last executing test programs: 34.80058907s ago: executing program 4 (id=56): r0 = syz_open_pts() syz_open_pts() r1 = syz_open_pts() flock(r0, 0x6) (async) flock(r0, 0x6) mknod(&(0x7f0000000100)='./file0\x00', 0x2000, 0x33a5) r2 = open(&(0x7f0000000140)='./file0\x00', 0x80, 0xc3) ioctl$TIOCCONS(r2, 0xc0a86b06, &(0x7f0000000180)=0x1) (async) ioctl$TIOCCONS(r2, 0xc0a86b06, &(0x7f0000000180)=0x1) setsockopt$inet6_MRT6_ADD_MIF(r2, 0x29, 0x66, &(0x7f0000000040)={0x7, 0x1, 0x5dac}, 0x6) fstat(r0, 0x0) (async) fstat(r0, 0x0) mknod(&(0x7f00000001c0)='./file0\x00', 0x2000, 0x6204) open$dir(&(0x7f0000000200)='./file0\x00', 0x8, 0x174) mknod(&(0x7f0000000000)='./file0\x00', 0x6000, 0x200) r3 = kqueue1(0x0) kevent(r3, &(0x7f00000000c0)=[{{}, 0xfffffffffffffff6, 0x9, 0x96f799025b5b12ad, 0xff, 0xfff}], 0x4, 0x0, 0xffff4b4d, 0x0) kevent(r3, 0x0, 0x0, 0x0, 0x8, 0x0) (async) kevent(r3, 0x0, 0x0, 0x0, 0x8, 0x0) closefrom(r3) (async) closefrom(r3) openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000380), 0x1, 0x0) (async) r4 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000380), 0x1, 0x0) fcntl$lock(r4, 0x8, &(0x7f00000003c0)={0x0, 0x0, 0xfffffff7fffffffd, 0x1000100000001, 0x1}) (async) fcntl$lock(r4, 0x8, &(0x7f00000003c0)={0x0, 0x0, 0xfffffff7fffffffd, 0x1000100000001, 0x1}) open$dir(&(0x7f0000000080)='./file0\x00', 0x40000, 0x8) syz_emit_ethernet(0x9f, &(0x7f0000000280)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x2, 0x36, 0x91, 0x68, 0x0, 0x3, 0x1, 0x0, @multicast1, @rand_addr=0x80000004}, @udp={{0x1, 0x1, 0x8}, {"620c7cd95c85b8a0ba5fc69843ae523cf9402a06e4bf9d807957f70caf8063b13e4fa7716f8ac9b200d814d9168492d318c6ad53238a55dd1097e2be87012352d460bad71e39be270ed365a9d705bab9d933d4fe46bbeee83305ad50e03ce0af44b319d70b93afbdd8d5137a4fbd4ab3eace7ff147"}}}}}}) ioctl$WSDISPLAYIO_GBURNER(r3, 0x400c5752, &(0x7f0000000340)) (async) ioctl$WSDISPLAYIO_GBURNER(r3, 0x400c5752, &(0x7f0000000340)) setsid() ioctl$TIOCSTAT(r4, 0x20007465) r5 = syz_open_pts() ioctl$TIOCSCTTY(r5, 0x20007461) ioctl$TIOCDRAIN(r5, 0x2000745e) ioctl$FIONBIO(r1, 0x8004667e, &(0x7f0000000400)=0xffffffc0) syz_open_pts() (async) syz_open_pts() 30.010432613s ago: executing program 4 (id=56): r0 = syz_open_pts() syz_open_pts() r1 = syz_open_pts() flock(r0, 0x6) (async) flock(r0, 0x6) mknod(&(0x7f0000000100)='./file0\x00', 0x2000, 0x33a5) r2 = open(&(0x7f0000000140)='./file0\x00', 0x80, 0xc3) ioctl$TIOCCONS(r2, 0xc0a86b06, &(0x7f0000000180)=0x1) (async) ioctl$TIOCCONS(r2, 0xc0a86b06, &(0x7f0000000180)=0x1) setsockopt$inet6_MRT6_ADD_MIF(r2, 0x29, 0x66, &(0x7f0000000040)={0x7, 0x1, 0x5dac}, 0x6) fstat(r0, 0x0) (async) fstat(r0, 0x0) mknod(&(0x7f00000001c0)='./file0\x00', 0x2000, 0x6204) open$dir(&(0x7f0000000200)='./file0\x00', 0x8, 0x174) mknod(&(0x7f0000000000)='./file0\x00', 0x6000, 0x200) r3 = kqueue1(0x0) kevent(r3, &(0x7f00000000c0)=[{{}, 0xfffffffffffffff6, 0x9, 0x96f799025b5b12ad, 0xff, 0xfff}], 0x4, 0x0, 0xffff4b4d, 0x0) kevent(r3, 0x0, 0x0, 0x0, 0x8, 0x0) (async) kevent(r3, 0x0, 0x0, 0x0, 0x8, 0x0) closefrom(r3) (async) closefrom(r3) openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000380), 0x1, 0x0) (async) r4 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000380), 0x1, 0x0) fcntl$lock(r4, 0x8, &(0x7f00000003c0)={0x0, 0x0, 0xfffffff7fffffffd, 0x1000100000001, 0x1}) (async) fcntl$lock(r4, 0x8, &(0x7f00000003c0)={0x0, 0x0, 0xfffffff7fffffffd, 0x1000100000001, 0x1}) open$dir(&(0x7f0000000080)='./file0\x00', 0x40000, 0x8) syz_emit_ethernet(0x9f, &(0x7f0000000280)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x2, 0x36, 0x91, 0x68, 0x0, 0x3, 0x1, 0x0, @multicast1, @rand_addr=0x80000004}, @udp={{0x1, 0x1, 0x8}, {"620c7cd95c85b8a0ba5fc69843ae523cf9402a06e4bf9d807957f70caf8063b13e4fa7716f8ac9b200d814d9168492d318c6ad53238a55dd1097e2be87012352d460bad71e39be270ed365a9d705bab9d933d4fe46bbeee83305ad50e03ce0af44b319d70b93afbdd8d5137a4fbd4ab3eace7ff147"}}}}}}) ioctl$WSDISPLAYIO_GBURNER(r3, 0x400c5752, &(0x7f0000000340)) (async) ioctl$WSDISPLAYIO_GBURNER(r3, 0x400c5752, &(0x7f0000000340)) setsid() ioctl$TIOCSTAT(r4, 0x20007465) r5 = syz_open_pts() ioctl$TIOCSCTTY(r5, 0x20007461) ioctl$TIOCDRAIN(r5, 0x2000745e) ioctl$FIONBIO(r1, 0x8004667e, &(0x7f0000000400)=0xffffffc0) syz_open_pts() (async) syz_open_pts() 26.860353754s ago: executing program 3 (id=134): r0 = accept(0xffffffffffffff9c, 0x0, &(0x7f00000002c0)) mmap(&(0x7f00003c6000/0x3000)=nil, 0x3000, 0x3, 0x4013, r0, 0x4) (async, rerun: 32) open(&(0x7f0000000280)='./file0\x00', 0x80, 0x16b) (rerun: 32) madvise(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x6) (async) openat$bpf(0xffffffffffffff9c, &(0x7f0000000300), 0x200, 0x0) (async) socket$unix(0x1, 0x5, 0x0) (async) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x8010640d, &(0x7f0000000140)={0x5, 0xffffffffffffffff}) (async, rerun: 32) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000180), 0x10, 0x0) (rerun: 32) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) ioctl$BIOCIMMEDIATE(r1, 0x80044270, &(0x7f0000000200)=0x10) setitimer(0x1, &(0x7f0000000100)={{0xffffffff, 0x1}, {0xffffff82, 0x2}}, 0x0) (async) ioctl$WSMOUSEIO_SETPARAMS(0xffffffffffffffff, 0x80105728, &(0x7f0000000340)={&(0x7f0000000380)=[{0x4, 0x1}], 0x1}) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) (async) sysctl$net_inet6_ip6(&(0x7f00000003c0)={0x4, 0x18, 0x29, 0x32}, 0x4, 0x0, 0x0, 0x0, 0x0) (async) syz_emit_ethernet(0xe, &(0x7f0000000240)={@local, @local, [], {@generic={0xbaf}}}) r2 = kqueue1(0x10000) kevent(r2, 0x0, 0xfffffffa, &(0x7f0000000280), 0xc, 0x0) kevent(r2, &(0x7f00000002c0), 0xf00, 0x0, 0xffff4b54, 0x0) (async) syz_emit_ethernet(0x6e, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6f75184a00383a002a3b1ae57db8883fa6958273532df404b6584ac86e879d34949bad1e5fa7433f030090780f00000068a69fb680f62f5146dc68838300000000000000000000007d5aa9fec879b727a3f3988eabcf75433a00070000000000"]) (async) r3 = syz_open_pts() fcntl$lock(r3, 0x9, &(0x7f0000000000)={0x5, 0xa13, 0x0, 0x1, 0x1}) (async, rerun: 64) fcntl$lock(r3, 0x9, &(0x7f0000000040)={0xa17, 0x1, 0x0, 0x2, 0x1}) (rerun: 64) 26.8577892s ago: executing program 7 (id=8): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = syz_open_pts() write(r2, &(0x7f0000000200)='B', 0x1) (async) r3 = socket$inet6(0x18, 0x1, 0x6) closefrom(r3) (async) r4 = openat$wskbd(0xffffffffffffff9c, &(0x7f00000005c0), 0x20, 0x0) preadv(r4, &(0x7f0000000600)=[{&(0x7f0000000640)=""/152, 0x98}, {&(0x7f0000000700)=""/134, 0x86}], 0x2, 0x0) mkdir(&(0x7f00000007c0)='./file0\x00', 0x148) (async, rerun: 32) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000800)={0xffffffffffffffff}) (async, rerun: 32) r6 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) (async, rerun: 64) r7 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000880), 0x10000, 0x0) (rerun: 64) pselect(0x40, &(0x7f00000008c0)={0xe0, 0x0, 0x101, 0x22e8, 0x2, 0xffffffff, 0x80000000000b, 0x3}, 0x0, 0x0, 0x0, 0x0) (async) ioctl$DIOCMAP(r7, 0xc0106477, &(0x7f0000000900)={&(0x7f0000000940)='./file0\x00', r6, 0x1}) closefrom(r5) (async, rerun: 32) setrlimit(0x8, &(0x7f0000000240)={0x9, 0x37e1690f}) (async, rerun: 32) unveil(0x0, &(0x7f0000000280)='w\x00') (async) recvmmsg(r0, &(0x7f00000002c0)={{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/195, 0xc3}, 0x47}, 0x38, 0x3000, 0x0) connect$inet6(r3, &(0x7f0000000500)={0x1c, 0x18, 0x1, 0x6ee, "4a76e33dc67fb8d72823f1917d43f1a3", 0x2}, 0x1c) (async, rerun: 32) mknod(&(0x7f0000000480)='./file0\x00', 0x2000, 0xb) (async, rerun: 32) r8 = open(&(0x7f00000004c0)='./file0\x00', 0x80, 0xc3) pread(r8, 0x0, 0x0, 0x9) (async, rerun: 64) r9 = semget$private(0x0, 0x7, 0xe478e4112efc9473) (rerun: 64) semop(r9, &(0x7f0000000540)=[{0x0, 0x800, 0x1000}], 0x1) (async) semop(r9, &(0x7f0000000580)=[{0x0, 0x47a2, 0x1000}], 0x1) sendmmsg(r1, &(0x7f0000000400)={{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="48000000ffff000001"], 0x48}}, 0x38, 0x0) (async) r10 = openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$DIOCADDQUEUE(r10, 0xc148445d, &(0x7f0000000080)={0x2, 0xe4f, {'\x00', './file0/file0\x00', './file0\x00', './file0\x00', {{0x9, 0xffffffff}, {0x9, 0x4}, 0x3}, {{0x0, 0x6fa}, {0x7, 0xfffffff6}, 0x6}, {{0x800, 0x4}, {0x2, 0xff}, 0x9}, {0x5, 0xac7, 0x0, 0xff}, 0x0, 0xfffff77e, 0x9, 0x8}}) 23.744913735s ago: executing program 4 (id=56): r0 = syz_open_pts() syz_open_pts() r1 = syz_open_pts() flock(r0, 0x6) (async) flock(r0, 0x6) mknod(&(0x7f0000000100)='./file0\x00', 0x2000, 0x33a5) r2 = open(&(0x7f0000000140)='./file0\x00', 0x80, 0xc3) ioctl$TIOCCONS(r2, 0xc0a86b06, &(0x7f0000000180)=0x1) (async) ioctl$TIOCCONS(r2, 0xc0a86b06, &(0x7f0000000180)=0x1) setsockopt$inet6_MRT6_ADD_MIF(r2, 0x29, 0x66, &(0x7f0000000040)={0x7, 0x1, 0x5dac}, 0x6) fstat(r0, 0x0) (async) fstat(r0, 0x0) mknod(&(0x7f00000001c0)='./file0\x00', 0x2000, 0x6204) open$dir(&(0x7f0000000200)='./file0\x00', 0x8, 0x174) mknod(&(0x7f0000000000)='./file0\x00', 0x6000, 0x200) r3 = kqueue1(0x0) kevent(r3, &(0x7f00000000c0)=[{{}, 0xfffffffffffffff6, 0x9, 0x96f799025b5b12ad, 0xff, 0xfff}], 0x4, 0x0, 0xffff4b4d, 0x0) kevent(r3, 0x0, 0x0, 0x0, 0x8, 0x0) (async) kevent(r3, 0x0, 0x0, 0x0, 0x8, 0x0) closefrom(r3) (async) closefrom(r3) openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000380), 0x1, 0x0) (async) r4 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000380), 0x1, 0x0) fcntl$lock(r4, 0x8, &(0x7f00000003c0)={0x0, 0x0, 0xfffffff7fffffffd, 0x1000100000001, 0x1}) (async) fcntl$lock(r4, 0x8, &(0x7f00000003c0)={0x0, 0x0, 0xfffffff7fffffffd, 0x1000100000001, 0x1}) open$dir(&(0x7f0000000080)='./file0\x00', 0x40000, 0x8) syz_emit_ethernet(0x9f, &(0x7f0000000280)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x2, 0x36, 0x91, 0x68, 0x0, 0x3, 0x1, 0x0, @multicast1, @rand_addr=0x80000004}, @udp={{0x1, 0x1, 0x8}, {"620c7cd95c85b8a0ba5fc69843ae523cf9402a06e4bf9d807957f70caf8063b13e4fa7716f8ac9b200d814d9168492d318c6ad53238a55dd1097e2be87012352d460bad71e39be270ed365a9d705bab9d933d4fe46bbeee83305ad50e03ce0af44b319d70b93afbdd8d5137a4fbd4ab3eace7ff147"}}}}}}) ioctl$WSDISPLAYIO_GBURNER(r3, 0x400c5752, &(0x7f0000000340)) (async) ioctl$WSDISPLAYIO_GBURNER(r3, 0x400c5752, &(0x7f0000000340)) setsid() ioctl$TIOCSTAT(r4, 0x20007465) r5 = syz_open_pts() ioctl$TIOCSCTTY(r5, 0x20007461) ioctl$TIOCDRAIN(r5, 0x2000745e) ioctl$FIONBIO(r1, 0x8004667e, &(0x7f0000000400)=0xffffffc0) syz_open_pts() (async) syz_open_pts() 23.744421884s ago: executing program 7 (id=8): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = syz_open_pts() write(r2, &(0x7f0000000200)='B', 0x1) (async) r3 = socket$inet6(0x18, 0x1, 0x6) closefrom(r3) (async) r4 = openat$wskbd(0xffffffffffffff9c, &(0x7f00000005c0), 0x20, 0x0) preadv(r4, &(0x7f0000000600)=[{&(0x7f0000000640)=""/152, 0x98}, {&(0x7f0000000700)=""/134, 0x86}], 0x2, 0x0) mkdir(&(0x7f00000007c0)='./file0\x00', 0x148) (async, rerun: 32) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000800)={0xffffffffffffffff}) (async, rerun: 32) r6 