last executing test programs: 8.326975951s ago: executing program 6 (id=1000): syz_open_pts() r0 = open(&(0x7f0000000080)='./file0\x00', 0x200, 0x29) ioctl$WSMOUSEIO_SCALIBCOORDS(r0, 0x81205724, &(0x7f0000000100)={0x7ff, 0xa6, 0x2000003, 0x101, 0x80000001, 0x4, 0x10001, 0x10, [{0x0, 0x2890, 0x5, 0x71002}, {0x6, 0x9, 0x8000, 0x3}, {0x104, 0xf88, 0xfffffffc, 0x9}, {0x4, 0x800, 0x8007, 0x7}, {0x401, 0x3, 0x2800, 0x7}, {0x5, 0x650, 0x3, 0x9b}, {0xce1, 0xffffffff, 0x4f4, 0xfffd}, {0x6, 0x803, 0x8, 0x8}, {0x2, 0x5, 0x5, 0x9}, {0x6a72, 0x8009, 0x1000, 0x4}, {0x7, 0x10001, 0xc, 0x3}, {0x408, 0x5, 0x8, 0x6}, {0x80000000, 0x7, 0x4, 0x1}, {0x29a71717, 0xfffffffd, 0x60, 0x6}, {0x1000c, 0x5, 0x9, 0x4}, {0x0, 0x1, 0xfff, 0x30004}]}) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) poll(&(0x7f00000000c0), 0x0, 0x1) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r1 = open$dir(&(0x7f0000000fc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x8, 0xffffffffffffffff, 0xfffffffffffffffd, 0x800, 0x181c, 0xff, 0x2}, 0x0, 0x0, 0x0) ioctl$TIOCEXCL(r0, 0x2000740d) mkdirat(r1, &(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) syz_open_pts() 8.32111372s ago: executing program 6 (id=1003): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mkdir(&(0x7f0000000180)='./file0\x00', 0x8) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) unveil(&(0x7f0000000240)='./file0/file0/../file0\x00', &(0x7f00000000c0)='x\x00') unveil(&(0x7f0000000080)='.\x00', &(0x7f0000000000)='x\x00') writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)="76e5eac907f9ccf7a251ceddcec7d6aa45cffe2c63a56077123a276d3ba4e9d17eb3eb5db12a3783a8e0620d357de1fe04fa9465b5bd1286e9624dec06a00c222f", 0x41}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) unveil(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000300)='W\x00') sysctl$hw(&(0x7f00000000c0)={0x6, 0x6}, 0x2, &(0x7f0000000000)="071b2de2376e93e9c187206df5b0e4e3f33f0d874b08d9c4a7a126b53e75c7a1ab2e56a5610a588d273544fdd2945d8202b05eb21167ba39908e4eb961b5ed534beb45b2e35bdab53bc4053efeca99fd3f8649662cb6040d94f3003f", 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) 8.19119652s ago: executing program 6 (id=1006): ioctl$WSMUXIO_REMOVE_DEVICE(0xffffffffffffffff, 0x80085762, &(0x7f0000000040)={0x3}) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xa2f}, 0xfffffffffffffffd, 0xfffeffffffbffffb, 0xffffffffffffffff, 0x0, 0x3, 0x400000000005, 0x40000000000005, 0x7}) sysctl$net_inet_ip(&(0x7f00000000c0)={0x4, 0x11, 0x0, 0x18}, 0x4, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xfffffffffffffe3c, 0x0, 0x37) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200}}) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x10000000000001}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x18, 0x1, 0x0) close(r0) r1 = socket(0x18, 0x2, 0x0) setsockopt(r0, 0x1000000000029, 0x3e, &(0x7f0000000040)="00fb534f", 0x4) setsockopt(r1, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) write(r0, 0x0, 0x0) 8.189072377s ago: executing program 7 (id=1008): clock_getres(0x4, &(0x7f0000000000)) syz_emit_ethernet(0x5f, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "99cea6", 0x29, 0x2c, 0x3, @rand_addr="cb697a653e336f0000005000", @mcast2, {[@routing={0x62, 0x0, 0x0, 0x8}], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x1, 0x0, 0x6, 0x1, 0x200, 0x0, 0x6, {[@nop]}}, {"1d46b88be16360b0f8"}}}}}}}) syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[@ANYBLOB="69e1629b6174391e7dd7a2d786dd60b6000000302c03cb697a653e336f000000500000000000ff02000000000000000000000000000102000003"]) 8.088955123s ago: executing program 6 (id=1010): r0 = socket(0x18, 0x3, 0x0) r1 = socket(0x18, 0x2, 0x0) (async) fcntl$lock(0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x3, 0x0, 0x0, 0x100000001}) nanosleep(&(0x7f0000000000)={0x8000000000007ffe, 0x2}, 0x0) (async) sysctl$kern(&(0x7f0000000000)={0x1, 0x42}, 0x6, 0x0, 0x0, 0x0, 0x0) (async) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x22, 0x411}, 0x4, 0x10003, 0x0, 0x0, 0x0, 0x2, 0xa, 0x100000000e63}) (async) r2 = socket(0x18, 0x2, 0x0) setsockopt$sock_int(r2, 0xffff, 0x1000, &(0x7f0000000240)=0x6, 0x4) (async) bind$unix(r2, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) r3 = socket(0x800000018, 0x2, 0x0) r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000001500), 0x100, 0x0) ioctl$BIOCSETIF(r4, 0x8020426c, &(0x7f0000000240)={'tap', 0x0}) ioctl$BIOCSETF(r4, 0x80104267, &(0x7f0000000180)={0x3, &(0x7f0000000000)=[{0x81, 0xd, 0x5, 0x10}, {0x3, 0xa, 0x4}, {0x6, 0x1, 0x4, 0x9}]}) (async) syz_emit_ethernet(0x36, &(0x7f0000000080)=ANY=[]) (async) setsockopt$sock_int(r3, 0xffff, 0x1000, &(0x7f0000000100)=0x7, 0x4) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x8, 0x0, 0x0, 0x0, 0x0, 0x310, 0x4000}, 0x100000000006, 0x861, 0xffffffffffffffff, 0x0, 0x7ffffffffffffe, 0x5, 0xd, 0x7}) (async) bind$unix(r3, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) connect$unix(r1, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) (async) connect$unix(r2, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0xa) (async) r5 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0xbe, 0x0) ioctl$BIOCSETIF(r5, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) (async) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x80, 0xe3, 0x80, 0xffffffff}, {0x4bf, 0x81, 0x0, 0x1}, {0x16, 0x35, 0x0, 0x800ee68}]}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1) sysctl$kern(0x0, 0x0, &(0x7f00000003c0)="c2a6d600000000ecfe746fc6d6f77bf1aeb47b7f66072806580b584a", &(0x7f0000000000)=0x4d, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) ioctl$BIOCSETWF(r5, 0x80104277, &(0x7f0000000040)={0x28, 0x0}) (async) write(r5, &(0x7f00000003c0)="f81ad30100060000000100000000", 0xe) (async) setsockopt(r0, 0x1000000029, 0x25, &(0x7f0000000000)="5ab7776a", 0x4) (async) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@broadcast, @random="09c00cae420f", [], {@ipv6={0x86dd, {0x0, 0x6, "36e282", 0x8, 0x32, 0x0, @rand_addr="040b0200", @remote={0xfe, 0x80, '\x00', 0x0}, {[], @udp={{0x1, 0x0, 0x8}}}}}}}) 7.980068246s ago: executing program 6 (id=1014): select(0x40, &(0x7f0000000180)={0xffffffffdffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x8, 0x2000000000000044}, 0x0, 0x0, 0x0) r0 = kqueue() kevent(r0, &(0x7f0000000040)=[{{r0}, 0xfffffffffffffffa, 0x23, 0x20000008, 0x3c, 0x6}], 0x1, &(0x7f0000000100)=[{{r0}, 0xfffffffffffffff9, 0x1, 0x1, 0x0, 0xad}], 0x5, 0x0) kevent(0xffffffffffffffff, &(0x7f0000000180)=[{{r0}, 0xfffffffffffffffa, 0x96, 0x1, 0x1, 0x3}], 0x7, 0x0, 0x2, 0x0) kevent(r0, &(0x7f0000000000), 0x3ff, 0x0, 0x80007fd, 0x0) (async) setrlimit(0x8, &(0x7f00000008c0)={0x42, 0x61}) (async) r1 = syz_open_pts() close(r1) r2 = syz_open_pts() writev(r1, &(0x7f0000000540)=[{&(0x7f00000003c0)="4b065dee9476aa7c4a0c074406cbc6338de5678b0b5c971e0d", 0x19}], 0x1) (async) readv(r2, &(0x7f0000000780)=[{0x0}, {&(0x7f00000006c0)=""/162, 0xa2}], 0x2) 7.978130868s ago: executing program 7 (id=1016): chmod(&(0x7f0000000040)='.\x00', 0x35e) setuid(0xee01) r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000200)=@file={0xd570d0466b6018f, './file0\x00'}, 0xa) r1 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r1, &(0x7f0000000080)={&(0x7f00000002c0)=@file={0x170, './file0\x00'}, 0xa, 0x0, 0x0, 0x0, 0x0, 0x404}, 0xe) getsockopt$SO_PEERCRED(r1, 0xffff, 0x1022, &(0x7f0000000340)={0x0, 0x0}, 0xc) r3 = getgid() getsockopt$SO_PEERCRED(r1, 0xffff, 0x1022, &(0x7f0000000380)={0x0}, 0xc) getsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, 0x0}, &(0x7f0000000400)=0xc) r6 = semget(0x0, 0x1, 0x281) r7 = getgid() getgroups(0x7, &(0x7f0000000340)=[0x0, 0x0, 0xffffffffffffffff, 0x0, r7, 0xffffffffffffffff, 0xffffffffffffffff]) semctl$IPC_SET(r6, 0x0, 0x1, &(0x7f0000001440)={{0x3, 0x0, r7, 0x0, r8, 0x80, 0xfffd}, 0x23d, 0x6, 0x2}) r9 = getpid() r10 = getppid() setpgid(r9, r10) getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000000440)={0x0, 0x0}, &(0x7f0000000480)=0xc) r12 = semget(0x0, 0x1, 0x281) r13 = getgid() getgroups(0x7, &(0x7f0000000340)=[0x0, 0x0, 0xffffffffffffffff, 0x0, r13, 0xffffffffffffffff, 0xffffffffffffffff]) semctl$IPC_SET(r12, 0x0, 0x1, &(0x7f0000001440)={{0x3, 0x0, r13, 0x0, r14, 0x80, 0xfffd}, 0x23d, 0x6, 0x2}) r15 = getpid() r16 = geteuid() getsockopt$SO_PEERCRED(r1, 0xffff, 0x1022, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0xc) getsockopt$SO_PEERCRED(r0, 0xffff, 0x1022, &(0x7f0000000500)={0x0, 0x0}, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r19, 0xffff, 0x1022, &(0x7f00000001c0)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0xc) setgroups(0x1, &(0x7f0000000000)=[r20]) sendmsg$unix(r0, &(0x7f0000000680)={&(0x7f0000000000)=@abs={0x1, 0x0, 0x0}, 0x8, &(0x7f00000001c0)=[{&(0x7f00000000c0)="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", 0xfb}, {&(0x7f0000000240)="530b6880050e0efc9caee96ff31638b46542accaf2e9a35e0ceca26d4ad2cdf4cbe79c5a958ddf85f5d8d6581fd24344eaf9c7237928cfc8b8bc0db3f94e9310d4df9ff09c59de9097091c46d2dbdc9545bc39af0890054c5e3e817c69cdfd7569b1896008", 0x65}], 0x2, &(0x7f0000000540)=[@rights={0x28, 0xffff, 0x1, [r1, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, r0]}, @cred={0x20, 0xffff, 0x0, 0x0, r2, r3}, @rights={0x28, 0xffff, 0x1, [r1, r1, r1, r0, r1, r1]}, @cred={0x20, 0xffff, 0x0, r4, r5, r7}, @rights={0x28, 0xffff, 0x1, [r0, r1, r0, r1, r0]}, @cred={0x20, 0xffff, 0x0, r9, r11, r13}, @cred={0x20, 0xffff, 0x0, r15, r16, r17}, @cred={0x20, 0xffff, 0x0, 0x0, r18, r20}, @rights={0x18, 0xffff, 0x1, [r0]}], 0x130, 0x402}, 0x401) 7.847398564s ago: executing program 7 (id=1021): ioctl$TIOCCLRVERAUTH(0xffffffffffffff9c, 0x2000741d) (async) ioctl$TIOCCLRVERAUTH(0xffffffffffffff9c, 0x2000741d) r0 = syz_open_pts() ioctl$TIOCSETD(r0, 0x8004741b, &(0x7f0000000000)=0x1ff) ioctl$TIOCDRAIN(r0, 0x2000745e) (async) ioctl$TIOCDRAIN(r0, 0x2000745e) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffff9c, 0xc05064a7, &(0x7f00000002c0)={&(0x7f0000000180)=[0x0, 0x0, 0x0], &(0x7f00000001c0)=[{}], &(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0], 0x1, 0x2, 0x3, 0x0, 0x0, 0xc, 0x9298, 0xfffffffb, 0x55, 0xffffa1ee, 0x200}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffff9c, 0xc05064a7, &(0x7f0000000340)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[{}], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0], 0x1, 0x4, 0x5, r1, 0x0, 0x6, 0x9, 0x9, 0x7, 0x100, 0xc}) ioctl$TIOCMSET(r0, 0x8004746d, &(0x7f00000003c0)=0x8) (async) ioctl$TIOCMSET(r0, 0x8004746d, &(0x7f00000003c0)=0x8) ioctl$TIOCGWINSZ(r0, 0x40087468, &(0x7f0000000400)) (async) ioctl$TIOCGWINSZ(r0, 0x40087468, &(0x7f0000000400)) ioctl$WSMOUSEIO_SETPARAMS(0xffffffffffffffff, 0x80105728, &(0x7f0000000480)={&(0x7f0000000440)=[{0x21, 0x4f6}, {0x84, 0xffffffff}, {0x87, 0x18}, {0x7, 0x7}, {0x87, 0x7}, {0x1, 0x77}, {0x26, 0x4}], 0x7}) execve(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500), &(0x7f0000000640)=[&(0x7f0000000540)='\f%{#-!%+\x00', &(0x7f0000000580)='(\x00', &(0x7f00000005c0)='\x00', &(0x7f0000000600)='\x00']) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x2810, r0, 0x962) (async) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x2810, r0, 0x962) execve(&(0x7f0000000680)='./file0\x00', &(0x7f0000000700)=[&(0x7f00000006c0)='\x00'], &(0x7f0000000800)=[&(0x7f0000000740)='\x00', &(0x7f0000000780)='{)\x00', &(0x7f00000007c0)='\x00']) execve(&(0x7f0000000840)='./file0\x00', &(0x7f0000000940)=[&(0x7f0000000880)='\f%{#-!%+\x00', &(0x7f00000008c0)='\x00', &(0x7f0000000900)='\f%{#-!%+\x00'], &(0x7f00000009c0)=[&(0x7f0000000980)='-%#..