last executing test programs: 5.137038058s ago: executing program 2 (id=630): writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000080)="7f9f7fa17224321f3f06ecd8264f6ec6706e2e2e", 0x14}], 0x622749057067faa) r0 = open(&(0x7f0000000380)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7949) setrlimit(0x8, &(0x7f0000000000)={0xfffffffffffffffb, 0xffffffffffffffff}) fcntl$lock(r0, 0xc, &(0x7f00000019c0)={0x2, 0x0, 0xb2ed, 0x6}) ioctl$VMM_IOC_RESETCPU(r0, 0x82405605, &(0x7f00000003c0)={0x8, 0xffffffff, {[0xbb0, 0x0, 0x7, 0x46, 0x4, 0x2, 0x2, 0xbc, 0x5, 0xa4, 0x7, 0x918e, 0x0, 0xfff, 0x522, 0x7, 0x80000001, 0x2], [0x10001, 0x200, 0xf31, 0x3, 0x21, 0xd9, 0x8000000000000000, 0x46, 0x9, 0x7], [0x9, 0xfffffffffffffe00, 0x10001, 0x7, 0x6a2, 0x40, 0x2], [0x7, 0x2, 0x5, 0x7, 0x3, 0x4], [{0x9, 0x5, 0x7, 0x5aa}, {0x2, 0x8, 0x3, 0x3}, {0x1, 0x5f7, 0x8e, 0xc}, {0x2, 0x1, 0xfffffff7, 0xffffffff}, {0xb, 0x10001, 0xfffffffe}, {0x54f, 0x8001, 0x1, 0x6}, {0x1000, 0x80, 0x1ff, 0x6}, {0x1, 0x9, 0x4, 0x2}], {0x3ff, 0x7, 0x0, 0x6}, {0x0, 0x9, 0x400, 0x80000000}}}) writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000080)="7f9f7fa17224321f3f06ecd8264f6ec6706e2e2e", 0x14}], 0x622749057067faa) (async) open(&(0x7f0000000380)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7949) (async) setrlimit(0x8, &(0x7f0000000000)={0xfffffffffffffffb, 0xffffffffffffffff}) (async) fcntl$lock(r0, 0xc, &(0x7f00000019c0)={0x2, 0x0, 0xb2ed, 0x6}) (async) ioctl$VMM_IOC_RESETCPU(r0, 0x82405605, &(0x7f00000003c0)={0x8, 0xffffffff, {[0xbb0, 0x0, 0x7, 0x46, 0x4, 0x2, 0x2, 0xbc, 0x5, 0xa4, 0x7, 0x918e, 0x0, 0xfff, 0x522, 0x7, 0x80000001, 0x2], [0x10001, 0x200, 0xf31, 0x3, 0x21, 0xd9, 0x8000000000000000, 0x46, 0x9, 0x7], [0x9, 0xfffffffffffffe00, 0x10001, 0x7, 0x6a2, 0x40, 0x2], [0x7, 0x2, 0x5, 0x7, 0x3, 0x4], [{0x9, 0x5, 0x7, 0x5aa}, {0x2, 0x8, 0x3, 0x3}, {0x1, 0x5f7, 0x8e, 0xc}, {0x2, 0x1, 0xfffffff7, 0xffffffff}, {0xb, 0x10001, 0xfffffffe}, {0x54f, 0x8001, 0x1, 0x6}, {0x1000, 0x80, 0x1ff, 0x6}, {0x1, 0x9, 0x4, 0x2}], {0x3ff, 0x7, 0x0, 0x6}, {0x0, 0x9, 0x400, 0x80000000}}}) (async) 4.769610067s ago: executing program 2 (id=644): r0 = socket$inet(0x2, 0x2, 0x0) r1 = dup(r0) setsockopt$inet_opts(r1, 0x0, 0x22, &(0x7f0000000040)="fd0cc085", 0x4) sendto$inet(r0, &(0x7f0000000140)="01728693e1740666", 0x8, 0x0, &(0x7f0000000240)={0x10, 0x2, 0x3, 0xffffff35}, 0x10) syz_emit_ethernet(0x106, &(0x7f00000000c0)={@local, @random="c8e2c51f8f67", [{[{0x88a8, 0x7, 0x1, 0x2}], {0x8100, 0x1, 0x1}}], {@ipv4={0x800, {{0x7, 0x4, 0x2, 0x8, 0xf0, 0x66, 0xb, 0xb, 0x29, 0x0, @multicast2, @broadcast, {[@ra={0x94, 0x4, 0x6b6b}, @ra={0x94, 0x4, 0x8}]}}, @udp={{0x2, 0x1, 0x8}, {"bd74a9b0b11c6422507133f8b202722d5a7d2fa7180a50555aaede86c5c3890a3575f6fcb04045cde13ad6bea827ded0bc284962b3eaff67fa785c1aed565f05556cf4eebd93e6a2ad5765e653a02b63cb2003b6d4a7331f5b5828efe3c217f568fd3970d4c96b6d4e7f6dbcd9d37c8d3a6aec87c57686fd0d0d5a1194e53bdeb85777a7010397d801267578e16a27f354f409e76df536757d05317b4b83cfa72e29f5e3b476e1aee8d2f3005863f9a3b812512954127b7a8eaf6f99912e3553e146d35545e1503c6eda4f40"}}}}}}) recvmsg(r0, &(0x7f0000000640)={&(0x7f0000000280)=@un=@file={0x0, 0x0, ""/252}, 0xfe, &(0x7f00000005c0)=[{&(0x7f0000000400)=""/248, 0xf8}, {&(0x7f0000000500)=""/92, 0x5c}, {&(0x7f0000000580)=""/2, 0x2}], 0x3, &(0x7f0000000600)=""/47, 0x2f}, 0x1000) r2 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x10, 0x2, 0x3}, 0x10) ioctl$WSMUXIO_REMOVE_DEVICE(0xffffffffffffffff, 0x80085762, &(0x7f0000000040)={0x1}) r3 = socket(0x18, 0xc003, 0x3a) setsockopt(r3, 0x29, 0x6c, &(0x7f0000000040), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r3, 0x29, 0x66, &(0x7f00000003c0)={0x3, 0x1, 0x10, 0x5}, 0xc) setsockopt$inet6_MRT6_ADD_MIF(r3, 0x29, 0x66, &(0x7f00000003c0)={0x0, 0x1, 0x10, 0x3}, 0xc) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setsockopt$inet6_MRT6_ADD_MFC(r3, 0x29, 0x68, &(0x7f00000001c0)={{0x1c, 0x18, 0x3, 0x3, "ee67bdccca43a04960de3b06b20444a3", 0x3}, {0x1c, 0x18, 0x0, 0x6, "0000000000000000004000000000fe00", 0x7}, 0x3, [0x166c, 0x81, 0x1, 0x0, 0x18000, 0xfffff0c0, 0x5, 0x1]}, 0x5c) listen(r2, 0x5) syz_emit_ethernet(0x3a, &(0x7f0000000040)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x3d, 0x2c, 0x67, 0x0, 0xff, 0x6, 0x0, @local={0xac, 0x14, 0x0}, @local={0xac, 0x14, 0x0}}, @tcp={{0x2, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x8200, 0x0, 0x7fff, {[@sack_perm={0x4, 0x2}, @sack_perm={0x4, 0x2}]}}}}}}}) 3.235775705s ago: executing program 2 (id=677): r0 = open(&(0x7f0000000080)='./file0\x00', 0x2, 0x8) readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) truncate(&(0x7f0000000100)='./file0\x00', 0x2040002ffff) writev(r0, &(0x7f0000000040), 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000040)={0x200, 0x2, 0x10000, 0xdc, "4ec697faa59a9b0283eb0bbe3748412c569edf84", 0x8000}) open(&(0x7f0000000080)='./file0\x00', 0x2, 0x8) (async) readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) (async) truncate(&(0x7f0000000100)='./file0\x00', 0x2040002ffff) (async) writev(r0, &(0x7f0000000040), 0x0) (async) open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) (async) ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000040)={0x200, 0x2, 0x10000, 0xdc, "4ec697faa59a9b0283eb0bbe3748412c569edf84", 0x8000}) (async) 3.147623792s ago: executing program 2 (id=685): mknod(&(0x7f0000000000)='./bus\x00', 0x2000, 0x2e00) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e60) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x200, 0x4c) ioctl$WSMOUSEIO_SCALIBCOORDS(r0, 0x81205724, &(0x7f0000000100)={0x1, 0xffffaf35, 0x7f, 0x5, 0x80000001, 0x7fbffffd, 0x5, 0x10, [{0x10000000, 0x4, 0x3, 0x40}, {0xfffffff3, 0xfffffffe, 0x6, 0x2}, {0x20007, 0x7, 0x6, 0x9}, {0x7, 0x6, 0x2, 0x200}, {0x42, 0x8, 0x2, 0x800007}, {0x4020002, 0x6, 0x8, 0x95}, {0x9, 0xdf61, 0x200004f8, 0x14}, {0x6, 0x11, 0x14, 0xe}, {0xfffffffd, 0xe2b4, 0x40000003, 0xa}, {0x4, 0x8a, 0x400, 0x1ff}, {0x2, 0x5, 0x927c, 0x4}, {0x3, 0x25, 0x9, 0x2d0b}, {0x1, 0x2, 0x80002001, 0x408}, {0x29a7171a, 0x8, 0x3, 0x2579}, {0x8000, 0xf8f, 0x8}, {0x81, 0x0, 0xf779, 0x8}]}) setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) r1 = open(&(0x7f0000000080)='./file1\x00', 0x18289, 0x1f0) write(r1, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) ftruncate(r1, 0x0) close(0x3) r2 = openat$wsmouse(0xffffffffffffff9c, &(0x7f00000000c0), 0x8, 0x0) read(r2, &(0x7f0000000140)=""/4096, 0x1000) execve(0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0}) setrlimit(0xe, &(0x7f0000000240)={0x100000000, 0x7fffffffffffffff}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$DIOCXROLLBACK(r3, 0xc0104453, &(0x7f0000001700)={0x5, 0x2, &(0x7f00000002c0)=[{0x1, './file0\x00', 0x101}, {0x0, './bus\x00', 0x4}, {0x0, './bus\x00', 0xf}, {0x67ed391ac71b181a, './file0\x00', 0x7}, {0x0, './file0\x00', 0x4}]}) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) r6 = socket$inet(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000000)={0x10, 0x2, 0x3}, 0x10) listen(r6, 0x7fff) syz_emit_ethernet(0x3a, &(0x7f0000000040)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x3d, 0x2c, 0x67, 0x0, 0x0, 0x6, 0x0, @multicast1, @local={0xac, 0x14, 0x0}}, @tcp={{0x3, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0xfff8, 0x0, 0xfffc, {[@generic={0x8, 0x2}]}}}}}}}) ioctl$VNDIOCSET(r5, 0x8004630b, &(0x7f0000000100)={0x0, 0x0, 0x0}) 3.050393989s ago: executing program 0 (id=696): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x44000802) r1 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) write(r1, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) ioctl$TIOCSETD(r1, 0x8004741b, &(0x7f00000000c0)=0x8) execve(0x0, 0x0, 0x0) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0xa71d, 0x9, 0x2, 0x4}]}) 1.885305707s ago: executing program 1 (id=701): r0 = syz_open_pts() setsid() ioctl$TIOCSCTTY(r0, 0x20007461) r1 = openat$tty(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) closefrom(r0) read(r1, &(0x7f00000002c0)=""/74, 0x4a) ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, &(0x7f00000000c0)={0xa, 0x8000148, {[0x3, 0x40, 0x6, 0x6, 0x3, 0x4, 0x6, 0x40000000000, 0x7, 0x2, 0x9, 0x91c, 0x8, 0x2000180, 0x0, 0xd3, 0x76, 0xffffffffffffbff7], [0x5438b950, 0x5, 0x1004, 0x7, 0x8, 0x1, 0x9, 0x2, 0xffffffffffffffff, 0x3], [0x6, 0x0, 0x8, 0x8000000008, 0x10000, 0x210, 0x1000002], [0x100000000, 0x10801, 0x0, 0x5, 0x3], [{0x0, 0x7, 0xfffffbfb, 0x5}, {0x2, 0x925, 0x3, 0x338}, {0x1000, 0x7fffffff, 0x0, 0x5}, {0xb, 0xfffffbff, 0x2, 0x1}, {0x774, 0x3, 0x2, 0x8}, {0x1f, 0x4, 0x0, 0x7}, {0xe4, 0xffffff81, 0x1ff, 0x1}, {0x3, 0x10000, 0x8001, 0x5}], {0x52b, 0x4, 0x401, 0x8}, {0xfffb, 0xffffbfc0, 0x8}}}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x33}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x24, 0x0, 0x37) 1.803689572s ago: executing program 0 (id=709): r0 = socket(0x18, 0x2, 0x0) setsockopt(r0, 0x1000000000029, 0xa, &(0x7f00000001c0), 0x0) chmod(&(0x7f0000000040)='.