last executing test programs: 1.493678377s ago: executing program 5 (id=1939): setsockopt$sock_int(0xffffffffffffffff, 0xffff, 0x1000, 0x0, 0x0) r0 = semget(0x0, 0x1, 0x281) setuid(0xee01) semctl$IPC_STAT(r0, 0x0, 0x2, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) shmdt(0x0) execve(0x0, &(0x7f0000000000)=[&(0x7f0000000100)='///'], 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) link(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) socketpair(0x2, 0x3, 0x4, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x3fb}) r2 = syz_open_pts() sysctl$kern(&(0x7f0000000040)={0x1, 0x35}, 0x3, &(0x7f0000000180)="3bf2ee74e747c82dad6eb2a36fa755e1a3925fe49afca7e63b52fa65ccaa74d6e6b85b6cdced70357ef201f97842b1068dca31553fa2d7031f38c03e56ad0e24dfc4f97b8b7f81499647e6e7725765d61436c85e43c15d12a78cb8c57ddde87021d7b685507fd3e0652f35e45bdaa3afd86c4fe557433e4c2b632de71c951516adff26aa2e48b45f8ce92bcefd3eceefabee7e3ebe806fdb4f6af569ae94b5d127", &(0x7f0000000080)=0xa0, &(0x7f0000000340)="5a67923ef0cb189971421989ebcff78831a7581e2f27caa362f1363042efb27688b2c899220fb2fe37e467d974592496856ca7b78060998608c2f952e43bc0bf11555cc5cb0fe97b2ec1be389871829bfe10dd4c4d2c8f9da2bd2868fd86791dc09dc4fa89a217458bdaed31003fdc3a7323189ba3ccbad6c8af17516e4557f61ad238a7317e73650b8b125f568ca7d3396b9057255f381855110eb3a673713716cdf010ddfa7977f92cf061ad125ca670353b45d53aae196b00271f9d3452b523b3dea22d6027625614312183724b71c7eb02083a410c1c99fa455013521f98606e472b70b560f7021f567adf4d", 0x5d) close(r2) syz_open_pts() ioctl$TIOCSETD(r2, 0x8004741b, &(0x7f0000000000)=0x8) shmget(0x2, 0x3000, 0x4, &(0x7f0000480000/0x3000)=nil) open(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80, 0x28) clock_getres(0x2, 0xffffffffffffffff) getrusage(0xffffffffffffffff, &(0x7f0000000280)) writev(r2, &(0x7f00000002c0)=[{&(0x7f00000009c0)="cff5c05664db486cda974a82388ef359025250129bdb3b8c172b8359eb32d47209b2a02c3b55a29b75b43b0b03", 0x2d}], 0x1) recvmmsg(r1, 0x0, 0x0, 0x41, &(0x7f0000001440)={0x7ffffffffffffffd, 0x3}) 1.493192523s ago: executing program 5 (id=1940): r0 = syz_open_pts() close(r0) r1 = syz_open_pts() mlockall(0x1) r2 = getppid() fcntl$lock(r0, 0x9, &(0x7f0000000140)={0x1, 0x0, 0x1003, 0x2, r2}) close(r1) ioctl$TIOCSETD(r0, 0x8004741b, &(0x7f0000000000)=0x7) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb5219f1000b913f1, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) readv(r0, &(0x7f0000000740)=[{&(0x7f00000002c0)=""/243, 0xf3}, {&(0x7f0000000100)=""/26, 0x1a}, {&(0x7f00000003c0)=""/200, 0xc8}, {&(0x7f00000004c0)=""/150, 0x96}, {&(0x7f0000000580)=""/141, 0x8d}, {&(0x7f0000000640)=""/76, 0x4c}, {&(0x7f00000006c0)=""/84, 0x54}], 0x7) ioctl$TIOCSETAF(r0, 0x802c7416, &(0x7f0000000180)={0x409789, 0x10001, 0xfffffc06, 0x80a1a1, "bbeb3f0100f1470010508bc49d7323000000007e", 0x0, 0x4}) r3 = socket(0x18, 0x2, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) setuid(0xffffffffffffffff) unveil(&(0x7f0000000240)='./file0\x00', &(0x7f0000000380)='x\x00') unveil(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000140)='x\x00') sendmsg$unix(r3, &(0x7f0000000040)={&(0x7f0000000240)=@file={0x0, './file0\x00'}, 0xa, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="14"], 0x18, 0x401}, 0x0) setsockopt$inet6_MRT6_ADD_MFC(r3, 0x29, 0x68, &(0x7f00000007c0)={{0x18, 0x3, 0xfff, 0xf}, {0x18, 0x1, 0x0, 0x2}, 0xfff, [0x4, 0x0, 0x2, 0xffff2611, 0x4, 0x0, 0xfffffffd, 0x5]}, 0x3c) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="34e324f366defc2115d1d7bfa69fb3fba0cc882acdcee98a607ea63eac0d3011c034bd7257bf01f618603a934394c59500"/65, 0x41}, {&(0x7f00000001c0)="59cef41a0437c71572a74f5debe307936e09afb6f30e4af4efa1984b6dc4e3d697ef57af109c9979fbf9bf0a3aa08819541d2fc21cea03062805cbd2a856c73f026eeaec4f6c9f4886de6e0c4697ef7d9ce4d364a4204743ac441f766195e345a486e5d604551b05e9777582b4fd0215e6b3efca90a849bc907c0aaaf987637ef56f586623f8bc2036a78f081bc1b20da8fb60b23494da5d64a3a016b9efeddf03bacbed92fa873e063708bd027d6ec3e307930ee4e96cc8388739bfed76cf6876ae224f223ad20afb13b28991253e", 0xcf}], 0x2) ioctl$TIOCDRAIN(r0, 0x2000745e) 1.182689666s ago: executing program 6 (id=1955): ioctl$WSMUXIO_REMOVE_DEVICE(0xffffffffffffffff, 0x80085762, &(0x7f0000000080)={0x1}) r0 = socket(0x18, 0xc003, 0x3a) setsockopt(r0, 0x29, 0x6c, &(0x7f0000000040), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0x66, &(0x7f00000003c0)={0x1, 0x1, 0x10, 0x1}, 0xc) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0x66, &(0x7f00000003c0)={0x3f, 0x1, 0x10, 0x3, 0x6c0d}, 0xc) pread(r0, &(0x7f0000000040)="3cd15db7", 0x4, 0x7) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0x68, &(0x7f0000000000)={{0x18, 0x3, 0xfffff001, 0x4}, {0x18, 0x2, 0x8, 0x4}, 0x1003, [0x4, 0xfffffcb1, 0x24a, 0xc, 0x1, 0x8, 0x9, 0x1]}, 0x75) 1.176494461s ago: executing program 5 (id=1957): mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) (async) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x8000, 0xa) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7fd, 0xffff, 0xfffffffe, 0xfd4, 0x3, 0x80000001, 0x17ffe, 0x10, [{0x4, 0x1ff, 0x3, 0xa24}, {0xc5c, 0xb, 0x5, 0x40}, {0x800008, 0x20f05, 0xfffffc01, 0xfffffffa}, {0x7ffffffe, 0x3, 0x3, 0x784c}, {0x3fa, 0xd, 0x401, 0x4d8d}, {0x8, 0xff, 0x3, 0xb}, {0x8000008, 0xffff, 0x85ea, 0x2d}, {0x2, 0x9, 0x17, 0xffffffff}, {0x2, 0x40087e, 0x4, 0x200007}, {0x10005, 0xa74d925a, 0xffff, 0x40000088}, {0x1d9, 0x4, 0x4, 0x412c838f}, {0x200003, 0xa, 0x20008, 0x7}, {0xb8d, 0x4, 0x7, 0x1}, {0x20002, 0x91, 0x9, 0x6}, {0x400002, 0x7, 0xfffffff9, 0x102}, {0x7, 0x9, 0x801002, 0xc}]}) (async) write(r0, &(0x7f0000000080)="58335251da1f", 0x6) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0x2, 0x0}) (async) accept(r0, &(0x7f00000002c0)=@un=@file={0x0, ""/247}, &(0x7f0000000000)=0xf9) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (async) mknod(&(0x7f0000000040)='./bus\x00', 0x100000000205f, 0x2802) (async) ktrace(&(0x7f00000000c0)='./bus\x00', 0x1, 0xa2c, 0x0) 1.085417596s ago: executing program 2 (id=1960): ioctl$VMM_IOC_WRITEREGS(0xffffffffffffffff, 0x82485608, &(0x7f0000000180)={0x1, 0x0, 0x16, {[0x4000000006, 0x1, 0x6, 0x9, 0x0, 0x2, 0x9, 0xe, 0xffffffffffff4f14, 0x7c, 0x6, 0x5, 0xf, 0x101, 0x2, 0xffffffffffffffe5, 0x80000000, 0x4], [0x7fff, 0x8001, 0x7, 0x6, 0x81, 0x7, 0x5, 0x5, 0x1, 0x9], [0x6, 0x949f, 0x100000001, 0xfffd, 0x8000, 0x8000, 0x7], [0x8000000000000001, 0xcc, 0x3df, 0x9, 0x3, 0x2], [{0x3, 0x9, 0x2, 0xfffffffffffffffd}, {0x4, 0x8001, 0x2, 0x8}, {0x8, 0x8, 0x10000, 0x8000000000000001}, {0x2, 0x9, 0x1, 0x5}, {0xfffd, 0xffffff54, 0x8000, 0x1}, {0x8, 0xfffffffc, 0x9, 0x1}, {0x61, 0x3, 0x9, 0xd}, {0x1, 0x1, 0x8000, 0x9ea3}], {0xff, 0x1, 0x2000000, 0x9}, {0x3, 0x9, 0x81, 0x1}}}) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r0 = socket(0x2, 0x1, 0x0) setrlimit(0x8, &(0x7f0000000980)={0xb, 0x54}) r1 = syz_open_pts() close(r1) syz_open_pts() writev(r1, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) poll(&(0x7f00000000c0)=[{r1, 0xe5}], 0x1, 0x4) ioctl$FIONREAD(r0, 0xc0206923, &(0x7f00000001c0)) r2 = socket(0x2, 0x1, 0x0) ioctl$FIONREAD(r2, 0x8040691a, &(0x7f00000001c0)) 1.084988757s ago: executing program 6 (id=1961): mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x1700) r0 = open(&(0x7f0000000080)='./bus\x00', 0x2, 0x0) socket(0x2, 0x2, 0x0) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x1700) r1 = open(&(0x7f0000000000)='./bus\x00', 0x20, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) r2 = open(&(0x7f0000000000)='./bus\x00', 0x20, 0x0) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[]) r3 = getppid() fcntl$setown(r0, 0x6, r3) fcntl$setown(r0, 0x6, 0x0) socket(0x11, 0x3, 0x0) mknod(&(0x7f0000001980)='./file0\x00', 0x2000, 0x400) open$dir(&(0x7f0000001a00)='./file0\x00', 0x0, 0x4) sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b1000501600000040000000007000000087c156610c18125d7f96ecfc73fd3d89815a9c61d3952ddb06b36ac970bff03000000000000000000000000ebe1aa5323edeb51e2f0ca3ebbc2c4699a09000000acb5b302000d7d010000000100000021020000742fe2458bfbb770c1f5a8aec872ea772ec58904000008008d9810361b1257aba8c50000201201", 0x8b, 0x808, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) socket(0x2, 0x4001, 0x0) shutdown(0xffffffffffffff9c, 0x1) openat$vmm(0xffffffffffffff9c, &(0x7f0000000500), 0x8, 0x0) sendto(r0, &(0x7f00000003c0)="311115563ee8471b99", 0x9, 0x0, &(0x7f0000000400)=@un=@abs={0x1, 0x0, 0x0}, 0x8) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0x80000000, 0xffff63d6, 0x5, 0x2, 0xa, 0x3, 0x47, 0x10, [{0x4, 0x10000, 0xfffff115, 0x80000002}, {0xfffffff3, 0xe8, 0x2, 0x2}, {0xcd5, 0x4baa, 0x4, 0x9}, {0x7, 