last executing test programs: 5.16167251s ago: executing program 0 (id=409): mknod(&(0x7f0000000200)='./file0\x00', 0x2000, 0x4287e) (async, rerun: 32) r0 = semget(0x1, 0x4, 0x8b) (rerun: 32) semctl$GETNCNT(r0, 0x4, 0x3, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x200) (async) open(&(0x7f0000000140)='./file0\x00', 0x78e, 0x20) (async) sysctl$kern(&(0x7f0000000000)={0x1, 0x4}, 0x2, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) (async, rerun: 32) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) (async) ioctl$WSKBDIO_GETMAP(r1, 0x80047476, &(0x7f0000000000)={0x0, 0x0}) 5.047176731s ago: executing program 6 (id=416): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0xfe, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x84, 0x11, 0x5, 0x48}, {0x14, 0xf0, 0xff, 0x10001}, {0x6, 0x80, 0x12, 0xd9b}]}) syz_emit_ethernet(0x62, &(0x7f0000000000)=ANY=[]) open$dir(&(0x7f0000000040)='./file0\x00', 0xae828e137847f62, 0x0) 5.046538222s ago: executing program 6 (id=417): mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x45548) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) utimes(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)={{0x3b400, 0x7}, {0x1800000000000000, 0x100000000}}) chdir(&(0x7f0000000100)='./file0\x00') 5.021904111s ago: executing program 6 (id=419): syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x2, 0x1, 0x0) connect$unix(r0, &(0x7f0000000040)=@abs={0x0, 0x0, 0x3}, 0x8) bind(r0, &(0x7f0000000000)=@un=@abs={0x0, 0xd}, 0x10) 5.020189302s ago: executing program 6 (id=421): mknod(&(0x7f0000000000)='./bus\x00', 0x3a0914c44f7b202d, 0x504) r0 = open(&(0x7f0000000040)='./bus\x00', 0x10005, 0x0) symlink(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='./bus\x00') r1 = socket(0x11, 0x3, 0x0) setsockopt(r1, 0x11, 0x3, &(0x7f0000000340)="12000000", 0x4) r2 = socket(0x11, 0x3, 0x0) sendto$unix(r2, &(0x7f0000000180)="b1000504600000000000180007000000331c13fecea10500fef9ed061ddd1efb7ae320b37b673051d2d236073705ae04be38164991f7b85143222b297be1aa5b2354eb51e2f0ac3ebbc257699a5f139b672f4d335d223e7d029d6ba8af630037282102000000720f70c1f5a472c881ea6e69e0bb76d907a900000200361b1257aea8c5000020020000000000ffbb27c501f1306c7f008a09ba09006574ffffffffff35b5710426037503682ce371a30080", 0xb1, 0x0, 0x0, 0x0) ioctl$TIOCEXCL(r0, 0x2000740d) setuid(0xee01) openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x80, 0x0) 4.882102409s ago: executing program 6 (id=422): r0 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0xd6) mkdir(&(0x7f0000000280)='./file1\x00', 0x0) dup2(r0, r0) r1 = semget(0x0, 0x1, 0x281) setuid(0xffffffffffffffff) semctl$GETVAL(r1, 0x1, 0x5, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000080)='#!', 0x2}, {&(0x7f0000000000)="8d6bb85551ec8430877ae32fe9bbe42cc8f2147a3eba8e1969f0435119cf4c071c8aee7ef2921be5d7d4796c5566c95989acb3d185587234186e96b8fde9ffac51de05a87b8b893e2abd154dd886eafbe03881d25b7b13b4c32227fc9e5a86a06f59f701322b3a109a13436e486b0a", 0x6f}, {&(0x7f00000002c0)="2652486ac0026bae49d0baf6b922c8415232fa7a934953a76c911cdbb392b7fe6de01ca26dafe6439b5e27b4518d504ed866027bb68afd17bf74f01a32147930359dd349f52df654d76d86dc2a7949f7225c7fbbc80eb2e0545942bc1b288f156fbd7927678f722fff3ea9052963d83451f7fd76d94162b3fd6c43e090a55339913e403e2f3faa2d28c9796f1db0786597d8d0b84b1af702b44ece30555d21a0fb999fd1bb3be3365fdc4d91e0516a0d9e92fb7193aeea4c0f75cc6f015014b88206b16f14a7e1976c317fad2749eb4f9ca5fdc912cf727b750ecfe0dd672090b4494148b2daeba9c3", 0xe9}, {&(0x7f00000004c0)="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", 0xff}], 0x4) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 4.875282147s ago: executing program 6 (id=423): r0 = msgget(0x2, 0x400) msgsnd(r0, &(0x7f0000000000)={0x0, "591fe036adc598c6d6af98f1dba37f713ed0338463698102075fd75082f3800dba4a98c2752a576b54593c2c8e8972e1c31332ecdaf12669c9f49086116c84990b38797efaff0bb29c7ba3483bdb3fe9b5499518ed27e3fafd9f706975398c40dd2a5468646162fc542c50bc2aa4edbff906873526b7c255179bb5003b9ac272da892d06797d9a14a0f435c9f883d4302a93ced8d741b9552bfcd1cb82fc9477c0d8d751d42bb8891894ffa8ae62"}, 0xb6, 0x0) msgrcv(r0, &(0x7f00000000c0)={0x0, ""/181}, 0xbd, 0x3, 0x1800) (async) r1 = syz_open_pts() ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000180)={0x20000000, 0x3, 0x18, 0x7ff, "a3dc129c039fe13347b7bfebc473890b6755de17", 0x6, 0xbb7}) ioctl$FIONREAD(r1, 0x4004667f, &(0x7f00000001c0)) (async) writev(r1, &(0x7f0000000380)=[{&(0x7f0000000200)="000a886269593b3b68bfc0d56086eea4a28eaf3db56c333a4b18517770438a95ab2be45cdbc5c0536456a11a3ed58afb90c1f9627360a727048de2d47ca835afadddd51ad77072f14c4bf045fde0c4e911774413f5d73ece4f9f2b3f3131f252414fe6cd1c57a6ca4061a2091bbc1a9f0bc605863b7fd67ac4265c4d41", 0x7d}, {&(0x7f0000000280)="292bf76075957b70cec63528f3aea8b4b2a2743bb796403782b62d0d5c964566c7a1aa978d64de97993a61f0b9e9eeede526f1673c27c602c3e9ff4e7d5b2bec01f1aa576f308fda62f6a1098429d42cc6a1054c5c14d31a368007920c473df6c91a515dcfe725d5f76cc65a5368d1793fd51a3346bc8bd2482200a1edda77cfc60203e8b7add228ec7618a1890f790d31d17c05bdc7524c54f1b8b723745c2ac4ea94b885363a122f8efb31be3b922484dc39da82bec80b249813b5c997f46b313e879229490f4019df316146ba79683311", 0xd2}], 0x2) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffff9c, 0xc010640c, &(0x7f00000003c0)={0x3}) (async) writev(r1, &(0x7f00000004c0)=[{&(0x7f0000000400)="9e21f545253f1c410d36e64c365051ce26a227f4941d05c61039d7fb79c200029c36f70705eb1752", 0x28}, {&(0x7f0000000440)="35ebd943ffc168d0d8fc1d1604d7380cc390f4ac5b1acd569ccc9bee596deda4ff9397d4d4246394731bf35ea38c7cdc1cfbccbc6cd37fa7eef9c5d83363ac9a2d61a6e4f335814401ac7d9bcdbdd574a8d2c3e4e24d70e2075b691cf9686a841443e0bb412caf41bbc9b053b54e6f33f89e", 0x72}], 0x2) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2) (async) msgrcv(r0, &(0x7f0000000500)={0x0, ""/26}, 0x22, 0x2, 0x1000) (async) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000540), 0x10, 0x0) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000580)={'tap', 0x0}) sysctl$hw(&(0x7f00000005c0)={0x6, 0x12}, 0x2, &(0x7f0000000600)="27567e77bfd81e06479e1ad5dbcbc567abda6b9430b452e99cd030387973bc73b1b0581a370a01a4a0f7415bcdec5bc45707b284", &(0x7f0000000640)=0x34, &(0x7f0000000680)="99e2ac8bf05024781cd2f739b18df16c0cfc2c22855617683971e0ffff07a5d47e456ca6b5e3c031294bce638137ca89fca22dbaea746129f9af76db12301fec8d4cbfa9de1c82bb76c4936e3ff43addf0e07e337ee2", 0x56) (async) sysctl$hw(&(0x7f0000000700)={0x6, 0x3}, 0x2, &(0x7f0000000740)="92ef7a1824bc39a8f9280afb28db0de7e429f9b44ef2d6855415ab2b89f0f23fe4b649cefc13b387cc481cad7d41acfb159e2fa0efa2baf1763536bc88212362e08068aac6805541c4a817887ea91cb543defbf8703b8bc55f3c5fcd2074c900e028b8e1538ebfbc1bbf8f755e9875a6d78c43e2bd1dcf7be3e151c0e2d8c0f32116ea9bddcfad1e58ac9480a6cdf473ab493e694befc2307803a46e28c2b9c714546b20b880134a8d42c5b30a8f", &(0x7f0000000800)=0xae, &(0x7f0000000840)="d00fcd8afefadb9b025d49a0a735a4f09753c3dda99182812118de38071b39bed4dac62a184e081a18a550773bdcb4cd8a667116fca843dff1d6f159bd0d8291e4e8fb5d8ff25c10cabf91c3617f17d4125084a80a1fb606cb19e124c53fa599f4652f7797941b2e14e43f289d76b8bc2616ca53", 0x74) (async) pipe(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000940)={&(0x7f0000000900)=[0x0], 0x1}) (async) msgrcv(r0, &(0x7f0000000980)={0x0, ""/143}, 0x97, 0x3, 0x800) (async) r5 = accept$unix(r3, &(0x7f0000000a40)=@abs, &(0x7f0000000a80)=0x8) shutdown(r5, 0x1) (async) mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) (async) sysctl$hw(&(0x7f0000000ac0)={0x6, 0x4}, 0x2, &(0x7f0000000b00)="fe4cf729412f026f31a0c425e89356f435736b3eaedc807294c65e156fcaecc099", &(0x7f0000000b40)=0x21, &(0x7f0000000b80)="7e339c93d8e7fe42dd1874a9b43a2b750fa311a51c5aa5882c8da881a6b4ae040b3496ce5dfe39de775cd4ab02b15579525ada7c4fe7465079cb63192a8883fd16b1d56bc8d4d74b723748963adcc9a6225222a7f417331d0f9b76", 0x5b) (async) ioctl$FIOASYNC(r4, 0x8004667d, &(0x7f0000000c00)=0x10001) msgctl$IPC_STAT(0x0, 0x2, &(0x7f0000000c40)=""/87) (async) msgrcv(r0, &(0x7f0000000cc0), 0x8, 0x2, 0x0) (async) ioctl$VMM_IOC_INTR(r4, 0x800c5606, &(0x7f0000000d00)={0x7, 0x401}) (async) ioctl$TIOCEXCL(r3, 0x2000740d) (async) r6 = getuid() getsockopt$sock_cred(r4, 0xffff, 0x1022, &(0x7f0000000d40)={0x0, 0x0}, &(0x7f0000000d80)=0xc) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000dc0)={{0x3, r6, 0xffffffffffffffff, r7, 0x0, 0x32, 0x9}, 0x8, 0xb, 0x0, 0x0, 0x4, 0x6, 0x6}) 4.871514689s ago: executing program 0 (id=424): r0 = open(&(0x7f0000000040)='./file0\x00', 0x200, 0x1ba) ioctl$VNDIOCCLR(r0, 0xc0a86b05, &(0x7f0000000200)={0x0, 0x10000, 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setrlimit(0x8, &(0x7f0000000980)) (async) sendmsg$unix(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="28000000ffff000001"], 0x28}, 0x404) recvmmsg(r1, &(0x7f0000000000)={&(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000000), 0x63}}, 0x10, 0x0, 0x0) (async) r3 = socket(0x2, 0x3, 0x0) close(r3) (async) socket(0x18, 0x3, 