last executing test programs: 11.393981586s ago: executing program 4 (id=1922): r0 = socket(0x18, 0x3, 0x0) setsockopt(r0, 0x1000000029, 0x24, &(0x7f0000000000)="5ab7776a", 0x4) r1 = socket(0x18, 0x2, 0x0) r2 = getpid() fcntl$lock(r0, 0x8, &(0x7f0000000080)={0x2, 0x1, 0x2, 0xd1f, r2}) getsockopt(r1, 0x29, 0x31, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "36e282", 0x8, 0x3b, 0x0, @rand_addr="01984b0e23742b40c3fa3d76af5fc1fa", @local={0xfe, 0x80, '\x00', 0x0}, {[], @udp={{0x1, 0x0, 0x8}}}}}}}) 11.39252453s ago: executing program 3 (id=1924): mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e63) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x10) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x17, 0x2000007, 0x20101, 0x80000002, 0x80000001, 0x10001, 0x10, [{0x0, 0x10a6e, 0x99ad, 0x71000}, {0x7, 0x8, 0x8007, 0xfffffffb}, {0x8, 0xf88, 0x0, 0x9}, {0x4b, 0x800, 0x6, 0xfffffffc}, {0x4, 0x200726, 0x2800, 0xc}, {0x2, 0x3, 0x83, 0x99}, {0xce1, 0xffff8000, 0x4f8, 0x6d}, {0x206, 0x803, 0x14, 0x2d}, {0x2, 0xe, 0x285, 0xd}, {0x4, 0x8001, 0xd1d, 0xc}, {0x1d1, 0x5}, {0x7ff, 0x9, 0x744c01d5, 0x9}, {0xb89, 0x4, 0xc, 0x5}, {0x29a71717, 0xfffffffa, 0xfffffffe, 0x6}, {0xc, 0x5, 0x5, 0x7}, {0x0, 0xb1a, 0xe7, 0x30004}]}) sysctl$net_inet_esp(&(0x7f0000000000)={0x4, 0x2, 0x2, 0x4}, 0x4, 0x0, 0x0, 0x0, 0x2a) sysctl$kern(&(0x7f0000000000)={0xa}, 0x7, &(0x7f0000000080), 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) r1 = getpid() ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x510, r1) setrlimit(0x8, 0x0) setreuid(0xee00, 0x0) r2 = socket(0x18, 0x2, 0x0) setsockopt(r2, 0x1000000000029, 0x9, &(0x7f0000000040)="03000000", 0x4) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x21, 0x6}, 0x80000000, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x1, 0x200023}) setsockopt(r2, 0x1000000029, 0xd, &(0x7f0000000000), 0x14) ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9b, r1) ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) 11.074209497s ago: executing program 4 (id=1926): r0 = syz_open_pts() ioctl$FIONBIO(r0, 0x8004667e, &(0x7f0000000000)=0x2) writev(r0, &(0x7f0000000700)=[{&(0x7f0000000080)="34eb4cd59e8456ebc0881681c60e1cd9e0bf01b618b3cb934394c5951c1db0fd943a", 0xff99}], 0x1) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000200)='i', 0x1}], 0x1) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000040), 0x280e8, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) sysctl$vm(&(0x7f0000000000)={0x2, 0x7}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) sysctl$kern(&(0x7f0000000080)={0x1, 0x51}, 0x2, 0x0, 0x0, &(0x7f00000000c0)="ab3b83bb56cd6fb09dd788312434c632846d38c51063c8398580de8d1060f3c3de7d29bdca75f5a4783366387c3ebaadac50f8acd7c587b0196820292b5115a139b7e47310f3a2760f6dbd140a", 0x4d) 10.520100047s ago: executing program 3 (id=1934): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x10, 0x0) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x0, 0x9, 0x2, 0x2}, {0x6, 0x12, 0xe4, 0x100}, {0x6, 0xa, 0x83, 0x400e}]}) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000480)="ec68258bb3ad47", 0x7}], 0x1) setitimer(0x2, &(0x7f0000000140)={{0x0, 0x1}, {0xffffffff}}, 0x0) sysctl$kern(0x0, 0x0, &(0x7f00000001c0)="e15aaeade8fdf79411d132e8b8aec06c058500e5da53993f147d79c7de1e2c6bf763cc2f3fee5a9da4874a3b454c096c", &(0x7f0000000080)=0x30, 0x0, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x2a, &(0x7f0000000180)={@broadcast, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x3e, 0x1c, 0x0, 0x0, 0x0, 0xff, 0x0, @multicast2}, @icmp=@echo={0x8, 0x0, 0x0, 0x0, 0x100}}}}}) 10.015013692s ago: executing program 3 (id=1935): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000000)="ed", 0x1) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) socket(0x18, 0x2, 0x0) (async) setsockopt(r0, 0x28, 0x40, &(0x7f0000000140)="7b00f6a1fa0cd48c6cec37eb0f2cd4787aa907735251083c3c3149310f28a384fefd943733e5fbf36d9c03a296aa02ab5fda471ff2753d00413d5a1073aead1557a736f2a3cd5e62eaec1fdb83d6bbd00f5dd7ee70cc487e4947edbb00c2b5cf638d5a2968ae1f", 0x67) (async) recvmmsg(r1, &(0x7f0000000880)={&(0x7f0000000080)={0x0, 0xfffffffffffffe8e, &(0x7f0000000ac0)=[{&(0x7f0000000200)=""/173, 0xad}], 0x1, 0x0}}, 0x10, 0x2842, 0x0) (async) r2 = socket(0x6, 0x3, 0x0) (async) mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0x881) (async) r3 = open$dir(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2000, 0x801) (async) r4 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x22) (async) syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) (async) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1) syz_emit_ethernet(0x138, &(0x7f00000002c0)=ANY=[@ANYRES64=r4, @ANYRES64=r1, @ANYRESHEX, @ANYBLOB="03e03407e3ac90dd1c933fd2aefe4a58f877aa7b7587d624dbb7850a81252462b97b7959b484d02c693d0abedc6d7723223b736ae4e98a94dea35227d6abe6f086e41fd46ae2dfbb5247a82ab41da0022d5b23fec841794f2cfd4f744dfa46fab1a05718f519d1c596af4b869c886711c592bfe599fbac67bdc94a93", @ANYRESDEC=r3, @ANYRESDEC=r0]) (async) r5 = socket(0x0, 0x1, 0x0) setsockopt$sock_int(r5, 0xffff, 0x1, &(0x7f0000000080)=0x1fc, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) connect$unix(r5, &(0x7f0000000000), 0x10) (async) sendmsg$unix(r5, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x404}, 0x5) (async) r6 = socket(0x10, 0x3, 0x0) ioctl$FIONREAD(r6, 0xc038694e, &(0x7f00000001c0)) open(&(0x7f0000000100)='./file0\x00', 0x10000, 0x0) (async) getrlimit(0xf, 0x0) (async) r7 = openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x10000, 0x0) ioctl$TIOCSETA(r7, 0xc0284416, &(0x7f0000000400)={0x58, 0xeffffffc, 0x3, 0x10000000, "75a200000000f20f000000072f0fd7f000", 0x6, 0x6}) (async) fcntl$getown(0xffffffffffffffff, 0x5) (async) getrlimit(0x5, 0x0) syz_open_pts() (async) dup2(r2, r3) (async) recvmmsg(r1, &(0x7f00000003c0)={0x0, 0x1}, 0x10, 0x1000, 0x0) 7.342426154s ago: executing program 6 (id=1940): pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setstatus(r0, 0x4, 0x40) setuid(0xee01) r2 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$WSKBDIO_BELL(r2, 0x20005701) r3 = getpid() fcntl$setown(r0, 0x6, r3) mknod(&(0x7f0000000400)='./file0\x00', 0x2000, 0x5c4a) r4 = open(&(0x7f0000000080)='./file0\x00', 0x70e, 0x0) writev(r4, &(0x7f0000000280)=[{0x0}], 0x1) r5 = socket(0x1e, 0x1, 0x0) close(r5) socket(0x24, 0x2, 0x0) r6 = openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x8, 0x0) ioctl$TIOCSETA(r6, 0xc0104454, &(0x7f0000000000)={0x1bc00002, 0xfffffffe, 0x8, 0x2, "d7a2224f0000000300007ebd081e118c620c00", 0xfffffffd, 0x4}) r7 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000140), 0x782, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x0, 0x85, 0xc0, 0x2}]}) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) msync(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4) ioctl$SPKRTUNE(r7, 0x20005302, &(0x7f0000000000)={0x240, 0x401}) ioctl$TIOCSETA(0xffffffffffffffff, 0xc0284457, &(0x7f0000000180)={0x0, 0xfffffffd, 0xfeffffff, 0x9, "0800140000fffbf6ed01007699f0ef69d507b1ad", 0x8d, 0x9}) setsockopt(r5, 0x6, 0x41, &(0x7f0000000280), 0x1c) openat$vmm(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) close(r1) sysctl$net_inet_ah(&(0x7f00000000c0), 0x4, 0x0, 0x0, 0x0, 0x0) 7.340846914s ago: executing program 0 (id=1941): setreuid(0xee00, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = getuid() r1 = getuid() writev(0xffffffffffffffff, 0xffffffffffffffff, 0x9) chown(&(0x7f0000000040)='./file0\x00', r1, 0xffffffffffffffff) setreuid(0xee00, r0) chmod(&(0x7f0000000080)='./file0\x00', 0x2ea) r2 = socket$inet(0x2, 0x2, 0x0) close(r2) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r3, 0x0, 0x200000000000b, &(0x7f0000000080)='\x00', 0x1) setsockopt$inet_opts(r2, 0x0, 0x200000000000c, &(0x7f0000000000), 0x0) chdir(&(0x7f0000000100)='./file0\x00') r4 = syz_open_pts() nanosleep(&(0x7f0000000000)={0x8000000000007ffe, 0x2}, 0x0) readv(r4, &(0x7f00000012c0)=[{&(0x7f0000000240)=""/10, 0xa}], 0x1) ioctl$TIOCSETA(r4, 0x802c7414, &(0x7f0000000080)={0x80, 0x0, 0xfbfffffe, 0xfffffffe, "d76c1f46000000ef1f0160fbff2000404b00", 0x800}) syz_open_pts() ioctl$TIOCSETAF(r4, 0x802c7416, &(0x7f0000000000)={0xc6, 0xffff3d2a, 0x9c, 0xffffffc0, "bb0d37a05de90efc5a1b000000e81a0000031800", 0x80000000, 0x8}) open$dir(&(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x8) r5 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x80, 0xd4) mknodat(r5, &(0x7f0000000040)='./file0\x00', 0xc0e99db6de761f86, 0x4000000) rename(&(0x7f00000007c0)='./file0\x00', &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 7.090237307s ago: executing program 5 (id=1943): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x200000000000c, &(0x7f0000000000)="ea00000100000000", 0x8) (async) setsockopt$inet_opts(r0, 0x0, 0x200000000000c, &(0x7f0000000240)="ea00eb0100000000", 0x8) (async) kevent(0xffffffffffffffff, &(0x7f0000000040)=[{{r0}, 0xfffffffffffffffe, 0x6b, 0x1, 0x200000000000001, 0xfc}], 0xa, 0x0, 0x0, 0x0) (async) select(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0) (async) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0xffffffff, 0xb, {0x0, 0x9}}) (async) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) bind$unix(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$FIONREAD(0xffffffffffffffff, 0xc0206921, 0x0) (async) r1 = socket(0x18, 0x1, 0x0) setsockopt(r1, 0x1000000029, 0xc, &(0x7f0000000040)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) (async) setsockopt(r1, 0x1000000029, 0xc, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) (async) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000000)={'tap', 0x0}) (async) r2 = socket$unix(0x1, 0x2, 0x0) (async) getsockname(r1, &(0x7f0000000080)=@in, &(0x7f00000000c0)=0xc) ioctl$FIONREAD(r2, 0x80206979, &(0x7f0000000000)) 6.92394143s ago: executing program 6 (id=1947): mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x3200) msgget(0x2, 0x608) poll(&(0x7f0000000340)=[{0xffffffffffffffff, 0x40}, {0xffffffffffffffff, 0x1}], 0x2, 0x0) mknod(&(0x7f0000000000)='./bus\x00', 0x2000, 0x0) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x10, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) chmod(&(0x7f0000001140)='./bus\x00', 0x102) sysctl$net_inet_udp(&(0x7f0000000000)={0x4, 0x2, 0x11, 0x2}, 0x4, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) sysctl$kern(&(0x7f00000011c0)={0x1, 0x56}, 0x2, 0x0, 0x0, 0x0, 0x0) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x0, 0xb, 0x2, 0x2}, {0x6, 0x12, 0xe4, 0xfc}, {0x6, 0xa, 0x83, 0x400f}]}) syz_emit_ethernet(0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffff16f2b58f9227b9e1aaaa86dd60006f3300383a008a21f8d1450021b07f5a195768f30000fe8000000000000000000000000000aa02009078080000006000000000003a00fe8000000000000000002000000000aa00"]) sendmsg$unix(0xffffffffffffff9c, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="825a4fc3b1f2b0c7c8bd02000010b515212aae2d1144a41ef6197f7e9105f89cb9ff2ad44e0eedaf3013b14f53d226f89539e2a55fae6e072a99b176f44fdf295740d5a8a4361d0b", 0x48}], 0x1, 0x0, 0x0, 0x2}, 0x0) sysctl$kern(0x0, 0x0, &(0x7f0000000300)="3c49a263496329aba063514eb82f369e4813170900000045a82a1200c52fe30000000000000000000000000074ff936844c00d55babadfe9232084766b1aee8e", &(0x7f0000000080)=0x40, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x1000e, &(0x7f0000000280)=ANY=[]) r1 = open(&(0x7f0000001180)='./file0\x00', 0x10, 0xb3) ioctl$TIOCSETAF(r1, 0x802c7416, &(0x7f0000000080)={0x3, 0x7, 0xe150, 0xffe, "0000000000008471050000000010000447ff00"}) close(r1) sysctl$fs(&(0x7f0000000000)={0x3, 0x1}, 0x2, &(0x7f0000000080)="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", &(0x7f0000001080)=0x1000, &(0x7f00000010c0)="3ad6cad95ebabd2676ab0e991d8867d6637f366eface7b280c5a189e9e56908061b4c1f99fa6a4e051a1710c73c1fcc7865fb0701022f6fd5822a2248b96488862a4a22c4c2d8554c1aa3e3a203089c2bdcefde3228aa8942b0eeaa28c3608a34d1f04122cfd6e1b1ed08a764f0f0c486cab", 0x72) r2 = socket(0x11, 0x3, 0x0) sysctl$net_inet_tcp(&(0x7f0000000100)={0x4, 0x2, 0x6, 0xa}, 0x4, 0x0, 0x0, &(0x7f0000000000)='\t\x00\x00\x00', 