last executing test programs: 6.302867225s ago: executing program 0 (id=5420): mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6381) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x8, 0xffffffffffffffff, 0xfffffffffffffffd, 0x800, 0x181c, 0xa, 0x2}, 0x0, 0x0, 0x0) r0 = kqueue() kevent(r0, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x10, 0x100) ioctl$WSDISPLAYIO_USEFONT(r1, 0x80585750, &(0x7f0000000140)={'./file0\x00', 0x6, 0x43, 0x3, 0x1, 0x4, 0xf, 0x1, 0x1, 0x2, 0x4001, 0x7e}) mknod(&(0x7f00000000c0)='./file1\x00', 0x2000, 0x637d) poll(0x0, 0x0, 0x0) r2 = open(&(0x7f0000000800)='./file1\x00', 0x800, 0xba) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x1, 0x7, 0xd4, 0x6, 0xfbffffff, 0x0, 0x10, [{0xfe5, 0x7, 0x0, 0x71000}, {0x7, 0x4, 0x6, 0x4}, {0x10000004, 0xf86, 0x4000000, 0x40004}, {0x8, 0x800, 0x7, 0x1000000}, {0x6, 0xb, 0x811, 0x10003}, {0x9, 0x200, 0xfffffffe, 0x800009c}, {0x8, 0xffffffff, 0x1003, 0x71}, {0xa, 0x10000803, 0x14, 0x8}, {0x4, 0x81, 0x1, 0x9}, {0x6, 0x8001, 0xc7, 0x800000b}, {0x4, 0xfffb}, {0x803, 0x40, 0x8, 0x4}, {0xe1, 0x4, 0x7, 0x3}, {0xffff0354, 0xfffffffa, 0x100, 0x100006}, {0x0, 0x6, 0x7, 0x1ffffffd}, {0x0, 0x1, 0x4, 0xc3}]}) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0x7, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x8}, 0x0, 0x0, 0x0) ioctl$FIONBIO(r2, 0x82907003, &(0x7f0000000140)=0x1) chmod(&(0x7f0000000040)='.\x00', 0x35e) setuid(0xee01) mkdir(&(0x7f0000000000)='./file0\x00', 0x60) r3 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000440)={@broadcast, @empty, [], {@arp={0x806, @generic={0x18, 0x8847, 0x6, 0x0, 0x0, @broadcast, "", @remote, "098f5aa94baa6837b6f263c42eb70f2b"}}}}) mprotect(&(0x7f00000e7000/0x2000)=nil, 0x2000, 0x4) ioctl$TIOCSETA(r3, 0xcd504407, &(0x7f0000000d00)={0xfffffff6, 0x2, 0xd93, 0x57, "9b059b6a003d000000000000e5000000002000", 0x2, 0x6}) chroot(&(0x7f00000000c0)='./file0/file0\x00') unveil(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000140)='c\x00') r4 = semget$private(0x0, 0x4, 0x0) ioctl$WSMUXIO_REMOVE_DEVICE(0xffffffffffffffff, 0x80085762, &(0x7f0000000040)={0x1}) r5 = socket(0x18, 0xc003, 0x3a) setsockopt(r5, 0x29, 0x6c, &(0x7f0000000040), 0x4) semctl$IPC_STAT(r4, 0x0, 0x2, 0x0) close(r1) 6.301592647s ago: executing program 0 (id=5423): pwritev(0xffffffffffffff9c, &(0x7f0000000200)=[{&(0x7f0000000000)="c108fca3f50725b286546aad931646ace3946da69a58e5a9a5c66dcbd45961f9a9ea76448ad85b8d4f20adaaae065c5f4213ac0b83609822733f4587350d5c54ac8e3649480cc2bdc9368d2fdb2729e17df2355e0e54d3f54bdd1b1880af5676f2fc03a49bb98785be8bb1ea30165f", 0x6f}, {&(0x7f0000000080)="bd548db4bdd14b64bda5a23bf499afd42850c485be0945207c75385e9f3ed2a3b0cb1f6f65d69f7432e1f36228ffa496ae7940ad1734c1c8e5fb9d385ae6e25ab7d2a9c9b46256b2c17620092aa9e647fa7186bdd7ca92c471022ae591e6f7ef182cdb13b24eca1966d9a2cf2a6693ebb8206fa6ada8d365555e4dbb364bda7f4f290fafdef71d43b3976c", 0x8b}, {&(0x7f0000000140)="8741fe2bdd3e1345f58c6ab283cfa2df48fed60e131fc418dc3c0cc3b846779cdd56a9fafbfe9d8d623354fb99abf43ae1b16869cf02d1b376ee0e0f88269a23e94ec505f062f5663de61794ab23c259f6898c44d1e0257710ef3e1c6357a22fc2fd8e7cd15878d947588f3bd05923a42f51f6b5b6cc2b00d4746514be39d853561d12c703c8889b4dcf6470f16e13e54eabb7a54fe640", 0x97}], 0x3, 0x101) r0 = socket(0x2, 0x5, 0x0) r1 = dup2(r0, r0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000240)={'tap', 0x0}) (async) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000240)={'tap', 0x0}) ioctl$BIOCGDLTLIST(r1, 0xc010427b, &(0x7f00000002c0)={0x8, &(0x7f0000000280)=[0xb6c, 0x7, 0x2, 0x1, 0x1, 0xb, 0xfff, 0xaf]}) (async) ioctl$BIOCGDLTLIST(r1, 0xc010427b, &(0x7f00000002c0)={0x8, &(0x7f0000000280)=[0xb6c, 0x7, 0x2, 0x1, 0x1, 0xb, 0xfff, 0xaf]}) unveil(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='W\x00') (async) unveil(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='W\x00') open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x8) sendmmsg(r1, &(0x7f0000000680)={&(0x7f0000000640)={&(0x7f00000003c0)=@in={0x2, 0x2}, 0xc, &(0x7f0000000540)=[{&(0x7f0000000400)="ad6888", 0x3}, {&(0x7f0000000440)="e1a315889135a7625a66c70be897a4bbc606313fed787809ba5eadb3a2c9715bf83f6106b2d40bbd757047b46d9a29f98820944c08db9a98c31016938462f22d824bf693abcc7a9dd133a90386c330a329d4b7021e9fb42464943252cd8fa695818d115a7b20811f131a1a991a66022895289bebfbdb9257997d4dc2c07485f400b111a309468858fcae0c66cf005461668ad9ed8b06b8d4bbd48499970bb4fbeac26372a86d78231c1745f606e3340606dd45f4f04fa9ba004fd1cc64d46d4d70734f508212300795caef", 0xcb}], 0x2, &(0x7f0000000580)=[{0xc0, 0x1, 0x8, "63328275655f5e9ec17fb18358b5f8864d5b932c0afc76a540b343647bc1b20b5fffde6c9e667f53f7be5b0281b81c538a635394935f7797d3a6f4566353aa9c800529912e9fd34fc52a6db4da1352ced6567694f88d22199b6aa71e5924f587a22ab17adf3baf9854d7c633d94194454d1b93b3f6db82380140a10f0f70e8d93e5518aa46e1dc6d2b9f2872446552f4b0bd0f886c347ef70f65835ec4d1692f91a739b43e83692c0818"}], 0xc0}}, 0x10, 0x0) (async) sendmmsg(r1, &(0x7f0000000680)={&(0x7f0000000640)={&(0x7f00000003c0)=@in={0x2, 0x2}, 0xc, &(0x7f0000000540)=[{&(0x7f0000000400)="ad6888", 0x3}, {&(0x7f0000000440)="e1a315889135a7625a66c70be897a4bbc606313fed787809ba5eadb3a2c9715bf83f6106b2d40bbd757047b46d9a29f98820944c08db9a98c31016938462f22d824bf693abcc7a9dd133a90386c330a329d4b7021e9fb42464943252cd8fa695818d115a7b20811f131a1a991a66022895289bebfbdb9257997d4dc2c07485f400b111a309468858fcae0c66cf005461668ad9ed8b06b8d4bbd48499970bb4fbeac26372a86d78231c1745f606e3340606dd45f4f04fa9ba004fd1cc64d46d4d70734f508212300795caef", 0xcb}], 0x2, &(0x7f0000000580)=[{0xc0, 0x1, 0x8, "63328275655f5e9ec17fb18358b5f8864d5b932c0afc76a540b343647bc1b20b5fffde6c9e667f53f7be5b0281b81c538a635394935f7797d3a6f4566353aa9c800529912e9fd34fc52a6db4da1352ced6567694f88d22199b6aa71e5924f587a22ab17adf3baf9854d7c633d94194454d1b93b3f6db82380140a10f0f70e8d93e5518aa46e1dc6d2b9f2872446552f4b0bd0f886c347ef70f65835ec4d1692f91a739b43e83692c0818"}], 0xc0}}, 0x10, 0x0) openat$pf(0xffffffffffffff9c, &(0x7f00000006c0), 0x80, 0x0) (async) r2 = openat$pf(0xffffffffffffff9c, &(0x7f00000006c0), 0x80, 0x0) r3 = dup(r2) setitimer(0x2, &(0x7f0000000700)={{0x9, 0x9}, {0xf9a4, 0x1}}, &(0x7f0000000740)) (async) setitimer(0x2, &(0x7f0000000700)={{0x9, 0x9}, {0xf9a4, 0x1}}, &(0x7f0000000740)) ioctl$TIOCSFLAGS(r3, 0x8004745c, &(0x7f0000000780)=0x3) r4 = syz_open_pts() writev(r4, &(0x7f0000000a40)=[{&(0x7f00000007c0)="b7ea1a1dfc4294097c2f13cb6990a33ccf9154278515b6ada79e6c9b641feee4863371da8381afefcec9d7e84e66d6101f3c32", 0x33}, {&(0x7f0000000800)="642b40880598f5344a79bfd94711a32abd74b3afc23ce3dcd4e8bccd6ae5591de71254314e61e47b64102aa87b91b0e6fc2c934b84111ea30dd35de42031b238c1e836808eec8bbac9ceb250c9fb3b75824e1aa5562aa045174b33a51d2392dd85983331d06760bdde5baf0e6bc22b36a6daef4fc68a1099dc26a401efee22d8ac63b429ac4425ddc27bb5371951c409ab778315bc7482562e9657d86557d8005971b8a5eac12052ea07f988d767c5b86f7e83f7c2116985c83be6a6fcef0aff4f4c8b23a5ba62bcd4174d97f931222ba0048cc4aefabca6d4043066f781edfd97f57006", 0xe4}, {&(0x7f0000000900)="704977f7a415eebe91cab2986a02df43d29712009e7967e167b5b5f5ac0fccd99d1091116e0dfff64051b29cb3d7551a0764520f89c96aa25571e7903ef1b624e486371b3e43cf45b7bca99105b4a716dd01b16bbdd486", 0x57}, {&(0x7f0000000980)="3de0d6afffd2d1ae6cd33c50be98328bb9a691830fa4a70e533205e45c5ab30c56f40ffbba7d4ae197505d364bc3652d4ac2a0e6ab7ab38bb4b226a363504e4f4145976d20ae05217f51557cce2ad271013a7a5c8586ba22109749ea0f2d4741adb82525cbe46b2f6dec6f83ac38b56d8410e0182f2672469ac50911449b44b07ee3075687e3d2b459e31f", 0x8b}], 0x4) ioctl$LIOCSFD(r3, 0x80046c7f, &(0x7f0000000a80)=r0) pipe2(&(0x7f0000000ac0), 0x0) (async) pipe2(&(0x7f0000000ac0)={0xffffffffffffffff}, 0x0) ioctl$VNDIOCCLR(r5, 0x80384601, &(0x7f0000000b80)={&(0x7f0000000b00)='./file0\x00', 0x0, &(0x7f0000000b40)='./file0\x00', 0x8}) r6 = socket$unix(0x1, 0x1, 0x0) getsockopt$sock_timeval(r6, 0xffff, 0x1005, &(0x7f0000000bc0), &(0x7f0000000c00)=0x10) (async) getsockopt$sock_timeval(r6, 0xffff, 0x1005, &(0x7f0000000bc0), &(0x7f0000000c00)=0x10) bind(r2, &(0x7f0000000c40)=@in6={0x18, 0x0, 0x8, 0x9}, 0xc) msgget(0x2, 0x44d) (async) r7 = msgget(0x2, 0x44d) r8 = getuid() r9 = geteuid() getsockopt$SO_PEERCRED(r6, 0xffff, 0x1022, &(0x7f0000000c80)={0x0, 0x0, 0x0}, 0xc) r11 = getpid() getsockopt$sock_cred(r5, 0xffff, 0x1022, &(0x7f0000000cc0)={0x0}, &(0x7f0000000d00)=0xc) msgctl$IPC_SET(r7, 0x1, &(0x7f0000000d40)={{0x8, r8, 0x0, r9, r10, 0x142, 0x81}, 0x6e76, 0x5, r11, r12, 0x1ff, 0x9, 0xc000000000000000, 0x4}) connect$inet(r3, &(0x7f0000000dc0)={0x2, 0x3}, 0xc) msgsnd(r7, &(0x7f0000000e00)={0x3, "1d8fdd4c825225da9033042b440d13f0290e2043ffc6f57261f72626172b2561c1ebee9b8bcaf14698120451e8d4657f75ade2b19fc136b1f3f0bb0a5929feee22dd76ca6b8233ab94c2432dcff420a561cb8f3f18f9de5e245aafaefdce4adee4eb5d17c2265f4479bfbcf30c061784979c763af33bb505c6fcf5affa7f19024480a8413157f6e4baddf8ffb8fef76d70c31c8a4edca98b884625540a8730b918a727912f7332b3467ad68a5bb93dc87c5d7127acbab430206192a5603905d80b904ea3bada45bd9fda9006896b4dc9cd10f19307c04855567bb70810419c8cc22b"}, 0xea, 0x0) (async) msgsnd(r7, &(0x7f0000000e00)={0x3, "1d8fdd4c825225da9033042b440d13f0290e2043ffc6f57261f72626172b2561c1ebee9b8bcaf14698120451e8d4657f75ade2b19fc136b1f3f0bb0a5929feee22dd76ca6b8233ab94c2432dcff420a561cb8f3f18f9de5e245aafaefdce4adee4eb5d17c2265f4479bfbcf30c061784979c763af33bb505c6fcf5affa7f19024480a8413157f6e4baddf8ffb8fef76d70c31c8a4edca98b884625540a8730b918a727912f7332b3467ad68a5bb93dc87c5d7127acbab430206192a5603905d80b904ea3bada45bd9fda9006896b4dc9cd10f19307c04855567bb70810419c8cc22b"}, 0xea, 0x0) fchown(r6, r8, r10) 4.333331974s ago: executing program 1 (id=5499): r0 = open(&(0x7f00000000c0)='./file0\x00', 0x80000000000206, 0x0) chmod(&(0x7f0000000080)='./file0\x00', 0x40) (async) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000280)='#!', 0x2}, {&(0x7f0000000540)="93", 0x1}], 0x2) (async, rerun: 64) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x10004) (rerun: 64) ioctl$FIONREAD(r1, 0x4004667f, &(0x7f0000001500)) (async) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)="2009345fd29d0a", 0x7}], 0x1) execve(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) openat$wskbd(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) clock_gettime(0xa, 0xfffffffffffffffe) ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000380)={0x10000, [{0x1, 0x2}, {0x0, 0xfffffffb}, {}, {0x0, 0x1}, {0x0, 0x9}, {0x0, 0x4}, {0x3, 0x8}, {0x0, 0xc8}, {0x5, 0x2}, {0x0, 0xff}, {0x2}, {0x3, 0x204}, {0x3, 0xfffffffd}, {}, {0x0, 0x7fffffff}, {0x0, 0x7}, {0x1, 0x6}, {0x1, 0x7}, {0x0, 0x2000000}, {0x0, 0x3}, {0x1}, {0x1, 0xfffffffc}, {0x2}, {0x0, 0x6}, {}, {0x1}, {0x2, 0x3}, {0x3}, {0x1}, {0x0, 0x2}, {}, {0x1, 0x57fd}]}) execve(&(0x7f0000000180)='./file0\x00', &(0x7f00000004c0)=[&(0x7f00000001c0)='\x00', &(0x7f0000000200)='/dev/wskbd0\x00', &(0x7f00000002c0)='/dev/wskbd0\x00', &(0x7f0000000340)='/dev/wskbd0\x00'], &(0x7f0000000640)=[&(0x7f0000000500)='-\x00', &(0x7f0000000580)='\x00', &(0x7f00000005c0)='#\x00', &(0x7f0000000600)='%]\x00']) (async) mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0x1604) (async) ioctl$KDSETMODE(0xffffffffffffffff, 0x20004b0a, &(0x7f0000000680)) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0e99db6de761f86, 0x0) (async) open$dir(&(0x7f00000000c0)='./file0\x00', 0x10, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) (async) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x110) (async, rerun: 32) syz_emit_ethernet(0x3e, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd606d9efb0008670000020000000000000000000afffffffe00000000000000000000ffffe0"]) (rerun: 32) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) 3.888097275s ago: executing program 1 (id=5518): r0 = socket(0x11, 0x3, 