last executing test programs: 6.990043662s ago: executing program 3 (id=3835): r0 = socket(0x2, 0x3, 0x0) execve(0x0, &(0x7f00000001c0)=[0x0, &(0x7f00000000c0)='/dev/speaker\x00'], 0x0) r1 = socket(0x1, 0x2, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa08004806003400640003069d9078ffffffffffff7fff070b1eac1400aa7f000001000e009078000b0008000003fc0000000400000009"]) ioctl$FIONREAD(r1, 0xc0106924, &(0x7f00000001c0)) r2 = kqueue() kevent(r2, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) ioctl$FIONREAD(r0, 0xc0206921, &(0x7f00000001c0)) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) r3 = socket(0x2, 0x2, 0x0) ioctl$FIONREAD(r3, 0x8020690e, &(0x7f00000001c0)) r4 = socket(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0xffff, 0x1001, &(0x7f0000000100)=0x20000, 0x4) writev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000000)="c886b4", 0x3}], 0x1) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) connect$unix(r4, &(0x7f0000000000), 0x10) write(r4, &(0x7f0000000080)="04bdfa5d1d2873c63e3534825ba166e2fea9aec43050006123339a346f731573d8d508753f95b7688ad48b8cf6bbca325cebc37fc4e1dd543dbe2da6dd", 0xffea) socket(0x2, 0x3, 0x0) (async) execve(0x0, &(0x7f00000001c0)=[0x0, &(0x7f00000000c0)='/dev/speaker\x00'], 0x0) (async) socket(0x1, 0x2, 0x0) (async) syz_emit_ethernet(0x42, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa08004806003400640003069d9078ffffffffffff7fff070b1eac1400aa7f000001000e009078000b0008000003fc0000000400000009"]) (async) ioctl$FIONREAD(r1, 0xc0106924, &(0x7f00000001c0)) (async) kqueue() (async) kevent(r2, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) (async) ioctl$FIONREAD(r0, 0xc0206921, &(0x7f00000001c0)) (async) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) (async) socket(0x2, 0x2, 0x0) (async) ioctl$FIONREAD(r3, 0x8020690e, &(0x7f00000001c0)) (async) socket(0x2, 0x2, 0x0) (async) setsockopt$sock_int(r4, 0xffff, 0x1001, &(0x7f0000000100)=0x20000, 0x4) (async) writev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000000)="c886b4", 0x3}], 0x1) (async) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) connect$unix(r4, &(0x7f0000000000), 0x10) (async) write(r4, &(0x7f0000000080)="04bdfa5d1d2873c63e3534825ba166e2fea9aec43050006123339a346f731573d8d508753f95b7688ad48b8cf6bbca325cebc37fc4e1dd543dbe2da6dd", 0xffea) (async) 6.8867031s ago: executing program 3 (id=3840): r0 = syz_open_pts() ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000340)={0x7, 0x0, 0xfffffffe, 0x5, "ff14e7130b1e586ca6294000", 0x40, 0x3effc}) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000380)="079facfaaed69aea4dc561c3b736feac0a2a76087be8b904ddc6f90b66e0f69b6dfba683b348224cf0ccc2a39b0f79389a2bd9b211424a22ca014b9231e253e257706c75b3f320166475c72455021edf575fab8b5d65b8d261c87c3ccc4e784ea7462f3723edabb8e26d27acb1797e2ef4db27270a", 0xffffff01}], 0x1) r1 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0) ioctl$VMM_IOC_WRITEREGS(r1, 0x82485608, &(0x7f0000000200)={0x1, 0x0, 0xed2, {[0xaeb, 0x7, 0x0, 0x8000, 0x752, 0x4000, 0xfff, 0xffffffffffffcd6b, 0x5, 0x2, 0x10, 0x2, 0x4, 0x7, 0x4, 0x3, 0x3, 0x1], [0x8, 0xffffffffff7fffff, 0x1, 0x6, 0x0, 0xd, 0x7f, 0x401, 0x5a19, 0x1], [0x6, 0xed, 0x8, 0x2, 0x10000004, 0x42, 0x8], [0x10000000003, 0x100, 0x401, 0x9, 0x0, 0x80000000], [{0x9, 0x4, 0x4, 0x5}, {0x8000, 0x5, 0x80000000, 0xfffffffffffffffd}, {0x7, 0x1ff, 0x96, 0x7}, {0x9, 0x8, 0x200, 0x8000}, {0x0, 0x7fff}, {0x6, 0x9, 0x9, 0x5}, {0xdc8, 0x7, 0x200, 0x3}, {0x3, 0x0, 0x9, 0x5}], {0x4, 0x7b7, 0xffff, 0x100000000}, {0xa262, 0x40, 0x5, 0x9}}}) syz_open_pts() ioctl$TIOCSETAF(r0, 0x802c7416, &(0x7f0000000080)={0x5e, 0x81, 0x37bc8560, 0xfffffff8, "721d4a722b2821a45a21f65201d908f882dc09ee", 0xff, 0x10000}) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) fcntl$lock(r2, 0x9, &(0x7f00000003c0)={0x1, 0x0, 0x7fffffffffffffff, 0x1ffffffff}) munmap(&(0x7f0000001000/0x2000)=nil, 0x2000) sysctl$net_inet_tcp(&(0x7f0000000000)={0x4, 0x2, 0x6, 0x13}, 0x4, 0x0, 0x0, &(0x7f0000001740), 0xfffffffffffffdff) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) fcntl$lock(r3, 0x9, &(0x7f0000000040)={0x2, 0x2, 0xfffffffffffffffc, 0x1000300000004}) fcntl$lock(r2, 0x8, &(0x7f0000000000)={0x3, 0x1, 0x20002, 0x100000002}) ioctl$TIOCSTAT(r0, 0x20007465, 0x0) 2.403276778s ago: executing program 4 (id=3984): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x81, 0x2f, 0x2}, {0x40, 0xf, 0x9, 0x7}, {0x106, 0x80, 0x8, 0xeffffffe}]}) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x4) close(r1) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x8000, 0x8) r3 = socket(0x6, 0x4, 0x2) kevent(r1, &(0x7f0000000100)=[{{r2}, 0xfffffffffffffffd, 0x12, 0xf0000000, 0x9, 0x6}, {{r0}, 0xfffffffffffffffe, 0x80, 0x1, 0xfffffffffffffffc, 0xfffffffffffffff9}, {{r0}, 0xfffffffffffffffd, 0x31, 0x40, 0x7ff, 0x1e326658}, {{r0}, 0xffffffffffffffff, 0x158, 0x8, 0xfffffffffffff800, 0x7}], 0xf, &(0x7f0000000240)=[{{r0}, 0xfffffffffffffff8, 0x22, 0x40000000, 0x8, 0x3}, {{r0}, 0x1, 0x9, 0x10, 0x2, 0x8}, {{r0}, 0x0, 0x8c, 0x20000000, 0x9, 0x3861cfc6}, {{r0}, 0xffffffffffffffff, 0x41, 0x80000000, 0x9, 0x9}, {{r0}, 0xfffffffffffffffb, 0x84, 0x1, 0x400, 0x14000}, {{r3}, 0xfffffffffffffff8, 0x20, 0x8, 0x1, 0x1000}, {{r0}, 0xfffffffffffffffb, 0x0, 0x7c5bee1e0d97abd6, 0x8, 0x7b0}], 0x5, &(0x7f0000000180)={0x597, 0x40}) sysctl$hw(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x8004741b, &(0x7f0000000000)=0x7) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0xfffffffffffffe6d, 0x0}) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@broadcast, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x300, @broadcast}, @icmp=@source_quench={0x4, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x4, 0x3, 0x67, 0x1, 0x81, 0xff, 0xfffc, @empty, @multicast2}}}}}}) 2.402480042s ago: executing program 6 (id=3985): openat$wskbd(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000380)={0x10000, [{0x1, 0x2}, {0x0, 0xfffffffb}, {}, {0x0, 0x1}, {0x0, 0x9}, {0x0, 0x4}, {0x3, 0x8}, {0x0, 0xc8}, {0x5, 0x2}, {0x0, 0xff}, {0x2}, {0x3, 0x204}, {0x3, 0xfffffffd}, {}, {0x0, 0x7fffffff}, {0x0, 0x7}, {0x1, 0x6}, {0x1, 0x7}, {0x0, 0x2000000}, {0x0, 0x3}, {0x1}, {0x1, 0xfffffffc}, {0x2}, {0x0, 0x6}, {0x3}, {0x1}, {0x2, 0x3}, {0x3}, {0x1}, {}, {}, {0x1, 0x57fd}]}) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) setitimer(0x2, &(0x7f0000000000)={{}, {0x0, 0xe9db}}, 0x0) mmap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x1011, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x2, 0x0) write(r0, 0x0, 0x0) pwrite(r0, &(0x7f00000009c0)="5e06b8e4c1532729f413f593b4b16b0ab3b2e77e59042021d45525fd64ec0d3294d59e103492a1327b35e04bdd683f9e8d5bee0428dab67a077be299c71ff8aea0f423625b75cc07e9318b0a57c4b13e55dd6dc6599581d26c8a550e1074324df9db7f6318935d1732e88cb696cd7544ca4804a115fe0c48677f33f5af6f9b684286c5b08c65c232a91a33d338f6b232c5d499a313b47d8dec5fb0b9d9b4ead36199a704d6bd358ee0ddda78731ba7b106e5be478f2fd273ae58f24b312fd6ca5b051a83dec17c52f9dd1eb18045e0e95df8c314f5b87183dcaff1cc233fdebb2b3e523a56622c4a9a74ef8f32892e1d4b4863bdf61083c19c33dd3a7685fa4545e581070512307b94dfac04fcd81ed2bcd603237f70ec80551e5de132140acd8a164c95e37262a1f2c977b2a9d9573213c48492ea0ffc5ff8237d1dbd8e31286df3e2f4849a4ab3934bc5dcb6fde0e37b7bf07383293c917596877217e136013c3092f48f7ae48441933c2c1889b7a289f26f6bf60df3bff0b49ece07ef8cd1f08f50e47db0420b4841c5937c98004f41372259ac619e10f0dac6724402087906cf4689faf4f4077b00e30a0e5a69993f4aa82caa5255d160719a0401472b1534a507c425ace29e65dbfe459fbfd352b3f107b37959189d4b5dcd33e688b49e90a9dbacbc4eefc12b075ef937e130c66e85ece949ca6c03076356cecbac47b3ef04ad7a3bc0c99241de9f762c00638599e6ddef3533f84267a27d14638f362c4a5850a2b72f099437ca4fd2c62f8686a7b7c06870179d9afcdef9d7ca277a125fd86c20eeb1789af40197519e3757c44f73b965e133d7bf4da7a3abcca2f73eea3360b1c7ab5230a56a2a3b2482ebe9b423afecf8b09bb9d96791a11926bb4b782703a3fd983f6ef4d0ff7b36478d1a2cde9378be332a49862bda8db37546a04364997dcf796988427ce41e37f5405d577496a01e7cc76191d10ff37e41a86374beadc0c0076987baed2830d1778cf55d39461dc231f4491d99d0adb53a2815d878a293193c8bc1b87e30062998bb79722a4cef603adbdb20dbc037ae21b592601689c2a67f584ce1e1dbc9e9725e4e98ad4b3da90e3477ea3329d0a603cbbe8bb469bbb0b186f1208654fd5a447994250d6d455a28b3e54329977311a5eab2c4f9f116cb9d61370fec6d2c61f945c65bc2966231727214ced13c0dd7987d9caad17abe7812af6b9ff9ab9f83eb74b414ed56df22b32ba74f034c5d502e50760000b9935e5a528d83511a3b7a7059cf0ffcb9edb3faf7379272eebd096870fb0e0fd3181209e7be954c07918b9358c11c33d81da70b0ade1fc9effbff6df77c8eea68251a030009f5cefd287d35e33256e42aa3cdb3c6593b58bb30205e487c84ae1dc4cd053c3d8ae32c4d45b58a6a4cfad24ff5b84d7c9b7ef174083212c248b9b346e4554156dc04e6cf9218bbf4dd08433315fc50b9be7be6dd11148792f3a07271ea8cac9a53e979c99079557eb09268e314c84ed14eeeba3b860fe20a3d00b92a934aeadeeda222ce54426b5937b1e23be137a0699a65ba38d8a8ad34ca083dd223fa04b4f26d47690e3a1e168387c0aff27054170d1c0e0e2fba17be0d648f0d0f2c4763729ed5128cd7b5f72ec16929aafcf54e6b7c29e562f583b8a87c1da89e2b95ec3929c48df4612cbf6ec774b54ceac9346538f7d43382d142f47ce59fc8f93caf484905137eeb56aba03ed661d5b6bdda70866f164e39815c5a5988273c0d21bb2a3bd4f178ae79755b1827dcf7f84fc3686570dfc28b56cdcfe678a1c85e408ff87f9c286a49906936de5ad1c2abb6d227ebf764103b7c30b28ac8033b7f830ba6e6abb8549d09e5cc3abe35a2dfd5ca3323962e04b98f2df75326811fa08a07507ff4e4d44188553489f01a646f250abaaddad1f009d5cb70c07389ba3a84814b762fa4aa36f645e21646e7e05772efe81c3eed6cd9f9a9caed4371607861759d621a6953a84f3ccc7aaaea36c2118b8c0911e7b7778a79f120d735c60c33043bd8a88adea8bcde7b3ede4f1a114063bd75369b2671fed690e885ecc7fb55682e11d77bc0a837e5304a5c0752f4a18bb295a65642ce6157ac59d135bc2843402c8bc1ea87a808915914473b213345b32e19f8de5ae8a987842f303ae5dfb6e4106ff6fb731b4c7201a7041fadd23c5f59e77b9b9562c61f549e0475d5c3b5aba02513759af46dd214dc2e96b602d9bf646217cb169c1a8e94e9fe8b3adf1c60ad5f71dce48e23db28c9a21c396c1c258541f3fd16e603d10fe7d0d470a5c5020ea07d6ceaabfdb2d4b3f489850bf343fc315340b832c9eae6558731738df1c5d861e5ce67c157a93c32d0583aaf