last executing test programs: 16.215163994s ago: executing program 4 (id=5558): syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@random="91a6e34dd8bb", @remote, [], {@ipv4={0x800, {{0x7, 0x4, 0x0, 0x5, 0x30, 0x0, 0x1, 0x0, 0x2, 0x0, @broadcast, @rand_addr, {[@rr={0x7, 0x3, 0x4}, @ra={0x94, 0x0, 0x1}, @timestamp={0x44, 0x0, 0x0, 0x3, 0x6, [{[], 0xb514}, {[], 0x800}, {[], 0xffffb1cc}]}]}}, @icmp=@timestamp={0xd, 0x0, 0x0, 0x0, 0x200, 0x6, 0x1000}}}}}) r0 = openat$pci(0xffffffffffffff9c, &(0x7f0000000140), 0x1084a, 0x0) r1 = dup2(r0, 0xffffffffffffff9c) sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b1000513000000000000000004000000000013fecea10500fef96ecf2ac72fd3357ae30200004e3039d2d236acf20b7804be38164991f7c8cf7f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f335c223e7d0c032bfa896443a41002000000720fd38bfbb770c1f5a872c88106002ec5890400000000000000361b1257aea8c500002002fbfe0c2300008abfba0900000008e371a3f8343712051eeab7196fcbd80407", 0xa9, 0x0, 0x0, 0x0) sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b1000501600000000000000007000000330002000000000000f96ecfc72fd3357ae320b37b673039d2d236acf20b7804be38164991f7c8cf5f882b297be1aa5b236de351e2f0ac3ebbc257699a5f139b672f4d335d223e7d026ba8af6300372821", 0x61, 0x0, 0x0, 0x0) socket(0x11, 0x3, 0x0) fcntl$lock(r1, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xfffffffffffffff3, 0xffffffffffffffff}) r2 = socket(0x18, 0x2, 0x0) connect$unix(r2, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) sendmsg(r2, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0) r3 = socket(0x18, 0x2, 0x0) select(0x40, &(0x7f0000000080)={0x3ff, 0xa8fb, 0x4, 0x7, 0x2, 0x9e, 0x8000000000000001, 0x9}, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_int(r4, 0xffff, 0x1008, &(0x7f00000008c0), &(0x7f0000000900)=0x4) setsockopt$sock_int(r3, 0xffff, 0x1023, &(0x7f0000000000)=0x3, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r5 = kqueue() pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000180), 0x8000, 0x0) ioctl$WSKBDIO_SETENCODING(r8, 0x80045710, &(0x7f00000000c0)=0x5) r9 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000580), 0x40, 0x0) ioctl$BIOCSETIF(r9, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x4, 0x0, 0x0, 0x8000001}, {0xb1, 0x10, 0x0, 0x4}, {0x16, 0x3, 0x7f, 0x400f}]}) pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{0x0}], 0x1, 0xfe3) sysctl$kern(0x0, 0x0, &(0x7f00000001c0)="71fff7fe25c0be2722af95af7e4388f7265f33f24dd0280900000000000000bc75d304c2426bd6abcc2d22f575", &(0x7f0000000080)=0x2d, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETF(r9, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x6e, &(0x7f00000003c0)=ANY=[]) close(r6) kevent(r5, &(0x7f0000000000)=[{{r7}, 0xfff7, 0x83, 0x1, 0x23f, 0x9}], 0x1ff, 0x0, 0x56f, 0x0) 16.21163552s ago: executing program 1 (id=5560): r0 = shmget$private(0x0, 0x1000, 0x318, &(0x7f0000408000/0x1000)=nil) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f00000000c0)=0xc) setregid(0x0, r3) r4 = socket(0x18, 0x1, 0x0) getsockopt$sock_cred(r4, 0xffff, 0x1024, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x2) setreuid(r5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r7, &(0x7f0000000080)=[{&(0x7f0000000480)=""/240, 0xfffffc47}, {&(0x7f00000000c0)=""/179, 0xfdac}, {&(0x7f00000002c0)=""/229, 0xe2}], 0x50, 0x0) mprotect(&(0x7f00001cb000/0xc000)=nil, 0xc000, 0x4) getsockopt$sock_cred(r6, 0xffff, 0x1022, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f00000000c0)=0xc) setregid(0x0, r8) getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000000)={0x0}, &(0x7f0000000080)=0xc) shmctl$IPC_SET(r0, 0x1, &(0x7f00000000c0)={{0x13a6f2df, 0x0, r3, r5, r8, 0x24, 0x56d}, 0xd, 0x3da, 0xffffffffffffffff, r9, 0x8, 0x7001, 0x7fff}) r10 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$BIOCSETIF(r10, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$BIOCSETF(r10, 0x80104267, &(0x7f0000000980)={0x3, &(0x7f0000000000)=[{0x80, 0x0, 0x4, 0x4}, {0x25, 0x0, 0x0, 0x444}, {0x6, 0xe, 0x0, 0xfffffffe}]}) syz_emit_ethernet(0x4a, &(0x7f00000001c0)=ANY=[]) kevent(0xffffffffffffffff, &(0x7f0000000040)=[{{}, 0xfffffffffffffff9, 0x6b, 0x11, 0x200000000000001}], 0x203, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r11 = socket(0x18, 0x3, 0x8) setsockopt(r11, 0x1000000000029, 0xa, &(0x7f0000000040)="89584e0a", 0x4) fcntl$dupfd(r2, 0xa, r4) 15.000049585s ago: executing program 5 (id=5561): r0 = syz_open_pts() close(r0) syz_open_pts() munmap(&(0x7f0000800000/0x800000)=nil, 0x800000) mquery(&(0x7f0000ff4000/0x1000)=nil, 0x7ed841f1e000, 0x0, 0x0, 0xffffffffffffffff, 0x0) sysctl$kern(&(0x7f0000000040)={0x1, 0xb}, 0x2, &(0x7f0000000080), 0x0, 0x0, 0x0) writev(r0, &(0x7f0000000780)=[{&(0x7f00000004c0)="1bfcd6f8ced199dc21", 0x9}], 0x100000000000028c) 14.999645903s ago: executing program 0 (id=5562): ioctl$WSDISPLAYIO_GETSCREENTYPE(0xffffffffffffffff, 0xc028575d, &(0x7f0000000000)={0x67, 0x40000000, './file0\x00', 0x8, 0x3, 0x7b, 0x6}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_int(r0, 0xffff, 0x1001, &(0x7f0000000080), &(0x7f0000000000)=0x4) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000000c0)={0x0, &(0x7f0000000400)}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x4e}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000180)=0x66, 0x0, 0x27) 14.74960809s ago: executing program 6 (id=5563): mknod(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x6000, 0x1) link(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000d40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') link(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') unlink(&(0x7f0000000e40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000a40)='./file0\x00') mknod$loop(&(0x7f0000000a80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) 14.746814584s ago: executing program 5 (id=5565): mknod(&(0x7f00000000c0)='./file0\x00', 0x2000, 0x0) ioctl$WSMUXIO_ADD_DEVICE(0xffffffffffffffff, 0x80085761, &(0x7f0000000040)={0x2, 0x7}) r0 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000ac0)="df6e410d6bb016b49fa7c2c274c5799345db3f22fe8e6af8c4f2014b43ae21f90bb8ef55535eb6d5808bed37e345dfb2adc85abd9156a3f177014af5e506c5221a118c068f39ab4361967cf12b8ec03001cfe62e2371e904cd79d29288ca7b00c76ac5d697cfa1af3a2158fae931581e255ca26e028860bb16afd038653915fa462e", 0x82}], 0x1) execve(0x0, 0x0, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x80000000000206, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fcntl$lock(r1, 0x8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x100000401}) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x205, 0x0) fcntl$lock(r2, 0x9, &(0x7f00000003c0)={0x3, 0x0, 0x1, 0x1000301010083}) r3 = open(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f00000001c0)=[{0x25, 0x11}, {0x18, 0x0, 0x0, 0x441}, {0x6, 0x0, 0x0, 0xfffffffa}]}) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) r4 = socket(0x2, 0x2, 0x0) ioctl$VMM_IOC_RUN(r1, 0xc0205602, &(0x7f0000000200)={0x100, 0x4, 0x7, 0x7, &(0x7f0000000440)={{0x4, 0x37, 0xfa, 0x1, 0x2, 0x9, 0x6b84}, {[0x8001, 0xe2, 0x1cac3134, 0x8001, 0x8, 0x100, 0xfffffffffffffff8, 0x8, 0x4, 0xfffffffffffffffa, 0x7fff, 0x5, 0xfffffffffffffffa, 0x5, 0x5, 0x7ff, 0x7fff, 0x270b], [0x1, 0xffffffffffffffff, 0x7, 0xffffffff, 0x2, 0x4, 0x1, 0xff, 0xffffffffffffffff, 0x800], [0x1, 0x5, 0x2, 0x7, 0x9, 0xb3, 0x3], [0x5, 0x0, 0xfffffffffffffff0, 0x4, 0x8, 0x8000000000000001], [{0x7, 0x0, 0x3, 0xd}, {0x7, 0x8371, 0x8, 0x3}, {0x800, 0x1, 0xf, 0x6}, {0x55, 0x401, 0xe8, 0x7}, {0x9, 0x8, 0x0, 0x1}, {0x1, 0x9, 0x5}, {0xc, 0x51, 0x100, 0x1}, {0x8001, 0x400, 0x9, 0x5}], {0x100, 0x2e, 0x814, 0x10001}, {0x192, 0x8, 0x61c, 0x39}}}, 0x7, 0x9}) setsockopt$sock_int(r4, 0xffff, 0x1023, &(0x7f0000000040), 0xe0) fcntl$lock(r3, 0x9, &(0x7f0000000140)={0x1, 0x0, 0x2, 0x269000000, 0xffffffffffffffff}) r5 = open(&(0x7f0000000000)='./file0\x00', 0x2, 0x0) ioctl$FIONREAD(r5, 0x80206910, &(0x7f0000000100)) 14.249913921s ago: executing program 3 (id=5566): r0 = accept$inet(0xffffffffffffff9c, &(0x7f0000000000), &(0x7f0000000040)=0xc) lseek(r0, 0xffffffffffffffff, 0x2) ioctl$FIONREAD(r0, 0x4004667f, &(0x7f0000000080)) getsockname$inet(r0, &(0x7f00000000c0), &(0x7f0000000100)=0xc) recvmsg(r0, &(0x7f0000001380)={&(0x7f0000000140)=@un=@file={0x0, ""/4097}, 0x1003, &(0x7f00000012c0)=[{&(0x7f0000001180)=""/13, 0xd}, {&(0x7f00000011c0)=""/230, 0xe6}], 0x2, &(0x7f0000001300)=""/110, 0x6e}, 0x840) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_pts() r4 = getpid() getsockopt$SO_PEERCRED(r0, 0xffff, 0x1022, &(0x7f0000001540)={0x0, 0x0}, 0xc) sendmsg$unix(r1, &(0x7f0000001600)={&(0x7f0000001400)=@abs={0x1, 0x0, 0x2}, 