0x8) setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x186) r2 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) write(r2, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x2012, r1, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) writev(r3, &(0x7f0000000280)=[{&(0x7f0000001040)="bd", 0x1}], 0x1) close(r4) select(0x40, &(0x7f0000000080)={0x8, 0x3ff, 0x0, 0x7, 0x0, 0x1, 0x8000000000000000, 0x8}, &(0x7f0000000380)={0xffb, 0x0, 0x8, 0x0, 0x2, 0x4, 0x2}, 0x0, 0x0) setrlimit(0x8, &(0x7f0000000980)={0x8, 0x54}) r5 = syz_open_pts() close(r5) syz_open_pts() openat$wskbd(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) ioctl$TIOCSETAF(r5, 0x802c7416, &(0x7f0000000000)={0x40978b, 0x8, 0x9a31, 0x80a1a2, "bb08000100f167d910508bc49d7323000000007e", 0x0, 0xffffffff}) writev(r5, &(0x7f0000000700)=[{&(0x7f0000000080)="34eb4cd59e8456ebc0881681c60e1cd9e0bf01b618b3cb934394c5951c1db0fd943a", 0xff99}], 0x1) lseek(r5, 0x0, 0x0) sysctl$kern(&(0x7f00000014c0)={0x1, 0x2f}, 0x2, 0x0, 0x0, 0x0, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) ioctl$FIOASYNC(r5, 0x80047469, &(0x7f00000001c0)=0x1) socket$inet(0x2, 0x4000, 0x9) sendto$unix(r0, &(0x7f0000000100)="b10005016000009f05003f0407000000001813fecea10516d09a32693f316e357ae302b37b673031d2d236acf20b8f25be38164991f7c8cf5f882b297be1aa5b23deeb51e2f0ac3ebbd957699a1f139b672f4d335c223e7d090000000000000021020000000000008bfbb770c116a985c881ea772ec5890400000000ff0000361b1257aea8c5000020022138f2d900008a09000000000008e38295f80004073da51a1a1f00000080040e00000000000000", 0xb1, 0x0, 0x0, 0x1) 2.039143926s ago: executing program 7 (id=5578): sysctl$hw(&(0x7f0000000000)={0x6, 0xe}, 0x2, &(0x7f0000000040)="a029970f2c27e4fbb202abfa7080633072db79f423cd2454a82a81a6c9c20edf6439d814", &(0x7f0000000080)=0x24, 0xfffffffffffffffe, 0x0) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xedc, 0x400}) 1.910206781s ago: executing program 1 (id=5581): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$TIOCGETA(r0, 0x402c7413, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r1, 0x0, 0x200000000000b, &(0x7f0000000080)='\x00', 0x1) setsockopt$inet_opts(r1, 0x0, 0x200000000000a, 0x0, 0x0) unveil(&(0x7f0000001580)='./file0\x00', &(0x7f00000015c0)='x\x00') open(&(0x7f0000000000)='./file0\x00', 0x615, 0x106) ioctl$FIOASYNC(r0, 0x8004667d, &(0x7f00000006c0)=0xbcff) preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000480)=""/240, 0xfffffc47}, {&(0x7f00000000c0)=""/179, 0xfdac}, {&(0x7f00000002c0)=""/229, 0xe2}], 0x50, 0x0) r2 = socket(0x18, 0xc003, 0x3a) setsockopt(r2, 0x29, 0x6c, &(0x7f0000000080), 0x0) mmap(&(0x7f00007d0000/0x1000)=nil, 0x1000, 0x4, 0x2011, r0, 0xc) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) getrlimit(0x6, 0x0) unveil(&(0x7f0000000080)='.\x00', &(0x7f0000000000)='x\x00') openat$vmm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8, 0x0) ioctl$FIONREAD(r0, 0x4004667f, &(0x7f0000000180)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) unveil(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000300)='W\x00') r3 = accept$inet6(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000100)=0xc) accept(r3, 0x0, &(0x7f0000000140)) 1.733604302s ago: executing program 6 (id=5594): pipe(&(0x7f0000000640)={0xffffffffffffffff}) setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) close(r0) r1 = socket(0x2, 0x3, 0x7) pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket(0x2, 0x1, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffff00000000000008004500003000000000002c907800000020e0001002"]) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = getppid() fcntl$setown(r5, 0x6, r7) (async) fcntl$setown(r5, 0x6, r7) write(r6, &(0x7f00000002c0)="7c84cf179279b50eda5dd1951a661d2e3a20851082c188f8b3d8a063d2025ff0d27a44bc29bdcac27fcb7aaa95cb2007be22c5553cd2f66a1f419a83d4275218a89d7a7803f069d851ff628dd309c40f6e3c932af00cb6219ae6e21d2c28d492cd5404b16dfa627d93b1e8ad2ea49d2344c1a3b234bd6f1c70fd4252844a6e6ab7b8997bc55fa22ce951ee038d289078b95510b0f2473ce1348434f0ec4a885ee84fd08fc50f08ca7991af3f8c322b496466f804c4b700cc9391855bd0ee339196de2b5ec2d8425c711d3f9e051eb055d45c693d7549712f5284a9fbca7d15c5bf1a9c8e3b3c1a43983056782e046c29e3d57082f7743b8bf6d994cd3c26c85609eaa11e6f7bc4", 0xfffffdaf) close(r5) socket(0x2, 0x3, 0x0) (async) r8 = socket(0x2, 0x3, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) (async) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) ioctl$FIONREAD(r8, 0xc0206921, &(0x7f00000001c0)) (async) ioctl$FIONREAD(r8, 0xc0206921, &(0x7f00000001c0)) ioctl$FIONREAD(r4, 0x8040691a, &(0x7f00000001c0)) close(r2) socket(0x2, 0x3, 0x7) (async) socket(0x2, 0x3, 0x7) syz_emit_ethernet(0x138, &(0x7f0000000080)=ANY=[@ANYRESDEC=r1]) (async) syz_emit_ethernet(0x138, &(0x7f0000000080)=ANY=[@ANYRESDEC=r1]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) connect$unix(r3, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x3}, 0x8) write(r2, 0x0, 0x0) connect$unix(r1, &(0x7f0000000000), 0x10) (async) connect$unix(r1, &(0x7f0000000000), 0x10) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) (async) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r9 = open(&(0x7f0000000c00)='./file0\x00', 0x0, 0x0) rmdir(&(0x7f0000000080)='./file0\x00') (async) rmdir(&(0x7f0000000080)='./file0\x00') unveil(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='c\x00') symlinkat(&(0x7f0000000200)='./file2\x00', r9, &(0x7f0000000240)='.\x00') write(r0, 0x0, 0x0) 1.598534542s ago: executing program 6 (id=5597): setuid(0xee01) r0 = getppid() msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f00000000c0)={{0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x645, 0x0, r0, r0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) ioctl$WSKBDIO_GETMAP(r1, 0x80047476, &(0x7f0000000100)={0x0, 0x0}) r2 = fcntl$getown(r1, 0x5) ktrace(0x0, 0x87654321, 0x1a2c, r2) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x80007, 0x0, 0x0, 0x0, 0x0, 0x199, 0x7}, 0x85c, 0x6, 0x0, 0x0, 0x2, 0xfffffffffffffffe, 0x1735, 0x8000004}) mknod(&(0x7f0000000000)='./bus\x00', 0x3a0914c44f7b202d, 0x500) ktrace(&(0x7f0000000080)='./bus\x00', 0x1, 0x0, 0x0) sysctl$kern(&(0x7f00000000c0)={0x1, 0x33}, 0x2, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000000040)='./bus\x00', 0x100000000205f, 0x2802) r3 = open(&(0x7f0000000280)='./bus\x00', 0x0, 0x0) ioctl$FIONREAD(r3, 0x4004667f, &(0x7f0000000080)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) sysctl$kern(&(0x7f00000000c0)={0x1, 0x4e}, 0x3, &(0x7f0000000100)="71f95f84cf71b59c7afec37582", &(0x7f0000000080)=0x2, 0x0, 0x37) getsockname$unix(r1, &(0x7f0000000140)=@abs, &(0x7f0000000180)=0x8) 1.513273489s ago: executing program 6 (id=5598): r0 = getpid() r1 = accept$inet(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0xc) setsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f0000000140)={r0, 0xffffffffffffffff, 0xffffffffffffffff}, 0xc) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x7, &(0x7f0000000180)=[{0x0, 0x6a, 0x4, 0x6}, {0x5a9, 0x7, 0x9, 0x8}, {0x7, 0xf8, 0x7, 0x6}, {0x8, 0xa2, 0x2, 0x2}, {0xe, 0x94, 0x7, 0x8}, {0x40, 0x56, 0x6, 0x2}, {0x3, 0x3, 0x2, 0x9}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$BIOCSETIF(r4, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) ioctl$BIOCSETWF(r4, 0x80104277, &(0x7f0000000040)={0x0, 0x0}) write(r4, &(0x7f0000000600)="d81ad30100000000000100000000", 0xe) setpgid(0x0, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f00000000c0)={{}, 0x0, 0x0, r0}) getpid() mknod(&(0x7f0000000080)='./file0\x00', 0x2950, 0x13d4) r5 = socket(0x6, 0x2, 0xfe) bind(r5, &(0x7f0000000000), 0x10) connect$unix(0xffffffffffffff9c, &(0x7f00000002c0)=@abs={0x1, 0x0, 0x0}, 0x8) r6 = getuid() r7 = getgid() setsockopt$sock_cred(r5, 0xffff, 0x1022, &(0x7f0000000240)={r0, r6, r7}, 0xc) ktrace(&(0x7f0000000100)='./file0\x00', 0x1, 0x1212, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$WSKBDIO_GETMAP(r8, 0x80047476, &(0x7f0000000100)={0x0, 0x0}) r10 = socket(0x18, 0x1, 0x0) setsockopt(r10, 0x1000000029, 0x36, 0x0, 0x0) r11 = openat(r9, &(0x7f0000000000)='./file0\x00', 0x20, 0x80) ioctl$WSKBDIO_GETMAP(r11, 0x80047476, &(0x7f0000000100)={0x0, 0x0}) 1.493564379s ago: executing program 6 (id=5599): sysctl$hw(&(0x7f0000000000)={0x6, 0x9}, 0x2, &(0x7f0000000100)="82", 0x0, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$kern(&(0x7f0000000000)={0x1, 0x1a}, 0x2, &(0x7f0000000080), &(0x7f0000000100), 0x0, 0x0) sysctl$hw(&(0x7f0000000040)={0x6, 0xa}, 0x2, &(0x7f0000000080)="81ea10773d2b562302e6b66efde439f06d781c34b2406b87145da002366373d55edfbc5ccadb0a22330bdd11c760902db49b1b328b475e9bf5fe2c812f439b72aba03630ce98ef28dd81fb83b0", &(0x7f0000000140)=0x4d, &(0x7f0000000180)="22abcbae24307c8edb840bf8c791f91e3844ce81e5a95377257f3f66cfc71dccdc6733d9d2c3cb2217a7807b5601a01efa", 0x31) 1.444613845s ago: executing program 6 (id=5600): unveil(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='r\x00') unveil(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)='x\x00') ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) r0 = socket(0x18, 0x3, 0x0) mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0x450a) r1 = open(&(0x7f00000002c0)='./bus\x00', 0x2, 0x0) r2 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$WSMUXIO_ADD_DEVICE(r2, 0x80085761, &(0x7f0000000040)={0x3, 0x1c}) ioctl$WSDISPLAYIO_USEFONT(r2, 0x80585750, 0x0) ioctl$WSMUXIO_ADD_DEVICE(r1, 0x80085761, &(0x7f00000001c0)={0x3}) truncate(0x0, 0x6000000000) r3 = open(&(0x7f0000000080)='./file0\x00', 0x8000, 0xa) ioctl$VNDIOCSET(r3, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r3, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x205310) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r4 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIONBIO(r4, 0x20004101, 0x0) socket(0x2, 0x1, 0x0) openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0) mprotect(&(0x7f000006b000/0x1000)=nil, 0x1000, 0x1) r5 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$WSKBDIO_SETBELL(r5, 0x80105703, &(0x7f0000000140)) ioctl$FIONREAD(r0, 0xc0106924, &(0x7f00000001c0)) mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) r6 = open(&(0x7f0000000040)='./file0\x00', 0x2, 0x102) syz_open_pts() ioctl$FIONREAD(r6, 0xc0206981, &(0x7f0000000100)) 1.444026354s ago: executing program 6 (id=5602): mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(0xffffffffffffffff, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(0xffffffffffffffff, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) r0 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r0, 0xc0106924, &(0x7f00000001c0)) r1 = socket(0x18, 0x2, 0x0) ioctl$FIONREAD(r1, 0x80206931, &(0x7f0000000100)) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0e99db6de761f86, 0x0) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x2, 0x0) ioctl$FIONREAD(r2, 0xc028698d, &(0x7f0000000000)) r3 = syz_open_pts() ioctl$TIOCSTAT(r3, 0x20007465, 0x0) ioctl$TIOCSETD(r3, 0x8004741b, &(0x7f0000000040)=0x7) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) unveil(0x0, &(0x7f0000000000)='x\x00') ioctl$TIOCSETD(r3, 0x8004741b, &(0x7f0000000000)=0x7) execve(0x0, 0x0, 0x0) r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x3, 0x7, 0x7, 0x6}, {0x2, 0x9, 0x5, 0x1}, {0x9e, 0x0, 0x1, 0x86}]}) ioctl$BIOCSETIF(r4, 0x8020426c, &(0x7f00000002c0)={'tap', 0x0}) sysctl$hw(0x0, 0x36, &(0x7f0000000780)="0005000000000000001f00385c446200000610ed4e0000000000000000000087dada11956c6b7537e80353939651a5737d5a99da2b4d14cfe6528206cf32e86f54221754ce4aa93204692cc5bd741aeeeecac12e95878135b1a17e49fb9162d9f09b9de85c0b96547a467d3ce9e2ef2bc2e27b0d9c6792418ba162720f3929da5de6e5f729204422e780f1326b15ab8ec64ae386b01d5ef239b875614537d7869a3742a6a79683135e9b6eda0bfe867d066c32595ef0312a2c657b0f19c23a70c374de114a73e23f94ca0c62d54a1431b38f36a2d07c01820fb5d5987383793cf8459b50993f8ca0a2c96d0efc8bc47c2faed9c4f17c139785d54e3d1981ad6d8524a79cb2733b8358cfee15c30d99f46cdc90109a4184e44ed5eb88bc38b2e3bfbed2172833fba09947d5e660b85d83ef867f2dec5b82f16407969a5eb5ef693d4771", &(0x7f0000000000)=0x61, 