last executing test programs: 7.955069669s ago: executing program 1 (id=500): chmod(&(0x7f0000000080)='.\x00', 0x3db) setuid(0xffffffffffffffff) r0 = socket(0x2, 0x8002, 0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) closefrom(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) bind$unix(r2, &(0x7f0000000140)=@file={0x4, 0x1, './file0\x00'}, 0xa) r3 = semget$private(0x0, 0x4, 0x2a1) semop(r3, &(0x7f0000000000)=[{0x3, 0x2d, 0x1000}, {0x0, 0x2, 0x800}, {0x2, 0x867c, 0x1800}], 0x3) r4 = semget(0x0, 0x2, 0x3ac) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r5, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f00000005c0)=0xc) setresgid(r7, r7, 0x0) semctl$IPC_SET(r4, 0x0, 0x1, &(0x7f0000000780)={{r6, r7, r6, r7, 0x8f, 0x1a00, 0x0, 0x0, 0xb}, 0x0, 0x6, 0x0, 0x0, 0x7, 0x0, 0x8}) getgroups(0x6, &(0x7f0000000040)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0]) lstat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) r10 = openat$bpf(0xffffffffffffff9c, &(0x7f00000001c0), 0x8000, 0x0) ioctl$BIOCSETIF(r10, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSETF(r10, 0x80104267, &(0x7f0000000100)={0x4, &(0x7f0000000080)=[{0x1d, 0x0, 0x2, 0xffff}, {0x48, 0x2, 0x6, 0x5}, {0x87, 0x1e, 0x63, 0x1001}, {0x9b1e, 0x7, 0xff, 0x200000}]}) syz_extract_tcp_res(0x0, 0xa93f, 0xfff) semctl$IPC_SET(r4, 0x0, 0x1, &(0x7f0000000200)={{r6, r8, r9, 0x0, 0xa, 0x8, 0x0, 0x0, 0x4}, 0x0, 0x2, 0x0, 0x0, 0x10003, 0x0, 0x8}) connect(r2, &(0x7f0000000000)=@un=@file={0x9, 0x1, './file0\x00'}, 0xa) 7.36450593s ago: executing program 1 (id=500): chmod(&(0x7f0000000080)='.\x00', 0x3db) setuid(0xffffffffffffffff) r0 = socket(0x2, 0x8002, 0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) closefrom(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) bind$unix(r2, &(0x7f0000000140)=@file={0x4, 0x1, './file0\x00'}, 0xa) r3 = semget$private(0x0, 0x4, 0x2a1) semop(r3, &(0x7f0000000000)=[{0x3, 0x2d, 0x1000}, {0x0, 0x2, 0x800}, {0x2, 0x867c, 0x1800}], 0x3) r4 = semget(0x0, 0x2, 0x3ac) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r5, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f00000005c0)=0xc) setresgid(r7, r7, 0x0) semctl$IPC_SET(r4, 0x0, 0x1, &(0x7f0000000780)={{r6, r7, r6, r7, 0x8f, 0x1a00, 0x0, 0x0, 0xb}, 0x0, 0x6, 0x0, 0x0, 0x7, 0x0, 0x8}) getgroups(0x6, &(0x7f0000000040)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0]) lstat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) r10 = openat$bpf(0xffffffffffffff9c, &(0x7f00000001c0), 0x8000, 0x0) ioctl$BIOCSETIF(r10, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSETF(r10, 0x80104267, &(0x7f0000000100)={0x4, &(0x7f0000000080)=[{0x1d, 0x0, 0x2, 0xffff}, {0x48, 0x2, 0x6, 0x5}, {0x87, 0x1e, 0x63, 0x1001}, {0x9b1e, 0x7, 0xff, 0x200000}]}) syz_extract_tcp_res(0x0, 0xa93f, 0xfff) semctl$IPC_SET(r4, 0x0, 0x1, &(0x7f0000000200)={{r6, r8, r9, 0x0, 0xa, 0x8, 0x0, 0x0, 0x4}, 0x0, 0x2, 0x0, 0x0, 0x10003, 0x0, 0x8}) connect(r2, &(0x7f0000000000)=@un=@file={0x9, 0x1, './file0\x00'}, 0xa) 6.894621765s ago: executing program 1 (id=500): chmod(&(0x7f0000000080)='.\x00', 0x3db) setuid(0xffffffffffffffff) r0 = socket(0x2, 0x8002, 0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) closefrom(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) bind$unix(r2, &(0x7f0000000140)=@file={0x4, 0x1, './file0\x00'}, 0xa) r3 = semget$private(0x0, 0x4, 0x2a1) semop(r3, &(0x7f0000000000)=[{0x3, 0x2d, 0x1000}, {0x0, 0x2, 0x800}, {0x2, 0x867c, 0x1800}], 0x3) r4 = semget(0x0, 0x2, 0x3ac) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r5, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f00000005c0)=0xc) setresgid(r7, r7, 0x0) semctl$IPC_SET(r4, 0x0, 0x1, &(0x7f0000000780)={{r6, r7, r6, r7, 0x8f, 0x1a00, 0x0, 0x0, 0xb}, 0x0, 0x6, 0x0, 0x0, 0x7, 0x0, 0x8}) getgroups(0x6, &(0x7f0000000040)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0]) lstat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) r10 = openat$bpf(0xffffffffffffff9c, &(0x7f00000001c0), 0x8000, 0x0) ioctl$BIOCSETIF(r10, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSETF(r10, 0x80104267, &(0x7f0000000100)={0x4, &(0x7f0000000080)=[{0x1d, 0x0, 0x2, 0xffff}, {0x48, 0x2, 0x6, 0x5}, {0x87, 0x1e, 0x63, 0x1001}, {0x9b1e, 0x7, 0xff, 0x200000}]}) syz_extract_tcp_res(0x0, 0xa93f, 0xfff) semctl$IPC_SET(r4, 0x0, 0x1, &(0x7f0000000200)={{r6, r8, r9, 0x0, 0xa, 0x8, 0x0, 0x0, 0x4}, 0x0, 0x2, 0x0, 0x0, 0x10003, 0x0, 0x8}) connect(r2, &(0x7f0000000000)=@un=@file={0x9, 0x1, './file0\x00'}, 0xa) 5.981656674s ago: executing program 1 (id=500): chmod(&(0x7f0000000080)='.\x00', 0x3db) setuid(0xffffffffffffffff) r0 = socket(0x2, 0x8002, 0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) closefrom(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) bind$unix(r2, &(0x7f0000000140)=@file={0x4, 0x1, './file0\x00'}, 0xa) r3 = semget$private(0x0, 0x4, 0x2a1) semop(r3, &(0x7f0000000000)=[{0x3, 0x2d, 0x1000}, {0x0, 0x2, 0x800}, {0x2, 0x867c, 0x1800}], 0x3) r4 = semget(0x0, 0x2, 0x3ac) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r5, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f00000005c0)=0xc) setresgid(r7, r7, 0x0) semctl$IPC_SET(r4, 0x0, 0x1, &(0x7f0000000780)={{r6, r7, r6, r7, 0x8f, 0x1a00, 0x0, 0x0, 0xb}, 0x0, 0x6, 0x0, 0x0, 0x7, 0x0, 0x8}) getgroups(0x6, &(0x7f0000000040)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0]) lstat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) r10 = openat$bpf(0xffffffffffffff9c, &(0x7f00000001c0), 0x8000, 0x0) ioctl$BIOCSETIF(r10, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSETF(r10, 0x80104267, &(0x7f0000000100)={0x4, &(0x7f0000000080)=[{0x1d, 0x0, 0x2, 0xffff}, {0x48, 0x2, 0x6, 0x5}, {0x87, 0x1e, 0x63, 0x1001}, {0x9b1e, 0x7, 0xff, 0x200000}]}) syz_extract_tcp_res(0x0, 0xa93f, 0xfff) semctl$IPC_SET(r4, 0x0, 0x1, &(0x7f0000000200)={{r6, r8, r9, 0x0, 0xa, 0x8, 0x0, 0x0, 0x4}, 0x0, 0x2, 0x0, 0x0, 0x10003, 0x0, 0x8}) connect(r2, &(0x7f0000000000)=@un=@file={0x9, 0x1, './file0\x00'}, 0xa) 5.100559787s ago: executing program 5 (id=567): ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, &(0x7f00000000c0)={0xa, 0x88000148, {[0x3, 0x40, 0x6, 0x6, 0x3, 0xd, 0x6, 0x40000000000, 0x7, 0x2, 0x9, 0x91c, 0x8, 0x2000180, 0x0, 0xd3, 0x76, 0xffffffffffffbff7], [0x5438b950, 0x5, 0x1004, 0x5, 0x5, 0x1, 0x9, 0x5, 0xffffffffffffffff, 0x3], [0x6, 0x6, 0x8000000008, 0x8000000008, 0x10000, 0x210, 0x1000002], [0x100000000, 0x10801, 0x0, 0x5, 0x3], [{0x0, 0x7, 0xfffffbfb, 0x80000000005}, {0x2, 0x925, 0x3, 0x338}, {0x1000, 0x2, 0x0, 0x5}, {0xb, 0xfffffbff, 0x2, 0x1}, {0x4, 0x4, 0x2, 0x8}, {0x1f, 0x4, 0x0, 0x7}, {0xe4, 0xffffff81, 0x1ff, 0x5}, {0x3, 0x10000, 0x8001, 0x5}], {0x6123, 0x0, 0x401, 0x8}, {0xfffe, 0xffffbfc0, 0x8, 0x4}}}) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r0 = socket(0x2, 0x2, 0x0) ioctl$FIONREAD(r0, 0x80206916, &(0x7f00000001c0)) 4.928284942s ago: executing program 5 (id=570): r0 = open(&(0x7f0000000040)='./file0\x00', 0x2, 0x0) preadv(r0, &(0x7f0000000340)=[{0x0}], 0x1, 0x0) ioctl$TIOCSCTTY(r0, 0x20007461) sysctl$kern(&(0x7f00000000c0)={0x1, 0x37}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94100e4ac63c90dddc11f11cad5cc4", &(0x7f0000000080)=0x2, 0x0, 0x37) (async) sysctl$hw(&(0x7f0000000000)={0x6, 0x18}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) readv(0xffffffffffffffff, 0x0, 0x0) (async) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x8, 0x2000000000000004}, 0x0, 0x0, 0x0) (async, rerun: 32) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6381) (async, rerun: 32) r1 = kqueue() kevent(r1, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) (async) r2 = setsid() fcntl$setown(r0, 0x6, r2) (async) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0xe010, r1, 0x0) (async, rerun: 64) r3 = open(&(0x7f0000000080)='./file0\x00', 0x10, 0x100) (async, rerun: 64) ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file0\x00', 0x29, 0x9, 0x10004, 0x0, 0x0, 0x3, 0x7, 0x2, 0x0, 0x2000004, 0x6}) (async) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x200, 0x4c) ioctl$WSMOUSEIO_SCALIBCOORDS(r4, 0x81205724, &(0x7f0000000100)={0x1, 0xffffaf35, 0x7f, 0x5, 0x80000000, 0x7fbffffd, 0x5, 0x10, [{0x10000000, 0x5, 0x3, 0x1}, {0xfffffff3, 0xfffffffe, 0x9, 0x2}, {0x20007, 0x8000b86, 0xffffff79, 0x9}, {0x7, 0x6, 0x2, 0x200}, {0x42, 0x8, 0x2, 0x800007}, {0x4020002, 0x8, 0x8, 0x109d7}, {0x9, 0xdf61, 0x200004f8, 0x10}, {0x3, 0x11, 0x14, 0xe}, {0xfffffffd, 0xe2b4, 0x1, 0xa}, {0x4, 0x8a, 0x400, 0x1ff}, {0x1e6, 0x400fff9, 0x927c, 0x4}, {0x3, 0x25, 0x9, 0x2d0e}, {0x1, 0x2, 0xa, 0x408}, {0x29a7171a, 0x8, 0x3, 0x2579}, {0x8000, 0xf8f, 0x8}, {0x10000, 0x800bd3d, 0xf779, 0x8}]}) (async) ioctl$VNDIOCSET(r4, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r4, 0x80044403, &(0x7f00000001c0)={0x0, 0x3ff, 0x0}) r5 = socket(0x11, 0x3, 0x0) (async) shutdown(0xffffffffffffffff, 0x2) mknod(&(0x7f00000000c0)='./file1\x00', 0x2000, 0x637d) (async, rerun: 64) r6 = open(&(0x7f0000000800)='./file1\x00', 0x8000, 0xba) (rerun: 64) ioctl$FIONBIO(r6, 0x82907003, &(0x7f0000000140)=0x1) (async) ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file0\x00', 0x209, 0x40009, 0x4, 0x0, 0x8000000a, 0x2, 0x8, 0x2, 0x0, 0x2000004, 0x12}) ioctl$FIONBIO(r3, 0x82907003, &(0x7f0000000140)=0x2) (async) dup(r3) closefrom(r1) (async) syz_emit_ethernet(0x10004, &(0x7f0000000240)=ANY=[@ANYRESOCT=r5, @ANYRESHEX=r4]) 4.923674206s ago: executing program 0 (id=561): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000480)=""/240, 0xfffffc47}, {&(0x7f00000000c0)=""/179, 0xfdac}, {&(0x7f00000002c0)=""/229, 0xe2}], 0x50, 0x0) seteuid(0xffffffffffffffff) r1 = getppid() r2 = socket(0x18, 0x3, 0x1) getsockopt(r2, 0x29, 0x6c, 0x0, 0x0) kill(r1, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x2100, 