last executing test programs: 4.806728064s ago: executing program 3 (id=233): setrlimit(0x6, &(0x7f0000000980)={0xb, 0x54}) r0 = syz_open_pts() r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240), 0x10, 0x0) fcntl$lock(r1, 0x9, &(0x7f0000000080)={0x0, 0x0, 0x4a3, 0x20001fffffffd}) openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x10, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) fcntl$lock(r2, 0x9, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x20001fffffffd}) close(r0) r3 = syz_open_pts() ioctl$TIOCSETA(r3, 0x802c7414, &(0x7f0000000180)={0x7fffffff, 0xcacf, 0xdffdff7e, 0x160350a, "04e4577e010405080800", 0x101, 0x9}) writev(r0, &(0x7f00000000c0)=[{&(0x7f00000009c0)="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", 0x19f}], 0x1) 4.478378175s ago: executing program 6 (id=240): r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000b40)="825a4f47c21e6ed7eda0f5903abf65b18d7c51f78b06ccffb40500000000000000000000fafd3493776665d4cd12c63d34", 0x31}, {&(0x7f0000000b80)="b881798009c547832e", 0x9}], 0x2, 0x0, 0x0, 0x406}, 0x0) ioctl$TIOCSETA(r0, 0xc4504443, &(0x7f0000000740)={0x0, 0x5, 0x1000000, 0x2, "01d04b0a0047c1d100", 0x0, 0x6}) open$dir(&(0x7f0000000040)='./file0\x00', 0xae828e137847f62, 0x0) setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) mknod(&(0x7f0000000000)='./file0\x00', 0x6000, 0xe02) open$dir(&(0x7f0000000040)='./file0\x00', 0x200, 0x0) select(0x40, &(0x7f0000000000)={0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x3, 0x401}, 0x0, 0x0, 0x0) truncate(&(0x7f00000000c0)='./file0\x00', 0x6001000004) ktrace(&(0x7f0000000000)='./file0\x00', 0x4, 0x112, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x30000) 4.272843737s ago: executing program 3 (id=241): r0 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) pwritev(r0, &(0x7f0000000640)=[{&(0x7f00000000c0)="268b1123db16ea0577cd13c42122c29f9630b324276e2e9de0ad2cc85f1b76d010610fd102f9311bea3774059fd03189bcfb6fba9562dfd2f5b6f2d4fbe3b0e36b1a2f51e6cefc712155", 0x4a}, {&(0x7f0000000500)="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", 0x10c}], 0x2, 0x2) r1 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$WSMOUSEIO_SETPARAMS(r1, 0x80105728, &(0x7f0000000040)={&(0x7f0000000080)=[{0x8, 0x3}, {0x101}], 0x2}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000180)="a011ff218dd80bfbdbdd4c0c403fd0d8f26af3e076b2f18c53f1d52114b62054fca2f3ed0449c4ba7e990daf91716720e23a86512dce9b5b6ce8e3f9c13b71534379", 0x42}, {&(0x7f0000000280)="b53ee42c394036c3cd3e2892518691de516caf89ce2700c29516f90153347eb012183bc01c8639e5bdddd45ac15e00145e1deec6ade44064154bf2d5f0cc5de0ece6f01ed768a522932b17f35f78545f038bb229ffec08594caeaf28d6aacbf82e475535b625f14738257e20176fe4304eb630d0ea053d2e2c6d01cc1dd41e77695d05bad379b582ca62e67e6ee68ffce36ff05d9ae5b10ad3e7c147b3f4041709b56d91e8e49d412038d9a68f743331", 0xb0}], 0x2, 0x0) (async) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x54, 0x0, 0xc, 0x7f7f}, {0x20, 0xe, 0xfe, 0xc}, {0x9e, 0x7, 0x0, 0x3}]}) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r3 = socket(0x18, 0x1, 0x0) setsockopt(r3, 0x1000000029, 0xc, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) (async, rerun: 32) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async, rerun: 32) r4 = socket(0x11, 0x3, 0x0) connect$unix(r4, &(0x7f0000000000)=@abs={0x1, 0x0, 0x2}, 0x8) r5 = socket(0x11, 0x3, 0x0) sendto$unix(r5, &(0x7f0000000140)="b10005016000009f0500070005000000331c13fecea10500fef96ecfc72fd3357ae30200004e3039d2d236acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd38bfbb770c1f5a872c881ea6e2ec5890400000000000000361b1257aea8c500002002fbfe0c2300008abfba0900000008e371a3f8343712051eeab71d89e0000407000000e011200000", 0xb1, 0x0, 0x0, 0x0) (async, rerun: 32) ioctl$BIOCSETF(r2, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) (async, rerun: 32) sysctl$net_inet6_icmp6(&(0x7f0000000040)={0x4, 0x18, 0x3a, 0xb}, 0x4, 0x0, 0x0, 0x0, 0x0) (async) unveil(0x0, &(0x7f0000000240)='x\x00') 4.082086297s ago: executing program 0 (id=245): open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) poll(&(0x7f0000000080)=[{r0, 0x27}], 0x1, 0x0) poll(0x0, 0x0, 0x8e69) open(&(0x7f0000000000)='./file0\x00', 0xa82, 0x144) openat$pf(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) r1 = socket(0x2, 0x4000, 0x1) close(r1) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x8018, 0x2000007, 0x101, 0x80000001, 0x81ac, 0x80010001, 0x10, [{0x0, 0x7, 0x40000004, 0x71002}, {0x6, 0xa, 0x8, 0xfffffff9}, {0x100, 0xf88, 0x0, 0x9}, {0x1, 0x2, 0x8007}, {0x401, 0x6fb, 0x2800, 0x7}, {0x1, 0x650, 0xfffffffe, 0x99}, {0xce1, 0x0, 0x4f8, 0x6d}, {0x6, 0x7, 0x14, 0x8}, {0x2, 0x82, 0x5, 0x5}, {0x6a75, 0x8001, 0xd17, 0x4}, {0x1cc, 0x10001, 0xc, 0x5}, {0x8, 0x9, 0x8, 0x7}, {0xb8c, 0x7, 0x8, 0x4}, {0x29a71717, 0xfffffffa, 0x0, 0x6}, {0xc, 0x5, 0x5, 0x10000000}, {0x0, 0x1, 0xfff, 0x30004}]}) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r2 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x29) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r2, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x54}) ioctl$VNDIOCSET(r2, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) r3 = socket(0x1e, 0x3, 0x0) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) syz_open_pts() 4.081804411s ago: executing program 6 (id=246): select(0x40, &(0x7f0000000000)={0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf4}, 0x0, 0x0, 0x0) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x5, 0x4, 0x10) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) fcntl$lock(r1, 0x8, &(0x7f00000003c0)={0x0, 0x1, 0x40, 0x200000001}) ioctl$BIOCSRTIMEOUT(r1, 0x8010426d, &(0x7f0000000040)={0x2, 0x6}) bind(r0, &(0x7f0000000000), 0x10) connect$unix(r0, &(0x7f0000000000), 0x10) r2 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) getdents(r2, 0x0, 0x0) r3 = socket$inet(0x2, 0x3, 0x0) getsockopt(r3, 0x0, 0x23, 0x0, 0x0) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x3fb}) r4 = syz_open_pts() sendto(r0, &(0x7f00000000c0)="f2093690531e73ba5a48b2c1ffd0622a65358bc733ff0f78f943e2a2404c6f0e", 0x20, 0xc, &(0x7f0000000100)=@in={0x2, 0x3}, 0xc) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000500)=""/239, 0xef}], 0x301, 0x0}, 0x40) writev(r6, &(0x7f0000000400)=[{&(0x7f00000003c0)="b1", 0x1}], 0x1) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) r8 = socket$inet(0x2, 0x2, 0x48) r9 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0) r10 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r10, 0x8020691f, &(0x7f00000001c0)) kevent(r1, &(0x7f00000001c0)=[{{r7}, 0xffffffffffffffff, 0x88, 0x80, 0x1, 0x7}, {{r8}, 0x0, 0x8, 0x4, 0x7, 0x8}, {{r9}, 0xfffffffffffffffc, 0x92, 0x80, 0x8000000000000000, 0x7}, {{r0}, 0xffffffffffffffff, 0x5a, 0x2, 0x2, 0x40}], 0x4, &(0x7f0000000600)=[{{r1}, 0xfffffffffffffff9, 0x1c, 0x0, 0x8, 0x2}, {{r2}, 0xfffffffffffffffb, 0x0, 0x40000000, 0xa4f, 0x5}, {{r2}, 0xfffffffffffffff9, 0x2f, 0x8, 0xfffffffffffffff8, 0x1}, {{r0}, 0xffffffffffffffff, 0x10, 0x1, 0x1, 0x798d8b6c}, {{r2}, 0x2, 0x10, 0x2, 0x0, 0xff}, {{r6}, 0xfffffffffffffffc, 0x32, 0x1, 0x1, 0x6}, {{r10}, 0xffffffffffffffff, 0xa1, 0xa1, 0xa41, 0x5}, {{r5}, 0xfffffffffffffffe, 0x4, 0x1, 0x8, 0x7}], 0xd, &(0x7f0000000240)={0x1ef, 0xf7b}) write(r6, &(0x7f0000000740)="08000000000021e541", 0x9) writev(r4, &(0x7f00000002c0)=[{&(0x7f00000009c0)="cff5c05664db486cda", 0x9}], 0x1) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 3.901436587s ago: executing program 7 (id=248): mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) (async) sysctl$kern(&(0x7f0000000040)={0x1, 0x3d}, 0x2, 0x0, 0x0, 0x0, 0x0) (async) r0 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_int(r0, 0xffff, 0x1003, &(0x7f0000001100), &(0x7f0000000000)=0x4) (async, rerun: 32) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) (rerun: 32) sysctl$net_inet6_ip6(&(0x7f0000000040)={0x4, 0x18, 0x29, 0x2b}, 0x4, 0x0, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x29) ioctl$WSMOUSEIO_SCALIBCOORDS(r1, 0x81205724, &(0x7f0000000100)={0x7ff, 0x8018, 0x2000007, 0x101, 0x80000001, 0x81b0, 0x10001, 0x10, [{0x0, 0x2890, 0x4, 0x71002}, {0x6, 0x9, 0x8, 0xfffffff9}, {0x104, 0xf88, 0x0, 0x9}, {0x4, 0x800, 0x8007, 0x7}, {0x401, 0x3, 0x2800, 0x7}, {0x1, 0x650, 0x3, 0x99}, {0xce1, 0xffffffff, 0x4f8, 0x6d}, {0x6, 0x803, 0x14, 0x8}, {0x2, 0x82, 0x5, 0x5}, {0x6a75, 0x8001, 0x1000, 0x4}, {0x1cc, 0x10001, 0xc, 0x3}, {0x8, 0x9, 0x8, 0x2}, {0xb94, 0x7, 0x4, 0x1}, {0x29a71717, 0xfffffffa, 0x1, 0x6}, {0x1000c, 0x5, 0x5, 0x10000000}, {0x0, 0x1, 0xfff, 0x30004}]}) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) symlink(&(0x7f0000000180)='\x00', &(0x7f00000001c0)='./file0\x00') mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) (async) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x803, 0xe, 0x4007, 0x101, 0x4, 0x80001001, 0x7, 0x10, [{0x0, 0x7, 0x4, 0x71000}, {0x7, 0x4, 0x4, 0x7}, {0x6, 0xf83, 0x5, 0xaf9}, {0x5, 0x2, 0x7}, {0x6, 0x107f, 0xe, 0x4}, {0x2, 0x7, 0xe, 0x9c}, {0x80000cdf, 0xfffffffd, 0x3, 0x6d}, {0x4, 0x803, 0x14, 0x18}, {0x2, 0x81, 0x1, 0xb}, {0x2, 0x8001, 0x3, 0x4089}, {0x4, 0xfffb, 0x9, 0xaed}, {0x805, 0xffffffff, 0x8, 0x9}, {0xe0, 0x3, 0x5, 0x3ff}, {0x7ffffffe, 0xfffffffa, 0x6, 0x100007}, {0x2, 0x4, 0xd5b3}, {0x0, 0x1, 0x4, 0x30000}]}) (async) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x2) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x20000000000001df, &(0x7f0000000040)=[{0x1, 0x0, 0x7, 0x7}]}) (async) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) (async) ioctl$VNDIOCSET(r2, 0xc0184406, &(0x7f00000001c0)={0x0, 0x0, 0x0}) (async) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) (async) link(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000d40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000a40)='./file0\x00') ioctl$VNDIOCSET(r1, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) (async) ioctl$VNDIOCSET(r1, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (async) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r3, 