0x3a) (async) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x100000000000000}) (async) connect$unix(r3, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) (async) write(r3, 0x0, 0x0) (async) ioctl$WSKBDIO_SETDEFAULTKEYREPEAT(r0, 0x800c5709, &(0x7f0000000280)={0x8, 0x4, 0x12f}) (async) sysctl$vm_swapencrypt(&(0x7f00000000c0), 0x3, 0x0, 0x0, &(0x7f00000002c0), 0x28) (async) truncate(&(0x7f0000000000)='./file0\x00', 0x8) (async) sysctl$vm_swapencrypt(&(0x7f00000002c0), 0x3, &(0x7f0000000300)="03eb8e5e9e1b42c4f0d95d80afe18ef52f5dceab9b0b9a75ef3893258dd3e02847ef19488863ea6a5fc97e11707a4d74ad066734080fe4a15dddd7b6932854fd3ee719171c8e7c82ffacedd1f6c87fc42a8dc907a80e3e99f6d230857ee26ba86a2e7d0d0bd983a679d83ecce39dc2c7fbc64214341e37d992e2421a655165d3196757fcc5b41b7977f1189f86fbdd96a198e3f5315950542802f520a37134bef464cc1af25d998584e8389c878d1c43b1602f0879c72d0197dee3b00929a13245c41024a9ffa89968d14867ac647af9bfb0ea3ca64d", &(0x7f0000000400)=0xd6, &(0x7f0000000440)="9bc397247883c38430b0ab6f309a42e3629770dfb2b0b55445d3fcc517175bf88c783c9a333f05f061db", 0x2a) (async) sysctl$vm_swapencrypt(&(0x7f0000000040)={0x2, 0x5, 0x2}, 0x3, &(0x7f0000000100)="3750ee9a19c1e217d030717194511029826926c5853e699498c243de06b7e1f59bb9d6e66b4708e3a397796967bb84e9a9d18c684804643d85328ccd0ed7c04dd7847b673ae02f78c521905ab4db94384c3fa6dfb105d8b5ba00ff989c69fdd1bc9d8c03a69d7bc338ef096751e02752f7e7f6fdb74b73570445c1cd2ba0eb48977daff36df89b688ba4b500d1c3cbe5e90d52935464020516060fd9", &(0x7f0000000080)=0x9c, &(0x7f00000001c0)="b63de6211458b32e5e254580bfda9d7a82f70c1ef77a6b9540fed332a3bf864de1aeef94881125e4b32365ad150e108835626d603dcb9a57f00e5620b25ea410b962264a407a6771ec8fdc4d773b6ffffd30df905e68e12f973a263ca0074860fa3c5d0c4fe38595d988c50588a37bdf63200b2def4f2a83305def8b3559de30c92aed", 0x83) 4.869239745s ago: executing program 0 (id=426): writev(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) unveil(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000300)='c\x00') mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x8, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000000300)={0x0, 0x20000001}, 0x10, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) 4.851080762s ago: executing program 0 (id=428): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="28000000ffff000001"], 0x28}, 0x0) r2 = open(&(0x7f0000000140)='./file0\x00', 0x10686, 0x8) r3 = getpid() ktrace(&(0x7f0000000280)='./file0\x00', 0x0, 0x40000928, r3) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x4287e) r4 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0xd4) r5 = kqueue() kevent(r5, &(0x7f0000000200)=[{{r4}, 0xfffffffffffffffe, 0x11, 0x80000000}], 0x7, 0x0, 0x0, 0x0) kevent(r5, 0x0, 0x0, &(0x7f0000000200), 0x3b, 0x0) utimensat(0xffffffffffffffff, 0x0, &(0x7f0000000100)={{0xfffffffffffffffe, 0xb}, {0x2, 0x1}}, 0x2) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5, 0x10, r2, 0x0) syz_open_pts() sendmsg(r1, &(0x7f0000001640)={0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000340)="6b7ca0d23c", 0x5}, {0x0}, {&(0x7f00000013c0)}, {0x0}, {0x0}], 0x5, &(0x7f0000001740)=[{0x18, 0xffff, 0x8, "e26c212fd6bf"}, {0x18, 0xffff, 0x8, "0dc519a4633d1f"}, {0x18, 0xffff, 0xda41, "3ac5a2af"}, {0x18, 0xffff, 0x0, "ca580871d0"}, {0x18, 0x1, 0x9, "4bd2"}, {0x18, 0x1, 0x7fff, "8021aedb"}], 0x90}, 0x2) recvmsg(r0, &(0x7f0000002700)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1040) 4.488387206s ago: executing program 0 (id=429): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x80, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000040)={'tap', 0x0}) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f00000000c0)={0x3, &(0x7f0000000180)=[{0x34, 0x2, 0x8, 0xa}, {0x84, 0xe, 0xb, 0x40009}, {0x3c56, 0x5, 0x7, 0x8}]}) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[]) socketpair(0x2, 0x4000, 0x3, &(0x7f0000000000)) connect$unix(r0, &(0x7f0000000100)=@abs={0x0, 0x0, 0x3}, 0xfdd3) 4.488142256s ago: executing program 0 (id=430): open(&(0x7f0000000080)='./file0\x00', 0x20, 0x100) r0 = shmget$private(0x0, 0x1000, 0x49c, &(0x7f0000ffe000/0x1000)=nil) r1 = syz_open_pts() ioctl$FIOASYNC(r1, 0x80047460, &(0x7f00000000c0)=0x4) ioctl$TIOCSETAW(r1, 0x802c7415, &(0x7f0000000600)={0x8, 0x5, 0xa, 0x9ae, "d0ec172000a13728cb5d00", 0xc8b8, 0xda54}) writev(r1, &(0x7f0000002300)=[{&(0x7f0000000100)="2a6bb0b6d7527968f5d8bd77e43cd5156bc44b1b362876406a6468540a2b936378e6605fbda068943b5ae4fc75ba412b21aab41bb15b48ce6ef52909", 0x3c}], 0x1) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000200)=@file={0xd570d0466b6018f, './file0\x00'}, 0xa) r3 = socket$unix(0x1, 0x2, 0x0) sysctl$net_inet6_icmp6(&(0x7f0000001600), 0x8, 0x0, 0x0, &(0x7f0000000380)="3458fd190e73f5449e403fbfbde39a49ff8f01fe405448aafcbeaeaea060df9546f3c0de896126697629e6e4866c5bb039241bdf713957c8ab5e624c5ab5e5b8a60f7ee7f6dfdc502ec7a24301dc6a34a3e0c819cd91f82cfc869c01f3741a921ff9f5e89f4f2b367e347ba071accc1a7c544259039be659893bfce997f9b369ed79d996c18f68c4b1c2dec138c97e39540ca2ec29cc5351fd24d6d4b34cf3bec879f51561eb243c22c583a33b0021e4a2af72c13ff6e2962553b35044bf61e0b4a4c42211d36eb16a32cc1d86f0a005ddfa653aea236ad7455abe31ae421d30", 0xe0) chmod(&(0x7f0000000180)='./file0\x00', 0x3fe) setuid(0xee01) sendmsg$unix(r3, &(0x7f0000000080)={&(0x7f0000000040)=@file={0x170, './file0\x00'}, 0xa, 0x0, 0x0, 0x0, 0x0, 0x404}, 0xe) shmat(r0, &(0x7f0000ffa000/0x1000)=nil, 0x3000) shmat(r0, &(0x7f0000ff1000/0xf000)=nil, 0x3000) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000040)=""/11) sysctl$vm_swapencrypt(&(0x7f0000000000)={0x6, 0xb}, 0x3, &(0x7f00000003c0), 0x0, 0x0, 0x0) 2.075203336s ago: executing program 4 (id=463): r0 = shmget$private(0x0, 0x400000, 0x95a999646a72d747, &(0x7f0000bff000/0x400000)=nil) (async) r1 = shmget$private(0x0, 0x2000, 0x175, &(0x7f0000412000/0x2000)=nil) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000100)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x119, 0x400}, 0x4, 0x1, 0x0, 0x0, 0xfffd, 0x100000000a, 0x9}) (async) shmctl$IPC_RMID(r1, 0x0) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0xd02) (async) openat$vmm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) sysctl$ddb(0x0, 0x0, &(0x7f0000000180)="88bd5c1e5f3b55849601049763cb3761bd036357420ae3cb7a9b60301f627a4796b6f87a28ac2c9569172470b9781e77d55aa6d677a02a0032af4032f837b41bd8e502fc51cb7e0a6899900d9aed", &(0x7f0000000080)=0x4e, &(0x7f0000000240)="af407108f3a5ccb27333190a36089b89ee0d4ec353fd6d84b234b78f2967206a4dcaf87ed9a03bf2e54b2b5330b2a1a61633ef8f6d5137adf681c00c3b0704d2bfec4955bf4899de29b00eb5c75e3bc803b7515f1f2d989fe59e8c86", 0x5c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000000)=@file={0xd1653077bafa0115, './file0\x00'}, 0x2) chmod(&(0x7f0000000040)='.\x00', 0x35e) setuid(0xee01) (async) r3 = socket$unix(0x1, 0x5, 0x0) bind$unix(r3, &(0x7f0000000200)=@file={0xd570d0466b6018f, './file0\x00'}, 0xa) (async) chmod(&(0x7f0000000240)='./file0\x00', 0x161) (async) r4 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r4, &(0x7f0000000080)={&(0x7f0000000040)=@file={0x170, './file0\x00'}, 0xa, 0x0, 0x0, 0x0, 0x0, 0x404}, 0xe) (async) r5 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r5, 0xc0106924, &(0x7f00000001c0)) (async) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x140) sysctl$hw(&(0x7f0000000040)={0x7, 0x5}, 0x2, 0x0, 0x0, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) ioctl$VNDIOCSET(r6, 0xc0785101, &(0x7f0000000040)={0x0, 0x0, 0x0}) shmat(r1, &(0x7f0000ffa000/0x4000)=nil, 0x2000) shmctl$IPC_RMID(r0, 0x0) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x6000) 2.046747507s ago: executing program 4 (id=466): mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x1700) setrlimit(0x8, &(0x7f0000000040)={0x7, 0x50}) r0 = syz_open_pts() close(r0) syz_open_pts() ioctl$TIOCSETAW(r0, 0x802c7415, &(0x7f0000000080)={0x3ea, 0x81, 0xffffffff, 0xfffffffc, "09724ae3160104785b0a56d864d3c1a393f4c000", 0xffffffff, 0xfffffffe}) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000680)="7a8b258aa06293ddc32f447cd6296989", 0x10}], 0x1) r1 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0x62) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000140)={0x3, &(0x7f00000000c0)=[{0x6c, 0x3d, 0x4, 0x8}, {0x1, 0xf, 0x7b, 0x826}, {0x6, 0x5, 0x2, 0x43356c79}]}) syz_emit_ethernet(0x1000e, &(0x7f00000000c0)=ANY=[]) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x1700) (async) setrlimit(0x8, &(0x7f0000000040)={0x7, 0x50}) (async) syz_open_pts() (async) close(r0) (async) syz_open_pts() (async) ioctl$TIOCSETAW(r0, 0x802c7415, &(0x7f0000000080)={0x3ea, 0x81, 0xffffffff, 0xfffffffc, "09724ae3160104785b0a56d864d3c1a393f4c000", 0xffffffff, 0xfffffffe}) (async) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000680)="7a8b258aa06293ddc32f447cd6296989", 0x10}], 0x1) (async) open(&(0x7f0000000000)='./bus\x00', 0x8000, 0x62) (async) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) (async) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000140)={0x3, &(0x7f00000000c0)=[{0x6c, 