}, 0x8, &(0x7f0000000640)=[{0x0}], 0x1, &(0x7f0000000680)=[@cred={0x20, 0xffff, 0x0, 0x0, r6}, @cred={0x20, 0xffff, 0x0, r5, 0x0, r7}, @cred={0x20, 0xffff, 0x0, 0x0, r6}], 0x60, 0x6}, 0x410) connect$unix(r11, &(0x7f0000000740)=@file={0x1, './file0\x00'}, 0xa) semop(r2, &(0x7f0000000780)=[{0x0, 0x5, 0x1000}], 0x1) getsockopt$SO_PEERCRED(r11, 0xffff, 0x1022, &(0x7f00000007c0), 0xc) openat$diskmap(0xffffffffffffff9c, &(0x7f0000000800), 0x2, 0x0) shmget(0x1, 0x2000, 0x281, &(0x7f0000ffc000/0x2000)=nil) 674.823779ms ago: executing program 1 (id=312): rename(&(0x7f00000000c0)='./file0/../file0/file0\x00', 0x0) select(0x40, &(0x7f0000000000)={0xfffffffffffffffd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400000000}, 0x0, 0x0, 0x0) syz_emit_ethernet(0x3e, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000002c0)=ANY=[@ANYRES8=0x0]) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) fcntl$lock(0xffffffffffffffff, 0x8, &(0x7f0000000040)={0x3, 0x1, 0x0, 0x100000001}) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x62}) r0 = syz_open_pts() close(r0) r1 = syz_open_pts() ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000080)={0x5, 0xe000000, 0x10db, 0x0, "3749c7a40dea0000170000000000000000ff0100", 0x2, 0x5}) readv(r1, &(0x7f0000000140)=[{&(0x7f0000000380)=""/222, 0xde}], 0x1) close(r1) writev(r0, &(0x7f0000000700)=[{&(0x7f0000000000)="b9", 0x1}], 0x1) sysctl$kern(&(0x7f0000000000)={0x1, 0x42}, 0x6, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff0800ac1400aa10009078080005600000000000000000000000000000000059e59a0d0d5115cd48ac3cb5f6840c5937ac4615056468e706da2e800ba39922e009e0e3193f8c98a490315dcdc405aae91084337ddfeb1f741426ee9e54afeeff5de8ccea7c24923c4515f76118a613a8f600640fbe"]) r2 = socket(0x18, 0x1, 0x0) shutdown(r2, 0x2) ioctl$FIONREAD(r2, 0xc028756b, &(0x7f00000001c0)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r3 = socket(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0xffff, 0x20, &(0x7f0000000080)=0x6, 0x4) connect$unix(r3, &(0x7f0000000000), 0x10) sysctl$kern(&(0x7f0000000080)={0x1, 0x4d}, 0x2, 0x0, 0x0, &(0x7f0000000240), 0x0) sendto(r3, 0x0, 0x0, 0xa, 0x0, 0x0) ioctl$DIOCMAP(0xffffffffffffffff, 0xc0106477, 0x0) sysctl$kern(&(0x7f0000000500)={0x1, 0x3b}, 0x2, 0x0, 0x0, &(0x7f0000000000), 0x0) 674.171437ms ago: executing program 5 (id=313): r0 = syz_open_pts() r1 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) pwritev(r1, &(0x7f00000002c0)=[{&(0x7f0000000080)="4606", 0x2}], 0x1, 0x7) close(r1) ioctl$TIOCSPGRP(r0, 0x40047477, &(0x7f00000002c0)) 663.443763ms ago: executing program 6 (id=314): r0 = openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000000700), 0x1, 0x0) ioctl$WSMUXIO_LIST_DEVICES(r0, 0xc1045763, &(0x7f0000000780)={0xfffffffb, [{0x3, 0x4}, {0x1, 0x6}, {0x2, 0x3ff800}, {0x3, 0x1000}, {0x3, 0x5}, {0x2, 0xe97a}, {0x2, 0x8}, {0x2, 0x9}, {0x1}, {0x3, 0x7fff}, {0x3, 0xfffff11a}, {0x2, 0x5}, {0x3, 0x5}, {0x2, 0x8}, {0x3, 0x9}, {0x2, 0x35}, {0x2, 0x1}, {0x1, 0xff}, {0x7faecbceff09a697, 0x4}, {0x2, 0xffff}, {0x2, 0x2}, {0x1, 0x7}, {0x1, 0x7}, {0x3, 0x2}, {0x3, 0x7}, {0x2, 0x7}, {0x0, 0xfffffffa}, {0x3, 0x5}, {0x2, 0xfff}, {0x2, 0x4caf}, {0x2, 0x9}, {0x2, 0x7342e74a}]}) (async) sysctl$net_inet_tcp(&(0x7f0000000040)={0x4, 0x2, 0x6, 0x13}, 0x4, 0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffff2c) 635.050627ms ago: executing program 6 (id=316): r0 = socket$inet6(0x18, 0x8000, 0x6f) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) fcntl$lock(r1, 0x9, &(0x7f0000000440)={0x0, 0x1, 0x400000000000, 0x300000006}) getpeername$inet6(r0, &(0x7f00000000c0), &(0x7f0000000240)=0xc) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write(r2, &(0x7f0000000200)="ac69dfedd3", 0x5) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000040)={{0x0, 0x0, 0xffffffffffffffff}, 0x1008402}) mknod(&(0x7f0000000100)='./bus\x00', 0x2000, 0xd02) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r4 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VNDIOCSET(r4, 0xc0785101, &(0x7f0000000040)={0x0, 0x0, 0x0}) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000140)="27e365d64afa1408319ded102f2f54c769bd841da68c06c4867f8066ef19164727c0606ca3f8ade2ac6bccc6e7107871b14324a7209c20989979", 0xffffff70}], 0x1) write(r2, &(0x7f0000000080)="c30516845e", 0xff55) r5 = socket(0x11, 0x3, 0xfd) sendto$unix(r5, &(0x7f0000000100)="b1000501000000ae05003f01070000000008000000000500fef96ecfc72fd3357ae30200004e30ffd2d236acf20bf404be01000000f7c8cf5f882b297de1aa050400ce94e2f0ad3ebbc257e4411f139b672f335c22db830c032bfa896443c32118210000720fd38bfb0000fd54c125191b1257aea8c500001602fbfe0c2300000100be1f25a2e791505c47f8343712cc11fffffffffffffc00"/177, 0xb1, 0x400, 0x0, 0x0) r6 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0x10, 0x0) ftruncate(r3, 0x10000) ioctl$BIOCSETIF(r6, 0x8020426c, &(0x7f0000000180)={'tap', 0x0}) ioctl$BIOCSETF(r6, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x34, 0x1, 0x2, 0x80000004}, {0x30, 0xfa, 0x5, 0x20}, {0x16, 0x2, 0x4}]}) syz_emit_ethernet(0x212, &(0x7f0000000580)=ANY=[]) sysctl$net_inet_ipip(&(0x7f0000000080), 0x1, 0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0) shmget$private(0x0, 0x3000, 0x1a0, &(0x7f00000a4000/0x3000)=nil) 633.979705ms ago: executing program 4 (id=317): setrlimit(0x1, &(0x7f0000000100)={0xa, 0x56}) open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x79) ktrace(&(0x7f0000000180)='./file0\x00', 0x4, 0x900, 0x0) setreuid(0xee00, 0x0) r0 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$FIOGETOWN(r0, 0x4004667b, &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BIOCSETIF(0xffffffffffffff9c, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) ioctl$FIONREAD(r1, 