last executing test programs: 4.891478862s ago: executing program 4 (id=1162): sysctl$kern(&(0x7f0000000100)={0x1, 0x30}, 0x2, &(0x7f0000000480)="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"/385, &(0x7f0000000080)=0xfffffe80, 0x0, 0x0) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) (async) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) open(0x0, 0x800, 0x120) (async) open(0x0, 0x800, 0x120) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x3fb}) syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) (async) syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) socket(0x2, 0x1, 0x0) (async) r0 = socket(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1, &(0x7f0000000080)=0x1fc, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) connect$unix(r0, &(0x7f0000000000), 0x10) sysctl$kern(&(0x7f0000000400)={0x1, 0x1c}, 0x2, &(0x7f0000000680)="aa1e133f837638cba81d939e6f8b60e2d2c1e4b23d5a274e252c574be1127e169d6e39426565e5a947bc8f", &(0x7f00000006c0)=0x2b, &(0x7f0000000700)="ef99a683c681f77f6042616e1f35e3376eefe2c394b4a62d705dcdc8c11e5317ffc388a3d2f14767ae930d0fafd722d0c18713c629b0c76b67feb258d75aff3557cc523b282992eb26a0f8deaab81722", 0x50) shutdown(r0, 0x1) shutdown(r0, 0x1) ioctl$TIOCSETAW(0xffffffffffffffff, 0x80047460, 0x0) (async) ioctl$TIOCSETAW(0xffffffffffffffff, 0x80047460, 0x0) r1 = syz_open_pts() sysctl$hw(&(0x7f0000000440)={0x6, 0x6}, 0x2, &(0x7f0000000640)="bd0f192e", &(0x7f00000000c0)=0x4, 0x0, 0x0) close(r1) (async) close(r1) sysctl$kern(&(0x7f0000000240)={0x1, 0x39}, 0x2, &(0x7f0000000280)="312866806e899d13892f92bc70ab77db08881707a3a842965a8a8a0ce707d44d30402a7d6e734b310ef6a762615b3397ffde34875f495893af5b9ac693b6935e2ccbd02b2be779a0614dd985071f6da300f7b2f91ad748405404ee56be8b91ee6af979160d182369388fb3cabe8e80f449b82c6e506e503a2879dcc157329f428e271f53bf3207fae9b17ec1", &(0x7f0000000340)=0x8c, &(0x7f0000000380)="c1a5a0b4d310afbcdca6d690fefff743df1c58dd70989161f5ce5a827a38c70bbec643f48ae06cb090e726c8b88452f0f120d552f12b49879efa7714455eefc839b80de1a40444761f5809a3295248097ea8832e69472257702f2a67d48fc0098ab1", 0x62) syz_open_pts() sysctl$kern(&(0x7f0000000780)={0x1, 0x1d}, 0x2, &(0x7f00000009c0)="63bb7d160a0bbff87701460f0e5374702a3567c0b45794f2565ed511428cdb7125894b8136b4910eed5ddff2d907154b75a0454e9c81ede4e2b64fcc2d43032f2bb8a9584f6f3d4697a51d243de7baac0a3e8facd650e9357c7de1e834bbb4308ebd0e8294c0420ee23923f60298b7a795fb69f06f5a3088fec2f77a1b9b3351a1344f6707331d03f62e130a3e5c7cd90d3e0793a333f0d36c4634e63896b7d0343348c1545e58bb1c129395cfc10fad0da0966839eaf93a0d29a7c7c3cff8bd486d6600ab536f0b90afb68864717003b5ada28ad070aaa63f77a7d9117b82fb0931c769ea74225d48c6499b8612a130edae91f293e5f1bb88bfb7f6cb23c5235979705178f3a568e50bd1f4eba89d77c7b7bf6b6dc89751e6e1fabf261b6c97d963c41a8b73e514e7a016028092fa2cab4d0227428ee731517c84ff4598391d465e52c30fe35de446a35cef800154b3ec085e7fe84d6e358a77c27601ae804c0dff0dea2e5188b0403b4325ddbf9c20e11ea4354a4d4495fed359f849f4c4002f34f5e004b5b92050387a055cc09f77c7c18d580b3186650c75d69739a7a49f307e6e32fb78c3b1ddf7f7a6eac91095319b822e8120c5c36042069423579111adb603e601f3478a1987e73adfb7fd27f273178414ead6e5445c58d41c03e0fc649780636e82ad05cd8e9dd3305c5d95791fce35a22cd98843f20d062b13df7b81dd4738755a66e93be8011865eb58a95bc76852140ca84b9556689ebcadc7f08ec77b480e3fbadeb8957508cfd5f38e689bead8e1b524ac804e9fc95a58ecf961021954626bb8791d771c7cddef51513fbd513e4a092568be8895eab5af88b76f691e688ba846e636d086d0c9751eab8175c0c142c343df0f154d86b1b931c1aa2ca0dbeadb5c32f2dec633005f3f39a174829262f2999bd69f04a84960f0cb2f7019dcc749781e0b2a9a137ef454aeddc02a4583e4ad3f2ebfdf2b619ef99f523f1d17eec42fa7fc8439092ddbff270d16a77341317c464c110203d512089f5c41db1fb831edcd135866973098ddee3b6c2b24965f561a4b0175d669e82c92c9c2e02393fae8f69ad687ddc83bc1ec1b174581226e957412e2afc5e85ea8a016c1c813a5831838fb4bdecd0f2db17c9e30524bb9b9e5f9555f6e868452d0fcc02f04d44c04126c72caea26dbfc88daa8f3f4ad3a54274038d46ee8a0a313aacaaf0eca32ef710b738f7c81925226506f2ed58b3122f92cc73190acec350df70e46904c3527d72b802618cd18ace5dd0ead54e369d10dadae77dd0bcc397c8698f3389175c0d7df3f328f84a99d13dcd38ef0022a367e0295cda09bc2ff4062aeebab59960b95ed7a72e5bcebfebfdabef675676533592e7b567c83fdf1dc2f5b03f7ac28fa52cc7ec6165fc4758ad061e99ae7513e97fa42eaefa03ed5370d6ca99e269c5a10341142a85f9f7a7d5d2d4bf0624359bd4839a16aab355a4d6ea31efe46746af8affbfa1c8f7de5859a142e46dcfe7c695d94531ffad1f02915141e94c0ce66beb387f2339fe3e1e74a1c8f64a601268c555e80d11639ba770ab7ef2b6a07a13d62293aecd3d3f84c6e71330223d7da3b0762dc2e392f5a43b517eb77e4cbeb00b2c13d3a6082dfc37592f81e720159d358791fef732605a647df2802b64e214a2a24cbf4bbfb1e8bbb43ea32829b9b289567d51c453332558346f2f67baa701cb5d31c9e6911e0aac2d76faced1cdaeba503c7f897751cbf69075ed15f43c1654c0d41897ce23d2a7ea3dd955a9ec196286c826f60bfb441ba417bc66230c95ca225ddfe6e94938315ce97ef220b49993ef3f06e09fd981ad09d4a63df277301b9cd73aa988635815a854a913f78f1b145c0fefef2a28585e2dcf04eff0dec497db5fbea5093aedf64823f422a1f25800ab5fcc89d871073b10dfdb2f8a0e91d272ce55e9951fba79221fc714ed89c155045d9ffd4317c9963303946a8a7ef13365341a93d66e0d6e1e66937309db1e4561130c3beb253dc84a597cd6b7614c646226345cb6faedf4e3ad4d53c0b766183fe93b3945e0ec8566b52b464710da79c24e456af975a83c4b11b7e289ea49de4e764c88a9f1fd8b80968bbe115f4056bcb1c9510435bf9cd175b413b31516e14c4ea4d56b65ec3c271dc6f0b1a75a1d55bfc0719fdd3911548317df098afccf26fc679c06dd5f531017af0852da13714b0d8ad5907bd73d8c713b2c81281a17d104af6a7896364dc5e7cf6ba3acabd2f0cd75dc2682d56e7cb76d89f3ea5e68c67a49b2925cbbb4b0e2165df843059924d5d5c6818056ea0fcfd60f6525e3256c8979094f39f6a4ab11f43e6b9d14b114b61687cbab716ae9177164424104ca88a733c7a2e90f6eb007a2a06975c646c4945cfa79f999ef9130a3dce92036a25c7f37a7f85e7b9973e663eddde49d88bbdeb67878daa7d3a896d768b3eac150978521e8609da109aaf28ff49139e565e2121c44b6a63956ab127dabd3be94c7f8bbb8fbb16e9a2d9f61912905c7c7b93dfb8a64874411a07aca45e0ba6430a08aa77413b4b5356d8073fad2861b564a00e0d2f8aa01898cca1ad680c5f19463bdca96f2375c7277a369973f68978cdaebe99c6d9e5b3e108baf3d7957cd1f32ab27b371d77a9e7976292d908699b470c6a661230bca9e18ae2fd4370291e6e4d83bb675a0132d50beb5fdc87695418ffc9732f17ca75faef94435fbcd76a160c1049540b024099f39ee07624306e8e02a375c3cf280df4782a42a54a2b18671a6912e257b7134aabf6c602deb8af2a960a258dcc7a2d7ada93afb51779f49a1e64bdc09903260dad74cf151d7a52e3684a21908566e0bcf704e7599dfbf7f5688fe5df769e47e73a017f9350d2012f6fe3d086ff6af538ddaecc551d06beff7a27934d04573c97865a6108d0194ddf2fed0127d995ce1708f385674bcdfe9a4b04d798ceaa78d1a1345d8f7d016584115771b9b37e6f953ed578d4a448f88c91990bef7d37a97653e42afef20b1da64e26b99435f109bf30c8e08271b7368db7d2e3268005b2dae205d382701260321f2630156e17740a9c1f9e28ef080bd12849c01bb87a2f52586c8bfe9a87959a22e36e0cbc385927656a767fb5c917fbf6a63f9fe99be45903998f222a7a85aab477c57afa5c25b347a857bc553cea06f32d9bba806be5772cfad7956ee8c505e57fcd3a7b501ad49f248a143a2dc7fa6edb869cbf155ccbbc722fedf0fa60643eae5e8d7f103c40fa443f4d25543c26f7625d500ce7238c7643eda93467df49bd668e1bdaafd47721f4d0ec477c2e5757810b8730b4a669c731f3cf7bea245dbc6cc92202313fe383c80f1bca674ee40fcce72dd09d20488b57e7083021c48c6b4a3f5464bf52b023f74335a535162551c668f4e08847e1c6707608e4271cd69cc4026dc7999d7e7c906de0e28a589c0fc896548b363eef41359295b168d6ba90c21099006c5c370c4b43217a6b7bbf4c9e1b8b836620f08af7437fe9501023655cb96f5c927d6f3c00dc004b49e8d32d6fde207b2c32319fa785de26a954ead0675cb384f665d40c6f5a946cd9ffd1152fd4d83dbbea0e737f9baf44a8bcc99de49f56c5cc0ad5f5ff18791808617acd5090b544925be737c1471d06d47fd3311def29cb3961fe2026f804232801fdae7a26271e01bc82ecf00aed67996096a2791290ee11709d6eae8a91ca73df8ceca24c40c04a197ae5025b60edcc97bdc7e053e698c5d5fdf657ad050fef203eb3ff9744aba057d90b84ff134ef315451353ed418aafa04fd54cd8c1d5e2c268db735dd118406a3eb3d920ebe1480f69f3818249d2facb7cc4b90a37ddaaf467539cb28ed1a9e2af1c3649352d9712c9e60633507c8c2550b96a7ab5371fdec7f648833a750e6d60740f834d12ab7c08f95e844d37f037ce503ed075e7327b7c349082152eb448bd41986df41c017322b5833b901196e34f78eaff50785ca4b270dd8388f2aa260d6f852142f49eb215f293cb8a126a46a3908e7d9d59f1da7201cdd77094b0b18df9f8bb67ede92de77d7bb5a27739d55ca67604441b2f94cf722816d1a54bdd2d0f9e9c7a8c2bd71d3b4b2fcb50fd8a14bf245080b42af28e1f25305fcebc524c41e300e16def38dea5411a72f3801878cddc7047907c4a6cc71fdb1ef530196881c91c53abf93f7fd4a4955f035723ee07c2f4eb522f2d1f36daae52e7f34256d3acc13a58a13760b293f0164d245a05a65f6cee6b43bd648f4efb13d9c46decc02f725edc54f67b8cf8b64ad3138de9f0e2