0x0, 0x21) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$BIOCSETF(r4, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) sysctl$net_inet_divert(&(0x7f0000000040)={0x4, 0x1e, 0x2, 0x2}, 0x4, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) socket$inet(0x2, 0x1, 0x0) 1.166012865s ago: executing program 7 (id=5604): r0 = socket$inet(0x2, 0x3, 0x0) bind$inet(r0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000dc0)=""/149, 0x95, 0x2, 0x0, 0x0) execve(0x0, 0x0, 0x0) setrlimit(0x8, &(0x7f0000000980)={0xb, 0x54}) r1 = syz_open_pts() getpeername$inet(r0, &(0x7f0000000100), &(0x7f0000000140)=0xc) r2 = socket(0x800000018, 0x1, 0x0) bind$unix(r2, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) listen(r2, 0x1) r3 = socket(0x18, 0x4001, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x2, 0x5, 0x100000000000007, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) shutdown(r3, 0x2) close(r2) r4 = shmget(0x3, 0x2000, 0x240, &(0x7f0000499000/0x2000)=nil) shmctl$IPC_STAT(r4, 0x2, &(0x7f0000001680)=""/69) ioctl$WSMUXIO_REMOVE_DEVICE(0xffffffffffffffff, 0x80085762, &(0x7f0000000040)={0x1}) r5 = socket(0x18, 0x3, 0x3a) setsockopt(r5, 0x29, 0x6c, &(0x7f0000000040), 0x4) r6 = socket(0x18, 0x2, 0x0) close(r6) fchdir(r6) setsockopt$inet6_MRT6_ADD_MIF(r5, 0x29, 0x66, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1}, 0xc) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) setsockopt$inet6_MRT6_ADD_MIF(r6, 0x29, 0x67, &(0x7f00000000c0)={0x203, 0x0, 0x0, 0xffff, 0x40000}, 0xc) close(r1) r7 = syz_open_pts() ioctl$TIOCSETA(r7, 0x802c7414, &(0x7f0000000040)={0x766a, 0x7ff, 0xcfe, 0xfff, "9cdc4580307e080004006bb5b40040e6015fdd04", 0x7, 0x9}) writev(r1, &(0x7f0000000000)=[{&(0x7f00000009c0)="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", 0xfd98}], 0x1) 1.164900656s ago: executing program 4 (id=5605): setgid(0xffffffffffffffff) setgroups(0x0, 0x0) (async, rerun: 64) setuid(0xffffffffffffffff) (async, rerun: 64) r0 = socket(0x10, 0x3, 0x0) sendto$unix(r0, &(0x7f0000000340)="b10005010000009f05003f0107000000211c13fecea79c5dfaf66e8d0300000000000000fdef3044d2d236acf20bf404be01000000f7c8cf5f8823297be1aa0504000051e2f0ad3ebbc25769a51f139b672f335c22db830c032bfa896443c32618210000720fd38bdb0000fd54c125191b1257aea8c500001602fbfe0c2300008abf090000000008e37193f834371205050052fbe03f49b11b7aaeb70000fca65361ba84913f0100000000000006000000", 0xb1, 0x408, 0x0, 0x0) getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f00000001c0), &(0x7f0000000280)=0xc) sysctl$kern(&(0x7f0000000200)={0x1, 0x9}, 0x2, &(0x7f0000000240)="3f2cf2b0", &(0x7f0000000300)=0x4, &(0x7f0000000340)="3358c543718e8bc99376f31ee8fa3edc9d80bba2bf1009b4c759015729c7ac08dca3a67ccfc6103aa430772792301a1ae913ff74c4456c7bec28492948b133e658daa4d7e556395ffb26c69e885b2363adc562cde63678cf09bde3793c53da0f18b76af9504b522e1851c76303200a54bc506e9f0443e00ac4320b675b496901df6d6d25", 0x84) (async) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x44, 0x6}, 0x80000000, 0xfffffffffffffffd, 0x0, 0x0, 0x7, 0x1, 0x200023}) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) r1 = socket(0x18, 0x2, 0x0) setsockopt(r1, 0x1000000029, 0x2e, &(0x7f0000000040)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) (async) setsockopt(r1, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbdf13b9fd812eaa4e713048e69931929648", 0x14) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) setrlimit(0x8, &(0x7f0000000040)={0x7, 0x50}) (async) msgget(0x2, 0x25) (async) r4 = syz_open_pts() close(r4) (async) syz_open_pts() r5 = openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x280, 0x0) fchown(r5, 0x0, 0x0) ioctl$TIOCSETAW(r4, 0x802c7415, &(0x7f0000000080)={0x29f56361, 0x7f, 0xffffffff, 0xfffffffc, "097237e3160104785b0a56d864d3c3a393f4c000", 0xffffffff, 0xfffffffc}) (async) writev(r4, &(0x7f0000000200)=[{&(0x7f0000000680)="7a8b258aa06293ddc32f447cd62969892d78faf028ac6fe876634c00b7ec3f6e53c8f746c978a611ca3eef67886e1595d77f4f0f4e4887120a2ee6f1c69ade852402f16690f564345012ccc1cb9f41dd74b97224c25230da12982e42094ba3d635c6a69fdda68b063ff373bf677dd713f894dbfdd252f2d9df4fa48eedd91b9e407bc86b038e2bf30021e715c2154d349c6502612f1099412fc7d27e26fcaefb3b85b1b5cb275b59fd84fae2af3c107eb78b983fac0085597293dd1161d7d9e408cd2f39b1199728fc104c9253a35b053b30ff5ee83006b7698202d517f0f4284e5dd730f1ff976fb969d0cbc5b6e051d53d20e8e9c5941f31bffa718287a81ee05bcc5c5c75f8463bfd49bb8891d80fd6abeb00e314d9bbe80cd5e11d73a1d203bd4f8ce267db4bd3f91b2a2eb76402ed4c13b081a3f6ae3cc9e660020d94433705d1982ae53a9babd904e4f40221d5b2d1f3d377dd266acbde77ddaf06a73d7261981eb0d7df8efbd4c35589077196d8dbe549761693788159a86abfb2956b0d6d8478b394047b2fc940cd922cd7ae2098f89ee3d3482910841097bda2b1ad4240df7382c7b17e562e5c5547b7587de2c577c1b2243ab446e29baf14f2ed03f892ef8a634aecbbbfd0f1866a8eea9b46a34cf82844e8c089b6086a888cbb2e03d61c319ba6284d215c8aeb1d58be589b6cf388de625aaca78c4cc7c7f00157e17dd5d63e7bd1a133bb15e7346a1158aea41642f730d3f0782b20bd638feb8f44c6ea6e1a6d57e38f1c5536d0f2f4a718d24ec3a0a00c8f81c2a243f757965e4107efd858c7a4a2e56f7e30c1f787bc48b759bf774f2a8bd08f127aa443339c61d85c94350abae99a0f5b4e061990d5b66c51c1cb20c056f148d57a42c975c45ed022afc21c285db770c031d8d5476cea5d7dd3c13ba60fa915bb076770b1fbb111fe89934808993bdd45dc36fe802567b464a2c6b3a2c317857165a0ea8d8e44886455683e2a79a8b9a1032deb06e697d48fc1dc5624cb0b635ede60862d2a170e0e50865337e8e171cbcb7fd5c0579305384c4235e85714f3dab0e7cc54fade4d21beb039bb5731a16efc04d76eb8e37abd82d6c3d4443411cd77be0e4f1925deddc75c8f58cf01c5bd7361be9427c04325d29f2025c16692f26d27c51a4204ef033fc23710c5f8518e67fad8a86c9b61f0d89eede7d661dfe000b76a1568171414b5346f966689194b9b0c7d520a484cd83fa80ec6a2f66ff079c1a8ec939205f83429a66b934f0c730331a6cb63117181a452b9cb64279ed1c33e6d187f71bcf5a7b9fbd652e9aef9af0a894564cca5e47566b9b2d377b3baf5e2dd3cf286ffd31479a5419e98dbdbfb6c1280666a29d2db6bfbb7abd2512461b6c25614541c4c4356e1d153954b31f00a37354dc30fadf224cf7d486cf208896d308303987379bb13f3b43e8671482167404936bf560ed4e3eaee013acd5082eff2db674ad20420ccc37e941426973705a8aa96bd72d6060c444fe2860a2f45001cec98fddd75c179c76d461df07d0fc6e61eb6aef878e1a21de4b75145185558fb2f89e971372e53708e1a9176c7156bc8c3c30d2e570ce608600e92a9d7af2af70d97d033baf2ad00f256bf4ca6c06bb5500565e0c899d53636ed55f2506a5bc7040c6a004ada6cf65bb0d4a5ce92bac6296137ca7c6df7e487a6e2fb289ef33d26a63c28391a8021a34de3d301", 0x4cb}], 0x1) getsockopt$sock_cred(r2, 0xffff, 0x1022, &(0x7f0000000580)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) (async) mquery(&(0x7f000071e000/0x3000)=nil, 0x3000, 0x4, 0x0, r3, 0xfffffffffffffff0) shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffa000/0x3000)=nil) r7 = semget$private(0x0, 0x3, 0x100) semctl$IPC_SET(r7, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, r6}}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x4e}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000180)=0x66, 0x0, 0x27) 1.153088182s ago: executing program 4 (id=5606): mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) r0 = open$dir(&(0x7f0000000000)='./file0/file0\x00', 0x200, 0x101) fchmodat(r0, &(0x7f0000000080)='.\x00', 0x80, 0x2) r1 = open(&(0x7f0000000040)='./file0\x00', 0x2, 0x102) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r2 = getpid() setpgid(0x0, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f00000000c0)={{}, 0x0, 0x0, r2}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$WSKBDIO_GETMAP(r3, 0x80047476, &(0x7f0000000100)={0x0, 0x0}) r5 = getppid() setpgid(0x0, r5) r6 = msgget(0x0, 0xa0) msgsnd(r6, 0x0, 0x0, 0x800) r7 = getgid() getsockopt$sock_cred(r4, 0xffff, 0x1022, &(0x7f0000000140)={0x0, 0x0}, &(0x7f0000000180)=0xc) getgroups(0x3, &(0x7f0000000200)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]) msgctl$IPC_SET(r6, 0x1, &(0x7f00000002c0)={{0xff, 0xffffffffffffffff, r7, r8, r9, 0x30, 0x401}, 0x9, 0xfffffffffffffff9, r2, r2, 0x4, 0x1, 0xb, 0x7ff}) ioctl$FIONREAD(r1, 0xc0286988, &(0x7f00000001c0)) 1.152798304s ago: executing program 4 (id=5607): openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) r0 = syz_open_pts() ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f00000000c0)={0xf, 0x3, 0xfffffffe, 0xfffffff6, "ff0107002015c8a32d00000065c0bdf9c6f04aaf", 0x9, 0x40000}) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x40047601, 0x0) ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000380)={0x10000, [{0x1, 0x2}, {0x0, 0xfffffffb}, {}, {0x0, 0x1}, {0x0, 0x9}, {0x0, 0x4}, {0x3, 0x8}, {0x0, 0xc8}, {0x5, 0x2}, {0x0, 0xff}, {0x2}, {0x3, 0x204}, {0x3, 0xfffffffd}, {}, {0x0, 0x7fffffff}, {0x0, 0x7}, {0x1, 0x6}, {0x1, 0x7}, {0x0, 0x2000000}, {0x0, 0x3}, {0x1}, {0x1, 0xfffffffc}, {0x2}, {0x0, 0x6}, {}, {0x1}, {0x2, 0x3}, {0x3}, {0x1}, {}, {}, {0x1, 0x57fd}]}) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) ioctl$VT_OPENQRY(0xffffffffffffff9c, 0x40047601, &(0x7f0000000040)) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)="8e967bab6aaec8485639251675c863d77590d45512c52519a7bad3a7d2669998fbd1ca9e9329828d222f0630e32867af09730c5ab2ef288fc3526d8433584112081dbe1e5f4a0d67fc65378ad8156b07e360070b5e4a4a107a22d2504e99738e77c29b5c7bb71b4494b42295960d08d436168ae6c68ab8c5c11a432f972f4212bdcf38a5d6fc2bc8ec219c326e9bf3e6b46d32cf4fa02f06c25764d07cec56c622d6c6e0266956a9c1dc1f5d40b122e37ec3f007ef086064b8d5e591b119566a8a06a4a36d3a5b95f7cf8dc660f22d9fb70c397b06a000bb", 0xd8}], 0x1) openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) (async) syz_open_pts() (async) ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f00000000c0)={0xf, 0x3, 0xfffffffe, 0xfffffff6, "ff0107002015c8a32d00000065c0bdf9c6f04aaf", 0x9, 0x40000}) (async) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x40047601, 0x0) (async) ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000380)={0x10000, [{0x1, 0x2}, {0x0, 0xfffffffb}, {}, {0x0, 0x1}, {0x0, 0x9}, {0x0, 0x4}, {0x3, 0x8}, {0x0, 0xc8}, {0x5, 0x2}, {0x0, 0xff}, {0x2}, {0x3, 0x204}, {0x3, 0xfffffffd}, {}, {0x0, 0x7fffffff}, {0x0, 0x7}, {0x1, 0x6}, {0x1, 0x7}, {0x0, 0x2000000}, {0x0, 0x3}, {0x1}, {0x1, 0xfffffffc}, {0x2}, {0x0, 0x6}, {}, {0x1}, {0x2, 0x3}, {0x3}, {0x1}, {}, {}, {0x1, 0x57fd}]}) (async) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) (async) ioctl$VT_OPENQRY(0xffffffffffffff9c, 0x40047601, &(0x7f0000000040)) (async) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)="8e967bab6aaec8485639251675c863d77590d45512c52519a7bad3a7d2669998fbd1ca9e9329828d222f0630e32867af09730c5ab2ef288fc3526d8433584112081dbe1e5f4a0d67fc65378ad8156b07e360070b5e4a4a107a22d2504e99738e77c29b5c7bb71b4494b42295960d08d436168ae6c68ab8c5c11a432f972f4212bdcf38a5d6fc2bc8ec219c326e9bf3e6b46d32cf4fa02f06c25764d07cec56c622d6c6e0266956a9c1dc1f5d40b122e37ec3f007ef086064b8d5e591b119566a8a06a4a36d3a5b95f7cf8dc660f22d9fb70c397b06a000bb", 0xd8}], 0x1) (async) 1.07167086s ago: executing program 4 (id=5608): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r0, &(0x7f0000001440)={0x0, 0x1}, 0x10, 0x0) recvmsg(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000100)=""/178, 0xb2}], 0x1, 0x0}, 0x1000) r2 = socket(0x11, 0x3, 0x0) setsockopt(r2, 0x11, 0xfffffffd, 0x0, 0x0) syz_emit_ethernet(0x42, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb080045000034006600000006907800000006ac1400aa4e204e239ebf935b45c27aea56920e2546c8bbef6d5e5008fc52feb1009f3e87a17cc0991410a69d8a4caaee1961d948d399077feb88a0e49f78cea994a06463bad889a7af0c07ac24", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="800200029078fffd050202040400030301000000"]) 