last executing test programs: 9.894954625s ago: executing program 2 (id=701): writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)="76e5eac907f9ccf7a251ceddcec7d6aa45cffe2c63a56077123a276d3ba4e9d17eb3eb5db12a3783a8e0620d357de1fe04fa9465b5bd1286e9624dec06a00c222f", 0x41}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = dup(0xffffffffffffffff) ioctl$WSMUXIO_LIST_DEVICES(r0, 0xc1045763, &(0x7f0000000240)={0x6, [{0x3, 0x6}, {0x3, 0x5}, {0x3, 0x10000}, {0x3, 0x800}, {0x3, 0x6078dc30}, {0x0, 0x2}, {0x3, 0xffff}, {0x2, 0x7}, {0x0, 0x3}, {0x1, 0x6}, {0x3, 0x8}, {0x3, 0x3}, {0x3, 0x5}, {0x3, 0x7}, {0x3, 0x1}, {0x1, 0x7}, {0x2, 0xc}, {0x3, 0xf}, {0x1, 0x2}, {0x2, 0x401}, {0x1, 0x3}, {0x2, 0x40}, {0x3, 0x3}, {0x3, 0x5}, {0x1, 0x2}, {0x3, 0x4}, {0x3, 0x8}, {0x1, 0x7}, {0x3, 0xfffffff7}, {0x3, 0x2}, {0x1, 0xc1b7}, {0x3, 0x80000000}]}) mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x2, 0x0) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0x0, [{&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000681000/0x4000)=nil}, {&(0x7f0000695000/0x2000)=nil, &(0x7f0000417000/0x3000)=nil}, {&(0x7f000063a000/0x4000)=nil, &(0x7f000013c000/0x4000)=nil}, {&(0x7f0000044000/0x4000)=nil, &(0x7f0000ff7000/0x3000)=nil, 0xfffffffffffffffd}, {&(0x7f000048b000/0x1000)=nil, &(0x7f0000188000/0x2000)=nil, 0xfffffffffffffffc}, {&(0x7f000069d000/0x4000)=nil, &(0x7f0000049000/0x3000)=nil}, {&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil}, {&(0x7f00003d7000/0x4000)=nil, &(0x7f0000159000/0x4000)=nil}, {&(0x7f00003ee000/0x2000)=nil, &(0x7f0000729000/0x1000)=nil}, {&(0x7f000015b000/0x3000)=nil, &(0x7f00004f6000/0x3000)=nil}, {&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0xfffffffffffffffe}, {&(0x7f00005fd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x5}, {&(0x7f0000691000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil}, {&(0x7f0000ff2000/0x2000)=nil, &(0x7f000015a000/0x1000)=nil}, {&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x2}, {&(0x7f0000696000/0x1000)=nil, &(0x7f0000001000/0x800000)=nil, 0x1000000000}], './file0\x00', 0xfffffffc}) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r2 = dup2(r1, r1) ioctl$FIONREAD(r2, 0x8020699d, &(0x7f00000001c0)) syz_emit_ethernet(0x12, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffff0500ffff8847"]) unveil(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000300)='W\x00') mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) 9.548006187s ago: executing program 2 (id=707): r0 = open(&(0x7f0000000040)='./file0\x00', 0x200, 0x0) r1 = socket(0x18, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f00000003c0)={0x4, 0x7f, 0xfffffff5, 0x3, "c3d2f360b2a35b2f10e1df372123cfa34f850826", 0x2}) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) setreuid(0x0, 0xee01) r3 = shmget$private(0x0, 0x3000, 0x386, &(0x7f0000ffa000/0x3000)=nil) shmctl$IPC_SET(r3, 0x1, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x0, 0x140}, 0x0, 0x0, 0x0, 0xffffffffffffffff}) r4 = socket(0x11, 0x3, 0x0) sendto$unix(r4, &(0x7f00000000c0)="b1000501", 0x4, 0x0, 0x0, 0x0) shmat(r3, &(0x7f0000ffa000/0x3000)=nil, 0x1800) shmctl$IPC_RMID(r3, 0x0) r5 = kqueue() ioctl$VMM_IOC_RUN(r0, 0xc0205602, &(0x7f0000000300)={0x524, 0x3, 0xb4, 0xfff9, &(0x7f0000000080)={{0x6, 0x7, 0xe, 0x0, 0x6, 0x9, 0x101}, {[0x3, 0x479, 0xfffffffffffffffa, 0x3, 0x9, 0x9, 0x385e, 0x5, 0x1d, 0x6, 0x3, 0x8, 0x1, 0x9, 0x10, 0x6c10, 0x6, 0x1], [0x80000000, 0x8000000000000000, 0x40, 0x1, 0x6, 0x8, 0xc46d, 0x4, 0xffffffff, 0x80], [0x97, 0xa43, 0x5, 0x7, 0x6, 0x3, 0x7], [0xc6, 0xb, 0xeab, 0x2, 0xa], [{0x7ff, 0x1, 0x1, 0x3f}, {0x4, 0xd, 0x1, 0x7}, {0x1, 0x8000, 0x9, 0xffffffffffff8001}, {0x25, 0x6, 0x1}, {0x1ff, 0x3, 0x2, 0x5db}, {0x0, 0x6, 0xa82, 0x6}, {0x7, 0x3, 0x27, 0xa}, {0x4, 0xf, 0x401, 0xc4}], {0x4, 0x1, 0x4, 0x2}, {0x5, 0x6, 0x0, 0x7}}}, 0x8, 0x3}) kevent(r5, &(0x7f0000000380)=[{{r2}, 0xfffffffffffffffb, 0x51, 0xf0000000, 0x2ef5, 0x6}], 0x1005, 0x0, 0x8, 0x0) acct(0x0) acct(&(0x7f0000000000)='./file0\x00') open(&(0x7f0000000340)='./file0\x00', 0x200, 0x100) getuid() 7.818249989s ago: executing program 2 (id=714): r0 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) (async) select(0x40, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xe}, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$TIOCSETA(r1, 0xc4504443, &(0x7f0000000040)={0x6, 0x0, 0x0, 0x0, "7adbbae500000006000000000000003800", 0x9b5}) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x200100000001d, &(0x7f0000000080), 0x0) (async) r3 = socket(0x14, 0x8000, 0xfe) setsockopt(r3, 0x1000000000029, 0x9, &(0x7f0000000040)="03000000", 0x4) (async) setrlimit(0x8, &(0x7f0000000980)={0x7, 0x9}) (async) r4 = syz_open_pts() (async) syz_open_pts() writev(r4, &(0x7f0000000700)=[{&(0x7f0000000080)="34eb4cd59e8456ebc0881681c60e1cd9e0bf01b618b3cb934394c5951c1db0fd943a", 0xff99}], 0x1) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x5, 0x0, 0x0, 0x0, 0x0, 0x39}, 0x53b7, 0x7, 0x0, 0x0, 0x0, 0x101000000, 0x10000000000009}) (async) r5 = socket(0x18, 0x2, 0x0) close(r5) (async) r6 = socket(0x800000018, 0x1, 0x0) bind$unix(r6, &(0x7f0000000140)=@abs={0x1f95d27d48731892, 0x7}, 0x8) connect$unix(r3, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0xa) (async) r7 = socket(0x800000018, 0x1, 0x0) bind$unix(r7, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) (async) r8 = kqueue() kevent(r8, &(0x7f0000000000)=[{{r0}, 0xfffffffffffffffe, 0x7b, 0x40000000, 0xfff, 0x4}], 0x5, 0x0, 0x2dbc, 0x0) dup(r4) (async) r9 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r9, 0x0, 0x24, &(0x7f0000000180)="fd0cc085", 0x4) (async) ktrace(&(0x7f0000000040)='./file0\x00', 0x4, 0x20, 0x0) (async) mknod(&(0x7f0000000400)='./file0\x00', 0x2000, 0x5c4a) unlink(0x0) symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./bus\x00') 4.771043368s ago: executing program 2 (id=744): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0) r1 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0) writev(r1, &(0x7f0000000080)=[{&(0x7f00000009c0)="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", 0x118}], 0x1) execve(0x0, 0x0, 0x0) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000000)={0x3, &(0x7f0000000080)=[{0x2, 0xf7, 0xff, 0x9}, {0x74, 0x3f, 0x4, 0xa1}, {0x2006, 0x40, 0x2, 0xfff}]}) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000340)={'tap', 0x0}) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "db8344", 0x8, 0x11, 0x0, @rand_addr="fe0000000000000000d14400002000", @local={0xfe, 0x80, '\x00', 0x0}, {[], @udp={{0x0, 0x2, 0x8}}}}}}}) sysctl$vm(&(0x7f0000000000)={0x2, 0x8}, 0x2, 0x0, 0x0, &(0x7f0000000080)="7d8d7a23", 0xffffffffffffffbd) 4.17247931s ago: executing program 2 (id=755): ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x100000000000000, 0x10000000000001}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x18, 0x3, 0x3a) setsockopt(r0, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b905812eaa4e713048e69931929648", 0x14) r1 = socket(0x2, 0x400000000002, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setsockopt(r1, 0x0, 0x1f, &(0x7f0000000180)="b1f5d915", 0x4) 4.009754266s ago: executing program 2 (id=757): r0 = syz_open_pts() sendmsg$unix(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f0000000080), 0x1c, 0x0}, 0x0) (async) bind$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) r1 = socket(0x18, 0x1, 0x0) close(r1) (async) close(0xffffffffffffffff) (async, rerun: 64) socket$inet(0x18, 0x3, 0x102) (async, rerun: 64) sendmsg$unix(r1, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0) (async) ioctl$TIOCSTOP(r0, 0x2000746f) ioctl$TIOCSTAT(r0, 0x20007465, 0x0) (async) setreuid(0x0, 0xee01) (async) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) (async, rerun: 64) r2 = socket(0x2, 0x2, 0x0) (rerun: 64) ioctl$FIONREAD(r2, 0x8020690e, &(0x7f00000001c0)) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000580), 0x40, 0x0) ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) (async) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x25, 0x0, 0x0, 0x8000001}, {0xb1, 0x10, 0x2, 0x4}, {0x16, 0xf2, 0x7f, 0x400b}]}) (async) pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000240)="6aab0d39fa00fa80404c424f01000000000000004fbace19bc53ad50190f1c70ad6da3bcfed74890", 0x28}], 0x1, 0x6) (async) r4 = openat$pf(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) ioctl$FIOASYNC(0xffffffffffffffff, 0x8004667d, &(0x7f0000000080)=0x80000005) (async, rerun: 64) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async, rerun: 64) ioctl$BIOCSETF(r3, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) (async) readv(r0, &(0x7f0000000500)=[{&(0x7f00000002c0)=""/101, 0x65}, {&(0x7f0000000340)=""/172, 0xac}, {&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000000400)=""/1, 0x1}, {&(0x7f0000000440)=""/135, 0x87}], 0x5) (async) syz_emit_ethernet(0xe, &(0x7f0000000280)=ANY=[@ANYBLOB="88fb52c11ba5cf6eaaaaaa8faaaabb0000000000000807d49f23e29f"]) (async) sysctl$net_inet_tcp(&(0x7f0000000b00)={0x4, 0x2, 0x6, 0x17}, 0x4, &(0x7f0000000b40)="a40818321cf6", &(0x7f0000000bc0)=0x6, &(0x7f0000000c00)="cde13275", 0x4) (async, rerun: 32) ioctl$TIOCSETA(r4, 0x802c7414, &(0x7f0000000200)={0x3, 0x9, 0x6, 0x7ff, "742a4c70790b3ecc1fa863170f8084432438aa19", 0x601, 0x7}) (async, rerun: 32) sysctl$net_inet_tcp(&(0x7f0000000000)={0x4, 0x2, 0x6, 0xe}, 0x4, &(0x7f0000000040)="eccf8f292bea4e793e8217ee3624245ce61c01a7c2587529e526d6f1917cc41bd27e8bc6335279a48a2ff2688c75390ed913fadb44acf0ca4269ca21cac414c0b03562c19b7f9d4c9b55e700ef83d3898cadcf5b59194cbdd22e6980a0da01ca3fb965432c238ffd5ea5030ad70f3d2f905091948b555696183f7f7dccafc9e42086e9997cb14725ddf8a1dcca0b92a251091219f4c0da715d685f3cfb2ae0cc300c7e45750ce5edff862eb2ff85e84ed1", &(0x7f0000000100)=0xb1, &(0x7f0000000140)="bce30022aac65fa4fcdeb4b6a636a09d1adb164bcd093dfedaddb447929b7e1fdb0244d1ea6f6cbec8c03b466b897be80fdd523d2cfb5c7f51b9d6fb92", 