ef66d76b478bd08fb20f8376df7804e3d381ddbdec0b3f442a82818aeb540885b9e75f97c1c0c0d10fbff731866d47bb6ae9a18880090e2a4ddf1b6f19620e4b866c8cdd71e085d0b347b7449be54b166ca446aedbabd95d805c66f985bdfd538d2840ecba43165154f25e624749dc412549edd8f831b3117fdb9eb020d32c2717b583eda5a56ecb01745dace5c1d50642565533fd24ab0f4efc982fba737239e824096eece759cc693973b0020469d7c9d8e1f013ece6d9afc93065ce88160b5ae7c68b862b2120e556a91cd209f06322e1b7e9ecf4ff89c14718bdf139ae80b2d12978e0ea5f4ad79cb7a5fd668aa672bae28089d0b77d8f85c37914433998f148409fbcd1eee9c9ce8a3e5240c211cdd0aee7d53b0c52d9850a4ff2a4310e1ab02cd22540a7f1d2fb2c6339088b52bae77e7260a8c6f3218b4b1d8140d7c270a109805076519264c2ed88d08e719199991808e56b3f0a1eeb37ee13ec231b8b54d7c22b0f3b5b73af10afb7c6556b47a92ab30f70c752e2658841b1c034db929ea5918a690f36997186c4bd8f584e6a0b53360297393a5613dea350755053a39c4730a6fef18280e3ac49bdb46c2ea1d50d37556a620e6ee173490ca97b6e1ce50775c08515fcab55140d92de26b286e6129da9c17751eb35543430912d41e4d70caa770c1a30e98f036a09321caf621fc06257852c7abccb1dcf1dca42fbed02372ced50ef939b84b6dce1950c56ec9c42801e91768449cc26ae2c5a03b7fc2000dc060b16bba5c0784da5c651f34973526332d8d4980720208669e068f741252a3cd6f0f7c107fb4fb90a426f4a204df5fffbdc6e07dc38d67a72c17060f871046094b5faf21aa261166618d0f79d6912c4ce6a5466def439fc03bf4b0f53a740ec73d041d711d9960faff97c9ec53426269a99945c16b5e19f26cbdbdfbbf7e8c5168868ec810d587a899b8bbcf8ea4a23db805c72dfe7dc3207bb07f956e1c2c87b6cbbb601cc43bb92e8eba1b709bd00a7739795d8490534e0bf053d670ad4b843188d78c549e239f605977098390a0ace231b682c82bfbede7c6c05d36b8ead4ab05195b32f7b1fd386a20bd3cff34a19d32a9f5ccbea8465f8a1673eb228c8ac40b25bdbf3e8f8b71dbd2698b409edd10595d803bd7d6a86544703c473eb324e9222ac34bec51decf486dbb223a6b30c8e6e8647cb7563fc44db619261edb2d1e9c637d6667728bb34d23d31a758d99ba108d47724f154bb9826eba7c93b3705755b27620a5873048f1206f6d219a1943ac363635cf7185086bbec40ceb4779cec2bf91e033db22e985d7478d300cd30569287d8b9fc6b67adb61711cfad753217dccf21ef9693f95d264fa38194d13843be9e1c890ef57bc7c47d3f5d9b486ab6a931075e0ec3c4390d7049bb40d74f7c52e38ca4ec32ae46583b0cdf6ab009c0a59c4bd9cb7d724aaa", &(0x7f00000007c0)=0x1000, &(0x7f0000000800)="e417acbebf76267988c84ff4bef1db44b3d02fd0d5f471d97d628bab274e504fd18a23919e912f271989e45ea1fea55e81f9eb367e680628879da303a92385d643b77b0dde77518ee3e82eef74dde9509304fc210a0bfda857f9089bc7fed5e20b43476e0f04fc14a382bfeccf5d32835ee5b25dad95f071971b0c8b705ef92d6e0fd90e63478291c2536d87532c210eef928bfbcb5eb316015ac0d1dc3a35cdaf540a", 0xa3) ioctl$TIOCSETD(r1, 0x8004741b, &(0x7f0000000000)=0x9) (async) ioctl$TIOCSETD(r1, 0x8004741b, &(0x7f0000000000)=0x9) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000080)='\x00', 0x1}, {&(0x7f0000000140)="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", 0xff}], 0x2) (async) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000080)='\x00', 0x1}, {&(0x7f0000000140)="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", 0xff}], 0x2) unveil(0x0, &(0x7f0000000080)='r\x00') 4.685209324s ago: executing program 5 (id=1167): mknod(&(0x7f0000000200)='./file0\x00', 0x2000, 0x412dff) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x2, 0x0) (async) setrlimit(0x8, &(0x7f00000008c0)={0x42, 0x61}) (async) r1 = syz_open_pts() close(r1) syz_open_pts() ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000000)={0x8000, 0xffffa5a9, 0x1, 0x200, "102e2600", 0x2, 0x1}) writev(r1, &(0x7f0000000700)=[{&(0x7f00000001c0)="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", 0x3f8}], 0x1) setsockopt(0xffffffffffffffff, 0x1000000029, 0x33, &(0x7f0000000080)="031000086941e7c5ce5876778f181b12184c256b1ca6f583b03f959b5253027d08b90779da6a56ed10c81a19096dc2baca0179cdd9967a674820f89c4daa330f", 0x40) (async) syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[@ANYRESOCT=r0]) (async) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000040)="b1f5d5", 0x3}], 0x1) 4.411769474s ago: executing program 5 (id=1171): mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x40000802) mknod(&(0x7f0000000400)='./file0\x00', 0x2000, 0x5c4a) poll(0x0, 0x0, 0x0) r0 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000500), 0x8, 0x0) ioctl$VMM_IOC_CREATE(r0, 0xc5005601, &(0x7f0000000000)={0x10, 0x0, [{&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x1}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f00005e5000/0x3000)=nil, 0x9}, {&(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x402}, {&(0x7f0000ffa000/0x4000)=nil, 0x0, 0x7fff}, {0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1}, {&(0x7f00000f9000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x1}, {&(0x7f000068b000/0x2000)=nil, 0x0, 0x8001}, {&(0x7f0000fed000/0x11000)=nil, &(0x7f0000002000/0x1000)=nil, 0x100000000}, {0x0, &(0x7f0000fff000/0x1000)=nil, 0x5}, {&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x7b}, {&(0x7f0000000000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x2}, {&(0x7f0000165000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f00000fe000/0x3000)=nil, 0x8}, {0x0, &(0x7f0000ffe000/0x2000)=nil, 0xfffffffffffffffd}, {&(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x2}, {&(0x7f00009a6000/0x1000)=nil, &(0x7f00004ff000/0x2000)=nil, 0x7}], './file0\x00'}) ioctl$FIOASYNC(0xffffffffffffffff, 0x8004667d, &(0x7f0000000000)=0xb) ioctl$VMM_IOC_INTR(r0, 0xc0285602, &(0x7f0000000040)={0x5, 0x0, 0x1}) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x1700) r1 = open(&(0x7f0000000140)='./file0\x00', 0x10686, 0x8) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5, 0x10, r1, 0x0) sysctl$net_inet_tcp(&(0x7f0000000040)={0x4, 0x2, 0x6, 0x19}, 0x4, 0x0, 0x0, &(0x7f00000001c0), 0x0) socket(0x2, 0x3, 0x2) sendmsg$unix(0xffffffffffffffff, &(0x7f0000002a40)={&(0x7f0000000280)=@abs={0x0, 0x0, 0x1}, 0x8, 0x0}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) socket$inet(0x2, 0x3, 0x102) write(0xffffffffffffffff, &(0x7f0000000000)="06ebb34f1521b22f35f38154c1ca2d24b9b402d93ed9334552014dbee16c992ba714275e6e8b", 0x26) r2 = open(&(0x7f0000000000)='./bus\x00', 0x80, 0x0) r3 = geteuid() fchownat(r2, &(0x7f0000000080)='./bus\x00', r3, 0x0, 0x6) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) listen(r2, 0x1) ioctl$BIOCSETF(r2, 0x80104267, &(0x7f0000000140)={0x5, &(0x7f00000001c0)=[{0x10, 0x39, 0x8, 0x4}, {0x5, 0x1, 0x55, 0x8}, {0x1, 0x0, 0x58, 0xc}, {0x2, 0x5, 0x1, 0x3}, {0x8001, 0x9, 0x1, 0x9}]}) r4 = open$dir(&(0x7f0000000000)='.\x00', 0x80, 0x80) mknodat(r4, &(0x7f00000002c0)='./file0\x00', 0x2000, 0x3361) r5 = open(&(0x7f0000000040)='./file0\x00', 0x200, 0x1ba) writev(0xffffffffffffffff, &(0x7f0000000980)=[{&(0x7f00000001c0)="a32c834b409893ccddca8015f1202762f349804ec5fc0f54f5f9c81d7c7824388851ee0abae0c43b2f598d14ae49fcd273fc5468db668b8d87a93dee508de7b5d15c26b90d41bfe3d1dee40d6e89e5cff0", 0x51}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$VNDIOCCLR(r5, 0xc0a86b05, &(0x7f0000000200)={0x0, 0x10000, 0x0}) 4.244705082s ago: executing program 5 (id=1176): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0e99db6de761f86, 0x200000) open(&(0x7f0000000000)='./file0\x00', 0x2, 0x100) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = fcntl$dupfd(r0, 0x2, r0) close(r1) r2 = socket(0x2, 0x2, 0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0x10000, 0xa0) r3 = open(&(0x7f0000000240)='./file0\x00', 0x205, 0x0) flock(r3, 0x7) setrlimit(0x8, &(0x7f0000000000)={0x42, 0x62}) r4 = syz_open_pts() close(r4) syz_open_pts() ioctl$FIOASYNC(r4, 0x80047470, &(0x7f0000000140)=0x2) ioctl$FIOASYNC(r4, 0x80047460, &(0x7f00000000c0)=0x4) readv(r4, &(0x7f0000000540)=[{&(0x7f0000000040)=""/15, 0xf}], 0x1) connect$unix(r2, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x2}, 0x8) r5 = socket(0x18, 0x2, 0x0) setsockopt$sock_int(r5, 0xffff, 0x1023, &(0x7f0000000080)=0x83, 0x4) open(&(0x7f0000000080)='./file0\x00', 0x10, 0x28) r6 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) write(r6, 0x0, 0x0) 4.167126743s ago: executing program 4 (id=1178): r0 = openat$pf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TIOCSETA(r0, 0xc0884450, &(0x7f0000000040)={0x8000, 0xd, 0x2, 0x9, "0700b4ff01000000000000000000f900", 0x4, 0x7}) syz_emit_ethernet(0x66, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "5f6ad9", 0x30, 0x3a, 0x29, @rand_addr="000000000000000000020000008000", @local={0xfe, 0x80, '\x00', 0x0}, {[], @icmpv6=@param_prob={0x4, 0x2, 0x0, 