last executing test programs: 3.133418132s ago: executing program 5 (id=192): r0 = msgget(0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) getsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) setresgid(r3, r3, 0x0) (async, rerun: 64) r4 = openat$bpf(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) (rerun: 64) ioctl$FIOSETOWN(r4, 0x8004667c, &(0x7f0000000140)) (async) r5 = semget(0x2, 0x0, 0x212) bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0x1c, 0x18, 0x2, 0x8, "1499a4de79ce8beca9cebc2642c3030e", 0x6}, 0x1c) (async) semctl$IPC_SET(r5, 0x0, 0x1, &(0x7f0000000b80)={{r2, r3, r2, r3, 0x1fd, 0x8, 0x0, 0x0, 0x100062}, 0x0, 0x6, 0x0, 0x0, 0x1, 0x0, 0x7}) (async) getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) (async) r8 = getegid() (async) getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) (async, rerun: 64) r10 = getpgid(0x0) (async, rerun: 64) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0x11, 0xffff63d6, 0x6, 0x4, 0x8, 0x5, 0x20000007, 0x10000000000000f2, [{0x1, 0x10000, 0xfffff114, 0x2}, {0x7fffffff, 0x3, 0x2, 0x10}, {0xcd7, 0x0, 0x2, 0x3}, {0x7, 0x7f, 0x2000000f, 0x2000100}, {0x104, 0x2, 0x0, 0xfffffffe}, {0x388d, 0x40fff9, 0x1, 0x4}, {0x2, 0xa00, 0x4, 0x1}, {0x4, 0x1, 0x28005, 0x9}, {0x9, 0xf7ffffff, 0x4, 0x8003}, {0x4, 0x40, 0x3ff, 0xf}, {0x3, 0x0, 0x8a3a0004, 0x401}, {0xfffe, 0x13e, 0x40000d, 0x10001}, {0x401, 0x0, 0xfffffffc, 0x8}, {0x4, 0x2, 0x400, 0x7}, {0xfffffffe, 0xd, 0x8000003, 0x200}, {0x9be2, 0x1, 0x23, 0xffff}]}) sysctl$net_inet_ip(&(0x7f00000000c0)={0x4, 0x11, 0x0, 0x26}, 0x3, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xfffffffffffffe3c, 0x0, 0x37) fcntl$lock(0xffffffffffffffff, 0x9, &(0x7f0000000040)={0x2, 0x0, 0x9, 0xf3c, r10}) r11 = openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) ioctl$TIOCSETA(r11, 0xcd604406, &(0x7f0000000040)={0x7ffb, 0x0, 0xfffbfff0, 0x0, "d6a24900b178926c79486b47c1dd00", 0x4, 0x5}) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) ioctl$TIOCSETA(r11, 0xcd604407, &(0x7f0000000040)={0xa, 0x2000000, 0x2, 0x800005, "2c0d000000024000a400000300", 0x4, 0x8}) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000200)={{r6, r7, 0xffffffffffffffff, r8, 0x6, 0xf801, 0x0, 0x0, 0xb5}, 0x0, 0x0, 0xb, 0x101, 0x100000001, r9, r10, 0xa2, 0x0, 0x7, 0x0, 0xff}) r12 = socket(0x18, 0x3, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) (async) ioctl$FIONREAD(r12, 0xc0106924, &(0x7f00000001c0)) setitimer(0x0, &(0x7f0000000140)={{0x5, 0x5}, {0x7ffd, 0x8}}, 0x0) ioctl$FIONREAD(r12, 0x8080691a, &(0x7f0000000100)) (async) sysctl$kern(&(0x7f00000000c0)={0x1, 0x48}, 0x2, &(0x7f0000000140)="f776628e", &(0x7f00000001c0)=0x4, &(0x7f0000000200), 0x0) 3.072398824s ago: executing program 5 (id=198): mknod(&(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x2, 0xfffffffffffffff7, 0x3, 0x0, 0x80000000004, 0x400000000009, 0x0, 0x4701}) (async) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x2, 0xfffffffffffffff7, 0x3, 0x0, 0x80000000004, 0x400000000009, 0x0, 0x4701}) mknodat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x2000, 0x4800) r0 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x9) ioctl$FIOASYNC(r0, 0xc0107008, &(0x7f00000000c0)=0x8) mknod(&(0x7f0000000040)='./bus\x00', 0x100000000205f, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) (async) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r4 = kqueue() r5 = open$dir(&(0x7f0000000040)='./file0\x00', 0xae828e137847f62, 0x0) fcntl$lock(r5, 0x7, &(0x7f0000000040)={0xce941ff258916008, 0x2, 0x3, 0x80002ffffffff}) fchmod(r4, 0x100) openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) (async) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) r7 = socket$inet6(0x18, 0x2, 0x2a) syz_open_pts() (async) r8 = syz_open_pts() ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000800)={0x2, 0x400, r8}) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000800)={0x2, 0x400, r8}) r9 = socket(0x18, 0x3, 0x50) ioctl$FIONREAD(r9, 0x40047307, &(0x7f00000001c0)) r10 = socket(0x18, 0x1, 0x0) close(r10) setsockopt(r10, 0x6, 0x41, &(0x7f0000000280), 0x1c) (async) setsockopt(r10, 0x6, 0x41, &(0x7f0000000280), 0x1c) r11 = accept$unix(0xffffffffffffffff, 0x0, &(0x7f00000002c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) write(r12, &(0x7f00000002c0)="3dacaf2007efe7f2aacb103ef5614b7ee991217204933059d9fcfbc5d67adfc708ba90e85c3252b8101709dc11c37cee01b0a4070000005e0984f204ef676d7a15176cbe2584124bbc6eaeffa4739da44ab12627c0b68f4f6b2a5fa778b0241132b072462a736f1b3a5227eb254db06f148a13f278b8f1efb35410a0a7febc5571457cab4d2763c894eb64c90f92efc71616839cd5b627c5e619747c135a97a2e37ccf6b1bc0dd5d56d3cecd8029ecfb924772ed6fe4798b990c82e93aab095f25642c116a27a7babca09430204e2ee06ac8cce7404e", 0xffffff33) pipe2(&(0x7f0000000100), 0x10004) (async) pipe2(&(0x7f0000000100), 0x10004) r13 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x7e, 0x0) ioctl$TIOCSETA(r13, 0xcd60441a, &(0x7f0000000040)={0x3, 0x2, 0x5, 0x2f, "20007fecffffffff67a95a010400", 0x6, 0x2}) syz_emit_ethernet(0x10004, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRESHEX=r6, @ANYRES8=r13, @ANYRESDEC=r1]) (async) syz_emit_ethernet(0x10004, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRESHEX=r6, @ANYRES8=r13, @ANYRESDEC=r1]) kevent(r1, &(0x7f0000000140)=[{{r2}, 0xfffffffffffffffd, 0x0, 0x20, 0xff, 0x51e}, {{r3}, 0xb6feeb55feb9191c, 0x20, 0x2, 0x6, 0x1}, {{r4}, 0xfffffffffffffffa, 0x0, 0x1, 0x1, 0x5}, {{r6}, 0xfffffffffffffffe, 0x0, 0x4, 0x467, 0xff}, {{r7}, 0xfffffffffffffff9, 0x44, 0x1, 0xffffffffffffffff, 0x1}, {{0xffffffffffffff9c}, 0xfffffffffffffffc, 0x19, 0x0, 0x7, 0x8000}, {{r8}, 0xfffffffffffffffa, 0x5d, 0x1, 0x19, 0x48a}, {{r9}, 0x0, 0xa4, 0x40000000, 0x5, 0x4}, {{r10}, 0xfffffffffffffff0, 0xa1, 0x2, 0x0, 0x7fff}], 0x6, &(0x7f0000000300)=[{{r11}, 0x0, 0x10, 0x2, 0x10000, 0x6}, {{0xffffffffffffff9c}, 0x0, 0x50, 0x20, 0x317, 0xa}, {{}, 0xfffffffffffffff5, 0xe4, 0x4, 0x0, 0x6}, {{r12}, 0xfffffffffffffffc, 0x80, 0x2, 0x9a, 0x8000000000000000}, {{r13}, 0xfffffffffffffff7, 0x21, 0x20, 0x10000000, 0x1}], 0x82b7, &(0x7f00000003c0)={0x3, 0x2}) (async) kevent(r1, &(0x7f0000000140)=[{{r2}, 0xfffffffffffffffd, 0x0, 0x20, 0xff, 0x51e}, {{r3}, 0xb6feeb55feb9191c, 0x20, 0x2, 0x6, 0x1}, {{r4}, 0xfffffffffffffffa, 0x0, 0x1, 0x1, 0x5}, {{r6}, 0xfffffffffffffffe, 0x0, 0x4, 0x467, 0xff}, {{r7}, 0xfffffffffffffff9, 0x44, 0x1, 0xffffffffffffffff, 0x1}, {{0xffffffffffffff9c}, 0xfffffffffffffffc, 0x19, 0x0, 0x7, 0x8000}, {{r8}, 0xfffffffffffffffa, 0x5d, 0x1, 0x19, 0x48a}, {{r9}, 0x0, 0xa4, 0x40000000, 0x5, 0x4}, {{r10}, 0xfffffffffffffff0, 0xa1, 0x2, 0x0, 0x7fff}], 0x6, &(0x7f0000000300)=[{{r11}, 0x0, 0x10, 0x2, 0x10000, 0x6}, {{0xffffffffffffff9c}, 0x0, 0x50, 0x20, 0x317, 0xa}, {{}, 0xfffffffffffffff5, 0xe4, 0x4, 0x0, 0x6}, {{r12}, 0xfffffffffffffffc, 0x80, 0x2, 0x9a, 0x8000000000000000}, {{r13}, 0xfffffffffffffff7, 0x21, 0x20, 0x10000000, 0x1}], 0x82b7, &(0x7f00000003c0)={0x3, 0x2}) 1.966123771s ago: executing program 0 (id=199): r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$DIOCGETLIMIT(r0, 0xc0084427, &(0x7f0000000c00)={0x66b09a351a10be51, 0xcfc}) r1 = openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000000400), 0x10, 0x0) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0xbe, 0x0) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000200)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x7, 0x3, 0x1, 0x8}, {0x20, 0x7, 0xfe, 0xc}, {0x9b1e, 0x22, 0xf, 0x4}]}) sysctl$kern(0x0, 0x0, &(0x7f0000000300)="c2a6500034dd09000000000000000800000000019324b9b7bded00191b2331d1f081b61f94fc5e2478190441978d4f9f", &(0x7f0000000000)=0x30, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETWF(r2, 0x80104277, &(0x7f0000000040)={0x28, 0x0}) write(r2, &(0x7f00000002c0)="f81ad30100060000000100000000", 0xe) mmap(&(0x7f0000119000/0x4000)=nil, 0x4000, 0x1, 0x3012, r0, 0xb11a) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x10091, 0x0) fcntl$lock(r3, 0x7, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x300000023}) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x8010, r2, 0xf) ioctl$WSKBDIO_SETENCODING(r1, 0x80045710, 0x0) bind$unix(r1, 0x0, 0x0) ioctl$WSKBDIO_GETDEFAULTKEYREPEAT(r1, 0x400c570a, &(0x7f00000008c0)) sync() ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) 1.909137721s ago: executing program 3 (id=203): r0 = socket(0x18, 0x3, 0x0) recvfrom(r0, &(0x7f0000000240)=""/153, 0x99, 0x840, 0x0, 0x0) setsockopt$sock_int(r0, 0xffff, 0x800, &(0x7f0000000080)=0x4, 0x4) setregid(0x0, 0xffffffffffffffff) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x2000, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0x0}, @broadcast}, @udp={{0x1, 0x2, 0x8}}}}}}) syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x2000, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0x0}, @broadcast}, @udp={{0x1, 0x2, 0x8}, {"b76bf11d5d4ff88eab4e7d94dcf5288151f250627b0e1fb0"}}}}}}) syz_extract_tcp_res$synack(&(0x7f00000001c0)={0x41424344}, 0x1, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000200)={0x41424344}, 0x1, 0x0) syz_emit_ethernet(0x147, &(0x7f0000000780)={@random="b905f0ffffff", @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x139, 0x0, 0x1, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0x0}, @multicast1}, @tcp={{0x1, 0x1, r1, r2, 0x1, 0x0, 0x12, 0x8, 0x8, 0x0, 0x51b, {[@window={0x3, 0x3, 0x1}, @sack={0x5, 0x1a, [0xfffffff8, 0x6, 0x5, 0xffffffff, 0x0, 0x7fff]}, @eol, @md5sig={0x13, 0x12, "72843ea9a17b5ca9ed6ec3f64b73fc87"}, @sack_perm={0x4, 0x2}]}}, {"9ad6abbdf96472e6465c1d67552e5010120164bf271bb431885a29bd080cf58ebcd1b48743e9f5b0e3fc0c3595c81706cefaca0df2d7a771ce219b123e076a3d507c63f37c63c4d1315abf0d35d724d61b4d212ea5cc633909002572eb818a38f275f48afca53947166266f18f665df2c8d8667a715423a4158e0e02274dd03bade51a3d84be219199464a1d8f119f9edf2204b61a18c6e611591c64d5a4fc75321da5b0aee2ae455c8e2d17a097307b4e7d1379bd19971f3999ce5873fe59d17f53dd98f252fe2a8d674ce5de03d5b4717774fe48e8e590ab138fa1aa"}}}}}}) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) ioctl$DIOCRCLRTABLES(r3, 0xc450443c, &(0x7f0000000300)={{'./file0\x00', './file0\x00', 0x52, 0x14}, 0x0, 0x0, 0x0, 0x4, 0x2, 0xfffffff6, 0xfff, 0x10, 0x6}) setsockopt(r0, 0x1000000029, 0x24, &(0x7f0000000000)="5ab7776a", 0x4) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000100)={0x5, 0x3, r4}) ioctl$BIOCGFILDROP(r5, 0x40044278, &(0x7f0000000140)) syz_emit_ethernet(0x66, &(0x7f0000000180)=ANY=[@ANYBLOB="8f6f77ede655ffffffffffff86dd605f6ad9003037008fd8b0e5602493ff1f88b029e0ad0c35ff020000000000000000000000000001"]) 1.793904281s ago: executing program 2 (id=209): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x5) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) setreuid(0x0, 0xee01) fchdir(r0) ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x0, [{0x0, 0xfffffffd}, {0x0, 0x8}, {}, {}, {}, {0x0, 0x3}, {}, {0x3}, {0x0, 0x1}, {0x0, 0x7}, {0x0, 0x7}, {}, {}, {0x0, 0x1}, {0x2}, {}, {0x0, 0x1}, {0x1}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {0x2}, {}, {}, {}, {0x2, 0xd}, {0x1}]}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x31}, 0x4, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0x37) mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1) closefrom(r0) select(0x40, &(0x7f0000000000)={0x0, 0x1000}, &(0x7f0000001140)={0x0, 0x5, 0x6, 0x8}, &(0x7f0000000080)={0x3, 0x0, 0xb, 0x0, 0x18ae, 0x9, 0x0, 0x2}, &(0x7f0000000100)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x5) (async) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) (async) setreuid(0x0, 0xee01) (async) fchdir(r0) (async) ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x0, [{0x0, 