last executing test programs: 6.728615392s ago: executing program 4 (id=962): mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x100, 0x87) fstatat(r1, &(0x7f0000000040)='./file0\x00', &(0x7f0000000400), 0x2) acct(0x0) r2 = syz_open_pts() syz_open_pts() ioctl$TIOCSETAF(r2, 0x802c7416, &(0x7f0000000140)={0x0, 0xfffffffe, 0x9448, 0x7, "590113d22022b1cfc500fcc398b384fbdfc91000", 0x7, 0xdffd}) getpeername(r0, &(0x7f0000000480)=@in, &(0x7f00000004c0)=0x10) setsockopt$sock_int(r0, 0xffff, 0x1002, &(0x7f0000000100)=0x7, 0x4) bind$unix(r0, &(0x7f0000000200)=@file={0x30, 0x1, './file0\x00'}, 0xa) sendmsg$unix(r0, &(0x7f00000029c0)={&(0x7f0000000080)=@file={0x80, 0x1, './file0\x00'}, 0xa, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="100000000000dbf0375c8c0687ef17476fd583fa5d8ef571802572d192e18d6a328bec6d45f296ca84206b3e184d034ff48428e4bf85d22afa97224a2cae7f0054bbd79f081f1c31eee52750adaecb3f140dd266423ccb0b595c83af8c824a6703fdc1b058646bc21f19c8ec3f9cfd086824897c342a0000000000008c03154d1156db42070f6c00568925ac45c576f333511b3eff0da0c2cd1ed9f25f7d960c5d67746086b814b39c1ad17f7a5f61abf765c8e72bf04c125a252ba4083e7263a0c79b4d1a29762acfe2eed59ea9622d543e7551875def7e3be55c5aecdceeee42ae67afce9748e462154c93449cabc0c9e80ef6295fce2c65", @ANYRES32], 0x10, 0x1}, 0x0) ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, &(0x7f00000000c0)={0xa, 0x8000148, {[0x3, 0x40, 0x6, 0x6, 0x3, 0x8000, 0x6, 0x40000000000, 0x7, 0x2, 0x9, 0x91c, 0x8, 0x2000180, 0x0, 0xd3, 0x76, 0xffffffffffffbff7], [0x5438b950, 0x5, 0x1004, 0x7, 0x1, 0x1, 0x9, 0x2, 0xffffffffffffffff, 0x3], [0x6, 0x0, 0x8, 0x8000000008, 0x10000, 0x210, 0x1000002], [0x100000000, 0x10801, 0x0, 0x5, 0x3], [{0x0, 0x7, 0xfffffbfb, 0x5}, {0x2, 0x925, 0x3, 0x338}, {0x1000, 0x7fffffff, 0x0, 0x5}, {0xb, 0xfffffbff, 0x2, 0x1}, {0x4, 0x3, 0x2, 0x8}, {0x1f, 0x4, 0x0, 0x7}, {0xe4, 0xffffff81, 0x1ff, 0x1}, {0x3, 0x10000, 0x8001, 0x5}], {0x52b, 0x4, 0x401, 0x8}, {0xfffb, 0xffffbfc0, 0x8}}}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x45}, 0x3, &(0x7f0000002480)="71f91eca6e530c79e2f8e2a2ce3471ac0058bc5a91501d94a34bfec38a820600000000000000dc0225f0e4cf52b7d99d15d923", &(0x7f0000000080)=0x1232, 0x0, 0xfffffffffffffe4d) 4.696785546s ago: executing program 4 (id=979): setsid() r0 = syz_open_pts() read(r0, &(0x7f0000000000)=""/234, 0xea) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2000, 0x5cda) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r1 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) shmat(r1, &(0x7f0000001000/0x3000)=nil, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r2 = socket(0x11, 0x3, 0x0) recvmmsg(r2, &(0x7f0000002980)={{0x0, 0x0, &(0x7f00000018c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0}, 0x80000081}, 0x38, 0x1000, &(0x7f00000005c0)={0xfffffffffffff001, 0x44}) r3 = open(&(0x7f0000000040)='./file0\x00', 0x1, 0x8) write(r3, &(0x7f0000000100)="8a522c6b8a8460561e290ca762e8d6c739d5dd7f0153b7a50498cb60ab818b16929d3bf742c57351df76ca9ec87e92fa9f010342ace3a6ffcf", 0x39) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @remote, [], {@ipv6={0x86dd, {0x2, 0x6, "da1c6a", 0x8, 0x3a, 0x10, @empty, @rand_addr="fe56a2ec360b5c0e4e13420d0dc76c49", {[], @udp={{0x1, 0x3, 0x8}}}}}}}) sysctl$net_inet_tcp(&(0x7f0000000040)={0x4, 0x2, 0x6, 0xf}, 0x4, 0xfffffffffffffffe, &(0x7f0000000080)=0x5, 0x0, 0xd) ioctl$TIOCSCTTY(r0, 0x20007461) r4 = dup2(r0, r0) mmap(&(0x7f0000074000/0x3000)=nil, 0x3000, 0x0, 0x10, r4, 0x8) chroot(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') ioctl$TIOCDRAIN(r4, 0x2000745e) 4.378181352s ago: executing program 1 (id=982): r0 = socket$inet(0x2, 0x1, 0x0) shutdown(r0, 0x2) (async) ioctl$FIONREAD(r0, 0xc0207534, &(0x7f0000000200)) (async) r1 = socket$inet(0x2, 0x3, 0xff) (async) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2000, 0x2d87) (async) r2 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) write(r2, &(0x7f0000000000)="b96abc", 0x3) (async) sendto$inet(r1, 0x0, 0x0, 0x4, &(0x7f0000000080)={0x10, 0x2, 0x1, 0xfd5}, 0x10) (async) connect(r1, &(0x7f0000000040)=@in6={0x1c, 0x18, 0x3, 0x4, "b54612cd143599a42e4362537553fbf0", 0x3}, 0x1c) sysctl$kern(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)="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", 0x111) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) (async) r3 = socket(0x1e, 0x3, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000240)={0xfff, 0x0, 0x6, 0x8}) (async) sysctl$kern(&(0x7f0000000280)={0x1, 0x38}, 0x2, &(0x7f00000002c0)="203f8d78890c2f666837654326d4e2ef0138e1b9fc65293218fedd4f8ac8c456514def8ca5fe1c33512dfca2363b0ef73c7365331bf1e2cefc4fa766e5751503d781ea745e77c6f7ecf03901ed8280ae6664e33dc1e3ebf686990fbf9269b574b18c16b829a7ce540c9ad1aacf7b43ca524c8a97a4779dbc6dd51ea5e66c92c01a290f62f37aa303f0680152ad054ad9353bdb4ed98a8b3e1956a0115a2c6a8a0abb675f5b2aaa97d3", &(0x7f0000000380)=0xa9, &(0x7f00000003c0)="c69d0c5f2d77f3559491a17955103d16eca55d4d32c856589cf3257d83d6dabb6828d50bdf183e72f7404105a81fb5b4d44bfb2c200e08907d0dbfb8e63dc78df86edf52f6208271d6e2b212fa63e9c3547921f2a30214cf5046fc4f42ab7b52d1f8e71a9c63fdf8372733ca40115097b7438909db0aa52b82b83fe7240f128c683ff79d206988f3ab3ad4cbeb60bf3acf0243afebbea70545e7830f1acb1d5d0c31ad849cca65116fa7e6559451b86aa44156629cb632ae4d42057503a55c28b77bba1d3f95e7c327a86d2574ee", 0xce) (async) ioctl$FIONREAD(r3, 0x801169ab, &(0x7f00000001c0)) (async) getsockopt$sock_int(0xffffffffffffffff, 0xffff, 0xd, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 3.462265086s ago: executing program 1 (id=991): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f00000001c0), 0x8000, 0x0) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x14, 0x0, 0xa, 0xffff}, {0x80, 0x1e, 0x23, 0xfff}, {0x9b1e, 0x81, 0xff, 0xfffffffa}]}) syz_emit_ethernet(0x1000e, &(0x7f00000015c0)=ANY=[]) 3.434176523s ago: executing program 1 (id=995): setuid(0xee01) syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000500)={0x3, &(0x7f00000000c0)=[{}, {0x1, 0x0, 0x0, 0x1}, {0x6, 0x0, 0x0, 0x8}]}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xff0a, 0x0, 0x37) r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x10, 0x2, 0x3}, 0x10) r1 = kqueue() kevent(r1, &(0x7f0000000180)=[{{}, 0xfffffffffffffff8, 0x5, 0x13, 0x81}, {{}, 0xfffffffffffffff9, 0x8, 0x1, 0x6, 0xb}], 0x0, 0x0, 0x7, 0x0) kevent(r1, &(0x7f0000000040), 0x20, 0x0, 0xffffffff, 0x0) r2 = socket(0x2, 0x1, 0x0) r3 = socket$inet(0x2, 0x3, 0x102) dup2(r3, r2) sendto$inet(r2, &(0x7f0000000a80)="f69c10dc0445a4feaa806c88e15dc9e9705e318b", 0x14, 0x404, &(0x7f00000013c0)={0x10, 0x2, 0x0, 0x1}, 0xc) 3.335099608s ago: executing program 7 (id=1003): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) chdir(&(0x7f0000000240)='./file0\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000000580)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) r2 = open$dir(&(0x7f00000001c0)='./file0\x00', 0x1, 0x14) renameat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', r2, &(0x7f0000000200)='./file0\x00') semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, r1}}) semget(0x0, 0x2, 0x0) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0x100000007, [{&(0x7f0000ffd000/0x3000)=nil, &(0x7f000012a000/0x4000)=nil, 0x2}, {&(0x7f0000028000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0xfffffffffffeffff}, {&(0x7f0000578000/0x9000)=nil, &(0x7f00006d0000/0x2000)=nil, 0x9}, {&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000467000/0x1000)=nil, 0xefffffffeffffffd}, {&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000183000/0x3000)=nil, 0x3}, {&(0x7f000026d000/0x4000)=nil, &(0x7f00006c7000/0x4000)=nil, 0x8000000010000001}, {&(0x7f0000e64000/0x1000)=nil, &(0x7f0000657000/0x3000)=nil, 0xfffffffffffffffd}, {&(0x7f00000c7000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0xfffffffffffffffc}, {&(0x7f0000ffd000/0x3000)=nil, &(0x7f000057d000/0x3000)=nil, 0x8000000000007ff}, {&(0x7f000045d000/0x2000)=nil, &(0x7f00007fe000/0x1000)=nil, 0xa}, {&(0x7f000033f000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0xd10a}, {&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000385000/0x3000)=nil}, {&(0x7f0000ff2000/0xb000)=nil, &(0x7f0000592000/0x3000)=nil, 0x74b6}, {&(0x7f0000167000/0x4000)=nil, &(0x7f000058c000/0x3000)=nil, 0x1ff}, {&(0x7f0000ff7000/0x3000)=nil, &(0x7f00000d2000/0x1000)=nil, 0xf}, {&(0x7f0000ffb000/0x4000)=nil, &(0x7f000031e000/0x3000)=nil, 0x1007d}], './file0\x00', 0x4}) r3 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r3, 0xc0106924, &(0x7f00000001c0)) sysctl$net_inet6_ip6(&(0x7f0000000000)={0x4, 0x18, 0x29, 0x32}, 0x4, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) sysctl$net_inet_carp(&(0x7f0000000000)={0x4, 0x2, 0x6, 0x3}, 0x4, 0x0, 0x0, &(0x7f00000010c0)="e1000000", 0x4) sysctl$kern(&(0x7f00000000c0)={0x1, 