last executing test programs: 6.852579057s ago: executing program 0 (id=465): select(0x40, &(0x7f0000000000)={0xfffffffffffffffd, 0x0, 0xdc4, 0x564, 0x9ce8, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x2, 0x2, 0x0) setuid(0xffffffffffffffff) getgid() r1 = socket(0x2, 0x400000000002, 0x0) dup2(r1, r0) bind(r0, &(0x7f0000000000), 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mknod(&(0x7f0000000040)='./bus\x00', 0x6000, 0xe02) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000140)=[{&(0x7f0000000340)=""/175, 0xaf}], 0x1, 0x0) r3 = kqueue() ioctl$FIOASYNC(r3, 0x8004667d, &(0x7f00000000c0)=0xffffffff) 6.852318081s ago: executing program 7 (id=466): sysctl$net_pipex(&(0x7f0000000000)={0x4, 0x12, 0x1}, 0x3, 0x0, 0x0, 0x0, 0x0) sysctl$net_inet6_icmp6(&(0x7f0000000140)={0x4, 0x18, 0x3a, 0x8}, 0x4, &(0x7f0000000240)="c1707e8d", &(0x7f0000000300)=0x4, &(0x7f0000000340), 0x0) (async) sysctl$net_inet6_icmp6(&(0x7f0000000140)={0x4, 0x18, 0x3a, 0x8}, 0x4, &(0x7f0000000240)="c1707e8d", &(0x7f0000000300)=0x4, &(0x7f0000000340), 0x0) 6.330094268s ago: executing program 7 (id=470): acct(0x0) mknod(0x0, 0x2000, 0x1e5f) r0 = socket(0x2, 0x1, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r1 = socket(0x2, 0x1, 0x0) ioctl$FIONREAD(r1, 0xc0206923, &(0x7f00000001c0)) ioctl$FIONREAD(r0, 0x8040691a, &(0x7f00000001c0)) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x3, 0xffffffffffffffff) munmap(&(0x7f00000f2000/0x3000)=nil, 0x3000) r4 = socket$inet(0x2, 0x2, 0x0) close(r4) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000440)='(', 0x1}], 0x1) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200, 0x4) ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9f, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmmsg(r5, &(0x7f0000000080)={&(0x7f0000000100)={&(0x7f0000000240)=@un=@file={0x0, ""/529}, 0x213, 0x0, 0x0, 0x0}}, 0x3, 0x0, 0x0) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r6, 0x0, 0x9, &(0x7f0000000240)="ea00000100000000", 0xc) setsockopt$inet_opts(r4, 0x0, 0x200000000000c, &(0x7f0000000240)="ea00aa6600000000", 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setsockopt$inet_opts(r4, 0x0, 0xd, &(0x7f0000000240)="ea00aa5f00000000", 0x8) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x80000000, 0x6b881aef, 0x2000007, 0xfe, 0x80000001, 0xc, 0x9, 0x10, [{0x8, 0x7, 0x4, 0x6}, {0x7, 0x4, 0x8, 0x80000007}, {0x8, 0x6, 0x0, 0x401}, {0x9, 0x2f2d, 0xe, 0xffffffff}, {0x7, 0x200326, 0x2800, 0x7}, {0x2, 0xff, 0x3, 0x99}, {0xce1, 0xb28c, 0x4f8, 0x2}, {0x6, 0x801, 0x80000c, 0x7}, {0x2, 0x82, 0x5, 0x8}, {0x4007, 0x100, 0xd1a, 0x108a}, {0x1e7, 0x10001, 0xc, 0x6}, {0x800, 0x9, 0x8, 0x9}, {0xb92, 0x7, 0x7a, 0x8}, {0x29a7171a, 0x8, 0x1, 0x4}, {0xc, 0x7, 0x4001, 0xfffffffe}, {0xb27f, 0x1, 0x1002, 0x30004}]}) socket(0x2a, 0x4, 0x9c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write(r3, &(0x7f0000000100), 0xfffffe5d) 6.081016889s ago: executing program 5 (id=475): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x10, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) preadv(r1, &(0x7f0000000080)=[{&(0x7f0000000480)=""/240, 0xfffffc47}, {&(0x7f00000000c0)=""/179, 0xfdac}, {&(0x7f00000002c0)=""/229, 0xe2}], 0x50, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4, 0x10, r1, 0x0) munmap(&(0x7f0000800000/0x800000)=nil, 0x800000) r2 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000180)="cdd0bed3159f07000000abf735bd3794417a80412b81b220a2be41ca6ac25aa64e6f4c6254782bc2509299dbdae9256f81d4bc6884294435997ad58781301939c11c79f9285f102a174c1e8c2325a01286d50b857ed624be483585bb4ec3e7141fe4a31cd937c362a80b082e30965d9dc4de60565e096408ab7bdc6fe9cb8d6fdb4c838068edf27f18dd8cb931e8225650487847e70209f5b880a2c0a74ca92ebf3b83e7e5396c122d0c23f9400b67dc6995b283dfc1525f1d0846ad0418addbc368c96dd07eb13bbb11cf64bc76a3a4c1ba4bd650e645", 0xd7}], 0x1) execve(0x0, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000240)="258b300ad15114aa764dce08004c659940d0c44c11920d07d8d37039aa23", 0x1e}], 0x1, 0x0, 0x0, 0xb}, 0x2) sysctl$kern(0x0, 0x0, &(0x7f0000000300)="e26cc7058037c3fafa9d401aa841d0cb7a62f11b", &(0x7f0000000080)=0x14, 0x0, 0x0) setrlimit(0x8, &(0x7f0000000980)={0xb, 0x54}) mmap(&(0x7f0000faf000/0x3000)=nil, 0x3000, 0x2, 0x12, r0, 0x2) r3 = syz_open_pts() close(r3) r4 = syz_open_pts() writev(r3, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) ioctl$TIOCSETA(r4, 0x802c7414, &(0x7f0000000040)={0xfffffffe, 0xd, 0x8000003, 0x5, "001a3cfcf6c07c79eb000000e7ffffff000b00", 0x544, 0xc04}) select(0x40, &(0x7f0000000040)={0x2, 0x81, 0x7, 0x1, 0xffffffffffffffa5, 0x5, 0x3, 0xaeb4}, &(0x7f0000000080)={0xde4, 0x7, 0x0, 0x1, 0x2, 0x8, 0x0, 0x4}, 0x0, 0x0) r5 = socket(0x11, 0x3, 0x0) sendto$unix(r5, &(0x7f0000000140)="b1000502000000000000000001010000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc256699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x404, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) read(r4, &(0x7f0000000200)=""/255, 0xff) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) r6 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x40, 0x0) seteuid(0xffffffffffffffff) ioctl$BIOCLOCK(r6, 0x20004276) ioctl$BIOCGRTIMEOUT(r6, 0x4010426e, &(0x7f00000001c0)) syz_emit_ethernet(0x1000e, &(0x7f0000000280)=ANY=[]) 6.007787984s ago: executing program 3 (id=478): open(&(0x7f0000000080)='./file0\x00', 0x0, 0x4) mknod(&(0x7f00000000c0)='./file0\x00', 0x2000, 0x40000802) r0 = open(&(0x7f0000000100)='./file0\x00', 0x20, 0x174) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_opts(r1, 0x0, 0x64, &(0x7f0000000240)="01000000", 0x4) setsockopt(r1, 0x0, 0x66, 0x0, 0x0) ioctl$TIOCGWINSZ(r0, 0x40087468, &(0x7f00000002c0)) r2 = socket(0x1, 0x1, 0x2) r3 = fcntl$dupfd(r2, 0x2, 0xffffffffffffffff) r4 = kqueue() kevent(r4, &(0x7f0000000380)=[{{r3}, 0xfffffffffffffffb, 0x51, 0xf0000000, 0x2ef5, 0x6}], 0x1005, 0x0, 0x8, 0x0) r5 = kqueue() kevent(r5, &(0x7f00000000c0), 0x30, 0x0, 0x158, 0x0) r6 = socket(0x11, 0x3, 0x0) setsockopt(r6, 0x11, 0x2, &(0x7f0000001680), 0x0) acct(0x0) syz_emit_ethernet(0x1a2, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd60004b00016c2b02fe8000000000000000000000000000bb607ba243b19d8e9ea241f577704405b633000438680000002b63"]) acct(&(0x7f0000000000)='./file0\x00') semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000000)={{0x81fe, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffff}, 0x557a, 0x7, 0x1}) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f00000000c0)={0x3, 0x0, 0x1ff, 0xfffffffffffffffc}) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r7 = socket(0x18, 0x1, 0x0) close(r7) r8 = socket(0x18, 0x2, 0x0) setsockopt(r8, 0x1000000000029, 0x9, &(0x7f0000000040)='\x00\x00\x00\x00', 0x4) setsockopt(r8, 0x1000000029, 0x2e, 0x0, 0x0) connect$unix(r7, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 5.260071491s ago: executing program 2 (id=484): r0 = open(&(0x7f0000000140)='./file1\x00', 0x78e, 0x8) mmap(&(0x7f000015a000/0x3000)=nil, 0x3000, 0x2, 0xa011, r0, 0xfffffffffffffd) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x0) rename(&(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000480)='./file1\x00') setrlimit(0x1, &(0x7f0000000180)={0x200, 0x95f}) r1 = getpid() r2 = socket(0x18, 0x2, 0x0) close(r2) r3 = socket(0x800000018, 0x3, 0x0) setsockopt$sock_int(r3, 0xffff, 0x1000, &(0x7f0000000000)=0x7, 0x4) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x637e) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x8, 0x2000000000000004}, 0x0, 0x0, 0x0) kqueue() kevent(r0, &(0x7f0000000340), 0x8, &(0x7f0000000380)=[{{r3}, 0xffffffffffffffff, 0xa0, 0x10, 0xfffffffffffffffb, 0x80000000}, {{r0}, 0x0, 0x1, 0x40, 0x7, 0x4000006e}, {{r2}, 0xfffffffffffffff8, 0xa0, 0x40, 0x4, 0x5}], 0x15, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x40, 0x100) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x803, 0xfffffffe, 0x7, 0x101, 0x4, 0x80001001, 0x9, 0x10, [{0x0, 0x7, 0x4, 0x71000}, {0x7, 0x4, 0x8, 0x7}, {0x6, 0xf83, 0x100, 0xaf9}, {0x5, 0x2, 0x7}, {0x6, 0x7f, 0xe, 0x7}, {0x2, 0x7, 0xffffffff, 0x9c}, {0x80000cdf, 0xfffffffd, 0x3, 0x6d}, {0x2000a, 0x803, 0x14, 0x8}, {0x2, 0x81, 0x1, 0xb}, {0x6, 0x8001, 0x3, 0x4089}, {0x4, 0xfffb, 0x9, 0xaed}, {0x805, 0x1, 0x8, 0x5}, {0xe0, 0x4, 0x5, 0x3ff}, {0x80000001, 0xfffffffa, 0x6, 0x100007}, {0x6, 0x7, 0x7}, {0x0, 0x1, 0x4, 0x30000}]}) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x8, 0x2000000000000004}, 0x0, 0x0, 0x0) sysctl$net_inet_ipip(&(0x7f0000000100)={0x4, 0x2, 0x4, 0x1}, 0x4, 0xffffffffffffffff, &(0x7f0000000140)=0xffffff7b, 0x0, 0xc) ioctl$FIONBIO(r4, 0x82907003, &(0x7f0000000140)=0x2) ioctl$FIONBIO(r4, 0x82907003, &(0x7f0000000140)=0x1) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x7fffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x22, 0x411}, 0x4, 0x10021, r1, r1, 0x4000000000, 0x2, 0x4b78774a, 0xe63}) bind$unix(r3, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) connect$unix(r2, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) ioctl$FIONREAD(r3, 0x4004667f, &(0x7f0000000a80)) setgroups(0x0, 0x0) ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x510, r1) setuid(0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) syz_emit_ethernet(0x4e, &(0x7f00000001c0)=ANY=[]) 5.258784445s ago: executing program 3 (id=485): mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x637e) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x8, 0x2000000000000004}, 0x0, 0x0, 0x0) r0 = kqueue() kevent(r0, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000200)=@file={0xd570d0466b6018f, './file0\x00'}, 0xa) shutdown(r1, 0x0) sendmsg$unix(r1, &(0x7f0000000080)={&(0x7f0000000040)=@file={0x170, './file0\x00'}, 0xa, 0x0}, 0xe) r2 = open(&(0x7f0000000040)='./file0\x00', 0x40, 0x100) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x1, 0x7, 0x101, 0x4, 0x80000001, 0x8, 0x10, [{0x0, 0x7, 0x4, 0x71000}, {0x7, 0x4, 0x8, 0x7}, {0x6, 0xf83, 0x100, 0xaf9}, {0x5, 0x800, 0x7}, {0x6, 0x80000002, 0xe, 0x7}, {0x2, 0x1, 0xffffffff, 0x9c}, {0x80000cdf, 0xfffffffd, 0x3, 0x6d}, {0x2000a, 0x803, 0x14, 0x8}, {0x2, 0x81, 0x1, 0xb}, {0x6, 0x8001, 0xc7, 0x89}, {0x4, 0xfffb, 0x9, 0xaeb}, {0x803, 0x40, 0x8, 0x5}, {0xe0, 0x4, 0x5, 0x3ff}, {0x29a71717, 0xfffffffa, 0x6, 0x100006}, {0xb, 0x7, 0x7}, {0x0, 0x1, 0x4, 0x30000}]}) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x8, 0x2000000000000004}, 0x0, 0x0, 0x0) open$dir(&(0x7f0000000300)='.