\x00', 0x35e) setuid(0xee01) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) unveil(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000300)='x\x00') (async) syz_emit_ethernet(0x3e, &(0x7f0000000080)=ANY=[@ANYRES16=0x0]) 1.686378544s ago: executing program 0 (id=712): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x18, 0x1, 0x0) ioctl$DIOCGETSTATE(0xffffffffffffffff, 0xc1084413, &(0x7f0000000040)={{0x3976fdec, './file0\x00', [{[@v6=@ipv4={'\x00', '\xff\xff', @loopback}], [0x6, 0x44], 0xfffe, 0x28}, {[@v6=@empty, @v4=@loopback], [0x6, 0x7], 0x4, 0x18}], {{0x555, 0x40, 0x9, 0x2007ff}, 0x4, 0x409, 0x80, 0x3ff, 0xfff9, 0x17, 0xe}, {{0x5, 0x2, 0xff, 0x7}, 0x8002, 0x80007, 0x6, 0x6, 0x29, 0xf0, 0xac}, @v6=@mcast1, 0x0, 0x9, 0x2, 0x0, 0x0, [[0xfffffff7, 0x4], [0x2, 0x8350]], [[0x3, 0x6042], [0x20007, 0x3]], 0x1, [0x0, 0x7], 0x0, 0x18, 0x6, 0x2, 0x0, 0x3, 0xb, 0x83, 0x10, 0x8, 0x9, 0xce51, "1a20"}}) r1 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) select(0x40, &(0x7f0000000040)={0x89fc, 0x2, 0x40f, 0x1, 0x400, 0x6, 0x10000, 0xf}, 0x0, 0x0, 0x0) ioctl$TIOCSETA(r1, 0xc1084425, &(0x7f0000000040)={0x4, 0x0, 0x7, 0x8, "210d0000000200007f00000100000200", 0x2000000, 0x10000e0}) setsockopt(r0, 0x1000000029, 0x2e, &(0x7f0000000040)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) setsockopt(r0, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbdf13b9fd812eaa4e713048e69931929648", 0x14) 1.681734236s ago: executing program 1 (id=716): r0 = socket(0x2, 0x1, 0x0) r1 = syz_open_pts() ioctl$TIOCSWINSZ(r1, 0x80087467, &(0x7f0000000240)={0x8000, 0xd, 0xfff0, 0x3}) sendmsg$unix(r0, &(0x7f0000000640)={&(0x7f0000000180)=@file={0x1}, 0xa, 0x0, 0x0, &(0x7f00000005c0)=[@rights={0x10}], 0x10, 0x10}, 0x404) 1.587220815s ago: executing program 1 (id=717): select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x8, 0x2000000000000004}, 0x0, 0x0, 0x0) r0 = kqueue() kevent(r0, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) mknod(&(0x7f00000000c0)='./file1\x00', 0x2000, 0x100637d) r1 = open(&(0x7f0000000800)='./file1\x00', 0x8000, 0x2b) ioctl$FIONBIO(r1, 0x82907003, 0x0) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x200, 0x186) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x2010, r2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) ioctl$FIONBIO(r1, 0x82907003, &(0x7f0000000140)=0x2) 1.586809743s ago: executing program 1 (id=718): mknod(&(0x7f0000000000)='./file0\x00', 0x6000, 0xe02) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x201, 0x80) setuid(0xee01) pwritev(r0, &(0x7f0000000200)=[{&(0x7f0000000080)="be8dd63584b4", 0x6}, {&(0x7f0000000140)}], 0x2, 0x7) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) select(0x40, &(0x7f0000000140)={0x3, 0x4dbb, 0x1, 0x8, 0x7, 0x5, 0x84, 0x8000000000000001}, 0x0, &(0x7f00000001c0)={0x8, 0x5, 0x0, 0x6, 0x8000000000000000, 0xc0d1, 0x6, 0x7}, &(0x7f0000000240)={0x0, 0x2}) r1 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0xd6) r2 = getpid() setgroups(0x0, 0x0) ktrace(&(0x7f0000000100)='./file0\x00', 0x0, 0x300, r2) setuid(0xee01) setrlimit(0x1, &(0x7f0000000240)={0xad, 0x1fd}) setrlimit(0x1, &(0x7f0000000240)={0xad, 0x1fd}) bind$unix(r1, &(0x7f00000000c0)=@file={0xff, 0x1, './file0\x00'}, 0xa) mknod(0x0, 0x2000, 0x285b9a) open(0x0, 0x400, 0x1) select(0x40, &(0x7f0000000280)={0x9, 0x6, 0xfffffffffffffdfc, 0x8, 0x2, 0x2, 0x7}, 0x0, 0x0, 0x0) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) openat$bpf(0xffffffffffffff9c, &(0x7f0000000340), 0x1, 0x0) openat$bpf(0xffffffffffffff9c, &(0x7f0000000240), 0x20, 0x0) pread(r3, &(0x7f0000000040)="2c77d2", 0x3, 0x3) syz_extract_tcp_res(&(0x7f0000000000)={0x41424344, 0x41424344}, 0x5, 0x1ff) syz_emit_ethernet(0x36, &(0x7f0000000080)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x0, 0x16, 0x0, @empty=0x23, @rand_addr=0xac14ffff}, @tcp={{0x0, 0x3, 0x41424344, r4, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}}}}}}) 936.300439ms ago: executing program 3 (id=745): mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x1, 0x90) getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000340)={0x0, 0x0, 0x0}, &(0x7f00000003c0)=0xc) fstat(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) closefrom(r0) fchown(r0, r1, r3) open(&(0x7f0000000380)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf78e5) ioctl$FIONREAD(r0, 0x8080691a, &(0x7f0000000140)) mknod(&(0x7f0000000000)='./file1\x00', 0x2000, 0x285b9a) select(0x40, &(0x7f0000000180)={0xffffdffffffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x9, 0x181c, 0x8, 0x2000000000000024}, 0x0, 0x0, 0x0) r4 = kqueue() r5 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BIOCSRTIMEOUT(r5, 0x8010426d, &(0x7f0000000040)={0x0, 0x7}) fsync(r5) r6 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000240), 0x20000, 0x0) ioctl$VNDIOCSET(r6, 0xc0384600, &(0x7f0000000300)={&(0x7f0000000280)='./file1\x00', 0x80000001, &(0x7f00000002c0)='./file1\x00', 0x8}) r7 = socket(0x18, 0x3, 0x0) getsockopt(r7, 0x29, 0xa, 0x0, 0x0) kevent(r4, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) ioctl$BIOCSRSIG(r5, 0x80044272, &(0x7f00000001c0)=0x7) r8 = open(&(0x7f0000000200)='./file1\x00', 0x8000, 0x2b) ioctl$FIONBIO(r8, 0x82907003, &(0x7f0000000140)=0x1) open$dir(&(0x7f0000000500)='./file0\x00', 0x80, 0x22) ioctl$FIONBIO(r8, 0x82907003, &(0x7f0000000140)=0x2) readlink(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)=""/87, 0x57) closefrom(r4) getsockopt$SO_PEERCRED(r8, 0xffff, 0x1022, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0xc) getgroups(0x7, &(0x7f00000004c0)=[r2, r3, r3, 0x0, r2, r2, r9]) 845.249521ms ago: executing program 0 (id=751): r0 = socket$inet(0x18, 0x3, 0x102) ioctl$WSMUXIO_REMOVE_DEVICE(0xffffffffffffffff, 0x80085762, &(0x7f0000000040)={0x1}) r1 = socket(0x18, 0xc003, 0x3a) setsockopt(r1, 0x29, 0x6c, &(0x7f0000000040), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0x66, &(0x7f00000003c0)={0x3, 0x1, 0x10, 0x5}, 0xc) socket(0x18, 0x3, 0x0) socket(0x18, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0x66, &(0x7f00000003c0)={0x0, 0x1, 0x6, 0x4, 0x4000000}, 0xc) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0x68, &(0x7f00000001c0)={{0x1c, 0x18, 0x3, 0x3, "ee67bdccca43a04960de3b06b20444a3", 0x3}, {0x1c, 0x18, 0x0, 0x6, "0000000000000000004000000000fe00", 0x7}, 0x3, [0x9d5ef45, 0x81, 0x1, 0x0, 0x1, 0xfffff0c0, 0x5, 0x1]}, 0x5c) r2 = socket$inet6(0x18, 0x1, 0x6) setsockopt$sock_int(r2, 0xffff, 0x1000, &(0x7f0000000000)=0x6, 0x1) sendmsg(r0, &(0x7f0000000240)={&(0x7f0000000280)=@in6={0x1c, 0x18, 0x1, 0xfffffffd, "00000000000000000000000000000001", 0x101}, 0x1c, &(0x7f0000000400)=[{&(0x7f0000000000)="630c00000000069afe51f6f2efa24a85abdd612dd68e59adffbb93232d44372e9bc47e84f7c477d24d9c793909f5480a000000000000000000000000a47803039197", 0x42}, {&(0x7f0000000140)="27abe0620e846df4af80646f351f64356145a4210a29f9c06ca8ca7c20a72449e73c52b60b4ffc44a60d4fe78f35166f529731defe94367dc184e8c132d6d5aac0ee7c249bce7bf56d0b2fde275e330817dbd55ba895707a6a4f", 0x5a}], 0x2, 0x0}, 0x4) mknod(&(0x7f0000000200)='./file0\x00', 0x2000, 0x4287e) r3 = socket$inet(0x2, 0x2, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd6010000000102b00fe80000000000000000000000000000000000000000700ff976856e309cbafb42bac20"]) setsockopt$inet_opts(r3, 0x0, 0x200100000001d, &(0x7f0000000380), 0x0) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x62}) r4 = syz_open_pts() close(r4) r5 = syz_open_pts() ioctl$TIOCSETA(r5, 0x802c7414, &(0x7f0000000100)={0xfffffff8, 0x6, 0xfffff966, 0xffffff90, "08955c1cfac164e20a070e00000009ffe600", 0x4000000, 0x2}) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0xef, 0x9, 0x3, 0x101, 0x4, 0x5, 0x3, 0x10, [{0x5, 0x4, 0x8, 0x71800}, {0x0, 0x300b7fe, 0x6, 0x7}, {0x100006, 0x0, 0xb, 0x22}, {0xe0, 0x0, 0x80000001, 0xffffeffe}, {0x7, 0x0, 0xd1, 0xffff}, {0xd9c, 0x6, 0x14000009, 0xc}, {0x4, 0x7, 0x7, 0x70}, {0x1, 0x3, 0x9f3d835c, 0xfffffffc}, {0x401, 0x5, 0x34, 0x3}, {0xfefffc04, 0x44, 0x5, 0x7fff}, {0x8, 0xff77, 0xa38c000, 0xe3}, {0xcb, 0x6, 0x200, 0x4010}, {0x2100df, 0x6, 0x5, 0xfffffff7}, {0x1, 0xe4, 0xfffffff7, 0xfffffff6}, {0x5, 0x8, 0x27, 0x5}, {0x8, 0xd655, 0x3, 0x6}]}) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) r6 = socket(0x18, 0x3, 0x0) ioctl$FIONREAD(r6, 0xc0106924, &(0x7f00000001c0)) setitimer(0x2, &(0x7f0000000140)={{0x400000000000000, 0x100800000000009}, {0xeffffffd, 0x8}}, 0x0) ioctl$FIONREAD(r6, 0x8080691a, &(0x7f0000000100)) writev(r4, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) ioctl$TIOCSETA(r4, 0x802c7414, &(0x7f0000000040)={0xf18e, 0x801, 0x81, 0x9b00, "20c92a0b6b4397d35ef77957ae5ee8bdd55bf0ca", 0x6, 0x7}) openat$null(0xffffffffffffff9c, &(0x7f00000005c0), 0x10000, 0x0) 739.804628ms ago: executing program 3 (id=752): r0 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x80) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0) (async) ftruncate(r0, 0xcbc) (async) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x14, 0xff, 0x2}, {0x24, 0x0, 0x2, 0x201}, {0xfff6, 0xb, 0xf4, 0x5}]}) (async) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) (async, rerun: 32) syz_emit_ethernet(0x2a, &(0x7f0000001200)=ANY=[]) (rerun: 32) ioctl$FIOSETOWN(0xffffffffffffffff, 0x8004667c, &(0x7f0000000080)=0x10000) (async) sysctl$net_pipex(0x0, 0x0, &(0x7f0000001280)="e2c4", &(0x7f0000000040)=0x2, 0x0, 0x0) (async) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x200, 0x186) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x2015, r2, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) fsync(r4) (async) select(0x40, &(0x7f0000000000)={0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, &(0x7f0000000040), &(0x7f0000000080)={0xcb, 0xf38}, &(0x7f0000000180)) (async, rerun: 32) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000007c0)={0xb, 0x5, r3}) (async, rerun: 32) sysctl$net_inet_tcp(&(0x7f0000001280)={0x4, 0x2, 0x6, 0x15}, 0x4, 0x0, 0x0, 0x0, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000800)={0xffffffffffffffff}) kevent(r0, &(0x7f0000000740)=[{{r2}, 0xfffffffffffffffa, 0x88, 0x10, 0x5, 0x4}, {{r3}, 0xfffffffffffffffc, 0x54, 0x4, 0x24cd, 0x2}, {{r4}, 0xfffffffffffffff9, 0x0, 0x4, 0x80, 0x1}], 0x1, &(0x7f0000000840)=[{{r4}, 0xffffffffffffffff, 0xa7, 0x1, 0x3, 0x96}, {{r2}, 0xfffffffffffffff9, 0x57, 0x80000000, 0x4, 0x8}, {{r5}, 0xfffffffffffffffb, 0x42, 0x40000003, 0x101, 0xd}, {{r6}, 0xfffffffffffffff6, 0xe2, 0x4, 0x4, 0x7bc}], 0x8, &(0x7f00000008c0)={0x80000001, 0x80000000}) (async, rerun: 64) ioctl$DIOCRTSTADDRS(r0, 0xc4504449, &(0x7f0000000280)={{'./file0\x00', './file0\x00', 0xc, 0x5}, &(0x7f00000001c0)=[{@multicast1, '\x00', './file0\x00', 0xc, 0x6, 0x0, 0xff, 0x6, 0x3, 0x8e}, {@remote={0xac, 