0x4e}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000180)=0x66, 0x0, 0x27) 3.295062862s ago: executing program 7 (id=1005): r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x184) linkat(r0, &(0x7f0000000080)='./file0\x00', r0, &(0x7f0000000380)='./file0\x00', 0x0) mmap(&(0x7f0000404000/0x1000)=nil, 0x1000, 0x1, 0x2011, r0, 0x0) mmap(&(0x7f0000234000/0x3000)=nil, 0x3000, 0x5, 0x11, r0, 0x0) truncate(&(0x7f0000000140)='./file0\x00', 0x30001) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b10005130000000000003e0004000000000013fecea10500fef96ecf2ac72fd3357ae30200004e3039d2d236acf20b7804be38164991f7c8cf7f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f335c223e7d0c032bfa896443a41c18", 0x62, 0x4a3978cf174d4898, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r1 = socket(0x11, 0x3, 0x0) sendto$unix(r1, &(0x7f0000000180)="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", 0xfffffffffffffdb1, 0x400, 0x0, 0x0) truncate(&(0x7f0000000100)='./file0\x00', 0xf) open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x184) (async) linkat(r0, &(0x7f0000000080)='./file0\x00', r0, &(0x7f0000000380)='./file0\x00', 0x0) (async) mmap(&(0x7f0000404000/0x1000)=nil, 0x1000, 0x1, 0x2011, r0, 0x0) (async) mmap(&(0x7f0000234000/0x3000)=nil, 0x3000, 0x5, 0x11, r0, 0x0) (async) truncate(&(0x7f0000000140)='./file0\x00', 0x30001) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b10005130000000000003e0004000000000013fecea10500fef96ecf2ac72fd3357ae30200004e3039d2d236acf20b7804be38164991f7c8cf7f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f335c223e7d0c032bfa896443a41c18", 0x62, 0x4a3978cf174d4898, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) (async) socket(0x11, 0x3, 0x0) (async) sendto$unix(r1, &(0x7f0000000180)="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", 0xfffffffffffffdb1, 0x400, 0x0, 0x0) (async) truncate(&(0x7f0000000100)='./file0\x00', 0xf) (async) 3.269009263s ago: executing program 7 (id=1011): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) ioctl$BIOCSDLT(r0, 0x8004427a, &(0x7f0000000080)=0x53d) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0) ioctl$BIOCIMMEDIATE(r1, 0x8010427e, &(0x7f0000000040)=0x8) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000000)={'tap', 0x0}) syz_emit_ethernet(0x138, &(0x7f0000000480)=ANY=[]) syz_emit_ethernet(0x1000e, &(0x7f00000015c0)=ANY=[]) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000080)={'tap', 0x0}) open$dir(&(0x7f00000000c0)='./file0\x00', 0x200, 0x186) syz_emit_ethernet(0x3a, &(0x7f0000000000)={@random="a50a3a311724", @random="b00000001000", [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x3d, 0x2c, 0xfffd, 0x0, 0x30, 0x1, 0x0, @empty, @multicast1, {[@timestamp={0x44, 0x4, 0x2, 0x1, 0x8}]}}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x8000, 0x2, 0x1000, 0x0, 0x2}}}}}) kill(0x0, 0x0) 3.265312664s ago: executing program 4 (id=1014): r0 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r2 = openat$vnd(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) ioctl$VNDIOCCLR(r2, 0x80384601, &(0x7f0000000100)={&(0x7f0000000140)='./bus\x00', 0x1, 0x0}) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000080)="7f9f7fa17224321f3f06ecd8264f6ec6706e2e2e", 0x14}], 0x1000000000000050) execve(0x0, 0x0, 0x0) setuid(0xee01) ioctl$WSKBDIO_SETDEFAULTKEYREPEAT(r0, 0x800c5709, &(0x7f0000000040)={0x2, 0x4, 0xfffffffb}) 3.259027985s ago: executing program 7 (id=1018): r0 = socket(0x2, 0x3, 0xf) open(&(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x615, 0x0) setgroups(0x0, 0x0) r1 = getpid() ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x510, r1) mknod(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x0) mknod(&(0x7f0000000100)='./file0\x00', 0x2000, 0x1e5f) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x80, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r2, 0xc0284408, &(0x7f0000000240)={0x0, 0x8000000000004, 0x0}) setuid(0xee01) setrlimit(0x1, &(0x7f0000000180)={0x200, 0x95f}) sendto$inet(r0, 0x0, 0x0, 0x40d, &(0x7f0000000280)={0x10, 0x2, 0x3, 0x7}, 0x10) pselect(0x40, &(0x7f0000000440)={0x4, 0x5, 0x5, 0x4, 0x7, 0x1, 0x7, 0x6}, &(0x7f00000005c0)={0x2, 0x8, 0xfffffffffffffffd, 0xfffffffe, 0xce, 0x6, 0x9, 0x3}, &(0x7f0000000340)={0x0, 0x9, 0x8, 0xf2, 0xe1, 0x5, 0x12, 0x4}, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x57, 0x0, 0x0, 0x0, 0x1c0, 0x33, 0xa2f}, 0x80000002000007, 0xfffffffffffffffb, 0x8, 0x0, 0x3, 0x400000000009, 0x0, 0x8000000000000001}) syz_emit_ethernet(0x1000e, &(0x7f0000000080)=ANY=[@ANYBLOB="69e1629b6174391e7dd7a2d786dd60b6000000302c03cb697a653e336f000000500000000000ff020000000000000000000000000001"]) syz_emit_ethernet(0x1000e, &(0x7f0000000080)=ANY=[]) mknod(&(0x7f0000000040)='./file0\x00', 0x2000, 0x1e5f) r3 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2e) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x51, 0x2100007, 0x6, 0x80000001, 0x80000001, 0x10001, 0x10, [{0x3, 0x7, 0x4, 0x71000}, {0x8, 0x9, 0x8, 0xfffffff9}, {0x8, 0xf86, 0x0, 0x9}, {0x1, 0x800, 0x8007}, {0x401, 0x200726, 0x2800, 0x7}, {0x2, 0xa, 0x3, 0x99}, {0xce1, 0xffffffff, 0x4f8, 0x6d}, {0x6, 0x300, 0x54, 0x8}, {0x2, 0x82, 0x5, 0x9}, {0x4, 0x8001, 0xd1b, 0x100}, {0x1ce, 0x10001, 0xf7, 0x3}, {0x200007ff, 0x9, 0xfffffffd, 0x9}, {0xb8c, 0x5, 0x8, 0x4}, {0x29a71717, 0x7f, 0x1, 0xc373}, {0xb6f, 0x407, 0x5}, {0x8000, 0x1, 0x40101002, 0x30004}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r3, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r3, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffe, 0x0}) openat$vmm(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffff9c, 0xc1045763, &(0x7f0000000040)={0x7, [{0x2, 0xfffffeff}, {0x2}, {0x3, 0x7fff}, {0x1, 0xd}, {}, {0x0, 0x4}, {0x1, 0x1}, {}, {0x0, 0x1}, {0x2, 0x1}, {0x2, 0x10000000}, {0x0, 0x6}, {0x3, 0x2}, {0x3}, {0x0, 0x80000020}, {0x0, 0x5}, {0x0, 0x1}, {0x4, 0x4}, {0x1, 0x1}, {}, {}, {}, {0x2, 0xfffffc00}, {0x2, 0x9}, {0x0, 0x3}, {0x3, 0x800}, {}, {0x1}, {0x2, 0xfffffffd}, {0x1, 0x1e94}, {0x2, 0x7}, {0x1, 0x200060}]}) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) chmod(&(0x7f0000000180)='./file0\x00', 0x23f) setuid(0xee01) 2.956969968s ago: executing program 6 (id=1037): ioctl$TIOCSETA(0xffffffffffffffff, 0xcd504404, &(0x7f0000000040)={0x9, 0x2, 0x801, 0x2, "cd00220004000000000000000000000000008000", 0x40048004, 0x6}) sysctl$kern(&(0x7f0000000040)={0x1, 0x4f}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) sysctl$kern(&(0x7f0000000040)={0x1, 0x3e}, 0x3, &(0x7f00000000c0)="3bf2ee74e747c82dad6eb2a36fa755e1a3925fe49afca7e63b52fa65ccaa74d6e6b85b6cdced70357ef201f97842b1068dca31553fa2d7031f38c03e56ad0e24dfc4f97b8b7f81499647e6e7725765d61436c85e43c15d12a78cb8c57ddde87021d7b685507fd3e0652f35e45bdaa3afd86c4fe557433e4c2b632de71c951516adff26aa2e48b45f8ce92bcefd3eceefabee7e3ebe806fdb4f6af569ae94b5d127", &(0x7f0000000080)=0x4, &(0x7f0000000340)="5a67923ef0cb189971421989ebcff78831a7581e2f27caa362f1363042efb27688b2c899220fb2fe37e467d974592496856ca7b78060998608c2f952e43bc0bf11555cc5cb0fe17b2ec1be389871829bfe10dd4c4d2c8f9da2bd2868fd86791dc09dc4fa89a217458bdaed31003fdc3a7323189ba3ccbad6c8af17516e4557f61ad20180000000000000125f568ca7d3396b9057255f381855110eb3a673713716cdf010ddfa7977f92cf061ad125ca670353b45d53aae196b00271f9d3452b523b3dea22d6027625614312183724b71c7eb02083a410c1c99fa455013521f98686e472b70b560f7021f567adf4d", 0xfffffffffffffe37) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x205318) open(&(0x7f0000000380)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7949) r0 = syz_open_pts() ppoll(&(0x7f0000000040)=[{r0, 0xe5}], 0x1, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x7b8f91c5333d655e) syz_open_pts() syz_open_pts() mknod(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) link(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000d40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) sysctl$vm(&(0x7f0000000200)={0x2, 0x7}, 0x2, &(0x7f0000001240)="08640ca5", &(0x7f0000000040)=0x4, 0x0, 0x0) link(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000a40)='./bus\x00', &(0x7f0000000680)='./file0\x00') 2.953653173s ago: executing program 6 (id=1039): getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000140)={0x0, 0x0}, &(0x7f0000000180)=0xc) chown(&(0x7f0000000100)='./file0\x00', r0, 0x0) r1 = socket$inet(0x18, 0x3, 0x102) sendmsg(r1, &(0x7f0000000240)={&(0x7f0000000280)=@in6={0x1c, 0x18, 0x0, 0x7, "000005000039068d4e000100", 0x101}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000000)="630c00000000069afe51f6f2efa24a85abdd612dd68e59adfebb93232d44372e9bc47e84f7c477d24d9c793809f5480a0000000096a431194f219f22", 0x3c}], 0x1, 0x0}, 0x0) syz_emit_ethernet(0x9e, &(0x7f0000000040)={@random="09934d303cb6", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "99cea6", 0x68, 0x2c, 0x3, @empty, @mcast2, {[@routing={0xff, 0xa, 0x0, 