0x5f00) r3 = open(&(0x7f00000001c0)='./file0\x00', 0x100, 0x0) msgrcv(0x0, 0x0, 0x0, 0x3, 0x1800) ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r4 = dup(r0) msgrcv(0xffffffffffffffff, &(0x7f0000000580)={0x0, ""/169}, 0xb1, 0x0, 0x1c00) ioctl$BIOCGBLEN(r4, 0x40044266, &(0x7f0000000200)) ioctl$WSMOUSEIO_SETPARAMS(0xffffffffffffffff, 0x80105728, &(0x7f0000000040)={&(0x7f0000000300)=[{0x6, 0x80000001}], 0x1}) ioctl$DIOCSETTIMEOUT(r3, 0xc008441d, &(0x7f0000000180)={0x10, 0xf1}) r5 = socket(0x2, 0x2, 0x0) ioctl$DIOCNATLOOK(r0, 0xc0504417, &(0x7f00000006c0)={@v6=@empty, @v4, @v4=@multicast2, @v6=@rand_addr="087353d246435bfd8609659ebf64186e", 0x4, 0x856, 0x40, 0x4, 0x0, 0x7, 0x1a, 0x7}) ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, &(0x7f0000000100)={0x10, 0x0, {[0xfffefbfffffffff6, 0x0, 0x8, 0x5, 0x2, 0x0, 0x8, 0x0, 0xfffffffffffffffc, 0x4, 0x5, 0x3, 0xffffffffffffffff, 0x5, 0x8000000, 0x20000000001000a8, 0x8000002, 0xce7], [0x1, 0x80000001, 0xfffffffffffffffc, 0x8000fffffffc, 0x100, 0x7b97, 0x8, 0x2000404, 0x6, 0xffffffffffffffc1], [0x100000101, 0x1, 0x40000000, 0x6, 0xfffffffffbffefff, 0x5, 0xfffffffffffffffe], [0x100, 0x8, 0x401, 0x100000000, 0xffffffffffefffff, 0x6], [{0x0, 0x5, 0x0, 0x9}, {0x8, 0x2, 0x4e, 0x3}, {0x1, 0x10002, 0x5bec, 0x45c}, {0x3, 0x800005, 0x4, 0x80000003}, {0xd, 0xfffffffe, 0x0, 0xa000000}, {0x9, 0x2003, 0x4, 0x81}, {0x1, 0x0, 0x4, 0x4}, {0x0, 0x965, 0x0, 0x3}], {0x1ffc, 0xfffffd, 0x10000}, {0x8000, 0x109, 0x3, 0x8000000000000002}}}) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) ioctl$FIONREAD(r5, 0xc0206921, &(0x7f00000001c0)) ioctl$FIONREAD(r5, 0x8040691a, &(0x7f00000001c0)) syz_extract_tcp_res(&(0x7f0000000240)={0x41424344}, 0x6, 0x0) syz_extract_tcp_res(&(0x7f0000000280)={0x41424344}, 0x2, 0x2) syz_emit_ethernet(0x7e, &(0x7f0000000640)={@broadcast, @local, [], {@ipv6={0x86dd, {0x6, 0x6, "06fbbb", 0x48, 0xff, 0xa, @rand_addr="c331f43c53c717bf7942144b96eb7b46", @empty, {[@fragment={0x2, 0x0, 0x2, 0x0, 0x0, 0x1, 0x67}], @tcp={{0x1, 0x3, r6, r7, 0x0, 0x0, 0x8, 0x8, 0xff, 0x0, 0x1ff, {[@timestamp={0x8, 0xa, 0x9, 0x3}]}}, {"07e9c674b7e1b3f1c606e95a3779901d80f979bc08deb6820fd75d89c24ffae6"}}}}}}}) sysctl$kern(&(0x7f0000000040)={0x1, 0x3e}, 0x3, &(0x7f00000000c0)="3bf2ee74e747c82dad6eb2a36fa755e1a3925fe49afca7e63b52fa65ccaa74d6e6b85b6cdced70357ef201f97842b1068dca31553fa2d7031f38c03e56ad0e24dfc4f97b8b7f81499647e6e7725765d61436c85e43c15d12a78cb8c57ddde87021d7b685507fd3e0652f35e45bdaa3afd86c4fe557433e4c2b632de71c951516adff26aa2e48b45f8ce92bcefd3eceefabee7e3ebe806fdb4f6af569ae94b5d127", &(0x7f0000000080)=0x4, &(0x7f0000000340)="5a67923ef0cb189971421989ebcff78831a7581e2f27caa362f1363042efb27688b2c899220fb2fe37e467d974592496856ca7b78060998608c2f952e43bc0bf11555cc5cb0fe17b2ec1be389871829bfe10dd4c4d2c8f9da2bd2868fd86791dc09dc4fa89a217458bdaed31003fdc3a7323189ba3ccbad6c8af17516e4557f61ad20180000000000000125f568ca7d3396b9057255f381855110eb3a673713716cdf010ddfa7977f92cf061ad125ca670353b45d53aae196b00271f9d3452b523b3dea22d6027625614312183724b71c7eb02083a410c1c99fa455013521f98686e472b70b560f7021f567adf4d", 0x4) 4.911605548s ago: executing program 1 (id=500): chmod(&(0x7f0000000080)='.\x00', 0x3db) setuid(0xffffffffffffffff) r0 = socket(0x2, 0x8002, 0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) closefrom(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) bind$unix(r2, &(0x7f0000000140)=@file={0x4, 0x1, './file0\x00'}, 0xa) r3 = semget$private(0x0, 0x4, 0x2a1) semop(r3, &(0x7f0000000000)=[{0x3, 0x2d, 0x1000}, {0x0, 0x2, 0x800}, {0x2, 0x867c, 0x1800}], 0x3) r4 = semget(0x0, 0x2, 0x3ac) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r5, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f00000005c0)=0xc) setresgid(r7, r7, 0x0) semctl$IPC_SET(r4, 0x0, 0x1, &(0x7f0000000780)={{r6, r7, r6, r7, 0x8f, 0x1a00, 0x0, 0x0, 0xb}, 0x0, 0x6, 0x0, 0x0, 0x7, 0x0, 0x8}) getgroups(0x6, &(0x7f0000000040)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0]) lstat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) r10 = openat$bpf(0xffffffffffffff9c, &(0x7f00000001c0), 0x8000, 0x0) ioctl$BIOCSETIF(r10, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSETF(r10, 0x80104267, &(0x7f0000000100)={0x4, &(0x7f0000000080)=[{0x1d, 0x0, 0x2, 0xffff}, {0x48, 0x2, 0x6, 0x5}, {0x87, 0x1e, 0x63, 0x1001}, {0x9b1e, 0x7, 0xff, 0x200000}]}) syz_extract_tcp_res(0x0, 0xa93f, 0xfff) semctl$IPC_SET(r4, 0x0, 0x1, &(0x7f0000000200)={{r6, r8, r9, 0x0, 0xa, 0x8, 0x0, 0x0, 0x4}, 0x0, 0x2, 0x0, 0x0, 0x10003, 0x0, 0x8}) connect(r2, &(0x7f0000000000)=@un=@file={0x9, 0x1, './file0\x00'}, 0xa) 4.796330153s ago: executing program 3 (id=575): mknod(&(0x7f0000000040)='./file0\x00', 0x2000, 0x1e5f) r0 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x51, 0x2100007, 0x6, 0x80000001, 0x80002001, 0x10001, 0x10, [{0x3, 0x9, 0x4, 0x71000}, {0x8, 0x9, 0x8, 0xfffffff9}, {0x8, 0xf86, 0x0, 0x9}, {0x1, 0x800, 0x8007, 0xfffffffa}, {0x401, 0x200726, 0x2800, 0x80000001}, {0x2, 0xa, 0x3, 0x99}, {0xce1, 0xffffffff, 0x4f8, 0x6d}, {0x5, 0x300, 0x54, 0x8}, {0x2, 0x82, 0x5, 0x9}, {0x4, 0x8001, 0xd1b, 0x100}, {0x1ce, 0x10001, 0xf7, 0x3}, {0x20000803, 0x9, 0xfffffffd, 0x9}, {0xb8c, 0x10000005, 0x8, 0x4}, {0x29a71717, 0x7f, 0x1, 0xc373}, {0xb6f, 0xc09c810, 0x5}, {0x8000, 0x1, 0x101002, 0x30004}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffe, 0x0}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) r1 = socket(0x2, 0x2, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) ioctl$FIONREAD(r1, 0x8040691a, &(0x7f00000001c0)) mknod(&(0x7f0000000040)='./file0\x00', 0x2000, 0x1e5f) (async) open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a) (async) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x51, 0x2100007, 0x6, 0x80000001, 0x80002001, 0x10001, 0x10, [{0x3, 0x9, 0x4, 0x71000}, {0x8, 0x9, 0x8, 0xfffffff9}, {0x8, 0xf86, 0x0, 0x9}, {0x1, 0x800, 0x8007, 0xfffffffa}, {0x401, 0x200726, 0x2800, 0x80000001}, {0x2, 0xa, 0x3, 0x99}, {0xce1, 0xffffffff, 0x4f8, 0x6d}, {0x5, 0x300, 0x54, 0x8}, {0x2, 0x82, 0x5, 0x9}, {0x4, 0x8001, 0xd1b, 0x100}, {0x1ce, 0x10001, 0xf7, 0x3}, {0x20000803, 0x9, 0xfffffffd, 0x9}, {0xb8c, 0x10000005, 0x8, 0x4}, {0x29a71717, 0x7f, 0x1, 0xc373}, {0xb6f, 0xc09c810, 0x5}, {0x8000, 0x1, 0x101002, 0x30004}]}) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) (async) ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffe, 0x0}) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (async) socket(0x2, 0x2, 0x0) (async) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) (async) ioctl$FIONREAD(r1, 0x8040691a, &(0x7f00000001c0)) (async) 3.875263941s ago: executing program 0 (id=578): r0 = socket$inet6(0x18, 0x3, 0x0) bind$inet6(r0, &(0x7f0000000040)={0x1c, 0x18, 0x3, 0x4, "0000000000000000ffff00", 0x7}, 0x1c) (async) sysctl$vfs_nfs(&(0x7f0000000000), 0x7, &(0x7f00000025c0), 0x0, 0x0, 0xffffffffffffff2d) (async) r1 = shmget$private(0x0, 0x2000, 0x175, &(0x7f0000412000/0x2000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000fc0)=""/4096) (async) openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) unlinkat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0) sysctl$hw(&(0x7f0000000100)={0x6, 0xd}, 0x2, 0x0, 0x0, &(0x7f00000000c0)="5304", 0x2) 3.874050998s ago: executing program 3 (id=580): ioctl$WSMUXIO_REMOVE_DEVICE(0xffffffffffffffff, 0x80085762, &(0x7f0000000040)={0x1}) (async, rerun: 32) open$dir(&(0x7f0000000000)='./file0\x00', 0xf02, 0x0) (rerun: 32) ktrace(&(0x7f0000000040)='./file0\x00', 0x4, 0x20001916, 0xffffffffffffffff) (async) nanosleep(&(0x7f0000000780)={0x0, 0x9e6}, &(0x7f0000000740)) (async) r0 = socket(0x18, 0xc003, 0x3a) setsockopt(r0, 0x29, 0x6c, &(0x7f0000000040), 0x4) (async) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0x66, &(0x7f00000003c0)={0x3, 0x0, 0x10, 0x1}, 0xc) (async, rerun: 64) ioctl$DIOCNATLOOK(0xffffffffffffffff, 0xc0504417, &(0x7f0000000140)={@v6=@rand_addr="997a520d3f6324d24f620ac84e4d9c94", @v6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x100d}, @v6=@empty, @v6=@ipv4={'\x00', '\xff\xff', @remote={0xac, 0x14, 0x0}}, 0x2, 0x805, 0xfff, 0xb, 0x1000, 0x407, 0x18, 0x6, 0x3}) (async, rerun: 64) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0x66, &(0x7f00000003c0)={0x0, 0x1, 0x10, 0x3}, 0xc) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0x68, &(0x7f0000000140)={{0x1c, 0x18, 0x1, 0x6, "e3ef75dd5819802560e8391654cb44b3", 0x4}, {0x1c, 0x18, 0x0, 0x6, "8369a7fcb416ba26374fe42253619c3f", 0x7}, 0x3, [0x9d5ef45, 0x3, 0x1, 0x19a1, 0x1, 0x8000, 0x4, 0x1]}, 0x5c) symlink(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00') 3.797115883s ago: executing program 5 (id=582): r0 = socket$inet(0x2, 0x3, 0x2) socket$inet(0x1e, 0x3, 0x0) (async) r1 = socket$inet(0x1e, 0x3, 0x0) close(0x3) getpeername(r1, 0x0, 0x0) (async) getpeername(r1, 0x0, 0x0) setsockopt$inet_opts(r0, 0x0, 0x64, &(0x7f0000000240)="01000000", 0x4) r2 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) ioctl$WSDISPLAYIO_SBURNER(r2, 0x800c5751, &(0x7f0000000040)={0xb, 0xffff, 0x2}) setsockopt(r0, 0x0, 0x69, 0x0, 0x0) 3.79651723s ago: executing program 6 (id=583): ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0x400000000003, [{&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0xffffffffffffffff}, {&(0x7f0000695000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0xffffffffffffff7c}, {&(0x7f0000644000/0x1000)=nil, &(0x7f0000191000/0x1000)=nil, 0x2}, {&(0x7f00001da000/0x4000)=nil, &(0x7f00000d6000/0x1000)=nil, 0xffffffffffffffff}, {&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000188000/0x2000)=nil, 0x401}, {&(0x7f000060b000/0x2000)=nil, &(0x7f00005c0000/0x1000)=nil, 0x80000002}, {&(0x7f000055e000/0x4000)=nil, &(0x7f000032f000/0x2000)=nil, 0xa}, {&(0x7f0000613000/0x2000)=nil, &(0x7f00000ce000/0x4000)=nil, 