\x00', 0x0, 0x0) kqueue() ioctl$FIONBIO(r2, 0x82907003, &(0x7f0000000140)=0x2) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) ioctl$FIONBIO(r2, 0x82907003, &(0x7f0000000140)=0x1) ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file2\x00', 0x2, 0x3, 0xfff4, 0x1, 0x9, 0x2d, 0x80000008, 0x1, 0x2, 0x644, 0x4000000000f19}) mknod(&(0x7f0000000000)='./file1\x00', 0x2000, 0x637d) r3 = open(&(0x7f0000000800)='./file1\x00', 0x800, 0x120) ioctl$FIONBIO(r3, 0x82907003, &(0x7f0000000140)=0x1) 4.991736527s ago: executing program 1 (id=489): pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) select(0x40, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, &(0x7f00000001c0)={0xff, 0x0, 0x0, 0x5, 0xfffffffffffffff7, 0x0, 0xa}, 0x0, 0x0) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/50, 0xfd9f}], 0x2f) close(r0) r2 = open$dir(&(0x7f0000000100)='.\x00', 0x0, 0x0) chmod(&(0x7f0000000040)='.\x00', 0x35e) setuid(0xee01) open$dir(&(0x7f0000000b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x0) symlinkat(&(0x7f0000000480)='./file0\x00', r2, &(0x7f0000000180)='./file1\x00') rename(&(0x7f0000000e80)='./file1\x00', &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') writev(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="19", 0x3a4e1e905c56cdb7}], 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r4, r3) poll(&(0x7f0000000080)=[{r5, 0xab6cc3d7ffaa0897}], 0x1, 0x0) 4.767913306s ago: executing program 0 (id=491): r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x200, 0x0) r1 = getpid() setgroups(0x0, 0x0) ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x510, r1) setuid(0xffffffffffffffff) setrlimit(0x1, &(0x7f0000000140)={0x5, 0xd1b}) nanosleep(&(0x7f0000000100)={0xfffffffffffffffe, 0x3}, 0xfffffffffffffffe) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc5005601, &(0x7f0000000000)={0x10, 0x0, [{&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil}, {&(0x7f00006ac000/0x4000)=nil}, {&(0x7f0000060000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x7}, {0x0, &(0x7f0000ffb000/0x3000)=nil, 0x10000}, {0x0, &(0x7f0000ffb000/0x1000)=nil, 0x1}, {&(0x7f0000000000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil}, {0x0, 0x0, 0xfffffffffffffffc}, {&(0x7f000096c000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x92a}, {&(0x7f0000ad4000/0x2000)=nil, &(0x7f0000826000/0x1000)=nil, 0xfff}, {&(0x7f00006e2000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x7}, {0x0, &(0x7f0000156000/0x1000)=nil, 0x1ff}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil}, {0x0, &(0x7f00001ce000/0x3000)=nil}, {&(0x7f00001cd000/0x4000)=nil, &(0x7f00006ae000/0x400000)=nil, 0x7}, {&(0x7f00007c0000/0x1000)=nil, &(0x7f00006af000/0x2000)=nil}, {0x0, &(0x7f000093b000/0x4000)=nil}], './file0\x00'}) sendto$unix(0xffffffffffffffff, &(0x7f00000000c0)="b10005010000", 0x6, 0x408, 0x0, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) r2 = socket(0x18, 0x1, 0x81) sendto$unix(r2, &(0x7f00000000c0)="b100050160000004000000000700000012df8106cfa10500fef96ecfc73fd3357ae36caa0416fa4f376b36acf00b7804be301e4991f7c8cf5f3fc303ebe1aa5323edeb51e2f0ca3ebbc257169ed0d44a699a1f133ea7acb5d602000d7d026ba8af6300371c2102000000720fd38bfbb770c1f5a8aec872ea772ec58904000000008d9800361b1257aba8c500002012010000de5000"/177, 0xb1, 0x0, 0x0, 0x0) r3 = syz_open_pts() r4 = socket$inet(0x2, 0x8003, 0x0) setsockopt(r4, 0x0, 0x1f, &(0x7f0000000200), 0x0) readv(r4, &(0x7f0000000180)=[{&(0x7f0000000000)=""/74, 0x4a}], 0x1) mkdir(&(0x7f00000000c0)='./file0\x00', 0x180) setsockopt$inet_opts(r4, 0x0, 0x1, &(0x7f0000000980)="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", 0x1000) faccessat(r0, &(0x7f0000000940)='./file0\x00', 0x2, 0x1) sysctl$net_inet_carp(&(0x7f0000000080)={0x4, 0x2, 0x6, 0x1}, 0x4, 0x0, 0x0, &(0x7f0000000140)="e17fffff", 0x4) ioctl$TIOCSETAW(r3, 0x802c7415, &(0x7f00000002c0)={0xd, 0x4, 0x1000, 0x0, "e0cb19b2ede965516f297af744a9f60dd871dc3a", 0xf, 0x4}) r5 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f00000006c0)=@abs={0x1, 0x0, 0x0}, 0x8) r6 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_int(r6, 0xffff, 0x1, 0x0, 0x0) close(r5) r7 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) ioctl$WSKBDIO_SETENCODING(r7, 0x80045710, &(0x7f00000003c0)=0xf) sendmsg$unix(r5, &(0x7f0000000200)={&(0x7f0000000100)=@abs={0x0, 0x0, 0x2}, 0x8, &(0x7f0000000240)=[{&(0x7f0000000300)="31f4b7419feb43867585d0b15fd5667262ed61cf9c61df9a37c5c27dea72141a5790832830079c604f47fdca0c8a026699f6b891e23abe6b6f82303d022e9edd8af4ebb17e22d3519371df05646f1b242b09ba26112e7349319c25a9a1cb1dfee38f22925d6579ebec34fac17ecaebeb9857fa56124facc519032ed351de6918b27f621280382e7de7d48e", 0x8b}, {&(0x7f0000000400)="f7f59b734a9dcdfab5eb7e5f12e0ee67ee02516204a2425ee7a63078e2912096b120f0f490bcf44646eb89598247d86dda5c81e9b57493502d1f71bd0dad2b092cc380a4d25a8e074428e775d1fa3f757b0b8b42a4957e2874304381a414f9758dd9b44285db94aabd8b4b5935697f5e1f6dba92b8ecfae7325cdecdbcea6777188c1a37621c8d38094bfbf5b207ad02ad64d400d7487b", 0x97}, {&(0x7f00000001c0)="057e3295ace6c4ca64ef07d44bda1884d33d133870fd1a252b367b535208ab96db4bd9e799e85149766b535181c61ff9e3", 0x31}, {&(0x7f00000004c0)="49c7a56c94c1d968159c31c59cd60e40edeab5c6e9967851b6f78926f2612b7597ccee659e8f81787f2ece1acb9447029ea25c1c60fb91ba78b9eea52d028554a300f8ffff5723c61b3d81c351b56968953e348b4e80bfbc5211db86493f4f225290dd33e611f33e8ab4939efa423369c2ef65ce166309f3d16cd375f739851bb043626e3def107b09e8ffacb2c85cb2399344011819edfdb4f5e8516d6b6798ab8465bb509e57cd0773fc02c424601a52bfa6b2eef24a243dcfe51eb27c6687cee4f052f143396e9b4c309b33f5529a5f1b8f8e3025fe0b48259b352e7ae93b", 0xe0}, {&(0x7f0000001980)="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", 0x15c}], 0x5, 0x0, 0x0, 0x40e}, 0x0) socket(0x18, 0x1, 0x0) 4.767416782s ago: executing program 7 (id=492): r0 = openat$tty(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TIOCEXCL(r0, 0x2000740d) syz_emit_ethernet(0xe1, &(0x7f0000000040)={@broadcast, @broadcast, [{[], {0x8100, 0x5, 0x0, 0x3}}], {@ipv6={0x86dd, {0x3, 0x6, "4daedb", 0xa7, 0x2, 0x9, @mcast2, @mcast2, {[@hopopts={0xff, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0x9}, @enc_lim={0x4, 0x1, 0xa9}, @pad1, @ra={0x5, 0x2, 0x6}, @ra={0x5, 0x2, 0x1}]}, @routing={0x0, 0x4, 0x0, 0x7, 0x0, [@local={0xfe, 0x80, '\x00', 0x0}, @empty]}, @routing={0xff, 0x8, 0x0, 0x4, 0x0, [@loopback, @loopback, @loopback, @rand_addr="4733424775b3e0591902e10b0420b975"]}], @icmpv6=@ni={0x7, 0x0, 0x0, 0x8001, 0x8, 0x84d, "96696a4d770c21"}}}}}}) getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000140)={0x0, 0x0}, &(0x7f0000000180)=0xc) r2 = getuid() setreuid(r1, r2) r3 = syz_open_pts() ioctl$TIOCGTSTAMP(r3, 0x4010745b, &(0x7f00000001c0)) mknod(&(0x7f0000000200)='./file0\x00', 0x80, 0x3) ioctl$BIOCSETWF(0xffffffffffffff9c, 0x80104277, &(0x7f0000000280)={0x3, &(0x7f0000000240)=[{0x5, 0x80, 0x7f, 0x2}, {0x7fff, 0x99, 0x9, 0x7d}, {0x9b, 0x2, 0x4, 0x3e}]}) r4 = socket$inet(0x2, 0x8000, 0x41) recvmsg(r4, &(0x7f0000000640)={&(0x7f00000002c0)=@in6, 0xc, &(0x7f00000005c0)=[{&(0x7f0000000300)=""/157, 0x9d}, {&(0x7f00000003c0)=""/123, 0x7b}, {&(0x7f0000000440)=""/235, 0xeb}, {&(0x7f0000000540)=""/123, 0x7b}], 0x4, &(0x7f0000000600)}, 0x840) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt(r6, 0x3, 0xffffff80, &(0x7f00000006c0)="e0f718bdda84503e479e175a9f57a2e862bb6fa7af48965a0799ba4a54cb8a5b129770e218d49c6e9644e652be7ba654ff00f00b41aa5cc2b453f8aca44fe89217b9c7c754c28abca12cbc918247ef6ba209045fdcdc48c7c043309580d2396d9a94d0d87af821c75e5c8f058a525bf834fa73d86624acc0ca4ad0bf3d8df73355685b8b4491f54874c4be36b1a163c61d38b0e7f5201fe478f846d261f5e582a89aa83fa409fce7d73437eaae8b6ef1b5b6fb5cc0e314b80527e7c9fefbf7538ecc2bb4692901a311873e22edbe8f9765c6be8962fc67f9c63cd50f8d254c3b8a5a7010ad664e2392a57243dc4d985c67312d221997", 0xf6) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2) sendmsg$unix(r6, &(0x7f0000000a40)={&(0x7f00000007c0)=@file={0x1, './file0\x00'}, 0xa, &(0x7f00000009c0)=[{&(0x7f0000000800)="4c9bee4fdf778e6c14035112b4474aec75dc8840411cd85ec4a9b6f9a38f76b6f30f79be9a084caaea2b39d638af21af1ccab9c99f492f1c2507524227d2efe474314463a0096d8315097f95510495a2327ad23eb10b2fc58980e81ea1d52a0b2c25da5f2318f687186a486ebb162b17c1dde0a0588fc98bed780ef390c110b690cf7efa8a69d49d0dcdc13334810a41d87d92cb49815ab68fab3c98f9df73d1f3a7e507620e118cb41267ecee50a74bbdb0cd050a2eea9bfad8d784b1a9625e80", 0xc1}, {&(0x7f0000000900)="1b6d62dbdd7a49def93708e06265d83347e34a016407b6b117bbc927abe554c9c4fbe8e3efc989ec22d3842f2b180c458c6e411834d2db097d449e1bdf6a704b10b750c3184183e87f938f0c5ecded69070463680390eb21666c70d90d103f56d60efd01ec8b6b53f250c77c932c3c6671faeac5a05f18e00107c3d0009c5262c0804047d9008ca2806f71073f14", 0x8e}], 0x2, &(0x7f0000000a00), 0x0, 0x4}, 0x400) r7 = openat(0xffffffffffffffff, &(0x7f0000000a80)='./file0\x00', 0x1, 0x30) ioctl$TIOCMGET(r7, 0x4004746a, &(0x7f0000000ac0)) ioctl$TIOCSETVERAUTH(r3, 0x8004741c, &(0x7f0000000b00)=0x2) listen(r6, 0x6) ioctl$BIOCSETIF(0xffffffffffffff9c, 0x8020426c, &(0x7f0000000b40)={'tap', 0x0}) getsockopt$sock_cred(r7, 0xffff, 0x1022, &(0x7f0000000b80)={0x0}, &(0x7f0000000bc0)=0xc) fcntl$setown(r5, 0x6, r8) syz_extract_tcp_res(&(0x7f0000000c00), 0x2, 0x3) socket$inet(0x2, 0x1, 0xf) symlink(&(0x7f0000000c40)='./file0\x00', &(0x7f0000000c80)='./file0\x00') kqueue() syz_extract_tcp_res$synack(&(0x7f0000000cc0), 0x1, 0x0) ioctl$WSDISPLAYIO_GVIDEO(r7, 0x40045744, &(0x7f0000000d00)) shmctl$IPC_RMID(0x0, 0x0) 4.359842691s ago: executing program 2 (id=493): openat$pf(0xffffffffffffff9c, &(0x7f0000000200), 0x100, 0x0) r0 = syz_open_pts() ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000040)={0x3, 0x8cb, 0xfffffffe, 0xffff7ffe, "ffb1251242758d00000300", 0x40, 0x3effb}) ioctl$TIOCSTAT(r0, 0x20007465, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = kqueue() kevent(r1, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000000)={0x7f, 0x6372}) ioctl$TIOCSETA(r0, 