last executing test programs: 2.69741417s ago: executing program 4 (id=5): ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7fc, 0xfffffffd, 0x7, 0x1, 0x4, 0x2, 0x3, 0x10, [{0x5, 0xfe3, 0xffffff26, 0x717fd}, {0xfffffffc, 0x300b7fe, 0x800002, 0xa}, {0x100806, 0x0, 0x3, 0x2}, {0x2, 0x0, 0x200, 0xfffffffc}, {0x4, 0x3, 0x80000000, 0x7}, {0xb3ca, 0x47fff, 0x14000009, 0xc}, {0x5, 0xbffffff5, 0x7, 0x6d}, {0x4, 0x8, 0xfdf0, 0x9}, {0x0, 0x7, 0x34, 0xa}, {0xfffffc04, 0x4, 0x8003, 0x1}, {0x100a44f, 0xfff9, 0xa38c000, 0xe1}, {0x80000cb, 0x2, 0x0, 0x9}, {0x3, 0x3, 0x15, 0x400}, {0x10008, 0xe2, 0xfffffff5, 0x2}, {0x5, 0x1, 0x24, 0x4}, {0x0, 0xd655, 0x960, 0x6}]}) r0 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x7e, 0x0) ioctl$DIOCSETTIMEOUT(r0, 0xc008441d, &(0x7f0000000b00)={0xf}) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1000, 0x0) r1 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7959) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) ioctl$FIONREAD(r1, 0xc020699c, &(0x7f00000001c0)) r2 = openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0x80000000, 0xffff63d6, 0xe9, 0x2, 0xa, 0x3, 0x1, 0x10, [{0x0, 0x80000002, 0x5, 0x80000002}, {0xe9, 0xe7, 0x1000002, 0x6}, {0x10cd5, 0x4baa, 0x9, 0x4}, {0x7, 0x10000, 0x4000000f, 0x8cce}, {0x4, 0x2000008, 0x6, 0x1}, {0x388d, 0xffffffff, 0x85, 0x5}, {0x2, 0xa00, 0x20004, 0xffffffff}, {0x208, 0xfffffffd, 0x5, 0xffffe2e8}, {0x10007, 0x1000, 0x8, 0x7ffd}, {0x3f8, 0xfc, 0x1ff, 0x12}, {0x82, 0x0, 0x8a3a0001, 0xfffffff4}, {0x10002, 0xfffffffe, 0x650, 0x200a68}, {0x401, 0x6, 0xa6ab, 0xa5}, {0x6, 0xfffffffe, 0x102}, {0xffffffff, 0x7, 0x81, 0x7}, {0x89be2, 0x1, 0x2, 0x3ff}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_emit_ethernet(0x67, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6000ca0000313afffe8000000000000000000000000000bb0000000000aa88009b78475fb3c544c31391a49eba17005000000000c1dd9ec1f80400e5a86c0947af7caea52562dc9e8ac7c5b8597689fa08f65c696e12496438ab294dd2"]) ioctl$TIOCSETA(r2, 0x80d04466, &(0x7f0000000140)={0x9, 0xa525, 0x4, 0x107492, "08e500", 0x20004118, 0x6}) 2.689382197s ago: executing program 1 (id=2): pipe2(&(0x7f0000000000), 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x2, 0x2, 0x0) mquery(&(0x7f0000ff4000/0x1000)=nil, 0x7f7fffffc000, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r2, 0xffff, 0x4, &(0x7f0000000080)=0x79, 0x2) setrlimit(0x8, &(0x7f0000000980)) sendmsg$unix(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="28000000ffff000001"], 0x28}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setitimer(0x2, &(0x7f0000000000)={{0x8001, 0x6}, {0x4309f6af, 0x8}}, &(0x7f0000000040)) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xfffffffffffffff4, &(0x7f0000000540)=""/51, 0x33}, 0x0) 2.668579804s ago: executing program 3 (id=4): r0 = socket(0x2, 0x4001, 0x0) poll(&(0x7f0000004a80), 0x41, 0x5) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x8, 0x0) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x33b9) r2 = open(&(0x7f0000000480)='./file0\x00', 0x2, 0x4ebfac6bbaf7980) kevent(r2, 0x0, 0x80, 0x0, 0x0, &(0x7f00000004c0)={0xfffffffbfffffff9}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r3 = open(&(0x7f0000000480)='./file0\x00', 0x800, 0x4ebfac6bbaf7900) ioctl$DIOCRTSTADDRS(r3, 0xc0a86b07, &(0x7f00000004c0)={{'./file0\x00', './file0\x00', 0x40, 0x3}, 0x0, 0x9, 0x0, 0xd, 0x8d, 0x4, 0x1, 0xc, 0x3}) ioctl$DIOCRTSTADDRS(r1, 0xc4504449, &(0x7f0000000100)={{'./file0\x00', './file0\x00', 0x11, 0x7}, &(0x7f0000000040)=[{@empty, '\x00', './file0\x00', 0xe9, 0x0, 0x18, 0x4, 0x1, 0xf2, 0xe8}, {@remote={0xac, 0x14, 0x0}, '\x00', './file0\x00', 0x2d, 0x5, 0x32, 0x14, 0x5, 0x5, 0x9}, {@multicast1, '\x00', './file0\x00', 0x66, 0x1, 0x1a, 0x3, 0xfc, 0x8, 0x2}], 0x5, 0x3, 0x7, 0x1, 0xfffffffa, 0x1000, 0x4, 0x10001}) sysctl$hw(&(0x7f00000001c0)={0x6, 0x2}, 0x2, &(0x7f0000000200)="dfce36536aed011d01441fcd059172a97327dc65f223dfc934549daea1c76b", &(0x7f0000000300)=0x1f, &(0x7f0000000400), 0x0) setsockopt(r0, 0x0, 0x7, &(0x7f0000000040), 0x0) 2.652010056s ago: executing program 7 (id=8): r0 = open(0x0, 0x10686, 0x8) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x5, 0x8010, r0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffff9c, 0xc01464a6, &(0x7f0000000000)={0x0, 0x9, 0x0, 0x4, 0x10001}) (async) setuid(0xee01) (async) stat(&(0x7f0000000040)='.\x00', 0x0) sysctl$kern(0x0, 0x0, &(0x7f0000000100)="71f91e3471ac", 0x0, 0x0, 0x0) (async) execve(0x0, &(0x7f0000000340)=[&(0x7f0000000100)='tap'], 0x0) writev(r0, &(0x7f0000000380)=[{&(0x7f0000000180)="819922832dad8a3d321c5aba1b76f90ffd9d8439df3f21045c9ae51ea75beab00d2a9eee5790711647a8a2947ee1620151b1c3e27160cfc11e5607c56ac78d378be35470918b1041660cf31046656130c79ba8f72f18dc8cabd3fd73f70a96955c02aed2225a0ed241976c5f44e8f67f10f07c2cc4580aeda0ea44b2bba622ebd700e915a75db77db33fefd3bf16b9641f5ab34fa6408f3b200a2c89b10dd4ac4abb223a93ef2620965b60bf366a09e794b6d2e194ce71e450f21ea7ec491c962943a39693be7784954cada9c85bc03d23510bb808d70bfe91d9664579a791ba0efa4ba4c6a6f169aba8eb9b48fcd8e6a8d83e836463e8ad64", 0xf9}, {&(0x7f0000000280)="1b7190a51e17e79a2a79ec17d2b0b29a112eb77d07a63cf21bab43a7a537b8e63c38378b38d66fd678305427de9c23397f05dfb88b65", 0x36}, {&(0x7f00000002c0)="8d90c0bf1ead0145cb41df23d6180deb0d92dc5aea54f4bbaf95c1f5330362fdc801c4528ba591fde24cd5e6b34b7039cd4997306578e360b3578755c7228ef2b9eef9cf708ca245db1e18be379583ca69af5b8e0a5df8cd2b5c90674ff527faaa4eb885a8dfbdf3a2727fbb73d601ec412644d8a5a899", 0x77}], 0x3) r2 = socket$inet(0x2, 0x3, 0x1) (async) openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7fc, 0xffffffff, 0x3, 0x101, 0x4, 0x1, 0x3, 0x10, [{0x5, 0xfe3, 0xffffff26, 0x717fd}, {0xfffffffd, 0x300b7fe, 0x800002, 0xa}, {0x100806, 0x0, 0x4, 0x2}, {0x2, 0x0, 0x200, 0xfffffffc}, {0x4, 0x3, 0x80000000, 0x7}, {0xb3ca, 0x47fff, 0x14000009, 0xc}, {0x5, 0xbffffff5, 0x7, 0x6d}, {0x2000a, 0x8, 0xfdf0, 0xb}, {0x0, 0x7, 0x34, 0xa}, {0xfffffc04, 0x4, 0x8003, 0x1}, {0x100a44f, 0xfff9, 0xa38c000, 0xe1}, {0x80000cb, 0x2, 0xc, 0x9}, {0x3, 0x9, 0x15, 0x400}, {0x10008, 0xe2, 0xfffffff5, 0x2}, {0x5, 0x1, 0x24, 0x4}, {0x0, 0xd655, 0x960, 0x6}]}) r3 = openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0x80000000, 0xffff63d6, 0xe9, 0x2, 0xa, 0x3, 0x1, 0x10, [{0x0, 0x80000002, 0x5, 0x80000002}, {0xe9, 0xe7, 0x1000002, 0x6}, {0x10cd5, 0x4baa, 0x9, 0x4}, {0x7, 0x10000, 0x4000000f, 0x8cce}, {0x4, 0x2000008, 0x6, 0x1}, {0x388d, 0xffffffff, 0x85, 0x5}, {0x2, 0xa00, 0x20004, 0xffffffff}, {0x208, 0xfffffffd, 0x5, 0xffffe2e8}, {0x10007, 0x1000, 0x8, 0x7ffd}, {0x3f8, 0xffffffcf, 0x1ff, 0x12}, {0x82, 0x0, 0x8a3a0001, 0xfffffff4}, {0x10002, 0xfffffffe, 0x650, 0x200a68}, {0x401, 0x6, 0xa6ab, 0xa5}, {0x6, 0xfffffffe, 0x102}, {0xffffffff, 0x7, 0x81, 0x7}, {0x89be2, 0x1, 0x2, 0x3ff}]}) (async) select(0x40, &(0x7f0000000180)={0xfffffffffffffffc, 0x44809e9d, 0xc, 0x9, 0x2009, 0x210, 0x4, 0x3}, 0x0, 0x0, 0x0) (async) r4 = kqueue() kevent(r4, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) (async) ioctl$FIONBIO(0xffffffffffffffff, 0x82907003, &(0x7f0000000140)=0x2) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) ioctl$DIOCSETTIMEOUT(r3, 0xc008441d, &(0x7f0000000ac0)={0x18, 0x6}) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000b00)) (async) ioctl$TIOCSETA(r3, 0x80d04466, &(0x7f0000000140)={0x9, 0xa525, 0x4, 0x107492, "08e500", 0x20004118, 0x6}) unveil(&(0x7f0000000000)='./file0/file0\x00', 0x0) ioctl$FIONREAD(r2, 0x80206979, &(0x7f0000000100)) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f00000000c0)={r1, 0x89, 0x0, 0x7, 0x3668}) (async) ioctl$DIOCMAP(r0, 0xc0106477, &(0x7f0000000140)={&(0x7f0000000080)='./file0\x00', r0, 0x1}) (async) setitimer(0x0, &(0x7f0000000040)={{0x7, 0x3}, {0x0, 0x4}}, &(0x7f00000003c0)) 2.384862507s ago: executing program 1 (id=10): mknod(&(0x7f0000000100)='./file0\x00', 0x40, 0x1e5f) r0 = open(&(0x7f0000000140)='./file0\x00', 0x80, 0xc7) r1 = getpid() getsid(r1) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) r3 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000600), 0x800, 0x0) r4 = fcntl$dupfd(r2, 0x0, r3) listen(r4, 0x68) r5 = open(&(0x7f0000000000)='./file0\x00', 0x9cab835cfdc52675, 0x0) ioctl$WSDISPLAYIO_LDFONT(r5, 0x8058574d, &(0x7f0000000180)={'./file0\x00', 0x7, 0x2, 0x5d7, 0x0, 0x6, 0x8658, 0x6, 0x0, 0x0, 0x1, 0x6}) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) pread(r0, &(0x7f0000000200)="cc236c92", 0x4, 0x5) 2.374189893s ago: executing program 2 (id=3): ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, &(0x7f0000000340)={0x1000, 0x0, {[0x7248, 0xfffffffffffbfffd, 0x478a, 0x1001, 0x8001, 0x20000000003, 0x5, 0xffffffffffffffff, 0xf0d4, 0x2eff, 0x2, 0x8, 0xfffffffffffc0004, 0x400000002000000, 0x7, 0x8001, 0x2, 0xce5], [0x5, 0x7fff, 0x8000000002000000, 0xb2f6, 0x5, 0x3, 0x6, 0x7ff, 0x0, 0x4], [0x200000005ad8, 0x0, 0x7, 0x8001, 0xdfffffffffffffff, 0x2, 0xfffffffffffffffe], [0x0, 0xcc9, 0xfffffffffffffff7, 0x80000006, 0x2, 0x6], [{0x0, 0x7, 0x4, 0xb961}, {0x9, 0x4, 0x1, 0x100000000}, {0x4, 0xffffffff, 0xfffffffe, 0x48}, {0x3, 0x100, 0x200008, 0xffffffffffffffff}, {0x0, 0xffffffff, 0x2, 0x1}, {0x0, 0x2106, 0x40040, 0x2000000000000000}, {0x4, 0x0, 0x1, 0x1}, {0x4, 0x8000003, 0x20000, 0xfff}], {0x8002, 0x6, 0x1008}, {0x8, 0x4, 0x1, 0x2}}}) (async) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x44, 0x4, 0x1, 0x410}]}) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0xd02) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BIOCSETIF(r0, 0xc0785101, &(0x7f0000000400)={'tap', 0x0}) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$DIOCRCLRTABLES(r1, 0xc450443c, &(0x7f00000001c0)={{'./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', './file0\x00', 0x48, 0xa}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x7, 0x80000000, 0x2, 0x5}) 2.362303357s ago: executing program 3 (id=11): ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0x80000000, 0xffff63de, 0x8000005, 0x5, 0x8, 0x3, 0xf7, 0x10, [{0x8, 0xb, 0xfffff116, 0x80000001}, {0x3, 0xffffffff, 0x4, 0xfff}, {0xe5, 0x4baa, 0x3, 0xd}, {0x6, 0xe2, 0x1, 0x100}, {0x3, 0xfffff800, 0x5, 0xffffffff}, {0x7890, 0x10fffb, 0x8, 0x2}, {0x3, 0x800, 0x3, 0xfffffffa}, {0x204, 0x7c, 0x27ffc, 0xffffe2e9}, {0x9, 0x1000, 0x6, 0x7fff}, {0x3, 0x11, 0x0, 0x8bfd}, {0xfffffffd, 0x0, 0xc, 0x6}, {0x9, 0x4, 0x800000, 0x5}, {0x401, 0x4, 0x40000b, 0x8000002}, {0x3, 0x6e2, 0x1, 0x6f5fc48f}, {0x3, 0x9, 0x3, 0x9}, {0x8ff9, 0x1, 0x100000, 0x400}]}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0xfffc, 0x1, 0xf0, 0x6800}, {0xc, 0x7, 0xf9, 0x7}, {0x6, 0x2, 0x1, 0x7ffff804}]}) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) sysctl$kern(0x0, 