last executing test programs: 11.27958408s ago: executing program 7 (id=177): sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="89000000ffff000001"], 0x9}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f00000024c0)=""/232, 0xe8}, 0x0) r2 = openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x10, 0x0) ioctl$TIOCSETA(r2, 0xc0504417, &(0x7f0000000740)={0x1, 0x1000000, 0x200200, 0x8, '\x00', 0x0, 0x11b}) r3 = openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x200, 0x20) r4 = accept(r1, &(0x7f0000000180)=@in, &(0x7f00000001c0)=0xc) kevent(r2, &(0x7f00000000c0)=[{{r1}, 0xfffffffffffffffa, 0x80, 0x4, 0x5, 0x81}, {{r1}, 0xfffffffffffffffd, 0x10, 0x1, 0xb868, 0x8}, {{r0}, 0xffffffffffffffff, 0xa0, 0x0, 0xba2, 0x8}], 0x81, &(0x7f0000000200)=[{{r0}, 0xffffffffffffffff, 0x20, 0x4, 0xe8f, 0x7f}, {{r3}, 0xfffffffffffffff8, 0xf, 0xf0000000, 0x9, 0x7}, {{r1}, 0xfffffffffffffffe, 0xa0, 0x1, 0x2, 0xc0ab}, {{r0}, 0xfffffffffffffffd, 0x36, 0x20, 0x2, 0x4}, {{r1}, 0xfffffffffffffffd, 0xc, 0x40, 0x1, 0x7}, {{r4}, 0xfffffffffffffffd, 0x2, 0x80000000, 0x7, 0xf8c}, {{r0}, 0xfffffffffffffffa, 0x0, 0x2, 0x3, 0x5}], 0x3, &(0x7f0000000300)={0x5, 0x9}) sendmsg(r0, &(0x7f0000000380)={0x0, 0x32c, 0x0, 0x0, &(0x7f0000000000), 0x90}, 0x0) setrlimit(0x8, &(0x7f0000000980)) openat$null(0xffffffffffffff9c, 0x0, 0x80, 0x0) ioctl$WSKBDIO_SETDEFAULTBELL(r3, 0x80105705, &(0x7f00000003c0)={0x8, 0x8, 0x6a9, 0x6}) 9.785644863s ago: executing program 7 (id=187): kqueue() (async) r0 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000300), 0x200, 0x0) (async) r1 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) (async) r2 = kqueue() writev(r2, &(0x7f00000003c0), 0x0) writev(0xffffffffffffffff, 0x0, 0x0) (async) pwritev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="809e4481774f373478286d58d6b90758e3aaf1661e8a9a7044338e7211f600c071bfc59eaf5c4f9fb9dd6a652acfc2654311886f6ced01605f35c6577eb004359836ba4dd6f8776097612e261c8eaffdebfe3373", 0x54}], 0x1, 0xfff) sysctl$kern(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) execve(0x0, 0x0, 0x0) (async) openat$bpf(0xffffffffffffff9c, &(0x7f00000001c0), 0x400, 0x0) (async) setrlimit(0x8, &(0x7f0000000980)={0xb, 0x54}) r3 = syz_open_pts() close(r3) r4 = syz_open_pts() writev(r3, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) (async) ioctl$TIOCSETA(r4, 0x802c7414, &(0x7f0000000000)={0x1, 0x4, 0x3ff, 0x3, "8bbfb00cc54ee2221ba79c162f4b406bdcb6fde6", 0x8, 0x9}) (async) writev(r3, &(0x7f0000000100)=[{&(0x7f00000009c0)="15a526fe5b808f05e093b2e29211ab841030ee4c221f19cffa80c733c14559757101afb2fbf34e6940b242a86b", 0x2d}], 0x1) read(r4, &(0x7f0000000200)=""/255, 0xff) unveil(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='r\x00') (async) nanosleep(&(0x7f0000000340)={0x1, 0x8000}, 0x0) (async) r5 = openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) r6 = openat$tty(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCSETA(r6, 0xcd504406, &(0x7f0000000040)={0x8, 0x0, 0x7, 0xfffffffd, "97a22273b09c940000000000000000000500", 0x1000001, 0x8}) (async) ioctl$FIONREAD(r1, 0x4004667f, &(0x7f0000000100)) (async) ioctl$TIOCSETA(r5, 0xcd504406, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, "97a2224ff1c14649ebb178926cc9795a6b47c1d1"}) (async) ioctl$DIOCMAP(r5, 0xc0106477, &(0x7f00000000c0)={&(0x7f0000000080)='./file0\x00', r1, 0x3}) (async) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) (async) mquery(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x0, 0xffffffffffffffff, 0x2) (async) dup2(r0, r2) 9.783653314s ago: executing program 7 (id=189): mknod(&(0x7f0000000400)='./file0\x00', 0x2000, 0x584a) (async) mknod(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x0) mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) (async) link(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000d40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) link(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) chflags(&(0x7f0000000a80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1) (async) r0 = socket(0x11, 0x3, 0x0) setsockopt(r0, 0x11, 0x4, &(0x7f0000000340), 0x0) rename(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) rename(&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') unlink(&(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) r1 = socket$inet(0x2, 0x3, 0x0) getsockopt(r1, 0x0, 0x25, 0x0, 0x0) (async) rename(&(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000a40)='./file0\x00') 8.309690802s ago: executing program 7 (id=199): chroot(&(0x7f0000000000)='./file0\x00') r0 = socket(0x2, 0x4001, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x200, 0x40) r1 = getpid() ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x40000530, r1) truncate(&(0x7f0000000400)='./file0\x00', 0x1) clock_gettime(0x3, 0xfffffffffffffffe) r2 = dup(r0) r3 = fcntl$dupfd(r2, 0x2, 0xffffffffffffffff) r4 = socket(0x2, 0x3, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x2000000000000243, &(0x7f0000000100)}) r5 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r5, 0xc0106924, &(0x7f00000001c0)) r6 = kqueue() kevent(r6, &(0x7f00000000c0), 0x101, &(0x7f0000000180), 0x6, 0x0) ioctl$FIONREAD(r4, 0xc0206921, &(0x7f00000001c0)) r7 = socket(0x2, 0x2, 0x0) ioctl$FIONREAD(r7, 0x80206919, &(0x7f00000001c0)) r8 = socket(0x2, 0x2, 0x0) ioctl$FIONREAD(r8, 0x8040691a, &(0x7f00000001c0)) syz_emit_ethernet(0x8e, &(0x7f0000000040)=ANY=[@ANYRESHEX=0x0, @ANYRES8=r2, @ANYRES16=r3]) 6.693459321s ago: executing program 7 (id=209): r0 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000600), 0x1, 0x0) ioctl$WSKBDIO_SETBELL(r0, 0x80105703, &(0x7f0000000640)) sysctl$kern(&(0x7f0000000040)={0x1, 0xdc1d800780e51763}, 0x3, &(0x7f00000000c0)="3bf2ee74e747c82dad6eb2a36fa755e1a3925fe49afca7e63b52fa65ccaa74d6e6b85b6cdced70357ef201f97842b1068dca31553fa2d7031f38c03e56ad0e24dfc4f97b8b7f81499647e6e7725765d61436c85e43c15d12a78cb8c57ddde87021d7b685507fd3e0652f35e45bdaa3afd86c4fe557433e4c2b632de71c951516adff26aa2e48b45f8ce92bcefd3eceefabee7e3ebe806fdb4f6af569ae94b5d127", &(0x7f0000000080)=0xffffffffffffff7f, &(0x7f0000001c00)="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", 0x4a) sysctl$kern(&(0x7f0000000000)={0x1, 0x9}, 0x2, &(0x7f0000000180)="58f84bb26a7188a86b8bfeb8e33c62b6e9e90c705bc86afb82cd239f4dc42471e68f7484478efe1209db8800eb759e938cf614d64173e56acf6f0ef8f71b3fcf526cf296212a2cba35b5c725aba9ccbfb5c1a9dbd515496ceb4b1500c053330a3d79f714e8", &(0x7f0000000200)=0x65, &(0x7f0000000240)="ac2c64617ba7eb56ac3c4b3f058994d61f4df5b0ae71d2f2", 0x18) 5.03365909s ago: executing program 7 (id=218): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/40, 0x28}, {&(0x7f0000000080)=""/38, 0x26}], 0x2) open(&(0x7f0000000100)='./file0\x00', 0x80, 0x30) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) ioctl$VNDIOCSET(r2, 0xc0384600, &(0x7f0000000200)={&(0x7f0000000180)='./file0\x00', 0xe, &(0x7f00000001c0)='./file0\x00', 0x8}) (async) r3 = shmget(0x1, 0x3000, 0x400, &(0x7f0000ffd000/0x3000)=nil) shmctl$IPC_STAT(r3, 0x2, &(0x7f0000000240)=""/152) mknod$loop(&(0x7f0000000300)='./file0\x00', 0x8000, 0x1) (async) pread(r2, &(0x7f0000000340)="07f04ce8cb67255fe8f7142cb2317b22e5c25df9306e65d54c4aafdef120e069493218a7fa77b3c9ca29883c1b92a8e70e5fb076dace296efe9e017bbbffe78ab093a0db8258ad3e5cef91cfb3fa13f23ef93ff3282800d926a907029b60c56802ae31724c9bba063fd7e8ca3ce9001eae353f9d8222816149cbf43b4f2376536f83eb0d886385d03cf658a0bc0aad48e75c06b6cd330f9dcd81ccaeb842f4829b6265c59aa4a1ccefd3aa83490f6632faa7893853b4381bfb52f2ed5c42e15c84bcfd7093e669aaf61f90d98a36e501", 