0x4) sendto$unix(r2, &(0x7f0000000040)="b1000501000000ae05000701070000000008000000000500fef96ecfc72fd3357ae30200004e30ffd2d236acf20bf404be01000000f7c8cf5f882b297de1aa050400ce94e2f0ad3ebbc257e4411f139b672f335c22db830c032bfa896443c32118210000720fd38bfb0000fd54c125191b1257aea8c500001602fbfe0c2300000100be1f25a2e791505c47f8343712cc11fffffffffffffc00"/177, 0xb1, 0x0, 0x0, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x10005, 0x0) 6.923710171s ago: executing program 5 (id=1948): ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0x80000000, 0xffff63de, 0x5, 0x28, 0x8, 0x3, 0x40, 0x10, [{0x5, 0x0, 0xfffff115, 0x80000001}, {0x3, 0xffffffff, 0x6, 0xfff}, {0x1, 0x4baa, 0x3, 0x8001}, {0x4, 0xe2, 0x7, 0x100}, {0x3, 0x40b, 0xf15, 0x2}, {0x9cb, 0xfffc, 0xc, 0x9}, {0x4, 0x800, 0x3, 0x9}, {0x9, 0x9, 0x28000, 0xb7}, {0x9, 0x1, 0x6, 0x7fff}, {0x3, 0xfffffffc, 0x8, 0x28bfd}, {0x0, 0x2, 0x8, 0x7}, {0x3, 0xc7cb, 0x7ffffe, 0xa67}, {0x401, 0x10, 0x9, 0xa2}, {0x3, 0x1006e2, 0x2, 0x6f5fc48b}, {0x3, 0x101, 0x5, 0x9}, {0x9be2, 0x2, 0x2, 0x69}]}) minherit(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1) openat$pci(0xffffffffffffff9c, &(0x7f0000000180), 0x10, 0x0) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) 6.636343695s ago: executing program 5 (id=1949): r0 = open(&(0x7f0000000380)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7949) open$dir(&(0x7f0000000280)='./file0\x00', 0xae828e137847f62, 0x20) setgroups(0x0, 0x0) setgid(0xffffffffffffffff) setuid(0xffffffffffffffff) ktrace(&(0x7f00000001c0)='./file0\x00', 0x0, 0x40000534, 0x0) setrlimit(0x8, &(0x7f0000000000)={0xfffffffffffffffb, 0xffffffffffffffff}) openat$pf(0xffffffffffffff9c, 0x0, 0x1, 0x0) fcntl$lock(r0, 0x0, &(0x7f00000019c0)={0x3, 0x0, 0x79, 0x2}) 6.634464013s ago: executing program 6 (id=1951): setrlimit(0x8, &(0x7f0000000040)={0xa, 0x50}) r0 = syz_open_pts() close(r0) r1 = syz_open_pts() ioctl$TIOCSETAW(r1, 0x802c7415, &(0x7f00000000c0)={0x2df5776e, 0x80000001, 0xd, 0xfbfffffc, "006446586009006f374808070006000000000100", 0x7, 0x40000000}) r2 = open(&(0x7f0000000040)='./bus\x00', 0x10005, 0x0) ioctl$TIOCFLUSH(r2, 0x80047410, &(0x7f0000000080)=0x3ff) writev(r1, &(0x7f0000000000)=[{&(0x7f00000001c0)="f39931423894d5b9c0cd4b826eef0a8c11c5986b13c43f6979ae3ebb664f844636eff257ce3c99f0f7c45fd71754e3ac701927608a8062fd4f0e31d3eba350b694cd36be9d673d2ea49cc0cd5d452e4e625a360000000000000008c115bdbeb21d46f17dea621528820177ba31e2a8a68a51dacec0d40100010000000000b48fe69d07ec7e2d2d68f98c8bf70b43d1a50faaf36bd4ed5836b12328392872b08eaf1a0cc88d3fa931a2ca253ae54e54aeddafaf478da88895d7826ab3d2cef2edadf085d1ebf8c1920707a6683b580f8d3570136bddf7fcae95246f55405c09", 0xdf}], 0x1) 6.632222909s ago: executing program 3 (id=1952): ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r0 = socket(0x2, 0x2, 0x1) r1 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$WSKBDIO_SETDEFAULTBELL(r1, 0x80105705, &(0x7f0000000040)={0x3, 0x9, 0xf46, 0x2}) ioctl$FIONREAD(r0, 0xc0286988, &(0x7f00000001c0)) bind$inet6(r0, &(0x7f0000000080)={0x18, 0x2, 0x7f, 0x1}, 0xc) open(&(0x7f00000000c0)='./file0\x00', 0x3b75325ac495061c, 0x20) 5.10706923s ago: executing program 6 (id=1954): r0 = kqueue() kevent(r0, &(0x7f00000003c0)=[{{}, 0xfffffffffffffff6, 0x3, 0x80000000, 0x1000fd, 0x10000}], 0x1, 0x0, 0x9b68, 0x0) kevent(r0, &(0x7f0000000040), 0xe4a, 0x0, 0xa9fa, 0x0) mknod(&(0x7f0000000400)='./file0\x00', 0x2000, 0x5c4a) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) setrlimit(0x6, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x4000, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1b}, 0x4, 0x3d3, 0xffffffffffffffff, 0x0, 0x7ffffffffffffffe, 0x9, 0x801, 0xffc}) r2 = socket(0x18, 0x2, 0x0) close(r2) r3 = socket(0x18, 0x2, 0x0) close(r3) r4 = socket(0x800000018, 0x1, 0x0) setsockopt$sock_int(r4, 0xffff, 0x1000, 0x0, 0x0) bind$unix(r4, 0x0, 0x0) connect$unix(r3, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc5005601, &(0x7f0000000000)={0x10, 0x0, [{&(0x7f00001d0000/0x4000)=nil, &(0x7f0000663000/0x4000)=nil, 0xfffffffffffff801}, {&(0x7f00006ac000/0x4000)=nil, &(0x7f0000826000/0x4000)=nil}, {&(0x7f0000060000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil}, {0x0, &(0x7f0000ffb000/0x3000)=nil}, {&(0x7f0000ad4000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil}, {&(0x7f0000000000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil}, {0x0, 0x0, 0xfffffffffffffffc}, {&(0x7f00001c9000/0xb000)=nil, &(0x7f0000ffe000/0x2000)=nil}, {&(0x7f0000ad4000/0x2000)=nil, &(0x7f0000826000/0x1000)=nil, 0x40}, {&(0x7f0000110000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil}, {0x0, &(0x7f0000156000/0x1000)=nil, 0x12}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil}, {0x0, &(0x7f0000ffd000/0x3000)=nil}, {&(0x7f00004c1000/0x2000)=nil, 0x0, 0x9bbf}, {&(0x7f00001cf000/0x4000)=nil}, {0x0, &(0x7f0000358000/0x2000)=nil}], './file0\x00'}) connect$unix(r2, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) syz_emit_ethernet(0x66, &(0x7f0000000040)={@random="8f6f77ede655", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "5f6ad9", 0x30, 0x3a, 0x0, @empty, @local={0xfe, 0x80, '\x00', 0x0}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "06c33e", 0x0, 0x3a, 0x0, @local={0xfe, 0x80, '\x00', 0x0}, @ipv4={'\x00', '\xff\xff', @remote={0xac, 0x14, 0x0}}}}}}}}}) r5 = kqueue() kevent(r5, &(0x7f00000000c0), 0x100, &(0x7f0000000180)=[{{r1}, 0xffffffffffffffff, 0x13}, {{r1}, 0xffffffffffffffff, 0x62}], 0x6, 0x0) 4.911602251s ago: executing program 5 (id=1955): msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x5, 0x0, 0x0, 0x0, 0x0, 0x85, 0x48e}, 0x6, 0x9, 0x0, 0x0, 0x1, 0xb000000000004000, 0xfffffffffffffffc, 0x807}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x3d}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$kern(&(0x7f00000000c0)={0x1, 0x37}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94100e4ac63c90dddc11f11cad5cc4", &(0x7f0000000080)=0x2, 0x0, 0x37) r0 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r1 = socket(0x10, 0x8000, 0x43) bind(r1, &(0x7f0000000180)=@un=@abs={0x0, 0x0, 0x0}, 0x8) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x0, 0x3, 0x0, 0x2}, {0x2, 0x0, 0x0, 0xfffffffe}]}) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r2, 0x0, 0x13, &(0x7f0000000000), 0x4) writev(r0, &(0x7f0000000080)=[{&(0x7f00000003c0)="66cad9e112cddc522f4a6f1d90270fd9d1a64c82d707661137481d4d7ce8c8db9d99be014fdd0bc2275ae2f1aa699eac666717e903cfcb9e4fb09e7d587366644168639dc209e52a64603f02fe490fb626fbf5737ec0fca1b8db2c7628a70b3d055cd2e63ab0955d6cab54cccbaac728bc4406", 0x73}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000740)="647a334e5af7ff326a752b5306149fe1ffaa2a2ce59138083bf85abcb45b6c33938fb52fd6afd6e1a7d0315c5a27121bb4bb5ea6c4375c361179d1d3da731bc0631b0e4d01873b1504913f562d921aba9d9197d803a18a9e63b6d767dde638f6fe5d7cf95721572dd2443fefb2e4b6bf6d4e4e", 0x73}], 0x1) unveil(0x0, &(0x7f0000000000)='x\x00') mkdir(&(0x7f0000000080)='./file0\x00', 0x0) setreuid(0xee00, 0x0) r3 = getuid() chown(&(0x7f0000000200)='./file0\x00', r3, 0x0) setreuid(0xee00, r3) unveil(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000140)='c\x00') symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') 4.910280611s ago: executing program 0 (id=1956): sysctl$hw(&(0x7f0000000300)={0x7, 0xa}, 0x2, &(0x7f0000001240)="7b88915c", &(0x7f0000000140)=0x4, 0x0, 0x0) (async) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) (async) setuid(0xee01) (async) r1 = getppid() msgctl$IPC_SET(0x0, 0x1, &(0x7f00000000c0)={{0x7, 0x0, 0x0, 0x0, 0x0, 0x42, 0xc299}, 0x0, 0x401, r1, r1, 0xffffffefffffff4d, 0x800000000, 0xe, 0x5}) (async) pipe(&(0x7f0000000440)={0xffffffffffffffff}) ioctl$WSKBDIO_GETMAP(r2, 0x80047476, &(0x7f0000000100)={0x0, 0x0}) (async) r3 = fcntl$getown(r2, 0x5) ktrace(0x0, 0x1, 0xf14, r3) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) writev(r4, &(0x7f0000000240)=[{&(0x7f0000000b80)="cc60d3d79a1a7122a5fb9de9ea6ca0743968bbfb3f23cea8b30fb2942ef7652736f10f86d45ae419b2ecf7af93d33b3de1f2c56c0d93da7484095d0d543baf7f0161a025c9c02a561f9a76d06f1eaec7d8df99d6c28b10fa891e47d6c3bba690a611889032ac7b3581d7c92d1c547759764f069048316871794f0615dd4d8bb1057a61fb177be649004fb56a7d46c856a20d73f050bf29d58b803a67f9c605ab2829d78ea25719006ed6e9679af3465e713b4a33ead9603734cd6e81d74cfc43998d28a7ba7f2abc822b880e15d945a2fad6d4ceb14d6de3ad1748124e61575f044947d2603ed240aed84070e5899d1d1ad0d8fb9434e01bb5523d8354d134c82a94a872455393f2d8cbec2ed9303c4aa91b00"/285, 0x11d}, {&(0x7f0000000200)="b389e5aeb7b42eab8dd001567bf060f918", 0x11}], 0x2) (async) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x2011, r4, 0x0) (async) r5 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x40, 0x12) (async) r6 = fcntl$dupfd(0xffffffffffffff9c, 0xa, 0xffffffffffffffff) (async) r7 = accept$inet(0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff}) (async) socketpair(0x18, 0x8000, 0xfa, &(0x7f0000000200)={0xffffffffffffffff}) r10 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x8, 0x0) ioctl$TIOCEXCL(0xffffffffffffffff, 0x2000740d) (async) ioctl$BIOCSRTIMEOUT(r10, 0x8010426d, &(0x7f0000000040)={0x9, 0x9}) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) r11 = socket(0x18, 0x3, 0x0) setsockopt(r11, 0x1000000029, 0x24, &(0x7f0000000000)="5ab7776a", 0x4) (async) r12 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000240), 0x20, 0x0) kevent(r0, &(0x7f0000000180)=[{{r4}, 0xfffffffffffffff9, 0x6, 0x80000000, 0x100000001, 0x4}, {{r5}, 0xfffffffffffffffb, 0x0, 0xfffef, 0x8c, 0x8}, {{r6}, 0x2bfe8141bac36f8b, 0x6b, 0x78000041, 0x4, 0x7}, {{r7}, 0xfffffffffffffffa, 0x9aec39af350ec09c, 0x1, 0x9, 0x9}], 0x6, &(0x7f0000000340)=[{{}, 0xfffffffffffffffd, 0x0, 0x40000000, 0x8, 0xffffffffffffcc6a}, {{r8}, 0xfffffffffffffffd, 0xc, 0x80000000, 0x0, 0x717de53f}, {{r9}, 0xfffffffffffffffa, 0xfcbfcbe84498b2ba, 0x10, 0x8, 0xd65}, {{r10}, 0xfffffffffffffff9, 0x11, 0x0, 0xfe, 0xffffffff}, {{r12}, 0xfffffffffffffffb, 0xd0, 0x8, 0x1, 0x7fff}], 0xffff81a6, &(0x7f0000000280)={0x6, 0x7}) 4.909950354s ago: executing program 1 (id=1957): open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0xd6) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x5d4a) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) sysctl$vfs_ffs(&(0x7f0000000000)={0x4, 0x1, 0x2}, 0x3, 0x0, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)="8d6bb85551ec8430", 0x8}], 0x1) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$FIONREAD(r1, 0x80206979, &(0x7f0000000000)) r2 = kqueue() kevent(r2, 0x0, 0x100, 0x0, 0x6, 0x0) setitimer(0x2, 0x0, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$FIONREAD(r0, 0xc0206921, &(0x7f00000001c0)) r3 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r4 = socket(0x18, 0x2, 0x0) ioctl$FIONREAD(r4, 0x802069db, &(0x7f00000001c0)) ioctl$DIOCMAP(r3, 0xc0106477, &(0x7f00000000c0)={&(0x7f0000000140)='./file0\x00', r3}) open(&(0x7f0000000000)='./file0\x00', 0x800, 0x12) preadv(r3, &(0x7f0000000b80)=[{0x0}], 0x1, 0xfffffffffffffffe) 4.909476102s ago: executing program 0 (id=1958): mknod(&(0x7f0000000400)='./file0\x00', 0x2000, 0x9) (async) r0 = socket$unix(0x1, 0x5, 0x0) (async) setrlimit(0x8, &(0x7f0000000080)={0xe, 0x51}) (async) r1 = syz_open_pts() close(r1) (async) r2 = socket(0x24, 0x2, 0x0) bind$unix(r2, &(0x7f0000000000)=@file={0x2400, './file0\x00'}, 0x40) r3 = syz_open_pts() ioctl$FIOASYNC(r1, 0x80047469, &(0x7f00000000c0)=0x5) (async) ioctl$FIONBIO(r3, 0x8004667e, &(0x7f0000000000)=0xff) readv(r3, &(0x7f0000000680)=[{&(0x7f0000000380)=""/227, 0xe3}], 0x28d) (async) bind$unix(r0, &(0x7f0000000040)=@file={0xd570d0466b6018f, './file0\x00'}, 0xa) (async) listen(r0, 0x0) (async) accept(r0, 0x0, 0x0) (async) close(r0) (async) r4 = socket$unix(0x1, 0x5, 0x0) fcntl$setstatus(r0, 0x4, 0x40) (async) connect$unix(r4, &(0x7f0000000000)=@file={0xd1653077bafa0114, './file0\x00'}, 0xa) r5 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) (async) r6 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ioctl$DIOCMAP(r6, 0xc0106477, &(0x7f00000002c0)={&(0x7f0000000140)='./file0\x00', r3, 