0xc148445e, &(0x7f0000000000)={0x52a9, 0x3, 0xb, 0x100, "001d00ff2000", 0x800008, 0x1fd}) readv(r1, &(0x7f0000001340)=[{&(0x7f0000000080)=""/87, 0x57}, {&(0x7f0000000100)=""/237, 0xed}, {&(0x7f0000000240)=""/7, 0x7}, {&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000001280)=""/123, 0x7b}, {&(0x7f0000001300)=""/50, 0x32}], 0x6) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x7e1b21b5f00cb051, 0x0) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) ioctl$BIOCSETF(r2, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x7, 0x42, 0x1, 0xa00440}, {0x2, 0x85, 0xd9, 0xa}, {0x16, 0x3, 0xdb, 0xb9800}]}) syz_emit_ethernet(0x36, &(0x7f00000000c0)=ANY=[]) sysctl$kern(&(0x7f0000000000)={0x1, 0x4b}, 0x2, &(0x7f0000001400)="e89f0fb0", &(0x7f0000000040)=0x4, &(0x7f00000001c0), 0x0) 4.274298652s ago: executing program 5 (id=496): r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) getegid() open(0x0, 0x80000000000206, 0x4ebfac6bbaf7864) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f0000000140)=@abs={0x1, 0x0, 0x1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x10000000000002}}) r1 = socket(0x18, 0x3, 0x0) mprotect(&(0x7f00003ba000/0x2000)=nil, 0x2000, 0x2) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) r2 = socket(0x1, 0x2, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x6000, 0xe02) setreuid(0xee00, 0x0) r3 = getuid() seteuid(r3) stat(&(0x7f0000000080)='./file0\x00', 0xfffffffffffffffe) ioctl$FIONREAD(r2, 0xc0106924, &(0x7f00000001c0)) ioctl$FIONREAD(r1, 0x80146950, &(0x7f0000000100)) r4 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x8, 0x4a) setgid(0xffffffffffffffff) setgroups(0x0, 0x0) fchmod(r4, 0xf3) setuid(0xffffffffffffffff) mkdir(&(0x7f00000002c0)='./file0\x00', 0x40) chmod(&(0x7f00000003c0)='./file0\x00', 0x99) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) setsockopt(0xffffffffffffffff, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd", 0x7) ioctl$TIOCSETA(r0, 0xc0284457, 0x0) 4.272027761s ago: executing program 2 (id=497): sysctl$net_inet_esp(&(0x7f0000000000)={0x4, 0x2, 0x32, 0x1}, 0x4, 0x0, 0x0, 0x0, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x2, 0x2, 0xfe}, {0x1c7b, 0x0, 0x3f, 0x20001}, {0x107, 0x0, 0x0, 0x5}]}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0x37) (async) sysctl$kern(&(0x7f0000000040)={0x1, 0x36}, 0x2, &(0x7f0000000140)="28306c41f02cc2f3c616492cabc1ab79ddde2943c6f1d103104bb61f9d526297d4b890e8a1c12e960d10fa8d42f09263da52897cb2aecff09276129b25895aa36504097ce2b345f83a847f418206ce96fd3e7c0d37b06de978ee593c106643251a4e5c3ad058ca23e1f968a7d6aa704c8e298dd09c4722", &(0x7f00000001c0)=0x77, &(0x7f0000000200)="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", 0xff) (async) r0 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000300), 0x10000, 0x0) (async) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="6dee94d6c4edd046837c5613dfa666a8e8102d57988402b8503cb971ec714dde15dde098e7b6f9d0edd719e74070307e70ab1bb535e18e08e17de32ebc90c54c31f4573cd6c1fcadb1cff9917ecad6b5", 0x50, 0x40e, 0x0, 0x0) (async, rerun: 64) preadv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000480)=""/240, 0xfffffc47}, {&(0x7f00000000c0)=""/179, 0xfdac}, {&(0x7f00000002c0)=""/229, 0xe2}], 0x50, 0x0) (async, rerun: 64) open$dir(&(0x7f0000000040)='./file0\x00', 0xae828e137847f62, 0x0) sysctl$kern(&(0x7f00000000c0)={0x1, 0x2f}, 0x2, &(0x7f0000000180)="4ba7841143", &(0x7f0000000040)=0x5, 0x0, 0x0) (async) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x8000, 0x0) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000440)="2e06b5a54fdc15d0e5ba5cd619e395d842161263a5bcf8d360b109113dd229c0dd47d6ff4f038bc8f40206bf8a1ef55ba04d8d4e4174e29e744d8606170795a2edaf3456112807f6d55fd9c3815257c10e07e8f0be3a7366f8123a42cb43f4302bf6b149e9b9bab6116b11b8ae693250f7fa8080cd8a2fc7c7e4ebf5c106c80fd386c7786c0421183de7b10dbde8040d96f51522423ca8e0f70989e1530cd2eaf7faaad41584384bf407ed7bed944e099fd18b59c86af22bb45fe92b05087191e530bc83a9e0975fc2a0f5988e9ae663b4fe25f69d661eb4ad0842a7be35dbe21e8911da844c7dce8d80f66713e13d96b30d5b4a13fb15282cf2a61a24880049b94a6e46bce752ff3230cd36789c42b37db904fd77060a84ca071839da23ef66bb45a18c9face3b3982d2edef1234405ec89e3ac812208780a2866cf52a8bbbe80b77e07f53d751ea0da7185414c403df8282d22a45b8a5ee7dc9b534106d98bb65aea3af32dea9a7a9881e7fdfbb46801408f1b94018abf7d5816d4e0344ab9dd8a6d43a2503180582f6d553e1a81fe4e8d68fafcd095560e83feda2fcd68d73fc71d7ff20511859f1b895d1a", 0x1ad}], 0x1) (async, rerun: 64) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async, rerun: 64) ioctl$TIOCSETA(r1, 0xcd50441a, &(0x7f0000000040)={0xc, 0x10000, 0x6, 0x9, "0800000000000001000b00", 0x40000b, 0x400085}) (async) ioctl$FIOASYNC(r0, 0x8004667d, &(0x7f0000000340)=0x3) (async) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f00000003c0), 0x80, 0x0) ioctl$BIOCGHDRCMPLT(r2, 0x40044274, &(0x7f0000000400)) socket(0x2, 0x1, 0x6) (async, rerun: 64) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 64) setrlimit(0x8, &(0x7f0000000980)={0x8, 0x54}) (async) r4 = syz_open_pts() close(r4) (async) r5 = syz_open_pts() close(r5) (async) ioctl$TIOCSETD(r4, 0x8004741b, &(0x7f0000000040)=0x2) ioctl$TIOCSETAF(r4, 0x802c7416, &(0x7f0000000180)={0x40978b, 0x10001, 0xfffffc03, 0x80a1a0, "bb08000100f167d910508bc49d7323000000007e"}) (async) writev(r2, &(0x7f0000000700), 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=""/100, 0x64}, 0x80003f8d}, 0x10, 0x0, 0x0) (async, rerun: 32) sendmmsg(r3, &(0x7f0000000080)={0x0}, 0x10, 0x0) (rerun: 32) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000740)={0x7ff, 0x7, 0x7, 0x101, 0x80000001, 0x80000001, 0x80000000, 0x10, [{0x4, 0x7, 0x4, 0xfffffff9}, {0x7, 0x6, 0x6, 0xfffffffc}, {0x8, 0xf86, 0x0, 0xaf9}, {0x2000004, 0x800, 0x7, 0x40}, {0x3, 0x7fffffff, 0x0, 0x7}, {0x2, 0x6, 0x3, 0x101}, {0xcdf, 0x1, 0x1, 0x6d}, {0x200a, 0x80803, 0x17, 0x8}, {0x0, 0x81, 0x2, 0x9}, {0x6, 0x0, 0xc7, 0x4088}, {0x4, 0xffffaac5, 0x34, 0xaeb}, {0x7ff, 0x9, 0x8, 0x5}, {0xb8c, 0x4, 0x5, 0x6}, {0x29a7171a, 0xfffffff9, 0x6, 0x6}, {0x4, 0x7, 0x7}, {0x0, 0x1, 0x0, 0x30000}]}) (async) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) 4.266900623s ago: executing program 1 (id=499): mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x6000, 0x1) (async) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x6000, 0x1) chmod(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x35e) setuid(0xee01) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xba) 3.09060509s ago: executing program 0 (id=501): r0 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000004c0)=""/233, 0xe9}, {&(0x7f0000000080)=""/151, 0x97}, {&(0x7f0000000480)=""/62, 0x3e}], 0x4) ioctl$VNDIOCSET(r0, 0xc0384600, &(0x7f00000003c0)={&(0x7f0000000340)='./file0\x00', 0x1, &(0x7f0000000380)='./file0\x00', 0x8}) r1 = socket(0x18, 0x1, 0x0) getsockname$unix(r1, &(0x7f0000000180)=@file={0x0, ""/13}, &(0x7f00000001c0)=0xf) r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) close(r2) ioctl$WSDISPLAYIO_DELSCREEN(r2, 0x80085754, &(0x7f0000000300)={0x0, 0x2}) ioctl$FIONREAD(0xffffffffffffffff, 0x8080691a, 0x0) r3 = socket(0x18, 0x2, 0x0) setsockopt(r3, 0x1000000000029, 0x9, &(0x7f0000000040)="03000000", 0x4) setsockopt(r3, 0x1000000029, 0xd, &(0x7f0000000000), 0x14) setitimer(0x0, &(0x7f0000000140)={{0x0, 0x1}, {0x40, 0x87fff}}, 0x0) getitimer(0x0, 0xfffffffffffffffe) r4 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) ioctl$TIOCSETA(r4, 0xc0884450, &(0x7f0000000080)={0x58, 0xfffffffc, 0x3, 0x7, "75a200000000f2a82e1922072f1fd7f000", 0xfffffffc, 0xfffffff8}) utimensat(r4, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={{0x1, 0xd}, {0x3, 0xffffffffffffffff}}, 0x0) 3.090068661s ago: executing program 3 (id=502): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) setrlimit(0x2, &(0x7f0000000200)={0x60000000, 0x60000000}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="89000000ffff000001"], 0x9}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f00000024c0)=""/232, 0xe8}, 0x0) (async) recvmsg(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f00000024c0)=""/232, 0xe8}, 0x0) sendmsg(r0, &(0x7f0000000380)={0x0, 0x32c, 0x0, 0x0, &(0x7f0000000000), 0x90}, 0x0) setrlimit(0x8, &(0x7f0000000980)={0x45, 0x62}) r2 = syz_open_pts() close(r2) syz_open_pts() (async) r3 = syz_open_pts() writev(r2, &(0x7f0000000040)=[{&(0x7f00000002c0)="0002000004", 0x2a}], 0x1) ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f0000000000)={0xfba, 0x10000004, 0xfffffffe, 0xffffffdf, "0000f50000001700f0ffffffffffbf0c008000", 0x461b, 0x1}) readv(r3, &(0x7f0000000300)=[{&(0x7f0000000540)=""/140, 0x8c}], 0x1) setrlimit(0x1, &(0x7f00000000c0)={0x1, 0x3ff}) (async) setrlimit(0x1, &(0x7f00000000c0)={0x1, 0x3ff}) setrlimit(0x8, &(0x7f0000000980)) (async) setrlimit(0x8, &(0x7f0000000980)) openat$null(0xffffffffffffff9c, 0x0, 0x80, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) (async) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) 3.088990003s ago: executing program 7 (id=503): open(&(0x7f0000000000)='./file0\x00', 0x611, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x20, 0x20) r0 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) ioctl$VNDIOCSET(r0, 0x81946466, &(0x7f0000000040)={0x0, 0x5, 0x0}) unveil(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='x\x00') r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0xf02, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0xffff) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x3, 0x2812, r1, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x2, 0x11, r1, 0x5d4f00000000) kqueue() 1.857340263s ago: executing program 5 (id=504): msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0xfbfffffb, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x100000001, 0x62, 0x0, 0x0, 0x405, 0x100000000000005, 0xa0, 0x1}) sysctl$hw(&(0x7f0000002e40)={0x6, 0xc}, 0x2, 0xfffffffffffffffe, 0x0, 0x0, 0x0) r0 = open$dir(&(0x7f0000000280)='./file0\x00', 0x82be0a12676cad8d, 0x0) openat(r0, &(0x7f00000002c0)='./file0\x00', 0x10000, 0x188) sysctl$hw(&(0x7f0000000300)={0x6, 0x2}, 