last executing test programs: 5.149077028s ago: executing program 2 (id=584): socket(0x11, 0x3, 0xa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000140)=@file={0x4, 0x1, './file0\x00'}, 0xa) select(0x40, &(0x7f0000000140)={0x3, 0x4dbb, 0x1, 0x8, 0x7, 0x5, 0x84, 0x8000000000000001}, 0x0, &(0x7f00000001c0)={0x8, 0x5, 0x0, 0x6, 0x8000000000000000, 0xc0d1, 0x6, 0x7}, 0x0) connect$unix(r0, &(0x7f0000000140)=@file={0x7, 0x1, './file0\x00'}, 0xa) sendto$unix(r1, &(0x7f0000000100)="b10005016000009f05003f0407000000001813fecea10516d09a32693f316e357ae302b37b673031d2d236acf20b8f25be38164991f7c8cf5f882b297be1aa5b23edeb51e2f0ac3ebbc257699a1f139b672f4d335c223e7d026ba8af6300372821020000000000008bfbb770c116a985c881ea772ec5890400000000ff0000361b1257aea8c5000020022138f2d900008a09000000000008e38295f80004073da51a221f00000080042000000000000000", 0xb1, 0xe, 0x0, 0x0) 4.756703066s ago: executing program 1 (id=621): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x54, 0x80, 0x6, 0x4a}, {0x28, 0x1, 0x64, 0x9}, {0x16, 0xa0, 0x5, 0x8}]}) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000040)={0x28, 0x0}) write(r0, &(0x7f00000003c0)="f81ad30100060000000100000000", 0xe) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) setreuid(0xee00, 0x0) r3 = getuid() setreuid(0xee00, r3) r4 = syz_open_pts() setsid() ioctl$TIOCSCTTY(r4, 0x20007461) r5 = openat$tty(0xffffffffffffff9c, &(0x7f0000000000), 0x20, 0x0) ioctl$TIOCSETVERAUTH(r5, 0x8004741c, &(0x7f0000001300)=0x40094f2) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) unveil(&(0x7f0000000280)='.\x00', &(0x7f00000002c0)='x\x00') symlink(&(0x7f0000000900)='.\x00', &(0x7f0000000240)='./file0\x00') unveil(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='c\x00') setsockopt(r1, 0x7, 0x4, &(0x7f0000000300)="b21ace8940be654defb834c66012d3686c79b0f55bc328429222d787ddc7e59c5f20e79bf1b321b0a48176a80522c8503b5e213c8f7142d6e7d3601f877ace2abbab8f82a76eb94614a81ac6501a2ae0faaf597d04f7e44817aacf2978fe8ce7238d615f6371ffb9a61efba7601acb9a84a2c3d68d7c4c0be77d5a6d2ebf7275653054fe667c59f2e40d52a728b36d1472691b48b7500d3d88b29f3c8d7a9f7577489392a013a68a8e9b35a82bb6cda038", 0xb1) mkdir(&(0x7f0000000480)='./file0\x00', 0xd5) execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) close(r2) select(0x40, &(0x7f0000000c40)={0x0, 0x1e, 0x3, 0x3, 0x5, 0x5ef3c4ef, 0x0, 0x6}, 0x0, &(0x7f0000000cc0)={0xffff, 0x3, 0x0, 0x7, 0x8, 0x8031, 0x7, 0x4}, 0x0) 4.649069618s ago: executing program 4 (id=625): r0 = kqueue() open(&(0x7f00000000c0)='./file0\x00', 0x80000000000206, 0xb7) r1 = socket(0x2, 0x8002, 0x0) r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) closefrom(r2) open$dir(&(0x7f00000002c0)='./file0\x00', 0x2, 0x10) r3 = socket(0x18, 0x1, 0x0) close(r3) kevent(r0, &(0x7f00000000c0), 0x138, &(0x7f0000000100)=[{{}, 0xfffffffffffffff9, 0x1d, 0x0, 0x8100000000000000}], 0xffffffff, 0x0) 4.563887409s ago: executing program 4 (id=627): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x200000000000c, &(0x7f0000000000)="ea00000100000000", 0x8) setsockopt$inet_opts(r0, 0x0, 0x200000000000c, &(0x7f0000000040), 0x0) setsockopt$inet_opts(r0, 0x0, 0x1, &(0x7f0000000040)="0bc4af526154eee316c044aeab1bc623e8348b08a4706af23cf5d694a3ab2c82ed0bf7e8e43cf3a6b0d53a54d06d8299357b4c33b84a15d3727f2c7600bb934303644c89bb2febcc773f84744616b9db4f7db4938749ca648931a1c7941d907afd5c2fc0510ef3cb8e9556998fd2cf6a61370ca4141496c853a129877beb32185356882082533dbfc905cd170292adf6f18383135e7de2", 0x97) openat(0xffffffffffffffff, &(0x7f0000000e80)='./file0\x00', 0x20, 0x80) socket$inet(0x2, 0x1, 0x0) (async) setsockopt$inet_opts(r0, 0x0, 0x200000000000c, &(0x7f0000000000)="ea00000100000000", 0x8) (async) setsockopt$inet_opts(r0, 0x0, 0x200000000000c, &(0x7f0000000040), 0x0) (async) setsockopt$inet_opts(r0, 0x0, 0x1, &(0x7f0000000040)="0bc4af526154eee316c044aeab1bc623e8348b08a4706af23cf5d694a3ab2c82ed0bf7e8e43cf3a6b0d53a54d06d8299357b4c33b84a15d3727f2c7600bb934303644c89bb2febcc773f84744616b9db4f7db4938749ca648931a1c7941d907afd5c2fc0510ef3cb8e9556998fd2cf6a61370ca4141496c853a129877beb32185356882082533dbfc905cd170292adf6f18383135e7de2", 0x97) (async) openat(0xffffffffffffffff, &(0x7f0000000e80)='./file0\x00', 0x20, 0x80) (async) 4.380620398s ago: executing program 4 (id=634): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x80, 0x0) (async) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0xbe, 0x0) (async) sysctl$net_mpls(&(0x7f0000000180)={0x4, 0x21, 0x5}, 0x3, &(0x7f0000000280)="0d316d14f460942ec3e968c1976631c41f43d09cde57ad5b2c5fe82a1d33c25eaa2859ff33bce85359f3d6f410b9f9a6e5b4b4582ec86bba3745c2240d0c78fc90e8e14acff5c626fe2e43afeb5e7d23f7e50c19e1f92ec93eadbfbcb68be2804b97314f98106dc367c13868ae90b210f0615696fea28d491739f9f6147257c9059d760e2cdc2402d108c16913138a6031105dc80d9766678ef9a40e12d5", &(0x7f00000001c0)=0x9e, &(0x7f0000000340)="cc34aa21fd79d5104ebc111badfc868d9bf2bb31fd711ca348cda7504be4001d66037ff6ec78bd339ca988af97a19487c0", 0x31) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) (async, rerun: 64) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x84, 0x11, 0x3, 0x48}, {0x40, 0xf0, 0xff}, {0x6, 0x80, 0x12, 0xfffff802}]}) (async, rerun: 64) sysctl$kern(0x0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$DIOCSETREASS(0xffffffffffffffff, 0xc004445c, &(0x7f0000000000)=0x3) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) ioctl$BIOCSETWF(r1, 0x80104277, &(0x7f0000000040)={0x28, 0x0}) (async) write(r1, &(0x7f00000003c0)="f81ad30100060000000100002bdf", 0xe) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x4) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000240)={'tap', 0x0}) (async) r3 = open(&(0x7f0000000100)='./file0\x00', 0x8, 0x8e) (async) r4 = openat$pf(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$BIOCLOCK(r2, 0x20004276) (async) syz_emit_ethernet(0x72, &(0x7f0000000100)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x64, 0x0, 0x0, 0xf, 0x6, 0x0, @multicast2, @local={0xac, 0x14, 0x0}}, @tcp={{0x0, 0x3, 0x41424344, 0x41424344, 0x1, 0x0, 0x14, 0x1, 0xfffe, 0x0, 0x87a2, {[@md5sig={0x13, 0x12, "a2c3e174f8abd6ebfc4e28dcaacdc8b8"}, @generic={0x0, 0xf, "5870f3bd5e82ae4751bd09f8c5"}, @window={0x3, 0x3, 0x4}, @window={0x3, 0x3, 0x9}, @generic={0x1, 0x2}, @md5sig={0x13, 0x12, "3e6f6722ae8ba2546a56030b134fbaae"}]}}}}}}}) (async, rerun: 32) ioctl$TIOCSETA(r4, 0xc4504444, &(0x7f0000000740)={0x2f, 0xc, 0x3, 0xfffffffe, "0400091000000000000048000000448621c82f00", 0x100, 0x2}) (async, rerun: 32) rename(&(0x7f0000004d40)='.\x00', &(0x7f0000004d80)='./file0\x00') (async) futimens(r4, 0x0) (async, rerun: 32) fcntl$setown(r3, 0x6, 0x0) (rerun: 32) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f00000000c0)={0x3, &(0x7f0000000040)=[{0x9, 0xf, 0x5, 0x1}, {0x9, 0x14, 0xd, 0x80}, {0xfff9, 0x2, 0x3a, 0xfffffffe}]}) syz_emit_ethernet(0x1000e, &(0x7f00000001c0)=ANY=[]) 4.379610105s ago: executing program 4 (id=636): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (async) ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, &(0x7f00000000c0)={0xa, 0x8000148, {[0x3, 0x40, 0x6, 0x6, 0x3, 0x8000, 0x6, 0x40000000000, 0x7, 0x2, 0x9, 0x91c, 0x8, 0x2000180, 0x0, 0xd3, 0x76, 0xffffffffffffbff7], [0x5438b950, 0x5, 0x1004, 0x7, 0x1, 0x1, 0x9, 0x2, 0xffffffffffffffff, 0x3], [0x6, 0x0, 0x8, 0x8000000008, 0x10000, 0x210, 0x1000002], [0x100000000, 0x10801, 0x0, 0x5, 0x3], [{0x0, 0x7, 0xfffffbfb, 0x5}, {0x2, 0x925, 0x3, 0x338}, {0x1000, 0x7fffffff, 0x0, 0x5}, {0xb, 0xfffffbff, 0x2, 0x1}, {0x4, 0x3, 0x2, 0x8}, {0x1f, 0x4, 0x0, 0x7}, {0xe4, 0xffffff81, 0x1ff, 0x1}, {0x3, 0x10000, 0x8001, 0x5}], {0x52b, 0x4, 0x401, 0x8}, {0xfffb, 0xffffbfc0, 0x8}}}) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) (async) r0 = socket(0x2, 0x1, 0x0) (async) syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) (async, rerun: 64) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1) (async, rerun: 64) setsockopt$sock_int(0xffffffffffffffff, 0xffff, 0x1004, &(0x7f0000000100)=0x9, 0x4) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) r1 = socket(0x2, 0x1, 0x0) connect$unix(r1, &(0x7f0000000000), 0x10) (async, rerun: 64) setsockopt$sock_int(r1, 0xffff, 0x1001, &(0x7f0000000100)=0x7, 0x4) (async, rerun: 64) setsockopt$inet_opts(r1, 0x0, 0x1, &(0x7f0000000040)="27913c11b3c9e91fbdf59c32417020e3a81e536e", 0x14) sendto$unix(r1, &(0x7f00000005c0)="ed780018ed22f9c1ecda81fde8fd37daf5c242c3b81e915dd9f8c2abc545628763a04f72f237a5dc0dbc67ec2ef383fc1b8934e841084ff5cdb5a119e231df1f5308f727a9dc854c808917fa89a9144d7e3710d8b9355d4473d9a008b103575e331eca428328a1d85a94f6102f9a839a2e6cfb3fc0ab20365802ccc9c09b9ea360b0830eaae53bd12a4076cee83bf73b87e094675a2179bb11129a48e8f683849412cfaf47990400ab1dc44c58ba36a81be0245ab4b1b250950b76", 0xbb, 0x404, 0x0, 0x0) (async) ioctl$FIONREAD(r0, 0x8040691a, &(0x7f00000001c0)) r2 = socket(0x11, 0x3, 0x0) (async) pledge(&(0x7f0000000080)='\x00', &(0x7f0000000100)='%\x00') (async, rerun: 64) r3 = getuid() (rerun: 64) setresuid(0x0, 