0x0, 0x200000000000c, &(0x7f0000000240)="ea00000300000000", 0x8) r4 = socket(0x800000018, 0x1, 0x0) (async, rerun: 64) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0xe5, 0x0, 0x0, 0x0, 0x0, 0x102, 0x4008}, 0x5, 0x800, 0xffffffffffffffff, 0x0, 0x1ff, 0x60400003fffc, 0x2, 0x5}) (rerun: 64) bind$unix(r4, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) 3.901054316s ago: executing program 1 (id=250): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) write(r0, &(0x7f0000000080)="d81ad3d20cf7eb4e9b0800bc1a30", 0xe) 3.680152471s ago: executing program 1 (id=253): utimes(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={{0x8, 0x10}, {0x1, 0x2}}) getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0xc) lchown(&(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, r2) (async) ktrace(&(0x7f0000000100)='./file0\x00', 0x1, 0x80c, r0) chroot(&(0x7f0000000140)='./file0\x00') (async) getgroups(0xa, &(0x7f0000000180)=[r2, r2, 0xffffffffffffffff, r2, r2, r2, r2, r2, r2, r2]) msgctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x3ff, r1, r6, r1, r2, 0x48, 0xfff0}, 0x3, 0xe, r0, r0, 0x48000000, 0x8b4, 0x0, 0x2}) (async, rerun: 32) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2) (async, rerun: 32) setregid(r6, 0xffffffffffffffff) (async) r7 = dup(0xffffffffffffff9c) bind$unix(r7, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0xa) (async) connect$unix(r7, &(0x7f0000000280)=@file={0x1, './file0\x00'}, 0xa) (async) r8 = getpgrp() ktrace(&(0x7f00000002c0)='./file0\x00', 0x0, 0x808, r8) (async) close(r7) (async) preadv(r7, &(0x7f0000000580)=[{&(0x7f0000000300)=""/120, 0x78}, {&(0x7f0000000380)=""/166, 0xa6}, {&(0x7f0000000440)=""/204, 0xcc}, {&(0x7f0000000540)=""/57, 0x39}], 0x4, 0x2) (async, rerun: 32) r9 = socket(0x18, 0x2, 0x6) (async, rerun: 32) setgroups(0x2, &(0x7f00000005c0)=[r6, r4]) getsockopt$sock_cred(r7, 0xffff, 0x1022, &(0x7f0000000600), &(0x7f0000000640)=0xc) (async) semget(0x3, 0x0, 0x282) (async) ioctl$KDDISABIO(r7, 0x20004b3d) (async, rerun: 32) setsockopt(0xffffffffffffffff, 0x7, 0x0, &(0x7f0000000680)="7284cb245dbfc6a8053f380c7e9d9a13a215244bdd4a672ff7c03d3d47b0c152a1e05b1786236d6c7de83a5e9868bbbd90224da89d5c37a62b9b319e5e0d8e90d3a15ac56c3d1eb4b4ca59bf044b1a02b91a8f3e2a0cb7de2955f579e73d859d1bbae527ad87ebac788966848f60a4abbb66cbacca06de4de665d1d92b6edc2b92055dd58a5cf6c567bb3fe9da4ec97eba69cd12976ea19a7ad284654808d4908b9ff78425a4ccb44f4455959791be92670777067470cdacdc652cdb08f467f61f8e08f555f1b47d4006cd6f38500d24e831bd4025f381e1eea463b49312d421a2", 0xe1) (async, rerun: 32) getsockname(r7, &(0x7f0000000780)=@un=@abs, &(0x7f00000007c0)=0x8) setregid(r3, r5) (async) syz_emit_ethernet(0xa4, &(0x7f0000000800)={@local, @local, [{[], {0x8100, 0x1, 0x0, 0x3}}], {@generic={0x5208, "4b391d7ceac18dd556c82ba5fcc4e1ba841d4ec49d4bcf0fe5829498d74109c39f09172ae7f7cdb466a5df10aa9726424a7c2bba90fb1f62a6f5f0fdf1973b0e4969ce5e1ecf5cbbf05d324ec03c7096a13fdb5dc632140ea31de58f5792f9a2d69d6f30d198050ea52a349af11b754efa8bb7b45833ac06cec4ad317dc3d428cfb9a91032489d1804d7a7339ec99f22266f"}}}) mkdir(&(0x7f00000008c0)='./file0\x00', 0x0) connect(r9, &(0x7f0000000900)=@in={0x2, 0x1}, 0xc) ioctl$TIOCMBIC(0xffffffffffffffff, 0x8004746b, &(0x7f0000000940)=0x4) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000980)) sysctl$net_mpls(&(0x7f00000009c0)={0x4, 0x21, 0x3}, 0x3, &(0x7f0000000a00)="4d94730c21738c2e5494533fc01e43da41887189f383242fef51d54f0981a0ebd22db727e27481b36605e848b9ac31441f3956842417c1cdcef88bfe18ae9d", &(0x7f0000000a40)=0x3f, &(0x7f0000000a80)="84a47f81f18a9fe45d7cf0a9b44fe2a85dbca8e01be291bc462670b662f8f661a890c12ea32b6607732eb2e3e02438f7c0832e634b9f0942d3bfcf332be14390039f07bc86ec94d1fd55df0c9a02a01e85efa097871dc5ac48daaf6d72a70cd8a31f79dfa23f32d4155b6dcaa36cb2b9c46e93", 0x73) 3.553881304s ago: executing program 2 (id=254): r0 = open(&(0x7f0000000180)='./file0\x00', 0x80000000000206, 0x0) r1 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) ioctl$WSKBDIO_GETDEFAULTKEYREPEAT(r1, 0x400c570a, &(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) r2 = getpid() ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x40000530, r2) r3 = open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) bind$unix(r0, &(0x7f0000000100)=@abs={0x1, 0x0, 0x3}, 0x8) mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x3, 0x10, r3, 0x0) clock_gettime(0x0, &(0x7f00000014c0)) 3.551841831s ago: executing program 3 (id=255): open(0x0, 0x0, 0x37) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) r0 = socket(0x18, 0x1, 0xa6) r1 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r1, 0xc0106924, &(0x7f00000001c0)) ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file0\x00', 0xfff7, 0x1000c3, 0x0, 0x0, 0x8, 0xffffffff, 0x2, 0x1, 0x1, 0x1, 0x100}) setitimer(0x1, &(0x7f0000000140)={{0x1, 0x100000000000009}, {0x7fff, 0x4}}, 0x0) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) setregid(0x0, 0x0) openat$bpf(0xffffffffffffff9c, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$FIONREAD(r0, 0x8080691a, &(0x7f0000000100)) 3.551347672s ago: executing program 6 (id=256): r0 = shmget$private(0x0, 0x3000, 0x442, &(0x7f0000ffa000/0x3000)=nil) shmat(r0, &(0x7f0000001000/0x3000)=nil, 0x0) r1 = shmget$private(0x0, 0x1000, 0x95a999646a72d594, &(0x7f0000233000/0x1000)=nil) shmat(r1, &(0x7f0000482000/0xe000)=nil, 0x3000) shmat(r1, &(0x7f0000001000/0x3000)=nil, 0x2000) shmat(r1, &(0x7f0000489000/0x1000)=nil, 0x3000) shmctl$IPC_STAT(0x0, 0x2, 0x0) shmget$private(0x0, 0x3000, 0x442, &(0x7f0000ffa000/0x3000)=nil) (async) shmat(r0, &(0x7f0000001000/0x3000)=nil, 0x0) (async) shmget$private(0x0, 0x1000, 0x95a999646a72d594, &(0x7f0000233000/0x1000)=nil) (async) shmat(r1, &(0x7f0000482000/0xe000)=nil, 0x3000) (async) shmat(r1, &(0x7f0000001000/0x3000)=nil, 0x2000) (async) shmat(r1, &(0x7f0000489000/0x1000)=nil, 0x3000) (async) shmctl$IPC_STAT(0x0, 0x2, 0x0) (async) 3.139181457s ago: executing program 0 (id=257): mknod(&(0x7f0000000200)='./bus\x00', 0xbffab6d3d3d32fb2, 0x202) open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9f, 0x0) r0 = getpid() ktrace(&(0x7f0000000000)='./file0\x00', 0x4, 0x60000323, r0) ktrace(&(0x7f0000000140)='./bus\x00', 0x41ecf3848c59a689, 0x4000000c, 0x0) 3.138532134s ago: executing program 1 (id=258): syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd61ef307d00000612000000000000000000005c13000000000000000000000000000000000001"]) (async, rerun: 32) ioctl$WSMUXIO_REMOVE_DEVICE(0xffffffffffffffff, 0x80085762, &(0x7f0000000040)={0x1}) (rerun: 32) r0 = socket(0x18, 0xc003, 0x3a) r1 = socket(0x18, 0x3, 0x0) setsockopt(r1, 0x1000000029, 0x25, &(0x7f0000000040)="5ab7776a", 0x4) (async, rerun: 64) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0xd02) (async, rerun: 64) chmod(&(0x7f0000000040)='.\x00', 0x35e) (async, rerun: 32) setuid(0xee01) (rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0xc4) (async, rerun: 64) mkdir(&(0x7f00000001c0)='./file0/file0\x00', 0xa) (rerun: 64) chmod(&(0x7f0000000100)='./file0\x00', 0x42) rename(&(0x7f0000000000)='./file0/file0\x00', 0x0) (async) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f00000000c0)=[{}, {}, {}]}) (async) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) r2 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VNDIOCSET(r2, 0xc0785101, &(0x7f0000000040)={0x0, 0x0, 0x0}) accept$inet(r0, 0x0, &(0x7f0000000180)) (async) setsockopt(r0, 0x29, 0x6c, &(0x7f0000000040), 0x4) (async, rerun: 64) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0x66, &(0x7f00000003c0)={0x0, 0x1, 0x10, 0x3}, 0xc) (rerun: 64) sysctl$kern(&(0x7f0000000000)={0x1, 0x47}, 0x3, &(0x7f0000000080)="b9d55a65edf95074454cbeef747750212b261340975c61c98fc44606f6c84c8106c596189f2824da6ce26ef22601faa932f8506c338734f736b71fe63c3db1e9d4ed2ce08ee7f16195ac49fb6ee8486b47aae9157492458d108d0fcface1392fdf88be327280a9ccb04d81e8c6efb7ee", &(0x7f0000000100)=0x70, 0x0, 0x0) (async) getsockopt(r0, 0xca, 0x4, &(0x7f0000000080)=""/75, &(0x7f0000000140)=0x4b) (async, rerun: 32) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (rerun: 32) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0x68, &(0x7f0000000000)={{0x18, 0x3, 0xfffff001, 0x4}, {0x18, 0x2, 0x8, 0x4}, 0x1003, [0x4, 0xfffffcb1, 0x24a, 0xc, 0x1, 0x8, 0x9, 0x1]}, 0x75) (async, rerun: 64) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0x68, &(0x7f0000000100)={{0x18, 0x2, 0xffff}, {0x18, 0x0, 0x5, 0x1}, 0xb, [0xf03, 0xfffffffe, 0x9, 0x5, 0xff, 0x800, 0x9, 0x67f]}, 0xca) (rerun: 64) 3.13733102s ago: executing program 5 (id=259): syz_emit_ethernet(0x2a, &(0x7f0000000400)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x7, 0x4, 0x0, 0x0, 0x1c, 0x65, 0x0, 0x0, 0x0, 0x0, @empty, @remote={0xac, 0x14, 0x0}, {[@generic={0x88, 0x2}, @timestamp={0x44, 0x4, 0xb, 0x1}]}}}}}}) (async) syz_emit_ethernet(0x2a, &(0x7f0000000400)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x7, 0x4, 0x0, 0x0, 0x1c, 0x65, 0x0, 0x0, 0x0, 0x0, @empty, @remote={0xac, 0x14, 0x0}, {[@generic={0x88, 0x2}, @timestamp={0x44, 0x4, 0xb, 0x1}]}}}}}}) mknod(&(0x7f0000000180)='./bus\x00', 0x2000, 0xd01) r0 = open(&(0x7f00000004c0)='./bus\x00', 0x0, 0x0) setitimer(0x2, &(0x7f0000000140)={{0x5, 0xe}, {0x0, 0x7}}, 0x0) (async) setitimer(0x2, &(0x7f0000000140)={{0x5, 0xe}, {0x0, 0x7}}, 0x0) ioctl$VNDIOCSET(r0, 0x80046471, &(0x7f0000000500)={0x0, 0x0, 0x0}) syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @broadcast, [], {@arp={0x806, @generic={0x18, 0x424c, 0x6, 0x10, 0xf, @broadcast, "79c16c5ba806a1b57f0006ecc66e8ade", @broadcast, "ed218b356e67f21b3d1385805063ca3c"}}}}) syz_emit_ethernet(0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="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"]) 2.86170889s ago: executing program 7 (id=260): mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0x450a) r0 = open(&(0x7f00000002c0)='./bus\x00', 0x2, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_open_pts() r2 = syz_open_pts() poll(&(0x7f0000000140)=[{r1, 0x80}, {r1, 0x10}, {r1, 0x40}, {r2, 0x2}, {r1, 0x2}, {r1, 0x1}, {r1, 0x7}], 0x7, 0xd6a) chroot(&(0x7f00000001c0)='./file0/../file0\x00') mknod(&(0x7f0000000580)='./file0/../file0\x00', 0x1, 0xd02) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x100) ioctl$VNDIOCSET(r3, 0x40204402, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$WSMUXIO_ADD_DEVICE(r0, 0x80085761, &(0x7f00000001c0)={0x3}) r4 = getpid() ktrace(&(0x7f0000000040)='./bus\x00', 0x0, 0x40000012, r4) r5 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0) socket(0x11, 0x3, 0x0) sysctl$hw(&(0x7f0000000100)={0x6, 0x19}, 0x2, &(0x7f0000000300)="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", 0x0, 0x0, 0xffffffffffffff87) sysctl$net_inet6_icmp6(&(0x7f0000000000)={0x4, 0x18, 0x3a, 0x3}, 0x4, &(0x7f0000000040), 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6}, 0x10, 0x0, 0x0) ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x5, "01000000d000", 0x0, 0x5}) sysctl$kern(&(0x7f0000000040)={0x1, 0x3e}, 0x16, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$kern(&(0x7f0000000040), 0x3, 0x0, 0x0, &(0x7f0000000080)="4f1d4c6344b80ed788b6a4515248df3aa745bb992c574ab4cdf5587145812eab4a988f7fafd7a01d99776d988908cd186b51f34f8c15ffa0c685ad4116c783959eff4278384b4000384dbb1c2aaeff10b4135529a1da6fda67c67469d954be811b25ec5521559154c586eefff122009f659cd3e27e98a3241495005f102d9101d158284c0ee3250aa7c11042330de22a299ab00894fdc9bac6042d", 0x4) sendto$unix(r5, &(0x7f0000000200)="b1000504600000000000210007000000331c13fecea10500fef9ed061ddd1efb7ae320b37b673039d2d2360737040004be38164991f7b85143222b297ae1aa5b236d0851e2f0ac3ebbc257699a5f139b672f4dc05d223e7d029d6ba8af63043728180800000000000000f5a472c881ea6e69e0bb76d907a9000002003b1b1257aea8c5000020020000000000008abfba090008effffffffbff3512b132ae037503682ce371a300803712051eadb71d89e0", 0xb1, 0x8, 0x0, 0x2) openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fcntl$dupfd(r0, 0xa, r0) sysctl$vm_swapencrypt(&(0x7f0000000000), 0x3, &(0x7f0000000040), 0x0, 0x0, 0x0) ioctl$BIOCGETIF(r5, 0x4020426b, &(0x7f0000000180)={""/16, @ifru_metric}) 2.860849116s ago: executing program 4 (id=261): ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x0, 0x0, 0x2}, {0x1, 0x0, 0x0, 0x1}]}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x3e}, 0x2, 0x0, 0x0, 0x0, 0x0) sysctl$kern(&(0x7f00000000c0)={0x1, 0x47}, 0x4000000000000003, 0x0, 0x0, 0x0, 0xfffffffffffffeb0) 2.860621042s ago: executing program 4 (id=262): mkdir(&(0x7f0000000040)='./file2\x00', 0xc1) mkdir(&(0x7f0000000300)='./file2/file0\x00', 0xc2) setgid(0xffffffffffffffff) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x90, 0x0) sysctl$machdep(&(0x7f0000000040)={0x7, 0x1}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$net_inet_ipip(&(0x7f0000000040)={0x4, 0x2, 0x4, 0x1}, 0x4, 0x0, 0x0, 0x0, 0x0) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000100)={0x5, &(0x7f00000000c0)=[{0x6, 0x7, 0x6}, {0x6, 0x2, 0xff}, {0xd, 0x7, 0x7f, 0x3}, {0x1bc, 0x2b, 0xa, 0x9}, {0x0, 0x4, 0xb4, 0x9}]}) setgroups(0x0, 0x0) r1 = socket(0x24, 0x2, 0x0) setsockopt(r1, 0x3, 0x7, 0x0, 0x0) setuid(0xffffffffffffffff) unveil(&(0x7f0000000080)='./file2/file0\x00', &(0x7f0000000140)='c\x00') 2.860373076s ago: executing program 0 (id=263): mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x205b92) r0 = socket$inet(0x2, 0x3, 0xf) setsockopt(r0, 0x0, 0x4, &(0x7f0000000000)="1ef4d8d5", 0x4) select(0x40, &(0x7f0000000180)={0xfffffffffffffffd, 0x44809e9d, 0xffffffffffffffff, 0x1, 0x3, 0x181c, 0x5, 0x9}, 0x0, 0x0, 0x0) r1 = kqueue() kevent(r1, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x40, 0x100) ioctl$FIONBIO(r2, 0x82907003, &(0x7f0000000140)=0x1) close(r2) 2.856078593s ago: executing program 5 (id=264): mknod(&(0x7f00000002c0)='./file0\x00', 0x2000, 0x5200) (async, rerun: 32) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) (rerun: 32) ioctl$WSDISPLAYIO_USEFONT(r0, 0x80585750, &(0x7f0000000100)={'./file0\x00', 0x800, 0xb4a4, 0x1, 0x0, 0x9, 0x3, 0xb, 0x2, 0x2, 0x1b, 0x3}) (async) r1 = socket(0x800000018, 0x1, 0x0) shutdown(r1, 0x1) (async) ioctl$FIONREAD(r1, 0xc050756a, &(0x7f0000000100)) 2.725615142s ago: executing program 3 (id=265): r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000b40)="825a4f47c21e6ed7eda0f5903abf65b18d7c51f78b06ccffb40500000000000000000000fafd3493776665d4cd12c63d34", 0x31}], 0x1, 0x0, 0x0, 0x40d}, 0x1) ioctl$TIOCSETA(r0, 0xc4504444, &(0x7f0000000740)={0x0, 0x0, 0x6, 0x7fffffff, "97a2224ff1c1d949eb050000008fdf9d7573c1d1", 0x80007ff, 0x22}) mknod(&(0x7f0000000040)='./file0\x00', 0x1000, 0x0) mknod(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x0) rename(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000500)='./file0\x00') 2.723878514s ago: executing program 2 (id=266): ioctl$WSMOUSEIO_SETPARAMS(0xffffffffffffffff, 0x80105728, &(0x7f0000000040)={&(0x7f0000000000)=[{0x101, 0xf}], 0x1}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x18, 0x3, 0x0) setsockopt(r0, 0x1000000029, 0x2e, &(0x7f0000000040)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) setsockopt(r0, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbdf13b9fd812eaa4e713048e69931929648", 0x14) open(&(0x7f0000000040)='./file0\x00', 0x200, 0x6) ktrace(&(0x7f0000000240)='./file0\x00', 0x4, 0xb1c, 0x0) clock_gettime(0x4, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)={&(0x7f0000000240)=@un=@file={0x0, ""/529}, 0x213, 0x0, 0x0, 0x0}, 0x4000}, 0x10, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1003f8d}, 0x10, 0x1001, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r1, &(0x7f0000000080)={0x0}, 0x6a, 0x0) close(r1) unveil(0x0, &(0x7f00000000c0)='c\x00') 2.722385251s ago: executing program 7 (id=267): ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000500)={0x3, &(0x7f00000000c0)=[{}, {0x1, 0x0, 0x0, 0x2}, {0x6}]}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xff0a, 0x0, 0x37) r0 = open(&(0x7f0000000240)='./file0\x00', 0x18289, 0x110) r1 = socket(0x800000018, 0x1, 0x0) shutdown(r1, 0x1) recvfrom$unix(r1, 0x0, 0x0, 0x43, 0x0, 0x0) write(r0, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) r2 = socket(0x11, 0x3, 0x0) sendto$unix(r2, &(0x7f0000000280)="b1000501600000000000000007000000201c13fecea10500fef96ecfc72fd3357ae320b37b673039d2d236acf20b7804beb502004369d3689c38164991f7c8cf5f882b297b771e00006deb51e2f0ac3ebbc2576b9a5f139b672f4d335d223e7d026ba8af630037282118000000720f5229fbb770c1f5a872c881ea6e69e0bb76d907c400000200361b1257aea8c500002002fb00000000008a070000000000ec1d89e000040781e4fffff040ff00000000", 0xb1, 0x0, 0x0, 0xffffffffffffffaa) sysctl$kern(&(0x7f0000000000)={0x1, 0x32}, 0x2, &(0x7f0000000140)="87844e2ca8ba76c46e5481cc15272b790830e6d8a08c652cc2de62013f2f4ec25753ddb97867341f1e409659e31505c2c910114661d253fa4c0c23ec7a45cdbabf23dd2bb8dd0be65cb51be60a27ff2b74fd945af8e3aed9e5349fe6a2bf69e00e5e6976dad8b1d2a249e359260d3e5e1db21b3cf02446b39b5ff4", &(0x7f00000001c0)=0x7b, &(0x7f0000000200)="97bb3907665858e56174ac61237dcfbc47d2c6630d083c", 0x17) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x10, 0x0) ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x3, 0x4, 0xfd, 0x6}, {0x1, 0x10, 0x5, 0x8}, {0x9, 0x19, 0x0, 0x3}]}) sysctl$hw(0x0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$BIOCSETF(r3, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x1000e, &(0x7f0000000280)=ANY=[]) sysctl$kern(&(0x7f0000000340)={0x0}, 0x0, &(0x7f0000000540)="c9cdd81e9a637504f49c0992b11d9483d9ca3a1b99b58250d59dcd5298392c9c7892096af08236b8459ba4bb22871a2ee6882e4402074c7ba6b328dda7526b2f8f73df502b47e8ca0c76ccaff04904b8253e9cb22dceb9b6d6df19d6fbeca398d9b82c3d9b75323fa71de5429260f0ed6bf37d2bbc40f6deeee8e0c972b9435063f970", &(0x7f0000000380)=0x83, &(0x7f0000000600)="a7bf550b172c56caf3cb36efc3b89e538d03b2302a02099f251850fdb76ca8e0132ca91fe8c39ec9c622de342e5e51587e1c20e4f8e5deb37584a8cdcd9218c073a6a6526137b31392f926fb64bb6d55", 0x50) ioctl$TIOCSETA(0xffffffffffffffff, 0xc4504445, &(0x7f0000000080)={0x200, 0x0, 0x0, 0x80, "97a2050000000000000007e900", 0x0, 0x20000000}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r5, &(0x7f0000000000)={0x0, 0x2}, 0x10, 0xe) recvmsg(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)=""/250, 0xfa}], 0x1, 0x0}, 0x840) sysctl$net_inet_tcp(&(0x7f00000000c0)={0x4, 0x2, 0x6, 0x18}, 0x4, &(0x7f0000000400)="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", &(0x7f0000000280)=0x10011, 0x0, 0x9c) 2.517553921s ago: executing program 5 (id=268): sysctl$net_inet6_ip6(&(0x7f00000001c0)={0x4, 0x18, 0x29, 0x32}, 0x4, 0x0, 0x0, &(0x7f00000002c0)="e5b37f71", 0x4) select(0x4a, &(0x7f0000000100)={0x0, 0x1000, 0x8, 0x0, 0x4, 0x7fffffff, 0x100000000, 0xfff}, &(0x7f0000000140)={0x2, 0x480000, 0x2, 0x8, 0x2, 0x7, 0x8, 0x8e}, &(0x7f00000002c0)={0x8, 0xe33, 0x7, 0x4, 0x6, 0x9, 0x5, 0x3}, &(0x7f0000000300)={0x1, 0x62f3}) 2.233564476s ago: executing program 0 (id=269): r0 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) pwritev(r0, &(0x7f0000000600)=[{&(0x7f00000000c0)="0ee33667", 0x4}], 0x1, 0xb) (async) close(r0) mknod(&(0x7f0000000000)='./file0\x00', 0x6000, 0xe02) (async) r1 = open(&(0x7f0000000200)='./file0\x00', 0x8, 0x30) readv(r1, &(0x7f00000004c0)=[{&(0x7f0000000040)=""/98, 0x62}, {&(0x7f00000000c0)=""/103, 0x67}, {&(0x7f0000000140)=""/65, 0x41}, {&(0x7f0000000240)=""/105, 0x69}, {&(0x7f00000002c0)=""/236, 0xec}, {&(0x7f00000003c0)=""/199, 0xc7}], 0x6) (async) execve(0x0, 0x0, 0x0) 2.233298952s ago: executing program 6 (id=270): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x10, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x5f, 0x6, 0x7, 0x1}, {0x61, 0x0, 0x7, 0x2}, {0x9e, 0x9, 0x0, 0x3}]}) sysctl$kern(0x0, 0x0, &(0x7f0000000140)="000000000007000000000b29a219c27e9b6ec0fb3ba9e2637f8eee8c3e8c7ff4775e6dc2b87c789921db8bcb", &(0x7f0000000080)=0x2c, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x1000e, &(0x7f0000000280)=ANY=[]) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) poll(&(0x7f00000000c0)=[{r1, 0x40}, {r1, 0x40}, {r0, 0x80}, {r0, 0x100}, {r1, 0x4}, {r0, 0x4}], 0x6, 0x1) poll(&(0x7f0000000200)=[{}, {r1, 0x15}, {r1, 0x1}], 0x3, 0x0) 2.232671691s ago: executing program 5 (id=271): r0 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0xe8, 0x0) r2 = fcntl$dupfd(r1, 0xa, 0xffffffffffffffff) fcntl$setown(r2, 0x6, 0x0) poll(&(0x7f0000000000)=[{r2, 0x2}], 0x1, 0x1) lseek(r2, 0x8000000000000001, 0x2) symlink(0x0, 0x0) openat$speaker(0xffffffffffffff9c, 0x0, 0x782, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) r3 = socket(0x18, 0x3, 0x0) r4 = socket(0x1, 0x2, 0x0) r5 = openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) ioctl$TIOCSETA(r5, 0xcd504404, &(0x7f0000000000)={0x7, 0x1a0e0, 0x6, 0xfffffffd, "cd05000400", 0x2, 0x3}) symlinkat(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r5, 0x0) ioctl$FIOGETOWN(r5, 0x4004667b, 0x0) ioctl$BIOCGBLEN(r5, 0x40044266, &(0x7f0000000080)) ioctl$FIONREAD(r4, 0xc0106924, &(0x7f00000001c0)) setitimer(0x1, &(0x7f0000000140)={{0x1, 0x100000000000009}, {0x7fff, 0x4}}, 0x0) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) ioctl$FIONREAD(r3, 0x8080691a, &(0x7f0000000100)) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x2011, r0, 0x0) 2.225142568s ago: executing program 4 (id=272): r0 = socket(0x18, 0x3, 0x0) getsockopt(r0, 0x29, 0x38, 0x0, 0x0) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) sendto(r1, &(0x7f00000000c0)="75471225e5ca642dd97f4a10d9d8eab26b2bdcf8ff1b869022eefa1ca175d7e0a8baeda0abbf70250ea6379d354691e582ad4563924ec676095cc44a2fe13515ef757091be11c6a04028f1cd92fe14054ef545d7cc3a9cdd68f9d86d67c2de571cf9055da17012e226df307cb365d846db2afd1098c4ca1f535c18a39a8ecb07fbbfec2919a378f52bb94ee2a79a7cc570395bdde7123cc3355d2a1031edaf1a9c7a90850034854e848e0e96a4024108c3aeaedb24caee6db2f9", 0xba, 0x409, &(0x7f0000000180)=@in={0x2, 0x0}, 0xc) socket$unix(0x1, 0x2, 0x0) 2.224914299s ago: executing program 2 (id=273): r0 = open(&(0x7f0000000040)='./file0\x00', 0x200, 0x6) r1 = fcntl$getown(r0, 0x5) ktrace(&(0x7f0000000900)='./file0\x00', 0x4, 0x40001218, r1) clock_gettime(0x4, 0x0) setitimer(0x2, &(0x7f0000000140)={{0x8, 0x7}, {0x0, 0xff}}, &(0x7f0000000180)) recvmmsg(r0, &(0x7f0000000840)={&(0x7f0000000800)={&(0x7f0000000200)=@in6, 0xc, &(0x7f00000006c0)=[{&(0x7f0000000480)=""/86, 0x56}, {&(0x7f0000000500)=""/254, 0xfe}, {&(0x7f0000000600)=""/189, 0xbd}], 0x3, &(0x7f0000000740)=""/146, 0x92}, 0x3ff}, 0x10, 0x1042, &(0x7f0000000880)={0x9, 0x7}) recvmmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)={&(0x7f0000000240)=@un=@file={0x0, ""/529}, 0x213, 0x0, 0x0, 0x0}, 0x4000}, 0x10, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1003f8d}, 0x10, 0x1001, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r2, &(0x7f0000000080)={0x0}, 0x10, 0x1) close(r2) unveil(0x0, &(0x7f00000000c0)='c\x00') 1.918862533s ago: executing program 1 (id=274): sendmsg$unix(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f0000000080), 0x1c, 0x0}, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x5900) syz_emit_ethernet(0xfbf, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x7, 0x6, "f5ae2e", 0xf89, 0x6, 0x5d, @empty, @local={0xfe, 0x80, '\x00', 0x0}, {[@routing={0x2b, 0x4, 0x0, 0xd6, 0x0, [@rand_addr="f3590ae2e0b236bb12844191d886d8a2", @mcast1]}, @hopopts={0x3c, 0x1e8, '\x00', [@generic={0xb, 0xf3f, "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"}]}], @generic="8211392609cf897e630bbe92e8c102ddce"}}}}}) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$BIOCSETIF(r0, 0x80184901, &(0x7f0000000380)={'tap', 0x0}) r1 = getppid() munmap(&(0x7f0000001000/0x400000)=nil, 0x400000) sysctl$net_inet_tcp(&(0x7f0000000000)={0x4, 0x2, 0x6, 0x13}, 0x4, 0x0, 0x0, &(0x7f00000010c0), 0x210) msgctl$IPC_SET(0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x400000002, 0x3}) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) ioctl$WSKBDIO_GETMAP(r2, 0x80047476, &(0x7f0000000100)={0x0, 0x0}) syz_emit_ethernet(0x8b, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffff1d975388ffffffaaaaaaaaaaaa08004500007d000000000011"]) r3 = socket(0x18, 0x3, 0x0) connect$unix(r3, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) r4 = fcntl$getown(r2, 0x5) ktrace(0x0, 0x5, 0x128, r4) ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, &(0x7f00000000c0)={0xa, 0x8000148, {[0x3, 0x0, 0x6, 0x6, 0x3, 0x8000, 0x1, 0x0, 0x7, 0x2, 0x9, 0x91c, 0xb, 0x180, 0x0, 0xd3, 0x76, 0xfffffffffffffff7], [0x5438b950, 0x5, 0x1001, 0x7, 0x1, 0x1, 0x9, 0x7, 0x1, 0x3], [0x6, 0x0, 0x8, 0x8000000008, 0x10000, 0x200, 0x2], [0x100000000, 0x10801, 0x0, 0x5, 0x3, 0x6], [{0x5ad, 0x7, 0xfffffffb, 0x6}, {0x2, 0x925, 0x3, 0x338}, {0x1000, 0x7fffffff, 0x0, 0x5}, {0x8, 0x2, 0x3, 0x895}, {0x4, 0x3, 0x2, 0x9}, {0xeff8, 0x4, 0x0, 0x7}, {0x5f, 0xffffff81, 0x1ff, 0x1}, {0x3, 0x10000, 0x6, 0x5}], {0x52b, 0x4, 0xfffffffd, 0x8}, {0xfffb, 0xffffffc0, 0x8}}}) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r5, 0x0, 0x24, &(0x7f0000000180)="fd0cc085", 0x4) r6 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_cred(r6, 0xffff, 0x1022, 0x0, 0x0) sendmsg(r5, &(0x7f0000000680)={&(0x7f0000000080)=@in={0x2, 0x2}, 0xc, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000000000000000000000000000014"], 0x180}, 0xe) bind$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x10000000000002}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r7 = socket(0x18, 0x3, 0x0) getpgrp() setsockopt(r7, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) sendmsg$unix(r7, &(0x7f0000001700)={0x0, 0xffffffb3, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0) openat(r2, &(0x7f0000000040)='./file0\x00', 0x40, 0x2c) 1.911416592s ago: executing program 3 (id=275): syz_open_pts() (async) r0 = syz_open_pts() ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000000)={0x2, 0x8, 0x98, 0x0, "0f08f2fec854917e36ca9cf45f9231a902835356", 0x545, 0x37e44c02}) r1 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r1, &(0x7f0000000140)={&(0x7f0000000040)=@file={0x0, './file0\x00'}, 0xa, &(0x7f0000000100)=[{&(0x7f0000000080)="e89f0d5e8df5646938b2a6647bf712e1d732e845a1125bbe4f958c731bb86e8d09db1d9308a3cac15531d36855c178e46052fd24f4e2917f11644bd4b0e6824767b60058ccfc51042cd9b2dc90537ada76db81", 0x53}], 0x1, 0x0, 0x0, 0x3}, 0xb) shmget$private(0x0, 0x4000, 0x2, &(0x7f0000ffb000/0x4000)=nil) (async) r2 = shmget$private(0x0, 0x4000, 0x2, &(0x7f0000ffb000/0x4000)=nil) getsockopt$SO_PEERCRED(r1, 0xffff, 0x1022, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0xc) getgid() (async) r6 = getgid() getsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f00000001c0)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0xc) getpgrp() (async) r8 = getpgrp() shmctl$IPC_SET(r2, 0x1, &(0x7f0000000240)={{0x3, r4, r6, 0xffffffffffffffff, r7, 0x100, 0x6}, 0x0, 0x6, r8, 0x0, 0x7, 0x4, 0x6}) (async) shmctl$IPC_SET(r2, 0x1, &(0x7f0000000240)={{0x3, r4, r6, 0xffffffffffffffff, r7, 0x100, 0x6}, 0x0, 0x6, r8, 0x0, 0x7, 0x4, 0x6}) openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x440, 0x0) (async) r9 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x440, 0x0) setegid(r5) r10 = getegid() getuid() (async) r11 = getuid() getgroups(0x5, &(0x7f0000000300)=[r5, r7, r5, r7, r7]) r13 = getpid() shmctl$IPC_SET(r2, 0x1, &(0x7f0000000340)={{0x5, r4, r10, r11, r12, 0x20, 0x4}, 0x7, 0x5fd2, r3, r13, 0x5, 0x9, 0x49}) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$WSDISPLAYIO_SVIDEO(r14, 0x80045745, &(0x7f0000000400)) (async) ioctl$WSDISPLAYIO_SVIDEO(r14, 0x80045745, &(0x7f0000000400)) r16 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000440), 0x100, 0x0) sendmsg$unix(r16, &(0x7f0000000800)={&(0x7f0000000480)=@abs={0x0, 0x0, 0x0}, 0x8, &(0x7f0000000700)=[{&(0x7f00000004c0)="bf671b966aca0f415970c0fd", 0xc}, {&(0x7f0000000500)="1aec45cf55db869e1841e112c28ea9efc9ac7ab79cc90c38166facb5073c6f02c14904ad6280575fe0cf0a17bb9c6c9a238bf04b303606fcdec98f5e62cb657d5af9d0a513a0a59c85d8cd69f0", 0x4d}, {&(0x7f0000000580)="660c77e88c56659c89da5a7aa05ccb2edab48720c24265dc0d298f9cd0071ff0fbcff1e6acb16f696c38798c56c3052a707171368fcaf6bc19341967381e50f53cb1adafc47c208d04539044ce82a95402e9b7f07a55751f4570f25b896b124f31d342bc3dab2a4617ee1128f90460094994e72142289d6101335c95a04bc39d15600efc9d38e09ef831c4ae3a576d03803af1621dba8e4f058398f5c73b57b548939b81af8a1aa3780ac295a97a62", 0xaf}, {&(0x7f0000000640)}, {&(0x7f0000000680)="dc1fe9c4a633e80dd8581f0f39158066ac5fee62bdc6dee4ee8e4e866025c95b6ade43b2be9d4b59ceb35f3e5d29ab5d48d2149641a2ce659e814e3bf0b0a3a3f45b6a30a7e7c56900f00f28863087e6a241bba9b6", 0x55}], 0x5, &(0x7f0000000780)=[@rights={0x18, 0xffff, 0x1, [r1, r9]}, @rights={0x30, 0xffff, 0x1, [r9, r0, r9, r15, r15, r1, r14]}], 0x48, 0xa}, 0x402) semop(r2, &(0x7f0000000840)=[{0x0, 0xfff7, 0x1800}, {0x2, 0x7, 0x1000}, {0x4, 0x8, 0x800}, {0x1, 0x7, 0x1800}, {0x1, 0x7, 0x1000}], 0x5) ioctl$TIOCDRAIN(r9, 0x2000745e) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) ioctl$WSMUXIO_LIST_DEVICES(r14, 0xc1045763, &(0x7f0000000880)={0x30c3, [{0x2, 0x19}, {0x0, 0x8}, {0x2, 0x29b}, {0x1, 0xdc}, {0x1, 0x22a}, {0x2, 0x18}, {0x2, 0xb}, {0xb89beacda5ef4051}, {0x1, 0x8}, {0x2, 0x1ff}, {0x3, 0x7}, {0x2, 0x8}, {0x8a8a25cc47673321, 0x3}, {0x4, 0x6}, {0x1, 0x7}, {0x1, 0x1ff}, {0x3, 0x4}, {0x1, 0x2}, {0x2, 0x7f}, {0x3, 0x1}, {0x1, 0x8}, {0x3, 0x7}, {0x2, 0x4}, {0x1, 0x5}, {0x1, 0x401}, {0x1, 0x800}, {0x3c267e920c3f2fb6, 0x4}, {0x3, 0x5}, {0x1, 0x6}, {0x2, 0x8}, {0x3, 0x894}, {0x2, 0xffffffff}]}) (async) ioctl$WSMUXIO_LIST_DEVICES(r14, 0xc1045763, &(0x7f0000000880)={0x30c3, [{0x2, 0x19}, {0x0, 0x8}, {0x2, 0x29b}, {0x1, 0xdc}, {0x1, 0x22a}, {0x2, 0x18}, {0x2, 0xb}, {0xb89beacda5ef4051}, {0x1, 0x8}, {0x2, 0x1ff}, {0x3, 0x7}, {0x2, 0x8}, {0x8a8a25cc47673321, 0x3}, {0x4, 0x6}, {0x1, 0x7}, {0x1, 0x1ff}, {0x3, 0x4}, {0x1, 0x2}, {0x2, 0x7f}, {0x3, 0x1}, {0x1, 0x8}, {0x3, 0x7}, {0x2, 0x4}, {0x1, 0x5}, {0x1, 0x401}, {0x1, 0x800}, {0x3c267e920c3f2fb6, 0x4}, {0x3, 0x5}, {0x1, 0x6}, {0x2, 0x8}, {0x3, 0x894}, {0x2, 0xffffffff}]}) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x10, r15, 0x0) (async) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x10, r15, 0x0) r17 = openat$pci(0xffffffffffffff9c, &(0x7f00000009c0), 0x10000, 0x0) ioctl$PCIOCREAD(r17, 0xc0107002, &(0x7f0000000a00)) syz_open_pts() read(r0, &(0x7f0000000a40)=""/80, 0x50) 1.910736108s ago: executing program 4 (id=276): sysctl$hw(&(0x7f0000000040)={0x6, 0xb}, 0x3, &(0x7f00000005c0)="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"/678, &(0x7f0000000080)=0xd4, 0x0, 0x0) (async) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) (async) r0 = socket(0x20, 0x5, 0x0) (async) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x80000000000206, 0x0) (async, rerun: 32) chmod(&(0x7f0000000080)='./file0\x00', 0x40) (rerun: 32) writev(r1, &(0x7f0000000400)=[{&(0x7f00000002c0)="23211f", 0x3}], 0x1) (async) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000040)="20092000019c0a", 0x7}], 0x1) (async) execve(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) (async) r2 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0) (async) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x8, 0x2000000000000004}, 0x0, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) (async, rerun: 64) r4 = socket$inet(0x2, 0x3, 0x0) (rerun: 64) close(r4) r5 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r5, 0x0, 0x200000000000b, &(0x7f0000000080)='\x00', 0x1) (async) setsockopt$inet_opts(r4, 0x0, 0x200000000000c, 0x0, 0x0) (async) sysctl$net_inet_ip(&(0x7f0000000740)={0x4, 0x2, 0x0, 0x1c}, 0x4, &(0x7f0000000780)="844b313fedc22119af3c2889218b858824ad03e707d7626c1ba2e6f82243530e2ce911356f59908af158e0bd40cae4", &(0x7f0000000840)=0x2f, &(0x7f0000000880)="99111033", 0x4) (async) openat$pf(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) (async) ioctl$TIOCSETA(r2, 0xc444443b, &(0x7f0000000180)={0x1, 0x0, 0xb, 0x0, "aeee0000610e2c5f0b657ea8f05cd10400", 0x0, 0x2}) (async) ioctl$WSKBDIO_GETMAP(r3, 0x80047476, 0x0) (async) r6 = fcntl$getown(r3, 0x5) ktrace(0x0, 0x1, 0xd27d43220c7df9b, r6) (async) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) (async) close(r2) (async) ioctl$FIONREAD(r0, 0x80206919, &(0x7f00000001c0)) 1.910235641s ago: executing program 6 (id=277): r0 = socket(0x18, 0x3, 0x0) close(r0) mknod(&(0x7f0000000080)='./bus\x00', 0x2000, 0x205b1a) r1 = open(&(0x7f0000000080)='./bus\x00', 0x10000, 0x0) readv(r1, &(0x7f0000000040)=[{&(0x7f0000002140)=""/4112, 0x1010}], 0x1) mknod(&(0x7f0000000000)='./file1\x00', 0x2000, 0x285b9a) open(&(0x7f0000000800)='./file1\x00', 0x800, 0x120) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x205b9a) open(&(0x7f0000000100)='./file0\x00', 0x10000, 0x100) execve(0x0, 0x0, 0x0) ioctl$FIONREAD(0xffffffffffffffff, 0xc0106924, 0x0) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) execve(0x0, 0x0, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x22, 0x411}, 0x4, 0x10003, 0x0, 0x0, 0x0, 0x2, 0x40000000000, 0xe63}) r2 = socket(0x800000018, 0x1, 0x0) setsockopt$sock_int(r2, 0xffff, 0x1000, &(0x7f0000000000)=0x1, 0x4) bind$unix(r2, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) connect$unix(r0, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) 1.907383784s ago: executing program 2 (id=278): mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r0 = open(&(0x7f0000000080)='./file0\x00', 0x8000, 0xa) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x17, 0x2000007, 0x101, 0x80000001, 0x80000081, 0x5, 0x10, [{0x0, 0x7, 0x4, 0x71000}, {0x7, 0x88, 0x8, 0x7}, {0x8, 0x6, 0x0, 0x9}, {0x1, 0x0, 0xe}, {0x401, 0x200326, 0x2800, 0x7}, {0x2, 0x27f3, 0x3, 0x99}, {0xce1, 0x4, 0x4f8, 0x6d}, {0x6, 0x801, 0x8, 0x9}, {0x2, 0x82, 0x5, 0x9}, {0x3, 0x100, 0xd1b, 0x1088}, {0x1e6, 0x10001, 0xa, 0x6}, {0x800, 0x9, 0x8, 0xb}, {0xb8e, 0x4, 0x8, 0x4}, {0x29a7171a, 0x8, 0x1, 0x4}, {0xc, 0x7, 0x1, 0xfffffffd}, {0x0, 0x1, 0x1002, 0x30004}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) sysctl$net_inet_tcp(&(0x7f0000000bc0)={0x4, 0x2, 0x6, 0x6}, 0x4, 0x0, 0x0, &(0x7f0000000c80), 0x0) r1 = socket(0x800000018, 0x1, 0x0) bind$unix(r1, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c) 1.906686407s ago: executing program 7 (id=279): fcntl$lock(0xffffffffffffffff, 0x9, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000300)={0x2, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0xff}, {0x1, 0x40}]}) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0xd02) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f00000000c0)=[{}, {}, {}]}) r0 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000080)='./file0\x00', 0x6000, 0x202) chmod(&(0x7f0000000040)='.\x00', 0x35e) setuid(0xee01) unveil(&(0x7f0000000480)='./file0\x00', &(0x7f0000000080)='W\x00') mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$WSMOUSEIO_SETPARAMS(r0, 0x80105728, &(0x7f0000000140)={&(0x7f0000000000)=[{0x8d, 0x10}], 0x1}) ioctl$VNDIOCSET(r1, 0xc0785101, &(0x7f0000000040)={0x0, 0x0, 0x0}) sysctl$kern(&(0x7f0000000100)={0x1, 0x38}, 0x2, &(0x7f0000000200)="71f91e347175350c58d84007cbe535cfeaa4ddfc5d347fc3335cab9060a34b8e5f84cf71b59c7a0500708220029a9343603a40ec52e57195dadea2b2527479166e0acc57063091500ff39b5b03e6e17cef", &(0x7f0000000080)=0x51, 0x0, 0x0) 1.808112094s ago: executing program 0 (id=280): setrlimit(0x8, &(0x7f0000000980)={0xb, 0x54}) syz_open_pts() ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x0, 0xb3f, {[0xfffffbfffffffffb, 0x0, 0x2, 0x100200000, 0x6, 0x17, 0xdf60, 0xfffffffffffffffe, 0x80, 0x2f01, 0x93, 0x3, 0xffffffffffffffff, 0x200000000002, 0xd, 0x4, 0xfffffffffffffffe, 0x6], [0xfffffffffffffffe, 0x80000001, 0x1, 0x20000001, 0x5e, 0x7, 0x80000000000001fe, 0x0, 0x0, 0x1], [0x100000003, 0x8000, 0x40000000, 0x0, 0xb, 0x11000, 0xffffffff00000000], [0x104, 0x1fffffffffb, 0x7ffffffffffffffc, 0x100000000, 0xd, 0x8], [{0x0, 0x0, 0x0, 0x8000000000007d06}, {0xfffc, 0x22, 0x5}, {0x4, 0x0, 0xfffffffe, 0x80}, {0x3, 0x4, 0x9, 0xffffffffffffffff}, {0x0, 0x0, 0x7f, 0x8}, {0x0, 0x9, 0x9, 0x2000000000000000}, {0x0, 0x0, 0xfffffff9}, {0x0, 0x100, 0x1, 0x4}], {0x1, 0x5, 0x6, 0x3}, {0xfffe, 0x3, 0x6d5, 0x1}}}) r0 = getpid() open(0x0, 0x615, 0x0) ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x510, r0) r1 = socket(0x18, 0x3, 0x0) recvmsg(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/33, 0x21}, 0x800) setsockopt$sock_int(r1, 0xffff, 0x800, &(0x7f0000000080)=0x4, 0x4) r2 = socket$inet(0x2, 0x3, 0x0) close(r2) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r3, 0x0, 0x200000000000c, &(0x7f0000000000)="ea00000100000000", 0x8) r4 = socket$inet(0x2, 0x2, 0x0) r5 = shmget$private(0x0, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$sock_cred(r6, 0xffff, 0x1022, &(0x7f0000000780)={0x0, 0x0}, &(0x7f00000007c0)=0xc) setreuid(0x0, r7) getsockopt$SO_PEERCRED(r3, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0xc) r9 = geteuid() r10 = getgid() shmctl$IPC_SET(r5, 0x1, &(0x7f0000000340)={{0x6, r7, r8, r9, r10, 0x4, 0x6}, 0x101, 0x3, r0, r0, 0x1, 0x2, 0x8}) setsockopt$inet_opts(r4, 0x0, 0x200000000000c, &(0x7f0000000000)="ea00000100000000", 0x8) setsockopt$inet_opts(r2, 0x0, 0xd, &(0x7f0000000240)="ea00000100000000", 0x8) acct(0x0) setsockopt(r1, 0x1000000029, 0x24, &(0x7f0000000000)="5ab7776a", 0x4) syz_emit_ethernet(0x66, &(0x7f00000000c0)=ANY=[@ANYBLOB="8f7377ede655ffffffffffff86dd605f6ad9003037008fd8b0e5602493ff1f88b029edad0c35ff02000000000000000000000000000102009078000000006006c32e00060600fe8000000000000000000000000000aa00000000e0ffffffffffffff00000001"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r11 = kqueue() kevent(r11, &(0x7f00000000c0), 0x138, 0x0, 0xffffffff, 0x0) 1.80767596s ago: executing program 1 (id=281): munmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000) shmat(0xffffffffffffffff, &(0x7f0000ffc000/0x4000)=nil, 0x1000) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) setuid(0xffffffffffffffff) (async) syz_emit_ethernet(0x3e, &(0x7f0000000200)=ANY=[@ANYBLOB="ffffffffffff3e8a633bd25faaf9a1cf1134a1333886dd68db15e3000801010000000000000000000000000000000100000000000000000000ffff000080"]) r0 = socket(0x1, 0x1, 0x0) setsockopt(r0, 0x1000000029, 0x36, &(0x7f0000000040)="03000000", 0x4) semop(0xffffffffffffffff, &(0x7f0000000000)=[{0x3, 0x96d5, 0x1000}, {0x2, 0x100, 0x800}], 0x2) (async) getuid() (async) mquery(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0x0, 0xffffffffffffffff, 0x9) 1.806918185s ago: executing program 5 (id=282): kevent(0xffffffffffffffff, 0x0, 0xffeffff1, &(0x7f00000002c0)=[{{}, 0xfffffffffffffff9, 0x0, 0x4, 0x0, 0x10}, {{}, 0xfffffffffffffffa, 0xc0, 0x20000000, 0x7fffffffffffffff, 0x46ad}, {{}, 0xfffffffffffffff9, 0x1, 0xf0000000, 0x3, 0x8}, {{}, 0xfffffffffffffffc, 0x20, 0x1, 0xffffffff, 0xc3d}, {{}, 0xfffffffffffffffb, 0x37, 0xf0000000, 0x9, 0x3}, {{}, 0xffffffffffffffff, 0x6, 0x2, 0xe, 0xffffffffffffffc6}, {{}, 0xfffffffffffffffd, 0x14, 0x10, 0x2, 0x100000001}, {{}, 0x0, 0x80, 0x1, 0x1f70, 0x80000000000005}], 0xb19, 0x0) (async) kevent(0xffffffffffffffff, 0x0, 0xffeffff1, &(0x7f00000002c0)=[{{}, 0xfffffffffffffff9, 0x0, 0x4, 0x0, 0x10}, {{}, 0xfffffffffffffffa, 0xc0, 0x20000000, 0x7fffffffffffffff, 0x46ad}, {{}, 0xfffffffffffffff9, 0x1, 0xf0000000, 0x3, 0x8}, {{}, 0xfffffffffffffffc, 0x20, 0x1, 0xffffffff, 0xc3d}, {{}, 0xfffffffffffffffb, 0x37, 0xf0000000, 0x9, 0x3}, {{}, 0xffffffffffffffff, 0x6, 0x2, 0xe, 0xffffffffffffffc6}, {{}, 0xfffffffffffffffd, 0x14, 0x10, 0x2, 0x100000001}, {{}, 0x0, 0x80, 0x1, 0x1f70, 0x80000000000005}], 0xb19, 0x0) select(0x40, &(0x7f0000000440)={0x6, 0x7, 0x6, 0x0, 0x4, 0x4, 0x5, 0x186071e0}, &(0x7f0000000480)={0xffffffffffffffff, 0x7, 0x4, 0xf3, 0xffff, 0x8051, 0x9, 0x8}, &(0x7f00000004c0)={0x7fffffff, 0x279e0ed, 0x7, 0xc814, 0x6, 0x8, 0x81, 0xffffffff}, &(0x7f0000000500)={0xf408, 0x81}) readv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000100)=""/62, 0x3e}], 0x1) select(0x40, &(0x7f0000000180)={0xfffffffffffffffd, 0x44809e9d, 0xffffffffffffffff, 0xfffffffefffffffe, 0x2000000000000000, 0x210, 0x8, 0x7}, 0x0, 0x0, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x7c, 0xe, 0x60, 0x4}, {0x2c, 0x2, 0x4, 0x6}, {0x6, 0x6, 0x10, 0x5}]}) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x10, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) openat$bpf(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$BIOCGETIF(r1, 0x4020426b, &(0x7f0000000400)={""/16, @ifru_addr=@in6}) (async) ioctl$BIOCGETIF(r1, 0x4020426b, &(0x7f0000000400)={""/16, @ifru_addr=@in6}) sysctl$kern(0x0, 0x0, &(0x7f00000003c0)="71f91e3471ac0058095f4377bc5a91501d94a34b8e5f84cf71b59c7afec370827c9521d5e43e5c51", &(0x7f0000000080)=0x28, 0x0, 0x0) (async) sysctl$kern(0x0, 0x0, &(0x7f00000003c0)="71f91e3471ac0058095f4377bc5a91501d94a34b8e5f84cf71b59c7afec370827c9521d5e43e5c51", &(0x7f0000000080)=0x28, 0x0, 0x0) ioctl$WSKBDIO_SETMAP(0xffffffffffffffff, 0x8010570e, &(0x7f0000000240)={0x2, &(0x7f00000000c0)=[{0x2, 0x6, 0x9, 0x0, 0x101}, {0x7e9, 0xdc, 0x2, 0x2, 0xe0}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0xe, &(0x7f0000000300)={@random="cac5909fbfe2", @empty, [], {@generic={0xbaf}}}) mknod(&(0x7f00000001c0)='./file0\x00', 0x2000, 0x205b9a) (async) mknod(&(0x7f00000001c0)='./file0\x00', 0x2000, 0x205b9a) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x10, 0x0) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$BIOCSETWF(r2, 0x80104277, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x80, 0x81, 0xdd, 0x9}, {0x40, 0x5, 0x5, 0x1}, {0x9e, 0x19, 0x71, 0x3}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETF(r2, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x1000e, &(0x7f0000000280)=ANY=[]) kqueue() (async) r3 = kqueue() kevent(r3, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) (async) kevent(r3, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) r4 = open(&(0x7f0000000200)='./file0\x00', 0x1, 0x0) ioctl$FIONBIO(r4, 0x82907003, &(0x7f0000000140)=0x1) (async) ioctl$FIONBIO(r4, 0x82907003, &(0x7f0000000140)=0x1) 427.632182ms ago: executing program 2 (id=283): writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="6dc10016", 0x4}], 0x1) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x2, 0x2, 0x0) connect$unix(r0, &(0x7f0000000000)=@file={0x1}, 0x2) connect(r0, &(0x7f0000000080)=@in={0x2, 0x1}, 0xc) sysctl$net_inet_tcp(&(0x7f0000000040)={0x4, 0x2, 0x6, 0xf}, 0x4, &(0x7f00000000c0)="8abb51530e7e4149f1e81b2b2ab51fe534fe37338fddd5da0472411566cb9cea4cd73fd7154ad61827861f3baa40e066a3861473b0f99b79a9c58366908280781e08e1779ed8e903249e434e3c0a2ae551b8162af11b8a08a91ee003d4836f2deb5f5851303b4dc3ef644730dced9cd41a9b9734a79d25d139fc8d034dfdbf602019dc0c9bed703449a5d99f6bd764bdb018a4a03806c184f9ccaadb8dff3363d455c6762f671a110520782687e09b5215228dc2f59e9aefed23b1e06010f983b771673aff6cbdfdf78466f2f365dd8af1f5cef48d50cc854dafdbaf763c5d438d43dd95d80a07a6da", &(0x7f00000001c0)=0xe9, &(0x7f0000000280)="efaf2756fed32bee4516fe7111fd4ade4e1de07cb373377ad9df5faa20f5f8b37d00079e1be5f3007fcb0b263532e03714ca4b33e113e75b525a21a308dbda0f44e63c3a66bafd3317dfc0", 0x4b) sysctl$vfs_ffs(&(0x7f0000000000)={0xa, 0x1, 0xe}, 0xa, 0x0, 0x0, 0x0, 0x0) 414.996605ms ago: executing program 1 (id=284): getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0}, 0xc) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x100000000000000, r0}) (async) r1 = socket(0x18, 0x2, 0x0) connect$unix(r1, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) (async) r2 = socket(0x18, 0x2, 0x0) (async) r3 = getpid() (async, rerun: 32) open(&(0x7f0000000080)='./file0\x00', 0x615, 0x1) (rerun: 32) setgroups(0x0, 0x0) (async) ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x40001738, r3) setrlimit(0x1, &(0x7f0000000180)={0x200, 0x95f}) (async) setgid(0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x40, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r5, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000ffff000001"], 0x10, 0x4}, 0x40a) (async) recvmsg(r4, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001200)=""/7, 0x7}, 0x0) (async) r6 = dup2(r1, r2) connect$unix(r6, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0xa) 414.734812ms ago: executing program 7 (id=285): r0 = socket(0x18, 0x3, 0x0) setsockopt(r0, 0x1000000029, 0x2e, 0x0, 0x0) getsockopt(r0, 0x29, 0x2e, 0x0, 0x0) r1 = syz_open_pts() sysctl$net_inet_esp(&(0x7f0000000000)={0x4, 0x2, 0x32, 0x4}, 0x4, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)="e75881efe3efdd0b5bd5d9fabe19b8af7084b1ae54a5825fef0e5a8e053045862af8a47d6e25b80bc465ad50bcc9539dfd1395f93b949531e56e8d166d949643c22d5745d44cc33aeef452d190c504c41a617f1bdfbc9acbbfe3b0d831840e4febe506e6536a30618e0de56db00c4f914e8cb84e1fc8f31376a23f2f8397113cc6b8468006b3ac53974e2e5a219694ed76754f01cdf42a07e28daf19e58daf86c538adc51006cdaa5cf936b64c3cffebda766e", 0xb3) fchdir(r1) 413.950302ms ago: executing program 6 (id=286): setitimer(0x0, &(0x7f0000000080)={{0x3, 0x9}, {0x0, 0x2}}, 0x0) r0 = open(0x0, 0x78e, 0x8) openat$bpf(0xffffffffffffff9c, 0x0, 0x80, 0x0) utimes(0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) r1 = openat$speaker(0xffffffffffffff9c, 0x0, 0x1, 0x0) pwritev(r1, 0x0, 0x0, 0x4) execve(0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)="76e5eac907f9ccf7a251ceddcec7d6aa45cffe2c63a56077123a276d3ba4e9d17eb3eb5db12a3783a8e0620d357de1fe04fa9465b5bd1286e9624dec06a00c222f", 0x41}], 0x1) rename(&(0x7f0000000100)='./file0\x00', 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='.\x00') mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000c00)='./file0\x00', 0x0, 0x0) unveil(&(0x7f0000000080)='.\x00', &(0x7f0000000000)='x\x00') openat$vmm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8, 0x0) getitimer(0x1, &(0x7f0000000140)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) unveil(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000300)='W\x00') symlinkat(&(0x7f0000000200)='./file2\x00', r2, &(0x7f0000000000)='./file1\x00') ioctl$KDENABIO(r0, 0x20004b3c) mknod(&(0x7f0000000040)='./bus\x00', 0x100000000205f, 0x2802) r3 = open(0x0, 0x80, 0x0) ioctl$WSKBDIO_SETMAP(r0, 0x8010570e, 0x0) ioctl$FIOASYNC(r3, 0x8004745d, &(0x7f0000000240)=0x10000) setitimer(0x0, 0x0, 0xffffffffffffffff) 413.665695ms ago: executing program 0 (id=287): select(0x40, &(0x7f0000000000)={0xfffffffffffffffd, 0x0, 0xdc4, 0x564, 0x9ce8, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0) (async) r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) (async) writev(0xffffffffffffffff, &(0x7f00000009c0)=[{&(0x7f0000000440)="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", 0x34e}], 0x1) (async) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002c40)=ANY=[@ANYBLOB="10000000ffff000001"], 0x10, 0x8}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r1, &(0x7f0000001440)={0x0, 0x1}, 0x10, 0x402) close(r2) ioctl$TIOCSETA(r0, 0xc0504417, &(0x7f0000000740)={0x0, 0xde6, 0x0, 0x6, "00000000000000000000f1ff1f93e1f7708a9338", 0x0, 0xfffffffc}) (async) syz_emit_ethernet(0x138, &(0x7f0000000180)=ANY=[@ANYRES64=r0, @ANYRES32=r2, @ANYBLOB="c9782efc16d607391884c3c7975f1914e28b47ca25ad66e8afe6a630ef02d09954105317c502fb089828296e818668bfdbd22812e15a910f7f25853230e9e5b8da18a2a1cc26fa4538b4de2c7c5fa69fb88fa3d8c70499f7131576032a95460d85ece5bc02eab1ed5b32db6794da4fa1e02e1d6806cff1a2ed9766e684068a", @ANYRES16=r2]) (async) ioctl$BIOCSRTIMEOUT(0xffffffffffffffff, 0xc0307006, &(0x7f0000000080)={0x1, 0xd8}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r3 = socket(0x2, 0x2, 0x0) (async) open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) (async) ktrace(&(0x7f0000000040)='./file0\x00', 0x4, 0x20001916, 0xffffffffffffffff) (async) r4 = open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x3, 0x10, r4, 0x0) getitimer(0x1, &(0x7f0000000100)) r5 = socket(0x2, 0x2, 0x0) setsockopt(r5, 0x0, 0x20, &(0x7f0000000080)="01000000", 0x4) (async) r6 = syz_open_pts() flock(r6, 0x3) (async) fcntl$lock(r6, 0x9, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x8}) syz_open_pts() (async) r7 = dup2(r5, r3) (async) fcntl$getflags(r4, 0xfb315b962fcdb3ca) bind(r7, &(0x7f0000000140)=@in6={0x18, 0x1, 0x5, 0x80000001}, 0xc) (async) r8 = socket(0x2, 0x2, 0x0) setsockopt$sock_int(r8, 0xffff, 0x20, &(0x7f0000000080)=0x6, 0x4) (async) mlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000) munlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) 413.286136ms ago: executing program 4 (id=288): r0 = shmget$private(0x0, 0x4000, 0x12a, &(0x7f0000ffc000/0x4000)=nil) mknod(&(0x7f0000000480)='./bus\x00', 0x2000, 0x412dff) ktrace(&(0x7f0000000140)='./bus\x00', 0x41ecf3848c59a689, 0x4000000c, 0x0) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x3000) setitimer(0x1, &(0x7f00000000c0)={{0x5, 0x101}, {0x3ff, 0x1}}, &(0x7f0000000100)) 413.030779ms ago: executing program 5 (id=289): ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x7c, 0xe, 0x60, 0x4}, {0x2c, 0x2, 0x4, 0x6}, {0x6, 0x6, 0x10, 0x5}]}) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x10, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) sysctl$kern(0x0, 0x0, &(0x7f00000003c0)="71f91e3471ac0058095f4377bc5a91501d94a34b8e5f84cf71b59c7afec370827c9521d5", &(0x7f0000000080)=0x24, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x5900) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket(0x2, 0x3, 0x0) setrlimit(0x8, &(0x7f0000000980)={0xb, 0x53}) dup(r1) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$BIOCSETIF(r2, 0x80084904, &(0x7f0000000380)={'tap', 0x0}) close(r2) r3 = openat$pf(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) shmdt(0x0) ioctl$TIOCSETA(r3, 0xc444443b, &(0x7f0000000180)={0x1, 0x0, 0x9, 0x0, "acee0000610e2c5f0b657e086b5cd100", 0x0, 0x2}) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0xe, &(0x7f0000000300)={@random="cac5909fbfe2", @empty, [], {@generic={0xbaf}}}) 2.724721ms ago: executing program 3 (id=290): r0 = open(&(0x7f00000000c0)='./file0\x00', 0x80, 0x1a5) r1 = open$dir(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)}], 0x1, 0xffffffffffffffff) (async) r2 = open$dir(&(0x7f00000002c0)='./file0\x00', 0x2, 0x10) (async) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000140)={0x0, &(0x7f0000000100)}) r3 = socket(0x1, 0x2, 0x2) ioctl$FIONREAD(r3, 