0x5}, {&(0x7f0000251000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil}, {&(0x7f00003bc000/0x3000)=nil, &(0x7f00003f2000/0x2000)=nil, 0xa}, {&(0x7f000064b000/0x2000)=nil, &(0x7f000038f000/0x4000)=nil, 0x12b}, {&(0x7f0000008000/0x3000)=nil, &(0x7f0000688000/0x4000)=nil, 0x9}, {&(0x7f000043b000/0x1000)=nil, &(0x7f000076c000/0x4000)=nil, 0x9}, {&(0x7f00000a5000/0x1000)=nil, &(0x7f000079e000/0x4000)=nil, 0xffffffffbffffff9}, {&(0x7f0000576000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x5e04}, {&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000001000/0x800000)=nil, 0x8}], './file0\x00', 0x3, 0x0, 0x0, 0x0, [0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x93, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3dd0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffd, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x7, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xf, 0x0, 0x5]}) r0 = socket$inet(0x2, 0x3, 0x0) setsockopt$inet_opts(r0, 0x0, 0x200000000000c, &(0x7f0000000080)="eaef125c00000000", 0x8) setsockopt$inet_opts(r0, 0x0, 0x200000000000c, &(0x7f0000000240)="eaef125c00000000", 0xc) r1 = socket(0x1, 0x2, 0x0) r2 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000040), 0x8, 0x0) ioctl$WSKBDIO_SETENCODING(r2, 0x80045710, &(0x7f0000000ac0)=0xb) fstat(r1, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) r4 = openat$wskbd(0xffffffffffffff9c, &(0x7f00000013c0), 0x1, 0x0) ioctl$WSKBDIO_GETDEFAULTKEYREPEAT(r4, 0x400c570a, &(0x7f0000000080)) setsockopt$sock_timeval(r3, 0xffff, 0x1005, &(0x7f0000000000)={0x3, 0x2}, 0x10) fstat(r1, &(0x7f0000000140)) mkdir(&(0x7f0000000b00)='./file0\x00', 0x180) 2.674736617s ago: executing program 0 (id=585): r0 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$WSMUXIO_LIST_DEVICES(r0, 0xc1045763, &(0x7f0000000040)={0x1, [{0x1, 0x7ff}, {0x0, 0x2}, {0x1, 0x7ffb}, {0x1, 0xd}, {0x3}, {0x0, 0x9}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x2, 0x1}, {0x1, 0x9}, {0x0, 0x6000000}, {0x3, 0x2}, {0x3, 0x4}, {0x0, 0x3}, {0x0, 0x8}, {0x0, 0x1}, {0x2, 0xb}, {0x1, 0xfffffffd}, {}, {0x0, 0x5}, {}, {0x0, 0x6}, {0x0, 0x9}, {0x0, 0x3}, {0x3, 0x800}, {0x3}, {0x1}, {0x1, 0xfffffffd}, {0x3, 0x10001}, {0x3, 0x8001}, {0x0, 0x40}]}) r1 = open(&(0x7f0000000000)='./file0\x00', 0x8, 0x9bf2d3725864749b) ioctl$WSDISPLAYIO_GETEMULTYPE(r1, 0x80184902, &(0x7f00000000c0)={0x3, '.\x00'}) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000580)={0xa, &(0x7f0000000300)=[{0x0, 0x23, 0x2, 0x100}, {0x8, 0x1, 0xff, 0x7}, {0x7, 0x6, 0xd, 0x9}, {0x0, 0xff, 0xfe, 0x4}, {0x6, 0x5, 0x2, 0x2}, {0x0, 0x75, 0xe, 0xffffd233}, {0x3, 0xbc, 0xf7, 0x9}, {0x8, 0xfa, 0x0, 0x18a4}, {0x0, 0xe4, 0x81, 0x3}, {0x7, 0x49, 0x0, 0x2}]}) sysctl$net_inet6_ip6(&(0x7f0000000040)={0x4, 0x18, 0x29, 0x33}, 0x5, 0x0, 0x0, &(0x7f0000000380)="18d578bb21c00631ef381c5d3bf66f0eea1626ba1615f4faf3b1475599ec04d1ed8fb0fbe03b34bfd48b992e602b32fbe4d71f34133b44d412f59437576f2779db93812d42fd52ad36d6f88a7157db5f4c094838373ad7f24122026f1e3f849e14fe83e71ceeedf74814952939ee73e627c82baff5449621091825c00150e9d07b1bd6e4912546fe5eae447c107b668956323c3e04af45c1398feebf9cba76ae2f1d06ac89deacd059524a7efee458acc45e5f2c880ec2f4188a54fea7ece8cd2d88be9a14920d10ff203b87c6ebfa3e4f7d", 0xfffffffffffffe1a) r2 = syz_open_pts() sysctl$net_inet6_ip6(&(0x7f0000000000)={0x4, 0x18, 0x29, 0x11}, 0x4, &(0x7f0000000180)="897d9cc49b0f1e49874e570040fa145e9461e427a5f15c8b356fc84993176518b5c70831ead82b62b76e1af42483b6079d3c28874fdd54d15352972c8e58d1832ab4961359315f819331bb1c889e02718337cd1520f061b093e43a94ae2f610d4a5912827fd7709439afdf6c8ae9ab0e9e2923b1b624976fc5b3a704f1bce13c68aa23ad05138d893e022b38016015194ec4e614ce3e93d373b09e512066303b6c637a1ec182b92af12e980b21298d455ee592104a52e12206d16ff39ab7ed7d54c133b4f547c3528efc83f86ee06e9be4bbc18ac47d2f12481447c7a63323a562692a0a2756b534887463366d512edacf0c75", &(0x7f0000000280)=0xf3, &(0x7f0000000480)="1f76baf81334b186486a44a183995197f3f7160d06dac1cb631b81ef0b0a61342449706c39b64a7c1fecdde142b00a6d31138b2e202560daa978297fc55cadc7f32919d53860ac2f22d2bf220d9e769badc7857564e8b37f50ff2666ccdae87912d81fdb1fa478e7959fe650b42df7ed0d9f3d23fdd62daab95dc6a27f977cc214424d81ac7add0bd2b915db50f3d144f5d2c2d27f834f53cfa4306dfcd318fa6953c1eff90fc9b98890ce28bd12d56c989b54db59372a52bf240f433a088daac78fded72f4f8c012fb419e0dbc614ee922e391f02c8405ffdc5e15ac3167c727d4ba8", 0xe3) ppoll(&(0x7f0000000440)=[{r2, 0x2}, {r2, 0x1}], 0x2, 0x0, 0x0) syz_open_pts() 1.557971105s ago: executing program 5 (id=586): ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0x80040000, 0xffff63de, 0x5, 0x2, 0x8, 0x3, 0xf7, 0x10, [{0x2006, 0xb, 0xfffff115, 0x80000001}, {0x3, 0xfffffffc, 0x6, 0xfff}, {0x4, 0x4baa, 0x9, 0x9}, {0x0, 0xe2, 0xd, 0x100}, {0x3, 0xfffff800, 0x5, 0xffffffff}, {0x7890, 0xffff, 0x8, 0xc}, {0x3, 0x800, 0x3, 0xfffffffa}, {0x204, 0x33f8, 0x28000, 0xffffe2e9}, {0x9, 0x1000, 0x6, 0x7fff}, {0x3, 0x1, 0x6, 0x8bfd}, {0xfffffffd, 0x8000000, 0x8, 0x10}, {0x9, 0x4, 0x800000, 0xa6a}, {0x401, 0x4, 0x0, 0x7ff}, {0x5, 0x2006e2, 0x2, 0x6f5fc48f}, {0x3, 0x8, 0x3, 0x9}, {0x8ff9, 0x1, 0x100000, 0x400}]}) r0 = socket(0x11, 0x8003, 0x8) ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x1, 0x0, {[0xfffefbfffffffff7, 0x1, 0xffffffffffffaeb1, 0x4, 0xfffffffffffffffe, 0x10000000000000, 0xdf5a, 0xffffffffffffffff, 0x0, 0x2eff, 0x5, 0x4000000000000003, 0xffffffffffffffff, 0x0, 0x8000000, 0xa8, 0x100000001, 0xce7], [0xfffffffffffffffe, 0x8000000000000000, 0x7fffffffffffffff, 0x8000fffffffb, 0x100, 0x5800000000000000, 0x1fe, 0xb, 0x1, 0x8], [0x100100000001, 0xfffffffffffffffe, 0x40000000, 0x6, 0x1, 0x4], [0x100, 0x2020000000000, 0x401, 0x100000000, 0xfffffffff7efffff, 0x400000000006], [{0x8000, 0x2, 0x0, 0x8}, {0xfffc, 0x7, 0x5}, {0x10, 0x2001, 0x5bea, 0x3}, {0xf801, 0x5, 0x7, 0x8000040c}, {0x10, 0x2, 0x81, 0x809}, {0x2, 0x40, 0x40001, 0x4}, {0xa, 0x1fffd, 0x7, 0x4}, {0x0, 0x7, 0x3, 0x4}], {0x2000, 0x101, 0x10000, 0x5}, {0x0, 0x3, 0x6, 0x2}}}) r1 = openat$pf(0xffffffffffffff9c, &(0x7f00000000c0), 0x82, 0x0) setitimer(0x0, &(0x7f0000000140)={{0x3, 0x122800000000009}, {0xffffdff0, 0x9}}, 0x0) r2 = kqueue() r3 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000400), 0x20, 0x0) ioctl$WSKBDIO_COMPLEXBELL(r3, 0x80105702, &(0x7f0000000500)={0x3, 0x0, 0x40, 0x8}) kevent(r2, &(0x7f0000000000), 0x97, &(0x7f0000000180), 0xbffb4961, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$TIOCSETA(r1, 0xcd60441a, &(0x7f0000000140)={0x5, 0xfd, 0x4, 0x403, "000000000a00000f000000aff0338a6b4fc6d700", 0x8, 0x7}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r4 = socket$inet(0x2, 0x3, 0xfc) ioctl$FIONREAD(r4, 0x80206979, &(0x7f0000000000)) futimes(r4, &(0x7f0000000000)=[{0x81, 0x9}, {0x6, 0x4}]) setsockopt$sock_timeval(r0, 0xffff, 0x1005, &(0x7f00000003c0)={0x6, 0x3}, 0x10) clock_gettime(0x4, 0x0) open(&(0x7f0000000040)='./file1\x00', 0x200, 0x104) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) bind$unix(r5, &(0x7f0000000080)=@file={0x3, 0x1, './file0\x00'}, 0xa) sendmmsg(r5, &(0x7f0000000000)={{0x0, 0xfffffffffffffe36, 0x0, 0x0, 0x0, 0xfffffffffffffff6}}, 0x42, 0x410) r6 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) writev(r6, 0x0, 0x0) pwritev(r6, &(0x7f0000000380)=[{&(0x7f0000000580)="5a2d0b21c13839caf96b4fd731d00d8a2773a7f095e1466cb02e084902795179999f890e83c4d961de85f85e424839510f00000000000000677d39a8276540fb", 0x40}, {&(0x7f0000000200)="5f21813caa7565903a2a5b4d47e034e5ec0d49a5a81d395118f0fe1e14154fee3d4af178aa8b9844fc616daf518896832f835b833ae301d7c0ce3610531be0104519f9f2756532f305554739bb57b7a565478fb7ed1bd88c3356f1300348721d594c5fbc952618632e", 0x69}, {&(0x7f0000000340)="5b93a22e2f9a77a81d579072eb90036d", 0x10}], 0x3, 0x100000000000b) writev(r6, &(0x7f0000000800)=[{&(0x7f0000000440)="cbd35f4710f8db499d3bdc114cfd9bdbe6e02c9987e2920d7dbb870da5e561bb40335592ce2a14aa5450d6852fd8b2d593855a83efc743dcde55e76082b52eaaba57da6d5237e9f872cd7d3ee2bf587948b70aebbaae06d1c1c3f01bcb3c85131338a761c4d27f653088b013b38d12a247dc775fa69c6deb9128ec727383f7a9753d6cb939566ed2a7db2d3ddbc466d5e6dcbbb7d2eb59a091e00b35a3879d3c6eab", 0xa2}, {&(0x7f0000000700)="ee7fb69b33e69d22478be04785a2146a0943572cdc9a660a6c", 0x19}], 0x2) mknod$loop(0x0, 0x2000, 0x1) execve(0x0, 0x0, 0x0) sysctl$net_inet6_ip6(&(0x7f0000000300)={0x4, 0x18, 0x29, 0x34}, 0x4, 0x0, 0x0, &(0x7f0000000000), 0x0) acct(&(0x7f0000000280)='./file1\x00') 1.544645267s ago: executing program 3 (id=587): r0 = socket$inet6(0x18, 0x4000, 0x7) r1 = semget(0x0, 0x1, 0x281) r2 = socket$inet(0x2, 0x1, 0x0) getsockopt(r2, 0x0, 0x17, 0xffffffffffffffff, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x9, &(0x7f0000000000)={0x3, 0x2, 0x80000000006, 0xc1}) sysctl$kern(&(0x7f0000000000)={0x1, 0x42}, 0x6, 0x0, 0x0, 0x0, 0x0) semctl$GETPID(r1, 0x3229039de3d8d5ba, 0x4, 0x0) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x18, 0x0, 0x9, "00000000000000000000000000c3c600", 0x4}, 0x1c) readv(0xffffffffffffffff, &(0x7f0000000a40)=[{0x0}, {&(0x7f0000000600)=""/239, 0xef}], 0x2) msgget$private(0x0, 0x180) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000180)="edf3efff5b0df6deed7ddcb73a8ed0dc48c5ec6b139dd1328497da192902bc37a9264402f597e9d0edc352d085e253fe77aad14d30ce21a82e74e1046b4bade84679e0f44772116abb06436fda4569841652317d670b4e27555b512b0947d8086e72eaa3763ebc545c88f2643c3c2fcc04bcc3019681ab3a6c1c853ab6fa168815bc1abe953790a08fea713d4c458b28b8", 0x91) recvmmsg(r4, &(0x7f0000000880)={{0x0, 0x0, 0x0, 0x0, 0x0}, 0x5}, 0x38, 0x3802, 0x0) 1.529555587s ago: executing program 4 (id=589): setitimer(0x1, &(0x7f0000000000)={{0xfffffff9, 0x80000004}, {0x3}}, 0x0) 1.440338654s ago: executing program 0 (id=591): utimensat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', &(0x7f0000000080)={{0x0, 