last executing test programs: 3.03586237s ago: executing program 4 (id=232): ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x0, "e600000f0000ae000000000000000007abc0788a"}) sysctl$kern(&(0x7f0000000040)={0x1, 0x3e}, 0x29a, 0x0, 0x0, 0x0, 0x4f) r0 = syz_open_pts() ioctl$TIOCSETD(r0, 0x8004741b, &(0x7f0000000000)=0x21) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) sysctl$vm_swapencrypt(&(0x7f0000000040)={0x2, 0x5, 0x2}, 0x3, 0x0, 0x0, 0x0, 0x0) 2.844558548s ago: executing program 4 (id=235): r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0xf02, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x10, r0, 0x0) ktrace(&(0x7f0000000000)='./file0\x00', 0x4, 0x112, 0x0) sysctl$net_inet_carp(&(0x7f0000000200)={0x4, 0x2, 0x6, 0x11}, 0x4, 0x0, 0x0, &(0x7f00000004c0)="cd7982d5c8e79cf92b8fbb46085cd931d95e269f935c1aa92223b7c0bd56b996d76b4e5fecbe071fee5b38d73a22e1161b45f8103a3c4b3e1c64fe3de3384da352819acb592057106e941a5cd0e154eab065923c86064062557b48e72bc16e9c7af1a7bdbcbbb738dcf1db33bdc8ea72f57bf302636af6ec43c1611037efbab044abaade474573d474ea3be203f6694b91cc2028491701d2e5beb3d62af931af8f5edf4f8e83febb45773e65", 0xac) r1 = socket(0x11, 0x3, 0x0) sendto$unix(r1, &(0x7f00000000c0)="b10005166000009f050000002010000000000000cea10500fef96ecfc727d3357ae302b37b67ca1f2d61db7f4de57804be38164991f7c8cf5f882b297be1aa5b23edeb51e2f0ac3ebbc257699a1f139b672f4d335d223e7db3008b95665bc6fc210200b10000000000fbb770c1f5a872c881ea772ec5890405b3b9c2668396f4cd1257aea8c500002002fbfc0c2300008abfba0900000008e37f71a3f8343712051eeab71d89e000040381ecb664000000", 0xb1, 0x402, 0x0, 0x0) munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000) munlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) shmctl$IPC_RMID(0x0, 0x0) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffff9c, 0x80185760, &(0x7f0000000000)={0xa, 0x0, {0xe00000002}}) r2 = syz_open_pts() ioctl$TIOCSETD(r2, 0x8004741b, &(0x7f00000006c0)=0x9) socket(0x2, 0x2, 0x0) mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0x1604) open(&(0x7f0000000180)='./file0\x00', 0xa608c9af653c9f6d, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sysctl$vm_swapencrypt(&(0x7f0000000000)={0x6, 0xb, 0x2}, 0x5, &(0x7f0000000500), 0x0, 0x0, 0x0) r3 = open(0x0, 0x100, 0x80) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="89000000ffff000001"], 0x9}, 0x0) sendmsg(r4, &(0x7f0000000380)={0x0, 0x32c, 0x0, 0x0, &(0x7f0000000000), 0xe0}, 0x0) sysctl$vfs_nfs(&(0x7f00000000c0)={0xa, 0x2, 0x2}, 0x3, &(0x7f0000000240)="0003521e", &(0x7f0000000100)=0x64, &(0x7f0000001900), 0x4) r5 = open$dir(&(0x7f0000000040)='./file0\x00', 0xae828e137847f62, 0x0) r6 = msgget$private(0x0, 0x220) msgrcv(r6, &(0x7f0000000280)={0x0, ""/223}, 0xe7, 0x0, 0x800) ioctl$BIOCSETF(r3, 0x80104267, &(0x7f0000000180)={0x2, &(0x7f0000000080)=[{0x401, 0x1, 0xd, 0xe324}, {0xd403, 0x3, 0x9, 0x2}]}) setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) ftruncate(r5, 0x10000) setrlimit(0x1, &(0x7f0000000000)) truncate(&(0x7f00000000c0)='./file0\x00', 0x6000000000) 2.819463926s ago: executing program 4 (id=239): syz_emit_ethernet(0x3e, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffff94ea09066dbd86dd60db440000000000000000000000000000bbff0200000000000000000000000000014e204e"]) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@remote, @random="604c23f3faa7", [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x3, @remote, @broadcast, @random="4bc1f09bcb9d", @broadcast}}}}) 2.761146571s ago: executing program 4 (id=242): ioctl$WSDISPLAYIO_GETEMULTYPE(0xffffffffffffff9c, 0xc014575e, &(0x7f0000000000)={0xf0, './file0\x00'}) sysctl$vm(&(0x7f00000000c0)={0x2, 0x8}, 0x2, &(0x7f0000000240), 0x0, 0x0, 0x0) sysctl$vm(&(0x7f0000000100)={0x2, 0x3}, 0x2, &(0x7f0000000140)="ddc2d5f5636e43c15eabc7d994fc9e1699a8e4b43b7f6cb48bae077838cca511d016b635544eea43e0c19df9e425e6f08d750a28", &(0x7f00000001c0)=0x34, &(0x7f0000000200)="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", 0x1000) sysctl$net_inet_tcp(0x0, 0x0, &(0x7f00000000c0)="9b180bc3eb987aa9feb1", 0x0, 0x0, 0x0) r0 = openat$wskbd(0xffffffffffffff9c, 0x0, 0x1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket(0x18, 0x1, 0x0) setsockopt(r1, 0x6, 0x2e, 0x0, 0x0) ioctl$WSKBDIO_COMPLEXBELL(r0, 0x80105702, &(0x7f0000001200)={0x6, 0x1, 0x5, 0x37ce}) connect$unix(r1, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) r2 = open$dir(&(0x7f0000000040)='./file0\x00', 0x800, 0x1c) r3 = getuid() setitimer(0x0, 0x0, 0xffffffffffffffff) getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0xc) fchownat(r2, &(0x7f0000000080)='./file0\x00', r3, r4, 0x0) shmget$private(0x0, 0x400000, 0x29d, &(0x7f0000bfd000/0x400000)=nil) r5 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000001240), 0x8000, 0x0) ioctl$WSMOUSEIO_GTYPE(r5, 0x40045720, &(0x7f0000001280)) syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "0000fd", 0x8, 0x3a, 0x0, @local={0xfe, 0x80, '\x00', 0x0}, @remote={0xfe, 0x80, '\x00', 0x0}, {[], @icmpv6=@echo_reply={0x81, 0x0, 0x0, 0x682}}}}}}) 2.753394923s ago: executing program 4 (id=245): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x62}) kqueue() r2 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f00000000c0), 0x84c7aa6835e42185, 0x0) ioctl$WSMUXIO_ADD_DEVICE(r2, 0x80085761, &(0x7f0000000100)={0x1, 0x1}) write(r0, &(0x7f0000000340), 0xd4e688a67930cd) r3 = getpid() fcntl$setown(r1, 0x6, r3) close(r1) 2.606440851s ago: executing program 4 (id=252): sysctl$kern(&(0x7f00000000c0)={0x1, 0x50}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x10, 0x0, 0x37) setuid(0xffffffffffffffff) ktrace(0x0, 0x1d97c82b8eba19ad, 0x506, 0x0) setrlimit(0x3, &(0x7f0000000980)={0x42, 0x1}) r0 = syz_open_pts() close(r0) r1 = syz_open_pts() mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x0) r2 = kqueue() r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) kevent(r2, &(0x7f0000000480)=[{{r3}, 0xfffffffffffffffe, 0x18, 0x1, 0xe, 0xa000}, {{r0}, 0xfffffffffffffff8, 0x80, 0xf0000000, 0x0, 0x6}], 0x2, &(0x7f00000004c0)=[{{r1}, 0xfffffffffffffffa, 0xc0, 0x1, 0xf000000000000000, 0x8000000000008000}, {{r1}, 0xfffffffffffffffb, 0x40, 0x4, 0x1, 0x2}, {{r0}, 0xfffffffffffffff9, 0x8, 0x20000000, 0x1, 0x6}], 0x0, &(0x7f0000000540)={0x25}) r4 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$TIOCGFLAGS(r4, 0x4004745d, &(0x7f0000000040)) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) write(r0, &(0x7f00000000c0)="ca0d7ac73155ddcfd8bb14d3e4312645e2af36ad51fc16c51e6eba8b17", 0x1d) r5 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCSETIF(r5, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$BIOCSETWF(r5, 0x80104277, &(0x7f00000001c0)={0x4, &(0x7f0000000180)=[{0x3, 0x0, 0x2, 0x40000001}, {0x4fab, 0x1, 0x2, 0x9}, {0x64, 0xf9, 0xc, 0x9}, {0x50, 0x7, 0x0, 0x8}]}) write(r5, &(0x7f0000000200)="d81ad3d20cf7eb4e9be33bbd1a30", 0xe) openat$diskmap(0xffffffffffffff9c, &(0x7f0000000000), 0x8, 0x0) sysctl$kern(&(0x7f0000000040)={0x1, 0x1c}, 0x2, &(0x7f0000000240)="90b8b99e715798bdb0c634f0157767ca9dca7e5604a9450cce856a6a4ca658f29acaa86c953bc8d23d7a00da1737466d413c80a12ebd8c66a1dd4d457f3bf085973d27ee95e431cb78a3b518c2511c29478a1b4f19e30ce688a822de4e8b633d4ec5189c73f5f382d39b09917ac6adbfd7fdda626edba2806edd7263b20bcaf191f5f068f14a8f8c7808bdfbf8d43a47225e130920e71d1aaafecc10c12374ea05af8c2d6958b46074a886a47f2a8d762a646c584f4bc31a0ede74d4d92198414949137246108c1039323d652d1a30fbec0a9d264cd8bae2d20629be6ce8577782ff205d9f83bcd3ef7c8cca059fd87eb0e680ac2d2f764126", &(0x7f0000000140)=0xf9, &(0x7f0000000340)="97525fa8962f3e29b07f2c449c342fd12ec0cebed70d23eb7fbe1408ecbe71a1cc5ee09ab94cd0d07abdeed3a5f99480047fbb9f615fa342345257c795fc19acd77e290e77b75fbf6e8fe5c022b01778a567dd1695ede6df519d722bc2567565e2f8a01114d054c712f74e54b1b15952b5b2ceb722bfdcc8f237157f1631fa7cb23a39dfa51b97af448a2babf6452a81d9c637cc3aac902f582ea652e77633adf5716062aa2c8781a853", 0xaa) chdir(&(0x7f0000000400)='./file0\x00') 2.605602328s ago: executing program 0 (id=254): r0 = getuid() setreuid(0x0, r0) setreuid(r0, 0xee01) (async) setreuid(r0, 0xee01) openat$bpf(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket(0x1, 0x2, 0x0) (async) r1 = socket(0x1, 0x2, 0x0) setsockopt(r1, 0x1000000029, 0xd, &(0x7f00000000c0)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) fcntl$setown(r1, 0x6, 0x0) 2.506931721s ago: executing program 0 (id=261): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) poll(&(0x7f0000000000)=[{r0, 0x2}], 0x1, 0x803) close(r0) sysctl$net_inet_ip(&(0x7f0000000000)={0x4, 0x2, 0x0, 0x17}, 0x4, 0x0, 0x0, 0x0, 0x0) 2.000417655s ago: executing program 7 (id=290): r0 = open(&(0x7f0000000000)='./file0\x00', 0x9cab835cfdc52675, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0xa011, r0, 0x0) (async) sysctl$net_inet_ip(&(0x7f0000000280)={0x4, 0x2, 0x0, 0x1b}, 0x4, 0x0, 0x0, &(0x7f0000001300), 