0x0, &(0x7f00000005c0)="c2a650000001931b45d3be05a9b9695e0acf8d1b", &(0x7f0000000000)=0x14, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x12d4, &(0x7f0000000200)=ANY=[]) r1 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$WSMOUSEIO_SETPARAMS(r1, 0x80105728, &(0x7f00000001c0)={&(0x7f0000000180)=[{0x88, 0x7ff}, {0x8b}], 0x2}) semctl$IPC_SET(0xffffffffffffffff, 0x0, 0x1, &(0x7f00000003c0)={{0x0, 0x0, 0x0, 0x0, 0xd2, 0x7, 0x0, 0x0, 0x2}, 0x0, 0x8, 0x0, 0x0, 0xb, 0x0, 0x7}) sysctl$kern(&(0x7f0000000200)={0x1, 0x45}, 0x2, &(0x7f0000000240)="71f51e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec3708294451dc1aa1a2a7688e83e7d26698dc05fec3cf24c2270d3e3c266c20cd4d43e7dee7058bac59653", &(0x7f0000000080)=0x44, 0x0, 0x0) 2.361291143s ago: executing program 4 (id=12): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0xc4) openat$wskbd(0xffffffffffffff9c, &(0x7f0000000180), 0x10, 0x0) sysctl$net_inet_udp(&(0x7f0000000000)={0x4, 0x2, 0x11, 0x2}, 0x4, &(0x7f0000000500), 0x0, 0x0, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) r0 = socket(0x18, 0x3, 0x0) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0x80000000, 0xffff63de, 0x5, 0x2, 0x8, 0x3, 0x44, 0x10, [{0x5, 0x3, 0xfffff115, 0x8}, {0x3, 0xffffffff, 0x6, 0xfff}, {0x1, 0x4baa, 0x3, 0x9}, {0x4, 0xe2, 0x0, 0x100}, {0x3, 0x2000007, 0x5, 0x84}, {0x7890, 0xffff, 0x8, 0x2}, {0x4, 0x800, 0x3, 0xfffffffa}, {0x207, 0xffffffff, 0x28000, 0xffffe2e9}, {0x9, 0x1000, 0x6, 0x7fff}, {0x5, 0x1, 0x6, 0x8bfd}, {0x800, 0x0, 0x8, 0x6}, {0x10000, 0x0, 0x800000, 0xa6a}, {0x401, 0x4, 0x400009, 0xa1}, {0x3, 0x6e2, 0x2, 0x6f5fc48f}, {0x3, 0x101, 0x3, 0x9}, {0x9be2, 0x1, 0x2, 0x400}]}) ioctl$FIONREAD(r0, 0xc0106924, &(0x7f00000001c0)) r1 = socket(0x18, 0x3, 0x0) ioctl$FIONREAD(r1, 0x8080691a, &(0x7f0000000100)) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000040)="9524", 0x2}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r2 = socket(0x24, 0x2, 0x0) sendto(r2, 0x0, 0x0, 0x40e, &(0x7f0000000040)=@un=@abs={0xc8, 0x0, 0x0, 0x3}, 0x40) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x89) rename(&(0x7f0000000200)='.\x00', &(0x7f0000000240)='./file0/file0\x00') 2.356796275s ago: executing program 5 (id=6): r0 = socket(0x2, 0x3, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1001, &(0x7f0000000100)=0x20000, 0x4) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x404, &(0x7f0000000000)={0x10, 0x2, 0x3, 0xe0000001}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) connect$unix(r0, &(0x7f0000000000), 0x10) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x800, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x10, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x10, 0x0) fcntl$lock(r2, 0x9, &(0x7f0000000040)={0x3, 0x2, 0x0, 0x20001fffffffd}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) fcntl$lock(r1, 0x7, &(0x7f0000000000)={0x2, 0x0, 0x6, 0x100000000000000}) write(r0, &(0x7f0000000080)="04bdfa5d1d2873c63e3534825ba166e2fea9aec43050146123339a346f731573d8d508753f95b7688ad48b8cf6bbca325cebc37fc4e1dd543dbe2da6dd", 0xa92c) syz_open_pts() 2.251912856s ago: executing program 6 (id=14): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000c00), 0x200, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000d40)={&(0x7f0000000c40)=[0x0, 0x0, 0x0], &(0x7f0000000c80)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000cc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000d00)=[0x0, 0x0, 0x0], 0x3, 0x5, 0x9, 0x3, 0xf2, 0x7, 0x5, 0x5}) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0xfffffffffffffffd, [{&(0x7f00000c7000/0x3000)=nil, &(0x7f0000ff6000/0x6000)=nil, 0x1}, {&(0x7f0000693000/0x2000)=nil, &(0x7f0000698000/0x1000)=nil, 0x4}, {&(0x7f00005fd000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x40}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x7e}, {&(0x7f0000f65000/0x3000)=nil, &(0x7f00005dd000/0x3000)=nil, 0x3}, {&(0x7f0000ff3000/0x1000)=nil, &(0x7f0000065000/0x4000)=nil, 0x2000000000000000}, {&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff2000/0x2000)=nil, 0x40000000000007}, {&(0x7f0000636000/0x2000)=nil, &(0x7f0000696000/0x2000)=nil, 0xffffffffffffffff}, {&(0x7f0000696000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x7}, {&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x8}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000634000/0x3000)=nil, 0xffffffff}, {&(0x7f00007f8000/0x2000)=nil, &(0x7f0000371000/0x1000)=nil, 0xf}, {&(0x7f00000c6000/0x2000)=nil, &(0x7f0000668000/0x4000)=nil}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x4}, {&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffa000/0x6000)=nil}, {&(0x7f0000ff1000/0x1000)=nil, &(0x7f00007f7000/0x4000)=nil, 0x1ff}], './file0/file0\x00', 0x2afe, 0x560, 0x0, 0x0, [0x0, 0x0, 0x3, 0x0, 0x8, 0x0, 0x0, 0x1ff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf312, 0x9, 0xfffffffe, 0x44, 0x0, 0x1ff, 0x2, 0x94fd, 0xffffb6dd, 0x0, 0x80000000, 0x0, 0xb27d, 0x0, 0x2, 0x7, 0x0, 0x0, 0x20000, 0x7, 0x1, 0x0, 0x0, 0x1000004, 0x0, 0x0, 0x0, 0xae9, 0x5, 0x0, 0x8, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b, 0xfffffffe, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9b8, 0x0, 0x9, 0x0, 0x0, 0x8000, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xa1a, 0x0, 0x0, 0x5, 0xb, 0xfffffffd, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x4, 0x5, 0x1000, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0xf22, 0x0, 0x0, 0x0, 0x0, 0xfffff000, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0xfffffffe, 0xffffff49, 0x9, 0x8000009, 0xfffffffb, 0x0, 0x6, 0xffc, 0x0, 0x4, 0x4, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8000003, 0x1, 0x7, 0xee, 0x0, 0x7, 0x0, 0x0, 0x0, 0x100, 0x200, 0x3, 0x3, 0x3, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x401, 0xfffffffd, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7, 0x3, 0x1000000, 0x0, 0x800000, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0xfffffffe, 0xfffffffe, 0x0, 0xfffffffd, 0x0, 0x9, 0x3ff, 0x8, 0x40, 0x80000000, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x7, 0x80, 0xfffffffa, 0x2, 0x1000000, 0x2, 0x20000006, 0x0, 0x0, 0x70000, 0x0, 0x0, 0x0, 0xfffffffc, 0x967, 0x2, 0x0, 0x0, 0x2, 0xffffffff, 0x8, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x40000, 0x800, 0x0, 0x1000006, 0x0, 0x0, 0x3f567283, 0x0, 0x0, 0x0, 0x7, 0xfffff800, 0x0, 0x80000001, 0x0, 0x10000, 0x4, 0x0, 0x0, 0xffffffff, 0x7, 0x0, 0x2, 0x7, 0x3fffff, 0x0, 0x0, 0x0, 0xffffffff, 0x4000000, 0xffffffff, 0x8, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x7ffffd, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x20, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0xfffff000, 0x0, 0xffc, 0x400000, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x7fff, 0xfff, 0x0, 0x0, 0xfffffeff, 0x1, 0x55e8, 0x80000000, 0x0, 0xb5b9, 0x0, 0xe434, 0x0, 0x0, 0x0, 0xfffffffd, 0xfdf7fffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xb, 0xfffffffc, 0x0, 0x7, 0x0, 0x7, 0x0, 0x3, 0x8, 0x0, 0x3, 0x0, 0x0, 0x10001, 0x0, 0x2, 0x0, 0x8001, 0xd, 0x0, 0x7, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x4000000, 0x3, 0x0, 0x8, 0x0, 0x8, 0x0, 0x3, 0x0, 0x5, 0x8, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0xfffffffd, 0x0, 0x0, 0x20f, 0x7, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xd7, 0x644f, 0x0, 0x8, 0x7a2, 0x6, 0x0, 0x80000000, 0x0, 0x0, 0x9, 0x5af1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0xfffffffd, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x0, 0xfffffffc, 0x5, 0x7c, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0xa, 0x2, 0x0, 0x3, 0x0, 0xfffffffd, 0x5, 0x800, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, 0x0, 0x0, 0x18, 0x0, 0x2, 0x103, 0x0, 0x0, 0x0, 0x6, 0x0, 0xef0, 0xfffffffe, 0x0, 0x100, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x4, 0xaa6, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xfffffffc, 0x5, 0x2, 0x40000007, 0x0, 0x4, 0x0, 0x200, 0x0, 0x20000, 0x0, 0xb0, 0xffffff5c, 0x0, 0x400000, 0xfffffffc, 0x398, 0x0, 0xc00, 0xfffffffd, 0x0, 0x0, 0x2, 0x2, 0x0, 0x403, 0xda2a, 0x2, 0xffff0001]}) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x2, 0xfffffffffffffff7, 0x3, 0x2000000000, 0x80000000004, 0x400000000009, 0x0, 0x4701}) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x2000, 0x4800) r1 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x9) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x2000, 0x4800) r2 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ioctl$TIOCFLUSH(r2, 0xc00c7006, &(0x7f0000000080)=0x100) sysctl$kern(&(0x7f00000000c0)={0x1, 0x29}, 0x2, 0x0, 0x0, 0x0, 0x0) ioctl$FIOASYNC(r1, 0xc0107008, &(0x7f00000000c0)) r3 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) mmap(&(0x7f000012a000/0x1000)=nil, 0x1000, 0x4, 0x11, 0xffffffffffffff9c, 0xc3f) ioctl$TIOCSETA(r3, 0xcd604404, &(0x7f00000001c0)={0x1, 0x2, 0x7, 0x2f, "201800", 0xfffffff9, 0x40000002}) r4 = shmget$private(0x0, 0x2000, 0x88, &(0x7f0000001000/0x2000)=nil) shmat(r4, &(0x7f0000001000/0x3000)=nil, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc0e99db6de761f86, 0x0) r5 = open(&(0x7f0000000080)='./file0\x00', 0x2, 0x0) ioctl$FIOASYNC(r5, 0x8004667d, &(0x7f0000000000)=0x200) shmat(r4, &(0x7f0000ffa000/0x2000)=nil, 0x2000) sysctl$net_inet_carp(&(0x7f0000000ac0)={0x4, 0x2, 0x70, 0x4}, 0x4, &(0x7f0000000b00)="4c5ef1dd22a34aee2faeaa973e8e1d91e4674dbaea58ef401afeb4d3e2441019eebae1d7a44ea1c3f8badbdc1e6a1da874aed90b3ca4029f68cf27ecca12f706687ce8f01a2425dda7ca740f4d2541717e090a19a031eb2ed18de6e144bf68dc32d45d2b97ecb9f61931443e41897c5388b19b", &(0x7f0000000b80)=0x73, &(0x7f0000000bc0)="ff8e8ad99897b348fee36ad30fd0da4fe3108f1fa0faa742360bfde9aee5c16977fcf117457dd1977e0b58", 0x2b) 2.251260772s ago: executing program 3 (id=15): r0 = socket$inet6(0x18, 0x1, 0x0) getpeername$inet6(r0, 0x0, 0x0) r1 = socket(0x18, 0x1, 0x0) connect(r1, &(0x7f0000000080)=@in6={0x1c, 0x18, 0x0, 0x40000006, "00000000000000000000000000000001", 0x7}, 0x1c) openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) 2.25098937s ago: executing program 5 (id=16): syz_emit_ethernet(0x7e, &(0x7f0000000540)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "5f6ad9", 0x48, 0x3a, 0x29, @rand_addr="000000000000000000020000008000", @local={0xfe, 0x80, '\x00', 0x0}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "06c33e", 0x0, 0x0, 0x1, @mcast1, @mcast2, [@dstopts={0x3a, 0x1, '\x00', [@padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x5}]}]}}}}}}}) 2.249337925s ago: executing program 3 (id=17): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f00000000c0)=@file={0xd, 0x1, './file0\x00'}, 0xa) r1 = socket$unix(0x1, 0x1, 0x0) chmod(&(0x7f0000000280)='./file0\x00', 