last executing test programs: 2.712861742s ago: executing program 1 (id=506): sysctl$hw(&(0x7f0000001d40)={0x6, 0x5}, 0x2, &(0x7f0000001d80)="e2bbe4b5", &(0x7f0000001e00)=0x4, &(0x7f0000001e40), 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x21, &(0x7f0000000240), 0x0) r1 = socket(0x18, 0x3, 0x4) getsid(0xffffffffffffffff) pipe2(&(0x7f0000000000), 0x10000) mknod(&(0x7f0000000000)='./bus\x00', 0x2000, 0x0) r2 = open(&(0x7f0000000280)='./bus\x00', 0x8, 0x67) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$TIOCSETAF(r2, 0x802c7416, &(0x7f0000000040)={0x3, 0x6, 0x5, 0xfffffffc, "00f8ffff0ebc95c72410b62c00800000000300", 0xc79a}) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sysctl$net_inet_ip(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) closefrom(r1) madvise(&(0x7f0000585000/0x4000)=nil, 0x4000, 0x3) sysctl$kern(&(0x7f0000000000)={0x1, 0x4d}, 0x2, &(0x7f0000000180)="5f2a1ff1", &(0x7f00000000c0)=0x4, &(0x7f0000001180), 0x4) mlock(&(0x7f0000585000/0x4000)=nil, 0x4000) 2.64755223s ago: executing program 1 (id=515): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = socket(0x18, 0x4001, 0x0) setsockopt(r1, 0x1000000000029, 0x1b, &(0x7f00000001c0), 0x0) (async) setsockopt(r1, 0x1000000000029, 0x1b, &(0x7f00000001c0), 0x0) ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x6, 0x9, {[0xfffffbfffffffffb, 0x80000001, 0x2, 0x100200000, 0x6, 0x7, 0xdf60, 0xffffffffffffffff, 0x5, 0x8, 0x93, 0xfffffffffffffff8, 0xffffffffffffffff, 0x200000000002, 0x1dc, 0x4, 0xfffffffffffffffe, 0x400000000100], [0xfffffffffffffffe, 0x80000001, 0xfffffffffffffffa, 0x20200001, 0x5e, 0x100000000007b98, 0x5, 0x9, 0x8, 0xfffffffffffff7fe], [0x100000001, 0x8000, 0x40000003, 0x0, 0xb, 0x11000, 0xffffffff00000000], [0x5, 0x1, 0x80000001, 0x4000000, 0x2, 0x90000000], [{0x0, 0x0, 0x0, 0x7d06}, {0x9, 0x22, 0x4008}, {0x4, 0x0, 0xfffefffe, 0x280}, {0x3, 0x4, 0x5, 0xffffffffffffffff}, {0x0, 0x2, 0x7f, 0x8}, {0x0, 0x9, 0x9, 0x2000000000000000}, {0x9, 0x0, 0xfffffff7, 0xb}, {0xe, 0x2, 0x1, 0xc}], {0x1, 0x8, 0x80000006, 0x3}, {0xfffe, 0x1, 0x6d5, 0x8000000000006}}}) kqueue() (async) r2 = kqueue() r3 = socket$inet(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000000)={0x10, 0x2, 0x3}, 0x10) listen(r3, 0x7fff) r4 = socket(0x18, 0x3, 0x0) sendmmsg(r4, &(0x7f0000000200)={{&(0x7f00000000c0)=@in6={0x1c, 0x18, 0x3, 0x7, "ff010000000000000000000000000001", 0x6}, 0x1c, 0x0, 0x0, 0x0}}, 0x38, 0x8) (async) sendmmsg(r4, &(0x7f0000000200)={{&(0x7f00000000c0)=@in6={0x1c, 0x18, 0x3, 0x7, "ff010000000000000000000000000001", 0x6}, 0x1c, 0x0, 0x0, 0x0}}, 0x38, 0x8) sysctl$net_inet_tcp(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) sysctl$net_inet_tcp(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) socket(0x18, 0x1, 0x0) (async) r5 = socket(0x18, 0x1, 0x0) close(r5) r6 = socket(0x18, 0x2, 0x0) setsockopt(r6, 0x1000000000029, 0xa, &(0x7f00000002c0)="03000000", 0x4) (async) setsockopt(r6, 0x1000000000029, 0xa, &(0x7f00000002c0)="03000000", 0x4) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x5, 0x10, 0xffffffffffffffff, 0x0) connect$unix(r5, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) (async) connect$unix(r5, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) sendmsg$unix(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$unix(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb080045f4002c0067000000069078ac1400bbac1400aa4e234e23", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="200282009078fffc08020000"]) r7 = kqueue() kevent(r7, &(0x7f00000000c0)=[{{}, 0xfffffffffffffff9, 0x8b, 0x0, 0x1000000000000000}], 0x56, 0x0, 0x7fff, 0x0) kevent(r2, &(0x7f0000000400)=[{{r5}, 0xfffffffffffffff7, 0xaf, 0x80, 0x8001, 0xfffffffffffffff9}], 0x96, &(0x7f0000000340)=[{{r0}, 0xfffffffffffffffd, 0x2b, 0xf0000000, 0x30, 0x9}, {{r0}, 0xfffffffffffffffa, 0x30, 0x4, 0x986, 0x7d}, {{}, 0xfffffffffffffff7, 0xd, 0x4, 0x5, 0x101}], 0xfffb4963, 0x0) (async) kevent(r2, &(0x7f0000000400)=[{{r5}, 0xfffffffffffffff7, 0xaf, 0x80, 0x8001, 0xfffffffffffffff9}], 0x96, &(0x7f0000000340)=[{{r0}, 0xfffffffffffffffd, 0x2b, 0xf0000000, 0x30, 0x9}, {{r0}, 0xfffffffffffffffa, 0x30, 0x4, 0x986, 0x7d}, {{}, 0xfffffffffffffff7, 0xd, 0x4, 0x5, 0x101}], 0xfffb4963, 0x0) sendsyslog(&(0x7f0000004240)="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", 0xfe1, 0x26) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) r8 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r8, 0xc0106924, &(0x7f00000001c0)) ioctl$FIONREAD(r8, 0x8020697f, &(0x7f0000000100)) openat$pf(0xffffffffffffff9c, &(0x7f00000003c0), 0x8, 0x0) 2.515553826s ago: executing program 1 (id=516): setreuid(0x0, 0xee01) recvmmsg(0xffffffffffffffff, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x0, 0x0}, 0x7}, 0x38, 0x2800, &(0x7f0000000340)={0x0, 0x216ea873}) r0 = socket(0x11, 0x3, 0x1) getsockopt(r0, 0x11, 0x3, 0x0, 0x0) r1 = semget(0x2, 0x1, 0x204) semctl$IPC_SET(r1, 0x0, 0x1, &(0x7f0000000240)={{0x0, 0x0, 0x0, 0x0, 0x189, 0x80, 0xae38, 0x0, 0x100000000000000}, 0x23d, 0x6, 0x2, 0x0, 0x7fff}) ioctl$FIONREAD(0xffffffffffffffff, 0xc0106924, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2042, 0x0) openat$pf(0xffffffffffffff9c, 0x0, 0x20000, 0x0) semctl$GETVAL(r1, 0x1, 0x5, 0x0) 2.489948766s ago: executing program 1 (id=520): r0 = socket(0x18, 0x1, 0x0) close(r0) socket(0x24, 0x2, 0x0) setsockopt(r0, 0x6, 0x42, &(0x7f00000001c0)="c11c2aea", 0x4) syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) writev(0xffffffffffffffff, &(0x7f0000000680)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) r1 = socket(0x2, 0x4001, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) connect$unix(r1, &(0x7f0000000040)=@abs={0x9, 0x1, 0x0, 0x2}, 0x8) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x0) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000300), 0x40000, 0x0) ioctl$BIOCSETF(r2, 0x80104267, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x80, 0xd0, 0x0, 0x9}, {0x16, 0x7e, 0x12, 0xfffff801}]}) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f00000002c0)={'tap', 0x0}) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f0000000000)={'tap', 0x0}) mknod(&(0x7f0000000040)='./file0\x00', 0x1000, 0x0) sysctl$vfs_nfs(&(0x7f00000000c0)={0xa, 0x2, 0x2}, 0x3, &(0x7f0000000340)="c92272ce240159f5f993f1af5f71a1192d1c55dbd543303bdb4e4b518ff8284750b422", 0x0, &(0x7f0000000480), 0x0) getrusage(0x1, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) dup2(r4, r4) r5 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) ioctl$BIOCGFILDROP(r5, 0x40044278, &(0x7f0000000140)) syz_emit_ethernet(0x32, &(0x7f0000000280)={@local, @empty, [], {@arp={0x806, @generic={0x18, 0x49ab, 0x6, 0x0, 0x4, @broadcast, "", @random="fb38bcf3afbc", "e8ecad1642d5ee9a4b5122f375b8f54f"}}}}) r6 = open(&(0x7f0000000240)='./file0\x00', 0x70e, 0x24) writev(r6, &(0x7f0000000280)=[{&(0x7f00000004c0)="03804c875e89bb5cbdebb0dd754f747515d1d09f33edc91b455b0e689833fb521acfcbc86044cc7d47561df3bcd6c5d7c5ec3b9d0d7e6313db7bb5bb460d989fb2e457d33f2593639095303f21c8d005b09cb3f05aa8b59f8fdbefc2a183f216de2e8fe74e7827a9efcf3bfc3e21c391e414a811bcefcac9bba6c5ae938c3d5a80bad83bc34bfbd74f95060f62645c17f383e1098d5a33070b2064eff1aea03cb1643b6f654c698661ce43edaceee6813030104b7e2111e7e4c4d3a0788a3c6278d5c54c45f1f6124b97ddb01a8a239c0f044048d9034f9ba8d6", 0xda}], 0x1) sendto$unix(r1, 0x0, 0x0, 0x1, 0x0, 0x0) 2.449843714s ago: executing program 1 (id=523): mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) setrlimit(0x8, &(0x7f0000000380)={0x7bff, 0x8}) r0 = syz_open_pts() syz_open_pts() (async) r1 = syz_open_pts() mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setsid() (async) setsid() ioctl$TIOCSCTTY(r1, 0x20007461) (async) ioctl$TIOCSCTTY(r1, 0x20007461) ioctl$TIOCSWINSZ(r1, 0x80087467, &(0x7f0000000340)={0x8, 0xa, 0x800, 0x5}) getrlimit(0x2, &(0x7f0000000300)) (async) getrlimit(0x2, &(0x7f0000000300)) close(r0) open(&(0x7f0000000080)='./file0\x00', 0x18289, 0x190) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f000067f000/0x1000)=nil, 0x1000, 0x6) r2 = syz_open_pts() ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f0000000040)={0x766a, 0x7ff, 0xcfe, 0xffffff01, "9cdc4580307e080000006b08fc5f81e6015fdd04", 0x7, 0x9}) ioctl$TIOCSETD(r2, 0x8004741b, &(0x7f00000000c0)=0x7) open(&(0x7f0000000080)='./file0\x00', 0x2, 0xfa) (async) r3 = open(&(0x7f0000000080)='./file0\x00', 0x2, 0xfa) ioctl$WSMOUSEIO_SCALIBCOORDS(r3, 0x81205724, &(0x7f0000000100)={0x7fc, 0x17, 0x34, 0x5, 0x3fe, 0x80010001, 0x8, 0x10, [{0x0, 0xb, 0x7, 0x9}, {0xc5f, 0x20000, 0x9}, {0x3a77, 0x5, 0x5, 0xa}, {0x80000000, 0xd, 0x107, 0x70a}, {0x401, 0xff59, 0x1002806, 0x9}, {0x20000008, 0x4, 0x4, 0xfffffffa}, {0xce1, 0x91, 0x4f5}, {0x0, 0x801, 0x7ff, 0xe}, {0x483a2561, 0x0, 0x5, 0x100000}, {0x6, 0x2001, 0xcf2, 0x52}, {0x1c2, 0x80000004}, {0x8, 0xdbe, 0x8, 0x800000a}, {0x26, 0x67, 0xc, 0x2c5}, {0xfffffffc, 0xfffffffa, 0x0, 0xd}, {0x2, 0xe, 0x6, 0xfffffffd}, {0x0, 0x101, 0x2, 0x20000b}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mknod(&(0x7f0000000200)='./file0\x00', 0x2000, 0x413dff) (async) mknod(&(0x7f0000000200)='./file0\x00', 0x2000, 