0xfffffffd}, {0x0, 0x8}, {}, {}, {}, {0x0, 0x3}, {}, {0x3}, {0x0, 0x1}, {0x0, 0x7}, {0x0, 0x7}, {}, {}, {0x0, 0x1}, {0x2}, {}, {0x0, 0x1}, {0x1}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {0x2}, {}, {}, {}, {0x2, 0xd}, {0x1}]}) (async) sysctl$kern(&(0x7f00000000c0)={0x1, 0x31}, 0x4, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0x37) (async) mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1) (async) closefrom(r0) (async) select(0x40, &(0x7f0000000000)={0x0, 0x1000}, &(0x7f0000001140)={0x0, 0x5, 0x6, 0x8}, &(0x7f0000000080)={0x3, 0x0, 0xb, 0x0, 0x18ae, 0x9, 0x0, 0x2}, &(0x7f0000000100)) (async) 1.665044242s ago: executing program 2 (id=214): mknod(&(0x7f0000000200)='./bus\x00', 0x6000, 0x1d98) stat(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)) 1.661992893s ago: executing program 2 (id=216): r0 = socket$inet(0x2, 0x2, 0x0) (async) r1 = socket$inet(0x2, 0x3, 0x0) close(r1) r2 = socket$inet(0x2, 0x3, 0x0) setsockopt$inet_opts(r2, 0x0, 0x200000000000a, &(0x7f00000000c0)='\x00', 0x1) setsockopt$inet_opts(r1, 0x0, 0xd, &(0x7f0000000240), 0x0) (async, rerun: 32) setsockopt$inet_opts(r0, 0x0, 0x13, &(0x7f0000000000), 0x4) (rerun: 32) 1.661684991s ago: executing program 5 (id=217): r0 = socket$inet6(0x18, 0x3, 0x2) setsockopt$sock_int(r0, 0xffff, 0x2000, &(0x7f0000000000)=0x3, 0x1) bind$inet6(r0, &(0x7f0000000040)={0x1c, 0x18, 0x2, 0x2, "000000000000000000000008068b00", 0x7}, 0x1c) sendmsg(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000280)=@in6={0x1c, 0x18, 0x1, 0x7, "00000000000000000000000000000001", 0xff}, 0x1c, &(0x7f00000012c0)=[{&(0x7f0000000780)="442f854d2b9f220fa604c8fe6d9f1c840b2d40cbcbe4f5281d7da348d74ce1b6e62f6c704d3f5a4a", 0x28}], 0x1, 0x0}, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket$inet(0x18, 0x4000, 0x5) sendmsg(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2) sysctl$vm_swapencrypt(&(0x7f00000000c0), 0x3, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x1000e, &(0x7f0000000080)=ANY=[@ANYBLOB="69e1629b6174391e7dd7a2d786dd60b6000000302c03cb697a653e336f000000500000000000ff02000000000000000000000000000102"]) 1.660444045s ago: executing program 2 (id=218): syz_emit_ethernet(0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="8f6f77ede655ffffffffffff86dd605f6ad900383a0000000000000000000000000000000000fe800000000000000000f007000000aa02409078000000006006c33e00003a80fe8000000000000000000000000000aaff020000000000000000045acb5c085284"]) syz_extract_tcp_res(&(0x7f0000000000), 0x3, 0x1) 1.652142594s ago: executing program 5 (id=219): setrlimit(0x8, &(0x7f0000000980)={0x42, 0x65}) r0 = syz_open_pts() close(r0) r1 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$WSMUXIO_REMOVE_DEVICE(r1, 0x80085762, &(0x7f00000000c0)={0x3, 0x2}) syz_emit_ethernet(0x12, &(0x7f0000000080)={@random="369d9162185e", @local, [{[], {0x8100, 0x0, 0x0, 0x3}}], {@generic={0x88a8}}}) fcntl$getown(r0, 0x5) syz_open_pts() ioctl$FIOASYNC(r0, 0x80047470, &(0x7f0000000040)=0x11002) readv(r0, &(0x7f0000000440)=[{&(0x7f0000000080)=""/55, 0x37}], 0x1) write(r0, &(0x7f00000002c0)="7d69b0", 0x3) 1.584344955s ago: executing program 6 (id=220): ioctl$WSMUXIO_REMOVE_DEVICE(0xffffffffffffffff, 0x80085762, &(0x7f0000000040)={0x1}) r0 = socket(0x18, 0xc003, 0x3a) r1 = open$dir(&(0x7f0000000000)='.\x00', 0x10000, 0x4) lseek(r1, 0x2, 0x1) getdents(r1, &(0x7f0000000800)=""/4096, 0x1000) setsockopt(r0, 0x29, 0x6c, &(0x7f0000000040), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0x66, &(0x7f00000003c0)={0x0, 0x0, 0x4, 0xc}, 0xc) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0x67, &(0x7f00000000c0)={0x0, 0x1, 0x10, 0x1}, 0xc) chmod(&(0x7f0000000040)='.\x00', 0x35e) mkdir(&(0x7f0000000000)='.\x00', 0x1) chmod(&(0x7f0000000280)='./file0\x00', 0x3a) setuid(0xee01) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x183) socket(0x18, 0x2, 0x0) ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, &(0x7f0000000100)={0x1dd47e34, 0x0, {[0xfffffbeffffffff9, 0x40000000000000f7, 0x1000000000004787, 0x1000, 0x5, 0x8000c70, 0x6, 0xffffffffffffffff, 0x0, 0x80000002, 0xcab7, 0x0, 0x6c4, 0x6a81, 0x0, 0xffffffffffffffa8, 0x82, 0xce5], [0xfffffffffffffffe, 0x80000001, 0xfffffffffffffffd, 0x0, 0x101, 0x100, 0x0, 0x4, 0x2000002, 0x3], [0x5ad7, 0xfffffffffffffffc, 0x2, 0xfffffffffffffffe, 0xffffffffffffffff, 0x3, 0xfffffffffffffffa], [0x100, 0x20000000000, 0xfffffffffffffffc, 0x80000000ffffffff, 0xfefffffffffffffe, 0x6], [{0x0, 0xfffffffd, 0x0, 0xfffffffffffffff8}, {0x807, 0x8000002, 0x2, 0x7d}, {0x0, 0x4, 0xfffffffb, 0xc32}, {0x7, 0x103, 0x83, 0xfffffffffffffffb}, {0xfffc, 0x2, 0x1, 0x7ffffffffffffffb}, {0x0, 0x10002006, 0x4, 0xffd}, {0x6b7, 0x0, 0x8}, {0x2008, 0x96b, 0x0, 0x6}], {0x4, 0xd, 0x490, 0x3fd}, {0x21, 0xa1f7, 0x100000b0, 0x10}}}) r2 = socket(0x18, 0x1, 0x0) getsockopt$sock_cred(r2, 0xffff, 0x1024, &(0x7f0000000240)={0x0}, &(0x7f0000000280)=0x2) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x4, 0x0, 0x0, 0x0, 0x192, 0x0, 0x7}, 0x2, 0xfffffffffffffff7, 0x2, 0x1, 0x80000000004, 0x400000000009, r3, 0x4701, 0x0, 0x10001000}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0xfffffffffffffe53) clock_gettime(0xa, 0x0) rename(&(0x7f00000003c0)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00') 1.583882771s ago: executing program 6 (id=221): sysctl$kern(&(0x7f0000000040)={0x1, 0x9}, 0x2, &(0x7f0000000080)="11ab0c6c", &(0x7f0000000100)=0x4, &(0x7f0000000140)="474b24f0296702b9d7cf9eae3ee508c0e55788a9ecfde698cc382d1d7386c67c019448608bd0ff0174330baeec988f8ef65db4f2a9a8fb12ab154ac1e62b94ae9329083d956aa2a6d7a22cf01ddfcfedaace3ce52183e845d32eb4894dbcd3214485f7421a442b103d940f3fb477cf1f09a10d93ed10281c0291bfcbe012c4aa4601bea7b24357ba2778affbe487b1e7e233e6bc48dd87302cc78e24945ccc4fef7ea196150cf9189439d74bc26550a77cebe25736ffc61d67b018bbb1c387b1b67503746dc3d445d9d573cf02adbe1c6d13bf9d536aab1151cd0d3cef96fdcd9316568b41373dc9f4886f37a9274a3105fc4309ec", 0xf5) (async) socket(0x0, 0x1, 0x2) 1.569032252s ago: executing program 2 (id=223): pipe2(0x0, 0x10004) sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x7, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xff0a, 0x0, 0x37) r0 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000000), 0x8, 0x0) r1 = openat$pf(0xffffffffffffff9c, &(0x7f00000001c0), 0x10000, 0x0) ioctl$DIOCXCOMMIT(r1, 0xc0104452, &(0x7f0000000b00)={0x2, 0xc, &(0x7f00000002c0)=[{0x1, './file0\x00', 0x4}, {0x0, './file0\x00', 0x1}]}) ioctl$WSKBDIO_SETDEFAULTBELL(r0, 0x80105705, &(0x7f0000000180)={0x6, 0x1, 0x3, 0x7}) r2 = openat$pf(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) setrlimit(0x8, &(0x7f0000000980)={0x7, 0x4b}) syz_open_pts() socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$DIOCGETSTATE(0xffffffffffffffff, 0xc1084413, &(0x7f0000000040)={{0x4, './file0\x00', [{[@v6=@ipv4={'\x00', '\xff\xff', @multicast2}, @v6=@local={0xfe, 0x80, '\x00', 0x0}], [0xd, 0x40], 0x0, 0x2}, {[@v6=@loopback], [0x2], 0x4, 0x16}], {{0x246, 0x48, 0xfa, 0x7df}, 0x6543, 0x409, 0xfff00000, 0x2, 0x8, 0x5, 0x16}, {{0xfffe, 0x7, 0x1, 0x6}, 0x7ffd, 0x4, 0x50007, 0x6, 0xe, 0xf0}, @v6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x1f, 0xe, 0x2, 0x8f59, 0x0, [[0xffbffff7, 0xbc], [0x1, 0x834c]], [[0xfbffffff, 0x4], [0x9, 0x3]], 0x9, [0x0, 0x79], 0xffff, 0x2, 0x62, 0x1, 0x40, 0x3, 0xb, 0x83, 0xb, 0x8, 0xfe, 0xce57}}) select(0x0, 0x0, &(0x7f0000000040)={0x50}, &(0x7f0000000080), 0x0) r3 = socket(0x18, 0x3, 0x1) getsockopt(r3, 0x29, 0x24, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$TIOCSETA(r2, 0xc1084425, &(0x7f0000000040)={0x1, 0x0, 0xfffffffe, 0x3, "210d0000000200000006000000000200007fffff", 0x7ffffffe}) 1.568018755s ago: executing program 6 (id=224): r0 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000001680), 0x80, 0x0) r1 = socket(0x18, 0x2, 0x0) mknod(&(0x7f0000000200)='./file0\x00', 0x2000, 0x6381) open(&(0x7f0000000080)='./file0\x00', 0x2, 0x102) (async) open(&(0x7f0000000080)='./file0\x00', 0x2, 0x102) mknod(&(0x7f00000000c0)='./file1\x00', 0x2000, 0x637d) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x6384) (async) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x6384) open(&(0x7f0000000040)='./bus\x00', 0x80, 0x100) open(&(0x7f0000000080)='./file1\x00', 0x40, 0x132) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, 0x0) closefrom(r1) (async) closefrom(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb5219f1000b913f1, 0x0) select(0x40, &(0x7f0000000080)={0x9, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0x0) openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) (async) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSETF(r3, 0x80104267, &(0x7f0000000000)={0x3, &(0x7f0000000080)=[{0x1, 0x7, 0x7, 0x7fffffff}, {0x7, 0xf, 0x7, 0x5}, {0x6, 0x2, 0x1, 0x9b}]}) (async) ioctl$BIOCSETF(r3, 0x80104267, &(0x7f0000000000)={0x3, &(0x7f0000000080)=[{0x1, 0x7, 0x7, 0x7fffffff}, {0x7, 0xf, 0x7, 0x5}, {0x6, 0x2, 0x1, 0x9b}]}) syz_emit_ethernet(0x1000e, &(0x7f0000000140)=ANY=[]) writev(r2, &(0x7f0000000480)=[{&(0x7f00000001c0)="dfe9b6ad03", 0x5}], 0x1) (async) writev(r2, &(0x7f0000000480)=[{&(0x7f00000001c0)="dfe9b6ad03", 0x5}], 0x1) ioctl$WSKBDIO_BELL(r0, 0x20005701) 1.565566152s ago: executing program 0 (id=226): open$dir(&(0x7f00000000c0)='./file0\x00', 0x200, 0x186) r0 = getpid() ktrace(0x0, 0xf53ef3a4610c7765, 0x40000100, r0) ktrace(&(0x7f0000000840)='./file0\x00', 0x0, 0x2510, r0) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf79ed) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3, 0x2810, r1, 0x0) ftruncate(r1, 0x9) 447.400697ms ago: executing program 3 (id=227): r0 = getpgrp() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000100)={{0x2, 0xffffffffffffffff, 0x0, 0x0, 0x100, 0x101, 0x6, 0x0, 0x80000}, 0x7, 0xf, r0, 0x4, 0x8e8a, 0x82, 0x5, 0x0, 0xb6, 0x0, 0x1}) 446.00096ms ago: executing program 3 (id=228): syz_emit_ethernet(0x1000e, &(0x7f00000015c0)=ANY=[]) 443.98517ms ago: executing program 0 (id=230): ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0xffffffff, 0xff, {0x2, 0x1}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$TIOCCHKVERAUTH(0xffffffffffffff9c, 0x2000741e) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f00000000c0)=@file={0xe, 0x1, './file0\x00'}, 0xa) listen(r0, 0x1) ioctl$KDGKBMODE(0xffffffffffffffff, 0x40044b06, &(0x7f0000000100)) r1 = socket$unix(0x1, 0x1, 0x0) connect$unix(r1, &(0x7f0000000080)=@file={0x5, 0x1, './file0\x00'}, 0xa) r2 = socket(0x18, 0x3, 0x0) setsockopt(r2, 0x1000000029, 0xc, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) setsockopt(r2, 0x1000000029, 0xc, &(0x7f0000000040)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) close(0x3) mprotect(&(0x7f0000377000/0x2000)=nil, 0x2000, 0x1) 385.501989ms ago: executing program 0 (id=234): ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f0000000040)={0x0, 0x0, 0x1, 0x0, "0100012d29fb000700000000098002005e00"}) sysctl$kern(&(0x7f0000000040)={0x1, 0x4f}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$FIONREAD(0xffffffffffffffff, 0x4004667f, &(0x7f0000000000)) sysctl$vm_swapencrypt(&(0x7f0000000040)={0x2, 0x5, 0x2}, 0x3, 0x0, 0x0, &(0x7f0000001180)="2cb304c7", 0x4) 378.915371ms ago: executing program 7 (id=237): syz_emit_ethernet(0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="bf72c13624f6dbbab2046674080600188dbb060d2004aaaaaaaaaaaac00ed7b05aac38200f81e4f39ed8aaaaaaaabbd7ba93a9b56a6e325059b69f89c8c671"]) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0e99db6de761f86, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x1, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x10000, 0x100) select(0x40, &(0x7f0000000000)={0x8, 0x3ff, 0x0, 0x0, 