0x1c0, 0xf, 0x2000100}, {0x4, 0x2000007, 0x5, 0xfffffffe}, {0x388d, 0x40fffd, 0x88, 0x5}, {0x10000, 0x400003, 0x20003, 0xffffffff}, {0x207, 0xffffffff, 0x4, 0x99ac}, {0x9, 0x1001, 0x4, 0x7fff}, {0x3, 0x1, 0x2, 0x12}, {0x82, 0x0, 0x8a3a0004, 0xfffffff7}, {0x10000, 0xfffffffa, 0x1, 0xa68}, {0x401, 0xfffffffe, 0x400809, 0x400}, {0x6, 0x2, 0x2, 0x4}, {0xfffffffc, 0x3, 0x8000000, 0x7}, {0x89be5, 0x1, 0x2, 0x400}]}) sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b10005010000009f0500070107000000211c13fecea70500fef96ecfc72fd3007ae30200fdef3044d2d236acf20bf404be01000000f7c8cf5f8823297be1aa0504000051e2f0ad3ebbc257699a1f139b672f335c22db830c032bfa896443c32118210000720fd38bfb0000fd54c125191b1257aea8c500001602", 0x7a, 0x404, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r4 = socket(0x11, 0x3, 0x0) sendto$unix(r4, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb61b98df192f9781ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x40c, 0x0, 0x0) sendmsg$unix(0xffffffffffffff9c, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002c40)=ANY=[@ANYBLOB="10000000ffff000001"], 0x10, 0x17}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r6, &(0x7f0000001440)={0x0}, 0xf, 0x0) shutdown(r5, 0x0) 844.355371ms ago: executing program 6 (id=1965): symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r0 = open$dir(&(0x7f0000000fc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r1, &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r2 = open$dir(&(0x7f0000000100)='.\x00', 0x0, 0x0) mkdirat(r2, &(0x7f0000000a80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) open$dir(&(0x7f0000000b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x0) r3 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) open$dir(&(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x0) mkdir(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x51) symlinkat(&(0x7f0000000dc0)='./file0\x00', r3, &(0x7f0000000ec0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') sysctl$kern(&(0x7f0000000100)={0x1, 0x9}, 0x2, &(0x7f0000000180)="35e9eb1fd1", &(0x7f0000000240)=0x5, &(0x7f0000000280), 0x0) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) open$dir(&(0x7f0000000fc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) (async) mkdirat(r0, &(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) (async) open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) (async) symlinkat(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r1, &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) open$dir(&(0x7f0000000100)='.\x00', 0x0, 0x0) (async) mkdirat(r2, &(0x7f0000000a80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) (async) open$dir(&(0x7f0000000b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x0) (async) open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) (async) open$dir(&(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x0) (async) mkdir(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x51) (async) symlinkat(&(0x7f0000000dc0)='./file0\x00', r3, &(0x7f0000000ec0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) rename(&(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) sysctl$kern(&(0x7f0000000100)={0x1, 0x9}, 0x2, &(0x7f0000000180)="35e9eb1fd1", &(0x7f0000000240)=0x5, &(0x7f0000000280), 0x0) (async) 817.764715ms ago: executing program 6 (id=1968): mknod(&(0x7f0000000400)='./file0\x00', 0x2000, 0x5c4a) r0 = open(&(0x7f0000000480)='./file0\x00', 0x1, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x70e, 0x3c) sendmsg(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x20}, 0x0) r2 = openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x82, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$TIOCSETA(r2, 0xc4504442, &(0x7f0000000300)={0x200032, 0x8, 0x0, 0x0, "97a2224ff1c14a06ebb178926cc9795a6b47c1d1", 0x1, 0xfffffffe}) ioctl$VT_WAITACTIVE(r1, 0x20007606, &(0x7f0000000040)=0x6f30301e) write(r0, 0x0, 0x0) 770.717005ms ago: executing program 6 (id=1969): ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) r0 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r0, 0xc0106924, &(0x7f00000001c0)) open(&(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x615, 0xb2) r1 = socket(0x18, 0x3, 0xf9) setitimer(0x0, &(0x7f0000000140)={{0x80000000000079, 0x100800000200009}, {0xbffffffffdffcfff}}, 0x0) ioctl$FIONREAD(r1, 0x81206919, &(0x7f0000000100)) sysctl$net_inet_esp(&(0x7f0000000080)={0x4, 0x2, 0x32, 0x4}, 0x4, &(0x7f00000002c0)="2eecc312fdd7dddbaad7e6031176c44c373ec26d9e2e657879c8c5c554a4527b5123d0ea7bf271e8113c00b1b2ce663bc2446ebf2bdc35b74fda71943bdde81172c4ad95de850091cba60d12dcf4000218365da9253a80195485ca6db8cd6a68d349c6e0ae44b6e534433d0f7a4b15d27ba2d639b610cd68bd6d20f62b5a420fce5047d519fe9a307e0e318d81af362a746e210bb74f5decdccec0ddc46d26f0a7d5cffee5fedcebfdbee4b5bb7b953a043d417daa0418f010ce728dbca5556b65", &(0x7f0000000240)=0xc1, &(0x7f00000003c0)="d2cdfc4a3dd721825f59ef7e633001d060697d7298cec447c9d9fb847cb75be5634faa16d9d2bae051f42ac5fd4c13a94a1d59ddcef485695aaae30495a2b7c7d948c960d92ed2c780d11fd468fd693d507674c2a5e449f1f1d57663d1840f97f80674bdea9ece9edbeef3850f950be474d297be2ecb651fa736ce319b342a67", 0x80) mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x2, 0x0) sendmsg$unix(0xffffffffffffff9c, &(0x7f0000001f40)={0x0, 0x0, &(0x7f0000001a40)=[{&(0x7f0000000500)="370dc7cc4e61858942", 0x9}], 0x1, 0x0, 0x0, 0x406}, 0x8) r2 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$TIOCSETA(r2, 0xc450443c, &(0x7f00000000c0)={0x72f, 0x1, 0x9, 0x3, "c9f7d2462f0000023beeca8f00875a6e80f775d2", 0x2}) r3 = open(&(0x7f0000000040)='./file0\x00', 0x200, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2, 0x10, r3, 0x0) ioctl$FIONREAD(r1, 0x8080691a, &(0x7f0000000100)) 742.816283ms ago: executing program 1 (id=1971): r0 = socket(0x800000018, 0x2, 0x0) shutdown(r0, 0x2) syz_emit_ethernet(0x98, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff94ea09066dbd86dd60db834400081100000000000000000000000000000000007f0200000000000000000000000000014e204e2000089078"]) (async, rerun: 32) shmget(0x3, 0x3000, 0x1, &(0x7f0000458000/0x3000)=nil) (rerun: 32) 727.18987ms ago: executing program 1 (id=1972): sysctl$net_inet_divert(&(0x7f0000000000)={0x4, 0x2, 0xf0}, 0x4, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) r0 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) ioctl$TIOCSETA(r0, 0xc4504447, &(0x7f00000001c0)={0x3, 0x2, 0xfffffffe, 0x2f, "210d180000020000000000000028ff4021800600", 0x2000000, 0x5}) sysctl$kern(&(0x7f0000000000)={0x1, 0x4f}, 0x2, 0x0, 0x0, 0x0, 0x0) 632.112397ms ago: executing program 5 (id=1974): setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) r0 = open(&(0x7f0000000040)='./file0\x00', 0x8, 0x110) write(r0, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r1 = openat$bpf(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) unlink(&(0x7f0000000000)='./file0\x00') rename(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000100)='./file0\x00') r2 = getpid() ktrace(0x0, 0x5, 0x40000424, r2) fcntl$setown(r1, 0x6, r2) open(&(0x7f0000000080)='./file0\x00', 0x200, 0x29) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r3, &(0x7f0000000000)=[{&(0x7f0000000240)=""/91, 0x5b}], 0x1) setitimer(0x0, &(0x7f0000000140)={{0x1400000000000006, 0x100800200000006}, {0x7fffffffbffdefff, 0x3ff}}, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x3, &(0x7f0000000180)=[{0xbbdc, 0x1, 0x4, 0xa}, {0xf, 0x54, 0xd, 0xe3}, {0x6, 0xd, 0x9, 0x5}]}) r5 = socket(0x18, 0x3, 0x0) r6 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r6, 0xc0106924, &(0x7f00000001c0)) ioctl$FIONREAD(r5, 0x8080691a, &(0x7f0000000100)) dup2(r4, r3) execve(0x0, 0x0, 0x0) dup(r1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) 630.737639ms ago: executing program 1 (id=1976): r0 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) pwritev(r0, &(0x7f0000001240)=[{&(0x7f00000003c0)="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", 0x1d4}], 0x1, 0x2) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="83243d83c6993b00a28754c31b306d6c00003151a37a8b4246", 0x19}], 0x1, 0x10002eb5) ioctl$SPKRTONE(r0, 0x80085301, &(0x7f00000000c0)={0x2, 0x2b}) unveil(0x0, &(0x7f0000000140)='r\x00') mkdir(&(0x7f0000000180)='./file0\x00', 0x8) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) unveil(&(0x7f0000000240)='./file0/file0/../file0\x00', &(0x7f00000000c0)='x\x00') unveil(&(0x7f0000000080)='.\x00', &(0x7f0000000000)='x\x00') 591.238403ms ago: executing program 7 (id=1980): symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r0 = open$dir(&(0x7f0000000fc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r1, &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r2 = open$dir(&(0x7f0000000100)='.