0x1, 0x0, [@mcast1, @mcast2, @mcast2, @empty, @loopback]}], @icmpv6=@ndisc_ra={0x86, 0x0, 0x0, 0x2, 0x7, 0x9, 0x5, 0x8}}}}}}) syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0) 2.924304798s ago: executing program 6 (id=1041): r0 = open(&(0x7f0000000000)='./file0\x00', 0x9cab835cfdc52675, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0xa011, r0, 0x0) fcntl$getflags(r0, 0x3) sysctl$kern(&(0x7f00000000c0)={0x1, 0x50}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xfe10, 0x0, 0x37) 2.920880896s ago: executing program 6 (id=1043): socket(0x18, 0x2, 0x0) r0 = socket(0x18, 0x1, 0x0) r1 = socket$inet6(0x18, 0x1, 0x6) r2 = socket$inet6(0x18, 0x1, 0x6) bind$inet6(r2, &(0x7f0000000040)={0x1c, 0x18, 0x1, 0x8, "fffffff9000000000000000000000001", 0x7}, 0x1c) connect$inet6(r2, &(0x7f0000000280)={0x1c, 0x18, 0x3, 0x7ff, "000000000000000000000000018000", 0xc}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) bind$inet6(r1, &(0x7f0000000040)={0x1c, 0x18, 0x1, 0x4, "ffffffffffff00000000000000000001", 0x7}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x18, 0x0, 0x7fe, "fe80000400000000fdff00"}, 0x1c) 2.919772856s ago: executing program 6 (id=1045): setitimer(0x4, 0x0, 0xffffffffffffffff) getresgid(&(0x7f0000000000)=0x0, &(0x7f0000000040), &(0x7f0000000080)) setgid(r0) (async) setgroups(0x0, 0x0) (async) setuid(0xffffffffffffffff) syz_open_pts() 2.897562456s ago: executing program 6 (id=1046): mknod(&(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) (async) r1 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) socket(0x2, 0x1, 0x0) (async) write(r1, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) ioctl$FIOASYNC(r1, 0x8004667d, &(0x7f00000000c0)=0x80) (async) close(r0) 2.703148418s ago: executing program 5 (id=1055): sysctl$vfs_ffs(&(0x7f0000000000)={0x4, 0x1, 0x5}, 0x4, 0x0, 0x0, 0x0, 0x0) (async) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x2, 0x0, 0x1a}, 0x4, &(0x7f0000000080)="b2589d5547e5d32a8993714f65c75d55fcf4da0211684cd4d4073e67009f0193f0b90dc3e43fe4c86c1ac9680efe834100b742b4eb7ff3517eb42712c52718069ea097db05e4c1b76c6ed9a0a4945364fe7ab7ad", &(0x7f0000000100)=0x54, &(0x7f0000000140)="58945530b59eb90b7e06c9b4931c8077c1dc3d67252233324d94b8c6d82a1cf3408ec937ba174bfdc3aafdea2d52e799417e7e788c77593d9658d9f5b7b47ecd2702d225515b854afafbef5fcdfa336144c7e48a2d3750f4b2fd8dbc7c9aa7abe6ded2200fd6cd86e202e52cb07356adbe4a3a26e7495b2ceaffd97b", 0x7c) (async) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) (async) sysctl$vfs_nfs(&(0x7f0000000000), 0x7, &(0x7f00000025c0), 0x0, 0x0, 0xffffffffffffff2d) 2.689970925s ago: executing program 5 (id=1056): syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @remote, [], {@ipv6={0x86dd, {0x8, 0x6, "4498fb", 0x8, 0x2c, 0xb, @local={0xfe, 0x80, '\x00', 0x0}, @mcast2, {[@hopopts={0x2c}]}}}}}) mknod(&(0x7f00000000c0)='./bus\x00', 0x2006, 0x4f4b) open$dir(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) (async) r0 = open$dir(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) ioctl$FIOASYNC(r0, 0xc2c04200, &(0x7f00000001c0)) syz_extract_tcp_res(&(0x7f0000000040), 0x8, 0x1001) 2.689478733s ago: executing program 5 (id=1057): r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) r1 = accept$inet(r0, &(0x7f0000000080), &(0x7f00000000c0)=0x10) poll(&(0x7f0000000100)=[{r0, 0x2}, {r0, 0x40}, {r0, 0x1a4}, {r1, 0x10}], 0x4, 0xfffffffc) ioctl$FIOSETOWN(r1, 0x8004667c, &(0x7f0000000040)=0x4e) 2.684775965s ago: executing program 5 (id=1058): setrlimit(0x8, &(0x7f0000000980)={0x42, 0x3fb}) (async) r0 = syz_open_pts() (async) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) fcntl$lock(r1, 0x9, &(0x7f0000000000)={0x3, 0x1, 0xffffffff00000000, 0x2ff7ffffc}) sendmmsg(r1, &(0x7f00000003c0)={{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)="a12ec97a94035412470555cff8d1035a3da0770d42b197b5a56bddce968e56fda9c60a09742619253b20c8d2f4009f46a1d5efb9074379d129765d530a05b4d2fdf0cac23fd860161426f914381b0b533f9dd21a70e5ad88c935fad068891598d2b0acfa8a05bad4bdde078f88c78e0d14a5642e1e4fc0227a3dcee25f41fac8641a6e9c4ce78f977d52018011adb85d594c158364fdd33a6d97ce76a6ecb70a81a7781802ae3b14a21786d9d8133dc0e8a59404a6f07d89d0310ad5fcf05f8d6fa315b2aacc3e7728cb9398f163fe7cfb9f9e59a3b41440347119b42fdbad328d790a7c8635825c2bea974573ed9a200a", 0xf1}, {&(0x7f0000000140)="7dae435e709983a486e7688312328c6c30dd1a86a7eb26a44cf85979e94de0f7944bb8f796c4022afd6f7c550d1e760c7a8eea3b346ecc78512c41725aba49c841084b1ec01cd8eeaf0e9acae8636903936d77dd1a387a442582a0396b6cae589d1446a3eda7f5e7269a83cd2daf0e3a061e50401d6322021e05d30fb5ab610932403aedbc8bebea6ea5a7e4ce52e1af21cb8ec78a039ff3e41f3e5da7a2bb1eea5a3c107d500e24fbe376e186b429385cf73f86562a24b1fa61b1977ef1d447ead70ef04c1ae54658b050f4d9c6e304de15b145433f504635aa5644daead1e77c2bd498a4", 0xe5}, {&(0x7f0000000240)="e77209354bc3f9a10fd30ae505265be028e3e0d1765f57293f448c4a127d9bb825e3426e0ecd4eca3c3654a747f83e5d7ca095e7519f", 0x36}], 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="90000000ffff000006000000fc52d21375827e7a7e563a88f163edce2a81ecd0280cc3069a78f65311e2ddfa0e948b7cdb17e5f04930d807a09ee66e8d571c9073392e0715bc9718e8e47ee673416834e6435bf1268ea84277eeb92af4c06da4bc50ec9dd3f5acfa32b89174027dd6c0b4d52f4b66760d855de0eb0eec48babe0be8f29b9cb73de756a9f898f13b4e725400000001000000070000003f0737b57f58cf991e098009bbcccf53aa6e0de6bd65993df401539f372b831221b0883072bb5f48871dce0cc251eaa58ebde4a0cf6281604700"/228], 0xe4}}, 0x38, 0x4) (async) close(r0) ioctl$TIOCSETA(0xffffffffffffffff, 0xc0804467, &(0x7f00000000c0)={0x72f, 0x1, 0x1, 0x3, "c9f7d246000000023b0bca8f00875a6e80f775d2", 0xfffffffc, 0x6}) (async) unveil(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='x\x00') (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) (async) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}], 0x1) mkdir(&(0x7f0000000000)='./file0\x00', 0x5d) (async) unveil(0x0, 0x0) (async) open(&(0x7f00000000c0)='./file0\x00', 0x205, 0x0) (async) syz_open_pts() ioctl$TIOCSETD(r0, 0x8004741b, &(0x7f0000000000)=0x9) (async) writev(r0, &(0x7f0000001b80)=[{&(0x7f00000009c0)="5189eb76c555fe5cf252676125529882d3134cb3f4ba75b72e0a0dbf8259d90f24930276248b25bd2d2d722a7a972f3c575fc5ac52969d4a37545c25d6b89e887fbeaf5f8aedbb0f17510a", 0x4b}], 0x1) 2.684501047s ago: executing program 5 (id=1059): r0 = socket$inet6(0x18, 0x1, 0x6) r1 = socket(0x11, 0x3, 0x0) sendto$unix(r1, &(0x7f0000000040)="b1000501000000ae050007e3070000000008000000000500fef96ecfc72fd3357ae30200004e30ffecb92819f20bf4040000000000f7c8cf5f882b297de1aa050400ce9462f0ad3ebbc257e4411f13bee03fa055f262e338c3b6d79b672f335c22db830c032bfa896443c32118210000720fd38bfb0000fd54c125191b1257aea8c500001602fbfe0c2300000100be1f25a2e791505c47f8343712cc11ffffffffff0bfc00"/177, 0xb1, 0x402, 0x0, 0x0) r2 = socket$inet6(0x18, 0x1, 0x6) setsockopt$sock_int(r2, 0xffff, 0x1000, &(0x7f0000001300)=0x3, 0x4) bind$inet6(r2, &(0x7f0000000040)={0x1c, 0x18, 0x1, 0x4, "00000000000000000000010000000600", 0x7}, 0x1c) connect$inet6(r2, &(0x7f0000000140)={0x1c, 0x18, 0x3, 0x1, 'N\x00', 0x8}, 0x1c) bind$inet6(r0, &(0x7f0000000040)={0x1c, 0x18, 0x1, 0x4, "ffffffffffff00000000000000000001", 0x7}, 0x1c) 2.682706332s ago: executing program 5 (id=1060): r0 = accept(0xffffffffffffffff, &(0x7f0000000040)=@un=@abs, 0xfffffffffffffffe) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1000, 0x0) r1 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000180), 0x8, 0x0) ioctl$DIOCMAP(r1, 0xc0106477, &(0x7f00000000c0)={&(0x7f0000000140)='./file0\x00', r1, 0x3}) ioctl$FIOASYNC(r0, 0x80047460, &(0x7f00000000c0)=0x4) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRESHEX]) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0x8, 0x8, 0x7, 0x2, 0x8, 0x3, 0x40, 0x10, [{0x3, 0x3, 0x7fff, 0x80000202}, {0x4, 0x8, 0x6, 0xfff}, {0x1, 0xfffffffe, 0x6, 0x2}, {0x2, 0xdf, 0xf, 0x40}, {0x2, 0x7, 0xf11, 0x7}, {0x800, 0x0, 0x80cf}, {0x7, 0x5, 0x85, 0x2}, {0x0, 0xfffffffe, 0xfffffffa, 0xfbffe2e9}, {0x8, 0xffe, 0x6, 0x17fff}, {0x101, 0x0, 0x5, 0x7}, {0x8, 0x8000004, 0x8, 0x7}, {0x4, 0xc7cb, 0x800000, 0xa66}, {0x401, 0x10a, 0x6, 0x9}, {0x200003, 0xee2, 0x6, 0x5}, {0x81, 0x5, 0x3, 0x7fff}, {0xffffffff, 0x8005, 0x6, 0x69}]}) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) poll(&(0x7f0000000000), 0x35, 0x0) lseek(r0, 0x4, 0x0) execve(0x0, 0x0, 0x0) accept$inet(r0, &(0x7f0000000300), &(0x7f0000000340)=0x10) r3 = open(&(0x7f0000000480)='./file0\x00', 0x80, 0x4ebfac6bbaf7959) r4 = socket(0x10, 0x4000, 0x7) writev(r4, &(0x7f0000000140)=[{&(0x7f0000000180)="7f454c4602e4e0000a52fe2a24d18fff07000000000000bb15bafcdc24894c5d0b5c7b1ad1ffff434ccd50931f000000c74ec434431ea365199d3031b3c239e74ae40b56b1ff5fd8b810876f3b03b9967583b0c66d5af4cb0d37e6b3e5a7f9caeffd2460f1781838fc80953de8dc29637e6df9e3f81696f8a1ebe396a09426e804659a0a5b77e4c10f4a140bdb31e81591e38a84ba662f771c50a283de99875ecd574a1a95f352373bc7b625d9d4bbd641f1a55d59b0b44a86", 