0x3}) (async) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) (async) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) dup2(r5, r6) (async) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f00000001c0)="c4b9f0ff0bb68874b727661619aaa1b573b2ea683975132b4915394b6ffc94cdc0c4f191f0d2edff477de816808ac33323d0013931d624e55f060ef00d1b752ddd99f83c55313bd7fc7aa3034846bd42519dac6108e70fda72274d2e40950e7cb108e146978da07a20218c5340b0ae66b4a1216d3f4699857b26b562a2d71af62875ff30a7abc9488921240368a06f6e0d3e7870d73e979fb8a8bcd94d8177cc6de890fa83963261cdef38efc6b30dac545dc5bdac54abd82c0d19ba46ad5d1f3371ca44d2686c7bbbe186a00c08932779077fda534720feced2e1073d820b6cfbc8f0da071feb4c61c8e6", 0xeb}], 0x1) ioctl$TIOCCONS(r5, 0x80047462, &(0x7f0000000300)=0x20006) 4.867247965s ago: executing program 0 (id=1959): setgid(0x0) getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000000)={0x0, 0x0}, 0xc) getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0xc) getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0xc) getgroups(0x8, &(0x7f00000000c0)=[0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]) semctl$IPC_SET(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000100)={{0x80000001, r1, r4, r6, r9, 0x20, 0x3}, 0xffffffffffffffff, 0x6, 0x2}) munmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000) ioctl$BIOCIMMEDIATE(0xffffffffffffffff, 0x80044270, &(0x7f0000000180)=0x6) pipe2(&(0x7f00000001c0)={0xffffffffffffffff}, 0x10000) poll(&(0x7f0000000200)=[{0xffffffffffffffff, 0x4}, {r13, 0x8}, {0xffffffffffffffff, 0x20}], 0x3, 0x800000) r14 = open(&(0x7f0000000240)='./file0\x00', 0x2, 0xa) close(r14) r15 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x800, 0x0) r16 = shmget(0x2, 0x4000, 0x280, &(0x7f0000ff9000/0x4000)=nil) r17 = getpgid(r0) getsockopt$SO_PEERCRED(r13, 0xffff, 0x1022, &(0x7f00000002c0)={0x0, 0x0}, 0xc) shmctl$IPC_SET(r16, 0x1, &(0x7f0000000300)={{0x7, r1, r12, r6, r4, 0x5, 0x7}, 0x80000000, 0x3, r17, r18, 0x9, 0x8, 0x6}) chroot(&(0x7f0000000380)='./file0/file0\x00') ioctl$BIOCSETIF(r13, 0x8020426c, &(0x7f00000003c0)={'tap', 0x0}) r20 = socket(0x20, 0x1, 0x4) r21 = open$dir(&(0x7f0000000400)='./file0\x00', 0x40, 0x1) fchownat(r21, &(0x7f0000000440)='./file0/file0\x00', r3, r12, 0x6) r22 = getpgrp() msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000480)={{0x8, r3, r11, r19, r7, 0xb0, 0x3}, 0x3, 0x8001, r22, r0, 0xffff, 0x3, 0x3, 0x8}) sendmmsg(r13, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000500)="07c0837b77f7c9517639b5", 0xb}, {&(0x7f0000000540)="54cdff76c3b5436fe29315b972e93e05d65e50406993e24b728a2ad2369d2f6754434499293167474a9385d7850f5bb3f17411f720aa7537298b252441a46f218eff3628351dff604c7c90c8c61a95f2e1e7e44730ba34fc4f7440e9d5d9d24f8e810847a7a1b39afee92326f7b43838dab4cfeaaadba5aef275c474fd69cc3f5326a464d00995eee6084c88eaa2b9574d693325d59fdd69a89f60467c550e06118d3db90637aa13877c6a6e6a7abb0caad0c7633fe320b070f70770", 0xbc}, {&(0x7f0000000600)="5ecf4344da8bb895dac12640966d5b795c2bcc494a3e3c03a6dc3ce58cf7faa3ffca2548c0145c7c4f880b14c02b23a66ef0c07262a3f43e89ca3f66eb70019c69ae8f", 0x43}, {&(0x7f0000000680)="82b2a2fbc33c3fc0ffea27cd765378b4ea33e479bf28fa2bfc24b6cf9b84f9f11c0abe4814b30a5cc1b53571ac46293b83f916b1e158c1531313021d843579e7db2a11a1b4d2f02136885d58f2dabb277e3d2f410eb63db5e2fe297e798a78a16916252b27085077dbe8f6597840ffec8cef1182767fd3d0af0b07eff32a772418265ca6e9bd8f3b1bdf1d9afea6", 0x8e}, {&(0x7f0000000740)="fde4bc0f9f006258d867bedbb1b06ce3ef7fafd7bc3f319ec7568e7a06a5347bbbdc05e093b4d0b795e980ed90c08cd59de1dca9ba9c71f8ebb026a2ddadba9c6d964e06fb268b9dd3b40e68644f3e9ec9296feadbf74f1bb533ab70f9e30f05e29ca02455f72d3ea798920286fe0ab75ddd1eca8a3d6a3dfa8535e9c292488024556c1e13cfa3513fed005cacb7d03f5658e79a35e86878ba652038b812dc36bf9fc1ddc20b7931bb31d3a812fdc21ee7b8", 0xb2}, {&(0x7f0000000800)="986d66c2930d2445b9", 0x9}, {&(0x7f0000000840)="f36218ed87cf31f3dd2b58689d716bed20c357c82927f3e7d487ceb9f40c83b588b055f93feea7423d399d116a3054d43aa4084d05e22c62fd7b00eb4a2199504fe7cc0dff34ab3d6d1cd127db3cf61249614cd8651bf74bb94fa223e16ba1df3ef4efc1921804ed55d796c2ad47e715bac529078a6909f06f9e4fd73a9c32849056a01db7063d383fd7cb07adb7508a539f9b8ee6c845f5201d418e3aef1b0871c8cf31584d5d21c6c1e829001ab91869190b93c072e94a51685966c6e22a68ced4263bee76ae9bcac87ac34d4ade5ae57bad", 0xd3}, {&(0x7f0000000940)="1cae6bba49a7ebf3d4e63294cc262ce20c77848b68f9cd6f598648aad59dee2e1f9fabf2460bb5f100a8b2", 0x2b}], 0x8, &(0x7f0000000a00)=[{0xe8, 0xffff, 0x6, "3ba701ceb69f58ae86b959c0547ed11d87a54f67dfeb51f4254baab76f0cc7ab101742fd9c64605600a3dcb4ea7fc74dee296a851cfdc9a118f62e8082b17ad3254baaf204b9bc2f35bd09955ff68d4e5a79265458178a8d481920c933d91bc44b81c60a65fc40386d01fa47ce1895ae3a37f8983045fcd7397410df63c8c7fb53c28e2a7a143059d3e55ad23d7deafe60b43546633e9cf03ea0adb4fccff2fa1ddf9bb748850e63f614b4b041c78d5e7bd6961e4aacbf647707d2ca3ef81af39b7f0c44778fc2ace7625ec26da6277de9b775"}, {0xb0, 0xffff, 0x200, "e589bdfd551d70c37647984022f4854c08d351f6276c00cdcb2cd6b832ae7844156d4fddc67c82f760b7958e055ae577ca5460fc6eedca6efbffc6a7591c0136a15ddefd370215d3ba6ce0b1caf0281fa4e2cfb603db5f6fd987bcd5b05cfc7c8a6cd5e1bd9125953608db893ca4c76a6f32f93f0c0af2418c61299a34eec894feb9489ae9ac2040b1812feea898eccd2848000976605f3b2e"}, {0xb0, 0x1, 0x8000, "a07e4adf039c728be04e12e894a31275f788136404105377a4655927f573fd96933ca4b7e8895afc5720b15d9bfd1d90a70a172767e46a8c460375d54591905c475137286d6876701a1633b625201063e59547c8ea1fa2368e7554dece740b14457a5d9b86141feefe63598801912ec5254ec811d3695f010a1e8567c2ebbb0f3200c03fb47727208b143e2640d51eb2ecb7716e0e526057801d32c2a8"}, {0xd8, 0xffff, 0xfffeffff, "ec2a75441192032841b6c7e4643c33e9f58efd681861d9784d9ef92767c7f667b16e8b1488d977879f2f3fd84cac21269ba61734c8f6ac62a0c846bae9efb3bfe51ca409b07ad4fe1466fd2be75db46098de3f8afea5dac0b53cd2bc6429b4ac2e70ee6d948d9a691f63d5311df43d5a2238343f95172fb3b749210da6b26e31b3b4a11bc855ad1dc9edd109538dd672e5fcde6208838ce7428529612b39a4dbb2af0c3e29c1a24428719d7d47d938e1118679b34b8a7715ee1aae44f2e0b37974b493"}, {0xd8, 0xffff, 0x0, "1cbdf05d77679d49774b34b1be26871aa1c8987c003d580a05bbf164384686426619a607daa64c1a9641af6459d16d15cdfda79b1c7a1d5831efefe36a98e96907803ca976e7729a2e03c79f894e070659c17ff1c8e0f38f8461a6447a74b159163f3b7d1fbe69da045c6ee856c5cedea79199f0ef0614a2b5c01a5d9f8fee1306f0ea6043faa140b28fa7b98046aef6d786d4047aaef58ed9054a9a3df8a76dc12531369a46d02b25b330a0283f5f6dc1bca8c95431734c9f0970401872bc42947b022f6dfc3b04"}, {0x90, 0xc9ed5d767602c3e7, 0xfffffffd, "a49a2dfde8d968e2c81622356895101926a1b6be7edbc940ed242b0e0f0927284bcaa62a8b2942128b7af32a01bc96450da0692791994eabf7995325962f1f3c6f4ef974852df082625b19a3911460a53e6dc191ceb55257f21ad1a0bdf75d7c4c5d2dfab7b0ff2b88774e7973a3a34351866a9086329dab4d"}], 0x488}, 0x80000001}, 0x10, 0x0) munlockall() connect(r20, &(0x7f0000000f40)=@in6={0x18, 0x3, 0x80000000, 0x4}, 0xc) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) shmctl$IPC_SET(r16, 0x1, &(0x7f0000000f80)={{0x4, r3, r8, r1, r10, 0x8c, 0x2}, 0x1, 0x7055, r5, r2, 0x7ff, 0x10, 0x1}) connect$unix(r15, &(0x7f0000001000)=@abs={0x1, 0x0, 0x3}, 0x8) 4.865733307s ago: executing program 2 (id=1960): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) (async) semget(0x0, 0x4, 0x4) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f00000000c0)={0x3, &(0x7f00000001c0)=[{0x7, 0x0, 0x1}, {0x1c, 0x0, 0x4}, {0x8106, 0x0, 0x0, 0x5}]}) (async) ioctl$BIOCPROMISC(r0, 0x20004269) (async) syz_open_pts() (async) sysctl$vm_swapencrypt(0x0, 0x0, &(0x7f0000000140)="118bea625d95de8f92c010baed45ec4bf03ace254b57973bb6de7b1c90301e9d3b5e6fb6ffffffffffffffff76c775a2a4e0556565a830032eef776127fd247103c14ab0a1cea9b4593be484f46a02ea73e910d041c5777bd852e57d3248832b91d06fe47d126022a1654859149e9486306d2f11fb1cc826c42f81b0d114f8af4ceb029a5210bb6947464bf678ba1d64a2", 0x0, 0x0, 0x0) (async) r1 = openat$speaker(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000040)='m', 0x1}, {&(0x7f0000000180)='S', 0x1}], 0x2) (async) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) (async) r2 = socket(0x2, 0x1, 0x0) ioctl$FIONREAD(r2, 0x80206910, &(0x7f00000001c0)) read(r2, &(0x7f0000000200)=""/225, 0xe1) (async, rerun: 64) ioctl$BIOCPROMISC(r0, 0x20004269) (async, rerun: 64) syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x66, 0x0, 0x0, 0x6, 0x0, @multicast1, @local={0xac, 0x14, 0x0}}, @tcp={{0x0, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x2, 0x0, 0xfffd}}}}}}) 4.864607734s ago: executing program 7 (id=1961): fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x100000000000000, 0xffffffffffffffff}) (async) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) r0 = socket(0x18, 0x1, 0x0) close(r0) r1 = socket(0x18, 0x2, 0x0) setsockopt(r1, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) (async) connect$unix(r1, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0xa) sendmsg$unix(r0, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0) (async) mknod(&(0x7f0000000100)='./file0\x00', 0x20, 0x0) 4.851467168s ago: executing program 3 (id=1962): r0 = open(&(0x7f0000000040)='./file0\x00', 0x200, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x1, 0x0) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000000), 0x2cfea}], 0x1000000000000013) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x10, r0, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) write(r2, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000001c0)={0x0, 0x0, 0x0, 0xfffffffffffffdc9, &(0x7f0000000680)=""/100, 0x64}, 0x80003fae}, 0x10, 0x0, 0x0) sendmmsg(r4, &(0x7f0000000080)={0x0, 0x4}, 0x10, 0x400) r5 = open(&(0x7f0000001700)='./file0\x00', 0x70e, 0x0) bind$unix(r4, &(0x7f0000000000)=@abs={0x1, 0x0, 0x0}, 0x8) getpgid(0x0) r6 = geteuid() r7 = socket(0x2, 0x3, 0x1) connect$unix(r7, &(0x7f0000000000), 0x10) write(r7, &(0x7f0000000180)="39f29fff56576a8d", 0x8) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000000800), 0x80, 0x0) r9 = open(&(0x7f0000000540)='./bus\x00', 0x10, 0xc2) pread(r9, &(0x7f0000000280)="2beba8c50172041f8c483e8709ce2ebb000000552b612bd971adb9dad88af5020000000000000046820a50fdf90481ade5452f9f0403ce24d18e5c2fa6542b8d1ca878067d5df53d98751b0dd4dc99a12a5630d501eb2177b1ce2355e7b3c9a3ecd9b6ca3fedda0c81a7e97b9ae0f67ede47e38e84ca8fe7c8384a41ab9bd1ee272f92f9f1850cc9dbd79b11d2dcfdd19668ba07cb38d985707e849652b8742993ec3bec6a5a8a60382afb2936ef45a3b92f3bbceb7319c17c94fb9df6be072e00", 0xfffffe90, 0x80000000) r10 = openat(r2, &(0x7f0000000840)='./file1\x00', 0x8000, 0x128) r11 = getppid() r12 = getuid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$sock_cred(r13, 0xffff, 0x1022, &(0x7f0000000580)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, r14, 0x0, 0x0, 0x181}}) r15 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000880), 0x800, 0x0) r16 = open(&(0x7f00000008c0)='./file0\x00', 0x400, 0x120) getsockopt$sock_cred(r4, 0xffff, 0x1022, &(0x7f0000000900)={0x0}, &(0x7f0000000940)=0xc) getsockopt$SO_PEERCRED(r2, 0xffff, 0x1022, &(0x7f0000000980)={0x0, 0x0}, 0xc) sendmsg$unix(r3, &(0x7f0000000b40)={&(0x7f00000000c0)=@abs={0x1, 0x0, 0x2}, 0x8, &(0x7f0000000740)=[{&(0x7f0000000200)="3b5a0c4e08ab8559cee61062c6886511da0498f18d6e8de71fd802eb929a736a341abe85ccc0f402ea45a079ae3402c438cd238950da53b565fba23c7557c519a8f09b67b205295473d94ee135330b633ba8d7078fd5d5d200c6a51a3aa8b28957a2a63a8a796c6c3c0993049274d7a9416fb770443f720947e0c5419eeeb78facf8cbbe6a20f7dd83f6d84197c3e7355863f7e03b7791de452050f70bff0f6cc2f35798ba309974ecffafc0ad8d57e409edd7d5f6e4f655f9494f0397398fc9976528d0dc3b0aa75ea62e43e598715e", 0xd0}, {&(0x7f0000000100)="eeb6afe5243ea494e5990e2e0a2b894d80855252e48a6d819e1e7f25dbdff54eed19cf3f7295e5d36e7253484cd8c0a4b285fa96a127070120b9b4181fa44e5d2ba6e357a2b2140486b39f931b11a2dc15624f03c5f9009a69b2064d76b7f73e7586d18a96682fe3bfa1a039e3b78f38ce4b80e41b3b9fdbd564373f65cea413a1c1209d0b598e24a68cf4", 0x8b}, {0x0}, {&(0x7f0000000300)="81bcf25d4907cebe8733be75ee63d148c52142cd", 0x14}, {&(0x7f0000000380)="36d2e98e765a311b76b24c11c25c373c4dedf736a263566f307c96642293cbc2f8b6c117dcd524b885538759f88a9e829b817356be25e7efe00193b809d970183075dab6ba51398a7b4b3d5a3a63ab404728a627a199a076bd03af3635065b7879b0cfa1ead7bac897ab40f62c86eb2482970014832656656c", 0x79}, {&(0x7f0000000400)="3765c6d5c8e708c6", 0x8}, {&(0x7f0000000440)="d9a8a380a465618cb4c0f0e146e8a3374caf9ef02ef381ee8320cbdf081cb9cebc67ac8bdc81c06bddb995d52dd567e8134e7a7cbbe5441efe2c436f0ee213c872459664a14b375740bb", 0x4a}, {&(0x7f0000000500)="53201eb40f6d8df9d3c7", 