last executing test programs: 6.744348642s ago: executing program 0 (id=55): r0 = getpid() chmod(&(0x7f0000000040)='.\x00', 0x35e) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) chmod(&(0x7f0000000180)='./file0\x00', 0x23f) r1 = open$dir(&(0x7f0000001240)='.\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') setuid(0xee01) openat(r1, &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10000, 0x4c) r2 = socket(0x18, 0x5, 0x0) recvmsg(r2, &(0x7f0000000300)={&(0x7f0000000200)=@in, 0xc, &(0x7f00000002c0)=[{&(0x7f0000000280)}], 0x1, &(0x7f0000000440)=""/169, 0xa9}, 0x840) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x180) renameat(0xffffffffffffff9c, &(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r1, &(0x7f0000000240)='./file0\x00') ktrace(&(0x7f0000000000)='./file0\x00', 0x4, 0x510, r0) 6.741437767s ago: executing program 0 (id=58): mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6381) r0 = socket(0x11, 0x3, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0xd02) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000080)="76e5eac907f9ccf7a251ceddcec7d6aa45cffe2c63a56077123a276d3ba4e9d17eb3eb5db12a3783a8e0620d357de1fe04fa9465b5bd1286e9624dec06a00c222f", 0x41}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) unveil(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000300)='W\x00') open(&(0x7f00000001c0)='.\x00', 0x200, 0x68) sendto$unix(r0, &(0x7f0000000000)="b1000504000004000000a30000110000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42112000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x0, 0x0, 0x0) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0xc, 0x2000000000000004}, 0x0, 0x0, 0x0) r1 = kqueue() kevent(r1, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x10, 0x100) ioctl$WSDISPLAYIO_USEFONT(r2, 0x80585750, &(0x7f0000000140)={'./file0\x00', 0x2, 0x7fffffff, 0xffff, 0x0, 0x1000004, 0x4, 0x4000001, 0x1, 0x0, 0x6, 0xf1e}) ioctl$FIONBIO(r2, 0x82907003, &(0x7f0000000140)=0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r3, 0xffff, 0x4, 0x0, 0x0) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) ioctl$FIONBIO(r2, 0x82907003, &(0x7f0000000140)=0x1) close(r2) 5.822797369s ago: executing program 0 (id=127): mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1000, 0x0) r0 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0) ioctl$DIOCMAP(r0, 0xc0106477, &(0x7f0000000240)={&(0x7f0000000140)='./file0\x00', r0, 0x3}) syz_emit_ethernet(0x3e, &(0x7f0000000140)=ANY=[@ANYBLOB="3901639b6174aaaaaaaaaabb86dd60062e0b"]) execve(0x0, 0x0, 0x0) nanosleep(&(0x7f0000000280)={0x0, 0x1e49824d}, 0x0) unveil(0x0, &(0x7f00000001c0)='x\x00') mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1000, 0x0) (async) openat$diskmap(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0) (async) ioctl$DIOCMAP(r0, 0xc0106477, &(0x7f0000000240)={&(0x7f0000000140)='./file0\x00', r0, 0x3}) (async) syz_emit_ethernet(0x3e, &(0x7f0000000140)=ANY=[@ANYBLOB="3901639b6174aaaaaaaaaabb86dd60062e0b"]) (async) execve(0x0, 0x0, 0x0) (async) nanosleep(&(0x7f0000000280)={0x0, 0x1e49824d}, 0x0) (async) unveil(0x0, &(0x7f00000001c0)='x\x00') (async) 5.611700768s ago: executing program 0 (id=147): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) setrlimit(0x8, &(0x7f0000000100)={0x7, 0x54}) r1 = syz_open_pts() close(r1) r2 = syz_open_pts() ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f00000000c0)={0x0, 0x4, 0x8a38, 0x0, "07160a009cef01098b748200"}) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000140)="b5df", 0x2}], 0x1) r3 = dup2(r2, r1) ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000080)={0xd147, 0xffff, 0xfffffffe, 0x7fb, "2c0000ddff001200", 0x4, 0x4000007}) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r4 = open(&(0x7f0000000080)='./file0\x00', 0x40, 0x29) ioctl$WSMOUSEIO_SCALIBCOORDS(r4, 0x81205724, &(0x7f0000000100)={0x9, 0x8017, 0x7fffffff, 0x40, 0x0, 0x81ac, 0x10011, 0x10, [{0x0, 0x0, 0x4, 0x71002}, {0x800, 0x9, 0x8, 0x1}, {0x100, 0x9, 0x400, 0x9}, {0x1, 0x5, 0x8008}, {0x404, 0xd, 0x2800, 0x401}, {0x6, 0xfffffffd, 0x3, 0x99}, {0x2, 0x9, 0x4f7, 0x6c}, {0x6, 0x803, 0x10000014, 0x8}, {0x2, 0x7f, 0x5, 0x5}, {0x140, 0x8001, 0x6, 0x4}, {0x8f, 0x8000, 0x4, 0x7f}, {0x2008, 0x9, 0x604, 0x2}, {0xb8c, 0xa3c, 0x8, 0xb}, {0x29a71717, 0xfffffffa, 0x9, 0x80000001}, {0x7, 0x5, 0x9, 0x8}, {0x0, 0x3, 0xc, 0x88b0}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r4, 0x80184404, &(0x7f00000001c0)={0x0, 0xf, 0x0}) ioctl$VNDIOCSET(r4, 0x80044403, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0}) munmap(&(0x7f0000000000/0xf000)=nil, 0xf000) ioctl$TIOCSTOP(r2, 0x2000746f) poll(&(0x7f0000001300)=[{r3, 0x40}, {r4, 0x20}, {0xffffffffffffffff, 0x115}], 0x3, 0x1000) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000040)={0x3, &(0x7f0000000100)=[{0x48, 0x53, 0x9}, {0x2, 0x35, 0x46, 0xfffffffd}, {0x4, 0x19, 0x3, 0x7ffd}]}) setsockopt(0xffffffffffffffff, 0x1000000000029, 0x9, 0x0, 0x0) mknod(&(0x7f00000001c0)='./file0\x00', 0x2000, 0x6381) r5 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7960) writev(r5, &(0x7f0000000000)=[{0x0}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) open(&(0x7f00000002c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x24) r6 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x80, 0x0) munmap(&(0x7f00000ea000/0x4000)=nil, 0x4000) ioctl$BIOCSETIF(r6, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) ioctl$BIOCSETF(r6, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) 5.609402592s ago: executing program 0 (id=148): r0 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VMM_IOC_INFO(r0, 0xc0185603, &(0x7f0000000140)={0x56, 0x0, &(0x7f00000000c0)=""/86}) (async) r1 = syz_open_pts() ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000340)={0x5, 0x1, 0xfffffffe, 0x966b, "ff14e7130b1e586ca6294000", 0x40, 0x3effd}) (async) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000380)="079facfaae", 0x5}], 0x1) (async) ioctl$TIOCSETAW(r1, 0x802c7415, &(0x7f0000000000)={0x6, 0x7cd, 0x400, 0x0, "296438fe6c90e90f06142dbd32b73669cad5a2db", 0x7fffffff}) syz_open_pts() (async) setrlimit(0x8, 0x0) (async) r2 = syz_open_pts() ioctl$TIOCCONS(r2, 0x80047462, &(0x7f0000001840)=0xc) (async) r3 = syz_open_pts() ioctl$TIOCCONS(r3, 0x80047462, &(0x7f00000018c0)=0xdca) (async) r4 = dup2(r3, r3) ioctl$BIOCSETF(r4, 0x80104267, &(0x7f0000000040)={0x6, &(0x7f0000000000)=[{0xc098, 0x6, 0x2}, {0x3400, 0x3, 0x1, 0x3}, {0x0, 0x2, 0x4, 0x4b}, {0x8, 0x2, 0x9, 0x4}, {0x4, 0x7, 0x3e, 0x9}, {0x2, 0x3, 0x8, 0x8}]}) 5.469140722s ago: executing program 2 (id=156): r0 = socket(0x18, 0x1, 0x0) setsockopt(r0, 0x1000000000029, 0x9, &(0x7f0000000040)="03000000", 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setsockopt(r0, 0x1000000000029, 0xa, &(0x7f0000000340)='\x00\"\x00\x00', 0x4) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x6384) select(0x40, &(0x7f0000000180)={0xfffffffffffffff5, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffe, 0x2800000000000000, 0x181c, 0x8, 0x2000000000000004}, 0x0, 0x0, 0x0) r1 = kqueue() kevent(r1, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x80, 0x100) ioctl$FIONBIO(r2, 0x82907003, &(0x7f0000000140)=0x1) ioctl$BIOCSRTIMEOUT(r2, 0xc0307006, &(0x7f0000000080)={0x1, 0x10}) socket(0x18, 0x1, 0x0) (async) setsockopt(r0, 0x1000000000029, 0x9, &(0x7f0000000040)="03000000", 0x4) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) setsockopt(r0, 0x1000000000029, 0xa, &(0x7f0000000340)='\x00\"\x00\x00', 0x4) (async) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x6384) (async) select(0x40, &(0x7f0000000180)={0xfffffffffffffff5, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffe, 0x2800000000000000, 0x181c, 0x8, 0x2000000000000004}, 0x0, 0x0, 0x0) (async) kqueue() (async) kevent(r1, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) (async) open(&(0x7f0000000040)='./bus\x00', 0x80, 0x100) (async) ioctl$FIONBIO(r2, 0x82907003, &(0x7f0000000140)=0x1) (async) ioctl$BIOCSRTIMEOUT(r2, 0xc0307006, &(0x7f0000000080)={0x1, 0x10}) (async) 4.310120932s ago: executing program 6 (id=164): mknod(&(0x7f0000000040)='./file0\x00', 0x8, 0x13d4) pipe(&(0x7f0000000000)={0xffffffffffffffff}) socket(0x1e, 0x3, 0xfd) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x225, 0x0) fcntl$lock(r1, 0x7, &(0x7f0000000000)={0x2, 0x2, 0x6, 0x31}) (async) fcntl$lock(r1, 0x7, &(0x7f0000000000)={0x2, 0x2, 0x6, 0x31}) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0x1769) open(&(0x7f0000000540)='./bus\x00', 0x0, 0x0) linkat(r0, &(0x7f0000000080)='./file0\x00', r2, &(0x7f0000000100)='./file0\x00', 0x4) (async) linkat(r0, &(0x7f0000000080)='./file0\x00', r2, &(0x7f0000000100)='./file0\x00', 0x4) getsockopt$SO_PEERCRED(r3, 0xffff, 0x1022, &(0x7f0000000180)={0x0}, 0xc) ktrace(&(0x7f00000001c0)='./file0\x00', 0x4, 0x1b08, r4) (async) ktrace(&(0x7f00000001c0)='./file0\x00', 0x4, 0x1b08, r4) 4.309762222s ago: executing program 5 (id=165): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket(0x2, 0x4001, 0x0) r1 = socket(0x2, 0x4001, 0x0) r2 = dup(r1) r3 = fcntl$dupfd(r1, 0x2, r1) dup2(r1, r3) listen(r2, 0xb) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000500), 0x800, 0x0) r5 = fcntl$dupfd(r4, 0x2, 0xffffffffffffffff) openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) close(r5) r6 = socket(0x2, 0x2, 0x0) setsockopt$sock_int(r6, 0xffff, 0x1023, &(0x7f00000004c0), 0x4) setsockopt$sock_int(r0, 0xffff, 0x1023, &(0x7f0000001080)=0x7fff, 0x4) 4.304674235s ago: executing program 2 (id=167): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) chdir(&(0x7f0000000140)='./file0\x00') mkdir(&(0x7f0000000040)='./file0\x00', 0x5c) chdir(&(0x7f0000000380)='./file0\x00') setuid(0xffffffffffffffff) r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$TIOCSETA(r0, 0xc0284459, &(0x7f0000000740)={0x44, 0x0, 0x0, 0x0, "970508000000000000ecffffff00000100000004"}) unveil(&(0x7f0000000280)='.