last executing test programs: 3.317451093s ago: executing program 6 (id=21): mknod(&(0x7f0000000040)='./file0\x00', 0x2000, 0x6381) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x0) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000300)='#', 0x1}], 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb5219f1000b913f1, 0x0) pwrite(r1, &(0x7f00000000c0)="a7", 0x1, 0x40007) setsockopt(0xffffffffffffffff, 0x1000000029, 0xc, &(0x7f0000000000)="ebffcbff13", 0x5) ioctl$VNDIOCSET(r0, 0xc0384600, &(0x7f00000001c0)={&(0x7f0000000080)='./file0/file0\x00', 0xa, &(0x7f0000000140)='./file0\x00', 0x8}) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) syz_extract_tcp_res(&(0x7f0000000200), 0x2, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket(0x2, 0x4001, 0x0) r3 = fcntl$dupfd(r2, 0x2, 0xffffffffffffffff) r4 = socket(0x2, 0x4001, 0x0) r5 = dup(r4) r6 = fcntl$dupfd(r5, 0x2, 0xffffffffffffffff) mquery(&(0x7f0000ff4000/0x1000)=nil, 0x7ed841f1e000, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r6) r7 = socket(0x2, 0x2, 0x0) connect$unix(r7, &(0x7f0000000000), 0x10) r8 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) r9 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r9, 0xc0106924, &(0x7f00000001c0)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETIF(r8, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) write(r8, &(0x7f00000000c0)="d81ad3bb", 0x4) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) sendmsg(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="01000000010800"/16], 0x10}, 0x2) socket(0x2, 0x400000000002, 0x0) 980.104306ms ago: executing program 7 (id=39): sysctl$ddb(&(0x7f00000000c0)={0x9, 0x5}, 0x2, 0x0, 0x0, &(0x7f0000000380), 0x0) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) getsockopt(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x0) setsockopt$inet_opts(r1, 0x0, 0x200000000000b, &(0x7f0000000080)='\x00', 0x1) setsockopt$inet_opts(r1, 0x0, 0x9, &(0x7f0000000180), 0x0) r2 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) chroot(&(0x7f0000000040)='./file0\x00') unveil(&(0x7f0000000240)='./file0/file0/../file0\x00', &(0x7f00000000c0)='x\x00') unveil(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='x\x00') unveil(&(0x7f0000000340)='./file1\x00', &(0x7f0000000380)='r\x00') pread(r2, &(0x7f0000000140)="7e071a8b", 0x4, 0x10000) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x5, 0x9, 0x7, 0xdf99}]}) syz_emit_ethernet(0x6e, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6036ea0700383a00fe8000000000000000000000000000aaff0200000000000200000000000002907800000000601f100000002c0000000000000000000086a7ff00000000fe8000000000000000000000000000aa1100000300000000000000"]) 953.342909ms ago: executing program 6 (id=43): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000200)=@file={0xd570d0466b6018f, './file0\x00'}, 0xa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0xffff, 0x20, &(0x7f0000000040)=0x400, 0x4) chmod(&(0x7f0000000280)='./file0\x00', 0x38) r3 = socket(0x2, 0x4001, 0x0) r4 = fcntl$dupfd(r3, 0x2, 0xffffffffffffffff) close(r4) getdents(r4, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) setgroups(0x0, 0x0) getsockopt$sock_cred(r5, 0xffff, 0x1022, &(0x7f0000000300)={0x0, 0x0, 0x0}, &(0x7f0000000340)=0xc) setregid(0x0, r6) setreuid(0x0, 0xee01) connect$unix(r2, &(0x7f0000000000)=@file={0xd1653077bafa0114, './file0\x00'}, 0xa) 890.417955ms ago: executing program 6 (id=45): open$dir(&(0x7f0000000280)='.\x00', 0x10000, 0x20) (async) open$dir(&(0x7f0000000280)='.\x00', 0x10000, 0x20) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) socket(0x2, 0x3, 0x40) (async) r0 = socket(0x2, 0x3, 0x40) fcntl$setstatus(r0, 0x4, 0xab5fcf8cab5c23cc) connect$inet(r0, &(0x7f0000000000), 0x10) select(0x40, &(0x7f0000000000)={0xffffffffffffffff}, 0x0, 0x0, 0x0) (async) select(0x40, &(0x7f0000000000)={0xffffffffffffffff}, 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 846.53147ms ago: executing program 6 (id=46): r0 = socket(0x2, 0x8000, 0x2) r1 = socket(0x11, 0x3, 0x0) sendto$unix(r1, &(0x7f0000000200)="b100050146000004000000000700000008008106c297e4fffdf96ecfc73fd3357ae36caa0416fa4f376b36acf00b7805be301e4991f7c8cf5f3fc303ebe1aa5323edeb51e2f0ca3ebbc257699a1f133ea7acb5d602000d7d026ba8af63fc371c2102000000720fd38bfbb770c1f5a8aec872ea772ec58904000000008d9800de5000000000000000000000000000000000000000000000001b00"/177, 0xb1, 0x802, 0x0, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{}, {0x5, 0x0, 0x40}, {0x3, 0x0, 0x0, 0x85}]}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0x37) connect$unix(r0, 0x0, 0x0) sysctl$hw(&(0x7f00000000c0)={0x6, 0x14}, 0x2, &(0x7f0000000180)='\ta\f\x00\x00\x00\x00\x00', &(0x7f0000000040)=0x8, 0x0, 0x0) 845.866153ms ago: executing program 6 (id=47): r0 = socket(0x18, 0x2, 0x0) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200}}) r1 = socket(0x18, 0x3, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) close(r2) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0x3, [{&(0x7f0000695000/0x3000)=nil, &(0x7f000051f000/0x4000)=nil}, {&(0x7f0000695000/0x2000)=nil, &(0x7f0000159000/0x2000)=nil, 0x10001}, {&(0x7f00005fd000/0x1000)=nil, &(0x7f0000690000/0x4000)=nil, 0xfffffffffffffffc}, {&(0x7f00002fc000/0x1000)=nil, &(0x7f0000ff7000/0x3000)=nil}, {&(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x1000)=nil, 0x100000000000}, {&(0x7f00004f8000/0x2000)=nil, &(0x7f000068e000/0x12000)=nil}, {&(0x7f00005e4000/0x4000)=nil, &(0x7f000032a000/0x1000)=nil, 0xffffffffffffffff}, {&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil}, {&(0x7f000013f000/0x2000)=nil, &(0x7f0000604000/0x3000)=nil, 0xfffffffffffffffc}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f00004f6000/0x3000)=nil, 0x8}, {&(0x7f0000ffe000/0x2000)=nil, &(0x7f00004e6000/0x3000)=nil}, {&(0x7f00007f8000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x80000000010001}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil}, {&(0x7f00003f2000/0x2000)=nil, &(0x7f00005e4000/0x1000)=nil}, {&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil}, {&(0x7f0000ff1000/0x1000)=nil, &(0x7f0000ff3000/0x2000)=nil, 0x2}], './file0/file0\x00'}) close(0xffffffffffffffff) r3 = socket(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0xffff, 0x1021, &(0x7f00000002c0)=0x5, 0x4) r4 = socket$inet(0x2, 0x4002, 0x0) setsockopt$inet_opts(r4, 0x0, 0x9, &(0x7f0000000240)="ea00000100000000", 0xc) setsockopt$inet_opts(r2, 0x0, 0xd, &(0x7f0000000240)="ea00000100000000", 0x8) connect$unix(r1, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) getsockname$inet(r1, &(0x7f00000000c0), &(0x7f0000000000)=0xffffffffffffff35) ioctl$VMM_IOC_INFO(0xffffffffffffffff, 0x8020560b, &(0x7f00000000c0)={0x0, 0x0, 0x0}) connect$unix(r0, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) 844.794865ms ago: executing program 5 (id=49): r0 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) readv(r0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/156, 0xfffffdf1}], 0x1) write(r0, &(0x7f0000000040)="e21a2715b725011dfb9c9ec42f7abc2cf6845e1636d21f9cf50f430b8bb9e0709f4fac737da6b216dca43c2b440e50ca92d6ff13a90c905dce532f8ea4ae8599eece705a9e237afba5b9a3bd4f5a18eb236d9af1fa9ac42bebe9367c473c4bf02640f9ffd88cdb03a225be49efdf2b1c7435b5c8cb6b54453f9f06882ca98307d54542674550b8ebf67b7b1cbcd41e424ea68a6e2bd04b48c9504c40ffdfd5c21cf9b25b73f889c9c2a2ecf159044f5c00d4eeb60ac5c4912fffea58fd5f109943e3733935d8a34741d7073cb4addcc25a0933a9ddb5f3860ca7a1c6dc0253933fe94302f636f34e3a", 0xe9) 835.581004ms ago: executing program 5 (id=52): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000380)={'tap', 0x0}) r1 = openat$speaker(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write(r1, &(0x7f0000000300)="23270c5d40ec69a6dc66b94a686f6e64", 0x10) execve(0x0, 0x0, 0x0) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000000)={0x5, &(0x7f0000000280)=[{0x7, 0xff, 0xfa, 0x2}, {0x25, 0x2, 0x2, 0x1fb}, {0x87, 0x0, 0xab, 0xe}, {0x1c, 0x11, 0x20, 0x7}, {0x8, 0x41, 0x8, 0x2}]}) write(r0, &(0x7f0000000200)="d81ad3d20cf7eb4e9be33bbd1a30", 0xe) setuid(0xee01) r2 = syz_open_pts() ioctl$TIOCSPGRP(r2, 0x40047477, 0x0) sysctl$vfs_nfs(&(0x7f00000000c0)={0xa, 0x2, 0x2}, 0x3, 0x0, 0x0, &(0x7f0000000400), 0x0) 834.672972ms ago: executing program 0 (id=55): r0 = socket(0x11, 0x3, 0x0) socket(0x11, 0x3, 0x0) sysctl$net_inet_ip(&(0x7f0000000000)={0x4, 0x2, 0x0, 0x39}, 0x4, &(0x7f0000000040)="0c598a13ecb160932b4b63fd3adaa76b606718713873b0ab0d33c45d161b01849b24a2441effb0fce6adc13b7880fbd2ef91b7b10a4fb10bc0266ef058ed9418af4b2037c27f243b4946af70b7199f0f941e5b12c7dcaba9e55623e71c68b60a7f9e846db2510a092c12d9388014c13c3fa25b37297961d79fd790f8759a5e8f507d716402", &(0x7f0000000100)=0x85, &(0x7f0000000140)="544c553e68ad560a613c027e97a2573c1a3aec494a91954abc54fedcce4d2adb8a3644f19769109640905a55b1a37bfc0d702abab0da30fdd3f163f0a32939d24cdd11a0eb8be23082c7e69d3501f4f7d1dd2b5959c2775472bb079dddc65173d70bb641ad21f3769f76f8bfe130a8b87a8b2e6645b63a8a89f99aa172d43477020cc895448a42baf16e76c03bc8", 0x8e) close(r0) 733.721655ms ago: executing program 0 (id=57): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000300)={'tap', 0x0}) ioctl$BIOCSFILDROP(r0, 0x80044279, &(0x7f00000001c0)=0x2) r1 = openat$speaker(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000700)="9b9b6d4c", 0x4}, {&(0x7f00000002c0)="968ce1c69d9498126527e1ad5174636898ad874ffb39b42f574f4f4cbc90acc1eb117d7e3bf3d52de5d57a7f", 0x2c}], 0x2) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000000)="673bb5b8cc0c16ed08f1b8d24e2217f981aa6a78ef1d357e382526b1573271aeabc1b761eaf1616bf6932da7386d53", 0x2f}], 0x1) execve(0x0, 0x0, 0x0) (async) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0xf, 0xfffffffb}]}) (async) syz_emit_ethernet(0xb9, &(0x7f00000000c0)={@broadcast, @broadcast, [{[{0x88a8, 0x6, 0x0, 0x3}], {0x8100, 0x5, 0x1, 0x1}}], {@ipv4={0x800, {{0xa, 0x4, 0x0, 0x3, 0xa3, 0x64, 0x5, 0x67, 0x4, 0x0, @rand_addr=0x81, @rand_addr=0x3, {[@end, @generic={0x82, 0x10, "af865fbfb413de01d909968aef32"}, @noop, @end, @noop]}}, @generic="d52bfd02f873e038a82af8f1f1f2c6cca654899cb2e20d1aeeda2cce43dd511a54bd89b03519266377e4e7fe982b6176e01e062d1131dee45bac431e37fe031480c38e63b92dad169720439c1e4abe69a3f47cdf8ec2578f43dd971f16bd37e922d4db6589584d32587d15466559bdb34243f4bd1d2c5d2cc7094a"}}}}) (async, rerun: 