1.071090337s ago: executing program 1 (id=5609): r0 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$KDSETLED(r0, 0x20004b42, &(0x7f0000000040)=0x4) truncate(&(0x7f0000000080)='./file0\x00', 0x510ead25) fchmod(r0, 0x4) lseek(r0, 0x2c, 0x1) r1 = geteuid() r2 = getgid() fchownat(r0, &(0x7f00000000c0)='./file0\x00', r1, r2, 0x2) getsockname(0xffffffffffffffff, &(0x7f0000000100)=@in6, &(0x7f0000000140)=0xc) ioctl$VNDIOCCLR(r0, 0x80384601, &(0x7f0000000200)={&(0x7f0000000180)='./file0\x00', 0x4, &(0x7f00000001c0)='./file0\x00', 0x8}) utimes(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={{0xffffffffffffffff, 0x8}, {0x1, 0x1000}}) r3 = accept$inet6(r0, &(0x7f0000000380), &(0x7f00000003c0)=0xc) kevent(r0, &(0x7f00000002c0)=[{{r0}, 0xfffffffffffffffa, 0xe1, 0xf0000000, 0x8001, 0xffffffffffffd463}, {{r0}, 0xfffffffffffffff9, 0x2, 0x1, 0x3, 0x8eb87ab}, {{r0}, 0xfffffffffffffffe, 0x18, 0x1, 0x4, 0x8000000000000001}, {{r0}, 0xffffffffffffffff, 0x40, 0xfffff, 0x2, 0x5118df66}, {{r0}, 0xfffffffffffffffc, 0x9, 0x4, 0x2, 0x80000001}], 0x158da1dd, &(0x7f0000000400)=[{{r0}, 0xfffffffffffffff8, 0x50, 0x40, 0x8000000000000001, 0x3}, {{r0}, 0xfffffffffffffffc, 0x20, 0x1, 0xa85, 0x6}, {{r0}, 0xfffffffffffffffd, 0x1, 0x40, 0xe28, 0x669}, {{r3}, 0xfffffffffffffffb, 0x2, 0x2, 0xc98, 0x5}, {{r0}, 0xfffffffffffffffa, 0x38, 0x2, 0x2, 0x2}], 0x5, &(0x7f00000004c0)={0x38e5}) mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1) r4 = openat$tty(0xffffffffffffff9c, &(0x7f0000000500), 0x10000, 0x0) r5 = getpid() fcntl$setown(r4, 0x6, r5) getsockname$inet(r0, &(0x7f0000000540), &(0x7f0000000580)=0xc) ioctl$WSKBDIO_COMPLEXBELL(r0, 0x80105702, &(0x7f00000005c0)={0x8, 0x190, 0x9, 0x1}) pwrite(r3, &(0x7f0000000600)="c90a311b44dba63e9162bb267634619323b46fa031d540d6bf95799782b5ee63ece0d0bac6388970de710b9a09b0910f51f78e8d3ea1e418e432f261090f5c6d506fffee39360f6d16dd02fd9275730aa96b3ff6eae2987b434104e879bf820e5f6985e535ce79d6de82173cb8068c0559d47c7da9cc8ebb289dd3656c84b8ce6da0102b9e382d80d839c429", 0x8c, 0x6) ioctl$WSDISPLAYIO_DELFONT(r0, 0x8058574f, &(0x7f00000006c0)={'./file0\x00', 0x9, 0x10001, 0x4, 0x0, 0x6, 0x9, 0x3, 0x1, 0x2, 0x3, 0x6b}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x2011, r3, 0x6) ioctl$WSKBDIO_SETDEFAULTBELL(r0, 0x80105705, &(0x7f0000000740)={0x3, 0x45b1, 0x7, 0xc33}) writev(r4, &(0x7f0000000840)=[{&(0x7f0000000780)="f7fea14164128d85b10d68f464f8d034ab3adfa4c78c07aee328daf56ede8669dcc01bb67254d553c38eeb561fcba1f6f6090810b8fb6bf612c3fa973b3676c74608fde703edf4615dee82abf4f3f4a5542195c3b3ef46884ee5f92b82e237de903aaf7111d64ad296720f5a3be8e92fd385c5bc46c45ec4a40bde954dbebcda32d49f9058e041f0903b2770538a04814c4e7e98e1302c656c0e53f3313de451a0d496c238267813dbbf466f1b196e3d82fb21039b74", 0xb6}], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$WSKBDIO_SETDEFAULTBELL(r0, 0x80105705, &(0x7f00000008c0)={0x9b1, 0x6, 0x79, 0x7}) bind(r0, &(0x7f0000000900)=@in6={0x18, 0x3, 0x6504}, 0xc) getsockname(r6, &(0x7f0000000940)=@in, &(0x7f0000000980)=0xc) r7 = kqueue() fsync(r7) 957.861573ms ago: executing program 0 (id=5610): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x80, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000080)={'tap', 0x0}) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000580)={0x2, &(0x7f0000000040)=[{0x48, 0xf9, 0x8, 0x2}, {0x806, 0x3, 0xff, 0xbe9}]}) syz_emit_ethernet(0x4a, &(0x7f0000000140)=ANY=[]) r1 = kqueue() ioctl$FIOASYNC(r1, 0x8004667d, &(0x7f0000000140)=0x2) 956.600589ms ago: executing program 0 (id=5611): r0 = socket(0x18, 0x3, 0x0) getsockopt(r0, 0x29, 0x67, 0x0, 0x0) mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0xd02) chmod(&(0x7f0000000040)='.\x00', 0x35e) setuid(0xee01) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) recvfrom$inet(r0, &(0x7f0000000800)=""/129, 0x81, 0x1802, 0x0, 0x0) ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x4, [{0x2, 0x800}, {}, {0x0, 0x7fff}, {}, {}, {0x0, 0x9}, {0x1}, {}, {0x0, 0x1}, {0x2, 0x1}, {}, {0x0, 0x6}, {0x3}, {}, {}, {0x0, 0x5}, {0x0, 0x1}, {0x1}, {0x0, 0x1}, {0x3}, {}, {}, {0x0, 0x9}, {0x3, 0x2}, {}, {0x3, 0x800}, {}, {0x3}, {0x3}, {}, {0x2, 0x8001}, {0x0, 0x4}]}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x37}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$net_inet_tcp(&(0x7f00000000c0)={0x4, 0x2, 0x6, 0x3}, 0x4, 0x0, 0x0, 0x0, 0x0) rename(&(0x7f00000007c0)='./file0\x00', &(0x7f0000001040)='.\x00') ioctl$WSKBDIO_SETBELL(0xffffffffffffffff, 0x80105703, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x3}) sysctl$kern(&(0x7f0000000040)={0x1, 0x3e}, 0x3, &(0x7f00000000c0)="3bf2ee74e747c82dad6eb2a36fa755e1a3925fe49afca7e63b52fa65ccaa74d6e6b85b6cdced70357ef201f97842b1068dca31553fa2d7031f38c03e56ad0e24dfc4f97b8b7f81499647e6e7725765d61436c85e43c15d12a78cb8c57ddde87021d7b685507fd3e0652f35e45bdaa3afd86c4fe557433e4c2b632de71c951516adff26aa2e48b45f8ce92bcefd3eceefabee7e3ebe806fdb4f6af569ae94b5d127", &(0x7f0000000080)=0x4, &(0x7f0000000340)="5a67923ef0cb189971421989ebcff78831a7581e2f27caa362f1363042efb27688b2c899220fb2fe37e467d974592496856ca7b78060998608c2f952e43bc0bf11555cc5cb0fe17b2ec1be389871829bfe10dd4c4d2c8f9da2bd2868fd86791dc09dc4fa89a217458bdaed31003fdc3a7323189ba3ccbad6c8af17516e4557f61ad20180000000000000125f568ca7d3396b9057255f381855110eb3a673713716cdf010ddfa7977f92cf061ad125ca670353b45d53aae196b00271f9d3452b523b3dea22d6027625614312183724b71c7eb02083a410c1c99fa455013521f98686e472b70b560f7021f567adf4d", 0x4) read(r0, &(0x7f0000000740)=""/48, 0x30) r1 = open(&(0x7f0000000280)='./bus\x00', 0x0, 0x0) ioctl$VNDIOCGET(r1, 0xc4104603, &(0x7f00000002c0)={'./bus\x00', 0x7, 0x0, 0x4}) setreuid(0xee00, 0x0) syz_open_pts() r2 = accept$unix(r1, &(0x7f0000000180)=@file={0x0, ""/51}, &(0x7f00000001c0)=0x35) getsockname$unix(r2, &(0x7f0000000200)=@abs, &(0x7f0000000700)=0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000240)="ea00000100000000", 0xc) pread(r1, &(0x7f0000000000)="2beba8c5bfaaff44b437dfbb000000", 0x50cc3a, 0x80000000) 955.743527ms ago: executing program 1 (id=5612): ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000240)={'./file0\x00', 0x4, 0xc2, 0x6, 0x1, 0x1040807, 0xfffeffff, 0x0, 0x1, 0x2, 0x2004004, 0x80000001}) setitimer(0x1, &(0x7f0000000140)={{0x80000000, 0x100800000000009}, {0x807fff, 0x33e}}, 0x0) ioctl$BIOCSETWF(0xffffffffffffff9c, 0x80104277, &(0x7f0000000180)={0x6, &(0x7f0000000200)=[{0x1e49, 0x31, 0x8, 0x2}, {0x4, 0x8, 0xcd, 0x1}, {0x800, 0x7, 0x6, 0xffff0000}, {0x8, 0x9, 0x48, 0x9}, {0x3, 0xf, 0xe, 0x81}, {0x7, 0x3, 0x53, 0x3a02}]}) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffff06000000aa"]) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="00001c00ac14"]) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mknod(0x0, 0x1ffa, 0x0) pwrite(0xffffffffffffffff, 0x0, 0x0, 0x5) r0 = socket(0x2, 0x1, 0x0) bind(r0, &(0x7f00000002c0)=@in6={0x18, 0x0, 0x3, 0xf7}, 0xc) listen(r0, 0x0) r1 = accept$unix(r0, 0x0, &(0x7f0000000340)) getpeername$unix(r1, &(0x7f0000000380)=@abs, 0x0) r2 = socket(0x2, 0x8000, 0x0) chmod(0x0, 0x35e) setuid(0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0/file0\x00', 0xb5219f1000b913f1, 0x8) ktrace(0x0, 0x4, 0xd27d43220c7df9f, 0x0) r3 = accept$unix(r0, &(0x7f0000000080)=@abs, &(0x7f00000000c0)=0x8) connect$unix(r3, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0xa) connect$unix(r2, &(0x7f0000000000), 0x10) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000000), 0x10) r4 = socket(0x18, 0x3, 0x0) r5 = socket(0x1, 0x2, 0x0) sysctl$net_inet6_ip6(&(0x7f0000000080)={0x4, 0x18, 0x29, 0x3}, 0x4, 0x0, 0x0, 0x0, 0x44) ioctl$FIONREAD(r5, 0xc0106924, &(0x7f00000001c0)) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) ioctl$FIONREAD(r4, 0x8080691a, &(0x7f0000000100)) 889.897781ms ago: executing program 2 (id=5613): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x10, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000080)={'tap', 0x0}) (async) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x81, 0x2d, 0x7, 0x208}, {0x50, 0xf, 0x8, 0x5}, {0x16, 0x80, 0x7}]}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000000c0)="7fb4", 0x2}], 0x1) setrlimit(0x5, &(0x7f0000000080)={0xe, 0x51}) (async) syz_open_pts() (async, rerun: 64) writev(0xffffffffffffffff, 0x0, 0x0) (rerun: 64) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) (async) setrlimit(0x8, &(0x7f0000000980)={0x8, 0x54}) syz_open_pts() (async) r1 = syz_open_pts() ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000040)={0xfffffffe, 0xfffffffd, 0xffef9ff6, 0x6, "4b06a6bcff0300dba800000000000800", 0x0, 0xf}) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0xa6, 0x3, 0x8, 0x80000001, 0xa1b0, 0x10001, 0x10, [{0xfffffffc, 0x2890, 0x4, 0x5}, {0x6, 0x9, 0x8, 0xfffffff9}, {0x1, 0xfffffffa, 0xfffffffc, 0x9}, {0x4, 0x800, 0x8007, 0x7}, {0x401, 0x3, 0x2800, 0x7}, {0x1, 0x4, 0x3, 0x9b}, {0xce1, 0xffffffff, 0x4f4, 0x10000}, {0x6, 0x803, 0x3, 0x7}, {0xd0f5, 0x82, 0x5, 0x9}, {0x6a75, 0x8009, 0x1000, 0x4}, {0x1cc, 0x10001, 0xc, 0x3}, {0x7, 0xa, 0x8}, {0x3, 0x7, 0x6, 0x1}, {0x6, 0xfffffffa, 0x60, 0x6}, {0x10008, 0x5, 0x5, 0x4}, {0x0, 0x1, 0xfff, 0x30004}]}) (async) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) (async) sysctl$kern(&(0x7f0000000000)={0x1, 0x48}, 0x2, 0x0, 0x0, 0x0, 0x0) (async) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x8a, 0x0) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) (async) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x3, 0x8e, 0x7f, 0x40000007}, {0x2c, 0xc, 0xd5, 0x4006}, {0x6, 0x9, 0x1, 0xfffffff2}]}) (async) sysctl$hw(0x0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) (async) writev(0xffffffffffffffff, 0x0, 0x0) (async) setrlimit(0x8, &(0x7f0000000980)={0x8, 0x54}) close(0xffffffffffffffff) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x8004741b, &(0x7f0000000000)=0x2) writev(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$TIOCDRAIN(0xffffffffffffffff, 0x2000745e) (async, rerun: 32) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async, rerun: 32) ioctl$BIOCSETWF(r2, 0x80104277, &(0x7f0000000040)={0x0, 0x0}) write(r2, &(0x7f0000000600)="d81ad30100060000000100000000", 0xe) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) fcntl$setstatus(r0, 0x4, 0x4) 783.325194ms ago: executing program 2 (id=5615): r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x186) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x2012, r0, 0x0) (async) mknod(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x0) (async) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x0) (async) mknod(&(0x7f0000000180)='./bus\x00', 0x2000, 0x8026d4) (async) rename(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000100)='./file0\x00') link(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000d40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') sysctl$net_inet_tcp(&(0x7f0000000300)={0x4, 0x2, 0x6, 0x9}, 0x4, &(0x7f0000000340)="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", &(0x7f00000002c0)=0x210, 0x0, 0x0) (async) r1 = kqueue() (async) mknod(&(0x7f0000000040)='./file0\x00', 0x6000, 0xe02) (async, rerun: 64) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x9) (rerun: 64) readv(r2, &(0x7f0000000180)=[{&(0x7f0000000240)=""/203, 0xcb}], 0x1) fcntl$getown(r1, 0x5) socketpair(0x6, 0x3, 0x4, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r4, &(0x7f0000000900)={&(0x7f00000008c0)={&(0x7f0000000040)=@in, 0xc, &(0x7f0000000780)=[{&(0x7f0000000100)=""/227, 0xe3}, {&(0x7f0000000580)=""/213, 0xd5}, {&(0x7f0000000200)=""/176, 0xb0}, {&(0x7f0000000680)=""/98, 0x62}, {&(0x7f0000000080)=""/56, 0x38}, {&(0x7f0000000700)=""/110, 0x6e}], 0x6, &(0x7f0000000800)=""/169, 