0x14, 0x0}, '\x00', './file0\x00', 0x8000, 0xf, 0x18, 0x2, 0x4, 0xaf, 0x7}, {@empty, '\x00', './file0\x00', 0xfffffffa, 0xfff, 0x2, 0x4f, 0x8b, 0x40, 0x7c}], 0x4, 0x3, 0x8, 0x4, 0xfffffffd, 0xfffffff8, 0x72, 0x8}) (async, rerun: 64) ioctl$DIOCCLRSTATUS(r0, 0xc0284416, &(0x7f0000000700)={'./file0\x00', &(0x7f0000000140)=""/29, 0x7, 0x3ffc, 0x2055, 0x7}) 662.488237ms ago: executing program 1 (id=753): setrlimit(0x8, &(0x7f0000000040)={0x42, 0x3fb}) r0 = syz_open_pts() close(r0) syz_open_pts() ioctl$TIOCSETD(r0, 0x8004741b, &(0x7f0000000000)=0x8) writev(r0, &(0x7f00000019c0)=[{&(0x7f00000000c0)="cff5c05e64da486cdaae4a8238b1f359025250129bdb3b8c173b553b", 0x1c}, {&(0x7f0000000240)="aa62958cab03", 0x6}], 0x2) r1 = syz_open_pts() fcntl$lock(r1, 0x8, &(0x7f0000000840)={0x3, 0x1, 0x5, 0x1000104000000}) flock(r1, 0x3) r2 = openat$vnd(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) ioctl$VNDIOCGET(r2, 0x41946472, &(0x7f0000000100)={'./bus\x00', 0xa0, 0x8, 0x401100}) close(r1) 662.033795ms ago: executing program 2 (id=754): mknod(&(0x7f0000000000)='./bus\x00', 0x3a0914c44f7b202d, 0x65b3) getgroups(0x7, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]) r3 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) r4 = socket(0x2, 0x1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) accept$inet6(r3, &(0x7f0000000000), &(0x7f0000000280)=0x1c) mprotect(&(0x7f0000678000/0x1000)=nil, 0x1000, 0x5) connect$inet(r4, &(0x7f0000002080)={0x10, 0x2, 0x2, 0x7fffffff}, 0x10) ioctl$TIOCSETD(r3, 0x8004741b, &(0x7f0000000100)=0x7fff) ioctl$VNDIOCSET(r3, 0xc0384600, &(0x7f0000000100)={&(0x7f0000000080)='./bus\x00', 0x5, &(0x7f00000000c0)='./bus\x00', 0x6}) execve(&(0x7f0000000380)='./bus/file0\x00', &(0x7f0000000480)=[&(0x7f00000003c0)='\x00', &(0x7f0000000400)='\x00', &(0x7f0000000440)='.-:+.:}&-*@/).:\\#[\x00'], &(0x7f00000005c0)=[&(0x7f00000004c0)='\x00', &(0x7f0000000500)='\x00', &(0x7f0000000580)='^\x00']) r5 = socket(0x2, 0x2, 0x0) linkat(r3, &(0x7f0000000140)='./file0\x00', r3, &(0x7f0000000180)='./bus\x00', 0x4) ioctl$FIONREAD(r5, 0x8028698c, &(0x7f00000001c0)) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r3, 0xc01064bd, &(0x7f00000002c0)={&(0x7f0000000200)="ea134e5a474f3c010a3a0e36d763e6163ee5a69c7b673179df558286b44dbf6d76ff9e4511c6d135053ba208251e164fd53fd5df9daa952161647302aefd760943555417db59514bdd69a2af4eb582d58ec4db8314767ab34f40f273", 0x5c, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r3, 0xc01064ac, &(0x7f0000000340)={r6, 0x2f, &(0x7f0000000300)=""/47}) ioctl$WSMUXIO_REMOVE_DEVICE(0xffffffffffffffff, 0x80085762, &(0x7f0000000040)={0x1}) r7 = socket(0x18, 0x3, 0x3a) setsockopt(r7, 0x29, 0x6c, &(0x7f0000000040), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r7, 0x29, 0x66, &(0x7f00000003c0)={0x1, 0x0, 0xe5, 0x1}, 0xc) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0xffffffff, 0xff, {0xffffffffffffffff, 0x1}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r8 = socket(0x2, 0x3, 0x3) setsockopt(r8, 0x1000000029, 0xc, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) r9 = socket(0x2, 0x8002, 0x0) r10 = fcntl$dupfd(r9, 0x2, 0xffffffffffffffff) closefrom(r10) setresgid(r2, 0x0, 0x0) setresgid(r1, r1, r0) semget(0x3, 0x4, 0x210) 658.856982ms ago: executing program 2 (id=756): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x800000018, 0x1, 0x0) r3 = socket(0x11, 0x3, 0x0) sendto$unix(r3, &(0x7f0000000000)="b10006016000009f0500060003000000331c13fecea10500fef96ecfc72fd3357af302b37b673039d2d236acf20b7804be38224991f7c8cf5f88882b297be1aa5b23edeb51e2f0ac3ebbc257699a1f139b672f4d335c223e7d026ba8af630037281802000000720fd38bfbb770c1f572ca81ea77b3c5890400000000000000361b1257aea8c500002002fbffec2200008abfba090000001d89e400040700000080042000"/177, 0xb1, 0x0, 0x0, 0x0) setsockopt$sock_int(r2, 0xffff, 0x4, &(0x7f0000000580)=0xb, 0x4) setsockopt$sock_linger(r2, 0xffff, 0x80, &(0x7f0000000140)={0x80000001, 0x7}, 0x8) bind$inet6(r2, &(0x7f0000000180)={0x1c, 0x18, 0x2, 0x9, "335e8a112b458b6b49b46369df775710", 0xfe0d}, 0x1c) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x5d4a) open$dir(&(0x7f0000000100)='./file0\x00', 0xe98724a87a50ed14, 0x90) write(r1, &(0x7f00000002c0)="ed", 0xfffffdb6) r4 = kqueue() kevent(r4, &(0x7f0000000040)=[{{r4}, 0xfffffffffffffffa, 0x33, 0x20000008, 0x4, 0x6}], 0x1, 0x0, 0x5, 0x0) kill(0x0, 0x3) r5 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000c00), 0x0, 0x0) ioctl$BIOCSRSIG(r5, 0x80044272, &(0x7f0000000c40)=0x10001) select(0x40, &(0x7f0000000100), &(0x7f00000024c0)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0) r6 = openat$dri(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dri/card0\x00', 0x20000, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc00c642d, &(0x7f0000000040)={0x8, 0x3, r0}) 547.211316ms ago: executing program 6 (id=757): getresuid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=0x0) setuid(r0) r1 = msgget$private(0x0, 0x1ba) msgctl$IPC_RMID(r1, 0x0) 546.209885ms ago: executing program 6 (id=758): r0 = syz_open_pts() ioctl$TIOCSETAW(r0, 0x802c7415, &(0x7f0000000000)={0x629, 0x24c450ee, 0x4, 0x4, "9ea48193bf76eef47fd75d83fab45e43dc5d61e9", 0xfffffff0, 0xfffffff7}) ioctl$TIOCGWINSZ(r0, 0x40087468, &(0x7f0000000040)) r1 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) ioctl$WSDISPLAYIO_LDFONT(r1, 0x8058574d, &(0x7f00000000c0)={'./file0\x00', 0x4, 0x8, 0x0, 0x1, 0x3, 0x2, 0x7fffffff, 0x1, 0x0, 0x5d06, 0x8000000000000000}) r2 = kqueue() getitimer(0x2, &(0x7f0000000140)) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(0xffffffffffffff9c, 0xc01864c1, &(0x7f0000000180)={0x0, 0x0, 0xffffffffffffffff, 0x0, 0x3}) ioctl$TIOCGETA(r3, 0x402c7413, &(0x7f00000001c0)) r4 = accept$unix(r3, 0x0, &(0x7f0000000200)) sendto$unix(r4, &(0x7f0000000240)="b15f69cc936d65b6dcb1e846b4afdef21db36ac3e2c310440e5fc38496da6dda7f77a80dc637c938dc909369", 0x2c, 0xc, 0x0, 0x0) r5 = openat$pf(0xffffffffffffff9c, &(0x7f0000000280), 0x20, 0x0) recvmsg(r4, &(0x7f0000001600)={&(0x7f00000002c0)=@in, 0x10, &(0x7f0000001500)=[{&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/42, 0x2a}, {&(0x7f0000001340)=""/200, 0xc8}, {&(0x7f0000001440)=""/192, 0xc0}], 0x4, &(0x7f0000001540)=""/164, 0xa4}, 0x2803) write(r4, &(0x7f0000001640)="45daa63bb9a3a91bb820c43fcf0d0aa0693f", 0x12) r6 = open$dir(&(0x7f0000001680)='./file0\x00', 0x2, 0x47) socketpair(0x20, 0x4, 0x8, &(0x7f00000016c0)={0xffffffffffffffff}) r8 = accept$inet6(r3, &(0x7f0000001700), &(0x7f0000001740)=0x1c) r9 = socket$unix(0x1, 0x5, 0x0) r10 = dup3(r6, r5, 0x10004) r11 = socket$unix(0x1, 0x1, 0x0) kevent(r3, &(0x7f0000001780)=[{{r1}, 0xffffffffffffffff, 0x40, 0x1, 0xfffffffffffffffd, 0x78}, {{r6}, 0xfffffffffffffff6, 0x1, 0x20, 0x3, 0xf3c}, {{r7}, 0xfffffffffffffff8, 0x80, 0x10, 0x4, 0x8}, {{r0}, 0xfffffffffffffffe, 0x40, 0x4, 0x0, 0x9}, {{r8}, 0xfffffffffffffffa, 0x0, 0x20, 0x7, 0xb69d}, {{r3}, 0xfffffffffffffffa, 0x89, 0x80, 0x2, 0x1}, {{r1}, 0xfffffffffffffff6, 0x8, 0x8, 0xffffffffffffff9b, 0xa6}, {{r2}, 0xfffffffffffffffc, 0x11, 0x2, 0xfff, 0x3}], 0x4, &(0x7f0000001880)=[{{r2}, 0xfffffffffffffffe, 0xa3, 0x40, 0x6607, 0x8}, {{r2}, 0xfffffffffffffffb, 0x2, 0x80000000, 0xffffffff, 0x1}, {{r9}, 0xfffffffffffffff7, 0xab, 0x40, 0x7, 0x21e}, {{r10}, 0xfffffffffffffffc, 0xc0, 0x1, 0x5, 0x40000000000}, {{r0}, 0xfffffffffffffffc, 0x1, 0x2, 0x32, 0x4}, {{r5}, 0xfffffffffffffff8, 0x8, 0x4, 0xffffffffffffffff, 0x1}, {{r11}, 0xfffffffffffffff8, 0x0, 0x80000000, 0x2, 0xfffffffffffffff7}], 0x7fff, &(0x7f0000001980)={0xc99, 0x3}) poll(&(0x7f00000019c0)=[{r6, 0x4}, {r7, 0x4}], 0x2, 0xaf) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000001a00)={0x1ff, 0x10, r8}) pwritev(r7, &(0x7f0000002f40)=[{&(0x7f0000001a40)="ef157e", 0x3}, {&(0x7f0000001a80)="028e4e1f4ae14d75d09bb664b73861bde94deeeb0f4212e19a59e3aeeaf9c665f3aebaac22c2bb198797a8a6776e0f155ca54d5a5a77ee87979e18c938fc52993f86fe4293cd0c8b45760a94d36a0ef4487f205c50e6086609dc3dff7d51eb3edf36b5561359f916aa7f6d553c3993b552ed9b5fc8ef7a71f63abe456a35048ddd81b1c4abac1650fa069c5d83bd3806bdd7992511e7ec1bc874e00d6c51b133457cb70b4d851868187fe6a927cbbab61e374b762efed13c148dfaf7db9bc9aa5a2b1709d6ba7bd92d9b074b192a70aaa7cbe14786965587aa2586633b0f082f326eaf0631800fd40c17d8cb058d9d0944e0d40f4fe64594723324c97b6ffec40ed4cbc338efe6b39dda7806ffe6649fbf1b4bbf8820b7822aa766506b6521ae15cc2bcff8e33a63bc42ae6a27f8234e682f843fac03d09dee316490b59563a7e36f35fa1f90e2cba484c1f2327f6efe882ee7108caab0741803db83e947212d65b63be6754c35b06b75ec622830d964fd515255fe2f6cf387396478928ce2c6ff09d0e029d05600a34f5b570b9336998441fe9c00cdef6b89223c68fb13d129136095fd19e0eb70115027ef359c9dbf66a7ddc2edb6b0f6d99030fba06dd39e8b2aa2e130a566233f2561991204c82016ac7b52fc4d1bce36f8cd9d82ae6f58740decf7a56e73eda81181639d7b2fc6cf70c76637f4f809fc7a22b1c0afa16a800a490f780603dfe3ba2a765330f531cef10358bcf6eacc81bf7170d4bbcd4a234c6321340f28bffc60aef6023ab43a18977d3bcbbf3acf95e2bb3d26b7c9dbb0c2ee0302407e0907240fd231114a8be18075bd17e7687cce949a3ffde99f708cd64d31f1d91f8010ce6892bb4a050a7a54a14b28882ed0094e23d65bef96cd12b7fd7417ba48f38b30e0dbe7a2a13e6c4c632a581758ee9fbc1994545e2c751f828391690d5934e294b610d30a071aa933bde6e42247f54d4f50a44120db7df51cfdf01ce7cc5b7547e66d343323258b278a6ad0ab175d5efe6acbcf1691a5a1c87027ff129e15d4d355505bbbb52d2f0d32fddf928a3c62891eedb44fae7543877b15eb4f5d1088e324497c7b66c0a2cc81770d4943176cdeb105121cdb4f5de5fbda1237cf1867880b8a9a456674160594eab78996d3e483c4ea060b6ae7a8c79dafbcda9446e76daec1cbc4c00dbb84d23de947d5f13c2bee8b422fd65960ad44adadfd9b0557469a992661885e8cd896d552a85c4928771ed4f7ddf91bd6a6239a2e63eceb12b8b94bcf7f3dfefd97f7aa78e8573725f0c096704b4984ada14783bb3be3fc7360ae4b13c25cb4a306930f3c1a827138bd179f57f4376dd0e519333319d2b36a39b178d51a85d8ce4871fc2088db5395d9c079f916fa232f5c08b33b27acbbacba55755f05af16e69f6471f5ee7e2838113b51642ce5c88dc40b4cdecb039b8c8979538a510e151c214a69cb9c4