0x3a) setuid(0xffffffffffffffff) connect$unix(r1, &(0x7f0000000080)=@file={0x5, 0x1, './file0\x00'}, 0xa) 966.117867ms ago: executing program 0 (id=19): r0 = syz_open_pts() ioctl$TIOCSETD(r0, 0x8004741b, &(0x7f0000000040)=0x9) r1 = syz_open_pts() ioctl$TIOCSETD(r1, 0x8004741b, &(0x7f0000000080)=0x9) ioctl$TIOCSETD(r1, 0x8004741b, &(0x7f0000000040)) r2 = open(&(0x7f0000000180)='./file0/../file0\x00', 0x1, 0x4ebfac6bbaf79c1) write(r2, &(0x7f00000000c0)="202000d8032c882b191a5c090b00bb0000ff4278ad535c2a415642003239c220bac5526f0000005624b77b530a", 0x2d) execve(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mknod(&(0x7f0000000000)='./bus\x00', 0x3a0914c44f7b202d, 0x504) r3 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) setreuid(0x0, 0xee01) ioctl$WSKBDIO_SETDEFAULTKEYREPEAT(r3, 0x800c5709, &(0x7f0000000000)={0xf, 0xb, 0x1}) r4 = open(&(0x7f0000000040)='./bus\x00', 0x10005, 0x10) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x80, 0x1, 0x4b, 0x407}, {0x7, 0x80, 0x0, 0x2}, {0x6, 0x7, 0x2, 0x2}]}) r5 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000340), 0x800, 0x0) ioctl$BIOCSETIF(r5, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) sysctl$kern(0x0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) accept$inet6(0xffffffffffffff9c, &(0x7f00000001c0), &(0x7f0000000200)=0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r6 = socket(0x18, 0x2, 0x0) setsockopt(r6, 0x1000000029, 0x2d2, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) sendto(r6, 0x0, 0x0, 0x80a, &(0x7f0000000240)=@in6={0x1c, 0x18, 0x2, 0xf4, "ffffffffff886f44000000000000e700", 0xffffffc0}, 0x1c) ioctl$BIOCSETF(r5, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x22, &(0x7f00000003c0)=ANY=[@ANYBLOB="b9aa08004500001400000004003a9078ac1400bbffffffff"]) r7 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$WSMOUSEIO_GETPARAMS(r7, 0x80105727, &(0x7f00000000c0)={&(0x7f0000000000)=[{0x20, 0x6}, {0x2, 0x40}], 0x2}) ioctl$TIOCSETD(r4, 0x8004741b, &(0x7f0000000080)=0x7) open(&(0x7f0000000040)='./bus\x00', 0x10005, 0x96) syz_emit_ethernet(0x66, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd605f6ad900303a2900000000000000000002000000800000fe80000000c302675d000000000000aa02009078000000006006c33e0000110cfe8000000000000000000000000000aa"]) open$dir(&(0x7f0000000000)='./file0\x00', 0x80, 0x22) 965.380814ms ago: executing program 1 (id=20): execve(&(0x7f0000000040)='.\x02/file0\x00', 0x0, 0x0) r0 = openat$wsmouse(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$FIONREAD(r0, 0x4004667f, &(0x7f0000000080)) ppoll(&(0x7f0000000340)=[{r0, 0x40}, {r0, 0x40}], 0x2, &(0x7f0000000380)={0x1, 0x5}, &(0x7f00000003c0)={0xc1d0}) r1 = msgget(0x3, 0x20) getsockopt$SO_PEERCRED(r0, 0xffff, 0x1022, &(0x7f0000000000)={0x0, 0x0}, 0xc) stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_pts() ioctl$TIOCSETD(r4, 0x8004741b, &(0x7f00000000c0)=0x5) r5 = semget(0x0, 0x1, 0x281) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x40000803) r7 = open(&(0x7f0000000080)='./file0\x00', 0x40000, 0x6c) setsid() ioctl$TIOCSCTTY(r7, 0x20007461) ioctl$TIOCSCTTY(r7, 0x20007461) getsockopt$sock_cred(r6, 0xffff, 0x1022, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x62}) r10 = syz_open_pts() close(r10) r11 = syz_open_pts() ioctl$TIOCSETAW(r11, 0x802c7415, &(0x7f0000000000)={0x1000, 0x7, 0x5, 0xffff7df8, "cecbdd8dffad001a000020000000000bffff00", 0x80000003, 0x5}) ioctl$TIOCSETD(r10, 0x8004745f, &(0x7f0000000000)=0x1d) setresgid(0x0, r9, 0x0) semctl$IPC_SET(r5, 0x0, 0x1, &(0x7f0000000780)={{0x0, r9, r8, r9, 0x8f, 0x9, 0x0, 0x0, 0x62}, 0x0, 0x6, 0x0, 0x0, 0x1, 0x0, 0x200000000005}) fstat(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r13 = getthrid() r14 = getthrid() truncate(&(0x7f0000000300)='.\x02/file0\x00', 0x1ff) msgctl$IPC_SET(r1, 0x1, &(0x7f0000000240)={{r2, r3, r8, r12, 0x8, 0x401, 0x0, 0x0, 0x4}, 0x0, 0x0, 0x7, 0x3, 0x8, r13, r14, 0x1, 0x0, 0x9, 0x0, 0x9}) 962.686959ms ago: executing program 3 (id=21): r0 = open(&(0x7f00000002c0)='.\x00', 0x8, 0x40) munmap(&(0x7f0000feb000/0x14000)=nil, 0x14000) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x9010, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f00000000c0)=@file={0xd, 0x1, './file0\x00'}, 0xa) ioctl$BIOCSETIF(0xffffffffffffff9c, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r4 = socket(0x2, 0x1, 0x0) ioctl$FIONREAD(r4, 0x802069b5, &(0x7f00000001c0)) listen(r3, 0x1) connect$unix(r3, &(0x7f0000000140)=@file={0x71, 0x1, './file1\x00'}, 0xa) read$audioctl(r2, &(0x7f0000000040)=""/36, 0x24) sysctl$net_inet6_ip6(&(0x7f0000000000)={0x4, 0x18, 0x29, 0x2b}, 0x4, 0x0, 0x0, &(0x7f0000000080)="01e60404", 0x4) sysctl$net_inet6_ip6(&(0x7f0000000180)={0x4, 0x18, 0x29, 0x12}, 0x4, &(0x7f0000000200)="114992d2ecd9abf5fe6b720f24df9322f54fbe1489129c3fcff4a17a62f1af3273726625ae0dfbd0a1796d3a881c3649718dbabe6352546e8cd22057d055ddb60781cb36d9c4bb72962d0da9843c60753fd5711ce3f30d0ec892c82cba960e0572949eaba101d9d9d215587407485db34d80b0cbccdcc555505337c250a236b0b13e8f5d0ba5df13046663f35c90347503", &(0x7f0000000300)=0x91, &(0x7f0000000340)="5cc419b66d06e67d5c589867dd5ab53d4af0d14281faae1a01a20a17ffd7a740c061aba8e1e236dfbfd1f20d58cb498ade71d09950d3da1d93c22c316f9fdd5525e2198482f4ddc15d4b6a1a3904de19cf3119013f48b3a471228fe6df41655b1b676f9b57b0ddd20a12bea6836399cdd647cd9125dbde6afac6cd87fa89f3d108b493c2b1d1e411e5cd603aa9779fd20b120a", 0x93) r5 = openat$tty(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) poll(&(0x7f0000000100)=[{r1, 0x104}, {r5, 0x20}, {r0, 0x1}, {r0, 0x40}, {r3, 0x1}, {r2, 0x80}], 0x6, 0x5) closefrom(r0) 948.805158ms ago: executing program 4 (id=22): chmod(&(0x7f0000000040)='.\x00', 0x35e) setuid(0xee01) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) socket$inet6(0x18, 0x2, 0x0) (async) r0 = socket$inet6(0x18, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0x1c, 0x18, 0x1, 0x4, "00000000010000000600", 0x62a4}, 0x1c) connect$inet6(r0, &(0x7f00000001c0)={0x1c, 0x18, 0x0, 0x8, "0000000082c935b9435ddb1500", 0x4001d7}, 0x1c) (async) connect$inet6(r0, &(0x7f00000001c0)={0x1c, 0x18, 0x0, 0x8, "0000000082c935b9435ddb1500", 0x4001d7}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xc, &(0x7f00000000c0)={0x1c, 0x18, 0x3, 0x100003ff, "00000000000009eebc9affffff000004", 0x10002}, 0x1c) unveil(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='r\x00') 947.427455ms ago: executing program 5 (id=23): setrlimit(0x8, &(0x7f0000000980)={0x42, 0x65}) (async, rerun: 64) r0 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) (rerun: 64) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "6a9900", 0x8, 0x3a, 0x69, @rand_addr="000000000000000000020000008000", @local={0xfe, 0x80, '\x00', 0x0}, {[], @icmpv6=@echo_reply={0x81, 0x0, 0x0, 0x4, 0x4}}}}}}) mknod(&(0x7f0000000e40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x100d02) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) (async) symlink(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async, rerun: 32) link(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (rerun: 32) link(&(0x7f0000000d00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) rename(&(0x7f0000000a80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) unlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x3) ioctl$TIOCSPGRP(r0, 0x40047477, &(0x7f0000000100)) r1 = syz_open_pts() close(r1) (async, rerun: 32) syz_open_pts() (async, rerun: 32) ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000000)={0x207, 0x1fffffd, 0xfffffa25, 0xa03d3a, "ab0609de4d0900000000000000ea000400", 0x1, 0x8}) writev(r1, &(0x7f0000002dc0)=[{&(0x7f00000009c0)="a15c7439f095adf2fd6be0d9c87520ef88c9b94b88f82d8b6198f76139e94e11e561b02e77cbc1f82179d3bf936d8a7c5967e6661f591cd97bb4a98d29dfeb677528ba046b24fa23a8fec08e404d2dfc4be4a843d69c18dbd960676377f16392c33ca0ffced2ff529a63fc73bcbc6328e99058e5d78c9a6ff7b97707aadeb6e3d4a03e40e4b88409", 0x88}], 0x1) syz_extract_tcp_res$synack(&(0x7f0000000040)={0x41424344}, 0x1, 0x0) (async) syz_extract_tcp_res(&(0x7f0000000080)={0x41424344}, 0x0, 0x1) syz_emit_ethernet(0x120, &(0x7f0000000240)={@random="66f73724af7e", @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x17, 0x112, 0x67, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x0}, @multicast1}, @tcp={{0x3, 0x1, r2, r3, 0x1, 0x0, 0x19, 0x1, 0x1, 0x0, 0xe, {[@sack_perm={0x4, 0x2}, @md5sig={0x13, 0x12, "f19a17e72e6acba4c7902bb9acba0732"}, @sack={0x5, 0x16, [0x8, 0x2, 0x8000, 0x8590, 0xfff]}, @nop, @timestamp={0x8, 0xa, 0x10001, 0xfffffffd}, @sack_perm={0x4, 0x2}, @window={0x3, 0x3, 0x1}, @md5sig={0x13, 0x12, "b28a71989abceeba48f3d73fc3c44c9b"}, @window={0x3, 0x3, 0x15}]}}, {"e697c58815125bf52af38431eb8b42982f5366bba342b126f9771fc7a473f807ef72c2747e03c7c708427a9b23a409544033eb204099479d17aab310c294ef4efefdf6c75d06a83ace9f91a9af27455fd1589cb32bfbe3cbd375bc542506e5344628e9cfd0211fcd8d7144354130fe267918823b0bd9ba6efab660c541410b62adffc24f7845e9163a23316cf2270f4ebd05d8a8f88ccb987278"}}}}}}) ioctl$TIOCSWINSZ(r1, 0x80087467, &(0x7f0000000140)={0x4, 0x7, 0x4000, 0x3}) 946.977298ms ago: executing program 6 (id=24): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x84, 0x0, 0xc8, 0x4}, {0x94, 0xcb, 0xfc, 0x22c1}, {0x6, 0x76, 0xf8, 0xfffff802}]}) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x0, 0x0}) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) sysctl$kern(0x0, 0x0, &(0x7f0000000240)="b53e1ba3ee211141ab1f3fd1fb32fc26ac7b0bf6673c654fbbdb57fcfbaf210806df93109a1400085fb05655b9", &(0x7f0000000000)=0x2d, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x91, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaab9aaaaaad09b0414bb6386dd60360000005b332586570aea5fc9c553517dd04fcce15c79ff02000000000000000000000000000101029078f900000060717d0000000000ff02000000010000000000000074df5085dbb6b04d4a1d3a7c1b5fabf8fea6ff526bd332930b31fab64a352dcb75d1eb74ff010000be00"/135]) r1 = socket$inet6(0x18, 0x1, 0x6) r2 = socket$inet6(0x18, 0x1, 0x6) bind$inet6(r2, &(0x7f0000000040)={0x1c, 0x18, 0x1, 0x8, "fffffff9000000000000000000000001", 0x7}, 0x1c) connect$inet6(r2, &(0x7f0000000240)={0x1c, 0x18, 0x0, 0x8, "0000913256e81c00", 0x3}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) bind$inet6(r1, &(0x7f0000000040)={0x1c, 0x18, 0x1, 0x4, "ffffffffffff00000000000000000001", 0x7}, 0x1c) r3 = socket(0x11, 0x3, 0x0) r4 = socket(0x18, 0x2, 0x0) setsockopt(r4, 0x1000000000029, 0xa, &(0x7f0000003680)='\x00\x00\x00\x00', 0x4) writev(0xffffffffffffffff, &(0x7f0000000700)=[{0x0}], 0x1) setrlimit(0x8, 0x0) syz_open_pts() r5 = openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2) ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0x8004667c, &(0x7f00000000c0)={0x5af, [{0x1, 0x90ed}, {0x1, 0x400}, {0x1, 0x101}, {0x3, 0x4}, {0x3, 0x100}, {0x3, 0x4}, {0x1, 0x2}, {0x3, 0xfffffffa}, {0x2, 0xef36}, {0x3, 0x6}, {0x3, 0xff}, {0x3, 0x10}, {0x2, 0x8}, {0x1, 0x14000000}, {0x1, 0x8002}, {0x2, 0x2}, {0x1, 0xffffff38}, {0x2}, {0x3, 0x1}, {0x2, 0x4670}, {0x1, 0x3}, {0x3, 0x2}, {0x3, 0x7}, {0x3, 0x38}, {0x2, 0x100}, {0x3, 0x65}, {0x2, 0xfffffff8}, {0x3, 0x10000}, {0x1, 0x2}, {0x3, 0xfffffffb}, {0x3, 0x4}, {0x1, 0x1}]}) mknod(0x0, 0x2000, 0x6381) r6 = open(0x0, 0x8000, 0x0) ioctl$FIONBIO(r6, 0x82907003, 0x0) ioctl$TIOCSETA(r5, 0xc030446d, &(0x7f0000000140)={0x9, 0xa525, 0x4, 0x107492, "08e500", 0x20004118, 0x6}) flock(r3, 0xc) setsockopt(r4, 0x1000000029, 0xc, &(0x7f0000000140), 0x14) sendto$unix(r4, &(0x7f0000000000)="b10005010000009f05003f0107000000211c13fecea79c5dfaf66e8d0300000000000000fdef3044d2d236acf20bf404be01000000f7c8cf5f8823297be1aa0504000051e2f0ad3ebbc25769a51f139b672f335c22db830c032bfa896443c32618210000720fd38bdb0000fd54c125191b1257aea8c500001602fbfe0c2300008abf090000000008e37193f834371205050052fbe03f49b11b7aaeb70000fca65361ba84913f0100000000000006000000", 0xb1, 0x0, 0x0, 0x0) 945.319397ms ago: executing program 7 (id=8): r0 = open(0x0, 0x10686, 0x8) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x5, 0x8010, r0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffff9c, 0xc01464a6, &(0x7f0000000000)={0x0, 0x9, 0x0, 0x4, 0x10001}) (async) setuid(0xee01) (async) stat(&(0x7f0000000040)='.