0x8020699d, &(0x7f00000001c0)) ioctl$WSMOUSEIO_SRES(r0, 0x80045721, &(0x7f0000001500)=0x4) ktrace(&(0x7f0000000140)='./file0\x00', 0x0, 0x80001514, 0x0) 500.879573ms ago: executing program 2 (id=323): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000040)=@file={0xd19450564dee018c, './file0\x00'}, 0xa) connect$unix(r0, &(0x7f0000000000)=@file={0xd1653077bafa0114, './file0\x00'}, 0xa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@file={0xd1653077bafa0114, './file0\x00'}, 0xa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000000)=@file={0xd1653077bafa0114, './file0\x00'}, 0xa) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) preadv(r3, &(0x7f0000000080)=[{&(0x7f0000000480)=""/240, 0xfffffc47}, {&(0x7f00000000c0)=""/179, 0xfdac}, {&(0x7f00000002c0)=""/229, 0xe2}], 0x50, 0x0) ioctl$WSMOUSEIO_SCALIBCOORDS(r3, 0x81205724, &(0x7f0000000200)={0x8, 0xfffffffa, 0x1f60, 0xfffffffb, 0xa07, 0x1, 0x9, 0x10, [{0x5, 0x3, 0x8000, 0x55}, {0x3, 0x9e4, 0x7fffffff, 0x731}, {0x3ac8, 0x7, 0xefaa, 0x8}, {0x9, 0x3, 0x9, 0x7fff}, {0xc4, 0x1000, 0x5, 0x3}, {0xfff, 0x8001, 0xa, 0x8}, {0x7, 0x80000000, 0x2, 0x8ca}, {0x800, 0x7f, 0x0, 0x2b7}, {0x2, 0x1db, 0x800, 0x1}, {0x3, 0x800, 0x1b19, 0x2}, {0x9, 0x80000001, 0x98, 0x8}, {0x7, 0x6, 0x7d, 0xa}, {0xf, 0x3, 0xa2, 0x4}, {0xffff, 0xfffffff5, 0x2}, {0x8001, 0x7, 0x1, 0x2}, {0x6, 0x6, 0x6, 0x62273b82}]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) ioctl$WSMOUSEIO_GETPARAMS(r5, 0x80105727, &(0x7f0000000180)={&(0x7f00000000c0)=[{0x43, 0x4}, {0x42, 0xfffffff7}, {0x40, 0xffffffff}, {0x4, 0x8000}, {0x100, 0xffffffff}], 0x5}) connect$unix(r4, &(0x7f0000000000)=@file={0xd1653077bafa0114, './file0\x00'}, 0xa) close(r0) r6 = socket(0x18, 0x2, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) ioctl$FIONREAD(r6, 0xc0406938, &(0x7f00000001c0)) write(0xffffffffffffffff, &(0x7f00000002c0)="7c84cf179279b50eda5dd1951a661d2e3a20851082c188f8b3d8a063d2025ff0", 0x20) readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000002140)=""/4112, 0x1000}, {&(0x7f0000001140)=""/4092, 0x1000}], 0x1000000000000037) accept$unix(0xffffffffffffffff, &(0x7f0000000100)=@file={0x0, ""/74}, 0x0) 498.817274ms ago: executing program 1 (id=324): r0 = socket(0x11, 0x3, 0x0) select(0x40, &(0x7f0000000180)={0x80000000, 0x44809e9d, 0xb5, 0xfffffffefffffffd, 0x2000040000000002, 0x212, 0x9454, 0x9}, 0x0, 0x0, 0x0) mknod(&(0x7f00000001c0)='./file0\x00', 0x2000, 0x205b9a) r1 = kqueue() kevent(r1, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) r2 = open(&(0x7f0000000200)='./file0\x00', 0x1, 0x0) ioctl$FIONBIO(r2, 0x82907003, &(0x7f0000000140)=0x1) mknod(&(0x7f0000000000)='./file1\x00', 0x2000, 0x285b9a) r3 = open(&(0x7f0000000080)='./file1\x00', 0x40, 0x132) ioctl$FIONBIO(r3, 0xc0307004, &(0x7f0000000140)=0x1) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f00000004c0)="b96abcf5ac7cffa09e", 0x9) recvmmsg(r0, &(0x7f0000000100)={&(0x7f0000000180)={&(0x7f0000000480)=@un=@file={0x0, ""/520}, 0x20a, 0x0, 0x0, 0x0, 0x44}}, 0x10, 0x2, 0x0) 498.346231ms ago: executing program 4 (id=325): setuid(0xffffffffffffffff) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x4, 0x0, 0x0, 0xfffffffe}, {0x2, 0x0, 0x0, 0xffffffff}, {0x7f, 0x0, 0x0, 0xc}]}) mknod(&(0x7f0000000400)='./file0\x00', 0x2000, 0x202) r0 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000300), 0x8, 0x0) ioctl$VNDIOCSET(r0, 0xc0384600, &(0x7f00000000c0)={&(0x7f0000000100)='./file0\x00', 0x10005, 0x0}) nanosleep(&(0x7f0000000340)={0x0, 0xe18f}, &(0x7f0000000040)) clock_gettime(0x3, 0xfffffffffffffffe) r1 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000240), 0x80, 0x0) ioctl$VNDIOCSET(r1, 0xc0384600, 0x0) r2 = shmget$private(0x0, 0x1000, 0x1, &(0x7f0000ffc000/0x1000)=nil) shmctl$IPC_STAT(r2, 0x2, 0xfffffffffffffffe) nanosleep(&(0x7f0000000000)={0x911, 0x5d}, &(0x7f0000000380)) ioctl$VNDIOCGET(r1, 0xc4104603, &(0x7f0000000840)={'./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x7, 0x101, 0x2}) ioctl$TIOCSETA(0xffffffffffffffff, 0xcd50441a, &(0x7f0000000040)={0x7, 0x80000001, 0x7, 0xd7, "00000000000000000000cf8c077b00", 0x8, 0x3}) r3 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000500), 0x8, 0x0) ioctl$VMM_IOC_INTR(r3, 0xca605601, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) setrlimit(0x8, &(0x7f0000000980)={0xb, 0x54}) r4 = syz_open_pts() close(r4) syz_open_pts() writev(r4, &(0x7f0000000280)=[{&(0x7f0000000c00)="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", 0x411}, {0x0}], 0x2) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x4, 0x0, 0x0, 0xbffffffe}, {0x2, 0x0, 0x0, 0xffffffff}, {0x7f, 0x0, 0x0, 0x1}]}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xff0a, 0x0, 0x37) sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xff0a, 0x0, 0x37) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc0e99db6de761f86, 0x0) r5 = open$dir(&(0x7f00000001c0)='./file0\x00', 0x2, 0x101) ioctl$FIONREAD(r5, 0xc0106978, &(0x7f0000000140)) mknod(&(0x7f00000006c0)='./file0\x00', 0x6000, 0x1) utimes(&(0x7f0000000700)='./file0\x00', &(0x7f0000000000)={{0xfffe000000000, 0xc}, {0xff, 0x4}}) 128.96673ms ago: executing program 2 (id=330): r0 = syz_open_pts() ioctl$TIOCCDTR(r0, 0x20007478) sysctl$kern(&(0x7f0000000040)={0x1, 0x35}, 0x6, 0x0, 0x0, 0x0, 0xfffffffffffffc7d) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket(0x2, 0x2, 0x0) setsockopt(r1, 0x3, 0x21, &(0x7f0000000140)='!