0x4) (async) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x5d02) (async) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000140)={0x3, &(0x7f0000000040)=[{0x0, 0x6, 0xd5, 0x4}, {0x6, 0x0, 0xb}, {0x5, 0x0, 0x0, 0x8e}]}) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x11, 0x0, 0xd}, 0x4, 0x0, 0x0, 0x0, 0x0) (async) sysctl$hw(&(0x7f0000000100)={0x6, 0x18}, 0x2, &(0x7f0000000280)="99c5069e7aab216e751fcf107818533afc9ff01a68a4b1baa30ad661c4b66ce08d59af7e54a8341f3be673a174c3a12223a171ff2ab99d1e0d43f0a6c3948f11658e876ac2126614dcd00fdfe76f1ace1f77da0c0af828b5c508585fd9df9ae729f85999a053e2c9872fbdd4e49101001079184000000000003adecd04eba2c8193ce92a30cb00000081131a6f0b680f31327b72f2b0d9a19e5704000000000000000000000000d141f3e2b02045baf3656dbc4513", &(0x7f0000000180)=0xb5, 0x0, 0x0) (async) r1 = getpgrp() open(&(0x7f00000000c0)='./file0\x00', 0x70e, 0x19) (async) r2 = getpid() (async) r3 = syz_open_pts() setpgid(0xffffffffffffffff, 0x0) (async) ioctl$TIOCSETAW(r3, 0x802c7415, &(0x7f0000000040)={0xfffffffe, 0x0, 0x83, 0xc072, "e0909c80429a030bf70100001613f6d7bc0d6e60"}) (async) fcntl$setown(r3, 0x6, 0xffffffffffffffff) (async) ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x100, r2) (async) ktrace(&(0x7f0000000080)='./file0\x00', 0x1, 0x2, r1) (async) r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setuid(0xee01) (async) ioctl$BIOCLOCK(r4, 0x20004276) ioctl$BIOCSETWF(r4, 0x2000427e, 0x0) ioctl$FIONBIO(r3, 0x8004667e, &(0x7f00000001c0)=0x4) (async) mknod(&(0x7f0000000980)='./file0\x00', 0x2020, 0x4000) (async) open(&(0x7f0000000000)='./file0\x00', 0x1, 0x0) 1.995895662s ago: executing program 7 (id=292): munmap(&(0x7f0000001000/0x400000)=nil, 0x400000) ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f0000000040)={0x0, 0x0, 0x1, 0x0, "0100dd2d018000000000005e00"}) sysctl$kern(&(0x7f0000000040)={0x1, 0x59}, 0x2, 0x0, 0x0, 0x0, 0x0) unveil(&(0x7f0000000140)='./file0\x00', &(0x7f0000000300)='x\x00') unveil(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='c\x00') mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$kern(&(0x7f0000000380)={0x1, 0x1d}, 0x2, &(0x7f0000000600)="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", &(0x7f0000000240)=0x20c, &(0x7f0000000840)="1d53966fff9595f536ebb13e64959cca9b0b03e24135686bb5cf43929c8c4436b58a7a7ddb00b421e2077ad81f41bf7c9a4d2d28f3c076451d1ebccd118de67b15f1740fcb9d8c0e477475729c476cd2be890fd0bc8d4fb1b7e5b2769f67fd5dbd28ff607a015da38644173b8face2f30fb33d07efda3d31de4be5c36bd6b37babcb78b11b9f58555b701b5c2aa1ca67a115ec83c35073a97baa3c01939ca00945f01f61e2dd0ad131be89a8d540fc0c9a78c3d1aac073123ad57dc6aed3ea71a6371de30240b56fbd9fb9b6036f7697a9ffa8b4fb9dcb746cc0e68cf8dc13a1f21f186193a5a41f0003f4314a305b6b9cdeacd3fa2a7b1aeb9a80f28ea6e5f47abeb896cd492626124f0bf2de34a7e4ba4121daa2940570a826b38f3e51f7da0000000000000002c9f887f63ca2856b7a8c79ef18913a78c848417eb274630f8a139e805a0bd3b6d229089f354900", 0x14f) syz_emit_ethernet(0x12, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffff0500ffff8847", @ANYBLOB="e53244070817dbffb716a4a50c74dcdf8ae8c9796b177536c07c7420326be3d4"]) sysctl$vm_swapencrypt(&(0x7f0000000040)={0x2, 0x5, 0x2}, 0x3, 0x0, 0x0, &(0x7f0000000080)="2cb304c78ff4ae31182f165b90f1e5cb58a93ee1ada32f940af4664ff327d3c696728eb65650dac4f5bc6f24e2cd92228a0817b49189925d0bbe2301d7133a75d3eb755514999be0d700ec7136df362c1689274a2b9c6c5faabb3750d4b3b828f1d94537c0f2373e5198b878d3743abbfb36b397365e729b888cec868f38e69661198abd35e1ab3a", 0x88) 1.91865658s ago: executing program 7 (id=294): setrlimit(0x8, &(0x7f0000000980)={0x42, 0x62}) r0 = syz_open_pts() mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x2000, 0x0) open(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000000)={0x9, 0x0, 0xfffffffb, 0xffffffbf, "ff000000000000000100"}) select(0x40, &(0x7f0000000000)={0xfffffffffffffffd, 0x1, 0xfff, 0x8001, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x40000802) chmod(&(0x7f0000000280)='./file0\x00', 0x3a) setreuid(0x0, 0xee01) r3 = socket(0x1e, 0x3, 0x0) sendmsg$unix(r3, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=ANY=[], 0xb0}, 0x0) ioctl$TIOCEXCL(0xffffffffffffffff, 0x2000740d) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/50, 0xfd9f}], 0x2f) execve(0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f00000000c0)="7f2e14cf137276fc0a7482cc94affcbbaea076fe4cd6238f5700ba49cdcaf9be1a44e3abcb090b5f9198de5b9011f218034c31be525b22c1f138ef80875cfe03ad8134e24f00e5478a0fb6", 0x4b}], 0x1) sysctl$hw(&(0x7f0000000100)={0x7, 0x4}, 0x3, 0x0, 0x0, 0x0, 0x0) writev(r2, &(0x7f0000000200)=[{&(0x7f0000000100)="19", 0x3a4e1e905c56cdb7}], 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x20) 1.911508544s ago: executing program 1 (id=296): ktrace(&(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file1/file0\x00', 0x200, 0x16) fcntl$lock(r0, 0x8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x100000001}) r1 = socket(0x18, 0x3, 0x0) close(r1) socket(0x18, 0x1, 0x0) setsockopt(r1, 0x1000000029, 0x32, &(0x7f0000000000)="b211d7170d816685c8e360f2fa41c1a0946988b272d2dd3dc90142a84231a746e337b372e93320cff6669cbe7868de45ed3fc33719ca6df71ecec8a918458b2c10a1f8c66653b276e180e9cb9b21f9982230f575295d48889c9a920796b2dd92fc8575680b37ba955d2c15e6d7c9198ed900ab006ddfb67869b51a2216114d1ece85f593e74035f5bc054eb1dbddf42a", 0x90) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x100000000000000, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x205, 0x0) fcntl$lock(r2, 0x8, &(0x7f0000000000)={0x0, 0x0, 0xfffbfffffffffffe, 0x1000300010006, 0xffffffffffffffff}) r3 = open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000080)="4b03", 0x2}], 0x1) mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x3, 0x10, r3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) sysctl$net_inet_ip(&(0x7f0000000000)={0x4, 0x2, 0x0, 0x1c}, 0x4, 0x0, 0x0, &(0x7f0000001100), 0x4) 1.91008319s ago: executing program 3 (id=297): setrlimit(0x0, &(0x7f00000000c0)={0x2, 0x62}) syz_open_pts() openat$bpf(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) select(0x40, &(0x7f0000000180)={0x2, 0x800, 0x7, 0x16ec, 0x9, 0x8, 0x100000001}, &(0x7f00000001c0)={0xfff, 0x101, 0x6, 0x27c3, 0x6f, 0x8, 0x1, 0xa}, 0x0, 0x0) r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sysctl$vm_swapencrypt(&(0x7f0000000000)={0x6, 0xb, 0x1}, 0x3, &(0x7f00000000c0), 0x0, 0x0, 0x0) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000200)={0x1, &(0x7f0000000140)=[{0x3, 0x5, 0x6, 0x6c0}]}) chdir(0x0) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f0000000200)=@file={0xd570d0466b6018f, './file0\x00'}, 0xa) socket(0x18, 0x3, 0x0) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x6, 0x200}, 0x0, 0x0, 0x9}) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x20000000200005f}) setsockopt(0xffffffffffffffff, 0x1000000029, 0x32, 0x0, 0x0) r2 = syz_open_pts() close(r2) openat$bpf(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) mknod(&(0x7f0000000080)='./file0\x00', 0x2000, 0x5200) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x55) semop(0x0, 0x0, 0x0) pread(r2, &(0x7f00000000c0)="fc0a0d89e2d035f365a2d38139bbc66ae03e9cbfa9f70aee", 0x18, 0x100) r3 = syz_open_pts() syz_open_pts() ioctl$TIOCSETD(r3, 0x8004741b, &(0x7f0000000080)=0x7) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000000)=@file={0xd1653077bafa0114, './file0\x00'}, 0xa) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) ioctl$BIOCSHDRCMPLT(r0, 0x80044275, &(0x7f0000000100)=0x7) ioctl$TIOCSETA(r0, 0xc0104419, &(0x7f0000000200)={0x400, 0x7, 0x20000000, 0x8d, "00a2224ff10046840500006b8444d100", 0x9, 0x3}) 1.731725915s ago: executing program 3 (id=299): mknod(&(0x7f0000000200)='./file0\x00', 0x2000, 0x4287e) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getpid() (async) r1 = getpid() fcntl$setown(r0, 0x6, r1) r2 = fcntl$getown(r0, 0x5) fcntl$setown(r0, 0x6, r2) (async) fcntl$setown(r0, 0x6, r2) utimes(&(0x7f0000000900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000000)={{0x100000000, 0x3}, {0xfffffffffffffff4, 0xfffffffffffffffc}}) open$dir(&(0x7f0000000140)='.\x00', 0x0, 0xd3) (async) r3 = open$dir(&(0x7f0000000140)='.