last executing test programs: 5.691649798s ago: executing program 6 (id=784): setrlimit(0x8, &(0x7f00000008c0)={0x42, 0x61}) (async) r0 = syz_open_pts() r1 = semget(0x0, 0x1, 0x281) (async) setgid(0xffffffffffffffff) r2 = semget(0x0, 0x1, 0x281) (async) r3 = getgid() getgroups(0x7, &(0x7f0000000340)=[0x0, 0x0, 0xffffffffffffffff, 0x0, r3, 0xffffffffffffffff, 0xffffffffffffffff]) (async) semctl$IPC_SET(r2, 0x0, 0x1, 0x0) (async) setgroups(0x0, 0x0) setuid(0xffffffffffffffff) semop(r1, 0x0, 0x84) (async) close(r0) (async) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) select(0x2a, 0x0, &(0x7f0000000340), &(0x7f0000001900)={0x100000000000000}, &(0x7f0000000440)) (async) syz_open_pts() (async) ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000000)={0x27ffe, 0xffffa5a9, 0xf65d, 0x4f216db8, "102e26181b7b6e3ceb00", 0x10001, 0xb}) (async) writev(r0, &(0x7f0000000700)=[{&(0x7f00000001c0)="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", 0x3f8}], 0x1) 5.344862032s ago: executing program 6 (id=800): r0 = socket(0x11, 0x3, 0x0) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1002, &(0x7f0000000040)=0x101, 0x4) setsockopt(r0, 0x40010, 0x2, &(0x7f0000000000), 0x0) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x1700) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x10, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000300)={0x3, &(0x7f0000000080)=[{0x0, 0x39, 0x8, 0x8f}, {0x2c, 0x5, 0x5a, 0x61b0b}, {0x406, 0x14, 0x58, 0xfffffff1}]}) syz_emit_ethernet(0x33b, &(0x7f0000000a80)=ANY=[]) r2 = kqueue() kevent(r2, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) r3 = socket(0x2, 0x1, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) ioctl$FIONREAD(r3, 0x8040691a, &(0x7f00000001c0)) 4.002008804s ago: executing program 6 (id=816): mknod(&(0x7f00000000c0)='./bus\x00', 0x4, 0x202) ioctl$TIOCSETAF(0xffffffffffffffff, 0x802c7416, &(0x7f0000000000)={0xfffffffc, 0x2, 0x3, 0x0, "d202000000000005d600"}) sysctl$kern(&(0x7f0000000000)={0x1, 0x45}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$vm_swapencrypt(&(0x7f0000000000), 0x3, 0x0, 0x0, &(0x7f0000000040)="79b9cf39e3551f62bea0157f5cd7675fe42b3105300b94377c156e8e8630d621", 0x20) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0x122) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) setrlimit(0x8, &(0x7f0000000980)={0x8, 0x54}) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_opts(r1, 0x0, 0x64, &(0x7f0000000240)="01000000", 0x4) getsockopt(r1, 0x0, 0x6d, 0x0, 0x0) r2 = syz_open_pts() poll(&(0x7f0000000140)=[{r2, 0x40}], 0x1, 0x7) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) sendmsg$unix(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="28000000ffff000001"], 0x28, 0x4}, 0x0) sendmmsg(r3, &(0x7f00000000c0)={&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x3}, 0x10, 0x0) r4 = syz_open_pts() close(r4) ioctl$TIOCSETD(r2, 0x8004741b, &(0x7f0000000000)=0x2) ioctl$TIOCSETAF(r2, 0x802c7416, &(0x7f0000000180)={0x409789, 0x10001, 0xfffffc06, 0x80a1a1, "bb08000100f167d910508bc49d7323000000007e", 0x0, 0x4}) writev(r2, &(0x7f0000000700)=[{&(0x7f0000000080)="34eb4cd59e8456ebc0881681c60e1cd9e0bf01b618b3cb934394c5951c1db0fd943a", 0xff99}], 0x1) ioctl$TIOCDRAIN(r2, 0x2000745e) mknod(&(0x7f0000000100)='./bus\x00', 0x2000, 0xd02) r5 = open(&(0x7f0000000240)='./bus\x00', 0x2, 0x111) ioctl$DRM_IOCTL_MODE_GETFB(r5, 0xc01c64ad, 0x0) ioctl$VNDIOCSET(r5, 0x80045102, &(0x7f0000000000)={0x0, 0xffffffffffffffba, 0x0}) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000080)={0x3, &(0x7f0000000180)=[{0x44, 0x5, 0x7b, 0x8}, {0x50, 0x40, 0x59, 0x8}, {0x6, 0x5, 0x2, 0x43356c79}]}) syz_emit_ethernet(0x1000e, &(0x7f00000000c0)=ANY=[]) 3.992315971s ago: executing program 6 (id=818): r0 = socket$unix(0x1, 0x7, 0x0) r1 = accept$unix(r0, 0x0, &(0x7f0000000000)) r2 = openat$klog(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$LIOCSFD(r2, 0x80046c7f, &(0x7f0000000080)=r0) (async) ioctl$FIONREAD(r1, 0x4004667f, &(0x7f00000000c0)) (async) r3 = dup2(r1, r0) ioctl$TIOCSPGRP(r3, 0x40047477, &(0x7f0000000100)) fsync(r0) (async) pwrite(r1, &(0x7f0000000140)="ea05ffaadc0dc2a50b24a5fff40a287ac578faa689e3bc478f3b0f02ddffe7ab340200890c0e447e17b2c2268e7231702a34290e21fbaac91b6cd26c49cbebab42294b94ee8fa786223dc98d2b008d25b2bbd0e3c29895ae9174edc19505deef5587c07d0dfa6877593fa620c9d05d5476d6aec2ed0bb1a2f64366cea395fd371b96ea316c5d7fb78cee33768292d3a80d60a0081e9e", 0x96, 0x7) (async, rerun: 64) ioctl$TIOCGFLAGS(r3, 0x4004745d, &(0x7f0000000200)) (rerun: 64) ioctl$BIOCLOCK(r3, 0x20004276) (async, rerun: 64) ioctl$BIOCSDIRFILT(r3, 0x8004427d, &(0x7f0000000240)=0x7) (async, rerun: 64) ioctl$WSMUXIO_LIST_DEVICES(r3, 0xc1045763, &(0x7f0000000280)={0x50c4447d, [{0x2, 0x9}, {0x2}, {0x3, 0x1479}, {0x3, 0x8}, {0x1, 0xfffffff8}, {0x1, 0x2000000}, {0x3, 0x5}, {0x3, 0x1}, {0x2, 0x4}, {0x1, 0x5}, {0x2, 0xc12e}, {0x2, 0x8001}, {0x3, 0x2}, {0x1, 0x8001}, {0x2, 0xb}, {0x1, 0x401}, {0x1, 0x3}, {0x2, 0x6}, {0x3, 0xa8d9}, {0x2}, {0x1, 0x9}, {0x3, 0x9}, {0x2, 0x9}, {0x1, 0x100}, {0x3, 0x10001}, {0x1, 0x2}, {0x3, 0xb4c2}, {0x3, 0x2}, {0x2, 0x13}, {0x2, 0xa287}, {0x3, 0x17d}, {0x1, 0x4}]}) ioctl$TIOCSTSTAMP(r3, 0x8008745a, &(0x7f00000003c0)={0x80a, 0x81}) socket(0x18, 0x2, 0x5) (async) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000400)={'tap', 0x0}) (async) select(0x40, &(0x7f0000000440)={0x100000000, 0x3af, 0x401, 0x7, 0x4, 0x8, 0x5d03, 0x3}, &(0x7f0000000480)={0x2, 0x5, 0xfffffffffffffffb, 0x6, 0x0, 0xff, 0x3, 0x2}, &(0x7f00000004c0)={0xecf, 0x2b, 0x5, 0x71, 0x9, 0x6, 0xffffffff, 0xbd6}, &(0x7f0000000500)={0x4, 0x8}) ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f0000000540)={'tap', 0x0}) (async) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000700)={&(0x7f0000000580)=[0x0, 0x0], &(0x7f00000005c0)=[{}, {}], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x7, 0x2, 0x0, 0x0, 0xa, 0x3, 0x22, 0x6a9f, 0xffff7098, 0x8}) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000008c0)={&(0x7f00000007c0)=[0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000840)=[0x0, 0x0], &(0x7f0000000880)=[0x0], 0x2, 0x8, 0x2, 0x1, 0x8, 0xfffffff8, 0x2, 0x6}) (rerun: 32) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000940)={&(0x7f0000000900)=[0x0, 0x0], 0x2, 0x0, 0x0, 0x1, 0x33b, 0x282c, 0x7fff, {0x7ff, 0x5, 0x28c, 0x7, 0x9, 0x6, 0x2, 0x8, 0x3, 0x7, 0x1, 0x4, 0x780000, 0x20, "3e9822cbc7bab36836d7142782df1d75559e2835a799357a2e60b6aaa74dd01e"}}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f00000009c0)={&(0x7f0000000780)=[0x0, r4], 0x2, r5, r6, 0x3, 0x2, 0x99, 0x8, {0x8, 0x1, 0xffa0, 0xe2, 0x3, 0x2, 0x8, 0x1004, 0xdd, 0x7, 0x101, 0x7, 0x14101, 0x1, "9524f463ecf1a15c6888959c09b8b63db4ac4d2a3c27a0090448703800431835"}}) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a40)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r8, 0xffff, 0x10a8, &(0x7f0000000a80)=0x1000, 0x4) (async) mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2) r9 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$BIOCGHDRCMPLT(r9, 0x40044274, &(0x7f0000000b00)) (async, rerun: 64) r10 = openat$null(0xffffffffffffff9c, &(0x7f0000000bc0), 0x8, 0x0) (rerun: 64) kevent(r3, &(0x7f0000000b40)=[{{r2}, 0xfffffffffffffffd, 0x30, 0x8, 0x1}, {{r1}, 0xfffffffffffffff8, 0x9, 0x2, 0x800, 0xffff}, {{r3}, 0xfffffffffffffff9, 0x38, 0x8, 0x3, 0x1}], 0xb10e, &(0x7f0000000c00)=[{{r10}, 0x0, 0x80, 0x8, 0x3, 0x7fff}, {{r3}, 0xfffffffffffffffc, 0x40, 0x2, 0x7, 0x128}, {{r8}, 0xfffffffffffffffa, 0x70, 0x80000000, 0x9, 0x100000001}, {{r3}, 0xfffffffffffffffb, 0x4, 0x4000000d, 0xf, 0xfffffffffffffffd}, {{r7}, 0xfffffffffffffffd, 0x8, 0x2, 0x3, 0x4}], 0x1, &(0x7f0000000cc0)={0x9, 0x1}) ioctl$BIOCLOCK(r9, 0x20004276) 3.931825563s ago: executing program 6 (id=821): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f00000001c0)={0x3, &(0x7f00000012c0)=[{0x50, 0x8, 0x43, 0x7}, {0x28, 0x1, 0x51, 0xa}, {0xe, 0x2, 0xfa, 0x3}]}) recvfrom(0xffffffffffffffff, &(0x7f0000000000)=""/71, 0x47, 0x0, 0x0, 0x0) syz_emit_ethernet(0x1000e, &(0x7f0000000080)=ANY=[@ANYRESOCT=r0]) 3.931335306s ago: executing program 6 (id=822): r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x2, 0x0) sysctl$kern(&(0x7f0000000000)={0x1, 0x45}, 0x2, 0x0, 0x0, 0x0, 0x0) r1 = socket(0x18, 0x2, 0x0) setsockopt(r1, 0x1000000029, 0xd, &(0x7f0000000000), 0x14) pwritev(r0, &(0x7f0000000080)=[{&(0x7f00000006c0), 0xf0f75}], 0x1, 0x0) r2 = open$dir(&(0x7f00000002c0)='./file0\x00', 0x2, 0x10) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0e99db6de761f86, 0x0) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x2, 0x0) r4 = syz_open_pts() mknod(&(0x7f0000000000)='./bus\x00', 0x3a0914c44f7b202d, 0x504) r5 = open(&(0x7f0000000040)='./bus\x00', 0x10005, 0x0) ioctl$TIOCSETD(r5, 0x8004741b, &(0x7f0000000180)=0x7) open(&(0x7f0000000040)='./bus\x00', 0x10005, 0x0) ioctl$TIOCSETA(r4, 0x802c7414, &(0x7f0000000040)={0xfffffffe, 0xfffffffd, 0xffef9ff6, 0x6, "4b06a6bcff0300dba800000000000800", 0x0, 0xf}) writev(r4, &(0x7f0000000000)=[{&(0x7f00000001c0)="34729b0c85826275cdcf680e4d8098fba53d1131a8be9b4788a5d07b109ba98b815538530418fd0d805eb055f64901fea76dcccadc96cde6ed704c69d1249c548fe24c294fbabb7fd09e57", 0x4b}, {&(0x7f00000000c0)="e7c4a4d86cb242843ec2cbd63a9e170a73cef2a623e23e5eda0501c23699e258b514174ca57079fff349534637a55fadb4a6329962bd40adb295cff85f36d14068f2d1758c71a2ca0965bc17be0180000000000000c46de1961101376492cff60fd9ddb33432677dbe8f9bdcfbbd4d0f258ee907faa79ce1d92e47a8bf03", 0x7e}], 0x2) syz_open_pts() ioctl$TIOCFLUSH(r4, 0x80047410, &(0x7f0000000080)=0x2) kevent(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x7, &(0x7f0000000240)={0x6, 0x200000001}) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r6, 0x0, 0x9, &(0x7f0000000240)="ea00000100000000", 0xc) setsockopt$inet_opts(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000000680)="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", 0x1a8) ioctl$FIONREAD(r3, 0x40047307, &(0x7f0000000100)) ftruncate(r2, 0x80002) preadv(r2, &(0x7f0000000480)=[{&(0x7f0000000340)=""/69, 0x45}], 0x1, 0xfffc) truncate(&(0x7f0000000300)='./file0\x00', 0xe89) 3.058680526s ago: executing program 7 (id=848): write(0xffffffffffffffff, &(0x7f0000000180)="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", 0x141) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r0, &(0x7f0000000080)={0x0}, 0x6a, 0x0) 3.00874997s ago: executing program 7 (id=851): ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0x8020560a, &(0x7f00000002c0)={0x10, 0x863, [{&(0x7f0000360000/0x2000)=nil, &(0x7f0000fef000/0x4000)=nil, 0xe9c}, {&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000123000/0x13000)=nil, 0x40000000006}, {&(0x7f0000778000/0x3000)=nil, &(0x7f000011c000/0x3000)=nil, 0x8}, {&(0x7f00005bd000/0x4000)=nil, &(0x7f0000ff6000/0x3000)=nil, 0x82}, {&(0x7f0000ff5000/0xa000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x1}, {&(0x7f0000328000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x5}, {&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x1000}, {&(0x7f00002bf000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x4}, {&(0x7f0000ffc000/0x3000)=nil, &(0x7f00000c0000/0x1000)=nil, 0x2}, {&(0x7f0000760000/0x3000)=nil, &(0x7f0000fea000/0x3000)=nil}, {&(0x7f0000fec000/0x14000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0xa}, {&(0x7f0000ff9000/0x2000)=nil, &(0x7f00001fe000/0x2000)=nil, 0x1}, {&(0x7f0000801000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil}, {&(0x7f000014c000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x86}, {&(0x7f0000622000/0x1000)=nil, &(0x7f00002f9000/0x4000)=nil, 0xfffffffffffffffb}, {&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x4000000000003}], './file0\x00'}) syz_emit_ethernet(0x66, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd605d34520030000000000000000000000000000000000000000000009f0500040000000000000001010090780000000060397772"]) sysctl$kern(&(0x7f00000000c0)={0x1, 0x37}, 0x2, 0x0, 0x0, 0x0, 0x0) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x61}) r0 = syz_open_pts() close(r0) syz_open_pts() mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) ioctl$TIOCSETA(r1, 0xc0884450, &(0x7f00000000c0)={0xfffeffff, 0xb2, 0x8460, 0xfffefffc, "080000de06512a1e0400"}) ioctl$FIOASYNC(r0, 0x80047470, &(0x7f0000000000)=0x10f0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x200000000000b, &(0x7f0000000080)='\x00', 0x1) close(r2) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0e99db6de761f86, 0x0) r3 = open(&(0x7f0000000140)='./file0\x00', 0x78e, 0x0) r4 = kqueue() kevent(r4, &(0x7f0000000200)=[{{r3}, 0xfffffffffffffffe, 0x29, 0x80, 0x2, 0xc}, {{r3}, 0xfffffffffffffffe, 0x10a, 0x10, 0x4, 0x8000000000000000}], 0x8, 0x0, 0x15, 0x0) mknodat(r1, &(0x7f0000000040)='./file0\x00', 0xc000, 0xfffffffc) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r6 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0) ioctl$DIOCMAP(r6, 0xc0106477, &(0x7f00000000c0)={&(0x7f0000000080)='./file0\x00', r5, 0x2}) close(r5) unveil(0x0, &(0x7f0000000180)='r\x00') unveil(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000300)='r\x00') unveil(&(0x7f0000000340)='./file1\x00', &(0x7f0000000300)='x\x00') 