last executing test programs: 5.466000129s ago: executing program 4 (id=250): r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) r1 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) writev(r1, &(0x7f0000000c00)=[{&(0x7f0000000b40)="d57efcf4664284e1adcd9625d5a1e29d5208d3cbd26230e438365041c7df1e6c943a126780007c59fc03d8e94dfa27e9cacb73f385bc1f0c8ad4db193e077df39bfb36b462203bd983bca9f1e8db0b7ad6dd700e1111ce1e1ca38b4fb6143dc4738f05f71dfaa95ced9e4cb55487f268ddee619262a29f5abf26401c01e6c52efc0c0193ea5117395ad82573b3ca0d54dbcf17eaea91856ed5471e72b67a8b23a042526fd4093ec5e43c6436", 0xac}], 0x1) execve(0x0, 0x0, 0x0) socket$inet(0x2, 0x1, 0x6) socket$inet(0x2, 0x2, 0x0) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, 0x0) openat$pf(0xffffffffffffff9c, 0x0, 0x40, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x3000, 0x0) ioctl$DIOCGETSTATE(0xffffffffffffffff, 0xc1084413, &(0x7f0000000040)={{0x0, './file0\x00', [{[@v6=@empty, @v6=@mcast1], [0x1, 0x40], 0x0, 0x2}, {[@v6=@rand_addr="be762f745a650c4fc824f39777cbdbf1", @v6=@rand_addr="9b9e18ef2ec145ebdc0f8e7da085faab"], [0x46], 0x4, 0x14}], {{0x246, 0x48, 0xba, 0x100007ff}, 0x6543, 0x409, 0xfff00000, 0x8001, 0x8, 0x17, 0x7}, {{0x0, 0x7, 0x5, 0x5}, 0x51fe1b1d, 0xc86, 0x10007, 0x4, 0x3ff, 0xf2}, @v6=@empty, 0x54d5, 0xa, 0x2, 0xf23b, 0x5, [[0x8, 0xffffffff], [0x3958, 0x6]], [[0xfc000002, 0x4], [0xfffffff7, 0x3]], 0xb, [0x80001d9, 0x79], 0x1, 0x18, 0x6, 0x1, 0x0, 0x3, 0xb, 0x83, 0x5, 0x8, 0x1, 0xce57, "0600"}}) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x44, 0x6, 0x0, 0x6}, 0x80000000, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x200023, 0xffffffffffffffff, 0x0, 0xffffffffffffffff}) mprotect(&(0x7f00004fc000/0x1000)=nil, 0x1000, 0x1) r2 = getegid() setgid(r2) ioctl$TIOCSETA(r0, 0xc1084425, &(0x7f0000000040)={0x1, 0x0, 0xfffffffe, 0x3, "210d0000000200000006006500000200007fffff", 0x7ffffffe}) 5.050433736s ago: executing program 4 (id=260): socket$inet(0x2, 0x3, 0xa) r0 = socket$unix(0x1, 0x5, 0x0) sendmsg$unix(r0, &(0x7f0000001600)={0x0, 0x0, 0x0, 0xfdd7, &(0x7f00000010c0)=ANY=[], 0x10}, 0x0) ioctl$WSMUXIO_REMOVE_DEVICE(0xffffffffffffffff, 0x80085762, &(0x7f0000000040)={0x1, 0x100009}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000040)={0x2, &(0x7f00000000c0)=[{0x7ff, 0x0, 0x0, 0x10000}, {0x2}]}) futimens(r0, 0x0) sysctl$kern(&(0x7f00000000c0)={0x1, 0x54}, 0x2, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0x450c) r1 = open(&(0x7f00000002c0)='./bus\x00', 0x2, 0x80) pread(r1, &(0x7f00000004c0)="05f40d", 0x3, 0xfc) mprotect(&(0x7f00003ed000/0x1000)=nil, 0x1000, 0x4) sysctl$vm_swapencrypt(&(0x7f00000000c0), 0x3, 0x0, 0x0, 0x0, 0x0) sysctl$kern(&(0x7f0000000040)={0x1, 0x3d}, 0x2, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) accept$unix(r2, &(0x7f0000000080)=@file={0x0, 0x0, ""/4093}, &(0x7f0000001080)=0xfff) ioctl$FIONREAD(r2, 0x40047477, &(0x7f0000000040)) 4.648632818s ago: executing program 4 (id=261): setrlimit(0x8, &(0x7f0000000980)={0x8, 0x54}) r0 = syz_open_pts() close(r0) syz_open_pts() ioctl$DIOCCLRIFFLAG(0xffffffffffffffff, 0xc028445a, &(0x7f0000000140)={'./file0\x00', 0x0, 0x6, 0x80000000, 0x9, 0xa}) ioctl$TIOCSETAF(r0, 0x802c7416, &(0x7f0000000180)={0x1040978b, 0x7bc, 0xf7dffbfc, 0x80a19f, "bb08000a00f1a86ddbaf95a400008000", 0x1040100, 0x5}) getsockopt$sock_timeval(0xffffffffffffff9c, 0xffff, 0x1006, &(0x7f0000000000), &(0x7f0000000040)=0x10) write(r0, &(0x7f00000000c0)="ffb3dd36ef971f2d7daf558a20d0f3af986d85be9ec8df6ecdb923e7087f8ab0946f690315cd460e31843f6a729e077212cf241e529b3e4efc5bc6ada8e42a7ec59b6ba64f132537a4f501b70c2702a72a8fb8e57deeef453e3164e765fcfe019fa17b19815415abd04b0fde82aa57ce536e8efd099fd8b472ada904004ef1", 0xff0c) 4.535707982s ago: executing program 4 (id=265): ioctl$BIOCSETIF(0xffffffffffffff9c, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc0e99db6de761f86, 0x0) r0 = socket$inet6(0x18, 0x1, 0x6) connect$inet6(r0, &(0x7f0000000100)={0x1c, 0x18, 0x2, 0x1, "fffe0000200000000000040000000100", 0x441}, 0x1c) fstat(r0, &(0x7f0000000080)) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000780), 0x800, 0x0) ioctl$BIOCSRSIG(r1, 0x80044272, &(0x7f00000007c0)=0xfffffffc) open(&(0x7f0000000040)='./file0\x00', 0x1031e, 0x0) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x4, 0xfffffffc, 0x1e7, 0xd7, 0x80000100, 0xa2, 0x9c, 0x10, [{0x2, 0xa, 0x0, 0x7ff}, {0x6, 0x3, 0xffb, 0x3}, {0x10000005, 0xf87, 0x3, 0x6a}, {0x7fffffff, 0x800, 0xe, 0xffffff}, {0x80000c, 0x1005, 0xffffffff, 0x8}, {0x6, 0x1, 0x4, 0x800009c}, {0x409, 0xffffffff, 0x20081003, 0xfffeffff}, {0x11f, 0x100007fe, 0xffff, 0x8}, {0x2, 0x24000081, 0x1, 0x6c}, {0x6, 0x8001, 0x1, 0x800000b}, {0x4, 0x3, 0x3}, {0x6, 0x40, 0x3, 0x4}, {0xdf, 0x4, 0x9, 0x3}, {0x906a, 0xfffffffa, 0x8001, 0x100006}, {0x0, 0x6, 0x4, 0x1ffffff9}, {0x4, 0x1000005, 0x4, 0x5}]}) setrlimit(0x1, &(0x7f0000000140)={0xee5, 0x5a}) r2 = syz_open_pts() close(r2) openat$pf(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) socket(0x1, 0x2, 0x4) r3 = socket(0x2, 0x2, 0x0) r4 = socket(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f00000002c0)={0x10, 0x2, 0x1, 0x200000e3}, 0x10) setsockopt$sock_int(r3, 0xffff, 0x1023, &(0x7f0000000040)=0x6, 0x4d) setsockopt$sock_int(r4, 0xffff, 0x1023, 0x0, 0x0) r5 = syz_open_pts() ioctl$TIOCSETA(r5, 0x802c7414, &(0x7f0000000000)={0x920e, 0xfffe, 0xffffdf82, 0xffffffd1, "08951cfcf20800000004000fef43a77a9851f800", 0x4000000, 0x9}) writev(r2, &(0x7f0000000440)=[{&(0x7f0000000080)="04", 0x1}], 0x1) readv(r5, &(0x7f0000000740)=[{&(0x7f0000000180)=""/172, 0xac}], 0x1) setrlimit(0x8, &(0x7f0000000580)={0xa, 0x56}) r6 = syz_open_pts() close(r6) ioctl$TIOCGETD(r6, 0x4004741a, &(0x7f0000000240)) syz_open_pts() ioctl$TIOCSETA(r6, 0x802c7414, &(0x7f0000000100)={0x920e, 0x6, 0xfffffff2, 0xffffff90, "08955c845d4ce9000000000000bcd3ffe60c2000", 0x4100000, 0x8}) writev(r6, &(0x7f00000015c0)=[{&(0x7f00000005c0)="dc65e07f59d8b064d88b63cf3648300c2ede70d38c3c79dbc14f088567010c5233d9de45a729afe0543565ab947e2d12caff5d341f049d5c407613f34e62583b8bc54a6caaf81d3d48b9f15a2adbb9bd50ddc2c9688d202c1840b5ee6eab15a52cbf328fd98cbe5c9250655b3e1a8c0f93e5b0f03baf01c046f8c0fcecc0e0a4beb64d258985be07b8395caec0a0a8c20763fea2942bbc0931b7b73691d831acc9a084d03f00831a42ed4b99e8d7f8efd06de09b7bff03c0031fac7b7eaffb5c4b19f86433dbdd91a6abb97bc568592debb90586ea53dc3025be7d38ca750b30553e05307c7c9321c23259bcfecc73ff5601e9e6e2f4be731ae7d14325dfcc5482925e8a1508afc3b9de53aef73b935bdb089dbb6f801fc5fd7fc996bc71bfb1ef05a335a1b40764307ac9d4eb9459c9ae155d748dfe1a37eac2688d5b835169fc40acd599e5b5cd4aa66290246bffc8fd6ac8030afa32bdf6b3df6edd70d80ba59297d3df5e841e2fad5b7b1b6e3fe959d5dcca659f343db0c506b720c2c530f3e443e6f4870873b1b557f388cc53dcb26c25037df92d7c64a3dfd346fb66fdab37dca162615e12e84d0f97a760fc7594ee9fcb9f5d46bdcab6d7c86e9a054412de8a58fe92dd5f746247e09b8f7dc74481a3ba0f21367086d31fd4fa768045563aa1741144e3c54a2b27e4214314eba3c12ca823ade350207a43d682304b7c2a816f5a3932ae60292e42d19f1360a703665de9bab548254b577cbfd34c2516dcef76a2aafbffde4f155a508428845dc03906eb04ad96d16c5cc9deaee5ee75077fa99a4be55771969df3a3f439ccf1ad73f1c9d2cda1e502a85a62fbf4ccdb2ddeea21dc", 0x265}], 0x1) 3.197967779s ago: executing program 4 (id=280): r0 = kqueue() kevent(r0, &(0x7f0000000000)=[{{r0}, 0xfffffffffffffff9, 0x10, 0xfffff, 0x87, 0x6}], 0x9, 0x0, 0x2e, &(0x7f0000000340)={0x6, 0x1}) syz_emit_ethernet(0x3e, &(0x7f0000000140)=ANY=[@ANYBLOB="ffffffffffffaaaaaa00300266000000019078ac1400aae0000001070190780003ffffffff00"/48]) r1 = socket(0x18, 0x1, 0x0) r2 = syz_open_pts() close(r2) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0xffff, 0x4, &(0x7f0000000080)=0xfffffff9, 0x3) fcntl$lock(r2, 0x7, 0x0) getsockopt(r1, 0x29, 0x4, 0x0, 0x0) madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x6) setsockopt$sock_linger(r1, 0xffff, 0x80, &(0x7f0000000040)={0x1, 0xcc6}, 0x8) 1.969625031s ago: executing program 4 (id=285): chmod(&(0x7f0000000040)='.\x00', 0x35e) r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) ioctl$TIOCSETA(r0, 0xcd604406, &(0x7f0000000040)={0x7ffb, 0x0, 0xfffbfff0, 0x0, "d6a24900b178926c79486b47c1dd00", 0x4, 0x5}) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$TIOCSETA(r1, 0xcd604407, &(0x7f0000000040)={0x3, 0x0, 0xfffffffe, 0x5, "210d000000020000000000000000004021800600", 0x2000000, 0x5}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xa7210e10bc3c9de9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) ioctl$TIOCSTAT(r2, 0x20007465) fchdir(r2) setgid(0xffffffffffffffff) setgroups(0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa00f2039f6b5686dd6034d2b500103af9fe80000000000000000000000700000000000000000000000000000000f0"]) mkdir(&(0x7f0000000180)='./file0\x00', 0x119) unveil(&(0x7f00000001c0)='./bus\x00', &(0x7f0000000140)='r\x00') unveil(&(0x7f0000000080)='./file0\x00', &(0x7f00000004c0)='x\x00') r3 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_cred(r3, 0xffff, 0x1024, &(0x7f0000000480)={0x0}, &(0x7f0000000580)=0xc) setpgid(0x0, r4) kill(r4, 0x11) kill(r4, 0x9) mknod(&(0x7f00000000c0)='./file0/file0\x00', 0x20, 0x0) setuid(0xffffffffffffffff) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$DIOCRSETTFLAGS(r2, 0xc450444a, &(0x7f0000000500)={{'./file1\x00', './bus\x00', 0x1, 0x6}, 0x0, 0x0, 0x0, 0x4, 0x3, 0x10000, 0x7, 0x44, 0x5}) readlinkat(r2, &(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000200)=""/84, 0x54) unveil(&(0x7f0000000000)='./file1\x00', &(0x7f0000000300)='c\x00') 820.462832ms ago: executing program 3 (id=293): getresuid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x10000100000004}}) setuid(0xffffffffffffffff) r0 = socket(0x18, 0x2, 0x0) setsockopt(r0, 0x1000000029, 0x31, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket(0x18, 0x1, 0x0) setsockopt(r1, 0x1000000029, 0x2e, &(0x7f0000000040)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) setsockopt(r1, 0x1000000029, 0x2e, &(0x7f0000000000)="ebf6cbdf13b9fd812eaa4e712e54e69931929648", 0x14) select(0x40, &(0x7f0000000100)={0x1, 0x3ff, 0x2000000000000, 0x400002, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0x0) r2 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7959) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000000)="7f454c4602df7a264ee4975f55011a49b70cb710aa950000000a52e92a24d18fcf8fd1f9794ffa08bb11bafcdc24ff4c5d0b5c7b1ad1a2ec434c500191", 0x3d}, {&(0x7f0000000340)="1551e6", 0x3}], 0x2) r3 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)=ANY=[]) pwritev(r3, &(0x7f0000000000)=[{&(0x7f0000000100)="c34b18f458d372e3023006ca8479422d", 