\x00\x00\x00', 0x4) sysctl$kern(&(0x7f0000000040)={0x1, 0x47}, 0x3, 0x0, 0x0, &(0x7f0000000080)="4f1d4c6344b80ed788b6a4515248df3aa745bb992c574ab4cdf5587145812eab4a988f7fafd7a01d99776d988908cd186b51f34f8c15ffa0c685ad4116c783959eff4278384b4000384dbb1c2aaeff10b4135529a1da6fda67c67469d954be811b25ec5521559154c586eefff122009f659cd3e27e98a3241495005f102d9101d158284c0ee3250aa7c11042330de22a299ab00894fdc9bac6042d", 0x4) (async) sysctl$kern(&(0x7f0000000040)={0x1, 0x47}, 0x3, 0x0, 0x0, &(0x7f0000000080)="4f1d4c6344b80ed788b6a4515248df3aa745bb992c574ab4cdf5587145812eab4a988f7fafd7a01d99776d988908cd186b51f34f8c15ffa0c685ad4116c783959eff4278384b4000384dbb1c2aaeff10b4135529a1da6fda67c67469d954be811b25ec5521559154c586eefff122009f659cd3e27e98a3241495005f102d9101d158284c0ee3250aa7c11042330de22a299ab00894fdc9bac6042d", 0x4) sysctl$net_inet_tcp(&(0x7f0000000000)={0x4, 0x2, 0x6, 0x11}, 0x4, 0x0, 0x0, 0x0, 0x0) sysctl$vm_swapencrypt(&(0x7f0000000000)={0x6, 0xb, 0x2}, 0x3, 0x0, 0x0, 0x0, 0x0) (async) sysctl$vm_swapencrypt(&(0x7f0000000000)={0x6, 0xb, 0x2}, 0x3, 0x0, 0x0, 0x0, 0x0) sysctl$kern(&(0x7f0000000000)={0xa}, 0x7, &(0x7f0000000080), 0x0, 0x0, 0x24) geteuid() (async) geteuid() syz_emit_ethernet(0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="8f6f77ede655ffffffffffff86dd605f6ad900383a0000000000000000000000000000000000fe8000000000000000000000000000aa02009078000000006006c33e00003a80fe8000000000000000000000000000aa38d00de4d0c4b6de000000000000000188"]) unveil(&(0x7f0000001940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000001c0)='c\x00') unveil(&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000380)='c\x00') (async) unveil(&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000380)='c\x00') unveil(&(0x7f0000000340)='./file1\x00', &(0x7f0000000300)='x\x00') unveil(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='r\x00') unveil(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000003c0)='x\x00') sendmsg$unix(r1, &(0x7f00000018c0)={&(0x7f0000000180)=@abs={0x1, 0x0, 0x2}, 0x8, &(0x7f0000001800)=[{&(0x7f0000000200)="7d51144af9cc013312a7292fb017dd0651ad9cac2a5dae3d9edfc542fc192200a74cdec2415ddfe864414a662ee4fc3013b04214cc703ea90c7bb5dccd632c4994ca45b3cbfa08cee5220a2837d66afc50c66c8b957078", 0x57}, {&(0x7f0000000280)="5b94e47ae1becc43406542f502bdb8b8169da948e69996595448e2e1d8a0743b34899b3abcef06fd0e623a52b8eb39e798a18a36a79df8366e179f511cb7bd667775e697bbcece55f2196a3ede2795bbf1810be6d5379a4536221a325b3f8b7d54bd00b9cec4641116f7259040207bab5898e35671f94e7941b872975a9d0ad336162f668ae7ba057ab00a756206253aadea77fd90c6c31ecd96c65969c2faf8b3a2afaa07aa87da7796c1176a8e4b386f3344f4923730c2fd8eb4c5a2044d9daedd9af8", 0xc4}, {&(0x7f0000000380)="6513ced8c3ac5041109c761ddaf1f96385e3a9f8ed0318dfdff2fef393fbe266706a3661d052d4f8453422bbc8d3d2b81e1312c81e6ff49a35c782f4e5670767306dfab202532fbd74f2c1ae44cdc61397c8de372ebbee6db97724846355ac15a10659d0d40363b2bf0292ba4d55bbc7e045d51aefe7ee15c4a3a68417749e328cd6c86aa3c97514d6f95aefa45e85facce8c8f58ea88588df55e0859f8bab114db002d883259543de174065e26b3870addf6199e056f07cc1a1936b8c49dd94b2b28d39eb5a3d6ec82c173e86210b9b5006aae47de886ca9d6b4e06fb62b93b91af0b40308b0792a988", 0xea}, {&(0x7f0000000480)="68d79a99a8ff8ee0696f220925207cfec4b7180ba17403b7e4bcd3419b94ffae93467c73f995049b496c78e4a3c9cd9851a078881e01222920a64f5a79fd28176c1c3ff5273afe98", 0x48}, {&(0x7f0000000500)="a23b684ec31f5123cc690cdfca52819bc4647799d2ebb9b504dc9857613ff20e82b6efdbd0457413f15a0a3b17161f2fb81fa6088193695c58b6d2c90f7e10de679ccff5e796e9860c9311cf22becd111fecda7cee14c4649e176c38e3c19e3a6f6bddd5d1632ac93b312abdf84b613d9f7dfe286b382205669692e3b02499d07868b37b21d172367f0f19b351cb8fd814622cc91229411303ca51de55a218a3e63e13aefa55ef618d6971e8c2a57e42bb1e7635db32fcff71b3c93d9b6f", 0xbe}, {&(0x7f00000005c0)="67893cd60ccce8b190ce90ce00e51b7aa20876edf7123059c3140c5d54ef8f0957cafa89954d4bf724040b66a26ea625ce1ac75d5f15bf451fe55a8bec1b9f02fc29a72fc2f3f7b68be8526926b17e2ed6805ce1fb5014205b1dd282cf9f1e4aa2fe700cc0d51ec8d3b55c04b28103abf9d3cacccaa8faf69b52f73f2ff6ff22b7123a0363fadac78e17a21ce37655138a5797c9b94f08991f5c303e175902d8a2e1c0e4f67cf4d299ca6e8b127f122d311922a29776c29119695878e6b91ab5c302617d184ec40bbf6767e714d658d20a2300d0dd99527c5529089b40e1547bbbe6443eb05ccd", 0xe7}, {&(0x7f00000006c0)="f4a8cbb6ee9d402db80d7f50bb49555fff90472d5e979ba315c186444aaf748c4d6230b3f59d28cc6ba80f7d79c81329aee6be7c", 0x34}, {&(0x7f0000000700)="0d95bfca8cc4e3e7fd00669bc2b7", 0xe}, {&(0x7f0000000740)="511b95319e52a10881f3ed6c0b1274d5152a179aa66e505f15e6937ec52784057110075d8da0b619c8bbd849baa34e527e2098135bb6955ed4b63fa2e1b9dea2ad03523d49185dd751a5712a65a674c66b1c6d423118f8be7c18e57e50781fdf2aa620a3ef02028db00762a219917bd91bb71add1c71a6fe2782bfb31e66503cb3ab9dab80d16af12bae7d2101c91c0cea6716ab681c", 0x96}, {&(0x7f0000000800)="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", 0x1000}], 0xa, 0x0, 0x0, 0x4}, 0x40b) syz_extract_tcp_res$synack(&(0x7f0000001900), 0x1, 0x0) (async) syz_extract_tcp_res$synack(&(0x7f0000001900), 0x1, 0x0) 128.455957ms ago: executing program 7 (id=331): chmod(&(0x7f0000000040)='.