last executing test programs: 7.38211551s ago: executing program 6 (id=604): r0 = syz_open_pts() r1 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000140), 0x10, 0x0) ioctl$VNDIOCCLR(r1, 0x80384601, &(0x7f0000000240)={0x0, 0x6, &(0x7f0000000200)='./file0/file0\x00', 0xe}) open(&(0x7f0000000140)='./file0\x00', 0x78e, 0x8) r2 = getpid() setgroups(0x0, 0x0) ktrace(&(0x7f0000000380)='./file0/file0\x00', 0x4, 0x1716, r2) setuid(0xffffffffffffffff) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)) r3 = getpid() open(&(0x7f0000000140)='./file0\x00', 0x78e, 0x101) ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x510, r3) r4 = kqueue() write(r4, 0x0, 0x0) setrlimit(0x1, &(0x7f0000000180)={0x200, 0x95f}) select(0x40, &(0x7f0000000000)={0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000002}, 0x0, &(0x7f0000000080)={0xce, 0x0, 0x0, 0x9, 0x3}, &(0x7f0000000180)) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "4d1f62", 0x10, 0x0, 0x1, @empty, @loopback, {[@fragment={0x2b, 0x0, 0xff, 0x0, 0x0, 0x9, 0x67}], @udp={{0x2, 0x3, 0x8}}}}}}}) ioctl$BIOCSETWF(0xffffffffffffff9c, 0x80104277, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{}, {0x3, 0x0, 0x0, 0x44}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) select(0x40, &(0x7f0000000040)={0x2000000002, 0x81, 0x7, 0x8000001, 0xffffffffffffffa5, 0x5, 0x3, 0xaeb3}, &(0x7f0000000080)={0xde4, 0x7, 0x0, 0x4, 0x6, 0x6, 0x0, 0x4}, &(0x7f00000000c0)={0x2, 0xac1e, 0x0, 0x89b7, 0x9, 0x7c, 0x85, 0x64}, &(0x7f0000000100)={0x3, 0x86c4}) select(0x40, &(0x7f0000000180)={0x101, 0x4, 0x9, 0xf, 0x0, 0x3, 0x4, 0x4}, &(0x7f00000001c0)={0x7, 0x1, 0xffffffff, 0x9, 0xfff, 0x0, 0x8, 0x6}, &(0x7f0000000280)={0x9, 0x4, 0x6c8, 0x5, 0x3fc8, 0x8, 0xffffffffffffff24, 0x7fff}, &(0x7f00000002c0)={0x6, 0x2}) ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000340)={0x7, 0x0, 0xfffffffe, 0xfffffffc, "ff14e7130b1e586ca6294000", 0x40, 0x3effc}) syz_open_pts() ioctl$TIOCSTAT(r0, 0x20007465, 0x0) 7.138100036s ago: executing program 1 (id=610): select(0x40, &(0x7f0000000000)={0xfffffffffffffffd, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x0) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x2, 0x3, 0x0) shutdown(r0, 0x0) r1 = socket(0x2, 0x3, 0x0) connect$unix(r1, &(0x7f0000000000), 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 7.023383454s ago: executing program 1 (id=612): sysctl$kern(&(0x7f0000000000)={0x1, 0x48}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$kern(&(0x7f0000000000)={0x1, 0x20}, 0x2, 0x0, 0x0, &(0x7f0000001440)='\x00\x00\x00\x00', 0x4) sysctl$net_inet_tcp(0x0, 0x0, &(0x7f0000000080)="9b180bc3eb987aa9feb1", 0x0, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f0000000080), 0x1c, 0x0}, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x10000000000002}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sysctl$net_inet_tcp(&(0x7f0000000140)={0x4, 0x2, 0x6, 0x16}, 0x4, &(0x7f0000000180)="5b0285", &(0x7f00000001c0)=0x3, &(0x7f0000000200)="7b39ad74f4e4422b3f158af4319c2013de2098a501bb", 0x16) r0 = socket(0x18, 0x3, 0x8) setsockopt(r0, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) sendmsg$unix(r0, &(0x7f0000001700)={0x0, 0xffffffb3, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0) sysctl$kern(&(0x7f00000000c0)={0x1, 0x2c}, 0x2, 0x0, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x20, 0x0) ioctl$FIOASYNC(r1, 0x80047470, &(0x7f00000000c0)=0x400) ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f00000002c0)={0x2, 0x3, 0x10, 0x9, "92a1641d42d9facc5b6c0e7e8e48e0b228bdba81", 0x7, 0xfffff162}) syz_emit_ethernet(0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="fdffffffffffaaaaaaaaaaaa08004a1000280000000504009078aca435ca51efef8fc3c0940db6a91400aae00000029406fffffff7440de9f2ed52990709ff4222de00"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$kern(&(0x7f0000000040)={0x1, 0x41}, 0x2, &(0x7f0000000100)="71b9ba6600000000000091501d945f84cf71b59c7afec37082", &(0x7f0000000080)=0x19, 0x0, 0x0) getpid() 7.0203183s ago: executing program 1 (id=613): r0 = syz_open_pts() socket$inet(0x2, 0x3, 0x0) r1 = socket$inet(0x2, 0x0, 0x0) setsockopt$inet_opts(r1, 0x0, 0x200000000000b, &(0x7f0000000080), 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000380)="079facfaaed69aea4dc561c3b736feac0a2a76087be8b904ddc6f90b66e0f69b6dfba683b348224cf0ccc2a39b0f79389a2bd9b211424a22ca014b9231e253e257706c75b3f320166475c72455021edf575fab8b5d65b8d261c87c3ccc4e784ea7462f3723edabb8e26d27acb1797e2ef4db27270a", 0xffffff01}], 0x1) ioctl$TIOCDRAIN(0xffffffffffffffff, 0x2000745e) syz_open_pts() 2.793429775s ago: executing program 2 (id=685): sysctl$net_inet6_icmp6(&(0x7f0000000040)={0x4, 0x18, 0x3a, 0x3}, 0x4, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f00001ed000/0x400000)=nil, 0x400000) mknod(&(0x7f0000000000)='./file1\x00', 0x2000, 0x285b9a) r0 = open(&(0x7f0000000800)='./file1\x00', 0x800, 0x120) readv(r0, &(0x7f0000001980)=[{&(0x7f00000003c0)=""/190, 0xbe}, {&(0x7f0000000480)=""/87, 0x57}, {&(0x7f0000000500)=""/148, 0x94}, {&(0x7f00000005c0)=""/93, 0x5d}, {&(0x7f0000000640)=""/137, 0x89}, {&(0x7f0000000840)=""/4096, 0x1000}, {&(0x7f0000000700)=""/243, 0xf3}, {&(0x7f0000001840)=""/95, 0x5f}, {&(0x7f00000018c0)=""/185, 0xb9}], 0x9) open(&(0x7f0000000240)='./file1\x00', 0x20, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) ioctl$BIOCGRTIMEOUT(r0, 0x4010426e, &(0x7f0000000140)) recvmmsg(r0, &(0x7f0000000340)={&(0x7f0000000300)={&(0x7f0000000180)=@in, 0xc, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/118, 0x76}], 0x1, &(0x7f00000002c0)=""/45, 0x2d}, 0x10001}, 0x10, 0x1001, &(0x7f0000000380)={0xfffffffffffffff1, 0x8000000000000001}) sendto$unix(0xffffffffffffffff, &(0x7f00000000c0)="b1000516", 0x4, 0x2, 0x0, 0x0) mlock(&(0x7f0000120000/0x4000)=nil, 0x4000) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{}, {0x1}]}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x33}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x3414, 0x0, 0x37) 2.178246859s ago: executing program 4 (id=693): r0 = socket(0x11, 0x4000, 0x0) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r1 = open(&(0x7f0000000080)='./file0\x00', 0x8000, 0xa) (async) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x7, 0x2000007, 0xfe, 0x80000001, 0xc, 0x8, 0x10, [{0x0, 0x7, 0x4, 0x71000}, {0x7, 0x88, 0xf, 0x7}, {0x8, 0x40000006, 0x0, 0x9}, {0x9, 0xe59, 0xe, 0x80000000}, {0x40401, 0xc2, 0x2800, 0x7}, {0x2, 0x27f3, 0x3, 0x99}, {0xce1, 0x4, 0x4f8, 0x6d}, {0x6, 0x801, 0x8, 0x200}, {0x2, 0x82, 0x5, 0x9}, {0x7, 0x100, 0xd1a, 0x3af}, {0x1e7, 0x10001, 0xc, 0x3}, {0x800, 0x9, 0x100, 0x9}, {0xb8e, 0x4, 0x8, 0x2}, {0x2, 0x8, 0x1, 0x4}, {0xc, 0x7, 0x1, 0xfffffffe}, {0x0, 0x1, 0xfff, 0x30004}]}) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$VNDIOCSET(r1, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) (async) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f00000002c0)="fa7e2b04685586b738b54339be6bb50d3285d0f43300a7f1d9ca777dbc6084079233a46fb4fb6325390eab917904f4613ecd7937001cab1b1aaaa9aab57765607fd712070d0f60b8383b4b0efacc3fc105547411e6d8d10d85497d9522e2f62e4d0c9f0fd54c2bae11e5488193cca07e4d4d3c537acdcda927fee50002d47d850b487ee78afef256f7e805a581ccdf5ffdcdfef367f099a5b0a60a6a0160d88cdf", 0xa1}], 0x1) (async) ioctl$VNDIOCSET(r1, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) (async) shutdown(r0, 0x2) 2.114769136s ago: executing program 6 (id=697): mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x6) sysctl$kern(&(0x7f00000001c0)={0x1, 0x49}, 0x9, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1c, 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) fcntl$lock(r0, 0x9, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x20001fffffffd}) r1 = kqueue() r2 = open$dir(&(0x7f0000000040)='./file0\x00', 0x200, 0x0) kevent(r1, &(0x7f0000000180)=[{{r2}, 0xffffffffffffffff, 0xa1, 0x2, 0x0, 0x1}, {{r1}, 0xffffffffffffffff, 0x17, 0x80000000, 0x3ac, 0xa}], 0x8c0, 0x0, 0x0, 0x0) kevent(r1, 0x0, 0x0, 0x0, 0x653, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) fcntl$lock(r3, 0x8, &(0x7f00000000c0)={0x0, 0x1, 0x40, 0x200000001}) open(&(0x7f0000000040)='./file0\x00', 0x80, 0x18c) sysctl$kern(&(0x7f00000000c0)={0x1, 0x47}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000140)=0x193f, 0x0, 0x37) openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x10, 0x0) poll(&(0x7f0000000080), 0x0, 0x0) 2.112584495s ago: executing program 3 (id=699): sysctl$vm(&(0x7f0000000000)={0x2, 0x6}, 0x2, 0x0, 0x0, 0x0, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x2000000000000243, &(0x7f0000000100)}) r0 = socket(0x1, 0x2, 0x0) r1 = socket(0x18, 0x1, 0x0) setsockopt(r1, 0x1000000029, 0xc, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) ioctl$FIONREAD(r0, 0xc0106924, &(0x7f00000001c0)) r2 = openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x82, 0x0) sysctl$net_inet6_icmp6(&(0x7f0000000140)={0x4, 0x18, 0x3a, 0xf}, 0x4, &(0x7f0000000200)="ea6f3d67a78e757560e79448f87e0c3be82e1bb130bef67d1381c4d06a0edc990bcce6078b7fcd93854fc1336bc94f0ae01d032a49b5d8b67e216c306f89e814f6e5af643c76285101ee36f962f01ea57abd3dd819", &(0x7f0000000180)=0x55, &(0x7f0000000300)="dcb6694b45797925c31d3231b71ccb3b3cdadf93a154f52e620c45736091dc920cd4ac6e79ae5385f485a9326499a94b68f7b255a7d7b406feeab4f24c425f984ea522eb039a89808cd8efe33183cf853a8829d804fc0f9cec23e384daca368ff463cd3e716d27e8ceb263030e0a8b1470a92ca65702d24130861afe6e467e5c7c64608ee6ab9c00854c30ee6158dda27434f952b209bc8a2f43de6e2af4415e56c3be1163add4990d14209a84bded", 