0xe4c6, 0x0, 0x0, 0x3}, &(0x7f0000000380)={0xffb, 0x200, 0xfffffffffffffffa, 0x400000000000000, 0x0, 0x9, 0x2}, 0x0, 0x0) mknod(&(0x7f00000000c0)='./bus\x00', 0x2006, 0x4f4b) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7f9, 0x9, 0x3, 0x8fe, 0x104, 0x5, 0x3, 0x10, [{0xfffff000, 0x5, 0x6, 0x71800}, {0x3, 0x9, 0x6, 0x5}, {0x0, 0xc7, 0x208, 0x2}, {0x2, 0x80ff, 0x200, 0x5}, {0x10000, 0x3, 0x5, 0x7}, {0x2002, 0x83, 0x14000009, 0xf}, {0x5, 0xbffffff9, 0x1, 0x6d}, {0x2400a, 0x3, 0xfdf0, 0x4}, {0x25, 0x6, 0x3, 0x9}, {0x401, 0x0, 0x8001, 0x7}, {0x401, 0x9, 0x48a, 0x13}, {0xce, 0x7584, 0x8, 0x8}, {0x2000df, 0x2b, 0x5, 0x1}, {0x4, 0xfffffffc, 0xfffffff5, 0x3}, {0x6, 0x5, 0x100, 0x40000003}, {0xfffffffd, 0xd654, 0xffffffff, 0x6}]}) r0 = socket(0x18, 0x2, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) ioctl$FIONREAD(r0, 0x8020699d, &(0x7f00000001c0)) sysctl$kern(&(0x7f00000000c0)={0x1, 0x4b}, 0x2, &(0x7f0000000100)="71f91e34712f3a65c61bdc56d786f5b9b05b632673b24e02be4387b550", &(0x7f0000000000)=0x1d, 0x0, 0x0) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000480)={0x2, &(0x7f0000000240)=[{0x2c, 0x0, 0xff, 0x101}, {0x9b1e, 0x8f, 0x0, 0x3ff}]}) ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x0, [{0x1, 0x7}, {0x3, 0xff03}, {0x2, 0x2001}, {0x1, 0x800}, {0x3}, {0x5}, {0x0, 0xaa59}, {0x3, 0xb59}, {0x1, 0x1}, {0x3, 0x100}, {0x1, 0x2}, {0x3, 0x80000000}, {0x3, 0x6}, {}, {0x1, 0x9}, {0x1, 0xffffffff}, {0x3, 0x1}, {0x3, 0xffffff01}, {0x3, 0xfffffffe}, {0x1, 0x40007ff}, {0x1, 0x803}, {0x0, 0x9}, {0x1, 0x3}, {0x0, 0xf208}, {0x2, 0x41000000}, {0x1, 0x1}, {0x0, 0x1ff}, {0x0, 0x202}, {0x2, 0xffffffff}, {0x3, 0x9}, {0x1, 0x5}, {0x3, 0x4}]}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x33}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x18, 0x0, 0xffffffffffffffb8) setreuid(0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008004588060f0775fd32f3029078e0000002ac1400aa0c01907806010000451700400066000280080000e000000100000000"]) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000200)=[{0x3, 0x2, 0x1, 0x6}, {0x1, 0xc9, 0x8, 0x106}, {0x9b1e, 0x26, 0xb, 0x40203ff}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETF(r2, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x1000e, &(0x7f0000000200)=ANY=[]) ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f0000000040)={0x0, 0x0, 0x1, 0x0, "0100012d29fb000700000000098002005e00"}) sysctl$kern(&(0x7f0000000040)={0x1, 0x4f}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$vfs_nfs(&(0x7f0000000040)={0xa, 0x2, 0x1}, 0x3, &(0x7f0000000080), 0x0, &(0x7f00000001c0), 0x0) writev(r2, &(0x7f00000002c0)=[{&(0x7f0000000280)}], 0x1) mknod$loop(&(0x7f0000000000)='./bus\x00', 0x9d171610b5c8a3be, 0x1) 378.423649ms ago: executing program 0 (id=238): socket$inet6(0x18, 0x1, 0x6) (async) r0 = socket$inet6(0x18, 0x1, 0x6) r1 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$WSMOUSEIO_SCALIBCOORDS(r1, 0x81205724, &(0x7f0000000a00)={0x2, 0x8, 0x5, 0x80, 0x0, 0x80, 0x2, 0x10, [{0xfffffffc, 0x5, 0xff, 0x3}, {0x3, 0x6, 0x101, 0x31}, {0xfffffffd, 0x6, 0x8, 0x8443}, {0x9, 0x9, 0xa, 0xffff8001}, {0x7, 0x2, 0x73e, 0x9}, {0x80000001, 0x2, 0x3, 0xfff}, {0x2, 0x0, 0xff000000, 0xc8}, {0x7, 0x7, 0x100, 0x400}, {0xff, 0x6432, 0x593, 0x2}, {0x9, 0x3, 0x84, 0x8}, {0x1, 0xffff66e1, 0x8, 0x101}, {0x770e, 0x9, 0x9, 0x653a}, {0xca3, 0x9000, 0x8, 0x8}, {0x5, 0x4, 0x8001, 0x7}, {0x7fffffff, 0x5, 0x0, 0x7}, {0x7, 0x6, 0x7fff, 0x2}]}) chown(0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000040)={0x1c, 0x18, 0x1, 0x2, "00000000000000000000000000000001", 0x7}, 0x1c) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffff9c, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0xff, 0xcfe, 0xf60, 0x4, 0x6, 0xffffff9b, 0x2, 0xfffffe5e], 0x8, 0x10000, 0x0, 0xffffffffffffffff}) sysctl$vfs_ffs(&(0x7f0000000000)={0x4, 0x1, 0x1}, 0x3, 0x0, 0x0, 0x0, 0x0) openat$bpf(0xffffffffffffff9c, &(0x7f0000000280), 0xa1, 0x0) (async) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000280), 0xa1, 0x0) sendmsg(r0, &(0x7f0000002080)={&(0x7f0000001b40)=@in6={0x1c, 0x18, 0x2, 0x8, "34f32ae4f7c3447fd7d70be6a3d40f81", 0x8}, 0x1c, &(0x7f0000001c00)=[{&(0x7f0000001b80)="e17915814c53ab07ea3c529114ed6f15111162b0b53b58b35242903bd0a088615c135644a3714cb176926de652bbab437eacfaa75b10ea011460dcaf30eb066f50d2b7b33b8cee116ca499c6429a3bc604e8ed1a24e909f06c2416223509ff904398dae494fbd6b96a13394e3ed4b6478e6a697fd10e1f0058", 0x79}], 0x1, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], 0x40c}, 0x402) (async) sendmsg(r0, &(0x7f0000002080)={&(0x7f0000001b40)=@in6={0x1c, 0x18, 0x2, 0x8, "34f32ae4f7c3447fd7d70be6a3d40f81", 0x8}, 0x1c, &(0x7f0000001c00)=[{&(0x7f0000001b80)="e17915814c53ab07ea3c529114ed6f15111162b0b53b58b35242903bd0a088615c135644a3714cb176926de652bbab437eacfaa75b10ea011460dcaf30eb066f50d2b7b33b8cee116ca499c6429a3bc604e8ed1a24e909f06c2416223509ff904398dae494fbd6b96a13394e3ed4b6478e6a697fd10e1f0058", 0x79}], 0x1, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], 0x40c}, 0x402) ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) execve(0x0, 0x0, 0x0) (async) execve(0x0, 0x0, 0x0) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x1, 0x5, 0x20, 0x9}, {0x7c, 0x9, 0xff, 0x200900}, {0x2016, 0x1, 0x9, 0x9}]}) ioctl$BIOCSFILDROP(r3, 0x80044279, &(0x7f0000000200)=0xf79) sysctl$kern(0x0, 0x0, &(0x7f00000001c0)="c2a6500000019324b9b7a065af1faf4a1532d36083c8c7060000003882000100005c8a2b496a06907f80ffff", &(0x7f0000000000)=0x2c, 0x0, 0x0) open$dir(&(0x7f0000000180)='./file0\x00', 0x0, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_emit_ethernet(0x56, &(0x7f0000000100)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x20, 0x0, 0x0, @empty, @local={0xfe, 0x80, '\x00', 0x0}, {[@dstopts={0x3a}], @icmpv6=@ndisc_ns={0x87, 0x0, 0x0, 0x0, @loopback}}}}}}) (async) syz_emit_ethernet(0x56, &(0x7f0000000100)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x20, 0x0, 0x0, @empty, @local={0xfe, 0x80, '\x00', 0x0}, {[@dstopts={0x3a}], @icmpv6=@ndisc_ns={0x87, 0x0, 0x0, 0x0, @loopback}}}}}}) ioctl$BIOCSETF(r3, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x1000e, &(0x7f0000000ac0)=ANY=[]) (async) syz_emit_ethernet(0x1000e, &(0x7f0000000ac0)=ANY=[]) r4 = openat$pf(0xffffffffffffff9c, &(0x7f0000000240), 0x80, 0x0) ioctl$DIOCRCLRADDRS(0xffffffffffffff9c, 0xc4504442, &(0x7f00000020c0)={{'./file0\x00', './file0\x00', 0x15, 0x20}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xffffff3f, 0x18, 0x1}) (async) ioctl$DIOCRCLRADDRS(0xffffffffffffff9c, 0xc4504442, &(0x7f00000020c0)={{'./file0\x00', './file0\x00', 0x15, 0x20}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xffffff3f, 0x18, 0x1}) ioctl$DIOCXCOMMIT(r4, 0xc0104452, &(0x7f0000001b00)={0x6, 0x2, &(0x7f00000002c0)=[{0x0, './file0\x00', 0x5}, {0x1, './file0\x00', 0x80000001}, {0x1, './file0\x00', 0x39}, {0x0, './file0\x00', 0x8}, {0x0, './file0\x00', 0xfffffff9}, {0x1, './file0\x00', 0x3}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r5 = socket(0x18, 0x1, 0x0) setsockopt(r5, 0x1000000029, 0x2e, &(0x7f0000000040)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) setsockopt(r5, 0x1000000029, 0x2e, &(0x7f0000000000)="ebf6cbdf13b9fd812eaa4e712e54e69931929648", 0x14) (async) setsockopt(r5, 0x1000000029, 0x2e, &(0x7f0000000000)="ebf6cbdf13b9fd812eaa4e712e54e69931929648", 0x14) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffff9c, 0x40046402, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_AUTH_MAGIC(r2, 0x80046411, &(0x7f0000000140)={r6}) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x18, 0x3, 0xfbf, "fe80f70400000000000048dcfffffcff", 0x8}, 0x1c) (async) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x18, 0x3, 0xfbf, "fe80f70400000000000048dcfffffcff", 0x8}, 0x1c) 359.72366ms ago: executing program 3 (id=239): sysctl$hw(&(0x7f0000000040)={0x7, 0xf}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sysctl$kern(&(0x7f0000000040)={0x1, 0x51}, 0x2, &(0x7f0000000080)="7b4ff6d740fa684104ff18294baa77934b6772c4fbfe7e68f45fa3aee88eb5929c5372fd8865be57feb3b1a24d1f47077b3fe63652a43da2d395e86065e2ec81d61848d8f608f1000000808cdf23284a90923fa4cc13316f10cb96a005b21ed15f4da54aef96fc6d2b160428847ac7374cfd6f", 0x0, 0x0, 0x0) 359.342189ms ago: executing program 4 (id=240): setresuid(0xee00, 0xee00, 0x0) setuid(0x0) r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$inet(0x2, 0x8003, 0x0) setsockopt(r1, 0x0, 0x1e, &(0x7f0000000340)="15337ac0", 0x4) syz_emit_ethernet(0x1000e, &(0x7f0000000380)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x14, 0xfffc, 0x0, 0x0, 0x84, 0x0, @broadcast, @local={0xac, 0x14, 0x0}}}}}}) syz_extract_tcp_res$synack(&(0x7f0000000040), 0x1, 0x0) ioctl$DIOCRDELADDRS(r0, 0xc4504444, &(0x7f00000001c0)={{'./file0\x00', './file0\x00', 0x43, 0x6}, 0x0, 0x2, 0x0, 0x0, 0xce, 0x8, 0x8, 0x0, 0x8}) 358.172006ms ago: executing program 5 (id=241): ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, &(0x7f0000000100)={0x1, 0x0, {[0xfffefbfffffffffa, 0x1, 0x5, 0x1, 0xfffffffffffffffe, 0x0, 0xdf5a, 0xffffffffffffffff, 0x0, 0x2eff, 0x5, 0x3, 0xffffffffffffffff, 0x0, 0x8000000, 0xa8, 0x100000001, 0xce7], [0xfffffffffffffffe, 0x2, 0xfffffffffffffffa, 0x8000ffffffff, 0x100, 0x7b99, 0x1fe, 0xb, 0x1, 0x8], [0x100000001, 0xfffffffffffffffe, 0x40000000, 0x6, 0xffffffffffffffff, 0x4, 0xfffffffffffffffe], [0x100, 0x20000000000, 0x401, 0x100000000, 0xffffffffffefffff, 0x6], [{0x8, 0x5, 0x0, 0x8}, {0xfffc, 0x7, 0x5}, {0x10, 0x80000001, 0x5bea, 0x814}, {0xf801, 0x5, 0x7, 0x8000000c}, {0x10, 0x2, 0x4, 0x808}, {0x400b, 0x40, 0x40000, 0x4}, {0x8, 0x20000, 0x4, 0x5}, {0x0, 0x965, 0x3, 0x8}], {0x2000, 0x8, 0x10000}, {0x0, 0x0, 0x3, 0x2}}}) openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) select(0x40, &(0x7f0000000300)={0x7, 0x5, 0x0, 0xbf, 0xa, 0x10000, 0x9, 0x101}, 0x0, &(0x7f0000000380)={0x9, 0x2, 0xffff, 0x5, 0x2, 0x5, 0xb682, 0xdef}, 0x0) r0 = kqueue() r1 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000140), 0x782, 0x0) ioctl$SPKRTUNE(r1, 0x20005302, &(0x7f0000000080)={0xa2a4, 0x3}) kevent(r0, &(0x7f00000000c0), 0x8, 0x0, 0x15, 0x0) r2 = kqueue() r3 = getpid() getsid(r3) r4 = openat$pf(0xffffffffffffff9c, &(0x7f00000019c0), 0x40000, 0x0) ioctl$DIOCGETQUEUE(r4, 0xc148445f, &(0x7f0000001a00)={0x3, 0x9, {'\x00', './file0\x00', './file0\x00', './file0\x00', {{0x2, 0x9}, {0xf80, 0x4}, 0xe}, {{0x7fff, 0x5}, {0x5, 0x3}, 0x1}, {{0x6, 0x80000001}, {0x0, 0xc6f}, 0x3}, {0x4, 0x3, 0xb, 0x6}, 0x0, 0x5f05, 0x9, 0x10, 0x2}}) ktrace(&(0x7f0000000040)='./file0\x00', 0x0, 0x40000008, r3) kevent(r2, &(0x7f0000000000), 0x3ff, 0x0, 0x8000800, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x80, 0x120) close(r0) 356.428868ms ago: executing program 1 (id=242): r0 = syz_open_pts() mquery(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x80c3b5c5cfbfeb90, 0x10, r0, 0x8) ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000000)={0x8, 0x2, 0x6, 0x7, "968235646f324030579fb852037e3dffd02c3abc", 0x10, 0x401}) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000280)={0x4, &(0x7f0000000000)=[{0x1, 0x7, 0x1, 0x9}, {0x34, 0x0, 0x2, 0x3}, {0x44, 0xf, 0x37, 0x6}, {0x991e, 0x4, 0xd5, 0xffff}]}) syz_emit_ethernet(0x46, &(0x7f0000000b00)=ANY=[@ANYBLOB="e702f2ffef1f97b0ae1a006b86dd609907a600102c03cb697a653e336f000000500000000000ff0200000000000000000000000000019fedbf9baf39de3bdd17a83b00007f00000000800090780002fffc"]) r2 = socket$inet6(0x18, 0x3, 0x2) setsockopt$sock_int(r2, 0xffff, 0x206d, &(0x7f0000001300)=0x3, 0x4) bind$inet6(r2, &(0x7f0000000040)={0x1c, 0x18, 0x1, 0x6, "000000000000000002ffffffff000600", 0x9}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0x1c, 0x18, 0x3, 