\x00', &(0x7f00000002c0)='r\x00') r1 = getuid() getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0xc) r3 = msgget$private(0x0, 0x3d0) msgsnd(r3, &(0x7f0000000000)={0x1}, 0x8, 0x1e259bbd030d0dd4) msgsnd(r3, &(0x7f0000000300)={0x3, "1cb917c14504baa7d743ffa45e0ab759ae10c6efa8b408ef93d84182688868e9f53fef58c7a83b57bf25c858e9a9e7a554b40dbcc36c83fb969211f16934fe0f9916"}, 0x4a, 0x800) msgrcv(r3, &(0x7f0000000400)={0x0, ""/69}, 0x4d, 0x3, 0x3000) setreuid(r1, r2) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) chdir(&(0x7f0000000140)='./file0\x00') (async) mkdir(&(0x7f0000000040)='./file0\x00', 0x5c) (async) chdir(&(0x7f0000000380)='./file0\x00') (async) setuid(0xffffffffffffffff) (async) openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) (async) ioctl$TIOCSETA(r0, 0xc0284459, &(0x7f0000000740)={0x44, 0x0, 0x0, 0x0, "970508000000000000ecffffff00000100000004"}) (async) unveil(&(0x7f0000000280)='.\x00', &(0x7f00000002c0)='r\x00') (async) getuid() (async) getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000000080), &(0x7f00000000c0)=0xc) (async) msgget$private(0x0, 0x3d0) (async) msgsnd(r3, &(0x7f0000000000)={0x1}, 0x8, 0x1e259bbd030d0dd4) (async) msgsnd(r3, &(0x7f0000000300)={0x3, "1cb917c14504baa7d743ffa45e0ab759ae10c6efa8b408ef93d84182688868e9f53fef58c7a83b57bf25c858e9a9e7a554b40dbcc36c83fb969211f16934fe0f9916"}, 0x4a, 0x800) (async) msgrcv(r3, &(0x7f0000000400)={0x0, ""/69}, 0x4d, 0x3, 0x3000) (async) setreuid(r1, r2) (async) 4.303011832s ago: executing program 7 (id=169): socket(0x1, 0x2, 0x0) (async) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)='m', 0x1}], 0x1) mknod(&(0x7f0000000040)='./bus\x00', 0x100000000205f, 0x2802) (async) open(&(0x7f00000000c0)='./bus\x00', 0x80, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x0) (async) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$TIOCCONS(r0, 0x80047462, 0x0) (async) select(0xd0, 0x0, &(0x7f0000000040)={0x600000000, 0x7, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x33, 0xfffffffffffffffc}, &(0x7f0000000080)={0x3, 0x3, 0x0, 0x8, 0x5b0, 0x0, 0x0, 0x2}, &(0x7f00000000c0)={0x0, 0x7ffe}) (async) mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0x1604) (async) open(&(0x7f0000000000)='./bus\x00', 0x400, 0x101) 4.253316507s ago: executing program 5 (id=171): mknod(&(0x7f0000000180)='./file0\x00', 0x2000, 0x40000800) r0 = open(&(0x7f0000000240)='./file0\x00', 0x70e, 0x24) ioctl$TIOCSETAF(r0, 0x802c7416, &(0x7f00000001c0)={0x9, 0x6be, 0x5, 0x5f, "7535105345ebe9703bec917ca917ff4c00000062", 0x601, 0x1}) writev(r0, 0x0, 0x0) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x10, 0x0) ioctl$TIOCSETA(r1, 0xc0504417, &(0x7f0000000740)={0x1, 0x1000000, 0x200200, 0x8, '\x00', 0x0, 0x2000011b}) ioctl$WSDISPLAYIO_GETSCREEN(r1, 0xc0245755, &(0x7f0000000080)={0xc5df, './file0\x00', './file0\x00'}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$net_inet_ip(0x0, 0x0, &(0x7f0000000140)="339a259527e88f75a83347e38ddf1598f9994f0b9174ced81ec07422b4b746882158dcf3ee605d4671135519f28351579b6b6be88d8d92b7d10e3592f3231673459bb0844198cd066af37e700528e159a1b3d399c59259138d201cdfc1e9fca663b65aefadec2f3300c1846ba32906927939cd9dde05f21c92a97fd52830e907c482430ba3dc865bc1dcc7b336", 0x0, 0x0, 0x0) r2 = socket(0x18, 0x3, 0x0) ioctl$FIONREAD(r2, 0x8020697a, &(0x7f00000001c0)) sendmsg(0xffffffffffffff9c, 0x0, 0x5) mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) mknod(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x0) chmod(&(0x7f0000000040)='.\x00', 0x35e) ioctl$WSKBDIO_GETENCODINGS(r0, 0xc0105715, &(0x7f0000000000)={0x3, [0x0, 0x0, 0x0]}) r3 = syz_open_pts() ioctl$TIOCDRAIN(r3, 0x2000745e) ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000001500)={0xffff81f9, 0x7f, 0x2, 0xc, "8b30edf0a8bc0e6acb548c9eb7ee79e389f7cdc2", 0xb6, 0x5}) 4.250825215s ago: executing program 5 (id=173): bind$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) ioctl$WSMOUSEIO_SETPARAMS(0xffffffffffffffff, 0x80105728, &(0x7f0000000040)={&(0x7f0000000000)=[{0x101, 0xf}, {0x8c, 0x7}, {0x84, 0x1007}], 0x3}) sysctl$kern(&(0x7f0000000040)={0x1, 0x45}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$kern(&(0x7f0000000040)={0x1, 0x3e}, 0x3, &(0x7f00000000c0)="3bf2ee74e747c82dad6eb2a36fa755e1a3925fe49afca7e63b52fa65ccaa74d6e6b85b6cdced70357ef201f97842b1068dca31553fa2d7031f38c03e56ad0e24dfc4f97b8b7f81499647e6e7725765d61436c85e43c15d12a78cb8c57ddde87021d7b685507fd3e0652f35e45bdaa3afd86c4fe557433e4c2b632de71c951516adff26aa2e48b45f8ce92bcefd3eceefabee7e3ebe806fdb4f6af569ae94b5d127", &(0x7f0000000080)=0x4, &(0x7f0000000340)="5a67923ef0cb189971421989ebcff78831a7581e2f27caa362f1363042efb27688b2c899220fb2fe37e467d974592496856ca7b78060998608c2f952e43bc0bf11555cc5cb0fe17b2ec1be389871829bfe10dd4c4d2c8f9da2bd2868fd86791dc09dc4fa89a217458bdaed31003fdc3a7323189ba3ccbad6c8af17516e4557f61ad20180000000000000125f568ca7d3396b9057255f381855110eb3a673713716cdf010ddfa7977f92cf061ad125ca670353b45d53aae196b00271f9d3452b523b3dea22d6027625614312183724b71c7eb02083a410c1c99fa455013521f98686e472b70b560f7021f567adf4d", 0x4) r0 = socket(0x2, 0x3, 0x0) r1 = dup(r0) setuid(0xffffffffffffffff) setsockopt$inet_opts(r1, 0x0, 0x15, &(0x7f0000000080)='\x00\x00\x00\x00', 0x4) sysctl$hw(&(0x7f00000010c0)={0x6, 0xc}, 0x2, 0xfffffffffffffffe, 0x0, 0x0, 0x0) 4.129880113s ago: executing program 5 (id=174): chdir(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) mkdir(&(0x7f0000000040)='./file0\x00', 0x5c) chdir(&(0x7f0000000380)='./file0\x00') setuid(0xee01) syz_emit_ethernet(0x9a, &(0x7f00000000c0)=ANY=[@ANYBLOB="e7"]) mknod(&(0x7f0000002380)='./file0\x00', 0x2000, 0x4270) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) unveil(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='x\x00') mknod(&(0x7f0000000040)='./file0\x00', 0x1000, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x4, 0x0) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0x4, 0xfffffffffffffffb, 0x2800000000000000, 0x181c, 0x800000000008, 0x7fffffffffffffff}, 0x0, 0x0, 0x0) ktrace(&(0x7f00000002c0)='./file0\x00', 0xd26aaf31ecf4cdd1, 0x530, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x20000, 0x7) 4.122425726s ago: executing program 6 (id=175): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000240)={'tap', 0x0}) getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, 0x0}, 0xc) setuid(r1) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x2, 0x6, 0x40, 0x3}, {0x48, 0x0, 0xfd, 0x5}, {0x400e, 0x25, 0x54, 0x7fffffff}]}) syz_emit_ethernet(0x1000e, &(0x7f00000001c0)=ANY=[]) 4.120013167s ago: executing program 6 (id=177): r0 = socket$inet(0x2, 0x3, 0x2) ioctl$FIONREAD(r0, 0xc0207534, &(0x7f0000000440)) r1 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) r2 = open(&(0x7f0000000140)='./file0\x00', 0x8, 0x8) r3 = getpid() ktrace(&(0x7f0000000280)='./file0\x00', 0x0, 0x928, r3) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5, 0x10, r2, 0x0) select(0x0, 0x0, &(0x7f0000000080)={0x5b, 0x2, 0x6, 0x10, 0x4, 0x4, 0x58da, 0x7f}, 0x0, &(0x7f0000000180)={0x7, 0xf6}) ioctl$BIOCGDIRFILT(r1, 0x4004427c, &(0x7f0000000040)) socket$inet(0x2, 0x3, 0x2) (async) ioctl$FIONREAD(r0, 0xc0207534, &(0x7f0000000440)) (async) openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) (async) open(&(0x7f0000000140)='./file0\x00', 0x8, 0x8) (async) getpid() (async) ktrace(&(0x7f0000000280)='./file0\x00', 0x0, 0x928, r3) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5, 0x10, r2, 0x0) (async) select(0x0, 0x0, &(0x7f0000000080)={0x5b, 0x2, 0x6, 0x10, 0x4, 0x4, 0x58da, 0x7f}, 0x0, &(0x7f0000000180)={0x7, 0xf6}) (async) ioctl$BIOCGDIRFILT(r1, 0x4004427c, &(0x7f0000000040)) (async) 4.113493516s ago: executing program 2 (id=179): r0 = syz_open_pts() poll(&(0x7f0000000140)=[{r0, 0x7}], 0x1, 0xffffffff) (async) ioctl$TIOCSETAF(r0, 0x802c7416, &(0x7f0000000040)={0x1, 0x800, 0xb, 0x79, "aeea9546e85f43c4e70a1e28986d53675b7d31b1", 0x5, 0x1}) r1 = open$dir(&(0x7f0000000100)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000a40)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r1, &(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') socket(0x18, 0x1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (async) socket(0x10, 0x3, 0x80) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) (async) mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0x450a) open(&(0x7f00000002c0)='./bus\x00', 0x2, 0x80) (async) r2 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$WSMUXIO_ADD_DEVICE(r2, 0x80085761, &(0x7f0000000040)={0x3, 0x1c}) (async) r3 = socket$inet6(0x18, 0x3, 0x0) (async) r4 = syz_open_pts() (async) r5 = kqueue() kevent(r5, &(0x7f0000000040)=[{{r4}, 0xfffffffffffffffe, 0x11, 0x1, 0x7, 0x73df}], 0x1, &(0x7f0000000100), 0x2, 0x0) (async) setrlimit(0x8, &(0x7f0000000080)={0x0, 0x1e9}) (async) r6 = syz_open_pts() close(r6) (async) getsockopt(r3, 0x29, 0x35, 0x0, 0x0) (async) open(0x0, 0x615, 0x0) r7 = socket(0x2, 0x5, 0x0) close(r7) (async) r8 = socket(0x2, 0x3, 0x0) close(r8) (async) socket(0x18, 0x2, 0xe) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x240}, 0x7, 0x5c7}) (async) connect$unix(r8, &(0x7f0000000300)=@file={0x0, './file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}, 0x101) setsockopt$sock_int(r7, 0xffff, 0x1001, &(0x7f0000000100)=0x20000, 0x4) 3.963221475s ago: executing program 7 (id=180): r0 = open(0x0, 0x615, 0x1) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, 0x12, r0, 0x81) socket(0x11, 0x3, 0x0) r1 = socket(0x18, 0x4001, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x100000000000000, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) sendto$inet(r1, &(0x7f0000000000)="66a0", 0x2, 0x3, 0x0, 0x0) 3.961979459s ago: executing program 7 (id=181): ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x2, 0x0, {[0xd, 0x1, 0x2, 0x1, 0xfffffffffffffffe, 0x0, 0xdf5a, 0x0, 0x5, 0x2eff, 0x5, 0x3, 0xffffffffffffffff, 0xffffffffffffffdf, 0x8000000, 0xa8, 0x2, 0xce7], [0xfffffffffffffffe, 0x1, 0xfffffffffffffffb, 0x8000ffffffff, 0x2, 0x7b99, 0x5, 0xb, 0x1], [0x100000001, 0x2, 0x40000000, 0x3, 0xfffffffffffffffc, 0x11003, 0xfffffffffffffffe], [0x100, 0x20000000000, 0x401, 0x100000000, 0xffffffffffefffff, 0x6], [{0x2, 0x3, 0x0, 0x7d06}, {0xfffc, 0x7, 0x4, 0x2}, {0x10, 0x1, 0x5bea, 0x814}, {0x3, 0x5, 0x7, 0x80000001}, {0xc, 0x6, 0x0, 0x808}, {0x400b, 0x2003, 0x40000, 0x7}, {0x1, 0x20000, 0x4, 0x8}, {0x5d74, 0x2, 0x1, 0x4}], {0x2000, 0x4, 0x10000, 0x4}, {0x0, 0x0, 0x3, 0x9}}}) r0 = kqueue() kevent(r0, &(0x7f0000000040)=[{{r0}, 0xfffffffffffffffa, 0x23, 0x20000008, 0x3c, 0x6}], 0x1, 0x0, 0x5, 0x0) r1 = getuid() (async) r2 = getgid() chown(&(0x7f0000000200)='./bus\x00', r1, r2) (async) setreuid(0x0, r1) (async) setuid(r1) unveil(0x0, &(0x7f0000000240)='c\x00') kevent(r0, &(0x7f0000000180)=[{{r0}, 0xfffffffffffffffa, 0x96, 0x2, 0x6, 0x8}, {{r0}, 0xffffffffffffffff, 0x1, 0x80, 0x9, 0x6}], 0x2, &(0x7f0000000240), 0x2, 0x0) (async) kevent(r0, &(0x7f0000000000), 0x3ff, 0x0, 0x8000800, 0x0) (async) mknod(&(0x7f0000000480)='./bus\x00', 0x2000, 0x412dff) (async) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) (async) r4 = shmget$private(0x0, 0x3000, 0x552, &(0x7f0000ffa000/0x3000)=nil) shmat(r4, &(0x7f0000001000/0x3000)=nil, 0x1000) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) sysctl$kern(&(0x7f0000000100)={0x1, 0x50}, 0x3, &(0x7f00000011c0)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xfe10, 0x0, 0xfffffffffffffff9) readv(r3, &(0x7f00000002c0)=[{&(0x7f0000003180)=""/4113, 0x1011}, {0x0}, {&(0x7f0000000240)=""/112, 0x70}], 0x3) 3.951252235s ago: executing program 7 (id=184): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) ioctl$WSMUXIO_REMOVE_DEVICE(0xffffffffffffffff, 0x80085762, &(0x7f0000000040)={0x1}) (async) r2 = socket(0x18, 0xc003, 0x3a) setsockopt(r2, 0x29, 0x6c, &(0x7f0000000040), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r2, 0x29, 0x66, &(0x7f00000003c0)={0x0, 0x1, 0x10, 0x3}, 0xc) (async, rerun: 32) r3 = socket(0x18, 0x1, 0x0) (rerun: 32) ioctl$FIONREAD(r3, 0xc028756b, &(0x7f00000000c0)) (async) bind$unix(r0, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x2}, 0x8) (async) open$dir(&(0x7f0000000100)='./file0\x00', 0x8, 0x80) (async, rerun: 64) r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x80, 0x0) (rerun: 64) ioctl$BIOCSETIF(r4, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) (async) ioctl$BIOCSETF(r4, 0x80104267, &(0x7f0000000000)={0x4, &(0x7f0000000040)=[{0x84, 0x82, 0x20, 0xfffffffd}, {0x15, 0x1, 0x1, 0x400}, {0x400e, 0x4, 0x53, 0xd}, {0x70ae, 0x81, 0x0, 0x4}]}) (async) ioctl$FIONBIO(r4, 0x8004667e, &(0x7f0000000040)=0x100) (async) write(r0, &(0x7f0000000000)="ed", 0x1) (async) recvmmsg(r1, &(0x7f0000000880)={&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000200)=""/173, 0xad}], 0x1, 0x0}}, 0x10, 0x2842, 0x0) (async) readv(r1, &(0x7f00000001c0)=[{&(0x7f00000002c0)=""/50, 0x32}], 0x1) 3.950781307s ago: executing program 2 (id=185): r0 = syz_open_pts() ioctl$TIOCDRAIN(r0, 0x2000745e) unveil(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='x\x00') readv(r0, &(0x7f0000000200)=[{&(0x7f0000000080)=""/190, 0xbe}, {&(0x7f0000000140)=""/189, 0xbd}], 0x2) semget(0x0, 0x4, 0x0) ioctl$TIOCSPGRP(r0, 0x40047477, &(0x7f0000000240)) r1 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000280), 0x20000, 0x0) r2 = openat$pci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r3 = openat$pci(0xffffffffffffff9c, &(0x7f00000003c0), 0x8, 0x0) r4 = dup(r0) kevent(0xffffffffffffffff, &(0x7f0000000300)=[{{r1}, 0xfffffffffffffffd, 0x2, 0x1, 0xba20, 0x9}, {{r0}, 0xffffffffffffffff, 0x8, 0x1, 0x8, 0x9}, {{r0}, 0xfffffffffffffff8, 0xc1, 0x2, 0x6, 0x6}, {{r2}, 0xfffffffffffffff9, 0xc0, 0x20000004, 0x147, 0x100000001}, {{r0}, 0xfffffffffffffffa, 0x20, 0x80, 0x5, 0x8001}, {{r0}, 0xfffffffffffffffc, 0x80, 0x0, 0x8, 0x80000001}], 0x0, &(0x7f0000000400)=[{{r3}, 0xfffffffffffffffc, 0x24, 0x20, 0xfffffffffffffff0, 0xfffffffffffff791}, {{r0}, 0x5, 0xc, 0x8, 0x2, 0x3}, {{r4}, 0xfffffffffffffffe, 0x0, 0x2, 0x95, 0x4}, {{r0}, 0xffffffffffffffff, 0x18, 0xa0000020, 0x7, 0x9}, {{r0}, 0x0, 0x9c, 0xffffb, 0x4, 0xfffffffffffffffb}], 0x3, &(0x7f00000004c0)={0x6, 0x3cf8}) openat$diskmap(0xffffffffffffff9c, &(0x7f0000000500), 0x8, 0x0) r5 = openat$klog(0xffffffffffffff9c, &(0x7f0000000540), 0x80, 0x0) close(r5) unlink(&(0x7f0000000580)='./file0\x00') rename(&(0x7f00000005c0)='./file1\x00', &(0x7f0000000600)='./file0\x00') ioctl$TIOCCLRVERAUTH(r0, 0x2000741d) bind$unix(r1, &(0x7f0000000640)=@file={0x1, './file0\x00'}, 0xa) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x10, r1, 0x1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x46f) ioctl$TIOCMBIC(0xffffffffffffffff, 0x8004746b, &(0x7f0000000680)=0x1000) r6 = open$dir(&(0x7f00000006c0)='./file1\x00', 0x0, 0x8) renameat(r6, &(0x7f0000000700)='./file1\x00', r4, &(0x7f0000000740)='./file0\x00') ioctl$TIOCGETD(r1, 0x4004741a, &(0x7f0000000780)) getgroups(0x3, &(0x7f0000000800)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]) chown(&(0x7f00000007c0)='./file0\x00', 0x0, r7) ioctl$TIOCMBIC(r1, 0x8004746b, &(0x7f0000000840)=0x9) chmod(&(0x7f0000000880)='./file1\x00', 0xa1) ioctl$BIOCGFILDROP(r1, 0x40044278, &(0x7f00000008c0)) socket$unix(0x1, 0x2, 0x0) 3.3519082s ago: executing program 4 (id=186): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket$inet(0x2, 0x8000, 0x7) setsockopt(r0, 0x6, 0x2, &(0x7f0000000000)="a4b1048d", 0x4) accept(r0, 0xfffffffffffffffe, &(0x7f0000000000)) 3.348202229s ago: executing program 4 (id=187): r0 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$TIOCGFLAGS(r0, 0x4004745d, 0x0) ioctl$TIOCSETA(r0, 0xcd50441a, &(0x7f0000000180)={0x2, 0x0, 0x1000202, 0x7, "182058b19edb1941ccee00000000001000", 0x80010}) sendto$unix(r0, 0x0, 0x0, 0x400, 0x0, 0x0) fsync(r0) syz_emit_ethernet(0x6a, &(0x7f0000000380)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb8100400086dd6880058000303b03356d0140558d3dfd766d0a62aab10b9bfe4d1aafbaf5c2c66da2acf4faeb1e580100907828"]) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6381) (async) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6381) r1 = open(&(0x7f0000000600)='./file0\x00', 0x0, 0x62) syz_emit_ethernet(0x3e, &(0x7f0000000140)=ANY=[@ANYBLOB="69e1629b6174aaaaaa"]) (async) syz_emit_ethernet(0x3e, &(0x7f0000000140)=ANY=[@ANYBLOB="69e1629b6174aaaaaa"]) ioctl$FIONBIO(r1, 0x82907003, &(0x7f0000000140)=0x3) getuid() (async) r2 = getuid() setreuid(0xee00, r2) getegid() (async) r3 = getegid() lchown(&(0x7f0000000040)='./file0\x00', r2, r3) 3.34756551s ago: executing program 5 (id=188): r0 = syz_open_pts() fcntl$lock(r0, 0x8, &(0x7f0000000080)={0x3, 0x0, 0x2, 0x1000100000000}) flock(r0, 0x3) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) sysctl$kern(&(0x7f00000001c0)={0x1, 0x9}, 0x2, 0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x2) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$VNDIOCSET(r1, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) fcntl$lock(r0, 0x8, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x100000001}) 3.345433704s ago: executing program 6 (id=189): r0 = socket(0x18, 0xc003, 0x3a) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x10}, {}], 0x2, 0x0) getsockopt$sock_int(r0, 0xffff, 0x1008, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 3.344942987s ago: executing program 1 (id=190): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$BIOCGDLTLIST(r0, 0xc010427b, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[0x0, 0x6]}) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f00000002c0)={0x4, &(0x7f0000000000)=[{0xc, 0x25, 0x3, 0x5}, {0x7, 0x2, 0x1, 0x1}, {0x9e, 0xf3, 0x98, 0xca}, {0x34b, 0x12, 0x98, 0x6}]}) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffff"]) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r2 = fcntl$dupfd(r1, 0x2, r1) close(r2) ioctl$FIONBIO(r2, 0x8004667e, &(0x7f0000000180)=0x5) r3 = socket(0x2, 0x2, 0x0) connect$unix(r3, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0xa) r4 = socket(0x18, 0x2, 0x0) setsockopt$sock_int(r4, 0xffff, 0x1023, &(0x7f0000000080)=0x83, 0x4) read(r2, 0x0, 0x0) write(r0, &(0x7f0000000080)="d81ad3d20cf7eb4e9b0800bc1a30", 0xe) syz_extract_tcp_res(&(0x7f0000000140), 0x7, 0x7) shmctl$IPC_RMID(0x0, 0x0) 3.27293992s ago: executing program 6 (id=191): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="28000000ffff000001"], 0x28}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x2000, 0xa) (async) rename(&(0x7f0000004d40)='.