0xffffffffffffffff}, {0x0, 0xffffffffffffffff}}, 0x0) syz_emit_ethernet(0x1000e, &(0x7f0000000080)=ANY=[@ANYBLOB="69e1629b6174391e7dd7a2d786dd60b6000000302c03cb697a653e336f000000500000000000ff02000000000000000000000000000102000003"]) (async) syz_emit_ethernet(0x1000e, &(0x7f0000000080)=ANY=[@ANYBLOB="69e1629b6174391e7dd7a2d786dd60b6000000302c03cb697a653e336f000000500000000000ff02000000000000000000000000000102000003"]) sysctl$net_inet_carp(&(0x7f0000000040)={0x4, 0x2, 0x6, 0x17}, 0x4, 0x0, 0x0, &(0x7f00000010c0)="e1000000", 0x4) sysctl$net_inet_carp(&(0x7f0000000000)={0x4, 0x2, 0x70, 0x1}, 0x4, &(0x7f00000000c0)="249cf111aa3dff48e4592f93d9", &(0x7f0000000100)=0xd, &(0x7f0000000140)="aeb1f772b813981825c135be5892c97cfdd0e6d6771dbb0242ee89e13e010a85ab7100298fcc12b3a7cbcd68d6eb06f0f63a3860fff82fa0aa1dc0cee1b08b36583ab8a8957bfef85d6451ee6374dd4a6b66c12d418aeca620b1a06e4f0ca0dc6ba120cfdd1db44d08770c65e5634063a14af035a32daf8d91729665cf901557c6e03b1ad9ff15868f943e9ac6ffd3", 0x8f) 1.439553655s ago: executing program 6 (id=592): sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x2, 0x0, 0x1b}, 0x4, 0x0, 0x0, &(0x7f0000001640)='\x00\x00\x00\x00', 0x4) r0 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000400), 0x401, 0x0) r1 = syz_open_pts() ioctl$TIOCSCTTY(r1, 0x20007461) ioctl$WSMUXIO_ADD_DEVICE(r0, 0x80085761, &(0x7f00000000c0)={0x3, 0x9}) 1.438917467s ago: executing program 0 (id=593): ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0x1, [{&(0x7f0000695000/0x3000)=nil, &(0x7f00003cf000/0x1000)=nil, 0x9}, {&(0x7f0000ff6000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil}, {&(0x7f0000f08000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x6}, {&(0x7f0000692000/0x2000)=nil, &(0x7f0000698000/0x3000)=nil}, {&(0x7f0000422000/0x4000)=nil, &(0x7f000069a000/0x1000)=nil, 0x80000000000005}, {&(0x7f0000107000/0x2000)=nil, &(0x7f0000ff4000/0xc000)=nil, 0x91e8}, {&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000c44000/0x2000)=nil, 0x5}, {&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff5000/0x4000)=nil, 0x4}, {&(0x7f0000c18000/0x4000)=nil, &(0x7f0000cc4000/0x2000)=nil, 0x7f}, {&(0x7f0000d10000/0x1000)=nil, &(0x7f0000693000/0x1000)=nil, 0x80080000000000}, {&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000693000/0x4000)=nil, 0x2ff}, {&(0x7f000000e000/0x4000)=nil, &(0x7f00000f4000/0x1000)=nil, 0x7fffffff}, {&(0x7f00000e0000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil}, {&(0x7f00002e6000/0x3000)=nil, &(0x7f00000dd000/0xa000)=nil, 0x10001}, {&(0x7f0000394000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x4}, {&(0x7f0000265000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x2}], './file0\x00', 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) r0 = socket(0x18, 0x3, 0x0) ioctl$FIONREAD(r0, 0xc0106924, &(0x7f00000001c0)) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) setitimer(0x2, &(0x7f0000000140)={{0xfffffffffffffffe, 0x100800000000009}, {0xfffffffc, 0x8}}, 0x0) ioctl$FIONREAD(r0, 0x8080691a, &(0x7f0000000100)) r1 = socket(0x18, 0x3, 0x0) ioctl$FIONREAD(r1, 0xc0106924, &(0x7f00000001c0)) openat$dri(0xffffffffffffff9c, 0x0, 0xa40, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) chmod(&(0x7f0000000ac0)='./bus\x00', 0x2) setuid(0xee01) r3 = open(&(0x7f0000000180)='./file0/../file0\x00', 0x20000, 0x41) open$dir(0x0, 0x200, 0x186) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x62}) sysctl$vm(&(0x7f0000000000)={0x2, 0x7}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sysctl$kern(&(0x7f0000000000), 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x4) r4 = syz_open_pts() ioctl$BIOCSETWF(r3, 0x80104277, &(0x7f0000000b40)={0x0, &(0x7f0000000b00)}) ioctl$TIOCSETAF(r4, 0x802c7416, &(0x7f0000000000)={0x42b7a8, 0xb, 0xffffffff, 0x86a19a, "047b2f1fc40d94e4aa73a2dd9500590000000080", 0x3, 0x220}) setsockopt(r2, 0x4, 0x2, &(0x7f0000000040), 0x0) 1.438616375s ago: executing program 6 (id=594): sysctl$kern(&(0x7f0000000240)={0x1, 0x30}, 0x2, 0x0, 0x0, 0x0, 0x0) sysctl$kern(&(0x7f0000000180)={0x1, 0x56}, 0x2, &(0x7f00000001c0)="ec4751a8", &(0x7f0000000200)=0x4, &(0x7f0000000380)="acb06c0374e205528281973804a289f9a8cc566a87e00bcc5b4bcc972ad067389f81f6b2be81a38fc50bd6743f4d3e18333a75c815be64351a1c0dee989b8bc73c4d47df9eb4b1322029", 0x4a) r0 = semget$private(0x0, 0x3, 0x150) semctl$SETALL(r0, 0x0, 0x9, 0xffffffffffffffff) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) r1 = socket(0x18, 0x3, 0x0) ioctl$FIONREAD(r1, 0xc0106924, &(0x7f00000001c0)) r2 = socket(0x18, 0x3, 0x0) ioctl$FIONREAD(r2, 0x80606942, &(0x7f0000000100)) semctl$SETVAL(r0, 0x0, 0x8, &(0x7f0000000400)=0x94) sysctl$kern(&(0x7f0000000000)={0x1, 0x5c}, 0x2, &(0x7f0000000040)="da63e5238cd5f27a2845ff80dbe10fdc6e8c213509b9f9829eab7d61ea0c7484b546f5ff0039784982b3b9894391fa5a43bafdae8ed19590d17aa60b63e472aba0974a90034ca39607d288de217760d52894927685dd0910be8d9a989d4e78682286145289bb9af1b24c3803ebe252c62f971da14004f85c92f2c2b5127d24e76b78f3969358a63585b0fda823aebed9c7624d78d21c8183a937054088c19a32743b042c7829c0dc05cd76d0143f06506ec641e26119d01fdfe8c6f342f012cdafed8ce0527547e573bf21515a107a2fce15f1af", &(0x7f0000000140)=0xd4, &(0x7f0000000280)="56b35b85ced541d63003a6861b48ee3d18548763ab80581bd0f71e75514418b4ba637a43aee4dfceca4c28f1c53ffac859d694d0018eda8b40202d23894c333f53347d6d33f911f81474cb4ed47a451e6e513107e0b9805276cf252ecc23eac29f6122fec9847330ea8b749654ea80b94af4860b634071b2e5cda6e1f573159572196ae9ee68d8eecf110dc564fd128a174d7855bc268fbe3b04cf3d8c5d39860a2dc207130f8acb0b482c74e16aecb9dff4ff4dc55c866c6c7396aa3ec751cba7b1805a18e933c6f781781850cc", 0xce) 1.400395079s ago: executing program 3 (id=596): r0 = openat$pf(0xffffffffffffff9c, 0x0, 0x200, 0x0) ioctl$DIOCGETLIMIT(r0, 0xc0084427, 0x0) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x11}, 0x4000000000000007, 0x0, 0x0, 0x0, 0x3d) r1 = syz_open_pts() close(r1) fcntl$lock(r1, 0x9, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1000300000000}) flock(r1, 0x1) flock(r1, 0x2) close(r1) 1.39867276s ago: executing program 2 (id=597): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x8100, 0x0) ioctl$BIOCLOCK(r0, 0x20004276) (async) ioctl$BIOCLOCK(r0, 0x20004276) ioctl$BIOCIMMEDIATE(r0, 0x80044270, &(0x7f0000000200)=0x1) setrlimit(0x8, &(0x7f0000000980)={0xb, 0x2}) syz_open_pts() (async) r1 = syz_open_pts() mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x205b92) (async) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x205b92) r2 = open(&(0x7f0000000040)='./file0\x00', 0x20, 0x0) ioctl$FIONBIO(r2, 0x82907003, &(0x7f0000000140)=0x1) syz_open_pts() (async) r3 = syz_open_pts() ioctl$TIOCCDTR(r3, 0x20007478) ioctl$TIOCCBRK(r1, 0x2000747a) (async) ioctl$TIOCCBRK(r1, 0x2000747a) close(r1) syz_open_pts() ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000100)={0x920e, 0x5, 0xffffdf82, 0xffffff90, "08950500fac164e20a070e00000009ffe600", 0x3fffffa, 0x206}) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) 1.398375331s ago: executing program 3 (id=598): mknod(&(0x7f0000000040)='./file0\x00', 0x1000, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) (async) r0 = open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000400)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d5aa03", 0x30, 0x0, 0x3, @remote={0xfe, 0x80, '\x00', 0x0}, @remote={0xfe, 0x80, '\x00', 0x0}, {[], @icmpv6=@dest_unreach={0x1, 0x7, 0x0, 0x40, '\x00', {0x7, 0x6, "dbe371", 0x1e0, 0x8, 0x5, @mcast2, @rand_addr="478af89d014279ae97480d1de6496bd3"}}}}}}}) r1 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) write(r1, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) ioctl$WSMUXIO_REMOVE_DEVICE(r1, 0x80085762, &(0x7f0000000000)={0x1, 0x4ab85073}) ioctl$FIOASYNC(r1, 0x8004667d, &(0x7f00000000c0)=0x80) (async) ioctl$FIOASYNC(r1, 0x8004667d, &(0x7f00000000c0)=0x80) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x20530c) (async) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x20530c) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) close(r0) 1.397828888s ago: executing program 6 (id=599): mknod(&(0x7f00000000c0)='./file0\x00', 0x2000, 0x9) mknod(&(0x7f0000000000)='./bus\x00', 0x3a0914c44f7b202d, 0x504) r0 = semget$private(0x0, 0x2, 0x590) chflags(0x0, 0x0) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0x30, 0x1, 0x0, 0x0, 0x40}, 0x0, 0x1, 0x0, 0x0, 0x6, 0x0, 0x8000000000000001}) setuid(0xffffffffffffffff) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000280)='#!', 0x10}, {&(0x7f0000000000)="8d6bb85551ec8430877ae32fe9bbe42cc8f2147a3eba8e1969f0435119cf4c071c8aee7ef2921be5d7d4796c5566c95989acb3d185587234186e96b8fde9ffac51de05a87b8b893e2abd154dd886eafbe03881d25b7b13b4c32227fc9e5a86a06f59f701322b3a109a13436e486b0a", 0x6f}], 0x2) mkdir(&(0x7f0000000180)='./file0\x00', 0x25) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) unveil(&(0x7f0000000200)='./file0/file0\x00', &(0x7f00000002c0)='x\x00') unveil(&(0x7f0000000340)='./file1\x00', &(0x7f0000000380)='r\x00') ioctl$BIOCGBLEN(0xffffffffffffffff, 0x4010427e, 0x0) ioctl$VNDIOCSET(0xffffffffffffffff, 0xc0384600, &(0x7f0000000140)={&(0x7f0000000180)='./file0\x00', 0x567, 0x0}) rename(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0/file0/../../file0\x00') semctl$GETVAL(r0, 0x3, 0x5, &(0x7f00000004c0)=""/233) 1.351816534s ago: executing program 2 (id=600): r0 = socket(0x18, 0x1, 0x0) setsockopt(r0, 0x1000000029, 0x2a, 0x0, 0x0) msync(&(0x7f0000ffb000/0x1000)=nil, 0xffffffffdf004fff, 0x4) 1.258657745s ago: executing program 2 (id=601): semctl$GETVAL(0xffffffffffffffff, 0x4, 0x5, &(0x7f0000000000)=""/52) semop(0x0, &(0x7f0000000040)=[{0x1, 0x6, 0x800}, {0x0, 0x1000}, {0x2, 0x59}, {0x0, 0x2, 0x1800}, {0x4, 0xa16, 0x1800}, {0x3, 0xe63, 0x1000}, {0x0, 0x101, 0x1800}], 0x7) semctl$GETVAL(0x0, 0x2, 0x5, &(0x7f0000000080)=""/4) execve(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)=[&(0x7f0000000100)='&\\)c\x00', &(0x7f0000000140)='^\x00', &(0x7f0000000180)='%@!