536a0b8dec4b74f19f2eb44adb21d746d823cce78c30ada3df2fcd837f7272d06061034268d38099eda8202fc39592a773fe465e6616536d13a57702dd4a4b4e490c1091e6f706c2e411805944b44ec26b9ab66a242bb3861a44b640501a497c91cc5c8b66f54f3acacabeff9cae57a6858aad66d210eab1711b254e2ee59693381cecef5e002985aeec1eb9af9ebf6f15e5b34c3f1a7bbd72a05235f5e6a23b8b2910da0ac35b233e98bf13885e95b9a933fa150d2ea5cffb2c1713042bb61e9dc028d100d686be89790ccbc89b6697c668476b4a71b9a556670938761cb93154b78c54ea9d38c7bcf996a31ce7f4e2361bcee210f5c6c468efc4aabef6e26c050eadc2eba7466cf04311a12665097f7ba7d872612f8da75a51975af7d5e35d1cc80a79a47d99c7fdeba6dff370ac643dad966858148ee37cde8b400dccce367dac803539bb113ab15c1d385192301c46c74e6529bead72cd10d9a7da195870493975c6cb45e9687be8a463e173973b030a5d05251b5ba68c2b23fdab1547b4e4cdc6fc0742c7993c0d94f049ec9edb01aee7d8fc1a5c3a6167394298440c0e82e8a4ac006217e1538d849d10c5b06290ff92ba6c60ebe11bfc121c78a2e45a5c20a5e7547b0e377d659e40b5ea5a74cfc94bbd8df8ca66ae52f877635720ea0a157440c25f3651f0208b716429cae8f89ac2711616c30411ed62c7a6de801bf5c1ed38e790393d91674167ede0840d92a8a9c5503d5f93e9d4ca21632ee2beb8c943e012029f2fea4022228eaa50af07e86d51dfa4d89b2667e1fdef52589ee7bec15b8e9ae2eb7c492f400dea7cf7ff3644156deedbf28c7360b3d50b56937652552ab09eb04ca1715ba4d9b16020940610f1f778e9c888397c23e66453f7ac065cc5d8b5b5395ebc5af7933dcccba32b2c3d126aafeb3eb300624a952ad7e72230dec002dd304be1c07df6d70677993952d8c7b3e8322609cdd4a75a42423eed8b09bfbbaba6bbcafbbecac05969e5099788084f3c7f52a2a3bd365c8d9291acb8a9cdb78e7942cd1c981612c636dfcd61a36b3e0cb90252668168166556121964cd346149f19cd0f0eb163c98394fffd6ea679d602469a88a4583940f21ddbb89aaabe6fbd91ce69092ccd9c6b926f0249e61cbb7e586e378983f37dbb556943d47ff186c8584bd0b0ed5d4349eaaa6a0d241456f5bdb40f3de36f0467206ad092fbca44bcc459e149728ee8ac24b5ec4b65a3e460aae48cc438abd0e7cf8ae7fc57f9130e7b43f197f9492c88195427ea4ea67a92207e9fc58b461743a68335065e823a551475beb61f47aa171af25876a9d7d859a4125999a974f575fa11f001e2eb12c541aca7daf583e95455c8bf2b0150b6237d1dfc8a6d412853e37abf5aecadfd8687ce7a2fda9c5278f317975a4b419e1efe07c0fa4ec2221492f84696205732f503686ef775728790655a4c3d13e105265fdbeed799dfa96f459f5e73b6565d4ed8a07f9403fee18cefb197917a3664d9a3c056e03e9edc3c0ce9b30e6ed982da8161254ecc20a20d4402905536eb21c7e72e784b1ed65f03a5097ef98628a82f0c31ca8d1cecafde91ab062695d1c3835910fcf87b60bad339b8f4ed6b8e96e204ac06b5aedeb6c165556004f6a582c574f962cf8c1fd21a040569dfd4fdd43157b272a0a4331596370ac48ce44c42631d4b81fc07d4b1e27c3f45037f94dca271bacda634bf77ffb55c200f7871879b49d96ee5403ac36315ba951db65da34c0e42cc76be4a0de386963e908096abb071b8d59ed82c4ad1ea1725845b7915a3dd1a0ea068bf299ba72725d2125eda5456a045b96d1a97aa7e3d0ae738cd9c70e20f97da839f7648bfde17def7a91e527803dc52f9cbd70aa7ba3c346cf21ef905748ad7416b024939e304eac24fa412ffa7c93ccf3275032eda4e639c4b8a3b94f73d2aafe759f402a37725725d2aeeca94d522c65cdecdb94a45b0e4048f5552c31a28c618cb4c433c01da0a260cef503c3689a92c990b2aa92adff57d6edb1145aa502dcf68bdc56e138ef42af292e666f0550fa89b3600089dc057290806bdff94f38af081d598698baaa763f48686fe7e065205a646899d5978098c7f02de3b70672f6dc3dcb83da5e4c431efc4caae0758bcd58eb466bc9c9d13baecbf26306ff5e6834364c3428dcf5c33d2bab636b4b7145d3424ad972907bd24241c01fd7b3b3d566fec733e680c38eef1198ddf99051cabf359c27f38038bf430a621f233b6ef4c43cb223f1488750b101d00c66fd89a637f94417f7a2441f444a87a6e9f3eaf57c2da5e7a176145a171ea1783ced70a58579f9361162d7bcfab038f4929d821a8e8ce7e51dbc0e749de3215a8a358c7a254d836f64b6fb38c018d50768a02a94b39dd0ebbfe61ca1744560a8a90c8278dd20ec644679ab69c5afec3b0f40c42bf872de1072f32911bac6217b9f8105444c3bb8d8c57f7383d45f9338cb32de408c70c9ce9a2501d8c52f4fc410afc870187c7e2211d79e1996346773d4fab8bd26cc5bf2b4981e9551d090ba72c76ca9765c0a408460c6338d6447483dce9768b5ce981cda7a27945bf6ef56fe3bb7500ba85a7095b1f69db3aff5b5a55574f298e79f00110b99a37a5a25ef7900be23a1d2ee247c470018baeed380f66d797c4ff27bb67528c831c499b48bf280c584602411868624f2fe11154f9af5e527680a0167daa3f0dd79a2223066b9c22a4f9b29088bb8547b20642e4a7a080e5c4c9ec8dbc3ae00dbf589e01351ab35a351f4f67b85c1e9bac5553d94d47b43fb08081d5b13e69daf7e08b249398d3bb68218c407727b813372170ff2631e2be281f9106f78f66611e452c96366a165c597e14f2b5c6c998cd8c676339a69138ccefbf4d35f6af11a4d32b49ad67935f5426086cce5ceba0abf25cda089f9bb7664c6dfd292fb2ed7058bf5c42f38a2eef1dd2e587db46b12ef8479ea965d7122938dd72c24ded1f5058a005ae63b2122dddddf5368c9e237486f7cbd3ceec778e269ee0706f1620a3d4456423ecc77b34cce9acbfe56f10b1a8384a98c3fb6562c733767f81749a3e21fb9f3392b57afd69da6396b6aecb02084043163a218c6fe8c4d4d09d43fb52c32343aa17791b49435d2e0d365f220204011970d45862b2f7faaee2cfbe643c1d3f6a5d1c1ebe98071f1436c86ce5a9a2e41a6ebd71f46351ef0b9252e7a05d155486a7c98aa9617cf8c7fd42ff1aee20d37d0cc16cc0a8935b22adb42794b012e272edc96eb8c59ffe86919d9065adfed2eef9a174d51fdb53ea73fd8f7dbb5755739400afeffb2a07fa8a8026eb2bb651f2e9f5206f36b6296ecf292b643d80ec43dfb4625e14b000c093dfc6ceb8b39f1743fd0f3ee499a39d207f0e877992900273ff45b60ef4e642e9b77c7a587918bae800d63e0791b66a7a6787e85570162eba7c7f71661c4cdb7fdba1de76792157f989ea04a48ce3ca65a6704802a7aa9f3ba74504c68c16a61c940d458601b05c5211ee11df496b19955fc2e23e4c9f49d998e0b1a8b4391216451fee464e72391abb6e953e391e9dbf76d6437fcbc6eb860bdf16ee15e277c717999aa69ff9fb2628af4e724d0ab402de50be738d210897bf1ba1dff7fb147ecc4fd3e903eb2fbaa2091f394774b0c4fb77874638226687cc5cdcf6ac1cca122c10c69e2b577ba477bfd70f8d31fe8af0e24531584c875d00517aed4aa8df3599c2f8f0a5e326ea70ed2e4ed3fe35b643f16aa2e3fd4c7fd65c6465ed0571f90c20b97ad56d98a10eb7ac027bf10f729ca4ecd217d65bad722fc55bd9763d45c118b5e19d0fc093918ea8aa438f0f286dfbf236177fcfbbac9b17e281821a5703cae4cffa737d6d271ed42a656d871633b4b019cc66d4481a8c23ddc8f52afe056f738a7796380dd4fe4379dc2ab9948be05e0f41eea6cbcf366cfe199db4546d42d84bbf0fdc25a7974ffeb2e9b2140b13ec5dcae3a4129f43f892d07c18ea610153c274a692ddf021ce99daa5dde33d308cf1296e494cd960a126595cab7830e0202a2a539123f9c1bf2ee5b7af1dfacc6edcf3b1fe452e20205407542f41890bd16504d55949c9c0f90d496c56935c2d720ad318d1f05929b3cd4c5a8fd346a99e6975d2f6eef3ab7b40b9d7796e8889db11cf48019950feb2d609767c909987cfa2240ac050cee1667b8548466771265635cee1ee75f6f0a359aa0323efee3bb3a5d62fc2cdcbeb80b1851fa299658b43765ffce77db2dd2dc811a7573e92ad0c2a32864ed51f", 0x1000}, {&(0x7f0000002a80)="9333709185eec5e4a1a550b48d45645fc6b7aa94356956d73099e72fb6d4daf9e2e3025bc5b64480f65f4a836bac5edc14590546215099ed0e2636b501b12341fde91177ad433f9f62be7f2bbda2ca82d2ecbc23032c77da63628804bb6e9fdb44f71b224e7460ecf015d99c030fafd5105d7fc7b694730ed6eed727f47d936e5fbc560d92487e5e870d6d19646ba0f1085deb22e3301775f603d274f97863fa42fc1e8a4acef0d78cdc59c34bd0a2275d83eaa5", 0xb4}, {&(0x7f0000002b40)="06684bed7958280d400808006c72deb927efac67c0a248cfb024647ddf296916fc19f4cb5f62243f", 0x28}, {&(0x7f0000002b80)="b966e059de97a222ae99292f506db7f718aeb91e0518e4f89df6345ee0a8ba2119f3e27f7f23008d34c104e4b46c2bd17932aa3acf62f36139e24335efa8efd5df178f27a06d57ff5494cbceb65c7bfc3a0526a9853ff373cc71a23fd6c34a9b7039fad26a6653e26f5041258eeb3728e817e720ceb7369acb5429011ba6ad8b814803613bb9c80a2e583b276db878f94c896427bf20fbcd3b8134520d62bec2718adaa2f13df17a01776bed0f64ea77a7b80ee50af20519ea5d3b32057a97e64029536f2141e33f4fabd59b9fbc57ed754f6b6bf91a2b1d0052840bfe88df", 0xdf}, {&(0x7f0000002c80)="72ed2b1bb867901c99797c1594374a8a784343bdfd49f531809c55181d7af7d90d9b74e914ebe4258815f28bd1e6b300107fc3546a9911a244a57009453166a138952fd561e591eef4e735ea1f37b1b37bb222a42ec0de02a36a6039b47238ea58006f9d43e1d62fd3e68f99ab12c4ce5343cd769c19cc1f7f4c7f3c7b1d96a0916920e43bdbf17f4fcf08e86ba1d902e606fd9deda2b88ea9d5d9221ea7ba6e05ad056f5d864f58998e61e15e5720b7b259396c52b039e52c15204f9c7a55113fa9a7b67f4650a62d922f22bcc40893db73900064273003288e2e0d4efcef54fb4e846d", 0xe4}, {&(0x7f0000002d80)="a80005b5d86754094355cb4a85a36c440a197476e3b37310c4c3cb57e93005b9036134e00ee55fd35778e5fc010a908f85992de7dcd1eb44dcd2f6a2cacb6b625a9d218e", 0x44}, {&(0x7f0000002e00)="9ddb0924116aece65f", 0x9}, {&(0x7f0000002e40)="103488ef71fdcf00574f31c35c5c72e7cdcd8d2fd7e5f0619b98204e5fea1701273df320a4249134da11509581814b721b849e325261546efd89910f403954125de6796579a52832db70994bb2f64fcfba363494cc50bf968204dcd9d126de3078c3098594bc82662afd2b2163bc735d4105f398d964a8d40ff9d19769928e883650b73d6eafdf53c7906ba74505b3e3729c4bd7807bbac5e89b294cb8f2e5045579bd2cfd026646dae3e3d4787228b77a66353613d775ca05bb077cd96eaa1bac6364e89d0ca59084138fd2c47f32872defddfffc74eb82eb53b66c86ed566f979fd056e9adfa6a23ed7c", 0xeb}], 0x9, 0x3ff) ioctl$WSKBDIO_GETBACKLIGHT(r3, 0x400c5711, &(0x7f0000003000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000003040)={0xffffffffffffffff}) getsockname$unix(r12, &(0x7f0000003080)=@file={0x0, 0x0, ""/505}, &(0x7f0000003280)=0x1fb) sysctl$net_inet_tcp(&(0x7f00000032c0)={0x4, 0x2, 0x6, 0x2}, 0x4, &(0x7f0000003300)="716fadda2e1349d31c7d54ffb16af8639417bc753daa1c68d4f1d75b45c7011da18a39ff960b5ffdc85811747634c94f469e2ecd2c668924eb86450aaaeef79cc0d9ff689a3504e5ef6be3ea6ec8c50d131a97fabb380f6fa40a59be09240727d397f6772b8232", &(0x7f0000003380)=0x67, &(0x7f00000033c0)="dba8c73d781d22e2627c0cc2f3acc964aa38c6c452331fedbae27711e4dba923761bcb07c2eeecc11a972fe40963e3c7869b63214702d9990ef0a419847a3a634256d573fd0bfd0aba84a04f66defcd6c4c9b7", 0x53) pipe2(&(0x7f0000003440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) readv(r13, &(0x7f00000046c0)=[{&(0x7f0000003480)=""/4096, 0x1000}, {&(0x7f0000004480)=""/197, 0xc5}, {&(0x7f0000004580)=""/106, 0x6a}, {&(0x7f0000004600)=""/172, 0xac}], 0x4) 470.3427ms ago: executing program 0 (id=760): r0 = socket$inet6(0x18, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000680)={0x1c, 0x18, 0x1, 0x9f6faa0, "ff1b3c0000f757d312000c0000000100", 0x8}, 0x1c) connect$inet6(r0, &(0x7f0000000280)={0x1c, 0x18, 0x1, 0x4, "0000000004000300", 0x2}, 0x1c) sendmsg(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x40c) r1 = kqueue() kevent(r1, &(0x7f00000000c0), 0x138, &(0x7f0000000100)=[{{}, 0xfffffffffffffff9, 0x1d, 0x0, 0x8100000000000000}], 