last executing test programs: 6.598090718s ago: executing program 4 (id=601): kevent(0xffffffffffffffff, &(0x7f0000000000)=[{{}, 0xfffffffffffffff9, 0xb9, 0x1, 0x1}], 0x0, 0x0, 0x7, 0x0) r0 = kqueue() kevent(r0, 0x0, 0x0, &(0x7f0000000340)=[{{}, 0xfffffffffffffff9, 0x35, 0x2, 0x7, 0x1ff}], 0x7, 0x0) kevent(r0, &(0x7f0000000000), 0x3ff, 0x0, 0x8000800, 0x0) unveil(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='c\x00') 6.497213276s ago: executing program 4 (id=603): openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x8a1, 0x0) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x2, 0x2, 0x4, 0x20005}]}) r0 = msgget$private(0x0, 0x600) msgsnd(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="01000000000000006b3ee0692d1111078cd46800310af74e0ece0f5fa5da5e7def680a8a7e57e84589be055c7c4fd1d67800795bdbd9ba053980542612c7a6b34415726c4a8aa20c77415fe892611bf69d68b6b210986534d81974b41d2bf6e8d77b1b1b4ea5895af15a06151f86e1be8103ed4ebb68dcecb3eccd2a5efd1e2d534396d5195e52817fe1a849fef866b6535df1c2b8071f7f86a2b581c37feb2efbc164bef5299305da89e5957dd4ac47db4e1162e223b5db2658160c7c9dd38a957cfd9772624f2966f527b41bb0f6554dfd215260b18253c7133cdfa4a5f80e0296c741848590264dcfdb1649564079b31d31"], 0x37, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x70e, 0x0) mmap(&(0x7f000000f000/0x2000)=nil, 0x2000, 0x0, 0x8010, r1, 0x0) kevent(r1, &(0x7f0000000040)=[{{r1}, 0xfffffffffffffffe, 0x1, 0x82, 0xfffffffffffffffb, 0x5}], 0x40, 0x0, 0x1000, 0x0) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x11}, 0x4000000000000007, 0x0, 0x0, 0x0, 0x0) sysctl$kern(0x0, 0x0, &(0x7f0000000100)="71f91e34", &(0x7f0000000080)=0x4, 0x0, 0x0) sysctl$vm_swapencrypt(&(0x7f00000000c0), 0x3, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$kern(&(0x7f00000000c0)={0x1, 0x33}, 0x2, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000280)=0x1c, 0x0, 0x0) sysctl$net_inet_esp(&(0x7f0000000240)={0x4, 0x1e, 0x2, 0x6}, 0x4, 0x0, 0x0, 0x0, 0x11) 6.490823437s ago: executing program 4 (id=605): symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') sysctl$kern(&(0x7f00000000c0)={0x1, 0x1}, 0x2, &(0x7f0000000140)="71f94b8e5f849c7a", &(0x7f0000000000)=0x8, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xa7210e10bc3c9de9) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) fchdir(r0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) r1 = socket(0x18, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x2, r1) close(r2) open$dir(&(0x7f0000001240)='.\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) sendmsg$unix(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYRES16=0x0], 0x28, 0x4}, 0x0) chroot(&(0x7f0000000080)='./file0\x00') recvmsg(r3, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/51, 0x33}, 0x0) mkdir(&(0x7f0000000140)='./file0/file1\x00', 0x41) unveil(&(0x7f0000000400)='./file0/file1\x00', &(0x7f00000000c0)='r\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) bind(r4, &(0x7f0000000080)=@un=@file={0x41a0805bbded0123, './file0\x00'}, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x637e) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9b, 0xffffffffffffffff, 0xfffffffffffffff8, 0x27fffffffffffffc, 0x181c, 0x8, 0x2000000000000004}, 0x0, 0x0, 0x0) r5 = kqueue() kevent(r5, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) r6 = open(&(0x7f0000000040)='./file0\x00', 0x40, 0x100) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x1, 0x7, 0x101, 0x4, 0x80002001, 0x8, 0x10, [{0x0, 0x7, 0x4, 0x71000}, {0x7, 0x4, 0xa, 0x7}, {0x6, 0xf86, 0x100, 0xaf9}, {0x5, 0x8, 0x7}, {0x6, 0x80000002, 0xe, 0x7}, {0x6, 0x1, 0xffffffff, 0x9c}, {0x80000cdf, 0xfffffffd, 0x3, 0x6d}, {0x2000a, 0x803, 0x14, 0x8}, {0x2, 0x81, 0x1, 0x9}, {0x6, 0x8001, 0xc7, 0x8b}, {0x4, 0xfffb, 0x9, 0xaeb}, {0x803, 0x40, 0x8, 0x5}, {0xe0, 0x4, 0x5, 0x3ff}, {0x29a71717, 0xfffffffa, 0x6, 0x100006}, {0x4, 0x7, 0x7}, {0x0, 0x1, 0x4, 0x30000}]}) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x8, 0x2000000000000004}, 0x0, 0x0, 0x0) ioctl$FIONBIO(r6, 0x82907003, &(0x7f0000000140)=0x2) 5.786003773s ago: executing program 3 (id=635): msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x44, 0xfff}, 0x80000000, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x1, 0x200023}) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0xffffffff, 0x1, {0x0, 0x1}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x18, 0x1, 0x0) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc5005601, &(0x7f0000000000)={0x10, 0x0, [{&(0x7f00001d0000/0x4000)=nil, &(0x7f0000663000/0x4000)=nil, 0xfffffffffffff801}, {&(0x7f00006ac000/0x4000)=nil, &(0x7f0000826000/0x4000)=nil}, {&(0x7f0000060000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil}, {0x0, &(0x7f0000ffb000/0x3000)=nil}, {0x0, &(0x7f0000ffb000/0x1000)=nil}, {&(0x7f0000000000/0x2000)=nil, &(0x7f00006ac000/0x3000)=nil}, {0x0, 0x0, 0xfffffffffffffffc}, {&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil}, {&(0x7f0000ad4000/0x2000)=nil, &(0x7f0000826000/0x1000)=nil, 0x40}, {&(0x7f0000110000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil}, {0x0, &(0x7f0000156000/0x1000)=nil, 0x12}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil}, {0x0, &(0x7f0000ffd000/0x3000)=nil}, {&(0x7f00004c1000/0x2000)=nil, 0x0, 0x9bbf}, {&(0x7f00001cf000/0x4000)=nil}, {0x0, &(0x7f0000358000/0x2000)=nil}], './file0\x00'}) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0e99db6de761f86, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x2, 0x0) ioctl$FIONREAD(r1, 0xc028698d, &(0x7f0000000100)) setsockopt(r0, 0x1000000029, 0xc, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) setsockopt(r0, 0x1000000029, 0xc, &(0x7f0000000040)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x1}}) pwritev(0xffffffffffffffff, &(0x7f00000032c0)=[{0x0}], 0x1, 0xdf) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setsockopt(r0, 0x1000000029, 0xd, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) 5.626832228s ago: executing program 3 (id=638): r0 = openat$speaker(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$SPKRTONE(r0, 0x80085301, &(0x7f0000000000)={0xfffffff7, 0xfffffffe}) sysctl$net_inet_icmp(&(0x7f0000001380)={0x4, 0x2, 0x1, 0x5}, 0x4, &(0x7f0000000000), 0x0, 0x0, 0x0) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) flock(0xffffffffffffffff, 0x1d) 5.625593426s ago: executing program 3 (id=640): mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2) r0 = syz_open_pts() ioctl$TIOCSETAF(r0, 0x802c7416, &(0x7f0000000000)={0xb96, 0x1, 0x6, 0xa, "9312c63e59c972015b5f3f8b9779a9e6c89fc2d7", 0x7f, 0x80000001}) ioctl$TIOCCDTR(r0, 0x20007478) ioctl$TIOCSTAT(r0, 0x20007465, &(0x7f0000000040)) ioctl$TIOCEXCL(r0, 0x2000740d) r1 = syz_open_pts() ioctl$TIOCSFLAGS(r1, 0x8004745c, &(0x7f0000000080)=0x7) ioctl$TIOCSETAF(r0, 0x802c7416, &(0x7f00000000c0)={0x200, 0x6106, 0x5, 0x3, "5190fa0960b8b291c2db0a195c6239bdae7ab665", 0x8}) ioctl$TIOCSTAT(r1, 0x20007465, &(0x7f0000000100)) ioctl$TIOCOUTQ(r0, 0x40047473, &(0x7f0000000140)=0x4) ioctl$TIOCEXCL(r0, 0x2000740d) fcntl$setflags(r0, 0x2, 0x1) ioctl$TIOCSBRK(r1, 0x2000747b) execve(&(0x7f0000000180)='./file0\x00', &(0x7f0000000400)=[&(0x7f00000001c0)='\'\xb6-%-%\x00', &(0x7f0000000200)='\xff\\\x00', &(0x7f0000000240)='\x00', &(0x7f0000000280)='\x00', &(0x7f00000002c0)='#&+-%$\x00', &(0x7f0000000300)='\x00', &(0x7f0000000340)='\x04\x00', &(0x7f0000000380)='\x00', &(0x7f00000003c0)='\x00'], &(0x7f0000000680)=[&(0x7f0000000480)='/&)&}@(!}[\x00', &(0x7f00000004c0)='-:\x00', &(0x7f0000000500)=']\'*/\x9a&}^5/\x00', &(0x7f0000000540)='.&7\x00', &(0x7f0000000580)='*-*+}$-%+-^%\x7f\xb9\x00', &(0x7f00000005c0)='\x00', &(0x7f0000000600)='-.{\xd3,$]\xfc%#\'$):]\xa5)-\x00', &(0x7f0000000640)='\x00']) ioctl$TIOCSDTR(r1, 0x20007479) r2 = getuid() setuid(r2) pipe2(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = dup(r3) ioctl$TIOCGFLAGS(r0, 0x4004745d, &(0x7f0000000700)) ioctl$KDSETLED(r5, 0x20004b42, &(0x7f0000000740)=0x5) sysctl$kern(&(0x7f0000000780)={0x1, 0x54}, 0x2, &(0x7f00000007c0)="85b202ba68899b06f99a673f1481a719c852f10508", &(0x7f0000000800)=0x15, &(0x7f0000000840)="505e870ba14f0099f6d953d2bc07247043ab4956c36c0e9eb051af3d1dcf4953f60dd576aab2a9bf884adf9b0c2459fd5c97b04dfc22ac7f2aa496d87bf8865c614a7f32f7044f455362", 0x4a) ioctl$TIOCNXCL(r0, 0x2000740e) poll(&(0x7f00000008c0)=[{r3, 0x10}, {r3, 0x80}, {r4, 0x2}, {r4, 0x4}, {r0, 0x1}], 0x5, 0xfffffffe) r6 = openat$tty(0xffffffffffffff9c, &(0x7f0000000900), 0x100, 0x0) ioctl$TIOCSTOP(r6, 0x2000746f) ioctl$TIOCMBIS(r3, 0x8004746c, &(0x7f0000000940)=0x6) socket(0x6, 0x3, 0xf) 5.620595258s ago: executing program 4 (id=641): syz_open_pts() (async) r0 = syz_open_pts() ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000340)={0x7, 0x0, 0xfffffffe, 0x5, "ff14e7130b1e586ca6294000", 0x40, 0x3effc}) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000380)="079facfaaed69aea4dc561c3b736feac0a2a76087be8b904ddc6f90b66e0f69b6dfba683b348224cf0ccc2a39b0f79389a2bd9b211424a22ca014b9231e253e257706c75b3f320166475c72455021edf575fab8b5d65b8d261c87c3ccc4e784ea7462f3723edabb8e26d27acb1797e2ef4db27270a", 0xffffff01}], 0x1) (async) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000380)="079facfaaed69aea4dc561c3b736feac0a2a76087be8b904ddc6f90b66e0f69b6dfba683b348224cf0ccc2a39b0f79389a2bd9b211424a22ca014b9231e253e257706c75b3f320166475c72455021edf575fab8b5d65b8d261c87c3ccc4e784ea7462f3723edabb8e26d27acb1797e2ef4db27270a", 0xffffff01}], 0x1) r1 = socket(0x2, 0x3, 0x0) socket(0x18, 0x2, 0x0) (async) socket(0x18, 0x2, 0x0) setsockopt$sock_int(r1, 0xffff, 0x1001, 0x0, 0x0) ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f00000000c0)={0x0, 0xffffffff, 0x7, 0x820351a, "090e4de6d30aa692318c7e0002f9ffffff8000"}) (async) ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f00000000c0)={0x0, 0xffffffff, 0x7, 0x820351a, "090e4de6d30aa692318c7e0002f9ffffff8000"}) syz_emit_ethernet(0x4c6, &(0x7f0000000680)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd606d9efb0490670000000000010000000000000afffffffefe8000"]) r2 = syz_open_pts() ioctl$TIOCSTAT(r0, 0x20007465, 0x0) r3 = syz_open_pts() mquery(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4, 0x10, r3, 0x23) ioctl$TIOCSETAF(r2, 0x802c7416, &(0x7f0000000000)={0x80000001, 0x3, 0x4, 0xa, "b3d6f92da635a1c0fb61435e8cb3b0b5bce466c6", 0x6, 0x1}) 5.143716747s ago: executing program 1 (id=649): mknod(&(0x7f0000000000)='./file1\x00', 0x2000, 0x285b9a) r0 = openat$pci(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) close(r0) r1 = socket$unix(0x1, 0x2, 0x0) link(0x0, &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') sysctl$kern(&(0x7f0000000040)={0x1, 0x35}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) sysctl$net_inet_carp(&(0x7f0000000040)={0x4, 0x2, 0x6, 0x2}, 0x4, 0x0, 0x0, &(0x7f00000010c0)="e1000000", 0x4) sendmsg$unix(r1, &(0x7f0000000080)={&(0x7f0000000900)=@file={0x170, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}, 0x6a, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x0) select(0x40, &(0x7f0000000180)={0xfffffffffffffffd, 0x44809e9d, 0xffffffffffffffff, 0xfffffffefffffffe, 0x2000000000000000, 0x210, 0x8, 0x7}, 0x0, 0x0, 0x0) r2 = dup2(r1, r0) utimensat(r2, &(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000100)={{0x2, 0xffffffffffffffff}, {0x2, 0x5879}}, 0x2) r3 = kqueue() kevent(r3, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) r4 = openat$zero(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$lock(r4, 0x8, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x100003ffe) r5 = semget(0x0, 0x1, 0x281) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) socket(0x6, 0x8000, 0xff) r6 = fcntl$dupfd(0xffffffffffffffff, 0xa, 0xffffffffffffffff) close(r6) openat$pf(0xffffffffffffff9c, 