0x3d) (async) ioctl$TIOCMSET(r0, 0x8004746d, &(0x7f0000000180)=0x101) 3.774679856s ago: executing program 5 (id=765): syz_emit_ethernet(0x3e, &(0x7f0000000200)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x8, 0x0, 0x0, @local={0xfe, 0x80, '\x00', 0x0}, @local={0xfe, 0x80, '\x00', 0x0}, {[@fragment={0x33, 0x0, 0x5}]}}}}}) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000000)={0x3, &(0x7f0000000280)=[{0x2, 0x8, 0xfa, 0x2}, {0x1c, 0x1, 0x0, 0xb}, {0x6, 0x3f, 0x3, 0x800}]}) write(r0, &(0x7f0000000200)="d81ad3d20cf7eb4e9be33bbd1a30", 0xe) 3.478556432s ago: executing program 5 (id=767): r0 = semget$private(0x0, 0x4, 0x9a) r1 = open$dir(&(0x7f0000000100)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000140)='./file1\x00', r1, &(0x7f0000000d80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') open$dir(&(0x7f0000000b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x0) symlinkat(&(0x7f0000000480)='./file0\x00', r1, &(0x7f0000000180)='./file1\x00') r2 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r2, &(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', r2, &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') symlinkat(&(0x7f0000000000)='./file0\x00', r2, &(0x7f0000000200)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mknod(&(0x7f0000000400)='./file0\x00', 0x2000, 0x0) unlink(&(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') unlink(&(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000e80)='./file1\x00', &(0x7f0000000f80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') semop(r0, &(0x7f0000000080)=[{0x2, 0x400, 0x1000}, {0x3, 0x3}, {0x0, 0xe, 0x1800}, {0x1, 0x5, 0x800}], 0x4) openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) 3.170224055s ago: executing program 5 (id=773): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) getrlimit(0x6, 0x0) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000240)={'tap', 0x0}) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000200)={0x2, &(0x7f0000000100)=[{0x74, 0x0, 0x0, 0x6}, {0x8006}]}) r1 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) ioctl$KDSETLED(r1, 0x20004b42, &(0x7f00000000c0)=0x3) r2 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) getdents(r2, &(0x7f0000001180)=""/4096, 0x1000) getdents(r2, &(0x7f0000000180)=""/4096, 0x1000) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr, @broadcast}, @udp={{0x0, 0x3, 0x8}}}}}}) 2.781616278s ago: executing program 5 (id=780): symlink(&(0x7f0000000900)='.\x00', &(0x7f0000000240)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) sysctl$kern(&(0x7f0000000040)={0x1, 0x3f}, 0x4, &(0x7f0000000040), 0x0, 0x0, 0xfffffffffffffda3) select(0x40, &(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) getsockopt(r1, 0x6, 0x2, 0x0, 0x0) recvmmsg(r1, &(0x7f00000004c0)={&(0x7f0000000480)={&(0x7f0000000280)=@un=@abs, 0x8, &(0x7f00000002c0), 0x0, &(0x7f0000000440)=""/4, 0x4}, 0x1}, 0x10, 0x1002, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) link(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='./file0\x00') r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000002c0), 0x10000, 0x0) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) ioctl$BIOCSETF(r3, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) r4 = kqueue() kevent(r2, &(0x7f0000000340)=[{{r3}, 0x3, 0x1, 0x1, 0x40, 0x2000000000000}, {{r0}, 0xfffffffffffffff8, 0x1e, 0x4, 0x100, 0x9}, {{r0}, 0xfffffffffffffff8, 0x40, 0x4, 0x6, 0x7b65}, {{r0}, 0xfffffffffffffffe, 0x0, 0x8, 0x3b, 0x200}], 0x80000001, &(0x7f00000003c0)=[{{r0}, 0xfffffffffffffff9, 0x1cce24823a55f1ad, 0x1, 0x0, 0x7}, {{r1}, 0xfffffffffffffffb, 0x15, 0x1, 0xffff, 0x8}, {{r4}, 0xfffffffffffffffb, 0x10, 0x1, 0x9, 0x1}], 0x9, &(0x7f0000000500)={0x1ff, 0x2}) 2.779704102s ago: executing program 6 (id=781): madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setreuid(0x0, 0xee01) r1 = socket(0x18, 0x1, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000100)={0x3, &(0x7f0000000040)=[{}, {}, {0x3, 0x0, 0x0, 0x2}]}) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x11}, 0x4000000000000007, 0x0, 0x0, 0x0, 0x0) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000000)={{0x7ffffffe, 0x0, 0x0, 0x0, 0x0, 0x6a, 0xfffe}, 0x7, 0x4, 0x1}) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x3, 0x0, 0x1000001ff}) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket(0x18, 0x1, 0x0) close(r2) r3 = socket(0x18, 0x2, 0x0) setsockopt(r3, 0x1000000000029, 0x9, &(0x7f0000000040)='\x00\x00\x00\x00', 0x4) setsockopt(r2, 0x1000000029, 0x2e, 0x0, 0x0) connect$unix(r2, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) r4 = socket$inet(0x2, 0x2, 0x0) r5 = socket$inet(0x2, 0x2, 0x0) dup2(r5, r4) setsockopt$inet_opts(r5, 0x0, 0x200000000000a, &(0x7f0000000000)="ea00005c00000000", 0x1) setsockopt$inet_opts(r4, 0x0, 0x200000000000c, &(0x7f00000003c0)="ea00000100000000", 0x8) setsockopt$inet_opts(r4, 0x0, 0xd, &(0x7f0000000240)="ea00000100000000", 0x8) fchflags(r4, 0x10000) sendmmsg(r0, &(0x7f0000000000)={&(0x7f0000000f80)={0x0, 0xffffffffffffff0e, 0x0, 0x39, 0x0}, 0xb5}, 0x1, 0x406) lseek(r0, 0x10000, 0x0) r6 = open(&(0x7f0000000040)='./file0\x00', 0x80, 0x18c) listen(0xffffffffffffffff, 0x485) fcntl$lock(r1, 0x9, &(0x7f00000000c0)={0x3, 0x2, 0x200000007, 0xc1, 0xffffffffffffffff}) open(&(0x7f0000000000)='./file0\x00', 0x2f2, 0x0) poll(&(0x7f0000000080)=[{r6, 0x7d}], 0x1, 0x0) 2.771716457s ago: executing program 5 (id=783): r0 = syz_open_pts() mknod(&(0x7f0000000080)='./file0\x00', 0x2000, 0x5200) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) kevent(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x3, 0x7fffffff}) r1 = kqueue() kevent(r1, &(0x7f00000000c0), 0x30, 0x0, 0x57d, 0x0) kevent(r1, 0x0, 0x0, &(0x7f0000000600), 0x2, 0x0) fcntl$lock(r0, 0x9, &(0x7f0000000040)={0x1, 0x3, 0x4, 0x1000300000000}) flock(r0, 0x2) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x62}) r2 = syz_open_pts() close(r2) r3 = syz_open_pts() ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f00000006c0)={0x0, 0x0, 0xffffdffc, 0xfffffff7, "ffff0d000300ef01018b00690200000000000400"}) writev(r2, &(0x7f0000000480)=[{&(0x7f0000000240)="720885b9a88adf69e04ddd94ebff9af7da5900150214c90d", 0x18}], 0x1) readv(r3, &(0x7f0000000140)=[{&(0x7f0000000000)=""/201, 0xc9}], 0x1) close(r0) 2.60463104s ago: executing program 6 (id=788): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) setreuid(0xee00, 0x0) chmod(&(0x7f00000000c0)='./file0\x00', 0x63) r0 = getuid() setreuid(0xee00, 0x0) r1 = syz_open_pts() ioctl$TIOCSETD(r1, 0x8004741b, &(0x7f0000002e80)=0x7fff) setreuid(0xee00, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x2000000000000243, &(0x7f0000000100)}) r2 = socket(0x2, 0x2, 0x0) ioctl$FIONREAD(r2, 0xc0106924, &(0x7f00000001c0)) r3 = kqueue() kevent(r3, &(0x7f00000000c0), 0x101, &(0x7f0000000180), 0x6, 0x0) r4 = socket(0x2, 0x2, 0x0) ioctl$FIONREAD(r4, 0x802069de, &(0x7f00000001c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setreuid(0xee00, 0x0) r6 = getuid() setreuid(0xee00, r6) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r7 = socket(0x2, 0x2, 0x0) ioctl$FIONREAD(r7, 0x8020690c, &(0x7f00000001c0)) getsockopt$sock_cred(r5, 0xffff, 0x1022, &(0x7f0000000580)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) chown(&(0x7f0000000200)='./file0\x00', 0x0, r8) r9 = openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x10000, 0x0) ioctl$VMM_IOC_RUN(r9, 0xc0205602, &(0x7f0000000180)={0x7, 0x0, 0x40, 0x2, &(0x7f0000000240)={{0x8, 0x7, 0xc2, 0x9, 0x8, 0x1, 0x10}, {[0xe, 0x6, 0x7, 0xc, 0x3, 0x6, 0x1e41, 0x6, 0x200, 0x800, 0x6, 0x200, 0x7, 0x7fffffffffffffff, 0x0, 0x1, 0x2, 0x6], [0x4c33, 0x8, 0xb, 0xc4b, 0x10, 0x3, 0x401, 0x4, 0xffffffffffffffff, 0x8], [0x7, 0x5, 0x9, 0x9, 0x8, 0x80], [0xd45a, 0x1000, 0x80000001, 0x8, 0xc03, 0x4], [{0x7, 0x8001, 0x3, 0x2d91}, {0x34, 0x7, 0x2, 0x4}, {0x966d, 0x7, 0x7ff, 0xf}, {0x891, 0x8, 0x4, 0x8000}, {0x6, 0x7, 0x0, 0x1}, {0x9, 0x8, 0x8, 0xffff}, {0x5, 0x6, 0x1, 0x5}, {0x0, 0x81, 0x7, 0x2}], {0x8000, 0x8000, 0x1, 0x4}, {0x1, 0x7f, 0x8, 0x78}}}, 0xac0, 0x4}) setreuid(0x0, r0) chdir(&(0x7f0000000100)='./file0\x00') mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0e99db6de761f86, 0x0) symlink(&(0x7f0000001340)='./file0\x00', &(0x7f0000001440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 2.055389004s ago: executing program 5 (id=792): setrlimit(0x8, &(0x7f0000000980)={0x42, 0x3fb}) r0 = syz_open_pts() kevent(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000240)={0xc8, 0xfffffffe}) r1 = kqueue() kevent(r1, &(0x7f0000000040), 0x7fffffff, 0x0, 0xffffffff, 0x0) kevent(r1, &(0x7f0000000080), 0xe4a, 0x0, 0x4000a9fa, 0x0) close(r0) r2 = syz_open_pts() sysctl$kern(&(0x7f0000000080)={0x1, 0xa}, 0x2, 0x0, 0x0, &(0x7f0000000340)="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", 0x100) mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) select(0x0, 0x0, &(0x7f0000000340), &(0x7f0000001900), &(0x7f0000000440)={0x0, 0x1}) ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f0000000140)={0x0, 0x0, 0xfbfffffe, 0xfffffffe, "d76c1f46000000ef1f0160fbf520000002000f00"}) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1) 1.917951038s ago: executing program 0 (id=794): mkdir(&(0x7f0000000180)='./file0\x00', 0x58) (async) r0 = socket(0x2, 0x2, 0x0) (async) r1 = openat$tty(0xffffffffffffff9c, &(0x7f0000000440), 0x80, 