0xa}, {&(0x7f0000000540)="f16f28087abfdbf21b4d467a6bf26af0eb2ef206c3408530a2f049da7c220ab95122a628a909215714851645b81054f3e407eb52ae2754a5c68da0c72758da79c245bd504b54f1d7e281bfb9956d1aa42eeacc7b177efbc014295d2cf951439dd62a26e016c78e2a6b7aff2445e3041dc2eab25ffbc0f0fbc08aaf6382437181e6175db64e916b352724a613b9fc33ba1074b6d7423bb2a9d223d2d471a63c1b8e960f804519adfd26ad617c24647596757560aaf76d21af9f8877f95eabdbb8", 0xc0}], 0x9, &(0x7f00000009c0)=[@rights={0x20, 0xffff, 0x1, [r3, r2, r3, r5]}, @cred={0x20}, @cred={0x20, 0xffff, 0x0, 0x0, r6, 0xffffffffffffffff}, @rights={0x20, 0xffff, 0x1, [r2, 0xffffffffffffffff, r4, r2]}, @rights={0x28, 0xffff, 0x1, [r4, r3, r3, r7, r3, r0]}, @rights={0x20, 0xffff, 0x1, [r0, r4, r0]}, @rights={0x30, 0xffff, 0x1, [r8, r9, r2, r3, r5, r5, r10]}, @cred={0x20, 0xffff, 0x0, r11, r12, r14}, @rights={0x30, 0xffff, 0x1, [r1, r15, r0, r4, r4, r16, r4]}, @cred={0x20, 0xffff, 0x0, r17, r18}], 0x168, 0x9}, 0x4) 4.589090342s ago: executing program 7 (id=1963): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) r1 = fcntl$dupfd(r0, 0x3, 0xffffffffffffffff) ioctl$FIONREAD(r1, 0x8020690c, &(0x7f00000001c0)) 4.584875707s ago: executing program 1 (id=1964): mknod(&(0x7f0000000040)='./bus\x00', 0x1, 0x3) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) writev(r0, &(0x7f0000000140)=[{&(0x7f0000001040)="bd", 0x1}], 0x1) setrlimit(0x8, &(0x7f00000000c0)={0xe, 0x51}) r2 = syz_open_pts() close(r2) syz_open_pts() ioctl$FIOASYNC(r2, 0x80047469, &(0x7f0000000040)=0xfffffffc) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f00000002c0), 0x10, 0x0) ioctl$BIOCSHDRCMPLT(r3, 0x80044275, &(0x7f0000000280)=0xfffffff8) writev(r2, &(0x7f0000000200)=[{&(0x7f0000000000)="b962121c72327a1ad302003570e389070000000b9ca6393ab0d9", 0x1a}, {&(0x7f00000006c0)="e05f5c584860b8df53096f0d9bc0f0f2a9140dd203de6de567a4d29ba3f9463f14e5e8bdded4b78901b53bc0c14b2fa666d8ede1d898aa8539ae3201783ae7960697338e188f93d7f080045b1dc217c0943d1db416b182776c7d1f60730f88a76d29825f192176ab516d4a21b8724df4e14f6b4774041113ac91d8d09d9ce729034277a1d0048073b3426eb2aaa4345cdac8053420f9664f5b017be71d950f2995a635126626345ba049b189073901026c07665aaf2ceb6d4034677eee89446a6b549b4637a305a5acdb04957d96f27b0892bbdd995f", 0xd6}, {&(0x7f0000000a40)="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", 0x142}, {0x0, 0x33}, {&(0x7f0000000100)="2dd125708ffa3bbcec66d893910e47ae4d4538", 0x13}, {&(0x7f0000000140)="2950c2aa09a08ef7d785151f9ef4d95f25d8ea11c5e0899cb6825cc6d2de2ec3670551c41c49c27ce5ca5926d7e57d", 0xfffffc67}, {&(0x7f00000007c0)="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", 0xde}, {&(0x7f0000000540)="617b875eec46fd6df4f7c3118b30abd85a1f6ab0f24a153af90e81fec2dde98f208d50365bba22c338297e5e9e96aa79977fc2a6f45b5f5e1879b92a0678eca2487320afdddec8afba05d4f1c443aef1bef27a69f534001153a7d8e453b2b30d8f866bb863e5c83b816f7e1cfdd97ade7925e1a5f5763100c13fc94fe38d934f54b607a7d4c840429dc0a9d916d7d1a464c95170cbfc9974e3fffa1c2bc23eb5451e72be7f7353a03dab5ab48e365a231abfca8c8fca8b7ed9b140b9d6f39b55c11f42408627fa30024dddca3c1994c9e32d1a276b", 0xd5}], 0x8) read(r1, &(0x7f0000000180)=""/144, 0x90) r4 = open(&(0x7f0000000080)='./bus\x00', 0x20000, 0x170) ioctl$VNDIOCSET(r4, 0xc0785101, &(0x7f0000000040)={0x0, 0x0, 0x0}) 4.583768715s ago: executing program 7 (id=1965): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb5219f1000b913f1, 0x0) ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9f, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x80) fsync(r0) 4.578281969s ago: executing program 2 (id=1966): mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0) minherit(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0) sysctl$kern(&(0x7f0000000000)={0x1, 0x9}, 0x2, 0x0, 0x0, &(0x7f0000001440)='\x00\x00\x00\x00', 0x4) 4.365305133s ago: executing program 2 (id=1967): kevent(0xffffffffffffffff, &(0x7f00000000c0), 0x8, 0x0, 0x15, 0x0) (async) kevent(0xffffffffffffffff, &(0x7f00000000c0), 0x8, 0x0, 0x15, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x17, 0xbd44, 0xe, 0x80000001, 0x9, 0x10001, 0x10, [{0xc, 0x7, 0x4, 0x71000}, {0x8, 0x8, 0x8, 0xfffffff9}, {0x8, 0xf86, 0xfffffffe, 0x9}, {0x1, 0x800, 0x8007}, {0xfff, 0x200725, 0xd197, 0x7}, {0x2, 0x2, 0x418a, 0x99}, {0xce1, 0xffffffff, 0x4f8, 0x6c}, {0x6, 0x300, 0x8, 0x1}, {0x101, 0x2, 0x5, 0x9}, {0x0, 0xc001, 0xd1b, 0x88}, {0x8001ce, 0x10001, 0x0, 0x3}, {0x80, 0x9, 0x9, 0x9}, {0xb8c, 0x4, 0x8, 0x4}, {0x29a71717, 0xfffffffa, 0x1, 0x6}, {0x0, 0x6, 0x5}, {0x8000, 0x7, 0x1002, 0x30004}]}) (async) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x17, 0xbd44, 0xe, 0x80000001, 0x9, 0x10001, 0x10, [{0xc, 0x7, 0x4, 0x71000}, {0x8, 0x8, 0x8, 0xfffffff9}, {0x8, 0xf86, 0xfffffffe, 0x9}, {0x1, 0x800, 0x8007}, {0xfff, 0x200725, 0xd197, 0x7}, {0x2, 0x2, 0x418a, 0x99}, {0xce1, 0xffffffff, 0x4f8, 0x6c}, {0x6, 0x300, 0x8, 0x1}, {0x101, 0x2, 0x5, 0x9}, {0x0, 0xc001, 0xd1b, 0x88}, {0x8001ce, 0x10001, 0x0, 0x3}, {0x80, 0x9, 0x9, 0x9}, {0xb8c, 0x4, 0x8, 0x4}, {0x29a71717, 0xfffffffa, 0x1, 0x6}, {0x0, 0x6, 0x5}, {0x8000, 0x7, 0x1002, 0x30004}]}) ioctl$BIOCSETIF(0xffffffffffffff9c, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) socket(0x2, 0x1, 0x0) (async) r0 = socket(0x2, 0x1, 0x0) ioctl$FIONREAD(r0, 0x80206910, &(0x7f00000001c0)) (async) ioctl$FIONREAD(r0, 0x80206910, &(0x7f00000001c0)) r1 = socket(0x18, 0x2, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x6}, 0x10, 0x6) ioctl$WSKBDIO_COMPLEXBELL(0xffffffffffffff9c, 0x80105702, &(0x7f00000000c0)={0x8, 0x7fff, 0x7, 0x9c74}) r2 = socket(0x11, 0x3, 0x0) sendto$unix(r2, &(0x7f0000000000)="b10005130000000000003e0004000000000013fecea10500fef96ecf2ac72fd3357ae30200004e3039d2d236acf20b7804be38164991f7c8cf7f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f335c223e7d0c032bfa896443a41c18000000720fd38bfbb770c1f5a872c88106002ec5890400000000000000361b1257aea8c500002002fbfe0c2300008abfba0900000008e371a3f8343712051eeab7196fcbd80407000000c011200000", 0x2000, 0x0, 0x0, 0x0) ioctl$FIONREAD(r1, 0x8020699d, &(0x7f00000001c0)) 4.36468898s ago: executing program 5 (id=1968): r0 = getuid() r1 = getegid() chown(&(0x7f0000000000)='./file0\x00', r0, r1) getgroups(0x2, &(0x7f0000000040)=[r1, r1]) setgid(r2) setegid(r2) r3 = socket(0x6, 0x8000, 0x2) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = open(&(0x7f0000000300)='./file0\x00', 0x30190, 0x3b) r7 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000340), 0x800, 0x0) r8 = socket$inet6(0x18, 0x4, 0x2) r9 = openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r10 = openat$klog(0xffffffffffffff9c, &(0x7f00000003c0), 0x80, 0x0) r11 = accept$inet6(0xffffffffffffffff, &(0x7f0000000400), &(0x7f0000000440)=0xc) r12 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000480), 0x10, 0x0) r13 = dup(0xffffffffffffff9c) r14 = openat$wskbd(0xffffffffffffff9c, &(0x7f00000004c0), 0x50, 0x0) r15 = fcntl$dupfd(0xffffffffffffffff, 0xa, 0xffffffffffffff9c) getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000500)={0x0}, 0xc) sendmsg$unix(r3, &(0x7f0000000600)={&(0x7f0000000080)=@abs={0x0, 0x0, 0x0}, 0x8, &(0x7f0000000280)=[{&(0x7f00000000c0)="349f029edfd5f6c4c67d416f92de8593c59048d7a767b66478d38ed6e95b397ff87ffe556df16ba4a6e5e51683ab4563f3b5c71f9366f80ee7e6669b68c0e40348e96e60f28d4c2d0d5eb35c61fff7ec9373cd6d7a11a5b3c48a6e4d5f81b1f427a99a05e2c2b468d675e89c6b9e88d7ae53df3d8eb75a2bb8dde5793c5b6e75cbec41bbd8d38b31e3add8f501cc1f46d84af116d04230c2601fcbf6075e62da393603578e9ec685948942b38f0b4a80a234e8ddfba09c194698", 0xba}, {&(0x7f0000000180)="5c6f7913fc2a77827b136770c7875cd8f29f2b61bfba7c9e631f34281c941e786031758eec795424587fed663a2d1707cadf11491a58596cc839812abe0ad1588d5c0c4ea486e94c7bcefa7e4b8dc49675e819e3e63a0ec77b1b167e45578c9fe6dc4d23a668eb1c2268663a0d67d6088a444beac40e00401a08079105d6f1ab1215c50d7d763ca5a61d76d3c0a5c49e52ab66c7de1409b851881ea34a1c44d974585d7f2087175c1dfa6cee0c66509847270b49325af4fd3259dd899dbb66287c8685e6c0cd5c92aa5a1627f048b1a5efd1e9810bb7ceb629318f377909a4066fdfefc107db09ca69b8", 0xea}], 0x2, &(0x7f0000000540)=[@rights={0x30, 0xffff, 0x1, [r5, 0xffffffffffffffff, r6, r7, 0xffffffffffffff9c, r8, r9]}, @rights={0x28, 0xffff, 0x1, [0xffffffffffffffff, r10, 0xffffffffffffff9c, r11, 0xffffffffffffff9c, r12]}, @rights={0x20, 0xffff, 0x1, [r13, 0xffffffffffffff9c, r14, r15]}, @cred={0x20, 0xffff, 0x0, r16, r0, r2}], 0x98, 0x4}, 0x403) pipe(&(0x7f0000000640)={0xffffffffffffffff}) mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3) ioctl$VMM_IOC_CREATE(r4, 0xc2585601, &(0x7f0000000680)={0x10, 0x6, [{&(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x6}, {&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x1}, {&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x1}, {&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x401}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x6}, {&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x4}, {&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x9}, {&(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x4}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x4}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x10000}, {&(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffb000/0x1000)=nil, 0x8}, {&(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0xfffffffffffffffc}, {&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x6f}, {&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff7000/0x4000)=nil, 0x3ff}, {&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0xe00000}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, 0x3}], './file0\x00', 0x2}) sysctl$kern(&(0x7f0000000880)={0x1, 0xa}, 0x2, &(0x7f00000008c0)="79fc538ecb8ed972044acee1a5a44edec6c961cf09edae3b98acadcd8050e0d6c1f7e094b65b537c89af118a86a3d0884abe6ec4fb69ac4faf17130741fde309ee50c9e4d07fb715ce51faf63c3ca2c6cc53aa0d9c7d9f1de72c16857fa3e9f086067c1ffd30350064a80062d34c35213a61d6659f3224277e4c5f2e8a9ca442ea2fb4ac7d2219f648d018ad249de2633b5ff7c39a09a961763a7731488e16e9cc62dbb81fb50866f0a242e1bf3aebb354ae1d4dedf30988474d9abdd33f66e4b29d0ad226e10e51c48e10fdf78474dcd8d41033bfe042ba520ee81948a38a1a25e5f5891c886c", &(0x7f00000009c0)=0xe7, &(0x7f0000000a00)="ec1c717ce37b3946c88c018f6f00680b17de62276eeae3a8e8417adba6fbd7110b9b0b5ac4437d53927cb664441501a641443419a4f935e6dd5525a310e11e8c6f8d21241e45acff1e083e2d0394a87c96cb516a15d47884cd72d412dc6f8db2f76a5ac0b62bede4dfb49e7d9204c0359769", 0x72) ioctl$WSKBDIO_SETDEFAULTKEYREPEAT(r17, 0x800c5709, &(0x7f0000000a80)={0x4, 0x9, 0x40}) dup2(r14, r8) rename(&(0x7f0000000ac0)='./file0\x00', &(0x7f0000000b00)='./file0\x00') chown(&(0x7f0000000b40)='./file0\x00', 0xffffffffffffffff, r1) r18 = socket(0x2, 0x1, 0x7) sendto(r18, &(0x7f0000000b80)="1d5e959815816a75506405884733f7fa7a229249af8b10d9fab1751f0c01c4385db94cd29aa4c7b3529b4f51bb13de9f569e6b0c5fb10ac5da5818073f24d1b6ba45c66aa9aecf2563eec0289bf80f904dad76cae535eae5cc05a918c8cb0384047fbf27a04f1b87e61425105b82d430dbeb180f11f2664391f2bbadafb563a9b7f68e0d7591f9382d272e324c30ddd879c3047bbd711c685e60fb6255cee6844139b27f7bb06d8d1081dcd2a1db3cb7efffccd06fb71d67", 0xb8, 0x8, 0x0, 0x0) 3.805012727s ago: executing program 7 (id=1969): writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000080)="76e5eac907f9ccf7a251ceddcec7d6aa45cffe2c63a56077123a276d3ba4e9d17eb3eb5db12a3783a8e0620d357de1fe04fa9465b5bd1286e9624dec06a00c222f", 0x41}], 0x1) rename(&(0x7f0000000780)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0) r0 = openat$speaker(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) writev(r0, &(0x7f0000000280)=[{&(0x7f00000000c0)="7ec036", 0x3}], 0x1) setrlimit(0x8, &(0x7f0000000400)={0x7, 0x54}) r1 = syz_open_pts() close(r1) r2 = syz_open_pts() ioctl$TIOCSETD(r2, 0x8004741b, &(0x7f0000000500)=0x7) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000040)="6116e89917c9f52e88d1e215fcc96d3ad2c6636cc5d8d16b98ce4e717830946ebe4c242b9c240d", 0x27}, {0x0}, {&(0x7f0000000240)="7ab12a4dffa97bf4385fe86ddf7beb3e61effaa6454f7f7eaabd74b6cb2026d368e0adc93fb619901d5c044ca05a785e79e107cb078a18a41ca808f0c5b5566fd7a1556a75a9ee5de99b58e3b9644ea024efbc56a58f78651ed82760e396c217bdef35d2fed44d4037484787344d33a93690b01dfb6c8ee8db1d71a01c644959b7380a6146d2daa69f3c366e5de9293554028f3d4338e67fb653644a14c94557", 0xa0}, {&(0x7f0000000300)="2cdf3c11956cfcc520859c7b68", 0xd}, {&(0x7f0000000340)="06eba9b376d69061ce2ddbf8eed3f70463d2aa983465fae9f4ef4a8f89002c9e5f689c2492362693e07e90e6118fb39d7a34d138c80c150f3fd44bed2479228982a0e91cb851397cb09ea99a0f5010328a83851f16186f9d753d0411c1cf7f", 0x5f}], 0x5) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) symlink(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffff9c, 0x4) chdir(&(0x7f0000000180)='./file0\x00') chmod(&(0x7f0000000040)='.