0x0, 0x200, 0x0) semctl$SETALL(r5, 0x0, 0x9, 0xfffffffffffffffe) setegid(0x0) r7 = open(&(0x7f0000000080)='./file1\x00', 0x40, 0x132) ioctl$FIONBIO(r1, 0x82907003, &(0x7f00000000c0)=0x1ff) ioctl$FIONBIO(r7, 0x82907003, &(0x7f0000000140)=0x1) 5.025073505s ago: executing program 2 (id=655): ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x0, [{}, {0x3, 0xfffffffc}, {0x2}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x0, 0xaa19}, {0x2}, {0x0, 0xffffffff}, {0x2}, {0x3, 0x4}, {}, {0x0, 0x3}, {}, {0x0, 0x6}, {0x2, 0x23}, {0x2, 0x1}, {0x3}, {0x0, 0xffffffff}, {0x0, 0x7ff}, {0x3}, {0x2}, {0x5}, {0x3}, {}, {0x2, 0x1}, {}, {0x0, 0x10000200}, {0x2}, {0x0, 0xfffffffd}, {0x2, 0xa}, {0x2, 0x100000}]}) r0 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$KDSETLED(r0, 0x20004b42, &(0x7f0000000180)=0x5) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r1 = socket(0x2, 0x2, 0x0) r2 = socket(0x2, 0x400000000002, 0x0) setsockopt(r2, 0x0, 0x1f, &(0x7f0000000080)="c5f5d915", 0x4) dup2(r2, r1) select(0x40, &(0x7f0000000000)={0xfffffffffffffffd, 0x0, 0x0, 0x564, 0x9ce8, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) bind(r1, &(0x7f0000000000), 0x10) r3 = socket(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0xffff, 0x20, &(0x7f0000000080)=0x6, 0x4) connect$unix(r3, &(0x7f0000000000), 0x10) write(r3, 0x0, 0x0) r4 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x2) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f00000000c0)={0x3, &(0x7f00000001c0)=[{0x5, 0x1e, 0xff}, {0x1, 0xfe, 0x0, 0x1}, {0x8306, 0x0, 0x40, 0x4000000}]}) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x20000000000001df, &(0x7f0000000040)=[{0x1, 0x0, 0x7, 0x7}]}) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) ioctl$VNDIOCSET(r4, 0xc0184406, &(0x7f00000001c0)={0x0, 0x0, 0x0}) semget(0x0, 0x1, 0x681) munmap(&(0x7f0000000000/0xf000)=nil, 0xf000) r5 = socket(0x800000018, 0x2, 0x0) bind$unix(r5, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) getgid() readv(r0, &(0x7f0000000340)=[{&(0x7f00000001c0)=""/237, 0xed}, {&(0x7f00000002c0)=""/66, 0x42}], 0x2) sysctl$kern(&(0x7f00000000c0)={0x1, 0x37}, 0x4, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x3, 0x0, 0x2e) mprotect(&(0x7f0000fed000/0x12000)=nil, 0x12000, 0x2) 4.951683563s ago: executing program 2 (id=659): syz_emit_ethernet(0x46, &(0x7f00000002c0)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "ccce72", 0x10, 0x2c, 0x81, @remote={0xfe, 0x80, '\x00', 0x0}, @local={0xfe, 0x80, '\x00', 0x0}, {[@dstopts={0x55}], @icmpv6=@ndisc_rs}}}}}) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x100000000000000, 0x10040000000001}}) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) (async) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket(0x1, 0x2, 0x0) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0xfffffffffffffffd, [{&(0x7f00000c7000/0x3000)=nil, &(0x7f0000ff6000/0x6000)=nil, 0x1}, {&(0x7f00004d7000/0x2000)=nil, &(0x7f0000698000/0x1000)=nil, 0x3}, {&(0x7f00005fd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x1}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff7000/0x3000)=nil, 0x80}, {&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff1000/0x1000)=nil, 0xc}, {&(0x7f00004f8000/0x2000)=nil, &(0x7f000068e000/0x12000)=nil, 0x2000000000000000}, {&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff2000/0x2000)=nil, 0x7}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000696000/0x2000)=nil, 0xffffffffffffffff}, {&(0x7f000013f000/0x2000)=nil, &(0x7f0000445000/0x3000)=nil, 0xfffffffffffffffd}, {&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000445000/0x4000)=nil, 0x8}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000695000/0x1000)=nil, 0xffffffff}, {&(0x7f00007f8000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x43}, {&(0x7f00000c6000/0x2000)=nil, &(0x7f0000668000/0x4000)=nil}, {&(0x7f000051f000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x4}, {&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffa000/0x6000)=nil}, {&(0x7f0000ff1000/0x1000)=nil, &(0x7f0000010000/0x3000)=nil, 0x1}], './file0\x00'}) ioctl$FIONREAD(r0, 0xc0106924, &(0x7f00000001c0)) socket(0x18, 0x1, 0x0) (async) r1 = socket(0x18, 0x1, 0x0) close(r1) r2 = socket(0x18, 0x2, 0x0) setsockopt(r2, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) connect$unix(r1, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) fcntl$getown(0xffffffffffffff9c, 0x5) (async) r3 = fcntl$getown(0xffffffffffffff9c, 0x5) syz_emit_ethernet(0x66, &(0x7f0000000000)={@broadcast, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "9907a6", 0x30, 0x2c, 0x3, @rand_addr="cb695d653e0000000000000000000020", @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x3, {0x9, 0x6, "00de00", 0x6, 0x1, 0x8, @rand_addr="26651f52e2840a3a68632730c0fc4357", @loopback}}}}}}}) (async) syz_emit_ethernet(0x66, &(0x7f0000000000)={@broadcast, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "9907a6", 0x30, 0x2c, 0x3, @rand_addr="cb695d653e0000000000000000000020", @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x3, {0x9, 0x6, "00de00", 0x6, 0x1, 0x8, @rand_addr="26651f52e2840a3a68632730c0fc4357", @loopback}}}}}}}) ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x900, r3) 4.900583717s ago: executing program 2 (id=662): poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x40}], 0x1, 0x1ff) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5013, 0xffffffffffffffff, 0x0) execve(0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x4, 0x1) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)) syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x2) ioctl$VNDIOCSET(r0, 0xc0104401, &(0x7f00000001c0)={0x0, 0x0, 0x0}) r1 = socket(0x2, 0x1, 0x0) connect$unix(r1, &(0x7f0000000000), 0x10) ioctl$KDDISABIO(r0, 0x20004b3d) r2 = open$dir(&(0x7f0000000040)='./file0\x00', 0xae828e137847f62, 0x0) setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) ftruncate(r2, 0x40000000007) chmod(&(0x7f00000002c0)='./file0\x00', 0x10) r3 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000200), 0x10001, 0x0) ioctl$WSDISPLAYIO_LSFONT(r3, 0xc058574e, &(0x7f0000000240)) truncate(&(0x7f00000000c0)='./file0\x00', 0x100000000) 4.894316155s ago: executing program 7 (id=664): r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) dup2(r0, r1) writev(r1, &(0x7f00000004c0)=[{&(0x7f0000000180)="3954a494c82a03ff258ef57fe8b71d2fd2de9c70506a3c0a38823bb5a813c77273191beb7296b2086c5ea59d45026e82a46407e11e3776ee70ea1cae0e56b17130d474a61f35786c68977bcd96034d662b0c379be0bf0e70c8bad6a62806351a629622e6baf077ba76d7a43ecd30b56d88243dadb453321a0719a73bcf7911c7762fda80f8911ef4fbae6e1cf514ec8e0249b5ebacf230d91d4c2bc2400e4bb91fd3e8a7aed44aae301e488ca29cea51de51c5a30daa6282fd648e35f16506e5dba7204974d3e877e6a59b3a770d2f63", 0xd0}, {&(0x7f0000000280)="793efe8b02e4c2262b450df15f3096230b43d2db5f75054ba5c413a2f3f062ae8e47ec6f0fafb512574c86a3b967668eba0ebf41df096667f1ce2aa81a0c41f1e58efb90096ac90ec7a1f41a73342eec4af1263a758678922fb451c1e03c6d66a27950080eb21d41e7219ebbfcaf15865a40bf2442a2b9c7d3a249efd3b410265bee87fc273f0782e16aae37694ef2a8b6ce", 0x92}, {&(0x7f0000000000)="aa038ef45fda3ee7441779fb41d72a38947ddb7e4f93b10af5c0cff3028f3837170a3ef66ea2e8db9210f11b9668698809d3a8a8b8b8fd1d2342cecea52661353fcc0eade7c8a01378010a6c8d137bbc476ee81b4023791ea65503fffd870982ecf1430734146ba2a1e2a2d84936", 0x6e}, {&(0x7f0000000340)="6bf138a96b6c03be32c1fddcc0da50cd1e3e58a76c10ceb142b3aedc2e3eec67ab639aab0599872262cab5af3f3bfa4931d63e83dd20c68fec8b080ab0e2f61b2726d527a4f12d630e2c33cdb6d4cc793c2ede503a8ef4707694286c45ec705387ccf74540d81daaecdaa4f5d21efcf9a670ad34eada7bed9ab0573f9f65737ffd8165500519292858a5ee86f186", 0x8e}, {&(0x7f0000000400)="866b9987de0a48ea62f9210b2d9af1e6b93608274db2016003eb92f3df96963a1b2080bd15556efda1ee2a787da82134b94d4c1f13", 0x35}, {&(0x7f0000000440)="b711500fd5d220", 0x7}, {&(0x7f0000000480)="ac061f28295bddae8eb4962aef167337b31ce302a99be7c45d04cef294ecadb54bf6900243e402b85330a1119c932c128146dce2d17c639a69672ad443fc", 0x3e}], 0x7) ioctl$FIONBIO(r0, 0x8004667e, &(0x7f00000005c0)=0x7) getsockname$unix(r0, &(0x7f0000000540)=@abs, &(0x7f0000000580)=0x8) sysctl$net_inet_ip(&(0x7f0000000080)={0x4, 0x2, 0x0, 0x1a}, 0x4, &(0x7f00000000c0)="7c29c29cc8", &(0x7f0000000100)=0x5, &(0x7f0000000140)="9978335f906e0899da684552697de7b85e762e8d", 0x14) ioctl$VNDIOCSET(r0, 0xc0384600, &(0x7f0000000680)={&(0x7f0000000600)='./file0\x00', 0x7fff, &(0x7f0000000640)='./file0\x00', 0x8}) 4.79493987s ago: executing program 7 (id=665): pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) (async, rerun: 32) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000001480), 0x10, 0x0) (rerun: 32) ioctl$BIOCSETF(r2, 0x80104267, &(0x7f0000001740)={0x1, &(0x7f0000001700)=[{0x15, 0xa, 0x40, 0x7}]}) (async) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000240)=""/193, 0xfffffdf0}], 0x1) (async) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="19", 0x3a4e1e905c56cdb7}], 0x1) (async) r3 = socket$inet(0x2, 0x2, 0x0) close(r3) (async) r4 = socket$inet(0x2, 0x1, 0x0) r5 = accept$inet(r4, &(0x7f00000000c0), &(0x7f0000000140)=0xc) setsockopt$inet_opts(r5, 0x0, 0x200000000000b, &(0x7f0000000080)='\x00', 0xfffffffffffffe81) (async) bind$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) (async) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x2, 0x0, 0x25}, 0x4, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) socket$inet(0x2, 0x1, 0x8) sysctl$net_inet_tcp(&(0x7f0000000040)={0x4, 0x2, 0x6, 0x14}, 0x4, &(0x7f0000000400), &(0x7f0000000080), 0x0, 0x0) (async, rerun: 64) setsockopt$inet_opts(r3, 0x0, 0xd, &(0x7f0000000240), 0x0) (rerun: 64) 4.793065207s ago: executing program 2 (id=666): r0 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sysctl$kern(&(0x7f00000000c0)={0x1, 0x3e}, 0x2, 0x0, 0x0, 0x0, 0x0) (async) sysctl$hw(&(0x7f0000000040)={0x7, 0xf}, 0x2, 0x0, 0x0, 0x0, 0x0) (async) close(r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) sysctl$kern(&(0x7f0000000040)={0x1, 0x35}, 0x2, &(0x7f0000001540), 0x0, 0x0, 0x0) (async) sysctl$kern(&(0x7f0000000040)={0x1, 0x48}, 0x2, 0x0, 0x0, &(0x7f00000001c0), 0x0) pread(r0, &(0x7f0000000180)='+', 0x1, 0x8000000000000000) getsockopt$sock_linger(r0, 0xffff, 0x80, &(0x7f0000000000), &(0x7f0000000040)=0x8) (async) r1 = getgid() (async) r2 = getegid() socketpair(0x18, 0x3, 0x4, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) getsockopt$sock_cred(r3, 0xffff, 0x1022, &(0x7f0000000580)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) chown(&(0x7f0000000180)='./file0\x00', 0x0, r4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$sock_cred(r5, 0xffff, 0x1022, &(0x7f0000000580)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, r6}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$sock_cred(r7, 0xffff, 0x1022, &(0x7f00000004c0)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0xc) lchown(&(0x7f0000000080)='./file0\x00', 0x0, r8) r9 = getgid() (async) r10 = open$dir(&(0x7f0000000000)='./file0\x00', 0x10000, 0x8) (async) getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000080)={0x0, 0x0}, 0xc) getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0xc) fchownat(r10, &(0x7f0000000040)='./file0\x00', r11, r12, 0x2) getgroups(0x9, &(0x7f0000000100)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff]) getgroups(0xa, &(0x7f0000000140)=[r1, r2, r4, r6, r8, r9, 0xffffffffffffffff, r12, r13, 0xffffffffffffffff]) 4.781208644s ago: executing program 2 (id=668): mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r0 = open(&(0x7f0000000000)='./file0\x00', 0x80, 