last executing test programs: 466.301085ms ago: executing program 0 (id=1): r0 = openat$speaker(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) writev(r0, &(0x7f00000012c0)=[{&(0x7f0000004540)="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", 0x119}], 0x1) writev(r0, &(0x7f0000002100)=[{&(0x7f0000000000)="968ce1c69d6898ad874ffb39b42f574f4f4c", 0x12}], 0x1) (async) execve(0x0, 0x0, 0x0) 462.26772ms ago: executing program 1 (id=2): setrlimit(0x8, &(0x7f0000000980)={0x44, 0x62}) ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, &(0x7f0000000400)={0x1000, 0x8000, {[0x9, 0x8, 0x4, 0xf5f, 0xfffffffffffffffa, 0x1, 0xd, 0x81, 0x1, 0x3, 0x8, 0xfff, 0x10000, 0x401, 0x400, 0x5, 0x830, 0x8], [0x7, 0x13c, 0x57e1, 0x8, 0x5a, 0x4c47, 0x8001, 0x45a11e1a, 0x4e6, 0x8000000000000001], [0x7, 0xb9, 0x40, 0xdec, 0x8, 0xe0c, 0xaa0], [0x7, 0x401, 0xff, 0x8, 0x8, 0x80000001], [{0x6, 0x8, 0x0, 0x3}, {0x7f, 0x10000000, 0x5, 0xffff}, {0x0, 0x665, 0x1513cd8, 0x40}, {0x3, 0x400, 0x4, 0x9}, {0x7, 0x3, 0x7, 0x16}, {0x64a8, 0x3, 0x7fffffff, 0x4}, {0x1, 0x7f, 0x98b, 0x10001}, {0xfffb, 0x6f9bf0b, 0x8, 0xfffffffffffffff8}], {0xf983, 0x7, 0x8001, 0x20e1ec75}, {0x5a, 0xfffffff8, 0x4, 0x7}}}) syz_open_pts() (async) r0 = syz_open_pts() close(r0) openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) (async) r1 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) socket(0x18, 0x3, 0x0) (async) r2 = socket(0x18, 0x3, 0x0) close(r2) (async) close(r2) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x22, 0x411}, 0x4, 0x10003, 0x0, 0x0, 0x0, 0x2, 0x40000000000, 0xe63}) r3 = socket(0x18, 0x2, 0x0) close(r3) socket(0x800000018, 0x1, 0x0) (async) r4 = socket(0x800000018, 0x1, 0x0) setsockopt$sock_int(r4, 0xffff, 0x1000, &(0x7f0000000000)=0x1, 0x4) bind$unix(r4, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) connect$unix(r3, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x100000000000000, 0xffffffffffffffff}) (async) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x100000000000000, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) execve(0x0, 0x0, 0x0) ioctl$WSDISPLAYIO_SMODE(r1, 0x8004574c, &(0x7f0000000040)=0x2) (async) ioctl$WSDISPLAYIO_SMODE(r1, 0x8004574c, &(0x7f0000000040)=0x2) r5 = syz_open_pts() ioctl$TIOCSETAF(r5, 0x802c7416, &(0x7f00000001c0)={0x809789, 0x9, 0x1, 0x8, "bf08000100f1a55910812cc900", 0x0, 0xff}) writev(r0, &(0x7f0000000700)=[{&(0x7f0000000080)="34eb4cd59e8456ebc0881681c60e1cd9e0bf01b618b3cb934394c5951c1db0fd943a", 0xff99}], 0x1) r6 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCSETWF(r6, 0x80104277, &(0x7f00000000c0)={0x1, &(0x7f00000001c0)=[{0x25, 0x40, 0x6, 0xfffffffe}]}) (async) ioctl$BIOCSETWF(r6, 0x80104277, &(0x7f00000000c0)={0x1, &(0x7f00000001c0)=[{0x25, 0x40, 0x6, 0xfffffffe}]}) socket(0x2, 0x4000, 0x9) 455.302839ms ago: executing program 4 (id=5): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ffa000/0x3000)=nil) shmat(r0, &(0x7f0000001000/0x3000)=nil, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) getsockopt(r1, 0x0, 0x13, 0xffffffffffffffff, &(0x7f0000000040)) r2 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) r3 = syz_open_pts() ioctl$TIOCSTOP(r3, 0x2000746f) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000140)='\b', 0xfffffd83}], 0x1) r4 = dup2(r2, r2) ioctl$WSKBDIO_GETMAP(r4, 0x40047477, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r5 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$VMM_IOC_CREATE(r5, 0xc2585601, &(0x7f0000000040)={0x10, 0x97, [{&(0x7f0000332000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x8}, {&(0x7f000073e000/0x3000)=nil, &(0x7f000042b000/0x8000)=nil}, {&(0x7f0000ffa000/0x3000)=nil, &(0x7f00002ea000/0x1000)=nil, 0x4}, {&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x7}, {&(0x7f000022f000/0x3000)=nil, &(0x7f0000733000/0x2000)=nil, 0x3}, {&(0x7f0000ffa000/0x3000)=nil, &(0x7f000029c000/0x2000)=nil, 0x8000000000000001}, {&(0x7f0000704000/0x2000)=nil, &(0x7f000027f000/0x2000)=nil, 0x8000}, {&(0x7f0000371000/0x4000)=nil, &(0x7f0000403000/0x2000)=nil, 0x9}, {&(0x7f0000348000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x78c}, {&(0x7f00003f7000/0x2000)=nil, &(0x7f0000764000/0xd000)=nil, 0x6}, {&(0x7f00006b4000/0x2000)=nil, &(0x7f0000716000/0x1000)=nil, 0xffffffffffffffff}, {&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000640000/0x4000)=nil, 0x80000000}, {&(0x7f00001f2000/0x3000)=nil, &(0x7f0000586000/0x1000)=nil, 0xbf40}, {&(0x7f0000308000/0x1000)=nil, &(0x7f000026d000/0x2000)=nil, 0x800}, {&(0x7f0000425000/0x4000)=nil, &(0x7f000059a000/0x3000)=nil, 0x4}, {&(0x7f0000fff000/0x1000)=nil, &(0x7f0000142000/0x2000)=nil, 0x6}], './file0\x00', 0x1}) socket$inet6(0x18, 0x3, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000500)={0x3, &(0x7f00000000c0)=[{}, {0x1, 0x0, 0x0, 0x2}, {0x4, 0x0, 0x0, 0xff}]}) sysctl$net_inet_etherip(&(0x7f0000000000)={0x4, 0x2, 0x61, 0x6}, 0x4, 0x0, 0x0, 0x0, 0x0) sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xff0a, 0x0, 0x37) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x205310) open$dir(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r6 = openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='.\x00', 0x20, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="89000000ffff000001"], 0x9}, 0x0) sendmsg(r7, &(0x7f0000000380)={0x0, 0x32c, 0x0, 0x0, &(0x7f0000000000), 0x90}, 0x0) ioctl$TIOCSETA(r6, 0x20004102, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x10000, 0x0) 439.681552ms ago: executing program 3 (id=4): ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r0 = socket(0x18, 0x1, 0x0) ioctl$FIONREAD(r0, 0x80206916, &(0x7f00000001c0)) r1 = socket(0x11, 0x3, 0x0) sendto$unix(r1, &(0x7f0000000140)="b1000503000004000000000007000000331c13fecea10500fef96ec0c72fd3bc7ae30200004e3039d2d236acf20b7804be38164991f7c8ad5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b1257aea8c500002002fbfe0c2300008abfba090000000835713f00219b8db5ccd2feae000000000000b71d89e0000407", 0xb1, 0x0, 0x0, 0x0) 412.632176ms ago: executing program 5 (id=6): sysctl$kern(&(0x7f0000000000)={0x1, 0x48}, 0x2, 0x0, 0x0, 0x0, 0x14) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x400, 0x144) write(r0, &(0x7f0000000080)="7c12856dfebd7dfeaa4f109a717e68041d7aefd7c7b6261a58b339b40098f73ac9c7834dab916b28e819e9cabf32295adf7ac618eb30fb518cf417e4eb0118c359f9127008673bf1c4ff3d8eaf59797d0f253e76129ea31fff4a351fc456ea9af579f9dbdd68800732253898283586ce6a9ae4b2e5e8a147f50578b7d6aa5421ceb23d1f18e0fe6b4a4d45218121869b000b81", 