0xb9}], 0x1) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f0000000240)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, 0x0, 0x2, 0x1, 0x400, 0x1, {0x0, 0x9, 0xa7f, 0x3d, 0x2, 0xe2, 0x9, 0x3, 0xa92a, 0x1ff, 0x400, 0x7fffffff, 0x80000, 0x5, "7f5f89758e6b6967ef97c0b47fb5b835df0b5a6e0bb6de9de9ba33686c87f724"}}) ioctl$DRM_IOCTL_MODE_RMFB(0xffffffffffffffff, 0xc00464af, &(0x7f00000002c0)=r5) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 2.156204506s ago: executing program 0 (id=1063): sysctl$net_inet6_ip6(&(0x7f0000000180)={0x4, 0x18, 0x29, 0x35}, 0x4, &(0x7f00000002c0)="ed000000f1c3054dfcd3d48204d5a9a9128cac5124671d48a446fc3f0abe3a5a01453c850885ec996c12295f424fd130b81edd3e8e9e43e2743e0b7cb05e1efda33179bb4059b0bd0ef07081f23b4fe75c00ecb9488a3b8b59d666008f2583d0957c60c6ecc3963d1847700070b8f0a9ed5289ec774c99ad36b36b5b39e3002ac8886336ce9ddfad", &(0x7f00000001c0)=0x88, 0x0, 0x0) (async) r0 = socket(0x2, 0x3, 0x11) select(0x40, &(0x7f0000000000)={0xfffffffffffffffd, 0x0, 0x0, 0x564, 0x9ce8, 0x7, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0) (async) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x5) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0xa) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) connect$unix(r0, &(0x7f0000000000), 0x10) (async) syz_extract_tcp_res(&(0x7f0000000040)={0x41424344, 0x41424344}, 0x80000000, 0x5) (async) mlock(&(0x7f000051a000/0x2000)=nil, 0x2000) (async) syz_extract_tcp_res(&(0x7f00000000c0)={0x41424344}, 0x101, 0x400) ioctl$DIOCRCLRTABLES(r1, 0xc450443c, &(0x7f0000000540)={{'./file0\x00', './file0\x00', 0x30, 0x10}, 0x0, 0x0, 0x0, 0x3edc1ea6, 0x2, 0x8, 0x80000000, 0x20, 0x1}) r4 = socket$inet(0x2, 0x3, 0x0) bind$inet(r4, &(0x7f0000000000)={0x10, 0x2, 0x0, 0xac1400ff}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x200000000000a, 0x0, 0x0) (async) sendto$inet(r4, 0x0, 0x0, 0x400, &(0x7f0000000000)={0x10, 0x2, 0x1, 0xe0000001}, 0x10) syz_emit_ethernet(0x109, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaabb31bf8fb7a56988a8360081000d0086dd6407d6c700cb330100000000000000000000000000000000ff0200000000000000000000000000013c04008e00000000fe8000000000000000000000000000aaff0200000000000000000000000000010c00f720680000006c0800990000000000000000000000000000ffff7f000001f3856e6a4769d18a79fb408dfd09daa92c38466e96eb6d413b913912b67af8e5000000000000000000000000000000004e214e21", @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="3010df504dc42b8ded990000008b8000000004020402010204dce7d83e225e74ab0001030d969d947a6658c21b5cd4d000040213122e982adab4bc7947db131dd243b200000052eb03a45c9cab41c85d20b8d100dc4d4f4f52e5e0e523013a3199e2ab38f13881b48ed1ef2939"]) (async) write(r0, &(0x7f0000000080)="55fdb050ab5b45d498800a61e87dd7c6b62c7d43d9", 0x15) (async) r5 = kqueue1(0x4) kevent(r5, &(0x7f0000000240)=[{{r0}, 0xfffffffffffffffe, 0x1, 0x40000000, 0xb70b, 0x4}, {{r0}, 0x4c031c0e80fd2c6a, 0x27, 0x2, 0x4, 0x10001}, {{r0}, 0xfffffffffffffffa, 0x0, 0x9, 0x9, 0x1}], 0xffff, &(0x7f0000000380)=[{{r0}, 0xfffffffffffffff7, 0x21, 0x2, 0x6, 0xffffffffffff8793}, {{r0}, 0xfffffffffffffff6, 0x86, 0x4, 0x72, 0x8}], 0x1, &(0x7f00000003c0)={0x2, 0xfffffffffffffffe}) 2.149555566s ago: executing program 0 (id=1064): r0 = socket$inet(0x2, 0x4000, 0x0) r1 = openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) getsockname$inet(r1, &(0x7f0000000040), &(0x7f0000000080)=0x10) ioctl$DIOCGETRULESETS(0xffffffffffffff9c, 0xc444443a, &(0x7f00000000c0)={0x5, './file0\x00', './file0\x00'}) fchmod(r1, 0x20) r2 = syz_open_pts() close(r0) mknod$loop(&(0x7f0000000540)='./file0\x00', 0xb012, 0x0) ioctl$WSKBDIO_SETBELL(r1, 0x80105703, &(0x7f0000000580)={0x400, 0x6, 0xf, 0x1}) setrlimit(0x3, &(0x7f00000005c0)={0x100000, 0xfff}) r3 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000600), 0x20000, 0x0) ioctl$WSKBDIO_GETKEYREPEAT(r3, 0x400c5708, &(0x7f0000000640)) ioctl$TIOCCONS(r1, 0x80047462, &(0x7f0000000680)=0x1) recvfrom(r1, &(0x7f00000006c0)=""/64, 0x40, 0x0, &(0x7f0000000700)=@in={0x10, 0x2, 0x2, 0x307}, 0x10) write(r1, &(0x7f0000000740)="39f66b6c8dad9795c174934f6478b7fdf4b6a9f288c1a3d4550d70f4b9514d31bcb2245adf7631f228e900b40764994baa78170b11f0d5d9bbd5f4dc9161aa3abbc118fd1e146db129f4cad6e702651c63a03df961778bbb2b1dc898f1828ccbd10aac17bba6", 0x66) getsockopt(r0, 0xfffffff9, 0x3, &(0x7f00000007c0)=""/5, &(0x7f0000000800)=0x5) ioctl$TIOCSBRK(r2, 0x2000747b) ioctl$VT_ACTIVATE(r1, 0x20007605, &(0x7f0000000840)=0x2) ioctl$WSKBDIO_SETENCODING(r3, 0x80045710, &(0x7f0000000880)=0x9) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f00000008c0)={'tap', 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000a00)={&(0x7f0000000900)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000940)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000980)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x4, 0x9, 0x8, 0x6, 0x7, 0x3, 0xd7}) open$dir(&(0x7f0000000a40)='./file0\x00', 0x0, 0x4) ioctl$WSDISPLAYIO_SETPARAM(r1, 0xc020575a, &(0x7f0000000a80)={0x1, 0xff, 0x7, 0x200}) r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000ac0), 0x80, 0x0) ioctl$BIOCSDIRFILT(r4, 0x8004427d, &(0x7f0000000b00)=0x312e) ioctl$TIOCCDTR(r2, 0x20007478) ioctl$VNDIOCCLR(r1, 0x80384601, &(0x7f0000000bc0)={&(0x7f0000000b40)='./file0\x00', 0x9, &(0x7f0000000b80)='./file0\x00', 0x8}) r5 = socket$inet6(0x18, 0x4000, 0x89) getpeername$inet6(r5, &(0x7f0000000c00), &(0x7f0000000c40)=0x1c) fchmod(0xffffffffffffffff, 0x7c) 2.149341883s ago: executing program 0 (id=1065): sysctl$net_inet6_ip6(&(0x7f0000000300)={0x4, 0x18, 0x29, 0x32}, 0x4, &(0x7f0000000400)="a4dad4bac66452f9d943a3d485932a57f860083237d88e0d6704fb0ba793a1e5faba5841d523b9f8ee391cbe112d3c8a2bbb5594a15e8aa413abe510f31706abf6e85fbcec4ea9337ed7a1a1", &(0x7f0000000500)=0x4c, &(0x7f0000000540)="db00781b", 0x4) open(&(0x7f0000000080)='./file1\x00', 0x18289, 0x1f0) acct(0x0) stat(&(0x7f0000000000)='./file1\x00', &(0x7f00000000c0)) 2.130727126s ago: executing program 0 (id=1066): r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0xf94a14e19cec2761, 0x0) ioctl$DIOCSETREASS(r0, 0xc004445c, &(0x7f0000000080)=0x1) r1 = open(&(0x7f0000000000)='./file0\x00', 0x9cab835cfdc52675, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0xa011, r1, 0x0) ioctl$AUDIO_MIXER_DEVINFO(r1, 0xc32c4d02, &(0x7f00000000c0)={0xdf, {"c7a5e0b17efbb11739f4ed4afa4ffd53", 0xf}, 0x4, 0x4fe, 0x1, 0x80000000, "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"}) 2.129729337s ago: executing program 0 (id=1067): r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x10000, 0x186) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x200, 0x186) recvmmsg(0xffffffffffffffff, 0x0, 0x16e5c2e73bbfc430, 0x1, &(0x7f0000000300)={0x7, 0x3b9ac9fe}) sysctl$kern(&(0x7f0000000180)={0x1, 0x29}, 0x2, &(0x7f00000003c0)="f4381e5928f6c7d892efba3faa4610b996390d999495232c364c11a4033108aaea5e334c6e1ce0dcd09200b27b6e27aaa78f9e949c4859a77f18ed5d816103b16a4cab580b44bb59d9641ce511ecd569ebbedacdfec1358f7f", 0x0, &(0x7f0000000480), 0x0) ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9f, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x2015, r1, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x2012, r0, 0x0) r2 = open(&(0x7f0000000080)='./file1\x00', 0x18289, 0x1f0) truncate(&(0x7f0000000000)='./file0\x00', 0x200) write(r2, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) open$dir(&(0x7f00000000c0)='./file0\x00', 0x10000, 0x186) (async) open$dir(&(0x7f00000000c0)='./file0\x00', 0x200, 0x186) (async) recvmmsg(0xffffffffffffffff, 0x0, 0x16e5c2e73bbfc430, 0x1, &(0x7f0000000300)={0x7, 0x3b9ac9fe}) (async) sysctl$kern(&(0x7f0000000180)={0x1, 0x29}, 0x2, &(0x7f00000003c0)="f4381e5928f6c7d892efba3faa4610b996390d999495232c364c11a4033108aaea5e334c6e1ce0dcd09200b27b6e27aaa78f9e949c4859a77f18ed5d816103b16a4cab580b44bb59d9641ce511ecd569ebbedacdfec1358f7f", 0x0, &(0x7f0000000480), 0x0) (async) ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9f, 0x0) (async) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x2015, r1, 0x0) (async) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x2012, r0, 0x0) (async) open(&(0x7f0000000080)='./file1\x00', 0x18289, 0x1f0) (async) truncate(&(0x7f0000000000)='./file0\x00', 0x200) (async) write(r2, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) (async) 1.84694907s ago: executing program 0 (id=1068): select(0x40, &(0x7f0000000000), 0x0, 0x0, 0x0) openat$bpf(0xffffffffffffff9c, 0x0, 0xbe, 0x0) sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xff0a, 0x0, 0x37) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = setsid() mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x40000802) r2 = open(&(0x7f0000000000)='./file0\x00', 0x100, 0xc2) ioctl$TIOCSCTTY(r2, 0x20007461) fcntl$setown(r2, 