last executing test programs: 6.339072855s ago: executing program 5: r0 = accept$unix(0xffffffffffffff9c, &(0x7f0000000080)=@file={0x0, ""/64}, &(0x7f0000000000)=0x42) ioctl$VMM_IOC_RUN(0xffffffffffffffff, 0xc0205602, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)={{}, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x1, 0x0, 0x0, 0x375e6fd1, 0x0, 0x4000000000000000], [], [], [0x0, 0x4], [{0x2}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2}]}}}) setrlimit(0x8, &(0x7f0000000980)={0xb, 0x200400000000062}) r1 = syz_open_pts() writev(r1, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) write(r1, &(0x7f00000006c0)="92", 0x1) accept(r0, 0x0, &(0x7f0000000100)) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000180)={'tap', 0x0}) writev(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000000)={@broadcast, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00o3', 0x30, 0x3a, 0x0, @rand_addr="8a211dd1450021b07f5a1957de7400", @local={0xfe, 0x80, '\x00', 0x0}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, '\x00', 0x0, 0x3a, 0x0, @local={0xfe, 0x80, '\x00', 0x0}, @ipv4}}}}}}}) fcntl$lock(0xffffffffffffffff, 0x9, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x10000}) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x1}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r3 = socket(0x18, 0x1, 0x0) setsockopt(r3, 0x1000000029, 0xc, &(0x7f0000000480)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) setsockopt(r3, 0x1000000029, 0xc, &(0x7f0000000040)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) setsockopt(r3, 0x1000000029, 0xd, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) getppid() fcntl$lock(0xffffffffffffffff, 0x0, 0x0) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x7fffffff, 0x0, {0x0, 0x3}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r4 = socket(0x18, 0x1, 0x0) setsockopt(r4, 0x1000000029, 0xc, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) 6.230340761s ago: executing program 1: syz_emit_ethernet(0x1bb, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaab9aaaabb86dd6038d9d901853a0000000000000000000000000000000000ff0200000000000000000000000000018c"]) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$BIOCGRTIMEOUT(r0, 0x4010426e, &(0x7f00000000c0)) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000080)={'tap', 0x0}) syz_open_pts() syz_open_pts() socket(0x2, 0x1, 0x0) socket(0x2, 0x2, 0x0) select(0x40, &(0x7f0000000040)={0xfd}, 0x0, 0x0, 0x0) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000180)={0x3, &(0x7f0000000040)=[{0x25}, {0x1}, {0x6}]}) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[]) syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0) 6.228264201s ago: executing program 0: mknod(&(0x7f0000000000)='./file0\x00', 0x100, 0x6380) r0 = socket$inet(0x2, 0x2, 0x7f) getsockname$inet(r0, &(0x7f0000000040), &(0x7f00000000c0)=0xc) r1 = open(&(0x7f0000000080)='./file0\x00', 0x70e, 0x0) sysctl$kern(&(0x7f00000000c0)={0x1, 0x47}, 0x4, &(0x7f0000000000)="71f91e3471ac0058bc5a91501d942400b5e1a0757cb9af769c7afec37082", &(0x7f0000000080)=0x13, 0x0, 0x2e) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) getpeername(r0, &(0x7f0000000100)=@in, &(0x7f0000000140)=0xc) r2 = socket(0x18, 0x2, 0x0) setsockopt(r2, 0x1000000000029, 0xa, &(0x7f0000000040)='\x00\x00\x00\x00', 0x4) setsockopt(r0, 0x2b, 0x8, &(0x7f0000000180)="03000000b9caebc5485762aebc317e022b055afdc4b93e17e6655e19d0737dd14e10a3cb3fc68dd3f7ab34b04de726e32a5abe9bc2c481b77356c5504a5d283f1a3a07907ddf0425762e09ca914d858789e7a7a1271f1db18cce9a683112e047f99889b3f4", 0x65) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000240)="c74e200000000000000055fa310e50f0d4b122aa1c4c8cb05a1107073b5284815861a4d53d000000009a9303b8be3085333fbd13e7ed73c5cd2db500", 0x3c) write(r3, &(0x7f0000000340), 0xd4e688a67930cd) close(r3) write(r4, &(0x7f0000000040), 0xfeea) poll(&(0x7f00000000c0)=[{r4, 0x4}], 0x1, 0x0) execve(0x0, 0x0, 0x0) writev(r1, &(0x7f0000000280)=[{0x0}], 0x1) 6.219909163s ago: executing program 7: syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[]) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) setreuid(0xee00, 0x0) r1 = open$dir(&(0x7f0000000140)='.\x00', 0x80, 0x8) r2 = getuid() fchown(r1, r2, 0xffffffffffffffff) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f0000002880)={'tap', 0x0}) ioctl$BIOCSETF(r3, 0x80104267, &(0x7f00000001c0)={0x3, &(0x7f0000000080)=[{0x40, 0xff, 0x0, 0x5}, {0x3d, 0x0, 0x0, 0x7}, {0x7}]}) r4 = getuid() mkdir(&(0x7f0000000300)='./file1\x00', 0x0) chroot(&(0x7f0000000240)='./file1\x00') r5 = open(&(0x7f00000002c0)='.\x00', 0x0, 0x0) mkdirat(r5, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) mkdirat(r5, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) unveil(&(0x7f00000004c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', &(0x7f00000000c0)='c\x00') unveil(&(0x7f00000003c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000200)='x\x00') unveil(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000300)='c\x00') setreuid(0xee00, r4) sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b100050460000000000000000010000000000000cea10500fef900000000d3357ae320b37b673039d2d236073705ae04be38", 0x32, 0x0, 0x0, 0x0) socket(0x11, 0x3, 0x0) setsockopt(0xffffffffffffffff, 0x1000000029, 0x25, &(0x7f0000000440), 0x0) syz_emit_ethernet(0x5d, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa8848"]) bind$unix(r0, &(0x7f0000000040)=@file={0xd19450564dee018c, './file0\x00'}, 0xa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000000)=@file={0xd1653077bafa0114, './file0\x00'}, 0xa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f0000000000)=@file={0xd1653077bafa0114, './file0\x00'}, 0xa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f0000000280)=@file={0xd1653077bafa0114, './file0\x00'}, 0xa) 6.195395946s ago: executing program 1: mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0x0) syz_open_pts() r0 = socket(0x18, 0x3, 0x0) setsockopt(r0, 0x1000000029, 0x37, 0x0, 0x0) connect(r0, &(0x7f0000000000)=@un=@abs={0x1, 0x0, 0x1}, 0x8) r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, 0x0) ioctl$TIOCSETAF(r1, 0x802c7416, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, "32cd8b6abdc8a5508471050000000010000407ff"}) sysctl$net_inet_ip(&(0x7f00000002c0)={0x4, 0x2, 0x0, 0x1d}, 0x4, &(0x7f0000000080)="8b", &(0x7f00000000c0)=0x1, 0x0, 0x0) 6.190055368s ago: executing program 0: mkdir(&(0x7f0000000500)='./file0\x00', 0x0) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000240)={0x3, &(0x7f0000000040)=[{0x5c}, {0x1c}, {0x8126}]}) syz_emit_ethernet(0x26, &(0x7f0000000540)=ANY=[]) chmod(&(0x7f0000000180)='./file0\x00', 0x23f) chdir(&(0x7f00000001c0)='./file0\x00') setuid(0xee01) open$dir(&(0x7f0000001240)='.\x00', 0x0, 0x0) r1 = open(0x0, 0x0, 0x2) setrlimit(0x8, &(0x7f0000000980)={0x7, 0x80000000}) r2 = syz_open_pts() close(r2) r3 = syz_open_pts() open(&(0x7f0000000040)='./file0\x00', 0xf8e, 0x0) select(0x40, &(0x7f00000006c0), &(0x7f0000000700)={0xff}, 0x0, 0x0) readv(r3, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/69, 0x45}], 0x1) close(r2) syz_open_pts() r4 = open$dir(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8, 0x21) getsockopt$SO_PEERCRED(r1, 0xffff, 0x1022, &(0x7f0000000200)={0x0, 0x0}, 0xc) fchownat(r4, &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r5, 0xffffffffffffffff, 0x8) msgget$private(0x0, 0x0) openat$bpf(0xffffffffffffff9c, 0x0, 0x0, 0x0) sysctl$vm_swapencrypt(0x0, 0x0, &(0x7f0000000140)="118bea625d95de8f92c010baed45ec4bf03ace254b57973bb6de7b1c90301e9d3b5e6fb6ffffffffffffffff76c775a2a4e0556565a830032eef776127fd247103c14ab0a1cea9b4593be484f46a02ea73e910d041c5777bd852e57d3248832b91d06fe47d126022a1654859149e9486306d2f11fb1cc826c42f81b0d114f8af4ceb029a5210bb6947464bf678ba1d64a2013131fedfe60443aa13e015b28a16ea924bf89ad45c", 0x0, 0x0, 0x0) sysctl$kern(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$WSKBDIO_SETMAP(0xffffffffffffffff, 0x8010570e, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r6 = socket(0x2, 0x4000, 0xfc) ioctl$FIONREAD(r6, 0x80286987, &(0x7f00000001c0)) 6.160280282s ago: executing program 1: r0 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000700)="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", 0x299}], 0x1) execve(0x0, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000040)={{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x2, 0x400000000000000}) r1 = socket(0x2, 0x4001, 0xfa) connect$unix(r1, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) getsockname$inet(r1, &(0x7f00000002c0), &(0x7f0000000340)=0xc) sysctl$net_inet_carp(&(0x7f0000000140)={0x4, 0x2, 0x70, 0x1}, 0x4, &(0x7f0000000180)="bfeed000", &(0x7f0000000280)=0x4, &(0x7f00000002c0), 0x0) socket(0x2, 0x0, 0x0) setrlimit(0x8, &(0x7f0000000100)={0x7}) r2 = socket$inet(0x2, 0x0, 0x0) close(0xffffffffffffffff) sendmsg$unix(0xffffffffffffffff, &(0x7f0000002a40)={&(0x7f0000000000), 0x10, 0x0}, 0x0) r3 = socket(0x2, 0x2, 0x0) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0x0, [{&(0x7f0000695000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil}, {&(0x7f0000695000/0x2000)=nil, &(0x7f0000159000/0x2000)=nil}, {&(0x7f00005fd000/0x1000)=nil, &(0x7f0000690000/0x4000)=nil, 0xfffffffffffffffc}, {&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff7000/0x3000)=nil}, {&(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x1000)=nil, 0x100000000000}, {&(0x7f00004f8000/0x2000)=nil, &(0x7f000068e000/0x12000)=nil}, {&(0x7f000004f000/0x1000)=nil, &(0x7f0000049000/0x2000)=nil}, {&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil}, {&(0x7f00004bb000/0xf000)=nil, &(0x7f0000604000/0x3000)=nil}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f00004f6000/0x3000)=nil, 0x8000000000}, {&(0x7f0000ffd000/0x3000)=nil, &(0x7f00004e6000/0x3000)=nil}, {&(0x7f000000e000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, 0x30e}, {&(0x7f00003f2000/0x2000)=nil, &(0x7f000015a000/0x1000)=nil}, {&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil}, {&(0x7f0000ff1000/0x1000)=nil, &(0x7f0000ff3000/0x2000)=nil, 0x2}], './file0\x00'}) writev(r2, &(0x7f0000000180)=[{&(0x7f0000000000)="9da8e3e9ed", 0x5}], 0x1) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r4 = socket(0x2, 0x1, 0x0) connect$unix(r4, &(0x7f0000000000), 0x10) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r5, 0x0, 0x9, &(0x7f0000000240)="ea00000100000000", 0xc) dup2(r5, r3) sendmsg$unix(0xffffffffffffffff, &(0x7f0000002a40)={0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffffffffcb4, 0x40c}, 0xe) select(0x40, &(0x7f0000000000), 0x0, 0x0, 0x0) ioctl$VMM_IOC_INFO(0xffffffffffffffff, 0x8020560b, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f0000000380)=@file={0x0, './file0\x00'}, 0xa, 0x0}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 6.019360302s ago: executing program 7: faccessat(0xffffffffffffffff, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0xd02) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) r0 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socket(0x10, 0x3, 0x40) r2 = dup(0xffffffffffffffff) listen(r2, 0x0) select(0x40, &(0x7f0000000000)={0x7fffffffffffffff}, 0x0, 0x0, 0x0) select(0x40, &(0x7f0000000080)={0xffffffffffffffff}, 0x0, 0x0, 0x0) bind$unix(r1, &(0x7f0000000040)=@file={0xd19450564dee018c, './file0\x00'}, 0xa) connect$unix(r1, &(0x7f0000000000)=@file={0xd1653077bafa0114, './file0\x00'}, 0xa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000000)=@abs={0x0, 0x0, 0x0}, 0x6) r5 = socket(0x18, 0x3, 0x0) connect$unix(r5, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) getsockname$inet(r5, &(0x7f00000000c0), &(0x7f0000000000)=0xffffffffffffff35) r6 = socket(0x18, 0x3, 0x0) connect$unix(r6, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) getsockopt(r6, 0x29, 0x2c, 0x0, 0x0) connect$unix(r3, &(0x7f0000000000)=@file={0xd1653077bafa0114, './file0\x00'}, 0xa) connect$unix(r1, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0xa) r7 = openat$bpf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$BIOCSETIF(r7, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$BIOCSETF(r7, 0x80104267, &(0x7f0000000140)={0x3, &(0x7f00000000c0)=[{0x6c}, {0x84}, {0x6}]}) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) ioctl$VNDIOCSET(r0, 0x81946467, &(0x7f0000000640)={0x0, 0x0, 0x0}) sysctl$vm(&(0x7f0000000240)={0x2, 0xb}, 0x2, 0x0, 0x0, 0x0, 0x0) 6.0182846s ago: executing program 1: socket(0x0, 0x0, 0x0) openat$bpf(0xffffffffffffff9c, 0x0, 0x0, 0x0) mknod(&(0x7f0000000300)='./file0\x00', 0x2000, 0x6da) open(0x0, 0x0, 0x0) getpeername(0xffffffffffffffff, 0x0, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, 0x0) ioctl$BIOCFLUSH(0xffffffffffffffff, 0x20004268) mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0x1604) sysctl$vfs_fuse(&(0x7f0000000340)={0xa, 0x12, 0x1}, 0x32, &(0x7f0000001680)="09018e3eb76b40e560115879a7d2dfeb1b00f4cb83c6f4fde0d795deb936c2be649e8529d1a49ee61675590c0a425536c8583e6ee24c938e395e9e9de495e8bbd4656f2ba3c3a9aec151f2e0f5aacc39640bc791f232203daee22b81691d0911c48f444ec26f5058153d0658d42abd5519fb625f4cba1df50e267aef13c87849641a2114d2157876a507e1070d432073612eab228986d182c5c6d5687d6088a13e32f9c76ed4da84faab5d206408bdcb13a53f15a83083b746c349568f365575dfabeeb86442267d83375ca49fc9", &(0x7f00000002c0)=0xce, &(0x7f0000000540)="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", 