last executing test programs: 2.676917383s ago: executing program 5 (id=1075): recvmsg(0xffffffffffffffff, 0x0, 0x0) mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0x881) (async) mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0x881) open$dir(&(0x7f0000000300)='.\x00', 0x80, 0x4a) (async) r0 = open$dir(&(0x7f0000000300)='.\x00', 0x80, 0x4a) setgid(0xffffffffffffffff) open$dir(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mprotect(&(0x7f00000a3000/0x4000)=nil, 0x4000, 0x1) setrlimit(0x8, &(0x7f00000000c0)={0x7, 0x6c}) r1 = syz_open_pts() close(r1) r2 = syz_open_pts() ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f0000000040)={0xf66c, 0x97c, 0x3ff, 0x5ffffd5c, "9d1cff7f00052b961985921707700000ed009700", 0x203fb, 0xad3}) (async) ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f0000000040)={0xf66c, 0x97c, 0x3ff, 0x5ffffd5c, "9d1cff7f00052b961985921707700000ed009700", 0x203fb, 0xad3}) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000600)="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", 0x5fe}, {&(0x7f0000000380)="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", 0x160}], 0x2) setgroups(0x0, 0x0) (async) setgroups(0x0, 0x0) fchmod(r0, 0x1a1) sysctl$net_inet_ip(&(0x7f0000002500)={0x4, 0x2, 0x0, 0x24}, 0x4, 0x0, 0x0, 0x0, 0x0) (async) sysctl$net_inet_ip(&(0x7f0000002500)={0x4, 0x2, 0x0, 0x24}, 0x4, 0x0, 0x0, 0x0, 0x0) sysctl$net_inet_ip(&(0x7f0000000140)={0x4, 0x2, 0x0, 0x14}, 0x4, &(0x7f0000000180)="4da926e7f1285042d0300ff1ef681ebeafb2d6e66ca6dbb610d4e831112eb4e3e7a9b02c4dbd9f7e5d093a89d9b658d60df3ca2859a7960213788f6c6592e84e0d5ad67eb0cd9e2540538a0146463077ba30ee90b5b892a1e6b636da5a6e7194", &(0x7f0000000200)=0x60, &(0x7f0000000340)="ac8991b308cb16d24e6262d03220337f083b8ee4b26757e6d55504020d7d9361305aae40e2706103b23e2ca89a068504fc6525f1d4a0da3cf6f9bcd5a85ad44166cf234642c35602056903da127c780b70ab89c1c4b08c709469e8a5e29045bd5e3362e4404af427dd0eb37c1651652d9ab76d76a8459a1f00392cb03232de60336327c9dd6cec28cd1552d4e11897364c61e13b2c21bde4b13f9c61f5d35664089c5a7975cc0bb7215df2ceca6eb75618bc08b0bd5ce58666b022976fdea68ad280788a", 0xc4) setuid(0xffffffffffffffff) (async) setuid(0xffffffffffffffff) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x40, 0x0) fcntl$dupfd(r3, 0x2, 0xffffffffffffffff) (async) r4 = fcntl$dupfd(r3, 0x2, 0xffffffffffffffff) close(r4) (async) close(r4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x0, 0x0, 0x6}, {0x1, 0x0, 0x0, 0x2}, {0x4, 0x0, 0x0, 0x8}]}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xff0a, 0x0, 0x37) unveil(&(0x7f0000000080)='.\x00', &(0x7f00000002c0)='c\x00') 2.595905505s ago: executing program 5 (id=1079): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) munmap(&(0x7f0000001000/0x2000)=nil, 0x2000) (async) write(r0, &(0x7f0000000040)="ed", 0x1) recvmmsg(r1, &(0x7f0000000880)={&(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000200)=""/167, 0x17}], 0x1, 0x0}}, 0xffffffffffffff96, 0x2842, 0x0) (async) r2 = semget(0x0, 0x1, 0x281) semop(r2, &(0x7f0000000000)=[{0x0, 0x2, 0x1c00}, {0x0, 0xff79, 0x1000}], 0x2) (async) setitimer(0x2, &(0x7f0000000000)={{0x200000000000, 0x900}, {0xffffffff}}, 0x0) (async) r3 = semget(0x0, 0x1, 0x281) semop(r3, &(0x7f0000000180)=[{0x0, 0x7, 0x1000}], 0x1) semctl$SETVAL(r3, 0x4, 0x8, 0x0) 2.455663894s ago: executing program 6 (id=1091): setrlimit(0x8, &(0x7f00000008c0)={0x42, 0x61}) r0 = syz_open_pts() close(r0) syz_open_pts() ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000040)={0x27ffd, 0x4b6b, 0xfff9, 0x21d8b78a, "0700a460ae00000000ffffffffffffff00", 0x3d9, 0x800003a}) writev(r0, &(0x7f0000000700)=[{&(0x7f0000000e40)="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", 0x251}], 0x1) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="f1547c21f7c9e04adb6de16633de1e0e0bd69fda2777a4a76a81ec9657cbabdfcc6d8cc74091be1071c2e97d5ea964a3bbfbfaf236a1f2bd6ee27011037c4daf7f8d7087d1e2744b5de3c04838c21d860da02177", 0x54}, {&(0x7f0000000100)="c67d292f06de2944329880799259cb840b8e1643dd28ab0aa17cc5200522b579f5833ae77ca471c693f61e52992625c35f8ca48052d82f5c043453606573ec0aaafb143d47f056943bd2cf4866cf233be5ca45b23375c5c205545cb5d3a8c1aae767aef8b16b985d5496", 0x6a}, {&(0x7f0000000180)="a7e88aef74593660b2cf8b4c483916da5003c06cc03202009f6633dc4f008ad4545b304ea71cb5d2d3aaadb618078cd0c2a9973adf182187d6b80c077861122ecaf8eb7b1a4b25d4e51e0f003012ee8a6344fd6d29cc24864083059b31e3573b93b36df1b23a930921be1902dfeacf98c5222804fd6922592e2c", 0x7a}], 0x3) 2.160353599s ago: executing program 6 (id=1104): r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000200)=@file={0xd570d0466b6018f, './file0\x00'}, 0xa) listen(r0, 0x0) syz_emit_ethernet(0x138, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) connect$unix(r1, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0xfffffffffffffffe) accept(r0, &(0x7f0000000040)=@in6, &(0x7f0000000080)=0xc) 1.801001352s ago: executing program 5 (id=1140): mknod(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc0e99db6de761f86, 0x0) link(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000d40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mknod$loop(&(0x7f0000000e40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x100, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000000)={0x2, 0x0, 0x3, 0x9}) sysctl$kern(&(0x7f0000000000)={0x1, 0x49}, 0x6, 0x0, 0x0, 0x0, 0x0) link(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x0, 0x0, {[0xfffffffffffffffb, 0x0, 0xffffffffffff48b8, 0x100000000, 0x0, 0x9, 0xdf5e, 0x0, 0x0, 0x2f01, 0x0, 0x0, 0xffffffffffffffff, 0x101, 0x0, 0x0, 0x2, 0x100], [0xfffffffffffffffe, 0x0, 0xfffffffffffffffb, 0x20000000, 0x0, 0x7b98, 0x1fe, 0xf, 0x803], [0x100000001, 0x2, 0x0, 0x0, 0x0, 0x11000], [0x100, 0x20000000000, 0x0, 0x100000000, 0x5], [{0x0, 0x4, 0x0, 0x7d06}, {0xfffc, 0x3, 0x2005}, {0x0, 0x0, 0xfffffffe, 0x1}, {0x3, 0x5, 0x6, 0xffffffffffffffff}, {0xcc8b, 0x2, 0x0, 0x8}, {0x0, 0x2003, 0x40000, 0x2000000000000000}, {0x3, 0x0, 0x0, 0xffffffffffffffff}, {0x4, 0x965, 0x0, 0x8}], {0x0, 0x5, 0x1}, {0x0, 0x0, 0xfffffffe}}}) setsockopt$sock_int(0xffffffffffffffff, 0xffff, 0x40, 0x0, 0x0) r0 = open(&(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x0) kevent(0xffffffffffffffff, 0x0, 0x1005, 0x0, 0x37, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000140)=ANY=[@ANYRES8=r0]) syz_emit_ethernet(0x126f, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]) sysctl$kern(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)="55f8f5782087a072a82ec35f78d14780f518", 0x12) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r1 = socket(0x18, 0x2, 0x0) ioctl$FIONREAD(r1, 0xc1206949, &(0x7f00000001c0)) unlink(&(0x7f0000000a80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000a40)='./file0\x00') link(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1.683483912s ago: executing program 5 (id=1147): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) (async) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc5005601, &(0x7f0000000000)={0x10, 0x0, [{&(0x7f0000347000/0x3000)=nil, &(0x7f0000663000/0x4000)=nil, 0x5}, {&(0x7f00005c9000/0x2000)=nil, &(0x7f0000826000/0x4000)=nil}, {&(0x7f0000060000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil}, {0x0, &(0x7f0000ffb000/0x3000)=nil, 0x40}, {&(0x7f000017c000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil}, {&(0x7f0000000000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x6}, {0x0, 0x0, 0x2}, {&(0x7f0000ff0000/0xf000)=nil, &(0x7f00000c4000/0x10000)=nil, 0x200000000000}, {&(0x7f0000095000/0x11000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x2}, {&(0x7f00004cc000/0x4000)=nil, &(0x7f0000661000/0x3000)=nil}, {0x0, &(0x7f0000156000/0x1000)=nil, 0x18}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil}, {&(0x7f000038f000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x100000000}, {&(0x7f0000088000/0x3000)=nil, 0x0, 0x9bc1}, {&(0x7f00001cf000/0x4000)=nil, &(0x7f0000142000/0x4000)=nil}, {&(0x7f0000573000/0x2000)=nil, &(0x7f00005d8000/0x4000)=nil}], './file0\x00'}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f0000000080), 0x1c, 0x0}, 0x0) (async) bind$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) (async) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x10000000000001}}) (async) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) r1 = socket(0x18, 0x1, 0x0) close(r1) r2 = socket(0x18, 0x2, 0x0) setsockopt(r2, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) connect$unix(r1, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) (async) sendmsg$unix(r1, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0) fcntl$setown(r0, 0x6, 0x0) 1.682236177s ago: executing program 3 (id=1149): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mknodat(r0, &(0x7f0000000100)='./file0\x00', 0x1000, 0x5) kqueue() socket(0x2, 0x2, 0x0) setsockopt(0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000080)="c5f5d915", 0x4) dup2(0xffffffffffffffff, r1) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x20, 0x0) flock(r2, 0x15) select(0x40, &(0x7f0000000000)={0xfffffffffffffffd, 0x0, 0xdc4, 0x564, 0x9ce8, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0) syz_emit_ethernet(0x138, &(0x7f0000000140)=ANY=[@ANYRESHEX]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) bind(0xffffffffffffffff, &(0x7f0000000000)=@un=@file={0x1}, 0x2) r3 = socket(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0xffff, 0x20, &(0x7f0000000080)=0xa5, 0x4) connect$unix(r3, &(0x7f0000000340)=@file={0x1, './file0\x00'}, 0xa) write(r3, 0x0, 0x0) recvmmsg(r3, &(0x7f00000001c0)={0x0, 0x7}, 0x10, 0x800, 0x0) open(&(0x7f0000000240)='./file0/file0\x00', 0x615, 0x0) mknod(&(0x7f0000000180)='./file0/file0\x00', 0x8000, 0x40000802) connect$unix(0xffffffffffffffff, &(0x7f0000000840)=@abs={0x1, 0x0, 0x2}, 0x8) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x62}) r4 = syz_open_pts() close(r4) r5 = syz_open_pts() ioctl$TIOCSETA(r4, 0x802c7414, &(0x7f0000000340)={0x8, 0x5, 0xffffdf82, 0xffffff8c, "08ed95990000000000000000ffffffffffffffe6", 0x4, 0x4}) writev(r4, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) readv(r5, &(0x7f0000000780)=[{&(0x7f0000000280)=""/113, 0x71}, {&(0x7f0000000200)=""/28, 0x1c}, {&(0x7f0000000300)=""/45, 0x2d}, {&(0x7f0000000480)=""/242, 0xf2}, {&(0x7f0000000380)=""/19, 0x13}, {&(0x7f00000003c0)=""/10, 0xa}, {&(0x7f0000000400)=""/63, 0x3f}, {&(0x7f0000000580)=""/101, 0x65}, {&(0x7f0000000600)=""/90, 0x5a}, {&(0x7f0000000680)=""/215, 0xd7}], 0xa) r6 = socket$inet(0x2, 0x3, 0xf7) ioctl$FIONREAD(r6, 0x80206979, &(0x7f0000000000)) 1.642207659s ago: executing program 3 (id=1153): chmod(&(0x7f0000000040)='.