last executing test programs: 4.047364114s ago: executing program 0 (id=1): ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f0000000100)={0xffffff00, 0x3ff, 0x8, 0x2, "c5369c8412ab26f56d1183f0f93356761b7ada19", 0x8, 0x27fff}) ioctl$WSDISPLAYIO_GETEMULTYPE(0xffffffffffffffff, 0xc014575e, &(0x7f0000000380)={0x1, './file0\x00'}) setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) r0 = open(&(0x7f0000000040)='./file1\x00', 0x18289, 0x110) syz_emit_ethernet(0x46, &(0x7f00000003c0)=ANY=[@ANYBLOB="8b4f69c83b01ffffffffffff86dd61b91d3a00102c03fe800000000098cc87d7fbfffb359bbb4079ea11670a1ec2952a4234926cce072b00000300830000002b0007e864000000f9bf4739e54c7b1ce354e0032972b5ec6ab41befe58f6b451a1cde9925c7c4c8a7e4ba19e5296925db2e62befd2ca90ec25bad1acb23b7e06c68ad2c6491950eb9546e00000000000000040000000000000000"]) write(r0, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) unveil(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='c\x00') r1 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) mknod(&(0x7f0000000280)='./file0\x00', 0x88, 0x1c5f) r2 = open(&(0x7f0000000080)='./file0\x00', 0x800, 0xfa) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000080)="76e5eac907f9ccf7a251ceddcec7d6aa45cffe2c63a56077123a276d3ba4e9d17eb3eb5db12a3783a8e0620d357de1fe04fa9465b5bd1286e9624dec06a00c222f", 0x41}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) mkdir(&(0x7f00000000c0)='./file1\x00', 0x94) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) open(&(0x7f0000000140)='./file0\x00', 0x100, 0x14) ioctl$VNDIOCSET(r2, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VT_SETMODE(r1, 0x80087602, &(0x7f0000000240)={0x0, 0x5, 0x4c26, 0x2, 0x1}) r3 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000040), 0x20, 0x0) ioctl$VNDIOCSET(r2, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) sendto$unix(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x40b, 0x0, 0x0) openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) ioctl$TIOCSETA(0xffffffffffffffff, 0xc0044464, &(0x7f0000000000)={0xfffff70e, 0x8, 0x7fef, 0xfffffffe, "cd002200000400", 0x8000, 0x7}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000000)="ed", 0x1) recvmmsg(r5, &(0x7f0000000880)={&(0x7f0000000040)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000080)=""/182, 0xb6}], 0x1, 0x0}, 0xffffffff}, 0x10, 0xc0, 0x0) close(r1) openat$vnd(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) dup2(r3, r5) unveil(0x0, &(0x7f0000000100)='W\x00') 4.025719848s ago: executing program 6 (id=7): getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000000), &(0x7f0000000040)=0xc) (async, rerun: 32) geteuid() (async, rerun: 32) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x10091, 0x0) close(r0) (async, rerun: 32) mmap(&(0x7f00003cf000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x0) (rerun: 32) r1 = geteuid() setuid(r1) (async) mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2) (async) pipe(&(0x7f0000000180)={0xffffffffffffffff}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb5219f1000b913f1, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb5219f1000b913f1, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)="76e5eac907f9ccf7a251ceddcec7d6aa45cffe2c63a56077123a276d3ba4e9d17eb3eb5db12a3783a8e0620d357de1fe04fa9465b5bd1286e9624dec06a00c222f", 0x41}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000000)="673bb5b8cc0c16ed08f1b8d24e2217f981", 0x11}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async, rerun: 64) r3 = socket(0x18, 0x1, 0x0) (rerun: 64) setsockopt(r3, 0x1000000029, 0x2e, &(0x7f0000000040)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) (async) setsockopt(r3, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbdf13b9fd812eaa4e713048e69931929648", 0x14) (async) unveil(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000300)='W\x00') (async) r4 = fcntl$dupfd(r2, 0x3, 0xffffffffffffffff) (async) ioctl$BIOCGDIRFILT(r2, 0x4004427c, &(0x7f0000000080)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) r5 = kqueue() ioctl$FIOASYNC(r5, 0x8004667d, &(0x7f0000000140)=0x2) (async, rerun: 32) write(r4, &(0x7f0000000100), 0xfffffe5d) (rerun: 32) 2.524157188s ago: executing program 6 (id=23): mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6381) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x8, 0xffffffffffffffff, 0xfffffffffffffffd, 0x800, 0x181c, 0xa, 0x2}, 0x0, 0x0, 0x0) r0 = kqueue() kevent(r0, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000000)="4bbe39", 0x3}], 0x1) r1 = socket$inet(0x2, 0x2, 0x0) r2 = dup(r1) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000400), 0x20, 0x0) ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) mknod(&(0x7f0000000400)='./file0\x00', 0x2000, 0x5c4a) r4 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r5 = open(0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) socket(0x1, 0x8000, 0xc0) dup2(r4, r5) r6 = semget(0x0, 0x1, 0x281) semctl$IPC_SET(r6, 0x0, 0x1, 0x0) ioctl$BIOCSETF(r3, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f00000002c0)=[{0x1, 0x8, 0x0, 0x2c504b27}, {0x2, 0x3, 0x5, 0x4}, {0x6, 0x8, 0xb7, 0x7}]}) syz_emit_ethernet(0x6e, &(0x7f0000000340)=ANY=[]) r7 = socket(0x2, 0x3, 0x0) r8 = dup(r2) dup2(r8, r7) fcntl$setstatus(r2, 0x4, 0x4430d14b3f23b8f7) connect$unix(r7, &(0x7f0000000000), 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) setsockopt$sock_timeval(r9, 0xffff, 0x1005, &(0x7f0000000100)={0x9, 0x2}, 0x10) open(&(0x7f0000000080)='./file0\x00', 0x10, 0x100) 2.486937052s ago: executing program 6 (id=30): open(0x0, 0x30030, 0xb6) 2.482585238s ago: executing program 1 (id=32): r0 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) ioctl$VMM_IOC_CREATE(r0, 0x8020560a, &(0x7f00000002c0)={0x10, 0x0, [{&(0x7f0000ff3000/0x4000)=nil, &(0x7f0000fef000/0x4000)=nil}, {&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil}, {&(0x7f0000632000/0x4000)=nil, &(0x7f00002b6000/0x3000)=nil}, {&(0x7f00005bd000/0x4000)=nil, &(0x7f0000fee000/0x3000)=nil}, {&(0x7f0000ffa000/0x3000)=nil, &(0x7f00001be000/0x3000)=nil, 0x4}, {&(0x7f0000328000/0x4000)=nil, &(0x7f00000d1000/0x3000)=nil}, {&(0x7f00003b5000/0x2000)=nil, &(0x7f000075b000/0x3000)=nil}, {&(0x7f0000762000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil}, {&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x10}, {&(0x7f0000760000/0x3000)=nil, &(0x7f0000fea000/0x3000)=nil}, {&(0x7f0000fec000/0x14000)=nil, &(0x7f0000ff9000/0x1000)=nil, 0xb2bf}, {&(0x7f0000ff9000/0x2000)=nil, &(0x7f0000fef000/0x1000)=nil}, {&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil}, {&(0x7f0000ff5000/0x4000)=nil, &(0x7f00005e9000/0x10000)=nil, 0x9d}, {&(0x7f000002a000/0x2000)=nil, &(0x7f000075c000/0x3000)=nil, 0x100000001}, {&(0x7f00006f1000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil}], './file0\x00'}) syz_emit_ethernet(0x2a, &(0x7f0000000540)=ANY=[@ANYBLOB="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"]) socketpair(0x18, 0x3, 0x6, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendto(r1, &(0x7f00000001c0)="32008a7773fd74ba403e552ebb49ccfc3ea02b9b41660ecf256b843220f5051fbc3d4d89e071d9fc41f3495b7a66dbd113a56c9739ffebaaa192b6b5b326f27b66721d2741641f446062799d76a752505963aa135d88d1cea8068e6a3ca7f53228d536d43adbaf8d4da07001a013c8aaa7cdb2adba0fd72dbe9d353cb559f13bd11f5326ceb538343db767fbed232d", 0x8f, 0x4, &(0x7f0000000280)=@in6={0x18, 0x2, 0x1, 0x738e67db}, 0xc) r2 = socket$inet(0x2, 0x3, 0xfc) ioctl$FIONREAD(r2, 0x80206979, &(0x7f0000000000)) r3 = openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x5901) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r4 = semget(0x0, 0x1, 0x281) r5 = getuid() minherit(&(0x7f0000313000/0x4000)=nil, 0x4000, 0x3) getsockopt$SO_PEERCRED(r3, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0xc) semctl$IPC_SET(r4, 0x0, 0x1, &(0x7f0000000340)={{0x378, r6, r7, r5, 0x0, 0x84, 0x7}, 0x401, 0x4}) semop(r4, &(0x7f0000000000)=[{0x0, 0x5}, {0x2, 0x3, 0x1800}, {0x1, 0x3, 0x800}, {0x3, 0x40, 0x1000}], 0x4) ioctl$TIOCSETA(0xffffffffffffffff, 0xc450443c, &(0x7f0000000140)={0x10, 0x4, 0xfffffffb, 0x40, "97a2224fe1c951d100000000000000000400", 0x0, 0x10001ff}) openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x10, 0x0) syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7, 0x2}, 0x8) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r8 = socket(0x2, 0x1, 0x0) connect$unix(r8, &(0x7f0000000000), 0x10) setsockopt$sock_int(r8, 0xffff, 0x1, &(0x7f00000000c0)=0x6, 0x4) sendto(r8, 0x0, 0x0, 0x401, 0x0, 0x0) openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3, 0x25, 0xfd, 0x2000006}, {0x40, 0x10, 0x5, 0x1}]}) 2.480509977s ago: executing program 6 (id=33): setrlimit(0x8, &(0x7f0000000980)={0x8, 0x54}) r0 = syz_open_pts() getrlimit(0xb, &(0x7f0000000040)) close(r0) syz_open_pts() r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r1, 0x0, 0x200000000000b, &(0x7f0000000240)="01", 0x1) openat$wskbd(0xffffffffffffff9c, &(0x7f0000000140), 0x100, 0x0) ioctl$TIOCSETAF(r0, 0x802c7416, &(0x7f0000000000)={0x40978b, 0x10001, 0xfffffc01, 0x80a1a4, "bb08000100f167d910508bc49d7323000000007e", 0x0, 0xffffffff}) writev(r0, &(0x7f0000000700)=[{&(0x7f0000000080)="34eb4cd59e8456ebc0881681c60e1cd9e0bf01b618b3cb934394c5951c1db0fd943a", 0xff99}], 0x1) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) ioctl$FIOASYNC(r0, 0x80047469, &(0x7f00000001c0)=0x1) 2.440921015s ago: executing program 1 (id=35): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x80, 0x0) r1 = socket$inet(0x2, 0x8000, 0x0) sendmsg(r1, &(0x7f0000000680)={&(0x7f0000000240)=@un=@abs={0x1, 0x0, 0x3}, 0x8, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000000000000000000000000000014"], 0x180}, 0x4) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000240)={'tap', 0x0}) setsockopt$sock_int(r1, 0xffff, 0x1001, &(0x7f0000000040)=0xd, 0x4) sysctl$hw(&(0x7f0000000000)={0x6, 0x19}, 0x2, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0xb3, &(0x7f0000000300)={@local, @broadcast, [], {@generic={0x6559, "d47f6aa92b26dca5da55a53df94468256e9885b6b95c942145c1617252d39ba0977c0135e7ef1e40d96d54cd741dced389bfecb37a795d8ba65ececfdf96d6fb674ec7b5b4390d6879dab25efa16fa64784b1399ac4618c9a271d90c7275a3fd412c93e4df41065a37940935a9c60d161cbb835054d312c6c523297673bfb2f00b1128218f454c7f4879eacf2d95ed5f350f1ede78451ec17052ee18f252f6610def693208"}}}) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x4, 