64) ioctl$BIOCIMMEDIATE(r0, 0x80044270, &(0x7f0000000200)=0x3002) (rerun: 64) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) (async) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) syz_emit_ethernet(0x76, &(0x7f00000005c0)=ANY=[]) 732.981104ms ago: executing program 6 (id=58): select(0x40, &(0x7f0000000000)={0xfffffffffffffffd, 0x3, 0x0, 0x400008000, 0x0, 0x4, 0x1000000000005, 0x7}, 0x0, 0x0, 0x0) pipe(&(0x7f0000000640)={0xffffffffffffffff}) write(r0, &(0x7f0000000340), 0xd4e688a67930cd) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000006c0), 0xf0f75}], 0x1, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f0000000080), 0x1c, 0x0}, 0x0) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x10000000000001}}) bind$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) setrlimit(0x0, &(0x7f00000000c0)={0x0, 0x200100000000}) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket(0x18, 0x1, 0x0) close(r2) r3 = socket(0x18, 0x2, 0x0) setsockopt(r3, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) connect$unix(r2, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) sendmsg$unix(r2, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f00000003c0)={'tap', 0x0}) ioctl$BIOCSETWF(r1, 0x80104277, &(0x7f0000000180)={0x4, &(0x7f0000000000)=[{0x1, 0xbc, 0x5, 0x1}, {0x3c, 0x4, 0x2, 0x5}, {0x1, 0x2, 0x8, 0x8}, {0x46, 0x4, 0xc, 0x5}]}) write(r1, &(0x7f0000000200)="d81ad3d20cf7eb4e9be33bbd1a30", 0xe) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)='\x00\x00\x00', 0x3}], 0x1) close(r0) r4 = socket(0x2, 0x2, 0x0) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) connect$unix(r4, &(0x7f0000000000), 0x10) r5 = socket(0x11, 0x3, 0x0) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000001c0)={{}, 0xffffffffffffffff}) setsockopt$sock_int(r5, 0xffff, 0x1002, &(0x7f0000000080), 0x4) socket(0x2, 0x2, 0x0) 731.61909ms ago: executing program 7 (id=60): poll(&(0x7f0000000100)=[{0xffffffffffffffff, 0x8}, {0xffffffffffffffff, 0x20}], 0x2, 0xa5) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) 666.445918ms ago: executing program 0 (id=64): r0 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000140), 0x782, 0x0) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x62}) writev(0xffffffffffffffff, &(0x7f0000001c00)=[{&(0x7f0000000180)="fecd7cf41680727aa760cbe5ec7aed8d1eed861e41fc318652859771bba8d30c13ba4c732411c939f9c2f699768b7e707394648e288905ee02aceb0b1b102c0a497a636cd46eddbe550d33a412c26d5f2ead34478b1796da", 0x58}, {&(0x7f0000000340)}], 0x2) r1 = syz_open_pts() close(r1) syz_open_pts() ioctl$TIOCSETD(r1, 0x8004741b, &(0x7f0000000080)=0x7) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) pwritev(r0, &(0x7f00000009c0)=[{&(0x7f0000000000)="3927a9c15e9bab4db009000000b6edcfa1", 0x11}], 0x1, 0x4) 664.774093ms ago: executing program 2 (id=66): setitimer(0x0, 0x0, 0x0) 664.22871ms ago: executing program 4 (id=67): r0 = socket(0x18, 0x2, 0x0) connect$unix(r0, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) (async) connect$unix(r0, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) setsockopt(r0, 0x1000000029, 0x3f, &(0x7f0000000000)="6744d6e1", 0x4) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000040)="3a32fc89937a465d8e", 0x9}], 0x1) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$BIOCSETWF(r1, 0x80104277, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0xe4, 0x0, 0xf, 0x6}]}) (async) ioctl$BIOCSETWF(r1, 0x80104277, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0xe4, 0x0, 0xf, 0x6}]}) 463.342651ms ago: executing program 3 (id=68): r0 = socket(0x18, 0x2, 0x0) setsockopt(r0, 0x1000000029, 0x41, 0x0, 0x0) r1 = openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000000000), 0xa30, 0x0) accept$unix(r1, &(0x7f0000000040)=@abs, &(0x7f0000000080)=0x8) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x0, 0xfd, 0x0, 0x6}, {0x0, 0x0, 0x0, 0x3}]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r2, 0xffff, 0x1022, &(0x7f00000000c0), &(0x7f0000000000)=0xc) setrlimit(0x3, &(0x7f0000000180)={0xb66c, 0x100000}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x37}, 0x4, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xfdf1, 0x0, 0x2e) semget$private(0x0, 0x6, 0x0) 462.725575ms ago: executing program 2 (id=69): r0 = open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) clock_gettime(0x0, &(0x7f0000000000)) (async) writev(r0, &(0x7f00000008c0)=[{&(0x7f00000007c0)='C', 0x1}], 0x1) mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x3, 0x10, r0, 0x0) (async) pwrite(r0, &(0x7f0000001080)='q', 0x1, 0x9) 416.466431ms ago: executing program 2 (id=70): r0 = socket(0x2, 0x3, 0x0) ioctl$FIONREAD(r0, 0xc0206921, &(0x7f00000001c0)) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0x66, &(0x7f0000000000)={0x0, 0x1, 0x65, 0x604d, 0x4}, 0xc) (async) preadv(0xffffffffffffffff, &(0x7f0000002480)=[{0x0}], 0x1, 0x4) 415.938758ms ago: executing program 4 (id=71): msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000080)={{0x5, 0x0, 0x0, 0x0, 0x0, 0x18, 0x1}, 0x6, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x9}) (async) msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000080)={{0x5, 0x0, 0x0, 0x0, 0x0, 0x18, 0x1}, 0x6, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x9}) socket(0x18, 0x2, 0x0) (async) r0 = socket(0x18, 0x2, 0x0) ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f0000000080)={0x0, 0x400000, 0x0, 0x6, "28b77c09b87aa57800080017d0d2000010001c00", 0xffdffffc, 0x3}) close(r0) r1 = socket(0x800000018, 0x1, 0x0) setsockopt$sock_int(r1, 0xffff, 0x1000, &(0x7f0000000000)=0xb, 0x4) bind$unix(r1, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) connect$unix(r0, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x32, 0x13}, 0x80000000000004, 0x3d3, 0xffffffffffffffff, 0x0, 0x7, 0x9, 0x1, 0xffe}) r2 = socket(0x800000018, 0x1, 0x0) bind$unix(r2, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) (async) bind$unix(r2, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) ioctl$TIOCMGET(0xffffffffffffff9c, 0x4004746a, &(0x7f0000000100)) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000580), 0x40, 0x0) ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) (async) ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x25, 0x0, 0x0, 0x8000001}, {0xb1, 0x10, 0x2, 0x4}, {0x16, 0x7, 0x7f, 0x400f}]}) pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000140)="6aab0d39fa00fa80404d424f010000ba0fdd01050b5336d3c9fde31e0538da113dd31b9286", 0x25}], 0x1, 0x5) (async) pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000140)="6aab0d39fa00fa80404d424f010000ba0fdd01050b5336d3c9fde31e0538da113dd31b9286", 0x25}], 0x1, 0x5) sysctl$kern(0x0, 0x0, &(0x7f0000000680)="71ff03000088e537dc3d33d7af002980247821e93bf6a24f562404be9931d0eef39a243da0f9b792a0806c36", &(0x7f0000000080)=0x2c, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETF(r3, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) (async) ioctl$BIOCSETF(r3, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0xe, &(0x7f0000000100)=ANY=[]) (async) syz_emit_ethernet(0xe, &(0x7f0000000100)=ANY=[]) sysctl$kern(&(0x7f0000000000)={0x6, 0x19}, 0x2, 0x0, 0x0, 0x0, 0x0) 404.015572ms ago: executing program 5 (id=72): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000000380)={0x0, 0x0, 0x0}, &(0x7f00000000c0)=0xc) msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000080)={{0x5, 0x0, 0x0, 0x0, r1, 0x11, 0x4000}, 0x8000, 0x101, 0xffffffffffffffff, 0x0, 0x0, 0x100000000, 0x9}) r2 = socket(0x18, 0x2, 0x0) close(r2) r3 = socket(0x800000018, 0x1, 0x0) setsockopt$sock_int(r3, 0xffff, 0x1000, &(0x7f0000000000)=0xb, 0x4) bind$unix(r3, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) connect$unix(r2, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) r4 = socket(0x800000018, 0x1, 0x0) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000040)={{0x85, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x104, 0x7}, 0x7, 0x7}) bind$unix(r4, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r5 = socket(0x18, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000080)={0x18, 0x1, 0x9, 0x9}, 0xc) setsockopt(r5, 0x1000000029, 0xfffffff9, &(0x7f0000000040)="ebffcbff13b903812eaa4e713048070000009648", 0x14) setsockopt(r5, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbdf13b9fd812eaa4e713048e69931929648", 0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000000380), &(0x7f00000000c0)=0xc) (async) msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000080)={{0x5, 0x0, 0x0, 0x0, r1, 0x11, 0x4000}, 0x8000, 0x101, 0xffffffffffffffff, 0x0, 0x0, 0x100000000, 0x9}) (async) socket(0x18, 0x2, 0x0) (async) close(r2) (async) socket(0x800000018, 0x1, 0x0) (async) setsockopt$sock_int(r3, 0xffff, 0x1000, &(0x7f0000000000)=0xb, 0x4) (async) bind$unix(r3, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) (async) connect$unix(r2, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) (async) socket(0x800000018, 0x1, 0x0) (async) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000040)={{0x85, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x104, 0x7}, 0x7, 0x7}) (async) bind$unix(r4, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) socket(0x18, 0x1, 0x0) (async) bind$inet6(r5, &(0x7f0000000080)={0x18, 0x1, 0x9, 0x9}, 0xc) (async) setsockopt(r5, 0x1000000029, 0xfffffff9, &(0x7f0000000040)="ebffcbff13b903812eaa4e713048070000009648", 0x14) (async) setsockopt(r5, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbdf13b9fd812eaa4e713048e69931929648", 0x14) (async) 400.875991ms ago: executing program 7 (id=73): writev(0xffffffffffffffff, &(0x7f0000001480)=[{&(0x7f0000000240)="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", 0x54e}], 0x1) r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000200), 0x200, 0x0) syz_emit_ethernet(0x8e, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd6089958900582b00fe80000000000000000000c7000000aafe"]) sendmsg$unix(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000700)="57b6f97b9c7041c775c523fb72160950a4cb05664a39ee47de92c1835d81b6aeae0a519458e7c35d2b714b4f02489dc529afd4f787ba10bc9e1157cec38894790ef36fc17e803f7e0e3b0400166f21c8cf424e30017c5fa611988021198bc5d1f1480784bbec725be8aaeb9b1106be967ee5468657967aa259812a74fe9a9b0f20145c4aefa87c430e0a6d5402", 