0x100, "12b0a8156d071b9c26d6092f0bf15482"}, 0x1c) sendmsg(r2, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="c0000000ffff00000900000054c9a8c91bf95954e6ede449d29fe28802900d6d84b2fc8d32a1ce87273f227a5b1e445538d643c29cdb5b9614e5749b6493bc368386e223ae8a848addb73a2783b8c8c2e72ba6d0640d063e450c23e5ac15eeba62401e44c93bb131cfa6d2e5e21c3e12accf3b5909c9b8ccfc824a8b722bd7e8fc00eb32d735f1d3b6c3dcaebea6f2dd6cd021a5ca2546c7cd4afb64e599c61c296ecd16c8dd6c7c36a56364c300"/192], 0xc0}, 0x8) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xca605601, &(0x7f0000001340)={0x10, 0x5, [{&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x800}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x3}, {&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x1}, {&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, 0x4000000000000000}, {&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x7}, {&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000003000/0x4000)=nil, 0x7}, {&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x5}, {&(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x2}, {&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x3000)=nil, 0xeb}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff7000/0x3000)=nil, 0x80}, {&(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x8}, {&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x7}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0xb1}, {&(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x3}, {&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0xffffffffffff0000}], './file0\x00', 0x3, 0x4, 0xfff, 0x1000000, [0x7, 0x8, 0x80000001, 0x401, 0x0, 0x9, 0x9, 0x78, 0x9, 0xfffffffd, 0x7, 0x10001, 0x6, 0x6, 0x8001, 0x8, 0x3ff, 0x7, 0x1, 0x0, 0xfffffff7, 0x9, 0xfffffffa, 0x280000, 0x7, 0x1, 0x0, 0x2, 0x3, 0x7, 0x0, 0x6, 0x0, 0xfff, 0x4, 0x0, 0x0, 0x0, 0x8, 0x100, 0xffffff80, 0x2, 0xdae, 0x7ff, 0x1, 0x7fffffff, 0x6, 0x101, 0x0, 0x3, 0x10000000, 0x8, 0x2, 0x6, 0xfd, 0x6, 0x6, 0x46af0a69, 0x4a9, 0x80000000, 0x10001, 0x1ff, 0x9, 0x2, 0x7ff, 0xff, 0x3, 0x2, 0x6, 0x6, 0x1, 0xffffffff, 0x6, 0x3, 0x5, 0x7, 0x5, 0x7, 0xfffffffc, 0x2, 0xf8000000, 0x3, 0x4, 0xbbf, 0x100006, 0x3, 0x9, 0x1000000, 0x0, 0xd, 0x4, 0xffaf, 0x6, 0x1, 0x9, 0xce, 0x8, 0x8, 0xa94a, 0x0, 0x987, 0x5, 0x2, 0xa9d2, 0xfffffff2, 0x8000, 0x1, 0x6, 0xcc6, 0x400, 0xfffffffa, 0xa19, 0x80, 0x6, 0x88, 0x80000001, 0x4, 0x1, 0x2, 0x9, 0x53f1, 0x1000, 0xfffffffd, 0xffffff22, 0x9, 0xc144, 0x7, 0x3, 0x9, 0x8, 0x470f, 0x1, 0x4, 0x6, 0xffff, 0x2, 0xfffffffc, 0x6, 0x5, 0x4, 0x5, 0x5a9c, 0x4, 0xeb6, 0x5, 0x3, 0x2, 0x2, 0x2, 0x8000, 0x8, 0xaa, 0x8c, 0x38, 0x6, 0x9, 0xb275, 0x400, 0x7, 0x7, 0xd4, 0x7, 0x80004, 0x9, 0x75, 0x1ff, 0x1, 0x800, 0x800, 0x3, 0x1ff, 0x401, 0x0, 0x4be, 0x7, 0x1, 0x100, 0x3, 0x2, 0xff, 0x239ed050, 0x7f, 0xff, 0x7, 0x9, 0x3ff, 0x4, 0x5317ce34, 0x0, 0x101, 0x80000000, 0x2, 0x10, 0x2, 0x6, 0x5, 0xb, 0x7, 0x9, 0x40, 0x3, 0x6, 0xffff, 0x0, 0x1, 0x1ff, 0x1ff, 0x16, 0x7, 0x4, 0xffffff01, 0x6, 0x5, 0x2, 0x4, 0x4, 0xffffffff, 0x788, 0x0, 0x6, 0x9, 0x1, 0x6, 0x6, 0x6, 0x6, 0xffff, 0x5310, 0x4, 0xd, 0x9, 0x8001, 0x40, 0x5, 0xfffffff7, 0xa, 0x400, 0x4, 0x5, 0x200, 0x6, 0x5, 0x4, 0x4, 0x3, 0x693, 0x40, 0x8, 0x6, 0x80000000, 0x1d209cda, 0x7, 0x4, 0x7fffffff, 0x63439b01, 0xfffffff8, 0xfffffff8, 0x7, 0x9, 0x9, 0x5, 0x9, 0x6, 0xed, 0x200006, 0xf4d7, 0x9, 0x9, 0xffff, 0xadd, 0x16947a10, 0x3, 0x7, 0x6, 0xc, 0x1, 0x10000, 0x6, 0x9, 0xffff0000, 0x9, 0x9, 0x81, 0x7fffffff, 0x1, 0xda6, 0xf27e, 0x8001, 0xf, 0x0, 0xe7, 0x93c9, 0x3, 0x5, 0x9, 0x1, 0x2, 0x5, 0x4, 0x0, 0xb, 0x2, 0xffffffff, 0x8, 0xffff, 0xdc1c, 0x44cf, 0x6, 0x3, 0x2, 0xe877, 0x805, 0x1, 0x5, 0x1014, 0x1, 0x0, 0x3dd, 0x2, 0xffff5ad4, 0x5, 0x2, 0xc, 0x2, 0xf49, 0x65, 0x3, 0x5, 0xef6, 0x2, 0x719, 0x99bd, 0x7, 0x2d5cc7e1, 0x7fffffff, 0x2, 0x1, 0x9, 0x1ff, 0x3, 0xc263, 0xdc81, 0xda, 0x9, 0x400, 0xaed3, 0x9, 0x1, 0xffffff7f, 0x1400000, 0x3, 0xb0, 0x8001, 0x4800000, 0x5, 0xe12, 0x5c, 0x7, 0x4, 0xffff932b, 0xb65, 0x4f, 0x9, 0x7fffffff, 0x787f, 0x8, 0x200000, 0xf, 0x6, 0x2, 0x7, 0x3a31, 0x0, 0x3, 0xc, 0x101, 0x7fffffff, 0xfffffff7, 0x3, 0x5, 0x7fffffff, 0x9, 0x800002, 0x7, 0x5, 0xfffffe00, 0xa88, 0x7eec, 0x8000, 0x0, 0x100, 0x682, 0x36a5, 0x100, 0xd2, 0x81, 0x0, 0x0, 0x1, 0xde, 0xf2d, 0x4, 0x39d, 0x87ab, 0x4, 0xe, 0x7, 0xffff, 0xc8, 0x7, 0x7, 0xfffffe00, 0x9, 0x8, 0xfffffff7, 0x6e04f75a, 0x0, 0x2, 0x4d, 0x4, 0x10000, 0x8, 0x6, 0x1, 0x5, 0x9, 0x8, 0x80, 0x1, 0x2, 0x1, 0x3, 0x7, 0xcd, 0x6, 0xc6, 0xf3, 0x10, 0x7, 0x27a, 0x7, 0xff28, 0x2, 0xdb9, 0x7, 0x0, 0x10, 0xfff, 0x0, 0x6, 0xe, 0xa6d, 0x8, 0x1ff, 0x10000, 0xdee, 0xfffffff9, 0x7d08, 0x4aa, 0x7fffffff, 0x10, 0x6, 0x9, 0x8, 0x4, 0x9, 0x7, 0x10, 0x8, 0x2, 0x5b7, 0x7ff, 0x9d1, 0xfffffffe, 0x5, 0x8, 0x18, 0xff, 0x8, 0x9, 0xfffffffa, 0x1, 0x7fff, 0x6022, 0x401, 0x10000, 0x5, 0xfb3f, 0x2, 0x317b, 0x0, 0x2dd, 0x4, 0x10001, 0x3, 0xd4ef, 0x5, 0x1, 0x10001, 0x9, 0x7, 0xf, 0x1, 0x8, 0x100, 0x5, 0xff, 0x8, 0x80000001, 0x5, 0x4, 0xba]}) execve(0x0, &(0x7f0000000340)=[&(0x7f0000000100)='tap'], 0x0) r3 = socket(0x18, 0x3, 0x0) ioctl$FIONREAD(r3, 0xc028698a, &(0x7f0000000100)) setresuid(0x0, 0xee00, 0x0) mprotect(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0) getpgrp() r4 = setsid() ktrace(0x0, 0x1, 0x381e, r4) munmap(&(0x7f0000001000/0x2000)=nil, 0x2000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000e40)={0xffffffffffffffff}) sendmsg(r5, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001680)=ANY=[], 0x14}, 0x402) setuid(0xee01) mknod(&(0x7f0000000000)='./bus\x00', 0x2000, 0x0) syz_open_pts() r6 = open(&(0x7f0000000040)='./bus\x00', 0x800, 0x0) ioctl$TIOCGETA(r6, 0x402c7413, &(0x7f00000000c0)) socketpair(0x2, 0xc003, 0xa5, 0x0) 306.97366ms ago: executing program 1 (id=243): r0 = socket(0x18, 0x3, 0x50) (async) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x128) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(0xffffffffffffff9c, 0xc01864c1, &(0x7f0000000100)={0x0, 0x2, 0xffffffffffffffff}) ioctl$DIOCCLRSTATES(r1, 0x0, &(0x7f0000000240)={{0x4, 0x3, 0x1}, 0x18, '\x00', 0x4, {@addrmask={@v4, @v6=@remote={0xfe, 0x80, '\x00', 0x0}, 0x0, 0x0, 0x2}, [0xffff, 0x2f], 0x1, 0x9, 0x8}, {@any={'\x00', 0x0, 0x0, 0x3}, [0x7, 0x10], 0x10, 0x0, 0x8}, './file0/file0\x00', './file0/../file0\x00', 0x5, 0xc}) (async) chroot(&(0x7f0000000580)='./file0/../file0\x00') (async) chown(&(0x7f00000007c0)='./file0/../file0\x00', 0x0, 0x0) r2 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r2, 0xc0106924, &(0x7f00000001c0)) (async) kqueue() (async) lseek(r0, 0x6, 0x2) chflags(&(0x7f00000000c0)='./file0\x00', 0x1) kevent(r2, &(0x7f0000000040)=[{{r0}, 0xfffffffffffffff8, 0x40, 0x2, 0x1, 0xffffffff}, {{r2}, 0xfffffffffffffff6, 0x0, 0xfffff, 0x7, 0x3cac4e0b}, {{r0}, 0xffffffffffffffff, 0x0, 0x1, 0x6, 0x53318c35}], 0xffff, &(0x7f00000001c0), 0x19, 0x0) (async) ioctl$FIONREAD(r0, 0x8020699f, &(0x7f0000000200)) 306.616305ms ago: executing program 3 (id=244): sendsyslog(0x0, 0xffffffffffffffb0, 0x0) sendsyslog(&(0x7f0000000000)="009e598cb9bc1dedf2dafbf7045dd21d24079a7a243509535b9a224914e30e2f36773654eba4fbf9f3dd8b86c745b717ecdb4a5b315a77d41477287f70d891e2b54903d9daabda9e664be4259b808ee23cb39c4a9e33286a38de0d56931794f916ded87dc4d2fc3ec386633a966e66256c17d8f2563b6e2aa4c66aa5a2f2aca84e31a4ce02e0", 0x86, 0x2) sendsyslog(&(0x7f00000000c0)="66a870671c6b076f9ebc79bd11da7a6276bf7bc9d9fa344c2e14eb70e2f1c3ec5e09f91ea368a533b4fdcd1f54c22b19e69f7b2c6f689a43aee87925388157a89a079616e9ce4d2819f4bb7e67410cfd9e33ca7af666c71ee08543e1fe14bb443f194d825444fff1d03d34d6bfd0c04cc22d2c691c41d07a5c7369b642c112531b6213545816fdbf1d8bb0b7035831bca0c8a7e96610fde02b8e6ec2bda26e8a0233922cb532128f213513f4ada4849260768b6319ec96fb84fdef0766d0e53d9e8b78ae2b12b08a", 0xc8, 0x2) 304.466911ms ago: executing program 4 (id=245): setgid(0xffffffffffffffff) r0 = shmget$private(0x0, 0x4000, 0x41b, &(0x7f0000ff9000/0x4000)=nil) r1 = geteuid() lstat(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = geteuid() lchown(&(0x7f0000000100)='./file0\x00', r3, 0x0) r4 = fcntl$getown(0xffffffffffffffff, 0x5) r5 = getpgrp() ktrace(0x0, 0x5, 0x381e, r5) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000100)={{r1, r2, r3, 0x0, 0x1, 0x7, 0x0, 0x0, 0x1}, 0x4, r4, r5, 0x2, 0x0, 0x7fff, 0x5, 0x5, 0x7, 0x2ef74aa9, 0xb320}) setuid(r3) setgroups(0x0, 0x0) rename(&(0x7f0000000200)='.\x00', 0x0) 302.629858ms ago: executing program 1 (id=246): r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) ioctl$DIOCNATLOOK(r0, 0xc0504417, &(0x7f0000000180)={@v4=@broadcast, @v4=@multicast1, @v6=@rand_addr="b8519cd5a6c63eadcee41dd791d39c00", @v4=@rand_addr=0x64, 0x0, 0x7, 0x8, 0x1, 0x8, 0xc, 0x18, 0x0, 0x2}) (async) r1 = open(&(0x7f0000000080)='./file0\x00', 0x8, 0x0) ioctl$DIOCGETSTATE(r1, 0xc1084413, &(0x7f0000000040)={{0x8000004, './file0\x00', [{[@v4=@local={0xac, 0x14, 0x0}, @v6=@remote={0xfe, 0x80, '\x00', 0x0}], [0x159, 0x40], 0x0, 0x18}, {[@v4=@loopback, @v6=@remote={0xfe, 0x80, '\x00', 0x0}], [0x46, 0xffff], 0x4, 0x1a}], {{0x245, 0x0, 0x1, 0x7ff}, 0x5, 0x7, 0x80, 0x8000, 0x8, 0x17, 0xa}, {{0x5, 0xfe, 0x1, 0x7}, 0x9008001, 0x8, 0x10007, 0x9, 0x35e, 0xf0, 0xfe}, @v6=@loopback, 0x4, 0x0, 0xfffffbfc, 0x6, 0xb, [[0x9, 0x77], [0x80001000, 0x80834c]], [[0xfbfffff9, 0x9], [0x9, 0x3]], 0xc, [0x2, 0x77], 0x0, 0x2, 0x11, 0x0, 0xff, 0x3, 0xb, 0x3, 0x1, 0x8, 0xd, 0xce50}}) writev(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) (async) ioctl$WSMUXIO_REMOVE_DEVICE(0xffffffffffffffff, 0x80085762, &(0x7f0000000040)={0x1}) (async) r3 = socket(0x18, 0xc003, 0x3a) setsockopt(r3, 0x29, 0x6c, &(0x7f0000000040), 0x4) (async) setsockopt$inet6_MRT6_ADD_MFC(r3, 0x29, 0x68, &(0x7f0000000280)={{0x1c, 0x18, 0x2, 0x1, "2da5ab4118bb11f262f104012ece831c", 0x6}, {0x1c, 0x18, 0x3, 0x4, "2a04f39ccf93665af5f71a7f86067f69", 0xd}, 0x3, [0x689, 0xb9a, 0x7, 0xffffffc5, 0x5, 0x2, 0x4, 0x2]}, 0x5c) mknod(0x0, 0x2000, 0x5c4a) open(&(0x7f0000000240)='./file0\x00', 0x70e, 0x3c) (async) open(&(0x7f00000000c0)='./file0\x00', 0x205, 0x0) (async) write(0xffffffffffffffff, 0x0, 0x0) (async) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x11}, 0x4000000000000007, 0x0, 0x0, 0x0, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) bind$unix(r4, &(0x7f00000000c0)=@file={0x4, 0x1, './file0\x00'}, 0xa) (async) connect(r4, &(0x7f0000000000)=@un=@file={0x9, 0x1, './file0\x00'}, 0xa) connect$unix(r4, &(0x7f0000000080)=@file={0x87, 0x1, './file0\x00'}, 0xa) (async) sendmsg(r2, &(0x7f0000000380)={0x0, 0x32c, 0x0, 0x0, &(0x7f0000000000), 0x90}, 0x0) (async) close(0x3) (async) seteuid(0xffffffffffffffff) (async) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) r5 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) ioctl$TIOCSETA(r5, 0xc1084425, &(0x7f0000000200)={0x2, 0x40003aec, 0x1, 0x7f, "210d0000000200006161fd610005000421800600", 0x2000000, 0x10}) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) (async) semget$private(0x0, 0x1, 0x201) (async) semop(0x0, &(0x7f0000002f40)=[{0x0, 0x0, 0x3c00}], 0x1) 302.275502ms ago: executing program 4 (id=247): sysctl$kern(&(0x7f00000000c0)={0x1, 0x30}, 0x4000000000000064, 0x0, 0x0, 0x0, 0x3f) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x10004) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="bf", 0x1}], 0x1) poll(&(0x7f0000000540)=[{r1, 0x1}], 0x1, 0x5) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sysctl$kern(&(0x7f0000000000)={0x1, 0x50}, 0x2, 0x0, 0x0, &(0x7f0000001440)='\x00\x00\x00\x00', 0x4) 286.788976ms ago: executing program 1 (id=248): open(&(0x7f0000000180)='./file0\x00', 0x80000000000206, 0x160) setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) truncate(&(0x7f00000000c0)='./file0\x00', 0x6001000004) r0 = socket(0x18, 0x2, 0x0) setsockopt(r0, 0x1000000000029, 0x2b, &(0x7f00000001c0)="e89483b4", 0x4) r1 = setsid() r2 = semget(0x3, 0x3, 0x4) semctl$GETPID(r2, 0x2, 0x4, &(0x7f0000000040)=""/5) r3 = socket(0x18, 0x3, 0x6) r4 = openat$diskmap(0xffffffffffffff9c, 0x0, 0x200, 0x0) ioctl$DIOCMAP(r4, 0xc0106477, &(0x7f00000006c0)={&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, 0x2}) ioctl$FIONREAD(r3, 0xc1206949, &(0x7f0000000100)) ktrace(&(0x7f0000000100)='./file0/file0\x00', 0x0, 0x40000a0e, r1) ktrace(&(0x7f0000000040)='./file0\x00', 0x4, 0x20003916, 0xffffffffffffffff) r5 = getpid() ktrace(&(0x7f0000000280)='./file0\x00', 0x0, 0x40000928, r5) ktrace(&(0x7f0000000080)='./file0\x00', 0x4, 0x4000121a, r5) truncate(&(0x7f00000003c0)='./file0\x00', 0x44002ffff) 285.688117ms ago: executing program 4 (id=249): r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0x80000000, 0xffff63d6, 0xe9, 0x2, 0xa, 0x3, 0x1, 0x10, [{0x0, 0x80000002, 0x5, 0x80000002}, {0xe9, 0xe7, 0x1000002, 0x6}, {0x10cd5, 0x4baa, 0x9, 0x4}, {0x7, 0x10000, 0x4000000f, 0x8cce}, {0x4, 0x2000008, 0x0, 0x1}, {0x388d, 0xffffffff, 0x85, 0x5}, {0x2, 0xa00, 0x20004, 0xffffffff}, {0x208, 0xfffffffd, 0x5, 0xffffe2e8}, {0x10007, 0x1000, 0x3, 0x7ffd}, {0x3f8, 0xfefffffd, 0x1ff, 0x12}, {0x82, 0x0, 0x8a3a0001, 0xfffffff4}, {0x10002, 0xfffffffe, 0x650, 0x200a68}, {0x401, 0x6, 0xa6ab, 0xa5}, {0x6, 0xfffffffe, 0x102}, {0xffffffff, 0x7, 0x81, 0x7}, {0x89be2, 0x1, 0x2, 0x3ff}]}) r1 = socket$inet(0x18, 0x3, 0x102) sendmsg(r1, &(0x7f0000000240)={&(0x7f0000000040)=@in6={0x1c, 0x18, 0x3, 0x4, '\x00', 0x100}, 0x1c, &(0x7f00000003c0)=[{&(0x7f00000002c0)="618802000000339a8c51f6f2efa24a85abdd612dd68e59adfecf9323100084410a8591426e8e5eb5060aee57815022e17f0919624206eff07c5111aa5a5d05126aeae9eceda7cb", 0x47}], 0x1, 0x0}, 0x406) (async) sendmsg(r1, &(0x7f0000000240)={&(0x7f0000000040)=@in6={0x1c, 0x18, 0x3, 0x4, '\x00', 0x100}, 0x1c, &(0x7f00000003c0)=[{&(0x7f00000002c0)="618802000000339a8c51f6f2efa24a85abdd612dd68e59adfecf9323100084410a8591426e8e5eb5060aee57815022e17f0919624206eff07c5111aa5a5d05126aeae9eceda7cb", 0x47}], 0x1, 0x0}, 0x406) poll(&(0x7f0000000180)=[{0xffffffffffffffff, 0x8}, {0xffffffffffffffff, 0x4}, {r0, 0x20}], 0x3, 0x5) (async) poll(&(0x7f0000000180)=[{0xffffffffffffffff, 0x8}, {0xffffffffffffffff, 0x4}, {r0, 0x20}], 0x3, 0x5) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket(0x18, 0x1, 0x0) setsockopt(r3, 0x1000000000029, 0x9, &(0x7f0000000340)='\x00\"\x00\x00', 0x4) getsockopt$sock_int(r2, 0xffff, 0x10, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$TIOCSETA(r0, 0x80d04466, &(0x7f0000000140)={0x9, 0xa525, 0x4, 0x127492, "08e50000000000000100", 0x20004118, 0x6}) 210.023457ms ago: executing program 0 (id=250): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x800, 0x0) fcntl$lock(r0, 0x9, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x20001fffffffd}) flock(r0, 0x3) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r1, 0x0, 0x9, &(0x7f0000000100)="ea0000010000496552590000", 0xc) fcntl$lock(r0, 0x9, &(0x7f00000000c0)={0x2, 0x2, 0x6, 0x200000005}) 209.39725ms ago: executing program 2 (id=251): r0 = socket$inet(0x2, 0x3, 0x40) setsockopt$sock_int(r0, 0xffff, 0x800, &(0x7f00000011c0)=0xb92, 0x4) sendto$inet(r0, 0x0, 0x0, 0xa, &(0x7f00000002c0)={0x10, 0x2, 0x2, 0xffffffff}, 0x10) setrlimit(0x1, &(0x7f0000000000)={0xbffffffffffffffe, 0xffffffffffffffff}) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x80, 0x0) r2 = syz_open_pts() closefrom(r1) fchdir(r2) r3 = open(&(0x7f0000000040)='./file1\x00', 0x18289, 0x10) write(r3, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) ktrace(&(0x7f0000000200)='./file1\x00', 0x4, 0x40000220, 0x0) getrlimit(0x3, &(0x7f0000000080)) pwritev(r3, &(0x7f0000000340)=[{&(0x7f00000000c0)="463aac6338a62fc2eb48878f6f7203432b35409709fd0c800bbc1f77787e4e346aa531d1d9b0809bab0df1312d74fd8765a742b4f75748a6026eabd4659d5ce1", 0x40}], 0x1, 0x2) r4 = open(&(0x7f0000000000)='./file0\x00', 0x9cab835cfdc52675, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0xa011, r4, 0x0) r5 = msgget$private(0x0, 0xa8) msgsnd(r5, &(0x7f0000001f40)=ANY=[@ANYRESOCT=r5], 0x401, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) 208.725913ms ago: executing program 1 (id=252): pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x10000) readv(r0, &(0x7f0000003380)=[{&(0x7f00000033c0)=""/4109, 0x100d}], 0x1) (async) readv(r0, &(0x7f0000003380)=[{&(0x7f00000033c0)=""/4109, 0x100d}], 0x1) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000100)}], 0x1) ioctl$TIOCSETA(0xffffffffffffffff, 0xcd504404, &(0x7f0000000000)={0x2, 0x2, 0x1, 0x2, "cd00220004000000000000000000000000008000", 0x40048003, 0x6}) setsockopt$sock_int(0xffffffffffffffff, 0xffff, 0x800, &(0x7f0000000080)=0x4, 0x4) (async) setsockopt$sock_int(0xffffffffffffffff, 0xffff, 0x800, &(0x7f0000000080)=0x4, 0x4) sysctl$kern(&(0x7f0000000040)={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = syz_open_pts() close(r2) lseek(r2, 0x80, 0x1) sysctl$kern(&(0x7f0000000040)={0x1, 0x3e}, 0x3, &(0x7f00000000c0)="3bf2ee74e747c82dad6eb2a36fa755e1a3925fe49afca7e63b52fa65ccaa74d6e6b85b6cdced70357ef201f97842b1068dca31553fa2d7031f38c03e56ad0e24dfc4f97b8b7f81499647e6e7725765d61436c85e43c15d12a78cb8c57ddde87021d7b685507fd3e0652f35e45bdaa3afd86c4fe557433e4c2b632de71c951516adff26aa2e48b45f8ce92bcefd3eceefabee7e3ebe806fdb4f6af569ae94b5d127", &(0x7f0000000080)=0x4, &(0x7f0000000340)="5a67923ef0cb189971421989ebcff78831a7581e2f27caa362f1363042efb27688b2c899220fb2fe37e467d974592496856ca7b78060998608c2f952e43bc0bf11555cc5cb0fe17b2ec1be389871829bfe10dd4c4d2c8f9da2bd2868fd86791dc09dc4fa89a217458bdaed31003fdc3a7323189ba3ccbad6c8af17516e4557f61ad20180000000000000125f568ca7d3396b9057255f381855110eb3a673713716cdf010ddfa7977f92cf061ad125ca670353b45d53aae196b00271f9d3452b523b3dea22d6027625614312183724b71c7eb02083a410c1c99fa455013521f98686e472b70b560f7021f567adf4d", 0x4) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000980), 0x800, 0x0) ioctl$BIOCLOCK(r3, 0x20004276) ioctl$BIOCGHDRCMPLT(r3, 0x2000427e, 0x0) (async) ioctl$BIOCGHDRCMPLT(r3, 0x2000427e, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x2, 0x0, 0x5266, 0x100000003}) (async) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x2, 0x0, 0x5266, 0x100000003}) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x11}, 0x4000000000000007, 0x0, 0x0, 0x0, 0x0) 113.709717ms ago: executing program 6 (id=253): symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') unveil(&(0x7f0000000040)='./file0/file0/..\x00', &(0x7f0000000000)='x\x00') open$dir(&(0x7f00000000c0)='./file0\x00', 0x200, 0x186) 109.631102ms ago: executing program 6 (id=254): setsid() mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x200000000000c, &(0x7f0000000240)="ea00000100000000", 0xc) r1 = syz_open_pts() ioctl$TIOCSCTTY(r1, 0x20007461) r2 = fcntl$getown(r1, 0x5) fcntl$setown(r1, 0x6, r2) r3 = socket(0x18, 0x3, 0x7) getsockopt(r3, 0x29, 0x3f, 0x0, 0x0) 108.547192ms ago: executing program 7 (id=255): mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6000, 0x0) unlink(&(0x7f0000000080)='./file0\x00') 107.786733ms ago: executing program 3 (id=256): r0 = open(&(0x7f00000000c0)='./file0\x00', 0x78e, 0x12b) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000180)={'tap', 0x0}) r1 = socket$unix(0x1, 0x1, 0x0) syz_emit_ethernet(0x138, &(0x7f0000000100)=ANY=[@ANYRESHEX=r1]) sendmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000000100)="00801120", 0x4}], 0x1, 0x0}, 0x2) execve(0x0, &(0x7f0000000340)=[&(0x7f0000000100)='tap'], 0x0) r2 = socket(0x18, 0x3, 0x0) ioctl$FIONREAD(r2, 0x8020697a, &(0x7f0000000100)) socket(0x2, 0x1, 0x0) ioctl$FIONREAD(r0, 0x8060693d, &(0x7f0000000040)) getresuid(&(0x7f0000000000), &(0x7f0000000100), &(0x7f0000000140)) syz_open_pts() truncate(&(0x7f0000000080)='./file0\x00', 0x1) 107.310167ms ago: executing program 4 (id=257): r0 = socket(0x11, 0x3, 0x0) (async, rerun: 64) r1 = socket(0x2, 0x8002, 0x0) (rerun: 64) sysctl$kern(&(0x7f0000000000)={0x1, 0x2f}, 0x2, 0x0, 0x0, 0x0, 0x0) (async) r2 = socket$inet6(0x18, 0x2, 0x0) setsockopt$sock_int(r2, 0xffff, 0x1000, &(0x7f0000000140)=0x5, 0x4) (async) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0xbe, 0x0) ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f0000000200)={'tap', 0x0}) ioctl$BIOCSETWF(r3, 0x80104277, &(0x7f0000000040)={0x28, 0x0}) (async) write(r3, &(0x7f00000002c0)="f81ad30100060000000100000000", 0xe) ioctl$BIOCSETWF(r3, 0x80104277, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x0, 0x8, 0xe0, 0x4}]}) (async, rerun: 32) bind$inet6(r2, &(0x7f0000000040)={0x1c, 0x18, 0x1, 0x4, "00000000010000000600", 0x62a4}, 0x1c) (async, rerun: 32) connect$inet6(r2, &(0x7f0000000000)={0x1c, 0x18, 0x0, 0x9, "000000000060bb4fce2fa0cf1a00", 0xd5}, 0x1c) (async) r4 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) closefrom(r4) (async) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)=@abs={0x2c, 0x0, 0x0, 0x0}, 0x8) 64.860829ms ago: executing program 7 (id=258): ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f0000000040)={0x0, 0x0, 0x1, 0xffffffff, "1a11fffffffff700", 0x2}) openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) sysctl$kern(&(0x7f0000000100)={0x1, 0x23}, 0x2, 0x0, 0x0, 0x0, 0x0) socket$inet(0x2, 0x3, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = openat$pf(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) ioctl$DIOCRTSTADDRS(r0, 0xc4504449, &(0x7f0000000440)={{'./file0\x00', './file0\x00', 0x7b, 0xc9}, &(0x7f0000000240)=[{@local={0xac, 0x14, 0x0}, '\x00', './file0\x00', 0x2, 0x6, 0x6, 0x2, 0x8, 0x8}, {@broadcast, '\x00', './file0\x00', 0x6, 0x7e, 0x32, 0x2, 0xc, 0x1}, {@loopback, '\x00', './file0\x00', 0xe1e, 0xe93e, 0x4, 0x81, 0x0, 0x6, 0x3}, {@rand_addr=0x3, '\x00', './file0\x00', 0x2c3, 0x2, 0x2, 0xd9, 0x8, 0x6, 0x3}], 0x9f6, 0x4, 0xf, 0x10000, 0x8, 0x76, 0x10, 0xff}) sysctl$kern(&(0x7f0000000040)={0x1, 0x4f}, 0x3, &(0x7f0000000180)="3bf2ee74e747c82dad6eb2a36fa7feffffff5fe49afca7e63b52fa65ccaa74d6e6b85b6cdced70357ef201f97842b1068dca31553fa2d7031f38c03e56ad0e24dfc4f97b8b7f81499647e6e7725765d61436c85e43c15d12a78cb8c57ddde87021d7b685507fd3e0652f35e45bdaa3afd86c4fe557433ec25d330a4c2b632dcefd3eceefabee7e3ebe806fdb4f6af569ae94b5d127", &(0x7f0000000080)=0xff19, &(0x7f0000000340)="5a67923ef0cb189971421989ebcff78831a7581e2f27caa362f1363042efb27688b2c899220fb2fe37e467d974592496856ca7b78060998608c2f952e43bc0bf11555cc5cb0fe17b2ec1be389871829bfe10dd4c4d2c8f9da2bd2868fd86791dc09dc4fa89a217458bdaed31003fdc3a7323189ba3ccbad6c8af17516e4557f61ad20180000000000000125f568ca7d3396b9057255f381855110eb3a673713716cdf010ddfa7977f92cf061ad125ca670353b45d53aae196b00271f9d3452b523b3dea22d6027625614312183724b71c7eb02083a410c1c99fa455013521f98686e472b70b560f7021f567adf4d", 0xb31bc9ae5bacb483) 57.154548ms ago: executing program 1 (id=259): r0 = socket(0x13, 0x1, 0x0) ioctl$WSMUXIO_REMOVE_DEVICE(0xffffffffffffffff, 0x80085762, &(0x7f0000000040)={0x1}) openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x81, 0x0) openat$pf(0xffffffffffffff9c, &(0x7f0000000300), 0x8000, 0x0) openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket(0x2, 0x2, 0x0) r1 = socket(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x10, 0x2, 0x1, 0x200000e3}, 0x10) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6381) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x7, 0xffffffffffffffff, 0xfffffffffffffffd, 0x800, 0x181c, 0x20000a, 0x2}, 0x0, 0x0, 0x0) r2 = kqueue() kevent(r2, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x9, 0x0) r3 = open(&(0x7f0000000080)='./file0\x00', 0x10, 0x4d) ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file0\x00', 0xffffffa3, 0x9, 0xd, 0x1, 0x4, 0xd86, 0x40, 0x2, 0x1, 0x100002000643}) mknod(&(0x7f00000000c0)='./file1\x00', 0x2000, 0x637d) r4 = open(&(0x7f0000000800)='./file1\x00', 0x8, 0x0) ioctl$FIONBIO(r4, 0x82907003, &(0x7f0000000140)=0x1) ioctl$WSMOUSEIO_SCALIBCOORDS(r3, 0x81205724, &(0x7f0000000100)={0x4, 0x1, 0x9, 0xd4, 0x10, 0xffffffff, 0x9c, 0x10, [{0x5, 0xfffffffe, 0x0, 0x7ff}, {0x6, 0x3, 0xb9d4, 0x4}, {0x10000005, 0x7, 0x2, 0x2}, {0x0, 0x800, 0x2100000e, 0xffffff}, {0x20001, 0x200003, 0x9, 0x8}, {0x6, 0x8, 0x7fffffff, 0x800409c}, {0x6, 0x4, 0x86, 0xfffeffff}, {0x1f, 0x10000802, 0x10001, 0x8}, {0xa0, 0x81, 0x1, 0xf}, {0x9, 0xfffffff9, 0x1, 0x800000b}, {0x4, 0x5, 0x3}, {0x1, 0x41, 0x3, 0x67}, {0xe0, 0x2ef, 0x5}, {0x4, 0xfffffff7, 0x7ffe, 0x10000e}, {0x0, 0x6, 0xc, 0x1ffffffd}, {0x9, 0x2, 0x0, 0xc3}]}) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0x2000007, 0xfffffffffffffffd, 0x27ffffffffffffff, 0x181c, 0x5, 0x401}, 0x0, 0x0, 0x0) ioctl$FIONBIO(r3, 0x82907003, &(0x7f0000000140)=0x1) setsockopt$sock_int(r1, 0xffff, 0x1023, &(0x7f0000000040)=0x6, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) symlink(&(0x7f0000000000)='\x00', &(0x7f0000000040)='./file0\x00') openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1000, &(0x7f0000000180)=0x74b, 0x4) ioctl$FIONREAD(r0, 0x8020699d, &(0x7f00000001c0)) pread(r0, &(0x7f00000000c0)="f48a457754f2b04588551df28f385eae8b5dc9ab3cb9d8326b2808bd374eb8a1dc831b5bfad70ede8c9c31ec714116143c69fc1c21808d5571d855f3834eddb75d46dad898b051783e7dbb585613de5adb223f4f878b003cd691", 0x5a, 0x9) getsockopt(r0, 0x101, 0x4, &(0x7f0000000300)=""/197, &(0x7f00000002c0)=0xc5) sysctl$vm(&(0x7f0000000000)={0x2, 0x1}, 0x2, &(0x7f0000000080)="f5095ec9b003298b254559b70e92b6dc6678e390b36249fab934e3d4594a54184d1486c33a0494d0a667f73d6a0b88925a", &(0x7f00000001c0)=0x31, &(0x7f0000000140), 0x0) syz_emit_ethernet(0x3f, &(0x7f0000000140)={@remote, @random="b33e9d24238a", [], {@arp={0x806, @generic={0x18, 0x880b, 0x6, 0xd, 0x3, @empty, "7e398f05c38c5e8239b8e146a1", @broadcast, "8cd66238ffdc4e0eb1e00bc29ae923e1"}}}}) 54.994408ms ago: executing program 6 (id=260): r0 = syz_open_pts() ioctl$TIOCSTART(r0, 0x2000746e) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0xa42f2b93098250c2, 0x0) ioctl$DIOCGETRULE(r1, 0xcd604407, &(0x7f0000000040)={0xe72, 0x0, 0x4, './file0\x00', './file0\x00', 0x0, "28bb8d9cd878bf289b873f4dbfcfbbb449a28ae959ac7fad6b8dabf833ccb1191f269aa9648916f0eca3461415fbed52208d4cec64693355b2fedc484cff6d25ba170ab8cdca1ab8f45ae290542f50cb154b7ce72969a66eeb0dbe8c5e616fcd980f864a67b7dd0b65a88aa07bb22c0c31d6b1fec400bb70b21b40f5da8b48ef3e7cd4e31e9ef0b7197671d05986bdb15b4233b45154319d3e72e6142df57ad7b5917c27ab37a928cac3d32417cd44359fd40027dab1c3e33c172cdccc95d7e82ea065c789188b972dcceaad9a8159e927b4cb80b3bbac3d1b007feb0037299ad681f71a0266717a890d3a60e48bf99173cf8770dc32ba11b30517e4537ac6566a157729f36dda70335e9d124b2a08df884b844ad27a23db62201527321af24d14b52778ea8cfe839577d3eace7faa430380c2bb6d659891fcaf12856e7fcabdc986fdabaa730cc980017b5d585cbbe9397a3654fa2f27525114fe614fbfee26b5c0b2513f94f7c651a4e731f0bf836e37b3ad560695768644acba25a63502d1ac8c7442851e84fe86965beadb416571c521d47bff3ba77fac02cd09a01ea3cae335aac8824eeb18002fe7646b638bd26dc87bfad3dea430d4afdc1c25baa06481b3244fc2a28cf343e5b3ddd98f02ed8c6ccbc0577993a82fea94bdc3ccf446701bfb2412065128aa18494e48849174333966e0f9831d610ce02c18fe56fdb63b55364eceb79ed6f4206dec214242d565be24cbc50f1afa1e98ae74ff8b06d08f4b0ac394c5d6b1b61c2395ee7b0b697d7374439ff9ac5320c53610f370c6408b27139e6b9cee46990ea2cc5eee642833173bd0d8a47164a62530fcdf2af6e3a5c6170fccba58c2d99062be300a7337c83fa90bfebf416353fd9d1afea2d9a294d15d11df1d85632a8ac0cf209487235ef979d8abb97436fc62dea8ea49671f88cfd9a1461af49bd98e922238f1eab9165f1cd33228bcd725bfbb46c6db3024e2f312e3b1b0e909d85e5058cf52c7d13a32b1e8507e133f0e83db8e69217e4069614fe95f4831ac1ea0bbee43817e4f89a3cf4c7943a4909a912d7743c35c4606af611217a3ace724e00543e5438b9c8a3c7d1000919bdaee20fc3981f82a7175cb85aee350a748c6084648f559742e845accbd7e4102f2b1350723cc1716e2ea758d77a9107436615a261b9cec013a101298efd126ada24cb0f2f5472545cf3dab412e3eb315a5c244377b27e7097e2f2911ea8aef95bae3efb794d8235888edf0b89498fc42d7db27e76c99a8e6dc23568dca7777af82133d0f2e4eea5151aa5ca4244cb782f43878c03704a532a09abf24d4d16d6c45b0d8f0e2e126179f79c8b15c672aef0e7c0cf0ac06494968d88f49197928372db59284f78dd123735daf753707d47c9ad5696eb6d0ce9244623edd4f2506c7ddafeca95b0ce74b6184336c529b655ca4bf82f598dacf95ca0f82aa34f1bbd3809600fc2afe85a70d4faf8b40b38c84debfa1fed5c984e6b6dd418bdd2776f9d6335bc60a15e9a0e5497f7fdfc4d06aad0afb844fa85d8c491b515587fac67180178d72257199a33d8f466167a66ffca1c2b99d133889fbaa8d6276063e58ad333d70b837072eb799ca39eca6af60a04cd60784a510e48cd6fb6233578e4450639c1137dbdc60e9710436f5f96665be4890b50a6e1db3138568e52d7dc8bd1c291968759f61fa88d767b1cef08e293046d5129620ed555edfdf22d4af1ca98d420b1927ef4edfecde3935a12837ff8b61b77562a48b15f5826cd78720f07b0b79fdb31158ff37ed1b143ce0236919a2a16c420ee14cf7a161c1a1069e7b573c81637bc9bb730bf377bd22655be4dac5acdfe759cb7dc556e23f0198dbbec7cb93629b2f67f648c54f172d2bea2559231776ee4a098b943929"}) ioctl$TIOCCONS(r0, 0x80047462, &(0x7f0000000dc0)=0xffffffe3) r2 = openat$pf(0xffffffffffffff9c, &(0x7f0000000e00), 0x200, 0x0) ioctl$DIOCSTOP(r2, 0x20004402) ioctl$DIOCRGETTABLES(r2, 0xc450443f, &(0x7f0000001f00)={{'./file0\x00', './file0\x00', 0x20, 0xd}, &(0x7f0000000e40)=[{'./file0\x00', './file0\x00', 0x0, 0x6}, {'./file0\x00', './file0\x00', 0x11, 0x61}, {'./file0\x00', './file0\x00'}, {'./file0\x00', './file0\x00', 0x5c, 0x8}], 0x3ff, 0x4, 0x1, 0x36, 0x479453e2, 0x6, 0x8, 0x1}) ioctl$DIOCRADDTABLES(r1, 0xc450443d, &(0x7f00000027c0)={{'./file0\x00', './file0/file0\x00', 0x40, 0x9}, &(0x7f0000002380)=[{'./file0\x00', './file0\x00', 0x0, 0x7}], 0x8e4, 0x1, 0x7ff, 0xff, 0x4, 0x9, 0x18, 0x7ff}) ioctl$DIOCRDELTABLES(r2, 0xc450443e, &(0x7f00000051c0)={{'./file0\x00', './file0/file0\x00', 0x3c, 0x40}, &(0x7f0000002c40)=[{'./file0/file0\x00', './file1\x00', 0x2, 0x23}, {'./file0\x00', './file0/file0\x00', 0x4, 0x81}, {'./file0\x00', './file0\x00', 0x5c, 0x1}, {'./file1\x00', './file0/file0\x00', 0x4, 0x7}, {'./file0/file0\x00', './file0\x00', 0x2a, 0x3}, {'./file0\x00', './file0/file0\x00', 0x16, 0xa}, {'./file0/file0\x00', './file0/file0\x00', 0x4d, 0x8}, {'./file0/file0\x00', './file0\x00', 0x6}, {'./file0/file0\x00', './file0/file0\x00', 0x0, 0x32}], 0x3, 0x9, 0x2, 0x2, 0x10, 0x8, 0x0, 0x1}) ioctl$DIOCRTSTADDRS(r2, 0xc4504449, &(0x7f0000005680)={{'./file1\x00', './file0\x00', 0x8, 0x80}, &(0x7f0000005640)=[{@broadcast, '\x00', './file0/file0\x00', 0x2, 0x4, 0x0, 0x10, 0x81, 0xf5, 0x2}], 0x6, 0x1, 0xcf00, 0xab87e226, 0x1, 0x1000, 0x28, 0x7ff}) r3 = socket(0x1, 0x8000, 0x6) ioctl$TIOCSETAW(r0, 0x802c7415, &(0x7f0000005b00)={0x36000, 0x100, 0x7, 0xaf1, "6bce7999c016635876dbaa6b02d07401c2d05a5f", 0x4, 0x4035f1d6}) openat$wsmouse(0xffffffffffffff9c, &(0x7f0000005b40), 0x2, 0x0) ioctl$TIOCOUTQ(r0, 0x40047473, &(0x7f0000005b80)) r4 = openat$pf(0xffffffffffffff9c, &(0x7f0000005bc0), 0x400, 0x0) ioctl$DIOCGETQUEUE(r4, 0xc148445f, &(0x7f0000005c00)={0x3, 0x8, {'\x00', './file1\x00', './file1\x00', './file0/file0\x00', {{0x5, 0x2}, {0x7ff, 0x3ff}, 0xe}, {{0x1ff, 0x3c000000}, {0xab5, 0x4}, 0x2}, {{0x10, 0x2}, {0x9, 0x9}, 0x3}, {0x9, 0x0, 0x0, 0x4}, 0x0, 0x7, 0x2, 0xd, 0x3}}) r5 = openat$vnd(0xffffffffffffff9c, &(0x7f0000005d80), 0x0, 0x0) ioctl$VNDIOCCLR(r5, 0x80384601, &(0x7f0000005e40)={&(0x7f0000005dc0)='./file1\x00', 0x1, &(0x7f0000005e00)='./file1\x00', 0x8}) r6 = openat$pf(0xffffffffffffff9c, &(0x7f0000005e80), 0x400, 0x0) ioctl$DIOCRCLRASTATS(r6, 0xc4504448, &(0x7f0000006000)={{'./file0/file0\x00', './file1\x00', 0x22, 0x6}, &(0x7f0000005ec0)=[{@loopback, '\x00', './file0/file0\x00', 0x5, 0x4, 0x18, 0x2, 0x40, 0xba, 0xa}, {@loopback, '\x00', './file0\x00', 0x2, 0x8001, 0x2, 0x3, 0x5, 0x3, 0x29}, {@loopback, '\x00', './file0/file0\x00', 0x6, 0x9, 0x0, 0x0, 0x40, 0x0, 0x9}, {@remote={0xac, 0x14, 0x0}, '\x00', './file0/file0\x00', 0x1, 0x200, 0x2, 0x6d, 0x3, 0x9, 0x10}, {@multicast1, '\x00', './file0\x00', 0x6, 0x39e2, 0x1a, 0x4, 0x0, 0xb, 0x10}], 0x7f, 0x5, 0x6f4, 0x3, 0x45, 0x10, 0x44, 0x8}) r7 = shmget(0x1, 0x3000, 0x735, &(0x7f0000ffd000/0x3000)=nil) shmctl$IPC_RMID(r7, 0x0) ioctl$DIOCSETTIMEOUT(r1, 0xc008441d, &(0x7f0000006480)={0x7, 0x40}) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) sendto$inet6(r3, &(0x7f00000064c0)="eecf62d5baa96a1e50b8ac304830cdf2c69257e88dd313c9cc31203f80def26d040cd4a84998082610bfbd0e52a8b635be4a2b57912a770baf5dbf98cf5d91b9aea506feef8dcd67ed2bee9e1807", 0x4e, 0xa, &(0x7f0000006540)={0x1c, 0x18, 0x1, 0x6, "9be2f859ce66885b0c362f65118612dd", 0x5}, 0x1c) r8 = socket$inet6(0x18, 0x4000, 0x1) futimes(r8, &(0x7f0000006580)=[{0x2, 0x7}, {0x654, 0x5}]) ioctl$DIOCSETHOSTID(r2, 0xc0044456, &(0x7f00000065c0)=0x5) ioctl$DIOCRGETTSTATS(r6, 0xc4504440, &(0x7f0000006a40)={{'./file0\x00', './file0\x00', 0x8, 0x7}, &(0x7f0000006600)=[{'./file0/file0\x00', './file0/file0\x00', 0x23, 0x7}], 0x6, 0x1, 0x3, 0xe48, 0xec5, 0x14, 0x54, 0x200}) 54.445054ms ago: executing program 4 (id=261): sysctl$net_inet_tcp(&(0x7f0000000080)={0x4, 0x2, 0x6, 0x13}, 0x4, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6(0x18, 0x2, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1000, &(0x7f0000000140)=0x5, 0x4) readv(0xffffffffffffffff, &(0x7f0000000a40)=[{0x0}], 0x1) bind$inet6(r0, &(0x7f0000000040)={0x1c, 0x18, 0x1, 0x4, "00000000010000000600", 0x62a4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x18, 0x0, 0x9, "000000000060bb4fce2fa0cf1a00", 0xd5}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x1c, 0x18, 0x1, 0x38, "00000000000100000010000000f700", 0x8000}, 0x1c) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) chroot(&(0x7f00000002c0)='./file0/file0\x00') r1 = socket(0x2, 0x8002, 0x0) r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) closefrom(r2) open(&(0x7f0000000000)='./file0\x00', 0x8, 0x9bf2d3725864749b) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xa944404f9f6813a9) sendmsg$unix(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="28000000ffff000001"], 0x28}, 0x0) kqueue() recvmsg(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/51, 0x33}, 0x0) r5 = socket$inet(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) bind$inet(r5, &(0x7f0000000000)={0x10, 0x2, 0x3}, 0x10) sendmsg(r5, &(0x7f0000001900)={&(0x7f0000000080)=@un=@abs={0x57, 0x1, 0x0, 0x0}, 0x8, &(0x7f0000001640)=[{&(0x7f00000003c0)="b21cfa2c870b1384fc2d2fd79ac38914d177ba9724bce8067dfe05fb59fc47493d09007ba0a51571fac6bbb9b3dc55393a19460f39c33facbee2b6d46bf912629efb94625b5682d12d73236934665ad500470f51802de93b46498e11701de5f5412374cedd9c49070ff3cb9cdd32011982f70ce4d4c198cc26b593c1a10d7f8d668d251ef195d20187d8558bcb7b892c3859c89d2dec69dddf0572de05393e696fee9d2be834b5d5f2484d2ebe2b12e098fb40cf00de13dc3dacce3fe4040ec6860d4b0a3e3684cc3444f752cd844948f2b86c262d43261a322081d41d80b60103e5a800c4a2fcd94f", 0xe9}, {&(0x7f00000004c0)="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", 0xfb}, {&(0x7f00000005c0)}, {&(0x7f0000000600)="01565c9b1b41457aa4df0db0520484a9efbe73e49c6a20d3", 0x18}, {&(0x7f0000000640)="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", 0x1000}], 0x5, &(0x7f00000016c0)=[{0x24, 0x1, 0x8001, "7de1b6a53e77dfee0551237eed8bc640f6892e6357720c"}, {0xf0, 0xffff, 0xcc, "12650ab5a775f323313267bbd25d45231fe4b0bc86bd77a5d697f03cc236165cd08a2216dddff29672474a1be53fc49bdaef3fb53e1e584d18576574a70c813624eb425b75f5b50251d0764fdc089779b273b3365ed09fbf6228a1e7815ccdfa66013371bf29220f6a8b7837bc28e4c679ef8f43ec1c062d8ae29d4116175b57efc06b894ce71a5c1ea7911b0fe4e4ab6041f7f02c41a303a9192a0a14b50591c5dc497c25c9a2fe3525a6829b7f95fadd3bdb2d1083b83b681d5129be8bd0008348be51abb1dfe69fc77c8c8ddaf5e0f45aca3f43f9c208e9bc50c1991ef715ce"}, {0x100, 