0x5, 0x26, 0x6444}, {0x81, 0x10, 0xfd, 0x3}, {0x9, 0x9, 0x8, 0x2}]}) r2 = socket(0x1e, 0x3, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs={0x1, 0x0, 0x2}, 0x8) r3 = socket(0x18, 0x2, 0x0) setsockopt(r3, 0x1000000000029, 0x9, &(0x7f0000000040)="03000000", 0x4) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x412dff) r4 = open(&(0x7f0000000080)='./bus\x00', 0x800, 0x10c) preadv(r4, &(0x7f0000000000)=[{&(0x7f00000018c0)=""/4100, 0x1004}], 0x1, 0xffffffffffffffff) setsockopt(r3, 0x1000000000029, 0xc, &(0x7f0000000000), 0x14) recvmmsg(r2, &(0x7f0000000180)={&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/179, 0xb3}, 0x8910}, 0x10, 0x0, &(0x7f0000000000)={0x6, 0x7}) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[]) 2.365139084s ago: executing program 1 (id=38): shmctl$IPC_SET(0x0, 0x1, 0xfffffffffffffffe) r0 = semget$private(0x0, 0x4, 0x200) semop(r0, 0x0, 0x0) semctl$GETVAL(r0, 0x4, 0x5, &(0x7f0000000300)=""/9) r1 = getuid() setreuid(0xee00, r1) socketpair(0x2, 0x4, 0x8, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r2, 0xffff, 0x1022, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xfffffffffffffecf) r4 = geteuid() getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0xc) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f00000000c0)={{0x200, r1, r3, r4, r5, 0x20, 0x6}, 0x7fff, 0x3, 0x2}) 2.361754332s ago: executing program 1 (id=40): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) r1 = socket(0x18, 0x2, 0x0) close(r1) r2 = socket(0x800000018, 0x1, 0x0) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200}, 0x10}) setrlimit(0x8, &(0x7f0000000980)={0xb, 0x54}) r3 = syz_open_pts() close(r3) syz_open_pts() r4 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000004f00), 0x8c82, 0x0) ioctl$WSMOUSEIO_SETPARAMS(r4, 0x80105728, &(0x7f0000004f80)={&(0x7f0000004f40)=[{0x0, 0x101}, {0x5, 0x5}, {0x100, 0x1}], 0x3}) ioctl$TIOCSETA(r3, 0x802c7414, &(0x7f0000000080)={0xf66a, 0x3, 0xfe9, 0xfffffffa, "9cdc767b2400000000000000e6ffffffffffffff", 0x182, 0x6}) writev(r3, &(0x7f00000001c0)=[{&(0x7f00000009c0)="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", 0x890}], 0x1) setsockopt$sock_int(r1, 0xffff, 0x1, &(0x7f0000000140)=0x3, 0x4) sysctl$net_inet6_ip6(&(0x7f0000000040)={0x4, 0x18, 0x29, 0x35}, 0x4, &(0x7f0000000080), 0x0, 0x0, 0x0) r5 = socket(0x18, 0x3, 0x0) connect$unix(r5, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) getsockname$inet(r1, &(0x7f00000000c0), &(0x7f0000000000)=0xc) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r6 = socket(0x24, 0x2, 0x0) connect$unix(r6, &(0x7f0000002a00)=@file={0x1, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}, 0x40) socket$unix(0x1, 0x5, 0x0) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x205310) open$dir(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r7 = openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETA(r7, 0x40204103, 0x0) connect$unix(r1, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) dup(r2) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) 1.22802715s ago: executing program 5 (id=41): fcntl$lock(0xffffffffffffffff, 0x9, &(0x7f00000003c0)={0x1, 0x0, 0x7fffffffffffffff, 0x1ffffffff}) mknod(&(0x7f0000000000)='./file0\x00', 0x2100, 0x5f00) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$TIOCSETA(r0, 0xc0205603, &(0x7f0000000040)={0xe64, 0x4, 0x6, 0x80000000, "97f3b45700", 0x2000, 0xffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000000880)={&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000200)=""/173, 0xad}], 0x1, 0x0}}, 0x10, 0x2842, 0x0) r2 = socket$inet(0x2, 0x3, 0xfc) ioctl$FIONREAD(r2, 0x80206979, &(0x7f0000000000)) read(r2, &(0x7f00000000c0)=""/107, 0x6b) 1.084619905s ago: executing program 2 (id=44): rmdir(&(0x7f0000000280)='.\x00') (async) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x10001, 0x0) ioctl$VMM_IOC_CREATE(r0, 0xc2585601, &(0x7f0000000040)={0x10, 0xec, [{&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil}, {&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x8}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0xfffffffffffffff8}, {&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x4}, {&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0xced4}, {&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, 0x7ff}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x5}, {&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil}, {&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x8}, {&(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x200}, {&(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x1}, {&(0x7f00003fe000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x27}, {&(0x7f0000666000/0x3000)=nil, &(0x7f0000fce000/0x3000)=nil}, {&(0x7f0000a31000/0x1000)=nil, &(0x7f0000e5e000/0x3000)=nil, 0x6602}, {&(0x7f0000943000/0x3000)=nil, &(0x7f0000676000/0x4000)=nil, 0xe}, {&(0x7f0000417000/0x3000)=nil, &(0x7f0000423000/0x4000)=nil, 0x3}], './file0\x00', 0x5}) 1.08373569s ago: executing program 1 (id=45): setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) r0 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) write(r0, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f0000000280)=@file={0xd570d0466b6018f, './file0\x00'}, 0xa) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) listen(r1, 0xaf10) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0xe8, 0x0) sysctl$net_inet_ah(&(0x7f0000000140)={0x4, 0x2, 0x33, 0x2}, 0x4, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@local, @local, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x3, @empty, @rand_addr=0x4, @local, @remote={0xac, 0x14, 0x0}}}}}) sysctl$kern(&(0x7f0000000000)={0x1, 0x17}, 0x2, &(0x7f0000000100)="69688ed3c959dd52fb5389ea97c7b08f46015d0bce392459184615832396ab89dae6b7f105202bb58d43f9e9be139646a94eb4b166156f15fcde670c0166de687a4df9165657fc4691384061bbd7bec7c4498e75cdc828450611dfa36a02bd5454df39b8e36a7c07e717d4444758a11c6315898137816e9d85b18140c60a392918a33dd71ce266e505e5ed8347c44c27fba9b7e18fb3f6d646bd02bdba088082788288c9cf523f134252e2d717ca95ee07cee02af7be30db2d72d76cb9c1674f60cd", &(0x7f0000000080)=0xc2, &(0x7f0000000200)="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", 0xfb) r3 = fcntl$dupfd(r2, 0x3, 0xffffffffffffffff) poll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x6}], 0x1, 0x1) sysctl$hw(&(0x7f0000000300)={0x7, 0xe}, 0x2, 0x0, 0x0, &(0x7f0000000380)="c67847028ee421dc805f0469486e86f5591b70b29366df965e16f53e9c00000000000000000000fb76000000000000", 0x2f) ioctl$FIONREAD(r3, 0x800474c4, &(0x7f00000000c0)) r4 = dup(r0) kevent(r4, &(0x7f00000003c0), 0x4c7, 0x0, 0x0, 0x0) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x11}, 0x6, &(0x7f0000000080), 0x0, 0x0, 0x0) 1.082824198s ago: executing program 2 (id=46): r0 = socket(0x18, 0x3, 0x0) (async) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6381) (async) select(0x3b, &(0x7f0000000180)={0xfffffffffffffff9, 0x8, 0xffffffffffffffff, 0xfffffffffffffffd, 0x800, 0x181c, 0xa, 0x2}, 0x0, 0x0, 0x0) r1 = kqueue() mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x811, r0, 0xa8f) kevent(r1, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) (async) r2 = open(&(0x7f0000000080)='./file0\x00', 0x10, 0x26) (async) execve(&(0x7f0000000100)='./file0\x00', &(0x7f0000000480)=[&(0x7f00000001c0)=':\x00', &(0x7f0000000200)='})*\x00', &(0x7f0000000240)='tap', &(0x7f0000000280)='\x00', &(0x7f0000000300)='/dev/bpf\x00', &(0x7f0000000340)='\'}/\\\x00', &(0x7f0000000380)='+,\xf0(\x00', &(0x7f00000003c0)=')$\x00', &(0x7f0000000400)='-)}}]\x00'], &(0x7f00000005c0)=[&(0x7f0000000500)='/dev/wsmouse\x00', &(0x7f0000000540)='\x00', &(0x7f0000000580)='\\)\x98{\'\x00']) ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file0\x00', 0x248f, 0x80, 0xffff, 0x1, 0x21, 0x2, 0x4000001, 0x2, 0x1, 0x1, 0xf1d}) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (async) r3 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$WSMUXIO_INJECTEVENT(r3, 0x80185760, &(0x7f0000000040)={0xa, 0x3, {0x4, 0x5a0d27d1}}) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) ioctl$FIONBIO(r2, 0x82907003, &(0x7f0000000140)=0x2) (async) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) (async) ioctl$FIONBIO(r2, 0x82907003, &(0x7f0000000140)=0x1) (async) close(r2) sysctl$net_inet_tcp(0x0, 0x0, &(0x7f00000000c0)="9b180bc3eb987aa9feb13ec99e805e6e84010003582a835702", 0x0, 0x0, 0x0) r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCSETIF(r4, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x48, 0x1, 0x2, 0x10400}, {0x400e, 0x4, 0x8, 0x800207fc}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) ioctl$BIOCSETWF(r4, 0x80104277, &(0x7f0000000040)={0x0, 0x0}) (async) write(r4, &(0x7f0000000080)="d81ad3d20cf7eb4e9b0800bc1a30", 0xe) (async) connect$unix(r0, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) (async) sysctl$hw(&(0x7f00000002c0)={0x6, 0xc}, 0x2, 0x0, 0x0, &(0x7f0000000300), 0x3f) 984.379608ms ago: executing program 2 (id=48): mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x40000802) setrlimit(0x8, 0x0) setuid(0xffffffffffffffff) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r0 = socket(0x2, 0x2, 0x0) ioctl$FIONREAD(r0, 0x8020690e, &(0x7f00000001c0)) truncate(&(0x7f0000000680)='./file0\x00', 0x7f) sysctl$hw(&(0x7f0000000200)={0x6, 0xa}, 0x2, &(0x7f00000004c0)="587c040cc40a6ecbe4bfb0bf97481b21a794da0cbbaa6b56585dd25cf2a01548d2fdf3689dbd60c18b5aceb3987ad6dc68ad26cc5afc3880910bb9461db9a1db8a76d8d77834b63a51425747c4bd7196a60e0917f585a3757fae59cdfd99eba1c7f9b02248fd6853f81305fa3899159ff4ca12a1d9e3209706fde45c62ceecc69098ddf46dd1cc8ba6d45d628fb826c98969944f9383c711", &(0x7f00000003c0)=0x98, &(0x7f0000000580)="bf8caaf87fa1637d8468b841126544b7e6eb3b97048c14099ca54742e4513ba19e1a34c2d5fda20c0717c7883c03bea73d1d74fd715aa6c0a8c2f27651d7d19870ed30da34481a9f12bc0112af22767f1aca196d061bcba5522fa2cc31f551ca3f411606a94b5f24e8c36a2738a74a9203aa5fcaab2bb10d3ddb5ef1c1f82430c3f12777ecfcd7c7c91e1a84cba15dffa81c87a3bfadbaa330cf8e23f828cf5af2731a66f4b2e2e7c62b7f71c27c82c46e3f1281a1b8a296d514e1d64420ea2599c403ef2c89170c35d67846aecd366750ddbf841d2f10d51e85bd8158", 