2.944201229s ago: executing program 7 (id=856): r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x80, 0x14867bf2b48e865) (async) r1 = geteuid() (async) getgroups(0x8, &(0x7f0000000080)=[0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0]) fchownat(r0, &(0x7f0000000040)='./file0\x00', r1, r3, 0x2) r5 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0xd6) writev(r5, &(0x7f0000000040)=[{&(0x7f00000000c0)='#!', 0x2}, {&(0x7f00000002c0)="8d6bb85551ec8430877ae32fe9bbe42cc8f2147a3eba8e1969f0435119cf4c071c8aee7ef2921be5d7d4796c5566c9593ac89e994b85a05915eaffac51de05a87b8b893e09000000d886eafbe03881d25b7b59f701322b3a109a13436e486b0a6e", 0x61}], 0x2) (async) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) (async) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) (async) ioctl$WSMOUSEIO_SCALIBCOORDS(r5, 0x81205724, &(0x7f0000000340)={0xffffffff, 0x6, 0x4, 0x2, 0x1000, 0x6, 0xf, 0x10, [{0x4, 0x4, 0x290, 0x4}, {0x9, 0x3, 0xffffffff, 0x2828d6ea}, {0x2, 0x40, 0xbce7, 0x4}, {0x6, 0x3, 0x3, 0x10001}, {0x200, 0x5000, 0x6, 0x7}, {0x2, 0x7ff, 0x1, 0x8}, {0x2, 0x0, 0x2, 0xff}, {0x2, 0x30, 0xfffffff7, 0x5}, {0x67, 0xffffffff, 0x5, 0x1}, {0x7, 0x3, 0x5, 0x18000}, {0x0, 0x2, 0x0, 0x7}, {0xb1, 0x1, 0x5, 0x9}, {0x6, 0x1, 0x9, 0x1}, {0xc, 0x5, 0x10, 0x3fc0000}, {0x6, 0x0, 0x4, 0xd9f5}, {0x3, 0x9, 0x1ff, 0x10}]}) (async) recvmsg(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3, &(0x7f00000001c0)=""/231, 0xe7}, 0x42) r6 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) writev(r6, &(0x7f0000000000)=[{&(0x7f00000001c0)="8e1e432b9c4d470a41322e", 0xb}], 0x1) (async) r7 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r7, 0xc020691b, &(0x7f00000001c0)) (async) sendto(r7, &(0x7f00000000c0), 0x0, 0xa, &(0x7f0000000100)=@in={0x2, 0x2}, 0xc) r8 = semget$private(0x0, 0x0, 0x340) semctl$IPC_SET(r8, 0x0, 0x1, &(0x7f00000004c0)={{0x8, r1, r2, r1, r4, 0x10, 0x3000}, 0x5, 0x8000000000000001, 0x5}) 2.866345451s ago: executing program 7 (id=860): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FIOASYNC(r1, 0x8004667d, &(0x7f0000002d00)) mknod$loop(0x0, 0x2000, 0x1) openat$zero(0xffffffffffffff9c, 0x0, 0x80, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) r2 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r2, 0xc0106924, &(0x7f00000001c0)) setitimer(0x0, &(0x7f0000000140)={{0x7fff, 0x100800000000009}, {0xfffffffffffffffe, 0x6}}, 0x0) r3 = socket(0x18, 0x3, 0x0) ioctl$FIONREAD(r3, 0x8080691a, &(0x7f0000000100)) sysctl$hw(&(0x7f0000000140)={0x6, 0x1}, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x40, 0x100) ioctl$FIONBIO(r4, 0x82907003, &(0x7f0000000140)=0x2) ioctl$FIONBIO(r4, 0x82907003, &(0x7f0000000140)=0x1) close(r4) fcntl$dupfd(r4, 0x0, r0) sysctl$kern(&(0x7f0000000000)={0x1, 0x32}, 0x2, &(0x7f0000000200)='~\x00\x00\x00', &(0x7f0000000040)=0x4, &(0x7f0000000080)="03000000", 0x4) 2.846652055s ago: executing program 7 (id=866): ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x4000000000000003}}) setsockopt$sock_int(0xffffffffffffffff, 0xffff, 0x1000, 0x0, 0x0) msgctl$IPC_SET(0x0, 0x1, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x18, 0x1, 0x0) setsockopt(r0, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) 2.780028642s ago: executing program 7 (id=868): mknod(0x0, 0x40, 0x2) (async) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r0 = syz_open_pts() close(r0) r1 = syz_open_pts() ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f00000000c0)={0xfffffffa, 0x4, 0x8a38, 0x4000003, "07ed23080000000000000000000000000800"}) write(r0, &(0x7f0000000580)="e84cb05688d3aea91631f0812fa384b63383ed48ffaf12a9374fd8a80cda58f90103beb55b3b571fcd9861c98ab1d6996b363cf3ed406e6de24918ab76ce64e4c45f2cfeee294e91bd3be7cbad889bab43dd975a637ac8ea7236c606f64586fdbe38d69cea68ddef9d51c635a584e3d17c17ebc6ec7319c97b34ead28d5c6df6c418401282584d941d537ada52139cea8990290254ba892daf8f4803896fb1d243bfe7e4bab940b722b751b137ba9ae9d79b83d031024a67933bfcb82167c94d7d8e90f073993ee07b5b32ea6211970cba9f0bbe868dc19bfe92d8d9e5066d9e5e0c71d9d9ee7c687bbbe78d9e7b0f4afe5037c06a6542d29f0c70cb903741d61940711ff36f99ef3a4bba378ef855e6b702f0a65836cb71062a90a998ddca420e2deb0ee55e5f77d8c1466e4d6452db02d4ec3b6969d279e573921ff1594c6e807e00b475aae81dbec016ab253aa6eaa89a54da068d531fddf6aa125cf629d9172b3035d892aee7602811cbabd58d5dcc755bf100597e25d476e88686208fc01172f537b4427948c057af8aa374c4f6511e8b99f631aed8b22c756bf7aaedba12ee69ef8bb48292a9a90e1543b6a34b09b575d323e3edfa8f4b79439b2ac5ca230b5a5e3ac189dda8ab827eaf833488075a07f9603a2025bb4fd205b5cc016b76bf5e67c02c364fcce45546289f2b49940828aa66b1b0a8cd55864d8f74a68a77e5186fcc40eafa3f9cb77829767e578903e3585752a779df1bdce6c3193d70fa3d086af9059a25e78a37c13cd8db379cfb6a0a46766f3d2a915d763c2a013cc939fa510f50875b14e33252d65c9c585782b3bf0e95ae0d1bedbd7478570e8f3758f1ddadb4376a50cd77dab5e1ac5d5d047430e4ea3ce63638d11ea604cf8f618b2bb62c58784bbe364072375cb9fbf74e65e27722af5b91d8032659075888567e1c79c245c26b1499f722f492553098a949cd69549ef5c96faf045ac9b36183df52603b00d38b4c55801ec87efc42e20fd246d1548a0511937d10da1d7af9a0486c8a51adcf3e79362a251952b78bfb9fc2b2224959e5de15e8deb5d9716e097bece264a768d35f1e06bd08295d7d25fbb5497117a77d363c54d8e0f2c4fbe61af456f2953323d412053ff85b26f71005fb8ff8baa098b8c0631cc7aa7739440ed444f9c3dfeaf8111efcf24c74ff8c01fa65b65123276885aec3891732b599c8a2a62ea885e859d5244c6dce3dc69127ff491378263e94e07710b78023bb8b4813598f436115a77ca61e82f8dfd2634ec69520fed25ebf505631cc84ca3a7af703db8c603f6e1ca8842860fff20123aa5822061664a062beab54181e6c6c5bc9de215f183bff1ddb3b5bdae8277fd7dfd052bab926a80134dc073f573f0db5d74686884b9d4b5cc11d21849e13cb172be163bb0085816aeea121cf060cc97a658e4d66a5dc028eec2a2b9459247a247f4f10c651a1f81ed862a2e8cef481898059ef0bfbf45029b9ba045c157bcb56ed13549113bbee73a718bb0cfac69cb66e6cbbbb2e096c7d0d068cbbf2f30b426cb83af5a96bad3f7f5fad7098d6ece4a471c6a5a14c63c41ffdd839076fbcb97d21f9f9d621650436bce865aa3e37039992f84eae9e0dc8cba1b3e893b7c0b6f5535ad0fe808ba605f3e3498434a90c5e9fd5e5a85ae741f1a32c8e68dd22bc2db711713b6e5b5bda1dfc806f8e295a158705d73e80b46eda996135c57bc971cffac30b9cfe7238eff9e15fa978890a0295fdab3305e4de41a71363f852365b1bb9bea938a72e2460e77628dc27694934a5a4a87e6b9a1b611196b42537a573c332f8a1059aa6723ef185f548bba85a76e08b1199dcee4d9ff72a21e411d6905bc62b44960105e3a7c99521d60e1c13c2786401605134259dcd310dc386c23c78208e051414e88166ecbb652d61fc872f4f1ce25e7ccacc463d67d7ce16fce79aede3dd4d1f83a018f8decbfd0355d6add3148f2dfaf6770a75b5438ba14f3dff298ab3ee4756ce2ce8685d5fcdfbce8b3a4c1db0e8799cc502e52fbd83c0aa06c3562709d0c36cf0b42c44c11e76ea5fd4e6baf624c83180268acabe351f51595e9b7efd7c1594e5ea50e158800712842989066db1a6eede0e7cda3f7bdcd7d197b6fc7d91c435357373982e32", 0x5ff) (async) r2 = open$dir(&(0x7f0000001680)='./bus\x00', 0x80, 0x108) chflagsat(r2, &(0x7f00000016c0)='./file0\x00', 0x90001, 0x0) (async) r3 = dup2(r1, r0) (async) r4 = socket(0x18, 0x2, 0x0) setsockopt$sock_int(r4, 0xffff, 0x1021, &(0x7f0000000000)=0x2, 0x0) (async) poll(&(0x7f0000001740)=[{r3, 0x40}, {r0, 0x100}, {r4, 0x4}, {r4, 0x1}, {r0, 0x20}], 0x5, 0x0) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x205318) (async) open(&(0x7f0000000000)='./bus\x00', 0x2, 0x0) select(0x40, &(0x7f0000000180)={0xfffffffffffffffd, 0x44809e9d, 0x401, 0x3, 0x1ffffffffffffffc, 0x181c, 0x8, 0x10000000009}, 0x0, 0x0, 0x0) (async) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) (async) preadv(r3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/146, 0x92}, {&(0x7f0000000240)=""/61, 0x3d}, {&(0x7f0000001380)=""/72, 0x48}, {&(0x7f0000001400)=""/81, 0x51}, {&(0x7f0000001480)=""/159, 0x9f}, {&(0x7f0000001540)=""/171, 0xab}], 0x7, 0x6) (async) r5 = socket(0x11, 0x3, 0x0) sendto$unix(r5, &(0x7f0000000000)="b1000503000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3039d2d236acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42121000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b1257aea8c500002002fbfe0c2300008abfba0900000008e371a3f8343712051eeab71d89e00004070000000013000000", 0xb1, 0x8, 0x0, 0x0) r6 = open(&(0x7f0000000000)='./file0\x00', 0x200, 0xc0) ioctl$WSMOUSEIO_SCALIBCOORDS(r6, 0x81205724, &(0x7f0000000100)={0x7ff, 0xa4, 0x9, 0x0, 0x80000001, 0xa1b0, 0x7ff, 0x10, [{0x0, 0x2890, 0x1, 0x71002}, {0x6, 0x10, 0x8, 0xfffffff9}, {0x101, 0x6, 0x68d5, 0x9}, {0x4, 0x10001, 0x800f, 0x7}, {0x401, 0xffff, 0x2800, 0x7}, {0x1, 0x7, 0x3, 0x9b}, {0xce1, 0xffffffff, 0x4d5, 0x6}, {0x9, 0x8, 0x14, 0x5910}, {0x6000001, 0x82, 0x6, 0x6}, {0x3, 0x8009, 0x1000, 0x4}, {0x1ce, 0x800, 0xdaa1, 0x3}, {0x10000, 0xa, 0x8}, {0x8, 0x7, 0x4, 0x8}, {0x29a71717, 0xfffffffa, 0xfffffffd, 0x7}, {0xfffffffb, 0x5, 0x5, 0x4}, {0x0, 0x1, 0xfff, 0x30003}]}) (async) syz_emit_ethernet(0x4e, &(0x7f0000000100)=ANY=[@ANYBLOB="8f6f77ede655aaaaaaaaaabb86dd605f000200183a01fe0100000000000000000000000000bbfe8000000000000000000000000000aa83"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r6, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) (async) ioctl$VNDIOCSET(r6, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000080)={{0x7, 0x0, 0x0, 0x0, 0x0, 0x50, 0x2}, 0xc, 0x2b2, 0x0, 0x0, 0x7, 0x800000000000013, 0x6, 0x40}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0x37) 2.030496168s ago: executing program 0 (id=908): r0 = socket(0x2, 0x2, 0x0) bind(r0, &(0x7f0000000240)=@un=@file={0x1, './file0\x00'}, 0xa) readv(0xffffffffffffff9c, &(0x7f0000000400)=[{&(0x7f0000000280)=""/84, 0x54}, {&(0x7f0000000340)=""/163, 0xa3}], 0x2) chmod(&(0x7f0000000040)='.\x00', 0xfc) mknod(&(0x7f0000000180)='./file0\x00', 0x2000, 0x40000800) r1 = open(&(0x7f0000000240)='./file0\x00', 0x70e, 0x25) fcntl$getown(r1, 0x5) select(0x40, &(0x7f0000000000)={0xfffffffffffffffd, 0x0, 0x0, 0x564, 0x9ce8, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x1700) r2 = open(&(0x7f0000000000)='./bus\x00', 0x20, 0x0) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$BIOCSETF(r2, 0x80104267, &(0x7f0000000300)={0x3, &(0x7f0000000200)=[{0x87, 0x39, 0x8}, {0x2c, 0x5, 0x5a, 0x61b0b}, {0x406, 0x5, 0x5, 0xfffffff1}]}) syz_emit_ethernet(0x1000e, &(0x7f0000000080)=ANY=[]) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x2, 0x0, 0x1b}, 0x4, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x2, 0x0, 0x20}, 0x4, &(0x7f00000004c0), &(0x7f0000000000), 0x0, 0x0) r3 = open$dir(&(0x7f0000000300)='.\x00', 0x8, 0x4a) fcntl$setstatus(r3, 0x4, 0x40) setuid(0xee01) openat$pf(0xffffffffffffff9c, &(0x7f0000000680), 0x10000, 0x0) select(0x40, &(0x7f0000000d80)={0x8, 0xfffffffffffffc00, 0x80, 0xd, 0xbc, 0x3, 0x4000000000000007, 0x8}, &(0x7f0000000dc0)={0x9, 0x22, 0x0, 0x100000000, 0x1ff, 0x400, 0xf7, 0x4000000000000002}, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xa7210e10bc3c9de9) open(&(0x7f0000000000)='./file0\x00', 0x615, 0x164) truncate(&(0x7f0000000140)='./file1\x00', 0x200) nanosleep(&(0x7f00000000c0)={0x2, 0x1e7}, &(0x7f0000000100)) execve(0x0, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) fchdir(r4) pipe2(&(0x7f00000000c0), 0x20000) unveil(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='r\x00') 1.952586116s ago: executing program 0 (id=914): r0 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$VMM_IOC_WRITEREGS(r0, 0x82485608, &(0x7f0000000480)={0x1, 0xe07, 0x6c, {[0x4000000006, 0x1, 0xbffffffffffc, 0x209, 0x0, 0x2, 0x9, 0x6, 0xffffffffffff4f18, 0x200007b, 0x80000000000008, 0x39a, 0x4, 0x101, 0x2, 0xffffffffffffffe5, 0x80000001, 0x4], [0x7fff, 0x8001, 0x7, 0x6, 0x81, 0x7, 0x56f, 0x5, 0x1, 0x9], [0x8, 0x4, 0x100000001, 0xfffd, 0x8000, 0x6, 0x2], [0x8000000000000001, 0x18, 0x9, 0x9, 0x2a79, 0x2], [{0x2, 0x9, 0x2, 0xfffffffffffffffd}, {0x4, 0x8001, 0xff, 0x8}, {0x8, 0xa, 0x10000, 0x8000000000000001}, {0x2, 0x9, 0x1, 0x5}, {0x6, 0xffffff54, 0x8000}, {0x56a5, 0xfffffffc, 0x4, 0x1}, {0x1, 0x3, 0x20000009, 0xd}, {0x1, 0x41, 0x2008000, 0x1}], {0x9, 0xa19e, 0x2000000, 0x9}, {0x400, 0x9, 0x7f, 0x6}}}) mknod(&(0x7f0000000000)='./bus\x00', 0x3a0914c44f7b202d, 0x504) r1 = open(&(0x7f0000000040)='./bus\x00', 0x10005, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(r1, 0xc01064c1, 0x0) ioctl$TIOCEXCL(r1, 0x2000740d) open(&(0x7f0000000140)='./bus\x00', 0x80, 0x8) msgget(0x3, 0x280) getppid() msgget(0x1, 0x3) r2 = socket(0x18, 0x3, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) r3 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r3, 0xc0106924, &(0x7f00000001c0)) setuid(0xee01) r4 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0xd6) mkdir(&(0x7f0000000280)='./file1\x00', 0x0) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000280)='#!', 0x10}, {&(0x7f0000000000)="8d6bb85551ec8430877ae32fe9bbe42cc8f2147a3eba8e1969f0435119cf4c071c8aee7ef2921be5d7d4796c5566c95989acb3d185587234186e96b8fde9ffac51de05a87b8b893e2abd154dd886eafbe03881d25b7b13b4c32227fc9e5a86a06f59f701322b3a109a13436e486b0a", 0x6f}], 0x2) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ioctl$FIONREAD(r2, 0x80286989, &(0x7f0000000100)) r5 = msgget$private(0x0, 0x800) msgctl$IPC_RMID(r5, 0x2000000) 1.757220152s ago: executing program 0 (id=917): r0 = socket(0x18, 0x2, 0x0) r1 = getpid() r2 = geteuid() r3 = getgid() setsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000000040)={r1, r2, r3}, 