\x00', 0x35e) setuid(0xee01) munlock(&(0x7f0000275000/0x2000)=nil, 0x2000) seteuid(0x0) unveil(&(0x7f0000000140)='./file1\x00', &(0x7f00000002c0)='r\x00') setrlimit(0x8, &(0x7f0000000180)={0xa, 0x8000}) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7, 0x0}, 0x8) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x4000000000000003}}) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r3 = socket(0x18, 0x1, 0x0) close(r3) socket(0x18, 0x3, 0x0) setsockopt(r3, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) connect$unix(r3, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x180) 3.5153214s ago: executing program 4 (id=1970): sendsyslog(&(0x7f00000000c0)="88e4abc215e0d9152f79fa86d94d4279acbe010e9d9853cc87063d69624f5c8b47fb4d525fc05e17f2a64552b9aa5f8710853cb169a11a064d608b9b8544a16682e3cc0af042284799da5eef28ee1e3c41b164254daf57d557705d2dfbcb999a6e0d2f2be5ea010466b89cecb0f133a255e56039adaf52f50c626c1d4b522668afefa29b0100d79ef4812dc6401ab7ec5927fd696ec0b0cb9818c5fe9b9ec308c378130b", 0xa4, 0x68) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x2) open(&(0x7f00000002c0)='./file0\x00', 0x8, 0x102) ioctl$VNDIOCSET(r0, 0xc0104401, &(0x7f00000001c0)={0x0, 0x0, 0x0}) 3.514593917s ago: executing program 4 (id=1971): r0 = open(&(0x7f0000000000)='./file0\x00', 0x2, 0x4) ioctl$TIOCSCTTY(r0, 0x20007461) (async) ioctl$TIOCSBRK(r0, 0x2000747b) (async) shmat(0xffffffffffffffff, &(0x7f0000ffb000/0x5000)=nil, 0x0) (async) ioctl$TIOCSPGRP(r0, 0x40047477, &(0x7f0000000040)) (async) r1 = shmget(0x3, 0x2000, 0x510, &(0x7f0000ffd000/0x2000)=nil) (async) ioctl$TIOCCBRK(r0, 0x2000747a) (async) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) ioctl$TIOCSTAT(r0, 0x20007465, &(0x7f0000000080)) close(r0) (async) ioctl$TIOCFLUSH(r0, 0x80047410, &(0x7f00000000c0)=0x9) (async) r2 = shmget$private(0x0, 0x2000, 0x20, &(0x7f0000ffb000/0x2000)=nil) shmctl$SHM_LOCK(r1, 0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000140)=@abs={0x0, 0x0, 0x3}, 0x8) (async) ioctl$TIOCFLUSH(r0, 0x80047410, &(0x7f0000000180)) select(0x40, &(0x7f00000001c0)={0xfffffffffffffeff, 0x10000, 0x1, 0x1, 0x4, 0x1, 0xc, 0x5}, &(0x7f0000000200)={0xc72a, 0x2, 0x7f, 0x4, 0x7fffffffffffffff, 0x9, 0x9, 0xe6}, &(0x7f0000000240)={0x5, 0x6, 0xfffffffffffffffa, 0x0, 0x6, 0x3, 0xe7, 0xb92}, &(0x7f0000000280)={0x4}) (async) preadv(r3, &(0x7f0000000500)=[{&(0x7f00000002c0)=""/8, 0x8}, {&(0x7f0000000300)=""/80, 0x50}, {&(0x7f0000000380)=""/50, 0x32}, {&(0x7f00000003c0)=""/110, 0x6e}, {&(0x7f0000000440)=""/185, 0xb9}], 0x5, 0x1000) (async) ioctl$TIOCGFLAGS(r0, 0x4004745d, &(0x7f0000000580)) (async) mquery(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x1, 0x10, r0, 0x8) shmctl$IPC_RMID(r2, 0x0) (async) ioctl$TIOCSETAF(r0, 0x802c7416, &(0x7f00000005c0)={0x5, 0xb, 0x81, 0x7f, "efc3c700dedd05bdeec0a4091e730b14f1016f26", 0x200, 0x800}) shmat(r2, &(0x7f0000ffd000/0x2000)=nil, 0x2000) openat$pf(0xffffffffffffff9c, &(0x7f0000000600), 0x10, 0x0) (async) ioctl$VMM_IOC_WRITEREGS(r0, 0x82485608, &(0x7f0000000640)={0x10001, 0x1, 0x7, {[0x5, 0x4, 0x0, 0x10000, 0xf, 0x8, 0xc8b5, 0x10001, 0x9, 0xc7, 0xc22, 0xe, 0x8000000000000001, 0x8, 0x800, 0xc, 0x4, 0x4], [0x1, 0x8, 0x9, 0x0, 0x3, 0x8, 0x7f, 0xce46, 0xa0, 0x4], [0x5, 0x1, 0x6, 0x6, 0x3872, 0x6dd, 0xf04], [0x2, 0xffffffff, 0x10, 0x8000000000000000, 0xe8, 0x58], [{0x800, 0x2381, 0x7, 0x8}, {0x5a, 0x3, 0xffff, 0x5}, {0x3, 0x3, 0x7, 0x7}, {0x4, 0xff, 0xa065, 0x1000000000000000}, {0x773, 0x6, 0xc0, 0x8}, {0x1, 0x5, 0x101, 0x791}, {0xaac, 0xd, 0x39a, 0x4}, {0x7, 0x8727, 0x0, 0x100}], {0x7, 0xcaa, 0x3, 0x7fffffff}, {0xd, 0x38000, 0x1, 0xbeb}}}) r4 = openat$pf(0xffffffffffffff9c, &(0x7f00000008c0), 0x8, 0x0) ioctl$WSMOUSEIO_SETPARAMS(r4, 0x80105728, &(0x7f0000000940)={&(0x7f0000000900)=[{0x80, 0x5}, {0x42, 0x7fffffff}], 0x2}) (async) ioctl$BIOCGRTIMEOUT(r4, 0x4010426e, &(0x7f0000000980)) select(0x40, &(0x7f00000009c0)={0x1, 0x3, 0x1, 0x1ff, 0x6, 0x0, 0x3ff, 0x40}, &(0x7f0000000a00)={0x9649, 0x0, 0x85, 0x12000000000000, 0x3, 0x1, 0x8, 0x68}, &(0x7f0000000a40)={0xfffffffffffffffa, 0x0, 0x9, 0x40, 0x10001, 0x2, 0x8, 0x2}, &(0x7f0000000a80)={0xfffffffffffffff9, 0x1}) (async) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) 3.280058724s ago: executing program 2 (id=1972): mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) acct(&(0x7f0000000000)='./file0\x00') mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) r0 = openat$tty(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000140)={0x1000, 0xffff, 0x4000000, 0x5, "09d6fc3bc722fafbbe98a762609531d383607c96", 0x5, 0x4}) link(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000d40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000a40)='./file0\x00') 3.278447379s ago: executing program 4 (id=1973): mknod(&(0x7f0000000000)='./bus\x00', 0x2000, 0x150577e) open(&(0x7f0000000000)='./file0\x00', 0x200, 0x6) ktrace(&(0x7f0000000100)='./file0\x00', 0x4, 0x51d73188af82cb95, 0x0) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCSRTIMEOUT(r0, 0x8010426d, &(0x7f0000000100)={0xffffffffffff8000, 0x100}) clock_getres(0x0, &(0x7f0000000500)) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket(0x2, 0x2, 0x0) connect$unix(r1, &(0x7f0000000000), 0x10) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) sendmmsg(r1, &(0x7f0000000500)={0x0, 0x3}, 0x90, 0x14) mknod(&(0x7f0000000000)='./bus\x00', 0x2000, 0x150577e) (async) open(&(0x7f0000000000)='./file0\x00', 0x200, 0x6) (async) ktrace(&(0x7f0000000100)='./file0\x00', 0x4, 0x51d73188af82cb95, 0x0) (async) openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) (async) ioctl$BIOCSRTIMEOUT(r0, 0x8010426d, &(0x7f0000000100)={0xffffffffffff8000, 0x100}) (async) clock_getres(0x0, &(0x7f0000000500)) (async) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) socket(0x2, 0x2, 0x0) (async) connect$unix(r1, &(0x7f0000000000), 0x10) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (async) sendmmsg(r1, &(0x7f0000000500)={0x0, 0x3}, 0x90, 0x14) (async) 3.277541843s ago: executing program 2 (id=1974): setrlimit(0x8, &(0x7f0000000240)={0xe1, 0x51}) r0 = syz_open_pts() close(r0) r1 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000540)="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", 0x1ea}], 0x1) write(r1, &(0x7f0000000340)="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", 0x1e9) r2 = socket$inet(0x2, 0x2, 0x0) close(r2) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r3, 0x0, 0x200000000000b, &(0x7f0000000080)='\x00', 0x1) setsockopt$inet_opts(r2, 0x0, 0x200000000000c, 0x0, 0x0) execve(0x0, 0x0, 0x0) syz_open_pts() ioctl$FIOASYNC(r0, 0x80047469, &(0x7f00000000c0)=0x5) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x637e) socketpair(0x10, 0x8000, 0x6, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r4, 0xffff, 0x1, &(0x7f00000001c0)=0x6, 0x4) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x8, 0x2000000000000004}, 0x0, 0x0, 0x0) r5 = kqueue() kevent(r5, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file1\x00', 0x61cb, 0xffffffec, 0x7, 0x0, 0x7ff, 0xfff, 0x1, 0x2, 0x1, 0x201, 0x4000000000f18}) r6 = open(&(0x7f00000002c0)='./file1\x00', 0x40, 0xb0) ioctl$FIONBIO(r6, 0x82907003, &(0x7f0000000140)=0x2) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) ioctl$WSDISPLAYIO_GETSCREENTYPE(r6, 0xc028575d, &(0x7f0000000200)={0xffff, 0x7fffffff, './file0/file0\x00', 0x9, 0x353, 0xe, 0x9f93}) ioctl$FIONBIO(r6, 0x82907003, &(0x7f0000000140)=0x1) close(r6) mknod(&(0x7f0000000000)='./bus\x00', 0x2000, 0x0) r7 = open(&(0x7f00000000c0)='./bus\x00', 0x200, 0x0) ioctl$TIOCMSET(r7, 0x8004746d, &(0x7f0000000180)=0x7fffffff) 3.276976326s ago: executing program 1 (id=1975): mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0xd02) select(0x40, &(0x7f0000000040)={0x40007, 0x5, 0x10000, 0x8000000000000003, 0x3, 0x5, 0x5afc, 0x2a}, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x140) sysctl$kern(&(0x7f0000000000)={0x1, 0xb}, 0x2, 0x0, 0x0, &(0x7f0000000580), 0x0) sysctl$net_inet_carp(&(0x7f0000000040)={0x4, 0x2, 0x6, 0x3}, 0x4, 0x0, 0x0, 0x0, 0x0) ioctl$WSMOUSEIO_SCALIBCOORDS(r0, 0x81205724, &(0x7f00000000c0)={0x200000, 0x1, 0xfffffffb, 0x3, 0x8, 0xbe, 0x7fffffff, 0x10, [{0xfffffff7, 0x7, 0x5a, 0x6c}, {0xfffffffd, 0x9, 0x2, 0x1ff}, {0x0, 0x3, 0x9, 0x7fffffff}, {0x8d, 0x9, 0x9, 0x1ff}, {0x1, 0x0, 0x7ff, 0x46}, {0x36, 0x0, 0x3, 0x3}, {0x4, 0x4, 0x1, 0x9}, {0x0, 0x1, 0x3, 0x1}, {0x9, 0x9, 0xee8f, 0x6}, {0x9, 0x800, 0xe4fe, 0x7}, {0x3a4, 0x7, 0x5, 0x8}, {0x4, 0xd3, 0x8, 0xfffff001}, {0x4, 0xffffff81, 0x5, 0x1113}, {0x51b387da, 0xd622, 0xfffffffd}, {0x6, 0x2, 0x2, 0x9}, {0x7, 0x3, 0x10c00, 0x9}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VNDIOCSET(r1, 0xc0785101, &(0x7f0000000040)={0x0, 0x0, 0x0}) 2.047714136s ago: executing program 1 (id=1976): r0 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$WSKBDIO_SETBACKLIGHT(r0, 0x800c5712, &(0x7f0000000040)={0x40, 0x7, 0x1}) (async, rerun: 64) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="eb0c74af1ba33e1004ae59049bb48f9d9d33d1d54b783d2cafc0c5b7fbde34324ed8f55688d0bbd24a62097711377ff99a6903d20c822de73532bedab36eef4c67fa2911675cf94c1d71831b98475acd52ab7c182ad6fd6dfed84d3e05", 0x5d}], 0x1) (async, rerun: 64) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0) ioctl$TIOCDRAIN(r1, 0x2000745e) (async) r2 = getpid() fcntl$setown(r0, 0x6, r2) r3 = getgid() (async, rerun: 64) getgroups(0x5, &(0x7f0000000180)=[0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0]) (rerun: 64) r8 = getegid() (async) r9 = getgid() (async) r10 = getgid() setgroups(0x5, &(0x7f00000001c0)=[r3, r7, r8, r9, r10]) getgroups(0x8, &(0x7f0000000200)=[r9, r7, r7, r4, r8, r5, 0x0, r10]) getgroups(0x1, &(0x7f0000000240)=[r9]) setgroups(0x8, &(0x7f0000000280)=[r8, r11, r6, r10, 0x0, r12, r8, r4]) (async) r13 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x400, 0x0) ioctl$TIOCSETA(r13, 0x802c7414, &(0x7f0000000300)={0x1ff, 0x3, 0x8000, 0x2, "19a0752553b2b138dfe17ee394c2aa3766fb06a0", 0x1, 0x80000000}) (async) rename(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='./file0\x00') (async) getsockopt$sock_cred(r13, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, 0x0, 0x0}, &(0x7f0000000400)=0xc) setgid(r16) (async, rerun: 32) sysctl$kern(&(0x7f0000000440)={0x1, 0x36}, 0x2, &(0x7f0000000480)="5a436aa9421c63cd34d648492e61aa779b912cdc100aba87d7fc26c3320e439e228db44add34933e0e8e8a865763e5891bb68e94be65202943937154e69316f6cf718e3f4ba180faef71afefeb62fc9384d4a860fbd98902f236a8831ca2fdeb4301cf6a3351e59b0bacf3c42cd1889dbde2119a872a4243f4cf050bfec7e0ccb0dfb6b9a31be89f9462", &(0x7f0000000540)=0x8a, &(0x7f0000000580)="e02b18fc7b10d14d7ef0fcfc572cbabf436944ff9f00de8dd6714dbadf19031460fe47b88407d955912b8ce9b3646cc1ccb7270bf526a63325a92ff1a329a4237f574d66c87d7fb2b46a0d237593aac7658a7e42aab5779797ca5c8da8975592dac34fd0208305bfdee9684cf0849b76e7", 0x71) (rerun: 32) ioctl$TIOCEXCL(r1, 0x2000740d) (async) getpgid(r14) (async, rerun: 32) lseek(r1, 0xe9, 0x0) (async, rerun: 32) sysctl$kern(&(0x7f0000000600)={0x1, 0x20}, 0x2, &(0x7f0000000640)="a423074cf816b79a5982c9fc4261fd341ae5ddb58ac428948fc6f456aa67a7dd7f02248ffc178bd4368456dd450146d0f1b85e38a87838d7135e46af1bd3f9c8b6e05f5f68257f7fc8a81e434eae3e1ab19aed5292cc805821165c363f660c2e8652b0893487a90b69c213dc925ae23438fd7fbee99b8560f162da5e58b13082de0ec53938686aa0e277897e64743709b8088b8e", &(0x7f0000000700)=0x94, &(0x7f0000000740)="82af425d1afe56e8b36e0096051e775244c3f7b668fdd53f0435a279538c0a8a0a52dbe113611221ef09e86b6d2df9d1bce1e01a23daaa9702469eb8a52d74da6739f91167f86ca448fc40f1b2", 0x4d) (async) connect$unix(r13, &(0x7f00000007c0)=@abs={0x0, 0x0, 0x0}, 0x8) (async) chown(&(0x7f0000000800)='./file0\x00', r15, r6) (async, rerun: 32) syz_emit_ethernet(0x32, &(0x7f0000000840)={@local, @broadcast, [], {@arp={0x806, @generic={0x1, 