0x93) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) sysctl$kern(&(0x7f0000000000), 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x4) 402.698767ms ago: executing program 7 (id=8): mlock(&(0x7f0000000000/0x2000)=nil, 0x2000) (async) mlock(&(0x7f0000000000/0x2000)=nil, 0x2000) minherit(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3) sysctl$kern(&(0x7f00000000c0)={0x1, 0x50}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xfe10, 0x0, 0x37) 319.600069ms ago: executing program 3 (id=9): r0 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) ioctl$VMM_IOC_INFO(r0, 0xc0185603, &(0x7f0000000080)={0x0, 0x0, 0x0}) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2000, 0x5cda) r1 = open(&(0x7f0000000480)='./file0\x00', 0x1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r2 = socket$inet(0x2, 0x5, 0x8) setsockopt(r2, 0x0, 0x18, 0x0, 0x0) write(r1, &(0x7f0000000100)="8a522c6b8a8460561e290ca762e8d6c739d5dd7f0153b7a50498cb60ab818b16929d3bf742c57351df76ca9ec87e92fa9f010342ace3a6ffcf5c4b75c4c160f4acfe629a5717f5f5b7cad5c4e10a76103ea7945a70ea5a8999b18da379b691138c7d8a1529b81a7fb4540022f1324c3dda210f6f132101dfe0acc149685fdaca2fe92b8d4327e9872642c818370d60e800e0f8b2a66ead8ef0ddc9f0258f2275a9a0aefa8edd053e80a46946b0c0df080bb0d9c214c6a2393db966f0c0ace000", 0xc0) 319.334147ms ago: executing program 0 (id=10): getdents(0xffffffffffffffff, &(0x7f0000002180)=""/4068, 0xffd5) 312.452797ms ago: executing program 5 (id=12): socket$unix(0x1, 0x2, 0x0) (async) r0 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0) ioctl$DIOCMAP(r0, 0xc0106477, &(0x7f00000000c0)={&(0x7f0000000140)='./file0\x00', r0, 0x3}) (async) getuid() 312.043796ms ago: executing program 0 (id=13): kevent(0xffffffffffffffff, &(0x7f0000000040)=[{{}, 0x0, 0x0, 0x0, 0x6}], 0x0, 0x0, 0x0, 0x0) (async) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x11}, 0x6, &(0x7f0000000080), 0x0, 0x0, 0x0) r0 = socket(0x18, 0x3, 0x0) setsockopt(r0, 0x1000000029, 0x3e, &(0x7f0000000000)="5ab7776a", 0x4) (async) r1 = socket$inet6(0x18, 0x3, 0x0) dup2(r0, r1) (async) getsockopt(r1, 0x29, 0x33, 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) (async) r2 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VNDIOCSET(r2, 0xc0384600, &(0x7f0000000100)={&(0x7f0000000000)='./file0\x00', 0x80000001, 0x0}) (async) mknod(&(0x7f00000000c0)='./file0\x00', 0x80, 0x1) 311.524339ms ago: executing program 5 (id=14): sysctl$vm_swapencrypt(&(0x7f0000000080), 0x3, &(0x7f00000000c0)="74d5d7a0", &(0x7f0000000000)=0x4, 0x0, 0x0) ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x0, [{0x0, 0x100}, {}, {}, {0x2}, {}, {}, {}, {0x0, 0xc8}, {0x2}, {}, {0x0, 0x3}, {}, {0x0, 0xfffffffd}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x8}]}) sysctl$hw(&(0x7f0000000000)={0x6, 0xf}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$hw(&(0x7f0000000000)={0x7, 0x5}, 0x2, &(0x7f0000000040), &(0x7f0000000080), 0x0, 0x0) sysctl$vm_swapencrypt(&(0x7f0000000040)={0x2, 0x5, 0x1}, 0x3, &(0x7f0000000100)="7ce6e192ee4955b05d645b022c1a6223917e7c4fe135056f729c4e4c4d7cf90b7fc19b81a8f5e26d063f7a37a513c70d3018d8edab1027c7b7482c70ee4b82eea5ec40d6c27ad0011e4af05f7e4ea228e8e94dd982559f5def0dad02d4745ef36636dcad10317401ae76399379640724bd1cafdfb4e43b69e24599937f94f409e33ae6c1ad0c6dbf6aa24db58e44975f3456dc599d68849e241381be5b05d1dccfacb1c0cc78917527cd62e6d9ac8549269f700c94a674d17b600207", &(0x7f00000001c0)=0xbc, &(0x7f0000000200)="f00de9c6adb8fde815c41f2ec75bb28f33cf88ae9156da50978526910c5e9ae6ba3c6f945180ece17476b6f2d765d8f407ccced218df1159a99bd82eacd7c42bcdc96324b3dc98fa9e20335a097ca3fd198cd82c3be612e0197d6135e9775702b9f38124e8cc313867b1a12d965946e055fb299f52611a740bfcd0d54562716d8a93023b163cdb52227f8294e12489aee4894bdefe9d600bec462bea2254b18f30c34339b1e9f9d199c03ef7ba0e0ab27e9c26b94d658c4a145fa6413f598e8b2bcb4490f75373", 0xc7) 282.050813ms ago: executing program 3 (id=15): r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0xffff, 0x1000, &(0x7f0000000000)=0x7, 0x4) sysctl$kern(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$TIOCSETA(r0, 0xc0104419, &(0x7f0000000000)={0x0, 0x2, 0x1300, 0x4000, "97a2224ff1c14649ebb178926cc9795a6b47c1d1", 0x8, 0x1}) r1 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r2 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000400), 0x401, 0x0) ioctl$WSMUXIO_ADD_DEVICE(r2, 0x80085761, &(0x7f0000000040)={0x1}) ioctl$FIONREAD(r1, 0x4004667f, &(0x7f0000000040)) sysctl$net_inet_ip(&(0x7f0000000080)={0x4, 0x12, 0x0, 0x6}, 0x4, 0x0, 0x0, 0x0, 0x0) 278.345031ms ago: executing program 1 (id=16): r0 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$WSDISPLAYIO_GBURNER(r0, 0x400c5752, &(0x7f0000000040)) getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0xc) r4 = getegid() getgroups(0x2, &(0x7f00000000c0)=[r3, r4]) r7 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0x8, 0x0) ioctl$BIOCSETF(r7, 0x80104267, &(0x7f0000000180)={0x5, &(0x7f0000000140)=[{0x1, 0x3, 0x53, 0x8}, {0x6, 0xc, 0xd}, {0xfc01, 0x4, 0x0, 0x6342}, {0xfff9, 0x2, 0x5, 0x7}, {0x10, 0x2, 0x1, 0x828f}]}) ioctl$BIOCSETIF(r7, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r8 = msgget(0x2, 0x482) msgctl$IPC_STAT(r8, 0x2, &(0x7f0000000200)=""/233) r9 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) msgctl$IPC_STAT(r8, 0x2, &(0x7f0000000340)=""/41) r10 = socket(0x2, 0x8000, 0x17) r11 = openat$pci(0xffffffffffffff9c, &(0x7f0000000380), 0x200, 0x0) socket(0x1, 0x2, 0xb) fcntl$setstatus(r9, 0x4, 0x8) ioctl$BIOCSETIF(r7, 0x8020426c, &(0x7f00000003c0)={'tap', 0x0}) ioctl$WSDISPLAYIO_ADDSCREEN(r0, 0x80245753, &(0x7f0000000400)={0x2, './file0\x00', './file0\x00'}) fchdir(r11) openat$vnd(0xffffffffffffff9c, &(0x7f0000000440), 0x400, 0x0) r12 = msgget(0x1, 0x708) msgctl$IPC_SET(r12, 0x1, &(0x7f0000000480)={{0x5, r2, r3, r2, r6, 0xa, 0x7ff}, 0x9, 0x7, r1, r1, 0xc9, 0xffff800000000000, 0x2f79fc4e, 0xe29d}) setegid(r3) openat$pci(0xffffffffffffff9c, &(0x7f0000000500), 0x80, 0x0) ioctl$BIOCGETIF(r9, 0x4020426b, &(0x7f00000005c0)={""/16, @ifru_data=&(0x7f0000000540)="275f969198a137f9b37367ce05e73f1d5a8d3dfbb218826fe3a48e4e29714b5e502d7ea0e6ce58f48d054117027c995f4621ae8013f315bd14f46f4374ba02acd82606d7f6058fcfac27ebb9b4d045aa593a5692aa15ec0b0e6d5d91c7a21b012cc09666cb1f4b65ba951bcbc83273cea68c6ed9e6f51eed"}) setuid(r2) ioctl$BIOCSETF(r9, 0x80104267, &(0x7f0000000640)={0x4, &(0x7f0000000600)=[{0x6, 