0x8, &(0x7f0000001500)=[{&(0x7f0000001440)="747b99c6e3e851e26f5c85c8a8b38f0a611e9fe40176e3ce49d8355630ad985f763f67584d5cabadb7e7a5eeb93185099d501cf41c21938c61e800bc0d765b95bd3f99a03725a65d8a9429915b57f8d09010d11014d18cf80ccb58f6ddc2b11d4a2f665a4beb6969e92e59f065a0aa15fc3e90538f60d8cf9a67b794058228f8f25e97a8db675240ca47ca5fdfb60a6a3050a6d5fc3596e7ba2a1e6e29c3e3f06b04a92e", 0xa4}], 0x1, &(0x7f0000001580)=[@rights={0x38, 0xffff, 0x1, [r0, r0, r0, r0, r0, 0xffffffffffffff9c, r0, r3, r0]}, @cred={0x20, 0xffff, 0x0, r4, r5}, @rights={0x18, 0xffff, 0x1, [r0]}], 0x70, 0x404}, 0x5) r6 = openat$bpf(0xffffffffffffff9c, &(0x7f0000001640), 0x400, 0x0) ioctl$BIOCLOCK(r6, 0x20004276) r7 = socket$unix(0x1, 0x2, 0x0) sendto$unix(r7, &(0x7f0000001680)="291eae15fb67080b433a512fa18da20a028eaea56ab1ab2083cb26a3f4aa4d6190b0a18d0d346ec47c3eae3ed20c8e11", 0x30, 0x409, &(0x7f00000016c0)=@abs={0x0, 0x0, 0x3}, 0x8) ftruncate(r2, 0x8) ioctl$BIOCLOCK(r6, 0x20004276) ioctl$FIONREAD(r3, 0x4004667f, &(0x7f0000001700)) r8 = openat$null(0xffffffffffffff9c, &(0x7f0000001740), 0x80, 0x0) r9 = openat(r8, &(0x7f0000001780)='./file0\x00', 0x200, 0x120) connect$unix(r9, &(0x7f00000017c0)=@file={0x1, './file0\x00'}, 0xa) r10 = accept$inet(r8, &(0x7f0000001800), &(0x7f0000001840)=0xc) recvmmsg(r10, &(0x7f0000003fc0)={&(0x7f0000003f80)={&(0x7f0000001880)=@in6, 0xc, &(0x7f0000003dc0)=[{&(0x7f00000018c0)=""/4096, 0x1000}, {&(0x7f00000028c0)=""/97, 0x61}, {&(0x7f0000002940)=""/104, 0x68}, {&(0x7f00000029c0)=""/102, 0x66}, {&(0x7f0000002a40)=""/33, 0x21}, {&(0x7f0000002a80)=""/83, 0x53}, {&(0x7f0000002b00)=""/244, 0xf4}, {&(0x7f0000002c00)=""/245, 0xf5}, {&(0x7f0000002d00)=""/172, 0xac}, {&(0x7f0000002dc0)=""/4096, 0x1000}], 0xa, &(0x7f0000003e80)=""/242, 0xf2}, 0x7}, 0x10, 0x43, &(0x7f0000004000)={0x8, 0x5}) read(r1, &(0x7f0000004040)=""/129, 0x81) ioctl$WSMOUSEIO_GCALIBCOORDS(r8, 0x41205725, &(0x7f0000004100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}) sync() r11 = openat$tty(0xffffffffffffff9c, &(0x7f0000004240), 0x10, 0x0) ioctl$TIOCMBIS(r11, 0x8004746c, &(0x7f0000004280)=0xb2) recvfrom$unix(r2, &(0x7f00000042c0)=""/23, 0x17, 0x1800, &(0x7f0000004300)=@abs={0x1, 0x0, 0x2}, 0x8) socket(0x20, 0x8004, 0x8) setsockopt$inet6_MRT6_DEL_MFC(r9, 0x29, 0x69, &(0x7f0000004340)={{0x18, 0x3, 0x2}, {0x18, 0x0, 0x0, 0x472}, 0x3, [0x8, 0x2, 0xfffffffc, 0x6, 0x8, 0x0, 0x1, 0x3]}, 0x3c) 13.000127857s ago: executing program 2 (id=5568): mprotect(&(0x7f000060b000/0x3000)=nil, 0x3000, 0x0) r0 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000040), 0x283c2, 0x0) ioctl$FIOASYNC(r0, 0x8004667d, &(0x7f0000000080)=0xffff) r1 = socket(0x18, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{}], 0x1) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1) select(0x21, 0x0, &(0x7f0000000040)={0x600000000, 0x7, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x33, 0xfffffffffffffffc}, &(0x7f0000000080)={0x3, 0x3, 0x0, 0x8, 0x5b0, 0x0, 0x0, 0x2}, &(0x7f00000000c0)={0x0, 0x7ffe}) r2 = socket(0x2, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x2, 0xffffffffffffffff) close(r3) r4 = socket$inet(0x2, 0x2, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x611, 0x0) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r5 = socket(0x2, 0x4001, 0x0) r6 = fcntl$dupfd(r5, 0x2, r5) close(r6) r7 = socket(0x2, 0x2, 0x0) connect$unix(r7, &(0x7f0000000000), 0x10) setsockopt$sock_int(0xffffffffffffffff, 0xffff, 0x1023, &(0x7f0000000040), 0xe0) recvmsg(r4, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setsockopt(r1, 0x28, 0x28, &(0x7f00000000c0)="5ab7776a", 0x4) 12.749689522s ago: executing program 4 (id=5569): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="89000000ffff000001"], 0x9}, 0x0) recvmsg(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/239, 0xef}, 0x840) sendmsg(r0, &(0x7f0000000380)={0x0, 0x32c, 0x0, 0x0, &(0x7f0000000000), 0x90}, 0x0) r2 = socket(0x2, 0x4001, 0x0) r3 = dup(r2) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) r4 = socket(0x18, 0x2, 0x0) setsockopt(r4, 0x1000000000029, 0xa, &(0x7f0000003680)='\x00\x00\x00\x00', 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setreuid(0x0, 0xee01) setsockopt(r4, 0x1000000029, 0xd, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r1, 0xc0106924, &(0x7f0000000180)) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000200)={0x3, &(0x7f0000000140)=[{0x0, 0x5, 0x4, 0x6c2}, {0x9, 0x4, 0x20, 0x19}, {0xfffb, 0xfd, 0x83, 0x7ffffffb}]}) r5 = socket(0x18, 0x3, 0x0) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) ioctl$FIONREAD(r5, 0x8080691a, &(0x7f0000000100)) ioctl$BIOCSETIF(0xffffffffffffff9c, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r6 = socket(0x6, 0x5, 0xfe) ioctl$FIONREAD(r6, 0xc018696c, &(0x7f00000001c0)) syz_emit_ethernet(0x41, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb080045f800330000000700009078000000003fffffff4e204e21", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="bfb668d25e7b9535e39fa8d1c7d4745000000090780000135e6818066016aefbea8f"]) r7 = fcntl$dupfd(r3, 0x2, 0xffffffffffffffff) close(r7) r8 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000580), 0x1, 0x0) ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f0000000040)={0x0, 0x3, 0x1, 0x0, "0100012d29fb000700000000098002005e00"}) sysctl$kern(&(0x7f0000000040)={0x1, 0x4f}, 0x3, &(0x7f00000000c0)="3bf2ee74e747c82dad6eb2a36fa755e1a3925fe49afca7e63b52fa65ccaa74d6e6b85b6cdced70357ef201f97842b1068dca31553fa2d7031f38c03e56ad0e24dfc4f97b8b7f81499647e6e7725765d61436c85e43c15d12a78cb8c57ddde87021d7b685507fd3e0652f35e45bdaa3afd86c4fe557433e4c2b632de71c951516adff26aa2e48b45f8ce92bcefd3eceefabee7e3ebe806fdb4f6af569ae94b5d127", &(0x7f0000000080)=0x4, &(0x7f0000000340)="5a67923ef0cb189971421989ebcff78831a7581e2f27caa362f1363042efb27688b2c899220fb2fe37e467d974592496856ca7b78060998608c2f952e43bc0bf11555cc5cb0fe17b2ec1be389871829bfe10dd4c4d2c8f9da2bd2868fd86791dc09dc4fa89a217458bdaed31003fdc3a7323189ba3ccbad6c8af17516e4557f61ad20180000000000000125f568ca7d3396b9057255f381855110eb3a673713716cdf010ddfa7977f92cf061ad125ca670353b45d53aae196b00271f9d3452b523b3dea22d6027625614312183724b71c7eb02083a410c1c99fa455013521f98686e472b70b560f7021f567adf4d", 0x4) ioctl$BIOCSETF(r8, 0x80104267, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0xb1, 0x0, 0x2, 0x404}, {0x16, 0x7, 0x7f, 0x440f}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETF(r8, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) 12.742775649s ago: executing program 6 (id=5570): r0 = msgget$private(0x0, 0x20) msgsnd(r0, &(0x7f0000000780)={0x0, "b59c4426f29138331e8c6894cbc41e65d375c8e15c0ce6a1a446e0ceb603c76cf249eca8fd94e55661b62099368cb3c503b258a6526e2709aa214addbc033ae4465a63f5fa362417177344633c0cea5408dc5cdd43b6bdfa7a17285e74a650f8243be59510de9367b8e319155c5acf213317bfd299d7f1872b3b90b6adb5a21d0a0116cd365deb0b3dac5ad8cfdf510c82475985422df3d41cabc38cadf2600a7c7c1991f22530b91ca39765e6076fecbb08e32b2b5ba552d2c2c8311a57c53fa03e06c527a3e0ec14bf7c8cc62f3943186fa3080f52ea3eef9c84052c0847f500"/239}, 0xf7, 0x800) 12.500148047s ago: executing program 1 (id=5571): mknod(&(0x7f00000002c0)='./file0\x00', 0x2000, 0x5200) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) poll(&(0x7f00000000c0)=[{r0, 0x6e}, {r0, 0x40}], 0x2, 0x0) r1 = syz_open_pts() ioctl$TIOCSETD(r1, 0x8004741b, &(0x7f00000006c0)=0x9) r2 = socket(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0xffff, 0x1, &(0x7f0000000240)=0x5, 0x4) r3 = socket(0x11, 0x3, 0x0) dup2(r3, r2) setsockopt(r3, 0xffff, 0x100ca6, &(0x7f0000000000)="02", 0x1) r4 = accept$inet6(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000100)=0xc) setsockopt$sock_timeval(r4, 0xffff, 0x1006, &(0x7f0000000140)={0x3, 0x5}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) select(0x7, &(0x7f0000000000)={0x400}, &(0x7f0000000040), &(0x7f0000000080)={0xcb}, &(0x7f0000000180)) 11.750223579s ago: executing program 7 (id=5573): r0 = open(&(0x7f0000000080)='./file0\x00', 0x10, 0x83) open$dir(&(0x7f0000000000)='./file0\x00', 0x80, 0x80) ioctl$VNDIOCSET(r0, 0x40204402, &(0x7f00000001c0)={0x0, 0x0, 0x0}) open(&(0x7f0000000080)='./file0\x00', 0x10, 0x83) (async) open$dir(&(0x7f0000000000)='./file0\x00', 0x80, 0x80) (async) ioctl$VNDIOCSET(r0, 0x40204402, &(0x7f00000001c0)={0x0, 0x0, 0x0}) (async) 10.985857068s ago: executing program 0 (id=5574): r0 = socket$inet(0x2, 0x8003, 0x0) sysctl$kern(&(0x7f0000000140)={0x1, 0x42}, 0x2, 0x0, 0x0, 0x0, 0x0) setsockopt(r0, 0x0, 0x7, &(0x7f0000000340)="15337ac0", 0x4) syz_emit_ethernet(0x2a, &(0x7f00000001c0)={@broadcast, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2}, @udp={{0x0, 0x2, 0x8}}}}}}) recvmmsg(r0, &(0x7f0000000040)={0x0, 