0x6, r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$sock_cred(r3, 0xffff, 0x1022, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0xc) setresgid(0xffffffffffffffff, r4, 0x0) getresgid(&(0x7f00000001c0)=0x0, &(0x7f0000000200), &(0x7f0000000240)) setresgid(r0, r4, r5) r6 = semget(0x0, 0x1, 0x281) r7 = semget(0x0, 0x1, 0x281) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$sock_cred(r8, 0xffff, 0x1022, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f00000005c0)=0x36) setresgid(r10, r10, 0x0) semctl$IPC_SET(r7, 0x0, 0x1, &(0x7f0000000780)={{r9, r10, r9, r10, 0x8f, 0x1a00, 0x0, 0x0, 0xb}, 0x0, 0x6, 0x0, 0x0, 0x7, 0x0, 0x8}) setgroups(0x0, 0x0) setuid(0xffffffffffffffff) semctl$IPC_STAT(r7, 0x0, 0x2, &(0x7f0000000100)=""/151) semop(r6, &(0x7f0000000000), 0x23) 1.633569474s ago: executing program 4 (id=1069): r0 = openat$bpf(0xffffffffffffff9c, 0x0, 0x8000, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x14, 0x0, 0xa, 0xffff}, {0x80, 0x1e, 0x23, 0xfff}, {0x9b1e, 0x81, 0xff, 0xfffffffa}]}) syz_emit_ethernet(0x1000e, &(0x7f00000015c0)=ANY=[]) 1.632406394s ago: executing program 4 (id=1070): r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000300), 0x82, 0x0) kevent(0xffffffffffffffff, 0x0, 0xffeffff1, &(0x7f00000002c0)=[{{}, 0xfffffffffffffff9, 0x0, 0x0, 0x0, 0x5}, {{}, 0xfffffffffffffffa, 0xc0, 0x20000000, 0x7fffffffffffffff, 0x46ad}], 0xb19, 0x0) r1 = socket$inet(0x18, 0x3, 0x102) r2 = socket(0x18, 0x1, 0x0) getsockopt(r2, 0x29, 0x3d, 0x0, 0x0) setsockopt$sock_int(r2, 0xffff, 0x1001, &(0x7f0000000040)=0xa, 0x4) ioctl$FIONREAD(0xffffffffffffffff, 0x8020697a, &(0x7f0000000100)) sendmsg(r1, &(0x7f0000000240)={&(0x7f0000000280)=@in6={0x1c, 0x18, 0x0, 0x7, '\x00', 0x101}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000180)="638802000000339afe51f6f2efa24a85abdd612dd68e59adfecf9323100084410a8591426ee03e", 0x27}, {&(0x7f0000000680)="a2", 0xfdac}], 0x2, 0x0}, 0x402) ioctl$FIONBIO(0xffffffffffffffff, 0x82907003, &(0x7f0000000140)=0x3) r3 = kqueue() kevent(r3, &(0x7f0000000180), 0x96, &(0x7f0000000540), 0xfffb4963, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$TIOCSETA(r0, 0xcd60441a, &(0x7f0000000140)={0x8, 0x100, 0x8001, 0x403, "000000000a00000f000000aff0338a6b4fc6d700", 0x8, 0x7}) sysctl$kern(&(0x7f0000000000)={0x1, 0x1b}, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x64) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x8000000000000062}) r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) ioctl$BIOCSETIF(r4, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSETF(r4, 0x80104267, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x24, 0x0, 0x6, 0x3}, {0x94, 0x3, 0x80, 0x1101}, {0x9b9e, 0x6, 0xf4, 0x200}]}) syz_emit_ethernet(0x1000e, &(0x7f00000015c0)=ANY=[]) r5 = syz_open_pts() close(r5) r6 = syz_open_pts() ioctl$TIOCSETAF(r6, 0x802c7416, &(0x7f0000000180)={0x8, 0x10001, 0x1, 0x84a19a, "502df0abc70a94cf105008000517f51700104000", 0x2, 0x9383}) writev(r5, &(0x7f0000000700)=[{&(0x7f0000000080)="34eb4cd59e8456ebc0881681c60e1cd9e0bf01b618b3cb934394c5951c1db0fd943a", 0xff99}], 0x1) sysctl$net_inet_tcp(&(0x7f0000001c40)={0x4, 0x2, 0x6, 0x5}, 0x4, 0x0, 0x0, 0x0, 0x0) chmod(&(0x7f0000000040)='.\x00', 0x35e) setuid(0xee01) open(&(0x7f0000000080)='./file0\x00', 0x615, 0x1) ktrace(&(0x7f0000000140)='./file0\x00', 0x1, 0x40000300, 0x0) sysctl$hw(&(0x7f00000000c0)={0x6, 0x1a}, 0x2, 0x0, 0x0, 0x0, 0x0) 1.416901059s ago: executing program 4 (id=1071): r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x82, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setuid(0xffffffffffffffff) fstat(r2, &(0x7f0000000500)) r3 = socket$inet(0x2, 0x1, 0x0) readv(0xffffffffffffffff, &(0x7f0000000a40)=[{0x0, 0xfffffe88}, {&(0x7f0000000600)=""/251, 0xfb}], 0x10000000000001e3) openat$pf(0xffffffffffffff9c, &(0x7f00000000c0), 0x890, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000080)="ed", 0x1) recvmmsg(r5, &(0x7f0000000880)={{0x0, 0x0, 0x0, 0x0, 0x0}}, 0x38, 0x40, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) execve(0x0, 0x0, 0x0) bind$inet(r3, &(0x7f0000000000)={0x10, 0x2, 0x3}, 0x10) listen(r3, 0x7fff) syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x3d, 0x28, 0x67, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0x0}, @local={0xac, 0x14, 0x0}}, @tcp={{0x2, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xd2, 0x8201, 0x0, 0xfffc}}}}}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') unveil(&(0x7f0000000080)='./file0/file0/..\x00', &(0x7f0000000100)='x\x00') open(&(0x7f00000001c0)='./file0\x00', 0x100, 0x0) ioctl$TIOCSETA(r0, 0xc0284416, &(0x7f0000000100)={0xa01, 0x0, 0x747, 0x0, "97000000efffdfff00", 0x900, 0x7}) connect(r2, &(0x7f0000000300)=@un=@file={0x2, 0x0, './bus\x00'}, 0x8) r6 = open(&(0x7f0000000040)='./bus\x00', 0x80, 0x100) ioctl$BIOCSRTIMEOUT(r6, 0xc0307006, &(0x7f0000000080)={0x1, 0x10}) ioctl$BIOCSHDRCMPLT(r6, 0x80044275, &(0x7f0000000040)=0x1) pread(r1, &(0x7f0000000200)="555fd46cae135c1911af3e95cbfb3cc5964031ba53a60fa0fbdb3cfb595a1ac4145810fcc0b3b3d8a4f0ed24332bf830bc4b503cf31a0e081524b3432f985a7b637981ec7897be95da3da78b317e66e31a1be1836755cac59e5bcb0522cc2a2dd7461a1b45ddf342a8b81679599d491089870db92b8b8cd9925cc012cb48be3b306119b534770a1fc750a1466a31d4b78a32051a078a9939d813349cbc6057aa78025bdd479a39b927783c258b6d5b52b74f4c77e7cc57f6dd21ddc1fd1aa195561d00a1bf537e0981a9171120e1307c4f5ade095c9ac5ab8c56ca323c529917df22f10a", 0xe4, 0x6) syz_emit_ethernet(0x2e, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00e0300eaafc080045000020fffd000007019078fffdffffe0000001110090780004addf00000008760f098fc11858b6123ad63cd541b924711a1c717755bc15d272dd12cbb209d53e9e05e05f3a996e9a48ee4d2432629e5ea031f2a749b77a7703c62de7"]) 395.1772ms ago: executing program 1 (id=1072): sysctl$net_inet_tcp(&(0x7f00000000c0)={0x4, 0x2, 0x6, 0x1}, 0x4, 0x0, &(0x7f0000000180), 0x0, 0xffffffffffffff28) 393.95275ms ago: executing program 1 (id=1073): mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6381) r0 = open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) poll(&(0x7f0000000400)=[{r0, 0x4}], 0x1, 0x720) close(r0) setitimer(0x0, &(0x7f0000000080)={{0x0, 0x1}, {0x0, 0x6}}, 0x0) setitimer(0x0, &(0x7f0000000100)={{0xffffffff}, {0x0, 0x3}}, &(0x7f0000000080)) r1 = socket$inet(0x2, 0x8003, 0x0) pledge(0x0, &(0x7f00000000c0)='\x00') pledge(0x0, &(0x7f0000002840)='tty \x00 \x00\x02\x00!\a\x9bp^|#\xcbhl\x97\xa3_\xbc\x04\x9d!\xd9\x9f\x9f\xb4\x96\x13\x12\xe0\r\xe7\xb9E\b\x00\x00\x00l\xaaY\xe1Q<\x19\xc0\xf6Yf\x9au^\xa0\xc9j\xdd-I\x01R\x00w\xf7\x15\x04\xa6\x82aY\x1d\xd7\f>Y\x06\"\xad\xb6\x88_\xeb\at\x91\xd3\xbf\xea\xddt\xe0\bt\x03\x00\x00\x00H\xa7-\xaaw\xcet\x044\xc5\xa9e\xa9\xf6\x1b\x8e\x05\x86\x91IsC\xb9ul\xaeu\x94\x9b\xaf\x04\xc4\x03\"F\x8f\xd5\xe8\r\x8d\xa1\x00\xcc\xd7\xa0\xe1\xeb\xc1>\xbd\t\xc8\x15+\xb0, \xee\xa4\xa6\xb9a\x01&\xadrj\xd5\xc26p\xa14\xe0\xbf\xa0\x1es\x01=\xdbd\xf0?=\x8afcJ\x8eYEn\xd4<\x00\xec\xe4^\x00\x00\x00\xca\x90\xfa\x98\xc9gty\xce\xab\xd2\xa1\x85E\xe4\xa9\xd5\xab\x83\xda?w\x83\xbc\xcf\xd20(L&b\xed\x8c\x1d\x1a\x9fd\x99H\x9e\x82\x10\xea\x05\xf8\xff\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\xa6\x8c\x05n\x83\x83\x12+\x16\xc1\x00\x04\x00\x00\x13:o\x0f\x1fB\xa4\x00wB\x92h\xde\xfal3\x88e\x04J\\\x00D\xae`\x8e\xadd\xa8;\xee\xc4K\xe8]\x84\x90\xb8d\xfb\x95\xb3\xe9(x_\x80]\xadW\xd5\xa9\xaa\x03\x9c6\xa9\xc4\x01\x03\xea\xe5\x90\x85\x16\xb0DV\x13\x01\xab\x01\xf0\x8f\x02\xc2\xc8\x9b\x03\x1f\xd7\xdbN\\\xc0\xcd?Pg\xd5q\x13\xbd \xfa\xab\xccJK\x11\\\x16~#P.\xc9K\x15r\x04\xd9Z;\xc0/\x80vI\x94\x0f6>]\x84a\xf7\x8dOze\x96\xe9\xc3\x93\xed\x94.\xc2\xa0\x1fU#\x96\xe6\xb6C\xfa\x03/\x8b\x0e2\xec\x96v\x9b/.\v\x9e\x80\x18s\xae.