last executing test programs: 12.70955108s ago: executing program 1 (id=1006): r0 = geteuid() r1 = syz_open_pts() ioctl$TIOCSBRK(r1, 0x2000747b) seteuid(r0) open(&(0x7f0000000540)='./bus\x00', 0x0, 0x0) 12.46189215s ago: executing program 1 (id=1009): chmod(&(0x7f0000000040)='.\x00', 0x35e) openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000000100), 0x10000, 0x0) sysctl$kern(0x0, 0x0, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71", &(0x7f0000000000)=0x15, 0x0, 0x0) execve(0x0, &(0x7f0000000000)=[&(0x7f0000000100)='///'], 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mkdir(&(0x7f0000000100)='./file0\x00', 0x49) r0 = getuid() setuid(r0) semget$private(0x0, 0x2, 0x423) lchown(&(0x7f0000000080)='./file1\x00', r0, 0x0) mkdir(&(0x7f0000000000)='./file1\x00', 0x6) r1 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f00000001c0), 0x8, 0x0) mkdirat(r1, &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x82) rename(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') 12.116418434s ago: executing program 1 (id=1018): setuid(0xee01) r0 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) fchdir(r0) pipe(&(0x7f0000000640)) r1 = syz_open_pts() readv(r1, &(0x7f00000014c0)=[{&(0x7f00000000c0)=""/47, 0x2f}], 0x1) ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000040)={0x82, 0x3, 0x100000f, 0x200, "d76c1f52000000ef000e00001d000000000400", 0x7ff}) execve(0x0, 0x0, 0x0) ioctl$TIOCMBIS(r1, 0x8004746c, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x7, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x5, 0x2a2, 0xffffffffffffffff, 0x0, 0x8000000000000003, 0x80000000000000c, 0x100000001, 0x40}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x2, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94", &(0x7f0000000080)=0xe, 0x0, 0x0) sync() select(0x40, &(0x7f0000000000)={0x29, 0xfe, 0x29d4cbe1, 0x1000000010, 0x800, 0x1, 0x8, 0x10}, 0x0, 0x0, 0x0) getrusage(0x1, &(0x7f0000000000)) rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='./file0\x00') 11.207971764s ago: executing program 1 (id=1032): mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x5d4a) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x20, 0x0) ioctl$FIONREAD(r0, 0x4004667f, &(0x7f0000002400)) open(&(0x7f0000000040)='./file0\x00', 0x200, 0x0) acct(&(0x7f00000000c0)='./file0\x00') 8.828116861s ago: executing program 1 (id=1042): r0 = socket(0x2, 0x4001, 0x11) r1 = openat$klog(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$LIOCSFD(r1, 0x80046c7f, &(0x7f00000001c0)=r0) shutdown(r0, 0x1) r2 = socket(0x18, 0x2, 0x0) setsockopt(r2, 0x1000000000029, 0xb, &(0x7f0000003680)='\x00\x00\x00\x00', 0x4) r3 = openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TIOCSETA(r3, 0xc0504417, &(0x7f0000000740)={0x0, 0x0, 0x4, 0xfffffffd, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x008\x00', 0x0, 0xfffffffc}) setsockopt(r2, 0x1000000029, 0xc, 0x0, 0x0) getsockname(r0, &(0x7f0000000340)=@in, &(0x7f00000003c0)=0xc) r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0x10, 0x0) mknod(0x0, 0x2000, 0x637d) open(&(0x7f0000000800)='./file1\x00', 0x800, 0xba) shmget(0x0, 0x3000, 0x360, &(0x7f0000ffc000/0x3000)=nil) ioctl$BIOCSETIF(r4, 0x8020426c, &(0x7f0000000180)={'tap', 0x0}) ioctl$BIOCSETF(r4, 0x80104267, &(0x7f0000000240)={0x3, &(0x7f0000000380)=[{0xb1, 0x1, 0x89, 0x7bf}, {0x40, 0x3, 0x0, 0x8}, {0x6, 0x2, 0x8, 0x100cfa}]}) r5 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) ioctl$BIOCSRTIMEOUT(r5, 0x8010426d, &(0x7f0000000040)={0x0, 0x1}) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x637e) select(0x40, &(0x7f0000000180)={0x1d5d3, 0xf9, 0x3, 0x80000003, 0x4, 0x181c, 0x4, 0x2}, 0x0, 0x0, 0x0) r6 = kqueue() kevent(r6, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) r7 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x22) writev(r6, &(0x7f0000000140)=[{&(0x7f0000000080)="bf30cbcd28783b63fa9dc486a7817494", 0x10}], 0x1) kevent(0xffffffffffffffff, 0x0, 0xfffffff1, &(0x7f00000002c0)=[{{}, 0xfffffffffffffff9, 0x0, 0x0, 0x0, 0x9}, {{}, 0xfffffffffffffff9, 0xc0, 0x20000000, 0x8000000000000001, 0x46ad}, {{}, 0xfffffffffffffff8, 0x1, 0xf0000000, 0x1, 0x1000000000000008}, {{}, 0xfffffffffffffff8, 0x20, 0x10, 0xffffffff, 0xc3d}, {{}, 0xfffffffffffffffb, 0x40, 0x1, 0x9, 0x3}, {{}, 0xffffffffffffffff, 0x6, 0x1, 0xe, 0x10000}, {{}, 0xfffffffffffffffd, 0x14, 0x1, 0x2, 0x100000001}, {{}, 0xfffffffffffffff8, 0x80, 0x8, 0x100, 0x2}], 0xb19, 0x0) ioctl$FIONBIO(r7, 0x82907003, &(0x7f0000000140)=0x2) ioctl$BIOCSBLEN(r5, 0xc0044266, &(0x7f00000000c0)=0x34) ioctl$BIOCSETIF(r5, 0x8020426c, &(0x7f0000000500)={'tap', 0x0}) syz_extract_tcp_res(0x0, 0x6, 0xfff) 4.551759512s ago: executing program 0 (id=1085): setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) munmap(&(0x7f0000002000/0x3000)=nil, 0x3000) r0 = open$dir(&(0x7f0000000280)='./file0\x00', 0xf02, 0x106) mprotect(&(0x7f0000231000/0x3000)=nil, 0x3000, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) syz_emit_ethernet(0x1000e, &(0x7f0000000000)={@broadcast, @random="94ea09066dbd", [], {@ipv6={0x86dd, {0x0, 0x6, "db8344", 0x100000005, 0x11, 0x0, @rand_addr="fed38d5ba80b9e61cd0c535a9800", @mcast2, {[], @udp={{0x3, 0x2, 0xffaa}}}}}}}) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x2812, r1, 0x3) write(r1, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x2012, r0, 0x0) r2 = socket(0x800000018, 0x1, 0x0) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x8000, 0x0) ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSETF(r3, 0x80104267, &(0x7f0000000000)={0x3, &(0x7f0000000100)=[{0x1, 0x54, 0x27, 0x2000001}, {0x50, 0x11, 0x4, 0x8}, {0x6, 0xaa, 0x2, 0x4000008}]}) syz_emit_ethernet(0x1000e, &(0x7f0000001500)=ANY=[]) getsockname$unix(r2, 0x0, &(0x7f0000000100)=0x24) sendmmsg(r2, &(0x7f0000000840)={&(0x7f0000000800)={&(0x7f00000000c0)=@in={0x2, 0x2}, 0xc, &(0x7f0000000700)=[{&(0x7f00000002c0)="e56f41c9ceb8f8af997c97b53bb7bea278991388949d6a137f31badddbd275f467b878c63b2245e82d124b68aa15943fb39ee43179ba279ac59a930d1bbdaf2c5bd760316add84ba362c59b208a6cf7a99c60d7e263125b00a63319fedeae434a90d3c53f25e1d39b56e497cc64a5b8f8145905b6b1bd111ea6d", 0x7a}, {&(0x7f0000000340)="9db0eba0d669fe41beef0d26ba58a9dc960726cb3bb51366664ae253583afdf2bba2b0e015799f6676f4943e21ffe633c885ad41963198d2d5fe427323569c4f28f5db9ec1aa5df62d958f407d8714cdc2dab29d51b6d4145ea3a292288504748503aad06534addeb966da8cf3d829a04721cc945edb2f0d6e5eb6e941435e4b0a93dbfc93d8f93717d8e4a26478d68da97668c28e86964ee5ad14458ae2f1d4a9f5f6937030d96a77f8060b7e4e0be99fb6c4fb5b41ea4e2711f424279ef7f7bd679459a139b4c89dc56ef2124ee8ef76cbd5cbafc7acc2530903dfb0837868de25e3852bbf67f910b963e01669799b", 0xf0}, {&(0x7f0000000440)="5dce16aa853b09f52d857b8d1dcbb14a2cd8dd12eb3b6d9016536962875dd09ccff93304bc9f8601b281f148415a01323d4a9eea23114f8f53b41e46bbb596e8cbfb7cc99095ea0301881b7ada4e7b8ceaf67007328c5e1d6b568d33ef575bc6014ee7b3", 0x64}, {&(0x7f0000000500)="ea011bcce9f64a8eb1efe46eea30fbcc7805ad3bf5abaf7f9e10b70935a2c127bf9fce2630f3d0e84140b7d3e2f82028871894fc7a182b934ee9ea9683f3fc34861d232c719d095ac038115c1b79a32aeb9f93ce4ff132388ca30a3e", 0x5c}, {&(0x7f0000000580)="04de30fc8b4a268873c88edd3f61b6177d85e1f17c533f657e06b4724ace4c076f4b353586b52e4ff1b1440d799564ba03a3807765be2f26809d7c98b35304632439949bf3444c11694c1cd69551cdca24370779ee25a2b10b64e8110a56cd12d5322aa960851f378a2b732f2b9de1415abd2d0b33faee11d59af94bc9c41b49c259f284530b31a0ea40f5084f6f27adcf9f714a04e1c435defcd27b52dc22039d488a80af7dd19f43fc9c6b4d28725b5b", 0xb1}, {&(0x7f0000000640)="c5a97ffd7159eda5f7d4507ade20d13faa2db04e5f60b38a5670ab975665e19fb559f8797e29d87250a5b8f7639bab6f314ca20d07321093478db1888c7504a538f93377bcf811eee671791d46bc14259842d4f5dd09f1d8b8", 0x59}, {&(0x7f00000006c0)="8b90d109262b91475508266a0c4dcf14ce67c62550c85dd2417b9a8d6b81e524ec11afae0b145fa5b8b43fcba3c7", 0x2e}], 0x7, &(0x7f0000000780)=ANY=[@ANYBLOB="280000000000000001000000020000000ead721ecbfd6a2fb8e3a6dde402d664a75dc0e3000000002000000000000000ffff0000060015be9f8f0522c5d2f3928000000000000000"], 0x48}, 0x6}, 0x10, 0x0) close(r2) mprotect(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4) mprotect(&(0x7f0000231000/0x1000)=nil, 0x1000, 0x0) ioctl$TIOCSTOP(r1, 0x2000746f) setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) (async) munmap(&(0x7f0000002000/0x3000)=nil, 0x3000) (async) open$dir(&(0x7f0000000280)='./file0\x00', 0xf02, 0x106) (async) mprotect(&(0x7f0000231000/0x3000)=nil, 0x3000, 0x0) (async) open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) (async) syz_emit_ethernet(0x1000e, &(0x7f0000000000)={@broadcast, @random="94ea09066dbd", [], {@ipv6={0x86dd, {0x0, 0x6, "db8344", 0x100000005, 0x11, 0x0, @rand_addr="fed38d5ba80b9e61cd0c535a9800", @mcast2, {[], @udp={{0x3, 0x2, 0xffaa}}}}}}}) (async) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x2812, r1, 0x3) (async) write(r1, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) (async) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x2012, r0, 0x0) (async) socket(0x800000018, 0x1, 0x0) (async) openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x8000, 0x0) (async) ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) (async) ioctl$BIOCSETF(r3, 