0xdd) r1 = open(&(0x7f0000000080)='./file0\x00', 0x10, 0x11) ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f00000000c0)={0x101, 0x4, 0x8a38, 0xfffffffc, "070609000013160000050800", 0x0, 0x7f7}) ioctl$TIOCSTAT(r1, 0x20007465, 0x0) mknod(&(0x7f00000006c0)='./file0\x00', 0x2000, 0x205b9a) socket(0x18, 0xc002, 0x11) select(0x40, &(0x7f0000000180)={0x3, 0x44809e9d, 0x401, 0x3, 0x2, 0x181c, 0x8, 0x10000000009}, 0x0, 0x0, 0x0) r2 = kqueue() r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x80, 0x0) ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f0000000240)={'tap', 0x0}) ioctl$BIOCSETF(r3, 0x80104267, &(0x7f0000000140)={0x3, &(0x7f0000000040)=[{0x7, 0x2, 0x3, 0x9}, {0x3, 0xc2, 0xd, 0x4}, {0x6, 0xf7, 0x1, 0x3}]}) syz_emit_ethernet(0x12, &(0x7f0000000280)={@local, @broadcast, [], {@generic={0x8003, "2eb9c736"}}}) kevent(0xffffffffffffffff, 0x0, 0xffeffff1, &(0x7f00000002c0)=[{{}, 0xfffffffffffffff9, 0x0, 0x0, 0x7, 0x5}, {{}, 0xfffffffffffffff8, 0x4f, 0x20000000, 0x7fffffffffffffff, 0x46ad}, {{}, 0xfffffffffffffff9, 0x1, 0xf0000000, 0x8000000000000000, 0x8}, {{}, 0xfffffffffffffffc, 0x20, 0x4, 0xfffffffd, 0xc39}, {{}, 0xfffffffffffffffb, 0x37, 0x41f224bbdca51ab9, 0x9, 0x3}, {{}, 0xffffffffffffffff, 0x57, 0x2, 0xe, 0x10000}, {{}, 0xfffffffffffffffd, 0x14, 0x10, 0x2, 0x100000002}, {{}, 0xfffffffffffffffd, 0x80, 0x1, 0x1f70, 0x5}], 0xb19, 0x0) sysctl$hw(0x0, 0x0, &(0x7f00000000c0)="99c5069e7aab2155751fcf107818533afc9ff01a68a4b1baa30a07f4c4b66ce08d59af7e54a8341f3be673a174c3a12223a171ff2ab99d0e0d43f0a6c3948f11658e876ac2126614dcd00fdfe76f1ace1f77da0c0af828b5c508585fd9df9ae729f85999a053e2c9872fbdd4e491010010791840000000000000000081131a6f0b680f72f2b0d9a19e", 0x0, 0x0, 0x0) ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f00000001c0)={0x33, 0xfffffffb, 0xff, 0x371, "51087d73b6a35702f3cab698242ef1437c79ac30", 0xa, 0x8000}) kevent(r2, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) r4 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x22) ioctl$TIOCGWINSZ(r1, 0x40087468, &(0x7f0000000400)) r5 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BIOCSDLT(r5, 0x8004427a, &(0x7f0000000080)) ioctl$FIONBIO(r4, 0x82907003, &(0x7f0000000140)=0x2) close(r4) 983.566565ms ago: executing program 6 (id=50): r0 = open$dir(&(0x7f0000000100)='./file1\x00', 0x20000, 0x138) faccessat(r0, &(0x7f00000000c0)='./file0\x00', 0x60, 0x0) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x5, 0x5, 0x1, 0x10000000}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = getpid() r2 = syz_open_pts() fcntl$lock(r2, 0x0, &(0x7f0000000040)={0x1, 0x2, 0x2, 0x5, r1}) fcntl$setown(0xffffffffffffffff, 0x6, 0x0) r3 = getpgrp() fcntl$setown(0xffffffffffffffff, 0x6, r3) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0e99db6de761f86, 0x0) r4 = open(&(0x7f0000000080)='./file0\x00', 0x2, 0x0) r5 = getppid() fcntl$setown(r4, 0x6, r5) fcntl$setown(r4, 0x6, r5) kevent(0xffffffffffffffff, &(0x7f0000000000)=[{{}, 0xfffffffffffffff9, 0x5, 0x13, 0x1}], 0x5, 0x0, 0x7, 0x0) r6 = kqueue() kevent(r6, 0x0, 0xfffffffc, &(0x7f0000000080)=[{{}, 0xfffffffffffffff9, 0x35, 0x2, 0x7, 0x1ff}], 0x7, 0x0) kevent(r6, &(0x7f0000000000), 0x3ff, 0x0, 0x8000800, 0x0) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x183) rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00') 867.070399ms ago: executing program 4 (id=52): r0 = socket$inet(0x2, 0x4, 0x8) fsync(r0) getsockopt(r0, 0x0, 0x67, 0x0, 0x0) 865.676224ms ago: executing program 4 (id=53): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$VMM_IOC_CREATE(r0, 0xc2585601, &(0x7f0000000040)={0x10, 0x4, [{&(0x7f0000003000/0x2000)=nil, &(0x7f0000004000/0x4000)=nil, 0x3}, {&(0x7f0000004000/0x2000)=nil, &(0x7f0000006000/0x4000)=nil, 0x7f}, {&(0x7f0000008000/0x4000)=nil, &(0x7f0000006000/0x4000)=nil, 0xa9f}, {&(0x7f0000003000/0x400000)=nil, &(0x7f0000256000/0x1000)=nil, 0x3}, {&(0x7f00003b7000/0x1000)=nil, &(0x7f0000349000/0x13000)=nil, 0x2}, {&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x6eec7a9e}, {&(0x7f000020a000/0x2000)=nil, &(0x7f000005b000/0x2000)=nil, 0x8}, {&(0x7f000009c000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x96}, {&(0x7f000024f000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x9}, {&(0x7f00003fb000/0x1000)=nil, &(0x7f00002a5000/0x3000)=nil, 0x6}, {&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x6}, {&(0x7f0000306000/0x2000)=nil, &(0x7f000022a000/0x2000)=nil, 0x8}, {&(0x7f00003da000/0x2000)=nil, &(0x7f0000312000/0x4000)=nil, 0x80000000}, {&(0x7f00003e3000/0x1000)=nil, &(0x7f000019a000/0x4000)=nil, 0x4}, {&(0x7f0000143000/0x3000)=nil, &(0x7f0000388000/0x1000)=nil, 0x8}, {&(0x7f000013a000/0x3000)=nil, &(0x7f0000293000/0x1000)=nil, 0x50a5}], './file0\x00', 0x1}) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x20000, 0x0) poll(&(0x7f0000000280)=[{r1, 0x80}], 0x1, 0x3ff) (async) poll(&(0x7f0000000280)=[{r1, 0x80}], 0x1, 0x3ff) sendto$inet(r1, &(0x7f00000002c0)="1826a396c11b794ec56e17992d94c41482a13696fc728abab87c6c86af618a60d71574618edae4be9812feab80ed8a4782ba91cba0506758b6063b586e08ca5ebcf7631ff2faf20cffe99af99e5f629493c1b93bc46b2cba630381a59fe73e7bb5bdd44534adf7a78daa3a02b4c692c04bb5df3d7ccd46cac6a702718c0a32550719288cb37b752f69d6d4bd117640bd5ee260a340e122ee49ca06070a88", 0x9e, 0x400, &(0x7f0000000380)={0x2, 0x1}, 0xc) (async) sendto$inet(r1, &(0x7f00000002c0)="1826a396c11b794ec56e17992d94c41482a13696fc728abab87c6c86af618a60d71574618edae4be9812feab80ed8a4782ba91cba0506758b6063b586e08ca5ebcf7631ff2faf20cffe99af99e5f629493c1b93bc46b2cba630381a59fe73e7bb5bdd44534adf7a78daa3a02b4c692c04bb5df3d7ccd46cac6a702718c0a32550719288cb37b752f69d6d4bd117640bd5ee260a340e122ee49ca06070a88", 0x9e, 0x400, &(0x7f0000000380)={0x2, 0x1}, 0xc) shutdown(r1, 0x0) (async) shutdown(r1, 0x0) flock(0xffffffffffffff9c, 0x3) ioctl$VT_GETMODE(r1, 0x40087603, &(0x7f00000003c0)) r2 = openat$pf(0xffffffffffffff9c, &(0x7f0000000400), 0x80, 0x0) msgrcv(0xffffffffffffffff, &(0x7f0000000440)={0x0, ""/92}, 0x64, 0x0, 0x800) semget(0x0, 0x2, 0x20) (async) r3 = semget(0x0, 0x2, 0x20) getuid() (async) r4 = getuid() getsockopt$SO_PEERCRED(r1, 0xffff, 0x1022, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0xc) r6 = getuid() getsockopt$sock_cred(r2, 0xffff, 0x1022, &(0x7f0000000500), &(0x7f0000000540)=0xc) (async) getsockopt$sock_cred(r2, 0xffff, 0x1022, &(0x7f0000000500)={0x0, 0x0, 0x0}, &(0x7f0000000540)=0xc) semctl$IPC_SET(r3, 0x0, 0x1, &(0x7f0000000580)={{0x5, r4, r5, r6, r7, 0x108, 0x6}, 0x6, 0x4, 0x6884}) (async) semctl$IPC_SET(r3, 0x0, 0x1, &(0x7f0000000580)={{0x5, r4, r5, r6, r7, 0x108, 0x6}, 0x6, 0x4, 0x6884}) readlinkat(r1, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)=""/209, 0xd1) (async) readlinkat(r1, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)=""/209, 0xd1) ioctl$TIOCNOTTY(r0, 0x20007471) r8 = syz_open_pts() close(r8) semctl$GETVAL(r3, 0x3, 0x5, &(0x7f0000000740)=""/126) ioctl$WSKBDIO_GETENCODING(r0, 0x4004570f, &(0x7f00000007c0)) open$dir(&(0x7f0000000800)='./file1\x00', 0x10000, 0x88) (async) r9 = open$dir(&(0x7f0000000800)='./file1\x00', 0x10000, 0x88) fcntl$dupfd(r8, 0xa, r9) getpeername(r2, &(0x7f0000000840)=@in6, &(0x7f0000000880)=0xc) (async) getpeername(r2, &(0x7f0000000840)=@in6, &(0x7f0000000880)=0xc) select(0x40, &(0x7f00000008c0)={0x7, 0xd1e, 0xffff, 0xfffffffffffffff7, 0x5, 0x3, 0x984, 0x2}, &(0x7f0000000900)={0xffff, 0x6, 0x400000000, 0xb, 0x800, 0xfff, 0x7, 0xfffffffffffffff9}, &(0x7f0000000940)={0xb, 0x7, 0x1ff, 0x3889, 0xffffffff, 0x200, 0x8, 0x10001}, &(0x7f0000000980)={0x5, 0x5}) fchmod(r8, 0x100) r10 = msgget$private(0x0, 0xa1) msgrcv(r10, &(0x7f00000009c0)={0x0, ""/77}, 0x55, 0x2, 0x800) ioctl$TIOCFLUSH(0xffffffffffffffff, 0x80047410, &(0x7f0000000a80)=0x8) 860.821101ms ago: executing program 3 (id=56): mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0x450a) (async) r0 = open(&(0x7f00000002c0)='./bus\x00', 0x2, 0x0) (async) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000400), 0x40, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) (async) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x7, 0x9, 0x0, 0x2c504b27}, {0x2c, 0x3, 0x1, 0x4}, {0x6, 0x9, 0x3, 0x9}]}) syz_emit_ethernet(0x3e, &(0x7f0000000340)=ANY=[]) (async) ioctl$TIOCSETD(r0, 0x8004741b, &(0x7f0000000040)=0x7fffffff) (async) select(0x40, &(0x7f0000000000)={0x9, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7}, &(0x7f0000000380)={0xffb, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0) (async) ioctl$WSKBDIO_SETMAP(r0, 0x8010570e, &(0x7f0000000080)={0xa, &(0x7f0000000100)=[{0x2, 0x6, 0x2, 0x101, 0x1}, {0xfff7, 0xa, 0x2, 0x10, 0x10}, {0x7, 0x35b4, 0x80, 0x3140, 0x1ff}, {0xd, 0x7f, 0x9, 0x7, 0x2}, {0x3, 0x2, 0x0, 0x97c, 0x800}, {0x4, 0xb15b, 0x7, 0x0, 0x847}, {0x0, 0x10, 0x200, 0x42e, 0x5}, {0x3, 0xff, 0x9, 0x2, 0xfa7}, {0x40, 0x0, 0x2, 0x9, 0x9}, {0x8001, 0x7ff, 0xfffb, 0x0, 0x400}]}) 782.346394ms ago: executing program 3 (id=57): mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6) r0 = dup2(0xffffffffffffff9c, 0xffffffffffffff9c) writev(r0, &(0x7f0000000000), 0x0) ioctl$VMM_IOC_CREATE(r0, 0xc2585601, &(0x7f0000000040)={0x10, 0x9, [{&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x9}, {&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x1}, {&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000fee000/0x12000)=nil, 0xcb}, {&(0x7f0000fef000/0x2000)=nil, &(0x7f0000ff4000/0x2000)=nil, 0xd594}, {&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff1000/0x2000)=nil, 0x9}, {&(0x7f0000fef000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x4f01}, {&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff8000/0x3000)=nil, 0xca}, {&(0x7f0000ff2000/0x3000)=nil, &(0x7f0000ff4000/0x2000)=nil, 0x8}, {&(0x7f0000ff1000/0x1000)=nil, &(0x7f0000fef000/0x2000)=nil, 0x1}, {&(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff2000/0x2000)=nil, 