\x00', 0x0, 0xd3) mkdir(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) (async) mkdir(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) chdir(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r4 = open$dir(&(0x7f0000000100)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000080)='./file2\x00', r4, &(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000700)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') unlink(&(0x7f0000000800)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) unlink(&(0x7f0000000800)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') unlinkat(r3, &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8) 1.577620181s ago: executing program 0 (id=306): mprotect(&(0x7f0000671000/0x1000)=nil, 0x1000, 0x0) r0 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) shmget(0x0, 0x1000, 0x2, &(0x7f0000671000/0x1000)=nil) setuid(0xffffffffffffffff) r1 = semget(0x0, 0x1, 0x400) semctl$GETPID(r1, 0x67bb171bcfa50a75, 0x4, 0x0) ioctl$WSKBDIO_COMPLEXBELL(r0, 0x80105702, &(0x7f0000000240)={0xfffffffd, 0x0, 0x3, 0x20}) 1.576506893s ago: executing program 2 (id=307): semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200}}) ioctl$TIOCSETA(0xffffffffffffffff, 0xcd504406, &(0x7f0000000740)={0x7f, 0x10000, 0x10001, 0x0, "979222d10000f8ff00", 0x7, 0x1000000}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="28000000ffff000001"], 0x28}, 0x0) recvmmsg(r0, &(0x7f0000000600)={0x0, 0x800}, 0x10, 0x840, 0x0) recvmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/239, 0xef}], 0x1, 0x0}, 0x40) r2 = openat$tty(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) ioctl$TIOCSTOP(r2, 0x2000746f) r3 = socket(0x18, 0x3, 0x0) connect$unix(r3, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) getsockname$inet(r3, &(0x7f00000000c0), &(0x7f0000000000)=0xffffffffffffff35) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) sendto$unix(0xffffffffffffffff, &(0x7f00000001c0)="b10005", 0x3, 0x0, 0x0, 0x0) sysctl$hw(&(0x7f0000000300)={0x6, 0xa}, 0x2, &(0x7f0000000640)="e68c5357023f4414a9ad439bd7ed3fcc3e81aa6cb307b2705e1d9c31a51c88fa912c326f20368ce1d964074b32456a236e925d1cb61791979a50b9cca0f39d8078c82e7dcc26cce7548c72cce6d3b083a5c616a1b1", &(0x7f0000000340)=0x55, &(0x7f0000000780)="bb10612617251b08c2a2d81e0988d3e21529011a1e81705c034b9830799effb269f92aa1064a857f91555153960f6d076b40700fd3c83cb3f15b99c4ddb40959c815469c2c54950de60684da7bd51e6cd63a481e3daebc70719ea74d2fb1c04eb8a7b70d069c050d92cf31e80b432c43e5b2c5a0e90dd8b29666cc6a2ff171fcf3ba5b493cad", 0x86) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r4 = socket(0x18, 0x1, 0x0) setsockopt(r4, 0x1000000029, 0x31, &(0x7f00000001c0)="ebff8bff13924800", 0x8) connect$unix(r4, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) setrlimit(0x8, &(0x7f0000000080)={0x1020000000000000, 0xfffffffffffffffe}) r5 = syz_open_pts() close(r5) r6 = syz_open_pts() ioctl$TIOCSETA(r6, 0x802c7414, &(0x7f0000000040)={0x0, 0x9, 0x7ffc, 0x200498, "d88c28fa8797d9bdca0988d11554620900", 0x896, 0x2}) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000380)="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", 0x24e}], 0x1) 1.574552847s ago: executing program 0 (id=308): syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket(0x2, 0x1, 0x0) fcntl$setstatus(r0, 0x4, 0x40) connect$inet(r0, &(0x7f0000000000), 0x10) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x40047473, &(0x7f0000000040)=0x5) ioctl$BIOCSETWF(0xffffffffffffff9c, 0x80104277, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{}, {0x1}]}) r1 = socket$inet(0x2, 0x3, 0x2) r2 = openat$wsmuxmouse(0xffffffffffffff9c, 0x0, 0x20, 0x0) r3 = dup(r2) ioctl$WSMUXIO_REMOVE_DEVICE(r3, 0x80085762, &(0x7f0000000240)={0x2, 0x7f}) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0x0, [{&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil}, {&(0x7f00003d8000/0x3000)=nil, &(0x7f0000159000/0x2000)=nil}, {&(0x7f0000fff000/0x1000)=nil, &(0x7f000013c000/0x4000)=nil}, {&(0x7f0000692000/0x3000)=nil, &(0x7f0000ff7000/0x3000)=nil, 0xfffffffffffffffd}, {&(0x7f00007e3000/0x2000)=nil, &(0x7f0000188000/0x2000)=nil}, {&(0x7f000069d000/0x4000)=nil, &(0x7f0000231000/0x4000)=nil}, {&(0x7f0000ffb000/0x3000)=nil, &(0x7f00007b1000/0x1000)=nil}, {&(0x7f00003d7000/0x4000)=nil, &(0x7f0000159000/0x4000)=nil}, {&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000729000/0x1000)=nil, 0xfffffffffffffffd}, {&(0x7f000015b000/0x3000)=nil, &(0x7f00004f6000/0x3000)=nil, 0x3}, {&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000375000/0x1000)=nil}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000045000/0x4000)=nil}, {&(0x7f0000691000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil}, {&(0x7f0000ff2000/0x2000)=nil, &(0x7f000015a000/0x1000)=nil}, {&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil}, {&(0x7f0000696000/0x1000)=nil, &(0x7f0000001000/0x800000)=nil}], './file0\x00'}) kqueue() semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)) r4 = openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x82, 0x0) sysctl$kern(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r5 = socket(0x18, 0x1, 0x0) ioctl$FIONREAD(r5, 0x802069b5, &(0x7f00000001c0)) ioctl$TIOCSETA(r4, 0xc1084425, &(0x7f0000000040)={0x3, 0x0, 0xfffffffd, 0x4, "52c9795a6b476ed1000000000000000000000008", 0x2000000, 0x5}) setsockopt$inet_opts(r1, 0x0, 0x64, 0x0, 0x0) setsockopt(r1, 0x0, 0x67, 0x0, 0x0) sysctl$kern(&(0x7f00000000c0)={0x1, 0x33}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x3414, 0x0, 0xffffffffffffff5a) write(r0, &(0x7f00000000c0)="1d212086de114acb078e85946b181ab0ad111c3056ff91875046e5003f5e7ca7607e0cec1d70bfe797f361cc5c1ba0c132898db7da7aaf95670e82fdf1f95ce1b3da", 0x42) pipe(0x0) r6 = openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000000340), 0x1, 0x0) ioctl$KDENABIO(r6, 0x20004b3c) openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x100, 0x0) 1.571934103s ago: executing program 3 (id=309): r0 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$WSKBDIO_GETBACKLIGHT(r0, 0x400c5711, &(0x7f0000000040)) ioctl$WSKBDIO_GETENCODINGS(r0, 0xc0105715, &(0x7f0000000080)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r1 = semget$private(0x0, 0x3, 0x108) semctl$SETVAL(r1, 0x2, 0x8, &(0x7f00000000c0)=0xffffffc0) fcntl$setflags(r0, 0x2, 0x1) semctl$SETVAL(r1, 0x2, 0x8, &(0x7f0000000100)=0x20800) ioctl$WSKBDIO_COMPLEXBELL(r0, 0x80105702, &(0x7f0000000140)={0x62, 0x8000, 0xffff8001, 0x10000}) r2 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) ioctl$WSKBDIO_GETKEYREPEAT(r2, 0x400c5708, &(0x7f00000001c0)) ioctl$WSKBDIO_SETBACKLIGHT(r2, 0x800c5712, &(0x7f0000000200)={0x7, 0xa00a, 0x80}) ioctl$WSKBDIO_SETBELL(r2, 0x80105703, &(0x7f0000000240)={0x1000000, 0xa, 0x0, 0x5}) semctl$GETZCNT(r1, 0x3, 0x7, &(0x7f0000000280)=""/159) setrlimit(0x6, &(0x7f0000000340)={0x8, 0x3}) r3 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000380), 0x8, 0x0) ioctl$WSKBDIO_GETDEFAULTKEYREPEAT(r3, 0x400c570a, &(0x7f00000003c0)) r4 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000400), 0x20, 0x0) r5 = dup(r4) r6 = semget(0x0, 0x4, 0x4c) semctl$GETVAL(r1, 0x4, 0x5, &(0x7f0000000440)=""/22) semctl$IPC_RMID(r6, 0x0, 0x0) semctl$GETVAL(0x0, 0x3, 0x5, &(0x7f0000000480)=""/4096) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000001480), 0x0, 0x0) poll(&(0x7f00000014c0)=[{r3, 0x8}, {r4, 0x40}, {r4, 0x4}], 0x3, 0xffffffff) ioctl$TIOCSFLAGS(r7, 0x8004745c, &(0x7f0000001500)) close(r7) acct(&(0x7f0000001540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') ioctl$WSKBDIO_SETBACKLIGHT(r2, 0x800c5712, &(0x7f0000002580)={0x401, 0xfffffffa, 0x5}) preadv(r5, &(0x7f00000026c0)=[{&(0x7f00000025c0)=""/208, 0xd0}], 0x1, 0x9) ioctl$WSKBDIO_GETDEFAULTKEYREPEAT(r3, 0x400c570a, &(0x7f0000002700)) 1.571007529s ago: executing program 2 (id=310): mkdir(&(0x7f0000000200)='./file0\x00', 0x0) chmod(&(0x7f0000000180)='./file0\x00', 0x23f) chdir(&(0x7f0000000000)='./file0\x00') setreuid(0xee00, 0x0) r0 = getuid() setreuid(0x0, r0) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = geteuid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockopt$sock_cred(r4, 0xffff, 0x1022, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) lchown(&(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, r5) chown(&(0x7f00000000c0)='./file0\x00', r3, r5) bind$unix(r2, &(0x7f0000000200)=@file={0xd570d0466b6018f, './file0\x00'}, 0xa) r6 = socket$unix(0x1, 0x5, 0x0) dup2(r6, r2) sendmsg$unix(r1, &(0x7f0000000080)={&(0x7f0000000040)=@file={0x170, './file0\x00'}, 0xa, 0x0}, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) (async) chmod(&(0x7f0000000180)='./file0\x00', 0x23f) (async) chdir(&(0x7f0000000000)='./file0\x00') (async) setreuid(0xee00, 0x0) (async) getuid() (async) setreuid(0x0, r0) (async) socket$unix(0x1, 0x2, 0x0) (async) socket$unix(0x1, 0x5, 0x0) (async) geteuid() (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) (async) getsockopt$sock_cred(r4, 0xffff, 0x1022, &(0x7f00000000c0), &(0x7f0000000140)=0xc) (async) lchown(&(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, r5) (async) chown(&(0x7f00000000c0)='./file0\x00', r3, r5) (async) bind$unix(r2, &(0x7f0000000200)=@file={0xd570d0466b6018f, './file0\x00'}, 0xa) (async) socket$unix(0x1, 0x5, 0x0) (async) dup2(r6, r2) (async) sendmsg$unix(r1, &(0x7f0000000080)={&(0x7f0000000040)=@file={0x170, './file0\x00'}, 0xa, 0x0}, 0x0) (async) 534.756554ms ago: executing program 6 (id=311): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000580), 0x40, 0x0) r1 = socket(0x18, 0x3, 0x0) setsockopt(r1, 0x3a, 0x0, 0x0, 0x0) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000000)={'tap', 