0x8037, 0x6, 0x0, 0x8, @broadcast, "", @local, "cda90b7b67d9458f393e34efa16a5a9f"}}}}) (async, rerun: 32) sysctl$net_inet_esp(&(0x7f0000000880)={0x4, 0x2, 0x32, 0x4}, 0x4, &(0x7f00000008c0)="f25eeb5a6d724de13c67d86e13aa455a12bdd637a8c9a61123a4cc507be65132a08165a9cd8a26f9222456c43fc87f2929065833c2cc7ebddec8bdd2271fe5740f63e39983e275532d6d210f94a46cba4f3bee247d439046bfa675eb9c28fc25d290777e486919c537b4634eb750a8395ff1d9269c0e266eb56a1c321d8a25d9887a06", &(0x7f0000000980)=0x83, &(0x7f00000009c0)="20558a3409876c4cbacf43099cc03327ee0b9549fe23c07e820505f322ad75d3ba395c7008351759140b7edcf128ce565e2f3f6f3fef7f04cfd0fabd6628f2b0a1bda5085509b50a131d09ba0ce6891fdac755210de414bc0eceb85f7035eafefc71f5d19b67fc03c3fd58435558bc6218336a8a7ce4c7352dcc6b99752d566f7a12dac5f70770df4445438caa7289b9e186606e25672961dfb39486d3790ac7db2b088181db400fe5c16775bc54343203792549e6c05754545fad5c3578c4124eae9627f67aa057bd876da992", 0xcd) 1.78488353s ago: executing program 6 (id=1977): r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x186) open(&(0x7f0000000480)='./file0\x00', 0x100, 0x4ebfac6bbaf7941) (async) ktrace(&(0x7f0000000180)='./file0\x00', 0x4, 0x4000042a, 0x0) (async) r1 = syz_open_pts() r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$TIOCCONS(r2, 0x80047462, &(0x7f0000000200)=0x28) ioctl$TIOCCONS(r1, 0x80047462, &(0x7f0000000300)) (async) ioctl$VMM_IOC_WRITEREGS(r0, 0x82485608, &(0x7f0000000100)={0xaa, 0x0, 0x0, {[0x7d90, 0x0, 0xffffffffffffffd, 0x1, 0xe, 0x0, 0x1000000000000, 0x0, 0x7f, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x3, 0x0, 0xfffffffffffffffe, 0xfffffffffffffff8, 0x1], [0x63, 0x5, 0x202, 0x0, 0x0, 0x0, 0x4, 0x480000, 0x80000004], [0x800000000006, 0x0, 0x8], [0xfffffffffffffffd, 0x0, 0xe, 0x800, 0x0, 0xa], [{0x0, 0x10, 0x0, 0x8000000000001}, {0x0, 0x0, 0xfffffff9}, {0x1000, 0xa, 0x0, 0xfffffffffffffffc}, {0x0, 0x6, 0xfffd}, {0x0, 0x0, 0xc8, 0x8}, {0x8eb2, 0x5, 0x0, 0x1}, {0x0, 0x0, 0xaa}, {0x0, 0xfffffff5, 0x0, 0x1ff}], {0xfffc, 0xfffffffd, 0x20008006, 0xfffffffffffffffe}, {0x0, 0x5}}}) pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0x80000000, 0xffff63de, 0x2, 0x2, 0x8, 0x100003, 0x40, 0x10, [{0x5, 0x3, 0x6955, 0x80000201}, {0x2, 0x8, 0xb, 0xfff}, {0x407, 0xfffffffe, 0x2006, 0xfffffffc}, {0x2, 0x7, 0xf}, {0xf106, 0x7, 0xf11, 0x7}, {0x3, 0xffff, 0x80d2}, {0x24, 0x1, 0x85, 0x9}, {0x0, 0x40009, 0xfbfffff8, 0xfbffe2e9}, {0x8, 0xffa, 0x6, 0x7fff}, {0x0, 0xfffffff8, 0x400005, 0x8bfb}, {0xfffff0d1, 0x8000000, 0x8, 0x7}, {0x4, 0xc7cb, 0x3, 0x2}, {0x401, 0x106, 0xa, 0x40}, {0x200003, 0xee6, 0x2}, {0x800000, 0x800, 0x3, 0x5}, {0x9be2, 0x107ffe, 0x6, 0x6d}]}) poll(&(0x7f0000000000), 0x35, 0x0) (async) read(r3, 0x0, 0x0) (async) r5 = kqueue() kevent(r5, &(0x7f0000000040), 0x30, 0x0, 0x57d, 0x0) kevent(r5, 0x0, 0x3, &(0x7f0000000680)=[{{r3}, 0xfffffffffffffffb, 0x41, 0x20, 0x0, 0xc}, {{r5}, 0xfffffffffffffffc, 0x20, 0x10, 0x9, 0x6}, {{r2}, 0xfffffffffffffff9, 0x80, 0x1, 0x81, 0xffff}, {{0xffffffffffffff9c}, 0xfffffffffffffffe, 0x34, 0x89, 0x8, 0x400}, {{r1}, 0xdb727148efdf4dbc, 0xc9, 0x2, 0xfffffffffffffff9, 0x200000ff}, {{r1}, 0x0, 0x40, 0x4, 0x0, 0x2}, {{r1}, 0xfffffffffffffffb, 0x4, 0x2, 0x8, 0x3ff}, {{r1}, 0xfffffffffffffff9, 0x1c, 0xfffff, 0x7, 0x7}, {{r4}, 0xfffffffffffffffc, 0x10, 0x0, 0x400, 0x8}], 0x2, 0x0) (async) ioctl$BIOCSETIF(r4, 0x8020426c, &(0x7f0000000380)={'tap', 0x0}) (async) r6 = socket(0x18, 0x1, 0x0) (async) setgid(0xffffffffffffffff) (async) r7 = getgid() setregid(0x0, r7) (async) r8 = socket$unix(0x1, 0x5, 0x0) bind$unix(r8, &(0x7f0000000200)=@file={0xd570d0466b6018f, './file0\x00'}, 0xa) listen(r8, 0x4) (async) r9 = socket$unix(0x1, 0x5, 0x0) select(0x40, &(0x7f0000000000)={0xfffffffffffffff9, 0x8, 0x6, 0xfffffffffffffbff, 0x27effffffffffffd, 0x181c, 0x40000000000007, 0x359}, 0x0, 0x0, 0x0) (async) connect$unix(r9, &(0x7f0000000040)=@file={0xd1653077bafa0114, './file0\x00'}, 0xa) (async) accept$unix(r8, 0x0, 0x0) (async) shutdown(r6, 0x1) ioctl$FIONREAD(r6, 0xc050756a, &(0x7f0000000100)) 1.515403382s ago: executing program 0 (id=1978): r0 = semget$private(0x0, 0x5, 0x90) semctl$SETALL(r0, 0x0, 0x9, &(0x7f0000000040)) (async) semctl$SETALL(r0, 0x0, 0x9, &(0x7f0000000040)) semop(r0, &(0x7f00000000c0)=[{0x2, 0x20, 0x1800}, {0x3, 0x2}, {0x2, 0x9, 0x1000}, {0x6, 0x7fff, 0x1800}, {0x2, 0x5, 0x1800}, {0x0, 0x6, 0x2800}, {0x2, 0x33}, {0x1, 0x1, 0x1800}], 0x8) mknod(&(0x7f0000000000)='./file1\x00', 0xc000, 0x205b92) socket(0x11, 0x3, 0x0) (async) socket(0x11, 0x3, 0x0) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000200), 0x6c1, 0x0) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x9b0, 0x1, 0x2}]}) setegid(0xffffffffffffffff) setregid(0x0, 0xffffffffffffffff) (async) setregid(0x0, 0xffffffffffffffff) socket$unix(0x1, 0x2, 0x0) (async) socket$unix(0x1, 0x2, 0x0) r2 = semget$private(0x0, 0x5, 0x90) semctl$SETALL(r2, 0x0, 0x9, 0x0) (async) semctl$SETALL(r2, 0x0, 0x9, 0x0) semop(r2, &(0x7f0000000040)=[{0x2, 0x33}, {0x1, 0x1, 0x1800}], 0x2) semctl$SETVAL(r2, 0x3, 0x8, 0x0) sysctl$kern(&(0x7f0000000300)={0x1, 0x46}, 0x2, 0xfffffffffffffffe, 0x0, 0x0, 0x0) 1.51462575s ago: executing program 3 (id=1979): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x10, 0x0) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x0, 0x9, 0x2, 0x2}, {0x6, 0x12, 0xe4, 0x100}, {0x6, 0xa, 0x83, 0x400e}]}) writev(0xffffffffffffffff, &(0x7f0000000080)=[{0x0}], 0x1) sysctl$kern(0x0, 0x0, &(0x7f0000000280)="e15aacade8fdf79411d132e8b8aec06c058500e5da53993f147d79c7de1e2c6bf75ccc2f513f1bf36c92c5d0db951b1b4bd3e916f774d53017ef0d2938cee2f5721f5528", &(0x7f0000000080)=0x44, 0x0, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sysctl$kern(&(0x7f00000000c0)={0x1, 0x29}, 0x2, &(0x7f0000000140)="9300", &(0x7f00000001c0)=0x2, &(0x7f0000000300)="251bb30c155bb02a2162915c419cbe0e176d14c3255640af5f70f7e49dd26dbfbd75b23768aefee7bc186a00b4f38e3e7408895dbdb797c66eccc2f48149b991c1959643a375088aa94d5f3dc0fc8ae480679196ba6a4834b3fb180b6166e1da141aa838b24c16a3c108bb999943968b6691c95180848175701fd0300cb1f7d9050c5c38d99c927625d4085728e60102baafd3ff5065ddaf7c21ce0e3a3337e14431fb04ea523edb87fb686399e6bbde1057bd1f9fce298e1e77751c4588dec378e00b60ac0c183daef28c862337fd609fbc76f6", 0xd4) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) acct(&(0x7f0000000000)='./file0\x00') r1 = socket(0x2, 0x4001, 0x0) shutdown(r1, 0x0) recvmmsg(r1, &(0x7f0000001700)={0x0, 0x40000000}, 0x10, 0x80, &(0x7f0000001780)={0x0, 0x7}) r2 = dup(r1) r3 = fcntl$dupfd(r2, 0x2, 0xffffffffffffffff) close(r3) r4 = socket(0x2, 0x2, 0x0) dup2(r2, r3) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) connect$unix(r4, &(0x7f0000000400)=@abs={0x1, 0x0, 0x0}, 0x8) connect$unix(0xffffffffffffffff, &(0x7f0000000000), 0x10) setsockopt$sock_int(0xffffffffffffffff, 0xffff, 0x1023, &(0x7f0000001080)=0x7fff, 0x4) syz_emit_ethernet(0x2a, &(0x7f0000000180)={@broadcast, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x3e, 0x1c, 0x0, 0x0, 0x0, 0xff, 0x0, @multicast2}, @icmp=@echo={0x8, 0x0, 0x0, 0x0, 0x100}}}}}) r5 = socket(0x11, 0x3, 0x0) r6 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0xd6) writev(r6, &(0x7f0000000040)=[{&(0x7f00000000c0)='#!', 0x2}, {&(0x7f00000002c0)="8d6bb85551ec8430877ae32fe9bbe42cc8f2147a3eba8e1969f0435119cf4c071c8aee7ef2921be5d7d4796c5566c9593ac89e994b85a05915eaffac51de05a87b8b893e09000000d886eafbe03881d25b7b59f701322b3a109a13436e486b0a6eee", 0x62}], 0x2) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) sendto$unix(r5, &(0x7f0000000200)="b100050300000400000000b307000000331c13fecea10500fef96ec0c72fd3357ae30200004e3039d2d236acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad09000000000000009b67404d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f52ec5890400000000008000361b1257aea8c500002022fbfe0c2300008abfba0900000008e371a3f8343712051eeab71d1889e000040700000000130000000000000000", 0xb1, 0x40c, 0x0, 0x40) 1.135463505s ago: executing program 1 (id=1980): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) sysctl$kern(&(0x7f00000000c0)={0x1, 0x3f}, 0x2, &(0x7f0000000240)="71f90200000000000000af6fb1fa62498e5f84cf71b59c7afec37082", &(0x7f0000000000)=0xfe1e, 0x0, 0xfffffffffffffd7b) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) sysctl$kern(&(0x7f0000000040)={0x1, 0x4b}, 0x2, &(0x7f0000000080), &(0x7f0000000100), &(0x7f0000000140)="257488252c1db059d5fc217d489298332e92bf08488b27ae34957ff601db659aff9d249800bbc52203792a7e5763226784f111227db2afe9057ece58f90e6076a7e30d197e4105447d7915eebcbf61efe789e115dbbcc9e38afb59331b395f79c98ff9599210588a0fa45b450804ce7ed9d86e7ce9567034c4cc07dea6a85505e7e7fe42e426ae6d86afe80a09a03942668ccfc6f9110d9b1db468a00a5826f186fea12bcb6dd8b46d9aa4a91fdc52d323b3adba060a8eddc0911ae97b05e09082a981496f", 0xc5) 824.942331ms ago: executing program 1 (id=1981): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) r1 = syz_open_pts() ioctl$TIOCSETD(r1, 0x8004741b, &(0x7f0000000180)=0x8) openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x262, 0x0) r2 = socket(0x2, 0x1, 0x0) ioctl$VNDIOCSET(0xffffffffffffffff, 0x80044403, 0x0) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) open(&(0x7f0000000080)='./file0\x00', 0x80, 0x29) (async) r3 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x29) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x8018, 0x2000007, 0x101, 0x80000001, 0x81ac, 0x1, 0x10, [{0x0, 0x9, 0x0, 0x71002}, {0x2, 0x9, 0x8, 0xfffffff7}, {0x100, 0x9, 0x0, 0x9}, {0x1, 0x800, 0x8007, 0x7}, {0x401, 0x200727, 0x7, 0x7}, {0x1, 0x650, 0x3, 0x7}, {0xce1, 0xffffffff, 0x4f8, 0x6d}, {0xfff, 0x7ff, 0x1, 0x8}, {0x2, 0x82, 0x8000005, 0x5}, {0x6a75, 0x8001, 0xa94, 0x4}, {0x1cc, 0x10001, 0x0, 0x3}, {0x8, 0xd5, 0x8, 0x8000002}, {0xb89, 0x555981a8, 0x8, 0x112b}, {0x29a71717, 0x8, 0xffffffff, 0x6}, {0xc, 0x2000005, 0x5, 0x848}, {0x0, 0x1, 0x1002, 0x30004}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r3, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r3, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) (async) ioctl$VNDIOCSET(r3, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, 0x0) sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x2, 0x0, &(0x7f0000000080), 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) pledge(0x0, 0x0) pledge(0x0, 0x0) (async) pledge(0x0, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) (async) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r4 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r4, 0xc0286988, &(0x7f00000001c0)) ioctl$FIONREAD(r2, 0x8020699f, &(0x7f00000001c0)) (async) ioctl$FIONREAD(r2, 0x8020699f, &(0x7f00000001c0)) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x0, 0x9, 0x2, 0x2}, {0x6, 0x12, 0xe4, 0x100}, {0x6, 0xa, 0x83, 0x400e}]}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="25ae3b780d189ec6bfecc57b5da6ec78dfb17fecec586f63ef271495c34362eb", 0x20}], 0x1, 0x0, 0x0, 0xb}, 0x2) sysctl$kern(0x0, 0x0, &(0x7f00000002c0)="c3fafa9d401aa841d0cb7a62f11ba0489a3ba7be0d0000054c01bf06000000000000000d000000001d00000000002ded9bfdc87e5aba2fb8b807b703a31a61e3", &(0x7f0000000080)=0x40, 0x0, 0x0) (async) sysctl$kern(0x0, 0x0, &(0x7f00000002c0)="c3fafa9d401aa841d0cb7a62f11ba0489a3ba7be0d0000054c01bf06000000000000000d000000001d00000000002ded9bfdc87e5aba2fb8b807b703a31a61e3", &(0x7f0000000080)=0x40, 0x0, 0x0) mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1) (async) mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) msgget(0x3, 0x0) (async) msgget(0x3, 0x0) 415.36508ms ago: executing program 5 (id=1982): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) (async) syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) (async) sysctl$kern(0x0, 0x0, &(0x7f0000000480)="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", 0x0, 0x0, 0x0) (async) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x3fb}) (async) r1 = syz_open_pts() close(r1) (async, rerun: 64) syz_open_pts() (rerun: 64) ioctl$TIOCSETD(r1, 0x8004741b, &(0x7f0000000000)=0x9) (async) ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f00000000c0)={0x200, 0x7fffffff, 0xe25e, 0x9, "aaa1636cde9610f8b34aab1ee08634c419d9aa53", 0x0, 0x10}) (async) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) (async, rerun: 