0xaf) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @empty, [], {@ipv4={0x88e7, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x400, 0xa, 0x0, 0x29, 0x0, @empty, @rand_addr=0xac14ffff}, @tcp={{0x0, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x4}}}}}}) ioctl$TIOCSETA(r2, 0xc0284416, &(0x7f0000000100)={0xa00, 0x0, 0x741, 0x0, "97000000efffffff00", 0x900, 0x7}) ioctl$TIOCSETVERAUTH(r2, 0x8004741c, &(0x7f0000000280)=0xfff) r3 = msgget(0x1, 0x30) getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) r5 = geteuid() r6 = getpid() r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0xe8, 0x0) r8 = fcntl$dupfd(r7, 0x3, 0xffffffffffffffff) fcntl$setown(r8, 0x6, r6) r9 = getpid() ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x510, r9) msgctl$IPC_SET(r3, 0x1, &(0x7f0000000080)={{0x1094, r4, 0x0, r5, 0x0, 0x65, 0x4e13}, 0x5, 0xb2a, r6, r9, 0x6, 0x5, 0xd7a, 0x90}) 2.051328642s ago: executing program 4 (id=701): r0 = getpid() r1 = open(&(0x7f0000000100)='./file0\x00', 0x10000, 0x4) getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000140)={0x0, 0x0}, 0xc) r3 = getegid() setsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f00000001c0)={r0, r2, r3}, 0xc) open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) setgroups(0x0, 0x0) ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x510, r0) setrlimit(0x1, &(0x7f0000000180)={0x200, 0x95f}) listen(0xffffffffffffffff, 0x0) ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x0, 0xb3f, {[0xfffffbfffffffffb, 0x0, 0x2, 0x100200000, 0x6, 0x7, 0xdf60, 0xfffffffffffffffe, 0x0, 0x2f01, 0x93, 0x3, 0xffffffffffffffff, 0x200000000002, 0xd, 0x4, 0xfffffffffffffffe, 0x400000000100], [0xfffffffffffffffe, 0x80000003, 0xfffffffffffffffd, 0x1fffffff, 0x5e, 0x7b96, 0x8000000000000200], [0x100000001, 0x7ffe, 0x40000000, 0xfffffffffffffffd, 0xb, 0x11000, 0xffffffff00000000], [0x104, 0x1fffffffffb, 0x7ffffffffffffffc, 0x100000000, 0xfffffffffffffffe, 0x8], [{0x0, 0x2, 0x4, 0x7d06}, {0xfffa, 0x22, 0x5}, {0x204, 0x0, 0x28, 0x80}, {0x7, 0x4, 0x5, 0xffffffffffffffff}, {0x0, 0xfffffffe, 0x7f, 0x8}, {0x0, 0x9, 0x9, 0x2000000000000000}, {0x0, 0x0, 0xfffffff9}, {0x8, 0x100, 0x0, 0x8}], {0x1, 0x5, 0x6, 0x3}, {0xfffe, 0x3, 0x6d5, 0x6}}}) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r4, 0x0, 0x200000000000c, &(0x7f0000000080)="eaef125c00000000", 0x8) setsockopt$inet_opts(r4, 0x0, 0x200000000000c, &(0x7f0000000240)="ea00000100000000", 0xc) setsockopt$inet_opts(r4, 0x0, 0xd, &(0x7f0000000240)="ea00000100000000", 0x8) r5 = open(&(0x7f0000000380)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7949) fcntl$lock(r5, 0xa, &(0x7f00000019c0)={0x1, 0x0, 0x2000000000000001, 0x2}) setreuid(0xee00, 0x0) r6 = open(&(0x7f00000000c0)='./file0\x00', 0x205, 0x0) fcntl$lock(r6, 0x9, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1008301010006, r0}) select(0x40, &(0x7f0000000000)={0x1, 0xfffffffffffffff9, 0x800, 0x2, 0x0, 0x4, 0x5, 0x7}, &(0x7f0000000040)={0x6, 0xc1, 0x7, 0x300, 0x0, 0x9, 0x865a, 0x9}, &(0x7f0000000080)={0x9, 0xffffffffdfffff00, 0x183, 0x4, 0x0, 0x6, 0x3800000000000000, 0x9}, 0x0) 1.879598716s ago: executing program 2 (id=702): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb5219f1000b913f1, 0x0) r1 = socket(0x2, 0x3, 0x0) bind(r1, &(0x7f0000000000), 0x10) ioctl$DIOCMAP(r0, 0xc0106477, &(0x7f00000000c0)={&(0x7f0000000080)='./file0\x00', r1, 0x3}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x1, [{0x2, 0x4ddfd550}, {}, {0x3, 0x7fff}, {0x1, 0xd}, {}, {0x0, 0x9}, {0x1, 0x1}, {}, {0x0, 0x1}, {0x2, 0x1}, {0x1, 0x10000000}, {0x0, 0x6}, {0x3, 0x2}, {0x3}, {0x3, 0x20}, {0x0, 0x5}, {0x0, 0x1}, {0x1, 0x7}, {0x1, 0x1}, {}, {}, {}, {0x0, 0x7}, {0x0, 0x9}, {0x0, 0x3}, {0x1, 0x800}, {0x3}, {0x1}, {0x2, 0xfffffffd}, {0x1}, {0x2, 0x8001}, {0x0, 0x40}]}) sysctl$net_inet_ip(&(0x7f00000000c0)={0x4, 0x2, 0x0, 0x20}, 0x4, 0x0, 0x0, 0x0, 0x0) r2 = getuid() chown(&(0x7f0000000200)='./file0\x00', r2, 0x0) setreuid(0xee00, r2) setuid(r2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sysctl$kern(&(0x7f00000000c0)={0x1, 0x37}, 0x4, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000140)=0x2c, 0x0, 0x2e) ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9f, 0x0) getitimer(0x0, &(0x7f0000000000)) 1.872108822s ago: executing program 3 (id=703): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) setreuid(0xee00, 0x0) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x1, 0xf7, 0x4, 0xd1ac}, {0x4, 0x1, 0x0, 0x81}, {0x6, 0x3, 0xe6, 0x88}]}) mknod(&(0x7f0000000140)='./file0\x00', 0x2000, 0x162226d0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f00000000c0)={0x0, 0xfffffffffffffffe}) r1 = socket$inet(0x2, 0x3, 0xf) setsockopt(r1, 0x0, 0x17, 0x0, 0x0) write(r0, &(0x7f0000000480)='\x00'/14, 0xe) 1.871074261s ago: executing program 6 (id=704): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000800), 0x2, 0x0) writev(r0, &(0x7f00000008c0)=[{0x0}], 0x1) r1 = open(&(0x7f0000000200)='./file0\x00', 0x200, 0x0) fcntl$lock(r1, 0x8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x100000001}) r2 = open(&(0x7f0000000140)='./file0\x00', 0x100, 0x0) fcntl$lock(r2, 0x9, &(0x7f0000000000)={0x1, 0x0, 0x9, 0x269010000}) sysctl$kern(&(0x7f0000000080)={0x1, 0x22}, 0x2, 0x0, 0x0, 0x0, 0x0) 1.870612554s ago: executing program 4 (id=705): mknod(&(0x7f0000000240)='./file0\x00', 0x2000, 0x637f) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) r1 = open$dir(&(0x7f0000000000)='.\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) munmap(&(0x7f0000161000/0x3000)=nil, 0x3000) getdents(r1, &(0x7f0000001180)=""/4096, 0x1000) getdents(r1, &(0x7f0000000180)=""/4096, 0x1000) poll(&(0x7f00000000c0)=[{r0, 0x6e}], 0x1, 0x0) select(0x40, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, &(0x7f00000001c0)={0xff, 0x0, 0xfffffffffffffffc, 0x5, 0xfffffffffffffff7, 0x0, 0xa}, 0x0, 0x0) 1.633394747s ago: executing program 0 (id=706): chmod(&(0x7f0000000000)='./file0\x00', 0xd0) open(&(0x7f0000000140)='./file0\x00', 0x78e, 0x8) ktrace(&(0x7f0000000c80)='./file0\x00', 0x4, 0x0, 0x0) 1.631066811s ago: executing program 2 (id=708): open(&(0x7f00000000c0)='./file0\x00', 0x80000000000206, 0xb7) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x2, 0x0) mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0xd02) unveil(&(0x7f00000001c0)='./bus/\x00', &(0x7f0000000140)='r\x00') pwritev(r0, &(0x7f0000000080)=[{&(0x7f00000006c0), 0xf0f75}], 0x1, 0x0) r1 = open$dir(&(0x7f00000002c0)='./file0\x00', 0x2, 0x10) ftruncate(r1, 0x80002) ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f0000000040)={0x8000000, 0x0, 0x3, 0x0, "0109ffffcf000000000000bc1f557200", 0x2}) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x5900) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000440)=""/74, 0x4a}], 0x1, 0xfffd) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000140)="10", 0x3}], 0x1) truncate(&(0x7f0000000000)='./file0\x00', 0x9) socket$inet(0x2, 0x2, 0x0) truncate(&(0x7f0000000300)='./file0\x00', 0xe89) 1.623024321s ago: executing program 6 (id=709): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mlock(&(0x7f0000000000/0x2000)=nil, 0x2000) r0 = syz_open_pts() writev(r0, &(0x7f0000000040)=[{&(0x7f0000000380)="079facfaaed69aea4dc561c3b736feac0a2a76087be8b904ddc6f90b66e0f69b6dfba683b348224cf0ccc2a39b0f79389a2bd9b211424a22ca014b9231e253e257706c75b3f320166475c72455021edf575fab8b5d65b8d261c87c3ccc4e784ea7462f3723edabb8e26d27acb1797e2ef4db27270a", 0xffffff01}], 0x1) ioctl$TIOCDRAIN(0xffffffffffffffff, 0x2000745e) syz_open_pts() r1 = openat$tty(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) ioctl$TIOCSTOP(r1, 0x2000746f) sysctl$vm_swapencrypt(&(0x7f0000000040)={0x2, 0x5, 0x2}, 0x3, 0x0, 0x0, &(0x7f0000001180), 0x0) mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) r2 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000080)="fca886b798c047cb65845e05d75030987baf73a340fcd2e03822419082d787eb7467f1589a4be40a15c6addc6b9e4833cdb5978dcf5b805677ccb3e0b1c466c24647dd619b", 0x45}, {0x0}], 0x2) execve(0x0, 0x0, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) r4 = open(&(0x7f0000000140)='./file0\x00', 0x80, 0x18c) r5 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) poll(&(0x7f0000000180)=[{r3, 0x8}, {r0, 0x100}, {r4, 0x8}, {r5, 0x20}], 0x4, 0x0) sysctl$vm(&(0x7f0000000000)={0x2, 0x1}, 0x2, &(0x7f0000000800)="7b32a4d2d77646346e6cda870698270c90dd26c0ef89d4895b008e5636f9fa04680cf8e8bc5d59b1a487b1c1e98e36f5ca9b42e6e38ac9f3b9a9eb30af383aab881378f5e8364b5fb255a5ca96b26b9aa03b2bb5a8417eb804f757a5bd3358721440b25f7eb0e06bb220", &(0x7f0000000880)=0x6a, 0x0, 0x0) 1.620344178s ago: executing program 3 (id=710): mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x637e) (async) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000003, 0x181c, 0x1fd, 0x2000000000000004}, 0x0, 0x0, 0x0) (async) r0 = kqueue() kevent(r0, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) (async) r1 = open(&(0x7f0000000080)='./file0\x00', 0x20, 