last executing test programs: 11.038236336s ago: executing program 1 (id=906): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x20, 0x0) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x4, 0xba, 0x0, 0xfff}, {0x3, 0xf, 0xfe, 0x7}, {0x406, 0x1, 0x8b, 0x4000}]}) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f0000000080), 0x1c, 0x0}, 0x0) r1 = syz_open_pts() ioctl$TIOCSTAT(r1, 0x20007465, 0x0) ioctl$TIOCSETD(r1, 0x8004741b, &(0x7f00000000c0)=0x8000006) ioctl$TIOCSETD(r1, 0x8004741b, 0x0) unveil(0x0, &(0x7f0000000140)='W\x00') socket(0x2, 0x1, 0x0) syz_open_pts() ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f00000002c0)={'./file0\x00', 0x4, 0x80000c0, 0x4, 0x0, 0x7ff, 0xffff0001, 0x2, 0x1, 0x0, 0x2004007, 0xff}) sysctl$vfs_ffs(0x0, 0x0, &(0x7f0000000080)="06e6a186cf8257197b8d91e7c56e0abd770a63cab73518977eb4e7f3cf84aa05aa7689c8dbe18896a2e8229d32f6e84c8033909c4b569ec9cc4cf6a445c82559ea205149a66ab99c89e4c319f5ced9ad4f702334eeb646b39b919a8d4fde562ba7135f28c86c751ee09b3028f555ae44a521f306ab76d3ef708e7f40d6e5c7cae35bb7622d953d709d8f83a05b80ff08aeb6f1a2537d113aedf5291a08932a64899b6d9e9be1f561e9fbc452ea18", 0x0, 0x0, 0x0) r2 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r2, 0xc0106924, &(0x7f00000001c0)) r3 = socket(0x18, 0x3, 0x0) ioctl$FIONREAD(r3, 0x8080691a, &(0x7f0000000100)) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) r4 = socket(0x24, 0x2, 0x0) bind$unix(r4, 0x0, 0x0) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000000)={0x0, &(0x7f00000002c0)}) sysctl$hw(0x0, 0x0, &(0x7f0000000200)="b2352f2bbbc6ec4ba3fc21d5a25ce00f7d38664fd72c1019f09b3566126bcecf21474265fa4490581eac3eee02000000000096081a6aed690f393bb066240f367fb1ea5ad5e701e4faba409d8add6ac3e5160daa03394020af1cd4c1be138c1308cad7ce7ea00468ebbd6486f20db2b36701b0bd39c0d0f1d485ab6174f5589a5c3b890e1f0873dde71f0d20b41ba0f3e7ddfa", &(0x7f0000000000)=0x93, 0x0, 0x0) r5 = syz_open_pts() fcntl$lock(r5, 0x7, &(0x7f0000000080)={0x1, 0x0, 0x6, 0x4000000000000000}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) unveil(&(0x7f0000000040)='./file1\x00', &(0x7f0000000180)='r\x00') openat$vmm(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x1000e, &(0x7f00000000c0)=ANY=[]) 10.0851688s ago: executing program 6 (id=918): socket(0x2, 0x3, 0x1) bind$unix(0xffffffffffffffff, &(0x7f0000000040)=@file={0xd19450564dee018c, './file0\x00'}, 0xa) mknod(&(0x7f0000000340)='./file0\x00', 0x2000, 0x1e5f) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x802, 0x16, 0x3, 0x5fe, 0x80000004, 0x80000003, 0x10001, 0x10, [{0x6, 0x7, 0x4, 0x70fff}, {0x7, 0x8, 0x8, 0x8001}, {0x8, 0xf86, 0x3, 0x9}, {0x8000001, 0x804, 0x8007}, {0x401, 0x200726, 0x2800, 0x3}, {0x2, 0x6, 0xffffffff, 0x99}, {0xce1, 0xffffffff, 0x4, 0x2000006d}, {0x6, 0x803, 0x14, 0x8}, {0x2, 0x82, 0x5, 0x9}, {0x4, 0x7fff, 0xd1b, 0x88}, {0x1ce, 0x4, 0x406, 0x3}, {0x7ff, 0xb, 0x8, 0x9}, {0x400, 0x4, 0x40000008, 0x4}, {0x29a71717, 0xfffefffa, 0x1, 0x6}, {0xc, 0x7, 0x5, 0x1}, {0x0, 0x1, 0x1002, 0x3}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(0xffffffffffffffff, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(0xffffffffffffffff, 0x80044403, 0x0) r0 = socket(0x18, 0x2, 0x0) close(r0) r1 = socket(0x800000018, 0x2, 0x0) setsockopt$sock_int(r1, 0xffff, 0x1000, &(0x7f0000000240)=0x6, 0x4) fcntl$lock(0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x3, 0x0, 0x2, 0x100000401}) bind$unix(r1, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x9, 0x0, 0x0, 0x0, 0x0, 0x50, 0x200}, 0x0, 0x3, 0xfffffffffffffffb}) connect$unix(r0, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) r2 = socket(0x800000018, 0x2, 0x0) setsockopt$sock_int(r2, 0xffff, 0x1000, &(0x7f0000000000)=0x7, 0x4) bind$unix(r2, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000a80)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6381) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x8, 0x2000000000000004}, 0x0, 0x0, 0x0) r3 = kqueue() kevent(r3, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) kevent(r3, 0x0, 0xffeffff1, &(0x7f00000002c0)=[{{}, 0xfffffffffffffff9, 0x0, 0x0, 0x7, 0x5}, {{}, 0xfffffffffffffff8, 0x4f, 0x20000000, 0x7fffffffffffffff, 0x8000000046ad}, {{}, 0xfffffffffffffff9, 0x1, 0xf0000000, 0x8001, 0x8}, {{}, 0xfffffffffffffffc, 0x20, 0x4, 0xfffffffd, 0xc3d}, {{}, 0xfffffffffffffffb, 0x37, 0xf0000000, 0x9, 0x3}, {{}, 0xffffffffffffffff, 0x57, 0x2, 0xe, 0x10000}, {{}, 0xfffffffffffffffd, 0x14, 0x10, 0x2, 0x100000002}, {{}, 0xfffffffffffffffd, 0x80, 0x1, 0x1f70, 0x5}], 0xb19, 0x0) sysctl$hw(0x0, 0x0, &(0x7f00000000c0)="99c5069e7aab2155751fcf107818533afc9ff01a68a4b1baa30a07f4c4b66ce08d59af7e54a8341f3be673a174c3a12223a171ff2ab99d0e0d43f0a6c3948f11658e876ac2126614dcd00fdfe76f1ace1f77da0c0af828b5c508585fd9df9ae729f85999a053e2c9872fbdd4e491010010791840000000000000000081131a6f0b680f72f2b0d9a19e", 0x0, 0x0, 0x0) r4 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x22) ioctl$FIONBIO(r4, 0x82907003, &(0x7f0000000140)=0x2) ioctl$WSMUXIO_REMOVE_DEVICE(0xffffffffffffffff, 0x80085762, &(0x7f0000000040)={0x1}) openat$vmm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) 10.084928497s ago: executing program 4 (id=919): sendmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000b40)="82ffff47c2006ed7eda0f5903abf65b18d7c51f78b06ccffb4050000000000009dd52840fafd3493775a65d4cd12c63d34", 0x31}], 0x1, 0x0, 0x0, 0x417}, 0x404) sysctl$net_pipex(&(0x7f00000000c0)={0x4, 0x22, 0x1}, 0x3, 0x0, 0x0, 0x0, 0x0) (async) sysctl$net_pipex(&(0x7f00000000c0)={0x4, 0x22, 0x1}, 0x3, 0x0, 0x0, 0x0, 0x0) sysctl$kern(&(0x7f00000000c0)={0x1, 0x50}, 0x3, &(0x7f0000000100)="00e0ae5b7e0d0000bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x50, 0x0, 0x37) r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x280, 0x0) ioctl$TIOCSETA(r0, 0xc4504446, &(0x7f0000000740)={0x8, 0x5, 0x2, 0x1ff, "a3ae02c1000000000002000ffb7dd5a80b546600", 0x9, 0x42}) 8.509639897s ago: executing program 4 (id=924): setrlimit(0x1, &(0x7f00000004c0)={0xd, 0x51}) sysctl$net_inet_tcp(&(0x7f0000000040)={0x4, 0x2, 0x6, 0x4}, 0x4, 0x0, 0x0, &(0x7f0000000100), 0x0) write(0xffffffffffffffff, &(0x7f0000000940)="828b10580f8ca592b0d3de28d6cf164572356e2ff708db2399edaa77fa688e3e2fb495690e860b4d5db61bde611e8f1232e192c7c9c54e36d0bf5b8f1277a7200c514393fb24c2644e79ce4089cfa71ae75de4fd71d8ea8b194211cb08006a322b4d99b90d5f4f06c1ceb0a251d76a3d14409da06f63d5c369a1f5ffe57f213adef3fae552d0923612f04f0e810d09b5811ad56e77eef132d87bc90d6b29a3f5c21a791421fd45cd2bda524caf398cbf343b082bef0342b0eefe0ea290", 0xbd) r0 = syz_open_pts() close(r0) r1 = syz_open_pts() ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000380)={0x0, 0x9, 0x1c6b, 0x7ffffffd, "c2a679f1a29bd0ea00", 0x3, 0x8}) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) write(r0, &(0x7f0000000740)="590bd50666e24daa5275d333e860b7a4f4fbe93f22a311377010f6fc1e02e3820b1b3ac623e373b6b1598f0caa36c93343d786f13ad6cd4d41899aae66967854d333935eaa0d3ee3cdd3b147f2afdacc96266a03bda90056dea71415a3cb4feb97c5dc5099ca5c28877159ee943013f20d9209c02a1c49d203ca96e99aa107cd3d28d634b6fc9e6d51c9af518a29203c158648ba8cda3ba5cb918319cba8a485c27434e6b344ebe2d289c72a3c6324c8edacf98d19f50b3b423ef0fd04d8e09bfc0c5f724ce9417d8000000000", 0xfffffffffffffd19) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) readv(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/244, 0xf4}], 0x1) 7.171256671s ago: executing program 2 (id=927): r0 = socket$unix(0x1, 0x1, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x2, 0x5) r2 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r2, 0xc0106924, &(0x7f00000001c0)) ioctl$FIONREAD(r1, 0x80206918, &(0x7f0000000100)) r3 = accept(r0, &(0x7f0000000000)=@in, &(0x7f0000000040)=0xc) mknod(&(0x7f0000000000)='./file1\x00', 0x2000, 0x285b9a) sysctl$kern(&(0x7f00000000c0)={0x1, 0x2c}, 0x8, &(0x7f0000000040)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1c, 0x0, 0x0) r4 = socket(0x18, 0x2, 0x0) setsockopt(r4, 0x1000000000029, 0xa, &(0x7f0000000040)="03000000", 0x4) r5 = socket(0x24, 0x2, 0x0) getsockopt(r5, 0x4, 0x10000002, 0x0, 0x0) setsockopt(r4, 0x1000000000029, 0xc, &(0x7f0000000000), 0x14) r6 = socket(0x1, 0x1, 0x1) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) ioctl$FIONREAD(r6, 