0x80104267, &(0x7f0000000000)={0x3, &(0x7f0000000100)=[{0x1, 0x54, 0x27, 0x2000001}, {0x50, 0x11, 0x4, 0x8}, {0x6, 0xaa, 0x2, 0x4000008}]}) (async) syz_emit_ethernet(0x1000e, &(0x7f0000001500)=ANY=[]) (async) getsockname$unix(r2, 0x0, &(0x7f0000000100)=0x24) (async) sendmmsg(r2, &(0x7f0000000840)={&(0x7f0000000800)={&(0x7f00000000c0)=@in={0x2, 0x2}, 0xc, &(0x7f0000000700)=[{&(0x7f00000002c0)="e56f41c9ceb8f8af997c97b53bb7bea278991388949d6a137f31badddbd275f467b878c63b2245e82d124b68aa15943fb39ee43179ba279ac59a930d1bbdaf2c5bd760316add84ba362c59b208a6cf7a99c60d7e263125b00a63319fedeae434a90d3c53f25e1d39b56e497cc64a5b8f8145905b6b1bd111ea6d", 0x7a}, {&(0x7f0000000340)="9db0eba0d669fe41beef0d26ba58a9dc960726cb3bb51366664ae253583afdf2bba2b0e015799f6676f4943e21ffe633c885ad41963198d2d5fe427323569c4f28f5db9ec1aa5df62d958f407d8714cdc2dab29d51b6d4145ea3a292288504748503aad06534addeb966da8cf3d829a04721cc945edb2f0d6e5eb6e941435e4b0a93dbfc93d8f93717d8e4a26478d68da97668c28e86964ee5ad14458ae2f1d4a9f5f6937030d96a77f8060b7e4e0be99fb6c4fb5b41ea4e2711f424279ef7f7bd679459a139b4c89dc56ef2124ee8ef76cbd5cbafc7acc2530903dfb0837868de25e3852bbf67f910b963e01669799b", 0xf0}, {&(0x7f0000000440)="5dce16aa853b09f52d857b8d1dcbb14a2cd8dd12eb3b6d9016536962875dd09ccff93304bc9f8601b281f148415a01323d4a9eea23114f8f53b41e46bbb596e8cbfb7cc99095ea0301881b7ada4e7b8ceaf67007328c5e1d6b568d33ef575bc6014ee7b3", 0x64}, {&(0x7f0000000500)="ea011bcce9f64a8eb1efe46eea30fbcc7805ad3bf5abaf7f9e10b70935a2c127bf9fce2630f3d0e84140b7d3e2f82028871894fc7a182b934ee9ea9683f3fc34861d232c719d095ac038115c1b79a32aeb9f93ce4ff132388ca30a3e", 0x5c}, {&(0x7f0000000580)="04de30fc8b4a268873c88edd3f61b6177d85e1f17c533f657e06b4724ace4c076f4b353586b52e4ff1b1440d799564ba03a3807765be2f26809d7c98b35304632439949bf3444c11694c1cd69551cdca24370779ee25a2b10b64e8110a56cd12d5322aa960851f378a2b732f2b9de1415abd2d0b33faee11d59af94bc9c41b49c259f284530b31a0ea40f5084f6f27adcf9f714a04e1c435defcd27b52dc22039d488a80af7dd19f43fc9c6b4d28725b5b", 0xb1}, {&(0x7f0000000640)="c5a97ffd7159eda5f7d4507ade20d13faa2db04e5f60b38a5670ab975665e19fb559f8797e29d87250a5b8f7639bab6f314ca20d07321093478db1888c7504a538f93377bcf811eee671791d46bc14259842d4f5dd09f1d8b8", 0x59}, {&(0x7f00000006c0)="8b90d109262b91475508266a0c4dcf14ce67c62550c85dd2417b9a8d6b81e524ec11afae0b145fa5b8b43fcba3c7", 0x2e}], 0x7, &(0x7f0000000780)=ANY=[@ANYBLOB="280000000000000001000000020000000ead721ecbfd6a2fb8e3a6dde402d664a75dc0e3000000002000000000000000ffff0000060015be9f8f0522c5d2f3928000000000000000"], 0x48}, 0x6}, 0x10, 0x0) (async) close(r2) (async) mprotect(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4) (async) mprotect(&(0x7f0000231000/0x1000)=nil, 0x1000, 0x0) (async) ioctl$TIOCSTOP(r1, 0x2000746f) (async) 4.217551767s ago: executing program 1 (id=1042): r0 = socket(0x2, 0x4001, 0x11) r1 = openat$klog(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$LIOCSFD(r1, 0x80046c7f, &(0x7f00000001c0)=r0) shutdown(r0, 0x1) r2 = socket(0x18, 0x2, 0x0) setsockopt(r2, 0x1000000000029, 0xb, &(0x7f0000003680)='\x00\x00\x00\x00', 0x4) r3 = openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TIOCSETA(r3, 0xc0504417, &(0x7f0000000740)={0x0, 0x0, 0x4, 0xfffffffd, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x008\x00', 0x0, 0xfffffffc}) setsockopt(r2, 0x1000000029, 0xc, 0x0, 0x0) getsockname(r0, &(0x7f0000000340)=@in, &(0x7f00000003c0)=0xc) r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0x10, 0x0) mknod(0x0, 0x2000, 0x637d) open(&(0x7f0000000800)='./file1\x00', 0x800, 0xba) shmget(0x0, 0x3000, 0x360, &(0x7f0000ffc000/0x3000)=nil) ioctl$BIOCSETIF(r4, 0x8020426c, &(0x7f0000000180)={'tap', 0x0}) ioctl$BIOCSETF(r4, 0x80104267, &(0x7f0000000240)={0x3, &(0x7f0000000380)=[{0xb1, 0x1, 0x89, 0x7bf}, {0x40, 0x3, 0x0, 0x8}, {0x6, 0x2, 0x8, 0x100cfa}]}) r5 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) ioctl$BIOCSRTIMEOUT(r5, 0x8010426d, &(0x7f0000000040)={0x0, 0x1}) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x637e) select(0x40, &(0x7f0000000180)={0x1d5d3, 0xf9, 0x3, 0x80000003, 0x4, 0x181c, 0x4, 0x2}, 0x0, 0x0, 0x0) r6 = kqueue() kevent(r6, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) r7 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x22) writev(r6, &(0x7f0000000140)=[{&(0x7f0000000080)="bf30cbcd28783b63fa9dc486a7817494", 0x10}], 0x1) kevent(0xffffffffffffffff, 0x0, 0xfffffff1, &(0x7f00000002c0)=[{{}, 0xfffffffffffffff9, 0x0, 0x0, 0x0, 0x9}, {{}, 0xfffffffffffffff9, 0xc0, 0x20000000, 0x8000000000000001, 0x46ad}, {{}, 0xfffffffffffffff8, 0x1, 0xf0000000, 0x1, 0x1000000000000008}, {{}, 0xfffffffffffffff8, 0x20, 0x10, 0xffffffff, 0xc3d}, {{}, 0xfffffffffffffffb, 0x40, 0x1, 0x9, 0x3}, {{}, 0xffffffffffffffff, 0x6, 0x1, 0xe, 0x10000}, {{}, 0xfffffffffffffffd, 0x14, 0x1, 0x2, 0x100000001}, {{}, 0xfffffffffffffff8, 0x80, 0x8, 0x100, 0x2}], 0xb19, 0x0) ioctl$FIONBIO(r7, 0x82907003, &(0x7f0000000140)=0x2) ioctl$BIOCSBLEN(r5, 0xc0044266, &(0x7f00000000c0)=0x34) ioctl$BIOCSETIF(r5, 0x8020426c, &(0x7f0000000500)={'tap', 0x0}) syz_extract_tcp_res(0x0, 0x6, 0xfff) 3.925211247s ago: executing program 0 (id=1093): openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) (async) openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) (async) r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$WSMUXIO_LIST_DEVICES(r0, 0xc1045763, 0x0) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) close(r1) (async) close(r1) socket(0x2, 0x4001, 0x0) (async) r2 = socket(0x2, 0x4001, 0x0) connect$unix(r2, &(0x7f0000000000), 0x10) setsockopt$sock_int(r1, 0xffff, 0x1023, &(0x7f0000000040), 0xe0) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) r3 = syz_open_pts() fcntl$lock(r3, 0x8, &(0x7f0000000040)={0x3, 0x0, 0x10, 0x100000401}) openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) (async) r4 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$WSMOUSEIO_GCALIBCOORDS(r4, 0x40047477, 0x0) openat$tty(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) openat$tty(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = socket(0x18, 0x2, 0x0) setsockopt(r5, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) r6 = socket(0x2, 0x8000, 0x9) close(r6) socket(0x18, 0x2, 0x0) (async) r7 = socket(0x18, 0x2, 0x0) close(r7) r8 = socket(0x20, 0x3, 0x0) close(r8) r9 = socket(0x1b, 0x0, 0x40) setsockopt(r9, 0x1000000029, 0x23, &(0x7f0000000080)="031000086941e7c5ce5876778f181b12184c256b1ca6f583b03f959b5253027d08b90779da6a56ed10cdd9967a674820f89c4daa330fee01c76728490d1851d4ab60059f6a3f7cc45ac10500000078bbf169d0632f4ce57a508bc82acd00000000140e0343395b00737a4a00000084fc604fd6642787b31558a39bd200"/136, 0x88) (async) setsockopt(r9, 0x1000000029, 0x23, &(0x7f0000000080)="031000086941e7c5ce5876778f181b12184c256b1ca6f583b03f959b5253027d08b90779da6a56ed10cdd9967a674820f89c4daa330fee01c76728490d1851d4ab60059f6a3f7cc45ac10500000078bbf169d0632f4ce57a508bc82acd00000000140e0343395b00737a4a00000084fc604fd6642787b31558a39bd200"/136, 0x88) setsockopt(r8, 0x1000000029, 0x32, &(0x7f0000000140)="b211d7170d816685c8e360f2fa41c1a0946988b272d2dd3dc90142a84231a746e337b372e93320cff6669cbe7868de45ed3fc33719ca6df71ecec8a918458b2c10a1f8c66653b276e180e9cb9b21f9982230f575295d48889c9a920796b2dd92fc8575680b37ba955d2c15e6d7c9198ed900ab006ddfb67869b51a2216114d1ece85f593e74035f5bc054eb1dbddf42a", 0x90) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x40, 0x200}, 0x5, 0x8001, 0x24b83c97}) (async) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x40, 0x200}, 0x5, 0x8001, 0x24b83c97}) r10 = socket(0x18, 0x3, 0x1a) getsockname$inet(r10, &(0x7f00000000c0), &(0x7f0000000000)=0xffffffffffffff35) (async) getsockname$inet(r10, &(0x7f00000000c0), &(0x7f0000000000)=0xffffffffffffff35) 3.357978468s ago: executing program 0 (id=1100): sendmsg$unix(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000000)=@abs={0x0, 0x0, 0x1}, 0x8, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1400000000c4"], 0x18}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f00000002c0)="ed", 0x1) recvmmsg(r1, &(0x7f0000000880)={&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000540)=""/185, 0xb9}], 0x1, 0x0}}, 0x10, 0x1040, 0x0) read(r1, 0x0, 0x0) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r2 = open(&(0x7f0000000080)='./file0\x00', 0x800, 0xfe) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x17, 0x2000004, 0xfd6, 0x80000001, 0x7, 0x17ffe, 0x10, [{0x0, 0xb1, 0x4, 0xa24}, {0xc5c, 0xb, 0x4, 0xfffffff9}, {0x800008, 0x8, 0x200, 0x9}, {0x7ffffffe, 0x80000800, 0xba2, 0x1}, {0x3fe, 0x20007ff, 0x6, 0x4d8a}, {0x3, 0x101, 0x3, 0xb4}, {0x800000c, 0xd173, 0x81e8, 0xa}, {0x100004, 0x836, 0x6, 0x6}, {0x2, 0x87e, 0x5, 0x9}, {0x1000002, 0x2, 0xd1b, 0x2}, {0x1c5, 0x5, 0x4, 0x41ac8391}, {0x100003, 0x6, 0x20004, 0x4000000c}, {0xb8d, 0x7, 0x6de, 0x1}, {0x69a71720, 0xffffdffa, 0x8, 0x7}, {0x2137, 0x4ecf, 0xfffffff9, 0x100}, {0xfffffffe, 0x8, 0x40004, 0xc}]}) recvmsg(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r2, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r2, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) close(r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r3 = socket(0x2, 0x2, 0x0) sendmsg$unix(r3, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x400) 