0x0) socket(0x18, 0x3, 0x0) (async) r2 = openat$speaker(0xffffffffffffff9c, &(0x7f0000001500), 0x1, 0x0) writev(r2, &(0x7f0000000100)=[{&(0x7f0000000000)="6d4cd77880", 0x5}], 0x1) ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file0\x00', 0xffff, 0xc0, 0xfff4, 0x1, 0x7ff, 0xffffffff, 0x1, 0x1, 0x1, 0x4000000000000006, 0x101}) ioctl$FIONBIO(r1, 0x82907003, &(0x7f0000000140)=0x2) (async) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) (async) mknod(&(0x7f0000000000)='./file1\x00', 0x2000, 0x637d) (async) r3 = open(&(0x7f0000000800)='./file1\x00', 0x800, 0x120) mknod(&(0x7f0000000040)='./file0\x00', 0x6000, 0x3) ioctl$FIONBIO(r3, 0x82907003, &(0x7f0000000140)=0x1) (async) close(r1) 1.274080969s ago: executing program 0 (id=713): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r1 = msgget$private(0x0, 0x144) msgrcv(r1, 0x0, 0x0, 0x1, 0x0) msgctl$IPC_SET(r1, 0x1, 0x0) shmget(0x3, 0x3000, 0x10, &(0x7f0000ffb000/0x3000)=nil) ioctl$FIONREAD(r0, 0x80206916, &(0x7f00000001c0)) mknod(&(0x7f00000000c0)='./file0\x00', 0x2000, 0x4301) 1.111942446s ago: executing program 5 (id=714): r0 = semget(0x0, 0x1, 0x281) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x80, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000240)={'tap', 0x0}) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f00000001c0)={0x3, &(0x7f0000000080)=[{0x1, 0xfe, 0x32}, {0xc, 0x8, 0x0, 0x6}, {0x86, 0x9, 0x0, 0x3}]}) (async) syz_emit_ethernet(0x1000e, &(0x7f0000000280)=ANY=[]) r2 = openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TIOCSETA(r2, 0xcd504406, &(0x7f0000000740)={0x0, 0x0, 0x100, 0x0, "97aa224ff1c14649ebb178926cc1c75a6b47c1d1"}) (async) r3 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) (async) ioctl$BIOCSFILDROP(r2, 0x80044279, &(0x7f0000000380)=0x6) (async) ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x0, 0xb3f, {[0xfffffbfffffffffb, 0x0, 0x2, 0x100200000, 0x6, 0x7, 0xdf60, 0xfffffffffffffffe, 0xfffffffffffffffe, 0x2f01, 0x93, 0x3, 0xffffffffffffffff, 0x200000000003, 0xd, 0x4, 0xfffffffffffffffe, 0x400000000100], [0xfffffffffffffffe, 0x80000001, 0xfffffffffffffffd, 0x20000001, 0x5e, 0x7b98, 0x80000000000001fe], [0x91f, 0x8000, 0x40000000, 0x0, 0xb, 0x11000, 0xffffffff00000000], [0x104, 0x1fffffffffb, 0x7ffffffffffffffc, 0x100000000, 0x52adeb15, 0x7], [{0x4, 0x0, 0x0, 0x5}, {0xfffc, 0x22, 0x5}, {0x0, 0x0, 0xfffffffb, 0x80}, {0x5, 0x4, 0x5, 0xffffffffffffffff}, {0x0, 0x2, 0x7f, 0x8}, {0x0, 0x9, 0x2, 0x2000000000000000}, {0x0, 0x0, 0xfffffff9}, {0x5, 0x100, 0xf, 0xb}], {0x1, 0x5, 0x7, 0x3}, {0xfffe, 0x45, 0x6d5, 0x6}}}) (async) r4 = kqueue() kevent(r4, &(0x7f0000000040), 0x7fffffff, &(0x7f0000000340), 0xddcd, 0x0) (async) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendto$unix(r5, 0x0, 0x0, 0x9, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000b40)="825a4f47c21e6ed7eda0f5903abf65b18d7c51f78b06ccffb40500000000000000000000fafd3493776665d4cd12c63d34", 0x31}], 0x1, 0x0, 0x0, 0x40d}, 0x1) ioctl$TIOCSETA(r3, 0xc4504444, &(0x7f0000000740)={0x0, 0x0, 0x6, 0x7fffffff, "97a2224ff1c1d949eb050000008fdf9d7573c1d1", 0x80007ff, 0x22}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)=[&(0x7f0000000040)='\x00', &(0x7f0000000080)='/dev/pf\x00', &(0x7f00000000c0)='/dev/pf\x00'], &(0x7f0000000340)=[&(0x7f0000000140)='/dev/pf\x00', &(0x7f0000000180)='/dev/pf\x00', &(0x7f00000001c0)='/dev/pf\x00', &(0x7f0000000200)='/dev/pf\x00', &(0x7f0000000240)='[\x00', &(0x7f0000000280)='\x00', &(0x7f00000002c0)='/dev/pf\x00', &(0x7f0000000300)='/dev/pf\x00']) (async) r6 = openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TIOCSETA(r6, 0xcd504406, &(0x7f0000000740)={0x0, 0x0, 0x100, 0x0, "97aa224ff1c14649ebb178926cc1c75a6b47c1d1"}) socket(0x1e, 0x3, 0x0) r7 = openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) ioctl$TIOCSETA(r7, 0xcd504407, &(0x7f0000000740)={0xb6, 0xfc, 0x8a86, 0x7, "97000019be81804c09a56000", 0x4, 0x577f}) (async) semctl$GETVAL(r0, 0x1b3c9e9ac036a0d4, 0x5, 0x0) 1.11135104s ago: executing program 1 (id=715): openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x2, 0x4001, 0x0) r1 = socket(0x18, 0x2, 0x0) close(r1) kevent(0xffffffffffffffff, &(0x7f0000000080)=[{{}, 0xfffffffffffffffe}], 0x0, 0x0, 0x0, 0x0) r2 = socket(0x800000018, 0x2, 0x0) setsockopt$sock_int(r2, 0xffff, 0x1000, &(0x7f0000000000)=0x7, 0x4) bind$unix(r2, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x100000000000000, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) writev(r1, &(0x7f0000000300)=[{0x0}], 0x1) r3 = dup(r0) r4 = fcntl$dupfd(r3, 0x2, 0xffffffffffffffff) close(r4) openat$pci(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) select(0x40, &(0x7f00000000c0)={0x4, 0xe9, 0x4008, 0x5, 0x5, 0x5, 0x8000000080000400, 0x9}, &(0x7f0000000140)={0x1, 0x1, 0xff, 0x3, 0x5, 0x5, 0x401, 0x7265031d}, &(0x7f0000000300)={0x8, 0x8000000000000001, 0x2, 0x100, 0x8, 0xda0, 0x2, 0x5}, 0x0) r5 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x29) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r5, 0x80184404, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) r6 = socket(0x18, 0x3, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) r7 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r7, 0xc0106924, &(0x7f00000001c0)) ioctl$FIONREAD(r6, 0x802069b0, &(0x7f0000000100)) r8 = socket(0x2, 0x2, 0x0) connect$unix(r8, &(0x7f0000000000), 0x10) setsockopt$sock_int(r4, 0xffff, 0x1023, &(0x7f0000000040)=0x3, 0x4) 1.108058637s ago: executing program 3 (id=716): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r0, 0x2) sendmsg$unix(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000ffff000001"], 0x10, 0x4}, 0x40a) open$dir(&(0x7f0000000300)='.\x00', 0x80, 0x4a) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) ioctl$FIONREAD(0xffffffffffffff9c, 0x4004667f, &(0x7f00000000c0)) getpid() r2 = socket(0x2, 0x4000, 0xff) setsockopt$sock_int(r2, 0xffff, 0x1, &(0x7f0000000080)=0x1fc, 0x4) mknod(&(0x7f0000000300)='./file0\x00', 0x2000, 0x40006dd) r3 = socket(0x2, 0x1, 0x0) shutdown(r3, 0x1) setsockopt(r3, 0x1, 0x2, 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x100, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) connect$unix(r2, &(0x7f0000000000), 0x10) shutdown(r2, 0x1) connect(r1, &(0x7f0000000100)=@in6={0x18, 0x1, 0x3, 0x5}, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) (async) shutdown(r0, 0x2) (async) sendmsg$unix(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000ffff000001"], 0x10, 0x4}, 0x40a) (async) open$dir(&(0x7f0000000300)='.\x00', 0x80, 0x4a) (async) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1) (async) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) (async) ioctl$FIONREAD(0xffffffffffffff9c, 0x4004667f, &(0x7f00000000c0)) (async) getpid() (async) socket(0x2, 0x4000, 0xff) (async) setsockopt$sock_int(r2, 0xffff, 0x1, &(0x7f0000000080)=0x1fc, 0x4) (async) mknod(&(0x7f0000000300)='./file0\x00', 0x2000, 0x40006dd) (async) socket(0x2, 0x1, 0x0) (async) shutdown(r3, 0x1) (async) setsockopt(r3, 0x1, 0x2, 0x0, 0x0) (async) open(&(0x7f0000000040)='./file0\x00', 0x100, 0x2) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) connect$unix(r2, &(0x7f0000000000), 0x10) (async) shutdown(r2, 0x1) (async) connect(r1, &(0x7f0000000100)=@in6={0x18, 0x1, 0x3, 0x5}, 0xc) (async) 899.556235ms ago: executing program 2 (id=718): r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) close(r0) getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000000240), 0x0) mknodat(r0, &(0x7f0000000000)='./file0\x00', 0x20, 0x200) r1 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = socket(0x800000018, 0x1, 0x0) shutdown(r2, 0x1) recvfrom$unix(r2, 0x0, 0x0, 0x43, 0x0, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000380)="673bb5b8cc", 0x5}], 0x1) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) execve(0x0, 0x0, 0x0) getpid() mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) setitimer(0x1, &(0x7f0000000080)={{0xfffffffffffffff5, 0x2}, {0x80000, 0x8}}, 0x0) r3 = socket(0x2, 0x1, 0x0) setsockopt(r3, 0x6, 0x2, 0x0, 0x0) ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f0000000040)={0x1, 0x0, 0x1, 0x805, "ef00000110040000000000c49eba1c00", 0x6}) sysctl$kern(&(0x7f0000000040)={0x1, 0x3e}, 0x3, &(0x7f00000000c0)="3bf2ee74e747c82dad6eb2a36fa755e1a3925fe49afca7e63b52fa65ccaa74d6e6b85b6cdced70357ef201f97842b1068dca31553fa2d7031f38c03e56ad0e24dfc4f97b8b7f81499647e6e7725765d61436c85e43c15d12a78cb8c57ddde87021d7b685507fd3e0652f35e45bdaa3afd86c4fe557433e4c2b632de71c951516adff26aa2e48b45f8ce92bcefd3eceefabee7e3ebe806fdb4f6af569ae94b5d127", &(0x7f0000000080)=0x4, &(0x7f0000000340)="5a67923ef0cb189971421989ebcff78831a7581e2f27caa362f1363042efb27688b2c899220fb2fe37e467d974592496856ca7b78060998608c2f952e43bc0bf11555cc5cb0fe17b2ec1be389871829bfe10dd4c4d2c8f9da2bd2868fd86791dc09dc4fa89a217458bdaed31003fdc3a7323189ba3ccbad6c8af17516e4557f61ad20180000000000000125f568ca7d3396b9057255f381855110eb3a673713716cdf010ddfa7977f92cf061ad125ca670353b45d53aae196b00271f9d3452b523b3dea22d6027625614312183724b71c7eb02083a410c1c99fa455013521f98686e472b70b560f7021f567adf4d", 0x4) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$sock_cred(r4, 0xffff, 0x1022, &(0x7f0000000580)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) r6 = open$dir(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') fchdir(r6) semctl$IPC_SET(0xffffffffffffffff, 0x0, 0x1, &(0x7f00000000c0)={{0x10001, 0x0, r5, 0x0, 0x0, 0x81}, 0x20000000000}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x4e}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000180)=0x66, 0x0, 0x27) r7 = socket(0x11, 0x3, 0x0) setsockopt(r7, 0x11, 0x2, 0x0, 0x0) utimes(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)={{0x9, 0x92}, {0x1e, 0x9}}) 897.300358ms ago: executing program 7 (id=719): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb5219f1000b913f1, 0x0) (async) sysctl$net_pipex(&(0x7f0000000040)={0x4, 0x23, 0x1}, 0x3, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) (async) sysctl$kern(&(0x7f0000000040)={0x1, 0xdc1d800780e51763}, 0x3, &(0x7f00000000c0)="3bf2ee74e747c82dad6eb2a36fa755e1a3925fe49afca7e63b52fa65ccaa74d6e6b85b6cdced70357ef201f97842b1068dca31553fa2d7031f38c03e56ad0e24dfc4f97b8b7f81499647e6e7725765d61436c85e43c15d12a78cb8c57ddde87021d7b685507fd3e0652f35e45bdaa3afd86c4fe557433e4c2b632de71c951516adff26aa2e48b45f8ce92bcefd3eceefabee7e3ebe806fdb4f6af569ae94b5d127", &(0x7f0000000080)=0xffffffffffffff7f, &(0x7f0000001c00)="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", 0x4) (async) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) setsockopt$sock_int(r0, 0xffff, 0x1, &(0x7f0000000240)=0x7, 0x4) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) (async) rename(&(0x7f00000001c0)='./file0/file0/../../file0\x00', &(0x7f0000000200)='./file0/file0/..\x00') setrlimit(0x8, &(0x7f0000000980)={0xb, 0x54}) r1 = socket(0x11, 0x3, 0x0) sendto$unix(r1, &(0x7f0000000140)="b1000502000000000000000001010000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc256699a1f139b672f4d335c223e7d0c032bfa896443a42121000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x404, 0x0, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) (async) socket(0x2, 0x3, 0x0) (async) sendmsg$unix(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="28000000ffff000001"], 0x28}, 0x404) syz_emit_ethernet(0x10, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffffffff6bfffdff0806"]) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)) (async) recvmmsg(r2, &(0x7f0000000000)={&(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000000), 0x63}}, 0x10, 0x0, 0x0) (async) r4 = syz_open_pts() mknod(&(0x7f0000000000)='./bus\x00', 0x2000, 0x2e00) (async) setuid(0xffffffffffffffff) (async) chflags(&(0x7f00000000c0)='./bus\x00', 0x0) (async) fcntl$lock(r4, 0x9, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1000300000002}) (async) syz_open_pts() (async) sysctl$hw(&(0x7f00000000c0)={0x6, 0x18}, 0x2, 0x0, &(0x7f0000000080), 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) (async) sysctl$hw(&(0x7f0000000100), 0x2, &(0x7f00000001c0), &(0x7f0000000080), 0x0, 0x0) (async) ioctl$FIONREAD(r4, 0x4004667f, &(0x7f0000000000)) (async) syz_open_pts() 893.467774ms ago: executing program 5 (id=720): socketpair(0x1e, 0x1, 0x0, 0x0) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$BIOCIMMEDIATE(r0, 0x80044270, &(0x7f0000000080)=0x9) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000080)={0x9, &(0x7f0000000000)=[{0xfff, 0xe, 0xc6, 0x400}, {0x7, 0x1e, 0x7f, 0x1000}, {0x3, 0x2, 0x5, 0xff}, {0x2, 0x97, 0x7, 0x1}, {0x401, 0x7, 0x4, 0x8}, {0xde7, 0x7, 0x6, 0x27ee}, {0xd906, 0x40, 0x5, 0xfffffff7}, {0x10, 0x0, 0x8, 0x75bc}, {0x4a3, 0x3, 0x1, 0xa}]}) 893.197907ms ago: executing program 6 (id=721): r0 = socket$inet6(0x18, 0x8000, 0x5) getsockname$inet6(r0, &(0x7f0000000000), &(0x7f0000000040)=0xc) mknod(&(0x7f0000000200)='./bus\x00', 0x6000, 0x202) link(&(0x7f00000005c0)='./bus\x00', &(0x7f0000000600)='./file0\x00') unlink(&(0x7f0000000180)='./file0\x00') 892.776241ms ago: executing program 7 (id=722): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f00000003c0), 0x200, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, 0x0) ioctl$VNDIOCSET(0xffffffffffffffff, 0x80044403, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x2000000000000243, &(0x7f0000000100)}) r1 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r1, 0xc0106924, &(0x7f00000001c0)) ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x1, [{0x1, 0x7ff}, {0x0, 0x4}, {0x1, 0x6}, {0x1, 0xb}, {0x2}, {0x0, 0x9}, {0x3, 0xfffffff7}, {0x3}, {0x1, 0x1}, {0x2, 0x8}, {0x3, 0x9}, {0x0, 0x6000000}, {0x3, 0x2}, {0x3, 0x4}, {0x0, 0x3}, {0x1, 0x8}, {0x3, 0x4}, {0x3, 0x1008}, {0x2, 0xd}, {0x0, 0x2}, {0x1}, {0x0, 0x1}, {0x0, 0x6}, {0x0, 0x9}, {0x0, 0x3}, {0x3, 0x800}, {0x3}, {0x1}, {0x2, 0xfffffffd}, {0x3, 0x10001}, {0x3, 0x8001}, {0x0, 0x40}]}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x37}, 0x4, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000140)=0x2c, 0x0, 0x2e) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) r2 = syz_open_pts() poll(&(0x7f0000000080)=[{r2, 0x68}], 0x1, 0x2) ioctl$FIOASYNC(r2, 0x8004667d, &(0x7f0000000180)=0x2) ioctl$TIOCSTART(r2, 0x2000746e) syz_open_pts() syz_open_pts() 889.053487ms ago: executing program 2 (id=723): writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x0, &(0x7f00000000c0)="0315f23bc6c42543aed2a077190c832371f1d89ec5a317a9357682", 0x1b) (async) connect$unix(r0, &(0x7f0000000000), 0x10) 664.459434ms ago: executing program 3 (id=724): ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x100, 0x0) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCVERSION(r0, 0x40044271, &(0x7f0000000000)) setsockopt(0xffffffffffffffff, 0x1000000000029, 0xc, 0x0, 0x0) close(0xffffffffffffffff) select(0x40, &(0x7f0000000180)={0x3205, 0x44809e9a, 0x7fffffffffffffff, 0xe, 0x2000000000000000, 0x181c, 0xdc, 0x6}, 0x0, 0x0, 0x0) mknod(&(0x7f00000001c0)='./file0\x00', 0x1, 0x205b97) r1 = kqueue() kevent(r1, &(0x7f0000000480)=[{{}, 0xfffffffffffffffc, 0x44, 0xf0000000, 0x43294c6d, 0x5}, {{}, 0x0, 0x1e, 0x40, 0x9, 0x7}, {{r1}, 0xfffffffffffffffa, 0x0, 0xfffff, 0xec, 0xfffffffffffffff5}, {{r0}, 0xfffffffffffffffe, 0x29, 0x4, 0xffffffffffffffff, 0xd19}], 0x8, &(0x7f00000001c0), 0x15, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIONBIO(r2, 0x82907003, &(0x7f0000000140)=0x1) ioctl$FIONBIO(r2, 0x82907003, &(0x7f0000000140)=0x2) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x6384) r3 = open(&(0x7f0000000000)='./bus\x00', 0x1, 0x2) ioctl$BIOCSRTIMEOUT(r3, 0xc0307006, &(0x7f0000000080)={0x20, 0x10}) r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BIOCSETIF(r4, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) pipe(0x0) fcntl$getown(0xffffffffffffffff, 0x5) ioctl$BIOCSETF(r2, 0x80104267, &(0x7f00000001c0)={0x2, &(0x7f0000000080)=[{0x4c, 0x1, 0x1, 0x1}, {0x6, 0xb, 0x6, 0xfffff000}]}) syz_emit_ethernet(0x1000e, &(0x7f0000000000)=ANY=[]) r5 = socket(0x2, 0x3, 0xff) ioctl$WSKBDIO_SETENCODING(0xffffffffffffffff, 0x80045710, &(0x7f00000000c0)=0x7ff) writev(0xffffffffffffffff, &(0x7f0000000900)=[{&(0x7f00000000c0)='n', 0x1}], 0x1) setsockopt$sock_int(r3, 0xffff, 0x200, &(0x7f0000000200)=0x420000, 0x4) syz_emit_ethernet(0x138, &(0x7f0000000300)=ANY=[@ANYBLOB="50f828a1f233cd0f2a9d7797846a6f5958e3eb4a4340898bc53fd69322f0ffa7d7252e9f20fcdd2ff6b6ac0d56720ab626a67198b438b7d9267453ecd03740c69744a8444928d955466a4439b1b56126a83aab01706fcbb7085a8e82a559a6778c90aeb5636d6b18e75f2ed6c7132a9a7d4f696f47ac9ce4fbe818579d5cd93bbe63c0c94929ef550aaf8ffef380a9f4600fb1"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) connect$unix(r5, &(0x7f0000000000), 0x10) setsockopt$inet_opts(r5, 0x0, 0x0, &(0x7f00000003c0)="9876d692a3efa2f0", 0x8) write(r5, &(0x7f0000000240)="14bdfa5d1d34e2fecb284a6498307dcda9aec43050036123339a346f737850551408753f95b7688ad4c4e1dd5489e7bafc58d3e5823757ae8b630719ef187ccad995f13dbe19a6dd4e6902bd8297b0799b426aabe9fad9db6996571c6d9f8bb5d542c2148aa42be940970fe88d34d8f99afe7e7820237400000000008000000100"/138, 0xfc7e) 664.146939ms ago: executing program 4 (id=725): sysctl$kern(0x0, 0x0, &(0x7f0000000100)="71f91e34", &(0x7f0000000080)=0x4, 0x0, 0x0) ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f0000000040)={0x1, 0xc9, 0x1, 0x0, "0100f3ff00fd800000000000000000000000fffd", 0xfff, 0x3}) r0 = socket$inet(0x2, 0x2, 0x0) sysctl$kern(&(0x7f0000000000)={0x1, 0x32}, 0x2, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_opts(r0, 0x0, 0x13, &(0x7f0000000000), 0x4) sysctl$kern(&(0x7f0000000040)={0x1, 0x3e}, 0x16, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_opts(r0, 0x0, 0x0, &(0x7f0000000240)="458d62712d7699c650dcb0a7e0ee99b3b543518d8d9c618c39b809b31df913305b1b92176fe1e119bcc66a5a6a830988228ffa9290638167f4130326c834a987bb16cb8b9dccea6fbfdbb738119ff381e8985f6be1fb26c3", 0x58) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r1 = socket(0x2, 0x3, 0x2f) r2 = dup(r1) setsockopt$inet_opts(r2, 0x0, 0x22, &(0x7f00000002c0)="928194007e522b7da76a2b0cc9d2b385599854b114faf191de4afd8079c15b572bc200e795b9f9378d80e338f6a3822fc2f2db46262049720c2276d1d55ccfd5bd0450c29b47a9f9ed4bf08e10b8b4847cc0e09c812c11dcd672e1685e43393473f98cae51a432df47b1ee66ba20054ad59897ebd5a3b7c91f3d167e61df104b967fbd923296a204294734ca6b490c84610fa2aabab121e202e131ec7f145dbf9a27032c0f4f125b2ec4b5fc74d97a91cc209760abb2d8001ce5fb3135f2ffd8", 0xc0) ioctl$BIOCGBLEN(r2, 