\x00', 0x35e) setuid(0xee01) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0xc4) mkdir(&(0x7f00000001c0)='./file0/file0\x00', 0xa) chmod(&(0x7f0000000140)='./file0\x00', 0x4e) (async) chmod(&(0x7f0000000140)='./file0\x00', 0x4e) unveil(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000300)='c\x00') syz_emit_ethernet(0x9a, &(0x7f00000000c0)=ANY=[@ANYBLOB="e727dc07"]) openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000080)="76e5eac907f9ccf7a251ceddcec7d6aa45cffe2c63a56077123a276d3ba4e9d17eb3eb5db12a3783a8e0620d357de1fe04fa9465b5bd1286e9624dec06a00c222f", 0x41}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) unveil(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='x\x00') (async) unveil(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='x\x00') openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) (async) openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) recvmmsg(0xffffffffffffff9c, &(0x7f0000000080)={&(0x7f0000000040)={&(0x7f0000000980)=@un=@file={0x0, ""/551}, 0x229, 0x0, 0x0, 0x0}}, 0x10, 0x0, 0x0) (async) recvmmsg(0xffffffffffffff9c, &(0x7f0000000080)={&(0x7f0000000040)={&(0x7f0000000980)=@un=@file={0x0, ""/551}, 0x229, 0x0, 0x0, 0x0}}, 0x10, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r0, &(0x7f0000000080)={0x0}, 0x6a, 0x0) 1.634575161s ago: executing program 3 (id=1158): select(0x40, &(0x7f0000000000)={0xfffffffffffffffd, 0x0, 0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, 0x0, 0x0) r0 = socket(0x2, 0x3, 0x0) r1 = socket(0x2, 0x400000000002, 0x0) setsockopt(r1, 0x0, 0x21, &(0x7f0000000080)="c5", 0x1) dup2(r0, r1) setsockopt$sock_int(r0, 0xffff, 0x200, &(0x7f00000000c0)=0x400, 0x4) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) bind(r0, &(0x7f0000000000), 0x10) r2 = socket(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0xffff, 0x20, &(0x7f0000000080)=0x6, 0x4) connect$unix(r2, &(0x7f0000000000), 0x10) write(r2, 0x0, 0x0) 1.60603293s ago: executing program 3 (id=1162): faccessat(0xffffffffffffffff, &(0x7f0000000080)='.\x00', 0x26, 0x0) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)='m', 0x1}], 0x1) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x9, &(0x7f0000000240)="ea00000100000000", 0xc) setsockopt$inet_opts(r0, 0x0, 0x200000000000b, &(0x7f0000000180)='n', 0x1) ioctl$TIOCSETA(0xffffffffffffffff, 0xc0284457, &(0x7f00000000c0)={0xffffffff, 0xfffffffe, 0xfeffffff, 0xfffffffc, "080000000000000000010000000000000f1e0400", 0x0, 0x10000}) semop(0x0, &(0x7f00000000c0)=[{0x0, 0x2ff}], 0x1) r1 = semget(0x0, 0x1, 0x281) semop(r1, &(0x7f0000000000), 0x23) semop(r1, &(0x7f0000000000)=[{0x0, 0xfe00, 0x1000}, {0x1, 0x2, 0x1000}, {0x1, 0x2, 0x1000}], 0x3) ioctl$TIOCSETAF(0xffffffffffffff9c, 0x802c7416, &(0x7f0000000000)={0x6, 0x7, 0xe5, 0x549, "22f00600000000e714db00000000000100007600", 0x62, 0x2}) r2 = accept$unix(0xffffffffffffffff, &(0x7f0000000340)=@file={0x0, ""/265}, &(0x7f0000000140)=0x10b) sendto$unix(r2, &(0x7f0000000000)="b10005040000040000", 0x9, 0x400, 0x0, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[@ANYBLOB="69e1629b6174391e7dd7a2d786dd60b6000000302c03cb697a653e336f000000500000000000ff02000000000000000000000000000102000003"]) syz_emit_ethernet(0x72, &(0x7f00000000c0)={@random="e727dc07001f", @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "9907a6", 0x3c, 0x2c, 0x3, @rand_addr="cb697a653e336f0000005000", @mcast2, {[@routing={0xf0, 0x0, 0x0, 0x30}], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0xeb, {0x8, 0x6, "d9ce93", 0x4, 0x48, 0x0, @empty, @rand_addr="31d158ae9d91463c08b5e259c48b4735", [], "d5959465"}}}}}}}) syz_emit_ethernet(0x46, &(0x7f00000002c0)={@random="e727dc07001f", @random="391e7dd7a2d7", [], {@ipv6={0x86dd, {0x0, 0x6, "9907a6", 0x10, 0x2c, 0x3, @rand_addr="cb697a653e336f0000005000", @mcast2, {[@routing={0x0, 0x0, 0x0, 0x2e}], @generic="08c8bf1941c0e737"}}}}}) syz_emit_ethernet(0x22, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r3 = socket(0x11, 0x3, 0x0) sendto$unix(r3, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a378343712051eea040000000000", 0xb1, 0x0, 0x0, 0x0) 1.604958994s ago: executing program 2 (id=1163): mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) (async) chmod(&(0x7f0000000040)='.\x00', 0x35e) (async, rerun: 64) setuid(0xee01) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0xc4) (async) chmod(&(0x7f0000000240)='./file0\x00', 0x44) (async, rerun: 32) unveil(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000300)='x\x00') (async, rerun: 32) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40, 0x29) ioctl$WSMOUSEIO_SCALIBCOORDS(r0, 0x81205724, &(0x7f0000000100)={0x7, 0x8017, 0x7fffffff, 0xb31, 0x1, 0x81ac, 0x10011, 0x10, [{0x7, 0x0, 0x4, 0x71002}, {0x6, 0xc, 0x8, 0x7f}, {0x100, 0x9, 0x400, 0x9}, {0x1, 0x5, 0x8008}, {0x100404, 0x1, 0xbc6, 0x401}, {0x6, 0xfffffffd, 0x3, 0x3}, {0x2, 0x401, 0x4f7, 0x6c}, {0x6, 0x803, 0x10000014, 0x8}, {0x2, 0x7f, 0x5, 0x5}, {0x140, 0x8001, 0x6, 0x4}, {0x90, 0x7ffc, 0xc, 0x7f}, {0x2008, 0x9, 0x604, 0x2}, {0x1000, 0x7, 0x8, 0x4}, {0x29a71717, 0xfffffffa, 0x80000000, 0x80000001}, {0x7, 0x5, 0x9, 0x8}, {0x0, 0x3, 0x9, 0x88b0}]}) (async, rerun: 64) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (rerun: 64) r1 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a) ioctl$VNDIOCSET(r1, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) (async) ioctl$VNDIOCSET(r1, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0xf, 0x0}) ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0}) munmap(&(0x7f0000000000/0xf000)=nil, 0xf000) 1.556149033s ago: executing program 2 (id=1164): r0 = socket(0x18, 0x3, 0x0) setsockopt(r0, 0x1000000029, 0x27, &(0x7f0000000000)="5ab7", 0x2) getsockopt$sock_cred(r0, 0xffff, 0x1022, 0x0, 0x0) (async) setpgid(0xffffffffffffffff, 0x0) r1 = socket(0x11, 0x3, 0x0) mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) recvmmsg(r1, &(0x7f0000000340)={&(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/157, 0x9d}], 0x1, 0x0}, 0xb}, 0x10, 0x41, 0x0) (async) recvmmsg(r1, &(0x7f0000000100)={&(0x7f0000000180)={&(0x7f0000000480)=@un=@file={0x0, ""/506}, 0x1fc, 0x0, 0x0, 0x0}}, 0x10, 0x2, 0x0) 1.539988983s ago: executing program 1 (id=1166): r0 = geteuid() getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0xc) fchown(0xffffffffffffff9c, r0, r2) r3 = getuid() lchown(&(0x7f0000000040)='./file0\x00', r3, r2) r4 = openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x10400, 0x0) (async) r5 = openat$tty(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) r6 = openat$pf(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) (async) r7 = accept$inet(0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000180)=0xc) (async) r8 = openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000000240), 0x100, 0x0) (async) r9 = openat$pci(0xffffffffffffff9c, &(0x7f0000000280), 0x100, 0x0) kevent(r4, &(0x7f00000001c0)=[{{r5}, 0xfffffffffffffff8, 0x8, 0x80000000, 0x2, 0x41a}, {{r6}, 0xfffffffffffffffd, 0x4, 0x8}, {{r7}, 0xfffffffffffffffe, 0x40, 0x1, 0x2, 0x1}], 0x9b, &(0x7f00000002c0)=[{{r8}, 0xfffffffffffffff9, 0xc1, 0x8, 0x7, 0x9}, {{r9}, 0x3, 0x4, 0x8, 0x401, 0x8001}], 0x8, &(0x7f0000000300)={0x6, 0x6}) (async) lchown(&(0x7f0000000340)='./file0\x00', r3, r2) syz_emit_ethernet(0x2a, &(0x7f0000000380)={@empty, @remote, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x0, @empty, @broadcast, @empty, @broadcast}}}}) (async) r10 = msgget$private(0x0, 0x82) msgctl$IPC_SET(r10, 0x1, &(0x7f00000003c0)={{0x81, r0, r2, 0xffffffffffffffff, r2, 0x4, 0x8}, 0x2, 0x1, r1, r1, 0x7, 0x80000001, 0x8, 0x4}) r11 = open$dir(&(0x7f0000000440)='./file0\x00', 0x80, 0x40) (async) ioctl$TIOCCBRK(r4, 0x2000747a) (async) ioctl$WSMUXIO_LIST_DEVICES(r4, 0xc1045763, &(0x7f0000000480)={0x10000, [{0x2, 0x9}, {0x3, 0x9}, {0x483f2b01e7e89743, 0x1}, {0x2, 0xa}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x3}, {0x2, 0xe88}, {0x2, 0xbdf2}, {0x2, 0x8}, {0x1, 0x7}, {0x3, 0xfff}, {0x3, 0x2c99}, {0x2, 0x5}, {0x0, 0x4}, {0x1, 0x4}, {0x1, 0x2}, {0x1}, {0x1, 0xffffffff}, {0x1, 0x7f}, {0x3, 0xe89}, {0x1, 0x7}, {0x3, 0x7}, {0x1, 0x5}, {0x2}, {0x2, 0x1}, {0x1, 0x214}, {0x0, 0x9}, {0x1}, {0x1, 0x2}, {0x2, 0x5}, {0x1, 0x7}]}) (async) ioctl$WSKBDIO_SETKEYREPEAT(r4, 0x800c5707, &(0x7f00000005c0)={0xff, 0x7fffffff, 0x8}) getsockopt$sock_cred(r4, 0xffff, 0x1022, &(0x7f0000000640)={0x0, 0x0}, &(0x7f0000000680)=0xc) fchownat(r8, &(0x7f0000000600)='./file0\x00', r12, r2, 0x2) getpgid(r1) (async) fchdir(r11) (async) linkat(r4, &(0x7f00000006c0)='./file0\x00', r8, &(0x7f0000000700)='./file0\x00', 0x0) (async) r13 = fcntl$getown(r4, 0x5) fcntl$setown(r7, 0x6, r13) (async) ioctl$TIOCCLRVERAUTH(r8, 0x2000741d) (async) r14 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000740), 0x1, 0x0) fcntl$setstatus(r14, 0x4, 0x40) 1.539703534s ago: executing program 7 (id=1167): mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) (async) r0 = open(&(0x7f0000000080)='./file0\x00', 0x8000, 0xa) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x17, 0x2000007, 0x101, 0x80000001, 0x80000081, 0x5, 0x10, [{0x0, 0x7, 0x4, 0x71000}, {0x7, 0x88, 0x8, 0x7}, {0x8, 0x6, 0x0, 0x9}, {0x3, 0x900, 0xe}, {0x401, 0x200326, 0x2800, 0x7}, {0x82, 0x27f3, 0x3, 0x99}, {0xce1, 0x4, 0x4f8, 0x6d}, {0x6, 0x6, 0x8, 0x4}, {0x2, 0x82, 0x9, 0x9}, {0x7, 0x100, 0xd1b, 0x1088}, {0x1e6, 0x10001, 0xc, 0x6}, {0x800, 0x9, 0x8, 0x9}, {0xb8e, 0x4, 0x8, 0x4}, {0x29a7171a, 0x8, 0x1, 0x4}, {0xc, 0x7, 0x1, 0xfffffffe}, {0x0, 0x1, 0x1002, 0x30004}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) (async) ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) (async, rerun: 64) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (async, rerun: 64) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_opts(r1, 0x0, 0x64, &(0x7f0000000240)="01000000", 0x4) (async, rerun: 32) ioctl$FIONREAD(r1, 0xc0207534, &(0x7f0000000440)) (async, rerun: 32) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) ioctl$VT_GETMODE(r2, 0x40087603, &(0x7f00000002c0)) (async, rerun: 32) open(&(0x7f0000000140)='./file0\x00', 0x10686, 0x8) (async, rerun: 32) unveil(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='c\x00') (async) acct(&(0x7f0000000080)='./file0\x00') 1.537732756s ago: executing program 2 (id=1168): mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) mknod(&(0x7f0000000040)='./file0\x00', 0x4, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x20) ioctl$FIONREAD(r0, 0x4004667f, &(0x7f00000000c0)) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40, 0x29) ioctl$WSMOUSEIO_SCALIBCOORDS(r1, 0x81205724, &(0x7f0000000100)={0x7, 0x8017, 0x7fffffff, 0xb31, 0x1, 0x81ac, 0x10011, 0x10, [{0x0, 0x0, 0x4, 0x71002}, {0x6, 0xc, 0x8, 0x7f}, {0x100, 0x9, 0x400, 0x9}, {0x1, 0x5, 0x8008}, {0x404, 0x1, 0x2800, 0x401}, {0x6, 0xfffffffd, 0x3, 0x3}, {0x2, 0x401, 0x4f7, 0x6c}, {0x6, 0x803, 0x10000014, 0x8}, {0x2, 0x7f, 0x5, 0x5}, {0x140, 0x8001, 0x6, 0x4}, {0x8f, 0x7ffc, 0xc, 