0x104f}, {&(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff6000/0x1000)=nil}, {&(0x7f0000ff2000/0x3000)=nil, &(0x7f0000ff6000/0x4000)=nil, 0x10001}, {&(0x7f0000fef000/0x1000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x1}, {&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, 0xfffffffffffffffd}, {&(0x7f0000ff3000/0x4000)=nil, &(0x7f0000fed000/0xa000)=nil, 0x8000}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fef000/0x4000)=nil, 0xd691}], './file0\x00', 0x7ff}) select(0x40, &(0x7f0000000240)={0x0, 0x40, 0x100000000, 0xffffffffffffffff, 0x1000, 0x2, 0x6}, &(0x7f0000000280)={0x9, 0xa000000000, 0x2, 0x4, 0x9, 0x7, 0x2}, &(0x7f00000002c0)={0x1ff, 0x5, 0x9, 0x3, 0x9, 0x0, 0x7, 0xd}, &(0x7f0000000300)) mknod$loop(&(0x7f0000000340)='./file0\x00', 0x2000, 0x0) ioctl$VNDIOCSET(r0, 0xc0384600, &(0x7f00000003c0)={0xffffffffffffffff, 0x3, &(0x7f0000000380)='./file0\x00', 0x8}) r1 = getuid() getsockopt$SO_PEERCRED(r0, 0xffff, 0x1022, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0xc) setreuid(r1, r3) setsockopt$sock_timeval(r0, 0xffff, 0x1006, &(0x7f0000000440)={0x6, 0x4}, 0x10) syz_emit_ethernet(0xe3, &(0x7f0000000480)={@empty, @remote, [{[{0x88a8, 0x1, 0x0, 0x4}], {0x8100, 0x3, 0x0, 0x4}}], {@generic={0x803c, "6313b912e1a11ce1ac88fa6983146aea10f747c09b42e81cfbcefdd70ab8cd4f27c5972d4e1bcfa2a186c634edc490b5a7fd8100aadebd294b9c1a229eeb6702061a3487ae28cbb5c7bfa173481a6a15e0fdea6c42a294bd977cd336a2284b41ad4f09026dbe9e6d3a2f2f4c3d562a2f82dc25c36c776ae71a055ad1d3e121a98e4ab4c75176f07f43350e1ee7f8e71e14312597e9647dbc2ca05b55f394f8cdad44cb6f6da5af51ee16e62a7fa77837b54104b5095097e8f5fc336e6222a8387181c580757b02a8009bf190b3"}}}) r5 = fcntl$dupfd(0xffffffffffffff9c, 0x0, r0) r6 = msgget$private(0x0, 0x0) getsockopt$sock_cred(r5, 0xffff, 0x1022, &(0x7f0000000580)={0x0, 0x0, 0x0}, &(0x7f00000005c0)=0xc) getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000000600)={0x0}, &(0x7f0000000640)=0xc) r9 = getpgrp() msgctl$IPC_SET(r6, 0x1, &(0x7f0000000680)={{0x0, r3, r7, r3, r4, 0x61, 0x8}, 0x5, 0x1, r8, r9, 0x100000001, 0xcefd, 0xf5, 0x4d}) shmget$private(0x0, 0x1000, 0x5, &(0x7f0000ffd000/0x1000)=nil) syz_extract_tcp_res$synack(&(0x7f0000000700)={0x41424344}, 0x1, 0x0) syz_emit_ethernet(0x147, &(0x7f0000000740)={@empty, @random="ed4b648f4d3a", [], {@ipv4={0x800, {{0x7, 0x4, 0x1, 0x7, 0x139, 0x65, 0x101, 0x81, 0xf0, 0x0, @multicast1, @empty, {[@rr={0x7, 0x7, 0x7, [@multicast1]}, @noop]}}, @tcp={{0x2, 0x3, 0x41424344, r10, 0x0, 0x0, 0xf, 0x10, 0x1, 0x0, 0x4, {[@sack={0x5, 0x16, [0x9, 0x1, 0x80000000, 0x81, 0x8]}, @window={0x3, 0x3, 0x5}, @window={0x3, 0x3, 0x81}, @timestamp={0x8, 0xa, 0x2, 0x3}]}}, {"4e36999e3fd9d559d33f897a41b9e813705768a072b769b0c6b3a4bb5d3da1e2b9dd2e40af29ca61e9acd6f912e71cfc16f7632f3d740f0ff9c74be7280eddda0db506c7fa59d582840a9652810d9768dc581c10bdc71356568f11f36d4f8b2da3a671550457bf6192b91d912d45ce12636e4ba3bf02d0a9b565129ca18d282061a0bdbad939098064081b0630d4010f6cc97f3573811a00ad57168456bafec961e7e818d289f6771655a36cdd6120d840af67f3dbc7d312e7fdd2549e992fbdb67bd11b04bfc21ec10c5187d56951175eeb6cb44fae8b37bc0f946c2389c8f887"}}}}}}) syz_extract_tcp_res$synack(&(0x7f00000008c0), 0x1, 0x0) r11 = syz_open_pts() setsockopt$sock_int(r5, 0xffff, 0x1008, &(0x7f0000000900)=0x7, 0x4) ftruncate(r11, 0x3) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000940)={'tap', 0x0}) syz_extract_tcp_res(&(0x7f0000000980), 0x1, 0x4) wait4(r2, &(0x7f00000009c0), 0x3, &(0x7f0000000a00)) sysctl$kern(&(0x7f0000000ac0)={0x1, 0x4d}, 0x2, &(0x7f0000000b00)="5adf3d41b6b69573190118382564df31d95c0c58d49e0f63c1614a30b95c3f026cdae363b0f2538a0e1f33bf98acb4f1052f122fa81846f5d4dbe2f46fcaee5da88975dff8850efe1772c379b33d8401dcd917fb5a6ee79d187fc1a5e88e544e845b5104ff24e9872c1e213a0e77c5d6604086407ab9f95f", &(0x7f0000000b80)=0x78, &(0x7f0000000bc0)="f63c67a3907fe7ef16ad202d458d57d5af6a269b9fc2b0e75705ddb7f04d4fb0058f171bb250ca4bc4799dcf0639bf3f44c239af78eaeede69f276a8f4d41c6fcc7666f042ff9b5e301acb2414b2addcfb39b184ab0a192cf57ee5c28037c8d076b4e82c5ae096f20ecc43d48c043425a1ce1287661292a8e4756243e194a892cdd585d809222c0eed48f675594909e1faf609236cd4f11f8fec5033b2f2d6710c64ee597393441fc92c06afd679cafbf66d00fb60aa7cc51c8e20943938e994a84482ad03ec4c0f46a07b753348ebf2ed3615d686b7674fecae8bd5f8714745fe", 0xe1) shutdown(r5, 0x1) 781.812039ms ago: executing program 3 (id=58): mknod(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x0) link(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000d40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') link(&(0x7f0000000a80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r0 = socket(0x11, 0x3, 0x0) sendto$unix(r0, &(0x7f0000000000)="b1000503000004000000000001b10000331c13fecea10500fef96ec0c72fd3357ae30200004e3039d2d236acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b1257aea8c500002002fbfe0c2300008abfba0900000008e371a3f8343712051eeab71d89e00004070000000013000000", 0xb1, 0x8, 0x0, 0x0) rename(&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 779.75791ms ago: executing program 4 (id=59): mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1) (async) unveil(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='c\x00') r0 = getuid() setuid(r0) (async) r1 = socket(0x10, 0x3, 0x7) (async) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) r3 = geteuid() getsockopt$SO_PEERCRED(r1, 0xffff, 0x1022, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0xc) fchown(r1, r3, r5) (async) r6 = kqueue() (async) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4) ioctl$BIOCGRTIMEOUT(r2, 0x4010426e, &(0x7f0000000140)) (async) ioctl$FIONBIO(r1, 0x8004667e, &(0x7f0000000180)=0x40) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0x66, &(0x7f00000001c0)={0x8, 0x0, 0x95, 0x9d17, 0x92f}, 0xc) (async) getsockopt$sock_int(r1, 0xffff, 0x20, &(0x7f0000000200), &(0x7f0000000240)=0x4) (async) r7 = msgget(0x1, 0x500) (async) r8 = getuid() (async) getsockopt$SO_PEERCRED(r1, 0xffff, 0x1022, &(0x7f0000000280)={0x0, 0x0}, 0xc) msgctl$IPC_SET(r7, 0x1, &(0x7f00000002c0)={{0x1, r8, r5, r9, r5, 0x91, 0x2}, 0x4, 0x8, r4, r4, 0x0, 0x0, 0x5, 0x3}) unlink(&(0x7f0000000340)='./file0\x00') (async) r10 = openat$tty(0xffffffffffffff9c, &(0x7f0000000380), 0x10000, 0x0) ioctl$TIOCCONS(r10, 0x80047462, &(0x7f00000003c0)=0x2c) (async) recvfrom$unix(r1, &(0x7f0000000400)=""/4096, 0x1000, 0x0, &(0x7f0000001400)=@abs={0x0, 0x0, 0x0}, 0x8) (async) ioctl$BIOCGBLEN(r2, 0x40044266, &(0x7f0000001440)) (async) ioctl$TIOCGWINSZ(r10, 0x40087468, &(0x7f0000001480)) (async) openat$bpf(0xffffffffffffff9c, &(0x7f00000014c0), 0x80, 0x0) (async) r11 = socket$inet6(0x18, 0x822955de05fe8d27, 0x2) setsockopt$inet6_MRT6_ADD_MIF(r11, 0x29, 0x66, &(0x7f0000001500)={0x6, 0x1, 0x2, 0xa91a, 0x2}, 0xc) fcntl$setown(r6, 0x6, r4) 665.556309ms ago: executing program 3 (id=61): mkdir(&(0x7f0000000100)='./file0\x00', 0x49) setrlimit(0x7, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x100, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000b40)="825a4f47c21e6ed7eda0f5903abf65b18d7c51f78b06ccffb4050000000000009dd52840fafd3493776665d4cd12c63d34", 0x31}], 0x1, 0x0, 0x0, 0x406}, 0x0) (async) ioctl$TIOCSETA(r0, 0xc4504448, &(0x7f0000000740)={0x6, 0x0, 0x6, 0x422, "6374224ff1c14649ebb1789280c9795a6b47c1d1", 0x3}) (async) setgid(0xffffffffffffffff) (async) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1, 0x0) mkdirat(r1, &(0x7f0000000000)='./file0\x00', 0x20) (async) setgroups(0x0, 0x0) (async) setuid(0xffffffffffffffff) unveil(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='r\x00') rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00') 664.745651ms ago: executing program 4 (id=62): socket(0x6, 0x3, 0x1) r0 = openat$speaker(0xffffffffffffff9c, &(0x7f00000004c0), 0x80, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000500)="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", 0x129}, {&(0x7f0000000080)="05f16e480a789a1202030e06b9ef5e035e75ca4331", 0x15}], 0x2) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000000)="220ded84922fb4347b10f7842e570e4505541c72a1533b3bf5c8467c8ddf1c09ce670c99ee796603c22a94abac824a17b90ee4d4bf9b02e7d64974a3237e8ad1469c87dcecffdff7996cfa41420af05be1799be889397408dbd1f5d3af5602e5adebb36225e1741cbfd4f76e837e29cf6d797c03", 0x74}, {&(0x7f0000000100)="b114ec84255c20f7956c05bc1814f5034a96b30be266925206182968cb61ccf1da19b5a6268ed64bd8092766c762ba91529acdfd3b03713fefdb45c13c1eec2fd38f3b12498d20a9ba44257e63b58816", 0x50}, {&(0x7f0000000180)="d8b668e14a283fea0a3f2466134055e51b", 0x11}, {&(0x7f00000001c0)="2f3ddd01724a8847426c731c818f201acee18c90788748ac16877e7f997d1f22678c", 0x22}, {&(0x7f0000000200)="c691194fdadc22612f12c86b73cbadff8311607974dbf583f6ed8bbafff318c066685fb0fbe8d873eb04688149c31e2ff2cab916f771c2923d14bc140788d480672e75937b8289781a634b60aa97e64763bb29e3d0cdbb8b6bee0147690e65a3a36c6d4a0b74440ee17413e6bb300d6e3d5adc0e47df72685bebf3818623a2788180126afe6dac7b1cb4228aea4ac2d25e342af373b57d4c7fce3d0a44dcab1ac39362e5234c4f4d3b90a00d57ccbf4f84252252733dd49a5014a3f53dd0af2e86084bdfe194d17e3b209812b744fceeb2a0362e97ad8e9b0b30", 0xda}, {&(0x7f0000000300)="dd65fe5eca03db0b405030188ca13533e02742cfe5765659b433f9fd38a6e6094040dac7148807f99d5a1bace76764f9b68dd78bf1b3f66cb297e0f404de78f5257c8b97aa44aad15a760cc0f5c296e3a51ceddfb3d6d7bcb8f1b9156a90ebc80cf608dff54e66499ee216f1be1894d0c62080f0f6badf2bfde852da2603bf83b7856ad992705e5ee1c540b9c2fd474dbe2bd744f7a8a840d3bac19bc1901cb5233ca65cb6c1e0d071741e14de350b3a940876381d82f94147e24f9f9a3ff4d187d19ebe5e14228ce0afbe8f8a", 0xcd}, {&(0x7f0000000640)="bd7793a3fd086ac1f54123fc929386bb437f2174659a3f124735431ece3d7363b64db3214158fdf4cd19f7db5c182e7fbc001502a7a380c44ab970029e824a2af64531602bbcdef5c0e676bfefd8793e5a47eea58a76c8f026b16efd6e7796c14e027cf8b4445c9634b0a3a9cc9022a81e34f08d13087ae07e8b4d49d64f06b8df30bbaffebd84ffb6750db1e2250074e418677526f5424ad93980d93038717759847e518b0cd5e5c93860351426a57809a1e611094595bc4e5f1864a291768b30b7087c390be4395364bb2e447dfc3b657e9140a4a7a4911847a5c50342dadfd3522f7116cdb9519303b132", 0xec}], 0x7) execve(0x0, 0x0, 0x0) socket(0x6, 0x3, 0x1) (async) openat$speaker(0xffffffffffffff9c, &(0x7f00000004c0), 0x80, 