2.152088521s ago: executing program 0 (id=1115): ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000500)={0x2, &(0x7f00000000c0)=[{}, {0x1, 0x0, 0x0, 0x2}]}) pipe(&(0x7f0000000080)) sysctl$kern(&(0x7f00000000c0)={0x1, 0x3d}, 0x2, &(0x7f0000000000)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000040)=0x1c, 0x0, 0x0) 2.151198804s ago: executing program 7 (id=1117): chmod(&(0x7f00000000c0)='./file0\x00', 0x35e) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x3fb}) r0 = syz_open_pts() close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000a80)=@file={0xd1653077bafa0114, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}, 0xff) syz_open_pts() r2 = openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x82, 0x0) ioctl$TIOCSETA(r2, 0xc4504445, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, "97a2224ff1c14649ebb178926cc9795a6b47c1d1"}) ioctl$TIOCSETD(r0, 0x8004741b, &(0x7f0000000000)=0x8) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000080)="cff5c05664da4881da974a82388ef359025250129bdb3b8c172b3b553ae5352e3b0b2e4247b103", 0x27}], 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x2, 0x20) mkdirat(r3, &(0x7f0000000080)='./file1\x00', 0xa7210e10bc3c9de9) setuid(0xee01) r4 = socket(0x18, 0x1, 0x0) setsockopt(r4, 0x1000000000029, 0xb, &(0x7f0000003680)='\x00\x00\x00\x00', 0x4) setsockopt(r4, 0x1000000029, 0xd, &(0x7f0000000000), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x180) rename(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000040)='./file1\x00') sendto(r3, &(0x7f0000000100)="51518e125928e7466c5868767fd3862f8c1317dba975c4ea24fc", 0x1a, 0x7, &(0x7f0000000140)=@in={0x2, 0x2}, 0xc) r5 = dup(r4) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x1011, r5, 0xd42) 2.149282816s ago: executing program 0 (id=1118): setrlimit(0x8, &(0x7f0000000580)={0xa, 0x56}) r0 = syz_open_pts() close(r0) syz_open_pts() ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000180)={0x6, 0x7, 0x40001, 0xfff7ff93, "0800020006087db300000105001c670000000010", 0x7, 0x800001a3}) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x5900) execve(0x0, 0x0, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x198) ioctl$WSMUXIO_REMOVE_DEVICE(0xffffffffffffffff, 0x80085762, &(0x7f0000000040)={0x1}) r2 = socket(0x18, 0xc003, 0x3a) setsockopt(r2, 0x1000029, 0x4, &(0x7f0000000040), 0x0) r3 = open(&(0x7f0000000080)='./file0\x00', 0x8000, 0xa) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, 0x0) ioctl$VNDIOCSET(r3, 0x80184404, 0x0) setsockopt$inet6_MRT6_ADD_MIF(r2, 0x29, 0x66, 0x0, 0x0) sysctl$net_inet6_ip6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sysctl$kern(&(0x7f0000000000)={0x1, 0x4d}, 0x2, 0x0, 0x0, &(0x7f0000001440)="02000000", 0x4) close(r1) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x1043, 0x0, 0x0) r4 = syz_open_pts() ioctl$TIOCSETA(r4, 0x802c7414, &(0x7f0000000340)={0x5, 0x1, 0xfffffffe, 0x966b, "ff14e7130b1e586ca6294000", 0x40, 0x3effd}) ioctl$TIOCSETA(r4, 0x802c7414, &(0x7f0000000080)={0xc8, 0x4, 0xfffb, 0x7, "cfa377203945f671d3ed57c1edce36ad0200", 0x23a5, 0x40}) r5 = socket(0x6, 0x2, 0xe1) listen(r5, 0x3) readv(r4, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/157, 0x9d}], 0x1) syz_open_pts() ioctl$TIOCFLUSH(r4, 0x80047410, &(0x7f0000000780)=0x7) mlock(&(0x7f0000000000/0x2000)=nil, 0x2000) setreuid(0x0, 0xee01) writev(r0, &(0x7f0000000000), 0x0) 2.132198452s ago: executing program 2 (id=1119): sysctl$ddb(&(0x7f0000000000)={0x9, 0x5}, 0x2, 0x0, 0x0, &(0x7f0000001080), 0x4) r0 = syz_open_pts() ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000180)={0x10, 0x8, 0x8, 0xfffffe51, "200000b39b00ffffffffa66f3b32a9d863f0ff00"}) r1 = socket(0x11, 0x3, 0x0) recvmmsg(r1, 0x0, 0x0, 0x41, 0x0) recvmmsg(r1, 0x0, 0x0, 0x1001, &(0x7f00000006c0)={0x5, 0x6}) recvmmsg(r1, &(0x7f0000000100)={&(0x7f0000000180)={&(0x7f0000000480)=@un=@file={0x0, ""/506}, 0x1fc, 0x0, 0x0, 0x0}}, 0x10, 0x2, 0x0) lchown(0x0, 0x0, 0x0) poll(&(0x7f0000000240)=[{r0, 0x68}], 0x1, 0x2) sysctl$net_inet_divert(&(0x7f0000000000)={0x4, 0x1e, 0x2, 0x3}, 0x4, 0xfffffffffffffffe, 0x0, 0x0, 0x0) r2 = socket(0x2, 0x2, 0x0) sysctl$hw(&(0x7f00000002c0)={0x6, 0xe}, 0x2, &(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000040)=0x7, 0x0, 0x0) open$dir(&(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x4) open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) r3 = open$dir(&(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000080)='./bus/\x00', 0x0) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r4 = socket(0x2, 0x2, 0x0) connect$unix(r4, &(0x7f0000000000), 0x10) setsockopt$sock_int(r2, 0xffff, 0x1023, &(0x7f0000000040)=0x200, 0x4) dup2(r3, r2) openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) getrlimit(0x5, 0x0) r5 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r5, 0x0, 0x13, &(0x7f0000000000), 0x4) syz_emit_ethernet(0x62, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffdfffffff00000000000086dd6097520305000000fe8000000000000000000000000000bbff0200000000000000000000000000010001c2ff000000000502"]) 1.852477925s ago: executing program 7 (id=1123): ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x0, 0xb3f, {[0xfffffbfffffffff8, 0x0, 0x2, 0x100000000, 0x6, 0x5, 0xdf60, 0xfffffffffffffffe, 0x4, 0x6, 0x4, 0x3, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x4, 0x2, 0xfffffffffffffffa], [0xfffffffffffffffa, 0x80000000, 0xf, 0x9c7, 0x5b, 0x1, 0x1fe, 0x0, 0x0, 0x2], [0x100000001, 0x2, 0x0, 0x0, 0xb, 0xffffffff, 0xffffffff00000000], [0x100, 0x5, 0x7fffffffffffffff, 0x100000000, 0xfffffffffffffffe, 0x8], [{0x0, 0x20000004, 0x0, 0x7d06}, {0xfffc, 0x2, 0x5}, {0x6, 0x2, 0xfffffffc, 0x80}, {0x9, 0x5, 0x4, 0xffffffffffffffff}, {0x6, 0x2, 0x1000, 0x8}, {0x0, 0x2007, 0x9, 0x2000000000000000}, {0x0, 0x0, 0x1}, {0x0, 0x100, 0x0, 0x8}], {0x0, 0x5, 0x5}, {0x2, 0x80000000, 0x6d5, 0x2}}}) r0 = socket$inet(0x2, 0x3, 0x0) setsockopt$inet_opts(r0, 0x0, 0x200000000000c, &(0x7f0000000240)="ea00000100000000", 0xc) (async) close(r0) 1.851896144s ago: executing program 2 (id=1124): r0 = open(&(0x7f00000000c0)='./file0\x00', 0x80000000000206, 0xb7) open$dir(&(0x7f0000000280)='./file1\x00', 0x40, 0x0) (async) r1 = open$dir(&(0x7f0000000280)='./file1\x00', 0x40, 0x0) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000600)="2ab9c75f3ef2a863cd58d88bf46e42e9fe642802e4cd7f8a6a5786624d322b9ea65a6eb0cc827c1fd8cb798b8f02d31482cc3cd7bbebb1c69a5dd1ef970600000007b180ce5eb6d225f187a902abbb40424ea0de1beae0c5842af11c6b155e271ad494b52b89f6ffc985271849ce443e095acc419b97c0ecf0d0da6c0393a2f1cb18983113a88756111b7322afe6b78651d40be48a0d721b1aace0f200e38c92b03c71b428d15f967bd5e754bf8792083dd426062c70c3f82408f62996ee7207af7905fc5655b703296b0ed8fc935d8c0a96319e311e545af2feea0d04f9", 0xde}, {&(0x7f0000000400)="d86cac7bf88fcdb487318e97bdc5089984c17d2fd045053467c61c85032eb2849ab9c94f46198d1afa58dd36fce1a7ada132412aa1255a7c44c5487ba8e22868932bd22a7d7001ee7d35b8f27bac2808cec99138fef691b63de1506513d23be424caec1b7d503cca81e96c394a6b63f6d57d4e31c16634e98c6ed621a5f31ef53d29e6373c0dc7c557a96c455ba02adc80787254c7010bdaa27ddffaf58a828b72f010cc7dbf764fa32e42fcfafb36728133b932", 0xb4}], 0x2, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x18289, 0x190) (async) r2 = open(&(0x7f0000000080)='./file0\x00', 0x18289, 0x190) r3 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x0) write(r3, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) (async) write(r3, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) ftruncate(r2, 0x7) (async) ftruncate(r2, 0x7) r4 = open(&(0x7f0000000040)='./file0\x00', 0x280, 0x60) openat$bpf(0xffffffffffffff9c, 0x0, 0x2, 0x0) r5 = msgget$private(0x0, 0x3) msgrcv(r5, 0x0, 0x0, 0x1, 0x1000) msgctl$IPC_RMID(r5, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x10, r4, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r7, &(0x7f0000000040)={&(0x7f0000000580)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000180)=""/202, 0xca}], 0x1, 0x0}}, 0xffffffffffffff33, 0x40, 0x0) sendmmsg(r6, &(0x7f00000003c0)={0x0, 0x15b}, 0x10, 0x0) (async) sendmmsg(r6, &(0x7f00000003c0)={0x0, 0x15b}, 0x10, 0x0) syz_open_pts() (async) r8 = syz_open_pts() ioctl$TIOCSETA(r4, 0x802c7414, &(0x7f0000000340)={0x5, 0x1, 0xfffffffe, 0x966b, "ff14e7138821ea79a6294000", 0x40, 0x3effd}) writev(r8, &(0x7f0000000040)=[{&(0x7f0000000380)="079facfaaed69aea4dc561c3b736feac0a2a76087be8b904ddc6f90b66e0f69b6dfba683b348224cf0ccc2a39b0f79389a2bd9b211424a22ca014b9231e253e257706c75b3f320166475c72455021edf575fab8b5d65b8d261c87c3ccc4e784ea7462f3723edabb8e26d27acb1797e2ef4db27270a", 0xffffff01}], 0x1) ioctl$TIOCSETA(r8, 0x802c7414, &(0x7f0000000000)={0xc8, 0x4, 0xffff, 0x7, "cfa377203945f671d3ed5ec1cc403fd9ce36ad02", 0x23a5, 0x40}) (async) ioctl$TIOCSETA(r8, 0x802c7414, &(0x7f0000000000)={0xc8, 0x4, 0xffff, 0x7, "cfa377203945f671d3ed5ec1cc403fd9ce36ad02", 0x23a5, 0x40}) syz_open_pts() (async) syz_open_pts() ioctl$TIOCFLUSH(r8, 0x80047410, &(0x7f0000000780)=0x7) (async) ioctl$TIOCFLUSH(r8, 0x80047410, &(0x7f0000000780)=0x7) r9 = open$dir(&(0x7f00000002c0)='./file0\x00', 0x2, 0x10) ftruncate(r9, 0x7fffe) r10 = open$dir(&(0x7f00000002c0)='./file0\x00', 