0x0) syz_emit_ethernet(0x4e7, &(0x7f00000015c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6603816a04b10630fe8000000000000000000000000000bbfe8000000000000000000000000000aa4e234e230008907833193c00aa758564588e93871e19e471b5aa5113a42f2848f87dbe8b3002888281cae91f5119620fe690ae475bb2ecbcafe4a890da693740f9dbe66dd63d6f50a969c7c30e1c5434abb078bebd2393522f7ea442c5a697018642b2bd06661ba763cc6ec21a135c3b7c746f2cd82cae483e593f4ff0ba6e20e5cb4a0206a73b4104184130c57688bf3ec5346d1908abfcaaed562a32b7c6eed273fca98628da4c767c15411d7d9853add5786225a2a9d672171dd95dee0276d24adf8bfb9d55756cc346f7f97e7d846a9550eadedd9ed4e4747b197a20f081b6be25c43b73f7608aeac8fbbf48554423aa009d51c9d87cc0c7c25de66472a01f11286e8b803d58f348890775317e5ffe371e68bfa6e8b81bfad3bb0d14e5fe898b3adc90fe9eb1110400c073f96afcabe17a1836576c5f80613c195e58dd3144375bf4f70a0c62aea9c4d8be36da91a488652362e2fab4645f5b05c464a0a60482b3862b1dde69a4929daf9ad49c7f43899a3a14a9b7d7a38151dfa6512bcc892f91e26b1fe73100fd4ecf50e78f4591c92bf93ab7e6bc15f98c44bae1efd52c3c21ceec5e9cf21c391c653511c622f1a2d2c7965913022ac881523ea6ee0756796c089a05ee3be2d7729439ab67a69afecec00148647274628d5ce6c39354be9c0e9545f647338703097978f3cb424dc0cc939637633d84557f6f58c3dfa159878837e2d08a43e2dcd5e9b9a82f88ad6687e1f48a4994010ede263736fd979556a60514ad8d31aad1fc18a570f228f093ccd1bb6fd908dfa7a31b8e65b1bace2bd65a4921052ffceb6ab566299bf3ceda5d9a7fb36f234666fff00cd773da3b1a0dca7cf17681d27d44ccbb6fb5b44b34abfc7fa9dc699aa71b1f3165bdbcd05deca921a458ff32556d0e8e8bfabba7f266d1dc460654083d6c9f79b9ae5254ad1d5fa5eb2fa579398ddf733885329bd2d323552f105af88354c3c80280893d04ff0e440bc940db5776c99097e53ef711e88dee6650f1418912b49852ec986b11878dffc67dd28c7c0d8a07d419bd867563fd68b8f2f0ba413c56f0f4080d60ca5920416bb0c56226ff55e26fe0b9fe488aff092caf153e7f324a557dee276305dc16ef9d1eac38e261d7a5b4ba682ce64185e3b28272a625eb763895f1a8e615570845b2cf64f2a8a36364e4aad464cfc92724229ec5f7bf48511ad8cabb04f749e91bbd0c636bcf6e74218a3672115a82cd7064a9927ca53951e0a06e3e3f85103bfb1e5beda017688f199c62689e4a7523018d04d8616f6fcc666cbd3ef302e75ddce8a9b4fecc152ad6534a53dbbad080429f9f9404d43f514314df8ab44f59ff403399b5ed9532ef986582c313d83f13b8fce36cc12c361d1abc646f6d89f453add59850ee9059639b27977d61970ac144e68292cb18c1c76bf7aa45faa844505b04aa0f29d7a77267b717faaf3392ef7a546edb8de3783dfcd07636336b502504f86891edb1136cf5bd23892632c61e7c74e9920ec53f479a380978053b7c867b2ae50975b09f646904d83f69b2a8ee40a8ef53ba7218fb264385035ced06abf8ae6580a2cda802f94a6077228cd83d7365520d7149f6a5aa1f21ccc9b85f967afe96536378bddec2d3c95ed20c56cbaad4273a954332f6f5ca56319474a5be45061bf5b1b4"]) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x7, 0x2000007, 0x101, 0x80000001, 0x80000801, 0x10001, 0x10, [{0x0, 0x7, 0x4, 0x71000}, {0x7, 0x8, 0x8, 0xfffffff9}, {0x8, 0xf86, 0x0, 0x9}, {0x1, 0x800, 0x30000}, {0x401, 0x726, 0xe, 0x7}, {0x2, 0x6, 0x3, 0x99}, {0xcdf, 0x1, 0x4f8, 0x6d}, {0x6, 0x803, 0x14, 0x8}, {0x2, 0x81, 0x1, 0x9}, {0x4, 0x8001, 0xd1b, 0x88}, {0x1, 0x10001, 0xc, 0x3}, {0x7ff, 0x4, 0x8, 0x5}, {0xb8c, 0x4, 0x6, 0x6}, {0x29a71717, 0xfffffffa, 0x4, 0x6}, {0x4, 0x7, 0x6}, {0x0, 0x1, 0x4, 0x30004}]}) open$dir(&(0x7f0000000040)='./file0\x00', 0xae828e137847f62, 0x0) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x2, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000000)="1cd2d176f4b8f82c1d09936270286ea75b958983a9f15438392f4d2feb0900000000000ef962", 0xa8269}], 0x1, 0x0) sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b10005016000009f0500000007000000331c13fecea10500fef96ecfc72fd3357a068da3a5673039d2d236acf20b7804be38164991f7cccf5f882b297be1aa5b23", 0x41, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket(0x18, 0x2, 0x0) truncate(&(0x7f00000002c0)='./file0\x00', 0x4) getsockopt$sock_int(r2, 0xffff, 0x1003, &(0x7f0000000100), &(0x7f0000000040)=0x4) ioctl$WSMUXIO_REMOVE_DEVICE(0xffffffffffffffff, 0x80085762, &(0x7f0000000040)={0x1}) r3 = socket(0x18, 0xc003, 0x3a) setsockopt(r3, 0x29, 0x6c, &(0x7f0000000040), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r3, 0x29, 0x66, &(0x7f00000003c0)={0x0, 0x1, 0x10, 0x3}, 0xc) setsockopt$inet6_MRT6_ADD_MFC(r3, 0x29, 0x68, &(0x7f0000000000)={{0x18, 0x3, 0xfffff001, 0x4}, {0x18, 0x2, 0x8, 0x4}, 0x1003, [0x4, 0xfffffcb1, 0x24a, 0xc, 0x1, 0x8, 0x9, 0x1]}, 0x75) r4 = open$dir(&(0x7f0000000380)='./file0\x00', 0x1, 0x12e) ftruncate(r4, 0x80002) setreuid(0xee00, 0x0) r5 = openat$pf(0xffffffffffffff9c, &(0x7f00000001c0), 0x80, 0x0) ioctl$TIOCSETA(r5, 0xc0044418, &(0x7f0000000180)={0x2, 0x2, 0x8, 0x0, "cded2108002581ba7db28c9d6fb975390a000004", 0x47ffd, 0x6}) symlinkat(&(0x7f0000000240)='./file0\x00', r5, &(0x7f0000000300)='./file0\x00') mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0xd02) r6 = open(&(0x7f0000000100)='./bus\x00', 0x2, 0x8) ioctl$VNDIOCSET(r6, 0xc0285108, &(0x7f0000000040)={0x0, 0x29, 0x0}) bind(r2, &(0x7f0000000340)=@in={0x2, 0x3}, 0xc) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$VNDIOCSET(r0, 0xc0104407, &(0x7f00000001c0)={0x0, 0x0, 0x0}) 4.780876031s ago: executing program 7 (id=669): kqueue() syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket(0x2, 0x1, 0x5) poll(0x0, 0x0, 0x3) setsockopt$sock_linger(r0, 0xffff, 0x80, &(0x7f0000000080)={0xb, 0xd5}, 0x8) connect$inet(r0, &(0x7f0000000000), 0x10) close(r0) syz_extract_tcp_res(&(0x7f0000000040), 0x4, 0x1) 4.643738299s ago: executing program 2 (id=671): r0 = syz_open_pts() ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x1, 0x2, 0x101, 0x80000001, 0x80000001, 0x7, 0x10, [{0xfffffffc, 0x7, 0x4, 0x71000}, {0x7, 0x4, 0x8, 0x2007}, {0x6, 0xf86, 0x0, 0x4}, {0x9, 0x800, 0x7}, {0x6, 0x80000003, 0x80e, 0x7}, {0x2, 0x1, 0xefffffff, 0x800009c}, {0x80000cdf, 0xfffffffd, 0x3, 0x6d}, {0xa, 0x8803, 0x14, 0x8}, {0x2, 0x81, 0x1, 0x9}, {0x6, 0x8001, 0xc7, 0xb}, {0x4, 0xfffb, 0x9, 0xaeb}, {0x803, 0x40, 0x8, 0x5}, {0xe0, 0x4, 0x5, 0x3ff}, {0x29a71717, 0xfffffffe, 0x6, 0x100006}, {0x4, 0x7, 0x7}, {0x0, 0x1, 0x4, 0x30000}]}) clock_getres(0x2, &(0x7f0000000000)) r1 = syz_open_pts() r2 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) write(r1, &(0x7f0000000240)="4bbdde27a39f3ab58fcff5abc85194ccf7cd59c5f9036b664cff7f5f79b7bc55b0b9eb46c5c32da2815a3e7eaae3c0aed7b130443d4f860bd9ee5262e5e44f7696e964e1c948b915cc39580ab1c5005b18dd3666ab1d54e996aeb9dd00e2feb15da528d30b32e70b078efa996b47f027059648bbf1641d9b17aeb2b304ccbfec3069f127f8dfabaf59", 0x89) ioctl$WSMOUSEIO_SRES(r2, 0x80045721, &(0x7f0000000080)=0x9) recvfrom$unix(r2, &(0x7f00000000c0)=""/229, 0xe5, 0x4, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0xa) openat$vmm(0xffffffffffffff9c, &(0x7f0000000200), 0x100, 0x0) sysctl$kern(&(0x7f00000000c0)={0x1, 0x55}, 0x3, &(0x7f0000000000)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec370824a8876eaed1a9d70b5bc5bbb2f68d6c9", &(0x7f0000000080)=0xffa2, 0x0, 0x37) setgid(0x0) ioctl$FIOASYNC(r2, 0x8004667d, &(0x7f0000000440)) syz_open_pts() flock(r0, 0x2) close(r0) 4.565175747s ago: executing program 7 (id=674): sysctl$net_inet6_icmp6(0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)="e2f96fe1ee9409705b9c9e1ebb717d989ba1559f896530753ff3d3b286d238c0e301816e6d48a233960cff5ca0ef5677c2fe26a7badf64894c116b64fc98667f660e35826b1c30bd66f432564db640785d4f6ae10e4d33e451e16315b3f21d799ae203e6a63fbbb6e70c6c989b416b1bfbb863401c6bc99b6bc4fdab3fb7740cd60ffe779e3b6922bfaf36d74475ebe074392611f32c3239797354630aeed3fc78f347e9", 0xa4) setrlimit(0x8, &(0x7f0000000580)={0xa, 0x56}) r0 = syz_open_pts() pwritev(r0, &(0x7f0000000380)=[{&(0x7f00000003c0)="1f0e8358f2868697f3a8aed8e46ff870a35b3a0b7304bc6a52b71cbce597098124d6180983e170b6ec3ff830397eafe55523fe29996d0a966629b20a4a002fc9bdd1663d7bc0ca2b5f16384a1a7f7945a24511c39072e98c6553ad89cc91141be26578ea56", 0x65}, {&(0x7f00000000c0)="f1c5cc6a847d73c33654f36831fe891780d49ccb875600611a8a684cf93c9353015e8461ee0550b91789250aa71d6503a20ee03b4d9ba39fe3cc6b7312c09e88e219b48c24d5acce0e980218edbe8db13ae2d3bda2c76bc6fc8ad0497d7652fadb8c95247baa0dcd71184d922b65d5994432294084f4046b2c3dbd4092658a05e7f64c2442b88d6cdff6bbc41072c7f59da230a64b08c08c3ff33dcd838605ed81765fab764eb00adf4fd791169af5c83cc4a77d4d6a9fccd3e1c97b071d37f3", 0xc0}, {&(0x7f0000000180)="54c423f468c41e95d8bdb7de2ce13806ff0e80b4b6e4f033e2831aac7c5c65b10b62cfbf7b643921b5f03b73a71794bac96554cfd655f9cb44c6a306300bbbaa6d48adda52829edce1f585b999c49e6b8f1b9fbdf8fd9ab2371c154e85798b28a35cb00897b440aff389ba06470faef41f431737f8a83611a1a4911eab1eaddcc90c2eea0a0776c756f576158d1ea292bee6c094d85fd88d29a8db6446c5d369e237a544534bf60e4a099d", 0xab}, {&(0x7f0000000240)="d3b2b354733bd10f637636763e3581af8e01393b63bf0ca5bbbde399f12135a29f538dc2c257096a9456464ac5a2f427eed7d82aac9a55fc5afd19350e4283fab0b6167e0e703ba9e728bcd018ae6bf0a2ab", 0x52}], 0x4, 0x1) close(r0) r1 = syz_open_pts() ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000000)={0x820e, 0x6, 0xffffdf82, 0xc, "08951c1cfac173fc0ada89a825e909ffd700", 0x4000000, 0x2}) getrlimit(0x5, &(0x7f00000004c0)) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7, 0x0}, 0x8) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x3, 0x4000000000000003}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket(0x18, 0x1, 0x0) close(r2) r3 = dup2(r1, r0) read(r3, &(0x7f0000000480)=""/33, 0x21) socket(0x18, 0x3, 0x3a) setsockopt(r2, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) connect$unix(r2, &(0x7f0000000040)=@file={0x1, './file1\x00'}, 0xa) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) close(r0) 3.3934648s ago: executing program 7 (id=677): r0 = syz_open_pts() ioctl$FIOASYNC(r0, 0x8004667d, &(0x7f0000000000)=0x58) syz_open_pts() poll(&(0x7f0000000140)=[{r0, 0x80}], 0x1, 0x8001) syz_open_pts() setrlimit(0x8, &(0x7f0000000040)={0x7, 0x50}) setsockopt(0xffffffffffffffff, 0x0, 0x21, &(0x7f0000000080)="c5f5d915", 0x4) (async) setsockopt(0xffffffffffffffff, 0x0, 0x21, &(0x7f0000000080)="c5f5d915", 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$kern(&(0x7f0000000040)={0x1, 0x3e}, 0x2, &(0x7f00000000c0), &(0x7f0000000080), 0x0, 0x0) (async) sysctl$kern(&(0x7f0000000040)={0x1, 0x3e}, 0x2, &(0x7f00000000c0), &(0x7f0000000080), 0x0, 0x0) open$dir(&(0x7f0000000040)='./file0\x00', 0xae828e137847f62, 0x0) (async) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0xae828e137847f62, 0x0) setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) ftruncate(r1, 0x40000000007) truncate(&(0x7f00000000c0)='./file0\x00', 0x6001000004) select(0x40, &(0x7f00000000c0)={0x0, 0x1, 0x4, 0x0, 0x100000000000000, 0x1000006, 0xffffffffffffffff}, 0x0, &(0x7f0000000240)={0x60, 0xfffffffffffffffe, 0x0, 0x0, 0x9, 0x9, 0x1ff, 0xffc}, 0x0) (async) select(0x40, &(0x7f00000000c0)={0x0, 0x1, 0x4, 0x0, 0x100000000000000, 0x1000006, 0xffffffffffffffff}, 0x0, &(0x7f0000000240)={0x60, 0xfffffffffffffffe, 0x0, 0x0, 0x9, 0x9, 0x1ff, 0xffc}, 0x0) 3.383699194s ago: executing program 0 (id=680): mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x637e) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x8, 0x2000000000000004}, 0x0, 0x0, 0x0) r0 = kqueue() kevent(r0, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file1\x00', 0x61cf, 0xffffffec, 0x8, 0x0, 0x7ff, 0x1002, 0x1, 0x2, 0x1, 0x0, 0x4000000000f1a}) r1 = open(&(0x7f0000000040)='./file0\x00', 0x40, 0x100) ioctl$FIONBIO(r1, 0x82907003, &(0x7f0000000140)=0x2) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) ioctl$FIONBIO(r1, 0x82907003, &(0x7f0000000140)=0x1) close(r1) syz_emit_ethernet(0x36, &(0x7f0000000080)=ANY=[@ANYRESHEX=r1, @ANYRES32=r1, @ANYRES64=r1, @ANYBLOB]) 3.383021468s ago: executing program 7 (id=681): r0 = syz_open_pts() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x2e, &(0x7f00000002c0)=[{&(0x7f00000000c0)="7ab655a9bff680186e6c2696246591e67cc1b6e3664aca3174f2befc292f4378992cd2"}, {&(0x7f0000000340)="aa50445c14723c7cf8fa2e339d95b9e2b29c3b85124e5701fead35dc71cfb6bcf1735c60c8a2e1387ae1248afe1a982e3a6d64bda8bc4133e4f7da4ed061443f2cda685790bc443aae1432203ea97113b09d9d7786588777a91d06a5ccdb8c435cdd301e528409a4b34bf53daefb4d91f7fd9195721359d06461a685b7136ef2f5115ffa7adb60515dc8fdf2197d17e9f6dd7082f423f26cc1bebce9adc7a740"}, {&(0x7f00000004c0)="9211af1bcc9ef2c2700b713fd495885b698402d2652063db8d9eb751ffb33f75243aa854704508bedaabc8d0e8ac8a2655cc5a84969b0a019718bdbcd4b71434e74e4261b9d16aa11d4b1223eaf9a029aa664f736e0f30eeb645edf83f6667bea6d92eaeab4c0c6cec98e68c51ca156b31f984085876fb1a268f83e2d3a927231cdd2b2f"}], 0x0, 0x0, 0x0, 0x409}, 0x1) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x200, 0x0) ioctl$TIOCSETA(r1, 0xc4504449, &(0x7f0000000740)={0x0, 0x4000, 0x2f00, 0xf, "3901224200", 0x2007, 0x10}) open$dir(0x0, 0x2, 0x2) r2 = syz_open_pts() sysctl$net_inet_ip(&(0x7f0000000000)={0x4, 0x2, 0x0, 0x1c}, 0x4, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x2004, 0x6381) select(0x40, &(0x7f0000000180)={0xfffffffffffffffc, 0x44809e9d, 0xdfffffffffffffff, 0x1, 0x2000000000000000, 0x181c, 0x8, 0x9}, 0x0, 0x0, 0x0) r3 = kqueue() kevent(r3, &(0x7f00000000c0), 0x8, &(0x7f0000000580)=[{{r0}, 0xfffffffffffffffd, 0x0, 0x40, 0x6b6, 0x1}, {{r1}, 0xfffffffffffffff8, 0x8a, 0x40, 0x40, 0x1}, {{r1}, 0xfffffffffffffffc, 0x23, 0x1, 0x7ff, 0x1}, {{r0}, 0xfffffffffffffff8, 0x48, 0x1, 0xdcbb, 0x3}, {{r3}, 0xfffffffffffffffb, 0x20, 0x2, 0x46, 0x100}, {{r2}, 0xfffffffffffffff8, 0x0, 0x4, 0x8, 0x7f}, {{r1}, 0xfffffffffffffff9, 0x40, 0x80000000, 0x7292, 0x1000}, {{}, 0xfffffffffffffffe, 0x0, 0xf0000000, 0xaa, 0x2}], 0x19, 0x0) r4 = open(&(0x7f0000000300)='./file0\x00', 0x8, 0x102) ioctl$WSDISPLAYIO_USEFONT(r4, 0x80585750, &(0x7f0000000140)={'./file0\x00', 0xffff, 0xc0, 0xfff4, 0x1, 0x7ff, 0xffffffff, 0x1, 0x1, 0x1, 0x4000000000000006, 0x101}) setrlimit(0x8, &(0x7f0000000980)={0x1000000000000002, 0x9}) r5 = syz_open_pts() close(r5) r6 = syz_open_pts() ioctl$FIOASYNC(r5, 0x80047470, &(0x7f0000000000)=0x2) readv(r5, &(0x7f0000000080)=[{&(0x7f00000013c0)}], 0x1) write(r6, &(0x7f0000000480)="240012e9", 0x4) ioctl$FIONBIO(r4, 0x82907003, &(0x7f0000000140)=0x2) pledge(&(0x7f00000001c0)='/dev/pf\x00', &(0x7f0000000200)=':*@.\x00') ioctl$TIOCSETVERAUTH(r0, 0x8004741c, &(0x7f0000000240)=0x80000000) ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file0\x00', 0xff, 0x14c3, 0xffff, 0x1, 0x39, 0xe4e, 0x4000001, 0x0, 0x2, 0x5, 0x800000000006}) ioctl$FIONBIO(r4, 0x82907003, &(0x7f0000000140)=0x1) ioctl$TIOCSETD(r0, 0x8004741b, &(0x7f0000000000)=0x7) r7 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) readv(r7, &(0x7f0000000300)=[{&(0x7f0000000100)=""/18, 0x12}], 0x1) sysctl$net_inet_tcp(&(0x7f0000000040)={0x4, 0x2, 0x6, 0x4}, 0x4, &(0x7f00000001c0)="47be0100", &(0x7f0000000000)=0x4, 0x0, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x10, 0x8) 1.114349653s ago: executing program 1 (id=682): fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x100000001}) r0 = open(&(0x7f0000000000)='./file0\x00', 0x9cab835cfdc52675, 0x0) mmap(&(0x7f0000e8c000/0x1000)=nil, 0x1000, 0x2, 0xa011, r0, 0x0) ioctl$WSMUXIO_INJECTEVENT(r0, 0x80185760, &(0x7f0000000000)={0x7f, 0x5, {0x0, 0x69f}}) r1 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) ioctl$TIOCSETA(r1, 0xcd50441a, &(0x7f0000000180)={0x5, 0x2, 0x200, 0x33, "1800e622eac00d7a001600", 0x3, 0xf629}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket(0x18, 0x1, 0x0) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x3, 0x25, 0xfd}, {0x3c, 0x10, 0x5, 0x1}, {0x9e, 0x19, 0x0, 0x3}]}) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) getgroups(0x1, &(0x7f0000000000)=[0x0]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$BIOCSETWF(r3, 0x80104277, &(0x7f0000000040)={0x0, 0x0}) write(r3, &(0x7f0000000080)="d81ad3d20cf7eb4e9b0800bc1a30", 0xe) setsockopt(r2, 0x1000000029, 0xc, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) ioctl$WSDISPLAYIO_SETSCREEN(r1, 0x80045756, &(0x7f0000000080)=0xffffffff) r4 = kqueue() ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, &(0x7f0000000100)={0x2000, 0x0, {[0xfffffbeffffffffb, 0x0, 0x2, 0x2, 0x8004, 0x0, 0x400, 0xffffffffffffffff, 0x0, 0x2f00, 0x0, 0xa3, 0xffffffffffffffff, 0x400000000000000, 0x200000000, 0xffffffffffffffa8, 0x82, 0xce5], [0xfffffffffffffffe, 0x80000001, 0xfffffffffffffffd, 0x10c7, 0x1, 0x7b98, 0x1fe, 0x0, 0xfffffffffffffffe], [0x5ad8, 0x2, 0x40000000, 0x0, 0xffffffffffffffff, 0x11000, 0xfffffffffffffffe], [0x100, 0x20000000000, 0xfffffffffffffffc, 0x8040000100000000, 0xfffffffffffffffe, 0x4], [{0x0, 0x4, 0x0, 0x7d06}, {0xfffc, 0x2, 0x8}, {0x0, 0x0, 0xfffffffe, 0x80}, {0x3, 0x4b72, 0x3, 0xffffffffffffffff}, {0x4, 0x2, 0x0, 0x8}, {0x0, 0x2003, 0x40000, 0x2000000000000000}, {0x6b7}, {0x0, 0x965, 0x0, 0x4}], {0x2000, 0x6, 0x5}, {0x29, 0x6, 0xb0, 0x2}}}) r5 = open(&(0x7f0000000200)='./file0\x00', 0x200, 0x0) fcntl$lock(r5, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x100000001}) r6 = open(&(0x7f0000000240)='./file0\x00', 0x205, 0x0) fcntl$lock(r6, 0x9, &(0x7f0000000280)={0x0, 0x0, 0x3b5, 0x1000381210089}) open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) kevent(r4, &(0x7f0000000080), 0xe4a, 0x0, 0xa9fa, 0x0) close(r4) r7 = socket(0x18, 0x1, 0x0) setsockopt(r7, 0x1000000029, 0xc, &(0x7f0000000040)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) close(r2) 1.109514278s ago: executing program 1 (id=685): r0 = socket(0x18, 0x2, 0x0) close(r0) r1 = socket(0x800000018, 0x1, 0x0) setsockopt$sock_int(r1, 0xffff, 0x1000, &(0x7f0000000000)=0xb, 0x4) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x5, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x84, 0x48e}, 0x0, 0x9, 0x0, 0x0, 0x40, 0xb000000000004000, 0x3, 0x1838}) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0x0, [{&(0x7f0000510000/0x4000)=nil, &(0x7f000017c000/0x3000)=nil, 0x200007fffffffffe}, {&(0x7f0000695000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0xffffffffffffff7e}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x3}, {&(0x7f00003ff000/0xc00000)=nil, &(0x7f00000d6000/0x1000)=nil, 0xfffffffffffffffd}, {&(0x7f000024d000/0x1000)=nil, &(0x7f0000188000/0x2000)=nil, 0x401}, {&(0x7f000060b000/0x2000)=nil, &(0x7f0000095000/0x3000)=nil, 0x80000000}, {&(0x7f000055e000/0x4000)=nil, &(0x7f00005a9000/0x1000)=nil, 0x8}, {&(0x7f0000ffe000/0x2000)=nil, &(0x7f000074b000/0x1000)=nil, 0x5}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x3}, {&(0x7f00003bc000/0x3000)=nil, &(0x7f00003f2000/0x2000)=nil, 0xa}, {&(0x7f0000257000/0x1000)=nil, &(0x7f000038f000/0x4000)=nil, 0x12b}, {&(0x7f0000008000/0x3000)=nil, &(0x7f0000688000/0x4000)=nil, 0x9}, {&(0x7f0000196000/0x3000)=nil, &(0x7f00003e4000/0x2000)=nil, 0x4}, {&(0x7f000024b000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0xfffff7ffbffffff9}, {&(0x7f00001f9000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x1000039f7}, {&(0x7f0000566000/0x3000)=nil, &(0x7f0000001000/0x800000)=nil, 0x8}], './file0\x00', 0xfffffffe}) syz_emit_ethernet(0x0, 0x0) r2 = openat$pf(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000b40)="825a4f47c21e6ed7eda4f5903abf65b18d7c51f78b06cc3a5840c04c2a649b0000000000fafd3493776665d4cd12c63d34", 0x31}], 0x1, 0x0, 0x0, 0xd}, 0x6) ioctl$TIOCSETA(r2, 0xc4504445, &(0x7f0000000740)={0x8, 0xffff, 0x0, 0x20000023, "0400000000800000ebb178d952d6d31962fff0d1", 0x5, 0x2}) r3 = socket(0x18, 0x2, 0x0) mkdir(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x84) mknod(&(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0xd02) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) link(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000d40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') link(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') shutdown(r3, 0x2) bind$unix(r1, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r4 = socket(0x18, 0x3, 0x50) setsockopt(r4, 0x1000000029, 0x25, &(0x7f0000000000)="5ab7776a", 0x4) connect$unix(r0, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) r5 = socket(0x800000018, 0x1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) kqueue() bind$unix(r5, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) 1.068091969s ago: executing program 1 (id=687): acct(&(0x7f0000000000)='./file0\x00') r0 = socket(0x2, 0x4001, 0x0) r1 = socket(0x2, 0x4001, 0x0) r2 = dup(r1) r3 = kqueue() r4 = kqueue() sysctl$kern(&(0x7f00000001c0)={0x1, 0x38}, 0x2, 0x0, 0x0, 0x0, 0x0) kevent(r4, &(0x7f00000002c0)=[{{r3}, 0xfffffffffffffffa, 0xa9}], 0x7, 0x0, 0x0, 0x0) r5 = kqueue() r6 = dup(r5) kevent(r6, &(0x7f0000000240)=[{{r4}, 0xfffffffffffffffa, 0x59}], 0xf0e, 0x0, 0x7fffffff, 0x0) shutdown(r6, 0x2) r7 = fcntl$dupfd(r2, 0x2, 0xffffffffffffffff) ioctl$TIOCSFLAGS(r2, 0x8004745c, &(0x7f0000000040)=0xd4e2) dup2(r2, r7) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) connect$unix(r0, &(0x7f0000000000), 0x10) setsockopt$sock_int(r0, 0xffff, 0x1023, &(0x7f0000001080)=0x7fff, 0x4) 874.07427ms ago: executing program 5 (id=689): madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) (async) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$TIOCSBRK(r0, 0x2000747b) unveil(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='r\x00') unveil(&(0x7f0000000340)='./file1\x00', &(0x7f0000000380)='r\x00') ioctl$WSDISPLAYIO_DELFONT(r0, 0x8058574f, &(0x7f0000000000)={'./file0\x00', 0x2, 0x9, 0x1, 0x0, 0x7ff, 0x9, 0x3, 0x0, 0x2, 0x7, 0x1331}) mkdir(&(0x7f0000000240)='./file0\x00', 0x1) 871.201018ms ago: executing program 0 (id=691): mkdir(&(0x7f0000000040)='./file0\x00', 0x20) setitimer(0x0, &(0x7f0000000000)={{0x0, 0x80}, {0x0, 0x4}}, 0x0) getitimer(0x0, 0x0) 870.961236ms ago: executing program 0 (id=692): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) (async) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x2, 0xbd, 0xa0, 0x9}, {0x5c, 0x7, 0xc, 0x10001}, {0x6, 0xcb, 0x4, 0xffffeffd}]}) (async) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x2, 0xbd, 0xa0, 0x9}, {0x5c, 0x7, 0xc, 0x10001}, {0x6, 0xcb, 0x4, 0xffffeffd}]}) sysctl$hw(0x0, 0x0, &(0x7f0000001280)="0e0d2f927a450bee1b4d60ca79639d4f8a4ba6999c8b357581c37bec1f61c0690b8a27768c80a97b2c1895ad", &(0x7f0000000080)=0x2c, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) sysctl$hw(&(0x7f00000000c0)={0x6, 0xa}, 0x2, &(0x7f0000000180)="121ffa5101f56a3ef9d858eb3483c9f3719443615befd6f6ab221ff75b48100a5843dfadfc203e18b2587185ebd87f605454ba387f01449a2b8ec5034713447aca91d6bbbb6afc2518ce30bbe9e47d85d8ad92304caf183f558ea35a2b5a258abdea97b1cfac51f91b48667c1a96ca92262aee0c3ea34d172c0619763d0f0453f2bf584dc4c32aeafc2e9fcd4b2cd3eb985ba5b8a92723d6631a44f7a80b511d30ed1e79", &(0x7f0000000100)=0xa4, &(0x7f0000000240)="fe64918f5d411f0d472f75b1061d5e422dc395db98ae1db925cd00b7a148d24ca1204661398b40b3d3a8f38ebd72f6421ace3bf50932cf818456673d8a4f0ba2f042d2c8b34f8daa08ca20bddc4f67a9d2d385834e7a9f840a267e18ffbd187d0217a5a6a723b49c016b8073c4cbe87c310ae974397e3e2af99d617c8a8deb7963fd04558b5cff8feaea3fa88a070afce0bea1e8071b97465f68c64d76b2ad06620fcbcecdf494b7152355374148c01e13113e38a1b2d3c3", 0xb8) (async) sysctl$hw(&(0x7f00000000c0)={0x6, 0xa}, 0x2, &(0x7f0000000180)="121ffa5101f56a3ef9d858eb3483c9f3719443615befd6f6ab221ff75b48100a5843dfadfc203e18b2587185ebd87f605454ba387f01449a2b8ec5034713447aca91d6bbbb6afc2518ce30bbe9e47d85d8ad92304caf183f558ea35a2b5a258abdea97b1cfac51f91b48667c1a96ca92262aee0c3ea34d172c0619763d0f0453f2bf584dc4c32aeafc2e9fcd4b2cd3eb985ba5b8a92723d6631a44f7a80b511d30ed1e79", &(0x7f0000000100)=0xa4, &(0x7f0000000240)="fe64918f5d411f0d472f75b1061d5e422dc395db98ae1db925cd00b7a148d24ca1204661398b40b3d3a8f38ebd72f6421ace3bf50932cf818456673d8a4f0ba2f042d2c8b34f8daa08ca20bddc4f67a9d2d385834e7a9f840a267e18ffbd187d0217a5a6a723b49c016b8073c4cbe87c310ae974397e3e2af99d617c8a8deb7963fd04558b5cff8feaea3fa88a070afce0bea1e8071b97465f68c64d76b2ad06620fcbcecdf494b7152355374148c01e13113e38a1b2d3c3", 0xb8) syz_emit_ethernet(0xec, &(0x7f0000000340)=ANY=[]) stat(&(0x7f0000000040)='.