0x10}], 0x1, 0x0) writev(r3, 0x0, 0x0) execve(0x0, 0x0, 0x0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) unveil(0x0, &(0x7f0000000080)='c\x00') 802.301112ms ago: executing program 7 (id=297): r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$KDMKTONE(r0, 0x20004b08, &(0x7f0000000000)=0x1) r1 = dup(r0) ioctl$BIOCGBLEN(r0, 0x40044266, &(0x7f0000000040)) syz_emit_ethernet(0x78, &(0x7f0000000080)={@remote, @local, [], {@generic={0x812b, "1b079ae928d1def786e0153e3fec37446d4eca7b245ff680610dc173f8a59a9ada7e1684f1720a56a58ba01f1907607b1c6abd1dca6abb4c141cbd422f2c38e28af3e59260ab773fc20077c6a9994badd27c9a1695a286580193a6eaeadd22db25268cb4363f92281a84"}}}) r2 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) ioctl$WSMUXIO_LIST_DEVICES(r2, 0xc1045763, &(0x7f0000000140)={0x8, [{0x1, 0x800}, {0x1, 0x200}, {0x1, 0x1}, {0x3, 0x8}, {0x1, 0x8}, {0x3, 0x9}, {0x1, 0x6}, {0x1, 0x2}, {0x1, 0xec3a8f9}, {0x3, 0x9}, {0x3, 0x3ff}, {0x4, 0xfffffff9}, {0x1, 0x9}, {0x1, 0x524}, {0x2, 0x8001}, {0x1, 0x8}, {0x3, 0x1}, {0x1, 0x401}, {0x3, 0x1}, {0x2, 0x1000}, {0x1, 0x9}, {0x2, 0x8}, {0x2, 0x831}, {0x3, 0x7}, {0x3, 0x3}, {0x3, 0x7f}, {0x2, 0x6}, {0x1, 0x3}, {0x0, 0x7ca0}, {0x2, 0xa0}, {0x3, 0xffff}, {0x3}]}) ioctl$SPKRTONE(r0, 0x80085301, &(0x7f0000000280)={0xfc, 0xe0dc}) setsockopt$inet_opts(r0, 0x0, 0x1, &(0x7f00000002c0)="35439aaa31ec6daca22ae422c42ade53180a6cce14b4ce7ce8ed666af668b62a0e15f0f703f08ebb13cd28fe08fdd1d01744a3992a33a1dd55304afa262ff5376c33329638f2757242d9cca8a7f11174500a773976b203676f3dd0375f0bc8f14921aea4caccfbe222efbe5fac42fce40793e803a037781a449b46072eb9639a6f981284cd754ea44c787e4c5455ba62069bc208a44e4c", 0x97) ioctl$FIONREAD(r0, 0x4004667f, &(0x7f0000000380)) ioctl$WSDISPLAYIO_SETPARAM(r2, 0xc020575a, &(0x7f00000003c0)={0x2, 0x2, 0x2, 0x3}) syz_extract_tcp_res$synack(&(0x7f0000000400), 0x1, 0x0) kqueue() socketpair(0x2, 0x0, 0x4, &(0x7f0000000440)={0xffffffffffffffff}) ioctl$BIOCVERSION(r1, 0x40044271, &(0x7f0000000480)) ioctl$SPKRTUNE(r1, 0x20005302, &(0x7f00000004c0)={0xa0000000, 0x7}) r4 = accept$inet6(r1, &(0x7f0000000500), &(0x7f0000000540)=0x1c) getsockname(r4, &(0x7f0000000580)=@un=@file={0x0, 0x0, ""/503}, &(0x7f0000000780)=0x1f9) r5 = openat$zero(0xffffffffffffff9c, &(0x7f00000007c0), 0x1, 0x0) socket$inet(0x2, 0x3, 0x4) ioctl$WSDISPLAYIO_ADDSCREEN(r1, 0x80245753, &(0x7f0000000800)={0x5, './file0\x00', './file0\x00'}) mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2) recvfrom$unix(r3, &(0x7f0000000840)=""/64, 0x40, 0x2, 0x0, 0x0) socket$inet(0x2, 0x4000, 0x5) ioctl$BIOCGBLEN(r5, 0x40044266, &(0x7f0000000880)) r6 = openat$wskbd(0xffffffffffffff9c, &(0x7f00000008c0), 0x20000, 0x0) ioctl$WSKBDIO_GETMAP(r6, 0xc010570d, &(0x7f0000000940)={0x6, &(0x7f0000000900)=[{0x8, 0x7032, 0xf3, 0xd, 0x915}, {0x0, 0x3, 0x7f, 0x0, 0x3ff}, {0x7, 0xea, 0x1, 0xdac, 0x5}, {0x6, 0xc4, 0x9, 0x0, 0x2}, {0x4, 0xfff8, 0xb, 0x4, 0xfffd}, {0xe680, 0xd, 0x4, 0xe, 0xbb}]}) ioctl$DIOCGETSTATUS(r5, 0xc2084415, &(0x7f0000000980)) getsockname(r3, &(0x7f0000000bc0)=@un=@file={0x0, 0x0, ""/248}, &(0x7f0000000cc0)=0xfa) openat$pf(0xffffffffffffff9c, &(0x7f0000000d00), 0x80, 0x0) 664.196772ms ago: executing program 7 (id=300): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f00000001c0), 0x400, 0x0) (async, rerun: 32) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) (async, rerun: 32) r1 = socket$inet(0x2, 0x1, 0x6) (async) mknod(&(0x7f0000000240)='./file0\x00', 0x10, 0x8) (async, rerun: 64) r2 = open$dir(&(0x7f0000000180)='./file0\x00', 0x80, 0x0) (rerun: 64) writev(r2, &(0x7f0000000340)=[{}], 0x1) ioctl$FIONREAD(r1, 0x80206979, &(0x7f0000000100)) r3 = socket$inet(0x2, 0x1000, 0x0) socket(0x18, 0x5, 0xe) (async) setsockopt$inet_opts(r3, 0x0, 0x200000000000a, &(0x7f00000000c0)='\x00', 0x1) (async) mknod(&(0x7f0000000040)='./file0\x00', 0x8000, 0xcff) (async) close(0xffffffffffffffff) (async, rerun: 64) syz_open_pts() (async, rerun: 64) r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000140), 0x10, 0x0) ioctl$BIOCSETIF(r4, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) (async) syz_emit_ethernet(0x1000e, &(0x7f00000001c0)=ANY=[]) (async) ioctl$FIONREAD(0xffffffffffffffff, 0x4004667f, &(0x7f00000002c0)) (async) setrlimit(0x1, &(0x7f0000000980)={0x95, 0x7b}) (async, rerun: 64) r5 = syz_open_pts() (rerun: 64) close(r5) r6 = syz_open_pts() setsid() (async) ioctl$TIOCSCTTY(r6, 0x20007461) (async) ioctl$TIOCSETA(r5, 0x802c7414, &(0x7f0000000080)={0xffffffbc, 0x8000, 0xffffdf80, 0xfdfffffd, "7c321c37a53bbe83ff7f2a01fd04000022401e00", 0xc, 0x80000}) (async) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000b80)="f8fbb40b0d75784e53e5e5983cf9a87b968c1c1bc382e1685fb94986c068176602ea38a1840e21bf5b78821ff756fd4b188992d109bbf6f1e3377d468154fb6a8b44c519ef52b132dda1e1b1ba91a12493b5f69b08f04fd197dbecb9be65b18751c5f354198b1beb2d63fff4a4dd6bc1a39e", 0x72}], 0x1) (async) ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f0000000440)={0xffffff61, 0xffffff85, 0x9, 0x5effff5a, "9cdc3a0500007f000000000000002f9e68cd3304", 0x5, 0x7}) (async) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f00000000c0)}], 0x1) (async) openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 663.20974ms ago: executing program 7 (id=303): nanosleep(&(0x7f0000001280)={0x5, 0x3}, &(0x7f00000012c0)) r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0x80000000, 0xffff63d6, 0x3ff, 0x2, 0xa, 0x3, 0x1, 0x10, [{0x0, 0x80000002, 0x5, 0x80000002}, {0xe9, 0xe7, 0xfffffe, 0x2}, {0x10cd5, 0x4baa, 0x9, 0x8}, {0x7, 0x10000, 0x4000000f, 0x8cce}, {0x4, 0x2000008, 0x0, 0x1}, {0x388d, 0xffffffff, 0x80085, 0x5}, {0x4, 0xa00, 0x20004, 0xffffffff}, {0x208, 0xfffffffd, 0x5, 0xffffe2e8}, {0x10007, 0x1000, 0x3, 0x7ffd}, {0x3f8, 0xfefffffd, 0x1ff, 0x12}, {0x82, 0x0, 0x8a3a0001, 0xfffffff4}, {0x10002, 0xfffffffe, 0x650, 0x200a68}, {0x401, 0x6, 0xa6ab, 0xa5}, {0x6, 0xfffffffe, 0x102, 0x7}, {0xffffffff, 0x7, 0x81, 0x7}, {0x89be2, 0x1, 0xffffffff, 0x3ff}]}) poll(&(0x7f0000000180)=[{0xffffffffffffffff, 0x100}, {0xffffffffffffffff, 0x4}, {r0, 0x80}], 0x3, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$TIOCSETA(r0, 0x80d04466, &(0x7f0000000140)={0x9, 0xa525, 0x4, 0x127492, "08e50000000000000100", 0x20004118, 0x6}) r1 = socket$inet(0x2, 0x4002, 0x0) r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) closefrom(r2) r3 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x6, 0x9, 0x80000001, 0x0, 0x7, 0xe, 0x83e], 0x7, 0x4, 0x0, 0xffffffffffffffff}) socketpair(0x6, 0x4000, 0x6, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet6(0x18, 0x3, 0x9) setrlimit(0x8, &(0x7f0000000980)={0xb, 0x4e}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r7 = syz_open_pts() close(r7) syz_open_pts() writev(r7, &(0x7f0000000340)=[{0x0}], 0x1) r8 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000140), 0x8, 0x0) openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000180), 0x410, 0x0) kevent(r2, &(0x7f00000000c0)=[{{r3}, 0xfffffffffffffff6, 0x5, 0xf0000000, 0x7, 0x800}, {{r4}, 0xfffffffffffffffd, 0x6a, 0x40000000, 0x5, 0x40}, {{r5}, 0x7, 0x84, 0x1, 0xff5e, 0x4}], 0x0, &(0x7f0000000180)=[{{r6}, 0xfffffffffffffffc, 0x64, 0x10, 0x3}, {{r8}, 0x130a254603c9efa0, 0x20, 0x2, 0x9, 0x8}], 0x5, &(0x7f00000001c0)={0x0, 0xe8c8}) execve(0x0, 0x0, 0x0) 662.370845ms ago: executing program 3 (id=304): socket(0x11, 0x3, 0x0) (async) r0 = socket(0x11, 0x3, 0x0) sendto$unix(r0, &(0x7f0000000200)="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", 0x1b1, 0x0, 0x0, 0xfffffffffffffd99) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1000, 0x0) accept$inet6(r0, 0x0, &(0x7f0000000080)) (async) accept$inet6(r0, 0x0, &(0x7f0000000080)) mknod(&(0x7f0000000000)='./file0\x00', 0x2100, 0x5f00) (async) mknod(&(0x7f0000000000)='./file0\x00', 0x2100, 0x5f00) r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$TIOCSETA(r1, 0xc0205603, &(0x7f0000000040)={0xe64, 0x4, 0x6, 0x80000000, "97f3b45700", 0x2000, 0xffffffff}) ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x40000530, 0x0) open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7959) 542.052255ms ago: executing program 6 (id=308): mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2000, 0x801) r0 = socket(0x11, 0x3, 0x0) fchdir(r0) mmap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x1011, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0x18, 0x3, 0x7) getsockopt$sock_int(r1, 0xffff, 0x1021, &(0x7f0000000080), &(0x7f0000000040)=0x2c) write(0xffffffffffffffff, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f00000000c0)={0x8, 0x9, 0x5, 0x800000, "94feae87e35cfee065850b917274fc16e364ad41", 0x80, 0x3}) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc0e99db6de761f86, 0x0) r2 = open(&(0x7f0000000480)='./file0\x00', 0x80000000020206, 0x4ebfac6bbaf7959) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x5900) r3 = open(&(0x7f0000000000)='./file0\x00', 0x8, 0x0) ioctl$BIOCSETIF(r3, 0x80084904, &(0x7f0000000380)={'tap', 0x0}) ioctl$BIOCSETIF(r3, 0x40384900, 0x0) closefrom(r3) ioctl$FIONREAD(r2, 0xc0206983, &(0x7f00000001c0)) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1000, 0x0) r4 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) pipe(&(0x7f0000000200)) ioctl$DIOCMAP(0xffffffffffffffff, 0xc0106477, &(0x7f0000000000)={&(0x7f0000000140)='./file0\x00', r4, 0x5}) syz_emit_ethernet(0x3e, &(0x7f0000000140)=ANY=[@ANYRESHEX=r0]) fcntl$getflags(0xffffffffffffffff, 0x1) execve(0x0, 0x0, 0x0) 541.256505ms ago: executing program 2 (id=309): r0 = socket$inet6(0x18, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0x1c, 0x18, 0x1, 0x1, "00000000000000000000000000000001", 0x40007}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x18, 0x0, 0x11, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', 0xa0000007}, 0x1c) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000100)={0x5, &(0x7f0000000180)=[{0x3d, 0x0, 0x3, 0x8}, {0x7, 0x2, 0x2, 0x9}, {0x4, 0xb, 0x7, 0x6}, {0x8000, 0x9, 0x3, 0x9}, {0x991e, 0x2, 0x4, 0x5e3}]}) syz_emit_ethernet(0x2a, &(0x7f0000000180)=ANY=[]) r2 = socket$inet6(0x18, 0x1, 0x6) bind$inet6(r2, &(0x7f0000000040)={0x1c, 0x18, 0x1, 0x4, "ffffffffffff00000000000000000001", 0x9}, 0x1c) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xca605601, &(0x7f0000000100)={0x10, 0x5, [{&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x800}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x3}, {&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x1}, {&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, 