0xd0, 0x4) ioctl$WSMUXIO_INJECTEVENT(r0, 0x80185760, &(0x7f0000000440)={0x10001, 0x5, {0x7f, 0x1ff}}) (async) flock(r0, 0x2) (async) r4 = fcntl$dupfd(r1, 0xa, r1) execve(&(0x7f0000000480)='./file0\x00', &(0x7f0000000640)=[&(0x7f00000004c0)='/dev/zero\x00', &(0x7f0000000500)='/dev/zero\x00', &(0x7f0000000540)=')\x00', &(0x7f0000000580)='/dev/zero\x00', &(0x7f00000005c0)='2*\x00', &(0x7f0000000600)=',,\x00'], &(0x7f00000006c0)=[&(0x7f0000000680)='/dev/zero\x00']) (async) r5 = geteuid() (async) getsockopt$sock_cred(r4, 0xffff, 0x1022, &(0x7f0000000700)={0x0, 0x0}, &(0x7f0000000740)=0xc) (async) getsockopt$sock_cred(r2, 0xffff, 0x1022, &(0x7f0000000780)={0x0, 0x0, 0x0}, &(0x7f00000007c0)=0xc) r8 = getpid() (async) getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000000800)={0x0}, &(0x7f0000000840)=0xc) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000880)={{0x9, r5, 0x0, r6, r7, 0x40, 0x81}, 0x2, 0x2, r8, r9, 0x2, 0x3, 0x5, 0x808}) getsockopt$SO_PEERCRED(r4, 0xffff, 0x1022, &(0x7f0000000900), 0xc) r10 = socket$inet(0x2, 0x4000, 0x3) close(r10) (async) read(0xffffffffffffff9c, &(0x7f0000000940)=""/159, 0x9f) syz_extract_tcp_res(&(0x7f0000000a00), 0x0, 0x40) getsockopt$sock_linger(r4, 0xffff, 0x80, &(0x7f0000000a40), &(0x7f0000000a80)=0x8) chown(&(0x7f0000000ac0)='./file0\x00', r5, r7) (async) open(&(0x7f0000000b00)='./file0\x00', 0x8000, 0x100) syz_extract_tcp_res$synack(&(0x7f0000000b40), 0x1, 0x0) (async) select(0x40, &(0x7f0000000b80)={0x2, 0x4, 0xfffffffffffffbff, 0x1, 0x8000, 0xb3, 0x7, 0x5a}, &(0x7f0000000bc0)={0x5, 0x6, 0x8, 0xfffffffffffffffb, 0x101, 0x3, 0x2, 0x9}, &(0x7f0000000c00)={0x8, 0x4, 0x7, 0x4, 0x9, 0x100, 0x5, 0x7f}, &(0x7f0000000c40)={0x7c, 0x5}) (async) ioctl$WSKBDIO_SETMAP(r4, 0x8010570e, &(0x7f0000000cc0)={0x5, &(0x7f0000000c80)=[{0x7, 0x2, 0x0, 0x1000, 0x40}, {0x6, 0x8, 0x2, 0xac, 0xff}, {0x5d, 0x6, 0x8ac6, 0x1, 0x1}, {0x9, 0x9, 0xd3, 0x0, 0x401}, {0x8, 0x7, 0x5, 0x7, 0x9}]}) 3.175995277s ago: executing program 3 (id=229): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=""/89, 0x59}, 0x80003f8d}, 0x10, 0x0, 0x0) sendmmsg(r1, &(0x7f0000000080)={0x0}, 0x10, 0x0) close(r1) close(r0) (async) close(r0) 2.96099309s ago: executing program 5 (id=231): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb5219f1000b913f1, 0x0) ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9f, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x10, r0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = msgget$private(0x0, 0x8) msgsnd(r1, &(0x7f0000001900)=ANY=[@ANYBLOB], 0xef, 0x800) setuid(0xee01) stat(&(0x7f0000000040)='.\x00', &(0x7f0000000140)) r2 = socket$inet(0x2, 0x1, 0x0) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000001c0)={{0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xc0}, 0xf0ffffffffffffff, 0x1}) r3 = socket(0x2, 0x2, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r4 = socket(0x11, 0x3, 0x0) setsockopt$sock_int(r4, 0xffff, 0x1002, &(0x7f0000000080), 0x4) ioctl$FIONREAD(r3, 0x8040691a, &(0x7f00000001c0)) setsockopt$inet_opts(r2, 0x0, 0x200000000000b, &(0x7f0000000080)='\x00', 0x1) setsockopt$inet_opts(r2, 0x0, 0x9, &(0x7f00000000c0)="b3f7ec75b823b68b9282c0cd", 0xc) 2.737871104s ago: executing program 3 (id=235): r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) (async) socket(0x18, 0x3, 0x1) (async) syz_emit_ethernet(0x126f, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]) (async) sysctl$kern(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)="55f8f5782087a072a82ec35f78d14780f518", 0x12) (async) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r1 = socket(0x18, 0x2, 0x0) ioctl$FIONREAD(r1, 0xc1206949, &(0x7f00000001c0)) r2 = open$dir(&(0x7f0000000040)='./file0\x00', 0xae828e137847f62, 0x0) r3 = msgget(0x2, 0x8) msgsnd(r3, &(0x7f0000000140)={0x3, "291d3223538ff6e4dacd845b314db784ceea3c52e060ba8fc5405b2304d23c113a6fd91d6d4fe522deac9777bc4c8cf10228b17679b0ac8951a0dd7cbd9448d00d03c54f0d3c3b9d946ebe0527389b9201ec15c1e4843401e9a20e7760855e589f9eec66b13c47eb0eae8be3702ff19fb57f2226e9616725038916ed1ab5c1eeb2c68867c5f5408b36dc15d5050479d4639431bf95bdb96ccbd56435b3be6e897bb85782d572f6141cea35d35986ae8db0b6f03376f1328d9b41a501ee9a16771ad8d76a421e36ee26884ad7de10f201365b8eeba746d6cbf26440230bea3ae2cf5513ed7c11cf19b745b981606f010b88a1a227f7"}, 0xfd, 0x0) (async) open(&(0x7f0000000080)='./file0\x00', 0x48, 0x0) munmap(&(0x7f0000006000/0x4000)=nil, 0x4000) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) minherit(&(0x7f0000007000/0x4000)=nil, 0x4000, 0x3) close(r2) sysctl$ddb(&(0x7f0000000000)={0x9, 0x3}, 0x2, 0x0, 0x0, &(0x7f0000000080), 0x0) (async) fchflags(r0, 0x10001) 2.714240378s ago: executing program 4 (id=236): mknod(&(0x7f0000000000)='./file0\x00', 0x2100, 0x5f00) acct(&(0x7f0000000080)='./file0\x00') mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) select(0x40, &(0x7f0000000100), &(0x7f00000024c0)={0x3, 0x0, 0xb1}, 0x0, 0x0) 2.710444436s ago: executing program 5 (id=237): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000200)=@file={0xd570d0466b6018f, './file0\x00'}, 0xa) r1 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0) ioctl$DIOCMAP(r1, 0xc0106477, &(0x7f00000000c0)={&(0x7f0000000140)='./file0\x00', r1, 0x3}) 2.709499911s ago: executing program 3 (id=238): r0 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$WSDISPLAYIO_LSFONT(r0, 0xc058574e, &(0x7f0000000040)) ioctl$VT_GETACTIVE(r0, 0x40047607, &(0x7f00000000c0)) ioctl$WSDISPLAYIO_ADDSCREEN(r0, 0x80245753, &(0x7f0000000100)={0x6, './file0\x00', './file0\x00'}) (async) ioctl$VT_GETACTIVE(r0, 0x40047607, &(0x7f0000000140)) (async, rerun: 32) ioctl$KDSETRAD(r0, 0x20004b43) (async, rerun: 32) ioctl$WSMUXIO_REMOVE_DEVICE(r0, 0x80085762, &(0x7f0000000180)={0x3, 0x8}) (async) ioctl$WSDISPLAYIO_SMODE(r0, 0x8004574c, &(0x7f00000001c0)=0x1) (async) mlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000) truncate(&(0x7f0000000200)='./file0\x00', 0x7) (async) ioctl$WSDISPLAYIO_GETSCREENTYPE(r0, 0xc028575d, &(0x7f0000000240)={0x9, 0x2, './file0\x00', 0x1c, 0x6, 0x3, 0xc3}) r1 = dup(r0) chflagsat(r1, &(0x7f0000000280)='./file0\x00', 0x0, 0x2) (async) r2 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f00000002c0), 0x10000, 0x0) ioctl$WSDISPLAYIO_GETSCREEN(r2, 0xc0245755, &(0x7f0000000300)={0x9ea2, './file0\x00', './file0\x00'}) (async) ioctl$WSDISPLAYIO_GMODE(r2, 0x4004574b, &(0x7f0000000340)) (async) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000380)={'tap', 0x0}) (async) ioctl$TIOCSTOP(r1, 0x2000746f) ioctl$WSMUXIO_ADD_DEVICE(r1, 0x80085761, &(0x7f00000003c0)={0x2, 0x5}) (async) msgget$private(0x0, 0x48) (async) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4) ioctl$TIOCSFLAGS(r1, 0x8004745c, &(0x7f0000000400)=0xfffffffc) (async) ioctl$KDGKBMODE(r1, 0x40044b06) (async, rerun: 64) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0x66, &(0x7f0000000440)={0x0, 0x1, 0x6, 0x6723, 0x7ff}, 0xc) (async, rerun: 64) socket(0x8, 0x3, 0x0) (async) ioctl$WSDISPLAYIO_GETSCREEN(r0, 0xc0245755, &(0x7f0000000480)={0x2, './file0\x00', './file0\x00'}) (async) r3 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$VT_WAITACTIVE(r3, 0x20007606, &(0x7f0000000500)=0x6) (async, rerun: 32) munlockall() (async, rerun: 32) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) 2.660695278s ago: executing program 4 (id=239): ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0x800000004, [{&(0x7f0000097000/0x3000)=nil, &(0x7f00000b7000/0x3000)=nil}, {&(0x7f0000ffc000/0x2000)=nil, &(0x7f000014b000/0x4000)=nil, 0x7fffffffffffffff}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000592000/0x1000)=nil, 0xb938}, {&(0x7f000014c000/0x2000)=nil, &(0x7f00000d6000/0x1000)=nil, 0xfdfffffffffffff9}, {&(0x7f00000f4000/0x3000)=nil, &(0x7f0000025000/0x3000)=nil, 0x4001}, {&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000095000/0x3000)=nil, 0x1}, {&(0x7f0000123000/0x3000)=nil, &(0x7f000014d000/0x4000)=nil, 0x1000000532}, {&(0x7f0000013000/0x2000)=nil, &(0x7f0000013000/0x4000)=nil, 0x5}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x6}, {&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000632000/0x4000)=nil, 0xc6}, {&(0x7f000014b000/0x3000)=nil, &(0x7f000038f000/0x4000)=nil, 0x4000000000}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000688000/0x4000)=nil, 0x100000000000006}, {&(0x7f0000ff9000/0x3000)=nil, &(0x7f0000508000/0x2000)=nil, 0x51a}, {&(0x7f0000349000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0xfffffffffffffff8}, {&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x1000039f7}, {&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000754000/0x4000)=nil, 0x9e}], './file0\x00', 0xfffffffa}) (async) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) sysctl$hw(&(0x7f00000001c0)={0x6, 0x18}, 0x2, &(0x7f00000000c0), 0x0, 0x0, 0x0) (async) utimensat(0xffffffffffffff9c, 0x0, &(0x7f0000000080)={{0x0, 0xfffffffffffffffe}}, 0x2) r0 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) ioctl$TIOCSETA(r0, 0xc1084425, &(0x7f0000000040)={0x3, 0x0, 0xfffffffd, 0x5, '!\r\x00\x00\x00\b\x00', 0x2000000, 0x5}) 2.659994818s ago: executing program 5 (id=240): open(&(0x7f0000000180)='./file0\x00', 0x80000000000206, 0x0) r0 = getpid() ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x40000530, r0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x200, 0x0) r2 = open$dir(&(0x7f0000000000)='./file0\x00', 0x2, 0x0) mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x200, 0xb69d39a106c22412) execve(0x0, 0x0, 0x0) writev(r2, &(0x7f0000000340)=[{&(0x7f0000000000), 0x2cfea}], 0x1000000000000013) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x10, r1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) clock_gettime(0x3, 0xfffffffffffffffe) 2.652802809s ago: executing program 0 (id=241): r0 = open(&(0x7f00000000c0)='./bus\x00', 0x200, 0x0) readv(r0, &(0x7f0000001440)=[{&(0x7f0000000100)=""/144, 0x90}], 0x1) (async) setitimer(0x0, &(0x7f0000000000)={{0x5, 0xc240}, {0xa3, 0x3}}, 0x0) close(0xffffffffffffffff) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async, rerun: 64) setgroups(0x1, &(0x7f0000001380)=[0x0]) (rerun: 64) socket(0x2, 0x1, 0x0) (async) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) (async) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x2, 0xfe, 0x35, 0x3}, {0x28, 0x8, 0xc4, 0xfff}, {0xe, 0xb9, 0xbe, 0x2}]}) (async) sysctl$net_inet6_icmp6(&(0x7f0000001bc0)={0x4, 0x18, 0x3a, 0xe}, 0x4, &(0x7f0000000000)="8eadee20", &(0x7f0000001c80)=0x4, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) (async) ioctl$BIOCSETWF(r1, 0x80104277, &(0x7f0000000040)={0x0, 0x0}) write(r1, &(0x7f0000000080)="000000005e0f72ce000000000000", 0xe) (async) setitimer(0x0, 0x0, &(0x7f00000002c0)) 2.652367338s ago: executing program 4 (id=242): r0 = accept$unix(0xffffffffffffff9c, &(0x7f0000000000)=@abs, &(0x7f0000000040)=0x8) connect$unix(r0, &(0x7f0000000080)=@abs={0x1, 0x0, 0x3}, 0x8) r1 = semget$private(0x0, 0x4, 0x0) semctl$SETALL(r1, 0x0, 0x9, &(0x7f00000000c0)=[0x0, 0x5]) (async) close(r0) close(r0) (async) recvfrom$unix(r0, &(0x7f0000000100)=""/159, 0x9f, 0x842, &(0x7f00000001c0)=@abs={0x1, 0x0, 0x2}, 0x8) (async, rerun: 64) r2 = geteuid() (async, rerun: 64) r3 = getegid() (async) r4 = getuid() getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000240)=0xc) semctl$IPC_SET(r1, 0x0, 0x1, &(0x7f0000000280)={{0x8, r2, r3, r4, r5}, 0x8, 0x9, 0x8}) (async) r6 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000300), 0x80, 0x0) ioctl$VMM_IOC_CREATE(r6, 0xc2585601, &(0x7f0000000340)={0x10, 0x10, [{&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x5}, {&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0xc84}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x101}, {&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x9}, {&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x101}, {&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x6}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x3}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0xe}, {&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x1}, {&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x5}, {&(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x9}, {&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x5}, {&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x5}, {&(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, 0x100000001}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x289}, {&(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0xfffffffffffffff9}], './file0\x00', 0x7fff}) (async) recvfrom$unix(r0, &(0x7f0000000540)=""/156, 0x9c, 0x801, &(0x7f0000000600)=@file={0x1, './file0\x00'}, 0xa) (async) r7 = socket$inet(0x2, 0x8000, 0x2a) getsockname$inet(r7, &(0x7f0000000640), &(0x7f0000000680)=0xc) (async) pwrite(r0, &(0x7f00000006c0)="f013798049a32fba80e12aa4c2c183e47699184a1bce72e487c59c42ddfac265064c92d049df7134d07b4961799d3118ef0ba19c2d47089a543fea307db4d4e5379226c7104e824bb916c30a8c6e071b27c3e6eb187f844f6be0939666ff1c4dd02926195b7a1d6efcd521ba56e6d4d1adcae70826fa96cae0e514139d037c00eb01128581675f29112561c1ddacacfca17cb9a3", 0x94, 0x100) (async) getsockname(r7, &(0x7f0000000780)=@in, &(0x7f00000007c0)=0xc) (async) r8 = socket$inet(0x2, 0x8000, 0x4) (async, rerun: 64) semctl$GETNCNT(r1, 0x3, 0x3, &(0x7f0000000800)=""/64) (async, rerun: 64) semget$private(0x0, 0x4, 0x0) (async) unveil(&(0x7f0000000840)='./file0\x00', &(0x7f0000000880)='W\x00') r9 = open(&(0x7f00000008c0)='./file0\x00', 0x8000, 0x10) ioctl$VNDIOCCLR(r9, 0x80384601, &(0x7f0000000980)={&(0x7f0000000900)='./file0/file0\x00', 0x8, &(0x7f0000000940)='./file0\x00', 0x8}) (async) lchown(&(0x7f00000009c0)='./file0\x00', r2, r5) (async) recvmsg(r8, &(0x7f0000000c40)={&(0x7f0000000a00)=@in6, 0xc, &(0x7f0000000b40)=[{&(0x7f0000000a40)=""/206, 0xce}], 0x1, &(0x7f0000000b80)=""/152, 0x98}, 0x801) (async) msgrcv(0xffffffffffffffff, &(0x7f0000000c80)={0x0, ""/4096}, 0x1008, 0x1, 0x1800) (async) mkdir(&(0x7f0000001cc0)='./file0\x00', 0x5d) (async) openat(r9, &(0x7f0000001d00)='./file0/file1\x00', 0x80, 0x0) 2.622038556s ago: executing program 1 (id=244): sysctl$kern(&(0x7f0000000000)={0x1, 0x48}, 0x2, 0x0, 0x0, 0x0, 0x0) setrlimit(0x8, &(0x7f00000008c0)={0x42, 0x61}) r0 = syz_open_pts() r1 = socket(0x18, 0x3, 0x0) mknod(0x0, 0x2000, 0x637e) r2 = open(&(0x7f0000000040)='./file0\x00', 0x40, 0x100) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) r3 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r3, 0xc0106924, &(0x7f00000001c0)) ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file0\x00', 0xffff, 0xbc, 0xfff4, 0x1, 0x7ff, 0xffffffff, 0x1, 0x1, 0x1, 0x4000000000000006, 0x101}) r4 = socket(0x18, 0x3, 0x0) setitimer(0x1, &(0x7f0000000140)={{0x9, 0x9}, {0x2000ffff, 