@,.\'^\x00', &(0x7f00000001c0)='-$\x00', &(0x7f0000000200)='/*{\x00', &(0x7f0000000240)='\'+!\x00', &(0x7f0000000280)='-#\xab\x00', &(0x7f00000002c0)='#^\x89\x00', &(0x7f0000000300)='./\x00'], &(0x7f00000005c0)=[&(0x7f00000003c0)='%%+[!\x00', &(0x7f0000000400)='(,%,\\%\x00', &(0x7f0000000440)='-{\x00', &(0x7f0000000480)='[$-@\xb2)*\x00', &(0x7f00000004c0)='\x00', &(0x7f0000000500)='(,\x00', &(0x7f0000000540)='$!()}]}\x00', &(0x7f0000000580)='&\\-\x00']) r0 = semget$private(0x0, 0x2, 0x102) semctl$GETVAL(r0, 0x4, 0x5, &(0x7f0000000600)=""/65) semctl$IPC_RMID(r0, 0x0, 0x0) r1 = accept$inet6(0xffffffffffffff9c, 0x0, &(0x7f0000000680)) ioctl$DIOCRCLRADDRS(0xffffffffffffffff, 0xc4504442, &(0x7f00000006c0)={{'./file0\x00', './file0/file0\x00', 0x11, 0x1}, 0x0, 0x0, 0x0, 0x51, 0x1, 0xcbe, 0xd54, 0x40, 0xbccf}) r2 = socket$unix(0x1, 0x1, 0x0) getsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f0000000b40)={0x0, 0x0, 0x0}, &(0x7f0000000b80)=0xc) r5 = geteuid() getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) setsockopt$sock_cred(r2, 0xffff, 0x1022, &(0x7f0000000c80)={r3, r5, r6}, 0xc) setegid(r4) semctl$GETALL(r0, 0x0, 0x6, &(0x7f0000000cc0)=""/252) r7 = openat$pf(0xffffffffffffff9c, &(0x7f0000000dc0), 0x10, 0x0) ioctl$DIOCSETSTATUSIF(r7, 0xc0284414, &(0x7f0000000e40)={'./file0\x00', &(0x7f0000000e00)=""/10, 0xfff, 0x5, 0x1, 0x6}) setpgid(r3, r3) getsockname$inet6(r1, &(0x7f0000000e80), &(0x7f0000000ec0)=0x1c) ioctl$DIOCXBEGIN(0xffffffffffffff9c, 0xc0104451, &(0x7f0000001b40)={0x3, 0x7, &(0x7f0000000f00)=[{0x0, './file0\x00', 0xa}, {0x1, './file0\x00', 0xfb37}, {0x1, './file0/file0\x00', 0x101}]}) getsockopt$SO_PEERCRED(r1, 0xffff, 0x1022, &(0x7f0000001b80)={0x0, 0x0}, 0xc) r10 = accept$inet6(r1, &(0x7f0000001bc0), &(0x7f0000001c00)=0x1c) pipe2(&(0x7f0000001c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x10000) poll(&(0x7f0000001c80)=[{r2, 0x40}, {r1, 0x1}, {r1, 0x20}, {r7, 0x2}, {r1, 0x4}, {r10, 0x10}, {r2, 0x10}, {r11, 0x1}], 0x8, 0x2) recvfrom$inet6(r12, &(0x7f0000001cc0)=""/178, 0xb2, 0x2003, 0x0, 0x0) setsockopt$sock_cred(r12, 0xffff, 0x1022, &(0x7f0000001d80)={r8, r9, r4}, 0xc) semget(0x3, 0x1, 0x200) ioctl$DIOCCHANGERULE(r7, 0xcd60441a, &(0x7f0000001dc0)={0x9, 0x101, 0x80000001, './file0\x00', './file0\x00', 0x0, "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"}) ioctl$DIOCRDELTABLES(0xffffffffffffffff, 0xc450443e, &(0x7f0000002bc0)={{'./file0/file0\x00', './file0/file0\x00', 0xc, 0x4a}, &(0x7f0000002b80), 0x72, 0x0, 0x0, 0x7, 0x40000000, 0xe, 0x58, 0x4}) 1.25469777s ago: executing program 6 (id=602): ioctl$WSMUXIO_REMOVE_DEVICE(0xffffffffffffffff, 0x80085762, &(0x7f0000000040)={0x1}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r0, &(0x7f0000001a00)=[{&(0x7f0000000380)="adc934fd8030c278ac44055dddb2cff221f4925392e9637da9bab146dbce4b69a964", 0xfffffc75}, {&(0x7f0000000100)="e87dd6cb0c467c20e889494537", 0xd}], 0x2) write(r0, &(0x7f0000000140)="e67e843146dfb33d7809c19da343e772a2933512", 0xfffffffb) setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000000)={0x0, 0x0}) r1 = socket(0x18, 0x2, 0x0) r2 = socket(0x18, 0x2, 0x0) setsockopt(r2, 0x1000000000029, 0x9, &(0x7f00000001c0)="03000000", 0x4) setsockopt(r2, 0x1000000029, 0x9, &(0x7f0000000740), 0x0) setsockopt(r1, 0x1000000000029, 0xa, &(0x7f0000000040)="03000000", 0x4) setsockopt(r1, 0x1000000000029, 0xc, &(0x7f0000000000), 0x14) r3 = socket(0x18, 0xc003, 0x3a) syz_emit_ethernet(0x2e, &(0x7f0000000040)={@broadcast, @random="00e0300eaaf8", [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x20, 0xfffd, 0x0, 0x7, 0x1, 0x0, @broadcast, @multicast1, {[@timestamp={0x44, 0x4, 0x6, 0x1}]}}, @icmp=@info_reply={0x10, 0x0, 0x0, 0x7, 0x4d}}}}}) setsockopt(r3, 0x29, 0x6c, &(0x7f0000000400)="b646990bf784e229eaca6fd90e3374eac4474875304be0b473d3b5dafb664f0e60779c001e12b23ee0c6f3b3d79e20730c3cfb1141b946b005aa18cadc35e3b30f9ebf582420ed12a3c888203726c1f7fa9fe900879aa18bf56326a72694704593cc7d6c91e912a7db8e210d20e75a8a104220ce7152f2f3dde78d3539b91e96426e426af76f3adfd6cf12", 0x8b) r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) ioctl$BIOCSETIF(r4, 0x8020426c, &(0x7f0000000040)={'tap', 0x0}) r5 = socket(0x18, 0x1, 0x0) setsockopt(r5, 0x1000000000029, 0xa, &(0x7f00000001c0)='\x00\x00\x00\x00', 0x4) setsockopt(r5, 0x1000000000029, 0xa, 0x0, 0x0) syz_emit_ethernet(0x1000e, &(0x7f0000000140)=ANY=[@ANYRESOCT=r3, @ANYRES16=r5, @ANYRES32]) syz_emit_ethernet(0x2a, &(0x7f0000000200)=ANY=[]) ioctl$BIOCSETIF(r4, 0x8020426c, &(0x7f0000000500)={'tap', 0x0}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$net_inet6_ip6(&(0x7f0000000300)={0x4, 0x18, 0x29, 0x32}, 0x4, 0x0, 0x0, &(0x7f0000000540)="db00781b", 0x4) setsockopt$inet6_MRT6_ADD_MIF(r3, 0x29, 0x66, &(0x7f00000003c0)={0x3, 0x0, 0x10, 0x1}, 0xc) sysctl$kern(&(0x7f0000000000)={0x1, 0x59}, 0x2, &(0x7f0000000180)="5f2a1ff1", &(0x7f00000000c0)=0x4, &(0x7f0000000240)="dffc14381fb0982bbc3d7f1cb3808a62990dc72a00264233ea1b5bae86f78bf06c814701cfb1b3064ce1fbbdd81112b336bdd61fa0bc62af40d748eefdf6ba3647618d85dba9eed351d371a4ca427118a438f3ebd01c1cba0520746948a7c8d4becfe0707eeb7ec1d18754d810fc5f21134a3689c1de27f7d0f149e6a71845c56386b173315efe5f7a12fa855b5a8b2649b73267686f201c52a68dfcecd3a69a0b529d947a4432164844d22f46fa4baf206a3c19f92dfcd1f472e692fb0670c355ec54a058f397dfb5b653af68c73b0000000000", 0xd4) 1.250654745s ago: executing program 4 (id=604): r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x40380, 0x0) ioctl$DIOCSETTIMEOUT(r0, 0xc008441d, &(0x7f0000000040)={0x14, 0x80}) (async) clock_gettime(0x4, &(0x7f00000001c0)) 1.227280687s ago: executing program 4 (id=605): r0 = openat$dri(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card0\x00', 0x80, 0x0) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(0xffffffffffffff9c, 0xc01864b0, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, 0xe}) ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000080)=r1) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f00000000c0)={0x3, 0x3, 0xfffffc7b, 0x10000, 0x3ff, 0x5, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000140)={0x0, 0x10001, 0x6, 0x32335247, 0x2, [0x0, 0x0, 0x0, 0x0], [0x2, 0x40, 0x100, 0x5c], [0x8b1, 0x4, 0x1, 0x3], [0x6, 0x0, 0xffff, 0xc0]}) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f00000001c0)={0x2, 0x9, 0x100, 0x1bb, 0x1000, 0x7, 0x0}) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000200)={0x0, 0x6, 0x7, 0x55595659, 0x2, [r2, r3, r5, r6], [0x3ff, 0x4, 0x4c64c29e, 0x8001], [0x9, 0x4, 0x2, 0x3c9], [0xdcc, 0x8, 0x5, 0x4]}) r9 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000280), 0x10, 0x0) ioctl$BIOCGRTIMEOUT(r9, 0x4010426e, &(0x7f00000002c0)) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r9, 0x8010640d, &(0x7f0000000300)={0x1, 0x100}) setsockopt$sock_int(0xffffffffffffff9c, 0xffff, 0x200, &(0x7f0000000340)=0x8, 0x4) r10 = openat$dri(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dri/card0\x00', 0x10000, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000004c0)={&(0x7f00000003c0)=[0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0], 0x1, 0x3, 0x2, 0x4, 0x5, 0x81, 0x7, 0x9}) ioctl$DRM_IOCTL_MODE_CLOSEFB(r10, 0xc00864d0, &(0x7f0000000500)={r11}) ioctl$DRM_IOCTL_GEM_FLINK(r10, 0xc008640a, &(0x7f0000000540)={r7}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000580)={r8}) r13 = openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f00000005c0), 0x1, 0x0) recvmmsg(r13, &(0x7f0000000ac0)={{&(0x7f0000000600)=@un=@abs, 0x8, &(0x7f0000000a00)=[{&(0x7f0000000640)=""/8, 0x8}, {&(0x7f0000000680)=""/220, 0xdc}, {&(0x7f0000000780)=""/6, 0x6}, {&(0x7f00000007c0)=""/247, 0xf7}, {&(0x7f00000008c0)=""/202, 0xca}, {&(0x7f00000009c0)=""/39, 0x27}], 0x6, &(0x7f0000000a80)=""/30, 0x1e}, 0xfff}, 0x38, 0x40, &(0x7f0000000b00)={0x0, 0x4}) connect$inet6(r13, &(0x7f0000000b40)={0x1c, 0x18, 0x2, 0x8, "422ffab812c46859cd513c5d0c6297a4", 0x1}, 0x1c) ioctl$BIOCSDIRFILT(r9, 0x8004427d, &(0x7f0000000b80)=0x1c2) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000bc0)={r12, r4, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r13, 0xc01864c6, &(0x7f0000000c40)={&(0x7f0000000c00)=[0x7, 0x8, 0x4], 0x3, 0x4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r14, 0xc04064a0, &(0x7f0000000d80)={&(0x7f0000000c80)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000cc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000d00)=[0x0], &(0x7f0000000d40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x8, 0x1, 0x8, 0x8001, 0x6, 0x2f679b79, 0x6}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r13, 0xc01864ba, &(0x7f0000000dc0)={0xed68, 0x80000000, 0x90b, 0x2c2c2c2c}) r15 = openat$zero(0xffffffffffffff9c, &(0x7f0000000e00), 0x40000, 0x0) fcntl$dupfd(r15, 0xa, r0) getsockopt$sock_cred(r15, 0xffff, 0x1022, &(0x7f0000000e40), &(0x7f0000000e80)=0xc) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(0xffffffffffffffff, 0xc01864ba, &(0x7f0000000ec0)={0x3ff, 0x3, 0x3, 0xfbfbfbfb}) bind$unix(r15, &(0x7f0000000f00)=@file={0x0, 0x1, './file0\x00'}, 0xa) 1.226261466s ago: executing program 7 (id=606): symlink(&(0x7f0000000300)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000d80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) symlink(&(0x7f0000000300)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000d80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') unlink(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') setitimer(0x0, &(0x7f00000000c0)={{0xffffffff}, {0xffffffff}}, 0x0) sysctl$hw(&(0x7f0000000040)={0x7, 0x10}, 0x2, &(0x7f00000000c0)="1679163860eed0e8", &(0x7f0000000000)=0x8, 0x0, 0x36) 1.225122004s