0x0}) (async) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000000)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x25, 0x0, 0x0, 0x8000001}, {0xb1, 0x10, 0x2, 0x4}, {0x16, 0xf2, 0x7f, 0x400b}]}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000080)={0x0, &(0x7f00000000c0)}) sysctl$kern(0x0, 0x0, &(0x7f0000000140)="71f91e3471ac0058bc5491501d94a34b8e5f84cf71b59c7afec370824638aeb61ea373b8", &(0x7f0000000080)=0x24, 0x0, 0x0) mprotect(&(0x7f00006f4000/0x2000)=nil, 0x2000, 0x2) (async) mprotect(&(0x7f00006f4000/0x2000)=nil, 0x2000, 0x2) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) (async) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0xe, &(0x7f0000000180)=ANY=[@ANYRESHEX=r2]) 439.705842ms ago: executing program 1 (id=312): r0 = msgget$private(0x0, 0x0) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x62}) r1 = syz_open_pts() close(r1) r2 = syz_open_pts() r3 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$VMM_IOC_RUN(r3, 0x8210560b, &(0x7f0000000000)={0x2, 0x0, 0x1, 0x7ff, 0x0, 0x400}) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000200)="8b8c7e5e4a7966dfcde82b0abb", 0xd}], 0x1) ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f0000000000)={0x400, 0x0, 0xffffdffc, 0xffffffbf, "ff000000000000000100"}) r4 = socket(0x2, 0x2, 0x0) select(0x40, &(0x7f0000000000)={0xfffffffffffffffd, 0x1, 0xfff, 0x8003, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0x0) connect$unix(r4, &(0x7f0000000040)=@abs={0x1, 0x0, 0x3}, 0x8) close(r1) ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f0000000080)={0x4, 0x0, 0xffffffff, 0x0, "0e5e68cdd75751147708cb211e0202c5bf74de60"}) syz_open_pts() r5 = getuid() r6 = getgid() chown(&(0x7f00000000c0)='./file0\x00', r5, r6) msgsnd(r0, &(0x7f0000002700)={0x2, "3950d7c5de99bf99177951cecafc964600e65adce990e1ec28fcdb"}, 0x23, 0x0) 439.258563ms ago: executing program 7 (id=313): mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x205b9a) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) sysctl$net_inet_tcp(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$unix(0xffffffffffffffff, &(0x7f0000000140)="22d1637cc610dd1b33e0888caa018de784b1a7aa7394bec254f41aa9a5d37d7a092d1df8405befefff0c8d841f8ce88686ad83a976512952b90c9a0a0f58bc16d43b3a96ccc87600a5727afd796a85629bb0b73f06ce210896f544f22d3ccaf4ca382bf9c82cd0723521a3398d3487b2aac8285579d7fc5833a6b550c9565c1344d86b93e9f4b593d060360353cb158d025e7e3b4700fca9dd233ddd1a7dd654d13a7bd99a2c57", 0xa7, 0x0, 0x0, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r1 = socket(0x2, 0x2, 0x0) ioctl$FIONREAD(r1, 0x80286987, &(0x7f00000001c0)) write(0xffffffffffffffff, &(0x7f0000000140)="7f23a3c23cce2575e1", 0x9) ioctl$FIONBIO(r0, 0x82907003, &(0x7f0000000140)=0x3) 438.892196ms ago: executing program 6 (id=314): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000080)={0x3, &(0x7f00000002c0)=[{0x1, 0x40, 0x4, 0xa0}, {0x40, 0x92, 0x9, 0x5}, {0x2006, 0x0, 0x0, 0xfffffffe}]}) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000340)={'tap', 0x0}) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x7ff, 0xe1, 0x0, 0x800}, {0x3, 0x0, 0x0, 0x4}]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f00000000c0), &(0x7f0000000000)=0xc) sysctl$kern(&(0x7f00000000c0)={0x1, 0x37}, 0x4, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x3, 0x0, 0x2e) openat$bpf(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0) (async) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000080)={0x3, &(0x7f00000002c0)=[{0x1, 0x40, 0x4, 0xa0}, {0x40, 0x92, 0x9, 0x5}, {0x2006, 0x0, 0x0, 0xfffffffe}]}) (async) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000340)={'tap', 0x0}) (async) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x7ff, 0xe1, 0x0, 0x800}, {0x3, 0x0, 0x0, 0x4}]}) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) (async) getsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f00000000c0), &(0x7f0000000000)=0xc) (async) sysctl$kern(&(0x7f00000000c0)={0x1, 0x37}, 0x4, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x3, 0x0, 0x2e) (async) 430.198944ms ago: executing program 2 (id=316): chmod(&(0x7f0000000000)='./file0\x00', 0x40) getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0xc) r3 = getegid() chown(&(0x7f0000000040)='./file1\x00', r1, r3) setreuid(r1, r1) r4 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x80, 0x68) fchownat(r4, &(0x7f0000000100)='./file0\x00', r1, r2, 0x0) rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00') r5 = openat$wskbd(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$WSKBDIO_SETDEFAULTKEYREPEAT(r5, 0x800c5709, &(0x7f0000000200)={0xe8, 0x7, 0x4}) r6 = shmget(0x3, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) shmctl$IPC_SET(r6, 0x1, &(0x7f0000000240)={{0xb4c6, 0xffffffffffffffff, r2, r1, r2, 0x140, 0x9}, 0xf3, 0x6b, r0, r0, 0x5, 0x3, 0x3}) ioctl$WSKBDIO_SETBACKLIGHT(r5, 0x800c5712, &(0x7f00000002c0)={0x2fa, 0x9, 0x1a}) r7 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000300), 0x200, 0x0) ioctl$WSDISPLAYIO_USEFONT(r7, 0x80585750, &(0x7f0000000340)={'./file1/file0\x00', 0xc, 0x9, 0x2008, 0x0, 0x6, 0x7, 0x334, 0x1, 0x0, 0x800, 0x7f}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f0000000400)=@file={0x1, './file0\x00'}, 0xa) fchownat(r4, &(0x7f0000000440)='./file0/file0\x00', r1, r3, 0x4) renameat(r4, &(0x7f0000000480)='./file0/file0\x00', r4, &(0x7f00000004c0)='./file0\x00') setuid(r1) shmctl$IPC_SET(r6, 0x1, &(0x7f0000000500)={{0x9, r1, r3, r1, r2, 0x51, 0x8}, 0x9, 0x80, r0, r0, 0x200, 0x6, 0x3}) shmctl$SHM_UNLOCK(r6, 0x4) msgget$private(0x0, 0x102) sysctl$net_inet_ip(&(0x7f0000000580)={0x4, 0x2, 0x0, 0x25}, 0x4, &(0x7f00000005c0)="4336d1bec0c06061432890d21f62", &(0x7f0000000600)=0xe, &(0x7f0000000640)="fce76d10427b67bedddb5852c1765bc62b6518eaf6bf93031c347bd2d37f0d9449a1120b709cdb208ae993a1ec878f17c14e833885b117daa7192a58599e2833757802", 0x43) chown(&(0x7f00000006c0)='./file1\x00', r1, r2) socket(0x20, 0x5, 0xeb) r10 = dup2(r7, r8) chflagsat(r10, &(0x7f0000000700)='./file1\x00', 0x1, 0x2) r11 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000740), 0x80, 0x0) fsync(r11) 429.93407ms ago: executing program 0 (id=317): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) setitimer(0x2, &(0x7f00000000c0)={{0xffffffff}, {0x277a, 0x3}}, &(0x7f0000000100)) r1 = socket(0x800000018, 0x2, 0x0) setreuid(0x0, 0xee01) setsockopt$sock_int(r1, 0xffff, 0x1000, 0x0, 0x0) sysctl$net_pipex(0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)="e01f1cdf", 0x4) getrusage(0x0, &(0x7f0000000240)) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) setsockopt(r1, 0xa4, 0x60c0000, &(0x7f0000000080)="50eb3808d97f106d7bd5bd094f4e1b728e20681321f6237d72e44216eaf74f1196ea667a0760fc8e80e0345cfe1cd147f660d197dd2e64f55a5dbb4e7c3448d13076dc05318ac1b78b7044dc41f50ee30de5149e7df4092e7b43912d933257a8a4d7b90aa8ee89055e", 0x69) getitimer(0x2, &(0x7f0000000000)) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000040)={0x3, &(0x7f0000000340)=[{0x7, 0x1, 0x1, 0xffffc}, {0x14, 0xdc, 0x9, 0x1}, {0x6, 0x5, 0x2, 0x7ff}]}) write(r0, &(0x7f0000000200)="d81ad3d20cf7eb4e9be33bbd1a30", 0xe) 387.433166ms ago: executing program 0 (id=318): r0 = socket(0x2, 0x1, 0x0) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000200), 0xa2, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000400)={'tap', 0x0}) (async) mknod(&(0x7f0000000040)='./file0\x00', 0x6000, 0xe01) (async) r2 = open$dir(&(0x7f0000000140)='.\x00', 0x0, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x0) (async) link(&(0x7f0000000940)='./file0\x00', &(0x7f0000000d40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') link(&(0x7f0000001240)='./file0\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async, rerun: 64) symlink(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000e40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (rerun: 64) rename(&(0x7f0000000600)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x10000000000001}}) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) r3 = socket(0x18, 0x2, 0x0) setsockopt(r3, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) (async) mkdirat(r2, &(0x7f0000000a80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1c0) (async) open$dir(&(0x7f0000000b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x0) r4 = open$dir(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1, 0x3f8) mkdirat(r4, &(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) symlinkat(&(0x7f0000000000)='./file0\x00', r4, &(0x7f0000000200)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0e99db6de761f86, 0x0) (async) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000040)={0x8, &(0x7f0000000180)=[{0x87, 0xfe, 0x0, 0xcf3}, {0x40, 0x3, 0x4, 0x1}, {0xe, 0x7d, 0x1, 0xadf2}, {0xfffe, 0x4, 0x6e, 0x9}, {0x8, 0x8, 0x4}, {0xd974, 0x2, 0x8, 0x54}, {0x1, 0x7, 0x7, 