\x00', &(0x7f0000004d80)='./file0\x00') recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/51, 0x33}, 0x800) (async) pipe(&(0x7f0000000000)) (async) syz_emit_ethernet(0xe, &(0x7f00000001c0)={@local, @empty, [], {@generic={0x806}}}) (async) munmap(&(0x7f0000800000/0x800000)=nil, 0x800000) (async) mquery(&(0x7f0000ff4000/0x1000)=nil, 0x7ed841f1e000, 0x0, 0x0, 0xffffffffffffffff, 0x0) 3.269828631s ago: executing program 1 (id=192): syz_emit_ethernet(0x3e, &(0x7f0000000040)=ANY=[@ANYBLOB="ffffffffffff00000000000048004500ffc9006600000011907800000000ffffffff030090780008000045000000000000000000000000000000e00000013e2f1642a3c4c6cfb150efcaecc668a414b9a7e3e4a9c78516eb1f41801b19f7cd1941e0b74138004b50e4f0dbcea0c8c08823c31c44b8884a854c"]) syz_emit_ethernet(0x1000e, &(0x7f0000000000)=ANY=[]) 3.26896084s ago: executing program 1 (id=193): mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x8000, 0x10) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x15, 0x2000007, 0x0, 0x80000001, 0xc, 0x5, 0x10, [{0xd, 0x7, 0x4, 0x71000}, {0x7, 0x2, 0x8, 0x7}, {0x9, 0x0, 0x200000, 0x9}, {0x5e9, 0x903, 0x11}, {0x1, 0x200326, 0x27ff, 0x7}, {0x2, 0x27f3, 0x1004, 0x99}, {0xce5, 0x4, 0x4f8, 0x6d}, {0x6, 0x801, 0x81, 0x207}, {0x2, 0x82, 0x5, 0x9}, {0x2007, 0x100, 0xd1b, 0x3}, {0x1e7, 0x10001, 0x8, 0x6}, {0x800, 0x9, 0x2008, 0x9}, {0xb92, 0x4, 0x8, 0x2}, {0x29a7171a, 0x8, 0x1, 0x4}, {0xc, 0x7, 0x8000001, 0xfffffffe}, {0x0, 0x1, 0x3c, 0x8001}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x7ebd, 0x0}) ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) fcntl$getflags(r0, 0x1) r1 = socket(0x11, 0x3, 0x0) close(r1) unveil(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='r\x00') 3.268537269s ago: executing program 4 (id=194): mknod(&(0x7f0000000000)='./file0\x00', 0x6000, 0x637e) open(&(0x7f0000000040)='./file0\x00', 0x40, 0x100) openat$vnd(0xffffffffffffff9c, &(0x7f0000000380), 0x80, 0x0) openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x8, 0xffffffffffffffff, 0xfffffffffffffffd, 0x800, 0x181c, 0xa, 0x2}, 0x0, 0x0, 0x0) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) 3.221866751s ago: executing program 4 (id=196): mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6381) (async, rerun: 32) select(0x40, &(0x7f0000000180)={0xfffffffffffffffd, 0x244809e9d, 0xffffffffffffffff, 0x1, 0x2000000000000000, 0x4000181c, 0x8, 0x9}, 0x0, 0x0, 0x0) (async, rerun: 32) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_opts(r0, 0x0, 0x64, &(0x7f0000000240)="01000000", 0x4) (async) setsockopt(r0, 0x0, 0x66, 0x0, 0x0) (async) accept(r0, 0x0, &(0x7f00000001c0)) select(0x40, &(0x7f0000000040)={0x7, 0x1, 0xa173, 0x9, 0x1, 0xfffffffffffffffd, 0x10001, 0x3}, &(0x7f0000000080)={0x1, 0x7, 0x3, 0x6, 0x5a2, 0x7, 0xfffffffffffffff8, 0x8}, &(0x7f00000000c0)={0x3, 0xd36, 0x0, 0x80000001, 0x3, 0x6, 0x7, 0x10}, &(0x7f0000000100)={0x7, 0x1}) r1 = kqueue() kevent(r1, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x19, 0x0) (async, rerun: 32) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="fffffffffffd94ea09066dbd86dd60db8344c01b88f1fe8040aa86f182c700000000000000000000000000bb"]) (rerun: 32) r2 = open(&(0x7f0000000300)='./file0\x00', 0x40, 0x100) ioctl$WSDISPLAYIO_USEFONT(r2, 0x80585750, &(0x7f0000000140)={'./file0\x00', 0xffffffce, 0xc5, 0x7, 0x0, 0x8, 0xffffffff, 0x80000001, 0x1, 0x1, 0x100000001, 0xfe}) ioctl$FIONBIO(r2, 0x82907003, &(0x7f0000000140)=0x2) ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file0\x00', 0x248f, 0x80, 0xffff, 0x1, 0x39, 0xe4e, 0x4000001, 0x2, 0x2, 0x1, 0x6}) (async) ioctl$FIONBIO(r2, 0x82907003, &(0x7f0000000140)=0x1) 3.169450382s ago: executing program 3 (id=200): r0 = syz_open_pts() pwrite(r0, 0x0, 0x0, 0xe4) mlockall(0x0) r1 = socket(0x18, 0x3, 0x0) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x80, 0x0) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSETF(r2, 0x80104267, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x81, 0x8d, 0x11, 0x80000004}, {0x64, 0xfd, 0x72}, {0x6, 0xf9, 0x5, 0xfffffffa}]}) pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000006c0)}], 0xfffffffffffffdf, 0x0) syz_emit_ethernet(0x1000e, &(0x7f0000000080)=ANY=[]) setsockopt(r1, 0x1000000029, 0x39, &(0x7f0000000000)="5ab7776a", 0x4) syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[@ANYBLOB="69e1629b6174391e7dd7a2d786dd60b6000000302c03cb697a653e336f000000500000000000ff020000000000000000000000000001"]) 3.168834295s ago: executing program 3 (id=201): msgget(0x2, 0x0) socket(0x2, 0x1, 0x0) (async) r0 = socket(0x2, 0x1, 0x0) shutdown(r0, 0x2) open(&(0x7f0000000040)='./file0\x00', 0x200, 0x0) (async) r1 = open(&(0x7f0000000040)='./file0\x00', 0x200, 0x0) r2 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4) openat$speaker(0xffffffffffffff9c, &(0x7f0000000140), 0x782, 0x0) (async) r3 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000140), 0x782, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) kqueue() ioctl$SPKRTUNE(r3, 0x20005302, &(0x7f0000000040)={0xa2e5, 0x401}) (async) ioctl$SPKRTUNE(r3, 0x20005302, &(0x7f0000000040)={0xa2e5, 0x401}) ioctl$WSMOUSEIO_SETPARAMS(r2, 0x80105728, &(0x7f00000001c0)={&(0x7f0000000080)=[{0x7, 0x4}, {0x100}], 0x2}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r4, 0xffff, 0x1002, &(0x7f0000000240)=0x34, 0x4) (async) setsockopt$sock_int(r4, 0xffff, 0x1002, &(0x7f0000000240)=0x34, 0x4) r6 = open(&(0x7f0000000080)='./file0\x00', 0x10, 0x100) ioctl$FIONBIO(r6, 0x82907003, &(0x7f0000000140)=0x2) ioctl$WSDISPLAYIO_USEFONT(r6, 0x80585750, &(0x7f0000000140)={'./file1\x00', 0x3, 0xf82a, 0xd, 0x0, 0x2, 0x2, 0x3f, 0x2, 0x0, 0x100000000642, 0x3}) close(r6) ioctl$WSMOUSEIO_GTYPE(r6, 0x40045720, &(0x7f00000000c0)) sendmsg(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="04010000ffff000001"], 0x104}, 0x0) r7 = socket(0x18, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x2, 0xffffffffffffffff) kqueue() kevent(r1, &(0x7f0000000080)=[{{r8}, 0xfffffffffffffffc, 0x41, 0xf0000000, 0xc, 0x6}], 0x1005, 0x0, 0x37, 0x0) (async) kevent(r1, &(0x7f0000000080)=[{{r8}, 0xfffffffffffffffc, 0x41, 0xf0000000, 0xc, 0x6}], 0x1005, 0x0, 0x37, 0x0) acct(0x0) (async) acct(0x0) acct(&(0x7f0000000080)='./file0\x00') (async) acct(&(0x7f0000000080)='./file0\x00') 3.167523208s ago: executing program 1 (id=202): openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x20, 0x0) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000080)="76e5eac907f9ccf7a251ceddcec7d6aa45cffe2c63a56077123a276d3ba4e9d17eb3eb5db12a3783a8e0620d357de1fe04fa9465b5bd1286e9624dec06a00c222f", 0x41}], 0x1) openat$speaker(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) semget(0x0, 0x0, 0x206) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$kern(&(0x7f00000002c0)={0x1, 0x4d}, 0x2, 0x0, 0x0, &(0x7f00000003c0), 0x0) unveil(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000100)='r\x00') r0 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r1 = open(&(0x7f0000000080)='./file0\x00', 0x8000, 0xa) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x17, 0x2000007, 0x101, 0x80000001, 0x80000081, 0x5, 0x10, [{0x0, 0x7, 0x0, 0x71000}, {0x1, 0x88, 0x8, 0x7}, {0x8, 0x106, 0x0, 0x9}, {0x1, 0x0, 0xe}, {0x7, 0x5, 0x2800, 0x7}, {0x2, 0x37f3, 0x3, 0x99}, {0xce1, 0x1, 0x4f8, 0x6d}, {0x5, 0x7fd, 0x8, 0x9}, {0xffffff7f, 0x82, 0x5, 0x9}, {0x3, 0x100, 0xd19, 0x1088}, {0x1e6, 0x10001, 0x7, 0x6}, {0x800, 0x9, 0x8, 0xb}, {0x38e, 0x4, 0x8, 0x4}, {0x29a7171a, 0x8, 0x1, 0x4}, {0xc, 0x7, 0x4, 0xc3}, {0x0, 0xfffffff9, 0x1002, 0x30001}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$VNDIOCSET(r1, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r1, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x2, 0x0, 0x0, 0x2000100000002}) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r2 = socket(0x1e, 0x3, 0x0) ioctl$FIONREAD(r2, 0x801169ab, &(0x7f00000001c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) recvfrom$unix(r3, &(0x7f00000001c0)=""/186, 0xba, 0x40, &(0x7f0000000300)=@file={0x1, './bus\x00'}, 0x8) ioctl$VMM_IOC_INTR(r0, 0x800c5606, &(0x7f0000000140)={0xfffffc01, 0xe81, 0x7}) openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x10000, 0x0) 3.166755579s ago: executing program 4 (id=203): recvmmsg(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000ac0), 0x0, 0x0}, 0x5f7c}, 0x10, 0x2843, 0x0) mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0xd02) r0 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/104}, {&(0x7f0000000140)=""/192, 0x100000}, {&(0x7f0000000340)=""/175}, {&(0x7f0000000000)=""/18}], 0x10000000000002b8, 0x0) (async) preadv(r0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/104}, {&(0x7f0000000140)=""/192, 0x100000}, {&(0x7f0000000340)=""/175}, {&(0x7f0000000000)=""/18}], 0x10000000000002b8, 0x0) shmdt(0x0) (async) shmdt(0x0) syz_emit_ethernet(0x66, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd605d34520030000000000000000000000000000000000000000000009f0500040000000000000001010090"]) mknod(&(0x7f00000000c0)='./bus\x00', 0x2008, 0xd00) (async) mknod(&(0x7f00000000c0)='./bus\x00', 0x2008, 0xd00) open(&(0x7f0000000280)='./bus\x00', 0x2, 0x1c4) (async) r1 = open(&(0x7f0000000280)='./bus\x00', 0x2, 0x1c4) setgroups(0x0, 0x0) setuid(0xffffffffffffffff) (async) setuid(0xffffffffffffffff) openat$bpf(0xffffffffffffff9c, &(0x7f0000000340), 0x18170, 0x0) (async) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000340), 0x18170, 0x0) ioctl$BIOCIMMEDIATE(r2, 0x8010427e, 0x0) ioctl$BIOCSETIF(r2, 0x8020426c, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) syz_emit_ethernet(0x1000e, 0x0) syz_emit_ethernet(0x32, &(0x7f00000020c0)=ANY=[]) (async) syz_emit_ethernet(0x32, &(0x7f00000020c0)=ANY=[]) mknod(&(0x7f00000000c0)='./bus\x00', 0x3a0914c44f7b202d, 0x2000504) open(&(0x7f0000000040)='./bus\x00', 0x4, 0x0) ioctl$BIOCSETF(r2, 0x80104267, &(0x7f0000000100)={0x0, 0x0}) getuid() (async) r3 = getuid() getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, 0x0, &(0x7f0000000240)) setreuid(r3, 0x0) unveil(&(0x7f0000000080)='.