0x40044266, &(0x7f0000000180)) r3 = socket(0x18, 0x3, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) r4 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r4, 0xc0106924, &(0x7f00000001c0)) ioctl$FIONREAD(r3, 0xc02069b6, &(0x7f0000000100)) ioctl$VMM_IOC_CREATE(r2, 0xc2585601, &(0x7f0000000380)={0x10, 0x4, [{&(0x7f00002a6000/0x1000)=nil, &(0x7f00001b9000/0x1000)=nil, 0x1}, {&(0x7f00006e2000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x9}, {&(0x7f000050e000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x9}, {&(0x7f0000632000/0x1000)=nil, &(0x7f0000166000/0x2000)=nil, 0x4ad}, {&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x8}, {&(0x7f0000407000/0x4000)=nil, &(0x7f0000585000/0x1000)=nil, 0x1000}, {&(0x7f0000049000/0x2000)=nil, &(0x7f000007a000/0x4000)=nil, 0xf}, {&(0x7f0000621000/0x2000)=nil, &(0x7f00002d0000/0x1000)=nil, 0xf0e}, {&(0x7f00005fc000/0x400000)=nil, &(0x7f00000d8000/0x1000)=nil, 0x5}, {&(0x7f00008f7000/0x3000)=nil, &(0x7f000012b000/0x4000)=nil, 0x9}, {&(0x7f000046a000/0x4000)=nil, &(0x7f00005a1000/0x4000)=nil, 0x5}, {&(0x7f0000300000/0x1000)=nil, &(0x7f0000ff0000/0xf000)=nil, 0x400}, {&(0x7f0000272000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x2}, {&(0x7f00005a2000/0x3000)=nil, &(0x7f00004f7000/0x1000)=nil}, {&(0x7f00001d3000/0x2000)=nil, &(0x7f00005e3000/0x3000)=nil, 0xffffffffffffffff}, {&(0x7f000046c000/0x2000)=nil, &(0x7f00004da000/0x2000)=nil, 0x66}], './file0\x00', 0xfffffffa}) sysctl$kern(&(0x7f0000000040)={0x1, 0xdc1d800780e51763}, 0x3, &(0x7f00000000c0)="3bf2ee74e747c82dad6eb2a36fa755e1a3925fe49afca7e63b52fa65ccaa74d6e6b85b6cdced70357ef201f97842b1068dca31553fa2d7031f38c03e56ad0e24dfc4f97b8b7f81499647e6e7725765d61436c85e43c15d12a78cb8c57ddde87021d7b685507fd3e0652f35e45bdaa3afd86c4fe557433e4c2b632de71c951516adff26aa2e48b45f8ce92bcefd3eceefabee7e3ebe806fdb4f6af569ae94b5d127", &(0x7f0000000080)=0xffffffffffffff7f, &(0x7f0000001c00)="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", 0x4) setsockopt$sock_timeval(r1, 0xffff, 0x1005, &(0x7f00000001c0)={0x200, 0xffffffffffffffff}, 0x10) munlock(&(0x7f0000269000/0x2000)=nil, 0x2000) 663.499318ms ago: executing program 2 (id=726): r0 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) pwritev(r0, &(0x7f0000000640)=[{&(0x7f00000003c0)="268b1123db16ea0577cd13c42122c29f9630b324276e2e9de0ad2cc85f1b76d010610fd102f9311bea3774059fd03189bcfb6fba9562dfd2f5b6f2d4fbe3b0e36b1a2f51e6cefc712155", 0x4a}, {&(0x7f0000000540)="31deec7db06f7f5066d2319b649354113fbe76958fa330a8afc6c2410086a228e4551fb3e508a39b64a7dabc7ecdac45511d6e866dd8f14373b6cede44f1259b24f43c3c6a35921a7befee6f41383600ce2027270ea7bdfdecccc8960d632ea724790d2a6898e2da556ea51cef1f576fd505c9e18d39362323ff5f9f5a34e3c5dc4a17680bacf8e5f48923e8994ceb5269d2087836b109175591c0c70523", 0x9e}], 0x2, 0x2) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000680)="a011ff218dd80bfbdbdd4c0c403fd0d8f26af3e076b2f18c53f1d52114b62054fca2f3ed0449c4ba7e990daf91716720e23a86512dce9b5b6ce8e3f9c13b71534379", 0x42}, {&(0x7f0000000440)="b53ee42c394036c3cd3e2892518691de516caf89ce2700c29516f90153347eb012183bc01e8639e5bdddd45ac15e00145e1deec6ade44064154bf2d5f0cc5de0ece6f01ed768a522932b17f35f78545f038bb229ffec08594caeaf28d6aacbf82e475535b6a60533637a83e2933d2e2c6d01cc1dd41e77695d05bad379b582ca62e67e6ee68ffce36ff05d9ae5b10ad3e7c147b3f4041709b56d91e8e49d412038d9a68f7433", 0xa6}], 0x2, 0x0) unveil(0x0, &(0x7f0000000240)='x\x00') socket(0x18, 0x2, 0x0) setrlimit(0x8, &(0x7f0000000980)={0x3e, 0x62}) r1 = syz_open_pts() close(r1) syz_open_pts() mknod$loop(&(0x7f0000000000)='./file0\x00', 0x20, 0x1) ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000200)={0xfffffff9, 0x0, 0x1, 0x8, "d5fe2679d5ee3cf8a0a91de797376a903e863cc5", 0x1003, 0x7ff}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$FIOASYNC(r1, 0x80047470, &(0x7f0000000000)=0x2) readv(r1, &(0x7f0000000080)=[{0x0}], 0x1) setrlimit(0x8, &(0x7f0000000580)={0xa, 0x1000000000000056}) r2 = syz_open_pts() close(r2) r3 = syz_open_pts() ioctl$TIOCSETA(r3, 0x802c7414, &(0x7f0000000140)={0x7fffffff, 0x207bef, 0xffffdf86, 0xe, "1826283e7e0021d5ff7f0d01fd1d000004400800", 0x8, 0x7}) writev(r2, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) ioctl$VMM_IOC_WRITEREGS(0xffffffffffffff9c, 0x82485608, &(0x7f0000000100)={0xaa, 0x0, 0x0, {[0x100800000005, 0x0, 0xffffffffffffffd, 0x1, 0xe, 0xfffffffffffff6f8, 0x5, 0xfffffffffffffffe, 0x40000000000004, 0x1, 0x9, 0xfffffffffffffff9, 0x1, 0x0, 0x42, 0x203, 0xfffffffffffffffc, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x6, 0x400000, 0x0, 0x1000], [0x4, 0x2, 0x2, 0x40000000000165, 0x0, 0x8], [{0x0, 0x10, 0x5, 0x8000000000000}, {0x0, 0xfffffffd, 0xfffffff9}, {0x1000, 0x0, 0x0, 0x8000000000000006}, {0x0, 0x1000, 0xffff, 0xffffffffffffffff}, {0x0, 0x0, 0xc8, 0x7ffffffffffffffb}, {0x0, 0x9, 0x6, 0x4}, {0x0, 0x0, 0xc650, 0x80}, {0x0, 0x8, 0x8, 0x1}], {0x5, 0xfffffffd, 0x3}, {0x0, 0x5, 0x9}}}) r4 = openat$tty(0xffffffffffffff9c, &(0x7f0000000500), 0xe441b5a0dbaae4f7, 0x0) ioctl$TIOCSPGRP(r4, 0x40047477, &(0x7f0000000380)) r5 = kqueue() sysctl$kern(&(0x7f0000000040)={0x0}, 0x0, &(0x7f00000000c0)="3bf2ee74e747c82dad6eb2a36fa755e1a3925fe49afca7e63b52fa65ccaa74d6e6b85b6cdced70357ef201f97842b1068dca31553fa2d7031f38c03e56ad0e24dfc4f97b8b7f81499647e6e7725765d61436c85e43c15d12a78cb8c57ddde87021d7b685507fd3e0652f35e45bdaa3afd86c4fe557433e4c2b632de71c951516adff26aa2e48b45f8ce92bcefd3eceefabee7e3ebe806fdb4f6af569ae94b5d127", &(0x7f0000000480)=0xa1, &(0x7f0000000340)="5a67923ef0cb189971421989ebcff78831a7581e2f27caa362f1363042efb27688b2c899220fb2fe37e467d974592496856ca7b78060998608c2f952e43bc0bf11555cc5cb0fe17b2ec1be389871829bfe10dd4c4d2c8f9da2bd2868fd86791dc09dc4fa89a217458bdaed31003fdc3a7323189ba3ccbad6c8af17516e4557f61ad20180000000000000125f568ca7d3396b9057255f381855110eb3a673713716cdf010ddfa7977f92cf061ad125ca670353b45d53aae196b00271f9d3452b523b3dea22d6027625614312183724b71c7eb02083a410c1c99fa455013521f98686e472b70b560f7021f567adf4d", 0xee) kevent(r5, &(0x7f0000000040), 0x30, 0x0, 0x57d, 0x0) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000300)="653bb5b8dd0a893456f559e3c9facc0c16ed08f1b8d24e6a78ef1d35e6abbbdabb26a52ad7f46040aa90", 0x2a}], 0x1) sysctl$kern(&(0x7f0000000140)={0x1, 0x29}, 0x2, 0x0, 0x0, 0x0, 0x0) r6 = socket(0x18, 0x2, 0x0) sendmsg$unix(r6, &(0x7f0000000040)={&(0x7f0000000000)=@file={0x1, './file0\x00'}, 0xa, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="11"], 0x20, 0x2}, 0x6) 662.723858ms ago: executing program 6 (id=727): r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmat(r0, &(0x7f0000000000/0x3000)=nil, 0x3000) (async) setreuid(0xee00, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r1 = getuid() (async) r2 = getuid() chown(&(0x7f0000000000)='./file0\x00', r2, 0xffffffffffffffff) (async) setreuid(0xee00, r1) chmod(&(0x7f0000000080)='./file0\x00', 0x2ea) (async) chdir(&(0x7f0000000100)='./file0\x00') mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0e99db6de761f86, 0x0) (async) symlink(&(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async, rerun: 32) rename(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (rerun: 32) syz_emit_ethernet(0x2e, &(0x7f0000000180)={@broadcast, @random="c7a2e46f05fa", [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x20, 0x68, 0x0, 0x0, 0x1, 0x0, @empty, @remote={0xac, 0x14, 0x0}, {[@generic={0x7, 0x2}]}}, @generic="09abec8be194ccb4"}}}}) 378.068295ms ago: executing program 0 (id=728): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000300)="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", 0x188) sendmsg$unix(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000140)="ef9bcffb5c8e7956", 0x8}], 0x1, 0x0, 0x0, 0x4}, 0x400) recvmmsg(r1, &(0x7f0000000000)={&(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0}, 0xedd}, 0x10, 0x2003, 0x0) close(r0) 377.774934ms ago: executing program 5 (id=729): r0 = socket(0x11, 0x3, 0x0) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r1 = open(&(0x7f0000000080)='./file0\x00', 0x8000, 0xa) ioctl$WSMOUSEIO_SCALIBCOORDS(r1, 0x81205724, &(0x7f00000002c0)={0x219c, 0x1, 0xffffffff, 0x9, 0x100, 0xffff, 0x3, 0x10, [{0x0, 0x3, 0x5, 0x5}, {0x0, 0x20f, 0x7, 0xffffff10}, {0x6, 0x20, 0x6, 0xce6}, {0x4, 0xc, 0xfffffffa, 0x3}, {0x2, 0x4, 0x80}, {0x1000, 0x9e11, 0x4, 0x9}, {0x1, 0x4, 0x3, 0xffffb2e6}, {0x2, 0xc, 0x0, 0x2}, {0x0, 0x5, 0x3a2a, 0x7ff}, {0x2, 0x1, 0x1, 0x3}, {0x4, 0x0, 0x4, 0x80000001}, {0xb44f, 0x2, 0x0, 0x5}, {0x8d, 0xd4f, 0x6, 0x4}, {0x64, 0x1, 0x1, 0x4}, {0x8, 0x3280, 0x1}, {0x200, 0x10, 0x4, 0x7fffffff}]}) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x7, 0x2000007, 0xfe, 0x80000001, 0xc, 0x8, 0x10, [{0x0, 0x7, 0x4, 0x71000}, {0x7, 0x88, 0xf, 0x7}, {0x8, 0x40000006, 0x0, 0x9}, {0x9, 0xe59, 0xe, 0x80000000}, {0x40401, 0xc2, 0x2800, 0x7}, {0x2, 0x27f3, 0x3, 0x99}, {0xce1, 0x4, 0x4f8, 0x6d}, {0x6, 0x801, 0x8, 0x200}, {0x2, 0x82, 0x5, 0x9}, {0x7, 0x100, 0xd1a, 0x3af}, {0x1e7, 0x10001, 0xc, 0x3}, {0x800, 0x9, 0x100, 0x9}, {0xb8e, 0x4, 0x8, 0x2}, {0x2, 0x8, 0x1, 0x4}, {0xc, 0x7, 0x1, 0xfffffffe}, {0x0, 0x1, 0xfff, 0x30004}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x2) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000001c0)={{0x3, 0x0, 0x0, 0x0, 0x0, 0x1dc}, 