49af63589da07835b28c3d85a43e3420a0fe2dafd8652a23d1c12ad45bb96d6775ce6af51081328bdd86e7b811024a1fc632d005df44d54488815e5098785d1c1263843d1f0736d866444abf586b339a57132a88a7332ef7c68f1816827b31b176afbc557024e00a61b00d77bce567b7207edcf2a7ed3f87a7174ef8e47c24ae141c1c07442a7e445e41eee646cc18ea8285a85ffbfa86ec0d665d2a00da2b929e2632103b62ae1b50c72c9d046aa3d8bd04fa38548f798f1175a7bbc5f68389a285c51d3f33683a5bf2c2a06b6a7a79fc15a521695e46a75039b069b992802778eded06058da867dcb03d9cb6300809179a29a8e9a7dec2179524a48a2a10485725e96f90e988f6ef4efd63b4f0f8c4b6992f573c71e1008be7162ea009ad5a2b5bac0780c86fffee41829e5d16f3f1e8c1449a9abbb729d1c09d2d9ff15abc0eae4f0ff34b1dcfee536ea1c2f9f0be91b0c59ea673af851533bef4aa8e2d4525e31d3b705faab871b7aff04b498865b6b18765df4ecd9ce9dcefecc6d7f7a71adef4128dcd5f3d5e3800d4e5ab787916422df48304d2b52a8e8b4aed99c0ba76341a4fb63dc8e844babf2f60bc026fd2cab1f4fbc20bb6aca9dc74d8269ee88bec1ef316ae77221696a4d7f5abd53a6db3f5bb19b24fb5ac5d99c6bf193db7d856fc21bdffc00cc6a4d8b5de8e5635d31912017b9f81153af08d6c336d32e2c87bfd41740044f951ab7f2230c4092da904845a4b7477abd217189f7fed5d14e93cdb23545357e4d29acee60311ae735d39fb29746b746db2c2f47727e222e734e5f297db52ed8113b815255e127e4b81e61034de5b0d74782b863ff9fca93a6ef408633e1ea8621252b96333dfafce435293f5a19a827c799b8c0ba9b8b0fd3321a798e612daab23d09500ee10f6bddaebe3d3566312e7bfbc89984c42c78bdd9b7f4dfbbadc39f9744ee3b6213318cea0bdc283e4358f775cd042aa926e791e8e202119dbcd6c67ba21995a3fddbf6768dec5e056351f3a658e88541959e95789ba39e697f7adf69b43e093d804bf3d81b5f81b44ebce7224ced9900a20f55c05294e642abbd2dd668d92d6d746f0e6c3b451d0ed90566ff8664418b44dacb26e22c48db3afd39e95b8840afa6759298f5e45819bfaa71e82038779833826614a4000b71cd2501def5faba730eb39825e8ddc3fb9150516375c9f4f6f5bd6706a55a11d6651fdc3768f3b2ff2c060d49d4c45d4201f33492881596ce139da29f05914be109a70bdfc3ae9219daa98be77bb41549e3bab6bc1fe34f248cc056c29fad71f7433013b2d5e4b923c01583ca33a26c0aa40f16cb869f872e36658fcebdc2d212e9ca647274d1c8b32f7242ba6f3ff70e678b64857a6e77051e7f89d5b7b6c923f9493573a397434cd93702c847d3e3eb84d213c81e6317953937bf458d16c36e42c308932532f959279f2bf0df925116fe1687bbada66b875bfd1dc04b7cbff4810a7ec13d05cf0eeefbb5fa72a3b77dc685b30375c779e48b140b026b01b4442a7c14cf737e216cfb90b40744cbca038320c41ab5b9218da12b4b47f9f01dd83b266b1955a8d64589c04daf5c4a11695112315dc150e288d07aa9cafc0a1992c05f1cd180f846b1b559614251ace7f337d4d33b17361cc4484de7eb10f9694421f4e6381e65d4771944eeb7d5dd8322de9ab2cc26d58483b76704d44067944690d5244251c9cd721b2aaab8fe17dc8a3aa1642d333f7d53b302b46d23eda124a919c87dd5795f8670fc1e3812fd1d0a4275450e1d385b7fb59710cacd279f91af147958a659c52ac6c611cb11a54506b74a48c5a74fec1040c9781e02f1201dfdb48229d5334a69634273abac9972135674b0c7b9c257549d746441ae010d36e8a5ff77418ef4fa307efc2661fcc5f30111ae51bd0c7ec36c4151169c2b1e65c0a1073cf3d326a5ecaf87869d070ef6dd9215e18da7241b1054e73fcba5254c569b0b8cd61200890e6303afaf4423c94d32374d19f8807a342b6e15426d1ea52839b3c935d1b92b87d063d0c8e4f50a9473686c02135cca34705b8401f7b3f842aac21bcfd9c4a089b4a0d9a8ada99649c567bc57f897e11fcdb9a04a3a08e631467127cbd55947fd4efa3011493784df5fd5d85124adec56c7ceade584f4503a56281ae2d66c2b854951446d29224390c5efffe82d780b805684df8df3c82ec12bbccda770031b829373d75e09ff97995249fc984c4868d8ed283b5275bd6b6c9bf8645efd1f209ba04cac2591ec92090c6e0dda59143e21efc4793d255b08c609b4c394a665a652984230a8fd420c7c486ca4e35f6a82930a7fd2f34d0b80014c6352e74cb61306d65f59d38322fbd2099e81444ff68bad09757eb163985e455201aabb3b657c1ae822a2e10c6091c5ec546982675f5a46c3286dd0d6bd20310f8cce04e858e69a722fb7de2351151a73f8937ca262a51b337face3b23069e556a6e8a4aeaa4d3a81000b4d323d30bb0471986de8999195e53a1b297a9d5979c597e43e25abc731358fa48b78b7c2eafd225ef0675a13828a1da1abf17fb318c51831c9b5af93262b0f72f75a8e02c02548fffd24c3c61e36f0a7c4ff2e98a161c02f75e7d2b954e7253b287f700fe0a19a159cba7cc4b7ac6b09d3c5239bb672650467af83eaf443aae62e822c12430edf5c1370b6a67fdab64521d90b3fc10e6231d83dc8cdd516b62c6c75506204c2041d254e9143977b27fd6ae0ba1b91c170e000494a370aa92fd77b7766a96fe3b3bea73a0ec1cd7bfeceddff722142cd29484cb90d4c09de59b564dfdd9ac246e11a7528f3794b71b1fb6cf37fa7a01600dea57d3b61182ee32ef1178b7dac2c93c0e12528ee68a8a652786bd7557a7eddb76a2704116209c5f2f01e7521dce221a9f79affd0478cb9919c4f60fa6dbd18e228c507e3d83363b64f5597b9888081603a5196cf50efdb59acf030cf49415d04c5467cc115187701f0fc73fdf8873a215423c4298123950ab01cdfaa5618cc8cebf8d5f21e18e0d832f608b45196724d31efab0431791338e9f6b0ed3e0fcc86cc268c4939e3b2044f1170a4921b0afa8e109691bafd42089229e0ccfe0d26631a446f2cf3d4274d8f4772b3180fdf5b3924777c16df126cfcc6802cb314b748550ce0616a0faca7bc200bee79bf620ca7a74b905679b15cf2706feee725a9d8572b4c0a4f9adb857e8fff41b14e97551eac08e86a8dad94828965c0dfadc75efc46a133d68b4b875ed90d9d41cee8601ec9715ae49a6796d9bd4eb63169a0268250818a52774497b4ed547b7e665085948b6a231757d057788fcf8d003f79261ed49ed14060fb288bea20fbd3cad9baed6ed802a64f23908c8e55fdb3906b785", 0x1000, 0x10) r1 = open(&(0x7f0000000380)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7929) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)='#!', 0x2}], 0x1) setrlimit(0x8, &(0x7f0000000980)) write(r1, &(0x7f0000000200)="09200200000000000000004504000000e67963913f9b47437b413f30ff7a6a0a", 0x20) execve(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) setrlimit(0x8, &(0x7f0000000180)={0x8, 0x8000000000000000}) syz_emit_ethernet(0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="8f6f77ede655aaaaaaaaaabb86dd605f6ad900383a0000000000000000000000000000000000fe8000000000000000000000000000aa020090780000000060e80c75fccece06c33e00003a80fe80000000000000000000f0ffffffaaff0100000000000000000000000000018800"]) socketpair(0x10, 0x4, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x40000802) r3 = open(&(0x7f0000000040)='./file0\x00', 0x12, 0x10) ioctl$TIOCCDTR(r3, 0x20007478) sendto(r2, &(0x7f0000000380)="0814883b798a67b633dd655bfa79ba05a408668b60c756793771929bc45ba2e1394d73283f697c37f7c2f431859f1ba33264a313912f2ba6122fa0c8d04d7759b7647eaef6feaa2b718d7486c33859d34a2c4bba320cb5d08fc26730cab962b608c632c8cc923deb54e2461942717d99412dc946c342204ba361a3bb877a4466e0dfa348578a530b590ae1fe2adc1c85", 0x90, 0x100, 0x0, 0x0) sysctl$net_inet6_ip6(&(0x7f0000000040)={0x4, 0x21, 0x29, 0x33}, 0x4, 0x0, 0x0, 0x0, 0x0) ioctl$VNDIOCCLR(0xffffffffffffffff, 0x80384601, &(0x7f0000000080)={&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000040)='./file0\x00', 0x8}) r4 = accept$inet6(r2, &(0x7f00000001c0), &(0x7f0000000240)=0xc) ioctl$FIOSETOWN(r4, 0x8004667c, &(0x7f0000000280)=0x8000) r5 = socket(0x24, 0x2, 0x0) r6 = dup2(r5, r5) setsockopt(r6, 0x6, 0x4, 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x200, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x2, 0x0) 2.370110553s ago: executing program 4 (id=3989): chmod(&(0x7f0000000040)='.\x00', 0x35e) setuid(0xee01) unveil(&(0x7f0000000080)='.\x00', &(0x7f00000001c0)='x\x00') sendmsg$unix(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f0000000140)=@abs={0x0, 0x0, 0x1}, 0x8, 0x0}, 0x0) r0 = socket(0x800000018, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) open(&(0x7f0000000040)='./file1\x00', 0x18289, 0x110) (async) r1 = open(&(0x7f0000000040)='./file1\x00', 0x18289, 0x110) write(r1, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) fchown(r1, 0x0, 0x0) close(r1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) getegid() (async) r2 = getegid() unveil(&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000380)='c\x00') (async) unveil(&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000380)='c\x00') unveil(&(0x7f0000000340)='./file1\x00', &(0x7f0000000300)='c\x00') (async) unveil(&(0x7f0000000340)='./file1\x00', &(0x7f0000000300)='c\x00') unveil(&(0x7f0000000180)='./file0\x00', &(0x7f0000000440)='x\x00') (async) unveil(&(0x7f0000000180)='./file0\x00', &(0x7f0000000440)='x\x00') unveil(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000003c0)='x\x00') setgid(r2) (async) setgid(r2) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0xfffffffe, 0x0, 0xffffffffffffffff, 0x0, r2, 0x100, 0x200}, 0x0, 0xfffffffffffffffc, 0x82e2}) (async) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0xfffffffe, 0x0, 0xffffffffffffffff, 0x0, r2, 0x100, 0x200}, 0x0, 0xfffffffffffffffc, 0x82e2}) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) r3 = openat$pci(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) fcntl$lock(r3, 0x8, &(0x7f0000000040)={0x1, 0x0, 0xffffffffffffffff, 0x1000300000000}) (async) fcntl$lock(r3, 0x8, &(0x7f0000000040)={0x1, 0x0, 0xffffffffffffffff, 0x1000300000000}) mknod(&(0x7f0000000400)='./file0\x00', 0x2000, 0x5d4a) mknodat(0xffffffffffffff9c, 0x0, 0xc0e99db6de761f86, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x0, 0xa0) (async) r4 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0xa0) kqueue() (async) r5 = kqueue() dup2(r5, r4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendmsg$unix(r0, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x404) sysctl$kern(&(0x7f0000000000)={0x1, 0x2c}, 0x3d, 0xfffffffffffffffe, &(0x7f0000000040)=0xfffffffffffffda7, 0x0, 0x0) 2.262489752s ago: executing program 4 (id=3996): r0 = msgget(0x3, 0x280) msgsnd(r0, 0x0, 0x0, 0x0) (async) msgctl$IPC_RMID(r0, 0x0) (async) r1 = openat$pf(0xffffffffffffff9c, &(0x7f00000000c0), 0x101, 0x0) fsync(r1) (async) syz_emit_ethernet(0x54, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaa62baaa86dd60000000001e3c03fe8013"]) (async) sendto$unix(0xffffffffffffff9c, &(0x7f0000000000)="b1000504600000000000000007000000331c13fecea10500fef9e906c72fd3357ae320b37b673039d2d236073705ae04be38164991f7accf5f882b297be1aa5b236deb51e2f0ac3ebbc257699a5f139b672f4d335d223e7d029d6ba8af630037280200000000720f70c1f5a472c881ea6e69e0bb76d907c400000200361b1257aea8c5000020020000000000008abfba09", 0x91, 0x0, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r2 = socket(0x11, 0x3, 0x0) sendto$unix(r2, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x0, 0x0, 0x0) (async) r3 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) getsockopt$sock_int(r1, 