0x2, &(0x7f0000000340)="4c638c7e345110d2e58869111934c276a71095b47623b2047784a3e445908772f73ebf43aa173b82bfd474019ea26c594e7c8f8f4314dfc7862589ee9b8a657cb71b9598e43ac0de2ebe3725a6308f7326304750c74661c40c0d5adc9c5ea976329911d8e7e9c4007afd6a47840635a744e28eb09ce5d51a32920e84e5f8e744740c23fbacb76953e94280973bcfa66052d0", &(0x7f0000000400)=0x92, &(0x7f0000000440)="940d3e666fed1aa99b4d91038a4c6a7182d2920f3a424fd397b7a7a5765bb2578eeb0cf4fc1db134cd4fe289786c8c53c36476ebdd285d0aebcec3108f2d2225c7ac4eed06583743c6f4407518c8287aa0795af81fb45872ff18ef9727b4c0be46a83ff199e80533caa5f63ddff315888b9b9a8b7c5dcc04b1590383f521c393b8cefe97402e949758831629e9b07c3fdb68dce9de08f7adaa071e7bce6271", 0x9f) sendto$unix(0xffffffffffffffff, &(0x7f0000000100)="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", 0x176, 0x40a, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r1 = socket(0x11, 0x3, 0x0) sendto$unix(r1, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x5, 0x0, 0x0) 1.638930829s ago: executing program 2 (id=505): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) sysctl$net_pipex(&(0x7f0000000000)={0x4, 0x22, 0x1}, 0x3, 0x0, 0x0, &(0x7f00000000c0), 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) semctl$SETALL(0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000040)=[0x1, 0x8, 0x9, 0x4, 0x7]) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f00000000c0)={0x3, &(0x7f00000001c0)=[{0x1}, {0x1d}, {0x8106}]}) ioctl$BIOCGDLTLIST(r0, 0xc010427b, &(0x7f0000000140)={0x4, &(0x7f0000000080)=[0x8001, 0x9, 0x8, 0x3]}) syz_emit_ethernet(0x26, &(0x7f0000000200)=ANY=[]) 1.368865396s ago: executing program 0 (id=506): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) (async) r0 = socket$unix(0x1, 0x2, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f0000000200)=@file={0xd570d0466b6018f, './file0\x00'}, 0xa) (async) chmod(&(0x7f0000000180)='./file0\x00', 0x23f) setreuid(0xee00, 0x0) (async) r2 = getuid() (async) r3 = getuid() chown(&(0x7f0000000040)='./file0\x00', r3, 0xffffffffffffffff) (async) setreuid(0xee00, r2) connect$unix(r0, &(0x7f0000000000)=@file={0xd1653077bafa0114, './file0\x00'}, 0xa) (async) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) (async) rename(&(0x7f0000000080)='./file0/file0/..\x00', &(0x7f0000000040)='./file1\x00') (async) r4 = syz_open_pts() r5 = kqueue() ioctl$WSDISPLAYIO_USEFONT(r4, 0x80585750, &(0x7f00000000c0)={'./file1\x00', 0x8, 0x2, 0x200, 0x1, 0xa, 0x80, 0xf, 0x2, 0x0, 0x5, 0x2}) (async) kevent(r5, &(0x7f00000005c0), 0xd7, &(0x7f0000000600)=[{{}, 0xfffffffffffffff8, 0x8, 0x8, 0x7, 0x4}, {{}, 0xfffffffffffffff8, 0x28, 0x7234e3df91037fd8, 0x5, 0x7}, {{r4}, 0xfffffffffffffff8, 0xde, 0x10, 0xc, 0x4}, {{r5}, 0xffffffffffffffff, 0x80, 0x80, 0x2, 0x10000}, {{r4}, 0xffffffffffffffff, 0x9e8c4dc0df5fab61, 0x40, 0x9, 0x200}], 0x8000, 0x0) 1.180573939s ago: executing program 4 (id=507): r0 = open(&(0x7f0000000040)='./file0\x00', 0x80, 0x110) fcntl$getown(r0, 0x5) clock_settime(0x100000000000000, 0x0) r1 = getpgrp() ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x512, r1) ioctl$WSDISPLAYIO_GETSCREEN(r0, 0xc0245755, &(0x7f0000000080)={0x8000, './file0\x00', './file0\x00'}) 1.179510129s ago: executing program 6 (id=508): setuid(0xffffffffffffffff) (async) r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x10000, 0x0) ioctl$TIOCSETA(r0, 0xc0104419, &(0x7f00000000c0)={0x0, 0x0, 0x10000ff, 0x2000, "01d04b0a0000000000050001000000ffff00", 0x8, 0x6}) (async) utimensat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) 1.179293619s ago: executing program 1 (id=509): r0 = socket$unix(0x1, 0x5, 0x0) sendmsg$unix(r0, &(0x7f0000000080)={&(0x7f0000000040)=@file={0x170, './file0\x00'}, 0xa, 0x0}, 0xe) sendto(r0, &(0x7f0000000000)="ea51d60c80ab4b40f823ada1e03dba311877fb52ad", 0x15, 0x410, &(0x7f00000000c0)=@in={0x2, 0x0}, 0xc) r1 = syz_open_pts() fcntl$setown(r1, 0x6, 0x0) r2 = socket(0x11, 0x3, 0x0) setsockopt(r2, 0x0, 0x9, &(0x7f0000000880)="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", 0x801) socket$unix(0x1, 0x1, 0x0) symlink(&(0x7f0000000180)='./file0\x00', &(0x7f0000000280)='./file0\x00') 1.17828655s ago: executing program 3 (id=510): setrlimit(0x8, &(0x7f0000000980)={0x42, 0x3fb}) r0 = socket(0x18, 0x3, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x80, 0x29) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) getsockopt$sock_int(r0, 0xffff, 0x10, &(0x7f0000000040), &(0x7f0000000080)=0x4) (async) getsockopt$sock_int(r0, 0xffff, 0x10, &(0x7f0000000040), &(0x7f0000000080)=0x4) syz_open_pts() (async) r1 = syz_open_pts() close(r1) syz_open_pts() ioctl$TIOCSETD(r1, 0x8004741b, &(0x7f0000000000)=0x8) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="cff5c05e64da486cdaae4a8238b1f3ff0252db3b8c172b8359eb32d47209b2a02c3b553a3b0b2e0082cc0526f2cdfb38e6dfe40000", 0xffffffffffffffe3}, {&(0x7f00000000c0)="aa6295ceab03", 0x6}], 0x2) (async) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="cff5c05e64da486cdaae4a8238b1f3ff0252db3b8c172b8359eb32d47209b2a02c3b553a3b0b2e0082cc0526f2cdfb38e6dfe40000", 0xffffffffffffffe3}, {&(0x7f00000000c0)="aa6295ceab03", 0x6}], 0x2) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @random="11e672caaed2", [], {@ipv6={0x86dd, {0x0, 0x6, "062500", 0x0, 0x2b, 0x10, @local={0xfe, 0x80, '\x00', 0x0}, @loopback={0xfeffffff00000000}}}}}) 1.177307912s ago: executing program 5 (id=511): r0 = syz_open_pts() flock(r0, 0x1) fcntl$lock(r0, 0x8, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x100000001}) syz_open_pts() syz_open_pts() (async) syz_open_pts() sysctl$net_inet_ip(&(0x7f00000000c0)={0x4, 0x2, 0x0, 0x20}, 0x4, 0x0, 0x0, &(0x7f00000011c0)="01000000", 0x4) (async) sysctl$net_inet_ip(&(0x7f00000000c0)={0x4, 0x2, 0x0, 0x20}, 0x4, 0x0, 0x0, &(0x7f00000011c0)="01000000", 0x4) 1.093762734s ago: executing program 6 (id=512): unveil(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='c\x00') (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) utimes(&(0x7f0000000240)='./file2/file0/file0\x00', &(0x7f00000002c0)={{0xc2, 0xf}, {0x5, 0x1000}}) (async, rerun: 32) bind(r0, &(0x7f0000000080)=@un=@file={0x41a0805bbded0123, './file0\x00'}, 0x4) (async, rerun: 32) r1 = msgget(0x2, 0x211) (async, rerun: 64) setgroups(0x0, 0x0) (async, rerun: 64) r2 = open(&(0x7f0000000040)='./bus\x00', 0x20, 0x0) (async, rerun: 32) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x2, 0x0, 0x5}, 0x4, &(0x7f0000000140)="26ff998a", &(0x7f0000000100)=0x4, 0x0, 0x0) (rerun: 32) ioctl$TIOCSPGRP(r2, 0x40047477, &(0x7f0000000100)) (async) setsockopt$inet_opts(r2, 0x0, 0x0, &(0x7f0000000340)="8f44d83b5f89c7c95fbbb30d68209683ec108e77d77df4c5f31407e733075aaa98ff8b369f89a1f0996233b37b27e73ea4d815ed4c27db69acc5971d6fc96fa34806278564c8d6d14b6f992b30dfd2b36d3a2e33065accc1655b437474e52a1b5c12c0da3329750668b40390916e94351d2d708ffd96885e7a00f66b2243f5982d2eea2b68e38ad9dcccf240c1e040c6ceeae194ba939c7f1abf9505000d42e47ba1e998e87ba586c0f767b97ee24e3e45b8b045730e989ac9fcfd", 0xbb) setuid(0xffffffffffffffff) rename(0x0, 0x0) (async) syz_emit_ethernet(0x76, &(0x7f0000000300)={@local, @empty, [], {@ipv6={0x86dd, {0xb, 0x6, '\x00', 0xa, 0x2c, 0x2, @rand_addr="04f19d6bceb1ee1eedc0754f15dd5ff9", @mcast2, {[@dstopts={0x2b, 0x0, '\x00', [@padn]}], @icmpv6=@dest_unreach={0x1, 0x3, 0x0, 0x1, '\x00', {0x7, 0x6, "2925c8", 0x7, 0xff, 0x8, @mcast2, @local={0xfe, 0x80, '\x00', 0x0}}}}}}}}) (async) msgctl$IPC_SET(r1, 0x1, 0xfffffffffffffffe) (async) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) (async, rerun: 32) select(0x40, &(0x7f0000000280)={0xb, 0x8, 0xa9ba, 0x1, 0x6, 0x1ff, 0x3, 0x3}, 0x0, &(0x7f0000000300)={0xc, 0x7ff6, 0x362, 0xff, 0x6, 0x50c, 0x1, 0x1}, 0x0) (rerun: 32) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) unveil(&(0x7f0000000200)='./file2/file0\x00', &(0x7f0000000140)='r\x00') chflags(&(0x7f00000000c0)='./file2/file0\x00', 0x10001) (async) open$dir(&(0x7f0000000180)='./file2/file0\x00', 0x8, 0x6a) 1.092257683s ago: executing program 7 (id=513): ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f00000000c0)={0x7fe, 0x7fff, 0x7fff, 0xd2e, "de0000000cb9fb0600000100", 0x1, 0x50}) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x100000000000000, 0x10040000000001}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x18, 0x1, 0x0) ioctl$TIOCSETA(0xffffffffffffffff, 0xc4504449, &(0x7f0000000040)={0x0, 0x6, 0x2f00, 0xd9, "97a22242006b470500", 0x2007, 0x10}) sysctl$vm_swapencrypt(&(0x7f0000000000)={0x2, 0x5, 0x3}, 0x3, 0x0, 0x0, 0x0, 0x0) close(r0) r1 = socket(0x18, 0x3, 0x3a) setsockopt(r0, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) fcntl$lock(r0, 0x9, &(0x7f0000000080)={0x2, 0x2, 0x600000000000, 0xe39c, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) sendto$inet(r1, &(0x7f0000000280)="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", 0x5f7, 0x8, 0x0, 0x0) 1.091660902s ago: executing program 2 (id=514): setrlimit(0x8, &(0x7f0000000580)={0xa, 0x56}) r0 = syz_open_pts() close(r0) setreuid(0x0, 0xee01) chroot(0x0) syz_open_pts() ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000180)={0x20e, 0x19, 0xffffdf82, 0xffffff8d, "08ed95bb1cfa0400d43c8d71bf6b00d90cf2c000", 0x4000000, 0x1a3}) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) sysctl$kern(&(0x7f00000000c0)={0x1, 0x2c}, 0x3, &(0x7f0000000080)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000140)=0x1918, 0x0, 0xffffffffffffff36) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0e99db6de761f86, 0x0) ioctl$FIONREAD(0xffffffffffffffff, 0xc028698d, &(0x7f0000000100)) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_opts(r1, 0x0, 0x64, &(0x7f0000000240)="01000000", 0x4) close(r1) sysctl$kern(&(0x7f0000000000)={0x1, 0x48}, 0x2, &(0x7f00000002c0)="3cbee8f58f1562fd0227d9725a303a95f23fa4532392dc9c7367f2f774957cc556fc94da2dc1b6b421b5488f28b5a2f33d7444ab891f766d5fb4f193f1b24309edceb1597ccf8a1703b9234dd7d2563d797a1142cc944bde6abd928115429ec141e9266e8996575a26f6afd0ed129051b72c9bd67eb5dd2b3383fccdc34fd408db272766058d21e344afc14f7619341f4ea55adbc194959ec90589db9c12c3c7332110", &(0x7f0000000040)=0xa3, &(0x7f0000000100), 0x0) r2 = dup(0xffffffffffffff9c) getsockname(r2, &(0x7f0000000240)=@in6, &(0x7f0000000280)=0xc) r3 = semget(0x0, 0x3, 0x14) getsockopt$SO_PEERCRED(r2, 0xffff, 0x1022, &(0x7f00000001c0)={0x0, 