0x4, 0x5, 0x6}, {0x7, 0x9, 0xe, 0xffff}, {0x0, 0x7, 0x10, 0x80000001}, {0x5, 0xd0, 0xc4, 0x8}]}) ioctl$WSDISPLAYIO_GVIDEO(r0, 0x40045744, &(0x7f0000000680)) connect$unix(r10, &(0x7f00000006c0)=@abs={0x0, 0x0, 0x3}, 0x8) msgctl$IPC_SET(r8, 0x1, &(0x7f0000000780)={{0x6, r2, r5, r2, r4, 0x40, 0x7}, 0x2, 0xfe4, 0x0, r1, 0x8914, 0x8000000000000001, 0x9, 0xa0}) 275.251854ms ago: executing program 6 (id=17): syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) (async) writev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000000)="c886b4d3e0", 0x5}], 0x1) (async) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) r0 = socket(0x2, 0x3, 0x3) setsockopt$inet_opts(r0, 0x0, 0x200000000000a, &(0x7f00000000c0)="b5", 0x1) connect$unix(r0, &(0x7f0000000000), 0x10) (async) writev(r0, &(0x7f0000000a80)=[{0x0}], 0x1) (async) sysctl$kern(&(0x7f0000000600)={0x6, 0x1c}, 0x2, 0x0, 0x0, 0x0, 0x0) setitimer(0x0, &(0x7f0000000080)={{0x9, 0x7}, {0x0, 0x6}}, 0x0) (async) open$dir(&(0x7f0000000040)='./file0\x00', 0xf02, 0x0) select(0x40, &(0x7f0000000000)={0xfffffffffffffffd, 0x2, 0x100, 0xfffffffffffffffd, 0x3, 0x6, 0xf18}, 0x0, 0x0, 0x0) (async) setrlimit(0x8, &(0x7f0000000980)={0x7, 0x9}) (async) r1 = syz_open_pts() close(r1) (async) syz_open_pts() (async) ioctl$FIONREAD(r1, 0x4004667f, &(0x7f0000000000)) (async) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x40000802) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x2) ioctl$TIOCSDTR(r2, 0x20007479) mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4) (async) r3 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000340), 0x20, 0x0) ioctl$WSMOUSEIO_SETPARAMS(r3, 0x80105728, &(0x7f00000000c0)={&(0x7f0000000040)=[{0x8, 0x10000}], 0x1}) (async) r4 = socket(0x2, 0x2, 0x0) close(r4) (async) r5 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCSETWF(r5, 0x80104277, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x83a1, 0x1, 0x1, 0xfffff4b2}]}) (async) r6 = socket(0x2, 0x2, 0x0) connect$unix(r6, &(0x7f0000000000), 0x10) 274.77599ms ago: executing program 0 (id=18): openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) ioctl$TIOCSETAF(0xffffffffffffffff, 0x4004667f, 0x0) mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f0000000080)={0x10, 0x3, [{&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x5000)=nil, 0x4000000}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ebf000/0x7000)=nil, 0xfffffffffffffff1}, {&(0x7f0000e5f000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x5fb6}, {&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x7}, {&(0x7f0000800000/0x800000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x1000000000000000}, {&(0x7f0000f56000/0x1000)=nil, &(0x7f00008fb000/0x2000)=nil, 0x3}, {&(0x7f0000850000/0x4000)=nil, &(0x7f0000429000/0x2000)=nil}, {&(0x7f000090b000/0x4000)=nil, &(0x7f0000862000/0x2000)=nil}, {&(0x7f0000d3d000/0x4000)=nil, &(0x7f0000aff000/0x1000)=nil}, {&(0x7f0000f6a000/0x2000)=nil, &(0x7f0000887000/0x4000)=nil}, {&(0x7f0000dad000/0x2000)=nil, &(0x7f0000ff2000/0x1000)=nil, 0x9}, {&(0x7f0000821000/0x2000)=nil, &(0x7f0000e03000/0x3000)=nil, 0x4}, {&(0x7f0000c64000/0x14000)=nil, &(0x7f0000d82000/0x3000)=nil, 0x2}, {&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000a65000/0x4000)=nil, 0x3}, {&(0x7f0000d2c000/0x2000)=nil, &(0x7f0000c5e000/0x4000)=nil, 0x8}], './file0\x00', 0x6d}) r0 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000100), 0x20, 0x0) ioctl$VNDIOCSET(r0, 0xc0384600, &(0x7f00000001c0)={&(0x7f0000000140)='./file0\x00', 0x81, 0x0}) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x2, 0x0, &(0x7f0000000080), 0x0, 0x0) semctl$GETALL(0x0, 0x0, 0x6, &(0x7f0000000600)=""/159) select(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffff7fc}, 0x0, 0x0, 0x0) unveil(0x0, &(0x7f00000002c0)='x\x00') unveil(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='x\x00') unveil(&(0x7f0000000340)='./file1\x00', &(0x7f0000000380)='r\x00') openat$pci(0xffffffffffffff9c, 0x0, 0x200, 0x0) execve(0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = socket(0x2, 0x4001, 0x0) shutdown(r1, 0x0) mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0x450c) r2 = openat$vnd(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$VNDIOCSET(r2, 0xc0384600, &(0x7f0000000140)={&(0x7f00000000c0)='./bus\x00', 0x497, 0x0}) r3 = dup(r1) r4 = fcntl$dupfd(r3, 0x2, 0xffffffffffffffff) close(r4) r5 = socket(0x2, 0x2, 0x0) r6 = dup2(r3, r4) connect$unix(r5, &(0x7f0000000000), 0x10) setsockopt$sock_int(r6, 0xffff, 0x1023, &(0x7f0000000040), 0x4) 274.47845ms ago: executing program 5 (id=19): socket$inet(0x2, 0x3, 0x0) (async) sysctl$fs(&(0x7f0000000000)={0x3, 0x1}, 0x2, 0x0, 0x0, 0x0, 0x0) 222.175428ms ago: executing program 3 (id=20): setrlimit(0x8, &(0x7f0000000980)={0x7, 0x51}) r0 = syz_open_pts() close(r0) r1 = syz_open_pts() ioctl$FIOASYNC(r0, 0x80047469, &(0x7f00000000c0)=0x5) writev(r0, &(0x7f0000000440)=[{0x0}], 0x1) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x6, {0x100000000000000, 0x9}}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x74, 0x0, 0x8, 0x2}, {0x87, 0xc, 0xfe}, {0x16, 0x0, 0x2, 0x40cfc8e0}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket(0x18, 0x2, 0x0) setsockopt(r2, 0x1000000000029, 0x9, &(0x7f0000000040)="03000000", 0x4) r3 = dup(r2) setsockopt(r3, 0x1000000000029, 0xc, &(0x7f0000000000)="ffdaf64c000000004f0527000000055e473e0000", 0x14) writev(r0, &(0x7f0000000500)=[{0x0}], 0x1) write(r0, 0x0, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f0000002a00)=""/4108, 0x100c}], 0x1) r4 = open(&(0x7f0000000380)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7949) writev(r4, &(0x7f0000000080)=[{&(0x7f0000000040)='#!', 0x2}], 0x1) write(r4, &(0x7f00000000c0)="1b20201f00000069db0000df4278ad535c2a4105008c2f39e4e6987f31dbf156010000000a", 0x25) ioctl$KDDISABIO(r4, 0x20004b3d) 207.544915ms ago: executing program 5 (id=21): mkdir(&(0x7f0000001c00)='./file0\x00', 0x2) ioctl$WSDISPLAYIO_LSFONT(0xffffffffffffff9c, 0xc058574e, &(0x7f0000000100)) symlink(&(0x7f0000000200)='./file2\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') open(&(0x7f0000000880)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x400, 0x159) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x88) chroot(&(0x7f0000000100)='./file0/file0\x00') mknod(&(0x7f0000000040)='./file0\x00', 0x8, 0x6a6) setrlimit(0x5, 