0x413dff) open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) socket(0x18, 0x3, 0x29) (async) socket(0x18, 0x3, 0x29) r4 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x2) ioctl$VNDIOCSET(r4, 0xc0184406, &(0x7f00000001c0)={0x0, 0x0, 0x0}) r5 = openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000000240), 0x8000, 0x0) ioctl$FIONBIO(r5, 0x8004667e, &(0x7f00000002c0)=0x3ff) (async) ioctl$FIONBIO(r5, 0x8004667e, &(0x7f00000002c0)=0x3ff) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) open(&(0x7f00000003c0)='./file0\x00', 0x20, 0x1a8) open(&(0x7f0000000000)='./file0\x00', 0x1, 0xee) (async) open(&(0x7f0000000000)='./file0\x00', 0x1, 0xee) 2.343977972s ago: executing program 1 (id=528): syz_open_pts() syz_open_pts() r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x13, 0x0, 0x0) r1 = syz_open_pts() r2 = syz_open_pts() close(r2) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x2, 0x0, 0x1d}, 0x4, &(0x7f0000001500), &(0x7f0000000000)=0x1, 0x0, 0x20) r3 = syz_open_pts() ioctl$TIOCSETA(r3, 0x802c7414, &(0x7f0000000040)={0xfffffffe, 0x9, 0xffe79ff6, 0x7, "4b06a6bcff0300dba800000000000800", 0x0, 0xf}) ioctl$TIOCSWINSZ(r1, 0x80087467, &(0x7f0000000080)={0x401, 0x7f, 0xfffc, 0x5}) writev(r3, &(0x7f0000001200)=[{&(0x7f00000000c0)="c2f9ed657bd19344f0c0e9e71f2e1aa72d6ff31f27f68a18341d7ddd517ddca00d", 0x21}], 0x1) ppoll(&(0x7f0000000000)=[{r3, 0xa07ce4ca8ae65e4f}], 0x1, 0x0, 0x0) chmod(&(0x7f0000000040)='.\x00', 0x35e) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x44) rename(&(0x7f0000000200)='.\x00', &(0x7f0000000240)='./file0/file0\x00') ioctl$TIOCSTAT(0xffffffffffffffff, 0x20007465) r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) ioctl$TIOCGTSTAMP(r2, 0x4010745b, &(0x7f0000000180)) ioctl$BIOCSRSIG(r4, 0x80044272, &(0x7f0000000100)) writev(r2, &(0x7f0000000100)=[{0x0}], 0x1) openat$wskbd(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$BIOCGHDRCMPLT(r0, 0x40044274, &(0x7f0000000140)) r5 = socket$inet6(0x18, 0x3, 0x0) ktrace(&(0x7f00000002c0)='./file0/file0\x00', 0x1, 0x20, 0x0) getsockopt(r5, 0x29, 0x37, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000000200)={&(0x7f00000001c0)=[0x2], 0x1}) r6 = accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000240)) fchmod(r6, 0x10) 1.211714895s ago: executing program 2 (id=579): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) close(0x3) r4 = openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TIOCSETA(r4, 0x80d04466, &(0x7f0000000140)={0xc0000001, 0xa525, 0x3, 0x27490, "080020000200000058302a2f0e83050095ea0868", 0x20004115, 0x10}) poll(&(0x7f00000000c0)=[{0xffffffffffffff9c}, {r4, 0x4}, {r4, 0x40}], 0x3, 0x887e) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x8, 0x0) r6 = fcntl$dupfd(r5, 0x2, 0xffffffffffffffff) close(r6) 1.068165816s ago: executing program 6 (id=590): r0 = socket$inet(0x2, 0x8000, 0x3) setsockopt$inet_opts(r0, 0x0, 0x200000000000a, &(0x7f0000000040)='\x00', 0x1) connect$inet(r0, &(0x7f0000000080)={0x10, 0x2, 0x1, 0x10}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x8, 0x0) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000200)={'tap', 0x0}) open(&(0x7f0000000140)='./file0\x00', 0x78e, 0x130) ktrace(&(0x7f0000000000)='./file0\x00', 0x4, 0x1830, 0x0) r3 = kqueue() readv(r3, &(0x7f0000000140)=[{0x0}], 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) write(r4, &(0x7f00000002c0)="3dacaf2007efe7f2aacb103ef5614b7ee991217204933059d9fcfbc5d67adfc708ba90e85c3252b8101709dc11c37cee01b0a4070000005e0984f204ef676d7a15176cbe2584124bbc6eaeffa4739da44ab12627c0b68f4f6b2a5fa778b0241132b072462a736f1b3a5227eb254db06f148a13f278b8f1efb35410a0a7febc5571457cab4d2763c894eb64c90f92efc71616839cd5b627c5e619747c135a97a2e37ccf6b1bc0dd5d56d3cecd8029ecfb924772ed6fe4798b990c82e93aab095f25642c116a27a7babca09430204e2ee06ac8cce7404e", 0xffffff33) execve(0x0, 0x0, 0x0) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x65, 0x6, 0x7, 0x7}, {0x44, 0xf0, 0xfb, 0x80000000}, {0x6, 0x80, 0xb6, 0xfffff802}]}) sysctl$kern(0x0, 0x0, &(0x7f0000000180)="a7a6d61de4a1090992003b47915d8156c41fe591026c9e82b38988f5b063c973f06ac0153544e9331a36e74e", &(0x7f0000000000)=0x2c, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETF(r2, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0xb6, &(0x7f00000000c0)=ANY=[]) setsockopt$inet_opts(r1, 0x0, 0x0, &(0x7f0000000140)="ea00000117000000", 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r6, &(0x7f0000000040)=@file={0x97, 0x1, './file0\x00'}, 0xa) getpeername(r5, 0x0, &(0x7f00000001c0)) openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x10400, 0x0) 1.067738147s ago: executing program 4 (id=591): mknod(&(0x7f0000000480)='./file0\x00', 0x2000, 0x58cf) open(&(0x7f0000000540)='./file0\x00', 0x0, 0x0) sysctl$net_inet_tcp(&(0x7f0000000b00)={0x4, 0x2, 0x6, 0x17}, 0x4, &(0x7f0000000b40), 0x0, 0x0, 0x0) 1.057257802s ago: executing program 4 (id=593): sendmsg$unix(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="28000000ffff000001"], 0x28, 0x4}, 0x0) syz_emit_ethernet(0xe, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb5219f1000b913f1, 0x0) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x200, 0x18b) r2 = fcntl$dupfd(r1, 0x3, 0xffffffffffffff9c) write(r2, &(0x7f0000000100), 0xfffffe5d) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000040)='./file1\x00', 0x18289, 0x110) write(r3, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) ioctl$WSDISPLAYIO_SETSCREEN(r2, 0x80045756, 0x0) ioctl$WSDISPLAYIO_GETEMULTYPE(r0, 0xc014575e, &(0x7f0000000180)={0x0, './bus\x00'}) pipe(0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ktrace(0x0, 0x0, 0x1d0e, 0x0) r4 = msgget$private(0x0, 0x27a) sysctl$kern(0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)="4f1d4c6344b80ed788b6a4515248df3aa745bb992c574ab4cdf5587145812eab4a988f7fafd7a01d99776d988908cd186b51f34f8c15ffa0c685ad4116c783959eff4278384b4000384dbb1c2aaeff10b4135529a1da6fda67c67469d954be811b25ec5521559154c586eefff122009f659cd3e27e98a3241495005f102d9101d158284c0ee3250aa7c11042330de22a29", 0x91) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r5 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000412000/0x2000)=nil) shmctl$IPC_SET(r5, 0x1, &(0x7f0000000100)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x190, 0x3fd}, 0x4, 0x9, 0x0, 0x0, 0x5, 0x8, 0x9, 0x0, 0x0, 0x0, 0x1}) socket(0x11, 0x3, 0x0) r6 = socket(0x18, 0x1, 0x0) setsockopt(r6, 0x1000000029, 0xc, &(0x7f0000000040)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) setuid(0xee01) shmat(r5, &(0x7f00006fa000/0x2000)=nil, 0x3000) shmat(r5, &(0x7f000040a000/0x2000)=nil, 0x1000) msgctl$IPC_SET(r4, 0x1, &(0x7f00000002c0)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0x136, 0x1, 0x0, 0x0, 0xf}, 0x0, 0x0, 0x6, 0xb, 0x2, 0x0, 0x0, 0x100000001, 0x0, 0x5, 0x0, 0x7}) setuid(0xffffffffffffffff) msgsnd(r4, 0x0, 0x0, 0x0) 664.963719ms ago: executing program 7 (id=600): mknod(&(0x7f0000000000)='./bus\x00', 0x6000, 0x406) sysctl$net_inet_esp(&(0x7f0000000240)={0x4, 0x1e, 0x2, 0x6}, 0x4, 0x0, 0x0, 0x0, 0x11) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x9, &(0x7f0000000240)="ea00000100000000", 0xc) getsockopt(r0, 0x0, 0x9, 0x0, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) 662.645086ms ago: executing program 7 (id=601): setrlimit(0x8, &(0x7f0000000000)={0xfffffffffffffffb, 0xffffffffffffffff}) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1000, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000140)=ANY=[@ANYBLOB="64e1629b6174d08850"]) r0 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7959) ioctl$FIONREAD(r0, 0xc0106978, &(0x7f0000000140)) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) fcntl$lock(r1, 0x0, &(0x7f0000000640)={0x1, 0x1, 0x0, 0x100000000002}) 534.930153ms ago: executing program 7 (id=602): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0) r1 = open$dir(&(0x7f0000000080)='.\x00', 0x2, 0x0) openat(r1, &(0x7f0000000040)='./file0\x00', 0xb5219f1000b913f1, 0x0) ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9f, 0x0) r2 = socket(0x11, 0x3, 0x0) sendto$unix(r2, &(0x7f0000000100)="b1000501000000ae05003f01070000000008000000000500fef96ecfc72fd3357ae30200004e30ffd2d236acf20bf404be01000000f7c8cf5f882b297de1aa050400ce94e2f0ad3ebbc257e4411f139b672f335c22db830c032bfa896443c32118180000720fd38bfb0000fd54c125191b1257aea8c500001602fbfe0c2300000100be1f25a2e791505c47f8343712cc11fffffffffffffc00"/177, 0xb1, 0x400, 0x0, 0x0) select(0x40, &(0x7f0000001c40)={0x7, 0x4e6, 0x8e, 0x4, 0x200, 0x9, 0x1, 0x7}, 0x0, &(0x7f0000001cc0)={0x8, 0x0, 0x7fffffffffffffff, 0xf3f, 0x5, 0x200, 0x10, 0xff}, &(0x7f0000001d00)={0x0, 0x401}) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000140)={0x3, &(0x7f0000000000)=[{0x81, 0x6, 0xf7, 0x6}, {0x87, 0x1, 0x6, 0x9}, {0x9b1e, 0xfe, 0xf4, 0x4000800}]}) syz_emit_ethernet(0x1000e, &(0x7f00000015c0)=ANY=[]) 369.539209ms ago: executing program 6 (id=607): setrlimit(0x8, &(0x7f0000000040)={0x8, 0x3fb}) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000080)="00debfb46f9c6229223a27bbfc8443f842dbbb0bfe8bf3875712a92257d757d17591d792adde6ef4fddc00fd43fd27cc99417205c6ebc9aa0196a386c36f708ed1e6ed2addb72913c9542bd7b47894b5cdcc7d939949cf462ba7010e122fb394c9e491fccbedd533b9ab5e4fcd6dfe9160a4819ad6e9c93284a72f1938dcf509732b320669765cb64ff81a3618b3656a1b1a59e1d7da39839607c063d6b2d9145c70d75ffed91a8f984793"}], 0x100000000000004d) r0 = syz_open_pts() close(r0) r1 = syz_open_pts() writev(r0, &(0x7f0000000180)=[{&(0x7f00000001c0)="6fcba904", 0x4}], 0x1) readv(r1, &(0x7f0000000600), 0x10000000000002a5) 368.020011ms ago: executing program 6 (id=608): mknod(&(0x7f00000002c0)='./file0\x00', 0x2000, 0x5200) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x200, 0x162) select(0x40, &(0x7f0000000000)={0xfffffffffffffffd, 0x2, 0x0, 0x3, 0x0, 0x401, 0x400}, 0x0, 0x0, 0x0) rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00') (async) rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00') close(r0) 366.177463ms ago: executing program 3 (id=610): futimes(0xffffffffffffffff, &(0x7f0000000740)=[{0x0, 0x2}, {0x8000, 0xfffffffffffffffd}]) chmod(&(0x7f0000000040)='.