\x00', 0x0, 0x0) r3 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) mkdirat(r2, &(0x7f0000000a80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r4 = open$dir(&(0x7f0000000b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x0) r5 = open$dir(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0, 0x80) open$dir(&(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x40) mkdir(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x51) symlinkat(&(0x7f0000000dc0)='./file0\x00', r5, &(0x7f0000000ec0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r6 = openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000000040), 0x20, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) fchdir(r7) r8 = socket(0x6, 0x4, 0x8) poll(&(0x7f0000000580)=[{r6, 0x4}, {r5, 0x4}, {r2, 0x2}, {r5, 0x20}, {r3, 0x4}, {r7, 0x2}, {r8, 0x4}, {r5, 0x13}, {r4, 0x4}, {r3, 0x20}], 0xa, 0x2) 517.138266ms ago: executing program 4 (id=1984): setegid(0xffffffffffffffff) faccessat(0xffffffffffffffff, 0x0, 0x0, 0x0) symlink(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0\x00') readlink(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)=""/54, 0x36) 515.585915ms ago: executing program 4 (id=1986): r0 = kqueue() r1 = dup(r0) open$dir(&(0x7f0000000040)='./file0\x00', 0x8, 0x0) lseek(r1, 0x401, 0x1) 438.49848ms ago: executing program 3 (id=1988): ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f0000000080)={0x10, 0x3, [{&(0x7f00007ab000/0x3000)=nil, &(0x7f0000ec8000/0x3000)=nil, 0x2}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x100000001}, {&(0x7f0000a1c000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x1000000000004}, {&(0x7f0000a6b000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x3}, {&(0x7f0000b50000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x100000000}, {&(0x7f0000800000/0x800000)=nil, &(0x7f0000ccd000/0x1000)=nil}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000843000/0x1000)=nil, 0x3}, {&(0x7f000046c000/0x2000)=nil, &(0x7f0000efd000/0x1000)=nil, 0xfffe}, {&(0x7f0000a98000/0x4000)=nil, &(0x7f0000a3d000/0xd000)=nil}, {&(0x7f0000d3d000/0x4000)=nil, &(0x7f0000aff000/0x1000)=nil, 0xe}, {&(0x7f0000f6a000/0x2000)=nil, &(0x7f0000887000/0x4000)=nil}, {&(0x7f0000795000/0x1000)=nil, &(0x7f0000ff2000/0x1000)=nil}, {&(0x7f0000e0f000/0x2000)=nil, &(0x7f0000e03000/0x3000)=nil, 0x3c}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x2}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f00003b5000/0x2000)=nil, 0xfffffffffffffffc}, {&(0x7f00000c6000/0x4000)=nil, &(0x7f0000c5e000/0x4000)=nil}], './file0\x00', 0x81}) r0 = socket(0x2, 0x1, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) ioctl$FIONREAD(r0, 0x8040691a, &(0x7f00000001c0)) 437.321438ms ago: executing program 7 (id=1989): mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x1700) (async) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x1700) sysctl$net_inet_esp(&(0x7f0000000000)={0x4, 0x2, 0x32, 0x4}, 0x4, &(0x7f0000000300)="edea629d3df2b9b3028298ab0233c2b59bd8ddfcefab1547fb6dc3f75463f3f87018d6f39de664e250b0430f3aafce05a94fc66f49369defcb53faffad998ee49eaf9b3a23d1cc12f9c43f5173be8839d315db5ec312c5bcc36c5dfb39098bf40f1abfbaa9efeefd5dbb7f7066fd5390c68747119dd7464881ef1a421ed0eda391a8d4944bc2a1122e81567897ac5d0ba268d2f845f29fded223afcff7043e319a96c8d5da29c0bac203b39d39f7a9cb2f59f34ad8e2462523e25986226245b925", &(0x7f0000000100)=0xc1, &(0x7f0000000bc0), 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000140)="c6b0669f426b29d1c00a8ac6443566e27fa3b5e7cac8926f1d9dbdd2c27870c765804b8969e4e8d27c8d517c0d5e597781538b2d866f2f9a0ba73684097d5026750112702b337aab7b60351f18cebb3cc2dfeca814feac51f989e52623b85cf4d7f662603d8794c838be41e62e5d6aa9165cfba0c4295a782affaef96e5f65f1c9dcc729a2d909e5d00a23418cb424250e", 0x91}], 0x1) mknod(&(0x7f0000000100)='./bus\x00', 0x6000, 0x4) (async) mknod(&(0x7f0000000100)='./bus\x00', 0x6000, 0x4) socket(0x18, 0x2, 0x0) (async) socket(0x18, 0x2, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r0 = socket(0x18, 0x2, 0x0) ioctl$TIOCSETA(0xffffffffffffffff, 0xcd50441a, &(0x7f0000000040)={0x5, 0x80000001, 0xb, 0x0, "0000000000000000000090896f7f00", 0x1}) r1 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000500), 0x8, 0x0) ioctl$VMM_IOC_INTR(r1, 0xca605601, &(0x7f0000000040)={0x1, 0x0, 0x1}) close(r0) socket(0x2, 0x3, 0x0) getsockname(r0, 0x0, &(0x7f0000000080)) (async) getsockname(r0, 0x0, &(0x7f0000000080)) r2 = open(&(0x7f0000000000)='./bus\x00', 0x1, 0x0) ioctl$BIOCSETF(r2, 0x80104267, &(0x7f0000000300)={0x2, &(0x7f00000000c0)=[{0xc0, 0x39}, {0x406, 0x0, 0x7b, 0xfffffff1}]}) (async) ioctl$BIOCSETF(r2, 0x80104267, &(0x7f0000000300)={0x2, &(0x7f00000000c0)=[{0xc0, 0x39}, {0x406, 0x0, 0x7b, 0xfffffff1}]}) shmget$private(0x0, 0x2000, 0x88, &(0x7f0000001000/0x2000)=nil) setuid(0xee01) 428.561512ms ago: executing program 5 (id=1990): msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1b6, 0x6}, 0x4, 0x800100000001, 0x0, 0x0, 0xff00000000000000, 0xffffffffffffffff, 0x40000000001, 0x3}) (async) r0 = socket(0x800000018, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) (async) r1 = socket(0x800000018, 0x2, 0x0) setsockopt$sock_int(r1, 0xffff, 0x1000, &(0x7f0000000240)=0x6, 0x4) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x4}) (async) bind$unix(r1, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) (async) mknod(&(0x7f0000000180)='./bus\x00', 0x6000, 0x8) (async) r2 = socket(0x2, 0x1, 0x0) (async) r3 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) poll(&(0x7f0000000280)=[{r3, 0x80}, {r2, 0x4}, {r2, 0x20}, {r0, 0x80}], 0x4, 0x5) (async) sysctl$kern(&(0x7f00000000c0)={0x1, 0x2f}, 0x2, &(0x7f0000000140), 0x0, 0x0, 0x0) (async) socket(0x10, 0x8000, 0x8) (async) sysctl$vm(&(0x7f0000000000)={0x2, 0x9}, 0x2, &(0x7f0000000040)="8d968249", &(0x7f00000000c0)=0x4, 0x0, 0x0) (async) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) ioctl$FIONREAD(r2, 0x801169ab, &(0x7f00000001c0)) (async) r4 = open(&(0x7f00000000c0)='./bus\x00', 0x80, 0x100) ioctl$BIOCSRTIMEOUT(r4, 0x42087007, &(0x7f0000000080)={0x1, 0x10}) (async) preadv(r4, &(0x7f0000000140)=[{&(0x7f0000000000)=""/29, 0x1d}, {&(0x7f0000000100)=""/36, 0x24}], 0x2, 0x9) 424.558753ms ago: executing program 2 (id=1991): syz_emit_ethernet(0x66, &(0x7f0000000280)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd605f6ad900303a00ffffff8f000000000000000000000000fe800000000000"]) 371.710272ms ago: executing program 2 (id=1992): r0 = shmget$private(0x0, 0xc00000, 0x126, &(0x7f0000400000/0xc00000)=nil) setgroups(0x0, 0x0) r1 = open$dir(&(0x7f0000000300)='.\x00', 0x8, 0x4a) setgid(0xffffffffffffffff) chmod(&(0x7f0000000040)='.\x00', 0x35e) setuid(0xffffffffffffffff) fchdir(r1) shmctl$IPC_RMID(r0, 0x0) 371.436847ms ago: executing program 7 (id=1993): pwritev(0xffffffffffffffff, &(0x7f0000000080), 0xfffffffffffffe3, 0x99b) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r1 = open(&(0x7f0000000080)='./file0\x00', 0x200, 0x29) ioctl$WSMOUSEIO_SCALIBCOORDS(r1, 0x81205724, &(0x7f0000000100)={0x7ff, 0xa6, 0x2000003, 0x101, 0x80000001, 0x4, 0x10001, 0x10, [{0x0, 0x2890, 0x5, 0x71002}, {0x6, 0x9, 0x8000, 0x3}, {0x104, 0xf88, 0xfffffffc, 0x9}, {0x4, 0x800, 0x8007, 0x7}, {0x401, 0x3, 0x2800, 0x7}, {0x5, 0x650, 0x3, 0x9f}, {0xce1, 0xffffffff, 0x4f4, 0xfffd}, {0xa, 0x803, 0x8, 0x8}, {0x2, 0x5, 0x5, 0x9}, {0x6a72, 0x8009, 0x1000, 0x4}, {0x7, 0x10001, 0x2, 0x3}, {0x408, 0x5, 0x8, 0x6}, {0x80000000, 0x7, 0x4, 0x1}, {0x29a71717, 0xfffffffd, 0x60, 0x6}, {0x1000c, 0x5, 0x9, 0x4}, {0x0, 0x1, 0xfff, 0x30004}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r1, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r1, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) read(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r2, &(0x7f0000001440)={0x0, 0x1}, 0x10, 0x0) close(r2) recvmsg(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)=""/159, 0x9f}], 0x1, 0x0}, 0x1000) sysctl$hw(&(0x7f0000001a80)={0x6, 0xc}, 0x2, &(0x7f0000001ac0)="d7ff9708", &(0x7f0000001b80)=0x4, &(0x7f0000001bc0), 0x0) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)=[&(0x7f0000000040)='\x00', &(0x7f0000000080)='\\}$(\x00', &(0x7f00000000c0)='8@\x00', &(0x7f0000000100)='](#}@$[\xd6%*\x00', &(0x7f0000000140)='{\\\x00'], &(0x7f00000003c0)=[&(0x7f00000001c0)='*/\x00', &(0x7f0000000200)='\xe2\x00', &(0x7f0000000240)='%\x01\x00', &(0x7f0000000280)='/+\x00', &(0x7f00000002c0)='\x00', &(0x7f0000000300)='+\x00', &(0x7f0000000340)='-@\x00', &(0x7f0000000380)='(\x00']) 