0x0) syz_emit_ethernet(0xfbf, &(0x7f0000002080)=ANY=[@ANYBLOB="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"]) writev(0xffffffffffffffff, 0x0, 0x0) unlink(&(0x7f0000000c80)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') sysctl$kern(&(0x7f0000000000)={0x1, 0xa}, 0x2, 0x0, 0x0, 0x0, 0x0) open$dir(&(0x7f0000000080)='./file1\x00', 0x80, 0x104) openat$bpf(0xffffffffffffff9c, 0x0, 0xa5bab65d1b5dc69c, 0x0) r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$TIOCSETA(r0, 0xcd50441a, &(0x7f0000000040)={0x2, 0x0, 0xffeffffc, 0xfffffffc, "000000190000009f17b26900b60000004000", 0x1ffffffc, 0x7}) ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x0, "0100012d29fb000700000000098002005a00"}) sysctl$kern(&(0x7f0000000040)={0x1, 0x45}, 0x3, &(0x7f0000000180)="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", &(0x7f0000000080)=0xaa, &(0x7f0000000340)="5a67923ef0cb189971421989ebcff78831a7581e2f27caa362f1363042efb27688b2c899220fb2fe37e467d974592496856ca7b78060998608c2f952e43bc0bf11555cc5cb0fe17b2ec1be389871829bfe10dd4c4d2c8f9da2bd2868fd86791dc09dc4fa89a217458bdaed31003fdc3a7323189ba3ccbad6c8af17516e4557f61ad20180000000000000125f568ca7d3396b9057255f381855110eb3a673713716cdf010ddfa7977f92cf061ad125ca670353b45d53aae196b00271f9d3452b523b3dea22d6027625614312183724b71c7eb02083a410c1c99fa455013521f98686e472b70b560f7021f567adf4d", 0x17) mknod$loop(&(0x7f0000002040)='./file0/file0\x00', 0x8000, 0x1) ioctl$BIOCPROMISC(r0, 0x20004269) syz_extract_tcp_res$synack(&(0x7f00000002c0), 0x1, 0x0) chmod(&(0x7f00000000c0)='./file0/file0\x00', 0xd) 206.149613ms ago: executing program 1 (id=22): r0 = getpid() setpgid(0x0, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f00000000c0)={{}, 0x0, 0x0, r0}) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) ioctl$WSKBDIO_GETMAP(r1, 0x80047476, &(0x7f0000000100)={0x0, 0x0}) r2 = fcntl$getown(r1, 0x5) r3 = getppid() setpgid(0x0, r3) ktrace(0x0, 0x5, 0x128, r2) getpgid(r2) 205.307639ms ago: executing program 6 (id=23): r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0xae828e137847f62, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000080)=ANY=[@ANYBLOB="91a6e34dd8bbaaaaaaaaaabb0800470000300000000000029078ffffffff0068db0007030007030000000d008078"]) ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x0, [{0x0, 0x100}, {}, {}, {0x3}, {}, {}, {}, {0x0, 0xc8}, {0x3, 0xfffffffc}, {0x1}, {0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {0x0, 0x8}, {0x0, 0x4}]}) fchmodat(r0, &(0x7f0000000180)='./file1\x00', 0x80, 0x2) r1 = socket(0x800000018, 0x1, 0x0) sendto(0xffffffffffffffff, 0x0, 0x58, 0x0, &(0x7f0000000080)=@in6={0x18, 0x3, 0x0, 0x1ff}, 0xc) setsockopt$sock_int(r1, 0xffff, 0x1, &(0x7f00000005c0)=0x3ff, 0x4) r2 = socket(0x11, 0x3, 0x0) r3 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f00000001c0), 0x80, 0x0) ioctl$FIONREAD(r3, 0x4004667f, &(0x7f0000000200)) sendto$unix(r2, &(0x7f0000000000)="b1000504000004000000a30000110000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x0, 0x0, 0x0) bind$unix(r1, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c) getsockname$unix(r1, 0x0, &(0x7f00000010c0)) sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b1000513000000000000000004000000000013fecea10500fef96ecf2ac72fd3357ae30200004e3039d2d236acf20b7804be38164991f7c8cf7f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f335c223e7d0c032bfa896443a41002000000720fd38bfbb770c1f5a872c88106002ec5890400000000000000361b1257aea8c500002002fbfe0c2300008abfba0900000008e371a3f8343712051eeab7196fcbd80407", 0xa9, 0x0, 0x0, 0x0) sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b1000501600000000000000007000000330002000000000000f96ecfc72fd3357ae320b37b673039d2d236acf20b7804be38164991f7c8cf5f882b297be1aa5b236de351e2f0ac3ebbc257699a5f139b672f4d335d223e7d026ba8af6300372821", 0x61, 0x0, 0x0, 0x0) r4 = socket(0x11, 0x3, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendto$unix(r4, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x0, 0x0, 0x0) close(r0) setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) truncate(&(0x7f00000000c0)='./file0\x00', 0x6001000004) madvise(&(0x7f0000641000/0x1000)=nil, 0x1000, 0x8a875165405e1fd4) truncate(&(0x7f0000000040)='./file0\x00', 0x30000) 144.133008ms ago: executing program 1 (id=24): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="28000000ffff000001"], 0x28}, 0x0) recvmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/239, 0xef}], 0x1, 0x0}, 0x40) r2 = dup2(r0, r1) ioctl$WSDISPLAYIO_GMODE(r2, 0x4004574b, &(0x7f0000000000)) 68.089765ms ago: executing program 5 (id=25): getitimer(0x1, &(0x7f0000000140)) (async) getitimer(0x1, &(0x7f0000000140)) syz_open_pts() (async) r0 = syz_open_pts() semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x22, 0x200}, 0x2000000000000, 0x8000}) (async) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x22, 0x200}, 0x2000000000000, 0x8000}) socket(0x18, 0x3, 0x0) (async) r1 = socket(0x18, 0x3, 0x0) connect$unix(r1, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0xa) getsockname$inet(r1, &(0x7f0000000080), &(0x7f0000000000)=0xfffffffffffffe22) r2 = socket(0x800000018, 0x1, 0x0) bind$unix(r2, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f00000007c0)={0x0, 0x1, 0xffefbff6, 0x100000, "0000ffffffffff9b752d0200", 0x5}) ioctl$TIOCCHKVERAUTH(r0, 0x2000741e) ioctl$WSMUXIO_REMOVE_DEVICE(0xffffffffffffffff, 0x80085762, &(0x7f0000000040)={0x1}) (async) ioctl$WSMUXIO_REMOVE_DEVICE(0xffffffffffffffff, 0x80085762, &(0x7f0000000040)={0x1}) socket(0x18, 0x3, 0x3a) (async) r3 = socket(0x18, 0x3, 0x3a) ioctl$TIOCFLUSH(r0, 0x80047410, &(0x7f0000000240)) setsockopt(r3, 0x29, 0x6c, &(0x7f0000000040), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r3, 0x29, 0x66, &(0x7f0000000200)={0x0, 0x0, 0x5, 0x71bb, 0x4}, 0xc) (async) setsockopt$inet6_MRT6_ADD_MIF(r3, 0x29, 0x66, &(0x7f0000000200)={0x0, 0x0, 0x5, 0x71bb, 0x4}, 0xc) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0xe8, 0x0) r5 = fcntl$dupfd(r4, 0x3, 0xffffffffffffffff) ioctl$FIONREAD(r5, 0x8020690c, &(0x7f0000000080)) (async) ioctl$FIONREAD(r5, 0x8020690c, &(0x7f0000000080)) setsockopt$inet6_MRT6_ADD_MIF(r3, 0x29, 0x66, &(0x7f0000000180)={0x3, 0x1, 0x0, 0x99d9, 0x8}, 