0x0) (async) sysctl$kern(&(0x7f0000000040)={0x1, 0x54}, 0x2, 0x0, 0x0, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$net_inet_esp(&(0x7f0000000040)={0x4, 0x1e, 0x2, 0x1}, 0x4000000000000006, 0x0, 0x0, 0x0, 0x0) (async) ioctl$TIOCFLUSH(r1, 0x80047410, &(0x7f0000000400)=0x3) (async) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x10004) ioctl$FIOASYNC(r2, 0x8004667d, &(0x7f0000000080)=0x7) (async) readv(r2, &(0x7f0000000340)=[{0x0}], 0x1) (async) setsockopt$sock_int(r0, 0xffff, 0x1021, &(0x7f0000000040), 0xe0) (async) accept$unix(r2, &(0x7f0000000280)=@abs, &(0x7f0000000380)=0x8) (async) r3 = getuid() sysctl$net_inet_ipip(&(0x7f0000000080), 0x4, &(0x7f0000000100)="5b57574d2c4ec4483c3bfc2c4a2d64749a2aa5a7fbc3d6c77966440e90a9010ac293d6fd896a2595f61f55c27ad24f1cb5362a8201f4c7fd449d4d28b7b2a500a7c4eabd8bf312c5d169cdf4a1b606de56ab27e0ba3587047b9e236e3089f5f4dcf1e27ef0d28ac50804f72312902233ecbb0b7feb3b085725f5795d2de91a", &(0x7f00000003c0)=0x7f, &(0x7f0000000200)="0ed14f4f31ab4e455056fe2063acf7f4bae9fdd38977d6c8cde69df028096fa92830764d44a078a81faf327d6b691f2f3e2bf62e01a4c61934fabd554369ab7474bad77e0f31e8812155fc9d7901348480e9ef75da3746be3112149c98fb461d59", 0x61) setuid(r3) r4 = syz_open_pts() close(r4) (async) r5 = syz_open_pts() (async) r6 = dup(0xffffffffffffffff) ioctl$WSMUXIO_LIST_DEVICES(r6, 0xc1045763, &(0x7f0000000240)={0x6, [{0x3, 0x6}, {0x3, 0x5}, {0x3, 0x10000}, {0x3, 0x800}, {0x3, 0x6078dc30}, {0x2, 0x2}, {0x3, 0xffff}, {0x2, 0x7}, {0x0, 0x3}, {0x1, 0x6}, {0x3, 0x8}, {0x3, 0x8}, {0x3, 0x5}, {0x3, 0x7}, {0x3, 0x1}, {0x1, 0x5}, {0x2, 0xc}, {0x3, 0xf}, {0x1, 0x2}, {0x2, 0x401}, {0x1, 0x3}, {0x2, 0x40}, {0x3, 0x3}, {0x3, 0x5}, {0x1, 0x2}, {0x3, 0x4}, {0x3, 0x8}, {0x1, 0x7}, {0x3, 0xfffffff7}, {0x3, 0x2}, {0x1, 0xc1b7}, {0x3, 0x80000000}]}) mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) (async) r7 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x12) (async) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f0000000740)={0x10, 0x0, [{&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000681000/0x4000)=nil}, {&(0x7f0000695000/0x2000)=nil, &(0x7f0000417000/0x3000)=nil}, {&(0x7f0000477000/0x3000)=nil, &(0x7f000013c000/0x4000)=nil}, {&(0x7f000010e000/0x4000)=nil, &(0x7f00006b9000/0x3000)=nil, 0xfffffffffffffffd}, {&(0x7f000048b000/0x1000)=nil, &(0x7f0000188000/0x2000)=nil, 0xfffffffffffffffc}, {&(0x7f000069d000/0x4000)=nil, &(0x7f0000049000/0x3000)=nil}, {&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil}, {&(0x7f00003d7000/0x4000)=nil, &(0x7f0000159000/0x4000)=nil, 0xfffffffffffffffd}, {&(0x7f00003ee000/0x2000)=nil, &(0x7f0000729000/0x1000)=nil}, {&(0x7f000015b000/0x3000)=nil, &(0x7f00004f6000/0x3000)=nil}, {&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0xfffffffffffffffe}, {&(0x7f00005fd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x5}, {&(0x7f0000126000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil}, {&(0x7f0000ff2000/0x2000)=nil, &(0x7f000015a000/0x1000)=nil}, {&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x2}, {&(0x7f0000696000/0x1000)=nil, &(0x7f0000001000/0x800000)=nil, 0x1}], './file0\x00', 0xfffffffc}) (async) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r8 = dup2(r7, r7) ioctl$FIONREAD(r8, 0x8020699d, &(0x7f00000001c0)) (async) syz_emit_ethernet(0x12, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffff0500ffff8847"]) (async) ioctl$TIOCSETAW(r5, 0x802c7415, &(0x7f0000000000)={0x29f57365, 0x10000005, 0x1b, 0xd, "8b030003000100787d902b56d864d3c3a3f4d3c9", 0xffffff06}) (async) writev(r4, &(0x7f00000005c0)=[{&(0x7f00000006c0)="b5db33d20e2a9630a8dcadcec03716323b4c9b200f551076716196e3cb9c64ab2e5949d739466d12d1b65bcb37a07bab0e3bcba229570ac75dce0742d1a7ebdeed549c9ba62904055da67e541f86c853440e7942d97ed705953decc74ba4d0cb1d8670ed24bdb693438d", 0x6a}], 0x1) (async) sysctl$kern(&(0x7f0000000000)={0xa}, 0x7, &(0x7f0000000080), 0x0, 0x0, 0x24) 1.915410414s ago: executing program 6 (id=796): r0 = openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) fchflags(r0, 0x1) ioctl$TIOCSPGRP(r0, 0x40047477, &(0x7f0000000040)) flock(r0, 0x0) ioctl$TIOCMSET(r0, 0x8004746d, &(0x7f0000000080)=0x7f) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0) ioctl$BIOCSRTIMEOUT(r1, 0x8010426d, &(0x7f0000000100)={0x4d, 0xff}) ioctl$TIOCDRAIN(r0, 0x2000745e) readv(r0, &(0x7f0000000440)=[{&(0x7f0000000140)=""/203, 0xcb}, {&(0x7f0000000240)=""/10, 0xa}, {&(0x7f0000000280)=""/175, 0xaf}, {&(0x7f0000000340)=""/109, 0x6d}, {&(0x7f00000003c0)=""/111, 0x6f}], 0x5) getsockopt$sock_timeval(r0, 0xffff, 0x1005, &(0x7f00000004c0), &(0x7f0000000500)=0x10) ioctl$LIOCSFD(r0, 0x80046c7f, &(0x7f0000000540)=r0) getpeername$unix(r0, &(0x7f0000000580)=@file={0x0, ""/520}, &(0x7f00000007c0)=0x20a) r2 = openat$pci(0xffffffffffffff9c, &(0x7f0000000800), 0x80, 0x0) close(r2) ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000840)={0x38, 0x5, 0x0, 0x6, "60ae750b401ba9c8d6926cc3c1c52cde6b14dd7d", 0x9, 0x7}) r3 = openat$tty(0xffffffffffffff9c, &(0x7f0000000880), 0x400, 0x0) ioctl$TIOCSETA(r3, 0x802c7414, &(0x7f00000008c0)={0x200, 0x2, 0xd, 0x5, "faa220a1d021cebec1a317bc2411352258ff45d0", 0x8, 0xec}) ioctl$TIOCMBIC(r3, 0x8004746b, &(0x7f0000000900)=0x10001) close(r2) mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1) r4 = openat$pf(0xffffffffffffff9c, &(0x7f0000000940), 0x8, 0x0) ioctl$WSMUXIO_ADD_DEVICE(r4, 0x80085761, &(0x7f0000000980)={0x1, 0x1}) setitimer(0x0, &(0x7f00000009c0)={{0x3}, {0x2, 0x6}}, &(0x7f0000000a00)) r5 = accept(r0, &(0x7f0000000a40)=@in6, &(0x7f0000000a80)=0xc) getsockopt$sock_linger(r5, 0xffff, 0x80, &(0x7f0000000ac0), &(0x7f0000000b00)=0x8) ioctl$TIOCSWINSZ(r4, 0x80087467, &(0x7f0000000b40)={0xb3, 0x9, 0x7, 0x9}) r6 = socket$inet6(0x18, 0x4000, 0x8) getsockname$inet6(r6, &(0x7f0000000b80), &(0x7f0000000bc0)=0xc) ioctl$BIOCGHDRCMPLT(r4, 0x40044274, &(0x7f0000000c00)) close(r5) 1.792874949s ago: executing program 0 (id=797): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000200)=[{0x35, 0x0, 0x0, 0x1}, {0x40, 0x3, 0xee, 0x5}, {0x6, 0x0, 0x4, 0xfffffffb}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000040)={0x0, 0x0}) write(r0, &(0x7f0000000000)="d871819e2673b7e5c70000000000", 0xe) sysctl$kern(&(0x7f0000000040)={0x1, 0x1b}, 0x2, 0x0, 0x0, 0x0, 0x0) 1.792002263s ago: executing program 7 (id=798): r0 = openat$pci(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$PCIOCWRITE(r0, 0xc00c7007, &(0x7f0000000000)={{}, 0x1}) r1 = openat$pci(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PCIOCREAD(r1, 0xc00c7007, &(0x7f0000000100)) r2 = openat$pci(0xffffffffffffff9c, &(0x7f0000000340), 0x40, 0x0) sysctl$net_inet_ip(&(0x7f00000005c0)={0x4, 0x2, 0x0, 0x10}, 0x4, &(0x7f0000000600)="e09c0f90", &(0x7f00000006c0)=0x4, 0x0, 0x0) r3 = kqueue() ioctl$FIOASYNC(r3, 0x8004667d, &(0x7f0000000000)) mknod(&(0x7f0000000200)='./file0\x00', 0x2008, 0x0) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x2, 0x0, 0x12}, 0x4, &(0x7f0000000140)="e721128c2eaa5a2fbf2b694396181f2eaf764ee2cc38908202f0375ba0c6e4e3b94891d66eff86498f1d6e25e4e3e661d8dbf7c0e0656c0097fcbe8778bce327bf85145242fb267451308e5576b7acb3516b88969019e0bacaa01910482961583c04c182c4c6026ed4b0c6598c0c552720597cf48d7a19007641cdcf8a1486bdea063e9282868a0e5ac249500ba0257c84df1df75a28d48ecc0378dec3ba69b9ded16588b337bccc37ffd9979febcd7b6f438317828a7670cb", &(0x7f00000000c0)=0xb9, &(0x7f0000000240)="3eac67877178616fd86e62854ede8265fbc11476cf1c9156d46b3e0cf0464d1d9a7a5782d98d2205f30296184778bf1d215b12a54f77d3a0e4e6773ca531a8f5f12d29b7f57b24069133dfc378c2ec8bbeaebbaf4e5eaf48dd84cce4ea5a813784ecc2abdd825e242bb7f33815744c740969393591c854aaabf9ec92de7e70d98a8b228d38f993eaaae6d775df456cc7d2d35e7406dbc0dcb6cf427e1c30b1a9dd14b5da5aea653d200e3c576cb2559b5456caa8c0ed7952d0db24600474974fe8ecbe2f849532919fe83738589b63e0af7ba9dc8a1648b3121fcb36de8010", 0xdf) r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000580), 0x40, 0x0) ioctl$BIOCSETIF(r4, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x25, 0x0, 0x0, 0x8000001}, {0xb1, 0x10, 0x2, 0x4}, {0x16, 0xf2, 0x7f, 0x400b}]}) getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0xc) getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, 0x0}, &(0x7f0000000400)=0xc) fchown(r2, r6, r5) sysctl$kern(0x0, 0x0, &(0x7f0000000140)="71f91e3471ac00583177c0344ee0da485b352832a75c435abc5a91501d94a34b8e5f82000000000000000000a3042d29b5a9d42d9f04a4f29333c97b8573c35a3f966282619da69ec1a9f407752bbe24189f67aafbe43cdcde759a6e118fbb3262", &(0x7f0000000080)=0x61, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETF(r4, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr, @broadcast}, @icmp=@dest_unreach={0x3, 0x0, 0x0, 0x0, 0x8, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @multicast1}}}}}}) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 1.791703015s ago: executing program 1 (id=799): mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000680)={0x0}, 0x10, 0x0, &(0x7f0000000700)={0x0, 0x5}) r0 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$VNDIOCSET(r0, 0xc0384600, &(0x7f0000000100)={&(0x7f0000000040)='./file0\x00', 0x7, 0x0}) sysctl$ddb(&(0x7f0000000000)={0x9, 0x2}, 0x2, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket(0x2, 0x3, 0xfe) bind(r1, &(0x7f0000000000), 0x10) execve(0x0, 0x0, 0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000140)=""/160, 0xa0}, {&(0x7f00000002c0)=""/141, 0x8d}, {&(0x7f0000000380)=""/149, 0x95}], 0x3, 0x7) 1.790004757s ago: executing program 0 (id=800): mknod(&(0x7f0000000240)='./bus\x00', 0x2000, 0x6d4) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x62}) r0 = syz_open_pts() close(r0) r1 = syz_open_pts() ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f00000000c0)={0xf7fffffe, 0xfffffffb, 0xfffffffe, 0xd2f, "8717f90579ce018000008080df91480d01000002", 0x0, 0x2}) writev(r1, &(0x7f0000000040), 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="207500bbff01000000000000bc51c6b8b7c54279a36908d90000008d", 0x1c}], 0x1) mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0x1404) open(&(0x7f0000000080)='./bus\x00', 0x800, 0x20) r2 = socket(0x18, 0x3, 0x0) setsockopt(r2, 0x1000000029, 0x25, &(0x7f0000000480)="5ab7776a", 0x4) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r3, 0x1, 0x1) socket(0x1, 0x4005, 0x4) ioctl$FIOASYNC(r3, 0x80047470, &(0x7f00000000c0)=0x3ff) ioctl$BIOCLOCK(r3, 0x20004276) select(0x40, &(0x7f00000000c0)={0x4, 0xe9, 0x8, 0x81, 0x9, 0x0, 0x8000000000000000, 0x9}, &(0x7f0000000140)={0x1, 0x1, 0x102, 0x3, 0x58154e6a, 0x5, 0x0, 0x2}, &(0x7f0000000300)={0x8, 0x8000000000000000, 0x3f, 0x100, 0x9, 0xda0, 0x2, 0x5}, 0x0) mknod(&(0x7f0000000240)='./bus\x00', 0x2000, 0x6d4) (async) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) (async) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x62}) (async) syz_open_pts() (async) close(r0) (async) syz_open_pts() (async) ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f00000000c0)={0xf7fffffe, 0xfffffffb, 0xfffffffe, 0xd2f, "8717f90579ce018000008080df91480d01000002", 0x0, 0x2}) (async) writev(r1, &(0x7f0000000040), 0x0) (async) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="207500bbff01000000000000bc51c6b8b7c54279a36908d90000008d", 0x1c}], 0x1) (async) mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0x1404) (async) open(&(0x7f0000000080)='./bus\x00', 0x800, 0x20) (async) socket(0x18, 0x3, 0x0) (async) setsockopt(r2, 0x1000000029, 0x25, &(0x7f0000000480)="5ab7776a", 0x4) (async) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) (async) lseek(r3, 0x1, 0x1) (async) socket(0x1, 0x4005, 0x4) (async) ioctl$FIOASYNC(r3, 0x80047470, &(0x7f00000000c0)=0x3ff) (async) ioctl$BIOCLOCK(r3, 0x20004276) (async) select(0x40, &(0x7f00000000c0)={0x4, 0xe9, 0x8, 0x81, 0x9, 0x0, 0x8000000000000000, 0x9}, &(0x7f0000000140)={0x1, 0x1, 0x102, 0x3, 0x58154e6a, 0x5, 0x0, 0x2}, &(0x7f0000000300)={0x8, 0x8000000000000000, 0x3f, 0x100, 0x9, 0xda0, 0x2, 0x5}, 0x0) (async) 1.475585156s ago: executing program 4 (id=801): ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f0000000040)={0x8002, 0x0, 0x5, 0x0, "ff000000e5ffffff000000f9871d46008000", 0x0, 0xfffffffe}) (async) sysctl$kern(&(0x7f0000000040)={0x1, 0x3e}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) sysctl$kern(&(0x7f0000000040), 0x3, 0x0, 0x0, &(0x7f0000000080)="4f1d4c6344b80ed788b6a4515248df3aa745bb992c574ab4cdf5587145812eab4a988f7fafd7a01d99776d988908cd186b51f34f8c15ffa0c685ad4116c783959eff4278384b4000384dbb1c2aaeff10b4135529a1da6fda67c67469d954be811b25ec5521559154c586eefff122009f659cd3e27e98a3241495005f102d9101d158284c0ee3250aa7c11042330de22a299ab00894fdc9bac6042d", 0x4) (async) sysctl$kern(&(0x7f0000000000)={0x1, 0x23}, 0x2, &(0x7f0000000140)="ad1bcbe83039cd2eed6af8f8354bf081a9ef0983013bfbd5fe65cf74a422fa3a483289c9dc01caa596b3d460c506a461100c0824180587c3085d68a137da4d09ec6f633f438deb4edb687063afcc60e69a6eaf261a02bc9749fab3ac2f80a0539231c8767211d245c3698024e10416de5cb226bcb222b3bf478f862abc5ba9afacb78a707ffc575f1df177", &(0x7f0000000200)=0x8b, &(0x7f0000000240)="54ab6601a8a2aa62515704ba6d6d89becc39cba3ad42aae45dba1f9bc2beade906d9b9243194b2afec2cc60c510a98d39b90a8a6eeb272b77552bdab94d8d5067cbb30a1328c88e66c96f1ab14f271e1bcba541796e99f35661de5f6a7328cbaa51518040a568a22c69c80c2575cddae63d436d8bfedac4ff0a7224e0a52314d77e923f63f54ef66264041e54c634e2ec6914f447e563626daacf082687f3a", 0x9f) 1.467674732s ago: executing program 4 (id=803): mkdir(&(0x7f00000000c0)='./file0\x00', 0x180) open(0x0, 0x0, 0x0) ioctl$FIONREAD(0xffffffffffffffff, 0x4004667f, 0x0) (async) ioctl$FIONREAD(0xffffffffffffffff, 0x4004667f, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) getgroups(0x7, &(0x7f0000000000)=[0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0]) (async) getgroups(0x7, &(0x7f0000000000)=[0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0]) setregid(r3, 0x0) (async) setregid(r3, 0x0) setgid(0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=""/100, 0x64}, 0x3f8d}, 0x10, 0x0, 0x0) fcntl$dupfd(r0, 0x0, r1) recvmsg(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r1, &(0x7f0000000080)={0x0}, 0x10, 0x0) (async) sendmmsg(r1, &(0x7f0000000080)={0x0}, 0x10, 0x0) setsockopt$sock_timeval(r1, 0xffff, 0x1005, &(0x7f0000000000)={0x0, 0x8}, 0x10) setgroups(0x3, &(0x7f0000000340)=[0x0, 0x0, r2]) recvfrom$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) recvfrom$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) sysctl$kern(&(0x7f0000001200)={0x1, 0x16}, 0x2, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffffffffe8e) chroot(0x0) unveil(0x0, 0x0) (async) unveil(0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040), &(0x7f0000000100)=0xc) (async) getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040), &(0x7f0000000100)=0xc) utimes(0x0, &(0x7f0000000040)={{0x8000000000000000, 0x4000000000000004}}) (async) utimes(0x0, &(0x7f0000000040)={{0x8000000000000000, 0x4000000000000004}}) r4 = openat$pci(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PCIOCREAD(r4, 0xc0107002, &(0x7f0000000040)) symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='.\x00') openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000680)={@broadcast, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr, @broadcast}, @icmp=@redirect={0x5, 0x2, 0x0, @broadcast, {0x5, 0x4, 0x1, 0x2, 0x8, 0x66, 0x2, 0x6, 0x3b, 0x2, @empty, @multicast2}}}}}}) sysctl$kern(&(0x7f0000000000)={0x1, 0x23}, 0x2, &(0x7f0000000340)="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", &(0x7f0000000180)=0xd1a, &(0x7f0000001240), 0x0) r5 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x40, 0x0) ioctl$BIOCSETWF(r5, 0x80104277, &(0x7f0000000000)={0x2, &(0x7f0000000340)=[{0x35, 0x0, 0x4, 0x1001}, {0x84, 0x1}]}) r6 = open$dir(&(0x7f0000000040)='./file0/file0\x00', 0x200, 0xc0) faccessat(r6, &(0x7f0000000940)='./file0\x00', 0x2, 0x1) 1.467061293s ago: executing program 3 (id=804): ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) r0 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r0, 0xc0106924, &(0x7f00000001c0)) sysctl$net_inet_tcp(&(0x7f0000000000)={0x4, 0x2, 0x6, 0x13}, 0x4, &(0x7f0000000340), 0x0, 0x0, 0x0) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, 0x0) setitimer(0x0, &(0x7f0000000140)={{0x9, 0x240000009}, {0xffffffffffffffbd, 0x7014}}, 0x0) r1 = socket(0x18, 0x3, 0x0) ioctl$FIONREAD(r1, 0x8080691a, &(0x7f0000000100)) 1.050870781s ago: executing program 3 (id=805): r0 = socket(0x11, 0x3, 0x0) poll(&(0x7f0000000740)=[{r0, 0x63e819e9603365bd}], 0x1, 0x9) connect$unix(r0, &(0x7f0000000580)=@abs={0x1, 0x0, 0x0}, 0x8) r1 = getuid() setreuid(0xee00, r1) r2 = msgget$private(0x0, 0x0) (async) sysctl$hw(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r3 = semget(0x0, 0x1, 0x281) execve(0x0, 0x0, 0x0) (async) setgid(0xffffffffffffffff) (async) setgroups(0x0, 0x0) (async) setuid(0xee01) semctl$GETVAL(r3, 0xf2d095ef9e17808b, 0x5, 0x0) (async) msgsnd(r2, 0x0, 0x401, 0x0) (async) select(0x0, 0x0, 0x0, 0x0, 0x0) (async) ioctl$TIOCGTSTAMP(0xffffffffffffffff, 0x4010745b, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000040)=ANY=[@ANYBLOB="ffffffffffff040000005a6f0800460000200000000000019078ac1400bbe0000001890304001100907800000000"]) r4 = syz_open_pts() r5 = fcntl$dupfd(r4, 0xa, r4) readv(r5, &(0x7f00000006c0)=[{&(0x7f0000000200)=""/60, 0x3c}, {&(0x7f0000000240)=""/174, 0xae}, {&(0x7f0000000300)=""/208, 0xd0}, {&(0x7f0000000400)=""/11, 0xb}, {&(0x7f0000000780)=""/242, 0xf2}, {&(0x7f0000000880)=""/173, 0xad}, {&(0x7f0000000940)=""/236, 0xec}], 0x7) ioctl$TIOCSPGRP(r5, 0x40047477, &(0x7f0000000080)) syz_emit_ethernet(0x66, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd605f6a30000000000000000000000000000000000000fe8000000000000000000000000000aa0200"]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) (async) readv(r0, &(0x7f0000000440)=[{&(0x7f0000000a40)=""/4096, 0x1000}], 0x1) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) chmod(&(0x7f0000000280)='./file0\x00', 0x3a) (async) chdir(&(0x7f0000000240)='./file0\x00') (async) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) (async) chmod(&(0x7f00000000c0)='./file1\x00', 0x13) (async) setreuid(r1, r1) 1.049661666s ago: executing program 7 (id=806): r0 = kqueue() r1 = socket(0x800000018, 0x1, 0x0) setsockopt$sock_int(r1, 0xffff, 0x1, &(0x7f0000000100)=0x3, 0x4) listen(r1, 0x6) kevent(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000180)=[{{r0}, 0xffffffffffffffff, 0xdcd8c4bc089e638d}], 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = syz_open_pts() kevent(r0, &(0x7f0000000640)=[{{r3}, 0xfffffffffffffffe, 0x3f, 0x4}], 0x1, 0x0, 0x3, 0x0) accept$unix(r2, &(0x7f0000000080)=@abs, &(0x7f00000000c0)=0x8) kevent(r0, &(0x7f0000000140)=[{{r2}, 0xfffffffffffffffe, 0x2c5d36d679bbff67}], 0xe4a, 0x0, 0xa9f9, 0x0) kevent(r0, 0x0, 0x0, 0x0, 0x6, 0x0) setrlimit(0x8, &(0x7f0000000980)={0x7, 0x54}) r4 = syz_open_pts() close(r4) syz_open_pts() writev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000500)="93687772b45c2b35282750cb22854162c4682c4fbb", 0x15}, {&(0x7f0000000e40)="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", 0xc86}, {0x0}], 0x3) ioctl$TIOCSETA(r4, 0x802c7414, &(0x7f0000000900)={0xfffffe01, 0x72, 0xc3d, 0x6, "1a1116f0d0a643000000000000fffffffffff700", 0xfffffffc, 