0x9, {0x5, 0x6, "a28eea", 0x932e, 0x2c, 0x0, @local={0xfe, 0x80, '\x00', 0x0}, @rand_addr="428d8a0aa07df960ae22721eb73d8b56"}}}}}}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x0, 0x0}) ioctl$FIONREAD(0xffffffffffffffff, 0xc0106924, 0x0) ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f0000000080)={0x0, 0x18f, 0xffef9ff6, 0x2, "4b06a6bcff0300dba800000000000800", 0x0, 0x2}) mknod(&(0x7f0000000180)='./file0\x00', 0x2000, 0x40000800) r1 = open(&(0x7f0000000240)='./file0\x00', 0x70e, 0x24) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000080)={0x0, 0x9, 0x7, 0x8625, "0100012d29fb000700000000098002005e00", 0x6, 0xfffffffe}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000080)={{0x8, 0x0, 0x0, 0x0, 0x0, 0x196, 0x3ff}, 0x401, 0x10000, 0x0, 0x0, 0x1, 0x80000000000010c, 0x5, 0x7}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xff0a, 0x0, 0x37) r2 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) write(r2, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) r3 = socket(0x18, 0x2, 0x0) setsockopt(r3, 0x1000000000029, 0xb, &(0x7f0000003680)='\x00\x00\x00\x00', 0x4) setsockopt(r3, 0x1000000029, 0xc, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) sysctl$vm(&(0x7f0000000040)={0x2, 0x5}, 0x2, &(0x7f0000000000)="0000040c", &(0x7f0000000540)=0x4, 0x0, 0x0) 3.819989269s ago: executing program 4 (id=1187): ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc5005601, &(0x7f0000000000)={0x10, 0x0, [{&(0x7f0000347000/0x3000)=nil, &(0x7f0000663000/0x4000)=nil, 0x5}, {&(0x7f00005c9000/0x2000)=nil, &(0x7f0000826000/0x4000)=nil}, {&(0x7f0000060000/0x2000)=nil, &(0x7f00007a8000/0x3000)=nil}, {0x0, &(0x7f0000ffc000/0x4000)=nil, 0x1}, {&(0x7f000017c000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil}, {&(0x7f00003f7000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x2000000006}, {0x0, 0x0, 0x4}, {&(0x7f0000ff0000/0xf000)=nil, &(0x7f00000c4000/0x10000)=nil, 0x200000000000}, {&(0x7f000000d000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x2}, {&(0x7f00004cc000/0x4000)=nil, &(0x7f0000661000/0x3000)=nil, 0x4}, {0x0, &(0x7f0000156000/0x1000)=nil, 0x16}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil}, {&(0x7f000038f000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x100000000}, {&(0x7f00004c1000/0x2000)=nil, 0x0, 0x9bbf}, {&(0x7f00001cf000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil}, {&(0x7f0000573000/0x2000)=nil, &(0x7f00004e9000/0x4000)=nil}], './file0\x00'}) fcntl$lock(0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x3, 0x0, 0x0, 0x100000001}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f0000000080), 0x1c, 0x0}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000200)={0x0}, &(0x7f0000000240)=0xc) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000001d80)={{0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0xffff}, 0x40, 0xfffe, r0, r0, 0x6, 0x8, 0x9a}) bind$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x10000000000001}}) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket(0x18, 0x1, 0x0) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x62}) r2 = syz_open_pts() close(r2) r3 = syz_open_pts() ioctl$TIOCSTOP(r3, 0x2000746f) ioctl$FIOASYNC(r3, 0x80047460, &(0x7f00000000c0)=0x4) ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f0000000000)={0x1, 0x7, 0x9, 0xfffffbfc, "e8a5973b95390d23119fd164229399c8036429d3", 0x3, 0xffffff1c}) writev(r2, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) close(r1) r4 = socket(0x18, 0x2, 0x0) setsockopt(r4, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) connect$unix(r1, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) sendmsg$unix(r1, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0) 3.814731844s ago: executing program 5 (id=1188): syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) syz_extract_tcp_res(&(0x7f0000000040), 0x0, 0x3) r0 = socket(0x2, 0x1, 0x0) connect$unix(r0, &(0x7f0000000000), 0x10) sendto$unix(r0, &(0x7f0000000280)="1e786d7bb2", 0x7fcc, 0x1, 0x0, 0x0) r1 = socket(0x11, 0x10000000000003, 0x0) sendto$unix(r1, &(0x7f00000000c0)="b10005030000040005000000070000003300080000a11800fef96ec0c72fd3357ae30200004e3039d2d236acf20b7804be3816499104000000882b297be1aa0500000051e2f0ad09000000000000009b672f4d335c223e7d0c032bfa896443a42118000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b1257afa8c500002002fbfe0c2300008abfba3500000008e371a3f8343712051eeab71d1889e000"/177, 0xb1, 0x0, 0x0, 0x0) close(r0) 3.657265423s ago: executing program 4 (id=1192): mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x40000802) mknod(&(0x7f0000000400)='./file0\x00', 0x2000, 0x5c4a) poll(0x0, 0x0, 0x0) r0 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000500), 0x8, 0x0) ioctl$VMM_IOC_CREATE(r0, 0xc5005601, &(0x7f0000000000)={0x10, 0x0, [{&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x1}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f00005e5000/0x3000)=nil, 0x9}, {&(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x402}, {&(0x7f0000ffa000/0x4000)=nil, 0x0, 0x7fff}, {0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1}, {&(0x7f00000f9000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x1}, {&(0x7f000068b000/0x2000)=nil, 0x0, 0x8001}, {&(0x7f0000fed000/0x11000)=nil, &(0x7f0000002000/0x1000)=nil, 0x100000000}, {0x0, &(0x7f0000fff000/0x1000)=nil, 0x5}, {&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x7b}, {&(0x7f0000000000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x2}, {&(0x7f0000165000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f00000fe000/0x3000)=nil, 0x8}, {0x0, &(0x7f0000ffe000/0x2000)=nil, 0xfffffffffffffffd}, {&(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x2}, {&(0x7f00009a6000/0x1000)=nil, &(0x7f00004ff000/0x2000)=nil, 0x7}], './file0\x00'}) ioctl$FIOASYNC(0xffffffffffffffff, 0x8004667d, &(0x7f0000000000)=0xb) ioctl$VMM_IOC_INTR(r0, 0xc0285602, &(0x7f0000000040)={0x5, 0x0, 0x1}) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x1700) r1 = open(&(0x7f0000000140)='./file0\x00', 0x10686, 0x8) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5, 0x10, r1, 0x0) sysctl$net_inet_tcp(&(0x7f0000000040)={0x4, 0x2, 0x6, 0x19}, 0x4, 0x0, 0x0, &(0x7f00000001c0), 0x0) socket(0x2, 0x3, 0x2) sendmsg$unix(0xffffffffffffffff, &(0x7f0000002a40)={&(0x7f0000000280)=@abs={0x0, 0x0, 0x1}, 0x8, 0x0}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) socket$inet(0x2, 0x3, 0x102) write(0xffffffffffffffff, &(0x7f0000000000)="06ebb34f1521b22f35f38154c1ca2d24b9b402d93ed9334552014dbee16c992ba714275e6e8b", 0x26) r2 = open(&(0x7f0000000000)='./bus\x00', 0x80, 0x0) r3 = geteuid() fchownat(r2, &(0x7f0000000080)='./bus\x00', r3, 0x0, 0x6) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) listen(r2, 0x1) ioctl$BIOCSETF(r2, 0x80104267, &(0x7f0000000140)={0x5, &(0x7f00000001c0)=[{0x10, 0x39, 0x8, 0x4}, {0x5, 0x1, 0x55, 0x8}, {0x1, 0x0, 0x58, 0xc}, {0x2, 0x5, 0x1, 0x3}, {0x8001, 0x9, 0x1, 0x9}]}) r4 = open$dir(&(0x7f0000000000)='.\x00', 0x80, 0x80) mknodat(r4, &(0x7f00000002c0)='./file0\x00', 0x2000, 0x3361) r5 = open(&(0x7f0000000040)='./file0\x00', 0x200, 0x1ba) writev(0xffffffffffffffff, &(0x7f0000000980)=[{&(0x7f00000001c0)="a32c834b409893ccddca8015f1202762f349804ec5fc0f54f5f9c81d7c7824388851ee0abae0c43b2f598d14ae49fcd273fc5468db668b8d87a93dee508de7b5d15c26b90d41bfe3d1dee40d6e89e5cff0", 0x51}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$VNDIOCCLR(r5, 0xc0a86b05, &(0x7f0000000200)={0x0, 0x10000, 0x0}) 3.37789968s ago: executing program 4 (id=1203): sysctl$kern(&(0x7f0000000080)={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x2, 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = dup(r0) ioctl$PCIOCWRITE(r1, 0xc0107003, &(0x7f0000000000)={{0x8, 0x8, 0x8}, 0x5, 0x101, 0x7}) setsockopt$inet_opts(r0, 0x0, 0x14, &(0x7f0000000040)="02ff002fd64f5ddc24d70800", 0xc) 3.143611042s ago: executing program 4 (id=1211): r0 = syz_open_pts() (async) r1 = socket(0x2, 0x2, 0x0) r2 = socket(0x2, 0x400000000002, 0x0) setsockopt(r2, 0x0, 0x1f, &(0x7f0000000080)="c5f5d915", 0x4) (async) r3 = dup2(r2, r1) (async, rerun: 32) select(0x40, &(0x7f0000000000)={0xfffffffffffffffd, 0x0, 0x0, 0x564, 0x9ce8, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0) (async, rerun: 32) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) bind(r1, &(0x7f0000000000), 