0x4}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$FIONREAD(r4, 0x81206919, &(0x7f0000000100)) ioctl$FIONREAD(r1, 0x8080691a, &(0x7f0000000100)) close(r0) r5 = syz_open_pts() ioctl$VNDIOCSET(r2, 0xc0384600, &(0x7f0000000200)={&(0x7f0000000080)='./file0\x00', 0x4, &(0x7f00000000c0)='./file0\x00', 0x8}) ioctl$TIOCSETA(r5, 0x802c7414, &(0x7f0000000040)={0x27ffb, 0x0, 0x7ce7, 0x21d8b788, "102e2618a1a67f93e900000000eb000000000100", 0xc, 0x4}) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000900)="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", 0x1e2}], 0x1) ioctl$TIOCSETAF(r0, 0x802c7416, &(0x7f0000000000)={0xb, 0x3, 0x7, 0x150ea6bc, "9cb43fe27ff54ecc61748ab2cda0ffdd1e13e38a", 0x3, 0xb}) 2.463965634s ago: executing program 0 (id=245): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0xffff, 0x1002, &(0x7f0000000240)=0x34, 0x4) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2000, 0x2d87) r2 = open(&(0x7f0000000140)='./file0\x00', 0x10686, 0x8) writev(r2, &(0x7f0000000840)=[{&(0x7f00000004c0)="d7", 0x1}, {&(0x7f00000005c0)="ef", 0x1}, {&(0x7f0000000680)="04", 0x1}], 0x3) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="04010000ffff000001"], 0x104}, 0x0) 2.463338535s ago: executing program 0 (id=246): mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x5d4a) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) setrlimit(0x8, &(0x7f0000000980)={0xb, 0x54}) r1 = syz_open_pts() close(r1) r2 = syz_open_pts() ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f0000000380)={0x6, 0x3dd, 0x100005, 0x5ffffe57, "9ddc412e317d350c446b576a00002f9e68cd3304", 0x808, 0xf32a}) getrlimit(0x8, &(0x7f0000000000)) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000009c0)="5829f8689f5373394720664252ce240f07ac5e537a7d0d034ba7d737b83a2c7f581c8fba153cb80a2672eeb60f6b1cc5bd4f900489ea228d513c334962905422dd6cf12a3dd3b9edf7193491c694066b1780cf00360c4a4a819c0e8a8c7ebc46f4abfc9172eae2b0b4e56f273956c772c9973e0ae8c56dcd0c8ec7eecfcd732ad12200ae4a9b0ff8c5a0ae223fc1a5093751c6c242bca6e89d8be6d4b92c134d9f43f2919d86f1d869b27895796ad5bf4b787af565ccd3da67475670b8bacc612f5ab184ee65cc235f2e832455c8db0cc9756134322fe3d8bd2237776fde8a859e", 0xe1}], 0x1) write(r0, &(0x7f0000000700)="e098b8e9b61327f7bc6992dadb7950bf95466df0c8cac419ce793104ae777bcb93c9bdf8142fbca69eb0fe85f7e62297fd63af0c042d091665c37295468b82ad345339c9320b88682bf0a5d55f38837cda9b8630e6b8c3d30e24bcee67038fd42e916103476e889d101db5d8a5b4826b300381cd34c858f959a977502ccf5e39e3", 0x81) unveil(&(0x7f0000000500)='.\x00', &(0x7f00000002c0)='r\x00') open(&(0x7f0000000200)='./file0\x00', 0x1, 0x17a) 2.4620635s ago: executing program 1 (id=247): r0 = shmget(0x2, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000080)={0x0, 0x0}, 0xc) getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0xc) getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000140)=0xc) getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0xc) r5 = getpid() open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) setgroups(0x0, 0x0) ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x510, r5) setrlimit(0x1, &(0x7f0000000180)={0x200, 0x961}) setgid(0xffffffffffffffff) getrlimit(0x0, &(0x7f0000000040)) r6 = kqueue() kevent(r6, &(0x7f00000000c0), 0x8, 0x0, 0x15, 0x0) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f00000001c0)={0x0}, &(0x7f0000000240)=0xc) r8 = getpid() ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x510, r8) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000280)={{0x8, r1, r2, r3, r4, 0x2a, 0x5}, 0xffff, 0x8001, r7, r8, 0x8, 0x5fdb87f8, 0x2}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb5219f1000b913f1, 0x0) ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9f, 0x0) getitimer(0x0, &(0x7f0000000000)) 2.461697882s ago: executing program 2 (id=248): r0 = open(&(0x7f00000000c0)='./file0\x00', 0x400, 0x101) r1 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000000), 0x8, 0x0) ioctl$VT_GETSTATE(r1, 0x40067664, &(0x7f0000000040)) ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9f, 0x0) ftruncate(r0, 0x8) 2.460034637s ago: executing program 3 (id=249): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x0, [{0x2, 0x2}, {0x0, 0xfffffffb}, {}, {0x0, 0x1}, {0x0, 0x7fffffff}, {0x0, 0x4}, {0x1}, {0x0, 0xc8}, {0x5, 0x2}, {0x3, 0xff}, {0x2}, {0x3}, {0x1, 0xfffffffd}, {}, {}, {0x1, 0x1ff}, {0x1, 0x8}, {0x2, 0xfffeffff}, {}, {0x0, 0x2}, {}, {0x1, 0xfffffffc}, {0x2}, {}, {0x0, 0xffffffff}, {0x2}, {0x0, 0x3}, {}, {}, {}, {}, {0x1, 0x57fd}]}) (async) ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x0, [{0x2, 0x2}, {0x0, 0xfffffffb}, {}, {0x0, 0x1}, {0x0, 0x7fffffff}, {0x0, 0x4}, {0x1}, {0x0, 0xc8}, {0x5, 0x2}, {0x3, 0xff}, {0x2}, {0x3}, {0x1, 0xfffffffd}, {}, {}, {0x1, 0x1ff}, {0x1, 0x8}, {0x2, 0xfffeffff}, {}, {0x0, 0x2}, {}, {0x1, 0xfffffffc}, {0x2}, {}, {0x0, 0xffffffff}, {0x2}, {0x0, 0x3}, {}, {}, {}, {}, {0x1, 0x57fd}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) close(0xffffffffffffffff) (async) close(0xffffffffffffffff) r0 = syz_open_pts() ioctl$TIOCSETAW(r0, 0x802c7415, &(0x7f0000000080)={0x2df5776a, 0x7fffffff, 0xd, 0xfbfffffc, "006446001009fc00000000002600938ee9000100", 0xa, 0x6}) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x62}) socket$inet(0x2, 0x2, 0xa) 2.454843617s ago: executing program 4 (id=250): r0 = getppid() r1 = getgid() msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f00000000c0)={{0x0, 0x0, r1, 0x0, 0x0, 0x1a0}, 0x0, 0xf, r0, 0x0, 0x0, 0x0, 0x800}) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) ioctl$WSKBDIO_GETMAP(r2, 0x80047476, &(0x7f0000000100)={0x0, 0x0}) (async) fcntl$setown(r2, 0x6, 0x0) 2.232510708s ago: executing program 5 (id=251): mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) (async) r0 = socket$inet(0x2, 0x3, 0xf) setsockopt(r0, 0x0, 0x4, &(0x7f0000000040), 0x0) (async) r1 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a) (async) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x802, 0x17, 0x1, 0xff, 0x80000004, 0x80000003, 0x10001, 0x10, [{0x5, 0x80000000, 0x4, 0x70fff}, {0x7, 0x8, 0x8, 0xfffffff9}, {0x8, 0xf86, 0x3, 0x9}, {0x8000001, 0x800, 0x8007}, {0x401, 0x200726, 0x2800, 0x7}, {0xfffffff9, 0x6, 0xffffffff, 0x99}, {0xce1, 0xf, 0x4f8, 0x6d}, {0x6, 0x803, 0x14, 0x8}, {0x2, 0x83, 0x5, 0x9}, {0x4, 0x7fff, 0xd1b, 0x88}, {0x1ce, 0x10001, 0xc, 0x3}, {0x7ff, 0x9, 0x8, 0x9}, {0xb8c, 0x4, 0x8, 0x4}, {0x29a71717, 0xfffffffa, 0xe, 0x6}, {0xc, 0x7, 0x5, 0x4}, {0x0, 0x1, 0x1002, 0x30004}]}) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = msgget$private(0x0, 0xafb0e20fef6483ff) sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b10005130000000000003e0004100000000013fecea10500fef96ecf2bc72fd3357ae30200004e3039d2d236acf20b7804be38164991f7c8cf7f882b297be1aa0500100051e2f0ad3ebbc257699a1f139b672f335c223e7d0c032bfa896443a410b6ff46d6819d47fbb12cea0f555002000000720fd38bfbb770a8f5a872c88106002ec589040000000080", 0x8b, 0x0, 0x0, 0x0) (async) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0x4, [{&(0x7f000040c000/0x400000)=nil, &(0x7f000017c000/0x3000)=nil, 0x3}, {&(0x7f0000695000/0x2000)=nil, &(0x7f0000069000/0x4000)=nil, 0xffffffffffffff7a}, {&(0x7f00004d8000/0x1000)=nil, &(0x7f00006b9000/0x1000)=nil, 0x8000000000b936}, {&(0x7f000070f000/0x3000)=nil, &(0x7f000072c000/0x3000)=nil, 0xfffffffffffffffd}, {&(0x7f000015a000/0x3000)=nil, &(0x7f0000704000/0x1000)=nil, 0x6}, {&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x80000000}, {&(0x7f000055e000/0x4000)=nil, &(0x7f00005a9000/0x1000)=nil, 