\xf4\x14KS`\x87\x8b4\t\x00\x87{\xa8@e\xbfe\xeb\xee\xa2\xe72\xb8Q:\x9f\xc2b\x897\xbe\r\x04\xdf\xe2\xc0\xf0FV\'m\xcbm\x80%\xfc\x9e\x9f\x87\x80A\xbe\xc2\x00\x00\x00\x00\x00\x006\x96\xbb\x9f\x85\x98\xbb\xbc;\xaa\x97c\xfe\x82jz&t\xa7\xc4\xcd\xb0\b9G\xcag\fY\xe6\r\xcdT\xd3\x1c(\xef\xc0\x038\xbd\xdd\xd9\xc9\x93a]q\xd2\x9b\a\x1e\xf8\xc3\"\xc8:\xb8\t\x9f\'P\x17\xfa\xf3Xa\trB-\xf2g\xe6Z\xd5F\xd2\x80\xe0\x99\"\xc12\xe8\b\xc58\x00') mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r2 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a) openat$pci(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0xfff, 0x4e, 0x2100009, 0x6, 0x1, 0x6, 0x5d7227f9, 0x10, [{0x3, 0x10007, 0x4, 0x71000}, {0x8, 0x9, 0x1, 0x2901f03c}, {0x1000008, 0xf88, 0x0, 0x9}, {0x7, 0x800, 0x800a}, {0x401, 0x200726, 0x2800, 0x7}, {0x2, 0x7, 0x2000002, 0x99}, {0xce1, 0x2, 0x4f8, 0x6d}, {0x6, 0x300, 0x55, 0x40000008}, {0x2, 0x82, 0x7, 0x9}, {0x8007, 0x8001, 0x0, 0x103}, {0x1cc, 0x10001, 0xfa, 0x1}, {0x200007ff, 0x9, 0xfffffffd, 0x1}, {0xb8c, 0x5, 0x8, 0xe}, {0x29a71717, 0x80, 0x1, 0xc377}, {0x0, 0x407, 0x5}, {0x8000, 0x8000001, 0x101002, 0x30004}]}) ioctl$VNDIOCSET(r2, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffe, 0x0}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x0, [{0x1}, {0x1}, {0x0, 0x1}, {0x1, 0x3}, {}, {0x0, 0x7f}, {}, {0x0, 0x200}, {0x1, 0xffffffff}, {}, {0x0, 0x40}, {0x0, 0x1ff}, {0x3}, {0x0, 0x1000}, {0x3, 0x4}, {}, {0x2, 0x1}, {0x2}, {0x0, 0x9}, {0x0, 0x10000800}, {0x5}, {}, {0x5, 0x5}, {0x2, 0x400}, {}, {0x2}, {0x0, 0xfffffffd}, {0x3}, {0x3, 0xfffffffa}, {0x3}, {0x2, 0xa}, {0x1}]}) setresgid(0x0, 0x0, 0x0) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000780)={{0x0, 0x0, 0x0, 0x0, 0x8f, 0x1a00, 0x0, 0x0, 0xb}, 0x0, 0x6, 0x0, 0x0, 0x7, 0x0, 0x8}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$sock_cred(r3, 0xffff, 0x1022, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f00000005c0)=0xc) setresgid(r4, r4, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f00000003c0), &(0x7f0000000a80)=0x0, &(0x7f0000000ac0)) r7 = getthrid() r8 = getthrid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000b00)={{0x0, r4, r5, r6, 0x100, 0x821, 0x0, 0x0, 0x1}, 0x7, r7, r8, 0x63ff, 0x0, 0x100, 0x2, 0x4, 0x6dfc, 0x7, 0x7}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x33}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x14, 0x0, 0x37) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="ff00000000000008004500ea1b000000000000907809af2ccbe699d4c56cd9bae00000020000000008009078000000000000000000"]) recvmmsg(r1, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 0x0}}, 0x38, 0x1882, 0x0) execve(&(0x7f0000000240)='./file0\x00', &(0x7f0000000740)=[&(0x7f00000002c0)='/dev/pci\x00', &(0x7f0000000440)='tty \x00 \x00\x02\x00!\a\x9bp^|#\xcbhl\x97\xa3_\xbc\x04\x9d!\xd9\x9f\x9f\xb4\x96\x13\x12\xe0\r\xe7\xb9E\b\x00\x00\x00l\xaaY\xe1Q<\x19\xc0\xf6Yf\x9au^\xa0\xc9j\xdd-I\x01R\x00w\xf7\x15\x04\xa6\x82aY\x1d\xd7\f>Y\x06\"\xad\xb6\x88_\xeb\at\x91\xd3\xbf\xea\xddt\xe0\bt\x03\x00\x00\x00H\xa7-\xaaw\xcet\x044\xc5\xa9e\xa9\xf6\x1b\x8e\x05\x86\x91IsC\xb9ul\xaeu\x94\x9b\xaf\x04\xc4\x03\"F\x8f\xd5\xe8\r\x8d\xa1\x00\xcc\xd7\xa0\xe1\xeb\xc1>\xbd\t\xc8\x15+\xb0, \xee\xa4\xa6\xb9a\x01&\xadrj\xd5\xc26p\xa14\xe0\xbf\xa0\x1es\x01=\xdbd\xf0?=\x8afcJ\x8eYEn\xd4<\x00\xec\xe4^\x00\x00\x00\xca\x90\xfa\x98\xc9gty\xce\xab\xd2\xa1\x85E\xe4\xa9\xd5\xab\x83\xda?w\x83\xbc\xcf\xd20(L&b\xed\x8c\x1d\x1a\x9fd\x99H\x9e\x82\x10\xea\x05\xf8\xff\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\xa6\x8c\x05n\x83\x83\x12+\x16\xc1\x00\x04\x00\x00\x13:o\x0f\x1fB\xa4\x00wB\x92h\xde\xfal3\x88e\x04J\\\x00D\xae`\x8e\xadd\xa8;\xee\xc4K\xe8]\x84\x90\xb8d\xfb\x95\xb3\xe9(x_\x80]\xadW\xd5\xa9\xaa\x03\x9c6\xa9\xc4\x01\x03\xea\xe5\x90\x85\x16\xb0DV\x13\x01\xab\x01\xf0\x8f\x02\xc2\xc8\x9b\x03\x1f\xd7\xdbN\\\xc0\xcd?Pg\xd5q\x13\xbd \xfa\xab\xccJK\x11\\\x16~#P.\xc9K\x15r\x04\xd9Z;\xc0/\x80vI\x94\x0f6>]\x84a\xf7\x8dOze\x96\xe9\xc3\x93\xed\x94.\xc2\xa0\x1fU#\x96\xe6\xb6C\xfa\x03/\x8b\x0e2\xec\x96v\x9b/.\v\x9e\x80\x18s\xae.\xf4\x14KS`\x87\x8b4\t\x00\x87{\xa8@e\xbfe\xeb\xee\xa2\xe72\xb8Q:\x9f\xc2b\x897\xbe\r\x04\xdf\xe2\xc0\xf0FV\'m\xcbm\x80%\xfc\x9e\x9f\x87\x80A\xbe\xc2\x00\x00\x00\x00\x00\x006\x96\xbb\x9f\x85\x98\xbb\xbc;\xaa\x97c\xfe\x82jz&t\xa7\xc4\xcd\xb0\b9G\xcag\fY\xe6\r\xcdT\xd3\x1c(\xef\xc0\x038\xbd\xdd\xd9\xc9\x93a]q\xd2\x9b\a\x1e\xf8\xc3\"\xc8:\xb8\t\x9f\'P\x17\xfa\xf3Xa\trB-\xf2g\xe6Z\xd5F\xd2\x80\xe0\x99\"\xc12\xe8\b\xc58\x00', &(0x7f0000000700)='()^\x00'], &(0x7f0000000a40)=[&(0x7f0000000780)='tty \x00 \x00\x02\x00!\a\x9bp^|#\xcbhl\x97\xa3_\xbc\x04\x9d!\xd9\x9f\x9f\xb4\x96\x13\x12\xe0\r\xe7\xb9E\b\x00\x00\x00l\xaaY\xe1Q<\x19\xc0\xf6Yf\x9au^\xa0\xc9j\xdd-I\x01R\x00w\xf7\x15\x04\xa6\x82aY\x1d\xd7\f>Y\x06\"\xad\xb6\x88_\xeb\at\x91\xd3\xbf\xea\xddt\xe0\bt\x03\x00\x00\x00H\xa7-\xaaw\xcet\x044\xc5\xa9e\xa9\xf6\x1b\x8e\x05\x86\x91IsC\xb9ul\xaeu\x94\x9b\xaf\x04\xc4\x03\"F\x8f\xd5\xe8\r\x8d\xa1\x00\xcc\xd7\xa0\xe1\xeb\xc1>\xbd\t\xc8\x15+\xb0, \xee\xa4\xa6\xb9a\x01&\xadrj\xd5\xc26p\xa14\xe0\xbf\xa0\x1es\x01=\xdbd\xf0?=\x8afcJ\x8eYEn\xd4<\x00\xec\xe4^\x00\x00\x00\xca\x90\xfa\x98\xc9gty\xce\xab\xd2\xa1\x85E\xe4\xa9\xd5\xab\x83\xda?w\x83\xbc\xcf\xd20(L&b\xed\x8c\x1d\x1a\x9fd\x99H\x9e\x82\x10\xea\x05\xf8\xff\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\xa6\x8c\x05n\x83\x83\x12+\x16\xc1\x00\x04\x00\x00\x13:o\x0f\x1fB\xa4\x00wB\x92h\xde\xfal3\x88e\x04J\\\x00D\xae`\x8e\xadd\xa8;\xee\xc4K\xe8]\x84\x90\xb8d\xfb\x95\xb3\xe9(x_\x80]\xadW\xd5\xa9\xaa\x03\x9c6\xa9\xc4\x01\x03\xea\xe5\x90\x85\x16\xb0DV\x13\x01\xab\x01\xf0\x8f\x02\xc2\xc8\x9b\x03\x1f\xd7\xdbN\\\xc0\xcd?Pg\xd5q\x13\xbd \xfa\xab\xccJK\x11\\\x16~#P.\xc9K\x15r\x04\xd9Z;\xc0/\x80vI\x94\x0f6>]\x84a\xf7\x8dOze\x96\xe9\xc3\x93\xed\x94.\xc2\xa0\x1fU#\x96\xe6\xb6C\xfa\x03/\x8b\x0e2\xec\x96v\x9b/.\v\x9e\x80\x18s\xae.\xf4\x14KS`\x87\x8b4\t\x00\x87{\xa8@e\xbfe\xeb\xee\xa2\xe72\xb8Q:\x9f\xc2b\x897\xbe\r\x04\xdf\xe2\xc0\xf0FV\'m\xcbm\x80%\xfc\x9e\x9f\x87\x80A\xbe\xc2\x00\x00\x00\x00\x00\x006\x96\xbb\x9f\x85\x98\xbb\xbc;\xaa\x97c\xfe\x82jz&t\xa7\xc4\xcd\xb0\b9G\xcag\fY\xe6\r\xcdT\xd3\x1c(\xef\xc0\x038\xbd\xdd\xd9\xc9\x93a]q\xd2\x9b\a\x1e\xf8\xc3\"\xc8:\xb8\t\x9f\'P\x17\xfa\xf3Xa\trB-\xf2g\xe6Z\xd5F\xd2\x80\xe0\x99\"\xc12\xe8\b\xc58\x00']) 321.434042ms ago: executing program 3 (id=1077): r0 = socket$inet(0x2, 0x2, 0x0) sendmsg(r0, &(0x7f0000000680)={&(0x7f0000000080)=@in={0x2}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="14"], 0x18}, 0xe) mknod(&(0x7f0000000200)='./file1\x00', 0x2000, 0x8052a) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) setpgid(0x0, 0xffffffffffffffff) mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0xf02, 0x0) mmap(&(0x7f00007e8000/0x4000)=nil, 0x4000, 0x2, 0x10, r1, 0xc47) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) r2 = syz_open_pts() r3 = semget$private(0x0, 0x3, 0x7b7) semop(r3, &(0x7f0000000100)=[{0x1, 0x9, 0x1800}], 0x1) semop(r3, &(0x7f0000000000)=[{0x1, 0x1f, 0x1000}], 0x1) r4 = openat$pf(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) r5 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) close(r5) symlinkat(&(0x7f0000000080)='./file0\x00', r5, &(0x7f00000000c0)='./file0\x00') ioctl$DIOCGETRULESET(r4, 0xc444443b, &(0x7f0000000200)={0xfffffffc, '.\x00', './file0\x00'}) close(r2) fsync(r2) socket(0x2, 0x4000, 0x0) ioctl$FIONREAD(r1, 0x80606941, &(0x7f0000000140)) unlinkat(r1, &(0x7f0000000040)='./file0\x00', 0x8) sysctl$kern(&(0x7f0000000100)={0x1, 0x50}, 0x2, 0x0, &(0x7f0000000080), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000016c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000001700)=@file={0x0, 0x1, './file0\x00'}, 0xe0) open(&(0x7f0000000800)='./file1\x00', 0x800, 0x120) 319.696063ms ago: executing program 3 (id=1078): mknod(&(0x7f0000000100)='./file1\x00', 0x2000, 0x4) (async) r0 = open(&(0x7f0000000080)='./file1\x00', 0x40, 0x132) syz_emit_ethernet(0xfffffffffffffe20, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = socket(0x2, 0x2, 0x0) setsockopt$inet_opts(r1, 0x0, 0x1, &(0x7f0000000040)="27913c11b3c9e91fbdf59c32417020e3a81e536e", 0x14) (async) closefrom(r0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setrlimit(0x2, &(0x7f0000000980)={0x60000000, 0x60000000}) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) 319.052017ms ago: executing program 3 (id=1079): r0 = socket(0x2, 0x8002, 0x0) fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) getsockopt$inet_opts(r0, 0x0, 0x0, &(0x7f0000000200)=""/206, &(0x7f0000000300)=0xce) sysctl$kern(&(0x7f0000000400)={0x1, 0x17}, 0x2, 0x0, 0x0, 0x0, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x1000, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x10, 0x2, 0x3}, 0x10) listen(r1, 0x7fff) syz_emit_ethernet(0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff080045f400280267000000069078e0000001ac1400aa4e224e23", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="500282009058fffc5e20bb2188b9c0a61e0fb1c33e69d3d731bf0b5b1441c54a63db758c2f0382bdbd378e0ca7854050c3e01ab939857b564ca091ec7af0a1886191c96828dfc77de895e82083e3bd7a17703c9747be5c8a7f214036ee948293b5e39cc8995feaa948265b857b53fbd0c1dc321703f1098b4c8684ada9859472b04dd9"]) r2 = socket(0x1, 0x8002, 0x0) r3 = fcntl$dupfd(r2, 0x2, 0xffffffffffffffff) closefrom(r3) accept$unix(0xffffffffffffff9c, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x8) syz_open_pts() r4 = socket(0x11, 0x3, 0x0) sendmsg$unix(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@cred={0x18}], 0x18, 0xf}, 0x0) r5 = open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x0) r6 = socket$inet6(0x18, 0x1, 0x6) socket$inet(0x2, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000040)={0x1c, 0x18, 0x1, 0x80000, "00000000000000000000000000000001", 0x7}, 0x1c) r7 = socket$inet6(0x18, 0x1, 0x6) r8 = socket$inet6(0x18, 0x1, 0x6) setsockopt$sock_int(r8, 0xffff, 0x1000, &(0x7f0000001300)=0x3, 0x4) setpgid(0x0, 0x0) bind$inet6(r8, &(0x7f0000000040)={0x1c, 0x18, 0x1, 0x4, "00000000000000000000010000000600", 0x7}, 