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) (async, rerun: 64) r7 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000880), 0x10000, 0x0) (rerun: 64) pselect(0x40, &(0x7f00000008c0)={0xe0, 0x0, 0x101, 0x22e8, 0x2, 0xffffffff, 0x80000000000b, 0x3}, 0x0, 0x0, 0x0, 0x0) (async) ioctl$DIOCMAP(r7, 0xc0106477, &(0x7f0000000900)={&(0x7f0000000940)='./file0\x00', r6, 0x1}) closefrom(r5) (async, rerun: 32) setrlimit(0x8, &(0x7f0000000240)={0x9, 0x37e1690f}) (async, rerun: 32) unveil(0x0, &(0x7f0000000280)='w\x00') (async) recvmmsg(r0, &(0x7f00000002c0)={{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/195, 0xc3}, 0x47}, 0x38, 0x3000, 0x0) connect$inet6(r3, &(0x7f0000000500)={0x1c, 0x18, 0x1, 0x6ee, "4a76e33dc67fb8d72823f1917d43f1a3", 0x2}, 0x1c) (async, rerun: 32) mknod(&(0x7f0000000480)='./file0\x00', 0x2000, 0xb) (async, rerun: 32) r8 = open(&(0x7f00000004c0)='./file0\x00', 0x80, 0xc3) pread(r8, 0x0, 0x0, 0x9) (async, rerun: 64) r9 = semget$private(0x0, 0x7, 0xe478e4112efc9473) (rerun: 64) semop(r9, &(0x7f0000000540)=[{0x0, 0x800, 0x1000}], 0x1) (async) semop(r9, &(0x7f0000000580)=[{0x0, 0x47a2, 0x1000}], 0x1) sendmmsg(r1, &(0x7f0000000400)={{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="48000000ffff000001"], 0x48}}, 0x38, 0x0) (async) r10 = openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$DIOCADDQUEUE(r10, 0xc148445d, &(0x7f0000000080)={0x2, 0xe4f, {'\x00', './file0/file0\x00', './file0\x00', './file0\x00', {{0x9, 0xffffffff}, {0x9, 0x4}, 0x3}, {{0x0, 0x6fa}, {0x7, 0xfffffff6}, 0x6}, {{0x800, 0x4}, {0x2, 0xff}, 0x9}, {0x5, 0xac7, 0x0, 0xff}, 0x0, 0xfffff77e, 0x9, 0x8}}) 19.671798325s ago: executing program 0 (id=120): dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x20000) (async) r0 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x20000) write(r0, &(0x7f0000000280)="cb9faad841e581f4fe8de35f00c23e3c05e2a8d27f3d2432697c2248c3001a06596c14dc43f1d8445b9941ea5b27c3564d7fe57fad80bd4a2053bcf4c5add469ad69ed03fc4d1bef2b3ce893e79a7250322ed4985aa6ea99731d9311", 0xfffffffffffffdd7) syz_open_pts() (async) r1 = syz_open_pts() socket$inet6(0x18, 0x5, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) write(r1, &(0x7f0000000180)="42956cf44f020276fc0429f0fa0249ac87f212ac3279c6f884d14c5eed5aaa4c2eaf36f9ad7e70b5bb26eb11439eab2536d9e8e1d625f1719e456ee2df2b507bc9e908df6b07", 0x46) (async) write(r1, &(0x7f0000000180)="42956cf44f020276fc0429f0fa0249ac87f212ac3279c6f884d14c5eed5aaa4c2eaf36f9ad7e70b5bb26eb11439eab2536d9e8e1d625f1719e456ee2df2b507bc9e908df6b07", 0x46) closefrom(r2) (async) closefrom(r2) sysctl$vfs_nfs(&(0x7f0000000140)={0xa, 0x2, 0x2}, 0x3, 0x0, 0x0, &(0x7f0000000200)="eaa03e32", 0x4) setrlimit(0x8, &(0x7f0000000040)={0x9, 0x37e1690f}) socketpair(0x10, 0x3, 0x0, 0x0) openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x8, 0x0) r3 = syz_open_pts() write(r3, &(0x7f00000000c0)="7ef5b69389691e24966a3ddf3d32cdb3fcdc1293054eedfc4c98644011ebd4ed712cded9d188c11bac6dc6f23ec53ad394df0db649d54e94008b07a4f2bed0dcc32676b30e95899f3b7832668feb78b297aec2da4d621cfaccad7c3ab9bba6112ceb8ac3ea84b89b600c7a", 0xfe76) (async) write(r3, &(0x7f00000000c0)="7ef5b69389691e24966a3ddf3d32cdb3fcdc1293054eedfc4c98644011ebd4ed712cded9d188c11bac6dc6f23ec53ad394df0db649d54e94008b07a4f2bed0dcc32676b30e95899f3b7832668feb78b297aec2da4d621cfaccad7c3ab9bba6112ceb8ac3ea84b89b600c7a", 0xfe76) ioctl$TIOCSETAW(r1, 0x802c7415, &(0x7f0000000000)={0x1007, 0x6, 0xffffffc0, 0x3b6d67b8, "fe09fe7adfd4070ff9ffffff9caaac0349bfe360", 0xff, 0x3}) write(r1, &(0x7f00000000c0)="7ef5b69389691e24966a3ddf3d32cdb3fcdc1293054eedfc4c98644011ebd4ed712cded9d188c11bac6dc6f23ec53ad394df0db649d54e94008b07a4f2bed0dcc32676b30e95899f3b7832668feb78b297aec2da4d621cfaccad7c3ab9bba6112ceb8ac3ea84b89b600c7a", 0xfe76) 19.671626165s ago: executing program 1 (id=101): pipe(&(0x7f0000000000)={0xffffffffffffffff}) close(r0) setrlimit(0x1, &(0x7f0000000180)={0x3, 0x4}) open(&(0x7f0000000040)='./file0\x00', 0x200, 0xc2) ktrace(&(0x7f0000000080)='./file0\x00', 0x4, 0x1914, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x10, r0, 0x0) (async, rerun: 64) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f00000001c0), 0x400, 0x0) (async, rerun: 64) setrlimit(0xab2babed9825d77a, &(0x7f0000000240)={0x5, 0x4280000000}) ioctl$BIOCLOCK(r1, 0x20004276) ioctl$BIOCGRSIG(r1, 0x8010427e, &(0x7f0000000200)) (async) r2 = socket$inet(0x2, 0x3, 0x22) (async) r3 = socket$inet(0x2, 0x3, 0x21) connect$inet(r3, &(0x7f0000000400)={0x10, 0x2, 0x3, 0xffffffff}, 0x10) sendmmsg(r3, &(0x7f0000000440)={{0x0, 0x0, 0x0, 0x0, 0x0}}, 0x38, 0xa) (async) connect$inet(r2, &(0x7f0000000480)={0x10, 0x2, 0x3, 0xffffffff}, 0x10) (async) getpeername$unix(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) sendmmsg(r2, &(0x7f00000004c0)={{0x0, 0x0, 0x0, 0x0, 0x0}}, 0x38, 0xa) (rerun: 64) sysctl$kern(&(0x7f00000000c0)={0x1, 0x4f}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x4) (async, rerun: 64) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0x80047308, &(0x7f00000002c0)={0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff}) (async) setrlimit(0x4, &(0x7f0000000300)={0xfffffffffffffffe, 0xffffffffffffffa8}) fcntl$dupfd(r5, 0xa, r6) (async) r7 = socket$inet6(0x18, 0x1000, 0x10) r8 = openat$null(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) r9 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0) ioctl$WSKBDIO_SETMAP(r9, 0x8010570e, &(0x7f0000000380)={0x2, &(0x7f00000003c0)=[{0x5, 0x6, 0x36e9, 0x89, 0xfff8}, {0x10, 0x6, 0x4, 0xb5, 0x5a}]}) (async) pwritev(r8, 0x0, 0x0, 0x40) (async, rerun: 64) setsockopt$inet6_MRT6_ADD_MIF(r7, 0x29, 0x39, &(0x7f0000000100)={0x0, 0x0, 0xfeab}, 0x6) (async, rerun: 64) msgsnd(0x0, &(0x7f0000000fc0)=ANY=[@ANYRES16=r7], 0x39, 0x0) 19.671361806s ago: executing program 2 (id=61): mkfifo(&(0x7f0000000000)='./file0\x00', 0x8) ktrace(&(0x7f0000000300)='./file0\x00', 0x4, 0x0, 0x0) r0 = openat$vnd(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) sysctl$vfs_nfs(&(0x7f0000000040), 0x3, &(0x7f0000000340)="5586c1006a54f8cc86674e213e8b826bf99332ed94ab9eef5ba22e62be51e952f9cb44f3a037cd8ef1621f6910f97d5ae630a442c8711ae22fecb6b37d070bd14e8e236fbbdff2b73b0f131966efd7e9b912c1118e15ad745683c5ba4809ad6f3a36c78ce14788cddbb5b8f7f97ffb881e880caed33eb7b0b7646dc9a263394276d363744603b2b2d76c75bc6c725f2b2e5b3e6dfe59d7763c54e14d9c80596b4355f9e2f022c8978f725f5455311ca68700000000000000008a21a793c1f61ec223f575", &(0x7f0000000440)=0xc4, &(0x7f0000000480)="b06b50026feb1b42c764ce10d6c3494dc5cd265d6a25ffa9453df0910b3c445b218b30f3e6e41cfc08b019cd65bfd0dae6169d3c09c333a681bcfb79ab07c48f65aa7d966f600f4c4612275869a54bad49547c8323efe111b521c4d14188df5753f95516201c5bc8f8079aae8e9390939542e6933e1e6c78770f0a6fd4d06df7b5829d7746e4f1d8bc8966c7471c64e8e57cb6994068b78dda8bb263850023e04bf849074848fede727d5e026663f5a119db344edbbc6319c69089ce0cd4", 0xbe) ioctl$VNDIOCSET(r0, 0xc0384600, &(0x7f0000000100)={&(0x7f0000000140)='./file0\x00', 0x3, 0x0, 0x0, 0x0, 0x0}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0x80047308, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) closefrom(r3) socket$inet6(0x18, 0x1, 0x0) socket$inet6(0x18, 0x2, 0x0) socket$inet(0x2, 0x3, 0x0) socket$inet6(0x18, 0x2, 0x0) setsockopt$sock_cred(r1, 0xffff, 0x1023, &(0x7f00000001c0), 0x2b) open(&(0x7f0000000240)='./file0\x00', 0x200, 0x1f0) unveil(0x0, &(0x7f0000000280)='r\x00') 19.671252786s ago: executing program 3 (id=134): r0 = accept(0xffffffffffffff9c, 0x0, &(0x7f00000002c0)) mmap(&(0x7f00003c6000/0x3000)=nil, 0x3000, 0x3, 0x4013, r0, 0x4) (async, rerun: 32) open(&(0x7f0000000280)='./file0\x00', 0x80, 0x16b) (rerun: 32) madvise(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x6) (async) openat$bpf(0xffffffffffffff9c, &(0x7f0000000300), 0x200, 0x0) (async) socket$unix(0x1, 0x5, 0x0) (async) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x8010640d, &(0x7f0000000140)={0x5, 0xffffffffffffffff}) (async, rerun: 32) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000180), 0x10, 0x0) (rerun: 32) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) ioctl$BIOCIMMEDIATE(r1, 0x80044270, &(0x7f0000000200)=0x10) setitimer(0x1, &(0x7f0000000100)={{0xffffffff, 0x1}, {0xffffff82, 0x2}}, 0x0) (async) ioctl$WSMOUSEIO_SETPARAMS(0xffffffffffffffff, 0x80105728, &(0x7f0000000340)={&(0x7f0000000380)=[{0x4, 0x1}], 0x1}) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) (async) sysctl$net_inet6_ip6(&(0x7f00000003c0)={0x4, 0x18, 0x29, 0x32}, 0x4, 0x0, 0x0, 0x0, 0x0) (async) syz_emit_ethernet(0xe, &(0x7f0000000240)={@local, @local, [], {@generic={0xbaf}}}) r2 = kqueue1(0x10000) kevent(r2, 0x0, 0xfffffffa, &(0x7f0000000280), 0xc, 0x0) kevent(r2, &(0x7f00000002c0), 0xf00, 0x0, 0xffff4b54, 0x0) (async) syz_emit_ethernet(0x6e, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6f75184a00383a002a3b1ae57db8883fa6958273532df404b6584ac86e879d34949bad1e5fa7433f030090780f00000068a69fb680f62f5146dc68838300000000000000000000007d5aa9fec879b727a3f3988eabcf75433a00070000000000"]) (async) r3 = syz_open_pts() fcntl$lock(r3, 0x9, &(0x7f0000000000)={0x5, 0xa13, 0x0, 0x1, 0x1}) (async, rerun: 64) fcntl$lock(r3, 0x9, &(0x7f0000000040)={0xa17, 0x1, 0x0, 0x2, 0x1}) (rerun: 64) 19.671089723s ago: executing program 7 (id=8): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = syz_open_pts() write(r2, &(0x7f0000000200)='B', 0x1) (async) r3 = socket$inet6(0x18, 0x1, 0x6) closefrom(r3) (async) r4 = openat$wskbd(0xffffffffffffff9c, &(0x7f00000005c0), 0x20, 0x0) preadv(r4, &(0x7f0000000600)=[{&(0x7f0000000640)=""/152, 0x98}, {&(0x7f0000000700)=""/134, 0x86}], 0x2, 0x0) mkdir(&(0x7f00000007c0)='./file0\x00', 0x148) (async, rerun: 32) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000800)={0xffffffffffffffff}) (async, rerun: 32) r6 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) (async, rerun: 64) r7 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000880), 0x10000, 0x0) (rerun: 64) pselect(0x40, &(0x7f00000008c0)={0xe0, 0x0, 0x101, 0x22e8, 0x2, 0xffffffff, 0x80000000000b, 0x3}, 0x0, 0x0, 0x0, 0x0) (async) ioctl$DIOCMAP(r7, 0xc0106477, &(0x7f0000000900)={&(0x7f0000000940)='./file0\x00', r6, 0x1}) closefrom(r5) (async, rerun: 32) setrlimit(0x8, &(0x7f0000000240)={0x9, 0x37e1690f}) (async, rerun: 32) unveil(0x0, &(0x7f0000000280)='w\x00') (async) recvmmsg(r0, &(0x7f00000002c0)={{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/195, 0xc3}, 0x47}, 0x38, 0x3000, 0x0) connect$inet6(r3, &(0x7f0000000500)={0x1c, 0x18, 0x1, 0x6ee, "4a76e33dc67fb8d72823f1917d43f1a3", 0x2}, 0x1c) (async, rerun: 32) mknod(&(0x7f0000000480)='./file0\x00', 0x2000, 0xb) (async, rerun: 32) r8 = open(&(0x7f00000004c0)='./file0\x00', 0x80, 0xc3) pread(r8, 0x0, 0x0, 0x9) (async, rerun: 64) r9 = semget$private(0x0, 0x7, 0xe478e4112efc9473) (rerun: 64) semop(r9, &(0x7f0000000540)=[{0x0, 0x800, 0x1000}], 0x1) (async) semop(r9, &(0x7f0000000580)=[{0x0, 0x47a2, 0x1000}], 0x1) sendmmsg(r1, &(0x7f0000000400)={{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="48000000ffff000001"], 