0x10) (async) r4 = socket(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0xffff, 0x20, &(0x7f0000000080)=0x6, 0x4) connect$unix(r4, &(0x7f0000000000), 0x10) (async) write(r4, 0x0, 0x0) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2) (async) ioctl$TIOCSTAT(r0, 0x20007465, 0x0) (async, rerun: 32) ioctl$TIOCDRAIN(r0, 0x2000745e) (async, rerun: 32) mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0xb) socket(0x18, 0xc003, 0x16) (async) open(&(0x7f00000002c0)='./bus\x00', 0x2, 0x0) (async) ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x0, 0xb3b, {[0xfffffbfffffffffb, 0x0, 0x2, 0x100200000, 0x6, 0x7, 0xdf60, 0xfffffffffffffffe, 0x0, 0x2f01, 0x93, 0x4, 0xffffffffffffffff, 0x200000000002, 0xd, 0x4, 0xfffffffffffffffe, 0x4000000000ff], [0xfffffffffffffffe, 0xf0, 0xfffefffffffffffd, 0x20000001, 0x5e, 0x7b98, 0x6, 0x0, 0x3], [0x100000001, 0x8000, 0x8, 0x0, 0xb, 0x11000, 0xffffffff00000000], [0x8, 0x1fffffffffb, 0x7ffffffffffffffc, 0x100000000, 0xfffffffffffffffe, 0x8], [{0x0, 0x0, 0x0, 0x7d0c}, {0xfffc, 0x22, 0x5, 0x2}, {0x4, 0x0, 0xfffffffe, 0x80}, {0x3, 0xd4a4, 0x5, 0xffffffffffffffff}, {0x0, 0x2, 0x7f, 0x8}, {0x0, 0x9, 0x9, 0x2000000000000000}, {0x0, 0x0, 0xfffffff9}, {0x0, 0xfd, 0x0, 0x7}], {0x1, 0x5, 0x6, 0x6}, {0xedf6, 0x3, 0x6d5, 0x6}}}) r5 = kqueue() kevent(r5, 0x0, 0xfffffffd, &(0x7f0000000040), 0x5, 0x0) (async) kevent(r5, &(0x7f0000000000), 0x3ff, 0x0, 0x8000800, 0x0) execve(0x0, 0x0, 0x0) (async) sysctl$kern(&(0x7f0000000100)={0x1, 0xa}, 0x2, &(0x7f00000011c0), 0x0, 0x0, 0x0) 2.686484581s ago: executing program 5 (id=1220): mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x40000802) mknod(&(0x7f0000000400)='./file0\x00', 0x2000, 0x5c4a) poll(0x0, 0x0, 0x0) r0 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000500), 0x8, 0x0) ioctl$VMM_IOC_CREATE(r0, 0xc5005601, &(0x7f0000000000)={0x10, 0x0, [{&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x1}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f00005e5000/0x3000)=nil, 0x9}, {&(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x402}, {&(0x7f0000ffa000/0x4000)=nil, 0x0, 0x7fff}, {0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1}, {&(0x7f00000f9000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x1}, {&(0x7f000068b000/0x2000)=nil, 0x0, 0x8001}, {&(0x7f0000fed000/0x11000)=nil, &(0x7f0000002000/0x1000)=nil, 0x100000000}, {0x0, &(0x7f0000fff000/0x1000)=nil, 0x5}, {&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x7b}, {&(0x7f0000000000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x2}, {&(0x7f0000165000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f00000fe000/0x3000)=nil, 0x8}, {0x0, &(0x7f0000ffe000/0x2000)=nil, 0xfffffffffffffffd}, {&(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x2}, {&(0x7f00009a6000/0x1000)=nil, &(0x7f00004ff000/0x2000)=nil, 0x7}], './file0\x00'}) ioctl$FIOASYNC(0xffffffffffffffff, 0x8004667d, &(0x7f0000000000)=0xb) ioctl$VMM_IOC_INTR(r0, 0xc0285602, &(0x7f0000000040)={0x5, 0x0, 0x1}) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x1700) r1 = open(&(0x7f0000000140)='./file0\x00', 0x10686, 0x8) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5, 0x10, r1, 0x0) sysctl$net_inet_tcp(&(0x7f0000000040)={0x4, 0x2, 0x6, 0x19}, 0x4, 0x0, 0x0, &(0x7f00000001c0), 0x0) socket(0x2, 0x3, 0x2) sendmsg$unix(0xffffffffffffffff, &(0x7f0000002a40)={&(0x7f0000000280)=@abs={0x0, 0x0, 0x1}, 0x8, 0x0}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) socket$inet(0x2, 0x3, 0x102) write(0xffffffffffffffff, &(0x7f0000000000)="06ebb34f1521b22f35f38154c1ca2d24b9b402d93ed9334552014dbee16c992ba714275e", 0x24) r2 = open(&(0x7f0000000000)='./bus\x00', 0x80, 0x0) r3 = geteuid() fchownat(r2, &(0x7f0000000080)='./bus\x00', r3, 0x0, 0x6) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) listen(r2, 0x1) ioctl$BIOCSETF(r2, 0x80104267, &(0x7f0000000140)={0x5, &(0x7f00000001c0)=[{0x10, 0x39, 0x8, 0x4}, {0x5, 0x1, 0x55, 0x8}, {0x1, 0x0, 0x58, 0xc}, {0x2, 0x5, 0x1, 0x3}, {0x8001, 0x9, 0x1, 0x9}]}) r4 = open$dir(&(0x7f0000000000)='.\x00', 0x80, 0x80) mknodat(r4, &(0x7f00000002c0)='./file0\x00', 0x2000, 0x3361) r5 = open(&(0x7f0000000040)='./file0\x00', 0x200, 0x1ba) writev(0xffffffffffffffff, &(0x7f0000000980)=[{&(0x7f00000001c0)="a32c834b409893ccddca8015f1202762f349804ec5fc0f54f5f9c81d7c7824388851ee0abae0c43b2f598d14ae49fcd273fc5468db668b8d87a93dee508de7b5d15c26b90d41bfe3d1dee40d6e89e5cff0", 0x51}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$VNDIOCCLR(r5, 0xc0a86b05, &(0x7f0000000200)={0x0, 0x10000, 0x0}) 2.653146633s ago: executing program 5 (id=1225): r0 = syz_open_pts() ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000340)={0x7, 0x0, 0xfffffffe, 0x5, "ff14e7130b1e586ca6294000", 0x40, 0x3}) r1 = socket(0x11, 0x3, 0x0) setsockopt$sock_int(r1, 0xffff, 0x40, 0x0, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000380)="079facfaaed69aea4dc561c3b736feac0a2a76087be8b904ddc6f90b66e0f69b6dfba683b348224cf0ccc2a39b0f79389a2bd9b211424a22ca014b9231e253e257706c75b3f320166475c72455021edf575fab8b5d65b8d261c87c3ccc4e784ea7462f3723edabb8e26d27acb1797e2ef4db27270a", 0xffffff01}], 0x1) r2 = syz_open_pts() ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f00000000c0)={0xa, 0x4, 0x8a38, 0x4000007, "07160a009cef01098b748200"}) poll(&(0x7f00000005c0)=[{r2, 0x153}], 0x1, 0x5) ioctl$TIOCSTAT(r0, 0x20007465, 0x0) syz_open_pts() (async) ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000340)={0x7, 0x0, 0xfffffffe, 0x5, "ff14e7130b1e586ca6294000", 0x40, 0x3}) (async) socket(0x11, 0x3, 0x0) (async) setsockopt$sock_int(r1, 0xffff, 0x40, 0x0, 0x0) (async) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000380)="079facfaaed69aea4dc561c3b736feac0a2a76087be8b904ddc6f90b66e0f69b6dfba683b348224cf0ccc2a39b0f79389a2bd9b211424a22ca014b9231e253e257706c75b3f320166475c72455021edf575fab8b5d65b8d261c87c3ccc4e784ea7462f3723edabb8e26d27acb1797e2ef4db27270a", 0xffffff01}], 0x1) (async) syz_open_pts() (async) ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f00000000c0)={0xa, 0x4, 0x8a38, 0x4000007, "07160a009cef01098b748200"}) (async) poll(&(0x7f00000005c0)=[{r2, 0x153}], 0x1, 0x5) (async) ioctl$TIOCSTAT(r0, 0x20007465, 0x0) (async) 2.062404562s ago: executing program 1 (id=1238): r0 = socket(0x800000018, 0x3, 0x0) r1 = getpgrp() r2 = getpgid(r1) open$dir(&(0x7f0000000b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x0) r3 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000005c0)='\x00', r3, &(0x7f0000001780)='./file1\x00') symlinkat(&(0x7f0000000dc0)='./file0\x00', r3, &(0x7f0000000ec0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000980)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000a80)='./file0\x00') mkdirat(r3, &(0x7f00000006c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10) rename(&(0x7f0000001040)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') getgroups(0x2, &(0x7f0000000180)=[0xffffffffffffffff, 0x0]) r5 = getuid() msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x57, 0x0, r4, r5, r4, 0x33, 0x8001}, 0x6, 0xfffffffffffffffb, r2, 0x0, 0xffffffdfffffffff, 0x4e3, 0x5, 0x6}) setsockopt$sock_int(r0, 0xffff, 0x1000, &(0x7f0000000000)=0x7, 0x4) bind$unix(r0, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) setsockopt(r0, 0x1000000000029, 0x1b, &(0x7f0000000000)="c04a1190", 0x4) r6 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0xbe, 0x0) ioctl$BIOCSETIF(r6, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x80, 0xe3, 0x80, 0xffffffff}, {0x4bf, 0x81, 0x0, 0x1}, {0x16, 0x35, 0x0, 0x800ee68}]}) sysctl$kern(0x0, 0x0, &(0x7f00000003c0)="c2a6d600000000ecfe746fc6d6f77bf1aeb47b7f66", &(0x7f0000000000)=0x15, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mknod(&(0x7f0000000000)='./bus\x00', 0x2000, 0x0) r7 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) setuid(0xee01) ioctl$TIOCSPGRP(r7, 0x40047477, 0x0) ioctl$BIOCSETWF(r6, 0x80104277, &(0x7f0000000040)={0x28, 0x0}) write(r6, &(0x7f00000003c0)="f81ad30100060000000100000000", 0xe) setitimer(0x2, &(0x7f0000000100)={{0xfff, 0x1}, {0x3, 0x3}}, 0x0) sysctl$kern(&(0x7f0000000000)={0x1, 0x40}, 0x25, &(0x7f0000000140)="71f91e3871ac0058e05a9150fec3708200"/28, &(0x7f0000000200)=0x1c, 0x0, 0x0) 1.64492399s ago: executing program 1 (id=1241): mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x40000802) mknod(&(0x7f0000000400)='./file0\x00', 