0x8040691a, &(0x7f00000001c0)) r7 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000340), 0x400, 0x0) chdir(&(0x7f0000000800)='./file1\x00') ioctl$WSKBDIO_GETDEFAULTKEYREPEAT(r7, 0x400c570a, &(0x7f00000007c0)) setitimer(0x0, &(0x7f0000000000)={{0x0, 0x80}, {0x0, 0x4}}, 0x0) sysctl$hw(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) getitimer(0x0, 0x0) r8 = socket(0x18, 0x2, 0x0) getsockopt(r8, 0x9, 0x2, 0x0, 0x0) recvmmsg(r3, &(0x7f0000000740)={&(0x7f0000000700)={&(0x7f0000000080)=@in6, 0xc, &(0x7f0000000640)=[{&(0x7f00000000c0)=""/47, 0x2f}, {&(0x7f0000000100)=""/177, 0xb1}, {&(0x7f00000001c0)=""/167, 0xa7}, {&(0x7f0000000280)=""/142, 0x8e}, {&(0x7f0000000340)}, {&(0x7f0000000380)=""/51, 0x33}, {&(0x7f00000003c0)=""/213, 0xd5}, {&(0x7f00000004c0)=""/183, 0xb7}, {&(0x7f0000000580)=""/166, 0xa6}], 0x9, 0xfffffffffffffffe}}, 0x10, 0x0, &(0x7f0000000780)={0x3, 0x1ff}) clock_getres(0x6, 0x0) 6.058756955s ago: executing program 6 (id=930): ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, &(0x7f00000000c0)={0xa, 0x8000148, {[0x3, 0x0, 0x6, 0x6, 0x3, 0x8000, 0x1, 0x0, 0x7, 0x2, 0x9, 0x91c, 0x8, 0x180, 0x0, 0xd3, 0x76, 0xfffffffffffffff7], [0x5438b950, 0x5, 0x1004, 0x7, 0x1, 0x1, 0x9, 0x7, 0xffffffffffffffff, 0x3], [0x6, 0x0, 0x8, 0x8000000008, 0xae, 0x200, 0x2], [0x100000000, 0x10801, 0x0, 0x5, 0x3, 0x6], [{0x5ad, 0x7, 0xfffffffb, 0x6}, {0x2, 0x925, 0x3, 0x338}, {0x1000, 0x7fffffff, 0x0, 0x5}, {0x8, 0x2, 0x3, 0x895}, {0x4, 0x3, 0x2, 0x9}, {0x1f, 0x4, 0x0, 0x7}, {0xe4, 0xffffff81, 0x1ff, 0x1}, {0x3, 0x10000, 0x8001, 0x5}], {0x52b, 0x4, 0xfffffffd, 0x8}, {0xfffb, 0xffffbfc0, 0x8}}}) mknod(&(0x7f0000000000)='./bus\x00', 0x3a0914c44f7b202d, 0x504) r0 = open(&(0x7f0000000040)='./bus\x00', 0x10005, 0x0) ioctl$TIOCSETD(r0, 0x8004741b, &(0x7f00000000c0)=0x8) r1 = open(&(0x7f00000004c0)='./bus\x00', 0x400, 0x132) pipe(&(0x7f0000000100)={0xffffffffffffffff}) fcntl$setstatus(r2, 0x4, 0xc0) r3 = getppid() msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f00000000c0)={{0xe5, 0x0, 0xffffffffffffffff}, 0x0, 0x8, r3, 0x0, 0x2000000000, 0x3, 0x1}) setrlimit(0x8, &(0x7f0000000080)={0xe, 0x51}) r4 = syz_open_pts() close(r4) syz_open_pts() ioctl$FIOASYNC(r4, 0x80047469, &(0x7f00000000c0)=0x5) writev(r4, &(0x7f0000000480)=[{&(0x7f0000000100)="3a9edc32b2645e5636c3bab11d1b2b1835ae101839e999d3e7da002142402c4fed8eb2bdf868917200441d9fe02c67f0bcbf31952dcaebd7a08c8692e3c98d0ca4a6e27f9b52f6bedbbdb0a6e437b3609fe604e69da2e1ea4ee5dedca564187abf48f663d5cdc55f97b34afdc9852c077ea584505e43fcf998b7742a247ee52bb16e1b731dd61cb746b51f408edbb32478f70573b73c84", 0x97}, {&(0x7f0000000040)="0fd17d33d3fd", 0x6}, {&(0x7f00000001c0)="c405d0c6f20004278fca96d76ee214c6c53006a9d4e11b69973d306df42730eed5e2df3977bfcfad7fdbc8986e6c0ec8c1d57e64efc32e3dc8743f69f3d49cab410f2a9e3c868aa588f3d2f577365bb22bf1392f5675f457ff04c64b457e0685e23688cecdd3bb068e3454309e4a8f823447486effbd4df3a02cfddf52f0591ccf7a9d66dadecdcaaf4e8353af3694297519d6da8be548122559a15e8c27e47af63e92e5f60a7eae232a", 0xaa}, {&(0x7f00000002c0)="98d9f91c5f45decc078ee3813409c022b250d6149cc30cba5967724e2d718e0e8df6a2999764db03ceea49f9850c26bba362d0e9fcecce1b853aa58f33b6d090185c6310f532ba8cb52103d9eeb474e91b925ce953436966e1581ff05789a3494a3dc100591291f3999403b8d3a122948381585b4826a31332bc4b7ca18a3ffb51df7b05d46b7e52d2324dd9cb9a50dd83ba5fed36c7553b307c566dc450259e8fde624988aff088703295a1ed6a", 0xae}], 0x4) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) ioctl$WSKBDIO_GETMAP(r5, 0x80047476, &(0x7f0000000100)={0x0, 0x0}) r6 = fcntl$getown(r5, 0x5) setuid(0xee01) fcntl$setown(r2, 0x6, r6) close(r2) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) sysctl$hw(&(0x7f0000000040)={0x6, 0x14}, 0x2, 0x0, 0x0, &(0x7f0000000140), 0x0) r7 = socket(0x2, 0x1, 0x0) sysctl$hw(&(0x7f0000000080)={0x6, 0xb}, 0x2, &(0x7f0000000300)="56e992b18b2e7a34ef5fa17c1848eda2a6084c319df110", &(0x7f0000000340)=0x17, &(0x7f0000000380)="ac77016511a69837bfb370843ced19a7e44b130a93815c80b53daab71b15d40fcf616ed87feaf4e030d85204530fb00038d71a30b1a8c72ea83ebc1a79338b3d31a26a1ae728ec182ed87f8f6a4bd8434652c8f72746f46550cdada87ba80a270db7ee2cffa86bce07e9759a73504bf5b5cf60c94704b1ba2a75ea03ae9b1219a987611af13a1fa3cdb7fc49dd7164ce9ae1d471d947a56b5c97116298ef014e8dfba86bb4dd591caf705926706ccf549061dec4e7e158a98e4f2a1062c6d122892bd0e8", 0xc4) ioctl$FIONREAD(r7, 0xc0206925, &(0x7f00000001c0)) 5.80044693s ago: executing program 7 (id=931): setuid(0xee01) r0 = open$dir(&(0x7f0000000300)='.\x00', 0x0, 0x4a) r1 = getppid() r2 = open(&(0x7f0000000240)='./file0\x00', 0x70e, 0x24) close(r2) getdents(r2, 0x0, 0x0) ktrace(&(0x7f0000000040)='./file1\x00', 0x2, 0xa82, r1) fchmod(r0, 0xff) 5.590630026s ago: executing program 3 (id=932): open$dir(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10, 0x0) unlink(&(0x7f0000000100)='./file0\x00') 5.587985529s ago: executing program 3 (id=933): ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f0000000040)={0x0, 0x85, 0x1, 0x0, "0100dd2d018000000000005e00"}) sysctl$kern(&(0x7f0000000040)={0x1, 0x3d}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000470000/0x3000)=nil, 0x3000, 0x4) sysctl$vm_swapencrypt(&(0x7f0000000200), 0x3, 0x0, 0x0, &(0x7f00000001c0)="2cb304c7fb61823c6903005b4eb6703d3ca347a4517d46e8", 0x5e) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) (async) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) socket(0x2, 0x4001, 0x0) (async) socket(0x2, 0x4001, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x0) r0 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) ioctl$WSKBDIO_SETMAP(r0, 0x8010570e, &(0x7f0000000280)={0x0, 0x0}) ioctl$WSKBDIO_GETBACKLIGHT(0xffffffffffffffff, 0x400c5711, &(0x7f0000000080)) socket(0x0, 0x0, 0xff) (async) r1 = socket(0x0, 0x0, 0xff) fchflags(r1, 0x10000) r2 = open(&(0x7f0000000180)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf79a5) sysctl$net_inet6_ip6(&(0x7f0000001e40)={0x4, 0x18, 0x29, 0x11}, 0x4, 0x0, 0x0, &(0x7f0000000300)="05c4f5", 0x3) r3 = open(&(0x7f0000000040)='./file0\x00', 0x2, 0x110) write(r3, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) (async) write(r3, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) ioctl$TIOCDRAIN(r2, 0x2000745e) (async) ioctl$TIOCDRAIN(r2, 0x2000745e) execve(0x0, 0x0, 0x0) r4 = socket(0x18, 0x2, 0x0) close(r4) r5 = socket(0x800000018, 0x2, 0x0) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0xfffffffc, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200}, 0xc, 0x8001, 0x6}) socket(0x1, 0xc006, 0x1) (async) r6 = socket(0x1, 0xc006, 0x1) connect$unix(r6, &(0x7f00000002c0)=@abs={0x0, 0x0, 0x0}, 0x8) (async) connect$unix(r6, &(0x7f00000002c0)=@abs={0x0, 0x0, 0x0}, 0x8) getsockname$inet(r6, &(0x7f00000000c0), &(0x7f0000000000)=0xffffffffffffff35) bind$unix(r5, &(0x7f0000000240)=@file={0x0, '\x00'}, 0x3) connect$unix(r4, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) (async) connect$unix(r4, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) poll(0x0, 0x0, 0x2000) (async) poll(0x0, 0x0, 0x2000) close(r7) (async) close(r7) 5.58771784s ago: executing program 1 (id=934): unveil(&(0x7f0000000040)='./file1\x00', &(0x7f0000000180)='r\x00') openat$vmm(0xffffffffffffff9c, &(0x7f0000000040), 0x288, 0x0) 5.430387969s ago: executing program 7 (id=935): r0 = socket(0x11, 0x8003, 0xfe) getsockopt(r0, 0x11, 0x4, 0x0, 0x0) (async) sysctl$net_inet_ip(&(0x7f0000002500)={0x4, 0x2, 0x0, 0x21}, 0x4, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) (async) syz_emit_ethernet(0x3e, &(0x7f0000000140)=ANY=[@ANYBLOB, @ANYBLOB="6002f5019078007f02040550"]) (async) r2 = socket(0x18, 0x1, 0x0) setsockopt$sock_int(r2, 0xffff, 0x8, &(0x7f0000000040)=0x8, 0x4) (async) ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9f, 0x0) (async) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0x3, [{&(0x7f0000ffd000/0x3000)=nil, &(0x7f00002e6000/0x3000)=nil, 0xffffffffffffffff}, {&(0x7f0000695000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0xffffffffffffff7c}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f00006b9000/0x1000)=nil, 0x80000000}, {&(0x7f00001da000/0x4000)=nil, &(0x7f00000d6000/0x1000)=nil, 