0x48}}, 0x38, 0x0) (async) r10 = openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$DIOCADDQUEUE(r10, 0xc148445d, &(0x7f0000000080)={0x2, 0xe4f, {'\x00', './file0/file0\x00', './file0\x00', './file0\x00', {{0x9, 0xffffffff}, {0x9, 0x4}, 0x3}, {{0x0, 0x6fa}, {0x7, 0xfffffff6}, 0x6}, {{0x800, 0x4}, {0x2, 0xff}, 0x9}, {0x5, 0xac7, 0x0, 0xff}, 0x0, 0xfffff77e, 0x9, 0x8}}) 18.781476227s ago: executing program 5 (id=155): sysctl$vm(&(0x7f0000000000)={0x2, 0xb}, 0x2, &(0x7f0000000680)="31bd188710", &(0x7f00000006c0)=0x5, 0x0, 0x0) openat$klog(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) (async) ioctl$DIOCRGETASTATS(0xffffffffffffffff, 0xc4504447, &(0x7f0000000200)={{'./file0\x00', './file0\x00', 0x10, 0x67}, &(0x7f0000000080)=[{@empty, '\x00', './file0\x00', 0x4, 0xfe5, 0x2, 0xa, 0x6, 0xfc, 0x6}, {@remote={0xac, 0x14, 0x0}, '\x00', './file0\x00', 0x1, 0x5, 0x0, 0x3, 0x4, 0x7}, {@empty, '\x00', './file0\x00', 0x1, 0x6, 0x18, 0x7, 0x5, 0x8, 0x5}, {@multicast2, '\x00', './file0\x00', 0x5, 0x6, 0xe, 0x62, 0x6, 0xe, 0xff}, {@broadcast, '\x00', './file0\x00', 0x5, 0x8, 0x32, 0x1, 0xff, 0x80}, {@multicast2, '\x00', './file0\x00', 0xfffffff8, 0x5, 0x2, 0x7, 0x1, 0xd8, 0x9}, {@broadcast, '\x00', './file0\x00', 0x0, 0xfff9, 0x0, 0x20, 0x8, 0x9, 0x7}], 0x0, 0x7, 0x0, 0x9, 0x200, 0x75bf, 0x10, 0xe}) 16.119282432s ago: executing program 0 (id=120): dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x20000) (async) r0 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x20000) write(r0, &(0x7f0000000280)="cb9faad841e581f4fe8de35f00c23e3c05e2a8d27f3d2432697c2248c3001a06596c14dc43f1d8445b9941ea5b27c3564d7fe57fad80bd4a2053bcf4c5add469ad69ed03fc4d1bef2b3ce893e79a7250322ed4985aa6ea99731d9311", 0xfffffffffffffdd7) syz_open_pts() (async) r1 = syz_open_pts() socket$inet6(0x18, 0x5, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) write(r1, &(0x7f0000000180)="42956cf44f020276fc0429f0fa0249ac87f212ac3279c6f884d14c5eed5aaa4c2eaf36f9ad7e70b5bb26eb11439eab2536d9e8e1d625f1719e456ee2df2b507bc9e908df6b07", 0x46) (async) write(r1, &(0x7f0000000180)="42956cf44f020276fc0429f0fa0249ac87f212ac3279c6f884d14c5eed5aaa4c2eaf36f9ad7e70b5bb26eb11439eab2536d9e8e1d625f1719e456ee2df2b507bc9e908df6b07", 0x46) closefrom(r2) (async) closefrom(r2) sysctl$vfs_nfs(&(0x7f0000000140)={0xa, 0x2, 0x2}, 0x3, 0x0, 0x0, &(0x7f0000000200)="eaa03e32", 0x4) setrlimit(0x8, &(0x7f0000000040)={0x9, 0x37e1690f}) socketpair(0x10, 0x3, 0x0, 0x0) openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x8, 0x0) r3 = syz_open_pts() write(r3, &(0x7f00000000c0)="7ef5b69389691e24966a3ddf3d32cdb3fcdc1293054eedfc4c98644011ebd4ed712cded9d188c11bac6dc6f23ec53ad394df0db649d54e94008b07a4f2bed0dcc32676b30e95899f3b7832668feb78b297aec2da4d621cfaccad7c3ab9bba6112ceb8ac3ea84b89b600c7a", 0xfe76) (async) write(r3, &(0x7f00000000c0)="7ef5b69389691e24966a3ddf3d32cdb3fcdc1293054eedfc4c98644011ebd4ed712cded9d188c11bac6dc6f23ec53ad394df0db649d54e94008b07a4f2bed0dcc32676b30e95899f3b7832668feb78b297aec2da4d621cfaccad7c3ab9bba6112ceb8ac3ea84b89b600c7a", 0xfe76) ioctl$TIOCSETAW(r1, 0x802c7415, &(0x7f0000000000)={0x1007, 0x6, 0xffffffc0, 0x3b6d67b8, "fe09fe7adfd4070ff9ffffff9caaac0349bfe360", 0xff, 0x3}) write(r1, &(0x7f00000000c0)="7ef5b69389691e24966a3ddf3d32cdb3fcdc1293054eedfc4c98644011ebd4ed712cded9d188c11bac6dc6f23ec53ad394df0db649d54e94008b07a4f2bed0dcc32676b30e95899f3b7832668feb78b297aec2da4d621cfaccad7c3ab9bba6112ceb8ac3ea84b89b600c7a", 0xfe76) 16.119105593s ago: executing program 1 (id=101): pipe(&(0x7f0000000000)={0xffffffffffffffff}) close(r0) setrlimit(0x1, &(0x7f0000000180)={0x3, 0x4}) open(&(0x7f0000000040)='./file0\x00', 0x200, 0xc2) ktrace(&(0x7f0000000080)='./file0\x00', 0x4, 0x1914, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x10, r0, 0x0) (async, rerun: 64) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f00000001c0), 0x400, 0x0) (async, rerun: 64) setrlimit(0xab2babed9825d77a, &(0x7f0000000240)={0x5, 0x4280000000}) ioctl$BIOCLOCK(r1, 0x20004276) ioctl$BIOCGRSIG(r1, 0x8010427e, &(0x7f0000000200)) (async) r2 = socket$inet(0x2, 0x3, 0x22) (async) r3 = socket$inet(0x2, 0x3, 0x21) connect$inet(r3, &(0x7f0000000400)={0x10, 0x2, 0x3, 0xffffffff}, 0x10) sendmmsg(r3, &(0x7f0000000440)={{0x0, 0x0, 0x0, 0x0, 0x0}}, 0x38, 0xa) (async) connect$inet(r2, &(0x7f0000000480)={0x10, 0x2, 0x3, 0xffffffff}, 0x10) (async) getpeername$unix(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) sendmmsg(r2, &(0x7f00000004c0)={{0x0, 0x0, 0x0, 0x0, 0x0}}, 0x38, 0xa) (rerun: 64) sysctl$kern(&(0x7f00000000c0)={0x1, 0x4f}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x4) (async, rerun: 64) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0x80047308, &(0x7f00000002c0)={0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff}) (async) setrlimit(0x4, &(0x7f0000000300)={0xfffffffffffffffe, 0xffffffffffffffa8}) fcntl$dupfd(r5, 0xa, r6) (async) r7 = socket$inet6(0x18, 0x1000, 0x10) r8 = openat$null(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) r9 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0) ioctl$WSKBDIO_SETMAP(r9, 0x8010570e, &(0x7f0000000380)={0x2, &(0x7f00000003c0)=[{0x5, 0x6, 0x36e9, 0x89, 0xfff8}, {0x10, 0x6, 0x4, 0xb5, 0x5a}]}) (async) pwritev(r8, 0x0, 0x0, 0x40) (async, rerun: 64) setsockopt$inet6_MRT6_ADD_MIF(r7, 0x29, 0x39, &(0x7f0000000100)={0x0, 0x0, 0xfeab}, 0x6) (async, rerun: 64) msgsnd(0x0, &(0x7f0000000fc0)=ANY=[@ANYRES16=r7], 0x39, 0x0) 16.1189843s ago: executing program 2 (id=61): mkfifo(&(0x7f0000000000)='./file0\x00', 0x8) ktrace(&(0x7f0000000300)='./file0\x00', 0x4, 0x0, 0x0) r0 = openat$vnd(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) sysctl$vfs_nfs(&(0x7f0000000040), 0x3, &(0x7f0000000340)="5586c1006a54f8cc86674e213e8b826bf99332ed94ab9eef5ba22e62be51e952f9cb44f3a037cd8ef1621f6910f97d5ae630a442c8711ae22fecb6b37d070bd14e8e236fbbdff2b73b0f131966efd7e9b912c1118e15ad745683c5ba4809ad6f3a36c78ce14788cddbb5b8f7f97ffb881e880caed33eb7b0b7646dc9a263394276d363744603b2b2d76c75bc6c725f2b2e5b3e6dfe59d7763c54e14d9c80596b4355f9e2f022c8978f725f5455311ca68700000000000000008a21a793c1f61ec223f575", &(0x7f0000000440)=0xc4, &(0x7f0000000480)="b06b50026feb1b42c764ce10d6c3494dc5cd265d6a25ffa9453df0910b3c445b218b30f3e6e41cfc08b019cd65bfd0dae6169d3c09c333a681bcfb79ab07c48f65aa7d966f600f4c4612275869a54bad49547c8323efe111b521c4d14188df5753f95516201c5bc8f8079aae8e9390939542e6933e1e6c78770f0a6fd4d06df7b5829d7746e4f1d8bc8966c7471c64e8e57cb6994068b78dda8bb263850023e04bf849074848fede727d5e026663f5a119db344edbbc6319c69089ce0cd4", 0xbe) ioctl$VNDIOCSET(r0, 0xc0384600, &(0x7f0000000100)={&(0x7f0000000140)='./file0\x00', 0x3, 0x0, 0x0, 0x0, 0x0}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0x80047308, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) closefrom(r3) socket$inet6(0x18, 0x1, 0x0) socket$inet6(0x18, 0x2, 0x0) socket$inet(0x2, 0x3, 0x0) socket$inet6(0x18, 0x2, 0x0) setsockopt$sock_cred(r1, 0xffff, 0x1023, &(0x7f00000001c0), 0x2b) open(&(0x7f0000000240)='./file0\x00', 0x200, 0x1f0) unveil(0x0, &(0x7f0000000280)='r\x00') 16.118822741s ago: executing program 4 (id=56): r0 = syz_open_pts() syz_open_pts() r1 = syz_open_pts() flock(r0, 0x6) (async) flock(r0, 0x6) mknod(&(0x7f0000000100)='./file0\x00', 0x2000, 0x33a5) r2 = open(&(0x7f0000000140)='./file0\x00', 0x80, 0xc3) ioctl$TIOCCONS(r2, 0xc0a86b06, &(0x7f0000000180)=0x1) (async) ioctl$TIOCCONS(r2, 0xc0a86b06, &(0x7f0000000180)=0x1) setsockopt$inet6_MRT6_ADD_MIF(r2, 0x29, 0x66, &(0x7f0000000040)={0x7, 0x1, 0x5dac}, 0x6) fstat(r0, 0x0) (async) fstat(r0, 0x0) mknod(&(0x7f00000001c0)='./file0\x00', 0x2000, 0x6204) open$dir(&(0x7f0000000200)='./file0\x00', 0x8, 0x174) mknod(&(0x7f0000000000)='./file0\x00', 0x6000, 0x200) r3 = kqueue1(0x0) kevent(r3, &(0x7f00000000c0)=[{{}, 0xfffffffffffffff6, 0x9, 0x96f799025b5b12ad, 0xff, 0xfff}], 0x4, 0x0, 0xffff4b4d, 0x0) kevent(r3, 0x0, 0x0, 0x0, 0x8, 0x0) (async) kevent(r3, 0x0, 0x0, 0x0, 0x8, 0x0) closefrom(r3) (async) closefrom(r3) openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000380), 0x1, 0x0) (async) r4 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000380), 0x1, 0x0) fcntl$lock(r4, 0x8, &(0x7f00000003c0)={0x0, 0x0, 0xfffffff7fffffffd, 0x1000100000001, 0x1}) (async) fcntl$lock(r4, 0x8, &(0x7f00000003c0)={0x0, 0x0, 0xfffffff7fffffffd, 0x1000100000001, 0x1}) open$dir(&(0x7f0000000080)='./file0\x00', 0x40000, 0x8) syz_emit_ethernet(0x9f, &(0x7f0000000280)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x2, 0x36, 0x91, 0x68, 0x0, 0x3, 0x1, 0x0, @multicast1, @rand_addr=0x80000004}, @udp={{0x1, 0x1, 0x8}, {"620c7cd95c85b8a0ba5fc69843ae523cf9402a06e4bf9d807957f70caf8063b13e4fa7716f8ac9b200d814d9168492d318c6ad53238a55dd1097e2be87012352d460bad71e39be270ed365a9d705bab9d933d4fe46bbeee83305ad50e03ce0af44b319d70b93afbdd8d5137a4fbd4ab3eace7ff147"}}}}}}) ioctl$WSDISPLAYIO_GBURNER(r3, 0x400c5752, &(0x7f0000000340)) (async) ioctl$WSDISPLAYIO_GBURNER(r3, 0x400c5752, &(0x7f0000000340)) setsid() ioctl$TIOCSTAT(r4, 0x20007465) r5 = syz_open_pts() ioctl$TIOCSCTTY(r5, 0x20007461) ioctl$TIOCDRAIN(r5, 0x2000745e) ioctl$FIONBIO(r1, 0x8004667e, &(0x7f0000000400)=0xffffffc0) syz_open_pts() (async) syz_open_pts() 16.118647179s ago: executing program 5 (id=157): r0 = socket$inet(0x2, 0x8003, 0x1) mkfifo(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40) rename(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000280)='./file0\x00') chmod(&(0x7f00000002c0)='./file0\x00', 0x19b) seteuid(0xffffffffffffffff) r1 = geteuid() setuid(r1) access(&(0x7f0000000300)='./file0\x00', 0x2) sysctl$hw(&(0x7f0000000000)={0x6, 0x19}, 0x2, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet6(0x18, 0x2, 0x0) sendmsg(r2, &(0x7f0000000340)={&(0x7f0000000380)=@in6={0x1c, 0x18, 0x2, 0x8, "00000000000000000000000000000001", 0x4}, 0x1c, 0x0, 0x0, 0x0}, 0x402) sendto$inet6(r2, 0x0, 0x0, 0x4, &(0x7f00000003c0)={0x1c, 0x18, 0x2, 0x101, "779feb35771e57aabcc4acd72774f08c"}, 0x1c) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) r3 = socket(0x11, 0x3, 0x9) write(r3, &(0x7f0000000040)="d4cbd4ce8666", 0x6) r4 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000400), 0x1, 0x0) ioctl$WSMOUSEIO_SETPARAMS(r4, 0x80105728, &(0x7f0000000440)={&(0x7f0000000480)=[{0x100, 0x6}, {0x2, 0x8}], 0x2}) mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2) getsockopt(r0, 0x0, 0x4, 0x0, 0x0) 16.117970062s ago: executing program 7 (id=8): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = syz_open_pts() write(r2, &(0x7f0000000200)='B', 0x1) (async) r3 = socket$inet6(0x18, 0x1, 0x6) closefrom(r3) (async) r4 = openat$wskbd(0xffffffffffffff9c, &(0x7f00000005c0), 0x20, 0x0) preadv(r4, &(0x7f0000000600)=[{&(0x7f0000000640)=""/152, 0x98}, {&(0x7f0000000700)=""/134, 0x86}], 0x2, 0x0) mkdir(&(0x7f00000007c0)='./file0\x00', 0x148) (async, rerun: 32) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000800)={0xffffffffffffffff}) (async, rerun: 32) r6 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) (async, rerun: 