0x4}, 0x10, 0x1002, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000580)=ANY=[@ANYBLOB="aaaaaaaaaaaa6b9799d0807086dd69b8fe8000000000000000000000000000bbfe8000000000000000000000000000bb"]) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) sysctl$net_inet_ip(&(0x7f0000000280)={0x4, 0x2, 0x0, 0x1b}, 0x4, 0x0, 0x0, &(0x7f0000001300), 0x4) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x1810, 0xffffffffffffffff, 0x0) r1 = openat$tty(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) r2 = socket(0x2, 0x3, 0xfe) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setitimer(0x1, &(0x7f0000000100)={{0x200}}, 0x0) bind(r2, &(0x7f0000000000), 0x10) ioctl$TIOCSTAT(r1, 0x20007465, &(0x7f00000000c0)) r3 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$TIOCSETA(r3, 0xcd50441a, &(0x7f00000003c0)={0x2, 0x0, 0xffeffffc, 0xfffffffc, "000000190000009f17b26900b60000004000", 0x1ffffffa, 0x7}) ioctl$WSKBDIO_SETBACKLIGHT(r3, 0x800c5712, &(0x7f0000000200)={0x31, 0x4, 0xf}) close(0xffffffffffffffff) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r4 = socket(0x2, 0x3, 0x0) ioctl$FIONREAD(r4, 0xc0206921, &(0x7f00000001c0)) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, 0x0) r5 = socket(0x2, 0x2, 0x0) ioctl$FIONREAD(r5, 0xc0206923, &(0x7f00000001c0)) syz_emit_ethernet(0x76, &(0x7f0000000240)=ANY=[@ANYBLOB="0000000000000fee3fefd93f818d04ec310fa3d9a63f9a1568e52632dfd2c42c53088906b68afc9d27c7064609a1f8237f8761e0f777065a5000000000000094e16ed860374afccf405d464f6687f89380d718714a8afeb51715676851b84a8a359b0c9cf5cc2a587cecf8b131528626ac25c635d5a2d8e77fa93ff3bef57e6fd95a15383fe8ae47ec361ab20423472bee844d979b2b4567095cc67a70c97dcdbcfe8faa479d8e2c995949a9c6c918fead8b6162cc5fb97651f6be868220d335a4da462050d9423f32a1cbda8f8ac7e9b5c3645f1a5e6effbb3af8a356188e77b250818c51d3"]) r6 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000100), 0x10, 0x0) ioctl$BIOCSETWF(r6, 0x80104277, &(0x7f0000000180)={0x3, &(0x7f0000000140)=[{0x5, 0x3, 0x3, 0xf06}, {0xfffa, 0x8, 0x2, 0x1}, {0xfffb, 0x5, 0x80, 0xfffffffe}]}) 10.98482264s ago: executing program 3 (id=5575): sysctl$kern(&(0x7f0000000040)={0x1, 0x58}, 0x2, &(0x7f0000000440)="3bf2ee74e747", &(0x7f0000000080)=0x6, &(0x7f0000000540), 0x0) r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TIOCSETA(r0, 0xc0504417, &(0x7f0000000740)={0x0, 0x4, 0x0, 0x0, "9700ff47c1d102000000000000f2ff00", 0x0, 0xc67}) ioctl$TIOCSETD(r0, 0x8004741b, &(0x7f0000000000)=0x2) mknod(&(0x7f0000000240)='./file0\x00', 0x2000, 0x6) ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x0, [{0x0, 0x100}, {}, {}, {0x2}, {}, {}, {}, {0x0, 0xc8}, {0x3}, {}, {0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x8}]}) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) select(0x2, 0x0, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)) sysctl$kern(&(0x7f0000000100)={0x1, 0x28}, 0x2, 0x0, 0x0, &(0x7f0000000280), 0x0) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x2100, 0x5f00) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) ioctl$TIOCSETA(r2, 0xc0205603, &(0x7f0000000040)={0x4, 0x0, 0x0, 0x0, "97a6627804000000000000be284a780000000080"}) openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) ioctl$BIOCSETIF(r1, 0x8020426c, 0x0) write(r1, &(0x7f0000000200)="d81ad3d20cf7eb4e9be33bbd1a30", 0xe) r3 = open(&(0x7f0000000000)='./file0\x00', 0x205, 0x118) ioctl$TIOCSTAT(r3, 0x4004667b, 0x0) fcntl$setstatus(r3, 0x4, 0x40) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11112399d89d59d6, 0xffffffffffffffff, 0xa) ioctl$TIOCSETD(r3, 0x8004741b, &(0x7f0000000000)=0x8) ioctl$TIOCSETD(0xffffffffffffffff, 0x8004741b, 0x0) ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f00000000c0)={0x9, 0xcbd1, 0x1c, 0x39, "b559ae54084ee54bf0a4eb83fa4ef9b38b71a0b0", 0x1, 0x101}) 10.250037397s ago: executing program 1 (id=5576): r0 = kqueue() ioctl$FIONREAD(r0, 0x4004667f, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TIOCSETA(r2, 0xc0284457, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, "9786224ff1c102d1000100002000"}) sendmsg$unix(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0xffffffffffffff48}, 0x0) sendmmsg(r1, &(0x7f00000000c0)={&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x3}, 0x10, 0x0) 9.750134227s ago: executing program 2 (id=5577): ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x0, 0x20}, {0x2, 0x0, 0x2d, 0x4b8}, {0x1, 0x0, 0x0, 0xffffffff}]}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0xfffffffffffffe53) sysctl$kern(&(0x7f0000000040)={0x1, 0x23}, 0x2, &(0x7f0000000140)="a947108059e0a58cb197c1092183d2bc27c8f07fe4eed126d96173184b1d1a30c4999cb090aa688d66bd7e2708f2487b58b73b485bed725ebb90a4710ea0ec177160baa40ef8cfd9f8472a4729e85e135c3c2acc5c4d3f4e34500e1f486d1c519a401031027740607d", &(0x7f00000001c0)=0x69, &(0x7f0000000200)="58834937bf1b96a78e12aa0ec06f469450f210965f90f4e98d5ff2e8b162272533baf0272628755089f2559786bd7f87478c4a2a2db734aa474d893eb9068c45c610b26bbfa96210a9aa8d708752a6d75143c184d2de6700d581082e10d1762bf190ae1b7f70d9", 0x67) 9.499885232s ago: executing program 5 (id=5578): mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6381) select(0x40, &(0x7f0000000180)={0xfffffffffffffffd, 0x44809e9d, 0xffffffffffffffff, 0x1, 0x2000000000000000, 0x181c, 0x8, 0x9}, 0x0, 0x0, 0x0) r0 = kqueue() kevent(r0, &(0x7f00000000c0), 0x8, &(0x7f0000000240)=[{{r0}, 0xffffffffffffffff, 0xb0, 0x4, 0x1, 0xe9}, {{}, 0xfffffffffffffff8, 0x8f, 0x20000000, 0x7, 0x5}, {{r0}, 0x1b57855bb07facd1, 0x8, 0x8, 0x4, 0xf0}, {{r0}, 0x3, 0x18, 0x2, 0x43, 0x100000001}, {{}, 0xffffffffffffffff, 0xc4, 0xf0000000, 0x81, 0x1}], 0x14, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) mknod(&(0x7f0000000000)='./file1\x00', 0x2000, 0x285b9a) mknod(&(0x7f0000000400)='./file0\x00', 0x2000, 0x5c4a) open(0x0, 0x0, 0x0) r2 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r3 = socket(0x11, 0x3, 0x0) sendto$unix(r3, &(0x7f0000000000)="b1000513000000000000000004000000000013fecea10500fef96ecf2ac72fd3357ae30200004e3039d2d236acf20b7804be38164991f7c8cf7f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f335c223e7d0c032bfa890300000018000000720fd38bfbb770c1f5a872c88106002ec5890400000000000000361b1257aea8c500002002fbfe0c2300008abfba0900000008e371a3f8343712051eeab7190000c011200000000000000000", 0xb1, 0x4, 0x0, 0x0) ioctl$VNDIOCSET(r2, 0xc0384600, &(0x7f0000000000)={&(0x7f00000000c0)='./file0\x00', 0xc9, 0x0}) select(0x0, 0x0, &(0x7f0000000140)={0x1000000000007f, 0x0, 0x80000000000, 0x0, 0xc28, 0x0, 0xffffffffffffffff}, 0x0, 0x0) r4 = open(&(0x7f0000000800)='./file1\x00', 0x800, 0x120) ioctl$FIONBIO(r4, 0x82907003, &(0x7f0000000140)=0x2) ioctl$FIONBIO(r1, 0x82907003, &(0x7f0000000140)=0x1) openat$pci(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) sysctl$net_inet_ip(&(0x7f0000000100)={0x4, 0x2, 0x0, 0x11}, 0x4, 0x0, 0x0, 0x0, 0x0) r5 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000140), 0x782, 0x0) r6 = dup(r5) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$SPKRTUNE(r6, 0x20005302, &(0x7f0000000100)={0x9}) open$dir(&(0x7f0000000040)='./file1\x00', 0x80, 0x0) mknod(0x0, 0x2000, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) r7 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r7, 0xc0106924, &(0x7f00000001c0)) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000200)={0x3, &(0x7f0000000140)=[{0x0, 0x5, 0x80, 0x6c2}, {0x9, 0x4, 0x20, 0x17}, {0xffff, 0xfe, 0x83, 0x7ffffffb}]}) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) socket(0x18, 0x2, 0x0) 9.49956021s ago: executing program 6 (id=5579): bind$inet6(0xffffffffffffff9c, &(0x7f0000000000)={0x18, 0x1, 0x4, 0x7ff}, 0xc) r0 = socket(0x2, 0x1, 0x0) setsockopt(r0, 0x6, 0x4, &(0x7f0000000000)="269c82f6", 0x4) r1 = socket(0x18, 0x2, 0x0) r2 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$WSMOUSEIO_SETPARAMS(r2, 0x80105728, &(0x7f0000002280)={&(0x7f0000000180)=[{0x101}, {0x22, 0x1001}], 0x2}) setsockopt(r1, 0x1000000000029, 0x9, &(0x7f0000000040)="03000000", 0x4) setsockopt(r1, 0x1000000000029, 0xb, &(0x7f0000000280), 0x0) r3 = getuid() mprotect(&(0x7f0000ff6000/0x4000)=nil, 0x4000, 0x0) r4 = open$dir(&(0x7f0000000000)='./file0\x00', 0xf02, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x10, r4, 0x0) mlock(&(0x7f0000ff6000/0xa000)=nil, 0xa000) chown(&(0x7f0000000180)='./file0\x00', r3, 0x0) setsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000000040)={0xffffffffffffffff, r3}, 0xc) 9.24203233s ago: executing program 2 (id=5580): r0 = socket(0x18, 0x3, 0x0) socket$inet(0x2, 0x3, 0x102) setsockopt(r0, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) mknod(&(0x7f0000000200)='./file0\x00', 0x2000, 0x287e) r1 