0x7f}, {0x2008, 0x9, 0x604, 0x2}, {0xb8c, 0x7, 0x8, 0x4}, {0x29a71717, 0xfffffffa, 0x80000000, 0x80000001}, {0x7, 0x5, 0x9, 0x8}, {0x0, 0x3, 0x9, 0x88b0}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a) ioctl$VNDIOCSET(r2, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r2, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) r3 = openat$pci(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) ioctl$PCIOCGETROM(r3, 0xc0107005, &(0x7f0000000100)={{}, 0x0, 0x0}) ioctl$PCIOCGETROM(r3, 0xc0107005, &(0x7f00000001c0)={{}, 0x0, 0x0}) ioctl$VNDIOCSET(r1, 0x80184404, &(0x7f00000001c0)={0x0, 0xf, 0x0}) ioctl$VNDIOCSET(r1, 0x80044403, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0}) munmap(&(0x7f0000000000/0xf000)=nil, 0xf000) 1.525291039s ago: executing program 0 (id=1170): sysctl$net_inet_tcp(&(0x7f0000000800)={0x4, 0x2, 0x6, 0x3}, 0x4, &(0x7f0000000980)="f9ff26c306dd3b", &(0x7f00000007c0)=0x7, 0x0, 0x0) (async) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x205b9a) (async) setreuid(0xee00, 0xffffffffffffffff) (async) r0 = getuid() (async) r1 = getuid() chown(&(0x7f0000000040)='./file0\x00', r1, 0xffffffffffffffff) (async) setreuid(0xee00, r0) chmod(&(0x7f0000000080)='./file0\x00', 0x2ea) 1.524994522s ago: executing program 0 (id=1171): ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, 0x0) (async) ioctl$TIOCSTART(0xffffffffffffffff, 0x2000746e) kqueue() setuid(0xffffffffffffffff) (async) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x22) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) r0 = shmget$private(0x0, 0x2000, 0x405, &(0x7f000002a000/0x2000)=nil) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000100)={{0x10000, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x70, 0xfe00}, 0xf, 0x800, 0x0, 0xffffffffffffffff, 0x7fffffff, 0xad6, 0x7b}) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) (async) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000000)=""/58) open(&(0x7f0000000140)='./file0\x00', 0x78e, 0x121) (async) setrlimit(0x1, &(0x7f0000000240)={0xad, 0x1ff}) r2 = getpid() setgroups(0x0, 0x0) (async) ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x510, r2) (async) setrlimit(0x5, &(0x7f0000000280)={0x7fffffffffffffff, 0x477a}) (async) open(&(0x7f0000000000)='./file0\x00', 0x2, 0x0) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) r3 = socket(0x2, 0x8002, 0x0) ioctl$WSMUXIO_INJECTEVENT(r1, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x1}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) r4 = socket(0x18, 0x1, 0x0) setsockopt(r4, 0x1000000029, 0x2e, &(0x7f0000000040)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) (async) setsockopt(r4, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbdf13b9fd812eaa4e713048e69931929648", 0x14) r5 = fcntl$dupfd(r3, 0x2, 0xffffffffffffffff) close(r5) (async) socket(0x2, 0x2, 0x0) shutdown(r5, 0x2) 1.523676465s ago: executing program 1 (id=1172): chmod(&(0x7f0000000040)='./file0\x00', 0x238) setuid(0xee01) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc0e99db6de761f86, 0x0) r0 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="9644234aad601027ebe75932cfc14eaa7b46e0ba68cedaeb6aef8488a5ed28abe316f83e419aae65aebcca5b0d140c02617611bcee06a28b93760c8c8cfa516e67bacda7ccfd8ad025dfb20d9015d5edbe0560eacb690c74f45e2a1369bc6d6ecf85", 0x62}, {0x0}], 0x2) execve(0x0, 0x0, 0x0) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0x3a8f7a7ab170102, 0x0) write(r1, &(0x7f0000000180)="e511fa97d6ec38a0966b78133bb94ed3cffc0e5fc005de3cb32b6c243b04", 0x1e) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x40, 0x4) ioctl$TIOCSETAF(0xffffffffffffffff, 0x802c7416, &(0x7f0000000100)={0x0, 0x7, 0x1ff, 0x6, "32c14a6159de090004000000e2c791260dad3860", 0x0, 0xd}) bind$unix(0xffffffffffffffff, &(0x7f0000000100)=@abs={0x1f95d27d48731892, 0x0, 0x1}, 0x8) sysctl$net_inet_tcp(&(0x7f00000000c0)={0x4, 0x2, 0x6, 0x9}, 0x4, &(0x7f0000000000)="9b1809ffffffffffffff7f473f11e1a4e5f2f9f220ef7f0abdbc34fe42021588dc8ff44f4b76c76d41859d85ea800dabe467badf35b6fd74c94d1b44", &(0x7f0000000040)=0x10011, 0x0, 0x0) r3 = socket(0x10, 0x4, 0x7) getsockopt$SO_PEERCRED(r3, 0xffff, 0x1022, &(0x7f0000000140)={0x0, 0x0}, 0xfcc1) fchownat(r2, &(0x7f00000000c0)='./file0\x00', r4, 0xffffffffffffffff, 0x4) faccessat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2, 0x0) 1.522738931s ago: executing program 0 (id=1173): mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r0 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a) open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9f, 0x0) mknod(&(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1d02) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) link(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000d40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') link(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') link(&(0x7f0000000940)='./file0\x00', &(0x7f0000000e40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) ioctl$WSMOUSEIO_SCALIBCOORDS(r0, 0x81205724, &(0x7f0000000100)={0x800, 0x7, 0x2000007, 0x0, 0x80000001, 0x4, 0x7, 0x10, [{0x1000000, 0x100007, 0x0, 0x71013}, {0xd8, 0x8, 0x8, 0xfffffff9}, {0x0, 0xe856, 0x0, 0x8}, {0x1, 0x800, 0x3}, {0xf, 0xf2b, 0x9, 0x5}, {0x40000002, 0x1, 0x8, 0x95}, {0x82ce1, 0x800, 0x5, 0x400006d}, {0x3, 0x803, 0x11, 0x5}, {0xffffffff, 0x82, 0x2, 0x9}, {0x20000004, 0x7fffffff, 0xd1b, 0x88}, {0x1d0, 0x10001, 0x2c, 0x975e616}, {0x800, 0x9, 0x8, 0x5}, {0x10001, 0x4, 0x6, 0xffe}, {0x83, 0xffffbffa, 0x6, 0x6}, {0xe, 0x8, 0x6}, {0x0, 0x8001, 0x4, 0xae89}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = socket(0x2, 0x1, 0x0) r2 = socket(0x2, 0x400000000002, 0x0) dup2(r2, r1) select(0x40, &(0x7f0000000000)={0xfffffffffffffffd, 0x0, 0xdc4, 0x564, 0x9ce8, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0) socket(0x2, 0x2, 0x0) ioctl$VMM_IOC_CREATE(r0, 0xc2585601, &(0x7f0000001040)={0x10, 0x7f, [{&(0x7f00007f2000/0x1000)=nil, &(0x7f0000366000/0x4000)=nil, 0xffffffff00000001}, {&(0x7f00000d8000/0x3000)=nil, &(0x7f0000466000/0x2000)=nil}, {&(0x7f0000473000/0x1000)=nil, &(0x7f00002a5000/0x3000)=nil, 0x4}, {&(0x7f00003ab000/0x1000)=nil, &(0x7f00000cc000/0x400000)=nil, 0x4}, {&(0x7f000008e000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x9}, {&(0x7f0000588000/0x4000)=nil, &(0x7f0000003000/0x1000)=nil, 0x5}, {&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x4}, {&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000456000/0x4000)=nil, 0x4}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f00001f7000/0x4000)=nil, 0x1}, {&(0x7f0000555000/0x4000)=nil, &(0x7f0000315000/0x3000)=nil, 0x9f}, {&(0x7f0000387000/0x3000)=nil, &(0x7f000028d000/0x2000)=nil, 0x7ff}, {&(0x7f0000541000/0x3000)=nil, &(0x7f00003e7000/0x2000)=nil, 0x9}, {&(0x7f000056e000/0x4000)=nil, &(0x7f00001a8000/0x4000)=nil}, {&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x3}, {&(0x7f000028d000/0x3000)=nil, &(0x7f00001e2000/0x4000)=nil, 0x62}, {&(0x7f000044f000/0x2000)=nil, &(0x7f0000146000/0x3000)=nil, 0xbf}], './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', 0x5}) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="00001c00ac14"]) ioctl$WSKBDIO_SETENCODING(0xffffffffffffffff, 0x80045710, &(0x7f0000000000)=0x2e8) syz_emit_ethernet(0x138, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) bind(r1, &(0x7f0000000000), 0x10) close(r0) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0x80000000100007, 0x0, 0xfffe}) rename(&(0x7f0000000000)='./file2\x00', &(0x7f0000000080)='./file2/file0/file0\x00') 1.478219063s ago: executing program 1 (id=1174): mknod(&(0x7f0000000480)='./bus\x00', 0x2000, 0x412dff) (async) mknod(&(0x7f0000000480)='./bus\x00', 0x2000, 0x412dff) setpgid(0x0, 0x0) sysctl$net_inet6_ip6(&(0x7f0000000900)={0x4, 0x18, 0x29, 0x32}, 0x4, 0x0, 0x0, &(0x7f00000002c0)="0c71d6d6", 0x4) r0 = getppid() setpgid(0x0, r0) setpgid(0x0, 0x0) (async) setpgid(0x0, 0x0) ktrace(&(0x7f0000000140)='./bus\x00', 0x41ecf3848c59a689, 0x4000000c, 0x0) 1.476352138s ago: executing program 1 (id=1175): r0 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000000), 0x8, 0x0) close(r0) preadv(r0, &(0x7f0000001040)=[{&(0x7f0000000040)=""/4096, 0x1000}], 0x1, 0x4) ioctl$KDSETMODE(0xffffffffffffffff, 0x20004b0a, &(0x7f0000001080)) (async) r1 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f00000010c0), 0x10000, 0x0) ioctl$WSKBDIO_GETMODE(r1, 0x40045714, &(0x7f0000001100)) ioctl$WSMUXIO_INJECTEVENT(r1, 0x80185760, &(0x7f0000001140)={0x8, 0x1ff, {0x3, 0xffffffffffffffff}}) (async) getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000001180)={0x0, 0x0}, &(0x7f00000011c0)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000001200)={0x0, 0x0, 0x0}, &(0x7f0000001240)=0xc) fchown(r1, r2, r3) (async) ioctl$WSDISPLAYIO_GMODE(r1, 0x4004574b, &(0x7f0000001280)) (async) ioctl$FIONBIO(r0, 0x8004667e, &(0x7f00000012c0)=0x8) (async) pipe(&(0x7f0000001300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCMGET(r5, 0x4004746a, &(0x7f0000001340)) (async) close(r0) (async) truncate(&(0x7f0000001380)='./file0\x00', 0x2) (async) socket(0x1, 0x1, 0x0) ioctl$VNDIOCSET(r5, 0xc0384600, &(0x7f0000001440)={&(0x7f00000013c0)='./file0\x00', 0x7ff, &(0x7f0000001400)='./file0\x00', 0x8}) (async) openat$wsmouse(0xffffffffffffff9c, &(0x7f0000001480), 0x200, 0x0) unveil(&(0x7f00000014c0)='./file0/file0\x00', &(0x7f0000001500)='r\x00') setregid(0xffffffffffffffff, r3) (async) ioctl$WSMUXIO_LIST_DEVICES(r4, 0xc1045763, &(0x7f0000001540)={0x7, [{0x2, 0xe}, {0x2, 0xdc18}, {0x2, 0x6}, {0x2, 0x7}, {0x2, 0x4}, {0x3, 0x6}, {0x3, 0x2f}, {0x3, 0xb02}, {0x3}, {0x3, 0x2}, {0x1}, {0x2, 0x8}, {0x2, 0xffff}, {0x2, 0x8}, {0x3, 0x78}, {0x3, 0x1}, {0x2, 0x2}, {0x2, 0x6}, {0x2, 0x6}, {0x3, 0x3}, {0x1, 0x80000001}, {0x2, 0xb5}, {0x3, 0x1}, {0x2, 0x4}, {0x2, 0x401}, {0x1, 0x8000}, {0x1, 0x3}, {0x2, 0xe}, {0x3, 0x8}, {0x2, 0x40}, {0x2, 0x7fff}, {0x3, 0xca7}]}) (async) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) (async) ioctl$BIOCSETF(r5, 0x80104267, &(0x7f00000016c0)={0x1, &(0x7f0000001680)=[{0x2, 0x50, 0x1}]}) (async) ioctl$TIOCGETA(r5, 0x402c7413, &(0x7f0000001700)) (async) r6 = socket(0x1, 0x2, 0xb) sendmsg$unix(r6, &(0x7f0000001a80)={&(0x7f0000001740)=@abs={0x0, 0x0, 0x0}, 0x8, &(0x7f0000001a00)=[{&(0x7f0000001780)="ccb3765a784507f57e0a68c98b8cca41e1292085f3bd1b9a72e9f9b67f6edc40130e894bdb34438b961d6ea8d7d66fba4af152dc5b0d192172ce58b042b1f46ddd0a3669b2954fd8d7aa", 0x4a}, {&(0x7f0000001800)="70c60da8bd763aedd931f61e61b603a3a22c4c36b325e6596576372f70aac5d7acd2e69a505b16a1df11496454a508220f2039af17e9dc09b203d97a743300f659d2292e3ffd9a6ffff5debdb1b221dc7e8cab97d0a3898a7753462b3d407cc847fd43c95232c95a08efb41b021a077a056e5f98012bb4342ffd14fc959a1360fa21e1b81fc4728d681db824242f29e26c8183f21769cae4f1137d347e28c3c993edb900", 