0x4000000000000000}, {&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x7}, {&(0x7f0000ffe000/0x1000)=nil, &(0x7f000035f000/0x4000)=nil, 0x7}, {&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x5}, {&(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x2}, {&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x3000)=nil, 0xeb}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff7000/0x3000)=nil, 0x80}, {&(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x8}, {&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x7}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0xb1}, {&(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x3}, {&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0xffffffffffff0000}], './file0\x00', 0x3, 0x4, 0xfff, 0x0, [0x7, 0x1689d41c, 0x80000001, 0x401, 0x0, 0x9, 0x9, 0x78, 0x9, 0xfffffffd, 0x7, 0x10001, 0x6, 0x6, 0x8001, 0x8, 0x3ff, 0x7, 0x1, 0x0, 0xfffffff7, 0x9, 0x7, 0x280000, 0x4, 0x1, 0x0, 0x2, 0x3, 0x7, 0x0, 0x6, 0x0, 0xfff, 0x4, 0x0, 0x0, 0x0, 0x8, 0x100, 0xffffff80, 0x2, 0xdae, 0x7ff, 0x1, 0x7fffffff, 0x6, 0x101, 0x0, 0x3, 0x10000000, 0x8, 0x2, 0x5, 0x1, 0x6, 0x6, 0x46af0a69, 0x4a9, 0x80000000, 0x10001, 0x1ff, 0x9, 0x2, 0x7ff, 0xff, 0x3, 0x2, 0x6, 0x6, 0x1, 0xffffffff, 0x6, 0x3, 0x5, 0x7, 0x5, 0x7, 0xfffffffc, 0x2, 0xf8000000, 0x3, 0x4, 0xbbf, 0x6, 0x3, 0x9, 0x1000000, 0x0, 0xd, 0x4, 0xffaf, 0x6, 0x1, 0x9, 0xce, 0x8, 0x8, 0xa94a, 0x0, 0x987, 0x5, 0x6, 0xa9d4, 0xfffffff2, 0x8000, 0x1, 0x6, 0xcc6, 0x400, 0xfffffffd, 0xa19, 0x80, 0x6, 0x88, 0x80000001, 0x4, 0x1, 0x2, 0x9, 0x53f1, 0x1000, 0xfffffffd, 0xffffff25, 0x9, 0xc144, 0x7, 0x3, 0x9, 0x8, 0x470f, 0x1, 0x4, 0x6, 0xffff, 0x2, 0xfffffffc, 0x6, 0x5, 0x4, 0x5, 0x5a9c, 0x4, 0xeb6, 0x5, 0x3, 0x2, 0x2, 0x2, 0x8000, 0x8, 0xaa, 0x8c, 0x38, 0x6, 0x9, 0xb277, 0x400, 0x7, 0x7, 0xd4, 0x7, 0x4, 0x9, 0x75, 0x1ff, 0x1, 0x800, 0x800, 0x3, 0x1ff, 0x401, 0x0, 0x4be, 0x7, 0x1, 0x100, 0x3, 0x2, 0xff, 0x239ed050, 0x7f, 0xff, 0x7, 0x9, 0x3ff, 0x4, 0x5317ce34, 0x0, 0x101, 0x80000000, 0x2, 0x10, 0x2, 0x6, 0x5, 0xb, 0x8, 0x9, 0x40, 0x3, 0x6, 0xffff, 0x0, 0x4, 0x1ff, 0x1ff, 0x16, 0x7, 0x4, 0xffffff01, 0x6, 0x5, 0x2, 0x4, 0x4, 0xffffffff, 0x788, 0x0, 0x6, 0x9, 0x1, 0x6, 0x6, 0x6, 0x6, 0xffff, 0x5310, 0x4, 0xd, 0x9, 0x8001, 0x5, 0x5, 0xfffffff7, 0xa, 0x400, 0x4, 0x5, 0x200, 0x6, 0x5, 0x4, 0x4, 0x3, 0x693, 0x40, 0x8, 0x6, 0x80000000, 0x1d209cda, 0x7, 0x4, 0x7fffffff, 0x63439b01, 0xfffffff8, 0xfffffff8, 0x7, 0x9, 0x9, 0x5, 0xfffff19c, 0x6, 0xed, 0x6, 0xf4d7, 0x9, 0x9, 0xffff, 0xadb, 0x16947a10, 0x3, 0x7, 0x6, 0xc, 0x1, 0x10000, 0x6, 0x9, 0xffff0000, 0x9, 0x9, 0x81, 0x7fffffff, 0x1, 0xda6, 0xf27e, 0x8001, 0xf, 0x0, 0xe7, 0x93c9, 0x3, 0x5, 0x9, 0x1, 0x2, 0x5, 0x4, 0x0, 0xb, 0x2, 0xffffffff, 0x8, 0xffff, 0xdc1c, 0x44cf, 0x6, 0x56, 0x2, 0xe877, 0x5, 0x1, 0x5, 0x1014, 0x1, 0x0, 0x3dd, 0x2, 0xffff5ad4, 0x5, 0x2, 0xc, 0x2, 0xf49, 0x65, 0x3, 0x5, 0xef6, 0x2, 0x719, 0x99bd, 0x6, 0x2d5cc7e1, 0x7fffffff, 0x2, 0x1, 0x9, 0x1ff, 0x3, 0xc263, 0xdc81, 0xda, 0x9, 0x400, 0xaed3, 0x9, 0x1, 0xffffff7f, 0x1400000, 0x3, 0xb0, 0x8001, 0x4800000, 0x5, 0xe12, 0x5c, 0x7, 0x4, 0xffff932b, 0xb65, 0x4f, 0x9, 0x7fffffff, 0x787f, 0x8, 0x200000, 0xf, 0x6, 0x2, 0x7, 0x3a31, 0x0, 0x3, 0xc, 0x101, 0x7fffffff, 0xfffffff7, 0x3, 0x5, 0x7fffffff, 0x9, 0x2, 0x7, 0x5, 0xfffffe00, 0xa88, 0x7eec, 0x8000, 0x0, 0x100, 0x682, 0x36a5, 0x100, 0xd2, 0x81, 0x0, 0x0, 0x2, 0xde, 0xf2d, 0x4, 0x3a1, 0x87ab, 0x4, 0xe, 0x7, 0xffff, 0xc8, 0x7, 0x7, 0xfffffe00, 0x9, 0x8, 0xfffffff7, 0x6e04f75a, 0x0, 0x2, 0x4d, 0x4, 0x10000, 0x8, 0x6, 0x1, 0x8, 0x9, 0x8, 0x80, 0x1, 0x2, 0x1, 0x3, 0x7, 0xcd, 0x6, 0xc6, 0xf3, 0x10, 0x7, 0x27a, 0x7, 0xff28, 0x2, 0xdb9, 0x7, 0x0, 0x10, 0xfff, 0x0, 0x6, 0xe, 0xa6d, 0xfc46, 0x1ff, 0x10000, 0xdee, 0xfffffff9, 0x7d08, 0x4aa, 0x7fffffff, 0x10, 0x6, 0x9, 0x8, 0x4, 0x9, 0x7, 0x10, 0x8, 0x2, 0x5b7, 0x7ff, 0x9d1, 0xfffffffe, 0x5, 0x8, 0x18, 0xff, 0x8, 0x9, 0xfffffffa, 0x1, 0x7fff, 0x6022, 0x401, 0x10000, 0x5, 0xfb3f, 0x2, 0x317b, 0x0, 0x2dd, 0x4, 0x10001, 0x3, 0xd4ef, 0x5, 0x1, 0x10001, 0x9, 0x7, 0xf, 0x1, 0x8, 0x100, 0x5, 0xff, 0x8, 0x80000001, 0x5, 0x4, 0xba]}) r3 = socket(0x18, 0x3, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) ioctl$FIONREAD(r3, 0xc0106924, &(0x7f00000001c0)) r4 = socket(0x18, 0x2, 0x0) setuid(0xffffffffffffffff) setsockopt(r4, 0x1000000000029, 0xc, &(0x7f0000000000), 0x14) getsockopt$sock_linger(r4, 0xffff, 0x80, &(0x7f0000000fc0), &(0x7f0000001000)=0x8) accept$inet6(r3, &(0x7f0000000080), &(0x7f0000000f80)=0x1c) ioctl$FIONREAD(r3, 0xc018696c, &(0x7f0000000100)) execve(0x0, &(0x7f0000000340)=[&(0x7f0000000100)='tap'], 0x0) r5 = socket(0x18, 0x3, 0x0) ioctl$FIONREAD(r5, 0xc028698a, &(0x7f0000000100)) r6 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x3a0, 0x0) ioctl$DIOCRSETADDRS(r6, 0xc4504445, &(0x7f0000000b00)={{'./file0\x00', './file0\x00', 0x2, 0x9}, &(0x7f0000000040)=[{@broadcast, '\x00', './file0\x00', 0x5, 0x401, 0x1a, 0x4, 0x2, 0x0, 0x9}], 0xe, 0x1, 0x56d4a68d, 0xd43, 0x6, 0x1, 0x38, 0x3}) 539.205181ms ago: executing program 3 (id=310): ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x69627d65, 0x7, 0x4123a7f8, 0x9], 0x5, 0x4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(0xffffffffffffffff, 0xc01864c2, &(0x7f0000000080)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(0xffffffffffffff9c, 0xc00864c0, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r0, 0xc02864c3, &(0x7f0000000140)={&(0x7f0000000100)=[r1, r2, 0x0], 0x9, 0x3, 0xa, 0x0, 0x0, 0x208}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000180)={0x401, 0x11a, r0}) recvfrom$inet6(r3, &(0x7f00000001c0)=""/25, 0x19, 0x1000, &(0x7f0000000200)={0x1c, 0x18, 0x2, 0x5, "1a6dcea2fdf0a5ff28ba04b04508bcba", 0x7}, 0x1c) fsync(r3) ioctl$DRM_IOCTL_MODE_GETFB(r3, 0xc01c64ad, &(0x7f0000000240)={0x0, 0x4, 0x1, 0x9, 0xbd, 0x1000, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000280)={r5}) ioctl$DRM_IOCTL_MODE_SETGAMMA(r0, 0xc02064a5, &(0x7f0000000380)={0x0, 0x7, &(0x7f00000002c0)=[0x8, 0x1, 0x0, 0x989d, 0x9, 0x21, 0x1], &(0x7f0000000300)=[0x1, 0x3, 0x6, 0x0, 0x8], &(0x7f0000000340)=[0x4, 0x9, 0x1, 0x6, 0x94f]}) ioctl$DRM_IOCTL_MODE_GETGAMMA(r3, 0xc02064a4, &(0x7f0000000480)={r6, 0x6, &(0x7f00000003c0)=[0x1400, 0x7, 0x4, 0x9, 0x5, 0xf4], &(0x7f0000000400)=[0xff, 0x6, 0xff, 0x8e, 0x5], &(0x7f0000000440)=[0xf1dc]}) preadv(r3, &(0x7f0000000700)=[{&(0x7f00000004c0)=""/159, 0x9f}, {&(0x7f0000000580)=""/134, 0x86}, {&(0x7f0000000640)=""/9, 0x9}, {&(0x7f0000000680)=""/94, 0x5e}], 0x4, 0x5) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000740)={r7, r4, 0x4, 0x0, 0x39}) setrlimit(0x1, &(0x7f0000000780)={0x4, 0x2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f00000008c0)={0x2, 0x8, &(0x7f00000007c0)=[0x6, 0x3808, 0x2, 0xf, 0x17, 0x40, 0xfff, 0x8], &(0x7f0000000800)=[0x1, 0x3ff, 0x5], &(0x7f0000000840)=[0x2, 0x10000, 0x7], &(0x7f0000000880)=[0x0, 0x1, 0x7, 0x1], 0x0, 0x5}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(r0, 0xc01864c2, &(0x7f0000000900)={0x0, 0x1, r0, 0x0, 0xfff}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(r3, 0xc01864c2, &(0x7f0000000940)={0x0, 0x2, r3, 0x0, 0xa}) ioctl$DRM_IOCTL_SYNCOBJ_RESET(r3, 0xc01064c4, &(0x7f00000009c0)={&(0x7f0000000980)=[r8, r2, r1, r9, r2], 0x5}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffff9c, 0xc01864c6, &(0x7f0000000a40)={&(0x7f0000000a00)=[0x7, 0xfffffffd, 0x3, 0xa, 0xffffffff, 0xffff, 0x1], 0x7, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GEM_OPEN(r10, 0xc010640b, &(0x7f0000000a80)) ioctl$DRM_IOCTL_GET_MAGIC(r3, 0x40046402, &(0x7f0000000ac0)) recvfrom$inet(r3, &(0x7f0000000b00)=""/102, 0x66, 0x1, 0x0, 0x0) getsockopt$sock_linger(r3, 0xffff, 0x80, &(0x7f0000000b80), &(0x7f0000000bc0)=0x8) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r3, 0xc02064b9, &(0x7f0000000c80)={&(0x7f0000000c00)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000c40)=[0x0, 0x0], 0x5, 0xfffffff8, 0xeeeeeeee}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x8010640d, &(0x7f0000000cc0)={0x2, 0x2}) r11 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000d00), 0x40, 0x0) fchdir(r11) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000d40)={0x1, 0x4, 0x7, 0xf, 0xc9e, 0xfffffff7, r5, 0x5, 0x8}) ioctl$WSDISPLAYIO_ADDSCREEN(r3, 0x80245753, &(0x7f0000000d80)={0xe, './file0\x00', './file0\x00'}) fcntl$lock(r10, 0x7, &(0x7f0000000e40)={0x2, 0x2, 0x7, 0x2}) 538.506373ms ago: executing program 2 (id=311): r0 = open(&(0x7f0000000380)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7949) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000140)="23210a4fe020", 0x6}], 0x1) mknod(&(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0xd02) sysctl$net_inet6_icmp6(&(0x7f0000000000)={0x4, 0x18, 0x3a, 0x3}, 0x4, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) sysctl$net_inet_ip(&(0x7f0000000000)={0x4, 0x2, 0x0, 0x1c}, 0x4, 0x0, 0x0, &(0x7f0000001100), 0x4) syz_emit_ethernet(0x46, &(0x7f0000000200)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "5f6ad9", 0x10, 0x3a, 0x29, @rand_addr="000000000200000000020000008000", @local={0xfe, 0x80, '\x00', 0x0}, {[], @icmpv6=@ni={0x8b, 0x0, 0x0, 0x6, 0x7, 0x833}}}}}}) execve(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) 510.601553ms ago: executing program 6 (id=312): sysctl$vfs_nfs(&(0x7f0000000000)={0xa, 0x2, 0x2}, 0x3, &(0x7f0000000140), 0x0, 0x0, 0x0) sysctl$vfs_nfs(&(0x7f0000000040)={0xa, 0x2, 0x1}, 0x3, &(0x7f0000000080)="101b05c019e137f231e5f925884f39f5b87070b400c4d8cc7758aad21cf3c63fa05761d87713928f7c1a70e2bf92a2715ace8bf9d77ec267532562c712e088f80b5ccf76039ccb110c6cce72e56498ce5d4770ef4558109d9fc72b2d7e0ec0b60863077251afafa46dcbdf1a5f9d7c481839632027466ca7ce3cd3b9886180d7eb8077a32edea7553126078f238230bf057544986a50f4b94a3417f493fc2c55adbfc8a2312eb60f3bdb02e01c7c9b912288e04854c75acf9404afadbc", &(0x7f0000000140)=0xbd, &(0x7f0000000180)="88499b72b0d0600604e7d96d1d49f8fe0b20c7456550d64052236566aca03003537845d4a2e7feec2104c4a2ef73ceef3851b9b993c69efb451393c0a92a39cda8b935fbbc60364310fd2fee7b3cc62a1ed91d23ae3edb91cc673b9dd2351d3ddb7f6aad406972174125ff5dfaa9f23b682ca843b61d40ccae602aeb83c5d8e46d00e4ce8a551b54c3ddf567f9e77953794dbca203e72058ee4991d91f853b4c7c3ab564eaff00f9912950887a1287", 0xaf) 510.059489ms ago: executing program 5 (id=313): r0 = syz_open_pts() close(r0) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000080)="76e5eac907f9ccf7a251ceddcec7d6aa45cffe2c63a56077123a276d3ba4e9d17eb3eb5db12a3783a8e0620d357de1fe04fa9465b5bd1286e9624dec06a00c222f", 