0x2000, 0x5c4a) poll(0x0, 0x0, 0x0) r0 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000500), 0x8, 0x0) ioctl$VMM_IOC_CREATE(r0, 0xc5005601, &(0x7f0000000000)={0x10, 0x0, [{&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x1}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f00005e5000/0x3000)=nil, 0x9}, {&(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x402}, {&(0x7f0000ffa000/0x4000)=nil, 0x0, 0x7fff}, {0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1}, {&(0x7f00000f9000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x1}, {&(0x7f000068b000/0x2000)=nil, 0x0, 0x8001}, {&(0x7f0000fed000/0x11000)=nil, &(0x7f0000002000/0x1000)=nil, 0x100000000}, {0x0, &(0x7f0000fff000/0x1000)=nil, 0x5}, {&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x7b}, {&(0x7f0000000000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x2}, {&(0x7f0000165000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f00000fe000/0x3000)=nil, 0x8}, {0x0, &(0x7f0000ffe000/0x2000)=nil, 0xfffffffffffffffd}, {&(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x2}, {&(0x7f00009a6000/0x1000)=nil, &(0x7f00004ff000/0x2000)=nil, 0x7}], './file0\x00'}) ioctl$FIOASYNC(0xffffffffffffffff, 0x8004667d, &(0x7f0000000000)=0xb) ioctl$VMM_IOC_INTR(r0, 0xc0285602, &(0x7f0000000040)={0x5, 0x0, 0x1}) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x1700) r1 = open(&(0x7f0000000140)='./file0\x00', 0x10686, 0x8) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5, 0x10, r1, 0x0) sysctl$net_inet_tcp(&(0x7f0000000040)={0x4, 0x2, 0x6, 0x19}, 0x4, 0x0, 0x0, &(0x7f00000001c0), 0x0) socket(0x2, 0x3, 0x2) sendmsg$unix(0xffffffffffffffff, &(0x7f0000002a40)={&(0x7f0000000280)=@abs={0x0, 0x0, 0x1}, 0x8, 0x0}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) socket$inet(0x2, 0x3, 0x102) write(0xffffffffffffffff, &(0x7f0000000000)="06ebb34f1521b22f35f38154c1ca2d24b9b402d93ed9334552014dbee16c992ba714275e", 0x24) r2 = open(&(0x7f0000000000)='./bus\x00', 0x80, 0x0) r3 = geteuid() fchownat(r2, &(0x7f0000000080)='./bus\x00', r3, 0x0, 0x6) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) listen(r2, 0x1) ioctl$BIOCSETF(r2, 0x80104267, &(0x7f0000000140)={0x5, &(0x7f00000001c0)=[{0x10, 0x39, 0x8, 0x4}, {0x5, 0x1, 0x55, 0x8}, {0x1, 0x0, 0x58, 0xc}, {0x2, 0x5, 0x1, 0x3}, {0x8001, 0x9, 0x1, 0x9}]}) r4 = open$dir(&(0x7f0000000000)='.\x00', 0x80, 0x80) mknodat(r4, &(0x7f00000002c0)='./file0\x00', 0x2000, 0x3361) r5 = open(&(0x7f0000000040)='./file0\x00', 0x200, 0x1ba) writev(0xffffffffffffffff, &(0x7f0000000980)=[{&(0x7f00000001c0)="a32c834b409893ccddca8015f1202762f349804ec5fc0f54f5f9c81d7c7824388851ee0abae0c43b2f598d14ae49fcd273fc5468db668b8d87a93dee508de7b5d15c26b90d41bfe3d1dee40d6e89e5cff0", 0x51}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$VNDIOCCLR(r5, 0xc0a86b05, &(0x7f0000000200)={0x0, 0x10000, 0x0}) 1.638573951s ago: executing program 1 (id=1244): setrlimit(0x8, &(0x7f0000000980)={0x42, 0x3fb}) r0 = syz_open_pts() close(r0) r1 = syz_open_pts() ioctl$TIOCGFLAGS(r1, 0x4004745d, &(0x7f0000000000)) ioctl$FIOASYNC(r0, 0x80047469, &(0x7f00000000c0)=0x5) writev(r0, &(0x7f0000000040)=[{0x0}], 0x1) writev(r0, &(0x7f0000000580)=[{0x0}], 0x1) r2 = syz_open_pts() dup2(r2, r2) 1.631763668s ago: executing program 6 (id=1247): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0e99db6de761f86, 0x0) r0 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) ioctl$VNDIOCSET(r0, 0xc0384600, &(0x7f0000000140)={&(0x7f0000000180)='./file0\x00', 0x567, 0x0}) shutdown(0xffffffffffffffff, 0x2) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0x5, [{&(0x7f0000695000/0x3000)=nil, &(0x7f000051f000/0x4000)=nil, 0x5}, {&(0x7f000010a000/0x4000)=nil, &(0x7f0000159000/0x2000)=nil}, {&(0x7f00005fd000/0x1000)=nil, &(0x7f0000690000/0x4000)=nil, 0xfffffffffffffffc}, {&(0x7f0000675000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x1}, {&(0x7f0000629000/0x1000)=nil, &(0x7f0000ff1000/0x1000)=nil, 0x100000000000}, {&(0x7f00004f8000/0x2000)=nil, &(0x7f000068e000/0x12000)=nil, 0xfffffffffffffffd}, {&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff2000/0x2000)=nil}, {&(0x7f000002c000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil}, {&(0x7f0000452000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x7}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x8}, {&(0x7f00003b6000/0x1000)=nil, &(0x7f000019b000/0x4000)=nil}, {&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x80000000000}, {&(0x7f000031c000/0x5000)=nil, &(0x7f0000ff8000/0x4000)=nil}, {&(0x7f00003f2000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil}, {&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil}, {&(0x7f0000ff1000/0x1000)=nil, &(0x7f0000ff3000/0x2000)=nil, 0x2}], './file0/file0\x00'}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x3d}, 0x2, &(0x7f0000000000)="71f91e34", &(0x7f0000000080)=0x4, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sysctl$kern(&(0x7f00000000c0)={0x1, 0x56}, 0x3c, &(0x7f00000002c0)="71f91e344332ef3dbc5a91501d94a34b8e5f84cf71b59c7afec3708258841949446c72fd29e45d016f9513065b13f8f04aea8362710e38f6dfa55e5c14b55312d58fcdc58f061094a97716a12370fdf5568900ba4eab89eb0c7dd38abf90bb59acb95ee65812df4c8d4b6ff7e80ff16fa4b1f5ff74af557ecc7a6690aaf516d740000000000000", &(0x7f0000000080)=0x87, 0x0, 0x0) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x1700) r1 = open(&(0x7f0000000140)='./bus/file0\x00', 0x8, 0x100) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000240)={0x1, &(0x7f0000000080)=[{0x406, 0x5, 0x79, 0x3}]}) ioctl$BIOCSETWF(r1, 0x8010427f, &(0x7f0000000240)={0x0, 0x0}) setrlimit(0x8, &(0x7f00000000c0)={0x45, 0x56}) r2 = syz_open_pts() close(r2) syz_open_pts() ioctl$FIOASYNC(r2, 0x80047466, &(0x7f0000000200)=0x5) syz_emit_ethernet(0xe, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) socket$inet(0x2, 0x3, 0x2) socket(0x1, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1000, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r3 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r3, 0xc0286988, &(0x7f00000001c0)) open(&(0x7f0000000100)='./file0\x00', 0x70e, 0x0) r4 = socket(0x18, 0x2, 0x0) ioctl$FIONREAD(r4, 0x8020699d, &(0x7f00000001c0)) 1.630403531s ago: executing program 7 (id=1249): mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2) (async) sysctl$hw(&(0x7f0000000280)={0x6, 0x1c}, 0x2, &(0x7f0000001280)="ff", 0x0, 0x0, 0x0) (async) socket(0x18, 0x2, 0x0) (async, rerun: 32) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (rerun: 32) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) (async, rerun: 32) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x84, 0x11, 0x3, 0x7ff}, {0x1, 0xf0, 0xff}, {0x6, 0x81, 0x12, 0xfffff805}]}) (rerun: 32) sysctl$kern(0x0, 0x0, &(0x7f0000000200)="a7a6d61de4a10909926243003b47915d8156c41f1b4f0919d7aacdfaffffffff", &(0x7f0000000000)=0x20, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000040)={0x28, 0x0}) (async) write(r0, &(0x7f00000003c0)="f81ad30100060000000100000000", 0xe) (async, rerun: 32) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async, rerun: 32) r1 = socket(0x18, 0x1, 0x0) setsockopt(r1, 0x1000000029, 0xc, &(0x7f0000000040)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) setsockopt(r1, 0x1000000029, 0xd, &(0x7f0000000000), 0x0) (async) setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) setuid(0xee01) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) r2 = socket(0x2, 0x2, 0x0) close(r2) r3 = socket(0x2, 0x2, 0x0) bind(r3, &(0x7f0000000000), 0x10) (async) connect$unix(r3, &(0x7f0000000000), 0x10) connect$unix(r2, &(0x7f0000000000), 0x10) (async) r4 = socket(0x2, 0x2, 0x0) bind(r4, &(0x7f0000000000), 0x10) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r5, &(0x7f0000000880)={&(0x7f0000000340)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000540)=""/185, 0xb9}], 0x1, 0x0}}, 0x10, 0x2042, 0x0) read(r5, 0x0, 0x50) poll(&(0x7f0000000080)=[{r5, 0x4}], 0x1, 0x8) 1.351903731s ago: executing program 7 (id=1253): r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) ioctl$TIOCSETA(r0, 0xc0284457, &(0x7f0000000000)={0x0, 0x4, 0x9, 0x1405, "08040000000080000001000000f8ffffff00", 0x4917, 0x1000}) r1 = syz_open_pts() fcntl$lock(r1, 0x8, &(0x7f0000000040)={0x1, 0x0, 0x200000000000009c, 0x1000002fd}) (async) syz_open_pts() (async) openat$vmm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) close(0xffffffffffffffff) (async) syz_emit_ethernet(0x3e, &(0x7f0000000a00)=ANY=[@ANYBLOB="aaaaaaaaaaaa371faa81ae6886dd6507efb800082afc00000000000000000000ffff7f000001000000000000000000000000000000014e224e2300089078"]) 1.257372735s ago: executing program 7 (id=1255): chmod(&(0x7f0000000040)='.