\x00', &(0x7f00000002c0)='c\x00') socket(0x800000018, 0x2, 0x0) (async) r4 = socket(0x800000018, 0x2, 0x0) setsockopt$sock_int(r4, 0xffff, 0x1, &(0x7f0000000300)=0xfffffe01, 0x11) (async) setsockopt$sock_int(r4, 0xffff, 0x1, &(0x7f0000000300)=0xfffffe01, 0x11) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) bind$unix(r4, 0x0, 0x0) sendmsg$unix(r4, 0x0, 0x404) ioctl$VNDIOCSET(r1, 0x81946466, &(0x7f00000002c0)={0x0, 0x1, 0x0}) 3.165446824s ago: executing program 3 (id=204): open(&(0x7f0000000140)='./file1\x00', 0x78e, 0x20) setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x10000000000002}}) semop(0x0, &(0x7f00000000c0)=[{0x2, 0x0, 0x1000}, {0x0, 0x2ff, 0x800}], 0x2) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f00000000c0), 0x1c, 0x0}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket(0x18, 0x2, 0x0) setsockopt(r1, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) sendmsg$unix(r1, &(0x7f0000001700)={0x0, 0xffffffb3, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0) r2 = getuid() r3 = getuid() chown(&(0x7f0000000040)='./file0\x00', r3, 0x0) setreuid(0xee00, r2) chmod(&(0x7f0000000080)='./file0\x00', 0x2ea) chdir(&(0x7f0000000100)='./file0\x00') mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0e99db6de761f86, 0x0) open$dir(&(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x31) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)="76e5eac907f9ccf7a251ceddcec7d6aa45cffe2c63a56077123a276d3ba4e9d17eb3eb5db12a3783a8e0620d357de1fe04fa9465b5bd1286e9624dec06a00c222f", 0x41}], 0x1) rename(&(0x7f0000000100)='./file0\x00', 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r4, &(0x7f0000000040)=@file={0xd19450564dee018c, './file0\x00'}, 0xa) chmod(&(0x7f0000000180)='./file0\x00', 0x23f) setreuid(0x0, 0xee01) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000000)=@file={0xd1653077bafa0114, './file0\x00'}, 0xa) 3.100368498s ago: executing program 3 (id=205): mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x205318) sysctl$kern(&(0x7f0000000040)={0x1, 0x45}, 0x2, 0x0, 0x0, 0x0, 0x0) (async) sysctl$kern(&(0x7f0000000040)={0x1, 0x45}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$kern(&(0x7f0000000040)={0x1, 0x4f}, 0x4, &(0x7f00000000c0)="3bf2ee74e747c82dad6eb2a36fa755e1a3925fe49afca7e63b52fa65ccaa74d6e6b85b6cdced70357ef201f97842b1068dca31553fa2d7031f38c03e56ad0e24dfc4f97b8b7f81499647e6e7725765d61436c85e43c15d12a78cb8c57ddde87021d7b685507fd3e0652f35e45bdaa3afd86c4fe557433e4c2b632de71c951516adff26aa2e48b45f8ce92bcefd3eceefabee7e3ebe806fdb4f6af569ae94b5d127", &(0x7f0000000080)=0x4, &(0x7f0000000340)="5a67923ef0cb189971421989ebcff78831a7581e2f27caa362f1363042efb27688b2c899220fb2fe37e467d974592496856ca7b78060998608c2f952e43bc0bf11555cc5cb0fe17b2ec1be389871829bfe10dd4c4d2c8f9da2bd2868fd86791dc09dc4fa89a217458bdaed31003fdc3a7323189ba3ccbad6c8af17516e4557f61ad20180000000000000125f568ca7d3396b9057255f381855110eb3a673713716cdf010ddfa7977f92cf061ad125ca670353b45d53aae196b00271f9d3452b523b3dea22d6027625614312183724b71c7eb02083a410c1c99fa455013521f98686e472b70b560f7021f567adf4d", 0xfffffdfd) r0 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000280), 0x10, 0x0) ioctl$VNDIOCSET(r0, 0xc0384600, &(0x7f0000000440)={&(0x7f0000000140)='./bus\x00', 0x7fff, 0x0}) 3.083995193s ago: executing program 1 (id=206): setgroups(0x0, 0x0) setuid(0xffffffffffffffff) syz_open_pts() r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000400), 0x8, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) getuid() chown(0x0, 0x0, 0xffffffffffffffff) syz_emit_ethernet(0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="ffffff0600000000000000aa8015430e91328864e533f5cdfd2410e67e85f1cc3233f18bb8db3f432bc8f2beae81e7144a870ecd968f72ce3828ae5d07d0a19eab9bc31d0e43de97767e"]) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) setrlimit(0x8, &(0x7f0000000580)={0xa, 0x56}) r1 = syz_open_pts() close(r1) r2 = syz_open_pts() ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000340)={0x8, 0x5, 0xffffdf82, 0xffffff8c, "08ed95990000000000000000ffffffffffffffe6", 0x4, 0x4}) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b1000503000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102", 0x62, 0x0, 0x0, 0x0) sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b10005136000009f0500000020", 0xd, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r3 = socket(0x11, 0x3, 0x0) sendto$unix(r3, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a421020000df710fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x0, 0x0, 0x0) readv(r2, &(0x7f0000000040)=[{&(0x7f0000000000)=""/18, 0x12}], 0x1) r4 = socket$inet(0x2, 0x3, 0x3) ioctl$FIONREAD(r4, 0x80206979, &(0x7f0000000000)) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x84, 0x8, 0xf, 0x3}]}) 3.083411193s ago: executing program 7 (id=207): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x80, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000240)={'tap', 0x0}) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r1 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x29) ioctl$WSMOUSEIO_SCALIBCOORDS(r1, 0x81205724, &(0x7f0000000100)={0x7ff, 0x8018, 0x2000005, 0x101, 0x80000001, 0x10081b0, 0x10001, 0x10, [{0x0, 0x2890, 0x4, 0x71002}, {0x6, 0x9, 0x4, 0xfffffff9}, {0x7, 0xf88, 0x0, 0x9}, {0x4, 0x800, 0x0, 0x7}, {0x401, 0x3, 0x2802, 0x7}, {0x1, 0x650, 0x3, 0x99}, {0xce1, 0xfffffffb, 0x4f8, 0x6d}, {0x6, 0x803, 0x14, 0x8}, {0x6, 0x6, 0x5, 0x5}, {0x6a75, 0x8001, 0x6, 0x4}, {0x1cc, 0x10001, 0xc, 0x3}, {0x8, 0x9, 0x8, 0x2}, {0xb94, 0x7, 0x4, 0x1}, {0x29a71717, 0xfffffffa, 0x1, 0x6}, {0x1000c, 0x1, 0x2, 0x10000000}, {0x0, 0x1, 0xfff, 0x2}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r1, 0x80184404, &(0x7f00000001c0)={0x0, 0x8, 0x0}) ioctl$VNDIOCSET(r1, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) setuid(0xffffffffffffffff) ioctl$BIOCSBLEN(r0, 0xc0044266, &(0x7f0000000040)=0x40) r2 = msgget(0x3, 0x280) setegid(0xffffffffffffffff) faccessat(0xffffffffffffffff, 0x0, 0x5, 0x0) msgrcv(r2, 0x0, 0x0, 0x3, 0x1000) open$dir(&(0x7f0000000b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0xc9) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000b40)="000000003d1e6ed7eda0f59047bf65b18d7c51f78306ccffb4050000000000009dd52840fafd3493857d65d4cd12c63d34", 0x31}], 0x1, 0x0, 0x0, 0x406}, 0x0) r3 = openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x280, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6000, 0x416) open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$TIOCSETA(r3, 0xc4504446, &(0x7f0000000740)={0x2f, 0x5, 0xa9, 0x0, "0400000000800000ebb178d952d6d31962fff0d1", 0x9, 0x2}) msgctl$IPC_RMID(r2, 0x2000000) sysctl$hw(&(0x7f0000000040)={0x6, 0x16}, 0x2, &(0x7f0000000080)="a3cfcac7", &(0x7f0000000140)=0x4, &(0x7f0000000180), 0x0) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x15}, 0xa7, 0xfffe, 0x0, 0x0, 0x5, 0x4, 0x1}) r4 = msgget$private(0x0, 0x790) msgsnd(r4, &(0x7f0000000100)=ANY=[@ANYRES8], 0x401, 0x0) msgrcv(r4, &(0x7f0000001440)={0x0, ""/4098}, 0x602, 0x3, 0x800) msgsnd(r4, 0x0, 0x401, 0x800) msgctl$IPC_RMID(r4, 0x0) 3.075941955s ago: executing program 2 (id=208): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) chroot(&(0x7f0000000100)='./file0/file0\x00') semget(0x0, 0x1, 0x281) bind(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x18, 0x3, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) setsockopt$sock_int(r1, 0xffff, 0x1002, &(0x7f0000000100)=0x7fff, 0x4) pipe2(&(0x7f0000000380), 0x0) setgid(0xffffffffffffffff) setgroups(0x0, 0x0) setuid(0xffffffffffffffff) r2 = semget(0x0, 0x0, 0x428) semctl$GETZCNT(r2, 0x0, 0x7, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) openat$bpf(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_emit_ethernet(0x1000e, 0x0) r3 = socket(0x18, 0x3, 0x0) fcntl$lock(0xffffffffffffffff, 0x8, 0x0) r4 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r4, 0xc0106924, &(0x7f00000001c0)) ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file0/file0\x00', 0x4, 0xc0, 0x0, 0x1, 0x7ff, 0x4, 0xfffffffc, 0x1, 0x1, 0x5, 0x100}) setitimer(0x1, &(0x7f0000000140)={{0xc, 0x100000000000009}, {0xdfffff7fffffffff, 0x1}}, 0x0) ioctl$FIONREAD(r3, 0x81206919, &(0x7f0000000100)) socket(0x6, 0x3, 0x81) getsockopt$sock_cred(r0, 0xffff, 0x1022, 0x0, &(0x7f0000000340)) ioctl$FIONREAD(r3, 0x8080691a, &(0x7f0000000100)) munmap(&(0x7f0000001000/0x400000)=nil, 0x400000) listen(0xffffffffffffffff, 0x0) 3.044166737s ago: executing program 3 (id=209): mknod(&(0x7f0000000480)='./bus\x00', 0x2100, 0x7) r0 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000001500)=""/4097, 0x1001}, {&(0x7f00000004c0)=""/4101, 0x1005}], 0x2) 3.043112463s ago: executing program 1 (id=210): r0 = getppid() fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x3ff, r0}) (async) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x3ff, r0}) wait4(r0, &(0x7f0000000040), 0x2, &(0x7f0000000080)) openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0) (async) r1 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0) ioctl$WSMOUSEIO_SETPARAMS(r1, 0x80105728, &(0x7f00000001c0)={&(0x7f0000000180)=[{0x0, 0x4}, {0x7, 0x68b}, {0x23, 0x2}, {0x20, 0xe1e0}], 0x4}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt(r2, 0x69f, 0x5, &(0x7f0000000240)="6e0eb96a6b03bb135be5264f44d4929ccec1dcf6904e675cac1904731db364acb873f0c729ce7b7d62d381430fd7069d4a5f42700b00b4bb68379dcd5970f61e5fd4877614cdde0f8c91d4748153d81b74a2876c36870427712cf11ad33ccaf01c5f6cbeffac93798e44fce8591dd8fb48f922f77fa80d690113032fafc2935405cffd3b29f12f510a46d7221a3e8b214bd09a29ed0adf21e5a37fafe97efb575795a7eb6f44b99dd81391", 0xab) (async) setsockopt(r2, 0x69f, 0x5, &(0x7f0000000240)="6e0eb96a6b03bb135be5264f44d4929ccec1dcf6904e675cac1904731db364acb873f0c729ce7b7d62d381430fd7069d4a5f42700b00b4bb68379dcd5970f61e5fd4877614cdde0f8c91d4748153d81b74a2876c36870427712cf11ad33ccaf01c5f6cbeffac93798e44fce8591dd8fb48f922f77fa80d690113032fafc2935405cffd3b29f12f510a46d7221a3e8b214bd09a29ed0adf21e5a37fafe97efb575795a7eb6f44b99dd81391", 0xab) bind$inet(0xffffffffffffff9c, &(0x7f0000000300)={0x2, 0x0}, 0xc) r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000340), 0x1, 0x0) ioctl$BIOCIMMEDIATE(r4, 0x80044270, &(0x7f0000000380)) (async) ioctl$BIOCIMMEDIATE(r4, 0x80044270, &(0x7f0000000380)) getpid() bind$unix(r2, &(0x7f00000003c0)=@abs={0x1, 0x0, 0x1}, 0x8) ioctl$BIOCSETIF(r4, 0x8020426c, &(0x7f0000000400)={'tap', 0x0}) (async) ioctl$BIOCSETIF(r4, 0x8020426c, &(0x7f0000000400)={'tap', 0x0}) ioctl$FIONREAD(r2, 0x4004667f, &(0x7f0000000440)) pipe2(&(0x7f0000000480), 0x4) (async) pipe2(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) ioctl$VT_RELDISP(r5, 0x20007604, &(0x7f00000004c0)=0x2) (async) ioctl$VT_RELDISP(r5, 0x20007604, &(0x7f00000004c0)=0x2) r7 = fcntl$dupfd(r2, 0x0, r3) ioctl$FIONREAD(r4, 0x4004667f, &(0x7f0000000500)) ioctl$TIOCSETA(r7, 0x802c7414, &(0x7f0000000540)={0x1, 0x5, 0x1, 0x3, "b6d3752f631e0dc119931ed56c8859b5e1b131c7", 0x8c0, 0x80}) r8 = syz_open_pts() readv(r8, &(0x7f0000000bc0)=[{&(0x7f0000000580)=""/203, 0xcb}, {&(0x7f0000000680)=""/170, 0xaa}, {&(0x7f0000000740)=""/112, 0x70}, {&(0x7f00000007c0)=""/140, 0x8c}, {&(0x7f0000000880)=""/249, 0xf9}, {&(0x7f0000000980)=""/174, 0xae}, {&(0x7f0000000a40)=""/78, 0x4e}, {&(0x7f0000000ac0)=""/215, 0xd7}], 0x8) dup2(r6, r2) (async) r9 = dup2(r6, r2) fcntl$getown(r9, 0x5) (async) fcntl$getown(r9, 0x5) fcntl$setstatus(r8, 0x4, 0x8) socket(0x2, 0x4, 0xe) (async) socket(0x2, 0x4, 0xe) ioctl$KDGETLED(0xffffffffffffff9c, 0x40044b41, &(0x7f0000000c40)=0x1) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000) openat$vmm(0xffffffffffffff9c, &(0x7f0000000c80), 0x0, 0x0) ioctl$VNDIOCSET(r5, 0xc0384600, &(0x7f0000000d40)={&(0x7f0000000cc0)='./file0\x00', 0x51, &(0x7f0000000d00)='./file0\x00', 0x8}) 3.042546046s ago: executing program 4 (id=211): mknod(&(0x7f0000000040)='./file0\x00', 0x1000, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x200, 0x0) r0 = socket(0x18, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = kqueue() kevent(r2, &(0x7f0000000080)=[{{r1}, 0xfffffffffffffffb, 0x45, 0x1, 0x8, 0x6}], 0x1005, 0x0, 0x37, 0x0) acct(&(0x7f0000000100)='./file0\x00') acct(0x0) kevent(r2, 0x0, 0x0, 0x0, 0x2, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000b40)="820000ec3d1e6ed7eda0f59047bf65b18d7c51f78b06ccffb4050000000000009dd52840fafd3493857d65d4cd12c63d34", 0x31}], 0x1, 0x0, 0x0, 0x406}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)=[{0x10, 0xffff, 0x8}], 0x10}, 0x1) r3 = openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TIOCSETA(r3, 0xc4504448, &(0x7f0000000740)={0x0, 0x2, 0x0, 0x0, "9706004ff1c14649eb0700000100040a0047c1d1", 0x0, 0x9}) 2.566909021s ago: executing program 32 (id=211): mknod(&(0x7f0000000040)='./file0\x00', 0x1000, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x200, 0x0) r0 = socket(0x18, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = kqueue() kevent(r2, &(0x7f0000000080)=[{{r1}, 0xfffffffffffffffb, 0x45, 0x1, 0x8, 0x6}], 0x1005, 0x0, 0x37, 0x0) acct(&(0x7f0000000100)='./file0\x00') acct(0x0) kevent(r2, 0x0, 0x0, 0x0, 0x2, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000b40)="820000ec3d1e6ed7eda0f59047bf65b18d7c51f78b06ccffb4050000000000009dd52840fafd3493857d65d4cd12c63d34", 0x31}], 0x1, 0x0, 0x0, 0x406}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)=[{0x10, 0xffff, 0x8}], 0x10}, 0x1) r3 = openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TIOCSETA(r3, 0xc4504448, &(0x7f0000000740)={0x0, 0x2, 0x0, 0x0, "9706004ff1c14649eb0700000100040a0047c1d1", 0x0, 0x9}) 2.56429807s ago: executing program 2 (id=213): getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0xc) setgid(r0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000500), 0x800, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffff06000000aa"]) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="00001c00ac14"]) openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) kqueue() syz_emit_ethernet(0x138, &(0x7f00000000c0)=ANY=[]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) close(r2) r3 = socket(0x20, 0x5, 0x1) bind(r3, &(0x7f0000000000), 0x10) connect$unix(r3, &(0x7f0000000000), 0x10) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000000380)={0x0, 0x8}, 0xa66f1f68c3106312, 0x0) setsockopt$sock_int(r3, 0xffff, 0x1023, &(0x7f00000004c0), 0x4) 2.563986061s ago: executing program 3 (id=214): setrlimit(0x2, &(0x7f0000000080)={0x60000000, 0x60000000}) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000300)={0x2, &(0x7f00000000c0)=[{}, {0x1}]}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x4f}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$kern(&(0x7f00000000c0)={0x1, 0x31}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x3414, 0x0, 0xffffffffffffffb8) 2.562935757s ago: executing program 7 (id=215): sysctl$net_inet_ipip(&(0x7f0000000040)={0x4, 0x2, 0x4, 0x1}, 0x4, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc5005601, &(0x7f0000000000)={0x10, 0x0, [{&(0x7f0000347000/0x3000)=nil, &(0x7f0000663000/0x4000)=nil, 0x5}, {&(0x7f00005c9000/0x2000)=nil, &(0x7f0000826000/0x4000)=nil}, {&(0x7f0000060000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil}, {0x0, &(0x7f0000ffb000/0x3000)=nil, 0x1}, {&(0x7f000017c000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil}, {&(0x7f0000000000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x6}, {0x0, 0x0, 0xfffffffffffffffc}, {&(0x7f0000ff0000/0xf000)=nil, &(0x7f00000c4000/0x10000)=nil, 0x200000000000}, {&(0x7f000000d000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x2}, {&(0x7f00004cc000/0x4000)=nil, &(0x7f0000661000/0x3000)=nil}, {0x0, &(0x7f0000156000/0x1000)=nil, 0x16}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil}, {&(0x7f000038f000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x100000000}, {&(0x7f0000731000/0x1000)=nil, 0x0, 0x9bc1}, {&(0x7f00001cf000/0x4000)=nil, &(0x7f0000142000/0x4000)=nil}, {&(0x7f0000573000/0x2000)=nil, &(0x7f00004e9000/0x4000)=nil}], './file0\x00'}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f0000000080), 0x1c, 0x0}, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x10000000000001}}) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x8) r0 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$TIOCSETA(r0, 0xc444443b, &(0x7f0000000040)={0x403, 0x7fff, 0x4, 0x6, "9d00", 0x4, 0x8}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket(0x18, 0x1, 0x0) close(r1) r2 = socket(0x18, 0x2, 0x0) setsockopt(r2, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) connect$unix(r1, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) connect$unix(r1, &(0x7f00000002c0)=@file={0x0, './bus\x00'}, 0x8) sendmsg$unix(r1, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0) sysctl$net_inet_carp(&(0x7f0000000040)={0x4, 0x2, 0x6, 0x4}, 0x4, 0x0, 0x0, &(0x7f00000010c0)="f260865a", 0x4) 2.126781113s ago: executing program 33 (id=213): getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0xc) setgid(r0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000500), 