0x0}, 0xc) getgroups(0x5, &(0x7f0000000200)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0]) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r6, 0xffff, 0x1022, &(0x7f00000001c0)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0xc) setgroups(0x1, &(0x7f0000000000)=[r7]) r8 = socket(0x11, 0x3, 0x3) sendto$unix(r8, &(0x7f0000000280)="b1000501600000001700000007000000045c13fecea10500fef96ecfc72fd3357ae320b37b673039d2d236a3f20b7804be38164991f7c8cf5f882b297be1aa5b236deb51e2f0ac3ebbc2576b9a5f139b672f4d335d223e7d026ba8af630037282102000000720fd38bfbb770c1f5a872c881ea6e69e0bb76d907c400000200361b1257aea8c500002002fb00000000008abfba09000000ec1d89e000040781e40500000000000000000900000000000000", 0xb1, 0x0, 0x0, 0x0) semctl$IPC_SET(r3, 0x0, 0x1, &(0x7f00000003c0)={{0x1, r4, r5, 0x0, r7}, 0x1c1, 0x102, 0xc}) 1.0909289s ago: executing program 4 (id=515): sysctl$kern(&(0x7f0000000140)={0x1, 0x20}, 0x2, 0x0, 0x0, &(0x7f0000000080)="9f397b7a26d73531fe0e91ffffbf71ea8b8a1e0625a9ccc984c7d5ce9668e459565608dd41e1ec1123dc64fbf98159c9298b2e1a05000000bdb650201efa3811ca5771beb27fa73e00823faf8f034783054c5da04114a2d80cb8b166b71187000000", 0xfffffdac) sysctl$net_inet6_ip6(&(0x7f0000000040)={0x4, 0x18, 0x29, 0x2b}, 0x4, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) sysctl$net_inet6_ip6(&(0x7f0000000040)={0x4, 0x18, 0x29, 0x34}, 0x4, &(0x7f0000000140), 0x0, 0x0, 0x0) syz_open_pts() sysctl$net_inet6_ip6(&(0x7f0000000000)={0x4, 0x18, 0x29, 0x15}, 0x4, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0)="2b861a68a0268ed46239ae567bc674ea0da3fda38c072e1c52dfa6363dbdb559a3f022fcd7113552de188ec06c6a9fb3a6eb55053b8180e3842d2d4951064ebdb95424e1e18f14c722b6c88006fc0f92a9a71dbef1578247c005c14163bd1373b7663773dea2ed053f2522e62d05c08056695221812f6f8a9d565becfb968f6f48eac1eac0125e55ed8992b60f643df7a87278487d8cebacb2c79233bbf7f6fec0e942e0b1957ae3e29154e4d44d6024fce5f94ea7712d8ff417787ac7b7a79aa9bacbf3ff10567dbfeb21757aad99c6f0d633faaea89d8e118cc9254f22739f68a4d60a70f30946e475bc4648b4", 0xee) 1.090660469s ago: executing program 1 (id=516): r0 = open(&(0x7f0000000380)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7949) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r1, 0x0) ftruncate(r1, 0x8531) r2 = msgget$private(0x0, 0x80) r3 = getuid() getsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) r5 = geteuid() r6 = open(&(0x7f0000000440)='./file1\x00', 0x200, 0x82) ioctl$TIOCSETAF(r6, 0x802c7416, &(0x7f0000000180)={0x0, 0x0, 0x2, 0xfffffffc, "328c1a6c0000000900fde1ffffff00"}) ioctl$TIOCSETA(r6, 0x802c7414, &(0x7f0000000040)={0x166441, 0xfffffff8, 0xea, 0x800, "978680cf00000008000e00", 0x0, 0x1}) getsockopt$sock_cred(r6, 0xffff, 0x1022, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) setgid(r7) ioctl$TIOCSTAT(r0, 0x20007465, &(0x7f00000001c0)) r8 = getpgid(0xffffffffffffffff) r9 = getpid() ktrace(&(0x7f00000002c0)='./file0\x00', 0x0, 0x510, r9) msgctl$IPC_SET(r2, 0x1, &(0x7f0000000100)={{0xa178, r3, r4, r5, r7, 0x20, 0x400}, 0x4297b239, 0x1, r8, r9, 0x1, 0x40, 0xd5, 0x200}) open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) setrlimit(0x8, &(0x7f0000000000)={0xfffffffffffffffb, 0xffffffffffffffff}) fcntl$lock(r0, 0xc, &(0x7f00000019c0)={0x3, 0x0, 0x79, 0x2}) 834.21572ms ago: executing program 3 (id=517): r0 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) open(0x0, 0x78e, 0x8) setrlimit(0x1, &(0x7f0000000180)={0x200, 0x95f}) r1 = getpid() setgroups(0x0, 0x0) acct(0x0) r2 = socket(0x2, 0x1, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r3 = socket(0x2, 0x1, 0x0) ioctl$FIONREAD(r3, 0xc0206923, &(0x7f00000001c0)) ioctl$FIONREAD(r2, 0x8040691a, &(0x7f00000001c0)) ktrace(&(0x7f0000000480)='./file0\x00', 0x0, 0x510, r1) setuid(0xffffffffffffffff) setsockopt$inet_opts(r2, 0x0, 0x0, &(0x7f00000000c0)="42fd24278a266db4e02f6f4e02a844a9e817cd6538537cf0bb3767efe428ef8035e55f465acb51b88d341b30f13a2fccdb49298949b479195975ddb9e5368b6d279e49193809c9a236cf522c6bfdb17d4b0de5142e9f1361ef03de79104b37d5fcd77f09dcb8", 0x66) setitimer(0x2, 0x0, 0x0) getsockopt(0xffffffffffffffff, 0x29, 0x66, 0x0, 0x0) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) ioctl$WSMOUSEIO_SETPARAMS(r0, 0x80105728, &(0x7f0000000080)={&(0x7f0000000040)=[{0x18b}, {0x100, 0xfffffffb}, {0x100, 0x50}, {0x26, 0x9}, {0x83, 0x8}, {0x44, 0x6}], 0x6}) 833.945205ms ago: executing program 0 (id=518): msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000000)={{0x800, 0x0, 0x0, 0x0, 0x0, 0xcbdf4d1d31039a48}, 0xfffffffffffffffc, 0x4, 0x0, 0x0, 0x400000000d4, 0x2, 0xe, 0x52fb}) sysctl$net_inet6_ip6(&(0x7f0000000040)={0x4, 0x18, 0x29, 0x33}, 0x5, 0x0, 0x0, &(0x7f0000000380)="18d578bb21c00631ef381c5d3bf66f0eea1626ba1615f4faf3b1475599ec04d1ed8fb0fbe03b34bfd48b992e602b32fbe4d71f34133b44d412f59437576f2779db93812d42fd52ad36d6f88a7157db5f4c094838373ad7f24122026f1e3f849e14fe83e71ceeedf74814952939ee73e627c82baff5449621091825c00150e9d07b1bd6e4912546fe5eae447c107b668956323c3e04af45c1398feebf9cba76ae2f1d06ac89deacd059524a7efee458acc45e5f2c880ec2f4188a54fea7ece8cd2d88be9a14920d10ff203b87c6ebfa3e4f7d", 0xfffffffffffffe1a) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x25, 0x0, 0x0, 0x0, 0x0, 0x110, 0x48e}, 0x6, 0x9, 0x0, 0x0, 0x100000004, 0xb000000000000000, 0xa, 0xb}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x3d}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x18, 0x1, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1000, 0x0, 0x0) bind$unix(r0, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket$unix(0x1, 0x1, 0x0) getsockopt$sock_int(r1, 0xffff, 0x1004, 0x0, 0x0) setsockopt(r0, 0x1000000000029, 0x1b, &(0x7f0000000000)="c04a1190", 0x4) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r2, 0x0, 0x1, &(0x7f00000002c0)="ee08665d19ac14d5e51348771197a7728420aef61715f7b1c3d4b3830c921bf0817a0000000000006a89dbdf", 0x2c) setsockopt$inet_opts(r2, 0x0, 0x1, &(0x7f0000000000), 0x0) sysctl$kern(&(0x7f00000000c0)={0x1, 0x37}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94100e4ac63c90dddc11f11cad5cc4", &(0x7f0000000080)=0x2, 0x0, 0x37) 833.59144ms ago: executing program 5 (id=519): ioctl$WSKBDIO_SETKEYREPEAT(0xffffffffffffffff, 0x800c5707, &(0x7f0000000000)={0x3bed, 0x4, 0x7}) (async) ioctl$WSKBDIO_GETBACKLIGHT(0xffffffffffffff9c, 0x400c5711, &(0x7f0000000040)) (async) r0 = fcntl$dupfd(0xffffffffffffffff, 0xa, 0xffffffffffffffff) ioctl$WSKBDIO_SETENCODING(r0, 0x80045710, &(0x7f0000000080)=0x5b6c) (async) sysctl$net_inet_ip(&(0x7f00000000c0)={0x4, 0x2, 0x0, 0x14}, 0x4, &(0x7f0000000100)="c5f970104242de1c086ab69244bdbf488ae9e265c85cc86c3a388265bce6a7d3381061e7ecbcdd46b718de0463f46c688087f9e17dadccf22db526c5bab1af9a6eeb64904ef9f5e907590661fc3d7c2f1ec3e6b7d40919ce3d4ffa7d3dedcae04889e9a586ec9fa670c717abcf2659db608c36cf261c28e3b12c65da0fa989c31de2cc63d7c1c71dd7e41590bba60422a8b48294dbe77c57086fc2fc83338b935c1af5228347e6ce67748f5f855f80adce5fba77cf2c786e75ef", &(0x7f00000001c0)=0xba, &(0x7f0000000200)="8ffcf2d132ff6a9255421bdef1db1b2f7160be6834aee5f414d5a5af7d28558ebc6387f6237840391818330c2a74c00d2c5b5acaa4d262b237f4d4a92962782de2ac62973a221d7cbd3eab2996809aca2b703bb95155570b59f9ad6e6a1f1d4a13cb563c01b91d7c76941b3cd190d4e6f7f1ff9358c8b655073a9bb4c48d114a54f1c12af3cee500b7ea232fec4ce9083a547b17623a5be23c692635bd1aabb740e1a663e37fdaa119e7f9f39884ad82c399", 0xb2) (async) getsockopt$SO_PEERCRED(r0, 0xffff, 0x1022, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0xc) setgroups(0x1, &(0x7f0000000300)=[r2]) (async) setuid(r1) (async) r3 = msgget(0x3, 0x82) (async) ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffff9c, 0x80585750, &(0x7f0000000340)={'./file0\x00', 0x6, 0x9, 0x3d, 0x1, 0x3, 0x4000, 0x9, 0x1, 0x2, 0x0, 0x2}) r4 = semget$private(0x0, 0x2, 0x0) semctl$IPC_SET(r4, 0x0, 0x1, &(0x7f00000003c0)={{0x2a00000, r1, r2, r1, r2, 0x83, 0x6}, 0x9, 0xf, 0x2}) r5 = semget(0x2, 0x0, 0x240) semop(r4, &(0x7f0000000440)=[{0x4, 0xfff, 0x800}], 0x1) sysctl$net_inet_ip(&(0x7f0000000480)={0x4, 0x2, 0x0, 0x2}, 0x4, &(0x7f00000004c0)="cbcb89c9abdba20e54207b59556b5556fcaaaeb2ec813df0ea8625f0977f81f4aafb2a56fe01d24ff04a9efa6623dc2f7dab4818d7f6df9058b19b0eb4219827e18142f8e5aa335943960c80916f81e98c25bd6eea2ce2498de54171a18d5027e1129aebb2e9982f77474ef1434210bfc72d70e8f1e6669083352437d3d36c134786e05ccf41d3e7d5db7c6ec1fe25ffbfe12c788c434e2636c0c17e72c22fd21edef084920a2ff263b1c06989830da4faebf127bfcd7f34f2130ad8bbf44a5d6432b5798b358271c571cbb08d62cff85e7b06138d17c3cd4e971021d7230f46793b4b792413ab38e87359c0f56fdf6676b945cffe9d8bfb443296889cba67", &(0x7f00000005c0)=0xff, &(0x7f0000000600)="417fb0d633adb33efce54cec365607cd42e62751372990f20c2d3c634655900277694189788b9f4bb302e1d373b6d5eff93cfeb8bd731f37ebe46f5d30ab950d8374ba3248b78d6eb5b96b6179cd4564c2d287c31b53362f912e13321b37572582ce946050907919cc862cb8c3585793eef10fac2ea7acf2c01ed851d0a24fb76cd29837bf252fed0853cb97296f889781775b461af9d82ffd25cb42c1d388", 0x9f) (async) getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000000700)={0x0, 0x0, 0x0}, &(0x7f0000000740)=0xc) chown(&(0x7f00000006c0)='./file0/file0\x00', r1, r6) (async) ioctl$WSDISPLAYIO_USEFONT(r0, 0x80585750, &(0x7f0000000780)={'./file0\x00', 0x2, 0x8, 0x10000, 0x0, 0x148, 0x5, 0x4, 0x2, 0x0, 0xd, 0x6}) (async) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2) (async) msgrcv(r3, &(0x7f0000000800)={0x0, ""/16}, 0x18, 0x1, 0x1800) socket$inet(0x2, 0x1, 0x8) (async) ioctl$WSKBDIO_SETKEYREPEAT(r0, 0x800c5707, &(0x7f0000000840)={0xfffff800, 0x3, 0xa}) (async) mknod(&(0x7f0000000880)='./file0\x00', 0x2000, 0x0) (async) shmget$private(0x0, 0x2000, 0x24a, &(0x7f0000ffb000/0x2000)=nil) (async) getsockopt$inet_opts(r0, 0x0, 0x1, &(0x7f00000008c0)=""/171, &(0x7f0000000980)=0xab) (async) utimes(&(0x7f00000009c0)='./file0/file0\x00', &(0x7f0000000a00)={{0x7, 0x5}, {0x7, 0xd}}) (async) ioctl$VNDIOCCLR(r0, 0x80384601, &(0x7f0000000ac0)={&(0x7f0000000a40)='./file0/file0\x00', 0x5, &(0x7f0000000a80)='./file0/file0\x00', 0xe}) (async) getgroups(0x2, &(0x7f0000000b00)=[r6, 0x0]) (async) semctl$GETZCNT(r5, 0x2, 0x7, &(0x7f0000000b40)=""/193) sendto(r0, &(0x7f0000000c40)="2061cecdae4b4271e418c5cc4d782466d3201a8e4facf6c364b942ea16318d950a4ce57975df7381ec1f04e1c1b06a91752ef87e2bfe5fd40f3776767698e53fc602a911fb90246caec432b4ad53f5dcf35302bee18f7931161dd83c62d6e1662a5a913b", 