0x0, r3) setuid(0x0) syz_emit_ethernet(0x15, &(0x7f0000000140)={@local, @local, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast, @multicast2, @empty, @broadcast}}}}) (async) recvmmsg(r2, &(0x7f0000000440)={{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)=""/206, 0xce}], 0x1, 0x0}, 0x9}, 0x38, 0x2042, 0x0) 4.282105165s ago: executing program 2 (id=652): getrusage(0x5f8a20f5b4f2087b, 0x0) syz_emit_ethernet(0xe, &(0x7f00000000c0)={@local, @remote, [], {@generic={0x8847}}}) getrusage(0x5f8a20f5b4f2087b, 0x0) (async) syz_emit_ethernet(0xe, &(0x7f00000000c0)={@local, @remote, [], {@generic={0x8847}}}) (async) 4.280655144s ago: executing program 2 (id=654): syz_emit_ethernet(0xe, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) (async) r0 = socket(0x18, 0x3, 0x0) (async) setitimer(0x1, 0x0, 0x0) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x8, 0x0) ioctl$BIOCSRTIMEOUT(r1, 0x8010426d, &(0x7f0000000240)={0x1, 0x8c13}) r2 = open(0x0, 0x80, 0xc8) ioctl$BIOCSETIF(r2, 0x8020426c, 0x0) (async) ioctl$DIOCSETHOSTID(0xffffffffffffffff, 0xc0044456, 0x0) (async) ioctl$FIONREAD(r0, 0x8080691a, 0x0) syz_emit_ethernet(0x42, &(0x7f00000000c0)={@random="a50a3a311724", @random="b00000001000", [{[{0x88a8, 0x1, 0x1}], {0x8100, 0x3, 0x1}}], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x3d, 0x2c, 0xfffd, 0x0, 0x4, 0x1, 0x0, @empty, @multicast1, {[@timestamp={0x44, 0x4, 0x2, 0x1}]}}, @icmp=@timestamp={0xd, 0x0, 0x0, 0x7f, 0x4, 0x3, 0x3e0800, 0x7}}}}}) 4.214136179s ago: executing program 2 (id=656): r0 = socket(0x18, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x6, r0) r2 = syz_open_pts() readv(r2, &(0x7f00000012c0)=[{&(0x7f0000001200)=""/1, 0x1}], 0x1) ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f00000000c0)={0x80, 0x4, 0xfbfffffe, 0xfffffffe, "dd6c1f460000ff20004092d6126e4ed671e500", 0x800}) syz_open_pts() ioctl$TIOCSETAF(r2, 0x802c7416, &(0x7f0000000380)={0x4, 0xffffffb0, 0x3, 0x7f, "b7336626918f00000000000000000107001000", 0x181, 0x3}) clock_getres(0x4, 0x0) readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYRES64=r1], 0x28, 0x3}, 0x8) recvmsg(r3, &(0x7f0000000580)={0x0, 0xfffffffffffffff8, 0x0, 0x0, &(0x7f0000000540)=""/50, 0x33}, 0x52b4dee2dfcce420) fcntl$lock(0xffffffffffffffff, 0x9, &(0x7f0000000040)={0x1, 0x1, 0x7, 0x6}) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x11}, 0x4000000000000007, 0x0, 0x0, 0x0, 0x0) symlinkat(&(0x7f0000000000)='./file0\x00', r4, &(0x7f0000000040)='./file0\x00') faccessat(r1, &(0x7f0000000140)='./file0\x00', 0x104, 0x2) ioctl$FIONREAD(r3, 0x4004667f, &(0x7f0000000080)) 4.075171164s ago: executing program 7 (id=665): mkdir(&(0x7f0000000080)='./file0\x00', 0x5) r0 = open(&(0x7f0000000200)='./file0\x00', 0x200, 0x11) fcntl$lock(r0, 0x8, &(0x7f0000000080)={0x0, 0x0, 0x400000c1, 0x100000001}) fcntl$lock(r0, 0x9, &(0x7f0000000040)={0x0, 0x1, 0xd5, 0x269010000, 0xffffffffffffffff}) sendsyslog(0x0, 0xfffffffffffffc59, 0x0) 4.072733738s ago: executing program 7 (id=668): kqueue() (async) ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x2000, 0x0, {[0xffffffffffffff81, 0x400000000, 0x3, 0x1002, 0x8001, 0x0, 0x6, 0x7, 0x2, 0x2f00, 0x10000, 0x3, 0xfffffffffffbffff, 0x400000002000000, 0x0, 0xffffffffffffffa8, 0x82, 0xce5], [0xfffffffffffffffe, 0x80000001, 0xfffffffffffffffd, 0xdd3, 0xffff, 0x7b96, 0x6, 0x0, 0xfffffffffffffffe], [0x5ada, 0x6, 0x40000000, 0xfffffffffffffffa, 0xffffffffffffffff, 0x4, 0xfffffffffffffffa], [0x100, 0x2, 0xfffffffffffffffc, 0x8000000100000000, 0xfffffffffffffffc, 0x3], [{0x200, 0x4, 0x0, 0x7d06}, {0xfffc, 0x6, 0x5, 0x11}, {0x0, 0x0, 0xfffffffe, 0x82}, {0x3, 0xc33, 0x3, 0xffffffffffffffff}, {0x0, 0x2, 0x0, 0xffffffffffffffff}, {0x0, 0x2006, 0x40000, 0x2000000000000000}, {0x6b7, 0x0, 0x400001, 0x200}, {0xb, 0x4, 0x0, 0x6}], {0x2, 0x6, 0x8, 0xfffffffffffffffd}, {0x21, 0x6, 0xfffffffd, 0x2}}}) (async) r0 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r0, 0xc0106978, &(0x7f00000001c0)) r1 = openat$pf(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0) mknod(&(0x7f0000000140)='./file0\x00', 0x2000, 0x162226d0) (async) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) (async) ioctl$TIOCSETA(r1, 0xcd604406, &(0x7f0000000040)={0x7fff, 0x7c, 0xfffbfff0, 0xffc00000, "d6a24900b178926c79486b46c1d100", 0x4, 0x5}) (async) ioctl$TIOCSETA(r1, 0xcd604406, &(0x7f0000000040)={0x7fff, 0x0, 0xfffbfff0, 0x0, "d6a24900b178926c79486b47c1dd00", 0x4, 0x5}) pselect(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x863c}) ioctl$TIOCSETA(r1, 0xcd604407, 0x0) (async, rerun: 32) select(0x40, &(0x7f0000000000)={0x1, 0x1, 0x7fffffff, 0x200, 0x100000000, 0x6, 0x4, 0x8001}, &(0x7f0000000080)={0xfff, 0x100, 0x100000000000, 0x8000000000000000, 0x400, 0x1003, 0xd3, 0x100000001}, 0x0, 0x0) (rerun: 32) 3.902833244s ago: executing program 1 (id=680): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x401, 0x0, 0x0, 0x0, 0x0, 0x27, 0x7}, 0xb, 0xfffffffffffffff9, 0x0, 0x0, 0x2, 0x400000000009, 0x100000003, 0x4702}) r1 = socket(0x2, 0x1001, 0x0) connect$unix(r1, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) sysctl$kern(&(0x7f00000000c0)={0x1, 0x33}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x3414, 0x0, 0x37) r2 = fcntl$getown(r0, 0x5) getpgid(r2) r3 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) fstat(r3, 0x0) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, 0x0) sysctl$kern(0x0, 0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) unveil(0x0, 0x0) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0x9, [{&(0x7f00004a3000/0x3000)=nil, &(0x7f00001cc000/0x4000)=nil, 0x200007fffffffffe}, {&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000628000/0x3000)=nil, 0xffffffff7fffffff}, {&(0x7f00000a3000/0x1000)=nil, &(0x7f00001fc000/0x4000)=nil, 0x9}, {&(0x7f00000e7000/0x3000)=nil, &(0x7f00000eb000/0x4000)=nil, 0xfdfffffffffff7fd}, {&(0x7f00000f4000/0x3000)=nil, &(0x7f0000180000/0x4000)=nil, 0x8}, {&(0x7f0000701000/0x3000)=nil, &(0x7f0000673000/0x2000)=nil, 0xffffffffffffffff}, {&(0x7f0000123000/0x3000)=nil, &(0x7f0000369000/0x3000)=nil, 0x101}, {&(0x7f00003ba000/0x4000)=nil, &(0x7f000063b000/0x2000)=nil, 0xa8}, {&(0x7f000015d000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0xffffdffffffffff9}, {&(0x7f0000483000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x1}, {&(0x7f000064b000/0x2000)=nil, &(0x7f00000eb000/0x3000)=nil, 0x2}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000688000/0x4000)=nil, 0x6}, {&(0x7f00003ca000/0x1000)=nil, &(0x7f0000508000/0x2000)=nil, 0xe}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0xfffffffffffffff9}, {&(0x7f0000148000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x1000039fc}, {&(0x7f0000ffd000/0x2000)=nil, &(0x7f000019f000/0x2000)=nil, 0x2}], './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', 0xfffffffa, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$TIOCSETA(r3, 0xc1084425, &(0x7f0000000040)={0x3, 0x0, 0xfffffffe, 0x5, "210d000000020000000000000000004021800600", 0x2000000, 0x5}) setrlimit(0x8, &(0x7f0000000980)={0xb, 0x5c}) r4 = syz_open_pts() ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x0, 0xb3f, {[0xfffffbfffffffffb, 0x9, 0x2, 0x100000000, 0x6, 0x0, 0xdf60, 0xfffffffffffffffe, 0x0, 0x2f01, 0xfffffffffffffffc, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x2, 0x100], [0xfffffffffffffffe, 0x80000001, 0xfffffffffffffffd, 0x20000001, 0x1, 0x7b9b, 0x1fe], [0x100000001, 0x2, 0x40000000, 0xfffffffffffffffd, 0xb, 0x11000, 0xffffffff00000004], [0x100, 0x7fffffff, 0x7ffffffffffffffc, 0x100000000, 0xfffffffffffffffe, 0x4], [{0x0, 0x4, 0x0, 0x7d06}, {0xfffc, 0x20000002, 0x5}, {0x4, 0x0, 0xfffffffe, 0xd0000000000}, {0x3, 0x5, 0x6, 0xb5}, {0x0, 0x2, 0x0, 0x8}, {0x0, 0x2003, 0x9, 0x2000000000000000}, {}, {0x0, 0x100, 0x0, 0x8}], {0x0, 0x5, 0x5}, {0xfffd, 0x80000000, 0x6d5, 0x2}}}) execve(0x0, &(0x7f00000002c0)=[&(0x7f0000000100)='tap'], 0x0) r5 = socket(0x18, 0x3, 0x0) ioctl$FIONREAD(r5, 0xc028698a, &(0x7f0000000100)) close(r4) syz_open_pts() writev(r4, &(0x7f0000000080)=[{&(0x7f00000009c0)="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", 0x5a2}], 0x1) ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x40, 0x100, {[0xfffffbfffffffffb, 0x0, 0x5, 0x100000000, 0x6, 0x0, 0xdf5c, 0x3, 0x0, 0x2f04, 0xc, 0x2, 0xffffffffffffffff, 0x401, 0x0, 0x4, 0x3, 0x2], [0x5304, 0x80000001, 0x1, 0x20000001, 0xd089, 0x7b98, 0x2, 0x8000000000000000, 0x0, 0x9467], [0x2, 0x2, 0x40000000, 0x0, 0x9, 0x11000, 0x9f], [0x100, 0xffdc, 0x7ffffffffffffffc, 0x100000000, 0xe3, 0x7], [{0x8, 0x4, 0x0, 0x7d06}, {0xfffc, 0xffffffff, 0x5, 0xfffffffffffffffc}, {0x7fff, 0x0, 0xfffffffe, 0x80}, {0x3, 0x4, 0x6, 0xffffffffffffffff}, {0x0, 0x2, 0x9, 0xfffffffffffffffb}, {0x0, 0x28291c58, 0x9, 0x7ff}, {0x0, 0x0, 0xffffff83}, {0xfffc, 0x100, 0x2, 0x8}], {0x24, 0x5, 0x800}, {0xfffe, 0x31, 0x6d5, 0x4}}}) 3.901101448s ago: executing program 6 (id=681): semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x8982, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x159, 0x200}, 0x0, 0x0, 0xfffffffffffffffb}) sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b1000503000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102", 0x62, 0x0, 0x0, 0x0) sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b10005136000009f0500000020", 0xd, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = socket(0x11, 0x3, 0x0) sendto$unix(r0, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a421020000df710fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x0, 0x0, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r1, 0x0, 0x200000000000b, &(0x7f0000003780)="01", 0x1) sysctl$net_inet_tcp(0x0, 0x0, &(0x7f00000000c0)="9b18", 0x0, 0x0, 0x0) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x10000100000001}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket(0x18, 0x1, 0x0) close(r2) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x5900) symlink(&(0x7f0000000900)='.