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VNDIOCSET(r1, 0xc0384600, &(0x7f00000000c0)={&(0x7f0000000000)='./file0\x00', 0x4, 0x0}) ioctl$FIOASYNC(r0, 0x8004667d, &(0x7f0000000000)=0xaf8e) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$FIONREAD(r2, 0x80206979, &(0x7f0000000000)) sysctl$vm(&(0x7f0000000180)={0x2, 0xb}, 0x2, &(0x7f00000000c0)="8d960000c8091332f1ae61e05ad93989fbfb0588cf79bfa5abd521f9b0cc4d45673878f40b1b8a4717a3142518c0b1e816ba699cbdf6541a7f8aecc07211c693d7b73cc79449920000000000000000000000000000007bf1bef37697e507146f7374d9dd491f53ecc5ed752cf7dc96c0e6c89e6dcfa92b3b96ff3eadc7e3e5e0631d3b9109cce1ffc9ac68de7bda9872ca4338081307f02430457cb84ac4642486bbf735e2f631b28ca2d818c8dbb760", &(0x7f0000000040)=0xb0, &(0x7f0000000080)="f0f8a258", 0x4) sendmmsg(r2, &(0x7f00000005c0)={&(0x7f0000000580)={&(0x7f00000001c0)=@in6={0x18, 0x1, 0x8000, 0xdaac}, 0xc, &(0x7f0000000500)=[{&(0x7f0000000200)="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", 0xfb}, {&(0x7f0000000300)="a5c1113ff9af8e2831128d9a8314cb76344a7b348ae49f8990c6a72925d8cfe6e88d9d9e80deb341023c9cdccea0991bc33dc931dbd26380687372492ac0d2f1dfad61eb6ce89d7ac80a0035f37c5b86df7c8f9dbd14b956c3", 0x59}, {&(0x7f0000000380)="307d0ece33e5cda8fba4788d16ead8565a693b8c868a57625341ad69e8c65c62c75f3641446903a8a51e3e94fc452a5e89e80da96883ae841c40b29e410e0c5f8000b4445040bc5a94f0756bb9d085ee2527bbbd2b548b09fae28addff87de28c143fee76ea8b7b98b939c919581629ad6085a0662a8f8506d2c26ea8c6e3c47d31946b9cec05f40e35aa21aafd35cf71d6811e4122d704c7c3019c7c3850464f94003db82d1812685bb567512e9318fc2d08bda3a17d93847369db30a7729d13f3dc5e1f0546ca8563345c2bae5a414ef37e379be7641897c", 0xd9}, {&(0x7f0000000480)="00189216d0fb5e8b9e47882ba4d18bce2a67fd63e2101ef191447065f14a747c39670fe26d223a738152629603075c59a6702ef313ed0800619eba33855ee82856832fdc0e11050c8690d8d29a18d35e5e60c813e9ab", 0x56}], 0x4, &(0x7f0000000540)=[{0x30, 0xffff, 0x9, "abe88770491cb70b5d167714fe7ba2ebd5f1035abbc71fa020df90e23f"}, {0x10, 0xffff, 0x15f}], 0x40}, 0x200}, 0x10, 0x1) 9.241617198s ago: executing program 1 (id=5581): r0 = socket(0x2, 0x2, 0x0) r1 = socket(0x2, 0x400000000002, 0x0) r2 = dup2(r1, r0) setsockopt$sock_int(r2, 0xffff, 0x4, &(0x7f0000000040)=0x20, 0x4) select(0x40, &(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x0, 0x0) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r3 = socket(0x2, 0x2, 0x0) connect$unix(r3, &(0x7f0000000000), 0x10) bind(r0, &(0x7f0000000000), 0x10) write(r3, 0x0, 0x0) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f0000000340)={0x10, 0x0, [{&(0x7f00000a0000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0xffff}, {&(0x7f00000a7000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x7}, {&(0x7f000008e000/0x11000)=nil, &(0x7f0000090000/0x1000)=nil, 0x8000100000000}, {&(0x7f00000a7000/0x1000)=nil, &(0x7f000009a000/0x2000)=nil, 0x400000000000}, {&(0x7f00002c9000/0x3000)=nil, &(0x7f0000090000/0x9000)=nil}, {&(0x7f0000092000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil}, {&(0x7f0000091000/0x2000)=nil, &(0x7f00000a4000/0x3000)=nil}, {&(0x7f000009d000/0x4000)=nil, &(0x7f00000a6000/0x2000)=nil}, {&(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil}, {&(0x7f000009e000/0x1000)=nil, &(0x7f000009d000/0x2000)=nil}, {&(0x7f00000a6000/0x3000)=nil, &(0x7f00000a8000/0x4000)=nil}, {&(0x7f00000a1000/0x1000)=nil, &(0x7f00000a7000/0x2000)=nil}, {&(0x7f0000ff9000/0x1000)=nil, &(0x7f00000a4000/0x2000)=nil}, {&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000099000/0x1000)=nil, 0x1}, {&(0x7f0000ffe000/0x2000)=nil, &(0x7f00000a6000/0x2000)=nil}, {&(0x7f0000097000/0x1000)=nil, &(0x7f000009a000/0x2000)=nil}], './file0\x00'}) sysctl$ddb(&(0x7f0000000000)={0x9, 0x5}, 0x2, 0x0, 0x0, &(0x7f0000001080), 0x4) sysctl$kern(&(0x7f00000000c0)={0x1, 0x16}, 0x2, &(0x7f0000000140), 0x0, 0x0, 0x0) ioctl$FIOASYNC(r2, 0x8004667d, &(0x7f0000000100)=0x8) r4 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000380), 0x80, 0x0) r5 = openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x8, 0x0) writev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f00000000c0)="b886c5180d8c4818c94f34fd6617cb67d0788f4838e7268752a140797368474d4bb04ba60fb82615cacbc3795ab11c04d07c", 0x32}], 0x1) ioctl$TIOCSETA(r5, 0xc450443c, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, "97a2224ff1c14649ebb178926cc9795a6b47c1d1"}) ioctl$VMM_IOC_INTR(r4, 0xca605601, &(0x7f00000003c0)={0x3, 0x0, 0x6}) r6 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) ioctl$WSKBDIO_SETMAP(r6, 0x8010570e, &(0x7f0000000040)={0x19be, &(0x7f0000000080)=[{}, {}, {}]}) 9.239601103s ago: executing program 7 (id=5582): ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000240)={'tap', 0x0}) r0 = socket(0x18, 0x1, 0x0) sysctl$kern(&(0x7f0000000080)={0x1, 0x4f}, 0x2, &(0x7f00000000c0)="1f07ca7c82d80cc6cdd2d85889dc53f9aec2abc5bdaad49acba695ce51daad05996e02ea4b97e0d27293709923644c6ae476070304256a2622fdbddb135407f6c5142c5185706dbfcb770e5866e59381828441b677092e85e4a08d00d14cfe0fd0420dc2a096e601e107508fc4ccaa8fe30eed9d9d6e7f", &(0x7f0000000140)=0x77, &(0x7f0000000200)="1a378a8e6107a376979e55fb", 0xc) ioctl$FIONREAD(r0, 0x80206982, &(0x7f00000001c0)) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) unveil(&(0x7f0000000300)='./file0/file0/..\x00', &(0x7f0000000400)='r\x00') chdir(&(0x7f0000000040)='./file0/file0/../../file0\x00') 9.239249538s ago: executing program 4 (id=5583): openat(0xffffffffffffffff, &(0x7f0000000080)='.\x00', 0x20, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="89000000ffff000001"], 0x9}, 0x0) execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)=[&(0x7f00000000c0)='#)*\x00'], &(0x7f0000000300)=[&(0x7f00000001c0)='\x00', &(0x7f0000000200)='\x00', &(0x7f0000000240)='@\x00', &(0x7f0000000280)='-\x1f/#/}\'}\x00', &(0x7f00000002c0)='\x00']) sendmsg(r0, &(0x7f0000000380)={0x0, 0x32c, 0x0, 0x0, &(0x7f0000000000), 0x90}, 0x0) 6.726707058s ago: executing program 0 (id=5584): setrlimit(0x3, &(0x7f0000000000)={0x1791, 0x100000}) setrlimit(0x3, &(0x7f0000000040)={0x7fff, 0x100000}) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0xffffffff, 0x10000, {0x100000000000000, 0x10000000000001}}) r0 = open(&(0x7f0000000180)='./file0\x00', 0x80000000000206, 0x0) getpeername$inet(r0, &(0x7f0000000040), &(0x7f0000000080)=0xc) r1 = getpid() ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x40000530, r1) syz_emit_ethernet(0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="89ffa23f3c252adb0070162e86dd6009000000200600030000000000000037f87ccdc0c4a92cff0000000001"]) pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000001c0)="9e9d0d39fa8f8b7998e11e043dbc6dc73cbb6d6d262b08c3465f8aa8d8698cfae89995ebcb8720ed89299fcd0a1326520f46e1a118", 0x35}], 0x1, 0x6) r2 = socket(0x2, 0x2, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r3 = socket(0x2, 0x2, 0x0) ioctl$FIONREAD(r3, 0xc0206923, &(0x7f00000001c0)) ioctl$FIONREAD(r2, 0x8040691a, &(0x7f00000001c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="28000000ffff000001"], 0x28}, 0x0) recvmmsg(r4, &(0x7f0000000000)={0x0}, 0x10, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r6 = openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$WSMUXIO_ADD_DEVICE(r6, 0x80085761, &(0x7f0000000080)={0x2, 0x1}) r7 = socket(0x18, 0x1, 0x0) setsockopt(r7, 0x27, 0xc, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) setsockopt(r7, 0x1000000029, 0xc, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e699b467f12b", 0x14) 6.725991056s ago: executing program 3 (id=5585): setsockopt$sock_int(0xffffffffffffffff, 0xffff, 0x8, &(0x7f0000000100)=0x20000, 0x3) r0 = socket(0x18, 0x3, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) (async) setsockopt(r0, 0x1000000029, 0x39, &(0x7f0000000000)="5ab7776a", 0x4) (async) r1 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000080), 0x20121, 0x0) ioctl$VMM_IOC_CREATE(r1, 0x8020560a, &(0x7f00000002c0)={0x10, 0x0, [{&(0x7f0000ff3000/0x4000)=nil, &(0x7f0000fef000/0x4000)=nil}, {&(0x7f0000165000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0xfffffffffffffffe}, {&(0x7f000077d000/0x3000)=nil, &(0x7f000011c000/0x3000)=nil}, {&(0x7f00005bd000/0x4000)=nil, &(0x7f0000fee000/0x3000)=nil, 0x1000}, {&(0x7f00006eb000/0x1000)=nil, &(0x7f00001be000/0x3000)=nil}, {&(0x7f000039a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil}, {&(0x7f0000786000/0x4000)=nil, &(0x7f000075b000/0x3000)=nil}, {&(0x7f0000787000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil}, {&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x4}, {&(0x7f0000760000/0x3000)=nil, &(0x7f0000fea000/0x3000)=nil}, {&(0x7f00003b8000/0x2000)=nil, &(0x7f0000ff9000/0x1000)=nil}, {&(0x7f0000ff9000/0x2000)=nil, &(0x7f0000fef000/0x1000)=nil}, {&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000557000/0x3000)=nil}, {&(0x7f0000ff5000/0x4000)=nil, &(0x7f0000ff6000/0x1000)=nil, 