64) r7 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000880), 0x10000, 0x0) (rerun: 64) pselect(0x40, &(0x7f00000008c0)={0xe0, 0x0, 0x101, 0x22e8, 0x2, 0xffffffff, 0x80000000000b, 0x3}, 0x0, 0x0, 0x0, 0x0) (async) ioctl$DIOCMAP(r7, 0xc0106477, &(0x7f0000000900)={&(0x7f0000000940)='./file0\x00', r6, 0x1}) closefrom(r5) (async, rerun: 32) setrlimit(0x8, &(0x7f0000000240)={0x9, 0x37e1690f}) (async, rerun: 32) unveil(0x0, &(0x7f0000000280)='w\x00') (async) recvmmsg(r0, &(0x7f00000002c0)={{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/195, 0xc3}, 0x47}, 0x38, 0x3000, 0x0) connect$inet6(r3, &(0x7f0000000500)={0x1c, 0x18, 0x1, 0x6ee, "4a76e33dc67fb8d72823f1917d43f1a3", 0x2}, 0x1c) (async, rerun: 32) mknod(&(0x7f0000000480)='./file0\x00', 0x2000, 0xb) (async, rerun: 32) r8 = open(&(0x7f00000004c0)='./file0\x00', 0x80, 0xc3) pread(r8, 0x0, 0x0, 0x9) (async, rerun: 64) r9 = semget$private(0x0, 0x7, 0xe478e4112efc9473) (rerun: 64) semop(r9, &(0x7f0000000540)=[{0x0, 0x800, 0x1000}], 0x1) (async) semop(r9, &(0x7f0000000580)=[{0x0, 0x47a2, 0x1000}], 0x1) sendmmsg(r1, &(0x7f0000000400)={{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="48000000ffff000001"], 0x48}}, 0x38, 0x0) (async) r10 = openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$DIOCADDQUEUE(r10, 0xc148445d, &(0x7f0000000080)={0x2, 0xe4f, {'\x00', './file0/file0\x00', './file0\x00', './file0\x00', {{0x9, 0xffffffff}, {0x9, 0x4}, 0x3}, {{0x0, 0x6fa}, {0x7, 0xfffffff6}, 0x6}, {{0x800, 0x4}, {0x2, 0xff}, 0x9}, {0x5, 0xac7, 0x0, 0xff}, 0x0, 0xfffff77e, 0x9, 0x8}}) 15.369056958s ago: executing program 5 (id=158): mkdir(&(0x7f0000000400)='./file0\x00', 0x148) rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='./file0/file0/file0\x00') 11.480352403s ago: executing program 0 (id=120): dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x20000) (async) r0 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x20000) write(r0, &(0x7f0000000280)="cb9faad841e581f4fe8de35f00c23e3c05e2a8d27f3d2432697c2248c3001a06596c14dc43f1d8445b9941ea5b27c3564d7fe57fad80bd4a2053bcf4c5add469ad69ed03fc4d1bef2b3ce893e79a7250322ed4985aa6ea99731d9311", 0xfffffffffffffdd7) syz_open_pts() (async) r1 = syz_open_pts() socket$inet6(0x18, 0x5, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) write(r1, &(0x7f0000000180)="42956cf44f020276fc0429f0fa0249ac87f212ac3279c6f884d14c5eed5aaa4c2eaf36f9ad7e70b5bb26eb11439eab2536d9e8e1d625f1719e456ee2df2b507bc9e908df6b07", 0x46) (async) write(r1, &(0x7f0000000180)="42956cf44f020276fc0429f0fa0249ac87f212ac3279c6f884d14c5eed5aaa4c2eaf36f9ad7e70b5bb26eb11439eab2536d9e8e1d625f1719e456ee2df2b507bc9e908df6b07", 0x46) closefrom(r2) (async) closefrom(r2) sysctl$vfs_nfs(&(0x7f0000000140)={0xa, 0x2, 0x2}, 0x3, 0x0, 0x0, &(0x7f0000000200)="eaa03e32", 0x4) setrlimit(0x8, &(0x7f0000000040)={0x9, 0x37e1690f}) socketpair(0x10, 0x3, 0x0, 0x0) openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x8, 0x0) r3 = syz_open_pts() write(r3, &(0x7f00000000c0)="7ef5b69389691e24966a3ddf3d32cdb3fcdc1293054eedfc4c98644011ebd4ed712cded9d188c11bac6dc6f23ec53ad394df0db649d54e94008b07a4f2bed0dcc32676b30e95899f3b7832668feb78b297aec2da4d621cfaccad7c3ab9bba6112ceb8ac3ea84b89b600c7a", 0xfe76) (async) write(r3, &(0x7f00000000c0)="7ef5b69389691e24966a3ddf3d32cdb3fcdc1293054eedfc4c98644011ebd4ed712cded9d188c11bac6dc6f23ec53ad394df0db649d54e94008b07a4f2bed0dcc32676b30e95899f3b7832668feb78b297aec2da4d621cfaccad7c3ab9bba6112ceb8ac3ea84b89b600c7a", 0xfe76) ioctl$TIOCSETAW(r1, 0x802c7415, &(0x7f0000000000)={0x1007, 0x6, 0xffffffc0, 0x3b6d67b8, "fe09fe7adfd4070ff9ffffff9caaac0349bfe360", 0xff, 0x3}) write(r1, &(0x7f00000000c0)="7ef5b69389691e24966a3ddf3d32cdb3fcdc1293054eedfc4c98644011ebd4ed712cded9d188c11bac6dc6f23ec53ad394df0db649d54e94008b07a4f2bed0dcc32676b30e95899f3b7832668feb78b297aec2da4d621cfaccad7c3ab9bba6112ceb8ac3ea84b89b600c7a", 0xfe76) 11.271175253s ago: executing program 1 (id=101): pipe(&(0x7f0000000000)={0xffffffffffffffff}) close(r0) setrlimit(0x1, &(0x7f0000000180)={0x3, 0x4}) open(&(0x7f0000000040)='./file0\x00', 0x200, 0xc2) ktrace(&(0x7f0000000080)='./file0\x00', 0x4, 0x1914, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x10, r0, 0x0) (async, rerun: 64) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f00000001c0), 0x400, 0x0) (async, rerun: 64) setrlimit(0xab2babed9825d77a, &(0x7f0000000240)={0x5, 0x4280000000}) ioctl$BIOCLOCK(r1, 0x20004276) ioctl$BIOCGRSIG(r1, 0x8010427e, &(0x7f0000000200)) (async) r2 = socket$inet(0x2, 0x3, 0x22) (async) r3 = socket$inet(0x2, 0x3, 0x21) connect$inet(r3, &(0x7f0000000400)={0x10, 0x2, 0x3, 0xffffffff}, 0x10) sendmmsg(r3, &(0x7f0000000440)={{0x0, 0x0, 0x0, 0x0, 0x0}}, 0x38, 0xa) (async) connect$inet(r2, &(0x7f0000000480)={0x10, 0x2, 0x3, 0xffffffff}, 0x10) (async) getpeername$unix(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) sendmmsg(r2, &(0x7f00000004c0)={{0x0, 0x0, 0x0, 0x0, 0x0}}, 0x38, 0xa) (rerun: 64) sysctl$kern(&(0x7f00000000c0)={0x1, 0x4f}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x4) (async, rerun: 64) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0x80047308, &(0x7f00000002c0)={0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff}) (async) setrlimit(0x4, &(0x7f0000000300)={0xfffffffffffffffe, 0xffffffffffffffa8}) fcntl$dupfd(r5, 0xa, r6) (async) r7 = socket$inet6(0x18, 0x1000, 0x10) r8 = openat$null(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) r9 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0) ioctl$WSKBDIO_SETMAP(r9, 0x8010570e, &(0x7f0000000380)={0x2, &(0x7f00000003c0)=[{0x5, 0x6, 0x36e9, 0x89, 0xfff8}, {0x10, 0x6, 0x4, 0xb5, 0x5a}]}) (async) pwritev(r8, 0x0, 0x0, 0x40) (async, rerun: 64) setsockopt$inet6_MRT6_ADD_MIF(r7, 0x29, 0x39, &(0x7f0000000100)={0x0, 0x0, 0xfeab}, 0x6) (async, rerun: 64) msgsnd(0x0, &(0x7f0000000fc0)=ANY=[@ANYRES16=r7], 0x39, 0x0) 11.271001192s ago: executing program 2 (id=61): mkfifo(&(0x7f0000000000)='./file0\x00', 0x8) ktrace(&(0x7f0000000300)='./file0\x00', 0x4, 0x0, 0x0) r0 = openat$vnd(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) sysctl$vfs_nfs(&(0x7f0000000040), 0x3, &(0x7f0000000340)="5586c1006a54f8cc86674e213e8b826bf99332ed94ab9eef5ba22e62be51e952f9cb44f3a037cd8ef1621f6910f97d5ae630a442c8711ae22fecb6b37d070bd14e8e236fbbdff2b73b0f131966efd7e9b912c1118e15ad745683c5ba4809ad6f3a36c78ce14788cddbb5b8f7f97ffb881e880caed33eb7b0b7646dc9a263394276d363744603b2b2d76c75bc6c725f2b2e5b3e6dfe59d7763c54e14d9c80596b4355f9e2f022c8978f725f5455311ca68700000000000000008a21a793c1f61ec223f575", &(0x7f0000000440)=0xc4, &(0x7f0000000480)="b06b50026feb1b42c764ce10d6c3494dc5cd265d6a25ffa9453df0910b3c445b218b30f3e6e41cfc08b019cd65bfd0dae6169d3c09c333a681bcfb79ab07c48f65aa7d966f600f4c4612275869a54bad49547c8323efe111b521c4d14188df5753f95516201c5bc8f8079aae8e9390939542e6933e1e6c78770f0a6fd4d06df7b5829d7746e4f1d8bc8966c7471c64e8e57cb6994068b78dda8bb263850023e04bf849074848fede727d5e026663f5a119db344edbbc6319c69089ce0cd4", 0xbe) ioctl$VNDIOCSET(r0, 0xc0384600, &(0x7f0000000100)={&(0x7f0000000140)='./file0\x00', 0x3, 0x0, 0x0, 0x0, 0x0}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0x80047308, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) closefrom(r3) socket$inet6(0x18, 0x1, 0x0) socket$inet6(0x18, 0x2, 0x0) socket$inet(0x2, 0x3, 0x0) socket$inet6(0x18, 0x2, 0x0) setsockopt$sock_cred(r1, 0xffff, 0x1023, &(0x7f00000001c0), 0x2b) open(&(0x7f0000000240)='./file0\x00', 0x200, 0x1f0) unveil(0x0, &(0x7f0000000280)='r\x00') 11.270867723s ago: executing program 3 (id=134): r0 = accept(0xffffffffffffff9c, 0x0, &(0x7f00000002c0)) mmap(&(0x7f00003c6000/0x3000)=nil, 0x3000, 0x3, 0x4013, r0, 0x4) (async, rerun: 32) open(&(0x7f0000000280)='./file0\x00', 0x80, 0x16b) (rerun: 32) madvise(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x6) (async) openat$bpf(0xffffffffffffff9c, &(0x7f0000000300), 0x200, 0x0) (async) socket$unix(0x1, 0x5, 0x0) (async) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x8010640d, &(0x7f0000000140)={0x5, 0xffffffffffffffff}) (async, rerun: 32) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000180), 0x10, 0x0) (rerun: 32) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) ioctl$BIOCIMMEDIATE(r1, 0x80044270, &(0x7f0000000200)=0x10) setitimer(0x1, &(0x7f0000000100)={{0xffffffff, 0x1}, {0xffffff82, 0x2}}, 0x0) (async) ioctl$WSMOUSEIO_SETPARAMS(0xffffffffffffffff, 0x80105728, &(0x7f0000000340)={&(0x7f0000000380)=[{0x4, 0x1}], 0x1}) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) (async) sysctl$net_inet6_ip6(&(0x7f00000003c0)={0x4, 0x18, 0x29, 0x32}, 0x4, 0x0, 0x0, 0x0, 0x0) (async) syz_emit_ethernet(0xe, &(0x7f0000000240)={@local, @local, [], {@generic={0xbaf}}}) r2 = kqueue1(0x10000) kevent(r2, 0x0, 0xfffffffa, &(0x7f0000000280), 0xc, 0x0) kevent(r2, &(0x7f00000002c0), 0xf00, 0x0, 0xffff4b54, 0x0) (async) syz_emit_ethernet(0x6e, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6f75184a00383a002a3b1ae57db8883fa6958273532df404b6584ac86e879d34949bad1e5fa7433f030090780f00000068a69fb680f62f5146dc68838300000000000000000000007d5aa9fec879b727a3f3988eabcf75433a00070000000000"]) (async) r3 = syz_open_pts() fcntl$lock(r3, 0x9, &(0x7f0000000000)={0x5, 0xa13, 0x0, 0x1, 0x1}) (async, rerun: 64) fcntl$lock(r3, 0x9, &(0x7f0000000040)={0xa17, 0x1, 0x0, 0x2, 0x1}) (rerun: 64) 11.270691418s ago: executing program 4 (id=56): r0 = syz_open_pts() syz_open_pts() r1 = syz_open_pts() flock(r0, 0x6) (async) flock(r0, 0x6) mknod(&(0x7f0000000100)='./file0\x00', 0x2000, 0x33a5) r2 = open(&(0x7f0000000140)='./file0\x00', 0x80, 0xc3) ioctl$TIOCCONS(r2, 0xc0a86b06, &(0x7f0000000180)=0x1) (async) ioctl$TIOCCONS(r2, 0xc0a86b06, &(0x7f0000000180)=0x1) setsockopt$inet6_MRT6_ADD_MIF(r2, 0x29, 0x66, &(0x7f0000000040)={0x7, 0x1, 0x5dac}, 0x6) fstat(r0, 0x0) (async) fstat(r0, 0x0) mknod(&(0x7f00000001c0)='./file0\x00', 0x2000, 0x6204) open$dir(&(0x7f0000000200)='./file0\x00', 0x8, 0x174) mknod(&(0x7f0000000000)='./file0\x00', 0x6000, 0x200) r3 = kqueue1(0x0) kevent(r3, &(0x7f00000000c0)=[{{}, 0xfffffffffffffff6, 0x9, 0x96f799025b5b12ad, 0xff, 0xfff}], 0x4, 0x0, 0xffff4b4d, 0x0) kevent(r3, 0x0, 0x0, 0x0, 0x8, 0x0) (async) kevent(r3, 0x0, 0x0, 0x0, 0x8, 0x0) closefrom(r3) (async) closefrom(r3) openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000380), 0x1, 0x0) (async) r4 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000380), 0x1, 0x0) fcntl$lock(r4, 0x8, &(0x7f00000003c0)={0x0, 0x0, 0xfffffff7fffffffd, 0x1000100000001, 0x1}) (async) fcntl$lock(r4, 0x8, &(0x7f00000003c0)={0x0, 0x0, 0xfffffff7fffffffd, 0x1000100000001, 0x1}) open$dir(&(0x7f0000000080)='./file0\x00', 0x40000, 0x8) syz_emit_ethernet(0x9f, &(0x7f0000000280)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x2, 0x36, 0x91, 0x68, 0x0, 0x3, 0x1, 0x0, @multicast1, @rand_addr=0x80000004}, @udp={{0x1, 0x1, 