0x7fa) r0 = syz_open_pts() ioctl$TIOCSETAW(r0, 0x802c7415, &(0x7f0000000040)={0xfffffffe, 0x0, 0x83, 0xc072, "e0909c80429a030bf70100001613f6d7bc0d6e60"}) ioctl$TIOCGWINSZ(0xffffffffffffffff, 0x40087468, &(0x7f00000001c0)) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) chmod(&(0x7f00000000c0)='./file0\x00', 0x0) chdir(&(0x7f0000000140)='./file0\x00') mkdir(&(0x7f0000000280)='./file1\x00', 0x0) setreuid(0x0, 0xee01) rmdir(&(0x7f0000000040)='./file0\x00') symlink(&(0x7f0000000180)='./file1/../file0\x00', &(0x7f0000000200)='./file1/../file0\x00') setreuid(0xffffffffffffffff, 0x0) r1 = semget$private(0x0, 0x4000000009, 0x6c7) semctl$SETALL(r1, 0x0, 0x9, &(0x7f0000000240)=[0x7fff]) semop(0x0, &(0x7f00000004c0)=[{0x0, 0x80}, {0x0, 0xfff}, {0x2, 0x6, 0x800}, {0x3, 0x7fe, 0x1000}, {0x0, 0x800, 0x800}, {0x4, 0x85, 0x1000}, {0x4, 0x8ce, 0x1800}, {0x0, 0x7}, {0xffffffffffffffff, 0x9, 0x1000}, {0x6, 0x9, 0x1800}], 0xa) mkdir(&(0x7f0000000300)='./file2\x00', 0x100) r2 = socket(0x18, 0x3, 0x0) setsockopt(r2, 0x29, 0x6c, &(0x7f0000000580), 0x0) open(&(0x7f0000000480)='./file0\x00', 0x40, 0x8) semop(r1, &(0x7f0000000400), 0x0) sysctl$net_inet_ip(&(0x7f0000000080), 0x4, &(0x7f0000000140)="e33745e84d5ebfb9cc2f7fa3a7f7891721720e69dac610a4fb5e8c3e3c6e1d648a8ca6ebc70f949c442aee9dc79e2cd74f4e106f382caf01ada3bc4efb0f6bc50690e5492f4a0491b1ea3359aa5c5164ad97ac7c3aadca05fd9e9a8c0f962f5167b69cfdc8287fc34b8138340e60c404a855858ea5", &(0x7f0000000000)=0x75, 0x0, 0x0) socket(0x18, 0x1, 0xe0) 5.958866567s ago: executing program 7: r0 = accept$unix(0xffffffffffffff9c, 0x0, &(0x7f0000000000)) setsockopt(r0, 0x3, 0x81, &(0x7f0000000040)="6642cda4e2980d7504be99961f34c0031a328e64e0db4a40aff0f2", 0x1b) r1 = accept$unix(r0, 0x0, &(0x7f0000000080)) getsockopt$sock_int(r1, 0xffff, 0x1001, &(0x7f00000000c0), &(0x7f0000000100)=0x4) accept(r1, 0x0, &(0x7f0000000140)) bind(r1, &(0x7f0000000180)=@in={0x2, 0x3}, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect(r2, &(0x7f0000000200)=@in={0x2, 0x1}, 0xc) r3 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000240), 0x10000, 0x0) ioctl$WSDISPLAYIO_SETSCREEN(r3, 0x80045756, &(0x7f0000000280)=0x7) r4 = semget(0x1, 0x0, 0x206) sysctl$hw(&(0x7f00000002c0)={0x6, 0xb}, 0x2, &(0x7f0000000300)="43a28ee5a570b21fbc14b85348642029e062360f08d975c82643063cbad03bde20bc6a91265aff392148d272b70dc9c4365e462ff594f8ec61729f4bd8272a7df842a284f25364984a2cae652b0fb3316258b473f1d3f17a1b3de32027d197669ee61bcef125ecc4d852c3d0e25272d6648a6fec2f56ec0b405ecb88db4115d4a9cb0ecec6f7fbba639587e3b8e974765bfc6cef770b5d1c2431", &(0x7f00000003c0)=0x9a, &(0x7f0000000400)="0a00ff7b4415ac6ae1ff958dc563f8488a532d010549749a11720dbba90255a761dab2b1536c82549895963e739364c0d38335aa97f1773849697e91025406224147d6fdf0b567815e7ff63870f6838d785242470a8e178400da8fe62816848ae09fd18a74609ef01ff7bcafab2be2e94329bf7491918f140bba5aab93374b7105771807b0ffd4e9dfe286ea9e9f4b7d823c9140cc4b892bde81bfec5ddba1885a26a1eaaeb251e670313bad432f14c8111747be", 0xb4) semctl$GETALL(r4, 0x0, 0x6, &(0x7f00000004c0)=""/137) semctl$SETALL(r4, 0x0, 0x9, &(0x7f0000000580)=[0x2, 0x8001]) semget(0x1, 0x3, 0x300) setsockopt$sock_int(r1, 0xffff, 0x80, &(0x7f00000005c0)=0xfffffff9, 0x4) r5 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000600), 0x80, 0x0) ioctl$VMM_IOC_CREATE(r5, 0xc2585601, &(0x7f0000000640)={0x10, 0x9, [{&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x1}, {&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x100}, {&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x4}, {&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0xffffffffffff0001}, {&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0xb873}, {&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x400}, {&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x8}, {&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x9}, {&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x80000001}, {&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x8}, {&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x457}, {&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, 0xfde}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x9}, {&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, 0x100000001}, {&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x4}, {&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x400}], './file0\x00', 0x6}) ioctl$WSDISPLAYIO_DELFONT(r3, 0x8058574f, &(0x7f0000000840)={'./file0\x00', 0x7ff, 0xffff, 0x7, 0x0, 0x80000, 0x0, 0x12f, 0x2, 0x0, 0x2, 0x7}) r6 = openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f00000008c0), 0x10000, 0x0) pread(r0, &(0x7f0000000900)="229ceddc39da760e6c3b12551842ed4dfd4bcfcf79f1900856cb439ad5ce38a6bfa098d268d0baeac6d0efb7a978026a341352d2831ead196ce488d94aa2850aa3fe89304ea59a976b7d81c7d47b44b95d1bfc80155b145e353ab62f851db7822822c94b6633bc79a93765f853204762210ada69fdcc14561a242729c55608771912347b559cbb55bab6c9b5b4ac590156faec7f67e8f6dbbabde6a46c985988450be940914784dabf596c95fef5b5dd612a8633291f34860ceeacddfa35c522c0c946436cf372", 0xc7, 0x6) openat$bpf(0xffffffffffffff9c, &(0x7f0000000a00), 0x40, 0x0) semctl$GETZCNT(r4, 0x5, 0x7, &(0x7f0000000a40)=""/75) listen(r2, 0x5) utimensat(r6, &(0x7f0000000ac0)='./file0\x00', &(0x7f0000000b00)={{0x2, 0x1}, {0x9, 0x400}}, 0x2) mknod$loop(&(0x7f0000000b40)='./file0\x00', 0xc000, 0x1) ioctl$WSMUXIO_INJECTEVENT(r3, 0x80185760, &(0x7f0000000b80)={0x2, 0x100, {0xfff, 0x5}}) ioctl$TIOCCBRK(r6, 0x2000747a) mkdir(&(0x7f0000000bc0)='./file0\x00', 0x88) recvfrom(0xffffffffffffffff, &(0x7f0000000c40)=""/106, 0x6a, 0x800, &(0x7f0000000cc0)=@in={0x2, 0x3}, 0xc) 5.958524051s ago: executing program 1: syz_open_pts() r0 = socket(0x11, 0x3, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1001, &(0x7f0000000080), 0x4) geteuid() getegid() getpgrp() setgroups(0x0, 0x0) getpgrp() sendmsg$unix(r0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@cred={0x20}], 0x20}, 0x3) mprotect(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0) sysctl$kern(&(0x7f0000000000)={0x1, 0x20}, 0x2, 0x0, 0x0, &(0x7f0000001440)='\x00\x00\x00\x00', 0x4) 4.909577589s ago: executing program 6: mknod(&(0x7f0000000040)='./file0\x00', 0x1000, 0x0) openat$vnd(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) socket$inet(0x2, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$inet6(0x18, 0x0, 0x0) r0 = socket(0x18, 0x2, 0x0) setsockopt(r0, 0x1000000029, 0x28, 0x0, 0x0) getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000000100), &(0x7f0000000340)=0xc) sysctl$net_inet_ip(0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0) sysctl$net_inet_ip(&(0x7f00000001c0)={0x4, 0x2, 0x0, 0x23}, 0x4, &(0x7f0000000200), 0x0, &(0x7f00000002c0)="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", 0xfa) openat$bpf(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000440)={0x4, &(0x7f0000000400)=[{0x6656, 0x3f, 0x4, 0x1}, {0x3, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x7}, {0xffff, 0x7, 0x0, 0x5}]}) sysctl$net_inet_ip(&(0x7f0000000480)={0x4, 0x2, 0x0, 0x15}, 0x4, 0x0, &(0x7f0000000500), &(0x7f0000000540), 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000180), &(0x7f0000000640)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000680), &(0x7f00000006c0)=0xc) rename(0x0, 0x0) sysctl$net_inet_ip(0x0, 0x0, 0x0, &(0x7f0000000880), &(0x7f00000008c0)="069f6bc1d09997f2cc856d4ccbf48bbc7de6407d8b4c5fd3a8d264b143a8daab0f17161364d7a342c691e59d", 0x2c) getpid() r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$TIOCSDTR(r2, 0x20007479) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000040)={'tap', 0x0}) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f00000000c0)={0x3, &(0x7f0000000080)=[{0xb1, 0x0, 0x0, 0x1}, {0x2}, {0xa6, 0x0, 0x0, 0xfffffffd}]}) getsockname$inet(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000000)=0xffffffffffffff35) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_emit_ethernet(0x17a, &(0x7f00000004c0)=ANY=[]) 4.900004618s ago: executing program 0: r0 = socket(0x18, 0x1, 0x0) shutdown(r0, 0x0) listen(r0, 0x0) socket(0x20, 0x4, 0xf7) ioctl$WSMOUSEIO_GETPARAMS(0xffffffffffffffff, 0x80105727, &(0x7f0000000380)={&(0x7f0000000340)}) recvmmsg(r0, &(0x7f00000002c0)={0x0}, 0x10, 0x0, 0x0) accept$unix(r0, 0x0, 0x0) 2.805774219s ago: executing program 1: r0 = syz_open_pts() ioctl$TIOCSTAT(r0, 0x20007465, 0x0) ioctl$TIOCSETD(r0, 0x8004741b, &(0x7f0000000180)=0x8) ioctl$TIOCSETD(r0, 0x8004741b, &(0x7f00000000c0)=0x8) socket(0x18, 0x3, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0xa) faccessat(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) r2 = socket(0x18, 0x1, 0x0) setsockopt(r2, 0x1000000000029, 0x26, 0x0, 0x64) getsockopt(r1, 0x0, 0x23, 0x0, 0x0) mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0xd02) openat$bpf(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./bus\x00', 0x0, 0x10) r3 = open(&(0x7f0000000040)='./file0\x00', 0x40, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) chroot(&(0x7f0000000000)='./file0\x00') unveil(&(0x7f0000000280)='.\x00', &(0x7f00000002c0)='r\x00') chdir(&(0x7f00000000c0)='./file0\x00') unveil(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='x\x00') open$dir(&(0x7f00000003c0)='.\x00', 0x400004000011830a, 0x0) socket(0x18, 0x5, 0x4) connect$unix(r3, &(0x7f0000000100)=@file={0x1, './bus\x00'}, 0x8) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000040)) r4 = socket$inet(0x2, 0x2, 0x0) r5 = socket(0x18, 0x2, 0x0) setsockopt$sock_int(r5, 0xffff, 0x1023, &(0x7f0000000000), 0x4) getsockopt$sock_int(r4, 0xffff, 0x0, 0x0, 0x0) socket(0x10, 0x5, 0x0) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x7fff7fff, 0x0, {0x0, 0x8}}) 2.804886114s ago: executing program 5: openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = socket(0x10, 0x2, 0x0) close(r0) r1 = socket(0x800000018, 0x3, 0x0) getsockname(r1, &(0x7f00000001c0)=@in, &(0x7f0000000200)=0xc) setsockopt$sock_int(r1, 0xffff, 0x1000, &(0x7f0000000000)=0x7, 0x4) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) setsockopt$inet_opts(r2, 0x0, 0x1, &(0x7f0000000140)="4899c01a218515caa870b620256ee051dd0090af8a0f4e6dd2b9d4ebbc052a1174a0bb281bb64a5a962ca675f83e2913595aade9f66a6452a5bbcea9e018624f5a2af5bd8549893d7f7e61e99d1117b723c2a5571ee134dcbd032a0cdb6d1b7b65f66db1409518f7", 0x68) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{}, {0x4, 0x0, 0x0, 0xfffffffc}]}) r3 = socket(0x11, 0x3, 0x0) setsockopt$sock_int(r3, 0xffff, 0x1002, &(0x7f00000000c0), 0x4) ioctl$TIOCMBIS(0xffffffffffffffff, 0x8004746c, 0x0) shutdown(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x66, &(0x7f00000002c0)=ANY=[@ANYBLOB]) syz_emit_ethernet(0x8c, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6000000000562c00000000000000000000000000000000000000000000000800001a000000000004010090780000"]) setrlimit(0x0, &(0x7f0000000000)={0x8000000000000001, 0xffffffffffffffff}) getrlimit(0x6, &(0x7f0000000140)) ftruncate(0xffffffffffffffff, 0x20008002) open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000100)='./file0\x00', 0x70e, 0x0) r5 = socket(0x11, 0x3, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="fffffffffffffff7ffffffff86dd60006f3300383a008a211dd1450021b07f5a1957de740000fe8000000000000000000000000000aa02009078000000006000000000001100fe8000000000000000000000000000aa00000000000000000000ffff00000000c8d6c009a0c4c49e"]) sendto$unix(r5, &(0x7f0000000000)="b1", 0x1, 0x0, 0x0, 0x0) write(r4, &(0x7f00000001c0)="2ca30447ffd44a54e948ddce89533bf1c5", 0x11) close(r3) getsockname$unix(r4, &(0x7f0000000200)=@file={0x0, ""/8}, &(0x7f0000000240)=0xa) r6 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETIF(r6, 0x8020426c, &(0x7f0000002880)={'tap', 0x0}) open$dir(&(0x7f0000000000)='./file0\x00', 0xf02, 0x0) 2.798639204s ago: executing program 7: r0 = socket(0x2, 0x4, 0x1) getpeername$unix(r0, &(0x7f0000000000)=@file={0x0, ""/503}, &(0x7f0000000200)=0x1f9) recvfrom(r0, &(0x7f0000000240)=""/163, 0xa3, 0x802, &(0x7f0000000300)=@in6={0x18, 0x3, 0xa96, 0x6}, 0xc) r1 = socket$inet(0x2, 0x5, 0x33) getsockname$inet(r1, &(0x7f0000000340), &(0x7f0000000380)=0xc) getsockname$inet(r1, &(0x7f00000003c0), &(0x7f0000000400)=0xc) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCGFLAGS(r2, 0x4004745d, &(0x7f0000000480)) pwritev(r0, &(0x7f0000000640)=[{&(0x7f00000004c0)="b76550b6fe123495031981ded49e3e0e8eed5752928146f5ed7cb167b0f91db8a4d841729057404e79e23b02d315c3350a4f3da96c9b90b4207d81c0d1a74169ba630474283d4d897f", 0x49}, {&(0x7f0000000540)="40f3831b795d36fb36888d857986ebe4332a37574a852d960638b6c848757885de3330238b64cfeba4f33e7b30a8bc308538ab1cd7911216e39860144fd60dc1f28883d71645d63ad9be4884d4bc23ac73dcdde285351232a67182636ec7197e65af2b7dbd5d5f56992aeec596662ce5d76b7bd7c5fd831bc8808badee0007be4bbab14dce2f2ba88dbe03d0518cbc7cfa0a821524aa64f1b543f06850717e4911d8dab25b8e3f3afdd07b01d6632c2ebebac047441ee524a6e46fd05c4f6a5910010ca5fe987ab437ee74895a0878ca70", 0xd1}], 0x2, 0x7) r3 = semget$private(0x0, 