0xe83}, {&(0x7f0000ff8000/0x2000)=nil, &(0x7f0000170000/0x1000)=nil}, {&(0x7f00003ba000/0x3000)=nil, &(0x7f00004d6000/0x1000)=nil, 0x2}], './file0\x00', 0x3}) (async) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) fcntl$lock(r2, 0x7, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x7fffffffffffffff, 0x10002f0000002, 0xffffffffffffffff}) (async) setsockopt$sock_timeval(0xffffffffffffffff, 0xffff, 0x0, &(0x7f0000000280)={0x9, 0x4}, 0x10) syz_emit_ethernet(0x66, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb865d605d34520030000000000000000000000000000000000000000000009f0500040000000000000001010090780008000060397772"]) (async) syz_emit_ethernet(0x10c, &(0x7f0000000140)={@empty, @local, [], {@generic={0x8049, "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"}}}) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r3, 0x0, 0x200000000000c, &(0x7f0000000080)="eaef125c00000000", 0x8) (async) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r4, 0x0, 0x200000000000c, &(0x7f0000000080)="eaef125c00000000", 0x8) (async) setsockopt$inet_opts(r3, 0x0, 0x200000000000c, &(0x7f0000000240)="ea00000100000000", 0xc) (async) close(r3) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) (async) unveil(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000300)='W\x00') 6.721099204s ago: executing program 4 (id=5586): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) getpeername$unix(r0, &(0x7f0000000080)=@abs, &(0x7f00000000c0)=0x8) sysctl$vfs_ffs(&(0x7f0000000000)={0xa, 0x1, 0x10}, 0x3, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file2\x00', 0x0) mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4) 6.717118797s ago: executing program 2 (id=5587): r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0xae828e137847f62, 0x0) setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) ftruncate(r0, 0x20008002) setgid(0xffffffffffffffff) syz_emit_ethernet(0x2a, &(0x7f0000000480)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008ea442a001c00670002082990787f000001ac1400bbead1a17400089078"]) setgroups(0x0, 0x0) setreuid(0x0, 0xee01) r1 = syz_open_pts() r2 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x40) r3 = open(&(0x7f0000000000)='./file0\x00', 0x2, 0x0) ioctl$VNDIOCSET(r3, 0xc0387200, &(0x7f00000001c0)={0x0, 0x8, 0x0}) kevent(r3, &(0x7f0000000080)=[{{r0}, 0xfffffffffffffffa, 0x39, 0x40000000, 0x0, 0x10001}], 0x0, &(0x7f0000000140)=[{{r2}, 0xfffffffffffffffa, 0x54, 0x1, 0xffffffffffffffff, 0x1}, {{r1}, 0xfffffffffffffffc, 0x0, 0xfff7f, 0x7}, {{r2}, 0xffffffffffffffff, 0x24, 0xf0000000, 0x2, 0xaf}, {{r2}, 0xfffffffffffffffe, 0x28, 0x20000000, 0x9, 0x5540}, {{r2}, 0xfffffffffffffffd, 0x10, 0xa0, 0x5e, 0x7fffffffffffffff}], 0xfffffff7, &(0x7f0000000200)={0xed0, 0x4770}) preadv(r2, &(0x7f00000004c0)=[{&(0x7f00000000c0)=""/99, 0xfffffd23}], 0x1, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) 6.000038596s ago: executing program 7 (id=5588): sysctl$net_inet_ip(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ioctl$FIONREAD(0xffffffffffffffff, 0xc0106924, 0x0) ioctl$WSDISPLAYIO_LSFONT(0xffffffffffffffff, 0xc0107002, 0x0) (async) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, 0x0) (async) socket(0x18, 0x3, 0x0) (async, rerun: 32) ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file1\x00', 0x200000, 0x80004, 0x5, 0x0, 0xa4, 0xf, 0x2, 0x0, 0x2, 0x5, 0xf16}) (async, rerun: 32) r0 = socket(0x18, 0x3, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) (async) r1 = socket(0x18, 0x3, 0x0) getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000), 0xc) r2 = socket(0x1, 0x2, 0x0) (async, rerun: 64) mknod(&(0x7f0000000240)='./file0\x00', 0x2000, 0x6) (async, rerun: 64) r3 = socket$unix(0x1, 0x5, 0x0) bind$unix(r3, &(0x7f0000000200)=@file={0xd570d0466b6018f, './file0\x00'}, 0xa) (async) ioctl$FIONREAD(r2, 0xc0106924, &(0x7f00000001c0)) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000200)={0x2237, &(0x7f0000000140)=[{0x3, 0x1, 0xb, 0xec0}, {0x9, 0x4, 0x20, 0x472cd796}, {0x80, 0xfc, 0x80, 0xfffffff6}]}) ioctl$FIONREAD(r1, 0x81206919, &(0x7f0000000100)) ioctl$FIONREAD(r0, 0x8080691a, &(0x7f0000000100)) 5.997399623s ago: executing program 6 (id=5589): ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000000)={'tap', 0x0}) r0 = socket$unix(0x1, 0x2, 0x0) r1 = openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) sysctl$net_inet_ah(&(0x7f0000000000)={0x4, 0x1e, 0x2}, 0x4, 0x0, 0x0, 0x0, 0x0) ioctl$BIOCPROMISC(r1, 0x20004269) sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xff0a, 0x0, 0x37) ioctl$FIONREAD(r0, 0x80206979, &(0x7f0000000000)) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x0, 0x0, 0x2}, {}, {0x1, 0x0, 0x0, 0xffffffff}]}) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x11}, 0x4000000000000007, 0x0, 0x0, 0x0, 0x3d) 5.996830983s ago: executing program 4 (id=5590): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) utimes(&(0x7f0000001240)='./file0\x00', &(0x7f0000001280)={{0x6, 0x6}, {0x7, 0x2}}) 5.996461512s ago: executing program 5 (id=5591): sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) setsockopt(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)="ebffff132f", 0x5) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$WSMUXIO_REMOVE_DEVICE(0xffffffffffffffff, 0x80085762, &(0x7f0000000040)={0x1}) r0 = socket(0x18, 0x3, 0x3a) setsockopt(r0, 0x29, 0x6c, &(0x7f0000000040), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0x66, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x3}, 0xc) r1 = socket(0x18, 0x2, 0x0) r2 = dup(r1) ioctl$VMM_IOC_READREGS(r2, 0xc028756b, &(0x7f00000003c0)) r3 = socket(0x2, 0x3, 0x0) connect$unix(r3, &(0x7f0000000000), 0x10) r4 = dup(r3) setsockopt$inet_opts(r4, 0x0, 0x15, &(0x7f0000000080)='\x00\x00\x00\x00', 0x4) write(r3, 0x0, 0x0) 5.946029857s ago: executing program 1 (id=5592): mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0x1769) r0 = open(&(0x7f0000000540)='./bus\x00', 0x0, 0x0) ioctl$BIOCVERSION(r0, 0x40044271, &(0x7f0000000000)) 5.9391378s ago: executing program 3 (id=5593): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000100)={0x8, &(0x7f0000000080)=[{0x1, 0x5, 0x9, 0x7fff}, {0xfec, 0x9, 0x6}, {0xb2e, 0xad, 0x5}, {0x10, 0x0, 0x5, 0x4a38}, {0x53, 0x25, 0x5, 0x6}, {0x8001, 0x80, 0xad, 0x4}, {0x3b8, 0x4, 0x7, 0x10000005}, {0xfc01, 0x7, 0x1, 0xe9bf}]}) (async) r1 = socket(0x2, 0x2, 0x0) (async, rerun: 32) r2 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000400), 0x401, 0x0) (rerun: 32) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) ioctl$WSMUXIO_ADD_DEVICE(r2, 0x80085761, &(0x7f0000000080)={0x3, 0x4}) (async, rerun: 64) setsockopt$sock_int(r1, 0xffff, 0x1023, &(0x7f0000000040), 0xe0) (rerun: 64) mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2) 5.917097838s ago: executing program 0 (id=5594): r0 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) setreuid(0x0, 0xee01) r1 = shmget$private(0x0, 0x3000, 0x384, &(0x7f0000ffa000/0x3000)=nil) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x0, 0x140}, 0x0, 0x0, 0x0, 0xffffffffffffffff}) shmctl$IPC_STAT(r1, 0x2, 0x0) writev(r0, &(0x7f0000001480)=[{&(0x7f0000000100)="cc60d3d79a1a7122a5fb9de9ea6ca0b30fb2942ef7652736f10f86d45ae419b2ecf7af93d33b3de1f2c56c0d93da7484095d0d543baf7f0161a025c9c02a561f9a76d06f1eaec7d8df99d6c28b10fa891e47d6c3bba690a611889032ac7b3581d7c92d1c546e59764f069048316871794f0615dd4d8bb1057a61fb177be649004fb56a7d46c856a20d73f050bf29d58b803a676cc3761e8a47857f51d90a4465f9c605ab2829d78ea2571900", 0xac}, {&(0x7f0000000080)="b389e5ae", 0x4}, {&(0x7f0000000200)="5f6a8de84b4c523a583f91557c748a02cda4cedf13579996073843ec5cbabaadcec85d62a8a897a78307f3d2c30eea6356105ec8aaba86930f1aed0b3d111d", 0x3f}, {&(0x7f0000000240)="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", 0xf12}], 0x4) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0) setrlimit(0x1, &(0x7f00000011c0)) munmap(&(0x7f0000000000/0xa000)=nil, 0xa000) 5.916718496s ago: executing program 4 (id=5595): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000000880)={&(0x7f0000000000)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000480)=""/253, 0xfd}], 0x1, 0x0}, 0x6}, 0x10, 0x40, 0x0) close(r1) r2 = socket$unix(0x1, 0x5, 0x0) bind$unix(r2, &(0x7f0000000040)=@file={0xd570d0466b6018f, './file0\x00'}, 0xa) listen(r2, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) connect$unix(r3, &(0x7f0000000000)=@file={0xd1653077bafa0114, './file0\x00'}, 0xa) mknod(&(0x7f0000000300)='./file0\x00', 0x1100, 