0xa}, {&(0x7f0000ffe000/0x2000)=nil, &(0x7f00000ce000/0x4000)=nil, 0x5}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil}, {&(0x7f00003bc000/0x3000)=nil, &(0x7f00003f2000/0x2000)=nil, 0xd}, {&(0x7f000064b000/0x2000)=nil, &(0x7f0000ff3000/0xd000)=nil, 0x3}, {&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000800000/0x1000)=nil, 0x8}, {&(0x7f0000241000/0x2000)=nil, &(0x7f0000055000/0x1000)=nil, 0x4}, {&(0x7f000024b000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0xffffffffbffffff9}, {&(0x7f000034a000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x1000039f7}, {&(0x7f0000705000/0x4000)=nil, &(0x7f000057f000/0x2000)=nil, 0x4}], './file0/file0\x00', 0xfffffffe}) (async) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f0000000080), 0x1c, 0x0}, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) (async) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x10000000000001}}) (async) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) r3 = socket(0x18, 0x1, 0x0) close(r3) (async) r4 = socket(0x18, 0x2, 0x0) setsockopt(r4, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) (async) connect$unix(r3, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) (async) sendmsg$unix(r3, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0) (async) msgrcv(r2, 0x0, 0x0, 0x3, 0x1000) msgrcv(r2, 0x0, 0x0, 0x0, 0x1000) (async) msgctl$IPC_RMID(r2, 0x0) (async) sysctl$net_inet6_icmp6(&(0x7f00000022c0)={0x4, 0x18, 0x3a, 0xa}, 0x4, 0x0, 0x0, 0x0, 0x0) (async) ioctl$VNDIOCSET(r1, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) (async) ioctl$VNDIOCSET(r1, 0x80044403, &(0x7f00000001c0)={0x0, 0x7, 0x0}) (async) select(0x40, &(0x7f00000000c0)={0x2ae, 0x5, 0x7fffffffffffffff, 0x2, 0x6, 0xffffffffffffffff, 0xbf50, 0xa}, &(0x7f0000000240)={0x1, 0x97, 0x6, 0x6, 0x1, 0x2, 0x2000000000000, 0x1}, &(0x7f00000002c0)={0x7, 0x1, 0x8ec8, 0x8, 0x8, 0xfffffffffffffffc, 0x1, 0x8000000000000001}, &(0x7f0000000300)={0x10, 0x65e}) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) socket(0x18, 0xc003, 0x2) (async) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x205b9a) 1.94621471s ago: executing program 0 (id=252): clock_settime(0x100000000000000, &(0x7f0000000000)={0xfe1ecc7f}) openat$bpf(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = open(&(0x7f0000000040)='./file0\x00', 0x20, 0x25) ioctl$BIOCGRTIMEOUT(r0, 0x4010426e, &(0x7f0000000080)) ioctl$TIOCFLUSH(r0, 0x80047476, &(0x7f0000000000)=0x8) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) 1.94557474s ago: executing program 2 (id=253): mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r0 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x2000000000000131, &(0x7f0000000040)}) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x8018, 0x2000007, 0x101, 0x80000001, 0x81ac, 0x5, 0x10, [{0x0, 0x9, 0x0, 0x71002}, {0x2, 0xfff, 0x8, 0xfffffff7}, {0x100, 0xf86, 0x0, 0x8}, {0x1, 0x800, 0x8007, 0x3}, {0xa, 0x200727, 0x7, 0x7}, {0x1, 0x650, 0x80000000, 0x5}, {0xce1, 0xffffffff, 0x1, 0x6d}, {0xfff, 0x7ff, 0x14, 0xc}, {0x2, 0x200082, 0x8000005, 0x5}, {0x6a76, 0x8003, 0x8001, 0x4}, {0x11, 0x10001, 0xe, 0x3}, {0x8, 0x9, 0x8, 0x8000002}, {0xb8c, 0x555981a7, 0x3, 0x6}, {0x29a71717, 0xfffffffa, 0xffffffff, 0x6}, {0xd, 0x2000005, 0x5, 0x10000000}, {0x0, 0x1, 0x1002, 0x30004}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x8018, 0x2000007, 0x101, 0x80000001, 0x81ac, 0x10001, 0x10, [{0x400, 0x9, 0x0, 0x71002}, {0x1000002, 0xfff, 0x8, 0xfffffff7}, {0x100, 0xf86, 0x0, 0x8}, {0x1, 0x800, 0x8007, 0x7}, {0x401, 0x200727, 0x7, 0x7}, {0x1, 0x650, 0x3, 0x7}, {0xce1, 0xffffffff, 0xe60, 0x6d}, {0xfff, 0x7ff, 0x14, 0x8}, {0x2, 0x200082, 0x8000005, 0x5}, {0x6a76, 0x8001, 0xa94, 0x4}, {0x1cc, 0x10001, 0x0, 0x3}, {0x8, 0x2009, 0x8, 0x8000002}, {0xb8c, 0x555981a9, 0x8, 0x2}, {0x5126f850, 0xfffffffa, 0xffffffff, 0x6}, {0xa, 0x2000005, 0x2, 0x10000000}, {0x0, 0x1, 0x1002, 0x30004}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x611, 0x180) ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x0, 0x0, {[0xff, 0x1, 0x2, 0x1, 0xfffffffffffffffa, 0x0, 0xdf5e, 0x0, 0x0, 0x2f01, 0x0, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0xa4, 0x8, 0xce5], [0xfffffffffffffffc, 0x80000001, 0xfffffffffffffffb, 0xffffffff, 0x100, 0x7b99, 0x200, 0x3, 0x1], [0x100000001, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x11000, 0xfffffffffffffffa], [0x100, 0x20000000000, 0x401, 0x100000000, 0xffffffffffeffffe, 0x5], [{0x0, 0x7, 0x0, 0x5}, {0xfffc, 0x2, 0xc9, 0x2}, {0x0, 0x0, 0xfffffffe, 0xb2}, {0x2, 0x5, 0x6, 0x3e}, {0x10, 0x2, 0x0, 0x80b}, {0xb, 0x2003, 0x40000, 0x2000000000000000}, {0xfffc, 0x3, 0x0, 0x7}, {0x0, 0x965, 0x8, 0x8}], {0x2000, 0x1000001, 0x2}, {0x0, 0x0, 0x73e8, 0x1}}}) r3 = kqueue() ioctl$TIOCSETD(r2, 0x8004741b, &(0x7f0000000000)=0x67) kevent(r3, &(0x7f0000000040), 0x30, 0x0, 0x57d, 0x0) select(0x40, &(0x7f0000000180)={0xfffffffffffffffd, 0x44809e9d, 0xffffffffffffffff, 0x1, 0x2000000000000000, 0x400000000000181c, 0x2, 0x6}, 0x0, 0x0, 0x0) unveil(&(0x7f0000000080)='./file0\x00', &(0x7f0000000340)='c\x00') r4 = kqueue() dup2(r4, r1) 1.945265609s ago: executing program 3 (id=254): ioctl$WSMUXIO_REMOVE_DEVICE(0xffffffffffffffff, 0x80085762, &(0x7f0000000040)={0x1}) r0 = socket(0x18, 0x3, 0x3a) setsockopt(r0, 0x29, 0x6c, &(0x7f0000000040), 0x4) close(r0) (async) r1 = socket(0x18, 0x3, 0x1) (async) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) (async) r2 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r2, 0xc0106924, &(0x7f00000000c0)) (async) r3 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000000), 0xedab7ed67baad90f, 0x0) ioctl$WSDISPLAYIO_USEFONT(r3, 0x80585750, &(0x7f0000000040)={'./file0\x00', 0x1, 0x1, 0x6, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6}) (async) ioctl$FIONREAD(r1, 0x80206997, &(0x7f0000000100)) 1.941338158s ago: executing program 4 (id=255): mknod(&(0x7f0000000400)='./file0\x00', 0x2000, 0x287e) r0 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) close(r0) open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x186) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0xf02, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x3, 0x2812, r1, 0x0) ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x0, 0x0, {[0xff, 0x1, 0x2, 0x19, 0xfffffffffffffffa, 0x0, 0xdf5e, 0x5, 0x0, 0x2f01, 0x1, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0xa4, 0x2, 0xce5], [0xfffffffffffffffc, 0x80000001, 0xffffffffffffffff, 0xffffffff, 0x100, 0x7b99, 0x200, 0x3, 0x1], [0x100000001, 0xffffffffffffff4e, 0x4, 0x7, 0xffffffffffffffff, 0x11000, 0xfffffffffffffffa], [0x100, 0x20000000000, 0x401, 0x100000000, 0xffffffffffeffffe, 0x5], [{0x0, 0x7, 0x0, 0x5}, {0x7ffd, 0x2, 0xc9, 0x2}, {0x0, 0x0, 0xffdffffe, 0xfffffffffffffffd}, {0x2, 0x5, 0x6, 0x3e}, {0x10, 0x20000002, 0x0, 0x80b}, {0xb, 0x2003, 0x40000, 0x2000000000000000}, {0xfffc, 0x0, 0x0, 0x5}, {0x0, 0x965, 0x8, 0x8}], {0x2000, 0x1000001, 0x2}, {0x0, 0x200000, 0x73e8, 0x1}}}) r2 = openat$vnd(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$VNDIOCSET(r2, 0xc0384600, &(0x7f0000000300)={&(0x7f00000000c0)='./bus\x00', 0x4, 0x0, 0x5e}) r3 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) sysctl$hw(&(0x7f0000000380)={0x6, 0x6}, 0x2, &(0x7f00000003c0)="1b4c0ac6", &(0x7f0000000400)=0x4, &(0x7f0000000740), 0x0) setuid(0xffffffffffffffff) shmctl$IPC_RMID(r3, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x80000000000206, 