0x8}, {"620c7cd95c85b8a0ba5fc69843ae523cf9402a06e4bf9d807957f70caf8063b13e4fa7716f8ac9b200d814d9168492d318c6ad53238a55dd1097e2be87012352d460bad71e39be270ed365a9d705bab9d933d4fe46bbeee83305ad50e03ce0af44b319d70b93afbdd8d5137a4fbd4ab3eace7ff147"}}}}}}) ioctl$WSDISPLAYIO_GBURNER(r3, 0x400c5752, &(0x7f0000000340)) (async) ioctl$WSDISPLAYIO_GBURNER(r3, 0x400c5752, &(0x7f0000000340)) setsid() ioctl$TIOCSTAT(r4, 0x20007465) r5 = syz_open_pts() ioctl$TIOCSCTTY(r5, 0x20007461) ioctl$TIOCDRAIN(r5, 0x2000745e) ioctl$FIONBIO(r1, 0x8004667e, &(0x7f0000000400)=0xffffffc0) syz_open_pts() (async) syz_open_pts() 11.270338445s ago: executing program 5 (id=159): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0x80047308, &(0x7f0000000140)={0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff}) closefrom(r4) syz_open_pts() open$dir(&(0x7f0000000180)='./file0\x00', 0x200, 0x41) ktrace(&(0x7f00000001c0)='./file0\x00', 0x4, 0x1836, 0x0) open$dir(&(0x7f0000000200)='./file0\x00', 0x200, 0x80) socket$inet(0x2, 0x3, 0x14) socket$inet(0x2, 0x4000, 0x7) r5 = socket$inet(0x2, 0x3, 0x40) sendmsg(r5, &(0x7f0000000240)={&(0x7f0000000280)=@in={0x10, 0x2, 0x3, 0xe0000001}, 0x10, 0x0, 0x0, 0x0}, 0x40a) recvmmsg(r1, &(0x7f00000002c0)={{&(0x7f0000000300)=@un=@abs, 0x8, 0x0, 0x0, 0x0}, 0x1ff}, 0x38, 0x60, 0x0) ioctl$BIOCSETWF(r3, 0x80104277, &(0x7f00000000c0)={0x1, &(0x7f0000000340)=[{0x1000, 0x7, 0x3, 0x8000007f}]}) write(r0, &(0x7f0000000080)="fd51521b5c1d6ad44789d64b76a7fe04c9358b811c8197e63346597c1478a72bfcc223dc5217055b61832a34cdb1419a3d598044783a78d4e4bd75dfd87c", 0x3e) r6 = kqueue() dup2(0xffffffffffffffff, 0xffffffffffffffff) kevent(r6, &(0x7f0000000340), 0x56, &(0x7f0000000380), 0x202, 0x0) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f00000003c0)={0x8, &(0x7f0000000400)=[{0xf, 0x20, 0x3, 0x5c}, {0x0, 0x1, 0x5}, {0x2, 0x3, 0x9, 0x4}, {0xfff8, 0x8, 0x6, 0x4}, {0x9, 0x0, 0x7, 0x7}, {0x9, 0x98, 0xe9, 0x62b9}, {0x9, 0x9, 0x7, 0x3ff}, {0xc183, 0x2, 0xc7, 0x7}]}) r7 = openat$pf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) pselect(0x0, 0x0, &(0x7f0000000480)={0x0, 0x7, 0xffff, 0x7f, 0x3, 0xe4, 0xb, 0xb70b}, &(0x7f00000004c0)={0xffffffffffff360f, 0x10000, 0x42b5, 0x6, 0x3, 0x4, 0x0, 0x1764}, 0x0, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000500)=ANY=[]) ioctl$DIOCCLRSTATUS(r3, 0xc0284416, &(0x7f0000000680)={'./file0\x00', &(0x7f0000000580)=""/226, 0x4, 0x9, 0x9}) ioctl$DIOCCLRSTATUS(r7, 0xc1084425, &(0x7f0000000540)={'./file0\x00', 0x0, 0x20009, 0x5, 0xb6a3, 0x5}) r8 = socket$inet6(0x18, 0x0, 0x7) recvmmsg(r8, &(0x7f0000000000)={{0x0, 0x0, &(0x7f00000026c0), 0x1000000000000161, 0x0}, 0xa}, 0x38, 0x1040, 0x0) 8.208153824s ago: executing program 0 (id=120): dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x20000) (async) r0 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x20000) write(r0, &(0x7f0000000280)="cb9faad841e581f4fe8de35f00c23e3c05e2a8d27f3d2432697c2248c3001a06596c14dc43f1d8445b9941ea5b27c3564d7fe57fad80bd4a2053bcf4c5add469ad69ed03fc4d1bef2b3ce893e79a7250322ed4985aa6ea99731d9311", 0xfffffffffffffdd7) syz_open_pts() (async) r1 = syz_open_pts() socket$inet6(0x18, 0x5, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) write(r1, &(0x7f0000000180)="42956cf44f020276fc0429f0fa0249ac87f212ac3279c6f884d14c5eed5aaa4c2eaf36f9ad7e70b5bb26eb11439eab2536d9e8e1d625f1719e456ee2df2b507bc9e908df6b07", 0x46) (async) write(r1, &(0x7f0000000180)="42956cf44f020276fc0429f0fa0249ac87f212ac3279c6f884d14c5eed5aaa4c2eaf36f9ad7e70b5bb26eb11439eab2536d9e8e1d625f1719e456ee2df2b507bc9e908df6b07", 0x46) closefrom(r2) (async) closefrom(r2) sysctl$vfs_nfs(&(0x7f0000000140)={0xa, 0x2, 0x2}, 0x3, 0x0, 0x0, &(0x7f0000000200)="eaa03e32", 0x4) setrlimit(0x8, &(0x7f0000000040)={0x9, 0x37e1690f}) socketpair(0x10, 0x3, 0x0, 0x0) openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x8, 0x0) r3 = syz_open_pts() write(r3, &(0x7f00000000c0)="7ef5b69389691e24966a3ddf3d32cdb3fcdc1293054eedfc4c98644011ebd4ed712cded9d188c11bac6dc6f23ec53ad394df0db649d54e94008b07a4f2bed0dcc32676b30e95899f3b7832668feb78b297aec2da4d621cfaccad7c3ab9bba6112ceb8ac3ea84b89b600c7a", 0xfe76) (async) write(r3, &(0x7f00000000c0)="7ef5b69389691e24966a3ddf3d32cdb3fcdc1293054eedfc4c98644011ebd4ed712cded9d188c11bac6dc6f23ec53ad394df0db649d54e94008b07a4f2bed0dcc32676b30e95899f3b7832668feb78b297aec2da4d621cfaccad7c3ab9bba6112ceb8ac3ea84b89b600c7a", 0xfe76) ioctl$TIOCSETAW(r1, 0x802c7415, &(0x7f0000000000)={0x1007, 0x6, 0xffffffc0, 0x3b6d67b8, "fe09fe7adfd4070ff9ffffff9caaac0349bfe360", 0xff, 0x3}) write(r1, &(0x7f00000000c0)="7ef5b69389691e24966a3ddf3d32cdb3fcdc1293054eedfc4c98644011ebd4ed712cded9d188c11bac6dc6f23ec53ad394df0db649d54e94008b07a4f2bed0dcc32676b30e95899f3b7832668feb78b297aec2da4d621cfaccad7c3ab9bba6112ceb8ac3ea84b89b600c7a", 0xfe76) 7.986975088s ago: executing program 1 (id=101): pipe(&(0x7f0000000000)={0xffffffffffffffff}) close(r0) setrlimit(0x1, &(0x7f0000000180)={0x3, 0x4}) open(&(0x7f0000000040)='./file0\x00', 0x200, 0xc2) ktrace(&(0x7f0000000080)='./file0\x00', 0x4, 0x1914, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x10, r0, 0x0) (async, rerun: 64) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f00000001c0), 0x400, 0x0) (async, rerun: 64) setrlimit(0xab2babed9825d77a, &(0x7f0000000240)={0x5, 0x4280000000}) ioctl$BIOCLOCK(r1, 0x20004276) ioctl$BIOCGRSIG(r1, 0x8010427e, &(0x7f0000000200)) (async) r2 = socket$inet(0x2, 0x3, 0x22) (async) r3 = socket$inet(0x2, 0x3, 0x21) connect$inet(r3, &(0x7f0000000400)={0x10, 0x2, 0x3, 0xffffffff}, 0x10) sendmmsg(r3, &(0x7f0000000440)={{0x0, 0x0, 0x0, 0x0, 0x0}}, 0x38, 0xa) (async) connect$inet(r2, &(0x7f0000000480)={0x10, 0x2, 0x3, 0xffffffff}, 0x10) (async) getpeername$unix(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) sendmmsg(r2, &(0x7f00000004c0)={{0x0, 0x0, 0x0, 0x0, 0x0}}, 0x38, 0xa) (rerun: 64) sysctl$kern(&(0x7f00000000c0)={0x1, 0x4f}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x4) (async, rerun: 64) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0x80047308, &(0x7f00000002c0)={0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff}) (async) setrlimit(0x4, &(0x7f0000000300)={0xfffffffffffffffe, 0xffffffffffffffa8}) fcntl$dupfd(r5, 0xa, r6) (async) r7 = socket$inet6(0x18, 0x1000, 0x10) r8 = openat$null(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) r9 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0) ioctl$WSKBDIO_SETMAP(r9, 0x8010570e, &(0x7f0000000380)={0x2, &(0x7f00000003c0)=[{0x5, 0x6, 0x36e9, 0x89, 0xfff8}, {0x10, 0x6, 0x4, 0xb5, 0x5a}]}) (async) pwritev(r8, 0x0, 0x0, 0x40) (async, rerun: 64) setsockopt$inet6_MRT6_ADD_MIF(r7, 0x29, 0x39, &(0x7f0000000100)={0x0, 0x0, 0xfeab}, 0x6) (async, rerun: 64) msgsnd(0x0, &(0x7f0000000fc0)=ANY=[@ANYRES16=r7], 0x39, 0x0) 7.986214406s ago: executing program 2 (id=61): mkfifo(&(0x7f0000000000)='./file0\x00', 0x8) ktrace(&(0x7f0000000300)='./file0\x00', 0x4, 0x0, 0x0) r0 = openat$vnd(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) sysctl$vfs_nfs(&(0x7f0000000040), 0x3, &(0x7f0000000340)="5586c1006a54f8cc86674e213e8b826bf99332ed94ab9eef5ba22e62be51e952f9cb44f3a037cd8ef1621f6910f97d5ae630a442c8711ae22fecb6b37d070bd14e8e236fbbdff2b73b0f131966efd7e9b912c1118e15ad745683c5ba4809ad6f3a36c78ce14788cddbb5b8f7f97ffb881e880caed33eb7b0b7646dc9a263394276d363744603b2b2d76c75bc6c725f2b2e5b3e6dfe59d7763c54e14d9c80596b4355f9e2f022c8978f725f5455311ca68700000000000000008a21a793c1f61ec223f575", &(0x7f0000000440)=0xc4, &(0x7f0000000480)="b06b50026feb1b42c764ce10d6c3494dc5cd265d6a25ffa9453df0910b3c445b218b30f3e6e41cfc08b019cd65bfd0dae6169d3c09c333a681bcfb79ab07c48f65aa7d966f600f4c4612275869a54bad49547c8323efe111b521c4d14188df5753f95516201c5bc8f8079aae8e9390939542e6933e1e6c78770f0a6fd4d06df7b5829d7746e4f1d8bc8966c7471c64e8e57cb6994068b78dda8bb263850023e04bf849074848fede727d5e026663f5a119db344edbbc6319c69089ce0cd4", 0xbe) ioctl$VNDIOCSET(r0, 0xc0384600, &(0x7f0000000100)={&(0x7f0000000140)='./file0\x00', 0x3, 0x0, 0x0, 0x0, 0x0}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0x80047308, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) closefrom(r3) socket$inet6(0x18, 0x1, 0x0) socket$inet6(0x18, 0x2, 0x0) socket$inet(0x2, 0x3, 0x0) socket$inet6(0x18, 0x2, 0x0) setsockopt$sock_cred(r1, 0xffff, 0x1023, &(0x7f00000001c0), 0x2b) open(&(0x7f0000000240)='./file0\x00', 0x200, 0x1f0) unveil(0x0, &(0x7f0000000280)='r\x00') 7.985848852s ago: executing program 3 (id=134): r0 = accept(0xffffffffffffff9c, 0x0, &(0x7f00000002c0)) mmap(&(0x7f00003c6000/0x3000)=nil, 0x3000, 0x3, 0x4013, r0, 0x4) (async, rerun: 32) open(&(0x7f0000000280)='./file0\x00', 0x80, 0x16b) (rerun: 32) madvise(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x6) (async) openat$bpf(0xffffffffffffff9c, &(0x7f0000000300), 0x200, 0x0) (async) socket$unix(0x1, 0x5, 0x0) (async) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x8010640d, &(0x7f0000000140)={0x5, 0xffffffffffffffff}) (async, rerun: 32) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000180), 0x10, 0x0) (rerun: 32) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) ioctl$BIOCIMMEDIATE(r1, 0x80044270, &(0x7f0000000200)=0x10) setitimer(0x1, &(0x7f0000000100)={{0xffffffff, 0x1}, {0xffffff82, 0x2}}, 0x0) (async) ioctl$WSMOUSEIO_SETPARAMS(0xffffffffffffffff, 0x80105728, &(0x7f0000000340)={&(0x7f0000000380)=[{0x4, 0x1}], 0x1}) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) (async) sysctl$net_inet6_ip6(&(0x7f00000003c0)={0x4, 0x18, 0x29, 0x32}, 0x4, 0x0, 0x0, 0x0, 0x0) (async) syz_emit_ethernet(0xe, &(0x7f0000000240)={@local, @local, [], {@generic={0xbaf}}}) r2 = kqueue1(0x10000) kevent(r2, 0x0, 0xfffffffa, &(0x7f0000000280), 0xc, 0x0) kevent(r2, &(0x7f00000002c0), 0xf00, 0x0, 0xffff4b54, 0x0) (async) syz_emit_ethernet(0x6e, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6f75184a00383a002a3b1ae57db8883fa6958273532df404b6584ac86e879d34949bad1e5fa7433f030090780f00000068a69fb680f62f5146dc68838300000000000000000000007d5aa9fec879b727a3f3988eabcf75433a00070000000000"]) (async) r3 = syz_open_pts() fcntl$lock(r3, 0x9, &(0x7f0000000000)={0x5, 0xa13, 0x0, 0x1, 0x1}) (async, rerun: 64) fcntl$lock(r3, 0x9, &(0x7f0000000040)={0xa17, 0x1, 0x0, 0x2, 0x1}) (rerun: 64) 7.982911554s ago: executing program 7 (id=8): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = syz_open_pts() write(r2, &(0x7f0000000200)='B', 0x1) (async) r3 = socket$inet6(0x18, 0x1, 0x6) closefrom(r3) (async) r4 = openat$wskbd(0xffffffffffffff9c, &(0x7f00000005c0), 0x20, 0x0) preadv(r4, &(0x7f0000000600)=[{&(0x7f0000000640)=""/152, 0x98}, {&(0x7f0000000700)=""/134, 0x86}], 0x2, 0x0) mkdir(&(0x7f00000007c0)='./file0\x00', 0x148) (async, rerun: 32) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000800)={0xffffffffffffffff}) (async, rerun: 32) r6 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) (async, rerun: 64) r7 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000880), 0x10000, 0x0) (rerun: 64) pselect(0x40, &(0x7f00000008c0)={0xe0, 0x0, 0x101, 0x22e8, 0x2, 0xffffffff, 0x80000000000b, 0x3}, 0x0, 0x0, 0x0, 0x0) (async) ioctl$DIOCMAP(r7, 0xc0106477, &(0x7f0000000900)={&(0x7f0000000940)='./file0\x00', r6, 