0x0) (async) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000500)="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", 0x129}, {&(0x7f0000000080)="05f16e480a789a1202030e06b9ef5e035e75ca4331", 0x15}], 0x2) (async) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000000)="220ded84922fb4347b10f7842e570e4505541c72a1533b3bf5c8467c8ddf1c09ce670c99ee796603c22a94abac824a17b90ee4d4bf9b02e7d64974a3237e8ad1469c87dcecffdff7996cfa41420af05be1799be889397408dbd1f5d3af5602e5adebb36225e1741cbfd4f76e837e29cf6d797c03", 0x74}, {&(0x7f0000000100)="b114ec84255c20f7956c05bc1814f5034a96b30be266925206182968cb61ccf1da19b5a6268ed64bd8092766c762ba91529acdfd3b03713fefdb45c13c1eec2fd38f3b12498d20a9ba44257e63b58816", 0x50}, {&(0x7f0000000180)="d8b668e14a283fea0a3f2466134055e51b", 0x11}, {&(0x7f00000001c0)="2f3ddd01724a8847426c731c818f201acee18c90788748ac16877e7f997d1f22678c", 0x22}, {&(0x7f0000000200)="c691194fdadc22612f12c86b73cbadff8311607974dbf583f6ed8bbafff318c066685fb0fbe8d873eb04688149c31e2ff2cab916f771c2923d14bc140788d480672e75937b8289781a634b60aa97e64763bb29e3d0cdbb8b6bee0147690e65a3a36c6d4a0b74440ee17413e6bb300d6e3d5adc0e47df72685bebf3818623a2788180126afe6dac7b1cb4228aea4ac2d25e342af373b57d4c7fce3d0a44dcab1ac39362e5234c4f4d3b90a00d57ccbf4f84252252733dd49a5014a3f53dd0af2e86084bdfe194d17e3b209812b744fceeb2a0362e97ad8e9b0b30", 0xda}, {&(0x7f0000000300)="dd65fe5eca03db0b405030188ca13533e02742cfe5765659b433f9fd38a6e6094040dac7148807f99d5a1bace76764f9b68dd78bf1b3f66cb297e0f404de78f5257c8b97aa44aad15a760cc0f5c296e3a51ceddfb3d6d7bcb8f1b9156a90ebc80cf608dff54e66499ee216f1be1894d0c62080f0f6badf2bfde852da2603bf83b7856ad992705e5ee1c540b9c2fd474dbe2bd744f7a8a840d3bac19bc1901cb5233ca65cb6c1e0d071741e14de350b3a940876381d82f94147e24f9f9a3ff4d187d19ebe5e14228ce0afbe8f8a", 0xcd}, {&(0x7f0000000640)="bd7793a3fd086ac1f54123fc929386bb437f2174659a3f124735431ece3d7363b64db3214158fdf4cd19f7db5c182e7fbc001502a7a380c44ab970029e824a2af64531602bbcdef5c0e676bfefd8793e5a47eea58a76c8f026b16efd6e7796c14e027cf8b4445c9634b0a3a9cc9022a81e34f08d13087ae07e8b4d49d64f06b8df30bbaffebd84ffb6750db1e2250074e418677526f5424ad93980d93038717759847e518b0cd5e5c93860351426a57809a1e611094595bc4e5f1864a291768b30b7087c390be4395364bb2e447dfc3b657e9140a4a7a4911847a5c50342dadfd3522f7116cdb9519303b132", 0xec}], 0x7) (async) execve(0x0, 0x0, 0x0) (async) 659.992928ms ago: executing program 3 (id=64): ioctl$BIOCGETIF(0xffffffffffffffff, 0x4020426b, &(0x7f0000000000)={""/16, @ifru_media}) utimes(0x0, &(0x7f0000000080)={{0xfffffffffffffffd, 0xf}, {0x9, 0x9}}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = semget(0x0, 0x1, 0x281) semctl$SETALL(r0, 0x0, 0x9, &(0x7f0000000080)) setegid(0x0) 571.05458ms ago: executing program 7 (id=65): mkdir(&(0x7f0000000500)='./file0\x00', 0x0) chmod(&(0x7f0000000180)='./file0\x00', 0x23f) setgid(0xffffffffffffffff) r0 = socket(0x11, 0x3, 0x0) sendto$unix(r0, &(0x7f0000000040)="b1000501000000ae05000701070000000000000010000500fef96ecfc72fd3357ae30200004e30ffd2d236acf20bf404be01000000f7c8cf5f882b297be1aa050400ce94e2f0ad3ebbc23de4411f139b672f335c22db830c032bfa896443c32118210000720fd38bfb0000fd54c125191b1257aea8c500001602fbfe0c2300000100be1f25a2e791505c47f8343712cc11ffffffffffffffffffffffffffff0000ed007f62b60be8b90000000000000000", 0xb1, 0x8, 0x0, 0x0) setgroups(0x0, 0x0) setreuid(0xee00, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r1 = getuid() r2 = getuid() chown(&(0x7f0000000040)='./file0\x00', r2, 0xffffffffffffffff) setreuid(0xee00, r1) getgroups(0x7, &(0x7f00000002c0)=[0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0]) chown(&(0x7f0000000280)='./file0\x00', r2, r3) setuid(0xee01) faccessat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x10, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x20, 0x110) pwrite(r4, &(0x7f00000000c0)='u', 0x1, 0x470404ba) openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x10, 0x0) 558.90928ms ago: executing program 3 (id=66): socket$inet6(0x18, 0x8000, 0x8) (async) socket$inet6(0x18, 0x8000, 0x8) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x20000, 0xd) socket$unix(0x1, 0x2, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x9cab835cfdc52675, 0x0) ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9f, 0x0) getrlimit(0x3, &(0x7f0000000180)) (async) getrlimit(0x3, &(0x7f0000000180)) fsync(r0) openat$vmm(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) (async) openat$vmm(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) poll(&(0x7f0000000080), 0x0, 0xf3e) syz_emit_ethernet(0x6e, &(0x7f0000000bc0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd605f6ad900383a0000000000000000000000000000000000fe8000000000000000000000000000aa02009078000000006006c33e00003a00fe8000000000000000000000000000aa4f6d3891bc6594e8078600ee4462146001"]) 558.362994ms ago: executing program 4 (id=67): setgid(0xffffffffffffffff) setgroups(0x0, 0x0) r0 = open$dir(&(0x7f0000000300)='.\x00', 0x0, 0x4a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="28000000ffff000001"], 0x28}, 0x0) setrlimit(0x8, &(0x7f0000000040)={0x0, 0x9}) recvmmsg(r1, &(0x7f0000000000)={&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/25, 0xfffffec6}, 0xfffffffd}, 0x15, 0x0, 0x0) fchmod(r0, 0xff) setuid(0xffffffffffffffff) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') faccessat(0xffffffffffffffff, &(0x7f00000000c0)='./file0/file0/..\x00', 0x0, 0x0) sysctl$net_inet_tcp(&(0x7f0000000080)={0x4, 0x2, 0x6, 0xf}, 0x4, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000005c0)={@broadcast, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x6, 0x1, 0x0, @remote={0xac, 0x14, 0x0}, @remote={0xac, 0x14, 0x0}}, @tcp={{0x1, 0x0, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x20, 0x5, 0x0, 0x6}}}}}}) syz_emit_ethernet(0x3a, &(0x7f0000000280)={@broadcast, @local, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x17, 0x2c, 0x65, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x0}, @remote={0xac, 0x14, 0x0}, {[@timestamp={0x44, 0x4, 0x3, 0x1, 0x6}]}}, @tcp={{0x2, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x4, 0x0, 0x43}}}}}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x1a3) rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00') 555.813512ms ago: executing program 7 (id=68): r0 = syz_open_pts() ioctl$TIOCGTSTAMP(r0, 0x4010745b, &(0x7f0000000000)) getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) setuid(r2) r4 = getuid() r5 = socket$inet(0x2, 0x8000, 0x74) getsockopt$sock_cred(r5, 0xffff, 0x1022, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0xc) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VNDIOCSET(r9, 0xc0384600, &(0x7f0000000200)={&(0x7f0000000180)='./file0\x00', 0xe8a5, &(0x7f00000001c0)='./file0\x00', 0x8}) r10 = semget$private(0x0, 0x2, 0x102) semctl$IPC_SET(r10, 0x0, 0x1, &(0x7f0000000240)={{0xf65, r4, r7, r4, r7, 0x40, 0x101}, 0x5, 0x1, 0x7}) close(r8) msgrcv(0xffffffffffffffff, &(0x7f00000002c0)={0x0, ""/193}, 0xc9, 0x3, 0x800) fcntl$dupfd(r8, 0x0, 0xffffffffffffffff) r11 = kqueue() r12 = openat(r9, &(0x7f00000003c0)='./file1\x00', 0x100, 0x2) read(r12, &(0x7f0000000400)=""/59, 0x3b) ioctl$TIOCSETA(r12, 0x802c7414, &(0x7f0000000440)={0x5, 0x1000, 0xe8, 0xfffffffd, "85b92120324edd5e4d3717ac212dd921321c69d9", 0x4, 0x7}) r13 = msgget(0x0, 0x145) msgctl$IPC_SET(r13, 0x1, &(0x7f0000000480)={{0x200, r4, r3, r2, r3, 0x2, 0x8}, 0x4, 0x9, r6, r1, 0x9, 0x4, 0x8000}) chown(&(0x7f0000000500)='./file1\x00', r2, r3) semctl$SETALL(r10, 0x0, 0x9, &(0x7f0000000540)=[0xcf, 0x10]) close(r0) msgsnd(r13, &(0x7f0000000580)={0x1, "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"}, 0x106, 0x800) ioctl$WSDISPLAYIO_GBURNER(r12, 0x400c5752, &(0x7f00000006c0)) fcntl$setflags(r11, 0x2, 0x0) ioctl$TIOCSETA(r8, 0x802c7414, &(0x7f0000000700)={0x3, 0x7, 0x7fff, 0x3, "b0adaf771c7285b015e04780df5c5ee1181b9e5a", 0xad, 0x4}) msgrcv(r13, &(0x7f0000000740)={0x0, ""/178}, 0xba, 0x0, 0x800) lchown(&(0x7f0000000800)='./file0\x00', r2, r7) ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000840)={0x3, 0x6, 0xd, 0x95d, "ef209419ecfd1d8c311ee6dd7fbcc4d458b86137", 0x7, 0x401}) 555.171938ms ago: executing program 7 (id=69): sysctl$vm_swapencrypt(&(0x7f0000000040)={0x6, 0x1b, 0x2}, 0x3, 0x0, 0x0, 0x0, 0x51) sysctl$kern(&(0x7f0000000040)={0x1, 0x3f}, 0x4, &(0x7f0000000040), 0x0, 0x0, 0xfffffffffffffda3) r0 = socket(0x18, 0x4003, 0xa) setrlimit(0x8, &(0x7f00000008c0)={0x42, 0x61}) r1 = syz_open_pts() getrlimit(0x3, &(0x7f0000000000)) close(0xffffffffffffffff) r2 = semget(0x1, 0x1, 0x0) semctl$GETZCNT(r2, 0x2, 0x7, &(0x7f0000000080)=""/248) sysctl$hw(&(0x7f0000000040)={0x7, 0xe}, 0x2, &(0x7f0000000200)="a4896008", &(0x7f00000001c0)=0x4, 0x0, 0x0) close(r1) syz_open_pts() ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000040)={0x27ffb, 0x4b6b, 0xfff9, 0x21d8b78b, "0700a460990d070a7f00000000002fcaaed20500", 0x3db, 0x42}) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000001640)="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", 0x64f}], 0x1) setsockopt(r0, 0x26, 0x41, &(0x7f0000000040)="0000009b", 0x4) 297.626218ms ago: executing program 4 (id=70): r0 = openat$speaker(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) writev(r0, 0x0, 0x0) (async) writev(r0, &(0x7f0000000280)=[{&(0x7f00000002c0)="30c47992f2527ab33a20786f78bbdfe063346723b0ebb962d9ef4d1b08d3438c63def97b1842854d4cf4", 0x2a}, {&(0x7f0000000780)="1a25ac47ef27f88ce695d2869142e084fba9f5221b5778cf290616c82e562e96920a395b1fda553b92d13f046e89feb553d0225564be2090ab2f64b4305bcf64a8cfc948d4097f1b7949c74a2bb0b24d4d660d0c1f0f46f301b77ab50ffa0c6ab4247a99adf35681be2043ff31f95818b4b2d6f10b5b876fa180854156de2dec39563e11375faca114e0c1205e08cdfc40fb4dfb9e95d103d5f1a9f4eea3f213092670c7770aa74dbb55d69af918dfe181d6c42fd24c322ac38ab7b8d8907dd1ba41e98be9d32454ccc3ebb61121b60643", 0xd1}], 0x2) (async, rerun: 32) execve(0x0, 0x0, 0x0) (rerun: 32) syz_emit_ethernet(0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaad0b5049f6b6386dd6036d24700383afcfe8000000000000000000000000000bbff020000000000000000000000000001010290785fb30000605f020000002c00ff020000000000100000000000000001fe8000030000000000000000000000bb3a00000500000000e1e1803616fcd0226cc2bd2c68ebaa34f93916cd1b8dce67d50ab51beff4c8317aa52e2554d9130c8662e5ca6acc02"]) 