0x1c) connect$inet6(r8, &(0x7f0000000140)={0x1c, 0x18, 0x1, 0x1, 'N\x00', 0x8}, 0x1c) setsockopt$sock_int(r7, 0xffff, 0x1000, &(0x7f0000001300)=0x3, 0x4) bind$inet6(r7, &(0x7f0000000040)={0x1c, 0x18, 0x1, 0x4, "00000000000000000000010000000600", 0x7}, 0x1c) ktrace(&(0x7f0000000000)='./file0\x00', 0x4, 0x510, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x2012, r5, 0x0) 318.798126ms ago: executing program 3 (id=1080): ioctl$WSDISPLAYIO_SMODE(0xffffffffffffffff, 0x8004574c, &(0x7f0000000000)=0x1) setgroups(0xd, 0x0) ioctl$WSDISPLAYIO_SMODE(0xffffffffffffffff, 0x8004574c, &(0x7f0000000000)=0x1) (async) setgroups(0xd, 0x0) (async) 255.164706ms ago: executing program 3 (id=1081): mknod(&(0x7f00000007c0)='./bus\x00', 0x4, 0xd02) sysctl$kern(&(0x7f0000000040)={0x1, 0x16}, 0x2, 0x0, 0x0, 0x0, 0x3a) r0 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000200), 0x40000, 0x0) ioctl$BIOCIMMEDIATE(0xffffffffffffffff, 0x80044270, &(0x7f0000000140)=0xa) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000000)={0x0, &(0x7f00000007c0)}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket(0x18, 0x1, 0x0) setsockopt(r1, 0x1000000029, 0xd, &(0x7f0000000000)="ebffcbff13b9fdc12eaa4e713048e69931929648", 0x14) ioctl$BIOCGBLEN(0xffffffffffffffff, 0x4010427e, 0x0) ioctl$VNDIOCSET(r0, 0xc0384600, &(0x7f00000002c0)={0x0, 0x3, &(0x7f0000000280)='./file0\x00', 0x8}) r2 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000080), 0x10010, 0x0) chmod(&(0x7f0000000080)='.\x00', 0x3db) setuid(0xffffffffffffffff) openat$pf(0xffffffffffffff9c, &(0x7f00000000c0), 0x82, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mkdir(0x0, 0x97) rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00') setgid(0x0) ioctl$VMM_IOC_WRITEREGS(r2, 0x82485608, &(0x7f0000000540)={0x4, 0x0, 0x6, {[0x3, 0x10000, 0x0, 0x7f, 0x4, 0x66, 0x6, 0x0, 0x7, 0x2, 0x406, 0x4, 0x8, 0x4000800, 0x258070f9, 0x7ff, 0x401, 0x1000], [0x6c, 0x0, 0x6, 0xfffffffffffffff9, 0x1, 0x50, 0x0, 0xa3, 0x874, 0xf], [0xa000000000000, 0x5, 0x3, 0x10, 0x9, 0x7, 0x2], [0x0, 0x362e, 0xe0, 0x3, 0x4, 0x3], [{0x5db5, 0x0, 0x9, 0x401}, {0x9, 0xe, 0x9}, {0x3, 0x5, 0xe0e2, 0x2}, {0x1000, 0x8, 0x0, 0x8}, {0xf7f0, 0xb022}, {0xc11, 0xb4e7, 0xfffffffa, 0x9}, {0x0, 0x5, 0x2}, {0x40, 0xff, 0x5}], {0x1000, 0xfff, 0x8, 0x2}, {0x3, 0xffff, 0x5, 0x3c}}}) r3 = open(&(0x7f0000000240)='./bus\x00', 0x2, 0x111) ioctl$DIOCRGETADDRS(r3, 0xc4504446, &(0x7f0000000280)={{'./bus\x00', './bus\x00', 0x46, 0x2}, &(0x7f0000000080)=[{@loopback, '\x00', './bus\x00', 0x9, 0x2, 0x0, 0x40, 0x2, 0x10}, {@empty, '\x00', './bus\x00', 0x8, 0x9, 0x18, 0x6, 0x95, 0x0, 0x1}], 0x7ff, 0x2, 0x1ff, 0x7, 0x6, 0x3, 0x38, 0x7}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f0000000040)={0x4, 0x0, 0x2, 0xffffffff, "1a1116f043000000000000fffffffffff700", 0x40}) sysctl$kern(&(0x7f0000000040)={0x1, 0x54}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$kern(&(0x7f0000000040)={0x1, 0x3e}, 0x3, &(0x7f00000000c0)="3bf2ee74e747c82dad6eb2a36fa755e1a3925fe49afca7e63b52fa65ccaa74d6e6b85b6cdced70357ef201f97842b1068dca31553fa2d7031f38c03e56ad0e24dfc4f97b8b7f81499647e6e7725765d61436c85e43c15d12a78cb8c57ddde87021d7b685507fd3e0652f35e45bdaa3afd86c4fe557433e4c2b632de71c951516adff26aa2e48b45f8ce92bcefd3eceefabee7e3ebe806fdb4f6af569ae94b5d127", &(0x7f0000000080)=0x3, &(0x7f0000000180)="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", 0xfffffffffffffe37) sysctl$hw(&(0x7f00000000c0)={0x6, 0x8}, 0x2, 0x0, &(0x7f0000000080), 0x0, 0x0) setuid(0xee01) shmget$private(0x0, 0x4000, 0x200, &(0x7f000084c000/0x4000)=nil) 253.850869ms ago: executing program 3 (id=1082): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)=""/168, 0xa8}], 0x1, 0x0}, 0x3840) closefrom(r1) open(&(0x7f00000008c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80000000000206, 0x4ebfac6bbaf795d) setuid(0xee01) mknod(&(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1, 0xd900) getentropy(0x0, 0xffffffffffffff91) sendmmsg(r0, &(0x7f0000001940)={{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff22}}, 0x38, 0xe) 253.373968ms ago: executing program 2 (id=1083): r0 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) writev(r0, &(0x7f0000001480)=[{&(0x7f0000000080)="b389e5ae", 0x4}, {0x0}], 0x2) r1 = socket(0x18, 0x3, 0x0) setsockopt(r1, 0x1000000029, 0x38, 0x0, 0x0) r2 = semget(0x0, 0x1, 0x281) semop(r2, &(0x7f0000000000), 0x23) r3 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x8, 0x0) ioctl$DIOCCLRSTATES(r3, 0x0, &(0x7f0000000140)={{0x4780000000000000, 0x39c00000, 0x1}, 0x18, '\x00', 0x3, {@any={'\x00', 0x0, 0x6, 0x9}, [0x8, 0xfff9], 0xe1, 0x4, 0x3ff}, {@table={'./file0\x00', 0x0, 0x3, 0x8}, [0x3ff, 0x9], 0x8, 0x9, 0x100}, './file0\x00', './file0\x00', 0x96de924d, 0x400}) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x57, 0x0, 0x0, 0x0, 0x4c, 0x131, 0xe2f}, 0x3a0, 0xfffffffffffffffb, 0x0, 0x0, 0x20000000006, 0x40000000000d, 0x5, 0x8000000000000001, 0x0, 0x0, 0x0, 0x6}) mknod(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x0) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, &(0x7f0000000100)={0x10, 0x0, {[0x7, 0x1, 0x2, 0x4, 0x2, 0xfffffffffffffffe, 0x8, 0x0, 0xfffffffffffffffc, 0x4, 0x9, 0x3, 0xffffffffffffffff, 0x2, 0x8000000, 0x20000000001000a8, 0x8000002, 0x81], [0x80000001, 0x80000001, 0xfffffffffffffffb, 0x4, 0x8, 0x7bd7, 0x200001fe, 0x0, 0x7, 0xffffffffff7fffc1], [0x100000101, 0x2, 0x802f, 0x9, 0xfffffffffbffefff, 0x11006, 0xffffffffff7ffffe], [0x102, 0x8, 0x403, 0x100000000, 0xffffffffffefffff, 0x815], [{0x0, 0x6, 0x0, 0x9}, {0x8057, 0x0, 0x4e, 0x400000000003}, {0x1, 0x10000, 0x7795957e, 0x810}, {0x3, 0x800001, 0x4, 0x80000003}, {0xd, 0xfffffffe, 0x3, 0xa000001}, {0x27, 0x2003, 0x3fffe, 0x4}, {0x1, 0x20000, 0x10000, 0x8}, {0x1000, 0x9, 0x0, 0x2}], {0x1ffc, 0xfffffffe, 0x10000}, {0x8000, 0x109, 0x3, 0xf62}}}) setsockopt$inet_opts(r4, 0x0, 0x24, &(0x7f0000000180)="fd0cc085", 0x4) sendmsg(r4, &(0x7f0000000680)={&(0x7f0000000080)=@in={0x2}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1400"], 0x18}, 0xe) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) rename(&(0x7f0000001300)='./file1\x00', &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00') sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0x37) r5 = accept$unix(0xffffffffffffffff, &(0x7f0000000240)=@file={0x0, 0x0, ""/4097}, &(0x7f0000001280)=0x1003) connect$unix(r5, &(0x7f00000012c0)=@file={0x7f, 0x1, './file0\x00'}, 0xa) 252.97393ms ago: executing program 2 (id=1084): r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x8, 0x0) sysctl$hw(&(0x7f00000001c0)={0x6, 0xf7c93c48ef480542}, 0x2, &(0x7f0000000240)="30bf02aece939e0902d547b9e11c0b04dced7bf144773be089eca96da3ccd973a9b394d37f9379431d7a771b0b55f49c0f01961a23bc2699d479399c44edfa48eb2d7600184651c822b4ec1846d558f2c51b84b1268d54c71df51bf097dedfe81c9d9d7c4ced39257c6ead1a2e6853a37a82dcbacc4b07d725bfc16c5baa3ebc45b2897b93460a93fc8c96", 0x0, 0x0, 0xfffffffffffffe8f) r1 = open(0x0, 0x18289, 0x23) mknod(&(0x7f0000000240)='./bus\x00', 0x2000, 0x6d4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x8004745f, &(0x7f0000000500)=0x2) write(r1, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f0000000100)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0], 0x7, 0x5, 0xe0e0e0e0}) fchown(r0, 0x0, 0x0) r3 = dup3(r0, r0, 0x10000) getsockopt$sock_cred(r3, 0xffff, 0x1022, &(0x7f0000000140)={0x0, 0x0}, &(0x7f0000000180)=0xc) setuid(r4) setuid(r4) r5 = openat$wsmouse(0xffffffffffffff9c, &(0x7f00000000c0), 0x8981, 0x0) ioctl$FIOGETOWN(r5, 0x4004667b, 0x0) r6 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ioctl$VNDIOCSET(r6, 0x80086476, &(0x7f0000000500)={0x0, 0x0, 0x0}) connect$unix(r1, &(0x7f0000000200)=@file={0x0, 0x1, './bus\x00'}, 0x8) ioctl$BIOCPROMISC(r3, 0x20004269) unveil(&(0x7f0000000300)='./bus\x00', &(0x7f0000000340)='c\x00') 247.860185ms ago: executing program 7 (id=1085): r0 = socket(0x2, 0x8002, 0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) mknod(0x0, 0x2000, 0x6d4) open(0x0, 0x0, 0x0) r2 = socket$inet(0x18, 0x3, 0x102) setsockopt$sock_int(r2, 0xffff, 0x2000, 0x0, 0x0) ioctl$FIONREAD(0xffffffffffffffff, 0x8020697a, 0x0) sendmsg(r2, 0x0, 0x402) r3 = socket$inet6(0x18, 0x1, 0x6) mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x2) syz_emit_ethernet(0x102, &(0x7f0000000080)=ANY=[@ANYBLOB="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"]) setsockopt$sock_int(r3, 0xffff, 0x1000, 0x0, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r1, 0x2000641f) r4 = socket$inet6(0x18, 0x3, 0x2) connect$inet6(r1, &(0x7f0000000280)={0x1c, 0x18, 0x3, 0x8d, "fe80000400000000000000000000fdff", 0x8}, 0x1c) sendmsg(r4, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) closefrom(r1) bind$inet6(r3, &(0x7f0000000040)={0x1c, 0x18, 0x0, 0xfffffff7, "827b3d8eb58566478c4cc7cd1a19be86", 0x6}, 0x1c) 230.103116ms ago: executing program 2 (id=1086): r0 = openat$bpf(0xffffffffffffff9c, 0x0, 0x8000, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x14, 0x0, 0xa, 0xffff}, {0x80, 0x1e, 0x23, 0xfff}, {0x9b1e, 0x81, 0xff, 0xfffffffa}]}) syz_emit_ethernet(0x1000e, &(0x7f00000015c0)=ANY=[]) 229.444606ms ago: executing program 7 (id=1087): select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x8, 0x2000000000000004}, 0x0, 0x0, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6381) (async) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6381) kqueue() (async) r0 = kqueue() kevent(r0, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x10, 0x100) ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, 0x0) kevent(0xffffffffffffffff, 0x0, 0xffeffff1, &(0x7f00000002c0)=[{{}, 0xfffffffffffffff9, 0x0, 0x0, 0x0, 0x3}, {{}, 0xfffffffffffffffa, 0xc0, 0x2, 0x7fffffffffffffff, 0x46ad}, {{}, 0xfffffffffffffff9, 0x1, 0xf0000000, 0x1, 0x8}, {{}, 0xfffffffffffffffc, 0x20, 0x4, 0xfffffffc, 0xc3d}, {{}, 0xfffffffffffffff9, 0x23, 0xf0000000, 0x3ff, 0x3}, {{}, 0xffffffffffffffff, 0x6, 0xfffff, 0xe, 0x6}, {{}, 0xfffffffffffffffd, 0x14, 0x10, 0x2, 0x100000001}, {{}, 0x0, 0x80, 0x1, 0x6, 0x80000000000003}], 0xb19, 0x0) ioctl$VNDIOCSET(0xffffffffffffffff, 0xc0384600, &(0x7f0000000140)={0x0, 0xf2f, 0x0}) (async) ioctl$VNDIOCSET(0xffffffffffffffff, 0xc0384600, &(0x7f0000000140)={0x0, 0xf2f, 0x0}) ioctl$FIONBIO(r1, 0x82907003, &(0x7f0000000140)=0x2) r2 = semget(0x0, 0x1, 0x281) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6381) r4 = open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) poll(&(0x7f0000000400)=[{r4, 0x4}], 0x1, 0x720) (async) poll(&(0x7f0000000400)=[{r4, 0x4}], 0x1, 0x720) close(r4) getsockopt$sock_cred(r3, 0xffff, 0x1022, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f00000005c0)=0xc) setresgid(r6, r6, 0x0) semctl$IPC_SET(r2, 0x0, 0x1, &(0x7f0000000780)={{r5, r6, r5, r6, 0x8f, 0x1a00, 0x0, 0x0, 0xb}, 0x0, 0x6, 0x0, 0x0, 0x7, 0x0, 0x8}) symlink(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00') setreuid(0x0, r5) (async) setreuid(0x0, r5) kill(0xffffffffffffffff, 0x15) (async) kill(0xffffffffffffffff, 0x15) 227.880827ms ago: executing program 2 (id=1088): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0x20, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x2, 0x8, 0x5, 0x1}, {0x48, 0xf0, 0x3, 0x4}, {0x6, 0x24, 0x0, 0xfffff802}]}) syz_extract_tcp_res$synack(&(0x7f0000000080)={0x41424344, 0x41424344}, 0x1, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x8, 0x28, 0x68, 0x0, 0x5, 0x6, 0x0, @remote={0xac, 0x14, 0x0}, @local={0xac, 0x14, 0x0}}, @tcp={{0x2, 0x3, r1, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0xa7}}}}}}) openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0x20, 0x0) (async) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) (async) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x2, 0x8, 0x5, 0x1}, {0x48, 0xf0, 0x3, 0x4}, {0x6, 0x24, 0x0, 0xfffff802}]}) (async) syz_extract_tcp_res$synack(&(0x7f0000000080), 0x1, 0x0) (async) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x8, 0x28, 0x68, 0x0, 0x5, 0x6, 0x0, @remote={0xac, 0x14, 0x0}, @local={0xac, 0x14, 0x0}}, @tcp={{0x2, 0x3, r1, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0xa7}}}}}}) (async) 6.893296ms ago: executing program 2 (id=1089): ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x0, [{0x2, 0x2}, {0x0, 0xfffffffb}, {}, {0x0, 0x1}, {0x0, 0x7fffffff}, {0x0, 0x4}, {0x3}, {0x0, 0xc8}, {0x5, 0x2}, {0x0, 0xff}, {0x2}, {0x3}, {0x1, 0xfffffffd}, {}, {}, {0x1, 0x1ff}, {0x1, 0x8}, {0x2, 0xfffeffff}, {}, {0x0, 0x2}, {}, {0x1, 0xfffffffc}, {0x2}, {}, {0x0, 0xffffffff}, {0x2}, {0x0, 0x3}, {}, {}, {}, {}, {0x1, 0x57fd}]}) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, &(0x7f0000000100)={0x1, 0x0, {[0xfffefbfffffffffa, 0x1, 0x2, 0x1, 0xfffffffffffffffe, 0x0, 0xdf5a, 0xffffffffffffffff, 0x0, 0x2eff, 0x5, 0x3, 0xffffffffffffffff, 0x0, 0x8000000, 0xa8, 0x100000001, 0xce7], [0xfffffffffffffffe, 0x2, 0xfffffffffffffffa, 0x8000ffffffff, 0x100, 0x7b99, 0x1fe, 0xb, 0x1, 0x8], [0x100000001, 0xfffffffffffffffe, 0x40000000, 0x6, 0xffffffffffffffff, 0x4, 0xfffffffffffffffe], [0x100, 0x20000000000, 0x401, 0x100000000, 0xffffffffffefffff, 0x6], [{0x8, 0x5, 0x0, 0x8}, {0xfffc, 0x7, 0x5}, {0x10, 0x2001, 0x5bea, 0x814}, {0xf801, 0x5, 0x7, 0x8000000c}, {0x10, 0x2, 0x4, 0x808}, {0x400b, 0x40, 0x40000, 0x4}, {0xa, 0x20000, 0x4, 0x8}, {0x0, 0x965, 0x3, 0x4}], {0x2000, 0x8, 0x10000}, {0x0, 0x0, 0x3, 0x2}}}) r0 = socket(0x18, 0x2, 0x0) setsockopt(r0, 0x1000000000029, 0xb, &(0x7f0000003680)='\x00\x00\x00\x00', 0x4) setsockopt(r0, 0x4, 0x0, &(0x7f0000000340)="bce8bcf7cbb7d6f1acb74a3cc1db8646a9ef950b75b21dc16a8f9d0b9cda9d9da95756fbe5e25bada1865e069ae5be6d1b488b61c746aba3b7ed33cf29c93659ece752a555eb4b499f791dcbefe496570d644daef0d6b8d002db9ac36ea0beb35a234b", 0x63) setsockopt(r0, 0x1000000029, 0x9, &(0x7f0000000000), 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r1 = socket(0x2, 0x2, 0x0) ioctl$FIONREAD(r1, 0x8040691a, &(0x7f00000001c0)) 6.516401ms ago: executing program 1 (id=1090): r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x10091, 0x0) open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0xd6) setrlimit(0x1, &(0x7f0000000240)={0xad, 0x1fd}) r1 = getpid() setgroups(0x0, 0x0) ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x510, r1) setuid(0xffffffffffffffff) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)) nanosleep(&(0x7f0000000000)={0x0, 0x1e49824d}, 0x0) getgroups(0x7, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0]) fstatat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2) setresgid(r4, r5, 0x0) r6 = syz_open_pts() setsid() ioctl$TIOCSCTTY(r6, 0x20007461) r7 = syz_open_pts() ioctl$TIOCSCTTY(r7, 0x20007461) setresgid(r3, r2, r2) fcntl$lock(r0, 0x9, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x300000023}) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x7f, 0x2, 0xc, 0x2}]}) 0s ago: executing program 2 (id=1091): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x100000000000000, 0x1}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket(0x18, 0x2, 0x0) setsockopt(r1, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) r2 = dup2(r1, r1) sendmmsg(r2, &(0x7f0000000200)={{&(0x7f0000000140)=@in6={0x1c, 0x18, 0x3, 0x7, "309653585d708c17000000000900", 0x1}, 0x1c, 0x0, 0x0, 0x0}}, 0x38, 0x401) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) write(r0, &(0x7f0000000140)="e67e843146dfb33d7809c19da343e772a2933512", 0xfffffffb) open$dir(&(0x7f0000000040)='./file0\x00', 0x9d0, 0x121) r3 = socket(0x2, 0x3, 0x0) r4 = fcntl$dupfd(r3, 0x2, 0xffffffffffffffff) closefrom(r4) r5 = socket(0x18, 0x2, 0x0) setsockopt(r5, 0x1000000000029, 0xb, 0x0, 0x0) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) r6 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0xbe, 0x0) ioctl$BIOCSETIF(r6, 0x8020426c, &(0x7f0000000080)={'tap', 0x0}) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x3, 0x6, 0x7, 0x8}, {0x28, 0xf0, 0xff, 0x10001}, {0x6, 0x2, 0xb6, 0xf}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$BIOCSETWF(r6, 0x80104277, &(0x7f0000000040)={0x0, 0x0}) write(r6, &(0x7f0000000180)="460cf2c05e3e45fc20107b65d551", 0xe) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.94' (ED25519) to the list of known hosts. pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error vnd0: sloppy read from proc 50132 (syz-executor): blkno 0 bcount 89 pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error Connection to 10.128.0.94 closed by remote host. pckbd_enable: command error pckbd_enable: command error OpenBSD/amd64 (ci-openbsd-main-6.us-central1-a.c.syzkaller.internal) (tty00) login: pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error OpenBSD/amd64 (ci-openbsd-main-6.us-central1-a.c.syzkaller.internal) (tty00) login: pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error uvm_fault(0xffffffff83a30cb0, 0xffff8000221f2000, 0, 1) -> d kernel: page fault trap, code=0 Stopped at ffs2_balloc+0xa0a: movq 0(%rcx,%rax,8),%r14 TID PID UID PRFLAGS PFLAGS CPU COMMAND * 35265 83632 0 0 0x4000000 0 syz-executor ffs2_balloc(fffff8006e9d8e00,30001,40,fffff80007ffd5b0,1,ffff80002a7a2c68) at ffs2_balloc+0xa0a ffs_write(ffff80002a7a2cf0) at ffs_write+0x4f9 VOP_WRITE(fffff800748a1dd8,ffff80002a7a2da0,3,fffff80007ffd5b0) at VOP_WRITE+0x101 ktrwriteraw(ffff800035cd1258,fffff800748a1dd8,fffff80007ffd5b0,ffff80002a7a2e58,0) at ktrwriteraw+0x19b doktrace(fffff800748a1dd8,4,1b08,0,ffff800035cd1258) at doktrace+0x88c sys_ktrace(ffff800035cd1258,ffff80002a7a3120,ffff80002a7a3070) at sys_ktrace+0x11c syscall(ffff80002a7a3120) at syscall+0x962 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x892665775a0, count: 7 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb> ddb>