0xc) setsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000000000)={r1, r2, 0xffffffffffffffff}, 0xc) setsockopt(r0, 0x1000000029, 0x2b, 0x0, 0x0) 1.746090307s ago: executing program 0 (id=918): setuid(0xffffffffffffffff) semctl$GETVAL(0x0, 0x2, 0x5, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x100000000000000, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7, 0x0}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x18, 0x1, 0x0) close(r0) r1 = socket(0x18, 0x1, 0x0) setsockopt(r1, 0x1000000029, 0x36, &(0x7f0000000040)="03000000", 0x4) r2 = geteuid() getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f00000001c0)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0xc) r4 = getpgid(0xffffffffffffffff) r5 = getpgrp() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000240)={{0x1, 0x0, 0x0, r2, r3, 0x54, 0xe0b7}, 0x4, 0x100, r4, r5, 0x8, 0x7, 0x7}) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) execve(0x0, 0x0, 0x0) r6 = openat$bpf(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0) r8 = fcntl$dupfd(r7, 0x2, 0xffffffffffffffff) sendmmsg(r8, &(0x7f0000000380)={0x0, 0x8}, 0xa66f1f68c3106312, 0x0) ioctl$BIOCSETIF(r6, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) ioctl$BIOCSETF(r6, 0x80104267, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x50, 0xe, 0x85, 0x4}, {0x16, 0x6, 0xe, 0x7}]}) syz_extract_tcp_res(&(0x7f00000000c0), 0x3, 0x200b) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) r9 = open(&(0x7f0000000000)='./bus\x00', 0x20, 0x0) ioctl$BIOCSETF(r9, 0x80104267, &(0x7f00000000c0)={0x1, &(0x7f0000000140)=[{0x35, 0x6, 0x5, 0x1f0}]}) connect$unix(r9, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0xa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$FIONREAD(r10, 0x80206913, &(0x7f0000000100)) ioctl$WSKBDIO_GETBACKLIGHT(r9, 0x400c5711, &(0x7f0000000180)) 1.73828155s ago: executing program 0 (id=919): writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000200)="673bb5b8cc0c16ed08f1b8d24e2217f981aa6a78ef1d357e382526b1573271aeabc1b798e5806ce228c9", 0x2a}], 0x1) mknod(&(0x7f0000000200)='./file0\x00', 0x2000, 0x1) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x6, 0x90) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000040)='86', 0x2}], 0x1) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) ioctl$TIOCSETA(r1, 0xc4504449, &(0x7f0000000740)={0x0, 0x8, 0x109, 0xf, "3901224200", 0x6, 0x10}) ioctl$KDSETRAD(r1, 0x20004b43) sysctl$vm(&(0x7f0000000000)={0x2, 0x9}, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffddb) mknod(&(0x7f0000000400)='./file0\x00', 0x2000, 0x5c4a) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) poll(&(0x7f00000007c0)=[{r2, 0x1}], 0x1, 0x0) r3 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000500), 0x8, 0x0) ioctl$VMM_IOC_CREATE(r3, 0xc5005601, &(0x7f0000000000)={0x10, 0x0, [{&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x1}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f00005e5000/0x3000)=nil, 0x9}, {&(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x402}, {&(0x7f0000ffa000/0x4000)=nil, 0x0, 0x7fff}, {0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1}, {&(0x7f00000f9000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x1}, {&(0x7f000068b000/0x2000)=nil, 0x0, 0x8001}, {&(0x7f0000fed000/0x11000)=nil, &(0x7f0000002000/0x1000)=nil, 0x100000000}, {0x0, &(0x7f0000fff000/0x1000)=nil, 0x5}, {&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x7b}, {&(0x7f0000000000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x2}, {&(0x7f0000165000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f00000fe000/0x3000)=nil, 0x8}, {0x0, &(0x7f0000ffe000/0x2000)=nil, 0xfffffffffffffffd}, {&(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x2}, {&(0x7f00009a6000/0x1000)=nil, &(0x7f00004ff000/0x2000)=nil, 0x7}], './file0\x00'}) ioctl$VMM_IOC_INTR(r3, 0xc0285602, &(0x7f0000000040)={0x4, 0x0, 0x8}) r4 = getuid() lchown(&(0x7f0000000200)='./file0\x00', r4, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) sysctl$kern(&(0x7f0000000000)={0x1, 0x9}, 0x2, 0x0, 0x0, &(0x7f0000001440)='\x00\x00\x00\x00', 0x4) minherit(&(0x7f000000a000/0x4000)=nil, 0x4000, 0x3) sysctl$kern(&(0x7f0000000140)={0x1, 0x29}, 0x2, 0x0, 0x0, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000001480)=@file={0x1, './file0\x00'}, 0xa, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="14"], 0x20, 0x401}, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mknod(&(0x7f0000000100)='./bus\x00', 0x2000, 0xd02) r5 = open(&(0x7f0000000240)='./bus\x00', 0x2, 0x111) ioctl$VNDIOCSET(r5, 0xc0285108, &(0x7f0000000000)={0x0, 0xffffffffffffffba, 0x0}) r6 = socket(0x18, 0x1, 0x0) close(r6) socket(0x18, 0x2, 0x0) ioctl$FIONREAD(r1, 0x4004667f, &(0x7f0000000280)) sysctl$vm(&(0x7f0000000000)={0x2, 0xb}, 0x2, &(0x7f0000000080)="72faa152f736f7d5540abfd3f8c16e19e11393067954b81638d6cdd8f665de3ede79d44b9b2144a65c8e2a9b656f2f3fab76f92730e7cc614ba3000359dafa3eeab573102f4902f7c2a39290b2a4200223b6653ff468c10b2df831ab47643adc2f5f03e09e267a6cb43905fb099b48abd5d00a58b34f8218faef4f540efd887386916a441c4e3218cfc5e5f260e20b1bdc90071e04a9679e6ff98a8c5e83b25041b41346606d629a071bfb0c111345", &(0x7f0000000180)=0xaf, &(0x7f0000000440)="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"/371, 0x173) 1.718165435s ago: executing program 0 (id=920): r0 = socket(0x800000018, 0x3, 0x0) setsockopt(r0, 0xfffffeff, 0xdb, &(0x7f0000000040)="c0e61002fc5e6939090000000000000090", 0x11) execve(0x0, 0x0, 0x0) r1 = syz_open_pts() ioctl$TIOCSTAT(r1, 0x20007465, 0x0) sysctl$kern(&(0x7f00000005c0)={0x1, 0x48}, 0x2, 0x0, 0x0, &(0x7f0000000340)="05000000", 0x4) ioctl$TIOCSETD(r1, 0x8004741b, &(0x7f0000000000)=0x7) ioctl$TIOCSETD(r1, 0x8004741b, &(0x7f0000000080)=0x2) socket(0x18, 0xc6df0c1bfebc5179, 0x6) syz_emit_ethernet(0x58, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000640)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6036d2b500383af9fe8000000000000000000000670277e5fefe9fb10000000000000000000000aac8"]) execve(0x0, 0x0, 0x0) ioctl$TIOCSETAF(r1, 0x802c7416, 0x0) r2 = openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) ioctl$TIOCSETA(r2, 0xc0284457, &(0x7f0000000000)={0x400, 0x8, 0x9, 0x57, "080400000000000a00010000000100", 0x1, 0x10f87f}) 1.253311586s ago: executing program 1 (id=934): syz_emit_ethernet(0x4a, &(0x7f0000000000)={@broadcast, @local, [], {@ipv4={0x800, {{0xd, 0x4, 0x2, 0x6, 0x3c, 0x68, 0xc63c, 0x5, 0x2, 0x0, @empty, @multicast1, {[@timestamp={0x44, 0x20, 0x3, 0x0, 0x1, [{[], 0x9}, {[@rand_addr=0x2], 0x3ef}, {[@multicast2], 0xffffff4a}, {[@loopback], 0x8}]}]}}, @udp={{0x2, 0x1, 0x8}}}}}}) 1.252739867s ago: executing program 1 (id=935): r0 = socket$unix(0x1, 0x2, 0x0) setsockopt$sock_timeval(r0, 0xffff, 0x1005, &(0x7f0000000180)={0x8, 0x1}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) getsockopt$sock_timeval(r0, 0xffff, 0x1005, 0x0, 0x0) open(&(0x7f0000000040)='./file1\x00', 0x200, 0x3) acct(&(0x7f0000000000)='./file1\x00') 1.247264489s ago: executing program 1 (id=938): r0 = socket(0x2, 0x3, 0x0) r1 = socket(0x2, 0x2, 0x0) r2 = dup(r1) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x205b9a) setsockopt$inet_opts(r2, 0x0, 0x22, &(0x7f0000000040)="fd0cc085", 0x4) r3 = dup2(r2, r0) pipe2(&(0x7f0000001280)={0xffffffffffffffff}, 0x10000) r5 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r5, 0xc0106924, &(0x7f00000001c0)) r6 = openat$speaker(0xffffffffffffff9c, &(0x7f00000012c0), 0x18080, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r7, &(0x7f0000000880)={&(0x7f0000000000)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000700)=""/265, 0x109}], 0x1, 0x0}, 0x80000006}, 0x10, 0x40, 0x0) close(r7) getsockopt$SO_PEERCRED(r2, 0xffff, 0x1022, &(0x7f0000001300)={0x0}, 0xc) r9 = getuid() setreuid(0xee00, r9) sendmsg$unix(r1, &(0x7f0000001400)={&(0x7f0000000080)=@abs={0x1, 0x0, 0x0}, 0x8, &(0x7f0000001240)=[{&(0x7f00000000c0)="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", 0x1000}, {&(0x7f00000010c0)="5479b568f54a3592bcb04d461e316cb38f88da4299f9356473f2eb886d8ab3de32517970567d4c0b44e6a5d1047c4a426249238b1b48b973c22b2245fb934ad2f19ef2311af858fb797a18f156c0cbb10f2404c822e630ff02ba09f0752dc61da9dd3c3ea47aa8492fc7d74b87278deba6056c", 0x73}, {&(0x7f0000001140)="f6bc83ac95e6515e8e4bd40cc97cec223a84f0fc31fbf4d0cf0d27abff4721200ffbb54766490c683bea65f478fafa9b1eb8ec27dc14bd793aeca02894c45006ceb2e42c939de2e349676e3fa94ab084f3f6f00493a3700b38af38dd7da9296601ad971fbdb9641df5f72c46a8ee33fd056c2eb38193d6", 0x77}, {&(0x7f00000011c0)="b743d5882e3629393088212bbb7e977381f4a1b17b7852715cad21292fac6380edb5b0a48bee26da38be9802f20a161a85fe77ea0ebec0537d98951596252a6fbd6d5352424973752fef65e305fb0bc2f95d7043ef1f949f4ffa466494441a7a5bba", 0x62}], 0x4, &(0x7f0000001340)=[@rights={0x18, 0xffff, 0x1, [r4]}, @rights={0x18, 0xffff, 0x1, [r5]}, @rights={0x20, 0xffff, 0x1, [r2, r3, r0]}, @rights={0x18, 0xffff, 0x1, [r0]}, @rights={0x20, 0xffff, 0x1, [r6, r0, r7]}, @cred={0x20, 0xffff, 0x0, r8, r9, 0xffffffffffffffff}], 0xa8, 0x4}, 0x1) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) connect$unix(r0, &(0x7f0000000000), 0x10) write(r3, 0x0, 0x0) 1.109977056s ago: executing program 5 (id=947): syz_emit_ethernet(0x66, &(0x7f00000002c0)=ANY=[@ANYRES32]) (async) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)="76e5eac907f9ccf7a251ceddcec7d6aa45cffe2c63a56077123a276d3ba4e9d17eb3eb5db12a3783a8e0620d357de1fe04fa9465b5bd1286e9624dec06a00c222f", 0x41}], 0x1) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) unveil(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000300)='W\x00') (async, rerun: 32) syz_open_pts() (rerun: 32) 1.048766792s ago: executing program 5 (id=948): mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1, 0x4c) (async) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) ioctl$BIOCLOCK(r1, 0x20004276) ioctl$BIOCGSTATS(r1, 0x4008426f, &(0x7f00000005c0)) (async) ioctl$WSMOUSEIO_SCALIBCOORDS(r0, 0x81205724, &(0x7f0000000100)={0x1, 0x9e, 0x2000007, 0x5, 0x80000001, 0x80000001, 0x10001, 0x10, [{0x10000000, 0x40, 0x3, 0x3}, {0x101, 0xffffffff, 0x9, 0x2}, {0x20007, 0x8000b86, 0xffffff79, 0x9}, {0x73f0, 0x6, 0x4, 0x2}, {0x42, 0x8, 0x80002800, 0x800007}, {0x2, 0x6, 0x3, 0x95}, {0xcdf, 0xdf61, 0x200004f8, 0x10}, {0x6, 0xd, 0x16, 0xb}, {0xffffffff, 0x84, 0x3, 0x6}, {0x4, 0x7, 0x93, 0x1ff}, {0x1e2, 0xffff, 0x40, 0x7}, {0x9, 0x25, 0x9, 0x2d0b}, {0x1000000, 0x401, 0x80000003, 0x408}, {0x29a71717, 0xfffffffa, 0x0, 0x579}, {0xc, 0xf8f, 0x4000006}, {0xfffffffd, 0x800bd3d, 0x6, 0x30005}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) (async) ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0}) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) socket$inet(0x18, 0x3, 0x102) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0xb, 0x0, 0x0, 0x0, 0x0, 0x84, 0x2401}, 0x400, 0x200042000010000, 0x0, 0x0, 0x200000001, 0x80000000000010c, 0x4, 0x6}) (async) socket$inet(0x18, 0x3, 0x102) (async) sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x10c, 0x0, 0x37) 1.048239246s ago: executing program 2 (id=949): mknod(&(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0xd02) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) clock_getres(0x4, &(0x7f0000000000)) link(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000d40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') link(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') openat$pci(0xffffffffffffff9c, &(0x7f0000000040), 0x280, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x2, 0x0) ioctl$FIONREAD(r0, 0xc0106924, &(0x7f00000001c0)) ioctl$VNDIOCSET(r0, 0xc0384600, &(0x7f0000000300)={&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1, &(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xff}) 1.04724714s ago: executing program 5 (id=950): r0 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) writev(r0, &(0x7f00000005c0)=[{&(0x7f00000013c0)}], 0x1) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x0) ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0x1a2c, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x2012, r1, 0x0) sysctl$hw(&(0x7f0000000280)={0x6, 0x8}, 0x2, &(0x7f0000000000)="0000e65bc39e76ecc9ddb3c3cc6bbc252487c139ecf344", &(0x7f0000000240)=0x17, 0x0, 0x0) (async) syz_emit_ethernet(0x2a, &(0x7f0000000200)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x3d, 0x1c, 0x67, 0x0, 0x0, 0x6, 0x0, @multicast1, @local={0xac, 0x14, 0x0}}, @udp={{0x2, 0x3, 0x8}}}}}}) (async) truncate(&(0x7f0000000000)='./file0\x00', 0x9) mknod(&(0x7f0000000040)='./file0\x00', 0x1000, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x4, 0x0) (async) select(0x40, &(0x7f0000000040), &(0x7f0000000080)={0x4000000000000008, 0x0, 0x8000000000000}, 0x0, 0x0) sysctl$net_inet_ip(&(0x7f0000000080)={0x4, 0x2, 0x0, 0x19}, 0x4, 0x0, 0x0, &(0x7f00000011c0)="01", 0x1) 1.046732028s ago: executing program 2 (id=951): mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x1700) mkdir(&(0x7f0000000180)='./file0\x00', 0x12a) (async) unlink(&(0x7f0000000000)='./file0\x00') (async, rerun: 32) r0 = open$dir(&(0x7f0000000140)='.