0x1}) closefrom(r5) (async, rerun: 32) setrlimit(0x8, &(0x7f0000000240)={0x9, 0x37e1690f}) (async, rerun: 32) unveil(0x0, &(0x7f0000000280)='w\x00') (async) recvmmsg(r0, &(0x7f00000002c0)={{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/195, 0xc3}, 0x47}, 0x38, 0x3000, 0x0) connect$inet6(r3, &(0x7f0000000500)={0x1c, 0x18, 0x1, 0x6ee, "4a76e33dc67fb8d72823f1917d43f1a3", 0x2}, 0x1c) (async, rerun: 32) mknod(&(0x7f0000000480)='./file0\x00', 0x2000, 0xb) (async, rerun: 32) r8 = open(&(0x7f00000004c0)='./file0\x00', 0x80, 0xc3) pread(r8, 0x0, 0x0, 0x9) (async, rerun: 64) r9 = semget$private(0x0, 0x7, 0xe478e4112efc9473) (rerun: 64) semop(r9, &(0x7f0000000540)=[{0x0, 0x800, 0x1000}], 0x1) (async) semop(r9, &(0x7f0000000580)=[{0x0, 0x47a2, 0x1000}], 0x1) sendmmsg(r1, &(0x7f0000000400)={{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="48000000ffff000001"], 0x48}}, 0x38, 0x0) (async) r10 = openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$DIOCADDQUEUE(r10, 0xc148445d, &(0x7f0000000080)={0x2, 0xe4f, {'\x00', './file0/file0\x00', './file0\x00', './file0\x00', {{0x9, 0xffffffff}, {0x9, 0x4}, 0x3}, {{0x0, 0x6fa}, {0x7, 0xfffffff6}, 0x6}, {{0x800, 0x4}, {0x2, 0xff}, 0x9}, {0x5, 0xac7, 0x0, 0xff}, 0x0, 0xfffff77e, 0x9, 0x8}}) 7.411784698s ago: executing program 6 (id=162): r0 = openat$tty(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000100)={0x22, 0x85, 0x8001, 0x4, "3fe40f1ccc74fca2d05eb656cd9f2339b07022bd", 0x80, 0x7f}) r1 = socket$inet6(0x18, 0x8003, 0x0) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x200, 0xcf) open(&(0x7f0000000300)='./file0\x00', 0xa60, 0xcf) r3 = open(&(0x7f0000000340)='./file0\x00', 0x1, 0xc3) getdents(r3, 0x0, 0x0) truncate(&(0x7f0000000180)='./file0\x00', 0x88100) truncate(&(0x7f00000001c0)='./file0\x00', 0x4000) writev(r2, &(0x7f0000000540)=[{&(0x7f00000003c0)="e936c3d3a7501dc3e10ad600977cc3a3cb4d1ddbd6bdb528eb2c5669fd78f99871340c77197f70f62da5b431acbb6b9238a7a00789bc5c1cf4a0b7dc2514a6c6f0d320566ce90271aaa1b5384900396a3055c4510d297c1d96ddbebc8323967d6fdb608a7ca381aece62ffe5ba5907ad27d1dc7648d4214d2cbcfd3e9d2ce51dddea369bec92afe4e990e6cd1d22ec139100c32e665bdaeb926d038f7a7c2e1b67eddb9ccc99c1ccf6b90fb7ca647d7995cee28087de2b1c869eb404ae525ddb97fd123795aea221ee6fb7d62f0da1a529ed645deba4513675bcecb268ecd7019918a2f6f39d884bb4cc9991aa", 0xed}, {&(0x7f00000004c0)="4c62f36cd8b6", 0x6}, {&(0x7f0000000500)="6dc13954dcc9f3413422f0308a7f27ec545480", 0x13}], 0x3) syz_emit_ethernet(0x3e, &(0x7f0000000380)={@broadcast, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x2, 0x36, 0x30, 0x68, 0x0, 0x5, 0x1, 0x0, @local={0xac, 0x14, 0x0}, @multicast2}, @icmp=@dest_unreach={0x3, 0x2, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x6, 0xfff8, 0x64, 0x0, 0x0, 0x3a, 0x6, @loopback=0xe0000002, @local={0xac, 0x14, 0x0}}}}}}}) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0x2e, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0x80047308, &(0x7f0000000240)={0x0, 0x0, 0x4}) ioctl$DIOCMAP(r4, 0xc0106477, &(0x7f00000002c0)={&(0x7f0000000280)='./file0\x00', r0, 0x1}) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x341a) open(&(0x7f0000000040)='./file0\x00', 0x7c6, 0xea) sendto$inet6(r1, 0x0, 0x0, 0x4, &(0x7f0000000140)={0x1c, 0x18, 0x2, 0x1, "ffbafd03041b59d0e100010000000004", 0x2000008}, 0x1c) 4.359163617s ago: executing program 0 (id=120): dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x20000) (async) r0 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x20000) write(r0, &(0x7f0000000280)="cb9faad841e581f4fe8de35f00c23e3c05e2a8d27f3d2432697c2248c3001a06596c14dc43f1d8445b9941ea5b27c3564d7fe57fad80bd4a2053bcf4c5add469ad69ed03fc4d1bef2b3ce893e79a7250322ed4985aa6ea99731d9311", 0xfffffffffffffdd7) syz_open_pts() (async) r1 = syz_open_pts() socket$inet6(0x18, 0x5, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) write(r1, &(0x7f0000000180)="42956cf44f020276fc0429f0fa0249ac87f212ac3279c6f884d14c5eed5aaa4c2eaf36f9ad7e70b5bb26eb11439eab2536d9e8e1d625f1719e456ee2df2b507bc9e908df6b07", 0x46) (async) write(r1, &(0x7f0000000180)="42956cf44f020276fc0429f0fa0249ac87f212ac3279c6f884d14c5eed5aaa4c2eaf36f9ad7e70b5bb26eb11439eab2536d9e8e1d625f1719e456ee2df2b507bc9e908df6b07", 0x46) closefrom(r2) (async) closefrom(r2) sysctl$vfs_nfs(&(0x7f0000000140)={0xa, 0x2, 0x2}, 0x3, 0x0, 0x0, &(0x7f0000000200)="eaa03e32", 0x4) setrlimit(0x8, &(0x7f0000000040)={0x9, 0x37e1690f}) socketpair(0x10, 0x3, 0x0, 0x0) openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x8, 0x0) r3 = syz_open_pts() write(r3, &(0x7f00000000c0)="7ef5b69389691e24966a3ddf3d32cdb3fcdc1293054eedfc4c98644011ebd4ed712cded9d188c11bac6dc6f23ec53ad394df0db649d54e94008b07a4f2bed0dcc32676b30e95899f3b7832668feb78b297aec2da4d621cfaccad7c3ab9bba6112ceb8ac3ea84b89b600c7a", 0xfe76) (async) write(r3, &(0x7f00000000c0)="7ef5b69389691e24966a3ddf3d32cdb3fcdc1293054eedfc4c98644011ebd4ed712cded9d188c11bac6dc6f23ec53ad394df0db649d54e94008b07a4f2bed0dcc32676b30e95899f3b7832668feb78b297aec2da4d621cfaccad7c3ab9bba6112ceb8ac3ea84b89b600c7a", 0xfe76) ioctl$TIOCSETAW(r1, 0x802c7415, &(0x7f0000000000)={0x1007, 0x6, 0xffffffc0, 0x3b6d67b8, "fe09fe7adfd4070ff9ffffff9caaac0349bfe360", 0xff, 0x3}) write(r1, &(0x7f00000000c0)="7ef5b69389691e24966a3ddf3d32cdb3fcdc1293054eedfc4c98644011ebd4ed712cded9d188c11bac6dc6f23ec53ad394df0db649d54e94008b07a4f2bed0dcc32676b30e95899f3b7832668feb78b297aec2da4d621cfaccad7c3ab9bba6112ceb8ac3ea84b89b600c7a", 0xfe76) 4.297259188s ago: executing program 1 (id=101): pipe(&(0x7f0000000000)={0xffffffffffffffff}) close(r0) setrlimit(0x1, &(0x7f0000000180)={0x3, 0x4}) open(&(0x7f0000000040)='./file0\x00', 0x200, 0xc2) ktrace(&(0x7f0000000080)='./file0\x00', 0x4, 0x1914, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x10, r0, 0x0) (async, rerun: 64) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f00000001c0), 0x400, 0x0) (async, rerun: 64) setrlimit(0xab2babed9825d77a, &(0x7f0000000240)={0x5, 0x4280000000}) ioctl$BIOCLOCK(r1, 0x20004276) ioctl$BIOCGRSIG(r1, 0x8010427e, &(0x7f0000000200)) (async) r2 = socket$inet(0x2, 0x3, 0x22) (async) r3 = socket$inet(0x2, 0x3, 0x21) connect$inet(r3, &(0x7f0000000400)={0x10, 0x2, 0x3, 0xffffffff}, 0x10) sendmmsg(r3, &(0x7f0000000440)={{0x0, 0x0, 0x0, 0x0, 0x0}}, 0x38, 0xa) (async) connect$inet(r2, &(0x7f0000000480)={0x10, 0x2, 0x3, 0xffffffff}, 0x10) (async) getpeername$unix(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) sendmmsg(r2, &(0x7f00000004c0)={{0x0, 0x0, 0x0, 0x0, 0x0}}, 0x38, 0xa) (rerun: 64) sysctl$kern(&(0x7f00000000c0)={0x1, 0x4f}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x4) (async, rerun: 64) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0x80047308, &(0x7f00000002c0)={0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff}) (async) setrlimit(0x4, &(0x7f0000000300)={0xfffffffffffffffe, 0xffffffffffffffa8}) fcntl$dupfd(r5, 0xa, r6) (async) r7 = socket$inet6(0x18, 0x1000, 0x10) r8 = openat$null(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) r9 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0) ioctl$WSKBDIO_SETMAP(r9, 0x8010570e, &(0x7f0000000380)={0x2, &(0x7f00000003c0)=[{0x5, 0x6, 0x36e9, 0x89, 0xfff8}, {0x10, 0x6, 0x4, 0xb5, 0x5a}]}) (async) pwritev(r8, 0x0, 0x0, 0x40) (async, rerun: 64) setsockopt$inet6_MRT6_ADD_MIF(r7, 0x29, 0x39, &(0x7f0000000100)={0x0, 0x0, 0xfeab}, 0x6) (async, rerun: 64) msgsnd(0x0, &(0x7f0000000fc0)=ANY=[@ANYRES16=r7], 0x39, 0x0) 4.296815719s ago: executing program 2 (id=61): mkfifo(&(0x7f0000000000)='./file0\x00', 0x8) ktrace(&(0x7f0000000300)='./file0\x00', 0x4, 0x0, 0x0) r0 = openat$vnd(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) sysctl$vfs_nfs(&(0x7f0000000040), 0x3, &(0x7f0000000340)="5586c1006a54f8cc86674e213e8b826bf99332ed94ab9eef5ba22e62be51e952f9cb44f3a037cd8ef1621f6910f97d5ae630a442c8711ae22fecb6b37d070bd14e8e236fbbdff2b73b0f131966efd7e9b912c1118e15ad745683c5ba4809ad6f3a36c78ce14788cddbb5b8f7f97ffb881e880caed33eb7b0b7646dc9a263394276d363744603b2b2d76c75bc6c725f2b2e5b3e6dfe59d7763c54e14d9c80596b4355f9e2f022c8978f725f5455311ca68700000000000000008a21a793c1f61ec223f575", &(0x7f0000000440)=0xc4, &(0x7f0000000480)="b06b50026feb1b42c764ce10d6c3494dc5cd265d6a25ffa9453df0910b3c445b218b30f3e6e41cfc08b019cd65bfd0dae6169d3c09c333a681bcfb79ab07c48f65aa7d966f600f4c4612275869a54bad49547c8323efe111b521c4d14188df5753f95516201c5bc8f8079aae8e9390939542e6933e1e6c78770f0a6fd4d06df7b5829d7746e4f1d8bc8966c7471c64e8e57cb6994068b78dda8bb263850023e04bf849074848fede727d5e026663f5a119db344edbbc6319c69089ce0cd4", 0xbe) ioctl$VNDIOCSET(r0, 0xc0384600, &(0x7f0000000100)={&(0x7f0000000140)='./file0\x00', 0x3, 0x0, 0x0, 0x0, 0x0}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0x80047308, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) closefrom(r3) socket$inet6(0x18, 0x1, 0x0) socket$inet6(0x18, 0x2, 0x0) socket$inet(0x2, 0x3, 0x0) socket$inet6(0x18, 0x2, 0x0) setsockopt$sock_cred(r1, 0xffff, 0x1023, &(0x7f00000001c0), 0x2b) open(&(0x7f0000000240)='./file0\x00', 0x200, 0x1f0) unveil(0x0, &(0x7f0000000280)='r\x00') 4.296547912s ago: executing program 3 (id=134): r0 = accept(0xffffffffffffff9c, 0x0, &(0x7f00000002c0)) mmap(&(0x7f00003c6000/0x3000)=nil, 0x3000, 0x3, 0x4013, r0, 0x4) (async, rerun: 32) open(&(0x7f0000000280)='./file0\x00', 0x80, 0x16b) (rerun: 32) madvise(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x6) (async) openat$bpf(0xffffffffffffff9c, &(0x7f0000000300), 0x200, 0x0) (async) socket$unix(0x1, 0x5, 0x0) (async) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x8010640d, &(0x7f0000000140)={0x5, 0xffffffffffffffff}) (async, rerun: 32) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000180), 0x10, 0x0) (rerun: 32) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) ioctl$BIOCIMMEDIATE(r1, 0x80044270, &(0x7f0000000200)=0x10) setitimer(0x1, &(0x7f0000000100)={{0xffffffff, 0x1}, {0xffffff82, 0x2}}, 0x0) (async) ioctl$WSMOUSEIO_SETPARAMS(0xffffffffffffffff, 0x80105728, &(0x7f0000000340)={&(0x7f0000000380)=[{0x4, 0x1}], 0x1}) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) (async) sysctl$net_inet6_ip6(&(0x7f00000003c0)={0x4, 0x18, 0x29, 0x32}, 0x4, 0x0, 0x0, 0x0, 0x0) (async) syz_emit_ethernet(0xe, &(0x7f0000000240)={@local, @local, [], {@generic={0xbaf}}}) r2 = kqueue1(0x10000) kevent(r2, 0x0, 0xfffffffa, &(0x7f0000000280), 0xc, 0x0) kevent(r2, &(0x7f00000002c0), 0xf00, 0x0, 0xffff4b54, 0x0) (async) syz_emit_ethernet(0x6e, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6f75184a00383a002a3b1ae57db8883fa6958273532df404b6584ac86e879d34949bad1e5fa7433f030090780f00000068a69fb680f62f5146dc68838300000000000000000000007d5aa9fec879b727a3f3988eabcf75433a00070000000000"]) (async) r3 = syz_open_pts() fcntl$lock(r3, 0x9, &(0x7f0000000000)={0x5, 0xa13, 0x0, 0x1, 0x1}) (async, rerun: 64) fcntl$lock(r3, 0x9, &(0x7f0000000040)={0xa17, 0x1, 0x0, 0x2, 0x1}) (rerun: 64) 4.296404321s ago: executing program 4 (id=56): r0 = syz_open_pts() syz_open_pts() r1 = syz_open_pts() flock(r0, 