\x00', 0x35e) mkdir(&(0x7f0000000040)='./file2\x00', 0xc1) mkdir(&(0x7f0000000300)='./file2/file0\x00', 0xc2) rename(&(0x7f0000000140)='./file2/file0\x00', &(0x7f0000000100)='./file2\x00') 357.438554ms ago: executing program 3 (id=612): setrlimit(0x8, &(0x7f0000000580)={0xa, 0x56}) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f00000000c0)=@file={0xe, 0x1, './file0\x00'}, 0xa) shutdown(r0, 0x2) listen(r0, 0x1) r1 = socket$unix(0x1, 0x1, 0x0) connect$unix(r1, &(0x7f0000000080)=@file={0x5, 0x1, './file0\x00'}, 0xa) r2 = socket$inet(0x2, 0x3, 0x0) setsockopt$sock_int(r2, 0xffff, 0x8, &(0x7f0000000000)=0x40001, 0x3) r3 = msgget(0x1, 0x1cf) msgrcv(r3, 0x0, 0x0, 0x2, 0x1000) msgctl$IPC_SET(r3, 0x1, 0x0) fstat(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = getuid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$sock_cred(r7, 0xffff, 0x1022, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) setresgid(r8, r8, 0x0) r9 = getpid() r10 = getppid() setsockopt(0xffffffffffffffff, 0x11, 0x1, &(0x7f00000000c0)='/\t', 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) mknod(&(0x7f00000000c0)='./file0\x00', 0x2000, 0x1e5f) msgctl$IPC_SET(r3, 0x1, &(0x7f0000000300)={{r4, r5, r6, r8, 0x110, 0x2, 0x0, 0x0, 0xff}, 0x0, 0x0, 0x0, 0x1, 0x7fffffff, r9, r10, 0x8000, 0x0, 0x3}) r11 = syz_open_pts() close(r11) r12 = syz_open_pts() ioctl$TIOCSETA(r12, 0x802c7414, &(0x7f0000000240)={0x920e, 0x5, 0xffffdf82, 0xffffff8e, "08955c1cfac164e20a070e00000009ffe600", 0x4000000, 0x5}) writev(r11, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) msgget$private(0x0, 0x3d2) 357.228295ms ago: executing program 0 (id=613): ioctl$FIOASYNC(0xffffffffffffffff, 0x80047470, &(0x7f0000000000)=0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$vm_swapencrypt(&(0x7f0000000000), 0x3, 0x0, 0x0, 0x0, 0x0) (async) sysctl$kern(&(0x7f00000000c0)={0x1, 0x50}, 0x2, 0x0, 0x0, 0x0, 0x0) r0 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000000), 0x8009, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$WSKBDIO_GETENCODINGS(r0, 0xc0105715, &(0x7f00000000c0)={0x0, 0x0}) (async) mkdir(&(0x7f0000000100)='./file0\x00', 0x51) (async) mknod$loop(&(0x7f0000000040)='./file0/file1\x00', 0x20, 0x1) 325.512418ms ago: executing program 2 (id=614): syz_emit_ethernet(0x2a, &(0x7f0000000000)={@random="c70c8b8ef527", @random="9f7612a2675c", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x2003, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0x0}, @broadcast}, @udp={{0x1, 0x2, 0x8}}}}}}) (async) unveil(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='c\x00') (async) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) (async) execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$DIOCKILLSTATES(r0, 0x0, &(0x7f00000002c0)={{0x75, 0x7, 0x3}, 0x18, '\x00', 0x92, {@addrmask={@v6=@local={0xfe, 0x80, '\x00', 0x0}, @v4=@loopback, 0x0, 0x0, 0x1}, [0x400, 0x7], 0x3b, 0x5, 0x4}, {@table={'./file0\x00', 0x0, 0x3, 0x9}, [0x7, 0xd4], 0xf0, 0x2, 0x3}, './file0\x00', './file0\x00', 0x4, 0x3}) (async) r1 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) ioctl$FIONREAD(r1, 0x4004667f, &(0x7f0000000140)) (async) pledge(0x0, &(0x7f0000002840)='tty \x00\x02\x00!\a\x9bp^|#\xcbhl\x97\xa3_\xbc\x04\x9d!\xd9\x9f\x9f\xb4\x96\x13\x12\xe0\r\xe7\xb9E\b\x00\x00\x00l\xaaY\xe1Q<\x19\xc0\xf6Yf\x9au^\xa0\xc9j\xdd-I\x01R\x00w\xf7\x15\x04\xa6\x82aY\x1d\xd7\f>Y\x06\"\xad\xb6\x88_\xeb\at\x91\xd3\xbf\xea\xddt\xe0\bt\x06S,\xdbH\xa7-\xaaw\xcet\x044\xc5\xa9e\xa9\xf6\x1b\x8e\x05\x86\x91IsC\xb9ul\xaeu\x94\x9b\xaf\x04\xc4\x03\"F\x8f\xd5\xe8\r\x8d\xa1\x00\xcc\xd7\xa0\xe1\xeb\xc1>\xbd\t\xc8\x15\v\xb0, \xee\xa4\xa6\xb9a\x01&\xadrj\xd5\xc26p\xa14\xe0\xbf\xa0\x1es\x01=\xdbd\xf0?=\x8afcJ\x8eYEn\xd4<\x00\xec\xe4^\x00\x00\x00\xca\x90\xfa\x98\xc9gty\xce\xab\xd2\xa1\x85E\xe4\xa9\xd5\xab\x83\xda?w\x83\xbc\xcf\xd20(L&b\xed\x8c\x1d\x1a\x9fd\x99H\x9e\x82\x10\xea\x05\xf8\xff\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\xa6\x8c\x05n\x83\x83\x12+\x16\xc1\x00\x04\x00\x00\x13:o\x0f\x1fB\xa4\x00wB\x92h\xde\xfal3\x88e\x04J\\\x00D\xae`\x8e\xadd\xa8;\xee\xc4K\xe8]\x84\x90\xb8d\xfb\x95\xb3\xe9(x_\x80]\xadW\xd5\xa9\xaa\x03\x9c6\xa9\xc4\x01\x03\xea\xe5\x90\x85\x16\xb0DV\x13\x01\xab\x01\xf0\x8f\x02\xc2\xc8\x9b\x03\x1f\xd7\xdbN\\\xc0\xcd?Pg\xd5q\x13\xbd \xfa\xab\xccJK\x11\\\x16~#P.\xc9K\x15r\x04\xd9Z;\xc0\x8dOze\x96\xe9\xc3\x93\xed\x94.\xc2\xa0\x1fU#\x96\xe6\xb6C\xfa\x03/\x8b\x0e2\xec\x96v\x9b/.\v\x9e\x80\x18s\xae.\xf4\x14KS`\x87\x8b4\t\x00\x87{\xa8@e\xbfe\xeb\xee\xa2\xe72\xb8Q:\x9f\xc2b\x897\xbe\r\x04\xdf\xe2\xc0\xf0FV\'m\xcbm\x80%\xfc\x9e\x9f\x87\x80A\xbe\xc2\x00\x00\x00\x00\x00\x006\x96\xbb\x9f\x85\x98\xbb\xbc;\xaa\x97c\xfe\x82jz&t\xa7\xc4\xcd\xb0\b9G\xcag\fY\xe6\r\xcdT\xd3\x1c(\xef\xc0\x038\xbd\xdd\xd9\xc9\x93a]q\xd2\x9b\a\x1e\xf8\xc3\"\xc8:\xb8$\x9f\'P\x17\xfa\xf3Xa\trB-\xf2g\xe6Z\xd5F\xd2\x80\xe0\x99\"\xc12\xe8\b\xc58\x00'/659) syz_emit_ethernet(0x69, &(0x7f0000000200)={@remote, @remote, [{[], {0x8100, 0x1, 0x0, 0x4}}], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x57, 0x0, 0x3, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0x0}, @broadcast}, @generic="7d86b8ba6217cfb86d2e7a1e72a2f24dc36b261bd80a3568427f9aef78b3ca5ea0a21b3fb69877b7f9a28213a146190710b56f1123e20f30de7a3fec9f767ed4b7d198"}}}}) 324.570942ms ago: executing program 6 (id=616): mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1, 0x4c) ioctl$WSMOUSEIO_SCALIBCOORDS(r0, 0x81205724, &(0x7f0000000100)={0x1, 0x9e, 0x2000007, 0x5, 0x80000001, 0x80000001, 0x10001, 0x10, [{0x10000000, 0x40, 0x3, 0x3}, {0x101, 0xffffffff, 0x9, 0x2}, {0x20007, 0x8000b86, 0xffffff79, 0x9}, {0x73f0, 0x6, 0x4, 0x2}, {0x42, 0x8, 0x80002800, 0x800005}, {0x2, 0x6, 0x3, 0x95}, {0xcdf, 0xdf61, 0x200004f8, 0x10}, {0x6, 0xd, 0x16, 0xb}, {0xffffffff, 0x2084, 0x3, 0x6}, {0x4, 0x7, 0x93, 0x1ff}, {0x1e2, 0xffff, 0x40, 0x7}, {0x9, 0x25, 0x9, 0x2d0b}, {0x1000000, 0x401, 0x80000003, 0x408}, {0x29a71717, 0xfffffffa, 0x0, 0x579}, {0xc, 0xf8f, 0x4000006}, {0xfffffffc, 0x800bd3d, 0x6, 0x30005}]}) syz_emit_ethernet(0x7e, &(0x7f0000000540)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "5f6ad9", 0x3d, 0x3a, 0x29, @rand_addr="000000000000000000020000008000", @local={0xfe, 0x80, '\x00', 0x0}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "06c33e", 0x0, 0x0, 0x1, @mcast1, @mcast2, [@dstopts={0x3a, 0x1, '\x00', [@jumbo={0xc2, 0x4, 0x8}, @enc_lim={0x4, 0x1, 0x5}]}]}}}}}}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) sysctl$net_inet6_icmp6(&(0x7f0000000000)={0x4, 0x18, 0x3a, 0x1}, 0x4, 0x0, 0x0, 0x0, 0x4e) 323.323317ms ago: executing program 7 (id=617): setgid(0xffffffffffffffff) setgroups(0x0, 0x0) fchmod(0xffffffffffffffff, 0xf3) setuid(0xffffffffffffffff) sysctl$kern(0x0, 0x0, &(0x7f0000000000)='q', &(0x7f0000000080)=0x1, 0x0, 0x0) openat$pf(0xffffffffffffff9c, &(0x7f00000000c0), 0x82, 0x0) socket(0x18, 0x3, 0x2) clock_settime(0xffffffffffffffff, &(0x7f0000000100)={0xd, 0x10001}) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0/file1\x00', 0x44) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x97) rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00') 322.71107ms ago: executing program 0 (id=618): sendmsg$unix(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f00000000c0), 0x1c, 0x0, 0xffffffbe}, 0x0) (async) sysctl$net_inet_tcp(0x0, 0x0, &(0x7f00000000c0)="9b18", 0x0, 0x0, 0x0) (async) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') setuid(0xffffffffffffffff) (async) r0 = getuid() chown(&(0x7f0000000040)='./bus\x00', r0, 0x0) setuid(0xee01) (async) r1 = getpid() (async) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0xffffffffffffffff, 0x88, 0x5, 0x6}, 0x80000000, 0xfffffffffffffffd, 0x8, 0x0, 0x0, 0x0, 0x200023}) socket(0x18, 0x2, 0x0) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_opts(r2, 0x0, 0x64, &(0x7f0000000240)="01000000", 0x4) ioctl$FIONREAD(r2, 0xc0287533, &(0x7f0000000340)) (async) ktrace(0x0, 0x1, 0x79c64656eef23196, r1) (async) open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) (async) r3 = open(&(0x7f0000000000)='./file0\x00', 0x611, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) fcntl$lock(r3, 0x7, &(0x7f0000000280)={0x1, 0x1, 0x8, 