0xffff, 0x3, "d9d8212fee8cc03247a4e84191d4484df4ef390450a9f05fd9e668085e514ce578386e9b36dce8b1743170a0cdaa50c25d30474ced4c350e4a0f4baf1d1bd5c0cf8321c01bf077045f91e9c27851ee83eed108ca42b7f0f1056952e4e3928c8374942e04168a3ccb97e4ee664675aa99ad88ad50f62656f676a4e9e3c4f4c60451e4af6711776c9dcde5b5e98878615944ed22e8a53a28b6068be8e13f257071e987431a6396a7c30bc4a6170cc80ece9ef7103b953cbcf21471691984db0b84190f26c063d71bef9cc42595cb91a55d0eb77416899a1ac057a1f4cc70deab9dec64f8ad42cbec2d41c7338dfc6562f3c230"}], 0x214}, 0x0) listen(r5, 0x7fff) syz_emit_ethernet(0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaaa656500000008004578e0000002ac1400aa4e234e2300"/38, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="500282009078fffc"]) r6 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$WSKBDIO_GETDEFAULTBELL(r6, 0x40105706, &(0x7f0000000040)) syz_emit_ethernet(0xcd, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaa2033edc3ec85e8fa36eeaaaa02120000ff0800451000bf00660005fd069078000000007f0000014e214e22000890780754fcb1b0f12d7411625e2c2f8d09c4abe1a12b6ce77e5c6c5eca41081c2178d972249e5bab5497960e1e5128889d7a58541b5bc01ddc23e7f716617087b996c5fbbc74b62eca774d3e35e40f7152c0e7216a6d7136771ed5071401079af49d65de1aa8eb987b839833f5d4db5300510b7d2501cbe619e9019d97437ae0fda8f306cde6faf5b638762cccfc634ef9c97eb9ab7c520132241592f52ead38869e2f63f94aa92074a6d5bd0ffb6aacab1f9a452b4c8babb364ed2dd58378ef00734c0b9029f9ce8f493c9c6ff750f45b5dd255d9d329df18c814a5f34a04949e8a669a059155149460b125218243d4710f35b0166636b0806121ab3533f0076e677072e51ba66448e53f422ef672fed19d157517860f520121401fba165676f9acde263cd7fadc026c0257755bfda65c4a96581095ef194278e6e4f10210d812b1e852bcbcdab16f8137909d6adc6100000000000000003d0459498ff9cb15190b9ab72424275969cc79b38db3c815b3a82ec676ac278fa7b83a95bd32e47a72c590e30ad936dcbfc0903232172ee3876593f5ea098debfbc0f7ad8787490da679bd451e6fc60095a8eefde15d70d7385344e4d6a599175c9c79df3c10d702f22fae919e32c2155462c1da0a87b8acef1f8d355bf9aa5afb"]) 52.840716ms ago: executing program 7 (id=262): r0 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000240), 0x200, 0x0) (async) pipe2(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) ioctl$DIOCMAP(r0, 0xc0106477, &(0x7f00000006c0)={&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r1, 0x2}) (async) r2 = socket$inet(0x2, 0x2, 0x0) shutdown(r2, 0x0) (async) recvmmsg(r2, &(0x7f0000002240)={{0x0, 0x0, &(0x7f0000002140)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0}, 0x5}, 0x38, 0x2000, &(0x7f0000002280)={0x6, 0x1}) 24.058013ms ago: executing program 5 (id=263): ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0xfffffffffffffffd, [{&(0x7f00000c7000/0x3000)=nil, &(0x7f0000ff6000/0x6000)=nil, 0x1}, {&(0x7f00004d7000/0x2000)=nil, &(0x7f0000698000/0x1000)=nil, 0x4}, {&(0x7f00005fd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0xf}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x80}, {&(0x7f0000fff000/0x1000)=nil, &(0x7f00005dd000/0x3000)=nil, 0x8}, {&(0x7f0000ff3000/0x1000)=nil, &(0x7f000068e000/0x12000)=nil, 0x2000000000000000}, {&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff2000/0x2000)=nil, 0x40000000000007}, {&(0x7f0000636000/0x2000)=nil, &(0x7f0000696000/0x2000)=nil, 0xffffffffffffffff}, {&(0x7f0000696000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x7}, {&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x8}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000695000/0x1000)=nil, 0xffffffff}, {&(0x7f00007f8000/0x2000)=nil, &(0x7f0000371000/0x1000)=nil, 0xf}, {&(0x7f00000c6000/0x2000)=nil, &(0x7f0000668000/0x4000)=nil}, {&(0x7f0000693000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x4}, {&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffa000/0x6000)=nil}, {&(0x7f0000ff1000/0x1000)=nil, &(0x7f0000abf000/0x3000)=nil, 0x1ff}], './file0\x00', 0x8, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1ff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x44, 0x0, 0x0, 0x2, 0x94fd, 0xffffb6e0, 0x0, 0x0, 0x0, 0xb27d, 0x0, 0x2, 0x7, 0x0, 0x0, 0x20000, 0x7, 0x1, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0xae9, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xb, 0xfffffffd, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0xfffffffe, 0xffffff49, 0x9, 0x8000009, 0xfffffffb, 0x0, 0x6, 0xffc, 0x0, 0x4, 0x0, 0x5, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x100, 0x200, 0x3, 0x0, 0x3, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7, 0x3, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0xfffffffe, 0x0, 0x0, 0xfffffffd, 0x0, 0xfffffffc, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0xfffff001, 0x80, 0x0, 0x0, 0x1000000, 0x0, 0x2, 0x0, 0x0, 0x70000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x3d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x5, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x7, 0xfffff800, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x2, 0xffffffff, 0x400000, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0xffffffff, 0x1, 0x2000000, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0xfdf7fffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0xfffffffc, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffc, 0x0, 0x0, 0x6, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x4000000, 0x1, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x644f, 0x0, 0x8, 0x7a1, 0x6, 0x0, 0x80000000, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0xfffffffd, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffc, 0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x2, 0x0, 0x3, 0x0, 0x0, 0x5, 0x800, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xfffffffe, 0x0, 0x100, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0xaa6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x5, 0x0, 0x7, 0x4, 0x4, 0x0, 0x200, 0x0, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0xffffffff, 0x398, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x2, 0x0, 0x0, 0x403, 0x0, 0x5]}) r0 = kqueue() kevent(r0, &(0x7f0000000000), 0x96, &(0x7f0000000540), 0xfffa4961, 0x0) ioctl$FIONBIO(r0, 0x8004667e, &(0x7f0000000000)=0x2) r1 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x7e, 0x0) ioctl$TIOCSETA(r1, 0xcd60441a, &(0x7f0000000080)={0x1, 0x2, 0x7, 0x2f, "2000030100010000000000000068a95a010400", 0x6, 0x2}) chmod(&(0x7f0000000040)='.\x00', 0x35e) setuid(0xee01) mkdir(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xf4) unveil(&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000007c0)='c\x00') unveil(&(0x7f0000000ac0)='./file0\x00', &(0x7f0000000b00)='c\x00') 2.668505ms ago: executing program 7 (id=264): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000980), 0x800, 0x0) ioctl$BIOCLOCK(r0, 0x20004276) ioctl$BIOCGBLEN(r0, 0x40044266, &(0x7f00000000c0)) mknod(&(0x7f0000000180)='./file0\x00', 0x2000, 0x40004800) r1 = socket(0x18, 0x3, 0x0) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x9, 0xfffffffb, 0x3, 0x101, 0x5, 0x1, 0x3, 0x10, [{0x5, 0xfe3, 0xffff7f26, 0x71800}, {0xfffffffd, 0x1ff7b8b6, 0x800002, 0xa}, {0x100806, 0x0, 0x4, 0x2}, {0x2, 0x0, 0x200, 0x94}, {0x4, 0x4, 0x80000000, 0x7}, {0x2, 0x47fff, 0x1400000a, 0xc}, {0x5, 0xbffffff5, 0x7, 0x6d}, {0x2000a, 0x8, 0x10fdf0, 0x9}, {0x4000000, 0x7, 0x34, 0xa}, {0xfffffc04, 0x3, 0x8003, 0x1}, {0xa44f, 0xfff9, 0xa38c000, 0x80000001}, {0x80000c9, 0x8, 0xc, 0x8}, {0x2000df, 0x9, 0x15}, {0x10008, 0xe2, 0xfffffff5, 0x2}, {0x5, 0x5, 0x24, 0x4}, {0x4, 0xd655, 0x3, 0x6}]}) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) r2 = socket(0x18, 0x3, 0x0) ioctl$FIONREAD(r2, 0xc0106924, &(0x7f00000001c0)) ioctl$FIONREAD(r1, 0x8080691a, &(0x7f0000000100)) open$dir(&(0x7f0000000000)='./file0\x00', 0x80, 0xc) 0s ago: executing program 7 (id=265): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x20, 0x0) chmod(&(0x7f0000000040)='.\x00', 0x35e) setuid(0xffffffffffffffff) mkdir(&(0x7f0000000040)='./file2\x00', 0xc1) (async) syz_emit_ethernet(0x46, &(0x7f0000000080)=ANY=[@ANYBLOB="815302cbefc400000000000086dd600000000010000000000000000000000000000000000000040000000000000000000000000000aa33000000000000004e204e2000089078"]) (async) mkdir(&(0x7f0000000300)='./file2/file0\x00', 0xc2) (async) rename(&(0x7f0000000140)='./file2/file0\x00', &(0x7f0000000100)='./file2\x00') (async) utimes(0x0, 0xfffffffffffffffe) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$BIOCLOCK(r0, 0x20004276) (async) ioctl$BIOCLOCK(r0, 0x20004276) (async) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) ioctl$BIOCSETIF(r1, 0x80086476, &(0x7f0000000400)={'tap', 0x0}) (async) ioctl$BIOCGDIRFILT(r1, 0x4004427c, &(0x7f0000000180)) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.198' (ED25519) to the list of known hosts. pckbd_enable: command error pckbd_enable: command error Stopped at db_enter+0x25: addq $0x8,%rsp ddb{1}> ddb{1}> set $lines = 0 ddb{1}> set $maxwidth = 0 ddb{1}> show panic the kernel did not panic ddb{1}> show kasan No such command ddb{1}> trace db_enter() at db_enter+0x25 witness_checkorder(fffff38068eb7568,9,0) at witness_checkorder+0x10d1 rw_do_enter_write(fffff38068eb7550,1) at rw_do_enter_write+0xba rrw_enter(fffff38068eb7550,1) at rrw_enter+0xc6 VOP_LOCK(fffff3805f746490,2001) at VOP_LOCK+0xbd vn_lock(fffff3805f746490,2001) at vn_lock+0xa4 vfs_getcwd_common(fffff3805f746490,fffff3805f746208,0,0,200,0,b201cad1c4717801) at vfs_getcwd_common+0xd1 vn_isunder(fffff3805f746490,fffff3805f746208,ffff800039bb9ca8) at vn_isunder+0x56 unp_externalize(fffff3806f8cd300,33,0) at unp_externalize+0x26f soreceive(ffff80000163fa90,ffff80003539dbb8,ffff80003539db68,0,ffff80003539dba0,ffff80003539dd2c,4e6a9ebc35c1ae0f) at soreceive+0xc24 recvit(ffff800039bb9ca8,1,ffff80003539dd00,0,ffff80003539ddb0) at recvit+0x40b sys_recvmsg(ffff800039bb9ca8,ffff80003539de60,ffff80003539ddb0) at sys_recvmsg+0x1bf syscall(ffff80003539de60) at syscall+0xbd4 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x73f7fa4dd70, count: -14 ddb{1}> show registers rdi 0 rsi 0x80000 acpi_pdirpa+0x6be71 rbp 0xffff80003539d640 rbx 0 rdx 0xffff8000015d4d40 rcx 0xffff800039bb9ca8 rax 0x7ffff acpi_pdirpa+0x6be70 r8 0xffff80003539d520 r9 0x8080808080808080 r10 0xa5d567183b13a8fa r11 0xcf6d7628a4fe70a4 r12 0xfffff380040ca940 r13 0xfffff380048b2790 r14 0x3 r15 0xffffffff83523958 substchar+0x4bdf rip 0xffffffff82bc4405 db_enter+0x25 cs 0x8 rflags 0x246 rsp 0xffff80003539d630 ss 0x10 db_enter+0x25: addq $0x8,%rsp ddb{1}> show proc PROC (syz-executor) tid=489156 pid=49500 tcnt=2 stat=onproc flags process=1000000 proc=4000000 runpri=32, usrpri=50, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff800039bb82b8,0xffff800036ba8568 process=0xffff80002a37dcf8 user=0xffff800035398000, vmspace=0xfffff3806cd1a3f0 estcpu=36, cpticks=0, pctcpu=0.0, user=0, sys=0, intr=0 ddb{1}> ps PID TID PPID UID S PRLAGS PFLAGS WAIT COMMAND 23941 2996 82524 0 7 0 0 syz-executor 49500 354950 71191 0 2 0x1000000 0 syz-executor *49500 489156 71191 0 7 0x1000000 0x4000000 syz-executor 30361 194613 91910 0 2 0 0 syz-executor 30361 19312 91910 0 2 0 0x4000000 syz-executor 21532 466454 42188 0 3 0x1000 0x4080000 biowait syz-executor 21532 355401 42188 0 3 0x1000 0x4002000 suspend syz-executor 57265 474776 94047 0 3 0 0x80 nanoslp syz-executor 57265 134208 94047 0 3 0 0x4000080 lockf syz-executor 57265 372492 94047 0 3 0 0x4000080 fsleep syz-executor 82524 86110 53009 0 3 0x2 0x80 nanoslp syz-executor 91910 245457 53009 0 3 0x2 0x80 nanoslp syz-executor 77615 