0x41}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mkdir(&(0x7f00000000c0)='./file0\x00', 0x3d6) fcntl$lock(r0, 0x7, 0x0) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x200, 0x186) ktrace(&(0x7f0000000100)='./file0\x00', 0x4, 0xd27d43220c7ff9d, 0x0) ktrace(0x0, 0x0, 0x7934d93b65e30c5c, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x10, r1, 0x459) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x6, 0x8000, 0xa, 0x9, 0x5, 0xffffffff], 0x6, 0x10000, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CURSOR2(0xffffffffffffff9c, 0xc02464bb, &(0x7f0000000080)={0x8e34f290d843c4d4, 0x4, 0x7, 0x10000, 0x80, 0x800, 0x0, 0xfffffffd, 0x1}) r4 = syz_open_pts() ioctl$TIOCSETA(r4, 0x802c7414, &(0x7f0000000340)={0x2, 0x9, 0xfffffffe, 0x966b, "ffe7130b1e0000000000001900", 0x44, 0x4}) ioctl$TIOCSETAW(r4, 0x802c7415, &(0x7f0000000000)={0x4, 0x8, 0x9, 0xfffffffe, "6b240800e951b4639e0dc71eaf4307e228d94b9e", 0x6, 0x3}) ioctl$DRM_IOCTL_MODE_GETFB(0xffffffffffffff9c, 0xc01c64ad, &(0x7f0000000140)={0x0, 0x0, 0x1, 0x9, 0x0, 0x6, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000180)={0x0}) r7 = socket(0x18, 0x1, 0x0) setsockopt(r7, 0x1000000029, 0x3c, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffff9c, 0xc00464b4, &(0x7f00000001c0)={0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000200)={0x0, 0x1, 0x0, 0x30335852, 0x2, [r3, r5, r6, r8], [0x6, 0x0, 0x34, 0x5], [0x2, 0x2, 0x3, 0x80000000], [0x7, 0x7a4f3235, 0x8, 0x3fcd]}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x3800, &(0x7f0000000100)={0x4, 0x7}) 508.936605ms ago: executing program 3 (id=314): sysctl$kern(&(0x7f0000000000)={0x1, 0x52}, 0x2, &(0x7f00000000c0)="453d21d39f6d10f8857c204a44eace509481a1902ac540393ee5e5c2ade6ba0ae49e9b031e072bd14c8877e80b927df3cf4188f5ba06d6eb0d14674678ff2b1ace3973290891c6365238fcbe8aa9b5e36407177df73c8f492f2cf0b48080811ff96d2aee71fd88df4693aa924954a47f699e6977d77e6c436c07ad00ae84c39d6b", &(0x7f0000000180)=0x81, &(0x7f00000001c0)="a7386943525fe7bcb0a4c0dcda14e693d7e6b1e0cb7e5218d115788ca668f934aad1324a599bc9d3aee209e71160e836f40fd6110c455c8a0680e789098959f4c7be9d2d19d6ca143d2c53b0ce3de1316e9b4e69d7f357c9325ce7d68d5b18aaf97b452f4f0f2c09c20bfb724ec79cba8538b012d93ab5dc454cf216dff56bda8350d3d76aa7ab616b36", 0x8a) r0 = socket(0x18, 0x3, 0x7) r1 = socket(0x18, 0x3, 0x0) shutdown(r1, 0x0) syz_emit_ethernet(0x66, &(0x7f00000000c0)={@random="8f6f77ede655", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "5f6ad9", 0x30, 0x37, 0x0, @empty, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "06c32e", 0x6, 0x6, 0x0, @local={0xfe, 0x80, '\x00', 0x0}, @loopback}}}}}}}) getsockopt(r0, 0x29, 0xb, 0x0, 0x0) r2 = socket(0x2, 0x3, 0x2f) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x205310) ioctl$FIONREAD(r0, 0x4004667f, &(0x7f0000000580)) open(&(0x7f0000000040)='./bus\x00', 0x200, 0xaf) ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, &(0x7f0000000340)={0x3, 0x0, {[0xfffffbeffffffff7, 0x0, 0x4787, 0x1002, 0x8001, 0x0, 0x6, 0xffffffffffffffff, 0x0, 0x2eff, 0x0, 0x3, 0xfffffffffffbffff, 0x400000002000000, 0x0, 0xffffffffffffffa7, 0x82, 0xce5], [0xfffffffffffffffe, 0x7, 0x7ffffffffffffffe, 0x100000000, 0x5, 0x10007b98, 0x6, 0x0, 0x80000001, 0x4], [0x10001, 0x2, 0x40000000, 0x4, 0xffffffffffffffff, 0x0, 0xfffffffffffffffa], [0x80000000100, 0x20000000000, 0xfffffffffffffffc, 0x5, 0xfffffffffffffffe, 0x3], [{0x4, 0x4, 0xffffffff, 0x7d06}, {0xfbfc, 0x2, 0x5, 0x338}, {0x0, 0x0, 0x1, 0x7}, {0x3, 0x100, 0x3, 0xffffffffffffffff}, {0x0, 0x2, 0x0, 0x40040000000006}, {0x0, 0x2103, 0x40000, 0x2000000000000000}, {0xf054, 0x0, 0x1, 0x1}, {0xb, 0x1, 0x0, 0x2}], {0x8002, 0x90d, 0x8, 0x80000000000000}, {0x21, 0x6, 0x100000b0, 0x1}}}) r3 = kqueue() kevent(r3, &(0x7f0000000040), 0x30, 0x0, 0x57d, 0x0) syz_extract_tcp_res(&(0x7f00000002c0)={0x41424344}, 0xffff, 0x9) syz_emit_ethernet(0xe9, &(0x7f0000000300)={@broadcast, @random="7848e29200cd", [], {@ipv4={0x800, {{0x7, 0x4, 0x3, 0x4, 0xdb, 0x67, 0x40, 0x3, 0xf0, 0x0, @loopback, @broadcast, {[@ra={0x94, 0x4, 0xa79}, @end]}}, @tcp={{0x2, 0x0, r4, 0x41424344, 0x1, 0x0, 0x12, 0x22, 0x428b, 0x0, 0xc9, {[@sack={0x5, 0x1e, [0x8f, 0x8, 0x749b, 0x7, 0x6, 0xc, 0xf7]}, @generic={0x1, 0x12, "fcb235da1b48c65efac4b242e2409850"}, @sack_perm={0x4, 0x2}]}}, {"7f00e02b905bc9f45de851aa2e1a2f4aead49b8384abc5dd24673486922d01effa33a548680bbb3546189156dc33ed39e965e442c54b46270513739174f0fa2eba538b85ec319cd3340d5bf3bea9e27bcaa79986a9a39f707fcd047fb591785fec12ee2f23b7479992277cce1db33fa2dab74d35897ea9"}}}}}}) r5 = dup(r2) setsockopt$inet_opts(r5, 0x0, 0x22, &(0x7f0000000040)="fd0cc085", 0x4) sendto$inet(r2, 0x0, 0x0, 0x406, &(0x7f0000000280)={0x10, 0x2, 0x3, 0xffffff00}, 0x13) mkdir(&(0x7f0000000080)='./file1\x00', 0xcc0aac5662c1e2af) 449.633823ms ago: executing program 6 (id=315): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) mlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) getsockopt(r0, 0x6, 0x3, 0x0, 0x0) 447.783014ms ago: executing program 3 (id=317): getgroups(0x1, &(0x7f0000000000)=[0x0]) setresgid(0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)) open(&(0x7f0000000000)='./file0\x00', 0x615, 0x166) ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9f, 0x0) setitimer(0x0, &(0x7f0000000400)={{0x2, 0x80}, {0x9, 0xe361}}, 0x0) setitimer(0x0, 0x0, &(0x7f0000000180)) 433.40448ms ago: executing program 6 (id=318): mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) r0 = accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000000)) setsockopt(r0, 0x6, 0x2, &(0x7f0000000040)="ac8b9d773e9b251a1caaa22c1c4e1c3a2e903cc30dc942e807164796999edbb2299476f5d4a5c53a1b496c523a748388846a33972afd61e124574b22046f518734468e31434fa83f6bd28101976de697674642250d2aae320aa2441e964a88ab255cce80c6f2f72ad0ac", 0x6a) sendto(r0, &(0x7f00000000c0)="e8d225d578d3a5437bf7d23906f4e665d0591398a5f9703c9a54562e8f98df86de9a4847ce1a49ea8b054acb700e49712c38a9af359765a9fd7404f70773fce1754be792079cfc108a58d0ff8aac1c6e382fdf57d1e497ccdeeeb64a6cc2d6eec240fb8ea815396afa710b1a7e9b60f2a6fbab7253e8e0c2adc240d5d46c9da6f1c346938a6fe58384f5926c09698113f8d70ef2d9d03f3630113972bbc30e136aadbb37f9a1bf6eb48794007be9937c608fc8ed5e8cec82af76c8f75a3eb67b7a7657d3f75810c5a203381ebb63adc65c8bbf3b9f0de9f17e71311235e41693b5c4a76c", 0xe4, 0x7, &(0x7f00000001c0)=@in={0x10, 0x2, 0x0, 0x6}, 0x10) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) r1 = getsid(0xffffffffffffffff) setpgid(0x0, r1) closefrom(r0) munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000) sysctl$kern(&(0x7f0000000200), 0x2, &(0x7f0000000240)="5d328010983f3851ec462df346d449393712df8d44d1e50bfbd9e8e2b068f7b327ccec637909cc2a20c537d84675beb22038ca37b2ddad96d713f91bd88269bc6743a2d29fe6afe62b7f71442e37b5c1f8a513a79eec666a9953f961c4ae2ec484a8a87eea8c5ee6cbe6681f7035837ef3a5c293508b89721f17390ef3b8202a537e76c6238c16a72aca19ef5243cf402aefad6950c33f6e53", &(0x7f0000000300)=0x99, &(0x7f0000000340)="6afd9254b43cecbc6d984907fe886a7b9104943605f455fbcbe5f73619f7990c7de26fb40af460cc879b6ab82ba920acab7fb574889655c91c39c6e5a0385cdf950f6c1eb1ce955ee9198ed63594ea96b39befcd1139aee311dae7f8a190b9ef29593fc22e7e168bffcda7af12bd78d96898acdb8340aabecb49db960adc787bf2f9a507b7d8d1846ea292907af665f9d154db9bf9f2c1dc4daf0fa6179870de3a5c24837a4c63ddac4ee9312c6a28ab7061ef9b028beaa1b930997230ca3cb43c8026ed304fc3dc355110680e57f16838aa10", 0xd3) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = accept$unix(r3, 0x0, &(0x7f0000000480)) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x12, r2, 0x831c) connect$unix(r4, &(0x7f00000004c0)=@file={0x8, 0x1, './file0\x00'}, 0xa) semget$private(0x0, 0x47c540b5245ab35, 0x238) r5 = getppid() setpgid(r5, r1) setsid() socket(0x18, 0x1000, 0x7) setpgid(r5, r5) r6 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000500), 0x20000, 0x0) getpid() getpgid(r1) mquery(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x0, r6, 0x3) r7 = dup(r2) ioctl$FIONREAD(r3, 0x4004667f, &(0x7f0000000540)) syz_open_pts() ioctl$WSMOUSEIO_SCALIBCOORDS(r7, 0x81205724, &(0x7f0000000580)={0x1, 0x0, 0xff4d, 0x401, 0x401, 0x4, 0x9, 0x10, [{0xfffffff7, 0x5, 0x6, 0x80}, {0x7, 0x7c, 0xb7d, 0x3}, {0x70, 0x8, 0x6, 0x3}, {0xfff, 0x2, 0x4, 0x9}, {0x7, 0x1, 0x2, 0x4}, {0x2, 0x7, 0xff, 0x7}, {0x4, 0x10001, 0x8, 0x80000000}, {0xf, 0x67, 0x6, 0x5}, {0x10, 0x3, 0x711ab8dc, 0x800}, {0x9, 0xfffffff2, 0xf8ca, 0x400}, {0x40, 0x9, 0x3, 0x200}, {0x1, 0x7fffffff, 0x1, 0x6}, {0x2, 0x8, 0x8, 0xe0}, {0x9, 0x3, 0x10001, 0x1}, {0xae3, 0x3, 0x2, 0x5}, {0x401, 0x5, 0x7fffffff, 0x7}]}) ioctl$TIOCOUTQ(r7, 0x40047473, &(0x7f00000006c0)) 431.3906ms ago: executing program 2 (id=319): mknod(&(0x7f0000000400)='./file0\x00', 0x2000, 0x5c4a) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) (async) open(&(0x7f0000000380)='./file0\x00', 0x205, 0x129) (async) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x5a) (async) open(&(0x7f0000000000)='./file0\x00', 0x8000, 0x0) 430.843012ms ago: executing program 3 (id=320): getrusage(0x0, 0xffffffffffffffff) semop(0x0, 0xffffffffffffffff, 0x13) mknod(&(0x7f0000000040)='./file0\x00', 0x2000, 0x205b9b) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) msgrcv(0x0, 0x0, 0x0, 0x3, 0x1000) msgrcv(0x0, 0x0, 0x0, 0x3, 0x1800) r1 = kqueue() kevent(r1, &(0x7f00000000c0), 0x100, &(0x7f0000000180)=[{{r0}, 0xffffffffffffffff, 0x13, 0x2}, {{r0}, 0xffffffffffffffff, 0x62}], 0x6, 0x0) r2 = shmget$private(0x0, 0x2000, 0x2b4, &(0x7f0000ffe000/0x2000)=nil) shmat(r2, &(0x7f0000001000/0x3000)=nil, 0x0) shmctl$SHM_LOCK(r2, 0x3) sysctl$net_inet_udp(&(0x7f0000000080)={0x4, 0x2, 0x11, 0x2}, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffbd) 359.707469ms ago: executing program 2 (id=321): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x81, 0x1, 0x4b, 0x10000}, {0x2, 0x0, 0xfc, 0x8001}, {0x6, 0x5, 0x1, 0xfffff804}]}) (async) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) (async) sysctl$kern(0x0, 0x0, &(0x7f0000000240)="c2a650000001932445d3be05a9b9695e0acf8d1ba3ee29d441ab6083c8c70600001c700c5a1f3fd11b33fcdf93141219d726a83dbe14a6669cdd8e306a1bab63559f0fb0e9fa064a", &(0x7f0000000000)=0x48, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) sysctl$net_inet_ip(&(0x7f0000000080)={0x4, 0x2, 0x0, 0x24}, 0x4, &(0x7f0000000100)="d601ed98bc8a88a94a9e6f7c4f51a149686ad0c990654625e6016703c567c8430e0b80e0f42dcb1047aefa3fc4508d59c575679e48", &(0x7f0000000140)=0x35, &(0x7f00000002c0)="b207b052baf71fbfa704cde4b7abee618e468e7a069a596889764f07ae289698b4e3a99a3aaac91ab4f3ef279fa005b336caee3ea7feb552c3f128e5ec3730df585926cd362694a2140c6dcb1ffcda2e9769839917f22906cbffef545bc5648d76693e717ebd9b0dd88d84ef3d3a410d2c84f4274590abae86bf97c7f7d52292f8eba40b1860e95ed96a18409be36c9a160ea1e8d607e00162af9c18495f6174cf9ef719878d2ae0dc98f7ae8cdd4a", 