0xa4}, {&(0x7f00000018c0)}, {&(0x7f0000001900)="5f5fb35e996c13d329e3ca6a35a08ea02c98e6dc656dd5c2ec1f28c78682daf688198bbbace88c5f21f00f3e03742ffeff00b4dc69ff003cafa4cc9b6e9600dd224753b9801b15d4a40695389acc87646f3fbd88d73ffaf8bef9a33829e10f10eba37414135cec06951ae8d3622258cfde1c8efb3768baa8c8a7b9516dda8c2c3537fcb9b0a589e653de61774815290061d998d8e8b88a4cb69555d50393b682159621bd8541075cc9cba12bee88526bf46a4e23c0bfc4684f54b9", 0xbb}, {&(0x7f00000019c0)="e914f9370ad879c514e6f7ea7a7b6e0c026a38b65a35496b72b5e7ff4865689b37e2e6", 0x23}], 0x5}, 0x407) socketpair(0x2, 0x4, 0x89, &(0x7f0000001ac0)={0xffffffffffffffff}) getpeername(r7, &(0x7f0000001b00)=@in, &(0x7f0000001b40)=0xc) ioctl$SPKRTUNE(r4, 0x20005302, &(0x7f0000001b80)={0x9, 0x1}) 1.475841201s ago: executing program 0 (id=1176): mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x6) (async) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x6) sysctl$kern(0x0, 0x0, &(0x7f0000000380)="d635d193c28030954f5c28352d7a2adbb6c61e795f08f832cadb22afa34d00e429ba19a40eeb5d89d3c64f02d1216fa7fd82d6356fa1cf2ea4d887e04c1ab966cb0c1c43a6342e54c3ccad38040896f4f4d87b45623bf27a71881365e9ca86cb8b7c9488ddc5f408206f9076074f462a41634347f6ae324ed84e8825ffd13e14bd3a6dc9c22676f06c5e0ef9981ad89dde98079bab0b11562a8969412a60b7d84245ec5600719a88e645198373ae579cc5ec968ffc20ec0c063fa661ff13702406aee0ccb9b48151d1c2fe3e812de473f6da005c9731341f7f829f9564f5570a16540063bd4c6751d89207c9084123d67d96679da5193580cb6c845dacb045d16440", &(0x7f0000000080)=0x102, 0x0, 0x0) (async) sysctl$kern(0x0, 0x0, &(0x7f0000000380)="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", &(0x7f0000000080)=0x102, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xa7210e10bc3c9de9) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xa7210e10bc3c9de9) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x2, 0x0, 0x1d}, 0x4, 0x0, 0x0, 0x0, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x57, 0x0, 0x0, 0x0, 0x0, 0x33, 0xa2f}, 0x80000002000007, 0xfffffffffffffffb, 0xffffffffffffffff, 0x0, 0x3, 0x400000000009, 0x5, 0x8000000000000001}) (async) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x57, 0x0, 0x0, 0x0, 0x0, 0x33, 0xa2f}, 0x80000002000007, 0xfffffffffffffffb, 0xffffffffffffffff, 0x0, 0x3, 0x400000000009, 0x5, 0x8000000000000001}) sysctl$hw(&(0x7f00000000c0)={0x6, 0x6}, 0x2, 0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x200, 0x0) r0 = socket(0x18, 0x1, 0x0) r1 = open(&(0x7f0000000340)='./file1\x00', 0x200, 0xc) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) (async) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) sysctl$net_inet_ip(&(0x7f00000000c0)={0x4, 0x2, 0x0, 0x20}, 0x4, 0x0, 0x0, &(0x7f00000011c0)='\x00\x00\x00', 0x3) (async) sysctl$net_inet_ip(&(0x7f00000000c0)={0x4, 0x2, 0x0, 0x20}, 0x4, 0x0, 0x0, &(0x7f00000011c0)='\x00\x00\x00', 0x3) mmap(&(0x7f00003c9000/0x4000)=nil, 0x4000, 0x1, 0x10, r1, 0x100000000000000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) sysctl$net_inet_tcp(&(0x7f0000000000)={0x4, 0x2, 0x6, 0x15}, 0x4, 0x0, 0x0, 0x0, 0x0) acct(&(0x7f0000000100)='./file0\x00') acct(0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$net_inet_carp(&(0x7f0000000040)={0x4, 0x2, 0x6, 0x2}, 0x4, 0x0, 0x0, &(0x7f00000010c0)="e5", 0x1) 1.472208485s ago: executing program 1 (id=1177): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0x10, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x81, 0x2, 0x8, 0xa}, {0x6c, 0x1, 0x1, 0x1}, {0x400e, 0x21, 0x4}]}) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6381) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0xc, 0x2000000000000004}, 0x0, 0x0, 0x0) r1 = kqueue() kevent(r1, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x10, 0x100) ioctl$FIONBIO(r2, 0x82907003, &(0x7f0000000140)=0x2) ioctl$FIONBIO(r2, 0x82907003, &(0x7f0000000140)=0x1) close(r2) setrlimit(0x8, &(0x7f0000000980)={0xb, 0x54}) r3 = syz_open_pts() close(r3) r4 = syz_open_pts() writev(r3, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) ioctl$TIOCSETA(r4, 0x802c7414, &(0x7f0000000040)={0xfffffffe, 0xd, 0x8000003, 0x5, "001a3cfcf6c07c79eb000000e7ffffff000b00", 0x544, 0xc04}) readv(r4, &(0x7f0000000780)=[{&(0x7f0000001940)=""/4096, 0x1000}, {&(0x7f0000002940)=""/4096, 0x1000}], 0x2) ioctl$BIOCGRTIMEOUT(r2, 0x4010426e, &(0x7f00000001c0)) syz_emit_ethernet(0x1000e, &(0x7f0000000280)=ANY=[]) 1.471338965s ago: executing program 5 (id=1178): mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r0 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x29) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x8018, 0x2000007, 0x101, 0xf9, 0x81b0, 0x4a, 0x10, [{0x0, 0x2890, 0x4, 0x71002}, {0x6, 0x9, 0x8, 0xfffffff9}, {0x1104, 0xf88, 0x0, 0x4}, {0x4, 0x800, 0x8007, 0x7}, {0x401, 0x3, 0x2800, 0x7}, {0xc, 0x650, 0x3, 0x99}, {0xce0, 0x3, 0x4f8, 0x6d}, {0x3, 0x803, 0x14, 0x8}, {0x2, 0x82, 0x5, 0x5}, {0x20006a75, 0x8001, 0x1, 0x4}, {0x1cc, 0x10201, 0xc, 0x3}, {0x8, 0x5, 0x4000008, 0x2}, {0xb95, 0x7, 0x4, 0x1}, {0x29a71717, 0xfffffffa, 0x2001, 0x6}, {0x1000c, 0x5, 0x5, 0x10000000}, {0x0, 0x1, 0xf, 0x30004}]}) r1 = syz_open_pts() syz_open_pts() syz_open_pts() flock(r1, 0x2) close(r1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000004c0)={0x2, &(0x7f00000000c0)=[{}, {0x2, 0x0, 0x0, 0x80000001}]}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x33}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x24, 0x0, 0x37) 1.471026658s ago: executing program 4 (id=1179): mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x6, 0xa0, 0x2000007, 0x100, 0x80000001, 0x80000004, 0x10001, 0x10, [{0x10000000, 0x7, 0x6661, 0x71000}, {0x101, 0x8, 0x9}, {0x6, 0x8000b86, 0xffffff7c, 0x9}, {0x73f0, 0x6, 0x4, 0x5}, {0x401, 0x8, 0x2800, 0x7}, {0x2, 0x6, 0x3, 0x97}, {0xce3, 0x100df61, 0x200004f8, 0x10}, {0x7, 0x3, 0x16, 0xb}, {0xffffffff, 0x84, 0x4, 0x3}, {0x4, 0x7, 0x93, 0x1ff}, {0x1e0, 0xffff, 0x7ff, 0x7}, {0x9, 0x29, 0x9, 0x5}, {0xb8c, 0x401, 0x80000003, 0x405}, {0x29a71717, 0xfffffff7, 0x0, 0x40006}, {0xc, 0xf8f, 0x6}, {0xfffffffd, 0x800bc3d, 0x4, 0x30005}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(0xffffffffffffffff, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(0xffffffffffffffff, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffe, 0x0, 0x4c}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x8, 0x0, 0x0, 0x0, 0x0, 0x1b6, 0x3ff}, 0xd3a5, 0x10000, 0x0, 0x0, 0x200000001, 0x3, 0x4, 0x9}) select(0x40, &(0x7f0000000000)={0xfffffffffffffffd, 0x0, 0xdc4, 0x564, 0x9ce8, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mknod(&(0x7f0000000240)='./bus\x00', 0x2000, 0x6d4) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r0 = socket(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0xffff, 0x20, &(0x7f0000000080)=0x6, 0x4) ioctl$FIONREAD(r0, 0x4004667f, &(0x7f0000000040)) connect$unix(r0, &(0x7f0000000000), 0x10) write(r0, 0x0, 0x0) 1.332455503s ago: executing program 7 (id=1180): syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffff"]) (async) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) (async) rename(&(0x7f0000000100)='./file0\x00', 0x0) rename(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0\x00') r1 = msgget$private(0x0, 0x0) msgsnd(r1, &(0x7f0000000040)=ANY=[@ANYRESOCT], 0x401, 0x0) (async) msgsnd(r1, 0x0, 0x401, 0x0) (async) msgrcv(r1, 0x0, 0x0, 0x1, 0x1000) msgsnd(r1, &(0x7f0000000100)={0x1}, 0x8, 0x800) msgctl$IPC_RMID(r1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='.\x00') (async) setrlimit(0x8, &(0x7f0000000080)={0xe, 0x51}) (async, rerun: 64) ioctl$WSMOUSEIO_SCALIBCOORDS(r0, 0x81205724, &(0x7f0000000980)={0x80000001, 0x1, 0x5, 0x9a, 0x3, 0x2, 0x1, 0x10, [{0x4, 0x5293abc9, 0xffffffff, 0xfffffffd}, {0x5, 0x23e, 0x4, 0x8000}, {0x9f37, 0x1, 0x0, 0x1}, {0x7ffffffd, 0x60b956a1, 0x3318866a, 0x3ff}, {0xffff, 0x2, 0x4, 0x7f}, {0x80, 0x1, 0x7, 0x4001}, {0x7, 0x9, 0x5, 0x4}, {0x4, 0x6, 0x5, 0x5}, {0x0, 0x3, 0x401, 0x7fa}, {0x9, 0x80000000, 0x848, 0x3}, {0xa, 0x7, 0x3, 0xffffff7f}, {0x8, 0x2, 0x103, 0x3}, {0x7, 0x3, 0x7}, {0xfffffff3, 0x71d9, 0x1, 0x1}, {0x83e, 0x1, 0xf, 0x6}, {0x2, 0x7, 0x4da0, 0x4}]}) (rerun: 64) r2 = syz_open_pts() close(r2) (async) r3 = syz_open_pts() ioctl$TIOCSETA(r3, 0x802c7414, &(0x7f0000000000)={0x7fffffff, 0x7bef, 0xffffdf82, 0xffffffcf, "1826283e680023d5ff7f0d01000400000400", 0x7fffffff, 0x7}) (async) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000280)="5d8e1bb1eb28305c6929453ca199df4cca86cde2ac51a27335ba4b18aa551649fd91142139c40b7f7f3c069a6a192afe45909f8610ce56cb93e025f351cba144ed73b1398c80a3bc8392191cfdb4031b74b3cfdb35e61754da475997585d691be3dd8e8ac1ef9cf833be41910b5069dfda12c77511b3e54c0caa536730589b4cc9984c78a1b2dd8e899543025b2fa6a28b8293653515014d8f510d4d64af8b583be9e305918c431b86f8dfc2d113397da3d15a7b8f8acf4922802813c5ed319ebe51fbf9b317332c0fe4d17f0d2120763d52201566ff1c94ddeb77", 0xdb}, {&(0x7f0000000380)="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", 0x51f}], 0x2) (async, rerun: 64) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (async, rerun: 64) setreuid(0x0, 0x0) (async, rerun: 64) r4 = getuid() (rerun: 64) setreuid(r4, r4) (async) chflags(&(0x7f0000000140)='./file0\x00', 0xe80000) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r5 = fcntl$dupfd(r2, 0xa, r3) close(r5) (async) socket(0x2, 0x2, 0x0) (async, rerun: 32) socket$inet(0x2, 0x2, 0x0) (rerun: 32) 1.321995989s ago: executing program 0 (id=1181): mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r0 = open(&(0x7f0000000080)='./file0\x00', 0x8000, 0xa) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x15, 0x2000007, 0x2, 0x80000001, 0xc, 0x5, 0x10, [{0xd, 0x7, 0x4, 0x71000}, {0x7, 0x2, 0x8, 0x7}, {0x9, 0x0, 0x200000, 0x9}, {0x5e9, 0x903, 0x11}, {0x1, 0x200326, 0x2800, 0x7}, {0x2, 0x27f3, 0x1004, 0x99}, {0xce5, 0x4, 0x4f8, 0x6d}, {0x6, 0x801, 0x81, 0x207}, {0x2, 0x82, 0x5, 0x9}, {0x2007, 0x100, 0xd1b, 0x3}, {0x1e7, 0x10001, 0x8, 0x6}, {0x800, 0x9, 0x2008, 0x9}, {0xb92, 0x4, 0x8, 0x2}, {0x29a7171a, 0x8, 0x1, 0x4}, {0xc, 0x7, 0x8000001, 0xfffffffe}, {0x0, 0x1, 0x3c, 0x8001}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x7ebd, 0x0}) ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x0, 0xb3f, {[0xfffffbfffffffffb, 0x0, 0x2, 0x4, 0x406, 0x3, 0xdf60, 0xfffffffffffffffe, 0x0, 0x2f01, 0x93, 0x3, 0xfffffffffffffffc, 0x200000000002, 0xd, 0x4, 0xfffffffffffffffe, 0x400000000100], [0xfffffffffffffffe, 0x401, 0x1000, 0x20000001, 0x5d, 0x7b98, 0x80000000000001fe], [0x100000001, 0x8000, 0x40000003, 0x4, 0xb, 0x11000, 0xffffffff00000003], [0x104, 0x1fffffffffc, 0x7ffffffffffffffc, 0x100000000, 0xfffffffffffffffe, 0x1bb9], [{0x0, 0x4, 0x0, 0x7d06}, {0xf7fc, 0x22, 0x5}, {0x4, 0x0, 0xfffffffe, 0x80}, {0x3, 0x3, 0x5, 0xffffffffffffffff}, {0x0, 0x1, 0x7d, 0x4}, {0x0, 0x6, 0x9, 0x2000000000000000}, {0x100, 0xfffffffe, 0xfffffff9}, {0x0, 