0x5}) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r4 = socket(0x18, 0x2, 0x0) r5 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) pwritev(r5, &(0x7f0000000280)=[{&(0x7f00000014c0)='l', 0x1}, {&(0x7f0000000100)="3089", 0x2}], 0x2, 0x5) (async) openat$pf(0xffffffffffffff9c, &(0x7f00000000c0), 0x82, 0x0) ioctl$TIOCSETA(r3, 0xc0284416, &(0x7f0000000100)={0xa00, 0x0, 0x741, 0x0, "97000000efffffff00", 0x900, 0x7}) (async) sendmsg$unix(r4, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x0) (async) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x2000, 0x4800) r6 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ioctl$TIOCFLUSH(r6, 0xc00c7006, &(0x7f0000000080)=0x500) shmat(0xffffffffffffffff, &(0x7f0000328000/0x2000)=nil, 0x2000) syz_open_pts() 321.527698ms ago: executing program 2 (id=619): msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x7, 0x0, 0x0, 0x0, 0x0, 0x4c}, 0xc, 0x2a3, 0x0, 0xfffffffffffffffe, 0xc, 0x800000000000013, 0x0, 0x40}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x13, 0x0, 0x37) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x4, 0x0, 0x0, 0xbffffffe}, {0x2, 0x0, 0x0, 0xffffffff}, {0x7f, 0x0, 0x0, 0x1}]}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xff0a, 0x0, 0x37) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x1, 0xd, 0x9, 0xffffffff, 0x5], 0x5, 0x0, 0x0, 0xffffffffffffffff}) sysctl$ddb(0x0, 0x0, &(0x7f0000000180)="88bd5c1e5f3b55849601049763cb3761bd036357420ae3cb7a9b60301f627a4796b6f87a28ac2c9569172470b9781e77d55aa6d677a02a0032af4032f837b41bd8e502fc51cb7e0a6899900d9aed", &(0x7f0000000080)=0x4e, &(0x7f0000000240)="af407108f3a5ccb27333190a36089b89ee0d4ec353fd6d84b234b78f2967206a4dcaf87ed9a03bf2e54b2b5330b2a1a61633ef8f6d5137adf681c00c3b0704d2bfec4955bf4899de29b00eb5c75e3bc803b7515f1f2d989fe59e8c86", 0x5c) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) ioctl$DIOCSTART(r1, 0x20004401) r2 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r2, 0xc0106924, &(0x7f00000001c0)) r3 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x18061, 0x0) ioctl$DIOCADDRULE(r3, 0xcd604404, &(0x7f00000005c0)={0x2ee, 0x4, 0x0, './file0\x00', './file0\x00', 0x0, "6ee6454df11d6709365d5928a1d9dab88ad7b4e5cb1324904308c0cc18016908af0bd8bd9eeb39a0bf7211d98d2851cf683210276ead79b58f9a811c5cc99c1ed4062f8e737cb19c7fb76ddd7ccbaf872ced3c10d30856831c881c2eda726d199b3cc2dccdf2bc6283cfa11b2d10fc744ad3671087e0e0940a1e7780666d7ed3edc0ae874976e2a647e0d56688534c56a4fe105661ce39f9570b161c818e1f953e4c16f88d113464e38596c5cf3d798a4c49b1a02a638b5fbce3f35986054d63ec7e418790ad5939885363f982670b7611b0508d3994a53d82a4fe290126fc613696d6cea855114eca135dd8a1f6f2f6f60f7164a5c63801e41c2ba65dea5be1ab1b675255175e1c34cc76ffe52a9830f20008bf6c026dd80258128a0ac98632f4a5ad8af3b7e33b522d2fd38ebe29da93e06310371bee4c8a0166627c17c01983a05b34294cf28cf46f149d8c0b058ba315efbfa428a20a0d8c1e6cd122d161e5f667d7cc1932f425e7eefdaabbd0217edbd143daa19784e8a3194dd907818745d7b8d3e06a8a9a31c11928684e3d64081fec94f4a140e2185b56c9ad818361afc680a723002811f795524f5c836ad885de3e9befdaac497b3112d3c69687b7146dcc9354d25b29b9ebaabccebf49c7e5e2a78be5d98bbe0f5f177f7b63ee930dbe9de88e256e000a9b70a16f5d039d5974b43f349d9ad46e5226d8f7881dde59060eeed0e355eb4fbbef24788d66e5403ed38e09baca7033c20fbf102105f33c08d0f90fb4c184e5f827444afefa824cbe50ec885b2317a7be8671ce680e2beacb5b72ccf9bf909e6a7fcd9f2fe9d99edc7d9595849e920e4ede62dc434d7372e963e1dc0c31d86766b4bf45acda5b399adb32eaf1aa75fde6b307ff14c47f2c5699702f144257f6f97da6762bd6e9ba56ff27815a1f1935b3de76f1046c116a37ad6011a53ec0998639d2945d09b04fecd753b07a84449914c32cc1c99c061447ba0c8dac3c30181d4c3fe3c30ad18b7c7e547435666647316c11294d923688936af001c77fd39ee4c6a0d3c8ba92911d15feb7c81fc60b20b8f12f8ef242ea706d425168017e590418f516711369270aa738525b4211ce4215762ac5f0536482c6633c63f353c396bc92271c9816a38d95098eb5f24329e321286b47603018228cf8429aaaee2a04972768c15e043a5b2f003904faa4acca10ddb7fb1195f4052ed2adf3a1d25e854dc48d747440747aa9d0e349e533317af0bf88ccdecf00e625cfeace2dfca32cb942c628ee58608f67d08c1d60cc585d5bf9be36445989158a287374e6148949516a82f79010275af65288b3b04c4cb7f20af466bfefa6b6c3a36de26ea92c88126ee892ea1be1e68b95ad253025d4316a2547654a50a9434f5fbefed098276159d45f67b29a5675275f9242a9972ef4ad7321572a695912c438ffdfd9175b5d7014759a667820280b5c1cfeb27daf6cd8df8c9d2827d7f49efc0bae85fcfd78ffe436738dd5360b0dab3dc72102b3da1637f615b0a5d44176242ffcb5fcdf998490866fe4baa5cd62c196dc6e184051dd8eaf859fb70a484a00e38ef04a5f9cef886a1ee151d3c893388c7864d4946e455ee59267b0484574b884a5cdca2c58bf3bbe834f2b8d51d2ad2b0de6d4bb299e88aad454d823bb0233ca4badff36d82afa29a70fe23606ab1fad1207f46268ac2daecf6b02fa8a3cd35fba8b17b2017637b6cec2f88982e9ae9417586c8fdf8f1182ad1216727b57baaaef7d271e51d8e1501d4e04a6a86bd1b9de18054b05d74bd9cc781cd204d63804d102431d67c741d12a077955306675b38424732b1e8a32dd12a07bc0db359908592eca9afbacbca2966fb4a3564812317114cc2d698a2931c8aa1569a0fc0e73bc9bbfe7797bea00b0a842"}) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4, 0x1010, r0, 0xfff) 277.938716ms ago: executing program 3 (id=620): r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x184) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setrlimit(0x2, &(0x7f0000000080)={0x60000000, 0x60000000}) (async) mmap(&(0x7f0000234000/0x3000)=nil, 0x3000, 0x2, 0x810, r0, 0x0) (async) fcntl$lock(0xffffffffffffffff, 0x8, &(0x7f0000000040)={0x2, 0x2, 0x9, 0x300000006}) (async) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x11}, 0x4000000000000007, 0x0, 0x0, 0x0, 0x0) r1 = socket(0x11, 0x3, 0x0) (async) r2 = socket(0x18, 0x2, 0x0) mknod(&(0x7f0000000000)='./bus\x00', 0x2000, 0x2e00) (async) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) ioctl$VMM_IOC_CREATE(r3, 0x8004630a, &(0x7f0000000000)={0x10, 0x0, [{&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil}, {}, {0x0, &(0x7f0000ffb000/0x3000)=nil}, {&(0x7f0000fff000/0x1000)=nil}, {0x0, &(0x7f0000ffb000/0x1000)=nil}, {&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil}, {&(0x7f0000ffe000/0x1000)=nil}, {0x0, &(0x7f0000002000/0x1000)=nil}, {0x0, &(0x7f0000ffa000/0x4000)=nil}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil}, {&(0x7f0000002000/0x1000)=nil, &(0x7f0000ff9000/0x6000)=nil}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil}, {0x0, &(0x7f0000ffd000/0x3000)=nil}, {0x0, &(0x7f0000ffe000/0x2000)=nil}, {&(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil}, {0x0, &(0x7f0000ffd000/0x3000)=nil}], './file0\x00'}) getsockopt(r2, 0x29, 0x2a, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc0e99db6de761f86, 0x0) (async) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0x1, [{&(0x7f0000695000/0x3000)=nil, &(0x7f00003cf000/0x1000)=nil, 0xd}, {&(0x7f0000ff6000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil}, {&(0x7f0000f08000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x3}, {&(0x7f0000693000/0x3000)=nil, &(0x7f0000698000/0x3000)=nil, 0x792e}, {&(0x7f0000422000/0x4000)=nil, &(0x7f000069a000/0x1000)=nil, 0x5}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff4000/0xc000)=nil, 0x91e8}, {&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000c44000/0x2000)=nil, 0x5}, {&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff5000/0x4000)=nil, 0x4}, {&(0x7f0000c18000/0x4000)=nil, &(0x7f0000cc4000/0x2000)=nil, 0x7f}, {&(0x7f0000d10000/0x1000)=nil, &(0x7f0000693000/0x1000)=nil, 0x80080000000000}, {&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c0c000/0x2000)=nil, 0x2ff}, {&(0x7f000000e000/0x4000)=nil, &(0x7f00000f4000/0x1000)=nil, 0x7fffffff}, {&(0x7f00000e0000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil}, {&(0x7f00002e6000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x10001}, {&(0x7f0000394000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil}, {&(0x7f0000265000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x380b00a4}], './file0\x00', 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}) (async) r4 = open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) ioctl$FIONREAD(r4, 0xc0106924, &(0x7f00000001c0)) (async) r5 = socket$inet(0x2, 0x1, 0x0) listen(r5, 0x7fff) setsockopt(r1, 0x11, 0x2, &(0x7f0000000000), 0x4) 277.521859ms ago: executing program 0 (id=621): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000200)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x65, 0x6, 0x7, 0x7}, {0x40, 0xf0, 0xff}, {0x6, 0x80, 0xb6, 0xfffff802}]}) sysctl$kern(0x0, 0x0, &(0x7f0000000180)="a7a6d61de4a1090992003b47915d8156c41fe591026c9e82b38988f5b063c973f06ac0153544e9331a36e74e7e37a7a88ba9625925bb9d46e46ba9630c7e1d9855f945c97d49b68277df5c2da00f78f02980eaab3d05329086e2fd039bf0163cd8a485cbac98fd4b47a61eef09ad6b65cdaf15908b2c500742caa1c68ca27dcc8e25338e6b6ba102910975f4099113950147b5850340d57e05737bb697bfa1f52acd53287b4a110875d38304", &(0x7f0000000000)=0xac, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendto(r1, 0x0, 0x0, 0xc, &(0x7f00000001c0)=@un=@abs={0xc3, 0x0, 0x0, 0x2}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000001a80)=ANY=[]) 271.824198ms ago: executing program 7 (id=623): mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x7) r0 = semget(0x2, 0x4, 0x235) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x637e) r1 = semget$private(0x0, 0x0, 0x206) semctl$IPC_RMID(r1, 0x0, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = kqueue() r4 = openat$pf(0xffffffffffffff9c, &(0x7f0000000100), 0x8, 0x0) ioctl$DIOCGETLIMIT(r4, 0xc0104454, &(0x7f0000000140)={0x0, 0x5}) kevent(r2, &(0x7f0000000180), 0x5, &(0x7f0000000180)=[{{r3}, 0xffffffffffffffff, 0x13, 0x2, 0xfffffffffffffffe}, {{r2}, 0xfffffffffffffff8, 0x62, 0x40000000, 0x88, 0xe01e}], 0x6, 0x0) semctl$GETZCNT(r0, 0x3, 0x7, &(0x7f0000000040)=""/83) r5 = open(&(0x7f0000000000)='./file0\x00', 0x14a, 0xc4) ioctl$TIOCSWINSZ(r5, 0x80087467, &(0x7f0000000240)={0x5, 0x5, 0xd, 0x2}) 260.472537ms ago: executing program 2 (id=624): ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000780)={'tap', 0x0}) sysctl$kern(0x0, 0x0, &(0x7f0000000180)="3bf2ee74e747c82dad6eb2a36fa7feffffff5fe49afca7e63b52fa65ccaa74d6e6b85b6cdced70357ef2", 0x0, 0x0, 0x0) mknod(&(0x7f0000000000)='./file1\x00', 0x2000, 0x285b9a) r0 = open(&(0x7f0000000800)='./file1\x00', 0x80, 0x0) ioctl$FIONBIO(r0, 0x82907003, &(0x7f0000000140)=0x3) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f00000000c0)={0x0, &(0x7f0000000080)}) syz_emit_ethernet(0x66, &(0x7f0000000500)=ANY=[]) 259.323154ms ago: executing program 3 (id=625): r0 = kqueue() kevent(r0, &(0x7f00000003c0)=[{{}, 0xfffffffffffffff6, 0x8b, 0x40000000, 0xb414}, {{}, 0xfffffffffffffffb, 0x80, 0xf0000000, 0x2000000000001000, 0x402}], 0x96, &(0x7f0000000540), 0xfffb4961, 0x0) r1 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) ioctl$WSDISPLAYIO_LDFONT(0xffffffffffffffff, 0x8058574d, &(0x7f0000000ac0)={'./file0aaaaaaaaaaaaaaaaaaaaaaaaa', 0xc50, 0x5, 0x400, 0x1, 0x0, 0x40, 0x3, 0x2, 0x2, 0x5, 0x6}) ioctl$TIOCSETA(r1, 0xcd604404, &(0x7f0000000080)={0x1, 0x2, 0x87a, 0x2f, "2000030000000000000000000068a95a010400", 0x6, 0x2}) ioctl$DIOCGETRULESET(r1, 0xc444443b, &(0x7f0000000b40)={0x3, './file0aaaaaaaaaaaaaaaaaaaaaaaaa\x00', './file0aaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) setrlimit(0x8, &(0x7f0000000980)={0x8, 0x54}) r2 = syz_open_pts() close(r2) syz_open_pts() openat$wskbd(0xffffffffffffff9c, &(0x7f0000000140), 0x100, 0x0) mknod(&(0x7f0000000000)='./file1\x00', 0x2000, 0x281b9a) open(&(0x7f0000000800)='./file1\x00', 0x800, 0x120) ioctl$TIOCSETAF(r2, 0x802c7416, &(0x7f0000000000)={0x40978b, 0x10001, 0x3e01, 0x80a1a4, "bb08000100f167d910508bc49d7323000000007e", 0x0, 0xffffffff}) writev(r2, &(0x7f0000000700)=[{&(0x7f0000000080)="34eb4cd59e8456ebc0881681c60e1cd9e0bf01b618b3cb934394c5951c1db0fd943a", 0xff99}], 0x1) ioctl$FIOASYNC(r2, 0x80047469, &(0x7f00000001c0)=0xa) openat$wsmouse(0xffffffffffffff9c, 0x0, 0x1, 0x0) munmap(&(0x7f0000001000/0x2000)=nil, 0x2000) ioctl$WSMUXIO_REMOVE_DEVICE(0xffffffffffffffff, 0x80085762, &(0x7f0000000040)={0x1}) r3 = syz_open_pts() r4 = getuid() fchown(r3, r4, 0x0) setuid(r4) r5 = socket(0x18, 0xc003, 0x3a) setsockopt(r5, 0x29, 0x6c, &(0x7f0000000040), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r5, 0x29, 0x66, &(0x7f00000003c0)={0x0, 0x1, 0x10, 0x3}, 0xc) ioctl$DIOCGETTIMEOUT(r1, 0xc008441e, &(0x7f0000000100)={0xd, 0x2}) setsockopt$inet6_MRT6_ADD_MFC(r5, 0x29, 0x68, &(0x7f0000000080)={{0x1c, 0x18, 0x0, 0xa, "759f5a5ad65ada388e47a1e7a5446cfe", 0x1071}, {0x1c, 0x18, 0x3, 0x4, "7e908ea871810362ffeeb2b2c94fa87b", 0x4}, 0x0, [0x3efa, 0x9f74, 0x1, 0x4, 0x8, 0x5, 0x800, 0x8]}, 0x5c) sysctl$net_inet6_ip6(&(0x7f0000000000)={0x4, 0x18, 0x29, 0x35}, 0x4, &(0x7f0000001140)="ea9726b9c549f7379cb5412bedbfa1e1b3b99a5bc0a9f633c75e1ddefeb881a60c72d71e13cf681df9907d21af00c615a0594411eb1bb14c86e061895c75ae1b8e07ec5768af0f08d4fef288c0fafd4a3db9de51e1a61fe265cd070000000000c21e7d13ebee51571082d5561cc93f38198d18023829dfdb", &(0x7f00000001c0)=0x78, 0x0, 0x0) 249.953932ms ago: executing program 5 (id=626): syz_emit_ethernet(0x2a, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x67, 0x0, 0x0, 0x11, 0x0, @broadcast, @local={0xac, 0x14, 0x0}}, @icmp=@echo_reply={0x0, 0x0, 0x0, 0x66}}}}}) (async) sysctl$kern(&(0x7f0000000000)={0x1, 0x42}, 0x6, 0x0, 0x0, 0x0, 0x0) (async) mknod(&(0x7f0000000200)='./file0\x00', 0x2000, 0x412dff) (async) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x82, 0x0) write(r0, &(0x7f0000000500)="d5d32207", 0x4) (async) openat$null(0xffffffffffffff9c, &(0x7f0000000300), 0x40000, 0x0) (async) openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) (async) r1 = setsid() (async) r2 = open(&(0x7f0000000000)='./file0\x00', 0x100, 0xc2) ioctl$TIOCSCTTY(r2, 0x20007461) (async) fcntl$setown(r2, 0x6, r1) r3 = socket(0x11, 0x3, 0x0) sendto$unix(r3, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb61b98df192f9781ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x40c, 0x0, 0x0) (async) r4 = getpgrp() (async) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0xa6, 0x3, 0x8, 0x80000001, 0xa1b0, 0x10001, 0x10, [{0xfffffffc, 0x2890, 0x4, 0x5}, {0x6, 0x9, 0x8, 0xfffffff9}, {0x1, 0xfffffffa, 0xfffffffc, 0x9}, {0x4, 0x800, 0x8007, 0x7}, {0x401, 0x3, 0x2800, 0x7}, {0x1, 0x4, 0x3, 0x9b}, {0xce1, 0xffffffff, 0x4f4, 0x10000}, {0x6, 0x803, 0x3, 0x7}, {0xd0f5, 0x82, 0x5, 0x9}, {0x6a75, 0x8009, 0x1000, 0x4}, {0x1cc, 0x10001, 0xc, 0x3}, {0x7, 0xa, 0x8}, {0x3, 0x7, 0x6, 0x1}, {0x6, 0xfffffffa, 0x60, 0x6}, {0x10008, 0x5, 0x5, 0x4}, {0x0, 0x1, 0xfff, 0x30004}]}) (async) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) r5 = socket(0x18, 0x3, 0x0) ioctl$FIONREAD(r5, 0xc0106924, &(0x7f00000001c0)) (async) r6 = socket(0x18, 0x3, 0x40) setitimer(0x0, &(0x7f0000000140)={{0xf32b473, 0x9}, {0x7ffefffbffffffff, 0xbe}}, 0x0) (async) ioctl$FIONREAD(r6, 0x8080691a, &(0x7f0000000100)) setitimer(0x0, &(0x7f0000000540)={{0x7, 0x8}, {0x9, 0xe0000}}, 0x0) getitimer(0x0, &(0x7f0000000100)) kill(r4, 0x1f) (async) fcntl$lock(r3, 0x9, &(0x7f0000000000)={0x0, 0x1, 0xfffffffffffffffc, 0x300000000, r4}) (async) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x20, 0x0) (async) mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) (async) r7 = open(&(0x7f0000000040)='./file0\x00', 0x2, 0x102) ioctl$FIONREAD(r7, 0xc0206981, &(0x7f0000000100)) 200.839358ms ago: executing program 5 (id=627): r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x200, 0x186) ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x2112, 0x0) mknod(&(0x7f0000000180)='./bus\x00', 0x2000, 0xd01) r1 = open(&(0x7f0000000240)='./bus\x00', 0x8, 0x15c) sysctl$kern(&(0x7f0000000000)={0x1, 0xa}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) openat$pf(0xffffffffffffff9c, 0x0, 0x1, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0xc8) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x10, r2, 0x0) ioctl$BIOCSETF(r2, 0x80104267, &(0x7f00000002c0)={0x6, &(0x7f0000000280)=[{0x100, 0x6, 0x8, 0x200}, {0x7, 0x4, 0xb, 0xe}, {0x1ff, 0x5, 0x7, 0x6}, {0x7fff, 0x4, 0xf7, 0x4}, {0x2, 0x2, 0x7, 0xfffffff7}, {0x1, 0x9, 0x3, 0xf602}]}) ioctl$VNDIOCSET(r1, 0x80086476, &(0x7f0000000000)={0x0, 0xffffffffffffffba, 0x0}) r3 = open(&(0x7f0000000040)='./file0\x00', 0x80, 0x0) mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x1, 0x12, r3, 0x0) futimes(r0, &(0x7f0000000080)=[{0x16f5557, 0x141b}, {0x6, 0x8}]) ioctl$DIOCGETQUEUE(r3, 0xc148445f, &(0x7f0000000100)={0x81, 0xffffff80, {'\x00', './file0\x00', './file0\x00', './file0\x00', {{0x28, 0x7}, {0x7, 0x80000000}, 0x7}, {{0x1, 0x80000000}, {0x8, 0x3}, 0x64}, {{0x6, 0xf81}, {0x4, 0x3ff}, 0x1}, {0x7, 0x25, 0x82, 0x67086d61}, 0x0, 0x7fff, 0x8, 0x0, 0x7}}) open$dir(&(0x7f00000000c0)='./file0\x00', 0x200, 0x186) (async) ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x2112, 0x0) (async) mknod(&(0x7f0000000180)='./bus\x00', 0x2000, 0xd01) (async) open(&(0x7f0000000240)='./bus\x00', 0x8, 0x15c) (async) sysctl$kern(&(0x7f0000000000)={0x1, 0xa}, 0x2, 0x0, 0x0, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) openat$pf(0xffffffffffffff9c, 0x0, 0x1, 0x0) (async) open(&(0x7f0000000040)='./file0\x00', 0x0, 0xc8) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x10, r2, 0x0) (async) ioctl$BIOCSETF(r2, 0x80104267, &(0x7f00000002c0)={0x6, &(0x7f0000000280)=[{0x100, 0x6, 0x8, 0x200}, {0x7, 0x4, 0xb, 0xe}, {0x1ff, 0x5, 0x7, 0x6}, {0x7fff, 0x4, 0xf7, 0x4}, {0x2, 0x2, 0x7, 0xfffffff7}, {0x1, 0x9, 0x3, 0xf602}]}) (async) ioctl$VNDIOCSET(r1, 0x80086476, &(0x7f0000000000)={0x0, 0xffffffffffffffba, 0x0}) (async) open(&(0x7f0000000040)='./file0\x00', 0x80, 0x0) (async) mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x1, 0x12, r3, 0x0) (async) futimes(r0, &(0x7f0000000080)=[{0x16f5557, 0x141b}, {0x6, 0x8}]) (async) ioctl$DIOCGETQUEUE(r3, 0xc148445f, &(0x7f0000000100)={0x81, 0xffffff80, {'\x00', './file0\x00', './file0\x00', './file0\x00', {{0x28, 0x7}, {0x7, 0x80000000}, 0x7}, {{0x1, 0x80000000}, {0x8, 0x3}, 0x64}, {{0x6, 0xf81}, {0x4, 0x3ff}, 0x1}, {0x7, 0x25, 0x82, 0x67086d61}, 0x0, 0x7fff, 0x8, 0x0, 0x7}}) (async) 200.525442ms ago: executing program 0 (id=628): writev(0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffff01) socket$inet(0x2, 0x5, 0x3) 199.874661ms ago: executing program 3 (id=629): setrlimit(0x8, &(0x7f0000000180)={0x42, 0x2f9}) r0 = syz_open_pts() (async) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000480), 