0xaf) (async) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0xfffffffffffffffd, [{&(0x7f00000c7000/0x3000)=nil, &(0x7f0000ff6000/0x6000)=nil, 0x1}, {&(0x7f00004d7000/0x2000)=nil, &(0x7f0000698000/0x1000)=nil, 0x3}, {&(0x7f00005fd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x1}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff7000/0x3000)=nil, 0x80}, {&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff1000/0x1000)=nil, 0xc}, {&(0x7f00004f8000/0x2000)=nil, &(0x7f000068e000/0x12000)=nil, 0x2000000000000000}, {&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff2000/0x2000)=nil, 0x7}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000696000/0x2000)=nil, 0xffffffffffffffff}, {&(0x7f000013f000/0x2000)=nil, &(0x7f0000445000/0x3000)=nil, 0xfffffffffffffffd}, {&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000445000/0x4000)=nil, 0x8}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000695000/0x1000)=nil, 0xffffffff}, {&(0x7f00007f8000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x43}, {&(0x7f00000c6000/0x2000)=nil, &(0x7f0000668000/0x4000)=nil}, {&(0x7f000051f000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x4}, {&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffa000/0x6000)=nil}, {&(0x7f0000ff1000/0x1000)=nil, &(0x7f0000010000/0x3000)=nil, 0x1}], './file0\x00'}) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r1, 0x0, 0x200000000000c, &(0x7f0000000240)="ea00000100000000", 0xc) (async) syz_emit_ethernet(0x10004, &(0x7f0000000740)=ANY=[]) 355.474424ms ago: executing program 0 (id=322): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x20a, 0x40, 0x3, 0x8}, {0x4, 0x7, 0xfe, 0xe}, {0x9b1e, 0x22, 0x5, 0x4}]}) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0xbe, 0x0) ioctl$BIOCGDIRFILT(r0, 0x4004427c, &(0x7f0000000140)) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0xae69, 0xf, 0x9, 0x10001}]}) sysctl$kern(0x0, 0x0, &(0x7f0000000200)="c2a650000001932445d3be05a9b9695e0acf84da0047c98d1ba3ee29d441ab6083c8c70600001c700c5a1f3fd11b33fcdf93141219d726a83dbe14a6669cdd8e306a1bab635502000000fa064a9eff186d1bb3fdfd02c7925ccda6d0182c4b1d1365df7d24bf17504aa3e0071804000000000000001b89efbac4ff862a342bdfeb91fb87f0a312a4ef29b23c954b8ac348681c84a317d48f1216488e43c006fe4c12a2499a8b58083fb7118a", &(0x7f0000000000)=0xac, 0x0, 0x0) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x1000e, &(0x7f0000000100)=ANY=[]) 355.087531ms ago: executing program 2 (id=323): r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0x80000000, 0xffff63d6, 0xe9, 0x2, 0xa, 0x3, 0x1, 0x10, [{0x0, 0x80000004, 0x5, 0x80000002}, {0xe9, 0xe7, 0x1000002, 0x6}, {0x10cd5, 0x4baa, 0x9, 0x4}, {0x7, 0x10000, 0x4000000f, 0x8cce}, {0x10006, 0x2000008, 0x0, 0x1}, {0x388d, 0xffffffff, 0x85, 0x5}, {0x4, 0xa00, 0x20004, 0xffffffff}, {0x208, 0xfffffffd, 0x5, 0xffffe2e8}, {0x10007, 0x1000, 0x4, 0x7ffd}, {0x3f8, 0xfeffffff, 0x1ff, 0x12}, {0x84, 0x4, 0x8a3a0001, 0xfffffff4}, {0x10002, 0xfffffffe, 0x650, 0x200a68}, {0x401, 0x6, 0xa6ab, 0xa5}, {0xee1, 0xfffffffe, 0x102}, {0x0, 0x7, 0x81, 0x7}, {0x89be2, 0x1, 0x2, 0x3ff}]}) poll(&(0x7f0000000180)=[{0xffffffffffffffff, 0x80}, {r0, 0x8}, {r0, 0x10}], 0x3, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$TIOCSETA(r0, 0x80d04466, &(0x7f0000000140)={0x9, 0x3, 0x9, 0x127492, "08e50000000000000100", 0x20004118, 0x8}) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$DIOCGETSTATE(0xffffffffffffffff, 0xc1084413, &(0x7f0000000040)={{0x4, './file0\x00', [{[@v6=@mcast2, @v4=@rand_addr=0x101], [0xd, 0x40], 0x4, 0x18}, {[@v4=@loopback, @v6=@rand_addr="44657f411b1a20825843f19d021fdc59"], [0x8046, 0x808], 0x2004, 0x2}], {{0x246, 0x4b, 0xfa, 0x7ff}, 0x6543, 0x409, 0xfff00003, 0x200, 0x800, 0x7f, 0x9}, {{0x0, 0x7, 0x1, 0x85}, 0xab, 0xc85, 0x10009, 0x6, 0x400, 0xf0, 0x40}, @v4=@broadcast, 0x5, 0xffffffff, 0x2, 0xf23b, 0x5, [[0x8, 0xd], [0x5, 0x834c]], [[0xfc000002, 0x4], [0xfffffff7, 0x3]], 0x9, [0x8001, 0x79], 0x1, 0x18, 0x5, 0x1, 0x0, 0x3, 0xc, 0x83, 0x5, 0x7, 0x1, 0xce57, "da56"}}) syz_emit_ethernet(0x1000e, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6603816af04506b000f8ff00000000000000000000000000070000000000000000000000000000aa3d259c06b15c5a443aa104000ce98378b65dde37b92d7200cff44a58083c8a09119fc163a34eb4a4de01040db57abe4559cce243ac8387255f660d6c9d872a4cb56bf4c6693a"]) ioctl$TIOCSETA(r1, 0xc1084425, &(0x7f0000000040)={0x1, 0x0, 0xfffffffe, 0x3, "210d0000000200000006000000000200007fffff", 0x7ffffffe}) 352.920532ms ago: executing program 0 (id=324): ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x0, 0x1, 0x4b, 0xfbfffff9}, {0x48, 0x81, 0xfc, 0x7}, {0x6, 0x6, 0x1, 0xfffff804}]}) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) sysctl$kern(0x0, 0x0, &(0x7f0000000240)="c2a650000001932445d3be05a9b9695e0acf8d1ba3ee29d441ab6083c8c70600001c700c5a1f3fd11b33fcdf93141219d726a83dbe14a6669cdd8e306a1bab63559f0fb0e9fa064a9eff186d5ccda6d0182c4b1d1365df7d24bffb4f4aa3e00718", &(0x7f0000000000)=0x61, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) r1 = socket(0x18, 0x3, 0x3a) setsockopt(r1, 0x1000000029, 0x1a, &(0x7f0000000000), 0x0) syz_emit_ethernet(0x10004, &(0x7f0000000740)=ANY=[]) r2 = socket$inet(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000000)={0x10, 0x2, 0x3}, 0x10) listen(r2, 0x7fff) syz_emit_ethernet(0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000000800452000280000000060069078e0000002ac1400aa4e214e23", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="502200a390780000"]) syz_emit_ethernet(0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="aaaaaaaaaaaa00004d687d9d7ea0ba49dede750000000000000000280000000060069078e000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="501000a390780000"]) 350.01941ms ago: executing program 5 (id=325): r0 = socket(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x10, 0x2, 0x1, 0x200000e3}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) recvmsg(0xffffffffffffff9c, &(0x7f00000002c0)={&(0x7f0000000080)=@in, 0x10, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/191, 0xbf}], 0x1, &(0x7f00000001c0)=""/239, 0xef}, 0x1040) sendto(r0, &(0x7f0000000440)="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", 0x5c1, 0x2, 0x0, 0x0) socket(0x2, 0x2, 0x0) (async) connect$inet(r0, &(0x7f0000000040)={0x10, 0x2, 0x1, 0x200000e3}, 0x10) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) (async) recvmsg(0xffffffffffffff9c, &(0x7f00000002c0)={&(0x7f0000000080)=@in, 0x10, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/191, 0xbf}], 0x1, &(0x7f00000001c0)=""/239, 0xef}, 0x1040) (async) sendto(r0, &(0x7f0000000440)="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", 0x5c1, 0x2, 0x0, 0x0) (async) 310.235979ms ago: executing program 0 (id=326): open$dir(&(0x7f0000000300)='.\x00', 0x80, 0x142) (async, rerun: 32) select(0x40, &(0x7f0000000000)={0x200, 0x9, 0x2000000000000, 0x0, 0x0, 0x100000, 0x3, 0x6}, 0x0, 0x0, 0x0) (rerun: 32) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@broadcast, @local, [], {@ipv4={0x86dd, {{0x5, 0x4, 0x0, 0x17, 0x1c, 0x66, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x0}, @multicast1}, @icmp=@info_reply={0x10, 0x0, 0x0, 0x8000, 0x9}}}}}) (async) setrlimit(0x8, &(0x7f0000000580)={0xa, 0x56}) r0 = syz_open_pts() close(r0) (async) syz_open_pts() (async) mknod(&(0x7f0000000080)='./file0\x00', 0x6000, 0x100) (async) setuid(0xffffffffffffffff) open(&(0x7f0000000300)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7815) ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000040)={0x80, 0x6, 0xfffffff4, 0xfffffdd0, "08955c0000bcd3ffe60c202000", 0xc1, 0x8}) (async) writev(r0, &(0x7f00000015c0)=[{&(0x7f00000005c0)="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", 0x164}], 0x1) (async, rerun: 32) mknod$loop(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4, 0x1) (async, rerun: 32) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$DIOCSETSYNCOOKIES(r1, 0xc0014462, &(0x7f00000006c0)=0x2) (async) ioctl$DIOCCLRSTATUS(r1, 0xc0284416, &(0x7f00000001c0)={'./file0aaaaaaaaa', &(0x7f0000000100)=""/164, 0x7d26, 0x7, 0x5, 0x4}) link(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000d40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 306.183112ms ago: executing program 0 (id=327): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0xbe, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000200)=[{0x1, 0x1, 0x43, 0xfbfffff9}, {0x48, 0x7d, 0xec, 0x7}, {0x6, 0x6, 0x7, 0xfffff885}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000040)={0x28, 0x0}) write(r0, &(0x7f0000000280)="f81ad2e4004800009db6a1cb4973", 0xe) mknod(&(0x7f00000000c0)='./file0\x00', 0x2000, 0x40000802) r1 = open(&(0x7f0000000100)='./file0\x00', 0x10, 0x8) ioctl$TIOCSETD(r1, 0x8004741b, &(0x7f0000000080)=0x7) r2 = socket(0x2, 0x8002, 0x0) r3 = fcntl$dupfd(r2, 0x2, 0xffffffffffffffff) closefrom(r3) 305.560528ms ago: executing program 7 (id=328): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket$inet(0x2, 0x8003, 0x0) setsockopt(r1, 0x0, 0x5, &(0x7f0000000340)="15337ac0", 0x4) r2 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000002900)={@broadcast, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "5f6ad9", 0x8, 0x3a, 0x29, @remote={0xfe, 0x80, '\x00', 0x0}, @local={0xfe, 0x80, '\x00', 0x0}, {[], @icmpv6=@ndisc_rs}}}}}) r3 = openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x0, 0x9, 0x3, 0x8fe, 0x4, 0x7, 0x3, 0x10, [{0xfffff002, 0x3, 0x6, 0x71800}, {0x3, 0x2000b7fe, 0x6, 0x40022000}, {0x0, 0xc7, 0x208, 0x2}, {0x2, 0x80ff, 0x200, 0x5}, {0x10000, 0x3, 0x8000, 0x4}, {0x2002, 0x83, 0x14000006, 0xf}, {0x805, 0xbffffff9, 0x1, 0x6d}, {0x24008, 0x3, 0xfdf0, 0x4}, {0x1, 0x6, 0x3, 0x9}, {0x401, 0x1, 0x8001, 0x7}, {0x401, 0xfff9, 0x488, 0x13}, {0xce, 0x7584, 0x8, 0x4}, {0x2000df, 0x2a, 0x0, 0x3ff}, {0x2, 0xfffffffc, 0xeffffff5, 0x3}, {0x6, 0x5, 0x26, 0x40000003}, {0xfffffffd, 0xd654, 0xffffffff, 0x6}]}) ioctl$TIOCSETA(r3, 0xc0404469, &(0x7f0000000140)={0x0, 0x0, 0x4, 0x1, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x008\x00', 0x0, 0x9}) ioctl$TIOCSETA(r2, 0xcd604407, &(0x7f0000000040)={0x3, 0x0, 0xfffffffe, 0x5, "210d000000020000000000000000004021800600", 0x2000000, 0x5}) mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1) sysctl$kern(&(0x7f00000000c0)={0x1, 