0x0) r4 = syz_open_pts() syz_open_pts() r5 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x611, 0x180) r6 = openat(r1, &(0x7f0000000040)='./file0\x00', 0x8, 0x40) r7 = kqueue() r8 = dup2(r7, r5) setsockopt$inet6_MRT6_ADD_MFC(r8, 0x29, 0x68, &(0x7f0000000380)={{0x18, 0x0, 0xff, 0x4}, {0x18, 0x2, 0xe, 0xb2d8}, 0x2, [0xf, 0x2, 0x9, 0x7, 0x1, 0x3, 0x6, 0x3]}, 0x3c) r9 = syz_open_pts() recvfrom$inet(r6, &(0x7f0000000440)=""/245, 0xf5, 0x1, &(0x7f0000000340)={0x2, 0x2}, 0xc) r10 = dup2(r4, r9) fsync(r10) open(&(0x7f0000000080)='./file0\x00', 0x2, 0x110) 1.941016974s ago: executing program 5 (id=256): sysctl$net_inet6_ip6(&(0x7f0000000040)={0x4, 0x18, 0x29, 0x2b}, 0x4, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) sysctl$net_inet6_ip6(&(0x7f0000000040)={0x4, 0x18, 0x29, 0x34}, 0x4, &(0x7f0000000140), 0x0, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000080350001080006", @ANYBLOB="597847d3b771303807a2699374dfc0f8949fe37a99f33a51fad34ec1e40b60527b4a4769ef11d264c53b634305c1b4db5fd0b929dc336aa3a80d12cdd627cadf41af3e2a24e2dc2be7f515e33e3b2ee5089e4ccba8d37e8747794185f5d8372eaf18e00935ddb25332ac017f5d401fc4fd777bb57eb73822cc112dc0dbbd27c30181"]) 1.533234463s ago: executing program 0 (id=257): sysctl$kern(&(0x7f0000000040)={0x1, 0x50}, 0x2, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x2, 0x1, 0x0) syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000445000/0x1000)=nil, 0x1000, 0x1) connect$unix(r0, &(0x7f0000000000), 0x10) shmctl$IPC_RMID(0x0, 0x0) close(r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$vm_swapencrypt(&(0x7f0000000040)={0x2, 0x5, 0x2}, 0x3, 0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x200, 0x0) r1 = socket(0x18, 0x1, 0x0) fchflags(r1, 0x0) r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) r3 = kqueue() kevent(r2, &(0x7f0000000080)=[{{r2}, 0xfffffffffffffffb, 0x45, 0x4, 0xc, 0xc}], 0x1005, 0x0, 0x37, 0x0) acct(&(0x7f0000000100)='./file0\x00') getuid() socketpair(0x18, 0x1, 0x2e, &(0x7f0000000380)) sendmsg$unix(r0, &(0x7f00000007c0)={&(0x7f0000000140)=@file={0x0, './file0\x00'}, 0xa, &(0x7f00000002c0)=[{&(0x7f0000000800)="af0466de2ec5ca89e0715432a298e44a780dc4b24aa5b12a7f9efdc850522060841a7c3818c3d21c59bba58036fa2c83f1d76f9ec91a99aa7844c371d63cd2ffa576cae2e4aedc37816d502f553f0145e61fc488e8d1a008ccfae57d0c3bd430f5b0f82ca61913d5cbe442f8c4e5822bd896026b5fe2849f534f216adb8d6a3d78b692", 0x83}, {&(0x7f0000000400)="eabdec4fc027991eb91951c2e8caec3c4fa7c113427850aaf10d262d7785b87e6f7113d3c4a1a9dbb225e6137e8af8e007d6aa2ab3996e2aaa35d7fc196e9bae44dc494a0fdcb5fcb96e3f8f07127679304ce8a9e6586d075643ae24538618bdf82311e0ffdda6bd54a60553941a585ebbbf2570bea373290d19b4bb5542e9c1be", 0x81}, {&(0x7f00000004c0)="43d5f1dd9bc5a5b92fb400832ff7a6f05469886dacd6521518cd9c78d3cce5bf40786be24d6f297ebfaa74257e42b50014266cdd439bf87b4c707b3e6b8f08ac680001870a2c944daabd56ea41b2c004ed604da3ca9b5a06202efd731c91ea85066e208a1b1add82cce55d35ef", 0x6d}, {&(0x7f0000000200)="9fe5944b1fc7d19b6fc00a2a87e909139ebe136980e5197e0e25171684", 0x1d}, {&(0x7f0000000a40)="55a54359f0c7a64d39a76cb1684ae818676a78c4fc6fa86bccb29b1a1ba19f47d281107dcbc558b489e03fdac2f8d613fba0c5b329490055b74b64ec4cdc47fbae0d83da88993372ad98ae394a1d5e353df9c6f3f80efd863d76ab1edcfe13cf72e5cdfc997a2510927e3cf29fade913a7416f960565395ff94ff0d449b6b2dad0dbc7a2faa88f015b401a99a26c63a14734292dc9cd2c4666430907cd1e4c955af3e731403b171ebccd1c2b8196ad9c7a0c5e9297638f5f4da0225c59bc7e485c4f459106aa0f6ab1a898b03d24e8193040d6bbffe96f379ac49954ca6d632fc8667462d685c6b4f61029f1f78f17d0b49178aac4787c9fb7d166cb3bfd3662259741341dfdd728178487155fe9aa028ac4491d4cf0fac597cf7a4b356938464b603b6944ea20aab131791e3c7a1bbc8619ad2b7eb91ea273bd4c907394a27e54674f0a97bfaa2f31d125f6af6b145dc7cfe255b0bb669da57bbc1cdd878937371c5fe2ee1dade17e0ae9f6b0", 0x16d}, {&(0x7f00000005c0)="90af621c55492ea9de7dad16c30f8cd3ef8988d559b7224646a24ad54cacd912c2936fdfe82b5ec9f63f65947400ea1a7c2ada9d6d3655930d6e4e43372c1cfa1e417e0ffd65b4e02f6262c427d3a41f91cd12412731fe5b4926624e0b5811f2fcbbf49a083c9f3cbedaf2ab6274f8196e0c5352d0b8cbecc12263f6b09a4b36d71cb924e8d837208f4a0c5372ce1ad516417a985dfcb35da566087185fa946aba0c47f10b84addfc073bbad31233058c7f4b76a4e7444aa190b27536e638e2f6ef9e7578e87338b0a1d1b0dcebfb4f520fb655afb8136581090a3f0728752c364d79212c36618a8a3", 0xe9}], 0x6, &(0x7f0000000800)=ANY=[], 0x48, 0x8}, 0x0) acct(0x0) openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f00000000c0), 0x10, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) fcntl$lock(r4, 0x9, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x20001fffffffd}) openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) fcntl$lock(r1, 0x9, &(0x7f0000000180)={0x1, 0x1, 0x3, 0x3, 0xffffffffffffffff}) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) fcntl$lock(r5, 0x8, &(0x7f00000003c0)={0x0, 0x1, 0x40, 0x200000001}) kevent(r3, 0x0, 0x0, 0x0, 0x2, 0x0) 1.53063214s ago: executing program 1 (id=258): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0xe8, 0x0) r1 = fcntl$dupfd(r0, 0x3, 0xffffffffffffffff) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x10, 0x0) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) read(r2, &(0x7f0000000140)=""/45, 0x2d) ioctl$FIONREAD(r1, 0x8020690c, &(0x7f0000000240)) openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x7e1b21b5f00cb051, 0x0) 1.530126829s ago: executing program 2 (id=259): r0 = socket(0x11, 0x3, 0x0) nanosleep(&(0x7f0000000300)={0x81, 0x8000000000000001}, 0x0) (async) sendto$unix(r0, &(0x7f00000000c0)="b10005010000009f18003f0107000000211c13fecea79c5dfaf66e8d030100000000000000ef3044d2d236acf20bf404be01000000f7c8cf5f8823297be1aa0504000051e2f0ad3ebbc25769a51f139b672f335c22db830c032bfa896443c32118210000720fd38bfb0000fd54c125191b1257aea8c500001602fbfe0c2300008abf090000000008e37193f8343712050500b71d8000090005080000fca65361ba84913f01000008000000000000000000", 0xb1, 0x408, 0x0, 0x0) 1.528598433s ago: executing program 3 (id=260): r0 = socket(0x1, 0x2, 0x0) ioctl$BIOCSETIF(0xffffffffffffff9c, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = dup(r1) fchmod(r2, 0x15d) ioctl$FIONREAD(r0, 0xc0286988, &(0x7f00000001c0)) r3 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) writev(r3, &(0x7f0000000080)=[{&(0x7f0000000440)="f5f13eac89c494969e5be0215480716522b44882b80d8c61ba7805e07454d8cbc153ecdb1edc74fd9cfbae1e867128c486e7597ad4a4de614f0ad6e47646676d5d553d00e0b16d9ea874083e61801b0de924f70166cd0d04d44c47e341f6a145ea9b184f094b5e835bb822326e7fe07233682fe9296fb29eeefe46de4f7e2eac", 0x80}], 0x1) mknod(0x0, 0x2000, 0x40000802) execve(0x0, 0x0, 0x0) open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fcntl$lock(r4, 0x9, &(0x7f0000000040)={0x3, 0x1, 0x10000, 0x100000004}) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x6f8, 0x0) syz_open_pts() rename(&(0x7f0000000980)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r5 = openat$bpf(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$BIOCSETIF(r5, 0x8020426c, 0x0) ioctl$BIOCGDLTLIST(r5, 0xc010427b, 0x0) kevent(0xffffffffffffffff, 0x0, 0x7, 0x0, 0x3, &(0x7f0000000ac0)={0x2}) select(0x40, &(0x7f0000000040)={0x4, 0xffff, 0x8, 0x7, 0x4, 0x4, 0xfffffffffffffffa, 0x3}, 0x0, 0x0, 0x0) r6 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x5900) r7 = open(&(0x7f0000000000)='./file0\x00', 0x8, 0x9bf2d3725864749b) ioctl$BIOCSETIF(r7, 0x80084904, &(0x7f0000000380)={'tap', 0x0}) ioctl$BIOCSETIF(r7, 0x40384900, 0x0) ioctl$WSDISPLAYIO_GETEMULTYPE(r7, 0x80184902, &(0x7f00000000c0)={0x3, '.