0x4, 0x322) semctl$SETALL(r3, 0x0, 0x9, &(0x7f0000000680)=[0x8000]) ioctl$BIOCSDIRFILT(r2, 0x8004427d, &(0x7f00000006c0)=0x4) r4 = semget(0x3, 0x4, 0x200) semctl$IPC_RMID(r4, 0x0, 0x0) unveil(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)='x\x00') pipe2(&(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}, 0x10008) faccessat(r5, &(0x7f00000007c0)='./file0\x00', 0x10, 0x2) syz_emit_ethernet(0x14f, &(0x7f0000000800)={@random="d885968fdbeb", @remote, [], {@ipv4={0x800, {{0x11, 0x4, 0x1, 0x5, 0x141, 0x64, 0x2, 0x20, 0x3b, 0x0, @remote={0xac, 0x14, 0x0}, @empty, {[@generic={0x88, 0x4, "0aab"}, @ra={0x94, 0x6, 0x5}, @end, @end, @end, @noop, @ra={0x94, 0x6, 0x1000}, @timestamp={0x44, 0x1c, 0x5, 0x0, 0x4, [{[], 0x4}, {[], 0x4}, {[@multicast1], 0x85e2}, {[@local={0xac, 0x14, 0x0}], 0x6e8}]}]}}, @udp={{0x1, 0x2, 0x8}, {"7a8f82ab249c6b8a7a63effc1940d64bc4431dad0a72b631df6332fe74db7af20d0a83e52840d4a611b4d040927455f8d3860e3f8c8009d57b8e3eb9b90b01a426858b4391807b2cdff68301868e38c01a9e0c3970a4356c69a70a3492efc0df78ce75a6e8261a0940502dc247d3378f26b76dde6e2f4f396e208be863af4f4e1c03a5a4d4364334937468c82062c91a124d83c270229010dde0140982bf0ab29b257ddcb2fb829a005d5cd38917298a2b2e701a9a32ea90aa7c9f408d435a0968fa15dd4c3a72203f38a27492e46ad83d3de5524e652690925004ddfce3e2e1b2e6e2cc02781f3524474de193e145577519c69a91"}}}}}}) ioctl$TIOCSETAF(r5, 0x802c7416, &(0x7f0000000980)={0x8, 0x5, 0x80000001, 0xffff, "1fa7eda09e0d53edcf84c7b315b49bf61b4b91e4", 0x0, 0x1}) syz_emit_ethernet(0x167, &(0x7f00000009c0)={@empty, @broadcast, [], {@ipv6={0x86dd, {0x6, 0x6, "d57899", 0x131, 0x6c, 0x9, @empty, @mcast1, {[@routing={0xf0, 0x12, 0x0, 0x40, 0x0, [@mcast1, @mcast2, @empty, @rand_addr="387c2b024904aa42c3f09f166d643096", @local={0xfe, 0x80, '\x00', 0x0}, @remote={0xfe, 0x80, '\x00', 0x0}, @local={0xfe, 0x80, '\x00', 0x0}, @remote={0xfe, 0x80, '\x00', 0x0}, @loopback]}, @fragment={0x61, 0x0, 0x2, 0x0, 0x0, 0x13, 0x65}, @fragment={0x70, 0x0, 0xe1, 0x1, 0x0, 0x18, 0x66}], @generic="c07a88dbcdc3923650b88e6b27538ed6ddbb13fc0b2dfdb26d2ad15dcdb51f713dd514c9d4b926ebbc1f6d3cbeaef8b5bfe91613001c6c54f12e28e6c018de91431fd384734c75335a3d3c99c206ef7b40832d48b14a149ad48494f1f103e28be2a1f56d0d88dace72bd6a684bc44c1dfce26699c70b01c2d48166773a8da3212e55628f3cfac71d57"}}}}}) semctl$GETNCNT(r4, 0x3, 0x3, &(0x7f0000000b40)=""/70) semctl$GETALL(r4, 0x0, 0x6, &(0x7f0000000bc0)=""/177) openat$pci(0xffffffffffffff9c, &(0x7f0000000c80), 0x0, 0x0) openat(r6, &(0x7f0000000cc0)='./file0/file0\x00', 0x20, 0x47) semctl$IPC_RMID(r3, 0x0, 0x0) ioctl$WSMUXIO_INJECTEVENT(r5, 0x80185760, &(0x7f0000000d00)={0x401, 0x0, {0x1000, 0x1}}) semctl$SETALL(r3, 0x0, 0x9, &(0x7f0000000d40)=[0x1000, 0xfffc, 0x7, 0x4]) getsockname$inet(r6, &(0x7f0000000d80), &(0x7f0000000dc0)=0xc) connect(r6, &(0x7f0000000e00)=@in={0x2, 0x1}, 0xc) semop(r4, &(0x7f0000000e40)=[{0x0, 0x5, 0x1800}, {0x3, 0x2, 0x1000}], 0x2) 2.787574452s ago: executing program 4: openat$vmm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) mknod(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x0) rename(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') pipe(0x0) r0 = socket(0x18, 0x1, 0x0) setsockopt(r0, 0x1000000000029, 0x3e, 0x0, 0x0) close(0xffffffffffffffff) execve(0x0, 0x0, 0x0) r1 = socket(0x1, 0x4, 0x1) setsockopt$inet_opts(r1, 0x0, 0x0, &(0x7f0000000000)="dee0fb638e0c2722284524de5fa1e91ec417481021730527893f5060dec38759619fc69c6ad4a6349883a7b5ddc7e22c8b88894813b5c956df9ca360b753c2d3539d995902528bc02f73a5470433174e15283a218dda07289433c35dbaabe13cf68720b3e284a4b76ccd6b3ff6ed821bfa1b6d5893356920", 0x78) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket(0x0, 0x3, 0x40) listen(0xffffffffffffffff, 0x0) select(0x40, &(0x7f0000000100)={0x200000000, 0x0, 0x7, 0x0, 0x6, 0x4000000, 0x0, 0xfffffffffffffff8}, 0x0, 0x0, 0x0) r2 = openat$vmm(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ftruncate(r2, 0x1) select(0xfffffffffffffe8e, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x5, 0x800000000, 0x0, 0x2}, 0x0, 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]) link(&(0x7f0000000e40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00') 2.698577878s ago: executing program 4: syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[]) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) setreuid(0xee00, 0x0) open$dir(&(0x7f0000000140)='.\x00', 0x80, 0x8) (async) r1 = open$dir(&(0x7f0000000140)='.\x00', 0x80, 0x8) r2 = getuid() fchown(r1, r2, 0xffffffffffffffff) openat$bpf(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f0000002880)={'tap', 0x0}) ioctl$BIOCSETF(r3, 0x80104267, &(0x7f00000001c0)={0x3, &(0x7f0000000080)=[{0x40, 0xff, 0x0, 0x5}, {0x3d, 0x0, 0x0, 0x7}, {0x7}]}) r4 = getuid() mkdir(&(0x7f0000000300)='./file1\x00', 0x0) (async) mkdir(&(0x7f0000000300)='./file1\x00', 0x0) chroot(&(0x7f0000000240)='./file1\x00') r5 = open(&(0x7f00000002c0)='.\x00', 0x0, 0x0) mkdirat(r5, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) (async) mkdirat(r5, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) mkdirat(r5, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) unveil(&(0x7f00000004c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', &(0x7f00000000c0)='c\x00') unveil(&(0x7f00000003c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000200)='x\x00') (async) unveil(&(0x7f00000003c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000200)='x\x00') unveil(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000300)='c\x00') (async) unveil(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000300)='c\x00') setreuid(0xee00, r4) (async) setreuid(0xee00, r4) sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b100050460000000000000000010000000000000cea10500fef900000000d3357ae320b37b673039d2d236073705ae04be38", 0x32, 0x0, 0x0, 0x0) (async) sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b100050460000000000000000010000000000000cea10500fef900000000d3357ae320b37b673039d2d236073705ae04be38", 0x32, 0x0, 0x0, 0x0) socket(0x11, 0x3, 0x0) setsockopt(0xffffffffffffffff, 0x1000000029, 0x25, &(0x7f0000000440), 0x0) syz_emit_ethernet(0x5d, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa8848"]) (async) syz_emit_ethernet(0x5d, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa8848"]) bind$unix(r0, &(0x7f0000000040)=@file={0xd19450564dee018c, './file0\x00'}, 0xa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000000)=@file={0xd1653077bafa0114, './file0\x00'}, 0xa) (async) connect$unix(r6, &(0x7f0000000000)=@file={0xd1653077bafa0114, './file0\x00'}, 0xa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f0000000000)=@file={0xd1653077bafa0114, './file0\x00'}, 0xa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f0000000280)=@file={0xd1653077bafa0114, './file0\x00'}, 0xa) 2.679953602s ago: executing program 5: dup(0xffffffffffffff9c) pipe(&(0x7f0000000040)) openat$tty(0xffffffffffffff9c, &(0x7f00000000c0), 0x20, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000180)={'tap', 0x0}) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000200)={0x3, &(0x7f00000001c0)=[{0x81}, {0x1}, {0x832e}]}) syz_emit_ethernet(0x66, &(0x7f00000002c0)=ANY=[]) setsockopt$inet_opts(r0, 0x0, 0xd, 0x0, 0x0) r2 = socket(0x18, 0x2, 0x40) getsockopt$sock_linger(r2, 0xffff, 0x80, &(0x7f0000000180), &(0x7f00000001c0)=0x8) r3 = open(&(0x7f0000000040)='./file0\x00', 0x90c9396722c9465c, 0x40) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) sendmsg$unix(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="280b0000ffff00002d00000111014b01", @ANYRES32=r1], 0x28, 0x8}, 0x0) sendmmsg(r4, &(0x7f00000000c0)={&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x3}, 0x10, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x812, r3, 0x0) openat$pci(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) r5 = openat$pci(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r6 = socket(0x2, 0x2, 0x0) r7 = dup(r6) setsockopt$inet_opts(r7, 0x0, 0x14, &(0x7f0000000000)='\x00\x00\x00\x00', 0x4) ioctl$PCIOCWRITE(r5, 0xc00c7006, &(0x7f0000000300)={{0xfe}}) syz_open_pts() r8 = socket(0x2, 0x3, 0x0) ioctl$FIONREAD(r8, 0x81206919, &(0x7f0000000100)) openat$wsdisplay(0xffffffffffffff9c, &(0x7f00000001c0), 0x8, 0x0) setreuid(0x0, 0xee01) 2.678846878s ago: executing program 0: r0 = open(&(0x7f0000000040)='./file0\x00', 0x201, 0x0) ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9b, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000000)={'tap', 0x0}) mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0x881) r2 = open$dir(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2000, 0x801) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r3 = syz_open_pts() dup2(r3, r2) r4 = open(&(0x7f0000000280)='./bus\x00', 0x0, 0x0) ioctl$TIOCFLUSH(r4, 0x80047410, &(0x7f00000003c0)) execve(0x0, 0x0, 0x0) openat$vmm(0xffffffffffffff9c, 0x0, 0x0, 0x0) pwritev(r1, &(0x7f0000000380)=[{&(0x7f0000000440)="e9", 0x1}], 0x1, 0x3fffd) r5 = open$dir(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) preadv(r5, &(0x7f00000012c0)=[{&(0x7f00000001c0)=""/224, 0xfffffdd5}], 0x1, 0x0) 2.669381057s ago: executing program 5: mknod(0x0, 0x0, 0x0) mknod(0x0, 0x0, 0x0) socket(0x6, 0x4005, 0x0) sysctl$kern(&(0x7f00000000c0)={0x1, 0x54}, 0x5, &(0x7f0000000100)="71f91e3471ac0058bc5a91361d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0x37) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) chmod(&(0x7f0000000080)='./file0\x00', 0x40) ioctl$WSKBDIO_GETENCODING(0xffffffffffffffff, 0x4004570f, &(0x7f0000000040)) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000080)={'tap', 0x0}) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000200)={0x3, &(0x7f0000000380)=[{0x35}, {0x3}, {0x8006}]}) openat$bpf(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = socket(0x2, 0x1, 0x0) fcntl$lock(0xffffffffffffffff, 0x9, 0x0) setsockopt$sock_int(r2, 0xffff, 0x1, &(0x7f0000000100)=0x8, 0x4) getsockname$unix(r1, &(0x7f0000000300)=@file={0x0, ""/82}, &(0x7f00000000c0)=0x54) recvmmsg(r2, &(0x7f00000002c0)={0x0}, 0x10, 0x801, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) sysctl$kern(0x0, 0x0, &(0x7f0000000180)="3bf2ee74e747c82dad6eb2a36fa755e1a3925fe49afca7e63b52fa65ccaa74d6e6b85b6cdced70357ef201f97842b1068dca31553fa2d7031f38c03e56ad0e24dfc4f97b8b7f81499647e6e7725765d61436c85e43c15d12a78cb8c57ddde87021d7b685507fd3e0652f35e45bdaa3afd86c4fe557433e4c2b632de71c951516adff26aa2e48b45f8ce92bcefd3eceefabee7e3ebe806fdb4f6af569ae94b5d127", &(0x7f0000000080)=0xa1, &(0x7f0000000340), 0x0) openat$bpf(0xffffffffffffff9c, 0x0, 0x0, 0x0) open$dir(0x0, 0x1, 0x5e) rename(&(0x7f0000000180)='./file0\x00', 0x0) shmget(0x3, 0x2000, 0x5, &(0x7f0000ffb000/0x2000)=nil) sysctl$net_inet_tcp(&(0x7f0000000240), 0x4, 0x0, &(0x7f00000002c0), &(0x7f0000000300), 0x0) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r3, 0x0, 0x200000000000c, &(0x7f0000000240)="ea00000100000000", 0xc) unveil(&(0x7f0000000140)='./file0\x00', 0x0) sysctl$kern(&(0x7f00000000c0)={0x1, 0x3e}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x10, 0x0, 0x37) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x1) 2.648880411s ago: executing program 7: r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setreuid(0x0, 0xee01) r1 = dup(0xffffffffffffff9c) r2 = open$dir(&(0x7f0000000040)='./file0\x00', 0xae828e137847f62, 0x0) setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) ftruncate(r2, 0x20008002) ioctl$VT_OPENQRY(r1, 0x40047601, &(0x7f0000000080)) r3 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) preadv(r3, &(0x7f00000004c0)=[{&(0x7f00000000c0)=""/99, 0xfffffd23}], 0x1, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x70e, 0x0) ioctl$BIOCLOCK(r0, 0x20004276) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000040)={0x0, 0x0}) 2.620028559s ago: executing program 5: ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000080)={0x3, &(0x7f00000001c0)=[{}, {}, {0x6}]}) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) close(0xffffffffffffffff) getrusage(0x0, 0xfffffffffffffffe) connect$unix(0xffffffffffffffff, 0x0, 0x0) getsockname$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x462, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x2}, {0x30}, {0x16}]}) write(r0, &(0x7f00000001c0)="d9537abde93d050cdd16b13f742a", 0xe) syz_emit_ethernet(0x66, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x205b9a) ioctl$WSKBDIO_GETMAP(0xffffffffffffff9c, 0xc010570d, &(0x7f0000000140)={0x8, &(0x7f00000000c0)=[{0x8, 0xde8b, 0x1, 0x7fff, 0x4f}, {0x5, 0x200, 0x8, 0xff, 0x800}, {0x6, 0x8, 0x9, 0x4, 0x97}, {0xffe1, 0x1f, 0x7d, 0x85f, 0x74}, {0x5, 0x800, 0xfff7, 0x6, 0x8}, {0x7, 0x7f, 0xfff7, 0x8, 0x9}, {0xff00, 0x5, 0x7, 0x2007, 0x3f}, {0x6, 0x2, 0x40, 0x7fd, 0x99}]}) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$speaker(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) writev(r1, &(0x7f0000000380)=[{&(0x7f0000000000)="e741a883cc60157a810468823ac987a7254eba680c54664b8a3b537273fff1c3d4ae6950f3b030e3dc1c729ce1bb4d0e7dec57876947d3d26f8d356150f6b052bd44cc7280c8724198c173f70a712dceccc05077889f297affadcde5f1ad9e2d5363aa93bb37c6c73e0f4f8ad07537aaf9bcf3cfd30353113487589d6023e9f38537079fa1f0d832f277395d0802b941d202db07e080d9fbdc6f", 