0x8d}], 0x1}, 0x0) ioctl$TIOCSETA(r0, 0xc0504417, &(0x7f0000000740)={0x2, 0x401, 0x1000000, 0x5, "00000003000000000f0000000000000000f30500", 0x8808, 0x2}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb5219f1000b913f1, 0x0) writev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000000), 0x2cfea}], 0x1000000000000013) pwrite(r1, &(0x7f00000000c0)="a7", 0x1, 0x40007) ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x40000530, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x8000, 0x0) openat$vnd(0xffffffffffffff9c, &(0x7f0000000080), 0x8, 0x0) 400.46714ms ago: executing program 0 (id=74): ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, 0x0) open$dir(&(0x7f0000000040)='./file0\x00', 0xae828e137847f62, 0x0) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x2, 0x0) pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="1cd2d176f4b8f82c1d09936270286ea75b958983a9f15438392f4d2feb0900000000000ef962", 0xa8269}], 0x1, 0x0) r1 = open$dir(&(0x7f00000002c0)='./file0\x00', 0x1, 0x0) ftruncate(r1, 0x80002) r2 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280)=[{&(0x7f0000000200)=""/80, 0x50}], 0x1, 0xded8) preadv(r2, &(0x7f00000004c0)=[{&(0x7f00000000c0)=""/99, 0xfffffd23}], 0x1, 0x0) setrlimit(0x8, &(0x7f0000000980)={0xb, 0x54}) r3 = syz_open_pts() close(r3) syz_open_pts() r4 = socket$unix(0x1, 0x5, 0x0) fchmod(r4, 0xb) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2, 0x811, r4, 0x7ff) ioctl$TIOCSETA(r3, 0x802c7414, &(0x7f0000000080)={0xf66a, 0x3e, 0x1, 0x7ffffffc, "3cee7cae307e07000000ff070000a825952300", 0x0, 0xfffe}) writev(r3, &(0x7f0000000200)=[{&(0x7f00000001c0)="e36495a3ac744e9a1dfa42a334d9918f4ee71836c8cb5f0d027e8ba4e4", 0x1d}], 0x1) sysctl$kern(&(0x7f0000000000)={0x1, 0x35}, 0x2, 0x0, 0x0, 0x0, 0x0) sysctl$kern(&(0x7f0000000040)={0x1, 0x1b}, 0x2, &(0x7f00000000c0)="b91c534aea0dc03a04fb38215d53f35c0e72a29987a7bfd8abfa30155c3397f0150490b796d6d2544f1fe7165aa8741c55c199e98dfdccff13ffdadc21568f3a19471a4f4b7ab79b9ce3d59d6f4f8223c7d3b602cbfd55b3906e1c2c5e3fb5dfedf8e96cfd4fd86a6f6e71595ed0b7d56bdda0d93d0588529f3556f3b6beaddecb87bb5cf0e642173bec44960e29033fa906b23198369d63", &(0x7f0000000180)=0x98, &(0x7f0000000240)="2eac12245dd70c415fb10ea751b4eeab30d4f5e97bb127b85f8d45d6c6ac6c25fa779bef4884d10b480dd0658c0e9d3403b72cd037a5cb7814d16c33fb43e6111ed489d50213a31be451717344d6ab10dc16a7cb24b235fe81d784626899cb22845503de4ab00ea8deed3f05d368ed6cb8dc2341767d4e22c11f0bbe", 0x7c) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) sysctl$kern(&(0x7f0000000000)={0x1, 0x42}, 0x6, 0x0, 0x0, 0x0, 0x0) 350.31341ms ago: executing program 2 (id=75): mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x2000, 0x4800) preadv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000100)=""/254, 0xfffffc47}, {&(0x7f0000000200)=""/171, 0xab}, {&(0x7f00000002c0)=""/243, 0xe2}], 0x50, 0x0) r0 = open(&(0x7f00000003c0)='./bus\x00', 0x0, 0xb) r1 = msgget(0x1, 0x2b) getsockopt$SO_PEERCRED(r0, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0}, 0xc) r3 = geteuid() r4 = getpgrp() r5 = getpgrp() msgctl$IPC_SET(r1, 0x1, &(0x7f0000000400)={{0x8, r2, 0x0, r3, 0xffffffffffffffff, 0x128, 0x3}, 0xf4, 0x1, r4, r5, 0x2, 0x624, 0xfffffffffffffffe, 0x81}) openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x10, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x10, 0x0) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) fcntl$lock(r6, 0x9, &(0x7f00000003c0)={0x0, 0x0, 0x7fffffffffffffff, 0x1ffffffff}) ioctl$TIOCFLUSH(r0, 0xc0187009, &(0x7f0000000080)=0x400) 348.306521ms ago: executing program 3 (id=76): r0 = socket(0x2, 0x4, 0x0) setsockopt$inet_opts(r0, 0x0, 0x14, &(0x7f00000001c0)="02000000", 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r1, 0xffff, 0x1006, 0x0, 0x0) syz_emit_ethernet(0x66, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd605d34520030000000000000000000000000000000000000000000009f0500040000000000000001010090780000000060397772"]) ioctl$PCIOCGETROM(0xffffffffffffff9c, 0xc0107005, &(0x7f0000000040)={{}, 0xa, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r2 = socket(0x11, 0x3, 0x0) sysctl$hw(&(0x7f0000000080)={0x6, 0x16}, 0x2, &(0x7f00000000c0)="2d821956", &(0x7f0000000140)=0x4, 0x0, 0x0) sendto$unix(r2, &(0x7f0000000000)="b1000513000000000000000004000000000013fecea10500fef96ecf2ac72fd3357ae30200004e3039d2d236acf20b7804be38164991f7c8cf7f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f335c223e7d0c032bfa896443a41002000000720fd38bfbb770c1f5a872c88106002ec5890400000000000000361b1257aea8c500002002fbfe0c2300008abfba0900000008e371a3f8343712051eeab7196fcbd80407000000c011200000", 0xb1, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000080)="76e5eac907f9ccf7a251ceddcec7d6aa45cffe2c63a56077123a276d3ba4e9d17eb3eb5db12a3783a8e0620d357de1fe04fa9465b5bd1286e9624dec06a00c222f", 0x41}], 0x1) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x6dcc49210b980b6d) unveil(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000300)='W\x00') syz_open_pts() 341.331198ms ago: executing program 5 (id=77): openat$pf(0xffffffffffffff9c, 0x0, 0x400, 0x0) semget(0x0, 0x1, 0x281) (async) r0 = semget(0x0, 0x1, 0x281) setregid(0x0, 0x0) setuid(0xee01) semctl$IPC_STAT(r0, 0x0, 0x2, 0x0) sysctl$hw(&(0x7f00000001c0)={0x6, 0x5}, 0x2, 0x0, 0x0, 0x0, 0x0) openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) (async) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCSETWF(r1, 0x80104277, &(0x7f00000001c0)={0x3, &(0x7f0000000040)=[{0x40, 0x4, 0x4, 0x1}, {0x6fb8, 0x6, 0xd, 0xfffffffc}, {0xa, 0x0, 0x9, 0x7fc}]}) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2000, 0xffff4f70) (async) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2000, 0xffff4f70) r2 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) close(r2) socket(0x11, 0x3, 0x0) (async) r3 = socket(0x11, 0x3, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) rename(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00') (async) rename(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00') openat$vnd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) r4 = openat$vnd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) kqueue() (async) r5 = kqueue() kevent(r5, &(0x7f0000000440)=[{{r4}, 0xfffffffffffffffc}], 0x7ffe, &(0x7f00000001c0), 0x58, 0x0) sendto$unix(r3, &(0x7f0000000180)="b1000501600000000000000007000000330002000000000000f96ecfc72fd3357ae320b37b673039d2d236acf20b7804be38164991f7c8cf5f882b297be1aa5b236de351e2f0ac3ebbc257699a5f139b672f4d335d223e7d026ba8af630037282102000000720fd38bfbb770c1f5a872c881ea6e69e0bb76d907c400000000361b1257aea8c500002002fbff0c2300008abfba0900000008e371a3f8343712051eadb71d89e000040781e4b2feff000000", 0xb1, 0x0, 0x0, 0x0) (async) sendto$unix(r3, &(0x7f0000000180)="b1000501600000000000000007000000330002000000000000f96ecfc72fd3357ae320b37b673039d2d236acf20b7804be38164991f7c8cf5f882b297be1aa5b236de351e2f0ac3ebbc257699a5f139b672f4d335d223e7d026ba8af630037282102000000720fd38bfbb770c1f5a872c881ea6e69e0bb76d907c400000000361b1257aea8c500002002fbff0c2300008abfba0900000008e371a3f8343712051eadb71d89e000040781e4b2feff000000", 0xb1, 0x0, 0x0, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r6 = socket(0x2, 0x2, 0x0) ioctl$FIONREAD(r6, 0x8040691a, &(0x7f00000001c0)) (async) ioctl$FIONREAD(r6, 0x8040691a, &(0x7f00000001c0)) fcntl$lock(r2, 0x9, &(0x7f00000000c0)={0x0, 0x0, 0x5, 0x100000000000000, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@file={0x1, './file0/file0\x00'}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r7 = socket(0x6, 0x4000, 0xf6) setsockopt(r7, 0x80000000, 0x800008, &(0x7f0000000480)="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", 0xffffffffffffff37) r8 = msgget(0x3, 0x280) msgrcv(r8, 0x0, 0x0, 0x1, 0x616f099d53ba3571) msgctl$IPC_RMID(r8, 0x2000000) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000240)={0x5, &(0x7f0000000080)=[{0x8, 0xf2, 0x1, 0x1000}, {0x10, 0x6, 0xf, 0x5}, {0xfa, 0x7, 0x8, 0x2}, {0xc, 0x4, 0x2, 0x7fff}, {0x1, 0x7a, 0x4, 0x3ff}]}) (async) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000240)={0x5, &(0x7f0000000080)=[{0x8, 0xf2, 0x1, 0x1000}, {0x10, 0x6, 0xf, 0x5}, {0xfa, 0x7, 0x8, 0x2}, {0xc, 0x4, 0x2, 0x7fff}, {0x1, 0x7a, 0x4, 0x3ff}]}) 340.505365ms ago: executing program 7 (id=78): ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x81, 0x0, 0x4, 0x4}, {0x4, 0x0, 0x1, 0x441}, {0x6, 0x0, 0x0, 0x401}]}) (async) setuid(0xffffffffffffffff) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) r0 = socket(0x18, 0x2, 0x0) setsockopt(r0, 0x1000000000029, 0x9, &(0x7f0000000040)="03000000", 0x4) (async) r1 = dup(r0) getsockname$inet(r0, &(0x7f00000000c0), &(0x7f00000001c0)=0xc) (async) setsockopt(r1, 0x1000000000029, 0xc, &(0x7f0000000000)="ffdaf64c000000004f0527000000055e473e0000", 0x14) (async) open(&(0x7f0000000280)='./file0\x00', 0x8aa0, 0x0) ktrace(&(0x7f0000000040)='./file0\x00', 0x4, 0xb1c, 0x0) (async) stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)) 278.875638ms ago: executing program 2 (id=79): syz_emit_ethernet(0x56, &(0x7f0000000080)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x48, 0x0, 0x8, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0x0}, @broadcast}, @icmp=@parameter_prob={0xc, 0x2, 0x0, 0x3, 0x5, 0x0, {0xa, 0x4, 0x0, 0x2, 0x9, 0x67, 0x200, 0x2, 0x2f, 0x73c1, @loopback, @broadcast, {[@timestamp={0x44, 0x4, 0x1, 0x0, 0x9}, @timestamp={0x44, 0x4, 0xa5, 0x0, 0xb}, @end, @noop, @generic={0x82, 0x7, "ea318f04c1"}]}}, "0000e20e"}}}}}) (async) r0 = socket(0x2, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000040)=@abs={0x1, 0x0, 0x1}, 0x8) r1 = socket(0x18, 0x3, 0x3a) setsockopt(r1, 0x29, 0x6c, &(0x7f0000000040), 0x4) (async, rerun: 64) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0x66, &(0x7f0000000240)={0x0, 0x1, 0x0, 0x3}, 0xc) (rerun: 64) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0x67, &(0x7f0000000100)={0x0, 0x0, 0xfc, 0x4587}, 0xc) (async) sysctl$net_inet_ip(&(0x7f0000000080)={0x4, 0x2, 0x0, 0x25}, 0x4, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) r2 = socket(0x2, 0x2, 0x0) (async, rerun: 32) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) ioctl$FIONREAD(r2, 0xc0206923, &(0x7f00000001c0)) connect$unix(r2, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0xa) (async, rerun: 32) ioctl$FIONREAD(r0, 0x8040691a, &(0x7f00000001c0)) (rerun: 32) syz_emit_ethernet(0x5a, &(0x7f0000000180)={@random="b90531074b01", @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x2, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0x0}, @broadcast}, @tcp={{0x2, 0x1, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}, {"c314d8a6d1169ddf9e9117e6e1895dc942b1c62e8aa51777e4ea9965799c9cf1e9ec2102"}}}}}}) (async) syz_emit_ethernet(0x400e, &(0x7f0000000700)=ANY=[@ANYBLOB="aaaaaaaaaaaa7011f5b3752786dd60756899000c3aebfb0300000000000053000000000000bbfe7100000000001000000000000000aac8"]) 277.670575ms ago: executing program 3 (id=80): setrlimit(0x8, &(0x7f0000000580)={0xa, 0x56}) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) (async) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = socket(0x2, 0x1, 0x0) nanosleep(0x0, 0x0) (async) nanosleep(0x0, 0x0) syz_emit_ethernet(0x0, 0x0) r1 = openat$bpf(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$BIOCSETWF(r1, 0x80104277, 0x0) write(r1, 0x0, 0x0) connect$unix(r0, &(0x7f0000000440)=@abs={0x1, 0x0, 0x0}, 0x8) syz_open_pts() (async) r2 = syz_open_pts() sysctl$hw(&(0x7f00000000c0)={0x6, 0x12}, 0x2, 0x0, &(0x7f0000000080), 0x0, 0x0) (async) sysctl$hw(&(0x7f00000000c0)={0x6, 0x12}, 0x2, 0x0, &(0x7f0000000080), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$hw(&(0x7f00000000c0), 0x2, &(0x7f00000001c0), &(0x7f0000000080), 0x0, 0x0) (async) sysctl$hw(&(0x7f00000000c0), 0x2, &(0x7f00000001c0), &(0x7f0000000080), 0x0, 0x0) close(r2) syz_open_pts() sysctl$kern(&(0x7f0000000300)={0x1, 0xb}, 0x2, 0x0, 0x0, &(0x7f0000001440), 0x0) socket(0x18, 0x2, 0x0) (async) r3 = socket(0x18, 0x2, 0x0) setsockopt$sock_int(r3, 0xffff, 0x200, &(0x7f0000000040)=0x9, 0x4) connect$unix(r3, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f0000000380)={0x7fffffff, 0x7bed, 0xffffdf82, 0xffffff8d, "1826284ed92ca2e4aa13e40010e0ff7f05000004", 0x0, 0x20000}) writev(r2, &(0x7f0000000300)=[{&(0x7f0000001500)="987e0cbe7b1dd365c83ccfdf627b70443a3a3410665ddf12bf4131ed5c40342c0000000000000000c94e12e937cfcf47b4b74127b077a7e4ca800dd73f18036abb47682172e7c35481245c00", 0x4c}], 0x1) 272.222756ms ago: executing program 1 (id=81): r0 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r1 = fcntl$getown(r0, 0x5) (async) r2 = open(&(0x7f0000000040)='./file0\x00', 0x1, 0x1b0) ioctl$DIOCMAP(r0, 0xc0106477, &(0x7f00000000c0)={&(0x7f0000000080)='./file0\x00', r2}) ioctl$WSMUXIO_ADD_DEVICE(r2, 0x80085761, &(0x7f0000000100)={0x3, 0x8}) r3 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000340), 0x8, 0x0) r4 = getuid() getgroups(0x7, &(0x7f0000000380)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff]) getsockopt$SO_PEERCRED(r2, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, 0x0}, 0xc) (async) getsockopt$SO_PEERCRED(r2, 0xffff, 0x1022, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0xc) sendmsg$unix(r2, &(0x7f0000000500)={&(0x7f0000000140)=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000000300)=[{&(0x7f0000000180)="bb26d0b89c09950fa955c8a2cc6fffb2d1a39ae1c7a681fa60ec2f9f16e8421aaaec832fd3fdc58760b706c3dd51d07f2b03e81585d4612cd40e21968d8c1b98b004a672cad32c00a7a1fceb0e38b35ac16ebb243f9368c253658b072a396ad8daae454f8ae9cee4d51aa4593a1bf971345ae37b736417d7ab206182f3509c2b06c5b9742712536142cb51c0c4fd9b013fef351bd313042243e6888db6eef22187d5224921b522326e6e3e23457e742d4b0cbc535d4e7c4869bac52d629027a24bd8ae4cd964fdb051e4a9cc1d080458586fe3d4834fd7629acbf14f340354476b110a54aea28eb6e00b003ced02dcd8b0b2912bad7b27", 0xf7}, {&(0x7f0000000280)="ccc11d047a7d2b176e61f88d984b70d12ec50b95d3155fe7067b683002d049f3281bcf75fb85aef4f361cb00f8367f18b5a7fd5068a6a69811f8d50a074b82f0d9bd811474abe53eac614c1324e929f0cded4a6f", 0x54}], 0x2, &(0x7f0000000440)=[@rights={0x20, 0xffff, 0x1, [r2, 0xffffffffffffffff, r0]}, @rights={0x28, 0xffff, 0x1, [r0, r3, r0, r0, r2]}, @cred={0x20, 0xffff, 0x0, r1, r4, r5}, @cred={0x20, 0xffff, 0x0, r1, r6, r7}], 0x88, 0x40c}, 0x7) (async, rerun: 32) r8 = socket$inet6(0x18, 0x4, 0xfc) (rerun: 32) r9 = shmget$private(0x0, 0x4000, 0x80, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_STAT(r9, 0x2, &(0x7f0000000540)=""/168) ioctl$LIOCSFD(r2, 0x80046c7f, &(0x7f0000000600)=r2) shmctl$SHM_LOCK(r9, 0x3) r10 = shmget$private(0x0, 0x4000, 0x81, &(0x7f0000ffb000/0x4000)=nil) shmctl$SHM_UNLOCK(r10, 0x4) writev(r8, &(0x7f00000007c0)=[{&(0x7f0000000640)="c36a6fd758e83ce25cbbb2145bc22f2a934a878b439a285d1994f45a0a86bbbe63b246d091", 0x25}, {&(0x7f0000000680)="0b3c5e015fc88d32fff50c74", 0xc}, {&(0x7f00000006c0)}, {&(0x7f0000000700)="5944742fbdd78a4fa9fc44b6acce5490d12b8c3c3b0e7af22a1d324d", 0x1c}, {&(0x7f0000000740)="add8633f7adb369dab4252b13499efd154c5bfafcdbf09d3df99778ab684711036325d240670ff701741054d792017723089e548b8f3456f31307925f40568e7d16814267e58484075fe", 0x4a}], 0x5) (async, rerun: 32) getdents(r8, &(0x7f0000000840)=""/119, 0x77) (async, rerun: 32) shmctl$IPC_RMID(r9, 0x0) (async) getsockopt$SO_PEERCRED(r8, 0xffff, 0x1022, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0xc) fchown(r2, r6, r11) utimensat(r2, &(0x7f0000000900)='./file0\x00', &(0x7f0000000940)={{0x10000, 0x5}, {0x0, 0x8}}, 0x0) bind$unix(r3, &(0x7f0000000980)=@file={0x1, './file0\x00'}, 0xa) r12 = openat$zero(0xffffffffffffff9c, &(0x7f00000009c0), 0x800, 0x0) ioctl$TIOCSCTTY(r12, 0x20007461) ioctl$WSDISPLAYIO_SVIDEO(r2, 0x80045745, &(0x7f0000000a00)) r13 = shmget$private(0x0, 0x3000, 0x159, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_LOCK(r13, 0x3) 271.496823ms ago: executing program 4 (id=82): unveil(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000300)='x\x00') mknod(&(0x7f0000000000)='.\x00', 0x1, 0x0) r0 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f00000000c0), 0x84c7aa6835e42185, 0x0) ioctl$WSMUXIO_ADD_DEVICE(r0, 0x80085761, &(0x7f0000000100)={0x1, 0x1}) ioctl$TIOCCONS(r0, 0x80047462, &(0x7f0000000040)=0x4) 214.050574ms ago: executing program 1 (id=83): writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000001240)="cc60d3d79a1a7132a5fb9d9a42c86f341fbf872ef7652736f10f86d45ae419b2ecf7af93d33b3de1f2c56c0d93da7484095d0d543baf7f0161a025c9c02a561f9a76d06f1eaec7d8df99d6c28b10fa891e47d6c3bba690a611889032ac7b3581d7c92d1c546e59764f0690483168fb177be649004fb56a7d46c856a20d73f050bf29d58b803a676cc3761e8a47857f51d90a4465f9c605ab2829d78ea2571900"/170, 0xaa}, {&(0x7f0000000080)="b389e5ae", 0x4}, {&(0x7f0000000240)="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", 0x910}], 0x3) r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x1, 0x0) setegid(0x0) (async, rerun: 32) ioctl$TIOCSETA(r0, 0xcd504404, &(0x7f0000000740)={0x0, 0x2, 0x0, 0x0, "d6a249ebb178926c79486b47c1d100"}) (rerun: 32) 212.569912ms ago: executing program 4 (id=84): r0 = openat$vnd(0xffffffffffffff9c, &(0x7f00000010c0), 0x100, 0x0) kevent(0xffffffffffffffff, &(0x7f00000002c0)=[{{}, 0xfffffffffffffffe, 0xdd, 0x2, 0x9, 0x4}, {{}, 0xfffffffffffffff9, 0x58, 0x2, 0xfffffffffffff31f, 0x40}, {{}, 0xfffffffffffffffe, 0x99, 0xf0000000, 0x1, 0xf}, {{r0}, 0xfffffffffffffffe, 0x25, 0x700fffff, 0x3}, {{0xffffffffffffff9c}, 0xffffffffffffffff, 0xa0, 0x1, 0xf9, 0xffffffff}, {{r0}, 0xfffffffffffffff8, 0x56, 0x2, 0x9, 0x1}, {{r0}, 0xfffffffffffffff8, 0x8, 0x40000000, 0x1, 0xe}, {{r0}, 0xfffffffffffffffe, 0x86, 0x80, 0xff, 0x10801}], 0xde50, 0x0, 0x3, 0x0) r1 = kqueue() kevent(r1, &(0x7f00000000c0), 0x138, 0x0, 0xffffffff, 0x0) r2 = socket$inet(0x2, 0x4, 0x52) getsockname(r2, &(0x7f0000000000)=@in, &(0x7f0000000040)=0xc) 207.524346ms ago: executing program 3 (id=85): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000580), 0x40, 0x0) r1 = dup(0xffffffffffffff9c) ioctl$BIOCGDIRFILT(r1, 0x4004427c, &(0x7f0000000180)) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x25, 0x0, 0x0, 0x8000001}, {0xb1, 0x10, 0x2, 0x4}, {0x16, 0xf2, 0x7f, 0x400b}]}) pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000001c0)="5307fd85ed28a890fab136de9c9fec99daf569607c", 0x15}], 0x1, 0x9) sysctl$kern(0x0, 0x0, &(0x7f0000000100)="02170300000e00001a020000de6649ed0ca799191f6c410c634692fcdcad46e4ca2688bb19a0c056f315ec2226f44bb1a9ac80cde93e6136149b217ba8eb9e92a4ebcb7e", &(0x7f0000000080)=0x44, 0x0, 0x0) pwritev(r0, &(0x7f0000000180), 0x0, 0x6885) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0xe, &(0x7f0000000100)=ANY=[]) mknod(&(0x7f0000000200)='./file0\x00', 0x2000, 0x412dff) r2 = open$dir(&(0x7f0000000000)='./file0\x00', 0x2, 0x0) writev(r2, &(0x7f0000000340)=[{&(0x7f0000000000), 0x2cfea}], 0x1000000000000013) 207.304367ms ago: executing program 1 (id=86): mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x412dff) setpgid(0xffffffffffffffff, 0x0) ioctl$VNDIOCGET(0xffffffffffffff9c, 0xc4104603, &(0x7f0000000480)={'./bus\x00', 0x8, 0x1, 0xfff}) ioctl$VNDIOCSET(0xffffffffffffffff, 0xc0384600, &(0x7f0000000400)={0x0, 0x3, 0x0}) r0 = open(&(0x7f0000000080)='./bus\x00', 0x800, 0x10c) preadv(r0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/104}, {&(0x7f0000000140)=""/192}, {&(0x7f0000000340)=""/175}, {&(0x7f0000000000)=""/18}], 0x10000000000002b8, 0x0) 206.859901ms ago: executing program 5 (id=87): r0 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) r1 = dup2(r0, r0) ioctl$WSKBDIO_SETMODE(r1, 0x80045713, &(0x7f0000000000)=0x1) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000080)="76e5eac907f9ccf7a251ceddcec7d6aa45cffe2c63a56077123a276d3ba4e9d17eb3eb5db12a3783a8e0620d357de1fe04fa9465b5bd1286e9624dec06a00c222f", 0x41}, {&(0x7f0000000000)="4cb5eeb02afb444b6f0195cc600efaa21bce85f544d52d7a595236aea0a6a3af697b71ad6151dbbdc15d64f099a3c3a6afd6bf44f6576f54758227018210ed8279166262e84b751616e203a0e40429f3e712ae107c7cc206c1d25f51c17c1aec42179453ab0f86ef2c248ebd3403b3a795940400e91a452d54a213dd90", 0x7d}], 0x1000033d) sysctl$hw(&(0x7f0000001680)={0x6, 0x14}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1024, &(0x7f0000000240)={0x0}, &(0x7f0000000280)=0x2) ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x18, r3) fcntl$lock(r2, 0xe, &(0x7f00000002c0)={0x3, 0x2, 0x5, 