0x800, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffff06000000aa"]) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="00001c00ac14"]) openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) kqueue() syz_emit_ethernet(0x138, &(0x7f00000000c0)=ANY=[]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) close(r2) r3 = socket(0x20, 0x5, 0x1) bind(r3, &(0x7f0000000000), 0x10) connect$unix(r3, &(0x7f0000000000), 0x10) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000000380)={0x0, 0x8}, 0xa66f1f68c3106312, 0x0) setsockopt$sock_int(r3, 0xffff, 0x1023, &(0x7f00000004c0), 0x4) 1.925700298s ago: executing program 34 (id=214): setrlimit(0x2, &(0x7f0000000080)={0x60000000, 0x60000000}) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000300)={0x2, &(0x7f00000000c0)=[{}, {0x1}]}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x4f}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$kern(&(0x7f00000000c0)={0x1, 0x31}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x3414, 0x0, 0xffffffffffffffb8) 1.90143046s ago: executing program 35 (id=215): sysctl$net_inet_ipip(&(0x7f0000000040)={0x4, 0x2, 0x4, 0x1}, 0x4, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc5005601, &(0x7f0000000000)={0x10, 0x0, [{&(0x7f0000347000/0x3000)=nil, &(0x7f0000663000/0x4000)=nil, 0x5}, {&(0x7f00005c9000/0x2000)=nil, &(0x7f0000826000/0x4000)=nil}, {&(0x7f0000060000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil}, {0x0, &(0x7f0000ffb000/0x3000)=nil, 0x1}, {&(0x7f000017c000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil}, {&(0x7f0000000000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x6}, {0x0, 0x0, 0xfffffffffffffffc}, {&(0x7f0000ff0000/0xf000)=nil, &(0x7f00000c4000/0x10000)=nil, 0x200000000000}, {&(0x7f000000d000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x2}, {&(0x7f00004cc000/0x4000)=nil, &(0x7f0000661000/0x3000)=nil}, {0x0, &(0x7f0000156000/0x1000)=nil, 0x16}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil}, {&(0x7f000038f000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x100000000}, {&(0x7f0000731000/0x1000)=nil, 0x0, 0x9bc1}, {&(0x7f00001cf000/0x4000)=nil, &(0x7f0000142000/0x4000)=nil}, {&(0x7f0000573000/0x2000)=nil, &(0x7f00004e9000/0x4000)=nil}], './file0\x00'}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f0000000080), 0x1c, 0x0}, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x10000000000001}}) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x8) r0 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$TIOCSETA(r0, 0xc444443b, &(0x7f0000000040)={0x403, 0x7fff, 0x4, 0x6, "9d00", 0x4, 0x8}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket(0x18, 0x1, 0x0) close(r1) r2 = socket(0x18, 0x2, 0x0) setsockopt(r2, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) connect$unix(r1, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) connect$unix(r1, &(0x7f00000002c0)=@file={0x0, './bus\x00'}, 0x8) sendmsg$unix(r1, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0) sysctl$net_inet_carp(&(0x7f0000000040)={0x4, 0x2, 0x6, 0x4}, 0x4, 0x0, 0x0, &(0x7f00000010c0)="f260865a", 0x4) 1.4754048s ago: executing program 5 (id=219): r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x8, 0x0) ioctl$WSDISPLAYIO_DELFONT(r0, 0x8058574f, &(0x7f0000000040)={'./file0\x00', 0x457, 0xb, 0x6, 0x1, 0x1, 0x20000000, 0xfffffffd, 0x1, 0x1, 0x4, 0x5}) kqueue() ioctl$TIOCGETD(r0, 0x4004741a, &(0x7f00000000c0)) r1 = semget(0x3, 0x1, 0x80) r2 = getuid() r3 = getgid() r4 = geteuid() semctl$IPC_SET(r1, 0x0, 0x1, &(0x7f0000000100)={{0x800, r2, r3, r4, 0xffffffffffffffff, 0x1c9, 0xece}, 0x6, 0x208b, 0x73}) connect$inet6(r0, &(0x7f0000000180)={0x18, 0x1, 0xb8, 0x5}, 0xc) r5 = openat$wskbd(0xffffffffffffff9c, &(0x7f00000001c0), 0x401, 0x0) ioctl$BIOCVERSION(r0, 0x40044271, &(0x7f0000000200)) ioctl$SPKRTUNE(r0, 0x20005302, &(0x7f0000000240)={0x5, 0x70}) r6 = socket$inet(0x2, 0x0, 0x9) r7 = accept(r6, 0x0, &(0x7f0000000280)) syz_open_pts() unveil(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='c\x00') readlink(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)=""/98, 0x62) getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000000400)={0x0}, &(0x7f0000000440)=0xc) setsockopt$sock_cred(r7, 0xffff, 0x1022, &(0x7f0000000480)={r8, r4, r3}, 0xc) fcntl$getown(r0, 0x5) getpeername(r0, &(0x7f00000004c0)=@in, &(0x7f0000000500)=0xc) readv(r5, &(0x7f0000000740)=[{&(0x7f0000000540)=""/61, 0x3d}, {&(0x7f0000000580)=""/191, 0xbf}, {&(0x7f0000000640)=""/88, 0x58}, {&(0x7f00000006c0)=""/114, 0x72}], 0x4) r9 = accept$inet(r0, &(0x7f0000000780), &(0x7f00000007c0)=0xc) getsockopt$inet_opts(r9, 0x0, 0x0, &(0x7f0000000800)=""/28, &(0x7f0000000840)=0x1c) dup(r7) ioctl$WSMUXIO_LIST_DEVICES(r0, 0xc1045763, &(0x7f0000000880)={0x4, [{0x3, 0xd}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x3}, {0x2, 0x6e}, {0x1, 0x5}, {0x1, 0x3cf}, {0x1, 0x9}, {0x1, 0x7}, {0x1}, {0x3, 0x3}, {0x1}, {0x3, 0x6}, {0x2, 0x3}, {0x2, 0x2}, {0x1, 0x400}, {0x2, 0x10001}, {0x2, 0x81}, {0x2, 0xb6}, {0x2, 0x63}, {0x0, 0x1}, {0x3, 0x5}, {0x3, 0xfffff801}, {0x3, 0x8}, {0x3, 0x8}, {0x1}, {0x2, 0x2}, {0x2, 0x40}, {0x3, 0x6}, {0x3, 0xfffffffa}, {0x3, 0x1}, {0x2, 0x5}]}) getsockopt$sock_cred(r6, 0xffff, 0x1022, &(0x7f00000009c0)={0x0, 0x0, 0x0}, &(0x7f0000000a00)=0xc) setegid(r10) sendto(0xffffffffffffffff, &(0x7f0000000a80)="b888ebe11ae9a632dd8a201ed2a05564f1f94553c9a396d1d6ddd1f9ef707c6d7b86bc080703c1fdfd7b5f3c033d20d3f203ecb1f66b7d9259bbb4a672fce258ee8afda46cb8143450e629c7afcfbe2b0477de3d44aa9eb18895de62736aa1b39809783d38d8cefe5983878a9dda14748ed4c3083181a60dd7a48f84aa3e80da55b439e405d354761baa850a6a7fc459763da4eb0f7269737397ac04f875cb305a43ee7367dacf2cf13195753b201bb9604d41d5cf83b0f8236df1cdcccbc11ca9c9", 0xc2, 0x4, &(0x7f0000000b80)=@un=@abs={0x0, 0x0, 0x2}, 0x8) 1.470746618s ago: executing program 36 (id=219): r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x8, 0x0) ioctl$WSDISPLAYIO_DELFONT(r0, 0x8058574f, &(0x7f0000000040)={'./file0\x00', 0x457, 0xb, 0x6, 0x1, 0x1, 0x20000000, 0xfffffffd, 0x1, 0x1, 0x4, 0x5}) kqueue() ioctl$TIOCGETD(r0, 0x4004741a, &(0x7f00000000c0)) r1 = semget(0x3, 0x1, 0x80) r2 = getuid() r3 = getgid() r4 = geteuid() semctl$IPC_SET(r1, 0x0, 0x1, &(0x7f0000000100)={{0x800, r2, r3, r4, 0xffffffffffffffff, 0x1c9, 0xece}, 0x6, 0x208b, 0x73}) connect$inet6(r0, &(0x7f0000000180)={0x18, 0x1, 0xb8, 0x5}, 0xc) r5 = openat$wskbd(0xffffffffffffff9c, &(0x7f00000001c0), 0x401, 0x0) ioctl$BIOCVERSION(r0, 0x40044271, &(0x7f0000000200)) ioctl$SPKRTUNE(r0, 0x20005302, &(0x7f0000000240)={0x5, 0x70}) r6 = socket$inet(0x2, 0x0, 0x9) r7 = accept(r6, 0x0, &(0x7f0000000280)) syz_open_pts() unveil(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='c\x00') readlink(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)=""/98, 0x62) getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000000400)={0x0}, &(0x7f0000000440)=0xc) setsockopt$sock_cred(r7, 0xffff, 0x1022, &(0x7f0000000480)={r8, r4, r3}, 0xc) fcntl$getown(r0, 0x5) getpeername(r0, &(0x7f00000004c0)=@in, &(0x7f0000000500)=0xc) readv(r5, &(0x7f0000000740)=[{&(0x7f0000000540)=""/61, 0x3d}, {&(0x7f0000000580)=""/191, 0xbf}, {&(0x7f0000000640)=""/88, 0x58}, {&(0x7f00000006c0)=""/114, 0x72}], 0x4) r9 = accept$inet(r0, &(0x7f0000000780), &(0x7f00000007c0)=0xc) getsockopt$inet_opts(r9, 0x0, 0x0, &(0x7f0000000800)=""/28, &(0x7f0000000840)=0x1c) dup(r7) ioctl$WSMUXIO_LIST_DEVICES(r0, 0xc1045763, &(0x7f0000000880)={0x4, [{0x3, 0xd}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x3}, {0x2, 0x6e}, {0x1, 0x5}, {0x1, 0x3cf}, {0x1, 0x9}, {0x1, 0x7}, {0x1}, {0x3, 0x3}, {0x1}, {0x3, 0x6}, {0x2, 0x3}, {0x2, 0x2}, {0x1, 0x400}, {0x2, 0x10001}, {0x2, 0x81}, {0x2, 0xb6}, {0x2, 0x63}, {0x0, 0x1}, {0x3, 0x5}, {0x3, 0xfffff801}, {0x3, 0x8}, {0x3, 0x8}, {0x1}, {0x2, 0x2}, {0x2, 0x40}, {0x3, 0x6}, {0x3, 0xfffffffa}, {0x3, 0x1}, {0x2, 0x5}]}) getsockopt$sock_cred(r6, 0xffff, 0x1022, &(0x7f00000009c0)={0x0, 0x0, 0x0}, &(0x7f0000000a00)=0xc) setegid(r10) sendto(0xffffffffffffffff, &(0x7f0000000a80)="b888ebe11ae9a632dd8a201ed2a05564f1f94553c9a396d1d6ddd1f9ef707c6d7b86bc080703c1fdfd7b5f3c033d20d3f203ecb1f66b7d9259bbb4a672fce258ee8afda46cb8143450e629c7afcfbe2b0477de3d44aa9eb18895de62736aa1b39809783d38d8cefe5983878a9dda14748ed4c3083181a60dd7a48f84aa3e80da55b439e405d354761baa850a6a7fc459763da4eb0f7269737397ac04f875cb305a43ee7367dacf2cf13195753b201bb9604d41d5cf83b0f8236df1cdcccbc11ca9c9", 0xc2, 0x4, &(0x7f0000000b80)=@un=@abs={0x0, 0x0, 0x2}, 0x8) 1.470395009s ago: executing program 6 (id=220): mknod(&(0x7f0000000000)='./bus\x00', 0x3a0914c44f7b202d, 0x504) (async) ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x0, 0xb3f, {[0xfffffbfffffffffb, 0x0, 0x2, 0x100000000, 0x6, 0x898, 0xdf60, 0xfffffffffffffffe, 0x4, 0x2efe, 0x4, 0x3, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x4, 0x2, 0xfffffffffffffffa], [0xfffffffffffffffe, 0x80000001, 0xf, 0x8000, 0x5b, 0x1, 0x1fe, 0x0, 0x0, 0x2], [0x100000001, 0x2, 0x0, 0x0, 0xb, 0xffffffff, 0xffffffff00000000], [0x100, 0x5, 0x7fffffffffffffff, 0x100000000, 0xfffffffffffffffe, 0x8], [{0x0, 0x20000007, 0x0, 0x7d06}, {0xfffc, 0x2, 0x5}, {0x6, 0x2, 0xfffffffc, 0x80}, {0x3, 0x5, 0x4, 0xffffffffffffffff}, {0x6, 0x2, 0x1200, 0x8}, {0x0, 0x2007, 0x9, 0x2000000000000000}, {}, {0x0, 0x100, 0x0, 0x8}], {0x0, 0x7fffffff, 0x5}, {0x7, 0x80000000, 0x6d5, 0x2}}}) (async) mknod(&(0x7f00000000c0)='./bus\x00', 0x20, 