0xffff, 0x1004, &(0x7f0000000180), &(0x7f00000001c0)=0x4) (async) ioctl$WSDISPLAYIO_USEFONT(r3, 0x80585750, &(0x7f0000000100)={'./file0\x00', 0x6, 0x6, 0xf, 0x1, 0x80000001, 0x7, 0x10001, 0x0, 0x2, 0x5, 0x3c5}) 2.260295158s ago: executing program 6 (id=3997): setgroups(0x1, &(0x7f0000000180)=[0x0]) r0 = getuid() r1 = kqueue() kevent(r1, &(0x7f0000000000)=[{{}, 0xfffffffffffffff6, 0x3, 0xf27ff7794bbc9c2d, 0xfd, 0x10000}], 0x1, 0x0, 0x9b68, 0x0) kevent(r1, &(0x7f0000000240)=[{{}, 0xfffffffffffffff6, 0x28, 0x40000000, 0xfd, 0x13fff}], 0xfffffffd, 0x0, 0xfffffff8, 0x0) kevent(r1, &(0x7f0000000040), 0xe4a, 0x0, 0xa9fa, 0x0) chown(&(0x7f0000000040)='./file0\x00', r0, 0xffffffffffffffff) getgroups(0x2, &(0x7f0000000040)=[0xffffffffffffffff, 0xffffffffffffffff]) lchown(&(0x7f0000000000)='./file0\x00', r0, r2) setuid(0xee01) r3 = syz_open_pts() fchmod(r3, 0xd00) setgroups(0x1, &(0x7f0000000180)=[0x0]) (async) getuid() (async) kqueue() (async) kevent(r1, &(0x7f0000000000)=[{{}, 0xfffffffffffffff6, 0x3, 0xf27ff7794bbc9c2d, 0xfd, 0x10000}], 0x1, 0x0, 0x9b68, 0x0) (async) kevent(r1, &(0x7f0000000240)=[{{}, 0xfffffffffffffff6, 0x28, 0x40000000, 0xfd, 0x13fff}], 0xfffffffd, 0x0, 0xfffffff8, 0x0) (async) kevent(r1, &(0x7f0000000040), 0xe4a, 0x0, 0xa9fa, 0x0) (async) chown(&(0x7f0000000040)='./file0\x00', r0, 0xffffffffffffffff) (async) getgroups(0x2, &(0x7f0000000040)=[0xffffffffffffffff, 0xffffffffffffffff]) (async) lchown(&(0x7f0000000000)='./file0\x00', r0, r2) (async) setuid(0xee01) (async) syz_open_pts() (async) fchmod(r3, 0xd00) (async) 2.085861299s ago: executing program 4 (id=4000): select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x8, 0x2000000000000004}, 0x0, 0x0, 0x0) r0 = kqueue() kevent(r0, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file0\x00', 0x8, 0x298, 0xfffefffd, 0x0, 0x5, 0x7, 0x8000000c, 0x1, 0x0, 0xf, 0xffffffffffffffc8}) mknod(&(0x7f0000000000)='./file1\x00', 0x2000, 0x637d) r1 = open(&(0x7f0000000800)='./file1\x00', 0x800, 0x120) ioctl$FIONBIO(r1, 0x82907003, &(0x7f0000000140)=0x1) mknod(&(0x7f0000000000)='./file0\x00', 0x1000, 0x3) r2 = open(&(0x7f0000000040)='./file0\x00', 0x40, 0x100) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x4, 0x1, 0x7, 0x6, 0x3, 0x80002001, 0x8, 0x10, [{0x5, 0x7, 0x4, 0x3}, {0x7, 0x4, 0x9, 0x7}, {0x6, 0xf86, 0x100, 0xaf9}, {0x5, 0x8, 0xb, 0x3}, {0xd, 0xfffffffb, 0xe, 0x7}, {0x2, 0x7, 0xffffffff, 0x9c}, {0x3, 0x1, 0x5, 0x6d}, {0x2000a, 0x803, 0x14, 0x4}, {0x557f, 0x81, 0x1, 0x4000009}, {0x3ff, 0xfffffffe, 0xc7, 0x87}, {0x4, 0x5, 0x9, 0x10aeb}, {0x803, 0x40, 0x1, 0x5}, {0xe0, 0x4, 0x5, 0x3ff}, {0x29a71717, 0xfffffffa, 0x6, 0x100006}, {0x5, 0x9, 0xfff}, {0x0, 0x5, 0x4, 0x30000}]}) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x8, 0x2000000000000004}, 0x0, 0x0, 0x0) select(0x40, &(0x7f0000000180)={0x80000000, 0x44809e9d, 0xfffffffffbffffff, 0xfffffffefffffffd, 0x2000040000000002, 0x210, 0x9454, 0x9}, 0x0, 0x0, 0x0) mknod(&(0x7f00000001c0)='./file0\x00', 0x2000, 0x205b9a) r3 = kqueue() kevent(r3, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r4 = open(&(0x7f0000000200)='./file0\x00', 0x1, 0x0) ioctl$FIONBIO(r4, 0x82907003, &(0x7f0000000140)=0x1) writev(0xffffffffffffffff, &(0x7f0000001500)=[{&(0x7f0000000140)="5bcad69493", 0x5}], 0x1) mknod(&(0x7f0000000000)='./file1\x00', 0x2000, 0x285b9a) r5 = open(&(0x7f0000000080)='./file1\x00', 0x40, 0x132) ioctl$FIONBIO(r5, 0xc0307004, &(0x7f0000000140)=0x1) ioctl$FIONBIO(r2, 0x82907003, &(0x7f0000000140)=0x2) close(r1) sysctl$kern(&(0x7f00000000c0)={0x1, 0x47}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0xffffff26) 2.075794177s ago: executing program 6 (id=4003): syz_emit_ethernet(0x138, &(0x7f0000000340)=ANY=[]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket(0x2, 0x4001, 0x0) shutdown(r0, 0x0) kevent(0xffffffffffffffff, &(0x7f00000000c0)=[{{}, 0xfffffffffffffff9, 0x8b, 0x0, 0x1000000000000000}], 0x56, 0x0, 0x7fff, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x11d) sysctl$vm(&(0x7f0000000340)={0x2, 0x8}, 0x2, 0x0, 0x0, 0x0, 0x0) ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x4, 0xb3f, {[0xfffffbfffffffffb, 0x0, 0x2, 0x100200000, 0x406, 0x6, 0xdf60, 0x7fffffff, 0x0, 0x1000, 0x93, 0x3, 0xfffffffffffffffc, 0x200000000002, 0x100000000000000d, 0x4, 0x0, 0x400000000100], [0x2000, 0xaa, 0x1000, 0x20000001, 0x5d, 0x7b96, 0x4f0e, 0xfffffffffffffffe, 0x80000000000000], [0x100000001, 0x8000, 0x100040000001, 0x4, 0xb, 0x11000, 0xffffffff00000003], [0x8, 0x1fffffffffc, 0x7ff7fffffffffffc, 0x100000000, 0x2, 0x1bbc], [{0x0, 0x4, 0x0, 0x7d06}, {0xf7fc, 0x22, 0x3, 0x2aae}, {0x4, 0x41, 0xfffffffe, 0x800}, {0x3, 0x4, 0x5, 0xffffffffffffffff}, {0x0, 0x1, 0x7d, 0x8}, {0x0, 0x3, 0x9, 0x2000000000000000}, {0x101, 0x1, 0xfffffff9}, {0x0, 0x102, 0x0, 0x7}], {0x1, 0x5, 0x0, 0x1000003}, {0x2, 0x3, 0x6d5, 0x6}}}) r1 = kqueue() kevent(0xffffffffffffffff, &(0x7f0000000040), 0x30, 0x0, 0x6, 0x0) close(r1) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x65}) r2 = syz_open_pts() close(r2) syz_open_pts() ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f0000000380)={0x6, 0x5, 0xfeffdf83, 0xffffff8c, "08ed95990000000000000000ffffffffffffffe6", 0xa, 0x4}) writev(r2, &(0x7f0000000080)=[{&(0x7f00000001c0)="0447cdcc2a8fccc869693720332ef170bf260a54743d8f4c9725c670995a48b1d2886cca8c44c810447287ad8d6d77b0de32f5c696161ebda722d2d3a2cc464a15b80b147245", 0x46}, {&(0x7f0000000780)="01287dc503da40a0395f600dccf50200149bc9fd14f37cc6c35749f18f8fc02b1043355b42bcf21e0f2bdd36b31fd2ba572e9c27cdd505922fc329a1777d4819a0e3195ea22007e6d48e98bc7d15c724eadd6148ab36798feea50175a09b825506c06b44b63ca7535f2817b8ee3ef73b99612d78c0eac7f3aaa638dd3e518d64902552f735b1e7a78297cc61f93767d0574c6a9bf639b2bdd52d146a45c9eb97d8e68500f19d", 0xa6}], 0x2) r3 = syz_open_pts() syz_open_pts() ioctl$TIOCSETA(r3, 0x802c7414, &(0x7f00000000c0)={0xf, 0x8, 0xfffffffe, 0xfffffff2, "ff0107002015c8a32d00008623a24dda2f9da2af", 0x9, 0x3fffc}) ioctl$TIOCSTAT(r3, 0x20007465, 0x0) setrlimit(0x8, &(0x7f0000000980)={0xb, 0x54}) r4 = syz_open_pts() r5 = openat$bpf(0xffffffffffffff9c, &(0x7f00000003c0), 0x800, 0x0) ioctl$BIOCSETIF(r5, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSETF(r5, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0xc, 0x2d, 0x2, 0x8}, {0x5, 0xd, 0x9}, {0x6, 0x7d, 0x95, 0x9}]}) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[]) close(r4) syz_open_pts() 1.975489716s ago: executing program 6 (id=4005): r0 = open(&(0x7f0000000280)='./bus\x00', 0x0, 0x0) select(0x40, &(0x7f0000000300)={0x7, 0x5, 0x2, 0xbf, 0xa, 0x10000, 0x9, 0x101}, &(0x7f0000000340)={0x1, 0x4000000000000000, 0x2, 0x5, 0x9, 0x5c, 0x30886671, 0x3485}, &(0x7f0000000380)={0x9, 0x2, 0xffff, 0x40000000000005, 0x100000002, 0x5, 0xb682, 0xded}, 0x0) setsockopt$sock_timeval(r0, 0xffff, 0x1006, &(0x7f0000000100)={0xfffffffffffff001, 0x10000}, 0x10) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000200), 0xc0, 0x0) r2 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000240), 0x20000, 0x0) r3 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$WSMOUSEIO_SETPARAMS(r3, 0x80105728, &(0x7f0000000340)={&(0x7f0000000300), 0x2b}) flock(r0, 0x0) ioctl$TIOCSETAW(0xffffffffffffffff, 0x802c7415, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x10, 0x0) r5 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$WSKBDIO_SETENCODING(r5, 0x80045710, &(0x7f0000000040)=0x100) setgid(0xffffffffffffffff) setgroups(0x0, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0xffff, 0x10, &(0x7f0000000080), &(0x7f00000000c0)=0x4) getsockopt$SO_PEERCRED(r4, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0}, 0xc) setuid(r6) syz_open_pts() poll(&(0x7f00000002c0)=[{r3, 0x10}, {r3, 0x4}, {r0, 0x2}, {r1, 0x100}, {r2, 0x8}], 0x5, 0xffffffff) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x80000000, 0x2010000000000001}}) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x8) pipe(&(0x7f0000000640)={0xffffffffffffffff}) setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) close(r7) r8 = socket(0x2, 0x3, 0x7) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) setsockopt$sock_int(r7, 0xffff, 0x2000, &(0x7f0000000180)=0xfffffffe, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) connect$unix(r8, &(0x7f0000000000), 0x10) write(r7, &(0x7f0000000040)="fd7775292f12eb4f40a48593507d01a4a7", 0x11) 1.828966607s ago: executing program 4 (id=4008): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) sysctl$kern(&(0x7f0000000100)={0x1, 0x3f}, 0x2, &(0x7f00000011c0)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1c, 0x0, 0x0) minherit(&(0x7f00007a1000/0x1000)=nil, 0x1000, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x80, 0x196) r0 = semget$private(0x0, 0x1, 0x0) semctl$GETZCNT(r0, 0x4, 0x7, &(0x7f0000000040)=""/47) 1.823767901s ago: executing program 4 (id=4013): setrlimit(0x6, &(0x7f0000000980)={0x7, 0x3ff}) r0 = syz_open_pts() sysctl$kern(&(0x7f0000000100)={0x1, 0x50}, 0x3, &(0x7f00000011c0)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xfe10, 0x0, 0xfffffffffffffff9) close(r0) syz_open_pts() writev(r0, &(0x7f0000000040)=[{&(0x7f0000000200)="a568c14719210631c4cb449655740cc28b13d1ca0d58e11a950594af54602162cbed1b4737f3f8a5fa67c91b3a45de8f24474e752526a75ffa1e1ad6fdb38b1aaa01be9c5db58f3181edbb0aa263639e0f4e16b324dcc513e15f988b3e69ee08453c4bbe575f8da764eba3bcae120432d3", 0x71}], 0x1) setrlimit(0x6, &(0x7f0000000980)={0x7, 0x3ff}) (async) syz_open_pts() (async) sysctl$kern(&(0x7f0000000100)={0x1, 0x50}, 0x3, &(0x7f00000011c0)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xfe10, 0x0, 0xfffffffffffffff9) (async) close(r0) (async) syz_open_pts() (async) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000200)="a568c14719210631c4cb449655740cc28b13d1ca0d58e11a950594af54602162cbed1b4737f3f8a5fa67c91b3a45de8f24474e752526a75ffa1e1ad6fdb38b1aaa01be9c5db58f3181edbb0aa263639e0f4e16b324dcc513e15f988b3e69ee08453c4bbe575f8da764eba3bcae120432d3", 0x71}], 0x1) (async) 1.574711572s