0x1, 0x2e) setsockopt$inet_opts(r0, 0x0, 0x1, &(0x7f0000000500)="b957cc18a6c70d540f59b154fde7853d27a546ffa8b7faaf5cc33b7b875274497ee8b93bdb151e18a93c6414646cb737bc612e16b82bdc56524f185c9a6ad5b6451bfe76daeac307a8796dcaa8a4cc1e9c48a0e663aed2f33d8398af015b0cf2990a4919bc249c9324d0f883ba6b694ec6339a665af37e1952c62621d025dd586f7f2d2c915386157e9e37ead49fc7f6dbbed490d7e850d29c5895bb62de7e21d533b21823fe74c77917af03a91eb992bd3641fba00b09fcc2fc46cf32741bf3644f84a554964774e0455c2dd7a80414", 0xd0) open$dir(&(0x7f00000003c0)='./file0\x00', 0x80, 0x0) pwritev(r10, &(0x7f0000000200)=[{&(0x7f0000000300)="1b", 0x1}], 0x1, 0x48081) (async) pwritev(r10, &(0x7f0000000200)=[{&(0x7f0000000300)="1b", 0x1}], 0x1, 0x48081) mknod(&(0x7f0000000100)='./file0\x00', 0x4, 0xd25) open(&(0x7f0000000080)='./bus\x00', 0x880, 0x0) 1.619470922s ago: executing program 6 (id=1127): mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2) mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) (async) mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2) mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) r0 = socket(0x1, 0x3, 0x0) mquery(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x0, r0, 0x7) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x6, &(0x7f0000000000)=[{0x5, 0x4d, 0x8, 0x5}, {0x100, 0x3f, 0xff}, {0x2, 0x9, 0x5, 0x6}, {0x3, 0x0, 0xf, 0x6}, {0x7fb, 0x2, 0x6, 0xffff}, {0x57d2, 0x4, 0x7, 0x400}]}) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) ioctl$BIOCGRSIG(r1, 0x40044273, &(0x7f00000000c0)) (async) ioctl$BIOCGRSIG(r1, 0x40044273, &(0x7f00000000c0)) accept$unix(r0, 0x0, &(0x7f0000000100)) (async) r2 = accept$unix(r0, 0x0, &(0x7f0000000100)) kevent(0xffffffffffffffff, &(0x7f0000000140)=[{{r1}, 0xfffffffffffffffc, 0xb, 0x1, 0xffffffffffffff01, 0x3}, {{r0}, 0x0, 0xc3, 0x20000000, 0x6, 0x4}, {{r2}, 0xfffffffffffffffb, 0x1d9, 0xf0000000, 0x1, 0x1000}, {{r0}, 0xffffffffffffffff, 0xc8, 0x20000000, 0x7, 0x7ff}, {{r1}, 0xfffffffffffffffc, 0x0, 0x40, 0x7fff, 0x2}, {{r0}, 0xfffffffffffffffd, 0x40, 0x80, 0x100000000, 0x6}, {{r1}, 0xfffffffffffffffe, 0x40, 0xf0000000, 0x561b, 0x3b}], 0x3, &(0x7f0000000240)=[{{r1}, 0xffffffffffffffff, 0x8, 0x2, 0xfff, 0xb}, {{r1}, 0xfffffffffffffff8, 0x4, 0x1, 0x7, 0x6}], 0x400, &(0x7f0000000280)={0x6, 0x4}) (async) kevent(0xffffffffffffffff, &(0x7f0000000140)=[{{r1}, 0xfffffffffffffffc, 0xb, 0x1, 0xffffffffffffff01, 0x3}, {{r0}, 0x0, 0xc3, 0x20000000, 0x6, 0x4}, {{r2}, 0xfffffffffffffffb, 0x1d9, 0xf0000000, 0x1, 0x1000}, {{r0}, 0xffffffffffffffff, 0xc8, 0x20000000, 0x7, 0x7ff}, {{r1}, 0xfffffffffffffffc, 0x0, 0x40, 0x7fff, 0x2}, {{r0}, 0xfffffffffffffffd, 0x40, 0x80, 0x100000000, 0x6}, {{r1}, 0xfffffffffffffffe, 0x40, 0xf0000000, 0x561b, 0x3b}], 0x3, &(0x7f0000000240)=[{{r1}, 0xffffffffffffffff, 0x8, 0x2, 0xfff, 0xb}, {{r1}, 0xfffffffffffffff8, 0x4, 0x1, 0x7, 0x6}], 0x400, &(0x7f0000000280)={0x6, 0x4}) stat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)) ioctl$WSDISPLAYIO_ADDSCREEN(0xffffffffffffffff, 0x80245753, &(0x7f0000000380)={0xb, './file0\x00', './file0\x00'}) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) sysctl$net_inet_tcp(&(0x7f00000003c0)={0x4, 0x2, 0x6, 0x14}, 0x4, &(0x7f0000000400)="675b17ac9d133f1e337117df786c1088e1f3748f0254ec3e68506b19793d02095be5b7526a80364b8a8f51dd83fbef97913d13edaa629c7dd373c9e87994243026577d081b1398fbe524c88503482fe9aafa781a8c17253c9df16a3dd38807951c7ddf54afaea356bbbf7d8d2ca28561b149e26da2abccbfc810da03f9227d3c06d681dbaf97d684788f20dc4c745ff6014bf7f52f068631a16482edead30583d7a9cafe316b60b773a4b3bbdbe322fd8e9b12b3c897bb7e87f1557dd918fef1b81e27b53dc77b4923ce9b10a7e3f0e7dbc20c0aa0ca8a5750f74e44e8ed42404053d4e92e17d8f025addc5ea0cb80177bd5c7ee7e0ea450bc", &(0x7f0000000500)=0xf9, &(0x7f0000000540)="6ec7e3aac749cb50c43c26587742a2c8a93dcfb038b4d3ebc23c7d6cef8ab3741d5fa209e100557f2bdfccb744fc06b0e3fa5640ff3f5c59f6d7c79938232bb241806c4e5bfa484d5a72ebf61c8d308a2981b0e9abf0c504390a31ba41b0d970ce63985a2408981de816c4726a489192b8a923cafef2c278ff8081900420c091db5c347d43681b8e97f0aab6a407b8bb50e61e013f91983784d81f2646abb1a121e40b52729122f6e3ab3f03e000cead24d88a14c3ec", 0xb6) writev(r2, &(0x7f0000000640)=[{&(0x7f0000000600)="b5b2aec5d6e5cf245fc8238cfceb81b5d058222f470a12cf325a9b153fe7a10106", 0x21}], 0x1) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2, 0x11, r1, 0x1) shmget$private(0x0, 0x4000, 0xa, &(0x7f0000ffa000/0x4000)=nil) (async) shmget$private(0x0, 0x4000, 0xa, &(0x7f0000ffa000/0x4000)=nil) setsockopt$sock_int(r0, 0xffff, 0x20, &(0x7f0000000680)=0x2, 0x4) (async) setsockopt$sock_int(r0, 0xffff, 0x20, &(0x7f0000000680)=0x2, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)) open$dir(&(0x7f0000000700)='./file0\x00', 0x800, 0x2) (async) r3 = open$dir(&(0x7f0000000700)='./file0\x00', 0x800, 0x2) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4) (async) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4) getpeername$inet6(r0, &(0x7f0000000740), &(0x7f0000000780)=0xc) r4 = openat$vmm(0xffffffffffffff9c, &(0x7f00000007c0), 0x200, 0x0) ioctl$VMM_IOC_CREATE(r4, 0xc2585601, &(0x7f0000000800)={0x10, 0x1, [{&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0xffffffffffffffff}, {&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x1000}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil}, {&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0xf2a6}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0xcdd1}, {&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x7}, {&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x5}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x3000)=nil, 0x7}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x4}, {&(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ff7000/0x3000)=nil, 0x800}, {&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x6}, {&(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil}, {&(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff8000/0x1000)=nil, 0xfffffffffffffff9}, {&(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x10000}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, 0x3}], './file0\x00', 0x5}) syz_open_pts() (async) r5 = syz_open_pts() read(r5, &(0x7f0000000a00)=""/80, 0x50) shmget$private(0x0, 0x1000, 0x600, &(0x7f0000ffb000/0x1000)=nil) readv(r0, &(0x7f0000000c00)=[{&(0x7f0000000a80)=""/3, 0x3}, {&(0x7f0000000ac0)=""/222, 0xde}, {&(0x7f0000000bc0)=""/26, 0x1a}], 0x3) fcntl$dupfd(r0, 0xa, r3) (async) fcntl$dupfd(r0, 0xa, r3) 1.617222799s ago: executing program 7 (id=1128): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file0/file1\x00', 0x0) unveil(&(0x7f0000000180)='./file0/file1\x00', &(0x7f00000001c0)='x\x00') r0 = getpid() ktrace(&(0x7f0000000280)='./file0\x00', 0x0, 0x40000928, r0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x401, 0x0, 0x0, 0x0, 0x0, 0x33, 0xa2f}, 0x81080002000007, 0xfffffffffffffffb, 0xffffffffffffffff, r0, 0xfffffffffffffa8b, 0x3, 0x100000000, 0x8000000000000001}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0xfffffffffffffe53) unveil(&(0x7f0000000080)='.\x00', &(0x7f00000002c0)='c\x00') unveil(&(0x7f0000000300)='./file0\x00', &(0x7f0000000380)='x\x00') openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) 1.616670145s ago: executing program 3 (id=1129): r0 = socket(0x2, 0x3, 0x0) close(r0) (async) close(0xffffffffffffffff) (async) mkdir(&(0x7f0000000000)='./file1\x00', 0x6) (async) chroot(&(0x7f00000000c0)='./file1\x00') unveil(&(0x7f0000000040)='./file1\x00', &(0x7f0000000100)='c\x00') unveil(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='x\x00') r1 = socket(0x11, 0x3, 0x0) (async) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r2 = socket(0x2, 0x3, 0x0) ioctl$FIONREAD(r2, 0x802069b2, &(0x7f00000001c0)) (async) setsockopt$sock_int(r1, 0xffff, 0x40, 0x0, 0x0) r3 = socket(0x18, 0x2, 0x0) (async) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200}, 0xc, 0x8001, 0x2}) r4 = socket(0x18, 0x3, 0x0) connect$unix(r4, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) (async) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) (async) r5 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x2) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0x0, [{&(0x7f0000ffd000/0x3000)=nil, &(0x7f000017c000/0x3000)=nil, 0x200007fffffffffe}, {&(0x7f0000695000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0xffffffffffffff7e}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000829000/0x2000)=nil, 0x3}, {&(0x7f00003ff000/0xc00000)=nil, &(0x7f00000d6000/0x1000)=nil, 0xfffffffffffffffd}, {&(0x7f000024d000/0x1000)=nil, &(0x7f0000188000/0x2000)=nil, 0x401}, {&(0x7f000060b000/0x2000)=nil, &(0x7f0000095000/0x3000)=nil, 0x80000000}, {&(0x7f000055e000/0x4000)=nil, &(0x7f00005a9000/0x1000)=nil, 0x8}, {&(0x7f0000ffe000/0x2000)=nil, &(0x7f000074b000/0x1000)=nil, 0x5}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil}, {&(0x7f00003bc000/0x3000)=nil, &(0x7f00003f2000/0x2000)=nil, 0xa}, {&(0x7f0000257000/0x1000)=nil, &(0x7f000038f000/0x4000)=nil, 0x12b}, {&(0x7f0000008000/0x3000)=nil, &(0x7f0000688000/0x4000)=nil, 0x9}, {&(0x7f0000196000/0x3000)=nil, &(0x7f00003e4000/0x2000)=nil, 