0xf0fffffffffffffa, 0x0, 0xfffffffffffffffe}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) mprotect(&(0x7f0000096000/0x1000)=nil, 0x1000, 0x0) ioctl$VNDIOCSET(r2, 0xc0104401, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r1, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r1, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) shutdown(r0, 0x2) 377.354295ms ago: executing program 0 (id=730): open$dir(&(0x7f0000000040)='./file0\x00', 0xae828e137847f62, 0x0) setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x200000000000c, &(0x7f0000000080)="ea", 0x1) r0 = openat$speaker(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)='T', 0x1}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket(0x2, 0x3, 0x0) r2 = dup(r1) setsockopt$inet_opts(r2, 0x0, 0x15, &(0x7f0000000080)='\x00\x00\x00\x00', 0x4) mknod(&(0x7f0000000080)='./file0\x00', 0x2, 0x6) truncate(&(0x7f00000000c0)='./file0\x00', 0x6001000004) truncate(&(0x7f00000000c0)='./file0\x00', 0x5ffffffffd) 377.145542ms ago: executing program 7 (id=731): ioctl$BIOCSETIF(0xffffffffffffff9c, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) (async) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x80, 0x0) ioctl$BIOCLOCK(r0, 0x20004276) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000240)={'tap', 0x0}) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket(0x18, 0x3, 0x3a) getsockopt$sock_int(r1, 0xffff, 0x100, 0x0, 0x0) (async) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f00000001c0)={0x3, &(0x7f0000000080)=[{0x1, 0x0, 0x32}, {0xc, 0x8, 0x0, 0x6}, {0x86, 0x1, 0xe9, 0x3}]}) (async) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x5, 0x9, 0x6, 0x3}, {0xff, 0x4, 0x38, 0x6}]}) (async) r2 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r2, 0x8020690c, &(0x7f00000001c0)) (async) mquery(&(0x7f0000008000/0x3000)=nil, 0x3000, 0xffc66c6db3ca1990, 0x0, 0xffffffffffffffff, 0x0) (async) sysctl$net_inet6_ip6(&(0x7f0000000000)={0x4, 0x18, 0x29, 0xd}, 0x4, 0x0, 0x0, 0x0, 0x0) (async) mmap(&(0x7f00003ad000/0x1000)=nil, 0x1000, 0x2, 0x2010, r1, 0x1) 287.621306ms ago: executing program 4 (id=732): r0 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x8, 0x0) ioctl$WSMOUSEIO_GTYPE(r0, 0x40045720, &(0x7f0000000040)) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40, 0x0) ioctl$WSMUXIO_INJECTEVENT(r1, 0x80185760, &(0x7f00000000c0)={0x4, 0x3, {0xffffffff, 0xb460}}) sendto$inet(r1, &(0x7f0000000100)="59a76aeca0878a57b88a40c726869e5b90ada379dc008088183fbdb7e0ef92970bcec4cd6fa8d6f01957", 0x2a, 0x2, &(0x7f0000000140)={0x2, 0x2}, 0xc) shutdown(r1, 0x0) r2 = dup2(r1, r1) ioctl$DIOCMAP(r1, 0xc0106477, &(0x7f00000001c0)={&(0x7f0000000180)='./file0\x00', r2, 0x3}) r3 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) ioctl$WSMUXIO_ADD_DEVICE(r3, 0x80085761, &(0x7f0000000240)={0x2, 0x7}) mknod(&(0x7f0000000280)='./file0\x00', 0x100, 0x7f) r4 = openat(r2, &(0x7f00000002c0)='./file0\x00', 0x20000, 0x146) pwrite(r1, &(0x7f0000000300)="cfbbb335ad276419435901eb0e75e46c9c0a4fed76e73d049966b8551ae7656c18cdab02b92b4c7c4df17089965e72e6debdfcf8a3e20208994b6b340e7331b0ee5e35f0459ff0e2ef34d027ec783481cfd12eac", 0x54, 0x2) r5 = fcntl$getown(r3, 0x5) preadv(r4, &(0x7f0000000680)=[{&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/215, 0xd7}, {&(0x7f00000004c0)=""/72, 0x48}, {&(0x7f0000000540)=""/148, 0x94}, {&(0x7f0000000600)=""/88, 0x58}], 0x5, 0x9) getsockopt$SO_PEERCRED(r1, 0xffff, 0x1022, &(0x7f0000000700)={0x0, 0x0}, 0xc) getgroups(0x3, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]) fchown(r3, r6, r8) ioctl$WSMOUSEIO_SETPARAMS(r1, 0x80105728, &(0x7f00000007c0)={&(0x7f0000000780)=[{0x40, 0x55}, {0x5, 0x3ff}, {0x20}, {0x20, 0x100}], 0x4}) sysctl$kern(&(0x7f0000000800)={0x1, 0x55}, 0x2, &(0x7f0000000840)="2995e0c5a295b4990b762d46abc9ff1e77291a247c211ee98ea65323d1bdfcae64632fdf4d4c2524ba95ecda13f81a2d60b56d994b025acb83e656b9e665330c7bd80cbb3347f17d707b47dbcdacbdee3cafb80bfef41d4ad4eb1a07f597353670acfcc3d225e1962cf4a9396379ef3e3f6a0d7e5be83aaa618620d293acb0a677431be1036e759e53de30a6", &(0x7f0000000900)=0x8c, &(0x7f0000000940)="27e61c429dc03ee1e47eebadcdda5f66dc9fc2c535c59bbe82128a50cbba85ff2e3192888fc9d3155f84d9185084f2bfe168c7e425402450e7212a2c3b482116d555dec6503cf2bf8c5c634aa40b05a1424555bc7a01eb19602d5980eb93fa2906ab34386c6e53490c39ab99d233abfe0fe7c47fd2440bbaf714c03fb64875187d8033f05065708c4521de15bb7316d97a05e1ed95e18ec236109e14117b729313fdb489cb6b83fc752d41e72b3a32ebac11a029a418e3f2a6", 0xb9) r9 = socket$inet6(0x18, 0x4000, 0x0) sendmsg$unix(r1, &(0x7f0000000e40)={&(0x7f0000000a00)=@file={0x0, './file0\x00'}, 0xa, &(0x7f0000000d80)=[{&(0x7f0000000a40)="e61938f579d356f2d0fa4f747db97f54d9cbed7718a2e194cbd91c0d52a7d2f0294ee0f2eaf7f28a97d86d5dd62d1369fb922a804e1b3c20a00d0a7c2304d1eb42be458e297c7d3ad98760edb56625cb9aeb13f3752323d1afc7b17a33bbee56261aaac7095f9a02c1b94e755ce3b1546d3824fd05395fa577795fc3576dc3f8b650", 0x82}, {&(0x7f0000000b00)="e49ac71736f73bcb5fa00d04c242f206d2c60e0fe0c7b80866eaa684398103e104a74be9d47c325966ba6b5b076c7d18cb73a1a45c2983c2718d1d54cbf46f6287d98c33d9e5fa88c5ab8c6a6a103b02bd2864a7f60bc1dd4a543c811c0c4f178d68c37785ff03ab0f27af1b8ead1f6f9ac558696b8fc251557c58e61ea667c23025c1753e59", 0x86}, {&(0x7f0000000bc0)="f15aac003eb51798bce499241d21327968e4b808ab3bc33dc69c29b8b430066cd433a597e72cf545c37671ee9253c30a3a8e41084d5ec73f99ac9be8e9d729e0f20e9bfbc9448347c65226f48f5584eb9d967796aee61956b950c5590115f322fa2ec134", 0x64}, {&(0x7f0000000c40)="440afc88e18be2210c892897891a276c7bd8b383a71f16a4d226ebdfd2933b3dc4c67f4603e4c5152ac57cadc68778b8a19149209a3193728e6519d816c110cdb51906cfc3eccdb74b269cd322eb91bd3c1b5ac2cf8865cce4886272339144ac554666e896248a058e67eed1bf268a3deed688920176f754d7745ae7b55579bd6ad774fc221ed136560e3696df0d80647a55bc6d2aaa460bc66efad8190ff7cd32bd6ae25354154ba53e6c608deed3", 0xaf}, {&(0x7f0000000d00)="f3f437382e9ca50c7be16c9276a7473a3cc96b9fe06b3958804446c08b44d83869ab90d5ff43f15b78700735c9ea7e3eabc0c8ae4eab0c63d828d4f14217d939974c75690c0f04407762650ec788fbea852ae26654bcc613247c", 0x5a}], 0x5, &(0x7f0000000e00)=[@cred={0x20, 0xffff, 0x0, r5, r6, r7}, @rights={0x20, 0xffff, 0x1, [r1, 0xffffffffffffff9c, r9, 0xffffffffffffffff]}], 0x40, 0x1}, 0x8) lstat(&(0x7f0000000e80)='./file0\x00', &(0x7f0000000ec0)) sysctl$hw(&(0x7f0000000f40)={0x6, 0xa}, 0x2, &(0x7f0000000f80)="3f7ef89468b9377d65b5c04879557838f0c16a3d035d254bd81cf91896ad6db798e3c3c5cc89727ea7bff044c84edddbf731a8d670c9f191bf0b01e900f91579f1e18d98eebca9040f0bb2c1c96e4af092e9730ff26630260930a1d53b", &(0x7f0000001000)=0x5d, &(0x7f0000001040)="494296176ef8f90f3fb3e91a9f3db39c670fd9678a09dbd4bed3bb6a969c8577e9f87f0da1d2044f97143ddf126dc191f9b9bb63cd1bc9c0184090674a036d4ac3b88c0820d1a7dd553861aa664d230e845a657369e5037d0e259496fc7586c9d16df716a7d453552c389a12e80887498fa5c0cd878e0f7a6441bc4b005a553a91371def208d6ca4d1653bf33937b2f97bbd11464beedceec5626181a5e71ab0234932388c6acdef4d1c809bed2b0cc359560f557986ed976b858435470dc35f", 0xc0) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000001100)={'tap', 0x0}) r10 = open$dir(&(0x7f0000001140)='./file0/file0\x00', 0x400, 0x48) writev(r10, &(0x7f0000001500)=[{&(0x7f0000001180)="4bc942ed677a13db8408d5e09ba4a0ffc87f531c72caaa7bc69dcc7f815eedc3ba225ba60e3c2bb77a22073e30ebe2f109c79dc83b21af35c8b30bf499334191f3ca651184481a3f8b607fddbf7ea719113eff7cee11f40129c4d165678ef4c8c234bfc2d20a4fe58816000ff9115a86e6ad2e57b680bf3d155a9afea20c7ac64033d205dd2fcf3ddb561a0166a5cf9b6d0b46e6518430de1c3a38fcae108fccbe4cfa26576437091d92f3603554ad716324e2730302a9dc8ecc0a511bd1220f108b0aec35284540305eef95003c8cf14f8dd8ee20eaeea6722ba3bd7ef87663f3618ead1a613844fa06015b81ce", 0xee}, {&(0x7f0000001280)="af67a76f397ce422ab8859573dfa07ae96171929590adb4eb1f7bcdf548e6be6e032fc24e5dfc99bcd812a58d49562690683b042bda2c675df347aed39f7d1867fefe4188de3eaa7beea551b0be21499e03866b9cce1ba37b2b304091324231e8bb922bb885825f14c2aed27b010908c203065ac151b24a3ffff248cbc4e3e", 0x7f}, {&(0x7f0000001300)="2ebacc198f987230a04dacaec296c014b86091557d11d1c5319a288363bfc04174d8e27e665219352d6e2736c954296f14021b45481faca182ff1b5a53844b551af8fe418c427e3d5aae59", 0x4b}, {&(0x7f0000001380)="c8984b580780b701236306c7a29af47d08a2b1c1887e7278ca70d79e88861c970f5a607c306553e72f77a417d432089b1150ae3b870509aa36f93b9334c884ec90f6b2954c284247832d2d4171ed1d51e0cea383f74858f8cf4ce4e8ec17e7c1f635ac82127d4b4f2002c9381c3321f8f62f18cba424d5a53e8030f43f7af3287dd6001adf52f2922e263ea9864ec71701dd346d983529583a12ab53f60170ed6179219ccf63dc2dc62dc592c8afd90fdf3da2305690e2c26f7e81837a80086166005a6ae58394b19fb060", 0xcb}, {&(0x7f0000001480)}, {&(0x7f00000014c0)="894fda10c61d301cc55f64dbb9772e25d2c5bcf22109c7d1f6f5ab1541480754a55d26f61d6e0df0120910f4e41d87430e2725", 0x33}], 0x6) ktrace(&(0x7f0000001580)='./file0\x00', 0x1, 0x2, r5) sysctl$kern(&(0x7f00000015c0)={0x1, 0x1b}, 0x2, &(0x7f0000001600)="cbd77d6e23f427ddf6abe5ac0f818e1f2c25b4a7a0f1559538a7127290229c9e962f8f40a52ba9ce03f9b53f28b60e51d549fe6381fea95ccd03cbc93779b7e8654c2175dd67749ae4569771b8f077f3dd81c1ae80278386a44a7a03e81fdca79a02fffe6ff9a28f24463a96c3759d1b877e7ba48efc5e2e1b078d777483da4ff7f100e161e850205d9e067c98ffa9aff18699", &(0x7f00000016c0)=0x93, &(0x7f0000001700)="938f7f60d31d05c1f6ea6cbb7b4c0787514b18e74ecf2a529cf5cb6c6d443798c29a421cbccbfdd0e421cf7289ffd803e7478d4e14181356f1bf1ea6bca5cd6938b95172411bc06e0c159fc55f33ef77d371c8f33fd77c3bd3e2dbe31aca760af4b380e021955667d8cdbb2e97a4289b68c4e66260f71772fec13affb337771d97f1f9c72af52e2e30a22b410ffb243daab030a653ffd2a1daf84488f27371f3421a5c0135f72ad972579deb9958fe064b0e8e8c4a3bb04428c004d5a7917477cefb6186fcc59f1fef97f556f3b61b38d434dfd17f0d9355d5e22d36c7835b", 