ago: executing program 5 (id=4018): setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) open$dir(&(0x7f0000000040)='./file0\x00', 0xae828e137847f62, 0x0) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket(0x2, 0x2, 0x0) connect$unix(r0, &(0x7f0000000000), 0xe0) truncate(&(0x7f00000000c0)='./file0\x00', 0x5ffffffffd) r1 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) write(r1, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) write(0xffffffffffffffff, 0x0, 0x0) fchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff) close(0xffffffffffffffff) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) 1.57031672s ago: executing program 1 (id=4019): select(0x40, &(0x7f0000000080)={0x8000000000000000, 0x0, 0x7, 0x4, 0x2, 0x80000001, 0x8000000000000005, 0xd}, 0x0, 0x0, 0x0) (async) select(0x40, &(0x7f0000000080)={0x8000000000000000, 0x0, 0x7, 0x4, 0x2, 0x80000001, 0x8000000000000005, 0xd}, 0x0, 0x0, 0x0) sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b1000501600000040000000007000000087c156610c18125d7f96ecfc73fd3d89815a9c61d3952ddb06b36ac970bff03000000000000000000000000ebe1aa5323edeb51e2f0ca3ebbc2c4699a09000000acb5b302000d7d010000000100000021020000742fe2458bfbb770c1f5a8aec872ea772ec58904000000008d9810361b1257aba8c50000201201", 0x8b, 0x808, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x11, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r1, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0xa) getsockname$unix(r1, &(0x7f00000000c0)=@file={0x0, ""/260}, &(0x7f0000000200)=0x106) (async) getsockname$unix(r1, &(0x7f00000000c0)=@file={0x0, ""/260}, &(0x7f0000000200)=0x106) connect$unix(r1, &(0x7f0000000000)=@file={0xd1653077bafa0114, './file0\x00'}, 0xa) sendto$unix(r0, &(0x7f0000000000)="b100050400fe04000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x0, 0x0, 0x0) (async) sendto$unix(r0, &(0x7f0000000000)="b100050400fe04000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x0, 0x0, 0x0) 1.452994638s ago: executing program 1 (id=4021): r0 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) select(0x14, &(0x7f00000003c0)={0x0, 0x2000000000000000, 0x0, 0xe}, &(0x7f0000000080)={0x800000000000003, 0x8, 0x0, 0xffffffffffffdfff}, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x9cab835cfdc52675, 0x0) getsockname$inet6(r0, &(0x7f0000000040), &(0x7f0000000100)=0xc) 1.452690496s ago: executing program 7 (id=4022): r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TIOCSETA(r0, 0xc080446a, &(0x7f0000000040)={0x2, 0xffffffff, 0x3, 0x10000000, "00000000000000000f0000ee0900", 0x6, 0xfffffff7}) sysctl$kern(&(0x7f0000000000)={0x1, 0x4d}, 0x2, 0x0, 0x0, &(0x7f0000001440)="02000000", 0x4) 1.45233932s ago: executing program 1 (id=4023): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_opts(r0, 0x0, 0x64, &(0x7f0000000240)="01000000", 0x4) getsockopt(r0, 0x0, 0x6a, 0x0, 0x0) sysctl$net_inet_ip(&(0x7f0000000000)={0x4, 0x2, 0x0, 0x10}, 0x4, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) 1.451745141s ago: executing program 7 (id=4024): open(&(0x7f0000000000)='./file0\x00', 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)={&(0x7f0000000240)=@un=@file={0x0, ""/529}, 0x213, 0x0, 0x0, 0x0}, 0x4000}, 0x10, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1003f8d}, 0x2b, 0x1001, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r0, &(0x7f0000000080)={0x0}, 0x6a, 0x0) sendmsg$unix(r0, &(0x7f0000003ac0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB=' \x00'/16, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00('], 0x48, 0xf8f45ad47d2d40ee}, 0x404) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) close(r0) r1 = socket(0x2, 0x2, 0x0) connect$unix(r1, &(0x7f0000000000), 0x10) unveil(0x0, &(0x7f00000000c0)='r\x00') syz_emit_ethernet(0x2e, &(0x7f0000000000)={@local, @local, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x1, 0x0, @multicast1, @multicast1, {[@noop, @ssrr={0x89, 0x3, 0x6}]}}, @icmp=@info_reply={0x10, 0x0, 0x0, 0x80, 0xd5b}}}}}) 1.273213722s ago: executing program 5 (id=4025): r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000500), 0x800, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffff"]) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) close(r2) r3 = socket(0x2, 0x2, 0x0) connect$unix(r3, &(0x7f0000000000), 0x10) setsockopt$sock_int(r3, 0xffff, 0x1023, &(0x7f00000004c0), 0x4) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) ioctl$TIOCSETA(r0, 0xc0404469, &(0x7f00000000c0)={0x72f, 0x1, 0x1, 0x3, "c9f7d246000000023b0bca8f00875a6e80f775d2", 0xfffffffc, 0x6}) 1.272489242s ago: executing program 1 (id=4027): r0 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) ioctl$TIOCSETA(r0, 0xc148445f, &(0x7f0000000180)={0x2, 0x2, 0x200, 0x2f, "1800e6234f5d7a0000005409456200", 0x0, 0x207}) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x637e) select(0x0, 0x0, 0x0, 0x0, 0x0) r1 = kqueue() mknod(&(0x7f0000000080)='./file0\x00', 0xc000, 0x1d2) kevent(r1, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x40, 0x100) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x1, 0x7, 0x101, 0x8, 0x80002001, 0x1, 0x10, [{0x1000, 0x0, 0x4, 0xfffffffe}, {0xfffefffc, 0x4, 0xa, 0x7}, {0x6, 0xf86, 0x300, 0xaf9}, {0x4, 0x0, 0x9}, {0x6, 0xff, 0xe, 0x7}, {0x9, 0x1, 0xffffffff, 0x9c}, {0x80000cdf, 0xfffffffd, 0x3, 0x4}, {0x20007, 0x803, 0x14, 0x8000}, {0x2, 0x8, 0x1, 0x9}, {0x6, 0x7ffd, 0xc7, 0x7e}, {0x4, 0xfffb, 0x9, 0xaeb}, {0x46ae, 0x40, 0x6, 0x5}, {0xdc, 0x4, 0x5, 0x3ff}, {0x8000, 0xfffffffa, 0x6, 0x100006}, {0x4, 0x7, 0x7}, {0x3, 0x1, 0x4, 0x7e}]}) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x8, 0x2000000000000004}, 0x0, 0x0, 0x0) ioctl$FIONBIO(r2, 0x82907003, &(0x7f0000000140)=0x2) mknod(&(0x7f0000000040)='./file0\x00', 0x6000, 0xe02) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r3, 0x0, 0x200000000000a, 0x0, 0x0) getsockopt(0xffffffffffffffff, 0xf7fffffd, 0x5, 0x0, &(0x7f0000000280)) setsockopt(r3, 0x1fe00000, 0x81, &(0x7f0000000080), 0x0) sync() sync() sync() sync() sync() write(0xffffffffffffffff, 0x0, 0x0) open$dir(&(0x7f0000000040)='./file0\x00', 0x201, 0x80) setuid(0xee01) r4 = socket(0x1, 0x2, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa0801480600340064100307009078ffffffffffffffff070b1eac1400aa7f000001000e009078000b0008000003fc0000000400000009"]) ioctl$FIONREAD(r4, 0xc0106924, &(0x7f00000001c0)) r5 = kqueue() kevent(r5, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) socket(0x2, 0x1, 0x0) 1.095767264s ago: executing program 5 (id=4029): pipe(&(0x7f0000000140)={0xffffffffffffffff}) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f0000000580)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) chown(&(0x7f00000003c0)='./file0\x00', 0x0, r2) chdir(&(0x7f0000000100)='./file0\x00') mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0e99db6de761f86, 0x0) ioctl$TIOCSPGRP(r0, 0x40047477, &(0x7f0000000000)) 1.095276043s ago: executing program 6 (id=4030): mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2000, 0x801) ktrace(&(0x7f0000000080)='./file0\x00', 0x4, 0xd27d43220c7d18f, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = open(&(0x7f0000000040)='./bus\x00', 0x4, 0x0) ioctl$TIOCEXCL(r0, 0x2000740d) chmod(&(0x7f0000000040)='.\x00', 0xfc) sysctl$net_pipex(&(0x7f00000000c0)={0x4, 0x22, 0x1}, 0x3, 0x0, 0x0, 0x0, 0x0) sysctl$kern(&(0x7f00000000c0)={0x1, 0x50}, 0x3, &(0x7f0000000100)="00e0ae5b7e0d0000bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x50, 0x0, 0x37) setuid(0xee01) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) 1.094213374s ago: executing program 7 (id=4031): ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x4, [{0x1, 0x7}, {0x0, 0x2}, {0x2, 0x7fff}, {0x2, 0x7}, {0x3, 0x10000008}, {0x3, 0x4}, {0x3, 0x20000007}, {0x3, 0xc1}, {0x2, 0x1}, {0x2, 0xd}, {0x1, 0xffffffc}, {0x2, 0x6}, {0x3, 0x4}, {0x0, 0xffffffff}, {0x3, 0x5}, {0x0, 0x5}, {0x2, 0xfffffffd}, {0x3, 0xe}, {0x2, 0x100}, {}, {0x3, 0x4bafb0a0}, {}, {0x0, 0x7}, {0x3, 0x9c}, {0x2, 0x204}, {0x2, 0x3}, {0x2, 0xfffffffe}, {0x1, 0x3}, {0x1}, {0x3, 0x210000}, {0x3, 0xfffffe01}, {0x0, 0x40}]}) r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x20000, 0x0) faccessat(0xffffffffffffffff, &(0x7f00000000c0)='./file0/file0/..\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) mknod(0x0, 0x2, 0x9) r1 = open(&(0x7f0000000000)='./file0/file0/..\x00', 0x10, 0x10) ioctl$WSKBDIO_SETBACKLIGHT(r1, 0x800c5712, &(0x7f0000000180)={0x7, 0x9, 0x5}) r2 = open$dir(0x0, 0x200, 0x68) close(r2) ioctl$TIOCSETA(r0, 0xc0284457, &(0x7f00000000c0)={0x10000002, 0xfffffffb, 0xfeefffff, 0x2, "080054d1000000010000000100000f1e0400", 0xd50, 0x10000}) 985.350057ms ago: executing program 5 (id=4032): mknod(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2, 0x4401) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000140), 0x8000, 0x0) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000040)) ktrace(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2, 0x2, 0x0) 981.119077ms ago: executing program 7 (id=4034): r0 = open(&(0x7f0000000000)='./file0\x00', 0x615, 0x166) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000000)='m', 0x1}], 0x1) r1 = socket$inet(0x2, 0x2, 0x0) close(r1) (async) close(r1) socket$inet(0x2, 0x2, 0x0) (async) r2 = socket$inet(0x2, 0x2, 0x0) sysctl$net_inet6_ip6(&(0x7f0000000000)={0x4, 0x18, 0x29, 0x9}, 0x4, 0x0, 0x0, &(0x7f0000000080)="01000000", 0x4) (async) sysctl$net_inet6_ip6(&(0x7f0000000000)={0x4, 0x18, 0x29, 0x9}, 0x4, 0x0, 0x0, &(0x7f0000000080)="01000000", 0x4) setsockopt$inet_opts(r2, 0x0, 0x9, &(0x7f0000000240)="ea00000100000000", 0xc) setsockopt$inet_opts(r1, 0x0, 0xd, &(0x7f0000000240), 0x0) ioctl$WSMUXIO_ADD_DEVICE(r0, 0x80085761, &(0x7f00000000c0)={0x2}) ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9f, 0x0) (async) ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9f, 0x0) syz_emit_ethernet(0x8a, &(0x7f0000000300)=ANY=[@ANYRESOCT=r0, @ANYRES32=0x41424344, @ANYRESDEC=r0, @ANYBLOB="5000000000650004"]) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) (async) r3 