0x3d, 0x4, 0x8}, {0x1, 0xf, 0x7b, 0x826}, {0x6, 0x5, 0x2, 0x43356c79}]}) (async) syz_emit_ethernet(0x1000e, &(0x7f00000000c0)=ANY=[]) (async) 1.827707542s ago: executing program 4 (id=467): r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x10000, 0x12) unlinkat(r0, &(0x7f0000000040)='./file0\x00', 0x0) sysctl$kern(&(0x7f0000001d40)={0x1, 0x32}, 0x2, &(0x7f0000001d80)="1d6d4e3e", &(0x7f0000002d80)=0x4, &(0x7f0000002dc0), 0x0) sysctl$net_inet_tcp(&(0x7f00000000c0)={0x4, 0x1f, 0x6, 0x9}, 0x4, 0x0, 0x0, 0x0, 0x0) sysctl$kern(&(0x7f0000000080)={0x1, 0x17}, 0x2, &(0x7f0000000100)="18bdc8c8079fcff5545f74bba8cefaba2c63bede3aa727f1825dd0b21565f56f83683b6a82bfb5bfee6eeaa07b98a1defccfe65fbc50c44cf0dc8eec8db1878af70dcf441d4845fc28681d4278359041eb3c68b6b3ef5584f77352a706469d1f4dd7", &(0x7f00000001c0)=0x62, &(0x7f0000000200)="35f164b1c1cbcb6d34ff4c888bae6a0eecbdb5bb254965df5f1b9b31edabf47c1b4fa7a3e6de1875fe0b0f5a8617180b7e40ef546f0ec9bbeb039da2080dfbcce58de3", 0x43) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1000, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000080)="8b11384532d7148c61d483aa9f5c731a", 0x10}], 0x1) ioctl$WSMOUSEIO_SETPARAMS(0xffffffffffffffff, 0x80105727, &(0x7f0000000080)={&(0x7f0000000040)=[{0x26, 0xfb}], 0x1}) getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0xc) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x65}) r3 = syz_open_pts() sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b1000504000004000000000007000000331c13fecea10500fef96ec0c72fd3357ae30200004e3039d2d236acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b67", 0x51, 0x0, 0x0, 0x0) sysctl$kern(&(0x7f0000000040)={0x1, 0x3f}, 0x4, &(0x7f0000000040), 0x0, 0x0, 0xfffffffffffffda3) close(r3) r4 = syz_open_pts() ioctl$TIOCSETA(r3, 0x802c7414, &(0x7f0000000340)={0x8, 0x5, 0xffffdf82, 0xffffff8c, "08ed95990000000000000000ffffffffffffffe6", 0x4, 0x4}) fchown(r3, r1, r2) writev(r3, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) readv(r4, &(0x7f0000000040)=[{&(0x7f0000000000)=""/18, 0x12}], 0x1) r5 = socket$inet(0x2, 0x3, 0xfc) ioctl$FIONREAD(r5, 0x80206979, &(0x7f0000000000)) syz_emit_ethernet(0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff0800450800280066000006069078e0000001ac1400aa4e224e20", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="507f5eb85cca6293"]) 762.006809ms ago: executing program 4 (id=469): r0 = socket(0x20, 0x8000, 0x2d) (async) r1 = openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) connect$unix(r1, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0xa) (async) r2 = socket(0x39, 0x3, 0x20) (async) r3 = accept$inet6(r0, 0x0, &(0x7f0000000080)) write(r3, &(0x7f00000000c0), 0x0) (async) getsockname$unix(r0, &(0x7f0000000100)=@abs, &(0x7f0000000140)=0x8) (async) connect$inet6(r3, &(0x7f0000000180)={0x18, 0x2, 0x0, 0x9}, 0xc) shutdown(r3, 0x0) (async) ioctl$DRM_IOCTL_MODE_CURSOR2(r1, 0xc02464bb, &(0x7f00000001c0)={0x3, 0x3, 0x1, 0x2a8, 0xfffffff9, 0x80, 0x0, 0x4, 0x80}) ioctl$DRM_IOCTL_MODE_GETFB(r1, 0xc01c64ad, &(0x7f0000000200)={0x0, 0xfff, 0x2, 0x5, 0x7fff, 0xc, r4}) (async) accept$inet6(r2, &(0x7f0000000240), &(0x7f0000000280)=0xc) sendto$unix(r2, &(0x7f00000002c0)="d6620850dad57cb10d5c132717c37d4918d0fbe8a4560f04d24d9203b850b1565dd25f00eb3c2981404930ee04a3115ea9712dc39e218eaa5bbeabbc97a118b59c993f06e388fd6a7df206b41d3cf688c620f92634fb63fd7b8d5daec6079f47dabe92b8250dc389522d9203169102465013492007ef0f3de66f0634a022f26ee6291b0af32254965ec65b79fdae8972b27db36a", 0x94, 0x400, 0x0, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r1, 0xc00864c0, &(0x7f0000000380)) (async) r7 = socket$unix(0x1, 0x1, 0x0) flock(r7, 0x5) (async) fcntl$setstatus(r1, 0x4, 0x4) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(0xffffffffffffff9c, 0xc01864ba, &(0x7f00000003c0)={0x0, 0xffb, 0x5942, 0xeeeeeeee}) (async) bind$inet6(r3, &(0x7f0000000400)={0x18, 0x3, 0xfffffffb, 0xdd51}, 0xc) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000440)={0x2, 0x7fffffff, r2}) sendmsg(r1, &(0x7f00000006c0)={&(0x7f0000000480)=@in={0x2, 0x2}, 0xc, &(0x7f0000000640)=[{&(0x7f00000004c0)="111999a095a6baeea3556f1069f0f09ec4d9321b2eb4", 0x16}, {&(0x7f0000000500)="26d1d35412ba09356ec591867f7f8d62d14083565c", 0x15}, {&(0x7f0000000540)="3910f4719b838e7cbf5f1719c2986673e8f397fb7fce4f4df9600fe73df263eeee6f7784c6600d35660d9dc8ed524403a03ca43f57379f45a33d26c13c507e6a55ca8e31acaac00a46ec2b0d10a6e8d65380bfe89e14d676428295a4dac25205712c15ce2c44400da8c2137f607c64216a48c1eab23fc82b30a5175334ea9ef055ca1fcc57b1fb5e82667d3d4c79106f3006de9302", 0x95}, {&(0x7f0000000600)="b9dffe4e67507a808fdfdbeeaf", 0xd}], 0x4, &(0x7f0000000680)}, 0x3) getrusage(0x0, &(0x7f0000000700)) (async) setsockopt(r7, 0xfffffffc, 0x6, &(0x7f00000007c0)="3d0aec646a38ea8685ab52bedae8c09e808cc986dd57828ce3b9bae52a30a77bafc41283773453ec89da232ee837ba43cad9b99e42fcd77aa23c6bfbb3b8d86887a2f729eb34e5da92be1705fec2e8b3322386ff23e0adf66b8ed3865f800d4aac1b331c6778c3d1004da4ab7550af819242585d942d280bc4364df537b37be5e2273cf7b44908e5047ee4331d", 0x8d) (async) ioctl$DRM_IOCTL_MODE_GETFB(0xffffffffffffffff, 0xc01c64ad, &(0x7f0000000880)={r5, 0x5, 0x4, 0x8, 0xfffffffb, 0x80, r6}) (async) r8 = openat$null(0xffffffffffffff9c, &(0x7f00000008c0), 0x1, 0x0) ioctl$KDDISABIO(r8, 0x20004b3d) (async) ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f0000000900)={0x0, 0x2, 0x8, 0x3136564e, 0x0, [r6, r6, r6, r6], [0x7f, 0x4, 0x7, 0x10], [0x5, 0x100, 0x7, 0x1], [0x9, 0x4, 0x1, 0xffff]}) (async) ioctl$BIOCSDLT(r1, 0x8004427a, &(0x7f0000000980)=0xfffffffa) (async) ioctl$DRM_IOCTL_VERSION(r1, 0xc0406400, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x7d, &(0x7f00000009c0)=""/125, 0xdb, &(0x7f0000000a40)=""/219, 0xc8, &(0x7f0000000b40)=""/200}) (async) select(0x40, &(0x7f0000000c80)={0x6, 0x9, 0x7, 0xb324, 0xffff, 0xb0e, 0x7f, 0x5}, &(0x7f0000000cc0)={0x8000000000000001, 0x8, 0x4, 0xff, 0x800, 0x1ff, 0x7, 0x2}, &(0x7f0000000d00)={0x80000000, 0x8, 0x6, 0xfff, 0x3, 0x0, 0x5, 0x14ae}, &(0x7f0000000d40)={0x0, 0x9}) 673.205951ms ago: executing program 2 (id=472): socket(0x18, 0x3, 0x0) (async) r0 = socket(0x18, 0x3, 0x0) setreuid(0x0, 0xee01) setuid(0x0) semget$private(0x0, 0x3, 0x262) (async) r1 = semget$private(0x0, 0x3, 0x262) semop(r1, &(0x7f00000009c0)=[{0x1, 0x1, 0x1000}, {0x0, 0x0, 0x1000}], 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket(0x18, 0x1, 0x0) setsockopt(r2, 0x1000000029, 0x2e, &(0x7f0000000040)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) (async) setsockopt(r2, 0x1000000029, 0x2e, &(0x7f0000000040)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) setsockopt(r2, 0x1000000029, 0x2e, &(0x7f0000000000)="ebf6cbdf13b9fd812eaa4e712e54e69931929648", 0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r3, 0xffff, 0x1022, &(0x7f0000000580)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x200000, 0x0, r4, 0x0, 0x0, 0x8c}, 0x100000000000000, 0xd, 0xfffffffffffffffc}) r5 = geteuid() getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) semctl$IPC_SET(r1, 0x0, 0x1, &(0x7f0000000340)={{0x7, r5, r4, r5, r6, 0x80, 0xff7f}, 0x7ffe, 0xb1, 0x400d}) r7 = msgget$private(0x0, 0x0) msgctl$IPC_SET(0x0, 0x1, 0x0) setuid(0xffffffffffffffff) (async) setuid(0xffffffffffffffff) mknod(&(0x7f0000000200)='./file0\x00', 0x2000, 0x412dff) setgid(0xffffffffffffffff) (async) setgid(0xffffffffffffffff) setgroups(0x0, 0x0) (async) setgroups(0x0, 0x0) seteuid(r5) setuid(0xffffffffffffffff) (async) setuid(0xffffffffffffffff) open$dir(&(0x7f0000000000)='./file0\x00', 0x6, 0x90) (async) open$dir(&(0x7f0000000000)='./file0\x00', 0x6, 0x90) msgget(0x3, 0x280) msgctl$IPC_RMID(r7, 0x0) select(0x40, &(0x7f0000000240)={0x5, 0x1, 0x200000000000, 0x8, 0x5, 0x4, 0x7fffffff, 0x3}, &(0x7f0000000280)={0xf98, 0x2, 0x4, 0x80, 0x4, 0x1, 0x2}, &(0x7f00000002c0)={0x59d5, 0x3a, 0x7, 0x1ff, 0x3, 0x16, 0x5}, &(0x7f0000000300)={0x3, 0xffffffffffffffff}) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0xe5, 0x0, r4, 0xffffffffffffffff, 0x0, 0x102, 0x4008}, 0x20, 0x800, 0xffffffffffffffff, 0x0, 0x1ff, 0x60400003fffc, 0x2, 0x4}) connect$unix(r0, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) (async) connect$unix(r0, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) 672.881766ms ago: executing program 4 (id=473): mmap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x1) r0 = socket(0x18, 0x1, 0x0) close(r0) r1 = socket(0x24, 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) setsockopt(r0, 0x6, 0x42, &(0x7f00000001c0)="c11c2aea", 0x4) (async) r2 = open$dir(&(0x7f00000001c0)='./file0\x00', 0x1, 0x101) ioctl$FIONREAD(r2, 0xc0106978, &(0x7f0000000140)) (async) r3 = getpid() (async) getsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000000780)=0xc) (async, rerun: 32) r5 = getegid() (rerun: 32) r6 = getpgrp() (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r7, 0xffff, 