0xfffffffffffffffc}, {&(0x7f000024d000/0x1000)=nil, &(0x7f0000188000/0x2000)=nil, 0x401}, {&(0x7f000060b000/0x2000)=nil, &(0x7f0000095000/0x3000)=nil, 0x80000002}, {&(0x7f000055e000/0x4000)=nil, &(0x7f00001b8000/0x2000)=nil, 0x8}, {&(0x7f000077c000/0x1000)=nil, &(0x7f00000ce000/0x4000)=nil, 0x5}, {&(0x7f0000251000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil}, {&(0x7f00003bc000/0x3000)=nil, &(0x7f00003f2000/0x2000)=nil, 0xa}, {&(0x7f000064b000/0x2000)=nil, &(0x7f000038f000/0x4000)=nil, 0x12b}, {&(0x7f0000008000/0x3000)=nil, &(0x7f0000688000/0x4000)=nil, 0x9}, {&(0x7f0000196000/0x3000)=nil, &(0x7f000076c000/0x4000)=nil, 0x4}, {&(0x7f000024b000/0x2000)=nil, &(0x7f000079e000/0x4000)=nil, 0xffffffffbffffff9}, {&(0x7f00001f9000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x5e04}, {&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000001000/0x800000)=nil, 0x8}], './file0\x00', 0x3}) (async) r3 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) (async) connect$unix(r1, &(0x7f0000000000)=@abs={0x1, 0x0, 0x0}, 0x8) ioctl$VNDIOCSET(r3, 0xc0384600, &(0x7f0000000140)={&(0x7f0000000180)='./file0\x00', 0x567, 0x0}) 5.42800373s ago: executing program 5 (id=937): r0 = openat$speaker(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) writev(r0, &(0x7f0000000980)=[{&(0x7f00000002c0)='eEr#h', 0x5}], 0x1) select(0x40, &(0x7f0000000000)={0x9, 0x5, 0x81, 0x1, 0x7, 0x2, 0x40000081, 0x6}, 0x0, 0x0, 0x0) sysctl$kern(&(0x7f0000000000)={0x1, 0x42}, 0x6, 0x0, 0x0, 0x0, 0xffffffffffffff15) execve(0x0, 0x0, 0x0) 5.425297826s ago: executing program 1 (id=938): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000040)=@file={0xd19450564dee018c, './file0\x00'}, 0xa) open$dir(&(0x7f0000000b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x0) r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r2 = open$dir(&(0x7f0000000100)='.\x00', 0x0, 0x0) (async, rerun: 32) r3 = getpgid(0x0) (rerun: 32) ktrace(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4, 0x200, r3) (async) mkdirat(r2, &(0x7f0000000a80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) link(&(0x7f0000000940)='./file0\x00', &(0x7f0000000d40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) link(&(0x7f0000000100)='./file0\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x2, 0x0, 0x154, 0xffffffff00000002}) (async) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x11}, 0x4000000000000006, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) symlink(&(0x7f0000000ac0)='./file0\x00', &(0x7f0000000e40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async, rerun: 64) rename(&(0x7f0000000600)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) mkdir(&(0x7f0000000440)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0) (async) rename(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 5.170379706s ago: executing program 4 (id=939): r0 = socket(0x2, 0x3, 0x0) r1 = kqueue() ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x5, &(0x7f0000000000)=[{0x28, 0x5, 0xc, 0x8cc0}, {0x9, 0x9, 0x0, 0x9}, {0x7, 0x6e, 0x8, 0x2}, {0x7, 0x1, 0xf, 0x4}, {0x3, 0xf9, 0x0, 0x10000}]}) socket(0x20, 0x0, 0x3) kevent(r1, &(0x7f00000000c0), 0x5b7c, &(0x7f0000000180), 0x0, 0x0) ioctl$FIONREAD(r0, 0xc0206921, &(0x7f00000001c0)) r2 = socket(0x2, 0x2, 0x0) ioctl$FIONREAD(r2, 0x80206913, &(0x7f00000001c0)) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x80007, 0x0, 0x0, 0x0, 0x0, 0x199, 0x6}, 0x85c, 0x4, 0x0, 0x0, 0x80000000003, 0xfffffffffffffffe, 0x5, 0x8000004}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x33}, 0x2, 0x0, 0x0, 0x0, 0x0) nanosleep(&(0x7f0000000080)={0x1}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) sysctl$kern(&(0x7f00000000c0)={0x1, 0x4e}, 0x3, &(0x7f0000000100)="71f95f84cf71b59c7afec37582", &(0x7f0000000080)=0x2, 0x0, 0x37) syz_emit_ethernet(0x145e, &(0x7f0000001c00)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd606d9efb1428670000000000010000000000000afffffffe00000000000000000000000000000001"]) getuid() 5.169555214s ago: executing program 2 (id=940): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x200, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x80, 0x7e, 0x82, 0x6ffb}, {0x14, 0x7, 0x11, 0x6}, {0x748b, 0x81}]}) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x3, 0x91, 0x7f, 0x7}, {0x2c, 0xf, 0x6, 0x6}, {0x6, 0x9, 0x1, 0xfffffff2}]}) sendmmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x1c}, 0x10, 0x2) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x35, 0x28, 0x66, 0xd0, 0xe1, 0x6c, 0x0, @local={0xac, 0x14, 0x0}, @rand_addr=0x2}, @tcp={{0x2, 0x0, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x1, 0xb, 0x0, 0x400}}}}}}) syz_emit_ethernet(0x1000e, &(0x7f0000000080)=ANY=[]) r2 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) ioctl$DIOCMAP(r2, 0xc0106477, &(0x7f0000000100)={&(0x7f00000000c0)='./file0\x00', r0, 0x1}) connect$unix(r2, &(0x7f0000000180)=@abs={0x1, 0x0, 0x0}, 0x8) 4.62039884s ago: executing program 7 (id=941): ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x100000000000000, 0x10040000000001}}) r0 = socket(0x18, 0x2, 0x0) setsockopt(r0, 0x1000000000029, 0xc, &(0x7f0000000000), 0x14) setsockopt$sock_linger(0xffffffffffffff9c, 0xffff, 0x80, &(0x7f0000000280)={0x2, 0x1}, 0x8) ioctl$VMM_IOC_TERM(0xffffffffffffffff, 0x80045604, &(0x7f0000000080)={0x3}) sysctl$vfs_fuse(&(0x7f0000000000)={0xa, 0xd}, 0x3, 0x0, 0x0, 0x0, 0x0) r1 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$WSMUXIO_ADD_DEVICE(r1, 0x80085761, &(0x7f0000000040)={0x3, 0x23}) r2 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000100), 0x8, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0xffff, 0x80, &(0x7f00000001c0), &(0x7f0000000200)=0x8) ioctl$VMM_IOC_RUN(0xffffffffffffffff, 0xc0205602, &(0x7f0000000240)={0x9, 0x5, 0x91, 0x1ff, &(0x7f0000000380)={{0x2, 0x1, 0xfe, 0x8, 0x1, 0x7}, {[0xfffffffffff7ffff, 0x4, 0x5, 0x100, 0x8, 0xd6a, 0x3ff, 0x4, 0x8, 0x0, 0x7, 0x2, 0xffff, 0x4, 0x3, 0x640, 0xfff, 0x5], [0x400, 0x8, 0xcd22, 0x6, 0x3, 0x5, 0x800, 0x0, 0xffffffff00000000, 0x10001], [0x6, 0x9, 0x2, 0x8f5, 0x200, 0x6, 0xb391], [0x7, 0x4, 0x3, 0x6, 0xffffffffffffb596], [{0x1000, 0x3, 0x2, 0x4}, {0xc84, 0x5, 0x3}, {0x4, 0x431, 0x7, 0x6}, {0x9, 0x12, 0x12, 0x8}, {0x4, 0x3, 0xe4, 0x1008000}, {0x0, 0x1, 0x6, 0x4f0}, {0x6, 0x90, 0xfffffffe, 0x2}, {0xba5d, 0x900, 0x3, 0xffffffffffffffff}], {0x8, 0x7, 0x9, 0x6}, {0x10, 0xe8ad, 0x4, 0xc57d}}}, 0x8, 0x81}) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4, 0x12, r2, 0x4) ioctl$DIOCMAP(r2, 0xc0106477, &(0x7f0000000180)={&(0x7f0000000140)='./file0\x00'}) sysctl$vm(&(0x7f00000000c0)={0x2, 0x9}, 0x2, &(0x7f0000000000)="43a262d7", &(0x7f0000000340)=0x4, 0x0, 0x0) 4.619834006s ago: executing program 5 (id=942): setuid(0xffffffffffffffff) r0 = socket(0x18, 0x2, 0x0) r1 = socket(0x2, 0x1, 0x0) r2 = dup(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r0, 0x1) r4 = dup(r3) recvmmsg(r4, &(0x7f0000000440)={&(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{0x0}, {0x0}, {&(0x7f0000000240)=""/90, 0x5a}], 0x3, 0x0}, 0x1}, 0x10, 0x0, 0x0) dup2(r2, r4) execve(0x0, 0x0, 0x0) getsockname$unix(r1, 0x0, &(0x7f0000000080)) setsockopt(r0, 0x1000000000029, 0xc, &(0x7f0000000000), 0x14) 4.434273995s ago: executing program 1 (id=943): r0 = socket(0x11, 0x3, 0x0) getsockopt$sock_timeval(r0, 0xffff, 0x1006, &(0x7f0000000000), &(0x7f0000000040)=0x10) open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7941) ktrace(&(0x7f0000000140)='./file0\x00', 0x1, 0x51d73188af82c397, 0xffffffffffffffff) r1 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0xd6) open(&(0x7f0000000000)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf79c9) getsockopt$SO_PEERCRED(r1, 0xffff, 0x1022, &(0x7f0000000280), 0xc) ktrace(&(0x7f0000000080)='./file0\x00', 0x4, 0x9711e361c498d1f2, 0x0) getrusage(0xffffffffffffffff, &(0x7f00000001c0)) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)='#!', 0x2}, {&(0x7f00000002c0)="8d6bb85551ec8430877ae32fe9bbe42cc8f2147a3eba8e1969f0435119cf4c071c8aee7ef2921be5d7d4796c5566c9593ac89e994b85a05915eaffac51de05a87b8b893e09000000d886eafbe03881d25b7b59f701322b3a109a13436e486b0a6eee", 0x62}], 0x2) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) recvmmsg(r0, &(0x7f0000000100)={&(0x7f0000000180)={&(0x7f0000000480)=@un=@file={0x0, ""/520}, 