\x00', 0x0) sysctl$kern(0x0, 0x0, &(0x7f0000000100)="71f91e3471ac", 0x0, 0x0, 0x0) (async) execve(0x0, &(0x7f0000000340)=[&(0x7f0000000100)='tap'], 0x0) writev(r0, &(0x7f0000000380)=[{&(0x7f0000000180)="819922832dad8a3d321c5aba1b76f90ffd9d8439df3f21045c9ae51ea75beab00d2a9eee5790711647a8a2947ee1620151b1c3e27160cfc11e5607c56ac78d378be35470918b1041660cf31046656130c79ba8f72f18dc8cabd3fd73f70a96955c02aed2225a0ed241976c5f44e8f67f10f07c2cc4580aeda0ea44b2bba622ebd700e915a75db77db33fefd3bf16b9641f5ab34fa6408f3b200a2c89b10dd4ac4abb223a93ef2620965b60bf366a09e794b6d2e194ce71e450f21ea7ec491c962943a39693be7784954cada9c85bc03d23510bb808d70bfe91d9664579a791ba0efa4ba4c6a6f169aba8eb9b48fcd8e6a8d83e836463e8ad64", 0xf9}, {&(0x7f0000000280)="1b7190a51e17e79a2a79ec17d2b0b29a112eb77d07a63cf21bab43a7a537b8e63c38378b38d66fd678305427de9c23397f05dfb88b65", 0x36}, {&(0x7f00000002c0)="8d90c0bf1ead0145cb41df23d6180deb0d92dc5aea54f4bbaf95c1f5330362fdc801c4528ba591fde24cd5e6b34b7039cd4997306578e360b3578755c7228ef2b9eef9cf708ca245db1e18be379583ca69af5b8e0a5df8cd2b5c90674ff527faaa4eb885a8dfbdf3a2727fbb73d601ec412644d8a5a899", 0x77}], 0x3) r2 = socket$inet(0x2, 0x3, 0x1) (async) openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7fc, 0xffffffff, 0x3, 0x101, 0x4, 0x1, 0x3, 0x10, [{0x5, 0xfe3, 0xffffff26, 0x717fd}, {0xfffffffd, 0x300b7fe, 0x800002, 0xa}, {0x100806, 0x0, 0x4, 0x2}, {0x2, 0x0, 0x200, 0xfffffffc}, {0x4, 0x3, 0x80000000, 0x7}, {0xb3ca, 0x47fff, 0x14000009, 0xc}, {0x5, 0xbffffff5, 0x7, 0x6d}, {0x2000a, 0x8, 0xfdf0, 0xb}, {0x0, 0x7, 0x34, 0xa}, {0xfffffc04, 0x4, 0x8003, 0x1}, {0x100a44f, 0xfff9, 0xa38c000, 0xe1}, {0x80000cb, 0x2, 0xc, 0x9}, {0x3, 0x9, 0x15, 0x400}, {0x10008, 0xe2, 0xfffffff5, 0x2}, {0x5, 0x1, 0x24, 0x4}, {0x0, 0xd655, 0x960, 0x6}]}) r3 = openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0x80000000, 0xffff63d6, 0xe9, 0x2, 0xa, 0x3, 0x1, 0x10, [{0x0, 0x80000002, 0x5, 0x80000002}, {0xe9, 0xe7, 0x1000002, 0x6}, {0x10cd5, 0x4baa, 0x9, 0x4}, {0x7, 0x10000, 0x4000000f, 0x8cce}, {0x4, 0x2000008, 0x6, 0x1}, {0x388d, 0xffffffff, 0x85, 0x5}, {0x2, 0xa00, 0x20004, 0xffffffff}, {0x208, 0xfffffffd, 0x5, 0xffffe2e8}, {0x10007, 0x1000, 0x8, 0x7ffd}, {0x3f8, 0xffffffcf, 0x1ff, 0x12}, {0x82, 0x0, 0x8a3a0001, 0xfffffff4}, {0x10002, 0xfffffffe, 0x650, 0x200a68}, {0x401, 0x6, 0xa6ab, 0xa5}, {0x6, 0xfffffffe, 0x102}, {0xffffffff, 0x7, 0x81, 0x7}, {0x89be2, 0x1, 0x2, 0x3ff}]}) (async) select(0x40, &(0x7f0000000180)={0xfffffffffffffffc, 0x44809e9d, 0xc, 0x9, 0x2009, 0x210, 0x4, 0x3}, 0x0, 0x0, 0x0) (async) r4 = kqueue() kevent(r4, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) (async) ioctl$FIONBIO(0xffffffffffffffff, 0x82907003, &(0x7f0000000140)=0x2) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) ioctl$DIOCSETTIMEOUT(r3, 0xc008441d, &(0x7f0000000ac0)={0x18, 0x6}) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000b00)) (async) ioctl$TIOCSETA(r3, 0x80d04466, &(0x7f0000000140)={0x9, 0xa525, 0x4, 0x107492, "08e500", 0x20004118, 0x6}) unveil(&(0x7f0000000000)='./file0/file0\x00', 0x0) ioctl$FIONREAD(r2, 0x80206979, &(0x7f0000000100)) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f00000000c0)={r1, 0x89, 0x0, 0x7, 0x3668}) (async) ioctl$DIOCMAP(r0, 0xc0106477, &(0x7f0000000140)={&(0x7f0000000080)='./file0\x00', r0, 0x1}) (async) setitimer(0x0, &(0x7f0000000040)={{0x7, 0x3}, {0x0, 0x4}}, &(0x7f00000003c0)) 932.152251ms ago: executing program 6 (id=25): r0 = socket(0x18, 0x3, 0x0) sendmmsg(r0, &(0x7f00000000c0)={{&(0x7f0000000040)=@in6={0x1c, 0x18, 0x1, 0x6, "ff0116ff000000000000000000000004", 0x2}, 0x1c, 0x0, 0x0, 0x0}}, 0x38, 0x600) r1 = kqueue() kevent(r1, &(0x7f0000000000), 0x96, &(0x7f00000003c0), 0xfffa4961, 0x0) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$BIOCSETF(r2, 0x80104267, &(0x7f0000000040)={0x4, &(0x7f0000000080)=[{0x3, 0x7, 0x1}, {0x95a4, 0x7f, 0x5, 0x400040}, {0x0, 0x6, 0xff, 0x4}, {0x6, 0xf7, 0x2, 0x3}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0xd02) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BIOCSETIF(r3, 0xc0785101, &(0x7f0000000400)={'tap', 0x0}) 931.006565ms ago: executing program 4 (id=26): poll(&(0x7f0000000ac0)=[{0xffffffffffffff9c}], 0x20000000000000d7, 0x887e) r0 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) ioctl$VMM_IOC_CREATE(r0, 0xca605601, &(0x7f0000000b00)={0x10, 0x3, [{&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x7fff}, {&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0xa}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x7fffffff}, {&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x6}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff5000/0xb000)=nil, 0x7}, {&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x98c8}, {&(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x9f76}, {&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff7000/0x3000)=nil, 0x9}, {&(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff8000/0x1000)=nil, 0x6}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x9}, {&(0x7f0000ff6000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0xcd}, {&(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0xd9a}, {&(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x1}, {&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x619}, {&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x6}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, 0x9}], './file0\x00', 0x7a43, 0x7fffffff, 0x101, 0x200, [0x1, 0x3, 0xffffffff, 0x4, 0x1e5, 0xf6a3, 0xf7d, 0x9, 0x28f5, 0xfffffffe, 0x9, 0x6, 0x8, 0x8, 0x0, 0x8, 0x3, 0x0, 0x9, 0x689, 0x3, 0x9, 0xe0000000, 0x7, 0x8, 0x3, 0xf0, 0x7, 0x9, 0xe, 0x9, 0x6, 0x3, 0xb0b, 0x6, 0x4, 0x4, 0x3, 0x4, 0x9, 0xfffffffd, 0xeed5, 0x80000001, 0x800, 0x3, 0x4, 0x1, 0x1ff, 0x9, 0x9, 0x8, 0x3, 0x5, 0x1, 0x0, 0x0, 0x3, 0x5, 0x8, 0x8, 0xeb, 0x2, 0x0, 0x5b, 0x763, 0x6, 0x7, 0xcfa5, 0x7, 0x5, 0x9, 0xcb, 0x7fff, 0xffffffff, 0xeec, 0xffffff81, 0x3, 0xc3e, 0x8, 0x35, 0x9, 0x3, 0x8, 0xc4, 0xe, 0x2, 0x0, 0x4, 0x401, 0x3, 0x400, 0x5, 0x64f, 0x8, 0x7b, 0x6, 0x6, 0x1ff, 0x1000, 0x0, 0x3, 0x7fffffff, 0xe, 0x2, 0x0, 0x7ff, 0x5, 0x8, 0x9, 0x7, 0x200, 0x6, 0xfffff383, 0x3ff, 0x4, 0x4, 0x4, 0x7, 0x4, 0x3, 0xc, 0x7, 0xfffffffe, 0x9, 0x200, 0x81, 0x0, 0x1, 0x4, 0x2, 0x0, 0x3ff, 0xe, 0x1, 0x1ff, 0x200, 0xe, 0x73, 0x8, 0x99, 0x7ff, 0x8, 0xfffff800, 0x7fffffff, 0xffffff80, 0x100, 0x3, 0x0, 0x0, 0x3, 0x10000, 0x9, 0x7, 0x4, 0x2, 0x3, 0x80000001, 0x3, 0x2, 0x1, 0x7fffffff, 0x2, 0x8, 0x214, 0x3, 0x3, 0x6, 0x4dd25bef, 0x4, 0x4e, 0x4, 0x400, 0x9, 0x0, 0x4, 0x9, 0x2, 0x87, 0x100, 0x21, 0x9, 0x1, 0xf68, 0x6, 0xffffff81, 0x80000001, 0x5, 0xc, 0x1000, 0x5, 0x10001, 0x6dc4, 0x9, 0x3, 0xfffffffe, 0x10000, 0x80000001, 0x1, 0x7, 0x401, 0x7e, 0x1, 0x8, 0x7ff, 0xb, 0x6, 0x3, 0x3, 0x5, 0xcd4, 0x5, 0x4, 0x200, 0x6, 0x4, 0x4, 0x9, 0x6, 0x75e5, 0x1, 0x6, 0xb2b, 0x0, 0xfffffbff, 0x9, 0xde, 0xf4287f, 0xffffff81, 0x1, 0x0, 0x0, 0x9, 0x6, 0x7, 0x2, 0x10001, 0x3, 0x4, 0x0, 0xff, 0x8, 0x9, 0x1, 0x6, 0x728000, 0x3, 0x3, 0x40, 0x1, 0x7, 0x3, 0x2, 0x10, 0x9, 0x1ff, 0x6a, 0x9, 0x16, 0xffffffff, 0x752, 0x46c, 0x10, 0x3, 0x5, 0x769, 0x8, 0x101, 0x8, 0x8, 0x4, 0xa3, 0x9, 0x4, 0x5, 0x563, 0x200, 0x101, 0x10001, 0x4, 0x10, 0x104, 0x2, 0xa9d, 0x9, 0x0, 0x6, 0xfffffffa, 0x8, 0x8, 0x401, 0x6, 0x7fffffff, 0x0, 0x2611, 0x1, 0x7a0e, 0x9dbe, 0xdbd1, 0xfffffff8, 0x0, 0x686, 0x5, 0x7, 0xa, 0x7, 0x6, 0xff, 0x9, 0xe, 0xe58, 0x1, 0x1, 0x8, 0x8, 0x3, 0x2, 0x8, 0x7c2, 0x80, 0xfb, 0x4025, 0x4, 0x9, 0xfffffeff, 0x8, 0x8, 0xff, 0x3, 0xa, 0x2, 0x4, 0x75f5, 0x65, 0x0, 0x3, 0x8, 0xfffff536, 0x682395ed, 0x7, 0x2, 0xfffffffa, 0x3, 0x8, 0xa, 0x2, 0x400, 0x15d2, 0x3, 0x40, 0xffffffad, 0x3, 0x40, 0x9, 0x4, 0x5, 0x1789, 0x4, 0x8001, 0x5, 0x2, 0x3ff, 0x0, 0xff, 0xd, 0xe30, 0x3, 0xc0, 0x1000, 0x4, 0xfffffffa, 0x8, 0x4, 0x8, 0xf, 0x1ff, 0x3, 0x7, 0x26f, 0x9, 0x8f9a, 0xc04d, 0xffffffc7, 0x509, 0x3, 0xe, 0xffff7fff, 0x7, 0x81, 0xfffffffe, 0x0, 0x7fff, 0x1, 0x6, 0x6, 0x5, 0xffffffff, 0x5, 0xff, 0x0, 0x80, 0x6, 0x6, 0x8, 0x10000, 0xd39, 0x3, 0x800, 0x5, 0xe, 0x4, 0x3427107c, 0x7, 0x9, 0xcc9, 0x4, 0x1, 0x2, 0x9, 0x2, 0x64, 0x2, 0x8, 0x82c, 0x7, 0x10001, 0x7, 0x1, 0x4c92, 0x1, 0x2, 0x0, 0x5, 0x2, 0x7, 0xb4b7, 0x4, 0xc, 0x6, 0x40, 0x7, 0xc, 0x9be, 0x36, 0x1, 0x2, 0xed, 0x7, 0x3, 0x8, 0x2, 0x80, 0x9, 0x9, 0x80, 0x101, 0x6, 0x0, 0x1, 0x4, 0x6, 0x4, 0xffffff01, 0x1, 0x0, 0x6, 0x4, 0x4, 0xf, 0x8, 0x1, 0x7, 0x4, 0xe9, 0x7, 0x5, 0x9, 0xab07, 0x0, 0x5, 0x1, 0x3, 0x73e7, 0x101, 0x1, 0x4, 0x7, 0x8, 0x7, 0x7, 0x6, 0x0, 0x2, 0x2, 0x6a, 0x3354, 0x1, 0x7, 0x2, 0x1, 0x8001, 0x9, 0x5, 0xdab, 0x7fffffff, 0x7, 0x9, 0xffffffff, 0x8, 0x7, 0x3ff, 0x6, 0xc]}) setrlimit(0x8, &(0x7f0000000980)={0x45, 0x3fb}) r1 = syz_open_pts() close(r1) syz_open_pts() (async) syz_open_pts() writev(r1, &(0x7f0000000e80)=[{&(0x7f0000000a40)="0f", 0x1}], 0x1) (async) writev(r1, &(0x7f0000000e80)=[{&(0x7f0000000a40)="0f", 0x1}], 0x1) unveil(0x0, &(0x7f0000000300)='c\x00') (async) unveil(0x0, &(0x7f0000000300)='c\x00') 698.401763ms ago: executing program 0 (id=27): r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$DIOCRGETASTATS(r0, 0xc4504447, &(0x7f0000000600)={{'./bus\x00', './bus\x00', 0x0, 0x2}, 0x0, 0xa0, 0x0, 0x5, 0x2, 0x206, 0x8, 0x2, 