\x00', 0x35e) r0 = socket(0x18, 0x4000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) setitimer(0x2, &(0x7f0000000040)={{0x7f, 0x6}, {0x6}}, 0x0) getsockopt$sock_cred(r0, 0xffff, 0x1024, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000100)=0x68) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) getpeername(r2, &(0x7f0000000200)=@un=@file={0x0, ""/256}, &(0x7f0000000380)=0x102) seteuid(r1) ioctl$TIOCSETA(0xffffffffffffffff, 0xc450443f, &(0x7f0000000040)={0x80000001, 0x2a, 0x200, 0xe65, "a2a48100", 0x8, 0xc83f}) recvmmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0}, 0x10, 0x40, 0x0) close(0xffffffffffffffff) execve(0x0, 0x0, 0x0) setregid(0x0, 0x0) setuid(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x8a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r3, 0x2) sendmsg$unix(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="28000000ffff000001"], 0x28, 0x3010b}, 0x0) chflags(&(0x7f0000000000)='./file0\x00', 0x0) 1.254527184s ago: executing program 7 (id=1257): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000480)=""/240, 0xfffffc47}, {&(0x7f00000000c0)=""/179, 0xfdac}, {&(0x7f00000002c0)=""/229, 0xe2}], 0x50, 0x0) minherit(&(0x7f00000fd000/0x3000)=nil, 0x3000, 0x1) mknod(&(0x7f00000001c0)='./file0\x00', 0x2000, 0x205b9a) r1 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$VNDIOCSET(r1, 0xc0384600, &(0x7f0000000140)={&(0x7f0000000180)='./file0\x00', 0x567, 0x0}) 1.013408906s ago: executing program 2 (id=1259): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) r0 = open$dir(&(0x7f0000000300)='.\x00', 0x8, 0x4a) setgid(0xffffffffffffffff) setgroups(0x0, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x80000000000206, 0x138) setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) truncate(&(0x7f0000000080)='./file0\x00', 0x40002ffff) r1 = open(&(0x7f0000000180)='./file0\x00', 0x80000000000206, 0x0) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x1700) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) unveil(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='W\x00') ioctl$BIOCLOCK(r2, 0x20004276) ioctl$VNDIOCSET(r2, 0x8010427e, &(0x7f0000000100)={0x0, 0x7fffffffffffffff, 0x0}) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000240)="ee11d2ac4a36", 0xffffffb8}], 0x1) ioctl$TIOCGWINSZ(r1, 0x40087468, &(0x7f0000000040)) open(&(0x7f0000000000)='./file0\x00', 0x615, 0x166) fchmod(r0, 0x80) setuid(0xffffffffffffffff) open(&(0x7f0000000380)='./bus\x00', 0x80000000000206, 0x4ebfac6bbaf7929) unveil(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000140)='x\x00') 1.012541756s ago: executing program 2 (id=1260): r0 = socket(0x2, 0x3, 0x0) close(r0) socket(0x18, 0x3, 0x3a) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_opts(r1, 0x0, 0x64, &(0x7f0000000240)="01000000", 0x4) setsockopt(r1, 0x0, 0x66, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x100000000000000}) connect$unix(r0, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) write(r0, &(0x7f0000000200)="f2ffc9cbddbb0000876840762ff37b03cfb667843efb4a94cac0394a286b870719dc0400fd451b0a98e65d32d103f77944f249094c87b738bb868c01e797016cff5cdca1c957488fef0a91cf902dfa65c50a93bbf87d95e63f272fd8ff0ad363ceda0011d350b6849e888167b0479b1ee6259b83254dae9fb3c6438e0d031b44c6fe54577b77b1840e508d4b20f23817d91e41117963722220969a52f34ec7288a82145d559b", 0xa6) 1.007647854s ago: executing program 2 (id=1262): mlockall(0x0) mlockall(0x1) mlockall(0x1) mlockall(0x1) mlockall(0x0) mlockall(0x0) mlockall(0xdfd2a61263b4022d) mlockall(0x1) mlockall(0x0) mlockall(0x1) mlockall(0x1) mlockall(0x5) mlockall(0x1) mlockall(0x1) mlockall(0x0) mlockall(0x0) mlockall(0x0) mlockall(0x1) mlockall(0x0) mlockall(0x1) mlockall(0x1) mlockall(0x1) getppid() mlockall(0x0) mlockall(0x0) mlockall(0x1) mlockall(0x1) ioctl$WSKBDIO_GETENCODINGS(0xffffffffffffff9c, 0xc0105715, &(0x7f0000000000)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r0 = accept$unix(0xffffffffffffffff, &(0x7f0000000040)=@file={0x0, ""/4102}, &(0x7f0000001080)=0x1008) sendmsg$unix(r0, &(0x7f00000016c0)={&(0x7f00000010c0)=@abs={0x0, 0x0, 0x2}, 0x8, &(0x7f0000001600)=[{&(0x7f0000001100)="359b526b0509e8bad0b529e9a58102a62548180d4cb72f95741bace39b77d57475140d9d52887814d701bf1af4e32b0a79c2", 0x32}, {&(0x7f0000001140)="fc319253917fe0393770c52b8181cd9c36ae50e9", 0x14}, {&(0x7f0000001180)="35a0a7b5a7500926067fc8a7d5ac8c0665f29f215cf0a78efc575d7a9065a7294e752dba46e403eadce008d48897678210dd783c45e405", 0x37}, {&(0x7f00000011c0)="be565374dbbe6a67296c58759c539dd149f5dc7521b6ce6a2163ca21defa3d46863d93a050972bd5a9b3bfb8f278e256c6938a9df1dbad161a5c13567dc7e784a27cb3bd67ce01a055670cb499fe45839c00f9c99cd96c291a6b67f00083d0c2fb6532185fa44b47c5391d2a5ab23e6fbab0da8756f483ff58a2a3fd6588702f241165eae6a6265924341306ad4ad0d22cb8057f7522887c3663f6a8", 0x9c}, {&(0x7f0000001280)="6e3bf44510561ef8f26b0ca17b5c185cd9c947e08e0222a718c7fbdeb265156f13930ee3759b966fd7d5406babf8174ec5894dd301f17cfed5a49358c68c0f115483169ac838d8c87de615d67c", 0x4d}, {&(0x7f0000001300)="9b55b3503a89633aec97dcbdccc321196a7275bf847ff4def715c7852eb88753beda2ead6c6d1fc923d852b3d846aca1d90b74c3acb3cfb2ba92b44f4ed56d4d42dfde46e09d342ca042e995f162bad170f2d3646d0e3b1a12917d4efc8bf7301aeecd", 0x63}, {&(0x7f0000001380)="379b2d7d36dca1a65dc0ce32eff27b6ed93861b5c9a729e925709f6715046725600e27205d9d94a75d2ae5ca4748a7bc0e8e49c49c79c6081a92b402a180f0954ab02a74a7ffd0f0f915909da106c7911e0ee76d45a878f1741d940f72e739f0e8f692b8162eaf5f9129775227e738b6593c1002759b5cf0f3f32403f5b1c296d284030a0bdbbd17fd2037805a02fceb97fe007bc9db71d4d8c640eaf83246abd3509ef15b2ae319a681dcaf2db510557d4666f6109ea185d81e4bfcc5063f64b9", 0xc1}, {&(0x7f0000001480)="414906fc55bd020ec3ca9aa3a2c071d880a3bdfe4d2b6981e1214fb318c252dbefa4f6dcd2c4abbc6f43ed09ebaa595b88cd99db3f9ad9457a6bcbf01e18924fd762547d7a93ee70414124742b9fc49ad6ab79f5432f09c30f6514323d435ac580eb8524266cf7dcfab654ff5136b7dbdf158f0d8ab3f17954e439826a24a8a5d7f2f78eef9f3430b65fe8bf96eb0692805b99cf357db291976aa3a1fe482952d535a9fbc23719fa418b47de3c30bcccd54088619d00e4272dae3e2d39", 0xbd}, {&(0x7f0000001540)="a57200e46022183669df9768bc2ba8381e118908e8d04cef85da781f74133463717118572146023430088965a4c6bcaa93d786fc767f4a2490bbb732fd960e61d4c303b6f5ecb159e03ba1d5d491018f28ec411e4a1a474fe1c5bb16a178650431472fcc0fa1af801ca959287b95a868b16bf8ee406d195e0daacd5144d84135185491baf5a90c4e04ffebbfcf162e5ad5051adbd0396d1d1eadaf443e4f77174eaff125961d3b7e86bc18e3e5f7d60e14ce", 0xb2}], 0x9, 0x0, 0x0, 0x2}, 0x4) 996.982386ms ago: executing program 2 (id=1263): sysctl$kern(&(0x7f00000000c0)={0x1, 0x2c}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0xfffffffffffffef1) r0 = openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = getppid() fcntl$setown(r0, 0x6, r1) getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0}, 0xc) fcntl$setown(r0, 0x6, r2) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0xfe, 0x0) ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) ioctl$BIOCSETF(r3, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f00000000c0)=[{0x64, 0xf, 0x0, 0xfffffff5}, {0x3, 0xee, 0x9}, {0x6, 0x80, 0x6, 0x8}]}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x8010640d, &(0x7f0000000180)={0x3, 0x4}) r4 = getppid() fcntl$setown(r3, 0x6, r4) 881.075097ms ago: executing program 2 (id=1264): syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) r0 = socket(0x2, 0x4001, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) connect$unix(r0, &(0x7f0000000000), 0x10) r1 = syz_open_pts() ioctl$TIOCSETAF(r1, 0x802c7416, &(0x7f0000000040)={0x32f9c719, 0x0, 0x2, 0x4, "c9b91408388446eeb88ee450d099109a985f689c", 0x8, 0x4}) ioctl$FIOASYNC(r1, 0x8004667d, &(0x7f0000000400)=0x1e4) ioctl$TIOCSETAW(r1, 0x802c7415, &(0x7f00000005c0)={0x1, 0x2, 0x6, 0xfffffff9, "8f73727b6cc01b2120c84e958d24047f24cf4d62", 0x9, 0x9}) connect$unix(r0, &(0x7f00000002c0)=@abs={0x0, 0x0, 0x1}, 0x8) sysctl$hw(&(0x7f0000000000)={0x6, 0x13}, 0x2, &(0x7f0000000040), 0x0, 0x0, 0x0) 847.003315ms ago: executing program 1 (id=1266): r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x9) readv(r0, &(0x7f0000000180)=[{&(0x7f0000000240)=""/203, 0xcb}], 0x1) ioctl$TIOCCLRVERAUTH(r0, 0x2000741d) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0e99db6de761f86, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) pwritev(r1, &(0x7f00000000c0)=[{0x0}], 0x1, 0x2) recvmmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)={&(0x7f0000000240)=@un=@file={0x0, ""/529}, 0x213, 0x0, 0x0, 0x0}, 0x4000}, 0x10, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1003f8d}, 0x2b, 0x1001, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x0, 0x0, 0xcbdf4d1d31039a48, 0xdfc}, 0x10, 0x4000000000000004, 0x0, 0x0, 0x800002, 0x2, 0x1, 0x3}) sysctl$net_inet6_ip6(&(0x7f0000000040)={0x4, 0x18, 0x29, 0x33}, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) mknod(&(0x7f0000000000)='./bus\x00', 0x2000, 0x0) r4 = open(&(0x7f0000000400)='./bus\x00', 0x1, 0x100) ioctl$TIOCCONS(r4, 0x80047462, &(0x7f00000003c0)=0x245) sendmmsg(r3, &(0x7f0000000180)={0x0, 0x2c5d}, 0x10, 0x1) close(r2) unveil(0x0, &(0x7f00000000c0)='r\x00') 838.754116ms ago: executing program 6 (id=1268): r0 = open$dir(&(0x7f0000000300)='.