\x00']) munmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000) readv(r0, &(0x7f0000000ac0)=[{&(0x7f0000000a00)=""/100, 0x64}, {&(0x7f0000000a80)=""/28, 0x1c}], 0x2) (async) readv(r0, &(0x7f0000000ac0)=[{&(0x7f0000000a00)=""/100, 0x64}, {&(0x7f0000000a80)=""/28, 0x1c}], 0x2) ioctl$TIOCSBRK(r0, 0x2000747b) open$dir(&(0x7f0000000b00)='./file0\x00', 0x1, 0x50) (async) r2 = open$dir(&(0x7f0000000b00)='./file0\x00', 0x1, 0x50) faccessat(r2, &(0x7f0000000b40)='./file0\x00', 0x100, 0x0) (async) faccessat(r2, &(0x7f0000000b40)='./file0\x00', 0x100, 0x0) close(r0) mknod(&(0x7f0000000b80)='./file0\x00', 0x2, 0x3) getsockname$inet6(0xffffffffffffff9c, &(0x7f0000000bc0), &(0x7f0000000c00)=0xc) (async) getsockname$inet6(0xffffffffffffff9c, &(0x7f0000000bc0), &(0x7f0000000c00)=0xc) shmget(0x0, 0x1000, 0x20, &(0x7f0000ffe000/0x1000)=nil) r3 = fcntl$getown(r0, 0x5) ioctl$TIOCCLRVERAUTH(r0, 0x2000741d) r4 = openat$dri(0xffffffffffffff9c, &(0x7f0000000c40)='/dev/dri/card0\x00', 0x100, 0x0) mlock(&(0x7f0000ffe000/0x1000)=nil, 0x1000) ioctl$TIOCSETD(r0, 0x8004741b, &(0x7f0000000c80)=0xfffffffa) link(&(0x7f0000000cc0)='./file0\x00', &(0x7f0000000d00)='./file0\x00') (async) link(&(0x7f0000000cc0)='./file0\x00', &(0x7f0000000d00)='./file0\x00') fcntl$lock(r0, 0x9, &(0x7f0000000d40)={0x3, 0x2, 0x4, 0x3, r3}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000dc0)={&(0x7f0000000d80)=[0x0, 0x0], 0x2}) 7.689502576s ago: executing program 7 (id=1025): mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x0) (async) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x0) execve(&(0x7f0000000040)='./bus\x00', &(0x7f00000003c0)=[&(0x7f00000000c0)='tap', &(0x7f0000000140)='\x8d.\xcd@:-,:@@|]*{@@{]\t\x00.+-^\'\x00', &(0x7f00000001c0)='ap\x00', &(0x7f0000000200)='%*!)&&:\'.*-\x00', &(0x7f0000000240)='tap', &(0x7f0000000280)='tap', &(0x7f00000002c0)=':$\x00', &(0x7f0000000300)='tap', &(0x7f0000000340)='tap', &(0x7f0000000380)='|\xf2\xb2'], &(0x7f0000000680)) mknod(&(0x7f0000000080)='./bus\x00', 0x2000, 0x1700) r0 = open(&(0x7f0000000000)='./bus\x00', 0x1, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000180)={'tap', 0x0}) r1 = open(&(0x7f0000000000)='./bus\x00', 0x20, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x20000, 0x185) ioctl$TIOCSETAF(0xffffffffffffffff, 0x802c7416, &(0x7f0000000180)={0x806377, 0x80000006, 0x9, 0xf9, "bb08b5590209ff0000d06900", 0x44, 0xdcd6}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) unveil(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='r\x00') (async) unveil(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='r\x00') open(&(0x7f0000000000)='./bus\x00', 0x20, 0x0) (async) r2 = open(&(0x7f0000000000)='./bus\x00', 0x20, 0x0) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) (async) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) open(&(0x7f0000000000)='./bus\x00', 0x20, 0x0) (async) r3 = open(&(0x7f0000000000)='./bus\x00', 0x20, 0x0) ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) (async) ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) close(r0) r4 = socket(0x11, 0x3, 0x0) setsockopt(r4, 0x11, 0x2, &(0x7f0000000000), 0x4) 7.640496593s ago: executing program 7 (id=1027): socket(0x18, 0x3, 0x0) mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x2, 0x102) ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x0, 0xb3f, {[0xfffffbfffffffffb, 0x0, 0x2, 0x100200000, 0x6, 0x7, 0xdf60, 0xfffffffffffffffe, 0x0, 0x2f01, 0x93, 0x4, 0xffffffffffffffff, 0x200000000002, 0xd, 0x4, 0xfffffffffffffffe, 0x400000000100], [0xfffffffffffffffe, 0xf0, 0xfffefffffffffffd, 0x20000001, 0x5e, 0x7b98, 0x6, 0x0, 0x3], [0x100000001, 0x8000, 0x8, 0x0, 0xb, 0x11000, 0xffffffff00000000], [0x8, 0x1fffffffffb, 0x4, 0x100000000, 0xfffffffffffffffe, 0x8], [{0x0, 0x0, 0x0, 0x7d0a}, {0xfffc, 0x22, 0x5}, {0x4, 0x0, 0xfffffffe, 0x80}, {0x3, 0x7, 0x5, 0xffffffffffffffff}, {0x0, 0x2, 0x7f, 0x8}, {0x0, 0x9, 0x9, 0x2000000000000000}, {0x0, 0x0, 0xfffffff9}, {0x0, 0xfd, 0x0, 0x7}], {0x1, 0x5, 0x6, 0x3}, {0xfffe, 0x3, 0x6d5, 0x7}}}) r0 = kqueue() kevent(r0, 0x0, 0xfffffffd, &(0x7f0000000040), 0x5, 0x0) kevent(r0, &(0x7f0000000000), 0x3ff, 0x0, 0x8000800, 0x0) r1 = syz_open_pts() setrlimit(0x1, 0x0) r2 = open(&(0x7f0000000040)='./file1\x00', 0x18289, 0x114) write(r2, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) lseek(r2, 0x7, 0x0) close(r2) mprotect(&(0x7f0000724000/0x6000)=nil, 0x6000, 0x0) ioctl$TIOCSTAT(r1, 0x20007465, 0x0) mknod(&(0x7f0000000300)='./file0\x00', 0x2000, 0x6dc) r3 = open(&(0x7f0000000380)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7929) ioctl$TIOCFLUSH(r3, 0x80047410, &(0x7f0000000140)=0xe) ioctl$TIOCSETD(r1, 0x8004741b, &(0x7f0000000040)=0x55a) ioctl$TIOCSETD(r1, 0x8004741b, &(0x7f0000000000)=0x8) execve(0x0, 0x0, 0x0) 5.976531863s ago: executing program 1 (id=1050): sysctl$kern(&(0x7f00000000c0)={0x1, 0x55}, 0x3, &(0x7f0000000100)="00e0ae5b7e0d0000bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x63, 0x0, 0x37) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0xbe, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x6c, 0x11, 0x3, 0xfffffff5}, {0x50, 0xf0, 0x9}, {0x6, 0x80, 0x12, 0xfffff802}]}) sysctl$kern(0x0, 0x0, &(0x7f0000000100)="c2a6d6000000005ae39d73988d800f00ecfe746fc6d602ff1a1ea6612b158f09acc9ae4e6a9981d7", &(0x7f0000000000)=0x28, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000040)={0x28, 0x0}) write(r0, &(0x7f00000003c0)="f81ad30100060000000100000000", 0xe) syz_emit_ethernet(0x71, &(0x7f00000000c0)={@broadcast, @random="94ea09066dbd", [{[], {0x8100, 0x0, 0x0, 0x1}}], {@ipv6={0x86dd, {0x0, 0x6, "db8344", 0x37, 0x11, 0x0, @rand_addr="fed38d5ba80b9e61cd0c535a9800", @mcast1, {[], @generic="d090a2d124d7ff3c750032346546c18aa2aa2ac3ed67dbd026dec102c180511658dd010042f4a005cda9c73ee7b107f330d0d4e9553873"}}}}}) unveil(&(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000000)='r\x00') 5.855988989s ago: executing program 1 (id=1054): r0 = open(&(0x7f0000000280)='./file0\x00', 0x400, 0x194) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f00000002c0)={0x0, 0x0}) ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f0000000300)={0x0, 0x719747bd, 0x1, 0x36313050, 0x2, [0x0, 0x0], [0x26a8, 0x1, 0xfff, 0x6], [0xfffffff8, 0x10, 0x7, 0xffffffff], [0x1, 0x0, 0x9cfd, 0x7]}) ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f0000000380)={0x0, 0x4, 0x5, 0x30334142, 0x2, [0x0], [0x9f, 0x7, 0x59, 0x9], [0x3, 0x8, 0x49, 0xdd], [0x6, 0x3, 0x6fd, 0x2]}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f00000000c0), 0x1c, 0x0}, 0x0) r4 = socket(0x800000018, 0x2, 0x0) setsockopt$sock_int(r4, 0xffff, 0x1000, &(0x7f0000000100)=0x7, 0x4) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x5, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x310, 0x4000}, 0x100000000006, 0x861, 0xffffffffffffffff, 0x0, 0x80000000000000, 0xfffffffe, 0xb, 0x7}) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) bind$unix(r4, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendmsg$unix(r4, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x404) ioctl$DRM_IOCTL_MODE_ADDFB(0xffffffffffffffff, 0xc01c64ae, &(0x7f0000000400)={0x0, 0xf3f, 0x2735, 0xc871, 0x7fff, 0xa, 0x0}) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000440)={0x0, 0x576, 0x30f7, 0x34325258, 0x0, [r1, r2, r3, r5], [0x100, 0x7, 0x6, 0x9], [0xe2, 0xd, 0x0, 0x7], [0x7, 0x100, 0x2, 0x5]}) r6 = socket(0x6, 0x3, 0x2) setsockopt(r6, 0x11, 0x1, &(0x7f0000000140)="b443d4ed", 0x4) recvmmsg(r6, &(0x7f0000000100)={&(0x7f00000000c0)={&(0x7f0000000000)=@in, 0xc, &(0x7f0000000080)=[{&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000040)=""/31, 0x1f}], 0x2, &(0x7f0000000180)=""/129, 0x81}, 0x3}, 0x10, 0x40, &(0x7f0000000240)={0x6, 0x9}) sendto$unix(r6, &(0x7f0000000580)="b10005010000009f0500070105000000331c13fecea70500fef96ecfc72fd3357ae30200004e3039d2d236acf20bf404be01000000f7c8cf5f882b297bd8aa0504000051e2f0ad3ebbc257699a1f139b672f335c22db830c032bfa896443c32118210000720fd38bfb0000fd54c125191b1257aea8c500001602fbfe0c2300008abfba0900000008e37193f8343712050500b71d808e5ed405080000fca653181afc9d3f0100"/177, 0xb1, 0x0, 0x0, 0x0) 5.854016178s ago: executing program 1 (id=1057): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) write(r0, &(0x7f0000000040)="b1d24689f7352c7c93d818b604500d98d01af6643549d000383753f4e4a81fa1ee7515584f6111417b1fd2f8a6ef840d722d94831a42aa842d70e843f5759078fbe0f71d5f0e7c9a93c948a6421a91a0c90c6f69c2241072d222dc9690eb44ea3cb9e7b4561751cf0c6750fb0d61697dec7920baeaaa3bd51b17e5288e75b35a86a77f58c281836b488904fd83aa6ffb1141f8ae7fb550b8731af9b62fdde44ddf8cb15781d4f7df4c929599bbb85206a7776aa6666627bd1cb961191a8d2c1440d7dd", 0xc3) r1 = fcntl$dupfd(r0, 0x0, r0) connect$unix(r1, &(0x7f0000000140)=@abs={0x1, 0x0, 0x0}, 0x8) r2 = socket$unix(0x1, 0x2, 0x0) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x0}, 0x8) ioctl$FIONBIO(r2, 0x8004667e, &(0x7f00000001c0)=0x1) r3 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000200), 0x20, 0x0) fcntl$setflags(r3, 0x2, 0x1) sendto$unix(r1, &(0x7f0000000240)="027ae6d75e53fd55e9b5357159b44fa5a147", 0x12, 0x8, &(0x7f0000000280)=@file={0x0, './file0\x00'}, 0xa) getsockopt$sock_linger(r1, 0xffff, 0x80, &(0x7f00000002c0), &(0x7f0000000300)=0x8) select(0x40, &(0x7f0000000340)={0x8, 0x2, 0x1, 0x4, 0x8, 0xfffffffffffeffff, 0x3, 0x6}, &(0x7f0000000380)={0x3, 0x2, 0xffffffffffffffff, 0x5, 0xd3, 0x0, 0x8, 0x6}, &(0x7f00000003c0)={0x101, 0x7, 0xfffffffffffffff4, 0x0, 0x0, 0x200, 0x8001, 0x4}, &(0x7f0000000400)={0xff, 0x1}) syz_extract_tcp_res$synack(&(0x7f0000000440)={0x41424344}, 0x1, 0x0) syz_extract_tcp_res(&(0x7f0000000480)={0x41424344}, 0x1, 0xe) syz_emit_ethernet(0x131, &(0x7f00000004c0)={@local, @broadcast, [{[{0x88a8, 0x4, 0x1, 0x4}], {0x8100, 0x0, 0x0, 0x3}}], {@ipv6={0x86dd, {0x4, 0x6, "eaa939", 0xf3, 0x4, 0xff, @mcast2, @loopback, {[@fragment={0x37, 0x0, 0x40, 0x1, 0x0, 0x18, 0x68}, @dstopts={0x1, 0x3, '\x00', [@padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x401}, @pad1, @enc_lim={0x4, 0x1, 0x5}, @pad1, @enc_lim={0x4, 0x1, 0x6}]}, @routing={0x70, 0x2, 0x0, 0x8, 0x0, [@mcast1]}, @hopopts={0xa44ab62ed11f4432, 0x2, '\x00', [@pad1, @ra={0x5, 0x2, 0xa480}, @enc_lim={0x4, 0x1, 0x1}, @padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}], @tcp={{0x2, 0x3, r4, r5, 0x1, 0x0, 0xe, 0x2, 0x1, 0x0, 0x4, {[@eol, @eol, @timestamp={0x8, 0xa, 0x9b, 0x3}, @window={0x3, 0x3, 0x7}, @generic={0x4, 0x6, "55d6b8ec"}, @eol, @generic={0x0, 0x7, "c2bb9854cb"}, @sack_perm={0x4, 0x2}, @eol, @nop]}}, {"610ed1a7c5dd9e7ae61b1e576889d88c7f6076d40dbc3182f67841fb550d645844ff7fbc99292783314cf5904a6c027cd189a187484673a6628cb688b84e9454f44c93b241b4256a8c069d0c4a61ad707e9d24"}}}}}}}) getsockname$unix(r1, &(0x7f0000000600)=@file={0x0, ""/28}, &(0x7f0000000640)=0x1e) r6 = accept$inet6(r1, &(0x7f0000000680), &(0x7f00000006c0)=0xc) getsockname(r6, &(0x7f0000000700)=@in, &(0x7f0000000740)=0xc) r7 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000780), 0x10, 0x0) ioctl$VMM_IOC_CREATE(r7, 0xc2585601, &(0x7f00000007c0)={0x10, 0xb, [{&(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x1}, {&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0xfff}, {&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000c00000/0x400000)=nil, 0x81}, {&(0x7f0000dad000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0xca}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000d4c000/0x4000)=nil, 0x2fa46adb}, {&(0x7f0000f79000/0x4000)=nil, &(0x7f0000ea5000/0x2000)=nil, 0x4}, {&(0x7f0000e5d000/0x2000)=nil, &(0x7f0000e01000/0x1000)=nil, 0x6}, {&(0x7f00007e6000/0x800000)=nil, &(0x7f0000fee000/0x10000)=nil, 0x80000001}, {&(0x7f0000824000/0x1000)=nil, &(0x7f0000f50000/0x2000)=nil, 0x7cae6972}, {&(0x7f0000b54000/0x2000)=nil, &(0x7f0000cc6000/0x2000)=nil, 0x2}, {&(0x7f00009e5000/0x4000)=nil, &(0x7f00009ca000/0x2000)=nil, 0xc}, {&(0x7f0000c09000/0x3000)=nil, &(0x7f0000f4d000/0x2000)=nil, 0xc55}, {&(0x7f0000c84000/0x2000)=nil, &(0x7f0000f8b000/0x1000)=nil, 0x100}, {&(0x7f0000946000/0x2000)=nil, &(0x7f0000a76000/0x4000)=nil, 0x100000001}, {&(0x7f0000f52000/0x2000)=nil, &(0x7f0000e0c000/0x2000)=nil, 0x1}, {&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000bf0000/0x4000)=nil, 0x6}], './file0\x00', 0x8000}) r8 = openat$pf(0xffffffffffffff9c, &(0x7f00000009c0), 0x2, 0x0) listen(r8, 0x2) openat$bpf(0xffffffffffffff9c, &(0x7f0000000a00), 0x40, 0x0) r9 = accept$unix(r8, &(0x7f0000000a40)=@file={0x0, ""/4102}, &(0x7f0000001a80)=0x1008) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000001ac0)={'tap', 0x0}) setsockopt$sock_int(r7, 0xffff, 0x0, &(0x7f0000001b00)=0x5, 0x4) r10 = socket(0x20, 0x2, 0x8) r11 = openat$vnd(0xffffffffffffff9c, &(0x7f0000001b40), 0x8, 0x0) r12 = openat(r8, &(0x7f0000001c00)='./file0\x00', 0x10, 0x100) kevent(r7, &(0x7f0000001b80)=[{{r0}, 0xfffffffffffffffd, 0x44, 0x2, 0xc135, 0x4}, {{r10}, 0xfffffffffffffffd, 0x1, 0x1, 0x80b, 0x4f2}, {{r9}, 0xfffffffffffffffd, 0x8, 0x1, 0x8, 0xffffffffffffffff}, {{r11}, 0xfffffffffffffff8, 0x2, 0x1, 0x4, 0x1}], 0x52ac, &(0x7f0000001c40)=[{{r9}, 0x6, 0x2, 0x20, 0x3, 0x8000000000000000}, {{r1}, 