32) writev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000000)="c886b4d3e0", 0x5}], 0x1) (async, rerun: 32) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) r2 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) close(r2) r3 = socket(0x2, 0x2, 0x0) bind(r3, &(0x7f0000000000), 0x10) connect$unix(r3, &(0x7f0000000000), 0x10) (async, rerun: 32) sendto$inet(r3, 0x0, 0x0, 0x406, 0x0, 0x0) (async, rerun: 32) sendto$inet(r3, &(0x7f00000000c0), 0x0, 0xd, 0x0, 0x0) (async) setsockopt$sock_int(r3, 0xffff, 0x1023, &(0x7f00000004c0), 0x4) (async) setsockopt$sock_int(r3, 0xffff, 0x1023, 0x0, 0x0) 415.033304ms ago: executing program 0 (id=1983): getsockname$unix(0xffffffffffffffff, 0x0, 0x0) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0xf02, 0x0) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) mmap(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x1, 0x2012, r0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x10, r0, 0x0) getsockname$unix(0xffffffffffffffff, 0x0, 0x0) (async) open$dir(&(0x7f0000000000)='./file0\x00', 0xf02, 0x0) (async) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) (async) munlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) (async) mmap(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x1, 0x2012, r0, 0x0) (async) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x10, r0, 0x0) (async) 319.740857ms ago: executing program 4 (id=1984): syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) writev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000000)="c886b4d3e0", 0x5}], 0x1) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket(0x2, 0x2, 0x0) bind(r0, &(0x7f0000000000), 0x10) connect$unix(r0, &(0x7f0000000000), 0x10) r1 = socket(0x2, 0x2, 0x0) connect$unix(r1, &(0x7f0000000000), 0x10) write(r1, 0x0, 0x0) r2 = kqueue() select(0x12, &(0x7f00000000c0)={0xffffffffffffffff, 0x7, 0x6, 0xc, 0x2, 0x5, 0x8, 0x7fffffff}, &(0x7f0000000200)={0xb8d, 0x2, 0x5, 0x8000000000000001, 0x3, 0xffffffffffffffff, 0x4, 0xfffe}, 0x0, 0x0) kevent(r2, 0x0, 0xfffffff7, 0x0, 0x800, 0x0) sysctl$net_inet_divert(&(0x7f0000000040)={0x4, 0x1e, 0x2, 0x1}, 0x4, 0x0, 0x0, 0x0, 0x0) close(r2) syz_open_pts() 316.879718ms ago: executing program 6 (id=1985): mkdir(&(0x7f0000000500)='./file0\x00', 0x0) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000280), 0x20, 0x0) r1 = open(&(0x7f0000000240)='./file0\x00', 0x80, 0x1) fcntl$lock(r1, 0x9, &(0x7f0000000280)={0x0, 0x0, 0x1, 0x100038121008a}) open(&(0x7f0000000580)='./file0\x00', 0x80, 0x4ebfac6bbaf7972) chdir(&(0x7f0000000100)='./file0\x00') r2 = open(&(0x7f0000000200)='./file0\x00', 0x200, 0x10a) fcntl$lock(r2, 0x8, &(0x7f0000000080)={0x1, 0x0, 0x8, 0x100000008}) r3 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$lock(r3, 0x8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x100000401}) fcntl$setown(r0, 0x6, 0x0) r4 = open$dir(&(0x7f0000000140)='./file0\x00', 0x40, 0x159) setgid(0xffffffffffffffff) sysctl$vm(&(0x7f00000002c0)={0x2, 0x1}, 0x2, &(0x7f0000000180)="ae11e3be9dacfe6dad3137e09bbb90e4708a6a7df9d611adec950f2a21b4f844696892a99d7ff192eb45f7e32378bfee73e9f37a99d740fd3f7b5cfd35e8495a5f2a552a621edde25b5c52a7dc76eef3c73e767ea83519c53a5901d10524e7535d986f41c4752b3d183e94306068130dfe8a3bbed4e6cfe53f8f22bf4ef79063abab4712c74e43a5b4fff93388b1c4ca9f4154efe5aa0f55b0e6648349b8970eb78de921601c61bcd26403c3691934c8d833ce57475c9c695725a3957ade5581849e68e8641cd308d4d639093f3943d2bb28d00a2b90557c9740fc91fa9620ef6acc86e569e07e917c74a67e", &(0x7f0000000280)=0xec, &(0x7f0000000340)="c1fc9488caa4ad555100d6ca8b0457aab72baa9ca905c12084f23e98cede548247dec604bce4ba83d7ba3f0ebe60a8d944a754dc011cab88703b533261f2689d9911f6fd27f8e3f7cab5b9bc459838f98aecba9bbba3c2949203f27d574b1601daf3b03fdb905ffe636e25803871025567d98cc69413734832fa8ef88c42a1ff3dc8e767a966df08213530f1319fb7985a2acf27e9e4aae510ee2a5195c2b84af594627f7cb31875a873e042af25754469846339b342b448e1246afba094cf3fe883fc88fea5fe1cfab13a44b7ce63360c6399d750ba3e41e948ecc93b977caaf8c87060c48b11752f80ef7c05e1c18083d1f197fc99ae", 0xf7) r5 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x0, &(0x7f0000000080)}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000240)="258b300ad1711569138b48aec40000004a0c6c457db9b8a773693867ea9ed92904831d11", 0x24}], 0x1, 0x0, 0x0, 0xc2d839217c176b29}, 0x2) sysctl$hw(0x0, 0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETIF(r5, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) accept(r2, 0x0, &(0x7f00000004c0)) r6 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_opts(r6, 0x0, 0x64, &(0x7f0000000240)="01000000", 0x4) getsockopt(r6, 0x0, 0x6a, 0x0, 0x0) ioctl$BIOCSETWF(r5, 0x80104277, &(0x7f0000000040)={0x0, 0x0}) write(r5, &(0x7f0000000080)="000000005e0f72ce000000000000", 0xe) setgroups(0x0, 0x0) fchmod(r4, 0xf3) close(r0) 316.46257ms ago: executing program 7 (id=1986): sysctl$kern(&(0x7f0000000000)={0x1, 0x27}, 0x2, 0x0, 0x0, 0x0, 0x0) 5.211065ms ago: executing program 7 (id=1987): r0 = socket(0x18, 0x2, 0x0) setsockopt(r0, 0x1000000029, 0x32, &(0x7f00000000c0)="b211d7170d816685c8e360f2fa41c1a0946988b272d2dd3dc90142a84231a746e337b372e93320cff6669cbe7868de45ed3fc33719ca6df71ecec8a918458b2c10a1f8c66653b276e180e9cb9b21f9982230f575295d48889c9a920796b2dd92fc8575680b37ba955d2c15e6d7c9198ed900ab006ddfb67869b51a2216114d1ece85f593e74035f5bc054eb1dbddf42a", 0x90) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x10, 0x0) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x0, 0x9, 0x2, 0x2}, {0x6, 0x12, 0xe4, 0x100}, {0x6, 0x1d, 0x83, 0x400e}]}) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000480)="e6ff1402", 0x4}], 0x1) sysctl$kern(0x0, 0x0, &(0x7f0000000180)="e15a93ade8fdf79411d179d1de1e2c6bf763cc2fbfee5a9da4074a3b4558096c07911cdce221211bea986c74f0e775a51e8b9d378a9dc025d8b5a9e120273f2e571a1bbb5de8c8182dd7033978e4082dadc97adfeccea5ec418102c4a8b0e295f7698416dd6a3c7d91", &(0x7f0000000080)=0x69, 0x0, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x0, 0xb, 0x2, 0x2}, {0x6, 0x12, 0xe4, 0xfc}, {0x6, 0xa, 0x83, 0x400f}]}) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)="ec90920008", 0x5}], 0x1) sysctl$hw(0x0, 0x0, &(0x7f0000000540)="ca", &(0x7f0000000080)=0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$BIOCSETWF(r2, 0x80104277, &(0x7f0000000040)={0x0, 0x0}) write(r2, &(0x7f0000000080)="000000005e0f72ce000000000000", 0xe) syz_emit_ethernet(0x1000e, &(0x7f00000004c0)=ANY=[]) sendmsg(r0, &(0x7f0000001700)={&(0x7f0000000000)=@in6={0x18, 0x0}, 0xc, 0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x438}, 0x0) 0s ago: executing program 2 (id=1988): r0 = socket(0x11, 0x3, 0x0) setsockopt(r0, 0x11, 0x1, &(0x7f0000000240)="00aa4a79", 0x4) r1 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) ioctl$TIOCSETA(r1, 0xcd50441a, &(0x7f0000000180)={0x1, 0x2, 0x200, 0x2f, "1800e6234f5d7a0000005409456200", 0x0, 0x7}) r2 = kqueue() msgrcv(0x0, 0x0, 0x0, 0x0, 0x3000) r3 = fcntl$dupfd(r0, 0xa, r2) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0xbffd, 0x72, 0xf, 0x1}, {0x4, 0x0, 0x1, 0x1}, {0x3}]}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0x37) r4 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) write(r4, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x186) r5 = open(0x0, 0x615, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) seteuid(0xffffffffffffffff) setreuid(0x0, 0xffffffffffffffff) r7 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$WSDISPLAYIO_GETEMULTYPE(r7, 0x801c4903, &(0x7f0000000040)={0x7, '.\x00'}) r8 = accept$inet6(r0, 0x0, &(0x7f0000000200)) kevent(r2, &(0x7f0000000300)=[{{r3}, 0xfffffffffffffffb, 0x8, 0x2, 0x3, 0x63d}, {{r0}, 0xfffffffffffffff9, 0x84, 0xfffff, 0x8d, 0x7}, {{r3}, 0xfffffffffffffff9, 0x1, 0x80, 0x60e, 0x2c3d}, {{r1}, 0xfffffffffffffffe, 0x6a, 0xffffe, 0x6, 0x8}, {{r5}, 0x4cb7c6eefb323fdb, 0x80, 0x40000000, 0xfeb, 0x9}, {{r6}, 0xfffffffffffffffd, 0x22, 0x1, 0xffffffffffffffff, 0xff}, {{r7}, 0xfffffffffffffffc, 0x8, 0xfffff, 0x70e2, 0x100000001}, {{r4}, 0xfffffffffffffffb, 0x28, 0x1, 0x10000, 0x100000001}, {{r4}, 0xfffffffffffffffb, 0x0, 0x61, 0x1, 0x573}, {{r1}, 0xfffffffffffffffd, 0x194, 0x80, 0xfffffffffffffff6, 0xffff}], 0xab92, &(0x7f0000000440)=[{{r1}, 0xfffffffffffffffa, 0x0, 0xfffff, 0x9, 0x2}, {{r2}, 0xfffffffffffffffc, 0x0, 0x4, 0x10, 0x8}, {{r1}, 0xfffffffffffffff8, 0xee, 0x1, 0x0, 0x9}, {{r8}, 0xfffffffffffffffc, 0x8, 0x20000010, 0x6b45, 0x380000000}], 0xffffffff, &(0x7f0000000280)={0x6, 0x3}) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x100000000000000, 0x10040000000001}}) r9 = socket(0x18, 0x2, 0x0) setsockopt(r9, 0x1000000000029, 0xa, &(0x7f0000000040)="03000000", 0x4) setsockopt(r9, 0x1000000000029, 0xc, &(0x7f0000000000), 0x14) r10 = open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x2, 0x10, r10, 0x0) openat$pf(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$WSKBDIO_SETDEFAULTBELL(r1, 0x80105705, &(0x7f0000000000)={0x0, 0x40, 0x8, 0x6}) sendto$unix(r0, &(0x7f0000000100)="b1000504600000000000000007000000331c13fecea10500fef9ed061ddd1efb7ae320b37b673039d2d236073705ae04be38164991f7b85143222b297be1aa5b236deb51e2f0ac3ebbc257699a5f139b672f4d335d223e7d029d6ba8af630037282102000000720f70c1f5a472c881ea6e69e0bb76d907a900000200361b1257aea8c5000020020000000000008abfba090008efffffffffff3512b132ae037503682ce371a300803712051eadb71d89e0", 0xb1, 0xa, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.28' (ED25519) to the list of known hosts. pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error fuse: Cannot find fusebuf pckbd_enable: command error pppx: unable to set addresses for pppx1, error=17 pppx: unable to set addresses for pppx2, error=17 uvn_flush: obj=0xfffffd8075b12030, offset=0x1000. error during pageout. uvn_flush: WARNING: changes to page may be lost! pckbd_enable: command error lo0: can't handle af0 pckbd_enable: command error WARNING: thread `nfsio' (112125) exits with status -1 WARNING: thread `nfsio' (210358) exits with status -1 WARNING: thread `nfsio' (83473) exits with status -1 WARNING: thread `nfsio' (32061) exits with status -1 WARNING: thread `nfsio' (51688) exits with status -1 WARNING: thread `nfsio' (473331) exits with status -1 WARNING: thread `nfsio' (305416) exits with status -1 WARNING: thread `nfsio' (427207) exits with status -1 WARNING: thread `nfsio' (21327) exits with status -1 WARNING: thread `nfsio' (74193) exits with status -1 WARNING: thread `nfsio' (493394) exits with status -1 WARNING: thread `nfsio' (116635) exits with status -1 WARNING: thread `nfsio' (300301) exits with status -1 WARNING: thread `nfsio' (161267) exits with status -1 WARNING: thread `nfsio' (472389) exits with status -1 WARNING: thread `nfsio' (450802) exits with status -1 WARNING: thread `nfsio' (87152) exits with status -1 WARNING: thread `nfsio' (387587) exits with status -1 WARNING: thread `nfsio' (178050) exits with status -1 WARNING: thread `nfsio' (253856) exits with status -1 pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pppx: unable to set addresses for pppx1, error=17 uvn_flush: obj=0xfffffd805f64a3f8, offset=0x0. error during pageout. uvn_flush: WARNING: changes to page may be lost! pckbd_enable: command error denied attempt to set clock back 4162768044 seconds pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error uvn_flush: obj=0xfffffd807577b5b8, offset=0x0. error during pageout. uvn_flush: WARNING: changes to page may be lost! pckbd_enable: command error `ךq"lt9h?