0xa9}, 0x7}, 0x10, 0x1, &(0x7f0000000940)={0xffffffffffffffff, 0x3}) (async) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2010, r3, 0x9) 595.061826ms ago: executing program 7 (id=5619): r0 = socket$inet(0x2, 0x5, 0x80) r1 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f00000002c0)="8f5db72643a520b574e83600ae0b5ba54524b923232e1bac6f6cba84407ab2408131670ddb1bbb97888922aba0c2c71b6c29aeddc55a7aefecd0e2313ed5c4c9d5d051c095cdcdd08ac3cc446076a613a4367ae29eded6f9176676a607fbb6e1e06d73f3f6063cea141d7fa190c430563362b7834db198398247205b33afea307b7a28708269cb432d", 0x89}, {0x0}], 0x2) ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x0, 0xb3f, {[0xfffffbfffffffffb, 0x0, 0x2, 0x100000000, 0x6, 0x5, 0xdf60, 0xfffffffffffffffe, 0x67569535, 0x2f01, 0x4, 0x3, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x100], [0xfffffffffffffffe, 0x80000001, 0xf, 0x8000, 0x5b, 0x1, 0x1fe, 0x9, 0x0, 0x2], [0x120000001, 0x2, 0x3, 0x0, 0xb, 0xffffffff, 0xffffffff00000000], [0x100, 0x5, 0x7ffffffffffffffe, 0x100000000, 0xfffffffffffffffe, 0x8], [{0x0, 0x20000004, 0x0, 0x2}, {0xfffc, 0x2, 0x5}, {0x4, 0x2, 0xffffffff, 0x80}, {0x3, 0x5, 0x4, 0xfffffffffffffffe}, {0x6, 0x2, 0x1000, 0x8}, {0x0, 0x2003, 0xa8d, 0x2000000000000000}, {}, {0x0, 0x100, 0x0, 0x8}], {0x0, 0x5, 0x5}, {0x4, 0x80000000, 0x6d5, 0x2}}}) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) unveil(0x0, &(0x7f0000000100)='x\x00') mkdir(0x0, 0x0) setsockopt$inet_opts(r0, 0x0, 0x200000000000a, &(0x7f0000000000)="ea00005c00000000", 0x1) setsockopt$inet_opts(r0, 0x0, 0x9, &(0x7f0000000040), 0x0) 532.808892ms ago: executing program 7 (id=5624): r0 = semget$private(0x0, 0x2, 0x1) semctl$GETVAL(r0, 0x4, 0x5, &(0x7f0000000000)=""/62) semop(r0, &(0x7f0000000040)=[{0x3, 0x7, 0x1000}, {0x3, 0x7, 0x1000}, {0x0, 0xb41, 0x1800}, {0x3, 0xcd57, 0x800}, {0x1, 0x3, 0x1000}, {0x2, 0x3}], 0x6) semop(r0, &(0x7f0000000080)=[{0x1, 0x4, 0x800}, {0x1, 0x16, 0x1000}], 0x2) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x400, 0x100) setsockopt(r1, 0xff, 0x0, &(0x7f0000000100)="6c73c8157bd95172e45b800d22dafb33f3bb7aa871f416360db0008fd6cdf54ba3aa3f7bfdfe831f", 0x28) semctl$GETPID(r0, 0x2, 0x4, &(0x7f0000000140)=""/143) semctl$IPC_RMID(r0, 0x0, 0x0) r2 = semget$private(0x0, 0x2, 0x4) semop(r2, &(0x7f0000000200)=[{0x2, 0x8473}, {0x1, 0x3, 0x1000}, {0x1, 0xe}, {0x0, 0x6, 0x1000}, {0x0, 0x8, 0x1000}, {0x2, 0x0, 0x1800}], 0x6) semop(r2, &(0x7f0000000240)=[{0x3, 0x6, 0x1000}, {0x4, 0xf1}, {0x4, 0x9}, {0x1c907d10307fdc5e, 0x7, 0x1800}], 0x4) write(r1, &(0x7f0000000280)="7772eee5987c9f38859b07d7d14ef2be0c35f8d296efc9b987e31ad2054f61b46454a3f4846c1e72a39ad5749da81e5dea918889ffa5b2f49b45b19ddef56bad36c55012347c6dab289abbb5cc5f7b2a35611780f79c75dc58260980bf88d3d599fa22dc0a1fd5882ae539b9362e70dd2581c0e8b26a7b4bea71cf200f67b42726a2a0f4633eaf", 0x87) semctl$SETVAL(r0, 0x1, 0x8, &(0x7f0000000340)=0x80000001) semget(0x2, 0x4, 0x28b) r3 = semget$private(0x0, 0x0, 0x400) semctl$SETVAL(r3, 0x2, 0x8, &(0x7f0000000380)=0xfffffff2) semctl$GETVAL(r3, 0x1, 0x5, &(0x7f00000003c0)=""/229) semctl$GETZCNT(r2, 0x3, 0x7, &(0x7f00000004c0)=""/131) semctl$IPC_RMID(r2, 0x0, 0x0) r4 = semget(0x0, 0x4, 0x402) semctl$GETALL(r4, 0x0, 0x6, &(0x7f0000000580)=""/110) r5 = msgget$private(0x0, 0x10) msgrcv(r5, &(0x7f0000000600)={0x0, ""/179}, 0xbb, 0x3, 0x800) semctl$GETVAL(0xffffffffffffffff, 0x3, 0x5, &(0x7f00000006c0)=""/24) rmdir(&(0x7f0000000700)='./file0\x00') r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000740), 0x8, 0x0) setsockopt(r6, 0x9, 0x34, &(0x7f0000000780)="49f75513fcadff5d077e7c64754fb85e", 0x10) read(r1, &(0x7f00000007c0)=""/243, 0xf3) connect$inet6(r1, &(0x7f00000008c0)={0x18, 0x1, 0x7, 0x2}, 0xc) sysctl$kern(&(0x7f0000000900)={0x1, 0x3d}, 0x2, &(0x7f0000000940)="db4c4392f52ae74b2783a72f74fab70abe9072270da7dc89bffd4b5f67c8b1b5610ea2235f65c84d81190b40d6e6c8ae14d4fa671bd59794642a283924ade6d6b9da89b0c5881a2bc40f22cc913c01ec2a84dc53c8da5ce151e6f1a67e5d41635ae4c80b5955f8fa87ad3a4430e8658bdd1e74ee839ba549ff74ce339aa30de8786d5098f27009434bd085169d122aabad23642ed952158f378a2c35e256f24fd18858cfbaa6d941533d70f9c5d4803e112772c378636b62bb2cafc2ea2a9346ec9eed", &(0x7f0000000a40)=0xc3, &(0x7f0000000a80)="4c7b39f659e58a984e3e7a2d329aa0e5d16cfe95b515c7b6968374faaf", 0x1d) 532.573902ms ago: executing program 3 (id=5625): sendmsg$unix(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f00000000c0), 0x1c, 0x0}, 0x0) (async, rerun: 64) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xffffffffffff0000}) (async, rerun: 64) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x18, 0x3, 0x0) sendmsg$unix(r0, &(0x7f0000001700)={0x0, 0xffffffb3, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0) (async) sysctl$hw(&(0x7f0000000040)={0x7, 0x5}, 0x2, &(0x7f0000000200)="a4896071", &(0x7f00000001c0)=0x4, 0x0, 0x0) 459.6427ms ago: executing program 3 (id=5627): syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6003070000002b03fe8000000000822300000000000000aaff020000000000000000000000000001"]) munmap(&(0x7f000000e000/0x400000)=nil, 0x400000) mknod(&(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x0) mknod(&(0x7f0000000040)='./bus\x00', 0x100000000205f, 0x0) rename(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000280)='./file2\x00') symlink(&(0x7f0000001340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mmap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x1011, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(&(0x7f00000000c0), 0x1, 0x0) r0 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) connect$unix(r0, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0xa) sysctl$kern(&(0x7f0000000100)={0x0}, 0x0, &(0x7f0000000140)="9d5babf6f6a64ccf1a312f1bbb9811fb11ed4fc9d3b098c2e0874e3b9c7fbb0c2ba289a2f69d776e5cca37346900a97e1ce081ba4411c79d0f525f43ebbd9f64cbebe2b7c82e47356a2849296699a7dbf8bc13bd8662508e67b372ff477b8c744da18b3ad253c2d0888b56d45cf736cfa7fd8dd74591c3b8a117047c5615553e370f3f6dda0af86740a1a159fa5c931f3d4b4c5963ff2a6de965d893d38adf964383b80c4642f71b500e3b1383c9da4deee3c09ac477c58f29796ccdcad752b777206c8f05620a3490", &(0x7f0000000240)=0xc9, &(0x7f0000000280)="fd85bd148b953bacc3255c5be92f8fcd5bbf6e8b9c00271ad0753f34590f2b8b2e4bc2ff7a469c31ec60b6a60af4b5fb6b063b0248841e23a0cf7b5b8889ee80bdb1fb0e3852e6276208eea19b6fb94339222a272f85c2e3e6004dd01c2b576cacbfbc90ad6124f6c846a00832769340142edf74", 0x74) 458.415109ms ago: executing program 7 (id=5629): r0 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$WSDISPLAYIO_SETSCREEN(r0, 0x80045756, &(0x7f0000000040)=0xffffffff) syz_emit_ethernet(0x37, &(0x7f0000000080)={@broadcast, @local, [{[], {0x8100, 0x0, 0x1, 0x1}}], {@arp={0x806, @generic={0x0, 0x200, 0x6, 0x1, 0x1, @local, 'l', @remote, "b64dbef2d4a7c3cf5cb9b47197fb4b11"}}}}) fchmod(0xffffffffffffff9c, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x800, 0x24) write(r1, &(0x7f0000000100)="03b77df4d4ca55499d75b7c9676a4616408ccfbe5090875b0cba08d813a6d0751dff5f", 0x23) ioctl$WSMUXIO_ADD_DEVICE(r1, 0x80085761, &(0x7f0000000140)={0x1, 0xab9}) ioctl$VNDIOCCLR(r1, 0x80384601, &(0x7f0000000200)={&(0x7f0000000180)='./file0\x00', 0x3, &(0x7f00000001c0)='./file0\x00', 0x8}) r2 = dup2(r1, r1) ioctl$VNDIOCGET(r2, 0xc4104603, &(0x7f0000000240)={'./file0\x00', 0x8000, 0x9, 0xad96}) shutdown(r2, 0x1) r3 = dup(r0) poll(&(0x7f0000000680)=[{r2, 0x40}, {r1, 0x8}, {r1, 0x2}, {r3, 0x2}, {r1, 0x8}, {r2, 0x100}, {r2, 0x20}], 0x7, 0x8) shmget$private(0x0, 0x3000, 0x580, &(0x7f0000ffc000/0x3000)=nil) sendto(r1, &(0x7f00000006c0)="699b94649854edb639028624eb8c2ba2a22cb2bc7edcad7468c67101a2fc0787a339b99580bba5c0d02d197b836ffc5181f39f24cb10efff3380670d4f9acbc741a1c09582f14df877e97ffaee181dbd8f197216bb8da205c4de4bb028c9269a96af869766bc2d6a7cd810765ea8b7943e74204360a1e78fceac82f2602a7ce23aec772d92e86524e0f988f8530a741b", 0x90, 0xa87ca131b0ce98d3, &(0x7f0000000780)=@in6={0x18, 0x0, 0x6, 0x7}, 0xc) rmdir(&(0x7f00000007c0)='./file0\x00') ioctl$WSMUXIO_INJECTEVENT(r1, 0x80185760, &(0x7f0000000800)={0x7ff, 0x7, {0x0, 0x5}}) r4 = msgget$private(0x0, 0x2d1) msgsnd(r4, &(0x7f0000000840)={0x3, "b9190437b932ccd89a72ae26617b3ac5c4fd79d4185881c8a50c2f8f9e9665533bfb1a78f91ab408a0ea883c3243d1aeaeeae44e4d697a6d2f16d756a4953aa8baecb3c265589f9e78031703017bcaad3eda354db9e01115382940f9eee0754c7877"}, 0x6a, 0x0) clock_settime(0x3, &(0x7f00000008c0)={0xdbee, 0x2}) unveil(&(0x7f0000000900)='./file0\x00', &(0x7f0000000940)='c\x00') sendto$unix(r3, &(0x7f0000000980)="ee04719e30dd046b3202e857305b65dbdb8672b6b6ab8a5eef2faa86bc2f792a96feb01c71df612a72af7f7504f830ab7fdff09aca8e092895ec7be4ed09efcaf89151372e975b980fb474337ab1f34892bfbd70468cb10418cfd4ea7e52be36f0a5c43a6c25d314ebefce1107efa82d80edf5c95236125ed9a8535192dd48100de4727a3cebacf6c04d9c", 0x8b, 0x0, &(0x7f0000000a40)=@file={0x0, './file0\x00'}, 0xa) fcntl$setflags(r3, 0x2, 0x1) ioctl$WSDISPLAYIO_WSMOUSED(r1, 0x80185758, &(0x7f0000000a80)={0x0, 0x8, {0x6c, 0x9}}) write(r1, &(0x7f0000000ac0)="6a20fdcfbb27cec19ae436806d231f9005a9231752b26d824e152b732eb03309e0d4a14c998b60ef780e716f7bcff5ed74fee0e2939ad6d0edd1cdf98ecce01862778081cdc182179cbe6b0772736ef0b1d1a48ffd13d85763dccce92a213d7df74c4af47220f77f3419f8248417ced900f8d3412d3c217ac8d77c5ba8a91734603d90bffca8a84e6ae10041563a09cb6c0c7cdc6f", 0x95) sysctl$kern(&(0x7f0000000b80)={0x1, 0x56}, 0x2, &(0x7f0000000bc0)="81792831abb7390e5f4b472f43af39558057f6c4a2a237ba5662cd1541a3dc0205afff79ee1e4b58b871f8cc286743a32a2feb979af5abc9fdbfcbdc7580e402cce4271df6ba3f66e96e0daa6df54410177907", &(0x7f0000000c40)=0x53, &(0x7f0000000c80)="f4f273e335f7c377c424df166624d470a947019441aafebd71cc2352caa8559a7ce8fc5f7145322098651d02a4e0f8be9d12edac90c669ab4e81d9ee56543a75e92caa51421e2abad93bc1685b50c3b0ad26916708a248b893dac8d0202045c4991b9e3935b4b14ea43d6bb1b6a4363c185051bd4135a299758ae04e8167ab5f03697fa93ceed0e8a007260e916a89c12dd6c0c24b33386854fb4c8a969d537539a0f5d005b3f56ae7d0d83e7ec4c785b7272438fdada8a0e5dddf6858db3174688789e145df5f2118b6abc9a54317a730eb01e1ad06dc6d6a0b2e44ebf5d30c5448836a8a1e6096daffc23ea00cce705cbd45", 0xf3) unlinkat(r1, &(0x7f0000000d80)='./file0\x00', 0x0) connect(r2, &(0x7f0000000dc0)=@un=@file={0x1, './file0\x00'}, 0xa) r5 = dup2(r1, r3) ioctl$WSDISPLAYIO_SBURNER(r5, 0x800c5751, &(0x7f0000000e00)={0xbb, 0x400, 0xa}) 417.595437ms ago: executing program 2 (id=5630): r0 = semget(0x0, 0x1, 0x281) (async) r1 = socket(0x18, 0x1, 0x0) setsockopt(r1, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) semop(r0, &(0x7f0000000240)=[{0x1, 0xfff9, 0x800}], 0x1) 408.18815ms ago: executing program 3 (id=5631): setrlimit(0x8, &(0x7f0000000980)={0x45, 0x62}) (async) r0 = syz_open_pts() sysctl$hw(&(0x7f0000001440)={0x6, 0x11}, 0x2, &(0x7f0000001480)="4428653a79ffa0a7a7b5efd0d2a9023ea7b92fbe2bedf926861fa157c400df6a1f3e0e558715350a3f90223d3e64", &(0x7f0000001580)=0x2e, &(0x7f00000015c0), 0x0) (async) close(r0) (async) syz_open_pts() (async) ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000040)={0x0, 0xcf, 0xd, 0x203519, "1bb7e60ab87aa57800000000d0d200000000fd00"}) ioctl$TIOCSTOP(r0, 0x2000746f) (async) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000180)="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", 0x69d}, {&(0x7f0000000080)="e530e0dc410000fd57666c40001bac0a5a07", 0x12}], 0x2) (async, rerun: 64) r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) (rerun: 64) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) (async) getdents(r1, &(0x7f0000000e80)=""/4091, 0xffaa) (async, rerun: 32) getdents(r1, &(0x7f0000001e80)=""/4096, 0x1000) (rerun: 32) 407.772784ms ago: executing program 7 (id=5632): r0 = socket(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1005, &(0x7f0000000080)=0x7, 0x4) r1 = socket(0x2, 