0x6) (async) flock(r0, 0x6) mknod(&(0x7f0000000100)='./file0\x00', 0x2000, 0x33a5) r2 = open(&(0x7f0000000140)='./file0\x00', 0x80, 0xc3) ioctl$TIOCCONS(r2, 0xc0a86b06, &(0x7f0000000180)=0x1) (async) ioctl$TIOCCONS(r2, 0xc0a86b06, &(0x7f0000000180)=0x1) setsockopt$inet6_MRT6_ADD_MIF(r2, 0x29, 0x66, &(0x7f0000000040)={0x7, 0x1, 0x5dac}, 0x6) fstat(r0, 0x0) (async) fstat(r0, 0x0) mknod(&(0x7f00000001c0)='./file0\x00', 0x2000, 0x6204) open$dir(&(0x7f0000000200)='./file0\x00', 0x8, 0x174) mknod(&(0x7f0000000000)='./file0\x00', 0x6000, 0x200) r3 = kqueue1(0x0) kevent(r3, &(0x7f00000000c0)=[{{}, 0xfffffffffffffff6, 0x9, 0x96f799025b5b12ad, 0xff, 0xfff}], 0x4, 0x0, 0xffff4b4d, 0x0) kevent(r3, 0x0, 0x0, 0x0, 0x8, 0x0) (async) kevent(r3, 0x0, 0x0, 0x0, 0x8, 0x0) closefrom(r3) (async) closefrom(r3) openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000380), 0x1, 0x0) (async) r4 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000380), 0x1, 0x0) fcntl$lock(r4, 0x8, &(0x7f00000003c0)={0x0, 0x0, 0xfffffff7fffffffd, 0x1000100000001, 0x1}) (async) fcntl$lock(r4, 0x8, &(0x7f00000003c0)={0x0, 0x0, 0xfffffff7fffffffd, 0x1000100000001, 0x1}) open$dir(&(0x7f0000000080)='./file0\x00', 0x40000, 0x8) syz_emit_ethernet(0x9f, &(0x7f0000000280)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x2, 0x36, 0x91, 0x68, 0x0, 0x3, 0x1, 0x0, @multicast1, @rand_addr=0x80000004}, @udp={{0x1, 0x1, 0x8}, {"620c7cd95c85b8a0ba5fc69843ae523cf9402a06e4bf9d807957f70caf8063b13e4fa7716f8ac9b200d814d9168492d318c6ad53238a55dd1097e2be87012352d460bad71e39be270ed365a9d705bab9d933d4fe46bbeee83305ad50e03ce0af44b319d70b93afbdd8d5137a4fbd4ab3eace7ff147"}}}}}}) ioctl$WSDISPLAYIO_GBURNER(r3, 0x400c5752, &(0x7f0000000340)) (async) ioctl$WSDISPLAYIO_GBURNER(r3, 0x400c5752, &(0x7f0000000340)) setsid() ioctl$TIOCSTAT(r4, 0x20007465) r5 = syz_open_pts() ioctl$TIOCSCTTY(r5, 0x20007461) ioctl$TIOCDRAIN(r5, 0x2000745e) ioctl$FIONBIO(r1, 0x8004667e, &(0x7f0000000400)=0xffffffc0) syz_open_pts() (async) syz_open_pts() 4.296155731s ago: executing program 5 (id=163): r0 = socket$inet(0x2, 0x3, 0x21) munlockall() (async) connect$inet(r0, &(0x7f0000000000)={0x10, 0x2, 0x1, 0xffffffff}, 0x10) (async) connect$inet(r0, &(0x7f0000000040)={0x10, 0x2, 0x3, 0x8}, 0x10) 4.293446171s ago: executing program 6 (id=164): r0 = socket$inet(0x2, 0x1, 0x6) setsockopt$sock_int(r0, 0xffff, 0x1001, &(0x7f0000000040)=0x200000, 0x4) open$dir(&(0x7f0000000000)='./file0\x00', 0x200, 0x80) ktrace(&(0x7f00000000c0)='./file0\x00', 0x4, 0x300, 0x0) pselect(0x40, &(0x7f0000000100)={0x3, 0x6, 0xfffffffffffffff3, 0x4, 0x101, 0x1, 0x80, 0x4}, 0x0, &(0x7f0000000140)={0x8001, 0x8, 0x4, 0x401, 0xff, 0x1, 0x2, 0x10}, 0x0, &(0x7f0000000180)={0x3}) connect$inet(r0, &(0x7f0000000700)={0x10, 0x2, 0x2, 0x3}, 0x10) unveil(0x0, &(0x7f0000000080)='r\x00') 4.031421798s ago: executing program 6 (id=165): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt(r0, 0x0, 0x2, &(0x7f0000000000)="0784fc81", 0x4) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) r2 = socket$inet6(0x18, 0x2, 0x0) sendmsg(r2, &(0x7f0000000100)={&(0x7f0000000180)=@un=@abs={0xbd, 0x0, 0x0, 0x2}, 0x8, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="14000000290000003d"], 0x20}, 0x402) ioctl$BIOCSRSIG(r1, 0x80044272, &(0x7f00000000c0)=0xe4) sendmsg(r0, &(0x7f0000000c80)={&(0x7f0000000040)=@in={0x10, 0x2, 0x2, 0x3ff}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000140)="7a02915fb93a3660b881c13af9c967de131a0b66", 0x14}], 0x1, 0x0}, 0x0) 4.029943472s ago: executing program 6 (id=166): sysctl$net_inet_udp(&(0x7f0000002380)={0x4, 0x2, 0x11, 0x5}, 0x4, &(0x7f0000000540)="3624c0de569c2a137ff2c2f9bdd1bf34a21b30239ff1d621c6faa381aacef15e503c852985f3c382ecad4c9581751e827ef56fc825363fcb1a444ac2d2190e5f165fab1e398ab9a7a594c896adcadae80cec5b580ca79ddc6164be731bf241a1650cbf2d8efa8308", &(0x7f0000002440)=0x68, 0x0, 0x0) sysctl$net_inet_udp(&(0x7f0000000000)={0x4, 0x2, 0x11, 0x2}, 0x4, &(0x7f0000000040)="84238d93bd9d1cccbed0df9075f6efafdb0b3e6dfbb0045c91838bae4afca85a18e7824dc4eddd13d1f46a11704f845b88c652ffc441aa7efe75893f9ee287fe4d1b6c8f42b3e8e355bb43eedcaca76a30cbac50fdd91900bb7260632feec7e66d9de78a1c53201a3250697b428921195e167ddd1ddf4809b8fd17e0c85d02a098ad412594b82d40e1aefa496c9ec6834a6251c63375e59fdac3f1dc85136779b100b06ab1c7e7763c69ef6701c7844b52743377767111e599570d27b207b1b9e3fb40ce5f5fac", &(0x7f0000000140)=0xc7, &(0x7f0000000180)="03336610996aafa489eabcc2c2b01f163f1a6a55717c23f64d1149a053539ed9c94322c5eed6a07045a26b30cb0bfd7ffbae2ce53254ab75a0d429123bbdf36eab550248f59d92603f9273d66ebfe70c52aebca9d58ac46afd63990b5c09914e5775abb7be4453f1c2ca920a1219336be5091993253bce007441c3ef594b41e672effcc26d2f3e950fb0791f5c191dec09347a432b330fdc8876333416cdcdb621c6b91c9614600314aa77", 0xab) 2.837801714s ago: executing program 6 (id=167): unveil(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000280)='w\x00') r0 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0xc3) ioctl$TIOCCONS(r0, 0xc0a86b02, &(0x7f0000000100)=0x1) mkfifoat(r0, &(0x7f00000000c0)='./file0\x00', 0x118) ftruncate(0xffffffffffffffff, 0x5) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) pselect(0x40, &(0x7f0000000040)={0x7f, 0x0, 0x101, 0x9, 0x400000000, 0x5, 0x9, 0x7}, 0x0, 0x0, 0x0, 0x0) read(r1, 0x0, 0x0) unveil(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='r\x00') socket$inet6(0x18, 0x3, 0x7f) 209.76251ms ago: executing program 0 (id=120): dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x20000) (async) r0 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x20000) write(r0, &(0x7f0000000280)="cb9faad841e581f4fe8de35f00c23e3c05e2a8d27f3d2432697c2248c3001a06596c14dc43f1d8445b9941ea5b27c3564d7fe57fad80bd4a2053bcf4c5add469ad69ed03fc4d1bef2b3ce893e79a7250322ed4985aa6ea99731d9311", 0xfffffffffffffdd7) syz_open_pts() (async) r1 = syz_open_pts() socket$inet6(0x18, 0x5, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) write(r1, &(0x7f0000000180)="42956cf44f020276fc0429f0fa0249ac87f212ac3279c6f884d14c5eed5aaa4c2eaf36f9ad7e70b5bb26eb11439eab2536d9e8e1d625f1719e456ee2df2b507bc9e908df6b07", 0x46) (async) write(r1, &(0x7f0000000180)="42956cf44f020276fc0429f0fa0249ac87f212ac3279c6f884d14c5eed5aaa4c2eaf36f9ad7e70b5bb26eb11439eab2536d9e8e1d625f1719e456ee2df2b507bc9e908df6b07", 0x46) closefrom(r2) (async) closefrom(r2) sysctl$vfs_nfs(&(0x7f0000000140)={0xa, 0x2, 0x2}, 0x3, 0x0, 0x0, &(0x7f0000000200)="eaa03e32", 0x4) setrlimit(0x8, &(0x7f0000000040)={0x9, 0x37e1690f}) socketpair(0x10, 0x3, 0x0, 0x0) openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x8, 0x0) r3 = syz_open_pts() write(r3, &(0x7f00000000c0)="7ef5b69389691e24966a3ddf3d32cdb3fcdc1293054eedfc4c98644011ebd4ed712cded9d188c11bac6dc6f23ec53ad394df0db649d54e94008b07a4f2bed0dcc32676b30e95899f3b7832668feb78b297aec2da4d621cfaccad7c3ab9bba6112ceb8ac3ea84b89b600c7a", 0xfe76) (async) write(r3, &(0x7f00000000c0)="7ef5b69389691e24966a3ddf3d32cdb3fcdc1293054eedfc4c98644011ebd4ed712cded9d188c11bac6dc6f23ec53ad394df0db649d54e94008b07a4f2bed0dcc32676b30e95899f3b7832668feb78b297aec2da4d621cfaccad7c3ab9bba6112ceb8ac3ea84b89b600c7a", 0xfe76) ioctl$TIOCSETAW(r1, 0x802c7415, &(0x7f0000000000)={0x1007, 0x6, 0xffffffc0, 0x3b6d67b8, "fe09fe7adfd4070ff9ffffff9caaac0349bfe360", 0xff, 0x3}) write(r1, &(0x7f00000000c0)="7ef5b69389691e24966a3ddf3d32cdb3fcdc1293054eedfc4c98644011ebd4ed712cded9d188c11bac6dc6f23ec53ad394df0db649d54e94008b07a4f2bed0dcc32676b30e95899f3b7832668feb78b297aec2da4d621cfaccad7c3ab9bba6112ceb8ac3ea84b89b600c7a", 0xfe76) 1.317075ms ago: executing program 1 (id=101): pipe(&(0x7f0000000000)={0xffffffffffffffff}) close(r0) setrlimit(0x1, &(0x7f0000000180)={0x3, 0x4}) open(&(0x7f0000000040)='./file0\x00', 0x200, 0xc2) ktrace(&(0x7f0000000080)='./file0\x00', 0x4, 0x1914, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x10, r0, 0x0) (async, rerun: 64) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f00000001c0), 0x400, 0x0) (async, rerun: 64) setrlimit(0xab2babed9825d77a, &(0x7f0000000240)={0x5, 0x4280000000}) ioctl$BIOCLOCK(r1, 0x20004276) ioctl$BIOCGRSIG(r1, 0x8010427e, &(0x7f0000000200)) (async) r2 = socket$inet(0x2, 0x3, 0x22) (async) r3 = socket$inet(0x2, 0x3, 0x21) connect$inet(r3, &(0x7f0000000400)={0x10, 0x2, 0x3, 0xffffffff}, 0x10) sendmmsg(r3, &(0x7f0000000440)={{0x0, 0x0, 0x0, 0x0, 0x0}}, 0x38, 0xa) (async) connect$inet(r2, &(0x7f0000000480)={0x10, 0x2, 0x3, 0xffffffff}, 0x10) (async) getpeername$unix(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) sendmmsg(r2, &(0x7f00000004c0)={{0x0, 0x0, 0x0, 0x0, 0x0}}, 0x38, 0xa) (rerun: 64) sysctl$kern(&(0x7f00000000c0)={0x1, 0x4f}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x4) (async, rerun: 64) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0x80047308, &(0x7f00000002c0)={0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff}) (async) setrlimit(0x4, &(0x7f0000000300)={0xfffffffffffffffe, 0xffffffffffffffa8}) fcntl$dupfd(r5, 0xa, r6) (async) r7 = socket$inet6(0x18, 0x1000, 0x10) r8 = openat$null(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) r9 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000500), 0x8081, 0x0) ioctl$WSKBDIO_SETMAP(r9, 0x8010570e, &(0x7f0000000380)={0x2, &(0x7f00000003c0)=[{0x5, 0x6, 0x36e9, 0x89, 0xfff8}, {0x10, 0x6, 0x4, 0xb5, 0x5a}]}) (async) pwritev(r8, 0x0, 0x0, 0x40) (async, rerun: 64) setsockopt$inet6_MRT6_ADD_MIF(r7, 0x29, 0x39, &(0x7f0000000100)={0x0, 0x0, 0xfeab}, 0x6) (async, rerun: 64) msgsnd(0x0, &(0x7f0000000fc0)=ANY=[@ANYRES16=r7], 0x39, 0x0) 1.189086ms ago: executing program 2 (id=61): mkfifo(&(0x7f0000000000)='./file0\x00', 0x8) ktrace(&(0x7f0000000300)='./file0\x00', 0x4, 0x0, 0x0) r0 = openat$vnd(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) sysctl$vfs_nfs(&(0x7f0000000040), 0x3, &(0x7f0000000340)="5586c1006a54f8cc86674e213e8b826bf99332ed94ab9eef5ba22e62be51e952f9cb44f3a037cd8ef1621f6910f97d5ae630a442c8711ae22fecb6b37d070bd14e8e236fbbdff2b73b0f131966efd7e9b912c1118e15ad745683c5ba4809ad6f3a36c78ce14788cddbb5b8f7f97ffb881e880caed33eb7b0b7646dc9a263394276d363744603b2b2d76c75bc6c725f2b2e5b3e6dfe59d7763c54e14d9c80596b4355f9e2f022c8978f725f5455311ca68700000000000000008a21a793c1f61ec223f575", &(0x7f0000000440)=0xc4, &(0x7f0000000480)="b06b50026feb1b42c764ce10d6c3494dc5cd265d6a25ffa9453df0910b3c445b218b30f3e6e41cfc08b019cd65bfd0dae6169d3c09c333a681bcfb79ab07c48f65aa7d966f600f4c4612275869a54bad49547c8323efe111b521c4d14188df5753f95516201c5bc8f8079aae8e9390939542e6933e1e6c78770f0a6fd4d06df7b5829d7746e4f1d8bc8966c7471c64e8e57cb6994068b78dda8bb263850023e04bf849074848fede727d5e026663f5a119db344edbbc6319c69089ce0cd4", 0xbe) ioctl$VNDIOCSET(r0, 0xc0384600, &(0x7f0000000100)={&(0x7f0000000140)='./file0\x00', 0x3, 0x0, 0x0, 0x0, 0x0}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0x80047308, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) closefrom(r3) socket$inet6(0x18, 0x1, 0x0) socket$inet6(0x18, 0x2, 0x0) socket$inet(0x2, 0x3, 0x0) socket$inet6(0x18, 0x2, 0x0) setsockopt$sock_cred(r1, 