0x1000ce6}) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$DIOCXBEGIN(r1, 0xc0104451, &(0x7f0000000040)={0x0, 0x408, 0x0}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = geteuid() lchown(&(0x7f0000000100)='./bus\x00', r2, 0x0) r3 = geteuid() setuid(r3) r4 = getuid() setresuid(r2, r3, r4) r5 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0xf94a14e19cec2761, 0x0) sysctl$kern(&(0x7f00000000c0)={0x1, 0x9}, 0x2, &(0x7f0000000100)="b3cb9e4c", &(0x7f0000000140)=0x4, &(0x7f0000000180)="1f441c33", 0x4) ioctl$TIOCSETA(r5, 0xc0104453, &(0x7f0000000040)={0x3, 0x408, 0x6, 0x10070, "456000004fcb420865abbf000200000000000001", 0xc, 0x7}) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x40046402, 0x0) closefrom(0xffffffffffffffff) fchdir(0xffffffffffffffff) semop(0xffffffffffffffff, &(0x7f0000000000)=[{0x4, 0x2, 0x800}], 0x1) r6 = semget(0x3, 0x4, 0x200) ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x0, [{0x3, 0x7}, {0x2, 0xff03}, {0x1}, {0x0, 0x800}, {0x3}, {0x5}, {0x0, 0xaa59}, {0x3, 0xb59}, {0x1, 0x1}, {0x3, 0x100}, {0x1, 0x1}, {0x3, 0x80000000}, {0x2, 0x3}, {}, {0x0, 0x5}, {0x1, 0xffffffff}, {0x3, 0x1}, {0x1}, {0x3, 0xfffffffe}, {0x3, 0x7ff}, {0xbb08c0840fa32129, 0x6}, {0x0, 0x1}, {0x1}, {0x0, 0xf208}, {0x2, 0x1000000}, {0x1, 0x1}, {0x0, 0x1ff}, {0x0, 0x200}, {0x2, 0xffffffff}, {0x0, 0x9}, {0x1, 0x5}, {0x3}]}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x37}, 0x4, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000140)=0x2c, 0x0, 0x2e) semctl$GETVAL(r6, 0x2, 0x5, &(0x7f0000000040)=""/110) pipe(&(0x7f0000000000)={0xffffffffffffffff}) fcntl$setstatus(r7, 0x4, 0x40) mkdirat(r7, &(0x7f00000000c0)='./bus\x00', 0x40) 512.166645ms ago: executing program 0 (id=28): mknod(&(0x7f0000000040)='./file0\x00', 0x6000, 0xe02) open(&(0x7f0000000080)='./file0\x00', 0x8, 0x100) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0xd2) sendmsg$unix(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="10000000ffff000001"], 0x10, 0x4}, 0x40a) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmmsg(r1, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x0, 0x0}}, 0x93, 0x400) utimensat(r0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={{0x9, 0xfffffffffffffff7}, {0x314f, 0x9}}, 0x0) openat$vnd(0xffffffffffffff9c, &(0x7f0000000240), 0x40, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) link(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000e40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000580)='./file2\x00') r2 = socket(0x11, 0x3, 0x0) sendto$unix(r2, &(0x7f0000000300)="b100051300000400000000b107000000331c13fedca10500fef96ec0c72fd3357ae30200004e3039d2d236acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad0900000020000c009b672f4d335c223e7d0c032bfa896443842102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b1257aea8c500002002fbfe0c230000a37f50b60900000008e371a3f83400"/177, 0xb1, 0x0, 0x0, 0x0) rename(&(0x7f0000000200)='./file2\x00', &(0x7f0000000600)='./file0\x00') r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0xe8, 0x0) setrlimit(0x8, &(0x7f0000000980)) socket$inet(0x18, 0x3, 0x102) r4 = fcntl$dupfd(r3, 0x3, 0xffffffffffffffff) ioctl$FIONREAD(r4, 0x8020690c, &(0x7f0000000080)) open(&(0x7f0000000180)='./file0\x00', 0x80, 0x0) 510.866587ms ago: executing program 3 (id=29): ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x65}) (async) r0 = syz_open_pts() close(r0) (async) ioctl$FIONREAD(r0, 0x4004667f, &(0x7f0000000100)) (async) r1 = syz_open_pts() ioctl$WSMUXIO_REMOVE_DEVICE(0xffffffffffffffff, 0x80085762, &(0x7f0000000040)={0x1}) (async) r2 = socket(0x18, 0xc003, 0x3a) setsockopt(r2, 0x29, 0xa, &(0x7f0000000580)="ef1e30bc184b680887eab9173f9d71d4bcc72f404aaf471c7fdaa02dbe80707d2edf7f45fe7aa301bb520e928b7a0fd13d2414ecf8009df120f9a6a3aba63e02ef6477170753f29005bff31647dab6006131dfa15cf8590a869f674d42d3967d7ef871441c6a042485ad259ed2ddbdeada275b98c0b6402518bbcfea12533d3411618b90b91a5e8ce9e47b644b2ec2187fd81cd9393c585df18e3b22916dca914c44816d608cf5308769136ea851299d36a85e4728e04906000000bd178ebc1b81e2c78615ede3d2950b2cc5e7e2f397a872fde107663c0f56aa83caca39c23ce858191548abc23e5814fce0e9712059484fc491fc4f000000000000000000", 0xff) (async) setsockopt$inet6_MRT6_ADD_MIF(r2, 0x29, 0x67, &(0x7f00000000c0)={0x0, 0x1, 0x10, 0x1}, 0xc) setrlimit(0x8, &(0x7f0000000080)={0xe, 0x51}) (async) ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000340)={0x8000006, 0x8, 0xfffffffe, 0xffffff8f, "08ed95990000000000000000ffffffffffffffe6", 0x800b, 0x8}) r3 = open(&(0x7f0000000140)='./file0\x00', 0x78e, 0x61) (async) setgid(0xffffffffffffffff) setgroups(0x0, 0x0) setuid(0xee01) (async) unveil(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='x\x00') (async) sysctl$kern(&(0x7f0000000000)={0x1, 0x4d}, 0x2, &(0x7f0000000180)="5f2a1ff1", &(0x7f00000000c0)=0x4, &(0x7f0000001180), 0x4) (async) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (async) r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0xbe, 0x0) ioctl$BIOCSETIF(r4, 0x8020426c, &(0x7f0000000200)={'tap', 0x0}) (async) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x87, 0x1, 0xb, 0x4}, {0x4c, 0xc8, 0xfc, 0x8}, {0x6, 0xf, 0xf5, 0xf7fff802}]}) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) ioctl$BIOCSETWF(r4, 0x80104277, &(0x7f0000000040)={0x28, 0x0}) (async) write(r4, &(0x7f0000000280)="f81ad2e4004800009db6a1cb4973", 0xe) (async) readv(r1, &(0x7f0000000040)=[{&(0x7f0000000000)=""/18, 0x12}], 0x1) (async) ioctl$AUDIO_SETPAR(r3, 0xc0404125, &(0x7f0000000200)={0x1, 0x1, 0x8, 0x3, 0x1, 0x0, 0x4, 0x4, 0xc, 0x465b}) ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) socket$inet(0x2, 0x8003, 0xfc) 510.274591ms ago: executing program 6 (id=30): mknod(&(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0xd02) mknodat(0xffffffffffffff9c, &(0x7f0000000800)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x801) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0x800000004, [{&(0x7f000014c000/0x4000)=nil, &(0x7f00000b7000/0x3000)=nil, 0x200007fffffffffe}, {&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000124000/0x3000)=nil, 0x7fffffffffffffff}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000795000/0x2000)=nil, 0xb93a}, {&(0x7f00001da000/0x4000)=nil, &(0x7f00006d4000/0x2000)=nil, 0xfdfffffffffffff9}, {&(0x7f0000312000/0x2000)=nil, &(0x7f0000025000/0x3000)=nil, 0x4001}, {&(0x7f000064c000/0x4000)=nil, &(0x7f0000095000/0x3000)=nil, 0x1}, {&(0x7f0000123000/0x3000)=nil, &(0x7f000014d000/0x4000)=nil, 0x4}, {&(0x7f00002f3000/0x3000)=nil, &(0x7f000063b000/0x2000)=nil, 0xffffffffffffffff}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000026000/0x4000)=nil, 0x6}, {&(0x7f00001dc000/0x1000)=nil, &(0x7f00001db000/0x3000)=nil, 0xc6}, {&(0x7f0000392000/0x1000)=nil, &(0x7f00003a6000/0x3000)=nil, 0x1000}, {&(0x7f00006b8000/0x4000)=nil, &(0x7f0000116000/0x1000)=nil, 0x6}, {&(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x51c}, {&(0x7f000068b000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0xfffffffffffffff9}, {&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0xc0}, {&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000754000/0x4000)=nil, 0x4000009e}], './file0\x00', 0xfffffffa, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4339, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffc, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x96, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xfffffffc]}) r0 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) mknod(&(0x7f0000000400)='./file0\x00', 0x2000, 0x5c4a) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) poll(&(0x7f0000000100)=[{r1, 0x117}], 0x1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$TIOCSETA(r0, 0xc1084425, &(0x7f0000000040)={0x3, 0x0, 0xfffffffe, 0x5, "210d000000020000616161610000004021800600", 0x2000000, 0x5}) symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) link(&(0x7f0000000b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') unveil(&(0x7f0000000100)='./file2\x00', &(0x7f0000000140)='w\x00') 509.865107ms ago: executing program 7 (id=31): ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) (async) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1000, 0x0) (async) r0 = semget$private(0x0, 0x4, 0x0) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000200)={{0x0, 0x0, 0x0, 0xffffffffffffffff, 0xc933289095ae6031, 0x7, 0x0, 0x0, 0xf518}, 0x0, 0x1000, 0x0, 0x0, 0x9, 0x0, 0x2}) (async) setreuid(0x0, 0xee01) (async, rerun: 64) semctl$GETPID(r0, 0x3, 0x4, 0x0) (async, rerun: 64) r1 = open(&(0x7f0000000100)='./file0\x00', 0x70e, 0x0) ioctl$FIONREAD(r1, 0x80206910, &(0x7f00000001c0)) 105.12806ms ago: executing program 0 (id=32): ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, &(0x7f00000000c0)={0xf, 0x8000148, {[0x1000000000003, 0x4, 0xc45397f, 0x8, 0x5, 0x6, 0x0, 0x40000000000, 0x7, 0x400000001, 0x200, 0x8000000000091f, 0x8, 0x2000180, 0x0, 0x0, 0x76, 0xffffffffffffbff7], [0x10, 0x9, 0x1004, 0x7, 0x1, 0x1, 0x9, 0x3, 0xffffffffffffffff, 0x1], [0x1, 0x18000000000, 0x6, 0x800000000b, 0x10000, 0x210, 0x1000002], [0x100000000, 0x9, 0xfffffffffefff5d9, 0x9, 0x3, 0x8000000], [{0x0, 0x2007, 0xfffffbfb, 0x7}, {0x0, 0x9c, 0x4, 0x338}, {0x2, 0x7fffffff, 0x0, 0x7f}, {0x8, 0xfffffc00, 0x2, 0xfffffffff7fffffd}, {0x804, 0x7f, 0xffffffff, 0xb}, {0x1f, 0x80000000, 0x0, 0x4}, {0xf38, 0x1, 0x203, 0x7fffffff}, {0xff, 0xfffd, 0x8001, 0x2}], {0x8, 0x3, 0x405, 0x8}, {0x6, 0xffffbfc1, 0x41c, 0x7}}}) r0 = socket(0x2, 0x1, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffff00000000000008004500003000000000002c907800000020e0001002"]) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) sysctl$hw(&(0x7f00000000c0)={0x6, 0x1d}, 0x2, 0x0, 0x0, &(0x7f00000001c0)="53ec", 0x2) syz_extract_tcp_res$synack(&(0x7f0000000300)={0x41424344}, 0x1, 0x0) syz_emit_ethernet(0x102, &(0x7f0000000440)={@random="b1012d071b64", @random="28555e60dd48", [], {@ipv6={0x86dd, {0xd, 0x6, "0257bb", 0xcc, 0xf0, 0x6b, @mcast2, @mcast1, {[@dstopts={0x32, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0x801}, @jumbo={0xc2, 0x4, 0x4ab5}, @padn={0x1, 0x1, [0x0]}, @jumbo={0xc2, 0x4, 0xa}, @pad1, @pad1]}, @hopopts={0x2f, 0x1, '\x00', [@jumbo={0xc2, 0x4, 0x3}, @ra={0x5, 0x2, 0x204a}]}], @tcp={{0x2, 0x2, r1, 0x41424344, 0x0, 0x0, 0xc, 0x8, 0x8001, 0x0, 0x7, {[@md5sig={0x13, 0x12, "258862144cd1d2505c9236c35a8f6730"}, @mss={0x2, 0x4, 0x7}, @mss={0x2, 0x4, 0x797}]}}, {"b687c890ab1b8f203fb1300a03724b5bf7d0418cd36b0fefcb94c96ad4c4b24c9383e86a3478edec6e4cbe097ca696f11787510989bf1a589d5459e113bba1b9796b895ca8e5370816025dda654fc90c59aed14570267404f1b734d42294eb13f1aaec51"}}}}}}}) syz_emit_ethernet(0xee, &(0x7f0000000580)={@broadcast, @broadcast, [{}], {@ipv4={0x800, {{0x5, 