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) truncate(&(0x7f0000000080)='./file0\x00', 0xffff) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x10, r3, 0x0) getrlimit(0x1, &(0x7f0000000180)) (async) getrlimit(0x1, &(0x7f0000000180)) sysctl$kern(&(0x7f00000000c0)={0x1, 0x32}, 0x2, &(0x7f00000001c0)='n\b\x00\x00', &(0x7f0000000000)=0x4, &(0x7f0000000300), 0x0) kqueue() (async) r4 = kqueue() ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc5005601, &(0x7f0000000000)={0x10, 0xffffffffffffffff, [{&(0x7f00001d0000/0x4000)=nil, &(0x7f0000663000/0x4000)=nil, 0xfffffffffffff801}, {&(0x7f00006ac000/0x4000)=nil, &(0x7f0000826000/0x4000)=nil, 0x8}, {&(0x7f0000060000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil}, {0x0, &(0x7f0000ffd000/0x3000)=nil, 0x4bb6}, {0x0, &(0x7f0000ffb000/0x1000)=nil}, {&(0x7f0000000000/0x2000)=nil, &(0x7f00001f5000/0x4000)=nil, 0x6}, {0x0, 0x0, 0xfffffffffffffffc}, {&(0x7f00001cf000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil}, {&(0x7f0000212000/0x1000)=nil, &(0x7f0000826000/0x1000)=nil, 0x40}, {&(0x7f0000110000/0x2000)=nil, &(0x7f0000501000/0x1000)=nil}, {0x0, &(0x7f0000156000/0x1000)=nil, 0x1}, {&(0x7f0000027000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil}, {0x0, &(0x7f0000ffd000/0x3000)=nil, 0x4}, {&(0x7f00004c1000/0x2000)=nil, &(0x7f000012e000/0x2000)=nil, 0x9bc0}, {&(0x7f00001cf000/0x4000)=nil}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000358000/0x2000)=nil}], './file0\x00'}) (async) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc5005601, &(0x7f0000000000)={0x10, 0xffffffffffffffff, [{&(0x7f00001d0000/0x4000)=nil, &(0x7f0000663000/0x4000)=nil, 0xfffffffffffff801}, {&(0x7f00006ac000/0x4000)=nil, &(0x7f0000826000/0x4000)=nil, 0x8}, {&(0x7f0000060000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil}, {0x0, &(0x7f0000ffd000/0x3000)=nil, 0x4bb6}, {0x0, &(0x7f0000ffb000/0x1000)=nil}, {&(0x7f0000000000/0x2000)=nil, &(0x7f00001f5000/0x4000)=nil, 0x6}, {0x0, 0x0, 0xfffffffffffffffc}, {&(0x7f00001cf000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil}, {&(0x7f0000212000/0x1000)=nil, &(0x7f0000826000/0x1000)=nil, 0x40}, {&(0x7f0000110000/0x2000)=nil, &(0x7f0000501000/0x1000)=nil}, {0x0, &(0x7f0000156000/0x1000)=nil, 0x1}, {&(0x7f0000027000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil}, {0x0, &(0x7f0000ffd000/0x3000)=nil, 0x4}, {&(0x7f00004c1000/0x2000)=nil, &(0x7f000012e000/0x2000)=nil, 0x9bc0}, {&(0x7f00001cf000/0x4000)=nil}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000358000/0x2000)=nil}], './file0\x00'}) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x10000000000001}}) connect$unix(0xffffffffffffffff, &(0x7f0000000340)=@abs={0x1, 0x0, 0x3}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) socket(0x18, 0x1, 0x0) (async) r5 = socket(0x18, 0x1, 0x0) close(r5) socket(0x18, 0x2, 0x0) (async) r6 = socket(0x18, 0x2, 0x0) setsockopt(r6, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) connect$unix(r3, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x8) sendmsg$unix(r5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0) kevent(r4, &(0x7f0000000100)=[{{r3}, 0xfffffffffffffffd, 0x1, 0x20, 0x0, 0xffffffffffffffff}], 0xe4a, 0x0, 0x4000a9fa, 0x0) socket(0x10, 0x5, 0x74) ioctl$WSDISPLAYIO_USEFONT(r0, 0x80585750, &(0x7f0000000280)={'./file0/file0\x00', 0x0, 0x3, 0xde, 0x1, 0x6, 0x4, 0x9, 0x2, 0x1, 0xf, 0x8}) 625.509552ms ago: executing program 2 (id=4037): open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) syz_emit_ethernet(0x4a, 0x0) r0 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$WSMOUSEIO_SETPARAMS(r0, 0x80105728, &(0x7f0000000340)={&(0x7f0000000000)=[{0x23, 0x10000}, {0x26, 0x5fbb45b}], 0x2}) sysctl$vfs_nfs(&(0x7f0000000a80)={0xa, 0x2, 0x1}, 0x3, &(0x7f0000000c80)="f8dd13ac38636c856ac067fe33501cc1c5d315ac7b6bc03c5145a8d93e8e31188f66f0ffb3d8fd5dc060f80b18600b96c7e7b558b82ed4c1612f0896bf9f6bd24e5f81bf91cc70e0c4f1e26c3b06a860668532c7fde0f953e6611121f1c07867ff51a15198f21ba74a367ef724b60316559ce2e5212b25fc9cc8f88cc2ee740fc88a41bf579e1bb0f372d3ffa9145d9c13c9e826a366eb638f07708c2e99a6b4a99b52315d2328f98379251c828077ab67f718e49d6d592f1637e14fdd4a651bb63a375e4e5425b1d640429eba462d1dfe6d78fbb3fee8329acfa1648fd0a71743a8925bd5ac", &(0x7f0000000ac0)=0xe6, &(0x7f0000000b00), 0x0) open$dir(&(0x7f0000000b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x0) r1 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) ioctl$TIOCSETA(r1, 0xcd50441a, &(0x7f0000000180)={0x3, 0x2, 0x200, 0x2f, "1800e6234f5d7a0000005409456200", 0x3, 0x7}) r2 = socket(0x800000018, 0x3, 0x0) bind$unix(r2, &(0x7f0000000040)=@abs={0x0, 0x7}, 0x8) 624.914836ms ago: executing program 2 (id=4038): mknod(&(0x7f0000000080)='./bus\x00', 0x2, 0x88) r0 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000240), 0x200, 0x0) (async) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) (async) r1 = socket(0x18, 0x1, 0x0) setsockopt(r1, 0x6, 0x2, &(0x7f0000000100)="d3ce54a2", 0x4) (async) ioctl$VNDIOCSET(r0, 0xc0384600, &(0x7f0000000040)={&(0x7f0000000280)='./bus\x00', 0xb, 0x0}) 623.670347ms ago: executing program 0 (id=4040): chmod(&(0x7f0000000040)='.\x00', 0x35e) (async) setuid(0xee01) (async) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) (async, rerun: 32) r0 = getuid() (rerun: 32) chown(&(0x7f0000000040)='./file0\x00', r0, 0xffffffffffffffff) seteuid(r0) (async, rerun: 32) chmod(&(0x7f0000000080)='./file0\x00', 0x2ea) (rerun: 32) chdir(&(0x7f0000000100)='./file0\x00') (async) r1 = fcntl$dupfd(0xffffffffffffffff, 0xa, 0xffffffffffffff9c) ioctl$WSMOUSEIO_SCALIBCOORDS(r1, 0x81205724, &(0x7f0000000300)={0x10000, 0x536e, 0x99, 0x7, 0x1, 0xffffffff, 0x7, 0x10, [{0x4, 0x80a, 0x7, 0x79}, {0x6, 0x6, 0x3, 0x2}, {0x0, 0x42, 0x2000, 0xfffffff8}, {0x8, 0x5, 0x8, 0x8}, {0x1, 0x6, 0x5, 0x6}, {0xf6, 0x4, 0x800, 0x7fffffff}, {0x40, 0x4, 0x5, 0x5}, {0x1, 0x31b, 0x6a65, 0x8}, {0xfff, 0x3959, 0xa, 0x80000001}, {0x4, 0x91, 0x6, 0x5}, {0x40, 0xff, 0x5, 0x4}, {0x4, 0xfffffffa, 0x5, 0x2}, {0x9, 0xfffffffd, 0x101, 0x6}, {0x9, 0x6b4, 0xb, 0x2076}, {0x0, 0x0, 0x10000, 0x9}, {0xf76, 0x8a9, 0x1d, 0xf}]}) (async) symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) rename(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async, rerun: 32) mknod(&(0x7f0000000000)='./bus\x00', 0x2000, 0x0) (async, rerun: 32) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x200, 0x0) ioctl$TIOCOUTQ(r2, 0x40047473, &(0x7f0000000040)=0x5) (async) rename(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 454.519669ms ago: executing program 6 (id=4041): r0 = socket(0x11, 0x3, 0x0) recvmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000340)=""/192, 0xc0}, 0x42) sendto$unix(r0, &(0x7f0000000000)="b1000503000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae3020000", 0x25, 0x8, 0x0, 0x0) mknod(&(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0xd02) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) link(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000d40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') open(&(0x7f0000000340)='./file1\x00', 0x200, 0x33) link(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') sysctl$kern(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) rename(&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') unlink(&(0x7f0000000a80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') setrlimit(0x8, &(0x7f0000000040)={0xa, 0x50}) close(0xffffffffffffffff) kqueue() r1 = open(0x0, 0x205, 0x0) fcntl$lock(0xffffffffffffffff, 0x8, 0x0) mknod(0x0, 0x100000000205f, 0x2802) readlinkat(r1, &(0x7f0000000e40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001140)=""/223, 0xdf) open(&(0x7f0000000280)='./bus\x00', 0x690, 0x0) sysctl$net_inet_ip(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) acct(0x0) sysctl$kern(&(0x7f0000000000)={0x1, 0x42}, 0x6, 0x0, 0x0, 0x0, 0x0) rename(&(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000a40)='./file0\x00') rename(&(0x7f0000000200)='./file1\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x0) link(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000d40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mkdir(&(0x7f0000000640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa) 454.343389ms ago: executing program 0 (id=4042): mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x205b92) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = kqueue() kevent(r1, &(0x7f00000000c0), 0x100, &(0x7f0000000180)=[{{r0}, 0xffffffffffffffff, 0x13, 0x2}, {{r0}, 0xffffffffffffffff, 0x62}], 0x6, 0x0) clock_settime(0x2, &(0x7f0000000000)={0xf5fe, 0x88}) sysctl$net_inet_ip(&(0x7f0000000080)={0x4, 0x2, 0x0, 0x19}, 0x4, &(0x7f00000000c0), 0x0, 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x144) 453.180052ms ago: executing program 5 (id=4043): r0 = socket(0x1, 0x2, 0x0) setsockopt(r0, 0x1000000000029, 0x28, &(0x7f0000000040)="00fb6c4f", 0x4) sysctl$net_inet_udp(&(0x7f0000000040)={0x4, 0x2, 0x11, 0x2}, 0x4, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r1 = syz_open_pts() fcntl$lock(r1, 0x8, &(0x7f00000001c0)={0x1, 0x0, 0x200000000000001c, 0x1000003fd}) fcntl$lock(r1, 0x9, &(0x7f0000000040)={0x3, 0x0, 0x40000000000000, 0x1000300000000}) socket(0x2, 0x3, 0x0) fcntl$lock(r1, 0x9, &(0x7f0000000000)={0x3, 0x2, 0x2, 0x100000001}) sysctl$net_inet_carp(&(0x7f0000000040)={0x4, 0x2, 0x6, 0x2}, 0x4, 0x0, 0x0, &(0x7f00000010c0), 0x0) syz_emit_ethernet(0x72, &(0x7f0000000140)=ANY=[@ANYBLOB="ffffffffffffcd2f2918c2c808004ec4006400660000028300007f000001e0000002ac1400bb0007030844103221000000560000011f000000ff000d00907800070001000000020000000700007cf4ca8b6e3f27479b945a829c335a45bd82e5b97ecff88f551faef48df3584d8024f95c1ce7882271af3e359162ddc4676a89d57892fe2429cb930ab7c172cb38cc1729f879bd694fa7baae4f47e0060b90de7388482ea52607b41b563dd127187943592d0b145e783ce11249b9fcb59b989ef03a61087d2542571e8e929fb699deae68351448b2b07477985d24d73dd80e60de27ae2353e048cc517ff8"]) r2 