0x64, 0x408, &(0x7f0000000cc0)=@un=@file={0x1, './file0/file0\x00'}, 0x10) 833.243353ms ago: executing program 5 (id=520): mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x637e) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xffffffbfffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181d, 0x8, 0x2000000000000004}, 0x0, 0x0, 0x0) r0 = kqueue() mknod(&(0x7f0000000180)='./bus\x00', 0x2000, 0xd01) r1 = open(&(0x7f00000004c0)='./bus\x00', 0x0, 0x0) ioctl$VNDIOCSET(r1, 0x20006470, 0x0) r2 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) r3 = msgget$private(0x0, 0xafb0e20fef6483ff) msgrcv(r3, &(0x7f0000001200)={0x0, ""/2}, 0xa, 0x3, 0x1000) msgsnd(r3, &(0x7f0000000140), 0x8, 0x0) msgrcv(r3, &(0x7f0000000240), 0x13, 0x0, 0x1000) msgsnd(r3, &(0x7f0000000380)=ANY=[@ANYBLOB="03"], 0xe2, 0x0) kevent(r0, &(0x7f00000001c0)=[{{r0}, 0xfffffffffffffffc, 0x85, 0x1, 0xfffffffffffffffc, 0x1}, {{r2}, 0xfffffffffffffffd, 0xe7, 0xf0000000, 0x401, 0x7}, {{r0}, 0xfffffffffffffffd, 0x1, 0x1, 0x1, 0x1000}, {{r0}, 0xfffffffffffffff9, 0x8, 0x2, 0x69, 0xa4d}], 0x4, &(0x7f00000001c0), 0x15, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x40, 0x100) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0xfffd, 0xffffffffffffffff, 0xffffffffeffffffd, 0x2800000000000000, 0x181c, 0x8, 0x2000000000000004}, 0x0, 0x0, 0x0) ioctl$FIONBIO(r4, 0x82907003, &(0x7f0000000080)=0x7ff) 832.202936ms ago: executing program 4 (id=521): r0 = socket(0x18, 0x3, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) r1 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r1, 0xc0106924, &(0x7f00000001c0)) ioctl$FIONREAD(r0, 0x80206949, &(0x7f0000000100)) poll(0x0, 0x0, 0xffffffff) execve(0x0, 0x0, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x0, 0x3, 0x0, 0x4}, {0x7, 0x0, 0x40, 0x20000}, {0x3, 0x0, 0x0, 0x400004}]}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0x37) 228.759444ms ago: executing program 1 (id=522): readlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/109, 0x6d) r0 = accept$unix(0xffffffffffffff9c, &(0x7f00000000c0)=@abs, &(0x7f0000000100)=0x8) getpeername(r0, &(0x7f0000000140)=@un=@abs, &(0x7f0000000180)=0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$WSDISPLAYIO_DELFONT(r2, 0x8058574f, &(0x7f0000000200)={'./file0/file0\x00', 0x80000001, 0x8, 0x9, 0x0, 0x53, 0x401, 0x80, 0x2, 0x2, 0x10001, 0x5}) openat$null(0xffffffffffffff9c, &(0x7f0000000280), 0x20000, 0x0) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4) r3 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f00000002c0), 0x20000, 0x0) chflagsat(r3, &(0x7f0000000300)='./file0\x00', 0x0, 0x2) ioctl$VNDIOCSET(r1, 0xc0384600, &(0x7f00000003c0)={&(0x7f0000000340)='./file0\x00', 0x5, &(0x7f0000000380)='./file0/file0\x00', 0xe}) r4 = getppid() r5 = getpgid(r4) mkdir(&(0x7f0000000400)='./file0\x00', 0x1c8) mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4) sysctl$net_inet6_icmp6(&(0x7f0000000440)={0x4, 0x18, 0x3a, 0x3}, 0x4, &(0x7f0000000480)="d598b52ac67078c00576341aa17000ba9978e7557bc7924a48b76bb53ebf05c5fffc4a5c040eabf2b40c3314652bae50e8fc4c5a2270d2366f0d2824e6f6dde215bbddf588b12d509c92ed1e9eeb360d165e9908cde7d0ab14b52fb9980d5ef498ebcc3eb33b481f1ce786390171077fbe25c2f49153ac3a0f2207247ccaee1aae93d9aa2b7796b798d0b5d552426aa981e265b9005b6dc458ac7c8bf9ef1886621ed5c00b4c5253cc9b2e4be68f6891ccae53fa92f486a1946ae7eddbe1da12068c46579c92a7a42169b064a4cc81303f82d7ad51a88efe", &(0x7f0000000580)=0xd8, &(0x7f00000005c0)="0d7d76735c97a33c0706c60cd67b5eba87511c5b90f6c9d3f12a87fd4be7965acbfb9872ec2190849cb5169c08c3d561ec437eac1fed48a05ba408e4cbc64f0cce2a3229c5260c24651eeb592f0f6e87cbfb006dfefb71daf32ae0e2aa4344cd56b868e3eb512c7e9ed3708554e88e9ad1caa49b4fa8e5f01f0621f8cae8cf94139138cc63d6199f06f16c912ab961a9beade4b7d144f46c3f8ba918e5dd5aeec355bff1e0ba95026dc846e626652688c09088cb6a4728e4fb9a8f9c", 0xbc) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2) sysctl$net_inet_tcp(&(0x7f0000000680)={0x4, 0x2, 0x6, 0x17}, 0x4, &(0x7f00000006c0)="4f9e6c60dda2eb22b144c57286dd942ea80a8c7c1a87a08a4d02d81110c40e36d7f80a34", &(0x7f0000000700)=0x24, &(0x7f0000000740)="32e165fc4022c765f686c76fd44df851f03e8728032a10b86f2d0b8a9bac0879326bf06fe23ed1aedbf6", 0x2a) stat(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)) getsockopt$inet_opts(r3, 0x0, 0x1, &(0x7f0000000840)=""/131, &(0x7f0000000900)=0x83) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) accept$unix(r6, &(0x7f0000000980)=@abs, &(0x7f00000009c0)=0x8) ioctl$WSMUXIO_REMOVE_DEVICE(0xffffffffffffffff, 0x80085762, &(0x7f0000000a00)={0x2, 0x2}) unlink(&(0x7f0000000a40)='./file0\x00') accept$inet(0xffffffffffffffff, &(0x7f0000000a80), &(0x7f0000000ac0)=0xc) mlock(&(0x7f0000ff8000/0x4000)=nil, 0x4000) getpeername(r7, &(0x7f0000000b00)=@in6, &(0x7f0000000b40)=0xc) mknod(&(0x7f0000000b80)='./file0\x00', 0x2000, 0x5) ioctl$FIOASYNC(r6, 0x8004667d, &(0x7f0000000bc0)=0x3ff) fcntl$lock(r3, 0x8, &(0x7f0000000c00)={0x1, 0x248eea19c7b2d4b8, 0x5, 0x3, r5}) ktrace(&(0x7f0000000c40)='./file0\x00', 0x0, 0x40000000, r4) 228.419839ms ago: executing program 6 (id=523): mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) chmod(&(0x7f0000000000)='./file1\x00', 0x9b) r0 = open$dir(&(0x7f0000000300)='.\x00', 0x8, 0x4a) semget$private(0x0, 0x4, 0x201) setgid(0xffffffffffffffff) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) setgroups(0x1, &(0x7f0000001380)=[0x0]) setgroups(0x0, 0x0) fchmod(r0, 0xe1) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) setuid(0xffffffffffffffff) r1 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$WSMOUSEIO_SRES(r1, 0x80045721, &(0x7f00000016c0)=0x7f) rename(&(0x7f0000000300)='./file1\x00', &(0x7f0000000340)='./file0\x00') 118.28491ms ago: executing program 4 (id=524): mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0) sysctl$net_inet6_icmp6(&(0x7f00000022c0)={0x4, 0x18, 0x3a, 0x3}, 0x4, 0x0, 0x0, &(0x7f0000003340)="01000000", 0x4) sysctl$kern(&(0x7f0000000000)={0x1, 0x32}, 0x2, 0x0, 0x0, &(0x7f0000000040), 0x0) 117.392946ms ago: executing program 7 (id=525): mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) (async) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x6b881aef, 0x2000007, 0xfe, 0x80000001, 0xc, 0x8, 0x10, [{0x0, 0x7, 0x4, 0x10071000}, {0x7, 0x8b, 0x8, 0x7}, {0x8, 0x6, 0x0, 0x3}, {0x9, 0x900, 0xe}, {0x401, 0x200326, 0x2800, 0x7}, {0x6, 0x9, 0x3, 0x99}, {0xce1, 0x4, 0x4f8, 0x6d}, {0x6, 0x801, 0xc, 0x7}, {0x2, 0x82, 0x5, 0x3}, {0x7, 0x100, 0xd3a, 0x1088}, {0x1e7, 0x10001, 0x200c, 0x6}, {0x800, 0x9, 0x8, 0x9}, {0xb8e, 0x4, 0x8, 0x2}, {0x29a7171a, 0x8, 0x1}, {0xc, 0x7, 0x0, 0x6}, {0x0, 0x1, 0x1002, 0x30004}]}) r0 = open(&(0x7f0000000080)='./file0\x00', 0x800, 0x1f) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) (async, rerun: 64) ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) (async, rerun: 64) r1 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x29) ioctl$VNDIOCSET(r1, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r1, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) (async) r2 = open(&(0x7f0000000080)='./file0\x00', 0x8000, 0xa) (async) r3 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x29) ioctl$VNDIOCSET(r3, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r3, 0x80044403, &(0x7f00000001c0)={0x0, 0xe, 0x0}) (async) sysctl$net_inet_tcp(&(0x7f0000000440)={0x4, 0x1e, 0x2, 0x17}, 0x4, 0x0, 0x0, 0x0, 0x0) ioctl$VNDIOCSET(r2, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) (async) open(&(0x7f0000000240)='./file0\x00', 0x78e, 0x39) (async) r4 = getpid() ktrace(&(0x7f0000000180)='./file0\x00', 0x4, 0x40000d06, 0x0) (async) setgroups(0x0, 0x0) (async, rerun: 64) ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x510, r4) (async, rerun: 64) setrlimit(0x1, &(0x7f0000000080)={0xff, 0xd22}) r5 = syz_open_pts() ioctl$FIOGETOWN(r5, 0x4004667b, &(0x7f0000000000)) (async) open(&(0x7f0000000000)='./file0\x00', 0x1, 0x18) (async) ioctl$VNDIOCSET(r2, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) (async) close(r0) 111.99864ms ago: executing program 3 (id=526): fchmodat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x6) (async) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x80, 0x42) unlinkat(r0, &(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f00000000c0), 0x80a0, 0x0) ioctl$WSDISPLAYIO_GETSCREENTYPE(r1, 0xc028575d, &(0x7f0000000100)={0xe, 0x7, './file0\x00', 0xfffffffc, 0x81, 0x2, 0x8}) (async) symlinkat(&(0x7f0000000140)='./file0\x00', r0, &(0x7f0000000180)='./file0/file0\x00') (async) r2 = getppid() fcntl$setown(r1, 0x6, r2) renameat(r0, &(0x7f00000001c0)='./file0\x00', r0, &(0x7f0000000200)='./file0/file0/file0\x00') (async) setuid(0xffffffffffffffff) (async) stat(&(0x7f0000000240)='./file0/file0/file0\x00', &(0x7f0000000280)) (async) r3 = msgget$private(0x0, 0x200) (async) r4 = geteuid() getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000300)={0x0, 0x0, 0x0}, &(0x7f0000000340)=0xc) msgctl$IPC_SET(r3, 0x1, &(0x7f0000000380)={{0x3, r4, 0xffffffffffffffff, 0xffffffffffffffff, r6, 0x2, 0xe6}, 0x7, 0x2, r2, r2, 0x0, 0x9, 0x80000000, 0x7}) (async) fchownat(r0, &(0x7f0000000400)='./file0/file0/file0\x00', r4, r6, 0x2) (async) ioctl$WSDISPLAYIO_USEFONT(r1, 0x80585750, &(0x7f0000000440)={'\x00', 0x0, 0xfffffff8, 0x100, 0x1, 0x3ff, 0x8, 0x7, 0x1, 0x0, 0x3, 0x6}) (async) r7 = socket$unix(0x1, 0x5, 0x0) (async) r8 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000540), 0x180, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)={0xffffffffffffffff}) (async) r10 = openat$vmm(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) pipe2(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) (async) r13 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000640), 0x400, 0x0) (async) socketpair(0x1, 0x8000, 0x0, &(0x7f0000000680)={0xffffffffffffffff}) sendmsg$unix(r7, &(0x7f0000000800)={&(0x7f00000004c0)=@file={0x0, './file0/file0/file0\x00'}, 0x16, &(0x7f0000000500), 0x0, &(0x7f00000006c0)=[@rights={0x38, 0xffff, 0x1, [r8, r0, r9, r1, r1, r1, r0, r0, r0]}, @rights={0x28, 0xffff, 0x1, [r0, r10, 