0x552}) writev(r4, &(0x7f0000000e00)=[{&(0x7f0000000080)="c3778fe486fa8f9f05ce4bfcaad7868e4bd7872ff0597773fa1e061cebd702547202798b96c0a24deae72d0db883bac94c4761e84558e6ca6270794d9b5eb06bb75ce478a7f5a6d622690c4c3313ec970000000011fdc121e175d8242b6269551e9560276c7118f0", 0xfffb}], 0x1) writev(r4, &(0x7f0000000bc0)=[{&(0x7f0000001e40)="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", 0x2ea}], 0x1) openat$bpf(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) r5 = kqueue() kevent(r5, &(0x7f0000000080), 0x10000003, 0x0, 0x2eb, 0x0) 1.027667222s ago: executing program 4 (id=807): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x1, &(0x7f0000000040)="01000000", 0x4) (async) close(r0) (async, rerun: 64) sysctl$net_inet_divert(&(0x7f0000000040)={0x4, 0x2, 0xf0}, 0x4, 0x0, 0x0, 0x0, 0x0) (rerun: 64) msync(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3) (async, rerun: 32) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async, rerun: 32) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x11}, 0x4000000000000007, 0x0, 0x0, 0x0, 0x0) (async) r1 = socket(0x18, 0x3, 0x5) setsockopt(r1, 0x1000000029, 0x3c, &(0x7f0000000040), 0x0) 936.475639ms ago: executing program 6 (id=808): poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x40}, {0xffffffffffffffff, 0x40}], 0x2, 0x864) execve(0x0, 0x0, 0x0) r0 = syz_open_pts() r1 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$WSKBDIO_GETBACKLIGHT(r1, 0x40045700, 0x0) ioctl$WSKBDIO_SETKEYREPEAT(r1, 0x800c5707, &(0x7f0000000000)={0xfffffffe, 0x49b, 0x3ff}) syz_open_pts() syz_open_pts() syz_open_pts() syz_open_pts() syz_open_pts() accept$inet(0xffffffffffffff9c, &(0x7f0000000080), &(0x7f0000000140)=0xc) fsync(r0) munmap(&(0x7f0000001000/0x1000)=nil, 0x1000) pledge(0x0, &(0x7f0000002840)='tty \x00\x02\x00!\a\x9bp^|#\xcbhl\x97\xa3_\xbc\x04\x9d!\xd9\x9f\x9f\xb4\x96\x13\x12\xe0\r\xe7\xb9E\b\x00\x00\x00l\xaaY\xe1Q<\x19\xc0\xf6Yf\x9au^\xa0\xc9j\xdd-I\x01R\x00w\xf7\x15\x04\xa6\x82aY\x1d\xd7\f>Y\x06\"\xad\xb6\x88_\xeb\at\x91\xd3\xbf\xea\xddt\xe0\bt\x06S,\xdbH\xa7-\xaaw\xcet\x044\xc5\xa9e\xa9\xf6\x1b\x8e\x05\x86\x91IsC\xb9ul\xaeu\x94\x9b\xaf\x04\xc4\x03\"F\x8f\xd5\xe8\r\x8d\xa1\x00\xcc\xd7\xa0\xe1\xeb\xc1>\xbd\t\xc8\x15\v\xb0, \xee\xa4\xa6\xb9a\x01&\xadrj\xd5\xc26p\xa14\xe0\xbf\xa0\x1es\x01=\xdbd\xf0?=\x8afcJ\x8eYEn\xd4<\x00\xec\xe4^\x00\x00\x00\xca\x90\xfa\x98\xc9gty\xce\xab\xd2\xa1\x85E\xe4\xa9\xd5\xab\x83\xda?w\x83\xbc\xcf\xd20(L&b\xed\x8c\x1d\x1a\x9fd\x99H\x9e\x82\x10\xea\x05\xf8\xff\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\xa6\x8c\x05n\x83\x83\x12+\x16\xc1\x00\x04\x00\x00\x13:o\x0f\x1fB\xa4\x00wB\x92h\xde\xfal3\x88e\x04J\\\x00D\xae`\x8e\xadd\xa8;\xee\xc4K\xe8]\x84\x90\xb8d\xfb\x95\xb3\xe9(x_\x80]\xadW\xd5\xa9\xaa\x03\x9c6\xa9\xc4\x01\x03\xea\xe5\x90\x85\x16\xb0DV\x13\x01\xab\x01\xf0\x8f\x02\xc2\xc8\x9b\x03\x1f\xd7\xdbN\\\xc0\xcd?Pg\xd5q\x13\xbd \xfa\xab\xccJK\x11\\\x16~#P.\xc9K\x15r\x04\xd9Z;\xc0\x8dOze\x96\xe9\xc3\x93\xed\x94.\xc2\xa0\x1fU#\x96\xe6\xb6C\xfa\x03/\x8b\x0e2\xec\x96v\x9b/.\v\x9e\x80\x18s\xae.\xf4\x14KS`\x87\x8b4\t\x00\x87{\xa8@e\xbfe\xeb\xee\xa2\xe72\xb8Q:\x9f\xc2b\x897\xbe\r\x04\xdf\xe2\xc0\xf0FV\'m\xcbm\x80%\xfc\x9e\x9f\x87\x80A\xbe\xc2\x00\x00\x00\x00\x00\x006\x96\xbb\x9f\x85\x98\xbb\xbc;\xaa\x97c\xfe\x82jz&t\xa7\xc4\xcd\xb0\b9G\xcag\fY\xe6\r\xcdT\xd3\x1c(\xef\xc0\x038\xbd\xdd\xd9\xc9\x93a]q\xd2\x9b\a\x1e\xf8\xc3\"\xc8:\xb8$\x9f\'P\x17\xfa\xf3Xa\trB-\xf2g\xe6Z\xd5F\xd2\x80\xe0\x99\"\xc12\xe8\b\xc58\x00'/659) 936.09294ms ago: executing program 1 (id=809): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FIOASYNC(r0, 0x8004667d, &(0x7f0000000000)=0x2) connect$unix(r0, &(0x7f0000000140)=@file={0xd1653077bafa0114, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}, 0xfe) 934.531625ms ago: executing program 7 (id=810): syz_emit_ethernet(0xe1, &(0x7f0000000040)=ANY=[@ANYBLOB="ffffffffffff8ee1ff0e000086dd67871acf00ab040700000000000000057e4d340000000001000000000000000000003b", @ANYRES64]) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x88) chroot(&(0x7f0000000100)='./file0/file0\x00') rename(&(0x7f0000000080)='./file0/file0/..\x00', &(0x7f0000000040)='./file1\x00') r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) getuid() ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000000)={0x5, &(0x7f0000000280)=[{0x0, 0xbc, 0x5, 0xfffff4b2}, {0x25, 0x0, 0x2, 0x7ffffffc}, {0x44, 0xff, 0xfa}, {0x3, 0x0, 0x20, 0xe}, {0x6, 0x5, 0x7, 0x7}]}) write(r0, &(0x7f0000000200)="d81ad3d20cf7eb4e9be33bbd1a30", 0xe) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x82, 0x0) ioctl$TIOCSETA(r1, 0xc0284459, &(0x7f0000000100)={0x62, 0x0, 0x84, 0xfc4, "75a20000ea00f2a877d20aa0a0b7dc0400", 0xf6}) syz_emit_ethernet(0x46, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa6b9799d0807086dd69b80bb100102b80fe8000"/35]) 697.958426ms ago: executing program 0 (id=811): r0 = socket$unix(0x1, 0x5, 0x0) (async) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) (async) r2 = socket(0x18, 0x2, 0x0) setsockopt(r2, 0x1000000000029, 0xa, &(0x7f0000000040)='\t\x00\x00\x00', 0x4) (async, rerun: 32) setsockopt(r2, 0x1000000029, 0xc, &(0x7f0000000000)="ebffcbb9fd812eaa46713048e699319296480000", 0x14) (rerun: 32) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x25, 0x0, 0x6, 0x8000001}, {0xb1, 0x9, 0x2, 0x4}, {0x16, 0x7, 0x7f, 0x400f}]}) (async) pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000180)="6aab0dfa80404d424f010000ba0fdd01050b53198f9f35d5ea7510da111fe0936ac05fc00330948a4f9c3bd6b1b7079903ea675035cab697a2b2a4d064d7a4351a51f26795", 0x45}], 0x1, 0x6) (async, rerun: 32) sysctl$kern(0x0, 0x0, &(0x7f00000002c0)="71fff7ffff87e537dc3d33d7af511cf28e36bc75", &(0x7f0000000080)=0x14, 0x0, 0x0) (async, rerun: 32) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$BIOCSETWF(r1, 0x80104277, &(0x7f0000000040)={0x0, 0x0}) (async) write(r1, &(0x7f0000000200)="d81ad3d20cf7eb4e9be33bbd1a30", 0xe) bind$unix(r0, &(0x7f0000000200)=@file={0xd570d0466b6018f, './file0\x00'}, 0xa) (async) close(r0) (async) r3 = socket$unix(0x1, 0x5, 0x0) connect$unix(r3, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) chmod(&(0x7f0000000280)='./file0\x00', 0x3a) (async, rerun: 64) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, 0x0) (async, rerun: 64) setuid(0xffffffffffffffff) (async) connect$unix(r4, &(0x7f0000000000)=@abs={0x1, 0x0, 0x3}, 0x8) 696.691102ms ago: executing program 1 (id=812): socketpair(0x6, 0x8000, 0x3, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup2(0xffffffffffffff9c, r0) ioctl$WSDISPLAYIO_SVIDEO(r1, 0x80045745, &(0x7f0000000040)) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYRES32]) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$FIONREAD(r2, 0x80206979, &(0x7f0000000000)) ioctl$PCIOCREAD(0xffffffffffffff9c, 0xc0107002, &(0x7f00000000c0)) mknod(&(0x7f0000000300)='./file0\x00', 0x2000, 0x6da) r3 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$TIOCSTOP(r3, 0x2000746f) socketpair(0x6, 0x8000, 0x3, &(0x7f0000000080)) (async) dup2(0xffffffffffffff9c, r0) (async) ioctl$WSDISPLAYIO_SVIDEO(r1, 0x80045745, &(0x7f0000000040)) (async) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYRES32]) (async) socket$unix(0x1, 0x2, 0x0) (async) ioctl$FIONREAD(r2, 0x80206979, &(0x7f0000000000)) (async) ioctl$PCIOCREAD(0xffffffffffffff9c, 0xc0107002, &(0x7f00000000c0)) (async) mknod(&(0x7f0000000300)='./file0\x00', 0x2000, 0x6da) (async) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) (async) ioctl$TIOCSTOP(r3, 0x2000746f) (async) 696.302472ms ago: executing program 3 (id=813): wait4(0xffffffffffffffff, &(0x7f0000000040), 0x1, &(0x7f0000000080)) r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$TIOCSETA(r0, 0xc4504448, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, "97a2224ff1c14649ebb178926cc9795a6b47c1d1"}) r1 = openat$pf(0xffffffffffffff9c, &(0x7f00000001c0), 0x800, 0x0) writev(r1, &(0x7f0000000300)=[{&(0x7f0000000000)="37d835798121fc2f22f165e508e586e43ced5deb1be553ab2b684c911fc10f7a4e0e23d772d9afc3b2fa3339cfa7e6037e5cb7af9bbd176b28ef60626f8d1ee3b23bada5f769cac31d7b6600ce54659b88a8d2e65ff12b3d97a0e62a120797485f2c0bfcde1299c97629550745752a8719a722", 0x73}, {&(0x7f0000000400)="00ef0b4462225807df43abe1f26b1a84a460a26cb72f8869401e78b7bb0e2a331f363360005f5c3ca43b64170ba8b67e53dd7a9a24ad9591b30b97170152a1bcbfb78acaddded588dec1852bb6140a728b6e4122470f3d7940e53bfcfcec557d844eedf0099ee240a54d5cb5557bac3169d96e693eb581b5b8d070c5aa7ff87afb11d1e00f2f40548ceb9b59f0359e13cc644093b29e1a9df036", 0x9a}, {&(0x7f0000000100)="00bf2a6fb5074c9d10ee67eae5a6f8609c5a46f78dc6873b9a3d8f0814479b0501238aaf7c957e95d7b916d4421c5d2a1c3aade31d55925628236519f6d66ff216e82e67e77fa5a9ca24cfdba867a1dcc3ad996675dc3c0706ca69f8d5aec7e6a2f37cae0e5ea77ed0148deb96978ec1a81a1af3d3e1c24f1a3c374b07a46ddf04be4f9bb835554c4e615af0f62ab4fc159d412a0cb7d81c6be2224be80eccceae385f9fa357b119", 0xa8}, {&(0x7f00000004c0)="7ea92f24fb29b9c91eb24acfbffeaa6c2011f9a827a49eaf086069bbf34ff50501ae238c50b2be7625cc3bfc27c3ce3f69f6755f4862a825a2ced9c9ea0d74f8f5954363fcf6a10f13b9910f69cac918345cd7f5f31e4aaae312f579fd91b719dceacd21c81538e6bed950758b250dc4bdbae690f524458f6f85322ee0552d22c7982f6e40ec5c4d67ad38c06115ec7096446ad5f525f6f7780407b71cf48da7de0559dd1d091f0f9d3124ef8a73673be958f8315e14c99cfb24496fe51f2ce12acae2f45d88afc37bdcb477453920cfae62a3505a7ccfbb195604e7d38c3acc8d138d22d59b32", 0xe7}, {&(0x7f0000000240)="c63d2eb0a509f91cbc3559c71f0df4fb0fda67b5d0d337626bcfdcd791ad0db4032d390415ab6ea7732aa02fa8db5423bbaf228e5378c8e39e052cc58e95c6134dcbd1792b03d33cafd467c0450820f353bf75d8616946c3ea6bb6dba2e41332da75eae1d18b749dfd995e58c430c2f84d22338d018c01148c135a9f2e70dd194d", 0x81}], 0x5) ioctl$TIOCSETA(r1, 0xc0504417, &(0x7f0000000740)={0xb949, 0x0, 0x1, 0x3, "0000000000000000000000001000812b32de00", 0xfffffffb, 0xfffffffc}) 692.01876ms ago: executing program 4 (id=814): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x2, 0x400000000002, 0x0) setsockopt(r0, 0x0, 0x1e, &(0x7f0000000180)="b1f5d915", 0x4) r1 = socket$unix(0x1, 0x5, 0x0) unveil(&(0x7f0000000280)='.