0x1022, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f0000000240)=0xc) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x8982, 0x0, r8, 0x0, 0x0, 0x150, 0x200}, 0x0, 0x0, 0xfffffffffffffffb}) getsockopt$SO_PEERCRED(r0, 0xffff, 0x1022, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0xc) r10 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000280), 0x10000, 0x0) (async) r11 = geteuid() (async) r12 = socket(0x18, 0x1, 0x0) r13 = fcntl$dupfd(r12, 0x2, r12) close(r13) socket(0x18, 0x4001, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) sendmsg$unix(r15, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="28000000ffff000001"], 0x28}, 0x0) recvmsg(r14, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/51, 0x33}, 0x0) fchown(r10, r11, r9) (async) sendmsg$unix(r0, &(0x7f00000007c0)={&(0x7f00000018c0)=@abs={0x1, 0x0, 0x2}, 0x8, &(0x7f00000006c0), 0x0, &(0x7f0000001840)=[@rights={0x28, 0xffff, 0x1, [r1, r1, 0xffffffffffffffff, r0, r0, r2]}, @cred={0x20, 0xffff, 0x0, r3, r4, r5}, @cred={0x20, 0xffff, 0x0, r6, 0x0, r9}], 0x68, 0x1}, 0x1) (async, rerun: 64) getpeername(r1, &(0x7f0000000040)=@in6, &(0x7f0000000080)=0xc) (async, rerun: 64) openat$zero(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) (async, rerun: 32) mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2) (rerun: 32) 671.393771ms ago: executing program 2 (id=474): r0 = socket(0x2, 0x1, 0x0) ioctl$FIONREAD(r0, 0x801169ab, &(0x7f00000001c0)) connect$unix(r0, &(0x7f0000000400)=@abs={0x682eb13985c518e6, 0x7, 0x1}, 0x8) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x100000000000000, 0x10040000000001}}) syz_emit_ethernet(0x3e, &(0x7f0000000140)=ANY=[@ANYBLOB="64e1629b"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket(0x18, 0x1, 0x0) getsockopt$sock_cred(r1, 0xffff, 0x1024, &(0x7f0000000140)={0x0}, &(0x7f0000000000)=0xffffffffffffffef) ktrace(0x0, 0x5, 0x2, r2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r3 = socket(0x18, 0x1, 0x0) close(r3) r4 = socket(0x18, 0x3, 0x3a) setsockopt(r3, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) syz_extract_tcp_res(&(0x7f0000000340), 0x2, 0x63e2d714) connect$unix(r3, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$sock_cred(r5, 0xffff, 0x1022, &(0x7f0000000580)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) writev(r4, &(0x7f0000000300)=[{&(0x7f0000000200)="ec312bb59892b5ba57a559c82ea6ecd1a1900a844e3eaafb81b173f056a3ac64638b9123198038471ded2b789d84346f26cecca91fe8d2e9e429e0cd8237b785a43c9f35f8981ff7c021993e", 0x4c}, {&(0x7f0000000280)="10bac00ba9784484ca804917649b0d982af8e6ee871cac5a92aa09375b35241042e7d14c66333ded21ea9910e5a8a688647d9d3d999623471edd1c665e7b45dc05620d504028ff8becf33840963fb9487a597125963fa8cd4be3b440ef133173fd59", 0x62}, {&(0x7f0000000040)="40ae8e19f08090530fc18d38afb93c9dc4c912eff1f33990ac9a709d8688226a8d9422d4e66f37d77e", 0x29}, {&(0x7f0000000180)="bfc00e7699f255a463a70bec8f", 0xd}], 0x4) chown(&(0x7f00000003c0)='./file0\x00', 0x0, r6) r7 = open$dir(&(0x7f0000000300)='.\x00', 0x80, 0x4a) setgid(0xffffffffffffffff) setgroups(0x0, 0x0) fchmod(r7, 0xf3) setsockopt(0xffffffffffffffff, 0x1000000029, 0x31, &(0x7f0000000000)="b211d7170d816685c8e360f2fa41c1a0946988b272d2dd3dc90142a84231a746e337b372e93320cff6669cbe7868de45ed3fc33719ca6df71ecec8a918458b2c10a1f8c66653b276e180e9cb9b21f9982230f575295d48889c9a920796b2dd92fc8575680b37ba955d2c15e6d7c9198ed900ab006ddfb67869b51a2216114d1ece", 0x81) setuid(0xffffffffffffffff) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') faccessat(0xffffffffffffffff, &(0x7f00000000c0)='./file0/file0/..\x00', 0xdd, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x183) 589.232192ms ago: executing program 2 (id=475): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x80, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000040)={'tap', 0x0}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) fcntl$lock(r1, 0x9, &(0x7f00000003c0)={0x1, 0x0, 0x7fffffffffffffff, 0x1ffffffff}) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0xd02) r3 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) write(r3, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) preadv(r4, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/104}, {&(0x7f0000000140)=""/192, 0x100000}, {&(0x7f0000000340)=""/175}, {&(0x7f0000000000)=""/18}], 0x10000000000002b8, 0x0) r5 = semget(0x0, 0x0, 0x24) semop(r5, 0x0, 0x0) semctl$GETZCNT(r5, 0x4, 0x7, 0x0) semctl$GETNCNT(r5, 0xe16b608491ece6dc, 0x3, 0x0) semop(r5, &(0x7f0000000200)=[{0x4, 0xe189}, {0x3, 0x3, 0x1800}], 0x2) fcntl$lock(r2, 0x9, &(0x7f0000000040)={0x2, 0x2, 0xfffffffffffffffc, 0x1000300000004}) fcntl$lock(r1, 0x8, &(0x7f0000000000)={0x3, 0x1, 0x20002, 0x100000002}) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000000)={0x4, &(0x7f0000000180)=[{0x15, 0x2, 0x0, 0x6}, {0x7, 0xe, 0x80, 0x40005}, {0x99, 0x9, 0x8, 0x2}, {0x3c56, 0x2, 0x6, 0x7}]}) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000040)={0x3, &(0x7f00000000c0)=[{0x2, 0x2, 0x0, 0x7}, {0x2, 0x0, 0x40, 0xea}, {0x46, 0x0, 0x0, 0x381}]}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0xffac) syz_emit_ethernet(0x1000e, &(0x7f0000000140)=ANY=[]) 588.959452ms ago: executing program 5 (id=476): mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x2, 0x0) r0 = socket(0x18, 0x3, 0x7) r1 = socket(0x18, 0x1, 0x0) close(r1) socket(0x24, 0x2, 0x0) setsockopt(r1, 0x6, 0x42, &(0x7f0000000000), 0x0) setsockopt(r0, 0x1000000000029, 0x3e, &(0x7f0000000780)="00000080", 0x4) getsockopt(r0, 0x29, 0x3e, 0x0, 0x0) select(0x40, &(0x7f0000000000)={0x8, 0x3ff, 0x0, 0x3, 0x4, 0x0, 0x8000000000000004, 0x8}, &(0x7f0000000380)={0xffb, 0x0, 0x6, 0xff, 0x7, 0x0, 0x2, 0x9}, 0x0, 0x0) select(0x40, &(0x7f0000000000)={0x9, 0x3ff, 0x4, 0x6, 0x0, 0x0, 0x0, 0x7}, &(0x7f0000000380)={0x1, 0x0, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0) 588.770624ms ago: executing program 4 (id=477): socket$inet(0x18, 0x3, 0x102) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000300), 0x80, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x64c8) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) fcntl$lock(r1, 0x9, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x300000003}) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x20, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x9cab835cfdc52675, 0x0) fcntl$lock(r0, 0x9, &(0x7f0000000000)={0x2, 0x2, 0xffffffff00000000, 0x2fffffffc}) socket(0x1, 0x4, 0x49) r2 = openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000000)="b886", 0x2}], 0x1) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) ioctl$TIOCSETA(r2, 0xc450443c, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, "97a2224ff1c14649ebb178926cc9795a6b47c1d1", 0x0, 0x223}) 587.474801ms ago: executing program 5 (id=478): socket(0x18, 0x8000, 0x3) (async) mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) (async) open(&(0x7f0000000040)='./file0\x00', 0x2, 0x102) ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x0, 0xb3f, {[0xfffffbfffffffffb, 0x0, 0x2, 0x100200000, 0x6, 0x7, 0xdf60, 0xfffffffffffffffe, 0x0, 0x2f01, 0x93, 0x4, 0xffffffffffffffff, 0x200000000002, 0xd, 0x4, 0xfffffffffffffffe, 0x400000000100], [0xfffffffffffffffe, 0xf0, 0xfffefffffffffffd, 0x20000001, 0x5e, 0x7b98, 0x6, 0x0, 0x3], [0x100000001, 0x8000, 0x8, 0x0, 0xb, 0x11000, 0xffffffff00000000], [0x8, 0x1fffffffffb, 0x20004, 0x100000000, 0xfffffffffffffffe, 0x8], [{0x0, 0x0, 0x0, 0x7d0a}, {0xfffc, 0x22, 0x5}, {0x4, 0x0, 0xfffffffe, 0x80}, {0x3, 0x7, 0xe, 0xffffffffffffffff}, {0x0, 0x2, 0x7f, 0x8}, {0x0, 0x9, 0x9, 0x2000000000000000}, {0x0, 0x4, 0xfffffff9}, {0x0, 0xfd, 0x0, 0x7}], {0x1, 0x5, 0x6, 0x3}, {0xfffe, 0x3, 0x6d5, 0x7}}}) (async) r0 = kqueue() kevent(r0, 0x0, 0xfffffffd, &(0x7f0000000040), 0x5, 0x0) (async) kevent(r0, &(0x7f0000000000), 0x3ff, 0x0, 0x8000800, 0x0) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x65}) (async) r1 = syz_open_pts() close(r1) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FIONBIO(r2, 0x8004667e, &(0x7f0000000500)=0x2) (async) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0xfffffffffffffffd, [{&(0x7f00000c7000/0x3000)=nil, &(0x7f0000ff6000/0x6000)=nil, 0x1}, {&(0x7f00004d7000/0x2000)=nil, &(0x7f0000698000/0x1000)=nil, 0x3}, {&(0x7f00005fd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil}, {&(0x7f00005fd000/0x3000)=nil, &(0x7f0000ff7000/0x3000)=nil, 0x80000000080}, {&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, 0xc}, {&(0x7f00004f8000/0x2000)=nil, &(0x7f000068e000/0x12000)=nil, 0x2000000000000003}, {&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff2000/0x2000)=nil, 0x8}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000696000/0x2000)=nil, 0xffffffffffffffff}, {&(0x7f000013f000/0x2000)=nil, &(0x7f000068e000/0x4000)=nil, 0xfffffffffffffff9}, {&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff1000/0x3000)=nil, 0x8}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000695000/0x1000)=nil, 