0x2}, {0xfc00, 0x6, 0x2, 0x4}]}) (async) syz_emit_ethernet(0x4e, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd6000000000182c000000000000000000000000000000000000000000000800001a003f00000005880090787f00"/78]) select(0x40, &(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000140)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb0800450000300000000000069078e0000001e00000014e204e23", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="700200009078e4c994f0f0b505835b00"]) ioctl$BIOCGDIRFILT(r1, 0x4004427c, &(0x7f0000000100)) close(r0) 387.029069ms ago: executing program 7 (id=319): r0 = syz_open_pts() ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f00000007c0)={0x0, 0x1, 0xffefbff6, 0x0, "4b06a6bcff0300dba800000000000800"}) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000300)="406f050635f0b67c483a24febaee7e5f3d48e6cb95bdcc0f11f73b2a3df9585000283c4dd3ed77706f3868cacea799a3bdfb42db706563dca286f58274eabcd17569969aa161b798e5b2c7489dfcc945d5ffe9054ffd5b7724b408516b9ed309d4751896dd052cc4977fb319", 0x6c}, {&(0x7f0000000600)="021a1373", 0x4}, {&(0x7f0000000040)='\x00\x00\x00\x00', 0x4}, {&(0x7f00000000c0)="6e658a79dc5aceee17ac87103fcfd8bbcc0495f6c572f2e07fd62a77f660f22ed8355da1d3c0ccff04458b740a5ab33ec240b2bf78ed72c3c8763f7838728f54a51a0c0a395b73363bc87d0edcaefc1f0fb78e615409", 0x56}], 0x4) r1 = socket(0x6, 0x1, 0x4) bind(r1, &(0x7f0000000140)=@un=@file={0x0, './file0\x00'}, 0xa) syz_open_pts() r2 = socket(0x11, 0x3, 0x0) sendto$unix(r2, &(0x7f0000000300)="b1000503000004000000000007000000331c13fecea10500fef96ec0c72fd3357ae30200004e3039d2d236acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad09000000000000009b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b1257aea8c500002002fbfe0c2300008abfba353e537e2ba37f50b60900000008e371a3f8343712051eeab71d1889e000", 0xb1, 0x0, 0x0, 0x0) ioctl$TIOCFLUSH(r0, 0x80047410, &(0x7f0000000080)) 386.472324ms ago: executing program 1 (id=320): ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r0 = openat$tty(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x8, 0x8, 0x1}]}) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket(0x2, 0x3, 0x0) bind(r1, &(0x7f0000000140)=@un=@file={0x0, './file0\x00'}, 0xa) ioctl$FIONREAD(r0, 0x4004667f, &(0x7f0000000040)) bind$unix(0xffffffffffffffff, &(0x7f00000006c0)=@file={0x0, './file0\x00'}, 0xa) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) acct(&(0x7f0000000100)='./file0\x00') socket$unix(0x1, 0x2, 0x0) recvmmsg(r2, &(0x7f00000000c0)={0x0, 0x4}, 0x10, 0x0, &(0x7f0000000500)={0xa00ffffc, 0xa}) r3 = socket(0x2, 0x1, 0xc6) r4 = socket$unix(0x1, 0x2, 0x0) bind$unix(r4, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0xa) ioctl$FIONREAD(r3, 0x8218694a, &(0x7f00000001c0)) 292.394132ms ago: executing program 6 (id=322): r0 = msgget$private(0x0, 0x0) setreuid(0xee00, 0x0) msgsnd(r0, &(0x7f0000000180)={0x2, "8588e0c9be6a22cd413220eee5c7b2e9574596793ce76f823f666e44b80b4262f4757164c5ba727967b46da0f118581cc53c6ef702a23d76bbe89ba41e7df3cf6929f2b437a39dc16bcdb783e209a08a2c1c03fce908ccfa081006eeef77"}, 0x66, 0x0) r1 = getuid() open(0x0, 0x0, 0x0) setreuid(0x0, r1) msgrcv(r0, 0x0, 0x0, 0x3, 0x1000) msgsnd(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="02"], 0xf4, 0x0) mknod(&(0x7f0000000000)='./bus\x00', 0x3a0914c44f7b202d, 0x504) r2 = open(&(0x7f0000000080)='./bus\x00', 0x10005, 0x146) ioctl$TIOCEXCL(r2, 0x2000740d) getuid() open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0x881) kqueue() msgctl$IPC_RMID(r0, 0x0) 290.354481ms ago: executing program 1 (id=323): mknod(&(0x7f0000000000)='./file0\x00', 0x1ffa, 0x0) r0 = socket(0x18, 0x1, 0x0) close(r0) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x2, 0x0) r2 = getpgrp() fcntl$setown(r0, 0x6, r2) r3 = getpid() select(0x40, &(0x7f0000000000)={0x78, 0x8, 0x0, 0x564, 0x0, 0x2, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$FIONREAD(r4, 0x80206979, &(0x7f0000000000)) r5 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000580), 0x40, 0x0) ioctl$BIOCSETIF(r5, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x25, 0x0, 0x0, 0x8000001}, {0xb1, 0x10, 0x2, 0x4}, {0x16, 0xf2, 0x7f, 0x400b}]}) pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000200)="6aab", 0x2}], 0x1, 0x4) sysctl$kern(0x0, 0x0, &(0x7f0000000140)="71f91e3471ac0058bc5491501d94a34b8e5f84cf71b59c7afec370824638aeb61ea373b8cf7f46ded8ccb0c042", &(0x7f0000000080)=0x2d, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETF(r5, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0xe, &(0x7f0000000100)={@remote, @empty, [], {@generic={0x807}}}) openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) pipe2(&(0x7f0000000300)={0xffffffffffffffff}, 0x0) ioctl$FIONBIO(r6, 0x8004667e, &(0x7f0000000700)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r7, &(0x7f0000000040)=@file={0xd19450564dee018c, './file0\x00'}, 0xa) unveil(&(0x7f0000000080)='.\x00', &(0x7f0000000000)='x\x00') open(&(0x7f0000000480)='./file0\x00', 0x1, 0x0) ioctl$TIOCSETAW(r6, 0x802c7415, &(0x7f00000000c0)={0x2, 0xffffffff, 0x0, 0x7, "f5de72dbc6a1a8977a0f6b6885b06302791eedc2", 0x7fffffff, 0x1}) syz_emit_ethernet(0x400e, &(0x7f0000000700)=ANY=[@ANYBLOB="aaaaaaaaaaaa7011f5b3752786dd60756899000c3aebfb0300000000000053000000000000bbfe7100000000001000000000000000aac8"]) fcntl$setown(r1, 0x6, r3) 287.569141ms ago: executing program 5 (id=325): setreuid(0x0, 0xee01) socket$inet(0x2, 0x2, 0x0) (async) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x200100000001d, &(0x7f0000000000), 0x4) socket(0x1, 0x4, 0xa) sysctl$net_inet_ip(&(0x7f0000000000)={0x4, 0x2, 0x0, 0x13}, 0x4, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) open$dir(&(0x7f0000000040)='./file0\x00', 0xae828e137847f62, 0x0) (async) open$dir(&(0x7f0000000040)='./file0\x00', 0xae828e137847f62, 0x0) utimes(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={{0x9, 0x6}, {0xfff, 0x2}}) link(&(0x7f0000000240)='./file0\x00', 0x0) (async) link(&(0x7f0000000240)='./file0\x00', 0x0) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) 218.063937ms ago: executing program 3 (id=326): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) mmap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x11, r0, 0x0) mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2) r1 = open$dir(&(0x7f0000000080)='./file1\x00', 0x360, 0x2c) fcntl$lock(r1, 0x9, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x101fffff9}) ioctl$FIONREAD(r0, 0x4004667f, &(0x7f0000000040)) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) execve(0x0, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) openat$bpf(0xffffffffffffff9c, 0x0, 0x462, 0x0) r3 = socket(0x0, 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x8}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r4 = socket(0x18, 0x1, 0x0) setsockopt(r4, 0x1000000029, 0xc, &(0x7f0000000040)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) sysctl$vfs_ffs(&(0x7f0000000000)={0x4}, 0x3, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_int(r3, 0xffff, 0x0, &(0x7f0000000000)=0x7, 0xffffffffffffffc1) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) sysctl$vfs_nfs(&(0x7f0000000000), 0x3, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000c50000/0x2000)=nil, 0x2000) mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) symlink(0x0, 0x0) mmap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x10, r2, 0x0) 194.074559ms ago: executing program 6 (id=327): r0 = open(&(0x7f0000000000)='./file0\x00', 0x9cab835cfdc52675, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x10, r0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000100)=[{0x0}], 0x1) msync(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000002700), 0x10, 0x0) r2 = openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000000000), 0x20, 0x0) ioctl$FIONBIO(r2, 0x8004667e, &(0x7f0000000040)=0x6) r3 = openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) poll(&(0x7f0000000580)=[{r2, 0x50}], 0x1, 0x80000001) fsync(r3) openat$pf(0xffffffffffffff9c, 0x0, 0x80, 0x0) kevent(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x843c, 0x0) ioctl$WSKBDIO_SETMODE(r3, 0x80045713, &(0x7f0000000980)=0x1) r4 = getppid() fcntl$setown(r1, 0x6, r4) fcntl$setown(r1, 0x6, 0x0) 187.480005ms ago: executing program 5 (id=328): syz_emit_ethernet(0xae, &(0x7f00000000c0)={@broadcast, @local, [{[{0x88a8, 0x5, 0x1, 0x2}], {0x8100, 0x5, 0x1, 0x3}}], {@generic={0x3c09, "c92d950fae8da92844f0fc1e379514338b6de7304e8274028558964369079f7dbdd4c42afd765516cec0b819afafde3c0d54a505a60df6c741c3c3c49a4e0652a53b2e98524a8dd4d18b844b6703f42b23225a8823cbea66180aca9269a644225976c92bce24ce61b6722bd12017ce5a30a0874cfad7369a6e8f0395e171e853182dffc89f089bd7f848b11e86b192a28a98e4314c67fa96"}}}) 186.640066ms ago: executing program 6 (id=329): r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000380), 0x80, 