\x00', &(0x7f0000000380)) 870.382688ms ago: executing program 1 (id=693): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x10, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) r1 = socket(0x2, 0x1, 0x0) listen(r1, 0x4) symlink(&(0x7f0000000280)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) open(0x0, 0x0, 0x140) openat$vnd(0xffffffffffffff9c, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = shmget$private(0x0, 0x4000, 0xa0, &(0x7f0000321000/0x4000)=nil) shmctl$IPC_SET(r2, 0x1, &(0x7f0000000300)={{0x10001, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x70, 0xfe00}, 0xf, 0x6a07, 0x0, 0xffffffffffffffff, 0x1, 0xad6, 0x10001}) setuid(0xee01) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) setrlimit(0x8, &(0x7f0000000000)={0xfffffffffefffffb, 0xffffffffffffffff}) shmctl$IPC_STAT(r2, 0x2, &(0x7f00000007c0)=""/68) shutdown(r1, 0x2) close(r1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) open$dir(&(0x7f0000000000)='./file0\x00', 0x200, 0x0) ktrace(&(0x7f0000000040)='./file0\x00', 0x4, 0x112, 0x0) utimensat(0xffffffffffffffff, 0x0, &(0x7f0000000100)={{0x5, 0xe5b}, {0x7fffffffffffffff, 0xffffffff00000001}}, 0x2) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x1000e, &(0x7f0000000280)=ANY=[]) select(0x40, &(0x7f0000000000)={0x1ff, 0x0, 0xdc4, 0x561, 0x9ce8, 0x100000001, 0x4000000000000000, 0xfffffffffffffffd}, 0x0, 0x0, 0x0) sysctl$kern(&(0x7f0000000140)={0x1, 0x5e}, 0x2, 0x0, 0x0, 0x0, 0x0) 865.96955ms ago: executing program 5 (id=694): r0 = getppid() setreuid(0xee00, 0x0) r1 = getuid() setreuid(0xee00, r1) msgctl$IPC_SET(0x0, 0x1, &(0x7f00000000c0)={{0x1}, 0x0, 0x0, r0, 0x0, 0x4, 0x800000000000000, 0x400000002, 0x1ffffffffffffc}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r3 = fcntl$getown(r2, 0x5) ktrace(0x0, 0x5, 0x128, r3) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) execve(0x0, &(0x7f00000001c0)=[0x0, &(0x7f00000000c0)='/dev/speaker\x00'], 0x0) r5 = socket(0x1, 0x2, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000000)=ANY=[@ANYBLOB="aa2aaaaaaaaaaaaaaaaaaaaa08004806003400640003069d9078ffffffffffffffff070b1eac1400aa7f000001000e009078000b0008000003fc0000000100000009171643b179d492925502000000000000d0fe6a7198588051616c4d5c1f2821eae8ea94f805e3d18c7bbbe66415e9c6aa8517e7d6d63b"]) ioctl$FIONREAD(r5, 0xc0106924, &(0x7f00000001c0)) kqueue() r6 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) ioctl$TIOCDRAIN(r6, 0x2000745e) ioctl$TIOCSETA(r6, 0xcd50441a, &(0x7f0000000180)={0x2, 0x2, 0x200, 0x2f, "1800e622eac00d7a001600", 0x3, 0x87}) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x1, 0x3df7ad9a, 0x2, 0x80000001, 0x80000001, 0x7, 0x10, [{0x0, 0x7, 0x4, 0x71003}, {0x7, 0x4, 0x8, 0x7}, {0x6, 0xf86, 0x0, 0x4}, {0x5, 0x800, 0x7}, {0x6, 0x80000003, 0x80e, 0x7}, {0x3, 0x1, 0xffffffff, 0x800009c}, {0x80000cdf, 0xfffffffd, 0xb7b3, 0x6d}, {0xa, 0x803, 0x14, 0x8}, {0x2, 0x81, 0x1, 0x9}, {0x6, 0x8001, 0x47, 0xb}, {0x4, 0xfffb, 0x5, 0xaeb}, {0x803, 0x40, 0x8, 0x5}, {0xe0, 0x4, 0x5, 0x3ff}, {0x29a71717, 0xfffffffa, 0x6, 0x100006}, {0x4, 0x0, 0x7}, {0xfffffffd, 0x801, 0x4, 0x30000}]}) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) mprotect(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0) sysctl$kern(&(0x7f0000000140)={0x1, 0x9}, 0x2, &(0x7f0000002480)="71f91eca", &(0x7f0000000080)=0x4, 0x0, 0x0) getgid() ioctl$FIONREAD(r6, 0x4004667f, &(0x7f0000000080)) r7 = openat(r4, &(0x7f0000000280)='./file0\x00', 0x100, 0x118) kevent(r7, &(0x7f00000000c0), 0x8, &(0x7f0000000280), 0x15, 0x0) setsockopt$sock_int(r6, 0xffff, 0x0, &(0x7f0000000240)=0xfffffffd, 0x4) r8 = openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$TIOCSETA(r8, 0xc0284457, &(0x7f0000000400)={0x2, 0xfffffffb, 0x81d, 0x5, "0800000000060000000100002a1e0400", 0x5}) r9 = getuid() setreuid(0x0, r9) 744.587397ms ago: executing program 0 (id=696): sysctl$net_inet6_icmp6(&(0x7f0000000000)={0x4, 0x18, 0x3a, 0x8}, 0x4, &(0x7f00000012c0), 0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x2, 0x0, 0x0, 0x100000000100000, 0xffffffffffffffff}) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x4000000000000003}}) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x18, 0x1, 0x0) setsockopt(r0, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) sysctl$net_inet6_icmp6(&(0x7f0000000040)={0x4, 0x18, 0x3a, 0x8}, 0x4, &(0x7f0000000080)="5bcea441b2e6e04b0ccfc8f5651addab03bc233624892375e84fac", &(0x7f00000000c0)=0x1b, &(0x7f0000000100)="d8908323ca67f8482cb8c0bfe541881c6f1fd59042cbf54bad9918d6026e8f0da17548ebb2f20d7f9d56a232a0d4dc1c341cbd", 0x33) 744.380781ms ago: executing program 6 (id=697): writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f00000000c0)="b9", 0x1}], 0x1) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r0 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x3a) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x17, 0x2000007, 0x20101, 0x80000001, 0x80000001, 0x10001, 0x10, [{0x0, 0x10a6e, 0x99ad, 0x71000}, {0x7, 0x8, 0x8007, 0xfffffffb}, {0x8, 0xf88, 0x0, 0x9}, {0x4b, 0x800, 0x6, 0xfffffffc}, {0x401, 0x200726, 0x2800, 0xc}, {0x2, 0x6, 0x3, 0x99}, {0xce1, 0xffff8000, 0x4f8, 0x6d}, {0x206, 0x803, 0x14, 0x2d}, {0x2, 0xe, 0x285, 0xd}, {0x4, 0x8001, 0xd1d, 0xc}, {0x1cf, 0x5}, {0x7ff, 0x9, 0x744c01d5, 0x9}, {0xb89, 0x4, 0xc, 0x5}, {0x29a71717, 0xfffffffa, 0xfffffffe, 0x6}, {0xc, 0x5, 0x5, 0x7}, {0x0, 0xb1a, 0xe7, 0x30004}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r0, 0xc0184406, &(0x7f00000001c0)={0x0, 0x5, 0x0, 0xfffffffffffffdbb}) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) chroot(&(0x7f00000002c0)='./file0/file0\x00') rename(&(0x7f0000000080)='./file0/file0/..\x00', 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00') mknod(&(0x7f0000000040)='./file0\x00', 0x6000, 0xe02) open(&(0x7f00000002c0)='./file0\x00', 0x710, 0x0) 744.013757ms ago: executing program 1 (id=698): ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0xffffffff, 0xb, {0x0, 0x1}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x10, 0x1, 0x0) setsockopt(r0, 0x1000000029, 0xc, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) setsockopt(r0, 0x1000000029, 0xc, 0x0, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x64c8) kevent(0xffffffffffffffff, &(0x7f0000000040)=[{{}, 0xfffffffffffffff9, 0x6b, 0x11, 0x200000000000001}], 0x203, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket(0x18, 0x1, 0x0) syz_open_pts() r2 = socket(0x2, 0x1, 0x0) openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x82, 0x0) dup(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) shutdown(r2, 0x1) select(0x40, &(0x7f0000000040)={0x2, 0x0, 0x5, 0xa, 0xea, 0x3ff, 0x0, 0x1}, &(0x7f00000002c0)={0x1ff, 0xed03, 0x8, 0x1, 0x6, 0xffffffffffffffff, 0xc, 0x5}, 0x0, 0x0) setsockopt(r1, 0x1000000029, 0xc, &(0x7f0000000040)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) setsockopt(r1, 0x1000000029, 0xd, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) r3 = msgget$private(0x0, 0xc0) msgrcv(r3, 0x0, 0x0, 0x3, 0x0) setuid(0xffffffffffffffff) semop(0x0, 0x0, 0x0) msgctl$IPC_STAT(r3, 0x2, 0x0) r4 = socket(0x18, 0x4, 0x8) setsockopt$sock_int(r4, 0xffff, 0x4, &(0x7f0000000080)=0x4, 0x1) 743.861367ms ago: executing program 0 (id=699): setgroups(0x0, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0xe8, 0x0) r1 = fcntl$dupfd(r0, 0x3, 0xffffffffffffffff) ioctl$FIONREAD(r1, 0x800c745b, &(0x7f0000000080)) getsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f0000000000), &(0x7f0000000040)=0xc) 743.639347ms ago: executing program 5 (id=700): munmap(&(0x7f0000000000/0x3000)=nil, 0x3000) r0 = socket(0x18, 0x1, 0x0) r1 = socket(0x24, 0x2, 0x0) getsockopt(r1, 0x6, 0x9, 0x0, 0x0) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r2 = open(&(0x7f0000000080)='./file0\x00', 0x8000, 0xa) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$VNDIOCSET(r2, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000100000002}) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) ioctl$FIONREAD(r0, 0x801169ac, &(0x7f00000001c0)) setrlimit(0x8, &(0x7f0000000040)={0x7, 0x50}) r3 = syz_open_pts() close(r3) syz_open_pts() ioctl$TIOCSETAW(r3, 0x802c7415, &(0x7f0000000000)={0x29f56361, 0x0, 0x2b1b, 0xfffffff8, "098269e3120104787d900a56d864d3c900", 0x80000000}) writev(r3, &(0x7f0000000400)=[{&(0x7f0000000a40)="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", 0x595}, {&(0x7f0000000340)="0c445da7a494b15328297ac0a3fc775a48b0bb790aaca4af546b28a7a33e69fb35f9291c7f3928105f775e661f5661c0df8f721c0d0bd57fed8ca1fdb1c5d8771ac99b872e8564bb2af0ee97747008e5a44746c5696c762779d710e470c4f9f76b4108af2b6fa0cd397b5913b75bc1360f5650a11189d128d5cd6c83cd8d10d39d5c641ba154c41b300c5131e6e149a2c53f6c11ef49a1a4c051e37fdd12", 0x9e}], 0x2) mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0xd07) openat$vnd(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r4 = open(&(0x7f0000000280)='./bus\x00', 0x0, 0x0) r5 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) ioctl$BIOCGFILDROP(r5, 0x40044278, &(0x7f0000000100)) syz_emit_ethernet(0x76, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa5fbb8af09d4886dd66e2294500403308fe8007014182e66f6f499500000000000000000000000000aa"]) pread(r4, &(0x7f0000000000)="2beba8c5bfaaff44b437dfbb000000", 0x50cc3a, 0x80000000) 647.42968ms ago: executing program 6 (id=701): ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0x3, [{&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0xffffffffffffffff}, {&(0x7f0000695000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0xffffffffffffff7c}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f000036c000/0x1000)=nil, 0x2}, {&(0x7f00001da000/0x4000)=nil, &(0x7f00000d6000/0x1000)=nil, 0xffffffffffffffff}, {&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000188000/0x2000)=nil, 0x401}, {&(0x7f000060b000/0x2000)=nil, &(0x7f00005c0000/0x1000)=nil, 0x80000002}, {&(0x7f000055e000/0x4000)=nil, &(0x7f000032f000/0x2000)=nil, 0xa}, {&(0x7f0000613000/0x2000)=nil, &(0x7f00000ce000/0x4000)=nil, 0x5}, {&(0x7f0000251000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil}, {&(0x7f00003bc000/0x3000)=nil, &(0x7f00003f2000/0x2000)=nil, 0xa}, {&(0x7f000064b000/0x2000)=nil, &(0x7f000038f000/0x4000)=nil, 0x12b}, {&(0x7f0000008000/0x3000)=nil, &(0x7f0000688000/0x4000)=nil, 0x9}, {&(0x7f000043b000/0x1000)=nil, &(0x7f000076c000/0x4000)=nil, 0xffff}, {&(0x7f00000a5000/0x1000)=nil, &(0x7f000079e000/0x4000)=nil, 0xffffffffbffffff9}, {&(0x7f0000576000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x5e04}, {&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000001000/0x800000)=nil, 0x8}], './file0\x00', 0x3}) r0 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x200, 0x6) ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9f, 0x0) r2 = geteuid() r3 = getegid() shmat(0xffffffffffffffff, &(0x7f0000127000/0x3000)=nil, 0x3000) fchownat(r1, &(0x7f0000000000)='./file0\x00', r2, r3, 0x2) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6381) select(0x40, &(0x7f0000000180)={0xfffffffffffffffd, 0x44809e9d, 0x401, 0x3, 0x1ffffffffffffffc, 0x181c, 0x8, 0x10000000009}, 0x0, 0x0, 0x0) ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f0000000140)={0xfffffffd, 0x400, 0x4, 0x0, "d76c0f652155cb57858e74fbf520000002a34f00", 0xffffffb7, 0x401}) r4 = kqueue() kevent(r4, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) r5 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x22) ioctl$FIONBIO(r5, 0x82907003, &(0x7f0000000140)=0x2) ioctl$WSDISPLAYIO_USEFONT(r5, 0x80585750, &(0x7f0000000140)={'./file1\x00', 0x3, 0x6, 