ago: executing program 4 (id=607): ioctl$DIOCGETSTATE(0xffffffffffffffff, 0xc1084413, &(0x7f0000000100)={{0x0, './file0\x00', [{[@v4, @v4=@multicast2], [0x8, 0xc000], 0x0, 0x2}, {[@v6=@rand_addr="360d821fef2dd8079686e0b19a462d03", @v6=@mcast2], [0x400, 0x2], 0x8, 0x2}], {{0x9, 0x4, 0x5e, 0x3}, 0x0, 0x2, 0x75, 0xd, 0x0, 0x7, 0x40}, {{0x3, 0x6, 0x2, 0x3}, 0x4c, 0x5, 0x6, 0x2, 0xe, 0xc3, 0x84}, @v4=@multicast1, 0x7, 0x9, 0x12, 0x8001, 0x81, [[0xfff, 0x9], [0x4ed, 0x8001]], [[0x3, 0x6], [0x1, 0x7ba]], 0x60, [0x2, 0x5599], 0x9, 0x0, 0x1, 0x3, 0x2, 0x0, 0x1, 0x8, 0x2, 0x6, 0x7}}) sysctl$hw(&(0x7f0000000100)={0x7, 0x4}, 0x3, 0x0, 0x0, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000b40)="825adec7460f5cc70a", 0x9}], 0x1, 0x0, 0x0, 0x6}, 0x2) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x62}) r0 = syz_open_pts() ioctl$TIOCSTART(0xffffffffffffff9c, 0x2000746e) close(r0) syz_open_pts() getrlimit(0x3, &(0x7f0000000000)) writev(r0, &(0x7f0000000700)=[{&(0x7f0000000080)="34eb4cd59e8456ebc0881681c60e1cd9e0bf01b618b3cb934394c5951c1db0fd943a", 0xff99}], 0x1) writev(r0, &(0x7f00000004c0)=[{&(0x7f00000000c0)="1c3dbf6d67", 0x5}], 0x1) 1.22330664s ago: executing program 7 (id=608): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sysctl$vm_swapencrypt(&(0x7f0000000000)={0x2, 0x5, 0x2}, 0x3, &(0x7f00000001c0)="ad3f304d0f08bdb1c17ed42e159ce788e15a623a22c56940628e68adaa3f216b95f17171925726a5b498f2cef03593b1182d7cdd2390012d9e24380e78b4d0cc0df91217079753e5e4a5d5438cf9bfca5152417ffebf7bfe86bed6ce08ee5971dce52537ad5143b54d40ef0f24f031f9b36ac9eabe5012bb1d83115975d5c65ef3b7b05f07e38bda0abd0c2b6455562f812ee46fc48166beb5cd78eb4dc7cc042cf2c194d87257ff2622db45fc13ec9d3435f3db73702e67a6cee98f253e49b1accbdc569dc48273c8c837df", &(0x7f00000002c0)=0xcc, &(0x7f0000000300)="0e397289a6379fd68e9d887505de09af25305d6e1840c08b2d3e104db6f2e1138d8a256513322ad395171cff4e62a37413e8030643cd11a94e10450641ebd617a20657239053c66e31e9181322a44d2fcd931f446078afbc6fc3a76ebaa54d6cf480184819140a5eef4eaad2acddc5608b60c7b75a2722812c409416ad0dff49b9d5baa3d3938e931fe406f3461b9f238cb83567763dcd6112eead1236f3644bed7a0c46", 0xa4) bind$unix(r0, &(0x7f0000000080)=@abs={0x7, 0x1, 0x0, 0x3}, 0x8) acct(&(0x7f0000000180)='./file0\x00') 994.840877ms ago: executing program 7 (id=609): r0 = socket(0x2, 0x1, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) ioctl$FIONREAD(r0, 0x8080691a, &(0x7f00000001c0)) r1 = socket(0x18, 0x1, 0x0) setsockopt(r1, 0x1000000029, 0x3c, &(0x7f0000000040)="03000000", 0x4) 994.24344ms ago: executing program 7 (id=610): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0xc, 0x26, 0x4f, 0x9}, {0x40, 0xf0, 0xff, 0xd0}, {0x6, 0x7f, 0x4, 0xfffff805}]}) sysctl$kern(0x0, 0x0, &(0x7f00000000c0)="98ffffffffffffff7f5a91e43e9bd32684d37100"/29, &(0x7f0000000080)=0x1d, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x1000e, &(0x7f00000015c0)=ANY=[]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket(0x18, 0x1, 0x0) setsockopt(r1, 0x1000000029, 0x9, &(0x7f0000000100)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) setsockopt(r1, 0x1000000029, 0xc, 0x0, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) r3 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000080)='B\x00\x00', 0x3}], 0x1) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x2, 0x3}, 0x10) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r4, 0x0, 0x200100000001d, &(0x7f0000000000), 0x4) setsockopt$inet_opts(r2, 0x0, 0x200000000000c, &(0x7f0000000000)="ea00000100000000", 0x8) setsockopt$inet_opts(r2, 0x0, 0x200000000000c, &(0x7f0000000240)="ea00000300000000", 0x8) setsockopt$inet_opts(r2, 0x0, 0xd, &(0x7f00000003c0)="ea0000a520e9a9dc36859d00", 0xc) sysctl$net_pipex(&(0x7f0000000180)={0x6, 0x1b, 0x2}, 0x3, &(0x7f0000000580), 0x0, 0x0, 0x0) 990.101065ms ago: executing program 1 (id=500): chmod(&(0x7f0000000080)='.\x00', 0x3db) setuid(0xffffffffffffffff) r0 = socket(0x2, 0x8002, 0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) closefrom(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) bind$unix(r2, &(0x7f0000000140)=@file={0x4, 0x1, './file0\x00'}, 0xa) r3 = semget$private(0x0, 0x4, 0x2a1) semop(r3, &(0x7f0000000000)=[{0x3, 0x2d, 0x1000}, {0x0, 0x2, 0x800}, {0x2, 0x867c, 0x1800}], 0x3) r4 = semget(0x0, 0x2, 0x3ac) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r5, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f00000005c0)=0xc) setresgid(r7, r7, 0x0) semctl$IPC_SET(r4, 0x0, 0x1, &(0x7f0000000780)={{r6, r7, r6, r7, 0x8f, 0x1a00, 0x0, 0x0, 0xb}, 0x0, 0x6, 0x0, 0x0, 0x7, 0x0, 0x8}) getgroups(0x6, &(0x7f0000000040)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0]) lstat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) r10 = openat$bpf(0xffffffffffffff9c, &(0x7f00000001c0), 0x8000, 0x0) ioctl$BIOCSETIF(r10, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSETF(r10, 0x80104267, &(0x7f0000000100)={0x4, &(0x7f0000000080)=[{0x1d, 0x0, 0x2, 0xffff}, {0x48, 0x2, 0x6, 0x5}, {0x87, 0x1e, 0x63, 0x1001}, {0x9b1e, 0x7, 0xff, 0x200000}]}) syz_extract_tcp_res(0x0, 0xa93f, 0xfff) semctl$IPC_SET(r4, 0x0, 0x1, &(0x7f0000000200)={{r6, r8, r9, 0x0, 0xa, 0x8, 0x0, 0x0, 0x4}, 0x0, 0x2, 0x0, 0x0, 0x10003, 0x0, 0x8}) connect(r2, &(0x7f0000000000)=@un=@file={0x9, 0x1, './file0\x00'}, 0xa) 989.849291ms ago: executing program 7 (id=611): pledge(0x0, &(0x7f00000002c0)='tty\x00!\a\x9bj\xb6\x00\x00\x00\x00\x00\x00\xa3_\xbc\x04\x9d!\xd9\x9f\x9f\xb4\x96\x13\x12\xe0\r\xe7\xb9E\b\x00\x00\x00l\xaaY\xe1Q<\x19\xc0\xf6Yf\x9au^\xa0\xc9j\xdd-I\x01R\x00w\xf7\x15\x04\xa6\x82aQ\x1d\xd7\f>Y\x06\"\xad\xb6\x88_\xeb\at\x91\xd3\xbf\xea\xddt\xd7\bt\x06S,\xdbH\xa7-\xaaw\xcet\x044\xc5\xa9e\xa9\xf6\x1b\x8e\x05\x86\x91IsC\xb9ul\xaeu\x94\x9b\xaf\x04\xc4\x03\"F\x8f\xd5\xe8\r\x8d\xa1\x00\xcc\xd7\xa0\xe1\xeb\xc1>\xbd\t\xc8\x15\v\xb0, \xee\xa4\xa6\xb9a\x01&\xadrj\xd5\xc26p\xa14\xe0\xbf\xa0\x1es\x01=\xdbd\xf0?=\x8afcJ\x8eYEn\xd4<\x00\xec\xe4^\x00\x00\x00\xca\x90\xfa\x98\xc9gty\xce\xab\xd2\xa1\x85E\xe4\xa9\xd5\xab\x83\xda?w\x83\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\xa6\x8c\x1an\x83\x83\x12+\x16\xc1\x00\x04\x00\x00\x13:o\x0f\x1fB\xa4\x00wB\x92h\xde\xfal3\x88e\x04J\\\x00D\xae`\x8e\xadd\xa8;\xee\xc4K\xe8]\x84\x90\xb8d\xfb\x95\xb3\xe9(x_\x80]\xadW\xd5\xa9\xaa\x03\x9c6\xa9\f\x00\x00\x00\xe5\x90\x85\x16\xb0DV\x13\x01\xab\x01\xf0\x8f\xeb\xb4\xc8\x9b\x03\x1f\xd7\xdbN\\\xc0\xcd?Pg\xd5q\x13\xbd \xfa\xab\xccJK\x11\\\x16~#P.\xc9K\x15r\x04\xd9Z;\xc0\x8dOze\x9b^\xae\x9f\xed\x94.\xc2\xa0\x1fU#\x96\xe6\xb6C\xfa\x03/\x8b\x0e2\xec\x96v\x9b/.\v\x9e\x80\x18s\xae.\xf4\x14KS`\x87\x8b4\t\x00\x87{\xa8@e\xbfe\xeb\xee\xa2\xe72\xb8Q:\x9f\xc2b\x897\xbe\r\x04\xdf\xe2\xc0_FV\'m\xcbm\x80%\xfc\x9e\x9f\x87\x80A\xbe\xc2\x00\x00\x00\x00\x00\x006\x96\xbb\x9f\x85\x98\xbb\xbc;\xaa\x97c\xfe\x82jz&[(j1\x98-\xfc\xf9\xb5\xa5d1t\xa7\xc4\xcd\xb0\b9G\xcag\fY\xe6\r\xcdT\xd3\x1c(\xef\xc0hD\xf4\x1a\x8eJ\xa6\xc6\x8c7~\xea\xceW^\x03\x18\xbd\xdd\xd9\xc9\x93a]q\xd2\x9b\a\x1e\xf8\xc3\"\xc8:\xb8$\x9f\'P\x17\xfa\xf3Xa\trB-\xf2g\xe6Z\xd5F\xd2\x80\xe0\x99\"\xc12\xe8\b\xc58\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x8b\x80\xa5A\xf1\x95>\xd8G\xf0\xe25\xba\x95z\x14/(\x02\xb3a\x88`|/7Q\x1by}\x13\xd6\xaf\x01\xa2m\xceYn\x91\xb5\xb76\xfb\xc4\xf2\x1c\x999\x81\xc1\x98\x83\\\x8f5\x1d\xd5i#\x18\x12\x17C\xef\xea\xb8<\xa1\xe5w\xad\xf3[\xa7\x87\xa9\xe2\f\x97p\xe8O\xa9\xae\xd5\x8d\xe0|I\xb0\x96\x13\xd3\x8f#\xd0,\x9f\xc0\xc3\xdc\x12\\\xec\x10y\xd2\xbcx\xf8;f\xb1\x93\xa4\x90+\x89\xa6\xe0\xa3C4\x8b\\X\xb7\xc7\x13\x97\xa2\xe7\xfcp\xa3\xb1d\xdf\a1\xc7\x9b\x02\x1b\x98T\xfa\xfa\xf9Q.=\xf4') sysctl$net_inet6_icmp6(&(0x7f00000000c0)={0x4, 0x18, 0x3a, 0x3}, 0x4, &(0x7f0000000080)="ad", 0x0, 0x0, 0x0) mprotect(&(0x7f0000290000/0x2000)=nil, 0x2000, 0x5) sysctl$kern(&(0x7f00000000c0)={0x1, 0x37}, 0x4, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x3, 0x0, 0x2e) pledge(0x0, &(0x7f00000002c0)='tty\x00!\a\x9bj\xb6\x00\x00\x00\x00\x00\x00\xa3_\xbc\x04\x9d!\xd9\x9f\x9f\xb4\x96\x13\x12\xe0\r\xe7\xb9E\b\x00\x00\x00l\xaaY\xe1Q<\x19\xc0\xf6Yf\x9au^\xa0\xc9j\xdd-I\x01R\x00w\xf7\x15\x04\xa6\x82aQ\x1d\xd7\f>Y\x06\"\xad\xb6\x88_\xeb\at\x91\xd3\xbf\xea\xddt\xd7\bt\x06S,\xdbH\xa7-\xaaw\xcet\x044\xc5\xa9e\xa9\xf6\x1b\x8e\x05\x86\x91IsC\xb9ul\xaeu\x94\x9b\xaf\x04\xc4\x03\"F\x8f\xd5\xe8\r\x8d\xa1\x00\xcc\xd7\xa0\xe1\xeb\xc1>\xbd\t\xc8\x15\v\xb0, \xee\xa4\xa6\xb9a\x01&\xadrj\xd5\xc26p\xa14\xe0\xbf\xa0\x1es\x01=\xdbd\xf0?=\x8afcJ\x8eYEn\xd4<\x00\xec\xe4^\x00\x00\x00\xca\x90\xfa\x98\xc9gty\xce\xab\xd2\xa1\x85E\xe4\xa9\xd5\xab\x83\xda?w\x83\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\xa6\x8c\x1an\x83\x83\x12+\x16\xc1\x00\x04\x00\x00\x13:o\x0f\x1fB\xa4\x00wB\x92h\xde\xfal3\x88e\x04J\\\x00D\xae`\x8e\xadd\xa8;\xee\xc4K\xe8]\x84\x90\xb8d\xfb\x95\xb3\xe9(x_\x80]\xadW\xd5\xa9\xaa\x03\x9c6\xa9\f\x00\x00\x00\xe5\x90\x85\x16\xb0DV\x13\x01\xab\x01\xf0\x8f\xeb\xb4\xc8\x9b\x03\x1f\xd7\xdbN\\\xc0\xcd?Pg\xd5q\x13\xbd \xfa\xab\xccJK\x11\\\x16~#P.\xc9K\x15r\x04\xd9Z;\xc0\x8dOze\x9b^\xae\x9f\xed\x94.\xc2\xa0\x1fU#\x96\xe6\xb6C\xfa\x03/\x8b\x0e2\xec\x96v\x9b/.\v\x9e\x80\x18s\xae.\xf4\x14KS`\x87\x8b4\t\x00\x87{\xa8@e\xbfe\xeb\xee\xa2\xe72\xb8Q:\x9f\xc2b\x897\xbe\r\x04\xdf\xe2\xc0_FV\'m\xcbm\x80%\xfc\x9e\x9f\x87\x80A\xbe\xc2\x00\x00\x00\x00\x00\x006\x96\xbb\x9f\x85\x98\xbb\xbc;\xaa\x97c\xfe\x82jz&[(j1\x98-\xfc\xf9\xb5\xa5d1t\xa7\xc4\xcd\xb0\b9G\xcag\fY\xe6\r\xcdT\xd3\x1c(\xef\xc0hD\xf4\x1a\x8eJ\xa6\xc6\x8c7~\xea\xceW^\x03\x18\xbd\xdd\xd9\xc9\x93a]q\xd2\x9b\a\x1e\xf8\xc3\"\xc8:\xb8$\x9f\'P\x17\xfa\xf3Xa\trB-\xf2g\xe6Z\xd5F\xd2\x80\xe0\x99\"\xc12\xe8\b\xc58\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x8b\x80\xa5A\xf1\x95>\xd8G\xf0\xe25\xba\x95z\x14/(\x02\xb3a\x88`|/7Q\x1by}\x13\xd6\xaf\x01\xa2m\xceYn\x91\xb5\xb76\xfb\xc4\xf2\x1c\x999\x81\xc1\x98\x83\\\x8f5\x1d\xd5i#\x18\x12\x17C\xef\xea\xb8<\xa1\xe5w\xad\xf3[\xa7\x87\xa9\xe2\f\x97p\xe8O\xa9\xae\xd5\x8d\xe0|I\xb0\x96\x13\xd3\x8f#\xd0,\x9f\xc0\xc3\xdc\x12\\\xec\x10y\xd2\xbcx\xf8;f\xb1\x93\xa4\x90+\x89\xa6\xe0\xa3C4\x8b\\X\xb7\xc7\x13\x97\xa2\xe7\xfcp\xa3\xb1d\xdf\a1\xc7\x9b\x02\x1b\x98T\xfa\xfa\xf9Q.