\x00', &(0x7f00000002c0)='r\x00') bind$unix(r1, &(0x7f0000000040)=@file={0xd570d0466b6018f, './file0\x00'}, 0xa) 691.622874ms ago: executing program 7 (id=815): sysctl$net_inet6_ip6(&(0x7f0000000040)={0x4, 0x18, 0x29, 0xa}, 0x4, 0x0, 0x0, 0x0, 0x0) 588.752498ms ago: executing program 4 (id=816): r0 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$WSMOUSEIO_GETPARAMS(r0, 0x80105727, &(0x7f0000000200)={&(0x7f0000000100)=[{0x8b, 0xffff}, {0x45, 0x10}, {0x25, 0x8e9}, {0x7, 0xd}, {0x85, 0x9}, {0x80, 0x4}, {0x85, 0x8}, {0x24, 0x3}, {0x101, 0x8}], 0x9}) ioctl$WSMOUSEIO_SETPARAMS(r0, 0x80105728, &(0x7f0000002280)={&(0x7f0000000180)=[{0x101}, {0x22, 0x1001}], 0x2}) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x100000000000000, 0xffffffffffffffff}) r1 = socket(0x2, 0x4, 0x2) setsockopt$sock_int(r1, 0xffff, 0x1000, 0x0, 0x0) msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000080)={{0x5, 0x0, 0x0, 0x0, 0x0, 0x185, 0x4000}, 0x6, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffff7ffe, 0x8, 0x9, 0xffffffffffffffff}) syz_emit_ethernet(0x62, &(0x7f0000000000)={@broadcast, @random="e04b1c561ac4", [{[], {0x8100, 0x7, 0x0, 0x4}}], {@ipv6={0x86dd, {0x0, 0x6, "36e282", 0x28, 0x3b, 0x0, @local={0xfe, 0x80, '\x00', 0x0}, @empty, {[], @icmpv6=@ndisc_redir={0x89, 0x0, 0x0, '\x00', @empty, @local={0xfe, 0x80, '\x00', 0x0}}}}}}}) r2 = socket(0x18, 0x2, 0x0) connect$unix(r2, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) sendmsg(r2, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[{0x10}], 0x10}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000740)=[{&(0x7f0000000180)="fdf22fafdccaf2e7bd9a735e0ef2962a79778661957bc8a7aa7b84f3c99153b93fa925a81b7d4ed9792fc741bd1c498e03aead38e067dd901156b80d0d84299ad25012ad9d4bd54464c1cc56a0383bb7b7", 0x51}], 0x1) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r3 = socket(0x1, 0x1, 0x0) ioctl$FIONREAD(r3, 0x8020699d, &(0x7f00000001c0)) 588.253932ms ago: executing program 7 (id=817): r0 = socket(0x20, 0x3, 0x0) r1 = dup(r0) r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) close(r2) (async) mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r3 = socket(0x2, 0x2, 0x0) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) connect$unix(r3, &(0x7f0000000000), 0x10) (async) r4 = socket(0x2, 0x2, 0x0) r5 = socket$inet6(0x18, 0x3, 0x0) getsockopt$sock_int(r5, 0xffff, 0x0, 0x0, 0x0) accept$unix(r3, &(0x7f0000000100)=@abs, &(0x7f0000000140)=0x8) (async) setsockopt$sock_int(r0, 0xffff, 0x1002, &(0x7f0000000080)=0x20000000, 0xfffffffa) (async) r6 = getppid() fcntl$lock(r3, 0x9, &(0x7f0000000180)={0x1, 0x2, 0x3c2, 0xfffffffffffffffe, r6}) (async) setsockopt$sock_int(r4, 0xffff, 0x1023, &(0x7f0000000040)=0x10, 0x4) r7 = socket(0x18, 0x3, 0x0) connect$unix(r7, &(0x7f00000000c0)=@abs={0x1, 0x7}, 0x8) close(r7) 588.030271ms ago: executing program 3 (id=818): openat$vnd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r0 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) readv(r0, &(0x7f0000000240)=[{&(0x7f0000000000)=""/45, 0x34}, {&(0x7f0000000080)=""/24, 0x18}, {&(0x7f00000000c0)=""/45, 0xb0f5f3fe4c9c570a}, {&(0x7f0000000140)=""/230, 0xdf}, {&(0x7f0000000100)=""/47, 0x22}], 0x5) 581.731368ms ago: executing program 0 (id=819): openat$bpf(0xffffffffffffff9c, &(0x7f0000000040), 0x20, 0x0) (async) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000040), 0x20, 0x0) close(r0) mknod(&(0x7f00000002c0)='./file0\x00', 0x2000, 0x51fc) (async) mknod(&(0x7f00000002c0)='./file0\x00', 0x2000, 0x51fc) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x2, 0x0) ioctl$FIONREAD(r1, 0x8020697a, &(0x7f0000000040)) r2 = syz_open_pts() semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000040)={{0x85, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x104, 0x7}, 0x7, 0x7}) (async) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000040)={{0x85, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x104, 0x7}, 0x7, 0x7}) openat$vmm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8, 0x0) (async) r3 = openat$vmm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8, 0x0) ioctl$VMM_IOC_INTR(r3, 0xca605601, &(0x7f0000000040)={0xb, 0x0, 0x200d}) r4 = kqueue() openat$vnd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) r5 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) kevent(r4, &(0x7f00000005c0)=[{{r5}, 0xfffffffffffffffe, 0x8e, 0x1, 0x0, 0xffffffffffffffff}], 0x1, 0x0, 0xbe5, 0x0) dup2(r5, r4) ioctl$TIOCGETA(r2, 0x402c7413, &(0x7f00000000c0)) mknod(&(0x7f0000000080)='./file0\x00', 0x1000, 0x3afe) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) writev(r0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="9b3e63294cd3eafd66ca959004883447196b265a8aa88f8800fea802492f7118f168f9a0ad014cb9c21699886eda05f885cf5d0fb5574c", 0x37}, {&(0x7f0000000200)="430010ac26c8382b1ae90c702b37ca3420bd5edf89dcbcbe5933250807455e55333ae5141aea8017c89f54d992eccfdeb039466ec6cf76934672d5add937fb24842a471ab6cef55c8ca576cace7685ef7a75000bd27bec0a232ad9167c948a41ead1c3a40df8e943167c684d0404914b94763a5a6f42ae8f229b3bd4f24f0b81cf10619697bd56098be96a13e7c825071d2a990ac41cae5e619728", 0x9b}, {&(0x7f00000002c0)="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", 0x519}], 0x3) 580.956124ms ago: executing program 1 (id=820): socket(0x2, 0x1, 0x0) r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000880)="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", 0x2ff}], 0x1) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$WSMUXIO_INJECTEVENT(r0, 0x80185760, &(0x7f0000000080)={0x0, 0x7fff, {0x10001, 0x100000000}}) r1 = shmget$private(0x0, 0x2000, 0x50, &(0x7f0000ffd000/0x2000)=nil) shmctl$IPC_RMID(r1, 0x0) r2 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f00000000c0)) getsockopt$SO_PEERCRED(r0, 0xffff, 0x1022, &(0x7f00000004c0), 0xc) getuid() ioctl$TIOCSETA(r2, 0xcd50441a, &(0x7f0000000040)={0x4, 0x0, 0xfffffffc, 0x0, "000000190000009f17b26900b60000004000", 0x20000000, 0x4}) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc5005601, &(0x7f0000000000)={0x10, 0x0, [{&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff3000/0x2000)=nil, 0x41000}, {&(0x7f0000538000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x200000000}, {&(0x7f00001f5000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil}, {&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil}, {&(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil}, {&(0x7f0000ffc000/0x3000)=nil, &(0x7f00001f6000/0x4000)=nil}, {&(0x7f0000ff2000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil}, {&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil}, {0x0, &(0x7f0000ffa000/0x4000)=nil}, {&(0x7f0000ffe000/0x1000)=nil, &(0x7f00001f4000/0x2000)=nil}, {&(0x7f0000002000/0x1000)=nil, &(0x7f0000ff9000/0x6000)=nil}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f000009f000/0x4000)=nil}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000084000/0x1000)=nil}, {&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil}, {&(0x7f0000161000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil}], './file0\x00'}) syz_emit_ethernet(0x1b, &(0x7f0000000000)=ANY=[@ANYBLOB="fffd640000000000000000000a"]) sysctl$hw(&(0x7f0000000000)={0x6, 0xb}, 0x5, &(0x7f0000000040), 0x0, 0x0, 0x0) getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000000200), &(0x7f0000000240)=0xc) 372.617048ms ago: executing program 3 (id=821): mprotect(&(0x7f0000ff7000/0x1000)=nil, 0x1000, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0xf02, 0x0) (async) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0xf02, 0x0) ioctl$WSMUXIO_REMOVE_DEVICE(0xffffffffffffffff, 0x80085762, &(0x7f0000000040)={0x1}) r1 = socket(0x18, 0x3, 0x3a) setsockopt(r1, 0x29, 0x6c, &(0x7f0000000040), 0x4) (async) setsockopt(r1, 0x29, 0x6c, &(0x7f0000000040), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0x66, &(0x7f0000000400)={0x0, 0x0, 0x4, 0xf7cd}, 0x1) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x10, r0, 0x0) mlock(&(0x7f0000ff6000/0xa000)=nil, 0xa000) 366.338359ms ago: executing program 6 (id=822): r0 = open(0x0, 0x70e, 0x0) r1 = shmget(0x2, 0x1000, 0x8e, &(0x7f0000002000/0x1000)=nil) getsockopt$SO_PEERCRED(r0, 0xffff, 0x1022, 0x0, 0x0) (async) shmctl$IPC_SET(r1, 0x1, &(0x7f00000000c0)={{0x3, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x800000000010}) r2 = socket$unix(0x1, 0x2, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaa4c77b99cbb86dd60c6"]) (async, rerun: 32) ioctl$FIONREAD(r2, 0x80206979, &(0x7f0000000000)) (rerun: 32) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x6, 0x10, 0xffffffffffffffff, 0x0) (async) setrlimit(0x5, &(0x7f0000000200)={0xa, 0x56}) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)="6e2e2284", 0x4}], 0x1) (async) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) (async) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x25, 0x0, 0x0, 0x8000001}, {0x16, 0xf2, 0x7f, 0x400b}]}) sysctl$kern(0x0, 0x0, &(0x7f00000004c0)="71f91e3471ac0058bc5491501d94a34b8e5f84cf71b59c7afec370824638aeb61ea373b8cf7f46ded8ccb0c0428dad06004805606ce37de53a1c522700000000001d00740de9737c7ac751f481c86f408518dae30ba6cdf01db15cb4a00b3261525081f1b2f01185e7585b0d24fdb6f5d3cc4f71b7f2f7aeb80c1a5b60e77c6c057f8755cd5a9c81192de1a39ec307de9e3536f0b20f9fb4935c9408fd3469d550dbefc5ab7cc7b951e91afbdedd5318a106c1d484d37fda5193a2a04c50f255", &(0x7f0000000080)=0xc0, 