\x00', 0x20a01, 0x100) (rerun: 32) r1 = open(&(0x7f0000000000)='./bus\x00', 0x80, 0x0) select(0x40, &(0x7f0000000280)={0x0, 0xffffffffffffffff, 0xc, 0x7c, 0x4, 0xff, 0x1000, 0x101}, &(0x7f00000002c0)={0x9, 0x0, 0x80080003, 0xfdd, 0x7, 0x7, 0x1, 0x4}, &(0x7f0000000300)={0x200000000004f69, 0x2, 0x8000000000000001, 0x9, 0x608, 0xe4d, 0xac, 0x4}, &(0x7f0000000340)={0xffff, 0xc2}) (async) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) (async, rerun: 32) ioctl$BIOCGFILDROP(r1, 0x40044278, &(0x7f0000000080)) (async, rerun: 32) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f00000001c0)={0x2, &(0x7f00000000c0)=[{0x6c, 0x39, 0x8, 0x4}, {0x406, 0x0, 0x5b, 0x40c}]}) faccessat(r0, &(0x7f0000000180)='./bus\x00', 0x164, 0x1) syz_emit_ethernet(0x73, &(0x7f0000000200)={@broadcast, @remote, [], {@generic={0x8004, "0f11d360d3ba468d4d552d0f5db63af746510c9e7f2c517c6a710c325dc363e6fad74b66bf74c86d238e22355be490273e6d53cec8737f9696cdb35ef9b8bc98f93b0475ed476aaae423b6c51fb5b0a847929d29aeb07e4fc1325cedbf068445914da56a11"}}}) 854.345784ms ago: executing program 5 (id=952): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x10, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x3010, 0xffffffffffffffff, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000000)={0x3, &(0x7f0000000340)=[{0x3, 0x54, 0xe}, {0x7c, 0x60, 0x8f, 0xd}, {0xde, 0xaa, 0x2, 0x4000008}]}) syz_extract_tcp_res$synack(&(0x7f0000000040), 0x1, 0x0) syz_emit_ethernet(0x1000e, &(0x7f0000000040)=ANY=[]) 854.054422ms ago: executing program 2 (id=953): r0 = socket(0x11, 0x3, 0x3) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x3010, 0xffffffffffffffff, 0x0) sendto$unix(r0, &(0x7f0000000080)="b1000516000001010000000007000000331c13fecea10500fef96ec0c72fd3357ae30200004e3039d2d236acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896466a421020000ed710fd18bfbb670baf5a872c881ea6e2ec5890400000000008000361b1257aea8c500002002fbfdf82300008abfba0900000008e371a3f8343732051ed6b71d89e0000405f8fffff0e0000000", 0xb1, 0x0, 0x0, 0x0) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x9, 0x0, {0x9000000ff, 0x101}}) sysctl$hw(&(0x7f0000000000)={0x4, 0x18}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) socket(0x2, 0x5, 0x9) sysctl$kern(&(0x7f0000000000)={0x1, 0x42}, 0x6, 0x0, 0x0, 0x0, 0x0) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x80, 0xe) r2 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VMM_IOC_WRITEREGS(r2, 0xc0285602, &(0x7f0000000340)={0x7, 0x0, 0x94c, {[0x3, 0x4, 0x3ff, 0x8, 0x0, 0x88, 0xfffffffffffffff9, 0x4, 0x1, 0x465, 0x3, 0x2, 0xeb, 0xe0, 0x1, 0x3, 0x7fff, 0x400], [0x0, 0x2, 0xc, 0x100, 0x6, 0x9, 0x5, 0x9, 0x6, 0x1], [0xffffffffffffffff, 0x5, 0x66, 0x1, 0xffffffffffffff7f, 0x2, 0x4a], [0x480, 0x1, 0x228, 0x9, 0x10001, 0x8], [{0x1, 0x6, 0x3, 0x5}, {0x1, 0x1, 0x0, 0xffffffffffffff9b}, {0x1, 0x80000001, 0x4, 0x2}, {0x4, 0x8000, 0x3, 0x15}, {0x0, 0x6, 0x2, 0x1}, {0x3, 0x3, 0xffffffff, 0x2}, {0x6, 0x101, 0x5, 0x2}, {0x7, 0x92, 0x6, 0xfffffffffffffff8}], {0x1, 0x9, 0xdd0}, {0x5, 0x81, 0x1, 0xc5c8}}}) mknodat(r1, &(0x7f0000000040)='./file0\x00', 0x2100, 0x7) getsockopt(r0, 0x9, 0x5, &(0x7f0000000140)=""/47, &(0x7f0000000180)=0x2f) 851.126801ms ago: executing program 5 (id=956): r0 = socket$unix(0x1, 0x5, 0x0) mquery(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x0, r0, 0x1) unveil(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000000)='c\x00') 832.747459ms ago: executing program 2 (id=957): truncate(&(0x7f0000000080)='./file0\x00', 0x40002ffff) sysctl$kern(&(0x7f00000001c0)={0x1, 0x56}, 0x2, 0x0, 0x0, 0x0, 0x0) r0 = semget(0x0, 0x1, 0x11) semctl$GETVAL(r0, 0xe520b27c8b3f67df, 0x5, 0x0) r1 = socket(0x18, 0x3, 0x0) sysctl$ddb(0x0, 0x0, 0x0, &(0x7f0000001d40), 0x0, 0x0) setsockopt(r1, 0x1000000029, 0x1a, 0x0, 0x0) syz_emit_ethernet(0x80d, &(0x7f0000003600)=ANY=[@ANYBLOB="e727dc071f80aaaaaaaaaabb86dd60dd07a707d72c00cb697a653e336f000000500000000000ff0200"/51]) syz_emit_ethernet(0x66, 0x0) openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) sysctl$hw(&(0x7f0000000080)={0x6, 0x3}, 0x2, &(0x7f0000000300)="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", &(0x7f0000000180)=0x152, &(0x7f00000001c0), 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_open_pts() r2 = socket(0x2, 0x1, 0x3) setsockopt(r2, 0x0, 0x21, &(0x7f0000000140)='!\x00\x00\x00', 0x4) select(0x40, &(0x7f0000000000)={0xfffffffffffffffd, 0x0, 0xdc4, 0x564, 0x9ce8, 0x9, 0x0, 0x8}, 0x0, 0x0, 0x0) syz_emit_ethernet(0x138, &(0x7f0000000200)=ANY=[@ANYBLOB="450fb8e05dbd4f3a4a7fe87d3baf727184ee3beb7e7cf187a88f80091fca1f870ba45c56200b083d8cff512386fc385df77c663eadac48ac31557d77726f01d9c886d5bae2c55863847d7d33a20fd0539db353ab93e14b7cae438c96b03ec7627e593d14ba18c5c08e2fae673a072eb8e9c35cc89e41f52882d8c91d374bcfc9135c4e71dedf4ba60c1a4c19df46958cfd5a94b09cb7bd052b24159df932e90a597ee533cfba43ee6fe6b608b60de3c75b5601a5b45a8383"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) bind(r2, &(0x7f0000000000), 0x10) r3 = socket(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0xffff, 0x20, &(0x7f0000000080)=0x6, 0x4) connect$unix(r3, &(0x7f0000000000), 0x10) write(r3, 0x0, 0x0) sysctl$kern(&(0x7f00000000c0)={0x1, 0x3b}, 0x2, 0x0, &(0x7f00000002c0), 0x0, 0x0) setuid(0xee01) r4 = shmget$private(0x0, 0x2000, 0x44, &(0x7f0000412000/0x2000)=nil) shmctl$IPC_SET(r4, 0x1, &(0x7f0000000100)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x119, 0x400}, 0x4, 0x1, 0x0, 0x0, 0xfffd, 0xa, 0x9}) shmctl$IPC_RMID(r4, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$kern(&(0x7f00000000c0)={0x1, 0x13}, 0x2, &(0x7f0000000040)="19bd012b54f70b7491debd9978075d99ea7eb1ca203293a5b415a31a46641628d90fc41ab7065c9883009ccbb8e69a641f943af2710f", &(0x7f0000000080)=0x36, 0x0, 0x0) 832.164714ms ago: executing program 5 (id=958): mknod(&(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x5a) open(&(0x7f0000000240)='./file0\x00', 0x611, 0x40) ioctl$WSMOUSEIO_SCALIBCOORDS(r0, 0x81205724, &(0x7f0000000100)={0x7ff, 0x9, 0x3, 0x101, 0x4, 0x80002003, 0x3, 0x10, [{0x2, 0xfe3, 0x6, 0x71800}, {0x9, 0xf7fe, 0xfaaa, 0xb}, {0x100006, 0x0, 0x8, 0x9}, {0x2, 0x52, 0x17d, 0xfffffffa}, {0xfffffffe, 0x0, 0x80000001, 0x6}, {0x0, 0x47ffb, 0x14000009, 0xb}, {0xfe0, 0xbffffff5, 0x2, 0x6d}, {0x2000a, 0x8, 0xfdf0, 0x4}, {0x0, 0x7, 0x8033, 0x80}, {0xf7fffbfe, 0x0, 0x8001, 0x7}, {0x0, 0xfff9, 0x48a, 0xe4}, {0xcb, 0x102, 0x3, 0x8}, {0x2000df, 0x9, 0x5, 0x3ff}, {0x9, 0xfffffffc, 0xfffffff5, 0xfffffff8}, {0x6, 0xb0c9, 0x26, 0x5}, {0x81, 0xd654, 0x6, 0x2}]}) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r1, 0x0, 0x200000000000b, &(0x7f0000000080)='\x00', 0x1) setsockopt$inet_opts(r1, 0x0, 0x9, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x8) select(0x40, &(0x7f0000000180)={0xfffffffffffffff5, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffe, 0x2800000000000000, 0x181c, 0x8, 0x2000000000000004}, 0x0, 0x0, 0x0) symlink(&(0x7f00000005c0)='./file0\x00', 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) r2 = socket(0x1, 0x2, 0x0) r3 = syz_open_pts() ioctl$TIOCSETA(r3, 0x802c7414, &(0x7f0000000340)={0xfffffb37, 0x0, 0xfffffffa, 0x80000000, "ff2ae7130b1e586c00", 0x40, 0x3effc}) syz_open_pts() ioctl$TIOCSTART(r3, 0x2000746e) ioctl$FIONREAD(r2, 0xc0106924, &(0x7f00000001c0)) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) setitimer(0x1, &(0x7f0000000140)={{0x7ff5, 0x100900000000009}, {0xffffffffffeffffc, 0x7ff7}}, 0x0) r4 = socket(0x18, 0x3, 0x0) sysctl$net_inet_ip(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FIONREAD(r4, 0x8080691a, &(0x7f0000000100)) mknod$loop(0x0, 0x8000, 0x0) faccessat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x4, 0x1) sysctl$net_inet_ip(&(0x7f0000000080)={0x4, 0x2, 0x0, 0x25}, 0x4, &(0x7f0000000140), &(0x7f0000000000), 0x0, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x40, 0x100) mkdir(0x0, 0x2a) socket(0x11, 0x3, 0x3) ioctl$KDSETLED(r5, 0x20004b42, &(0x7f0000000340)=0x6) ioctl$FIONBIO(r5, 0x82907003, &(0x7f0000000140)=0x1) poll(&(0x7f00000000c0)=[{r0, 0x6e}], 0x1, 0x0) 747.27129ms ago: executing program 4 (id=959): r0 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000000), 0x8, 0x0) ioctl$KDENABIO(r0, 0x20004b3c) (async) ioctl$VT_WAITACTIVE(r0, 0x20007606, &(0x7f0000000040)=0x6) r1 = socket$inet(0x2, 0x4000, 0xf6) r2 = accept$inet(r1, 0x0, &(0x7f0000000080)) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x10000) ioctl$KDSETRAD(r4, 0x20004b43) sysctl$kern(&(0x7f0000000100)={0x1, 0x3a}, 0x2, &(0x7f0000000140)="a43c24e8d8ff561c20d8becd93b0064b03d9acdd61f5d5aeb5ad7d9e30fc13529b6b8dfbac3c62bc6b0228b3d7edee23d493cb7420ff1a059530433d9e3c80f12fcd05f817879341fe4bc9c9f4", &(0x7f00000001c0)=0x4d, &(0x7f0000000200)="fa1e5f8fddd87b331063dc65589f3a4375280eccc118ebb70d3e53ae52521f23a7d1729a2c5c9dfe458e729f02168538d4bafe3ae616f64c722077675aeb70bf1b21e7d677f899c773ef29d8335f4fd8df3b7318bb1ea08daaeae8aa2b553dcf4d19d3b7b8924b95adb06d667dde41b9c274337bd953a926dc7db8f540cceef2d5a475fd73e2c75079835157a6a6384f2d288728525e977dce51acd1d0d509f95c2e594e9a4471ae2ba88a69593368e826c999cc126bd07f3623a22d91ddb29b7b441020d80154db67443160a8a3760d213cf2640ba5fb1eb62e5a7712df798ea1314bfcc55391901fa75608a2bc1487e64da19433ac1cd5fdb59593586f30d2e14a228958827e23c1785223f7f93b48ec50b63386b9c2a76316937bb6e44be50e50e1370782936ebc39055ee2b804b5ac74a1f35e91751563dce7c1f2ca4b88ccfe2b6d9ad5bcb33dccfc84190e3dcbd15cdf72adb58f526cc59bf4045d6f4afe418c8d40aa17e860e527b23354150e09f5d63b60d408bff24726e06ab4ce92927de20a6ef02b8a61ba647771e327131aef9cecdeaa171643468fa84c1ab72af651765949623179c61757301d41693cca8e3c490a7dd33ee9ad30e8327d6d1a64cb6d80cc36c11939076af1489b0e730d9c8ff5ab8811c65747e4730176b30f8bd28709677d7cc8f53a83429be810cae198dbe54a886ecf8ebfac015407b9ffce20a3c4f4ded1f9e9c4046cd7a5136cf7c92222df74a256e28e0c032942fc15f5cab2ac08356e702401468f8f0880b77309fc1d9ac4ee95976f11f24c058d97802194a00d6326a558a07a2442e3fa188dc416b301dcd3087c07c12f8eed6e38ea31ebbd4b29e89fb5482af4943fa0e4720d0d4da62c622426b4947a045378bce07b900397fdd34d4e64e629f6f0eca24d90b7c821643d9eaad921be63e2a2423402c513e578718b056c1fc3079cf39666696a3178eaefdc63afc283865b11b6569e46f5dc551381ee5614aec77437308f974746d4765c9d97f1fdabbe378ee417839902d773d88b49a99f8a1939c6e03813fada67fefb4a1aa20b5417a4e26df83be77629bc37997719280635bcf0e0c968ecb630c45e081d8cf2954a8a408fb107eafb243350099b14eeb4a6a0501e52e72ebd520353259f7e79586f099721e8bf05c1702b540d3cee77b3af608c73e521b6c84c2939245bed34d39372b6db63b04d6e357f009581cf2bb828ca355b88a06472760ed14cb649c4e0d9df25ae35544415d0399b1e5e2b13763209082531816eee940c1237293526d9f34278b8a178fe529dde187a6aa65d3acca0ae739f147473c974cadd50a161232176e6f1d8f2f7abdc8fd250c18b61f6d89c6a1aac2cd9a7cae41406c915377f629506c9ad71a2b6370000be57fb686e8fe54aa8d3b46f78acef891cd1d951eba4d164bc32ae6d443c9977c16171d2299580e1adfc3585f1f3fdfa2047a8025b83a3d754ab36e9b9ecf1de970f887e3b3159fd4e2b40fd958336f9a8517f87f02b5aafdcf0daf1963bcecc485f23c1144180d378b9c4a4504adefae3cce9efccba695f5b9488e6aba71d2323e85f5a0c78a6dfaea586d32de3d8d6e3238dd254fb25df2a263a4d6ca7e57ef54efcd853e8599798b83271dfd9becf328e6f1e5f7bbfa08946c6217c52bbb26bd7a45969bdee5b067db72cff2e71e694822bd6ec273bd898a58bd1c09db1147f267a95f563c15b59fee5409ed73eb4f9055505654a50594a963c2f71a49e31626bb03e2e6f4e37535a643ac31b749eab9779b9cc5031277faa99c855f01d7a8f89f19d58879767ca269de0e52e2c75db7024f55984a637374b422b6147077fe9775c56c9cfbbd366ebf27dbd30498f75890c333c72bf3d15d1c543d5085cc14351f009a129f23be8efeab458943618e6eb6b77d8b923edccb4a03ace0d817872fdf5ef2489aa4a28c4803e166f052541afdaf5a496b93591b68f81f86033e171f7124279f44c43321254f89f70fa0a1d74c755485c7f7a8057bef3e20a2ecc0b200623cec0083385aafd8e6da68bdf0e580b77eddc73c9bfb6cb26627f2f076764ade4feb65d96613809fd48ce6efecac9eb5a6ed5887090ad43fa11d7725d132518cb386e53758acb052bc47eb7d55b9892893271e707d8cc58b7d8a133ef0952f5b3856cfea5c6931f0d91c9bbfbcb30ea14becf6d8940bd1e48bc75017c3766d21bcdf5eec1e46324eaf5465c0e48feaedbb85fd68480d88ea8b5bd3007e771f27bc221bd6811c9413defc49279931ca2dbae728dae6d975d2ef0f20cf87a58bd940c599ad0e90239912ecb07a1c01aff5073c761fff55fad3a2a084e9d35c92e1527fd930861d1b324052e5adc32f07f026dd4a428340c03eb346d3c436a4035dc97c830f83444fc0e3ec1051198f40fd3de382064c70e90a8358bcaaec86eb317f094bc216e458af8093a55122af53602e0249688bc9c8576a52d4c644cc7a13f43c86c2028c21e22d4d0a6a5eb82447847f80fdcbc50ed817d803022ac00f2fc4620cced8590f958e64a88c8713528e1dbc045964a5165dfab43de3b2246c6df787f2ac78725febc20fb2afb818c6c38651e4e39572093968f9478be7af83ddc4a07962adfe51251c3295cdc9f602abecbf4493c12ab91962e0d3f210284b9fb6245da58d50b77425d1c67e7699f4e1719b391d21c2c2d9bd9364bf1191c70c9202e9bc7ebe8dd6a6a7497c32641fd6b88e63ba8da2714882d62f09d2d22fa202c5f0f8c181fc05c806b86232ed5b70e95bbb5fdadd47fca1bbf3a770f8de4345c89824928484ca7183bb10b5ea26458ada9ca4dd7fec782593d1bc7093d37b0f72c68c89a119525e6a0386ad9131dea9bc342ec78e6b6012c029cb2c5f1a51338502c9587bade5b28095f3f7bb878dfd8baea8ca450b65bd81551f02c1f1a26983957a7cf544fadad1a41a9040ea135b400f0bb74ca200f9493583d209958a5a7b993d9045c4b58144669d3570c816f4e320f6ff6389ceaf3f718652e9414b02bca9a0fd032b82360ea090a52ec9977cad0ce1a15f45334b85f989e4e3bba1c0c08757535401623e1354493efc7f82928f7b31ba0799192289b7b7f3518bcc08c454e4c711b65044dc0db83b9d0fea893b90e7d24754eb04e8c63007cec6ac4682f8c9fffe666ad962361fa920ede57fcbd8878a9d58277af66d8e6d48db88b5641b12b1e8b22cdb1b3194eb88940a5849b559cd49efcca9323e4a3aa0eefb4b2ccbc773174f5f4c2321434a7d5c4834b59b4f4a3186214e6f2b827ad2fd0687494db59d12f49c0952d287ce56221fa4b2fc1144455caf4dbfa7e8d71a64de4fd2121187e93ecf4df3a3844bf6411a09eb6955029f1dec9d8456915d44908c8901a209400ef9082347cbf8a9b5676f0717061e561351164663f252c5119cc11f7f597564013b0742fe25a1a2bbb73203a5b41cc96c9d7a5b759f3bf8c2da44231bf219301b2ca55bc84771bdf5fd788b4d68161f703b293118ce2dd0873cb61ee6d11e4889bb8abccb674cd9fcb038378fa01a8cc2d813fe4e1157a1703d8ff86978573608740eceb472aff27d2f8407191e98c523313502fa1504771b2a96c0593286dbc95fb7d3519471278621d856f68c9694bb03f11b4fdaa23c28b09210ccda2dc3cefbf7b4f97fd16ca11877e123ee1b35799b1a2fdb1f532ba1d121827b3f75c26da7ab094146457a18e90e9a8400d99ff359419f77bedfd3665774af0ca4b1d0a074d06d33884e5ce4c29e1827aa7c4e4b74a6898866ceba9b57d0e29c9183139b0e3bf7ea8e82a3af24e8111e7b00c2060224407881f7ab484601ad9cd344629e222ecec212d4bcb0e9cf275402f18cb9e9dbe4cd5eaa5b0f41002534fe55193b027137e1b9734caa1ea9631bd8827d9dbcf710b6555c2085ae7108bed6f37e9e2516274287505420f2c00f63ab325ecf219688767c75f17e4928585c0de5aa7b73860100b250a176f5b3d2614104ce30a454909991ac3ffe22786b5fb08c84fb25dd53515f73c32a1e305df95464bb2bf676fe1277ed1a4829cdebfc469003e7a6763561700adbbfac297b47c50ccfa23a40ed478b70f66914243b564b73e0ef52a574b0bb094d2fae9c3a3a5beee356c1c33f88b5f31159eb49e765ed478f42e77e096c002524ecab0c83deadd5d8603a5bebafd3659d088d64ca232002f9f0d55027f40cddedfc524fed06f1e5d3808abfa3156370195d4d62d0d95d42f075c21d23a0c5f85fb26e48173b5344787a5158e53a447e84d97b3e28bc913c83a8950ff536580817e7b7a216ccdba0601c08808bc68e80132e7525dbf18cdb5d8b747d6edfe82a6bfef6d475b0721d65e5a4b4aedf2e92d7de3d14aaa38f999e89cb512007e66ba8e03669f81b7a4d4f6d1f242b74a900f400aa16a9d6509a6d3f2ac52b70c27a6a49cc20d6fa850bc3452ca9604a65e71606567c72adcea0c61f5a0da271b8b30718416b2ac7fce03ee4d07de54f62e731fdc1cf6914682fbdef5e76bcbf6a22a439c1cc7dc57112b12a5d075928cf3bc6f61e3d77b3547033701b439d21f55d7e861717f8cafcc006433274c7e6c3d0344571015c91c8c2865850e7f32b63b054dbfb658a8b45ab9e752c5ba58a7f7093b78350e4a8be66df76a6593363cce82da9c18c4c93cd534295dce578872e03405de9553efa013e4e824ac752ae9b4b30fcfdac79eef309953767694abd8a4329bcff1c1964159b586856eca658527b4ce68790207335fd275b80dc07856416e147614f18df0ef8db64734666b2c4fd21e6d0a98a4508af598ed5b33ba7e6b3e8a362248ce4d03f8746cb3dba229b075e1bca28ddc3b29ce16a73fa97442df8b12990bcbaeb4481eb54c233cf44c33601503e2fb8bd79234ba4565c99349c846acdf7adb8b465850a57909268c9239aeb731f89754cc024226dc0f89b28a2ebc682ba527e444eedbf68e8b72582e0010fd2d1ab3ba870bc29581b9070a92e750a4025d2cb77c2d4ee75e335c7a5bf946d4eb4173f928e86d719c2820916c969f0ab1e8bbf7ca6c75427e604e985551c0fa2add66c20dfe4bec941edecb61eb4988e5fce75d721e38f57548b0a00b5e9f5980516476ca88e05a9b13c16eac6d754b814a05cc1bfc9a5cc5b76126f8d7bfea8e9780be47f7f04d3f50f0cf532d81b971cbcab0720563ade0c349323c252b2ef87d7d4fef246152c0b6a0ce8b562e58b2064dc5d5d4116bccba4028dbfd6e8f79398c8252883eefa78edb87845b736ab66d7f60947e652766981cd5baef6ce36fedea84db028da370100dcdea039a131ef923733fd86437c7b637a43ebaa0417fdd51a6b247dd29fd6ddf6987a220ec1a23acf93c82e9b87ced84fdacbc2aedc1c93984c8a740f4b7d4c5e86d1768a7b7c3bca8402b206f26d6fb3fe6447e007b31746bc4cbd0a869cbdebbd55895170a3fa6824f3564d0fa135194076638083f3ea49cb72b068abb2fa157981599188e8e9cef5c38804ac02f4afd3c2f481164461442a25025f82b1d40d3062cdd9d7fe28620d12bdf14fab47ada83073d50933969b9e00b59d924746e22d76fc0fb1fb913bfa8a4aae7c18a1c25f53f2596d2b50e8025a749ca798d3397694a11e4a36bc67d71df3f85240ef907d75679e0754e12d0eb8a1752839a529a41f97aa205b8bb3887d477f9564bb2377e60e557b5acd55f9d0eee0c77712a7a84cacd394c4a8c05efd1fd2a4c3a612b9ce8b724cf16ae838c703d2f", 0x1000) (async) r5 = fcntl$dupfd(r1, 0x0, r2) readv(r5, &(0x7f0000001680)=[{&(0x7f0000001200)=""/154, 0x9a}, {&(0x7f00000012c0)=""/23, 0x17}, {&(0x7f0000001300)=""/130, 0x82}, {&(0x7f00000013c0)=""/127, 0x7f}, {&(0x7f0000001440)=""/134, 0x86}, {&(0x7f0000001500)=""/172, 0xac}, {&(0x7f00000015c0)}, {&(0x7f0000001600)=""/89, 0x59}], 0x8) (async) recvmmsg(r1, &(0x7f00000029c0)={&(0x7f0000002980)={&(0x7f0000001700)=@in, 0xc, &(0x7f00000028c0)=[{&(0x7f0000001740)=""/18, 0x12}, {&(0x7f0000001780)=""/4096, 0x1000}, {&(0x7f0000002780)=""/228, 0xe4}, {&(0x7f0000002880)=""/11, 0xb}], 0x4, &(0x7f0000002900)=""/107, 0x6b}, 0xfffffffe}, 0x10, 0x1801, 0x0) (async) r6 = getuid() (async) getsockopt$sock_cred(r4, 0xffff, 0x1022, &(0x7f0000002a40)={0x0, 0x0, 0x0}, &(0x7f0000002a80)=0xc) fchownat(r5, &(0x7f0000002a00)='./file0\x00', r6, r7, 0x4) (async) chroot(&(0x7f0000002ac0)='./file0\x00') (async) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x6) (async) ioctl$WSDISPLAYIO_GVIDEO(r3, 0x40045744, &(0x7f0000002b00)) stat(&(0x7f0000002b40)='./file0\x00', &(0x7f0000002b80)) getsockname(r5, &(0x7f0000002c00)=@in, &(0x7f0000002c40)=0xc) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002c80)) (async) ioctl$VT_RELDISP(r4, 0x20007604, &(0x7f0000002cc0)) (async) readlink(&(0x7f0000002d00)='./file0\x00', &(0x7f0000002d40)=""/142, 0x8e) (async) mknod(&(0x7f0000002e00)='./file0\x00', 0x2000, 0x3) (async) preadv(r5, &(0x7f0000003140)=[{&(0x7f0000002e40)=""/187, 0xbb}, {&(0x7f0000002f00)=""/153, 0x99}, {&(0x7f0000002fc0)=""/243, 0xf3}, {&(0x7f00000030c0)=""/114, 0x72}], 0x4, 0x6) (async) ioctl$PCIOCGETROM(r5, 0xc0107005, &(0x7f00000031c0)={{}, 0x3, &(0x7f0000003180)=[0x0, 0x0, 0x0]}) (async) getsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f0000003200)={0x0, 0x0}, &(0x7f0000003240)=0xc) fchownat(r4, &(0x7f0000003280)='./file0\x00', r8, r7, 0x0) (async) ioctl$WSDISPLAYIO_SETPARAM(r3, 0xc020575a, &(0x7f00000032c0)={0x3, 0x54f2, 0x1000, 0xa}) (async) ioctl$TIOCCHKVERAUTH(r4, 0x2000741e) (async) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4) 746.325656ms ago: executing program 2 (id=960): r0 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) writev(r0, &(0x7f0000000280), 0x2) sysctl$net_inet_ip(&(0x7f0000000000)={0x4, 0x2, 0x0, 0x17}, 0x4, 0x0, 0x0, 0x0, 0x0) execve(0x0, 0x0, 0x0) r1 = open(&(0x7f0000000240)='./file0\x00', 0x10000, 0xa) ioctl$WSMOUSEIO_SCALIBCOORDS(r1, 0x81205724, &(0x7f0000000100)={0x7fe, 0x16, 0x3, 0x5fe, 0x80000004, 0x80008003, 0x10001, 0x10, [{0x6, 0x2, 0x4, 0x71002}, {0x10000, 0x8, 0x8, 0x8001}, {0x7, 0x0, 0x3, 0x3b}, {0x8000001, 0x80c, 0x5}, {0x5, 0x4, 0x2840, 0x3}, {0x2, 0x0, 0xfffffffe, 0x99}, {0xa1, 0x1, 0x6, 0x2000006d}, {0x106, 0x1803, 0x14, 0x8}, {0x0, 0x80, 0x5, 0x8683}, {0x0, 0x7fff, 0xd1b, 0x88}, {0x1ce, 0x4, 0x1000, 0x3}, {0x7ff, 0xb, 0x6, 0x9}, {0x400, 0x4, 0x40000008, 0x4}, {0x29a71717, 0xfffefffa, 0x1, 0x6}, {0xc, 0x7, 0x3, 0x7fff}, {0x0, 0x1, 0x1002, 0x5}]}) ioctl$WSDISPLAYIO_USEFONT(r1, 0x80585750, &(0x7f0000000080)={'./file0\x00', 0x8, 0x80, 0x3cd, 0x1, 0x4, 0x1ff, 0x80000001, 0x1, 0x2, 0xffffffffffffffff, 0xed}) ioctl$VNDIOCSET(r1, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r1, 0x80044403, &(0x7f00000001c0)={0x0, 0x8, 0x0}) ioctl$VMM_IOC_READREGS(r1, 0xc2485607, &(0x7f0000000280)) shutdown(r1, 0x2) 738.54297ms ago: executing program 2 (id=962): ioctl$WSMUXIO_REMOVE_DEVICE(0xffffffffffffffff, 0x80085762, &(0x7f0000000040)={0x1}) r0 = socket(0x18, 0xc003, 0x3a) setsockopt(r0, 0x29, 0x6c, &(0x7f0000000040), 0x4) syz_open_pts() (async) r1 = syz_open_pts() ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000340)={0x5, 0x1, 0xfffffffe, 0x966b, "ff14e7130b1e586ca6294000", 0x40, 0x3effd}) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000380)="079facfaaed69aea4dc561c3b736feac0a2a76087be8b904ddc6f90b66e0f69b6dfba683b348224cf0ccc2a39b0f79389a2bd9b211424a22ca014b9231e253e257706c75b3f320166475c72455021edf575fab8b5d65b8d261c87c3ccc4e784ea7462f3723edabb8e26d27acb1797e2ef4db27270a", 0xffffff01}], 0x1) (async) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000380)="079facfaaed69aea4dc561c3b736feac0a2a76087be8b904ddc6f90b66e0f69b6dfba683b348224cf0ccc2a39b0f79389a2bd9b211424a22ca014b9231e253e257706c75b3f320166475c72455021edf575fab8b5d65b8d261c87c3ccc4e784ea7462f3723edabb8e26d27acb1797e2ef4db27270a", 0xffffff01}], 0x1) ioctl$TIOCSETAW(r1, 0x802c7415, &(0x7f0000000000)={0x6, 0x7cd, 0x400, 0x0, "296438fe6c90e90f06142dbd32b73669cad5a2db", 0x7fffffff}) (async) ioctl$TIOCSETAW(r1, 0x802c7415, &(0x7f0000000000)={0x6, 0x7cd, 0x400, 0x0, "296438fe6c90e90f06142dbd32b73669cad5a2db", 0x7fffffff}) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f0000000340)={0x10, 0x0, [{&(0x7f000005f000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil}, {&(0x7f00000a7000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil}, {&(0x7f000008e000/0x11000)=nil, &(0x7f0000090000/0x1000)=nil}, {&(0x7f00000a7000/0x1000)=nil, &(0x7f000009a000/0x2000)=nil, 0x200000000000000}, {&(0x7f00000a3000/0x2000)=nil, &(0x7f000009e000/0x2000)=nil}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x3}, {&(0x7f0000091000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil}, {&(0x7f000009d000/0x4000)=nil, &(0x7f000008e000/0x2000)=nil}, {&(0x7f0000ffa000/0x2000)=nil, &(0x7f000079c000/0x3000)=nil, 0x1}, {&(0x7f00002ef000/0x3000)=nil, &(0x7f000009d000/0x2000)=nil}, {&(0x7f00000a6000/0x3000)=nil, &(0x7f00003cf000/0x3000)=nil}, {&(0x7f00000a1000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil}, {&(0x7f0000ff9000/0x1000)=nil, &(0x7f000037d000/0x4000)=nil}, {&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000099000/0x1000)=nil}, {&(0x7f000009a000/0x4000)=nil, &(0x7f0000090000/0x2000)=nil}, {&(0x7f000009e000/0x4000)=nil, &(0x7f000009a000/0x2000)=nil}], './file0\x00', 0x6}) (async) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f0000000340)={0x10, 0x0, [{&(0x7f000005f000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil}, {&(0x7f00000a7000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil}, {&(0x7f000008e000/0x11000)=nil, &(0x7f0000090000/0x1000)=nil}, {&(0x7f00000a7000/0x1000)=nil, &(0x7f000009a000/0x2000)=nil, 0x200000000000000}, {&(0x7f00000a3000/0x2000)=nil, &(0x7f000009e000/0x2000)=nil}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x3}, {&(0x7f0000091000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil}, {&(0x7f000009d000/0x4000)=nil, &(0x7f000008e000/0x2000)=nil}, {&(0x7f0000ffa000/0x2000)=nil, &(0x7f000079c000/0x3000)=nil, 0x1}, {&(0x7f00002ef000/0x3000)=nil, &(0x7f000009d000/0x2000)=nil}, {&(0x7f00000a6000/0x3000)=nil, &(0x7f00003cf000/0x3000)=nil}, {&(0x7f00000a1000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil}, {&(0x7f0000ff9000/0x1000)=nil, &(0x7f000037d000/0x4000)=nil}, {&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000099000/0x1000)=nil}, {&(0x7f000009a000/0x4000)=nil, &(0x7f0000090000/0x2000)=nil}, {&(0x7f000009e000/0x4000)=nil, &(0x7f000009a000/0x2000)=nil}], './file0\x00', 0x6}) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x10000000000001}}) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xffffffffffff0000}) openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000140), 0x480, 0x0) (async) r2 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000140), 0x480, 0x0) ioctl$KDSETMODE(r2, 0x20004b0a, &(0x7f0000000180)) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) sendmsg(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[], 0x10}, 0x400) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) socket(0x18, 0x1, 0x0) (async) r3 = socket(0x18, 0x1, 0x0) close(r3) (async) close(r3) r4 = socket(0x18, 0x3, 0x2) setsockopt(r4, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) (async) setsockopt(r4, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) connect$unix(r3, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) sendmsg$unix(r3, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0) ioctl$TIOCSETD(r1, 0x8004741b, &(0x7f0000000080)=0x2) syz_open_pts() ioctl$TIOCFLUSH(r1, 0x80047410, &(0x7f0000000100)=0x7) close(r0) 525.684539ms ago: executing program 4 (id=964): select(0x40, &(0x7f0000000180)={0xfffffffffffffffd, 0x44809e9d, 0xfffffffffffffffb, 0xfffffffeffffffff, 0x2000000000000000, 0x210, 0x8, 0x7}, 0x0, 0x0, 0x0) mknod(&(0x7f00000001c0)='./file0\x00', 0x2000, 0x205b9a) r0 = kqueue() ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f00000001c0)={0x1, &(0x7f0000000140)=[{0x406, 0x6, 0x5b, 0x53}]}) kevent(r0, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x19, 0x0) r1 = open(&(0x7f0000000300)='./file0\x00', 0x40, 0x100) ioctl$FIONBIO(r1, 0x82907003, &(0x7f0000000140)=0x2) ioctl$WSMOUSEIO_SETPARAMS(0xffffffffffffffff, 0x80105728, &(0x7f0000000140)={0x0}) mknod(&(0x7f0000000000)='./file1\x00', 0x2000, 0x285b9a) r2 = open(&(0x7f0000000080)='./file1\x00', 0x200, 0x163) ioctl$FIONBIO(r2, 0x82907003, &(0x7f0000000140)=0x1) ioctl$FIONBIO(r2, 0x82907003, &(0x7f0000000140)=0x2) 425.611461ms ago: executing program 3 (id=974): r0 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) setsockopt$inet_opts(r1, 0x0, 0x0, &(0x7f0000000080)="a72aa1bf6dbef00eb03ecf39daa577d8f013e0507c86ec", 0x17) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) symlink(0x0, 0x0) r2 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$TIOCSETA(0xffffffffffffffff, 0xc0404469, 0x0) ioctl$WSKBDIO_GETENCODINGS(r2, 0x80085762, &(0x7f0000000000)) ioctl$KDDISABIO(r0, 0x20004b3d) open$dir(&(0x7f0000000000)='./file0\x00', 0x200, 