0xdf) sysctl$net_inet_ip(&(0x7f0000001800)={0x4, 0x2, 0x0, 0x13}, 0x4, &(0x7f0000001840)="c8f069c2e0dd2cd29ffed6d06c532733dfdd18c823de86cde0b084c8e81fac7829a2cd49230e0fac5b2485a9c2444227deab356e74845e5165f73a40625879da9e52ba355b3975f6", &(0x7f00000018c0)=0x48, &(0x7f0000001900)="2338e28f75c573f9ec3a7c08e45cb2f146d984b751e65595b5ada6dbeaa80324dd30ec8e991a46679455772ddcad77d3881ceb346e0b81d254aa93448d90a73fc5732c373196e70ed34e6d2e81d9846abee969f46d5040fb3fccc2f418efe499021f4139b320252d83684bd2d6788a1da3152f11634d693b526b1391e67346cb09c6fa786bdf54747f4e14cbef1e51a3044310ff3d72f89bb9526d7ae00d967e53bf4c154c9cf6e50bb1717c475262a2a931eb05726ddbf22d2a8d92f6f9bc19e75bcf14472c71686b3caa309d6836508755b9745455bb7f3cbdc3dd6452687440dbfd2d3a", 0xe5) 285.702558ms ago: executing program 1 (id=733): r0 = syz_open_pts() (async) setuid(0xffffffffffffffff) r1 = getpid() ktrace(0x0, 0x39500f9a1a026d7d, 0x200, r1) ioctl$TIOCSETD(r0, 0x8004741b, &(0x7f0000000040)=0x8) r2 = syz_open_pts() setuid(0xffffffffffffffff) (async) socket(0x24, 0x2, 0x0) (async) ioctl$TIOCSETD(r2, 0x8004741b, &(0x7f0000000040)=0x8) (async) ioctl$TIOCSTOP(r0, 0x2000746f) (async) ioctl$TIOCSETD(r0, 0x8004741b, &(0x7f0000000080)=0x9) 285.057443ms ago: executing program 0 (id=734): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$TIOCSETAF(0xffffffffffffffff, 0x802c7416, &(0x7f0000000100)={0x0, 0x7, 0x1ff, 0x6, "32c14a6159de090004000000e2c791260dad3860", 0x0, 0xd}) bind$unix(0xffffffffffffffff, &(0x7f0000000100)=@abs={0x1f95d27d48731892, 0x0, 0x1}, 0x8) sysctl$net_inet_tcp(&(0x7f00000000c0)={0x4, 0x2, 0x6, 0x9}, 0x4, &(0x7f0000000000)="9b1809ffffffffffffff7f473f11e1a4e5f2f9f220ef7f0abdbc34fe42021588dc8ff44f4b76c76d41859d85ea800dabe467badf35b6fd74c94d1b44", &(0x7f0000000040)=0x10011, 0x0, 0x0) close(r0) setuid(0xffffffffffffffff) sysctl$net_inet_tcp(&(0x7f0000000080)={0x4, 0x2, 0x6, 0x19}, 0x4, &(0x7f0000000180)="928eef59710cecdec40028a30d37776f78397f405f55d5b7447636488ca4e40f8d3b347e3f80293d41ec001f55273a0ec2aec66bb883e6e169", &(0x7f0000000200)=0x39, &(0x7f00000002c0)="3227d71d70504840a7fd77a025579dff5d638d01ac1ea0152ff95a0eecfb2379de5decf3f14c820c166905a6fbe7061e3198bac481c1ab20ac97cc5760b8cbac59a819449d78815a7dd2dea04c43a2e6b56adfc9d708376d96ef9ade99b5f0b61826e4a74ed43e73a5f4d5defb2f2da435529a8825ec3803d4bc3474c46bbc445e18b39d1078e1755840f6247242e431d895699df8c8d3c4de5336d2c2f8a69517a5e745ea0e9ebb98809ecf5dd0b2a2bab55d8bb471a1e52f93afe354f6f7edb3bd8f01cf12347118b1c45e80b6df30", 0xd0) ioctl$BIOCLOCK(r0, 0x20004276) ioctl$BIOCGHDRCMPLT(r0, 0x40044274, &(0x7f0000000040)) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @random="11e672caaed2", [], {@ipv6={0x86dd, {0x0, 0x6, "062500", 0x0, 0x2b, 0x10, @loopback, @loopback={0xfeffffff00000000}}}}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) sysctl$net_inet_ip(&(0x7f0000000000)={0x4, 0x2, 0x0, 0x21}, 0x4, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$net_inet_tcp(&(0x7f0000000000)={0x4, 0x2, 0x6, 0xa}, 0x4, &(0x7f0000001a40), &(0x7f0000000100), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, r3, r2, r3, 0x1, 0xfffc}, 0x4, 0x8000, 0x7}) setreuid(0x0, r2) 213.26906ms ago: executing program 7 (id=735): r0 = open(&(0x7f0000000080)='./file0\x00', 0x615, 0x1) chmod(&(0x7f0000000040)='.\x00', 0x35e) seteuid(0xffffffffffffffff) rename(&(0x7f0000000000)='./file0\x00', 0x0) shmget$private(0x0, 0xc00000, 0x202, &(0x7f00003fe000/0xc00000)=nil) getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0xc) fchown(r0, r1, r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$sock_cred(r3, 0xffff, 0x1022, &(0x7f0000000580)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) semctl$IPC_SET(0xffffffffffffffff, 0x0, 0x1, &(0x7f00000000c0)={{0x10001, 0x0, r4, 0x0, 0x0, 0x81}, 0x20000000000}) getgroups(0xa, &(0x7f0000000000)=[0x0, r4, r2, 0x0, r2, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0x0, 0x0]) setgroups(0x2, &(0x7f0000000040)=[0x0, r5]) 212.982551ms ago: executing program 5 (id=736): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) minherit(&(0x7f00001d1000/0x3000)=nil, 0x3000, 0x7) r2 = dup2(r1, r0) ioctl$FIONREAD(r0, 0x4004667f, &(0x7f00000000c0)) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) poll(&(0x7f0000000180)=[{r4, 0xa9e6aac0282a6fec}], 0x1, 0x0) ioctl$FIOASYNC(r4, 0x8004667d, &(0x7f0000000080)=0x7) fchmod(r4, 0x84) readv(r4, &(0x7f0000000340)=[{0x0}], 0x1) poll(&(0x7f0000000080)=[{r2, 0xab6cc3d7ffaa0897}], 0x1, 0x0) poll(&(0x7f0000000000)=[{r2}], 0x1, 0x0) r5 = fcntl$getown(r3, 0x5) fcntl$setown(r1, 0x6, r5) 208.421588ms ago: executing program 3 (id=737): r0 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) ioctl$WSMUXIO_REMOVE_DEVICE(0xffffffffffffffff, 0x80085762, &(0x7f0000000040)={0x1}) r1 = socket(0x18, 0xc003, 0x3a) setsockopt(r1, 0x29, 0x6c, &(0x7f0000000040), 0x4) sysctl$net_inet_ipip(&(0x7f0000000000), 0x4, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket(0x1e, 0x3, 0x0) write(r2, &(0x7f0000000000)="2deaaec43f0c0f6b3a1eb2f74da1ef10", 0x10) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0x66, &(0x7f00000003c0)={0x0, 0x1, 0x10, 0x3}, 0xc) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0x67, &(0x7f0000000000)={{0x18, 0x3, 0xfffff001, 0x4}, {0x18, 0x2, 0x8, 0x4}, 0x1003, [0x4, 0xfffffcb1, 0x24a, 0xc, 0x1, 0x8, 0x9, 0x1]}, 0x75) sysctl$net_inet6_ip6(&(0x7f0000000080)={0x4, 0x18, 0x29, 0x3f}, 0x4, &(0x7f0000000140)="3f6017e0a781f835651d8e7f5099f3f2493edbdcec7fce163ec500a9eaf2f3334b55b1021ce621be8d90f317f3d41b70da68e064018429f534", &(0x7f0000000180)=0x39, &(0x7f00000001c0)="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", 0x1000) setitimer(0x2, 0x0, 0x0) r3 = socket(0x18, 0x3, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) open(0x0, 0x615, 0x4) r4 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r4, 0xc0106924, &(0x7f00000001c0)) ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file0\x00', 0xffff, 0xc0, 0xfff4, 0x1, 0x7ff, 0xffffffff, 0x1, 0x1, 0x1, 0x4000000000000006, 0x101}) r5 = socket(0x18, 0x3, 0x0) socket$inet(0x2, 0x3, 0x8) setitimer(0x1, &(0x7f0000000140)={{0x9, 0x9}, {0x2000ffff, 0x4}}, 0x0) ioctl$FIONREAD(r5, 0x81206919, &(0x7f0000000100)) ioctl$FIONREAD(r3, 0x8080691a, &(0x7f0000000100)) writev(r0, &(0x7f0000001300)=[{&(0x7f0000000100)="cc60d3d7", 0x4}, {&(0x7f0000001200)="1eed25c4b14355519555f0c1921b992be21814b436bf3111304ddbba7ab57ad60377c40dac0f11c236eb178be7750c346a06e5e0b8b415ed69ae0ed4a97e3e826bb50b8b81a149e9272e18297af8cac61a6a95b8e06030c8cfa23499eff11af928f2a5807912ae9b66234953c2d60d2a9f8264f77e1c8af30957b6bc9ac422edf67d", 0x82}, {&(0x7f00000012c0)="3dd86339f999a36f187d4b09f7c269baebf2b10ac4840ff77ee3b8e9f3a933ee02ef2e7b6268744f65c10bba3a84761a25928881f8d6699fb888e95148c35656", 0x40}], 0x3) setrlimit(0x1, &(0x7f00000011c0)) ftruncate(r0, 0x4) r6 = open$dir(&(0x7f0000000000)='./file0\x00', 0x40, 0xc0) mknodat(r6, &(0x7f0000000040)='./file0\x00', 0x10, 0x9) close(r0) 11.731833ms ago: executing program 1 (id=738): msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x4, 0x0, 0x0, 0x0, 0x0, 0x80, 0x8}, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x1ff, 0xb, 0x8001, 0x5}) mkdir(&(0x7f0000000240)='./file0\x00', 0x1) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)="76e5eac907f9ccf7a251ceddcec7d6aa45cffe2c63a56077123a276d3ba4e9d17eb3eb5db12a3783a8e0620d357de1fe04fa9465b5bd1286e9624dec06a00c222f", 0x41}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) unveil(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000300)='W\x00') mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) unveil(&(0x7f00000001c0)='./file0/file1\x00', &(0x7f0000000140)='r\x00') mkdir(&(0x7f00000003c0)='./file0/file1\x00', 0x75) chroot(&(0x7f0000000100)='./file0/file1\x00') unveil(&(0x7f0000000340)='./file0/file1\x00', &(0x7f00000000c0)='c\x00') r0 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x5900) mquery(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x0, r0, 0x8) sysctl$vm_swapencrypt(&(0x7f0000000180)={0x6, 0x1b, 0x3}, 0x3, 0x0, 0x0, 0x0, 0x3f) sysctl$kern(&(0x7f0000000040)={0x1, 0x3f}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sysctl$net_inet_ip(&(0x7f0000000040), 0x4, 0x0, 0x0, 0x0, 0x0) r1 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000480), 0x100, 0x0) readv(r1, &(0x7f0000000000), 0x100000000000009b) setsockopt(0xffffffffffffff9c, 0x100, 0x0, &(0x7f0000000040)="c50bc2144c142729d67268add7eb6eea919434b60f3a63fd3dc804f2104808e1c03c1163b0aa1a173c9969dbcab53fdd1b517573a161009c807c959f78c9652349facb173a37302f81f39c2f0c23a70a34264da0e0e61c763d4e48ab80bed005502c0df5cf7eb59fe87816342f7fc99c8faf3342b93173bf712ec37159197f402f", 0x81) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x6f8, 0x0) 7.031858ms ago: executing program 5 (id=739): sysctl$kern(&(0x7f0000000040)={0x1, 0x3d}, 0x2, 0x0, 0x0, 0x0, 