\x00', &(0x7f0000000240)='./file0\x00') open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) open$dir(&(0x7f0000000040)='./file0\x00', 0x1, 0x80) socket(0x18, 0x3, 0x3a) setsockopt(r2, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) connect$unix(r2, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) sendto$inet(r2, &(0x7f0000000200)="98554ced9dd845e251", 0x9, 0x4, 0x0, 0x0) 3.84744412s ago: executing program 6 (id=683): sendmsg$unix(0xffffffffffffffff, &(0x7f0000002a40)={&(0x7f0000000000), 0x10, 0x0}, 0x0) kevent(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x80000000, 0x3}) r0 = socket(0x2, 0x2, 0x0) r1 = socket$inet(0x2, 0x3, 0x0) setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) dup2(r0, r1) setsockopt$inet_opts(r1, 0x0, 0x9, &(0x7f0000000240)="ea00000100000000", 0xc) sendmsg$unix(r0, &(0x7f0000002a40)={0x0, 0xffffffffffffff89, 0x0, 0x6e}, 0x0) sendmsg$unix(r0, &(0x7f0000002a40)={0x0, 0x0, 0x0}, 0x0) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000400001803c1, 0x0) ftruncate(r2, 0x80002) sysctl$kern(&(0x7f0000000040)={0x1, 0x38}, 0x2, &(0x7f0000000080), &(0x7f0000000100), &(0x7f0000000180)="476d84327e2b50b5ee678a9bcac9fe7302447ad7be10d479a8a9f6f81df11069d038791fa43797b81316991b905f534b642bc570d13ae183d47f54c531ea69501d1c46981b1c3e6b4f712d960467915a0137fce7355ea12e4b7799e2d0c4d5e37f373eaa893d5ba1088dba09f6be5e6784effaca856b97e5ad750782e5703b36d9365e7fd2cfdd0aae505017e8412cc1946d636bbdf222af1c3749653c1c6a66602c6c6571fc740899", 0xa9) truncate(&(0x7f0000000140)='./file0\x00', 0x30000) sendmsg$unix(0xffffffffffffffff, &(0x7f0000002a40)={&(0x7f0000000000), 0x10, 0x0}, 0x0) (async) kevent(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x80000000, 0x3}) (async) socket(0x2, 0x2, 0x0) (async) socket$inet(0x2, 0x3, 0x0) (async) setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) (async) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) dup2(r0, r1) (async) setsockopt$inet_opts(r1, 0x0, 0x9, &(0x7f0000000240)="ea00000100000000", 0xc) (async) sendmsg$unix(r0, &(0x7f0000002a40)={0x0, 0xffffffffffffff89, 0x0, 0x6e}, 0x0) (async) sendmsg$unix(r0, &(0x7f0000002a40)={0x0, 0x0, 0x0}, 0x0) (async) open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000400001803c1, 0x0) (async) ftruncate(r2, 0x80002) (async) sysctl$kern(&(0x7f0000000040)={0x1, 0x38}, 0x2, &(0x7f0000000080), &(0x7f0000000100), &(0x7f0000000180)="476d84327e2b50b5ee678a9bcac9fe7302447ad7be10d479a8a9f6f81df11069d038791fa43797b81316991b905f534b642bc570d13ae183d47f54c531ea69501d1c46981b1c3e6b4f712d960467915a0137fce7355ea12e4b7799e2d0c4d5e37f373eaa893d5ba1088dba09f6be5e6784effaca856b97e5ad750782e5703b36d9365e7fd2cfdd0aae505017e8412cc1946d636bbdf222af1c3749653c1c6a66602c6c6571fc740899", 0xa9) (async) truncate(&(0x7f0000000140)='./file0\x00', 0x30000) (async) 3.846460271s ago: executing program 1 (id=685): sysctl$kern(0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)="4f1d4c6344b80ed788b6a4515248df3aa745bb992c574ab4cdf5587145812eab4a988f7fafd7a01d99776d988908cd186b51f34f8c15ffa0c685ad4116c783959eff4278384b4000384dbb1c2aaeff10b4135529a1da6fda67c67469d954be811b25ec5521559154c586eefff122009f659cd3e27e98a3241495005f102d9101d158284c0ee3250aa7c11042330de22a29", 0x91) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = shmget$private(0x0, 0x4000, 0x66d, &(0x7f0000180000/0x4000)=nil) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000100)={{0xfffffffd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x190, 0x3fd}, 0x7, 0x9, 0x0, 0x0, 0x5, 0xa, 0x9}) shmat(r0, &(0x7f0000499000/0x4000)=nil, 0x3000) setuid(0xee01) shmat(r0, &(0x7f000000a000/0x3000)=nil, 0x1000) 3.819732393s ago: executing program 1 (id=687): r0 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x100) setreuid(0xee00, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) openat$vmm(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) (async) r1 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0xb010, r1, 0x0) ftruncate(0xffffffffffffffff, 0x40000008531) sendmsg$unix(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f00000009c0), 0x1, 0x0, 0xfffffddb, 0x2}, 0x9) (async) sendmsg$unix(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f00000009c0), 0x1, 0x0, 0xfffffddb, 0x2}, 0x9) sysctl$kern(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setrlimit(0x8, &(0x7f0000000000)={0xe, 0x51}) (async) setrlimit(0x8, &(0x7f0000000000)={0xe, 0x51}) syz_open_pts() (async) r2 = syz_open_pts() close(r2) (async) close(r2) syz_open_pts() (async) syz_open_pts() ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f0000000380)={0x5a3, 0x7, 0x1ce2, 0x7ffffffd, "c2a6d203afffffff00", 0x6, 0xa}) writev(r2, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) (async) writev(r2, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) write(r2, &(0x7f0000000740)="590bd50666e24daa5275d333e860b7a4f4fbe93f22a311377010f6fc1e02e382091b3ac623e373", 0x27) r3 = msgget$private(0x0, 0x403) msgsnd(r3, &(0x7f0000003e40)=ANY=[@ANYBLOB="0200000000000000f0ca80211461b6611a3dbc678968315d487d633f6128d507324359da94784479630516acc0de72bf32f3ffe886eb021ac17328c57ddc64946667fc9721e0fbe15b1fc111f5622bd32340cb1aeefd1efc204d52f5951270b867a73144c4c7977a18e610293da50f05fd742ce24cbd5f1bde43739843e7a3f66092a7204353a9926b4f8aa24c3b038aa56733201f98a88c7add02796c4fef8da2500819dcf5aecb3ed99a6ddc0e31c2136a492fc69650be002ebb389dd4160b71c7d5898180b05651cf6f1d12923fda9af559e697e61bfe7413d2e1c34688a726"], 0xe1, 0x800) (async) msgsnd(r3, &(0x7f0000003e40)=ANY=[@ANYBLOB="0200000000000000f0ca80211461b6611a3dbc678968315d487d633f6128d507324359da94784479630516acc0de72bf32f3ffe886eb021ac17328c57ddc64946667fc9721e0fbe15b1fc111f5622bd32340cb1aeefd1efc204d52f5951270b867a73144c4c7977a18e610293da50f05fd742ce24cbd5f1bde43739843e7a3f66092a7204353a9926b4f8aa24c3b038aa56733201f98a88c7add02796c4fef8da2500819dcf5aecb3ed99a6ddc0e31c2136a492fc69650be002ebb389dd4160b71c7d5898180b05651cf6f1d12923fda9af559e697e61bfe7413d2e1c34688a726"], 0xe1, 0x800) msgrcv(r3, &(0x7f0000000100)={0x0, ""/219}, 0xe3, 0x0, 0x1000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) setitimer(0x1, &(0x7f0000000200)={{0x80000000004, 0x10000}, {0x800}}, 0x0) sysctl$net_inet_tcp(0x0, 0x0, &(0x7f00000000c0)="9b180bc3eb987ab7fe", 0x0, 0x0, 0x0) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x40, 0xd, {0x0, 0x10000100000001}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r4 = socket(0x18, 0x1, 0x0) close(r4) r5 = socket(0x18, 0x3, 0x3a) setsockopt(r5, 0x1000000029, 0x5, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) connect$unix(r4, &(0x7f0000000240)=@file={0x6a, 0x1, './file0\x00'}, 0xfffffffffffffec7) write(r5, &(0x7f0000000100)="2b8300f9dd137810a6586b03b0966316eb738bf340f601c33a4d01908e244dc22325e8cb17910cb103f7bd55be9affdc3f0e14a7f2843f9d3300d75bfb3c5fb37fcef43b907e2b8c76e842e2184c2c8af7e15d6d5a7d62aedec2d38de65b635a854fb9468f4f696ec4fa18554bbdad11eea9414c3dad42f754b96e397b7b472a423384bcb9fcba0ee32391a148e24512a62d184a2412ee575e65f755ab24749d55970e0c6b6b515ea8339c63a2d7715b6ad12e6dfd2fc8515b450e3c2cf332b7bc2ea280d0c86b634927a5260f33e3e5294d275fb5194ec122e77d9763e230ecb82849c763598d1a52a2", 0xea) (async) write(r5, &(0x7f0000000100)="2b8300f9dd137810a6586b03b0966316eb738bf340f601c33a4d01908e244dc22325e8cb17910cb103f7bd55be9affdc3f0e14a7f2843f9d3300d75bfb3c5fb37fcef43b907e2b8c76e842e2184c2c8af7e15d6d5a7d62aedec2d38de65b635a854fb9468f4f696ec4fa18554bbdad11eea9414c3dad42f754b96e397b7b472a423384bcb9fcba0ee32391a148e24512a62d184a2412ee575e65f755ab24749d55970e0c6b6b515ea8339c63a2d7715b6ad12e6dfd2fc8515b450e3c2cf332b7bc2ea280d0c86b634927a5260f33e3e5294d275fb5194ec122e77d9763e230ecb82849c763598d1a52a2", 0xea) getitimer(0x0, &(0x7f0000000080)) 3.817429051s ago: executing program 6 (id=689): mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r0 = open(&(0x7f0000000080)='./file0\x00', 0x8000, 0xa) ioctl$WSMOUSEIO_SCALIBCOORDS(r0, 0x81205724, &(0x7f0000000100)={0x7ff, 0x9, 0x2000007, 0xfe, 0x1002, 0x8, 0x40000005, 0x10, [{0x0, 0xb, 0x4, 0x71000}, {0x7, 0xc8, 0x7, 0x7}, {0x8, 0x6, 0x0, 0x9}, {0x9, 0x8000900, 0x6}, {0x401, 0x8, 0x2800, 0x7}, {0x2, 0x27f3, 0x3, 0x99}, {0xce1, 0x4, 0x4f8, 0x6d}, {0x9, 0x4, 0xc, 0xb}, {0x2, 0x10000082, 0x4, 0x9}, {0x7, 0x100, 0x0, 0x1088}, {0x1e7, 0x10001, 0xc, 0x6}, {0x800, 0x9, 0x18000000, 0x9}, {0xb8c, 0x4, 0x8, 0x2}, {0x29a7171a, 0xc, 0x8000, 0x4}, {0xc, 0x7, 0xc0000010, 