0x9a}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040), 0xfeea) sysctl$kern(0x0, 0x46, 0x0, &(0x7f0000000140)=0x2, 0x0, 0xff09) fcntl$getown(0xffffffffffffffff, 0x5) socket(0x18, 0x1, 0x0) getsockopt(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0xffff, 0x1004, &(0x7f0000000000), &(0x7f0000000100)=0x4) fcntl$lock(0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x100000401}) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x205, 0x0) fcntl$lock(r2, 0x8, 0x0) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200}}) r3 = socket(0x18, 0x3, 0x0) connect$unix(r3, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) 2.608366841s ago: executing program 2: r0 = socket(0x11, 0x3, 0x0) sendto$unix(r0, &(0x7f00000000c0)="b10005136000009f050000b10010000000000000cea10500fef96ecfc727d3357ae302b37b67ca1f2d61db7f4de57804be38164991f7c8cf5f882b297be1aa5b23edeb51e2f0ac3ebbc257699a1f139b672f4d335d223e7db3008b95665bc6fc2102000000720fd38bfbb770c1f5a872c881ea772ec5890405b3b9c2668396f4cd1257aea8c500002002fbfc0c2300008abfba0900000008e37f71a3f8343712051eeab71d89e000040381ecb664000000", 0xb1, 0x0, 0x0, 0x0) syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) syz_extract_tcp_res$synack(&(0x7f00000001c0), 0x1, 0x0) r1 = openat$bpf(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000080)={'tap', 0x0}) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000180)={0x6, &(0x7f0000000200)=[{0x64}, {0x81}, {0x6}, {0x8, 0x3, 0x1f}, {0x9, 0x6, 0xc1, 0x4}, {0x1f, 0x3f, 0xe0, 0xfffffff7}]}) syz_emit_ethernet(0x36, &(0x7f00000001c0)=ANY=[]) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000000)="b886b4e47f", 0x5}], 0x1) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x0, 0x0}) dup2(0xffffffffffffffff, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$FIONREAD(0xffffffffffffffff, 0x4004667f, 0x0) shmget(0x3, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x10000000000001}}) getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff}, 0xfffffffd, 0x0, 0xffffffffffffffff, r2}) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r3 = socket(0x18, 0x1, 0x0) close(r3) r4 = socket(0x18, 0x3, 0x3a) r5 = dup2(r4, r4) setsockopt(r5, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) connect$unix(r3, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) connect$unix(r5, &(0x7f0000000180)=@abs={0x0, 0x0, 0x0}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) socket(0x2, 0x3, 0x0) 2.607760948s ago: executing program 3: r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x20, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000040)={'tap', 0x0}) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$BIOCSRTIMEOUT(r1, 0x8010426d, &(0x7f00000000c0)={0xffffffff, 0x5}) preadv(r1, &(0x7f0000002140)=[{&(0x7f0000000100)=""/63, 0x3f}, {&(0x7f0000000140)=""/4096, 0x1000}, {&(0x7f0000001140)=""/4096, 0x1000}], 0x3, 0xe5cb) sysctl$net_inet6_ip6(&(0x7f0000002180)={0x4, 0x18, 0x29, 0x34}, 0x4, &(0x7f00000021c0)="859c2428ccc57ca2560740f0686a6e3812b5fee4fc99d75f1f1971f6a2d20f770e138ff24369f5ff1139003fe6d5844165c16f2ecb17d777321a55fc9ac62162392536ed9397f86180ec25141b69b058e3d96447fe683cdb1a5e87fd38a1ef6d8318c7dbca8716e23ccc82", &(0x7f0000002240)=0x6b, &(0x7f0000002280)="7fec594a88bfd04610139622fa8d30dd2d76e979874309f58a433ca5635a1cfadee018d7cf91c1dd0669fb57f200056598a43abafbe37e5a68baddae966385ba7b267c235bbd502d98c92302eb463b1d0426cee3209c8c4cbaf88d327918b3fc9d8a9a8f2305d95888a72d2246", 0x6d) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000002300), 0x10, 0x0) ioctl$BIOCSETF(r2, 0x80104267, &(0x7f0000002380)={0x6, &(0x7f0000002340)=[{0x6, 0x1f, 0x21, 0x7fffffff}, {0x20, 0x35, 0x9, 0x1}, {0x7f, 0x1, 0x15, 0x8e5}, {0x7, 0x3, 0x6, 0x6}, {0x6, 0x20, 0x7, 0x6edc}, {0x9, 0x5, 0x3, 0x81}]}) getgroups(0x5, &(0x7f00000023c0)=[0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0]) fchown(r1, 0xffffffffffffffff, r3) r4 = socket$inet(0x2, 0x1, 0x1f) setsockopt$sock_int(r4, 0xffff, 0x1008, &(0x7f0000002400), 0x4) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000002480)={0x8, &(0x7f0000002440)=[{0x9, 0x3, 0x4, 0x9}, {0x5, 0x1, 0x4, 0x6}, {0x5, 0x0, 0x1, 0xeaeb462}, {0x5, 0x1, 0x7f, 0xfffffffb}, {0x1, 0x0, 0x2, 0xfffffffc}, {0x9, 0x2, 0x9, 0x4}, {0x200, 0x1f, 0x3f, 0x3}, {0x1ff, 0x3f, 0xaa, 0x3c}]}) r5 = openat$speaker(0xffffffffffffff9c, &(0x7f00000024c0), 0x8, 0x0) r6 = fcntl$dupfd(r5, 0xa, r2) ioctl$WSMOUSEIO_SRES(r6, 0x80045721, &(0x7f0000002500)=0xa184) r7 = openat$bpf(0xffffffffffffff9c, &(0x7f0000002540), 0x8, 0x0) write(r7, &(0x7f0000002580)="51efdec4597a98374f85e29a135d93b18876b171c0cf577d49ae566738894ed8ed63d7d94e353ad54148ad3edc9a01024ef6238ce5b0bd1a10b89904e8975b910355f2e1cf390f4daaeb8d06ae5104a7f148eaf306f1367a06c91f0b337e65a1f742e2c5e16d627f989f6cd55fbeee32c3b3cf9e6741588814767916dcfb2751c33b443ac9881a2d8acdc858b19f0c43bc42ffb92cb6", 0x96) ioctl$BIOCGBLEN(r0, 0x40044266, &(0x7f0000002640)) openat$bpf(0xffffffffffffff9c, &(0x7f0000002680), 0x100a0, 0x0) ioctl$BIOCGDLTLIST(r2, 0xc010427b, &(0x7f0000002700)={0x1, &(0x7f00000026c0)=[0x83c8]}) r8 = openat$bpf(0xffffffffffffff9c, &(0x7f0000002740), 0x200, 0x0) ioctl$BIOCLOCK(r8, 0x20004276) getpid() ioctl$WSMOUSEIO_GETPARAMS(r6, 0x80105727, &(0x7f00000027c0)={&(0x7f0000002780)=[{0x82, 0x3}, {0xa1, 0x7c}, {0x8, 0x1}, {0x100, 0x8001}, {0x40, 0x80}], 0x5}) fcntl$setstatus(r6, 0x4, 0x40) ioctl$BIOCGBLEN(r1, 0x40044266, &(0x7f0000002800)) r9 = openat$null(0xffffffffffffff9c, &(0x7f0000002840), 0x10, 0x0) connect$unix(r9, &(0x7f0000002880)=@file={0x0, './file0\x00'}, 0xa) openat$vnd(0xffffffffffffff9c, &(0x7f00000028c0), 0x0, 0x0) 2.590084519s ago: executing program 4: sysctl$net_inet_tcp(0x0, 0x0, &(0x7f0000000100)="8fdc3a92d27d75864ef8429b2bcded249007183d1a800766227b0982de2c0a498354f69eb03a233782b449ccecb28d2e90a699375d1b00000000000000000000000000000000095ffa0ba0bcc396d4716aa8fc7700de03", 0x0, 0x0, 0x0) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x62}) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000000)={'tap', 0x0}) close(0xffffffffffffffff) r1 = syz_open_pts() ioctl$FIOASYNC(r1, 0x80047460, &(0x7f00000000c0)=0x6) ioctl$TIOCCDTR(r1, 0x20007478) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f00000003c0)={0x3, &(0x7f0000000040)=[{0x2c}, {0x48}, {0x140e}]}) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000000)={'tap', 0x0}) ioctl$BIOCSETF(r2, 0x80104267, &(0x7f00000001c0)={0x3, &(0x7f00000004c0)=[{0x30}, {0x2}, {0x8306}]}) syz_emit_ethernet(0x4a, &(0x7f0000000040)=ANY=[]) syz_emit_ethernet(0xe, &(0x7f0000000100)=ANY=[]) open(&(0x7f0000000080)='./file0\x00', 0x70e, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) mmap(&(0x7f00004c9000/0x1000)=nil, 0x1000, 0x0, 0x810, r3, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) pwritev(r4, &(0x7f0000000000)=[{&(0x7f00000000c0)='\b', 0x1}], 0x1, 0x3fffd) r5 = syz_open_pts() close(r5) r6 = syz_open_pts() ioctl$TIOCSETD(r6, 0x8004741b, &(0x7f0000000080)=0x7) writev(r5, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) 2.560221673s ago: executing program 2: r0 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x0) r1 = open(0x0, 0x80, 0x29) writev(r0, &(0x7f0000000000), 0x0) getgroups(0x0, 0x0) setgroups(0x0, 0x0) setreuid(0xee00, 0x0) r2 = getuid() setegid(0x0) getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000000340), &(0x7f0000000100)) r3 = semget$private(0x0, 0x2, 0x39a) getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000000140), &(0x7f0000000580)=0xc) r4 = getuid() setregid(0x0, 0x0) setreuid(0xee00, r4) syz_emit_ethernet(0x2a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaa4aaaaaaaaaaaaaabb08004500151c0000000000019078ac14008ee000000100009078fe339657"]) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000700)={{0x8001, r2, 0x0, r4, 0x0, 0x0, 0x52}, 0xffffffffdfffff00}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000000c0)=@abs={0x0, 0x0, 0x2}, 0x8, &(0x7f0000000500)=[{&(0x7f0000000940)="36e562852f9846aca15a7db8b0266293f4b02955ba5a6887d14f2d685031e865bb532b09c0e9726165f26a90a67711a5f268539afd0c19d90c3833f0c79c74c1c2e2d79b065be8e7a5597ced0eeefc21a944042d9fb39800cb2beed2db9301ee75a25edf9cca3e49f75378b582080032815ec32012cb63b736705c3011d3f2bf64d6660c6f2c3094a4a8023a334a2b2b688eb6a7ee0330679c738083b5", 0x9d}], 0x1}, 0x0) semop(r3, &(0x7f0000000240)=[{0x0, 0x0, 0xc00}], 0x1) semctl$GETPID(r3, 0x0, 0x4, &(0x7f0000000ac0)=""/201) ioctl$FIONBIO(r1, 0x8004667e, &(0x7f00000004c0)) getuid() semctl$GETVAL(r3, 0x4, 0x5, &(0x7f0000000800)=""/266) seteuid(0x0) semctl$IPC_SET(0x0, 0x0, 0x1, 0x0) chmod(&(0x7f0000000000)='./file0\x00', 0x15) semctl$GETNCNT(r3, 0x3, 0x3, &(0x7f0000000440)=""/64) semctl$SETVAL(0x0, 0x2, 0x8, &(0x7f0000000080)=0x2000000) getgid() semctl$IPC_SET(r3, 0x0, 0x1, &(0x7f0000000180)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, 0x0, 0x441, 0x8000000000000000}) execve(&(0x7f0000000600)='./file0\x00', 0x0, 0x0) 2.520053819s ago: executing program 2: mkdir(&(0x7f0000000100)='./file0\x00', 0x49) setreuid(0xee00, 0x0) open$dir(&(0x7f0000000000)='./file0/file0\x00', 0xa63edcc34f204a84, 0x0) r0 = getuid() chown(&(0x7f00000001c0)='./file0\x00', r0, 0x0) setreuid(0xee00, r0) unveil(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000080)='r\x00') r1 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000200), 0x280, 0x0) r2 = syz_open_pts() munlock(&(0x7f0000ffe000/0x1000)=nil, 0x1000) ioctl$TIOCSETD(r2, 0x8004741b, &(0x7f0000000040)) ioctl$VMM_IOC_RUN(r1, 0xc0205602, &(0x7f0000000240)={0x100, 0x101, 0x4, 0x9, &(0x7f0000000580)={{0x4, 0xf0, 0x0, 0x1, 0x81, 0x744, 0x4}, {[0x0, 0x7, 0x40, 0x800, 0xfffffffffffff943, 0x1, 0x9, 0x100, 0x7, 0xcb68, 0x1, 0x0, 0x8001, 0x0, 0xea, 0x5000000000000000, 0x7, 0x20], [0xc4, 0x2, 0x3, 0x3, 0xffff, 0x8000000000000001, 0x401, 0x480, 0x8, 0x6], [0x80000001, 0x8001, 0x81, 0x0, 0xffffffffffffffff, 0x6, 0x3f], [0x8000000000000001, 0x3ff, 0x0, 0x0, 0x7, 0x3], [{0x4, 0x3, 0x9, 0x8001}, {0x7, 0x0, 0x9, 0x2}, {0x8, 0x8bd, 0x9, 0x8}, {0x1, 0x3, 0x0, 0x401}, {0x87a2, 0x8, 0x9993, 0x10001}, {0x0, 0x4, 0x0, 0x80000001}, {0x8001, 0xea3, 0x3, 0x100000001}, {0xfff5, 0x7, 0x101, 0x5}], {0x8, 0x200, 0x100, 0x7fffffffffffffff}, {0xdc8, 0x3, 0x1ff, 0x5bb}}}, 0xed6, 0x5}) setrlimit(0x8, &(0x7f0000000980)={0x8, 0x54}) getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000140), &(0x7f0000000180)=0xc) getegid() getgroups(0x4, &(0x7f00000002c0)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0]) getgroups(0x3, &(0x7f0000000300)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0]) getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000340), 0x9) getgid() r3 = open(&(0x7f0000000180)='./file0\x00', 0x75f493fec6515f78, 0x0) ioctl$BIOCGETIF(0xffffffffffffffff, 0x4020426b, &(0x7f0000000340)={""/16, @ifru_addr=@in}) ioctl$WSMOUSEIO_SETPARAMS(r3, 0x80105728, &(0x7f0000000540)={&(0x7f0000000280)=[{0x2, 0x9}, {0x46, 0xff}, {0x24, 0x543d}, {0x89, 0xffffffff}, {0x87, 0x7fffffff}, {0x89, 0x1ff}], 0x6}) getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000440)={0x0, 0x0, 0x0}, &(0x7f00000003c0)=0xc) syz_emit_ethernet(0x36, &(0x7f0000000800)=ANY=[@ANYBLOB="111ea90a215a47268e63e6035dd3e9ffffffffffff86dd60a4bd080000ef1135dc6482000000feff21000000000000ffffffffff03000200000000000000faff00000000013009f1245a66b2efa65a81017f3ea6f37d659384489ca3bd50844c0772918faf29d5b7519ba654f0b40441dd779b08da969184b4a62ef1362578b5c121831519f1cad72d083c9311435baabc3840424e4a2356defd67a06d437325e65d3833d3d4133c43dae19572afff9bd70e9b52a8f9dd500597e65bc3a552194b"]) mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1) poll(&(0x7f0000000ac0)=[{0xffffffffffffff9c}], 0x20000000000000d7, 0x0) r5 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000480), 0x100, 0x0) ioctl$BIOCSETIF(r5, 0x8020426c, &(0x7f00000004c0)={'tap', 0x0}) setregid(0x0, r4) sysctl$hw(&(0x7f00000001c0)={0x6, 0x1c}, 0x2, &(0x7f0000000440)="fc", &(0x7f0000000380)=0x1, &(0x7f0000000540), 0x0) 2.510247024s ago: executing program 3: openat$speaker(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) msgget(0x3, 0x0) syz_open_pts() writev(0xffffffffffffffff, 0x0, 0x0) openat$wsdisplay(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setitimer(0x1, &(0x7f0000000140)={{}, {0x0, 0xfff}}, 0x0) getuid() sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b100050460000000000000000010000000000000cea10500fef900000000d3357ae320b37b673039d2d236073705ae04be38", 0x32, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x3, 0x0) r1 = msgget$private(0x0, 0x0) r2 = getuid() msgrcv(r1, &(0x7f00000002c0)={0x0, ""/11}, 0x13, 0x3, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x2, 0x0}, 0xc) msgsnd(r1, &(0x7f0000000280)=ANY=[@ANYRESDEC=0x0, @ANYRES8=r1], 0xc8, 0x0) msgrcv(0x0, 0x0, 0x0, 0x3, 0x800) msgsnd(r1, &(0x7f0000000140)=ANY=[@ANYRES16=r2, @ANYRESDEC=0x0], 0xe2, 0x0) setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) openat$speaker(0xffffffffffffff9c, 0x0, 0x80, 0x0) sysctl$kern(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) msgsnd(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="03000000e00000003a3d9941f9fa18e570c51c35964c95205e6543382bcba1b448bb1d2c4e1959cec5879340a7e4633a060cfbebcfeefbfa9136a7d6199488e5961b43ad0739c25ad1ac854746f4fd61003ec2055fde1879aa37ab5cd4f463061545ab11a9e47910f0985a8c3a9072eb"], 