0x4d}, 0x2, &(0x7f0000002480)="71f91eca", &(0x7f0000000080)=0x4, 0x0, 0x0) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000001240)={0x1, &(0x7f0000001200)=[{0x919c, 0x9, 0x9, 0x1}]}) wait4(0xffffffffffffffff, 0x0, 0x1, 0x0) openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) socket$inet(0x2, 0x8003, 0x0) (async) setsockopt(r1, 0x0, 0x5, &(0x7f0000000340)="15337ac0", 0x4) (async) openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) (async) syz_emit_ethernet(0x3e, &(0x7f0000002900)={@broadcast, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "5f6ad9", 0x8, 0x3a, 0x29, @remote={0xfe, 0x80, '\x00', 0x0}, @local={0xfe, 0x80, '\x00', 0x0}, {[], @icmpv6=@ndisc_rs}}}}}) (async) openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) (async) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x0, 0x9, 0x3, 0x8fe, 0x4, 0x7, 0x3, 0x10, [{0xfffff002, 0x3, 0x6, 0x71800}, {0x3, 0x2000b7fe, 0x6, 0x40022000}, {0x0, 0xc7, 0x208, 0x2}, {0x2, 0x80ff, 0x200, 0x5}, {0x10000, 0x3, 0x8000, 0x4}, {0x2002, 0x83, 0x14000006, 0xf}, {0x805, 0xbffffff9, 0x1, 0x6d}, {0x24008, 0x3, 0xfdf0, 0x4}, {0x1, 0x6, 0x3, 0x9}, {0x401, 0x1, 0x8001, 0x7}, {0x401, 0xfff9, 0x488, 0x13}, {0xce, 0x7584, 0x8, 0x4}, {0x2000df, 0x2a, 0x0, 0x3ff}, {0x2, 0xfffffffc, 0xeffffff5, 0x3}, {0x6, 0x5, 0x26, 0x40000003}, {0xfffffffd, 0xd654, 0xffffffff, 0x6}]}) (async) ioctl$TIOCSETA(r3, 0xc0404469, &(0x7f0000000140)={0x0, 0x0, 0x4, 0x1, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x008\x00', 0x0, 0x9}) (async) ioctl$TIOCSETA(r2, 0xcd604407, &(0x7f0000000040)={0x3, 0x0, 0xfffffffe, 0x5, "210d000000020000000000000000004021800600", 0x2000000, 0x5}) (async) mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1) (async) sysctl$kern(&(0x7f00000000c0)={0x1, 0x4d}, 0x2, &(0x7f0000002480)="71f91eca", &(0x7f0000000080)=0x4, 0x0, 0x0) (async) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000001240)={0x1, &(0x7f0000001200)=[{0x919c, 0x9, 0x9, 0x1}]}) (async) wait4(0xffffffffffffffff, 0x0, 0x1, 0x0) (async) 305.241761ms ago: executing program 2 (id=329): r0 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = kqueue() kevent(r1, &(0x7f0000000200)=[{{}, 0xfffffffffffffff6, 0x19, 0xf27ff7794bbc9c2d, 0xfd, 0x10000}], 0x1, 0x0, 0x9b68, 0x0) r2 = open(&(0x7f0000000140)='./file0\x00', 0x10686, 0x8) ioctl$WSDISPLAYIO_GETSCREEN(r2, 0xc0245755, &(0x7f0000000080)={0x5, './bus\x00', './bus\x00'}) kevent(r1, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000480)={0xf9bb, 0x3}) kevent(r1, &(0x7f0000000040)=[{{}, 0xfffffffffffffff6, 0x4, 0x80000000, 0x100, 0x13fff}], 0x1, 0x0, 0x5, 0x0) ioctl$FIONREAD(r1, 0x4004667f, &(0x7f0000000b00)) getgroups(0x1, &(0x7f0000000100)=[0xffffffffffffffff]) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$WSDISPLAYIO_WSMOUSED(r2, 0x80185758, &(0x7f00000007c0)={0x5, 0x6, {0x0, 0x6}}) r5 = getgid() r6 = getegid() getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) getgroups(0x0, &(0x7f00000005c0)) setresgid(r7, 0x0, 0x0) lstat(&(0x7f00000004c0)='./bus\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgroups(0x6, &(0x7f0000000580)=[0x0, r5, r6, 0x0, 0x0, r8]) sysctl$vfs_nfs(&(0x7f00000002c0)={0xa, 0x2, 0x2}, 0x3, 0x0, 0x0, &(0x7f0000000000)="e7b90000", 0x4) socket$inet6(0x18, 0x3, 0x6) getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f00000005c0)={0x0}, &(0x7f0000000600)=0xc) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000300)={{r3, r5, r3, r4, 0x16, 0xfff, 0x0, 0x0, 0x400}, 0x0, 0x0, 0x2, 0x0, 0x7b6b4f78, r9, 0x0, 0xd, 0x0, 0x3, 0x0, 0x9}) readv(0xffffffffffffffff, &(0x7f0000000740)=[{&(0x7f0000000700)=""/52, 0x34}], 0x1) unveil(&(0x7f0000000000)='./bus\x00', 0x0) select(0x40, &(0x7f0000000000)={0x8, 0x3c94, 0x9, 0x100000, 0x87, 0x8000ffd, 0x400, 0x20cc}, 0x0, 0x0, 0x0) r10 = socket(0x18, 0x1, 0x0) openat$bpf(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) setsockopt$sock_cred(r10, 0xffff, 0x1022, 0xffffffffffffffff, 0x0) select(0x0, 0x0, 0x0, 0x0, 0x0) close(r0) 293.076548ms ago: executing program 6 (id=330): r0 = socket$inet(0x18, 0x3, 0x102) sendmsg(r0, &(0x7f0000000040)={&(0x7f0000000240)=@in6={0x1c, 0x18, 0x1, 0x401, "00000000000000010000000000000001", 0x8}, 0x1c, &(0x7f00000003c0)=[{&(0x7f00000002c0)="6388020004002b9a0142008751f2fbffffffffffffffd68e590009cf9323100084410a85919f2e042b7b552b32106fb6b4d9a7845d3630516bb888e28be2db771a4c610b3b6423fd63042f5c5c707d3b32d81ac276bfb8d53ee73d1484a6a08f15485161a6e6436edee0e114fe687c7d00017c0b14935a4df54c3bd052d2731a0ca71d52766d8eb2202727d7b784fec87e959aaa823578cb28f08365b74854477aa35e4312a4f4b76ac0558d4ee4a5c9f08bd4719768eaf12d4ea886df465fea7704953f56c8d729e1f8dc461d494a6656b0895406569a5d9d5404fa79920cfd6cc65397281113cfaf0c9dd39edb9688c88aba04", 0xf4}, {&(0x7f0000000280)="9e5c9efa178e2d5042bda9889f", 0xd}, {&(0x7f0000000ac0)="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", 0x327}], 0x3, 0x0}, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x0) r1 = open(&(0x7f0000000240)='./file0\x00', 0x2, 0x24) madvise(&(0x7f0000000000/0x14000)=nil, 0x14000, 0x2) recvmmsg(0xffffffffffffffff, &(0x7f0000000140)={{0x0, 0x0, 0x0, 0x1c, 0x0}, 0x3}, 0x38, 0x2041, &(0x7f0000003d80)={0x22008, 0x9}) r2 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f00000001c0), 0x200, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x8}, 0x6205, 0x2a3, 0xffffffffffffffff, 0x4, 0x3, 0x3, 0x100000001, 0x47a6, 0x0, 0x8000000000007}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x31}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xff0a, 0x0, 0x37) ioctl$DIOCRCLRASTATS(r2, 0xc4504448, &(0x7f0000000e00)={{'./file0\x00', './file0\x00', 0x32}, &(0x7f0000000780)=[{@multicast1, '\x00', './file0\x00', 0x4000000, 0x200, 0x2, 0x9, 0x9, 0x4, 0xb}, {@rand_addr=0x7f, '\x00', './file0\x00', 0xfffffffd, 0x10, 0x18, 0xa, 0xb, 0x55, 0x8}, {@multicast2, '\x00', './file0\x00', 0x81, 0x5, 0x18, 0x2, 0x3, 0x0, 0x9}, {@broadcast, '\x00', './file0\x00', 0x6, 0x318, 0x0, 0xe3, 0x9, 0x6, 0x8}, {@broadcast, '\x00', './file0\x00', 0x0, 0x7f, 0x18, 0x7, 0x7f, 0x9d, 0x6}, {@remote={0xac, 0x14, 0x0}, '\x00', './file0\x00', 0x0, 0x3ff, 0x0, 0xac, 0x6, 0x16, 0x9}, {@local={0xac, 0x14, 0x0}, '\x00', './file0\x00', 0x9, 0x8, 0x0, 0xb, 0x9, 0x8, 0x3}], 0x6, 0x7, 0x9, 0x4, 0x1000, 0x5, 0xde, 0xffffffff}) ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000200)={0x3, 0x55, 0x8, 0x401, "338717532bd547ecbc27599f81d1ca5a3e3b56f6", 0xf324, 0x6914}) ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000040)={0x3, 0xffeffdff, 0xffffffc0, 0x8623, "01bd14e3ba11d8ee4400"}) writev(r1, &(0x7f0000001640)=[{&(0x7f0000000080)="0f8c63", 0x3}, {&(0x7f0000001740)="38850aea8a5d5e89ad798f24178b1ad6e0307e6ad443b05130d804fca8bb44fdb783626c92d18811aa62e678bd47434907b9939308276c09030c19eb4dad25c716d5231b0d8af04873e44c4ab04429892f616151b47d796aeb095abcef0304be25d035fde30dd920638f0c6d2e3723e8f28c04c9611f3ff2c08b8511b2a5cdf08747215158825e1f5b5b22098845aea18939f6cb9f36271c451894f0bfc60c2740a12dd836d0cb19522863396183e640bf95d16ac9fd50bde96125613e5e034ecaa43ed8b4f136fafe46cb1422", 0xcd}, {&(0x7f0000000280)="02e137393b5763d4c84477d7916d2bdbec09a7232b51caf8b1c958ba0e2c77ed53db533ed61b16811043c95359a44c5da749", 0x32}, {&(0x7f0000000340)="a007037065cd04ee80ed982f840e8a618e0a6c9e1a079cc6f05e7cd0a1ef154f063186b9f4cc1a645790c8d46ae3e41721761329e2d2032c0e417ffb2a763962d5a010c36c10698d4c6f3c27248f603e950ee68eab4ebbfe919eab4d7c6c72b32dcd3c525a60e714ac33011a41288a2cde935ac4d53f9e3b4adb756d3999d87e8b313f524d1aacae8d7d1e0835170507747835cc0b7f70c7c9316e65117b4a145b98cd274bf6938dcc9637be18b6564b93d751e7b56607b8b091c9902ad8d1dde39142b346a2161e49bcc7baa3ab0da404aac23077c4188e45a2fe289135d3563eff6890fe90d74bc3ded91008bb0655804da4daf1551be97fa02eae072a089f52003e2762fb70dc36bd6c1c6b44add042a4131d5bb27a2ab597c3bb4b92987baa01eeb8e9ca4bc64f20bfdd22566d8eb9f13be075e3cf1f237c61fdd14ef0bd38840620971009261501cd83c48b957955962c96d41eb5367ed3b65e797d11bf5df069089834946a9f1bd7a1181ca39acf73e5d1421a27f33cedd52ff378f8564530bbbdfe37c2847b097147d70396283c749364b38b78b0fd57215de1e9093c0172be01e02e40c75a50754f8e2f0416073f68011b63a4ca77dea9213a3d10ce2763ef712bd8315f06443bde356bcb39fa0c1f231e2098ada14b9efff4de037079ccee3a080932446932aca54cbc869e4ef0c8c14a0dbd4e3817b92d4edfd71cd691916d2d4bf9674627eac0baf2c8e9a37966ab79cfbee115a56d00bb16ed5a8f628f74cf8227e4a2d43e6e324347ea6aaadc680419b74a6fe1bea6a0c6858a5a8fe5e8401a65b9c96f18f934e98e4699786d44492ffdbeda9ed9090928c4358058079163d90c362417033a6c03dea0c9c98f830f34fa84c81bec79912e6ba9cc562cd99d5d7e7f8405c13f12d78f19cc585a9d900163d1c6fb049bbd11666cc94c38ff751c19c51f397f46ec41279e4ae70069509c2cd165059df2bb01e332e34391c262027851fd79f9ea49c569ef618128c4b0c9137b3b7cb275780dea576b395e6d3ecacf262ac053d316f9e577e8ae99fab979d1fb75d897be2196d1e2361c1714b7dd9a8ae570d5d1e4a42a6bf4277847d43403a9f90fb714988bd0ab7be62dad4d90ed079ddd5f11abc9baf20452930739e7116d86a1fdd0a3059985e9d33adbf9db647b2948f1c662a61b06d7fe6ad73d5b04e459f81d20233c88e147d79fd03fb90b337c47ba454db6f906d994756344de04c2cde7d34ecc047e88a2b882794e5bfb49a488f90ecffebc249a0836a2bd6c7da1fce602938d0395c79dd379f1ae992879d3947ec927538abb03f5e30d1d2a539898d597f9c3fe00858fb4f0989de406cbed3da7b50e5f9bb2a5c914d4dd89f6b43fd2a8ed62421baf201d3f26fb724e8f85acc48a780e3526cbfe9e12f8b67bcc7d4b1d34bc1f36e7eaa7b07928f9402b4bea2826ee26add8229e1d33775ca812698e91100ff57352cfe399a31f05930aee34eeed8064c5cbb79a0a", 0x433}, {0x0}], 0x5) sysctl$hw(&(0x7f0000000000)={0x6, 0x19}, 0x3e43, 0x0, 0x0, &(0x7f0000000040)="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", 0x15f) 292.111642ms ago: executing program 5 (id=331): syz_emit_ethernet(0x36, &(0x7f0000000840)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x3d, 0x28, 0x67, 0x0, 0x0, 0x6, 0x0, @multicast1, @local={0xac, 0x14, 0x0}}, @tcp={{0x3, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x1, 0x0, 0xfffc}}}}}}) syz_emit_ethernet(0x3b, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff080045f4002d0067000007069078e0000001ac1400aa4e234e23", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="54f58dc4000000000000"]) syz_extract_tcp_res(&(0x7f0000000040)={0x41424344}, 0x1, 0x1) syz_extract_tcp_res(&(0x7f0000000080)={0x41424344, 0x41424344}, 0x8, 0x8) syz_emit_ethernet(0x3d7, &(0x7f0000000380)={@remote, @broadcast, [{[], {0x8100, 0x2, 0x1, 0x1}}], {@ipv6={0x86dd, {0x8, 0x6, "69e940", 0x39d, 0x29, 0x30, @local={0xfe, 0x80, '\x00', 0x0}, @loopback, {[@hopopts={0x3, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0xffffffff}, @enc_lim={0x4, 