0x2, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x615, 0x166) ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9f, 0x0) openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) r2 = kqueue() kevent(r2, &(0x7f0000000080), 0xe4a, 0x0, 0x4000a9fa, 0x0) setreuid(0xee00, 0x0) mknod(&(0x7f0000000000)='./bus\x00', 0x2000, 0x1600) open(&(0x7f0000000040)='./bus\x00', 0x200, 0xaf) r3 = socket(0x2, 0x400000000002, 0x0) sysctl$net_inet_ip(&(0x7f0000000000)={0x4, 0x2, 0x0, 0x1c}, 0x4, 0x0, 0x0, &(0x7f0000001100), 0x4) dup2(r3, r1) select(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_int(r3, 0xffff, 0x4, 0x0, 0x0) bind(r1, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0xffff, 0x20, &(0x7f0000000080)=0x6, 0x4) openat$speaker(0xffffffffffffff9c, 0x0, 0x80, 0x0) 285.387264ms ago: executing program 2 (id=5633): r0 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$WSKBDIO_SETENCODING(r0, 0x8004667d, &(0x7f0000000040)=0x100) (async) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) (async) r1 = kqueue() kevent(r1, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) (async, rerun: 64) r2 = socket(0x18, 0x2, 0xfc) (rerun: 64) r3 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$VT_RELDISP(r3, 0x20007604, &(0x7f0000000100)=0x1) (async) ioctl$FIONREAD(r2, 0x8020690c, &(0x7f00000001c0)) mlock(&(0x7f00000db000/0x2000)=nil, 0x2000) setuid(0xffffffffffffffff) (async) r4 = socket(0x800000018, 0x1, 0x0) ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x0, [{0x2}, {0x2, 0xfffffffe}, {0x0, 0x300}, {0x3, 0x3ff}, {0x2, 0x11}, {0x2, 0x8000}, {}, {0x2, 0x5}, {0x0, 0xffffffff}, {0x3}, {0x1}, {0x0, 0xfffffffd}, {}, {}, {0x1}, {0x3}, {0x1}, {0x2, 0xc}, {0x3, 0x1000}, {0x6, 0x1fe}, {0x2, 0x2}, {0x0, 0x4}, {0x2, 0x2005}, {0x2}, {0x3}, {0x0, 0x5}, {0x0, 0x1}, {0x1}, {0x1, 0x9}, {0x1, 0x9}, {}, {0x0, 0x4ab61683}]}) (async) bind$unix(r4, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) open(0x0, 0x11, 0x0) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x10, 0xffffffffffffffff, 0x0) sysctl$hw(&(0x7f0000001180)={0x7, 0xf}, 0x2, 0x0, 0x0, &(0x7f0000000000), 0x0) (async) syz_emit_ethernet(0x127, &(0x7f0000000200)=ANY=[@ANYBLOB="e727dc071f0000000000000086dd609907a600f12c03fe697a653e336f000000500000000000ff0200000000000000000000000000012900002e"]) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) writev(r5, &(0x7f0000000740)=[{&(0x7f0000000100)="20a6", 0x2}], 0x1) (async) setuid(0xee01) r6 = msgget$private(0x0, 0x127) msgrcv(r6, 0x0, 0x0, 0x0, 0x3000) (async) msgctl$IPC_SET(r6, 0x1, &(0x7f0000258f88)={{0x1, 0x0, 0x0, 0x0, 0x0, 0x170}, 0x0, 0x0, 0x800000000000000, 0x6, 0xffffffffffffffff, 0x0, 0x3, 0x1}) (async) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r5, 0x0) (async) sysctl$net_inet_tcp(&(0x7f0000000080)={0x4, 0x2, 0x6, 0x6}, 0x4, 0x0, 0x0, &(0x7f0000000040), 0x0) mlock(&(0x7f00003b8000/0x3000)=nil, 0x3000) 283.612305ms ago: executing program 3 (id=5634): setreuid(0x0, 0xee01) r0 = syz_open_pts() ioctl$TIOCSETD(r0, 0x8004741b, &(0x7f0000000500)=0x7) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000540)="07d4d416c4820d778be9c4c6934b4298aacdba554c203d1731abc5bd68933c0a5d294a1b098ce8f2d921c6e325302735b2d2bb9e8487a7b4d045b0d723c5151c95e21c45d0b4aa32e946e53429aabbf2d83d1a68c44e350e00ba855489c6ca367f979ad834734547aa0fdeca1e8548eac2", 0x71}], 0x1) r1 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x10000, 0x0) ioctl$TIOCSETA(r1, 0xcd50441a, &(0x7f0000000180)={0x3, 0x2, 0x200, 0x2f, "1800e6234f5d7a0000005409456200", 0x3, 0x7}) close(r0) 282.856579ms ago: executing program 5 (id=5635): mknod(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x0) mknod(&(0x7f0000000000)='./bus\x00', 0x2000, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x6000, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1, 0x100) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40, 0x5cda) r1 = open(&(0x7f0000000180)='./file0\x00', 0x80000000000206, 0x0) r2 = geteuid() r3 = getgid() fchownat(r1, &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r2, r3, 0x0) close(r0) chmod(&(0x7f0000000040)='.\x00', 0x35e) setuid(0xee01) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mknod(&(0x7f00000000c0)='./file1\x00', 0xc000, 0x7) chmod(&(0x7f0000000080)='./file0\x00', 0x2ea) chdir(&(0x7f0000000100)='./file0\x00') mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc0e99db6de761f86, 0x0) rename(&(0x7f0000000a80)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 282.530722ms ago: executing program 2 (id=5636): mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r0 = open(&(0x7f0000000080)='./file0\x00', 0x2, 0x29) ioctl$WSMOUSEIO_SCALIBCOORDS(r0, 0x81205724, &(0x7f0000000100)={0x7ff, 0xa6, 0x0, 0x0, 0x80000001, 0xa1b0, 0x40010001, 0x10, [{0x0, 0x2890, 0x5, 0x71002}, {0x6, 0x9, 0x8, 0xfffffff9}, {0x101, 0x6, 0xfffffffc, 0x9}, {0x4, 0x800, 0x8007, 0x7}, {0x401, 0xffff, 0x2800, 0x7}, {0x1, 0x650, 0x3, 0x9b}, {0xce1, 0xffffffff, 0x4f4, 0x9}, {0x6, 0x0, 0x14, 0x8}, {0x2000002, 0x82, 0x5, 0x6}, {0x3, 0x8009, 0x1000, 0x4}, {0x1cc, 0x800, 0xc, 0x3}, {0xc, 0xa, 0x8}, {0x4, 0x7, 0x4, 0x8}, {0x29a71717, 0xfffffffa, 0x60, 0x6}, {0x1100c, 0x5, 0x5, 0x4}, {0x0, 0x1, 0xfff, 0x30003}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x412dff) ioctl$VNDIOCSET(0xffffffffffffffff, 0xc0384600, &(0x7f0000000440)={&(0x7f0000000280)='./bus\x00', 0x8001, 0x0}) r1 = socket(0x18, 0x3, 0x0) preadv(r1, &(0x7f0000000180)=[{0x0}], 0x1, 0xfff) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x84, 0x1b}, 0x7297, 0x3d3, 0xffffffffffffffff, 0x0, 0x8000000000000000, 0x9, 0x0, 0xffe}) r2 = socket(0x18, 0x2, 0x0) close(r2) r3 = socket(0x800000018, 0x1, 0x0) bind$unix(r3, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) connect$unix(r2, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) r4 = socket(0x800000018, 0x1, 0x0) bind$unix(r4, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) msgsnd(0xffffffffffffffff, &(0x7f0000000480)={0x0, "e2a86d73e79e2e12f0448d5ceb267d2cf35506563984548b79955d57392e9754ee338e937c44449ca31555b7271239ea5fc1f574be8e85ecd6b90fe0aaaceab2512cbcae25935e3216bcd2470af3068861c7514080f8c7006d91459fcd3770bbd67918dbea45dc048bec50557d3c8eea85dc62f4c03c12f4ae76cce0fc58957ffee3cf671e55ac91430820bd4e67093bc2f4603f4cc66c276244233d77f4cc84dab7c064cc07f7a846a90da1d718d11e4af7e6cb0ee92e"}, 0xbf, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x8) preadv(r5, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/104}, {&(0x7f0000000140)=""/192}, {&(0x7f0000000340)=""/175}, {&(0x7f0000000000)=""/18}], 0x10000000000002b8, 0x0) 228.966599ms ago: executing program 5 (id=5637): r0 = socket$inet(0x2, 0x2, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r1, 0x0, 0x200000000000c, &(0x7f0000000000)="ea00000100000000", 0x8) setsockopt$inet_opts(r1, 0x0, 0x200000000000c, &(0x7f0000000240)="ea", 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) setsockopt$inet_opts(r1, 0x0, 0x200000000000c, 0x0, 0x0) setsockopt$inet_opts(r0, 0x0, 0x200000000000c, &(0x7f0000000000)="ea00000100000000", 0x8) setsockopt$inet_opts(r0, 0x0, 0x200000000000c, &(0x7f0000000240)="ea00eb0100000000", 0x8) close(r0) 228.617598ms ago: executing program 5 (id=5638): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) writev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000000)="c886b4", 0x3}], 0x1) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) sysctl$net_inet6_ip6(&(0x7f0000000040)={0x4, 0x18, 0x29, 0x35}, 0x4, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) close(r1) r2 = socket(0x2, 0x2, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaad0b5049f6b6386dd6036d24700303afc00000000000000000000ffffffffffffff"]) connect$unix(r2, &(0x7f0000000000), 0x10) r3 = socket(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0xffff, 0x1023, &(0x7f00000004c0), 0x4) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) setuid(0xffffffffffffffff) close(r2) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x8, 0x0, 0x0, 0x0, 0x0, 0x196, 0x3ff}, 0x400, 0x10000, 0x0, 0x0, 0x1, 0x80000000000010c, 0x5, 0x7}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xff0a, 0x0, 0x37) 124.608661ms ago: executing program 3 (id=5639): r0 = socket(0x18, 0x1, 0x0) setsockopt(r0, 0x1000000000029, 0x9, &(0x7f0000000040)="03000000", 0x4) setsockopt(r0, 0x1000000000029, 0xa, 0x0, 0x0) syz_emit_ethernet(0xe, &(0x7f0000000280)=ANY=[@ANYRES64=0x0, @ANYRES32=0x0, @ANYRES8=0x0, @ANYRES16=r0, @ANYBLOB="18571652104d4cf0d596de9e64e797b47e03fad0bfae06587584fc021ef62ac16b223e221e5de8236c64d035c49373292631ba443697db8b6c659db1046cd85544245bc8cf902db8ce97ad60e03de21f882c2e864e84ae3b949401aefa8b0a4988fed6ae86baa0bf34246d6f054bdba400d6f9559c61ab4b73dc4ba483dd0ddc16a4a3f8c82749", @ANYRES64=0x0, @ANYRES32=r0, @ANYRESHEX=r0, @ANYRESOCT=r0, @ANYRES16=r0]) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = socket(0x2, 0x1, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0xb, 0x0, 0x0, 0x0, 0x0, 0x84, 0x3ff}, 0x400, 0x40000010000, 0x0, 0x0, 0x200000001, 0x80000000000010c, 0x4, 0x6}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xff0a, 0x0, 0x37) connect$inet(r1, &(0x7f0000000000), 0x10) shutdown(r1, 0x2) close(r1) 118.984831ms ago: executing program 5 (id=5640): setreuid(0x0, 0xee01) getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000), 0xc) (async, rerun: 32) r0 = semget(0x0, 0x0, 0x0) (rerun: 32) semctl$GETZCNT(r0, 0x2, 0x7, 0x0) semctl$GETZCNT(r0, 0x0, 0x7, &(0x7f0000000480)=""/139) (async) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x412dff) (async) ioctl$VNDIOCSET(0xffffffffffffffff, 0xc0384600, &(0x7f0000000440)={&(0x7f0000000200)='./bus\x00', 0x8003, 0x0}) r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x8) preadv(r1, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/104, 0xa00}, {&(0x7f0000000140)=""/192}, {&(0x7f0000000340)=""/175}, {&(0x7f0000000000)=""/18}], 0x10000000000002b8, 0x0) sysctl$hw(&(0x7f00000002c0)={0x6, 0x2}, 0x2, &(0x7f0000000240), 0x0, 0x0, 0x0) 115.971523ms ago: executing program 0 (id=5641): r0 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) setrlimit(0x8, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000009c0)="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", 0x121}], 0x1) ioctl$TIOCSETA(r1, 0xc4504443, &(0x7f0000000740)={0x7, 0x2, 0x8, 0x2, "01d04b0a0047c1d100", 0x9, 0x3}) ioctl$WSMUXIO_REMOVE_DEVICE(0xffffffffffffffff, 0x80085762, &(0x7f0000000040)={0x1}) r2 = socket(0x18, 0xc003, 0x3a) setsockopt(r2, 0x29, 0x6c, &(0x7f0000000040), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r2, 0x29, 0x66, &(0x7f00000003c0)={0x3, 0x0, 0x10, 0x1}, 0xc) setsockopt$inet6_MRT6_ADD_MIF(r2, 0x29, 0x66, &(0x7f00000003c0)={0x0, 0x1, 0x10, 0x3}, 0xc) sysctl$kern(&(0x7f00000000c0)={0x1, 0x50}, 0x3, &(0x7f0000000100)="00e0ae5b7e0d0000bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x50, 0x0, 0x37) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0x68, &(0x7f0000000000)={{0x18, 0x3, 0xfffff001, 0x4}, {0x18, 0x2, 0x8, 0x4}, 0x1003, [0x4, 0xfffffcb1, 0x24a, 0xc, 0x1, 0x8, 0x9, 0x1]}, 0x75) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0x68, &(0x7f0000000100)={{0x18, 0x2, 0xffff}, {0x18, 0x0, 0x5, 0x1}, 0xb, [0xf03, 0xfffffffe, 0x9, 0x5, 0xff, 0x800, 0x9, 0x67f]}, 0xca) ioctl$TIOCSETA(r0, 0xcd50441a, &(0x7f0000000180)={0x3, 0x2, 0x200, 0x2f, "1800e6234f5d7a0000005409456200", 0x3, 0x7}) 83.160456ms ago: executing program 4 (id=5642): writev(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000200)="a53b", 0x2}], 0x1) r0 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000040)='./file0\x00', 0x2000, 0x3361) r1 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7949) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCCLR(r1, 