0xfffffffffffffffe, 0x0, 0x20000000, 0xe, 0x100000000}, {{r3}, 0xfffffffffffffffb, 0xa, 0x1, 0x10, 0x9}, {{r3}, 0xfffffffffffffff8, 0x20, 0x80000000, 0xfffffffffffffffa, 0x5}, {{r12}, 0xfffffffffffffffb, 0x80, 0xf0000000, 0x4, 0xfffffffffffff3fc}], 0xfff, &(0x7f0000001d00)={0x5, 0x3ff}) 5.110248886s ago: executing program 1 (id=1057): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) write(r0, &(0x7f0000000040)="b1d24689f7352c7c93d818b604500d98d01af6643549d000383753f4e4a81fa1ee7515584f6111417b1fd2f8a6ef840d722d94831a42aa842d70e843f5759078fbe0f71d5f0e7c9a93c948a6421a91a0c90c6f69c2241072d222dc9690eb44ea3cb9e7b4561751cf0c6750fb0d61697dec7920baeaaa3bd51b17e5288e75b35a86a77f58c281836b488904fd83aa6ffb1141f8ae7fb550b8731af9b62fdde44ddf8cb15781d4f7df4c929599bbb85206a7776aa6666627bd1cb961191a8d2c1440d7dd", 0xc3) r1 = fcntl$dupfd(r0, 0x0, r0) connect$unix(r1, &(0x7f0000000140)=@abs={0x1, 0x0, 0x0}, 0x8) r2 = socket$unix(0x1, 0x2, 0x0) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x0}, 0x8) ioctl$FIONBIO(r2, 0x8004667e, &(0x7f00000001c0)=0x1) r3 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000200), 0x20, 0x0) fcntl$setflags(r3, 0x2, 0x1) sendto$unix(r1, &(0x7f0000000240)="027ae6d75e53fd55e9b5357159b44fa5a147", 0x12, 0x8, &(0x7f0000000280)=@file={0x0, './file0\x00'}, 0xa) getsockopt$sock_linger(r1, 0xffff, 0x80, &(0x7f00000002c0), &(0x7f0000000300)=0x8) select(0x40, &(0x7f0000000340)={0x8, 0x2, 0x1, 0x4, 0x8, 0xfffffffffffeffff, 0x3, 0x6}, &(0x7f0000000380)={0x3, 0x2, 0xffffffffffffffff, 0x5, 0xd3, 0x0, 0x8, 0x6}, &(0x7f00000003c0)={0x101, 0x7, 0xfffffffffffffff4, 0x0, 0x0, 0x200, 0x8001, 0x4}, &(0x7f0000000400)={0xff, 0x1}) syz_extract_tcp_res$synack(&(0x7f0000000440)={0x41424344}, 0x1, 0x0) syz_extract_tcp_res(&(0x7f0000000480)={0x41424344}, 0x1, 0xe) syz_emit_ethernet(0x131, &(0x7f00000004c0)={@local, @broadcast, [{[{0x88a8, 0x4, 0x1, 0x4}], {0x8100, 0x0, 0x0, 0x3}}], {@ipv6={0x86dd, {0x4, 0x6, "eaa939", 0xf3, 0x4, 0xff, @mcast2, @loopback, {[@fragment={0x37, 0x0, 0x40, 0x1, 0x0, 0x18, 0x68}, @dstopts={0x1, 0x3, '\x00', [@padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x401}, @pad1, @enc_lim={0x4, 0x1, 0x5}, @pad1, @enc_lim={0x4, 0x1, 0x6}]}, @routing={0x70, 0x2, 0x0, 0x8, 0x0, [@mcast1]}, @hopopts={0xa44ab62ed11f4432, 0x2, '\x00', [@pad1, @ra={0x5, 0x2, 0xa480}, @enc_lim={0x4, 0x1, 0x1}, @padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}], @tcp={{0x2, 0x3, r4, r5, 0x1, 0x0, 0xe, 0x2, 0x1, 0x0, 0x4, {[@eol, @eol, @timestamp={0x8, 0xa, 0x9b, 0x3}, @window={0x3, 0x3, 0x7}, @generic={0x4, 0x6, "55d6b8ec"}, @eol, @generic={0x0, 0x7, "c2bb9854cb"}, @sack_perm={0x4, 0x2}, @eol, @nop]}}, {"610ed1a7c5dd9e7ae61b1e576889d88c7f6076d40dbc3182f67841fb550d645844ff7fbc99292783314cf5904a6c027cd189a187484673a6628cb688b84e9454f44c93b241b4256a8c069d0c4a61ad707e9d24"}}}}}}}) getsockname$unix(r1, &(0x7f0000000600)=@file={0x0, ""/28}, &(0x7f0000000640)=0x1e) r6 = accept$inet6(r1, &(0x7f0000000680), &(0x7f00000006c0)=0xc) getsockname(r6, &(0x7f0000000700)=@in, &(0x7f0000000740)=0xc) r7 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000780), 0x10, 0x0) ioctl$VMM_IOC_CREATE(r7, 0xc2585601, &(0x7f00000007c0)={0x10, 0xb, [{&(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x1}, {&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0xfff}, {&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000c00000/0x400000)=nil, 0x81}, {&(0x7f0000dad000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0xca}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000d4c000/0x4000)=nil, 0x2fa46adb}, {&(0x7f0000f79000/0x4000)=nil, &(0x7f0000ea5000/0x2000)=nil, 0x4}, {&(0x7f0000e5d000/0x2000)=nil, &(0x7f0000e01000/0x1000)=nil, 0x6}, {&(0x7f00007e6000/0x800000)=nil, &(0x7f0000fee000/0x10000)=nil, 0x80000001}, {&(0x7f0000824000/0x1000)=nil, &(0x7f0000f50000/0x2000)=nil, 0x7cae6972}, {&(0x7f0000b54000/0x2000)=nil, &(0x7f0000cc6000/0x2000)=nil, 0x2}, {&(0x7f00009e5000/0x4000)=nil, &(0x7f00009ca000/0x2000)=nil, 0xc}, {&(0x7f0000c09000/0x3000)=nil, &(0x7f0000f4d000/0x2000)=nil, 0xc55}, {&(0x7f0000c84000/0x2000)=nil, &(0x7f0000f8b000/0x1000)=nil, 0x100}, {&(0x7f0000946000/0x2000)=nil, &(0x7f0000a76000/0x4000)=nil, 0x100000001}, {&(0x7f0000f52000/0x2000)=nil, &(0x7f0000e0c000/0x2000)=nil, 0x1}, {&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000bf0000/0x4000)=nil, 0x6}], './file0\x00', 0x8000}) r8 = openat$pf(0xffffffffffffff9c, &(0x7f00000009c0), 0x2, 0x0) listen(r8, 0x2) openat$bpf(0xffffffffffffff9c, &(0x7f0000000a00), 0x40, 0x0) r9 = accept$unix(r8, &(0x7f0000000a40)=@file={0x0, ""/4102}, &(0x7f0000001a80)=0x1008) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000001ac0)={'tap', 0x0}) setsockopt$sock_int(r7, 0xffff, 0x0, &(0x7f0000001b00)=0x5, 0x4) r10 = socket(0x20, 0x2, 0x8) r11 = openat$vnd(0xffffffffffffff9c, &(0x7f0000001b40), 0x8, 0x0) r12 = openat(r8, &(0x7f0000001c00)='./file0\x00', 0x10, 0x100) kevent(r7, &(0x7f0000001b80)=[{{r0}, 0xfffffffffffffffd, 0x44, 0x2, 0xc135, 0x4}, {{r10}, 0xfffffffffffffffd, 0x1, 0x1, 0x80b, 0x4f2}, {{r9}, 0xfffffffffffffffd, 0x8, 0x1, 0x8, 0xffffffffffffffff}, {{r11}, 0xfffffffffffffff8, 0x2, 0x1, 0x4, 0x1}], 0x52ac, &(0x7f0000001c40)=[{{r9}, 0x6, 0x2, 0x20, 0x3, 0x8000000000000000}, {{r1}, 0xfffffffffffffffe, 0x0, 0x20000000, 0xe, 0x100000000}, {{r3}, 0xfffffffffffffffb, 0xa, 0x1, 0x10, 0x9}, {{r3}, 0xfffffffffffffff8, 0x20, 0x80000000, 0xfffffffffffffffa, 0x5}, {{r12}, 0xfffffffffffffffb, 0x80, 0xf0000000, 0x4, 0xfffffffffffff3fc}], 0xfff, &(0x7f0000001d00)={0x5, 0x3ff}) 5.109766941s ago: executing program 1 (id=1073): r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000040)=@abs={0x1, 0x0, 0x3}, 0x8) setsockopt$sock_timeval(r0, 0xffff, 0x1006, &(0x7f0000003380)={0x10, 0x8000000000000000}, 0x10) getsockopt$sock_timeval(r0, 0xffff, 0x1006, &(0x7f00000002c0), &(0x7f0000003600)=0xfffffffffffffefc) 4.927329255s ago: executing program 1 (id=1075): setrlimit(0x1, &(0x7f0000000000)={0xffffeffffffffffd, 0xfffffffffffdffff}) (async) r0 = open(&(0x7f0000000040)='./file1\x00', 0x18289, 0x110) write(r0, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) (async, rerun: 64) mkdir(&(0x7f0000000180)='./file0\x00', 0x14) (rerun: 64) open(&(0x7f0000000040)='./file0\x00', 0x80, 0x13) (async) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x60) (async) r1 = socket(0x18, 0x3, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) (async, rerun: 32) r2 = socket(0x1, 0x2, 0x0) (rerun: 32) ioctl$FIONREAD(r2, 0xc0106924, &(0x7f00000001c0)) setuid(0xee01) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0x5, [{&(0x7f0000ccc000/0x1000)=nil, &(0x7f0000685000/0x3000)=nil, 0xd}, {&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000fa3000/0x2000)=nil}, {&(0x7f0000f08000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x100000001}, {&(0x7f0000672000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil}, {&(0x7f0000422000/0x4000)=nil, &(0x7f000069a000/0x1000)=nil, 0xffffffffffffffff}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000c00000/0x400000)=nil, 0x91e8}, {&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000c44000/0x2000)=nil, 0x4}, {&(0x7f0000def000/0x4000)=nil, &(0x7f0000ff5000/0x4000)=nil, 0x6}, {&(0x7f0000c18000/0x4000)=nil, &(0x7f0000cc4000/0x2000)=nil, 0x7f}, {&(0x7f0000d84000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x80080000000000}, {&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000e82000/0x2000)=nil, 0x2fe}, {&(0x7f000000e000/0x4000)=nil, &(0x7f00000f4000/0x1000)=nil, 0x3bf87730}, {&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f00000dd000/0xa000)=nil, 0x1}, {&(0x7f0000d1d000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil}, {&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x380b00a4}], './file0\x00', 0x20000}) (async, rerun: 32) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) (async, rerun: 32) r3 = socket(0x2, 0x1, 0x0) ioctl$FIONREAD(r3, 0xc0206925, &(0x7f00000001c0)) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x10, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x10091, 0x0) (async) close(r4) (async) ioctl$FIONREAD(r1, 0x80286989, &(0x7f0000000100)) chmod(&(0x7f00000000c0)='./file1\x00', 0x8) (async) rmdir(&(0x7f0000000080)='./file0/file0\x00') setrlimit(0x4, &(0x7f0000000140)={0x6, 0xff}) chroot(&(0x7f0000000100)='./file1\x00') (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) 4.861944753s ago: executing program 4 (id=1080): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x8, 0x0) r1 = socket$inet(0x2, 0x8003, 0x0) setsockopt(r1, 0x0, 0x1e, &(0x7f0000000340)="15337ac0", 0x4) syz_emit_ethernet(0x1000e, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaa080045000014fffc00007f70548059ea0000"]) r2 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000100), 0x20000, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1000, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000080)="8b11384532d7148c61d483aa9f5c731a", 0x10}], 0x1) ioctl$WSMOUSEIO_SETPARAMS(r2, 0x80105727, &(0x7f0000000080)={&(0x7f0000000040)=[{0x26, 0xfb}], 0x1}) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x65}) close(0xffffffffffffffff) r3 = syz_open_pts() ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f0000000340)={0x8, 0x5, 0xffffdf82, 0xffffff8c, "000000000000000000000000ffffffffffffffe6", 0x4, 0x3}) r4 = getpid() ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x40000530, r4) r5 = socket(0x1, 0x1, 0x0) syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1) syz_emit_ethernet(0x138, &(0x7f00000003c0)=ANY=[@ANYRESOCT=0x0, @ANYRESDEC=r1, @ANYRES64=r4, @ANYRESDEC=r0]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r6 = socket(0x2, 0x1, 0x0) connect$unix(r6, &(0x7f0000000000), 0x10) read(r6, &(0x7f0000000140)=""/67, 0x43) getsockopt$sock_cred(r5, 0xffff, 0x1024, &(0x7f0000000240)={0x0}, &(0x7f00000001c0)=0xc) getpgid(r7) fcntl$lock(r2, 0x8, &(0x7f0000000180)={0x1, 0x2, 0x9, 0xcabc, r4}) readv(r3, &(0x7f0000000040)=[{&(0x7f0000000000)=""/18, 0x12}], 0x1) r8 = socket$inet(0x2, 0x3, 0xfc) ioctl$FIONREAD(r8, 0x80206979, &(0x7f0000000000)) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000200)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x5, &(0x7f0000000280)=[{0x5, 0x3, 0x4, 0x800}, {0x2, 0xfb, 0x4, 0xf768}, {0x0, 0x8, 0xe, 0x9}, {0x2e, 0x9, 0xcc, 0x4c06c405}, {0x7, 0x3, 0x7, 0xe0}]}) 4.511911393s ago: executing program 5 (id=1090): ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) kevent(0xffffffffffffffff, &(0x7f0000000040)=[{{}, 0xfffffffffffffffa, 0x0, 0x80, 0x4000000000000004}], 0x0, 0x0, 0xc96, 0x0) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x11}, 0x6, &(0x7f0000000080), 0x0, 0x0, 0x0) syz_extract_tcp_res(0x0, 0x6, 0x4) r0 = semget$private(0x0, 0x2, 0x80) semop(r0, &(0x7f0000000000)=[{0x0, 0x3}, {0x0, 0x209, 0x800}], 0x2) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket(0x18, 0x1, 0x0) close(r1) r2 = socket(0x18, 0x2, 0x0) setsockopt(r2, 0x1000000000029, 0xa, &(0x7f0000000040)="03000000", 0x4) setsockopt(r1, 0x1000000029, 0x2e, 0x0, 0xfffffffffffffdff) connect$unix(r1, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) socket$inet6(0x18, 0x3, 0x0) r3 = socket$inet(0x2, 0x3, 0x0) ioctl$FIONREAD(r3, 0x80206979, &(0x7f0000000100)) 4.269389567s ago: executing program 5 (id=1090): ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) kevent(0xffffffffffffffff, &(0x7f0000000040)=[{{}, 0xfffffffffffffffa, 0x0, 0x80, 0x4000000000000004}], 0x0, 0x0, 0xc96, 0x0) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x11}, 0x6, &(0x7f0000000080), 0x0, 0x0, 0x0) syz_extract_tcp_res(0x0, 0x6, 0x4) r0 = semget$private(0x0, 0x2, 0x80) semop(r0, &(0x7f0000000000)=[{0x0, 0x3}, {0x0, 0x209, 0x800}], 0x2) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket(0x18, 0x1, 0x0) close(r1) r2 = socket(0x18, 0x2, 0x0) setsockopt(r2, 0x1000000000029, 0xa, &(0x7f0000000040)="03000000", 0x4) setsockopt(r1, 0x1000000029, 0x2e, 0x0, 0xfffffffffffffdff) connect$unix(r1, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) socket$inet6(0x18, 0x3, 0x0) r3 = socket$inet(0x2, 0x3, 0x0) ioctl$FIONREAD(r3, 0x80206979, &(0x7f0000000100)) 4.151104418s ago: executing program 5 (id=1100): recvmmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)={&(0x7f0000000240)=@un=@file={0x0, ""/529}, 0x213, 0x0, 0x0, 0x0}, 0x4000}, 