0x4}, {&(0x7f000024b000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0xfffff7ffbffffff9}, {&(0x7f00001f9000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x1000039f7}, {&(0x7f0000566000/0x3000)=nil, &(0x7f0000001000/0x800000)=nil, 0x8}], './file0\x00', 0xfffffffe}) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) ioctl$VNDIOCSET(r5, 0xc0104401, &(0x7f00000001c0)={0x0, 0x0, 0x0}) (async) getsockname$inet(r4, &(0x7f00000000c0), &(0x7f0000000000)=0xffffffffffffff35) connect$unix(r3, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) setsockopt(r1, 0x0, 0x3, &(0x7f0000000040)="073e036f00", 0x5) (async) setsockopt$sock_int(r0, 0xffff, 0x1001, &(0x7f0000000100)=0x20000, 0x4) (async) r6 = kqueue() write(r6, &(0x7f0000001680)="04bdfa5d1d2873c63e3534825ba166e2fea9aec43050006123339a346f731573d8d508753f95b7688ad48b8cf6bbca325cebc37fc4e1dd543dbe2da6dd", 0x3d) (async) dup(r0) 1.616400885s ago: executing program 4 (id=1130): pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x10000) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="19", 0x3a4e1e905c56cdb7}], 0x1) r2 = syz_open_pts() ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f0000000040)={0x3, 0x8cb, 0xfffffffe, 0xffff7ffe, "ffb1251242758d00000300", 0x40, 0x3effb}) ioctl$TIOCSTAT(r2, 0x20007465, 0x0) readv(r0, &(0x7f0000000540)=[{&(0x7f0000000740)=""/145, 0x81}, {&(0x7f0000000140)=""/152, 0xfffffee8}, {&(0x7f0000000300)=""/213, 0xd9}, {&(0x7f0000000400)=""/142, 0x8e}, {&(0x7f00000004c0)=""/108}], 0x4) execve(0x0, 0x0, 0x0) ioctl$WSMUXIO_REMOVE_DEVICE(0xffffffffffffffff, 0x80085762, &(0x7f0000000040)={0x1}) socket(0x18, 0xc003, 0x3a) 1.420777642s ago: executing program 2 (id=1131): ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x1000, 0xd5, 0xfe, 0xe}, {0x0, 0x0, 0x0, 0x4}]}) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) (rerun: 64) getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f00000000c0), &(0x7f0000000300)=0xc) (async, rerun: 32) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) (rerun: 32) sysctl$kern(&(0x7f00000000c0)={0x1, 0x37}, 0x4, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x3, 0x0, 0x2e) 1.420082752s ago: executing program 7 (id=1133): select(0x11, &(0x7f0000000180)={0xfffffffffffffffd, 0x44809e9d, 0xffffffffffffffff, 0xfffffffefffffffe, 0xc89, 0x210, 0x5, 0x7}, 0x0, 0x0, 0x0) r0 = socket(0x2, 0x3, 0xff) setsockopt$sock_int(r0, 0xffff, 0x1001, &(0x7f0000000100)=0x20000, 0x4) sysctl$net_inet_tcp(0x0, 0x0, &(0x7f0000000000)="9b1809ffffffffff", 0x0, 0x0, 0x0) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) writev(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f00000009c0)="33fdd4623b69191a20b44928e7b4c4f13131bab0cc6165dec03852739eb861f043b3648ea7cd46bdad", 0x29}], 0x1) r1 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) ioctl$TIOCSETA(r1, 0xcd604404, &(0x7f0000000040)={0x10000000, 0x2, 0x6, 0x2f, "280018000002524e44df00000068ab5ade800600", 0x6, 0x2}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) connect$unix(r0, &(0x7f0000000000), 0x10) setuid(0xee01) write(r0, &(0x7f0000000240)="14bdfa5d1d34e2fecb284a6498307dcda9aec43050036123339a346f737850551408753f95b7688ad4c4e1dd5489e7bafc58d3e5823757ae8b630719ef187ccad995f13dbe19a6dd4e6902bd8297b0799b426aabe9fad9db6996571c6d9f8bb5d542c2148aa42be940970fe88d34d8f99afe7e7820237400000000008000000100"/138, 0xfc7e) mknod(&(0x7f00000001c0)='./file0\x00', 0x2000, 0x205b9a) r2 = kqueue() kevent(r2, &(0x7f00000003c0)=[{{r0}, 0xffffffffffffffff, 0x0, 0x8, 0x3, 0x2b}, {{r0}, 0xfffffffffffffff9, 0x8, 0x10, 0x8, 0x2}, {{r2}, 0xfffffffffffffff8, 0x20, 0x10, 0x8, 0x6}, {{r0}, 0xfffffffffffffffa, 0x40, 0x1, 0x7fff, 0x100000001}, {{r0}, 0xfffffffffffffffe, 0x2c, 0x40000000, 0x100000001, 0x2}], 0x8, &(0x7f0000000040), 0x15, 0x0) r3 = open(&(0x7f0000000200)='./file0\x00', 0x1, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000380)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb8100400086dd6880058000303b03356d0140558d3dfd766d0a62aab10b9bfe4d1aafbaf5c2c66da2acf4faeb1e580100907828"]) open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7959) openat(r3, &(0x7f0000000080)='./file0\x00', 0x8000, 0x40) ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9f, 0x0) getitimer(0x1, &(0x7f0000000000)) sendto$unix(0xffffffffffffffff, &(0x7f00000000c0)="b10005136000009f050000002010000000000000cea10500fef96ecfc727d3357ae302b37b67ca1f2d61db7f4de57804be38164991f7c8cf5f882b297be1aa5b23edeb51e2f0ac3ebbc257699a1f139b672f4d335d223e7db3008b95665bc6fc211800b100e4ff0000fbb770c1f5a872c881ea772ec5890405b3b9c2668396f4cd1257070000000020", 0x89, 0x2, 0x0, 0x0) ioctl$FIONBIO(r3, 0x82907003, &(0x7f0000000140)=0x1) ioctl$WSKBDIO_SETDEFAULTKEYREPEAT(r3, 0x800c5709, &(0x7f0000000000)={0x5, 0x3, 0x400}) write(r2, &(0x7f0000000540)="345f2b894f747a3e9ed7c47a89a40819b9c1fede7c3f54bc9b0c5c8bbc42fb760253c753cb3b2b8279864b3ac30e88ecdef95767077220f6973daaa4d366966b63c1c44ac90c77090235acc86ad052f171029928d5b0d0bbf6c550258f34d34b19eb738de52689bdd0de251e514a6c74ef05c065709de0be96c4fba26bbf43582016336e4cdd41b70b437ccfb37ecbcb0adc30a2d69b51615a65c9219b9b2421b9d0d3dc0933f8dbde1d4fec21f0a1b604e75a313084f4ceae85c06e984d88ae982cd0aec8d729e7af421d75770fbbb0973a2eeac353d8e03e6acd94f6836022c009a7828952", 0xe6) 1.382344667s ago: executing program 2 (id=1134): r0 = socket(0x11, 0x3, 0x0) sendto$unix(r0, &(0x7f00000002c0)="b10005016000009f0500000007000000331c13fecea10500fef96ecfc72fd3357a068da3a5673039d2d236acf20b7804be38164991f7cccf5f882b297be1aa5b23edeb51e2f0ac3ebbc257699a1f139b672f4d335c223e7d02565dfbdd60de5f231e000000720fd38bfbb770c1f5a872c881e2772ec5a10400000000000000361b1257aea8c5d0002012000000000000880d6633c556ae9be371a3f8343712051eeab71d89000407000000800420000000", 0xb1, 0xa, 0x0, 0x0) ioctl$TIOCSETA(0xffffffffffffffff, 0xcd50441a, &(0x7f0000000040)={0xf, 0x80000003, 0x7, 0xd7, "00000100000000000000908b7f7f00", 0x3, 0x3}) setrlimit(0x8, &(0x7f0000000040)={0x7, 0x50}) r1 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VMM_IOC_INTR(r1, 0xca605601, &(0x7f0000000040)={0x1, 0x0, 0x1}) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0xfe, 0x0) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x84, 0x11, 0x3, 0x8}, {0x40, 0x80, 0xff}, {0x6, 0x84, 0x15, 0xfffff802}]}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000340)="840cbf3e87c006a6572c5109b0b054d8072a076a58bfbcc1dc79556b8bc8bf2c2db10fa8381d9c479df600cc9f95200200000000000000cb63df31702b68a093b7046d58c260418162bd984686", 0x4d}], 0x1) pipe(&(0x7f0000000000)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$BIOCSETWF(r2, 0x80104277, &(0x7f0000000040)={0x28, 0x0}) write(r2, &(0x7f00000003c0)="f81ad30100060000000100000000", 0xe) setrlimit(0x4, &(0x7f0000000140)={0x7}) r3 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r3, 0xc028698d, &(0x7f0000000040)) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x104401) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r4 = open(&(0x7f0000000180)='./file0\x00', 0x615, 0x81) ftruncate(r4, 0x1) open$dir(&(0x7f0000000000)='./file0\x00', 0x10, 0x0) r5 = openat$wskbd(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) sysctl$net_inet_tcp(&(0x7f0000000000)={0x4, 0x2, 0x6, 0x13}, 0x4, 0x0, 0x0, &(0x7f00000010c0), 0x210) ioctl$WSKBDIO_SETBACKLIGHT(r5, 0x800c5712, &(0x7f0000000100)={0x4, 0x9, 0x3}) 1.161003096s ago: executing program 0 (id=1135): r0 = open(&(0x7f0000000200)='./file0\x00', 0x80, 0x100) (async, rerun: 32) semget(0x0, 0x3c, 0x201) (rerun: 32) unveil(&(0x7f00000003c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000200)='x\x00') ioctl$FIONBIO(r0, 0x82907003, &(0x7f0000000140)=0x2) sysctl$hw(&(0x7f0000000040)={0x6, 0x12}, 0x2, &(0x7f00000005c0), 0x0, 0x0, 0x0) (async, rerun: 64) ioctl$VNDIOCCLR(r0, 0x80384601, &(0x7f0000000080)={&(0x7f0000000000)='./file0\x00', 0x80, &(0x7f0000000040)='./file0\x00', 0x8}) (async, rerun: 64) select(0x40, &(0x7f0000000000)={0x1b, 0x2, 0x200, 0x3, 0x0, 0xfffffffffffffff9, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0) sysctl$kern(&(0x7f0000000000)={0x1, 0x42}, 0x6, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) setitimer(0x0, &(0x7f00000000c0)={{0xfffffdff, 0xf4240}, {0xffffffff}}, 0x0) (async, rerun: 32) fchmodat(r0, 0x0, 0x103, 0x0) (async, rerun: 64) setrlimit(0x4, &(0x7f0000000180)={0x20b, 0x5c}) (rerun: 64) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xffffffffffff0000}) (async) r1 = socket(0x18, 0x1, 0x0) connect$unix(r1, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) (async) r2 = syz_open_pts() close(r2) (async) syz_open_pts() (async) writev(r2, &(0x7f0000000080)=[{&(0x7f00000009c0)="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", 0x5a2}], 0x1) (async, rerun: 64) getitimer(0x2, &(0x7f0000000100)) (rerun: 64) 1.160731629s ago: executing program 3 (id=1136): r0 = kqueue() syz_emit_ethernet(0x3e, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd6000000000002b00fe8000000000000000000000000000bb0000000000000004000000000000"]) socket(0x18, 0x2, 0x0) openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r1 = socket(0x11, 0x3, 0x0) socket(0x11, 0x3, 