0x84) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x40, 0xd2) lseek(r3, 0xe400000000000000, 0x2) syz_emit_ethernet(0x39, &(0x7f0000000040)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "15f2bf", 0x3, 0x0, 0x0, @rand_addr="eee21f0000003c00000500004c58053b", @local={0xfe, 0x80, '\x00', 0x0}, {[], @generic="85db03"}}}}}) 424.846134ms ago: executing program 3 (id=975): sendmmsg(0xffffffffffffffff, &(0x7f00000017c0)={&(0x7f0000001780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x250}, 0xfffffff6}, 0x10, 0x1) rename(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x82, 0x0) ioctl$TIOCSETA(r0, 0xc4504442, &(0x7f0000000000)={0x32, 0xffffffff, 0x0, 0x4000, "97a2224ff1c14a06ebb178926cc9795a6b47c1d1", 0x1, 0xfffffffe}) r1 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f00000004c0), 0x8, 0x0) ioctl$WSKBDIO_GETMODE(r1, 0x40045714, 0x0) r2 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) ioctl$TIOCSETA(r2, 0xc4504447, &(0x7f00000001c0)={0x3, 0x2, 0xfffffffe, 0x2f, "210d180000020000000000000028ff4021800600", 0x2000000, 0x5}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) preadv(r3, &(0x7f0000000080)=[{&(0x7f0000000480)=""/240, 0xfffffc47}, {&(0x7f00000000c0)=""/179, 0xfdac}, {&(0x7f00000002c0)=""/229, 0xe2}], 0x50, 0x0) minherit(&(0x7f00000fd000/0x3000)=nil, 0x3000, 0x1) fchown(r1, 0xffffffffffffffff, 0xffffffffffffffff) r4 = openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x820, 0x0) writev(0xffffffffffffffff, &(0x7f00000009c0)=[{&(0x7f0000000400)="9e4b400548dc7413039068e4a982c33fd48f357cc7ea5b62aa9a7266b803f0aa", 0x20}], 0x1) recvmsg(r4, &(0x7f0000000780)={&(0x7f0000000040)=@in6, 0xc, &(0x7f0000000600)=[{&(0x7f00000000c0)=""/107, 0x6b}, {&(0x7f0000000140)=""/208, 0xd0}, {&(0x7f0000000440)=""/96, 0x60}, {&(0x7f00000004c0)=""/86, 0x56}, {&(0x7f0000000240)=""/56, 0x38}, {&(0x7f0000000540)=""/54, 0x36}, {&(0x7f0000000580)=""/126, 0x7e}], 0x7, &(0x7f0000000680)=""/200, 0xc8}, 0x5c32f21098f08a74) ioctl$TIOCSETA(r4, 0xc4504447, &(0x7f0000000000)={0x2d, 0x8, 0x2, 0xfffffffe, "cdab4c8c6d09a275390a000004000400", 0x8000, 0x4}) sendmmsg(0xffffffffffffffff, &(0x7f00000017c0)={&(0x7f0000001780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0801000000000000ffff0000010000004533b6f5b07b1dda4a50a9e4a1ae2f08e0b755d3493ce0b59088d2ab879d112ac30096f76bf7f0a372c66a7cdbdce8c381e30f9f5eec2f7744df29451ea5fd807f2873fd2e710bbc9d90f3494545689e5a593dae7eeb1e81f243cf988ecb99d36383117a98c0147be780dc6454119e03b317c54bc6a56de1b54e8ff4bd8c15d7c442d5a1f8d3a74b08796f1d4a1eeec7cdd00177db3c71de3be925c5af7d0055c177748b8398a97e9665ed2f3215461e69c7734e6f0fc115017d9a7b855d0b33937fe11704f47ccf1473f75f0482fae056d564359ccf09582676dc59282507a82fa748999148602c2c58c99ba73020283a00000000000000a8000000000000000100000002000000a6ac8609c7117ea039a8078b744546d924971a9ce5e30475e91c6642193701a2a465839b1cb586baf61ae3b38dadd4ad526cdcb1b18df30ec210a1150eccfe16583866e0f2b0d9f14172e0811e08e0af889103f37681ba721bd5f0424eef0b02df14968280e22ba85484d61da4aa6b31a9e6e0de036340c67a68c7202fab1852986b9d6cb324f400000000abe32749000000000000000000a0"], 0x250}, 0xfffffff6}, 0x10, 0x1) (async) rename(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) (async) openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x82, 0x0) (async) ioctl$TIOCSETA(r0, 0xc4504442, &(0x7f0000000000)={0x32, 0xffffffff, 0x0, 0x4000, "97a2224ff1c14a06ebb178926cc9795a6b47c1d1", 0x1, 0xfffffffe}) (async) openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f00000004c0), 0x8, 0x0) (async) ioctl$WSKBDIO_GETMODE(r1, 0x40045714, 0x0) (async) openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) (async) ioctl$TIOCSETA(r2, 0xc4504447, &(0x7f00000001c0)={0x3, 0x2, 0xfffffffe, 0x2f, "210d180000020000000000000028ff4021800600", 0x2000000, 0x5}) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) (async) preadv(r3, &(0x7f0000000080)=[{&(0x7f0000000480)=""/240, 0xfffffc47}, {&(0x7f00000000c0)=""/179, 0xfdac}, {&(0x7f00000002c0)=""/229, 0xe2}], 0x50, 0x0) (async) minherit(&(0x7f00000fd000/0x3000)=nil, 0x3000, 0x1) (async) fchown(r1, 0xffffffffffffffff, 0xffffffffffffffff) (async) openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x820, 0x0) (async) writev(0xffffffffffffffff, &(0x7f00000009c0)=[{&(0x7f0000000400)="9e4b400548dc7413039068e4a982c33fd48f357cc7ea5b62aa9a7266b803f0aa", 0x20}], 0x1) (async) recvmsg(r4, &(0x7f0000000780)={&(0x7f0000000040)=@in6, 0xc, &(0x7f0000000600)=[{&(0x7f00000000c0)=""/107, 0x6b}, {&(0x7f0000000140)=""/208, 0xd0}, {&(0x7f0000000440)=""/96, 0x60}, {&(0x7f00000004c0)=""/86, 0x56}, {&(0x7f0000000240)=""/56, 0x38}, {&(0x7f0000000540)=""/54, 0x36}, {&(0x7f0000000580)=""/126, 0x7e}], 0x7, &(0x7f0000000680)=""/200, 0xc8}, 0x5c32f21098f08a74) (async) ioctl$TIOCSETA(r4, 0xc4504447, &(0x7f0000000000)={0x2d, 0x8, 0x2, 0xfffffffe, "cdab4c8c6d09a275390a000004000400", 0x8000, 0x4}) (async) 293.826165ms ago: executing program 3 (id=976): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000b40)="825a4f", 0x3}], 0x1, 0x0, 0x0, 0xf}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmmsg(r0, &(0x7f0000000080)={0x0}, 0x10, 0xc90) ioctl$WSMUXIO_REMOVE_DEVICE(0xffffffffffffffff, 0x80085762, &(0x7f0000000040)={0x1}) r1 = socket$unix(0x1, 0x5, 0x0) close(r1) sysctl$net_inet_gre(&(0x7f0000000100), 0xb, &(0x7f0000000140)="b1904dafec59a7020b8701ab", &(0x7f0000000300)=0xc, &(0x7f00000001c0)="b3ec1747e9b6ccd50c640969ea4e0af98258ff93e2786b628cb8b79c18f4044d5aa55d0d7529853f433c3212359ea5a366376bbfec1ad9d13ee04cac8ba55681f7625ab699e9629749ef05efe45c699ef4958189661c694dd7089ef7ffc5612379a7488c1a061c6a4566680bcf5cef322c11e063a52072023a85d7aaf2cc9bd1fd1fd354261500353f165f9e103899db41c37f436050c1f537ec9542b44bbd91f9e7917ff57d2f751cb69b5e83317316c243c44899fe14398a3ea970989a8277cedacd2b239da45aa6fc18b7f52b558da19fefc86df5946586ad45ffb38099f02084a332073cc8b657", 0xe9) setsockopt(r1, 0x29, 0x4, &(0x7f0000000040), 0x0) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0x66, &(0x7f00000003c0)={0x1, 0x1, 0x10, 0x1}, 0xc) r2 = open(&(0x7f0000000000)='./bus\x00', 0x80, 0x0) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$BIOCIMMEDIATE(r2, 0x80044270, &(0x7f00000000c0)=0x7) ioctl$WSDISPLAYIO_GTYPE(r2, 0x40045740, &(0x7f00000000c0)) r3 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) socket(0x18, 0x3, 0x80) r4 = semget(0x0, 0x1, 0x281) semop(r4, &(0x7f0000000000)=[{0x0, 0xfe00, 0x1000}], 0x1) semctl$SETALL(r4, 0x0, 0x9, &(0x7f0000000200)) r5 = getuid() getgroups(0x4, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0]) semctl$IPC_SET(r4, 0x0, 0x1, &(0x7f0000000180)={{0x5, 0x0, 0x0, r5, r6, 0x12a, 0x800}, 0x3, 0x12, 0x3}) semctl$SETVAL(r4, 0x0, 0x8, &(0x7f0000000200)) link(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) ioctl$WSKBDIO_GETENCODINGS(r3, 0xc0105715, &(0x7f0000000140)) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0x66, &(0x7f00000003c0)={0x3f, 0x1, 0x10, 0x3, 0x6c0d}, 0xc) 292.480446ms ago: executing program 1 (id=977): ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) r0 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r0, 0xc0106924, &(0x7f00000001c0)) r1 = open(&(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x615, 0xb2) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000180)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x84, 0x11, 0x3, 0x48}, {0x48, 0xf0, 0xff}, {0x6, 0x80, 0x12, 0xfffff802}]}) sysctl$kern(0x0, 0x0, &(0x7f0000000100)="c21f4319b7e636e5039d73988d800f00ecfe746fc6d602ff1a1ea6612b158f09acc9ae4e6a9981f73bf1aeb47b1435ea280e5a6f787f6607285258f5ca", &(0x7f0000000000)=0x3d, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETWF(r2, 0x80104277, &(0x7f0000000040)={0x0, 0x0}) write(r2, &(0x7f00000003c0)="f81ad30100060000000100000000", 0xe) socket(0x2, 0x8000, 0x5) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f0000000040)={'tap', 0x0}) ioctl$BIOCPROMISC(r3, 0x20004269) ioctl$BIOCSDIRFILT(r3, 0x8004427d, 0x0) close(r3) r4 = socket(0x18, 0x3, 0xf9) setitimer(0x1, &(0x7f0000000140)={{0x80000000000078, 0x100800000200009}, {0xffffffff, 0x8001}}, 0x0) sysctl$kern(&(0x7f0000000100)={0x1, 0x58}, 0x2, &(0x7f0000000180)="05b679a71899", &(0x7f0000000280)=0x6, &(0x7f00000002c0), 0x0) ioctl$FIONREAD(r4, 0x81206919, &(0x7f0000000100)) r5 = socket(0x18, 0x2, 0x0) setsockopt(r1, 0x5, 0x3b, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) msync(&(0x7f0000416000/0x1000)=nil, 0x1000, 0x6) r6 = dup2(r5, r0) symlinkat(&(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', r6, &(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') ioctl$FIONREAD(r4, 0x8080691a, &(0x7f0000000100)) getsockopt$inet_opts(r4, 0x0, 0x1, &(0x7f0000000000)=""/131, &(0x7f00000000c0)=0x83) 292.075865ms ago: executing program 1 (id=978): setuid(0xffffffffffffffff) acct(0x0) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x2, 0x0, 0x23}, 0x4, &(0x7f0000000140)="e33745e84d5ebfb9cc2f7fa3a7f7891721720e05000000a4fb5eaf3e3c6e1d648a8ca6ebc70f949c442aee9dc79e2cd74f4e106f382caf01ada3bc4efb0f6bc50690e5d879fac2492f4a0491b1ea3359aa5c5164ad97ac7c3aaddd498c0f962f5167b69cfdc8287f", &(0x7f0000000100)=0x68, 0x0, 0x0) 287.887456ms ago: executing program 3 (id=979): setrlimit(0x8, &(0x7f0000000980)={0x42, 0x65}) r0 = syz_open_pts() close(r0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f0000000080), 0x2, 0x0}, 0x8) bind$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7, 0x0}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket(0x18, 0x3, 0x0) sendmsg$unix(r1, &(0x7f0000001700)={0x0, 0xffffffb3, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FIONBIO(r2, 0x8004667e, &(0x7f0000000500)=0x2) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) 77.75133ms ago: executing program 1 (id=980): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) kqueue() open$dir(&(0x7f0000000000)='.\x00', 0x80, 0x102) open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7959) open(&(0x7f00000000c0)='./file0\x00', 0x10, 0x100) openat$pf(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1, 0x53) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x70e, 0x0) mmap(&(0x7f000000f000/0x2000)=nil, 0x2000, 0x0, 0x8010, r1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = kqueue() r5 = dup(r4) r6 = kqueue() kevent(r6, &(0x7f0000000080)=[{{r5}, 0xfffffffffffffffa, 0xd1, 0x1, 0x4000007ffffbfc, 0x800000000000008}], 0x30, 0x0, 0x57d, 0x0) close(r2) kevent(r6, 0x0, 0x0, 0x0, 0x2, 0x0) writev(r3, &(0x7f0000000200)=[{0x0}], 0x1) setitimer(0x1, &(0x7f0000002900), 0x0) r7 = socket(0x11, 0x3, 0x40) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x800, &(0x7f0000000340)={0x0, 0x216ea873}) r8 = socket(0x18, 0x1, 0x0) close(r8) socket(0x24, 0x2, 0x0) setsockopt(r8, 0x6, 0x41, &(0x7f0000000280), 0x1c) setsockopt$sock_int(r7, 0xffff, 0x2000, 0x0, 0x0) 70.97566ms ago: executing program 3 (id=981): mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000000), &(0x7f0000000100)=0xc) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x65}) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000000)={0x2, 0x0, 0x3, 0x9}) sysctl$kern(&(0x7f0000000000)={0xa}, 0x7, &(0x7f0000000080), 0x0, 0x0, 0x24) r0 = syz_open_pts() close(r0) r1 = syz_open_pts() ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000340)={0x8, 0x5, 0xffffdf82, 0xffffff8c, "08ed95990000000000000000ffffffffffffffe6", 0x4, 0x4}) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) mknod(0x0, 0x2000, 0x412dff) readv(r1, &(0x7f0000000040)=[{&(0x7f0000000000)=""/18, 0x12}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) open(&(0x7f0000000000)='./file0\x00', 0xa0, 0x40) 70.447014ms ago: executing program 4 (id=982): r0 = socket$unix(0x1, 0x5, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x2000, 0x40000800) r1 = open(&(0x7f0000000240)='./file0\x00', 0x70e, 0x24) setuid(0xffffffffffffffff) r2 = socket(0x18, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000180)="673bb5b8cc0c16ed08f1b8d24e2217f981aa6a78ef1d35e6abbbdabb2618f4df72f3cf1fcb35d7de2b086a46a52ad7f4601faa903493e33986e77f0f22", 0x3d}], 0x1) sysctl$kern(&(0x7f0000000140)={0x1, 0x29}, 0x2, 0x0, 0x0, 0x0, 0x0) sendmsg$unix(r2, &(0x7f0000000040)={&(0x7f0000000240)=@file={0x0, './file0\x00'}, 0xa, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="14"], 0x20, 0x401}, 0x0) fcntl$getown(r1, 0x5) fcntl$setown(r0, 0x6, 0x0) bind$unix(r0, &(0x7f0000000200)=@file={0xd570d0466b60192, './file0\x00'}, 0xa) r3 = syz_open_pts() close(r3) accept(r1, &(0x7f00000016c0)=@un=@abs, &(0x7f0000001700)=0x8) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x205310) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r4 = openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x20, 0x0) ioctl$TIOCSETA(r4, 0x20004102, 0x0) shmget(0x0, 0x3000, 0x348, &(0x7f0000ffd000/0x3000)=nil) ioctl$TIOCSETD(r3, 0x8004741b, &(0x7f0000000000)=0x9) writev(r3, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) writev(r3, &(0x7f00000001c0)=[{&(0x7f00000000c0)="0ddf16d83885c9", 0x7}], 0x1) readv(r3, &(0x7f0000001640), 0x0) listen(r0, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) connect$unix(r5, &(0x7f0000000000)=@file={0xd1653077bafa0114, './file0\x00'}, 0xa) r6 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$WSMOUSEIO_SETPARAMS(r6, 