0x0, 0x0) setrlimit(0x3, &(0x7f00000001c0)={0x8, 0x10001}) (async) mprotect(&(0x7f00002f0000/0x2000)=nil, 0x2000, 0x5) (async) ioctl$BIOCSETWF(r3, 0x80104277, &(0x7f0000000040)={0x0, 0x0}) write(r3, &(0x7f0000000000)="d871819e2673b7e5c70000000000", 0xe) (async) r4 = syz_open_pts() close(r4) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000040)={{}, 0xdce}) (async) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0xd02) (async) r5 = open(&(0x7f0000000080)='./bus\x00', 0x100, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r6 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000180), 0x10, 0x0) ioctl$VNDIOCSET(r6, 0xc0785101, &(0x7f0000000040)={0x0, 0x0, 0x0}) (async, rerun: 64) syz_open_pts() (async, rerun: 64) ioctl$TIOCSETA(r5, 0x802c7414, &(0x7f0000000000)={0x8f, 0xfffffffd, 0x9, 0x10001, "04e4ee0dfc4e3baf0000000010e01a800500", 0x1, 0x4}) (async) writev(r4, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) (async, rerun: 32) openat$pf(0xffffffffffffff9c, &(0x7f0000000140), 0x10000, 0x0) (rerun: 32) 364.749428ms ago: executing program 4 (id=823): mkdir(&(0x7f0000000500)='./file0\x00', 0x0) chmod(&(0x7f0000000180)='./file0\x00', 0x23f) chdir(&(0x7f00000001c0)='./file0\x00') r0 = open$dir(&(0x7f0000001240)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x18c) open(&(0x7f00000000c0)='./file0\x00', 0x205, 0x0) r1 = getppid() msgctl$IPC_SET(0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x22, 0xfffe}, 0x1, 0x68, r1, r1, 0x0, 0x4}) sysctl$kern(&(0x7f0000001cc0)={0x1, 0x8}, 0x2, 0x0, 0x0, 0x0, 0x0) r2 = getppid() pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) setpgid(0x0, 0x0) setpgid(0x0, r2) ioctl$WSKBDIO_GETMAP(r3, 0x80047476, &(0x7f0000000100)={0x0, 0x0}) fcntl$dupfd(r4, 0x0, r3) r5 = fcntl$getown(r3, 0x5) ktrace(&(0x7f0000000180)='./file0\x00', 0x4, 0xd30, r5) setgid(0xffffffffffffffff) setgroups(0x0, 0x0) link(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') setuid(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x180) renameat(0xffffffffffffff9c, &(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r0, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 364.350198ms ago: executing program 1 (id=824): mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f00000002c0)=@file={0xd570d0466b6018f, './file0/file0\x00'}, 0x10) sysctl$kern(&(0x7f0000000000)={0x1, 0x3a}, 0x2, &(0x7f0000000040)="28513165a7bc0120a8b92e6750adea95ae88ea960787db51dcedc45caecc7f364da670057628f329cea24e61dc504489547efbc094ddc5e4dfde5256a3b4e262a0a27da75d94c22d7b3ae934ebdd8d94846f29a0da08ac6b8143eb414e60e59a208eb9165d8845dda83d82161d5191747c", &(0x7f00000000c0)=0x71, &(0x7f0000000100)="5bc70596a0127b635efb576bbc7d97fe6ae28d81b3bda37dbdbb830e03f15be7a43ddd07e509ccf2b6ecfdc9bbd45b0b4a5554b42300c75915275861fac58062a03dd084757aa0a45562469aaa8d52750aec6dfad645cccd544071206efe3ca73f913389977b417027b88195aada953d7aa5dd13d774c4", 0x77) writev(0xffffffffffffffff, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000280)="d0", 0x1}], 0x2) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r1 = socket(0x18, 0x1, 0x0) ioctl$FIONREAD(r1, 0x80206982, &(0x7f00000001c0)) rename(&(0x7f00000001c0)='./file0/file0/..\x00', 0x0) 29.045773ms ago: executing program 0 (id=825): r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0xf02, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x3, 0x2812, r0, 0x0) (async) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x2, 0x11, r0, 0x0) (async, rerun: 32) r1 = semget(0x0, 0x1, 0x281) (rerun: 32) semop(r1, &(0x7f0000000680)=[{0x0, 0xeffa, 0x1000}], 0x21) (async, rerun: 64) semctl$SETALL(r1, 0x0, 0x9, &(0x7f0000000240)) (async, rerun: 64) semctl$GETPID(r1, 0x0, 0x4, &(0x7f0000000040)=""/90) 12.312835ms ago: executing program 7 (id=826): setreuid(0x0, 0xee01) (async) setreuid(0x0, 0xee01) setgid(0xffffffffffffffff) semget$private(0x0, 0x1, 0x108) (async) r0 = semget$private(0x0, 0x1, 0x108) mknodat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1000, 0x0) unveil(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='c\x00') (async) unveil(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='c\x00') chmod(&(0x7f0000000180)='./file0\x00', 0x23f) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = socket(0x2, 0x3, 0x6) fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) semctl$SETALL(r0, 0x0, 0x9, &(0x7f0000000200)=[0x4, 0x8, 0x6]) mknod(&(0x7f00000000c0)='./file0\x00', 0x2000, 0x4301) pwritev(r1, &(0x7f0000000100)=[{&(0x7f00000003c0)="1fdf599fc0c62ae9d7cdd83e23d7d28fb503a256d67f81f97280d78d4f5ee0b240207821031db36554bd4f0cade3beb36b38690f528145b5fdee44eb61377fc26727c2d8e6a510313716d2ecc7496aa7077af01463f7b0f3166a87aad932cc290abb6444a5f5ce39bac42f27fec871d9bd0f51b50e495636551f436d369ac7b9ca54a1928054ee359cf41f8b9297402a11b71ee63fc2e7b3513a6a5c027259a3c3db134266c625a6d9d8162b9f1779d4ac36ac88a7bbe15c312f486df284c0d2799d22ea79dac9343e6720e92819fae5db3d6767c106d3c50f8e51a1f51f82fb2de373396b3920d62ade451d9cfe75d6fba5a794", 0xf4}], 0x1, 0x425) open(&(0x7f0000000000)='./file0\x00', 0x100, 0x80) sysctl$hw(&(0x7f0000000800)={0x6, 0x9}, 0x2, 0x0, 0x0, 0x0, 0x0) (async) sysctl$hw(&(0x7f0000000800)={0x6, 0x9}, 0x2, 0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x30) (async) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x30) sysctl$net_inet6_ip6(&(0x7f0000000040)={0x4, 0x18, 0x29, 0x36}, 0x4, 0x0, 0x0, 0x0, 0x48) 1.677937ms ago: executing program 6 (id=827): ioctl$WSMUXIO_REMOVE_DEVICE(0xffffffffffffffff, 0x80085762, &(0x7f0000000040)={0x1}) r0 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) close(r0) sysctl$hw(&(0x7f0000000000)={0x6, 0x8}, 0x2, 0x0, 0x0, &(0x7f0000000400), 0x0) fchmod(r0, 0x10) r1 = socket(0x20, 0x3, 0x3a) bind(r1, &(0x7f00000000c0)=@in6={0x18, 0x2, 0x3, 0x9}, 0xc) setrlimit(0x8, &(0x7f0000000980)={0x7, 0x54}) r2 = syz_open_pts() setsockopt(0xffffffffffffffff, 0x1000000000029, 0xd, &(0x7f0000000000)="ffdaf64c000000004f0527000000055e47", 0x11) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r3 = socket(0x18, 0x2, 0x0) setsockopt(r3, 0x1000000000029, 0xa, &(0x7f0000003680)='\x00\x00\x00\x00', 0x4) setsockopt(r3, 0x1000000029, 0xd, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) close(r2) syz_open_pts() ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f0000000040)={0x844, 0xac, 0x80, 0xfffffffd, "1a1116f0d0a643000000000000fffffffffff700", 0x0, 0xd}) writev(r2, &(0x7f0000000e00)=[{&(0x7f0000000080)="c3778fe486fa", 0x6}], 0x1) setsockopt(r1, 0x29, 0x6c, &(0x7f0000000040), 0x4) r4 = socket$inet(0x2, 0x3, 0x102) sendmsg(r4, &(0x7f0000000680)={&(0x7f0000000240)=@in={0x2, 0x0}, 0xc, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="000000ff4b54aa4f7112823c00000000"], 0x10}, 0x40a) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0x65, 0x0, 0x0) 848.442µs ago: executing program 3 (id=828): r0 = open(&(0x7f0000000000)='./file0\x00', 0x80, 0x24) setitimer(0x2, &(0x7f0000000040)={{0x8, 0x1}, {0x89, 0x3}}, 0x0) preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000240)=""/229, 0xe5}], 0x1, 0x0) r1 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000140), 0x782, 0x0) writev(r1, &(0x7f00000007c0)=[{&(0x7f00000003c0)="739f79342fe4b811090c48777f2dec6e30", 0x11}], 0x1) pwritev(r1, 0x0, 0x0, 0x4) 0s ago: executing program 1 (id=829): mknod(&(0x7f0000000080)='./bus\x00', 0x2000, 0x6d4) r0 = open(&(0x7f0000000280)='./bus\x00', 0x0, 0x0) ioctl$FIOASYNC(r0, 0x80047470, &(0x7f00000000c0)=0x5) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r1 = socket$inet(0x2, 0x3, 0x5) r2 = open$dir(&(0x7f0000000000)='./bus\x00', 0x40, 0x120) poll(&(0x7f0000000100)=[{r1, 0x1}, {r0, 0x4}, {r0, 0x1}, {r0, 0x8}, {r2, 0x4}], 0x5, 0x1) ioctl$FIOASYNC(r0, 0x80047460, &(0x7f00000000c0)) ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, "0d0e5012c3842ffcc300"}) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000580), 0x40, 0x0) ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)) pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000380)="6aab0d39", 0x4}], 0x1, 0x5) sysctl$kern(0x0, 0x0, &(0x7f0000000280)="010016b6bd3ce504c8e0a30254d0a2341e81f5bbff79e820e8a0cf6b5c8971fe8a8464f0", &(0x7f0000000080)=0x24, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETF(r3, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0xe, &(0x7f0000000200)=ANY=[@ANYRESDEC]) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.224' (ED25519) to the list of known hosts. pckbd_enable: command error sd0(vioscsi0:1:0): Check Condition (error 0x70) on opcode 0x1e SENSE KEY: Illegal Request ASC/ASCQ: Invalid Command Operation Code pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error    OpenBSD/amd64 (Amnesiac) (tty00) login: pckbd_enable: command error pckbd_enable: command error denied attempt to set clock forward to 7885088468817503279 pckbd_enable: command error pckbd_enable: command error panic: kernel diagnostic assertion "ps->ps_uvncount == 0" failed: file "/syzkaller/managers/main/kernel/sys/kern/kern_unveil.c", line 188 Stopped at db_enter+0x25: addq $0x8,%rsp TID PID UID PRFLAGS PFLAGS CPU COMMAND db_enter() at db_enter+0x25 panic(ffffffff830bd0f8) at panic+0x1cf __assert(ffffffff83076404,ffffffff8304895b,bc,ffffffff82ffb8e3) at __assert+0x29 unveil_destroy(ffff8000ffff5e10) at unveil_destroy+0x1dd exit1(ffff8000360171d8,0,0,1) at exit1+0x60f sys_exit(ffff8000360171d8,ffff80002a49d380,ffff80002a49d2d0) at sys_exit+0x1a syscall(ffff80002a49d380) at syscall+0x97e Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x70e02da51840, count: 7 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb> ddb> set $lines = 0 ddb> set $maxwidth = 0 