0xc0a86b05, &(0x7f0000000200)={0x0, 0x10000, 0x0}) sysctl$net_inet_ah(&(0x7f0000000140)={0x4, 0x2, 0x33, 0x2}, 0x4, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet(0x2, 0x3, 0x2) r3 = socket$unix(0x1, 0x5, 0x0) sendmsg$unix(r3, &(0x7f0000000140)={&(0x7f0000000000)=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000000100)=[{&(0x7f0000000040)="d83102fee42e86ae3603cb6716d97ef4022bcdc1a7343ee60cee8b6f8b1a5212509c515134173caa1756", 0x2a}, {&(0x7f0000000080)="c4cf788551a18e10727a7bbee7cb72e8e9d828a692f27b2c8f3e5495dbdf1e60e6f2b5e2093791b828f9fe3523ceece99702e5f0c6b6a4602c827b99fdce915186a0845a8a337ef41c00281cb07dbc1e43b23194b066b46b4229094839868dccd6180a1c66424603251cab6218c4b45d9d5235585de8c44eb5e4b9", 0x7b}], 0x2, 0x0, 0x0, 0x8}, 0x401) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7fe, 0x1a, 0x1, 0xfd4, 0x3, 0x80000001, 0x17ffe, 0x10, [{0x0, 0x3, 0x3, 0xa24}, {0xc5c, 0xb, 0x5, 0x1ff}, {0x800008, 0x20f05, 0x1fc, 0x7d2}, {0x7ffffffe, 0x3, 0x3, 0x784c}, {0x3fd, 0xd, 0x1002802, 0x4d8a}, {0x8, 0xff, 0x3, 0xb}, {0x8000008, 0x0, 0x81ea, 0x2d}, {0x2, 0x836, 0x17, 0x3}, {0x2, 0x40087e, 0x5, 0x7}, {0x10001, 0xa74d925a, 0xffff, 0x40000088}, {0x1d9, 0x5, 0x4, 0x412c8391}, {0x3, 0xa, 0x20008, 0x40000010}, {0xb8d, 0x4, 0x8, 0x3}, {0x29a71720, 0x81, 0x200, 0x6}, {0x400002, 0x7, 0xfffffff9, 0x100}, {0x200, 0x8, 0x801002, 0xc}]}) r4 = socket(0x18, 0x3, 0x0) mprotect(&(0x7f0000158000/0x2000)=nil, 0x2000, 0x4) ioctl$FIONREAD(r4, 0xc0106924, &(0x7f00000001c0)) ioctl$FIONREAD(r2, 0xc0287533, &(0x7f0000000440)) 74.625125ms ago: executing program 5 (id=5643): socketpair(0x0, 0x1, 0x3, &(0x7f0000000000)) writev(0xffffffffffffffff, &(0x7f0000000880)=[{&(0x7f0000000080)="dd092f5a5c74cd9ba51ddf77332b67c739b72933ed52c62ed35a8f4e86cca27e0846f1ede37a507623968dc93a8c3f06f28cd50e1525f95a93e3323fbb1703a3ea08a522466a52c49a390ff86924287b9d5dd7c09b1a7b34b3b3464b64f9775720c1f6aa5880b605b27117855414fbec668509cea8c5c3908fe2e5556e7e983dfdc07242e142244519ce4bf27084d6b76acdd339e0f5976871cf23d7504594d005c35660e3e5fb60d375425d4ba9fe51666f40bfd41987ffc520fa7d54e9561a8e84ef5caeef07bcff34e15f7414ace3", 0xd0}, {&(0x7f00000009c0)="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", 0x13c}, {&(0x7f0000000340)="3d588d00ff0bcc2ab73d77a3f79ca2e98bd86fdaa5c331f78f539110cccf7ed3af6d544fb6309e66d5eb0c6f9518b1db828c648256336ab66c3faf1f20e96e1fafd39f4929b5b9dae9d4dccdbda8d7520353fbca97fafce90dcc07697bc124df043be927aee7f9d8ad8ecb74f722c0ab140f374a9647d908261aaf118c434a1fb1443363c0b31693d01fec0a34f005091304bdd1f8a6194bf6e81e234a198bb8b460e0e108e60dc2d95a8e17e9055621c8094c11d131a1c03f", 0xb9}, {&(0x7f0000000900)="811b6e70cb0f030000009cb22e2967941d8d9150b0999f63848a2141ac895cc6cd48e8e87487b5e10fdb95cca250656d4588f22510f57759cc2a6c98de0e0387dc290c0fa9cccdc8f8901a23280a89d7769cbeaa05405e3ee10a5b1ca4a5478f8362fdc40d72b15d5f297fc2e6973928553a71b40ced0df1d42ffeceb149ef0b94ce02a811d62d9ec8c32d32e4e8c28d7a78103c03", 0x95}, {&(0x7f00000007c0)="4acc3a3a6568b5feeae6d9dfbd2ea4a6bbcc154808", 0x15}], 0x5) sendmsg(0xffffffffffffff9c, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x410}, 0x0) openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) r0 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7949) ioctl$VNDIOCCLR(r0, 0xc0a86b02, &(0x7f0000000200)={0x0, 0x10000, 0x0}) ioctl$TIOCSETA(r0, 0xc0504417, &(0x7f0000000740)={0x13, 0x0, 0x400, 0x0, "97a2224ff1c14649ebb978926cc9795a6b47c1d1"}) 74.142071ms ago: executing program 0 (id=5644): ioctl$WSDISPLAYIO_ADDSCREEN(0xffffffffffffff9c, 0x80245753, &(0x7f0000000080)={0x4, './file0\x00', './file0\x00'}) r0 = syz_open_pts() ioctl$TIOCSETA(0xffffffffffffffff, 0xcd50441a, &(0x7f0000000040)={0x9, 0x80000001, 0x7, 0xd7, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00.\x00', 0x3, 0x3}) setrlimit(0x8, &(0x7f0000000040)={0x7, 0x50}) writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000200)="5814ddfbcd87e6c390f0f1b71b127a6a64b34d9a4ef4fa07305c232e67a5e4b8778c20df033aa315355c9a9130aca59b702a1391ad6f15ca49b569e4a6e69f321b3325e591d508535546492d2175a579c3b16234246a5d460ecf2843578810abde9fa340586c8cac96f4ebc4d13443dc0b04be3c31fdbb11193d41577cb6084dc57bfb77dbbc85eea4b01fb6b32fb2", 0x8f}], 0x1) r1 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000500), 0x8, 0x0) ioctl$VMM_IOC_INTR(r1, 0xca605601, &(0x7f0000000040)={0x1, 0x0, 0x1}) ioctl$TIOCSETD(r0, 0x8004741b, &(0x7f0000000140)=0x8) close(r0) mknod(&(0x7f0000000040)='./file0\x00', 0x2000, 0x40000800) r2 = socket(0x2, 0x1, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f00000002c0)="9eeb737858a501458ac57c3e70b3e4e83be270b3c2e4a8a645bc748f76e004468a1930ce7c4fc3483267fcc94cb70f7c2bbe37f4f14626ba5fade7378fdc5687f54cf6c7213bf79fbbff0249dd0c8b3dfc2e8e5a36de0e56da3e05e4a65c7325d149e1ac96c2953b4bdc725cb5929edf135ea14890bf171d2b265049c5fd64afb181845f4d101f4e425f877df355000a0122c4a48cea01b676abdc6a703ba8c9a1bc351d05db2670ae7a3e0afb0c7294c83128acb4422aa65c158bd93ea94c57bec94c3102787d", 0xc7}, {&(0x7f0000000180)="3092dcfa7dca74bde8a0712728", 0xd}, {&(0x7f0000000440)="edfd4c133cb5dbc49f1d53c22add90bf19c91aefae0a807815b144b131a9062f91a1aef4e53f505eee547bccfcaeec4302a99dbdedb6195cf7563b90fb535bf9bd", 0x41}, {&(0x7f0000000540)="8e39c849fb572b8cf4b98b129b179cab7c819f6591f3ba8ca63e249a68e20895352b7b5e6506251e9531907565afd5453ab6e6b6b0c15d3257c5096f6e941a2d3be167f9de27d90655cf59321d7ac3b815fa72193bbb91591619e65960c23404fe2f0dabbd09705edeb3358f010f13903fbfcb4cdd8de4bfa7556ab938ea140fbb1f866e50a04400ac68c02dfbc931caa9f493c3a839ed3aac3fc505f505007d1d7b587513268fb8a10645a97b45ca5258fa24916be71cd0d8b0b9adf0e32afefd51186c0121c49a106d8b7883d9c2ce90419876", 0xd4}], 0x4) listen(r2, 0x0) ioctl$TIOCCDTR(r0, 0x20007478) ioctl$TIOCMBIS(r0, 0x8004746c, &(0x7f0000000000)) setrlimit(0x3, &(0x7f00000000c0)={0x100000, 0x100000}) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x11b) 73.479107ms ago: executing program 1 (id=5645): syz_emit_ethernet(0xb9, &(0x7f0000000880)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6603816a00830608fe8000000000000000000000000000bbfe8000000000000000000000000000aa4e234e20", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="500200bc9078000164cbc145bc2d768f210b4891"]) close(0xffffffffffffffff) syz_emit_ethernet(0x4a, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6603816a00140630fe8000000000000000000000000000bbfe8000000000000000000000000000aa4e234e20", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5014462e907800"]) unveil(&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000380)='c\x00') pipe(&(0x7f0000000100)={0xffffffffffffffff}) fcntl$setstatus(r0, 0x4, 0xc0) r1 = getppid() fchmodat(r0, &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x9, 0x0) mknod(&(0x7f0000000200)='./file0\x00', 0x2000, 0x412dff) r2 = open$dir(&(0x7f0000000000)='./file0\x00', 0x2, 0x0) writev(r2, &(0x7f0000000340)=[{&(0x7f0000000000), 0x2cfea}], 0x1000000000000013) msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f00000000c0)={{0xe5, 0x0, 0xffffffffffffffff}, 0x0, 0x400, r1, 0x0, 0x7fffffffffffffff, 0x3, 0x600000, 0x400000}) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) ioctl$WSKBDIO_GETMAP(r3, 0x80047476, &(0x7f0000000100)={0x0, 0x0}) r4 = fcntl$getown(r3, 0x5) setuid(0xee01) r5 = socket(0x2, 0x3, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) ioctl$FIONREAD(r5, 0xc0206921, &(0x7f00000001c0)) r6 = socket(0x2, 0x2, 0x0) fcntl$getown(r3, 0x5) ioctl$FIONREAD(r6, 0x80206913, &(0x7f00000001c0)) fcntl$setown(r0, 0x6, r4) close(r0) sysctl$net_inet6_ip6(&(0x7f0000000000)={0x4, 0x18, 0x29, 0x35}, 0x4, &(0x7f0000000200)="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", &(0x7f00000001c0)=0xfffffeda, 0x0, 0x0) unveil(&(0x7f0000000340)='./file1\x00', &(0x7f0000000300)='x\x00') socket(0x2, 0x3, 0x0) ioctl$FIONREAD(0xffffffffffffffff, 0xc0106924, 0x0) kqueue() ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) 71.84002ms ago: executing program 3 (id=5646): r0 = socket(0x11, 0x3, 0x0) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x4000000000000003}}) (async) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x4000000000000003}}) r1 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000a00), 0x100, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000040)=@abs={0x1, 0x0, 0x0}, 0x8, &(0x7f0000000880)=[{&(0x7f0000000340)="bfaec9b874d67f490403bd28e4e0d755b9389b81d46e5218632d1956c1c2f0739477a3f0a7a788f43e11bdb08a4b87aeca94a48b431f3d29fdd8e2c468c590e403729313690da02b7d9b8fd894c21c247d6b52f4ad9b1174b07088ce4e5ff0c703b1c3ddcc7e10ed67d5f679c48dcedde51863f5adfda45c06c5eb7410830cea1f16adaa3fc08ffcf674ab9791e7a329eb1cc14bd673952c4f1e8c8740d53b5ec1be4e9250c29362", 0xa8}, {&(0x7f0000000080)="0a0a5381c36853e35fc8f58cc8d52ecf8c2706724a865d7608fecf01bf414fd2863ef5f0d6c72ff24efe6355d170d6af838c6520f936735a29932a6e38d5b253b9413aa1f90bf616128c4c3bdb766cea32482e5e8a4989f5f01cdff7f35073d00a8727bfa4bf21f19019770cd6e3db18fb99e540181d6ffa1bc70cd1a84a0af9", 0x80}, {&(0x7f0000000440)="a1146357438546510418302e739e329e1f8de22952f603a82d461b946e908acbe82d9695a3ace6d93634fd2400ae1a001fb3e2b5420d190e6523b0f5838470fd0479550e76190a00d1673f7872f2a86d74c3923b8996c1d15f22", 0x5a}, {&(0x7f0000000100)="13fbcf5c56a9dc951218bd9e1e862b44fb410608cc1387bdcd321cde2453337fb5f7cf18b22c167d0a7fc2fce9f406d2bc5eb27920badaada9278283a4b4", 0x3e}, {0x0}, {0x0}, {0x0}], 0x7, &(0x7f0000000a80)=[@cred={0x20, 0xffff, 0x0, 0x0, 0xffffffffffffffff}, @cred={0x20, 0xffff, 0x0, 0x0, 0xffffffffffffffff}, @rights={0x28, 0xffff, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1]}, @rights={0x10}], 0x78, 0x8}, 0x1) getpid() (async) r2 = getpid() getuid() (async) r3 = getuid() chown(0x0, r3, 0xffffffffffffffff) getsockopt$SO_PEERCRED(r0, 0xffff, 0x1022, &(0x7f0000000d80)={0x0, 0x0, 0x0}, 0xc) sendmsg$unix(r0, &(0x7f0000000f40)={&(0x7f00000005c0)=@abs={0x1, 0x0, 0x2}, 0x8, &(0x7f0000000a40)=[{&(0x7f0000000600)="762d3f46f81f02f5f9da23fca2065fcf2f586810ad48fbb27784c7d5f96e94f59b82a12f4313e309235251eaead5c7a56c656529123f323f719deea55dafa1db074217f0c3461fafd46cfd31aa42131e27c7baa94c4bef9c15cc6c2b6081904cd1e3d31d0d0c29b964b8ed4c34cee64184c22b3b420c5f2045f0624d031f2c6ad7dd6fe2939da6dad44a7645ef40e6c44791b2dc96577b68e88b48d20bd82e3713feb46ca0ad4d825ea527d4cd3bee0214295c5f80", 0xb5}, {&(0x7f00000006c0)="20e99b0d22348dba37cea32b9e220be2ca489d7c77ee1c3855d93d47dc25fbceaa5cf4b6b7e62f84f269edb73d94c16365ce8159", 0x34}, {&(0x7f0000000700)="dd3e6a0638d904f825983ae13f5926251177fb8e0edbeddbf3b8d729db598c17d07a18c72811155d15daaf8d571b48bfea2e76f3e03e1554026062f7bdab9816234cbd4dfcb36f91073324f904bff2c1f263b8d14e179ad4ec51de5258abf8001a4092e997ac93f54cef8d99def4a4df4171cbdf1645cb4ad74cda4f751f95c112f3bfb24c53620cadbb76c84024426e4c1d813e95d714546272ec3ed3be6573757e1a34191b9f34962d067ee8ee6e79d11eb0f4f13465ca38ac5912f85c73033b2fce0f113b5fa8d9a3e7af1720ac096c589bf6d5689b1d21f90a99798d0c858084a6c799b15cac0c984d365980edfd03f6b6a6f6", 0xf5}, {&(0x7f0000000800)="05b2432a1202a65aa2da", 0xa}, {&(0x7f0000000840)="4ab89e2e1dcb0058f76e791b802f47c23ee59dfae0897ad723d1b2e35606424d3e126634e6e769c786e0e36dcb7e4a3d72eb10008daa6c98bc54480d105d13106f53f2d6baeae9f2c3febc939a9ce6c9a0c83e762c0ad3158e9840bb52ea6f7db0baa325a19008885d95ae764780d9e1b6af88ef2712893be553730f9ad9db8d5e407ec15c13af48e3b48b5c9495eef65f376c2f000d60b315ebe8dbb283aa50d40a53c60060919c825f417bb7950bf75f3a4f09022b37292a028ca098d959403c2401df051885737aedbfd51e02ec1d1d64180c919034e4e507ee8e2e83d738e1c8bc63", 0xe4}, {&(0x7f0000000940)="9c98ba775c5df4885a37573781570f93259a66b14594a8923d4d26e2f291fb1535eb30de6da08fb57f91983afcd3449fcd94e5718e44dc8fc747dc1abee47c969d0cb08ce9b1fa31e06f4af4317d8364e1b6a318384708c5", 