0x80105728, &(0x7f00000000c0)={&(0x7f0000000240)=[{0x24}], 0x1}) close(r0) 14.087774ms ago: executing program 4 (id=983): writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000080)="f349ee7f839d168589be10", 0xb}], 0x1) r0 = socket$inet(0x2, 0x2, 0x0) r1 = syz_open_pts() ioctl$TIOCSETAF(r1, 0x802c7416, &(0x7f0000000000)={0x7, 0xff, 0x9, 0x1, "2a9f0aa6d0e17f5bdc673ada0ff7f9a57c9cfd8d", 0x1, 0xfffffffa}) socketpair(0x18, 0x4000, 0x8, &(0x7f0000000040)) setsockopt$inet_opts(r0, 0x0, 0x9, &(0x7f0000000240)="ea00000100000000", 0xc) 13.309585ms ago: executing program 3 (id=984): setrlimit(0x8, &(0x7f00000003c0)={0x42, 0x61}) (async) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000300), 0x80, 0x0) fcntl$lock(r0, 0x9, &(0x7f0000000000)={0x2, 0x2, 0xffffffff00000000, 0x2fffffffc}) (async) mknodat(r0, &(0x7f0000000000)='./file0\x00', 0xc0e99db6de761f86, 0x1000) (async) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0xffff, 0x8, &(0x7f0000000000), 0x4) (async) r2 = open(&(0x7f0000000480)='./file0\x00', 0x20000, 0x56) readv(r2, &(0x7f00000003c0)=[{0x0}], 0x1) (async) r3 = open(&(0x7f0000000040)='./file0\x00', 0x12, 0x10) (async) r4 = syz_open_pts() close(r4) (async) syz_open_pts() r5 = socket$inet(0x2, 0x3, 0x0) setsockopt$inet_opts(r5, 0x0, 0xd, 0x0, 0x0) (async) ioctl$TIOCSETA(r4, 0x802c7414, &(0x7f0000000040)={0x27ffb, 0xfff, 0x405, 0x21d8b78b, "0a1800730600150504ea7f727af3dc2101003689", 0x7, 0x2330bfe9}) (async) writev(r4, &(0x7f0000000400)=[{&(0x7f0000001680)="68d47a7cb80484de3cf8e3b2c31c0f998345193370b6e73ed9290fc4828aa2180d430435f058d0cf9a905133cab0b95ce0ed473566fe4284f4969991d79cc843fe6c3f9225db52ff3adbfd4488e433f377e5ca861890d2c60180a09841938aea559f22fc7a6cd804f4ce729b7110e25fbcb8c11dd55f1a237e9553201482fcf614e177c4b25553f5193f077f37f9e35badd082eb702ceef4161c8e1faed2851125b66097eca41a7ba433ef363f2e7bb74a201ad638262d523eccd115e3030ccda9d15bf096eafe0e514590902655b411887b6971b796091294cbd9228d6015ed572e0d31846e045419cb21afa0e6fbb751ca553d880d5905592540236473979f084cc208a6395691d68b3e83201df750c759d75f268f5f8d9cdee68c01f97420afccbf53013cd5e859baa95f49d2bd15183afa022234b2dc2ebde3ad9b5d7be99f8be637ea4e98b15387b742af3aac54b8b9e2a5d995be42eeab25fda63c48848c758a6f1509d3ad865365cc674f5fd85b06c05c752c72d742e86e26cef34d9f4f49538187cd3a4502aa22da7e8a028e21c8aa64eafcf0902bb921aef14839e51f376493bd8fe7c6d7c437795b8be2634d3c3a05b75f778dca5576706559b0fac68ba07ab82a2353a80225fea8646f16ead5b57a94e5ad154d3a5cff7348cddb572f22e2ed1cf45e47cf3fdc7742e5e9230aace662ddd95467ca39aa5803d4dbdd47b7adec1e9b704689f878de8749ab6eeece469b5cfbfddb17ed491b007e58767874022ee3614feaa86cd35d81f8241c9c90787a3df24904c0f5aef99acf3ac278bedf1d9b47355ae18c245cd0946a411c634b5f393335a81e40883fd147152932369aaa5e74fa3bd15de81ab5d5ccc9a6a8fa26fd47add79517e7570a676c1c603bb0b546fb0d68941b39d788502d8d977eb980c9522fdb9b3cf97647ce01fa605bcf403dfc2b6b28fda992253bb0caeabd7c249056e947775c790ce67538027039b5718f646c5c3df0e88147b86db288a976d9d24da1e8fb223a81a45b84f7629a67d0e8dbc65555b994f957a37babd91b920fdb100b7ad5efeeaffc530b9f83a1998b7c597d88570078d8d3ba1ffbf81defd31970d93c189fdb7beb54f27dc9df6430996b4c426ca7149fcf1106d4dfe92c9837f6f51bc4cbf934736e505329ce14e67f910b14256f9594f452210518b547ec76a1a05b9a05f097f3709db603240a85b6cb09c1e6a160a536220e6e01925d2a0aec10d9215e5fe18ed5849889faaa36fbe6a06880f460ba142080a716635ee568232aca4b42b7965271efb873ce6908187aa5b792deeb33239c86badc053565ff7fead69025a3e6daaac825555ad385f83edc3cac44c4c86bbed13fc3ccaee1e367a754cb63bfdbcee708b606", 0x3e2}], 0x1) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc5005601, &(0x7f0000000000)={0x10, 0x0, [{&(0x7f0000347000/0x3000)=nil, &(0x7f0000663000/0x4000)=nil, 0x5}, {&(0x7f00005c9000/0x2000)=nil, &(0x7f0000826000/0x4000)=nil}, {&(0x7f0000060000/0x2000)=nil, &(0x7f00007a8000/0x3000)=nil}, {0x0, &(0x7f0000ffc000/0x4000)=nil, 0x1}, {&(0x7f000017c000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil}, {&(0x7f00003f7000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x6}, {0x0, 0x0, 0x4}, {&(0x7f0000ff0000/0xf000)=nil, &(0x7f00000c4000/0x10000)=nil, 0x200000000000}, {&(0x7f000000d000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x2}, {&(0x7f00004cc000/0x4000)=nil, &(0x7f0000661000/0x3000)=nil}, {0x0, &(0x7f0000156000/0x1000)=nil, 0x16}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000716000/0x2000)=nil}, {&(0x7f000038f000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x100000000}, {&(0x7f00004c1000/0x2000)=nil, 0x0, 0x9bbf}, {&(0x7f00001cf000/0x4000)=nil, &(0x7f0000142000/0x4000)=nil}, {&(0x7f0000573000/0x2000)=nil, &(0x7f00004e9000/0x4000)=nil}], './file0\x00'}) (async) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f0000000080), 0x1c, 0x0}, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) (async) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x10000000000001}}) (async) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x8) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) r6 = socket(0x18, 0x5, 0x0) close(r6) (async) sendmsg(r6, &(0x7f00000002c0)={&(0x7f0000000200)=@in={0x2, 0x3}, 0xc, &(0x7f0000000280)=[{&(0x7f0000000240)}], 0x1, &(0x7f00000004c0)=[{0xc0, 0x1, 0x80000000, "8e01da000f3b79a0c43e58b285371c6254da3ecdb8e8205a7ff5a005e45faa76a91fe857187861858669322f399873e5fb416b2c6d58260d7b91ee6cac13d04cbf63aded80ca6267ab0b0fe0a91bc2d286d23dc0e96afd83b4d54d04f07accb5709df4fc421c01aa27a8e4dc0b6ca382c67d4e7bc15036b402d44ee4813d038da0f80a6cb1e143f8577cf10ddbb957fdd46276bcac110b89720238d2615fec84bf2cf2e85e2a19677301f2a6"}, {0xb0, 0xffff, 0x1, "bed9e78d5e6738732b4058e80e1e83333fb7ee5dcf52bfaf9bd558265d569ed81207398c6237d6bbc8fd0ac1f01b9eb972aaa3843acacc9abb48be1cac265050620bd30a171a733bd7bff7ea54557ffc43645d4cfdc93d87e70bed090bd2d6555e39b3307b66d36cbaeb1de8339f826fdfc57f6d843350f08ca3f244960b3afbb667307b5acfe185dc3a1181c7aeb8973f7fb9bd40976317a37eed131f71"}], 0x170}, 0x400) (async) r7 = socket(0x18, 0x2, 0x0) setsockopt(r7, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) (async) connect$unix(r6, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) sendmsg$unix(r6, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0) (async) accept$inet6(r3, &(0x7f0000000080), &(0x7f00000000c0)=0xc) 230.895µs ago: executing program 4 (id=985): r0 = socket(0x2, 0x1, 0x0) getsockopt$inet_opts(r0, 0x0, 0x0, 0x0, 0x0) r1 = socket(0x18, 0x3, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) r2 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r2, 0xc0106924, &(0x7f00000001c0)) ioctl$FIONREAD(r1, 0x8020697a, &(0x7f0000000100)) sysctl$net_inet_ip(&(0x7f0000000340)={0x4, 0x2, 0x0, 0xc}, 0x4, 0x0, 0x0, 0x0, 0x0) r3 = socket(0x800000018, 0x1, 0x0) r4 = getppid() getsockopt$sock_cred(r3, 0xffff, 0x1022, &(0x7f0000001740)={0x0, 0x0}, &(0x7f0000001780)=0xc) getgroups(0x5, &(0x7f00000017c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0]) open(0x0, 0x200, 0xc0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000040)={0x2, &(0x7f00000000c0)=[{}, {0x2}]}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x33}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x3414, 0x0, 0xffffffffffffffb8) sendmsg$unix(r3, &(0x7f0000001880)={&(0x7f0000000140)=@file={0x1, './file0\x00'}, 0xa, &(0x7f00000016c0)=[{&(0x7f0000000180)="1020f0ad290ec5fadc7752911c22acf57af98c7e52f9930aa9e40d572263614b5905cdfac8507014010258e9e86f1ca5aec3f41fb7d32f56f772f90ce458a8e45b7b31fe81fe08fdb9b55c73a103a0efdacf7b9076dd83efd205bab010b864d48f1e5920e34c8f5a4e4d95659aebc2721d449b1a05a98cff2a986b4f628da2a518ce0376fcdc3fcf33eaeda56c3bd6bb4a27d7fcec2c651fc498172d4c3e3e827fb8fe66398155a2cc60a531dea819088730a99dceabd51f1dcf50e3fb4b09055743a30fe321dd6200221d3019ce76ea482e4433f31f73004cf5", 0xda}, {&(0x7f0000000280)="98a8d617c3b623ff09373898f77e71fecf03e8c962a3175fc118f002365e065bd3eee836e56564eec3cd65a9c1844f41e10db9a9db6a45edfb95a2def5f7ed33c6e7668022212a602f8b89efba8666c71eddf9285c000823cbebebaecf25cd729b75b97b021d63617177b60ec0f64363b2733a87b14f4cfe3117efcde291a201dd9f9d8883b12920e9bf885f54f43d51e093155f059b193167f1e06776b58a0045", 0xa1}, {&(0x7f0000000340)="0d14b3f1077d69c5f9f0351a501ed1073e16f766b11137a8523dde07857f1ab08ae6579205207834696e6e4e7fa7398b3672c23219d21e464e61072650310fb87d5bf3d560edcb2e0b2252965c6dca7fd0f4a2f7367f9a6d34338ca96fecd9217f819179c7db3b49e376785c3eadd96cde716720c6a4e68dc8565f4338db73e382e110466519e3268858", 0x8a}, {&(0x7f0000000400)="bd7bac298d10da5affe38f8c30bab72fb022823f5e3e98927e810424eec747168d797948b3780668ea616f3edd129e5a595f59050e5f075e2491a70d4f6941b103f02e05009499604ff52fa19fa8ae7c8d845b775e795bc32bf3672074aec4add2199715010323b3f4686d6dac16a0b22bed1a2cff6469a27bf2e3bf5f9df91debec6d7f2dcc86205e74dbbe06d58dc335794c393d97f56eafcaec04c6dfe1a77459ea2b1b5c3515f5f27dee1a7f26b3543758e456550ec174", 0xb9}, {&(0x7f00000004c0)="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", 0x1000}, {&(0x7f00000014c0)="3c5e5ccdf2c65eb84788ef5f3f5427d449365d71d41190aad846bb0373bed09ff3b02b345aa146bcf28ba22091a8219839852482794d0fcf64215d395127b967b7d9a4e5df9c2d57fcb41fd6b5a40bd588d3952732a9a4cd5919f8a76f898bcd609ccd96d2", 0x65}, {&(0x7f0000001540)="2304b9952fdad12054dfe0c01d3caf8087dda58625d3d2596ff9428299be189dea583b0d1336b24e268120169bc00c390f3b83d80019b0918e2a30faa05372c4b0400c123752ac03780660e73b2b80a6e11dc82291771b8f8489301a7082dc877b27d98ea03e66937709be1c9404c4d582711c30c2fcf83034aed0ceb7357f42cb80daa1894ee28c36d9bd2972180b83635e6a36cfd3f43f45ca352acf1a28d8a42b42", 0xa3}, {&(0x7f0000001600)="ede748a58c1979f0ad8d64224d517af4ddd1350b41ffc6375a5ec3385235e97cdfbe1b65f4f12980c06a2469ee5756cb00e4987bd5bb0c481029a394ead0154166249662dbc9273c19f02cbb67df93c23b700f015b19cdcdd1e87127cdc18f492643a8714171edc230b6f01f5f1e0cfb357c5878eab252860fa816110645c0007ab411d89eeeb7378ca05cc236", 0x8d}], 0x8, &(0x7f0000001800)=[@rights={0x28, 0xffff, 0x1, [r0, r0, r0, r3, r3, r3]}, @cred={0x20, 0xffff, 0x0, r4, r5, r6}], 0x48, 0x1}, 0x0) bind$unix(r3, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) r7 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) ioctl$WSMOUSEIO_SETPARAMS(r7, 0x80105728, &(0x7f0000000100)={&(0x7f00000000c0)=[{0x42, 0xd}, {0x85, 0x10b}, {0x25, 0x4709043b}, {0x26, 0x8}, {0x8c}, {0x41, 0x6}], 0x6}) setsockopt(r3, 0x1000000000029, 0x1b, &(0x7f0000000000)="c04a1190", 0x4) 0s ago: executing program 4 (id=986): ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x4000000000000003}}) setsockopt$sock_int(0xffffffffffffffff, 0xffff, 0x1000, 0x0, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x5, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x310, 0x4000}, 0x100000000006, 0x861, 0xffffffffffffffff, 0x0, 0x80000000000000, 0xfffffffe, 0xb, 0x7}) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x18, 0x1, 0x0) setsockopt(r0, 0x1000000029, 0x2e, 0x0, 0x0) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) kernel console output (not intermixed with test programs): OpenBSD/amd64 (ci-openbsd-multicore-3.us-central1-b.c.syzkaller.internal) (tty00) Warning: Permanently added '10.128.1.111' (ED25519) to the list of known hosts. login: pckbd_enable: command error pppx: unable to set addresses for pppx1, error=17 pppx: unable to set addresses for pppx2, error=17 pckbd_enable: command error OpenBSD/amd64 (Amnesiac) (tty00) login: pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error j|E1\:nP >8T @x c4!/n  hlpIo  hlpIo  hlpIo  hl@pHIo  hlpl hll5 r~l >c|$x~~l >l_2!