\x00'}) ioctl$TIOCSETA(r6, 0xcd50441a, &(0x7f0000000040)={0x3, 0x2, 0x200, 0x2f, "1800010000fffbffffffffffff6362fd4c00", 0x3, 0x7}) 1.515492604s ago: executing program 4 (id=261): r0 = open(&(0x7f00000000c0)='./file0\x00', 0x10000, 0x17) ftruncate(r0, 0xb04e) ktrace(&(0x7f0000000200)='./file0\x00', 0x1, 0xd27d43220c7df9f, 0x0) mknod(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x6000, 0x1) rename(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') unlink(&(0x7f0000000a80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) mknod(&(0x7f0000000140)='./file0/file0\x00', 0x3023, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0/file0\x00', 0x400, 0x4) renameat(r1, &(0x7f0000000000)='./file0\x00', r2, &(0x7f0000000100)='./file0\x00') mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x10, r1, 0x0) r3 = kqueue() kevent(r3, &(0x7f0000000100), 0xe4a, 0x0, 0x4000a9fa, 0x0) 1.302788341s ago: executing program 5 (id=262): r0 = socket(0x20, 0x8004, 0x74) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TIOCSETA(r1, 0x20004455, 0x0) getsockopt$sock_linger(r0, 0xffff, 0x1021, 0x0, 0x0) 1.300836092s ago: executing program 2 (id=263): kevent(0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000980)=[{{}, 0xfffffffffffffffd, 0x3, 0x80000060, 0x4, 0x4}, {{}, 0xfffffffffffffffa, 0x32, 0x1, 0x7fffffff, 0x7fffffffffffffff}, {{}, 0xfffffffffffffff8, 0x4, 0x40, 0x0, 0x4}, {{}, 0xfffffffffffffffc, 0x41, 0x40000000, 0x47ef, 0x616}, {{}, 0xfffffffffffffffa, 0x2a, 0x1, 0x80, 0x76cc}, {{}, 0xfffffffffffffffb, 0x2, 0x20, 0x6, 0xf}], 0x3, 0x0) select(0x40, &(0x7f0000000040)={0x4, 0xffff, 0x8, 0x7, 0x4, 0x4, 0xfffffffffffffffa, 0x200000000003}, 0x0, 0x0, &(0x7f0000000240)={0x8000000000000001, 0xffffffffffffffff}) (async) r0 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) ioctl$TIOCSETA(r0, 0xcd50441a, &(0x7f0000000040)={0x3, 0x2, 0x200, 0x2f, "1800010000fffbffffffffffff6362fd4c00", 0x3, 0x7}) 1.022566991s ago: executing program 1 (id=264): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = geteuid() setsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f0000000000)={0x0, r2}, 0xc) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0xe9, 0x0, 0x0, 0x0, 0x0, 0x1a2, 0x4008}, 0x0, 0x2, 0x0, 0x0, 0x1ff, 0x604000040000, 0x6}) sysctl$net_inet6_icmp6(&(0x7f00000000c0)={0x4, 0x18, 0x3a, 0xb}, 0x4, 0x0, 0x0, 0x0, 0x0) (async) sysctl$net_inet6_icmp6(&(0x7f00000000c0)={0x4, 0x18, 0x3a, 0xb}, 0x4, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) socket(0x800000018, 0x2, 0x0) (async) r3 = socket(0x800000018, 0x2, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff080048d7001e0068000704899078ac1400bb0000000001070b05e070230c36f516787a48babab3000002000000004e204e2300089078"]) getsockopt$sock_cred(r3, 0xffff, 0x1022, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0xc) fchown(r0, r2, r4) (async) fchown(r0, r2, r4) syz_emit_ethernet(0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffff000000"]) (async) syz_emit_ethernet(0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffff000000"]) setsockopt$sock_int(r3, 0xffff, 0x1000, &(0x7f0000000240)=0x6, 0x4) bind$unix(r3, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) (async) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) socket(0x800000018, 0x2, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440), 0x200, 0x0) openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) r5 = openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) open$dir(&(0x7f00000002c0)='./bus\x00', 0x800, 0x104) (async) r6 = open$dir(&(0x7f00000002c0)='./bus\x00', 0x800, 0x104) kevent(r5, &(0x7f0000000380)=[{{r1}, 0xfffffffffffffff9, 0x0, 0x4}, {{r6}, 0x0, 0x8, 0x1, 0x5, 0x89d}], 0x5, &(0x7f00000003c0)=[{{r3}, 0xfffffffffffffff8, 0x0, 0xf0000000, 0x5, 0x6}], 0x27a768fd, &(0x7f0000000400)={0x8, 0x4}) open(&(0x7f00000000c0)='./file0\x00', 0x205, 0x0) r7 = getpid() fcntl$lock(0xffffffffffffffff, 0x8, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x100000401}) setgroups(0x0, 0x0) (async) setgroups(0x0, 0x0) ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x510, r7) (async) ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x510, r7) setrlimit(0x1, &(0x7f0000000180)={0x200, 0x95f}) setgid(0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r8, &(0x7f0000000000)={0x0, 0x2}, 0x10, 0xe) 979.898656ms ago: executing program 2 (id=265): link(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') (async) mquery(&(0x7f0000ff4000/0x1000)=nil, 0x7f7fffffc000, 0x0, 0xfe, 0xffffffffffffffff, 0x0) 739.737952ms ago: executing program 1 (id=266): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb5219f1000b913f1, 0x0) pwrite(r0, 0x0, 0x0, 0x40007) r1 = openat$speaker(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) writev(r1, &(0x7f0000000680)=[{&(0x7f0000000140)="e068dae947cced20ea99814fdaac2ca17ab3301bc2c3907d169e393fb475b34729eb42454aec4d7fdd37a7739dc2f4cd8d040653faa889039a9ab9323051ed31c38ed7f3e48d088abdb09b45c7f26e33e47315282edb16798d8a22227a4f3cc7808754058caadd6186cb466f10683a132ac2e7c07a814e398cbc3acc0e8a9030d0163b7128131df953425dc92a7c474aaeb4336dfa43905508efb320cb662bda", 0xa0}], 0x1) r2 = socket(0x1, 0x2, 0x0) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') ioctl$FIONREAD(r2, 0xc028698d, &(0x7f00000001c0)) unveil(0x0, &(0x7f0000000080)='c\x00') 489.88662ms ago: executing program 2 (id=267): mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0xd02) (async) ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f0000000040)={0x7ff, 0x19, 0xffff, 0x200499, "084880fa87f4ffbcda0988d11554e90d6602ff07", 0xe6, 0x3}) (async) r0 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) ioctl$VNDIOCSET(r0, 0xc0785101, &(0x7f0000000040)={0x0, 0x0, 0x0}) (async) sysctl$net_inet_ip(&(0x7f0000003a40)={0x4, 0x2, 0x0, 0x14}, 0x4, 0x0, 0x0, &(0x7f0000003b00)="2018b958", 0x4) (async) sysctl$kern(&(0x7f0000000040)={0x1, 0xdc1d800780e51763}, 0x3, &(0x7f00000000c0)="3bf2ee74e747c82dad6eb2a36fa755e1a3925fe49afca7e63b52fa65ccaa74d6e6b85b6cdced70357ef201f97842b1068dca31553fa2d7031f38c03e56ad0e24dfc4f97b8b7f81499647e6e7725765d61436c85e43c15d12a78cb8c57ddde87021d7b685507fd3e0652f35e45bdaa3afd86c4fe557433e4c2b632de71c951516adff26aa2e48b45f8ce92bcefd3eceefabee7e3ebe806fdb4f6af569ae94b5d127", &(0x7f0000000080)=0xffffffffffffff7f, &(0x7f0000001c00)="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", 0x4a) 72.678084ms ago: executing program 0 (id=268): open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000000300)={0x0, 0x1}, 0x10, 0x0, 0x0) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000080)="76e5eac907f9ccf7a251ceddcec7d6aa45cffe2c63a56077123a276d3ba4e9d17eb3eb5db12a3783a8e0620d357de1fe04fa9465b5bd1286e9624dec06a00c222f", 0x41}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) unveil(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='W\x00') mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = socket$inet(0x1e, 0x3, 0x0) getpeername(r1, 0x0, &(0x7f0000000040)) openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x200, 0x0) r2 = socket(0x11, 0x3, 0x0) recvfrom(r2, &(0x7f0000000000)=""/123, 0x7b, 0x0, 0x0, 0x0) recvfrom$unix(r2, &(0x7f0000000080)=""/4096, 0x1000, 0x842, 0x0, 0x0) 0s ago: executing program 1 (id=269): mkdir(&(0x7f0000000300)='./file0\x00', 0x0) lchown(&(0x7f0000000280)='./file0/../file0\x00', 0xffffffffffffffff, 0x0) sysctl$kern(0x0, 0x0, &(0x7f0000000100)="71f91e34", &(0x7f0000000080)=0x4, 