0x1, 0x9}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x1, [0x0]}]}, @hopopts={0x16, 0xe, '\x00', [@generic={0x8, 0x6f, "8ce316a99ea4833f3882f0bae6014aebdf8fa6e6f05daa5d5380abe56374d05a817aa1e35322bdcc066f9bcfe9802944ede587b0c34bd1692da561948b9718b5f625729a4f9a7f1abe135c07fc84a0b08a9a632a07e84f39d8625407753afb83c341cf577a0aacb311b8feb3fcc5b6"}, @ra={0x5, 0x2, 0x7}]}, @dstopts={0x4, 0xe, '\x00', [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @ra, @generic={0xc, 0x5a, "eb25624f7524e0ae3a7f8642667abb1c22cffafeaf680cda495f1e14e3188d8fb456b254f505329a0573df4b2301037bbf22302ed4612a4c3ec568f86d0f23d0000067abaf4d84a4be67e8f28ee6b55bcb7cb255d925b540a808"}, @jumbo={0xc2, 0x4, 0x6}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}, @hopopts={0x16, 0x31, '\x00', [@enc_lim={0x4, 0x1, 0x9}, @generic={0x5, 0xe7, "4eebafed6f787f2233e0c782de356072ced2370dcfac499bc9d064177fc3ff27bc6762ce11626da9fcffd56977853bfa82254a0ea19f1f02e620854dfbbbf969865473ca986622edd13bd75c202ef6720b93a42ca8d96e9e6073e8df51f872273e657d4a499a8cb49959fff4a3c9b98b200d90b180a4fb84c11ba5c259d8ac74c6492f0fcf25431d29f606161410a2e5395398d33005ffa257b2b3a9bdb16dd12a9d7d63198747786ead0f365a711b7b4a9dbacd2fe87086e7b6562f90062167d61fa86879715de63b9c15594611020cb9543e6767709f82bf797e9070ec5a562d0869b4451fd9"}, @jumbo={0xc2, 0x4, 0x6}, @padn={0x1, 0x1, [0x0]}, @pad1, @pad1, @generic={0xfe, 0x8a, "3545805ea5001d9259b653c0ca47a3baf8d6feb43294287ed36cbdf910451de9e43b434cd185b00a3b204d23bae106fd0122918b2ec93f26732c6b50aeba2cf0227c56f03964e4076334b4fe75332674c08bf838f01573957d5d9be78efba3f58b3efc8fbada89b43149afe712f18e1b5aea293dd701cd2455daf5a6ed0c607ebd73c5fe4b342c0460b3"}, @jumbo, @pad1]}, @routing={0x8, 0x10, 0x0, 0x6, 0x0, [@empty, @local={0xfe, 0x80, '\x00', 0x0}, @ipv4={'\x00', '\xff\xff', @broadcast}, @empty, @rand_addr="32524bc313fe5faf384a6e3b073555a4", @mcast1, @local={0xfe, 0x80, '\x00', 0x0}, @loopback]}], @tcp={{0x3, 0x1, r0, r1, 0x1, 0x0, 0x8, 0x8, 0xc, 0x0, 0x3, {[@timestamp={0x8, 0xa, 0x5, 0x303d}, @nop]}}, {"d203169079f592f3b512dde1e89a7663d89b2205390277c2cec363dc2904d3165de167443c642b0933151dea4ce6f29a562a6e712413dc096f3dd27ab3"}}}}}}}) openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) 102.842692ms ago: executing program 7 (id=332): execve(0x0, &(0x7f00000002c0)=[&(0x7f0000000100)='tap'], 0x0) r0 = socket(0x18, 0x3, 0x0) ioctl$FIONREAD(r0, 0x8028698c, &(0x7f0000000100)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) ioctl$TIOCSETA(0xffffffffffffffff, 0xc0084463, &(0x7f00000000c0)={0x8, 0xffeffffc, 0x7fff, 0x4, "c9f7550000000bca9853a4956b47c0d100", 0x7, 0x200}) getsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sysctl$kern(&(0x7f00000000c0)={0x1, 0x37}, 0x4, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000140)=0x2c, 0x0, 0x2e) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) setuid(0xffffffffffffffff) r2 = syz_open_pts() fcntl$getown(r2, 0x5) r3 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x200, 0x186) mknod(&(0x7f0000000300)='./bus\x00', 0x40, 0xd02) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) ioctl$BIOCSETIF(r4, 0x80086476, &(0x7f0000000400)={'tap', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r5, 0xffff, 0x1022, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) setresgid(0x0, r6, 0x0) closefrom(r1) connect$unix(r0, &(0x7f0000000200)=@abs={0xff, 0x1, 0x0, 0x1}, 0x8) setregid(r6, r6) ktrace(&(0x7f0000000340)='./file0/file0\x00', 0x4, 0xd27d43260c7df99, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x10, r3, 0x0) futimens(r3, &(0x7f0000000000)=[{0x3, 0x8}, {0x6, 0x2}]) ioctl$FIONREAD(0xffffffffffffff9c, 0x4004667f, &(0x7f0000000080)) r7 = openat$pf(0xffffffffffffff9c, &(0x7f00000001c0), 0x80, 0x0) ioctl$DIOCRDELTABLES(r7, 0xc450443e, &(0x7f0000001140)={{'./bus\x00', './bus\x00', 0x9, 0x5}, &(0x7f00000004c0)=[{'./file0\x00', './file0/file0\x00', 0x38, 0xdf}, {'./file0\x00', './bus\x00', 0x30}, {'./file0\x00', './bus\x00', 0x10, 0x9}], 0x4, 0x3, 0x6f5, 0x7, 0xffffff81, 0x9, 0x10, 0x9}) r8 = socket$inet(0x2, 0x1, 0x0) getsockopt(r8, 0x0, 0x23, 0xffffffffffffffff, &(0x7f0000000040)) 102.380004ms ago: executing program 0 (id=333): r0 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) write(r0, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) r1 = syz_open_pts() r2 = shmget$private(0x0, 0x4000, 0x520, &(0x7f0000038000/0x4000)=nil) setgid(0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockopt$sock_cred(r3, 0xffff, 0x1022, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0xc) shmctl$IPC_SET(r2, 0x1, &(0x7f0000000400)={{r5, r6, r5, 0x0, 0xb5, 0xd, 0x0, 0x0, 0x200000000000c5}, 0x9, r4, r4, 0x8000, 0x0, 0xc1, 0x7fffffff, 0x100000000000019, 0xfffffffffffffffe, 0x7f, 0x8}) setuid(0xffffffffffffffff) shmat(0x0, &(0x7f0000277000/0x4000)=nil, 0x5000) r7 = socket(0x18, 0x2, 0x0) r8 = socket(0x11, 0x3, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) unveil(&(0x7f0000000000)='./file0\x00', &(0x7f0000000480)='x\x00') access(&(0x7f00000000c0)='./file0/../file0/../file0\x00', 0x0) setsockopt$sock_int(r3, 0xffff, 0x2000, &(0x7f0000000000)=0x7ffd, 0x3) sendto$unix(r8, &(0x7f0000000200)="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", 0x1b1, 0x0, 0x0, 0xfffffffffffffd99) closefrom(r7) shmat(r2, &(0x7f0000ffd000/0x2000)=nil, 0x1000) ioctl$TIOCSETD(r1, 0x8004741b, &(0x7f0000000040)=0x9) r9 = syz_open_pts() ioctl$TIOCSETD(r9, 0x8004741b, &(0x7f0000000080)=0x9) r10 = syz_open_pts() geteuid() setsid() r11 = syz_open_pts() ioctl$TIOCSCTTY(r11, 0x20007461) ioctl$TIOCSCTTY(r10, 0x20007461) ioctl$TIOCSETD(r9, 0x8004741b, &(0x7f0000000040)) kqueue() 100.551409ms ago: executing program 5 (id=334): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r1 = kqueue() r2 = socket(0x2, 0x8002, 0x0) r3 = fcntl$dupfd(r2, 0x2, 0xffffffffffffffff) closefrom(r3) kevent(r1, 0x0, 0x9, 0x0, 0x3, 0x0) ioctl$DIOCGETSTATES(r0, 0xc0104419, &(0x7f0000000380)={0x3, &(0x7f0000000040)=[{0x0, ""/16, [{[@v6=@mcast1, @v4=@multicast1]}, {[@v6=@mcast1, @v4=@multicast2]}], {}, {}, @v4=@local}, {0x0, ""/16, [{[@v6=@mcast1, @v6]}, {[@v4=@remote, @v4=@multicast1]}], {}, {}, @v4=@remote}, {0x0, ""/16, [{[@v4=@rand_addr, @v6=@empty]}, {[@v4=@multicast2, @v4=@multicast2]}], {}, {}, @v6=@mcast2}]}) mknod(&(0x7f0000000100)='./file0\x00', 0x2000, 0x1e5f) r4 = open(&(0x7f0000000040)='./file0\x00', 0x80, 0x95) ioctl$BIOCSETWF(r4, 0x80044403, &(0x7f0000000000)={0xff7b, 0x0}) sysctl$kern(&(0x7f0000000b40)={0x1, 0x58}, 0x2, 0x0, 0x0, &(0x7f0000000cc0), 0x0) 99.738925ms ago: executing program 5 (id=335): mknod(&(0x7f0000000280)='./file0\x00', 0x8, 0x5d4c) mknod(&(0x7f0000000000)='./file1\x00', 0x2000, 0x285b9a) r0 = open(&(0x7f0000000080)='./file1\x00', 0x40, 0x132) ioctl$FIONBIO(r0, 0xc0307004, &(0x7f0000000140)=0x1) mknodat(0xffffffffffffff9c, 0x0, 0x2000, 0x801) r1 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$VNDIOCSET(r1, 0xc0384600, &(0x7f0000000180)={&(0x7f0000000140)='./file0\x00', 0x152, 0x0}) readv(0xffffffffffffffff, &(0x7f0000001740), 0x0) open(0x0, 0x80, 0x83) 1.200295ms ago: executing program 7 (id=336): r0 = open(&(0x7f0000000380)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7949) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000140)="23210a4fe020", 0x6}], 0x1) execve(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7fb, 0x9, 0x3, 0x8fe, 0x4, 0x5, 0x3, 0x10, [{0xfffff000, 0x2, 0x6, 0x71800}, {0x3, 0x2000b7fe, 0x6, 0x40020000}, {0x401, 0x8c8, 0x8b, 0x2}, {0x2, 0x80ff, 0x1fe, 0x5}, {0x10000, 0xffffffff, 0x5, 0x7}, {0x5, 0x83, 0x14000009, 0xf}, {0x5, 0xbffffff9, 0x1, 0x6d}, {0x2400a, 0x3, 0xfdf0, 0x4}, {0x1, 0x80006, 0x3, 0x9}, {0x401, 0x0, 0x7ffe, 0x17}, {0x404, 0xfff9, 0x48a, 0x13}, {0xce, 0x7584, 0x8, 0x8}, {0x2000df, 0x2b, 0x5, 0x3ff}, {0x2, 0xfffffffc, 0xfffffff5, 0x3}, {0x6, 0x5, 0x26, 0x40000003}, {0xfffffffd, 0xd654, 0xffffffff, 0x6}]}) openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x20, 0x0) r1 = open(&(0x7f0000000140)='./file0\x00', 0x78e, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$DIOCRGETADDRS(r1, 0xc4504446, &(0x7f0000000580)={{'./file0\x00', './file0\x00', 0x20, 0xdb}, &(0x7f00000003c0)=[{@multicast1, '\x00', './file0\x00', 0x8, 0xfffd, 0x0, 0xfc, 0x9, 0xff, 0xc7}, {@loopback, '\x00', './file0\x00', 0x2, 0x3, 0x0, 0x10, 0x9, 0x1, 0x40}, {@multicast1, '\x00', './file0\x00', 0x7, 0xfffb, 0x2, 0xb, 0x3, 0x9, 0x3}, {@remote={0xac, 0x14, 0x0}, '\x00', './file1\x00', 0x7101, 0x2, 0x19, 0x90, 0x80, 0x6, 0x7}, {@rand_addr=0x101, '\x00', './file0/file0\x00', 0x1000, 0x3, 0x0, 0x1, 0x40, 0xe, 0x9}], 0x2, 0x5, 0xfc, 0x6, 0x4, 0x230a07d9, 0x1e, 0xfb}) fcntl$lock(r2, 0x8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x100000401}) mkdir(&(0x7f0000000240)='./file1\x00', 0xc) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x10, 0x88) fcntl$lock(r3, 0x9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x269000000, 0xffffffffffffffff}) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r4 = socket(0x18, 0x3, 0x58) close(r4) ioctl$FIONREAD(r4, 0x8020699f, &(0x7f00000001c0)) ioctl$TIOCSETA(0xffffffffffffffff, 0xcd604407, &(0x7f0000000040)={0x3, 0x0, 0xfffffffe, 0x5, "210d000000020000000000000000004021800600", 0x2000000, 0x5}) syz_emit_ethernet(0x46, &(0x7f0000000040)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa0800455c00380066000000019078e0000002e0006988"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_emit_ethernet(0x46, &(0x7f0000000040)={@local, @remote, [], {@ipv6={0x86dd, {0x9, 0x6, "df34b3", 0x10, 0x3a, 0x40, @ipv4={'\x00', '\xff\xff', @remote={0xac, 0x14, 0x0}}, @remote={0xfe, 0x80, '\x00', 0x0}, {[@routing={0x6, 0x0, 0x0, 0x1}], @udp={{0x3, 0x2, 0x8}}}}}}}) r5 = openat$pf(0xffffffffffffff9c, &(0x7f00000035c0), 0x20, 0x0) ioctl$DIOCRDELTABLES(r5, 0xc450443e, &(0x7f00000046c0)={{'./file0\x00', './file0\x00', 0xe0, 0x2}, 0x0, 0x428, 0x0, 0xa01, 0x8000, 0x3, 0x2, 0x2, 0x200}) mknod(&(0x7f0000000000)='./file0\x00', 0x80, 0x1) sysctl$kern(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)="55f8f5782087a072a82ec35f78d14780f518", 0x12) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r6 = socket(0x18, 0x3, 0x85) ioctl$FIONREAD(r6, 0xc1206949, &(0x7f00000001c0)) truncate(&(0x7f0000000080)='./file0\x00', 0x4f926230) 823.674µs ago: executing program 6 (id=337): r0 = shmget$private(0x0, 0x2000, 0x88, &(0x7f0000001000/0x2000)=nil) socket(0x18, 0xc003, 0x3a) pipe(&(0x7f0000000000)) r1 = socket(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000280)={0x10, 0x2, 0x1, 