0x10, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1003f8d}, 0x2b, 0x1001, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(0xffffffffffffffff, 0x9, &(0x7f0000000040)={0x0, 0x0, 0x3, 0xffffffff00000001}) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x2, 0x0, 0x1e}, 0x5, &(0x7f0000000140)="e33745e84d5ebfb9cc2f7fa3a7f7891721720e69dac610a4fb5eaf3e3c6e1d648a8ca6ebc70f949c442aee9dc79e2cd74f4e106f382caf01ada3bc4efb0f6bc50690e5d879fac2492f4a0491b1ea3359aa5c5164ad97ac7c3aaddd498c0f962f5167b69cfdc8287fc34b8138340e60c404a855858ea5fc", &(0x7f0000000000)=0x59, 0x0, 0xfffffdfd) sendmmsg(r0, &(0x7f0000000080)={0x0}, 0x6a, 0x0) close(r0) unveil(0x0, &(0x7f00000000c0)='r\x00') 2.983266577s ago: executing program 4 (id=1102): ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) (async) r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) ioctl$TIOCSETA(r0, 0xcd604406, &(0x7f0000000040)={0x7ffb, 0x0, 0xfffbfff0, 0x0, "d6a24900b178926c79486b47c1dd00", 0x4, 0x5}) (async) ioctl$TIOCSETA(r0, 0xcd604407, &(0x7f0000000040)={0xa, 0x0, 0xe76b, 0x800005, "2c0d000000024000a400000300", 0x4, 0x5}) openat(r0, &(0x7f0000000500)='./file0\x00', 0x1, 0x20) (async) select(0x40, &(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x0, 0x0) (async) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) r1 = socket(0x2, 0x3, 0x3) connect$unix(r1, &(0x7f0000000000), 0x10) (async) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ioctl$TIOCSETAF(r0, 0x802c7416, &(0x7f0000000540)={0x3, 0x5, 0x140000, 0x0, "764f03ba4a1e2d8a10d5d514830e1aed064546c5", 0x1ff, 0x800}) (async) ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000380)={0x10000, [{0x1, 0x2}, {0x0, 0xfffffffc}, {}, {0x3, 0x2}, {0x2, 0x9}, {0x0, 0x4}, {0x3, 0xfffffffc}, {0x0, 0xc8}, {0x5, 0xfffffffe}, {0x3, 0xff}, {0x2}, {0x3, 0x204}, {0x3, 0xfffffffd}, {0x0, 0x3f2}, {0x3, 0x7fffffff}, {0x0, 0x7}, {0x1, 0x6}, {0x1, 0x7}, {0x0, 0x2000000}, {0x0, 0x3}, {0x1}, {0x3, 0xfffffffc}, {0x2}, {0x0, 0x6}, {0x0, 0x1}, {0x1}, {0x2, 0x3}, {0x3, 0x9}, {0x1}, {}, {0x2}, {0x0, 0x57fd}]}) (async) ioctl$TIOCSTAT(r0, 0x20007465, &(0x7f00000000c0)) (async) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) (async) execve(&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)=[&(0x7f0000000180)='&-.,\x00', &(0x7f00000001c0)='/dev/pf\x00', &(0x7f0000000200)='tap', &(0x7f0000000240)='-@@\xb3.(*\x00'], &(0x7f00000004c0)=[&(0x7f00000002c0)='\x00', &(0x7f0000000300)='/dev/pf\x00', &(0x7f0000000340)='/dev/pf\x00']) (async) r2 = socket$inet(0x2, 0x3, 0x0) ioctl$FIONREAD(r2, 0x80206979, &(0x7f0000000100)) 2.981194997s ago: executing program 5 (id=1103): syz_emit_ethernet(0x56, &(0x7f00000001c0)=ANY=[@ANYRES16, @ANYBLOB="e78dbc9448915e160e0aea98956e5f5f59b022b4a5a3fdd50a57d06f3c4895fac649755f461684d223bc21c798ea48aa5049078274ece3e17a72331838041db7527a682e84437ff245d7c443b78a650dad526a7b21384879e28828c63a2ba1eb5532baa99d18fe824268791f8123debe1679737980b46edacace4e4ed894ca078f1bba5d6c2d758de9b2e09f75799003d02e3605f48f3f3494c41b68c6cf19", @ANYRESDEC=0x0, @ANYRESHEX]) sysctl$vfs_ffs(&(0x7f0000000000)={0x4, 0x1, 0x9}, 0x3, 0x0, 0x0, 0x0, 0x0) r0 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000500), 0x80, 0x0) ioctl$TIOCSETA(0xffffffffffffffff, 0xcd50441a, &(0x7f0000000040)={0xf, 0x80000001, 0x9, 0xd7, "00000100000000000000908b5f7f00", 0xb, 0x8}) setrlimit(0x8, &(0x7f0000000040)={0x7, 0x50}) ioctl$VMM_IOC_INTR(r0, 0xca605601, &(0x7f0000000040)={0x1, 0x0, 0x1}) 2.980837268s ago: executing program 5 (id=1104): r0 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) (async) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r1 = open(&(0x7f0000000000)='./file0\x00', 0x200, 0xc0) ioctl$WSMOUSEIO_SCALIBCOORDS(r1, 0x81205724, &(0x7f0000000100)={0x1ff, 0xa4, 0x9, 0x0, 0x80000001, 0xa1b0, 0x40010002, 0x10, [{0x0, 0x2890, 0x5, 0xffffffff}, {0x6, 0xe, 0x8, 0xffbffff9}, {0x101, 0x6, 0xfffffffc, 0x9}, {0x4, 0x4, 0x200800f, 0x7}, {0x401, 0xffff, 0x2800, 0x7}, {0x1, 0x650, 0x3, 0x9b}, {0xce1, 0xffffffff, 0x4d4, 0x6}, {0x1000006, 0x8, 0x14, 0x5910}, {0x6000001, 0x82, 0x4, 0x6}, {0x3, 0x8009, 0x1000, 0x4}, {0x1d0, 0x800, 0xdaa1, 0x3}, {0xc, 0xa, 0x8}, {0x4, 0x7, 0x4, 0x8}, {0x29a71717, 0xfffffffa, 0x60, 0x7}, {0x6, 0x5, 0x5, 0x200004}, {0x0, 0x1, 0xfff, 0x30003}]}) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) ioctl$VNDIOCSET(r1, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r1, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0xd02) (async) select(0x40, &(0x7f0000000040)={0x8003, 0x5, 0xc000, 0x8000000000000003, 0x2, 0x0, 0x1baa, 0x2b}, 0x0, 0x0, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x140) (async) read(r1, &(0x7f00000000c0)=""/46, 0x2e) ioctl$VNDIOCSET(r2, 0xc0785101, &(0x7f0000000040)={0x0, 0x0, 0x0}) (async) r3 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r4 = fcntl$dupfd(r0, 0x0, r3) pwritev(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)="42fc5227e29ca3bdd56eb7a6c66135d2cb17194509927a108a93367c5dde4444d76bac8251fabee0de73b897c5d8424adfc7fd98f8d06a21105c3be4507f60a9363e67", 0x43}, {&(0x7f0000000100)="7bdbf81b494efef67863b26779ce7de9faa0203a3fa101e3f8d19b70b53f8c70593eea", 0x23}], 0x2, 0xda) (async) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000240)="417a802a2b03000000000000006f4c", 0xf}, {&(0x7f0000000180)="1957772e331e5d8ec2868796bd060e0163ef017da1d7e926f02303221af1a893", 0x20}], 0x2) (async) execve(0x0, 0x0, 0x0) 2.799256672s ago: executing program 4 (id=1115): r0 = open(&(0x7f0000000040)='./file1\x00', 0x18289, 0x110) setreuid(0xffffffffffffffff, 0xee01) open(&(0x7f0000000380)='./file0\x00', 0x80000000000206, 0xe5) write(r0, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) lseek(r0, 0xfffffffffffffeee, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xa7210e10bc3c9de9) open(&(0x7f0000000040)='./file1\x00', 0x18289, 0x110) (async) setreuid(0xffffffffffffffff, 0xee01) (async) open(&(0x7f0000000380)='./file0\x00', 0x80000000000206, 0xe5) (async) write(r0, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) (async) lseek(r0, 0xfffffffffffffeee, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xa7210e10bc3c9de9) (async) 2.626336457s ago: executing program 0 (id=1120): mknod(&(0x7f0000000200)='./file0\x00', 0x2000, 0x412dff) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x4010, 0xffffffffffffffff, 0x0) open$dir(&(0x7f0000000040)='./file0\x00', 0x8000, 0x20) (async) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x8000, 0x20) openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000140), 0x100, 0x0) (async) r1 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000140), 0x100, 0x0) ioctl$WSDISPLAYIO_LDFONT(r1, 0x8058574d, &(0x7f0000000180)={'./file1\x00', 0xfb, 0x6, 0x5, 0x0, 0x4, 0x2b5, 0x0, 0x1, 0x3, 0x5d34, 0x1}) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x80) (async) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x80) getitimer(0x2, &(0x7f0000000100)) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) syz_emit_ethernet(0x3a, &(0x7f0000000000)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2c, 0x67, 0x0, 0x0, 0x6, 0x0, @broadcast, @local={0xac, 0x14, 0x0}}, @tcp={{0x2, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x8000, 0x0, 0xfffc, {[@window={0x3, 0x3}]}}}}}}}) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) recvmmsg(r3, 0x0, 0x0, 0x0, 0x0) (async) recvmmsg(r3, 0x0, 0x0, 0x0, 0x0) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x9, 0x3, 0x101, 0x4, 0x80002003, 0x3, 0x10, [{0x2, 0xfe3, 0x6, 0x71800}, {0x9, 0xf7fe, 0x800002, 0xb}, {0x100006, 0x0, 0x8, 0x9}, {0x2, 0x52, 0x17d, 0xfffffffa}, {0xfffffffe, 0x0, 0x80000001, 0x6}, {0x0, 0x47ffb, 0x14000009, 0xb}, {0xfe0, 0xbffffff5, 0xffffffff, 0x6d}, {0x2000a, 0x8, 0xfdf0, 0x4}, {0x0, 0x7, 0x8033, 0x80}, {0xf7fffbfe, 0x0, 0x8001, 0x7}, {0xa54f, 0xfff9, 0x48a, 0xe4}, {0xcb, 0x102, 0x3, 0x8}, {0x2000df, 0x9, 0x5, 0x3ff}, {0x9, 0xfffffffc, 0xfffffff5, 0xfffffff8}, {0x6, 0xb0c9, 0x26, 0x5}, {0x81, 0xd654, 0x6, 0x6}]}) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) r4 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r4, 0xc0106924, &(0x7f00000001c0)) r5 = socket(0x18, 0x3, 0x0) ioctl$FIONREAD(r5, 0x8080691a, &(0x7f0000000100)) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) r6 = open(&(0x7f0000000380)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7949) writev(r6, &(0x7f0000000280)=[{&(0x7f0000000080)='#!', 0x2}], 0x1) (async) writev(r6, &(0x7f0000000280)=[{&(0x7f0000000080)='#!', 0x2}], 0x1) r7 = openat(r2, &(0x7f0000000240)='./file1\x00', 0x80, 0xe8) openat(r7, &(0x7f00000002c0)='./file1\x00', 0x1, 0x214) (async) openat(r7, &(0x7f00000002c0)='./file1\x00', 0x1, 0x214) 2.54635871s ago: executing program 3 (id=1122): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) fcntl$lock(r0, 0x9, &(0x7f00000000c0)={0x0, 0x0, 0xdffffffffffffff6, 0x1000100010008}) sysctl$kern(&(0x7f0000000000)={0x1, 0x21}, 0x2, &(0x7f0000001940), 0x0, 0x0, 0x0) 2.544812448s ago: executing program 3 (id=1124): ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, &(0x7f0000000100)={0x0, 0x0, {[0xfffffbeffffffffb, 0x0, 0x2, 0x2, 0x8001, 0x0, 0x6, 0xffffffffffffffff, 0x0, 0x2f00, 0x0, 0x3, 0xffffffffffffffff, 0x400000000000000, 0x0, 0xffffffffffffffa5, 0x82, 0xce5], [0xfffffffffffffffe, 0x80000001, 0xfffffffffffffff9, 0x2, 0x0, 0x7b98, 0x1fe, 0x0, 0xfffffffffffffffe], [0x5ad8, 0x2, 0x40000000, 0x0, 0xfffffffffffffffb, 0x11003, 0x4], [0x100, 0x20000000000, 0xfffffffffffffffc, 0x8040000100000000, 0xfffffffffffffffa, 0x4], [{0xdb6e, 0x4, 0x0, 0x7d06}, {0xfffc, 0x2, 0x5}, {0x0, 0x0, 0xfffffffe, 0x80}, {0x3, 0x4b72, 0x3, 0xffffffffffffffff}, {0x0, 0x2, 0x0, 0x8}, {0x0, 0x2003, 0x40000, 0x6}, {0x6b7}, {0x0, 0x965, 0xfffffffc, 0x9}], {0x2000, 0x7, 0x5}, {0x29, 0x6, 0xb0, 0x2}}}) kevent(0xffffffffffffffff, &(0x7f0000000000)=[{{}, 0xfffffffffffffff9, 0x5, 0x13, 0x1}], 0x0, 0x0, 0x7, 0x0) (async) r0 = kqueue() kevent(r0, 0x0, 0x2, &(0x7f0000000200)=[{{}, 0xfffffffffffffff9, 0x12, 0xfffff, 0xfffffffffffffffd, 0x202}], 0x7, 0x0) (async) kevent(r0, &(0x7f0000000000), 0x3ff, 0x0, 0x8000800, 0x0) (async) setuid(0xee01) (async) sync() 2.544466954s ago: executing program 0 (id=1125): sysctl$hw(&(0x7f00000016c0)={0x6, 0xf}, 0x2, &(0x7f0000000000)="398f17d282c40ced1ff9373e92224cedbe22d9259aff", &(0x7f0000001740)=0x16, &(0x7f0000001780), 0x0) 2.543018814s ago: executing program 4 (id=1126): openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x10000, 0x0) ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x0, 0xb3f, {[0xd5, 0x0, 0x8, 0x100200000, 0x3, 0x8, 0xdf60, 0xfffffffffffffffe, 0x0, 0x2f01, 0x93, 0x3, 0xffffffffffffffff, 0x200000000002, 0xf, 0x4, 0xfffffffffffffffe, 0x8000000000000001], [0xfffffffffffffffe, 0x80000001, 0xfffffffffffffffd, 0x525, 0x6, 0x200000000207b98, 0x80000000000001fe, 0x0, 0x0, 0x8], [0x100000001, 0x8000, 0x3ffffffe, 0x0, 0xb, 0x11004, 0xffffffff00000001], [0x1, 0x1fffffffffb, 0x7ffffffffffffffc, 0x100000000, 0xfffffffffffffffe, 0x1], [{0x0, 0x0, 0x0, 0x7d02}, {0x8, 0x22, 0x5, 0xffffffbffffffff9}, {0x4, 0x4, 0xfffffffe, 0x80}, {0x2, 0xd, 0x5, 0xffffffffffffffff}, {0x0, 0x2, 0x207f, 0xb}, {0x0, 0x9, 0xe7, 0x2000000000000002}, {0x7f, 0x0, 0xfffffff9}, {0x0, 0x100, 0x0, 0x8}], {0x1, 0x5, 0x7, 0x3}, {0xfbfe, 0x9, 0x6d5, 0x4}}}) r0 = kqueue() kevent(r0, &(0x7f0000000000), 0x3ff, 0x0, 0x8000800, 0x0) close(r0) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@random="b905f0ffffff", @empty, [], {@ipv4={0x8847, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x29, 0x0, @empty, @broadcast}, @udp={{0x1, 0x3, 0x8}}}}}}) syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0) 2.400290464s ago: executing program 0 (id=1128): r0 = socket$inet(0x2, 0x2, 0x0) (async) r1 = open(&(0x7f0000000140)='./file0\x00', 0x10686, 0x8) r2 = getpid() ktrace(&(0x7f0000000280)='./file0\x00', 0x0, 0x40000928, r2) utimensat(0xffffffffffffffff, 0x0, &(0x7f0000000100)={{0xfffffffffffffffe, 0xb}, {0x2, 0x1}}, 0x2) (async) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x5, 0x10, r1, 0x0) (async) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x412dff) (async, rerun: 64) r3 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) (rerun: 64) writev(r3, &(0x7f0000000140), 0x1) (async, rerun: 32) setsockopt$inet_opts(r0, 0x0, 0x1, &(0x7f0000000200)="b3051d02f4a8d7efcbe8cb85", 0xc) (rerun: 