0xc) writev(r0, &(0x7f0000000680)=[{&(0x7f0000000300)="7659aeb94832406f050635f0b67c24feb2e17e5f3d48e6cb95bdcc0fc851e646ecfa588c53283c4dd3ed77706f3868cacea79983bdfb42d2706563dca286008274eae9054ffd5b7324b408516b9ed309d475adb4902167f1848b9a2f27ee8f2bb2e272b9dd203c7ba7bba2d58d398fefe1ea9cec817c66ac97ab311e40c8897f766829a431d075233f3506fcfd47964d82d25e55000000000000008dca9d20b3f73a87f1c8ed4a6faac9984fe38154a9f020703cda67056135d9e4af826613b6bc0bf88ac503650ecbf1456545471eecac2166b925834e3bef339269fbf6070000000000000000000000000000000075e2b2924f6b353329ab24b2e6b99a9f41b6a5b4b6801abce5409812ed4ddb625e495ac3b3f2300cbfbe62", 0x11a}], 0x1) syz_open_pts() ioctl$BIOCSETIF(r5, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) (async) ioctl$BIOCSETIF(r5, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r6 = socket(0x18, 0x1, 0x0) ioctl$FIONREAD(r6, 0xc1126939, &(0x7f00000001c0)) sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b1000504000004000000a30001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b67", 0x51, 0x0, 0x0, 0x0) r7 = socket(0x2, 0x2, 0x0) setsockopt$sock_int(r7, 0xffff, 0x1023, &(0x7f0000000040), 0xe0) openat$pf(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) r8 = socket(0x18, 0x1, 0x0) close(r8) (async) close(r8) 67.173617ms ago: executing program 6 (id=26): ioctl$WSMOUSEIO_SETPARAMS(0xffffffffffffffff, 0x80105727, &(0x7f0000000000)={&(0x7f00000003c0)=[{}, {}, {}], 0x3}) (async) ioctl$WSMOUSEIO_SETPARAMS(0xffffffffffffffff, 0x80105727, &(0x7f0000000000)={&(0x7f00000003c0)=[{}, {}, {}], 0x3}) sysctl$kern(&(0x7f0000000000)={0x1, 0x45}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x4, 0x2, 0x67, 0x5}, {0x0, 0x5, 0x59, 0x836}, {0x5, 0xff, 0x7f, 0x7fff}]}) (async) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x4, 0x2, 0x67, 0x5}, {0x0, 0x5, 0x59, 0x836}, {0x5, 0xff, 0x7f, 0x7fff}]}) sysctl$kern(&(0x7f0000000000)={0x1, 0x4d}, 0x2, &(0x7f0000000180)="5f2a1ff1", &(0x7f00000000c0)=0x4, &(0x7f00000001c0), 0x0) sysctl$vm_swapencrypt(&(0x7f0000000000), 0x3, 0x0, 0x0, &(0x7f0000001380)="01", 0x1) 51.567201ms ago: executing program 7 (id=27): recvmmsg(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001880), 0x0, 0x0}}, 0x10, 0x0, 0x0) setsockopt(0xffffffffffffffff, 0x1000000029, 0x1a, &(0x7f0000000000)="02", 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) select(0x7, &(0x7f0000000000)={0x400}, &(0x7f0000000040), &(0x7f0000000080)={0xcb}, &(0x7f0000000180)) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000001280)="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", 0x63f) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r0 = socket(0x18, 0x1, 0x0) ioctl$FIONREAD(r0, 0x80206980, &(0x7f00000001c0)) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001880), 0x0, 0x0}}, 0x10, 0x0, 0x0) (async) setsockopt(0xffffffffffffffff, 0x1000000029, 0x1a, &(0x7f0000000000)="02", 0x1) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) select(0x7, &(0x7f0000000000)={0x400}, &(0x7f0000000040), &(0x7f0000000080)={0xcb}, &(0x7f0000000180)) (async) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000001280)="eec0082cd8668146c398895691aae13dcba1c88ecefd2f497ccdce4899c832e83beeb2304adb6a7b1b0b9a13132e75b681dccc93f155129a4882d1f3d6168638bc28a78336127b0dc51bcd0dfb46d835b30e1a575f08fca816175f17dd390c3cb906abd21f0b34c69ec941113597795e4adfed112f470381a2924553a9b01f3bf1b51f45d827b5821a1c3fdc336b5f25e0f0b4629caeb7c2f88f673c5f254fce38bdebd20911feb5414a7e5096824dc93878f6b7421cf723c124f1f23c3fb2a871a5f0f6dce3c401eb5821b4f468f3dbfaa18cf4e930fac810c5c6917a06f29f7da306d5aa5889971b622747963b4c55ef3af06baeb98128461020a052d8aa2b51cf72ee5617a5ba724ded8092233ca9dc82e2b1626e11cd4c364d4d50bbb0fe150590007a9764a93bb670bd21072f3f5a81d23a70f873b347dfbc32cc27ca70324288f6847b92b124e4eb309a149d642084732aed6b026475f1b030618b5799465e413e20bf598602fdb1f36dc9c3b29a42addf438a670cef18e0fa03bf0e98ff840be30fc4167757d7cc68c96bcb73120f94c85cf261149a0fd97d7cdff6f1286744168754fc6297983ed4eb31eae6b52c72b8f68d516543ded1de61a44c3ce24e4bcc5fa991c97373c57984be045366bef4801756ca434eedb56e5f8b6a84f33f3b5b64c3389d6bd6401cfd8a85940176ae940f75ac4d6dc44c7f0073c5631efebf1e5f5c55f4d4400aa5550dfe6fd8fb3fccf97558057ed474a21d34c2cadee1b65963c85ed8f20ba52a0734ece9c48e426aa20a62344f08d7806567b9a7878d69acb6746d8636f1a4dd620ea18622fd8e800999d1fa87f364b225a7128b2428b14b916fb1c5fcff4742db42c9223b0eec103c5009d553d0454abca0b1fea14c73f8bbae0683178a2bf32978759075cc17fd38225f5ff928caa27f50a3879cb992cbdad8002630681cd5c35414aaff43bea41f83fc1279f6af1b0ef86ea4ec60ff92c32b53ef2f84ef0775db02961ccf5f7b13632a345cb8c76e2aa3faf6088504cda7ccd9e45f8ec9e8d9bfb04a75a8a1d70a1c86302dd313a0414d58be51ec48b8a60d2bee98ec14e3024d3dfddc15b5023b577f1718c53247e408b56f14c8f21bafbd76445e9f89690b1110bd6c6bd59f8a5d906e9eb89c2031f9d4698ccb63ecc22ca27d9677506ebbb1bda8e278f81866389cb3965691f7b60d39f25595ece597ae5343477474f7d66251ee0e07da13b9a23cfefb4a4c97fd8b40df27cc0f67a8a1fa448cc38e6752ece00b7f7387e4f02e624d62d4bdf81bf3e8a8d3fdc39c79cbd38343e45864b71cb4c30c0fe48036dd3c7617e0987d611aee5b084181de63790aff102aea1de5d2aa08e69a40431c2b3743080f7ff2c68474011a27b26f402ada810b282190d9f5170c059d4e60c009e074f3390c45c8cfb0d8b1b9bf282b067e1dc96ba8ffd22b330eebc3a53f45f8736fcc6aca76874e891f4b27e115abcd20f38bdd3fb605e95b1b2e094809727a01c531130ee9f4759504fca7c63a63c2fafc45dfd49aaab78ed5df3b6073626e7a0f42e3f750e18014dca7a1975874bc2c71f4a1fbe704b47d12ee9561e55af0b3d218bb17912c992d2fd0c4613ddb177b2e09a17554cce974056d6936b1720ad5494d6343f3cf0b936798e81f3d585eb4983e07b22006bc790ba5617ecc354ac55a77a8977e0ccaa8d9ecbd5a75efe8a239755f2273c02a3c2a6af552be2f6d4e5ed05675a6bd96d04b545a93fbf123ae4ece3303a86a3c14eace3224eb919f8ad4a9d5cba0e17c7db3c698682939c03010dc100fcf9add79b01b705ddfac2819f8137987b6f740d0206eea55686a99e8a2f4bb713f5189e5a5efaaa3f578d6017dab524b695a00df64a132d6f0d64b5e6154fbfce7a9a4bf0aac9d7fd157e9f327cf587f16e80375dfc228f407818e5d13fb56c6f99d1f7df0f15da4d2aff4d4453726e8e0efba2492dae1b011a2d1341272a22422a33c56999aa664eb9a6b8619e7a6c1a64da05201d1d156f8de14886bc09dd2ffa48cb376e091008675f5124beed0ff682d3fafcfa09146157a898e0dcfeba06de05eb8b6e1c6d014182ce69e84c2f720ff000964f6795cfb5f29b1da225ebdc7939da24fbfdc3e8429537011238b2c1e9c53e4e8e791cf9eb76423ceb8013a83bc963f89c3aa199f06763747f1758d70e9883882f29d4fc158b7272922fd966c88a149b7bbaf2d7294a1ddf0b274ae38c3c68b", 0x63f) (async) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) (async) socket(0x18, 0x1, 0x0) (async) ioctl$FIONREAD(r0, 0x80206980, &(0x7f00000001c0)) (async) 44.250436ms ago: executing program 6 (id=28): r0 = socket(0x1, 0x2, 0x0) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc5005601, 0x0) ioctl$BIOCSETIF(0xffffffffffffff9c, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) ioctl$FIONREAD(r0, 