247471 53009 0 3 0x2 0 biowait syz-executor 71191 16168 53009 0 3 0x2 0x80 nanoslp syz-executor 99173 119609 53009 0 3 0x2 0 biowait syz-executor 42188 127407 53009 0 3 0x2 0x80 nanoslp syz-executor 25370 56515 53009 0 3 0x2 0x80 nanoslp syz-executor 94047 147325 53009 0 3 0x2 0x80 nanoslp syz-executor 53009 231652 25319 0 3 0x2 0x80 kqread syz-executor 25319 458087 55682 0 3 0x100002 0x88 sigsusp ksh 55682 123269 79707 0 3 0x10 0x88 kqread sshd-session 79707 171205 24241 0 3 0x12 0x80 kqread sshd-session 67888 84255 1 0 3 0x100003 0x80 ttyin getty 24241 66393 1 0 3 0 0x88 kqread sshd 2543 70906 91038 74 3 0x1100012 0x80 bpf pflogd 91038 198721 1 0 3 0 0x80 sbwait pflogd 12447 207866 63734 73 3 0x1100010 0x80 kqread syslogd 63734 141428 1 0 3 0x100002 0x80 sbwait syslogd 78171 422428 1 0 3 0x100000 0x80 kqread resolvd 44148 199237 93850 77 3 0x100012 0x80 kqread dhcpleased 23910 160983 93850 77 3 0x100012 0x80 kqread dhcpleased 93850 432403 1 0 3 0 0x80 kqread dhcpleased 39884 363556 0 0 3 0x14000 0x200 bored smr 37115 345345 0 0 2 0x14000 0x200 zerothread 3628 80373 0 0 3 0x14000 0x200 aiodoned aiodoned 88293 242272 0 0 3 0x14000 0x200 syncer update 33942 234203 0 0 3 0x14000 0x200 cleaner cleaner 70158 11563 0 0 3 0x14000 0x200 reaper reaper 31852 35529 0 0 3 0x14000 0x200 pgdaemon pagedaemon 52486 523635 0 0 3 0x14000 0x200 bored viomb 43595 252992 0 0 3 0x14000 0x40000200 acpi0 acpi0 94077 424085 0 0 3 0x14000 0x40000200 idle1 71998 241728 0 0 3 0x14000 0x200 bored softnet1 89840 120684 0 0 2 0x14000 0x200 softnet0 50321 419156 0 0 3 0x14000 0x200 bored systqmp 37751 518878 0 0 3 0x14000 0x200 bored systq 18248 170040 0 0 3 0x14000 0x200 tmoslp softclockmp 78831 485939 0 0 3 0x14000 0x40000200 tmoslp softclock 88823 75462 0 0 3 0x14000 0x40000200 idle0 1 339721 0 0 3 0x2 0x80 wait init 0 0 -1 0 3 0x10000 0x200 scheduler swapper ddb{1}> show all locks Process 23941 (syz-executor) thread 0xffff800036ba8558 (2996) shared rwlock uobjlk r = 0 (0xfffff38070d84368) #0 witness_lock+0x5f1 #1 rw_do_enter_read+0x3e8 #2 uvm_fault_lower_lookup+0x53 #3 uvm_fault_lower+0x89 #4 uvm_fault+0x274 #5 upageflttrap+0xa9 #6 usertrap+0x430 #7 recall_trap+0x8 shared rwlock vmmaplk r = 0 (0xfffff3806cd1ac90) #0 witness_lock+0x5f1 #1 rw_do_enter_read+0x3e8 #2 uvmfault_lookup+0x122 #3 uvm_fault_check+0x4f #4 uvm_fault+0x106 #5 upageflttrap+0xa9 #6 usertrap+0x430 #7 recall_trap+0x8 Process 49500 (syz-executor) thread 0xffff800039bb9ca8 (489156) exclusive kernel_lock &kernel_lock r = 0 (0xffffffff83b37c80) #0 witness_lock+0x5f1 #1 unp_externalize+0x155 #2 soreceive+0xc24 #3 recvit+0x40b #4 sys_recvmsg+0x1bf #5 syscall+0xbd4 #6 Xsyscall+0x128 exclusive rwlock sbufrcv r = 0 (0xffff80000163fb80) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 sblock+0xb6 #3 soreceive+0x27d #4 recvit+0x40b #5 sys_recvmsg+0x1bf #6 syscall+0xbd4 #7 Xsyscall+0x128 Process 21532 (syz-executor) thread 0xffff800039bb8020 (466454) exclusive rrwlock inode r = 0 (0xfffff3807185d920) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 rrw_enter+0xc6 #3 VOP_LOCK+0xbd #4 vn_lock+0xa4 #5 vn_write+0x18f #6 dofilewritev+0x2bd #7 sys_write+0xa2 #8 syscall+0xbd4 #9 Xsyscall+0x128 Process 77615 (syz-executor) thread 0xffff800045fef4d8 (247471) exclusive rrwlock inode r = 0 (0xfffff3806ed9fdd0) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 rrw_enter+0xc6 #3 VOP_LOCK+0xbd #4 vn_lock+0xa4 #5 vget+0x2a2 #6 ufs_ihashget+0x185 #7 ffs_vget+0x8c #8 ufs_lookup+0x1a36 #9 VOP_LOOKUP+0x6e #10 vfs_lookup+0x963 #11 namei+0x7c5 #12 dounlinkat+0xc1 #13 syscall+0xb17 #14 Xsyscall+0x128 exclusive rrwlock inode r = 0 (0xfffff38068eb78e0) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 rrw_enter+0xc6 #3 VOP_LOCK+0xbd #4 vn_lock+0xa4 #5 vget+0x2a2 #6 cache_lookup+0x351 #7 ufs_lookup+0x1e3 #8 VOP_LOOKUP+0x6e #9 vfs_lookup+0x963 #10 namei+0x7c5 #11 dounlinkat+0xc1 #12 syscall+0xb17 #13 Xsyscall+0x128 Process 99173 (syz-executor) thread 0xffff80002a2222a8 (119609) exclusive rrwlock inode r = 0 (0xfffff3806d0f6438) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 rrw_enter+0xc6 #3 VOP_LOCK+0xbd #4 vn_lock+0xa4 #5 vget+0x2a2 #6 ufs_ihashget+0x185 #7 ffs_vget+0x8c #8 ufs_lookup+0x1a36 #9 VOP_LOOKUP+0x6e #10 vfs_lookup+0x963 #11 namei+0x7c5 #12 dounlinkat+0xc1 #13 syscall+0xb17 #14 Xsyscall+0x128 exclusive rrwlock inode r = 0 (0xfffff3806d65c7a8) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 rrw_enter+0xc6 #3 VOP_LOCK+0xbd #4 vn_lock+0xa4 #5 vfs_lookup+0x12b #6 namei+0x7c5 #7 dounlinkat+0xc1 #8 syscall+0xb17 #9 Xsyscall+0x128 ddb{1}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 11068 12091K 12348K 166960K 12605 0 pcb 17 12K 12K 166960K 82 0 rtable 227 8K 8K 166960K 375 0 pf 37 18K 24K 166960K 109 0 ifaddr 40 6K 7K 166960K 60 0 ifgroup 53 2K 2K 166960K 82 0 sysctl 1 1K 9K 166960K 5 0 counters 72 37K 37K 166960K 112 0 ioctlops 0 0K 4K 166960K 1544 0 iov 0 0K 24K 166960K 7 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1360 86K 86K 166960K 1621 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 5K 166960K 7 0 VM map 2 1K 1K 166960K 2 0 sem 12 0K 0K 166960K 22 0 dirhash 12 2K 2K 166960K 18 0 ACPI 1734 201K 291K 166960K 11964 0 file desc 16 57K 97K 166960K 395 0 sigio 0 0K 0K 166960K 2 0 proc 72 115K 164K 166960K 601 0 subproc 72 4K 4K 166960K 72 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 33 0 in_multi 88 6K 7K 166960K 114 0 ether_multi 1 0K 0K 166960K 4 0 mrt 0 0K 0K 166960K 11 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 79 360K 360K 166960K 79 0 exec 0 0K 1K 166960K 505 0 fusefs mount 1 32K 32K 166960K 1 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 215 158K 173K 166960K 5337 0 UVM aobj 11 2K 2K 166960K 11 0 pinsyscall 41 82K 107K 166960K 1551 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 0K 166960K 16 0 NDP 12 0K 2K 166960K 40 0 temp 42 9119K 9153K 166960K 10994 0 kqueue 13 20K 31K 166960K 69 0 SYN cache 2 16K 16K 166960K 2 0 ddb{1}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 28 0 0 1 0 1 1 0 8 0 rtpcb 120 107 0 104 3 0 3 3 0 8 2 rtentry 176 116 0 15 6 0 6 6 0 8 0 unpcb 144 189 0 170 2 0 2 2 0 8 1 syncache 336 8 0 8 1 0 1 1 0 8 1 tcpcb 736 90 0 85 4 0 4 4 0 8 3 arp 136 18 0 2 1 0 1 1 0 8 0 inpcb 328 447 0 438 7 0 7 7 0 8 5 nd6 152 27 0 4 1 0 1 1 0 8 0 pkpcb 40 2 0 2 1 0 1 1 0 8 1 kcovpl 48 8 0 0 1 0 1 1 0 8 0 ppxss 1192 20 0 18 1 0 1 1 0 8 0 pppxif 1576 1 0 1 1 1 0 1 0 8 0 pfstscr 40 4 0 0 1 0 1 1 0 8 0 pffrag 232 6 0 2 1 0 1 1 0 482 0 pffrnode 88 6 0 2 1 0 1 1 0 8 0 pffrent 40 9 0 4 1 0 1 1 0 8 0 pfosfp 40 1428 0 1005 5 0 5 5 0 8 0 pfosfpen 112 1428 0 714 21 0 21 21 0 8 0 pfsrclim 320 2 0 2 1 0 1 1 0 8 1 pfanchor 1288 5 0 2 1 0 1 1 0 8 0 pftag 88 1 0 0 1 0 1 1 0 8 0 pfstitem 24 42 0 1 1 0 1 1 0 8 0 pfstkey 128 42 0 1 2 0 2 2 0 8 0 pfstate 448 40 0 1 5 0 5 5 0 8 0 pfrule 1360 27 0 22 2 1 1 2 0 8 0 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 478 0 57 30 1 29 30 0 8 1 art_table 40 479 0 57 5 0 5 5 0 8 0 art_node 32 116 0 24 1 0 1 1 0 8 0 sysvmsgpl 40 4 0 3 1 0 1 1 0 8 0 semapl 72 18 0 8 1 0 1 1 0 8 0 shmpl 112 8 0 0 1 0 1 1 0 8 0 dirhash 1024 21 0 4 3 0 3 3 0 8 0 dino2pl 256 2048 0 577 93 0 93 93 0 8 0 ffsino 296 2048 0 577 114 0 114 114 0 8 0 nchpl 144 2620 0 914 64 0 64 64 0 8 0 rtmask 32 6 0 5 1 0 1 1 0 8 0 vnodes 216 2319 0 0 129 0 129 129 0 8 0 namei 1024 8295 0 8295 1 0 1 1 0 8 1 percpumem 16 72 0 20 1 0 1 1 0 8 0 kstatmem 264 51 0 24 3 0 3 3 0 8 1 scxspl 216 10295 0 10292 10 2 8 8 1 8 7 plimitpl 152 64 0 46 1 0 1 1 0 8 0 sigapl 424 712 0 666 7 1 6 7 0 8 0 knotepl 120 736 0 0 23 0 23 23 0 8 0 kqueuepl 224 157 0 147 5 0 5 5 0 8 4 pipepl 344 146 0 119 3 0 3 3 0 8 0 fdescpl 528 696 0 666 3 0 3 3 0 8 0 filepl 160 3353 0 3132 15 0 15 15 0 8 5 lockfpl 104 155 0 150 1 0 1 1 0 8 0 lockfspl 48 67 0 64 1 0 1 1 0 8 0 sessionpl 144 44 0 35 1 0 1 1 0 8 0 pgrppl 48 55 0 38 1 0 1 1 0 8 0 ucredpl 104 383 0 370 1 0 1 1 0 8 0 zombiepl 144 667 0 666 1 0 1 1 0 8 0 processpl 1232 712 0 666 5 1 4 5 0 8 0 procpl 664 1155 0 1103 6 0 6 6 0 8 0 sockpl 752 760 0 729 16 0 16 16 0 8 12 mcl64k 65536 4 0 0 1 0 1 1 0 8 0 mcl16k 16384 2 0 0 1 0 1 1 0 8 0 mcl12k 12288 2 0 0 1 0 1 1 0 8 0 mcl9k128 9344 1 0 0 1 0 1 1 0 8 0 mcl8k 8192 4 0 0 1 0 1 1 0 8 0 mcl4k 4096 112 0 0 14 0 14 14 0 8 0 mcl2k2 2112 1 0 0 1 0 1 1 0 8 0 mcl2k 2048 21 0 0 3 0 3 3 0 8 0 mextrefs 64 18 0 0 1 0 1 1 0 8 0 mtagpl 96 4 0 0 1 0 1 1 0 8 0 mbufpl 256 220 0 0 14 0 14 14 0 8 0 bufpl 272 4086 0 106 266 0 266 266 0 8 0 anonpl 32 7580 0 0 62 0 62 62 0 247 0 amapchunkpl 152 16160 0 15741 29 0 29 29 0 158 9 amappl16 200 1898 0 1838 17 6 11 15 0 8 7 amappl15 192 12 0 12 1 1 0 1 0 8 0 amappl14 184 431 0 430 1 0 1 1 0 8 0 amappl13 176 128 0 116 1 0 1 1 0 8 0 amappl12 168 941 0 913 2 0 2 2 0 8 0 amappl11 160 6 0 6 1 1 0 1 0 8 0 amappl10 152 65 0 50 1 0 1 1 0 8 0 amappl9 144 278 0 277 1 0 1 1 0 8 0 amappl8 136 97 0 94 1 0 1 1 0 8 0 amappl7 128 167 0 154 1 0 1 1 0 8 0 amappl6 120 158 0 157 1 0 1 1 0 8 0 amappl5 112 95 0 84 1 0 1 1 0 8 0 amappl4 104 291 0 271 1 0 1 1 0 8 0 amappl3 96 3182 0 3083 4 0 4 4 0 8 0 amappl2 88 542 0 480 2 0 2 2 0 8 0 amappl1 80 11501 0 10902 15 1 14 15 0 8 1 amappl 88 4569 0 4425 4 0 4 4 0 92 0 uvmvnodes 80 113 0 0 3 0 3 3 0 8 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 7 0 7 2 1 1 1 0 8 1 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 10 0 0 1 0 1 1 0 8 0 uaddrrnd 24 696 0 666 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 696 0 666 1 0 1 1 0 8 0 vmmpekpl 168 7512 0 7475 2 0 2 2 0 8 0 vmmpepl 168 51918 0 50046 97 0 97 97 0 357 10 vmsppl 488 695 0 666 5 1 4 5 0 8 0 rwobjpl 80 17193 0 16134 27 0 27 27 0 8 3 pdppl 4096 1399 0 1332 101 30 71 87 0 8 4 pvpl 32 17687 0 0 143 0 143 143 0 265 0 pmappl 256 695 0 666 3 0 3 3 0 8 0 extentpl 40 46 0 28 1 0 1 1 0 8 0 phpool 112 548 0 34 15 0 15 15 0 8 0 ddb{1}> machine ddbcpu 0 Stopped at x86_ipi_db+0x27: addq $0x8,%rsp ddb{0}> trace x86_ipi_db(ffffffff839d0ff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc intr_handler(ffff800031791a90,ffff8000002a2900) at intr_handler+0xe9 Xintr_ioapic_edge23_untramp() at Xintr_ioapic_edge23_untramp+0x18f uvm_fault_lower_lookup(ffff800031791d80,ffff800031791db8,ffff800031791d00) at uvm_fault_lower_lookup+0x394 uvm_fault_lower(ffff800031791d80,ffff800031791db8,ffff800031791d00) at uvm_fault_lower+0x89 uvm_fault(fffff3806cd1ab90,40ff870f000,0,4) at uvm_fault+0x274 upageflttrap(ffff800031791f20,40ff870f0c0) at upageflttrap+0xa9 usertrap(ffff800031791f20) at usertrap+0x430 recall_trap() at recall_trap+0x8 end of kernel end trace frame: 0x7bea60eb3bc0, count: -12 ddb{0}> machine ddbcpu 1 Stopped at db_enter+0x25: addq $0x8,%rsp ddb{1}> trace db_enter() at db_enter+0x25 witness_checkorder(fffff38068eb7568,9,0) at witness_checkorder+0x10d1 rw_do_enter_write(fffff38068eb7550,1) at rw_do_enter_write+0xba rrw_enter(fffff38068eb7550,1) at rrw_enter+0xc6 VOP_LOCK(fffff3805f746490,2001) at VOP_LOCK+0xbd vn_lock(fffff3805f746490,2001) at vn_lock+0xa4 vfs_getcwd_common(fffff3805f746490,fffff3805f746208,0,0,200,0,b201cad1c4717801) at vfs_getcwd_common+0xd1 vn_isunder(fffff3805f746490,fffff3805f746208,ffff800039bb9ca8) at vn_isunder+0x56 unp_externalize(fffff3806f8cd300,33,0) at unp_externalize+0x26f soreceive(ffff80000163fa90,ffff80003539dbb8,ffff80003539db68,0,ffff80003539dba0,ffff80003539dd2c,4e6a9ebc35c1ae0f) at soreceive+0xc24 recvit(ffff800039bb9ca8,1,ffff80003539dd00,0,ffff80003539ddb0) at recvit+0x40b sys_recvmsg(ffff800039bb9ca8,ffff80003539de60,ffff80003539ddb0) at sys_recvmsg+0x1bf syscall(ffff80003539de60) at syscall+0xbd4 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x73f7fa4dd70, count: -14