#Ψ.e'6Z;=lt ]T;a%*Vvoߙ‹Gû2{5-TwYvOH1hqyOMza{IOj}FVsP)Ջ:g()׎WngF^q;J3`74nLC(*+EαMmHNaW_IG`>@@p剝4R=T4*rES.0limit == rtmap_limit" failed: file "/syzkaller/managers/multicore/kernel/sys/net/rtable.c", line 132 Stopped at db_enter+0x25: addq $0x8,%rsp TID PID UID PRFLAGS PFLAGS CPU COMMAND * 60859 1327 0 0 0x4000000 0K syz-executor db_enter() at db_enter+0x25 panic(ffffffff8336fbc1) at panic+0x1e5 __assert(ffffffff833af890,ffffffff833ad1c4,84,ffffffff8340817e) at __assert+0x29 rtmap_grow(21,21) at rtmap_grow+0x24f rtable_add(20) at rtable_add+0x2d9 if_createrdomain(20,ffff800001488000) at if_createrdomain+0x40 ifioctl(ffff800010fd7790,8020699f,ffff80003908f4a0,ffff80003c446558) at ifioctl+0x1c66 sys_ioctl(ffff80003c446558,ffff80003908f680,ffff80003908f5d0) at sys_ioctl+0x674 syscall(ffff80003908f680) at syscall+0xbd4 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xcbd9d5168b0, count: 5 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{0}> ddb{0}> set $lines = 0 ddb{0}> set $maxwidth = 0 ddb{0}> show panic *cpu0: kernel diagnostic assertion "map->limit == rtmap_limit" failed: file "/syzkaller/managers/multicore/kernel/sys/net/rtable.c", line 132 ddb{0}> trace db_enter() at db_enter+0x25 panic(ffffffff8336fbc1) at panic+0x1e5 __assert(ffffffff833af890,ffffffff833ad1c4,84,ffffffff8340817e) at __assert+0x29 rtmap_grow(21,21) at rtmap_grow+0x24f rtable_add(20) at rtable_add+0x2d9 if_createrdomain(20,ffff800001488000) at if_createrdomain+0x40 ifioctl(ffff800010fd7790,8020699f,ffff80003908f4a0,ffff80003c446558) at ifioctl+0x1c66 sys_ioctl(ffff80003c446558,ffff80003908f680,ffff80003908f5d0) at sys_ioctl+0x674 syscall(ffff80003908f680) at syscall+0xbd4 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xcbd9d5168b0, count: -10 ddb{0}> show registers rdi 0 rsi 0x1 rbp 0xffff80003908f1b0 rbx 0xffffffff83811ddf cpu_info_full_primary+0x2ddf rdx 0 rcx 0xffff80003c446558 rax 0xffffffff83810ff0 cpu_info_full_primary+0x1ff0 r8 0x101010101010101 r9 0x8080808080808080 r10 0xff109f273f292f32 r11 0xefe133232f066231 r12 0xffffffff83811be0 cpu_info_full_primary+0x2be0 r13 0 r14 0 r15 0x1 rip 0xffffffff811a29e5 db_enter+0x25 cs 0x8 rflags 0x246 rsp 0xffff80003908f1a0 ss 0 db_enter+0x25: addq $0x8,%rsp ddb{0}> show proc PROC (syz-executor) tid=60859 pid=1327 tcnt=4 stat=onproc flags process=0 proc=4000000 runpri=84, usrpri=84, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff800033c09ca8,0xffff8000ffff2020 process=0xffff80003901cea0 user=0xffff80003908a000, vmspace=0xfffffd806b7ac3f0 estcpu=34, cpticks=3, pctcpu=0.1, user=0, sys=3, intr=0 ddb{0}> ps PID TID PPID UID S FLAGS WAIT COMMAND 30929 318378 66046 0 2 0 syz-executor 30929 153065 66046 0 3 0x4000001 inode syz-executor 30929 260292 66046 0 3 0x4000001 inode syz-executor 76037 82618 66417 0 2 0x1 syz-executor 76037 458360 66417 0 3 0x4000080 fsleep syz-executor 26523 238341 29177 0 2 0x1 syz-executor 26523 250831 29177 0 2 0x4000000 syz-executor 78522 512115 37029 0 2 0x1 syz-executor 78522 35621 37029 0 3 0x4000080 fsleep syz-executor 20036 197957 17275 0 2 0x1 syz-executor 20036 102349 17275 0 3 0x4000080 kqsel syz-executor 20036 71169 17275 0 2 0x4000000 syz-executor 44429 523162 80023 0 2 0 syz-executor 44429 141496 80023 0 3 0x4000080 fsleep syz-executor 44429 295683 80023 0 3 0x4000080 fsleep syz-executor 44429 70453 80023 0 3 0x4000080 fsleep syz-executor 18289 102693 9228 0 3 0 vmmaplk syz-executor 18289 51155 9228 0 2 0x4000000 syz-executor 18289 28307 9228 0 3 0x4000080 fsleep syz-executor 1327 302579 93382 0 2 0 syz-executor 1327 12172 93382 0 2 0x4000000 syz-executor * 1327 60859 93382 0 7 0x4000000 syz-executor 1327 457415 93382 0 3 0x4000080 fsleep syz-executor 7179 131792 0 0 3 0x14200 acct acct 80023 435243 70188 0 2 0x3 syz-executor 60257 2919 54815 0 3 0x82 sbwait sshd-session 17275 122214 70188 0 3 0x3 inode syz-executor 93382 20861 70188 0 2 0x3 syz-executor 37029 232711 70188 0 2 0xc82 syz-executor 9228 23420 70188 0 3 0x3 inode syz-executor 66046 155672 70188 0 3 0x82 nanoslp syz-executor 66417 109108 70188 0 2 0xc82 syz-executor 48084 467025 0 0 3 0x14200 bored sosplice 29177 49805 70188 0 2 0xc82 syz-executor 70188 509747 6952 0 3 0x82 kqread syz-executor 6952 19148 91224 0 3 0x10008a sigsusp ksh 91224 487393 55152 0 3 0x98 kqread sshd-session 55152 521097 54815 0 3 0x92 kqread sshd-session 7257 322882 1 0 3 0x100083 ttyopn getty 54815 491018 1 0 3 0x88 kqread sshd 8085 423696 32322 74 3 0x1100092 bpf pflogd 32322 253267 1 0 3 0x80 sbwait pflogd 4350 312391 59943 73 3 0x1100090 kqread syslogd 59943 328548 1 0 3 0x100082 sbwait syslogd 85803 169657 1 0 3 0x100080 kqread resolvd 79118 468660 87849 77 3 0x100092 kqread dhcpleased 33514 366848 87849 77 3 0x100092 kqread dhcpleased 87849 204791 1 0 3 0x80 kqread dhcpleased 7171 487181 0 0 3 0x14200 bored smr 73794 265452 0 0 2 0x14200 zerothread 43421 294999 0 0 3 0x14200 aiodoned aiodoned 6034 175193 0 0 3 0x14200 syncer update 12418 343024 0 0 3 0x14200 cleaner cleaner 89731 298622 0 0 3 0x14200 reaper reaper 87061 148840 0 0 3 0x14200 pgdaemon pagedaemon 74955 115110 0 0 3 0x14200 bored viomb 91864 423084 0 0 3 0x40014200 acpi0 acpi0 81351 164906 0 0 7 0x40014200 idle1 60846 221006 0 0 3 0x14200 bored softnet7 93617 477889 0 0 3 0x14200 bored softnet6 47845 200682 0 0 3 0x14200 bored softnet5 39899 495007 0 0 3 0x14200 bored softnet4 39508 298223 0 0 3 0x14200 bored softnet3 3778 354411 0 0 3 0x14200 bored softnet2 20082 355573 0 0 3 0x14200 bored softnet1 14883 6697 0 0 3 0x14200 bored softnet0 23373 195542 0 0 3 0x14200 bored systqmp 15948 207554 0 0 3 0x14200 bored systq 19428 151808 0 0 3 0x14200 tmoslp softclockmp 77856 181228 0 0 2 0x40014200 softclock 10463 495529 0 0 3 0x40014200 idle0 1 325754 0 0 3 0x82 wait init 0 0 -1 0 3 0x10010200 scheduler swapper ddb{0}> show all locks Process 26523 (syz-executor) thread 0xffff800033c082b8 (250831) Process 18289 (syz-executor) thread 0xffff8000ffff34d0 (51155) Process 1327 (syz-executor) thread 0xffff80003c446558 (60859) Process 80023 (syz-executor) thread 0xffff800033c087e8 (435243) ddb{0}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 10284 11166K 11746K 166960K 14306 0 pcb 18 16K 18K 166960K 667 0 rtable 224 13K 13K 166960K 662 0 pf 40 18K 82K 166960K 271 0 ifaddr 40 7K 9K 166960K 193 0 ifgroup 63 2K 3K 166960K 321 0 sysctl 4 1K 9K 166960K 22 0 counters 72 37K 38K 166960K 358 0 ioctlops 0 0K 4K 166960K 2010 0 iov 0 0K 32K 166960K 246 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1485 93K 94K 166960K 3510 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 9K 166960K 44 0 VM map 2 1K 1K 166960K 2 0 sem 12 0K 1K 166960K 95 0 dirhash 12 2K 2K 166960K 30 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 18 65K 240K 166960K 2277 0 sigio 0 0K 0K 166960K 84 0 proc 72 115K 164K 166960K 1003 0 subproc 72 4K 4K 166960K 153 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 311 0 in_multi 77 5K 7K 166960K 278 0 ether_multi 1 0K 0K 166960K 15 0 mrt 1 0K 0K 166960K 7 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 259 1155K 1155K 166960K 259 0 exec 0 0K 1K 166960K 817 0 fusefs mount 1 32K 32K 166960K 1 0 pfkey data 0 0K 0K 166960K 2 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 274 174K 182K 166960K 22255 0 UVM aobj 22 2K 2K 166960K 25 0 pinsyscall 45 90K 106K 166960K 3616 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 2 0K 0K 166960K 144 0 NDP 14 0K 2K 166960K 141 0 temp 84 8652K 8780K 166960K 105733 0 kqueue 13 20K 32K 166960K 361 0 SYN cache 2 0K 16K 166960K 4 0 ddb{0}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 26 0 0 1 0 1 1 0 8 0 rtpcb 120 262 0 258 3 2 1 3 0 8 0 rtentry 176 236 0 154 6 1 5 5 0 8 0 unpcb 144 1721 0 1701 19 18 1 6 0 8 0 syncache 336 14 0 14 5 5 0 1 0 8 0 tcpqe 32 6 0 6 4 4 0 1 0 8 0 tcpcb 736 912 0 905 28 26 2 8 0 8 0 arp 128 30 0 15 1 0 1 1 0 8 0 ipq 40 1 0 1 1 1 0 1 0 8 0 ipqe 40 3 0 3 1 1 0 1 0 8 0 inpcb 328 3084 0 3068 40 37 3 13 0 8 0 nd6 144 43 0 26 1 0 1 1 0 8 0 pkpcb 40 14 0 14 6 6 0 1 0 8 0 kcovpl 48 17 0 9 1 0 1 1 0 8 0 mppekey 1024 2 0 2 2 2 0 1 0 8 0 ppxss 1192 114 0 114 3 3 0 1 0 8 0 pppxif 1504 15 0 15 6 6 0 1 0 8 0 pfstscr 40 3 0 1 2 1 1 1 0 8 0 pffrag 232 39 0 35 1 0 1 1 0 482 0 pffrnode 88 39 0 35 1 0 1 1 0 8 0 pffrent 40 73 0 69 2 1 1 1 0 8 0 pfosfp 40 1429 0 1005 5 0 5 5 0 8 0 pfosfpen 112 1429 0 714 21 0 21 21 0 8 0 pfrktable 1344 1 0 1 1 1 0 1 0 8 0 pftag 88 1 0 0 1 0 1 1 0 8 0 pfstitem 24 136 0 94 1 0 1 1 0 8 0 pfstkey 128 142 0 100 2 0 2 2 0 8 0 pfstate 384 138 0 97 6 0 6 6 0 8 0 pfrule 1344 31 0 26 2 1 1 2 0 8 0 rttmr 136 1 0 1 1 1 0 1 0 8 0 art_heap8 4096 2 0 0 2 0 2 2 0 8 0 art_heap4 256 1087 0 698 39 14 25 32 0 8 0 art_table 40 1089 0 698 6 0 6 6 0 8 0 art_node 32 233 0 164 1 0 1 1 0 8 0 sysvmsgpl 40 22 0 9 1 0 1 1 0 8 0 semupl 112 4 0 4 3 3 0 1 0 8 0 semapl 112 86 0 76 1 0 1 1 0 8 0 shmpl 112 22 0 3 1 0 1 1 0 8 0 dirhash 1024 29 0 12 3 0 3 3 0 8 0 dino2pl 256 5661 0 4144 96 0 96 96 0 8 0 ffsino 296 5661 0 4144 118 0 118 118 0 8 0 nchpl 144 8781 0 7057 65 0 65 65 0 8 0 rtmask 32 15 0 15 7 7 0 1 0 8 0 uvmvnodes 80 5926 0 0 121 0 121 121 0 8 0 vnodes 216 5926 0 0 330 0 330 330 0 8 0 namei 1024 31639 0 31639 4 3 1 3 0 8 1 percpumem 16 194 0 143 1 0 1 1 0 8 0 kstatmem 264 218 0 186 5 2 3 3 0 8 0 scsiplug 72 10 0 10 3 3 0 1 0 8 0 scxspl 216 41719 0 41719 11 10 1 8 1 8 1 plimitpl 152 489 0 472 1 0 1 1 0 8 0 sigapl 424 2582 0 2525 9 2 7 9 0 8 0 knotepl 120 627 0 0 18 0 18 18 0 8 0 kqueuepl 224 991 0 979 17 15 2 5 0 8 1 pipepl 344 529 0 502 12 9 3 9 0 8 0 fdescpl 528 2534 0 2501 3 0 3 3 0 8 0 filepl 160 18086 0 17847 39 26 13 17 0 8 0 lockfpl 104 1132 0 1127 2 1 1 2 0 8 0 lockfspl 48 503 0 498 1 0 1 1 0 8 0 sessionpl 144 39 0 29 1 0 1 1 0 8 0 pgrppl 48 146 0 128 1 0 1 1 0 8 0 ucredpl 104 3071 0 3057 1 0 1 1 0 8 0 zombiepl 144 3676 0 3676 1 0 1 1 0 8 1 processpl 1232 2582 0 2525 7 0 7 7 0 8 0 procpl 664 6202 0 6130 10 3 7 9 0 8 0 sosppl 168 20 0 20 6 6 0 1 0 8 0 sockpl 752 5207 0 5167 74 69 5 22 0 8 0 mcl64k 65536 5 0 0 1 0 1 1 0 8 0 mcl16k 16384 3 0 0 1 0 1 1 0 8 0 mcl12k 12288 1 0 0 1 0 1 1 0 8 0 mcl9k 9216 1 0 0 1 0 1 1 0 8 0 mcl8k 8192 10 0 0 2 0 2 2 0 8 0 mcl4k 4096 113 0 0 15 0 15 15 0 8 0 mcl2k2 2112 1 0 0 1 0 1 1 0 8 0 mcl2k 2048 63 0 0 6 0 6 6 0 8 0 mtagpl 96 13 0 0 1 0 1 1 0 8 0 mbufpl 256 1184 0 0 73 0 73 73 0 8 0 bufpl 280 15136 0 8992 441 1 440 440 0 8 0 anonpl 32 14347 0 0 116 0 116 116 0 246 0 amapchunkpl 152 76319 0 75592 65 36 29 35 0 158 0 amappl16 200 7719 0 7593 75 64 11 35 0 8 0 amappl15 192 4 0 4 1 1 0 1 0 8 0 amappl14 184 145 0 132 1 0 1 1 0 8 0 amappl13 176 4 0 4 1 1 0 1 0 8 0 amappl12 168 3324 0 3291 3 1 2 2 0 8 0 amappl11 160 49 0 35 1 0 1 1 0 8 0 amappl10 152 22 0 21 1 0 1 1 0 8 0 amappl9 144 251 0 250 1 0 1 1 0 8 0 amappl8 136 22 0 19 1 0 1 1 0 8 0 amappl7 128 136 0 122 1 0 1 1 0 8 0 amappl6 120 283 0 277 1 0 1 1 0 8 0 amappl5 112 166 0 156 1 0 1 1 0 8 0 amappl4 104 335 0 315 1 0 1 1 0 8 0 amappl3 96 15626 0 15499 4 0 4 4 0 8 0 amappl2 88 856 0 784 2 0 2 2 0 8 0 amappl1 80 19404 0 18705 16 1 15 15 0 8 0 amappl 88 21029 0 20834 5 0 5 5 0 92 0 dma32768 32768 1 0 1 1 0 1 1 0 8 1 dma8192 8192 1 0 1 1 1 0 1 0 8 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 3 0 2 1 0 1 1 0 8 0 dma512 512 1 0 1 1 1 0 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 257 0 257 4 4 0 1 0 8 0 dma64 64 7 0 7 2 2 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 24 0 3 1 0 1 1 0 8 0 uaddrrnd 24 2534 0 2501 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 2534 0 2501 1 0 1 1 0 8 0 vmmpekpl 168 21857 0 21794 4 0 4 4 0 8 0 vmmpepl 168 164938 0 162587 151 47 104 117 0 357 0 vmsppl 488 2533 0 2501 6 1 5 5 0 8 0 rwobjpl 80 49583 0 42455 154 6 148 150 0 8 0 pdppl 4096 5076 0 5002 122 48 74 86 0 8 0 pvpl 32 20600 0 0 166 0 166 166 0 265 0 pmappl 256 2533 0 2501 3 0 3 3 0 8 0 extentpl 40 45 0 27 1 0 1 1 0 8 0 phpool 112 408 0 102 10 0 10 10 0 8 0 ddb{0}> machine ddbcpu 0 Invalid cpu 0 ddb{0}> trace db_enter() at db_enter+0x25 panic(ffffffff8336fbc1) at panic+0x1e5 __assert(ffffffff833af890,ffffffff833ad1c4,84,ffffffff8340817e) at __assert+0x29 rtmap_grow(21,21) at rtmap_grow+0x24f rtable_add(20) at rtable_add+0x2d9 if_createrdomain(20,ffff800001488000) at if_createrdomain+0x40 ifioctl(ffff800010fd7790,8020699f,ffff80003908f4a0,ffff80003c446558) at ifioctl+0x1c66 sys_ioctl(ffff80003c446558,ffff80003908f680,ffff80003908f5d0) at sys_ioctl+0x674 syscall(ffff80003908f680) at syscall+0xbd4 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xcbd9d5168b0, count: -10 ddb{0}> machine ddbcpu 1 Stopped at x86_ipi_db+0x27: addq $0x8,%rsp x86_ipi_db(ffff8000299edff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 acpicpu_idle() at acpicpu_idle+0x457 sched_idle(ffff8000299edff0) at sched_idle+0x391 end trace frame: 0x0, count: 10 ddb{1}> trace x86_ipi_db(ffff8000299edff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 acpicpu_idle() at acpicpu_idle+0x457 sched_idle(ffff8000299edff0) at sched_idle+0x391 end trace frame: 0x0, count: -5