\x00', 0x35e) setuid(0xee01) r0 = socket$inet(0x2, 0x2, 0x0) getsockopt(r0, 0x0, 0x9, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0xe6) chmod(&(0x7f0000000080)='./file0\x00', 0x2ea) mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0xd02) r1 = open(&(0x7f0000000100)='./bus\x00', 0x1, 0x104) openat$bpf(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r1, 0xc0285108, &(0x7f0000000000)={0x0, 0x29, 0x0}) chdir(&(0x7f0000000100)='./file0\x00') mkdir(&(0x7f0000000380)='./file2\x00', 0xc1) mkdir(&(0x7f0000000400)='./file0\x00', 0xc2) rename(&(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='./file2\x00') 127.333868ms ago: executing program 7 (id=332): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x80, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x4c, 0x1, 0x86, 0x3}, {0x48, 0x3, 0x26, 0x40007}, {0x1026, 0x80, 0x0, 0xfffff001}]}) syz_emit_ethernet(0x1000e, &(0x7f0000000280)=ANY=[]) write(0xffffffffffffffff, &(0x7f0000000080)="c30516845e", 0xff55) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x100000001}) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0xffffffff, 0xb, {0x0, 0x1}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket(0x18, 0x1, 0x0) setsockopt(r1, 0x1000000029, 0xc, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) setsockopt(r1, 0x1000000029, 0xc, &(0x7f0000000080)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) r2 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) openat(r2, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$TIOCCBRK(r2, 0x2000747a) syz_extract_tcp_res$synack(&(0x7f0000000080), 0x1, 0x0) openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x80, 0x0) (async) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) (async) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x4c, 0x1, 0x86, 0x3}, {0x48, 0x3, 0x26, 0x40007}, {0x1026, 0x80, 0x0, 0xfffff001}]}) (async) syz_emit_ethernet(0x1000e, &(0x7f0000000280)=ANY=[]) (async) write(0xffffffffffffffff, &(0x7f0000000080)="c30516845e", 0xff55) (async) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x100000001}) (async) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0xffffffff, 0xb, {0x0, 0x1}}) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) socket(0x18, 0x1, 0x0) (async) setsockopt(r1, 0x1000000029, 0xc, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) (async) setsockopt(r1, 0x1000000029, 0xc, &(0x7f0000000080)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) (async) open(&(0x7f0000000040)='.\x00', 0x0, 0x0) (async) openat(r2, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) (async) ioctl$TIOCCBRK(r2, 0x2000747a) (async) syz_extract_tcp_res$synack(&(0x7f0000000080), 0x1, 0x0) (async) 126.678785ms ago: executing program 2 (id=333): r0 = socket(0x18, 0x3, 0x0) recvmsg(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/209, 0x76}, 0x62) setsockopt(r0, 0x1000000029, 0x24, &(0x7f0000000000)="5ab7776a", 0x4) syz_emit_ethernet(0x66, &(0x7f0000000500)={@random="8f6f77ede655", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "5f6ad9", 0x30, 0x37, 0x0, @rand_addr="8fd8b0e5602493ff1f88b029e0ad0c35", @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "06c32e", 0x6, 0x89, 0x0, @local={0xfe, 0x80, '\x00', 0x0}, @loopback}}}}}}}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="89000000ffff000001"], 0x9, 0x6}, 0x0) sysctl$kern(&(0x7f0000000000)={0xa}, 0x7, &(0x7f0000000080), 0x0, 0x0, 0x24) 55.46075ms ago: executing program 7 (id=334): open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x186) setgid(0xffffffffffffffff) setgroups(0x0, 0x0) setuid(0xffffffffffffffff) r0 = getuid() r1 = semget(0x0, 0x1, 0x281) semop(r1, &(0x7f0000000000), 0x23) r2 = getegid() setregid(r2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$sock_cred(r3, 0xffff, 0x1022, &(0x7f0000000580)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, r4}}) semctl$IPC_SET(r1, 0x0, 0x1, &(0x7f0000000040)={{0xc, r0, r2, r0, r4, 0x8, 0xeb}, 0x0, 0x3, 0xe}) setreuid(r0, 0xffffffffffffffff) unveil(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000300)='r\x00') getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000000)={0x0, 0x0}, 0xc) sysctl$kern(&(0x7f00000000c0)={0x1, 0x14}, 0x2, &(0x7f0000000100)="4ba7841143", &(0x7f0000000040)=0x5, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x4) sysctl$kern(&(0x7f0000000100)={0x1, 0x48}, 0x2, 0x0, 0x0, &(0x7f0000001440)="02000000", 0x4) setuid(r5) 53.022282ms ago: executing program 5 (id=335): sysctl$net_inet6_ip6(&(0x7f0000002c00)={0x4, 0x18, 0x29, 0x32}, 0x4, 0xfffffffffffffffe, &(0x7f0000002c80)=0xfffffffffffffee0, &(0x7f0000002cc0)="5bc75f6d", 0x4) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaa060000000000000086dd6000eacf00103afffe8000000000000000000000000000aaff02000000000000000000000000000186009078720b0300000000000700000005b74090e0531a14263830dd0468849fc2d8ab16df17cc044d8e19d79776a316f0952d48a91a960d95e58fd8603697c2e30017c1590b272d71633274f701afb022757740d8f6cff5af29b023439bebd97c05c0d0115c2bab8cff18fbd3887bc517dcdbef6ce001df3b60d9c7c3c409d73045989352eb4213b29f91d89c"]) 51.826373ms ago: executing program 7 (id=336): ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) r0 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r0, 0xc0106924, &(0x7f00000001c0)) setitimer(0x0, &(0x7f0000000140)={{0x8001, 0x4}, {0xffffffffffffffff, 0xfff7}}, 0x0) r1 = socket(0x18, 0x3, 0x0) ioctl$FIONREAD(r1, 0x8080691a, &(0x7f0000000100)) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0xd02) r2 = socket(0x1, 0x1, 0x0) getsockopt$sock_cred(r2, 0xffff, 0x1024, &(0x7f0000000240)={0x0}, &(0x7f0000000280)=0xc) setpgid(0x0, r3) fcntl$lock(r0, 0x9, &(0x7f0000000240)={0x3, 0x1, 0xffffffffffffff24, 0xe, r3}) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$BIOCSRTIMEOUT(r4, 0x8010426d, &(0x7f0000000400)={0x5, 0x22df}) r5 = socket(0x18, 0x3, 0x0) ioctl$FIONREAD(r5, 0xc0106924, &(0x7f00000001c0)) r6 = openat$speaker(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write(r6, &(0x7f0000000040)="4f83c3a408", 0x5) r7 = open(&(0x7f0000000040)='./file0\x00', 0x2, 0x102) ioctl$FIONREAD(r7, 0xc020699c, &(0x7f0000000100)) select(0x40, &(0x7f0000000040)={0x8001, 0x5, 0x10000, 0x8000000000000003, 0x2, 0x5, 0xbaa, 0x2a}, 0x0, 0x0, 0x0) open(&(0x7f00000000c0)='./bus/file0\x00', 0x0, 0x140) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r8 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VNDIOCSET(r8, 0xc0785101, &(0x7f0000000040)={0x0, 0x0, 0x0}) sysctl$hw(&(0x7f0000000000)={0x6, 