0x0) sendto$unix(r1, &(0x7f0000000280)="b1000501600000000100000007000000201c13fecea10500fef96ecfc72fd3357ae320b37b673039d2d236acf20b7804be38164991f7c8cf5f882b297be1aa5b236deb51e2f0ac3ebbc2576b9a5f139b672f4d335d223e7d026ba8af630037282118000000720fd38bfbb770c1f5a872c881ea6e69e0bb76d907c400000200361b1257aea8c500002002fb00000000008abfba09000000ec1d89e000040781e4b2fff040ff00"/177, 0xb1, 0x0, 0x0, 0x0) ioctl$FIONREAD(r1, 0x80206913, 0x0) close(r0) kevent(r0, 0x0, 0x7, 0x0, 0x986d750e, 0x0) 1.160295124s ago: executing program 4 (id=1137): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2000, 0x3d1e) r0 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) close(r0) 970.948222ms ago: executing program 4 (id=1138): r0 = socket(0x2, 0x3, 0x0) close(r0) r1 = socket(0x18, 0x2, 0x0) close(r1) r2 = socket(0x18, 0x2, 0x0) setsockopt(r2, 0x1000000029, 0x23, &(0x7f0000000080)="031000086941e7c5ce5876778f181b12184c256b1ca6f583b03f959b5253027d08b90779da6a56ed10cdd9967a674820f89c4daa330fee01c76728490d1851d4ab60059f6a3f7cc45ac10500000078bbf169d0632f4ce57a508bc82acd00000000140e0343395b00737a4a00000084fc604fd6642787b31558a39bd200"/136, 0x88) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x40, 0x200}, 0x5, 0x8001, 0x24b83c97}) writev(r2, &(0x7f0000000440)=[{&(0x7f00000001c0)="21614545a87960cfe346f907a66933199a9e251a7380fcc0fefc5f03407d630eca846b1d32d6fa33709875d30edc85a25e2a92d3c4fc0cc71b83c267695dd3e6ccda359759bfa98e7c8dc3129d816b965d8fd087ec9c101e67d562f673acfef7c90b5f99602d43617b62f781513ebc8b808ec9178efb79638808c70342179db8b4f90663a8356ec6e889727566cd3ab710127ec5a4d6fda8b4d036a3cccbd17ae01af0307de9ef403c9c064f8d9a6d05efe1976ec1316159f62bfde70cdf48c31cd78d1cdfdafb1999b88af5ce0cc8d9ea9ed841e9c67763c379615e43bc0b084f", 0xe1}, {&(0x7f0000000300)="a057cca3b3b0b32b72f401270c76130d733fa235053b125e8506c740ee6c364115550615e3d9340520d4ae70bd64e226dd6bc6bf6240e4b63d3f08d163de0dd4f443904655635b2607ba46831282e465de9fc6e6ca03edbe092a6d768c8ea22a833b90c0bf55461c65756afb7b2316b670f05122500f1b2f61aa7686a6362227a5518e0994c176090cd8e7874b45ff04a30d0c85", 0x94}, {&(0x7f0000000040)="7d229de87230d296af3f9cfd7730e9b14e415d2c5649c061b90838f785bab68342d2213b020d8149bbd035b3", 0x2c}, {&(0x7f00000003c0)="660b3b53818bc034a0709114fd27334e799370e79cca70e1977b95edacef38ade032391ffebd3fcb5d5b6d057905d518bd2410c285d2bd29713d42bf4700cef169a43e1efccc655743f84afa2f3d064a63ff02ccc08ebe459f", 0x59}, {&(0x7f0000000600)="4e5bc4dacd1fc69e72a4c38ab094a8efd59e15e8bbbdb377b741625e335a11ac0b045488b537e15045613c8d7eef9162c5d2c0664b293c5640d476c62116909e8bec09c9997c6448860549af1c226ce3850365363ec3f858568c5dc069bf2fd1c034694917c29894c41025cc5196a8a2118d05f3c4b68670e6b10cb66331da9e407d1e5bd63b5aa83f479cc3a55aac4c6318faf3511aac1544f8307f57ba79b1c773127dc821c33eb79991de083557e0541a463f4fdab83a4a4a9620cd009dd47679892bcfcad12d721c5939f825760e5135f800b12349d6d7b3b7452e0690dbcc628f488e24f14b7995e43cef16133f67fc", 0xf2}], 0x5) r3 = socket(0x18, 0x3, 0x0) connect$unix(r3, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) getsockname$inet(r3, &(0x7f00000000c0), &(0x7f0000000000)=0xffffffffffffff35) connect$unix(r1, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000500)=""/214, 0xd6}], 0x1, 0x0}, 0x1042) write(r5, &(0x7f00000007c0)="7cc97585253a5126a4ac0678c6d790b6c33b3e6e763c38371579343e19562401b7b74f0055ce1abc9e74072d11b74bff0367fefb275701084cc1f8f490e5bb72db73bf3b59d1ae962bb0e2c9b3a30412087b7513d03b26bbcb131156c5b601d726737a93e189293cbd54e630cd1135475f8fb9431d3b5f1c987229bc588ee7fdc124c69fc4f8337a514e971c8bd66c2d4e8563dc85d2782da6c7bb34732e903bd7aa1143b450bd07e39bf8c1a49d7d5bff56cac51ac6983a1c1820f7b3ae7e9d9ecf8e322b9dbe76baa19915307b384bf3afecbab8a53c", 0xd7) write(r0, &(0x7f0000001680)="04bdfa5d1d2873c63e3534825ba166e2fea9aec43050006123339a346f731573d8d508753f95b7688ad48b8cf6bbca325ceb", 0x32) fchownat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x6) 970.745117ms ago: executing program 3 (id=1139): r0 = openat$tty(0xffffffffffffff9c, &(0x7f0000000080), 0x60, 0x0) ioctl$TIOCSETD(r0, 0x8004741b, &(0x7f00000000c0)=0x1) r1 = socket(0x11, 0x3, 0x3) sendto$unix(r1, &(0x7f0000000140)="b1000504000004000000020007000000331c13fecea10500fef96ec0c72fd3357ae30200004e3039d2d236acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896466a421020000ed710fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b1257aea8c500002002fbfe0c2300008abfba0900000008e371a3f8343732051ed6b71d89e0000405f8fffff0e0000000", 0xb1, 0x0, 0x0, 0x0) getsockopt$sock_linger(r1, 0xffff, 0x80, &(0x7f0000000000), &(0x7f0000000040)=0x8) 970.202457ms ago: executing program 7 (id=1140): mknod(&(0x7f0000000200)='./file0\x00', 0x2008, 0x412dff) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x402, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f00000024c0)=""/232, 0xe8}, 0x0) r1 = socket(0x18, 0x3, 0x0) setsockopt(r1, 0x1000000029, 0x24, &(0x7f0000000000)="5ab7776a", 0x4) syz_emit_ethernet(0x3e, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb5219f1000b913f1, 0x0) ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9f, 0x0) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, 0x0) r2 = getppid() ktrace(0x0, 0x5, 0x40000530, r2) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0xfe, 0x0) ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x0, &(0x7f00000002c0)}) sysctl$kern(0x0, 0x0, &(0x7f0000000300)="b7a6d61de4a16809d26255c41b4f0919d7aae468655930ac06e97217b3f86fff46bac3572c22c5924819b737ecc58c7ea417520b7ff18636d6e8958561d0409cd9567325ada08dd7ff61a00fd766c0cb82636ee3", &(0x7f0000000000)=0x54, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$BIOCSETWF(r3, 0x80104277, &(0x7f0000000040)={0x28, 0x0}) write(r3, &(0x7f00000003c0)="f81ad30100060000000100000000", 0xe) r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000240), 0x100, 0x0) ioctl$BIOCGSTATS(r4, 0x4008426f, &(0x7f0000000280)) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x62}) r5 = syz_open_pts() close(r5) syz_open_pts() ioctl$TIOCSETAW(r5, 0x802c7415, &(0x7f0000000000)={0x2d757366, 0x9, 0xb, 0xffffffee, "0a6400b72860147b00", 0x7, 0x100000e}) writev(r5, &(0x7f0000000700)=[{&(0x7f0000000100)="0c47ddfb6005e775fde2f161a94881d82baad2b97294", 0x16}, {&(0x7f00000009c0)="8078826c300b29b0caa42dc7165ffc8ac85043e61ff6c0599eb02ab4d32a16d39cc41f6039b4432817314637b51e31433c0dceaadefa1381f5f92c34b25c88bd2aa231fc1ab1ff945a5baaa7aac7d02ac29df33b36cc4b49ce75a581af518d40466a83bc596009e159fc88d8f82c05204a00c831bcdaf1f5d459b83ca84be33676fc542e80de74055f328f4d9b7accaa5c35a55bd6fb7395b9d3c1f15fbd7dda59664801fe818e3f3db7188b75a77827774017e0493264b6598871ec3064f9ae6d1a79c3deeb1fe5c2ea192d24f500ec6193597a46c0da8bcc111b0582d1d69b9c3ed91d25dac8024965edc890c8ede02054a15c7f5b6632fafabb1b1b0be46e6432d460aa718d9abb450851664db7f477cd87304affc2c90f4c267837381faa04b03b846cea6e08633cfd1b68b515a8d005587484fa77435bd4aadcad745b96338da12afacb3083641ccc5f5f29e6817f97b93a0399cc8a710938cd40958dba03e510063a1d725c08a4e3df19d30d9e68007b31bab8a39520f22ba305d6490b9b5f5a7cca43d1aaaeefe1a62f20875f6df60a512c3ce39bea0a4b1782d02e00d4acf2fd299b65abad500fb7fae710704ab049b9ce8490ca926fdad598decdffc1e74c5ebd4593699dce8553dd920d422f46462395975db35656ada4161fff1b1c890db9d8edfe4a73fa779010a36aaaad012522e50e8bbd21b539b21fcc140dab17156a4e94c05858b26ac6e8fc6550e7f672231b12e86ad07612ec5d001cff2eae79167fca3803c3503ad917298c4d0fcc7e64eee769e980cfa6f2170c12a1c31c85e91bb0e5c2f997ac19879181cdb0d12ffbf5ac56c55ba2d5dad50a8166f90203ea452d49962f9fd04e2c3c20560b46cb2ffcfb76100d3359b7092fa7aa628760b5e5fee0bac7672ae1c13719861869093977dec4c7a4da239402b7ddb1029ff325032bd13df694b2f5de53faf09ec7e728c975e5332152d2bf08872856dacd6ca31ad765eac61b47d2029dfe180089190939ae3b67c2560a2d9ec0c8843f8374c6020a9dbce6e6a3491fe3c95c51c1e5e4b44b83b81d35ebd74e8d7ec311f50323a3744ec8743a41af5a97f38c4ec3f75f9cb24b19e1c99e9a2ae2aad26b60ba500e3af8aa54e9a337e15dec7e938729c0d75a550514de55bcabeec4298ce9eaa33eb7e9b34e6d9737ba04ec32f56479054582e2e0bcb4b2c7246b00e6ff8532da6c8247120a64f33c278cfef93380324ee907f659e3561808874ce6240647ca381a6a03da4d0b4ec26d1ed878afbbfce4af5d413b8e7244d7561cce4d14b9930405a76129e4703a82bee9385c48bbdaf6becfb642462f61f28b6c0efdd5aece22453cd2eed80432eb931625915656ff275bbd6d86dcf2be4da94ca999775a06e34c0a59e957a4fc394d2520357b4ad5a102e5a687c732fd26194de39d0843be0e8019f730092dece5bf5ffdc8745aaed1a8343ee1384f0fd98d2797b5739b22b5a52f1be8e7661d7c2c3825da18b18450e86bee4e01018eba56e1790808a14002aed6a5c9ff8c6f65601599712ab10bcfb1ca750b698820b603cf12984a0bcec79a05db3b93267b9bc389bce7dd71a84eec55ed17881d51513c448c2da8ad97b118210bb9a91e2f3031139af6f184acb91f845484a9f3fd65ce7fc09b9535a51795951f3bd33b8bcb69d7e97e1e43b589b15b6dbdcbba4b108d3f4f325f4ca520230866e6e2177d8e2fabc21a44a1deca1ebc4cdf2131bb3c1b3bc08718b70ce4253b7834ed06d48085c3d3c10381947dc111d2fdc47b39fff12bd722d56e6fd9cdd3229d1c7927dc7a143e8165f06b8884654c1883dbecf56ce8b5d896e0fec8a90d1e05fc802211778c40973e8da45b64e097dd3ff294bb3df4bd645e8d77865b8528d434a54bae9d203dcacaed85f54d318ec2feea64bdf2dfd9aa672ed5af430093ea45aa377a4ef75b605c426b6a7ae51ebc0531c1a67d6e5c27", 0x580}], 0x2) syz_emit_ethernet(0x56, &(0x7f0000000040)=ANY=[]) recvmmsg(r1, &(0x7f0000000340)={0x0, 0x1}, 0x10, 0x840, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="57eb6e752063", 