32) pipe(&(0x7f0000000100)={0xffffffffffffffff}) (async) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffff06000000aa"]) (async) r5 = openat$wsmouse(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$WSMOUSEIO_SETPARAMS(r5, 0x80105727, &(0x7f0000000300)={0x0}) (async) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="00001c00ac14"]) (async) syz_emit_ethernet(0x138, &(0x7f0000000180)=ANY=[@ANYBLOB="ff0280a31a2d3b0565c8d741861d89625a902d3e86db457218643701000180000000005ed72478108083f55c01e9f87ee60cdd40be26f5e348e5daae2599"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r6 = socket(0x2, 0x1, 0x0) bind(r6, &(0x7f0000000000), 0x10) (async, rerun: 64) listen(r6, 0x0) (rerun: 64) accept$inet(r6, 0x0, 0x0) (async) r7 = socket(0x2, 0x1, 0x0) sysctl$hw(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) accept(r6, 0x0, 0x0) (async, rerun: 32) connect$unix(r7, &(0x7f0000000000), 0x10) (async) sysctl$net_inet_tcp(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) fcntl$setstatus(r4, 0x4, 0xc0) (async) r8 = getppid() msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f00000000c0)={{0x13, 0x0, 0xffffffffffffffff}, 0x0, 0x4, r8, 0x0, 0x2010000000, 0x3, 0x1, 0xfffffffffffffffe}) (async) pipe(&(0x7f00000001c0)) 2.387855983s ago: executing program 0 (id=1131): syz_emit_ethernet(0x2a, &(0x7f0000000000)={@broadcast, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x20, 0x1c, 0x0, 0x0, 0x80, 0x1, 0x0, @broadcast, @rand_addr=0xdfffffff}, @icmp=@generic={0x21, 0x0, 0x0, "4cf9f5a3"}}}}}) clock_settime(0x100000000000000, &(0x7f0000000000)={0x80000000000007fe, 0x5}) r0 = socket(0x1, 0x5, 0x0) sysctl$kern(&(0x7f0000000140)={0x1, 0x34}, 0x2, 0x0, 0x0, 0x0, 0x0) r1 = getuid() chown(&(0x7f0000000040)='./file0\x00', r1, 0xffffffffffffffff) setuid(r1) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0xffffffffffffffff, r1, 0x0, 0x0, 0x8001}, 0x9, 0x2000000008, 0xffffffffffffffee}) semop(0x0, &(0x7f00000000c0)=[{}, {0x0, 0x2ff}], 0x2) r2 = socket(0x18, 0x2, 0x0) connect$unix(r2, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x9555, 0xd, 0x3, 0x101, 0xfffffffe, 0xa, 0xffffffff, 0x10, [{0x2, 0xfe3, 0x6, 0x8717fd}, {0xff, 0xb802, 0x800002, 0x7}, {0x100006, 0x0, 0x8, 0x8010}, {0x2, 0xfffffffe, 0x200, 0x4}, {0x788a, 0x3, 0x80000001, 0x3}, {0x2, 0x43fff, 0x14000009, 0xc}, {0x5, 0x5, 0x4, 0x4}, {0x2000a, 0x8, 0xfdf0, 0x6}, {0x0, 0x7f, 0x33, 0x81}, {0xfffffc00, 0x3, 0x8001, 0x8}, {0x0, 0xfff9, 0xc, 0xe1}, {0xcb, 0xcc, 0x5, 0x8}, {0x2000df, 0x9, 0x5, 0x3ff}, {0x8, 0xfffffffc, 0xfffffff5, 0xfffffff8}, {0x6, 0x6, 0x26, 0x3}, {0x81, 0x6, 0x8, 0x6}]}) getrusage(0x0, &(0x7f0000000380)) ktrace(0x0, 0x5, 0x40000424, 0xffffffffffffffff) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x40, 0x200}, 0x5, 0x8001, 0x24b83c97}) getsockname$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) getsockopt$sock_int(r0, 0xffff, 0x1002, 0x0, 0x0) getsockopt$SO_PEERCRED(r0, 0xffff, 0x1022, &(0x7f0000000080), 0xc) 2.291633932s ago: executing program 7 (id=1133): mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6381) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xffffff7fffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0xc, 0x2000000000000004}, 0x0, 0x0, 0x0) (async) r0 = kqueue() kevent(r0, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) (async) r1 = open(&(0x7f0000000080)='./file0\x00', 0x10, 0x100) ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file0\x00', 0x248f, 0x80, 0xffff, 0x1, 0x39, 0xe4e, 0x4000001, 0x2, 0x2, 0x1, 0x6}) (async) ioctl$FIONBIO(r1, 0x82907003, &(0x7f0000000140)=0x2) (async) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) (async) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x6384) r2 = open(&(0x7f0000000040)='./bus\x00', 0x80, 0x100) ioctl$FIONBIO(r2, 0x82907003, &(0x7f0000000140)=0x1) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (async) r3 = open$dir(&(0x7f0000000300)='.\x00', 0x8, 0x4a) setgid(0xffffffffffffffff) (async, rerun: 64) setgroups(0x0, 0x0) (async, rerun: 64) fchmod(r3, 0xf3) setuid(0xffffffffffffffff) ioctl$VNDIOCSET(r2, 0xc0384600, &(0x7f0000000200)={&(0x7f0000000100)='./file1\x00', 0x6, &(0x7f00000001c0)='./bus\x00', 0x6}) open(&(0x7f0000000380)='./bus\x00', 0x80000000000206, 0x4ebfac6bbaf7929) (async, rerun: 64) unveil(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000140)='x\x00') (rerun: 64) close(r1) r4 = open(&(0x7f0000000080)='./file0\x00', 0x10, 0x100) ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file0\x00', 0x248f, 0x80, 0xffff, 0x1, 0x39, 0xe4e, 0x4000001, 0x2, 0x2, 0x1, 0x6}) (async) ioctl$FIONBIO(r4, 0x82907003, &(0x7f0000000140)=0x2) (async, rerun: 64) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x17, 0x30, 0x66, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x0}, @multicast1}, @icmp=@parameter_prob={0xc, 0x0, 0x0, 0x0, 0xff, 0x0, {0x5, 0x4, 0x0, 0x1b, 0xfffc, 0x0, 0x0, 0x8, 0x6, 0xf0, @multicast1, @loopback}}}}}}) (rerun: 64) 2.291008716s ago: executing program 3 (id=1134): mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) sysctl$hw(&(0x7f0000000040)={0x6, 0xb}, 0x3, &(0x7f0000000080)="bd0f192e", &(0x7f00000000c0)=0x74, 0x0, 0x0) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0x9, [{&(0x7f00004a3000/0x3000)=nil, &(0x7f00001cc000/0x4000)=nil, 0x200007fffffffffe}, {&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000628000/0x3000)=nil, 0xffffffff7fffffff}, {&(0x7f00000a3000/0x1000)=nil, &(0x7f00001fc000/0x4000)=nil, 0x9}, {&(0x7f00000e7000/0x3000)=nil, &(0x7f00000eb000/0x4000)=nil, 0xfdfffffffffff7fd}, {&(0x7f00000f4000/0x3000)=nil, &(0x7f0000180000/0x4000)=nil, 0x8}, {&(0x7f0000701000/0x3000)=nil, &(0x7f0000673000/0x2000)=nil, 0xffffffffffffffff}, {&(0x7f0000123000/0x3000)=nil, &(0x7f0000369000/0x3000)=nil, 0x101}, {&(0x7f00003ba000/0x4000)=nil, &(0x7f000063b000/0x2000)=nil, 0xa8}, {&(0x7f000015d000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0xffffdffffffffff7}, {&(0x7f0000483000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x1}, {&(0x7f000064b000/0x2000)=nil, &(0x7f00000eb000/0x3000)=nil, 0x2}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000688000/0x4000)=nil, 0x6}, {&(0x7f00003ca000/0x1000)=nil, &(0x7f0000508000/0x2000)=nil, 0xe}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0xfffffffffffffff9}, {&(0x7f0000148000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x1000039fc}, {&(0x7f0000ffd000/0x2000)=nil, &(0x7f000019f000/0x2000)=nil, 0x2}], './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', 0xfffffffa}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$TIOCSETA(r0, 0xc1084425, &(0x7f0000000040)={0x3, 0x0, 0xfffffffe, 0x5, "210d000000020000000000000000004021800600", 0x2000000, 0x5}) recvfrom$unix(0xffffffffffffffff, &(0x7f0000000140)=""/130, 0x82, 0x0, &(0x7f0000000200)=@file={0x1, './bus\x00'}, 0xfffffffffffffe50) r1 = socket$unix(0x1, 0x5, 0x0) sysctl$hw(&(0x7f0000000300)={0x6, 0x10}, 0x2, &(0x7f0000000340)="b49c839082e22f879148963e32eebf02a709099e7fad069d30c4ec893fa5052d0205956d811d917c98e0b7bf761b73622a7891fa3c84fe49eccef52e51d7b6edc91a926468184e09b1997f689722f1d33672950c6bf1fd4e399a9eead70dfc78ada63a6f12044b19649eb4615d2d8a20930a76cc4964537268352acb5e348aceed9403ba3d135ea9276c0e15ec5a5fdde058f5a551ab047224874031ec8fe023c5591653de87cd0b83b89f4dd4c9adcefe65e70007e7729a9b2fe98bcdc268a6778e95e0b74cf14731adf99a17a0862b00", &(0x7f0000000440)=0xd1, &(0x7f0000000480)="432a21bf6e1d40e6bc61e5fcc63b73155d402bef8692b1e44c3cc59de79190ca1c80580a786f9ec511c254984e2b2787419615c67d23af171d0456c2ce28f054d9", 0x41) msgget(0x1, 0x4) sendmsg$unix(r1, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002c40)=ANY=[@ANYBLOB="10000000ffff000001"], 0x10}, 0x0) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x1700) r2 = open(&(0x7f0000000000)='./bus\x00', 0x80, 0x0) ioctl$BIOCSETF(r2, 0x80104267, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{0x7, 0x10, 0xff, 0x7}]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) ioctl$BIOCSRSIG(r2, 0x80044272, &(0x7f00000002c0)=0x7) 2.290800521s ago: executing program 0 (id=1135): r0 = open(&(0x7f0000000080)='./file0\x00', 0x200, 0x29) ioctl$WSMOUSEIO_SCALIBCOORDS(r0, 0x81205724, &(0x7f0000000100)={0x7fc, 0x9, 0x9, 0x0, 0x80000001, 0xa1b0, 0x40010001, 0x10, [{0x0, 0x2890, 0x5, 0x71002}, {0x406, 0xe, 0x20000008, 0xfffffff9}, {0x101, 0x6, 0xfffffffc, 0x9}, {0x4, 0x7fe, 0x800f, 0x7}, {0x20, 0xffff, 0x7, 0x9}, {0x3, 0x653, 0x3, 0x9b}, {0xce1, 0xffffffff, 0x4d4, 0x6}, {0x1000006, 0x0, 0x14, 0x3}, {0x2000002, 0x82, 0x6, 0x6}, {0x3, 0x8009, 0x1000}, {0x1c9, 0x4000004, 0xdaa1, 0x10003}, {0x3, 0xa, 0x8}, {0x4, 0x7, 0x89, 0x8}, {0x29a71717, 0x7f, 0x60, 0x7}, {0x1100c, 0x3, 0x9654, 0x4}, {0x0, 0x1, 0xfff, 0x30003}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) 2.271559816s ago: executing program 3 (id=1137): open(&(0x7f0000000240)='./file0\x00', 0x205, 0x0) ktrace(&(0x7f00000000c0)='./file0\x00', 0x4, 0x100, 0x0) r0 = getppid() msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f00000000c0)={{0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x4, 0x0, r0, r0, 0x0, 0x0, 0xfffffffffffffffd, 0x1}) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$WSKBDIO_GETMAP(r1, 0x80047476, &(0x7f0000000100)={0x0, 0x0}) r2 = fcntl$getown(r1, 0x5) ktrace(&(0x7f0000000000)='./file0\x00', 0x4, 0x40000604, r2) 2.219456726s ago: executing program 0 (id=1138): sysctl$hw(&(0x7f00000000c0)={0x6, 0x5}, 0x2, 0x0, &(0x7f0000000080), 0x0, 0x0) mknod(&(0x7f0000000040)='./bus\x00', 0x4, 0x1702) r0 = socket(0x800000018, 0x3, 0x0) setsockopt(r0, 0x1000000000029, 0x1a, &(0x7f0000000000), 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x80, 0x0) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{0x7, 0x10, 0xff, 0x7}]}) mknod(&(0x7f0000000200)='./file0\x00', 0x2000, 0x104129ff) open(&(0x7f0000000480)='./file0\x00', 0x20, 0x98) r2 = kqueue() kevent(r2, &(0x7f00000002c0)=[{{}, 0xfffffffffffffff6, 0x3, 0xf0000000, 0x10001, 0x10000}], 0x1, 0x0, 0x9b68, 0x0) kevent(r2, &(0x7f0000000200), 0x7fffffff, 0x0, 0x1200, 0x0) mknod(0x0, 0x1ffa, 0x0) open(0x0, 0x2, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x80, 0x13) ioctl$TIOCFLUSH(r3, 0x80047476, &(0x7f0000000000)=0xfffffffe) r4 = semget(0x0, 0x1, 0x281) ktrace(0x0, 0x4, 0x51d73188af82c397, 0xffffffffffffffff) socket(0x18, 0x1, 0x0) setgroups(0x0, 0x0) getrusage(0xffffffffffffffff, 0xffffffffffffffff) r5 = socket(0x18, 0x3, 0x0) ioctl$FIONREAD(r5, 0xc028698a, &(0x7f0000000100)) setuid(0xffffffffffffffff) semctl$GETZCNT(r4, 0x0, 0x7, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, 0x4012, 0xffffffffffffffff, 0x10000) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r6, 0x0, 0x17, 0x0, 0x0) mprotect(&(0x7f00004ff000/0x2000)=nil, 0x2000, 0x1) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x3, 0x9, 0x3, 0x101, 0x4, 0x80002001, 0x3, 0x10, [{0x2, 0xfe3, 0x6, 0x71800}, {0x6, 0xb7fe, 0x800002, 0x7}, {0x100006, 0x0, 0x8, 0x2}, {0x2, 0x0, 0x200, 0xfffffffe}, {0x10000, 0x3, 0x80000001, 0x7}, {0x2, 0x47fff, 0x14000009, 0xc}, {0x5, 0xbffffff5, 0x4, 0x6d}, {0x2000a, 0x8, 0xfdf0, 0x4}, {0x0, 0x7, 0x33, 0x80}, {0xfffffc00, 0x9, 0x8001, 0xfffffff5}, {0xa44f, 0x0, 0x48a, 0xe1}, {0x4b, 0x2, 0x8, 0x8}, {0x2000df, 0x9, 0x8, 0x3ff}, {0x8, 0xfffffffc, 0xfffffff5, 0xfffffff8}, {0x6, 0x5, 0x26, 0xf51}, {0x81, 0xd654, 0x3, 0x6}]}) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) 2.218642289s ago: executing program 2 (id=1139): syz_emit_ethernet(0x4e, &(0x7f0000000100)=ANY=[@ANYBLOB="8f6f77ede655aaaaaaaaaabb86dd605f000200183a01fe0100000000000000000000000000bbfe8000000000000000000000000000aa83"]) mknod(&(0x7f0000000000)='./bus\x00', 0x3a0914c44f7b202d, 0x504) r0 = open(&(0x7f0000000040)='./bus\x00', 0x10005, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x2012, r0, 0x200000000000000) open$dir(&(0x7f0000000040)='./file0\x00', 0xae828e137847f62, 0x0) r1 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x80, 0x20) openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x20, 0x0) preadv(r1, &(0x7f00000004c0)=[{0x0}], 0x1, 0x0) syz_extract_tcp_res(&(0x7f0000000000), 0xc, 0x0) 2.215719274s ago: executing program 3 (id=1140): r0 = dup2(0xffffffffffffff9c, 0xffffffffffffffff) ioctl$VMM_IOC_CREATE(r0, 0xc2585601, &(0x7f0000000000)={0x10, 0x2, [{&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x80000001}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x6}, {&(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff8000/0x4000)=nil, 