0x80, 0x0) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x4000000000000003}}) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc0e99db6de761f86, 0x0) (async) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0x1, [{&(0x7f0000695000/0x3000)=nil, &(0x7f00003cf000/0x1000)=nil, 0xd}, {&(0x7f0000ff6000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil}, {&(0x7f0000f08000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x3}, {&(0x7f0000693000/0x3000)=nil, &(0x7f0000698000/0x3000)=nil, 0x792e}, {&(0x7f0000422000/0x4000)=nil, &(0x7f000069a000/0x1000)=nil, 0x5}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff4000/0xc000)=nil, 0x91e8}, {&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000c44000/0x2000)=nil, 0x5}, {&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff5000/0x4000)=nil, 0x4}, {&(0x7f0000c18000/0x4000)=nil, &(0x7f0000cc4000/0x2000)=nil, 0x7f}, {&(0x7f0000d10000/0x1000)=nil, &(0x7f0000693000/0x1000)=nil, 0x80080000000000}, {&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c0c000/0x2000)=nil, 0x2ff}, {&(0x7f000000e000/0x4000)=nil, &(0x7f00000f4000/0x1000)=nil, 0x7fffffff}, {&(0x7f00000e0000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil}, {&(0x7f00002e6000/0x3000)=nil, &(0x7f00000dd000/0xa000)=nil, 0x10001}, {&(0x7f0000394000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil}, {&(0x7f0000265000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x380b00a4}], './file0\x00', 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}) (async) r4 = open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) ioctl$FIONREAD(r4, 0xc0106924, &(0x7f00000001c0)) (async, rerun: 32) ioctl$WSDISPLAYIO_GBURNER(r3, 0x400c5752, &(0x7f00000001c0)) (async, rerun: 32) semop(0x0, &(0x7f00000000c0)=[{0x2, 0x0, 0x800}, {0x4, 0x2ff, 0x800}], 0x2) sysctl$net_inet_tcp(0x0, 0x0, &(0x7f00000000c0)="9b180b", 0x0, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async, rerun: 64) socket(0x1, 0x1000, 0xfd) (async, rerun: 64) r5 = socket(0x1, 0x8000, 0x8) close(r5) (async) setsockopt(0xffffffffffffffff, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) (async, rerun: 64) connect$unix(r5, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) (async, rerun: 64) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000380)={'tap', 0x0}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], 0x6, 0x2, 0x3, 0x4, 0x4e3, 0x6, 0x4, 0x1}) ioctl$DRM_IOCTL_MODE_GETENCODER(r3, 0xc01464a6, &(0x7f0000000340)={r7, 0x1, 0x0, 0x2, 0x5}) (async, rerun: 32) syz_emit_ethernet(0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000000800452000290000000005069078ac147d875100bbacf87caa4e214e2388b0bf56f61333078cb7bd", @ANYRES32=0x41424344, @ANYRES64=r6, @ANYBLOB="500200a790780000"]) (async, rerun: 32) close(r0) (async) syz_open_pts() (async) openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0xbe, 0x0) (async) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000400)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x10, 0x7e, 0x3, 0x48}, {0x6, 0x80, 0x6, 0xfffff805}]}) (async, rerun: 32) sysctl$kern(0x0, 0x0, &(0x7f0000000140)="c2a6100000fcbb7aed94075fca09a12bd3fe5a156fb81100000000f7", &(0x7f0000000000)=0x1c, 0x0, 0x0) (async, rerun: 32) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 198.407827ms ago: executing program 5 (id=630): r0 = syz_open_pts() socket$inet(0x2, 0x3, 0x5) fcntl$lock(r0, 0x9, &(0x7f0000000000)={0x3, 0x0, 0x4, 0x100030200007d}) fcntl$lock(r0, 0x9, &(0x7f00000001c0)={0x3, 0x0, 0x0, 0x300000003}) ioctl$TIOCSETD(r0, 0x8004741b, &(0x7f0000000040)) 143.717059ms ago: executing program 0 (id=631): mknod(&(0x7f0000000000)='./file1\x00', 0x2000, 0x285b9a) select(0x40, &(0x7f0000000180)={0xfffffffffffffffd, 0x44809e9d, 0x0, 0xfffffffefffffffe, 0x2000000000000000, 0x210, 0x6, 0x7}, 0x0, 0x0, 0x0) ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x800009, 0xb3f, {[0xfffffbfffffffff8, 0xfffffffffffff000, 0x2, 0x100000000, 0x6, 0x5, 0xdf60, 0xfffffffffffffffe, 0x4, 0x6, 0x4, 0x3, 0x38, 0x0, 0xffffffffffffffff, 0x2, 0x3, 0xfffffffffffffffa], [0xfffffffffffffffa, 0x80000000, 0xf, 0x9c7, 0x5b, 0x1, 0x1fe, 0x0, 0x0, 0x2], [0xfffffffe, 0x2, 0x0, 0x4, 0xb, 0xffffffff, 0xffffffff00000000], [0x100, 0x5, 0x7fffffffffffffff, 0x100000000, 0xfffffffffffffffa, 0x2], [{0x0, 0x20000004, 0x0, 0x7d06}, {0xfffc, 0x2, 0x9}, {0x6, 0x2, 0xfffffffc}, {0x4009, 0x5, 0x4, 0xffffffffffffffff}, {0x6, 0x3ff, 0x1000, 0x8}, {0x0, 0x2007, 0x9, 0x2000000000000000}, {}, {0x0, 0x100, 0x0, 0x8}], {0x0, 0x5, 0xffff}, {0x2, 0x80000000, 0x6d5, 0x2}}}) ioctl$FIONREAD(0xffffffffffffffff, 0x8020697a, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) sysctl$kern(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) r0 = socket(0x18, 0x3, 0x0) ioctl$FIONREAD(r0, 0xc0106924, &(0x7f00000001c0)) setitimer(0x2, &(0x7f0000000140)={{0x3, 0x100800000000009}, {0x7ffefffbeffefffe, 0x8000003}}, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) r1 = socket(0x18, 0x3, 0x0) ioctl$FIONREAD(r1, 0x8080691a, &(0x7f0000000100)) r2 = kqueue() kevent(r2, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) r3 = open(&(0x7f0000000080)='./file1\x00', 0x40, 0x132) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="bf30e56f81ea65f2f48172e98e56de47", 0x10}], 0x1) kevent(0xffffffffffffffff, 0x0, 0x7fff, &(0x7f00000002c0)=[{{}, 0xfffffffffffffffb, 0x4c, 0x0, 0x0, 0x8000005}, {{}, 0xfffffffffffffffb, 0xc1, 0xf0000000, 0xe6ac, 0x46ad}, {{}, 0xfffffffffffffffc, 0x1, 0xf0000000, 0x1, 0x4}, {{}, 0xfffffffffffffffc, 0x20, 0x10, 0x7, 0x400}, {{}, 0xfffffffffffffffb, 0x40, 0x1, 0x9, 0x3}, {{}, 0xfffffffffffffffc, 0x6, 0x2, 0xe, 0x10000}, {{}, 0xfffffffffffffffa, 0x1c, 0x1, 0x1, 0x100000401}, {{}, 0xfffffffffffffffd, 0x28, 0x4, 0x4000100, 0xfffffffffffffffb}], 0xb19, 0x0) r4 = openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DIOCGETSYNFLWATS(r4, 0xc0d04468, &(0x7f0000000080)) ioctl$FIONBIO(r3, 0x82907003, &(0x7f0000000140)=0x2) 124.941948ms ago: executing program 2 (id=632): ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0x800000004, [{&(0x7f000014c000/0x4000)=nil, &(0x7f00000b7000/0x3000)=nil, 0x200007fffffffffe}, {&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000124000/0x3000)=nil, 0x7fffffffffffffff}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000795000/0x2000)=nil, 0xb93a}, {&(0x7f00001da000/0x4000)=nil, &(0x7f00006d4000/0x2000)=nil, 0xfdfffffffffffff9}, {&(0x7f0000312000/0x2000)=nil, &(0x7f0000025000/0x3000)=nil, 0x4001}, {&(0x7f000060b000/0x2000)=nil, &(0x7f0000095000/0x3000)=nil, 0x1}, {&(0x7f0000123000/0x3000)=nil, &(0x7f000014d000/0x4000)=nil, 0x4}, {&(0x7f00002f3000/0x3000)=nil, &(0x7f000063b000/0x2000)=nil, 0xffffffffffffffff}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000026000/0x4000)=nil, 0x6}, {&(0x7f00001dc000/0x1000)=nil, &(0x7f00001db000/0x3000)=nil, 0xc6}, {&(0x7f0000392000/0x1000)=nil, &(0x7f00003a6000/0x3000)=nil, 0x1000}, {&(0x7f00006b8000/0x4000)=nil, &(0x7f0000688000/0x4000)=nil, 0x6}, {&(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x51c}, {&(0x7f000068b000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0xfffffffffffffff9}, {&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0xc0}, {&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000754000/0x4000)=nil, 0x4000009e}], './file0\x00', 0xfffffffa, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4339, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000]}) r0 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$TIOCSETA(r0, 0xc1084425, &(0x7f0000000040)={0x3, 0x0, 0xfffffffe, 0x5, "210d000000020000616161610000004021800600", 0x2000000, 0x5}) r1 = socket(0x2, 0x1, 0x0) r2 = dup(r1) setsockopt$sock_int(r2, 0xffff, 0x4, &(0x7f0000000000)=0xb312, 0x4) connect$inet(r2, &(0x7f0000000040)={0x10, 0x2, 0x3, 0x5}, 0x10) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = socket(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000000)={0x10, 0x2, 0x1, 0x200000e3}, 0x10) sendmmsg(r4, &(0x7f0000002940)={{0x0, 0x0, 0x0, 0x0, &(0x7f00000028c0)=ANY=[@ANYBLOB='`\x00'], 0x60}}, 0x38, 0xc) getsockopt(r3, 0x0, 0x13, 0x0, 0x0) 124.114473ms ago: executing program 4 (id=633): sysctl$net_inet6_icmp6(&(0x7f00000002c0)={0x4, 0x18, 0x3a, 0x9}, 0x4, &(0x7f0000000300)="3ae5ee9a82fe", &(0x7f0000000140)=0x6, 0x0, 0x0) sysctl$vm(&(0x7f0000002000)={0x2, 0x7}, 0x2, &(0x7f0000002040), 0x0, 0x0, 0x0) mprotect(&(0x7f0000497000/0x4000)=nil, 0x4000, 0x2) chflags(&(0x7f0000001280)='.