0x0) (async) setsockopt$sock_int(0xffffffffffffffff, 0xffff, 0x1001, &(0x7f0000000080)=0x4, 0x4) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$kern(&(0x7f0000000000)={0x1, 0x37}, 0x40000000000000fd, &(0x7f0000000180)="3bf2ee74e747c82dad6eb2a36fa755e1a3925fe49afca7e63b52fa65ccaa74d6e6b85b6cdced70357ef201f97842b1068dca31553fa2d7031f38c03e56ad0e24dfc4f97b8b7f81499647e6e7725765d61436c85e43c15d12a78cb8c57ddde87021d7b685507fd3e0652f35e45bdaa3afd86c4fe557433e4c2b632de71c951516adff26aa2e48b45f8ce92bcefd3eceefabee7e3ebe806fdb4f6af569ae94b5d127", &(0x7f0000000080)=0xa1, &(0x7f0000001c00)="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", 0x1c6) 6.855522ms ago: executing program 7 (id=740): r0 = openat$wsmouse(0xffffffffffffff9c, &(0x7f00000000c0), 0x8981, 0x0) ioctl$WSMOUSEIO_SETPARAMS(r0, 0x80105727, &(0x7f0000000100)={&(0x7f0000000040)=[{0x8, 0xe4}, {0x44, 0x8}], 0x2}) ioctl$KDMKTONE(0xffffffffffffffff, 0x20004b08, &(0x7f0000000000)=0x8001) 3.262694ms ago: executing program 5 (id=741): ioctl$VNDIOCSET(0xffffffffffffffff, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x7f80c34e) r0 = socket(0x2, 0x1, 0x0) munmap(&(0x7f0000001000/0x400000)=nil, 0x400000) (async) munmap(&(0x7f0000001000/0x400000)=nil, 0x400000) munmap(&(0x7f0000334000/0x3000)=nil, 0x3000) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) socket(0x1, 0x2, 0x0) (async) r1 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r1, 0xc0286988, &(0x7f00000001c0)) r2 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000000), 0x20, 0x0) ioctl$WSKBDIO_SETENCODING(r2, 0x80045710, &(0x7f0000000040)=0x5) ioctl$FIONREAD(r0, 0x8020699f, &(0x7f00000001c0)) (async) ioctl$FIONREAD(r0, 0x8020699f, &(0x7f00000001c0)) 1.017304ms ago: executing program 4 (id=742): r0 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$VNDIOCGET(r0, 0xc4104603, &(0x7f0000000040)={'./file0\x00', 0xa57e60a3, 0x3, 0x6d3}) (async) r1 = openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) ioctl$BIOCLOCK(r1, 0x20004276) (async) getsockopt$SO_PEERCRED(r1, 0xffff, 0x1022, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0xc) (async) r4 = geteuid() (async) getsockopt$SO_PEERCRED(r1, 0xffff, 0x1022, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0xc) (async) r6 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000800), 0x800, 0x0) (async) r7 = getpgrp() getsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f0000000840)={0x0, 0x0, 0x0}, &(0x7f0000000880)=0xc) (async) getsockopt$SO_PEERCRED(r1, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0xc) (async) r12 = getppid() (async) r13 = geteuid() (async) getgroups(0x9, &(0x7f0000000900)=[0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0]) (async) getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000940)={0x0, 0x0}, 0xc) (async) r17 = getgid() (async) getsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f0000000980)={0x0, 0x0, 0x0}, &(0x7f00000009c0)=0xc) sendmsg$unix(r1, &(0x7f0000000b00)={&(0x7f00000004c0)=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000000740)=[{&(0x7f0000000500)}, {&(0x7f0000000540)="9a5a637b9fc3fe36642eaf0d5f63c2ee7a08b7db75f4c90b9c23f7bda52e057683e07f9dab15af77085fd84b8aa9e676bcf060d633e3dd2404194a150cbb633f4e70191c2309b2097205921dce4fe67f822dcf8edf678ee5aa2fdc00ddbff2346a3378d6c0f6d8e13c23b25587a041dd4668ce25811462438153cfbfd93db0baa3d55f821ab5d69e6d19096c30416c6e66be037a2fc9e9c730a4c9030f9edb928e76bcd0a49f50ea153022355d44306fb93d3bd78ffbeab0d191ed9e0e72994a", 0xc0}, {&(0x7f0000000600)="41080ca7b792661339f86d75470e91f2d868e7040c8dca5744ec8b1830377a46a780470af1fdf07feaeed8f6d4a1f70754c750161ad21ae98c2825cb3b20ec998de12e66df53000172a684dae447ac80f5f6699f436b503f45e8ffcee58012690d930df2d845dc43c3917d09d585f0bc1331ad2b5cc3aa4af75609ce592a8608bb4629dcfb456ff90989ca23d55d960172330f984e10b1f9ed6740927d4324a90e9aa7d3058d9b4956ced444aa304fe7f7", 0xb1}, {&(0x7f00000006c0)="9427a31efaae53da9d8e28f9d61f02217158d06dd99e723627e1ebc5fcc2a0ab5a4b7763e321cc8fa470db534f32d626f8a16b4a5da3d98ef032093c376d3e703763ba31e04726b375712673143e4e0a92c0c59041c896f36e14a7bb56a4bcf3f949c31c", 0x64}], 0x4, &(0x7f0000000a00)=[@cred={0x20, 0xffff, 0x0, r2, r4, r5}, @rights={0x18, 0xffff, 0x1, [r1, r6]}, @cred={0x20, 0xffff, 0x0, r7, r8, r11}, @cred={0x20, 0xffff, 0x0, r12, r13, r15}, @rights={0x28, 0xffff, 0x1, [r1, r0, r0, r0, r1]}, @cred={0x20, 0xffff, 0x0, 0xffffffffffffffff, r16, r17}, @cred={0x20, 0xffff, 0x0, 0x0, r19}], 0xe0}, 0x405) (async) sendto(0xffffffffffffffff, &(0x7f0000000b40)="7e785097447429d50b7b5a6012522f4d49cc2340aded7051b54c5882fb19a641067209031da82faacae2184decdaa70e68f5f258d69cfaf31e0ccbb895837d55e7390861e4df395d04934da4087c5929dbc16004adbaae285d981921e49189bc7d81978bb5932dca81", 0x69, 0x1, 0x0, 0x0) (async) fcntl$getflags(r0, 0x3) (async) r21 = msgget$private(0x0, 0x203) r22 = geteuid() msgctl$IPC_SET(r21, 0x1, &(0x7f0000000bc0)={{0x3, r10, r20, r22, r9, 0x102, 0x5}, 0x9, 0x0, r18, r2, 0x97c, 0x8, 0x6, 0x4}) getegid() (async) bind$unix(0xffffffffffffffff, &(0x7f0000000c40)=@file={0x0, './file0\x00'}, 0xa) (async) r23 = socket(0x20, 0x1, 0x0) setsockopt$sock_cred(r23, 0xffff, 0x1022, &(0x7f0000000c80)={r7, r8, r14}, 0xc) (async) getpgrp() (async) msgget(0x2, 0x100) (async) setegid(r3) 229.34µs ago: executing program 7 (id=743): syz_extract_tcp_res(&(0x7f00000000c0)={0x41424344}, 0x2, 0xfff) syz_emit_ethernet(0xee, &(0x7f0000000180)={@random="fc52b04009c5", @local, [], {@ipv6={0x86dd, {0x9, 0x6, "d92f72", 0xb8, 0xc, 0x9, @remote={0xfe, 0x80, '\x00', 0x0}, @loopback, {[@routing={0x2, 0x0, 0x0, 0x2}, @routing={0xf0, 0x4, 0x0, 0x8, 0x0, [@empty, @mcast1]}, @hopopts={0x1}, @hopopts={0x32, 0x2, '\x00', [@padn={0x1, 0x2, [0x0, 0x0]}, @pad1, @enc_lim, @pad1, @ra={0x5, 0x2, 0x1}, @ra={0x5, 0x2, 0xfffa}]}, @dstopts={0x16, 0x3, '\x00', [@padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1, @enc_lim={0x4, 0x1, 0x9}, @enc_lim={0x4, 0x1, 0xba}, @jumbo={0xc2, 0x4, 0xf}, @enc_lim={0x4, 0x1, 0x2}, @padn]}], @tcp={{0x0, 0x1, 0x41424344, r0, 0x0, 0x0, 0xc, 0x20, 0x1, 0x0, 0xad2a, {[@md5sig={0x13, 0x12, "7c232455e3a8b1d992219332b2de12dd"}, @nop, @sack={0x5, 0x6, [0xfc]}, @window={0x3, 0x3, 0x5}]}}, {"7b39d7662cbaa405"}}}}}}}) sysctl$net_inet_icmp(&(0x7f0000000040), 0x4, 0x0, 0x0, 0x0, 0x0) sysctl$kern(&(0x7f0000000040)={0x1, 0x4f}, 0x3, 0x0, 0x0, &(0x7f0000000080)="4f1d4c6344b80ed788b6a4515248df3aa745bb992c574ab4cdf5587145812eab4a988f7fafd7a01d99776d988908cd186b51f34f8c15ffa0c685ad4116c783959eff4278384b4000384dbb1c2aaeff10b4135529a1da6fda67c67469d954be811b25ec5521559154c586eefff122009f659cd3e27e98a3241495005f102d9101d158284c0ee3250aa7c11042330de22a299ab00894fdc9bac6042d", 0xfffffc56) open$dir(&(0x7f0000000040)='./file0\x00', 0xae828e137847f62, 0x2e) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x3, 0x10, r1, 0x0) syz_emit_ethernet(0xbb, &(0x7f00000000c0)={@broadcast, @empty, [], {@ipv4={0x800, {{0x8, 0x4, 0x0, 0x0, 0xad, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x6, @multicast1, {[@timestamp={0x44, 0xc, 0x0, 0x0, 0xc, [{[], 0x3ff}, {[], 0x4}]}]}}, @tcp={{0x1, 0x2, r0, 0x41424344, 0x0, 0x0, 0x14, 0x1, 0xa78, 0x0, 0x5, {[@md5sig={0x13, 0x12, "7633e40c97eecf7d7d8c9bc026a1cdc8"}, @md5sig={0x13, 0x12, "a8b8d4105c9e2eef9e47b8f0566b67d8"}, @window={0x3, 0x3, 0xb7}, @window={0x3, 0x3, 0x2}, @generic={0x13, 0x4, "e1af"}, @timestamp={0x8, 0xa, 0x6, 0x4}, @eol]}}, {"2b7cddde6f787b80d47fd4f51c66fa46f4d97c27ca9555dd2e9cb2aefcc62e9afbf53b35eb8b88da957d65c1080abe7d7cda69919c54e342e7fc3cb52c"}}}}}}) 0s ago: executing program 0 (id=744): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r1, 0x0, 0x200000000000b, &(0x7f0000000080)='\x00', 0x1) setsockopt$inet_opts(r1, 0x0, 0x200000000000b, &(0x7f0000000340), 0x0) bind$unix(r0, &(0x7f0000000040)=@file={0xd19450564dee018c, './file0\x00'}, 0xa) r2 = socket$unix(0x1, 0x2, 0x0) chmod(&(0x7f0000000080)='./file0\x00', 0x23f) setreuid(0xee00, 0x0) r3 = getuid() close(r0) setreuid(0xee00, r3) connect$unix(r2, &(0x7f0000000000)=@file={0xd1653077bafa0114, './file0\x00'}, 0xa) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.208' (ED25519) to the list of known hosts. aßm0#+"$%.!",%: #/--!.$ %22/2 -!,,/#(): !,,/#!4)/. 4// ,!2'%, 490% = 6, 3):% = 34628169728 0#+"$%.!",%: #/--!.$ %22/2 OpenBSD/amd64 (Amnesiac) (tty00) login: pppx: unable to set addresses for pppx1, error=17 pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error denied attempt to set clock forward to 7885088468817503279 pckbd_enable: command error pckbd_enable: command error panic: kernel diagnostic assertion "map->limit == rtmap_limit" failed: file "/syzkaller/managers/main/kernel/sys/net/rtable.c", line 132 Starting stack trace... panic(ffffffff833396f5) at panic+0x1ba __assert(ffffffff83376ff0,ffffffff833539d2,84,ffffffff833c89c8) at __assert+0x29 rtmap_grow(21,21) at rtmap_grow+0x1f2 rtable_add(20) at rtable_add+0x289 if_createrdomain(20,ffff800001475800) at if_createrdomain+0x40 ifioctl(ffff800001480460,8020699f,ffff8000311b9370,ffff800035d46a98) at ifioctl+0x1c06 sys_ioctl(ffff800035d46a98,ffff8000311b9540,ffff8000311b9490) at sys_ioctl+0x660 syscall(ffff8000311b9540) at syscall+0x962 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x1b88358c350, count: 248 End of stack trace.