0x450c) (async) open(&(0x7f00000002c0)='./bus\x00', 0x2, 0x100) r0 = openat$speaker(0xffffffffffffff9c, &(0x7f0000001500), 0x1, 0x0) writev(r0, &(0x7f0000000080)=[{0x0}], 0x1) seteuid(0x0) (async) getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, 0x0, &(0x7f0000000280)) (async) getgid() (async) syz_emit_ethernet(0xa2, 0x0) (async) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) r1 = socket(0x2, 0x2, 0x0) ioctl$FIONREAD(r1, 0xc0106924, &(0x7f00000001c0)) (async) ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file0\x00', 0x4, 0xc0, 0x40003, 0x1, 0x7ff, 0xfffeffff, 0x2, 0x1, 0x2, 0x2004003, 0xff}) r2 = socket(0x18, 0x3, 0x4) (async) setitimer(0x1, &(0x7f0000000140)={{0x108001, 0x100800000000009}, {0xdffffffeffffffff, 0xfffb}}, 0x0) ioctl$FIONREAD(r2, 0x81206919, &(0x7f0000000100)) (async) sysctl$kern(&(0x7f00000000c0)={0x1, 0x54}, 0x2, &(0x7f00000001c0)="71057bfec37082000000000000000000000000000000000000000000f04feefc2c714b343bf9e5ca000000000000b1000000004f08805d0a8188d57b9f3b03ee7276bb9501a05346", 0x0, 0x0, 0x0) ioctl$FIONREAD(r2, 0x8080691a, &(0x7f0000000100)) (async) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)="76e5eac907f9ccf7a251ceddcec7d6aa45cffe2c63a56077123a276d3ba4e9d17eb3eb5db12a3783a8e0620d357de1fe04fa9465b5bd1286e9624dec06a00c222f", 0x41}], 0x1) (async) rename(&(0x7f0000000100)='./file0\x00', 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='.\x00') (async) ioctl$WSMUXIO_REMOVE_DEVICE(0xffffffffffffffff, 0x80085762, &(0x7f0000000040)={0x1}) r3 = socket(0x18, 0x3, 0x3a) setsockopt(r3, 0x29, 0x6c, &(0x7f0000000040), 0x4) (async) setsockopt$inet6_MRT6_ADD_MIF(r3, 0x29, 0x66, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1}, 0xc) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x7fffffff, 0x0, {0xfffffffffffffffe, 0x1}}) (async) mprotect(&(0x7f00004f6000/0x1000)=nil, 0x1000, 0x2) (async) setsockopt(0xffffffffffffffff, 0x1000000029, 0xc, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) 1.456438404s ago: executing program 37 (id=220): mknod(&(0x7f0000000000)='./bus\x00', 0x3a0914c44f7b202d, 0x504) (async) ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x0, 0xb3f, {[0xfffffbfffffffffb, 0x0, 0x2, 0x100000000, 0x6, 0x898, 0xdf60, 0xfffffffffffffffe, 0x4, 0x2efe, 0x4, 0x3, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x4, 0x2, 0xfffffffffffffffa], [0xfffffffffffffffe, 0x80000001, 0xf, 0x8000, 0x5b, 0x1, 0x1fe, 0x0, 0x0, 0x2], [0x100000001, 0x2, 0x0, 0x0, 0xb, 0xffffffff, 0xffffffff00000000], [0x100, 0x5, 0x7fffffffffffffff, 0x100000000, 0xfffffffffffffffe, 0x8], [{0x0, 0x20000007, 0x0, 0x7d06}, {0xfffc, 0x2, 0x5}, {0x6, 0x2, 0xfffffffc, 0x80}, {0x3, 0x5, 0x4, 0xffffffffffffffff}, {0x6, 0x2, 0x1200, 0x8}, {0x0, 0x2007, 0x9, 0x2000000000000000}, {}, {0x0, 0x100, 0x0, 0x8}], {0x0, 0x7fffffff, 0x5}, {0x7, 0x80000000, 0x6d5, 0x2}}}) (async) mknod(&(0x7f00000000c0)='./bus\x00', 0x20, 0x450c) (async) open(&(0x7f00000002c0)='./bus\x00', 0x2, 0x100) r0 = openat$speaker(0xffffffffffffff9c, &(0x7f0000001500), 0x1, 0x0) writev(r0, &(0x7f0000000080)=[{0x0}], 0x1) seteuid(0x0) (async) getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, 0x0, &(0x7f0000000280)) (async) getgid() (async) syz_emit_ethernet(0xa2, 0x0) (async) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) r1 = socket(0x2, 0x2, 0x0) ioctl$FIONREAD(r1, 0xc0106924, &(0x7f00000001c0)) (async) ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file0\x00', 0x4, 0xc0, 0x40003, 0x1, 0x7ff, 0xfffeffff, 0x2, 0x1, 0x2, 0x2004003, 0xff}) r2 = socket(0x18, 0x3, 0x4) (async) setitimer(0x1, &(0x7f0000000140)={{0x108001, 0x100800000000009}, {0xdffffffeffffffff, 0xfffb}}, 0x0) ioctl$FIONREAD(r2, 0x81206919, &(0x7f0000000100)) (async) sysctl$kern(&(0x7f00000000c0)={0x1, 0x54}, 0x2, &(0x7f00000001c0)="71057bfec37082000000000000000000000000000000000000000000f04feefc2c714b343bf9e5ca000000000000b1000000004f08805d0a8188d57b9f3b03ee7276bb9501a05346", 0x0, 0x0, 0x0) ioctl$FIONREAD(r2, 0x8080691a, &(0x7f0000000100)) (async) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)="76e5eac907f9ccf7a251ceddcec7d6aa45cffe2c63a56077123a276d3ba4e9d17eb3eb5db12a3783a8e0620d357de1fe04fa9465b5bd1286e9624dec06a00c222f", 0x41}], 0x1) (async) rename(&(0x7f0000000100)='./file0\x00', 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='.\x00') (async) ioctl$WSMUXIO_REMOVE_DEVICE(0xffffffffffffffff, 0x80085762, &(0x7f0000000040)={0x1}) r3 = socket(0x18, 0x3, 0x3a) setsockopt(r3, 0x29, 0x6c, &(0x7f0000000040), 0x4) (async) setsockopt$inet6_MRT6_ADD_MIF(r3, 0x29, 0x66, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1}, 0xc) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x7fffffff, 0x0, {0xfffffffffffffffe, 0x1}}) (async) mprotect(&(0x7f00004f6000/0x1000)=nil, 0x1000, 0x2) (async) setsockopt(0xffffffffffffffff, 0x1000000029, 0xc, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) 5.039429ms ago: executing program 0 (id=222): r0 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) socket(0x2, 0x3, 0x0) r1 = openat$pci(0xffffffffffffff9c, &(0x7f00000002c0), 0x10, 0x0) close(r1) r2 = socket(0x2, 0x1, 0x0) syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r3 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, 0x10, r3, 0x0) connect$unix(r2, &(0x7f0000000000), 0x10) shutdown(r2, 0x2) open(0x0, 0x80000000000206, 0x4ebfac6bbaf7949) setrlimit(0x8, 0x0) close(r2) getpeername$unix(r0, &(0x7f0000000040)=@abs, &(0x7f0000000080)=0x8) fcntl$getown(r0, 0x5) openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) (async) socket(0x2, 0x3, 0x0) (async) openat$pci(0xffffffffffffff9c, &(0x7f00000002c0), 0x10, 0x0) (async) close(r1) (async) socket(0x2, 0x1, 0x0) (async) syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) (async) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1) (async) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) (async) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, 0x10, r3, 0x0) (async) connect$unix(r2, &(0x7f0000000000), 0x10) (async) shutdown(r2, 0x2) (async) open(0x0, 0x80000000000206, 0x4ebfac6bbaf7949) (async) setrlimit(0x8, 0x0) (async) close(r2) (async) getpeername$unix(r0, &(0x7f0000000040)=@abs, &(0x7f0000000080)=0x8) (async) fcntl$getown(r0, 0x5) (async) 0s ago: executing program 38 (id=222): r0 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) socket(0x2, 0x3, 0x0) r1 = openat$pci(0xffffffffffffff9c, &(0x7f00000002c0), 0x10, 0x0) close(r1) r2 = socket(0x2, 0x1, 0x0) syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r3 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, 0x10, r3, 0x0) connect$unix(r2, &(0x7f0000000000), 0x10) shutdown(r2, 0x2) open(0x0, 0x80000000000206, 0x4ebfac6bbaf7949) setrlimit(0x8, 0x0) close(r2) getpeername$unix(r0, &(0x7f0000000040)=@abs, &(0x7f0000000080)=0x8) fcntl$getown(r0, 0x5) openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) (async) socket(0x2, 0x3, 0x0) (async) openat$pci(0xffffffffffffff9c, &(0x7f00000002c0), 0x10, 0x0) (async) close(r1) (async) socket(0x2, 0x1, 0x0) (async) syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) (async) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1) (async) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) (async) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, 0x10, r3, 0x0) (async) connect$unix(r2, &(0x7f0000000000), 0x10) (async) shutdown(r2, 0x2) (async) open(0x0, 0x80000000000206, 0x4ebfac6bbaf7949) (async) setrlimit(0x8, 0x0) (async) close(r2) (async) getpeername$unix(r0, &(0x7f0000000040)=@abs, &(0x7f0000000080)=0x8) (async) fcntl$getown(r0, 0x5) (async) kernel console output (not intermixed with test programs): OpenBSD/amd64 (ci-openbsd-main-1.us-central1-b.c.syzkaller.internal) (tty00) Warning: Permanently added '10.128.1.80' (ED25519) to the list of known hosts. login: pckbd_enable: command error OpenBSD/amd64 (Amnesiac) (tty00) SYZFAIL: failed to mkdir (errno 22: Invalid argument) SYZFAIL: failed to mkdtemp (errno 22: Invalid argument) SYZFAIL: failed to mkdtemp (errno 22: Invalid argument) SYZFAIL: failed to mkdtemp (errno 22: Invalid argument) SYZFAIL: failed to mkdtemp (errno 22: Invalid argument) SYZFAIL: failed to mkdtemp (errno 22: Invalid argument) SYZFAIL: failed to mkdtemp (errno 22: Invalid argument) SYZFAIL: failed to mkdtemp (errno 22: Invalid argument) SYZFAIL: failed to mkdtemp (errno 22: Invalid argument) SYZFAIL: failed to mkdtemp (errno 22: Invalid argument) SYZFAIL: failed to mkdtemp (errno 22: Invalid argument) SYZFAIL: failed to mkdtemp (errno 22: Invalid argument) SYZFAIL: failed to mkdtemp (errno 22: Invalid argument) SYZFAIL: failed to mkdtemp (errno 22: Invalid argument) SYZFAIL: failed to mkdtemp (errno 22: Invalid argument) SYZFAIL: failed to mkdtemp (errno 22: Invalid argument) SYZFAIL: failed to mkdtemp (errno 22: Invalid argument) SYZFAIL: failed to mkdtemp (errno 22: Invalid argument) SYZFAIL: failed to mkdtemp (errno 22: Invalid argument) SYZFAIL: failed to mkdtemp (errno 22: Invalid argument) SYZFAIL: failed to mkdtemp (errno 22: Invalid argument) SYZFAIL: repeatedly failed to execute the program proc=1 req=210 state=1 status=67 (errno 4: Interrupted system call) login: OpenBSD/amd64 (Amnesiac) (tty00) login: set $lines = 0 OpenBSD/amd64 (Amnesiac) (tty00) login: show panic