0xc0286988, &(0x7f00000001c0)) (async) ioctl$FIONREAD(r0, 0xc0286988, &(0x7f00000001c0)) r1 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) openat$speaker(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async) r2 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) writev(r2, &(0x7f0000000380)=[{&(0x7f0000000180)="968ce1c69d9498126527e1ad5174636898ad874ffb39b42f574f4f4cbc90acc1eb117d7e3bf3d52de5d57a7f2ec5c0d23a134ee65c5f70eee9f43f9c71342063cfdf9eb60982d3ed95722aa70920bd1c6331d3e4e1891e80699e9058b7a39ae56ffa1c545b3dfa90cd36699a984bdaedff8dbf3d11d74e26036a7fc36b1f53740b772d7c7996271e18c83078e8d21903e3b374f634d4eff3fe56124fdb2407bc125e9ea92319c8966f2e", 0xaa}, {&(0x7f00000019c0)="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", 0x851}], 0x2) writev(r2, &(0x7f0000000240)=[{&(0x7f00000000c0)="30c47992f2556cb33a20786f857afe3e7155c56778bbdfe047ec6723", 0x1c}, {&(0x7f0000000000)="4bbe3911f239dcb824db33bfa666b1c48320a00ea0f79645617d1f1c52e399d6f87a01c2cdd2650ec56df5c80c6d7ceff48f7c115ce0b185fe61d43883789b52d302e91693c224a01405fd6a8ca473dcc186d1e1496b6bad2dbc1c236d048851e932e3a09f61ce06f8e4697029bee003d887b3022bd5516a95c529f8713e71a2de894ffaa22d0400a4a9d94e", 0x8c}, {&(0x7f0000000100)='7', 0x1}], 0x3) execve(0x0, 0x0, 0x0) (async) execve(0x0, 0x0, 0x0) ioctl$VMM_IOC_INTR(r1, 0x800c5606, &(0x7f0000000040)={0x4, 0x80000000, 0x3}) socket(0x11, 0x3, 0x0) (async) r3 = socket(0x11, 0x3, 0x0) sendto$unix(r3, &(0x7f0000000180)="b1000504600000000000000007000000331c13fecea10500fef9ed061ddd1efb7ae320b37b673039d2d236073705ae04be38164991f7b85143222b297be1aa5b236deb51e2f0ac3ebbc257699a5f139b672f4d335d223e7d029d6ba8af630037282102000000720f70c1f5a472c881ea6e69e0bb76d907a900000200361b1257aea8c5000020020000000000008abfba090008efffffffffff3512b132ae037503682ce371a300803712051eadb71d89e0", 0xb1, 0x0, 0x0, 0x0) listen(r0, 0xf07) 1.874734ms ago: executing program 7 (id=29): r0 = open(&(0x7f00000000c0)='./file0\x00', 0x205, 0x0) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000380), 0x1, 0x0) ioctl$TIOCSETA(r1, 0xc148445d, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, "d66ad0c200000000023200f6d700"}) ktrace(&(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000080)=0xc) getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) r4 = getppid() ktrace(&(0x7f0000000080)='./file0\x00', 0xd110d4b105548fa7, 0x40000c04, r4) r5 = getpgid(0x0) msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0xb, r2, r3, 0xffffffffffffffff, 0x0, 0x4, 0x3}, 0x1000, 0x800, r4, r5, 0x0, 0x27da, 0xff, 0xf}) open(&(0x7f00000000c0)='./file0\x00', 0x205, 0x0) (async) openat$pf(0xffffffffffffff9c, &(0x7f0000000380), 0x1, 0x0) (async) ioctl$TIOCSETA(r1, 0xc148445d, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, "d66ad0c200000000023200f6d700"}) (async) ktrace(&(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) (async) getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000000000), &(0x7f0000000080)=0xc) (async) getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000000100), &(0x7f0000000140)=0xc) (async) getppid() (async) ktrace(&(0x7f0000000080)='./file0\x00', 0xd110d4b105548fa7, 0x40000c04, r4) (async) getpgid(0x0) (async) msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0xb, r2, r3, 0xffffffffffffffff, 0x0, 0x4, 0x3}, 0x1000, 0x800, r4, r5, 0x0, 0x27da, 0xff, 0xf}) (async) 1.356552ms ago: executing program 6 (id=30): mkdir(&(0x7f0000000500)='./file0\x00', 0x0) chmod(&(0x7f0000000180)='./file0\x00', 0x23f) chdir(&(0x7f00000001c0)='./file0\x00') open$dir(&(0x7f0000001240)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) r0 = socket(0x18, 0x2, 0x0) r1 = dup(r0) r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) close(r2) r3 = socket$unix(0x1, 0x2, 0x0) select(0x40, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x0, 0x0, 0x0) bind$unix(r3, &(0x7f0000000200)=@file={0xd570d0466b6018f, './file0\x00'}, 0xa) sendmsg$unix(r3, &(0x7f0000000080)={&(0x7f0000000040)=@file={0x170, './file0\x00'}, 0xa, 0x0}, 0x0) setsockopt$sock_int(r2, 0xffff, 0x1023, 0x0, 0x0) ioctl$WSDISPLAYIO_USEFONT(r2, 0x80585750, &(0x7f0000000100)={'./file0/file0\x00', 0xf, 0x7fffffff, 0x4b0, 0x0, 0x4, 0x2, 0x8000, 0x0, 0x1, 0x5, 0x64}) r4 = socket(0x11, 0x3, 0x0) getsockopt$sock_int(r4, 0xffff, 0x10, &(0x7f0000000180), &(0x7f00000002c0)=0x4) setuid(0xffffffffffffffff) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x40400802) r5 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x101) unveil(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='r\x00') sysctl$kern(0x0, 0x0, &(0x7f0000000080)="71f91e3471ac0058bc5a91501d94a34b8e5f84cc42c3fbe6edf28f03055a7b8379c80000ff7f0000000000000000", &(0x7f0000000040)=0x2e, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r6 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x23) setuid(0xffffffffffffffff) fchdir(r6) ioctl$TIOCCONS(r5, 0x80047462, &(0x7f00000000c0)=0x81) mkdirat(r5, &(0x7f0000000340)='./file1/file0\x00', 0x180) renameat(0xffffffffffffff9c, &(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 273.496µs ago: executing program 6 (id=31): madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x5) minherit(&(0x7f0000ff7000/0x9000)=nil, 0x9000, 0x0) (async) socket(0x6, 0x4, 0xa6) (async) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$BIOCIMMEDIATE(r0, 0x8010427e, &(0x7f0000000040)=0x8) (async) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x6}, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x200023}) mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) r1 = socket(0x18, 0x2, 0x0) setsockopt(r1, 0x1000000000029, 0xa, &(0x7f0000003680)='\x00\x00\x00\x00', 0x4) (async) setsockopt(0xffffffffffffff9c, 0xfff, 0xc, &(0x7f0000000380)="eb11ccff13b9fd812eaa4e713048e69931929648b44d4c58550dcfd618454c0eae094f4692f4ae5589f5e70dd7b20825554f66171853eb0bbba2b90dd861781109af628616c0a56fedb842209da14991adae8bd609e3ac26ed34b58902d05d2b96e3df36ce6a67ca7486d734c7927757328a32e6c9209df3bbef08ab2f4650f62d8347fea33f59eaf906d36e3b47f07a2169211db2a2ea48fec6c4d46805c72fa57e8d9f645ec229bde164bf1629f9a94b73d422ac671fb6d973ac81f225a1ef89484a9dfea272461e18cc69ba9ab4215860a1bbc7ddd6e7e0af3da73d627901dac042f536", 