0xffffffffffffff9c, r0, r0]}, @rights={0x20, 0xffff, 0x1, [r0, r0, r1, r0]}, @rights={0x18, 0xffff, 0x1, [r1, r0]}, @rights={0x28, 0xffff, 0x1, [0xffffffffffffff9c, r12, r1, r1, r0]}, @rights={0x28, 0xffff, 0x1, [r0, r0, r1, r13, r0, r0]}, @rights={0x28, 0xffff, 0x1, [r14, r0, r1, r0, r1]}], 0x110, 0x2}, 0x0) (async) sendto(r9, &(0x7f0000000840)="d349f9c0eeeaad6eed121869d0b33c6fc5b539a005e6155a7cdc510945786fa93b868da6708dbcdfd2e013a19aa8f9b00bebcd529bbe89b4f4ec694edb31eb0753ab3d705f2177eb763fcf2fd4a8129047f3d06882deca38b554486977fe516b24f17c644cd94dad473e", 0x6a, 0x0, &(0x7f00000008c0)=@un=@file={0x0, './file0/file0\x00'}, 0x10) (async) r15 = openat$null(0xffffffffffffff9c, &(0x7f0000000900), 0x2, 0x0) getsockname$inet(r11, &(0x7f0000000940), &(0x7f0000000980)=0xc) (async) bind$unix(r15, &(0x7f00000009c0)=@abs={0x0, 0x0, 0x0}, 0x8) (async) lchown(&(0x7f0000000a00)='./file1\x00', r5, r6) 111.606059ms ago: executing program 4 (id=527): r0 = syz_open_pts() openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = open(&(0x7f0000000140)='./file0\x00', 0x8, 0x8) r2 = getpid() ktrace(&(0x7f0000000280)='./file0\x00', 0x0, 0x928, r2) mprotect(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x2) sysctl$net_inet_carp(&(0x7f0000000040)={0x4, 0x2, 0x70, 0x4}, 0x4, &(0x7f0000000500)="24ecb86e0c232ec35208679e1ea281cc797fe4bd6d1c44fadf08026427e5787463a66c4c9ce394e1cd12c9af54649f3aac9169ccc82b3fd4fe9a08a3b345d101557d0800f7c1610f00000000303807029ddb8fa5357c899bbb7f7d926f393282b12da2a6d38c18dd02a3683c386fe0ea", &(0x7f00000000c0)=0xfffffffffffffe8d, 0x0, 0xffffffffffffffcb) utimensat(0xffffffffffffffff, 0x0, &(0x7f0000000100)={{0x0, 0x8}, {0x2, 0x4}}, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x20, 0x4) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5, 0x10, r1, 0x0) writev(r0, &(0x7f0000000140)=[{0x0}], 0x1) 17.287696ms ago: executing program 6 (id=528): setreuid(0xee00, 0x0) (async) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) (async) r0 = getuid() (async) r1 = getuid() chown(&(0x7f0000000040)='./file0\x00', r1, 0xffffffffffffffff) (async) setreuid(0xee00, r0) chmod(&(0x7f0000000080)='./file0\x00', 0x2ea) (async) chdir(&(0x7f0000000100)='./file0\x00') (async) mkdir(&(0x7f0000000040)='./file2\x00', 0xe0) mkdir(&(0x7f0000000300)='./file0\x00', 0xb1) (async) rename(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000100)='./file2\x00') (async) getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0xc) (async) r3 = getpid() (async) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) ioctl$WSKBDIO_GETMAP(r4, 0x80047476, &(0x7f0000000100)={0x0, 0x0}) (async) r5 = fcntl$getown(r4, 0x5) ktrace(0x0, 0x5, 0x128, r5) (async) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000140)={{0x8, r0, r2, r1, 0xffffffffffffffff, 0x93, 0x7}, 0x80, 0x6, r3, r5, 0x2, 0x3, 0x6}) 16.879939ms ago: executing program 6 (id=529): r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000000)="b886", 0x2}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$TIOCSETA(r0, 0xc450443c, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, "97a2224ff1c14649ebb178926cc9795a6b47c1d1"}) fcntl$setown(r0, 0x6, 0xffffffffffffffff) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$FIONREAD(r1, 0xc028698b, &(0x7f0000000000)) 16.41982ms ago: executing program 0 (id=530): ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc5005601, &(0x7f0000000000)={0x10, 0x0, [{&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000068000/0x4000)=nil}, {&(0x7f00006ac000/0x4000)=nil, &(0x7f00006ad000/0x1000)=nil}, {&(0x7f0000001000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x10}, {0x0, &(0x7f0000ffb000/0x3000)=nil, 0x10000}, {0x0, &(0x7f0000826000/0x4000)=nil}, {&(0x7f0000000000/0x2000)=nil, &(0x7f0000000000/0x3000)=nil, 0xffffffffffffffff}, {0x0, 0x0, 0xfffffffffffffffc}, {&(0x7f00001c9000/0xb000)=nil, &(0x7f0000ffe000/0x2000)=nil}, {&(0x7f0000ffe000/0x1000)=nil, &(0x7f00001d2000/0x1000)=nil}, {&(0x7f00006ad000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil}, {0x0, &(0x7f0000156000/0x1000)=nil, 0x1ff}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f00001cf000/0x1000)=nil}, {0x0, &(0x7f0000ffd000/0x3000)=nil}, {&(0x7f00004c1000/0x2000)=nil, &(0x7f00001d3000/0x2000)=nil}, {&(0x7f00001cf000/0x4000)=nil}, {&(0x7f00004fa000/0x4000)=nil, &(0x7f00006ae000/0x2000)=nil}], './file0\x00'}) r0 = socket(0x18, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000300)="673bb5b8cc0c16ed08f1b8d24e2217f981aa6a78ef1d35e6abbbdabb26a52ad7f4601faa903493e339865dce0f225d", 0x2f}], 0x1) setuid(0xffffffffffffffff) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x7fffffff, 0x0, {0x0, 0x1}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket(0x18, 0x1, 0x0) setsockopt(r1, 0x1000000029, 0xc, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) setsockopt(r1, 0x1000000029, 0xc, &(0x7f0000000040)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) sysctl$kern(&(0x7f0000000140)={0x1, 0x29}, 0x2, 0x0, 0x0, 0x0, 0x0) sendmsg$unix(r0, &(0x7f0000000040)={&(0x7f0000000240)=@file={0x0, './file0\x00'}, 0xa, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="14"], 0x20, 0x401}, 0x0) 8.231686ms ago: executing program 2 (id=531): sysctl$net_inet_ip(&(0x7f0000003a40)={0x4, 0x2, 0x0, 0x18}, 0x40000000000002d2, 0x0, 0x0, &(0x7f0000000040)="57c9054eb6613a183f9cde7e234fdb9725047579df1ec2fb5887fb04d1a9aaf090a5db0cdcd1544be1990000000000000000", 0x4) 1.310671ms ago: executing program 4 (id=532): mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) munlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async) socket$inet(0x2, 0x3, 0x2) (async) kqueue() 255.263µs ago: executing program 6 (id=533): r0 = socket(0x11, 0x3, 0x0) r1 = syz_open_pts() ioctl$FIOASYNC(r1, 0x8004667d, &(0x7f00000000c0)=0x9) syz_open_pts() ioctl$TIOCGETA(r1, 0x402c7413, &(0x7f0000000000)) r2 = syz_open_pts() ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f0000000340)={0x7, 0x0, 0xfffffffe, 0x5, "ff14e7130b1e586ca6294000", 0x40, 0x3effc}) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000240)="f008858468173307f494d8d9831b45a883c7477609f266f4601d1f9ca76c8f9d39bad130f3fd09bc7197b5454617a962ac89a3d73af9193a72f262206fac711c6b4d8e5d9afbed067607e6b33bb614ea7fdb1ff5ef934ca75b2b21651eaf9706f0", 0x61}, {&(0x7f0000000380)="8121a8edacc29a05bd880f9d87ea1f820127b6eb8c8f3080981cbd19eaf5c82648f0fa6c104d8688a8d79e49334e261585e7454bd31e7a9224dbf48b80ed89249b4bacba7f8529bb50abc572d8485738c2998ebb612cc0d9991942da2f58d84d57c41ea1e878a8f6f01e814eed830e4729", 0x71}, {&(0x7f0000000400)="710aea721433d5c82eaaa5e2d6e2257b91527627377c4f261d86f28a327ca581aec0858c31b27adb38078f3af357db5c7e54970b517da577e13bc48c1ffa25fcf46ffa435105bf0e872f9d4b4e64b05e58183b41719dd936fd2bb77a026772d0fc9fd122c7e14195dd795325a1fb7a2792440dfd9dd3b987090e39f5ffbfd12413e215940415bfe8cb73178854a3ee9f9a65d2db7a3f11af058c636bd2d03415", 0xa0}, {&(0x7f00000004c0)="3af81b30c4eab1b7e833296b0ae28ee6053a1b1a11a94abe0d1ddea12e9ec472724fd75ae38551e1c793d50cd9a0294e6eebb876a062cae98c1699dd50b7ff58c516e20b0c6d658365dc1179a64d15a840b0ba4949af9f500c320e17e637a249d421489e", 0x64}], 0x4) syz_open_pts() ioctl$TIOCSETA(0xffffffffffffffff, 0xc0014462, &(0x7f0000000000)={0x80000004, 0x5, 0x3, 0xfff00003, "e8cf005068000000000000000000000400", 0x9, 0xb}) ioctl$TIOCSDTR(r2, 0x20007479) r3 = socket(0x18, 0x2, 0x0) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff"]) setsockopt(r3, 0x1000000000029, 0xb, &(0x7f0000003680)='\x00\x00\x00\x00', 0x4) setsockopt(r3, 0x1000000029, 0xd, &(0x7f0000000000), 0x14) ioctl$TIOCSTAT(r2, 0x20007465, 0x0) syz_open_pts() r4 = syz_open_pts() ioctl$TIOCSETA(r4, 0x802c7414, &(0x7f0000000340)={0x7, 0x0, 0xfffffffe, 0x5, "ff14e7130b1e586ca6294000", 0x40, 0x3effc}) syz_open_pts() mknod(&(0x7f00000000c0)='./file0\x00', 0x2000, 0x40000802) r5 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x4) ioctl$TIOCCDTR(r5, 0x20007478) ioctl$TIOCSTART(r4, 0x2000746e) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f0000000340), 0xd4e688a67930cd) writev(r4, &(0x7f0000000140)=[{&(0x7f0000000180)="6e74c6402d3a6d829a2aeb7accca82c9c1810e58d21b9a7c630c6c0ead51da08d4e0f33c685eb35a53f20aa6ba15206118fe9c27db604e126c77cda19ff35ea8b54d2acdc8b1284353f60157d5b983fe54905fc944f695b03332b324ebc72f82453c1e93a07e502493545530f459939bacd749fb02f2fe91a3fc7fd29b5b925f47fa8c3b0da44edf1891b37b7fd7203007d46ff734e5b753c795bad02c2a57807e8493bf05f24f49c8cd", 0xff1c}], 0x1) close(r6) close(r7) setsockopt$sock_int(r0, 0xffff, 0x800, &(0x7f0000000080), 0x2) 0s ago: executing program 1 (id=534): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f00000000c0), 0x10000, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000080)={'tap', 0x0}) sysctl$machdep(&(0x7f0000000040)={0x7, 0x1}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$net_inet_ipip(&(0x7f0000000040)={0x4, 0x2, 0x4, 0x1}, 0x4, 0x0, 0x0, 0x0, 0x0) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x0, 0x10, 0xfe, 0x10006}, {0x3d, 0x0, 0x0, 0x8000001}, {0x16, 0xff, 0x2, 0xe3}]}) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x6e, &(0x7f0000000000)=ANY=[]) kernel console output (not intermixed with test programs): OpenBSD/amd64 (Amnesiac) (tty00) Warning: Permanently added '10.128.0.3' (ED25519) to the list of known hosts. login: pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error sd0(vioscsi0:1:0): Check Condition (error 0x70) on opcode 0x1e SENSE KEY: Illegal Request ASC/ASCQ: Invalid Command Operation Code pckbd_enable: command error pckbd_enable: command error WARNING: thread `nfsio' (494139) exits with status -1 WARNING: thread `nfsio' (287117) exits with status -1 WARNING: thread `nfsio' (47532) exits with status -1 WARNING: thread `nfsio' (514753) exits with status -1 WARNING: thread `nfsio' (390425) exits with status -1 WARNING: thread `nfsio' (55375) exits with status -1 WARNING: thread `nfsio' (144762) exits with status -1 WARNING: thread `nfsio' (44644) exits with status -1 WARNING: thread `nfsio' (81805) exits with status -1 WARNING: thread `nfsio' (27650) exits with status -1 WARNING: thread `nfsio' (280904) exits with status -1 WARNING: thread `nfsio' (214250) exits with status -1 