0x4, 0x3, 0x7, 0xdc, 0x65, 0x7, 0x6, 0x70, 0x0, @multicast2, @loopback}, @udp={{0x0, 0x0, 0x8}, {"eecbc398e1ad96d870ee60dfabd4116b131745d49dd27eca974ddea5bdfa5543365748fb82998921c9aec944f4ea1f4172108301a32354c4a6280ad432c7b1a4aeae6af1ddab3f60cb2fe084b203dff12153bc10c8b1985182d214a2d099d7240b0b66890b5610e0e18964f58191d49a85cbd5db0fc8fbcd55e410cf97ed3cf27c4bbdb3528c745f174b6e31a63e3c640b0a3316dbfb0beaecd1fe4b222d8b25c9a42820ad677e8b9de3f84c027e2c4cfd76b608dcc08239575d037d1e2fc88c"}}}}}}) ioctl$FIONREAD(r0, 0x8040691a, &(0x7f00000001c0)) sysctl$vm_swapencrypt(&(0x7f0000000040)={0x7, 0x2}, 0x3, 0x0, 0x0, 0x0, 0x0) sysctl$net_inet_ip(&(0x7f0000000000)={0x4, 0x2, 0x0, 0xf}, 0x4, 0x0, 0x0, 0x0, 0x0) sysctl$kern(&(0x7f0000000040)={0x1, 0x5a}, 0x3, &(0x7f00000000c0)="3bf2ee74e747c82dad6eb2a36fa755e1a3925fe49afca7e63b52fa65ccaa74d6e6b85b6cdced70357ef201f97842b1068dca31553fa2d7031f38c03e56ad0e24dfc4f97b8b7f81499647e6e7725765d61436c85e43c15d12a78cb8c57ddde87021d7b685507fd3e0652f35e45bdaa3afd86c4fe557433e4c2b632de71c951516adff26aa2e48b45f8ce92bcefd3eceefabee7e3ebe806fdb4f6af569ae94b5d127", &(0x7f0000000080)=0xffa8, &(0x7f0000000340)="5a67923ef0cb189971421989ebcff78831a7581e2f27caa362f1363042efb27688b2c899220fb2fe37e467d974592496856ca7b78060998608c2f952e43bc0bf11555cc5cb0fe17b2ec1be389871829bfe10dd4c4d2c8f9da2bd2868fd86791dc0ddc4fa89a217458bdaed31003fdc3a7323189ba3ccbad6c8af17516e4557f61ad20180000000000000125f568ca7d3396b9057255f381855110eb3a673713716cdf010ddfa7977f92cf061ad125ca670353b45d53aae196b00271f9d3452b523b3dea22d6027625614312183724b71c7eb02083a410c1c99fa455013521f98686e472b70b560f7021f567adf4d", 0x4) 104.870817ms ago: executing program 2 (id=3): ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, &(0x7f0000000340)={0x1000, 0x0, {[0x7248, 0xfffffffffffbfffd, 0x478a, 0x1001, 0x8001, 0x20000000003, 0x5, 0xffffffffffffffff, 0xf0d4, 0x2eff, 0x2, 0x8, 0xfffffffffffc0004, 0x400000002000000, 0x7, 0x8001, 0x2, 0xce5], [0x5, 0x7fff, 0x8000000002000000, 0xb2f6, 0x5, 0x3, 0x6, 0x7ff, 0x0, 0x4], [0x200000005ad8, 0x0, 0x7, 0x8001, 0xdfffffffffffffff, 0x2, 0xfffffffffffffffe], [0x0, 0xcc9, 0xfffffffffffffff7, 0x80000006, 0x2, 0x6], [{0x0, 0x7, 0x4, 0xb961}, {0x9, 0x4, 0x1, 0x100000000}, {0x4, 0xffffffff, 0xfffffffe, 0x48}, {0x3, 0x100, 0x200008, 0xffffffffffffffff}, {0x0, 0xffffffff, 0x2, 0x1}, {0x0, 0x2106, 0x40040, 0x2000000000000000}, {0x4, 0x0, 0x1, 0x1}, {0x4, 0x8000003, 0x20000, 0xfff}], {0x8002, 0x6, 0x1008}, {0x8, 0x4, 0x1, 0x2}}}) (async) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x44, 0x4, 0x1, 0x410}]}) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0xd02) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BIOCSETIF(r0, 0xc0785101, &(0x7f0000000400)={'tap', 0x0}) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$DIOCRCLRTABLES(r1, 0xc450443c, &(0x7f00000001c0)={{'./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', './file0\x00', 0x48, 0xa}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x7, 0x80000000, 0x2, 0x5}) 104.715219ms ago: executing program 6 (id=33): sendmsg(0xffffffffffffffff, &(0x7f0000000e00)={0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000000080)="00803a20", 0x4}], 0x1, 0x0}, 0x2) syz_emit_ethernet(0x3e, &(0x7f0000001c80)={@local, @empty, [], {@ipv6={0x86dd, {0x2, 0x6, "f6734a", 0x8, 0x68, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, @rand_addr="28809527e7323067129f93e18c1f3e98", {[], @udp={{0x1, 0x1, 0x8}}}}}}}) sysctl$net_inet_ip(&(0x7f00000000c0)={0x4, 0x11, 0x0, 0x13}, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xfffffffffffffe3c, 0x0, 0x37) 104.51052ms ago: executing program 7 (id=34): r0 = open(&(0x7f0000000080)='./file0\x00', 0x8000, 0x0) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000240)={'tap', 0x0}) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000280)={0x3, &(0x7f0000000000)=[{0x94, 0x1, 0x1, 0x9}, {0xc, 0xd, 0x6, 0x3003}, {0x991e, 0x24, 0x2, 0x5}]}) syz_emit_ethernet(0x4e, &(0x7f0000000000)=ANY=[]) write(r0, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x8, 0x2000000000000004}, 0x0, 0x0, 0x0) ioctl$DIOCXBEGIN(0xffffffffffffffff, 0xc0104451, 0x0) 103.101916ms ago: executing program 0 (id=35): mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x3) unveil(&(0x7f00000000c0)='./file0\x00', 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)="76e5eac907f9ccf7a251ceddcec7d6aa45cffe2c63a56077123a276d3ba4e9d17eb3eb5db12a3783a8e0620d357de1fe04fa9465b5bd1286e9624dec06a00c222f", 0x41}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) unveil(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000300)='r\x00') syz_open_pts() r0 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0xd6) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$BIOCSBLEN(r1, 0xc0044266, &(0x7f0000000180)=0x2) ioctl$TIOCCONS(r0, 0x80047462, &(0x7f0000000080)=0x1) r2 = socket$inet(0x2, 0x3, 0x0) setsockopt$inet_opts(r2, 0x0, 0x6d, 0x0, 0x0) r3 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) fcntl$dupfd(r3, 0xc, r0) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x3) (async) unveil(&(0x7f00000000c0)='./file0\x00', 0x0) (async) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)="76e5eac907f9ccf7a251ceddcec7d6aa45cffe2c63a56077123a276d3ba4e9d17eb3eb5db12a3783a8e0620d357de1fe04fa9465b5bd1286e9624dec06a00c222f", 0x41}], 0x1) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) unveil(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000300)='r\x00') (async) syz_open_pts() (async) open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0xd6) (async) openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) (async) ioctl$BIOCSBLEN(r1, 0xc0044266, &(0x7f0000000180)=0x2) (async) ioctl$TIOCCONS(r0, 0x80047462, &(0x7f0000000080)=0x1) (async) socket$inet(0x2, 0x3, 0x0) (async) setsockopt$inet_opts(r2, 0x0, 0x6d, 0x0, 0x0) (async) openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) fcntl$dupfd(r3, 0xc, r0) (async) 3.238708ms ago: executing program 1 (id=36): r0 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7959) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0xfffffffffffffffd, [{&(0x7f00000c7000/0x3000)=nil, &(0x7f0000ff6000/0x6000)=nil, 0x1}, {&(0x7f00004d7000/0x2000)=nil, &(0x7f0000698000/0x1000)=nil, 0x3}, {&(0x7f00005fd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x1}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff7000/0x3000)=nil, 0x80}, {&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff1000/0x1000)=nil, 0xc}, {&(0x7f00004f8000/0x2000)=nil, &(0x7f000068e000/0x12000)=nil, 0x2000000000000000}, {&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff2000/0x2000)=nil, 0x7}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000696000/0x2000)=nil, 0xffffffffffffffff}, {&(0x7f000013f000/0x2000)=nil, &(0x7f0000445000/0x3000)=nil, 0xfffffffffffffffd}, {&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000445000/0x4000)=nil, 0x8}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000695000/0x1000)=nil, 0xffffffff}, {&(0x7f00007f8000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x43}, {&(0x7f00000c6000/0x2000)=nil, &(0x7f0000668000/0x4000)=nil}, {&(0x7f000051f000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x4}, {&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffa000/0x6000)=nil}, {&(0x7f0000ff1000/0x1000)=nil, &(0x7f0000010000/0x3000)=nil, 0x1}], './file0\x00', 0x0, 0x0, 0x0, 0xfffffffe, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1000, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x70e, 0x0) ioctl$FIONREAD(r1, 0x80206910, &(0x7f00000001c0)) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@local, @broadcast, [], {@arp={0x8035, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x3, @empty, @multicast1, @random="a9658df5182d", @rand_addr=0x7}}}}) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000000)="7f454c4602011a49b70cb710aa950000000a52e92a24d18fcf8fd1f9794ffa08bb11bafcdc24ff4c5d0b5c7b1ad1a2ec434c50019377fa4300b046e521", 0x3d}, {&(0x7f0000000100)="1551e6", 0x3}], 0x2) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 2.159773ms ago: executing program 0 (id=37): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x0, &(0x7f0000000200)}) ioctl$WSMOUSEIO_SETPARAMS(0xffffffffffffffff, 0x80105727, &(0x7f00000000c0)={&(0x7f0000000040)=[{0x20, 0x7ff}, {0x26, 0x8807}, {0x45, 0x8}, {0x100, 0x200}, {0x24, 0x5}, {0x22, 0x6}], 0x6}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0xffac) getresuid(&(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)) open(&(0x7f0000000180)='./file0\x00', 0x80000000000206, 0x160) ktrace(&(0x7f0000000040)='./file0\x00', 0x4, 0x20003916, 0xffffffffffffffff) select(0x40, &(0x7f0000000000)={0x8, 0x1000, 0x0, 0x4d, 0x0, 0x0, 0x10000, 0x2}, 0x0, &(0x7f0000000080)={0x3, 0x0, 0xb, 0x0, 0x18ae, 0x9, 0x0, 0x2}, 0x0) r0 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f00000009c0), 0x80, 0x0) getresuid(&(0x7f0000000e80), &(0x7f0000000ec0), &(0x7f0000000f00)) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0xfffffffffffffffd, [{&(0x7f00000c7000/0x3000)=nil, &(0x7f0000ff6000/0x6000)=nil, 0x1}, {&(0x7f00004d7000/0x2000)=nil, &(0x7f00000fc000/0x3000)=nil, 0x3}, {&(0x7f00005fd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x1}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff7000/0x3000)=nil, 0x80}, {&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff1000/0x1000)=nil, 0xe}, {&(0x7f00004f8000/0x2000)=nil, &(0x7f000068e000/0x12000)=nil, 0x2000000000000000}, {&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff2000/0x2000)=nil, 0x7}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000696000/0x2000)=nil, 0xffffffffffffffff}, {&(0x7f000013f000/0x2000)=nil, &(0x7f0000445000/0x3000)=nil, 0xfffffffffffffffd}, {&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000445000/0x4000)=nil, 0x8}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, 0xffffffff}, {&(0x7f00007f8000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x43}, {&(0x7f00000c6000/0x2000)=nil, &(0x7f0000668000/0x4000)=nil}, {&(0x7f000051f000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x4}, {&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffa000/0x6000)=nil}, {&(0x7f0000ff1000/0x1000)=nil, &(0x7f0000010000/0x3000)=nil, 0x1}], './file0\x00', 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x540d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000100)={0x0, 0x1b, &(0x7f0000000240)=[{&(0x7f0000000140)=""/218}, {&(0x7f00000002c0)=""/70}, {&(0x7f0000000340)=""/106}], 0x100000000000039d, 0x0, 0x24}, 0x0) read(r0, &(0x7f0000000000)=""/12, 0xc) r2 = openat$pf(0xffffffffffffff9c, &(0x7f0000001000), 