0xffffffff, 0x0) poll(&(0x7f0000000000)=[{r1, 0x4}, {r1, 0x1}], 0x2, 0x4) sysctl$kern(&(0x7f00000000c0)={0x1, 0x55}, 0x4000000000000003, 0x0, 0x0, 0x0, 0xffffffffffffff48) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$kern(&(0x7f00000000c0)={0x1, 0x2c}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0xfffffffffffffef1) poll(&(0x7f0000000040)=[{r1, 0x1}, {r1, 0x2}, {r1, 0xc713a78acaeefdd3}, {r1, 0x40}], 0x4, 0x2) 470.087732ms ago: executing program 1 (id=761): sysctl$hw(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) select(0x0, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000000000)='./bus\x00', 0x2000, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x10000, 0x0) kill(0xffffffffffffffff, 0xe) open(0x0, 0x1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$TIOCSETAF(r0, 0x802c7416, &(0x7f0000000340)={0xc9, 0xffffffee, 0xe150, 0xfffffffd, "000d0000e1e50700000020000000000000f70080"}) r1 = socket(0x18, 0x2, 0x0) setsockopt(r1, 0x1000000000029, 0x9, &(0x7f0000000040)="03000000", 0x4) sendmmsg(r1, &(0x7f0000000200)={{&(0x7f0000000140)=@in6={0x1c, 0x18, 0x0, 0x7, "ff0100", 0x10000003}, 0x1c, 0x0, 0x0, 0x0}}, 0x38, 0x8) setitimer(0x2, &(0x7f0000000000)={{0x8, 0x5}, {0x7ffffffffffffffb, 0x6}}, &(0x7f0000000040)) utimes(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={{0x6, 0x5}, {0x4, 0x1}}) utimes(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={{0x7}, {0x2, 0x4}}) 469.518742ms ago: executing program 3 (id=763): ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) (async) socket(0x11, 0x3, 0x0) ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, &(0x7f00000000c0)={0xa, 0x88000148, {[0x3, 0x44, 0x6, 0x6, 0x3, 0xd, 0x100, 0x40000000000, 0x1, 0x2, 0x9, 0x91c, 0x8, 0x2000180, 0x0, 0xd3, 0x76, 0xffffffffffffbff7], [0x5438b950, 0x5, 0x1004, 0x5, 0x1, 0x2, 0x9, 0x78a, 0xffffffffffffffff, 0x3], [0x6, 0x6, 0x8000000008, 0x8000000008, 0x10000, 0x210, 0x8000001000002], [0x100000000, 0x10801, 0x0, 0x5, 0x3], [{0x0, 0x7, 0xfffffbfb, 0x80000000005}, {0x5, 0x925, 0x20003, 0x338}, {0x1000, 0x7fffffff, 0x0, 0x5}, {0x9, 0xffff, 0x2, 0x594b}, {0x4, 0x9, 0x2, 0x8}, {0x1f, 0x1004, 0x0, 0x7}, {0xe4, 0xffffff81, 0x1ff, 0x1}, {0x6, 0x10000, 0x8005, 0x2005}], {0x6123, 0x0, 0x501, 0x8}, {0xfffe, 0x7f, 0x8, 0x4}}}) (async) shmctl$IPC_SET(0x0, 0x1, 0x0) r0 = socket(0x18, 0x3, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) (async) ioctl$FIONREAD(r0, 0x8020699f, &(0x7f0000000100)) (async) unveil(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='x\x00') (async) open(&(0x7f0000000000)='./file0\x00', 0x9cab835cfdc52675, 0x0) (async) syz_open_pts() (async) r1 = socket(0x18, 0x1, 0x0) (async) r2 = openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) r3 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x200, 0x186) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x2015, r3, 0x0) setgroups(0x1, &(0x7f0000000380)=[0x0]) ioctl$DIOCGETTIMEOUT(r2, 0xc008441e, &(0x7f0000000280)={0x1, 0x7}) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0xfff}, 0x0, 0x0, 0x4ad1, 0x9, 0x5, 0x0, 0x0, 0xa7, 0x0, 0x5, 0x0, 0x11}) (async) pipe(&(0x7f0000000040)) (async) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) (async) r4 = socket(0x18, 0x2, 0x0) setsockopt$sock_int(r4, 0xffff, 0x1023, &(0x7f0000000040)=0x4, 0xd4) (async) ioctl$FIONREAD(r1, 0x80206982, &(0x7f00000001c0)) 338.096065ms ago: executing program 0 (id=765): r0 = socket(0x11, 0x3, 0x8) socket(0x2, 0x8002, 0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) closefrom(r1) openat$wsmouse(0xffffffffffffff9c, &(0x7f00000000c0), 0x8981, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_pts() close(r3) syz_open_pts() writev(r3, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) closefrom(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="28000000ffff000001"], 0x28}, 0x0) chroot(&(0x7f0000000740)='.\x00') recvmsg(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/51, 0x33}, 0x0) r6 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$BIOCSETIF(r6, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSETF(r6, 0x80104267, &(0x7f0000000140)={0x3, &(0x7f0000000040)=[{0x7, 0x80, 0x3, 0x4}, {0x35, 0x0, 0x0, 0x8}, {0x9b1e, 0x0, 0x0, 0xb}]}) syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[]) sendto$unix(r0, &(0x7f0000000280)="b1000501600000001700000007000000085c13fecea10500fef96ecfc72fd3357ae320b37b673039d2d236a3f20b7804be38385291f7c8cf5f882b297be1aa5b236deb51e2f0ac3ebbc2576b9a5f139b672f4d335d223e7d026ba8af630037282118000000720fd38bfbb770c1f5a872c881ea6e69e0bb76d907c400000200361b1257aea8c500002002fb00000000008abfba09000000ec1d89e000040781e40500000000000000000900000000000000", 0xb1, 0x40a, 0x0, 0x0) 337.241005ms ago: executing program 3 (id=766): r0 = socket(0x2, 0x8002, 0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) closefrom(r1) socket(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="28000000ffff000001"], 0x28}, 0x0) recvmsg(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/51, 0x33}, 0x0) r4 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, r4, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) r5 = socket(0x2, 0x3, 0xfc) ioctl$FIONREAD(r5, 0xc0106924, &(0x7f00000001c0)) ioctl$FIONREAD(r5, 0x80206913, &(0x7f0000000100)) sysctl$kern(&(0x7f00000000c0)={0x1, 0x45}, 0x2, &(0x7f00000002c0), 0x0, 0x0, 0x0) sysctl$kern(&(0x7f00000000c0)={0x1, 0x50}, 0x3, &(0x7f0000000100)="00e0ae5b7e0d0000bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x50, 0x0, 0x37) open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x10686, 0x8) select(0x40, &(0x7f0000000000)={0x1b, 0x4, 0x200, 0x3, 0x0, 0xfffffffffffffff9, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0) mlock(&(0x7f00001ed000/0x400000)=nil, 0x400000) r6 = semget$private(0x0, 0xb, 0x71f) r7 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r7, 0x0, 0x200000000000b, &(0x7f0000000080)='\x00', 0x1) setsockopt$inet_opts(r7, 0x0, 0xd, 0x0, 0x0) semop(r6, &(0x7f0000000000)=[{0x1, 0xff}, {0x1, 0x3, 0x1800}, {0x3, 0x3ff, 0x1000}, {0x4, 0x7f, 0x1800}], 0x4) getsockopt(r7, 0x8, 0x6, &(0x7f0000000140)=""/105, &(0x7f00000001c0)=0x69) semop(r6, &(0x7f0000000340)=[{0x1, 0xfff1, 0x1800}], 0x1) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) 328.988579ms ago: executing program 6 (id=768): r0 = getpgid(0x0) getsid(r0) mknod(&(0x7f0000000040)='./file0\x00', 0x2000, 0x1e5f) r1 = open(&(0x7f0000000240)='./file0\x00', 0x80, 0x2a) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x51, 0x2100007, 0x6, 0x80000001, 0x80000001, 0x10001, 0x10, [{0x3, 0x7, 0x4, 0x71000}, {0x8, 0x9, 0x8, 0xfffffff9}, {0x8, 0xf86, 0x0, 0x9}, {0x1, 0x800, 0x8007}, {0x401, 0x200726, 0x2800, 0x7}, {0x2, 0xa, 0x3, 0x99}, {0xce1, 0xffffffff, 0x4f8, 0x6d}, {0x6, 0x300, 0x54, 0x8}, {0x2, 0x82, 0x5, 0x9}, {0x4, 0x8001, 0xd1b, 0x100}, {0x1ce, 0x10001, 0xf7, 0x3}, {0x200007ff, 0x9, 0xfffffffd, 0x9}, {0xb8c, 0x5, 0x8, 0x4}, {0x29a71717, 0x7f, 0x1, 0xc373}, {0xb6f, 0x407, 0x5}, {0x8000, 0x1, 0x101002, 0x30004}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r1, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r1, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffe, 0x0}) socket(0x1e, 0x3, 0x0) 280.478046ms ago: executing program 4 (id=770): r0 = socket$inet(0x2, 0x1, 0x0) (async) mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) (async) r1 = open(&(0x7f0000000100)='./file0\x00', 0x70e, 0x0) (async) mknod(&(0x7f00000001c0)='./file1\x00', 0x2000, 0x285b9a) open(&(0x7f0000000800)='./file1\x00', 0x800, 0x120) mknod(&(0x7f0000000080)='./bus\x00', 0x2000, 0x205b1a) (async) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x20) closefrom(r2) (async, rerun: 64) r3 = open(&(0x7f0000000200)='./file0\x00', 0x200, 0x0) (rerun: 64) fcntl$lock(r3, 0x8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x100000001}) (async) r4 = socket(0x18, 0x3, 0x0) getsockopt(r4, 0x3a, 0x12, 0x0, 0x0) (async) bind$inet(r0, &(0x7f0000000000)={0x10, 0x2, 0x3}, 0x10) (async, rerun: 64) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) listen(r5, 0x7ffb) sysctl$vm_swapencrypt(&(0x7f0000002c00)={0x2, 0x5, 0xaa496315f73f133a}, 0x3, 0x0, 0x0, 0x0, 0x0) r6 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000240), 0x200, 0x0) ioctl$BIOCGRSIG(r6, 0x40044273, &(0x7f0000000380)) (async) ioctl$BIOCGHDRCMPLT(r6, 0x40044274, &(0x7f0000000040)) (async) syz_emit_ethernet(0x3a, &(0x7f0000000180)={@local, @random="ced93b7efcca", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x3d, 0x2c, 0x68, 0x0, 0x0, 0x6, 0x0, @multicast2, @local={0xac, 0x14, 0x0}}, @tcp={{0x3, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x8200, 0x0, 0xfffc, {[@generic={0x3, 0x2}]}}}}}}}) r7 = getpid() ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x510, r7) (async) fcntl$lock(r1, 0x9, &(0x7f0000000140)={0x3, 0x2, 0x3070, 0x7, r7}) 280.066321ms ago: executing program 3 (id=771): r0 = kqueue() mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket(0x18, 0x3, 0x0) setsockopt(r1, 0x1000000029, 0x41, &(0x7f0000000f40)="5ab7776a", 0x4) ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, &(0x7f0000000100)={0x10, 0x0, {[0xfffefbfffffffff8, 0x1, 0x2, 0x5, 0x2, 0x0, 0x8, 0x0, 0xfffffffffffffffc, 0x4, 0x5, 0x20003, 0xffffffffffffffff, 0x4, 0x8000000, 0x20000000001000a8, 0x8000002, 0xce7], [0x1, 0x80000001, 0xfffffffffffffffb, 0x8000fffffffd, 0x100, 0x7b97, 0x200001fe, 0x2000404, 0x6, 0xffffffffffffffc1], [0x100000101, 0x2, 0x40000000, 0x6, 0xfffffffffbffefff, 0x11006, 0xfffffffffffffffe], [0x100, 0x8, 0x401, 0x100000000, 0xffffffffffefffff, 0x6], [{0x0, 0x5, 0x0, 0x9}, {0xfffc, 0x0, 0x4e, 0x3}, {0x7f, 0x10000, 0x5bec, 0x814}, {0x3, 0x800001, 0x4, 0x80000003}, {0xd, 0xfffffffe, 0x0, 0xa000000}, {0x1, 0x2003, 0x3fffe, 0x4}, {0x1, 0x20000, 0x4, 0x8}, {0x0, 0x965, 0x0, 0x3}], {0x1ffc, 0x1000001, 0x80010000}, {0x8000, 