0x0) r4 = getpid() ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x100, r4) fcntl$lock(r0, 0x7, &(0x7f0000000180)={0x2, 0x2, 0x3, 0x5, r4}) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x80000000000206, 0x17) r6 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup(r5) ioctl$VNDIOCSET(r6, 0xc0384600, &(0x7f0000000000)={&(0x7f00000000c0)='./file0\x00', 0x5, 0x0}) fchmod(r5, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r5, &(0x7f0000000280)=[{0x0}], 0x1) connect$unix(r7, &(0x7f0000000000)=@file={0xd1653077bafa0114, './file0\x00'}, 0xa) execve(0x0, 0x0, 0x0) execve(0x0, 0x0, 0x0) accept(r0, &(0x7f0000000100)=@un=@abs, &(0x7f0000000140)=0x8) accept(r2, 0x0, 0x0) syz_emit_ethernet(0x33, &(0x7f00000002c0)={@local, @random="1a0a9062cbe7", [], {@ipv4={0x800, {{0x8, 0x4, 0x3, 0x6, 0x25, 0x68, 0x9, 0x9, 0x62, 0x0, @multicast2, @rand_addr=0xfffffff7, {[@timestamp={0x44, 0xc, 0x8, 0x0, 0x4, [{[@empty], 0xa}]}]}}, @generic="17ee24f348"}}}}) 5.749627358s ago: executing program 6 (id=5596): semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200}}) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x18, 0x1, 0x0) close(r0) r1 = socket(0x18, 0x3, 0x3a) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) write(r1, &(0x7f00000003c0)="00203226a4a9000064e7c803d2a423735d33a4dd", 0x14) r2 = socket(0x2, 0x2, 0x0) r3 = socket(0x2, 0x400000000002, 0x0) setsockopt(r3, 0x0, 0x7, &(0x7f0000000180)="b1f5d915", 0x4) r4 = dup2(r3, r2) setsockopt$sock_int(r4, 0xffff, 0x800, &(0x7f0000000040)=0x20, 0x4) select(0x40, &(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x0, 0x0) getrusage(0x1, 0x0) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x3, {0x0, 0x10000000000001}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r5 = socket(0x18, 0x1, 0x0) setsockopt(r5, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbdf13b9fd812eaa4e713048e69931929648", 0x14) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) bind(r2, &(0x7f0000000000), 0x10) r6 = socket(0x2, 0x2, 0x0) connect$unix(r6, &(0x7f0000000000), 0x10) sendmsg$unix(r6, &(0x7f0000002a40)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r3, &(0x7f00000003c0)={0x0}, 0x10, 0x2, 0x0) 4.47950408s ago: executing program 2 (id=5597): mknod(&(0x7f0000000040)='./file0\x00', 0x6000, 0xe02) (async) mknod(&(0x7f0000000040)='./file0\x00', 0x6000, 0xe02) r0 = socket(0x18, 0x3, 0x0) setsockopt(r0, 0x1000000029, 0x2001b, &(0x7f0000000100)="5ab7776afee840dc4feac974cf6d85b6b9f13e92ab3d6810131f1209070729fd74615c74e5b4efc0f87749093bdff5ad92d880b49af8468be6", 0x39) mknod(&(0x7f0000000040)='./bus\x00', 0x6000, 0xe02) r1 = kqueue() r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000380)={'tap', 0x0}) ioctl$BIOCSETWF(r2, 0x80104277, &(0x7f0000000000)={0x6, &(0x7f00000003c0)=[{0x4, 0x5, 0x7, 0x9}, {0x35, 0x1, 0x2, 0xd}, {0x7, 0x5, 0x0, 0xaa6}, {0x21, 0x0, 0x5, 0x2}, {0x2, 0xfc, 0x7, 0x1000000d}, {0x3, 0x42, 0x4, 0xd9}]}) write(r2, &(0x7f0000000200)="d81ad3d20cf7eb4e9be33bbd1a30", 0xe) (async) write(r2, &(0x7f0000000200)="d81ad3d20cf7eb4e9be33bbd1a30", 0xe) kevent(r1, &(0x7f0000000080)=[{{}, 0xfffffffffffffff9, 0xc7, 0x10, 0x200000000000000, 0x7ff}], 0x200020, 0x0, 0x0, 0x0) (async) kevent(r1, &(0x7f0000000080)=[{{}, 0xfffffffffffffff9, 0xc7, 0x10, 0x200000000000000, 0x7ff}], 0x200020, 0x0, 0x0, 0x0) rename(&(0x7f0000000140)='./bus\x00', &(0x7f0000000400)='./bus\x00') (async) rename(&(0x7f0000000140)='./bus\x00', &(0x7f0000000400)='./bus\x00') mknod(&(0x7f00000000c0)='./file0\x00', 0x1, 0x881) (async) mknod(&(0x7f00000000c0)='./file0\x00', 0x1, 0x881) r3 = open$dir(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2000, 0x801) (async) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2000, 0x801) open(&(0x7f0000000040)='./file0\x00', 0x20, 0x160) r4 = syz_open_pts() dup2(r4, r3) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x1) r6 = socket$unix(0x1, 0x5, 0x0) bind$unix(r6, &(0x7f0000000200)=@file={0xd570d0466b6018f, './file0\x00'}, 0xa) listen(r6, 0x0) socket$unix(0x1, 0x5, 0x0) (async) r7 = socket$unix(0x1, 0x5, 0x0) connect$unix(r7, &(0x7f0000000000)=@file={0xd1653077bafa0114, './file0\x00'}, 0xa) r8 = accept(r6, &(0x7f0000000040)=@in, &(0x7f0000000080)=0xc) ioctl$TIOCSETAF(r5, 0x802c7416, &(0x7f0000000340)={0x5, 0x0, 0xfffffffc, 0x4, "86d3724bbca73c000000014000"}) (async) ioctl$TIOCSETAF(r5, 0x802c7416, &(0x7f0000000340)={0x5, 0x0, 0xfffffffc, 0x4, "86d3724bbca73c000000014000"}) sendto$inet(r8, &(0x7f0000000240)="16f0c3403817873171c769eee136b8b10868c3227aa53ffb0a0537ae03b4ccdeabbd6e22b79812535b656b518afd1ff383005fc20a84ba55", 0x38, 0x4, &(0x7f0000000280)={0x2, 0x1}, 0xc) (async) sendto$inet(r8, &(0x7f0000000240)="16f0c3403817873171c769eee136b8b10868c3227aa53ffb0a0537ae03b4ccdeabbd6e22b79812535b656b518afd1ff383005fc20a84ba55", 0x38, 0x4, &(0x7f0000000280)={0x2, 0x1}, 0xc) openat$vnd(0xffffffffffffff9c, &(0x7f00000002c0), 0x8000, 0x0) socket(0x18, 0x3, 0x6) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) (async) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ktrace(&(0x7f0000000300)='./bus\x00', 0x0, 0x100, 0x0) 4.476022837s ago: executing program 7 (id=5598): openat$wskbd(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000080)="76e5eac907f9ccf7a251ceddcec7d6aa45cffe2c63a56077123a276d3ba4e9d17eb3eb5db12a3783a8e0620d357de1fe04fa9465b5bd1286e9624dec06a00c222f", 0x41}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x60}) r0 = syz_open_pts() ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x81, 0x0, 0x4, 0x4}, {0x4, 0x0, 0x1, 0x444}, {0x6, 0x0, 0x0, 0x401}]}) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) pwritev(r1, &(0x7f0000000080)=[{0x0}], 0x1, 0x6) sysctl$net_inet6_ip6(0x0, 0x0, &(0x7f00000000c0)="fb", &(0x7f0000000080)=0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETWF(r1, 0x80104277, &(0x7f0000000040)={0x0, 0x0}) write(r1, &(0x7f0000000700)="d80b00"/14, 0xe) close(r0) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000300)={'tap', 0x0}) ioctl$BIOCSETF(r2, 0x80104267, &(0x7f0000000200)={0x3, &(0x7f0000000140)=[{}, {0x45}, {0x802e, 0x0, 0xd}]}) mknod(&(0x7f0000000400)='./file0\x00', 0x2000, 0x5c4a) r3 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) poll(&(0x7f0000000000)=[{r3, 0x6e}], 0x1, 0x0) close(r3) syz_emit_ethernet(0x3e, &(0x7f0000000080)=ANY=[]) syz_open_pts() ioctl$FIOASYNC(r0, 0x80047460, &(0x7f00000000c0)=0x4) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000340)="20c92c", 0xfd39}], 0x1) unveil(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000300)='W\x00') mknodat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1, 0x8001) 4.475464575s ago: executing program 5 (id=5599): r0 = socket(0x2, 0x2, 0x0) r1 = dup(r0) setsockopt$inet_opts(r1, 0x0, 0x24, &(0x7f0000000040)="fd0cc085", 0x4) sendmsg$unix(r0, &(0x7f0000000440)={&(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0xa, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="140000000000000024"], 0x2e}, 0x0) ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, "28b77c09b87aa57800080017d0d2000010001c00"}) r2 = socket(0x800000018, 0x3, 0x0) setsockopt$sock_int(r2, 0xffff, 0x1000, &(0x7f0000000000)=0x7, 0x4) bind$unix(r2, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) syz_emit_ethernet(0x72, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaabbe04b1c561ac486dd6036e282003c3b00fe8000000000000000000000000000aaff0200000000000000000000000000018900907800000000fe8000000000000000000000000000aa000000000000000000000000000000010202578753e689935e68d0fbbca91cdcaffea334"]) ioctl$BIOCSHDRCMPLT(r1, 0x80044275, &(0x7f0000000100)=0x1) 4.000063508s ago: executing program 3 (id=5600): mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x412dff) recvmsg(0xffffffffffffffff, &(0x7f00000025c0)={0x0, 0x0, &(0x7f0000002540)=[{&(0x7f0000001480)=""/4090, 0xffa}], 0x1, 0x0}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2000, 0x200) open(&(0x7f00000000c0)='./file0\x00', 0x205, 0x0) kevent(0xffffffffffffffff, 0x0, 0x80, 0x0, 0xacf, &(0x7f0000000400)={0x8, 0x8}) preadv(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/104}, {&(0x7f0000000140)=""/192}, {&(0x7f0000000340)=""/175}, {&(0x7f0000000000)=""/18}], 0x10000000000002b8, 0x0) r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) recvmsg(r0, &(0x7f00000002c0)={&(0x7f0000000200)=@in, 0xc, &(0x7f0000000280)=[{&(0x7f0000000240)}, {&(0x7f0000000440)=""/204, 0xcc}], 0x2, &(0x7f0000000540)=""/242, 0xf2}, 0x2) 3.000027023s ago: executing program 1 (id=5601): setitimer(0x1, &(0x7f0000000140)={{0x10, 0x7fff}, {0x9, 0x8}}, &(0x7f0000000000)) mkdir(0x0, 0xca) (async) mkdir(0x0, 