368.334275ms ago: executing program 3 (id=1994): r0 = open(&(0x7f0000000140)='./file0\x00', 0x10686, 0x8) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000000)={'tap', 0x0}) r1 = getpid() mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) sysctl$kern(&(0x7f0000000000)={0x6, 0xb}, 0x5, 0x0, 0x0, 0x0, 0x0) ktrace(&(0x7f0000000280)='./file0\x00', 0x0, 0x40000922, r1) kqueue() r2 = socket(0x18, 0x2, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x2}, 0x10, 0xe) setsockopt(r2, 0x1000000029, 0xd, &(0x7f0000000000), 0x14) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5, 0x10, r0, 0x0) r3 = socket(0x2, 0x3, 0x7) sendmsg$unix(r3, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x404) 367.902394ms ago: executing program 4 (id=1995): r0 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write(r0, &(0x7f0000000000)='t', 0x1) r1 = openat$tty(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) ioctl$TIOCEXCL(r1, 0x2000740d) sysctl$vfs_ffs(&(0x7f0000000040)={0x4, 0x1, 0xd}, 0x3, 0x0, 0x0, 0x0, 0x0) 356.443017ms ago: executing program 6 (id=1996): syz_emit_ethernet(0x4e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "99cea6", 0x18, 0x2c, 0x3, @rand_addr="cb697a653e336f0000005000", @mcast2, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x1, 0x0, 0x6, 0x1, 0x200, 0x0, 0x6, {[@nop]}}}}}}}}) ioctl$TIOCSETA(0xffffffffffffffff, 0xcd50441a, &(0x7f0000000040)={0x9, 0x80000001, 0x7, 0xd7, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00.\x00', 0x3, 0x3}) setrlimit(0x8, &(0x7f0000000040)={0x7, 0x50}) syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) writev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000000)="c886b4d3e0", 0x5}], 0x1) symlink(0x0, &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r0 = socket(0x1, 0x2, 0x0) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) syz_emit_ethernet(0x1f0, &(0x7f0000000800)={@random, @random="3cc059a0d11b", [{[{0x88a8, 0x1, 0x1}], {0x8100, 0x4, 0x1, 0x3}}], {@ipv6={0x86dd, {0x1, 0x6, "f009c1", 0x1b2, 0x4, 0x2, @mcast1, @mcast2, {[@hopopts={0x67, 0x3, '\x00', [@ra={0x5, 0x2, 0x1}, @padn={0x1, 0x1, [0x0]}, @pad1, @pad1, @jumbo={0xc2, 0x4, 0x38}, @jumbo={0xc2, 0x4, 0x5}]}, @routing={0x16, 0x10, 0x0, 0x9, 0x0, [@loopback, @local={0xfe, 0x80, '\x00', 0x0}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x8}, @mcast2, @local={0xfe, 0x80, '\x00', 0x0}, @mcast1, @empty, @mcast1]}, @fragment={0x89, 0x0, 0x4, 0x0, 0x0, 0x13, 0x68}, @hopopts={0x2b, 0x1, '\x00', [@enc_lim={0x4, 0x1, 0x1}, @enc_lim={0x4, 0x1, 0x9}, @enc_lim]}, @hopopts={0xff, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x97}]}], @generic="992cdacb6250501ac833c4719b12764ff636e382a37578d33ac79d50835729333eea181ca901d2964adb2184d2596aff5b24b2567d32902a4a57fa5173863e36af660cdae028abae13f34f3c2f847be500db21ec4e83279534fa34a335424c0a7e4dbdcceaffe81997465cd4a335b92b72144c8ad10ebdd08cd7e7e2fe88c1e90f797b141f9295bfacc69c9ef94cdf0a4f141c9afa30e5dd28b3fc227a66aded1cfbd44c595fb3a8a7928fffc00d256dba86c79a2421ad7a99b3398e87f4c8a9a9ebb6303196e12da6eaf9f8bbd021899063"}}}}}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x10000) sendto$inet6(r1, &(0x7f00000005c0)="346f4ec685aa164969f00e537b52f318eb852700ba21fbd3a3fa10e40eec1bbbf046383c288d1bc090ac8728342433b16371d7c632110fba89907db04d885d5fa6ccde7a7e771bf49292afc8980a0198e0a91ef9910f087c0caf528d493590813cdb640bf64fb20736c02dbcdedfe43a76f98f8928c59809435020cd23e189e4599e898fb7a74ae2e9dd0d29ab0e20b0fb91d6f5fd1258fd4adfecab875c7b2c24e56f6726de2dbf60c9cae9a075690a2711ccbe5ca09a6ab907173ad53cbb5f18b43a8b7acf6c35d639568dc763d4f0efbe71c5b91af321628d57cb4640cadfbeabd07aa0fa4161d1f5b96592b55e0cc313", 0xf2, 0x3, &(0x7f00000000c0)={0x18, 0x0, 0xdc, 0xd}, 0xc) writev(r3, &(0x7f0000000200)=[{&(0x7f0000000100)="19", 0x3a4e1e905c56cdb7}], 0x1) writev(r3, &(0x7f0000000a80)=[{&(0x7f0000000240)='Q', 0x1}], 0x1) readv(r2, &(0x7f0000000540)=[{&(0x7f0000000740)=""/145, 0x81}, {&(0x7f0000000140)=""/152, 0xfffffee8}, {&(0x7f0000000300)=""/213, 0xd9}, {&(0x7f0000000400)=""/142, 0x8e}, {&(0x7f00000004c0)=""/108}], 0x4) execve(0x0, 0x0, 0x0) r4 = kqueue() kevent(r4, &(0x7f0000000200)=[{{r0}, 0xfffffffffffffffe, 0x80, 0x2, 0x7, 0x1}, {{}, 0xffffffffffffffff, 0x54, 0x0, 0x242f, 0x22}, {{}, 0xfffffffffffffff9, 0x4, 0xfffff, 0xfffffffffffffffa, 0x1000}, {{}, 0xfffffffffffffffe, 0x42, 0x1, 0x4, 0xfffffffffffffff8}, {{}, 0xfffffffffffffffa, 0x24, 0x20000003, 0x4, 0x2}, {{}, 0xfffffffffffffff9, 0x8, 0x1, 0x80000000, 0x4}], 0x96, &(0x7f0000000540), 0xfffb4161, 0x0) r5 = open$dir(&(0x7f0000000000)='.\x00', 0x80, 0x80) mknodat(r5, &(0x7f00000002c0)='./file0\x00', 0x2000, 0x3361) r6 = open(&(0x7f0000000480)='./file0\x00', 0x200, 0x0) writev(0xffffffffffffffff, &(0x7f0000000700)=[{&(0x7f00000001c0)="fd2066c3dd9b89e3bde397bcec45d4246b6a8b64f82c61f11d547f7ad5c81bd193656bb66cce5018779983f123a2b7b4a5309cd3f3593bf09f7524c4c465b4a1a16977f7a2039fd985a9589594191efbb1", 0x51}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0x4506) r7 = open(&(0x7f00000002c0)='./bus\x00', 0x2, 0x0) ioctl$WSMUXIO_ADD_DEVICE(r7, 0x80085761, &(0x7f00000001c0)={0x1, 0x1}) r8 = getpid() fcntl$lock(r0, 0x8, &(0x7f0000000080)={0x1, 0x0, 0x400, 0x5, r8}) ioctl$VNDIOCCLR(r6, 0xc0a86b05, &(0x7f0000000200)={0x0, 0x10000, 0x0}) ioctl$TIOCSETA(r1, 0xcd604404, &(0x7f0000000040)={0x10000001, 0x2, 0x87a, 0x2f, "2800180000020002000000000068ab5ade800600", 0x6, 0x2}) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) 265.49478ms ago: executing program 0 (id=1997): sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b1000504000004000000000007", 0xd, 0x4, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) r0 = socket(0x11, 0x3, 0x0) setsockopt$sock_int(r0, 0xffff, 0x40, &(0x7f0000000240)=0xff, 0x4) sendto$unix(r0, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42118000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x406, 0x0, 0x0) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) ioctl$TIOCSETA(r1, 0xc0084427, &(0x7f00000004c0)={0x4e, 0x403, 0x7, 0x2, "45600000000600070000070000000000000200", 0x5, 0x44}) 265.072075ms ago: executing program 4 (id=1998): mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x2000, 0x4800) r0 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) r1 = open(&(0x7f0000000140)='./file0\x00', 0x78e, 0x8) r2 = socket(0x18, 0x2, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat(r3, &(0x7f00000000c0)='./file0\x00', 0x1, 0x128) ioctl$FIONBIO(r2, 0x8004667e, &(0x7f0000000200)=0x7) ioctl$FIOASYNC(r2, 0x8004667d, &(0x7f0000000140)=0x9) connect$unix(r2, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) r4 = open(&(0x7f00000001c0)='./file0\x00', 0x8000, 0x31) syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "15f2ff", 0x0, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast2}}}}) write(r4, &(0x7f00000004c0)="b9", 0x1) mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x5, 0x10, r1, 0x0) ioctl$TIOCFLUSH(r0, 0xc0107004, &(0x7f0000000080)=0x7f) getpgrp() getuid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$sock_cred(r5, 0xffff, 0x1022, &(0x7f0000000580)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, r6}}) r7 = socket(0x2, 0x3, 0xff) setsockopt$sock_int(r7, 0xffff, 0x1001, &(0x7f0000000100)=0x20000, 0x4) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="00001c00ac14"]) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5) connect$unix(r7, &(0x7f0000000000), 0x10) write(r7, &(0x7f0000000240)="14bdfa5d1d34e2fecb284a6498307dcda9aec43050036123339a346f737850551408753f95b7688ad4c4e1dd5489e7bafc58d3e5823757ae8b630719ef187ccad995f13dbe19a6dd4e6902bd8297b0799b426aabe9fad9db6996571c6d9f8bb5d542c2148aa42be940970fe88d34d8f99afe7e7820237400000000008000000100"/138, 0xfc7e) setrlimit(0x8, &(0x7f0000000340)={0x9, 0x4000000000054}) r8 = syz_open_pts() close(r8) syz_open_pts() 264.205505ms ago: executing program 7 (id=1999): sysctl$net_inet_tcp(&(0x7f0000000080)={0x4, 0x18, 0x6, 0x9}, 0x4, &(0x7f0000000300)="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", &(0x7f00000002c0)=0x210, 0x0, 0x0) (async, rerun: 32) r0 = socket(0x18, 0x1, 0x0) (rerun: 32) setsockopt(r0, 0x1000000000029, 0x3e, &(0x7f0000000040)="00fb534f", 0x4) (async) getsockopt(r0, 0x29, 0x33, 0x0, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000000)=ANY=[@ANYRES16]) 251.627288ms ago: executing program 0 (id=2000): r0 = open(&(0x7f0000000180)='./file0\x00', 0x80000000000206, 0x160) getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000000000), &(0x7f0000000100)=0xc) setrlimit(0x1, &(0x7f0000000040)={0xfffffffffffffffb, 0x2}) ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9f, 0x0) truncate(&(0x7f00000000c0)='./file0\x00', 0x6001000004) truncate(&(0x7f0000000080)='./file0\x00', 0x40002ffff) 243.981549ms ago: executing program 4 (id=2001): r0 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000000), 0x8009, 0x0) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0x3ff, [{&(0x7f0000558000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil}, {&(0x7f0000340000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0xffffffffffffff7e}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f00006b9000/0x1000)=nil, 0x80000000}, {&(0x7f0000026000/0x3000)=nil, &(0x7f00000d6000/0x1000)=nil, 0xffffffffffffffff}, {&(0x7f0000171000/0x4000)=nil, &(0x7f00005ff000/0x4000)=nil, 0x401}, {&(0x7f000060b000/0x2000)=nil, &(0x7f00002bb000/0x2000)=nil, 0x80000002}, {&(0x7f0000338000/0x4000)=nil, &(0x7f0000000000/0x400000)=nil, 0x8}, {&(0x7f000077c000/0x1000)=nil, &(0x7f00000ce000/0x4000)=nil, 0x5}, {&(0x7f000045d000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x6ba}, {&(0x7f0000132000/0x2000)=nil, &(0x7f00003f2000/0x2000)=nil, 0x7}, {&(0x7f000064b000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x5}, {&(0x7f0000008000/0x3000)=nil, &(0x7f0000688000/0x4000)=nil, 0x3}, {&(0x7f0000196000/0x3000)=nil, &(0x7f000076c000/0x4000)=nil, 0xa}, {&(0x7f000024b000/0x2000)=nil, &(0x7f000079e000/0x4000)=nil, 0xffffffffbffffff9}, {&(0x7f00004d0000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x5e04}, {&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000001000/0x800000)=nil, 0x6}], './bus\x00', 0x3}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket(0x800000018, 0x2, 0x0) getsockopt$sock_int(r1, 0xffff, 0x1025, &(0x7f0000000040), &(0x7f0000000100)=0x4) ioctl$WSKBDIO_GETDEFAULTKEYREPEAT(r0, 0x400c570a, &(0x7f0000000040)) ioctl$WSKBDIO_SETMAP(r0, 0x8010570e, 0xffffffffffffffff) 225.078505ms ago: executing program 1 (id=2002): r0 = socket(0x11, 0x10000000000003, 0x0) sendto$unix(r0, &(0x7f00000000c0)="b10005130000040005000000070000003300080000a11800fef96ec0c72fd3357ae30200004e3039d2d236acf20b7804be3816499104000000882b297be1aa0500000051e2f0ad09000000000000009b672f4d335c223e7d0c032bfa896443a42121000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b1257afa8c500002002fbfe0c2300008abfba3500000008e371a3f8343712051eeab71d1889e000"/177, 0xb1, 0x0, 0x0, 0x0) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) 224.599513ms ago: executing program 7 (id=2003): sysctl$net_inet_carp(&(0x7f0000000040)={0x4, 0x2, 0x6, 0x4}, 0x4, 0x0, 0x0, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) munmap(&(0x7f0000001000/0x2000)=nil, 0x2000) (async) sendmsg$unix(0xffffffffffffffff, &(0x7f0000002a40)={&(0x7f0000000000), 0x10, 0x0}, 0x0) (async) kevent(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x80000000, 0x3}) r0 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) ioctl$VMM_IOC_CREATE(r0, 0xc2585601, &(0x7f00000002c0)={0x10, 0x9, [{&(0x7f00006ee000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x1}, {&(0x7f00003cc000/0x2000)=nil, &(0x7f0000164000/0x2000)=nil, 0x8c}, {&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0xff}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000731000/0x3000)=nil, 0x8}, {&(0x7f00003da000/0x1000)=nil, &(0x7f00000e8000/0x4000)=nil, 0x731}, {&(0x7f0000026000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0xc}, {&(0x7f0000ffd000/0x3000)=nil, &(0x7f00002bd000/0x6000)=nil, 0xffffffffffff28fb}, {&(0x7f00006d4000/0x3000)=nil, &(0x7f000078a000/0x1000)=nil, 0x102}, {&(0x7f000002f000/0x4000)=nil, &(0x7f00005c6000/0x2000)=nil, 0x8}, {&(0x7f000028e000/0x3000)=nil, &(0x7f00000dc000/0xa000)=nil, 0x3}, {&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000369000/0x2000)=nil, 0x9}, {&(0x7f000006d000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0xce}, {&(0x7f000001e000/0x3000)=nil, &(0x7f00001c2000/0x3000)=nil, 0x6}, {&(0x7f0000296000/0x1000)=nil, &(0x7f0000460000/0x4000)=nil, 0x80000001}, {&(0x7f000006c000/0x2000)=nil, &(0x7f00000ab000/0x2000)=nil, 0x2}, {&(0x7f0000587000/0x3000)=nil, &(0x7f0000079000/0x2000)=nil, 0x2}], './file0\x00', 0x7f}) r1 = socket(0x2, 0x2, 0x0) r2 = socket$inet(0x2, 0x3, 0x0) (async) munmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000) (async) setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) (async) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f00003d4000/0x13000)=nil, 0x13000, 0x6) (async) dup2(r1, r2) setsockopt$inet_opts(r2, 0x0, 0x9, &(0x7f0000000240)="ea00000100000000", 0xc) (async) sendmsg$unix(r1, &(0x7f0000002a40)={0x0, 0xffffffffffffff89, 0x0, 0x6e}, 0x0) madvise(&(0x7f0000000000/0x14000)=nil, 0x14000, 0x4) (async) syz_emit_ethernet(0x1000e, &(0x7f00000001c0)=ANY=[]) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001500)) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) (async) munmap(&(0x7f000000e000/0x400000)=nil, 0x400000) open(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x400, 0xa1) (async) mmap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x1011, 0xffffffffffffffff, 0x0) (async) fcntl$setown(r3, 0x6, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) (async) symlinkat(&(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0) (async) getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000340), 0xc) (async) fcntl$lock(r3, 0x7, 0x0) (async) readlink(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0, 0xffffffffffffff03) 179.115869ms ago: executing program 1 (id=2004): ioctl$BIOCSRTIMEOUT(0xffffffffffffffff, 0x8010426d, &(0x7f0000000000)={0x3, 0xffff}) (async) r0 = socket$inet6(0x18, 0x5, 0x2) connect$inet6(r0, &(0x7f0000000040)={0x18, 0x1, 0xf5d, 0xc93b}, 0xc) (async) r1 = socket$unix(0x1, 0x1, 0x0) connect$unix(r1, &(0x7f0000000080)=@abs={0x1, 0x0, 0x0}, 0x8) (async) mquery(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4, 0x10, r0, 0x7) (async) r2 = openat(r0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x42) ioctl$WSMOUSEIO_SETPARAMS(r2, 0x80105728, &(0x7f0000000140)={&(0x7f0000000100)=[{0x42, 0x4}, {0x25, 0x5d6c}, {0x0, 0x7}, {0x47, 0x1}, {0x8c, 0xffffffff}, {0x42, 0x7}, {0x88, 0x4}], 0x7}) (async) ioctl$VNDIOCSET(r2, 0xc0384600, &(0x7f0000000200)={&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f00000001c0)='./file0\x00', 0x8}) (async) mknodat(r2, &(0x7f0000000240)='./file0\x00', 0x100, 0x4) ioctl$VNDIOCSET(r2, 0xc0384600, &(0x7f0000000300)={&(0x7f0000000280)='./file0\x00', 0x3, &(0x7f00000002c0)='./file0\x00', 0x8}) (async) r3 = open(&(0x7f0000000340)='./file0\x00', 0x10000, 0x0) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)}], 0x1) (async) connect$inet6(r0, &(0x7f0000000400)={0x18, 0x1, 0x60}, 0xc) (async) fchmod(r1, 0x100) (async) ioctl$BIOCGDLTLIST(r2, 0xc010427b, &(0x7f0000000480)={0x7, &(0x7f0000000440)=[0x60000000, 0x4, 0xb8, 0x7, 0x9, 0x54f, 0x400]}) (async) acct(&(0x7f00000004c0)='./file0\x00') (async) recvfrom(r1, &(0x7f0000000500)=""/46, 0x2e, 0x41, &(0x7f0000000540)=@un=@abs={0x1, 0x0, 0x1}, 0x8) (async) r4 = syz_open_pts() ioctl$TIOCSWINSZ(r4, 0x80087467, &(0x7f0000000580)={0x816, 0x6, 0x3, 0x5}) (async) r5 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f00000005c0), 0x200, 0x0) ioctl$WSDISPLAYIO_DELFONT(r5, 0x8058574f, &(0x7f0000000600)={'./file0\x00', 0x5, 0x10000, 0x800, 0x1, 0x8, 0x8, 0x9, 0x1, 0x2, 0x7fb4, 0x2}) (async) ioctl$WSDISPLAYIO_USEFONT(r5, 0x80585750, &(0x7f0000000680)={'./file0\x00', 0x2, 0x8, 0x10001, 0x1, 0x3, 0x80000001, 0x8, 0x3, 0x0, 0x920, 0xffffffffffffff81}) openat$tty(0xffffffffffffff9c, &(0x7f0000000700), 0x40, 0x0) (async) fcntl$setflags(r1, 0x2, 0x1) (async) mknod(&(0x7f0000000740)='./file0\x00', 0x8000, 0x7f) lseek(r4, 0x8, 0x1) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000780), 0x80, 0x0) dup2(r6, r3) (async) mkdir(&(0x7f00000007c0)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1) 178.548604ms ago: executing program 7 (id=2005): r0 = syz_open_pts() (async) r1 = socket(0x2, 0x3, 0x2f) close(r1) (async) sendmsg$unix(0xffffffffffffffff, &(0x7f0000002a40)={&(0x7f0000000000), 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0) r2 = socket(0x2, 0x2, 0x0) ioctl$FIONREAD(r2, 0x80206918, &(0x7f00000001c0)) (async) syz_emit_ethernet(0x138, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r2]) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) ktrace(&(0x7f0000000280)='./file0\x00', 0x0, 0x40000928, 0x0) r3 = getuid() (async) getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f00000005c0)={0x0, 0x0, 0x0}, &(0x7f0000000600)=0xc) r5 = getpid() ktrace(&(0x7f0000000280)='./file0\x00', 0x0, 0x40000928, r5) r6 = getuid() chown(&(0x7f0000000040)='./file0\x00', r6, 0xffffffffffffffff) getsockopt$sock_cred(r2, 0xffff, 0x1022, &(0x7f0000000640)={0x0, 0x0, 0x0}, &(0x7f0000000680)=0xc) (async) r8 = getppid() r9 = getuid() setreuid(0xee00, r9) (async) r10 = getegid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000140)=@file={0x0, './file0\x00'}, 0xa, &(0x7f0000000480)=[{&(0x7f0000000200)="6fd19d69c283f34973fece546bd843219f1c2cb69667242cf1d5a232088131ef762f3e6409a81b577d105675cb4c12de5191a3b9b494db5007a271caeeded4e69015061280cd2a674d7fd5e324f9c6e7a2b0a9a91700e825c5b0f7b947efe211c1a9843d4c9b24f551676cd97b47adf9922308bf4e41dc9a9e4355b8c494164c9d8b0adbb3f27edb3bd647b424d64b0f74a2ced20e5a68bf22c8dee783345aca8aba61b3d24c678fc3952c0bee59f42dc92b9041697381c2ac93526630331ca6c7afccb3", 0xc4}, {&(0x7f0000000300)="b66191773850935913e75c0b684a93b016686bcaa904de6882661ea1dafdca88b26498d4aae3b8a9f9dc63993a842d9935df7342c48322dc0e65c9530bb922922910b4528904fa8bfaea0edca28a5e97bc43742045180b9374adb131552bc426639eea56ae5fb8968ac75cc596b965da89d3fd4bececa251c96baa05cdae81e32c2dcf65e4d678ecdd697fc56357d6d648fb5597a114721fa4465b48cb12909d0ed5c6e68f23a16e088bc4bae41e94", 0xaf}, {&(0x7f00000003c0)="ed83a48b469107bff9244c5e396aa164b6b98f84fe85e262c8fcbfc3af5b86e25e4da8d36b419ead84688564b518eaf80179f50565399a3b2c6e4620f21e72e8ae1058520c443129694e1e680e0cd52bdd1283aad623c5a5ecdc58d6743c910fe3e4b7d43abca0e7db71ec7dab", 0x6d}, {&(0x7f0000000180)="1d3b40e1693a9af7b9aa1ae9a431791585b97d", 0x13}, {&(0x7f0000000440)="49a72db34dc2638e5c20ef8c48f328721db27782aad3", 0x16}], 0x5, &(0x7f00000006c0)=[@rights={0x18, 0xffff, 0x1, [r0]}, @cred={0x20}, @rights={0x30, 0xffff, 0x1, [0xffffffffffffff9c, r2, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, r2]}, @rights={0x30, 0xffff, 0x1, [r0, r0, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, r0, r2]}, @cred={0x20, 0xffff, 0x0, 0x0, r3, r4}, @cred={0x20, 0xffff, 0x0, r5, r6, r7}, @cred={0x20, 0xffff, 0x0, r8, r9, r10}, @rights={0x20, 0xffff, 0x1, [r1, r1, r1]}, @rights={0x20, 0xffff, 0x1, [r1, r0, r2]}, @rights={0x18, 0xffff, 0x1, [r2]}], 0x150, 0xc}, 0x9) (async) socket$inet(0x2, 0x3, 0x102) (async) sendmsg$unix(r1, &(0x7f0000002a40)={0x0, 0x0, 0x0, 0x34}, 0x0) (async) ioctl$TIOCSTAT(r0, 0x20007465, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0xfffc, 0x0, 0x0, 0x1, 0x0, @broadcast, @multicast2}, @icmp=@mask_reply={0x12, 0x0, 0x0, 0x3ff}}}}}) (async) ioctl$TIOCSETD(r0, 0x8004741b, &(0x7f0000000040)=0x8) (async) execve(0x0, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$TIOCSETD(r0, 0x8004741b, &(0x7f0000000000)=0x8) execve(0x0, 0x0, 0x0) 173.968718ms ago: executing program 1 (id=2006): mknod(&(0x7f0000000040)='./bus\x00', 0x100000000205f, 0x2801) r0 = open(&(0x7f0000000040)='./bus\x00', 0x80, 0x100) select(0x40, &(0x7f0000000180)={0xfffffffffffffffd, 0x44809e9d, 0xfffffffffffffffb, 0xfffffffeffffffff, 0x2000000000000000, 0x210, 0x8, 0x7}, 0x0, 0x0, 0x0) r1 = kqueue() kevent(r1, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x19, 0x0) open(0x0, 0x80000000000206, 0x0) mknod(&(0x7f0000000000)='./file1\x00', 0x2000, 0x285b9a) r2 = open(&(0x7f0000000080)='./bus\x00', 0x40, 0x132) ioctl$FIONBIO(r2, 0x82907003, &(0x7f0000000140)=0x1) ioctl$BIOCSRTIMEOUT(r0, 0xc0307006, &(0x7f0000000080)={0x1, 0x10}) open(&(0x7f0000000280)='./bus\x00', 0x690, 0x0) 172.992961ms ago: executing program 0 (id=2007): mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x1704) (async) ioctl$WSMUXIO_REMOVE_DEVICE(0xffffffffffffffff, 0x80085762, &(0x7f0000000040)={0x1}) r0 = socket(0x18, 0xc003, 0x3a) setsockopt(r0, 0x29, 0x6c, &(0x7f0000000040), 0x4) (async) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0x66, &(0x7f0000000400)={0xfffe, 0x1, 0x1, 0xb87c, 0x8000000}, 0xc) (async) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) 172.365153ms ago: executing program 2 (id=2008): syz_emit_ethernet(0x66, &(0x7f0000000280)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd605f6ad900303a00ffffffc8000000000000000000000000fe800000000000"]) 109.073596ms ago: executing program 0 (id=2009): pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x88f099d874af5d04) unlinkat(r0, 0x0, 0x0) syz_open_pts() mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r1 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x17, 0x2100007, 0x101, 0x80000001, 0x80000001, 0x10001, 0x10, [{0x0, 0x8, 0x4, 0x71000}, {0x8, 0x9, 0x8, 0xfffffff9}, {0x8, 0xf86, 0x0, 0x6}, {0x1, 0x800, 0x8007}, {0x401, 0x200726, 0x2800, 0x7}, {0x2, 0xa, 0x3, 0x99}, {0xce1, 0x3, 0x4f8, 0x6d}, {0x6, 0x300, 0x54, 0x8}, {0x2, 0x82, 0x5, 0x9}, {0x4, 0x8001, 0xd1b, 0x88}, {0x1cc, 0x10001, 0xc, 0x3}, {0x7ff, 0x9, 0x0, 0x9}, {0xb8c, 0x4, 0x8, 0x4}, {0x29a71717, 0x7f, 0x1, 0x6}, {0xc, 0x1ff, 0x5}, {0x8000, 0x1, 0x1002, 0x30004}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r1, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) r2 = shmget(0x3, 0x1000, 0x6, &(0x7f0000ffd000/0x1000)=nil) shmat(r2, &(0x7f00006c9000/0x4000)=nil, 0x2000) ioctl$VNDIOCSET(r1, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffe, 0x0}) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r3, 0x0, 0x200000000000c, &(0x7f0000000000)="ea00000100000000", 0x8) syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[@ANYBLOB="69e1629b6174391e7dd7a2d786dd60b6000000302c03fe697a653e336f000000500000000000ff02000000000000000d00000000000111000003"]) 108.63746ms ago: executing program 2 (id=2010): ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0xf, 0x40, {[0x1, 0x400000000, 0x7, 0x100000000, 0x7, 0xf3e5, 0xdf5c, 0xfffffffffffffffe, 0x0, 0x2eff, 0xfffffffffffffffc, 0x9, 0xfffffffffffffff6, 0xa, 0x1, 0x200, 0xffffffffffffffff, 0x100], [0xba, 0x80000001, 0xfffffffffffffffd, 0xe3e, 0x5d, 0x3, 0x1fe, 0x0, 0x2000020000004, 0x9], [0x10000000, 0x2, 0xffffffffffffffff, 0x0, 0xfffffffffffffffc, 0x10fff, 0xffffffff00000000], [0x1, 0x5, 0x7ffffffffffffffc, 0x9, 0xfffffffffffffffd, 0x4], [{0x0, 0xffffffe7, 0x8, 0x7d06}, {0xfffc, 0x2, 0x6, 0x1}, {0x4, 0x900, 0x6b0, 0x83}, {0x3, 0x7, 0x6, 0xffffffffffffffff}, {0x0, 0x3, 0x2, 0x8}, {0x0, 0xfffffffb, 0x9, 0x2fa}, {0x1ffd, 0x30000, 0x7, 0x3}, {0x0, 0x100, 0x0, 0x9}], {0x0, 0x6, 0x5, 0x36f}, {0x3, 0x80000004, 0x1000}}}) r0 = kqueue() kevent(r0, &(0x7f0000000080), 0x96, &(0x7f0000000380), 0xfffb4161, 0x0) 107.140253ms ago: executing program 2 (id=2011): r0 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$FIONREAD(r0, 0xc0106924, &(0x7f0000000100)) socket(0x18, 0x2, 0x0) close(0xffffffffffffffff) setsockopt(0xffffffffffffffff, 0x1000000029, 0x4, &(0x7f0000000040)="03000000", 0x4) syz_open_pts() r1 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000140), 0x782, 0x0) ioctl$SPKRTUNE(r1, 0x20005302, 0x0) sysctl$kern(0x0, 0x0, &(0x7f0000000480)="a7a6", &(0x7f0000000000)=0x2, 0x0, 0x0) sysctl$net_inet_icmp(&(0x7f0000000180)={0x4, 0x2, 0x1, 0x1}, 0x4, &(0x7f0000000200)="f0ea7cd99404b96e7be43c1429ebc325eab41fa923e9118811aa8d3130f43e241537a8b1a45c310e3b0921c4c1cf5021a1f47aec64c4e6c224aa8f4485efa45c1597fab0bbb964e26586d11a2418763dad0766631118d78aa33531dd2f0900acd00418f91dc46bdc7ced48f68ada9c0e4f9a7aaa63ac8e145eba50b97b6cc5ec234d2f0bb0efae9bee85853fa1432d08dccfadb23962ff952fca7ac9c54c3abf60017693", &(0x7f00000002c0)=0xa4, &(0x7f0000000300)="05b7f801dd15c66bd56694d7ab1619ca24ebeb28ba3c53e32ca8ce0aa2adfc6c63312571055a8c0bf380b4f73392c4bc852b5a979ec7242354a346e4786b192f3a296a5e90df47e96251f7433611770c90cac05f5410e55f416aac483fce4d693a364e29f15b37d0486782703eeb91590b8fe6d76804fa15b035a5a83b278e0d80017a115d650009a1a5866604de4ea234f2fe944e54ccf548f3c95ea9c24eda2ace", 0xa2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_open_pts() bind(r0, &(0x7f0000000080)=@in6={0x18, 0x2, 0x6, 0x8}, 0xc) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1000000001ffffc}) getsockopt$SO_PEERCRED(r0, 0xffff, 0x1022, &(0x7f00000003c0)={0x0}, 0xc) fcntl$lock(r1, 0x7, &(0x7f0000000400)={0x2, 0x0, 0x10, 0x6, r2}) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r3, 0x0, 0x200000000000a, &(0x7f0000000000)="ea00005c00000000", 0x1) ioctl$WSMUXIO_REMOVE_DEVICE(r0, 0x80085762, &(0x7f00000001c0)={0x1, 0x86b0c9c}) 106.969361ms ago: executing program 4 (id=2012): msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x84, 0x1b}, 0x7297, 0x3d3, 0xffffffffffffffff, 0x0, 0x8000000000000000, 0x9, 0x0, 0xffe}) r0 = socket(0x18, 0x2, 0x0) close(r0) r1 = socket(0x800000018, 0x1, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0x100000000000000}) close(0xffffffffffffffff) bind$unix(r1, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) connect$unix(r0, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) r2 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) write(r2, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) ioctl$DIOCMAP(r2, 0xc0106477, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', r0, 0x2}) r3 = socket(0x800000018, 0x1, 0x0) r4 = getgid() setegid(r4) bind$unix(r3, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) 106.539441ms ago: executing program 3 (id=2013): r0 = socket$inet(0x2, 0x3, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r1, 0x0, 0x1021, &(0x7f0000000000)="287ca27f", 0x4) setsockopt$inet_opts(r0, 0x0, 0x64, &(0x7f0000000180)="01000000", 0x4) shmat(0x0, &(0x7f0000f11000/0x1000)=nil, 0x1000) ioctl$FIONREAD(r0, 0xc0287533, &(0x7f0000000440)) syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffff000000000000000000000000ffff"]) r2 = socket(0x800000018, 0x3, 0x0) bind$unix(r2, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0x1604) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0e99db6de761f86, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x10, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x110) r3 = socket$unix(0x1, 0x5, 0x0) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r4, 0x0, 0x200100000001d, &(0x7f0000000000), 0x4) getsockopt$sock_int(r3, 0xffff, 0x800, &(0x7f0000000100), &(0x7f0000000140)=0x4) 23.596819ms ago: executing program 3 (id=2014): openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x10, 0x0) r0 = socket(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1001, &(0x7f0000000100)=0x20000, 0x4) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) r1 = shmget$private(0x0, 0xc00000, 0x126, &(0x7f0000400000/0xc00000)=nil) shmctl$IPC_RMID(r1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) connect$unix(r0, &(0x7f0000000000), 0x10) write(r0, &(0x7f0000000240)="14bdfa5d1d34e2fecb284a6498307dcda9aec43050036123339a346f737850551408753f95b7688ad4c4e1dd5489e7bafc58d3e5823757ae8b630719ef187ccad995f13dbe19a6dd4e6902bd8297b0799b426aabe9fad9db6996571c6d9f8bb5d542c2148aa42be940970fe88d34d8f99afe7e7820237400000000008000000100"/138, 0xfc7e) r2 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mknodat(r2, &(0x7f0000000040)='./file0\x00', 0x2000, 0x3361) ktrace(&(0x7f0000000100)='./file0\x00', 0x1, 0xd00, 0x0) 18.711687ms ago: executing program 5 (id=2015): pipe(&(0x7f0000000100)={0xffffffffffffffff}) fcntl$setstatus(r0, 0x4, 0xc0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) ioctl$WSKBDIO_GETMAP(r1, 0x80047476, &(0x7f0000000100)={0x0, 0x0}) r2 = fcntl$getown(r1, 0x5) r3 = socket(0x11, 0x3, 0x0) setrlimit(0x8, &(0x7f0000000040)={0x7, 0x50}) r4 = syz_open_pts() close(r4) syz_open_pts() ioctl$TIOCSETAW(r4, 0x802c7415, &(0x7f0000000000)={0x1, 0x1, 0xffffffff, 0xfffffff5, "120104784af00a56d864d3c3a3f4d3c000", 0x5, 0xfffffffc}) r5 = socket(0x18, 0x4, 0x0) execve(0x0, &(0x7f00000001c0)=[0x0, &(0x7f00000000c0)='/dev/speaker\x00'], 0x0) r6 = socket(0x1, 0x2, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa02000000000000000003069d9078ffffffffffffffff070b1eac1400aa7f000001000e009078000b0008000003fc000200040000000908e3b6381c89c5774d09fb3a83d5d571ed5a3a6782d51a10884997e7c04b7f4ade509c446ef77bfe03"]) ioctl$FIONREAD(r6, 0xc0106924, &(0x7f00000001c0)) r7 = kqueue() kevent(r7, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) ioctl$FIONREAD(r5, 0x802069de, &(0x7f00000001c0)) writev(r4, &(0x7f0000000400)=[{&(0x7f0000000440)="d126ab9b5b57b110acb13c1c0d5aed1f576511ba2ff570d1bd75ce8a03e122196adf24e7729eaac0", 0x28}], 0x1) sendto(r3, 0x0, 0x0, 0x8, &(0x7f0000000140)=@in6={0x18, 0x2, 0x8, 0x9fe8}, 0xc) fcntl$setown(r0, 0x6, r2) close(r0) bind(r1, &(0x7f0000000280)=@in6={0x18, 0x1, 0x0, 0x9}, 0xc) openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0xfe, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000180)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) r8 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r8, 0x8060693f, &(0x7f0000000100)) 17.752024ms ago: executing program 3 (id=2016): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) read(r1, &(0x7f00000003c0)=""/4096, 0x1000) (async) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x205318) (async, rerun: 64) syz_emit_ethernet(0x4e, &(0x7f00000002c0)=ANY=[@ANYBLOB="fffffffffffffcf05278ffffffff100087dd6099cea600182c03cb697a653e226fe39a44e82796d233bcb736cd96a9b0000000500000000000ff02000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="610102009078000601000000"]) (async, rerun: 64) ioctl$TIOCSETA(0xffffffffffffffff, 0xcd50441a, &(0x7f0000000040)={0x9, 0x80000001, 0x7, 0xd7, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00.\x00', 0x3, 0x3}) setrlimit(0x8, &(0x7f0000000040)={0x7, 0x50}) (async) syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) (async) writev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000000)="c886b4d3e0", 0x5}], 0x1) symlink(0x0, &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) r2 = socket(0x1, 0x2, 0x0) r3 = openat$pf(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) (async) r4 = kqueue() kevent(r4, &(0x7f0000000200)=[{{r2}, 0xfffffffffffffffe, 0x80, 0x2, 0x7, 0x1}, {{}, 0xffffffffffffffff, 0x54, 0x0, 0x242f, 0x22}, {{}, 0xfffffffffffffff9, 0x4, 0xfffff, 0xfffffffffffffffa, 0x1000}, {{}, 0xfffffffffffffffe, 0x42, 0x1, 0x4, 0xfffffffffffffff8}, {{}, 0xfffffffffffffffa, 0x24, 0x20000003, 0x4, 0x2}, {{}, 0xfffffffffffffff9, 0x8, 0x1, 0x80000000, 0x4}], 0x96, &(0x7f0000000540), 0xfffb4161, 0x0) (async) ioctl$TIOCSETA(r3, 0xcd604404, &(0x7f0000000040)={0x10000001, 0x2, 0x87a, 0x2f, "2800180000020002000000000068ab5ade800600", 0x6, 0x2}) syz_emit_ethernet(0x138, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0]) (async, rerun: 32) open$dir(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) (async, rerun: 32) r5 = openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$TIOCSETA(r5, 0x20004101, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) write(r0, &(0x7f0000003800)=',', 0xffffffce) (async) syz_emit_ethernet(0x2a, &(0x7f00000013c0)={@remote, @broadcast, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x5b620a7609203a43, @random="1b62e0fa6394", @empty, @random="206d0fae85a1", @remote={0xac, 0x14, 0x0}}}}}) poll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x10}], 0x1, 0x887b) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (async, rerun: 64) r6 = socket$unix(0x1, 0x2, 0x0) (rerun: 64) bind(r6, &(0x7f0000000040)=@in={0x2, 0x1}, 0xc) r7 = semget(0x0, 0x1, 0x281) semop(r7, &(0x7f0000000180)=[{0x0, 0x7, 0x1000}], 0x1) semctl$SETVAL(r7, 0x0, 0x8, 0x0) (async) execve(0x0, 0x0, 0x0) 676.584µs ago: executing program 3 (id=2017): getpeername$inet6(0xffffffffffffff9c, &(0x7f0000000300), &(0x7f0000000340)=0xc) r0 = open(&(0x7f0000000080)='./file0\x00', 0x200, 0x29) ktrace(&(0x7f0000000080)='./file0\x00', 0x4, 0x20000000, 0x0) (async) r1 = getpid() ktrace(0x0, 0x2, 0x40000802, r1) (async) recvmmsg(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f00000001c0)=""/254, 0xfe}], 0x2, 0x0}, 0xffffffff}, 0x10, 0xc3, 0x0) (async) r2 = socket(0x18, 0x4001, 0x0) (async) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) (async) r3 = open$dir(&(0x7f0000000300)='.\x00', 0x80, 0x4a) setpgid(r1, r1) (async) setgid(0xffffffffffffffff) (async) setgroups(0x0, 0x0) (async) fchmod(r3, 0xf3) (async) setuid(0xffffffffffffffff) link(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000440)='./file0\x00') (async) ftruncate(r2, 0x0) (async) openat$pf(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x8) (async) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) unveil(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='W\x00') (async) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x2) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) ioctl$VNDIOCSET(r0, 0xc0104401, &(0x7f00000003c0)={0x0, 0x2c5, 0x0, 0xffffff3c}) symlink(&(0x7f0000000140)='./file0/file0\x00', &(0x7f00000002c0)='.\x00') (async) openat$klog(0xffffffffffffff9c, &(0x7f0000000380), 0x10000, 0x0) (async) open$dir(&(0x7f0000000040)='./file0/file0/../file0\x00', 0x200, 0x141) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) (async) setsockopt(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)="ebffff132f", 0x5) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) 463.414µs ago: executing program 0 (id=2018): ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r0 = socket(0x18, 0x3, 0x50) ioctl$FIONREAD(r0, 0x8020699f, &(0x7f00000001c0)) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$PCIOCREAD(r1, 0xc0107002, &(0x7f0000000040)) 0s ago: executing program 0 (id=2019): open(&(0x7f0000000040)='./file1/file0\x00', 0x8, 0x0) (async) mkdir(&(0x7f0000000100)='./file1/file0\x00', 0x284) (async) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0x1, [{&(0x7f0000695000/0x3000)=nil, &(0x7f00003cf000/0x1000)=nil, 0xd}, {&(0x7f0000ff6000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil}, {&(0x7f0000f08000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x3}, {&(0x7f0000693000/0x3000)=nil, &(0x7f0000698000/0x3000)=nil}, {&(0x7f0000422000/0x4000)=nil, &(0x7f000069a000/0x1000)=nil, 0x5}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff4000/0xc000)=nil, 0x91e8}, {&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000c44000/0x2000)=nil, 0x5}, {&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff5000/0x4000)=nil, 0x4}, {&(0x7f0000335000/0x4000)=nil, &(0x7f0000cc4000/0x2000)=nil, 0x7f}, {&(0x7f0000d10000/0x1000)=nil, &(0x7f0000693000/0x1000)=nil, 0x80080000000000}, {&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c0c000/0x2000)=nil, 0x8000002ff}, {&(0x7f000000e000/0x4000)=nil, &(0x7f00000f4000/0x1000)=nil, 0x7fffffff}, {&(0x7f00000e0000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil}, {&(0x7f00002e6000/0x3000)=nil, &(0x7f00000dd000/0xa000)=nil, 0x10001}, {&(0x7f0000394000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0xfffffffffffffffc}, {&(0x7f0000265000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x3}], './file0\x00'}) (async) socket(0x2, 0x1, 0x0) (async) chroot(&(0x7f0000000000)='./file0\x00') (async) r0 = syz_open_pts() (async, rerun: 64) mknod(0x0, 0x2000, 0x0) (async, rerun: 64) open(&(0x7f0000000040)='./bus\x00', 0x200, 0x1a1) (async) syz_emit_ethernet(0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="8f6f77ede655ffffffffffff86dd6000000000383a0000000000000200000000000000000000fe8000000000000000000000000000aa02009078000000006000930000003a88fe8000000000000000000000000000aa00001300000000000000ffff000000008c"]) ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000340)={0x5, 0x1, 0xfffffffe, 0x966b, "ff14e7130b1e586ca6294000", 0x40, 0x3effd}) (async) ioctl$WSMOUSEIO_SETPARAMS(0xffffffffffffffff, 0x80105728, &(0x7f0000000000)={&(0x7f0000000240)=[{0x22, 0x7}], 0x1}) (async) ioctl$TIOCSTOP(r0, 0x2000746f) (async, rerun: 64) mknod(&(0x7f0000000340)='./file0\x00', 0x2000, 0x1e5f) (async, rerun: 64) r1 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) ioctl$WSMOUSEIO_SCALIBCOORDS(r1, 0x81205724, &(0x7f0000000100)={0x7fe, 0x16, 0x3, 0x5fe, 0x80000004, 0x80008003, 0x10001, 0x10, [{0x6, 0x2, 0x4, 0x70fff}, {0x3, 0x8, 0x8, 0x8001}, {0x8, 0xf86, 0x3, 0x3b}, {0x8000001, 0x80c, 0x5}, {0x5, 0x4, 0x2800, 0x3}, {0x2, 0x2, 0xfffffffe, 0x99}, {0xa1, 0x1, 0x6, 0x2000006d}, {0x106, 0x1803, 0x14, 0x8}, {0x0, 0x80, 0x5, 0xb}, {0x0, 0x7fff, 0xd1b, 0xe31}, {0x1ce, 0x4, 0x406, 0x3}, {0x7ff, 0xb, 0x6, 0x9}, {0x400, 0x4, 0x40000008, 0x4}, {0x29a71717, 0xfffefffa, 0x1, 0x6}, {0xc, 0x7, 0x3, 0x7fff}, {0x0, 0x1, 0x1002, 0x3}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r1, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) (async) ioctl$VNDIOCSET(r1, 0x80044403, &(0x7f00000001c0)={0x0, 0x8, 0x0}) (async, rerun: 64) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (async, rerun: 64) r2 = open(&(0x7f0000000200)='./file0\x00', 0x200, 0x145) fcntl$lock(r2, 0x8, &(0x7f0000000080)={0x3, 0x0, 0x0, 0x100000001}) (async, rerun: 64) syz_emit_ethernet(0xe, 0x0) (rerun: 64) symlink(0x0, &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) r3 = openat$pf(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) r4 = kqueue() kevent(r4, &(0x7f0000000200)=[{{}, 0xfffffffffffffffa, 0x0, 0x20000003, 0x3, 0x2}, {{}, 0xfffffffffffffff9, 0x8, 0x1, 0x7ffffffc, 0x4}], 0x16, &(0x7f0000000540), 0xfffb4161, 0x0) ioctl$TIOCSETA(r3, 0xcd604404, &(0x7f0000000040)={0x10000001, 0x2, 0x87a, 0x2f, "2800180000020002000000000068ab5ade800600", 0x6, 0x2}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.235' (ED25519) to the list of known hosts. pckbd_enable: command error 6-#2%!4%: 56--!0 &!),%$: 12 pppx: unable to set addresses for pppx1, error=17 OpenBSD/amd64 (Amnesiac) (tty00) login: pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pppx: unable to set addresses for pppx1, error=17 pckbd_enable: command error OpenBSD/amd64 (Amnesiac) (tty00) login: pckbd_enable: command error vm_create: uvm_map failed: 12 denied attempt to set clock back 1771003580 seconds cksum4: out of data denied attempt to set clock back 4195994579 seconds pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error hpP 8R]R @x !/pn 8t` pУn 8t pn 8t pn 8t ppn 8t pe 8tX p@ d^ 8R]knU@DPn!/e 8R]Mib*X@]pas^!/e 8R]xg@k !He 8R]gk !e 8R] gU !e 8R] gV !e 8R]gV !he 8R]gX !he 8R]gX !e 8R]0gk !e 8R]XgX !e 8t p/ (e 8t p@e 8t@ p@He 8t p@e 8t p@{m 8thl@ {m 8R] gB8V@]hшl!/({m 8R]gk !({m 8R]gk !{m 8R]g@^ !{m 8R]gk !H{m 8R]g@X !{m 8R]g`U !h{m 8R]hg^U !h{m 8R]@gk !{m 8R]gV !h{m 8tl5 Ƞ{m 8t`lPȥ{m 8tlPȪ{m 8tl{m 8tlh^ 8tl@ m^ [h2p{m [8;p] [[Ȥ] [[] 8R]-j[U_4 j 8R] 8\<6X@]ds^!/j^ 8R]؍\X !Gl 8R]\X !8Jl 8R]\@X !Ll 8R]H\@k !zst 8R]`\@k !{st 8R]\V !8}st 8R]\X !l^ 8R]P\X !xk^ 8R](\X !g^ 8t@l g^ 8tlM4xf^ 8tlM4e^ 8tumNxa^ 8tumNj 8t(um58j^ [#p8e^ [,p8`^ L]joXh^ 8R](\@@o4 /] 8R] Xd"^@]Xn !/Ml 8R]WdY !Cl 8R]SdY !0j 8R]Rd@Y !j 8R]Qd@V !0j 8R] Qd !malloc(): allocation too large, type = 29, size = 16796513700 pckbd_enable: command error OpenBSD/amd64 (Amnesiac) (tty00) login: pppx: unable to set addresses for pppx1, error=17 pckbd_enable: command error denied attempt to set clock back 134217756 seconds pckbd_enable: command error pppx: unable to set addresses for pppx1, error=17 malloc(): allocation too large, type = 29, size = 16796513700 pckbd_enable: command error vm_create: uvm_map failed: 12 pckbd_enable: command error pckbd_enable: command error malloc(): allocation too large, type = 29, size = 16796513700 OpenBSD/amd64 (Amnesiac) (tty00) login: set $lines = 0 malloc() warning: unknown char in MALLOC_OPTIONS malloc() warning: unknown char in MALLOC_OPTIONS malloc() warning: unknown char in MALLOC_OPTIONS malloc() warning: unknown char in MALLOC_OPTIONS malloc() warning: unknown char in MALLOC_OPTIONS malloc() warning: unknown char in MALLOC_OPTIONS malloc() warning: unknown char in MALLOC_OPTIONS malloc() warning: unknown char in MALLOC_OPTIONS malloc() warning: unknown char in MALLOC_OPTIONS malloc() warning: unknown char in MALLOC_OPTIONS malloc() warning: unknown char in MALLOC_OPTIONS malloc() warning: unknown char in MALLOC_OPTIONS Password: Login incorrect login: show panic malloc() warning: unknown char in MALLOC_OPTIONS malloc() warning: unknown char in MALLOC_OPTIONS malloc() warning: unknown char in MALLOC_OPTIONS malloc() warning: unknown char in MALLOC_OPTIONS malloc() warning: unknown char in MALLOC_OPTIONS malloc() warning: unknown char in MALLOC_OPTIONS Password: Login incorrect login: show registers malloc() warning: unknown char in MALLOC_OPTIONS malloc() warning: unknown char in MALLOC_OPTIONS malloc() warning: unknown char in MALLOC_OPTIONS malloc() warning: unknown char in MALLOC_OPTIONS malloc() warning: unknown char in MALLOC_OPTIONS malloc() warning: unknown char in MALLOC_OPTIONS Password: Login incorrect login: ps malloc() warning: unknown char in MALLOC_OPTIONS malloc() warning: unknown char in MALLOC_OPTIONS malloc() warning: unknown char in MALLOC_OPTIONS malloc() warning: unknown char in MALLOC_OPTIONS malloc() warning: unknown char in MALLOC_OPTIONS malloc() warning: unknown char in MALLOC_OPTIONS Password: Login incorrect show malloc login: malloc() warning: unknown char in MALLOC_OPTIONS malloc() warning: unknown char in MALLOC_OPTIONS malloc() warning: unknown char in MALLOC_OPTIONS malloc() warning: unknown char in MALLOC_OPTIONS malloc() warning: unknown char in MALLOC_OPTIONS malloc() warning: unknown char in MALLOC_OPTIONS Password: Login incorrect machine ddbcpu 0 login: malloc() warning: unknown char in MALLOC_OPTIONS malloc() warning: unknown char in MALLOC_OPTIONS malloc() warning: unknown char in MALLOC_OPTIONS malloc() warning: unknown char in MALLOC_OPTIONS malloc() warning: unknown char in MALLOC_OPTIONS malloc() warning: unknown char in MALLOC_OPTIONS Password: Login incorrect machine ddbcpu 1 login: malloc() warning: unknown char in MALLOC_OPTIONS malloc() warning: unknown char in MALLOC_OPTIONS malloc() warning: unknown char in MALLOC_OPTIONS malloc() warning: unknown char in MALLOC_OPTIONS malloc() warning: unknown char in MALLOC_OPTIONS malloc() warning: unknown char in MALLOC_OPTIONS Password: Login incorrect