0xfffffffe, 0x1, 0x7c, 0x8, 0x8000003e, 0x2, 0x0, 0xfffffffffffffe, 0x3}) ioctl$FIONBIO(r5, 0x82907003, &(0x7f0000000140)=0x1) setuid(0xffffffffffffffff) socket$inet(0x18, 0x3, 0x102) pipe2(&(0x7f00000000c0), 0x10000) pipe(&(0x7f0000000000)) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x60}) r6 = syz_open_pts() close(r6) r7 = syz_open_pts() ioctl$TIOCSETA(r6, 0x802c7414, &(0x7f0000000340)={0x0, 0x5, 0xffffdf82, 0xffffff8e, "08ed95990000000000000000ffffffffffffffe6", 0x4000000, 0x20000}) poll(&(0x7f00000000c0)=[{r7, 0xae98cd7e8d4e801f}], 0x1, 0xfffffff8) writev(r6, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) readv(r7, &(0x7f0000000040)=[{&(0x7f0000000000)=""/18, 0x12}], 0x1) ioctl$VNDIOCSET(r0, 0xc0384600, &(0x7f0000000140)={&(0x7f0000000180)='./file0\x00', 0x567, 0x0}) 646.640668ms ago: executing program 0 (id=702): semop(0x0, &(0x7f00000000c0)=[{0x0, 0x3}, {0x4, 0x1ff}], 0x27fd) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x8) r0 = socket(0x11, 0x3, 0x0) recvmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/166, 0xa6}], 0x1, 0x0}, 0x42) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket(0x18, 0x1, 0x0) close(r1) r2 = socket(0x18, 0x2, 0x0) setsockopt(r2, 0x1000000000029, 0xa, &(0x7f0000000040)="03000000", 0x4) setsockopt(r1, 0x1000000029, 0x2e, 0x0, 0x0) connect$unix(r1, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) 219.410951ms ago: executing program 3 (id=703): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000200)=@file={0xd570d0466b6018f, './file0\x00'}, 0xa) r1 = accept(r0, &(0x7f0000000080)=@in, &(0x7f00000000c0)=0xc) listen(r1, 0x4) r2 = socket$unix(0x1, 0x5, 0x0) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) ioctl$BIOCSETF(r3, 0x80104267, &(0x7f0000000140)={0x1, &(0x7f00000000c0)=[{0x9cf9, 0xb, 0x6, 0x1}]}) r4 = socket$unix(0x1, 0x5, 0x0) fcntl$getown(r4, 0x5) r5 = socket(0x18, 0x2, 0x0) setsockopt(r5, 0x1000000029, 0x2b, &(0x7f0000000140)="6744d6e1", 0x4) sysctl$net_inet6_icmp6(&(0x7f00000022c0)={0x4, 0x18, 0x3a, 0xe}, 0x4, 0x0, 0x0, &(0x7f0000000000), 0x0) recvfrom$unix(r0, &(0x7f0000000100)=""/10, 0xa, 0x3, 0x0, 0x0) connect$unix(r4, &(0x7f0000000000)=@file={0xd1653077bafa0114, './file0\x00'}, 0xa) connect$unix(r2, &(0x7f0000000040)=@file={0xd1653077bafa0114, './file0\x00'}, 0xa) symlink(&(0x7f00000000c0)='.\x00', &(0x7f0000000180)='./file0\x00') unveil(&(0x7f0000000040)='./file0/file0/..\x00', &(0x7f0000000000)='x\x00') open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a) accept$unix(r0, 0x0, 0x0) 219.031032ms ago: executing program 4 (id=704): r0 = socket(0x18, 0x2, 0x0) setsockopt(r0, 0x1000000000029, 0xb, &(0x7f00000001c0)='\x00\x00\x00\x00', 0x4) getsockopt(r0, 0xffff, 0x6, &(0x7f0000000200)=""/74, &(0x7f0000000280)=0x4a) r1 = socket(0x11, 0x3, 0x3) r2 = socket$inet(0x2, 0x2, 0x0) close(r2) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r3, 0x0, 0x200000000000a, &(0x7f0000000000)="ea00005c00000000", 0x1) setsockopt$inet_opts(r2, 0x0, 0xd, &(0x7f0000000240)="e600000100000000", 0x8) sendto$unix(r1, &(0x7f0000000300)="192c2d794ef7f00172c0b69e23f9ebec3bf1ea5096d0c889f5a167c7614822120609051be128c79337b2075d374492deca3c5337b97964fb43400f601c6ef820950ddf31d8728f9409d04c28c2d01a2e38bf12bb20a81bb3c0f09a94021b", 0x5e, 0x2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0xa) setsockopt(r0, 0x1000000029, 0xd, &(0x7f00000002c0)="adf9838d683bb1ca009c8e94e4248184ff44", 0x12) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000000)="755271352e9d17e04b1f2ef2b184606094ec1cbc9fb50447d7bc5998fafdf4e78e7831371379b325cc952519ea53d888a6fab8767a34b2e90102f11e158b3d0197cc3853514caeb0d4c4852bac08ea5ae1409833f11eabfe7755834c9b1b6fb50315293b26b26eff1d21ee973ae373eb19e0946d314c3c475566bddafc", 0x7d}, {&(0x7f0000000080)="d76d785444dc4e39d3bfb87b074c25b312b310c6fe508929d4e5bd6131c878c851a3dd5adf0f3facc9c72589264dab7fe1280ca860ff6223e90fd92e1ac33a36f724a43aff8e8bc24072dcac1f49711bd7a5b6680c3d8035856805f2880c698d62cd42fa4bf37c65ea3163ba90f500034d15c3d5942aefa3db709fa84a84b00e6389139dd10bb2229f9f2d43ebef4cdd263bd6", 0x93}, {&(0x7f00000013c0)="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", 0x100a}, {&(0x7f00000012c0)="713cc81b827c28cdca6ecb0b1e0685f492bf8c848aa65d627626c1971051de2e164100bba77bdb7993274bc52dacec7533f316b8137094088da098b63c996615d9b181c72f404217d461364d8594f808a8e521c2a69b247bf529d1b9e357629edc88954b262ced803dd09bac8a24cbc6e84859f13a1fb0986b2463c74268c1d44bddfbbb2dc90fe5900756cdac5fb3bffb08f22bd4c6438fbb8b530e8934fae6bc827f3e9312329aa9749245f0b7004e30051415227a311b0c85f04fe19eb85ec5f4970f1d0f0f1ea34a0a5341c19340dec778be4f684d1f954fd05cac4cc8de56203d", 0xe3}], 0x4) connect$unix(r0, &(0x7f0000001280)=@abs={0x1, 0x0, 0x0}, 0x8) 141.956301ms ago: executing program 4 (id=705): mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x2000, 0x4800) r0 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) r1 = open(&(0x7f0000000140)='./file0\x00', 0x78e, 0x8) r2 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) write(r2, &(0x7f00000004c0)="b9", 0x1) mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x5, 0x10, r1, 0x0) ioctl$TIOCFLUSH(r0, 0xc0107004, &(0x7f0000000080)=0x7f) open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7941) setreuid(0xee00, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000180)=ANY=[@ANYBLOB="89ffa23f3c252adb0070162e86dd6009000000200600030000000000000037f87ccdc0c4a92cff0000000001ea443d080000000001004e204e22", @ANYRESDEC=r0, @ANYRES32=r2]) writev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000040)="87636cf4db", 0x5}], 0x1) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[]) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[]) r3 = getpgid(0x0) ktrace(&(0x7f0000001080)='./file0\x00', 0x4, 0x51d73188af82d9b7, r3) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x2000, 0x4800) (async) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) (async) open(&(0x7f0000000140)='./file0\x00', 0x78e, 0x8) (async) open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) (async) write(r2, &(0x7f00000004c0)="b9", 0x1) (async) mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x5, 0x10, r1, 0x0) (async) ioctl$TIOCFLUSH(r0, 0xc0107004, &(0x7f0000000080)=0x7f) (async) open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7941) (async) setreuid(0xee00, 0x0) (async) syz_emit_ethernet(0x56, &(0x7f0000000180)=ANY=[@ANYBLOB="89ffa23f3c252adb0070162e86dd6009000000200600030000000000000037f87ccdc0c4a92cff0000000001ea443d080000000001004e204e22", @ANYRESDEC=r0, @ANYRES32=r2]) (async) writev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000040)="87636cf4db", 0x5}], 0x1) (async) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[]) (async) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[]) (async) getpgid(0x0) (async) ktrace(&(0x7f0000001080)='./file0\x00', 0x4, 0x51d73188af82d9b7, r3) (async) 141.466817ms ago: executing program 5 (id=706): ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x400, 0x10000000000002}}) (async) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x400, 0x10000000000002}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) socket(0x18, 0x1, 0x0) (async) r0 = socket(0x18, 0x1, 0x0) setsockopt(r0, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbdf13b9fd812eaa4e713048e69931929648", 0x14) r1 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$WSDISPLAYIO_LDFONT(r1, 0x8058574d, &(0x7f00000002c0)={'./file0\x00', 0x9, 0x2, 0xa, 0x0, 0x9, 0x7fff, 0x5, 0x2, 0x0, 0x101, 0x7f80000000000000}) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000c40), 0x1, 0x0) ioctl$BIOCGRTIMEOUT(r2, 0x80047476, &(0x7f0000000c80)) (async) ioctl$BIOCGRTIMEOUT(r2, 0x80047476, &(0x7f0000000c80)) syz_open_pts() (async) r3 = syz_open_pts() writev(r3, &(0x7f0000000100)=[{&(0x7f0000000040)="01183965c7c1cf93c99ec4b665dc90f2d4345f628b4e3c5df8dc7e9028fe135683eea206cbad5216c9be16c258c29d02006afa48960663c57ce3b68edb9d707fb88c64aceba9af20b5838f1429bc82974f7f3c8ffb691f65260e", 0x5a}, {&(0x7f0000000180)="2eb26ac4e2c718858d66304bfb3ed28cb45d54268fe5b489d2b6c62d534eb5dc2bcc1cce4df2e5dfb74488d5ca7cf04dc29f5edd004b0e50ab29c785abe4180f1701d0d19e0f9aa2636e662c76762a88935a645f484ad159e2acf3c43e377878b683dbeb765f6691c0d765454be9483f3adc9c4ecb6c410345359e9a9f1a828db5f34c643a66d93647640b6f1e50acf66525b269b8b0241f1cfea7fbd06934f78382e0fc465cc80ed9b91b219f5c146e4f3e72fedf9e77ff", 0xb8}, {&(0x7f0000000240)="895895d49e15ec0779ea39163258b807b6e1b0e7db5a0a345ce5", 0x1a}], 0x3) sysctl$vm(&(0x7f0000000000)={0x2, 0x8}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) sysctl$hw(&(0x7f0000000000), 0x2, &(0x7f0000000040), 0x0, 0x0, 0x0) (async) sysctl$hw(&(0x7f0000000000), 0x2, &(0x7f0000000040), 0x0, 0x0, 0x0) ioctl$TIOCSETA(r3, 0x802c7414, &(0x7f0000000340)={0x1007, 0x0, 0xfffffffe, 0x7, "020000000000000041e2f69c558baa97c50700", 0x41, 0x5}) syz_open_pts() ioctl$TIOCSTAT(r3, 0x20007465, 0x0) (async) ioctl$TIOCSTAT(r3, 0x20007465, 0x0) r4 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7941) ktrace(&(0x7f0000000180)='./file0\x00', 0x4, 0x51d73188af82c917, 0xffffffffffffffff) (async) ktrace(&(0x7f0000000180)='./file0\x00', 0x4, 0x51d73188af82c917, 0xffffffffffffffff) sendmsg$unix(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)="d9bdb1d453b8d228fa79338ff8b57c744b8458f0915fe69399503a9643178057a544077d2204664c25691adaea0ac6031770338f48b77563ce8461f3172d836d448df0900828b001c19eba7ffa40352593b61e", 0x53}], 0x1, 0x0, 0x0, 0x9}, 0x4) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x1, &(0x7f0000000400)=[{0x8, 0x81, 0xc0, 0x2}]}) sendto$inet(r4, &(0x7f00000007c0)="bbaa34867ac6173907fbd696075e6029a6e5ff9f7b1f9dd64a9a7b335cb074f0d7f2c6e8eeb2a9e836da4810180a883d200400a4642d71d7f046892ae921191236f22c292d713e5fc7b78bece440edd35195d617c89620da6a6d7856fdbb2976b80f4202d30dddcba013f6291fcfcacf37a9cea2ec51bd9570a28d1e7afc92752be3608e33e270f13e62d8340a877e042f508ea3ffe9e682a0d789276e", 0x9d, 0xc, &(0x7f0000000140)={0x2, 0x3}, 0xc) r5 = open(&(0x7f0000000080)='./file0\x00', 0x800, 0x1f) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) ioctl$VNDIOCSET(r5, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r5, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) r6 = openat$pf(0xffffffffffffff9c, &(0x7f0000000200), 0x200, 0x0) writev(r6, &(0x7f0000000180)=[{&(0x7f0000000440)="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", 0x34e}], 0x1) (async) writev(r6, &(0x7f0000000180)=[{&(0x7f0000000440)="2e06b5a54fdc15d0e5ba5cd619e395d842161263a5bcf8d360b109113dd229c0dd47d6ff4f038bc8f40206bf8a1ef55ba04d8d4e4174e29e744d8606170795a2edaf3456112807f6d55fd9c3815257c10e07e8f0be3a7366f8123a42cb43f4302bf6b149e9b9bab6116b11b8ae693250f7fa8080cd8a2fc7c7e4ebf5c106c80fd386c7786c0421183de7b10dbde8040d96f51522423ca8e0f70989e1530cd2eaf7faaad41584384bf407ed7bed944e099fd18b59c86af22bb45fe92b05087191e530bc83a9e0975fc2a0f5988e9ae663b4fe25f69d661eb4ad0842a7be35dbe21e8911da844c7dce8d80f66713e13d96b30d5b4a13fb15282cf2a61a24880049b94a6e46bce752ff3230cd36789c42b37db904fd77060a84ca071839da23ef66bb45a18c9face3b3982d2edef1234405ec89e3ac812208780a2866cf52a8bbbe80b77e07f53d751ea0da7185414c403df8282d22a45b8a5ee7dc9b534106d98bb65aea3af32dea9a7a9881e7fdfbb46801408f1b94018abf7d5816d4e0344ab9dd8a6d43a2503180582f6d553e1a81fe4e8d68fafcd095560e83feda2fcd68d73fc71d7ff20511859f1b895d1a3f42970f1fb4dd61487901de9d5efcb92d63466e92bbe485aaf63988e255cbb607ac7ff9ee30732dd2482be6280b8946e32cf0ec48fc7c89e53c4aecb4af7af69e0dc04dd17405ce02898adf547f851e885964f836ec6b04d77f14d85025e415a01553d6b7e5dd946be3ea735515a624f74e2c09b863881e4412135ecbdd1f1ec73762d2b1bcb0f04f0bd1369f9c374d73fb9cc7465bbdb5e77078870423340ea32c9f49980888427f49eb9d4daf99a87d6d6e44aecd7dfeba2c6f1844b2b537d6de1ba1c8bd90f7ec014b4c84a9bfba26bb92b0d740de1e20c97ec18417a1f3d68fea076ad9aeb884efa6cedf35845dd4bc6eae82e37a2304c76ab6e7467f2d868e76df28b7dbba656b0998da5d54a00e706e8dc0699e961bfe8b6cef550c66eb7e5a40ef12896fb571be1d73d817d17e177f06c0679c784feb85129836c8724bf0c3e6026a3eb831c5335475950287c988059987f9198a074e7d92cdcf6c196d91f9368490b5d5f7033374c27b2aed8732fb84933a8fbe2bcaa68b68eea3400b5b022a2fae01ef3df9bf1ba0739b54faaa56ebe38c40fc6d1d99522c07af188a", 