0xffffffff}, {&(0x7f00007f8000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x43}, {&(0x7f00000c6000/0x2000)=nil, &(0x7f0000668000/0x4000)=nil}, {&(0x7f000051f000/0x1000)=nil, &(0x7f00000c6000/0x4000)=nil, 0x4}, {&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffa000/0x6000)=nil}, {&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000010000/0x3000)=nil, 0x1}], './file0/file0\x00'}) socket$inet(0x2, 0x3, 0x2) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x200000000000c, &(0x7f0000000400)="ea00000100000000d4ec72a137aed7c44113bd4cff1487af7a3518", 0x1b) (async) socket$inet(0x2, 0x3, 0x2) (async) setrlimit(0x8, &(0x7f0000000580)={0xa, 0x56}) r3 = syz_open_pts() close(r3) (async) syz_open_pts() ioctl$TIOCSETA(r3, 0x802c7414, &(0x7f0000000180)={0x2000020e, 0xfffff802, 0x1, 0xfff7ff8f, "0800020000087db300000105001c670000000010", 0x9, 0x800001a2}) writev(r3, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) (async) unveil(0x0, &(0x7f00000000c0)='W\x00') (async) r4 = fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) openat(r4, 0x0, 0x82, 0x10d) (async) ioctl$FIONREAD(0xffffffffffffffff, 0xc0106924, &(0x7f00000001c0)) (async) socket(0x840000000002, 0x3, 0x100) (async) pipe(&(0x7f0000000000)) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc0e99db6de761f86, 0x0) (async) open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0xd6) 477.034483ms ago: executing program 5 (id=481): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x881, 0x0) mknod(&(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0xd02) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) (async) link(0x0, 0x0) rename(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x8, 0x0) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x84, 0x11, 0x3, 0x48}, {0x48, 0xa3, 0xff}, {0x6, 0x80, 0x12, 0xfffff805}]}) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000200)={'tap', 0x0}) (async) sysctl$kern(0x0, 0x0, &(0x7f0000000200)="a7a6d61de4a10909926243003b47915d8156c41f1b4f0919d7aacdfaffffffffffffff46c0fbde0346bcfc2e786031d4b86fc1f36e5250f6d2b982fd38", &(0x7f0000000000)=0x3d, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) (async) syz_emit_ethernet(0x22, &(0x7f0000000440)=ANY=[]) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r1 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a) ioctl$WSMOUSEIO_SCALIBCOORDS(r1, 0x81205724, &(0x7f0000000100)={0x8, 0x6, 0x2000007, 0x5f, 0x6, 0x6, 0x60, 0x10, [{0x1000000, 0xe68, 0x0, 0x5}, {0xd5, 0x5, 0x8, 0xa}, {0x7, 0xffffffd6, 0x8, 0x9}, {0x8, 0x804, 0x3, 0xfffffffd}, {0x1f, 0x40, 0x10009, 0x2}, {0x7a, 0x6, 0x71bc, 0x99}, {0x81, 0x800, 0x9d29, 0x10}, {0x3, 0x803, 0x14, 0x2}, {0xffffffff, 0xebf5, 0x4, 0xaf}, {0x5, 0x5, 0x10000d1b, 0x88}, {0x1d2, 0x7, 0x0, 0x4}, {0x3fc, 0x9, 0x8, 0x80000000}, {0x4, 0x14, 0x6, 0x1}, {0x2, 0x6, 0x8}, {0xc, 0x9, 0x2, 0x7}, {0x5, 0x20000005, 0x100002}]}) (async) syz_emit_ethernet(0x46, &(0x7f00000009c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6000eacf00103afffe8000000000000000000000000000aaff02000000000000000000000000000188"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) (async) syz_open_pts() (async) kevent(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000, 0x0) (async) sysctl$net_inet_ip(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$vmm(0xffffffffffffff9c, &(0x7f0000000500), 0x8, 0x0) close(0xffffffffffffffff) r2 = semget(0x0, 0x1, 0x281) (async) setgid(0xffffffffffffffff) (async) getgroups(0x0, 0x0) (async) setgroups(0x0, 0x0) (async) socketpair(0x1e, 0x4, 0x2, 0x0) setuid(0xffffffffffffffff) (async) semctl$GETPID(r2, 0x0, 0x4, 0x0) (async) ioctl$VNDIOCSET(r1, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) 476.369693ms ago: executing program 2 (id=482): sendmsg$unix(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f00000000c0), 0x1c, 0x0}, 0x0) r0 = socket(0x800000018, 0x2, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1000, &(0x7f0000000100)=0x7, 0x4) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x8, 0x0, 0x0, 0x0, 0x0, 0x310, 0x4000}, 0x100000000006, 0x861, 0xffffffffffffffff, 0x0, 0x7ffffffffffffe, 0x5, 0xd, 0x7}) bind$unix(r0, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) r1 = open(&(0x7f0000000080)='./file0\x00', 0x200, 0x29) ioctl$WSMOUSEIO_SCALIBCOORDS(r1, 0x81205724, &(0x7f0000000100)={0x7ff, 0x6, 0x9, 0x0, 0x80000001, 0xa1b0, 0x40010001, 0x10, [{0x0, 0x2890, 0x5, 0x71002}, {0x6, 0xe, 0x20000008, 0xfffffff9}, {0x101, 0x6, 0xfffffffc, 0x9}, {0x4, 0x800, 0x800f, 0x7}, {0x1c, 0xffff, 0x7, 0x9}, {0x1, 0x653, 0x3, 0x9b}, {0xce1, 0xffffffff, 0x4d4, 0x6}, {0x1000006, 0x0, 0x14, 0x5910}, {0x2000002, 0x85, 0x6, 0x6}, {0x3, 0x8009, 0x1000}, {0x1cc, 0x4, 0xdaa1, 0x3}, {0x3, 0xa, 0x8}, {0x4, 0x7, 0x89, 0x8}, {0x29a71717, 0x7f, 0x60, 0x7}, {0x1100c, 0x3, 0x9655, 0x4}, {0x0, 0x1, 0xfff, 0x30003}]}) r2 = geteuid() r3 = getgid() fchownat(r1, &(0x7f0000000240)='./file0\x00', r2, r3, 0x6) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x200}}) r4 = socket(0x18, 0x3, 0x0) connect$unix(r4, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) getsockname$inet(r4, &(0x7f00000000c0), &(0x7f0000000000)=0xffffffffffffff35) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendmsg$unix(r0, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x404) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f00000000c0), 0x1c, 0x0}, 0x0) (async) socket(0x800000018, 0x2, 0x0) (async) setsockopt$sock_int(r0, 0xffff, 0x1000, &(0x7f0000000100)=0x7, 0x4) (async) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x8, 0x0, 0x0, 0x0, 0x0, 0x310, 0x4000}, 0x100000000006, 0x861, 0xffffffffffffffff, 0x0, 0x7ffffffffffffe, 0x5, 0xd, 0x7}) (async) bind$unix(r0, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) (async) open(&(0x7f0000000080)='./file0\x00', 0x200, 0x29) (async) ioctl$WSMOUSEIO_SCALIBCOORDS(r1, 0x81205724, &(0x7f0000000100)={0x7ff, 0x6, 0x9, 0x0, 0x80000001, 0xa1b0, 0x40010001, 0x10, [{0x0, 0x2890, 0x5, 0x71002}, {0x6, 0xe, 0x20000008, 0xfffffff9}, {0x101, 0x6, 0xfffffffc, 0x9}, {0x4, 0x800, 0x800f, 0x7}, {0x1c, 0xffff, 0x7, 0x9}, {0x1, 0x653, 0x3, 0x9b}, {0xce1, 0xffffffff, 0x4d4, 0x6}, {0x1000006, 0x0, 0x14, 0x5910}, {0x2000002, 0x85, 0x6, 0x6}, {0x3, 0x8009, 0x1000}, {0x1cc, 0x4, 0xdaa1, 0x3}, {0x3, 0xa, 0x8}, {0x4, 0x7, 0x89, 0x8}, {0x29a71717, 0x7f, 0x60, 0x7}, {0x1100c, 0x3, 0x9655, 0x4}, {0x0, 0x1, 0xfff, 0x30003}]}) (async) geteuid() (async) getgid() (async) fchownat(r1, &(0x7f0000000240)='./file0\x00', r2, r3, 0x6) (async) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x200}}) (async) socket(0x18, 0x3, 0x0) (async) connect$unix(r4, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) (async) getsockname$inet(r4, &(0x7f00000000c0), &(0x7f0000000000)=0xffffffffffffff35) (async) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) sendmsg$unix(r0, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x404) (async) 374.92695ms ago: executing program 5 (id=483): r0 = syz_open_pts() ioctl$TIOCGETA(r0, 0x402c7413, 0x0) r1 = syz_open_pts() (async) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x88, 0x6}, 0x6, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x1, 0x200023}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) r2 = socket(0x18, 0x1, 0x0) setsockopt(r2, 0x1000000029, 0xc, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) close(r1) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) poll(&(0x7f00000000c0)=[{r1, 0xe5}], 0x1, 0x4) (async) fchown(r1, 0x0, 0x0) 368.042636ms ago: executing program 2 (id=484): select(0x40, &(0x7f0000000180)={0xffffffffdffffff9, 0x44809e9d, 0xffffffffffffffff, 0x7, 0x2800000000000000, 0x181c, 0x8, 0x2000000000000044}, 0x0, 0x0, 0x0) r0 = kqueue() kevent(r0, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x637e) mknod(&(0x7f0000000000)='./file0\x00', 0x20a0, 0x5900) open(&(0x7f0000000040)='./file0\x00', 0x8000, 0xee4bce5bb233ab95) r1 = kqueue() ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f00000019c0)={0xfffffffc, 0xfffffffe, {[0xfffffffffffffffc, 0xa, 0x5, 0x100000000, 0x0, 0x80008000, 0x8000002e, 0x1, 0xffffffff, 0x2f01, 0x2, 0x3, 0xfffffffffffffffe, 0x2, 0x4, 0x4, 0xfffffffffffffff5, 0x100], [0x5, 0x5, 0xfffffffbfffffff8, 0x0, 0x1, 0x80000000, 0x800ee4, 0x0, 0x0, 0x800000047], [0x8, 0x2, 0x100000000000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe], [0x3, 0x1ffffffffff, 0x0, 0x100000002, 0xfffffffffffffffe], [{0x0, 0xc, 0x4, 0x7d06}, {0x2, 0x2, 0x1, 0x3}, {0x0, 0xfffffffd, 0xfffffffd, 0xffc}, {0x1008, 0x0, 0x6, 0xfffffffffffffffe}, {0x0, 0x400, 0xd, 0x40}, {0x7ffe, 0x2000, 0x40003, 0x1}, {0x6, 0x1, 0x7}, {0x0, 0x95b, 0x200, 0xc}], {0x0, 0x5, 0x0, 0x849}, {0x203, 0x10, 0x1, 0x2}}}) kevent(r1, &(0x7f0000000080), 0xe4a, 0x0, 0xa9fa, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x40, 0x100) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x4, 0x8, 0x7, 0xc, 0x3, 0x80002001, 0x8, 0x10000046, [{0x0, 0x7, 0x4, 0x7cecf1d1}, {0x7, 0x3, 0x4, 0x7}, {0x5, 0x9, 0x8100, 0xaf5}, {0x9e, 0x8, 0xc, 0x2}, {0x1, 0xff, 0xfffffff7, 0x9}, {0x20000002, 0xa, 0xffffffff, 0x9c}, {0x80000cdc, 0xffffffff, 0x5, 0x71}, {0x2000a, 0x803, 0x14, 0x8}, {0xfffffffd, 0x81, 0x1, 0x9}, {0x3ff, 0x8001, 0xc7, 0x87}, {0x4, 0x5, 0xd, 0x10aeb}, {0x805, 0x40, 0x2, 0x5}, {0xe0, 0x4, 0x80005, 0x3ff}, {0x29a7171a, 0xfffffffa, 0x3, 0x100006}, {0x4, 0x9, 0x7}, {0x0, 0x13, 0x4, 0x30000}]}) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x8, 0x2000000000000004}, 0x0, 0x0, 0x0) ioctl$FIONBIO(r2, 0x82907003, &(0x7f0000000140)=0x2) ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'.