=\xf4') (async) sysctl$net_inet6_icmp6(&(0x7f00000000c0)={0x4, 0x18, 0x3a, 0x3}, 0x4, &(0x7f0000000080)="ad", 0x0, 0x0, 0x0) (async) mprotect(&(0x7f0000290000/0x2000)=nil, 0x2000, 0x5) (async) sysctl$kern(&(0x7f00000000c0)={0x1, 0x37}, 0x4, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x3, 0x0, 0x2e) (async) 140.717412ms ago: executing program 0 (id=612): ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000a80)={0x0, 0x0}) socket(0x18, 0x3, 0x29) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x184) mmap(&(0x7f0000234000/0x3000)=nil, 0x3000, 0x5, 0x11, r0, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) readv(r1, &(0x7f0000000040)=[{&(0x7f0000002140)=""/4103, 0x1007}, {&(0x7f00000004c0)=""/4093, 0xffd}], 0x2) setsockopt$inet_opts(r1, 0x0, 0x1, &(0x7f0000000a00), 0x0) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) mknod(&(0x7f0000000180)='./bus\x00', 0x2000, 0xd01) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc5005601, &(0x7f0000000000)={0x10, 0x0, [{&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000663000/0x4000)=nil, 0xfffffffffffff801}, {&(0x7f00006ac000/0x4000)=nil, 0x0, 0x3}, {&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil}, {0x0, &(0x7f0000b1b000/0x2000)=nil}, {&(0x7f000067c000/0x10000)=nil, &(0x7f0000ffb000/0x1000)=nil}, {&(0x7f0000088000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil}, {0x0, 0x0, 0x7fff}, {&(0x7f0000727000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil}, {&(0x7f0000593000/0x2000)=nil, &(0x7f0000826000/0x1000)=nil}, {&(0x7f0000110000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil}, {0x0, &(0x7f000065d000/0x2000)=nil, 0xdc9}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0xfffffffffffffffc}, {0x0, &(0x7f0000ffd000/0x3000)=nil}, {&(0x7f00004c1000/0x2000)=nil}, {&(0x7f00001cf000/0x4000)=nil}, {&(0x7f0000355000/0x13000)=nil, &(0x7f0000358000/0x2000)=nil, 0x1}], './file0\x00', 0x5, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1135, 0x0, 0x0, 0x80c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x80000000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xc87, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x15, 0x0, 0x0, 0x15340, 0x0, 0x0, 0x80, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0xd824, 0x0, 0x0, 0x800000, 0x0, 0xfffffffc, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1, 0x0, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0xfe7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xffffffff]}) r3 = open(&(0x7f0000000240)='./bus\x00', 0x2, 0x111) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0xffffffff, 0xb, {0x0, 0x1}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r3, 0x84946467, &(0x7f0000000000)={0x0, 0xffffffffffffffba, 0x0}) openat$wsdisplay(0xffffffffffffff9c, 0x0, 0x10622, 0x0) ftruncate(r2, 0x7) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 140.030762ms ago: executing program 2 (id=613): mknod(&(0x7f0000000280)='./file0\x00', 0x4000, 0x0) (async) r0 = open(&(0x7f0000000000)='./file0\x00', 0x2, 0x80) ioctl$FIONREAD(r0, 0xc0106978, &(0x7f0000000400)) 139.512704ms ago: executing program 3 (id=614): mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x2, 0x0) sendto$unix(0xffffffffffffffff, &(0x7f0000000140)="b10005023deb3da9a5acbde117000000000000000001010000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b78fd7f38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc256699a1f139b672f4d335c223e7d0c032bfa896443a42121000000720fd1704b690cd0df3a0de7dfa477c2ee8bfbb670c1f5a872c881", 0x89, 0x404, 0x0, 0x0) execve(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) ioctl$FIONREAD(r0, 0xc0106978, &(0x7f00000001c0)) rename(&(0x7f0000004d40)='.\x00', &(0x7f0000004d80)='./file0\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) wait4(0xffffffffffffffff, &(0x7f0000000000), 0x2, &(0x7f0000000040)) syz_emit_ethernet(0x3e, &(0x7f00000005c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd6000000800082b00fe8000000000000000000000000000bbfe800000008e"]) recvmsg(r1, &(0x7f00000005c0)={&(0x7f00000000c0)=@un=@abs, 0x8, &(0x7f0000000540)=[{&(0x7f00000002c0)=""/146, 0x92}, {&(0x7f0000000380)=""/124, 0x7c}, {&(0x7f0000000400)=""/25, 0x19}, {&(0x7f0000000440)=""/241, 0xf1}], 0x4, &(0x7f0000000580)=""/30, 0x1e}, 0x40) symlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') 138.941861ms ago: executing program 4 (id=615): mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x5900) (async, rerun: 64) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) (rerun: 64) r1 = socket$inet(0x18, 0x3, 0x102) sendmsg(r1, &(0x7f0000000080)={&(0x7f0000000280)=@in6={0x1c, 0x18, 0x1, 0xfffffffa, "00000000000000000100", 0x101}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000000)="630c00000000069afe51f6f2efa24a85abdd612dd68e59adffbb93232d44372e9bc47e84f7c477d2", 0x28}], 0x1, 0x0}, 0x0) (async) ioctl$BIOCSETIF(r0, 0x80084904, &(0x7f0000000380)={'tap', 0x0}) (async, rerun: 64) closefrom(r0) (rerun: 64) r2 = socket(0x10, 0x3, 0x0) setsockopt(0xffffffffffffffff, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd31", 0x8) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x8000000000000002, 0x10002f0000002}) (async, rerun: 32) ioctl$FIONREAD(r2, 0x8020697a, &(0x7f0000000040)) (async, rerun: 32) getppid() link(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='./file0\x00') 107.714103ms ago: executing program 5 (id=616): syz_emit_ethernet(0x42, &(0x7f0000000100)=ANY=[@ANYBLOB="ffffffffffffffffffffbaff080048f80034006700000033907800000000000000148ae100e9d77bbaea6f0ec683e09cac0044e371ac0655b3ac1400bb000080034e234e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5100000e90780001"]) chmod(&(0x7f0000000040)='.\x00', 0x35e) setuid(0xffffffffffffffff) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f00000000c0)=@file={0x6, 0x1, './file0\x00'}, 0xa) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000080)=@file={0x5, 0x1, './file0\x00'}, 0xa) 106.710578ms ago: executing program 6 (id=617): r0 = socket(0x18, 0x1, 0x0) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r1 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x1003, 0x4c, 0x2100009, 0x6, 0x1, 0x6, 0x5d7227f9, 0x10, [{0x3, 0x10003, 0x100000c, 0x71000}, {0x8, 0x9, 0x1, 0x2901f03c}, {0x1000008, 0xf88, 0x0, 0x9}, {0x7, 0x800, 0x800a}, {0x401, 0x200726, 0x2800, 0x7}, {0x2, 0x7ff, 0x2000002, 0x99}, {0xce1, 0x2, 0x4f8, 0x6d}, {0x6, 0x300, 0x55, 0x40000008}, {0x8002, 0x82, 0x7, 0x9}, {0x8007, 0x8001, 0x0, 0x103}, {0x1cc, 0x10001, 0xfa, 0x1}, {0x200007ff, 0x9, 0xfffffffd, 0x9fc4}, {0xb8c, 0x5, 0x8, 0x6}, {0x29a71717, 0x80, 0x1, 0xc377}, {0x0, 0x406, 0x5}, {0x8000, 0x1, 0x101002, 0x30004}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r1, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r1, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffe, 0x0}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000380)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7949) setrlimit(0x8, &(0x7f0000000000)={0xfffffffffffffffb, 0xffffffffffffffff}) fcntl$lock(r2, 0xc, &(0x7f00000019c0)={0x2, 0x0, 0xb2ed, 0x6}) setsockopt(r0, 0x1000000000029, 0x3b, 0x0, 0x0) ioctl$WSMOUSEIO_SETPARAMS(0xffffffffffffffff, 0x80105728, 0x0) ioctl$VNDIOCSET(0xffffffffffffffff, 0x80044403, 0x0) syz_open_pts() syz_open_pts() openat$bpf(0xffffffffffffff9c, 0x0, 0x40000, 0x0) r3 = openat$pf(0xffffffffffffff9c, &(0x7f00000000c0), 0x82, 0x0) ioctl$DIOCRTSTADDRS(r3, 0xc4504449, &(0x7f0000000540)={{'./bus\x00', './bus\x00', 0x1a, 0x7}, 0x0, 0x5, 0x0, 0x2f07, 0x444, 0x8, 0xff, 0x2, 0x2040}) readv(r2, &(0x7f0000000240)=[{&(0x7f0000000040)=""/21, 0x15}], 0x1) setitimer(0x2, &(0x7f0000000140)={{0x2, 0x122800000000009}, {0xffffdff0, 0x8020000000000001}}, 0x0) getresuid(0x0, &(0x7f0000000180), 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$TIOCSETA(r3, 0xcd60441a, &(0x7f0000000140)={0x5, 0x100, 0x4, 0x403, "000000000a00000f000000aff0338a6b4fc6d700", 0x8, 0x7}) 105.936297ms ago: executing program 7 (id=618): mknod(&(0x7f0000000000)='./file1\x00', 0x2000, 0x285b9a) openat$dri(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x800, 0x0) sysctl$kern(&(0x7f0000000000)={0x1, 0x42}, 0x6, 0x0, 0x0, 0x0, 0x0) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x8, 0x2000000000000004}, 0x0, 0x0, 0x0) r0 = kqueue() kevent(r0, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) ioctl$WSMUXIO_REMOVE_DEVICE(0xffffffffffffffff, 0x80085762, &(0x7f0000000040)={0x1}) (async) ioctl$WSMUXIO_REMOVE_DEVICE(0xffffffffffffffff, 0x80085762, &(0x7f0000000040)={0x1}) socket(0x18, 0xc003, 0x3a) (async) r1 = socket(0x18, 0xc003, 0x3a) setsockopt(r1, 0x29, 0x6c, &(0x7f0000000040), 0x4) setsockopt$inet6_MRT6_DEL_MFC(r1, 0x29, 0x69, &(0x7f0000000100)={{0x1c, 0x18, 0x1, 0x15e, "bb9ab2d1763678f74d9d8fba8368166e", 0x6}, {0x1c, 0x18, 0x3, 0x1a92, "541b17dc4eae768c2cd9f0e073af2462", 0xffffffff}, 0x40, [0x6, 0x4000004, 0x4994, 0x20000004, 0xfffffffd, 0xc, 0x8000, 0x5]}, 0x5c) r2 = open(&(0x7f0000000080)='./file1\x00', 0x40, 0x132) ioctl$FIONBIO(r2, 0x82907003, &(0x7f0000000140)=0x2) utimensat(r2, &(0x7f0000000100)='./file1\x00', &(0x7f00000001c0)={{0x2, 0xfffffffffffffc01}, {0x7}}, 0x0) kevent(0xffffffffffffffff, 0x0, 0xffeffff1, &(0x7f00000002c0)=[{{}, 0xfffffffffffffff9, 0x8, 0x0, 0x0, 0x5}, {{}, 0xfffffffffffffffa, 0xc0, 0x20000000, 0x7fffffffffffffff, 0x46ad}, {{}, 0xfffffffffffffffe, 0x1, 0xf0000000, 0x1, 0x954}, {{}, 0xfffffffffffffffc, 0x20, 0x4, 0xffffffff, 0xc3d}, {{}, 0xfffffffffffffffb, 0x23, 0xf0000000, 0x9, 0x3}, {{}, 0xffffffffffffffff, 0x6, 0x2, 0xe, 0x6}, {{}, 0xfffffffffffffff6, 0x14, 0xf0000000, 0x2, 0x100000001}, {{}, 0xfffffffffffffffb, 0x80, 0x1, 0x1f70, 0x80000000000003}], 0xb19, 0x0) (async) kevent(0xffffffffffffffff, 0x0, 0xffeffff1, &(0x7f00000002c0)=[{{}, 0xfffffffffffffff9, 0x8, 0x0, 0x0, 0x5}, {{}, 0xfffffffffffffffa, 0xc0, 0x20000000, 0x7fffffffffffffff, 0x46ad}, {{}, 0xfffffffffffffffe, 0x1, 0xf0000000, 0x1, 0x954}, {{}, 0xfffffffffffffffc, 0x20, 0x4, 0xffffffff, 0xc3d}, {{}, 0xfffffffffffffffb, 0x23, 0xf0000000, 0x9, 0x3}, {{}, 0xffffffffffffffff, 0x6, 0x2, 0xe, 0x6}, {{}, 0xfffffffffffffff6, 0x14, 0xf0000000, 0x2, 0x100000001}, {{}, 0xfffffffffffffffb, 0x80, 0x1, 0x1f70, 0x80000000000003}], 0xb19, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)="76e5eac907f9ccf7a251ceddcec7d6aa45cffe2c63a56077123a276d3ba4e9d17eb3eb5db12a3783a8e0620d357de1fe04fa9465b5bd1286e9624dec06a00c222f", 0x41}], 0x1) (async) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)="76e5eac907f9ccf7a251ceddcec7d6aa45cffe2c63a56077123a276d3ba4e9d17eb3eb5db12a3783a8e0620d357de1fe04fa9465b5bd1286e9624dec06a00c222f", 0x41}], 0x1) socket$inet6(0x18, 0x3, 0x80) (async) r3 = socket$inet6(0x18, 0x3, 0x80) r4 = socket(0x18, 0x3, 0x0) getsockopt(r4, 0x3a, 0x7f, 0x0, 0x0) getsockopt$sock_cred(r3, 0xffff, 0x1022, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) faccessat(0xffffffffffffffff, &(0x7f00000000c0)='./file0/file0/..