0x18}, 0x2, 0x0, &(0x7f0000000080), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r9 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) writev(r9, &(0x7f0000000000)=[{0x0}], 0x1) sysctl$kern(&(0x7f0000000140)={0x1, 0x3d}, 0x2, &(0x7f0000000180)="8c01c8cbd29733d8835b62dd0c53fcf7feffffffffffffffdb1bc8ad95bf49871f4e6e0118c731b56f1d525c7138cd372c701b08dc4d685fe009ef0f1860e31ca1dd1d6561739ed95c027b86e4ea63d5a44a5c7097815932733eaa40f625c5a26ba4a38bdccbf64cfabb396d8a0b482c979cbaef867f56ba3d996f7f201bc0040279d47f18f7aa75d768ca467e5c7fb5c23798b6b3d2c0dd1d03264f9988df33df35f7dbb236ea4f074c", &(0x7f0000000080)=0xaa, 0x0, 0x0) 49.282748ms ago: executing program 5 (id=337): r0 = open(&(0x7f0000000800)='./file1\x00', 0x800, 0x120) ioctl$FIONBIO(r0, 0x82907003, &(0x7f0000000140)=0x2) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x80, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x84, 0x91, 0xff, 0x47}, {0x40, 0xf3, 0xff, 0x9}, {0x6, 0x80, 0x0, 0xfffff7fe}]}) sysctl$hw(0x0, 0x0, &(0x7f00000002c0)="00231b000f4070632c2dec30c21761035c2532d7a0ea9200001f00385c24fc3be7b6e1a8", &(0x7f0000000000)=0x24, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffff06000000aa"]) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="00001c00ac14"]) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket(0x2, 0x1, 0x0) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r3 = socket(0x18, 0x1, 0x0) setsockopt(r3, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) bind(r2, &(0x7f0000000000), 0x10) listen(r2, 0x0) syz_emit_ethernet(0x138, 0x0) close(0xffffffffffffffff) r4 = socket(0x2, 0x1, 0x0) shutdown(r4, 0x0) connect$unix(r4, &(0x7f0000000000), 0x10) accept$unix(r2, &(0x7f0000000080)=@abs, &(0x7f0000000140)=0x8) mlock(&(0x7f00007c6000/0x1000)=nil, 0x1000) mknod(&(0x7f0000000000)='./bus\x00', 0x3a0914c44f7b202d, 0x504) r5 = open(&(0x7f0000000040)='./bus\x00', 0x4, 0x0) ioctl$TIOCEXCL(r5, 0x2000740d) sysctl$kern(&(0x7f0000000100)={0x1, 0x50}, 0x3, &(0x7f00000011c0)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xfe10, 0x0, 0xfffffffffffffff9) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) 47.921442ms ago: executing program 2 (id=338): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x2000, 0x4800) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0x4, [{&(0x7f0000558000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil}, {&(0x7f0000340000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0xffffffffffffff7e}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f00006b9000/0x1000)=nil, 0x80000000}, {&(0x7f00001da000/0x4000)=nil, &(0x7f00000d6000/0x1000)=nil, 0xffffffffffffffff}, {&(0x7f000024d000/0x1000)=nil, &(0x7f00005ff000/0x4000)=nil, 0x401}, {&(0x7f000060b000/0x2000)=nil, &(0x7f0000179000/0x1000)=nil, 0x80000002}, {&(0x7f0000338000/0x4000)=nil, &(0x7f0000000000/0x400000)=nil, 0x8}, {&(0x7f000077c000/0x1000)=nil, &(0x7f00000ce000/0x4000)=nil, 0x5}, {&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x6b9}, {&(0x7f0000132000/0x2000)=nil, &(0x7f00003f2000/0x2000)=nil, 0xa}, {&(0x7f000064b000/0x2000)=nil, &(0x7f000038f000/0x4000)=nil, 0x12b}, {&(0x7f0000008000/0x3000)=nil, &(0x7f0000688000/0x4000)=nil, 0x2}, {&(0x7f0000196000/0x3000)=nil, &(0x7f000076c000/0x4000)=nil, 0xa}, {&(0x7f000024b000/0x2000)=nil, &(0x7f000079e000/0x4000)=nil, 0xffffffffbffffff9}, {&(0x7f00004d0000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x5e04}, {&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000001000/0x800000)=nil, 0x6}], './file0\x00', 0x3}) r1 = socket$inet(0x2, 0x2, 0x0) close(r1) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x200000000000c, &(0x7f0000000080)="eaef125c00000000", 0x8) setsockopt$inet_opts(r1, 0x0, 0xd, 0x0, 0x0) r3 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x9) ioctl$FIOASYNC(r3, 0xc0107002, &(0x7f00000000c0)) sysctl$net_inet_tcp(&(0x7f00000000c0)={0x4, 0x2, 0x6, 0x4}, 0x4, 0x0, 0x0, 0x0, 0x43) getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f00000000c0), &(0x7f0000000080)=0xc) sysctl$kern(&(0x7f00000000c0)={0x1, 0x37}, 0x2, 0x0, 0x0, 0x0, 0x0) r4 = msgget$private(0x0, 0x4) msgsnd(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="0100000000000000", @ANYBLOB="e1d607007106755719f46f"], 0xfc, 0x0) msgrcv(r4, &(0x7f0000001600)={0x0, ""/240}, 0xf8, 0x1, 0x800) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$net_inet_ip(&(0x7f00000000c0)={0x4, 0x2, 0x0, 0xd}, 0x4, &(0x7f0000000080), 0x0, 0x0, 0x0) 1.815434ms ago: executing program 2 (id=339): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0xe8, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) read(r1, &(0x7f00000003c0)=""/4, 0x4) 829.916µs ago: executing program 7 (id=340): mknod(&(0x7f0000000480)='./file0\x00', 0x2, 0x58cf) open(&(0x7f0000000000)='./file0\x00', 0x10, 0x5a) 341.192µs ago: executing program 2 (id=341): mknod(&(0x7f0000000080)='./bus\x00', 0x2000, 0x4) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0xe, 0x7, 0x0, 0xe, 0x80002001, 0x6, 0x10, [{0x8, 0x401, 0x6, 0x71800}, {0x22, 0x1004, 0x800000, 0x4}, {0x6, 0xa84e, 0x7, 0xafd}, {0x80, 0x2, 0x4f, 0xfffffffe}, {0x1, 0x3, 0x401, 0x7}, {0x5, 0x47fff, 0xf45, 0x2}, {0xfffffffc, 0x7, 0x4, 0x6d}, {0x800, 0x803, 0xfdf0, 0x8}, {0x8, 0x10, 0xfffffffd}, {0xfffffc00, 0x2a2f, 0x2005, 0xfffffffd}, {0xa44f, 0xfff9, 0x48a, 0xe1}, {0xcb, 0x2, 0x8, 0x6}, {0x2000dd, 0x40000009, 0x4, 0x3ff}, {0x8, 0x7, 0xfffffff4, 0x6}, {0x6, 0x5, 0x26, 0x4}, {0x81, 0x33, 0x2003, 0x5}]}) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000b40)}], 0x1}, 0x4) ioctl$BIOCSRSIG(r0, 0x80044272, &(0x7f00000000c0)=0x8) r1 = openat$pf(0xffffffffffffff9c, 0x0, 0x280, 0x0) r2 = shmget$private(0x0, 0x1000, 