\x00', 0x1, 0xef, 0x21, 0x1, 0x0, 0xd87, 0xfffffffa, 0x1, 0x0, 0xffffffffffffffff, 0x6}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r3, 0xffff, 0x1022, &(0x7f00000000c0), &(0x7f0000000040)=0xc) sysctl$kern(&(0x7f00000000c0)={0x1, 0x4e}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000180)=0xb, 0x0, 0x27) mknod(&(0x7f0000000000)='./file1\x00', 0x2000, 0x637d) sysctl$kern(&(0x7f0000000040)={0x1, 0x44}, 0x3, &(0x7f00000000c0)="3bf2ee74e747c82dad6eb2a36fa755e1a3925fe49afca7e63b52fa65ccaa74d6e6b85b6cdced70357ef201f97842b1068dca31553fa2d7031f38c03e56ad0e24dfc4f97b8b7f81499647e6e7725765d61436c85e43c15d12a78cb8c57ddde87021d7b685507fd3e0652f35e45bdaa3afd86c4fe557433e4c2b632de71c951516adff26aa2e48b45f8ce92bcefd3eceefabee7e3ebe806fdb4f6af569ae94b5d127", &(0x7f0000000080)=0x4, &(0x7f0000000340)="5a67923ef0cb189971421989ebcff78831a7581e2f27caa362f1363042efb27688b2c899220fb2fe37e467d974592496856ca7b78060998608c2f952e43bc0bf11555cc5cb0fe17b2ec1be389871829bfe10dd4c4d2c8f9da2bd2868fd86791dc09dc4fa89a217458bdaed31003fdc3a7323189ba3ccbad6c8af17516e4557f61ad20180000000000000125f568ca7d3396b9057255f381855110eb3a673713716cdf010ddfa7977f92cf061ad125ca670353b45d53aae196b00271f9d3452b523b3dea22d6027625614312183724b71c7eb02083a410c1c99fa455013521f98686e472b70b560f7021f567adf4d", 0x4) writev(r0, &(0x7f0000001480)=[{&(0x7f00000002c0)="b99d311bcb925053e557571e0f9088f0e25c0ff18aa74e81c2f266c1560281d8aa55d364a988f1280a04f26227c952a2e7a46f8f191ceaa94bc3dd37a3f0fff426bfa483bdb8ee3cab6d204b6510624e4e80b6fb235d725956516651243b61b2a4a70f852b0259aa276555cb53899dab85e9aebd23b9a8dfd46da4f0ad01090e3bda76f0efeb2c7e2ea7676585cbd5882beb655ccf8f60da2849922090f5d956b0cb0fe3e64ec4d4a6335584f12c9292c8dbc7b31414986c83a2276f6232343261dd539444d9c49bd93db7a7259858e80c7b565fb8bdfb498b17aa75b0e10fe31e484e8294922e33bd60e706f247919d039a8a189aa0ef", 0xf7}, {&(0x7f00000003c0)="425eb64f448880314779121d74399ecc02dc93ed6c030a147085f77743f9090833d2945f7aae883de4a7f3dc2f24562c858a4619bb5648f539c69cab4443570d6d5f84cdb8d4fb400aa1ccd36af12fdbd2e459ab54ebe13f65806a2209c0cd5aa2ddb4b58cdf3cb1670af6983acc527d03bbb5b9719050ff012ce29a6f7ab5f16e1612717eae39bab472af3ab514c9e70b51bc4e2147a8f1097b37816d72666e59faf7d6af3f5e51a42e2a15b027dd79c8938ba7725d7bdc", 0xb8}, {&(0x7f0000000080)="550fda96857e4fc455c5f3fe8edea710", 0x10}, {&(0x7f0000000480)="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", 0x1000}, {&(0x7f0000000240)="be738bd7aa798143b3b7f229f849bceb198f63feb95d656b4d3274bc5093e00930f9e2545dec77f4268b0280c3c0836ae72f44206992c9163b778e", 0x3b}], 0x5) r4 = open(&(0x7f0000000280)='./file1\x00', 0x8000, 0x120) ioctl$FIONBIO(r4, 0x82907003, &(0x7f0000000140)=0x2) sysctl$kern(0x0, 0x0, &(0x7f00000000c0)="3bf2ee74e747c82dad6eb2a36fa755e1a3925fe49afca7e63b52fa65ccaa74d6e6b85b6cdced70357ef201f97842b1068dca31553fa2d7031f38c03e56ad0e24dfc4f97b8b7f81499647e6e7725765d61436c85e43c15d12a78cb8c57ddde87021d7b685507fd3e0652f35e45bdaa3afd86c4fe557433e4c2b632de71c951516adff26aa2e48b45f8ce92bcefd3eceefabee7e3ebe806fdb4f6af569ae94b5d127", 0x0, 0x0, 0x0) r5 = socket(0x2, 0x2, 0x0) bind(r5, &(0x7f0000000000)=@un=@file={0x1}, 0x2) kevent(r4, &(0x7f0000001500)=[{{r4}, 0xfffffffffffffffa, 0x40, 0x4, 0x5, 0x2}, {{r4}, 0xfffffffffffffffa, 0x8, 0x4, 0x26a, 0x6}, {{r5}, 0xfffffffffffffffc, 0x8, 0x1, 0x2, 0xffffffffffffffff}, {{r2}, 0xffffffffffffffff, 0x836d65b88f385333, 0x80, 0x2, 0x3}, {{r4}, 0xfffffffffffffffc, 0x0, 0x10, 0x2, 0xc}, {{r4}, 0xffffffffffffffff, 0xbf, 0x2, 0x8, 0x6}, {{r4}, 0xfffffffffffffff9, 0x80, 0x2, 0x4, 0x2}], 0x3, &(0x7f0000001600)=[{{r2}, 0xfffffffffffffffb, 0x21, 0x8, 0x81, 0x5}], 0x4, &(0x7f0000001640)={0x7, 0x5}) socket$inet(0x2, 0x4000000000000001, 0x0) openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) select(0x40, &(0x7f0000000180)={0xfffffffffffffffd, 0x44809e9d, 0xffffffffffffffff, 0x1, 0x2000000000000000, 0x181c, 0x8, 0x9}, 0x0, 0x0, 0x0) select(0x40, &(0x7f0000000180)={0xfffffffffffffffd, 0x52f0d8ec, 0xb4c, 0xfffffffeffffffff, 0x8000, 0x210, 0x8, 0x7}, 0x0, 0x0, 0x0) 366.209002ms ago: executing program 5 (id=486): r0 = socket(0x18, 0x2, 0x0) r1 = syz_open_pts() (async) mknod(0x0, 0x2000, 0x1e5f) (async) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x1700) r2 = open(&(0x7f0000000000)='./file0\x00', 0x200, 0xc0) ioctl$WSMOUSEIO_SCALIBCOORDS(r2, 0x81205724, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async, rerun: 64) ioctl$VNDIOCSET(r2, 0x80184404, 0x0) (async, rerun: 64) ioctl$VNDIOCSET(r2, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) (async) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) ioctl$BIOCGDLTLIST(r3, 0xc010427b, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[0x0]}) mknod(&(0x7f0000000080)='./bus\x00', 0x2000, 0x205b1a) mknod(&(0x7f0000000000)='./file1\x00', 0x2000, 0x285b9a) r4 = open(&(0x7f0000000800)='./file1\x00', 0x800, 0x120) r5 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7959) sysctl$net_inet_ip(&(0x7f0000000000)={0x4, 0x2, 0x0, 0x17}, 0x4, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) writev(r5, &(0x7f0000000140)=[{&(0x7f0000000000)="7f454c4602df7a264ee4975f55011a49b70cb710aa950000000a52e92a24d18fcf8fd1f9794ffa08bb11bafcdc24ff4c5d0b5c7b1ad1a2ec434c500191", 0x3d}, {&(0x7f0000000340)="1551e6", 0x3}], 0x2) (rerun: 32) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) (async) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x205b9a) open(&(0x7f0000000100)='./file0\x00', 0x10000, 0x100) ioctl$FIOSETOWN(r4, 0x8004667c, &(0x7f0000000140)=0x5) (async) ioctl$FIOASYNC(r1, 0x80047460, &(0x7f00000000c0)=0x4) ioctl$TIOCMGET(r1, 0x4004746a, 0x0) ioctl$FIONREAD(r0, 0x8020697a, &(0x7f00000001c0)) 139.884287ms ago: executing program 5 (id=487): r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x200, 0x18b) syz_emit_ethernet(0x23c, &(0x7f00000009c0)={@random="8f6f77ede655", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "010600", 0x206, 0x3a, 0x0, @empty, @local={0xfe, 0x80, '\x00', 0x0}, {[@hopopts={0x3, 0x24, '\x00', [@pad1, @jumbo={0xc2, 0x4, 0x9}, @pad1, @generic={0x6, 0x59, "51a793c977cb361c6000d20e47ad80132616b242af2e6e555850382e37beea95409e39d0ff199830aa25733f01e56f43cc041ddadbd0210e0596da8985d89bf97059e003d416490b5ba43574dcfbe13ef794523d50868069d2"}, @generic={0xf, 0x89, "4874a74e6baa90f32d326d08c2ad6faa54116aeb136329befff2c20ab2eabbdae957448e480b9ebfdc4ddda4d03c6272acbc12369a1d9e7dfa0b17ff027dca36f545b84b4c99cfc9ed7fe9ba84f366c4e1870713b76bedbf2a572d5ae63a0177880831e962e8d12c5faea5ffd41f2c4766f8ea0d5ee9360052b76c49230c51050302dc5d196c70a3fb"}, @enc_lim={0x4, 0x1, 0xa}, @generic={0x80, 0x2f, "a6a1521ec8712f91d6c47bca729b6c731acaba0a097a65e17310951850416bb690435989e813a8fc37e26c75cdde5a"}]}, @dstopts={0x37}, @dstopts={0x6, 0x1, '\x00', [@ra={0x5, 0x2, 0xa}, @enc_lim={0x4, 0x1, 0x4}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @hopopts={0x3b, 0x5, '\x00', [@enc_lim={0x4, 0x1, 0x9}, @jumbo={0xc2, 0x4, 0x6}, @generic={0x2, 0x17, "adfd9531895d45b6a162dc01e3eed690a38da896d8111f"}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}, @fragment={0x8, 0x0, 0x7, 0x1, 0x0, 0x1, 0x67}, @dstopts={0x8, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0xf1}]}], @icmpv6=@ni={0x8b, 0x0, 0x0, 0x9, 0xb, 0x0, "c84a2e629e88b188b139c8115d234e65b3770b9b5929e49638920512a853cec66664ba9f0783ef2c802d49927b2c3676a7cef35f17f4503aa12dfb14d379a13cc74d4df4e4e5a8f998290aff0fe89fbfc30cf7739e53"}}}}}}) chflags(&(0x7f0000000140)='./file0\x00', 0x0) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x65}) r1 = syz_open_pts() close(r1) r2 = syz_open_pts() ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000340)={0x8, 0x5, 0xffffdf82, 0xffffff8c, "08ed95990000000000000000ffffffffffffffe6", 0x4, 0x4}) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) readv(r2, &(0x7f0000000040)=[{&(0x7f0000000000)=""/18, 0x12}], 0x1) r3 = socket$inet(0x2, 0x3, 0xfc) ioctl$FIONREAD(r3, 0x80206979, &(0x7f0000000000)) sysctl$kern(&(0x7f0000000180)={0x1, 0x53}, 0x2, 0x0, 0x0, 0x0, 0x0) r4 = fcntl$dupfd(r0, 0x3, 0xffffffffffffff9c) sendto$unix(r4, &(0x7f0000000040)="e92e42783c52e7d2e34f86b7ed3c5a09bc51e49cccd4e32c0cd1e7d46617de1b2047da74895e02a238d6a105c1fd74d37216a61b416e9a4db9782fa5af9807803e07e96adbb74460f76f1a38db7f51a072334c33cdfd3d3b163db4d043810c0dd5366522", 0x64, 