0x20a, 0x0, 0x0, 0x0}}, 0x10, 0x2, 0x0) 4.430636896s ago: executing program 4 (id=944): sysctl$net_inet_tcp(&(0x7f0000000000)={0x4, 0x2, 0x6, 0x6}, 0x4, &(0x7f0000000080), 0x0, 0x0, 0x0) r0 = socket(0x18, 0x3, 0x0) r1 = open(0x0, 0x70e, 0x48) setsockopt$sock_int(r0, 0xffff, 0x800, &(0x7f0000000080)=0x4, 0x4) setsockopt(0xffffffffffffffff, 0x7, 0x40, &(0x7f0000000100)="1d8e15bb043b73818f1f3aa75bb8a9ec335c251c4b9e00843265ba6d553ae14dd61306df6137b15205cb5a08fb04f5ae714e6b5b209baaaaea13ebbf5ec198ad49e50a851c93dc8f3ce21adc569912287c3716c22e219d43cbb6f5f10af79d88a089b675c4aa81a0ae83278455ccbb7f9de66616e5fda0bc50662f6c2071c49f6b2357e8a0af9672", 0x88) writev(0xffffffffffffffff, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000180)}], 0x2) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r2 = socket(0x18, 0x1, 0x0) ioctl$FIONREAD(r2, 0x80206982, &(0x7f00000001c0)) setsockopt(r0, 0x1000000029, 0x24, &(0x7f0000000000)="5ab7776a", 0x4) mknod(&(0x7f0000000180)='./file0\x00', 0x2000, 0x40000800) r3 = open(&(0x7f0000000240)='./file0\x00', 0x70e, 0x24) ioctl$TIOCSETA(r3, 0x802c7414, &(0x7f00000000c0)={0xc0f8, 0x3, 0x6, 0x8, "26ff6f26f26cc8a22b34b3adf97471a9b433eb88", 0x2, 0x2}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000640)=""/251, 0xfb}], 0x1, 0x0}, 0x42) writev(r5, &(0x7f0000000400)=[{&(0x7f00000005c0)="6472357799c6470a45ea19c5a1de", 0xe}], 0x1) write(r5, &(0x7f0000000040)="7cc97585253a5126a4ac0678c6d790b6c33b3e6e763c38371579343e19562401b7b74f0055ce1abc9e74072d11b74b65d267fefb275700f04cc1f8f490e5bb72db73bf3b59d1ae962bb0e2c9b3a30412087b7513d03b26bbcb131156c5b601d726737abaed6fc41250440030cd1135475f8fb9431d3b5f1c987229bc588ee7fdc124c69fc4f8337a514e971c8b2da6c7bb34732e903bd7aa1143b450bd07e39bf8c1a49d7d5bff56c0c51ac6983a1c1820f7b3ae7e9d9e93525f7dcf8e322b9dbe76baa19915307b384bf3afecbab8a53cf1c3162610d96adc5a602165529e0406a344ac30584f7663d0b22103", 0xed) writev(r3, &(0x7f0000000500)=[{&(0x7f0000000280)="10dd31254ddf9b0e611d981251419d9afcbb77acd782c9c73c321b82a16002bdf064827e47d6892dde69c33a406da4459ba6c1bf4f19bddea109620fa51f74da1258ce87884255f81f0fe9c32920ae7788cb61dfaeffe0dd1971421d9cb5b16a0ebb74fa9e6113cbe5d0abf10f", 0x6d}, {&(0x7f00000001c0)="be90f66955314d0d", 0x8}], 0x2) syz_emit_ethernet(0x66, &(0x7f00000000c0)=ANY=[@ANYBLOB="8f6f77ede655ffff2200000087dd605f6ad9003037008fd8b0e5602493ff1f88b029e0ad0c35fe800000aa02009078000000006006c32e00068900fe8000000000000000000000000000aa0000000000f7ff00000000000000000100"/102]) recvmsg(r0, &(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001280)=""/84, 0x54}, 0x42) getpeername(r1, &(0x7f0000000340)=@in6, &(0x7f0000000300)=0xc) sysctl$net_inet_tcp(&(0x7f0000000040)={0x4, 0x2, 0x6, 0x11}, 0x4, &(0x7f0000000080)="933737e7c79c868c5bad7496", &(0x7f00000000c0)=0xc, &(0x7f0000000100)="dff36f30da8fc843c67581f017764376fa944f65064e4c89ce9ff0b8f4fa510f001925bd1534fd36b5ad655fb5a2b439b62b60289756a86c12f3458367b2c9dec98e8065e565a3ab1f66dccbe89295bedef1c6928ca80226f006bd671b0b79e7dd2bafa96f2afddf07afe22d9466042ac59d62c098c125c7c76bbe954d572a0f892e64c44eeaca535c22e2acd1889d1f645b4b46c245d42b157b7b5bc9abe1c4bb963089f50415d0abb2d730e9df0e02e97f385e79100e18a6debbe675a0c154", 0xc0) sysctl$net_inet_tcp(&(0x7f0000000200)={0x4, 0x2, 0x6, 0xf}, 0x4, &(0x7f0000000740)="084f61f2271fd45e8fccf26335e962a6d7b66a9343145556159221f10b073a5fb3a5951e46ed4a609091f76f653da43699dec6f95418554c7c63e2a5d35cea6edd95df6b0915268dd2a64846a698af2e13f73b0c2f566e5fbf442602a1c4e9152d6ff4d325b0ce30cff6c97e980bd85c834380d8b9c4e81e208cd7ddbadc7555ae0c5ab633742662a47b27bd88b4131eb91cf386c0dcf9b25fe986f9fd789d1fde40495628ec4d66885ab6dd8a670fc7f7fff38578cbe8b61ba8fb23e8ea453545f1b581b593", &(0x7f00000003c0)=0xc6, &(0x7f0000000440)="52df79e91b93c7135a3e22f4192c844924c4f1d9bf341b6909c2f994556ea49f6e237b0306bdd3a888e630d4685f77aa9fc5360024", 0x35) 4.430267845s ago: executing program 7 (id=945): mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x5d4b) r0 = open(&(0x7f0000000480)='./file0\x00', 0x10, 0xd6) ioctl$FIONREAD(r0, 0x8020690c, &(0x7f00000003c0)) r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) r2 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) r3 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$WSKBDIO_SETDEFAULTKEYREPEAT(r3, 0x800c5709, &(0x7f0000000080)={0x4fa, 0x1, 0x6}) ioctl$VNDIOCSET(r2, 0xc0384600, &(0x7f0000000140)={&(0x7f0000000180)='./file0\x00', 0x567, 0x0}) getdents(r1, &(0x7f0000000e80)=""/4091, 0xffaa) sysctl$vm_swapencrypt(&(0x7f0000000040)={0x6, 0x1b, 0x1}, 0x3, 0x0, 0x0, 0x0, 0x0) sysctl$kern(&(0x7f0000000040)={0x1, 0x3f}, 0x4, &(0x7f0000000040), 0x0, 0x0, 0xfffffffffffffda3) lchown(&(0x7f00000002c0)='./file0\x00', 0xffffffffffffffff, 0xffffffffffffffff) getdents(r1, &(0x7f0000001e80)=""/4096, 0x1000) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x20, 0x102) sysctl$vm_swapencrypt(&(0x7f0000000080), 0x3, &(0x7f00000001c0)="4b8d599df8494126241563d89af5cc43439c1f59a2b4be6fb66ff9a0c7eff88e840822ab24f45f0f975819d6e57161fd6c1e52462dedfb5676f41c647faa23a537f11ce70528e75eaa56f63e1d9ab8624cd69aea16201a47b0565f3a78409c81a609dfa8242ce9183f68eb086757ca16afe2d0ea2e67a06e819581c144057858f38a3ddd21bbecb31dc28bb78e4fea8be0e5d7d7b2016d0223fd0f98412ba37f4f609dc7e35505435f5ed182eea2d34fa65d257d1444e431a5e91bad51dd4b", &(0x7f00000000c0)=0xbf, &(0x7f0000000100)="c4a161f6c6e70f4fc9ab9d902e590ea4fcd962b2f9a80d01af153bc39e210015e308a83c52bcaba7b462f277", 0x2c) ioctl$VNDIOCSET(r2, 0xc0384600, &(0x7f0000000380)={&(0x7f0000000300)='./file0\x00', 0x62, &(0x7f0000000340)='./file0\x00', 0x8}) 4.169670096s ago: executing program 2 (id=947): r0 = openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) fcntl$setown(r0, 0x6, 0x0) r1 = socket(0x20, 0x4, 0xd0) bind(r1, &(0x7f0000000200)=@un=@abs={0x0, 0x0, 0x0}, 0x8) mknod(&(0x7f0000000000)='./bus\x00', 0x2000, 0x0) r2 = openat$tty(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) ioctl$TIOCSTAT(r2, 0x20007465, &(0x7f0000000180)) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x200, 0x0) ioctl$PCIOCREAD(r3, 0x20007479, 0x0) r4 = socket$inet(0x2, 0x2, 0x0) getsockopt(r4, 0x0, 0x22, 0x0, 0x0) unveil(&(0x7f0000000000)='./file0\x00', 0x0) setuid(0xee01) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) r6 = open(&(0x7f0000000240)='./file0\x00', 0x40, 0x6) mmap(&(0x7f0000fed000/0x10000)=nil, 0x10000, 0x3, 0x2010, r6, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r7 = fcntl$dupfd(r5, 0x2, 0xffffffffffffffff) close(r7) r8 = socket(0x2, 0x2, 0x0) connect$unix(r8, &(0x7f0000000000), 0x10) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) r9 = socket(0x2, 0x2, 0x0) setsockopt$sock_int(r9, 0xffff, 0x1023, &(0x7f0000000040), 0xe0) r10 = socket(0x18, 0x1, 0x0) r11 = fcntl$dupfd(r10, 0x2, r10) close(r11) sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xff0a, 0x0, 0x37) sysctl$kern(&(0x7f00000000c0)={0x1, 0x3f}, 0x2, &(0x7f0000000140)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1c, 0x0, 0x0) 4.000965845s ago: executing program 3 (id=948): ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x4000000000000003}}) sysctl$net_inet_icmp(&(0x7f0000001380)={0x4, 0x2, 0x1, 0x5}, 0x4, &(0x7f0000000000), 0x0, 0x0, 0x0) r0 = open$dir(&(0x7f0000001240)='.\x00', 0x0, 0x0) renameat(0xffffffffffffff9c, &(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r0, &(0x7f0000000240)='./file0\x00') fcntl$lock(r0, 0x9, &(0x7f0000000040)={0x2, 0x1, 0x1ff, 0x100000000400000, 0xffffffffffffffff}) socketpair(0x1, 0x4, 0x3, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000000440)={&(0x7f0000000400)={&(0x7f0000000100)=@un=@file={0x0, ""/94}, 0x60, &(0x7f0000000340)=[{&(0x7f0000000180)=""/31, 0x1f}, {&(0x7f00000001c0)=""/41, 0x29}, {&(0x7f0000000280)=""/190, 0xbe}, {&(0x7f0000000200)=""/30, 0x1e}], 0x4, &(0x7f0000000380)=""/65, 0x41}, 0x3}, 0x10, 0x1040, &(0x7f0000000480)={0xafdb964, 0x4}) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket(0x18, 0x1, 0x0) setsockopt$sock_linger(r2, 0xffff, 0x80, &(0x7f00000004c0)={0x401, 0x1000}, 0x8) setsockopt(r2, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) connect$unix(r2, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) 3.997441773s ago: executing program 5 (id=949): r0 = open$dir(&(0x7f0000000140)='.