0x58}, {&(0x7f00000009c0)="baba5d8261247eecd83b77fd1450a530b658a43c43bff5b8dbfbfea0d4c0ce99edd7b00e492c3bb3a9b8b7e1f94a6a8cad5cfdca6c61157465298f0fa9eaf714c4629eb569a584a43ea2858eba19a2b343df2453d15be0fad7d71ae191a265f13ea054fa111fa5d7de4b9383d2c2", 0x6e}], 0x7, &(0x7f0000000dc0)=[@rights={0x20, 0xffff, 0x1, [r0, 0xffffffffffffffff, r0, r0]}, @rights={0x30, 0xffff, 0x1, [r0, r0, 0xffffffffffffffff, r0, 0xffffffffffffffff, r0, r0]}, @rights={0x28, 0xffff, 0x1, [0xffffffffffffffff, r0, r0, r0, r0]}, @cred={0x20}, @cred={0x20}, @rights={0x18, 0xffff, 0x1, [0xffffffffffffffff]}, @rights={0x30, 0xffff, 0x1, [r0, 0xffffffffffffffff, r0, r0, r0, r0, 0xffffffffffffffff, r0]}, @cred={0x20}, @cred={0x20}, @cred={0x20, 0xffff, 0x0, r2, r3, r4}], 0x160, 0xb}, 0x6) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x8) (async) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x8) getpeername$inet(r0, &(0x7f0000000080), &(0x7f0000000500)=0xc) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r5 = socket(0x18, 0x4000, 0x0) close(r5) (async) close(r5) r6 = socket(0x18, 0x2, 0x0) sendmmsg(r5, &(0x7f00000004c0)={&(0x7f0000000480)={&(0x7f0000000040)=@in={0x2, 0x1}, 0xc, &(0x7f0000000300)=[{&(0x7f0000000080)}, {&(0x7f0000000100)="68b8c74f8a44509139ddcb6b4c533af388dc726c97b7bab277068f027d7e1d894f4ff9a9d3df95a1d55772d4d291e19cb3ccb0cccd6fd9bf1cfb67f18a3600a14bd3eb92538e1ec491edd1f27bcb941da277fbe3af543fcdf380e85e2b84e1006203b25021f6ae57306d492c181f8ca09708e69c009049541f047f5b2db929672a63d18276e8f669157bc86466cd40f94cf18fe36d946af6010a9c126a53aa644485024fcbc89f884cd34fc617e40daeb7ad80583a9273d596cd6110f79ccd54f888372d2916a1c1f26f1b8e18e7", 0xce}, {&(0x7f0000000200)="8f25fb169de04d708d013f00d16168fd2d23bfc23582c42def63a67d20308afaa8ba6da363238cd3a4ed6ee4cd8e10d3c7584b310313128cfc675ce84690df91d7967ca4451af938bb8ff87c10fbd249fcca22c356ec88afa2cb84bb6bc162b0c57c43", 0x63}, {&(0x7f0000000280)="a27000c0b3a62505f074a95a59df509ebbfea9694ea5d106ec5a111b21dfc6c6a7fbf249228e3349342ec0c6d3f38dbe09a6ce46a189117b862fd02a9727426d9888359bd738e1371afb6382ee54c1615ebf02a6b6722790d0ae1774396f87c63064db184684b82de213", 0x6a}], 0x4, &(0x7f0000000340)=[{0x108, 0xffff, 0xfffffbff, "84fd890e69dbc3ce6bb8e61cfe2d8e76fe21448f67dd4b91cc9bf0a9c727366044b1859d30c908e092cc34cf1b13c6c5598090370916e6dcef7de5b0f09414c55f3f23a59616da790123e65809a5b43a80f5eadc26528cb11f5aaae972854bf9f39beb09003d557995a83cde9aa3c99a9f71f357600fed84c983e9a68b7c736fa382a22705881041f7fadba367cdd62bd5a925c23f53bac33bbebc4eb697e84bbd1099c5428d02f573df61b664939f6fa42261a5652f570085c75d9675c826d111a12c5e8bae3f361035d0c41fa79acad62979fd76bde342f0fa096e681a7debe7ac2f505e2d807d5a27f431ed73c8dba399a9c7"}], 0x108}, 0x9}, 0x10, 0x0) r7 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000540), 0x400, 0x0) r8 = getpgrp() r9 = socket$inet6(0x18, 0x1, 0x3b) r10 = getuid() msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x0, r10, 0x0, 0x0, 0x0, 0x3, 0xa2f}, 0x80000002000009, 0xffffffffffbffffb, 0xffffffffffffffff, 0x0, 0x1, 0x400000000006, 0x40000000000005, 0x7}) setsockopt$sock_cred(r9, 0xffff, 0x1022, &(0x7f0000000200)={0x0, r10}, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001600)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001600)={0xffffffffffffffff}) getsockopt$sock_cred(r11, 0xffff, 0x1022, &(0x7f00000003c0), &(0x7f0000000400)=0xfffffffffffffe33) (async) getsockopt$sock_cred(r11, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, 0x0, 0x0}, &(0x7f0000000400)=0xfffffffffffffe33) setregid(0x0, r12) setsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000000580)={r8, r10, r12}, 0xc) (async) setsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000000580)={r8, r10, r12}, 0xc) ioctl$DIOCMAP(r7, 0xc0106477, 0x0) setsockopt(r6, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) (async) setsockopt(r6, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) connect$unix(r5, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) dup2(r0, r6) (async) dup2(r0, r6) 1.097418ms ago: executing program 5 (id=5647): ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) r0 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r0, 0xc0106924, &(0x7f00000001c0)) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) flock(r1, 0x1f) ioctl$FIONREAD(r0, 0x80206916, &(0x7f0000000100)) r2 = syz_open_pts() syz_open_pts() close(r2) syz_open_pts() fcntl$lock(r2, 0x8, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x100000001}) 311.369µs ago: executing program 4 (id=5648): mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r0 = open(&(0x7f0000000c00)='./file0\x00', 0x0, 0x0) rmdir(&(0x7f0000000080)='./file0\x00') unveil(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='c\x00') symlinkat(&(0x7f0000000200)='./file2\x00', r0, &(0x7f0000000240)='.\x00') dup(0xffffffffffffffff) 0s ago: executing program 2 (id=5649): mkdir(&(0x7f00000005c0)='./file0\x00', 0x0) r0 = socket(0x18, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) close(r1) open$dir(&(0x7f0000001700)='./file0\x00', 0x0, 0x120) chroot(&(0x7f0000000740)='.\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="28000000ffff000001"], 0x28}, 0x0) recvmsg(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/51, 0x33}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2000, 0xffff5f70) open(&(0x7f0000000180)='./file0\x00', 0x611, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000c00)=ANY=[@ANYBLOB="8f6f77ede655ffffffffffff86dd605f6ad900383a0000000000000000000000000000000000fe8000000000000000000000000000aa02009078000000006006c33e00002b80fe8000000000000000000000000000aaff0200000000000000000000004a31802b436e19"]) pipe2(&(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) write(r4, &(0x7f00000000c0)="c3", 0xffffffed) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x800, 0x0, 0xfffffffffffffee2) r6 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000000), 0x10, 0x0) ioctl$VNDIOCGET(r6, 0xc4104603, &(0x7f0000000480)={'./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffff, 0x8000, 0x63}) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)="76e5eac907f9ccf7a251ceddcec7d6aa45cffe2c63a56077123a276d3ba4e9d17eb3eb5db12a3783a8e0620d357de1fe04fa9465b5bd1286e9624dec06a00c222f", 0x25}], 0x1) rename(&(0x7f0000000100)='./file0\x00', 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='.\x00') mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) unveil(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000140)='c\x00') open(&(0x7f00000001c0)='./file0\x00', 0x10, 0x100) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) read(r5, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.133' (ED25519) to the list of known hosts. OpenBSD/amd64 (ci-openbsd-multicore-9.us-central1-b.c.syzkaller.internal) (tty00) login: pckbd_enable: command error pppx: unable to set addresses for pppx1, error=17 pckbd_enable: command error sd0(vioscsi0:1:0): Check Condition (error 0x70) on opcode 0x1e SENSE KEY: Illegal Request ASC/ASCQ: Invalid Command Operation Code pckbd_enable: command error           pckbd_enable: command error uvn_flush: obj=0xfffffd8061c55010, offset=0x0. error during pageout. uvn_flush: WARNING: changes to page may be lost! pckbd_enable: command error                           pckbd_enable: command error pckbd_enable: command error malloc(): allocation too large, type = 127, size = 1073510800 pppx: unable to set addresses for pppx1, error=17 Ì`Ó×pmap_unwire: wiring for pmap 0xfffffd806c557c00 va 0x200000001000 didn't change! denied attempt to set clock back 100663324 seconds denied attempt to set clock back 4229876892 seconds denied attempt to set clock back 88080287 seconds pckbd_enable: command error pckbd_enable: command error uvn_flush: obj=0xfffffd807b08b478, offset=0x0. error during pageout. uvn_flush: WARNING: changes to page may be lost! WARNING: thread `nfsio' (235553) exits with status -1 WARNING: thread `nfsio' (190390) exits with status -1 WARNING: thread `nfsio' (395659) exits with status -1 WARNING: thread `nfsio' (469642) exits with status -1 WARNING: thread `nfsio' (285657) exits with status -1 WARNING: thread `nfsio' (154043) exits with status -1 WARNING: thread `nfsio' (92084) exits with status -1 WARNING: thread `nfsio' (132651) exits with status -1 WARNING: thread `nfsio' (246867) exits with status -1 WARNING: thread `nfsio' (215763) exits with status -1 WARNING: thread `nfsio' (333850) exits with status -1 WARNING: thread `nfsio' (493977) exits with status -1 WARNING: thread `nfsio' (174775) exits with status -1 WARNING: thread `nfsio' (347288) exits with status -1 WARNING: thread `nfsio' (129552) exits with status -1 WARNING: thread `nfsio' (280444) exits with status -1 pckbd_enable: command error    OpenBSD/amd64 (Amnesiac) (tty00) login: $%.)%$ !44%-04 4/ 3%4 #,/#+ &/27!2$ 4/ 13622315181277951 $%.)%$ !44%-04 4/ 3%4 #,/#+ "!#+ 4263431279 3%#/.$3 0008: 5.!",% 4/ 3%4 !$$2%33%3 &/2 00081, %22/2=17           sd0(vioscsi0:1:0): Check Condition (error 0x70) on opcode 0x1e SENSE KEY: Illegal Request ASC/ASCQ: Invalid Command Operation Code denied attempt to set clock back 17 seconds pppx: unable to set addresses for pppx1, error=17 pppx: unable to set addresses for pppx1, error=17 denied attempt to set clock back 390070175 seconds malloc(): allocation too large, type = 127, size = 1073510800 denied attempt to set clock back -9223372032591346524 seconds uvn_flush: obj=0xfffffd8061fb9a70, offset=0x0. error during pageout. uvn_flush: WARNING: changes to page may be lost!    Š                            ˜2'¢Òù«Öÿdenied attempt to set clock back 4263431341 seconds WARNING: thread `nfsio' (371452) exits with status -1 WARNING: thread `nfsio' (111522) exits with status -1 WARNING: thread `nfsio' (200378) exits with status -1 WARNING: thread `nfsio' (200569) exits with status -1 uvn_flush: obj=0xfffffd8061fb9b60, offset=0x0. error during pageout. uvn_flush: WARNING: changes to page may be lost! vm_create: uvm_map failed: 12 denied attempt to set clock back 33554486 seconds denied attempt to set clock back 4263431349 seconds denied attempt to set clock back 4263431349 seconds pppx: unable to set addresses for pppx1, error=17 malloc(): allocation too large, type = 127, size = 1073510800 uvn_flush: obj=0xfffffd8061fb9200, offset=0x0. error during pageout. uvn_flush: WARNING: changes to page may be lost! denied attempt to set clock back 4263431355 seconds denied attempt to set clock back 134217794 seconds uvn_flush: obj=0xfffffd8061fb90c0, offset=0x0. error during pageout. uvn_flush: WARNING: changes to page may be lost! load: 5.93 not a controlling terminal pmap_unwire: wiring for pmap 0xfffffd806c557a00 va 0x200000001000 didn't change! OpenBSD/amd64 (Amnesiac) (tty00) login: sd0(vioscsi0:1:0): Check Condition (error 0x70) on opcode 0x1e SENSE KEY: Illegal Request ASC/ASCQ: Invalid Command Operation Code pppx: unable to set addresses for pppx1, error=17 denied attempt to set clock back 84 seconds panic: pmap_remove_ptes: unmanaged page marked PG_PVLIST: va 0x795dd1816000, opte 0xffffffffffffffff Starting stack trace... panic(ffffffff8343d608) at panic+0x1d0 pmap_remove_pte(fffffd800b062100,fffffd8008995350,7fbcaee8c000,795dd1800000,795dd1882000,0) at pmap_remove_pte pmap_do_remove(fffffd800b062100,795dd1182000,795dd1882000,0) at pmap_do_remove+0x589 uvm_unmap_kill_entry_withlock(fffffd806caf0018,fffffd800d01a268,0) at uvm_unmap_kill_entry_withlock+0x269 uvm_map_teardown(fffffd806caf0018) at uvm_map_teardown+0x117 exit1(ffff8000fffeea78,0,0,1) at exit1+0x6fc sys_exit(ffff8000fffeea78,ffff80002a344330,ffff80002a344280) at sys_exit+0x1a syscall(ffff80002a344330) at syscall+0xb17 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x795dd1981d10, count: 248 End of stack trace.