0x34e}], 0x1) ioctl$TIOCSETA(r6, 0xc0504417, &(0x7f0000000740)={0x0, 0x0, 0x0, 0xfffffffc, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\r\x00', 0x11, 0x1100a}) kqueue() (async) kqueue() 141.114324ms ago: executing program 6 (id=707): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb5219f1000b913f1, 0x0) ktrace(&(0x7f0000000180)='./file0\x00', 0x4, 0x51d73188af82c397, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x4b}, 0x2, &(0x7f0000000100)="71ec1e34", &(0x7f0000000080)=0x4, 0x0, 0x0) bind(r0, &(0x7f0000000100)=@in={0x2, 0x2}, 0xc) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket(0x18, 0x3, 0x0) setsockopt(r1, 0x1000000029, 0x24, &(0x7f0000000000)="5ab7776a", 0x4) utimensat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={{0x0, 0xfffffffffffffffe}, {0x10000000000000}}, 0x2) 45.129568ms ago: executing program 5 (id=708): mknod(&(0x7f0000000140)='./file0\x00', 0x2000, 0xd01) (async) r0 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000300), 0x8000, 0x0) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000000)={{0x81fe, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffff}, 0x557a, 0x7, 0x1}) (async) sysctl$hw(&(0x7f0000000000)={0x6, 0x8}, 0x2, 0x0, 0x0, 0x0, 0x0) (async) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f00000000c0)={0x3, 0x0, 0x1ff, 0xfffffffffffffffc}) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = socket(0x18, 0x1, 0x0) close(r1) (async) r2 = socket(0x18, 0x2, 0x0) setsockopt(r2, 0x1000000000029, 0x9, &(0x7f0000000040)="00fb6c4f", 0x4) (async) setsockopt(r2, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) (async) connect$unix(r1, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) (async) ioctl$VNDIOCSET(r0, 0xc0384600, &(0x7f00000001c0)={&(0x7f0000000100)='./file0\x00', 0xaf17, 0x0}) 44.685524ms ago: executing program 3 (id=709): ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0x0, [{&(0x7f0000ffd000/0x3000)=nil, &(0x7f000017c000/0x3000)=nil, 0x200007fffffffffe}, {&(0x7f0000695000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0xffffffffffffff7c}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f00006b9000/0x1000)=nil, 0x8000000000b936}, {&(0x7f00001da000/0x4000)=nil, &(0x7f00000d6000/0x1000)=nil, 0xfffffffffffffffd}, {&(0x7f000024d000/0x1000)=nil, &(0x7f0000188000/0x2000)=nil, 0x401}, {&(0x7f000060b000/0x2000)=nil, &(0x7f0000095000/0x3000)=nil, 0x80000000}, {&(0x7f000055e000/0x4000)=nil, &(0x7f00005a9000/0x1000)=nil, 0x8}, {&(0x7f0000ffe000/0x2000)=nil, &(0x7f00000ce000/0x4000)=nil, 0x5}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil}, {&(0x7f00003bc000/0x3000)=nil, &(0x7f00003f2000/0x2000)=nil, 0xa}, {&(0x7f000064b000/0x2000)=nil, &(0x7f000038f000/0x4000)=nil, 0x12b}, {&(0x7f0000008000/0x3000)=nil, &(0x7f0000688000/0x4000)=nil, 0x9}, {&(0x7f0000196000/0x3000)=nil, &(0x7f00003e4000/0x2000)=nil, 0x4}, {&(0x7f000024b000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0xffffffffbffffff9}, {&(0x7f00001f9000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x1000039f7}, {&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000001000/0x800000)=nil, 0x8}], './file0\x00', 0xfffffffe}) (async) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) (async) semget(0x0, 0x4, 0x4) (async) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x1, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x9cab835cfdc52675, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x36a5) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0xa011, r0, 0x0) (async) sysctl$hw(&(0x7f0000000000)={0x4, 0x1f}, 0x3, 0x0, 0x0, 0x0, 0x2) (async) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) r1 = open(&(0x7f0000000200)='./file0\x00', 0x200, 0x0) setgid(0xffffffffffffffff) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0e99db6de761f86, 0x0) (async) fcntl$lock(r1, 0x8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x100000001}) r2 = open(&(0x7f0000000240)='./file0\x00', 0x205, 0x0) fcntl$lock(r2, 0x9, &(0x7f0000000280)={0x0, 0x0, 0x3b5, 0x1000381210089}) (async) msync(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) r3 = geteuid() setuid(r3) r4 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x2) (async) unlink(&(0x7f0000000040)='./file0\x00') (async) sysctl$kern(&(0x7f00000000c0)={0x1, 0x2f}, 0x2, &(0x7f0000000100)="4ba7841143", &(0x7f0000000040)=0x5, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$vm(&(0x7f0000000100)={0x2, 0x2}, 0x2, &(0x7f0000000080), &(0x7f0000000040), 0x0, 0x0) (async) ioctl$FIONREAD(r2, 0x4004667f, &(0x7f00000002c0)) (async) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) (async) accept$unix(0xffffffffffffffff, &(0x7f0000000100)=@file={0x0, ""/89}, 0x0) (async) ioctl$VNDIOCSET(r4, 0xc0104401, &(0x7f00000001c0)={0x0, 0x0, 0x0}) 43.983761ms ago: executing program 6 (id=710): open(&(0x7f0000000000)='./file0\x00', 0x200, 0x6) (async) r0 = socket(0x2, 0x1, 0x0) (async) ioctl$WSMUXIO_REMOVE_DEVICE(0xffffffffffffffff, 0x80085762, &(0x7f0000000040)={0x1}) (async) r1 = socket(0x18, 0xc003, 0x3a) setsockopt(r1, 0x29, 0x6c, &(0x7f0000000040), 0x4) (async) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0x66, &(0x7f0000000000)={0x2, 0x1, 0x10, 0x3}, 0xc) (async) ioctl$FIONREAD(r1, 0xc028756b, &(0x7f0000000240)) (async) setsockopt(r0, 0x6, 0x4, &(0x7f0000000140)="aef43c05", 0x4) (async) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) (async) sysctl$net_inet_esp(&(0x7f0000000000)={0x4, 0x2, 0x32, 0x4}, 0x4, &(0x7f0000000300)="edea629d3df2b9b3028298ab0233c2b59bd8ddfcefab1547fb6dc3f75463f3f87018d6f39de664e250b0430f3aafce05a94fc66f49369defcb53faffad998ee49eaf9b3a23d1cc12f9c43f5173be8839d315db5ec312c5bcc36c5dfb39098bf40f1abfbaa9efeefd5dbb7f7066fd5390c68747119dd7464881ef1a421ed0eda391a8d4944bc2a1122e81567897ac5d0ba268d2f845f29fded223afcff7043e319a96c8d5da29c0bac203b39d39f7a9cb2f59f34ad8e2462523e25986226245b925", &(0x7f0000000100)=0xc1, &(0x7f0000000bc0), 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r2 = socket(0x11, 0x3, 0x0) sendto$unix(r2, &(0x7f0000000000)="b100051300000000000000001200000000d49445aea10500fef96ecf2ac72fd3357ae3020000fd3039cf7f882b2992e1aa0500000051e2f0ad3ebbc257699a1f139b672f336443a42118000000720fd38bf9b770c1f5a872c88106002ec589040000010c00070000001255e07f9557e89be16257aea8c500002002fbfe0c2300008abfba0900000008e371a3f8343712051eeab7196fcbd80407000000c0112000"/177, 0xb1, 0x0, 0x0, 0x0) (async) connect$unix(r0, &(0x7f0000000000), 0x10) r3 = openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x10, 0x0) ioctl$TIOCSETA(r3, 0xc0104419, &(0x7f0000000000)={0x2002, 0x1, 0xf, 0x2, "01d04b0a00ff000000000000102f28362c717286", 0x1, 0xa}) (async) r4 = socket$inet(0x2, 0x4002, 0x0) ioctl$WSMOUSEIO_SCALIBCOORDS(r3, 0x81205724, &(0x7f0000000280)={0x1, 0xffff, 0x40, 0x0, 0xbbef, 0x81, 0x80000001, 0x10, [{0x1, 0x3, 0xffff, 0x8}, {0x8001, 0x5, 0x6}, {0x0, 0x401, 0x2, 0xffffff80}, {0x3, 0x0, 0x3, 0x5}, {0x7, 0x9, 0x3, 0x8}, {0x5, 0x2, 0x74e9, 0x1}, {0x7, 0xd4, 0x4, 0x5}, {0x7f, 0x795e7837, 0x9, 0xc2f}, {0x5, 0x10001, 0x8c95, 0x3}, {0x2, 0x1, 0x5, 0x100}, {0x400, 0x9, 0x7ff, 0x2}, {0x30864a46, 0x9, 0x9, 0x1ff}, {0x3, 0x2, 0x4, 0x5}, {0x0, 0x6, 0x7f, 0x1}, {0x0, 0x8, 0x1a, 0x7}, {0x7ff, 0xb, 0x365a13a3, 0xff}]}) (async) fcntl$getown(r4, 0x5) (async) r5 = getuid() setreuid(0xee00, r5) getsockopt$SO_PEERCRED(r4, 0xffff, 0x1022, &(0x7f0000000100)={0x0, 0x0}, 0xc) setreuid(r5, r6) setsockopt$inet_opts(r4, 0x0, 0x1, &(0x7f00000000c0)="89040000000094f77ea66ed006e3bc58e261c99a", 0x14) 38.610827ms ago: executing program 3 (id=711): r0 = kqueue() (async, rerun: 32) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x8, 0x2000000000000004}, 0x0, 0x0, 0x0) (rerun: 32) r1 = kqueue() kevent(r1, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file1\x00', 0x3, 0x2, 0xffff0000, 0x1, 0x5, 0xd87, 0x8000000c, 0x1, 0x0, 0x100000000644, 0x4000000000f19}) (async) mknod(&(0x7f0000000000)='./file1\x00', 0x2000, 0x637d) r2 = open(&(0x7f0000000800)='./file1\x00', 0x800, 0x120) ioctl$FIONBIO(r2, 0x82907003, &(0x7f0000000140)=0x1) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x1, 0x7, 0x101, 0x80010001, 0xffffffff, 0x7, 0x10, [{0x0, 0x7, 0x0, 0x71000}, {0x7, 0x4, 0x8, 0x7}, {0x10000006, 0xf86, 0x0, 0x4}, {0x5, 0x800, 0x7, 0x1000000}, {0x6, 0x3, 0x80e, 0x7}, {0x3, 0x1, 0xffffffff, 0x800009c}, {0x8, 0xfffffffd, 0x3, 0x6d}, {0xa, 0x803, 0x14, 0x8}, {0x2, 0x81, 0x1, 0x9}, {0x6, 0x8001, 0xc6, 0x8}, {0x4, 0xfffb, 0x2, 0xaeb}, {0x803, 0x40, 0x8, 0x5}, {0xe0, 0x4, 0x5, 0x3ff}, {0xffff0354, 0xfffffffa, 0x6, 0x100006}, {0x4, 0x6, 0x7, 0x20000000}, {0x0, 0x1, 0x4, 0x30000}]}) (async, rerun: 64) r3 = semget(0x0, 0x1, 0x281) (rerun: 64) semop(r3, &(0x7f0000000040)=[{0x0, 0xb, 0xc00}, {}], 0x25) (async, rerun: 64) semctl$IPC_RMID(r3, 0x0, 0x0) (async, rerun: 64) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0x7, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x8}, 0x0, 0x0, 0x0) (async) ioctl$FIONBIO(r2, 0x82907003, &(0x7f0000000140)=0x1) (async) unveil(0x0, 0x0) unveil(&(0x7f0000000100)='./file0/file0\x00', 0x0) kevent(r0, &(0x7f0000000000)=[{{}, 0xfffffffffffffff9, 0x83, 0x0, 0x800000000000000}], 0xe4a, 0x0, 0x8000, 0x0) r4 = dup2(r0, r0) kevent(r0, &(0x7f0000000040)=[{{r4}, 0xfffffffffffffffe, 0xd0, 0x1, 0x243f, 0x3}, {{r0}, 0xfffffffffffffffa, 0xc0, 0x1, 0x2, 0x7f}, {{r0}, 0xfffffffffffffff8, 0x80, 0x1, 0x0, 0xc9}, {{r0}, 0xffffffffffffffff, 0x1, 0x2, 0x0, 0x9}, {{r0}, 0xfffffffffffffffe, 0x30, 0x1, 0x6, 0x10000}], 0xd, &(0x7f0000000140)=[{{r0}, 0xffffffffffffffff, 0x5c, 0xb0ae39eb7fa0ca69, 0x1, 0x80000001}], 0x0, &(0x7f0000000180)={0x7, 0x81}) 9.089303ms ago: executing program 6 (id=712): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x3, 0x25, 0xfd, 0x6}, {0x50, 0x10, 0x5, 0x1}, {0x9e, 0x19, 0x0, 0x3}]}) r1 = socket(0x18, 0x3, 0x0) getsockname$inet(r1, &(0x7f00000000c0), &(0x7f0000000000)=0xffffffffffffff35) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000040)={0x0, 0x0}) write(r0, &(0x7f0000000080)="d81ad3d20cf7eb4e9b0800bc1a30", 0xe) 7.537049ms ago: executing program 5 (id=713): setrlimit(0xd, &(0x7f0000000000)={0x4f3, 0x3}) (async) setrlimit(0xd, &(0x7f0000000000)={0x4f3, 0x3}) nanosleep(&(0x7f0000000040)={0x1, 0x8}, 0xfffffffffffffffe) clock_gettime(0x0, &(0x7f0000000080)) execve(0x0, 0x0, 0x0) 0s ago: executing program 6 (id=714): pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) setuid(0xffffffffffffffff) clock_settime(0x4, 0xfffffffffffffffe) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r2 = socket(0x18, 0x1, 0x0) ioctl$FIONREAD(r2, 0x8020699d, &(0x7f00000001c0)) write(r0, &(0x7f0000000340), 0xd4e688a67930cd) close(r0) close(r1) setsockopt(r1, 0x2, 0x3, &(0x7f0000000000)="36c43ede66026f1070ec9a4fca1a24f93bf0be5cfbd7377a6402397b68b38458669eae073e3a15031acc29cc10a12f305ffecae0c36d7eddf183609f1515d8e5dfa120b0364b73cc4c696027e27f5b784fa6a260c806e3abbdd611316df37b639fdad335083159a34ec364de9bb7e6d208d5bd", 0x73) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.149' (ED25519) to the list of known hosts. pckbd_enable: command error pckbd_enable: command error WARNING: thread `nfsio' (521193) exits with status -1 WARNING: thread `nfsio' (394489) exits with status -1 WARNING: thread `nfsio' (409292) exits with status -1 WARNING: thread `nfsio' (30323) exits