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x10004) ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000040)={0x0, 0x0, 0xb, 0x0, "0109ffffcf000000000000bc1f557200", 0x9}) sysctl$kern(&(0x7f0000000040)={0x1, 0x3e}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x57, 0x0, 0x0, 0x0, 0x0, 0x21, 0xa2f}, 0x8000000200000a, 0xfffffffffffffffb, 0xffffffffffffffff, 0x0, 0x2, 0x400000000009, 0x5, 0x8000000000000001}) open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7864) acct(0x0) acct(&(0x7f0000000080)='./file0\x00') sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0x37) sysctl$kern(&(0x7f0000000040)={0x1, 0x18}, 0x2, &(0x7f00000000c0)="3bf2ee74e747c82dad6eb2a36fa755e1a3925fe49afca7e63b52fa65ccaa74d6e6b85b6cdced70357ef201f97842b1068dca31553fa2d7031f38c03e56ad0e24dfc4f97b8b7f81499647e6e7725765d61436c85e43c15d12a78cb8c57ddde87021d7b685507fd3e0652f35e45bdaa3afd86c4fe557433e4c2b632de71c951516adff26aa2e48b45f8ce92bcefd3eceefabee7e3ebe806fdb4f6af569ae94b5d127", &(0x7f0000000080)=0xa1, &(0x7f0000001c00)="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", 0x1c6) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.84' (ED25519) to the list of known hosts. pckbd_enable: command error sd0(vioscsi0:1:0): Check Condition (error 0x70) on opcode 0x1e SENSE KEY: Illegal Request ASC/ASCQ: Invalid Command Operation Code load: 0.20 cmd: getty 66969 [ttyin] 0.00u 0.00s 0% 340k load: 0.20 cmd: getty 66969 [ttyin] 0.00u 0.00s 0% 340k pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error ifconfig: tap6: SIOCIFDESTROY: Device not configured ifconfig: socket: No buffer space available SYZFAIL: command failed command=PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin ifconfig tap6 lladdr aa:aa:aa:aa:aa:aa: 256 (errno 1: Operation not permitted) ifconfig: socket: No buffer space available ifconfig: socket: No buffer space available SYZFAIL: command failed command=PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin ifconfig tap6 lladdr aa:aa:aa:aa:aa:aa: 256 (errno 1: Operation not permitted) ifconfig: socket: No buffer space available ifconfig: socket: No buffer space available SYZFAIL: command failed command=PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin ifconfig tap6 lladdr aa:aa:aa:aa:aa:aa: 256 (errno 1: Operation not permitted) ifconfig: socket: No buffer space available ifconfig: socket: No buffer space available SYZFAIL: command failed command=PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin ifconfig tap6 lladdr aa:aa:aa:aa:aa:aa: 256 (errno 1: Operation not permitted) ifconfig: socket: No buffer space available ifconfig: socket: No buffer space available SYZFAIL: command failed command=PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin ifconfig tap6 lladdr aa:aa:aa:aa:aa:aa: 256 (errno 1: Operation not permitted) ifconfig: socket: No buffer space available ifconfig: socket: No buffer space available SYZFAIL: command failed command=PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin ifconfig tap6 lladdr aa:aa:aa:aa:aa:aa: 256 (errno 1: Operation not permitted) ifconfig: socket: No buffer space available ifconfig: socket: No buffer space available SYZFAIL: command failed command=PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin ifconfig tap6 lladdr aa:aa:aa:aa:aa:aa: 256 (errno 1: Operation not permitted) ifconfig: socket: No buffer space available ifconfig: socket: No buffer space available SYZFAIL: command failed command=PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin ifconfig tap6 lladdr aa:aa:aa:aa:aa:aa: 256 (errno 1: Operation not permitted) ifconfig: socket: No buffer space available ifconfig: socket: No buffer space available SYZFAIL: command failed command=PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin ifconfig tap6 lladdr aa:aa:aa:aa:aa:aa: 256 (errno 1: Operation not permitted) ifconfig: socket: No buffer space available ifconfig: socket: No buffer space available SYZFAIL: command failed command=PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin ifconfig tap6 lladdr aa:aa:aa:aa:aa:aa: 256 (errno 1: Operation not permitted) ifconfig: socket: No buffer space available ifconfig: socket: No buffer space available SYZFAIL: command failed command=PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin ifconfig tap6 lladdr aa:aa:aa:aa:aa:aa: 256 (errno 1: Operation not permitted) ifconfig: socket: No buffer space available ifconfig: socket: No buffer space available SYZFAIL: command failed command=PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin ifconfig tap6 lladdr aa:aa:aa:aa:aa:aa: 256 (errno 1: Operation not permitted) ifconfig: socket: No buffer space available ifconfig: socket: No buffer space available SYZFAIL: command failed command=PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin ifconfig tap6 lladdr aa:aa:aa:aa:aa:aa: 256 (errno 1: Operation not permitted) ifconfig: socket: No buffer space available ifconfig: socket: No buffer space available SYZFAIL: command failed command=PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin ifconfig tap6 lladdr aa:aa:aa:aa:aa:aa: 256 (errno 1: Operation not permitted) ifconfig: socket: No buffer space available ifconfig: socket: No buffer space available SYZFAIL: command failed command=PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin ifconfig tap6 lladdr aa:aa:aa:aa:aa:aa: 256 (errno 1: Operation not permitted) ifconfig: socket: No buffer space available ifconfig: socket: No buffer space available SYZFAIL: command failed command=PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin ifconfig tap6 lladdr aa:aa:aa:aa:aa:aa: 256 (errno 1: Operation not permitted) ifconfig: socket: No buffer space available ifconfig: socket: No buffer space available SYZFAIL: command failed command=PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin ifconfig tap6 lladdr aa:aa:aa:aa:aa:aa: 256 (errno 1: Operation not permitted) ifconfig: socket: No buffer space available ifconfig: socket: No buffer space available SYZFAIL: command failed command=PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin ifconfig tap6 lladdr aa:aa:aa:aa:aa:aa: 256 (errno 1: Operation not permitted) ifconfig: socket: No buffer space available ifconfig: socket: No buffer space available SYZFAIL: command failed command=PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin ifconfig tap6 lladdr aa:aa:aa:aa:aa:aa: 256 (errno 1: Operation not permitted) ifconfig: socket: No buffer space available ifconfig: socket: No buffer space available SYZFAIL: command failed command=PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin ifconfig tap6 lladdr aa:aa:aa:aa:aa:aa: 256 (errno 1: Operation not permitted) ifconfig: socket: No buffer space available ifconfig: socket: No buffer space available SYZFAIL: command failed command=PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin ifconfig tap6 lladdr aa:aa:aa:aa:aa:aa: 256 (errno 1: Operation not permitted) SYZFAIL: repeatedly failed to execute the program proc=6 req=7 state=1 status=67 (errno 4: Interrupted system call) OpenBSD/amd64 (Amnesiac) (tty00) login: uvn_flush: obj=0xfffffd80703cacf0, offset=0x3ff000. error during pageout. uvn_flush: WARNING: changes to page may be lost! set $lines = 0 Password: Login incorrect login: show panic Password: Login incorrect login: show registers Password: Login incorrect login: ps Password: Login incorrect show malloc login: Password: L