0x7}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x4732d283}, {&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x779}, {&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, 0x5}, {&(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0xfffffffffffffff4}, {&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x1}, {&(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x8}, {&(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x1}, {&(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x100}, {&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, 0x4}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff8000/0x1000)=nil, 0x9}, {&(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x5}, {&(0x7f0000ff4000/0x9000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x5dc}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x2}], './file0\x00', 0xa1b}) acct(&(0x7f0000000200)='./file0\x00') getpeername$unix(r0, &(0x7f0000000240)=@abs, &(0x7f0000000280)=0x8) acct(&(0x7f00000002c0)='./file0\x00') bind(r0, &(0x7f0000000300)=@in6={0x18, 0x3, 0x5, 0x8000}, 0xc) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2) ioctl$FIONREAD(r0, 0x4004667f, &(0x7f0000000340)) mknodat(r0, &(0x7f0000000380)='./file0\x00', 0x1, 0x4a) mkdirat(r0, &(0x7f00000003c0)='./file0\x00', 0x14) preadv(r0, &(0x7f0000000880)=[{&(0x7f0000000400)=""/149, 0x95}, {&(0x7f00000004c0)=""/69, 0x45}, {&(0x7f0000000540)=""/96, 0x60}, {&(0x7f00000005c0)=""/145, 0x91}, {&(0x7f0000000680)=""/12, 0xc}, {&(0x7f00000006c0)=""/224, 0xe0}, {&(0x7f00000007c0)=""/163, 0xa3}], 0x7, 0x4) r1 = socket(0x10, 0x8000, 0x80) ioctl$FIOASYNC(r1, 0x8004667d, &(0x7f0000000900)=0x5) read(r0, &(0x7f0000000940)=""/26, 0x1a) ioctl$WSKBDIO_SETDEFAULTKEYREPEAT(r0, 0x800c5709, &(0x7f0000000980)={0x0, 0x4, 0x9f21}) ioctl$FIONREAD(r1, 0x4004667f, &(0x7f00000009c0)) lseek(r1, 0x9, 0x2) ioctl$BIOCGETIF(r0, 0x4020426b, &(0x7f0000000a00)={""/16, @ifru_metric}) r2 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000a40), 0x40, 0x0) ioctl$KDGETLED(r2, 0x40044b41, &(0x7f0000000a80)) unveil(&(0x7f0000000ac0)='./file0\x00', &(0x7f0000000b00)='W\x00') r3 = socket(0x18, 0x8000, 0x9) ioctl$WSDISPLAYIO_DELFONT(r0, 0x8058574f, &(0x7f0000000b40)={'./file0\x00', 0x9c, 0x0, 0x82, 0x0, 0x1, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffffffffffe}) ioctl$VNDIOCSET(r3, 0xc0384600, &(0x7f0000000c40)={&(0x7f0000000bc0)='./file0\x00', 0x1, &(0x7f0000000c00)='./file0\x00', 0x8}) pread(r1, &(0x7f0000000c80)="bc5efaaea733d93fecd55e5ccd7f3fffa7069828a57285c67185fe590886c791081e3ca37560bdb16fa496d7dc54cc982874d51a39a344695628b5c041cb77ef7bdb406d", 0x44, 0x7) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000d00), 0x80, 0x0) ioctl$FIONBIO(r4, 0x8004667e, &(0x7f0000000d40)=0x9) ioctl$WSDISPLAYIO_SETSCREEN(0xffffffffffffff9c, 0x80045756, &(0x7f0000000d80)=0x2) sendto$unix(0xffffffffffffffff, &(0x7f0000000dc0)="51d6ddf48a54b358e2c1f58493ad46cb50057fc9495b2a871ca5e8bd7a3acdaf23c713ce5d30a738b677b8407c05c3daf816726133d676329ed23edf2ca37de3cffad58277b6f61e159a1686a5cb4955ecc137435f1da985237f0e19cb0580f0e911757de19bec0853a18aa42a4ebb4d03ba74a603968e03966a3bacc2f0019f7a81503159183ac9f92326bc327edddf3b254f9556691ad3e4e2434529d5d8fc681fdd11b2e00da6c9d19640148f2bbd7e59189bc665b1b6b8f3d1e13bd588c04fe7b136d2b0132279a01d87af2b56e4d66c149d15adfea4713efe27e057859ee315973ae1fc014c3cee6a34dee73e", 0xef, 0x4, &(0x7f0000000ec0)=@abs={0x1, 0x0, 0x3}, 0x8) chroot(&(0x7f0000000f00)='./file0/file0\x00') 2.21561881s ago: executing program 2 (id=1141): sysctl$vm(&(0x7f0000003c00)={0x2, 0xc}, 0x1, &(0x7f0000003c40)="e3669c7ba81c", &(0x7f0000000000)=0x6, &(0x7f0000003d40)="cdfb26f44ad2b2", 0x7) 2.214963977s ago: executing program 2 (id=1142): link(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') (async) r0 = openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r1 = msgget$private(0x0, 0xe4) (async) ioctl$KDMKTONE(r0, 0x20004b08, &(0x7f00000000c0)=0x6) (async) r2 = shmget(0x1, 0x2000, 0x280, &(0x7f0000ffb000/0x2000)=nil) shmctl$IPC_STAT(r2, 0x2, &(0x7f0000000100)=""/103) getgroups(0x1, &(0x7f0000000180)=[0xffffffffffffffff]) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0x68, &(0x7f00000001c0)={{0x18, 0x0, 0xfffffff7, 0x2}, {0x18, 0x1, 0x4, 0xee6}, 0xffff, [0x0, 0x9, 0x4, 0x53, 0x8001, 0x7ff, 0x0, 0x1]}, 0x3c) (async) mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) (async) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000200), 0x10000, 0x0) ioctl$BIOCSDIRFILT(r3, 0x8004427d, &(0x7f0000000240)=0x2) (async) r4 = msgget$private(0x0, 0x408) msgctl$IPC_STAT(r4, 0x2, &(0x7f0000000280)=""/147) (async) r5 = openat$pf(0xffffffffffffff9c, &(0x7f0000000340), 0x80, 0x0) ioctl$WSKBDIO_GETKEYREPEAT(r0, 0x400c5708, &(0x7f0000000380)) (async) msgctl$IPC_RMID(r4, 0x0) (async, rerun: 64) ioctl$BIOCSRTIMEOUT(r5, 0x8010426d, &(0x7f00000003c0)={0x1, 0xe}) (rerun: 64) shmget$private(0x0, 0x3000, 0x4, &(0x7f0000ffa000/0x3000)=nil) r6 = msgget(0x1, 0x240) msgrcv(r6, &(0x7f0000000400)={0x0, ""/4096}, 0x1008, 0x0, 0x800) (async) getsockopt(r5, 0x872, 0xda4, &(0x7f0000001440)=""/177, &(0x7f0000001500)=0xb1) (async, rerun: 32) ioctl$WSKBDIO_GETENCODINGS(r0, 0xc0105715, &(0x7f0000001540)={0x1, [0x0]}) (async, rerun: 32) r7 = getpid() (async) r8 = getpid() setpgid(r7, r8) ioctl$WSDISPLAYIO_GINFO(r5, 0x40185741, &(0x7f0000001580)) (async, rerun: 32) msgsnd(r1, &(0x7f00000015c0)={0x0, "38dc88d7c1fb3f470bcd440c648bcf2fdae055dba6896606dc8d4c398506559d100f05163084b39363aca1c528"}, 0x35, 0x0) (async, rerun: 32) ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f0000001600)={'tap', 0x0}) accept$inet6(r5, &(0x7f0000001640), &(0x7f0000001680)=0xc) (async) munmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000) 1.148737135s ago: executing program 3 (id=1143): syz_open_pts() (async) r0 = syz_open_pts() fcntl$lock(r0, 0x9, &(0x7f0000000840)={0x2, 0x0, 0x5, 0x1000100000000}) flock(r0, 0x3) ioctl$TIOCSCTTY(r0, 0x20007461) flock(r0, 0x3) (async) flock(r0, 0x3) fcntl$lock(r0, 0x8, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x100000001}) 1.111020164s ago: executing program 6 (id=1144): r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000040)='./file1\x00', 0x2000, 0x429f) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1000, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000080)="8b11384532d7148c61d483aa9f5c731a", 0x10}], 0x1) ioctl$WSMOUSEIO_SETPARAMS(0xffffffffffffffff, 0x80105727, &(0x7f0000000080)={&(0x7f0000000040)}) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x1700) r1 = open(&(0x7f0000000300)='./bus\x00', 0x200, 0xa0) r2 = kqueue() kevent(r2, &(0x7f00000000c0), 0x100, &(0x7f0000000180)=[{{r1}, 0xffffffffffffffff, 0x13, 0x2}, {{r1}, 0xffffffffffffffff, 0x62}], 0x6, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000000), &(0x7f0000000100)=0xc) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e60) open(&(0x7f0000000080)='./file0\x00', 0x20, 0x20) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x802, 0x16, 0x1, 0x0, 0xfbffffff, 0x46e190f, 0x1000, 0x10, [{0x0, 0x4, 0x3}, {0xc5c, 0xc, 0x5, 0x1fb}, {0x800008, 0x9, 0x1fa, 0x7d2}, {0x7ffffffe, 0x3, 0x2, 0x784c}, {0x3fd, 0xc, 0x1002802, 0x6}, {0x7, 0xff, 0x3, 0xb}, {0x800000a, 0x0, 0x40, 0x2f}, {0x2, 0x836, 0x8000016, 0x7f}, {0x9, 0xf71, 0x24797519, 0x7}, {0x10001, 0xa74d9258, 0x1, 0x2}, {0x1, 0x5, 0x4, 0x412c8391}, {0x3, 0x9, 0x20008, 0x40000010}, {0x2, 0x7, 0x8, 0x3}, {0x29a71720, 0x81, 0x7, 0xf}, {0x400002, 0x7, 0xfffffffd, 0x100}, {0x200, 0x8, 0xf5, 0xc}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r3 = open(&(0x7f0000000080)='./file0\x00', 0x800, 0x40) ioctl$VNDIOCSET(r3, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r3, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffff7fd, 0x0}) ioctl$VNDIOCSET(r3, 0x80044403, &(0x7f0000000400)={0x0, 0xbffd, 0x0, 0x27}) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x65}) ioctl$FIOASYNC(r0, 0x8004667d, &(0x7f00000001c0)=0xbe) r4 = syz_open_pts() close(r4) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffff06000000aa"]) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) r5 = socket(0x2, 0x4001, 0x0) setsockopt(r5, 0x6, 0x4, &(0x7f0000000140)="924ecfd7", 0x4) setsockopt$sock_int(r5, 0xffff, 0x1, &(0x7f00000000c0)=0x7, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) connect$unix(r5, &(0x7f0000000240)=@abs={0x0, 0x0, 0x2}, 0x8) syz_open_pts() 1.110827102s ago: executing program 5 (id=1145): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x24, &(0x7f0000000180)="fd0cc085", 0x4) sendmsg(r0, &(0x7f0000000680)={&(0x7f0000000080)=@un=@abs={0x1, 0x0, 0x0}, 0xc, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="140000000000000024"], 0x72}, 0x0) chflagsat(0xffffffffffffffff, 0x0, 0x1, 0x51f4a9df2c8ea2d) r1 = socket(0x18, 0x3, 0x0) setsockopt(r1, 0x1000000029, 0x39, &(0x7f0000000000)="5ab7776a", 0x4) syz_emit_ethernet(0x10004, &(0x7f0000000000)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "db8344", 0xc8c8fb6356f239c1, 0x16, 0x0, @rand_addr="fe000000020000ff80d14400002000", @local={0xfe, 0x80, '\x00', 0x0}, {[], @udp={{0x0, 0x0, 0x8}}}}}}}) r2 = accept$inet6(0xffffffffffffff9c, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) read(r4, &(0x7f00000003c0)=""/4096, 0x1000) write(r3, &(0x7f0000003800)="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", 0xd04) sysctl$net_inet_icmp(&(0x7f0000000040)={0x4, 0x2, 0x1, 0x5}, 0x4, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) sysctl$net_inet_carp(&(0x7f0000000040)={0x4, 0x2, 0x6, 0x2}, 0x4, 0x0, 0x0, &(0x7f00000010c0)="e5000000", 0x4) getsockname(r2, &(0x7f0000000040)=@in, &(0x7f0000000080)=0xc) 1.110017444s ago: executing program 2 (id=1146): mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) (async) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x2) r1 = open(&(0x7f0000000100)='./file0\x00', 0x70e, 0x0) (async) ioctl$VNDIOCSET(r0, 0xc0184406, &(0x7f00000001c0)={0x0, 0x0, 0x0}) (async) sysctl$net_inet_tcp(&(0x7f0000000080)={0x4, 0x2, 0x6, 0x13}, 0x4, 0x0, &(0x7f0000000040)=0xfffffffffffffe83, 0x0, 0x0) (async) r2 = getpid() ktrace(&(0x7f0000000280)='./file0\x00', 0x0, 0x40000928, r2) r3 = getuid() setreuid(0xee00, r3) (async) r4 = semget(0x0, 0x1, 0x281) r5 = getgid() getgroups(0x7, &(0x7f0000000340)=[0x0, 0x0, 0xffffffffffffffff, 0x0, r5, 0xffffffffffffffff, 0xffffffffffffffff]) semctl$IPC_SET(r4, 0x0, 0x1, &(0x7f0000001440)={{0x3, 0x0, r5, 0x0, r6, 0x80, 0xfffd}, 0x23d, 0x6, 0x2}) (async) r7 = getppid() (async) r8 = getuid() (async) r9 = open(&(0x7f0000000080)='./file0\x00', 0x200, 0x29) ioctl$WSMOUSEIO_SCALIBCOORDS(r9, 0x81205724, &(0x7f0000000100)={0x7ff, 0x6, 0x9, 0x0, 0x80000001, 0xa1b0, 0x40010001, 0x10, [{0x0, 0x2890, 0x5, 0x71002}, {0x6, 0xe, 0x20000008, 0xfffffff9}, {0x101, 0x6, 0xfffffffc, 0x9}, {0x4, 0x800, 0x800f, 0x7}, {0x1c, 0xffff, 0x7, 0x9}, {0x1, 0x653, 0x3, 0x9b}, {0xce1, 0xffffffff, 0x4d4, 0x6}, {0x1000006, 0x0, 0x14, 0x5910}, {0x2000002, 0x85, 0x6, 0x6}, {0x3, 0x8009, 0x1000}, {0x1cc, 0x4, 0xdaa1, 0x3}, {0x3, 0xa, 0x8}, {0x4, 0x7, 0x89, 0x8}, {0x29a71717, 0x7f, 0x60, 0x7}, {0x1100c, 0x3, 0x9655, 0x4}, {0x0, 0x1, 0xfff, 0x30003}]}) (async) r10 = geteuid() r11 = getgid() fchownat(r9, &(0x7f0000000240)='./file0\x00', r10, r11, 0x6) r12 = getpid() dup(r0) ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x40000530, r12) (async) r13 = geteuid() (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$sock_cred(r14, 0xffff, 0x1022, &(0x7f0000000580)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) chown(&(0x7f00000003c0)='./file0\x00', 0x0, r15) sendmsg$unix(r0, &(0x7f00000026c0)={&(0x7f00000014c0)=@abs={0x1, 0x0, 0x2}, 0x8, &(0x7f00000025c0)=[{&(0x7f0000001500)="1e954517e83a13658e2800b69f2c8729de6907c0bb03159287450b8edf8d744ffdd26758711a76909a5787d62b02d38a1c962b078da272f1670af1cfd6468fa67cbf0d7814640d62a206feea50a33b73c15863c47c1098d4bf4555b827d61a6d4d0500907b6ed69c4e7b7d9ee1d47ba30ad69758919b088cf9354b7300c0d24ccdabe891277dbfb20c18c00dc200fb6154fb1b", 0x93}, {&(0x7f00000015c0)="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", 0x1000}], 0x2, &(0x7f0000002600)=[@rights={0x18, 0xffff, 0x1, [r1]}, @rights={0x20, 0xffff, 0x1, [r1, r0, r1]}, @rights={0x18, 0xffff, 0x1, [r0]}, @cred={0x20, 0xffff, 0x0, r2, r3, r5}, @cred={0x20, 0xffff, 0x0, r7, r8, r11}, @cred={0x20, 0xffff, 0x0, r12, r13, r15}], 0xb0}, 0x406) 1.109757778s ago: executing program 2 (id=1147): chmod(&(0x7f0000000040)='.