0x10000, 0x0) r3 = open(&(0x7f0000000140)='./file0\x00', 0x10686, 0x8) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x5, 0xa010, r3, 0x0) ioctl$DIOCRCLRTSTATS(r2, 0xc4504441, &(0x7f0000002100)={{'./file1\x00', './file1/file0\x00', 0x29, 0x2}, &(0x7f0000001200)=[{'./file0\x00', './file1/file0\x00', 0x0, 0x2}], 0x428, 0x1, 0x1, 0x4, 0x9, 0x8, 0x12, 0x8}) mmap(&(0x7f0000206000/0xc000)=nil, 0xc000, 0x4, 0x12, r0, 0x2) recvmsg(r1, &(0x7f0000000e40)={&(0x7f0000000ac0)=@un=@file={0x0, 0x0, ""/98}, 0x64, &(0x7f0000000d40)=[{&(0x7f0000000b40)=""/144, 0x90}, {&(0x7f0000000c00)=""/212, 0xd4}, {&(0x7f0000000d00)=""/18, 0x12}], 0x3, &(0x7f0000000d80)=""/165, 0xa5}, 0x802) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (async) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x0, &(0x7f0000000200)}) (async) ioctl$WSMOUSEIO_SETPARAMS(0xffffffffffffffff, 0x80105727, &(0x7f00000000c0)={&(0x7f0000000040)=[{0x20, 0x7ff}, {0x26, 0x8807}, {0x45, 0x8}, {0x100, 0x200}, {0x24, 0x5}, {0x22, 0x6}], 0x6}) (async) sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0xffac) (async) getresuid(&(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)) (async) open(&(0x7f0000000180)='./file0\x00', 0x80000000000206, 0x160) (async) ktrace(&(0x7f0000000040)='./file0\x00', 0x4, 0x20003916, 0xffffffffffffffff) (async) select(0x40, &(0x7f0000000000)={0x8, 0x1000, 0x0, 0x4d, 0x0, 0x0, 0x10000, 0x2}, 0x0, &(0x7f0000000080)={0x3, 0x0, 0xb, 0x0, 0x18ae, 0x9, 0x0, 0x2}, 0x0) (async) openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f00000009c0), 0x80, 0x0) (async) getresuid(&(0x7f0000000e80), &(0x7f0000000ec0), &(0x7f0000000f00)) (async) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0xfffffffffffffffd, [{&(0x7f00000c7000/0x3000)=nil, &(0x7f0000ff6000/0x6000)=nil, 0x1}, {&(0x7f00004d7000/0x2000)=nil, &(0x7f00000fc000/0x3000)=nil, 0x3}, {&(0x7f00005fd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x1}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff7000/0x3000)=nil, 0x80}, {&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff1000/0x1000)=nil, 0xe}, {&(0x7f00004f8000/0x2000)=nil, &(0x7f000068e000/0x12000)=nil, 0x2000000000000000}, {&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff2000/0x2000)=nil, 0x7}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000696000/0x2000)=nil, 0xffffffffffffffff}, {&(0x7f000013f000/0x2000)=nil, &(0x7f0000445000/0x3000)=nil, 0xfffffffffffffffd}, {&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000445000/0x4000)=nil, 0x8}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, 0xffffffff}, {&(0x7f00007f8000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x43}, {&(0x7f00000c6000/0x2000)=nil, &(0x7f0000668000/0x4000)=nil}, {&(0x7f000051f000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x4}, {&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffa000/0x6000)=nil}, {&(0x7f0000ff1000/0x1000)=nil, &(0x7f0000010000/0x3000)=nil, 0x1}], './file0\x00', 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x540d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) (async) recvmsg(r1, &(0x7f0000000100)={0x0, 0x1b, &(0x7f0000000240)=[{&(0x7f0000000140)=""/218}, {&(0x7f00000002c0)=""/70}, {&(0x7f0000000340)=""/106}], 0x100000000000039d, 0x0, 0x24}, 0x0) (async) read(r0, &(0x7f0000000000)=""/12, 0xc) (async) openat$pf(0xffffffffffffff9c, &(0x7f0000001000), 0x10000, 0x0) (async) open(&(0x7f0000000140)='./file0\x00', 0x10686, 0x8) (async) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x5, 0xa010, r3, 0x0) (async) ioctl$DIOCRCLRTSTATS(r2, 0xc4504441, &(0x7f0000002100)={{'./file1\x00', './file1/file0\x00', 0x29, 0x2}, &(0x7f0000001200)=[{'./file0\x00', './file1/file0\x00', 0x0, 0x2}], 0x428, 0x1, 0x1, 0x4, 0x9, 0x8, 0x12, 0x8}) (async) mmap(&(0x7f0000206000/0xc000)=nil, 0xc000, 0x4, 0x12, r0, 0x2) (async) recvmsg(r1, &(0x7f0000000e40)={&(0x7f0000000ac0)=@un=@file={0x0, 0x0, ""/98}, 0x64, &(0x7f0000000d40)=[{&(0x7f0000000b40)=""/144, 0x90}, {&(0x7f0000000c00)=""/212, 0xd4}, {&(0x7f0000000d00)=""/18, 0x12}], 0x3, &(0x7f0000000d80)=""/165, 0xa5}, 0x802) (async) 238.288µs ago: executing program 7 (id=38): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) ioctl$BIOCSRTIMEOUT(r0, 0x8010426d, &(0x7f0000000100)={0x0, 0x6f}) ioctl$BIOCSBLEN(r0, 0xc0044266, &(0x7f00000000c0)=0x34) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000580)={'tap', 0x0}) syz_emit_ethernet(0x76, &(0x7f0000000040)=ANY=[]) pread(r0, &(0x7f0000000600)="e7077b6629e0397383eaeac9193e79db7bbbad786e7bbb921dff532158d0b49a3e7de9f2d8fdefa9e6fddc16bcd369b9fc28dc5e", 0x34, 0x5) r1 = socket$inet(0x2, 0x1000, 0x5) bind$inet(r1, &(0x7f0000000000)={0x10, 0x2, 0x3}, 0x10) listen(r1, 0x7fff) ioctl$DIOCGETQUEUES(0xffffffffffffffff, 0xc148445e, &(0x7f0000000080)={0x9, 0x0, {'\x00', './file0\x00', './file0\x00', './file0\x00', {{0x8e1b, 0x9}, {0x8, 0x6}}, {{0x9, 0xfffffffa}, {0xfff, 0x4}, 0x1}, {{0x9, 0x7fff}, {0x9, 0x7ff}, 0xfff}, {0x1, 0x2, 0xffffff1c, 0x8}, 0x0, 0xfffffffb, 0x8, 0x10001, 0x1ab}}) r2 = socket$inet6(0x18, 0x2, 0x0) futimes(r2, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6381) fchflags(0xffffffffffffffff, 0x10000) select(0x40, &(0x7f0000000180)={0xfffffffffffffffc, 0x44809e9d, 0xc, 0x9, 0x2009, 0x210, 0x4, 0x3}, 0x0, 0x0, 0x0) r3 = kqueue() kevent(r3, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) r4 = open(&(0x7f0000000080)='./file0\x00', 0x10, 0x100) ioctl$AUDIO_MIXER_DEVINFO(r4, 0xc32c4d02, &(0x7f0000000240)={0x9d, {"1665c66ebc05832c275c766d8b6a513d", 0x6}, 0x1, 0x40, 0x9, 0x7, "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"}) ioctl$FIONBIO(r4, 0x82907003, &(0x7f0000000140)=0x2) r5 = socket(0x18, 0x3, 0x0) setsockopt$sock_int(r5, 0xffff, 0x800, &(0x7f0000000080)=0x4, 0x4) setsockopt(r5, 0x1000000029, 0x24, &(0x7f0000000000)="5ab7776a", 0x4) syz_emit_ethernet(0x66, &(0x7f0000000500)={@random="8f6f77ede655", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "5f6ad9", 0x30, 0x37, 0x0, @rand_addr="8fd8b0e5602493ff1f88b029e0ad0c35", @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "06c32e", 0x6, 0x89, 0x0, @local={0xfe, 0x80, '\x00', 0x0}, @loopback}}}}}}}) recvmmsg(r5, &(0x7f00000000c0)={{0x0, 0x0, 0x0, 0x0, 0x0}, 0x5}, 0x38, 0x1040, 0x0) setsockopt$sock_int(r1, 0xffff, 0x1025, &(0x7f0000000200)=0x1, 0x4) ioctl$FIONBIO(r4, 0x82907003, &(0x7f0000000140)=0x1) syz_emit_ethernet(0x3a, &(0x7f00000000c0)={@local, @random="aa6d6500", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x4, 0x2c, 0x67, 0x0, 0x0, 0x6, 0x0, @multicast2, @local={0xac, 0x14, 0x0}}, @tcp={{0x3, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x8200, 0x0, 0xfffc, {[@sack={0x5, 0x2}, @generic={0x2, 0x2}]}}}}}}}) r6 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$BIOCSETWF(r6, 0x80104277, &(0x7f00000000c0)={0x4, &(0x7f0000000040)=[{0x9, 0x3, 0x7, 0x8000}, {0xb, 0x0, 0x3, 0x80}, {0xc, 0x9, 0x5, 0x100}, {0x1, 0x7, 0xd, 0x14}]}) 0s ago: executing program 6 (id=39): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x800, 0x0) fcntl$lock(r0, 0x8, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x20001fffffffd}) flock(r0, 0x2) fcntl$lock(r0, 0x9, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x100000000}) r1 = socket(0x18, 0x3, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) ioctl$FIONREAD(r1, 0xc0106924, &(0x7f00000001c0)) setitimer(0x3, &(0x7f0000000140)={{0x9e41, 0x5}, {0x40c64290, 0x4000018}}, 0x0) ioctl$FIONREAD(r1, 0x8080691a, &(0x7f0000000100)) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@broadcast, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x20, 0x1c, 0x0, 0x0, 0x80, 0x1, 0x0, @broadcast, @rand_addr=0xdfffffff}, @icmp=@generic={0xb, 0x0, 0x0, "4cf9f5a3"}}}}}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.205' (ED25519) to the list of known hosts. pckbd_enable: command error witness: lock order reversal: 1st 0xffffffff838e6288 pf_lock (pf_lock) 2nd 0xffffffff8393fd40 netlock (netlock) lock order [1] pf_lock (pf_lock) -> [2] netlock (netlock) #0 rw_do_enter_write+0xba #1 uvn_io+0x54c #2 uvn_get+0x31d #3 uvm_fault_lower_io+0x2ce #4 uvm_fault_lower+0x28d #5 uvm_fault+0x274 #6 kpageflttrap+0x2f4 #7 kerntrap+0x19d #8 alltraps_kern_meltdown+0x7b #9 _copyin+0x5b #10 pfioctl+0x13ff #11 VOP_IOCTL+0xac #12 vn_ioctl+0xf8 #13 sys_ioctl+0x674 #14 syscall+0xbd4 #15 Xsyscall+0x128 lock order [2] netlock (netlock) -> [1] pf_lock (pf_lock) #0 rw_do_enter_write+0xba #1 pfi_attach_ifgroup+0x2a #2 if_addgroup+0x2f8 #3 if_attachsetup+0xcf #4 if_attach+0x6d #5 vio_attach+0x1853 #6 config_attach+0x449 #7 virtio_pci_attach+0x52c #8 config_attach+0x449 #9 pci_probe_device+0x8e5 #10 pci_enumerate_bus+0x368 #11 config_attach+0x449 #12 acpipci_attach_bus+0x381 #13 acpipci_attach_busses+0x93 #14 mainbus_attach+0x304 #15 config_attach+0x449 #16 cpu_configure+0x47 #17 main+0x4c7 Stopped at db_enter+0x25: addq $0x8,%rsp ddb{1}> ddb{1}> set $lines = 0 ddb{1}> set $maxwidth = 0 ddb{1}> show panic the kernel did not panic ddb{1}> show kasan No such command ddb{1}> trace db_enter() at db_enter+0x25 witness_checkorder(ffffffff8393fd40,9,0) at witness_checkorder+0x10d1 rw_do_enter_write(ffffffff8393fd28,0) at rw_do_enter_write+0xba uvn_io(fffffd005e46bf10,ffff8000383e17b8,1,202,0) at uvn_io+0x54c uvn_get(fffffd005e46bf10,1000,ffff8000383e1888,ffff8000383e186c,0,1,1f0df61f52e10eb5,1) at uvn_get+0x31d uvm_fault_lower_io(ffff8000383e1aa0,ffff8000383e1ad8,ffff8000383e1920,ffff8000383e1908) at uvm_fault_lower_io+0x2ce uvm_fault_lower(ffff8000383e1aa0,ffff8000383e1ad8,ffff8000383e1a20) at uvm_fault_lower+0x28d uvm_fault(fffffd000b1cb3d0,200000001000,0,1) at uvm_fault+0x274 kpageflttrap(ffff8000383e1c50,200000001200) at kpageflttrap+0x2f4 kerntrap(ffff8000383e1c50) at kerntrap+0x19d alltraps_kern_meltdown() at alltraps_kern_meltdown+0x7b _copyin() at _copyin+0x5b pfioctl(14900,c4504441,ffff8000015e8000,1,ffff80002a22a7e0) at pfioctl+0x13ff VOP_IOCTL(fffffd006a9f4700,c4504441,ffff8000015e8000,1,fffffd00097fd820,ffff80002a22a7e0) at VOP_IOCTL+0xac vn_ioctl(fffffd006ceed030,c4504441,ffff8000015e8000,ffff80002a22a7e0) at vn_ioctl+0xf8 sys_ioctl(ffff80002a22a7e0,ffff8000383e2800,ffff8000383e2750) at sys_ioctl+0x674 syscall(ffff8000383e2800) at syscall+0xbd4 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xcb3b7b3acd0, count: -18 ddb{1}> show registers rdi 0 rsi 0 rbp 0xffff8000383e1570 rbx 0 rdx 0 rcx 0xffff80002a22a7e0 rax 0xffff80002999dff0 r8 0xffff8000383e1450 r9 0x8080808080808080 r10 0x1f7302cb1574f247 r11 0x49713a3b853f9547 r12 0xfffffd00040c22c0 r13 0xfffffd00048b1ce0 r14 0x3 r15 0xffffffff8352bf72 substchar+0x80c9 rip 0xffffffff8181cf75 db_enter+0x25 cs 0x8 rflags 0x246 rsp 0xffff8000383e1560 