0xca) syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1) (async) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket(0x2, 0x1, 0x0) connect$unix(r0, &(0x7f0000000000), 0x10) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1, &(0x7f00000000c0)=0xd2, 0x4) r1 = getpid() wait4(r1, 0x0, 0x0, 0x0) fcntl$setown(r0, 0x6, r1) getpeername$inet6(r0, 0x0, 0x0) link(0x0, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x0) (async) mkdirat(0xffffffffffffffff, 0x0, 0x0) r2 = open$dir(&(0x7f00000001c0)='./file0/file0\x00', 0x8000, 0x4) linkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', r2, &(0x7f0000000200)='./file0/file0/file0\x00', 0x4) sendto$unix(r0, &(0x7f0000000400)="3c725e32487e349f2e0ef55a89ea5f9ad95eba3d347cefe3a13edb", 0x1b, 0x400, &(0x7f0000000500)=@abs={0x1, 0x0, 0x3}, 0x8) (async) sendto$unix(r0, &(0x7f0000000400)="3c725e32487e349f2e0ef55a89ea5f9ad95eba3d347cefe3a13edb", 0x1b, 0x400, &(0x7f0000000500)=@abs={0x1, 0x0, 0x3}, 0x8) r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r3, &(0x7f0000000100)='./file0/file0\x00', 0x120) (async) mkdirat(r3, &(0x7f0000000100)='./file0/file0\x00', 0x120) unveil(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='c\x00') (async) unveil(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='c\x00') 2.999633192s ago: executing program 5 (id=5602): sendmsg$unix(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002c40)=ANY=[], 0x10}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg(r0, &(0x7f0000001440)={0x0}, 0x10, 0x0) ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x0, [{0x0, 0x100}, {}, {}, {0x1, 0x200}, {}, {}, {}, {0x0, 0xc8}, {0x3}, {}, {0x0, 0x3}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {0x1}, {}, {0x0, 0x8}]}) sysctl$hw(&(0x7f0000000000)={0x6, 0xf}, 0x2, 0x0, 0x0, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0e99db6de761f86, 0x0) r1 = open$dir(&(0x7f00000001c0)='./file0\x00', 0x1, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x10, 0xe) ioctl$FIONREAD(r1, 0xc0286988, &(0x7f00000003c0)) mprotect(&(0x7f0000189000/0x3000)=nil, 0x3000, 0x2) sysctl$hw(&(0x7f0000000000)={0x7, 0x5}, 0x2, &(0x7f0000000040), &(0x7f0000000080), 0x0, 0x0) sysctl$net_inet6_ip6(&(0x7f0000000040)={0x4, 0x18, 0x29, 0x33}, 0x4, 0x0, 0x0, 0x0, 0x0) 2.000016081s ago: executing program 7 (id=5603): r0 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0) sysctl$net_inet6_icmp6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FIONREAD(0xffffffffffffffff, 0xc0106924, 0x0) ioctl$FIONREAD(0xffffffffffffffff, 0x802069dc, 0x0) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000000)="45ca80ec96ad98f1f3c0ad184219821d516ea344bd34041b695ea9ebcd9d4923013bdb27ee8734ab40e77fdb20978efda74a1ba1d9359b88a3e530bb9e7978b89e3f6ebd98293a586b7dea8b51dea90c27e81557fc68f7a278673b8d72a72f9806bb12720012", 0x66}], 0x1) (async) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000000)="45ca80ec96ad98f1f3c0ad184219821d516ea344bd34041b695ea9ebcd9d4923013bdb27ee8734ab40e77fdb20978efda74a1ba1d9359b88a3e530bb9e7978b89e3f6ebd98293a586b7dea8b51dea90c27e81557fc68f7a278673b8d72a72f9806bb12720012", 0x66}], 0x1) pwrite(r0, &(0x7f00000000c0)="11199fc93e9f4cf62a4a4f9807830b4e6eb9b97597709142387c92da4a832321d547a41394e842bdcde7daf859561d467b93ab18abcb2a1abb5f99703ca54d327db636d52c41bd7b66f61f09fd229938a8595ad451bcf9dcc5f2cc2ca44cdff14b9bfffb2e", 0x65, 0x400000007f) (async) pwrite(r0, &(0x7f00000000c0)="11199fc93e9f4cf62a4a4f9807830b4e6eb9b97597709142387c92da4a832321d547a41394e842bdcde7daf859561d467b93ab18abcb2a1abb5f99703ca54d327db636d52c41bd7b66f61f09fd229938a8595ad451bcf9dcc5f2cc2ca44cdff14b9bfffb2e", 0x65, 0x400000007f) semctl$IPC_SET(0xffffffffffffffff, 0x0, 0x1, &(0x7f00000001c0)={{0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xd6}, 0x5}) (async) semctl$IPC_SET(0xffffffffffffffff, 0x0, 0x1, &(0x7f00000001c0)={{0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xd6}, 0x5}) r1 = socket(0x2, 0x2, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r2 = socket(0x2, 0x1, 0x0) syz_open_pts() (async) r3 = syz_open_pts() ioctl$TIOCCONS(r3, 0x80047462, &(0x7f0000002bc0)) ioctl$FIONREAD(r2, 0xc0206921, &(0x7f00000001c0)) ioctl$FIONREAD(r1, 0x8040691a, &(0x7f00000001c0)) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000140)="3b000000008f75668083ac42c2f49d3a93e028854d51ecbac8f79f75809a48924399755a1af9770da1f54815ce15fbf6fc38ac37ab660773da7f92040000c689fcb926fe368cf1d9e48aabcb770c10f278a0d9386495590af3b1c224fb050bbd855b4e2e", 0x64}], 0x1) (async) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000140)="3b000000008f75668083ac42c2f49d3a93e028854d51ecbac8f79f75809a48924399755a1af9770da1f54815ce15fbf6fc38ac37ab660773da7f92040000c689fcb926fe368cf1d9e48aabcb770c10f278a0d9386495590af3b1c224fb050bbd855b4e2e", 0x64}], 0x1) execve(0x0, 0x0, 0x0) 1.750157136s ago: executing program 0 (id=5604): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, &(0x7f0000000740)=[{0x0}], 0x1) (async) mlock(&(0x7f0000120000/0x4000)=nil, 0x4000) r0 = kqueue() (async) getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000040)={0x0}, 0xc) ktrace(&(0x7f0000000000)='./file0\x00', 0x1, 0xa10, r1) (async) kevent(r0, &(0x7f0000000000), 0x10001, 0x0, 0x4000a9fa, 0x0) (async, rerun: 32) mmap(&(0x7f00000cc000/0x1000)=nil, 0x1000, 0x3, 0x2812, r0, 0x1000000000000000) (async, rerun: 32) shmget$private(0x0, 0x2000, 0x19c, &(0x7f0000069000/0x2000)=nil) 999.981771ms ago: executing program 3 (id=5605): munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000) mknod(&(0x7f0000000000)='./file0\x00', 0x2100, 0x5f00) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)) utimensat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={{0x4, 0x6b}, {0x8, 0x6}}, 0x2) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x100, 0x18c) r1 = shmget$private(0x0, 0x3000, 0x583, &(0x7f0000ffd000/0x3000)=nil) shmat(r1, &(0x7f0000ffe000/0x2000)=nil, 0x2800) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x8) 999.600766ms ago: executing program 2 (id=5606): r0 = open(&(0x7f0000000040)='./file0\x00', 0x200, 0x0) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x2, 0x0) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000000), 0x2cfea}], 0x1000000000000013) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x10, r0, 0x0) open(&(0x7f0000001700)='./file0\x00', 0x70e, 0x0) 249.53999ms ago: executing program 6 (id=5607): open(&(0x7f0000002600)='./file0\x00', 0x78e, 0x0) r0 = getpid() setgroups(0x0, 0x0) ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x510, r0) setuid(0xffffffffffffffff) setrlimit(0x1, &(0x7f0000000080)={0xff, 0xd21}) getrlimit(0x2, &(0x7f0000000040)) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000580), 0x40, 0x0) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x25, 0x0, 0x0, 0x10}, {0x16, 0x5, 0x7f, 0x7}]}) pipe(&(0x7f00000000c0)) setitimer(0x2, &(0x7f0000000140)={{0x4000000000000000, 0x1}, {0xffffffff}}, 0x0) 247.913378ms ago: executing program 7 (id=5608): sysctl$hw(&(0x7f00000000c0)={0x6, 0x2}, 0x2, 0x0, &(0x7f0000000080), 0x0, 0x0) r0 = socket(0x18, 0x2, 0x0) setitimer(0x1, &(0x7f0000000080)={{0x9, 0x4}, {0x0, 0x6}}, 0x0) r1 = socket(0x11, 0x3, 0x0) setsockopt(r1, 0x11, 0x2, 0x0, 0x0) setsockopt(r0, 0x1000000000029, 0xa, &(0x7f0000000040)='\x00\x00\x00\x00', 0x4) setsockopt(r0, 0x1000000000029, 0x9, 0x0, 0x0) r2 = syz_open_pts() ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f0000000340)={0x0, 0x5, 0xfffffffe, 0xfffffffc, "ff0107002015c8a32d00000065c0bdf9c6f04aaf", 0x4}) syz_open_pts() writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000100)="76e5eac907f9ccf7a251ceddcec7d6aa45cffe2c63a56077123a276d3ba4e9d17eb3eb5db12a3783a8e0620d357de1fe04fa9465b5bd1286e9624dec06a00c222f36166f1b923a0fad8cdb2db68b0a1fee4759f37cb64b89f9ad0d8dbaacc90ecb64baed86352cdb9d3395574e5dd86fc4c01588ace39bd5fbb79a4c81d9602c0a5a8ad1a62181f65bd7b61ed3686421692d01cc46d90e9c4c52d156cc4883ba9ad63676db20ea2b708dc0f5", 0xac}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) unveil(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000300)='W\x00') syz_open_pts() ioctl$TIOCSTAT(r2, 0x20007465, 0x0) 0s ago: executing program 0 (id=5609): r0 = socket(0x18, 0x3, 0x6) connect$unix(r0, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) (async) connect$unix(r0, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) ioctl$FIONREAD(0xffffffffffffffff, 0x4004667f, 0x0) (async) ioctl$FIONREAD(0xffffffffffffffff, 0x4004667f, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000040)={0x5, &(0x7f0000000140)=[{0x4, 0xd7, 0xff, 0x9}, {0x9, 0xf, 0x9, 0xc000000}, {0xfffc, 0x9, 0x40, 0x8}, {0x200, 0x5, 0x5, 0x6}, {0x0, 0x9, 0xe, 0x3}]}) write(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) setsockopt$sock_int(0xffffffffffffffff, 