0x484, &(0x7f0000ffc000/0x1000)=nil) ioctl$WSMOUSEIO_GETPARAMS(r1, 0x80105727, &(0x7f0000000280)={&(0x7f0000000240)}) getgroups(0x1, &(0x7f0000000040)=[0x0]) r4 = getpgid(0x0) shmctl$IPC_SET(r2, 0x1, &(0x7f0000000140)={{0xfffffc00, 0x0, r3, 0x0, 0x0, 0x159, 0xb}, 0x8800, 0x1, 0x0, r4, 0x5, 0x38c7, 0x3}) fchown(0xffffffffffffffff, 0x0, 0x0) r5 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r5, 0xc0106924, &(0x7f00000001c0)) r6 = socket(0x18, 0x3, 0x0) r7 = openat$bpf(0xffffffffffffff9c, 0x0, 0x80, 0x0) ioctl$FIONREAD(r6, 0x8080691a, &(0x7f0000000100)) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) ioctl$FIOASYNC(r7, 0x8004667d, &(0x7f0000000240)=0x80000001) sysctl$net_inet6_icmp6(&(0x7f00000000c0)={0x4, 0x18, 0x3a, 0x3}, 0x55, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$vfs_nfs(&(0x7f00000000c0)={0xa, 0x2, 0x2}, 0x3, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000040)={0x0, 0x0}) write(r0, &(0x7f0000000600)="d81a0f0000006b00000100000000", 0xe) ioctl$VMM_IOC_CREATE(r1, 0xc2585601, &(0x7f0000000640)={0x10, 0x3, [{&(0x7f00007b0000/0x3000)=nil, &(0x7f00000df000/0x1000)=nil, 0xe2}, {&(0x7f000027c000/0x3000)=nil, &(0x7f0000234000/0x3000)=nil, 0x6}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000441000/0x4000)=nil, 0x3}, {&(0x7f000056e000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x80000000}, {&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000203000/0x1000)=nil, 0x3}, {&(0x7f0000ffe000/0x1000)=nil, &(0x7f00002e7000/0x3000)=nil, 0x1}, {&(0x7f00005d4000/0x3000)=nil, &(0x7f0000186000/0x1000)=nil, 0xff}, {&(0x7f0000698000/0x2000)=nil, &(0x7f000052b000/0x1000)=nil, 0xffff00000000}, {&(0x7f0000ffd000/0x2000)=nil, &(0x7f00005b2000/0x1000)=nil, 0xd2}, {&(0x7f000030b000/0x2000)=nil, &(0x7f000077c000/0x2000)=nil, 0x3}, {&(0x7f0000482000/0x1000)=nil, &(0x7f000005f000/0x1000)=nil}, {&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x6}, {&(0x7f0000697000/0x2000)=nil, &(0x7f00007ef000/0x3000)=nil}, {&(0x7f00001cf000/0x4000)=nil, &(0x7f00006ff000/0x3000)=nil, 0x4}, {&(0x7f000058a000/0x1000)=nil, &(0x7f00000e8000/0x3000)=nil, 0x8000}, {&(0x7f0000433000/0x2000)=nil, &(0x7f00007a8000/0x4000)=nil, 0x1}], './bus/file0\x00', 0x48000}) acct(&(0x7f0000000000)='./bus\x00') 0s ago: executing program 7 (id=342): r0 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, 0x812, 0xffffffffffffffff, 0x7ff) ftruncate(r0, 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.237' (ED25519) to the list of known hosts. pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error denied attempt to set clock forward to 8589934596 pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error panic: kernel diagnostic assertion "pg->wire_count == 0" failed: file "/syzkaller/managers/multicore/kernel/sys/uvm/uvm_page.c", line 1326 Stopped at db_enter+0x25: addq $0x8,%rsp TID PID UID PRFLAGS PFLAGS CPU COMMAND 119043 92020 0 0 0 0 syz-executor *232175 42838 0 0 0x4000000 1K syz-executor db_enter() at db_enter+0x25 panic(ffffffff833b2750) at panic+0x1e5 __assert(ffffffff833ef9fe,ffffffff833e5731,52e,ffffffff83406f81) at __assert+0x29 uvm_pagedequeue(fffffd80087a7278) at uvm_pagedequeue+0x2dd uvn_flush(fffffd806a247790,0,0,19) at uvn_flush+0xb8f uvn_detach(fffffd806a247790) at uvn_detach+0xcf uvm_unmap_detach(ffff80003c4b8360,0) at uvm_unmap_detach+0x15e uvm_mapanon(fffffd806cabe018,ffff80003c4b8588,400000,0,3090713) at uvm_mapanon+0x85d uvm_mmapanon(fffffd806cabe018,ffff80003c4b8588,400000,3,7,5012,bed90ec5498a2844,fffffd806cabe018) at uvm_mmapanon+0x1d0 sys_mmap(ffff8000fffe9248,ffff80003c4b86f0,ffff80003c4b8640) at sys_mmap+0xa80 syscall(ffff80003c4b86f0) at syscall+0xbd4 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xf2ce3583ea0, count: 3 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{1}> ddb{1}> set $lines = 0 ddb{1}> set $maxwidth = 0 ddb{1}> show panic *cpu1: kernel diagnostic assertion "pg->wire_count == 0" failed: file "/syzkaller/managers/multicore/kernel/sys/uvm/uvm_page.c", line 1326 ddb{1}> trace db_enter() at db_enter+0x25 panic(ffffffff833b2750) at panic+0x1e5 __assert(ffffffff833ef9fe,ffffffff833e5731,52e,ffffffff83406f81) at __assert+0x29 uvm_pagedequeue(fffffd80087a7278) at uvm_pagedequeue+0x2dd uvn_flush(fffffd806a247790,0,0,19) at uvn_flush+0xb8f uvn_detach(fffffd806a247790) at uvn_detach+0xcf uvm_unmap_detach(ffff80003c4b8360,0) at uvm_unmap_detach+0x15e uvm_mapanon(fffffd806cabe018,ffff80003c4b8588,400000,0,3090713) at uvm_mapanon+0x85d uvm_mmapanon(fffffd806cabe018,ffff80003c4b8588,400000,3,7,5012,bed90ec5498a2844,fffffd806cabe018) at uvm_mmapanon+0x1d0 sys_mmap(ffff8000fffe9248,ffff80003c4b86f0,ffff80003c4b8640) at sys_mmap+0xa80 syscall(ffff80003c4b86f0) at syscall+0xbd4 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xf2ce3583ea0, count: -12 ddb{1}> show registers rdi 0 rsi 0x1 rbp 0xffff80003c4b8040 rbx 0xffff8000299dee07 rdx 0xffff800001488a80 rcx 0xffff8000fffe9248 rax 0xffff8000299ddff0 r8 0x101010101010101 r9 0x8080808080808080 r10 0xec98c8c2e83d8cb5 r11 0x6055bc0f3ff4d563 r12 0xffff8000299dec08 r13 0 r14 0 r15 0x1 rip 0xffffffff81f801e5 db_enter+0x25 cs 0x8 rflags 0x246 rsp 0xffff80003c4b8030 ss 0x10 db_enter+0x25: addq $0x8,%rsp ddb{1}> show proc PROC (syz-executor) tid=232175 pid=42838 tcnt=2 stat=onproc flags process=0 proc=4000000 runpri=32, usrpri=82, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff8000fffe9a10,0xffff8000fffe8560 process=0xffff8000337d4028 user=0xffff80003c4b3000, vmspace=0xfffffd806cabe018 estcpu=32, cpticks=1, pctcpu=0.0, user=0, sys=1, intr=0 ddb{1}> ps PID TID PPID UID S FLAGS WAIT COMMAND 92020 119043 30610 0 7 0 syz-executor 92020 489230 30610 0 2 0x4000000 