ss 0x10 db_enter+0x25: addq $0x8,%rsp ddb{1}> show proc PROC (syz-executor) tid=11920 pid=19857 tcnt=2 stat=onproc flags process=0 proc=4000000 runpri=32, usrpri=62, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff80002a22b770,0xffff80002a22bcb0 process=0xffff800045ff44d8 user=0xffff8000383dd000, vmspace=0xfffffd000b1cb3d0 estcpu=12, cpticks=0, pctcpu=0.0, user=0, sys=0, intr=0 ddb{1}> ps PID TID PPID UID S PRLAGS PFLAGS WAIT COMMAND 33666 285869 6395 0 2 0 0 syz-executor 7499 449373 26220 0 2 0x100000 0 sh 26220 509867 81062 0 3 0x100002 0x88 sigsusp sh 10395 290164 45553 0 2 0 0 syz-executor 10395 70263 45553 0 3 0 0x4000080 lockf syz-executor 89420 479463 37150 0 2 0 0 syz-executor 89420 202115 37150 0 3 0 0x4000080 fsleep syz-executor 19857 236722 41016 0 2 0 0 syz-executor *19857 11920 41016 0 7 0 0x4000000 syz-executor 46719 462690 74732 0 2 0x100002 0 sh 86431 223696 92019 0 2 0x2 0 syz-executor 74732 181500 92019 0 3 0x2 0x80 wait syz-executor 81062 327747 92019 0 3 0x2 0x80 wait syz-executor 6395 455366 92019 0 3 0x2 0x80 nanoslp syz-executor 37150 298123 92019 0 3 0x2 0x80 nanoslp syz-executor 45553 452639 92019 0 3 0x2 0x80 nanoslp syz-executor 32087 53911 92019 0 3 0x2 0x80 nanoslp syz-executor 41016 504865 92019 0 3 0x2 0x80 nanoslp syz-executor 92019 13875 45850 0 3 0x2 0x80 kqread syz-executor 45850 253521 79786 0 3 0x100002 0x88 sigsusp ksh 79786 225148 25194 0 3 0x10 0x88 kqread sshd-session 25194 46151 56293 0 3 0x12 0x80 kqread sshd-session 46485 282878 1 0 3 0x100003 0x80 ttyin getty 56293 182494 1 0 3 0 0x88 kqread sshd 67652 355123 63520 74 3 0x1100012 0x80 bpf pflogd 63520 521943 1 0 3 0 0x80 sbwait pflogd 10334 243504 12796 73 3 0x1100010 0x80 kqread syslogd 12796 126837 1 0 3 0x100002 0x80 sbwait syslogd 72958 445957 1 0 3 0x100000 0x80 kqread resolvd 42254 394250 55152 77 3 0x100012 0x80 kqread dhcpleased 10593 345793 55152 77 3 0x100012 0x80 kqread dhcpleased 55152 402609 1 0 3 0 0x80 kqread dhcpleased 16751 385946 0 0 2 0x14000 0x40000200 smr 93369 375843 0 0 2 0x14000 0x200 zerothread 41816 18236 0 0 3 0x14000 0x200 aiodoned aiodoned 75962 449648 0 0 3 0x14000 0x200 syncer update 56447 327752 0 0 3 0x14000 0x200 cleaner cleaner 57017 445745 0 0 3 0x14000 0x200 reaper reaper 3909 100416 0 0 3 0x14000 0x200 pgdaemon pagedaemon 51556 451932 0 0 3 0x14000 0x200 bored viomb 22911 295714 0 0 3 0x14000 0x40000200 acpi0 acpi0 5227 58902 0 0 3 0x14000 0x40000200 idle1 17384 398984 0 0 3 0x14000 0x200 bored softnet1 78483 493084 0 0 2 0x14000 0x200 softnet0 82957 139 0 0 3 0x14000 0x200 smrbar systqmp 27858 289532 0 0 3 0x14000 0x200 bored systq 56963 432524 0 0 3 0x14000 0x200 tmoslp softclockmp 51715 360127 0 0 3 0x14000 0x40000200 tmoslp softclock 20193 133343 0 0 3 0x14000 0x40000200 idle0 1 122569 0 0 3 0x2 0x80 wait init 0 0 -1 0 3 0x10000 0x200 scheduler swapper ddb{1}> show all locks Process 19857 (syz-executor) thread 0xffff80002a22a7e0 (11920) exclusive rwlock pf_lock r = 0 (0xffffffff838e6288) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 pfioctl+0x13ca #3 VOP_IOCTL+0xac #4 vn_ioctl+0xf8 #5 sys_ioctl+0x674 #6 syscall+0xbd4 #7 Xsyscall+0x128 exclusive rwlock pfioctl_rw r = 0 (0xffffffff838e6318) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 pfioctl+0x1d4 #3 VOP_IOCTL+0xac #4 vn_ioctl+0xf8 #5 sys_ioctl+0x674 #6 syscall+0xbd4 #7 Xsyscall+0x128 exclusive kernel_lock &kernel_lock r = 0 (0xffffffff83b3ee00) #0 witness_lock+0x5f1 #1 vn_ioctl+0x4d #2 sys_ioctl+0x674 #3 syscall+0xbd4 #4 Xsyscall+0x128 Process 82957 (systqmp) thread 0xffff800045ffe298 (139) shared rwlock systqmp r = 0 (0xffffffff839d9578) #0 witness_lock+0x5f1 #1 taskq_thread+0x12a #2 proc_trampoline+0x10 ddb{1}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 11068 12160K 12160K 166960K 12193 0 pcb 17 12K 12K 166960K 27 0 rtable 192 7K 9K 166960K 445 0 pf 38 18K 22K 166960K 73 0 ifaddr 37 6K 7K 166960K 61 0 ifgroup 57 2K 2K 166960K 77 0 sysctl 1 1K 9K 166960K 6 0 counters 72 37K 37K 166960K 82 0 ioctlops 1 2K 4K 166960K 1493 0 iov 0 0K 16K 166960K 1 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1291 81K 82K 166960K 1437 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 5K 166960K 3 0 VM map 2 1K 1K 166960K 2 0 sem 5 0K 0K 166960K 5 0 dirhash 15 2K 2K 166960K 15 0 ACPI 1734 201K 291K 166960K 11964 0 file desc 17 61K 97K 166960K 228 0 proc 71 115K 180K 166960K 665 0 subproc 72 4K 4K 166960K 117 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 2 0 in_multi 68 4K 6K 166960K 125 0 ether_multi 1 0K 0K 166960K 1 0 mrt 0 0K 0K 166960K 1 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 61 281K 281K 166960K 61 0 exec 0 0K 1K 166960K 442 0 fusefs mount 1 32K 32K 166960K 1 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 212 172K 177K 166960K 3817 0 UVM aobj 4 2K 2K 166960K 4 0 pinsyscall 42 84K 106K 166960K 1508 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 NDP 15 0K 2K 166960K 38 0 temp 34 9114K 9135K 166960K 5120 0 kqueue 15 24K 24K 166960K 36 0 SYN cache 2 16K 16K 166960K 2 0 ddb{1}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 28 0 0 1 0 1 1 0 8 0 rtpcb 120 43 0 40 1 0 1 1 0 8 0 rtentry 176 139 0 56 6 0 6 6 0 8 0 unpcb 144 62 0 43 1 0 1 1 0 8 0 syncache 336 4 0 4 1 0 1 1 0 8 1 tcpcb 736 15 0 11 1 0 1 1 0 8 0 arp 136 24 0 10 1 0 1 1 0 8 0 inpcb 328 104 0 96 2 0 2 2 0 8 1 nd6 152 30 0 15 1 0 1 1 0 8 0 kcovpl 48 13 0 5 1 0 1 1 0 8 0 ppxss 1192 1 0 0 1 0 1 1 0 8 0 pfosfp 40 1428 0 1005 5 0 5 5 0 8 0 pfosfpen 112 1428 0 714 21 0 21 21 0 8 0 pfrktable 1344 6 0 2 1 0 1 1 0 8 0 pfsrclim 320 1 0 1 1 0 1 1 0 8 1 pfanchor 1288 2 0 0 1 0 1 1 0 8 0 pfstitem 24 27 0 0 1 0 1 1 0 8 0 pfstkey 128 27 0 0 1 0 1 1 0 8 0 pfstate 448 27 0 0 3 0 3 3 0 8 0 pfrule 1360 22 0 16 2 1 1 2 0 8 0 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 546 0 176 29 0 29 29 0 8 4 art_table 40 547 0 176 5 0 5 5 0 8 0 art_node 32 139 0 52 1 0 1 1 0 8 0 semapl 72 3 0 0 1 0 1 1 0 8 0 shmpl 112 1 0 0 1 0 1 1 0 8 0 dirhash 1024 19 0 0 3 0 3 3 0 8 0 dino2pl 256 1653 0 175 93 0 93 93 0 8 0 ffsino 296 1653 0 175 114 0 114 114 0 8 0 nchpl 144 1895 0 179 64 0 64 64 0 8 0 vnodes 216 1800 0 0 100 0 100 100 0 8 0 namei 1024 7174 0 7174 4 1 3 3 0 8 3 percpumem 16 57 0 5 1 0 1 1 0 8 0 pfiaddrpl 120 2 0 0 1 0 1 1 0 8 0 kstatmem 264 39 0 10 2 0 2 2 0 8 0 scxspl 216 6502 0 6502 4 3 1 3 1 8 1 plimitpl 152 106 0 89 1 0 1 1 0 8 0 sigapl 424 547 0 499 7 0 7 7 0 8 1 knotepl 120 269 0 0 9 0 9 9 0 8 0 kqueuepl 224 41 0 29 1 0 1 1 0 8 0 pipepl 344 148 0 121 3 0 3 3 0 8 0 fdescpl 528 531 0 500 3 0 3 3 0 8 0 filepl 160 1984 0 1765 10 0 10 10 0 8 0 lockfpl 104 20 0 15 1 0 1 1 0 8 0 lockfspl 48 11 0 7 1 0 1 1 0 8 0 sessionpl 144 30 0 21 1 0 1 1 0 8 0 pgrppl 48 43 0 26 1 0 1 1 0 8 0 ucredpl 104 204 0 191 1 0 1 1 0 8 0 zombiepl 144 500 0 499 1 0 1 1 0 8 0 processpl 1232 547 0 499 5 0 5 5 0 8 1 procpl 664 616 0 565 5 0 5 5 0 8 0 sockpl 752 212 0 182 4 0 4 4 0 8 1 mcl64k 65536 2 0 0 1 0 1 1 0 8 0 mcl8k 8192 2 0 0 1 0 1 1 0 8 0 mcl4k 4096 139 0 0 18 0 18 18 0 8 0 mcl2k 2048 14 0 0 2 0 2 2 0 8 0 mextrefs 64 16 0 0 1 0 1 1 0 8 0 mtagpl 96 1 0 0 1 0 1 1 0 8 0 mbufpl 256 178 0 0 12 0 12 12 0 8 0 bufpl 272 2344 0 105 150 0 150 150 0 8 0 anonpl 32 3622 0 0 30 0 30 30 0 247 0 amapchunkpl 152 10166 0 9766 19 0 19 19 0 158 0 amappl16 200 1415 0 1399 5 1 4 5 0 8 2 amappl15 192 6 0 6 1 1 0 1 0 8 0 amappl14 184 484 0 480 1 0 1 1 0 8 0 amappl13 176 131 0 119 1 0 1 1 0 8 0 amappl12 168 796 0 768 2 0 2 2 0 8 0 amappl11 160 61 0 61 1 1 0 1 0 8 0 amappl10 152 69 0 54 1 0 1 1 0 8 0 amappl9 144 272 0 271 1 0 1 1 0 8 0 amappl8 136 117 0 115 1 0 1 1 0 8 0 amappl7 128 158 0 144 1 0 1 1 0 8 0 amappl6 120 202 0 199 1 0 1 1 0 8 0 amappl5 112 102 0 92 1 0 1 1 0 8 0 amappl4 104 303 0 284 1 0 1 1 0 8 0 amappl3 96 1780 0 1702 3 0 3 3 0 8 0 amappl2 88 647 0 573 2 0 2 2 0 8 0 amappl1 80 11173 0 10581 16 1 15 15 0 8 2 amappl 88 3017 0 2879 4 0 4 4 0 92 0 uvmvnodes 80 99 0 0 3 0 3 3 0 8 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 8 0 8 2 1 1 1 0 8 1 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 3 0 0 1 0 1 1 0 8 0 uaddrrnd 24 531 0 500 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 531 0 500 1 0 1 1 0 8 0 vmmpekpl 168 6420 0 6373 3 0 3 3 0 8 0 vmmpepl 168 43409 0 41623 87 0 87 87 0 357 5 vmsppl 488 530 0 499 5 0 5 5 0 8 0 rwobjpl 80 15451 0 14453 26 1 25 26 0 8 3 pdppl 4096 1069 0 998 111 38 73 87 0 8 2 pvpl 32 9036 0 0 73 0 73 73 0 265 0 pmappl 256 530 0 499 3 0 3 3 0 8 0 extentpl 40 46 0 28 1 0 1 1 0 8 0 phpool 112 438 0 42 12 0 12 12 0 8 0 ddb{1}> machine ddbcpu 0 Stopped at x86_ipi_db+0x27: addq $0x8,%rsp ddb{0}> trace x86_ipi_db(ffffffff83997ff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc+0x44 intr_handler(ffff800037fd67b0,ffff80000006e200) at intr_handler+0xe9 Xintr_ioapic_edge16_untramp() at Xintr_ioapic_edge16_untramp+0x18f __sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc+0x19 softintr_dispatch(0) at softintr_dispatch+0x125 dosoftint(0) at dosoftint+0x54 Xsoftclock() at Xsoftclock+0x27 __mp_lock(ffffffff83b3e600) at __mp_lock+0x190 exit1(ffff800045feaa80,0,0,1) at exit1+0x720 sys_exit(ffff800045feaa80,ffff800037fd6bd0,ffff800037fd6b20) at sys_exit+0x1a syscall(ffff800037fd6bd0) at syscall+0xb17 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x785095fafcf0, count: -15 ddb{0}> machine ddbcpu 1 Stopped at db_enter+0x25: addq $0x8,%rsp ddb{1}> trace db_enter() at db_enter+0x25 witness_checkorder(ffffffff8393fd40,9,0) at witness_checkorder+0x10d1 rw_do_enter_write(ffffffff8393fd28,0) at rw_do_enter_write+0xba uvn_io(fffffd005e46bf10,ffff8000383e17b8,1,202,0) at uvn_io+0x54c uvn_get(fffffd005e46bf10,1000,ffff8000383e1888,ffff8000383e186c,0,1,1f0df61f52e10eb5,1) at uvn_get+0x31d uvm_fault_lower_io(ffff8000383e1aa0,ffff8000383e1ad8,ffff8000383e1920,ffff8000383e1908) at uvm_fault_lower_io+0x2ce uvm_fault_lower(ffff8000383e1aa0,ffff8000383e1ad8,ffff8000383e1a20) at uvm_fault_lower+0x28d uvm_fault(fffffd000b1cb3d0,200000001000,0,1) at uvm_fault+0x274 kpageflttrap(ffff8000383e1c50,200000001200) at kpageflttrap+0x2f4 kerntrap(ffff8000383e1c50) at kerntrap+0x19d alltraps_kern_meltdown() at alltraps_kern_meltdown+0x7b _copyin() at _copyin+0x5b pfioctl(14900,c4504441,ffff8000015e8000,1,ffff80002a22a7e0) at pfioctl+0x13ff VOP_IOCTL(fffffd006a9f4700,c4504441,ffff8000015e8000,1,fffffd00097fd820,ffff80002a22a7e0) at VOP_IOCTL+0xac vn_ioctl(fffffd006ceed030,c4504441,ffff8000015e8000,ffff80002a22a7e0) at vn_ioctl+0xf8 sys_ioctl(ffff80002a22a7e0,ffff8000383e2800,ffff8000383e2750) at sys_ioctl+0x674 syscall(ffff8000383e2800) at syscall+0xbd4 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xcb3b7b3acd0, count: -18