0x0) (async) writev(0xffffffffffffffff, &(0x7f00000009c0)=[{&(0x7f0000000440)="2e06b5a54fdc15d0e5ba5cd619e395d842161263a5bcf8d360b109113dd229c0dd47d6ff4f038bc8f40206bf8a1ef55ba04d8d4e4174e29e744d8606170795a2edaf3456112807f6d55fd9c3815257c10e07e8f0be3a7366f8123a42cb43f4302bf6b149e9b9bab6116b11b8ae693250f7fa8080cd8a2fc7c7e4ebf5c106c80fd386c7786c0421183de7b10dbde8040d96f51522423ca8e0f70989e1530cd2eaf7faaad41584384bf407ed7bed944e099fd18b59c86af22bb45fe92b05087191e530bc83a9e0975fc2a0", 0xca}], 0x1) ioctl$TIOCSETA(r0, 0xc450443e, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, "d66a90ebb178926c79486b47c1d100", 0x5}) (async) setreuid(0xee00, 0x0) (async) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r1 = getuid() (async) r2 = getuid() chown(&(0x7f0000000040)='./file0\x00', r2, 0xffffffffffffffff) (async) setreuid(0xee00, r1) (async) chmod(&(0x7f0000000080)='./file0\x00', 0x2ea) chdir(&(0x7f0000000100)='./file0\x00') (async) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0e99db6de761f86, 0x0) rename(&(0x7f00000007c0)='./file0\x00', &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 185.942173ms ago: executing program 1 (id=330): setregid(0xffffffffffffffff, 0xffffffffffffffff) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000580), 0x40, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) setgid(0xffffffffffffffff) setgroups(0x0, 0x0) setuid(0xffffffffffffffff) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x35, 0x0, 0x0, 0x1}, {0x48, 0x3, 0xfe, 0x10004}, {0x6, 0x0, 0x0, 0xfffffffe}]}) sysctl$kern(0x0, 0x4000000000000047, &(0x7f0000000340)="000003c7420000000000100080b5313df0dd037ead6c15269e60270b25436e96e1110d1cca0040f59a7afe5b0f50c55dd68ede01093a3150b6ce7657ece732f46ad934b9eabd7f03895427c303a6171b0f0a1ae2bce9b4e1aa5c64f142f43e1517e556e223670b96065d13ca29e24c54daf1f1e65b1c64f5b9d8b70fc58933613c270a7730dec69377783e63df5acf8d38c6dfd5b3473196ab92f036f3d6706b4a17c0e60517c0c79491a061fec1acef8a", &(0x7f0000000080)=0x64, 0x0, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) ioctl$BIOCSETWF(r1, 0x80104277, &(0x7f0000000040)={0x0, 0x0}) write(r1, &(0x7f00000000c0)="d871819e2673b7e5c70000000000", 0xe) sysctl$fs(&(0x7f0000000440)={0x3, 0x1}, 0x2, 0x0, 0x0, 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x25, 0x0, 0x0, 0x8000001}, {0xb1, 0x10, 0x2, 0x4}, {0x16, 0xf2, 0x7f, 0x400b}]}) pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000200)="6aab0d39fa0000", 0x7}], 0x1, 0x4) sysctl$kern(0x0, 0x2026a4268f5b6eb1, &(0x7f00000002c0)="71f91e3471ac0058bc5491506023fd81a2938cbfe7471d940500000000000000b7dee9526b5f843321e4d87afec370824638aeb61ea373b8cf7f467007ccb0c0428dad06004805602ce3", &(0x7f0000000140)=0xfffffffffffffdfa, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) lseek(r0, 0x3, 0x2) r2 = socket(0x11, 0x3, 0x0) socket(0x11, 0x3, 0x0) close(r2) socket(0x18, 0x1, 0x0) sysctl$net_inet_tcp(&(0x7f0000000080)={0x4, 0x2, 0x6, 0x9}, 0x4, &(0x7f00000000c0)="9b1809c3dd7d3f81670e53473f11e1a4e5f2f9f220ef7f0abdbc34fe42021588dc8ff44f4b76c76d41859d85ea800dabe467badf35b6fd74c94d1b44", &(0x7f0000000040)=0xfff9, 0x0, 0x0) syz_emit_ethernet(0xe, &(0x7f0000000180)=ANY=[@ANYBLOB="aa4171fa8f2cdba936aaaaaaaa4fe8ecf1fc13bb00"]) socket$inet(0x2, 0x2, 0x0) syz_emit_ethernet(0x22, &(0x7f0000000000)=ANY=[@ANYBLOB="135f9d81975caaaaaaaaaaaa0800454500140066000300029078ac1400aa7f000001e23e857c4602c5fc5a9ab5"]) 185.489272ms ago: executing program 2 (id=331): symlink(&(0x7f0000000040)='\x00', &(0x7f0000000080)='./file0\x00') r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000580), 0x40, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x25, 0x0, 0x0, 0x8000001}, {0xb1, 0x10, 0x2, 0x4}, {0x16, 0xf2, 0x7f, 0x400b}]}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000200)={0x2, &(0x7f0000000140)=[{0x3, 0x0, 0x7, 0x100}, {0x8, 0x1, 0x1e, 0x5}]}) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) r1 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r1, 0xc0106924, &(0x7f00000001c0)) r2 = socket(0x18, 0x3, 0x0) r3 = semget$private(0x0, 0x1, 0x9) semop(r3, &(0x7f0000000000)=[{0x6, 0xfff}, {0x4, 0x2, 0x1000}, {0x3, 0x4, 0x1000}, {0x3, 0x1000}], 0x4) ioctl$FIONREAD(r2, 0x8080691a, &(0x7f0000000100)) pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000200)="6aab0d39", 0x4}], 0x1, 0x4) msgrcv(0x0, 0x0, 0x0, 0x3, 0x0) sysctl$kern(0x0, 0x0, &(0x7f0000000140)="71f91e3471ac0058bc5491501d94a34b8e5f84cf", &(0x7f0000000080)=0x14, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0xe, &(0x7f0000000100)={@remote, @empty, [], {@generic={0x807}}}) rename(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='./file0/../file0\x00') 185.301239ms ago: executing program 5 (id=332): connect$unix(0xffffffffffffffff, &(0x7f0000000040)=@abs={0x1, 0x0, 0x1}, 0x8) r0 = socket(0x18, 0x3, 0x3a) syz_emit_ethernet(0x46, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffff0000000000000800450000380000000000019078ac1400bbe00000010c009078000000004500007d0000000000060000e00000017f0000012a1c7764972fd6514b97ab69c8d1df0baeb7c13a3039e533aab6dd1064641d90fb5092618e281b2ed1bb81e9087689c0c0d97cb66e58e59429474ae593b6a20a9bedd155b7e3b9522bb12134354f91c36dfba0563fc4be0dae42c8d1b4d290a1e339c0e7c0766f1592a497934055ad8692911572d3e35691fc5f1e61c4"]) setsockopt(r0, 0x29, 0x6c, &(0x7f0000000040), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0x67, &(0x7f0000000000)={0x9}, 0xc) 97.171016ms ago: executing program 6 (id=333): poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x5d02) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 96.453841ms ago: executing program 5 (id=334): unveil(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000300)='c\x00') mknod(&(0x7f0000000000)='.\x00', 0x1, 0x0) socketpair$unix(0x1, 0x786488497f4269a1, 0x0, &(0x7f0000000040)) r0 = openat$speaker(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000340)="54334ca8c8", 0x2}], 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) accept$unix(r1, &(0x7f0000000100)=@abs, &(0x7f0000000080)=0x8) 96.16226ms ago: executing program 1 (id=335): setreuid(0xee00, 0x0) r0 = getuid() setgroups(0x1, &(0x7f0000000080)=[0x0]) syz_open_pts() r1 = msgget$private(0x0, 0x140) getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0xc) r3 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x40) open(&(0x7f0000000280)='./file1\x00', 0x20200, 0x0) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000280)='#!', 0x10}, {&(0x7f0000000000)="8d6bb85551ec8430877ae32fe9bbe42cc8f2147a3eba8e1969f0435119cf4c071c8aee7ef2921be5d7d4796c5566c95989acb3d185587234186e96b8fde9ffac51de05a87b8b893e2abd154dd886eafbe03881d25b7b13b4c32227fc9e5a86a06f59f701322b3a109a13436e486b0a", 0x6f}], 0x2) execve(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) r4 = getgid() getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0}, &(0x7f00000000c0)=0xc) getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000100)={0x0}, 0xc) msgctl$IPC_SET(r1, 0x1, &(0x7f00000001c0)={{0x5, r0, r2, r0, r4, 0x0, 0x9}, 0x0, 0x6, r5, r6, 0x1ff, 0x88, 0x7ff, 0x2}) 76.466829ms ago: executing program 5 (id=336): mknod(0x0, 0x1ffa, 0x0) syz_emit_ethernet(0x126f, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]) sysctl$kern(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)="55f8f5782087a072a82ec35f78d14780f518", 0x12) r0 = socket(0x2, 0x400000000002, 0x0) setsockopt(r0, 0x0, 0x1d, 0x0, 0x0) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r2 = socket(0x18, 0x5, 0x2) ioctl$FIONREAD(r2, 0xc1206949, &(0x7f00000001c0)) shmctl$IPC_STAT(0x0, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000080)}], 0x1) syz_emit_ethernet(0x138, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r3 = dup(0xffffffffffffffff) fcntl$dupfd(r3, 0x2, 0xffffffffffffffff) setsockopt$sock_int(0xffffffffffffffff, 0xffff, 0x1023, &(0x7f0000000040), 0xe0) 75.697483ms ago: executing program 2 (id=337): mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x2008, 0x9) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) 71.970993ms ago: executing program 3 (id=338): r0 = openat$vnd(0xffffffffffffff9c, 0x0, 0x0, 0x0) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x62}) r1 = syz_open_pts() close(r1) mknod(&(0x7f0000000240)='./file0\x00', 0x2000, 0x4437) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r2 = syz_open_pts() ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f0000000040)={0xf7ffffff, 0x6f41, 0xfffffffe, 0xd2d, "8717f9050700000000000090d692480d51aa8000", 0x0, 0x2}) writev(r1, &(0x7f0000000480)=[{&(0x7f0000000100)="697500bb9c8700022be2559fbc51c6b8b7c54279a329080000008d00008d", 0x1e}], 0x1) kevent(0xffffffffffffffff, &(0x7f0000000080)=[{{r0}, 0xfffffffffffffffe, 0xa3, 0x2, 0x200000000000000}], 0x1, 0x0, 0x100be6, 0x0) semget(0x2, 0x3, 0x302) close(r0) rename(0x0, 0x0) r3 = openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x82, 0x0) ioctl$TIOCSETA(r3, 