0x70, 0x800) sendto$unix(r0, &(0x7f0000000000)="b1000513000000000000000004000000000013fecea10500fef96ecf2ac72fd3357ae30200004e3039d2d236acf20b7804be38164991f7c8cf7f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f335c223e7d0c032bfa896443a41c18000000720fd38bfbb770c1f5a872c88106002ec5890400000000000000361b1257aea8c500002002fbfe0c2300008abfba0900000008e371a3f8343712051eeab7190000c011200000000000000000", 0xb1, 0x0, 0x0, 0x0) openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000100)={0x2, &(0x7f0000000300)=[{}, {0xe6}]}) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) sendmsg$unix(r3, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002c40)=ANY=[@ANYBLOB="10000000ffff000001"], 0x10}, 0x0) sysctl$net_inet_ip(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) open$dir(0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) 2.508111887s ago: executing program 6: sendmsg$unix(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f00000000c0), 0x1c, 0x0}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x10000000000002}}) open(&(0x7f0000000080)='./file0\x00', 0x70e, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) mmap(&(0x7f00004c9000/0x1000)=nil, 0x1000, 0x0, 0x810, r0, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) pwritev(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)='\b', 0x1}], 0x1, 0x3fffd) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) semctl$GETNCNT(0xffffffffffffffff, 0x4, 0x3, &(0x7f0000000100)=""/138) mprotect(&(0x7f000018f000/0x1000)=nil, 0x1000, 0x4) ioctl$WSMOUSEIO_SETPARAMS(0xffffffffffffffff, 0x80105728, &(0x7f0000000080)={&(0x7f00000000c0)=[{}, {}], 0x2}) sysctl$vm_swapencrypt(&(0x7f0000000040)={0x7, 0x2, 0x2}, 0x3, 0x0, 0x0, 0x0, 0x0) sysctl$kern(&(0x7f0000000040)={0x1, 0x31}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$net_inet_ip(&(0x7f0000000040), 0x4, 0x0, 0x0, 0x0, 0x0) r2 = msgget$private(0x0, 0x0) msgsnd(r2, &(0x7f0000000080)={0x2}, 0x8, 0x800) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) openat$wskbd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$WSKBDIO_GETMAP(0xffffffffffffffff, 0x80047476, &(0x7f0000000040)={0x0, 0x0}) r3 = socket(0x18, 0x3, 0x0) munmap(&(0x7f0000615000/0x2000)=nil, 0x2000) setsockopt(r3, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) r4 = socket(0x1, 0x2, 0x0) r5 = dup2(r3, r4) sendmsg$unix(r5, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0) 2.486046286s ago: executing program 7: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x2, 0x4001, 0x0) r3 = dup(r2) fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) socketpair$unix(0x1, 0x0, 0x0, 0x0) kevent(0xffffffffffffffff, 0x0, 0x0, 0x0, 0xac2, 0x0) kqueue() ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0xff00, 0x7f, 0x0, 0x5}, {}]}) getpeername$unix(0xffffffffffffffff, 0x0, &(0x7f0000000800)) r4 = syz_open_pts() ioctl$TIOCSETA(r4, 0x802c7414, &(0x7f0000000140)={0x1ff, 0xfffffffc, 0x1, 0x0, "d76c1f46000000ef1f0160fbff2000", 0x2}) syz_open_pts() ioctl$TIOCSETAF(r4, 0x802c7416, &(0x7f0000000700)={0x0, 0x0, 0xfffffffc, 0x0, "0000eb304c0000910000000000007e0002234000", 0x0, 0x40000}) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x2000000000000243, &(0x7f0000000100)}) r5 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r5, 0xc0106924, &(0x7f00000001c0)) kqueue() kevent(r3, &(0x7f00000000c0), 0x101, &(0x7f0000000180), 0x7f, 0x0) setegid(0x0) fchown(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x3, 0x0) ioctl$FIONREAD(0xffffffffffffffff, 0xc0206921, 0x0) sendto(r5, 0x0, 0x0, 0x0, &(0x7f0000000080)=@in={0x2, 0x0}, 0xc) socket(0x0, 0x0, 0x0) r6 = socket(0x22, 0x2, 0x6) connect(r5, 0x0, 0x0) ioctl$FIONREAD(r6, 0x80206919, &(0x7f00000001c0)) recvmmsg(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=""/100, 0x64}, 0x83f8d}, 0x10, 0x0, 0x0) recvmsg(r0, &(0x7f0000002740)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000027c0)=""/131, 0x83}], 0x1, 0x0}, 0x1802) sendmmsg(r1, &(0x7f0000000080)={0x0}, 0x10, 0x0) 2.459898671s ago: executing program 2: pledge(&(0x7f0000000000)='tty V\xef\x86\xce3|#\xcb\x13\x12\xe0\r\x9c\xe6\x98\x0f\x01\xc2\xe7\xb9E\xc3\x1d\x96\xdbY\x91\x0e\x17\x95 \x01\xa6~\xd0|/?\xc9\xd5k\xbe\xa9kG\x00\x00\x00\x00\x00@\x00\x01\x00\x00\xeb\x91vr)\\\x9el\x03(r\xd4\x9a\x0f\f\xdb<\xb4B\x95\x15\xb6\r', 0x0) fcntl$lock(0xffffffffffffffff, 0x8, 0x0) r0 = openat$tty(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$TIOCOUTQ(r0, 0x40047473, &(0x7f00000004c0)=0x1) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000300)={0x2, &(0x7f00000000c0)=[{}, {0x1}]}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x59}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x3, 0x0, 0x37) openat$vmm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f00000001c0), 0x40, 0x0) r2 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x108) ioctl$BIOCSETF(r2, 0x80104267, &(0x7f00000003c0)={0x6, &(0x7f0000000380)=[{0x7ff, 0x10, 0x20, 0xe9}, {0x3, 0x20, 0x20, 0x2a28}, {0x3, 0x9, 0x2, 0x3}, {0xfd51, 0x40, 0xfb, 0x100}, {0xf37e, 0x1, 0x2, 0x8}, {0x9, 0x81, 0x4, 0x8}]}) ioctl$WSDISPLAYIO_GETEMULTYPE(r1, 0xc014575e, &(0x7f0000000200)={0x7fffffff, './file0\x00'}) r3 = socket(0x18, 0x3, 0x0) setsockopt(r3, 0x1000000029, 0x27, &(0x7f0000000000)="156b007b", 0x4) syz_emit_ethernet(0xa9, &(0x7f0000000500)=ANY=[@ANYBLOB="69e1629be0f0c0b8aaaaaabb86dd600601fb00735000cb69bc0900000000000000666c3e2c6fff020000000000000000000000000001"]) mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x5) r4 = getpid() ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x40000120, r4) getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000840), 0xc) getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000880), 0xc) msgget$private(0x0, 0x400) getppid() getuid() r5 = msgget$private(0x0, 0x152) msgrcv(r5, &(0x7f0000000140)={0x0, ""/5}, 0xd, 0x3, 0x800) getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f0000000440)=0x13) r7 = socket(0x10, 0x4000, 0x6) getsockopt$SO_PEERCRED(r7, 0xffff, 0x1022, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0xc) msgctl$IPC_SET(r5, 0x1, &(0x7f0000000300)={{0x0, 0x0, r6, 0xffffffffffffffff, r8, 0x20, 0x1}, 0x8ad0, 0x6, 0xffffffffffffffff, 0x0, 0x3, 0x1, 0x0, 0x5}) 2.297182392s ago: executing program 3: r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) openat$bpf(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$BIOCSETF(r0, 0x80104267, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000180)={'tap', 0x0}) accept$inet6(0xffffffffffffffff, &(0x7f0000002140), 0xffffffffffffffff) mknod(&(0x7f0000000040)='./bus\x00', 0x6000, 0x412dfe) openat$vnd(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) close(0xffffffffffffffff) seteuid(0x0) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000200)={0x3, &(0x7f0000000080)=[{0x4, 0x0, 0x0, 0x2}, {0x2, 0x81}, {0x6, 0x0, 0xff, 0x6d7}]}) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r1, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) r3 = semget$private(0x0, 0x3, 0x830) setreuid(0x0, 0x0) ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f00000002c0)={'./file0\x00', 0x9, 0x200, 0x81, 0x0, 0x2, 0x9, 0x2, 0x2, 0x2, 0xffffffffffffffff, 0x7}) semctl$IPC_SET(r3, 0x0, 0x1, &(0x7f0000000500)={{0x40006, 0x0, 0x0, 0x0, 0x0, 0x34, 0x1}, 0x7b, 0xffffffffffffff49, 0xa}) semop(r3, 0xffffffffffffffff, 0x4) semctl$GETALL(r3, 0x0, 0x6, &(0x7f0000000000)=""/30) setsockopt$inet_opts(r2, 0x0, 0x200000000000c, &(0x7f0000000240)="ea00000100000000", 0xc) getsockname$inet(r1, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) r4 = accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000740)) sendmsg$unix(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x28}, 0x0) socket$unix(0x1, 0x5, 0x0) clock_getres(0x3, &(0x7f00000001c0)) sysctl$hw(&(0x7f0000000000)={0x4, 0x1f}, 0x3, 0x0, 0x0, 0x0, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$vm_swapencrypt(&(0x7f0000000000), 0x3, 0x0, 0x0, &(0x7f0000000240), 0x0) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, 0x0) 2.293226801s ago: executing program 0: setgroups(0x0, 0xffffffffffffffff) getgroups(0x2, &(0x7f0000000000)=[0x0, 0xffffffffffffffff]) getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0xc) getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r4, 0xffff, 0x1022, &(0x7f0000000380)={0x0, 0x0, 0x0}, &(0x7f00000003c0)=0xc) setregid(0x0, r5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000015c0)={0xffffffffffffffff}) getsockopt$sock_cred(r6, 0xffff, 0x1022, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) setegid(r7) getgroups(0x8, &(0x7f0000000100)=[r0, r0, 0xffffffffffffffff, r0, 0x0, r1, r2, r3]) semget$private(0x0, 0x0, 0x20) socketpair$unix(0x1, 0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x1813, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=""/100, 0x64}, 0x3f8d}, 0x10, 0x0, 0x0) r10 = fcntl$dupfd(r8, 0x0, r9) recvmsg(r10, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000100)=""/152, 0x98}, {&(0x7f0000000200)=""/76, 0x4c}], 0x2, 0x0}, 0x0) clock_gettime(0x4, 0xffffffffffffffff) syz_open_pts() getrlimit(0x0, 0x0) openat$bpf(0xffffffffffffff9c, &(0x7f0000000180), 0x601, 0x0) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, 0x0) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r11 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x24) r12 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) dup2(r11, r12) openat$wskbd(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) 2.236863072s ago: executing program 6: r0 = socket(0x0, 0x0, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) ioctl$TIOCSETD(0xffffffffffffffff, 0x8004741b, 0x0) socket(0x1, 0x8000, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) getpeername$inet6(0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000000c0)=0xc) r1 = open(0x0, 0x200, 0x0) fcntl$lock(r1, 0x9, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x100000001}) r2 = open(&(0x7f0000000280)='./file0\x00', 0x400, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x20, 0x0) fcntl$lock(r2, 0x9, &(0x7f0000000400)={0x0, 0x1, 0xfffffffffffffffd, 0x269000000}) close(r2) msgget$private(0x0, 0x1) unveil(&(0x7f0000000140)='.\x00', 0x0) r3 = socket(0x18, 0x1, 0x0) setsockopt$sock_timeval(r0, 0xffff, 0x1005, &(0x7f0000000100)={0x1, 0x9}, 0x10) ioctl$FIONREAD(r3, 0xc018696c, &(0x7f00000001c0)) ioctl$FIONREAD(0xffffffffffffffff, 0xc0106924, 0x0) socket(0x18, 0x4, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, 0x0) sysctl$kern(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FIONREAD(0xffffffffffffffff, 0x8080691a, 0x0) syz_emit_ethernet(0x4a, 0x0) r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$BIOCSETIF(r4, 0x8020426c, &(0x7f0000000180)={'tap', 0x0}) ioctl$BIOCSETF(r4, 0x80104267, &(0x7f0000000200)={0x3, &(0x7f00000002c0)=[{0x0, 0x0, 0x1}, {0x2c, 0x0, 0x5}, {0x812e}]}) syz_extract_tcp_res(0x0, 0x0, 0x0) socket(0x10, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) 2.219080963s ago: executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{}, {}, {0x1, 0x0, 0x0, 0x1}]}) r3 = socket(0x2, 0x3, 0x0) r4 = dup(r3) r5 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) ioctl$BIOCSETIF(r5, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSETWF(r5, 0x80104277, &(0x7f0000000300)={0x3, &(0x7f0000000100)=[{0x5}, {0x2d}, {0x16}]}) write(r5, &(0x7f00000001c0)="d9537abde93d050cdd16b13f742a", 0xe) setuid(0xffffffffffffffff) sysctl$vm_swapencrypt(&(0x7f0000000940), 0x3, &(0x7f0000000980), &(0x7f0000000100), &(0x7f0000002640), 0x0) ktrace(&(0x7f0000000180)='./file0\x00', 0x0, 0x102, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = syz_open_pts() r7 = syz_open_pts() ioctl$VMM_IOC_WRITEREGS(0xffffffffffffffff, 0x82485608, 0x0) ioctl$TIOCSETA(r6, 0x802c7414, 0x0) ioctl$FIONREAD(r7, 0x4004667f, 0x0) setsockopt$inet_opts(r4, 0x0, 0x15, &(0x7f0000000080)='\x00\x00', 0x2) fchownat(r4, &(0x7f0000000200)='./file0\x00', r1, r2, 0xe) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x11}, 0x4000000000000007, 0x0, 0x0, 0x0, 0x0) sysctl$kern(&(0x7f00000000c0)={0x1, 0x37}, 0x2, 0x0, &(0x7f0000000080), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) 2.189154767s ago: executing program 2: sysctl$net_inet_ah(&(0x7f0000000040)={0x4, 0x2, 0x33, 0xa20b95efeb2be278}, 0x4, &(0x7f0000000080)="c0d86bdcc65a6403571e00df2efe41180c2013fb3efa16eed4cf1f3a20bddd1829086913ca476fec4fccd92810e5ab8342588449ac4a3339bff254c8bc03cc7b99e414d374185524856b4fe41f3fc20a8a6d3e73aefa673c1c735b2266026caa6c", &(0x7f0000000140)=0x61, &(0x7f0000000300)="4861bd6d8eb95952072d6d4c78c0bd8aca8db958f11361e1a199a4733a0523b90612a5832d63ef6a6294a18958910083acd61b77c676134bd0028a1de2c554290bb9f7f2023436d9906198d5d83172e03db95bef6801c316b2601386b63f984cd8afe32d8b23a38e95c5bec5a8d9d26f80583a76baabde5f26bcd75a053284d7bffaa459c2a745ecb419402795836472ba17126daa5875067a70aa5c9b725ef1", 0xa0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1000, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$DIOCMAP(r1, 0xc0106477, &(0x7f0000000200)={&(0x7f00000002c0)='./file0\x00', r0}) syz_emit_ethernet(0x66, &(0x7f00000002c0)=ANY=[]) execve(0x0, 0x0, 0x0) 2.179783371s ago: executing program 3: syz_emit_ethernet(0x66, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd605d34520030000000000000000000000400000000200000000000000005000400000000000000010100907800000000603977"]) open(&(0x7f00000000c0)='./file0\x00', 0x10000, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) unveil(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000300)='W\x00') 2.179053878s ago: executing program 4: r0 = socket(0x2, 0x4, 0x1) getpeername$unix(r0, &(0x7f0000000000)=@file={0x0, ""/503}, &(0x7f0000000200)=0x1f9) recvfrom(r0, &(0x7f0000000240)=""/163, 0xa3, 0x802, &(0x7f0000000300)=@in6={0x18, 0x3, 0xa96, 0x6}, 0xc) r1 = socket$inet(0x2, 0x5, 0x33) getsockname$inet(r1, &(0x7f0000000340), &(0x7f0000000380)=0xc) getsockname$inet(r1, &(0x7f00000003c0), &(0x7f0000000400)=0xc) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCGFLAGS(r2, 0x4004745d, &(0x7f0000000480)) pwritev(r0, &(0x7f0000000640)=[{&(0x7f00000004c0)="b76550b6fe123495031981ded49e3e0e8eed5752928146f5ed7cb167b0f91db8a4d841729057404e79e23b02d315c3350a4f3da96c9b90b4207d81c0d1a74169ba630474283d4d897f", 0x49}, {&(0x7f0000000540)="40f3831b795d36fb36888d857986ebe4332a37574a852d960638b6c848757885de3330238b64cfeba4f33e7b30a8bc308538ab1cd7911216e39860144fd60dc1f28883d71645d63ad9be4884d4bc23ac73dcdde285351232a67182636ec7197e65af2b7dbd5d5f56992aeec596662ce5d76b7bd7c5fd831bc8808badee0007be4bbab14dce2f2ba88dbe03d0518cbc7cfa0a821524aa64f1b543f06850717e4911d8dab25b8e3f3afdd07b01d6632c2ebebac047441ee524a6e46fd05c4f6a5910010ca5fe987ab437ee74895a0878ca70", 0xd1}], 0x2, 0x7) r3 = semget$private(0x0, 0x4, 0x322) semctl$SETALL(r3, 0x0, 0x9, &(0x7f0000000680)=[0x8000]) ioctl$BIOCSDIRFILT(r2, 0x8004427d, &(0x7f00000006c0)=0x4) r4 = semget(0x3, 0x4, 0x200) semctl$IPC_RMID(r4, 0x0, 0x0) unveil(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)='x\x00') pipe2(&(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}, 0x10008) faccessat(r5, &(0x7f00000007c0)='./file0\x00', 0x10, 0x2) syz_emit_ethernet(0x14f, &(0x7f0000000800)={@random="d885968fdbeb", @remote, [], {@ipv4={0x800, {{0x11, 0x4, 0x1, 0x5, 0x141, 0x64, 0x2, 0x20, 0x3b, 0x0, @remote={0xac, 0x14, 0x0}, @empty, {[@generic={0x88, 0x4, "0aab"}, @ra={0x94, 0x6, 0x5}, @end, @end, @end, @noop, @ra={0x94, 0x6, 0x1000}, @timestamp={0x44, 0x1c, 0x5, 0x0, 0x4, [{[], 0x4}, {[], 0x4}, {[@multicast1], 0x85e2}, {[@local={0xac, 0x14, 0x0}], 0x6e8}]}]}}, @udp={{0x1, 0x2, 0x8}, {"7a8f82ab249c6b8a7a63effc1940d64bc4431dad0a72b631df6332fe74db7af20d0a83e52840d4a611b4d040927455f8d3860e3f8c8009d57b8e3eb9b90b01a426858b4391807b2cdff68301868e38c01a9e0c3970a4356c69a70a3492efc0df78ce75a6e8261a0940502dc247d3378f26b76dde6e2f4f396e208be863af4f4e1c03a5a4d4364334937468c82062c91a124d83c270229010dde0140982bf0ab29b257ddcb2fb829a005d5cd38917298a2b2e701a9a32ea90aa7c9f408d435a0968fa15dd4c3a72203f38a27492e46ad83d3de5524e652690925004ddfce3e2e1b2e6e2cc02781f3524474de193e145577519c69a91"}}}}}}) ioctl$TIOCSETAF(r5, 0x802c7416, &(0x7f0000000980)={0x8, 0x5, 0x80000001, 0xffff, "1fa7eda09e0d53edcf84c7b315b49bf61b4b91e4", 0x0, 0x1}) syz_emit_ethernet(0x167, &(0x7f00000009c0)={@empty, @broadcast, [], {@ipv6={0x86dd, {0x6, 0x6, "d57899", 0x131, 0x6c, 0x9, @empty, @mcast1, {[@routing={0xf0, 0x12, 0x0, 0x40, 0x0, [@mcast1, @mcast2, @empty, @rand_addr="387c2b024904aa42c3f09f166d643096", @local={0xfe, 0x80, '\x00', 0x0}, @remote={0xfe, 0x80, '\x00', 0x0}, @local={0xfe, 0x80, '\x00', 0x0}, @remote={0xfe, 0x80, '\x00', 0x0}, @loopback]}, @fragment={0x61, 0x0, 0x2, 0x0, 0x0, 0x13, 0x65}, @fragment={0x70, 0x0, 0xe1, 0x1, 0x0, 0x18, 0x66}], @generic="c07a88dbcdc3923650b88e6b27538ed6ddbb13fc0b2dfdb26d2ad15dcdb51f713dd514c9d4b926ebbc1f6d3cbeaef8b5bfe91613001c6c54f12e28e6c018de91431fd384734c75335a3d3c99c206ef7b40832d48b14a149ad48494f1f103e28be2a1f56d0d88dace72bd6a684bc44c1dfce26699c70b01c2d48166773a8da3212e55628f3cfac71d57"}}}}}) semctl$GETNCNT(r4, 0x3, 0x3, &(0x7f0000000b40)=""/70) semctl$GETALL(r4, 0x0, 0x6, &(0x7f0000000bc0)=""/177) openat$pci(0xffffffffffffff9c, &(0x7f0000000c80), 0x0, 0x0) openat(r6, &(0x7f0000000cc0)='./file0/file0\x00', 0x20, 0x47) semctl$IPC_RMID(r3, 0x0, 0x0) ioctl$WSMUXIO_INJECTEVENT(r5, 0x80185760, &(0x7f0000000d00)={0x401, 0x0, {0x1000, 0x1}}) semctl$SETALL(r3, 0x0, 0x9, &(0x7f0000000d40)=[0x1000, 0xfffc, 0x7, 0x4]) getsockname$inet(r6, &(0x7f0000000d80), &(0x7f0000000dc0)=0xc) connect(r6, &(0x7f0000000e00)=@in={0x2, 0x1}, 0xc) semop(r4, &(0x7f0000000e40)=[{0x0, 0x5, 0x1800}, {0x3, 0x2, 0x1000}], 0x2) 2.166888371s ago: executing program 6: openat$bpf(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, 0x0) mprotect(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0) sysctl$net_inet_carp(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FIONBIO(0xffffffffffffffff, 0x8004667e, 0x0) setrlimit(0x6, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) dup2(r1, 0xffffffffffffffff) setsockopt$inet_opts(r1, 0x0, 0x200000000000a, &(0x7f0000000000)="ea00005c00000000", 0x1) setsockopt$inet_opts(r1, 0x0, 0x200000000000c, 0x0, 0x0) setsockopt$inet_opts(r0, 0x0, 0x1, &(0x7f00000001c0), 0x0) r2 = syz_open_pts() ioctl$FIONREAD(r2, 0x4004667f, 0x0) close(r2) open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) pledge(0x0, 0x0) sysctl$kern(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) getpgid(0x0) fcntl$setown(0xffffffffffffffff, 0x6, 0x0) shutdown(0xffffffffffffffff, 0x0) r3 = openat$bpf(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BIOCSETF(r3, 0x80104267, &(0x7f00000001c0)={0x6, &(0x7f0000000180)=[{0x1ff, 0x8, 0x5, 0x9b4}, {0xfeff, 0x0, 0xd, 0xfffffff8}, {0xdda9, 0x9, 0x80}, {0x7, 0x4, 0x9c}, {0x2731, 0x9, 0x92, 0xbc}, {0x5, 0x3, 0x99, 0x8f}]}) ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$BIOCSETF(r3, 0x80104267, &(0x7f00000000c0)={0x3, &(0x7f0000000140)=[{0xc0}, {0x30}, {0x6}]}) syz_emit_ethernet(0x3e, &(0x7f0000000280)=ANY=[]) r4 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) fcntl$setstatus(r4, 0x4, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@random='\tK\x00', @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @local={0xac, 0x14, 0x0}, @multicast1}, @icmp=@info_reply}}}}) 2.139621921s ago: executing program 6: syz_emit_ethernet(0x26, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffff08060001080006040000aaaaaaaaaabb7f000001ffffffffffff00"/42]) 2.127796579s ago: executing program 4: socket$unix(0x1, 0x5, 0x0) r0 = socket(0x0, 0x0, 0x0) openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) unveil(&(0x7f0000000300)='./file0\x00', &(0x7f0000000440)='r\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=""/100, 0x64}, 0x3f8d}, 0x10, 0x0, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) recvmsg(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000100)=""/152, 0x98}, {&(0x7f0000000200)=""/76, 0x4c}], 0x2, 0x0}, 0x0) sendmmsg(r2, 0x0, 0x0, 0x0) r4 = socket$inet6(0x18, 0x3, 0xff) setsockopt$sock_timeval(r4, 0xffff, 0x1005, &(0x7f0000000000)={0x400000000000001, 0x8}, 0x10) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f00000004c0)=[{}, {0x0, 0x0, 0x20}, {0x6}]}) close(r2) socket(0x18, 0x2, 0x0) r5 = socket(0x2, 0x2, 0x0) select(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$unix(r5, &(0x7f0000001a00)={&(0x7f0000000080)=@file={0x0, '\x00'}, 0x3, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYRES8=0x0], 0x18}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000029"], 0x3e}, 0x0) recvfrom$unix(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket(0x11, 0x3, 0x0) sendto$unix(r6, &(0x7f0000000000)="b100050300000400000000000101000000000000cea10500fef96ec0c72fd3357ae30200007804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3eea3c57699a6443a42102000000720fd18b08fbb670c1f5a872c803006e2ec58904000000000080fbfe0c2300008abfba0900000008e371a3f8343732051eeab71d89e0000405f8ffffff1300000001000000aa5ac30a874bcbe4d9000000fcffffff00000000000000000000000008000000", 0xb1, 0x0, 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f0000000040)={0x0, 0x0, 0x1, 0x0, "0100012d29fb000700000000098002005e00"}) sysctl$kern(&(0x7f0000000040)={0x1, 0x3e}, 0x2, &(0x7f0000000580)="3bf2ee74e747c82dad6eb2a36fa755e1a3925fe49afca7e63b52fa65ccaa74d6e6b85b6cdced70357ef201f97842b1068dca31553fa2d7031f38c03e56ad0e24dfc4f97b8b7f81499647e6e7725765d61436c85e43c15d12a78cb8c57ddde87021d7b685507fd3e0652f35e45bdaa3afd86c4fe557433e4c2b632de71c951516adff26aa2e48b45f8ce92bcefd3eceefabee7e3ebe806fdb4f6af569ae94b5d127", &(0x7f0000000080)=0xa1, &(0x7f0000000340)="5a67923ef0cb189971421989ebcff78831a7581e2f27caa362f1363042efb27688b2c899220fb2fe37e467d974592496856ca7b78060998608c2f952e43bc0bf11555cc5cb0fe17b2ec1be389871829bfe10dd4c4d2c8f9da2bd2868fd86791dc09dc4fa89a217458bdaed31003fdc3a7323189ba3ccbad6c8af17516e4557f61ad20180000000000000125f568ca7d3396b9057255f381855110eb3a673713716cdf010ddfa7977f92cf061ad125ca670353b45d53aae196b00271f9d3452b523b3dea22d6027625614312183724b71c7eb02083a410c1c99fa455013521f98686e472b70b560f7021f567adf4d", 0xee) open(&(0x7f0000000480)='./file0/file0\x00', 0x0, 0xd) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000500)={0x2, &(0x7f00000000c0)=[{0x2, 0xfd, 0xfd, 0x200000}, {0x1, 0x0, 0x1}]}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x55}, 0x3, &(0x7f0000000200)="58bc5a7f0000000000000084cf8f23dca7a080bb8f00000000000000e74f1dd1ba20b3ffcc35c11fc39a17498311bcf9f34ce55efc6aae818aa9f6e6382c76c7ba51ac6a998cf9860d52111f5d81ef087ffcd82c4c878c5790233ad2174c54cb2612500bf566060916ea8ce2916ee768e635a143b67839dbd0c0f87302ff60121c7c6bb13349a09d77014ade41ef21b1f6673563bbaf74e8c4f207f1a98aae3524c2c831ef18c45f2dae0f7396fd8d8b50b43b38f0e29e7113e47e4251a34854b7457c68087a48e7a3f975dfe7a67fb5a0a018321539a58382d197be5fa64c2065f0f40b3b8d6a779512ac7145", &(0x7f0000000080)=0x33, 0x0, 0xe5f81a4756f9a02) sendto$unix(r0, &(0x7f0000000180)="b1000504600000000000000007000000331c13fecea10500fef9ed06c72fd3357ae320b37b673039d2d236073705ae04be38164991f7accf5f882b297be1aa5b236deb51e2f0ac3ebbc257699a5f139b672f4d335d223e7d029d6ba8af630037282102000000720f70c1f5a472c881ea6e69e0bb76d907c400000200361b1257aea8c5000020020000000000008abfba09001d89f00100ffffffff008000ff00"/177, 0xb1, 0x0, 0x0, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x2000000000000243, &(0x7f0000000100)}) 2.127282536s ago: executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[]) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000040)=@file={0xd19450564dee018c, './file0\x00'}, 0xa) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pledge(0x0, &(0x7f0000000280)='\x00') pledge(&(0x7f0000000000)='tty \x00\x02\x00!\a\x9bp^|#\xcbhl\x97\xa3_\xbc\x04\x9d!\xd9\x9f\x9f\xb4\x96\x13\x12\xe0\r\xe7\xb9E\b\x00\x00\x00B\xaaY\xe1Q<\x19\xc0\xf6Yf\x9au^\xa0\xc9j\xdd-I\x01R\x00w\xf7\x15\x04\xa6\x82aY\x1d\xd7\f>Y\x06\"\xad\xb6\x88_\xeb\at\x91\xd3\xbf\xea\xddt\xe0\bt\x06S,\x1f\x1fj\xa5H\x01nz\x947\xf8Q|o\x80\xdbH\xa7-\xaaw\xcet\x044\xc5\xa9e\xa9\xf6\x1b\x8e\x05\x86\x91IsC\xb9ul\xaeu\xad\x9b\xaf\x04\xc4\x03\"F\x8f\xd5\xe8\r\x8d\xa1\x00\xcc\xd7\xa0\xe1\xeb\xc1>\xbd\t\xc8\x15\v\xb0, \xee\xa4\xa6\xb9a\x01&\xadrj\xd5\xc26p\xa14\xe0\xbf\xa0\x1es\x01=\xdbd\xf0?=\x8afcJ\x8e\xf7\nn\xd4<\x00\xec\xe4^\x00\x00\x00\xca\x90\xfa\x98\xc9gty\xce\xab\xd2\xa1\x85E\xe4\xa9\xd5\xab\x83\xda?w\x83\xbc\xcf\xd20(L&b\xed\x8c\x1d\x1a\x9fd\x99H\x9e\x82\x10\xea\x05\xf8\xff\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\xa6\x8c\x05n\x83\x83\x12+\x16\xc1\x00\x04\x00\x00\x13:o\x0f\x1fB\xa4\xddwB\x92h\xde\xfal3\x88e\x04J\\\x00D\xae`\x8e\xadd\xa8;\xee\xc4K\xe8]\x84\x90\xb8d\xfb\x95\xb3\xe9(x_\x80]\xadW\xd5\xa9\xaa\x03\x9c6\xa9\xc4\x01\x03\xea\xe5\x90\x85\x16\xb0DV\x13\x01\xab\x01\xf0\x8f\x02\xc2\xc89\x19o\xf5zJ\x9b\x03\x1f\xd7\xdbN\\\xc0\xcd?Pg\xd5q\x13\xbd \xfa\xab\xccJK\x11\\\x16~#P.\xc9K\x15r\xab\xda\xe2\xd4\xec8\x8b\xb6e\x96\xe9\xc3\x93\xed\x94.\xc2\xa0\x1fU#\x96\xe6\xb6C\xfa\x03/\x8b\x0e2\xec\x96v\x9b/.\v\x9e\x80\x18s\xae.\xf4\x14KS`\x87\x8b4\t\x00\x87{\xa8@e\xbfe\xeb\xee\xa2\xe72\xb8Q:\x9f\xc2ym\x86\xc4\xcbm\x80%\xfc\x9e\x9f', &(0x7f0000002840)='tty \x00\x02\x00!\a\x9bp^|#\xcbhl\x97\xa3_\xbc\x04\x9d!\xd9\x9f\x9f\xb4\x96\x13\x12\xe0\r\xe7\xb9E\b\x00\x00\x00l\xaaY\xe1Q<\x19\xc0\xf6Yf\x9au^\xa0\xc9j\xdd-I\x01R\x00w\xf7\x15\x04\xa6\x82aY\x1d\xd7\f>Y\x06\"\xad\xb6\x88_\xeb\at\x91\xd3\xbf\xea\xddt\xe0\bt\x06S,\xdbH\xa7-\xaaw\xcet\x044\xc5\xa9e\xa9\xf6\x1b\x8e\x05\x86\x91IsC\xb9ul\xaeu\x94\x9b\xaf\x04\xc4\x03\"F\x8f\xd5\xe8\r\x8d\xa1\x00\xcc\xd7\xa0\xe1\xeb\xc1>\xbd\t\xc8\x15\v\xb0, \xee\xa4\xa6\xb9a\x01&\xadrj\xd5\xc26p\xa14\xe0\xbf\xa0\x1es\x01=\xdbd\xf0?=\x8afcJ\x8eYEn\xd4<\x00\xec\xe4^\x00\x00\x00\xca\x90\xfa\x98\xc9gty\xce\xab\xd2\xa1\x85E\xe4\xa9\xd5\xab\x83\xda?w\x83\xbc\xcf\xd20(L&b\xed\x8c\x1d\x1a\x9fd\x99H\x9e\x82\x10\xea\x05\xf8\xff\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\xa6\x8c\x05n\x83\x83\x12+\x16\xc1\x00\x04\x00\x00\x13:o\x0f\x1fB\xa4\x00wB\x92h\xde\xfal3\x88e\x04J\\\x00D\xae`\x8e\xadd\xa8;\xee\xc4K\xe8]\x84\x90\xb8d\xfb\x95\xb3\xe9(x_\x80]\xadW\xd5\xa9\xaa\x03\x9c6\xa9\xc4\x01\x03\xea\xe5\x90\x85\x16\xb0DV\x13\x01\xab\x01\xf0\x8f\x02\xc2\xc8\x9b\x03\x1f\xd7\xdbN\\\xc0\xcd?Pg\xd5q\x13\xbd \xfa\xab\xccJK\x11\\\x16~#P.\xc9K\x15r\x04\xd9Z;\xc0\x8dOze\x96\xe9\xc3\x93\xed\x94.\xc2\xa0\x1fU#\x96\xe6\xb6C\xfa\x03/\x8b\x0e2\xec\x96v\x9b/.\v\x9e\x80\x18s\xae.\xf4\x14KS`\x87\x8b4\t\x00\x87{\xa8@e\xbfe\xeb\xee\xa2\xe72\xb8Q:\x9f\xc2b\x897\xbe\r\x04\xdf\xe2\xc0\xf0FV\'m\xcbm\x80%\xfc\x9e\x9f\x87\x80A\xbe\xc2\x00\x00\x00\x00\x00\x006\x96\xbb\x9f\x85\x98\xbb\xbc;\xaa\x97c\xfe\x82jz&t\xa7\xc4\xcd\xb0\b9G\xcag\fY\xe6\r\xcdT\xd3\x1c(\xef\xc0\x038\xbd\xdd\xd9\xc9\x93a]q\xd2\x9b\a\x1e\xf8\xc3\"\xc8:\xb8$\x9f\'P\x17\xfa\xf3Xa\trB-\xf2g\xe6Z\xd5F\xd2\x80\xe0\x99\"\xc12\xe8\b\xc58\x00'/659) sysctl$net_inet_ip(&(0x7f0000000200)={0x4, 0x2, 0x0, 0x28}, 0x4, &(0x7f0000000240)="b20db2f7", &(0x7f0000000280)=0x4, &(0x7f00000002c0), 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r2 = syz_open_pts() fcntl$lock(r2, 0x7, &(0x7f0000000040)) connect$unix(r1, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0xa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000000)=@file={0xd1653077bafa0114, './file0\x00'}, 0xa) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000280)=@file={0xd1653077bafa0114, './file0\x00'}, 0xa) connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x2}, 0x8) 2.110161432s ago: executing program 6: openat$bpf(0xffffffffffffff9c, &(0x7f0000000040), 0x462, 0x0) openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$BIOCGRTIMEOUT(r0, 0x4010426e, &(0x7f0000000080)) ioctl$BIOCSDLT(r0, 0x8004427a, &(0x7f00000000c0)=0x9) utimensat(0xffffffffffffffff, &(0x7f0000001740)='./file0\x00', &(0x7f0000001bc0)={{0x4, 0x8}, {0x4, 0x7e000}}, 0x2) ioctl$BIOCGETIF(r0, 0x4020426b, &(0x7f0000000100)={""/16, @ifru_dstaddr=@in}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BIOCGRSIG(r1, 0x40044273, &(0x7f0000000180)) ioctl$TIOCSCTTY(r1, 0x20007461) syz_emit_ethernet(0x4e, &(0x7f00000001c0)={@random="135f9d81975c", @local, [], {@ipv4={0x800, {{0xa, 0x4, 0x1, 0x11, 0x40, 0x66, 0x3, 0x0, 0x2, 0x0, @local={0xac, 0x14, 0x0}, @loopback, {[@rr={0x7, 0xb, 0x80, [@local={0xac, 0x14, 0x0}, @multicast1]}, @ra={0x94, 0x6, 0x2}]}}, @generic="6433b1465f7c0c1004f0107cc82afc1a587bece773f16b3f"}}}}) geteuid() ioctl$TIOCSETVERAUTH(r1, 0x8004741c, &(0x7f0000000240)) r3 = openat$diskmap(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DIOCMAP(r3, 0xc0106477, &(0x7f0000000300)={&(0x7f00000002c0)='./file0\x00', r2}) ioctl$VNDIOCSET(r2, 0xc0384600, &(0x7f00000003c0)={&(0x7f0000000340)='./file0\x00', 0x5, &(0x7f0000000380)='./file0\x00', 0x8}) ioctl$BIOCLOCK(0xffffffffffffffff, 0x20004276) ioctl$VMM_IOC_INFO(0xffffffffffffffff, 0xc0185603, &(0x7f00000004c0)={0x93, 0x0, &(0x7f0000000400)=""/147}) write(r3, &(0x7f0000000500)="461807f8b011816da7a58a9c57772670f0c873f1e59e82e85e7282bbbc0f06033f19d8765a435e95459b2c9d29d24a597aded8b50570b3104531c4e02ff797e728e57f12ae0dd0c7054fca1eaf05e8e736ac32a51b9adeb1a8f86f032ccee1fe2c8fc5b0774f", 0x66) r4 = socket$unix(0x1, 0x1, 0x0) sendto$unix(r4, &(0x7f0000000580)="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", 0x1000, 0x609, &(0x7f0000001580)=@abs={0x2, 0x0, 0x2}, 0x8) ioctl$TIOCSPGRP(r1, 0x40047477, &(0x7f00000015c0)) ioctl$TIOCMGET(r1, 0x4004746a, &(0x7f0000001600)) recvfrom$unix(r2, &(0x7f0000001640)=""/121, 0x79, 0x800, &(0x7f00000016c0)=@file={0x0, './file0\x00'}, 0xa) r5 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000001700), 0x80, 0x0) r6 = openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000001a00), 0x40, 0x0) r7 = openat$speaker(0xffffffffffffff9c, &(0x7f0000001a40), 0x40, 0x0) r8 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000001a80), 0x80, 0x0) sendmsg$unix(r5, &(0x7f0000001b40)={&(0x7f0000001780)=@file={0x1, './file0\x00'}, 0xa, &(0x7f00000019c0)=[{&(0x7f00000017c0)="9f2706210539820478e152c13aa7e01c9c3dfdfe766d44e1c148367faed4e96712f53d46ba7701230f0e91886d626a3f8ee57dd4f2201f05852c85876cc8a197ccddef57", 0x44}, {&(0x7f0000001840)="d672c6b78d71cf41d51f409cfe1415ee579957854df7337f3ade8829fdae8587f501016d7d5638a74753a464396c9506c99bbdb1e07198c4eb5f58e6c89484e55fa50ae1a4c35d04c6dbbb27b49d34852fad19a11040b4d49986382490dfa47cccc3bfa9b4d1a165dedbd482", 0x6c}, {&(0x7f00000018c0)="a5bb08b2b4a0b907b7bc4b08bf9e679562bd05197324738d6988782e55af1b424f23767016d357c1ae5cc4ca72d689f0eaff4742b5ae08932eec55540f544f1825c3b672455564b93ce2d9de4680b7fc00a98bfc084df6117a7e1713c34687bbe84b5083d2ed714f43512278659c0025c6a52b955adeda085905c5be889ad7392f9d71ba37d99b0f33f749f398c611d906b965a49ad113f3d39acf620806dbd0ab39e71314966fb77b536f5847294e652f950e1057005fb332c44ede87053b110a6f5f1c54920d73fcc105690e8690f869abf2d182ee56132de47a76a509ad1c58ea049a48f63cbc7b", 0xe9}], 0x3, &(0x7f0000001ac0)=[@rights={0x18, 0xffff, 0x1, [r6, r4]}, @rights={0x30, 0xffff, 0x1, [r3, r7, r1, r5, r3, r1, r5, r8]}], 0x48, 0x6}, 0x0) socket(0x1, 0x2, 0x7) 1.058627459s ago: executing program 3: connect$unix(0xffffffffffffffff, &(0x7f0000000000), 0x1) r0 = socket(0x2, 0x3, 0x0) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000080)={'tap', 0x0}) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f00000001c0)={0x3, &(0x7f0000000240)=[{}, {0x64}, {0x6}]}) syz_emit_ethernet(0x1019, &(0x7f0000000400)=ANY=[]) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) munmap(&(0x7f000000e000/0x400000)=nil, 0x400000) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc5005601, &(0x7f0000000000)={0x10, 0x0, [{&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, 0x41000}, {&(0x7f0000538000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x200000000}, {&(0x7f00001d9000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil}, {&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil}, {&(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil}, {&(0x7f0000296000/0x3000)=nil, &(0x7f000033a000/0x4000)=nil}, {&(0x7f0000ff2000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil}, {&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil}, {0x0, &(0x7f00001d9000/0x1000)=nil}, {&(0x7f0000ffe000/0x2000)=nil, &(0x7f00001f4000/0x2000)=nil}, {&(0x7f0000002000/0x1000)=nil, &(0x7f0000ff9000/0x6000)=nil}, {&(0x7f00003fc000/0x2000)=nil, &(0x7f000009f000/0x4000)=nil}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000084000/0x1000)=nil}, {&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil}, {&(0x7f0000161000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil}], './file0\x00'}) r2 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$VMM_IOC_RUN(r2, 0xc2585601, &(0x7f0000000000)={0x2, 0x0, 0x1, 0x0, 0x0}) getsockopt(r0, 0x0, 0x65, 0x0, 0x0) bind(r0, &(0x7f0000000040)=@in6={0x18, 0x0, 0x1ff}, 0xc) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r3 = socket(0x2, 0x1, 0x0) connect$inet(r3, &(0x7f0000000000), 0x10) 1.049633602s ago: executing program 0: r0 = open(&(0x7f00000001c0)='.\x00', 0x0, 0x8) mkdirat(r0, &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x46) mkdirat(r0, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) unveil(&(0x7f00000004c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', &(0x7f00000000c0)='c\x00') unlinkat(r0, &(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) sysctl$hw(&(0x7f0000000000)={0x6, 0xd}, 0x2, 0x0, 0x0, 0x0, 0x0) setregid(r2, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r3 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) shmat(r3, &(0x7f0000001000/0x3000)=nil, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd605ccc3000146300fe8000000000000000000000000000aa000000000000000000000000000000014e224e21", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="d0000000a36169b7972ea41dbf52cbdfc6"]) sendmmsg(0xffffffffffffffff, &(0x7f00000019c0)={0x0}, 0x10, 0x0) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x6) r4 = socket(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0xffff, 0x200, &(0x7f0000000040)=0x4, 0x4) close(0xffffffffffffffff) ioctl$FIOASYNC(0xffffffffffffffff, 0x8004667d, &(0x7f0000000380)=0x81f) connect$unix(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) sendmmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0}, 0xffffffffffffff2e, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000100), &(0x7f0000000240)=0xc) r5 = semget$private(0x0, 0x5, 0x2c4) semop(r5, &(0x7f0000000180)=[{0x0, 0x2, 0x1000}, {0x3, 0x0, 0x1000}, {0x3, 0x89ab, 0x800}], 0x3) semop(r5, 0xffffffffffffffff, 0x53) setreuid(0xee00, 0x0) seteuid(0xffffffffffffffff) shmget$private(0x0, 0x2000, 0x440, &(0x7f0000ffd000/0x2000)=nil) 12.525703ms ago: executing program 5: semget(0x3, 0x1, 0x20) r0 = geteuid() getgroups(0x0, &(0x7f0000000000)) getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000080), &(0x7f00000000c0)=0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) r5 = semget$private(0x0, 0x4000000009, 0x82) semop(r5, &(0x7f00000000c0)=[{0x4, 0x3}, {0x5, 0x2, 0x800}, {0x3, 0x4, 0x1800}, {0x4, 0x2}], 0x4) semop(r5, &(0x7f0000000440)=[{0x3}, {0x2, 0x94}, {0x0, 0x403, 0x1000}, {0x0, 0x2a4, 0x800}], 0x4) semctl$SETALL(r5, 0x0, 0x9, &(0x7f0000000040)) r6 = socket$unix(0x1, 0x2, 0x0) bind$unix(r6, &(0x7f0000000200)=@file={0xd570d0466b6018f, './file0\x00'}, 0xa) sendmsg$unix(r6, &(0x7f0000000080)={&(0x7f0000000040)=@file={0x170, './file0\x00'}, 0xa, 0x0}, 0x0) mquery(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffff9c, 0x7b) sysctl$net_inet_ip(&(0x7f0000000000)={0x4, 0x2, 0x0, 0x26}, 0x4, 0x0, 0x0, 0x0, 0x0) setsockopt(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)="03", 0xfffffffffffffde9) openat$wskbd(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) r7 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) setsockopt$sock_int(r2, 0xffff, 0x8, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r8 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) ioctl$WSMOUSEIO_SETPARAMS(r8, 0x80105727, &(0x7f0000000000)={0x0}) setreuid(0xee00, 0x0) r9 = getuid() setreuid(0xee00, r9) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000140)=@file={0x0, './file0\x00'}, 0xa, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000280)=[@cred={0x20, 0xffff, 0x0, r3}, @rights={0x20, 0xffff, 0x1, [r7, r7, r1]}, @cred={0x20, 0xffff, 0x0, 0x0, r0, r4}], 0x60, 0x402}, 0x3) socket(0x2, 0x4, 0xfc) ioctl$FIONREAD(r7, 0xc1126939, &(0x7f0000000300)) 0s ago: executing program 2: r0 = openat$bpf(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socketpair(0x20, 0x4000, 0x2, &(0x7f0000000040)={0xffffffffffffffff}) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000000)={{}, 0x0, 0x0, 0x1}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket(0x18, 0x2, 0x0) setsockopt(r2, 0x1000000000029, 0xb, &(0x7f0000000000)='\x00\x00\x00\x00', 0x4) setsockopt(r2, 0x1000000000029, 0xa, &(0x7f0000000040)="000001ad", 0x4) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x462, 0x0) ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f0000000200)={'tap', 0x0}) connect$inet(0xffffffffffffff9c, 0x0, 0x0) getpeername$inet6(0xffffffffffffffff, &(0x7f0000000200), 0x0) writev(0xffffffffffffffff, 0x0, 0x0) setreuid(0xee00, 0x0) setegid(0xffffffffffffffff) r4 = getegid() setgid(r4) r5 = getuid() seteuid(r5) ktrace(0x0, 0x5, 0x40000424, 0xffffffffffffffff) ioctl$BIOCSETWF(r3, 0x80104277, &(0x7f0000000240)={0x3, &(0x7f00000000c0)=[{0x60}, {0x1}, {0x26}]}) writev(r3, &(0x7f0000000140)=[{&(0x7f0000000340)="022f6769ee459530a2e8be8eb007", 0xe}], 0x1) dup2(r0, r1) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000000)={'tap', 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f0000000440)=0xc) getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0xc) msgsnd(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="030001000000000069f7da1bcfaeddfdb80900000045d01617a978446a42b93f1fcb9f6bddb52b7ce67aa652c427e7e6fc03a1f3c7ed6101877203cc306ad9eebe4398ef8bd75cb62b11b40bb4dabc0f13469867c1541415384fdb42184d73f1fcff32304ce84bfbfc3c1bdab5b7750c6c79350d31e7e8bd0fd030bec793fa51386e496540798a440713e5d9f7a80192a578f43fff59a2de5d8afe988613738eec364193ef2ea7a00eca738236872d3a7e08"], 0x58, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000300)={{0x0, 0x0, r6, 0xffffffffffffffff, r7, 0x20, 0x1}, 0x6, 0x6, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0, 0x5}) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000280)={{0x7f, r5, r6, r5, r4, 0x14, 0x40}, 0x5, 0x0, 0x625e5a48}) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f00000001c0)={0x3, &(0x7f0000000240)=[{0x1d}, {0x1}, {0x6}]}) syz_emit_ethernet(0x3e, &(0x7f0000000380)=ANY=[]) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.161' (ED25519) to the list of known hosts. 2024/06/25 15:26:48 fuzzer started 2024/06/25 15:26:54 dialing manager at 10.128.15.235:30002 2024/06/25 15:26:54 starting 8 executor processes pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error vm_impl_init: uvm_share failed (22) failed to init arch-specific features for vm 0xffff80003735db30 pckbd_enable: command error in6_pcbnotify: Huh? Thought we never got called with mapped!                