0x109, 0x3, 0x8000000000000002}}}) kill(0x0, 0x12) kevent(r0, &(0x7f0000000000), 0x96, &(0x7f0000000540), 0xfffa4961, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000840), 0x200, 0x0) read(r2, 0x0, 0x0) 279.058297ms ago: executing program 7 (id=772): r0 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) (async) syz_emit_ethernet(0xda, &(0x7f0000000100)=ANY=[@ANYBLOB="7a9f644e49000000000000008100100081"]) (async) r1 = socket(0x1, 0x8002, 0x0) r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) (async) closefrom(r1) (async) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x205b92) (async) r3 = open(&(0x7f0000000080)='./file0\x00', 0x2, 0x88) ioctl$FIONBIO(r3, 0xc0307004, &(0x7f0000000140)=0x1) (async) getdents(r2, 0x0, 0x0) (async) write(r0, &(0x7f0000000080)="63de502ee3c083660da112521d532d0952ebe5b9a6cc15d5f46d1efa6d925ace32aec7ad22c6df66e9d2503a861fe58e1eb7d63d317c136a98c06c61790b6c862a47646d1adf86b8aab6d1e8f6bf25fd47fa4416e2ee06ccc651d730772938cf0e61304e8a326059561894f140e513bea582aac509ced9f6e4140853af67cb1c9003b98950d052c4ecc9828d1dbf2da4bafd61fef87110d466e6d203b49ca1bc12bc4f6e6d9ca6ba1ddd36a724e09eb4d41f60919d2cd3a04d6967376e166e1439e2192ddf9c66", 0xc7) (async) r4 = socket$inet(0x2, 0x1, 0x0) ioctl$WSDISPLAYIO_GETSCREEN(r2, 0xc0245755, &(0x7f00000002c0)={0xfffffffe, './file0\x00', './file0\x00'}) (async) bind$inet(r4, &(0x7f0000000000)={0x10, 0x2, 0x3}, 0x10) r5 = syz_open_pts() ioctl$TIOCSETD(r5, 0x8004741b, &(0x7f0000000040)=0x9) ioctl$TIOCSETD(r5, 0x8004741b, &(0x7f0000000000)=0x1) (async) r6 = getpgrp() ktrace(&(0x7f0000000040)='./file0\x00', 0x4, 0x40000d38, r6) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r2, 0xffff, 0x1022, &(0x7f0000000240)={r6, 0x0, r7}, 0xc) (async) ioctl$TIOCCONS(0xffffffffffffffff, 0x80047462, &(0x7f0000000300)=0xfffffff8) (async) listen(r4, 0x5) r8 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0) ioctl$BIOCIMMEDIATE(r8, 0x8010427e, &(0x7f0000000040)=0x8) (async) ioctl$BIOCSETIF(r8, 0x8020426c, &(0x7f0000000000)={'tap', 0x0}) (async) syz_emit_ethernet(0x1000e, &(0x7f00000015c0)=ANY=[]) (async) syz_emit_ethernet(0x138, &(0x7f0000000400)=ANY=[]) ioctl$BIOCSETIF(r8, 0x8020426c, &(0x7f00000003c0)={'tap', 0x0}) (async) syz_emit_ethernet(0x36, &(0x7f0000000280)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x3d, 0x28, 0x68, 0x0, 0x0, 0x6, 0x0, @empty, @local={0xac, 0x14, 0x0}}, @tcp={{0x3, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x2, 0x0, 0xfffc}}}}}}) execve(0x0, 0x0, 0x0) 235.591948ms ago: executing program 4 (id=774): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x0, &(0x7f0000000180)="8908665d19ac14d5e5134776ae9f1b73607f43644f57a320913048771197a7728420aef61715f7b1c3d4b383e14554805329aa9b0875220b29f5b39c5d3a54316b3dfd7d2bce9f6eb7cc51fe7f65eca7654d63483904d63e811171e5f46429a837f45abe95788df006f35683a855149e8ed44dea80c9ac9470debcde621cdc96fc26a9b0391defa70a459053e06b0a9dc5d4f06ec3e1d58339df0087d1621d4c7e38210d9ffa0a11b383d90f1efae56e88bda3978b795c1149a2c12dc7189e97ed9f986b56b17c41fc4dc63f0e0c2106f6351f7eade9", 0xd6) connect$inet(r0, &(0x7f0000000000)={0x10, 0x2, 0x1, 0x1}, 0x10) sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91504694a14b8e5f84cf71b59c7afec34f82", &(0x7f0000000080)=0x1fde, 0x0, 0xffffffffffffff06) 235.280343ms ago: executing program 4 (id=775): r0 = socket$inet(0x2, 0x2, 0x0) dup(r0) (async, rerun: 64) r1 = syz_open_pts() (async, rerun: 64) r2 = socket(0x2, 0x8002, 0x0) fcntl$dupfd(r2, 0x2, 0xffffffffffffffff) setreuid(0xee00, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$sock_cred(r3, 0xffff, 0x1022, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f00000005c0)=0xc) setresgid(r5, r5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$sock_cred(r6, 0xffff, 0x1022, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f00000005c0)=0xc) setresuid(r4, 0x0, r7) (async) close(r1) (async) flock(r1, 0xf) (async) r8 = socket(0x11, 0x3, 0x0) sendto$unix(r8, &(0x7f0000000200)="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", 0xb1, 0xe, 0x0, 0x78) 232.908339ms ago: executing program 3 (id=776): mknod(&(0x7f0000000240)='./bus\x00', 0x2000, 0x6d4) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x10, 0x2, 0x1}, 0x10) listen(r0, 0x7ff) r1 = socket(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000000)={0x10, 0x2, 0x1, 0xac1402aa}, 0x10) r2 = accept(r0, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000000280)="fef5", 0x2, 0x403, 0x0, 0x0) recvmsg(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)=""/59, 0x3b}], 0x1, 0x0}, 0x40) open(&(0x7f0000000000)='./bus\x00', 0x8, 0x80) mknod(&(0x7f0000000040)='./bus\x00', 0x1000, 0x6) socket(0x2, 0x2, 0x0) r3 = setsid() r4 = socket$inet(0x2, 0x1, 0x0) r5 = syz_open_pts() ioctl$TIOCSCTTY(r5, 0x20007461) fcntl$getown(r5, 0x5) fcntl$setown(r4, 0x6, r3) pselect(0x40, &(0x7f0000000000)={0x5, 0x2, 0x1, 0x7, 0x3, 0x3ff, 0x917, 0x5}, 0x0, &(0x7f0000000080)={0xfff, 0x5, 0x8, 0x9cb3, 0x5, 0x4, 0x8000000000000201}, 0x0, 0x0) 197.564855ms ago: executing program 5 (id=777): r0 = socket$inet(0x2, 0x2, 0x0) getsockopt$sock_int(r0, 0xffff, 0x1021, 0x0, 0x0) fchflags(r0, 0x10000) 175.186177ms ago: executing program 4 (id=778): r0 = open$dir(&(0x7f0000000140)='./file0\x00', 0x2, 0x81) setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) ftruncate(r0, 0x48001000007) sysctl$kern(&(0x7f0000000000)={0x1, 0x47}, 0x3, &(0x7f0000000080)="b9d55a65edf95074454cbeef747750212b261340975c61c98fc44606f6c84c8106c596189f2824da6ce26ef22601faa932f8506c338734f736b71fe63c3db1e9d4ed2ce08ee7f16195ac49fb6ee8486b47aae9157492458d108d0fcface1392fdf88be327280a9ccb04d81e8c6efb7ee", &(0x7f0000000100)=0x70, 0x0, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x7) r1 = open(&(0x7f0000000100)='./file0\x00', 0x8, 0x8f) ioctl$TIOCSWINSZ(r1, 0x80087467, &(0x7f0000000a00)={0x4, 0x9, 0x5, 0x1ff}) truncate(&(0x7f0000000180)='./file0\x00', 0x100000000) 174.73788ms ago: executing program 5 (id=779): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000540), 0x1, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) r1 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) ioctl$TIOCSETA(r1, 0xc148445e, &(0x7f0000000040)={0x4, 0xffffffff, 0x0, 0x8, "210d0200000000000000000100", 0x80000000, 0x39f269e4}) ioctl$BIOCSETIF(0xffffffffffffff9c, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) (async) setuid(0xffffffffffffffff) r2 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r2, 0x80206980, &(0x7f00000001c0)) pwritev(r0, &(0x7f00000000c0)=[{0x0}], 0x1, 0x1) (async) mknod(&(0x7f0000000100)='./file0\x00', 0x2000, 0x4) (async) r3 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) setuid(0xee01) ioctl$TIOCCONS(r3, 0x80047462, &(0x7f0000000000)=0x1) 174.359523ms ago: executing program 6 (id=780): ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc5005601, &(0x7f0000000000)={0x10, 0x0, [{&(0x7f0000462000/0x2000)=nil, &(0x7f000057e000/0x2000)=nil, 0x1}, {&(0x7f0000ffd000/0x1000)=nil}, {&(0x7f00000cf000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0xfffffffffffffffd}, {0x0, &(0x7f00004f5000/0x4000)=nil, 0x10000}, {&(0x7f0000000000/0x2000)=nil, &(0x7f0000181000/0x1000)=nil, 0x1}, {&(0x7f0000000000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x2}, {&(0x7f000028c000/0x4000)=nil, &(0x7f000028b000/0x3000)=nil, 0xe04}, {&(0x7f00003de000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil}, {&(0x7f0000065000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0xffffffffffffffff}, {&(0x7f0000523000/0x1000)=nil, &(0x7f0000063000/0x13000)=nil}, {&(0x7f0000181000/0x3000)=nil, &(0x7f0000156000/0x1000)=nil, 0x6}, {&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000463000/0x1000)=nil, 0x8}, {&(0x7f00004c1000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x1ffffffff}, {&(0x7f00004c1000/0x2000)=nil, &(0x7f000006c000/0x4000)=nil, 0x2}, {&(0x7f00001cf000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x4}, {&(0x7f00000cf000/0x1000)=nil, &(0x7f000028b000/0x4000)=nil, 0x9}], './file0\x00', 0x0, 0x1, 0x0, 0x43b, [0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x3, 0x0, 0x2, 0x0, 0xfffffffc, 0x4, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0xba95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x9, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf3040000, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xac7, 0x988, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}) setitimer(0x2, &(0x7f0000000140)={{0x3, 0x122800000000009}, {0xffffdff0, 0x8020000000000001}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$TIOCSETA(0xffffffffffffffff, 0xcd60441a, &(0x7f0000000140)={0x8, 0x100, 0x8001, 0x403, "000000000a00000f000000aff0338a6b4fc6d700", 0x8, 0x7}) mknodat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x2000, 0x3ffe) open$dir(&(0x7f0000000a80)='./file0\x00', 0x0, 0x0) 174.027513ms ago: executing program 7 (id=781): mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e60) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x200, 0x4c) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x1, 0xffffaf35, 0x7f, 0x205, 0x80000001, 0x7fbefffd, 0x5, 0x10, [{0x10000000, 0x5, 0x3, 0x40}, {0xfffffff3, 0xfffffffe, 0x10000, 0x2}, {0x20007, 0x7, 0x6, 0x9}, {0x7, 0x6, 0x2, 0x200}, {0x43, 0x8, 0x2, 0x800007}, {0x4020002, 0x8, 0x8, 0x97}, {0x9, 0xdf61, 0x200004f8, 0x14}, {0x6, 0x11, 0x14, 0xe}, {0xfffffffd, 0x10, 0x40000003, 0xa}, {0x4, 0x3, 0x400, 0x1ff}, {0x1e6, 0x400fff9, 0x927c, 0x4}, {0x3, 0x25, 0x9, 0x2d0b}, {0x1, 0x2, 0x80002001, 0x408}, {0x2, 0x8, 0x1, 0x2579}, {0x8000, 0xf8f, 0x8, 0x1}, {0xfffffffd, 0x0, 0xf779, 0x8}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) openat$vnd(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0) ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) r1 = socket(0x2, 0x2, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) ioctl$FIONREAD(r1, 