\x00', 0x35e) open(&(0x7f0000000100)='./file0/file0\x00', 0x200, 0x0) setuid(0xee01) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000300)="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", 0xfe}], 0x1) execve(0x0, 0x0, 0x0) r1 = socket(0x11, 0x3, 0x0) sendto$unix(r1, &(0x7f00000000c0)="b1000504000004000000000007000000331c13fecea10500fef96ec0c79f050000e30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42121000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba220f54f4fcf668246c0900e1937c727a4bdb8d000008e371a3f034371205", 0xb1, 0x0, 0x0, 0x0) unveil(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='r\x00') 1.305019ms ago: executing program 2 (id=1148): mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6381) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xffffff7fffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0xc, 0x2000000000000004}, 0x0, 0x0, 0x0) r0 = kqueue() kevent(r0, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x10, 0x100) ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file0\x00', 0x248f, 0x20080, 0xffff, 0x1, 0x39, 0xe4e, 0x4040001, 0x2, 0x0, 0x1, 0x6}) ioctl$FIONBIO(r1, 0x82907003, &(0x7f0000000140)=0x2) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x6384) r2 = open(&(0x7f0000000040)='./bus\x00', 0x80, 0x100) setgid(0xffffffffffffffff) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000b40)="00000000c21e6ed7eda4f5903abf65b18d7c51f78b06cc3a5840c04c2a649b1400000000fafd3493776665d4cd12c63d34", 0x31}], 0x1, 0x0, 0x0, 0xd}, 0x2) r3 = openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x200, 0x0) ioctl$TIOCSETA(r3, 0xc4504449, &(0x7f0000000740)={0x0, 0x4000, 0x2f00, 0xf, "3901224200", 0x2007, 0x10}) ioctl$FIONBIO(r2, 0x82907003, &(0x7f0000000140)=0x1) close(r1) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6381) (async) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xffffff7fffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0xc, 0x2000000000000004}, 0x0, 0x0, 0x0) (async) kqueue() (async) kevent(r0, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) (async) open(&(0x7f0000000080)='./file0\x00', 0x10, 0x100) (async) ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file0\x00', 0x248f, 0x20080, 0xffff, 0x1, 0x39, 0xe4e, 0x4040001, 0x2, 0x0, 0x1, 0x6}) (async) ioctl$FIONBIO(r1, 0x82907003, &(0x7f0000000140)=0x2) (async) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) (async) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x6384) (async) open(&(0x7f0000000040)='./bus\x00', 0x80, 0x100) (async) setgid(0xffffffffffffffff) (async) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000b40)="00000000c21e6ed7eda4f5903abf65b18d7c51f78b06cc3a5840c04c2a649b1400000000fafd3493776665d4cd12c63d34", 0x31}], 0x1, 0x0, 0x0, 0xd}, 0x2) (async) openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x200, 0x0) (async) ioctl$TIOCSETA(r3, 0xc4504449, &(0x7f0000000740)={0x0, 0x4000, 0x2f00, 0xf, "3901224200", 0x2007, 0x10}) (async) ioctl$FIONBIO(r2, 0x82907003, &(0x7f0000000140)=0x1) (async) close(r1) (async) 211.304µs ago: executing program 4 (id=1126): openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x10000, 0x0) ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x0, 0xb3f, {[0xd5, 0x0, 0x8, 0x100200000, 0x3, 0x8, 0xdf60, 0xfffffffffffffffe, 0x0, 0x2f01, 0x93, 0x3, 0xffffffffffffffff, 0x200000000002, 0xf, 0x4, 0xfffffffffffffffe, 0x8000000000000001], [0xfffffffffffffffe, 0x80000001, 0xfffffffffffffffd, 0x525, 0x6, 0x200000000207b98, 0x80000000000001fe, 0x0, 0x0, 0x8], [0x100000001, 0x8000, 0x3ffffffe, 0x0, 0xb, 0x11004, 0xffffffff00000001], [0x1, 0x1fffffffffb, 0x7ffffffffffffffc, 0x100000000, 0xfffffffffffffffe, 0x1], [{0x0, 0x0, 0x0, 0x7d02}, {0x8, 0x22, 0x5, 0xffffffbffffffff9}, {0x4, 0x4, 0xfffffffe, 0x80}, {0x2, 0xd, 0x5, 0xffffffffffffffff}, {0x0, 0x2, 0x207f, 0xb}, {0x0, 0x9, 0xe7, 0x2000000000000002}, {0x7f, 0x0, 0xfffffff9}, {0x0, 0x100, 0x0, 0x8}], {0x1, 0x5, 0x7, 0x3}, {0xfbfe, 0x9, 0x6d5, 0x4}}}) r0 = kqueue() kevent(r0, &(0x7f0000000000), 0x3ff, 0x0, 0x8000800, 0x0) close(r0) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@random="b905f0ffffff", @empty, [], {@ipv4={0x8847, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x29, 0x0, @empty, @broadcast}, @udp={{0x1, 0x3, 0x8}}}}}}) syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0) 0s ago: executing program 4 (id=1149): r0 = geteuid() getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000040), &(0x7f0000000080)=0xc) (async) getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) lchown(&(0x7f0000000000)='./file0\x00', r0, r2) (async) lchown(&(0x7f0000000000)='./file0\x00', r0, r2) close(0xffffffffffffffff) r3 = openat$wskbd(0xffffffffffffff9c, &(0x7f00000000c0), 0x20, 0x0) ioctl$WSKBDIO_SETENCODING(r3, 0x80045710, &(0x7f0000000100)=0xbc) mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) (async) mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) select(0x40, &(0x7f0000000140)={0x3, 0x10000, 0x401, 0x0, 0x3fb3, 0x10, 0x2, 0x4}, &(0x7f0000000180)={0x0, 0x6, 0x3, 0x80000001, 0x8, 0x0, 0x1, 0x8}, &(0x7f00000001c0)={0xd54, 0x8, 0x8, 0x6, 0x401, 0x16c, 0x9, 0xb0}, &(0x7f0000000200)={0x5, 0x4}) (async) select(0x40, &(0x7f0000000140)={0x3, 0x10000, 0x401, 0x0, 0x3fb3, 0x10, 0x2, 0x4}, &(0x7f0000000180)={0x0, 0x6, 0x3, 0x80000001, 0x8, 0x0, 0x1, 0x8}, &(0x7f00000001c0)={0xd54, 0x8, 0x8, 0x6, 0x401, 0x16c, 0x9, 0xb0}, &(0x7f0000000200)={0x5, 0x4}) select(0x40, &(0x7f0000000240)={0x6, 0xffff, 0x3, 0xc7, 0xe, 0x101, 0x6, 0x2}, &(0x7f0000000280)={0x0, 0x3, 0x3, 0xbbfd, 0xffff, 0x2, 0x4, 0xffffffffcc0d43bc}, &(0x7f00000002c0)={0x6, 0x10f, 0x101, 0x9, 0x0, 0x10, 0x5, 0x7}, &(0x7f0000000300)={0x48, 0x1}) (async) select(0x40, &(0x7f0000000240)={0x6, 0xffff, 0x3, 0xc7, 0xe, 0x101, 0x6, 0x2}, &(0x7f0000000280)={0x0, 0x3, 0x3, 0xbbfd, 0xffff, 0x2, 0x4, 0xffffffffcc0d43bc}, &(0x7f00000002c0)={0x6, 0x10f, 0x101, 0x9, 0x0, 0x10, 0x5, 0x7}, &(0x7f0000000300)={0x48, 0x1}) r4 = open$dir(&(0x7f0000000340)='./file0\x00', 0x1, 0x80) unlinkat(r4, &(0x7f0000000380)='./file0/file0\x00', 0x8) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mkdir(&(0x7f0000000400)='./file0/file0\x00', 0x21) (async) mkdir(&(0x7f0000000400)='./file0/file0\x00', 0x21) poll(&(0x7f0000000440)=[{r4, 0x2}, {r3, 0x56d355bd62a71eb8}, {r5}, {r5, 0x8}, {r4, 0x4}, {r4, 0x1}], 0x6, 0x7) write(r3, &(0x7f0000000480)="a8a9d07e22e0f8523003e4884e2bc97292a7c6a5f10cc1e825953c19b5a3a1bc493f71686760c9071249c807d5da0620413575b2630e22bc933d30b5687d67a20ba65dcae54a578118b212c24f474e568d0fe952b34b624aff6eec1e64837603b55b3b2686656af41c93a881f77e21f6f6312fbb7d11e6bd3bfca78aec0aafde576825a7e3e12998aad2f6ed278429275cbc08be969a77f1ae583e8991bc1107f3ab89aebfbff1d3cbd527aa6b4de8debf0338d7235e41ed1143391989b98a43041627a290de65166ac5de45690bc997e0d032db245285c07aeba7bf107544584635e525ce3ab7bbdc1f8913ee3b56b5e1f2acd1ee490307e6", 0xf9) r7 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000580), 0x100, 0x0) ioctl$VT_GETACTIVE(r7, 0x40047607, &(0x7f00000005c0)) select(0x40, &(0x7f0000000600)={0xf, 0x9, 0xf, 0x6, 0x0, 0x1, 0x7, 0x1c000}, &(0x7f0000000640)={0x300000000000, 0x2, 0x0, 0x6, 0x0, 0x80, 0x9, 0x7}, &(0x7f0000000680)={0x8, 0xfffffffffffffff4, 0x0, 0xca46, 0x7, 0x8, 0x8, 0x25}, &(0x7f00000006c0)={0x8000, 0x8000}) (async) select(0x40, &(0x7f0000000600)={0xf, 0x9, 0xf, 0x6, 0x0, 0x1, 0x7, 0x1c000}, &(0x7f0000000640)={0x300000000000, 0x2, 0x0, 0x6, 0x0, 0x80, 0x9, 0x7}, &(0x7f0000000680)={0x8, 0xfffffffffffffff4, 0x0, 0xca46, 0x7, 0x8, 0x8, 0x25}, &(0x7f00000006c0)={0x8000, 0x8000}) ioctl$FIONBIO(r3, 0x8004667e, &(0x7f0000000700)=0x16e) (async) ioctl$FIONBIO(r3, 0x8004667e, &(0x7f0000000700)=0x16e) munmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000) (async) munmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000) recvfrom$unix(r6, &(0x7f0000000740)=""/4096, 0x1000, 0x1, &(0x7f0000001740)=@abs={0x1, 0x0, 0x3}, 0x8) shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) ioctl$BIOCSRTIMEOUT(0xffffffffffffffff, 0x8010426d, &(0x7f0000001780)={0x1, 0x3}) setsockopt$sock_cred(r6, 0xffff, 0x1022, &(0x7f00000017c0)={r1, r0, r2}, 0xc) r8 = openat$tty(0xffffffffffffff9c, &(0x7f0000001800), 0x8000, 0x0) r9 = dup(r8) getsockopt$sock_timeval(r9, 0xffff, 0x1005, &(0x7f0000001840), &(0x7f0000001880)=0x10) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r4, 0xfffffffffffffff8) (async) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r4, 0xfffffffffffffff8) getsockopt$sock_timeval(r9, 0xffff, 0x1006, &(0x7f00000018c0), &(0x7f0000001900)=0x10) sysctl$kern(&(0x7f0000001940)={0x1, 0x3}, 0x2, &(0x7f0000001980)="93f679a485f2b1df90edfb818e5da9139ee8dff1819f909c3a86eee0b04e927ffb167c2d49b1ec318ea27ff2c7cce15a02d71fe39779a421c1090a0f82da8206e552b1de5e8215eefe9c2844f662d990dbd7a20282826587998bfe67a9998e49fb4c09f75cd929fb8460b4afa0ff230a364ddfeda13f0910cec40bf11940c96599d379524fc2f6e36495d1da9c3b200327ead8f115a15ba8c8179b5d2f04f89630068f605789ac78c32e8dbed8c1506254190ba514459800c0a0ed8baa018101f53d14bc3abe6e7dea", &(0x7f0000001a80)=0xc9, &(0x7f0000001ac0)="050514b8da60cb0f2facc5f9285f32ebe53d6cd3040234c162b4e2cced72c716637b41a1b5f21c5fbb36dadb16d4a4b2fb187d952f38427d5065b017afdedd974146c17b7049656890b5dd503ce80eacfbe63fb862e9972f004e9fec72177d5d110570d06050f68562eb96af22389447a82c81856822746041d4091deb21db708fd93b4ed36f26289c075c8cb4453a9688e90f5d0a09f945c82fdc8c27880296de9536d90931386d8ab16f3f50a11b2706e4678197eeda70cc0ae0ea22c8d48e62e91f6fed45f1b85f6929e501a85289946c25ae3c45d62d74de2a9d702a99748751ec629ed0ac784b1962a2", 0xec) kernel console output (not intermixed with test programs): OpenBSD/amd64 (ci-openbsd-multicore-0.us-central1-b.c.syzkaller.internal) (tty00) Warning: Permanently added '10.128.1.16' (ED25519) to the list of known hosts. login: uvn_flush: obj=0xfffffd806c181dd0, offset=0x0. error during pageout. uvn_flush: WARNING: changes to page may be lost!  OpenBSD/amd64 (F:cG|osw'HeԷ;/)sG=/f}Z qx3b~a$iDIQDZa;R) (tty00) login: pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pppx: unable to set addresses for pppx1, error=17 pppx: unable to set addresses for pppx2, error=17 pckbd_enable: command error load: 6.87 not a controlling terminal load: 6.87 not a controlling terminal OpenBSD/amd64 (d??*brb In.ދ4jwW*@3fb!l8\STymzg]"etL)rimj), =U]21ng-qEHaCww$_ lq[A<Ϊ_b7gEWv(ZW~G X) (tty00) login: pckbd_enable: command error panic: kernel diagnostic assertion "rn != NULL" failed: file "/syzkaller/managers/multicore/kernel/sys/net/pipex.c", line 459 Starting stack trace... panic(ffffffff834510ef) at panic+0x1d0 __assert(ffffffff8348bb2c,ffffffff834a45f5,1cb,ffffffff83443957) at __assert+0x29 pipex_unlink_session_locked(ffff8000367a8e00) at pipex_unlink_session_locked+0x429 pipex_destroy_all_sessions(ffff800001608000) at pipex_destroy_all_sessions+0xd9 pppacclose(6384,81,2000,ffff8000fffea7e8) at pppacclose+0x16f spec_close(ffff80003c403090) at spec_close+0x417 VOP_CLOSE(fffffd80724dda40,81,fffffd80097fd5b0,ffff8000fffea7e8) at VOP_CLOSE+0x132 vn_closefile(fffffd806d4f00b8,ffff8000fffea7e8) at vn_closefile+0x12b fdrop(fffffd806d4f00b8,ffff8000fffea7e8) at fdrop+0x121 closef(fffffd806d4f00b8,ffff8000fffea7e8) at closef+0x192 fdfree(ffff8000fffea7e8) at fdfree+0x116 exit1(ffff8000fffea7e8,0,0,1) at exit1+0x576 sys_exit(ffff8000fffea7e8,ffff80003c403400,ffff80003c403350) at sys_exit+0x1a syscall(ffff80003c403400) at syscall+0xb17 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7215500654c0, count: 242 End of stack trace. WARNING: SPL NOT LOWERED ON SYSCALL 91 -136258184 EXIT 0 3 Stopped at savectx+0xae: movl $0,%gs:0x688 TID PID UID PRFLAGS PFLAGS CPU COMMAND *495096 25425 0 0x2 0 0 syz-executor savectx() at savectx+0xae end of kernel end trace frame: 0x7bd0f7e0dd60, count: 14 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{0}> set $lines = 0 ddb{0}> set $maxwidth = 0 ddb{0}> show panic *cpu1: kernel diagnostic assertion "rn != NULL" failed: file "/syzkaller/managers/multicore/kernel/sys/net/pipex.c", line 459 ddb{0}> trace savectx() at savectx+0xae end of kernel end trace frame: 0x7bd0f7e0dd60, count: -1 ddb{0}> show registers rdi 0 rsi 0 rbp 0xffff80002a2ceba0 