ddb> show panic *cpu0: kernel diagnostic assertion "ps->ps_uvncount == 0" failed: file "/syzkaller/managers/main/kernel/sys/kern/kern_unveil.c", line 188 ddb> trace db_enter() at db_enter+0x25 panic(ffffffff830bd0f8) at panic+0x1cf __assert(ffffffff83076404,ffffffff8304895b,bc,ffffffff82ffb8e3) at __assert+0x29 unveil_destroy(ffff8000ffff5e10) at unveil_destroy+0x1dd exit1(ffff8000360171d8,0,0,1) at exit1+0x60f sys_exit(ffff8000360171d8,ffff80002a49d380,ffff80002a49d2d0) at sys_exit+0x1a syscall(ffff80002a49d380) at syscall+0x97e Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x70e02da51840, count: -8 ddb> show registers rdi 0 rsi 0x1 rbp 0xffff80002a49d0d0 rbx 0xffff8000ffff5e10 rdx 0 rcx 0 rax 0xffff8000360171d8 r8 0 r9 0x8080808080808080 r10 0xfe3eb195a76cc5ba r11 0xa4fda150e3c385e8 r12 0 r13 0x2 r14 0 r15 0x1 rip 0xffffffff822483c5 db_enter+0x25 cs 0x8 rflags 0x246 rsp 0xffff80002a49d0c0 ss 0x10 db_enter+0x25: addq $0x8,%rsp ddb> show proc PROC (syz-executor) tid=461455 pid=55218 tcnt=0 stat=onproc flags process=1018 proc=2000 runpri=32, usrpri=86, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0xffff8000360171d8 scnt=-1 ecnt=1 forw=0xffffffffffffffff, list=0xffff80003765a030,0xffff800036016f60 process=0xffff8000ffff5e10 user=0xffff80002a498000, vmspace=0xfffffd806c218590 estcpu=36, cpticks=3, pctcpu=0.0, user=0, sys=1, intr=0 ddb> ps PID TID PPID UID S FLAGS WAIT COMMAND 39898 319537 52251 0 2 0 syz-executor 39898 440355 52251 0 3 0x4000080 fsleep syz-executor 52131 419495 44838 0 2 0x4000000 syz-executor 52131 420645 44838 0 3 0x4000080 rest syz-executor 82131 326562 40714 0 2 0 syz-executor 82131 77176 40714 0 3 0x4000080 fsleep syz-executor 4386 53723 92138 0 3 0 vmmaplk syz-executor 4386 94211 92138 0 2 0x4000000 syz-executor 94973 271079 1 0 3 0x100083 ttyin getty 70613 405037 0 0 3 0x14200 acct acct 14535 272024 0 0 3 0x14200 bored sosplice 65549 20611 55664 0 2 0x482 syz-executor 40714 272827 55664 0 2 0x482 syz-executor 92138 350891 55664 0 2 0x482 syz-executor 7661 374035 55664 0 2 0x2 syz-executor 44838 361508 55664 0 2 0x482 syz-executor 99694 439248 55664 0 3 0x82 wait syz-executor 52251 120939 55664 0 2 0x482 syz-executor 21605 313400 55664 0 2 0x2 syz-executor 55664 148494 37349 0 3 0x82 kqread syz-executor 37349 87968 97556 0 3 0x10008a sigsusp ksh 97556 422196 5714 0 3 0x98 kqread sshd-session 5714 41612 66429 0 3 0x92 kqread sshd-session 66429 347285 1 0 3 0x88 kqread sshd 76783 179850 801 73 3 0x1100090 kqread syslogd 801 523554 1 0 3 0x100082 sbwait syslogd 87702 72582 1 0 3 0x100080 kqread resolvd 36101 354649 92634 77 3 0x100092 kqread dhcpleased 19645 30824 92634 77 3 0x100092 kqread dhcpleased 92634 424582 1 0 3 0x80 kqread dhcpleased 29692 41437 0 0 3 0x14200 bored smr 16166 331904 0 0 2 0x14200 zerothread 98845 63390 0 0 3 0x14200 aiodoned aiodoned 30093 230255 0 0 3 0x14200 syncer update 68696 233674 0 0 3 0x14200 cleaner cleaner 48597 200110 0 0 2 0x14200 reaper 31973 156467 0 0 3 0x14200 pgdaemon pagedaemon 89934 110646 0 0 3 0x14200 bored viomb 75887 28304 0 0 3 0x40014200 acpi0 acpi0 92038 184145 0 0 3 0x14200 bored softnet3 11855 515795 0 0 3 0x14200 bored softnet2 65025 102316 0 0 3 0x14200 bored softnet1 26666 198230 0 0 3 0x14200 bored softnet0 56604 220421 0 0 3 0x14200 bored systqmp 24121 233822 0 0 3 0x14200 bored systq 69714 269840 0 0 2 0x40014200 softclock 94614 511296 0 0 3 0x40014200 idle0 1 401878 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb> show all locks No such command ddb> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 10174 11038K 11500K 166960K 12481 0 pcb 17 14K 16K 166960K 375 0 rtable 212 9K 9K 166960K 507 0 pf 32 13K 17K 166960K 71 0 ifaddr 38 6K 7K 166960K 57 0 ifgroup 46 2K 2K 166960K 71 0 sysctl 3 0K 0K 166960K 3 0 counters 29 17K 17K 166960K 38 0 ioctlops 0 0K 4K 166960K 155 0 iov 0 0K 32K 166960K 160 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1426 90K 90K 166960K 2093 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 5K 166960K 11 0 VM map 2 1K 1K 166960K 2 0 sem 12 0K 0K 166960K 75 0 dirhash 12 2K 2K 166960K 30 0 ACPI 1690 195K 286K 166960K 12468 0 file desc 16 57K 93K 166960K 959 0 sigio 0 0K 0K 166960K 24 0 proc 64 75K 116K 166960K 584 0 subproc 104 6K 6K 166960K 104 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 1 0K 0K 166960K 357 0 in_multi 88 6K 7K 166960K 131 0 ether_multi 1 0K 0K 166960K 9 0 mrt 2 0K 0K 166960K 5 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 85 387K 387K 166960K 85 0 exec 0 0K 1K 166960K 472 0 fusefs mount 1 32K 32K 166960K 1 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 221 72K 82K 166960K 10732 0 UVM aobj 83 3K 3K 166960K 88 0 pinsyscall 38 76K 98K 166960K 1986 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 0K 166960K 51 0 NDP 10 0K 2K 166960K 36 0 temp 75 6820K 6912K 166960K 36404 0 kqueue 15 24K 30K 166960K 184 0 SYN cache 2 16K 16K 166960K 2 0 ddb> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle rtpcb 120 105 0 102 1 0 1 1 0 8 0 rtentry 112 157 0 65 4 0 4 4 0 8 0 unpcb 144 785 0 770 2 0 2 2 0 8 1 syncache 336 5 0 5 2 1 1 1 0 8 1 tcpcb 808 327 0 323 12 7 5 8 0 8 4 arp 88 19 0 2 1 0 1 1 0 8 0 ipq 40 5 0 4 1 0 1 1 0 8 0 ipqe 40 9 0 8 1 0 1 1 0 8 0 inpcb 336 1352 0 1215 28 11 17 17 0 8 5 nd6 104 30 0 6 1 0 1 1 0 8 0 pkpcb 40 1 0 1 1 0 1 1 0 8 1 kcovpl 48 8 0 0 1 0 1 1 0 8 0 ppxss 1072 6 0 6 2 1 1 1 0 8 1 pfrktable 1344 5 0 2 1 0 1 1 0 8 0 pfanchor 1288 3 0 0 1 0 1 1 0 8 0 pftag 88 1 0 0 1 0 1 1 0 8 0 pfstkey 128 4 0 4 1 0 1 1 0 8 1 pfstate 344 2 0 2 1 0 1 1 0 8 1 pfrule 1344 13 0 11 2 1 1 1 0 8 0 art_heap8 4096 2 0 0 2 0 2 2 0 8 0 art_heap4 256 524 0 97 29 1 28 29 0 8 1 art_table 32 526 0 97 4 0 4 4 0 8 0 art_node 16 120 0 38 1 0 1 1 0 8 0 sysvmsgpl 40 75 0 72 1 0 1 1 0 8 0 semapl 112 71 0 61 1 0 1 1 0 8 0 shmpl 112 85 0 5 3 0 3 3 0 8 0 dirhash 1024 29 0 12 3 0 3 3 0 8 0 dino2pl 256 3147 0 1653 95 0 95 95 0 8 0 ffsino 240 3147 0 1653 89 0 89 89 0 8 0 nchpl 144 4571 0 2893 63 0 63 63 0 8 0 uvmvnodes 80 3651 0 0 75 0 75 75 0 8 0 vnodes 216 3651 0 0 203 0 203 203 0 8 0 namei 1024 15417 0 15417 3 1 2 2 0 8 2 pfiaddrpl 120 1 0 0 1 0 1 1 0 8 0 kstatmem 264 38 0 18 2 0 2 2 0 8 0 scxspl 216 12982 0 12982 10 2 8 8 1 8 8 plimitpl 152 296 0 278 1 0 1 1 0 8 0 sigapl 424 1242 0 1195 6 0 6 6 0 8 0 futexpl 64 13769 0 13767 1 0 1 1 0 8 0 knotepl 120 51254 0 51201 36 26 10 17 0 8 8 kqueuepl 184 277 0 266 1 0 1 1 0 8 0 pipepl 288 234 0 207 6 1 5 5 0 8 3 fdescpl 432 1223 0 1195 5 1 4 5 0 8 0 filepl 120 7944 0 7570 23 9 14 17 0 8 0 lockfpl 104 352 0 350 2 1 1 2 0 8 0 lockfspl 48 92 0 90 1 0 1 1 0 8 0 sessionpl 144 24 0 16 1 0 1 1 0 8 0 pgrppl 48 46 0 30 1 0 1 1 0 8 0 ucredpl 104 1236 0 1223 1 0 1 1 0 8 0 zombiepl 144 1645 0 1643 2 1 1 1 0 8 0 processpl 1096 1242 0 1195 4 0 4 4 0 8 0 procpl 648 2656 0 2602 7 1 6 6 0 8 0 sosppl 168 2 0 2 1 0 1 1 0 8 1 sockpl 504 2258 0 2103 45 17 28 28 0 8 7 mcl64k 65536 12 0 12 2 1 1 1 0 8 1 mcl16k 16384 4 0 4 1 0 1 1 0 8 1 mcl9k 9216 2 0 2 2 1 1 1 0 8 1 mcl8k 8192 15 0 15 2 1 1 1 0 8 1 mcl4k 4096 3776 0 3725 19 11 8 18 0 8 1 mcl2k2 2112 3 0 3 2 1 1 1 0 8 1 mcl2k 2048 963 0 956 4 2 2 3 0 8 0 mtagpl 96 131 0 7 4 0 4 4 0 8 0 mbufpl 256 14930 0 14670 18 0 18 18 0 8 0 bufpl 280 4814 0 98 337 0 337 337 0 8 0 anonpl 24 205264 0 199089 59 2 57 57 0 187 19 amapchunkpl 152 35242 0 34754 40 8 32 32 0 158 8 amappl16 200 4255 0 4060 17 6 11 14 0 8 0 amappl15 192 10 0 10 1 1 0 1 0 8 0 amappl14 184 109 0 99 1 0 1 1 0 8 0 amappl13 176 7 0 6 1 0 1 1 0 8 0 amappl12 168 1831 0 1803 3 1 2 3 0 8 0 amappl11 160 47 0 37 1 0 1 1 0 8 0 amappl10 152 14 0 14 2 1 1 1 0 8 1 amappl9 144 136 0 136 1 1 0 1 0 8 0 amappl8 136 29 0 27 1 0 1 1 0 8 0 amappl7 128 97 0 87 1 0 1 1 0 8 0 amappl6 120 167 0 165 1 0 1 1 0 8 0 amappl5 112 140 0 132 1 0 1 1 0 8 0 amappl4 104 284 0 271 1 0 1 1 0 8 0 amappl3 96 6575 0 6483 3 0 3 3 0 8 0 amappl2 88 1488 0 1411 2 0 2 2 0 8 0 amappl1 80 9962 0 9447 13 1 12 13 0 8 0 amappl 88 10313 0 10146 5 0 5 5 0 92 0 dma65536 65536 1 0 1 1 0 1 1 0 8 1 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma512 512 1 0 1 1 0 1 1 0 8 1 dma256 256 7 0 7 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 87 0 5 2 0 2 2 0 8 0 uaddrrnd 24 1223 0 1194 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 1223 0 1194 1 0 1 1 0 8 0 vmmpekpl 168 10743 0 10707 3 0 3 3 0 8 0 vmmpepl 168 79584 0 77695 90 2 88 88 0 357 3 vmsppl 352 1222 0 1194 4 1 3 4 0 8 0 rwobjpl 24 27182 0 22430 29 0 29 29 0 8 0 pdppl 4096 2452 0 2388 106 40 66 80 0 8 2 pvpl 32 528134 0 516675 131 5 126 126 0 265 31 pmappl 216 1222 0 1194 3 0 3 3 0 8 0 extentpl 40 55 0 38 1 0 1 1 0 8 0 phpool 112 471 0 96 12 1 11 11 0 8 0 ddb> machine ddbcpu 0 No such command ddb> trace db_enter() at db_enter+0x25 panic(ffffffff830bd0f8) at panic+0x1cf __assert(ffffffff83076404,ffffffff8304895b,bc,ffffffff82ffb8e3) at __assert+0x29 unveil_destroy(ffff8000ffff5e10) at unveil_destroy+0x1dd exit1(ffff8000360171d8,0,0,1) at exit1+0x60f sys_exit(ffff8000360171d8,ffff80002a49d380,ffff80002a49d2d0) at sys_exit+0x1a syscall(ffff80002a49d380) at syscall+0x97e Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x70e02da51840, count: -8 ddb> machine ddbcpu 1 No such command ddb> trace db_enter() at db_enter+0x25 panic(ffffffff830bd0f8) at panic+0x1cf __assert(ffffffff83076404,ffffffff8304895b,bc,ffffffff82ffb8e3) at __assert+0x29 unveil_destroy(ffff8000ffff5e10) at unveil_destroy+0x1dd exit1(ffff8000360171d8,0,0,1) at exit1+0x60f sys_exit(ffff8000360171d8,ffff80002a49d380,ffff80002a49d2d0) at sys_exit+0x1a syscall(ffff80002a49d380) at syscall+0x97e Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x70e02da51840, count: -8