0xffff, r3}) ioctl$BIOCSETIF(0xffffffffffffff9c, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) setrlimit(0x8, &(0x7f0000000980)={0x46, 0x56}) r4 = syz_open_pts() close(r4) syz_open_pts() ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f0000000340)={0x10, 0x0, [{&(0x7f00000a0000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x10001}, {&(0x7f00000a7000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x7}, {&(0x7f000008e000/0x11000)=nil, &(0x7f0000090000/0x1000)=nil, 0x8000100000000}, {&(0x7f00000a7000/0x1000)=nil, &(0x7f000009a000/0x2000)=nil, 0x400000000003}, {&(0x7f00002c9000/0x3000)=nil, &(0x7f00000a6000/0x2000)=nil, 0x1}, {&(0x7f0000092000/0x4000)=nil, &(0x7f00002c8000/0x2000)=nil, 0x200000000}, {&(0x7f0000091000/0x2000)=nil, &(0x7f0000099000/0x2000)=nil}, {&(0x7f000009d000/0x4000)=nil, &(0x7f00000a6000/0x2000)=nil}, {&(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil}, {&(0x7f000009e000/0x1000)=nil, &(0x7f000009d000/0x2000)=nil}, {&(0x7f00000a6000/0x3000)=nil, &(0x7f00000a8000/0x4000)=nil}, {&(0x7f0000099000/0x4000)=nil, &(0x7f00000a7000/0x2000)=nil}, {&(0x7f0000ff9000/0x1000)=nil, &(0x7f00000a4000/0x2000)=nil}, {&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000099000/0x1000)=nil}, {&(0x7f0000ffe000/0x2000)=nil, &(0x7f00000a6000/0x2000)=nil}, {&(0x7f0000097000/0x1000)=nil, &(0x7f000009a000/0x2000)=nil}], './file0\x00'}) ioctl$TIOCSFLAGS(0xffffffffffffffff, 0x8004745c, &(0x7f0000000300)=0x4) r5 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000380), 0x80, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VMM_IOC_INTR(r5, 0xca605601, &(0x7f00000003c0)={0xfc, 0x3, 0x2}) ioctl$TIOCSETA(r4, 0x802c7414, &(0x7f0000000040)={0x7ff, 0x11, 0xffff, 0x200499, "084880fa870000bdda0988d11554e90d6602ff07", 0x0, 0x3}) writev(r4, &(0x7f0000000240)=[{&(0x7f0000000440)="a8a3f5f1a24ae0e82f9f7c52797ce4f0c43f8156431c20175ca5e2760418f74a4569bcb65e82f71d14001c49f1246567e6dd8bd407680168a3db71755b6af54e8ac149e3292afdb58781e0ce13950900782c8dd44306582943287b349485b3f0a7b7203b4d8dedb20c28e1a3e639877cd24d85f4efc583ca1d7fee01d5a005ed071a82573440767b655ae3decb7aa7ed860288aafed894940dd50ff97febc1e57022a00c09dfa9d678af9f146df1803903c2d0454dd28d06dc15162c6a9c9d3d378fd90d0d8ec508ab1601949971787a9253daa6d990098d", 0xd8}], 0x1) r6 = socket(0x1, 0x8000, 0xfb) setuid(0xee01) syz_emit_ethernet(0x2a, &(0x7f0000000200)=ANY=[@ANYRESDEC=r2]) r7 = socket(0x18, 0x2, 0x0) setsockopt(r7, 0x1000000000029, 0x3c, &(0x7f0000000040)='\x00\x00\x00\x00', 0x4) sysctl$hw(&(0x7f0000000000)={0x6, 0x14}, 0x2, &(0x7f0000000040)="c46fdbed6139d276", &(0x7f0000000140)=0x8, &(0x7f0000000280), 0x0) ioctl$TIOCSTAT(r4, 0x20007465, &(0x7f0000000180)) ioctl$FIONREAD(r6, 0xc0206925, &(0x7f00000001c0)) 200.138587ms ago: executing program 4 (id=88): ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f0000000080)={0x10, 0x3, [{&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x5000)=nil}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil}, {&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil}, {&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x100000000}, {&(0x7f0000800000/0x800000)=nil, &(0x7f0000d91000/0x4000)=nil}, {&(0x7f0000f56000/0x1000)=nil, &(0x7f00008fb000/0x2000)=nil, 0x3}, {&(0x7f0000e4c000/0x4000)=nil, &(0x7f0000efd000/0x1000)=nil}, {&(0x7f0000cd3000/0x1000)=nil, &(0x7f0000862000/0x2000)=nil}, {&(0x7f0000d3d000/0x4000)=nil, &(0x7f0000aff000/0x1000)=nil}, {&(0x7f0000f6a000/0x2000)=nil, &(0x7f0000887000/0x4000)=nil}, {&(0x7f0000da1000/0x4000)=nil, &(0x7f0000ff2000/0x1000)=nil}, {&(0x7f0000e0f000/0x2000)=nil, &(0x7f0000e03000/0x3000)=nil, 0x100000001}, {&(0x7f0000c64000/0x14000)=nil, &(0x7f0000d93000/0x3000)=nil, 0x2}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f00003b5000/0x2000)=nil}, {&(0x7f0000913000/0x2000)=nil, &(0x7f0000c5e000/0x4000)=nil}], './file0\x00', 0x6d}) r0 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r0, 0xc0106978, &(0x7f00000001c0)) r1 = msgget(0x0, 0x473) syz_emit_ethernet(0xe, &(0x7f0000000000)={@remote, @empty, [], {@generic={0x8100}}}) getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) r3 = getuid() setreuid(0x0, r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r4, 0xffff, 0x1022, &(0x7f0000000380)={0x0, 0x0, 0x0}, &(0x7f00000000c0)=0xc) lchown(&(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, r5) r6 = msgget$private(0x0, 0x4e1) msgrcv(r6, 0x0, 0x0, 0x3, 0x0) r7 = getpgid(0x0) msgctl$IPC_SET(r6, 0x1, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x128}, 0xffffbffffffffffc, 0xfffffffffffffffc, r7, 0x0, 0xfe4, 0x4, 0x2}) msgctl$IPC_SET(r1, 0x1, &(0x7f0000000280)={{0xb0d, r2, 0x0, r3, r5, 0x0, 0x4}, 0x7ff, 0xef5, 0xffffffffffffffff, r7, 0x796e, 0x7fff, 0x5, 0xc2}) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f0000000080)={0x10, 0x3, [{&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x5000)=nil}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil}, {&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil}, {&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x100000000}, {&(0x7f0000800000/0x800000)=nil, &(0x7f0000d91000/0x4000)=nil}, {&(0x7f0000f56000/0x1000)=nil, &(0x7f00008fb000/0x2000)=nil, 0x3}, {&(0x7f0000e4c000/0x4000)=nil, &(0x7f0000efd000/0x1000)=nil}, {&(0x7f0000cd3000/0x1000)=nil, &(0x7f0000862000/0x2000)=nil}, {&(0x7f0000d3d000/0x4000)=nil, &(0x7f0000aff000/0x1000)=nil}, {&(0x7f0000f6a000/0x2000)=nil, &(0x7f0000887000/0x4000)=nil}, {&(0x7f0000da1000/0x4000)=nil, &(0x7f0000ff2000/0x1000)=nil}, {&(0x7f0000e0f000/0x2000)=nil, &(0x7f0000e03000/0x3000)=nil, 0x100000001}, {&(0x7f0000c64000/0x14000)=nil, &(0x7f0000d93000/0x3000)=nil, 0x2}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f00003b5000/0x2000)=nil}, {&(0x7f0000913000/0x2000)=nil, &(0x7f0000c5e000/0x4000)=nil}], './file0\x00', 0x6d}) (async) socket(0x1, 0x2, 0x0) (async) ioctl$FIONREAD(r0, 0xc0106978, &(0x7f00000001c0)) (async) msgget(0x0, 0x473) (async) syz_emit_ethernet(0xe, &(0x7f0000000000)={@remote, @empty, [], {@generic={0x8100}}}) (async) getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000000000), &(0x7f0000000040)=0xc) (async) getuid() (async) setreuid(0x0, r3) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) getsockopt$sock_cred(r4, 0xffff, 0x1022, &(0x7f0000000380), &(0x7f00000000c0)=0xc) (async) lchown(&(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, r5) (async) msgget$private(0x0, 0x4e1) (async) msgrcv(r6, 0x0, 0x0, 0x3, 0x0) (async) getpgid(0x0) (async) msgctl$IPC_SET(r6, 0x1, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x128}, 0xffffbffffffffffc, 0xfffffffffffffffc, r7, 0x0, 0xfe4, 0x4, 0x2}) (async) msgctl$IPC_SET(r1, 0x1, &(0x7f0000000280)={{0xb0d, r2, 0x0, r3, r5, 0x0, 0x4}, 0x7ff, 0xef5, 0xffffffffffffffff, r7, 0x796e, 0x7fff, 0x5, 0xc2}) (async) 199.723162ms ago: executing program 0 (id=89): ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000180)={0x2, &(0x7f00000000c0)=[{}, {0x1, 0x0, 0x0, 0x2}]}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x48}, 0x40000121, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8efdb4cf71c37082", &(0x7f0000000000)=0x2, 0x0, 0x37) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000040), 0x20, 0x0) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000140)={0x6, &(0x7f0000000080)=[{0x7, 0x8, 0x8}, {0x3, 0x4, 0x3e, 0x2}, {0x7, 0x7, 0xf, 0x5f7723ff}, {0x8, 0x0, 0x3, 0x4}, {0x4, 0x9, 0x7, 0x8}, {0x6, 0x8, 0xbe, 0xffffffa3}]}) 95.489299ms ago: executing program 3 (id=90): mknod(&(0x7f00000000c0)='./bus\x00', 0x2006, 0x4f4b) r0 = open$dir(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) ioctl$FIOASYNC(r0, 0xc2c04200, &(0x7f00000001c0)) r1 = dup2(0xffffffffffffff9c, 0xffffffffffffffff) ioctl$FIOGETOWN(r1, 0x4004667b, &(0x7f0000000080)) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x1495) open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) mknod(&(0x7f00000000c0)='./bus\x00', 0x2006, 0x4f4b) (async) open$dir(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) (async) ioctl$FIOASYNC(r0, 0xc2c04200, &(0x7f00000001c0)) (async) dup2(0xffffffffffffff9c, 0xffffffffffffffff) (async) ioctl$FIOGETOWN(r1, 0x4004667b, &(0x7f0000000080)) (async) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x1495) (async) open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) (async) 91.521384ms ago: executing program 5 (id=91): ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f0000000100)={0x10, 0x5, [{&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000454000/0x3000)=nil}, {&(0x7f0000d62000/0x1000)=nil, &(0x7f0000780000/0x4000)=nil, 0x80000000}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil}, {&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000c7f000/0x3000)=nil, 0x5}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000400000/0xc00000)=nil}, {&(0x7f0000626000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x9}, {&(0x7f0000da9000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil}, {&(0x7f0000e0a000/0x2000)=nil, &(0x7f0000c17000/0x3000)=nil}, {&(0x7f0000478000/0x4000)=nil, &(0x7f0000e3c000/0x4000)=nil, 0x71}, {&(0x7f000062b000/0xf000)=nil, &(0x7f00004df000/0x4000)=nil}, {&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fe1000/0x4000)=nil}, {&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0xffffffffffffffff}, {&(0x7f0000601000/0x3000)=nil, &(0x7f0000b08000/0x1000)=nil, 0xfffffffffffffffa}, {&(0x7f000064c000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x2}, {&(0x7f0000c2a000/0x2000)=nil, &(0x7f0000518000/0x3000)=nil}], './file0\x00'}) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x2) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x20000000000001df, &(0x7f0000000040)=[{0x1, 0x0, 0x7, 0x7}]}) r1 = openat$speaker(0xffffffffffffff9c, &(0x7f00000006c0), 0x1, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000700)="4ece", 0x2}], 0x1) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) r2 = socket(0x2, 0x3, 0x1) ioctl$FIONREAD(r2, 0x81206919, &(0x7f0000000100)) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) ioctl$VNDIOCSET(r0, 0xc0184406, &(0x7f00000001c0)={0x0, 0x0, 0x0}) 90.154408ms ago: executing program 0 (id=92): r0 = open(&(0x7f0000000280)='./file0\x00', 0x8aa0, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r1 