0xc0284459, &(0x7f0000000080)={0x62, 0x0, 0x0, 0x3, "75a2effffffff1a804000000238800", 0x2, 0xffffffff}) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd60db83440008110000000000000000000000000000004000ff020020000000000000007d5eea46014effff"]) mknod(&(0x7f0000000100)='./bus\x00', 0x2000, 0xd02) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x5900) flock(r0, 0x0) kqueue() r4 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$VNDIOCSET(r4, 0x81946466, &(0x7f0000000000)={0x0, 0xfffffffffffffff8, 0x0}) rename(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000080)='./file0\x00') setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x200000000000c, 0x0, 0x0) 5.618262ms ago: executing program 5 (id=339): writev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000000)="b886b4e47f", 0x5}], 0x1) (async) syz_emit_ethernet(0x138, 0x0) ioctl$WSKBDIO_GETMAP(0xffffffffffffffff, 0x80047476, 0x0) (async) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) r0 = socket(0x2, 0x2, 0x0) kqueue() (async) r1 = dup(r0) kevent(r1, &(0x7f0000000000), 0xf0e, 0x0, 0x7fffffff, 0x0) (async) ioctl$TIOCCHKVERAUTH(r1, 0x2000741e) (async) setsockopt$inet_opts(r0, 0x0, 0x1, &(0x7f0000000080)="0315f1d89ec5a317a9357682", 0xc) (async) connect$unix(r0, &(0x7f0000000000), 0x10) (async) sendto(r0, &(0x7f00000000c0)="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", 0x172, 0x40a, 0x0, 0x0) 1.181153ms ago: executing program 2 (id=340): mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc0e99db6de761f86, 0x0) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000580), 0x40, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) (async) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x25, 0x0, 0x0, 0x8000001}, {0xb1, 0x10, 0x2, 0x4}, {0x16, 0xf2, 0x7f, 0x400b}]}) pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000200)="6aab0d39", 0x4}], 0x1, 0x4) sysctl$kern(0x0, 0x0, &(0x7f0000000140)="71f91e3471ac0058bc5491501d94a34b8e5f84cf71b59c7afec370824638aeb61ea373b8cf7f46ded8ccb0c042", &(0x7f0000000080)=0x2d, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) (async) syz_emit_ethernet(0xe, &(0x7f0000000100)={@remote, @empty, [], {@generic={0x807}}}) open$dir(&(0x7f00000001c0)='./file0\x00', 0x2, 0x0) (async) r1 = socket(0x18, 0x2, 0x0) r2 = socket(0x18, 0x2, 0x0) r3 = dup2(r1, r2) setsockopt(r3, 0x1000000029, 0x23, 0x0, 0x0) (async) ioctl$TIOCSETA(r3, 0x802c7414, &(0x7f00000000c0)={0x0, 0x2, 0x5, 0x176, "ff28274b6b4373a8d40000e03f4b3000004000", 0x0, 0x5373}) r4 = open$dir(&(0x7f00000001c0)='./file0\x00', 0x1, 0x138) (async) r5 = socket(0x18, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x2, 0xffffffffffffffff) close(r6) (async) kqueue() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="89000000ffff000001"], 0x9, 0xc}, 0xa) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg(r7, &(0x7f0000000380)={0x0, 0x32c, 0x0, 0x0, &(0x7f0000000000), 0x90}, 0x0) (async) ioctl$FIONREAD(r4, 0xc0106978, &(0x7f00000000c0)) 946.428µs ago: executing program 7 (id=341): r0 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000100)="4e2effbb11", 0x5}], 0x1) mknod(&(0x7f0000000040)='./file0\x00', 0x6000, 0xe01) open(&(0x7f0000000100)='./file0\x00', 0x10000, 0x0) 0s ago: executing program 3 (id=342): mkdir(&(0x7f0000000100)='./file0\x00', 0x51) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x0) setgroups(0x0, 0x0) setgid(0xffffffffffffffff) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x100000000000000, 0xffffffffffffffff}) semop(0x0, &(0x7f00000000c0)=[{}, {0x0, 0x2ff}], 0x2) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x4000000000000003}}) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x10, 0x4, 0x2) close(r0) r1 = socket(0x18, 0x2, 0x0) setsockopt(r0, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) r2 = open(&(0x7f0000000040)='./file0\x00', 0x2, 0x0) ioctl$TIOCFLUSH(r2, 0x80047476, &(0x7f0000000000)) ioctl$WSKBDIO_GETMAP(r2, 0xc010570d, &(0x7f0000000200)={0x4, &(0x7f00000001c0)=[{0x7, 0xa, 0x27a8, 0x1, 0x7ff}, {0x401, 0x7, 0x100, 0xffe0, 0xa}, {0xfb4d, 0x6, 0x300, 0x8001, 0x9}, {0x6, 0x7, 0x7, 0x5, 0x6}]}) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x20, 0x0) r4 = dup(r3) ioctl$BIOCSRTIMEOUT(r4, 0x8010426d, &(0x7f0000000140)={0x0, 0xa}) ioctl$BIOCSBLEN(r3, 0xc0044266, &(0x7f0000000100)=0x7) ioctl$BIOCSETIF(r4, 0x8020426c, &(0x7f0000000000)={'tap', 0x0}) syz_extract_tcp_res(0x0, 0x61, 0x8) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@broadcast, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x29, 0x0, @empty, @rand_addr=0xac14ffff}, @tcp={{0x0, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}) readv(r4, &(0x7f0000000000)=[{&(0x7f0000000180)=""/15, 0xf}, {&(0x7f0000000040)=""/17, 0x11}], 0x2) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) write(r1, &(0x7f0000000100)="446aa77b5a5abbf568a5bc43e64b59bd1898dacccc58237561eb4d290d6eda2bd251d3f11ba63ba281a5eecfb7401c59d8062771b2b8189ecbba32d08cdaf18cea2b00ccc04c95e75c5533644f6af93bda35f162f2821ca90dbf3831421000000000000000ce3ea5eb72623a287f88ae36974ae474656ce44010d64632678e8a3c216de1fe3139e3830000009afd744a0b1ac8b1f8f03d6eb79b94cf3df39ac81320bfae5e1f", 0xa6) setuid(0xffffffffffffffff) unveil(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000140)='c\x00') kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.123' (ED25519) to the list of known hosts. pckbd_enable: command error OpenBSD/amd64 (Amnesiac) (tty00) login: WARNING: thread `nfsio' (38026) exits with status -1 WARNING: thread `nfsio' (484098) exits with status -1 WARNING: thread `nfsio' (151307) exits with status -1 WARNING: thread `nfsio' (137371) exits with status -1 WARNING: thread `nfsio' (46672) exits with status -1 WARNING: thread `nfsio' (521462) exits with status -1 WARNING: thread `nfsio' (506638) exits with status -1 WARNING: thread `nfsio' (387085) exits with status -1 WARNING: thread `nfsio' (217396) exits with status -1 WARNING: thread `nfsio' (10770) exits with status -1 WARNING: thread `nfsio' (402191) exits with status -1 WARNING: thread `nfsio' (261624) exits with status -1 WARNING: thread `nfsio' (372634) exits with status -1 WARNING: thread `nfsio' (184888) exits with status -1 WARNING: thread `nfsio' (506291) exits with status -1 WARNING: thread `nfsio' (509832) exits with status -1 WARNING: thread `nfsio' (45096) exits with status -1 WARNING: thread `nfsio' (495925) exits with status -1 WARNING: thread `nfsio' (363550) exits with status -1 First bad /: bad dir ino 1430 at offset 0: mangled entry panic: bad dir Stopped at db_enter+0x25: addq $0x8,%rsp TID PID UID PRFLAGS PFLAGS CPU COMMAND 11449 68386 0 0 0 1 syz-executor *243939 36479 0 0x2 0 0K syz-executor db_enter() at db_enter+0x25 panic(ffffffff8302e260) at panic+0x1e5 ufs_dirbadentry(ffff80002a0da198,ffff80002a0da198,890012e9618ca641) at ufs_dirbadentry VOP_LOOKUP(fffffd807054c890,ffff80002a0da368,ffff80002a0da398) at VOP_LOOKUP+0x6e vfs_lookup(ffff80002a0da338) at vfs_lookup+0x8fa namei(ffff80002a0da338) at namei+0x7aa dofstatat(ffff80002a0442a0,ffffff9c,7c48de558b40,7c48de558f40,2) at dofstatat+0xd2 syscall(ffff80002a0da5b0) at syscall+0xaf8 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7c48de558ff0, count: 6 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{0}> ddb{0}> set $lines = 0 ddb{0}> set $maxwidth = 0 ddb{0}> show panic *cpu0: bad dir ddb{0}> trace db_enter() at db_enter+0x25 panic(ffffffff8302e260) at panic+0x1e5 ufs_dirbadentry(ffff80002a0da198,ffff80002a0da198,890012e9618ca641) at ufs_dirbadentry VOP_LOOKUP(fffffd807054c890,ffff80002a0da368,ffff80002a0da398) at VOP_LOOKUP+0x6e vfs_lookup(ffff80002a0da338) at vfs_lookup+0x8fa namei(ffff80002a0da338) at namei+0x7aa dofstatat(ffff80002a0442a0,ffffff9c,7c48de558b40,7c48de558f40,2) at dofstatat+0xd2 syscall(ffff80002a0da5b0) at syscall+0xaf8 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7c48de558ff0, count: -9 ddb{0}> show registers rdi 0 rsi 0x1 rbp 0xffff80002a0d9fc0 rbx 0xffffffff83505dbf cpu_info_full_primary+0x2dbf rdx 0 rcx 0xffff80002a0442a0 rax 0xffffffff83504ff0 cpu_info_full_primary+0x1ff0 r8 0x101010101010101 r9 0x8080808080808080 r10 0xcdb4cdc28bed06 r11 0x595dc2e3a182a64b r12 0xffffffff83505bc0 cpu_info_full_primary+0x2bc0 r13 0 r14 0 r15 0x1 rip 0xffffffff823851f5 db_enter+0x25 cs 0x8 rflags 0x246 rsp 0xffff80002a0d9fb0 ss 0x10 db_enter+0x25: addq $0x8,%rsp ddb{0}> show proc PROC (syz-executor) tid=243939 pid=36479 tcnt=1 stat=onproc flags process=2 proc=0 runpri=17, usrpri=50, slppri=17, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff80002a044a38,0xffff80002a045468 process=0xffff800029fe9228 user=0xffff80002a0d5000, vmspace=0xfffffd8077049008 estcpu=36, cpticks=2, pctcpu=0.15, user=0, sys=27, intr=0 ddb{0}> ps PID TID PPID UID S FLAGS WAIT COMMAND 83286 74354 15654 0 2 0 syz-executor 83286 521679 15654 0 3 0x4000080 fsleep syz-executor 