0xc0206921, &(0x7f00000001c0)) r2 = socket(0x2, 0x1, 0x0) ioctl$FIONREAD(r2, 0x8020690c, &(0x7f00000001c0)) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e60) (async) open(&(0x7f00000000c0)='./file0\x00', 0x200, 0x4c) (async) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x1, 0xffffaf35, 0x7f, 0x205, 0x80000001, 0x7fbefffd, 0x5, 0x10, [{0x10000000, 0x5, 0x3, 0x40}, {0xfffffff3, 0xfffffffe, 0x10000, 0x2}, {0x20007, 0x7, 0x6, 0x9}, {0x7, 0x6, 0x2, 0x200}, {0x43, 0x8, 0x2, 0x800007}, {0x4020002, 0x8, 0x8, 0x97}, {0x9, 0xdf61, 0x200004f8, 0x14}, {0x6, 0x11, 0x14, 0xe}, {0xfffffffd, 0x10, 0x40000003, 0xa}, {0x4, 0x3, 0x400, 0x1ff}, {0x1e6, 0x400fff9, 0x927c, 0x4}, {0x3, 0x25, 0x9, 0x2d0b}, {0x1, 0x2, 0x80002001, 0x408}, {0x2, 0x8, 0x1, 0x2579}, {0x8000, 0xf8f, 0x8, 0x1}, {0xfffffffd, 0x0, 0xf779, 0x8}]}) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) (async) openat$vnd(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0) (async) ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0}) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (async) socket(0x2, 0x2, 0x0) (async) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) (async) ioctl$FIONREAD(r1, 0xc0206921, &(0x7f00000001c0)) (async) socket(0x2, 0x1, 0x0) (async) ioctl$FIONREAD(r2, 0x8020690c, &(0x7f00000001c0)) (async) 173.707015ms ago: executing program 4 (id=782): setuid(0xee01) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x10, 0x2, 0x3}, 0x10) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0xd02) open(&(0x7f0000000080)='./bus\x00', 0x880, 0x0) r1 = syz_open_pts() r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0xbe, 0x0) ioctl$BIOCSETF(r2, 0x80104267, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0xfffb, 0x7, 0x3, 0xfff}]}) readv(r1, &(0x7f00000002c0)=[{&(0x7f0000000340)=""/4085, 0xff5}], 0x1) ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000300)={0x80, 0x1, 0xdbfffffe, 0x10000, "d76c1f46000000ef1f0160fbff2000404b00", 0x800}) syz_open_pts() ioctl$TIOCSETAF(r1, 0x802c7416, &(0x7f0000000240)={0x200079, 0x215fcbc3, 0x4, 0xfffff620, "590113d22022b1c858669613a6683400000600", 0x3}) r3 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x200, 0x186) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x8011, r3, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r4, 0x0) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r5 = open(&(0x7f0000000080)='./file0\x00', 0x8, 0x2a) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0xfff, 0x4e, 0x2100009, 0x6, 0xfffffffe, 0x6, 0x557227f9, 0x10, [{0x3, 0x10007, 0x4, 0x71000}, {0x6, 0x9, 0x1, 0x2901f03c}, {0x1000007, 0xf88, 0x0, 0x9}, {0x7, 0x4, 0x800a}, {0x401, 0x200726, 0x2800, 0x7}, {0x2, 0x7, 0x2000000, 0x99}, {0xce1, 0xfffffffe, 0x4f8, 0x6d}, {0x6, 0x10001, 0x55, 0x8}, {0xd, 0x82, 0x7, 0xa}, {0x800b, 0xf9, 0x0, 0x106}, {0x1cc, 0x10001, 0x2fa, 0x1}, {0x200007ff, 0x9, 0xfffffffd, 0x8}, {0xb8c, 0x5, 0x8, 0x12}, {0x29a71715, 0x80, 0x1, 0xc377}, {0xb6f, 0x407, 0x5, 0x7}, {0x8000, 0x1, 0x1, 0x9}]}) r6 = socket$inet(0x18, 0x3, 0x102) sendmsg(r6, &(0x7f0000000240)={&(0x7f0000000280)=@in6={0x1c, 0x18, 0x0, 0xfffffffa, "00000000000000000000000000000001", 0xffff}, 0x1c, &(0x7f0000000400)=[{&(0x7f0000000180)="638802000000339afe51f6fcefa24a85abdd612dd68e59ada6a5032f100084410a85914260e03e", 0x27}, {&(0x7f0000000680)='\x00', 0x1}], 0x2, 0x0}, 0x402) ioctl$TIOCSETA(r5, 0x802c7414, &(0x7f0000001340)={0x8, 0x7, 0x8, 0x7, "0ae10a78d03057f94f735acde4b2658ec1f9d2f0", 0x9, 0xb}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) rename(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='./file0\x00') ioctl$VNDIOCSET(r5, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r5, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffe, 0x0}) r7 = socket$inet(0x2, 0x3, 0x0) setsockopt$inet_opts(r7, 0x0, 0x200000000000c, &(0x7f0000000240)="eaef125c00000000", 0xc) msync(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4) syz_emit_ethernet(0x32, &(0x7f0000000040)=ANY=[@ANYBLOB="ffffffffffff00e0300eaaf80800470000241d2527fffd00000701907800000000e0000001440806018000000010009078"]) 38.335339ms ago: executing program 5 (id=783): mknod(&(0x7f0000000040)='./bus\x00', 0x100000000205f, 0x2802) open$dir(&(0x7f0000000000)='./bus/../file0\x00', 0x800, 0x16) 36.684273ms ago: executing program 6 (id=784): r0 = open$dir(&(0x7f0000000240)='./file0\x00', 0x210, 0x40) r1 = getpid() ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x510, r1) syz_emit_ethernet(0x36, &(0x7f0000000040)=ANY=[@ANYRESDEC=r1, @ANYRESOCT=r0, @ANYRES32=r0]) chmod(&(0x7f0000000040)='.\x00', 0x35e) setuid(0xee01) open(&(0x7f00000000c0)='./file0\x00', 0x200, 0x4c) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) unveil(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='c\x00') r2 = open$dir(0x0, 0x80, 0x1df) setrlimit(0xd155979ba8aed78, &(0x7f0000000140)={0xad, 0x9}) r3 = getpid() ioctl$FIONREAD(0xffffffffffffffff, 0x80206979, 0x0) setgroups(0x0, 0x0) ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x510, r3) renameat(r2, &(0x7f0000000080)='./file0\x00', r2, &(0x7f00000000c0)='./file0\x00') 34.664096ms ago: executing program 5 (id=785): r0 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) openat$wsdisplay(0xffffffffffffff9c, 0x0, 0x1, 0x0) writev(r0, &(0x7f00000028c0)=[{&(0x7f00000005c0)="6350247bd7e2f0e0561f29bbcfc718523af10e450e33af5e1fe8377d75ffffffff680d615fbe0b1979d13c8fb6dc92b457c2f2700d7e915acd13f3e60a21cd00f95743b20cef0081f5b4a90b83f3ac9f2177207c1fc0f8efeb733dd2c42202be79e92ef3d99f5832b7859e6232eb683f5e1783717539f55c3c7e3372d378067fa865a8aab570b05a121ba5cfb6374f4c", 0x90}, {&(0x7f0000000700)="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", 0x141}], 0x2) execve(0x0, 0x0, 0x0) 34.390635ms ago: executing program 6 (id=786): pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000140), 0x8, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSETF(r2, 0x80104267, &(0x7f0000000000)={0x5, &(0x7f0000000040)=[{0x4, 0xfb, 0x1, 0x3}, {0x2d, 0x0, 0x2, 0x9}, {0x44, 0x9, 0x4, 0x6}, {0x87, 0x2b, 0xf8, 0x400ffff}, {0x9b9e, 0x8, 0xf4, 0x6}]}) syz_emit_ethernet(0x46, &(0x7f0000000040)=ANY=[]) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/50, 0xfd9f}], 0x2f) close(r0) r3 = socket(0x2, 0x8002, 0x0) r4 = fcntl$dupfd(r3, 0x2, 0xffffffffffffffff) closefrom(r4) openat$wsmouse(0xffffffffffffff9c, &(0x7f00000000c0), 0x8981, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r6, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="28000000ffff000001"], 0x28}, 0x0) chroot(&(0x7f0000000740)='.\x00') recvmsg(r5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/51, 0x33}, 0x0) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000100)="19", 0x1c}], 0x1) 33.773099ms ago: executing program 7 (id=787): r0 = openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$DIOCCLRSTATUS(r0, 0xc0284416, &(0x7f0000000140)={'./file0\x00', &(0x7f0000000040)=""/250, 0x2, 0x8, 0x3, 0xc2f7}) (async) r1 = semget(0x1, 0x6, 0x40) (async) fstatat(r0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2) (async) getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0xc) lstat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(r3, r6, r7) setgid(r3) r8 = semget(0x3, 0x3, 0x4) r9 = shmget(0x0, 0x3000, 0x441001b25f10fc7, &(0x7f0000ffd000/0x3000)=nil) shmctl$IPC_SET(r9, 0x1, &(0x7f0000000380)={{r5, r6, r2, r6, 0x186, 0x5}, 0x3, 0x0, 0x0, 0xb488, 0x0, 0x8, 0x8, 0x83, 0x5, 0xfffffffffffffff9, 0x6}) r10 = shmget(0x2, 0x2000, 0x82, &(0x7f0000ffb000/0x2000)=nil) (async) ioctl$DIOCGETSTATE(r0, 0xc1084413, &(0x7f0000000400)={{0x4, './file0\x00', [{[@v6=@rand_addr="d13ba8f169ba8466c3f7cc71d19d5a15", @v6=@loopback], [0x1fc1, 0xbd], 0xffff, 0x18}, {[@v4=@multicast1, @v4=@rand_addr=0x2], [0x4, 0x1], 0x1, 0x18}], {{0x4, 0x24, 0x7, 0x8}, 0x6, 0x0, 0x4, 0x9, 0x101, 0xf6, 0x71}, {{0x4, 0x3, 0x2, 0x1}, 0x6, 0x1000, 0x0, 0x2, 0xf2, 0x8, 0x81}, @v6=@empty, 0x40, 0x9, 0x7ff, 0x2, 0xd40, [[0x6, 0x4], [0x1c000, 0xffffffff]], [[0x6, 0x800], [0x8, 0x3]], 0x1, [0x9, 0x10000], 0x8000, 0x2, 0x10, 0x1, 0xe0, 0x8, 0x0, 0x7, 0x6, 0xd3, 0x0, 0x81, '&>'}}) shmdt(0x0) (async) mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) (async) fcntl$lock(r0, 0x9, &(0x7f0000000540)={0x1, 0x0, 0x40, 0x55c8, r4}) (async) semget(0x3, 0x0, 0x408) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000680)={&(0x7f00000005c0)="560349d6f47ba379a6d6504dbd24527c99114ec24375d696639a481f91bc7fb4be9ad2b7bf6f65294b5865e4c7d0ba0ecb60d8772ee4df2a4d413a540ae9eff2dd0128a39a3a8221cb299eec0f2c8b5ef6b60e5b73df3613e6475941169b3cfc8c701fbd425010a0e0a4cd5314a2b9c28b7f20d80d2f3c3d9eb35a45c2624cc41760678333a0082cea3f0cfdf3a66ba38001de26edaf47215736a31e0600fea7c6ddd4cb84c0c6875c54175fe71134", 0xaf}) (async) semctl$GETVAL(r1, 0x3, 0x5, &(0x7f00000006c0)=""/4096) (async) shmget(0x3, 0x2000, 0x420, &(0x7f0000ffd000/0x2000)=nil) (async) semctl$GETPID(r8, 0x6, 0x4, &(0x7f00000016c0)=""/4096) (async) semctl$GETZCNT(r8, 0x3, 0x7, &(0x7f00000026c0)=""/13) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000002800)={0x0, 0x3, &(0x7f0000002700)=[0xffffffff, 0x1, 0xffff], &(0x7f0000002740)=[0xfffffff2, 0x5, 0x8, 0x1, 0xca7, 0x0, 0x80, 0x800], &(0x7f0000002780)=[0x9, 0x9, 0xfff, 0x0, 0x7, 0x5, 0x6, 0x80], &(0x7f00000027c0)=[0xfffffffffffffffc, 0x1, 0x8001, 0xc5, 0xc, 0x80, 0x21, 0x3], 0x0, 0x6}) (async) r11 = shmat(r10, &(0x7f0000ffb000/0x1000)=nil, 0x2000) shmdt(r11) shmat(r10, &(0x7f0000fff000/0x1000)=nil, 0x1000) (async) semctl$GETALL(r8, 0x0, 0x6, &(0x7f0000002840)=""/167) openat$pf(0xffffffffffffff9c, &(0x7f0000002900), 0x400, 0x0) (async) shmctl$IPC_STAT(r9, 0x2, &(0x7f0000002940)=""/33) 33.399167ms ago: executing program 7 (id=788): setrlimit(0x8, &(0x7f0000000980)={0x42, 0x65}) r0 = syz_open_pts() close(r0) r1 = syz_open_pts() close(r1) writev(r0, &(0x7f0000000440)=[{0x0, 