0x8, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0xa) write(r4, &(0x7f0000000100), 0xfffffe5d) msgget(0x2, 0x402) 139.418994ms ago: executing program 1 (id=488): mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) (async) r0 = open(&(0x7f0000000040)='./file0\x00', 0x200, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2, 0x10, r0, 0x0) (async) sysctl$net_inet_tcp(&(0x7f0000000000)={0x4, 0x2, 0x6, 0x18}, 0x4, 0x0, 0x0, 0x0, 0x0) 139.303477ms ago: executing program 1 (id=489): setrlimit(0x1, &(0x7f0000000240)={0xad, 0x1fd}) r0 = getpid() open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, r0) setrlimit(0x3, &(0x7f0000000080)={0x7, 0x2}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000100)={0x0, 0x1b, &(0x7f0000000240)=[{&(0x7f0000000140)=""/218}, {&(0x7f00000002c0)=""/70}, {&(0x7f0000000340)=""/106}], 0x100000000000039d, 0x0}, 0x0) 5.4288ms ago: executing program 1 (id=490): r0 = msgget$private(0x0, 0x200) (async) setgid(0xffffffffffffffff) setgroups(0x0, 0x0) (async) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f0000000200)=@file={0xd570d0466b6018f, './file0\x00'}, 0xa) (async) listen(r1, 0x0) (async) r2 = socket$unix(0x1, 0x5, 0x0) connect$unix(r2, &(0x7f0000000000)=@file={0xd1653077bafa0114, './file0\x00'}, 0xa) r3 = socket$unix(0x1, 0x5, 0x0) connect$unix(r3, &(0x7f0000000000)=@file={0xd1653077bafa0114, './file0\x00'}, 0xa) close(r1) setuid(0xffffffffffffffff) (async) msgsnd(r0, 0x0, 0x5b, 0x800) 4.788428ms ago: executing program 1 (id=491): r0 = socket(0x2, 0x3, 0x1) sysctl$net_inet_ip(&(0x7f00000001c0)={0x4, 0x2, 0x0, 0x5}, 0x4, &(0x7f0000000200), 0x0, 0x0, 0x0) setsockopt$inet_opts(r0, 0x0, 0x1, &(0x7f0000000080)="0315f1d8dec5a317a93546ba", 0xc) (async) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x2000, 0x4800) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0x4, [{&(0x7f0000558000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil}, {&(0x7f0000340000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0xffffffffffffff7e}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f00006b9000/0x1000)=nil, 0x80000000}, {&(0x7f00001da000/0x4000)=nil, &(0x7f00000e0000/0x4000)=nil, 0xffffffffffffffff}, {&(0x7f0000171000/0x4000)=nil, &(0x7f00005ff000/0x4000)=nil, 0x401}, {&(0x7f000060b000/0x2000)=nil, &(0x7f00002bb000/0x2000)=nil, 0x80000002}, {&(0x7f0000338000/0x4000)=nil, &(0x7f0000000000/0x400000)=nil, 0x8}, {&(0x7f000077c000/0x1000)=nil, &(0x7f00000ce000/0x4000)=nil, 0x5}, {&(0x7f000045d000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x6ba}, {&(0x7f0000132000/0x2000)=nil, &(0x7f00003f2000/0x2000)=nil, 0x7}, {&(0x7f000064b000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x5}, {&(0x7f0000008000/0x3000)=nil, &(0x7f0000688000/0x4000)=nil, 0x3}, {&(0x7f0000196000/0x3000)=nil, &(0x7f000076c000/0x4000)=nil, 0xa}, {&(0x7f000024b000/0x2000)=nil, &(0x7f000079e000/0x4000)=nil, 0xffffffffbffffff9}, {&(0x7f00004d0000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x5e04}, {&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000001000/0x800000)=nil, 0x6}], './file0\x00', 0x3}) (async) sysctl$kern(&(0x7f00000000c0)={0x1, 0x37}, 0x2, 0x0, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x80, 0x9) ioctl$FIOASYNC(r1, 0xc0107002, &(0x7f00000000c0)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f00000018c0)={0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000ffff000001"], 0x10, 0x402}, 0x0) 4.674581ms ago: executing program 1 (id=492): unveil(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000140)='c\x00') (async) unveil(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000140)='c\x00') sysctl$net_inet_carp(&(0x7f0000000040)={0x4, 0x2, 0x6, 0x4}, 0x4, 0x0, 0x0, &(0x7f00000010c0)="e500edff", 0x4) 2.026961ms ago: executing program 2 (id=493): mprotect(&(0x7f0000034000/0x3000)=nil, 0x3000, 0x0) r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$TIOCSETA(r0, 0xc148445f, &(0x7f0000000300)={0x2, 0x8, 0x8000, 0xfffffff9, "97a22200000000000000dc2d00800900", 0x2505, 0xfffffffe}) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x3200) r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) pread(r1, &(0x7f0000000040)="3cd15db7c30016", 0x50cc00, 0x0) munmap(&(0x7f000000e000/0x400000)=nil, 0x400000) open(&(0x7f0000000000)='./file0\x00', 0x800, 0xb34ca7c1479bb220) 0s ago: executing program 1 (id=494): chmod(&(0x7f0000000040)='.\x00', 0x35e) setuid(0xee01) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000200)=@file={0xd570d0466b6018f, './file0\x00'}, 0xa) r1 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r1, &(0x7f0000000080)={&(0x7f0000000040)=@file={0x170, './file0\x00'}, 0xa, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xe) chmod(&(0x7f0000000040)='.\x00', 0x35e) (async) setuid(0xee01) (async) socket$unix(0x1, 0x2, 0x0) (async) bind$unix(r0, &(0x7f0000000200)=@file={0xd570d0466b6018f, './file0\x00'}, 0xa) (async) socket$unix(0x1, 0x2, 0x0) (async) sendmsg$unix(r1, &(0x7f0000000080)={&(0x7f0000000040)=@file={0x170, './file0\x00'}, 0xa, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xe) (async) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.255' (ED25519) to the list of known hosts. pckbd_enable: command error malloc(): allocation too large, type = 29, size = 16796513700 pckbd_enable: command error uvn_flush: obj=0xfffffd806c107830, offset=0x0. error during pageout. uvn_flush: WARNING: changes to page may be lost! wStopped at db_enter+0x25: addq $0x8,%rsp ddb{1}> ddb{1}> set $lines = 0 ddb{1}> set $maxwidth = 0 ddb{1}> show panic the kernel did not panic ddb{1}> trace db_enter() at db_enter+0x25 witness_checkorder(fffffd806b9d3568,9,0) at witness_checkorder+0x10d1 rw_do_enter_write(fffffd806b9d3550,1) at rw_do_enter_write+0xba rrw_enter(fffffd806b9d3550,1) at rrw_enter+0xc6 VOP_LOCK(fffffd8077e86af8,2001) at VOP_LOCK+0xbd vn_lock(fffffd8077e86af8,2001) at vn_lock+0xa4 vfs_lookup(ffff80003c3f48d0) at vfs_lookup+0x11c namei(ffff80003c3f48d0) at namei+0x7ca unp_connect(ffff800010fd6040,fffffd806d09b500,ffff80002a231770) at unp_connect+0x29d uipc_dgram_send(ffff800010fd6040,fffffd806d09b800,fffffd806d09b500,0) at uipc_dgram_send+0x163 sosend(ffff800010fd6040,fffffd806d09b500,ffff80003c3f4b58,0,0,e) at sosend+0x804 sendit(ffff80002a231770,4,ffff80003c3f4cd8,e,ffff80003c3f4d90) at sendit+0x5a5 sys_sendmsg(ffff80002a231770,ffff80003c3f4e40,ffff80003c3f4d90) at sys_sendmsg+0x246 syscall(ffff80003c3f4e40) at syscall+0xbd4 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xee8a300f900, count: -15 ddb{1}> show registers rdi 0 rsi 0 rbp 0xffff80003c3f4540 rbx 0 rdx 0 rcx 0xffff80002a231770 rax 0xffff8000299adff0 r8 0xffff80003c3f4420 r9 0x8080808080808080 r10 0x38e13ef2622671f0 r11 0x2d2362e2a70b0b9a r12 0xfffffd80040468c0 r13 0xfffffd800482e570 r14 0x3 r15 0xffffffff834b526b substchar+0x1174 rip 0xffffffff8167ba25 db_enter+0x25 cs 0x8 rflags 0x246 rsp 0xffff80003c3f4530 ss 0x10 db_enter+0x25: addq $0x8,%rsp ddb{1}> show proc PROC (syz-executor) tid=273929 pid=86273 tcnt=2 stat=onproc flags process=10 proc=4000000 runpri=32, usrpri=86, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff80002a230018,0xffff80002a230558 process=0xffff8000ffff1cf0 user=0xffff80003c3ef000, vmspace=0xfffffd807a21e9a0 estcpu=36, cpticks=1, pctcpu=0.0, user=0, sys=1, intr=0 ddb{1}> ps PID TID PPID UID S FLAGS WAIT COMMAND 61825 447577 91282 0 2 0 syz-executor 61825 403973 91282 0 3 0x4000080 fsleep syz-executor 86273 159765 7201 60929 2 0x10 syz-executor *86273 273929 7201 60929 7 0x4000010 syz-executor 70093 115962 44119 0 3 0x80 nanoslp syz-executor 70093 346429 44119 0 3 0x4000080 pipewr syz-executor 70093 236086 44119 0 3 0x4000080 fsleep syz-executor 51427 40114 87514 0 3 0x80 nanoslp syz-executor 51427 468664 87514 0 3 0x4000080 lockf syz-executor 51427 139105 87514 0 3 0x4000080 fsleep syz-executor 63819 219977 63632 0 3 0x82 wait syz-executor 1350 355514 0 0 3 0x14200 acct acct 44119 311362 63632 0 3 0x82 nanoslp syz-executor 39826 313192 63632 0 3 0x82 wait syz-executor 15591 489429 46292 0 3 0x100082 sbwait ndp 46292 306381 19878 0 3 0x10008a sigsusp sh 51257 6184 71993 0 3 0x100082 sbwait arp 71993 406926 98684 0 3 0x10008a sigsusp sh 98684 40784 63632 0 3 0x82 wait syz-executor 87514 291497 63632 0 3 0x82 nanoslp syz-executor 19878 222762 63632 0 3 0x82 wait syz-executor 91282 465771 63632 0 3 0x82 nanoslp syz-executor 7201 392665 63632 0 3 0x82 nanoslp syz-executor 63632 384119 28975 0 7 0x2 syz-executor 28975 118622 4933 0 3 0x10008a sigsusp ksh 4933 253200 17453 0 3 0x98 kqread sshd-session 17453 103368 99675 0 3 0x92 kqread sshd-session 48150 57059 1 0 3 0x100083 ttyopn getty 99675 179155 1 0 3 0x88 kqread sshd 34782 146282 94010 74 3 0x1100092 bpf pflogd 94010 406795 1 0 3 0x80 sbwait pflogd 6535 268747 85538 73 3 0x1100090 kqread syslogd 85538 89575 1 0 3 0x100082 sbwait syslogd 38988 182289 1 0 3 0x100080 kqread resolvd 99006 