syz-executor 42838 81961 9736 0 2 0 syz-executor *42838 232175 9736 0 7 0x4000000 syz-executor 62723 112878 69534 0 2 0 syz-executor 62723 138359 69534 0 3 0x4000080 netcon syz-executor 62723 163729 69534 0 3 0x4000080 netacc syz-executor 62346 20477 96018 -1 3 0x90 nanoslp syz-executor 62346 186802 96018 -1 3 0x4000090 nanoslp syz-executor 62346 286948 96018 -1 3 0x4000090 fsleep syz-executor 62346 141515 96018 -1 3 0x4000090 fsleep syz-executor 81822 153545 35603 0 3 0x80 nanoslp syz-executor 81822 294247 35603 0 3 0x4000080 sbwait syz-executor 41752 298942 19345 0 3 0x80 nanoslp syz-executor 41752 30228 19345 0 3 0x4000080 pipewr syz-executor 41752 204807 19345 0 3 0x4000080 fsleep syz-executor 34191 127784 11993 0 3 0x80 nanoslp syz-executor 34191 215552 11993 0 3 0x4000080 semwait syz-executor 34191 233709 11993 0 3 0x4000080 fsleep syz-executor 51396 186702 2972 0 3 0x3000 suspend syz-executor 51396 235576 2972 0 3 0x4081000 biowait syz-executor 19345 499583 39279 0 3 0x82 nanoslp syz-executor 56252 213136 0 0 3 0x14200 acct acct 78688 416600 0 0 3 0x14280 nfsidl nfsio 49555 12595 0 0 3 0x14280 nfsidl nfsio 26504 404506 0 0 3 0x14280 nfsidl nfsio 96901 56906 0 0 3 0x14280 nfsidl nfsio 93866 25728 0 0 3 0x14280 nfsidl nfsio 51205 450343 0 0 3 0x14280 nfsidl nfsio 2862 375937 0 0 3 0x14280 nfsidl nfsio 82212 151693 0 0 3 0x14280 nfsidl nfsio 10678 400382 0 0 3 0x14280 nfsidl nfsio 4411 259784 0 0 3 0x14280 nfsidl nfsio 55929 255252 0 0 3 0x14280 nfsidl nfsio 97792 159437 0 0 3 0x14280 nfsidl nfsio 2222 181780 0 0 3 0x14280 nfsidl nfsio 16194 446985 0 0 3 0x14280 nfsidl nfsio 3843 228102 0 0 3 0x14280 nfsidl nfsio 40012 254497 0 0 3 0x14280 nfsidl nfsio 16191 104486 0 0 3 0x14280 nfsidl nfsio 13038 61502 0 0 3 0x14280 nfsidl nfsio 64663 328501 0 0 3 0x14280 nfsidl nfsio 23560 262717 0 0 3 0x14280 nfsidl nfsio 9736 100491 39279 0 3 0x82 nanoslp syz-executor 69534 285345 39279 0 3 0x82 nanoslp syz-executor 96018 274742 39279 0 3 0x82 nanoslp syz-executor 2972 267588 39279 0 3 0x82 wait syz-executor 30610 134994 39279 0 3 0x82 nanoslp syz-executor 35603 253524 39279 0 3 0x82 nanoslp syz-executor 11993 354607 39279 0 3 0x82 nanoslp syz-executor 39279 121250 12848 0 3 0x82 kqread syz-executor 12848 455771 69773 0 3 0x10008a sigsusp ksh 69773 478744 97522 0 3 0x98 kqread sshd-session 97522 17313 88040 0 3 0x92 kqread sshd-session 23246 12749 1 0 3 0x100083 ttyin getty 88040 328082 1 0 3 0x88 kqread sshd 44512 342351 72950 74 3 0x1100092 bpf pflogd 72950 497241 1 0 3 0x80 sbwait pflogd 28924 192321 84369 73 3 0x1100090 kqread syslogd 84369 277078 1 0 3 0x100082 sbwait syslogd 75547 171984 1 0 3 0x100080 kqread resolvd 90688 360838 5896 77 3 0x100092 kqread dhcpleased 12944 252955 5896 77 3 0x100092 kqread dhcpleased 5896 96360 1 0 3 0x80 kqread dhcpleased 85301 500310 0 0 3 0x14200 bored smr 12434 180484 0 0 3 0x14200 pgzero zerothread 99012 201475 0 0 3 0x14200 aiodoned aiodoned 53875 242426 0 0 3 0x14200 syncer update 4741 111746 0 0 3 0x14200 cleaner cleaner 61678 437928 0 0 3 0x14200 reaper reaper 17068 162602 0 0 3 0x14200 pgdaemon pagedaemon 14698 295202 0 0 3 0x14200 bored viomb 34429 224706 0 0 3 0x40014200 acpi0 acpi0 72725 76532 0 0 3 0x40014200 idle1 42821 157881 0 0 3 0x14200 bored softnet1 27197 241156 0 0 3 0x14200 bored softnet0 18252 143837 0 0 3 0x14200 bored systqmp 95243 318529 0 0 3 0x14200 bored systq 86861 221694 0 0 3 0x14200 tmoslp softclockmp 5072 124616 0 0 3 0x40014200 tmoslp softclock 406 438507 0 0 3 0x40014200 idle0 1 81351 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb{1}> show all locks CPU 1: exclusive mutex &uvm.pageqlock r = 0 (0xffffffff838cfbc8) #0 witness_lock+0x5f1 #1 mtx_enter+0x4b4 #2 uvn_flush+0x71e #3 uvn_detach+0xcf #4 uvm_unmap_detach+0x15e #5 uvm_mapanon+0x85d #6 uvm_mmapanon+0x1d0 #7 sys_mmap+0xa80 #8 syscall+0xbd4 #9 Xsyscall+0x128 Process 42838 (syz-executor) thread 0xffff8000fffe9248 (232175) Process 51396 (syz-executor) thread 0xffff80002a261a08 (235576) ddb{1}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 10203 11152K 11350K 166960K 11973 0 pcb 17 13K 14K 166960K 110 0 rtable 220 9K 11K 166960K 492 0 pf 31 17K 21K 166960K 93 0 ifaddr 35 6K 7K 166960K 74 0 ifgroup 47 2K 2K 166960K 113 0 sysctl 1 1K 9K 166960K 6 0 counters 66 36K 38K 166960K 196 0 ioctlops 0 0K 4K 166960K 1648 0 iov 1 12K 14K 166960K 20 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1495 94K 94K 166960K 1825 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 9K 166960K 11 0 VM map 2 1K 1K 166960K 2 0 sem 12 0K 0K 166960K 25 0 dirhash 12 2K 2K 166960K 15 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 18 65K 240K 166960K 502 0 sigio 0 0K 0K 166960K 11 0 proc 72 115K 196K 166960K 588 0 subproc 72 4K 4K 166960K 81 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 67 0 in_multi 77 5K 7K 166960K 137 0 ether_multi 1 0K 0K 166960K 6 0 mrt 0 0K 0K 166960K 2 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 97 440K 440K 166960K 97 0 exec 0 0K 1K 166960K 452 0 fusefs mount 1 32K 32K 166960K 1 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 268 177K 181K 166960K 6316 0 UVM aobj 14 6K 6K 166960K 14 0 pinsyscall 43 86K 104K 166960K 1647 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 1 0K 1K 166960K 43 0 NDP 10 0K 2K 166960K 51 0 temp 77 8680K 8744K 166960K 23977 0 kqueue 13 20K 30K 166960K 108 0 SYN cache 2 16K 16K 166960K 2 0 ddb{1}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 26 0 0 1 0 1 1 0 8 0 rtpcb 120 133 0 128 2 1 1 2 0 8 0 rtentry 176 132 0 41 7 1 6 6 0 8 0 unpcb 144 223 0 205 2 1 1 2 0 8 0 syncache 336 5 0 5 2 1 1 1 0 8 1 tcpcb 736 184 0 177 7 0 7 7 0 8 6 arp 136 22 0 7 1 0 1 1 