0xfffffffffffffe6d}], 0x1) munmap(&(0x7f0000000000/0x13000)=nil, 0x13000) sysctl$net_inet_carp(&(0x7f00000000c0)={0x4, 0x2, 0x70, 0x3}, 0x4, 0x0, &(0x7f0000002340), 0x0, 0x0) 4.725834ms ago: executing program 7 (id=789): mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x5901) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = msgget$private(0x0, 0x0) msgctl$IPC_RMID(r0, 0x0) getresuid(0x0, &(0x7f0000000040)=0x0, 0x0) setresuid(r1, r1, 0x0) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = geteuid() stat(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = getpid() ktrace(0x0, 0x39500f9a1a026d7d, 0x200, r5) r6 = getppid() msgctl$IPC_SET(r0, 0x1, &(0x7f00000001c0)={{r1, r2, r3, r4, 0x2, 0x54, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0x4, 0x5, 0x7, r5, r6, 0x9, 0x0, 0x5, 0x0, 0xfffffffffffffffc}) 3.625217ms ago: executing program 5 (id=790): r0 = socket(0x18, 0x2, 0x0) bind(r0, &(0x7f0000000000)=@in6={0x1c, 0x18, 0x0, 0x9, '\x00', 0x80000001}, 0x1c) setsockopt$sock_int(r0, 0xffff, 0x1002, &(0x7f0000000540)=0x5, 0x4) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @random, [], {@ipv6={0x86dd, {0x0, 0x6, "db8344", 0x8, 0x11, 0x0, @empty, @mcast2, {[], @udp={{0x0, 0x0, 0x8}}}}}}}) 1.672354ms ago: executing program 4 (id=791): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000000)={'tap', 0x0}) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000140)={0x3, &(0x7f0000000040)=[{0x84, 0x2, 0xd7, 0x6}, {0x4c, 0x1, 0x7, 0x406}, {0x6, 0xa0, 0xf2, 0x5}]}) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x80) ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x0, [{0x1, 0x3}, {0x1}, {0x1, 0x1}, {0x2, 0x3}, {0x0, 0xfffffffe}, {0x0, 0x7f}, {}, {0x0, 0x6}, {0x1, 0xffffffff}, {}, {0x0, 0x40}, {0x0, 0x1ff}, {0x3}, {0x0, 0x1000}, {0x2, 0x4}, {}, {0x2, 0x3}, {0x2, 0xfffffc65}, {0x0, 0x9}, {0x0, 0x10000800}, {0x5}, {}, {0x5, 0x5}, {0x2, 0x400}, {}, {0x2}, {0x1, 0x80}, {0x3}, {0x3, 0xfffffffa}, {0x3}, {0x2, 0x4}, {0x1}]}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x33}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$kern(&(0x7f00000000c0)={0x1, 0x4f}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x33, 0x0, 0x37) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r1, 0x0) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f00000001c0)="cac73ce119f42809f7c30824a593555ffe", 0x11}], 0x1, 0x0, 0xc8}, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r2 = socket(0x18, 0x1, 0x0) ioctl$FIONREAD(r2, 0xc038694e, &(0x7f00000001c0)) ftruncate(r1, 0xcbc) getpgrp() madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000002) sysctl$net_pipex(&(0x7f0000000000)={0x4, 0x23, 0x1}, 0x3, &(0x7f0000001280)="e2c4f6ce4758", &(0x7f0000000040)=0x6, 0x0, 0x0) syz_emit_ethernet(0x1000e, &(0x7f00000015c0)=ANY=[]) syz_extract_tcp_res$synack(&(0x7f0000000080), 0x1, 0x0) 698.976µs ago: executing program 5 (id=792): mknod(&(0x7f0000000400)='./file0\x00', 0x2000, 0x5c4a) open(&(0x7f0000000080)='./file0\x00', 0x800, 0xfe) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e60) r0 = open(&(0x7f0000000380)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7949) r1 = getppid() kill(r1, 0x0) fcntl$lock(r0, 0x0, &(0x7f00000019c0)={0x3, 0x0, 0x79, 0x2, r1}) unveil(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='x\x00') mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) ioctl$TIOCSETA(0xffffffffffffffff, 0xc4504446, &(0x7f00000000c0)={0x4, 0x401, 0x5, 0xa, "97a2e900", 0x8, 0xfffff800}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x2c}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0xfffffffffffffef1) 0s ago: executing program 7 (id=793): mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e60) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x200, 0x4c) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x1, 0xffffaf35, 0x7f, 0x5, 0x0, 0x7fbefffd, 0x5, 0x10, [{0x10000000, 0x5, 0x3, 0x40}, {0xfffffff3, 0xfffffffe, 0x10000, 0x2}, {0x20007, 0x7, 0x6, 0x9}, {0x7, 0x6, 0x2, 0x200}, {0x43, 0x8, 0x2, 0x80000b}, {0x4020002, 0x8, 0x8, 0x97}, {0x9, 0xdf61, 0x200004f8, 0x14}, {0x6, 0x11, 0x14, 0xe}, {0xfffffffd, 0x10, 0x40000003, 0xa}, {0x0, 0x3, 0x400, 0x1ff}, {0x6, 0x400fff9, 0x927b, 0x4}, {0x3, 0x25, 0x2000009, 0x2d0b}, {0x1, 0x2, 0x80002001, 0x408}, {0x2, 0x8, 0x3, 0x2579}, {0x8000, 0xf8f, 0x8}, {0xfffffffd, 0x0, 0xf779, 0x8}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket(0x18, 0x2, 0x0) sendmmsg(r1, &(0x7f0000000200)={{&(0x7f00000000c0)=@in6={0x1c, 0x18, 0x3, 0x7, "ff010000000000000000000000000001"}, 0x1c, 0x0, 0x0, 0x0}}, 0x38, 0x2) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) sysctl$net_inet_ip(&(0x7f00000002c0)={0x4, 0x2, 0x0, 0x25}, 0x4, 0x0, 0x0, 0x0, 0x0) msgrcv(0x0, 0x0, 0x0, 0x3, 0x1000) msgctl$IPC_STAT(0x0, 0x2, &(0x7f0000000180)=""/123) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.2' (ED25519) to the list of known hosts. pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error Connection to 10.128.10.2 closed by remote host. pckbd_enable: command error load: 2.22 not a controlling terminal ktrace write failed, errno 27, tracing stopped load: 2.22 not a controlling terminal load: 2.22 not a controlling terminal load: 2.22 not a controlling terminal load: 2.22 not a controlling terminal load: 2.22 not a controlling terminal load: 2.22 not a controlling terminal load: 2.22 not a controlling terminal load: 2.22 not a controlling terminal load: 2.22 not a controlling terminal load: 2.22 not a controlling terminal load: 2.22 not a controlling terminal load: 2.22 not a controlling terminal load: 2.22 not a controlling terminal load: 2.22 not a controlling terminal load: 2.22 not a controlling terminal load: 2.22 not a controlling terminal load: 2.22 not a controlling terminal load: 2.22 not a controlling terminal load: 2.22 not a controlling terminal load: 2.22 not a controlling terminal load: 2.22 not a controlling terminal load: 2.22 not a controlling terminal load: 2.22 not a controlling terminal load: 2.22 not a controlling terminal load: 2.22 not a controlling terminal load: 2.22 not a controlling terminal load: 2.22 not a controlling terminal load: 2.22 not a controlling terminal load: 2.22 not a controlling terminal load: 2.22 not a controlling terminal load: 2.22 not a controlling terminal load: 2.22 not a controlling terminal load: 2.22 not a controlling terminal load: 2.22 not a controlling terminal load: 2.22 not a controlling terminal load: 2.22 not a controlling terminal load: 2.22 not a controlling terminal load: 2.22 not a controlling terminal load: 2.22 not a controlling terminal load: 2.22 not a controlling terminal load: 2.22 not a controlling terminal load: 2.22 not a controlling terminal load: 2.22 not a controlling terminal load: 2.22 not a controlling terminal load: 2.22 not a controlling terminal load: 2.22 not a controlling terminal load: 2.22 not a controlling terminal load: 2.22 not a controlling terminal load: 2.22 not a controlling terminal load: 2.22 not a controlling terminal load: 2.22 not a controlling terminal load: 2.22 not a controlling terminal load: 2.22 not a controlling terminal load: 2.22 not a controlling terminal load: 2.22 not a controlling terminal load: 2.22 not a controlling terminal load: 2.22 not a controlling terminal load: 2.22 not a controlling terminal load: 2.22 not a controlling terminal load: 2.22 not a controlling terminal load: 2.22 not a controlling terminal load: 2.22 not a controlling terminal load: 2.22 not a controlling terminal load: 2.22 not a controlling terminal load: 2.22 not a controlling terminal pckbd_enable: command error OpenBSD/amd64 (ci-openbsd-main-1.us-central1-f.c.syzkaller.internal) (tty00) login: init: getty repeating too quickly on port /dev/tty00, sleeping pckbd_enable: command error pckbd_enable: command error ktrace write failed, errno 27, tracing stopped ktrace write failed, errno 27, tracing stopped ktrace write failed, errno 27, tracing stopped pckbd_enable: command error OpenBSD/amd64 (ci-openbsd-main-1.us-central1-f.c.syzkaller.internal) (tty00) login: denied attempt to set clock back 4263431300 seconds denied attempt to set clock back 4263431300 seconds ktrace write failed, errno 27, tracing stopped pckbd_enable: command error ktrace write failed, errno 27, tracing stopped À ×pckbd_enable: command error ktrace write failed, errno 27, tracing stopped pckbd_enable: command error pckbd_enable: command error ktrace write failed, errno 27, tracing stopped pppx: unable to set addresses for pppx1, error=17 uvm_fault(0xfffffd806d1b7740, 0x0, 0, 1) -> e fatal page fault in supervisor mode trap type 6 code 0 rip ffffffff8267e50b cs 8 rflags 10246 cr2 0 cpl 2 rsp ffff80002fcb1070 gsbase 0xffffffff83959ff0 kgsbase 0x0 panic: trap type 6, code=0, pc=ffffffff8267e50b Starting stack trace... panic(ffffffff834b32b9) at panic+0x1ba kerntrap(ffff80002fcb0fc0) at kerntrap+0x2fb alltraps_kern_meltdown() at alltraps_kern_meltdown+0x7b rtable_l2(0) at rtable_l2+0x6b in_pcbhash_insert(fffffd806fad3698) at in_pcbhash_insert+0x193 in_pcballoc(ffff8000015a1c10,ffffffff83a20490,1) at in_pcballoc+0x23a udp_attach(ffff8000015a1c10,0,1) at udp_attach+0xde socreate(18,ffff80002fcb1290,2,0) at socreate+0x22f sys_socket(ffff80002a7362a0,ffff80002fcb13d0,ffff80002fcb1320) at sys_socket+0x124 syscall(ffff80002fcb13d0) at syscall+0x962 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x420aa547080, count: 246 End of stack trace. WARNING: SPL NOT LOWERED ON SYSCALL 83 -1307113856 EXIT 0 2 Stopped at savectx+0xae: movl $0,%gs:0x688 TID PID UID PRFLAGS PFLAGS CPU COMMAND *114112 11322 0 0 0 0 syz-executor savectx() at savectx+0xae end of kernel end trace frame: 0x7ab9659884f0, count: 14 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb> ddb> set $lines = 0 ddb>