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) shmat(r1, &(0x7f0000001000/0x3000)=nil, 0x1000) madvise(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0) select(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000000000, 0x0, 0x7}, &(0x7f00000024c0)={0x1fe, 0x0, 0x0, 0x0, 0x80000000000000}, 0x0, 0x0) pread(r0, &(0x7f0000000100)="5e17882bf2fe92c541af296e4733853bcf7b654826a75a7fda9c7bb023d754cee058dadfa1ac592d22b7785d75a1d77444b771ce2e3f9e7fd49b5ae5159867a4d59a90c4f5f9d420b51a18d6c65830f5533e460a85d5aa04db11df43a061d1a365c4a99eba3efe9243c048302947ca4ec702452d262be4c4067fe2da5edccb8a6f61837ecfa8a0c5efafd2ce4fefced58c3d5f6b38bacb7318dd45c5cf4cf17188869b729999a3df6a5d0320f942b5c8e95ab5", 0xb3, 0x3db48000000) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x81, 0x0, 0x4, 0x4}, {0x4, 0x0, 0x1, 0x441}, {0x6, 0x0, 0x0, 0x401}]}) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) pwritev(r0, &(0x7f0000000080), 0x0, 0x3) sysctl$kern(0x0, 0x0, &(0x7f0000000580)="4c70718a72a841fa97330e390175a43aa9eccfa1bbe80cb11fa66f1fb4a963b501e08f480e3dbce7", &(0x7f0000000080)=0x28, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETWF(r2, 0x80104277, &(0x7f0000000040)={0x0, 0x0}) write(r2, &(0x7f0000000000)="d871819e2673b7e5c70000000000", 0xe) r3 = getppid() ktrace(&(0x7f0000000040)='./file0\x00', 0x9b5f07e5ad8f7188, 0x4000030c, r3) sendmsg$unix(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001200)=[{&(0x7f0000000000)="bf3b684c5ae963b4567084e096cf973983ff0f0000000000009405095e7acbf4419893cfd424b75262dc5ade2ab6278ab80849177964f55be2796672f9ed186987b8c19d9295a17b98020f600200"/91, 0x5b}], 0x100000000000033c}, 0x1) 69.081458ms ago: executing program 1 (id=93): r0 = socket(0x2, 0x1, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600000fd00083a00fe56c218f7008b93000000000000b88a8873fe4eec96000000000000000008bb810000"]) (async) r1 = dup2(r0, r0) r2 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$WSMOUSEIO_SETPARAMS(r2, 0x80105728, &(0x7f0000000300)={&(0x7f0000000100)=[{0x20, 0x9}, {0x101, 0x3218530f}, {0x8d, 0x7}], 0x3}) (async) sendmsg$unix(r1, &(0x7f0000001880)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="3800000000000000ffff00000100000055f853b15b7b2a59f58405a47c1642685adb24a4b41bd7c243a7fa88a2c2d627ed653fe948c2c372bfbd8bde36e085925705ef7422b4c80bb3154bad0a7f2161fc3c5f652f3c9a22d2c76e91265e1b2f97b813b617e9b0eedde375caa25af308031c7242d52896578c8e5196810b5d2ddec7f9a7de", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r1, @ANYRES64=0x0], 0x38}, 0x1) 64.341772ms ago: executing program 7 (id=94): r0 = syz_open_pts() ioctl$TIOCEXCL(r0, 0x2000740d) (async) r1 = open(&(0x7f0000000000)='./file0\x00', 0x10000, 0x100) (async) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x8, 0x1) ioctl$TIOCCHKVERAUTH(r1, 0x2000741e) (async) symlink(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00') (async) fcntl$getflags(r0, 0x3) (async, rerun: 32) ioctl$WSKBDIO_GETMAP(r1, 0xc010570d, &(0x7f0000000180)={0xa, &(0x7f0000000100)=[{0x5, 0x7, 0x6, 0x89, 0xb}, {0x200, 0xfffa, 0x1, 0x8, 0x76}, {0xfffc, 0x1000, 0x4, 0x4, 0x5}, {0x9, 0x800, 0x5, 0x3, 0x8}, {0x7fff, 0x9, 0x10, 0xd, 0x7}, {0x800, 0x3, 0x40, 0x6, 0x1}, {0x5, 0x4, 0x6, 0xfeff, 0xfff8}, {0x9, 0x2, 0x5, 0x0, 0x26}, {0x9, 0x0, 0x40, 0xfff9, 0xfff}, {0x5, 0xe23, 0x401, 0x3, 0x43}]}) (rerun: 32) ioctl$WSDISPLAYIO_ADDSCREEN(r1, 0x80245753, &(0x7f00000001c0)={0x80000000, './file0/file0\x00', './file0\x00'}) (async) sendto$unix(r1, &(0x7f0000000200)="e61f81bb1ecbdaa5159a59ec921d85ad74a81d5a734447bcf91e2d0d", 0x1c, 0x8, &(0x7f0000000240)=@abs={0x1, 0x0, 0x0}, 0x8) (async, rerun: 64) ioctl$TIOCSBRK(r1, 0x2000747b) (async, rerun: 64) r2 = socket$inet6(0x18, 0x2, 0x5) setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0x69, &(0x7f0000000280)={{0x18, 0x2, 0x800, 0x5}, {0x18, 0x1, 0xe, 0x7f}, 0xff, [0xad86, 0x0, 0xb9, 0x6, 0x6, 0x10001, 0x1, 0x4]}, 0x3c) (async, rerun: 32) r3 = syz_open_pts() (rerun: 32) ioctl$TIOCGETA(r3, 0x402c7413, &(0x7f00000002c0)) (async) readv(r2, &(0x7f0000000380)=[{&(0x7f0000000300)=""/112, 0x70}], 0x1) (async) ioctl$TIOCSCTTY(r3, 0x20007461) (async) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0x68, &(0x7f00000003c0)={{0x18, 0x0, 0xeb0, 0x80000001}, {0x18, 0x1, 0x9, 0x8}, 0x3, [0x5, 0x2, 0x0, 0x7, 0x4, 0x3ff, 0x54e8, 0x80000000]}, 0x3c) (async) r4 = open(&(0x7f0000000400)='./file0\x00', 0x2, 0x51) (async) pwrite(r1, &(0x7f0000000440)="f8ee4d894ecdc087094209704fabb59df28dae54fa8778fb65509743b5dcfd7815a787db566b2e2e58eeb6c941f6409eb9ac732b50955da242f37f1536ef62dd503d124ea46f1bfc25515204f2027bf7cc45fea0ee1c86609de5251edf117b715e509010ce6b6799bf6692733869281f0bc7ca04844967014a737eb040a9e42f921d66dc8a987f329c6add429e9d2f4d59f9d8435c40a52a4ee7ce3678dd96ce518c4f1737dc03ec4df8e6c59965367ce85bd62dd8", 0xb5, 0x101) ioctl$TIOCSETAW(r4, 0x802c7415, &(0x7f0000000500)={0x6, 0xce86, 0x7f, 0xd, "54a103bda203215852262dd61635fe54ecb2b216", 0x7, 0x7390}) (async, rerun: 32) sendto$inet6(r2, &(0x7f0000000540)="6f39476e5c2f3833606156534f0532ee2b37b13d68d656504960fc97c8c6999f34928c7f27315e8063b47e5b01a659c3851727a40b9de8c3b15f69", 0x3b, 0x1, &(0x7f0000000580)={0x18, 0x0, 0x1, 0xffffffff}, 0xc) (async, rerun: 32) fchflags(r1, 0x1) (async, rerun: 32) shmget$private(0x0, 0x1000, 0x520, &(0x7f0000ffc000/0x1000)=nil) (rerun: 32) r5 = openat$tty(0xffffffffffffff9c, &(0x7f00000005c0), 0xad5a39939f9e64e9, 0x0) ioctl$TIOCGWINSZ(r5, 0x40087468, &(0x7f0000000600)) (async) r6 = getpgrp() fcntl$lock(r1, 0x7, &(0x7f0000000640)={0x3, 0x1, 0x0, 0x6, r6}) (async) ioctl$WSKBDIO_GETMODE(r4, 0x40045714, &(0x7f0000000680)) sendmsg$unix(r4, &(0x7f0000000bc0)={&(0x7f00000006c0)=@abs={0x1, 0x0, 0x2}, 0x8, &(0x7f00000009c0)=[{&(0x7f0000000700)="c81d4bcc25dad266f314648cd13cf11227a96ecd75d83247813a5ee68cbfe915984c211c0779d27b82a422d59d2ce5d1cb747804", 0x34}, {&(0x7f0000000740)="72d478f9fb3644b3175fb9d9b864d81992d1cc4ae5ded65d5920311554e54285cf7fed5e9db1e55afac057e94337a2", 0x2f}, {&(0x7f0000000780)="547c85d3a1858e652482f4f82fda4de301b136fbeec9aed9b10bdfad9e0e3e8811660793ff0942c36e2148da2e58859b86f9e68d80cab2c2b0404bddbd1bac69fa61284ce2a2dadb3bcd45587f4615565a6081be0371735a266a2522cca3d694767d44b0759fbd23d68cccd56b4d880ec90784e0b724cd057afebf57e98c2ee61d20da5edb4c02bbec1bbf8e773cc924d7e3610b0cd89e3a73ecba8eba88e5a19407dacff92f61522ff9d564a50d6fd1d056022a00894b0c00", 0xb9}, {&(0x7f0000000840)="1a02812e5070d7c4228e3ba2e763", 0xe}, {&(0x7f0000000880)="651f746969bb3ad4a9cd2c", 0xb}, {&(0x7f00000008c0)="630b89f9434f0f8f91e9495df126e16cec8463c485ee82a109e5b25489aba1020b3174b35a12afbdf252e8179dc37841965ed07b02ef53d07286549b5f4f5e64bb6f7c7c9c65462c8b4a2f3d8e02cd701b", 0x51}, {&(0x7f0000000940)="ace4409f3bf3605f961374543606650ac3045c4f36d6e1c64a8a77d9ea1250a72b912bbfa9b0962135dde22609dd966eba61f849446f63da06acaf30d0a4bd639e356a3c97fa4bc1551ce2f99e52c5cb11a5aad1b0", 0x55}], 0x7, &(0x7f0000000b40)=[@rights={0x10}, @cred={0x20, 0xffff, 0x0, r6}, @cred={0x20, 0xffff, 0x0, r6}, @rights={0x20, 0xffff, 0x1, [r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}], 0x70, 0x1640befec05a6aac}, 0x4) 47.96577ms ago: executing program 2 (id=95): r0 = socket(0x18, 0x1, 0x0) setsockopt(r0, 0x1000000029, 0xd, &(0x7f00000000c0)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) socketpair(0x6, 0x5, 0x10, &(0x7f0000000040)={0xffffffffffffffff}) r2 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$WSMOUSEIO_SETPARAMS(r2, 0x80105728, &(0x7f0000000100)={&(0x7f0000000040)=[{0x100, 0xc1}, {0x100, 0x5}], 0x2}) r3 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000080), 0x20, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) bind$unix(r4, &(0x7f0000000200)=@file={0xd570d0466b6018f, './file0\x00'}, 0xa) listen(r4, 0x0) accept$unix(r4, 0x0, 0x0) poll(&(0x7f0000000140)=[{r0, 0x4}, {r1, 0x4}, {r3, 0x8}, {r4, 0x100}], 0x4, 0x20) r5 = kqueue() kevent(r5, &(0x7f00000005c0)=[{{}, 0xfffffffffffffff9, 0x37, 0x1}], 0x400, 0x0, 0x11000000, 0x0) openat$bpf(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) kevent(r5, &(0x7f00000000c0)=[{{}, 0xfffffffffffffff9, 0x8b}], 0x56, 0x0, 0x7fff, 0x0) r6 = open(&(0x7f0000000380)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7929) sysctl$net_inet6_ip6(&(0x7f0000000040)={0x4, 0x18, 0x29, 0x33}, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x4) writev(r6, &(0x7f0000000180)=[{&(0x7f0000000000)='#!', 0x2}, {&(0x7f00000000c0)='\t', 0x1}], 0x2) write(r6, &(0x7f00000001c0)="092009018000000000000045b65369db0000ff4278ad535c2a413f308cbbaee4c6987f31dbf15624b77b6a0a", 0x2c) execve(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) 47.294269ms ago: executing program 1 (id=96): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000240), 0x80, 0x0) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) pledge(0x0, &(0x7f0000002840)='tty \x00\x02\x00!\a\x9bp^|#\xcbhl\x97\xa3_\xbc\x04\x9d!\xd9\x9f\x9f\xb4\x96\x13\x12\xe0\r\xe7\xb9E\b\x00\x00\x00l\xaaY\xe1Q<\x19\xc0\xf6Yf\x9au^\xa0\xc9j\xdd-I\x01R\x00w\xf7\x15\x04\xa6\x82aY\x1d\xd7\f>Y\x06\"\xad\xb6\x88_\xeb\at\x91\xd3\xbf\xea\xddt\xe0\bt\x06S,\xdbH\xa7-\xaaw\xcet\x044\xc5\xa9e\xa9\xf6\x1b\x8e\x05\x86\x91IsC\xb9ul\xaeu\x94\x9b\xaf\x04\xc4\x03\"F\x8f\xd5\xe8\r\x8d\xa1\x00\xcc\xd7\xa0\xe1\xeb\xc1>\xbd\t\xc8\x15\v\xb0, \xee\xa4\xa6\xb9a\x01&\xadrj\xd5\xc26p\xa14\xe0\xbf\xa0\x1es\x01=\xdbd\xf0?=\x8afcJ\x8eYEn\xd4<\x00\xec\xe4^\x00\x00\x00\xca\x90\xfa\x98\xc9gty\xce\xab\xd2\xa1\x85E\xe4\xa9\xd5\xab\x83\xda?w\x83\xbc\xcf\xd20(L&b\xed\x8c\x1d\x1a\x9fd\x99H\x9e\x82\x10\xea\x05\xf8\xff\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\xa6\x8c\x05n\x83\x83\x12+\x16\xc1\x00\x04\x00\x00\x13:o\x0f\x1fB\xa4\x00wB\x92h\xde\xfal3\x88e\x04J\\\x00D\xae`\x8e\xadd\xa8;\xee\xc4K\xe8]\x84\x90\xb8d\xfb\x95\xb3\xe9(x_\x80]\xadW\xd5\xa9\xaa\x03\x9c6\xa9\xc4\x01\x03\xea\xe5\x90\x85\x16\xb0DV\x13\x01\xab\x01\xf0\x8f\x02\xc2\xc8\x9b\x03\x1f\xd7\xdbN\\\xc0\xcd?Pg\xd5q\x13\xbd \xfa\xab\xccJK\x11\\\x16~#P.\xc9K\x15r\x04\xd9Z;\xc0\x8dOze\x96\xe9\xc3\x93\xed\x94.\xc2\xa0\x1fU#\x96\xe6\xb6C\xfa\x03/\x8b\x0e2\xec\x96v\x9b/.\v\x9e\x80\x18s\xae.