\x00', 0x80, 0x4a) setgid(0xffffffffffffffff) chmod(&(0x7f0000000000)='./file0\x00', 0x2) setgroups(0x0, 0x0) fchmod(r0, 0xf3) setuid(0xffffffffffffffff) unveil(&(0x7f0000000280)='.\x00', &(0x7f00000002c0)='r\x00') open$dir(&(0x7f0000000300)='.\x00', 0x80, 0x4a) (async) setgid(0xffffffffffffffff) (async) chmod(&(0x7f0000000000)='./file0\x00', 0x2) (async) setgroups(0x0, 0x0) (async) fchmod(r0, 0xf3) (async) setuid(0xffffffffffffffff) (async) unveil(&(0x7f0000000280)='.\x00', &(0x7f00000002c0)='r\x00') (async) 816.945664ms ago: executing program 2 (id=1269): mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x10, 0x0) fcntl$lock(r0, 0x9, &(0x7f00000003c0)={0x1, 0x0, 0x7fffffffffffffff, 0x1ffffffff}) sysctl$kern(&(0x7f0000000000)={0x1, 0x32}, 0x2, 0x0, 0x0, &(0x7f0000001440)='\x00\x00\x00\x00', 0x4) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) fcntl$lock(r1, 0x9, &(0x7f0000000040)={0x2, 0x2, 0xfffffffffffffffc, 0x1000300000004}) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000500)={0x3, &(0x7f00000000c0)=[{0xfffe}, {0x1, 0x0, 0x0, 0x2}, {0x4, 0x0, 0x0, 0xff}]}) setuid(0xee01) unveil(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='r\x00') sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xfffffffffffffe3c, 0x0, 0x37) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x2) r3 = socket(0x18, 0x2, 0x0) setitimer(0x0, &(0x7f0000000000)={{0x100000000, 0xa}, {0xffffffff, 0xc}}, 0x0) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) open(&(0x7f00000002c0)='./file0\x00', 0x1, 0x34) setsockopt(r3, 0x1000000029, 0xd, &(0x7f0000000000), 0x14) ioctl$VMM_IOC_CREATE(0xffffffffffffff9c, 0xc2585601, &(0x7f00000000c0)={0x10, 0x21ac00000, [{&(0x7f0000f36000/0x4000)=nil, &(0x7f0000630000/0x4000)=nil}, {&(0x7f00006c0000/0x4000)=nil, &(0x7f000014b000/0x2000)=nil, 0xfffffffffffffffc}, {&(0x7f0000c47000/0x4000)=nil, &(0x7f0000690000/0x4000)=nil, 0x3}, {&(0x7f0000672000/0x3000)=nil, &(0x7f00004ed000/0x800000)=nil, 0x1000000000000004}, {&(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x1000)=nil, 0x2}, {&(0x7f0000c1a000/0x2000)=nil, &(0x7f000068e000/0x12000)=nil, 0xf}, {&(0x7f000005b000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x4}, {&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b59000/0x1000)=nil}, {&(0x7f00004f6000/0x4000)=nil, &(0x7f0000b1e000/0x4000)=nil, 0xfffffffffffffffc}, {&(0x7f0000807000/0x1000)=nil, &(0x7f00006f0000/0x3000)=nil, 0x7}, {&(0x7f00002f6000/0x2000)=nil, &(0x7f00004b0000/0x4000)=nil, 0x10000}, {&(0x7f000000e000/0x4000)=nil, &(0x7f000069c000/0x2000)=nil, 0x1}, {&(0x7f000015e000/0x3000)=nil, &(0x7f0000660000/0x2000)=nil}, {&(0x7f0000c1e000/0x3000)=nil, &(0x7f000015a000/0x1000)=nil, 0x101}, {&(0x7f0000701000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x3}, {&(0x7f00002f6000/0x3000)=nil, &(0x7f00008cb000/0x7000)=nil, 0x8000000000000001}], './file0\x00', 0xfffffffd}) semctl$SETVAL(0xffffffffffffffff, 0x0, 0x8, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) ioctl$VNDIOCSET(r2, 0xc0104401, &(0x7f00000001c0)={0x0, 0x0, 0x0}) 769.221118ms ago: executing program 6 (id=1273): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0e99db6de761f86, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x80000000000206, 0x20) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)="ee11d2ac4a36", 0xffffffb8}], 0x1) 764.778371ms ago: executing program 0 (id=1274): r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x200, 0x186) open$dir(&(0x7f0000000400)='./file0\x00', 0x20000, 0x106) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) setrlimit(0x1, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x8000, 0x150) write(r1, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x1013, r0, 0x8000000000000001) r2 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$SPKRTUNE(r2, 0x20005302, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r5, &(0x7f0000000880)={&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000540)=""/185, 0xb9}], 0x1, 0x0}}, 0x10, 0x2042, 0x0) close(r5) openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000100), 0x81, 0x0) close(r4) connect$unix(r3, &(0x7f0000000080)=@abs={0x0, 0x0, 0x3}, 0x8) truncate(&(0x7f0000000140)='./file0\x00', 0x6) close(r3) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x200, 0x186) (async) open$dir(&(0x7f0000000400)='./file0\x00', 0x20000, 0x106) (async) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) (async) setrlimit(0x1, 0x0) (async) open(&(0x7f0000000000)='./file0\x00', 0x8000, 0x150) (async) write(r1, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) (async) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x1013, r0, 0x8000000000000001) (async) openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) (async) ioctl$SPKRTUNE(r2, 0x20005302, 0x0) (async) socket$unix(0x1, 0x5, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) (async) recvmmsg(r5, &(0x7f0000000880)={&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000540)=""/185, 0xb9}], 0x1, 0x0}}, 0x10, 0x2042, 0x0) (async) close(r5) (async) openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000100), 0x81, 0x0) (async) close(r4) (async) connect$unix(r3, &(0x7f0000000080)=@abs={0x0, 0x0, 0x3}, 0x8) (async) truncate(&(0x7f0000000140)='./file0\x00', 0x6) (async) close(r3) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) (async) 554.615558ms ago: executing program 6 (id=1276): r0 = socket(0x18, 0x2, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000500)="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", 0xb01}], 0x1) close(r1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb5219f1000b913f1, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000001980)) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000380)="673bb5b8cc0c16ed08f1b8d24ec34555a65007857cf49811f88d01f1fc94794643e7eca455061c9c3ce6abbbdabb26a52ad7f4", 0x33}], 0x1) sysctl$kern(&(0x7f0000000140)={0x1, 0x30}, 0x2, 0x0, 0x0, 0x0, 0x0) r2 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0x68, &(0x7f0000000080)={{0x18, 0x2, 0x10000, 0x5}, {0x18, 0x3, 0xffffff77, 0x1ff}, 0x218, [0x40, 0x6, 0xd, 0x0, 0x0, 0x5, 0x1, 0x2]}, 0x3c) ioctl$VNDIOCSET(r2, 0xc0384600, &(0x7f00000001c0)={&(0x7f0000000100)='./file0\x00', 0xcf31, &(0x7f0000000180)='./file0\x00', 0x8}) sendmsg$unix(r0, &(0x7f0000000040)={&(0x7f0000000000)=@abs={0x1, 0x0, 0x0}, 0x8, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="10"], 0x20, 0x2}, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x2011, r0, 0x7) 540.18337ms ago: executing program 1 (id=1278): mkdir(&(0x7f0000000180)='./file0\x00', 0x14) kqueue() getrusage(0x0, &(0x7f0000000580)) r0 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$WSMUXIO_REMOVE_DEVICE(r0, 0x40047477, &(0x7f00000001c0)={0x1, 0x86b0c9c}) (async) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, 0x0) (async) mknod(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x0) (async) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) (async, rerun: 32) link(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000d40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async, rerun: 