0x6}, {&(0x7f00000000c0)="decbd3aa2403fe2654abd0d92012bce1f034b889bd8a514b682619e2a1698012ee78a4df0be40d0b9ac5fca200d5a4bf48a68552758089ae7e131ebdaeab908a17683c0771fa65f4d80a283c2a9bf036a76b25d82a59f7b4efb7546f85f783508189ec61a8b16366bc9826e4c3640c59d5c5bba29930b14055f0b9440802c80f454a29687295fb0c194d05ed107705a4ea8581c4e08bb7fd683b7414236262bb5ed212e6ed561a4e9d057decc8298428f83fc7466554", 0xb6}], 0x2) 776.924882ms ago: executing program 6 (id=1141): mkdir(&(0x7f0000000180)='./file0\x00', 0x25) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) unveil(&(0x7f0000000200)='./file0/file0\x00', &(0x7f00000002c0)='x\x00') syz_emit_ethernet(0x126f, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd609ded1a12390000c4a4e3434e58d025a6a8a81cf312b8befe8000000000000000000000000000aa00030000000000000101000101000401000401"]) sysctl$kern(&(0x7f0000000100)={0x1, 0x50}, 0x3, &(0x7f00000011c0)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xfe10, 0x0, 0xfffffffffffffff9) unveil(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='x\x00') chroot(&(0x7f0000000040)='./file0\x00') unveil(&(0x7f0000000340)='./file1\x00', &(0x7f0000000380)='r\x00') 776.376604ms ago: executing program 5 (id=1142): mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10, 0xffffffffffffffff, 0x0) openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) (async) r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x0, [{}, {0x3}, {0x1, 0x2fc}, {0x0, 0x4}, {}, {0x2, 0xe}, {}, {0x3, 0x1}, {}, {0x0, 0x8}, {0x1}, {0x2}, {0x3}, {0x2}, {}, {}, {0x3}, {0x1, 0x100000b4}, {0x1}, {}, {0x0, 0xfffffffc}, {0x0, 0x2}, {0x2}, {0x2}, {0x3}, {0x0, 0x5}, {0x0, 0x1}, {0x0, 0x10000}, {0x1, 0x80000000}, {0x1, 0x6}]}) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) sysctl$net_inet_ipip(&(0x7f0000000000)={0x4, 0x2, 0x4, 0x1}, 0x4, 0x0, 0x0, &(0x7f0000000180)="1876f34b", 0x4) (async) sysctl$net_inet_ipip(&(0x7f0000000000)={0x4, 0x2, 0x4, 0x1}, 0x4, 0x0, 0x0, &(0x7f0000000180)="1876f34b", 0x4) close(r1) socket(0x2, 0x4001, 0x0) (async) r2 = socket(0x2, 0x4001, 0x0) connect$unix(r2, &(0x7f0000000000), 0x10) setsockopt$sock_int(r1, 0xffff, 0x1023, &(0x7f0000000040), 0xe0) setuid(0xffffffffffffffff) geteuid() (async) r3 = geteuid() chown(&(0x7f0000000340)='./file0\x00', r3, 0xffffffffffffffff) (async) chown(&(0x7f0000000340)='./file0\x00', r3, 0xffffffffffffffff) 775.101083ms ago: executing program 3 (id=1143): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x80, 0x0) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x35, 0x1, 0x81, 0x400}, {0x70ae, 0xf8, 0x0, 0x4}, {0x7, 0x81, 0x24, 0x3}]}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) setuid(0xee01) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) r3 = shmget$private(0x0, 0x4000, 0xa0, &(0x7f0000321000/0x4000)=nil) setuid(0xffffffffffffffff) shmctl$IPC_STAT(r3, 0x2, &(0x7f0000000240)=""/244) close(r2) r4 = socket(0x2, 0x2, 0x0) connect$unix(r4, &(0x7f0000000000), 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) open(&(0x7f0000000040)='./file0\x00', 0x200, 0x0) r7 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) syz_emit_ethernet(0xaa, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffffffffff00000000000086dd6097520800000000000000b10000000000000000000000bbff020000000000000000000000000001000a00c2", @ANYRES8=r7]) recvmsg(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000500)=""/214, 0xd6}], 0x1, 0x0}, 0x1042) mlock(&(0x7f0000662000/0x3000)=nil, 0x3000) writev(r6, &(0x7f0000000400)=[{&(0x7f0000000240)='\x00\a', 0x2}], 0x1) write(r6, &(0x7f00000007c0)="7cc97585253a5126a4ac0678c6d790b6c33b3e6e763c38371579343e19562401b7b74f0055ce1abc9e74072d11b74bff0367fefb275701084cc1f8f490e5bb72db73bf3b59d1ae962bb0e2c9b3a30412087b7513d03b26bbcb131156c5b601d726737a93e189293cbd54e630cd1135475f8fb9431d3b5f1c987229bc588ee7fdc124c69fc4f8337a514e971c8bd66c2d4e8563dc85d2782da6c7bb34732e903bd7aa1143b450bd07e39bf8c1a49d7d5bff56cac51ac6983a1c1820f7b3ae7e9d9ecf8e322b9dbe76baa19915307b384bf3afecba", 0xd4) r8 = socket(0x2, 0x2, 0x0) fsync(r1) setsockopt(0xffffffffffffffff, 0x6, 0xafa3, &(0x7f0000000200)="8000a0b0e9cb0f44ae9b476d29db4f2a451306898556fff8281e", 0x1a) setsockopt$sock_int(r8, 0xffff, 0x1023, &(0x7f00000004c0), 0x4) r9 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0) dup(r9) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000080)={{0x8, 0x0, 0x0, 0x0, 0x0, 0x196, 0x3ff}, 0x401, 0x10000, 0x0, 0x0, 0x1, 0x80000000000010c, 0x5, 0x7}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xff0a, 0x0, 0x37) 772.65516ms ago: executing program 6 (id=1144): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x80, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000000)={0x2, &(0x7f0000000080)=[{0x64, 0x3, 0x26, 0x42006}, {0x5026, 0xa0, 0x0, 0xfffff001}]}) syz_emit_ethernet(0x4a, &(0x7f0000000380)=ANY=[]) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000100)={0x3, &(0x7f0000000000)=[{0xc, 0x90, 0xff, 0x48}, {0x28, 0x1, 0x64, 0x9}, {0x16, 0xa0, 0x6, 0x13019821}]}) sysctl$net_inet_tcp(&(0x7f0000000040)={0x4, 0x2, 0x6, 0xe}, 0x4, 0xfffffffffffffffe, &(0x7f0000000000)=0x3c, 0x0, 0x0) syz_emit_ethernet(0x1000e, &(0x7f0000000380)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x14, 0xfffc, 0x0, 0x0, 0x84, 0x0, @broadcast, @local={0xac, 0x14, 0x0}}}}}}) 530.6225ms ago: executing program 5 (id=1145): mknod(&(0x7f0000000000)='./bus\x00', 0x20, 0xd01) r0 = open(&(0x7f00000004c0)='./bus\x00', 0x0, 0x0) ioctl$VNDIOCSET(r0, 0x20006470, 0x0) sysctl$net_inet6_icmp6(&(0x7f0000000040)={0x4, 0x18, 0x3a, 0x3}, 0x4, &(0x7f0000001580), 0x0, 0x0, 0x0) mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) sysctl$net_inet_carp(&(0x7f0000000040)={0x4, 0x2, 0x6, 0x1}, 0x4, 0x0, 0x0, &(0x7f00000010c0)="3b229aa0", 0x4) 530.082874ms ago: executing program 6 (id=1146): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x80, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x81, 0x3b, 0x17, 0x1}, {0x1, 0x6, 0x7, 0x400006}, {0x6, 0x2, 0x5, 0x5}]}) syz_emit_ethernet(0x1000e, &(0x7f0000000080)=ANY=[]) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x80, 0x0) ioctl$FIOASYNC(r1, 0x8004667d, 0x0) ioctl$BIOCSRSIG(r1, 0x80044272, &(0x7f0000000100)) sysctl$net_pipex(&(0x7f00000000c0)={0x4, 0x22, 0x1}, 0x3, 0x0, 0x0, 0x0, 0x0) openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) 529.521663ms ago: executing program 5 (id=1147): syz_emit_ethernet(0x1156, &(0x7f0000001c00)=ANY=[@ANYBLOB="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"]) 528.527425ms ago: executing program 4 (id=1148): select(0x5b, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xe, 0x4, 0x2800000000000000, 0x181c, 0x8, 0x423f}, 0x0, 0x0, 0x0) mknod(&(0x7f0000000000)='./file1\x00', 0x2000, 0x285b9a) r0 = open(&(0x7f0000000080)='./file1\x00', 0x40, 0x132) r1 = kqueue() kevent(r1, &(0x7f00000000c0), 0xc, &(0x7f00000001c0), 0x15, 0x0) ioctl$FIONBIO(r0, 0x82907003, &(0x7f0000000140)=0x1) r2 = socket(0x2, 0x4, 0x0) sendto$unix(r2, &(0x7f0000000200)="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", 0xb1, 0xe, 0x0, 0x78) 526.276474ms ago: executing program 6 (id=1149): open(&(0x7f0000000040)='./file0\x00', 0x78e, 0x20) ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9f, 0x0) r0 = getpid() setgroups(0x0, 0x0) ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x510, r0) setrlimit(0x1, &(0x7f0000000180)={0x200, 0x95f}) open(&(0x7f0000000000)='./file0\x00', 0x615, 0x0) chmod(&(0x7f0000000180)='./file0\x00', 0x23f) setuid(0xee01) truncate(&(0x7f0000000400)='./file0\x00', 0x1) 524.535174ms ago: executing program 5 (id=1150): kqueue() (async) kqueue() select(0x40, &(0x7f0000000000)={0x1, 0x1, 0x7fffffff, 0x200, 0x100000000, 0x6, 0x2, 0x8001}, &(0x7f0000000080)={0xfff, 0x100, 0x100000000000, 0x7ffffffffffffffc, 0x9, 0x2, 0xd3, 0x100000001}, 0x0, 0x0) 228.014698ms ago: executing program 3 (id=1151): r0 = socket(0x1e, 0x3, 0x0) sendmsg$unix(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="7607d771020000004e2b1f0000000000", 0x10}], 0x1}, 0x0) 223.232695ms ago: executing program 5 (id=1152): sysctl$hw(&(0x7f00000000c0)={0x6, 0x3}, 0x0, &(0x7f0000000100)="ff00231ce1a00ccae5ef6e01000000000000007b27f47848856ec62d4a6b679eaa441d6d3897d497de4ecd00027000ab1cd805d22c0100000064cd29c526531c3a8cb830c040e606d97ec3a88bab935d8bfa84eefadfebb29a973fa937bf048fc10491220ebd5fc37b8658f5bd40819848b8948f9b7514c6b5f16e8e04d4a580d4e31600"/146, &(0x7f0000000240)=0x78, 0x0, 0x0) 222.847997ms ago: executing program 3 (id=1153): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = getppid() msgctl$IPC_SET(0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x81, 0x77}) fcntl$lock(r1, 0x8, &(0x7f0000000040)={0x3, 0x1, 0x0, 0x3, r2}) bind$unix(r1, &(0x7f0000000200)=@file={0xd570d0466b6018f, './file0\x00'}, 0xa) listen(r1, 0x300000) accept$unix(r1, 0x0, 0x0) dup2(r0, r1) r3 = socket$unix(0x1, 0x5, 0x0) connect$unix(r3, &(0x7f0000000000)=@file={0xd1653077bafa0114, './file0\x00'}, 0xa) openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) (async) socket$unix(0x1, 0x5, 0x0) (async) getppid() (async) msgctl$IPC_SET(0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x81, 0x77}) (async) fcntl$lock(r1, 0x8, &(0x7f0000000040)={0x3, 0x1, 0x0, 0x3, r2}) (async) bind$unix(r1, &(0x7f0000000200)=@file={0xd570d0466b6018f, './file0\x00'}, 