\x00', 0x0, 0x0) mkdir(&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x196) (async) mkdir(&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x196) chdir(&(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) rename(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') open(&(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8000, 0x4) unlink(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) unlink(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') unlinkat(r0, &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8) open$dir(&(0x7f0000000ac0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40, 0x80) 3.997017691s ago: executing program 6 (id=950): ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffff9c, 0x81205724, &(0x7f0000000200)={0x7f, 0x4, 0xfffffff8, 0xa, 0x6, 0x8a7, 0x0, 0x10, [{0x2, 0x0, 0x9, 0x8}, {0x4, 0x8, 0xffffffc0, 0x8}, {0x5, 0x200003, 0x1, 0xfffffff9}, {0x7, 0x2, 0x8, 0x7}, {0x7ffffffd, 0xf3a, 0x0, 0x7}, {0x8001, 0x7ff, 0x9, 0x5}, {0x3, 0xa, 0x1, 0xa3}, {0x80000000, 0xfff, 0x0, 0x7}, {0x121, 0x7, 0x1, 0x5}, {0x1, 0x7fffffff, 0xffffffff, 0x7}, {0xfffffffa, 0x80000001, 0x0, 0x3}, {0x0, 0x6, 0x6, 0x14}, {0x62, 0x4, 0x7, 0x8}, {0x6, 0x7fff, 0x8, 0x1}, {0x2, 0x0, 0x3, 0x7}, {0x0, 0x6, 0x200002, 0x5}]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000000040)={0x0}, 0x10, 0x40, 0x0) (async) recvmmsg(r1, &(0x7f0000000040)={0x0}, 0x10, 0x40, 0x0) close(r1) sendmmsg(r0, &(0x7f00000003c0)={0x0, 0x6}, 0x10, 0x4) r2 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) sysctl$kern(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)="55f8f5782087a072a82ec35f78d14780f518", 0x12) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) (async) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r3 = socket(0x18, 0x2, 0x0) ioctl$FIONREAD(r3, 0xc1206949, &(0x7f00000001c0)) (async) ioctl$FIONREAD(r3, 0xc1206949, &(0x7f00000001c0)) ioctl$WSMOUSEIO_SCALIBCOORDS(r2, 0x81205724, &(0x7f00000000c0)={0x0, 0x2, 0x10001, 0x4, 0x4b5, 0xffffb3ed, 0x3, 0x10, [{0x0, 0x5c5d88a0, 0x80000000, 0x6}, {0x5, 0x9118, 0x9, 0xfffff1dc}, {0x101, 0x6, 0x0, 0x6}, {0x2, 0xffff, 0x3, 0xfffffffd}, {0x9, 0x1e61, 0x80000001, 0x8}, {0x2, 0x9, 0x9, 0x3}, {0xfffffffa, 0xae4d, 0xa, 0x438}, {0xa43, 0x0, 0x7, 0x6b56}, {0xb, 0x8, 0x288, 0xe0000}, {0x0, 0x9, 0x7fffffff, 0x7fffffff}, {0x1, 0x101, 0x8001, 0x6}, {0xd, 0x1, 0x8001, 0xa}, {0x80, 0x6, 0xfff, 0x5}, {0x7ce, 0x1, 0x3, 0x3}, {0x9, 0x1b84, 0x2, 0x1}, {0x29, 0x0, 0x5}]}) 3.697172252s ago: executing program 3 (id=951): r0 = accept$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, &(0x7f0000000180)=0x8) setsockopt$sock_timeval(r0, 0xffff, 0x1006, &(0x7f00000001c0)={0x4, 0x4}, 0x10) (async) connect$unix(r0, &(0x7f0000000200)=@abs={0x0, 0x0, 0x2}, 0x8) (async) r1 = semget$private(0x0, 0x6, 0x0) semop(r1, &(0x7f0000001240)=[{0x0, 0x0, 0x1800}, {0x4, 0x7f, 0x1000}, {0x2, 0x1, 0x800}, {0x1, 0x9, 0x1000}], 0x4) (async) ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x0, [{0x3, 0x9}, {0x1}, {0x2}, {0x0, 0xfffffffc}, {0x2}, {0x3}, {0x0, 0xaadc}, {0x3, 0xb3d0}, {0x1, 0xffffffff}, {0x0, 0x100}, {0x2, 0x2}, {0x0, 0x80000000}, {}, {}, {0x0, 0x7}, {0x2, 0xffffffff}, {0x2, 0x1}, {0x1}, {0x0, 0x2}, {0x0, 0x7ff}, {0xbb08c0840fa32129}, {}, {0x2}, {0x0, 0x104}, {0x2}, {0x1, 0x1}, {}, {0x0, 0x200}, {0x2, 0xffffffff}, {0x1, 0xfffffffd}, {0x3, 0x4}, {0x3}]}) (async) r2 = socket(0x18, 0x1, 0x0) setsockopt$sock_int(r2, 0xffff, 0x1, &(0x7f0000000080)=0x2f, 0x4) (async) connect$unix(r2, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x8) (async) sysctl$kern(&(0x7f00000000c0)={0x1, 0x37}, 0x4, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000140)=0x2c, 0x0, 0x2e) 3.696715509s ago: executing program 3 (id=952): pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f00000000c0)="61362bdd26525490702952730012b1382eafc1e324755c52cc6f20883773ed5081e48037d1996b1229771f84f1234d4c2605af837843c91d6bc344e668d15625ed1769586745e892fac086c9c3061017364f4d0fd06085ce8b3f48a4a46a5b9366c188154239e296a7ef5942bb21b14a62dc5b868c79b210ff7f1f0093df2198bd107e2be3349c9eda883443241ecd75ac8f4353f9fdf260ded660a102e40b1c05258ccaec906323da2b04aefe807de0aed00d12b4ba4dd2b6a10b92d1eafac42a", 0xc1}, {&(0x7f00000001c0)="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", 0x1000}], 0x2) msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000080)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b}, 0x7297, 0x3ce, 0xffffffffffffffff, 0x0, 0x0, 0x8000000000000000, 0x1, 0x86}) (async) msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000080)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b}, 0x7297, 0x3ce, 0xffffffffffffffff, 0x0, 0x0, 0x8000000000000000, 0x1, 0x86}) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7, 0x0}, 0x8) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x2}}) (async) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x2}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket(0x18, 0x1, 0x0) setsockopt(r1, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) (async) setsockopt(r1, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) sysctl$kern(&(0x7f0000000080)={0x1, 0x4e}, 0x4000000000000042, 0x0, 0x0, 0x0, 0xfffffffffffffe64) (async) sysctl$kern(&(0x7f0000000080)={0x1, 0x4e}, 0x4000000000000042, 0x0, 0x0, 0x0, 0xfffffffffffffe64) listen(r1, 0x4075) 3.695930809s ago: executing program 0 (id=953): r0 = socket(0x2, 0x2, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000440)=ANY=[@ANYBLOB="d1b88d2f31beb6444124b71686dd69b6435100143703000000006dd50000000000000000000000000000000000000000ffff"]) setsockopt$sock_int(r0, 0xffff, 0x1001, &(0x7f0000000100)=0x20000, 0x4) writev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000000)="c886b4", 0x3}], 0x1) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$BIOCSBLEN(0xffffffffffffffff, 0xc0044266, 0x0) r1 = socket(0x18, 0x3, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) sysctl$vfs_ffs(0x0, 0x0, &(0x7f0000000080)="06e6a186cf8257197b8d91e7c56e0abd770a63cab73518977eb4e7f3cf84aa05aa7689c8dbe18896a2e8229d32f6e84c8033909c4b569ec9cc4cf6a445c82559ea205149a66ab99c89e4c319f5ced9ad4f702334eeb646b39b919a8d4fde562ba7135f28c86c751ee09b3028f555ae44a521f306ab76d3ef708e7f40d6e5c7cae35bb7622d953d709d8f83a05b80ff08aeb6f1a2537d113aedf5291a08932a64899b6d9e9be1f561e9fbc452ea18", 0x0, 0x0, 0x0) r2 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r2, 0xc0106924, &(0x7f00000001c0)) setitimer(0x1, &(0x7f0000000140)={{0xffffffffffffffff, 0x100000010000009}, {0x7ffffffb, 0x4004001000}}, 0x0) ioctl$FIONREAD(r1, 0x8080691a, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs={0x0, 0x0, 0x2}, 0x8) write(r0, &(0x7f0000000080)="04bdfa5d1d2873c63e3534825ba166e2fea9aec43050006123339a346f731573d8d508753f95b7688ad48b8cf6bbca325cebc37fc4e1dd543dbe2da6dd", 0xffea) 3.55415413s ago: executing program 6 (id=954): setuid(0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) setuid(r1) setuid(r1) setuid(r1) r3 = socket(0x18, 0x8000, 0x1) poll(&(0x7f0000000080)=[{r3, 0x1}], 0x1, 0x2) shutdown(r3, 0x0) setuid(r1) chown(&(0x7f00000000c0)='./file0\x00', r1, r2) r4 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) ktrace(&(0x7f0000000100)='./file0\x00', 0x4, 0x2, r0) r5 = semget(0x0, 0x0, 0xc03) r6 = getgid() semctl$IPC_SET(r5, 0x0, 0x1, &(0x7f0000000140)={{0xffff0496, r1, r6, r1, r2, 0x0, 0x3}, 0x0, 0x6, 0x3}) r7 = openat$pf(0xffffffffffffff9c, &(0x7f00000001c0), 0x200, 0x0) chflagsat(r7, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) semctl$IPC_SET(r5, 0x0, 0x1, &(0x7f0000000240)={{0x1, r1, r2, r1, 0x0, 0x111, 0x7}, 0x400, 0x8, 0x7ff}) r8 = dup2(r3, r7) r9 = open(&(0x7f00000002c0)='./file0\x00', 0x80, 0x24) unveil(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='W\x00') fcntl$lock(r9, 0x6, &(0x7f0000000380)={0x1, 0x1, 0x52, 0x8, r0}) r10 = getuid() setreuid(r1, r10) setuid(r1) setsockopt$sock_cred(r9, 0xffff, 0x1022, &(0x7f00000003c0)={r0, r10, r6}, 0xc) ioctl$VMM_IOC_CREATE(r8, 0xc2585601, &(0x7f0000000400)={0x10, 