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt(r3, 0x0, 0xfffffff9, 0x0, 0xffffffffffffffe5) ioctl$VT_ACTIVATE(r2, 0x20007605, &(0x7f00000000c0)=0x2) 453.024202ms ago: executing program 0 (id=4044): mknod(&(0x7f0000000000)='./bus\x00', 0x3a0914c44f7b202d, 0x6) r0 = syz_open_pts() fcntl$lock(r0, 0x8, &(0x7f00000001c0)={0x1, 0x0, 0x200000000000001c, 0x1000003fd}) fcntl$lock(r0, 0x9, &(0x7f0000000040)={0x2, 0x2, 0x40000000000000, 0x10002ffffffff}) r1 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000240), 0x80, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000000)={{0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xcbdf4d1d31039a48, 0x3}, 0xb6ec, 0x4, 0x0, 0x0, 0x10, 0x3, 0x1, 0x52fb}) mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x6) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x2, 0x0, 0x1e}, 0x5, &(0x7f0000000140)="e33745e84d5ebfb9cc2f7fa3a7f7891721720e69dac610a4fb5eaf3e3c6e1d648a8ca6ebc70f949c442aee9dc79e2cd74f4e106f382caf01ada3bc4efb0f6bc50690e5d879fac2492f4a0491b1ea3359aa5c5164ad97ac7c3aaddd498c0f962f5167b69cfdc8287fc34b8138340e60c404a855858ea5fc", &(0x7f0000000000)=0x59, 0x0, 0xfffffdfd) ioctl$VNDIOCSET(r1, 0xc0384600, &(0x7f0000000080)={&(0x7f00000000c0)='./bus\x00', 0xb, 0x0}) 452.625774ms ago: executing program 2 (id=4045): ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0xfffffffffffffffd, [{&(0x7f00000c7000/0x3000)=nil, &(0x7f0000616000/0x3000)=nil, 0x1}, {&(0x7f00004d7000/0x2000)=nil, &(0x7f0000698000/0x1000)=nil, 0x3}, {&(0x7f00005fd000/0x1000)=nil, &(0x7f0000ff6000/0x3000)=nil, 0x1}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff7000/0x3000)=nil, 0x80}, {&(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x1000)=nil, 0xc}, {&(0x7f00004f8000/0x2000)=nil, &(0x7f000068e000/0x12000)=nil, 0x2000000000000000}, {&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x7}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000696000/0x2000)=nil, 0x2}, {&(0x7f000013f000/0x2000)=nil, &(0x7f000064d000/0x3000)=nil, 0x2}, {&(0x7f0000ffd000/0x2000)=nil, &(0x7f000069b000/0x3000)=nil, 0x8}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0xffffffff}, {&(0x7f00007f8000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x80000}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000668000/0x4000)=nil}, {&(0x7f000051f000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x7}, {&(0x7f0000ff1000/0x3000)=nil, &(0x7f000069e000/0x2000)=nil}, {&(0x7f0000617000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x1}], './file2\x00'}) select(0x40, &(0x7f0000000180)={0xfffffffffffffffd, 0x44809e9d, 0xffffffffffffffff, 0x1, 0x2000000000000000, 0x400000000000181c, 0x2, 0x6}, 0x0, 0x0, 0x0) (async) select(0x40, &(0x7f0000000180)={0xfffffffffffffffd, 0x44809e9d, 0xffffffffffffffff, 0x1, 0x2000000000000000, 0x400000000000181c, 0x2, 0x6}, 0x0, 0x0, 0x0) r0 = kqueue() ioctl$TIOCSETA(0xffffffffffffffff, 0xc4504446, 0x0) (async) ioctl$TIOCSETA(0xffffffffffffffff, 0xc4504446, 0x0) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x3, 0x8e, 0x7e, 0x40000007}, {0x2c, 0x11, 0x3, 0x9}, {0x6, 0x9, 0x1, 0xfffffff2}]}) (async) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x3, 0x8e, 0x7e, 0x40000007}, {0x2c, 0x11, 0x3, 0x9}, {0x6, 0x9, 0x1, 0xfffffff2}]}) r1 = openat$bpf(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000001c0)="441e38001149aa3d88cc0a387ecffcfcbaf2670fcadaae0d850b264604d5e60a", 0x20}], 0x1) (async) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000001c0)="441e38001149aa3d88cc0a387ecffcfcbaf2670fcadaae0d850b264604d5e60a", 0x20}], 0x1) sysctl$hw(0x0, 0x0, &(0x7f0000000200)="50041b0200c29e3e807447f80b78a5000000000000c967ec98df1eae34b149d850fae4f2a3c15254be48c3b910215e7bb09456b5e68951b16e4b3c1531c620661a801574ab6edb3b931eeaf772260b71293ff2f5559cb868494dbab57c070000cd5bd43807238c75cf128eeb65a3e0a3d277cbf6624fbf0368995414f9e62403f62e8ce5f5bd491e98f50f6e73001fafe43ba32ae24836c69a6f222f3ba8b6336cdf320e", &(0x7f0000000000)=0xa4, 0x0, 0x0) (async) sysctl$hw(0x0, 0x0, &(0x7f0000000200)="50041b0200c29e3e807447f80b78a5000000000000c967ec98df1eae34b149d850fae4f2a3c15254be48c3b910215e7bb09456b5e68951b16e4b3c1531c620661a801574ab6edb3b931eeaf772260b71293ff2f5559cb868494dbab57c070000cd5bd43807238c75cf128eeb65a3e0a3d277cbf6624fbf0368995414f9e62403f62e8ce5f5bd491e98f50f6e73001fafe43ba32ae24836c69a6f222f3ba8b6336cdf320e", &(0x7f0000000000)=0xa4, 0x0, 0x0) write(r1, 0x0, 0x0) openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) (async) openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) ioctl$BIOCSETF(r2, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_extract_tcp_res(0x0, 0x7, 0x2) kevent(r0, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) mknod(&(0x7f0000000000)='./file1\x00', 0x2000, 0x285b9a) r3 = open(&(0x7f0000000800)='./file1\x00', 0x800, 0x120) ioctl$FIONBIO(r3, 0x82907003, &(0x7f0000000140)=0x2) 452.061883ms ago: executing program 3 (id=4046): sysctl$kern(&(0x7f0000000080)={0x1, 0x27}, 0x4000000000000004, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setrlimit(0x2, &(0x7f0000000000)={0x60000000, 0x60000000}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) open(&(0x7f0000000240)='./file0\x00', 0x10, 0x154) acct(&(0x7f0000000080)='./file0\x00') 267.039754ms ago: executing program 0 (id=4047): r0 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$VT_GETMODE(r0, 0x40087603, &(0x7f0000000040)) openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) sysctl$net_inet_ip(&(0x7f0000000b00)={0x4, 0x2, 0x0, 0x1a}, 0x4, &(0x7f0000000b40)="b58b34c12796fefd2a0e", &(0x7f0000000c00)=0xa, &(0x7f0000000c40)="b2fce6eaa334c8fe536d6373c9744142ca1eb970fb", 0x15) 266.685537ms ago: executing program 3 (id=4048): chmod(&(0x7f0000000040)='.\x00', 0x35e) setuid(0xee01) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) chmod(&(0x7f0000000080)='./file0\x00', 0x2ea) (async) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) (async) sysctl$kern(&(0x7f0000000000)={0x1, 0x48}, 0x2, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (rerun: 32) sysctl$kern(&(0x7f0000000000), 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x4) setsockopt$inet_opts(r0, 0x0, 0x1, &(0x7f0000000000)="7f4a6fc4", 0x4) (async) setsockopt$inet_opts(r0, 0x0, 0x1, &(0x7f0000000300)="0ff38499", 0x4) chdir(&(0x7f0000000100)='./file0\x00') (async) openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) (async) sysctl$net_inet_tcp(&(0x7f00000000c0)={0x4, 0x2, 0x6, 0x3}, 0x4, 0x0, 0x0, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$net_inet_ip(&(0x7f00000000c0)={0x4, 0x2, 0x0, 0x1a}, 0x4, &(0x7f0000000080), &(0x7f0000000040), 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc0e99db6de761f86, 0x0) (async) rename(&(0x7f0000000a80)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) mprotect(&(0x7f000068c000/0x1000)=nil, 0x1000, 0x1) 266.428506ms ago: executing program 2 (id=4049): r0 = open(&(0x7f0000000040)='./file0\x00', 0x200, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x1, 0x0) ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x0, [{0x2}, {0x3}, {0x2}, {0x1, 0xffffffff}, {}, {0x2}, {0x0, 0xaa59}, {}, {0x1, 0xffffffff}, {}, {0x2, 0x4}, {0x3}, {}, {}, {0x3, 0x7}, {0x1, 0xffffffff}, {0x2, 0x1}, {0x3}, {0x0, 0x2}, {0x0, 0x7ff}, {0xbb08c0840fa32129}, {}, {0x2}, {}, {0x0, 0xfffffffd}, {0x2, 0x1}, {}, {0x0, 0x200}, {0x2, 0xffffffff}, {0x3, 0xfffffffd}, {0x3, 0x8}, {0x3}]}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x37}, 0x4, &(0x7f0000000240)="71f91e3471ac0058bc5a91501d94a34be3867e0e6c400cacfec37082ee4c57416bf7c912b246b4ede2570608015d567ec33a28501e952be75c986dec10b04f2d194775ae42cb00d6faa40b87f3508e18d8baed6b6cc42ad2785841ec4f19f24b69470737242d9dbd9b40e032006aca96f5257b4f5172bb5d65506efc9f6c847a99d889f7622cb8d3ace9f79684a57d6e0ad299b6f78d20656d501aea719075cf35f0e069f964b08faee0adbc1e9ce86adb2035014fff04e2c0a925f7159f8c12fe5324191901759d9e613c3b9d", &(0x7f0000000180)=0x6, 0x0, 0x2e) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000000), 0x2cfea}], 0x1000000000000013) r2 = openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETA(r2, 0xc450443d, &(0x7f0000000080)={0x6, 0xfffffffd, 0x8002, 0x8df, "978600000000000000010000f0ff0f0000000004", 0xfffffffc, 0x53}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x10, r0, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) write(r3, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) recvmmsg(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000001c0)={0x0, 0x0, 0x0, 0xfffffffffffffdc9, &(0x7f0000000680)=""/100, 0x64}, 0x80003fae}, 0x10, 0x0, 0x0) r4 = socket(0x2, 0x2, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r5 = socket(0x2, 0x1, 0x0) ioctl$FIONREAD(r5, 0xc0206923, &(0x7f00000001c0)) ioctl$FIONREAD(r4, 0x8040691a, &(0x7f00000001c0)) r6 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x8000, 0x186) mmap(&(0x7f00007c6000/0x1000)=nil, 0x1000, 0x1, 0x2011, r6, 0x0) r7 = openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TIOCSETA(r7, 0xc4504443, &(0x7f0000000740)={0x0, 0x2, 0x0, 0x0, "01d04b0a0047c1d100", 0x6, 0x6}) sendmmsg(r7, &(0x7f0000000080)={0x0, 0x3}, 0x98, 0x40a) open(&(0x7f0000001700)='./file0\x00', 0x70e, 0x0) r8 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000140), 0x8000, 0x0) ioctl$BIOCSETIF(r8, 0x8020426c, &(0x7f0000000000)={'tap', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = socket$unix(0x1, 0x5, 0x0) r11 = dup2(r10, r9) bind$unix(r10, &(0x7f0000000200)=@file={0xd570d0466b6018f, './file0\x00'}, 0xa) bind(r11, &(0x7f00000000c0)=@in={0x2, 0x0}, 0xc) 266.195526ms ago: executing program 0 (id=4050): mlockall(0x0) mlockall(0x0) mlockall(0x1) mlockall(0x0) mlockall(0x0) mlockall(0x0) mlockall(0x1) mlockall(0x0) mlockall(0x0) mlockall(0x1) mlockall(0x0) mlockall(0x0) mlockall(0x1) mlockall(0x1) mlockall(0x1) mlockall(0x0) mlockall(0x4) mlockall(0x0) mlockall(0x0) mlockall(0x1) mlockall(0x0) mlockall(0x1) mlockall(0x1) mlockall(0x0) mlockall(0x0) mlockall(0x1) mlockall(0x0) mlockall(0x1) mlockall(0x4) mlockall(0x1) 