with status -1 pckbd_enable: command error pckbd_enable: command error denied attempt to set clock forward to 52172937113390 WARNING: thread `nfsio' (62646) exits with status -1 WARNING: thread `nfsio' (1686) exits with status -1 WARNING: thread `nfsio' (98016) exits with status -1 WARNING: thread `nfsio' (346001) exits with status -1 kernel: protection fault trap, code=0 Stopped at sys_semop+0x352: movzwl 0x8(%rbx),%r15d ddb{1}> ddb{1}> set $lines = 0 ddb{1}> set $maxwidth = 0 ddb{1}> show panic the kernel did not panic ddb{1}> trace sys_semop(ffff800033409a10,ffff80003c4a7460,ffff80003c4a73b0) at sys_semop+0x352 syscall(ffff80003c4a7460) at syscall+0xb17 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xb9989ecc700, count: -3 ddb{1}> show registers rdi 0 rsi 0xb rbp 0xffff80003c4a7380 rbx 0xdead4110dead4110 rdx 0 rcx 0xffff800033409a10 rax 0xffff8000299edff0 r8 0x7f7fffffc000 r9 0x1 r10 0x6bb988e07dc7cccb r11 0x44bfd5b91093f609 r12 0xb r13 0xfffffd805cce2e00 r14 0xffff80003c4a7460 r15 0xb rip 0xffffffff82632192 sys_semop+0x352 cs 0x8 rflags 0x10246 __ALIGN_SIZE+0xf246 rsp 0xffff80003c4a7290 ss 0x10 sys_semop+0x352: movzwl 0x8(%rbx),%r15d ddb{1}> show proc PROC (syz-executor) tid=91048 pid=2798 tcnt=3 stat=onproc flags process=0 proc=4000000 runpri=86, usrpri=86, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff8000334087e8,0xffff800033408d28 process=0xffff8000394244f0 user=0xffff80003c4a2000, vmspace=0xfffffd806a0d2028 estcpu=36, cpticks=1, pctcpu=0.0, user=0, sys=1, intr=0 ddb{1}> ps PID TID PPID UID S FLAGS WAIT COMMAND 31738 310557 26551 0 2 0 syz-executor 92885 464561 1242 0 7 0 syz-executor 92885 190754 1242 0 3 0x4000080 fsleep syz-executor 92885 416977 1242 0 2 0x4000000 syz-executor 2798 260078 62560 0 2 0 syz-executor * 2798 91048 62560 0 7 0x4000000 syz-executor 2798 426428 62560 0 3 0x4000080 fsleep syz-executor 6307 280089 66574 60928 2 0x11 syz-executor 6307 478944 66574 60928 3 0x4000090 fsleep syz-executor 6307 248440 66574 60928 3 0x4000090 fsleep syz-executor 6307 524135 66574 60928 3 0x4000090 fsleep syz-executor 60219 7914 17737 -1 2 0x11 syz-executor 60219 448213 17737 -1 3 0x4000090 kqsel syz-executor 60219 254786 17737 -1 3 0x4000090 msgwait syz-executor 60219 187568 17737 -1 3 0x4000090 fsleep syz-executor 57496 370027 34515 0 3 0x82 nanoslp syz-executor 49278 520727 0 0 3 0x14200 acct acct 17737 454072 34515 0 3 0x82 nanoslp syz-executor 1858 178409 0 0 3 0x14200 bored sosplice 26551 216107 34515 0 3 0x82 nanoslp syz-executor 1242 176987 34515 0 3 0x82 nanoslp syz-executor 66574 311703 34515 0 3 0x82 nanoslp syz-executor 62560 293862 34515 0 3 0x82 nanoslp syz-executor 75002 28345 34515 0 3 0x82 wait syz-executor 62599 340217 34515 0 3 0x2 biowait syz-executor 34515 394013 95687 0 3 0x82 kqread syz-executor 95687 409671 13082 0 3 0x10008a sigsusp ksh 13082 481342 81802 0 3 0x98 kqread sshd-session 81802 287964 24041 0 3 0x92 kqread sshd-session 38162 85535 1 0 3 0x100083 ttyin getty 24041 180473 1 0 3 0x88 kqread sshd 41148 88762 7829 74 3 0x1100092 bpf pflogd 7829 29829 1 0 3 0x80 sbwait pflogd 99760 485802 51931 73 3 0x1100090 kqread syslogd 51931 480493 1 0 3 0x100082 sbwait syslogd 76483 117738 1 0 3 0x100080 kqread resolvd 74095 333423 52355 77 3 0x100092 kqread dhcpleased 69932 15155 52355 77 3 0x100092 kqread dhcpleased 52355 141562 1 0 3 0x80 kqread dhcpleased 47845 103680 0 0 3 0x14200 bored smr 79310 157310 0 0 2 0x14200 zerothread 68639 515827 0 0 3 0x14200 aiodoned aiodoned 14323 122356 0 0 3 0x14200 syncer update 90167 191708 0 0 3 0x14200 cleaner cleaner 94616 96156 0 0 3 0x14200 reaper reaper 80515 165039 0 0 3 0x14200 pgdaemon pagedaemon 73810 129612 0 0 3 0x14200 bored viomb 28670 197721 0 0 3 0x40014200 acpi0 acpi0 6610 149757 0 0 3 0x40014200 idle1 28894 221907 0 0 3 0x14200 bored softnet7 30144 208456 0 0 3 0x14200 bored softnet6 28555 373756 0 0 3 0x14200 bored softnet5 79145 240209 0 0 3 0x14200 bored softnet4 31978 334152 0 0 3 0x14200 bored softnet3 53032 465507 0 0 3 0x14200 bored softnet2 78881 393469 0 0 3 0x14200 bored softnet1 78060 70845 0 0 3 0x14200 bored softnet0 84220 180362 0 0 3 0x14200 bored systqmp 34347 276143 0 0 3 0x14200 bored systq 24257 275495 0 0 3 0x14200 tmoslp softclockmp 75899 357808 0 0 3 0x40014200 tmoslp softclock 82001 295555 0 0 3 0x40014200 idle0 1 514082 0 0 3 0x82 wait init 0 0 -1 0 3 0x10010200 scheduler swapper ddb{1}> show all locks Process 92885 (syz-executor) thread 0xffff800033408550 (416977) exclusive rwlock vmmaplk r = 0 (0xfffffd806a0d2310) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 vm_map_lock_ln+0x12e #3 uvmfault_lookup+0xe8 #4 uvm_fault_check+0x895 #5 uvm_fault+0x106 #6 upageflttrap+0xa9 #7 usertrap+0x3c6 #8 recall_trap+0x8 Process 2798 (syz-executor) thread 0xffff800033409a10 (91048) exclusive kernel_lock &kernel_lock r = 0 (0xffffffff838ad2b8) #0 witness_lock+0x5f1 #1 __mp_acquire_count+0x58 #2 malloc+0xe3 #3 sys_semop+0x22f #4 syscall+0xb17 #5 Xsyscall+0x128 Process 62599 (syz-executor) thread 0xffff80002a2b82b0 (340217) exclusive rrwlock inode r = 0 (0xfffffd806f573ea8) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 rrw_enter+0xc6 #3 VOP_LOCK+0xa3 #4 ufs_ihashins+0x4f #5 ffs_vget+0x187 #6 ffs_inode_alloc+0x279 #7 ufs_mkdir+0xfc #8 VOP_MKDIR+0x101 #9 domkdirat+0x179 #10 syscall+0xb17 #11 Xsyscall+0x128 exclusive rrwlock inode r = 0 (0xfffffd806cd8e8e0) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 rrw_enter+0xc6 #3 VOP_LOCK+0xa3 #4 vn_lock+0xa4 #5 vfs_lookup+0x11c #6 namei+0x7ca #7 domkdirat+0x8b #8 syscall+0xb17 #9 Xsyscall+0x128 ddb{1}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 10211 11102K 11479K 166960K 12102 0 pcb 17 14K 15K 166960K 287 0 rtable 191 8K 8K 166960K 361 0 pf 32 17K 67484K 166960K 129 0 ifaddr 36 6K 7K 166960K 87 0 ifgroup 49 2K 2K 166960K 138 0 sysctl 3 1K 9K 166960K 10 0 counters 68 36K 37K 166960K 168 0 ioctlops 0 0K 4K 166960K 1765 0 iov 0 0K 18K 166960K 70 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1369 86K 86K 166960K 1956 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 9K 166960K 15 0 VM map 2 1K 1K 166960K 2 0 sem 12 0K 0K 166960K 100 0 dirhash 12 2K 2K 166960K 30 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 17 61K 89K 166960K 876 0 sigio 0 0K 0K 166960K 17 0 proc 73 115K 148K 166960K 689 0 subproc 72 4K 4K 166960K 90 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 1 0K 0K 166960K 104 0 in_multi 79 5K 7K 166960K 152 0 ether_multi 1 0K 0K 166960K 7 0 mrt 0 0K 0K 166960K 6 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 103 466K 466K 166960K 103 0 exec 0 0K 1K 166960K 506 0 fusefs mount 1 32K 32K 166960K 1 0 pfkey data 0 0K 0K 166960K 3 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 240 159K 180K 166960K 9818 0 UVM aobj 19 2K 2K 166960K 22 0 pinsyscall 42 84K 104K 166960K 2056 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 1K 166960K 55 0 NDP 11 0K 1K 166960K 62 0 temp 64 8649K 8718K 166960K 27877 0 kqueue 14 22K 28K 166960K 188 0 SYN cache 2 16K 16K 166960K 2 0 ddb{1}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 26 0 0 1 0 1 1 0 8 0 rtpcb 120 149 0 146 3 2 1 3 0 8 0 rtentry 176 123 0 42 5 0 5 5 0 8 0 unpcb 144 643 0 626 4 3 1 4 0 8 0 syncache 336 5 0 5 2 2 0 1 0 8 0 tcpcb 736 364 0 359 7 6 1 7 0 8 0 arp 136 15 0 4 1 0 1 1 0 8 0 inpcb 328 981 0 972 9 7 2 7 0 8 1 nd6 144 23 0 9 1 0 1 1 0 8 0 pkpcb 40 6 0 6 2 2 0 1 0 8 0 kcovpl 48 10 0 2 1 0 1 1 0 8 0 mppekey 1024 1 0 1 1 1 0 1 0 8 0 ppxss 1192 41 0 39 2 1 1 1 0 8 0 pppxif 1504 2 0 2 2 1 1 1 0 8 1 pffrag 232 3 0 2 1 0 1 1 0 482 0 pffrnode 88 3 0 2 1 0 1 1 0 8 0 pffrent 40 13 0 12 1 0 1 1 0 8 0 pfosfp 40 1463 0 1038 5 0 5 5 0 8 0 pfosfpen 112 1463 0 747 21 0 21 21 0 8 0 pfrktable 1344 1 0 1 1 1 0 1 0 8 0 pfstitem 24 68 0 19 1 0 1 1 0 8 0 pfstkey 128 68 0 19 2 0 2 2 0 8 0 pfstate 384 68 0 19 6 0 6 6 0 8 0 pfrule 1344 26 0 20 2 0 2 2 0 8 0 rttmr 136 2 0 2 2 2 0 1 0 8 0 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 578 0 213 30 6 24 28 0 8 1 art_table 40 579 0 213 5 0 5 5 0 8 0 art_node 32 123 0 51 1 0 1 1 0 8 0 sysvmsgpl 40 80 0 74 1 0 1 1 0 8 0 semupl 112 1 0 1 1 1 0 1 0 8 0 semapl 112 95 0 86 1 0 1 1 0 8 0 shmpl 112 19 0 3 1 0 1 1 0 8 0 dirhash 1024 29 0 12 3 0 3 3 0 8 0 dino2pl 256 2932 0 1424 95 0 95 95 0 8 0 ffsino 296 2932 0 1424 117 0 117 117 0 8 0 nchpl 144 4138 0 2444 64 0 64 64 0 8 0 rtmask 32 8 0 7 2 1 1 1 0 8 0 uvmvnodes 80 3334 0 0 69 0 69 69 0 8 0 vnodes 216 3334 0 0 186 0 186 186 0 8 0 namei 1024 14113 0 14111 4 3 1 2 0 8 0 percpumem 16 99 0 50 1 0 1 1 0 8 0 kstatmem 264 86 0 62 2 0 2 2 0 8 0 scsiplug 72 4 0 4 1 1 0 1 0 8 0 scxspl 216 19955 0 19954 11 10 1 8 1 8 0 plimitpl 152 162 0 145 1 0 1 1 0 8 0 sigapl 424 1199 0 1144 7 0 7 7 0 8 0 knotepl 120 336 0 0 11 0 11 11 0 8 0 kqueuepl 224 413 0 368 7 4 3 3 0 8 0 pipepl 344 206 0 179 6 0 6 6 0 8 3 fdescpl 528 1166 0 1135 3 0 3 3 0 8 0 filepl 160 6778 0 6520 23 9 14 19 0 8 3 lockfpl 104 333 0 331 1 0 1 1 0 8 0 lockfspl 48 157 0 155 1 0 1 1 0 8 0 sessionpl 144 26 0 17 1 0 1 1 0 8 0 pgrppl 48 51 0 34 1 0 1 1 0 8 0 ucredpl 104 976 0 959 1 0 1 1 0 8 0 zombiepl 144 1183 0 1181 1 0 1 1 0 8 0 processpl 1232 1199 0 1144 5 0 5 5 0 8 0 procpl 664 2457 0 2392 7 0 7 7 0 8 0 sosppl 168 3 0 3 1 1 0 1 0 8 0 sockpl 752 1806 0 1776 18 13 5 17 0 8 1 mcl64k 65536 5 0 0 1 0 1 1 0 8 0 mcl16k 16384 7 0 0 1 0 1 1 0 8 0 mcl12k 12288 1 0 0 1 0 1 1 0 8 0 mcl9k 9216 1 0 0 1 0 1 1 0 8 0 mcl8k 8192 2 0 0 1 0 1 1 0 8 0 mcl4k 4096 111 0 0 14 0 14 14 0 8 0 mcl2k 2048 34 0 0 4 0 4 4 0 8 0 mtagpl 96 6 0 0 1 0 1 1 0 8 0 mbufpl 256 4515 0 0 282 0 282 282 0 8 0 bufpl 280 7531 0 1388 439 0 439 439 0 8 0 anonpl 32 8742 0 0 71 0 71 71 0 246 0 amapchunkpl 152 34388 0 33895 41 14 27 37 0 158 5 amappl16 200 3547 0 3514 24 10 14 15 0 8 8 amappl15 192 10 0 9 1 0 1 1 0 8 0 amappl14 184 125 0 113 1 0 1 1 0 8 0 amappl13 176 9 0 8 2 1 1 1 0 8 0 amappl12 168 1860 0 1830 4 2 2 3 0 8 0 amappl11 160 70 0 56 1 0 1 1 0 8 0 amappl10 152 78 0 78 1 1 0 1 0 8 0 amappl9 144 254 0 254 1 1 0 1 0 8 0 amappl8 136 27 0 25 1 0 1 1 0 8 0 amappl7 128 127 0 115 1 0 1 1 0 8 0 amappl6 120 216 0 213 1 0 1 1 0 8 0 amappl5 112 128 0 118 1 0 1 1 0 8 0 amappl4 104 319 0 296 1 0 1 1 0 8 0 amappl3 96 5556 0 5459 4 1 3 3 0 8 0 amappl2 88 1425 0 1348 2 0 2 2 0 8 0 amappl1 80 11903 0 11299 15 0 15 15 0 8 0 amappl 88 8930 0 8761 5 0 5 5 0 92 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 7 0 7 2 2 0 1 0 8 0 dma128 128 254 0 254 2 2 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 19 0 18 1 0 1 1 0 8 0 aobjpl 72 21 0 3 1 0 1 1 0 8 0 uaddrrnd 24 1166 0 1135 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 1166 0 1135 1 0 1 1 0 8 0 vmmpekpl 168 10897 0 10847 3 0 3 3 0 8 0 vmmpepl 168 78764 0 76772 107 5 102 102 0 357 6 vmsppl 488 1165 0 1135 6 1 5 5 0 8 0 rwobjpl 80 25957 0 21657 91 0 91 91 0 8 0 pdppl 4096 2340 0 2270 108 36 72 84 0 8 2 pvpl 32 16690 0 0 135 0 135 135 0 265 0 pmappl 256 1165 0 1135 3 0 3 3 0 8 0 extentpl 40 45 0 27 1 0 1 1 0 8 0 phpool 112 561 0 57 15 0 15 15 0 8 0 ddb{1}> machine ddbcpu 0 Stopped at x86_ipi_db+0x27: addq $0x8,%rsp ddb{0}> trace x86_ipi_db(ffffffff837cbff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __mp_lock(ffffffff838ad0b0) at __mp_lock+0x192 intr_handler(ffff80003c469af0,ffff800000079a80) at intr_handler+0xe9 Xintr_ioapic_edge23_untramp() at Xintr_ioapic_edge23_untramp+0x18f end of kernel end trace frame: 0x7934097866f0, count: -6 ddb{0}> machine ddbcpu 1 Stopped at sys_semop+0x352: movzwl 0x8(%rbx),%r15d ddb{1}> trace sys_semop(ffff800033409a10,ffff80003c4a7460,ffff80003c4a73b0) at sys_semop+0x352 syscall(ffff80003c4a7460) at syscall+0xb17 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xb9989ecc700, count: -3