\xf4\x14KS`\x87\x8b4\t\x00\x87{\xa8@e\xbfe\xeb\xee\xa2\xe72\xb8Q:\x9f\xc2b\x897\xbe\r\x04\xdf\xe2\xc0\xf0FV\'m\xcbm\x80%\xfc\x9e\x9f\x87\x80A\xbe\xc2\x00\x00\x00\x00\x00\x006\x96\xbb\x9f\x85\x98\xbb\xbc;\xaa\x97c\xfe\x82jz&t\xa7\xc4\xcd\xb0\b9G\xcag\fY\xe6\r\xcdT\xd3\x1c(\xef\xc0\x038\xbd\xdd\xd9\xc9\x93a]q\xd2\x9b\a\x1e\xf8\xc3\"\xc8:\xb8$\x9f\'P\x17\xfa\xf3Xa\trB-\xf2g\xe6Z\xd5F\xd2\x80\xe0\x99\"\xc12\xe8\b\xc58\x00'/659) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000000)={'tap', 0x0}) ioctl$BIOCSETF(r2, 0x80104267, &(0x7f0000000200)={0x3, &(0x7f0000000140)=[{0x5}, {0x3}, {0x12e, 0xfe}]}) syz_emit_ethernet(0x4e, &(0x7f0000000340)={@local, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x18, 0x2c, 0x0, @empty, @rand_addr="0000000000000800001a003f00000005", {[], @icmpv6=@ndisc_na={0x88, 0x0, 0x0, 0x7f, '\x00', @empty}}}}}}) pledge(0x0, &(0x7f00000000c0)='\x00') ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000000)={'tap', 0x0}) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000200)={0x3, &(0x7f0000000140)=[{0x5}, {0x40}, {0x12e, 0xfe}]}) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) link(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6381) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) symlink(&(0x7f0000000440)='./file1\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') unveil(&(0x7f0000000340)='./file1\x00', &(0x7f0000000380)='r\x00') unveil(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000003c0)='x\x00') rename(&(0x7f0000003340)='./file0\x00', 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000300)={'tap', 0x0}) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000040)={0x0, &(0x7f0000000100)}) sysctl$kern(0x0, 0x4000000000000047, &(0x7f0000000340)="000003c7420000000000100080b5313df0dd037ead6c15269e60270b25436e96e1110d1cca0040f59a7afe5b0f50c55dd68ede01093a3150b6ce7657ece732f46ad934b9eabd7f03895427c303a6171b0f0a1ae2bce9b4e1aa5c64f142f43e1517e556e223670b96065d13ca29e24c54daf1f1e65b1c64f5b9d8b70fc58933613c270a7730dec69377783e63df5acf8d38c6dfd5b3473196ab92f036f3d6706b4a17c0e60517c0c79491a061fec1acef8a", &(0x7f0000000080)=0x64, 0x0, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) r3 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) r4 = openat(r3, &(0x7f0000000080)='.\x00', 0x0, 0x0) ioctl$BIOCSDIRFILT(r1, 0x8004427d, &(0x7f0000000100)=0xb) mknodat(r4, &(0x7f0000000040)='./file0\x00', 0x2000, 0x3361) open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7949) openat$pf(0xffffffffffffff9c, &(0x7f0000000200), 0x200, 0x0) 1.579325ms ago: executing program 3 (id=97): r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x82, 0x0) ioctl$TIOCSETA(r0, 0xc1084425, &(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, "97a2224ff1c14649ebb178926cc9795a6b47c1d1", 0xfffffffd}) ioctl$TIOCSCTTY(r0, 0x20007461) ioctl$VNDIOCGET(r0, 0xc4104603, &(0x7f00000002c0)={'./file0\x00', 0x2, 0x1, 0x2}) sysctl$vm(&(0x7f0000001640)={0x2, 0x9}, 0x2, &(0x7f0000001680), 0x0, 0x0, 0x0) execve(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000180)=[&(0x7f0000000080)='/dev/pf\x00', &(0x7f00000000c0)='(^)\x00', &(0x7f0000000100)='S\xf3\x00', &(0x7f0000000140)='R\x00'], &(0x7f0000000200)=[&(0x7f00000001c0)='^\\,\x00']) nanosleep(&(0x7f0000000280)={0x1ff, 0x1}, 0xfffffffffffffffe) execve(0x0, 0x0, 0x0) openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x82, 0x0) (async) ioctl$TIOCSETA(r0, 0xc1084425, &(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, "97a2224ff1c14649ebb178926cc9795a6b47c1d1", 0xfffffffd}) (async) ioctl$TIOCSCTTY(r0, 0x20007461) (async) ioctl$VNDIOCGET(r0, 0xc4104603, &(0x7f00000002c0)={'./file0\x00', 0x2, 0x1, 0x2}) (async) sysctl$vm(&(0x7f0000001640)={0x2, 0x9}, 0x2, &(0x7f0000001680), 0x0, 0x0, 0x0) (async) execve(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000180)=[&(0x7f0000000080)='/dev/pf\x00', &(0x7f00000000c0)='(^)\x00', &(0x7f0000000100)='S\xf3\x00', &(0x7f0000000140)='R\x00'], &(0x7f0000000200)=[&(0x7f00000001c0)='^\\,\x00']) (async) nanosleep(&(0x7f0000000280)={0x1ff, 0x1}, 0xfffffffffffffffe) (async) execve(0x0, 0x0, 0x0) (async) 1.150099ms ago: executing program 1 (id=98): r0 = syz_open_pts() ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f00000000c0)={0x0, 0x0, 0x7ffffffe, 0xfffffffc, "ff010000004000", 0x0, 0x7fffffff}) syz_open_pts() ioctl$TIOCSTART(r0, 0x2000746e) semctl$IPC_SET(0xffffffffffffffff, 0x0, 0x1, &(0x7f00000001c0)={{0x8968, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1026}, 0x80000005a7, 0x4, 0x1000000000008}) sysctl$kern(&(0x7f0000000000)={0xa}, 0x3, 0x0, 0x0, 0x0, 0x0) r1 = socket(0x2, 0x2, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) ioctl$FIONREAD(r1, 0x8040691a, &(0x7f00000001c0)) 853.979µs ago: executing program 7 (id=99): clock_getres(0x3, &(0x7f0000000080)) (async) clock_getres(0x3, &(0x7f0000000080)) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = fcntl$getown(0xffffffffffffff9c, 0x5) fcntl$setown(r0, 0x6, r1) (async) fcntl$setown(r0, 0x6, r1) setrlimit(0x0, &(0x7f0000000000)={0xfffffffffffffffd}) open(&(0x7f0000000140)='./file0\x00', 0x78e, 0x0) r2 = open(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) fcntl$lock(r2, 0x9, &(0x7f0000000140)={0x2, 0x0, 0x0, 0x100000269000000}) r3 = socket(0x2, 0x2, 0x0) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) (async) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) connect$unix(r3, &(0x7f0000000000), 0x10) (async) connect$unix(r3, &(0x7f0000000000), 0x10) write(r3, &(0x7f0000000240)="14bdfa5d1d34e2fecb284a6498307dcda9aec43050036123339a346f7383e48a127ba2d942355ded8478505514f3743f95b7688ad4c4e1dd5489e7bafc58d3e5823757aeaa630719ef187ccad995f13d426aabe9fad9db6996571c6d9f8bff07000000000000e940970fe8", 0x6b) 0s ago: executing program 4 (id=100): r0 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$wskbd(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) (async) r1 = socket(0x1, 0x2, 0x0) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) (async) ioctl$BIOCSETWF(r2, 0x80104277, &(0x7f0000000000)={0x2, &(0x7f0000000280)=[{0x81, 0xff, 0x5, 0x2}, {0x6, 0x3d, 0x7, 0x800}]}) (async) write(r2, &(0x7f0000000140)="a6690d7b0800000031d81ad3d20cc0ff4e9be33bbd1a30", 0x17) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x62}) (async) r3 = syz_open_pts() close(r3) (async) r4 = syz_open_pts() mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0xd00) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) connect$unix(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) (async) bind$unix(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, 0x0) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, 0x0) (async) sysctl$kern(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x80, 0xa0) (async) writev(r3, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) (async) ioctl$TIOCSETA(r4, 0x802c7414, &(0x7f0000000180)={0x9, 0x9, 0xffffffff, 0x101, "34d9416df13a6e9d125f581e21bebf32dec4a6ec", 0xe1, 0x201ff}) (async) writev(r3, &(0x7f00000001c0)=[{&(0x7f0000000340)="d9", 0x1}], 0x1) getsockopt$sock_int(r1, 0xffff, 0x100, &(0x7f0000000380), &(0x7f0000000040)=0x3) pwritev(r0, &(0x7f0000001040)=[{&(0x7f0000000040)='b', 0x1}], 0x1, 0x3) r5 = socket$unix(0x1, 0x5, 0x0) close(r5) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.188' (ED25519) to the list of known hosts. pckbd_enable: command error panic: kernel diagnostic assertion "va >= entry->start" failed: file "/syzkaller/managers/multicore/kernel/sys/uvm/uvm_fault.c", line 1694 Stopped at db_enter+0x25: addq $0x8,%rsp TID PID UID PRFLAGS PFLAGS CPU COMMAND *365467 59947 0 0 0x4000000 1K syz-executor 117191 97533 0 0x2 0 0 syz-executor db_enter() at db_enter+0x25 panic(ffffffff830f4f46) at panic+0x1e5 __assert(ffffffff830a61f4,ffffffff83049cc4,69e,ffffffff8300b840) at __assert+0x29 uvm_fault_unwire_locked(fffffd806bc233a8,20000000,20010000) at uvm_fault_unwire_locked+0x4b4 uvm_fault_unwire(fffffd806bc233a8,20000000,20010000) at uvm_fault_unwire+0x55 kern_sysctl(ffff8000371b1594,2,20000100,ffff8000371b15c8,0,37,9e1ac4903d27153f) at kern_sysctl+0x500 sys_sysctl(ffff800033d982b0,ffff8000371b1700,ffff8000371b1650) at sys_sysctl+0x425 syscall(ffff8000371b1700) at syscall+0xbb6 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x8c07d5b32a0, count: 6 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{1}> ddb{1}> set $lines = 0 ddb{1}> set $maxwidth = 0 ddb{1}> show panic *cpu1: kernel diagnostic assertion "va >= entry->start" failed: file "/syzkaller/managers/multicore/kernel/sys/uvm/uvm_fault.c", line 1694 ddb{1}> trace db_enter() at db_enter+0x25 panic(ffffffff830f4f46) at panic+0x1e5 __assert(ffffffff830a61f4,ffffffff83049cc4,69e,ffffffff8300b840) at __assert+0x29 uvm_fault_unwire_locked(fffffd806bc233a8,20000000,20010000) at uvm_fault_unwire_locked+0x4b4 uvm_fault_unwire(fffffd806bc233a8,20000000,20010000) at uvm_fault_unwire+0x55 kern_sysctl(ffff8000371b1594,2,20000100,ffff8000371b15c8,0,37,9e1ac4903d27153f) at kern_sysctl+0x500 sys_sysctl(ffff800033d982b0,ffff8000371b1700,ffff8000371b1650) at sys_sysctl+0x425 syscall(ffff8000371b1700) at syscall+0xbb6 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x8c07d5b32a0, count: -9 ddb{1}> show registers rdi 0 rsi 0x1 rbp 0xffff8000371b1220 rbx 0xffff800029b7cdbf rdx 0 rcx 0xffff800033d982b0 rax 0xffff800029b7bff0 r8 0x101010101010101 r9 0x8080808080808080 r10 0x1e7a32573d5f9863 r11 0x7dbc3c41c6b6982a r12 0xffff800029b7cbc0 r13 0 r14 0 r15 0x1 rip 0xffffffff8221d4b5 db_enter+0x25 cs 0x8 rflags 0x246 rsp 0xffff8000371b1210 ss 0x10 db_enter+0x25: addq $0x8,%rsp ddb{1}> show proc PROC (syz-executor) tid=365467 pid=59947 tcnt=3 stat=onproc flags process=0 proc=4000000 runpri=32, usrpri=50, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff800033d996f0,0xffffffff835a9210 process=0xffff80003579ed70 user=0xffff8000371ac000, vmspace=0xfffffd806bc233a8 estcpu=36, cpticks=1, pctcpu=0.0, user=0, sys=1, intr=0 ddb{1}> ps PID TID PPID UID S FLAGS WAIT COMMAND 59947 341784 18647 0 2 0 syz-executor 59947 495292 18647 0 3 0x4000080 fsleep syz-executor *59947 365467 18647 0 7 0x4000000 syz-executor 51316 153338 20370 0 2 0 syz-executor 51316 150348 20370 0 2 0x4000000 syz-executor 75025 59234 48433 0 2 0 syz-executor 75025 117060 48433 0 2 0x4000000 syz-executor 75025 489910 48433 0 2 0x4000000 syz-executor 93252 515905 37212 0 2 0 syz-executor 