\x00', 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) setrlimit(0x7, &(0x7f00000000c0)={0x6, 0xffffffffffff0001}) 123.819257ms ago: executing program 5 (id=634): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket$inet(0x2, 0x1, 0x0) getsockopt(r0, 0x0, 0x23, 0xffffffffffffffff, &(0x7f0000000040)) mknod(&(0x7f0000000000)='./bus\x00', 0x3a0914c44f7b202d, 0xf) r1 = open(&(0x7f0000000040)='./bus\x00', 0x10005, 0x0) ioctl$DIOCGETSTATES(r1, 0xc0104419, &(0x7f00000005c0)={0x5, &(0x7f0000000080)=[{0x0, ""/16, [{[@v6=@mcast2, @v6=@mcast2]}, {[@v4=@multicast1, @v6=@ipv4={""/10, ""/2, @remote}]}], {}, {}, @v6=@remote}, {0x0, ""/16, [{[@v6=@mcast2, @v4=@broadcast]}, {[@v6=@remote]}], {}, {}, @v6=@empty}, {0x0, ""/16, [{[@v6=@loopback, @v6=@mcast2]}, {[@v4=@multicast1, @v6=@ipv4={""/10, ""/2, @local}]}], {}, {}, @v4=@remote}, {0x0, ""/16, [{[@v4=@multicast2, @v6=@ipv4={""/10, ""/2, @loopback}]}, {[@v6=@mcast2, @v4=@multicast1]}], {}, {}, @v6}, {0x0, ""/16, [{[@v6=@ipv4, @v4=@rand_addr]}, {[@v6=@remote, @v6]}], {}, {}, @v4=@rand_addr}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) socket$inet(0x2, 0x1, 0x0) (async) getsockopt(r0, 0x0, 0x23, 0xffffffffffffffff, &(0x7f0000000040)) (async) mknod(&(0x7f0000000000)='./bus\x00', 0x3a0914c44f7b202d, 0xf) (async) open(&(0x7f0000000040)='./bus\x00', 0x10005, 0x0) (async) ioctl$DIOCGETSTATES(r1, 0xc0104419, &(0x7f00000005c0)={0x5, &(0x7f0000000080)=[{0x0, ""/16, [{[@v6=@mcast2, @v6=@mcast2]}, {[@v4=@multicast1, @v6=@ipv4={""/10, ""/2, @remote}]}], {}, {}, @v6=@remote}, {0x0, ""/16, [{[@v6=@mcast2, @v4=@broadcast]}, {[@v6=@remote]}], {}, {}, @v6=@empty}, {0x0, ""/16, [{[@v6=@loopback, @v6=@mcast2]}, {[@v4=@multicast1, @v6=@ipv4={""/10, ""/2, @local}]}], {}, {}, @v4=@remote}, {0x0, ""/16, [{[@v4=@multicast2, @v6=@ipv4={""/10, ""/2, @loopback}]}, {[@v6=@mcast2, @v4=@multicast1]}], {}, {}, @v6}, {0x0, ""/16, [{[@v6=@ipv4, @v4=@rand_addr]}, {[@v6=@remote, @v6]}], {}, {}, @v4=@rand_addr}]}) (async) 123.034733ms ago: executing program 6 (id=635): open(&(0x7f0000000040)='./file1\x00', 0x200, 0x104) r0 = socket(0x18, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x100000000000000}) sysctl$net_inet_tcp(0x0, 0x0, &(0x7f00000000c0)="9b18", 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket(0x18, 0x1, 0x0) close(r2) socket(0x18, 0x2, 0x0) connect$unix(r2, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) writev(r2, &(0x7f0000001b00)=[{0x0}], 0x1) r3 = kqueue() mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0xc4) unveil(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000300)='w\x00') unveil(&(0x7f0000000280)='.\x00', &(0x7f00000002c0)='r\x00') kevent(r3, &(0x7f00000001c0)=[{{r1}, 0xfffffffffffffffb, 0x45, 0x1, 0x1400000, 0x400000000000006}], 0x1006, 0x0, 0x37, 0x0) utimensat(r1, &(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000080)={{0xc0, 0x3ff}, {0xb8, 0x7ff}}, 0x2) acct(&(0x7f0000000280)='./file1\x00') 80.785277ms ago: executing program 4 (id=636): r0 = socket(0x18, 0x3, 0x7) setsockopt(r0, 0x1000000000029, 0x3e, &(0x7f0000000780)="00000080", 0x4) getsockopt(r0, 0x29, 0x3d, 0x0, 0x0) r1 = socket(0x2, 0x2, 0x0) sendmsg$unix(r1, &(0x7f00000018c0)={&(0x7f00000002c0)=@abs={0x3, 0x0, 0x0, 0x3}, 0x8, 0x0, 0x0, &(0x7f0000001800)=[@rights={0x14, 0xffff, 0x1, [r1, r1]}, @rights={0xc}], 0x20, 0xe}, 0x2) 77.163865ms ago: executing program 7 (id=637): ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, 0x0) sysctl$vm(&(0x7f0000000000)={0x2, 0x8}, 0x2, &(0x7f0000000080)="8d968249", &(0x7f0000000040)=0x4, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0xa, 0x4000, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) open$dir(&(0x7f0000000040)='./file0/file0\x00', 0x200, 0x60) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) rename(&(0x7f0000000080)='./file1\x00', &(0x7f0000000540)='./file0\x00') ioctl$DIOCSTART(0xffffffffffffff9c, 0x20004401) setsockopt(r0, 0x1000000029, 0x26, &(0x7f0000000000)="5ab7776a", 0x4) r1 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$WSMUXIO_LIST_DEVICES(r1, 0xc1045763, &(0x7f0000000100)={0x1, [{0x1, 0x3}, {0x2, 0x50ce}, {0x3, 0x8}, {0x1, 0x7fff}, {0x2, 0x5}, {0x2, 0xc5}, {0x2, 0x200}, {0x1, 0xd2}, {0x3}, {0x2, 0x7}, {0x2, 0x8065}, {0x3, 0xffffffff}, {0x2, 0x40}, {0x3, 0xa}, {0x3, 0x4}, {0x2, 0x1ff}, {0x3, 0x4}, {0x2, 0x8001}, {0x1, 0x7fffffff}, {0x1, 0x101}, {0x1, 0xe14}, {0x2, 0x2da}, {0x3, 0x5}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x3}, {0x2, 0x3}, {0x1, 0x3}, {0x1, 0x7fffffff}, {0x2, 0x6}, {0x0, 0x81}, {0x1, 0x73}]}) r2 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000002700), 0x80, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x4010, r2, 0x3) ioctl$WSKBDIO_SETMODE(r2, 0x80045713, &(0x7f0000002900)) ioctl$DIOCCLRSRCNODES(r2, 0x20004455) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, 0x0) (async) sysctl$vm(&(0x7f0000000000)={0x2, 0x8}, 0x2, &(0x7f0000000080)="8d968249", &(0x7f0000000040)=0x4, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) socket(0xa, 0x4000, 0x0) (async) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) (async) open$dir(&(0x7f0000000040)='./file0/file0\x00', 0x200, 0x60) (async) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) (async) rename(&(0x7f0000000080)='./file1\x00', &(0x7f0000000540)='./file0\x00') (async) ioctl$DIOCSTART(0xffffffffffffff9c, 0x20004401) (async) setsockopt(r0, 0x1000000029, 0x26, &(0x7f0000000000)="5ab7776a", 0x4) (async) openat$wsdisplay(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$WSMUXIO_LIST_DEVICES(r1, 0xc1045763, &(0x7f0000000100)={0x1, [{0x1, 0x3}, {0x2, 0x50ce}, {0x3, 0x8}, {0x1, 0x7fff}, {0x2, 0x5}, {0x2, 0xc5}, {0x2, 0x200}, {0x1, 0xd2}, {0x3}, {0x2, 0x7}, {0x2, 0x8065}, {0x3, 0xffffffff}, {0x2, 0x40}, {0x3, 0xa}, {0x3, 0x4}, {0x2, 0x1ff}, {0x3, 0x4}, {0x2, 0x8001}, {0x1, 0x7fffffff}, {0x1, 0x101}, {0x1, 0xe14}, {0x2, 0x2da}, {0x3, 0x5}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x3}, {0x2, 0x3}, {0x1, 0x3}, {0x1, 0x7fffffff}, {0x2, 0x6}, {0x0, 0x81}, {0x1, 0x73}]}) (async) openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000002700), 0x80, 0x0) (async) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x4010, r2, 0x3) (async) ioctl$WSKBDIO_SETMODE(r2, 0x80045713, &(0x7f0000002900)) (async) ioctl$DIOCCLRSRCNODES(r2, 0x20004455) (async) 76.779555ms ago: executing program 4 (id=638): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x2, 0x0, 0x0, 0x8000003}, {0x0, 0x0, 0x40}, {0x46, 0x0, 0x0, 0x37f}]}) (async) ioctl$WSMOUSEIO_SETPARAMS(0xffffffffffffffff, 0x80105727, &(0x7f00000000c0)={&(0x7f0000000040)=[{0x82, 0x7ff}, {0x26, 0x8807}, {0x45, 0x8}, {0x100, 0x200}, {0x24, 0x5}, {0x22, 0x6}], 0x6}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0xffac) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000140)=[0x33b, 0x0, 0x80000000, 0xc38, 0x3], 0x5, 0x10004, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f00000001c0)={0x80000000, 0x8, 0x3, 0xc0c0c0c0}) poll(&(0x7f0000000ac0)=[{0xffffffffffffff9c}], 0x20000000000000d7, 0x887e) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) sysctl$kern(&(0x7f0000000200)={0x1, 0x50}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xfe29, 0x0, 0xc) (async) execve(0x0, 0x0, 0x0) r1 = openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000000240), 0x200, 0x0) bind$inet(r1, &(0x7f0000000280)={0x10, 0x2, 0x3, 0x4}, 0x10) (async, rerun: 32) sysctl$kern(&(0x7f0000000000)={0x1, 0x32}, 0x2, 0x0, 0x0, &(0x7f0000001440)='\x00\x00\x00\x00', 0x4) (async, rerun: 32) chdir(&(0x7f0000000000)='./file0\x00') 76.25176ms ago: executing program 5 (id=639): ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x0, [{}, {0x1}, {0x0, 0x300}, {0x2, 0x3}, {0x0, 0x4000}, {0x2, 0xe}, {}, {0x3, 0x1}, {}, {0x4}, {}, {0x1}, {0x3, 0x6}, {0x2, 0x80000}, {0x3}, {0x1}, {0x2}, {0x1}, {0x1}, {0x0, 0x100}, {0x3}, {0x0, 0x4}, {0x2}, {0x2, 0x3}, {0x3}, {0x0, 0x5}, {0x2, 0x1}, {0x0, 0x10000}, {0x1, 0x80000000}, {0x1, 0x6}, {0x0, 0x2}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x18, 0x1, 0x0) setsockopt(r0, 0x1000000029, 0xc, &(0x7f0000000040)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000180)={0x1, [{0x1, 0x400}, {0x0, 0x40}, {0x2, 0x5}, {0x2, 0x2}, {0x1, 0x2}, {0x2, 0xcc23}, {0x1, 0x8}, {0x2}, {0x1, 0x1}, {0x3, 0x2000}, {0x3, 0x8}, {0x2, 0x800}, {0x1, 0xcd2f}, {0x3, 0x2}, {0x1, 0x2}, {0x3, 0x8}, {0x1, 0x7f35ab9a}, {0x1, 0x2}, {0x1, 0x8}, {0x3}, {0x1, 0x7}, {0x1, 0x7}, {0x1, 0x6}, {0x1, 0x1}, {0x1, 0x3}, {0x1, 0x7f}, {0x2, 0xb20}, {0x1}, {0x3, 0xc2}, {0x1, 0x2}, {0x2, 0x5}, {0x2, 0x4}]}) 75.825888ms ago: executing program 0 (id=640): mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1000, 0x0) r0 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0) ioctl$DIOCMAP(r0, 0xc0106477, &(0x7f0000000040)={&(0x7f0000000140)='./file0\x00', r0, 0x1}) syz_emit_ethernet(0x3e, &(0x7f0000000140)=ANY=[@ANYBLOB="64e1629b6174d08850c78fe609e9600d2e0b"]) execve(0x0, 0x0, 0x0) munmap(&(0x7f0000000000/0xf000)=nil, 0xf000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1000, 0x0) (async) openat$diskmap(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0) (async) ioctl$DIOCMAP(r0, 0xc0106477, &(0x7f0000000040)={&(0x7f0000000140)='./file0\x00', r0, 0x1}) (async) syz_emit_ethernet(0x3e, &(0x7f0000000140)=ANY=[@ANYBLOB="64e1629b6174d08850c78fe609e9600d2e0b"]) (async) execve(0x0, 0x0, 0x0) (async) munmap(&(0x7f0000000000/0xf000)=nil, 0xf000) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) 4.251719ms ago: executing program 2 (id=641): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000480)="8027a40723c1bdd9b4338c6a7160daf1a6a81fdf14f0de135c6a9ef9fb3e5b704bcbdf6b6c49e26e20b6f7af8cb5bf5deefce92d62f237e2a6314b62172914bdf55987b290d731a352ffea560ca05e47284da507e106165dc0662a55ecfb0cb5e9ae45e44752bb9597d8dfd71065dd9fdebb8ffff669ebdf02c07e9cef375cd9dd5b840b37ff811dfe6bc5d2734d3d8da9", 