0xfffffffe}, {0x0, 0x1, 0x1002, 0x30004}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r1 = socket(0x2, 0x1, 0x0) ioctl$FIONREAD(r1, 0x802069b0, &(0x7f00000001c0)) r2 = open(&(0x7f0000000380)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf79e5) writev(r2, &(0x7f0000000100)=[{&(0x7f0000001200)='#', 0x1}, {&(0x7f0000000080)="21b6", 0x2}], 0x2) write(r2, &(0x7f0000000040)="0915ef00a2e29be2e7949ce009ce9d0a", 0x10) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) preadv(r3, &(0x7f0000000080)=[{&(0x7f0000000480)=""/235, 0xeb}, {&(0x7f0000000180)=""/179, 0xef}], 0x2, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 3.816773157s ago: executing program 3 (id=690): r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x200, 0x186) (async) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x65}) (async) r1 = syz_open_pts() close(r1) (async) syz_open_pts() (async, rerun: 64) ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000340)={0x81, 0x5, 0xffffdf82, 0xffffff8f, "08ed956fd8f97fbdc8f7baec342ae600", 0x3ff, 0x4}) (rerun: 64) writev(r1, &(0x7f0000000440)=[{&(0x7f00000000c0)="2920ae8401bb742a400ea50f73d6192b81323a0cebe042f9bc99d2870c3711784bd40900", 0x24}], 0x1) (async) open(&(0x7f0000000140)='./file0\x00', 0x78e, 0xca) (async, rerun: 32) r2 = getpid() (rerun: 32) setgroups(0x0, 0x0) ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x510, r2) (async) setuid(0xffffffffffffffff) (async) setrlimit(0x1, &(0x7f0000000240)={0xad, 0x1fd}) (async) utimes(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)={{0xfffffffffffffff9, 0x80}, {0x3ff, 0x2}}) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x2015, r0, 0x0) (async) r3 = semget$private(0x0, 0x0, 0x18) semctl$GETZCNT(r3, 0x4, 0x7, &(0x7f0000000000)=""/189) 3.734006263s ago: executing program 5 (id=692): r0 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000140), 0x782, 0x0) writev(r0, 0x0, 0x0) execve(0x0, 0x0, 0x0) 3.733510638s ago: executing program 3 (id=693): setuid(0xffffffffffffffff) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffff9c, 0xc1045763, &(0x7f0000000040)={0x1, [{0x2, 0xfffffeff}, {0x2}, {0x3, 0x7fff}, {0x1, 0xd}, {}, {0x0, 0x9}, {0x2, 0x1}, {}, {0x0, 0x1}, {0x2, 0x1}, {0x1, 0x10000000}, {0x0, 0x6}, {0x3, 0x2}, {0x3}, {0x0, 0x20}, {0x0, 0x5}, {0x0, 0x1}, {0x4, 0x4}, {0x1, 0x1}, {}, {}, {}, {0x0, 0xfffffc00}, {0x0, 0x9}, {0x0, 0x3}, {0x3, 0x800}, {0x3}, {0x1}, {0x2, 0xfffffffd}, {0x1}, {0x2, 0x8001}, {0x1, 0x200060}]}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x37}, 0x4, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000140)=0x2c, 0x0, 0x2e) (async) sysctl$kern(&(0x7f00000000c0)={0x1, 0x37}, 0x4, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000140)=0x2c, 0x0, 0x2e) ioctl$BIOCSETIF(0xffffffffffffff9c, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) (async) ioctl$BIOCSETIF(0xffffffffffffff9c, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) socket(0x1, 0x2, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[]) 3.73088782s ago: executing program 0 (id=694): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x8, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000200)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0xa4, 0x12, 0x79, 0xac5}, {0x50, 0x0, 0xff}, {0x6, 0x80, 0xe, 0xfffff7fe}]}) getresuid(0xfffffffffffffffe, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCIMMEDIATE(r0, 0x80044270, 0x0) munmap(&(0x7f0000015000/0x3000)=nil, 0x3000) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x22, &(0x7f0000000440)=ANY=[]) 3.730056745s ago: executing program 5 (id=695): open$dir(&(0x7f0000000700)='./file0\x00', 0xae828e137847fa0, 0x2) setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) truncate(&(0x7f00000000c0)='./file0\x00', 0x6000000000) setrlimit(0x7, &(0x7f0000000040)={0x3, 0x5}) truncate(&(0x7f00000000c0)='./file0\x00', 0x30000) sysctl$net_inet_tcp(&(0x7f00000000c0)={0x4, 0x1e, 0x2}, 0x4, 0x0, 0x0, 0x0, 0x0) sysctl$kern(&(0x7f00000000c0)={0x1, 0x33}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x79, 0x0, 0x37) unlink(&(0x7f0000001040)='./file0\x00') open$dir(&(0x7f0000000700)='./file0\x00', 0xae828e137847fa0, 0x2) (async) setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) (async) truncate(&(0x7f00000000c0)='./file0\x00', 0x6000000000) (async) setrlimit(0x7, &(0x7f0000000040)={0x3, 0x5}) (async) truncate(&(0x7f00000000c0)='./file0\x00', 0x30000) (async) sysctl$net_inet_tcp(&(0x7f00000000c0)={0x4, 0x1e, 0x2}, 0x4, 0x0, 0x0, 0x0, 0x0) (async) sysctl$kern(&(0x7f00000000c0)={0x1, 0x33}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x79, 0x0, 0x37) (async) unlink(&(0x7f0000001040)='./file0\x00') (async) 3.695544986s ago: executing program 3 (id=696): mknod(&(0x7f0000000080)='./file0\x00', 0x2000, 0x5203) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x1ae) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x20000, 0x100) chflagsat(r0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x8000, 0xa) ioctl$VNDIOCSET(r1, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCGET(r1, 0xc4104603, &(0x7f0000000180)={'./file0\x00', 0x8, 0x6, 0x5}) 3.694229422s ago: executing program 0 (id=697): mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0xd02) open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mknod(&(0x7f0000000100)='./bus\x00', 0x2000, 0xd02) r0 = open(&(0x7f0000000240)='./bus\x00', 0x2, 0x111) syz_emit_ethernet(0x5a, &(0x7f0000000000)={@local, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x2000, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0x0}, @broadcast}, @udp={{0x1, 0x2, 0x8}, {"b76bf11d5d4ff88eab4e7d94dcf5288151f250627b0e1fb09303834ed31912d28c8b0c85e066cffa0341de445bbf0423"}}}}}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$VNDIOCSET(r0, 0xc0285108, &(0x7f0000000040)={0x0, 0xffffffffffffffba, 0x0, 0xffffffffffffff99}) getuid() setgid(0xffffffffffffffff) setgroups(0x0, 0x0) setuid(0xee01) faccessat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2, 0x0) 3.693527355s ago: executing program 3 (id=698): openat$tty(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) (async) r0 = openat$tty(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$TIOCSDTR(r0, 0x20007479) ioctl$TIOCNOTTY(r0, 0x20007471) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x40000, 0x0) ioctl$AUDIO_GETPOS(r1, 0x40104123, &(0x7f0000000080)) (async) ioctl$AUDIO_GETPOS(r1, 0x40104123, &(0x7f0000000080)) r2 = dup2(r1, r0) ioctl$TIOCSTAT(r0, 0x20007465) bind$inet6(r1, &(0x7f00000000c0)={0x1c, 0x18, 0x0, 0x7fff, "5babc1b1d98813fa67c8787ef5c4dab7", 0x1}, 0x1c) ioctl$TIOCSETVERAUTH(r1, 0x8004741c, &(0x7f0000000100)=0x2) fchmod(r2, 0x65) (async) fchmod(r2, 0x65) ioctl$TIOCSETVERAUTH(r0, 0x8004741c, &(0x7f0000000140)=0x2) openat$tty(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) r3 = openat$tty(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSBRK(r3, 0x2000747b) (async) ioctl$TIOCSBRK(r3, 0x2000747b) ioctl$TIOCDRAIN(r1, 0x2000745e) (async) ioctl$TIOCDRAIN(r1, 0x2000745e) r4 = openat$tty(0xffffffffffffff9c, &(0x7f00000001c0), 0x8000, 0x0) ioctl$TIOCSDTR(r4, 0x20007479) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200), 0x8, 0x0) write$audio(r5, &(0x7f0000000240)="ce9e76feddd5338883abf2eb811e206a1d8f936c7007b783865fce8cb7f61302ddd3a0cb756f78e44bdff44b3811cbb334f4850376c5e7db7e23eaa8dc2dc0e00007766e066ed68a12f8f3a950012c041b33", 0x52) r6 = openat$tty(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) ioctl$TIOCSPGRP(r3, 0x40047477, &(0x7f0000000300)) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r1, 0xc01064c7, &(0x7f0000000380)={0x8, 0x0, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) openat$tty(0xffffffffffffff9c, &(0x7f00000003c0), 0x400, 0x0) (async) r7 = openat$tty(0xffffffffffffff9c, &(0x7f00000003c0), 0x400, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f0000000440)={&(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, 0x0, 0xfffffbf7, 0x7, 0x200, 0x0, {0xb052, 0x80, 0x7f, 0x4, 0x9, 0x5, 0x0, 0x6, 0x800, 0x9, 0x9, 0x7fffffff, 0x80, 0x3, "a9b79c69b6390dc401ad6d43d008cf62b7218aa4d0f0c1d01e093fc780030abb"}}) (async) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f0000000440)={&(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, 0x0, 0xfffffbf7, 0x7, 0x200, 0x0, {0xb052, 0x80, 0x7f, 0x4, 0x9, 0x5, 0x0, 0x6, 0x800, 0x9, 0x9, 0x7fffffff, 0x80, 0x3, "a9b79c69b6390dc401ad6d43d008cf62b7218aa4d0f0c1d01e093fc780030abb"}}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000004c0)={0x7, 0x1, 0x3, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_ADDFB(r2, 0xc01c64ae, &(0x7f0000000500)={r8, 0x7, 0xffffff01, 0x9, 0x3, 0x8, r9}) (async) ioctl$DRM_IOCTL_MODE_ADDFB(r2, 0xc01c64ae, &(0x7f0000000500)={r8, 0x7, 0xffffff01, 0x9, 0x3, 0x8, r9}) openat$wskbd(0xffffffffffffff9c, &(0x7f0000000540), 0x20, 0x0) (async) r10 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000540), 0x20, 0x0) kevent(r2, &(0x7f0000000580)=[{{r2}, 0xfffffffffffffffd, 0xa2, 0x40000000, 0x3, 0xb5}, {{r10}, 0x8, 0x43, 0x8, 0x3, 0x8}, {{r7}, 0xfffffffffffffff7, 0x8, 0x0, 0x3, 0x4}, {{r1}, 