OpenBSD/amd64 (ci-openbsd-multicore-0.c.syzkaller.internal) (tty00) login: witness: lock order reversal: 1st 0xffff800000e126e8 sbufsnd (&so->so_snd.sb_lock) 2nd 0xfffffd806b1120a8 inode (&ip->i_lock) lock order [1] sbufsnd (&so->so_snd.sb_lock) -> [2] inode (&ip->i_lock) lock order data 0xffffffff8292c146 -> 0xffffffff828d64a9 is missing lock order [2] inode (&ip->i_lock) -> [3] sbufrcv (&so->so_rcv.sb_lock) #0 rw_enter+0xd1 #1 sblock+0x8a #2 soreceive+0x201 #3 fifo_read+0xd2 #4 VOP_READ+0xc3 #5 vn_rdwr+0x10a #6 vndsetcred+0x86 #7 vndioctl+0xac1 #8 VOP_IOCTL+0x9a #9 vn_ioctl+0xc0 #10 sys_ioctl+0x4a9 #11 syscall+0x8cf #12 Xsyscall+0x128 lock order [3] sbufrcv (&so->so_rcv.sb_lock) -> [1] sbufsnd (&so->so_snd.sb_lock) #0 rw_enter+0xd1 #1 sblock+0x8a #2 sosplice+0x2a7 #3 sys_setsockopt+0x1d7 #4 syscall+0x8cf #5 Xsyscall+0x128 Stopped at db_enter+0x1c: addq $0x8,%rsp ddb{0}> ddb{0}> set $lines = 0 ddb{0}> set $maxwidth = 0 ddb{0}> show panic the kernel did not panic ddb{0}> trace db_enter() at db_enter+0x1c witness_checkorder(fffffd806b1120a8,9,0) at witness_checkorder+0xc05 rw_enter(fffffd806b112098,1) at rw_enter+0xd1 rrw_enter(fffffd806b112098,1) at rrw_enter+0x91 VOP_LOCK(fffffd807989b630,2001) at VOP_LOCK+0x8b vn_lock(fffffd807989b630,2001) at vn_lock+0x85 vfs_lookup(ffff80002f929ca8) at vfs_lookup+0xd3 namei(ffff80002f929ca8) at namei+0x56a unp_connect(ffff800000e12540,fffffd806d365c00,ffff8000ffffdc40) at unp_connect+0x1ce uipc_dgram_send(ffff800000e12540,fffffd8079efa200,fffffd806d365c00,0) at uipc_dgram_send+0xd7 sosend(ffff800000e12540,fffffd806d365c00,ffff80002f929f38,0,0,0) at sosend+0x7aa sendit(ffff8000ffffdc40,5,ffff80002f92a0b0,0,ffff80002f92a170) at sendit+0x54c sys_sendmsg(ffff8000ffffdc40,ffff80002f92a220,ffff80002f92a170) at sys_sendmsg+0x19b syscall(ffff80002f92a220) at syscall+0x8cf Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x27ed68c5b60, count: -15 ddb{0}> show registers rdi 0 rsi 0x40000 acpi_pdirpa+0x2be71 rbp 0xffff80002f929900 rbx 0xffffffff828e9404 pp_r600_decoded_lanes+0x2e88d rdx 0xffff800000e08600 rcx 0xffff8000ffffdc40 rax 0x3ffff acpi_pdirpa+0x2be70 r8 0xffff80002f9297e0 r9 0x8080808080808080 r10 0xf80e4c5ac28c1ca1 r11 0xf37db4ccff9bf466 r12 0xfffffd8003b25cf0 r13 0xfffffd800333ddc0 r14 0x3 r15 0xffffffff rip 0xffffffff81cae62c db_enter+0x1c cs 0x8 rflags 0x246 rsp 0xffff80002f9298f0 ss 0x10 db_enter+0x1c: addq $0x8,%rsp ddb{0}> show proc PROC (syz-executor.5) tid=388684 pid=56892 tcnt=2 stat=onproc flags process=8000000 proc=4000000 runpri=32, usrpri=77, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff8000ffff5738,0xffffffff82ea1428 process=0xffff8000ffff1ae8 user=0xffff80002f925000, vmspace=0xfffffd806c388010 estcpu=36, cpticks=0, pctcpu=0.0, user=0, sys=0, intr=0 ddb{0}> ps PID TID PPID UID S FLAGS WAIT COMMAND 56892 255087 24182 0 2 0x8000000 syz-executor.5 *56892 388684 24182 0 7 0xc000000 syz-executor.5 50940 318582 35621 0 2 0x8000000 syz-executor.3 50940 518257 35621 0 2 0xc000000 syz-executor.3 7192 21488 38785 0 2 0x8000000 syz-executor.0 15552 307852 73467 0 7 0x8000000 syz-executor.6 15552 408265 73467 0 3 0xc000080 fsleep syz-executor.6 15552 110269 73467 0 3 0xc000080 fsleep syz-executor.6 9522 366344 11972 0 2 0x8000000 syz-executor.4 9522 335318 11972 0 3 0xc000080 kqsel syz-executor.4 9522 341390 11972 0 3 0xc000080 fsleep syz-executor.4 25364 217019 48353 0 2 0x8000002 syz-executor.7 68315 475732 1 0 3 0x18100083 ttyin getty 38785 458155 48353 0 2 0x8000002 syz-executor.0 41286 178602 0 0 3 0x14200 bored sosplice 24182 68469 48353 0 3 0x8000082 nanoslp syz-executor.5 11972 394144 48353 0 3 0x8000082 nanoslp syz-executor.4 73467 342256 48353 0 3 0x8000082 nanoslp syz-executor.6 31570 200365 48353 0 3 0x8000002 biowait syz-executor.2 35621 272483 48353 0 3 0x8000082 nanoslp syz-executor.3 96701 256911 48353 0 3 0x8000082 nanoslp syz-executor.1 48353 122789 59217 0 3 0x1a000082 wait syz-fuzzer 48353 465858 59217 0 3 0x1e000082 nanoslp syz-fuzzer 48353 111211 59217 0 3 0x1e000082 wait syz-fuzzer 48353 248119 59217 0 3 0x1e000082 wait syz-fuzzer 48353 486810 59217 0 3 0x1e000082 wait syz-fuzzer 48353 463540 59217 0 2 0x1e000002 syz-fuzzer 48353 415709 59217 0 3 0x1e000082 thrsleep syz-fuzzer 48353 463160 59217 0 3 0x1e000082 kqread syz-fuzzer 48353 308474 59217 0 3 0x1e000082 thrsleep syz-fuzzer 48353 193475 59217 0 3 0x1e000082 wait syz-fuzzer 48353 428350 59217 0 3 0x1e000082 thrsleep syz-fuzzer 48353 322399 59217 0 3 0x1e000082 thrsleep syz-fuzzer 48353 403838 59217 0 3 0x1e000082 wait syz-fuzzer 48353 413211 59217 0 3 0x1e000082 wait syz-fuzzer 48353 195906 59217 0 3 0x1e000082 wait syz-fuzzer 59217 68270 10759 0 3 0x810008a sigsusp ksh 10759 510776 91285 0 3 0x1800009a kqread sshd 91285 279800 1 0 3 0x18000088 kqread sshd 56052 345936 15414 73 3 0x19100090 kqread syslogd 15414 329019 1 0 3 0x18100082 sbwait syslogd 96522 302538 1 0 3 0x18100080 kqread resolvd 37413 422773 4513 77 3 0x18100092 kqread dhcpleased 19341 264050 4513 77 3 0x18100092 kqread dhcpleased 4513 448336 1 0 3 0x18000080 kqread dhcpleased 76894 91321 0 0 3 0x14200 bored smr 74981 417906 0 0 2 0x14200 zerothread 73881 387496 0 0 3 0x14200 aiodoned aiodoned 85962 4297 0 0 3 0x14200 syncer update 32992 349221 0 0 3 0x14200 cleaner cleaner 59328 468370 0 0 3 0x14200 reaper reaper 84094 88331 0 0 3 0x14200 pgdaemon pagedaemon 1888 31841 0 0 3 0x14200 bored viomb 4548 142905 0 0 3 0x40014200 acpi0 acpi0 62261 138114 0 0 3 0x40014200 idle1 12643 159947 0 0 3 0x14200 bored softnet3 66641 36646 0 0 3 0x14200 bored softnet2 81387 435306 0 0 3 0x14200 bored softnet1 21231 360101 0 0 3 0x14200 bored softnet0 2583 112830 0 0 3 0x14200 bored systqmp 82396 174429 0 0 3 0x14200 bored systq 70262 202881 0 0 3 0x14200 tmoslp softclockmp 53622 123176 0 0 3 0x40014200 tmoslp softclock 49339 121088 0 0 3 0x40014200 idle0 1 146474 0 0 3 0x8000082 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb{0}> show all locks Process 56892 (syz-executor.5) thread 0xffff8000ffffdc40 (388684) exclusive kernel_lock &kernel_lock r = 0 (0xffffffff82dea520) #0 witness_lock+0x446 #1 unp_connect+0x1c6 #2 uipc_dgram_send+0xd7 #3 sosend+0x7aa #4 sendit+0x54c #5 sys_sendmsg+0x19b #6 syscall+0x8cf #7 Xsyscall+0x128 exclusive rwlock sbufsnd r = 0 (0xffff800000e126e8) #0 witness_lock+0x446 #1 rw_enter+0x32d #2 sblock+0x8a #3 sosend+0x259 #4 sendit+0x54c #5 sys_sendmsg+0x19b #6 syscall+0x8cf #7 Xsyscall+0x128 Process 31570 (syz-executor.2) thread 0xffff8000ffff67c8 (200365) exclusive rrwlock inode r = 0 (0xfffffd806b112818) #0 witness_lock+0x446 #1 rw_enter+0x32d #2 rrw_enter+0x91 #3 VOP_LOCK+0x8b #4 vn_lock+0x85 #5 vget+0x1fd #6 ufs_ihashget+0x121 #7 ffs_vget+0x7c #8 ufs_lookup+0x1373 #9 VOP_LOOKUP+0x5c #10 vfs_lookup+0x6f8 #11 namei+0x56a #12 dounlinkat+0x9d #13 syscall+0x854 #14 Xsyscall+0x128 exclusive rrwlock inode r = 0 (0xfffffd8069e065f0) #0 witness_lock+0x446 #1 rw_enter+0x32d #2 rrw_enter+0x91 #3 VOP_LOCK+0x8b #4 vn_lock+0x85 #5 vfs_lookup+0xd3 #6 namei+0x56a #7 dounlinkat+0x9d #8 syscall+0x854 #9 Xsyscall+0x128 ddb{0}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 10194 6441K 6948K 166960K 11734 0 pcb 18 12K 12K 166960K 64 0 rtable 178 7K 8K 166960K 426 0 pf 29 8K 10K 166960K 54 0 ifaddr 35 13K 15K 166960K 57 0 ifgroup 50 2K 2K 166960K 76 0 counters 64 36K 36K 166960K 76 0 ioctlops 0 0K 4K 166960K 1500 0 iov 0 0K 12K 166960K 6 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1385 87K 88K 166960K 1627 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 5K 166960K 7 0 VM map 2 1K 1K 166960K 2 0 sem 12 0K 0K 166960K 34 0 dirhash 12 2K 2K 166960K 15 0 ACPI 1697 195K 286K 166960K 12548 0 file desc 16 57K 93K 166960K 361 0 sigio 0 0K 0K 166960K 8 0 proc 64 103K 115K 166960K 575 0 subproc 104 6K 7K 166960K 130 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 50 0 in_multi 66 4K 7K 166960K 128 0 ether_multi 1 0K 0K 166960K 4 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 67 307K 307K 166960K 67 0 exec 0 0K 1K 166960K 434 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 280 77K 96K 166960K 5657 0 UVM aobj 12 4K 4K 166960K 12 0 pinsyscall 36 72K 100K 166960K 1559 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 0K 166960K 11 0 NDP 11 0K 1K 166960K 35 0 temp 52 6798K 6866K 166960K 10571 0 kqueue 12 18K 24K 166960K 51 0 SYN cache 2 16K 16K 166960K 2 0 ddb{0}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 24 0 0 1 0 1 1 0 8 0 rtpcb 120 62 0 59 1 0 1 1 0 8 0 rtentry 112 128 0 49 4 0 4 4 0 8 0 unpcb 144 268 0 249 3 1 2 2 0 8 1 syncache 336 4 0 4 1 1 0 1 0 8 0 tcpqe 32 11 0 11 1 1 0 1 0 8 0 tcpcb 808 73 0 67 2 1 1 2 0 8 0 arp 120 22 0 10 1 0 1 1 0 8 0 inpcb 384 272 0 258 3 1 2 3 0 8 0 nd6 136 29 0 12 1 0 1 1 0 8 0 kcovpl 48 10 0 2 1 0 1 1 0 8 0 pffrag 232 1 0 0 1 0 1 1 0 482 0 pffrnode 88 1 0 0 1 0 1 1 0 8 0 pffrent 40 3 0 2 1 0 1 1 0 8 0 pfosfp 40 1428 0 1005 5 0 5 5 0 8 0 pfosfpen 112 1428 0 714 21 0 21 21 0 8 0 pfstitem 24 34 0 4 1 0 1 1 0 8 0 pfstkey 128 34 0 4 1 0 1 1 0 8 0 pfstate 376 34 0 4 3 0 3 3 0 8 0 pfrule 1344 21 0 15 2 0 2 2 0 8 0 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 502 0 179 29 3 26 29 0 8 2 art_table 32 503 0 179 4 0 4 4 0 8 0 art_node 16 127 0 55 1 0 1 1 0 8 0 sysvmsgpl 40 8 0 4 1 0 1 1 0 8 0 semupl 112 1 0 1 1 0 1 1 0 8 1 semapl 112 31 0 21 1 0 1 1 0 8 0 shmpl 112 9 0 0 1 0 1 1 0 8 0 dirhash 1024 19 0 2 3 0 3 3 0 8 0 dino2pl 256 1979 0 461 96 0 96 96 0 8 0 ffsino 272 1979 0 461 102 0 102 102 0 8 0 nchpl 144 2606 0 867 67 0 67 67 0 8 0 uvmvnodes 80 2275 0 0 47 0 47 47 0 8 0 vnodes 216 2275 0 0 127 0 127 127 0 8 0 namei 1024 9209 0 9208 2 1 1 2 0 8 0 percpumem 16 52 0 6 1 0 1 1 0 8 0 vmpool 696 2 0 2 1 0 1 1 0 8 1 kstatmem 264 34 0 12 2 0 2 2 0 8 0 scxspl 216 9599 0 9598 10 2 8 8 1 8 7 plimitpl 152 68 0 53 1 0 1 1 0 8 0 sigapl 424 673 0 627 7 0 7 7 0 8 0 futexpl 64 4321 0 4318 1 0 1 1 0 8 0 knotepl 120 600 0 0 19 0 19 19 0 8 0 kqueuepl 216 90 0 81 1 0 1 1 0 8 0 pipepl 320 185 0 156 3 0 3 3 0 8 0 fdescpl 496 653 0 626 6 1 5 5 0 8 0 filepl 152 3540 0 3282 11 0 11 11 0 8 0 lockfpl 104 107 0 104 1 0 1 1 0 8 0 lockfspl 48 49 0 46 1 0 1 1 0 8 0 sessionpl 144 26 0 10 1 0 1 1 0 8 0 pgrppl 48 29 0 13 1 0 1 1 0 8 0 ucredpl 104 364 0 354 1 0 1 1 0 8 0 zombiepl 144 628 0 627 1 0 1 1 0 8 0 processpl 1144 673 0 627 4 0 4 4 0 8 0 procpl 656 965 0 899 7 0 7 7 0 8 0 srpgc 96 4 0 4 1 1 0 1 0 8 0 sosppl 168 2 0 2 1 1 0 1 0 8 0 sockpl 664 603 0 567 5 0 5 5 0 8 1 mcl64k 65536 7 0 0 1 0 1 1 0 8 0 mcl16k 16384 2 0 0 1 0 1 1 0 8 0 mcl12k 12288 2 0 0 1 0 1 1 0 8 0 mcl8k 8192 3 0 0 1 0 1 1 0 8 0 mcl4k 4096 2 0 0 1 0 1 1 0 8 0 mcl2k 2048 379 0 0 48 0 48 48 0 8 0 mtagpl 96 10 0 0 1 0 1 1 0 8 0 mbufpl 256 399 0 0 25 0 25 25 0 8 0 bufpl 280 5078 0 188 350 0 350 350 0 8 0 anonpl 24 238458 0 232553 65 3 62 62 0 186 23 amapchunkpl 152 18560 0 17911 39 0 39 39 0 158 10 amappl16 200 6390 0 6251 8 0 8 8 0 8 0 amappl15 192 18 0 17 2 1 1 1 0 8 0 amappl14 184 186 0 175 2 1 1 2 0 8 0 amappl13 176 17 0 17 2 2 0 1 0 8 0 amappl12 168 1360 0 1329 3 0 3 3 0 8 0 amappl11 160 66 0 48 1 0 1 1 0 8 0 amappl10 152 73 0 68 1 0 1 1 0 8 0 amappl9 144 384 0 384 2 2 0 1 0 8 0 amappl8 136 157 0 128 2 0 2 2 0 8 0 amappl7 128 58 0 45 1 0 1 1 0 8 0 amappl6 120 326 0 314 2 1 1 2 0 8 0 amappl5 112 171 0 158 1 0 1 1 0 8 0 amappl4 104 566 0 533 2 0 2 2 0 8 0 amappl3 96 3363 0 3283 3 0 3 3 0 8 0 amappl2 88 1054 0 985 4 2 2 4 0 8 0 amappl1 80 10481 0 9997 23 11 12 22 0 8 1 amappl 88 5069 0 4880 6 0 6 6 0 92 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 11 0 0 1 0 1 1 0 8 0 uaddrrnd 24 655 0 628 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 655 0 628 1 0 1 1 0 8 0 vmmpekpl 168 9914 0 9863 3 0 3 3 0 8 0 vmmpepl 168 62361 0 60521 118 7 111 118 0 357 26 vmsppl 440 654 0 628 4 0 4 4 0 8 0 rwobjpl 56 25095 0 21737 50 2 48 48 0 8 0 pdppl 4096 1317 0 1256 107 42 65 79 0 8 4 pvpl 32 49340 0 0 400 2 398 398 0 265 0 pmappl 248 654 0 628 4 1 3 3 0 8 0 extentpl 40 56 0 38 1 0 1 1 0 8 0 phpool 112 423 0 50 12 0 12 12 0 8 0 ddb{0}> machine ddbcpu 0 Invalid cpu 0 ddb{0}> trace db_enter() at db_enter+0x1c witness_checkorder(fffffd806b1120a8,9,0) at witness_checkorder+0xc05 rw_enter(fffffd806b112098,1) at rw_enter+0xd1 rrw_enter(fffffd806b112098,1) at rrw_enter+0x91 VOP_LOCK(fffffd807989b630,2001) at VOP_LOCK+0x8b vn_lock(fffffd807989b630,2001) at vn_lock+0x85 vfs_lookup(ffff80002f929ca8) at vfs_lookup+0xd3 namei(ffff80002f929ca8) at namei+0x56a unp_connect(ffff800000e12540,fffffd806d365c00,ffff8000ffffdc40) at unp_connect+0x1ce uipc_dgram_send(ffff800000e12540,fffffd8079efa200,fffffd806d365c00,0) at uipc_dgram_send+0xd7 sosend(ffff800000e12540,fffffd806d365c00,ffff80002f929f38,0,0,0) at sosend+0x7aa sendit(ffff8000ffffdc40,5,ffff80002f92a0b0,0,ffff80002f92a170) at sendit+0x54c sys_sendmsg(ffff8000ffffdc40,ffff80002f92a220,ffff80002f92a170) at sys_sendmsg+0x19b syscall(ffff80002f92a220) at syscall+0x8cf Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x27ed68c5b60, count: -15 ddb{0}> machine ddbcpu 1 Stopped at x86_ipi_db+0x1e: addq $0x8,%rsp ddb{1}> trace x86_ipi_db(ffff800029cebff0) at x86_ipi_db+0x1e x86_ipi_handler() at x86_ipi_handler+0xb7 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc+0x2c __mp_lock(ffffffff82dea318) at __mp_lock+0x133 syscall(ffff80002f8ee6b0) at syscall+0x83b Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x747b7a11c620, count: -7