WARNING: thread `nfsio' (163782) exits with status -1 WARNING: thread `nfsio' (328113) exits with status -1 WARNING: thread `nfsio' (154629) exits with status -1 WARNING: thread `nfsio' (372871) exits with status -1 WARNING: thread `nfsio' (223026) exits with status -1 WARNING: thread `nfsio' (275239) exits with status -1 WARNING: thread `nfsio' (234954) exits with status -1 WARNING: thread `nfsio' (284267) exits with status -1 pckbd_enable: command error pckbd_enable: command error kernel: protection fault trap, code=0 Stopped at sys_msgrcv+0x3f2: movq 0x10(%r13),%rdi ddb> ddb> set $lines = 0 ddb> set $maxwidth = 0 ddb> show panic the kernel did not panic ddb> trace sys_msgrcv(ffff80003854aa88,ffff80003c983ee0,ffff80003c983e30) at sys_msgrcv+0x3f2 syscall(ffff80003c983ee0) at syscall+0x962 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x485f94100e0, count: -3 ddb> show registers rdi 0 rsi 0x200000001208 rbp 0xffff80003c983e10 rbx 0 rdx 0xffff800001464f40 rcx 0 rax 0xa r8 0x7f7fffffc000 r9 0 r10 0x7f1aaf6e2128c06d r11 0x466abf529bba26d1 r12 0xfffffd806872de60 r13 0xdeafbeaddeafbead r14 0xffff800001495800 r15 0xa rip 0xffffffff82bc26c2 sys_msgrcv+0x3f2 cs 0x8 rflags 0x10202 __ALIGN_SIZE+0xf202 rsp 0xffff80003c983d70 ss 0x10 sys_msgrcv+0x3f2: movq 0x10(%r13),%rdi ddb> show proc PROC (syz-executor) tid=232983 pid=78450 tcnt=4 stat=onproc flags process=0 proc=4000000 runpri=36, usrpri=79, slppri=36, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff80003854b250,0xffff80003c9b8040 process=0xffff80002cd30db8 user=0xffff80003c97e000, vmspace=0xfffffd806ba4cb90 estcpu=29, cpticks=0, pctcpu=0.0, user=0, sys=0, intr=0 ddb> ps PID TID PPID UID S FLAGS WAIT COMMAND 93354 256598 91474 0 2 0 syz-executor 93354 378885 91474 0 3 0x4000080 fsleep syz-executor 56343 291133 86187 0 2 0 syz-executor 56343 124486 86187 0 2 0x4000000 syz-executor 80697 372797 59949 0 2 0 syz-executor 80697 336719 59949 0 3 0x4000080 fsleep syz-executor 45705 225820 38918 0 2 0 syz-executor 45705 329019 38918 0 2 0x4000000 syz-executor 93364 337453 72913 0 2 0 syz-executor 93364 408679 72913 0 3 0x4000080 fsleep syz-executor 82451 189907 97138 -1 2 0x10 syz-executor 82451 114105 97138 -1 3 0x4000090 fsleep syz-executor 82451 250443 97138 -1 3 0x4000090 fsleep syz-executor 78450 133313 40865 0 2 0 syz-executor *78450 232983 40865 0 7 0x4000000 syz-executor 78450 24011 40865 0 3 0x4000080 fsleep syz-executor 78450 369656 40865 0 2 0x4000000 syz-executor 6146 302332 0 0 3 0x14200 bored sosplice 99533 115923 95111 0 3 0x82 nanoslp syz-executor 38918 366422 95111 0 3 0x82 nanoslp syz-executor 40865 325024 95111 0 3 0x82 nanoslp syz-executor 91474 519805 95111 0 3 0x82 nanoslp syz-executor 97138 487775 95111 0 3 0x82 nanoslp syz-executor 86187 404083 95111 0 3 0x82 nanoslp syz-executor 59949 266204 95111 0 3 0x82 nanoslp syz-executor 72913 65453 95111 0 3 0x82 nanoslp syz-executor 95111 235253 23968 0 3 0x82 kqread syz-executor 23968 73288 44599 0 3 0x10008a sigsusp ksh 44599 114368 64922 0 3 0x98 kqread sshd-session 64922 143282 4498 0 3 0x92 kqread sshd-session 95376 97438 1 0 3 0x100083 ttyin getty 4498 310424 1 0 3 0x88 kqread sshd 36561 94112 20560 73 3 0x1100090 kqread syslogd 20560 255567 1 0 3 0x100082 sbwait syslogd 23824 178772 1 0 3 0x100080 kqread resolvd 58390 486440 50448 77 3 0x100092 kqread dhcpleased 37759 336361 50448 77 3 0x100092 kqread dhcpleased 50448 457125 1 0 3 0x80 kqread dhcpleased 64166 395706 0 0 3 0x14200 bored smr 83458 518480 0 0 2 0x14200 zerothread 32041 300145 0 0 3 0x14200 aiodoned aiodoned 54600 155953 0 0 3 0x14200 syncer update 2810 79606 0 0 3 0x14200 cleaner cleaner 19545 469689 0 0 3 0x14200 reaper reaper 4842 160600 0 0 3 0x14200 pgdaemon pagedaemon 91982 486956 0 0 3 0x14200 bored viomb 51694 252454 0 0 3 0x40014200 acpi0 acpi0 30951 48116 0 0 3 0x14200 bored softnet7 83512 200310 0 0 3 0x14200 bored softnet6 28936 45620 0 0 3 0x14200 bored softnet5 5339 319524 0 0 3 0x14200 bored softnet4 52963 498466 0 0 3 0x14200 bored softnet3 61754 364294 0 0 3 0x14200 bored softnet2 8034 361812 0 0 3 0x14200 bored softnet1 57550 314989 0 0 3 0x14200 bored softnet0 5818 236228 0 0 3 0x14200 bored systqmp 56835 235058 0 0 3 0x14200 bored systq 40159 108362 0 0 3 0x40014200 tmoslp softclock 8316 300925 0 0 3 0x40014200 idle0 1 13924 0 0 3 0x82 wait init 0 0 -1 0 3 0x10010200 scheduler swapper ddb> show all locks No such command ddb> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 10243 11177K 11451K 166960K 11945 0 pcb 17 16K 21K 166960K 277 0 rtable 224 9K 9K 166960K 391 0 pf 31 13K 16K 166960K 69 0 ifaddr 41 7K 8K 166960K 67 0 ifgroup 46 2K 2K 166960K 84 0 sysctl 2 1K 9K 166960K 8 0 counters 31 17K 18K 166960K 152 0 ioctlops 0 0K 4K 166960K 242 0 iov 0 0K 20K 166960K 132 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1349 85K 85K 166960K 1779 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 9K 166960K 13 0 VM map 2 1K 1K 166960K 2 0 sem 12 0K 1K 166960K 24 0 dirhash 12 2K 2K 166960K 15 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 18 65K 102K 166960K 673 0 sigio 0 0K 0K 166960K 13 0 proc 60 59K 124K 166960K 531 0 subproc 72 4K 4K 166960K 72 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 83 0 in_multi 91 6K 7K 166960K 125 0 ether_multi 1 0K 0K 166960K 4 0 mrt 0 0K 0K 166960K 4 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 241 1076K 1076K 166960K 241 0 exec 0 0K 2K 166960K 425 0 fusefs mount 1 32K 32K 166960K 1 0 pfkey data 0 0K 0K 166960K 2 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 240 159K 168K 166960K 7532 0 UVM aobj 42 2K 2K 166960K 43 0 pinsyscall 39 78K 96K 166960K 1698 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 0K 166960K 28 0 NDP 10 0K 2K 166960K 41 0 temp 59 8639K 8716K 166960K 21388 0 kqueue 14 22K 34K 166960K 143 0 SYN cache 2 16K 16K 166960K 2 0 ddb> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle rtpcb 120 78 0 74 1 0 1 1 0 8 0 rtentry 136 127 0 36 4 0 4 4 0 8 0 unpcb 144 487 0 469 7 3 4 4 0 8 3 syncache 336 5 0 5 2 2 0 1 0 8 0 tcpcb 736 213 0 209 8 1 7 7 0 8 6 arp 88 14 0 2 1 0 1 1 0 8 0 ipq 40 3 0 1 1 0 1 1 0 8 0 ipqe 40 6 0 4 1 0 1 1 0 8 0 inpcb 328 637 0 629 15 8 7 9 0 8 6 ip6q 72 3 0 2 2 1 1 1 0 8 0 ip6af 40 5 0 4 2 1 1 1 0 8 0 nd6 104 25 0 6 1 0 1 1 0 8 0 pkpcb 40 7 0 7 3 2 1 1 0 8 1 kcovpl 48 8 0 0 1 0 1 1 0 8 0 ppxss 1072 118 0 118 3 2 1 1 0 8 1 pppxif 1384 2 0 2 2 1 1 1 0 8 1 pfstscr 40 2 0 1 1 0 1 1 0 8 0 pfrktable 1344 3 0 1 1 0 1 1 0 8 0 pftag 88 2 0 0 1 0 1 1 0 8 0 pfstitem 24 2 0 0 1 0 1 1 0 8 0 pfstkey 128 4 0 2 1 0 1 1 0 8 0 pfstate 384 2 0 1 1 0 1 1 0 8 0 pfrule 1344 1 0 0 1 0 1 1 0 8 0 rttmr 136 1 0 1 1 1 0 1 0 8 0 art_heap8 4096 2 0 0 2 0 2 2 0 8 0 art_heap4 256 562 0 149 31 2 29 31 0 8 1 art_table 40 564 0 149 5 0 5 5 0 8 0 art_node 32 126 0 49 1 0 1 1 0 8 0 sysvmsgpl 40 11 0 9 1 0 1 1 0 8 0 semupl 112 2 0 2 2 2 0 1 0 8 0 semapl 112 20 0 10 1 0 1 1 0 8 0 shmpl 112 40 0 1 2 0 2 2 0 8 0 dirhash 1024 19 0 2 3 0 3 3 0 8 0 dino2pl 256 2563 0 1066 95 0 95 95 0 8 0 ffsino 256 2563 0 1066 95 0 95 95 0 8 0 nchpl 144 3547 0 1862 63 0 63 63 0 8 0 rtmask 32 6 0 6 2 1 1 1 0 8 1 uvmvnodes 80 2859 0 0 59 0 59 59 0 8 0 vnodes 216 2859 0 0 159 0 159 159 0 8 0 namei 1024 12120 0 12120 5 4 1 2 0 8 1 kstatmem 264 50 0 30 2 0 2 2 0 8 0 scsiplug 72 3 0 3 3 2 1 1 0 8 1 scxspl 216 11351 0 11351 8 7 1 8 1 8 1 plimitpl 152 243 0 227 1 0 1 1 0 8 0 sigapl 424 972 0 921 10 1 9 9 0 8 2 knotepl 120 58509 0 58457 50 41 9 30 0 8 7 kqueuepl 184 304 0 292 5 4 1 4 0 8 0 pipepl 304 267 0 239 3 0 3 3 0 8 0 fdescpl 448 929 0 899 5 1 4 5 0 8 0 filepl 120 5501 0 5276 14 5 9 11 0 8 0 lockfpl 104 334 0 332 2 1 1 2 0 8 0 lockfspl 48 88 0 86 1 0 1 1 0 8 0 sessionpl 144 23 0 15 1 0 1 1 0 8 0 pgrppl 48 35 0 19 1 0 1 1 0 8 0 ucredpl 104 1170 0 1155 1 0 1 1 0 8 0 zombiepl 144 1104 0 1103 3 2 1 1 0 8 0 processpl 1168 972 0 921 7 1 6 6 0 8 2 procpl 664 1886 0 1823 9 1 8 8 0 8 2 sosppl 168 7 0 7 4 3 1 1 0 8 1 sockpl 552 1261 0 1231 21 13 8 10 0 8 5 mcl64k 65536 43 0 43 4 3 1 1 0 8 1 mcl16k 16384 5 0 5 1 0 1 1 0 8 1 mcl12k 12288 1 0 1 1 1 0 1 0 8 0 mcl9k 9216 2 0 2 2 1 1 1 0 8 1 mcl8k 8192 23 0 23 3 2 1 1 0 8 1 mcl4k 4096 3176 0 3125 16 9 7 15 0 8 0 mcl2k 2048 921 0 914 3 1 2 3 0 8 0 mtagpl 96 19 0 15 1 0 1 1 0 8 0 mbufpl 256 11304 0 11179 12 0 12 12 0 8 0 bufpl 280 3874 0 124 268 0 268 268 0 8 0 anonpl 24 161971 0 157967 61 11 50 50 0 187 18 amapchunkpl 152 24491 0 23936 33 8 25 25 0 158 2 amappl16 200 3383 0 3348 23 12 11 15 0 8 8 amappl15 192 5 0 5 1 1 0 1 0 8 0 amappl14 184 108 0 98 1 0 1 1 0 8 0 amappl13 176 10 0 10 1 1 0 1 0 8 0 amappl12 168 1563 0 1532 3 0 3 3 0 8 0 amappl11 160 45 0 35 1 0 1 1 0 8 0 amappl10 152 27 0 27 1 1 0 1 0 8 0 amappl9 144 249 0 249 1 1 0 1 0 8 0 amappl8 136 23 0 21 1 0 1 1 0 8 0 amappl7 128 118 0 108 1 0 1 1 0 8 0 amappl6 120 170 0 167 1 0 1 1 0 8 0 amappl5 112 116 0 109 1 0 1 1 0 8 0 amappl4 104 283 0 267 1 0 1 1 0 8 0 amappl3 96 4824 0 4705 4 0 4 4 0 8 0 amappl2 88 645 0 587 2 0 2 2 0 8 0 amappl1 80 10382 0 9829 14 1 13 14 0 8 0 amappl 88 6791 0 6615 5 0 5 5 0 92 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 254 0 254 2 2 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 42 0 1 1 0 1 1 0 8 0 uaddrrnd 24 929 0 899 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 929 0 899 1 0 1 1 0 8 0 vmmpekpl 168 9230 0 9202 2 0 2 2 0 8 0 vmmpepl 168 64766 0 62808 110 12 98 98 0 357 8 vmsppl 368 928 0 899 4 1 3 4 0 8 0 rwobjpl 40 22323 0 18541 41 0 41 41 0 8 0 pdppl 4096 1864 0 1798 106 40 66 82 0 8 0 pvpl 32 419634 0 410205 143 19 124 124 0 265 30 pmappl 216 928 0 899 3 0 3 3 0 8 0 extentpl 40 45 0 27 1 0 1 1 0 8 0 phpool 112 405 0 69 11 0 11 11 0 8 0 ddb> machine ddbcpu 0 No such command ddb> trace sys_msgrcv(ffff80003854aa88,ffff80003c983ee0,ffff80003c983e30) at sys_msgrcv+0x3f2 syscall(ffff80003c983ee0) at syscall+0x962 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x485f94100e0, count: -3 ddb> machine ddbcpu 1 No such command ddb> trace sys_msgrcv(ffff80003854aa88,ffff80003c983ee0,ffff80003c983e30) at sys_msgrcv+0x3f2 syscall(ffff80003c983ee0) at syscall+0x962 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x485f94100e0, count: -3