0xffff, 0x1023, &(0x7f00000001c0), 0x2b) open(&(0x7f0000000240)='./file0\x00', 0x200, 0x1f0) unveil(0x0, &(0x7f0000000280)='r\x00') 1.049714ms ago: executing program 3 (id=134): r0 = accept(0xffffffffffffff9c, 0x0, &(0x7f00000002c0)) mmap(&(0x7f00003c6000/0x3000)=nil, 0x3000, 0x3, 0x4013, r0, 0x4) (async, rerun: 32) open(&(0x7f0000000280)='./file0\x00', 0x80, 0x16b) (rerun: 32) madvise(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x6) (async) openat$bpf(0xffffffffffffff9c, &(0x7f0000000300), 0x200, 0x0) (async) socket$unix(0x1, 0x5, 0x0) (async) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x8010640d, &(0x7f0000000140)={0x5, 0xffffffffffffffff}) (async, rerun: 32) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000180), 0x10, 0x0) (rerun: 32) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) ioctl$BIOCIMMEDIATE(r1, 0x80044270, &(0x7f0000000200)=0x10) setitimer(0x1, &(0x7f0000000100)={{0xffffffff, 0x1}, {0xffffff82, 0x2}}, 0x0) (async) ioctl$WSMOUSEIO_SETPARAMS(0xffffffffffffffff, 0x80105728, &(0x7f0000000340)={&(0x7f0000000380)=[{0x4, 0x1}], 0x1}) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) (async) sysctl$net_inet6_ip6(&(0x7f00000003c0)={0x4, 0x18, 0x29, 0x32}, 0x4, 0x0, 0x0, 0x0, 0x0) (async) syz_emit_ethernet(0xe, &(0x7f0000000240)={@local, @local, [], {@generic={0xbaf}}}) r2 = kqueue1(0x10000) kevent(r2, 0x0, 0xfffffffa, &(0x7f0000000280), 0xc, 0x0) kevent(r2, &(0x7f00000002c0), 0xf00, 0x0, 0xffff4b54, 0x0) (async) syz_emit_ethernet(0x6e, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6f75184a00383a002a3b1ae57db8883fa6958273532df404b6584ac86e879d34949bad1e5fa7433f030090780f00000068a69fb680f62f5146dc68838300000000000000000000007d5aa9fec879b727a3f3988eabcf75433a00070000000000"]) (async) r3 = syz_open_pts() fcntl$lock(r3, 0x9, &(0x7f0000000000)={0x5, 0xa13, 0x0, 0x1, 0x1}) (async, rerun: 64) fcntl$lock(r3, 0x9, &(0x7f0000000040)={0xa17, 0x1, 0x0, 0x2, 0x1}) (rerun: 64) 1.027615ms ago: executing program 5 (id=163): r0 = socket$inet(0x2, 0x3, 0x21) munlockall() (async) connect$inet(r0, &(0x7f0000000000)={0x10, 0x2, 0x1, 0xffffffff}, 0x10) (async) connect$inet(r0, &(0x7f0000000040)={0x10, 0x2, 0x3, 0x8}, 0x10) 731.759µs ago: executing program 6 (id=168): r0 = kqueue1(0x10000) pselect(0x0, 0x0, 0x0, &(0x7f0000000000)={0x5, 0x0, 0x3, 0x8, 0x0, 0xfffffffffffffffe, 0xd, 0x5cbf}, 0x0, 0x0) kevent(r0, 0x0, 0x0, &(0x7f0000000040), 0x40, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0x80047308, 0x0) closefrom(0xffffffffffffffff) r1 = syz_open_pts() openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x10, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) closefrom(r2) setrlimit(0x2, &(0x7f0000000580)={0x60000000, 0x60000000}) getgroups(0x7, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]) setegid(r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) getsockopt$sock_cred(r4, 0xffff, 0x1022, &(0x7f0000000440)={0x0}, &(0x7f0000000480)=0xa) setresuid(0x0, r5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) getsockopt$sock_cred(r6, 0xffff, 0x1022, &(0x7f0000000500), &(0x7f0000000540)=0xc) setresuid(0xffffffffffffffff, r5, 0x0) r7 = syz_open_pts() ioctl$TIOCSETAW(r1, 0x802c7415, &(0x7f0000000200)={0x1003, 0x3, 0x7, 0xc000, "fe83fe1effff017fb68600", 0x3, 0x6}) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000280)="5485e5dd876388c5ecf39d1fe8df5acc1d498d5f89ad3f72596b252f33669b86aafa41cdc023f3d5f21563ce562a1d4e9e596bc0a55b331f92ee020bd8f0791046006409ca0d", 0xffffffffffffffe3}], 0x1) ioctl$TIOCSETAW(r1, 0x802c7415, &(0x7f0000000300)={0x1709, 0xffffffff, 0x7, 0xffffffff, "b37fcf9b01c29652713003020000000000010052", 0x0, 0x9}) read(r7, &(0x7f0000000340)=""/97, 0x61) kevent(r0, &(0x7f0000000040)=[{{r6}, 0xfffffffffffffffe, 0x10, 0x1, 0x5, 0x7fffffffffffffff}], 0x86, 0x0, 0xffff4b49, 0x0) r8 = socket$inet6(0x18, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r9, &(0x7f0000000600)={{0x0, 0x0, 0x0, 0x0, 0x0}, 0x8fe}, 0x38, 0x801, 0x0) setsockopt$sock_int(r8, 0xffff, 0x20, &(0x7f0000000100)=0xc, 0x4) openat$dri(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/dri/card0\x00', 0x0, 0x0) setsockopt(r8, 0x1, 0x2, &(0x7f0000000140)="3aa02133ed232a1e7c94dace76397134961e0426393edb9f5a2c1fe535a7701c319c99022fdfc7fe18a5705a60a39f78a8d6dc93db98e3bc1808a1e886a10dcca91095d4bfeeff0403f91879f4795e7b0e6cf0f9f19180d10fd24a95a82b8b7ce084257db51cc126372af5edba3fe18f3823db0494497ad29db871338fa4186fb36d6f2c75769fb8b3ec62f4732cdabc7116c811f6e8123f80b1bf", 0x9b) 0s ago: executing program 7 (id=8): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = syz_open_pts() write(r2, &(0x7f0000000200)='B', 0x1) (async) r3 = socket$inet6(0x18, 0x1, 0x6) closefrom(r3) (async) r4 = openat$wskbd(0xffffffffffffff9c, &(0x7f00000005c0), 0x20, 0x0) preadv(r4, &(0x7f0000000600)=[{&(0x7f0000000640)=""/152, 0x98}, {&(0x7f0000000700)=""/134, 0x86}], 0x2, 0x0) mkdir(&(0x7f00000007c0)='./file0\x00', 0x148) (async, rerun: 32) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000800)={0xffffffffffffffff}) (async, rerun: 32) r6 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) (async, rerun: 64) r7 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000880), 0x10000, 0x0) (rerun: 64) pselect(0x40, &(0x7f00000008c0)={0xe0, 0x0, 0x101, 0x22e8, 0x2, 0xffffffff, 0x80000000000b, 0x3}, 0x0, 0x0, 0x0, 0x0) (async) ioctl$DIOCMAP(r7, 0xc0106477, &(0x7f0000000900)={&(0x7f0000000940)='./file0\x00', r6, 0x1}) closefrom(r5) (async, rerun: 32) setrlimit(0x8, &(0x7f0000000240)={0x9, 0x37e1690f}) (async, rerun: 32) unveil(0x0, &(0x7f0000000280)='w\x00') (async) recvmmsg(r0, &(0x7f00000002c0)={{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/195, 0xc3}, 0x47}, 0x38, 0x3000, 0x0) connect$inet6(r3, &(0x7f0000000500)={0x1c, 0x18, 0x1, 0x6ee, "4a76e33dc67fb8d72823f1917d43f1a3", 0x2}, 0x1c) (async, rerun: 32) mknod(&(0x7f0000000480)='./file0\x00', 0x2000, 0xb) (async, rerun: 32) r8 = open(&(0x7f00000004c0)='./file0\x00', 0x80, 0xc3) pread(r8, 0x0, 0x0, 0x9) (async, rerun: 64) r9 = semget$private(0x0, 0x7, 0xe478e4112efc9473) (rerun: 64) semop(r9, &(0x7f0000000540)=[{0x0, 0x800, 0x1000}], 0x1) (async) semop(r9, &(0x7f0000000580)=[{0x0, 0x47a2, 0x1000}], 0x1) sendmmsg(r1, &(0x7f0000000400)={{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="48000000ffff000001"], 0x48}}, 0x38, 0x0) (async) r10 = openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$DIOCADDQUEUE(r10, 0xc148445d, &(0x7f0000000080)={0x2, 0xe4f, {'\x00', './file0/file0\x00', './file0\x00', './file0\x00', {{0x9, 0xffffffff}, {0x9, 0x4}, 0x3}, {{0x0, 0x6fa}, {0x7, 0xfffffff6}, 0x6}, {{0x800, 0x4}, {0x2, 0xff}, 0x9}, {0x5, 0xac7, 0x0, 0xff}, 0x0, 0xfffff77e, 0x9, 0x8}}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.132' (ED25519) to the list of known hosts. pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error SYZFAIL: child failed (errno 0: Undefined error: 0) ifconfig: tap2: SIOCIFDESTROY: Device not configured SYZFAIL: child failed (errno 0: Undefined error: 0) ifconfig: tap2: SIOCIFDESTROY: Device not configured SYZFAIL: child failed (errno 0: Undefined error: 0) ifconfig: tap2: SIOCIFDESTROY: Device not configured SYZFAIL: child failed (errno 0: Undefined error: 0) ifconfig: tap2: SIOCIFDESTROY: Device not configured SYZFAIL: too many calls in output slot=64 (errno 1: Operation not permitted) SYZFAIL: child failed (errno 0: Undefined error: 0) ifconfig: tap2: SIOCIFDESTROY: Device not configured SYZFAIL: too many calls in output slot=64 (errno 1: Operation not permitted) SYZFAIL: child failed (errno 0: Undefined error: 0) ifconfig: tap2: SIOCIFDESTROY: Device not configured SYZFAIL: too many calls in output slot=64 (errno 1: Operation not permitted) SYZFAIL: child failed (errno 0: Undefined error: 0) ifconfig: tap2: SIOCIFDESTROY: Device not configured SYZFAIL: too many calls in output slot=64 (errno 1: Operation not permitted) SYZFAIL: child failed (errno 0: Undefined error: 0) ifconfig: tap2: SIOCIFDESTROY: Device not configured SYZFAIL: too many calls in output slot=64 (errno 1: Operation not permitted) SYZFAIL: child failed (errno 0: Undefined error: 0) ifconfig: tap2: SIOCIFDESTROY: Device not configured SYZFAIL: too many calls in output slot=64 (errno 1: Operation not permitted) SYZFAIL: child failed (errno 0: Undefined error: 0) ifconfig: tap2: SIOCIFDESTROY: Device not configured SYZFAIL: too many calls in output slot=64 (errno 1: Operation not permitted) SYZFAIL: child failed (errno 0: Undefined error: 0) ifconfig: tap2: SIOCIFDESTROY: Device not configured SYZFAIL: too many calls in output slot=64 (errno 1: Operation not permitted) SYZFAIL: child failed (errno 0: Undefined error: 0) ifconfig: tap2: SIOCIFDESTROY: Device not configured SYZFAIL: too many calls in output slot=64 (errno 1: Operation not permitted) SYZFAIL: child failed (errno 0: Undefined error: 0) ifconfig: tap2: SIOCIFDESTROY: Device not configured SYZFAIL: too many calls in output slot=64 (errno 1: Operation not permitted) SYZFAIL: child failed (errno 0: Undefined error: 0) ifconfig: tap2: SIOCIFDESTROY: Device not configured SYZFAIL: too many calls in output slot=64 (errno 1: Operation not permitted) SYZFAIL: child failed (errno 0: Undefined error: 0) ifconfig: tap2: SIOCIFDESTROY: Device not configured SYZFAIL: too many calls in output slot=64 (errno 1: Operation not permitted) SYZFAIL: child failed (errno 0: Undefined error: 0) ifconfig: tap2: SIOCIFDESTROY: Device not configured SYZFAIL: too many calls in output slot=64 (errno 1: Operation not permitted) SYZFAIL: child failed (errno 0: Undefined error: 0) ifconfig: tap2: SIOCIFDESTROY: Device not configured SYZFAIL: too many calls in output slot=64 (errno 1: Operation not permitted) SYZFAIL: child failed (errno 0: Undefined error: 0) ifconfig: tap2: SIOCIFDESTROY: Device not configured SYZFAIL: too many calls in output slot=64 (errno 1: Operation not permitted) SYZFAIL: child failed (errno 0: Undefined error: 0) ifconfig: tap2: SIOCIFDESTROY: Device not configured SYZFAIL: too many calls in output slot=64 (errno 1: Operation not permitted) SYZFAIL: child failed (errno 0: Undefined error: 0) ifconfig: tap2: SIOCIFDESTROY: Device not configured SYZFAIL: too many calls in output slot=64 (errno 1: Operation not permitted) SYZFAIL: child failed (errno 0: Undefined error: 0) SYZFAIL: repeatedly failed to execute the program proc=2 req=61 state=3 status=67 (errno 4: Interrupted system call) OpenBSD/amd64 (ci-openbsd-kasan-3.us-central1-a.c.syzkaller.internal) (tty00) login: uvn_flush: obj=0xffff80000190e9b8, offset=0x3ff000. error during pageout. uvn_flush: WARNING: changes to page may be lost! set $lines = 0 Password: Login incorrect login: show panic Password: Login incorrect login: trace Password: Login incorrect login: show proc Password: Login incorrect show all locks login: Password: Login incorrect show all pools login: Password: Login incorrect trace login: Password: Login incorrect trace login: Password: