last executing test programs: 10.171707645s ago: executing program 3 (id=81): mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x2012, r0, 0x0) r1 = openat$pf(0xffffffffffffff9c, 0x0, 0x10000, 0x0) getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f00000000c0)=0xc) fstatat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0xc) getsockopt$sock_int(0xffffffffffffffff, 0xffff, 0x8, 0x0, 0x0) r7 = openat$pf(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x44, 0x6}, 0x80000000, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x1, 0x200023}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) getsockopt$sock_int(r8, 0xffff, 0x100, &(0x7f0000002c40), &(0x7f0000000000)=0x4) ioctl$TIOCSETA(r7, 0xc1084425, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x3, "210d0000000200000006000000000200007fffff", 0x7effdffe}) r9 = syz_open_pts() fcntl$dupfd(r9, 0xb, 0xffffffffffffffff) sysctl$net_inet_ip(&(0x7f0000000000)={0x4, 0x2, 0x0, 0x1b}, 0x4, 0x0, 0x0, &(0x7f0000001640)="b2b5f856", 0x4) r10 = shmget(0x3, 0xf000, 0xb18, &(0x7f0000717000/0xf000)=nil) getgroups(0x3, &(0x7f0000000040)=[r4, r6, r6]) fchown(r1, r3, r11) fstatat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2) r14 = open(&(0x7f0000000000)='./file0\x00', 0x80, 0x0) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000780)={{0x0, 0x0, 0x0, 0x0, 0x8f, 0x1a04, 0x0, 0x0, 0x6}, 0x0, 0x6, 0x0, 0x0, 0x6, 0x0, 0x8}) getgroups(0x2, &(0x7f0000000380)=[r12, 0x0]) read(r14, &(0x7f00000001c0)=""/24, 0x18) ioctl$VT_SETMODE(r14, 0x80087602, &(0x7f0000000340)={0x1, 0x3, 0x8, 0x1, 0x1}) shmctl$IPC_SET(r10, 0x1, &(0x7f00000002c0)={{r5, r12, r3, r13, 0x10, 0xcbd2, 0x0, 0x0, 0x7}, 0x1, r2, r2, 0x7fff, 0x0, 0x9, 0x100000001, 0xb8b3, 0x9, 0x21f6}) 10.169639368s ago: executing program 3 (id=83): r0 = syz_open_pts() writev(r0, &(0x7f0000000040)=[{&(0x7f0000000380)="079facfaaed69aea4dc561c3b736feac0a2a76087be8b904ddc6f90b66e0f69b6dfba683b348224cf0ccc2a39b0f79389a2bd9b211424a22ca014b9231e253e257706c75b3f320166475c72455021edf575fab8b5d65b8d261c87c3ccc4e784ea7462f3723edabb8e26d27acb1797e2ef4db27270a", 0xffffff01}], 0x1) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="cb24", 0x2}], 0x1) r1 = syz_open_pts() fstat(r1, &(0x7f0000000100)) syz_open_pts() (async) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000380)="079facfaaed69aea4dc561c3b736feac0a2a76087be8b904ddc6f90b66e0f69b6dfba683b348224cf0ccc2a39b0f79389a2bd9b211424a22ca014b9231e253e257706c75b3f320166475c72455021edf575fab8b5d65b8d261c87c3ccc4e784ea7462f3723edabb8e26d27acb1797e2ef4db27270a", 0xffffff01}], 0x1) (async) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="cb24", 0x2}], 0x1) (async) syz_open_pts() (async) fstat(r1, &(0x7f0000000100)) (async) 4.537298017s ago: executing program 2 (id=151): sysctl$kern(&(0x7f00000001c0)={0x1, 0x3a}, 0x2, &(0x7f0000000200)="33b07d41b5194cea3f7fe001746ae79a86f4ee2d30f3f8965d46dc0ccef70cd5336055ce4586a2422981216284dd8895b2fedf228449e2e7", &(0x7f0000000240)=0x38, &(0x7f0000000280)="66c33e7c8ead064a40a7a99ecae06964c92e", 0x12) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) select(0x40, &(0x7f0000000040)={0x8, 0x5, 0x6, 0x8000000000000003, 0x83, 0x1000000000097, 0x4c}, 0x0, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0xc0) write(r1, &(0x7f00000002c0)="7c84cf17", 0x4) r2 = syz_open_pts() r3 = openat$tty(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TIOCMBIC(r3, 0x8004746b, &(0x7f0000000180)=0xffffff00) fcntl$lock(r2, 0x9, &(0x7f0000000000)={0x3, 0x0, 0x0, 0x1000300000080}) r4 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$DIOCRCLRTSTATS(r4, 0xc4504441, &(0x7f0000002640)={{'./file0\x00', './file0\x00', 0x40, 0x5}, 0x0, 0x44cadf62, 0x0, 0x6, 0x9, 0x1, 0x7, 0x10, 0x4}) flock(r2, 0x2) kevent(r0, &(0x7f0000000080), 0x2, &(0x7f0000000100)=[{{r1}, 0x8, 0x17, 0x80000000, 0x1, 0x10000}, {{r2}, 0xfffffffffffffffb, 0x99, 0x2, 0x3, 0xdd44beb}], 0xfffffffa, &(0x7f0000000080)={0x1, 0x4}) execve(0x0, 0x0, 0x0) 3.833208992s ago: executing program 6 (id=172): ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x9, 0xb, 0x4, 0x101, 0x4, 0x1001, 0x3, 0x10, [{0x5, 0xfe3, 0xffffff26, 0x71800}, {0x1, 0x10037fe, 0x800002, 0x7}, {0x100006, 0x0, 0x8, 0x3}, {0x2, 0x0, 0x200, 0xfffffffe}, {0x4, 0x3, 0x80000000, 0x7}, {0x5, 0x48000, 0x14000009, 0xc}, {0x8, 0xbffffff5, 0x20007, 0x6d}, {0x2000a, 0x7, 0xfdf0, 0x6}, {0x0, 0x40007, 0x8ceb}, {0xfffffc07, 0xffffffff, 0x401, 0x1}, {0xa44f, 0xfff9, 0xa38c000}, {0x4, 0x6, 0x8, 0x8}, {0x2000df, 0x9, 0x1, 0x4}, {0x10008, 0x20000e2, 0xfffffff5, 0xfffffff8}, {0x5, 0x40000005, 0x24, 0x51d}, {0x81, 0xd654, 0x0, 0x6}]}) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) r0 = socket(0x18, 0x1, 0x0) mknod(&(0x7f0000000100)='./bus\x00', 0x2000, 0xd02) getgroups(0x7, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0]) r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) r5 = socket$inet(0x2, 0x3, 0x0) setsockopt$inet_opts(r5, 0x0, 0x20, &(0x7f0000000240)="ea000001", 0x4) r6 = accept4(r0, &(0x7f00000004c0)=@in, &(0x7f0000000500)=0x10, 0x2000) r7 = setsid() r8 = getuid() getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000000540)={0x0}, &(0x7f0000000580)=0xc) getsockopt$SO_PEERCRED(r0, 0xffff, 0x1022, &(0x7f00000005c0)={0x0, 0x0}, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = syz_open_pts() ioctl$TIOCSCTTY(r12, 0x20007461) r13 = fcntl$getown(r12, 0x5) fcntl$setown(r11, 0x6, r13) fcntl$setown(r11, 0x6, r13) r14 = geteuid() socketpair(0x6, 0x4000, 0x1, &(0x7f0000000600)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000740)={&(0x7f0000000280)=@abs={0xdb, 0x0, 0x0, 0x3}, 0x8, &(0x7f00000003c0)=[{&(0x7f00000002c0)="e8e3e2c8cec238affda5b66d1783c5066cec5314fce3140f5712e71d9fd6071fe636a338e40a29dfaead10bb2d6cdd7633685b65077eebbec38b79c4b807cf59da8739a6e4f0a4c2083bd7c04b410d149a738da8a1dddbf9e260668eec83ed22f9ab61b66a42e34a9c3074354bd8f3b1fedd803fc573c0361ef8109272d6e5426887840736b593c126be32c9c64543b38cefe7779b7149cedc1f7027962e348a4328831fb1cae3a8a56df140fe0eb58b23953404a55064e70ec48b61e7a05845022411aa", 0xc4}], 0x1, &(0x7f0000000640)=[@cred={0x18}, @cred={0x18, 0xffff, 0x0, 0xffffffffffffffff, 0x0, r2}, @rights={0x24, 0xffff, 0x1, [r0, 0xffffffffffffffff, r0, r0, r5, r6]}, @rights={0x18, 0xffff, 0x1, [r4, r4, r4]}, @cred={0x18, 0xffff, 0x0, r7, r8, r3}, @rights={0x1c, 0xffff, 0x1, [r4, r0, r4, r4]}, @cred={0x18, 0xffff, 0x0, r9, r10, r3}, @cred={0x18, 0xffff, 0x0, r13, r14, r1}, @rights={0x18, 0xffff, 0x1, [r15, r4, 0xffffffffffffff9c]}], 0xe8, 0x400}, 0x4) ioctl$BIOCSETWF(r4, 0x80104277, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0xfff1, 0x9, 0x6, 0x59c3}]}) r16 = open(&(0x7f0000000240)='./bus\x00', 0x2, 0x111) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$VNDIOCSET(r16, 0xc0285108, &(0x7f0000000000)={0x0, 0xffffffffffffffba, 0x0}) ioctl$FIONREAD(r0, 0xc0106924, &(0x7f00000001c0)) ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file0\x00', 0x8, 0x20800c1, 0x12, 0x0, 0x1040807, 0x10050001, 0x103, 0x2, 0x1, 0x9, 0xf5ffeffffffffff9}) r17 = socket(0x18, 0x3, 0x0) ioctl$FIONREAD(r17, 0x8080691a, &(0x7f0000000100)) 3.832458804s ago: executing program 6 (id=173): ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x100000000000000, 0x1}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x18, 0x3, 0x0) setsockopt(r0, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) connect(r0, &(0x7f0000000080)=@in6={0x1c, 0x18, 0x3, 0x2, "e7c152abe701e9216acd72d58c40979c", 0x9}, 0x1c) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r2 = socket(0x2, 0x1, 0x0) setsockopt(r2, 0x6, 0x2, &(0x7f00000000c0), 0x0) ioctl$TIOCSETA(r1, 0xc4504448, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, "97a2224ff1c14649ebb178926cc9795a6b47c1d1"}) r3 = open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x186) connect$unix(r0, &(0x7f00000003c0)=@file={0x0, 0x1, './file0\x00'}, 0xa) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4, 0x2012, r3, 0x0) r4 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x4) ioctl$TIOCMBIC(r4, 0x8004746b, &(0x7f0000000080)=0x4) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000040)={0x0, 0x0}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r5 = socket(0x18, 0x2, 0x0) getsockopt$sock_int(r5, 0xffff, 0x20, 0x0, 0x0) ioctl$VMM_IOC_RUN(r4, 0xc0285602, &(0x7f0000000380)={0x8000, 0xdf3, {0x7, 0x9, 0xd}, 0xff, &(0x7f0000000100)={{0x9, 0x0, 0x3, 0x5, 0xf8, 0x8, 0x5, 0x44}, {[0x6, 0x0, 0x53a9, 0x40, 0x2, 0x6, 0x1, 0x5, 0xfffffffffffffffa, 0x6, 0x7, 0x2, 0x9, 0xffffffffffffffff, 0x7, 0x4, 0x1, 0x401], [0xfffffffffffff425, 0x1000, 0xd91, 0x6, 0x3, 0x1000, 0x4, 0x7, 0x8000000000000001, 0xbd7], [0xf, 0x1, 0x8, 0x9, 0xf, 0x6, 0x5], [0x6, 0x7, 0x6, 0x3, 0x4ec, 0x1], [{0x5, 0x5, 0x1, 0x8}, {0x800, 0x8, 0x3, 0x8}, {0x9, 0xd8a, 0x1, 0x4}, {0xffff, 0x9, 0x2, 0x80}, {0x8, 0xffff, 0x3, 0x10001}, {0x26, 0x8, 0x4, 0x7}, {0x5, 0x6, 0x0, 0x90}, {0x6, 0x4, 0x5, 0x5}], {0x8, 0x1, 0x2, 0x2}, {0x5, 0xfffffffc, 0x7, 0x280000000}}, 0x3}, 0x9, 0x6}) sysctl$kern(&(0x7f0000000000)={0x1, 0x9}, 0x2, 0x0, 0x0, &(0x7f0000001440)='\x00\x00\x00\x00', 0x4) 3.829599039s ago: executing program 6 (id=175): getsockname(0xffffffffffffffff, &(0x7f0000000000)=@un=@abs, &(0x7f0000000040)=0x8) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x153) utimensat(r0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={{0x2530, 0x5}, {0x7, 0x1}}, 0x2) (async) mquery(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x0, r0, 0x5) (async) renameat(r0, &(0x7f0000000140)='./file0\x00', r0, &(0x7f0000000180)='./file0\x00') (async) r1 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f00000001c0), 0x80, 0x0) ioctl$WSDISPLAYIO_ADDSCREEN(r1, 0x80245753, &(0x7f0000000200)={0xfffffffc, './file0\x00', './file1\x00'}) ioctl$FIONREAD(r0, 0x4004667f, &(0x7f0000000240)) (async) r2 = openat$pf(0xffffffffffffff9c, &(0x7f0000000280), 0x200a8, 0x0) ioctl$DIOCSETIFFLAG(r2, 0xc0284459, &(0x7f0000000300)={'./file1\x00', &(0x7f00000002c0)=""/55, 0x4, 0x1000, 0xe36, 0xfffffffe}) (async) ioctl$DIOCKILLSTATES(r2, 0x0, &(0x7f0000000340)={{0x0, 0x7f}, 0x1c, '\x00', 0x40, {@addrmask={@v6=@mcast2, @v6=@remote={0xfe, 0x80, '\x00', 0x0}, 0x0, 0x0, 0x9}, [0x8, 0x5], 0xf, 0x6, 0xe}, {@table={'./file1\x00', 0x0, 0x3, 0xe}, [0x1, 0x3], 0xe8, 0x5, 0x6}, './file1\x00', './file1\x00', 0xe0000000, 0x1}) (async) ioctl$FIONREAD(r0, 0x4004667f, &(0x7f0000000440)) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000480)={0x5, 0x9, r1}) close(r3) (async) setsockopt(r3, 0x3ff, 0x5, &(0x7f00000004c0)="718bfb9069ff7d969edcc2c82335d0f739cb4725855f3cce87424b67507efdbd9b6109a4a7b9dd2449a995fc23787b1599b116309ec0207b628b78605cdd069429c9bed2d00df0aad6926cccae8e2f71805a7d89dfd7bf9e4f337bd513fb1968fc004fbbd66bb1087505f061be9cc9abc5b59609cb312c058dc9eb865ce02928a708a680013cecda793d0a589d1cbc3338dbfbcd899db01fcbbfc4e613d9e3396b757de83d802170af6562e0d460405541cf15589c2ebcfdf7103b420eaf4f6c55c7f6edb66bc2a93dc476d775e1f65324ab29a180733fa0061a1b8e4957d6ba4df24d5d32ff54ea6b", 0xe9) (async) r4 = openat(r0, &(0x7f00000005c0)='./file1\x00', 0x80, 0x58) (async) close(r3) (async) r5 = semget$private(0x0, 0x2, 0x60) semop(r5, &(0x7f0000000600)=[{0x2, 0x0, 0x800}, {0x0, 0x3, 0x3000}, {0x2, 0xbdb, 0x800}, {0x2, 0xfffd, 0x1000}, {0x2, 0x7, 0x1800}, {0x4, 0x3, 0x1000}, {0x0, 0xd, 0x1000}, {0x4, 0xb1da}], 0x8) (async) fstatat(r0, &(0x7f0000000640)='./file1\x00', &(0x7f0000000680), 0x4) semop(r5, &(0x7f0000000700)=[{0x1, 0x6, 0x1000}, {0x2, 0xc, 0x1000}], 0x2) r6 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000740), 0x80, 0x0) ioctl$WSDISPLAYIO_LINEBYTES(r6, 0x4004575f, &(0x7f0000000780)) (async) open$dir(&(0x7f00000007c0)='./file0\x00', 0x5001b, 0x4c) mknod(&(0x7f0000000800)='./file1\x00', 0x69eab4e1352646fa, 0x45bfa0d9) (async) r7 = syz_open_pts() ioctl$TIOCNOTTY(r7, 0x20007471) (async) ioctl$TIOCGETA(r7, 0x402c7413, &(0x7f0000000840)) (async) ioctl$BIOCGETIF(r4, 0x4020426b, &(0x7f00000008c0)={""/16, @ifru_data=&(0x7f0000000880)="88e120c69124407c1cbe80aec864a5b84471cca968897401c6984d43db163213253fe869aa"}) ioctl$WSDISPLAYIO_LSFONT(r4, 0xc058574e, &(0x7f0000000900)={'./file1\x00', 0x4, 0x8, 0x80000001, 0x0, 0xff, 0x8, 0x7, 0x2, 0x1, 0x3c09, 0x8000000000000000}) 3.827861174s ago: executing program 6 (id=178): ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x3, &(0x7f00000001c0)=[{0x0, 0x4, 0x0, 0xc14}, {0x0, 0x7, 0x0, 0x1}, {0x6, 0x0, 0x45, 0x10000}]}) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1000, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x20000, 0x0) ioctl$FIONREAD(r0, 0x80206910, &(0x7f00000001c0)) r1 = socket(0x1, 0x1, 0x0) ioctl$FIONREAD(r1, 0x8020691f, &(0x7f00000001c0)) 3.826973911s ago: executing program 6 (id=180): socket(0x1, 0x2, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x2, 0x3, 0x80000001}, 0x10) r0 = socket(0x18, 0x2, 0x0) setsockopt(r0, 0x1000000000029, 0x9, &(0x7f0000000040)="03000000", 0x4) setsockopt(r0, 0x1000000029, 0xa, 0x0, 0x0) r1 = semget(0x0, 0x1, 0x281) semop(r1, &(0x7f0000000040)=[{0x0, 0xfff8, 0x1000}], 0x64) semctl$SETALL(r1, 0x0, 0x9, 0x0) r2 = kqueue() ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, &(0x7f00000019c0)={0x3, 0xfffff501, {[0xfffffffffffffffc, 0xa, 0x5, 0x10000, 0xffffffffffffffff, 0x80008000, 0x21a5d806, 0xe8b5, 0xffffffff, 0x2f01, 0x2, 0x3, 0xfffffffffffffffe, 0x8, 0x4, 0x2, 0xfffffffffffffff5, 0x100], [0x9, 0x5, 0xfffffffbfffffff8, 0x0, 0x87c3, 0x80000000, 0x800ee4, 0x0, 0xfffffffffffffffc, 0x800000047], [0x8, 0x2, 0x100000000000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe], [0x3, 0x1ffffffffff, 0x0, 0x100000002, 0xfffffffffefffffc, 0x189], [{0x0, 0xc, 0x4, 0x7d08}, {0x4, 0x2, 0x1, 0x3}, {0x7, 0xfffffffd, 0xfffffffe, 0xffc}, {0x80, 0x2, 0x3, 0xfffffffffffffffe}, {0x9, 0xb0, 0x11, 0x40}, {0x7ffe, 0x50000, 0x40003, 0x1}, {0x6, 0x1, 0x7, 0x9}, {0x9, 0x1095b, 0x200, 0xf}], {0x9b8f, 0x5, 0x20000, 0x6d1c}, {0x203, 0x12, 0x1, 0x1}}}) semctl$GETALL(r1, 0x0, 0x6, &(0x7f0000000080)=""/113) kevent(r2, &(0x7f0000000080), 0xe4a, 0x0, 0xa9fa, 0x0) 3.143859216s ago: executing program 1 (id=186): ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc5005601, &(0x7f0000000000)={0x10, 0x0, [{&(0x7f0000462000/0x2000)=nil, &(0x7f000057e000/0x2000)=nil, 0x1}, {&(0x7f0000ffd000/0x1000)=nil}, {&(0x7f00000cf000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0xfffffffffffffffd}, {0x0, &(0x7f00004f5000/0x4000)=nil, 0x10000}, {&(0x7f0000000000/0x2000)=nil, &(0x7f0000181000/0x1000)=nil, 0x1}, {&(0x7f0000000000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x2}, {&(0x7f000028c000/0x4000)=nil, &(0x7f000028b000/0x3000)=nil, 0xe04}, {&(0x7f00003de000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil}, {&(0x7f0000065000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0xffffffffffffffff}, {&(0x7f0000523000/0x1000)=nil, &(0x7f0000063000/0x13000)=nil}, {&(0x7f0000181000/0x3000)=nil, &(0x7f0000156000/0x1000)=nil, 0x6}, {&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000463000/0x1000)=nil, 0x8}, {&(0x7f00004c1000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x1ffffffff}, {&(0x7f00004c1000/0x2000)=nil, &(0x7f000006c000/0x4000)=nil, 0x2}, {&(0x7f00001cf000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x4}, {&(0x7f00000cf000/0x1000)=nil, &(0x7f000028b000/0x4000)=nil, 0x9}], './file0\x00', 0x0, 0x1, 0x0, 0x43b, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}) mknod(&(0x7f0000000580)='./bus\x00', 0x2000, 0xd02) r0 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x140) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r0, 0xc0785101, &(0x7f0000000140)={0x0, 0x3, 0x0, 0x11}) r1 = socket$inet6(0x18, 0x1, 0x6) connect$inet6(r1, &(0x7f0000000000)={0x1c, 0x18, 0x2, 0x3, "0000000000000000000000009400", 0x80000000}, 0x1c) connect$inet6(r1, &(0x7f0000000300)={0x1c, 0x18, 0x1, 0x7, "d42602ffdf0ac20570382b9ec98aa80e", 0x5}, 0x1c) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc5005601, &(0x7f0000000000)={0x10, 0x0, [{&(0x7f0000462000/0x2000)=nil, &(0x7f000057e000/0x2000)=nil, 0x1}, {&(0x7f0000ffd000/0x1000)=nil}, {&(0x7f00000cf000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0xfffffffffffffffd}, {0x0, &(0x7f00004f5000/0x4000)=nil, 0x10000}, {&(0x7f0000000000/0x2000)=nil, &(0x7f0000181000/0x1000)=nil, 0x1}, {&(0x7f0000000000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x2}, {&(0x7f000028c000/0x4000)=nil, &(0x7f000028b000/0x3000)=nil, 0xe04}, {&(0x7f00003de000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil}, {&(0x7f0000065000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0xffffffffffffffff}, {&(0x7f0000523000/0x1000)=nil, &(0x7f0000063000/0x13000)=nil}, {&(0x7f0000181000/0x3000)=nil, &(0x7f0000156000/0x1000)=nil, 0x6}, {&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000463000/0x1000)=nil, 0x8}, {&(0x7f00004c1000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x1ffffffff}, {&(0x7f00004c1000/0x2000)=nil, &(0x7f000006c000/0x4000)=nil, 0x2}, {&(0x7f00001cf000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x4}, {&(0x7f00000cf000/0x1000)=nil, &(0x7f000028b000/0x4000)=nil, 0x9}], './file0\x00', 0x0, 0x1, 0x0, 0x43b, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}) (async) mknod(&(0x7f0000000580)='./bus\x00', 0x2000, 0xd02) (async) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x140) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) ioctl$VNDIOCSET(r0, 0xc0785101, &(0x7f0000000140)={0x0, 0x3, 0x0, 0x11}) (async) socket$inet6(0x18, 0x1, 0x6) (async) connect$inet6(r1, &(0x7f0000000000)={0x1c, 0x18, 0x2, 0x3, "0000000000000000000000009400", 0x80000000}, 0x1c) (async) connect$inet6(r1, &(0x7f0000000300)={0x1c, 0x18, 0x1, 0x7, "d42602ffdf0ac20570382b9ec98aa80e", 0x5}, 0x1c) (async) 3.143467861s ago: executing program 1 (id=187): r0 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a) accept$inet6(r0, 0x0, 0x0) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffe, 0x0}) ioctl$DIOCMAP(0xffffffffffffffff, 0xc0106477, &(0x7f00000000c0)={0x0, r0, 0x3}) ioctl$WSKBDIO_SETENCODING(r0, 0x80045710, &(0x7f0000000000)=0x3) setrlimit(0x8, &(0x7f0000000580)={0xa, 0x56}) r1 = syz_open_pts() lseek(r1, 0x8, 0x1) close(r1) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0x0, 0x4c, 0x5, 0x2, 0x8, 0x3, 0xf7, 0x10, [{0x6, 0xb, 0xfffff115, 0x80000001}, {0x3, 0xffffffff, 0x6, 0xfff}, {0x3, 0x4baa, 0x30f, 0x9}, {0x0, 0xe2, 0xf, 0x100}, {0x3, 0xfffff800, 0x5, 0xffffffff}, {0x7890, 0x3, 0x8, 0xc}, {0x3, 0x800, 0x2, 0xfffffffa}, {0x204, 0x33f8, 0x28000, 0xffffe2e9}, {0x9, 0xffe, 0x6, 0x7fff}, {0x3, 0x1, 0x8, 0x8bfd}, {0xfffffffd, 0x0, 0x8, 0x10}, {0x9, 0x401, 0x5, 0xa6a}, {0x401, 0x4, 0x400008, 0x6}, {0x3, 0x2006e2, 0x2, 0x6f5fc48f}, {0x8000003, 0x8, 0x3, 0x9}, {0x8ff9, 0x4, 0x100000, 0x400}]}) syz_open_pts() ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f00000000c0)={0x1e, 0xffff, 0xfffdff80, 0x160350d, "04f0ee091a0004be1fa614e0ff22700907ffdd00", 0x7fffffff, 0x40}) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000040)="d6f26fdd0c7eade4de9fe0a477f50b925b8f041e0af3bc81f256a115c2fe852ff09db8ab08850b696e", 0x29) 2.989976026s ago: executing program 1 (id=188): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0xbe, 0x0) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000500), 0x80, 0x0) ioctl$DIOCRGETTSTATS(r1, 0xc4504440, &(0x7f0000000b80)={{'./file0\x00', './file1\x00', 0x20, 0x7}, 0x0, 0x4d1, 0x0, 0x0, 0xb60, 0x7, 0x9, 0x40, 0xf}) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @random="f43284538ca3", [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x3d, 0x1c, 0xfffd, 0x0, 0x7, 0x1, 0x0, @local={0xac, 0x14, 0x0}, @multicast1, {[@generic={0x1, 0x2}]}}, @icmp=@generic={0x0, 0xe1}}}}}) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@in6={0x1c, 0x18, 0x3, 0x9, "5cde7fb86b6ac51effe7c2debc00a387", 0xda}, 0x1c, 0x0, 0x0, 0x0}, 0x0) r2 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = dup(r2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$DIOCSETLIMIT(r3, 0xc0084428, &(0x7f0000000040)={0x2, 0x312faea8}) sysctl$vfs_nfs(&(0x7f0000000080)={0xa, 0x2, 0x2}, 0x3, &(0x7f0000000100)="e68bcdc1", &(0x7f00000000c0)=0x4, 0x0, 0x0) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000380)=[{0x1, 0x7, 0x4, 0x10005}, {0x24, 0xf0, 0x44, 0x900}, {0x6, 0x24, 0x8, 0x8001}]}) ioctl$BIOCGHDRCMPLT(r0, 0x40044274, &(0x7f0000000180)) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000000)={{0x2, 0x0, 0x0, 0x0, 0x0, 0xcb, 0x11}, 0x13, 0x3, 0x0, 0x0, 0x2, 0x1, 0xfffffffffffffffd, 0x7fffffff}) syz_emit_ethernet(0x21a7, &(0x7f0000004ac0)=ANY=[]) 2.989570646s ago: executing program 1 (id=189): socket$inet(0x2, 0x1000, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x80, 0x83) ioctl$TIOCCONS(r0, 0x80047462, &(0x7f0000000040)=0x10004) r1 = syz_open_pts() ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000080)={0x2fffc, 0x4b6b, 0xfff6, 0x21d8b788, "2707a460990d000009000000fff7ff00", 0x89, 0x869}) ioctl$TIOCSTAT(r1, 0x20007465) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f00000001c0)={0x6, &(0x7f0000000040)=[{0x8, 0x1, 0x4, 0x3}, {0xfffd, 0x5, 0x9, 0x45c}, {0x200, 0x3, 0x5, 0x2}, {0x3ff, 0x40, 0x6, 0x6}, {0x1, 0xbe, 0x9, 0x400}, {0x3973, 0x49, 0xa, 0x1}]}) socket(0x18, 0x3, 0x0) ioctl$FIONREAD(0xffffffffffffffff, 0xc0106924, &(0x7f00000001c0)) ftruncate(0xffffffffffffffff, 0x8531) ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, 0x0) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x807ff, 0x9, 0x3, 0x101, 0x2, 0x1, 0x3, 0x10, [{0x5, 0xfe3, 0xffffff26, 0x71800}, {0x0, 0xfffffffa, 0x7, 0xa}, {0x100006, 0x0, 0xe, 0x2}, {0xe0, 0x0, 0x1fd, 0xffffeffe}, {0x7, 0x6b63, 0x80000001, 0xfff}, {0x2, 0x6, 0x14000009, 0xc}, {0x1, 0x7, 0x7, 0x70}, {0x58a, 0x8, 0xfdf2, 0xd45c}, {0x0, 0x5, 0x33}, {0xfefffc04, 0x4, 0x8003, 0x1}, {0x8, 0xfd79, 0xa38c000, 0xe1}, {0xcb, 0x6, 0x5, 0x8}, {0x2100e0, 0x6, 0x5, 0x3ff}, {0x10008, 0xe2, 0xfffffff5, 0xfffffff8}, {0x5, 0x5, 0x24, 0x4}, {0x5, 0xd655, 0x3, 0x6}]}) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) r2 = socket(0x18, 0x4, 0x0) ioctl$FIONREAD(r2, 0xc0106924, &(0x7f00000001c0)) r3 = socket(0x18, 0x3, 0x0) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) ioctl$WSKBDIO_GETENCODING(0xffffffffffffffff, 0x4004570f, 0x0) setitimer(0x0, &(0x7f0000000140)={{0xf32b473, 0x9}, {0x7ffefffbfffffffc, 0x109}}, 0x0) utimes(&(0x7f0000000300)='./file0\x00', 0x0) r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x20, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r6 = syz_open_pts() r7 = setsid() ioctl$TIOCSCTTY(r6, 0x20007461) r8 = fcntl$getown(r6, 0x5) fcntl$setown(r5, 0x6, r8) fcntl$setown(r4, 0x6, r8) fcntl$setown(r4, 0x6, r7) ioctl$FIONREAD(r3, 0x8080691a, &(0x7f0000000100)) 2.988694644s ago: executing program 1 (id=190): mknod(&(0x7f00000002c0)='./file0\x00', 0x2000, 0x5200) sysctl$net_inet_divert(&(0x7f0000000040)={0x4, 0x1e, 0x2, 0x2}, 0x4, 0x0, 0x0, 0x0, 0x0) r0 = accept(0xffffffffffffffff, &(0x7f0000000080)=@un=@file={0x0, 0x0, ""/10}, &(0x7f00000000c0)=0xc) getsockname(r0, &(0x7f0000000100)=@un=@abs, &(0x7f0000000140)=0x8) msgget$private(0x0, 0x302) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETA(r1, 0xc0284457, &(0x7f00000000c0)={0x80000000, 0xfffffff6, 0x1000, 0x1, "080000000000000000010000f0ff0fff0e1e0400", 0xfffffffe, 0x5}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) getsockopt$sock_int(r2, 0xffff, 0x1007, 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) mknod(&(0x7f0000000200)='./file0\x00', 0x2000, 0x4287e) r3 = open(&(0x7f0000000100)='./file0\x00', 0x70e, 0x0) r4 = getppid() mknod(&(0x7f0000000200)='./bus\x00', 0x6000, 0x100) unlinkat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x0) fcntl$setown(r3, 0x6, r4) fcntl$setown(r3, 0x6, r4) r5 = openat$audioctl(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$AUDIO_MIXER_WRITE(r5, 0xc0144d01, &(0x7f0000000040)=@set_ctrl={0xca18, 0x2, 0x4000000}) ioctl$BIOCGETIF(0xffffffffffffff9c, 0x4020426b, &(0x7f0000000180)={""/16, @ifru_flags}) r6 = socket(0x20, 0x4000, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000080)={@broadcast, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "db8344", 0x8, 0x11, 0x0, @local={0xfe, 0x80, '\x00', 0x0}, @mcast2, {[], @udp={{0x3, 0x2, 0x8}}}}}}}) getsockopt(r6, 0x3a, 0x7f, 0x0, 0x0) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4) 2.774944989s ago: executing program 1 (id=191): mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r0 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a) open$dir(0x0, 0xf02, 0x0) r1 = getpid() ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x510, r1) r2 = syz_open_pts() r3 = syz_open_pts() readv(r3, &(0x7f00000002c0)=[{&(0x7f0000000340)=""/4085, 0xff5}], 0x1) closefrom(r2) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0xfffffff7, 0x51, 0x2100007, 0x6, 0x80000001, 0x80000001, 0x5, 0x10, [{0x3, 0x9, 0x4, 0x70ffc}, {0x8, 0x9, 0x8, 0xfffffff9}, {0x8, 0xfff, 0x0, 0x9}, {0x1, 0x807, 0x8007}, {0x401, 0x200726, 0x2800, 0x1}, {0x2, 0xa, 0x3, 0x99}, {0xce1, 0xffffffff, 0x4f8, 0x6d}, {0x6, 0x304, 0x54, 0x8}, {0x2, 0x7, 0x5, 0x20000009}, {0x4, 0x8001, 0x593e, 0x100}, {0x1ce, 0x10001, 0xc, 0x3}, {0x7, 0x9, 0xfffffffd, 0x9}, {0xab, 0x0, 0x8, 0x4}, {0x29a71717, 0x7f, 0x1, 0xc373}, {0xb6f, 0x407, 0x5}, {0x8000, 0x4, 0x101002, 0x30001}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffe, 0x0}) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r4, 0x0, 0x9, &(0x7f0000000100), 0x29) 1.954756015s ago: executing program 3 (id=198): r0 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) pwritev(r0, &(0x7f0000000100)=[{&(0x7f00000011c0)="8327000000000000000e590000406d73", 0x10}], 0x1, 0x200000000003e) (async) pwritev(r0, &(0x7f0000000100)=[{&(0x7f00000011c0)="8327000000000000000e590000406d73", 0x10}], 0x1, 0x200000000003e) sysctl$hw(&(0x7f0000000080)={0x7, 0x10}, 0x2, &(0x7f0000000000)="83e2b64bc07b3a00", &(0x7f0000000180)=0x8, 0x0, 0x0) 1.954118904s ago: executing program 3 (id=199): r0 = open$dir(&(0x7f0000000300)='./bus\x00', 0x200, 0x186) select(0x40, &(0x7f0000000080)={0xcfe, 0x8c84, 0x9, 0x95d, 0x101, 0xffffffffffffffff, 0x3, 0xe}, 0x0, 0x0, 0x0) rename(&(0x7f0000000140)='./bus\x00', &(0x7f0000000040)='./file0\x00') futimes(r0, 0x0) 1.953251303s ago: executing program 3 (id=200): r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x10, 0x0) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) close(r1) r2 = socket(0x2, 0x4001, 0x0) connect$unix(r2, &(0x7f0000000000), 0x10) setsockopt$sock_int(r1, 0xffff, 0x1023, &(0x7f0000000040), 0xe0) poll(&(0x7f0000000300)=[{r0, 0x1}], 0x1, 0xd6) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r3 = socket(0x2, 0x8002, 0x0) r4 = fcntl$dupfd(r3, 0x2, 0xffffffffffffffff) mknod(&(0x7f0000000200)='./bus\x00', 0x6000, 0x202) r5 = msgget$private(0x0, 0x0) msgsnd(r5, &(0x7f0000003e40)={0x2, "f0ca80211461b6611a3dbc678968315d487d633f6128d507324359da94784479630516acc0de72bf32f3ffe886eb021ac17328c57ddc64946667fc9721e0fbe15b1fc111f5622bd32340cb1aeefd1efc204d52f5951270b867a73144c4c7977a18e610293da50f05fd742ce24cbd5f1bde43739843e7a3f66092a7204353a9926b4f8aa24c3b038aa56733203098a88c7add02796c4fef8da2500819dcf5aecb3ed99a6ddc0e31c2136a492fc69650be002ebb389dd4160b71c7d5898180b05651cf6f1d12923fda9af559e697e61bfe7413d2e1c34688a726"}, 0xe1, 0x800) rename(&(0x7f0000000140)='./bus\x00', &(0x7f0000000040)='./file0\x00') mknod(&(0x7f0000000200)='./bus\x00', 0x6000, 0x202) rename(&(0x7f0000000140)='./bus\x00', &(0x7f0000000040)='./file0\x00') closefrom(r4) socketpair$unix(0x1, 0x5, 0x0, 0x0) 1.704773121s ago: executing program 3 (id=201): r0 = socket$inet6(0x18, 0x5, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1000, &(0x7f0000000140)=0x5, 0x4) bind$inet6(r0, &(0x7f0000000040)={0x1c, 0x18, 0x1, 0x4, "00000000010000000600", 0x7}, 0x1c) mknod(0x0, 0x1ffa, 0x0) open(0x0, 0x82, 0x0) pselect(0x40, &(0x7f0000000000)={0x5, 0x2, 0x1, 0x7, 0x3, 0x3ff, 0x917, 0x5}, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x62, &(0x7f0000000000)=ANY=[@ANYBLOB="aaa2aaaaaaaaffffffffffff86dd60dd12bffdcd000bcb697a653e336f000000500000000000ff020000000000000000000000000001"]) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff"]) mknod(&(0x7f0000000080)='./file0\x00', 0x1, 0x7f) setsockopt$sock_int(r0, 0xffff, 0x1024, &(0x7f0000000000)=0x9485, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x404, &(0x7f0000000280)={0x1c, 0x18, 0x1, 0xcce, "1e78b8f9fc73436a16555cf59ac080d4", 0x4}, 0x1c) 1.702334159s ago: executing program 5 (id=202): syz_emit_ethernet(0x5e, &(0x7f0000000080)={@empty, @random="de6b1bfafe17", [], {@ipv6={0x86dd, {0x6, 0x6, "03816a", 0x28, 0x6, 0x30, @remote={0xfe, 0x80, '\x00', 0x0}, @rand_addr="985a06fa5cdfd7a07baaff7bd8431603", {[], @tcp={{0x3, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0xbd, 0x0, 0x1, {[@sack={0x5, 0xe, [0x7fff, 0x80000000, 0x200000]}, @window={0x3, 0x3, 0x4}]}}}}}}}}) (async) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x11}, 0x6, &(0x7f0000000080), 0x0, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1000e, &(0x7f00000001c0)=ANY=[]) munmap(&(0x7f0000001000/0x400000)=nil, 0x400000) 1.625276369s ago: executing program 5 (id=203): open$dir(&(0x7f0000000040)='./file0\x00', 0x200, 0x22c) (async) setrlimit(0x1, &(0x7f0000000240)={0x2, 0x1fd}) (async) setgroups(0x0, 0x0) setrlimit(0x8, &(0x7f0000000980)={0x7, 0x54}) r0 = syz_open_pts() close(r0) syz_open_pts() (async) ioctl$TIOCSETD(r0, 0x8004745f, &(0x7f0000000000)=0x1d) r1 = getpid() ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x510, r1) setuid(0xee01) (async) r2 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) writev(r2, &(0x7f0000000500)=[{&(0x7f0000000000)='~', 0x1}], 0x1) (async) pledge(&(0x7f0000000140)=' r\x91\xb9\xa8zzW\xc8\x9a\xc7\xed\x861r?\xd3\xd4\xcbl\b>-\xe5\xd0I\xe5\x88\xb5\x05\x83\xc9!g\xaaq\xc53\xfd\xf5\xe9\xd4\x85\t\x83\xbc\xd9@\f\x82\x18>e\xd7\xef\x88\xff\x1a\x02b\xba\xa5\xdbz&\xde\xec\xc3\xb8\x0eg', 0x0) 1.535015765s ago: executing program 2 (id=219): wait4(0x0, 0x0, 0x1, 0x0) mknod(&(0x7f0000000480)='./bus\x00', 0x2000, 0x412dff) r0 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) getitimer(0x3, 0x0) open$dir(&(0x7f0000000000)='./bus\x00', 0x2, 0x127) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x80) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r1, 0x0) ftruncate(r1, 0x8531) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000002) sysctl$net_pipex(&(0x7f0000000000)={0x4, 0x23, 0x1}, 0x3, &(0x7f0000001c00), &(0x7f0000000040)=0x44, 0x0, 0x0) readv(r0, &(0x7f0000000040)=[{&(0x7f0000002140)=""/4103, 0x1007}], 0x1) 1.534613804s ago: executing program 4 (id=220): r0 = syz_open_pts() ioctl$TIOCMBIS(r0, 0x8004746c, &(0x7f0000000000)=0x7) r1 = open$dir(&(0x7f00000000c0)='./bus\x00', 0x200, 0x186) ftruncate(r0, 0x40) mmap(&(0x7f0000a3e000/0x3000)=nil, 0x3000, 0x1, 0x2015, r1, 0x0) 1.506173425s ago: executing program 2 (id=222): setreuid(0x0, 0xee01) (async) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) (async) r0 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r0, 0x8020697f, &(0x7f0000000100)) select(0x40, &(0x7f0000000080)={0xc2, 0x38fc, 0x0, 0x2, 0x9, 0xfeffffffeffffffe, 0xfffffffffffffffd, 0xfffffffffffffffd}, 0x0, 0x0, 0x0) (async) setsockopt(0xffffffffffffffff, 0x11, 0x1, &(0x7f00000000c0)='/\t', 0x2) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r1 = socket(0x18, 0x3, 0x0) setsockopt(r1, 0x1000000000029, 0x35, &(0x7f0000000040)="03000000", 0x4) sendto$inet6(r1, 0x0, 0x0, 0x2, &(0x7f0000000040)={0x1c, 0x18, 0x3, 0xc9e, "00000000000000000000000000700100", 0x1}, 0x1c) (async) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x183) (async) rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00') 1.505550707s ago: executing program 4 (id=223): r0 = socket$inet6(0x18, 0x1, 0x6) setsockopt$sock_int(r0, 0xffff, 0x1000, &(0x7f0000001300)=0x3, 0x4) open(&(0x7f00000000c0)='./file0\x00', 0x715, 0xc3) open(&(0x7f00000000c0)='./file0\x00', 0x2e92994837ed377e, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket(0x18, 0x2, 0x0) setsockopt(r1, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) sendmsg(r1, &(0x7f0000000240)={&(0x7f0000000280)=@in6={0x1c, 0x18, 0x1, 0xfffffffd, "00000000000000000000000000000001", 0x101}, 0x1c, 0x0, 0x0, 0x0}, 0x0) bind$inet6(r0, &(0x7f0000000040)={0x1c, 0x18, 0x1, 0x4, "00000000000000000000010000000600", 0x7}, 0x1c) r2 = socket$inet6(0x18, 0x1, 0x6) setsockopt$sock_int(r2, 0xffff, 0x1000, &(0x7f0000001300)=0x3, 0x4) bind$inet6(r2, &(0x7f0000000040)={0x1c, 0x18, 0x1, 0x4, "00000000ffff00000000000000000001", 0x7}, 0x1c) r3 = open$dir(&(0x7f0000000000)='.\x00', 0x10000, 0x4) mkfifoat(r3, &(0x7f0000000040)='./file0\x00', 0x110) 1.505173628s ago: executing program 2 (id=224): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x1, 0x7e, 0x9, 0x9}, {0x34, 0x3, 0xff, 0x9}, {0x9b1e, 0x2, 0x74, 0x9}]}) ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f0000000040)={0x0, 0x0, 0x1, 0x0, "0100dd2d018000000000005e00"}) sysctl$kern(&(0x7f0000000040)={0x1, 0x59}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) sysctl$kern(&(0x7f0000000040)={0x1, 0x45}, 0x3, &(0x7f0000000180)="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", &(0x7f0000000080)=0xaa, &(0x7f0000000340)="5a67923ef0cb189971421989ebcff78831a7581e2f27caa362f1363042efb27688b2c899220fb2fe37e467d974592496856ca7b78060998608c2f952e43bc0bf11555cc5cb0fe17b2ec1be389871829bfe10dd4c4d2c8f9da2bd2868fd86791dc09dc4fa89a217458bdaed31003fdc3a7323189ba3ccbad6c8af17516e4557f61ad20180000000000000125f568ca7d3396b9057255f381855110eb3a673713716cdf010ddfa7977f92cf061ad125ca670353b45d53aae196b00271f9d3452b523b3dea22d6027625614312183724b71c7eb02083a410c1c99fa455013521f98686e472b70b560f7021f567adf4d", 0x17) syz_emit_ethernet(0x1000e, &(0x7f00000015c0)=ANY=[]) 1.496828779s ago: executing program 4 (id=225): select(0x40, &(0x7f0000000000)={0xfffffffffffffffd, 0x0, 0x0, 0x564, 0x9ce8, 0x7, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x2, 0x3, 0x1) setsockopt$inet_opts(r0, 0x0, 0x1, &(0x7f0000000080)="0315f1d8dec5a317a93546ba", 0xc) connect$unix(r0, &(0x7f0000000000), 0x10) write(r0, &(0x7f00000000c0)="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", 0x5c5) getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040), 0xc) 1.495810018s ago: executing program 2 (id=226): r0 = socket(0x1, 0x3, 0x9) r1 = accept4(r0, &(0x7f0000000000)=@in6, &(0x7f0000000040)=0x1c, 0x2000) setsockopt$sock_int(r0, 0xffff, 0x1024, &(0x7f0000000080)=0x6d71b066, 0x4) r2 = openat$pf(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) semctl$GETALL(0xffffffffffffffff, 0x0, 0x6, &(0x7f0000000100)=""/79) sysctl$kern(&(0x7f0000000180)={0x1, 0x38}, 0x2, &(0x7f00000001c0)="e4e2720f44574bfc7f58e6432c2f80cdc1549262789343014da43ef2009da65385af244ea29dd2fb1b0cd28d610a49b9bab147956b122aea5d2f3c534678aeb6bb99b945053e05b202e033b7c030609bf34f4959adcf8fa192652f720cfd65e89b069abd59e514e83be60239f310", &(0x7f0000000240)=0x6e, &(0x7f0000000280)="1239f4bd9fe799203756d87451945fab113328ffdf3a8f164a624d0c0b3c2cbbf1e191e729f2f88726285463ff506cfbdca1ce74fb48177655006af63ae7e77a55e5e8558cc7727962c33f1ea89b7c0fd05cd98d9958c9baba950a029b451a692637b366025ae1e51f2470e61f5cbf4d159a00ac5e18b3a2039ffd9a", 0x7c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) sendto$unix(r3, &(0x7f0000000340)="89214054758c37704a5e86b453f39a461f848e07511170941bd2c1c651da5b3d157a407c04cd5eea692a924e98e67bbd45c1cc8462638556aec1613e322b8f2bb8d70cd16789d71b20fba83ac818b35b95e9bf30b9f20d583a2fabd0a4786491946c1612a6fbb0f3bf891bbe137af25747af4ec49cda1119a24507f02f0a785ab85422de1d9dd23ceb685848007448070aa7382aa3c7f48920b2554ba14128afb49336598b435457591880ab4c4b02e8fc72", 0xb2, 0x7, &(0x7f0000000400)=@file={0x9, 0x1, './file0\x00'}, 0xa) flock(0xffffffffffffffff, 0x4) fstat(r2, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DIOCSETREASS(r2, 0xc004445c, &(0x7f00000004c0)=0x3) r5 = openat$pci(0xffffffffffffff9c, &(0x7f0000000500), 0x1, 0x0) ioctl$PCIOCREAD(r5, 0xc0107002, &(0x7f0000000540)={{0x8a, 0x6, 0x3}, 0x94, 0x0, 0x5}) r6 = openat$tty(0xffffffffffffff9c, &(0x7f0000000580), 0x800, 0x0) ioctl$TIOCSETA(r6, 0x802c7414, &(0x7f00000005c0)={0x7, 0xbf92d324, 0x1, 0x1, "e8a2213f775cce74103d09d79316eefdd4f93252", 0x4, 0x80000001}) ioctl$TIOCSETA(r6, 0x802c7414, &(0x7f0000000600)={0x7, 0x8001, 0x700, 0x8, "23fec2a4607e30e2cda68b01e60c0bd2a1c3a304", 0x9, 0x1}) utimes(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={{0x0, 0x800}, {0x0, 0x9}}) mkdir(&(0x7f00000006c0)='./file0\x00', 0x8) r7 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000700), 0x40000, 0x0) ioctl$BIOCGHDRCMPLT(r7, 0x40044274, &(0x7f0000000740)) openat$audio(0xffffffffffffff9c, &(0x7f0000000780), 0x800, 0x0) sysctl$net_inet_divert(&(0x7f00000007c0)={0x4, 0x2, 0x102, 0x2}, 0x4, &(0x7f0000000800)="4d85bea821469561c5ae16822ea37882450cc2977c182f9a1880c6ba90d364ae46ce4a90bdd02eb3d6a985a01a9b3493de380cd8ac31106d3a3e2151bd9a", &(0x7f0000000840)=0x3e, &(0x7f0000000880)="fdd996bce81c33e46d7abc889bf1", 0xe) ioctl$PCIOCWRITE(r5, 0xc0107003, &(0x7f00000008c0)={{0x9, 0x6, 0x81}, 0x2, 0xf, 0x7ff}) read(0xffffffffffffff9c, &(0x7f0000000900)=""/236, 0xec) bind$unix(r0, &(0x7f0000000a00)=@file={0x2, 0x2, './file0/file0\x00'}, 0x10) setresuid(r4, r4, r4) ioctl$BIOCGFILDROP(r7, 0x40044278, &(0x7f0000000a40)) setsockopt$inet6_MRT6_DEL_MFC(r1, 0x29, 0x69, &(0x7f0000000a80)={{0x1c, 0x18, 0x0, 0x3ddb6558, "95f7b5b9393bd7c38f94c03a2c7cbf6f", 0x1000}, {0x1c, 0x18, 0x2, 0xfd, "45cb56ddfe3427cacc6c92ae13452da7", 0x9}, 0x7, [0x6, 0xffffffff, 0x5, 0x6, 0x7, 0x5, 0x4, 0x3ff]}, 0x5c) mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0) accept$inet6(r0, &(0x7f0000000b00), &(0x7f0000000b40)=0x1c) 1.495417129s ago: executing program 4 (id=227): mknod(&(0x7f0000000340)='./file0\x00', 0x2000, 0x1e5f) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="28000000ffff000001"], 0x28}, 0x0) recvmsg(r0, &(0x7f0000001d40)={&(0x7f0000000000)=@in6, 0x1c, 0x0, 0x0, &(0x7f0000001c40)=""/230, 0xe6}, 0x2000) mknod(&(0x7f0000000040)='./file0\x00', 0x6000, 0xe02) r2 = open(&(0x7f0000000040)='./file0\x00', 0x40000, 0x0) ioctl$DIOCADDRULE(r2, 0xcd604404, &(0x7f0000000300)={0x6, 0x1, 0x800, './file0\x00', './file0\x00', 0x0, "7d821d824d79f013592adfea56c3ebc24427cc807930d9fbc1c1da892cddd19d5e3f39d5c69e5641c737bae38803244012355701e58865d65222f3cfa516c1ed52454424d3435eb4242e6c2b7eebf7d70df85fdf306eeb886df0deac81020e01689af93433ba9980b80511a642fdd1a9b4d2e0eeb5832047897a002e0af93e20b4ff852b8235cccbe709dd9a1845fec75eb6ce50bc42e66b16eb585a36fea394a1ee0623fa8001401599bed674db4f73e940b778e5f085953e572d0ed01c091dc0354552856cfe473bef3f5ecb55d868837fcb2b1e45802bb71e1b23809dc2339ef3bc91f87cc9d75ced361a69b3239a0c18836d825956d6a2fbca9e609f42cf05b5d119b70d7d6bc6a0274af334b842a494f0c2cb21301bae2996419a3b4545356fe3aacd5cc286dc67d5c0264c2892c787118d5260e8c06859ac567a02c0d90c684f3d89b7be73a80a6c2ee26e11cbbcc2f5f3d75772f0b6776e5db9ebde990798adcade80ff945e2cc502b5f3c1daa1f7ef08467d5239aa55b9f40df507626c36d16439199dda54ffa516ac4c7212c67943b8c5f6f5a467bf57567cf026bcd4cbaa220225c6538080d9912894a154da524b6f63882ae53cd7d39e3a9889b687b41623c761b3b86adffebdb3b2c52b9153a319bcabb2f1ee0a1863d76186b0ede688e3c2ce811ffbbdc342ac8bc0c233a3b1f805d39ecebe1fe397ec56d1fb1d6e9594410cab1842642c99b4ede8f19d26ed03ebe38900cb30b1dc02194bec520af0892fea8e709a868781eb182a1be5e7869a56d53d737fe97a750ffe39b20a8376f60d21cf8ded971636fcd9bff90cf303f69fffeac180bc239377da7b8e4ed944426dc76acc1b9562c520a5ae23c0d41826fbb87cc05539b6f2e08791201adacdb6a69dbe1970643942f832351a98c338b7ec9eefeffd48cf4b2c6e39c5580b9d16fc24aa19d2d3ebd54273c833b534aada91edad33435e2d5a93379509efd4867e2afd08e2ea4d7e169c0b423e8968a3cba6e8a83c336a0e09b7f1d3792a167f254f89769afacba531a8d629e567bb364426a939970a5418f941501f62b039c7ac790713b3687df657733bcaba3cd4e67b84c6a1e96f7073fdb6be0aa927e3787270ea2bc5ef0b8e7c31da81cf6c1e360fcfb015468fb6aa081ead4bc90ea1787e161fad9a60b504e428329946ca8ef0f94f63f87289b73677d63fa9c4aedd0dbb031c6bb162a80717c7301d20233f9c0f639de218f5b1d7fd0166eae392a47fe683bd3f58282af9dc3f081959a72b671f168e5e27731dbab444b80b4282e801c16eab1197f96a77b1b93d39f6874dff746e6e1461914130a4c1200dd0cc62fe895b90820c5f0961e24e55123701dedccdfb7c36b238a4428b0ba46eae755bccdde443c3fd3cd881bb5529049af36ecf441c442ede5952222121ce92fdb011de396aecfcb918e3e5418de2a4f9b4fba92b34a3ed508b3c1b31f0fdf2526f52f7aedc387e0bc96e2d27af7be99cfdcafd351e22db19d0076e66deb78b6eb6f401f8dd50cf110452f85693df6f7f6cc09a7e51b5ee6bba444df13bf92eb6b460223105fa7b3ad7b651eb64bf3047ea9ce1f89e8d1d36e213840930131c6f2a14c8cbfaf20e7d9f7d32c2152b81d0ca193ed5bcc130be42a2a009da79ba24dc1e227441e61c4bbe8953b78d04b2173586dfa0c1596d92531dfdee8c35cc88cfcc906c3cd93b2ff7f307514a7043cda4e589fa41d751d74515fc4169e0762c11ce94826aba96a71672e73bbe41be0772ae12b87bd433c0450c23ae298fef5da59085cb68c75d00b145286495e90248325bec6f2618204018453e797823eb94ce3b7ad4283d86d79e0952b83c333b7bba131e9e968474b176d778e41883f514b27cf04cbf95bcd6e57539163d079df2"}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x10, r2, 0x0) socket(0x18, 0x3, 0x3a) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x404, &(0x7f0000000000)={0x10, 0x2, 0x0, 0xe0000801}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r3 = socket(0x1, 0x4001, 0x0) fcntl$dupfd(r3, 0x2, 0xffffffffffffffff) r4 = socket$inet(0x2, 0x8003, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000180)={@broadcast, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2}, @icmp=@echo}}}}) recvmmsg(r4, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 0x0}}, 0x38, 0x1882, 0x0) close(r2) r5 = socket(0x2, 0x2, 0x0) connect$unix(r5, &(0x7f0000000000), 0x10) r6 = socket(0x18, 0x2, 0x0) setsockopt$sock_int(r6, 0xffff, 0x1023, &(0x7f0000000040)=0x4, 0xd4) socket(0x2, 0x8002, 0x0) mknod(0x0, 0x6000, 0xe02) r7 = open(0x0, 0x40000, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x10, r7, 0x0) closefrom(0xffffffffffffffff) r8 = openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) sendmsg(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="180000000000", 0x6}], 0x1, 0x0}, 0x8) open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x800, 0x6b881aec, 0x2000007, 0xfd, 0x80000001, 0xffff79a9, 0x8, 0x10, [{0x0, 0x7, 0x4, 0x71000}, {0x7, 0x88, 0x8048, 0x7}, {0x101, 0x9, 0x40000000, 0x9}, {0x9, 0xd, 0xe}, {0x3d, 0xa, 0x400000c, 0x40000007}, {0x2, 0x27f3, 0x3, 0x5}, {0xce3, 0x4, 0xcf5, 0x2}, {0xe, 0x801, 0xc, 0x8b}, {0x2, 0x7f, 0x1, 0x9}, {0x4027, 0x100, 0xd1a, 0x11088}, {0x1, 0x5, 0x1, 0x6}, {0x800, 0x9, 0x8, 0x6e3}, {0x10001, 0x5, 0x3, 0x2}, {0x29a7171c, 0x7fffffff, 0x1, 0x7}, {0xc, 0x7, 0x1, 0xfffffffb}, {0x3, 0x1, 0x1001, 0x30004}]}) 1.482008342s ago: executing program 4 (id=228): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = openat$pci(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PCIOCREAD(r1, 0xc0187009, &(0x7f00000000c0)) setuid(0xee01) getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000000580)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0x20, 0x0) ktrace(0x0, 0x5, 0x4000054d, 0xffffffffffffffff) r5 = semget(0x1, 0x3, 0x48) semctl$IPC_SET(r5, 0x0, 0x1, &(0x7f00000001c0)={{r2, 0x0, r2, r3, 0x20, 0x8, 0x0, 0x0, 0xff9}, 0x0, 0xff, 0x0, 0x0, 0x7, 0x0, 0x4}) ioctl$BIOCSETIF(r4, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) ioctl$BIOCSETF(r4, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x1, 0x12, 0x5, 0x1}, {0x48, 0xf0, 0x3, 0x900}, {0x6, 0x24, 0x0, 0x9}]}) syz_extract_tcp_res(0x0, 0x10000, 0x4cd) syz_extract_tcp_res(0x0, 0xc, 0x10) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, r3}}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x4e}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000180)=0x66, 0x0, 0x27) 1.481080374s ago: executing program 2 (id=229): r0 = openat$wskbd(0xffffffffffffff9c, &(0x7f00000001c0), 0x200, 0x0) ioctl$WSKBDIO_GETMAP(r0, 0xc010570d, &(0x7f0000000240)={0x3, &(0x7f0000000200)=[{0x3, 0x3, 0x5, 0x7, 0x1}, {0x2, 0x4, 0x7, 0x6, 0x400}, {0x91, 0x6, 0x97a8, 0x7, 0x1}]}) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x20, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000280)=[{0x64, 0x6, 0x4, 0x8}, {0x1, 0xf0, 0x41, 0x900}, {0x6, 0x24, 0x20, 0x1000}]}) syz_emit_ethernet(0xc2, &(0x7f0000000280)=ANY=[]) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, r2, 0x0) r3 = openat$pf(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$DIOCGETSTATE(0xffffffffffffffff, 0xc1084413, &(0x7f0000000040)={{0x2, './file0\x00', [{[@v6=@remote={0xfe, 0x80, '\x00', 0x0}, @v6=@remote={0xfe, 0x80, '\x00', 0x0}], [0x9, 0x40], 0x0, 0x2}, {[@v6=@local={0xfe, 0x80, '\x00', 0x0}, @v4=@broadcast], [0x66], 0x4}], {{0x246, 0x48, 0xfa, 0x7ff}, 0xe, 0x409, 0xfff00000, 0x0, 0x8, 0x17, 0x16}, {{0x0, 0x7, 0x1, 0x5}, 0x8001, 0xc86, 0x4cdf, 0x106, 0x800, 0xf0}, @v4=@multicast1, 0x4, 0xb, 0x0, 0x85d3, 0x6, [[0xfffffff7, 0x7], [0x2, 0x34c]], [[0xfc000002, 0x401], [0x9, 0x3]], 0x9, [0xf, 0x79], 0x1, 0x18, 0x6, 0x1, 0x0, 0x40, 0xb, 0x83, 0x9, 0x8, 0x1, 0xce57}}) ktrace(&(0x7f0000000180)='./file0\x00', 0x1, 0x240, 0xffffffffffffffff) sysctl$net_inet_ip(&(0x7f0000000000)={0x4, 0x2, 0x0, 0x25}, 0x4, 0x0, 0x0, &(0x7f0000000100), 0x0) ioctl$TIOCSETA(r3, 0xc1084425, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x3, "210d0000000200000006000000000200007fffff", 0x7effdffe}) select(0x0, 0x0, 0x0, 0x0, 0x0) rename(0x0, 0x0) r4 = socket(0x18, 0x1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) ioctl$FIONREAD(r4, 0xc038694e, &(0x7f00000001c0)) r5 = shmget$private(0x0, 0x2000, 0x1b8, &(0x7f0000001000/0x2000)=nil) setgid(0xffffffffffffffff) setgroups(0x0, 0x0) mmap(&(0x7f0000529000/0x5000)=nil, 0x5000, 0x0, 0x8810, r2, 0x9) setuid(0xffffffffffffffff) shmat(r5, &(0x7f0000001000/0x3000)=nil, 0x0) 1.480398526s ago: executing program 4 (id=230): r0 = kqueue() (async) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt(r1, 0x6, 0x10, &(0x7f0000000000)='\x00\x00\x00\x00', 0x4) (async) ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x2000, 0x0, {[0xffffffffffffff81, 0x5, 0x2800000003, 0x1001, 0x8004, 0x0, 0x6, 0x7, 0x2, 0x2f00, 0x10000, 0x3, 0xfffffffffff3ffff, 0x400000002000000, 0x0, 0xffffffffffffffa8, 0x82, 0xce5], [0xfffffffffffffffe, 0x80000001, 0xfffffffffffffffd, 0xdd3, 0xffff, 0x7b96, 0x6, 0x0, 0xb], [0x5ad8, 0x6, 0x100000001, 0xfffffffffffffffa, 0xffffffffffffffff, 0x872a, 0xfffffffffffffffa], [0xf3, 0x2, 0xfffffffffffffffc, 0x8000000100000000, 0xfffffffffffffffc, 0x3], [{0x200, 0x4, 0x2, 0x7d06}, {0xfffc, 0x6, 0x5, 0x11}, {0x0, 0x0, 0xfffffffe, 0x81}, {0x3, 0xc33, 0x3, 0xffffffffffffffff}, {0xc000, 0x2, 0x9d, 0xfffffffffffffff7}, {0xe55, 0x2006, 0x40000, 0x2000000000000000}, {0x6b7, 0x0, 0x400001, 0x200}, {0x5, 0x4, 0x0, 0x8}], {0x2, 0x78b, 0x5, 0xfffffffffffffffd}, {0x21, 0x6, 0x5, 0x2}}}) kevent(r0, &(0x7f0000000080), 0xe4a, 0x0, 0xa9fa, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) r2 = semget(0x0, 0x1, 0x281) semctl$GETPID(r2, 0xf4ea29b3c30b5f1c, 0x4, 0x0) (async) r3 = socket(0x18, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x2, 0xffffffffffffffff) (async) r5 = socket$inet6(0x18, 0x1, 0x6) connect$inet6(r5, &(0x7f0000000280)={0x1c, 0x18, 0x3, 0x8d, "0700000000000000000000000000fd83", 0x1}, 0x1c) (async) accept$inet6(r3, &(0x7f0000000380), &(0x7f00000003c0)=0x1c) (async) connect$inet6(r3, &(0x7f0000000340)={0x1c, 0x18, 0x3, 0x3, "b01a3c970a8cf72aac3591078f00", 0xfffffff7}, 0x1c) (async) close(r4) (async) chroot(&(0x7f0000000740)='.\x00') (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xa7210e10bc3c9de9) (async) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x100, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r7, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="28000000ffff000001"], 0x28}, 0x0) (async) recvmsg(r6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/51, 0x33}, 0x0) (async) r8 = socket(0x18, 0x3, 0x7) setsockopt(r8, 0x1000000000029, 0x40, &(0x7f0000000040)="00000088", 0x4) (async) mmap(&(0x7f00006a2000/0x4000)=nil, 0x4000, 0x4, 0x8010, r8, 0x8000) 421.897925ms ago: executing program 6 (id=231): mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1000, 0x0) r0 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000180), 0x8, 0x0) ioctl$DIOCMAP(r0, 0xc0106477, &(0x7f00000000c0)={&(0x7f0000000140)='./file0\x00', r0, 0x3}) ioctl$FIOASYNC(0xffffffffffffffff, 0x80047460, &(0x7f00000000c0)=0x4) sysctl$hw(&(0x7f0000000280)={0x6, 0x8}, 0x2, &(0x7f0000000000)="0000e65bc39e76ecc9ddb3c3cc6bbc2506870300ec", &(0x7f0000000240)=0x15, 0x0, 0x0) execve(0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) setrlimit(0x8, &(0x7f00000008c0)={0x42, 0x61}) r1 = syz_open_pts() close(r1) r2 = syz_open_pts() ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f00000000c0)={0x5f0, 0xee6e, 0x1, 0x160350d, "cc1408002100ca9ec0a274bf75275a0d1ec11000", 0xa00401, 0x6}) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) read(r0, &(0x7f0000000480)=""/4096, 0x100000) 420.58265ms ago: executing program 0 (id=232): r0 = socket$inet6(0x18, 0x1, 0x6) r1 = socket(0x18, 0x1, 0x0) getsockopt(r1, 0x29, 0x2e, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000280)={0x1c, 0x18, 0x3, 0x8d, "00000000000000730000000000d100"}, 0x1c) r2 = socket(0x2, 0x8002, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0xffff, 0x80, &(0x7f0000000340)={0x6, 0x3}, 0x8) r3 = fcntl$dupfd(r2, 0x2, 0xffffffffffffffff) syz_open_pts() mknod(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x0) mknod(&(0x7f0000000100)='./file0\x00', 0x2000, 0x1e5f) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x80, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_emit_ethernet(0x6f, &(0x7f00000000c0)={@local, @local, [], {@ipv6={0x86dd, {0x6, 0x6, "03816a", 0x39, 0x6, 0x30, @rand_addr="00f8ff00", @local={0xfe, 0x80, '\x00', 0x0}, {[], @generic="3d259c06b15a443aa104000ce98378b65dde37b92d7200cff44a58083c8a09119fc163a34eb4a4de01040db565be4559cce243ac8387255f66"}}}}}) ioctl$VNDIOCSET(r4, 0xc0284408, &(0x7f0000000240)={0x0, 0x8000000000004, 0x0}) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x6415) open(&(0x7f0000000000)='./bus\x00', 0x80, 0x20) closefrom(r3) ioctl$FIONREAD(r3, 0x4004667f, &(0x7f0000000100)) syz_emit_ethernet(0x42, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff820045f4003400670000ff069078ac1400aaac1400aa4e224e23", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="8002820090787fff0101080a000000087fffffff"]) setsockopt(r0, 0x5, 0xd, &(0x7f0000000140)="35724eb2f71e0ae98c350ad7b21cbc9d03a8353792d1c3568c7cbeaa0dded43c9a647f8e3887b751c0769acc5ed6f6cf1ecc1b3a757f1e478b5b68710f36b04c3bc72d902930f6f16d6e295e6d2b043376e97071a78870c1296ec7afc929122a0ff699267fff9a6b1334a8f24d4faab2681df9fe570318d79293397812b4fc8ed7bf99cced39868617bbfb2fa68bd6c2998c00c8cfe724a6103f7d9e6af117", 0x9f) getsockopt$inet_opts(r3, 0x0, 0x1, &(0x7f0000000000)=""/109, &(0x7f0000000080)=0x6d) ioctl$WSKBDIO_GETDEFAULTKEYREPEAT(r3, 0x400c570a, &(0x7f0000000200)) symlink(&(0x7f00000000c0)='.\x00', &(0x7f0000000180)='./file0\x00') unveil(&(0x7f0000000240)='./file0/file0/..\x00', &(0x7f0000000000)='c\x00') symlink(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0/file0/..\x00') r5 = dup3(r0, r3, 0x10000) fsync(r5) 417.05515ms ago: executing program 7 (id=233): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000000)={0x3, &(0x7f0000000100)=[{0x24, 0x9, 0x4, 0x5}, {0x84, 0x28, 0x9, 0x101}, {0x9b9e, 0x82, 0xfb, 0x6}]}) syz_emit_ethernet(0x486, &(0x7f0000000b80)=ANY=[]) mknod(&(0x7f0000000000)='./file0\x00', 0x2060, 0xcd5331e3) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 416.005033ms ago: executing program 5 (id=234): unveil(&(0x7f0000000780)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000880)='x\x00') writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000080)="76e5eac907f9ccf7a251ceddcec7d6aa45cffe2c63a56077123a276d3ba4e9d17eb3eb5db12a3783a8e0620d357de1fe04fa9465b5bd1286e9624dec06a00c222f", 0x41}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) unveil(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000100)='c\x00') r0 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) sysctl$vfs_ffs(&(0x7f0000000040)={0x4, 0x1, 0x7}, 0x3, 0x0, 0x0, 0x0, 0x0) ioctl$DIOCGETRULESETS(r0, 0xc444443a, &(0x7f0000000300)={0x1, './bus\x00', './file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}) sysctl$vfs_ffs(&(0x7f0000000000)={0xa, 0x1, 0xd}, 0x3, &(0x7f0000000140)="10123b19d35462213cb970f8e329441f07dc9a38618a04b181637744c040355b15b06a49ea28e75fea665a40ff691e158c8bfe26274b0cf1f1fa817e0a401b842a5a41033b002b8d57dc9556527522bcbdafea57a61f95f8f50fda1ab7c33d6b4d6c5cc74035b59f1a305a56597cd66d4c398c3aefdf3100caf9fcaa6d49e68a23", &(0x7f0000000200)=0x81, &(0x7f0000000240)="1df7cd23c79f8e", 0x7) ioctl$TIOCSETA(r0, 0xcd604404, &(0x7f0000000080)={0x7, 0x2, 0x87d, 0x102c, "202000d6caffeb004068a95a010400", 0x6, 0x2}) 374.39619ms ago: executing program 5 (id=235): mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2000, 0x5cda) r0 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x17b) open$dir(&(0x7f0000000100)='./file0\x00', 0x10000, 0x2e) ioctl$DIOCIGETIFACES(r0, 0xc0284457, &(0x7f0000000140)={'./file0\x00', &(0x7f00000000c0)=""/30, 0x7, 0x2, 0x0, 0xffff}) open(&(0x7f0000000040)='./file0\x00', 0x100, 0x13a) select(0x40, &(0x7f0000000000)={0x2, 0xe4, 0x9d, 0x9, 0x4, 0xf, 0x9e, 0x7}, &(0x7f0000000040)={0xffffffffffffffff, 0x8, 0x5, 0x9a8, 0x2175e18d, 0x7, 0x3, 0x2}, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2000, 0x5cda) (async) open(&(0x7f0000000080)='./file0\x00', 0x80, 0x17b) (async) open$dir(&(0x7f0000000100)='./file0\x00', 0x10000, 0x2e) (async) ioctl$DIOCIGETIFACES(r0, 0xc0284457, &(0x7f0000000140)={'./file0\x00', &(0x7f00000000c0)=""/30, 0x7, 0x2, 0x0, 0xffff}) (async) open(&(0x7f0000000040)='./file0\x00', 0x100, 0x13a) (async) select(0x40, &(0x7f0000000000)={0x2, 0xe4, 0x9d, 0x9, 0x4, 0xf, 0x9e, 0x7}, &(0x7f0000000040)={0xffffffffffffffff, 0x8, 0x5, 0x9a8, 0x2175e18d, 0x7, 0x3, 0x2}, 0x0, 0x0) (async) 370.221448ms ago: executing program 5 (id=236): open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x97) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) write(r1, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) connect$unix(r0, &(0x7f00000001c0)=@abs={0x9, 0x0, 0x0, 0x3}, 0x8) open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x97) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) (async) open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) (async) write(r1, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) (async) connect$unix(r0, &(0x7f00000001c0)=@abs={0x9, 0x0, 0x0, 0x3}, 0x8) (async) 352.500069ms ago: executing program 0 (id=237): symlink(&(0x7f0000000000)='\x00', &(0x7f00000009c0)='./file0\x00') sysctl$net_inet_ip(&(0x7f0000000000)={0x4, 0x2, 0x0, 0x20}, 0x4, 0x0, 0x0, &(0x7f0000000480)="01000000", 0x4) open(&(0x7f0000000180)='./file0/file0\x00', 0x80, 0x8e) symlink(&(0x7f0000000000)='\x00', &(0x7f00000009c0)='./file0\x00') (async) sysctl$net_inet_ip(&(0x7f0000000000)={0x4, 0x2, 0x0, 0x20}, 0x4, 0x0, 0x0, &(0x7f0000000480)="01000000", 0x4) (async) open(&(0x7f0000000180)='./file0/file0\x00', 0x80, 0x8e) (async) 324.847291ms ago: executing program 7 (id=238): open(&(0x7f0000000040)='./file1\x00', 0x80, 0x0) acct(&(0x7f0000000280)='./file1\x00') acct(&(0x7f0000000000)='./file1\x00') r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000000)={0x4, &(0x7f0000000100)=[{0x5, 0xfb, 0x1, 0x1}, {0xa4, 0x9, 0x5, 0x9}, {0x87, 0x28, 0x9, 0x101}, {0x9b9e, 0x82, 0xfb, 0x6}]}) syz_emit_ethernet(0x2a, &(0x7f0000000200)={@random="b905f0ffffff", @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x1, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0x0}, @broadcast}, @udp={{0x1, 0x3, 0x8}}}}}}) 317.339656ms ago: executing program 7 (id=239): mknod(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) link(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000d40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') link(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 308.015435ms ago: executing program 0 (id=240): r0 = dup2(0xffffffffffffff9c, 0xffffffffffffffff) sendto$inet(r0, &(0x7f0000000140)="edea97edf7b329e6c7b11c6dfdc4b04efade4b5a0905453c14c19e599da3296eda2183cecc875e98ced33aa5bf658168c640a308", 0x34, 0x40f, &(0x7f00000001c0)={0x10, 0x2, 0x0, 0x6}, 0x10) sysctl$net_inet_tcp(&(0x7f0000000480)={0x4, 0x12, 0x6, 0x1}, 0x3, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCMSET(r0, 0x8004746d, &(0x7f0000000180)=0x3) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0xffff, 0x4, 0x0, 0x4}, {0x2, 0x0, 0x0, 0xffffffff}, {0x0, 0x63, 0x1, 0xf11}]}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x30}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) sysctl$kern(&(0x7f00000000c0)={0x1, 0x33}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x3414, 0x0, 0xffffffffffffffb8) 256.495242ms ago: executing program 0 (id=241): r0 = socket$inet6(0x18, 0x1, 0x6) syz_emit_ethernet(0x4e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff080045f4004000670000ff5090787f000001ac1400aa4e224e23", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="b00282009078fffc0101051200000002020000000000000600000009000000001a5183ada268e3792579eb680db58eee505978d68e3bc464c703d527cc7660cf99a7fcb7d3f7dc7925de8c888ce4008c13bab48805e43cf94e30030c50a2e98d124ab875032b3c295b945213beb66f4b9396d8811fd29f9f3dae0e702de9eee5406236ccf09ac3348e293ff82657a8ed770103498b4b7659ab41a172e101a44c66b064fc07bbbd62ffb2d5f301bc250ad8c45baf01c8026b3b345a692376e17e2855a63493e8b4d2dfa538fc818106d5e470dcc51311e8dc52d8b474ea349483f875f663821cbe9cb3a3a7f50d47b34877768bb09ede02"]) recvfrom$inet6(r0, &(0x7f0000000080)=""/84, 0x54, 0x2000, &(0x7f0000000240)={0x1c, 0x18, 0x1, 0x4, "cbeb4bd97c4accd02a4590d6e84ebdaa", 0xce4}, 0x1c) bind$inet6(r0, &(0x7f0000000040)={0x1c, 0x18, 0x1, 0x2, "8000000000d5030000eb170100", 0x7}, 0x1c) 251.182227ms ago: executing program 7 (id=242): setitimer(0x0, &(0x7f00000000c0)={{0xffffffff}, {0xffffffff}}, 0x0) sysctl$vm(&(0x7f0000000000)={0x2, 0x2}, 0x2, 0x0, 0x0, &(0x7f00000001c0), 0x0) 249.753025ms ago: executing program 0 (id=243): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) (async) r0 = shmget$private(0x0, 0x2000, 0x4b0, &(0x7f0000ffe000/0x2000)=nil) shmat(r0, &(0x7f0000001000/0x3000)=nil, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$unix(r1, &(0x7f0000001300), &(0x7f0000000000)=0x2) (async, rerun: 64) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4) (rerun: 64) 248.9179ms ago: executing program 7 (id=244): munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb5219f1000b913f1, 0x0) ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9f, 0x0) ioctl$BIOCSRTIMEOUT(0xffffffffffffffff, 0x8010426d, 0x0) mknod(&(0x7f0000000180)='./bus\x00', 0x2000, 0xd01) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc5005601, &(0x7f0000000000)={0x10, 0x0, [{&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000663000/0x4000)=nil, 0xfffffffffffff801}, {&(0x7f00006ac000/0x4000)=nil, 0x0, 0x3}, {&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil}, {0x0, &(0x7f0000b1b000/0x2000)=nil}, {&(0x7f000067c000/0x10000)=nil, &(0x7f0000ffb000/0x1000)=nil}, {&(0x7f0000088000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil}, {0x0, 0x0, 0x80000000}, {&(0x7f0000727000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil}, {&(0x7f0000ad4000/0x2000)=nil, &(0x7f0000826000/0x1000)=nil}, {&(0x7f0000110000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil}, {0x0, &(0x7f000065d000/0x2000)=nil, 0xdc9}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0xfffffffffffffffc}, {0x0, &(0x7f0000ffd000/0x3000)=nil}, {&(0x7f00004c1000/0x2000)=nil}, {&(0x7f00001cf000/0x4000)=nil}, {&(0x7f0000355000/0x13000)=nil, &(0x7f0000358000/0x2000)=nil, 0x80}], './file0\x00', 0x7, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1135, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc87, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0xfffffffc, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0xfe7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}) r0 = open(&(0x7f0000000240)='./bus\x00', 0x2, 0x111) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0xffffffff, 0xb, {0x0, 0x1}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r0, 0x84946467, &(0x7f0000000000)={0x0, 0xffffffffffffffba, 0x0}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') sysctl$net_inet_tcp(0xfffffffffffffffe, 0x4, &(0x7f00000000c0)="e96d6b7ba7624f2b57677072a58ed9ef82b1f6eeba6a4c277acc767bb2c05f72a9e1a43dc4c86ad33a149c099e9f2aa166a26302e455a054ee55ab9782ba1336b0114e225fa4d2ad7d8e874543493559d45410257422f5374306fcbc79d580b9050000000c2c7515a314d1fc0287142d6196768e000000000000c0e37a2db7aa573034598bca1a88decc20b0b6668332ef6329b37d56a0949711882e3f6769723397453f0a4eb35d88817b65f702072b43776637137a3ecfaffc0b7f6a0a28dd341a7ece45f1b604b8e79c680df60d49e8ac8893ed782bdd6371ca7b76f3eec022752419b1939c", &(0x7f0000000080)=0xffffffffffffff6d, 0x0, 0x0) sysctl$kern(&(0x7f0000000100)={0x1, 0x32}, 0x2, 0x0, 0x0, &(0x7f0000001440)="02000000", 0x4) write(0xffffffffffffffff, &(0x7f00000004c0)="a8be2685e61f730fa986657ca83fa5390b28b40a9f4580dd0c37c5c5b636a6cb141ff41ea9ea17110af7ce9d5a2c4b2db8240562f5fcd59d6f4fe0467394374999e08d12abbfe6318adbe7fb631f97b409c62d1da9b1bc6b5695b44d0e84339c85e659dd5802d95b88633cb083c4df7cf0b542ba3bea59774680604765bb030b9cb17d21486a560588f20ef9880000ee900000000000000000000072bec7c93a503a24d62f247f44503d2651131df6fc05015c8858018561f135f321ae2c5d673661335651c549d851ba3863a5f66db559f11870264af2de6a4bdcb35d03c21bcce3906e5b19da38c9c8ada134a90cc48c5a4f08d912d01500", 0xffffffffffffff20) 246.969643ms ago: executing program 0 (id=245): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) syz_emit_ethernet(0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd684698fb00002c0bfe800000000000ae52000000000000bbff020000000000000000000002000001486ea31201af1cf57d46773626907e98edf1b778422e2ea0833d92cb0735fa36066a74188a3d9187aab8720fad51017d5fdb36ba0f70dc69c5e59a3cc6fe76387f7979acc0937df9f4cb2fa36d080e32f06b0f23bfe4a491ec70977af56c"]) r2 = syz_open_pts() r3 = setsid() ioctl$TIOCSCTTY(r2, 0x20007461) r4 = fcntl$getown(r2, 0x5) fcntl$setown(r1, 0x6, r3) fcntl$setown(r1, 0x6, r4) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000140)={0x2, &(0x7f0000000000)=[{0x3, 0xd, 0xff, 0x3}, {0x8, 0x1, 0x35, 0x3}]}) syz_emit_ethernet(0x1000e, &(0x7f00000015c0)=ANY=[]) 244.321457ms ago: executing program 5 (id=246): r0 = socket(0x18, 0x1, 0x0) r1 = getuid() r2 = getgid() r3 = getpgrp() r4 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000040), 0x4, 0x0) ioctl$WSMOUSEIO_GTYPE(r4, 0x40045720, &(0x7f0000000000)) kill(r3, 0x13) fstat(0xffffffffffffff9c, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstatat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r7 = setsid() fstatat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4) r9 = openat$pf(0xffffffffffffff9c, &(0x7f0000000380), 0x40000, 0x0) sendmsg$unix(r0, &(0x7f00000005c0)={&(0x7f00000000c0)=@abs={0x5, 0x0, 0x0, 0x0}, 0x8, &(0x7f0000000280)=[{&(0x7f0000000100)="5cde2196c5d33550a0be7481f837a34c6ec8d114ba024b2deac8eb3772917f5b74d346b04332d0bcc3bfa4c5ff9b8ed8d5b3b4c5366131b828f2682177d27d339f39b55ff26e29ce05c37dbe28c5a936e43e3692100e5548e29cfcf6ce6775eecbb6570b51a2e31987be9655c9060681617f29", 0x73}, {&(0x7f0000000180)="c0b94fcb233e72253213ff713db9aff931463fe142711f7ed02efcf13888872df08acc", 0x23}, {&(0x7f00000001c0)="293614f8343a8431448bc22896b00206b8100584a7a7651f08c546ba74672ae18c99ff2bb9f0d7f24c24e14fb382c11ae101468a935ace3ed4e8a70e58f68b74c627afa0e9b3b0", 0x47}, {&(0x7f0000000240)}], 0x4, &(0x7f0000000740)=[@rights={0x20, 0xffff, 0x1, [r0, r0, r0, r0, r0]}, @cred={0x18, 0xffff, 0x0, 0x0, r1, r2}, @cred={0x18, 0xffff, 0x0, r3, r5, r6}, @rights={0x1c, 0xffff, 0x1, [r0, r0, r0, r9]}, @cred={0x18, 0xffff, 0x0, r7, r8, 0xffffffffffffffff}], 0x84, 0x2}, 0x408) ioctl$WSMUXIO_REMOVE_DEVICE(0xffffffffffffffff, 0x80085762, &(0x7f0000000040)={0x1}) openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) unlinkat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0) r10 = socket(0x18, 0xc003, 0x3a) setsockopt(r10, 0x29, 0x6c, &(0x7f0000000040), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r10, 0x29, 0x66, &(0x7f00000003c0)={0x0, 0x1, 0x10, 0x3}, 0xc) ioctl$WSMOUSEIO_GTYPE(0xffffffffffffff9c, 0x40045720, &(0x7f0000000240)) setsockopt$inet6_MRT6_ADD_MIF(r10, 0x29, 0x66, &(0x7f0000000080)={0x3, 0x1, 0x0, 0x3566, 0x4}, 0xc) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$WSMOUSEIO_SCALIBCOORDS(r4, 0x81205724, &(0x7f0000000600)={0xfffff14c, 0x4, 0x1, 0x4, 0x1, 0x7ff, 0x3, 0x10, [{0x0, 0xfff, 0xb08, 0x400}, {0x1, 0x9, 0xe, 0x3ff}, {0x0, 0x4, 0x7, 0xfffffff7}, {0x8, 0x400, 0xfff, 0x6}, {0x7, 0x6, 0x9, 0x6}, {0x2, 0x10, 0x0, 0x7}, {0x3ff, 0x400, 0x184, 0x4}, {0x6, 0x8, 0x8000, 0x11c}, {0x7, 0x0, 0x4, 0x40}, {0x2, 0xd, 0x2, 0x55b}, {0xfffff801, 0x5, 0x400, 0x7f}, {0xfffffffc, 0x7, 0x1ff, 0x7}, {0x8, 0xfe43, 0xffff, 0x7fff}, {0x90000, 0x1, 0x6, 0x1}, {0xfffffffe, 0x8000, 0x4, 0xe}, {0x5, 0x7, 0xf221, 0x222b}]}) sysctl$vm_swapencrypt(&(0x7f0000000000)={0x6, 0xb, 0x2}, 0x5, &(0x7f0000000500), 0x0, 0x0, 0x20) setsockopt(r0, 0x1000000029, 0x35, &(0x7f0000000040)="03000000", 0x4) 242.162506ms ago: executing program 7 (id=247): r0 = openat$klog(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000040)=""/4096, 0x1000}, {&(0x7f0000001040)=""/187, 0xbb}, {&(0x7f0000001100)=""/12, 0xc}, {&(0x7f0000001140)=""/12, 0xc}, {&(0x7f0000001180)=""/6, 0x6}], 0x5, 0x0) r1 = openat$dri(0xffffffffffffff9c, &(0x7f0000001240)='/dev/dri/renderD128\x00', 0x8, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000001280)={0x800, 0x8, r0}) ioctl$FIONREAD(r2, 0x4004667f, &(0x7f00000012c0)) sendto$inet6(r2, &(0x7f0000001300)="b0df3f2a9d134b1455303a1af2900a42de790f1233433989a3f59f4a37206f9161dedcdcdff55e3b75f2f5bd235dfd05543b43a573f993435ce64c52e5a06f22ef400375da5eef3648bbfcf487bb02c8677bee8585570a2b88b17a39d27476a6a65136e1f77e0aca0a8a98395b6410599339b3fd35be5854ebad7c5c20705eba54c09dbfa79020e8a93b16240dc94648f759edea53552387d2f40f92fb96b3f0871007441b014033d8241ef6b59408d15fd9131242718a0de78e4bc49ceb413bc7fd3ab66ae19cb30c664da35175711b378975b05a", 0xd5, 0x0, &(0x7f0000001400)={0x1c, 0x18, 0x0, 0x7ff, "870e8d10f181c7155430fcf79dc79164", 0x10}, 0x1c) closefrom(r2) r3 = openat$pf(0xffffffffffffff9c, &(0x7f0000001440), 0x0, 0x0) r4 = semget$private(0x0, 0x4, 0x20) r5 = getuid() getsockopt$sock_cred(r2, 0xffff, 0x1022, &(0x7f0000001480)={0x0, 0x0, 0x0}, &(0x7f00000014c0)=0xc) semctl$IPC_SET(r4, 0x0, 0x1, &(0x7f0000001500)={{0xffffffffffffffff, 0xffffffffffffffff, r5, r7, 0x18a, 0x0, 0x0, 0x0, 0x11ad}, 0x0, 0x5696, 0x0, 0x0, 0x5, 0x0, 0x1}) r8 = openat$null(0xffffffffffffff9c, &(0x7f0000001580), 0x8, 0x0) r9 = fcntl$dupfd(r3, 0x0, r2) pipe(&(0x7f00000015c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r8, 0xc01064c7, &(0x7f0000001640)={0x1, 0x0, &(0x7f0000001600)=[0x0]}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r9, 0xc00464c9, &(0x7f0000001680)={r12}) ioctl$FIOASYNC(r11, 0x8004667d, &(0x7f00000016c0)=0x4) ioctl$DRM_IOCTL_MODE_GET_LEASE(r11, 0xc01064c8, &(0x7f0000001740)={0x1, 0x0, &(0x7f0000001700)=[0x0]}) ioctl$DRM_IOCTL_MODE_DIRTYFB(r11, 0xc01864b1, &(0x7f00000017c0)={0x0, 0x1, 0x401, 0x4, &(0x7f0000001780)=[{0x6, 0xdc5e, 0x6, 0x8}, {0x100, 0x6, 0x92, 0x1}, {0xf5d6, 0x5, 0x2, 0x7}, {0xe, 0x8, 0x1, 0x9}]}) setsockopt$inet6_MRT6_DEL_MFC(r9, 0x29, 0x69, &(0x7f0000001800)={{0x1c, 0x18, 0x0, 0x0, "7514e8ec512ce057652c4d3b684e7536", 0x81}, {0x1c, 0x18, 0x0, 0x61, "6d6d24612e7a82f035f8938eeeecae64"}, 0x6, [0x4, 0x8, 0x9, 0xa, 0x5, 0x7, 0x82b4, 0x2]}, 0x5c) ktrace(&(0x7f0000001880)='./file0\x00', 0x2, 0x2000, r6) ioctl$DIOCXBEGIN(r8, 0xc0104451, &(0x7f0000002900)={0x4, 0x7, &(0x7f00000018c0)=[{0x0, './file0\x00', 0xef}, {0x1, './file0\x00', 0x68}, {0x0, './file1\x00', 0x2}, {0x0, './file0\x00', 0x9}]}) write(r10, &(0x7f0000002940)="63503190f73d5884fdf3273cee657b969c626598683d7d773e15cf491ccb11de35d5ed55b6e75dc866c9b78173de6dbfd3de020aeba5b3227c1892cbe226f89bc5b32c383baeaac30e14e16a3ee303a925c72a6f7ae1c04cf2fe4e179611ebf23380f472e58d8434962fba80bad6ee9791b885e9e0f3c91493dc9b4e3de968bc8bd9cd8b0b2f8315f7b62143", 0x8c) semctl$GETZCNT(r4, 0x2, 0x7, &(0x7f0000002a00)=""/50) pipe(&(0x7f0000002a40)) r13 = dup2(r2, r2) ioctl$TIOCSTOP(r13, 0x2000746f) ioctl$FIOGETOWN(r13, 0x4004667b, &(0x7f0000002a80)) ioctl$SPKRTUNE(0xffffffffffffff9c, 0x20005302, &(0x7f0000002ac0)={0x53f6, 0xdd}) 0s ago: executing program 32 (id=245): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) syz_emit_ethernet(0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd684698fb00002c0bfe800000000000ae52000000000000bbff020000000000000000000002000001486ea31201af1cf57d46773626907e98edf1b778422e2ea0833d92cb0735fa36066a74188a3d9187aab8720fad51017d5fdb36ba0f70dc69c5e59a3cc6fe76387f7979acc0937df9f4cb2fa36d080e32f06b0f23bfe4a491ec70977af56c"]) r2 = syz_open_pts() r3 = setsid() ioctl$TIOCSCTTY(r2, 0x20007461) r4 = fcntl$getown(r2, 0x5) fcntl$setown(r1, 0x6, r3) fcntl$setown(r1, 0x6, r4) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000140)={0x2, &(0x7f0000000000)=[{0x3, 0xd, 0xff, 0x3}, {0x8, 0x1, 0x35, 0x3}]}) syz_emit_ethernet(0x1000e, &(0x7f00000015c0)=ANY=[]) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.21' (ED25519) to the list of known hosts. pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error uvm_fault(0xffffffff83aa2070, 0xffff800028d92004, 0, 1) -> d kernel: page fault trap, code=0 Stopped at ufs_readdir+0x26e: movzwl 0x4(%r14),%ebx TID PID UID PRFLAGS PFLAGS CPU COMMAND *512397 15938 0 0x2 0 0 syz-executor ufs_readdir(ffff80002a7ef1e0) at ufs_readdir+0x26e VOP_READDIR(fffffd8066121d88,ffff80002a7ef268,fffffd8007ffd6e8,ffff80002a7ef2ac) at VOP_READDIR+0x125 sys_getdents(ffff80002a7674d0,ffff80002a7ef3f0,ffff80002a7ef340) at sys_getdents+0x2dd syscall(ffff80002a7ef3f0) at syscall+0x962 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7915a80ec2d0, count: 10 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb> ddb> set $lines = 0 ddb> set $maxwidth = 0 ddb> show panic *cpu0: uvm_fault(0xffffffff83aa2070, 0xffff800028d92004, 0, 1) -> d ddb> trace ufs_readdir(ffff80002a7ef1e0) at ufs_readdir+0x26e VOP_READDIR(fffffd8066121d88,ffff80002a7ef268,fffffd8007ffd6e8,ffff80002a7ef2ac) at VOP_READDIR+0x125 sys_getdents(ffff80002a7674d0,ffff80002a7ef3f0,ffff80002a7ef340) at sys_getdents+0x2dd syscall(ffff80002a7ef3f0) at syscall+0x962 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7915a80ec2d0, count: -5 ddb> show registers rdi 0x200 rsi 0x800 rbp 0xffff80002a7ef1d0 rbx 0x200 rdx 0 rcx 0 rax 0xffff800028d92200 r8 0xffffffffffffffff r9 0x3 r10 0x67660579521a28a9 r11 0xfe68abc0bed5e494 r12 0 r13 0xffff80002a7ef268 r14 0xffff800028d92000 r15 0xffff800028d92008 rip 0xffffffff8271aede ufs_readdir+0x26e cs 0x8 rflags 0x10283 __ALIGN_SIZE+0xf283 rsp 0xffff80002a7ef020 ss 0x10 ufs_readdir+0x26e: movzwl 0x4(%r14),%ebx ddb> show proc PROC (syz-executor) tid=512397 pid=15938 tcnt=1 stat=onproc flags process=2 proc=0 runpri=50, usrpri=50, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff80002a766010,0xffff80002a767778 process=0xffff80002a79c010 user=0xffff80002a7ea000, vmspace=0xfffffd807ec5ea10 estcpu=35, cpticks=5, pctcpu=0.0, user=0, sys=5, intr=0 ddb> ps PID TID PPID UID S FLAGS WAIT COMMAND 16861 312406 33865 0 3 0x80 fsleep syz-executor 16861 327914 33865 0 3 0x4000080 fifor syz-executor 62337 246165 33484 0 3 0x80 fsleep syz-executor 62337 426836 33484 0 3 0x4000080 kqsel syz-executor 27501 49098 55512 0 3 0x80 fsleep syz-executor 27501 236021 55512 0 3 0x4000080 kqread syz-executor 33865 262367 74354 0 3 0x82 nanoslp syz-executor 55512 100987 74354 0 3 0x82 nanoslp syz-executor 33484 73855 74354 0 2 0x3 syz-executor *15938 512397 74354 0 7 0x2 syz-executor 74354 405311 69073 0 3 0x82 wait syz-executor 69073 361711 8871 0 3 0x10008a sigsusp ksh 8871 325571 17818 0 3 0x98 kqread sshd-session 17818 309733 1964 0 3 0x92 kqread sshd-session 93786 327125 1 0 3 0x100083 ttyin getty 1964 365884 1 0 3 0x88 kqread sshd 56431 13311 68510 73 3 0x1100090 kqread syslogd 68510 353443 1 0 3 0x100082 sbwait syslogd 72790 310732 1 0 3 0x100080 kqread resolvd 73922 297184 62425 77 3 0x100092 kqread dhcpleased 40281 39950 62425 77 3 0x100092 kqread dhcpleased 62425 128655 1 0 3 0x80 kqread dhcpleased 5798 149691 0 0 3 0x14200 bored smr 52374 335202 0 0 2 0x14200 zerothread 87850 342887 0 0 3 0x14200 aiodoned aiodoned 3502 109001 0 0 3 0x14200 syncer update 90558 226464 0 0 3 0x14200 cleaner cleaner 38451 408475 0 0 3 0x14200 reaper reaper 2309 362995 0 0 3 0x14200 pgdaemon pagedaemon 55436 6825 0 0 3 0x14200 bored viomb 95377 499364 0 0 3 0x40014200 acpi0 acpi0 20265 469657 0 0 3 0x14200 bored softnet0 2359 70671 0 0 3 0x14200 smrbar systqmp 50880 391357 0 0 3 0x14200 bored systq 73302 242227 0 0 3 0x40014200 tmoslp softclock 40785 102592 0 0 3 0x40014200 idle0 1 75200 0 0 3 0x80082 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb> show all locks No such command ddb> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 11039 12168K 12405K 166960K 12392 0 pcb 17 12K 12K 166960K 66 0 rtable 215 7K 8K 166960K 393 0 pf 29 12K 14K 166960K 64 0 ifaddr 36 6K 7K 166960K 62 0 ifgroup 46 2K 2K 166960K 89 0 sysctl 1 1K 9K 166960K 6 0 counters 32 17K 18K 166960K 55 0 ioctlops 0 0K 4K 166960K 128 0 iov 0 0K 17K 166960K 12 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1302 82K 82K 166960K 1598 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 5K 166960K 7 0 VM map 2 1K 1K 166960K 2 0 sem 10 0K 1K 166960K 17 0 dirhash 12 2K 2K 166960K 18 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 12 41K 93K 166960K 375 0 sigio 0 0K 0K 166960K 10 0 proc 60 59K 108K 166960K 512 0 subproc 63 3K 4K 166960K 72 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 22 0 in_multi 83 6K 7K 166960K 107 0 ether_multi 1 0K 0K 166960K 1 0 mrt 0 0K 0K 166960K 14 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 79 360K 360K 166960K 79 0 exec 0 0K 1K 166960K 385 0 fusefs mount 1 32K 32K 166960K 1 0 pfkey data 0 0K 0K 166960K 1 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 174 133K 158K 166960K 5030 0 UVM aobj 12 2K 2K 166960K 13 0 pinsyscall 33 66K 96K 166960K 1477 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 0K 166960K 13 0 NDP 10 0K 2K 166960K 39 0 temp 40 9108K 9124K 166960K 21435 0 kqueue 14 22K 28K 166960K 76 0 SYN cache 2 16K 16K 166960K 2 0 ddb> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle rtpcb 120 48 0 45 1 0 1 1 0 8 0 rtentry 136 117 0 24 4 0 4 4 0 8 0 unpcb 144 141 0 124 1 0 1 1 0 8 0 syncache 336 6 0 6 2 1 1 1 0 8 1 tcpcb 736 54 0 50 1 0 1 1 0 8 0 arp 96 18 0 2 1 0 1 1 0 8 0 ipq 40 2 0 0 1 0 1 1 0 8 0 ipqe 40 3 0 1 1 0 1 1 0 8 0 inpcb 328 224 0 217 3 1 2 2 0 8 1 ip6q 72 2 0 0 1 0 1 1 0 8 0 ip6af 40 3 0 0 1 0 1 1 0 8 0 nd6 112 25 0 5 1 0 1 1 0 8 0 pkpcb 40 4 0 4 2 1 1 1 0 8 1 kcovpl 48 8 0 1 1 0 1 1 0 8 0 ppxss 1072 17 0 17 2 1 1 1 0 8 1 pppxif 1416 7 0 7 1 0 1 1 0 8 1 pfstitem 24 2 0 0 1 0 1 1 0 8 0 pfstkey 128 2 0 0 1 0 1 1 0 8 0 pfstate 384 1 0 0 1 0 1 1 0 8 0 pfrule 1360 1 0 1 1 0 1 1 0 8 1 art_heap8 4096 2 0 0 2 0 2 2 0 8 0 art_heap4 256 478 0 46 29 0 29 29 0 8 0 art_table 40 480 0 46 5 0 5 5 0 8 0 art_node 32 117 0 32 1 0 1 1 0 8 0 sysvmsgpl 40 5 0 2 1 0 1 1 0 8 0 semapl 72 14 0 6 1 0 1 1 0 8 0 shmpl 112 10 0 1 1 0 1 1 0 8 0 dirhash 1024 21 0 4 3 0 3 3 0 8 0 dino2pl 256 2076 0 618 92 0 92 92 0 8 0 ffsino 256 2077 0 619 92 0 92 92 0 8 0 nchpl 144 2610 0 916 64 0 64 64 0 8 0 rtmask 32 3 0 3 1 0 1 1 0 8 1 vnodes 216 2258 0 0 126 0 126 126 0 8 0 namei 1024 7880 0 7880 3 2 1 2 0 8 1 kstatmem 264 47 0 26 2 0 2 2 0 8 0 scsiplug 72 1 0 1 1 1 0 1 0 8 0 scxspl 216 15415 0 15415 5 4 1 5 1 8 1 plimitpl 152 56 0 40 1 0 1 1 0 8 0 sigapl 424 670 0 632 6 1 5 6 0 8 0 knotepl 120 10658 0 10611 10 0 10 10 0 8 8 kqueuepl 184 89 0 78 1 0 1 1 0 8 0 pipepl 304 232 0 205 10 0 10 10 0 8 7 fdescpl 448 657 0 633 5 1 4 5 0 8 0 filepl 120 3206 0 3015 15 0 15 15 0 8 7 lockfpl 104 96 0 93 1 0 1 1 0 8 0 lockfspl 48 44 0 41 1 0 1 1 0 8 0 sessionpl 144 31 0 23 1 0 1 1 0 8 0 pgrppl 48 41 0 25 1 0 1 1 0 8 0 ucredpl 104 525 0 514 1 0 1 1 0 8 0 zombiepl 144 726 0 722 3 2 1 1 0 8 0 processpl 1152 670 0 632 4 0 4 4 0 8 0 procpl 664 1036 0 995 5 0 5 5 0 8 0 sosppl 176 1 0 1 1 0 1 1 0 8 1 sockpl 552 427 0 400 4 0 4 4 0 8 2 mcl64k 65536 16 0 15 2 1 1 1 0 8 0 mcl16k 16384 4 0 4 2 1 1 1 0 8 1 mcl9k128 9344 1 0 1 1 0 1 1 0 8 1 mcl8k 8192 8 0 8 2 1 1 1 0 8 1 mcl4k 4096 2829 0 2767 16 8 8 16 0 8 0 mcl2k 2048 292 0 291 3 0 3 3 0 8 2 mtagpl 96 5 0 5 1 0 1 1 0 8 1 mbufpl 256 6667 0 6535 15 1 14 14 0 8 1 bufpl 280 6402 0 186 445 0 445 445 0 8 0 anonpl 24 140198 0 137433 79 35 44 44 0 186 15 amapchunkpl 152 16719 0 16393 44 11 33 33 0 158 15 amappl16 200 3132 0 3111 28 16 12 15 0 8 8 amappl15 192 6 0 6 1 1 0 1 0 8 0 amappl14 184 411 0 410 1 0 1 1 0 8 0 amappl13 176 150 0 140 1 0 1 1 0 8 0 amappl12 168 893 0 870 2 0 2 2 0 8 0 amappl11 160 5 0 5 1 1 0 1 0 8 0 amappl10 152 58 0 48 1 0 1 1 0 8 0 amappl9 144 271 0 271 1 1 0 1 0 8 0 amappl8 136 112 0 111 1 0 1 1 0 8 0 amappl7 128 146 0 133 1 0 1 1 0 8 0 amappl6 120 149 0 148 1 0 1 1 0 8 0 amappl5 112 94 0 85 1 0 1 1 0 8 0 amappl4 104 271 0 256 1 0 1 1 0 8 0 amappl3 96 2961 0 2884 4 0 4 4 0 8 0 amappl2 88 524 0 471 2 0 2 2 0 8 0 amappl1 80 11009 0 10484 13 0 13 13 0 8 1 amappl 88 4299 0 4185 5 1 4 5 0 92 0 uvmvnodes 80 114 0 0 3 0 3 3 0 8 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 9 0 9 2 1 1 1 0 8 1 dma16 16 20 0 19 1 0 1 1 0 8 0 aobjpl 72 12 0 1 1 0 1 1 0 8 0 uaddrrnd 24 657 0 633 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 657 0 633 1 0 1 1 0 8 0 vmmpekpl 168 7299 0 7260 2 0 2 2 0 8 0 vmmpepl 168 51461 0 49962 95 6 89 89 0 357 8 vmsppl 368 656 0 633 4 1 3 4 0 8 0 rwobjpl 40 17839 0 16943 15 2 13 13 0 8 1 pdppl 4096 1320 0 1266 100 34 66 80 0 8 12 pvpl 32 337166 0 329222 174 52 122 122 0 265 34 pmappl 216 656 0 633 3 0 3 3 0 8 0 extentpl 40 45 0 27 1 0 1 1 0 8 0 phpool 112 377 0 53 10 0 10 10 0 8 0 ddb> machine ddbcpu 0 No such command ddb> trace ufs_readdir(ffff80002a7ef1e0) at ufs_readdir+0x26e VOP_READDIR(fffffd8066121d88,ffff80002a7ef268,fffffd8007ffd6e8,ffff80002a7ef2ac) at VOP_READDIR+0x125 sys_getdents(ffff80002a7674d0,ffff80002a7ef3f0,ffff80002a7ef340) at sys_getdents+0x2dd syscall(ffff80002a7ef3f0) at syscall+0x962 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7915a80ec2d0, count: -5 ddb> machine ddbcpu 1 No such command ddb> trace ufs_readdir(ffff80002a7ef1e0) at ufs_readdir+0x26e VOP_READDIR(fffffd8066121d88,ffff80002a7ef268,fffffd8007ffd6e8,ffff80002a7ef2ac) at VOP_READDIR+0x125 sys_getdents(ffff80002a7674d0,ffff80002a7ef3f0,ffff80002a7ef340) at sys_getdents+0x2dd syscall(ffff80002a7ef3f0) at syscall+0x962 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7915a80ec2d0, count: -5