0xe5) (async) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="ffffffff01ff0000ed7d000018004503001c000000010000907800000002000000000f0090787fff000c"]) (async) syz_emit_ethernet(0xf2, &(0x7f0000000180)=ANY=[@ANYBLOB="34ed01cc459292c7a7004a9b803f018f634bf513b1e4e72b8f65d61bdb76a7880c6b62d6bf22ca3e30bf1e3ca881e5eeeb66403ffa823d6e19c78f5aa0d22454c699e68a843560c2c8e8ff8141536725f93f7bdb47746f7ec194349505a4bc0865b76a17662b2b38f10933a36fc9e52fb024821a0af1c92716c2080bf050441774f7b255cb141cf5d5f63f6243facbd4bbfd0df0f592ad6abae05539ba66da73a1382594ac76a88d72b3f16ca388e5adcc2fc5f2b7a71aaeb435b0bf13da5fc058f3b04bf2cfe674cda94df5e7d020c2ef76ff6da0d60fb93ea5fb7c9cba302b05d4dbb3ad2c6db2470fac3892c7efe63333"]) (async) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000140)={0x0, 0x0}) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) ioctl$FIOSETOWN(r4, 0x80047476, &(0x7f0000000100)=0xffffe001) (async) poll(&(0x7f0000000040)=[{r2, 0x9d9d574efda86cc9}], 0x1, 0x400) (async) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x3010, r3, 0xa) (async) r5 = socket(0x2, 0x2, 0x0) sendmsg$unix(r5, &(0x7f0000000bc0)={&(0x7f0000000200)=@abs={0x0, 0x0, 0x0}, 0x8, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000000000000ffff0000010000002000000000000000ffff000000000000b542966349512372a182e2a65648ffffc88e64474bd75843117e3ec09fb9f9c07d503dea51219ef3f6516ef80540afb07936ad6613a73469037e322398cfd77d5524e23d7d07c5", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x30, 0x5}, 0x0) (async) r6 = socket$inet(0x2, 0x4002, 0xff) (async) r7 = socket$inet(0x2, 0x4000, 0x8) mquery(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x0, r7, 0x2) setsockopt$inet_opts(r6, 0x0, 0x1, &(0x7f00000000c0)="89144c0129ea94f77ea66ed006e3bc58e261c99a", 0x14) (async) setsockopt$inet_opts(r6, 0x0, 0x1, &(0x7f0000000100)='\x00\x00\x00\x00r1', 0x6) (async) r8 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$BIOCSETIF(r8, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) (async) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x5, &(0x7f0000000300)=[{0x7, 0x5, 0x7, 0x2}, {0x7, 0x1, 0x2, 0x1}, {0x8, 0x1, 0xa9, 0x400}, {0x10, 0x2, 0x9f, 0x80000020}, {0x4, 0x0, 0x0, 0x3}]}) (async, rerun: 32) write(r8, &(0x7f0000000200)="d81ad3d20cf7eb4e9be33bbd1a30", 0xe) (rerun: 32) 0s ago: executing program 7 (id=32): r0 = kqueue() kevent(r0, &(0x7f00000000c0)=[{{r0}, 0xfffffffffffffffc, 0x1d, 0x1, 0x100, 0x200000000000407}], 0x1, 0x0, 0x5edf0547, 0x0) setrlimit(0x1, &(0x7f0000000980)={0x43, 0x4e}) syz_open_pts() ioctl$FIOASYNC(0xffffffffffffffff, 0x80047470, &(0x7f00000000c0)=0x5) openat$tty(0xffffffffffffff9c, &(0x7f0000000000), 0x8, 0x0) kevent(r0, &(0x7f0000000000), 0x3ff, 0x0, 0x8000800, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.144' (ED25519) to the list of known hosts. panic: kernel diagnostic assertion "ps->ps_uvncount == 0" failed: file "/syzkaller/managers/main/kernel/sys/kern/kern_unveil.c", line 188 Stopped at db_enter+0x25: addq $0x8,%rsp TID PID UID PRFLAGS PFLAGS CPU COMMAND db_enter() at db_enter+0x25 panic(ffffffff833ff54a) at panic+0x1cf __assert(ffffffff833b1752,ffffffff8337adec,bc,ffffffff83323f6a) at __assert+0x29 unveil_destroy(ffff800035d24018) at unveil_destroy+0x1dd exit1(ffff80002a803210,0,0,1) at exit1+0x60f sys_exit(ffff80002a803210,ffff800035d23760,ffff800035d236b0) at sys_exit+0x1a syscall(ffff800035d23760) at syscall+0x97e Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x75ea8ac99470, count: 7 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb> ddb> set $lines = 0 ddb> set $maxwidth = 0 ddb> show panic *cpu0: kernel diagnostic assertion "ps->ps_uvncount == 0" failed: file "/syzkaller/managers/main/kernel/sys/kern/kern_unveil.c", line 188 ddb> trace db_enter() at db_enter+0x25 panic(ffffffff833ff54a) at panic+0x1cf __assert(ffffffff833b1752,ffffffff8337adec,bc,ffffffff83323f6a) at __assert+0x29 unveil_destroy(ffff800035d24018) at unveil_destroy+0x1dd exit1(ffff80002a803210,0,0,1) at exit1+0x60f sys_exit(ffff80002a803210,ffff800035d23760,ffff800035d236b0) at sys_exit+0x1a syscall(ffff800035d23760) at syscall+0x97e Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x75ea8ac99470, count: -8 ddb> show registers rdi 0 rsi 0x1 rbp 0xffff800035d234b0 rbx 0xffff800035d24018 rdx 0 rcx 0 rax 0xffff80002a803210 r8 0x101010101010101 r9 0x8080808080808080 r10 0x8727c9ae04091bd2 r11 0xb7884c05e530424 r12 0 r13 0x2 r14 0 r15 0x1 rip 0xffffffff81725795 db_enter+0x25 cs 0x8 rflags 0x246 rsp 0xffff800035d234a0 ss 0x10 db_enter+0x25: addq $0x8,%rsp ddb> show proc PROC (syz-executor) tid=151607 pid=97237 tcnt=0 stat=onproc flags process=1008 proc=2000 runpri=57, usrpri=57, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0xffff80002a803210 scnt=-1 ecnt=1 forw=0xffffffffffffffff, list=0xffff80002a7cb498,0xffff80002a8034b0 process=0xffff800035d24018 user=0xffff800035d1e000, vmspace=0xfffffd806c0ceb50 estcpu=7, cpticks=13, pctcpu=0.0, user=0, sys=0, intr=0 ddb> ps PID TID PPID UID S FLAGS WAIT COMMAND 24341 75412 0 0 3 0x14200 bored sosplice 53318 114669 7765 0 2 0 syz-executor 53318 354995 7765 0 3 0x4000080 fsleep syz-executor 75885 152378 44511 0 2 0 syz-executor 75885 451031 44511 0 3 0x4000080 lockf syz-executor 72604 453063 52069 0 2 0 syz-executor 72604 442375 52069 0 3 0x4000080 fsleep syz-executor 12979 162357 41265 0 2 0 syz-executor 12979 52638 41265 0 3 0x4000080 ttyout syz-executor 12979 75352 41265 0 3 0x4000080 fsleep syz-executor 14142 261667 54202 0 2 0 syz-executor 14142 503846 54202 0 3 0x4000080 fsleep syz-executor 14142 262633 54202 0 3 0x4000080 fsleep syz-executor 57562 51678 51852 0 3 0x80 nanoslp syz-executor 57562 298769 51852 0 3 0x4000080 fsleep syz-executor 57562 288135 51852 0 3 0x4000080 ttyout syz-executor 57562 427215 51852 0 3 0x4000080 fsleep syz-executor 29092 449943 78133 0 3 0x80 nanoslp syz-executor 29092 403836 78133 0 3 0x4000080 ttyout syz-executor 29092 462835 78133 0 3 0x4000080 fsleep syz-executor 44511 26005 37211 0 3 0x82 nanoslp syz-executor 52069 455669 37211 0 3 0x82 nanoslp syz-executor 41265 241537 37211 0 3 0x82 nanoslp syz-executor 78133 99004 37211 0 3 0x82 nanoslp syz-executor 51852 228136 37211 0 3 0x82 nanoslp syz-executor 7765 56589 37211 0 3 0x82 nanoslp syz-executor 54202 361311 37211 0 3 0x82 nanoslp syz-executor 12800 96917 37211 0 3 0x82 nanoslp syz-executor 37211 196425 50081 0 3 0x82 kqread syz-executor 50081 102038 77593 0 3 0x10008a sigsusp ksh 77593 131093 30393 0 3 0x98 kqread sshd-session 30393 456276 43392 0 3 0x92 kqread sshd-session 58434 425172 1 0 3 0x100083 ttyin getty 43392 504564 1 0 3 0x88 kqread sshd 71545 397796 34712 73 3 0x1100090 kqread syslogd 34712 401690 1 0 3 0x100082 sbwait syslogd 1603 39300 1 0 3 0x100080 kqread resolvd 70269 36526 1962 77 3 0x100092 kqread dhcpleased 28826 115767 1962 77 3 0x100092 kqread dhcpleased 1962 429698 1 0 3 0x80 kqread dhcpleased 62510 41831 0 0 3 0x14200 bored smr 50065 404252 0 0 2 0x14200 zerothread 7282 486296 0 0 3 0x14200 aiodoned aiodoned 52959 340865 0 0 3 0x14200 syncer update 37791 351917 0 0 3 0x14200 cleaner cleaner 80854 351697 0 0 3 0x14200 reaper reaper 24423 281042 0 0 3 0x14200 pgdaemon pagedaemon 41386 496018 0 0 3 0x14200 bored viomb 74662 46741 0 0 3 0x40014200 acpi0 acpi0 51830 439203 0 0 3 0x14200 bored softnet3 24774 474531 0 0 3 0x14200 bored softnet2 40946 430619 0 0 3 0x14200 bored softnet1 13936 15540 0 0 3 0x14200 bored softnet0 14217 279951 0 0 3 0x14200 bored systqmp 28046 290271 0 0 3 0x14200 bored systq 60793 225366 0 0 3 0x40014200 tmoslp softclock 18106 40530 0 0 3 0x40014200 idle0 1 332065 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb> show all locks No such command ddb> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 10185 11202K 11202K 166960K 11279 0 pcb 22 12K 12K 166960K 34 0 rtable 234 6K 6K 166960K 358 0 pf 31 13K 13K 166960K 31 0 ifaddr 42 7K 7K 166960K 44 0 ifgroup 50 2K 2K 166960K 50 0 sysctl 1 1K 1K 166960K 1 0 counters 30 17K 17K 166960K 30 0 ioctlops 0 0K 4K 166960K 36 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1343 85K 85K 166960K 1373 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 3 5K 5K 166960K 3 0 VM map 2 1K 1K 166960K 2 0 sem 2 0K 0K 166960K 2 0 dirhash 12 2K 2K 166960K 12 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 17 61K 97K 166960K 163 0 sigio 0 0K 0K 166960K 1 0 proc 62 75K 124K 166960K 480 0 subproc 72 4K 4K 166960K 72 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 1 0K 0K 166960K 7 0 in_multi 99 7K 7K 166960K 99 0 ether_multi 1 0K 0K 166960K 1 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 55 254K 254K 166960K 55 0 exec 0 0K 1K 166960K 352 0 fusefs mount 1 32K 32K 166960K 1 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 228 73K 73K 166960K 2860 0 UVM aobj 4 2K 2K 166960K 4 0 pinsyscall 39 78K 96K 166960K 1195 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 0K 166960K 1 0 NDP 27 2K 2K 166960K 27 0 temp 37 8622K 8686K 166960K 3838 0 kqueue 13 20K 22K 166960K 26 0 SYN cache 2 16K 16K 166960K 2 0 ddb> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle rtpcb 120 44 0 40 1 0 1 1 0 8 0 rtentry 112 112 0 2 4 0 4 4 0 8 0 unpcb 144 40 0 22 1 0 1 1 0 8 0 syncache 336 3 0 3 1 1 0 1 0 8 0 tcpcb 808 15 0 8 1 0 1 1 0 8 0 arp 88 18 0 0 1 0 1 1 0 8 0 inpcb 344 84 0 69 2 0 2 2 0 8 0 nd6 104 24 0 0 1 0 1 1 0 8 0 kcovpl 48 8 0 0 1 0 1 1 0 8 0 pftag 88 1 0 0 1 0 1 1 0 8 0 pfqueue 320 2 0 0 1 0 1 1 0 8 0 pfrule 1344 1 0 1 1 1 0 1 0 8 0 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 452 0 0 29 0 29 29 0 8 0 art_table 32 453 0 0 4 0 4 4 0 8 0 art_node 16 110 0 10 1 0 1 1 0 8 0 shmpl 112 1 0 0 1 0 1 1 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino2pl 256 1586 0 83 95 0 95 95 0 8 0 ffsino 248 1586 0 83 95 0 95 95 0 8 0 nchpl 144 1807 0 127 63 0 63 63 0 8 0 uvmvnodes 80 1684 0 0 35 0 35 35 0 8 0 vnodes 216 1684 0 0 94 0 94 94 0 8 0 namei 1024 5336 0 5336 1 0 1 1 0 8 1 kstatmem 264 22 0 0 2 0 2 2 0 8 0 scxspl 216 5789 0 5789 3 2 1 3 1 8 1 plimitpl 152 30 0 13 1 0 1 1 0 8 0 sigapl 424 444 0 397 7 1 6 7 0 8 0 futexpl 64 482 0 474 1 0 1 1 0 8 0 knotepl 120 3911 0 3864 2 0 2 2 0 8 0 kqueuepl 184 23 0 14 1 0 1 1 0 8 0 pipepl 296 103 0 76 3 0 3 3 0 8 0 fdescpl 440 427 0 398 5 1 4 5 0 8 0 filepl 120 1456 0 1221 8 0 8 8 0 8 0 lockfpl 104 15 0 10 1 0 1 1 0 8 0 lockfspl 48 9 0 5 1 0 1 1 0 8 0 sessionpl 144 21 0 13 1 0 1 1 0 8 0 pgrppl 48 31 0 15 1 0 1 1 0 8 0 ucredpl 104 96 0 85 1 0 1 1 0 8 0 zombiepl 144 402 0 401 2 1 1 1 0 8 0 processpl 1104 444 0 397 4 0 4 4 0 8 0 procpl 656 497 0 438 6 0 6 6 0 8 0 sockpl 528 168 0 131 3 0 3 3 0 8 0 mcl8k 8192 8 0 8 1 1 0 1 0 8 0 mcl4k 4096 2423 0 2369 13 4 9 13 0 8 0 mcl2k 2048 125 0 125 1 1 0 1 0 8 0 mtagpl 96 7 0 6 1 0 1 1 0 8 0 mbufpl 256 4217 0 4061 10 0 10 10 0 8 0 bufpl 280 2262 0 124 153 0 153 153 0 8 0 anonpl 24 103796 0 98546 33 0 33 33 0 187 0 amapchunkpl 152 8920 0 8274 25 0 25 25 0 158 0 amappl16 200 2062 0 2039 5 3 2 5 0 8 0 amappl15 192 10 0 10 1 1 0 1 0 8 0 amappl14 184 105 0 95 1 0 1 1 0 8 0 amappl13 176 8 0 7 1 0 1 1 0 8 0 amappl12 168 1040 0 1010 3 1 2 3 0 8 0 amappl11 160 48 0 38 1 0 1 1 0 8 0 amappl10 152 6 0 6 1 1 0 1 0 8 0 amappl9 144 244 0 244 1 1 0 1 0 8 0 amappl8 136 39 0 38 1 0 1 1 0 8 0 amappl7 128 106 0 96 1 0 1 1 0 8 0 amappl6 120 172 0 169 1 0 1 1 0 8 0 amappl5 112 111 0 105 1 0 1 1 0 8 0 amappl4 104 285 0 269 1 0 1 1 0 8 0 amappl3 96 1361 0 1246 3 0 3 3 0 8 0 amappl2 88 612 0 559 2 0 2 2 0 8 0 amappl1 80 7505 0 6977 13 1 12 13 0 8 0 amappl 88 2514 0 2334 4 0 4 4 0 92 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 3 0 0 1 0 1 1 0 8 0 uaddrrnd 24 427 0 397 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 427 0 397 1 0 1 1 0 8 0 vmmpekpl 168 4971 0 4941 2 0 2 2 0 8 0 vmmpepl 168 32668 0 30881 79 0 79 79 0 357 0 vmsppl 360 426 0 397 4 1 3 4 0 8 0 rwobjpl 32 14199 0 11655 21 0 21 21 0 8 0 pdppl 4096 861 0 794 97 30 67 83 0 8 0 pvpl 32 220431 0 208442 98 1 97 98 0 265 0 pmappl 216 426 0 397 3 0 3 3 0 8 0 extentpl 40 55 0 38 1 0 1 1 0 8 0 phpool 112 256 0 39 7 0 7 7 0 8 0 ddb> machine ddbcpu 0 No such command ddb> trace db_enter() at db_enter+0x25 panic(ffffffff833ff54a) at panic+0x1cf __assert(ffffffff833b1752,ffffffff8337adec,bc,ffffffff83323f6a) at __assert+0x29 unveil_destroy(ffff800035d24018) at unveil_destroy+0x1dd exit1(ffff80002a803210,0,0,1) at exit1+0x60f sys_exit(ffff80002a803210,ffff800035d23760,ffff800035d236b0) at sys_exit+0x1a syscall(ffff800035d23760) at syscall+0x97e Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x75ea8ac99470, count: -8 ddb> machine ddbcpu 1 No such command ddb> trace db_enter() at db_enter+0x25 panic(ffffffff833ff54a) at panic+0x1cf __assert(ffffffff833b1752,ffffffff8337adec,bc,ffffffff83323f6a) at __assert+0x29 unveil_destroy(ffff800035d24018) at unveil_destroy+0x1dd exit1(ffff80002a803210,0,0,1) at exit1+0x60f sys_exit(ffff80002a803210,ffff800035d23760,ffff800035d236b0) at sys_exit+0x1a syscall(ffff800035d23760) at syscall+0x97e Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x75ea8ac99470, count: -8