rbx 0 rdx 0 rcx 0xffff8000ffffd4c8 rax 0x3b r8 0xffff80002a2cead0 r9 0 r10 0x502d8777ab2c7e4d r11 0x352c58fb139f81fa r12 0 r13 0 r14 0xffff8000ffffd4c8 r15 0 rip 0xffffffff8291d3ee savectx+0xae cs 0x8 rflags 0x46 rsp 0xffff80002a2ceb20 ss 0 savectx+0xae: movl $0,%gs:0x688 ddb{0}> show proc PROC (syz-executor) tid=495096 pid=25425 tcnt=1 stat=onproc flags process=2 proc=0 runpri=32, usrpri=78, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff80002a243c98,0xffff8000ffffdca0 process=0xffff8000ffff04e0 user=0xffff80002a2c9000, vmspace=0xfffffd806ea953e0 estcpu=28, cpticks=55, pctcpu=0.14, user=2, sys=52, intr=1 ddb{0}> ps PID TID PPID UID S FLAGS WAIT COMMAND 67534 291652 76947 0 2 0 syz-executor 67534 118413 76947 0 2 0x4000000 syz-executor 67534 440140 76947 0 3 0x4000080 fsleep syz-executor 864 203666 78386 0 3 0x90 fsleep syz-executor 864 68151 78386 0 2 0x4000010 syz-executor 79507 433931 33283 0 3 0x80 fsleep syz-executor 79507 31317 33283 0 3 0x4000080 piperd syz-executor 16214 358797 11412 0 3 0x80 fsleep syz-executor 16214 33894 11412 0 3 0x4000080 fifor syz-executor 27460 328331 59839 0 3 0x80 fsleep syz-executor 27460 180980 59839 0 3 0x4000080 lockf syz-executor 27460 397113 59839 0 3 0x4000080 fsleep syz-executor 97445 172145 25425 0 3 0x80 fsleep syz-executor 97445 437749 25425 0 3 0x4000080 kqread syz-executor 76947 200370 4857 0 2 0xc82 syz-executor 33283 306249 4857 0 2 0xc82 syz-executor 42348 300612 41262 60929 3 0x3010 suspend syz-executor 42348 259268 41262 60929 2 0x4081010 syz-executor 42348 383489 41262 60929 3 0x4081010 inode syz-executor 42348 303931 41262 60929 3 0x4081010 inode syz-executor 41262 253227 4857 0 3 0x82 wait syz-executor 16525 315730 1 0 2 0x100083 getty 78386 139844 4857 0 2 0xc82 syz-executor 80968 423424 0 0 3 0x14200 acct acct 56821 356488 4857 0 2 0xc82 syz-executor 11412 452599 4857 0 2 0xc82 syz-executor 59839 450719 4857 0 2 0xc82 syz-executor *25425 495096 4857 0 7 0x2 syz-executor 4857 212552 86295 0 2 0x2 syz-executor 86295 447939 87627 0 3 0x10008a sigsusp ksh 87627 477812 64005 0 3 0x98 kqread sshd-session 64005 15695 49555 0 3 0x92 kqread sshd-session 49555 457132 1 0 3 0x88 kqread sshd 9106 287209 664 74 3 0x1100092 bpf pflogd 664 483914 1 0 3 0x80 sbwait pflogd 69523 91620 27528 73 2 0x1100090 syslogd 27528 245460 1 0 3 0x100082 sbwait syslogd 38402 327712 1 0 3 0x100080 kqread resolvd 65089 27586 67947 77 3 0x100092 kqread dhcpleased 31507 6368 67947 77 2 0x100012 dhcpleased 67947 182710 1 0 3 0x80 kqread dhcpleased 54078 65217 0 0 3 0x14200 bored smr 79603 121296 0 0 3 0x14200 pgzero zerothread 57117 184762 0 0 3 0x14200 aiodoned aiodoned 34443 125853 0 0 3 0x14200 syncer update 32500 176056 0 0 3 0x14200 cleaner cleaner 75441 326770 0 0 3 0x14200 reaper reaper 57676 149397 0 0 3 0x14200 pgdaemon pagedaemon 7667 22948 0 0 3 0x14200 bored viomb 36156 403311 0 0 3 0x40014200 acpi0 acpi0 36144 96914 0 0 3 0x40014200 idle1 63038 299809 0 0 3 0x14200 bored softnet1 98594 293831 0 0 2 0x14200 softnet0 96883 205453 0 0 3 0x14200 bored systqmp 40810 503424 0 0 3 0x14200 bored systq 35387 307797 0 0 3 0x14200 tmoslp softclockmp 885 68102 0 0 3 0x40014200 tmoslp softclock 4867 27622 0 0 3 0x40014200 idle0 1 409390 0 0 3 0x82 wait init 0 0 -1 0 3 0x10010200 scheduler swapper ddb{0}> show all locks CPU 1: exclusive mutex /syzkaller/managers/multicore/kernel/sys/net/pipex.c:78 r = 0 (0xffffffff838d7d90) #0 witness_lock+0x5f1 #1 mtx_enter+0x4b4 #2 pipex_destroy_all_sessions+0x2f #3 pppacclose+0x16f #4 spec_close+0x417 #5 VOP_CLOSE+0x132 #6 vn_closefile+0x12b #7 fdrop+0x121 #8 closef+0x192 #9 fdfree+0x116 #10 exit1+0x576 #11 sys_exit+0x1a #12 syscall+0xb17 #13 Xsyscall+0x128 Process 42348 (syz-executor) thread 0xffff80002a25aa78 (259268) Process 42348 (syz-executor) thread 0xffff80002a25a7e0 (383489) ddb{0}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 11097 12171K 12394K 166960K 13789 0 pcb 20 15K 17K 166960K 355 0 rtable 192 11K 11K 166960K 699 0 pf 32 17K 19K 166960K 160 0 ifaddr 34 6K 7K 166960K 128 0 ifgroup 51 2K 2K 166960K 201 0 sysctl 4 1K 9K 166960K 18 0 counters 70 36K 38K 166960K 234 0 ioctlops 0 0K 8K 166960K 1792 0 iov 0 0K 32K 166960K 64 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1348 85K 85K 166960K 2405 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 3 5K 9K 166960K 22 0 VM map 2 1K 1K 166960K 2 0 sem 12 0K 0K 166960K 80 0 dirhash 12 2K 2K 166960K 21 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 18 65K 89K 166960K 1343 0 sigio 0 0K 0K 166960K 91 0 proc 76 131K 180K 166960K 791 0 subproc 72 4K 4K 166960K 109 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 105 0 in_multi 65 4K 7K 166960K 199 0 ether_multi 1 0K 0K 166960K 23 0 mrt 2 0K 0K 166960K 34 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 217 970K 970K 166960K 217 0 exec 0 0K 1K 166960K 633 0 fusefs mount 1 32K 32K 166960K 1 0 pfkey data 0 0K 0K 166960K 4 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 244 159K 177K 166960K 14113 0 UVM aobj 45 16K 16K 166960K 50 0 pinsyscall 43 86K 100K 166960K 2632 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 1K 166960K 97 0 NDP 11 0K 2K 166960K 90 0 temp 69 9082K 9337K 166960K 54199 0 kqueue 16 24K 32K 166960K 267 0 SYN cache 2 16K 16K 166960K 2 0 ddb{0}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 26 0 0 1 0 1 1 0 8 0 rtpcb 120 183 0 180 3 2 1 3 0 8 0 rtentry 176 190 0 120 5 0 5 5 0 8 0 unpcb 144 1001 0 949 9 6 3 6 0 8 1 syncache 336 9 0 9 3 3 0 1 0 8 0 tcpqe 32 2 0 2 1 1 0 1 0 8 0 tcpcb 736 501 0 494 8 7 1 7 0 8 0 arp 136 29 0 17 1 0 1 1 0 8 0 inpcb 328 1543 0 1529 17 14 3 10 0 8 1 nd6 152 41 0 23 1 0 1 1 0 8 0 pkpcb 40 12 0 12 2 2 0 1 0 8 0 kcovpl 48 12 0 4 1 0 1 1 0 8 0 mppekey 1024 1 0 1 1 1 0 1 0 8 0 ppxss 1192 65 0 64 2 1 1 1 0 8 0 pppxif 1576 6 0 6 3 2 1 1 0 8 1 pffrag 232 30 0 20 1 0 1 1 0 482 0 pffrnode 88 30 0 20 1 0 1 1 0 8 0 pffrent 40 51 0 41 1 0 1 1 0 8 0 pfosfp 40 1428 0 1005 5 0 5 5 0 8 0 pfosfpen 112 1428 0 714 21 0 21 21 0 8 0 pfrktable 1344 1 0 1 1 1 0 1 0 8 0 pfstitem 24 92 0 32 1 0 1 1 0 8 0 pfstkey 128 92 0 32 2 0 2 2 0 8 0 pfstate 448 92 0 32 7 0 7 7 0 8 0 pfrule 1360 21 0 16 2 1 1 2 0 8 0 rttmr 136 2 0 2 1 0 1 1 0 8 1 art_heap8 4096 5 0 2 4 0 4 4 0 8 1 art_heap4 256 900 0 575 36 12 24 29 0 8 3 art_table 40 905 0 577 5 0 5 5 0 8 0 art_node 32 189 0 128 1 0 1 1 0 8 0 sysvmsgpl 40 23 0 19 1 0 1 1 0 8 0 semupl 112 2 0 2 2 2 0 1 0 8 0 semapl 112 77 0 67 1 0 1 1 0 8 0 shmpl 112 41 0 5 2 0 2 2 0 8 0 dirhash 1024 23 0 6 3 0 3 3 0 8 0 dino2pl 256 3943 0 2477 93 0 93 93 0 8 0 ffsino 296 3943 0 2477 114 0 114 114 0 8 0 nchpl 144 5789 0 4065 64 0 64 64 0 8 0 rtmask 32 11 0 10 3 2 1 1 0 8 0 vnodes 216 4571 0 0 254 0 254 254 0 8 0 namei 1024 20845 0 20843 3 2 1 2 0 8 0 percpumem 16 132 0 82 1 0 1 1 0 8 0 vcpupl 3968 6 0 0 1 0 1 1 0 8 0 vmpool 848 6 0 0 1 0 1 1 0 8 0 kstatmem 264 132 0 106 5 2 3 3 0 8 1 scsiplug 72 7 0 7 2 1 1 1 0 8 1 scxspl 216 47130 0 47129 12 10 2 8 1 8 1 plimitpl 152 457 0 439 1 0 1 1 0 8 0 sigapl 424 1660 0 1611 7 1 6 7 0 8 0 knotepl 120 585 0 0 18 0 18 18 0 8 0 kqueuepl 224 524 0 511 7 6 1 5 0 8 0 pipepl 344 326 0 298 7 4 3 6 0 8 0 fdescpl 528 1641 0 1609 3 0 3 3 0 8 0 filepl 160 10747 0 10482 26 12 14 20 0 8 1 lockfpl 104 732 0 726 2 1 1 2 0 8 0 lockfspl 48 274 0 269 1 0 1 1 0 8 0 sessionpl 144 32 0 23 1 0 1 1 0 8 0 pgrppl 48 62 0 45 1 0 1 1 0 8 0 ucredpl 104 1477 0 1461 1 0 1 1 0 8 0 zombiepl 144 1816 0 1814 1 0 1 1 0 8 0 processpl 1232 1660 0 1611 5 0 5 5 0 8 0 procpl 664 3698 0 3638 6 0 6 6 0 8 0 sosppl 176 6 0 6 3 3 0 1 0 8 0 sockpl 752 2780 0 2711 29 20 9 16 0 8 2 mcl64k 65536 8 0 0 1 0 1 1 0 8 0 mcl16k 16384 6 0 0 1 0 1 1 0 8 0 mcl12k 12288 1 0 0 1 0 1 1 0 8 0 mcl9k 9216 1 0 0 1 0 1 1 0 8 0 mcl8k 8192 2 0 0 1 0 1 1 0 8 0 mcl4k 4096 123 0 0 16 0 16 16 0 8 1 mcl2k 2048 35 0 0 5 1 4 5 0 8 0 mtagpl 96 139 0 0 4 0 4 4 0 8 0 mbufpl 256 1205 0 0 75 0 75 75 0 8 0 bufpl 280 19723 0 13592 439 0 439 439 0 8 0 anonpl 32 12762 0 0 103 0 103 103 0 246 0 amapchunkpl 152 46069 0 45544 38 11 27 33 0 158 5 amappl16 200 6363 0 6106 40 24 16 28 0 8 2 amappl15 192 79 0 79 2 2 0 1 0 8 0 amappl14 184 478 0 476 1 0 1 1 0 8 0 amappl13 176 140 0 128 1 0 1 1 0 8 0 amappl12 168 1911 0 1880 2 0 2 2 0 8 0 amappl11 160 5 0 5 1 1 0 1 0 8 0 amappl10 152 67 0 53 1 0 1 1 0 8 0 amappl9 144 271 0 270 1 0 1 1 0 8 0 amappl8 136 116 0 113 1 0 1 1 0 8 0 amappl7 128 191 0 177 1 0 1 1 0 8 0 amappl6 120 195 0 194 1 0 1 1 0 8 0 amappl5 112 100 0 89 1 0 1 1 0 8 0 amappl4 104 325 0 304 1 0 1 1 0 8 0 amappl3 96 9574 0 9450 4 0 4 4 0 8 0 amappl2 88 620 0 555 2 0 2 2 0 8 0 amappl1 80 16293 0 15682 22 8 14 17 0 8 0 amappl 88 13083 0 12910 5 0 5 5 0 92 0 uvmvnodes 80 134 0 0 3 0 3 3 0 8 0 dma32768 32768 2 0 2 2 2 0 1 0 8 0 dma8192 8192 1 0 1 1 0 1 1 0 8 1 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma512 512 1 0 1 1 1 0 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 255 0 255 3 3 0 1 0 8 0 dma64 64 8 0 8 3 3 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 20 0 19 1 0 1 1 0 8 0 aobjpl 72 49 0 5 1 0 1 1 0 8 0 uaddrrnd 24 1641 0 1609 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 1641 0 1609 1 0 1 1 0 8 0 vmmpekpl 168 15337 0 15283 3 0 3 3 0 8 0 vmmpepl 168 113163 0 110934 115 10 105 111 0 357 6 vmsppl 488 1640 0 1609 7 2 5 5 0 8 0 rwobjpl 80 33017 0 31652 38 6 32 33 0 8 0 pdppl 4096 3301 0 3224 119 40 79 83 0 8 2 pvpl 32 20935 0 0 171 2 169 169 0 265 0 pmappl 256 1646 0 1609 3 0 3 3 0 8 0 extentpl 40 45 0 27 1 0 1 1 0 8 0 phpool 112 388 0 72 10 0 10 10 0 8 0 ddb{0}> machine ddbcpu 0 Invalid cpu 0 ddb{0}> trace savectx() at savectx+0xae end of kernel end trace frame: 0x7bd0f7e0dd60, count: -1 ddb{0}> machine ddbcpu 1 Stopped at x86_ipi_db+0x27: addq $0x8,%rsp x86_ipi_db(ffff8000299bdff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __mp_lock(ffffffff83a79b80) at __mp_lock+0x192 __mp_acquire_count(ffffffff83a79b80,2) at __mp_acquire_count+0x58 tsleep_nsec(fffffd806d8b1d38,11,ffffffff834f580a,ffffffffffffffff) at tsleep_nsec+0x23d biowait(fffffd806d8b1d38) at biowait+0xc6 bwrite(fffffd806d8b1d38) at bwrite+0x2e7 ffs_update(fffffd806c5f9718,1) at ffs_update+0x2fe ffs_truncate(fffffd806c5f9718,0,0,ffffffffffffffff) at ffs_truncate+0xc9b ufs_inactive(ffff80003c402cb0) at ufs_inactive+0x202 VOP_INACTIVE(fffffd805c2ad960,ffff8000fffea7e8) at VOP_INACTIVE+0x104 vput(fffffd805c2ad960) at vput+0xe5 vn_close(fffffd805c2ad960,2,ffffffffffffffff,ffff8000fffea7e8) at vn_close+0xb7 end trace frame: 0xffff80003c402dc0, count: 0 ddb{1}> trace x86_ipi_db(ffff8000299bdff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __mp_lock(ffffffff83a79b80) at __mp_lock+0x192 __mp_acquire_count(ffffffff83a79b80,2) at __mp_acquire_count+0x58 tsleep_nsec(fffffd806d8b1d38,11,ffffffff834f580a,ffffffffffffffff) at tsleep_nsec+0x23d biowait(fffffd806d8b1d38) at biowait+0xc6 bwrite(fffffd806d8b1d38) at bwrite+0x2e7 ffs_update(fffffd806c5f9718,1) at ffs_update+0x2fe ffs_truncate(fffffd806c5f9718,0,0,ffffffffffffffff) at ffs_truncate+0xc9b ufs_inactive(ffff80003c402cb0) at ufs_inactive+0x202 VOP_INACTIVE(fffffd805c2ad960,ffff8000fffea7e8) at VOP_INACTIVE+0x104 vput(fffffd805c2ad960) at vput+0xe5 vn_close(fffffd805c2ad960,2,ffffffffffffffff,ffff8000fffea7e8) at vn_close+0xb7 acct_shutdown() at acct_shutdown+0x8a vfs_shutdown(ffff8000fffea7e8) at vfs_shutdown+0x23 boot(100) at boot+0x16f reboot(100) at reboot+0xb1 panic(ffffffff834510ef) at panic+0x1f9 __assert(ffffffff8348bb2c,ffffffff834a45f5,1cb,ffffffff83443957) at __assert+0x29 pipex_unlink_session_locked(ffff8000367a8e00) at pipex_unlink_session_locked+0x429 pipex_destroy_all_sessions(ffff800001608000) at pipex_destroy_all_sessions+0xd9 pppacclose(6384,81,2000,ffff8000fffea7e8) at pppacclose+0x16f spec_close(ffff80003c403090) at spec_close+0x417 VOP_CLOSE(fffffd80724dda40,81,fffffd80097fd5b0,ffff8000fffea7e8) at VOP_CLOSE+0x132 vn_closefile(fffffd806d4f00b8,ffff8000fffea7e8) at vn_closefile+0x12b fdrop(fffffd806d4f00b8,ffff8000fffea7e8) at fdrop+0x121 closef(fffffd806d4f00b8,ffff8000fffea7e8) at closef+0x192 fdfree(ffff8000fffea7e8) at fdfree+0x116 exit1(ffff8000fffea7e8,0,0,1) at exit1+0x576 sys_exit(ffff8000fffea7e8,ffff80003c403400,ffff80003c403350) at sys_exit+0x1a syscall(ffff80003c403400) at syscall+0xb17 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7215500654c0, count: -33