0xfffffffffffffff7, 0x8, 0x4, 0x0, 0xf}, {{r7}, 0xfffffffffffffff6, 0x81, 0x20, 0x4, 0x9}], 0x7, &(0x7f0000000640)=[{{r2}, 0xfffffffffffffff9, 0x4, 0x4, 0x4, 0xf656}, {{r6}, 0xfffffffffffffffb, 0xc5, 0x40000000, 0x1ff, 0xe693}], 0xfffffff3, &(0x7f0000000680)={0xb, 0x3}) r11 = openat$audioctl(0xffffffffffffff9c, &(0x7f00000006c0), 0x100, 0x0) preadv(r11, &(0x7f00000009c0)=[{&(0x7f0000000700)=""/103, 0x67}, {&(0x7f0000000780)=""/136, 0x88}, {&(0x7f0000000840)=""/48, 0x30}, {&(0x7f0000000880)=""/42, 0x2a}, {&(0x7f00000008c0)=""/249, 0xf9}], 0x5, 0x8) fchflags(r10, 0x0) 3.692618828s ago: executing program 5 (id=699): r0 = open(&(0x7f0000000240)='./file0\x00', 0x200, 0x0) ioctl$TIOCCONS(r0, 0x80047462, &(0x7f0000000040)=0x10004) syz_emit_ethernet(0x16, &(0x7f00000001c0)={@broadcast, @empty, [], {@generic={0x8864, "118b9041ce8e8986"}}}) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x44, 0x6}, 0x80000000, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x1, 0x200023}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket(0x18, 0x1, 0x0) setsockopt(r1, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbdf13b9fd812eaa4e713048e69931929648", 0x14) sysctl$net_inet_udp(&(0x7f0000000040)={0x4, 0x2, 0x11, 0x3}, 0x4, 0x0, 0x0, &(0x7f0000000300), 0x0) 3.692154765s ago: executing program 6 (id=700): r0 = socket(0x18, 0x1, 0x0) listen(r0, 0xfffffffe) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = accept$unix(r0, 0x0, 0x0) accept$unix(r0, 0x0, &(0x7f0000000040)) shutdown(r1, 0x2) 3.691463504s ago: executing program 0 (id=701): sysctl$vfs_nfs(&(0x7f0000000000)={0xa, 0x2, 0x1}, 0x3, &(0x7f0000000040)="257a429191f883ec5e2e8d35ea45a0506914338472fd776de3cf4e68a7c58a298554e4b92519dba02193c98c0cc52e95b6cd4b3e4d28d6b993f2b9a3cbb047cf36bc713de50313f5932987b7e269fd0a0f21f428102054fcfa5a32cbfe0d6a84a061cb65740efcef0d95831113d270ed1c5e01abfe68a7393761cc2e40d9d1284e408c9d18474df9f0e51e4fa13dacfa5affaa5bf1dc757942fe4e", &(0x7f0000000100)=0x9b, &(0x7f0000000140)="b51be65ff76309aa21e5ad66e8a2b34d3e20e3ec6ed1", 0x16) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000001c0)=@file={0x2, 0x1, './file0\x00'}, 0xa) fstat(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r2) r3 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000280), 0x8, 0x0) ioctl$WSKBDIO_COMPLEXBELL(r3, 0x80105702, &(0x7f00000002c0)={0x1, 0x6, 0xe000000, 0x6}) readv(0xffffffffffffff9c, &(0x7f0000000800)=[{&(0x7f0000000300)=""/114, 0x72}, {&(0x7f0000000380)=""/37, 0x25}, {&(0x7f00000003c0)=""/226, 0xe2}, {&(0x7f00000004c0)=""/243, 0xf3}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/224, 0xe0}, {&(0x7f00000007c0)=""/62, 0x3e}], 0x7) r4 = socket(0x6, 0x1000, 0x7) sendto$unix(r4, &(0x7f0000000880)="eb4eb68eebebd8e9c489e2a67eab106c0df031b83bb9cd19b07f8f9257dee3712a92ed031533b8b5d8e74c19d39e752f1f5aad3a4f0aa23b54c160c7542747e411a2115e72b08d590c5fa5", 0x4b, 0x40f, &(0x7f0000000900)=@abs={0x6f, 0x0, 0x0, 0x1}, 0x8) ioctl$FIONBIO(r4, 0x8004667e, &(0x7f0000000940)) fstat(r1, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r5, r2) r6 = socket(0x10, 0x1007, 0x5) recvmsg(r6, &(0x7f0000001e80)={&(0x7f0000000a00)=@un=@file={0x0, 0x0, ""/37}, 0x27, &(0x7f0000001d00)=[{&(0x7f0000000a40)=""/59, 0x3b}, {&(0x7f0000000a80)=""/11, 0xb}, {&(0x7f0000000ac0)=""/136, 0x88}, {&(0x7f0000000b80)=""/167, 0xa7}, {&(0x7f0000000c40)=""/4096, 0x1000}, {&(0x7f0000001c40)=""/192, 0xc0}], 0x6, &(0x7f0000001d80)=""/248, 0xf8}, 0x40) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffff9c, 0xc01864c6, &(0x7f0000001f00)={&(0x7f0000001ec0)=[0x1], 0x1, 0x10000, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_CAP(r7, 0xc010640c, &(0x7f0000001f40)={0x9}) setresgid(r5, r5, r2) chmod(&(0x7f0000001f80)='./file0\x00', 0x200) ioctl$DRM_IOCTL_GEM_FLINK(r7, 0xc008640a, &(0x7f0000001fc0)) r8 = openat$pf(0xffffffffffffff9c, &(0x7f0000002000), 0x20, 0x0) write(r8, &(0x7f0000002040)="d9abe4d03ee6e35bbe58b45aa4bdb64c", 0x10) getresuid(&(0x7f0000002080), &(0x7f00000020c0), &(0x7f0000002100)) ioctl$WSMOUSEIO_SRES(0xffffffffffffffff, 0x80045721, &(0x7f0000002140)) getsockname(r1, &(0x7f0000002180)=@in, &(0x7f00000021c0)=0x10) r9 = openat$vmm(0xffffffffffffff9c, &(0x7f0000002200), 0x80, 0x0) ioctl$VMM_IOC_CREATE(r9, 0xca605601, &(0x7f0000002240)={0x10, 0x4, [{&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x5}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fed000/0x13000)=nil, 0x1}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fed000/0x1000)=nil, 0xd}, {&(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x2}, {&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0xff}, {&(0x7f0000fea000/0x14000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x8}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fee000/0x12000)=nil, 0x8}, {&(0x7f0000fea000/0x3000)=nil, &(0x7f0000fed000/0x3000)=nil}, {&(0x7f0000feb000/0x3000)=nil, &(0x7f0000fee000/0x3000)=nil, 0x2}, {&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil}, {&(0x7f0000fee000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x7}, {&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil}, {&(0x7f0000fec000/0x4000)=nil, &(0x7f0000ff1000/0x1000)=nil, 0x8001}, {&(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff2000/0x2000)=nil, 0x4}, {&(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x5}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x7}], './file0\x00', 0x40, 0x7, 0x5, 0x1, [0xfffffffc, 0x6, 0x1, 0x7, 0x7, 0x9, 0x6, 0x0, 0xb930, 0x1, 0x1, 0x100, 0x9, 0x4, 0x5, 0x8, 0xbfd9, 0x40, 0x5, 0x5, 0x8, 0xfc, 0x101, 0x7, 0xe1a, 0x4, 0x6, 0x9, 0x7, 0x4, 0xfffffff9, 0x200, 0x9, 0x10001, 0x6, 0x10000000, 0x3, 0x0, 0x1ff, 0x6, 0x1, 0x7f4c8c0d, 0x2, 0x2, 0x7f, 0x800, 0x5, 0x307, 0x401, 0x8e4, 0x9, 0x200000, 0x4, 0x401, 0x9, 0xffe000, 0x5, 0x5, 0xe8c7, 0xffffff01, 0x4, 0x800, 0x6, 0xfffffff9, 0xe02, 0x14c14000, 0x8, 0x5, 0xc000000, 0x10001, 0xffffff00, 0xeb5, 0x9, 0x3, 0x4, 0x69, 0x7, 0x1, 0x81, 0x4c, 0x7, 0xf11b, 0x5, 0xe, 0xfffffff5, 0x6, 0x8, 0x201, 0x3, 0x5, 0x97fa, 0x4, 0x9, 0x1, 0x7, 0x9, 0x3, 0x7, 0x5, 0x1ca, 0x3, 0xfffffffd, 0x3, 0xca4, 0x5, 0x2, 0x81, 0x2, 0x0, 0x6, 0x2, 0x5, 0x1, 0x1, 0x8, 0xde3b, 0x800, 0x3, 0x3, 0x8, 0x899, 0x3, 0x7, 0x2, 0x2, 0x3ff, 0xdc5b, 0xffff, 0x8001, 0x100, 0x0, 0xa, 0xfff, 0x8, 0xc, 0xf25f, 0x2, 0x0, 0xfffffff7, 0x6, 0x6, 0x6, 0xfffffff7, 0x7, 0xefd, 0x80000000, 0x1, 0x40, 0x3, 0x80000000, 0x3, 0x9e6, 0x4, 0x4, 0x0, 0x7c, 0x0, 0x40, 0x0, 0xffff, 0x12, 0x0, 0x5, 0x4, 0x80000000, 0x1f00, 0x5, 0x1, 0x1000, 0x64e, 0x4, 0x3, 0x431ca778, 0x5, 0x3, 0x1ff, 0x7, 0xc5, 0x5379, 0x7, 0xae, 0xffffffff, 0x6f687ea, 0x9, 0x800, 0x9, 0x80000001, 0x8, 0x3ff, 0x6, 0x80, 0xe, 0x1, 0x26, 0xfffffffa, 0x9, 0x0, 0x7, 0xfffffffd, 0x4, 0x9, 0xfffffffd, 0x8, 0x0, 0x4, 0x3, 0x3, 0x9, 0x4, 0x200, 0xffffff0d, 0x1, 0x6, 0x4, 0x6, 0x7, 0x1, 0x6, 0xcd5b, 0xdee, 0x5, 0x8, 0x6, 0x8, 0x6, 0x4, 0xff, 0xa, 0x200, 0x8, 0x0, 0x0, 0x4, 0x7fff, 0x7fff, 0xb, 0xffe, 0x6, 0x2, 0xffffffff, 0x80, 0x60, 0x87, 0x10001, 0x4, 0xa693, 0x0, 0x4, 0x6, 0x1, 0x3, 0x200, 0x6, 0x7, 0xfffffff8, 0x6, 0x4, 0x5, 0x8, 0xf223, 0x4, 0x1, 0x5, 0x7, 0x5, 0x8, 0x3, 0x51, 0x2, 0x4, 0x1, 0x80, 0x9, 0x2, 0x10001, 0x0, 0xe, 0x5, 0xffffffff, 0x2, 0x7, 0x7, 0x5, 0x9d8, 0xe, 0x7, 0xfffff607, 0x7fffffff, 0x3, 0x6, 0xe8d, 0x6, 0x6, 0x4, 0x401, 0x6, 0x800, 0xffffff2f, 0x101, 0x5, 0x8, 0x653, 0xfffffbff, 0x16db, 0x4, 0x7, 0xfffff948, 0x2, 0xfffffff8, 0x3, 0x8, 0x6, 0x121800, 0x7, 0x62fe, 0x3, 0x171, 0x2, 0x9, 0x9, 0xf, 0x5, 0x8, 0x4, 0x8, 0x6, 0x6, 0x3, 0x7, 0x8, 0x3, 0x5, 0x9, 0x8, 0x7fffffff, 0x9, 0x0, 0x5, 0x0, 0x7f62, 0x80000001, 0xd2d9, 0xe, 0x401, 0xa7, 0x40, 0x4, 0x51, 0x5, 0xffff, 0x6, 0x0, 0x2, 0x4, 0x7, 0x4, 0x3, 0x8, 0x0, 0x101, 0x1, 0x1, 0x91, 0x3, 0x5, 0x9, 0x10, 0x40, 0x7fffffff, 0x9, 0x1, 0x8, 0xd, 0x800, 0x6, 0x4, 0xffff, 0x2, 0x8, 0x10001, 0xd, 0x3ff, 0x7, 0x6d9b0d49, 0x3, 0x28, 0xa, 0x8001, 0x9a79, 0x5, 0x4, 0x5, 0x7, 0x0, 0x2, 0x3, 0x823, 0x1, 0x7, 0xd, 0x0, 0x61b3, 0x3, 0xfffffff9, 0x7, 0x401, 0x2, 0xf7f1, 0x4, 0x0, 0x8, 0x3, 0x8, 0x6, 0x6, 0x9, 0xcd33, 0xdb, 0x7fff, 0x9, 0x1, 0x10001, 0x9, 0x9, 0x8da, 0x6, 0x3, 0x1, 0x9, 0x3, 0x4, 0x7ff, 0x8, 0x3, 0x32, 0x9, 0x9, 0xfffffffe, 0xffffffff, 0x10000, 0x5, 0x385, 0xa3, 0x400, 0x7f, 0x7, 0xf5, 0x3, 0x5, 0x11f, 0x2, 0xfffffffd, 0x7, 0x8, 0xd, 0x6, 0x8, 0x1, 0x9, 0x2, 0x5, 0x100, 0x40, 0xffffffff, 0x0, 0xffffff12, 0x6, 0x0, 0x2, 0x7, 0xe8, 0x3, 0x81b3, 0x4, 0x4, 0x8, 0x2, 0x8, 0x4, 0x275, 0x2, 0x2, 0x4, 0x94e5, 0x0, 0x80000001, 0x0, 0x8, 0x9, 0x6, 0x0, 0x100, 0x8, 0x79, 0x6f4, 0xb, 0x2, 0x81, 0x6, 0x5, 0xc, 0xffff, 0x6, 0x6, 0x4, 0x0, 0x9, 0x2, 0x64d, 0x5, 0x1, 0xfffffffe]}) getpeername(r6, &(0x7f0000002c40)=@un=@file={0x0, 0x0, ""/265}, &(0x7f0000002d80)=0x10b) fcntl$dupfd(r7, 0xa, r4) ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f0000002e00)={0x4, 0x1, 0x9, 0xc, "7ff9681342783a43c0d918136e15580f6cc2d50c", 0x3, 0xfffffff7}) 1.617474944s ago: executing program 4 (id=702): r0 = socket(0x18, 0x1, 0x0) close(r0) (async) socket(0x24, 0x2, 0x0) setsockopt(r0, 0x3, 0x46, &(0x7f0000000000), 0x0) 1.615458833s ago: executing program 2 (id=703): open(&(0x7f0000000140)='./file0\x00', 0x78e, 0x8) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0xc, 0x2000000000000004}, 0x0, 0x0, 0x0) ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f00000006c0)={'./file0\x00', 0x6, 0xfff, 0x401, 0x1, 0x800, 0xa, 0x1, 0x1, 0x1, 0x0, 0x105}) r0 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0xd6) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000200)='+!', 0x2}], 0x10000000000002aa) r1 = dup(0xffffffffffffffff) ioctl$DIOCRADDTABLES(r1, 0xc450443d, &(0x7f0000002b00)={{'./file0\x00', './file0\x00', 0xb, 0xf9}, &(0x7f0000000140)=[{'./file0\x00', './file0\x00', 0x4a, 0x9}, {'./file0\x00', './file0\x00', 0x0, 0xe}, {'./file0\x00', './file0\x00', 0x46, 0x6}, {'./file0\x00', './file0\x00', 0x44, 0xfb}, {'./file0\x00', './file0\x00', 0x18, 0x6a}, {'./file0\x00', './file0\x00', 0x1, 0x18}, {'./file0\x00', './file0\x00', 0x40, 0x5}, {'./file0\x00', './file0\x00', 0x8, 0x8f}, {'./file0\x00', './file0\x00', 0x40, 0x5}, {'./file0\x00', './file0\x00', 0x0, 0x3}], 0x4, 0xa, 0x78, 0x7fffffff, 0x8, 0x2, 0x30, 0x73b}) select(0x40, &(0x7f0000000180)={0xffffffffffffffbd, 0x44809ea0, 0xffffffffffffffff, 0xfffffffefffffffe, 0x2000000000000000, 0x214, 0xb, 0x8}, 0x0, 0x0, 0x0) mknod(&(0x7f0000000000)='./file1\x00', 0x2000, 0x285b9a) r2 = open(&(0x7f0000000800)='./file1\x00', 0x800, 0x120) ioctl$FIONBIO(r2, 0x82907003, &(0x7f0000000140)=0x2) r3 = openat$speaker(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000000)='O<', 0x2}], 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0x37) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x2012, r4, 0x0) 498.114868ms ago: executing program 5 (id=704): ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffff9c, 0xc1045763, &(0x7f0000000180)={0x1, [{0x2, 0xffffff01}, {0x3e2b19d18c9a836b}, {0x2, 0x7fff}, {0x1, 0xd}, {}, {0x0, 0x5}, {0x2, 0x1}, {0x0, 0xfff}, {0x0, 0x1}, {0x2, 0x1}, {0x1, 0x10000000}, {0x1, 0x6}, {0x3, 0x2}, {0x3, 0x1}, {0x0, 0x4}, {0x0, 0x5}, {0x0, 0x401}, {0x4, 0x3}, {0x1, 0x4}, {}, {0x2}, {}, {0x3, 0xfffffc00}, {0x2, 0x9}, {0x2, 0x2}, {0x3, 0x800}, {0x3}, {0x1}, {0x2, 0x1}, {0x1, 0x10000}, {0x2, 0x8001}, {0x1, 0x200060}]}) sysctl$net_inet_etherip(&(0x7f0000000040)={0x4, 0x2, 0x61, 0x2}, 0x4, &(0x7f0000000080), 0x0, 0x0, 0x0) sysctl$kern(&(0x7f00000000c0)={0x1, 0x37}, 0x4, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000140)=0x2c, 0x0, 0x2e) 495.282071ms ago: executing program 7 (id=705): r0 = open$dir(&(0x7f0000000300)='.\x00', 0x80, 0x4a) r1 = kqueue() kevent(r1, &(0x7f0000000000)=[{{r0}, 0xfffffffffffffffc, 0x19, 0x2, 0x2}], 0x8007, &(0x7f0000000040)=[{{r0}, 0xffffffffffffffff, 0x3, 0x4, 0x3fbd, 0xffffffffffffffff}], 0x5, 0x0) syz_extract_tcp_res(0x0, 0x1, 0x101) syz_emit_ethernet(0x15c, &(0x7f0000001380)={@local, @remote, [], {@ipv6={0x86dd, {0x6, 0x6, "05b400", 0x126, 0x6, 0x30, @rand_addr="0000000015000000eeffffffffffffff", @local={0xfe, 0x80, '\x00', 0x0}, {[], @tcp={{0x2, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0xc, 0x10, 0x3, 0x0, 0x7, {[@sack_perm={0x4, 0x2}, @window={0x3, 0x3, 0xe9}, @sack_perm={0x4, 0x2}, @window={0x3, 0x3, 0x8}, @eol, @timestamp={0x8, 0xa, 0x7, 0x9}, @generic={0x2, 0x2}, @sack={0x5, 0x2}]}}, {"2a702b1ab07a08fa4c7e52b0b3f1717e0f16b18c385ed05939cfec5499094222c78097fcd1856ac229ada43d681246cefd3b397dc481cc203e1e9901a9a20bdb84fa3db77d627122e3636d491d852d16fe28e4bf8e1269be0c48ad9a64943e71f7ce2fd471754200a3b7af9ea861dd6f39505ed8c0bcb9db168edd34595080f904202624bbf1ef6eeb44cb815a7d6130337d937776e5ec4832f454329df58b88e42aff33f7abbaad9acd69a6decde78c3b32359f77c01601c33f290a30cbe647a16bc9861d89263353245bd504cc86a851ad942a41a4b364ebba6151f2b190ee2d6ff4ab8575deae296bcd8aaaf56c15085e4d27ef9f"}}}}}}}) sysctl$net_inet_tcp(&(0x7f0000000040)={0x4, 0x2, 0x6, 0x13}, 0x4, 0x0, 0x0, &(0x7f0000000140), 0x0) fchmod(r0, 0xf3) 494.323608ms ago: executing program 7 (id=706): sysctl$hw(&(0x7f00000000c0)={0x6, 0xe}, 0x2, 0x0, 0x0, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sysctl$kern(&(0x7f00000000c0)={0x1, 0x4f}, 0x2, &(0x7f0000000100), 0x0, 0x0, 0x0) (async) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) socket(0x18, 0x3, 0x9ef) (async) fchmodat(0xffffffffffffffff, 0x0, 0x1, 0x6) (async) ktrace(&(0x7f0000000040)='./file0\x00', 0x4, 0x20001916, 0xffffffffffffffff) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x10, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) (async, rerun: 32) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x81, 0x94, 0xab, 0x4d}, {0x30, 0x7, 0xe0, 0x6}, {0xfffe, 0xa, 0x5, 0x9}]}) (async, rerun: 32) sysctl$kern(0x0, 0x0, &(0x7f0000000280)="a7a6d62ce4a10909926243103b47915d8156c41f1b4f0919d7aacdfafffff3ffffffff46c0fbde0346df012e782c5780919d69e5a930e653b64399f3c7c6a9bfc4b0587bbdaefb0b57931ef404f50083482538e2b94fe0cb77f7228df79232598ced388d3082a8f2597759f500dc78f84f47d195b451129de8d6c340", &(0x7f0000000000)=0x7c, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x2a, &(0x7f0000000200)=ANY=[]) fsync(r0) (async) mkfifo(&(0x7f0000000000)='./file0\x00', 0x20) 165.415897ms ago: executing program 4 (id=707): setrlimit(0x1, &(0x7f0000000980)={0x8, 0x54}) r0 = open(0x0, 0x78e, 0x7) pwrite(r0, 0x0, 0x0, 0x7fff) syz_open_pts() syz_open_pts() ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, 0x0) mknod(0x0, 0x2000, 0x6381) select(0x40, &(0x7f0000000180)={0xfffffffffffffffd, 0x44809e9d, 0xffffffffffffffff, 0xfffffffefffffffe, 0x2000000000000000, 0x210, 0x8, 0x7}, 0x0, 0x0, 0x0) kevent(0xffffffffffffffff, 0x0, 0xffeffff1, &(0x7f00000002c0)=[{{}, 0xfffffffffffffff9, 0x83, 0xf0000000, 0x3, 0x8}, {{}, 0xfffffffffffffffb, 0x0, 0xf0000000, 0xffffffff, 0x6}, {{}, 0xfffffffffffffffa, 0x72, 0x80, 0x9, 0x3}, {{}, 0xfffffffffffffffd, 0x14, 0x10, 0x8, 0x100000001}, {{}, 0xfffffffffffffffb, 0x28, 0x2, 0x1f70, 0x80000000000009}], 0xb19, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x100) kevent(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000001c0), 0x15, 0x0) syz_open_pts() mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0xd02) r1 = open(&(0x7f0000000080)='./bus\x00', 0x40, 0x0) getpid() preadv(r1, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/104}, {&(0x7f0000000140)=""/192, 0x100000}, {&(0x7f0000000340)=""/175}, {&(0x7f0000000000)=""/18}], 0x10000000000002b8, 0x0) unveil(0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000300)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x63, 0x0, 0x40, 0x11, 0x0, @empty, @rand_addr=0xec14ffff}, @tcp={{0x0, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x80, 0x0, 0x0, 0x2}}}}}}) 164.076145ms ago: executing program 6 (id=708): r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0) ioctl$DIOCIGETIFACES(r0, 0xc0284457, &(0x7f0000001040)={'./file0\x00', 0x0, 0x100, 0x138, 0x3, 0x7}) (async) sysctl$kern(&(0x7f0000000000)={0x1, 0x33}, 0x2, &(0x7f0000000040)="34121486721a27534d470cb498a4805ffd8d1c95b77bd11f24a8ce3144090ad8693c1c3ae912a5363750aa20a57d92ad53d2626fcd404ccc7c2071b4506ca342c834ab8bd474391deedfb0136acfdd3b02eb7ca23fc51199803a41978341d2db04e53bd57245a9cef2ffadbe8c4dec4a5d3b282db3ec59270c168c97607cb346f9887431c064c85c5fde804d1c75fa551c53197d57e52d3ab02c6aede5886275e3248797c18e40fb113fc9a3c29a2ec2037c1674dd30", &(0x7f0000000100)=0xb6, &(0x7f0000000140), 0x0) 149.619882ms ago: executing program 1 (id=709): ioctl$WSKBDIO_GETKEYREPEAT(0xffffffffffffffff, 0x400c5708, &(0x7f0000000840)) r0 = open(&(0x7f0000000380)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7909) setrlimit(0x8, &(0x7f0000000000)={0xfffffffffffffffb, 0xffffffffffffffff}) sysctl$hw(&(0x7f0000000540)={0x6, 0xa}, 0x2, 0x0, 0x0, 0x0, 0x0) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) ioctl$BIOCSETIF(r4, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) ioctl$BIOCSETF(r4, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x5c, 0x7, 0x3, 0x48}, {0x40, 0xf0, 0xff}, {0x6, 0x80, 0x10, 0x59}]}) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[]) readv(r3, &(0x7f00000004c0)=[{&(0x7f0000000080)=""/53, 0x35}, {&(0x7f00000000c0)=""/250, 0xfa}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000000200)=""/152, 0x98}, {&(0x7f00000002c0)=""/82, 0x52}, {&(0x7f00000003c0)=""/196, 0xc4}, {&(0x7f0000000580)=""/132, 0x84}, {&(0x7f0000000340)=""/21, 0x15}], 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r5, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000ffff000001"], 0x10, 0x4}, 0x40a) write(r5, 0x0, 0x0) r6 = socket(0x2, 0x8002, 0x0) r7 = fcntl$dupfd(r6, 0x2, 0xffffffffffffffff) closefrom(r7) r8 = getpid() fcntl$setown(r1, 0x6, r8) fcntl$setown(r2, 0x6, 0x0) flock(r1, 0x8) pledge(&(0x7f0000000000)='tty V\xef\x86\xce3|#\xcb\x13\x12\xe0\r\x9c\xe6\x98\x0f\x01\xc2\xe7\xb9E\xc3\x1d\x96\xdbY\x91\x0e\x17\x95 \x01\xa6~\xd0|/?