0x100, 0x0, 0x8}], {0x1, 0x5, 0x6, 0x3}, {0xfffe, 0x3, 0x6d5, 0x3}}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) r1 = kqueue() kevent(r1, &(0x7f0000000040), 0x30, 0x0, 0x57d, 0x0) ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) r2 = socket$unix(0x1, 0x5, 0x0) r3 = accept$unix(r2, 0x0, 0x0) sysctl$kern(&(0x7f0000001400)={0x1, 0x29}, 0x2, 0x0, 0x0, &(0x7f0000001480), 0x0) ioctl$VMM_IOC_CREATE(r0, 0xc2585601, &(0x7f00000002c0)={0x10, 0x80, [{&(0x7f000072e000/0x4000)=nil, &(0x7f00004ab000/0x3000)=nil, 0x3da}, {&(0x7f0000287000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x4}, {&(0x7f0000277000/0xc000)=nil, &(0x7f00000a3000/0x1000)=nil, 0x6}, {&(0x7f0000684000/0x1000)=nil, &(0x7f000041a000/0x2000)=nil, 0x1}, {&(0x7f0000ffb000/0x3000)=nil, &(0x7f00003a4000/0x2000)=nil, 0x5}, {&(0x7f000059b000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil}, {&(0x7f00005ea000/0x1000)=nil, &(0x7f0000281000/0x2000)=nil, 0x3}, {&(0x7f0000105000/0x2000)=nil, &(0x7f0000524000/0x4000)=nil, 0x6}, {&(0x7f0000620000/0x4000)=nil, &(0x7f0000155000/0x1000)=nil, 0xaa}, {&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x69}, {&(0x7f00006a9000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x5}, {&(0x7f0000051000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x2}, {&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000407000/0x2000)=nil, 0x7}, {&(0x7f0000fff000/0x1000)=nil, &(0x7f00005b3000/0x3000)=nil, 0xb}, {&(0x7f00005b9000/0x3000)=nil, &(0x7f000034f000/0x3000)=nil, 0x9}, {&(0x7f00004e4000/0x2000)=nil, &(0x7f00003f2000/0x3000)=nil, 0x8}], './file0\x00', 0x3edc}) recvmsg(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000006c0)=[{}, {&(0x7f0000000040)=""/38, 0x26}, {&(0x7f0000001440)=""/4096, 0x1000}, {&(0x7f00000004c0)=""/250, 0xfa}, {&(0x7f00000000c0)=""/50, 0x32}, {&(0x7f00000005c0)=""/244, 0xf4}], 0x6, &(0x7f0000000740)=""/128, 0x80}, 0x2) 1.320482693s ago: executing program 6 (id=1182): r0 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf796b) sysctl$net_inet_icmp(&(0x7f0000000040), 0x4, 0x0, 0x0, 0x0, 0x0) sysctl$kern(&(0x7f0000000040)={0x1, 0x4f}, 0x3, 0x0, 0x0, &(0x7f0000000080)="4f1d4c6344b80ed788b6a4515248df3aa745bb992c574ab4cdf5587145812eab4a988f7fafd7a01d99776d988908cd186b51f34f8c15ffa0c685ad4116c783959eff4278384b4000384dbb1c2aaeff10b4135529a1da6fda67c67469d954be811b25ec5521559154c586eefff122009f659cd3e27e98a3241495005f102d9101d158284c0ee3250aa7c11042330de22a299ab00894fdc9bac6042d", 0xfffffc56) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)='#!', 0x2}, {&(0x7f0000000000)="729f4046fb1be69220a00a", 0xb}], 0x2) ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f00000019c0)={0xfffffffc, 0xfffffffe, {[0xfffffffffffffffc, 0x8, 0x5, 0x100000000, 0x2, 0x80000000, 0x8000002e, 0x0, 0x5, 0x2f01, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x800000002, 0x100], [0xb, 0x4, 0xfffffffffffffff8, 0x0, 0xffffffffffffffff, 0x80000000, 0x0, 0x0, 0x4000000000000, 0xb81], [0x8, 0x20000, 0x8f, 0x0, 0x800000, 0x0, 0xfffffffffffffffe], [0x100, 0x20000000000, 0x20, 0x100000002, 0xfffffffffffffffe], [{0x0, 0xc, 0x0, 0x7d06}, {0x2, 0x2, 0x1, 0x3}, {0x5, 0x0, 0xfff7fffe, 0x1000}, {0x1008, 0xfffffffc, 0x6, 0xfffffffffffffffe}, {0x0, 0x400, 0xd, 0x40}, {0x7ffe, 0x2000, 0x6, 0x4}, {0xfffe, 0x0, 0x7, 0x800}, {0x0, 0x95b, 0x200, 0x8}], {0x0, 0x5, 0x0, 0x849}, {0x203, 0x10, 0x4, 0x2}}}) r1 = kqueue() setrlimit(0x8, &(0x7f0000000980)={0xb, 0x4e}) r2 = syz_open_pts() close(r2) syz_open_pts() ioctl$FIOASYNC(r2, 0x80047469, &(0x7f00000000c0)=0x47) kevent(r1, &(0x7f0000000140), 0xe4a, 0x0, 0xa9f9, 0x0) execve(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) 1.318397526s ago: executing program 7 (id=1183): r0 = socket(0x2, 0x4001, 0x0) setitimer(0x41562ac0a1b12e1f, 0x0, 0x0) r1 = socket(0x2, 0x4001, 0x0) r2 = dup(r1) r3 = fcntl$dupfd(r2, 0x2, 0xffffffffffffffff) sysctl$net_inet_ip(&(0x7f0000000000)={0x4, 0x2, 0x0, 0x20}, 0x4, &(0x7f00000001c0)="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", &(0x7f0000000100)=0x147, &(0x7f0000000140)="418bb72ba8d723f41b35fc94cb979cdd85047004d4bb76473811f2009dfecd77bb9a7c4b7468316d559fc66d965a44ea695613dd1b694a826110ae48ba8b1d5e220617daa36bda38bf95dc65c9fc216e64267dbbd09dbf2ffe54e5829afe6dacd5203f6f09", 0x65) close(r3) socket(0x2, 0x2, 0x0) r4 = socket(0x800000018, 0x2, 0x0) bind$unix(r4, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) setsockopt(r4, 0x1000000000029, 0x1b, &(0x7f0000000000)="c04a1190", 0x4) sysctl$hw(&(0x7f0000000640)={0x6, 0x13}, 0x2, &(0x7f0000000680)="1048d23b754e7189", &(0x7f0000000780)=0x8, &(0x7f00000007c0), 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1023, &(0x7f0000001080)=0x7fff, 0x4) 1.195505696s ago: executing program 2 (id=1184): sysctl$kern(&(0x7f00000000c0)={0x1, 0x2a}, 0x2, 0x0, &(0x7f0000000080), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$kern(&(0x7f0000000000)={0xa, 0x6}, 0x7, &(0x7f0000000080), 0x0, 0x0, 0x0) sysctl$kern(&(0x7f00000000c0)={0x1, 0x53}, 0x2, &(0x7f0000000180), &(0x7f0000000080), 0x0, 0x0) 1.19510268s ago: executing program 5 (id=1185): ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000040)={0x3, &(0x7f00000000c0)=[{0x0, 0x1d, 0x0, 0x81}, {0x3, 0x0, 0x0, 0x49}, {0x81, 0x0, 0x0, 0x1}]}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1934, 0x0, 0x94e88e483d20a485) r0 = syz_open_pts() r1 = open(&(0x7f00000000c0)='./file0\x00', 0x80000000000206, 0x0) chmod(&(0x7f0000000080)='./file0\x00', 0x40) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000280)='#!', 0x2}, {&(0x7f0000000540)="934c6de967caa6bf08dee579bd434871737386d5fd7378a6d26f014265602020d3", 0x4e}, {&(0x7f0000000180)="e4a517ab6acb8d101341b4949ade11bf7c65caa813791d02571ac2f7072264455c158966cc65aedd3aac704bf75be405497ec0b0598887bf1eb6cdb32c56da380de35c3ffdfbad435b739d5e7c8c8d523787036b1ca3c5623c1478339361fc6fc4f9a4a8df1df0a201eff048ba20a57a47ee1d9da451fae14709bdc1dad72e12f3c56c26446c77cc9099"}], 0x2) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000040)="20092000019c0a", 0x7}], 0x1) execve(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) ioctl$TIOCSTAT(r0, 0x20007465, 0x0) ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000340)={0x5, 0x0, 0x81, 0x10000005, "ff14e7130b1e00", 0x4003c, 0x3effe}) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) lchown(&(0x7f0000000280)='./file0/../file0\x00', 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000380)="079facfaaed69aea4dc561c3b736feac0a2a76087be8b904ddc6f90b66e0f69b6dfba683b348224cf0ccc2a39b0f79389a2bd9b211424a22ca014b9231e253e257706c75b3f320166475c72455021edf575fab8b5d65b8d261c87c3ccc4e784ea7462f3723edabb8e26d27acb1797e2ef4db27270a", 0xffffff01}], 0x1) 1.194877011s ago: executing program 2 (id=1186): mknod(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x0) chmod(&(0x7f0000000040)='.\x00', 0x35e) setuid(0xee01) (async, rerun: 64) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0xe8, 0x0) (rerun: 64) r1 = fcntl$dupfd(r0, 0x3, 0xffffffffffffffff) ioctl$FIONREAD(r1, 0xc0206921, &(0x7f00000001c0)) open$dir(&(0x7f0000000b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x0) 1.19456212s ago: executing program 6 (id=1187): mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) (async) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x11, 0x0, 0x2}, 0x4, 0x0, 0x0, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x2, 0x0, 0x19}, 0x4, 0x0, 0x0, &(0x7f0000000100), 0x0) (async) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x8000, 0xa) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x17, 0x2000007, 0x101, 0x80000001, 0x80000081, 0x5, 0x10, [{0x0, 0x101, 0x4, 0x71000}, {0x7, 0x88, 0x20008, 0x7}, {0x8, 0x6, 0x0, 0x9}, {0x3, 0x900, 0xe}, {0x401, 0x200326, 0x2800, 0x7}, {0x82, 0x27f6, 0x4, 0x99}, {0x5, 0x4, 0x4f8, 0x6d}, {0xd, 0x801, 0x8, 0x4}, {0x2, 0x82, 0x9, 0x9}, {0x7, 0x100, 0x5, 0x1088}, {0x1e6, 0x7, 0xc, 0x6}, {0x7fe, 0x9, 0x8}, {0xb8e, 0x4, 0x8, 0x4}, {0x29a7171c, 0x3, 0x1, 0x5}, {0xfffffe00, 0x7, 0x4, 0xffffffff}, {0x0, 0x1, 0x1002, 0x1}]}) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) (async) ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0x2, 0x0}) (async) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x186) (async) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x80000000000206, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000280)='#', 0x1}], 0x1) (async) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2, 0x810, r1, 0x0) (async) r3 = open(&(0x7f0000000040)='./file0\x00', 0x10101, 0x48) writev(r3, &(0x7f0000001580)=[{&(0x7f00000000c0)='\x00', 0xfffffeb0}], 0x1) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (async) socket(0x1, 0x2, 0x0) (async) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r4, 0x0, 0x200000000000c, &(0x7f0000000080)="eaef125c00000000", 0x8) setsockopt$inet_opts(r4, 0x0, 0x200000000000c, &(0x7f0000000240)="ea00000100000000", 0xc) (async) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x0, 0x3, 0x0, 0x4}, {0x7, 0x0, 0x40, 0x20000}, {0x103, 0x0, 0x0, 0x10001}]}) (async) sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0x37) (async) execve(0x0, &(0x7f00000002c0)=[&(0x7f0000000100)='tap'], 0x0) (async) socket(0x18, 0x3, 0x0) 1.146150107s ago: executing program 7 (id=1188): mkdir(&(0x7f0000000040)='./file2\x00', 0xc1) mkdir(&(0x7f0000000300)='./file2/file0\x00', 0xc2) (async) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x20, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x3, 0x7, 0xfd, 0x6}, {0x0, 0x10, 0x5, 0x1}, {0x9e, 0x19, 0x0, 0x1}]}) (async) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) (async) sysctl$hw(0x0, 0x0, &(0x7f0000000200)="b2352f2bbb09e10f7d387d2cf75b88a6b50414377c4e4bd70000000000000000af0f62596e6850d18556ecbca4934e2d6ffdc9596a5f7ea865f827d14235e94f8d9135d4a2cf3f8f", &(0x7f0000000000)=0x48, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x80, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) (async) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3, 0x25, 0xfd, 0xf}, {0x9e, 0x18, 0x0, 0x40003}]}) sysctl$hw(0x0, 0x0, &(0x7f0000000180)="00041b000f3e8095043fa8985d012c000001003d0817c53fcb7c7d40b5bf66108039750000007ab791f608f7b2e1e356", &(0x7f0000000000)=0x30, 0x0, 0x0) (async) syz_emit_ethernet(0x1000e, &(0x7f0000000240)=ANY=[]) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) ioctl$BIOCSETWF(r2, 0x80104277, &(0x7f0000000040)={0x0, 0x0}) write(r2, &(0x7f0000000600)="d81ad30100000000000100000000", 0xe) (async) syz_emit_ethernet(0x1000e, &(0x7f0000000080)=ANY=[]) (async) r3 = open$dir(&(0x7f00000000c0)='./file2/file0\x00', 0x1, 0x0) mknodat(r3, &(0x7f0000000100)='./file2\x00', 0xc000, 0x98) rename(&(0x7f0000000000)='./file2\x00', &(0x7f0000000080)='./file2/file0/file0\x00') (async) ioctl$FIONREAD(0xffffffffffffff9c, 