\x00', 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000180)=""/49, 0x31}], 0x1) (async) readv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000180)=""/49, 0x31}], 0x1) ioctl$FIONBIO(r2, 0x82907003, &(0x7f0000000140)=0x1) (async) ioctl$FIONBIO(r2, 0x82907003, &(0x7f0000000140)=0x1) 103.508472ms ago: executing program 2 (id=619): mknod(&(0x7f00000000c0)='./file0\x00', 0x2000, 0x9) mknod(&(0x7f0000000000)='./bus\x00', 0x3a0914c44f7b202d, 0x504) r0 = semget$private(0x0, 0x2, 0x590) chflags(0x0, 0x0) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0x30, 0x1, 0x0, 0x0, 0x40}, 0x0, 0x1, 0x0, 0x0, 0x6, 0x0, 0x8000000000000001}) setuid(0xffffffffffffffff) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000280)='#!', 0x10}, {&(0x7f0000000000)="8d6bb85551ec8430877ae32fe9bbe42cc8f2147a3eba8e1969f0435119cf4c071c8aee7ef2921be5d7d4796c5566c95989acb3d185587234186e96b8fde9ffac51de05a87b8b893e2abd154dd886eafbe03881d25b7b13b4c32227fc9e5a86a06f59f701322b3a109a13436e486b0a", 0x6f}], 0x2) mkdir(&(0x7f0000000180)='./file0\x00', 0x25) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) unveil(&(0x7f0000000200)='./file0/file0\x00', &(0x7f00000002c0)='x\x00') unveil(&(0x7f0000000340)='./file1\x00', &(0x7f0000000380)='r\x00') ioctl$BIOCGBLEN(0xffffffffffffffff, 0x4010427e, 0x0) ioctl$VNDIOCSET(0xffffffffffffffff, 0xc0384600, &(0x7f0000000140)={&(0x7f0000000180)='./file0\x00', 0x567, 0x0}) rename(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0/file0/../../file0\x00') semctl$GETVAL(r0, 0x3, 0x5, &(0x7f00000004c0)=""/233) 20.814855ms ago: executing program 4 (id=620): r0 = socket(0x18, 0x2, 0x0) bind(r0, &(0x7f0000000000)=@in6={0x1c, 0x18, 0x0, 0x9, '\x00', 0x80000001}, 0x1c) setsockopt$sock_int(r0, 0xffff, 0x1002, &(0x7f0000000040)=0x3, 0x4) syz_emit_ethernet(0x98, &(0x7f0000000000)={@broadcast, @random="94ea09066dbd", [], {@ipv6={0x86dd, {0x0, 0x6, "db8344", 0x8, 0x11, 0x0, @empty, @mcast2, {[], @udp={{0x0, 0x0, 0x8}}}}}}}) sysctl$kern(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)="964b2e8c33c6b9184c54128f975fecf28b35a6b4fe6c2c7decb370e1ded56c32941e0b88ddd1b408c2570ee069d4b5d9fe2d8c0e0e6fcae82f887c519aef0e4f551a8da94ec5e94e8cc86014dcae87ce36ccfa7db954ba0ac2262672aa4264b2ec6ad65c12edb84ce1def64f79b40d76e2c7318805285dcb26b2adfb8bdfa599fa5d155b68e34a92a4e96829325b7b8acd8cb6c66aa407b4ff97282541ca92edef6fc0382c47bd1c63e463375341590f6a327092643b98a174e443c056da46158047e0b068975ba714199a52b4034fa4364e7304b31dd9dcaced366eb800389ecb0e1c41c6058bb7fa03702e8a03363bc593818269f64a0be94d29087369babc60ce10bc4c561f687122c1b20dd9f10518", 0x111) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) r1 = socket$inet(0x2, 0x3, 0x0) ioctl$WSKBDIO_SETDEFAULTKEYREPEAT(0xffffffffffffff9c, 0x800c5709, &(0x7f0000000000)={0xffffffff, 0xfa, 0x725d}) r2 = socket(0x11, 0x3, 0x0) setsockopt(r2, 0x11, 0x2, &(0x7f0000000000), 0x4) ioctl$FIONREAD(r1, 0x80206979, &(0x7f0000000100)) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r3 = socket(0x1e, 0x3, 0x0) ioctl$FIONREAD(r3, 0x801169ac, &(0x7f00000001c0)) 960.801µs ago: executing program 2 (id=621): r0 = socket$inet(0x2, 0x3, 0x0) close(0x3) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r1, 0x0, 0x200000000000b, &(0x7f0000000080)='\x00', 0x1) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000140)="ea00000300000000", 0x8) socket(0x2, 0x3, 0x0) r2 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x10, 0x0) ioctl$DIOCRCLRTABLES(r2, 0xc450443c, &(0x7f0000000040)={{'./file0\x00', './file0\x00', 0x4b, 0xfd}, 0x0, 0x0, 0x0, 0x5, 0x5, 0x9, 0x5, 0x42, 0xd426}) mknod(&(0x7f0000000000)='./bus\x00', 0x2000, 0x0) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x10000, 0x0) kill(0xffffffffffffffff, 0xe) chmod(&(0x7f0000000040)='.\x00', 0x35e) setuid(0xee01) mkdir(&(0x7f0000000040)='./file2\x00', 0xc1) mkdir(&(0x7f0000000300)='./file2/file0\x00', 0xc2) rename(&(0x7f0000000100)='./file2/file0\x00', &(0x7f00000000c0)='./file2\x00') ioctl$TIOCSETAF(r3, 0x802c7416, &(0x7f0000000340)={0xc9, 0xffffffee, 0xe150, 0xfffffffd, "000f0000e1e5c867c07b7d280000000000f70080"}) rename(&(0x7f0000000b40)='./bus/file0\x00', &(0x7f0000000b80)='./file0\x00') sendsyslog(0x0, 0x0, 0x2e) mknod(&(0x7f0000000500)='./bus/file0\x00', 0x2000, 0x0) r4 = open(&(0x7f0000000540)='./bus\x00', 0x0, 0x0) fstat(r4, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000a80)='./bus\x00', &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(r4, &(0x7f00000004c0)='\x00', r5, r6, 0x0) mprotect(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1) pread(r4, &(0x7f0000000000)="2beba8c5bfaaff44b437dfbb000000", 0x50cc3a, 0x80000000) ioctl$DIOCRCLRTSTATS(0xffffffffffffff9c, 0xc4504441, &(0x7f0000000580)={{'./bus\x00', './bus\x00', 0x0, 0x4}, &(0x7f0000000080)=[{'./bus\x00', './bus\x00', 0x0, 0x3}], 0x10, 0x1, 0x80000001, 0xc9, 0x2, 0x745, 0x4, 0x9}) 0s ago: executing program 5 (id=622): sysctl$vm(&(0x7f0000001700)={0x2, 0xc}, 0x2, 0x0, 0x0, &(0x7f0000000000)="001eb709c880f7ffca53bcd9ee89797293db", 0x12) r0 = open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x6e) ktrace(&(0x7f0000000000)='./file0\x00', 0x4, 0x538, 0x0) syz_emit_ethernet(0x1000e, &(0x7f00000015c0)=ANY=[]) mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x3, 0x10, r0, 0x0) r1 = kqueue() sysctl$hw(&(0x7f0000000080)={0x6, 0x18}, 0x2, 0x0, 0x0, 0x0, 0x0) openat$bpf(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0) syz_emit_ethernet(0xda, &(0x7f0000000040)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd602e5cea00a43c0020010000000000000000000000000000ff0200000000000000000000000000013c00"]) ioctl$DIOCRDELADDRS(0xffffffffffffffff, 0xc4504444, &(0x7f0000004c40)={{'./file1\x00', './file2\x00', 0xc, 0x1}, 0x0, 0x7f, 0x0, 0x8, 0x83bc, 0x7, 0x9, 0x40, 0x7}) r2 = kqueue() r3 = semget(0x1, 0x3, 0x20) semctl$IPC_RMID(r3, 0x0, 0x0) kevent(r2, &(0x7f00000000c0), 0x138, 0x0, 0xffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) kevent(r1, &(0x7f00000000c0), 0x138, 0x0, 0xffffffff, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.68' (ED25519) to the list of known hosts. pckbd_enable: command error pckbd_enable: command error denied attempt to set clock forward to 8589934592 pckbd_enable: command error pckbd_enable: command error denied attempt to set clock forward to 495890607918 ¹j¼õ¬|ÿ ž¨E1\…:denied attempt to set clock forward to 8589934592 Connection to 10.128.0.68 closed by remote host. pckbd_enable: command error OpenBSD/amd64 (Amnesiac) (tty00) login: pckbd_enable: command error pckbd_enable: command error OpenBSD/amd64 (Amnesiac) (tty00) login: init: getty repeating too quickly on port /dev/tty00, sleeping pckbd_enable: command error pckbd_enable: command error uvm_fault(0xffffffff83a57a48, 0xffff800026212004, 0, 1) -> d kernel: page fault trap, code=0 Stopped at ufs_lookup+0x613: movzwl 0x4(%r15,%r14,1),%ebx TID PID UID PRFLAGS PFLAGS CPU COMMAND *428165 80676 0 0 0 0 syz-executor ufs_lookup() at ufs_lookup+0x613 VOP_LOOKUP(fffff3006d635db8,ffff80002a7b9428,ffff80002a7b9458) at VOP_LOOKUP+0x6e vfs_lookup(ffff80002a7b93f8) at vfs_lookup+0x94a namei(ffff80002a7b93f8) at namei+0x7c3 sys_chdir(ffff80002a768fa0,ffff80002a7b95c0,ffff80002a7b9510) at sys_chdir+0x88 syscall(ffff80002a7b95c0) at syscall+0x962 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7d7e846dbeb0, count: 8 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb> ddb> set $lines = 0 ddb> set $maxwidth = 0 ddb> show panic *cpu0: uvm_fault(0xffffffff83a57a48, 0xffff800026212004, 0, 1) -> d ddb> trace ufs_lookup() at ufs_lookup+0x613 VOP_LOOKUP(fffff3006d635db8,ffff80002a7b9428,ffff80002a7b9458) at VOP_LOOKUP+0x6e vfs_lookup(ffff80002a7b93f8) at vfs_lookup+0x94a namei(ffff80002a7b93f8) at namei+0x7c3 sys_chdir(ffff80002a768fa0,ffff80002a7b95c0,ffff80002a7b9510) at sys_chdir+0x88 syscall(ffff80002a7b95c0) at syscall+0x962 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7d7e846dbeb0, count: -7 ddb> show registers rdi 0 rsi 0x2 rbp 0xffff80002a7b9230 rbx 0 rdx 0 rcx 0xffffffff rax 0xffff80002a768fa0 r8 0xffffffffffffffff r9 0xfffff30007ffd270 r10 0x3384f3662f608d87 r11 0xb1f0c8e924be4b82 r12 0xfffff3006a777228 r13 0 r14 0 r15 0xffff800026212000 rip 0xffffffff82b15853 ufs_lookup+0x613 cs 0x8 rflags 0x10246 __ALIGN_SIZE+0xf246 rsp 0xffff80002a7b9140 ss 0x10 ufs_lookup+0x613: movzwl 0x4(%r15,%r14,1),%ebx ddb>