\xc9\xd5k\xbe\xa9kG\x00\x00\x00\x00\x00@\x00\x01\x00\x00\xeb\x91vr)\\\x9el\x03(r\xd4\x9a\x0f\f\xdb<\xb4B\x95\x15\xb6\r', 0x0) r9 = socket(0x11, 0x3, 0x0) sysctl$kern(&(0x7f0000000640)={0x1, 0x3}, 0x2, &(0x7f0000000680)="4a62cea1e245f54ade64f10e6883c029aa6cfa52c389efbd8a33474350245307e5ad333956bce1e79223a4ddc12958c9b90979271f152868b0a4e64a0bf589066b44e16794b99b178650bfb3e89d612e88e94941251e8eba45506f83f59be98a15d6a7d5444c762fadf36806a466abd589e5f46214ef61f88417fc8570236cac8f2d7d3392abb01e10889d8b22365adc01906c4ced8efc55e1fb08e7d46729936409fdf68551de51a737d47b70e289d6", &(0x7f0000000740)=0xb0, &(0x7f0000000780)="bf59c70a03f28714983ea8889372295f9dc42ed45461d9d81e4e0efd77a0bb41b861acbac1dfcb441d046beb97f9891743d4eb82b4784e862221bce3355bfec393ce281aa53c318a6418e3e98a3a4992246e4bbe489fff87b505089e73a3a2be81d96ef0adacee9584da82cdafa86193bd6975b41f073285ce2d78b8c5afdd552fc9bf13d8a7dd60e1637f0ebeb106ea5aa66388c72d913df66639347551feea3c3571c056e8b1828abad1fe", 0xac) getsockopt$sock_int(r9, 0xffff, 0x1003, 0x0, 0x0) shutdown(r3, 0x1) sysctl$kern(&(0x7f0000000040)={0x1, 0x3f}, 0x4, &(0x7f0000000040), 0x0, 0x0, 0xfffffffffffffda3) r10 = getpid() ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x510, r10) fcntl$lock(r0, 0xa, &(0x7f00000019c0)={0x1, 0x2, 0x2000000000000001, 0x2, r10}) 146.968639ms ago: executing program 3 (id=710): r0 = socket(0x18, 0x3, 0x9ef) r1 = socket(0x1e, 0x3, 0x0) close(r0) ioctl$FIOSETOWN(r1, 0x8004667c, &(0x7f0000000240)=0x1) r2 = openat$pf(0xffffffffffffff9c, &(0x7f0000000200), 0x8, 0x0) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x2, 0x0, 0x13}, 0x4, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_opts(r3, 0x0, 0x64, &(0x7f0000000240)="01000000", 0x4) setsockopt(r3, 0x0, 0x6e, 0x0, 0x0) ioctl$DIOCSETHOSTID(r2, 0xc0044456, &(0x7f0000000240)=0x5) sysctl$vm(&(0x7f0000000000)={0x2, 0x4}, 0x2, &(0x7f0000000040)="2a03d1214d7a966df05a6b35d44c9518d97f09f3c6d2129da4af019d5a9dd65c1be23a4c9da5bc2ce03856c387bc41e4d051cb04b151f9e239aea337b7c3465aec36dcef842e8997826a2443b84ed0b0d886", &(0x7f00000000c0)=0x52, &(0x7f0000000100)="385063583a5713e316a2f820fe31e877c4bdbb071c2ba20566a2fea261ce4714fef2228f5ed779b6360401756729f27e750399c3d7cd67276b8953d01b510658273574e5226786bbc2efaa91c728e07e807b8d96b9182b63d1a7be00369eee0d0f80e2b6c3a797ee416a641832719c3b35c484ef3a1911ed0864020ab3a3e23672bf5d779db7325c86fc783fa881743187a758813d9fce4fb671432f06d8ffcf28d713ee45d449006b142ee494e1fff9e9abaf13b3eba9be67d84a10d49ef3a1031a2f10963eb0915e92b79ef205e5058dec6fad6eaf1c7fd750242e096eea879833d84ba49e57", 0xe7) 146.559011ms ago: executing program 5 (id=711): r0 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000140), 0x782, 0x0) writev(r0, &(0x7f0000000280)=[{&(0x7f00000001c0)="0000d175d9057f6564e528f21c8500ea9c603c3a7f5768a4d170c21da5576ce82ecf1d3c8b1e5f4c611119f0fc173884adc5307f6e9d9b98a236570c86cc5952eb6a8108527f205802e6579c0f874b315e80e7e10bb323a9aac808e7f8bf286bf11f691182ec79652a14a41c39f42bf9d256754964fde50a36490b393add8c4de76e08d04f2ad374e35618f03ae694615649ed06ade01d723b63438b5ef6b5f9fb5aaa585cc883cbe6c37985ee0abf90aa08bc811258e587f48221", 0xbb}], 0x1) execve(0x0, 0x0, 0x0) 140.735105ms ago: executing program 0 (id=712): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x2, 0x3, 0x0) r1 = dup(r0) r2 = dup(r1) sysctl$kern(&(0x7f00000000c0)={0x1, 0x50}, 0x8, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000300)=0xfe10, 0x0, 0x37) setsockopt$inet_opts(r2, 0x0, 0x16, &(0x7f0000000080)="fd0cc085", 0x4) r3 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000400), 0x8, 0x0) closefrom(r3) open(&(0x7f0000000000)='./file0\x00', 0x611, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb5219f1000b913f1, 0x0) close(0x3) sysctl$net_inet_tcp(&(0x7f0000000040)={0x4, 0x2, 0x6, 0x19}, 0x4, 0xfffffffffffffffe, &(0x7f0000000080)=0x42, 0x0, 0x0) r4 = open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x186) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x2012, r4, 0x0) sysctl$kern(&(0x7f0000000100)={0x1, 0x32}, 0x2, 0x0, 0x0, &(0x7f0000001440)="02000000", 0x4) sysctl$net_inet_tcp(&(0x7f0000000240)={0x4, 0x2, 0x6, 0xe}, 0x4, &(0x7f0000000280)="7bdc2d4f29292a3e29fbe1bcf9de4f441f960f8e67796edb270202b467974159fd0fac744e4b14af34b9d42f07d4e54a1064f840b9dc0c49f4ae0ffa5d03184f26963995d019a81d6f4877813ec2c7cbe756483ce8c2442fdc5c24a063e8bbe08373ad61b04f7505f8fdf69fa38f8b3ca32938a3470cf3f7101db81ffe660de72becf458446766dd3f4dc7e01f6d7641a01ae8b5d062786fe2ca52045e768c2da240f3969a41ac75cd3f3c9bce557350627dd5ce2d5037219881afb5155cbbfd80f711af8d4eb889d005e6c710d7ae007e9134de4cbadad4072b8376e1", &(0x7f0000000380)=0xdd, &(0x7f00000003c0)="619b5be1a87b55cc", 0x8) sysctl$net_inet_tcp(&(0x7f0000000000)={0x4, 0x2, 0x6, 0x2}, 0x4, &(0x7f00000000c0)="3831dcb9588ab7ef60a4197571006408068895b18036dff06eef806d5ee8d9513d3e1c6894780fffe8475f5a37e071976b25262139b46a7ff584de86a9f5bbeabd5a594028ed297e1337add36822b39307df3396375a12d9d2c917888a6c525779fbb6e9c19a36dbd681d6763f67d0a2411ffe66199e080173a78fbabf0a8ae1c6a882889358153f980a46e4b7defdff0ce8c1f19b2e05fef811cfb16afb7c85d5efedc29fe5d2081fe2", &(0x7f0000000180)=0xaa, &(0x7f00000001c0)="3f8258fa465bf112f0a0e4e7444d2ed6edaf278c190706a4fb9f46cc73c482d0329cfd975a14b9e9c2536fd3fa50444f170a6a48f55d7bfb6bfb153e41b920aa82b276d7585de486add18176b572ec2e6f586ff7f690e9cd7c8006a412178024", 0x60) 140.213081ms ago: executing program 7 (id=713): writev(0xffffffffffffffff, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000100)="a42ef5f7f35317b6b66e87886fbcfe9d86e36f0a5cc0513c5a94c7dec0c3b100168a2d751baef09e9b5d6b8b51c83825b25d42ddea2b675e678748b922e6c5ddcf85ece79a8a7736e88aea9eb8d90fb9cb20558c93c845f02496e89e7b983a0492d6bedbc7000aad9b9ff25ff7bea09d2cc49674d5d416bda7bd9cd6852556cc503b23ad85d1fa05e2909fd158f7cd6940181f413929", 0x1f}], 0x2) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r0 = socket(0x18, 0x1, 0x0) ioctl$FIONREAD(r0, 0x80206982, &(0x7f00000001c0)) syz_emit_ethernet(0x4a, &(0x7f0000001380)={@local, @remote, [], {@ipv6={0x86dd, {0x6, 0x6, "05b400", 0x14, 0x6, 0x30, @rand_addr="0000000015000000eeffffffffffffff", @local={0xfe, 0x80, '\x00', 0x0}, {[], @tcp={{0x2, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x3, 0x0, 0x7}}}}}}}) writev(0xffffffffffffffff, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000100)="a42ef5f7f35317b6b66e87886fbcfe9d86e36f0a5cc0513c5a94c7dec0c3b100168a2d751baef09e9b5d6b8b51c83825b25d42ddea2b675e678748b922e6c5ddcf85ece79a8a7736e88aea9eb8d90fb9cb20558c93c845f02496e89e7b983a0492d6bedbc7000aad9b9ff25ff7bea09d2cc49674d5d416bda7bd9cd6852556cc503b23ad85d1fa05e2909fd158f7cd6940181f413929", 0x1f}], 0x2) (async) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) (async) socket(0x18, 0x1, 0x0) (async) ioctl$FIONREAD(r0, 0x80206982, &(0x7f00000001c0)) (async) syz_emit_ethernet(0x4a, &(0x7f0000001380)={@local, @remote, [], {@ipv6={0x86dd, {0x6, 0x6, "05b400", 0x14, 0x6, 0x30, @rand_addr="0000000015000000eeffffffffffffff", @local={0xfe, 0x80, '\x00', 0x0}, {[], @tcp={{0x2, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x3, 0x0, 0x7}}}}}}}) (async) 139.045614ms ago: executing program 6 (id=714): r0 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) acct(&(0x7f0000000000)='./file0\x00') acct(&(0x7f00000000c0)='./file0\x00') r1 = socket(0x18, 0x2, 0x0) setsockopt$sock_int(r1, 0xffff, 0x1023, &(0x7f0000000000)=0xfffffffd, 0x64) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0xffff, 0x1, &(0x7f0000000080)=0x1fc, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) getsockopt(r2, 0x0, 0x1, &(0x7f0000001280)=""/4096, &(0x7f0000000080)=0x1000) write(r0, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) openat$speaker(0xffffffffffffff9c, &(0x7f0000000100), 0x40000, 0x0) unveil(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='c\x00') 131.789549ms ago: executing program 5 (id=715): setrlimit(0x8, &(0x7f0000000980)={0x8, 0x54}) r0 = syz_open_pts() syz_emit_ethernet(0x46, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x3d, 0x38, 0x67, 0x0, 0x0, 0x6, 0x0, @multicast1, @local={0xac, 0x14, 0x0}}, @tcp={{0x2, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0x40, 0x8200, 0x0, 0xfffc, {[@nop, @nop, @timestamp={0x8, 0xa, 0x8, 0x7fffffff}, @eol]}}}}}}}) close(r0) r1 = syz_open_pts() close(r1) ioctl$TIOCSETD(r0, 0x8004741b, &(0x7f0000000000)=0x2) r2 = syz_open_pts() fcntl$lock(r2, 0x9, &(0x7f0000001500)={0x3, 0x0, 0xfffffffffffffffd, 0x80010002fffffffe}) ioctl$TIOCSETAF(r0, 0x802c7416, &(0x7f0000000040)={0x409789, 0x10001, 0xfffffc06, 0x80a1a1, "bb08000110f167d910508bc49d7323000000007e", 0x0, 0x4}) writev(r0, &(0x7f0000000700)=[{&(0x7f0000000080)="34eb4cd59e8456ebc0881681c60e1cd9e0bf01b618b3cb934394c5951c1db0fd943a", 0xff99}], 0x1) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r3, 0x0, 0x200000000000c, &(0x7f0000000000)="ea00000100000000", 0x8) setsockopt$inet_opts(r3, 0x0, 0x200000000000c, &(0x7f0000000240)="ea00eb0100000000", 0x8) shutdown(r3, 0x1) ioctl$TIOCDRAIN(r0, 0x2000745e) syz_emit_ethernet(0x4e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c8900182b01fe800000000000000000000000000025fe800000000000000000004000"]) 26.859079ms ago: executing program 3 (id=716): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) select(0x40, &(0x7f0000000080)={0x2, 0x20000000, 0x7, 0x4, 0x3, 0x8, 0x449, 0x8000}, 0x0, 0x0, 0x0) read(r1, &(0x7f0000000400)=""/157, 0x9d) close(r0) syz_open_pts() 24.721607ms ago: executing program 0 (id=717): madvise(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2) mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x1) 23.904458ms ago: executing program 2 (id=718): link(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) semget$private(0x0, 0x5, 0x2) r0 = openat$vmm(0xffffffffffffff9c, &(0x7f00000008c0), 0x180b0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @random="303a00c6b708", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x61, 0x0, 0x0, 0x6, 0x0, @remote={0xac, 0x14, 0x0}, @local={0xac, 0x14, 0x0}}, @tcp={{0x2, 0x2, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x53, 0x7, 0x0, 0x8}}}}}}) ioctl$VMM_IOC_RUN(r0, 0xc0285602, &(0x7f0000000b80)={0x2, 0x80000000, {0xfa, 0x1, 0x4}, 0x9, 0x0, 0x3, 0x9}) sysctl$hw(&(0x7f0000000100)={0x7, 0x11}, 0x2, 0x0, 0x0, 0x0, 0x0) r1 = accept(0xffffffffffffffff, &(0x7f0000000040)=@un=@abs, &(0x7f0000000080)=0x8) sendto$unix(r1, &(0x7f0000000200)="7903f5a4f9160816e57e17539d3b3a4027628c5de0c16903d64f73a4c23710003ea60659c08333e6573f59d3dd69add42ab7ba18e62512bce69cf123b183f89e11a8c68c89432dc4e113942e265a9b9102213775893f3b879e0df471c2c028d6b36bbf87e1795f0693f71162b91f34ec15382df22611717dc9c44875c5dfa1bc4037e32dd75b349ba5d7c5548932710a3bef4409f56cfa5986828e716474987dec9a80c08fef86a15071a53e32", 0xad, 0x404, &(0x7f00000000c0)=@abs={0x4, 0x1, 0x0, 0x1}, 0x8) link(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) (async) semget$private(0x0, 0x5, 0x2) (async) openat$vmm(0xffffffffffffff9c, &(0x7f00000008c0), 0x180b0, 0x0) (async) syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @random="303a00c6b708", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x61, 0x0, 0x0, 0x6, 0x0, @remote={0xac, 0x14, 0x0}, @local={0xac, 0x14, 0x0}}, @tcp={{0x2, 0x2, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x53, 0x7, 0x0, 0x8}}}}}}) (async) ioctl$VMM_IOC_RUN(r0, 0xc0285602, &(0x7f0000000b80)={0x2, 0x80000000, {0xfa, 0x1, 0x4}, 0x9, 0x0, 0x3, 0x9}) (async) sysctl$hw(&(0x7f0000000100)={0x7, 0x11}, 0x2, 0x0, 0x0, 0x0, 0x0) (async) accept(0xffffffffffffffff, &(0x7f0000000040)=@un=@abs, &(0x7f0000000080)=0x8) (async) sendto$unix(r1, &(0x7f0000000200)="7903f5a4f9160816e57e17539d3b3a4027628c5de0c16903d64f73a4c23710003ea60659c08333e6573f59d3dd69add42ab7ba18e62512bce69cf123b183f89e11a8c68c89432dc4e113942e265a9b9102213775893f3b879e0df471c2c028d6b36bbf87e1795f0693f71162b91f34ec15382df22611717dc9c44875c5dfa1bc4037e32dd75b349ba5d7c5548932710a3bef4409f56cfa5986828e716474987dec9a80c08fef86a15071a53e32", 0xad, 0x404, &(0x7f00000000c0)=@abs={0x4, 0x1, 0x0, 0x1}, 0x8) (async) 23.442051ms ago: executing program 0 (id=719): r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000240), 0x8, 0x0) ioctl$DIOCGETSTATES(r0, 0xc0104419, &(0x7f00000004c0)={0x1, &(0x7f0000001fc0)=[{0x0, ""/16, [{[@v6=@loopback, @v4=@broadcast]}, {[@v4=@remote, @v6=@loopback]}], {}, {}, @v6=@ipv4={""/10, ""/2, @local}}]}) setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) setreuid(0xee00, 0x0) setresuid(0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000040)='./file1\x00', 0x18289, 0x110) openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) write(r1, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) r2 = socket(0x18, 0x2, 0x0) connect(r2, &(0x7f0000000000)=@in6={0x1c, 0x18, 0x2, 0x7fff, '\x00', 0x2}, 0x1c) sendmsg$unix(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='('], 0x28}, 0x0) r3 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x40) mknod(&(0x7f00000000c0)='./file1\x00', 0x1000, 0x637d) getdents(r3, 0x0, 0x0) chroot(&(0x7f0000000140)='./file1\x00') mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) 21.801237ms ago: executing program 1 (id=720): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x8000, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt(r1, 0x3, 0x12, 0x0, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) (async) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x4, 0x53, 0x27, 0x82}, {0x48, 0x11, 0x4, 0xc}, {0x6, 0xa8, 0x6, 0xfffffffc}]}) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x100000000000000, 0xffffffffffffffff}) (async) sysctl$net_inet_tcp(0x0, 0x0, &(0x7f00000000c0)="9b180b", 0x0, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket(0x18, 0x1, 0x0) close(r2) (async) r3 = socket(0x18, 0x2, 0x0) (async) setuid(0xffffffffffffffff) setrlimit(0x8, &(0x7f0000000980)={0x45, 0x3fb}) r4 = syz_open_pts() close(r4) r5 = syz_open_pts() (async) ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x0, 0x9, {[0xfffffbfffffffffb, 0x1, 0x2, 0x100200000, 0x6, 0x7, 0xdf60, 0xffffffffffffffff, 0x0, 0x6, 0x93, 0xfffffffffffffff8, 0xffffffffffffffff, 0x200000000002, 0xd, 0x4, 0xfffffffffffffffe, 0x400000000100], [0xfffffffffffffffe, 0x80000001, 0xfffffffffffffffa, 0x20200001, 0x5e, 0x100000000007b98, 0x800, 0x9, 0x0, 0xfffffffffffffffe], [0x100000001, 0x8000, 0x40000000, 0x0, 0xb, 0x11000, 0xffffffff00000000], [0x9, 0x1fffffffffb, 0x80000001, 0x4000000, 0xfffffffffffffffe, 0x90000000], [{0x0, 0x0, 0x0, 0x7d06}, {0x9, 0x22, 0x5}, {0x4, 0x0, 0xfffefffe, 0x280}, {0x3, 0x4, 0x5, 0xffffffffffffffff}, {0x0, 0x2, 0x7f, 0x8}, {0x0, 0x9, 0x9, 0x2000000000000000}, {0x5, 0x0, 0xfffffff7, 0xb}, {0xe, 0x100, 0x1, 0xb}], {0x1, 0x8, 0x80000006, 0x3}, {0xfffe, 0x6, 0x6d5, 0x6}}}) (async) ioctl$VNDIOCSET(0xffffffffffffffff, 0xc0384600, &(0x7f00000003c0)={&(0x7f0000000340)='./file0\x00', 0xff, &(0x7f0000000380)='./file0\x00', 0x8}) (async) r6 = kqueue() kevent(r6, &(0x7f0000000040), 0x9ae8, 0x0, 0x91, 0x0) (async) close(r5) (async) ioctl$TIOCSETD(r4, 0x8004741b, &(0x7f0000000000)=0x7) writev(r4, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) (async) r7 = syz_open_pts() ioctl$TIOCSETD(r7, 0x8004741b, &(0x7f00000002c0)=0x8) connect$unix(r2, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) (async) connect$unix(r3, &(0x7f0000000040)=@abs={0xe, 0x0, 0x0, 0x3}, 0x8) (async) dup(r0) (async) syz_emit_ethernet(0x1000e, &(0x7f0000001500)=ANY=[]) 0s ago: executing program 7 (id=721): socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) (async) mknod(&(0x7f0000000100)='./bus\x00', 0x2000, 0xd02) (async) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc5005601, &(0x7f0000000000)={0x10, 0x0, [{&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000663000/0x4000)=nil, 0xfffffffffffff801}, {&(0x7f00006ac000/0x4000)=nil, 0x0, 0x3}, {&(0x7f0000060000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil}, {0x0, &(0x7f0000b1b000/0x2000)=nil}, {0x0, &(0x7f0000ffb000/0x1000)=nil}, {&(0x7f0000000000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil}, {0x0, 0x0, 0x3}, {&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil}, {&(0x7f0000ad4000/0x2000)=nil, &(0x7f0000826000/0x1000)=nil}, {&(0x7f0000110000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil}, {0x0, &(0x7f000065d000/0x2000)=nil, 0xdc9}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0xfffffffffffffffc}, {0x0, &(0x7f0000ffd000/0x3000)=nil}, {&(0x7f00004c1000/0x2000)=nil}, {&(0x7f00001cf000/0x4000)=nil}, {&(0x7f0000355000/0x13000)=nil, &(0x7f0000358000/0x2000)=nil}], './file0\x00', 0x7, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}) r0 = open(&(0x7f0000000240)='./bus\x00', 0x2, 0x111) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0xffffffff, 0xb, {0x0, 0x1}}) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) ioctl$VNDIOCSET(r0, 0x84946467, &(0x7f0000000000)={0x0, 0xffffffffffffffba, 0x0}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.174' (ED25519) to the list of known hosts. è|`ágE¶SiÛ뽩rÈLƒ‹Bx­S\9A?0Œ»®äÿË1ÛÑV.·{j pckbd_enable: command error load: 0.05 cmd: getty 84774 [ttyin] 0.00u 0.00s 0% 324k Connection to 10.128.1.174 closed by remote host. OpenBSD/amd64 (ci-openbsd-main-9.us-central1-b.c.syzkaller.internal) (tty00) login: pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error A\pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error uvm_fault(0xffffffff83a01ef0, 0xffff800029ef6000, 0, 2) -> e kernel: page fault trap, code=2 Stopped at kcov_remote_enter+0x122: movq $0,0(%rcx) TID PID UID PRFLAGS PFLAGS CPU COMMAND * 17551 11265 0 0 0x4000000 0 syz-executor kcov_remote_enter(0,ffff80002a7adb10) at kcov_remote_enter+0x122 timeout_run(ffffffff8385cea0,ffff80002a747d28) at timeout_run+0xdf softclock_process_tick_timeout(ffff80002a747d28,0) at softclock_process_tick_timeout+0x230 softclock(0) at softclock+0x152 softintr_dispatch(0) at softintr_dispatch+0xf9 dosoftint(0) at dosoftint+0x48 Xsoftclock() at Xsoftclock+0x27 spllower(0) at spllower+0xa2 pmap_extract(fffffd806bff7370,20000007f000,ffff80002f0bf698) at pmap_extract+0x260 uvm_fault_unwire_locked(fffffd8075854468,200000070000,200000081000) at uvm_fault_unwire_locked+0x28a uvm_vsunlock_device(ffff80002a746008,200000070140,10000,0) at uvm_vsunlock_device+0x160 physio(ffffffff82412780,d02,8000,ffffffff82412fd0,ffff80002f0bfb20) at physio+0x3ff spec_read(ffff80002f0bf900) at spec_read+0x142 VOP_READ(fffffd806f840980,ffff80002f0bfb20,0,fffffd8007ffd958) at VOP_READ+0x101 end trace frame: 0xffff80002f0bf9f0, count: 0 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb> ddb>