93252 403242 37212 0 3 0x4000080 fsleep syz-executor 93252 180556 37212 0 3 0x4000080 fsleep syz-executor 78101 302128 56243 0 2 0 syz-executor 78101 210375 56243 0 3 0x4000080 netacc syz-executor 78101 70274 56243 0 3 0x4000080 kqread syz-executor 53537 506796 5198 0 2 0 syz-executor 53537 228227 5198 0 3 0x4000080 kqsel syz-executor 53537 516897 5198 0 3 0x4000080 fsleep syz-executor 62441 103725 37692 0 3 0x80 nanoslp syz-executor 62441 368815 37692 0 3 0x4000080 rest syz-executor 62441 160880 37692 0 3 0x4000080 fsleep syz-executor 18647 84823 49693 0 3 0x82 nanoslp syz-executor 97533 117191 49693 0 7 0x2 syz-executor 37692 392629 49693 0 3 0x82 nanoslp syz-executor 48433 396764 49693 0 3 0x82 nanoslp syz-executor 37212 111204 49693 0 2 0x2 syz-executor 56243 31934 49693 0 3 0x82 nanoslp syz-executor 20370 229303 49693 0 3 0x82 nanoslp syz-executor 5198 66355 49693 0 3 0x82 nanoslp syz-executor 49693 390601 24657 0 3 0x82 kqread syz-executor 24657 371124 60996 0 3 0x10008a sigsusp ksh 60996 22340 43681 0 3 0x98 kqread sshd-session 43681 87492 65206 0 3 0x92 kqread sshd-session 4515 185812 1 0 3 0x100083 ttyin getty 65206 7874 1 0 3 0x88 kqread sshd 6433 17410 9715 74 3 0x1100092 bpf pflogd 9715 290077 1 0 3 0x80 sbwait pflogd 73245 491262 74927 73 3 0x1100090 kqread syslogd 74927 245214 1 0 3 0x100082 sbwait syslogd 6478 110220 1 0 3 0x100080 kqread resolvd 12785 141302 99588 77 3 0x100092 kqread dhcpleased 95455 221660 99588 77 3 0x100092 kqread dhcpleased 99588 270623 1 0 3 0x80 kqread dhcpleased 19562 278822 0 0 3 0x14200 bored smr 273 113082 0 0 2 0x14200 zerothread 31505 523134 0 0 3 0x14200 aiodoned aiodoned 61878 432933 0 0 3 0x14200 syncer update 1079 456624 0 0 3 0x14200 cleaner cleaner 24099 196699 0 0 3 0x14200 reaper reaper 20016 307432 0 0 3 0x14200 pgdaemon pagedaemon 23105 11639 0 0 3 0x14200 bored viomb 34579 415717 0 0 3 0x40014200 acpi0 acpi0 87420 414535 0 0 3 0x40014200 idle1 2378 482432 0 0 3 0x14200 bored softnet3 13398 50215 0 0 3 0x14200 bored softnet2 3696 151390 0 0 3 0x14200 bored softnet1 52417 402631 0 0 3 0x14200 bored softnet0 50577 375046 0 0 3 0x14200 bored systqmp 96776 99051 0 0 3 0x14200 bored systq 80018 68986 0 0 3 0x14200 tmoslp softclockmp 70310 383607 0 0 3 0x40014200 tmoslp softclock 7717 207967 0 0 3 0x40014200 idle0 1 317399 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb{1}> show all locks Process 59947 (syz-executor) thread 0xffff800033d982b0 (365467) exclusive rwlock amaplk r = 0 (0xfffffd806bf87750) #0 witness_lock+0x5bb #1 uvm_map_lock_entry+0x4c #2 uvm_fault_unwire_locked+0x253 #3 uvm_fault_unwire+0x55 #4 kern_sysctl+0x500 #5 sys_sysctl+0x425 #6 syscall+0xbb6 #7 Xsyscall+0x128 shared rwlock vmmaplk r = 0 (0xfffffd806bc234a0) #0 witness_lock+0x5bb #1 uvm_fault_unwire+0x3e #2 kern_sysctl+0x500 #3 sys_sysctl+0x425 #4 syscall+0xbb6 #5 Xsyscall+0x128 exclusive kernel_lock &kernel_lock r = 0 (0xffffffff83622cc8) #0 witness_lock+0x5bb #1 sysctl_vslock+0x80 #2 kern_sysctl+0x1ad #3 sys_sysctl+0x425 #4 syscall+0xbb6 #5 Xsyscall+0x128 exclusive rwlock sysctllk r = 0 (0xffffffff8342cf80) #0 witness_lock+0x5bb #1 rw_enter+0x41b #2 sysctl_vslock+0x45 #3 kern_sysctl+0x1ad #4 sys_sysctl+0x425 #5 syscall+0xbb6 #6 Xsyscall+0x128 ddb{1}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 10207 11337K 11373K 166960K 11382 0 pcb 17 12K 12K 166960K 31 0 rtable 240 6K 7K 166960K 382 0 pf 35 17K 21K 166960K 149 0 ifaddr 44 7K 7K 166960K 48 0 ifgroup 55 2K 2K 166960K 57 0 counters 64 36K 36K 166960K 66 0 ioctlops 0 0K 4K 166960K 1525 0 iov 0 0K 16K 166960K 8 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1371 86K 86K 166960K 1442 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 3 5K 5K 166960K 3 0 VM map 2 1K 1K 166960K 2 0 sem 6 0K 0K 166960K 7 0 dirhash 12 2K 2K 166960K 15 0 ACPI 1690 195K 286K 166960K 12468 0 file desc 17 61K 93K 166960K 232 0 proc 72 91K 140K 166960K 545 0 subproc 104 6K 6K 166960K 104 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 8 0 in_multi 99 7K 7K 166960K 103 0 ether_multi 1 0K 0K 166960K 2 0 mrt 0 0K 0K 166960K 2 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 55 254K 254K 166960K 55 0 exec 0 0K 1K 166960K 379 0 fusefs mount 1 32K 32K 166960K 1 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 235 73K 74K 166960K 3881 0 UVM aobj 8 2K 2K 166960K 9 0 pinsyscall 42 84K 104K 166960K 1341 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 0K 166960K 3 0 NDP 12 0K 2K 166960K 30 0 temp 39 6815K 6879K 166960K 4406 0 kqueue 14 22K 28K 166960K 37 0 SYN cache 2 16K 16K 166960K 2 0 ddb{1}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 24 0 0 1 0 1 1 0 8 0 rtpcb 120 48 0 45 1 0 1 1 0 8 0 rtentry 112 120 0 7 4 0 4 4 0 8 0 unpcb 144 352 0 332 10 1 9 10 0 8 8 syncache 336 3 0 3 2 1 1 1 0 8 1 tcpcb 808 30 0 25 2 0 2 2 0 8 1 arp 120 21 0 2 1 0 1 1 0 8 0 inpcb 336 172 0 162 4 0 4 4 0 8 2 nd6 136 24 0 0 1 0 1 1 0 8 0 kcovpl 48 8 0 0 1 0 1 1 0 8 0 ppxss 1168 1 0 1 1 0 1 1 0 8 1 pffrag 232 2 0 0 1 0 1 1 0 482 0 pffrnode 88 2 0 0 1 0 1 1 0 8 0 pffrent 40 3 0 1 1 0 1 1 0 8 0 pfosfp 40 1428 0 1005 5 0 5 5 0 8 0 pfosfpen 112 1428 0 714 21 0 21 21 0 8 0 pfanchor 1288 1 0 0 1 0 1 1 0 8 0 pfstitem 24 24 0 0 1 0 1 1 0 8 0 pfstkey 128 24 0 0 1 0 1 1 0 8 0 pfstate 376 24 0 0 3 0 3 3 0 8 0 pfrule 1344 54 0 15 4 0 4 4 0 8 0 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 469 0 9 30 0 30 30 0 8 0 art_table 32 470 0 9 4 0 4 4 0 8 0 art_node 16 119 0 17 1 0 1 1 0 8 0 semapl 112 5 0 1 1 0 1 1 0 8 0 shmpl 112 6 0 1 1 0 1 1 0 8 0 dirhash 1024 19 0 2 3 0 3 3 0 8 0 dino2pl 256 1710 0 200 95 0 95 95 0 8 0 ffsino 272 1710 0 200 101 0 101 101 0 8 0 nchpl 144 2031 0 344 63 0 63 63 0 8 0 uvmvnodes 80 1862 0 0 38 0 38 38 0 8 0 vnodes 216 1862 0 0 104 0 104 104 0 8 0 namei 1024 6190 0 6190 1 0 1 1 0 8 1 percpumem 16 47 0 1 1 0 1 1 0 8 0 kstatmem 264 26 0 2 2 0 2 2 0 8 0 scsiplug 72 2 0 2 1 0 1 1 0 8 1 scxspl 216 5890 0 5890 3 1 2 2 1 8 2 plimitpl 152 38 0 21 1 0 1 1 0 8 0 sigapl 424 542 0 493 8 1 7 7 0 8 1 futexpl 64 1468 0 1463 1 0 1 1 0 8 0 knotepl 120 299 0 0 10 0 10 10 0 8 0 kqueuepl 216 38 0 27 1 0 1 1 0 8 0 pipepl 320 180 0 153 3 0 3 3 0 8 0 fdescpl 496 524 0 493 5 0 5 5 0 8 1 filepl 152 2332 0 2077 19 1 18 19 0 8 6 lockfpl 104 37 0 34 1 0 1 1 0 8 0 lockfspl 48 18 0 15 1 0 1 1 0 8 0 sessionpl 144 22 0 13 1 0 1 1 0 8 0 pgrppl 48 32 0 15 1 0 1 1 0 8 0 ucredpl 104 145 0 132 1 0 1 1 0 8 0 zombiepl 144 493 0 493 1 0 1 1 0 8 1 processpl 1160 542 0 493 5 0 5 5 0 8 1 procpl 648 722 0 660 7 1 6 6 0 8 0 sockpl 664 573 0 540 23 12 11 23 0 8 7 mcl64k 65536 1 0 0 1 0 1 1 0 8 0 mcl8k 8192 3 0 0 1 0 1 1 0 8 0 mcl4k 4096 159 0 0 20 0 20 20 0 8 0 mcl2k 2048 18 0 0 3 0 3 3 0 8 0 mtagpl 96 3 0 0 1 0 1 1 0 8 0 mbufpl 256 169 0 0 11 0 11 11 0 8 0 bufpl 280 2414 0 107 165 0 165 165 0 8 0 anonpl 24 151338 0 147943 25 2 23 24 0 185 0 amapchunkpl 152 12335 0 11848 23 0 23 23 0 158 1 amappl16 200 3912 0 3889 5 3 2 5 0 8 0 amappl15 192 11 0 11 1 1 0 1 0 8 0 amappl14 184 117 0 105 1 0 1 1 0 8 0 amappl13 176 7 0 7 1 1 0 1 0 8 0 amappl12 168 1189 0 1158 4 1 3 3 0 8 1 amappl11 160 85 0 71 1 0 1 1 0 8 0 amappl10 152 11 0 11 1 1 0 1 0 8 0 amappl9 144 178 0 178 1 1 0 1 0 8 0 amappl8 136 24 0 22 1 0 1 1 0 8 0 amappl7 128 241 0 229 1 0 1 1 0 8 0 amappl6 120 197 0 196 1 0 1 1 0 8 0 amappl5 112 135 0 123 1 0 1 1 0 8 0 amappl4 104 319 0 301 1 0 1 1 0 8 0 amappl3 96 2156 0 2062 3 0 3 3 0 8 0 amappl2 88 787 0 704 3 0 3 3 0 8 1 amappl1 80 7916 0 7345 14 0 14 14 0 8 1 amappl 88 3484 0 3314 5 0 5 5 0 92 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 8 0 1 1 0 1 1 0 8 0 uaddrrnd 24 524 0 493 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 524 0 493 1 0 1 1 0 8 0 vmmpekpl 168 5757 0 5720 2 0 2 2 0 8 0 vmmpepl 168 40683 0 38829 85 0 85 85 0 357 0 vmsppl 448 523 0 493 6 1 5 5 0 8 1 rwobjpl 56 17459 0 14669 40 0 40 40 0 8 0 pdppl 4096 1055 0 986 101 30 71 87 0 8 2 pvpl 32 10180 0 0 84 1 83 83 0 265 0 pmappl 248 523 0 493 3 0 3 3 0 8 0 extentpl 40 55 0 38 1 0 1 1 0 8 0 phpool 112 386 0 34 11 0 11 11 0 8 0 ddb{1}> machine ddbcpu 0 Stopped at x86_ipi_db+0x27: addq $0x8,%rsp x86_ipi_db(ffffffff834b2ff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __mp_lock(ffffffff83622ac0) at __mp_lock+0x19e softintr_dispatch(0) at softintr_dispatch+0x5b Xsoftclock() at Xsoftclock+0x27 __sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc+0xb syscall(ffff80002a14a830) at syscall+0xad6 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x76c7f608abe0, count: 6 ddb{0}> trace x86_ipi_db(ffffffff834b2ff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __mp_lock(ffffffff83622ac0) at __mp_lock+0x19e softintr_dispatch(0) at softintr_dispatch+0x5b Xsoftclock() at Xsoftclock+0x27 __sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc+0xb syscall(ffff80002a14a830) at syscall+0xad6 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x76c7f608abe0, count: -9 ddb{0}> machine ddbcpu 1 Stopped at db_enter+0x25: addq $0x8,%rsp db_enter() at db_enter+0x25 panic(ffffffff830f4f46) at panic+0x1e5 __assert(ffffffff830a61f4,ffffffff83049cc4,69e,ffffffff8300b840) at __assert+0x29 uvm_fault_unwire_locked(fffffd806bc233a8,20000000,20010000) at uvm_fault_unwire_locked+0x4b4 uvm_fault_unwire(fffffd806bc233a8,20000000,20010000) at uvm_fault_unwire+0x55 kern_sysctl(ffff8000371b1594,2,20000100,ffff8000371b15c8,0,37,9e1ac4903d27153f) at kern_sysctl+0x500 sys_sysctl(ffff800033d982b0,ffff8000371b1700,ffff8000371b1650) at sys_sysctl+0x425 syscall(ffff8000371b1700) at syscall+0xbb6 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x8c07d5b32a0, count: 6 ddb{1}> trace db_enter() at db_enter+0x25 panic(ffffffff830f4f46) at panic+0x1e5 __assert(ffffffff830a61f4,ffffffff83049cc4,69e,ffffffff8300b840) at __assert+0x29 uvm_fault_unwire_locked(fffffd806bc233a8,20000000,20010000) at uvm_fault_unwire_locked+0x4b4 uvm_fault_unwire(fffffd806bc233a8,20000000,20010000) at uvm_fault_unwire+0x55 kern_sysctl(ffff8000371b1594,2,20000100,ffff8000371b15c8,0,37,9e1ac4903d27153f) at kern_sysctl+0x500 sys_sysctl(ffff800033d982b0,ffff8000371b1700,ffff8000371b1650) at sys_sysctl+0x425 syscall(ffff8000371b1700) at syscall+0xbb6 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x8c07d5b32a0, count: -9