0xd, [{&(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x1}, {&(0x7f0000000000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x1}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, 0x4}, {&(0x7f0000003000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x4}, {&(0x7f0000003000/0x3000)=nil, &(0x7f0000006000/0x1000)=nil, 0x100000001}, {&(0x7f0000009000/0x3000)=nil, &(0x7f000000b000/0x1000)=nil, 0x5}, {&(0x7f0000001000/0x2000)=nil, &(0x7f000000a000/0x11000)=nil, 0x9}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f000000e000/0x4000)=nil, 0x5}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000015000/0x1000)=nil, 0x4}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000002000/0x3000)=nil, 0x1000}, {&(0x7f000000f000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x4}, {&(0x7f0000ffa000/0x6000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x1}, {&(0x7f0000009000/0x1000)=nil, &(0x7f0000013000/0x3000)=nil, 0x3}, {&(0x7f0000003000/0x1000)=nil, &(0x7f0000018000/0x2000)=nil, 0xedf6}, {&(0x7f0000009000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, 0xffffffffffffffff}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000013000/0x3000)=nil, 0x401}], '\x00', 0x10001}) seteuid(r1) shmat(r4, &(0x7f0000010000/0x3000)=nil, 0x0) shmctl$IPC_SET(r4, 0x1, &(0x7f0000000600)={{0x10, r1, r6, r1, 0x0, 0x8, 0x5}, 0xa, 0x2, 0x0, r0, 0x5, 0x7, 0x4}) 3.553399551s ago: executing program 4 (id=955): mkdir(&(0x7f0000000180)='./file0\x00', 0x14) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) munmap(&(0x7f0000000000/0xf000)=nil, 0xf000) r0 = socket(0x18, 0x3, 0x0) getsockopt(r0, 0x29, 0x26, 0x0, 0x0) ioctl$FIONREAD(r0, 0x4004667f, &(0x7f0000000040)) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) chroot(&(0x7f0000000080)='./file0\x00') ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000000)={0x0, &(0x7f0000000080)}) sysctl$kern(&(0x7f0000000000)={0x6, 0xb}, 0x5, 0x0, 0x0, 0x0, 0x0) rename(&(0x7f0000000140)='./file0/file0/..\x00', &(0x7f0000000200)='./file0\x00') 3.553077918s ago: executing program 3 (id=956): ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f0000000080), 0x1c, 0x0}, 0x0) r0 = syz_open_pts() ioctl$TIOCSTAT(r0, 0x20007465, 0x0) ioctl$TIOCSETD(r0, 0x8004741b, &(0x7f00000000c0)=0x7) ioctl$TIOCSETD(r0, 0x8004741b, 0x0) unveil(0x0, &(0x7f0000000140)='c\x00') socket(0x2, 0x1, 0x0) syz_open_pts() ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) madvise(&(0x7f0000000000/0x4000)=nil, 0x0, 0x6) ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file0\x00', 0x4, 0xc0, 0x4, 0x0, 0x7ff, 0xffff0002, 0x2, 0x1, 0x0, 0x2004007, 0xff}) sysctl$vfs_ffs(0x0, 0x0, &(0x7f0000000080)="06e6a186cf8257197b8d91e7c56e0abd770a63cab73518977eb4e7f3cf84aa05aa7689c8dbe18896a2e8229d32f6e84c8033909c4b569ec9cc4cf6a445c82559ea205149a66ab99c89e4c319f5ced9ad4f702334eeb646b39b919a8d4fde562ba7135f28c86c751ee09b3028f555ae44a521f306ab76d3ef708e7f40d6e5c7cae35bb7622d953d709d8f83a05b80ff08aeb6f1a2537d113aedf5291a08932a64899b6d9e9be1f561e9fbc452ea18", 0x0, 0x0, 0x0) r1 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r1, 0xc0106924, &(0x7f00000001c0)) r2 = socket(0x18, 0x3, 0x0) ioctl$FIONREAD(r2, 0x8080691a, &(0x7f0000000100)) 3.552863037s ago: executing program 0 (id=957): mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x5200) open(&(0x7f0000000000)='./file0\x00', 0x80, 0x2) r0 = socket(0x11, 0x3, 0x0) sendto$unix(r0, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x0, 0x0, 0x0) fcntl$getflags(r0, 0x1) select(0x40, &(0x7f0000000080)={0x7fffffffffffffff, 0x8000, 0x7, 0x4, 0x4302d39d, 0x80000001, 0x8000000000000001, 0xa}, 0x0, 0x0, 0x0) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x5200) (async) open(&(0x7f0000000000)='./file0\x00', 0x80, 0x2) (async) socket(0x11, 0x3, 0x0) (async) sendto$unix(r0, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x0, 0x0, 0x0) (async) fcntl$getflags(r0, 0x1) (async) select(0x40, &(0x7f0000000080)={0x7fffffffffffffff, 0x8000, 0x7, 0x4, 0x4302d39d, 0x80000001, 0x8000000000000001, 0xa}, 0x0, 0x0, 0x0) (async) 3.240252531s ago: executing program 7 (id=958): r0 = openat$tty(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r1 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) (async) r2 = getpgid(0x0) ktrace(&(0x7f0000000080)='./file0\x00', 0x1, 0x4, r2) ioctl$DIOCMAP(0xffffffffffffffff, 0xc0106477, &(0x7f0000000100)={&(0x7f00000000c0)='./file0\x00', r0, 0x3}) (async) close(r1) r3 = open(&(0x7f0000000140)='./file0\x00', 0x100, 0x131) (async) r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000180), 0x200, 0x0) ioctl$BIOCSETF(r4, 0x80104267, &(0x7f0000000200)={0x6, &(0x7f00000001c0)=[{0xff, 0x2, 0x4}, {0xa8a0, 0x3, 0xc0, 0x6}, {0x7, 0x7, 0x1, 0x5}, {0x36, 0x2, 0x4, 0x9}, {0xfffd, 0xf, 0x3, 0xaa1}, {0x8, 0x1, 0xeb, 0x1}]}) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x10000) (async) fcntl$setstatus(r0, 0x4, 0x40) r7 = openat$tty(0xffffffffffffff9c, &(0x7f0000000280), 0x200, 0x0) ioctl$TIOCSPGRP(r7, 0x40047477, &(0x7f00000002c0)) (async) r8 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000300), 0x400, 0x0) ioctl$WSKBDIO_SETENCODING(r8, 0x80045710, &(0x7f0000000340)=0xe2a) ioctl$TIOCGTSTAMP(r3, 0x4010745b, &(0x7f0000000380)) mquery(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r5, 0x9) (async) ioctl$VNDIOCSET(r6, 0xc0384600, &(0x7f0000000440)={&(0x7f00000003c0)='./file0\x00', 0xffffffff, &(0x7f0000000400)='./file0\x00', 0x8}) getpeername$unix(r6, &(0x7f0000000480)=@abs, &(0x7f00000004c0)=0x8) r9 = getuid() lchown(&(0x7f0000000500)='./file0\x00', r9, 0xffffffffffffffff) (async) r10 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000540), 0x20000, 0x0) ioctl$BIOCSETIF(r10, 0x8020426c, &(0x7f0000000580)={'tap', 0x0}) (async) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4) (async) shutdown(r3, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)) r11 = shmget(0x3, 0x2000, 0x6e4, &(0x7f0000ffb000/0x2000)=nil) (async) r12 = getegid() getgroups(0x1, &(0x7f0000000600)=[0x0]) shmctl$IPC_SET(r11, 0x1, &(0x7f0000000640)={{0x3, r9, r12, r9, r13, 0x12c, 0x188}, 0x0, 0xfe00, r2, r2, 0x6, 0x4, 0xffffffffffffff81}) 3.239853462s ago: executing program 6 (id=959): sendmsg$unix(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f0000000080), 0x1c, 0x0}, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0xa) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x10000000000001}}) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc5005601, &(0x7f0000000000)={0x10, 0xfefffffffffffffd, [{&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000068000/0x4000)=nil, 0xffffffffffffffff}, {&(0x7f000067c000/0x3000)=nil}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x6}, {&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000430000/0x4000)=nil, 0x57ae}, {&(0x7f00003d5000/0x11000)=nil, &(0x7f0000ffb000/0x1000)=nil, 0x1}, {&(0x7f0000000000/0x2000)=nil, &(0x7f000036f000/0x2000)=nil, 0x2b}, {&(0x7f000054a000/0x1000)=nil, &(0x7f00003e2000/0x4000)=nil, 0xe04}, {&(0x7f0000504000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0xffdffffffffffffe}, {&(0x7f00000fc000/0x3000)=nil, &(0x7f0000826000/0x1000)=nil, 0x2}, {&(0x7f0000523000/0x1000)=nil, &(0x7f0000063000/0x13000)=nil}, {&(0x7f0000181000/0x3000)=nil, &(0x7f0000156000/0x1000)=nil, 0x6}, {&(0x7f0000506000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil}, {&(0x7f0000ad4000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x200000001}, {&(0x7f00004c1000/0x2000)=nil, 0x0, 0x2}, {&(0x7f00001cf000/0x4000)=nil, &(0x7f0000463000/0x3000)=nil}, {&(0x7f0000ff9000/0x4000)=nil, &(0x7f000028b000/0x4000)=nil, 0x7}], './file0\x00', 0x2000000}) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) open(&(0x7f0000000000)='./bus\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x18, 0x3, 0x0) setsockopt(r0, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) sendmsg$unix(r0, &(0x7f0000001700)={0x0, 0xffffffb3, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0) getsockname$inet6(r0, &(0x7f0000000040), &(0x7f00000000c0)=0xc) 2.830414887s ago: executing program 1 (id=960): ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) (async) sysctl$vfs_ffs(0x0, 