0x4004667f, &(0x7f00000001c0)) 1.140345211s ago: executing program 4 (id=1189): sysctl$net_inet_tcp(&(0x7f00000000c0), 0x4, &(0x7f0000000140)="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", &(0x7f0000000100)=0x1c1, &(0x7f0000000340)="41dd326d2e3f681702579683959726f7e3bd21dbe0772b9354dff849610d856befa9139ec6858fafe435481440f5786b70a36c80c8b9d401ed0b4d209f5cbedc21b8da84e58694d085147cba2dbcd46413776273d8c46cf688ce0e8b998c763dd42722f8ad69b743418e1e07c34b98a62f62b316f21ba06efff8fb3d3e8089b6721208ae4b5ca3cdffaa484371da6954c316866de98abc95bb264c5d0fce112bc19fd4410107ccbc183d0e031c52f94c3e476e6a75c8fd329999", 0xba) 1.139842492s ago: executing program 6 (id=1190): mknod(&(0x7f00000000c0)='./file0\x00', 0x2000, 0x40000802) (async) mknod(&(0x7f00000000c0)='./file0\x00', 0x2000, 0x40000802) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x1) (async) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x1) ioctl$FIONBIO(r0, 0x8004667e, &(0x7f0000000240)=0x7) (async) ioctl$FIONBIO(r0, 0x8004667e, &(0x7f0000000240)=0x7) r1 = syz_open_pts() mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0x881) r2 = open(&(0x7f0000000040)='./bus\x00', 0x200, 0x3a) ioctl$TIOCEXCL(r2, 0x2000740d) open(&(0x7f0000000040)='./bus\x00', 0x200, 0x3a) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000000)=@file={0xd1653077bafa0114, './file0\x00'}, 0xa) ioctl$TIOCSETD(r1, 0x8004741b, &(0x7f00000006c0)=0x9) ioctl$TIOCSETD(r0, 0x8004741b, &(0x7f0000000080)=0x9) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x205b9a) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) (async) r4 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$BIOCSRTIMEOUT(r4, 0x42087007, &(0x7f0000000080)={0x1, 0xd8}) close(r1) (async) close(r1) r5 = socket(0x11, 0x3, 0x0) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r6 = open(&(0x7f0000000080)='./file0\x00', 0x8000, 0x4) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x17, 0x2000007, 0xfe, 0x80000000, 0x7, 0x5, 0x10, [{0xd, 0x7, 0x4, 0x71000}, {0x7, 0x88, 0x8, 0x7}, {0x8, 0x6, 0x200000, 0x9}, {0x5e9, 0x900, 0xe}, {0x401, 0x20032e, 0x2800, 0x3}, {0x2, 0x27f3, 0x2003, 0x99}, {0xfffffffd, 0x80000004, 0x4f8, 0xdaf}, {0x6, 0x801, 0x81, 0x207}, {0x2, 0x82, 0x5, 0x9}, {0x7, 0x100, 0xd1b, 0xffffdddf}, {0x1e7, 0x8010001, 0x8, 0x6}, {0x803, 0x9, 0x4, 0x9}, {0xb91, 0x4, 0x8, 0x2}, {0x29a7171a, 0x0, 0x1, 0x4}, {0xc, 0x7, 0x1001, 0xfffffffe}, {0x0, 0x1, 0x9, 0x30004}]}) (async) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x17, 0x2000007, 0xfe, 0x80000000, 0x7, 0x5, 0x10, [{0xd, 0x7, 0x4, 0x71000}, {0x7, 0x88, 0x8, 0x7}, {0x8, 0x6, 0x200000, 0x9}, {0x5e9, 0x900, 0xe}, {0x401, 0x20032e, 0x2800, 0x3}, {0x2, 0x27f3, 0x2003, 0x99}, {0xfffffffd, 0x80000004, 0x4f8, 0xdaf}, {0x6, 0x801, 0x81, 0x207}, {0x2, 0x82, 0x5, 0x9}, {0x7, 0x100, 0xd1b, 0xffffdddf}, {0x1e7, 0x8010001, 0x8, 0x6}, {0x803, 0x9, 0x4, 0x9}, {0xb91, 0x4, 0x8, 0x2}, {0x29a7171a, 0x0, 0x1, 0x4}, {0xc, 0x7, 0x1001, 0xfffffffe}, {0x0, 0x1, 0x9, 0x30004}]}) socket$inet6(0x18, 0x3, 0x0) (async) r7 = socket$inet6(0x18, 0x3, 0x0) setsockopt$inet6_MRT6_ADD_MIF(r7, 0x3a, 0x12, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$VNDIOCSET(r6, 0x80184404, &(0x7f00000001c0)={0x0, 0x7ebd, 0x0}) (async) ioctl$VNDIOCSET(r6, 0x80184404, &(0x7f00000001c0)={0x0, 0x7ebd, 0x0}) ioctl$VNDIOCSET(r6, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, r5, 0x0) sendto$unix(r5, &(0x7f0000000000)="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", 0xb1, 0x2, 0x0, 0xffffffffffffff3a) (async) sendto$unix(r5, &(0x7f0000000000)="b10005166000009f050000002010000000000000cea10500fef96ee6d1efd3357ae302b37b67ca1f2d61db7f4de57804be38164991f7c8cf5f882b297be1aa5b23edeb51e2f0ac3ebbc257699a1f139b672f4d335d223e7db3008b95665bc6e3210200040000000000fbb770c1f5a872c881ea772ec5890405b3b9c2668396f4cd125707000000002002fbfc0c2300008abfba0900000008e37f71a3f8345012051eeab71d89e000040381ecb664000000fdf7b6ecd27afd2e081f60cb197fc02927507b1273a34896d0a6309a7330a06525ced5eb8c7bfcb8e3fa67bea17921c1a929cfdb2dbd1c14df461bf9276e2007653619335918c11821feae", 0xb1, 0x2, 0x0, 0xffffffffffffff3a) ioctl$TIOCNOTTY(r0, 0x20007471) (async) ioctl$TIOCNOTTY(r0, 0x20007471) sysctl$vm_swapencrypt(&(0x7f0000000000)={0x6, 0xb, 0x3}, 0x3, 0x0, 0x0, 0x0, 0x0) 1.139163085s ago: executing program 4 (id=1191): sysctl$kern(0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)="bdb58f9cac29311fc91fd55ab3179ff8868f05f47a5191ebec8e67bfc82c11ad6d6a36a3aa54af", 0x27) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) openat$pf(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x0, [{}, {0x1}, {0x0, 0x1}, {0x1, 0x3}, {0x0, 0x4}, {0x2}, {0x3}, {0x0, 0x20000000}, {0x1, 0xffffffff}, {}, {}, {0x0, 0xa325}, {0x1}, {0x0, 0xef27}, {0x3, 0x400001}, {}, {0x2, 0x9}, {0x3077d7844143423c, 0x800}, {0x0, 0x2}, {0x0, 0x7ff}, {0x5}, {}, {0x3, 0xfffffffe}, {0x0, 0x5}, {}, {0x2}, {0x3, 0xfffffffd}, {}, {0x2}, {}, {0x1, 0xa}, {0x1}]}) ioctl$TIOCSETA(0xffffffffffffffff, 0xcd50441a, &(0x7f0000000040)={0x6, 0x2, 0x8, 0xd5, "00000000000200000000001500", 0x3, 0xff}) r0 = openat$vmm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8, 0x0) ioctl$VMM_IOC_INTR(r0, 0xca605601, &(0x7f0000000040)={0xb, 0x0, 0x200d}) r1 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r1, 0xc0106924, &(0x7f0000000000)) r2 = socket(0x18, 0x3, 0x0) ioctl$FIONREAD(r2, 0x8080691a, &(0x7f0000000100)) 1.138825034s ago: executing program 7 (id=1192): sysctl$vm(&(0x7f0000002f40)={0x2, 0xa}, 0x2, &(0x7f0000002f80), 0x0, 0x0, 0x0) sysctl$hw(&(0x7f00000000c0)={0x6, 0x18}, 0x2, 0x0, &(0x7f0000000080), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) sysctl$hw(&(0x7f00000000c0), 0x2, &(0x7f00000001c0), &(0x7f0000000080), 0x0, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x10000, 0x20) r1 = openat$pci(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PCIOCWRITE(r1, 0xc00c7007, &(0x7f00000005c0)={{0x0, 0x23}, 0x7ff, 0x8003, 0x2}) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r2, 0x0, 0x16, &(0x7f00000003c0), 0x0) sysctl$net_inet_etherip(&(0x7f0000000040)={0x4, 0x2, 0x61, 0x2}, 0x4, &(0x7f0000000100)="d8ba905337cc84cb5fc1dafa25767994a390ff13b622b30856f43971c5573a0e12583620e9dc017151f8d10471bab10828fb91c944a6046c451c866cbced1037dacffd58b914eaac058de02bafbdc16f8774b169b691777884878b399f6d42facc24022017590c364733265df90e2775548b4389dfbf932d9ad7b6ca2e755d06e595c1d733b5f4c174df9df5d2360a278f08360cd48773fb7f47", &(0x7f00000001c0)=0x9a, &(0x7f0000000200)="9215776ba1f8d570afb5613e6b08af3eca2826c31a4adab31d01978afa4d343ebdd5a7b3be0994d580466bcb0788e4be5e7fa14391849a30601f000565620ec7a53efe97ae6ff8382676cfb5b9a83adad2295bfc2af9e9e102", 0x59) munmap(&(0x7f0000001000/0x400000)=nil, 0x400000) recvfrom$inet(r0, &(0x7f0000001100)=""/4096, 0x1000, 0x802, &(0x7f0000000280)={0x2, 0x0}, 0xc) sysctl$net_inet_tcp(&(0x7f0000000000)={0x4, 0x2, 0x6, 0x17}, 0x4, 0x0, 0x0, 0x0, 0x0) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x20, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x3, 0x7, 0xfd, 0x6}, {0x0, 0x10, 0x5, 0x1}, {0x9e, 0x19, 0x0, 0x1}]}) ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x6c, 0x1, 0x8, 0xa}, {0x61, 0x1, 0x1, 0x1}, {0x400e, 0x24, 0x8, 0x1}]}) sysctl$hw(0x0, 0x0, &(0x7f0000000200)="b2352f2bbb09e10f7d387d2cf75b88a6b50414377c4e4bd70000000000000000af0f62596e6850d18556ecbca4934e2d6ffdc9596a5f7ea865f827d14235e94f8d9135d4a2cf3f8f3ffce60f6ae45bc248a6d3082f4d42d5d5d978f785cb173e55e9341fcc0f02df5b01e7a3640db995b87a8beb54b138c87b94772f980e9b1d", &(0x7f0000000000)=0x80, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$WSDISPLAYIO_GETSCREENTYPE(r0, 0xc028575d, &(0x7f00000002c0)={0x0, 0x0, './file0\x00', 0x5, 0x7fffffff, 0x6}) ioctl$BIOCSETF(r3, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x1000e, &(0x7f0000000080)=ANY=[]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$net_inet_carp(&(0x7f0000000000)={0x4, 0x2, 0x6, 0x3}, 0x4, 0x0, 0x0, &(0x7f00000010c0)="e17fffff", 0x4) r4 = socket$inet(0x2, 0x3, 0x3) fcntl$dupfd(r3, 0x0, r2) ioctl$FIONREAD(r4, 0x80206979, &(0x7f0000000000)) r5 = socket(0x2, 0x1, 0x0) setsockopt$sock_int(r5, 0xffff, 0x1, 0x0, 0xfeb5) 1.138632562s ago: executing program 4 (id=1193): r0 = socket(0x18, 0x1, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x57, 0x0, 0x0, 0x0, 0x0, 0x33, 0xa2f}, 0x80000002000007, 0x2, 0xffffffffffffffff, 0x0, 0x5, 0x400000000009, 0x5, 0x8000000000000001}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0x37) setsockopt(r0, 0x1000000000029, 0x9, &(0x7f0000000040)="03000000", 0x4) r1 = socket(0x18, 0x1, 0x0) r2 = socket(0x18, 0x1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r3 = dup2(r2, r1) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r4, 0x0, 0x200000000000c, &(0x7f0000000240)="ea00000300000000", 0x8) setsockopt$inet_opts(r4, 0x0, 0x200000000000b, 0x0, 0x0) recvmmsg(r4, &(0x7f0000000600)={&(0x7f00000005c0)={&(0x7f0000000000)=@un=@abs, 0x8, &(0x7f0000000480)=[{&(0x7f0000000080)=""/60, 0x3c}, {&(0x7f00000000c0)=""/111, 0x6f}, {&(0x7f0000000140)=""/215, 0xd7}, {&(0x7f0000000240)=""/155, 0x9b}, {&(0x7f0000000300)=""/37, 0x25}, {&(0x7f0000000340)=""/34, 0x22}, {&(0x7f0000000380)=""/197, 0xc5}], 0x7, &(0x7f0000000500)=""/161, 0xa1}, 0x1}, 0x10, 0x1, &(0x7f0000000640)={0x8, 0x6}) setsockopt(r3, 0x1000000029, 0x23, 0x0, 0x0) getsockopt(r1, 0x29, 0x23, 0x0, 0x0) setsockopt(r0, 0x1000000029, 0xd, &(0x7f0000000080), 0x0) 1.110564889s ago: executing program 4 (id=1194): openat$vnd(0xffffffffffffff9c, &(0x7f0000000380), 0x80, 0x0) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x8, 0xffffffffffffffff, 0xfffffffffffffffd, 0x800, 0x181c, 0xa, 0x2}, 0x0, 0x0, 0x0) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x3, {0x7fffffffffffffff, 0x10000000000001}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x18, 0x1, 0x0) setsockopt(r0, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) 1.110140866s ago: executing program 7 (id=1195): r0 = accept$inet(0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)=0xc) setsockopt$inet_opts(r0, 0x0, 0x1, &(0x7f0000000100)="09ea0fff3461dde6bfe699f1fdf1af891ec7ba5966495cd152e468207d8de98248b63b3a0efcaa1b144c6f37af8e23f2c47ae5ca5f3cfc526e2eb3c35ee334b2cb9d23b59b17a7103fb7a784e20db59136f57bc7637c5fdb68b507a45380aa09ed905dc2fa462f57e3a6296e68245c76258f4a3720bb49ca681a14a345ae7c4bd5b678518b24211f80d4c95d05d17e4d416347d13bf3628463ddb827b7fe9534861674063509d8", 0xa7) setrlimit(0x8, &(0x7f00000008c0)={0x42, 0x61}) r1 = syz_open_pts() close(r1) syz_open_pts() ioctl$TIOCMBIC(r1, 0x8004746b, &(0x7f0000000000)=0xfffff50d) ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000040)={0x27ffb, 0x9c, 0x405, 0xfffffffb, "102e2618007bf533e22044df111ff7134d00", 0x1, 0x43d1}) r2 = openat$wskbd(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) pread(r2, &(0x7f0000000280)="7d8da5109f597c1b135c8f14e17a193fcee1e04375a0ca875f0e4e07f758757c0bfecc686b344d553f24a94150eaccccfef7996175bd9bf5c7bfd1e230b9d506669b1ecacad5d3c3a2300a917608b84d7d97dca9c1a3a28df2773d83d504dad2c9a35baf99365f", 0x67, 0x9) writev(r1, &(0x7f0000000240)=[{&(0x7f0000000900)="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", 0x54e}], 0x1) 1.10964468s ago: executing program 6 (id=1196): sysctl$vm(&(0x7f0000000000)={0x2, 0x9}, 0x2, 0x0, 0x0, &(0x7f00000001c0)="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", 0x117) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) mmap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x1011, 0xffffffffffffffff, 0x0) (async, rerun: 32) r1 = open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) (rerun: 32) mmap(&(0x7f0000510000/0x4000)=nil, 0x4000, 0x1, 0x12, r1, 0x8000000000000000) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) setgroups(0x1, &(0x7f0000001380)=[0x0]) bind(r0, &(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x1}, 0x8) (async) r2 = socket(0x0, 0x8000, 0xcb) getsockopt(r2, 0x1ff, 0xd, &(0x7f00000000c0)=""/101, &(0x7f0000000140)=0x65) (async) setsockopt$sock_timeval(r2, 0xffff, 0x1006, &(0x7f0000000180)={0xfffffffffffffff9, 0x2}, 0x10) 47.438551ms ago: executing program 0 (id=1197): r0 = msgget$private(0x0, 0x704) msgctl$IPC_STAT(r0, 0x2, &(0x7f0000000040)=""/245) open(&(0x7f0000000140)='./file0\x00', 0x78e, 0x81) r1 = getpid() setgroups(0x0, 0x0) ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x510, r1) setreuid(0xee00, 0x0) openat$speaker(0xffffffffffffff9c, 0x0, 0x1, 0x0) socket(0x6, 0x2, 0x0) r2 = getpid() mkdir(&(0x7f0000000180)='./file0\x00', 0x141) ktrace(&(0x7f0000000000)='./file2\x00', 0x0, 0x438, r2) msgrcv(r0, &(0x7f00000001c0)={0x0, ""/87}, 0x5f, 0x0, 0x800) setrlimit(0x1, 0x0) 46.384676ms ago: executing program 4 (id=1198): mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r0 = open(&(0x7f0000000080)='./file0\x00', 0x8000, 0xa) sysctl$kern(&(0x7f0000000040)={0x1, 0x54}, 0x3, &(0x7f00000000c0)="3bf2ee74e747c82dad6eb2a36fa755e1a3925fe49afca7e63b52fa65ccaa74d6e6b85b6cdced70357ef201f97842b1068dca31553fa2d7031f38c03e56ad0e24dfc4f97b8b7f81499647e6e7725765d61436c85e43c15d12a78cb8c57ddde87021d7b685507fd3e0652f35e45bdaa3afd86c4fe557433e4c2b632de71c951516adff26aa2e48b45f8ce92bcefd3eceefabee7e3ebe806fdb4f6af569ae94b5d127", &(0x7f0000000080)=0x1e, &(0x7f0000000340)="5a67923ef0cb189971421989ebcff78831a7581e2f27caa362f1363042efb27688b2c899220fb2fe37e467d974592496856ca7b78060998608c2f952e43bc0bf11555cc5cb0fe17b2ec1be389871829bfe10dd4c4d2c8f9da2bd2868fd86791dc09dc4fa89a217458bdaed31003fdc3a7323189ba3ccbad6c8af17516e4557f61ad20180000000000000125f568ca7d3396b9057255f381855110eb3a673713716cdf010ddfa7977f92cf061ad125ca670353b45d53aae196b00271f9d3452b523b3dea22d6027625614312183724b71c7eb02083a410c1c99fa455013521f98686e472b70b560f7021f567adf4d", 0x4) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x17, 0x2000007, 0x101, 0x80000001, 0x80000081, 0x5, 0x10, [{0x0, 0x7, 0x4, 0x71000}, {0x7, 0x88, 0x8, 0x7}, {0x8, 0x6, 0x0, 0x9}, {0x3, 0x900, 0xe}, {0x401, 0x200326, 0x2800, 0x7}, {0x82, 0x27f3, 0x3, 0x99}, {0xce1, 0x4, 0x4f8, 0x6d}, {0x6, 0x801, 0x8, 0x4}, {0x2, 0x82, 0x9, 0x9}, {0x7, 0x100, 0xd1b, 0x1088}, {0x1e6, 0x10001, 0xc, 0x6}, {0x800, 0x9, 0x8, 0x9}, {0xb8e, 0x4, 0x8, 0x4}, {0x29a7171a, 0x8, 0x1, 0x4}, {0xc, 0x7, 0x1, 0xfffffffe}, {0x0, 0x1, 0x1002, 0x30004}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/173, 0xad}], 0x1, 0x0}, 0xffffffff}, 0x10, 0xc2, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000001c0)={@broadcast, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, '`\"`', 0x18, 0x0, 0x1, @empty, @local={0xfe, 0x80, '\x00', 0x0}, {[@dstopts={0x3c, 0x1, '\x00', [@enc_lim={0x4, 0x1, 0x9}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}]}]}}}}}) mkdir(&(0x7f0000000000)='./file0\x00', 0x21) writev(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x1e, 0x3, 0x2) sendmsg$unix(r1, &(0x7f0000001f80)={0x0, 0x0, 0x0}, 0xc) 2.069285ms ago: executing program 3 (id=1199): open(&(0x7f0000000140)='./file0\x00', 0x80, 0x0) setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) r0 = socket(0x18, 0x1, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x80000000000206, 0x160) (async) r1 = getpid() ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x40000530, r1) (async, rerun: 64) r2 = open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x8e) (rerun: 64) mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x1, 0x10, r2, 0x0) (async) ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x0, [{0x3, 0x800}, {0x2}, {0x0, 0x7fff}, {0x3}, {0x0, 0x800}, {0x1, 0x8}, {0x1}, {0x0, 0x80000000}, {0x0, 0x1}, {0x2, 0x1}, {0x1}, {0x3, 0x6}, {0x3, 0x1}, {}, {0x2}, {0x0, 0xa77c}, {0x0, 0x1}, {0x2}, {0x3, 0x1}, {}, {}, {}, {0x0, 0x8}, {0x3, 0x9}, {}, {0x3, 0x200}, {0x1}, {0x3, 0x8}, {0x3}, {0x3}, {0x2, 0x8001}, {0x0, 0x7}]}) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x1000, &(0x7f0000003f00)={0x0, 0xfdc7}) setsockopt$sock_int(r0, 0xffff, 0x1, &(0x7f0000000040)=0x2f, 0x4) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x7}) (async) r3 = socket(0x18, 0x3, 0x0) getrlimit(0x1, &(0x7f00000001c0)) (async, rerun: 64) connect$unix(r3, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) (async, rerun: 64) getsockname$inet(r3, &(0x7f00000000c0), &(0x7f0000000000)=0xffffffffffffff35) (async) connect$unix(r0, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) (async) truncate(&(0x7f00000000c0)='./file0\x00', 0x6001000004) truncate(&(0x7f0000000080)='./file0\x00', 0x40002ffff) socket$inet(0x2, 0x4, 0x6) (async) ktrace(&(0x7f0000000000)='./file0\x00', 0x4, 0x510, 0x0) (async) open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) 1.030657ms ago: executing program 2 (id=1200): ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000040)={0x2, &(0x7f00000000c0)=[{0x0, 0x20}, {0x3, 0x0, 0x0, 0x49}]}) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0e99db6de761f86, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x2, 0x0) openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x20, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$TIOCFLUSH(r0, 0x80047476, &(0x7f0000000000)=0xfffffffe) sysctl$kern(&(0x7f00000000c0)={0x1, 0x4f}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000000)=0x4, 0x0, 0x37) (async) sysctl$kern(&(0x7f00000000c0)={0x1, 0x4f}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000000)=0x4, 0x0, 0x37) 515.227µs ago: executing program 1 (id=1201): setrlimit(0x5, &(0x7f0000000980)={0xb, 0x54}) r0 = syz_open_pts() close(r0) syz_open_pts() sysctl$vfs_nfs(&(0x7f0000000000)={0xa, 0xe}, 0x3, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f00000000c0)={0x401, 0x9, 0xfffdff80, 0x160350d, "04f0ee091a00041300000fe0ff2285080800", 0x1000004, 0x2}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0xe8, 0x0) ioctl$FIONREAD(0xffffffffffffffff, 0x800474c4, 0x0) syz_emit_ethernet(0xaa, &(0x7f0000000000)=ANY=[@ANYRES8, @ANYRES8=r1]) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) 0s ago: executing program 3 (id=1202): r0 = socket(0x11, 0x3, 0x0) sendto$unix(r0, &(0x7f00000000c0)="5ebefeef7041056e8651a8bfbfa01598cdf2e87588ac3aa9c6fef670a39afb7d210866422a9c673d52ed16006d", 0x2d, 0x400, &(0x7f0000000100)=@abs={0x0, 0x0, 0x1}, 0x8) sendto$unix(r0, &(0x7f0000000000)="b1000501600000041600000007000000087c156610c18125d7f96ecfc73fd3d89815a9c61d3952ddb06b36ac970bff03000000000000000000000000ebe1aa5323edeb51e2f0ca3ebbc2c4699a09000000acb5b302000d7d010000000100000021020000742fe2458bfbb770c1f5a8aec872ea772ec58904000000008d9810361b1257aba8c500002012010000de5000000000000000000000000000000000000000000000000000001f00000000000000", 0xb1, 0x808, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.7' (ED25519) to the list of known hosts. pckbd_enable: command error pckbd_enable: command error pppx: unable to set addresses for pppx1, error=17 pppx: unable to set addresses for pppx2, error=17 pckbd_enable: command error pckbd_enable: command error pppx: unable to set addresses for pppx1, error=17 denied attempt to set clock forward to 34359738374 pckbd_enable: command error pckbd_enable: command error load: 2.59 cmd: getty 63016 [ttyin] 0.00u 0.00s 0% 328k pckbd_enable: command error ./file0./file0 êÏpckbd_enable: command error pckbd_enable: command error OpenBSD/amd64 (ci-openbsd-main-8.us-central1-b.c.syzkaller.internal) (tty00) login: sd0(vioscsi0:1:0): Check Condition (error 0x70) on opcode 0x1e SENSE KEY: Illegal Request ASC/ASCQ: Invalid Command Operation Code WARNING: thread `nfsio' (356227) exits with status -1 WARNING: thread `nfsio' (209095) exits with status -1 WARNING: thread `nfsio' (147736) exits with status -1 WARNING: thread `nfsio' (240839) exits with status -1 WARNING: thread `nfsio' (82403) exits with status -1 WARNING: thread `nfsio' (305356) exits with status -1 WARNING: thread `nfsio' (107446) exits with status -1 WARNING: thread `nfsio' (366649) exits with status -1 WARNING: thread `nfsio' (465154) exits with status -1 WARNING: thread `nfsio' (180591) exits with status -1 WARNING: thread `nfsio' (327585) exits with status -1 WARNING: thread `nfsio' (342309) exits with status -1 WARNING: thread `nfsio' (334465) exits with status -1 WARNING: thread `nfsio' (288109) exits with status -1 WARNING: thread `nfsio' (492128) exits with status -1 WARNING: thread `nfsio' (297101) exits with status -1 WARNING: thread `nfsio' (475413) exits with status -1 WARNING: thread `nfsio' (236414) exits with status -1 WARNING: thread `nfsio' (196056) exits with status -1 WARNING: thread `nfsio' (66) exits with status -1 malloc(): allocation too large, type = 29, size = 16796513700 pckbd_enable: command error malloc(): allocation too large, type = 29, size = 16796513700 pckbd_enable: command error malloc(): allocation too large, type = 29, size = 16796513700 pckbd_enable: command error uvm_fault(0xffffffff838b9458, 0xffff8000016ba08a, 0, 1) -> e kernel: page fault trap, code=0 Stopped at arp_rtrequest+0x6a4: movzwl 0xc(%rcx,%rbx,1),%ecx TID PID UID PRFLAGS PFLAGS CPU COMMAND *117422 90566 0 0 0x4000000 0 syz-executor arp_rtrequest(ffff800000039058,1,fffffd806cdbd1b0) at arp_rtrequest+0x6a4 rtrequest(1,ffff80002ccff440,0,ffff80002ccff3b0,16) at rtrequest+0xf08 rtm_output(ffff800001484a00,ffff80002ccff4e8,ffff80002ccff440,0,16) at rtm_output+0x91a route_output(fffffd8069e31f00,ffff8000014cb160) at route_output+0xa2b route_send(ffff8000014cb160,fffffd8069e31f00,0,0) at route_send+0xd7 sosend(ffff8000014cb160,0,ffff80002ccff698,0,0,808) at sosend+0x804 sendit(ffff80003c956028,3,ffff80002ccff790,808,ffff80002ccff830) at sendit+0x5a5 sys_sendto(ffff80003c956028,ffff80002ccff8e0,ffff80002ccff830) at sys_sendto+0x8d syscall(ffff80002ccff8e0) at syscall+0x962 