~~l >l_2!l >l_2!l >pl@ _2!l >l_2!8l >Xl _2!l >l@_2!l >l@_2!l >0l@_2!hl hlHl5l hllM4l hllM4Hl hl lNl hllNl >l@lQf/l >l@lPf@/.l hlxl5h >8_@wn4'I/u~l >x@| OpenBSD/amd64 (Amnesiac) (tty00) login: pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pppx: unable to set addresses for pppx1, error=17 pppx: unable to set addresses for pppx1, error=17 OpenBSD/amd64 (Amnesiac) (tty00) login: 86pppx: unable to set addresses for pppx1, error=17 pppx: unable to set addresses for pppx2, error=17 panic: kernel diagnostic assertion "refs != ~0" failed: file "/syzkaller/managers/multicore/kernel/sys/kern/kern_synch.c", line 955 Stopped at db_enter+0x25: addq $0x8,%rsp TID PID UID PRFLAGS PFLAGS CPU COMMAND 218910 29293 0 0 0 0 syz-executor *123678 29293 0 0 0x4000000 1K syz-executor db_enter() at db_enter+0x25 panic(ffffffff83451c58) at panic+0x1e5 __assert(ffffffff8348ceed,ffffffff8349b4e7,3bb,ffffffff834c44a6) at __assert+0x29 refcnt_finalize(ffff8000367bf4f8,ffffffff83445af9) at refcnt_finalize+0x1db pppx_if_destroy(205b9a,ffff8000367bf4f0) at pppx_if_destroy+0x3d pppxclose(205b9a,2,2000,ffff8000357b1260) at pppxclose+0xa0 spec_close(ffff80003c3ffe60) at spec_close+0x417 VOP_CLOSE(fffffd8068af1b00,2,fffffd80097fd618,ffff8000357b1260) at VOP_CLOSE+0x132 vn_closefile(fffffd8068b09120,ffff8000357b1260) at vn_closefile+0x12b fdrop(fffffd8068b09120,ffff8000357b1260) at fdrop+0x121 closef(fffffd8068b09120,ffff8000357b1260) at closef+0x192 syscall(ffff80003c4000c0) at syscall+0xbd4 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x5f66f818f10, count: 2 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{1}> ddb{1}> set $lines = 0 ddb{1}> set $maxwidth = 0 ddb{1}> show panic *cpu1: kernel diagnostic assertion "refs != ~0" failed: file "/syzkaller/managers/multicore/kernel/sys/kern/kern_synch.c", line 955 ddb{1}> trace db_enter() at db_enter+0x25 panic(ffffffff83451c58) at panic+0x1e5 __assert(ffffffff8348ceed,ffffffff8349b4e7,3bb,ffffffff834c44a6) at __assert+0x29 refcnt_finalize(ffff8000367bf4f8,ffffffff83445af9) at refcnt_finalize+0x1db pppx_if_destroy(205b9a,ffff8000367bf4f0) at pppx_if_destroy+0x3d pppxclose(205b9a,2,2000,ffff8000357b1260) at pppxclose+0xa0 spec_close(ffff80003c3ffe60) at spec_close+0x417 VOP_CLOSE(fffffd8068af1b00,2,fffffd80097fd618,ffff8000357b1260) at VOP_CLOSE+0x132 vn_closefile(fffffd8068b09120,ffff8000357b1260) at vn_closefile+0x12b fdrop(fffffd8068b09120,ffff8000357b1260) at fdrop+0x121 closef(fffffd8068b09120,ffff8000357b1260) at closef+0x192 syscall(ffff80003c4000c0) at syscall+0xbd4 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x5f66f818f10, count: -13 ddb{1}> show registers rdi 0 rsi 0x1 rbp 0xffff80003c3ffc30 rbx 0xffff8000299bee07 rdx 0 rcx 0xffff8000357b1260 rax 0xffff8000299bdff0 r8 0x101010101010101 r9 0x8080808080808080 r10 0x56b42ebd502e3439 r11 0x616b9c510b1627b1 r12 0xffff8000299bec08 r13 0 r14 0 r15 0x1 rip 0xffffffff81648fe5 db_enter+0x25 cs 0x8 rflags 0x246 rsp 0xffff80003c3ffc20 ss 0x10 db_enter+0x25: addq $0x8,%rsp ddb{1}> show proc PROC (syz-executor) tid=123678 pid=29293 tcnt=4 stat=onproc flags process=0 proc=4000000 runpri=32, usrpri=50, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff8000357b0fc8,0xffff8000fffeba28 process=0xffff8000357b44f0 user=0xffff80003c3fb000, vmspace=0xfffffd80661f6028 estcpu=36, cpticks=1, pctcpu=0.0, user=0, sys=1, intr=0 ddb{1}> ps PID TID PPID UID S FLAGS WAIT COMMAND 29293 218910 79901 0 7 0 syz-executor 29293 56966 79901 0 3 0x4000000 smrbar syz-executor *29293 123678 79901 0 7 0x4000000 syz-executor 29293 62455 79901 0 2 0x4000080 syz-executor 7785 1368 36293 0 3 0x80 nanoslp syz-executor 7785 512837 36293 0 3 0x4000080 ttyretype syz-executor 7785 439252 36293 0 3 0x4000080 fsleep syz-executor 7785 18013 36293 0 3 0x4000080 fsleep syz-executor 64077 471880 30578 0 3 0x80 nanoslp syz-executor 64077 375085 30578 0 3 0x4000080 kqread syz-executor 64077 58841 30578 0 3 0x4000080 fsleep syz-executor 68130 129455 14468 0 3 0x80 nanoslp syz-executor 68130 267148 14468 0 3 0x4000080 fifor syz-executor 68130 392477 14468 0 3 0x4000080 fsleep syz-executor 69856 88891 1 0 3 0x100083 ttyopn getty 80365 99346 0 0 3 0x14200 acct acct 30578 139338 94316 0 3 0x82 nanoslp syz-executor 73655 229741 0 0 3 0x14280 nfsidl nfsio 28968 59562 0 0 3 0x14280 nfsidl nfsio 13583 299568 0 0 3 0x14280 nfsidl nfsio 7542 274383 0 0 3 0x14280 nfsidl nfsio 40346 229995 0 0 3 0x14280 nfsidl nfsio 92238 417072 0 0 3 0x14280 nfsidl nfsio 18542 79747 0 0 3 0x14280 nfsidl nfsio 99418 273318 0 0 3 0x14280 nfsidl nfsio 61520 209284 0 0 3 0x14280 nfsidl nfsio 36640 296063 0 0 3 0x14280 nfsidl nfsio 16167 471009 0 0 3 0x14280 nfsidl nfsio 32463 141935 0 0 3 0x14280 nfsidl nfsio 75000 228915 0 0 3 0x14280 nfsidl nfsio 71040 105240 0 0 3 0x14280 nfsidl nfsio 74261 497447 0 0 3 0x14280 nfsidl nfsio 44514 296552 0 0 3 0x14280 nfsidl nfsio 33897 395761 0 0 3 0x14280 nfsidl nfsio 46568 424398 0 0 3 0x14280 nfsidl nfsio 50350 361942 0 0 3 0x14280 nfsidl nfsio 87170 202931 0 0 3 0x14280 nfsidl nfsio 71021 10662 94316 0 3 0x82 nanoslp syz-executor 15204 45154 94316 0 3 0x82 wait syz-executor 14468 310462 94316 0 3 0x82 nanoslp syz-executor 79901 84366 94316 0 3 0x82 nanoslp syz-executor 36293 353549 94316 0 3 0x82 nanoslp syz-executor 38867 291443 94316 0 3 0x82 nanoslp syz-executor 74003 294792 94316 0 3 0x82 nanoslp syz-executor 94316 142712 55747 0 3 0x82 kqread syz-executor 55747 317579 90053 0 3 0x10008a sigsusp ksh 90053 100030 60956 0 3 0x98 kqread sshd-session 60956 114713 60327 0 3 0x92 kqread sshd-session 60327 164252 1 0 3 0x88 kqread sshd 72835 51452 71670 74 3 0x1100092 bpf pflogd 71670 438844 1 0 3 0x80 sbwait pflogd 19207 207216 77456 73 3 0x1100090 kqread syslogd 77456 14648 1 0 3 0x100082 sbwait syslogd 85347 206994 1 0 3 0x100080 kqread resolvd 58619 53318 37087 77 3 0x100092 kqread dhcpleased 90975 518025 37087 77 3 0x100092 kqread dhcpleased 37087 428441 1 0 3 0x80 kqread dhcpleased 52773 9893 0 0 3 0x14200 bored smr 47928 59524 0 0 3 0x14200 pgzero zerothread 22296 271738 0 0 3 0x14200 aiodoned aiodoned 31652 187196 0 0 3 0x14200 syncer update 530 231149 0 0 3 0x14200 cleaner cleaner 37936 116508 0 0 3 0x14200 reaper reaper 37020 19443 0 0 3 0x14200 pgdaemon pagedaemon 90129 352863 0 0 3 0x14200 bored viomb 7083 425029 0 0 3 0x40014200 acpi0 acpi0 88488 281625 0 0 3 0x40014200 idle1 58272 71328 0 0 3 0x14200 bored softnet1 4089 315751 0 0 3 0x14200 bored softnet0 4073 255816 0 0 3 0x14200 bored systqmp 57953 192108 0 0 3 0x14200 bored systq 13972 377954 0 0 3 0x14200 tmoslp softclockmp 80158 372650 0 0 3 0x40014200 tmoslp softclock 27572 55756 0 0 3 0x40014200 idle0 1 141001 0 0 3 0x82 wait init 0 0 -1 0 3 0x10010200 scheduler swapper ddb{1}> show all locks Process 29293 (syz-executor) thread 0xffff8000357b1260 (123678) exclusive kernel_lock &kernel_lock r = 0 (0xffffffff83980b40) #0 witness_lock+0x5f1 #1 vn_closefile+0x41 #2 fdrop+0x121 #3 closef+0x192 #4 syscall+0xbd4 #5 Xsyscall+0x128 ddb{1}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 11105 12114K 12342K 166960K 12873 0 pcb 19 13K 14K 166960K 248 0 rtable 169 7K 8K 166960K 529 0 pf 38 18K 81K 166960K 142 0 ifaddr 36 6K 8K 166960K 105 0 ifgroup 58 2K 2K 166960K 179 0 sysctl 4 1K 9K 166960K 13 0 counters 74 37K 38K 166960K 180 0 ioctlops 0 0K 4K 166960K 1655 0 iov 0 0K 16K 166960K 52 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1293 81K 82K 166960K 2142 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 5K 166960K 18 0 VM map 2 1K 1K 166960K 2 0 sem 12 0K 0K 166960K 51 0 dirhash 12 2K 2K 166960K 21 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 18 65K 240K 166960K 1160 0 sigio 0 0K 0K 166960K 19 0 proc 72 115K 147K 166960K 736 0 subproc 72 4K 4K 166960K 81 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 2 0K 0K 166960K 125 0 in_multi 60 4K 7K 166960K 146 0 ether_multi 1 0K 0K 166960K 4 0 mrt 0 0K 0K 166960K 25 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 253 1129K 1129K 166960K 253 0 exec 0 0K 1K 166960K 648 0 fusefs mount 1 32K 32K 166960K 1 0 pfkey data 0 0K 0K 166960K 2 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 265 161K 186K 166960K 12321 0 UVM aobj 38 11K 11K 166960K 40 0 pinsyscall 43 86K 104K 166960K 2429 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 2 0K 1K 166960K 128 0 NDP 13 0K 1K 166960K 66 0 temp 68 9086K 9153K 166960K 61122 0 kqueue 15 24K 32K 166960K 217 0 SYN cache 2 16K 16K 166960K 2 0 ddb{1}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 26 0 0 1 0 1 1 0 8 0 rtpcb 120 135 0 130 2 0 2 2 0 8 1 rtentry 176 155 0 92 6 0 6 6 0 8 0 unpcb 144 793 0 769 10 4 6 6 0 8 5 syncache 336 12 0 12 2 1 1 1 0 8 1 tcpqe 32 2 0 2 2 2 0 1 0 8 0 tcpcb 736 286 0 279 5 4 1 4 0 8 0 arp 136 23 0 10 1 0 1 1 0 8 0 inpcb 328 938 0 924 6 4 2 4 0 8 0 nd6 152 32 0 20 1 0 1 1 0 8 0 pkpcb 40 55 0 55 3 2 1 1 0 8 1 kcovpl 48 9 0 1 1 0 1 1 0 8 0 ppxss 1192 34 0 32 2 1 1 1 0 8 0 pppxif 1504 12 0 11 3 2 1 1 0 8 0 pffrag 232 8 0 3 1 0 1 1 0 482 0 pffrnode 88 8 0 3 1 0 1 1 0 8 0 pffrent 40 16 0 11 1 0 1 1 0 8 0 pfosfp 40 1428 0 1005 5 0 5 5 0 8 0 pfosfpen 112 1428 0 714 21 0 21 21 0 8 0 pfrktable 1344 2 0 1 1 0 1 1 0 8 0 pftag 88 4 0 0 1 0 1 1 0 8 0 pfstitem 24 91 0 21 1 0 1 1 0 8 0 pfstkey 128 91 0 21 3 0 3 3 0 8 0 pfstate 448 91 0 21 8 0 8 8 0 8 0 pfrule 1360 27 0 19 2 1 1 2 0 8 0 rttmr 136 2 0 2 2 2 0 1 0 8 0 art_heap8 4096 2 0 0 2 0 2 2 0 8 0 art_heap4 256 637 0 387 30 6 24 29 0 8 4 art_table 40 639 0 387 5 0 5 5 0 8 0 art_node 32 154 0 99 1 0 1 1 0 8 0 sysvmsgpl 40 14 0 11 2 1 1 1 0 8 0 semupl 112 2 0 2 2 1 1 1 0 8 1 semapl 112 46 0 36 1 0 1 1 0 8 0 shmpl 112 33 0 2 1 0 1 1 0 8 0 dirhash 1024 23 0 6 3 0 3 3 0 8 0 dino2pl 256 3667 0 2202 93 0 93 93 0 8 0 ffsino 296 3667 0 2202 114 0 114 114 0 8 0 nchpl 144 5238 0 3525 64 0 64 64 0 8 0 rtmask 32 5 0 5 3 2 1 1 0 8 1 vnodes 216 4014 0 0 223 0 223 223 0 8 0 namei 1024 17694 0 17694 3 2 1 2 0 8 1 percpumem 16 105 0 53 1 0 1 1 0 8 0 vcpupl 3968 4 0 0 1 0 1 1 0 8 0 vmpool 848 4 0 0 1 0 1 1 0 8 0 kstatmem 264 100 0 70 5 2 3 3 0 8 1 scsiplug 72 6 0 6 3 2 1 1 0 8 1 scxspl 216 36873 0 36873 12 9 3 8 1 8 3 plimitpl 152 299 0 281 1 0 1 1 0 8 0 sigapl 424 1496 0 1427 9 1 8 8 0 8 0 knotepl 120 539 0 0 17 0 17 17 0 8 0 kqueuepl 224 429 0 413 5 2 3 3 0 8 2 pipepl 344 266 0 239 9 6 3 9 0 8 0 fdescpl 528 1458 0 1426 3 0 3 3 0 8 0 filepl 160 8724 0 8472 17 2 15 16 0 8 2 lockfpl 104 387 0 384 1 0 1 1 0 8 0 lockfspl 48 166 0 163 1 0 1 1 0 8 0 sessionpl 144 35 0 26 1 0 1 1 0 8 0 pgrppl 48 63 0 46 1 0 1 1 0 8 0 ucredpl 104 1573 0 1560 1 0 1 1 0 8 0 zombiepl 144 1431 0 1427 1 0 1 1 0 8 0 processpl 1232 1496 0 1427 6 0 6 6 0 8 0 procpl 664 3272 0 3193 8 0 8 8 0 8 0 sosppl 176 7 0 7 3 2 1 1 0 8 1 sockpl 752 1947 0 1903 29 17 12 18 0 8 7 mcl64k 65536 5 0 0 1 0 1 1 0 8 0 mcl16k 16384 1 0 0 1 0 1 1 0 8 0 mcl12k 12288 2 0 0 1 0 1 1 0 8 0 mcl8k 8192 4 0 0 1 0 1 1 0 8 0 mcl4k 4096 127 0 0 16 0 16 16 0 8 0 mcl2k2 2112 1 0 0 1 0 1 1 0 8 0 mcl2k 2048 22 0 0 3 0 3 3 0 8 0 mtagpl 96 3 0 0 1 0 1 1 0 8 0 mbufpl 256 1147 0 0 72 0 72 72 0 8 0 bufpl 280 14486 0 8356 439 0 439 439 0 8 0 anonpl 32 11498 0 0 94 1 93 93 0 246 0 amapchunkpl 152 41181 0 40602 35 7 28 29 0 158 4 amappl16 200 4242 0 4204 49 31 18 23 0 8 7 amappl15 192 2 0 2 1 1 0 1 0 8 0 amappl14 184 448 0 447 1 0 1 1 0 8 0 amappl13 176 153 0 141 1 0 1 1 0 8 0 amappl12 168 1724 0 1693 2 0 2 2 0 8 0 amappl11 160 5 0 5 1 1 0 1 0 8 0 amappl10 152 62 0 48 1 0 1 1 0 8 0 amappl9 144 270 0 270 1 1 0 1 0 8 0 amappl8 136 105 0 102 1 0 1 1 0 8 0 amappl7 128 171 0 157 1 0 1 1 0 8 0 amappl6 120 166 0 163 1 0 1 1 0 8 0 amappl5 112 120 0 109 1 0 1 1 0 8 0 amappl4 104 342 0 321 1 0 1 1 0 8 0 amappl3 96 8257 0 8123 4 0 4 4 0 8 0 amappl2 88 679 0 619 2 0 2 2 0 8 0 amappl1 80 18179 0 17568 21 4 17 17 0 8 2 amappl 88 11287 0 11095 5 0 5 5 0 92 0 uvmvnodes 80 137 0 0 3 0 3 3 0 8 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma2048 2048 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma512 512 2 0 2 2 2 0 1 0 8 0 dma256 256 7 0 7 2 1 1 1 0 8 1 dma128 128 254 0 254 2 2 0 1 0 8 0 dma64 64 7 0 7 2 2 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 39 0 2 1 0 1 1 0 8 0 uaddrrnd 24 1458 0 1426 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 1458 0 1426 1 0 1 1 0 8 0 vmmpekpl 168 15052 0 15008 3 0 3 3 0 8 0 vmmpepl 168 103962 0 101934 113 7 106 106 0 357 6 vmsppl 488 1457 0 1426 6 1 5 5 0 8 0 rwobjpl 80 30960 0 29795 32 1 31 31 0 8 0 pdppl 4096 2931 0 2856 132 53 79 85 0 8 4 pvpl 32 18596 0 0 150 0 150 150 0 265 0 pmappl 256 1461 0 1426 3 0 3 3 0 8 0 extentpl 40 45 0 27 1 0 1 1 0 8 0 phpool 112 384 0 72 9 0 9 9 0 8 0 ddb{1}> machine ddbcpu 0 Stopped at x86_ipi_db+0x27: addq $0x8,%rsp x86_ipi_db(ffffffff8390eff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __mp_lock(ffffffff83980340) at __mp_lock+0x192 softintr_dispatch(0) at softintr_dispatch+0x125 dosoftint(0) at dosoftint+0x54 Xsoftclock() at Xsoftclock+0x27 end of kernel end trace frame: 0x7e98402b6270, count: 8 ddb{0}> trace x86_ipi_db(ffffffff8390eff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __mp_lock(ffffffff83980340) at __mp_lock+0x192 softintr_dispatch(0) at softintr_dispatch+0x125 dosoftint(0) at dosoftint+0x54 Xsoftclock() at Xsoftclock+0x27 end of kernel end trace frame: 0x7e98402b6270, count: -7 ddb{0}> machine ddbcpu 1 Stopped at db_enter+0x25: addq $0x8,%rsp db_enter() at db_enter+0x25 panic(ffffffff83451c58) at panic+0x1e5 __assert(ffffffff8348ceed,ffffffff8349b4e7,3bb,ffffffff834c44a6) at __assert+0x29 refcnt_finalize(ffff8000367bf4f8,ffffffff83445af9) at refcnt_finalize+0x1db pppx_if_destroy(205b9a,ffff8000367bf4f0) at pppx_if_destroy+0x3d pppxclose(205b9a,2,2000,ffff8000357b1260) at pppxclose+0xa0 spec_close(ffff80003c3ffe60) at spec_close+0x417 VOP_CLOSE(fffffd8068af1b00,2,fffffd80097fd618,ffff8000357b1260) at VOP_CLOSE+0x132 vn_closefile(fffffd8068b09120,ffff8000357b1260) at vn_closefile+0x12b fdrop(fffffd8068b09120,ffff8000357b1260) at fdrop+0x121 closef(fffffd8068b09120,ffff8000357b1260) at closef+0x192 syscall(ffff80003c4000c0) at syscall+0xbd4 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x5f66f818f10, count: 2 ddb{1}> trace db_enter() at db_enter+0x25 panic(ffffffff83451c58) at panic+0x1e5 __assert(ffffffff8348ceed,ffffffff8349b4e7,3bb,ffffffff834c44a6) at __assert+0x29 refcnt_finalize(ffff8000367bf4f8,ffffffff83445af9) at refcnt_finalize+0x1db pppx_if_destroy(205b9a,ffff8000367bf4f0) at pppx_if_destroy+0x3d pppxclose(205b9a,2,2000,ffff8000357b1260) at pppxclose+0xa0 spec_close(ffff80003c3ffe60) at spec_close+0x417 VOP_CLOSE(fffffd8068af1b00,2,fffffd80097fd618,ffff8000357b1260) at VOP_CLOSE+0x132 vn_closefile(fffffd8068b09120,ffff8000357b1260) at vn_closefile+0x12b fdrop(fffffd8068b09120,ffff8000357b1260) at fdrop+0x121 closef(fffffd8068b09120,ffff8000357b1260) at closef+0x192 syscall(ffff80003c4000c0) at syscall+0xbd4 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x5f66f818f10, count: -13