0x200000e3}, 0x10) setsockopt$sock_int(r1, 0xffff, 0x1023, &(0x7f0000000040)=0x6, 0x4d) r2 = shmat(r0, &(0x7f0000001000/0x3000)=nil, 0x3000) shmctl$SHM_UNLOCK(r0, 0x4) shmdt(r2) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000000)=""/25) 270.059µs ago: executing program 5 (id=338): r0 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) pwritev(r0, &(0x7f00000002c0)=[{&(0x7f00000000c0)="c34b18f458d372e3023006e8507dae5d3e7e7e96468892a8a5df4236f0682101cae01c83a456ef654633e62903f07efc8b46", 0x32}], 0x1, 0x8) writev(r0, &(0x7f00000017c0)=[{&(0x7f0000000080)="8198c02754eea00f00e69ed56d78b328f1b5290de566ec86870b3fb70000a3a0a7227c4f4c", 0x25}], 0x1) (async) execve(0x0, 0x0, 0x0) (async) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f0000000080)={0x10, 0x3, [{&(0x7f00007ab000/0x3000)=nil, &(0x7f0000ec8000/0x3000)=nil, 0x2}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x100000001}, {&(0x7f0000a1c000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x8}, {&(0x7f0000a6b000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x3}, {&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x100000000}, {&(0x7f0000800000/0x800000)=nil, &(0x7f0000ccd000/0x1000)=nil}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000843000/0x1000)=nil, 0x3}, {&(0x7f000046c000/0x2000)=nil, &(0x7f0000efd000/0x1000)=nil, 0xfffe}, {&(0x7f0000a98000/0x4000)=nil, &(0x7f0000a3d000/0xd000)=nil}, {&(0x7f0000d3d000/0x4000)=nil, &(0x7f0000aff000/0x1000)=nil, 0xe}, {&(0x7f0000f6a000/0x2000)=nil, &(0x7f0000887000/0x4000)=nil}, {&(0x7f0000795000/0x1000)=nil, &(0x7f0000ff2000/0x1000)=nil}, {&(0x7f0000e0f000/0x2000)=nil, &(0x7f0000800000/0x800000)=nil, 0x3c}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x2}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f00003b5000/0x2000)=nil, 0xfefffffffffffffc}, {&(0x7f00000c6000/0x4000)=nil, &(0x7f0000c5e000/0x4000)=nil}], './file0\x00', 0x81, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x740752d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a6ae340, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f5]}) r1 = socket(0x2, 0x2, 0x0) (async) r2 = open(&(0x7f0000000000)='./file0\x00', 0x20, 0x0) (async) openat$diskmap(0xffffffffffffff9c, 0x0, 0x8000, 0x0) (async) syz_emit_ethernet(0x32, &(0x7f0000000080)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x2, 0x0, @multicast2, @rand_addr, {[@ra={0x94, 0x4, 0x6}]}}, @icmp=@mask_request={0x11, 0x0, 0x0, 0x200}}}}}) (async) fstat(0xffffffffffffffff, 0x0) (async) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) (async) r3 = socket$inet(0x2, 0x1, 0x6) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(r2, 0xc01864c1, &(0x7f0000000040)={0x0, 0x2, 0xffffffffffffffff, 0x0, 0x7}) (async) ioctl$FIONREAD(r3, 0x80206979, &(0x7f0000000100)) (async) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) (async) ioctl$FIONREAD(r1, 0xc0206923, &(0x7f00000001c0)) (async) r4 = socket(0x2, 0x1, 0x0) getsockopt(0xffffffffffffffff, 0x29, 0x2b, 0x0, 0x0) (async) ioctl$FIONREAD(r4, 0x8040691a, &(0x7f00000001c0)) 0s ago: executing program 0 (id=339): r0 = socket$unix(0x1, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2000, 0x8) open(&(0x7f0000000140)='./file0\x00', 0x10686, 0x27) sendmsg$unix(r0, &(0x7f0000000280)={&(0x7f0000000000)=@file={0xff, 0x1, './file0\x00'}, 0xa, 0x0, 0x0, 0x0, 0x0, 0x408}, 0xc) munmap(&(0x7f0000ff0000/0xf000)=nil, 0xf000) munlock(&(0x7f0000ff2000/0x3000)=nil, 0x3000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.106' (ED25519) to the list of known hosts. OpenBSD/amd64 (ci-openbsd-multicore-5.us-central1-b.c.syzkaller.internal) (tty00) Connection to 10.128.1.106 closed by remote host. login: init: getty repeating too quickly on port /dev/tty00, sleeping $%.)%$ !44%-04 4/ 3%4 #,/#+ &/27!2$ 4/ 13622315181289262 +42!#% 72)4% &!),%$, %22./ 27, 42!#).' 34/00%$ 0008: 5.!",% 4/ 3%4 !$$2%33%3 &/2 00081, %22/2=17 pckbd_enable: command error wskbd0: can't attach mux (error=5) pckbd_enable: command error c8 ]^y$0~jCQ0DblшbxGCI'l  M%# HsLJD)/aaQ}yj Z%5 c m.7#a?G!QX^[[" E9˟6'E '@-6R(c9a@jPa%a>^Nʤ>ش6F"79;WcDwבm+ #+QX,wSS>CSYL]Ipe/a l^|СO1dWj!v),A*v9bՠliLo<'$`>掫NM|lr-hKUMU.*R>'bp6lkDB[z*ûK{KO "Vm;u#|aN8  &̓ċyU,6~Ӷ^y}]i4jסsB'n2CGjhJoᾦƅZ@eo4FxmDI/ڞ (5Xc 6$:lޠɏ4y.kV,ٝ]~?׏XZcflL8u9FA'JiP,e2CbxQyIia(İ{;|ux Wk9^m>&*Sw讙yuؗ!6ݚp*k'xG4Ы{-M_ɺR9mУ:d{)Hbj=[Y #so_snd.sb_lock) 2nd 0xfffffa006e2e1548 inode (&ip->i_lock) lock order [1] sbufsnd (&so->so_snd.sb_lock) -> [2] inode (&ip->i_lock) lock order data 0xffffffff83525b48 -> 0xffffffff834944ad is missing lock order [2] inode (&ip->i_lock) -> [3] sbufrcv (&so->so_rcv.sb_lock) #0 rw_do_enter_write+0xba #1 sblock+0xb6 #2 soreceive+0x27d #3 fifo_read+0x117 #4 VOP_READ+0x101 #5 vn_rdwr+0x15b #6 vndsetcred+0xa1 #7 vndioctl+0xdfc #8 VOP_IOCTL+0xac #9 vn_ioctl+0xf8 #10 sys_ioctl+0x674 #11 syscall+0xbd4 #12 Xsyscall+0x128 lock order [3] sbufrcv (&so->so_rcv.sb_lock) -> [1] sbufsnd (&so->so_snd.sb_lock) #0 rw_do_enter_write+0xba #1 sblock+0xb6 #2 sosplice+0x32b #3 sys_setsockopt+0x2ba #4 syscall+0xbd4 #5 Xsyscall+0x128 Stopped at db_enter+0x25: addq $0x8,%rsp ddb{1}> ddb{1}> set $lines = 0 ddb{1}> set $maxwidth = 0 ddb{1}> show panic the kernel did not panic ddb{1}> show kasan No such command ddb{1}> trace db_enter() at db_enter+0x25 witness_checkorder(fffffa006e2e1548,9,0) at witness_checkorder+0x10d1 rw_do_enter_write(fffffa006e2e1530,1) at rw_do_enter_write+0xba rrw_enter(fffffa006e2e1530,1) at rrw_enter+0xc6 VOP_LOCK(fffffa005eb7d398,2001) at VOP_LOCK+0xbd vn_lock(fffffa005eb7d398,2001) at vn_lock+0xa4 vfs_lookup(ffff80003a3a38f0) at vfs_lookup+0x12b namei(ffff80003a3a38f0) at namei+0x7c5 unp_connect(ffff800010fe0eb8,fffffa006d8e3d00,ffff800038b9c028) at unp_connect+0x29d uipc_dgram_send(ffff800010fe0eb8,fffffa006ce3c200,fffffa006d8e3d00,0) at uipc_dgram_send+0x163 sosend(ffff800010fe0eb8,fffffa006d8e3d00,ffff80003a3a3b78,0,0,c) at sosend+0x804 sendit(ffff800038b9c028,3,ffff80003a3a3cf8,c,ffff80003a3a3db0) at sendit+0x5a5 sys_sendmsg(ffff800038b9c028,ffff80003a3a3e60,ffff80003a3a3db0) at sys_sendmsg+0x246 syscall(ffff80003a3a3e60) at syscall+0xbd4 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xfc1f7272620, count: -15 ddb{1}> show registers rdi 0 rsi 0x80000 acpi_pdirpa+0x6be71 rbp 0xffff80003a3a3560 rbx 0 rdx 0xffff8000015d89c0 rcx 0xffff800038b9c028 rax 0x7ffff acpi_pdirpa+0x6be70 r8 0xffff80003a3a3440 r9 0x8080808080808080 r10 0x8a6586ae48c8d88a r11 0xe5c579ad9b5f10c8 r12 0xfffffa00040d0980 r13 0xfffffa00048b7d78 r14 0x3 r15 0xffffffff8352d5eb substchar+0xfcaf rip 0xffffffff8202e225 db_enter+0x25 cs 0x8 rflags 0x246 rsp 0xffff80003a3a3550 ss 0x10 db_enter+0x25: addq $0x8,%rsp ddb{1}> show proc PROC (syz-executor) tid=40107 pid=66416 tcnt=2 stat=onproc flags process=0 proc=4000000 runpri=32, usrpri=77, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff800045ffd9f8,0xffff800038b9da28 process=0xffff80003a3a61d0 user=0xffff80003a39e000, vmspace=0xfffffa006c1d17c0 estcpu=36, cpticks=1, pctcpu=0.0, user=0, sys=1, intr=0 ddb{1}> ps PID TID PPID UID S PRLAGS PFLAGS WAIT COMMAND 84964 343413 30469 0 2 0 0 syz-executor 84964 452970 30469 0 3 0 0x4000080 fsleep syz-executor 66416 457500 66971 0 7 0 0 syz-executor *66416 40107 66971 0 7 0 0x4000000 syz-executor 86120 424022 59267 0 2 0 0 syz-executor 86120 43730 59267 0 3 0 0x4000080 rest syz-executor 76833 207511 61733 0 3 0 0x80 nanoslp syz-executor 76833 18240 61733 0 3 0 0x4000080 netcon syz-executor 76833 258528 61733 0 3 0 0x4000080 fsleep syz-executor 15477 54654 0 0 3 0x14000 0x280 nfsidl nfsio 24759 275877 0 0 3 0x14000 0x280 nfsidl nfsio 56335 523053 0 0 3 0x14000 0x280 nfsidl nfsio 83177 242298 0 0 3 0x14000 0x280 nfsidl nfsio 96921 285225 0 0 3 0x14000 0x280 nfsidl nfsio 66249 231786 0 0 3 0x14000 0x280 nfsidl nfsio 63110 482010 0 0 3 0x14000 0x280 nfsidl nfsio 59534 387588 0 0 3 0x14000 0x280 nfsidl nfsio 77980 291559 0 0 3 0x14000 0x280 nfsidl nfsio 17855 474923 0 0 3 0x14000 0x280 nfsidl nfsio 88822 26055 0 0 3 0x14000 0x280 nfsidl nfsio 67631 320957 0 0 3 0x14000 0x280 nfsidl nfsio 41822 480902 0 0 3 0x14000 0x280 nfsidl nfsio 17562 18087 0 0 3 0x14000 0x280 nfsidl nfsio 29848 449467 0 0 3 0x14000 0x280 nfsidl nfsio 17400 1465 0 0 3 0x14000 0x280 nfsidl nfsio 54147 152281 0 0 3 0x14000 0x280 nfsidl nfsio 26548 413594 0 0 3 0x14000 0x280 nfsidl nfsio 17263 82325 0 0 3 0x14000 0x280 nfsidl nfsio 75500 478133 0 0 3 0x14000 0x280 nfsidl nfsio 28413 277958 76215 0 3 0x10 0x80 nanoslp syz-executor 28413 45705 76215 0 3 0x10 0x4000080 kqread syz-executor 28413 221805 76215 0 3 0x10 0x4000080 kqread syz-executor 28413 122398 76215 0 3 0x10 0x4000080 kqsel syz-executor 28413 184670 76215 0 3 0x10 0x4000080 fsleep syz-executor 50965 398174 63732 0 3 0 0x80 nanoslp syz-executor 50965 486470 63732 0 3 0 0x4000080 msgwait syz-executor 50965 467258 63732 0 3 0 0x4000080 fsleep syz-executor 59411 223010 24466 0 4 0x40000010 0x8000000 syz-executor 59411 467913 24466 0 4 0x40000010 0xc000000 syz-executor 61307 205630 1 0 3 0 0x80 nanoslp init 2508 71492 46383 0 3 0x100002 0x80 sbwait arp 46383 131493 18656 0 3 0x100002 0x88 sigsusp sh 30469 356820 72522 0 3 0x2 0x80 nanoslp syz-executor 61733 215119 72522 0 3 0x2 0x80 nanoslp syz-executor 59267 182453 72522 0 3 0x2 0x80 nanoslp syz-executor 24466 407325 72522 0 3 0x2 0x80 nanoslp syz-executor 63732 278866 72522 0 3 0x2 0x80 nanoslp syz-executor 76215 29109 72522 0 3 0x2 0x80 nanoslp syz-executor 18656 17741 72522 0 3 0x2 0x80 wait syz-executor 66971 367554 72522 0 3 0x2 0x80 nanoslp syz-executor 72522 106758 1 0 3 0x2 0x80 kqread syz-executor 22276 206199 0 0 3 0x14000 0x200 bored smr 96686 380645 0 0 3 0x14000 0x200 pgzero zerothread 28070 406944 0 0 3 0x14000 0x200 aiodoned aiodoned 92624 369151 0 0 3 0x14000 0x200 syncer update 33996 514397 0 0 3 0x14000 0x200 cleaner cleaner 74761 504393 0 0 3 0x14000 0x200 reaper reaper 37587 439337 0 0 3 0x14000 0x200 pgdaemon pagedaemon 27681 293160 0 0 3 0x14000 0x200 bored viomb 77786 312013 0 0 3 0x14000 0x40000200 acpi0 acpi0 42252 359328 0 0 3 0x14000 0x40000200 idle1 36106 348104 0 0 3 0x14000 0x200 bored softnet1 62919 102259 0 0 2 0x14000 0x200 softnet0 28693 95813 0 0 3 0x14000 0x200 bored systqmp 50886 84381 0 0 3 0x14000 0x200 bored systq 76924 249273 0 0 3 0x14000 0x200 tmoslp softclockmp 69870 33714 0 0 3 0x14000 0x40000200 tmoslp softclock 10443 47372 0 0 3 0x14000 0x40000200 idle0 1 11934 0 0 4 0x40000002 0x8000080 init 0 0 -1 0 3 0x10010000 0x200 scheduler swapper ddb{1}>