0 8 0 inpcb 328 551 0 541 7 0 7 7 0 8 6 nd6 152 28 0 9 1 0 1 1 0 8 0 kcovpl 48 9 0 1 1 0 1 1 0 8 0 ppxss 1192 55 0 55 1 0 1 1 0 8 1 pppxif 1504 2 0 2 1 0 1 1 0 8 1 pffrag 232 2 0 0 1 0 1 1 0 482 0 pffrnode 88 2 0 0 1 0 1 1 0 8 0 pffrent 40 2 0 0 1 0 1 1 0 8 0 pfosfp 40 1428 0 1005 5 0 5 5 0 8 0 pfosfpen 112 1428 0 714 21 0 21 21 0 8 0 pfrktable 1344 1 0 1 1 1 0 1 0 8 0 pfstitem 24 43 0 2 1 0 1 1 0 8 0 pfstkey 128 43 0 2 2 0 2 2 0 8 0 pfstate 448 43 0 2 5 0 5 5 0 8 0 pfrule 1344 22 0 17 2 1 1 2 0 8 0 art_heap8 4096 3 0 0 3 0 3 3 0 8 0 art_heap4 256 516 0 147 31 2 29 29 0 8 2 art_table 40 519 0 147 5 0 5 5 0 8 0 art_node 32 130 0 47 1 0 1 1 0 8 0 semapl 112 20 0 10 1 0 1 1 0 8 0 shmpl 112 11 0 0 1 0 1 1 0 8 0 dirhash 1024 19 0 2 3 0 3 3 0 8 0 dino2pl 256 2211 0 703 96 0 96 96 0 8 0 ffsino 296 2211 0 703 118 1 117 118 0 8 0 nchpl 144 2904 0 1194 64 0 64 64 0 8 0 rtmask 32 8 0 8 1 0 1 1 0 8 1 vnodes 216 2631 0 0 147 0 147 147 0 8 0 namei 1024 9571 0 9571 1 0 1 1 0 8 1 percpumem 16 113 0 65 1 0 1 1 0 8 0 kstatmem 264 64 0 42 3 0 3 3 0 8 1 scxspl 216 12110 0 12109 11 7 4 8 1 8 3 plimitpl 152 147 0 128 1 0 1 1 0 8 0 sigapl 424 818 0 749 8 0 8 8 0 8 0 knotepl 120 754 0 0 23 0 23 23 0 8 0 kqueuepl 224 159 0 147 2 1 1 2 0 8 0 pipepl 344 151 0 123 3 0 3 3 0 8 0 fdescpl 528 781 0 749 3 0 3 3 0 8 0 filepl 160 4146 0 3908 13 0 13 13 0 8 1 lockfpl 104 104 0 99 1 0 1 1 0 8 0 lockfspl 48 51 0 46 1 0 1 1 0 8 0 sessionpl 144 24 0 15 1 0 1 1 0 8 0 pgrppl 48 36 0 19 1 0 1 1 0 8 0 ucredpl 104 452 0 438 1 0 1 1 0 8 0 zombiepl 144 750 0 749 1 0 1 1 0 8 0 processpl 1232 818 0 749 6 0 6 6 0 8 0 procpl 664 1389 0 1307 8 0 8 8 0 8 0 sosppl 176 1 0 1 1 1 0 1 0 8 0 sockpl 752 918 0 885 11 0 11 11 0 8 7 mcl64k 65536 4 0 0 1 0 1 1 0 8 0 mcl16k 16384 2 0 0 1 0 1 1 0 8 0 mcl8k 8192 2 0 0 1 0 1 1 0 8 0 mcl4k 4096 127 0 0 16 0 16 16 0 8 0 mcl2k 2048 124 0 0 16 0 16 16 0 8 0 mtagpl 96 215 0 0 6 0 6 6 0 8 0 mbufpl 256 407 0 0 25 0 25 25 0 8 0 bufpl 280 4487 0 131 312 0 312 312 0 8 0 anonpl 32 10351 0 0 84 0 84 84 0 246 0 amapchunkpl 152 19627 0 18942 29 2 27 27 0 158 0 amappl16 200 2614 0 2376 23 3 20 20 0 8 7 amappl15 192 4 0 4 1 1 0 1 0 8 0 amappl14 184 7 0 7 1 1 0 1 0 8 0 amappl13 176 440 0 439 1 0 1 1 0 8 0 amappl12 168 1146 0 1103 3 0 3 3 0 8 0 amappl11 160 7 0 7 1 1 0 1 0 8 0 amappl10 152 50 0 36 1 0 1 1 0 8 0 amappl9 144 252 0 252 1 1 0 1 0 8 0 amappl8 136 49 0 47 1 0 1 1 0 8 0 amappl7 128 85 0 84 1 0 1 1 0 8 0 amappl6 120 288 0 275 1 0 1 1 0 8 0 amappl5 112 73 0 63 1 0 1 1 0 8 0 amappl4 104 423 0 392 1 0 1 1 0 8 0 amappl3 96 3694 0 3569 5 1 4 4 0 8 0 amappl2 88 539 0 480 2 0 2 2 0 8 0 amappl1 80 10875 0 10276 15 1 14 14 0 8 0 amappl 88 5508 0 5321 5 0 5 5 0 92 0 uvmvnodes 80 115 0 0 3 0 3 3 0 8 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 13 0 0 1 0 1 1 0 8 0 uaddrrnd 24 781 0 749 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 781 0 749 1 0 1 1 0 8 0 vmmpekpl 168 7951 0 7908 3 0 3 3 0 8 0 vmmpepl 168 56342 0 54135 102 0 102 102 0 357 6 vmsppl 488 780 0 749 5 0 5 5 0 8 1 rwobjpl 80 18238 0 16949 29 0 29 29 0 8 2 pdppl 4096 1570 0 1498 104 32 72 86 0 8 0 pvpl 32 18491 0 0 149 0 149 149 0 265 0 pmappl 256 780 0 749 3 0 3 3 0 8 0 extentpl 40 45 0 27 1 0 1 1 0 8 0 phpool 112 318 0 37 9 0 9 9 0 8 0 ddb{1}> machine ddbcpu 0 Stopped at x86_ipi_db+0x27: addq $0x8,%rsp x86_ipi_db(ffffffff837c5ff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __mp_lock(ffffffff838bca40) at __mp_lock+0x192 intr_handler(ffff800037bf5170,ffff80000006b400) at intr_handler+0xe9 Xintr_ioapic_edge23_untramp() at Xintr_ioapic_edge23_untramp+0x18f Xsyscall() at Xsyscall+0x111 end of kernel end trace frame: 0x72ab6fd56930, count: 8 ddb{0}> trace x86_ipi_db(ffffffff837c5ff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __mp_lock(ffffffff838bca40) at __mp_lock+0x192 intr_handler(ffff800037bf5170,ffff80000006b400) at intr_handler+0xe9 Xintr_ioapic_edge23_untramp() at Xintr_ioapic_edge23_untramp+0x18f Xsyscall() at Xsyscall+0x111 end of kernel end trace frame: 0x72ab6fd56930, count: -7 ddb{0}> machine ddbcpu 1 Stopped at db_enter+0x25: addq $0x8,%rsp db_enter() at db_enter+0x25 panic(ffffffff833b2750) at panic+0x1e5 __assert(ffffffff833ef9fe,ffffffff833e5731,52e,ffffffff83406f81) at __assert+0x29 uvm_pagedequeue(fffffd80087a7278) at uvm_pagedequeue+0x2dd uvn_flush(fffffd806a247790,0,0,19) at uvn_flush+0xb8f uvn_detach(fffffd806a247790) at uvn_detach+0xcf uvm_unmap_detach(ffff80003c4b8360,0) at uvm_unmap_detach+0x15e uvm_mapanon(fffffd806cabe018,ffff80003c4b8588,400000,0,3090713) at uvm_mapanon+0x85d uvm_mmapanon(fffffd806cabe018,ffff80003c4b8588,400000,3,7,5012,bed90ec5498a2844,fffffd806cabe018) at uvm_mmapanon+0x1d0 sys_mmap(ffff8000fffe9248,ffff80003c4b86f0,ffff80003c4b8640) at sys_mmap+0xa80 syscall(ffff80003c4b86f0) at syscall+0xbd4 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xf2ce3583ea0, count: 3 ddb{1}> trace db_enter() at db_enter+0x25 panic(ffffffff833b2750) at panic+0x1e5 __assert(ffffffff833ef9fe,ffffffff833e5731,52e,ffffffff83406f81) at __assert+0x29 uvm_pagedequeue(fffffd80087a7278) at uvm_pagedequeue+0x2dd uvn_flush(fffffd806a247790,0,0,19) at uvn_flush+0xb8f uvn_detach(fffffd806a247790) at uvn_detach+0xcf uvm_unmap_detach(ffff80003c4b8360,0) at uvm_unmap_detach+0x15e uvm_mapanon(fffffd806cabe018,ffff80003c4b8588,400000,0,3090713) at uvm_mapanon+0x85d uvm_mmapanon(fffffd806cabe018,ffff80003c4b8588,400000,3,7,5012,bed90ec5498a2844,fffffd806cabe018) at uvm_mmapanon+0x1d0 sys_mmap(ffff8000fffe9248,ffff80003c4b86f0,ffff80003c4b8640) at sys_mmap+0xa80 syscall(ffff80003c4b86f0) at syscall+0xbd4 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xf2ce3583ea0, count: -12