265.317127ms ago: executing program 7 (id=4051): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) sysctl$net_inet_ip(&(0x7f0000000080)={0x4, 0x2, 0x0, 0x1b}, 0x4, 0x0, 0x0, &(0x7f00000011c0)="01000000", 0x4) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x1, 0x7, 0x7, 0xa}, {0x1, 0x9, 0x5, 0x1}, {0x9e, 0x0, 0x1, 0x4}]}) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000100)={0x4, &(0x7f00000000c0)=[{0x9, 0xb9, 0x7f, 0x9}, {0x200, 0x7, 0x6, 0x55}, {0x3, 0x40, 0x9, 0x3}, {0x2, 0x1, 0x4, 0x9}]}) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000002c0)={'tap', 0x0}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x1000e, &(0x7f0000000200)=ANY=[]) 178.077193ms ago: executing program 7 (id=4052): syz_emit_ethernet(0x3e, &(0x7f0000000080)=ANY=[@ANYBLOB="73b9ccc3000000f70004000086dd6000000000083a01fe8000000000000000000000000000bbff02000000000000000000000000000104"]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000000880)={&(0x7f0000000000)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000700)=""/265, 0x109}], 0x1, 0x0}, 0x80000006}, 0x10, 0x0, 0x0) ioctl$FIONBIO(r0, 0x8004667e, &(0x7f00000001c0)=0xf88) close(r1) r2 = socket$unix(0x1, 0x5, 0x0) bind$unix(r2, &(0x7f0000000200)=@file={0xd570d0466b6018f, './file0\x00'}, 0xa) sysctl$ddb(&(0x7f0000000040)={0x9, 0x2}, 0x1, &(0x7f0000000100)="d460b2d6ddd73b4a4ad6f06d6331983851e7661b79379d6bdc8a146fd667e51b4076b3fcaafaf6c6336cb001373386231aafa199cdf85e33b1c38e30aab2e356a90ffa7d1312fb2a881523aa7fee436731f16823eae576b723a46a75ebcc85bd1e5c09839828d65716676e16cc9033667f521c26a5656b7ca0209c0ec7146fa59985bf84d85badd74f33a75c28e97702dbfff358bc3654d37e", &(0x7f00000002c0)=0x99, &(0x7f0000000240)="b947e0d0bab417d063d905df04d7", 0xe) listen(r2, 0x300000) execve(0x0, 0x0, 0x0) accept$unix(r2, 0x0, 0x0) semget$private(0x0, 0x4, 0x2c0) connect(0xffffffffffffffff, &(0x7f0000000280)=@in6={0x18, 0x0, 0x0, 0x2}, 0xc) 176.845545ms ago: executing program 3 (id=4053): unveil(&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000380)='c\x00') unveil(&(0x7f0000000340)='./file1\x00', &(0x7f0000000300)='x\x00') unveil(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='r\x00') unveil(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000003c0)='x\x00') mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2) r0 = kqueue() kevent(r0, &(0x7f00000002c0)=[{{}, 0xfffffffffffffff6, 0x3, 0xf0000000, 0xfd, 0x10000}], 0x1, 0x0, 0x9b68, 0x0) (async) kevent(r0, &(0x7f00000002c0)=[{{}, 0xfffffffffffffff6, 0x3, 0xf0000000, 0xfd, 0x10000}], 0x1, 0x0, 0x9b68, 0x0) kevent(r0, &(0x7f0000000040), 0xe4a, 0x0, 0xa9fa, 0x0) (async) kevent(r0, &(0x7f0000000040), 0xe4a, 0x0, 0xa9fa, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x70e, 0x0) mmap(&(0x7f000000f000/0x2000)=nil, 0x2000, 0x0, 0x8010, r2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) ftruncate(r3, 0x8531) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r1, 0x0) sysctl$net_pipex(0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0) (async) sysctl$net_pipex(0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0) msync(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4) openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) (async) r4 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$WSMOUSEIO_SCALIBCOORDS(r4, 0x81205724, &(0x7f0000000040)={0xffffffff, 0x8001, 0x9, 0x1, 0xf41, 0x100, 0x5, 0x10, [{0x800, 0x8, 0x9, 0x1}, {0xc, 0xfffffffa, 0x4, 0x2}, {0x401, 0x90000, 0xfffff8ff, 0x923}, {0x452, 0x7f, 0x88, 0x7}, {0xfffffff8, 0x0, 0x0, 0x9}, {0xe1b, 0x400, 0xf31, 0x8001}, {0x0, 0x9, 0xc, 0x7}, {0x3, 0x4, 0xfffffeff, 0x16f}, {0x5, 0x4, 0x9, 0xfffffffe}, {0x7fffffff, 0x5, 0x40, 0xc3}, {0x5, 0xffff, 0x8, 0x24b59d7e}, {0x91, 0x81, 0x1, 0x5879}, {0xffff, 0x1ff, 0x8, 0x5}, {0x58, 0x40, 0x9, 0xfffff282}, {0x0, 0x3, 0x7, 0x5}, {0xb, 0x5, 0x76c4, 0x8}]}) (async) ioctl$WSMOUSEIO_SCALIBCOORDS(r4, 0x81205724, &(0x7f0000000040)={0xffffffff, 0x8001, 0x9, 0x1, 0xf41, 0x100, 0x5, 0x10, [{0x800, 0x8, 0x9, 0x1}, {0xc, 0xfffffffa, 0x4, 0x2}, {0x401, 0x90000, 0xfffff8ff, 0x923}, {0x452, 0x7f, 0x88, 0x7}, {0xfffffff8, 0x0, 0x0, 0x9}, {0xe1b, 0x400, 0xf31, 0x8001}, {0x0, 0x9, 0xc, 0x7}, {0x3, 0x4, 0xfffffeff, 0x16f}, {0x5, 0x4, 0x9, 0xfffffffe}, {0x7fffffff, 0x5, 0x40, 0xc3}, {0x5, 0xffff, 0x8, 0x24b59d7e}, {0x91, 0x81, 0x1, 0x5879}, {0xffff, 0x1ff, 0x8, 0x5}, {0x58, 0x40, 0x9, 0xfffff282}, {0x0, 0x3, 0x7, 0x5}, {0xb, 0x5, 0x76c4, 0x8}]}) 175.054902ms ago: executing program 1 (id=4054): ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file0\x00', 0x4, 0x3, 0x40003, 0x2, 0x800007ff, 0x5, 0x0, 0x2, 0x2, 0x100000000000305, 0x1ff}) r0 = socket(0x1, 0x1, 0x0) ioctl$FIONREAD(r0, 0xc0106924, &(0x7f00000001c0)) r1 = socket(0x18, 0x3, 0x0) ioctl$FIONREAD(r1, 0x8080691a, &(0x7f0000000100)) syz_emit_ethernet(0x36, &(0x7f0000000000)={@broadcast, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0xf0, 0x0, @broadcast, @rand_addr=0xdfffffff}, @tcp={{0x0, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x20, 0x7, 0x0, 0x81}}}}}}) 173.500655ms ago: executing program 2 (id=4055): msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x5, 0x0, 0x0, 0x0, 0x0, 0x196, 0x3ff}, 0x400, 0x10000, 0x0, 0xffffffffffffffff, 0x1, 0x80000000000010c, 0x5, 0x7}) (async) sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0x37) (async, rerun: 32) mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0x450c) (async, rerun: 32) r0 = open(&(0x7f00000002c0)='./bus\x00', 0x2, 0x0) (async) select(0x40, &(0x7f0000000000)={0x9, 0x0, 0x0, 0x0, 0x19, 0x1, 0x0, 0xed4}, 0x0, 0x0, 0x0) (async) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, 0x0) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) (async, rerun: 32) write(r1, &(0x7f0000000240)="d81ad30100000000000100000000", 0xe) (async, rerun: 32) r2 = semget(0x0, 0x1, 0x281) semctl$GETNCNT(r2, 0x4, 0x3, &(0x7f0000000000)=""/55) (async) r3 = openat$speaker(0xffffffffffffff9c, 0x0, 0x1, 0x0) (async) ioctl$VMM_IOC_INTR(0xffffffffffffffff, 0xca605601, &(0x7f0000000040)={0xb, 0x0, 0x200d}) writev(r3, 0x0, 0x0) semop(0x0, &(0x7f00000001c0)=[{0x1, 0x0, 0x1000}], 0x1) openat$pf(0xffffffffffffff9c, 0x0, 0x10000, 0x0) (async) close(0xffffffffffffffff) syz_open_pts() (async) syz_emit_ethernet(0x2a, 0x0) (async) sysctl$hw(&(0x7f0000000080)={0x6, 0x18}, 0x2, &(0x7f00000000c0)="99c5069e7aab2155751fcf107818533afc9ff01a68a4b1baa30a07f4c4b66ce08d59af7e54a8341f3be673a174c3a12223a171ff2ab99d0e0d43f0a6c3948f11658e876ac2126614dcd00fdfe76f1ace1f77da0c0af828b5c508585fd9df9ae729f85999a053e2c9872fbdd4e491010010791840000000000000000081131a6f0b680f72f2b0d9a19e570400"/151, &(0x7f0000000180)=0x97, &(0x7f00000001c0), 0x4) (async) ioctl$WSMUXIO_INJECTEVENT(r0, 0x80185760, &(0x7f0000000140)={0xd, 0x6}) 4.078907ms ago: executing program 0 (id=4056): chmod(&(0x7f0000000040)='.\x00', 0x35e) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x8, 0x2000000000000004}, 0x0, 0x0, 0x0) (async) r0 = kqueue() kevent(r0, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) (async) ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file1\x00', 0x3, 0xff, 0xfffefffd, 0x1, 0x5, 0xd87, 0x800, 0x1, 0x2, 0x8001, 0xe}) (async) mknod(&(0x7f0000000000)='./file1\x00', 0x2000, 0x637d) (async) r1 = open(&(0x7f0000000800)='./file1\x00', 0x800, 0x120) ioctl$FIONBIO(r1, 0x82907003, &(0x7f0000000140)=0x1) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x8, 0x2000000000000004}, 0x0, 0x0, 0x0) r2 = kqueue() kevent(r2, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) (async) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x637e) (async) mknod(&(0x7f00000000c0)='./file1\x00', 0x2000, 0x637d) (async) r3 = open(&(0x7f0000000800)='./file1\x00', 0x800, 0xba) ioctl$FIONBIO(r3, 0x82907003, &(0x7f0000000140)=0x1) (async) r4 = open(&(0x7f0000000280)='./file0\x00', 0x80, 0x3cc) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x4, 0x1, 0x7, 0x6, 0x3, 0x80002001, 0x8, 0x10, [{0x0, 0x7, 0x4, 0x3}, {0x7, 0x4, 0x9, 0x7}, {0x6, 0xf86, 0x100, 0xaf9}, {0x5, 0x8, 0xb, 0x3}, {0x7, 0xfffffffb, 0xe, 0x7}, {0x2, 0x7, 0xffffffff, 0x9c}, {0x80000cdf, 0x1, 0x5, 0x6d}, {0x4, 0x803, 0x14, 0x4}, {0x3, 0x81, 0x1, 0x4000009}, {0x3ff, 0x8001, 0xc7, 0x87}, {0x4, 0x5, 0x9, 0x10aeb}, {0x803, 0x40, 0x1, 0x5}, {0xe0, 0x4, 0x5, 0x3ff}, {0x29a71717, 0xfffffffa, 0x6, 0x100006}, {0x4, 0x9, 0xfff}, {0x0, 0x5, 0x4, 0x30000}]}) (async) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x8, 0x2000000000000004}, 0x0, 0x0, 0x0) (async) ioctl$FIONBIO(r4, 0x82907003, &(0x7f0000000140)=0x2) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) (async) ioctl$FIONBIO(r4, 0x82907003, &(0x7f0000000140)=0x1) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x637e) r5 = open(&(0x7f0000000040)='./file0\x00', 0x40, 0x100) (async) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x4, 0x1, 0x7, 0x6, 0x3, 0x80002001, 0x7, 0x10, [{0x0, 0x7, 0x4, 0x3}, {0x7, 0x4, 0x9, 0x7}, {0x6, 0xf86, 0x100, 0x400af9}, {0x5, 0x8, 0xb, 0x3}, {0x7, 0x2, 0xe, 0x7}, {0x2, 0x7, 0x6, 0x9c}, {0x80000cdf, 0x7, 0x5, 0x6d}, {0x2000a, 0x803, 0x14, 0x4}, {0x3, 0x81, 0x1, 0x4000007}, {0x3ff, 0x8001, 0xc7, 0x87}, {0x4, 0x5, 0x9, 0x10aeb}, {0x803, 0x7, 0x4, 0x5}, {0x1, 0x4, 0x5, 0x3ff}, {0x29a7171b, 0xfffffffa, 0x6, 0x100006}, {0x4, 0x9, 0xfff}, {0x0, 0x5, 0x4, 0x30000}]}) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x8, 0x2000000000000004}, 0x0, 0x0, 0x0) ioctl$FIONBIO(r5, 0x82907003, &(0x7f0000000140)=0x2) setuid(0xee01) (async) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) r6 = openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$TIOCSETA(r6, 0xc0d04468, &(0x7f0000000080)={0x6, 0x4, 0xfffffffd, 0x800009, "07000000100000000500", 0x2, 0x20000000}) 3.290874ms ago: executing program 2 (id=4057): mkdir(&(0x7f0000000380)='./file2\x00', 0x101) unlink(&(0x7f0000000280)='./file2\x00') (async, rerun: 64) mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1) (rerun: 64) 916.112µs ago: executing program 5 (id=4058): semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200}, 0xc, 0x8001, 0x2}) r0 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$WSMUXIO_REMOVE_DEVICE(r0, 0x80085762, &(0x7f0000000040)={0x1, 0x4000000}) r1 = socket(0x18, 0x3, 0x0) connect$unix(r1, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) syz_emit_ethernet(0x10004, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60db834439c11600fe000000020000ff80d1440000200400fedc4c7fd29bbbcee8000000000000aa4e204e2003089078"]) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x3, 0x8e, 0x7e, 0x40000007}, {0x28, 0xf, 0xfe, 0xd}, {0x6, 0x6, 0x1, 0xfffffff2}]}) openat$bpf(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) r3 = semget(0x1, 0x0, 0x230) semctl$SETVAL(r3, 0x0, 0x8, &(0x7f0000000080)=0x3) sysctl$hw(0x0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$BIOCSETWF(r2, 0x80104277, &(0x7f0000000040)={0x0, 0x0}) open$dir(&(0x7f0000000b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) write(r2, &(0x7f0000000600)="d81ad30100060000000100000000", 0xe) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200}, 0xc, 0x8001, 0x2}) (async) openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) (async) ioctl$WSMUXIO_REMOVE_DEVICE(r0, 0x80085762, &(0x7f0000000040)={0x1, 0x4000000}) (async) socket(0x18, 0x3, 0x0) (async) connect$unix(r1, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) (async) syz_emit_ethernet(0x10004, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60db834439c11600fe000000020000ff80d1440000200400fedc4c7fd29bbbcee8000000000000aa4e204e2003089078"]) (async) openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) (async) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) (async) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x3, 0x8e, 0x7e, 0x40000007}, {0x28, 0xf, 0xfe, 0xd}, {0x6, 0x6, 0x1, 0xfffffff2}]}) (async) openat$bpf(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) (async) semget(0x1, 0x0, 0x230) (async) semctl$SETVAL(r3, 0x0, 0x8, &(0x7f0000000080)=0x3) (async) sysctl$hw(0x0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) ioctl$BIOCSETWF(r2, 0x80104277, &(0x7f0000000040)={0x0, 0x0}) (async) open$dir(&(0x7f0000000b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) (async) write(r2, &(0x7f0000000600)="d81ad30100060000000100000000", 0xe) (async) 647.407µs ago: executing program 3 (id=4059): open(&(0x7f0000000140)='./file0\x00', 0x78e, 0x8) (async) chmod(&(0x7f0000000040)='.\x00', 0x35e) (async) setuid(0xee01) (async) rename(&(0x7f00000006c0)='./file0\x00', 0x0) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x1700) (async) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$VNDIOCSET(r0, 0x8010427e, &(0x7f0000000100)={0x0, 0x7fffffffffffffff, 0x0}) r1 = socket(0x11, 0x10000000000003, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) minherit(&(0x7f000016a000/0x4000)=nil, 0x4000, 0x3) (async) sendto$unix(r1, &(0x7f00000000c0)="b10005030000040005000000070000003300080000a11800fef96ec0c72fd3357ae30200004e3039d2d236acf20b7804be3816499104000000882b297be1aa0500000051e2f0ad09000000000000009b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b1257afa8c500002002fbfe0c2300008abfba3500000008e371a3f8343712051eeab71d1889e000"/177, 0xb1, 0x0, 0x0, 0x0) 0s ago: executing program 1 (id=4060): mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0xd02) select(0x40, &(0x7f0000000040)={0x200000000000008, 0x1000005, 0x3, 0x8000000000000003, 0x420000000002, 0x0, 0x4b86, 0x6}, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x140) recvmmsg(r0, &(0x7f00000002c0)={&(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/177, 0xb1}], 0x1, &(0x7f0000000180)=""/252, 0xfc}, 0x2}, 0x10, 0x840, 0x0) writev(r0, &(0x7f00000007c0)=[{&(0x7f0000000300)="98e9cd15bd466d327acb049ea75399b5d1fd07161fa764926325795ad87949759872e141418aedaefd3080a2a8db611d40c74488cc241a56489e34254e777799e864f9e41edf9afc7b7304478423bb511d53066d93b3dc7577232d2d680f17086898108e6eded869ab3f0c1334b8f0d7344b478fe0eef35e5cb1f730b68a3cf11ad18e1ce884d3c65b0e2372b52c45ab99e83a", 0x93}, {&(0x7f00000003c0)="152fab0d89fcb8d250c3751cab8cfe6795bf2647758bd3d30faccc87a6bf2d5c97c4002834f2e0fc1c7f20", 0x2b}, {&(0x7f0000000400)="17136983d5d9b9b4e5ecc328c9262a16dfbd9fb70b5652402af71f620c71f46a3fe2cdc851472e76e60f308acc95d6fb31c4b8f4b36960fcb7fb52344dc95b18e4709c3f9f34eaa2106aac2b8459271799c4900795de1d39cffc26a5c45f47fab618839bc3e58aaae78f49c0091178f31c114fd1460727e70baeb46468bdc99745e69e40cf1415877fdb18eccb44cff6b34c9135721e9d8ea18ad66c5b46156c3ff8aa56df7c7405902eba7b3c18d773e5aa28d72aa060ae1f63f1bc2e985188223a52ea8a63f05ebcb5212b5983a03e81c1", 0xd2}, {&(0x7f0000000500)="a095f2f91010142f212afbefc3f6517f0109d7a4332efc6dde540ac45f0a3fc3c56e3edbe4d0a51680552eb94d71e1435a9c89292260ad5dbe1458baa4a8c14d59304e7c3b28873f99220556bc67eeb71e29b40e58f25b88495e1e761172bff37799cd48e474fe972792bce7e7eeecea86a9da76c3791350c84bde800b1a30b479499c85f8e67e4958b695ec18cbda5c1d6be10fab8a4d73022f1c2d7dc4ff96f277db71554116e90567ec", 0xab}, {&(0x7f00000005c0)="48a563722b05625b", 0x8}, {&(0x7f0000000600)="2012656d3ca86e8b2af2e9c86eb1d6995a8c3c207e0c0176bc44e23a40a76a635d3513a38b0e7c58d74d7edaa452ee1e5919fed3592608ab42088a8081318472201dad3c919a88be883fd6344e09905367bf1d1bbec2e8b0e71916b5612d68358ebeaecb386e75ad2f72e7bc3b96947e6dc3e99cc9b67ecfd9a3f6cbbb05f15e0f351cacabcd923b8a531365137a7febdafcdd8e6b04d071cce67ac1e7c26f7a4c38306bec12fb411be1865f1c687833d65c860cd0980668036ca1589040863de7c0187eacef151f7889d793439aa61b9a63f1e98ff0096d2d2e8849", 0xdc}, {&(0x7f0000000700)="746e95528cd0d630af5d95d82f0d96bf676d6efefb451647c5685deba2e00dacc00098b00cadbbb106602a275797a89d77f5048201addcdc592d3a5c95f4f30afeb0f351cc2814ea1eb08c4108e00407b15d144d973f4ef30602bfddc79aad646611752a4ea59f2d2f934eb73ee4e9ee4d0a66034b7d61af9d46071aef201a4e5f491a0baf5130e0863f88a4ec21bd747ea2ceb7592218eae9b2bfa1a13878af6cf2526d11", 0xa5}], 0x7) ioctl$VNDIOCSET(r0, 0xc0785101, &(0x7f0000000040)={0x0, 0x0, 0x0}) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2) kernel console output (not intermixed with test programs): OpenBSD/amd64 (ci-openbsd-multicore-0.us-central1-b.c.syzkaller.internal) (tty00) Warning: Permanently added '10.128.1.123' (ED25519) to the list of known hosts. login: malloc(): allocation too large, type = 6, size = 287762939904 vm_create: uvm_map failed: 12 pckbd_enable: command error 0#+"$%.!",%: #/--!.$ %22/2 0#+"$%.!",%: #/--!.$ %22/2 0#+"$%.!",%: #/--!.$ %22/2 0#+"$%.!",%: #/--!.$ %22/2 0#+"$%.!",%: #/--!.$ %22/2 0#+"$%.!",%: #/--!.$ %22/2 0#+"$%.!",%: #/--!.$ %22/2  : 4(2%!$ .&3)/' (424486) %8)43 7)4( 34!453 -1  : 4(2%!$ .&3)/' (500991) %8)43 7)4( 34!453 -1  : 4(2%!$ .&3)/' (512798) %8)43 7)4( 34!453 -1  : 4(2%!$ .&3)/' (100868) %8)43 7)4( 34!453 -1  : 4(2%!$ .&3)/' (186890) %8)43 7)4( 34!453 -1  : 4(2%!$ .&3)/' (60973) %8)43 7)4( 34!453 -1  : 4(2%!$ .&3)/' (22265) %8)43 7)4( 34!453 -1  : 4(2%!$ .&3)/' (485334) %8)43 7)4( 34!453 -1  : 4(2%!$ .&3)/' (345847) %8)43 7)4( 34!453 -1  : 4(2%!$ .&3)/' (344709) %8)43 7)4( 34!453 -1  : 4(2%!$ .&3)/' (211807) %8)43 7)4( 34!453 -1  : 4(2%!$ .&3)/' (170042) %8)43 7)4( 34!453 -1  : 4(2%!$ .&3)/' (261073) %8)43 7)4( 34!453 -1  : 4(2%!$ .&3)/' (189703) %8)43 7)4( 34!453 -1  : 4(2%!$ .&3)/' (170581) %8)43 7)4( 34!453 -1  : 4(2%!$ .&3)/' (105832) %8)43 7)4( 34!453 -1  : 4(2%!$ .&3)/' (164585) %8)43 7)4( 34!453 -1  : 4(2%!$ .&3)/' (358118) %8)43 7)4( 34!453 -1  : 4(2%!$ .&3)/' (296441) %8)43 7)4( 34!453 -1  : 4(2%!$ .&3)/' (397508) %8)43 7)4( 34!453 -1 0#+"$%.!",%: #/--!.$ %22/2 6)/0: 429).' 4/ 3%.$ 0!#+%4 /. 72/.' $/-!).. )& 0 63. -"5& 22 0#+"$%.!",%: #/--!.$ %22/2 0#+"$%.!",%: #/--!.$ %22/2 73+"$0: #!.'4 !44!#( -58 (%22/2=5) 0008: 5.!",% 4/ 3%4 !$$2%33%3 &/2 00081, %22/2=17 6-2%3%4#05: &!),%$ 0#+"$%.!",%: #/--!.$ %22/2 0#+"$%.!",%: #/--!.$ %22/2 6-2%3%4#05: &!),%$ 0#+"$%.!",%: #/--!.$ %22/2 0#+"$%.!",%: #/--!.$ %22/2 0#+"$%.!",%: #/--!.$ %22/2 56.&,53(: /"*=08&&&&&$805#822#%8, /&&3%4=080. %22/2 $52).' 0!'%/54. 56.&,53(:  : #(!.'%3 4/ 0!'% -!9 "% ,/34! 6-#2%!4%: 56--!0 &!),%$: 12 #pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pppx: unable to set addresses for pppx1, error=17 pckbd_enable: command error pckbd_enable: command error                    pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pppx: unable to set addresses for pppx1, error=17 pckbd_enable: command error pckbd_enable: command error             pckbd_enable: command error pppx: unable to set addresses for pppx1, error=17 ÕÓ"pckbd_enable: command error          ˜2'¢Òù«Öÿ·o9¶u            OpenBSD/amd64 (eÊ“¢˜¾ÑÞƒCÇ) (tty00) login: pckbd_enable: command error pppx: unable to set addresses for pppx1, error=17 pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error panic: kernel diagnostic assertion "rn != NULL" failed: file "/syzkaller/managers/multicore/kernel/sys/net/pipex.c", line 459 Starting stack trace... panic(ffffffff833ab136) at panic+0x1d0 __assert(ffffffff833ee48c,ffffffff8340ba49,1cb,ffffffff833a8c27) at __assert+0x29 pipex_unlink_session_locked(ffff80002a362ec8) at pipex_unlink_session_locked+0x409 pipex_destroy_all_sessions(ffff8000014de800) at pipex_destroy_all_sessions+0xd9 pppacclose(637e,81,2000,ffff80002a272010) at pppacclose+0x16f spec_close(ffff80003c41e510) at spec_close+0x417 VOP_CLOSE(fffffd805f9a1510,81,fffffd80097fd2d8,ffff80002a272010) at VOP_CLOSE+0x132 vn_closefile(fffffd8060537a00,ffff80002a272010) at vn_closefile+0x12b fdrop(fffffd8060537a00,ffff80002a272010) at fdrop+0x121 closef(fffffd8060537a00,ffff80002a272010) at closef+0x192 fdfree(ffff80002a272010) at fdfree+0x116 exit1(ffff80002a272010,0,0,1) at exit1+0x576 sys_exit(ffff80002a272010,ffff80003c41e880,ffff80003c41e7d0) at sys_exit+0x1a syscall(ffff80003c41e880) at syscall+0xb17 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x6f93271b2600, count: 242 End of stack trace. syncing disks...