0xa) (async) listen(r1, 0x300000) (async) accept$unix(r1, 0x0, 0x0) (async) dup2(r0, r1) (async) socket$unix(0x1, 0x5, 0x0) (async) connect$unix(r3, &(0x7f0000000000)=@file={0xd1653077bafa0114, './file0\x00'}, 0xa) (async) 126.230508ms ago: executing program 5 (id=1154): syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) writev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000000)="c886b4d3", 0x4}], 0x1) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) open(&(0x7f0000000080)='./bus\x00', 0x20, 0x55) r0 = socket(0x2, 0x3, 0x3) syz_extract_tcp_res$synack(&(0x7f0000000040), 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x200000000000a, &(0x7f00000000c0)="b5", 0x1) connect$unix(r0, &(0x7f0000000000), 0x10) writev(r0, &(0x7f0000000a80)=[{0x0}], 0x1) 123.417516ms ago: executing program 2 (id=1155): clock_getres(0x6, &(0x7f0000002b80)) (async) clock_getres(0x6, &(0x7f0000002b80)) getrlimit(0x1, &(0x7f0000000040)) socket(0x0, 0x2, 0x0) openat$pf(0xffffffffffffff9c, &(0x7f00000000c0), 0x82, 0x0) (async) r0 = openat$pf(0xffffffffffffff9c, &(0x7f00000000c0), 0x82, 0x0) setuid(0xee01) (async) setuid(0xee01) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x8, 0x0, 0x0, 0x0, 0x0, 0x90, 0x3ff}, 0x2, 0x10000, 0x0, 0x0, 0x1, 0x800000000000108, 0x5, 0x9}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xff0a, 0x0, 0x37) ioctl$TIOCSETA(r0, 0xcd60441a, &(0x7f0000000180)={0x2, 0x100, 0xffffffff, 0x403, "000000000a00000f000000aff0338a6b4fc6d700", 0x8, 0x7}) r1 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$WSMUXIO_REMOVE_DEVICE(r1, 0x80085762, &(0x7f0000000080)={0x3, 0x1c}) 122.136287ms ago: executing program 4 (id=1156): select(0x40, &(0x7f0000000180)={0xfffffffffffffffd, 0x44809e9d, 0xfffffffffffffffb, 0x9, 0x2000000000000000, 0x210, 0x8, 0x3}, 0x0, 0x0, 0x0) (async) mknod(&(0x7f00000001c0)='./file0\x00', 0x2000, 0x205b9a) open(&(0x7f0000002600)='./file0\x00', 0x78e, 0x0) (async) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x0, &(0x7f0000000100)}) (async) r0 = open(&(0x7f0000000080)='./file0\x00', 0x2, 0x109) (async, rerun: 64) mknod(0x0, 0x2000, 0x637f) (rerun: 64) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async, rerun: 64) writev(r0, &(0x7f00000001c0)=[{0x0}], 0x1) (rerun: 64) r1 = socket(0x1, 0x2, 0x0) (async) r2 = kqueue() kevent(r2, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x19, 0x0) (async) r3 = open(&(0x7f0000000240)='./file0\x00', 0x80, 0x4) ioctl$FIONBIO(r3, 0x82907003, &(0x7f0000000140)=0x2) (async) socket(0x11, 0x3, 0x0) sendto$unix(r1, &(0x7f0000000280)="b100050160000004000000000700f882e9000002008106cfa1e4fffdf96ecfc73fd301000000aa0416fa4f376b36acf00b0400000000000000c8cf5f3fc303ebe1aa5323edeb51e2f0ca3ebbc257699a1f1302000000000000007d026ba8af630037de2102000000720fd38bfbb770c1f5a8d4ddaec872ea772ec58904000000008d9800361b1257aba9c500022012010000a650000000000000000000000000000000040000000000000000783158003bb9a0e96302c63f", 0xb8, 0x800, 0x0, 0x0) 1.636851ms ago: executing program 7 (id=1157): r0 = socket$unix(0x1, 0x2, 0x0) r1 = socket(0x18, 0x1, 0x0) setsockopt(r1, 0x1000000029, 0xd, &(0x7f0000000000), 0x0) shutdown(r0, 0x0) setsockopt$sock_int(r1, 0xffff, 0x80, &(0x7f0000000000)=0xfffffffd, 0x4) bind$unix(r0, &(0x7f0000000200)=@file={0xd570d0466b6018f, './file0\x00'}, 0xa) sendmsg$unix(r0, &(0x7f0000000080)={&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0xa, 0x0}, 0x408) 1.169459ms ago: executing program 6 (id=1158): r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x186) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x2012, r0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r1 = socket$inet6(0x18, 0x4000, 0x4d) openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0x68, &(0x7f0000000000)={{0x18, 0x2, 0x9e}, {0x18, 0x2, 0x400, 0x2}, 0x0, [0x5364, 0x8001, 0x0, 0x6, 0x401, 0x9, 0x9, 0x7]}, 0x3c) ioctl$FIOSETOWN(r1, 0x8004667c, &(0x7f0000000080)=0x1) 216.806µs ago: executing program 2 (id=1159): ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x80, 0xf3, 0x80, 0xffffffff}, {0x5, 0x81, 0x4, 0x4}, {0x16, 0x7e, 0x0, 0x800ee68}]}) (async) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x80, 0xf3, 0x80, 0xffffffff}, {0x5, 0x81, 0x4, 0x4}, {0x16, 0x7e, 0x0, 0x800ee68}]}) openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x8, 0x0) (async) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x8, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000200)={'tap', 0x0}) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) open(&(0x7f0000000080)='./file0\x00', 0x2, 0xfa) (async) r1 = open(&(0x7f0000000080)='./file0\x00', 0x2, 0xfa) ioctl$WSMOUSEIO_SCALIBCOORDS(r1, 0x81205724, &(0x7f0000000100)={0x7ff, 0xb, 0x30, 0x5, 0x3fe, 0x80010001, 0x5, 0x10, [{0x0, 0x4006, 0x7, 0x9}, {0xc5f, 0x0, 0x9, 0xb}, {0x3a77, 0x5, 0x3, 0x400}, {0x80000000, 0xd, 0x10b, 0x70a}, {0x2401, 0xff59, 0x1002808, 0x7}, {0x20000008, 0x204, 0x2, 0xb4}, {0xce4, 0x91, 0x8, 0xfffffffe}, {0x0, 0x9, 0x7ff, 0xe}, {0x4, 0x9, 0x9, 0x7}, {0xa, 0x1, 0x2cee, 0x400004}, {0x1bc, 0x80000002, 0x0, 0x4}, {0x80, 0xdbc, 0x7, 0x8000003}, {0x4001ff, 0x1, 0xd, 0x2c6}, {0x29a70716, 0xfffffffd, 0x0, 0x9}, {0x2, 0x9, 0xa, 0xfffffffd}, {0x0, 0xffffffff, 0x2, 0x200009}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r1, 0x80184404, &(0x7f00000001c0)={0x0, 0xfffffffffffffffe, 0x0}) ioctl$VNDIOCSET(r1, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) (async) ioctl$VNDIOCSET(r1, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) r2 = socket$inet(0x2, 0x3, 0x0) setsockopt$sock_int(r2, 0xffff, 0x800, &(0x7f0000000000)=0x1, 0x2) (async) setsockopt$sock_int(r2, 0xffff, 0x800, &(0x7f0000000000)=0x1, 0x2) ioctl$FIOGETOWN(r1, 0x4004667b, &(0x7f00000000c0)) clock_getres(0x0, 0xfffffffffffffffe) unveil(&(0x7f0000000200)='./file1\x00', &(0x7f00000002c0)='r\x00') writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000240)="840cbf3e87c006", 0x7}], 0x1) (async) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000240)="840cbf3e87c006", 0x7}], 0x1) sysctl$kern(0x0, 0x0, &(0x7f0000001a40)="a71de4a16809d26655c61b4f0919d7aa04fdff009cb3e86fff46c0fb2b5c3f7aadce00000cca113f16836432fc6c51c1b866615b5718d547ce837f4688fac298ddf87728d945503ab0073f7d28099f063d2b95efdf9d5314ef9bd32d83dc6160056660b154333af61fac8e54149a4a8fb4961a3a00c1b7fe5ee9d6b8", &(0x7f0000000000)=0x7c, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x22, &(0x7f0000000140)=ANY=[]) 0s ago: executing program 4 (id=1160): pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x10000) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="19", 0x3a4e1e905c56cdb7}], 0x1) syz_open_pts() readv(r0, &(0x7f0000000540)=[{&(0x7f0000000740)=""/145, 0x81}, {&(0x7f0000000140)=""/152, 0xfffffee8}, {&(0x7f0000000300)=""/213, 0xd9}, {&(0x7f0000000400)=""/142, 0x8e}, {&(0x7f00000004c0)=""/108}], 0x4) execve(0x0, 0x0, 0x0) ioctl$WSMUXIO_REMOVE_DEVICE(0xffffffffffffffff, 0x80085762, &(0x7f0000000040)={0x1}) socket(0x18, 0xc003, 0x3a) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.145' (ED25519) to the list of known hosts. pckbd_enable: command error WARNING: thread `nfsio' (383222) exits with status -1 WARNING: thread `nfsio' (121594) exits with status -1 WARNING: thread `nfsio' (249228) exits with status -1 WARNING: thread `nfsio' (179661) exits with status -1 pckbd_enable: command error pckbd_enable: command error pppx: unable to set addresses for pppx1, error=17 pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error OpenBSD/amd64 (ci-openbsd-main-8.us-central1-b.c.syzkaller.internal) (tty00) login: pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pppx: unable to set addresses for pppx1, error=17 pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error uvn_flush: obj=0xfffffd806a704420, offset=0x0. error during pageout. uvn_flush: WARNING: changes to page may be lost! 0#+"$%.!",%: #/--!.$ %22/2 OpenBSD/amd64 (\rC+#&/lgQ{رe)j1A 0Z52xPm&2qU~`s[`z'?R;4.ri~p8 F81<ϡykƄy&AZ[eh.) (tty00) login: pckbd_enable: command error pckbd_enable: command error WARNING: thread `nfsio' (307272) exits with status -1 WARNING: thread `nfsio' (336432) exits with status -1 WARNING: thread `nfsio' (367635) exits with status -1 WARNING: thread `nfsio' (30751) exits with status -1 panic: kernel diagnostic assertion "dupe == NULL" failed: file "/syzkaller/managers/main/kernel/sys/uvm/uvm_page.c", line 144 Starting stack trace... panic(ffffffff8337cc7b) at panic+0x1ba __assert(ffffffff833bb11a,ffffffff833a810d,90,ffffffff8335a0b3) at __assert+0x29 uvm_pagealloc_pg(fffffd8006b51580,fffffd800bf4f0f8,3cb2c99000,0) at uvm_pagealloc_pg+0x54b uvm_pagealloc(fffffd800bf4f0f8,3cb2c99000,0,3) at uvm_pagealloc+0x252 pmap_get_ptp(fffffd800bf4f0e8,79659337b000) at pmap_get_ptp+0x1d0 pmap_enter(fffffd800bf4f0e8,79659337b000,6d8f2000,3,22) at pmap_enter+0x3a3 uvm_fault_upper(ffff8000314f7990,ffff8000314f79c8,ffff8000314f7890) at uvm_fault_upper+0x474 uvm_fault(fffffd806c9cb5d0,79659337b000,0,2) at uvm_fault+0x178 upageflttrap(ffff8000314f7b30,79659337b2a8) at upageflttrap+0xa0 usertrap(ffff8000314f7b30) at usertrap+0x413 recall_trap() at recall_trap+0x8 end of kernel end trace frame: 0x79659337b340, count: 246 End of stack trace.