295.009158ms ago: executing program 5 (id=71): mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x1100) openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) select(0x40, &(0x7f0000000000)={0x400}, &(0x7f0000000040)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x3}, &(0x7f0000000080)={0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5c}, &(0x7f0000000180)) munmap(&(0x7f0000006000/0x4000)=nil, 0x4000) r0 = socket(0x2, 0x3, 0x0) shutdown(r0, 0x2) syz_emit_ethernet(0x2a, &(0x7f0000000180)={@broadcast, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x3e, 0x1c, 0x0, 0x0, 0x0, 0xff, 0x0, @multicast2}, @icmp=@echo={0x8, 0x0, 0x0, 0x0, 0x100}}}}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket(0x2, 0x1, 0x0) r2 = socket(0x18, 0x1, 0x0) setsockopt(r2, 0x1000000029, 0x35, &(0x7f0000000080), 0x0) setrlimit(0x8, &(0x7f0000000040)={0xa, 0x50}) accept(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 291.568392ms ago: executing program 5 (id=72): writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000080)="76e5eac907f9ccf7a251ceddcec7d6aa45cffe2c63a56077123a276d3ba4e9d17eb3eb5db12a3783a8e0620d357de1fe04fa9465b5bd1286e9624dec06a00c222f", 0x41}], 0x1) (async) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) (async) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x17b) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x17, 0x7fffffff, 0x101, 0x80000004, 0x6, 0x10001, 0x10, [{0x2, 0x7, 0x4, 0x71000}, {0x7, 0x8, 0x8, 0x9}, {0x8, 0xd86, 0x6d, 0x9}, {0x1, 0x1800, 0x8007}, {0x401, 0x200726, 0x2800, 0x5}, {0x2, 0x6, 0x1003, 0x99}, {0xcdf, 0x1dbf, 0x6, 0x3}, {0x6, 0xfff, 0x80000014, 0x8}, {0x7fffffff, 0x1082, 0x5, 0x9}, {0x4, 0x8001, 0xd1b, 0x8b}, {0x1ce, 0xffff, 0x8, 0x3}, {0x7ff, 0x9, 0x8, 0x9}, {0xb8c, 0x4, 0xf, 0x3}, {0x29a71717, 0xfffffffa, 0x985, 0x6}, {0xfffffff9, 0x7, 0x5}, {0x0, 0x1, 0x1802, 0x9}]}) (async) r1 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) ioctl$WSMOUSEIO_SETPARAMS(r1, 0x80105728, &(0x7f00000000c0)={&(0x7f0000000080)=[{0x5, 0x103}], 0x1}) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0x7, 0x0}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f00000000c0), 0x1c, 0x0}, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0xe5, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4004}, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x1ff, 0x4000000000, 0x6, 0xb}) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket(0x18, 0x3, 0x0) sendmsg$unix(r2, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x8) rename(&(0x7f0000000100)='./file0\x00', 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='.\x00') (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (async) setreuid(0xee00, 0x0) r3 = getuid() setreuid(0xee00, r3) (async) chflags(&(0x7f0000000000)='./file0\x00', 0x10001) 194.899923ms ago: executing program 5 (id=73): sysctl$net_inet_tcp(&(0x7f0000000000)={0x4, 0x2, 0x6, 0xe}, 0x4, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x8003, 0x0) unveil(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000300)='c\x00') mknod(&(0x7f0000000000)='.\x00', 0x1, 0x0) getsockopt(r0, 0x11, 0x1, 0x0, 0x0) sysctl$vm_swapencrypt(&(0x7f0000000000)={0x6, 0xb, 0x2}, 0x3, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0xd02) r1 = open(&(0x7f0000000080)='./bus\x00', 0x880, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x80000000000206, 0x0) r2 = getpid() r3 = open$dir(&(0x7f0000000300)='.\x00', 0x0, 0x4a) fchmod(r3, 0xff) setuid(0xffffffffffffffff) open(&(0x7f0000000180)='./file0\x00', 0x80000000000206, 0x0) truncate(&(0x7f0000000400)='./file0\x00', 0x1) ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x40000530, r2) minherit(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x3) r4 = open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x1, 0x12, r4, 0x0) ioctl$VNDIOCSET(r1, 0xc0785101, &(0x7f0000000040)={0x0, 0x0, 0x0}) setuid(0xee01) ktrace(0x0, 0x5, 0x128, 0x0) sysctl$kern(&(0x7f0000000000)={0xa}, 0x7, &(0x7f0000000080), 0x0, 0x0, 0x24) 193.97233ms ago: executing program 7 (id=74): socket(0x6, 0x8000, 0xb3) r0 = socket$inet(0x2, 0x2, 0x0) r1 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000100), 0x8, 0x0) ioctl$BIOCSETWF(r1, 0x80104277, &(0x7f00000001c0)={0x7, &(0x7f0000000180)=[{0x3, 0x3, 0x2, 0x8e3}, {0x209, 0x3, 0x15, 0x4}, {0x8, 0x1, 0xaa}, {0x8, 0xc6, 0x80, 0x675}, {0x0, 0x9, 0x83, 0x200}, {0x7, 0x87, 0x3}, {0x9, 0x4, 0x2, 0x4}]}) close(r0) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r2, 0x0, 0x200000000000a, &(0x7f0000000000)="ea00005c00000000", 0x1) setsockopt$inet_opts(r0, 0x0, 0x200000000000a, 0x0, 0x0) r3 = socket(0x18, 0x2, 0x0) recvfrom$unix(r3, &(0x7f0000000080)=""/22, 0x16, 0x840, &(0x7f00000000c0)=@abs={0x3, 0x0, 0x2}, 0x8) open(&(0x7f0000000040)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf79ea) setuid(0xee01) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) execve(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) setrlimit(0x8, &(0x7f0000000580)={0xa, 0x56}) bind$unix(0xffffffffffffffff, &(0x7f0000000100)=@abs={0x1f95d27d48731892, 0x0, 0x1}, 0x8) sysctl$net_inet_tcp(&(0x7f00000000c0)={0x4, 0x2, 0x6, 0x9}, 0x4, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_pts() close(r4) r5 = syz_open_pts() ioctl$TIOCSETA(r4, 0x802c7414, &(0x7f0000000340)={0x8, 0x5, 0xffffdf82, 0xffffff8c, "08ed95990000000000000000ffffffffffffffe6", 0x4, 0x4}) writev(r4, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) readv(r5, &(0x7f0000000040)=[{&(0x7f0000000000)=""/18, 0x12}], 0x1) r6 = socket$inet(0x2, 0x3, 0xfc) ioctl$FIONREAD(r6, 0x80206979, &(0x7f0000000000)) setsockopt(r3, 0x1000000000029, 0x9, &(0x7f0000000040)="03000000", 0x4) setsockopt(r3, 0x1000000000029, 0xa, &(0x7f0000003680)='\x00\x00\x00\x00', 0x4) 193.542394ms ago: executing program 5 (id=75): pipe(&(0x7f00000001c0)) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r0 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x48, 0x1, 0x2, 0x10400}, {0x400e, 0x4, 0x8, 0x800207fc}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$BIOCSETWF(r1, 0x80104277, &(0x7f0000000040)={0x0, 0x0}) write(r1, &(0x7f0000000080)="d81ad3d20cf7eb4e9b0800bc1a30", 0xe) ioctl$TIOCSBRK(r0, 0x2000747b) mprotect(&(0x7f00000e5000/0x3000)=nil, 0x3000, 0x2) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/225, 0xe1}, {&(0x7f00000002c0)=""/159, 0x9f}, {&(0x7f0000000200)=""/93, 0x5d}], 0x3) 192.302317ms ago: executing program 2 (id=76): r0 = socket(0x18, 0x2, 0x0) setsockopt(r0, 0x2e, 0x2c, &(0x7f0000000040)="67deeef64199c59dc04587c05a44dcecb6471c6b9d0000000000000008", 0x1d) setitimer(0x0, &(0x7f0000000080)={{0x0, 0x5}, {0x4, 0x800000086}}, 0x0) sysctl$kern(&(0x7f0000000080)={0x1, 0x44}, 0x4000000000000004, 0x0, 0x0, 0x0, 0x0) 125.862119ms ago: executing program 7 (id=77): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000080)={0x0, &(0x7f00000001c0)}) ioctl$BIOCSETIF(0xffffffffffffff9c, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r1 = semget(0x0, 0x1, 0x281) socket(0x18, 0x2, 0x0) setgroups(0x0, 0x0) setuid(0xffffffffffffffff) semctl$SETALL(r1, 0x0, 0x9, &(0x7f0000000080)) ioctl$BIOCGRTIMEOUT(0xffffffffffffff9c, 0x4010426e, &(0x7f0000000000)) select(0x40, &(0x7f0000000000)={0xfffffffffffffffd, 0x80000000000000, 0x1, 0x3ffffffffffffffd, 0x0, 0x0, 0xd23}, 0x0, 0x0, 0x0) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket(0x2, 0x3, 0x2) setsockopt$inet_opts(r2, 0x0, 0x200000000000a, &(0x7f00000000c0)="b5", 0x1) connect$unix(r2, &(0x7f0000000000), 0x10) sendmsg(r2, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x8) r3 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r3, 0x8020691f, &(0x7f00000001c0)) 123.86266ms ago: executing program 2 (id=78): r0 = socket(0x2, 0x3, 0x0) close(r0) (async) r1 = socket(0x2, 0x3, 0x0) close(r1) (async) close(0xffffffffffffffff) (async) socket(0x18, 0xc003, 0x3a) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) getsockopt$sock_cred(r2, 0xffff, 0x1022, &(0x7f0000000580)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000000)={{0x0, 0x0, r3, 0xffffffffffffffff, r3, 0x44, 0x6}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x80000000200023, 0x8000000000000000}) (async) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, r3, 0x0, 0xffffffffffffffff, 0x0, 0x200}, 0x3ff, 0x7}) (async) openat$wsmouse(0xffffffffffffff9c, 0x0, 0x1, 0x0) (async) openat$bpf(0xffffffffffffff9c, 0x0, 0x80, 0x0) syz_emit_ethernet(0x127, &(0x7f0000000200)=ANY=[@ANYBLOB="e727dc071f0000000000000086dd609907a600f12c03cb697a653e336f000000500000000000ff0200000000000000000000000000012900002e"]) (async) syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[@ANYBLOB="69e1629b6174391e7dd7a2d786dd60b6000000302c03cb697a653e336f000000500000000000ff02000000000000000000000000000102000003"]) syz_emit_ethernet(0x1000e, &(0x7f0000000200)=ANY=[]) (async) syz_emit_ethernet(0x1000e, &(0x7f0000000080)=ANY=[]) (async) r4 = socket(0x18, 0x3, 0x0) connect$unix(r4, &(0x7f00000000c0)=@abs={0x1, 0x7}, 0x8) getsockname$inet(r4, &(0x7f00000000c0), &(0x7f0000000000)=0xffffffffffffff35) (async) connect$unix(r1, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) r5 = socket(0x18, 0x1, 0x0) ioctl$FIONREAD(r5, 0x4004667f, &(0x7f0000000000)) sysctl$ddb(&(0x7f0000000440)={0x9, 0x8}, 0x2, &(0x7f0000000480), 0x0, 0x0, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1001, &(0x7f0000000100)=0x20000, 0x4) (async) ioctl$FIONREAD(r0, 0x4004667f, &(0x7f0000000040)) write(r0, &(0x7f0000001680)="04bdfa5d1d2873c63e3534825ba166e2fea9aec43050006123339a346f731573d8d508753f95b7688ad48b8cf6bbca325cebc37fc4e1dd543dbe2da6dd", 0x1001c) 122.757639ms ago: executing program 7 (id=79): r0 = syz_open_pts() ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000340)={0x5, 0x0, 0xfffffffe, 0x966b, "ff14e7130b1e586ca6294000", 0x40, 0x3effd}) (async) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000380)="079facfaaed69aea4dc561c3b736feac0a2a76087be8b904ddc6f90b66e0f69b6dfba683b348224cf0ccc2a39b0f79389a2bd9b211424a22ca014b9231e253e257706c75b3f320166475c72455021edf575fab8b5d65b8d261c87c3ccc4e784ea7462f3723edabb8e26d27acb1797e2ef4db27270a", 0xffffff01}], 0x1) ioctl$TIOCSETAW(r0, 0x802c7415, &(0x7f0000000000)={0x6, 0x7cd, 0x400, 0xfffffff9, "296438fe6c90e90f06142dbd32b73669cad5a2db", 0x7fffffff}) write(r0, &(0x7f0000000100)="b1", 0x1) (async) r1 = syz_open_pts() close(r1) (async) ioctl$TIOCSTOP(r1, 0x2000746f) (async) syz_open_pts() ioctl$TIOCFLUSH(r0, 0x80047410, &(0x7f0000000780)=0x6) (async) open(&(0x7f0000000080)='./file0\x00', 0xa1, 0x19e) 122.131686ms ago: executing program 2 (id=80): mknod(&(0x7f0000000180)='./bus\x00', 0x2000, 0xd01) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000280)='./bus\x00', 0x40, 0x2000) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VNDIOCCLR(r1, 0x80384601, &(0x7f0000000300)={&(0x7f0000000080)='./bus\x00', 0x2, &(0x7f00000002c0)='./bus\x00', 0x6}) (async) ioctl$VNDIOCCLR(r1, 0x80384601, &(0x7f0000000300)={&(0x7f0000000080)='./bus\x00', 0x2, &(0x7f00000002c0)='./bus\x00', 0x6}) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0xfffffffffffffffe, [{&(0x7f00000c7000/0x3000)=nil, &(0x7f0000616000/0x3000)=nil}, {&(0x7f00004d7000/0x2000)=nil, &(0x7f0000698000/0x1000)=nil, 0x3}, {&(0x7f00008d0000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x9}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff7000/0x3000)=nil, 0x8a9}, {&(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x1000)=nil, 0x1}, {&(0x7f0000a1a000/0x4000)=nil, &(0x7f000068e000/0x12000)=nil, 0x2000000000000000}, {&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff2000/0x2000)=nil, 0x100006}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f00003a2000/0x1000)=nil, 0x2}, {&(0x7f000013f000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0xb}, {&(0x7f0000637000/0x3000)=nil, &(0x7f000069b000/0x3000)=nil, 0xc}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x5}, {&(0x7f00007f8000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x80000}, {&(0x7f000062d000/0x3000)=nil, &(0x7f0000668000/0x4000)=nil, 0xffffffffffffffff}, {&(0x7f000051f000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x8000000000000001}, {&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000140000/0xc00000)=nil, 0x7fffd}, {&(0x7f0000ff1000/0x1000)=nil, &(0x7f0000010000/0x3000)=nil, 0x5}], './file0\x00', 0x1fe}) open(&(0x7f0000000000)='./bus\x00', 0x2, 0x1df) (async) r2 = open(&(0x7f0000000000)='./bus\x00', 0x2, 0x1df) syz_emit_ethernet(0x2a, &(0x7f0000000140)={@broadcast, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x6, 0x1, 0x0, @remote={0xac, 0x14, 0x0}, @remote={0xac, 0x14, 0x0}}, @icmp=@echo={0x8, 0x0, 0x0, 0x3, 0x4}}}}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r2, 0x81946466, &(0x7f0000000140)={0x0, 0x1, 0x0}) open(0x0, 0x2, 0x0) (async) open(0x0, 0x2, 0x0) ioctl$VNDIOCGET(r0, 0x20006473, 0x0) (async) ioctl$VNDIOCGET(r0, 0x20006473, 0x0) 120.864267ms ago: executing program 6 (id=81): mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) execve(0x0, &(0x7f00000001c0)=[0x0, &(0x7f00000000c0)='/dev/speaker\x00'], 0x0) r0 = socket(0x1, 0x2, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x8, 0x4, 0x2, 0x1, 0x34, 0x64, 0x3, 0x6, 0x9d, 0x0, @rand_addr=0x2c, @broadcast, {[@rr={0x7, 0xb, 0x1e, [@broadcast, @empty]}]}}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0xb, 0x7832, 0x3ff, 0x1, 0x9}}}}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_pts() fcntl$lock(r3, 0x8, &(0x7f0000000040)={0x0, 0x0, 0x8, 0x1000300000000}) flock(r3, 0x1) fcntl$lock(r3, 0x8, &(0x7f0000000080)={0x0, 0x0, 0x63, 0x100000001}) close(r3) writev(r2, &(0x7f0000000400)=[{&(0x7f0000000100)='D', 0x1}], 0x1) writev(r3, &(0x7f00000004c0)=[{&(0x7f0000000480)="4daadc", 0x3}], 0x1) ioctl$FIONREAD(r0, 0xc0106924, &(0x7f00000001c0)) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) readlinkat(r4, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)=""/235, 0xeb) sysctl$hw(&(0x7f00000000c0)={0x6, 0xc}, 0x2, 0x0, &(0x7f0000000080)=0xfffffffffffffd07, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) sysctl$hw(&(0x7f00000000c0), 0x2, &(0x7f00000001c0), &(0x7f0000000080), 0x0, 0x0) syz_extract_tcp_res(&(0x7f0000000440), 0x9, 0x7fffffff) flock(r1, 0x8) r5 = socket(0x2, 0x2, 0x0) ioctl$FIONREAD(r5, 0x80206979, &(0x7f00000000c0)) r6 = open(&(0x7f0000000080)='./file0\x00', 0x200, 0x29) ioctl$WSMOUSEIO_SCALIBCOORDS(r6, 0x81205724, &(0x7f0000000100)={0x7ff, 0xa6, 0x93, 0x8, 0x80000001, 0xa1b0, 0x10001, 0x10, [{0x0, 0x2890, 0x5, 0x71002}, {0x6, 0x9, 0x8, 0xfffffff9}, {0x1, 0xf88, 0xfffffffc, 0x9}, {0x4, 0x800, 0x8007, 0x8}, {0x401, 0x3, 0x2800, 0x7}, {0x1, 0x650, 0x3, 0x9b}, {0xce1, 0xffffffff, 0x4f4, 0x10000}, {0x6, 0x803, 0x14, 0x8}, {0xd0f5, 0x82, 0x5, 0x9}, {0x6a75, 0x8009, 0x1000, 0x4}, {0x1cc, 0x10001, 0xc, 0x3}, {0x8, 0xa, 0x8}, {0xb94, 0x7, 0x6, 0x1}, {0x29a71717, 0xfffffffa, 0x62, 0x6}, {0x1000c, 0x5, 0x5, 0x4}, {0x0, 0x1, 0xfff, 0x30004}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$VNDIOCSET(r6, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r6, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) sysctl$net_inet6_icmp6(&(0x7f0000000040)={0x4, 0x18, 0x3a, 0x1}, 0x4, 0x0, 0x0, 0x0, 0x0) 1.45799ms ago: executing program 1 (id=82): setrlimit(0x8, &(0x7f0000000000)={0x42, 0x62}) r0 = syz_open_pts() select(0x40, &(0x7f0000000040)={0xe3a, 0xffffffffffffff00, 0xfffffffffffffffc, 0x7, 0x101, 0x1, 0xbcf, 0x10000}, &(0x7f0000000080)={0xfffffffffffff801, 0x92a4, 0x3d45, 0x8, 0x0, 0x1, 0x2, 0x7ff}, &(0x7f00000000c0)={0x3, 0x5, 0x100, 0xffffffffffff7fff, 0xfffffffffffffffd, 0xd04, 0x9, 0x400}, &(0x7f0000000100)={0x80000000}) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0x8, [{&(0x7f000049a000/0x2000)=nil, &(0x7f00000e1000/0x4000)=nil, 0x74a}, {&(0x7f000025c000/0x3000)=nil, &(0x7f000074b000/0x7000)=nil, 0x4}, {&(0x7f0000258000/0x2000)=nil, &(0x7f0000505000/0xb000)=nil, 0x40000000000004}, {&(0x7f000072c000/0x3000)=nil, &(0x7f00002cd000/0x3000)=nil, 0xfdfffffffffff7f1}, {&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000180000/0x4000)=nil, 0xfffffffffffffffd}, {&(0x7f000060b000/0x2000)=nil, &(0x7f000012a000/0x3000)=nil, 0xfffffffffffffffe}, {&(0x7f000023f000/0x3000)=nil, &(0x7f00002ba000/0x3000)=nil, 0xc099}, {&(0x7f00001f5000/0x3000)=nil, &(0x7f000024a000/0x7000)=nil, 0x5}, {&(0x7f0000ffe000/0x1000)=nil, &(0x7f00002cf000/0x1000)=nil, 0x6}, {&(0x7f0000121000/0x2000)=nil, &(0x7f0000750000/0x2000)=nil, 0xc6}, {&(0x7f00005b9000/0x2000)=nil, &(0x7f0000c5c000/0x2000)=nil, 0x9}, {&(0x7f0000851000/0x2000)=nil, &(0x7f0000025000/0x3000)=nil, 0x3}, {&(0x7f0000ff9000/0x3000)=nil, &(0x7f00004ca000/0x2000)=nil, 0x10200000000006}, {&(0x7f0000026000/0x4000)=nil, &(0x7f0000164000/0x1000)=nil, 0xfffd}, {&(0x7f0000831000/0x3000)=nil, &(0x7f00001ae000/0x3000)=nil, 0x3}, {&(0x7f0000ed8000/0x3000)=nil, &(0x7f0000479000/0x4000)=nil, 0x5ba3}], './file0\x00', 0x172}) r1 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) ioctl$TIOCSETA(r1, 0xc1084413, &(0x7f0000000040)={0x403, 0x3, 0x20, 0x6, '!\r\x00\x00\x00\b\x00', 0x4, 0x8}) close(r0) r2 = syz_open_pts() ioctl$FIOASYNC(r0, 0x80047470, &(0x7f0000000140)=0x2) ioctl$TIOCSTOP(r2, 0x2000746f) read(r0, &(0x7f0000000200)=""/162, 0xa2) 1.162183ms ago: executing program 5 (id=83): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) setegid(r1) setgid(r1) sysctl$kern(&(0x7f0000000040)={0x1, 0x32}, 0x2, &(0x7f0000000180)="5f2a1ff1", &(0x7f00000000c0)=0x2b, &(0x7f0000001180), 0x4) sysctl$hw(&(0x7f0000000000)={0x6, 0x2}, 0x2, &(0x7f0000000040)="d97478b1e892baa2ef007ed36dc8056847cc72e2f2c4edb4f5c030fe4485a4d6", &(0x7f0000000080)=0x20, &(0x7f0000000100)="c471337d13c8a1893f792ea04eddd508846ae87472e13427bd0c00b823eadae4ef0dae66beae45609e79", 0x2a) 0s ago: executing program 0 (id=84): mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x5900) (async) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$BIOCSETIF(r0, 0x80084904, &(0x7f0000000380)={'tap', 0x0}) (async) sysctl$net_inet6_icmp6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$BIOCSETIF(r0, 0x40384900, 0x0) close(r0) socket(0x11, 0x3, 0x0) (async) sendto$unix(0xffffffffffffffff, &(0x7f0000000180)="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", 0xffffffffffffff44, 0x1, 0x0, 0x34b03b8b2f004139) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.39' (ED25519) to the list of known hosts. uvn_flush: obj=0xfffffd8066136630, offset=0x0. error during pageout. uvn_flush: WARNING: changes to page may be lost! pckbd_enable: command error H@ümode = 0100400, inum = 107123, fs = / panic: ffs_valloc: dup alloc Stopped at db_enter+0x25: addq $0x8,%rsp TID PID UID PRFLAGS PFLAGS CPU COMMAND *451444 68940 0 0 0x4000000 0K syz-executor 322278 9855 0 0x2 0x1 1 syz-executor db_enter() at db_enter+0x25 panic(ffffffff83365f40) at panic+0x1e5 ffs_inode_alloc(fffffd806bd45980,8029,fffffd80097fb5b0,ffff80003c469380) at ffs_inode_alloc+0x94e ufs_makeinode(8029,fffffd805e160c18,ffff80003c4696b0,ffff80003c4696e0) at ufs_makeinode+0xcd ufs_create(ffff80003c469430) at ufs_create+0x4e VOP_CREATE(fffffd805e160c18,ffff80003c4696b0,ffff80003c4696e0,ffff80003c4694b0) at VOP_CREATE+0xfe vn_open(ffff80003c469680,201,29) at vn_open+0x34d doopenat(ffff80003c423250,ffffff9c,200000000080,200,29,ffff80003c469830) at doopenat+0x35b syscall(ffff80003c4698e0) at syscall+0xbd4 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x36ff156be80, count: 5 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{0}> ddb{0}> set $lines = 0 ddb{0}> set $maxwidth = 0 ddb{0}> show panic *cpu0: ffs_valloc: dup alloc ddb{0}> trace db_enter() at db_enter+0x25 panic(ffffffff83365f40) at panic+0x1e5 ffs_inode_alloc(fffffd806bd45980,8029,fffffd80097fb5b0,ffff80003c469380) at ffs_inode_alloc+0x94e ufs_makeinode(8029,fffffd805e160c18,ffff80003c4696b0,ffff80003c4696e0) at ufs_makeinode+0xcd ufs_create(ffff80003c469430) at ufs_create+0x4e VOP_CREATE(fffffd805e160c18,ffff80003c4696b0,ffff80003c4696e0,ffff80003c4694b0) at VOP_CREATE+0xfe vn_open(ffff80003c469680,201,29) at vn_open+0x34d doopenat(ffff80003c423250,ffffff9c,200000000080,200,29,ffff80003c469830) at doopenat+0x35b syscall(ffff80003c4698e0) at syscall+0xbd4 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x36ff156be80, count: -10 ddb{0}> show registers rdi 0 rsi 0x1 rbp 0xffff80003c469110 rbx 0xffffffff837ceddf cpu_info_full_primary+0x2ddf rdx 0xffff800001482640 rcx 0xffff80003c423250 rax 0xffffffff837cdff0 cpu_info_full_primary+0x1ff0 r8 0x101010101010101 r9 0x8080808080808080 r10 0xfcf631fe3a1903c2 r11 0xe7835e975d692985 r12 0xffffffff837cebe0 cpu_info_full_primary+0x2be0 r13 0 r14 0 r15 0x1 rip 0xffffffff8324b8f5 db_enter+0x25 cs 0x8 rflags 0x246 rsp 0xffff80003c469100 ss 0x10 db_enter+0x25: addq $0x8,%rsp ddb{0}> show proc PROC (syz-executor) tid=451444 pid=68940 tcnt=3 stat=onproc flags process=0 proc=4000000 runpri=17, usrpri=50, slppri=17, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff80003c423cb0,0xffff8000fffefa18 process=0xffff80002a3cce88 user=0xffff80003c464000, vmspace=0xfffffd806c104b90 estcpu=36, cpticks=1, pctcpu=0.0, user=0, sys=1, intr=0 ddb{0}> ps PID TID PPID UID S FLAGS WAIT COMMAND 68940 426230 67011 0 2 0 syz-executor *68940 451444 67011 0 7 0x4000000 syz-executor 68940 511405 67011 0 3 0x4000080 fsleep syz-executor 45007 17779 33201 0 2 0xc80 syz-executor 45007 155937 33201 0 3 0x4000080 fsleep syz-executor 45007 316218 33201 0 3 0x4000080 bell syz-executor 17848 116980 9855 0 2 0xc80 syz-executor 17848 164919 9855 0 3 0x4000080 kqpoll syz-executor 17848 201803 9855 0 3 0x4000080 fsleep syz-executor 56264 161498 1380 0 2 0xc82 syz-executor 67011 149673 1380 0 2 0xc82 syz-executor 33201 46544 1380 0 2 0xc82 syz-executor 9855 322278 1380 0 7 0x3 syz-executor 10451 374216 1380 0 3 0x82 piperd syz-executor 1380 309425 33951 0 3 0x82 wait syz-executor 33951 259778 72035 0 3 0x10008a sigsusp ksh 72035 253939 63563 0 3 0x98 kqread sshd-session 63563 251511 3157 0 3 0x92 kqread sshd-session 64827 422402 1 0 3 0x100083 ttyin getty 3157 343207 1 0 3 0x88 kqread sshd 94926 217424 92339 74 3 0x1100092 bpf pflogd 92339 483110 1 0 3 0x80 sbwait pflogd 11772 427715 8780 73 3 0x1100090 kqread syslogd 8780 81252 1 0 3 0x100082 sbwait syslogd 79370 34038 1 0 3 0x100080 kqread resolvd 88569 464380 15703 77 3 0x100092 kqread dhcpleased 64307 43131 15703 77 3 0x100092 kqread dhcpleased 15703 220319 1 0 3 0x80 kqread dhcpleased 89621 374289 0 0 3 0x14200 bored smr 37875 166462 0 0 3 0x14200 pgzero zerothread 86434 352839 0 0 3 0x14200 aiodoned aiodoned 21455 348506 0 0 3 0x14200 syncer update 32710 159999 0 0 3 0x14200 cleaner cleaner 29686 318817 0 0 3 0x14200 reaper reaper 13048 465501 0 0 3 0x14200 pgdaemon pagedaemon 66116 47158 0 0 3 0x14200 bored viomb 23780 339988 0 0 3 0x40014200 acpi0 acpi0 79213 188215 0 0 3 0x40014200 idle1 37109 303751 0 0 3 0x14200 bored softnet1 21702 274808 0 0 3 0x14200 bored softnet0 42949 106030 0 0 3 0x14200 bored systqmp 20816 503519 0 0 3 0x14200 bored systq 93361 106096 0 0 3 0x14200 tmoslp softclockmp 97012 248178 0 0 3 0x40014200 tmoslp softclock 26589 179395 0 0 3 0x40014200 idle0 1 241831 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb{0}> show all locks Process 68940 (syz-executor) thread 0xffff80003c423250 (451444) exclusive kernel_lock &kernel_lock r = 0 (0xffffffff839def08) #0 witness_lock+0x5f1 #1 __mp_acquire_count+0x58 #2 sleep_finish+0x2d8 #3 biowait+0xc6 #4 ffs_vget+0x283 #5 ffs_inode_alloc+0x279 #6 ufs_makeinode+0xcd #7 ufs_create+0x4e #8 VOP_CREATE+0xfe #9 vn_open+0x34d #10 doopenat+0x35b #11 syscall+0xbd4 #12 Xsyscall+0x128 exclusive rrwlock inode r = 0 (0xfffffd806e0e3240) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 rrw_enter+0xc6 #3 VOP_LOCK+0xa3 #4 ufs_ihashins+0x4f #5 ffs_vget+0x187 #6 ffs_inode_alloc+0x279 #7 ufs_makeinode+0xcd #8 ufs_create+0x4e #9 VOP_CREATE+0xfe #10 vn_open+0x34d #11 doopenat+0x35b #12 syscall+0xbd4 #13 Xsyscall+0x128 exclusive rrwlock inode r = 0 (0xfffffd806bd45a20) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 rrw_enter+0xc6 #3 VOP_LOCK+0xa3 #4 vn_lock+0xa4 #5 vfs_lookup+0x11c #6 namei+0x7ca #7 vn_open+0x1f1 #8 doopenat+0x35b #9 syscall+0xbd4 #10 Xsyscall+0x128 ddb{0}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 10194 11024K 11168K 166960K 11338 0 pcb 17 12K 12K 166960K 33 0 rtable 247 7K 7K 166960K 379 0 pf 34 17K 19K 166960K 50 0 ifaddr 43 7K 7K 166960K 46 0 ifgroup 55 2K 2K 166960K 60 0 sysctl 3 1K 9K 166960K 8 0 counters 68 36K 37K 166960K 70 0 ioctlops 0 0K 4K 166960K 1493 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1338 84K 85K 166960K 1417 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 1K 166960K 2 0 VM map 2 1K 1K 166960K 2 0 sem 12 0K 0K 166960K 12 0 dirhash 12 2K 2K 166960K 15 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 14 49K 89K 166960K 211 0 proc 72 115K 147K 166960K 542 0 subproc 72 4K 4K 166960K 72 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 11 0 in_multi 99 7K 7K 166960K 99 0 ether_multi 1 0K 0K 166960K 1 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 55 254K 254K 166960K 55 0 exec 0 0K 1K 166960K 419 0 fusefs mount 1 32K 32K 166960K 1 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 229 159K 169K 166960K 3845 0 UVM aobj 4 2K 2K 166960K 4 0 pinsyscall 39 78K 101K 166960K 1365 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 0K 166960K 5 0 NDP 12 0K 2K 166960K 29 0 temp 37 8642K 8707K 166960K 6815 0 kqueue 13 20K 26K 166960K 34 0 SYN cache 2 16K 16K 166960K 2 0 ddb{0}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 26 0 0 1 0 1 1 0 8 0 rtpcb 120 40 0 37 1 0 1 1 0 8 0 rtentry 176 113 0 1 6 0 6 6 0 8 0 unpcb 144 69 0 48 1 0 1 1 0 8 0 syncache 336 3 0 3 1 0 1 1 0 8 1 tcpcb 736 83 0 79 7 0 7 7 0 8 6 arp 136 19 0 0 1 0 1 1 0 8 0 inpcb 328 181 0 173 7 0 7 7 0 8 6 nd6 152 25 0 0 1 0 1 1 0 8 0 pkpcb 40 1 0 1 1 0 1 1 0 8 1 kcovpl 48 8 0 0 1 0 1 1 0 8 0 pffrag 232 4 0 2 1 0 1 1 0 482 0 pffrnode 88 4 0 2 1 0 1 1 0 8 0 pffrent 40 6 0 4 1 0 1 1 0 8 0 pfosfp 40 1428 0 1005 5 0 5 5 0 8 0 pfosfpen 112 1428 0 714 21 0 21 21 0 8 0 pfstitem 24 21 0 0 1 0 1 1 0 8 0 pfstkey 128 21 0 0 1 0 1 1 0 8 0 pfstate 384 21 0 0 3 0 3 3 0 8 0 pfrule 1344 22 0 17 2 1 1 2 0 8 0 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 454 0 0 29 0 29 29 0 8 0 art_table 40 455 0 0 5 0 5 5 0 8 0 art_node 32 113 0 12 1 0 1 1 0 8 0 semapl 112 10 0 0 1 0 1 1 0 8 0 shmpl 112 1 0 0 1 0 1 1 0 8 0 dirhash 1024 19 0 2 3 0 3 3 0 8 0 dino2pl 256 1714 0 202 96 0 96 96 0 8 0 ffsino 296 1714 0 202 117 0 117 117 0 8 0 nchpl 144 2002 0 302 64 0 64 64 0 8 0 vnodes 216 1823 0 0 102 0 102 102 0 8 0 namei 1024 6087 0 6086 1 0 1 1 0 8 0 percpumem 16 50 0 1 1 0 1 1 0 8 0 kstatmem 264 28 0 2 2 0 2 2 0 8 0 scxspl 216 9060 0 9060 3 2 1 2 1 8 1 plimitpl 152 42 0 25 1 0 1 1 0 8 0 sigapl 424 528 0 484 7 0 7 7 0 8 1 knotepl 120 296 0 0 9 0 9 9 0 8 0 kqueuepl 224 54 0 44 2 0 2 2 0 8 0 pipepl 344 125 0 97 3 0 3 3 0 8 0 fdescpl 528 512 0 484 3 0 3 3 0 8 0 filepl 160 1967 0 1749 13 0 13 13 0 8 3 lockfpl 104 29 0 26 1 0 1 1 0 8 0 lockfspl 48 14 0 11 1 0 1 1 0 8 0 sessionpl 144 22 0 13 1 0 1 1 0 8 0 pgrppl 48 30 0 13 1 0 1 1 0 8 0 ucredpl 104 160 0 147 1 0 1 1 0 8 0 zombiepl 144 488 0 484 1 0 1 1 0 8 0 processpl 1232 528 0 484 5 0 5 5 0 8 1 procpl 664 657 0 607 6 0 6 6 0 8 1 sockpl 752 297 0 265 11 0 11 11 0 8 7 mcl64k 65536 4 0 0 1 0 1 1 0 8 0 mcl16k 16384 1 0 0 1 0 1 1 0 8 0 mcl8k 8192 3 0 0 1 0 1 1 0 8 0 mcl4k 4096 112 0 0 14 0 14 14 0 8 0 mcl2k2 2112 1 0 0 1 0 1 1 0 8 0 mcl2k 2048 29 0 0 4 0 4 4 0 8 0 mtagpl 96 4 0 0 1 0 1 1 0 8 0 mbufpl 256 172 0 0 11 0 11 11 0 8 0 bufpl 280 3780 0 132 261 0 261 261 0 8 0 anonpl 32 10048 0 0 83 1 82 82 0 246 0 amapchunkpl 152 11005 0 10544 29 0 29 29 0 158 5 amappl16 200 2355 0 2328 18 0 18 18 0 8 8 amappl15 192 5 0 5 1 1 0 1 0 8 0 amappl14 184 24 0 24 1 1 0 1 0 8 0 amappl13 176 437 0 435 1 0 1 1 0 8 0 amappl12 168 878 0 839 3 0 3 3 0 8 0 amappl11 160 2 0 2 1 1 0 1 0 8 0 amappl10 152 53 0 39 1 0 1 1 0 8 0 amappl9 144 251 0 251 1 1 0 1 0 8 0 amappl8 136 30 0 27 1 0 1 1 0 8 0 amappl7 128 85 0 84 1 0 1 1 0 8 0 amappl6 120 284 0 271 1 0 1 1 0 8 0 amappl5 112 87 0 77 1 0 1 1 0 8 0 amappl4 104 439 0 408 1 0 1 1 0 8 0 amappl3 96 1773 0 1692 4 1 3 3 0 8 0 amappl2 88 642 0 569 2 0 2 2 0 8 0 amappl1 80 9517 0 8942 14 0 14 14 0 8 0 amappl 88 3081 0 2929 5 0 5 5 0 92 0 uvmvnodes 80 1823 0 0 38 0 38 38 0 8 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 3 0 0 1 0 1 1 0 8 0 uaddrrnd 24 512 0 484 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 512 0 484 1 0 1 1 0 8 0 vmmpekpl 168 5986 0 5946 2 0 2 2 0 8 0 vmmpepl 168 41025 0 39270 99 0 99 99 0 357 3 vmsppl 488 511 0 484 5 0 5 5 0 8 1 rwobjpl 80 16571 0 13839 63 0 63 63 0 8 0 pdppl 4096 1032 0 968 100 28 72 84 0 8 8 pvpl 32 16403 0 0 133 0 133 133 0 265 0 pmappl 256 511 0 484 3 0 3 3 0 8 0 extentpl 40 45 0 27 1 0 1 1 0 8 0 phpool 112 276 0 30 8 0 8 8 0 8 0 ddb{0}> machine ddbcpu 0 Invalid cpu 0 ddb{0}> trace db_enter() at db_enter+0x25 panic(ffffffff83365f40) at panic+0x1e5 ffs_inode_alloc(fffffd806bd45980,8029,fffffd80097fb5b0,ffff80003c469380) at ffs_inode_alloc+0x94e ufs_makeinode(8029,fffffd805e160c18,ffff80003c4696b0,ffff80003c4696e0) at ufs_makeinode+0xcd ufs_create(ffff80003c469430) at ufs_create+0x4e VOP_CREATE(fffffd805e160c18,ffff80003c4696b0,ffff80003c4696e0,ffff80003c4694b0) at VOP_CREATE+0xfe vn_open(ffff80003c469680,201,29) at vn_open+0x34d doopenat(ffff80003c423250,ffffff9c,200000000080,200,29,ffff80003c469830) at doopenat+0x35b syscall(ffff80003c4698e0) at syscall+0xbd4 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x36ff156be80, count: -10 ddb{0}> machine ddbcpu 1 Stopped at x86_ipi_db+0x27: addq $0x8,%rsp x86_ipi_db(ffff8000299edff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __mp_lock(ffffffff839ded00) at __mp_lock+0x192 ktrsysret(ffff80002a2727d8,5b,0,ffff80002a352710) at ktrsysret+0xde syscall(ffff80002a3527c0) at syscall+0xa50 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7b5890048870, count: 8 ddb{1}> trace x86_ipi_db(ffff8000299edff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __mp_lock(ffffffff839ded00) at __mp_lock+0x192 ktrsysret(ffff80002a2727d8,5b,0,ffff80002a352710) at ktrsysret+0xde syscall(ffff80002a3527c0) at syscall+0xa50 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7b5890048870, count: -7