0x0, &(0x7f0000000080)="06e6a186cf8257197b8d91e7c56e0abd770a63cab73518977eb4e7f3cf84aa05aa7689c8dbe18896a2e8229d32f6e84c8033909c4b569ec9cc4cf6a445c82559ea205149a66ab99c89e4c319f5ced9ad4f702334eeb646b39b919a8d4fde562ba7135f28c86c751ee09b3028f555ae44a521f306ab76d3ef708e7f40d6e5c7cae35bb7622d953d709d8f83a05b80ff08aeb6f1a2537d113aedf5291a08932a64899b6d9e9be1f561e9fbc452ea18", 0x0, 0x0, 0x0) (async) r0 = socket(0x1, 0x2, 0x0) setitimer(0x0, &(0x7f0000000140)={{0xb, 0x9}, {0x7ffffffffffffffd, 0x8}}, 0x0) (async) ioctl$FIONREAD(r0, 0xc0106924, &(0x7f00000001c0)) (async) r1 = socket(0x18, 0x3, 0x0) ioctl$FIONREAD(r1, 0x8080691a, &(0x7f0000000100)) socket(0x24, 0x2, 0x0) 2.828514398s ago: executing program 0 (id=961): syz_emit_ethernet(0x9f, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6603816a006906fe80000000000000000000001f0000bbfe8000000000000000000000000000aa4e234e2000", @ANYRES32=0x41424344, @ANYBLOB="08b3f30437d348b9c4e285c101010000004900"/28]) syz_emit_ethernet(0x9f, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6603816a006906fe80000000000000000000001f0000bbfe8000000000000000000000000000aa4e234e2000", @ANYRES32=0x41424344, @ANYBLOB="08b3f30437d348b9c4e285c101010000004900"/28]) (async) 2.570524022s ago: executing program 0 (id=962): sendto$unix(0xffffffffffffffff, &(0x7f00000000c0)="b10005030000040005000000070000", 0xf, 0x0, 0x0, 0x0) r0 = msgget$private(0x0, 0x40) msgrcv(r0, &(0x7f0000000000)={0x0, ""/86}, 0x5e, 0x2, 0x0) msgrcv(r0, &(0x7f00000002c0)={0x0, ""/130}, 0x8a, 0x3, 0x0) sysctl$kern(0x0, 0x0, &(0x7f00000000c0)="3bf2ee74", &(0x7f0000000080)=0x4, 0x0, 0x0) ioctl$TIOCSETA(0xffffffffffffffff, 0xc4504447, &(0x7f0000000000)={0x2, 0x8, 0x2, 0xfffffffe, "cd002200002181baab4c8c6d09b975390a000004", 0x8000, 0x3}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) sysctl$kern(&(0x7f0000000000)={0x1, 0x9}, 0x2, &(0x7f0000000100), &(0x7f0000000080), 0x0, 0x0) msgrcv(r0, &(0x7f00000001c0)={0x0, ""/61}, 0x45, 0x2, 0x800) msgsnd(r0, &(0x7f0000000380)={0x2, "fd793f696a6635797b36efaf89e1230eb50d85db7f7061"}, 0x1f, 0x0) sysctl$kern(&(0x7f00000000c0)={0x1, 0x31}, 0x4, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0x37) 2.290501083s ago: executing program 5 (id=963): r0 = kqueue() kevent(0xffffffffffffffff, 0x0, 0x40, 0x0, 0xa, 0x0) kevent(0xffffffffffffffff, &(0x7f0000000000)=[{{}, 0xfffffffffffffff9, 0x17, 0x10}], 0x29f, 0x0, 0x8001, 0x0) kevent(r0, &(0x7f0000000040)=[{{r0}, 0xfffffffffffffffa, 0x23, 0x20000008, 0x3c, 0x6}], 0x1, &(0x7f0000000100), 0x5, 0x0) kevent(r0, &(0x7f0000000180)=[{{r0}, 0xffffffffffffffff, 0x1, 0x80, 0x9, 0x7ff}], 0x2, 0x0, 0x2, 0x0) kevent(r0, &(0x7f0000000000), 0x3ff, 0x0, 0x8000800, 0x0) r1 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SPKRTONE(r1, 0x80085301, &(0x7f0000000040)={0x0, 0x81}) 1.400539096s ago: executing program 4 (id=964): semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x8982, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x150, 0x200}, 0x0, 0x0, 0xfffffffffffffffb}) syz_emit_ethernet(0x4e, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6603816a00180630fe8000000000000000000000000000bbfe8000000000000000000000000000aa4e234e20", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="600200bd9078000101000000"]) execve(0x0, &(0x7f0000000000)=[&(0x7f0000000100)='///'], 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mkdir(&(0x7f0000000100)='./file0\x00', 0x100) r0 = msgget$private(0x0, 0x144) chroot(&(0x7f0000000080)='./file0\x00') msgctl$IPC_SET(r0, 0x1, &(0x7f00000001c0)={{0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x1ff, 0x11, 0x0, 0x0, 0xffffffffffff75ba, 0xfffffffffffffff9, 0x8abd, 0x5}) msgrcv(r0, 0x0, 0x0, 0x3, 0x0) msgctl$IPC_RMID(r0, 0x0) msgsnd(r0, &(0x7f0000000040)={0x0, "dc9c41693ae4224b18433c99dc395b022906492ed16de3baf52d7d5b5b1d3e49ab4afe51885f9ca5125bce0bf988a2c581"}, 0x39, 0x800) 1.393941918s ago: executing program 5 (id=965): r0 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) clock_getres(0x2, &(0x7f0000000000)) (async) open(&(0x7f00000000c0)='./file0\x00', 0x80000000000206, 0xb7) (async) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x2, 0x40) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000180)="421433b4", 0x4}], 0x1, 0x80000000000) (async) ioctl$WSDISPLAYIO_GETSCREENTYPE(r0, 0xc028575d, &(0x7f0000000080)={0xdb31, 0x7, './file0\x00', 0x5, 0x2, 0x3, 0x5}) 1.392314487s ago: executing program 5 (id=966): ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) open(&(0x7f0000000080)='./file0\x00', 0x10, 0x9b) sysctl$net_inet_ip(&(0x7f0000000000)={0x4, 0x2, 0x0, 0x10}, 0x4, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x5c}) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0x80000011, 0x0}) sysctl$hw(&(0x7f0000001dc0)={0x6, 0x10}, 0x2, 0x0, 0x0, 0x0, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) (async) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) (async) open(&(0x7f0000000080)='./file0\x00', 0x10, 0x9b) (async) sysctl$net_inet_ip(&(0x7f0000000000)={0x4, 0x2, 0x0, 0x10}, 0x4, 0x0, 0x0, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a) (async) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x5c}) (async) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) (async) ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0x80000011, 0x0}) (async) sysctl$hw(&(0x7f0000001dc0)={0x6, 0x10}, 0x2, 0x0, 0x0, 0x0, 0x0) (async) 1.390247842s ago: executing program 0 (id=967): sysctl$vfs_nfs(&(0x7f0000000200)={0xa, 0x2, 0x2}, 0x3, &(0x7f0000000240)="abe64c4a7894f44a8984aa9330be938addb4759f5936a6e8809c7c8a29881127", &(0x7f0000000280)=0x20, &(0x7f0000000300)="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", 0xfd) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) link(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) poll(&(0x7f0000000000), 0x200000000000002c, 0x0) r0 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0xe) ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, 0x0) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, 0x0) ioctl$TIOCSETA(r0, 0xc1084425, &(0x7f0000000040)={0x3, 0x0, 0xfffffffe, 0x5, "0302859c00000000000000000000000200", 0x2000000, 0x5}) 1.253236682s ago: executing program 1 (id=968): ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc5005601, &(0x7f0000000000)={0x10, 0x0, [{&(0x7f0000347000/0x3000)=nil, &(0x7f0000663000/0x4000)=nil, 0x5}, {&(0x7f00005c9000/0x2000)=nil, &(0x7f0000826000/0x4000)=nil}, {&(0x7f0000060000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil}, {0x0, &(0x7f0000ffb000/0x3000)=nil, 0x1}, {&(0x7f000017c000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, 0xfffffffffffffffe}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x20006}, {0x0, 0x0, 0xfffffffffffffffc}, {&(0x7f0000ff0000/0xf000)=nil, &(0x7f0000131000/0x2000)=nil}, {&(0x7f000000d000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x2}, {&(0x7f00004cc000/0x4000)=nil, &(0x7f0000661000/0x3000)=nil}, {0x0, &(0x7f0000156000/0x1000)=nil, 0x14}, {&(0x7f0000ffd000/0x3000)=nil, &(0x7f00000a5000/0xe000)=nil}, {&(0x7f000038f000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x100000000}, {&(0x7f0000795000/0x9000)=nil, 0x0, 0x9bbf}, {&(0x7f00001cf000/0x4000)=nil, &(0x7f0000142000/0x4000)=nil}, {&(0x7f0000ffc000/0x2000)=nil, &(0x7f000013d000/0x1000)=nil}], './file0\x00'}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f0000000080), 0x1c, 0x0}, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x10000000000001}}) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x8) r0 = socket(0x11, 0x3, 0x0) r1 = socket(0x18, 0x2, 0x0) setsockopt(r1, 0x1000000000029, 0xb, &(0x7f0000000340), 0x0) sendto$unix(r0, &(0x7f0000000000)="b100000000000003ff003e0004000000000013fecea10500fef96ecf2ac72fd3357ae30200004e3039d2d236acf20b7804be38024991f7c8cf7f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f335c223e7d0c032bfa896443a41c18000000720fd38bfbb770c1f5a872c88106002ec5890400000000000000361b1257aea8c500002002fbfe0c2300008abfba0900000008e371a3f8343712051eeab7196fcbd80407000000c011200000", 0xb1, 0x0, 0x0, 0x0) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x20, 0x0) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000240)={'tap', 0x0}) ioctl$BIOCIMMEDIATE(r2, 