0xc0106924, &(0x7f00000001c0)) (async) setuid(0xffffffffffffffff) (async) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000500)={0x3, &(0x7f00000000c0)=[{0xfffd, 0x0, 0x0, 0x400000}, {0x1, 0x0, 0x0, 0x100}, {0x6, 0x0, 0x0, 0xff}]}) (async) sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xff0a, 0x0, 0x37) (async) r4 = socket(0x18, 0x3, 0x0) ioctl$FIONREAD(r4, 0x802069c3, &(0x7f0000000100)) (async) ftruncate(r2, 0x80002) (async, rerun: 64) ioctl$WSDISPLAYIO_USEFONT(r0, 0x80585750, &(0x7f00000007c0)={'./file0\x00', 0x8, 0xd, 0x2, 0x1, 0x9, 0x1, 0x1, 0x0, 0x1, 0x6}) (async, rerun: 64) preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000440)=""/74, 0x4a}], 0x1, 0xfffd) (async) syz_emit_ethernet(0xe4f, &(0x7f0000000880)=ANY=[@ANYBLOB="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"]) (async, rerun: 64) sendmsg(0xffffffffffffff9c, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="5000000000000000ffff0000070000007b97c2378d967b1288110afcf60278d34210047c9e97d5d222786317ad75e96d6de37b5fe355dca8d7e43dd99d0b15a3b4106baaed09341100b4ab2ffd978e9aa800000000000000010000000180ffff28a04997184820f2e4982879200d3b2f9cfb00aa8fd1622d25abeee89b886e486051e6e12a6d251f5c621cb157d82eaf7853a910c6bb424d42d9cec25ccc60757aa05472f0e253def5ee715b23182360dd7563b81b3909c9274bc006118352bfdba4cf49a62454bd1eec3509206d6c81c18051973b7ee3dffd7fdd7985e1ba68febb8c8a7bc04b26e7233e740a870d4d3d7e2a7be0f39b002800000000000000010000000800000001bf8093b31ecd8a3fc84d6edb936a208d18fbbf11420000f00000000000000001000000ff070000f64e1838f79726412d01c762cb5cdf14e605329ead48ada1317b3185403f29709aaa299a7932bcc6bb668a690d21cfa7c1e3f24131e71ecc9dbdac88b668d4452872b450600563f2d82e9598cc45910303510d2bcfbefd737b7d54b085a775ae7fbe573bb9289171d788461274d8ad4d7151bbb547798dcb2a05e112613cdaa89f5ca096c901501d3531bc6c4df975c8a7e4042e8bdedd86a7ac10fc405b46003c6168d0b47086ddf6e7f2c8b54bb431bff21b38372c13b2ed4a489214eb5659f68e053388df0b4a0bbcc191350255d0f2d7d258f09f000dc9de0000000000009000000000000000ffff00000600000057247fd7074069a16184aeab7fa8c8621fcc04b11ed1c59687a8d1b5207005b96164c655c32b6ee2d675c24f32818beb9c9e0483525024bc1d1804d429eba11902f597c065aae9d5fbd453499cf543cf848d72d5b751ec56e535d593807fb1bc37306adb5970dccba44fa950dceaa941e7dc18ec03e32b8b9a4519d41308ce002800000000000000ffff000064000000e292fb1d3b9195d169561562e31e897c625ddcfca8000000b000000000000000ffff0000ffff000044feff0609d15fcd54ba6b5495ed420de0f005f612240657a7b4e840993c5cf18f0dc396f55f5f6e797f563b290632955c2c183b959a49c40ac678f70b6795661fb1d0537562aecda6d71d360bd557c7c1d42bb04ede105c31e101c15088256dc20a4306a6a3e586e98b93297c0554f851a3fd86800b010dd18b3e465808f969f19f53e5b6e0413fdaa4e5d6e191014dcbf3ccb2d3bfdd788e000000000000009800000000000000010000000600000036af0dbe02"], 0x410}, 0x0) (async, rerun: 64) openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x800, 0x0) (async) chmod(&(0x7f0000000240)='./file0\x00', 0x35e) (async) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) (async) chmod(&(0x7f0000000180)='./file0\x00', 0x23f) (async) open$dir(&(0x7f0000001240)='.\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x2c, 0x2, 0x4, 0x6}, {0x6, 0x6, 0x10, 0x5}]}) r5 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x10, 0x0) ioctl$BIOCSETIF(r5, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) sysctl$kern(0x0, 0x0, &(0x7f00000003c0)="71f91e3471ac0058095f4377bc5a91501d94a34b8e5f84cf71b59c7afec370827c9521d5e43e5c51e6a79336d2011fcf", &(0x7f0000000080)=0x30, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) ioctl$BIOCSETF(r5, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) (async) syz_emit_ethernet(0xe, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000800000000000000000ed66772b6ebb40f6a8d6f0398c56cb793cf12a8a20d91be6feb3aea097d309000000def6d9440eecc9828c560c813e434c2e8ae2446b0c3a6ea6"]) 2.292946ms ago: executing program 7 (id=291): r0 = open$dir(&(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) symlinkat(&(0x7f0000000140)='./file1\x00', r0, &(0x7f0000000d80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) open$dir(&(0x7f0000000b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x0) symlinkat(&(0x7f0000000480)='./file0\x00', r0, 0x0) (async) r1 = open$dir(0x0, 0x0, 0x0) (async) setrlimit(0x8, 0x0) (async, rerun: 64) r2 = syz_open_pts() (rerun: 64) close(r2) r3 = syz_open_pts() writev(r2, 0x0, 0x0) (async) ioctl$TIOCSETA(r3, 0x802c7414, 0x0) (async) readv(r3, &(0x7f0000000300)=[{&(0x7f0000000540)=""/140, 0x8c}], 0x1) mkdirat(r1, 0x0, 0x0) (async, rerun: 32) symlinkat(&(0x7f0000000900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r1, &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async, rerun: 32) fchmod(0xffffffffffffffff, 0x27) (async, rerun: 64) sendto$unix(0xffffffffffffffff, &(0x7f0000000600)="de58ee4c4cf907fedb687cd1afc74e0ac8e1bf8e3a57b7b70673d58792b5632924902ff69505481601c2d4726668a8401bf2d3007bada3f828e1702e0a9fc5a32b185b2b3dae6a0bb635221748e2abb09dcf7eedb737845b8be6eab639d12a4a0d8fb7946e8194b1741e62b5b972139a53d9a3174d7e93597c218c0df59ca004369d500ac5db58169d9df4df531f6e0371f52813d7", 0x95, 0x403, &(0x7f0000000000)=@abs={0x0, 0x0, 0x3}, 0x8) (rerun: 64) r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$BIOCSETWF(r4, 0x80104277, &(0x7f0000000140)={0x1, &(0x7f00000000c0)=[{0x84, 0x0, 0x0, 0x2}]}) (async) r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x80) ioctl$TIOCSETAF(r5, 0x802c7416, 0x0) r6 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x820, 0x0) ioctl$BIOCSETIF(r6, 0x8020426c, &(0x7f0000000240)={'tap', 0x0}) ioctl$BIOCSETF(r6, 0x80104267, &(0x7f00000001c0)={0x3, &(0x7f0000000040)=[{0x1, 0x1, 0x0, 0x6}, {0x3c, 0x1, 0x69, 0x802}, {0x6, 0x5, 0xa8, 0x10000002}]}) (async) syz_emit_ethernet(0x1000e, &(0x7f0000000280)=ANY=[]) (async) r7 = kqueue() kevent(r7, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) (async) syz_emit_ethernet(0x3e, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffff00000000000008004500003000000000002c907800000020e0001002"]) (async, rerun: 64) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) (async, rerun: 64) r8 = socket(0x2, 0x1, 0x0) ioctl$FIONREAD(r8, 0x8040691a, &(0x7f00000001c0)) 239.425µs ago: executing program 4 (id=292): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket(0x18, 0x1, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffff00000000000008004500003000000000002c907800000020e0001002"]) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r1 = socket(0x2, 0x1, 0x0) ioctl$FIONREAD(r1, 0x8040691a, &(0x7f00000001c0)) (async) ioctl$FIONREAD(r1, 0x8040691a, &(0x7f00000001c0)) setsockopt(r0, 0x1000000029, 0x39, &(0x7f0000000040)="03000000", 0x4) syz_open_pts() (async) r2 = syz_open_pts() flock(r2, 0x2) fcntl$lock(r2, 0x9, &(0x7f0000000080)={0x3, 0x0, 0x1, 0x110000001}) (async) fcntl$lock(r2, 0x9, &(0x7f0000000080)={0x3, 0x0, 0x1, 0x110000001}) syz_open_pts() (async) syz_open_pts() close(r2) 0s ago: executing program 2 (id=293): r0 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$WSMUXIO_ADD_DEVICE(r0, 0x80085761, &(0x7f0000000080)={0x1}) socket(0x10, 0x5, 0x5) ioctl$BIOCSETIF(0xffffffffffffff9c, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r1, 0x0, 0x200000000000b, &(0x7f0000000080)='\x00', 0x1) setsockopt$inet_opts(r1, 0x0, 0x200000000000c, &(0x7f0000000240)="ea00eb014f000000", 0x8) r2 = openat$bpf(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, 0x0) sysctl$hw(0x0, 0x0, &(0x7f0000000080)="00040000003e187f863769", 0x0, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50000000907800"]) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r3 = open(0x0, 0x40, 0x29) ioctl$WSMOUSEIO_SCALIBCOORDS(r3, 0x81205724, &(0x7f0000000100)={0x7, 0x8017, 0x7fffffff, 0xb31, 0x1, 0x81ac, 0x10011, 0x10, [{0x0, 0x0, 0x4, 0x71002}, {0x6, 0xc, 0x8, 0x7f}, {0x100, 0x9, 0x400, 0x9}, {0x1, 0x5, 0x8008}, {0x404, 0x1, 0x2800, 0x401}, {0x6, 0xfffffffd, 0x3, 0x3}, {0x2, 0x401, 0x4f7, 0x6c}, {0x6, 0x803, 0x10000014, 0x8}, {0x2, 0x7f, 0x5, 0x5}, {0x140, 0x8001, 0x6, 0x4}, {0x8f, 0x7ffc, 0xc, 0x7f}, {0x2008, 0x9, 0x604, 0x2}, {0xb8c, 0x7, 0x8, 0x4}, {0x29a71717, 0xfffffffa, 0x80000000, 0x80000001}, {0x7, 0x5, 0x9, 0x8}, {0x0, 0x3, 0x9, 0x88b0}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r4 = open(0x0, 0x80, 0x2a) r5 = open(0x0, 0x205, 0x0) r6 = getpid() ktrace(0x0, 0x0, 0x510, r6) sendsyslog(&(0x7f0000000180), 0x0, 0x34) ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, 0x0) sysctl$kern(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r5, 0x80184404, 0x0) ioctl$VNDIOCSET(r4, 0x80044403, 0x0) ioctl$VNDIOCSET(r3, 0x80184404, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.81' (ED25519) to the list of known hosts. pckbd_enable: command error pckbd_enable: command error WARNING: thread `nfsio' (125726) exits with status -1 WARNING: thread `nfsio' (349737) exits with status -1 WARNING: thread `nfsio' (211841) exits with status -1 WARNING: thread `nfsio' (25509) exits with status -1 WARNING: thread `nfsio' (239551) exits with status -1 WARNING: thread `nfsio' (182770) exits with status -1 WARNING: thread `nfsio' (445363) exits with status -1 WARNING: thread `nfsio' (285504) exits with status -1 WARNING: thread `nfsio' (388864) exits with status -1 WARNING: thread `nfsio' (109585) exits with status -1 WARNING: thread `nfsio' (5507) exits with status -1 WARNING: thread `nfsio' (63258) exits with status -1 WARNING: thread `nfsio' (19852) exits with status -1 WARNING: thread `nfsio' (473906) exits with status -1 WARNING: thread `nfsio' (333485) exits with status -1 WARNING: thread `nfsio' (41552) exits with status -1 WARNING: thread `nfsio' (232628) exits with status -1 WARNING: thread `nfsio' (226570) exits with status -1 WARNING: thread `nfsio' (198667) exits with status -1 WARNING: thread `nfsio' (1291) exits with status -1 pckbd_enable: command error malloc(): allocation too large, type = 29, size = 16796513700 denied attempt to set clock forward to 7742663230113539119 uvn_flush: obj=0xfffffd805db857f0, offset=0x1000. error during pageout. uvn_flush: WARNING: changes to page may be lost! pckbd_enable: command error malloc(): allocation too large, type = 29, size = 16796513700 sd0(vioscsi0:1:0): Check Condition (error 0x70) on opcode 0x1e SENSE KEY: Illegal Request ASC/ASCQ: Invalid Command Operation Code malloc(): allocation too large, type = 29, size = 16796513700 kernel: protection fault trap, code=0 Stopped at lf_advlock+0x2f1: incl 0x28(%r12) ddb> ddb> set $lines = 0 ddb> set $maxwidth = 0 ddb> show panic the kernel did not panic ddb> trace lf_advlock(ffff800001478ea0,0,fffffd8067f5be20,8,ffff80003c9dd508,30) at lf_advlock+0x2f1 VOP_ADVLOCK(fffffd8067c842c0,fffffd8067f5be20,8,ffff80003c9dd508,30) at VOP_ADVLOCK+0x87 sys_flock(ffff80002a7aba08,ffff80003c9dd640,ffff80003c9dd590) at sys_flock+0x28f syscall(ffff80003c9dd640) at syscall+0x962 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xf165083bef0, count: -5 ddb> show registers rdi 0xffff80002a7aba0c rsi 0xffff80002a7aba0c rbp 0xffff80003c9dd450 rbx 0 rdx 0 rcx 0xffffffff837daff0 cpu_info_full_primary+0x1ff0 rax 0xffff80002a7aba08 r8 0xa0 r9 0 r10 0x1d6ea71b7fc591df r11 0xbf2d8baa4892ea8c r12 0xdeadbeefdeadbeef r13 0x8 r14 0xffff80003c9dd508 r15 0x1 rip 0xffffffff82614861 lf_advlock+0x2f1 cs 0x8 rflags 0x10246 __ALIGN_SIZE+0xf246 rsp 0xffff80003c9dd3c0 ss 0x10 lf_advlock+0x2f1: incl 0x28(%r12) ddb> show proc PROC (syz-executor) tid=197960 pid=34777 tcnt=4 stat=onproc flags process=0 proc=4000000 runpri=32, usrpri=50, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff80002a7aa2b0,0xffff80002a786fa8 process=0xffff80003c9c5fa0 user=0xffff80003c9d8000, vmspace=0xfffffd806ba2f468 estcpu=36, cpticks=1, pctcpu=0.0, user=0, sys=1, intr=0 ddb> ps PID TID PPID UID S FLAGS WAIT COMMAND 63437 91786 63014 0 2 0 syz-executor 63437 250588 63014 0 2 0x4000000 syz-executor 42074 444653 57526 0 2 0 syz-executor 42074 59234 57526 0 2 0x4000000 syz-executor 32524 108014 79727 0 2 0 syz-executor 32524 178368 79727 0 3 0x4000080 fsleep syz-executor 32337 27125 86766 0 2 0 syz-executor 32337 240484 86766 0 2 0x4000000 syz-executor 32337 434578 86766 0 2 0x4000000 syz-executor 32337 308311 86766 0 2 0x4000000 syz-executor 80160 360644 11985 0 3 0 vmmaplk syz-executor 80160 456289 11985 0 2 0x4000000 syz-executor 80160 365280 11985 0 3 0x4000080 fsleep syz-executor 80160 91866 11985 0 2 0x4000000 syz-executor 34777 97709 57410 0 3 0x80 nanoslp syz-executor *34777 197960 57410 0 7 0x4000000 syz-executor 34777 190989 57410 0 3 0x4000080 fsleep syz-executor 34777 447587 57410 0 3 0x4000080 fsleep syz-executor 5890 376444 0 0 3 0x14200 bored sosplice 11985 195186 79658 0 3 0x82 nanoslp syz-executor 63014 175330 79658 0 3 0x82 nanoslp syz-executor 34266 410395 79658 0 3 0x82 nanoslp syz-executor 86766 459062 79658 0 3 0x82 nanoslp syz-executor 57526 266984 79658 0 3 0x82 nanoslp syz-executor 79727 196109 79658 0 3 0x82 nanoslp syz-executor 51174 327309 79658 0 3 0x82 nanoslp syz-executor 57410 126686 79658 0 3 0x82 nanoslp syz-executor 79658 420397 20931 0 3 0x82 kqread syz-executor 20931 26992 38283 0 3 0x10008a sigsusp ksh 38283 48954 84911 0 3 0x98 kqread sshd-session 84911 58283 84730 0 3 0x92 kqread sshd-session 97233 197 1 0 3 0x100083 ttyin getty 84730 269783 1 0 3 0x88 kqread sshd 61516 255399 21818 73 3 0x1100090 kqread syslogd 21818 174578 1 0 3 0x100082 sbwait syslogd 65923 129769 1 0 3 0x100080 kqread resolvd 15348 410146 89645 77 3 0x100092 kqread dhcpleased 23151 497194 89645 77 3 0x100092 kqread dhcpleased 89645 208111 1 0 3 0x80 kqread dhcpleased 36859 67901 0 0 3 0x14200 bored smr 20409 2827 0 0 2 0x14200 zerothread 89922 490621 0 0 3 0x14200 aiodoned aiodoned 5254 13750 0 0 3 0x14200 syncer update 78844 172315 0 0 3 0x14200 cleaner cleaner 18958 69326 0 0 2 0x14200 reaper 26791 483951 0 0 3 0x14200 pgdaemon pagedaemon 21503 291168 0 0 3 0x14200 bored viomb 89094 378621 0 0 3 0x40014200 acpi0 acpi0 52202 409273 0 0 3 0x14200 bored softnet0 82424 420690 0 0 3 0x14200 bored systqmp 44903 206871 0 0 3 0x14200 bored systq 76501 374271 0 0 3 0x40014200 tmoslp softclock 63155 256541 0 0 3 0x40014200 idle0 1 345748 0 0 3 0x82 wait init 0 0 -1 0 3 0x10010200 scheduler swapper ddb> show all locks No such command ddb> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 10179 11052K 11453K 166960K 11933 0 pcb 17 16K 17K 166960K 184 0 rtable 210 7K 7K 166960K 299 0 pf 31 13K 17K 166960K 75 0 ifaddr 40 7K 7K 166960K 65 0 ifgroup 50 2K 2K 166960K 96 0 sysctl 3 1K 9K 166960K 9 0 counters 32 17K 18K 166960K 57 0 ioctlops 0 0K 4K 166960K 79 0 iov 0 0K 12K 166960K 19 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1332 84K 85K 166960K 1578 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 2K 5K 166960K 5 0 VM map 2 1K 1K 166960K 2 0 sem 8 0K 0K 166960K 9 0 dirhash 12 2K 2K 166960K 18 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 17 61K 93K 166960K 425 0 sigio 0 0K 0K 166960K 8 0 proc 60 59K 83K 166960K 498 0 subproc 72 4K 4K 166960K 72 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 2 0K 0K 166960K 42 0 in_multi 89 6K 7K 166960K 113 0 ether_multi 1 0K 0K 166960K 4 0 mrt 1 0K 0K 166960K 5 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 79 360K 360K 166960K 79 0 exec 0 0K 1K 166960K 363 0 fusefs mount 1 32K 32K 166960K 1 0 pfkey data 0 0K 0K 166960K 2 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 234 159K 167K 166960K 5494 0 UVM aobj 16 2K 2K 166960K 17 0 pinsyscall 38 76K 94K 166960K 1427 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 0K 166960K 17 0 NDP 11 0K 2K 166960K 44 0 temp 41 8635K 8762K 166960K 20896 0 kqueue 14 22K 29K 166960K 94 0 SYN cache 2 16K 16K 166960K 2 0 ddb> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle rtpcb 120 57 0 54 1 0 1 1 0 8 0 rtentry 136 102 0 12 4 0 4 4 0 8 0 unpcb 144 261 0 245 4 0 4 4 0 8 3 syncache 336 4 0 4 2 1 1 1 0 8 1 tcpcb 736 217 0 210 7 0 7 7 0 8 6 arp 96 11 0 0 1 0 1 1 0 8 0 ipq 40 2 0 0 1 0 1 1 0 8 0 ipqe 40 2 0 0 1 0 1 1 0 8 0 inpcb 328 605 0 592 12 3 9 12 0 8 7 ip6q 72 5 0 2 1 0 1 1 0 8 0 ip6af 40 6 0 4 1 0 1 1 0 8 0 nd6 112 18 0 3 1 0 1 1 0 8 0 pkpcb 40 3 0 3 1 0 1 1 0 8 1 kcovpl 48 8 0 0 1 0 1 1 0 8 0 mppekey 1024 1 0 1 1 0 1 1 0 8 1 ppxss 1072 21 0 21 1 0 1 1 0 8 1 pppxif 1384 2 0 2 1 0 1 1 0 8 1 pfrule 1344 3 0 1 1 0 1 1 0 8 0 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 456 0 55 28 0 28 28 0 8 1 art_table 40 457 0 55 5 0 5 5 0 8 0 art_node 32 101 0 20 1 0 1 1 0 8 0 sysvmsgpl 40 2 0 1 1 0 1 1 0 8 0 semapl 112 7 0 1 1 0 1 1 0 8 0 shmpl 112 14 0 1 1 0 1 1 0 8 0 dirhash 1024 21 0 4 3 0 3 3 0 8 0 dino2pl 256 2135 0 643 95 0 95 95 0 8 0 ffsino 256 2135 0 643 95 0 95 95 0 8 0 nchpl 144 2754 0 1076 63 0 63 63 0 8 0 rtmask 32 4 0 4 2 1 1 1 0 8 1 uvmvnodes 80 2325 0 0 48 0 48 48 0 8 0 vnodes 216 2325 0 0 130 0 130 130 0 8 0 namei 1024 8718 0 8716 1 0 1 1 0 8 0 kstatmem 264 56 0 34 2 0 2 2 0 8 0 scsiplug 72 2 0 2 1 0 1 1 0 8 1 scxspl 216 12550 0 12550 15 7 8 8 1 8 8 plimitpl 152 144 0 126 1 0 1 1 0 8 0 sigapl 424 714 0 670 8 0 8 8 0 8 3 knotepl 120 14798 0 14748 22 12 10 17 0 8 8 kqueuepl 184 134 0 124 1 0 1 1 0 8 0 pipepl 304 280 0 253 8 0 8 8 0 8 5 fdescpl 448 680 0 651 5 1 4 5 0 8 0 filepl 120 3897 0 3666 15 1 14 14 0 8 6 lockfpl 104 201 0 198 1 0 1 1 0 8 0 lockfspl 48 58 0 55 1 0 1 1 0 8 0 sessionpl 144 21 0 13 1 0 1 1 0 8 0 pgrppl 48 35 0 19 1 0 1 1 0 8 0 ucredpl 104 427 0 413 1 0 1 1 0 8 0 zombiepl 144 873 0 871 1 0 1 1 0 8 0 processpl 1152 714 0 670 5 0 5 5 0 8 1 procpl 664 1249 0 1192 7 0 7 7 0 8 2 sockpl 552 939 0 907 12 2 10 12 0 8 7 mcl64k 65536 30 0 30 2 1 1 1 0 8 1 mcl9k 9216 1 0 1 1 0 1 1 0 8 1 mcl8k 8192 39 0 39 2 1 1 1 0 8 1 mcl4k 4096 2920 0 2871 13 6 7 13 0 8 0 mcl2k2 2112 2 0 2 1 0 1 1 0 8 1 mcl2k 2048 576 0 573 3 0 3 3 0 8 2 mtagpl 96 8 0 6 1 0 1 1 0 8 0 mbufpl 256 7146 0 6955 14 0 14 14 0 8 0 bufpl 280 5588 0 118 391 0 391 391 0 8 0 anonpl 24 126969 0 123813 44 0 44 44 0 187 7 amapchunkpl 152 17092 0 16583 25 0 25 25 0 158 4 amappl16 200 2480 0 2449 15 2 13 14 0 8 8 amappl15 192 3 0 3 1 1 0 1 0 8 0 amappl14 184 103 0 93 1 0 1 1 0 8 0 amappl13 176 3 0 3 1 1 0 1 0 8 0 amappl12 168 1277 0 1248 2 0 2 2 0 8 0 amappl11 160 45 0 35 1 0 1 1 0 8 0 amappl10 152 6 0 6 1 1 0 1 0 8 0 amappl9 144 275 0 275 1 1 0 1 0 8 0 amappl8 136 21 0 20 1 0 1 1 0 8 0 amappl7 128 97 0 87 1 0 1 1 0 8 0 amappl6 120 170 0 166 1 0 1 1 0 8 0 amappl5 112 127 0 121 1 0 1 1 0 8 0 amappl4 104 263 0 247 1 0 1 1 0 8 0 amappl3 96 2934 0 2833 3 0 3 3 0 8 0 amappl2 88 910 0 835 2 0 2 2 0 8 0 amappl1 80 9014 0 8474 13 1 12 13 0 8 0 amappl 88 4824 0 4654 5 0 5 5 0 92 0 dma32768 32768 1 0 1 1 0 1 1 0 8 1 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 2 0 1 1 0 1 1 0 8 0 dma256 256 7 0 7 2 1 1 1 0 8 1 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 16 0 1 1 0 1 1 0 8 0 uaddrrnd 24 680 0 651 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 680 0 651 1 0 1 1 0 8 0 vmmpekpl 168 7518 0 7478 3 0 3 3 0 8 0 vmmpepl 168 48948 0 47091 92 0 92 92 0 357 8 vmsppl 368 679 0 650 4 1 3 4 0 8 0 rwobjpl 40 17924 0 14723 33 0 33 33 0 8 0 pdppl 4096 1366 0 1300 94 28 66 80 0 8 0 pvpl 32 310299 0 302066 103 0 103 103 0 265 14 pmappl 216 679 0 650 3 0 3 3 0 8 0 extentpl 40 45 0 27 1 0 1 1 0 8 0 phpool 112 375 0 41 10 0 10 10 0 8 0 ddb> machine ddbcpu 0 No such command ddb> trace lf_advlock(ffff800001478ea0,0,fffffd8067f5be20,8,ffff80003c9dd508,30) at lf_advlock+0x2f1 VOP_ADVLOCK(fffffd8067c842c0,fffffd8067f5be20,8,ffff80003c9dd508,30) at VOP_ADVLOCK+0x87 sys_flock(ffff80002a7aba08,ffff80003c9dd640,ffff80003c9dd590) at sys_flock+0x28f syscall(ffff80003c9dd640) at syscall+0x962 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xf165083bef0, count: -5 ddb> machine ddbcpu 1 No such command ddb> trace lf_advlock(ffff800001478ea0,0,fffffd8067f5be20,8,ffff80003c9dd508,30) at lf_advlock+0x2f1 VOP_ADVLOCK(fffffd8067c842c0,fffffd8067f5be20,8,ffff80003c9dd508,30) at VOP_ADVLOCK+0x87 sys_flock(ffff80002a7aba08,ffff80003c9dd640,ffff80003c9dd590) at sys_flock+0x28f syscall(ffff80003c9dd640) at syscall+0x962 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xf165083bef0, count: -5