0xffff, 0x1007, 0x0, 0x0) socket$inet(0x2, 0x8000, 0x5) (async) r1 = socket$inet(0x2, 0x8000, 0x5) r2 = msgget$private(0x0, 0x144) msgrcv(r2, 0x0, 0x0, 0x0, 0x1000) sysctl$net_inet_icmp(&(0x7f0000000000)={0x4, 0x2, 0x1, 0x7}, 0x4, 0x0, 0x0, 0x0, 0x0) sysctl$kern(&(0x7f0000000000)={0xa}, 0x7, &(0x7f0000000080), 0x0, 0x0, 0x24) r3 = msgget$private(0x0, 0x8) msgsnd(r3, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRESOCT, @ANYRESHEX=r3, @ANYRESHEX=r1, @ANYRES8=0x0], 0x401, 0x800) (async) msgsnd(r3, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRESOCT, @ANYRESHEX=r3, @ANYRESHEX=r1, @ANYRES8=0x0], 0x401, 0x800) msgsnd(r3, 0x0, 0x401, 0x0) (async) msgsnd(r3, 0x0, 0x401, 0x0) msgrcv(r3, &(0x7f0000000400)={0x0, ""/137}, 0xaf, 0x0, 0x0) openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) (async) r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCSETIF(r4, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x25, 0x0, 0x0, 0xfffffffc}, {0x1, 0x10, 0x2}, {0x16, 0x7, 0x7f, 0x400f}]}) (async) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x25, 0x0, 0x0, 0xfffffffc}, {0x1, 0x10, 0x2}, {0x16, 0x7, 0x7f, 0x400f}]}) pwritev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f00000002c0)="afa8d7d140bcfcdb1a7f948989", 0xd}], 0x1, 0x85) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETWF(r4, 0x80104277, &(0x7f0000000040)={0x0, 0x0}) write(r4, &(0x7f0000000700)="d80b00"/14, 0xe) msgsnd(r3, 0x0, 0x14, 0x0) (async) msgsnd(r3, 0x0, 0x14, 0x0) setreuid(0xee00, 0x0) (async) setreuid(0xee00, 0x0) r5 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r5, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) msgctl$IPC_SET(r3, 0x1, &(0x7f00000004c0)={{0xda7}, 0x7ff, 0x7, 0x0, 0x0, 0xfffffffffffffc01, 0x9, 0x3, 0x200}) mkdirat(r5, &(0x7f0000000000)='./file0\x00', 0x4) (async) mkdirat(r5, &(0x7f0000000000)='./file0\x00', 0x4) rename(&(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00') kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.207' (ED25519) to the list of known hosts. pckbd_enable: command error       OpenBSD/amd64 (ci-openbsd-main-2.us-central1-b.c.syzkaller.internal) (tty00) login: pckbd_enable: command error lpckbd_enable: command error pckbd_enable: command error OpenBSD/amd64 (ci-openbsd-main-2.us-central1-b.c.syzkaller.internal) (tty00) login: pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pmap_unwire: wiring for pmap 0xfffffd806ade7370 va 0x400000001000 didn't change! pmap_unwire: wiring for pmap 0xfffffd806ade7370 va 0x400000001000 didn't change! pckbd_enable: command error pckbd_enable: command error pmap_unwire: wiring for pmap 0xfffffd806ade7298 va 0x400000001000 didn't change! pckbd_enable: command error WARNING: thread `nfsio' (454604) exits with status -1 WARNING: thread `nfsio' (487281) exits with status -1 WARNING: thread `nfsio' (128903) exits with status -1 WARNING: thread `nfsio' (284010) exits with status -1 WARNING: thread `nfsio' (124015) exits with status -1 WARNING: thread `nfsio' (140849) exits with status -1 WARNING: thread `nfsio' (200175) exits with status -1 WARNING: thread `nfsio' (125209) exits with status -1 WARNING: thread `nfsio' (293913) exits with status -1 WARNING: thread `nfsio' (357081) exits with status -1 WARNING: thread `nfsio' (396210) exits with status -1 WARNING: thread `nfsio' (484976) exits with status -1 WARNING: thread `nfsio' (154421) exits with status -1 WARNING: thread `nfsio' (81588) exits with status -1 WARNING: thread `nfsio' (348860) exits with status -1 WARNING: thread `nfsio' (266632) exits with status -1 WARNING: thread `nfsio' (262346) exits with status -1 WARNING: thread `nfsio' (463559) exits with status -1 WARNING: thread `nfsio' (420969) exits with status -1 WARNING: thread `nfsio' (119508) exits with status -1 pckbd_enable: command error pckbd_enable: command error fuse: Cannot find fusebuf pckbd_enable: command error denied attempt to set clock back 536870974 seconds pckbd_enable: command error denied attempt to set clock forward to 4294967295 denied attempt to set clock forward to 4294967295 denied attempt to set clock forward to 4294967295 denied attempt to set clock forward to 4294967295 denied attempt to set clock forward to 4294967295 denied attempt to set clock forward to 4294967295 denied attempt to set clock forward to 4294967295 denied attempt to set clock forward to 4294967295 denied attempt to set clock forward to 4294967295 denied attempt to set clock forward to 4294967295 denied attempt to set clock forward to 4294967295 denied attempt to set clock forward to 4294967295 denied attempt to set clock forward to 4294967295 denied attempt to set clock forward to 4294967295 denied attempt to set clock forward to 4294967295 denied attempt to set clock forward to 4294967295 denied attempt to set clock forward to 4294967295 denied attempt to set clock forward to 4294967295 denied attempt to set clock forward to 4294967295 denied attempt to set clock forward to 4294967295 denied attempt to set clock forward to 4294967295 denied attempt to set clock forward to 4294967295 denied attempt to set clock forward to 4294967295 denied attempt to set clock forward to 4294967295 denied attempt to set clock forward to 4294967295 pckbd_enable: command error WARNING: thread `nfsio' (182924) exits with status -1 WARNING: thread `nfsio' (429266) exits with status -1 WARNING: thread `nfsio' (128351) exits with status -1 WARNING: thread `nfsio' (196713) exits with status -1 WARNING: thread `nfsio' (244736) exits with status -1 WARNING: thread `nfsio' (239835) exits with status -1 WARNING: thread `nfsio' (31185) exits with status -1 WARNING: thread `nfsio' (165726) exits with status -1 WARNING: thread `nfsio' (40320) exits with status -1 WARNING: thread `nfsio' (91239) exits with status -1 WARNING: thread `nfsio' (413694) exits with status -1 WARNING: thread `nfsio' (385305) exits with status -1 WARNING: thread `nfsio' (52184) exits with status -1 WARNING: thread `nfsio' (116506) exits with status -1 WARNING: thread `nfsio' (413394) exits with status -1 WARNING: thread `nfsio' (518599) exits with status -1 WARNING: thread `nfsio' (34409) exits with status -1 WARNING: thread `nfsio' (192930) exits with status -1 WARNING: thread `nfsio' (40150) exits with status -1 WARNING: thread `nfsio' (335937) exits with status -1 pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error denied attempt to set clock back 119459162 seconds pppx: unable to set addresses for pppx1, error=17 uvn_flush: obj=0xfffffd8065052268, offset=0x0. error during pageout. uvn_flush: WARNING: changes to page may be lost! pckbd_enable: command error pckbd_enable: command error denied attempt to set clock back -9223372032591344271 seconds uvn_flush: obj=0xfffffd806676b7d0, offset=0x0. error during pageout. uvn_flush: WARNING: changes to page may be lost! pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error uvn_flush: obj=0xfffffd806883a640, offset=0x0. error during pageout. uvn_flush: WARNING: changes to page may be lost! pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error denied attempt to set clock back 3417205843 seconds pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error denied attempt to set clock forward to 7885088468817503279 pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error malloc(): allocation too large, type = 6, size = 3657441280 pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pppx: unable to set addresses for pppx1, error=17 pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pmap_unwire: wiring for pmap 0xfffffd806ade7be0 va 0x400000001000 didn't change! pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error fuse: Cannot find fusebuf fuse: Cannot find fusebuf pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error denied attempt to set clock back 639 seconds pckbd_enable: command error uvn_flush: obj=0xfffffd806c384c60, offset=0x1000. error during pageout. uvn_flush: WARNING: changes to page may be lost! panic: kernel diagnostic assertion "ps->ps_uvncount == 0" failed: file "/syzkaller/managers/main/kernel/sys/kern/kern_unveil.c", line 188 Starting stack trace... panic(ffffffff83400125) at panic+0x1ba __assert(ffffffff833b0ea0,ffffffff8337e90a,bc,ffffffff83327b11) at __assert+0x29 unveil_destroy(ffff800038124468) at unveil_destroy+0x1dd exit1(ffff80003a947220,0,0,1) at exit1+0x60f sys_exit(ffff80003a947220,ffff80003ca479f0,ffff80003ca47940) at sys_exit+0x1a syscall(ffff80003ca479f0) at syscall+0x97e Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x703cfa7b0d10, count: 250 End of stack trace.