83286 317283 15654 0 3 0x4000080 fsleep syz-executor 68386 11449 22420 0 7 0 syz-executor 68386 17249 22420 0 2 0x4000000 syz-executor 68386 472543 22420 0 3 0x4000080 fsleep syz-executor 14831 32909 12989 0 2 0 syz-executor 14831 440781 12989 0 3 0x4000080 fsleep syz-executor 40507 316774 2848 0 3 0x80 nanoslp syz-executor 40507 155041 2848 0 3 0x4000080 fsleep syz-executor 40507 375301 2848 0 3 0x4000080 kqsel syz-executor 84849 158897 0 0 3 0x14280 nfsidl nfsio 34795 202494 0 0 3 0x14200 bored sosplice 79792 123932 1 0 3 0x100083 ttyin getty 12989 418485 90300 0 3 0x82 nanoslp syz-executor 15654 418825 90300 0 3 0x82 nanoslp syz-executor 53069 139800 90300 0 3 0x82 nanoslp syz-executor *36479 243939 90300 0 7 0x2 syz-executor 22420 307820 90300 0 3 0x82 nanoslp syz-executor 2848 232354 90300 0 3 0x82 nanoslp syz-executor 90300 197515 78491 0 3 0x82 wait syz-executor 78491 346589 14431 0 3 0x10008a sigsusp ksh 14431 235524 72778 0 3 0x98 kqread sshd-session 72778 437740 59457 0 3 0x92 kqread sshd-session 59457 298239 1 0 3 0x88 kqread sshd 23462 521591 37606 74 3 0x1100092 bpf pflogd 37606 412023 1 0 3 0x80 sbwait pflogd 4895 369782 80912 73 3 0x1100090 kqread syslogd 80912 393566 1 0 3 0x100082 sbwait syslogd 66296 409561 1 0 3 0x100080 kqread resolvd 72517 141163 63521 77 3 0x100092 kqread dhcpleased 43324 468949 63521 77 3 0x100092 kqread dhcpleased 63521 500481 1 0 3 0x80 kqread dhcpleased 21080 211328 0 0 3 0x14200 bored smr 85438 149988 0 0 2 0x14200 zerothread 7110 88415 0 0 3 0x14200 aiodoned aiodoned 797 160194 0 0 3 0x14200 syncer update 93374 223750 0 0 3 0x14200 cleaner cleaner 93706 385432 0 0 3 0x14200 reaper reaper 52267 324427 0 0 3 0x14200 pgdaemon pagedaemon 94862 453675 0 0 3 0x14200 bored viomb 94615 1414 0 0 3 0x40014200 acpi0 acpi0 30194 281663 0 0 3 0x40014200 idle1 80835 89637 0 0 3 0x14200 bored softnet3 61517 239045 0 0 3 0x14200 bored softnet2 85454 184133 0 0 3 0x14200 bored softnet1 18681 38912 0 0 3 0x14200 bored softnet0 70058 13056 0 0 3 0x14200 bored systqmp 44239 181372 0 0 3 0x14200 bored systq 38168 432747 0 0 3 0x14200 tmoslp softclockmp 46363 134847 0 0 3 0x40014200 tmoslp softclock 728 20147 0 0 3 0x40014200 idle0 1 453733 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb{0}> show all locks Process 36479 (syz-executor) thread 0xffff80002a0442a0 (243939) exclusive rrwlock inode r = 0 (0xfffffd806dfe40a0) #0 witness_lock+0x5bb #1 rw_enter+0x41b #2 rrw_enter+0xbe #3 VOP_LOCK+0xa6 #4 vn_lock+0xa4 #5 vget+0x2bd #6 cache_lookup+0x36e #7 ufs_lookup+0x218 #8 VOP_LOOKUP+0x6e #9 vfs_lookup+0x8fa #10 namei+0x7aa #11 dofstatat+0xd2 #12 syscall+0xaf8 #13 Xsyscall+0x128 exclusive kernel_lock &kernel_lock r = 0 (0xffffffff8358f6c8) #0 witness_lock+0x5bb #1 syscall+0xad6 #2 Xsyscall+0x128 ddb{0}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 10206 11334K 11521K 166960K 11737 0 pcb 17 12K 12K 166960K 77 0 rtable 233 6K 7K 166960K 414 0 pf 37 18K 19K 166960K 59 0 ifaddr 45 8K 8K 166960K 56 0 ifgroup 58 2K 2K 166960K 76 0 sysctl 2 0K 0K 166960K 2 0 counters 64 36K 36K 166960K 72 0 ioctlops 0 0K 4K 166960K 1514 0 iov 0 0K 12K 166960K 16 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1373 86K 87K 166960K 1635 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 9K 166960K 9 0 VM map 2 1K 1K 166960K 2 0 sem 12 0K 0K 166960K 19 0 dirhash 15 2K 2K 166960K 21 0 ACPI 1690 195K 286K 166960K 12468 0 file desc 15 53K 93K 166960K 470 0 sigio 0 0K 0K 166960K 14 0 proc 72 91K 128K 166960K 568 0 subproc 104 6K 6K 166960K 104 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 41 0 in_multi 99 7K 7K 166960K 123 0 ether_multi 1 0K 0K 166960K 2 0 mrt 1 0K 0K 166960K 1 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 85 387K 387K 166960K 85 0 exec 0 0K 1K 166960K 392 0 fusefs mount 1 32K 32K 166960K 1 0 pfkey data 0 0K 0K 166960K 1 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 222 72K 87K 166960K 6057 0 UVM aobj 17 2K 2K 166960K 19 0 pinsyscall 40 80K 102K 166960K 1560 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 2 0K 0K 166960K 30 0 NDP 12 0K 1K 166960K 33 0 temp 53 6821K 6887K 166960K 14110 0 kqueue 14 22K 30K 166960K 90 0 SYN cache 2 16K 16K 166960K 2 0 ddb{0}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 24 0 0 1 0 1 1 0 8 0 rtpcb 120 60 0 57 1 0 1 1 0 8 0 rtentry 112 128 0 20 4 0 4 4 0 8 0 unpcb 144 364 0 347 2 0 2 2 0 8 1 syncache 336 6 0 6 1 0 1 1 0 8 1 tcpqe 32 2 0 2 1 0 1 1 0 8 1 tcpcb 808 174 0 168 8 0 8 8 0 8 7 arp 120 22 0 3 1 0 1 1 0 8 0 inpcb 336 473 0 463 7 0 7 7 0 8 5 nd6 136 25 0 0 1 0 1 1 0 8 0 pkpcb 40 1 0 1 1 0 1 1 0 8 1 kcovpl 48 8 0 0 1 0 1 1 0 8 0 pfstscr 40 1 0 0 1 0 1 1 0 8 0 pffrag 232 4 0 0 1 0 1 1 0 482 0 pffrnode 88 4 0 0 1 0 1 1 0 8 0 pffrent 40 7 0 3 1 0 1 1 0 8 0 pfosfp 40 1428 0 1005 5 0 5 5 0 8 0 pfosfpen 112 1428 0 714 21 0 21 21 0 8 0 pfstitem 24 40 0 1 1 0 1 1 0 8 0 pfstkey 128 40 0 1 2 0 2 2 0 8 0 pfstate 376 39 0 1 4 0 4 4 0 8 0 pfrule 1344 22 0 16 2 0 2 2 0 8 0 art_heap8 4096 2 0 0 2 0 2 2 0 8 0 art_heap4 256 498 0 53 29 0 29 29 0 8 0 art_table 32 500 0 53 4 0 4 4 0 8 0 art_node 16 126 0 35 1 0 1 1 0 8 0 sysvmsgpl 40 9 0 5 1 0 1 1 0 8 0 semupl 112 3 0 3 1 0 1 1 0 8 1 semapl 112 16 0 6 1 0 1 1 0 8 0 shmpl 112 16 0 2 1 0 1 1 0 8 0 dirhash 1024 23 0 4 3 0 3 3 0 8 0 dino2pl 256 2174 0 674 95 0 95 95 0 8 0 ffsino 272 2174 0 674 101 0 101 101 0 8 0 nchpl 144 2831 0 1146 63 0 63 63 0 8 0 uvmvnodes 80 2433 0 0 50 0 50 50 0 8 0 vnodes 216 2433 0 0 136 0 136 136 0 8 0 namei 1024 9318 0 9317 2 1 1 2 0 8 0 percpumem 16 50 0 4 1 0 1 1 0 8 0 kstatmem 264 32 0 8 2 0 2 2 0 8 0 scsiplug 72 1 0 1 1 0 1 1 0 8 1 scxspl 216 8450 0 8450 9 2 7 8 1 8 7 plimitpl 152 72 0 55 1 0 1 1 0 8 0 sigapl 424 794 0 745 8 0 8 8 0 8 1 futexpl 64 5234 0 5229 1 0 1 1 0 8 0 knotepl 120 560 0 0 17 0 17 17 0 8 0 kqueuepl 216 132 0 121 1 0 1 1 0 8 0 pipepl 320 138 0 111 3 0 3 3 0 8 0 fdescpl 496 755 0 726 5 0 5 5 0 8 0 filepl 152 3723 0 3479 14 0 14 14 0 8 3 lockfpl 104 112 0 109 1 0 1 1 0 8 0 lockfspl 48 50 0 47 1 0 1 1 0 8 0 sessionpl 144 26 0 17 1 0 1 1 0 8 0 pgrppl 48 37 0 20 1 0 1 1 0 8 0 ucredpl 104 399 0 385 1 0 1 1 0 8 0 zombiepl 144 748 0 745 1 0 1 1 0 8 0 processpl 1160 794 0 745 6 0 6 6 0 8 0 procpl 648 1370 0 1314 8 0 8 8 0 8 1 sosppl 168 4 0 3 1 0 1 1 0 8 0 sockpl 664 907 0 877 9 0 9 9 0 8 5 mcl64k 65536 4 0 0 1 0 1 1 0 8 0 mcl16k 16384 3 0 0 1 0 1 1 0 8 0 mcl12k 12288 1 0 0 1 0 1 1 0 8 0 mcl8k 8192 4 0 0 1 0 1 1 0 8 0 mcl4k 4096 156 0 0 20 0 20 20 0 8 0 mcl2k 2048 20 0 0 3 0 3 3 0 8 0 mtagpl 96 6 0 0 1 0 1 1 0 8 0 mbufpl 256 253 0 0 16 0 16 16 0 8 0 bufpl 280 2891 0 98 200 0 200 200 0 8 0 anonpl 24 163089 0 159801 45 1 44 44 0 185 13 amapchunkpl 152 19433 0 18983 29 0 29 29 0 158 5 amappl16 200 3942 0 3919 16 5 11 14 0 8 8 amappl15 192 10 0 10 1 1 0 1 0 8 0 amappl14 184 130 0 118 1 0 1 1 0 8 0 amappl13 176 10 0 9 1 0 1 1 0 8 0 amappl12 168 1418 0 1389 3 1 2 2 0 8 0 amappl11 160 55 0 41 1 0 1 1 0 8 0 amappl10 152 14 0 14 1 1 0 1 0 8 0 amappl9 144 164 0 164 1 1 0 1 0 8 0 amappl8 136 15 0 13 1 0 1 1 0 8 0 amappl7 128 109 0 96 1 0 1 1 0 8 0 amappl6 120 179 0 178 1 0 1 1 0 8 0 amappl5 112 134 0 123 1 0 1 1 0 8 0 amappl4 104 317 0 297 1 0 1 1 0 8 0 amappl3 96 3581 0 3492 3 0 3 3 0 8 0 amappl2 88 1064 0 981 3 0 3 3 0 8 0 amappl1 80 9358 0 8797 15 0 15 15 0 8 1 amappl 88 5644 0 5484 5 0 5 5 0 92 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 254 0 254 2 2 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 18 0 2 1 0 1 1 0 8 0 uaddrrnd 24 756 0 727 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 756 0 727 1 0 1 1 0 8 0 vmmpekpl 168 7779 0 7739 3 0 3 3 0 8 0 vmmpepl 168 54441 0 52680 93 0 93 93 0 357 6 vmsppl 448 755 0 727 6 2 4 5 0 8 0 rwobjpl 56 21094 0 17726 49 1 48 48 0 8 0 pdppl 4096 1519 0 1454 107 34 73 85 0 8 8 pvpl 32 11995 0 0 98 1 97 97 0 265 0 pmappl 248 755 0 727 3 0 3 3 0 8 0 extentpl 40 55 0 38 1 0 1 1 0 8 0 phpool 112 406 0 39 11 0 11 11 0 8 0 ddb{0}> machine ddbcpu 0 Invalid cpu 0 ddb{0}> trace db_enter() at db_enter+0x25 panic(ffffffff8302e260) at panic+0x1e5 ufs_dirbadentry(ffff80002a0da198,ffff80002a0da198,890012e9618ca641) at ufs_dirbadentry VOP_LOOKUP(fffffd807054c890,ffff80002a0da368,ffff80002a0da398) at VOP_LOOKUP+0x6e vfs_lookup(ffff80002a0da338) at vfs_lookup+0x8fa namei(ffff80002a0da338) at namei+0x7aa dofstatat(ffff80002a0442a0,ffffff9c,7c48de558b40,7c48de558f40,2) at dofstatat+0xd2 syscall(ffff80002a0da5b0) at syscall+0xaf8 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7c48de558ff0, count: -9 ddb{0}> machine ddbcpu 1 Stopped at x86_ipi_db+0x27: addq $0x8,%rsp x86_ipi_db(ffff800029b7bff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 end of kernel end trace frame: 0x70be19570170, count: 12 ddb{1}> trace x86_ipi_db(ffff800029b7bff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 end of kernel end trace frame: 0x70be19570170, count: -3