304601 58084 77 3 0x100092 kqread dhcpleased 9973 293219 58084 77 3 0x100092 kqread dhcpleased 58084 358883 1 0 3 0x80 kqread dhcpleased 11321 509896 0 0 3 0x14200 bored smr 79717 293875 0 0 3 0x14200 pgzero zerothread 909 34850 0 0 3 0x14200 aiodoned aiodoned 69335 266420 0 0 3 0x14200 syncer update 99134 129054 0 0 3 0x14200 cleaner cleaner 92200 49995 0 0 3 0x14200 reaper reaper 45755 434766 0 0 3 0x14200 pgdaemon pagedaemon 92913 29898 0 0 3 0x14200 bored viomb 82580 253899 0 0 3 0x40014200 acpi0 acpi0 76694 382088 0 0 3 0x40014200 idle1 43992 10093 0 0 3 0x14200 bored softnet1 83093 296658 0 0 3 0x14200 bored softnet0 79973 336059 0 0 3 0x14200 bored systqmp 3821 468344 0 0 3 0x14200 bored systq 16675 4110 0 0 3 0x14200 tmoslp softclockmp 1252 295614 0 0 3 0x40014200 tmoslp softclock 58008 440915 0 0 3 0x40014200 idle0 1 416836 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb{1}> show all locks Process 86273 (syz-executor) thread 0xffff80002a231770 (273929) exclusive kernel_lock &kernel_lock r = 0 (0xffffffff83a56440) #0 witness_lock+0x5f1 #1 unp_connect+0x28c #2 uipc_dgram_send+0x163 #3 sosend+0x804 #4 sendit+0x5a5 #5 sys_sendmsg+0x246 #6 syscall+0xbd4 #7 Xsyscall+0x128 exclusive rwlock sbufsnd r = 0 (0xffff800010fd6228) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 sblock+0xb6 #3 sosend+0x2e9 #4 sendit+0x5a5 #5 sys_sendmsg+0x246 #6 syscall+0xbd4 #7 Xsyscall+0x128 Process 63632 (syz-executor) thread 0xffff80002a232540 (384119) shared rwlock vmmaplk r = 0 (0xfffffd806ea25c80) #0 witness_lock+0x5f1 #1 rw_do_enter_read+0x3e8 #2 uvmfault_lookup+0x122 #3 uvm_fault_check+0x4f #4 uvm_fault+0x106 #5 upageflttrap+0xa9 #6 usertrap+0x430 #7 recall_trap+0x8 ddb{1}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 11096 12095K 12312K 166960K 12641 0 pcb 17 14K 16K 166960K 256 0 rtable 238 10K 10K 166960K 507 0 pf 36 17K 18K 166960K 106 0 ifaddr 42 7K 8K 166960K 89 0 ifgroup 59 2K 2K 166960K 135 0 sysctl 3 1K 9K 166960K 13 0 counters 72 37K 38K 166960K 152 0 ioctlops 0 0K 4K 166960K 1649 0 iov 0 0K 16K 166960K 31 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1382 87K 88K 166960K 1949 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 5K 166960K 8 0 VM map 2 1K 1K 166960K 2 0 sem 17 16K 16K 166960K 29 0 dirhash 12 2K 2K 166960K 15 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 20 73K 93K 166960K 667 0 sigio 0 0K 0K 166960K 75 0 proc 72 115K 164K 166960K 665 0 subproc 72 4K 4K 166960K 99 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 62 0 in_multi 89 6K 6K 166960K 151 0 ether_multi 1 0K 0K 166960K 5 0 mrt 0 0K 0K 166960K 18 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 223 996K 996K 166960K 223 0 exec 0 0K 1K 166960K 546 0 fusefs mount 1 32K 32K 166960K 1 0 pfkey data 0 0K 0K 166960K 2 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 264 180K 196K 166960K 7930 0 UVM aobj 21 6K 6K 166960K 24 0 pinsyscall 47 94K 105K 166960K 1933 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 0K 166960K 57 0 NDP 13 0K 1K 166960K 59 0 temp 62 9080K 9144K 166960K 23930 0 kqueue 13 20K 29K 166960K 131 0 SYN cache 2 16K 16K 166960K 2 0 ddb{1}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 26 0 0 1 0 1 1 0 8 0 rtpcb 120 84 0 79 1 0 1 1 0 8 0 rtentry 176 151 0 54 5 0 5 5 0 8 0 unpcb 144 521 0 502 2 1 1 2 0 8 0 syncache 336 5 0 5 2 1 1 1 0 8 1 tcpcb 736 219 0 215 10 6 4 7 0 8 3 arp 136 25 0 7 1 0 1 1 0 8 0 inpcb 328 780 0 771 7 3 4 7 0 8 2 nd6 152 32 0 9 1 0 1 1 0 8 0 pkpcb 40 4 0 4 1 0 1 1 0 8 1 kcovpl 48 11 0 3 1 0 1 1 0 8 0 ppxss 1192 32 0 32 1 0 1 1 0 8 1 pppxif 1504 1 0 1 1 1 0 1 0 8 0 pffrag 232 4 0 0 1 0 1 1 0 482 0 pffrnode 88 4 0 0 1 0 1 1 0 8 0 pffrent 40 6 0 2 1 0 1 1 0 8 0 pfosfp 40 1428 0 1005 5 0 5 5 0 8 0 pfosfpen 112 1428 0 714 21 0 21 21 0 8 0 pfstitem 24 42 0 11 1 0 1 1 0 8 0 pfstkey 128 42 0 11 2 0 2 2 0 8 0 pfstate 448 42 0 11 5 0 5 5 0 8 0 pfrule 1360 22 0 15 2 0 2 2 0 8 0 art_heap8 4096 3 0 0 3 0 3 3 0 8 0 art_heap4 256 663 0 259 28 2 26 27 0 8 0 art_table 40 666 0 259 5 0 5 5 0 8 0 art_node 32 150 0 63 1 0 1 1 0 8 0 sysvmsgpl 40 14 0 12 1 0 1 1 0 8 0 semupl 112 2 0 2 2 1 1 1 0 8 1 semapl 112 23 0 8 1 0 1 1 0 8 0 shmpl 112 20 0 3 1 0 1 1 0 8 0 dirhash 1024 19 0 2 3 0 3 3 0 8 0 dino2pl 256 2731 0 1263 93 0 93 93 0 8 0 ffsino 296 2731 0 1263 114 0 114 114 0 8 0 nchpl 144 3642 0 1930 64 0 64 64 0 8 0 rtmask 32 8 0 8 1 1 0 1 0 8 0 vnodes 216 3051 0 0 170 0 170 170 0 8 0 namei 1024 12742 0 12741 1 0 1 1 0 8 0 percpumem 16 91 0 40 1 0 1 1 0 8 0 vcpupl 3968 1 0 0 1 0 1 1 0 8 0 vmpool 848 1 0 0 1 0 1 1 0 8 0 kstatmem 264 82 0 52 3 0 3 3 0 8 0 scsiplug 72 2 0 2 2 1 1 1 0 8 1 scxspl 216 18989 0 18989 9 7 2 8 1 8 2 plimitpl 152 235 0 217 1 0 1 1 0 8 0 sigapl 424 990 0 939 7 0 7 7 0 8 0 knotepl 120 516 0 0 16 0 16 16 0 8 0 kqueuepl 224 239 0 230 5 4 1 5 0 8 0 pipepl 344 184 0 156 4 1 3 4 0 8 0 fdescpl 528 973 0 939 3 0 3 3 0 8 0 filepl 160 6160 0 5932 16 4 12 16 0 8 1 lockfpl 104 296 0 292 1 0 1 1 0 8 0 lockfspl 48 84 0 81 1 0 1 1 0 8 0 sessionpl 144 27 0 18 1 0 1 1 0 8 0 pgrppl 48 49 0 32 1 0 1 1 0 8 0 ucredpl 104 1254 0 1239 1 0 1 1 0 8 0 zombiepl 144 941 0 939 1 0 1 1 0 8 0 processpl 1232 990 0 939 5 0 5 5 0 8 0 procpl 664 1874 0 1817 6 0 6 6 0 8 0 sosppl 176 4 0 4 2 2 0 1 0 8 0 sockpl 752 1412 0 1379 10 3 7 10 0 8 3 mcl64k 65536 4 0 0 1 0 1 1 0 8 0 mcl16k 16384 5 0 0 1 0 1 1 0 8 0 mcl12k 12288 2 0 0 1 0 1 1 0 8 0 mcl8k 8192 3 0 0 1 0 1 1 0 8 0 mcl4k 4096 119 0 0 15 0 15 15 0 8 0 mcl2k 2048 40 0 0 5 0 5 5 0 8 0 mtagpl 96 1 0 0 1 0 1 1 0 8 0 mbufpl 256 1146 0 0 72 0 72 72 0 8 0 bufpl 280 7261 0 1132 438 0 438 438 0 8 0 anonpl 32 7811 0 0 63 0 63 63 0 246 0 amapchunkpl 152 25069 0 24519 28 3 25 28 0 158 3 amappl16 200 3476 0 3431 24 13 11 15 0 8 8 amappl15 192 2 0 2 1 1 0 1 0 8 0 amappl14 184 478 0 475 1 0 1 1 0 8 0 amappl13 176 134 0 120 1 0 1 1 0 8 0 amappl12 168 1241 0 1208 2 0 2 2 0 8 0 amappl11 160 7 0 7 1 1 0 1 0 8 0 amappl10 152 67 0 53 1 0 1 1 0 8 0 amappl9 144 265 0 265 1 1 0 1 0 8 0 amappl8 136 152 0 148 1 0 1 1 0 8 0 amappl7 128 157 0 141 1 0 1 1 0 8 0 amappl6 120 187 0 184 1 0 1 1 0 8 0 amappl5 112 104 0 93 1 0 1 1 0 8 0 amappl4 104 312 0 288 1 0 1 1 0 8 0 amappl3 96 5022 0 4897 4 0 4 4 0 8 0 amappl2 88 609 0 545 2 0 2 2 0 8 0 amappl1 80 12731 0 12070 18 0 18 18 0 8 3 amappl 88 7038 0 6857 5 0 5 5 0 92 0 uvmvnodes 80 113 0 0 3 0 3 3 0 8 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 7 0 7 2 2 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 23 0 3 1 0 1 1 0 8 0 uaddrrnd 24 973 0 939 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 973 0 939 1 0 1 1 0 8 0 vmmpekpl 168 9419 0 9373 3 0 3 3 0 8 0 vmmpepl 168 70386 0 68319 102 2 100 101 0 357 8 vmsppl 488 972 0 939 5 0 5 5 0 8 0 rwobjpl 80 22309 0 21116 30 1 29 29 0 8 0 pdppl 4096 1955 0 1879 107 29 78 85 0 8 2 pvpl 32 15900 0 0 129 0 129 129 0 265 0 pmappl 256 973 0 939 3 0 3 3 0 8 0 extentpl 40 45 0 27 1 0 1 1 0 8 0 phpool 112 356 0 41 10 0 10 10 0 8 0 ddb{1}> machine ddbcpu 0 Stopped at x86_ipi_db+0x27: addq $0x8,%rsp ddb{0}> trace x86_ipi_db(ffffffff83869ff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc+0x2c __mp_lock(ffffffff83a55c40) at __mp_lock+0x1a3 intr_handler(ffff80002a2a3b40,ffff800000079600) at intr_handler+0xe9 Xintr_ioapic_edge16_untramp() at Xintr_ioapic_edge16_untramp+0x18f __sanitizer_cov_trace_cmp8(875d283b000,87840513000) at __sanitizer_cov_trace_cmp8+0x35 uvm_map_lookup_entry(fffffd806ea25b80,87840513000,ffff80002a2a3e98) at uvm_map_lookup_entry+0x130 uvmfault_lookup(ffff80002a2a3e70,0) at uvmfault_lookup+0x133 uvm_fault_check(ffff80002a2a3e70,ffff80002a2a3ea8,ffff80002a2a3ee0,0) at uvm_fault_check+0x4f uvm_fault(fffffd806ea25b80,87840513000,0,2) at uvm_fault+0x106 upageflttrap(ffff80002a2a4010,87840513000) at upageflttrap+0xa9 usertrap(ffff80002a2a4010) at usertrap+0x430 recall_trap() at recall_trap+0x8 end of kernel end trace frame: 0x7e4bc60f7700, count: -15 ddb{0}> machine ddbcpu 1 Stopped at db_enter+0x25: addq $0x8,%rsp ddb{1}> trace db_enter() at db_enter+0x25 witness_checkorder(fffffd806b9d3568,9,0) at witness_checkorder+0x10d1 rw_do_enter_write(fffffd806b9d3550,1) at rw_do_enter_write+0xba rrw_enter(fffffd806b9d3550,1) at rrw_enter+0xc6 VOP_LOCK(fffffd8077e86af8,2001) at VOP_LOCK+0xbd vn_lock(fffffd8077e86af8,2001) at vn_lock+0xa4 vfs_lookup(ffff80003c3f48d0) at vfs_lookup+0x11c namei(ffff80003c3f48d0) at namei+0x7ca unp_connect(ffff800010fd6040,fffffd806d09b500,ffff80002a231770) at unp_connect+0x29d uipc_dgram_send(ffff800010fd6040,fffffd806d09b800,fffffd806d09b500,0) at uipc_dgram_send+0x163 sosend(ffff800010fd6040,fffffd806d09b500,ffff80003c3f4b58,0,0,e) at sosend+0x804 sendit(ffff80002a231770,4,ffff80003c3f4cd8,e,ffff80003c3f4d90) at sendit+0x5a5 sys_sendmsg(ffff80002a231770,ffff80003c3f4e40,ffff80003c3f4d90) at sys_sendmsg+0x246 syscall(ffff80003c3f4e40) at syscall+0xbd4 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xee8a300f900, count: -15