0x80044270, &(0x7f0000000080)=0x7) syz_emit_ethernet(0x1000e, &(0x7f0000000280)=ANY=[]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) poll(&(0x7f0000000040)=[{r2, 0x2}], 0x1, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r3 = socket(0x18, 0x1, 0x0) close(r3) r4 = socket(0x18, 0x2, 0x0) setsockopt(r4, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) connect$unix(r3, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) sendmsg$unix(r3, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0) 1.251788279s ago: executing program 6 (id=969): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x100000000000000, 0xffffffffffffffff}) (async) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x100000000000000, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) (async) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) socket(0x18, 0x1, 0x0) (async) r0 = socket(0x18, 0x1, 0x0) mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x2, 0x5) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) (async) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$FIONREAD(r1, 0xc020691b, &(0x7f0000000100)) close(r0) r2 = socket(0x18, 0x2, 0x0) setsockopt(r2, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) socket$inet(0x2, 0x1, 0x0) (async) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt(r3, 0x6, 0x1, &(0x7f0000000280)="e9f2d779", 0x4) 1.240288087s ago: executing program 2 (id=970): r0 = socket(0x2, 0x1, 0x0) ioctl$FIONREAD(r0, 0xc0206925, &(0x7f00000001c0)) kevent(0xffffffffffffffff, &(0x7f0000000000)=[{{}, 0x6, 0x1, 0x22, 0x800000007, 0x800000000000}, {{r0}, 0xfffffffffffffff9, 0x88, 0x4, 0x7, 0x5}], 0x40, 0x0, 0xc, 0x0) r1 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000080), 0x20, 0x0) ioctl$KDDISABIO(r1, 0x20004b3d) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x11}, 0x4000000000000007, 0x0, 0x0, 0x0, 0x0) 700.421508ms ago: executing program 7 (id=971): msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x84, 0x1b}, 0x7297, 0x3d3, 0xffffffffffffffff, 0x0, 0x8000000000000000, 0x9, 0x0, 0xffe}) r0 = socket(0x19, 0x2, 0x6) r1 = socket(0x18, 0x2, 0x0) setsockopt(r1, 0x1000000000029, 0x9, &(0x7f0000000040)="03000000", 0x4) setsockopt(r1, 0x1000000000029, 0xc, &(0x7f0000000000), 0x14) close(r0) r2 = socket(0x800000018, 0x1, 0x0) bind$unix(r2, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) connect$unix(r0, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) r3 = socket(0x800000018, 0x1, 0x0) bind$unix(r3, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) 699.618319ms ago: executing program 2 (id=972): sysctl$net_inet_udp(&(0x7f0000000040)={0x4, 0x2, 0x11, 0x2}, 0x4, &(0x7f0000000500)="bb739455b7254e44287eefaa1885aa28e3a1393adebbfe4e13764042ffe1fd18975a823df33056d7f31c1dc49bee1d98cf0db0dafb0e2e06148bfd5651e46df22bd1cfdda37cfa72533ba4ea7b456e00ff77c001f16edac83f7f678188252ad9b3be56dc61db5088f07633afd66b3156888ad7321eee02cdb6aa8bda51adfee0ead001eb204d5ca80e49fc458416b3a29921c99924e6de9cd2d240d02ab44081a91c038b735bf5f0cdd5c53f844ba001d42c57f0e2e2770e38dbbf6997a941ebe6ef6674ad8db2eb6235319aedda03f130fe75061d38c0c826bbbaf0d02d7e3fc402e9833d2d78f4d64f57517431a0c68150324003927e886ad5d004e9cc54e40ba362bbfb2edcf185f8075206e91c496309081a1013a0c69621eb643caea9c100"/302, &(0x7f00000000c0)=0xffffffffffffff06, &(0x7f0000000200)="c9edd234cce540433688fad55bfe3753888b46100000007f623cc289aa49f6f937b755be3b44b6f7424d512f3939c80abac35d8f02461863cb425949a67a821386c518e80c2861b40dc7321133189da8b0c2fa2ef9cb656b258126097075fe29cca92160124df3a52dc9c7d0e0e2c7154ee84bad040af64c73fbb2187825c34889fe1ec8ab94ef1effaa588f0e9f571d4baeba5102389cc22723602905f3d83b4ecd3df8fb098a18883f162dea6a4ac31ff1379c791412cc52a0fbab6c3d1d333b81379d50d3f1059b1153bb2a0e8b73a82935205a533b309e970705639712b87765ee8dd6902f280f865b2277706226", 0xfffffc5a) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}, 0x10, 0x400) 480.620248ms ago: executing program 2 (id=973): r0 = getuid() setreuid(0xee00, r0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x2, 0x4) r2 = getgid() fchown(r1, 0x0, r2) lchown(&(0x7f0000000080)='./file0\x00', r0, r2) setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) r3 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) write(r3, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) lseek(r3, 0xffffffffffffffff, 0x2) mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) 0s ago: executing program 0 (id=974): r0 = openat$pci(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) ioctl$PCIOCWRITE(r0, 0xc0107008, &(0x7f00000005c0)={{0x10}, 0x1, 0x8003, 0x2}) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$BIOCGFILDROP(r1, 0x40044278, &(0x7f0000000200)) kernel console output (not intermixed with test programs): OpenBSD/amd64 (ci-openbsd-multicore-5.us-central1-b.c.syzkaller.internal) (tty00) Warning: Permanently added '10.128.0.246' (ED25519) to the list of known hosts. login: malloc(): allocation too large, type = 29, size = 16796513700 pckbd_enable: command error malloc(): allocation too large, type = 29, size = 16796513700 pckbd_enable: command error malloc(): allocation too large, type = 29, size = 16796513700 pckbd_enable: command error    OpenBSD/amd64 (ci-openbsd-multicore-5.us-central1-b.c.syzkaller.internal) (tty00) login: malloc(): allocation too large, type = 29, size = 16796513700  : 4(2%!$ .&3)/' (59444) %8)43 7)4( 34!453 -1  : 4(2%!$ .&3)/' (92599) %8)43 7)4( 34!453 -1  : 4(2%!$ .&3)/' (37814) %8)43 7)4( 34!453 -1  : 4(2%!$ .&3)/' (16673) %8)43 7)4( 34!453 -1  : 4(2%!$ .&3)/' (412245) %8)43 7)4( 34!453 -1  : 4(2%!$ .&3)/' (433337) %8)43 7)4( 34!453 -1  : 4(2%!$ .&3)/' (287750) %8)43 7)4( 34!453 -1  : 4(2%!$ .&3)/' (314734) %8)43 7)4( 34!453 -1  : 4(2%!$ .&3)/' (319330) %8)43 7)4( 34!453 -1  : 4(2%!$ .&3)/' (380128) %8)43 7)4( 34!453 -1  : 4(2%!$ .&3)/' (225713) %8)43 7)4( 34!453 -1  : 4(2%!$ .&3)/' (442035) %8)43 7)4( 34!453 -1  : 4(2%!$ .&3)/' (487315) %8)43 7)4( 34!453 -1  : 4(2%!$ .&3)/' (287812) %8)43 7)4( 34!453 -1  : 4(2%!$ .&3)/' (307784) %8)43 7)4( 34!453 -1  : 4(2%!$ .&3)/' (320811) %8)43 7)4( 34!453 -1  : 4(2%!$ .&3)/' (104445) %8)43 7)4( 34!453 -1  : 4(2%!$ .&3)/' (93033) %8)43 7)4( 34!453 -1  : 4(2%!$ .&3)/' (459208) %8)43 7)4( 34!453 -1  : 4(2%!$ .&3)/' (92657) %8)43 7)4( 34!453 -1 0#+"$%.!",%: #/--!.$ %22/2 0#+"$%.!",%: #/--!.$ %22/2 9* : 4(2%!$ .&3)/' (284607) %8)43 7)4( 34!453 -1  : 4(2%!$ .&3)/' (273532) %8)43 7)4( 34!453 -1  : 4(2%!$ .&3)/' (338298) %8)43 7)4( 34!453 -1  : 4(2%!$ .&3)/' (72203) %8)43 7)4( 34!453 -1 -!,,/#(): !,,/#!4)/. 4// ,!2'%, 490% = 6, 3):% = 287762939904 OpenBSD/amd64 (ci-openbsd-multicore-5.us-central1-b.c.syzkaller.internal) (tty00) login: pckbd_enable: command error pckbd_enable: command error malloc(): allocation too large, type = 29, size = 16796513700 vm_create: uvm_map failed: 12 pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error Ý1%Mß›a˜QAšü»w¬×‚ÉÇ<2‚¡`½ðd‚~GÖ‰-ÞiÃ:@m¤E›¦Á¿O½Þ¡ b¥tÚX·ˆBUøéÃ) ®wˆËaß®ÿàÝqBœµ±j»túžaËåЫñ¾öiU1Mmalloc(): allocation too large, type = 29, size = 16796513700 uvm_fault(0xfffffd805da267c8, 0x0, 0, 1) -> e fatal page fault in supervisor mode trap type 6 code 0 rip ffffffff8143d5b8 cs 8 rflags 10207 cr2 0 cpl 0 rsp ffff8000363e7f50 gsbase 0xffffffff837e0ff0 kgsbase 0x0 panic: trap type 6, code=0, pc=ffffffff8143d5b8 Starting stack trace... panic(ffffffff833c5207) at panic+0x1d0 kerntrap(ffff8000363e7ea0) at kerntrap+0x30b alltraps_kern_meltdown() at alltraps_kern_meltdown+0x7b dt_ioctl_record_stop(ffff800010fd8000) at dt_ioctl_record_stop+0x108 dtclose(21e5f,81,2000,ffff8000ffffc538) at dtclose+0x109 spec_close(ffff8000363e8050) at spec_close+0x466 VOP_CLOSE(fffffd806ba49710,81,fffffd80097fb888,ffff8000ffffc538) at VOP_CLOSE+0x132 vn_closefile(fffffd806b6e41d0,ffff8000ffffc538) at vn_closefile+0x12b fdrop(fffffd806b6e41d0,ffff8000ffffc538) at fdrop+0x121 closef(fffffd806b6e41d0,ffff8000ffffc538) at closef+0x192 fdfree(ffff8000ffffc538) at fdfree+0x116 exit1(ffff8000ffffc538,0,0,1) at exit1+0x576 sys_exit(ffff8000ffffc538,ffff8000363e83c0,ffff8000363e8310) at sys_exit+0x1a syscall(ffff8000363e83c0) at syscall+0xb17 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x799f710984f0, count: 242 End of stack trace.