0x91}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="100000000000000001000000", @ANYRES32], 0x10, 0x1}, 0x406) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) writev(r1, &(0x7f0000000180)=[{&(0x7f00000000c0)="a1c4ed", 0x3}], 0x1) r2 = open(&(0x7f0000000300)='./file0\x00', 0x200, 0x0) fcntl$lock(r2, 0x9, &(0x7f0000000000)={0x3, 0x0, 0x7f, 0x1000302010008}) fstat(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r3, 0x0) sysctl$net_inet_divert(&(0x7f0000000000)={0x4, 0x2, 0x102, 0x2}, 0x4, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$net_pipex(&(0x7f0000000000)={0x4, 0x23, 0x1}, 0x3, 0x0, 0x0, 0x0, 0x0) syz_open_pts() 3.175216ms ago: executing program 3 (id=642): syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffff"]) sysctl$net_inet_tcp(&(0x7f0000000040)={0x4, 0x18, 0x6, 0x19}, 0x4, 0x0, 0x0, 0x0, 0x0) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x2, 0x0, 0x1d}, 0x4, &(0x7f0000001500), &(0x7f0000000000)=0x2, 0x0, 0x20) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x5900) r0 = open(&(0x7f0000000000)='./file0\x00', 0x8, 0x9bf2d37258647597) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$FIONBIO(r1, 0x8004667e, &(0x7f0000000180)=0xf7) readlinkat(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) stat(&(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BIOCSETIF(r0, 0x80084904, &(0x7f0000000380)={'tap', 0x0}) mkfifoat(r0, &(0x7f0000000100)='./file0\x00', 0x82) ioctl$DIOCMAP(0xffffffffffffffff, 0xc0106477, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x1}) sysctl$net_inet_tcp(0x0, 0x0, &(0x7f00000000c0)="9b180bc3eb987ab7fe", 0x0, 0x0, 0x0) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x10000100000001}}) seteuid(r2) mknod(&(0x7f0000000000)='./file0\x00', 0x8, 0x5d50) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r3 = open(&(0x7f0000000000)='./file0\x00', 0x200, 0xc0) ioctl$VNDIOCSET(r3, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) sysctl$net_inet_tcp(&(0x7f0000000240)={0x4, 0x2, 0x6, 0x9}, 0x4, &(0x7f00000002c0)="a9fbaa81eb4add1b6975bc434d78ea839c47b6e000e1933612a63a149311", &(0x7f0000000300)=0x1e, &(0x7f0000000340)="a5", 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r4 = socket(0x18, 0x1, 0x0) setuid(0xee01) r5 = syz_open_pts() ioctl$TIOCCONS(r5, 0x80047462, &(0x7f0000000000)=0x2) setsockopt(r4, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) connect$unix(r4, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) ioctl$BIOCSETIF(r0, 0x40384900, 0x0) close(r0) 2.582514ms ago: executing program 4 (id=643): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0xbe, 0x0) write(r0, &(0x7f0000000080)="00010000b6e28f02030000000000000000311bcb238010", 0xffdb) 2.274056ms ago: executing program 5 (id=644): sysctl$kern(&(0x7f00000000c0)={0x1, 0x14}, 0x2, &(0x7f0000000000)="4ba7841143", &(0x7f0000000040)=0x5, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) (async) sysctl$ddb(&(0x7f0000000000)={0x9, 0x2}, 0x2, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x0) mknod(&(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0xd02) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) rename(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) unlink(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') unlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) r0 = open$dir(&(0x7f0000000000)='.\x00', 0x8, 0x0) mknodat(r0, &(0x7f0000000040)='./file0\x00', 0x2000, 0x3361) 0s ago: executing program 6 (id=645): mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x5d4c) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x78e, 0x7) setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) truncate(&(0x7f0000000080)='./file0\x00', 0x840002ffff) mknod(&(0x7f0000000180)='./bus\x00', 0x2000, 0xd01) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc5005601, &(0x7f0000000000)={0x10, 0x0, [{&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000663000/0x4000)=nil, 0xfffffffffffff801}, {&(0x7f00006ac000/0x4000)=nil, 0x0, 0x3}, {&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil}, {0x0, &(0x7f0000b1b000/0x2000)=nil}, {0x0, &(0x7f0000ffb000/0x1000)=nil}, {&(0x7f0000000000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil}, {0x0, 0x0, 0x3}, {&(0x7f0000727000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil}, {&(0x7f0000ad4000/0x2000)=nil, &(0x7f0000826000/0x1000)=nil}, {&(0x7f0000110000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil}, {0x0, &(0x7f000065d000/0x2000)=nil, 0xdc9}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0xfffffffffffffffc}, {0x0, &(0x7f0000ffd000/0x3000)=nil}, {&(0x7f00004c1000/0x2000)=nil}, {&(0x7f00001cf000/0x4000)=nil}, {&(0x7f0000355000/0x13000)=nil, &(0x7f0000358000/0x2000)=nil, 0x80}], './file0\x00', 0x7, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0xfffffffc, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0xfe7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}) r1 = open(&(0x7f0000000240)='./bus\x00', 0x2, 0x111) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0xffffffff, 0xb, {0x0, 0x1}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r1, 0x84946467, &(0x7f0000000000)={0x0, 0xffffffffffffffba, 0x0}) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0) sysctl$kern(&(0x7f0000000200)={0x1, 0x16}, 0x2, 0x0, 0x0, 0x0, 0x0) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0) ioctl$BIOCSETF(r2, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x5c, 0x6d, 0x5, 0x8}, {0xb1, 0xf4, 0x24, 0xb00}, {0x86, 0x2c, 0x0, 0x8000004}]}) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) syz_emit_ethernet(0x1000e, &(0x7f0000000080)=ANY=[]) r3 = socket$unix(0x1, 0x1, 0x0) getsockopt$sock_timeval(r3, 0xffff, 0x1005, &(0x7f0000000b00), &(0x7f0000000b40)=0x10) r4 = open$dir(&(0x7f0000000000)='.\x00', 0x80, 0x80) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$sock_int(r5, 0xffff, 0x1021, 0x0, 0x0) mknodat(r4, &(0x7f00000002c0)='./file0\x00', 0x2000, 0x3361) r6 = open(&(0x7f0000000040)='./file0\x00', 0x200, 0x1ba) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$VNDIOCCLR(r6, 0xc0a86b06, &(0x7f0000000200)={0x0, 0x10000, 0x0}) write(r0, &(0x7f0000000700)="d929", 0x2) ktrace(&(0x7f00000002c0)='./file0\x00', 0x5, 0x40001022, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.5' (ED25519) to the list of known hosts. pckbd_enable: command error load: 2.03 not a controlling terminal Connection to 10.128.1.5 closed by remote host. +42!#% 72)4% &!),%$, %22./ 27, 42!#).' 34/00%$ OpenBSD/amd64 (ci-openbsd-multicore-2.us-central1-b.c.syzkaller.internal) (tty00) login: ktrace write failed, errno 27, tracing stopped uvm_fault(0xffffffff83a280b8, 0xffff800022482004, 0, 1) -> d fatal page fault in supervisor mode trap type 6 code 0 rip ffffffff8267c503 cs 8 rflags 10246 cr2 ffff800022482004 cpl 0 rsp ffff80003c3e8b10 gsbase 0xffff8000299bdff0 kgsbase 0x0 panic: trap type 6, code=0, pc=ffffffff8267c503 Starting stack trace... panic(ffffffff83486e42) at panic+0x1d0 kerntrap(ffff80003c3e8a60) at kerntrap+0x30b alltraps_kern_meltdown() at alltraps_kern_meltdown+0x7b ufs_lookup() at ufs_lookup+0x623 VOP_LOOKUP(fffffd805db7e880,ffff80003c3e8f30,ffff80003c3e8f60) at VOP_LOOKUP+0x6e vfs_lookup(ffff80003c3e8f00) at vfs_lookup+0x98a namei(ffff80003c3e8f00) at namei+0x7ca vn_open(ffff80003c3e8f00,81,0) at vn_open+0x178 diskmapioctl(5a00,c0106477,ffff80003c3e9220,81,ffff80002a242fa0) at diskmapioctl+0x217 VOP_IOCTL(fffffd806fca70e8,c0106477,ffff80003c3e9220,81,fffffd80097fd478,ffff80002a242fa0) at VOP_IOCTL+0xac vn_ioctl(fffffd807b027a00,c0106477,ffff80003c3e9220,ffff80002a242fa0) at vn_ioctl+0xf8 sys_ioctl(ffff80002a242fa0,ffff80003c3e9400,ffff80003c3e9350) at sys_ioctl+0x674 syscall(ffff80003c3e9400) at syscall+0xbd4 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xa5ced1060, count: 243 End of stack trace. WARNING: SPL NOT LOWERED ON SYSCALL 83 -1730242672 EXIT 0 4 Stopped at savectx+0xae: movl $0,%gs:0x688 TID PID UID PRFLAGS PFLAGS CPU COMMAND *265203 94170 0 0 0 1 syz-executor 60908 72468 0 0x2 0x1 0 syz-executor savectx() at savectx+0xae end of kernel end trace frame: 0x70c57a1b36a0, count: 14 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{1}> set $lines = 0 ddb{1}> set $maxwidth = 0 ddb{1}> show panic *cpu1: uvm_fault(0xffffffff83a280b8, 0xffff800022482004, 0, 1) -> d ddb{1}> trace savectx() at savectx+0xae end of kernel end trace frame: 0x70c57a1b36a0, count: -1 ddb{1}> show registers rdi 0 rsi 0 rbp 0xffff800039fc1200 rbx 0 rdx 0 rcx 0xffff80002a242a70 rax 0x3c r8 0xffff800039fc1130 r9 0x1 r10 0x4d8b7043cf0c959b r11 0xe018af3473918ee0 r12 0 r13 0 r14 0xffff80002a242a70 r15 0 rip 0xffffffff828473ee savectx+0xae cs 0x8 rflags 0x46 rsp 0xffff800039fc1180 ss 0x10 savectx+0xae: movl $0,%gs:0x688 ddb{1}> show proc PROC (syz-executor) tid=265203 pid=94170 tcnt=3 stat=onproc flags process=0 proc=0 runpri=86, usrpri=86, slppri=17, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff80003abdda10,0xffff80002a242fb0 process=0xffff80002a3a0018 user=0xffff800039fbc000, vmspace=0xfffffd806c5833f0 estcpu=36, cpticks=5, pctcpu=0.0, user=4, sys=1, intr=0 ddb{1}>