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x57009c907b0, count: 5 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb> ddb> set $lines = 0 ddb> set $maxwidth = 0 ddb> show panic *cpu0: uvm_fault(0xffffffff838b9458, 0xffff8000016ba08a, 0, 1) -> e ddb> trace arp_rtrequest(ffff800000039058,1,fffffd806cdbd1b0) at arp_rtrequest+0x6a4 rtrequest(1,ffff80002ccff440,0,ffff80002ccff3b0,16) at rtrequest+0xf08 rtm_output(ffff800001484a00,ffff80002ccff4e8,ffff80002ccff440,0,16) at rtm_output+0x91a route_output(fffffd8069e31f00,ffff8000014cb160) at route_output+0xa2b route_send(ffff8000014cb160,fffffd8069e31f00,0,0) at route_send+0xd7 sosend(ffff8000014cb160,0,ffff80002ccff698,0,0,808) at sosend+0x804 sendit(ffff80003c956028,3,ffff80002ccff790,808,ffff80002ccff830) at sendit+0x5a5 sys_sendto(ffff80003c956028,ffff80002ccff8e0,ffff80002ccff830) at sys_sendto+0x8d syscall(ffff80002ccff8e0) at syscall+0x962 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x57009c907b0, count: -10 ddb> show registers rdi 0xffff80002d502000 rsi 0x341 rbp 0xffff80002ccff290 rbx 0xde rdx 0xffff80002d502000 rcx 0xffff8000016b9fa0 rax 0xfffffd806ce492e0 r8 0x20 r9 0xfffffd806cdbd1b0 r10 0x23c382461797fa2f r11 0x11a9b1b6cb9831b9 r12 0x49 r13 0xfffffd806ce49200 r14 0xfffffd806cdbd1b0 r15 0xffff800000039058 rip 0xffffffff814dd214 arp_rtrequest+0x6a4 cs 0x8 rflags 0x10246 __ALIGN_SIZE+0xf246 rsp 0xffff80002ccff210 ss 0x10 arp_rtrequest+0x6a4: movzwl 0xc(%rcx,%rbx,1),%ecx ddb> show proc PROC (syz-executor) tid=117422 pid=90566 tcnt=2 stat=onproc flags process=0 proc=4000000 runpri=32, usrpri=86, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff80003c957780,0xffffffff8392b520 process=0xffff80002a8d84a0 user=0xffff80002ccfa000, vmspace=0xfffffd8069f8a018 estcpu=36, cpticks=1, pctcpu=0.0, user=0, sys=1, intr=0 ddb> ps PID TID PPID UID S FLAGS WAIT COMMAND 90566 232139 99765 0 2 0 syz-executor *90566 117422 99765 0 7 0x4000000 syz-executor 54257 170552 81572 0 2 0 syz-executor 48353 110121 38486 0 2 0 syz-executor 46788 441019 34189 0 2 0 syz-executor 46788 457756 34189 0 3 0x4000080 fsleep syz-executor 33813 462254 15042 0 2 0 syz-executor 19086 126302 88469 0 2 0 syz-executor 19086 8272 88469 0 2 0x4000000 syz-executor 91859 416636 1 0 3 0x100083 ttyin getty 15042 134018 15138 0 3 0x82 nanoslp syz-executor 88469 443429 15138 0 3 0x82 nanoslp syz-executor 12190 406439 15138 0 2 0x2 syz-executor 38092 238758 15138 0 3 0x82 nanoslp syz-executor 99765 455009 15138 0 3 0x82 nanoslp syz-executor 81572 6740 15138 0 3 0x82 nanoslp syz-executor 38486 415919 15138 0 3 0x82 nanoslp syz-executor 34189 427408 15138 0 3 0x82 nanoslp syz-executor 15138 153583 54613 0 3 0x82 kqread syz-executor 54613 218444 22466 0 3 0x10008a sigsusp ksh 22466 113768 18547 0 3 0x98 kqread sshd-session 18547 180455 82193 0 3 0x92 kqread sshd-session 82193 68016 1 0 3 0x88 kqread sshd 86660 165388 19311 73 3 0x1100090 kqread syslogd 19311 193095 1 0 3 0x100082 sbwait syslogd 6029 471000 1 0 3 0x100080 kqread resolvd 25037 268168 62312 77 3 0x100092 kqread dhcpleased 80592 479956 62312 77 3 0x100092 kqread dhcpleased 62312 224416 1 0 3 0x80 kqread dhcpleased 76359 480566 0 0 3 0x14200 bored smr 2130 386915 0 0 2 0x14200 zerothread 41567 7799 0 0 3 0x14200 aiodoned aiodoned 59265 514965 0 0 3 0x14200 syncer update 2142 287223 0 0 3 0x14200 cleaner cleaner 83410 390480 0 0 3 0x14200 reaper reaper 30707 126323 0 0 3 0x14200 pgdaemon pagedaemon 36969 264267 0 0 3 0x14200 bored viomb 40328 353077 0 0 3 0x40014200 acpi0 acpi0 87730 360150 0 0 3 0x14200 bored softnet0 72875 477001 0 0 2 0x14200 systqmp 39438 118631 0 0 3 0x14200 bored systq 99271 171450 0 0 3 0x40014200 tmoslp softclock 98422 281129 0 0 3 0x40014200 idle0 1 385731 0 0 3 0x82 wait init 0 0 -1 0 3 0x10010200 scheduler swapper ddb> show all locks No such command ddb> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 10213 11122K 12893K 166960K 13806 0 pcb 17 17K 22K 166960K 563 0 rtable 235 11K 11K 166960K 658 0 pf 29 12K 19K 166960K 181 0 ifaddr 37 7K 8K 166960K 123 0 ifgroup 46 2K 2K 166960K 216 0 sysctl 4 1K 9K 166960K 19 0 counters 31 17K 18K 166960K 121 0 ioctlops 0 0K 4K 166960K 415 0 iov 0 0K 24K 166960K 170 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1462 92K 93K 166960K 2658 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 5K 166960K 16 0 VM map 2 1K 1K 166960K 2 0 sem 12 0K 0K 166960K 82 0 dirhash 12 2K 2K 166960K 48 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 17 61K 236K 166960K 1377 0 sigio 0 0K 0K 166960K 16 0 proc 60 59K 91K 166960K 634 0 subproc 72 4K 4K 166960K 90 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 293 0 in_multi 77 5K 7K 166960K 177 0 ether_multi 1 0K 0K 166960K 13 0 mrt 0 0K 0K 166960K 20 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 259 1155K 1155K 166960K 259 0 exec 0 0K 1K 166960K 599 0 fusefs mount 1 32K 32K 166960K 1 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 212 158K 175K 166960K 13844 0 UVM aobj 131 4K 4K 166960K 131 0 pinsyscall 38 76K 88K 166960K 2518 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 1K 166960K 112 0 NDP 10 0K 1K 166960K 85 0 temp 65 8652K 8777K 166960K 51953 0 kqueue 13 20K 32K 166960K 266 0 SYN cache 2 16K 16K 166960K 2 0 ddb> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle rtpcb 120 213 0 209 3 0 3 3 0 8 2 rtentry 136 188 0 99 4 0 4 4 0 8 0 unpcb 144 1222 0 1207 9 5 4 6 0 8 3 syncache 336 8 0 8 2 1 1 1 0 8 1 tcpqe 32 4 0 4 2 1 1 1 0 8 1 tcpcb 736 456 0 449 10 6 4 7 0 8 3 arp 96 26 0 10 1 0 1 1 0 8 0 ipq 40 6 0 0 1 0 1 1 0 8 0 ipqe 40 39 0 33 1 0 1 1 0 8 0 inpcb 328 1553 0 1543 17 7 10 12 0 8 8 ip6q 72 6 0 4 1 0 1 1 0 8 0 ip6af 40 11 0 10 2 1 1 1 0 8 0 nd6 112 38 0 17 1 0 1 1 0 8 0 pkpcb 40 12 0 12 2 1 1 1 0 8 1 kcovpl 48 10 0 2 1 0 1 1 0 8 0 ppxss 1072 67 0 67 2 1 1 1 0 8 1 pppxif 1384 8 0 8 2 1 1 1 0 8 1 pfosfp 40 1 0 0 1 0 1 1 0 8 0 pfosfpen 112 1 0 0 1 0 1 1 0 8 0 pfrktable 1344 1 0 1 1 1 0 1 0 8 0 pfanchor 1288 3 0 0 1 0 1 1 0 8 0 pfrule 1344 2 0 2 1 1 0 1 0 8 0 rttmr 136 6 0 6 2 1 1 1 0 8 1 art_heap8 4096 4 0 1 4 0 4 4 0 8 1 art_heap4 256 787 0 446 31 1 30 30 0 8 3 art_table 40 791 0 447 5 0 5 5 0 8 0 art_node 32 186 0 108 1 0 1 1 0 8 0 sysvmsgpl 40 16 0 11 1 0 1 1 0 8 0 semupl 112 2 0 2 2 1 1 1 0 8 1 semapl 112 73 0 63 1 0 1 1 0 8 0 shmpl 112 128 0 0 4 0 4 4 0 8 0 dirhash 1024 41 0 24 3 0 3 3 0 8 0 dino2pl 256 3978 0 2482 95 0 95 95 0 8 0 ffsino 256 3978 0 2482 95 0 95 95 0 8 0 nchpl 144 5821 0 4129 64 0 64 64 0 8 0 rtmask 32 16 0 16 2 1 1 1 0 8 1 vnodes 216 4812 0 0 268 0 268 268 0 8 0 namei 1024 22176 0 22176 3 2 1 2 0 8 1 kstatmem 264 130 0 110 3 1 2 3 0 8 0 scsiplug 72 3 0 3 1 0 1 1 0 8 1 scxspl 216 19695 0 19695 8 7 1 8 1 8 1 plimitpl 152 543 0 526 1 0 1 1 0 8 0 sigapl 424 1677 0 1635 8 0 8 8 0 8 1 knotepl 120 75902 0 75854 33 22 11 31 0 8 8 kqueuepl 184 428 0 419 3 2 1 3 0 8 0 pipepl 304 303 0 276 5 2 3 5 0 8 0 fdescpl 448 1641 0 1612 4 0 4 4 0 8 0 filepl 120 11705 0 11495 13 2 11 11 0 8 3 lockfpl 104 428 0 426 1 0 1 1 0 8 0 lockfspl 48 200 0 198 1 0 1 1 0 8 0 sessionpl 144 28 0 20 1 0 1 1 0 8 0 pgrppl 48 122 0 106 1 0 1 1 0 8 0 ucredpl 104 1928 0 1917 1 0 1 1 0 8 0 zombiepl 144 1636 0 1635 1 0 1 1 0 8 0 processpl 1152 1677 0 1635 5 0 5 5 0 8 0 procpl 664 3528 0 3483 7 0 7 7 0 8 2 sosppl 176 9 0 9 2 1 1 1 0 8 1 sockpl 552 3091 0 3062 21 10 11 12 0 8 8 mcl64k 65536 186 0 185 2 1 1 1 0 8 0 mcl16k 16384 9 0 9 2 1 1 1 0 8 1 mcl12k 12288 1 0 1 1 0 1 1 0 8 1 mcl9k 9216 1 0 1 1 0 1 1 0 8 1 mcl8k 8192 30 0 30 2 1 1 1 0 8 1 mcl4k 4096 4112 0 4060 16 8 8 15 0 8 0 mcl2k2 2112 3 0 3 2 1 1 1 0 8 1 mcl2k 2048 2023 0 2017 5 3 2 5 0 8 0 mtagpl 96 10 0 10 1 0 1 1 0 8 1 mbufpl 256 20411 0 20266 76 61 15 76 0 8 0 bufpl 280 7951 0 1729 445 0 445 445 0 8 0 anonpl 24 253547 0 250056 69 21 48 48 0 187 18 amapchunkpl 152 53335 0 52908 41 7 34 34 0 158 9 amappl16 200 4297 0 4262 36 25 11 15 0 8 8 amappl15 192 22 0 22 1 1 0 1 0 8 0 amappl14 184 23 0 23 1 1 0 1 0 8 0 amappl13 176 429 0 428 1 0 1 1 0 8 0 amappl12 168 2026 0 1989 2 0 2 2 0 8 0 amappl11 160 5 0 5 1 1 0 1 0 8 0 amappl10 152 70 0 60 1 0 1 1 0 8 0 amappl9 144 283 0 282 1 0 1 1 0 8 0 amappl8 136 23 0 21 1 0 1 1 0 8 0 amappl7 128 110 0 108 1 0 1 1 0 8 0 amappl6 120 304 0 292 1 0 1 1 0 8 0 amappl5 112 73 0 65 1 0 1 1 0 8 0 amappl4 104 492 0 468 1 0 1 1 0 8 0 amappl3 96 8072 0 7996 3 0 3 3 0 8 0 amappl2 88 1786 0 1716 2 0 2 2 0 8 0 amappl1 80 15173 0 14649 15 2 13 13 0 8 1 amappl 88 12877 0 12734 5 0 5 5 0 92 0 uvmvnodes 80 4812 0 0 99 0 99 99 0 8 0 dma16384 16384 3 0 3 1 1 0 1 0 8 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 7 0 7 2 1 1 1 0 8 1 dma128 128 255 0 255 2 1 1 1 0 8 1 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 19 0 18 1 0 1 1 0 8 0 aobjpl 72 130 0 0 3 0 3 3 0 8 0 uaddrrnd 24 1641 0 1612 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 1641 0 1612 1 0 1 1 0 8 0 vmmpekpl 168 13612 0 13572 4 1 3 3 0 8 0 vmmpepl 168 108000 0 106258 97 7 90 91 0 357 6 vmsppl 368 1640 0 1612 4 1 3 4 0 8 0 rwobjpl 40 33597 0 27844 59 0 59 59 0 8 0 pdppl 4096 3288 0 3224 100 34 66 74 0 8 2 pvpl 32 723994 0 715206 152 29 123 123 0 265 31 pmappl 216 1640 0 1612 2 0 2 2 0 8 0 extentpl 40 45 0 27 1 0 1 1 0 8 0 phpool 112 459 0 123 12 0 12 12 0 8 0 ddb> machine ddbcpu 0 No such command ddb> trace arp_rtrequest(ffff800000039058,1,fffffd806cdbd1b0) at arp_rtrequest+0x6a4 rtrequest(1,ffff80002ccff440,0,ffff80002ccff3b0,16) at rtrequest+0xf08 rtm_output(ffff800001484a00,ffff80002ccff4e8,ffff80002ccff440,0,16) at rtm_output+0x91a route_output(fffffd8069e31f00,ffff8000014cb160) at route_output+0xa2b route_send(ffff8000014cb160,fffffd8069e31f00,0,0) at route_send+0xd7 sosend(ffff8000014cb160,0,ffff80002ccff698,0,0,808) at sosend+0x804 sendit(ffff80003c956028,3,ffff80002ccff790,808,ffff80002ccff830) at sendit+0x5a5 sys_sendto(ffff80003c956028,ffff80002ccff8e0,ffff80002ccff830) at sys_sendto+0x8d syscall(ffff80002ccff8e0) at syscall+0x962 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x57009c907b0, count: -10 ddb> machine ddbcpu 1 No such command ddb> trace arp_rtrequest(ffff800000039058,1,fffffd806cdbd1b0) at arp_rtrequest+0x6a4 rtrequest(1,ffff80002ccff440,0,ffff80002ccff3b0,16) at rtrequest+0xf08 rtm_output(ffff800001484a00,ffff80002ccff4e8,ffff80002ccff440,0,16) at rtm_output+0x91a route_output(fffffd8069e31f00,ffff8000014cb160) at route_output+0xa2b route_send(ffff8000014cb160,fffffd8069e31f00,0,0) at route_send+0xd7 sosend(ffff8000014cb160,0,ffff80002ccff698,0,0,808) at sosend+0x804 sendit(ffff80003c956028,3,ffff80002ccff790,808,ffff80002ccff830) at sendit+0x5a5 sys_sendto(ffff80003c956028,ffff80002ccff8e0,ffff80002ccff830) at sys_sendto+0x8d syscall(ffff80002ccff8e0) at syscall+0x962 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x57009c907b0, count: -10