32) link(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000a40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) rename(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) rename(&(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) r1 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000500), 0x8, 0x0) sysctl$net_inet_divert(&(0x7f0000000040)={0x4, 0x1e, 0x2, 0x2}, 0x4, 0x0, 0x0, 0x0, 0x0) (async) r2 = accept$inet(0xffffffffffffff9c, &(0x7f0000000000), &(0x7f0000000080)=0xc) ioctl$VMM_IOC_INTR(r1, 0x800c5606, &(0x7f0000000400)={0x3, 0x3, 0x6127}) (async) setsockopt$inet_opts(r2, 0x0, 0x1, &(0x7f00000000c0)="62ffa99cb7ef601fc690f535944f1f8e684eaf5ae2810733c61d50cee0bea6403567b954065ce1aeec44c86d974984d08b174c29fadfeaad392259a9aecfe95a8f008c8a74785e4548d4d02fbbfb6a288a0d9b3bdd5797c1cf9ee3467dbfa2315a594f8b12ae11cc8185b2a0fdf667229fef17cebcf5e9ae3be76ca13ef961b85297123721c51c6c4ea19d61fc3af089f2c093a7125a9698f6635fb8ef158a039dc5e9d5752704566129a94e6f6ba04d22335dd38a964bc062ed9a46a5d8a49414f96b57522e0465529d96c0f85256e8e286ef09877195950762068c0ae969d81341fc0f79b480323565513f4a8e", 0xee) (async, rerun: 64) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (rerun: 64) r3 = fcntl$dupfd(r2, 0xa, r1) sysctl$kern(&(0x7f0000000240)={0x1, 0x4e}, 0x2, &(0x7f0000000280)="496e18385870a85bf7972b0ec008b0c9bc9c62c729131f35628736cde1f17b1682fe91240625a6d49cdcdb7005da635d1415aae8f3ee77d0c370af69e8a8ee96a23ae5d2c0fcf70b2c410b517b05c61679c1aed69c2f6259c6b2806391b9f54490da16102306232549d08e14ea854dbbb7", &(0x7f0000000300)=0x71, &(0x7f0000000340)="0b313d79f33b25b52017a3f3cfc6d68a2df2c0e289105dd39cc4330df2d885c085f1ccd389f8f78cd009b2f764d5fa7d71e835d2bd3cb04ab074823147dad43d1a667887667d3502c1836d8f3f9b6d0c59ba250fccead1f0ccb379b042bb297655239a44e94c4f909adf0646d49db3e19eaff7bcaabcff44e6d8798263b5e11d4d02b30b962fb9efce96", 0x8a) (async) ioctl$WSDISPLAYIO_USEFONT(r3, 0x80585750, &(0x7f00000001c0)={'./file0\x00', 0x6, 0x43c2, 0x8, 0x0, 0x5, 0xb8, 0x5, 0x1, 0x1, 0xfffffffffffffff9, 0x2}) 440.889292ms ago: executing program 0 (id=1280): semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)) setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0x68, 0x0, 0x0) r0 = semget(0x0, 0x1, 0x281) semget(0x0, 0x1, 0x281) setgid(0xffffffffffffffff) setgroups(0x0, 0x0) setuid(0xffffffffffffffff) semctl$GETALL(r0, 0x0, 0x6, 0x0) mknod(&(0x7f0000000140)='./bus\x00', 0x6000, 0x6d4) open(&(0x7f0000000280)='./bus\x00', 0x8, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000200)=@file={0xd570d0466b6018f, './file0\x00'}, 0xa) r2 = socket$unix(0x1, 0x2, 0x0) chmod(&(0x7f0000000180)='./file0\x00', 0x3fe) setuid(0xee01) sendmsg$unix(r2, &(0x7f0000000080)={&(0x7f0000000040)=@file={0x170, './file0\x00'}, 0xa, 0x0, 0x0, 0x0, 0x0, 0x404}, 0xe) syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) r3 = socket(0x10, 0x2, 0x10) setsockopt$sock_int(r3, 0xffff, 0x1, &(0x7f0000000080)=0x9af, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r4 = openat$vmm(0xffffffffffffff9c, &(0x7f00000000c0), 0x121, 0x0) ioctl$VMM_IOC_CREATE(r4, 0xc2585601, &(0x7f0000000200)={0xaaaab18, 0x6, [{&(0x7f00005e2000/0x3000)=nil, &(0x7f00000dd000/0x1000)=nil, 0x79}, {&(0x7f0000363000/0x3000)=nil, &(0x7f00007cc000/0x2000)=nil, 0x74a9}, {&(0x7f0000538000/0x4000)=nil, &(0x7f000066d000/0x4000)=nil, 0x400}, {&(0x7f0000321000/0x3000)=nil, &(0x7f00006f1000/0x4000)=nil, 0x8}, {&(0x7f00004b5000/0x2000)=nil, &(0x7f0000615000/0x3000)=nil, 0x8}, {&(0x7f000077b000/0x1000)=nil, &(0x7f000037e000/0x2000)=nil, 0xc}, {&(0x7f00002fc000/0x2000)=nil, &(0x7f0000512000/0x2000)=nil, 0xffffffffffffffff}, {&(0x7f0000a83000/0x1000)=nil, &(0x7f000066b000/0x2000)=nil, 0xffffffffffffffff}, {&(0x7f00007fd000/0x800000)=nil, &(0x7f0000217000/0x2000)=nil, 0x8}, {&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000b78000/0x3000)=nil, 0x9}, {&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ed7000/0x4000)=nil, 0x2}, {&(0x7f0000e10000/0x4000)=nil, &(0x7f00007d5000/0x4000)=nil, 0x80000000}, {&(0x7f00003b2000/0x2000)=nil, &(0x7f0000a1e000/0x1000)=nil, 0x5}, {&(0x7f0000fe7000/0x4000)=nil, &(0x7f000056b000/0x1000)=nil, 0x9}, {&(0x7f0000572000/0xf000)=nil, &(0x7f00003e3000/0x3000)=nil}, {&(0x7f000046a000/0x4000)=nil, &(0x7f0000b73000/0x1000)=nil, 0x43916589}], './file0\x00', 0x7}) connect$unix(r3, &(0x7f0000000000), 0x10) writev(r3, &(0x7f0000000040)=[{0x0}], 0x1) shmget$private(0x0, 0x1000, 0x80, &(0x7f0000db6000/0x1000)=nil) 440.430216ms ago: executing program 3 (id=1281): execve(0x0, 0x0, 0x0) (async) write(0xffffffffffffffff, 0x0, 0x0) (async) setrlimit(0x8, 0x0) (async) mknod(0x0, 0x2000, 0x31c) (async) mknod(0x0, 0x2000, 0xd02) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) rename(0x0, &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) rename(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) (async) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, 0x0) (async) open(&(0x7f0000000180)='./file0\x00', 0x80000000000206, 0x32) ktrace(&(0x7f0000000000)='./file0\x00', 0x2, 0x40000530, 0x0) (async) openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x1700) (async) r0 = open(&(0x7f0000000000)='./bus\x00', 0x20, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) (async) syz_extract_tcp_res(0x0, 0x800, 0x8778) (async) syz_emit_ethernet(0x36, &(0x7f0000000480)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffbfffff0800450000280066000000069078e0000001ac1400aa4e224e20", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50027fff9078fffc"]) (async) syz_emit_ethernet(0x46, &(0x7f0000000580)=ANY=[@ANYBLOB="000000000000ffffffffffff0800490800380066000006069078e0000001ac1400aa00009406000000039406fffffff200004e224e207fb9209929c3735b7f6cfc37e4454bfe23e1009afa5f17", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="501080009078fffc"]) (async) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000300)={0x3, &(0x7f00000000c0)=[{0x5, 0xe, 0x8}, {0x74, 0x5, 0x8, 0x2}, {0x406, 0x5, 0x7b, 0x8000}]}) (async) syz_emit_ethernet(0x1000e, &(0x7f0000000080)=ANY=[]) (async) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0x9, [{&(0x7f00004a3000/0x3000)=nil, &(0x7f00001cc000/0x4000)=nil, 0x637d}, {&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000628000/0x3000)=nil, 0x7ffffffffffffbfb}, {&(0x7f0000209000/0x1000)=nil, &(0x7f000010a000/0x1000)=nil, 0x9}, {&(0x7f00006b5000/0x2000)=nil, &(0x7f00000eb000/0x4000)=nil, 0xfdf7fffffffff7fa}, {&(0x7f00004c0000/0x4000)=nil, &(0x7f0000180000/0x4000)=nil, 0x8}, {&(0x7f000060b000/0x2000)=nil, &(0x7f0000095000/0x3000)=nil}, {&(0x7f000056a000/0x2000)=nil, &(0x7f0000688000/0x2000)=nil, 0x101}, {&(0x7f00003ba000/0x4000)=nil, &(0x7f000063b000/0x2000)=nil, 0x5}, {&(0x7f0000242000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0xffffdffffffffff9}, {&(0x7f0000181000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0xfffffffffffffffc}, {&(0x7f000064b000/0x2000)=nil, &(0x7f00000eb000/0x3000)=nil, 0x2}, {&(0x7f0000331000/0x1000)=nil, &(0x7f0000ff1000/0x2000)=nil, 0x5}, {&(0x7f00003ca000/0x1000)=nil, &(0x7f0000108000/0x3000)=nil, 0x1}, {&(0x7f0000271000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0xfffffffffffffff3}, {&(0x7f0000148000/0x1000)=nil, &(0x7f0000209000/0x2000)=nil, 0xffffffff}, {&(0x7f0000ffd000/0x2000)=nil, &(0x7f000019f000/0x2000)=nil, 0x4}], './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', 0xfffffffa}) setsockopt(0xffffffffffffffff, 0x1000000029, 0x31, &(0x7f0000000080)="031000086941e7c5ce5876778f181b", 0xf) (async) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200}}) (async) socket(0x2, 0x3, 0x2f) setrlimit(0x8, &(0x7f0000000980)={0xb, 0x54}) (async) r1 = syz_open_pts() close(r1) (async) syz_open_pts() (async) select(0xe, &(0x7f0000000000)={0x3, 0x0, 0x0, 0x40000, 0x100, 0x3560000000000, 0x0, 0x80000000000000}, &(0x7f0000000300)={0xcea, 0x20000, 0x80000002, 0x1, 0x1, 0x80, 0x80000000000001, 0xfffffffffffffffe}, 0x0, 0x0) 439.324005ms ago: executing program 6 (id=1282): sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b10005136000009f050000002010000000000934ed0a0500fef96ecfc727d3357ae302b37b67ca1f2d61db7f4d0800000000000000f7c8cf5f882b297be1aa5b23edeb51e2f0ac3ebbc257699a1f139b671f4d335d223e7db3009b95665b00e32118", 0x62, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x11, 0x3, 0x0) shmget(0x0, 0x4000, 0x249, &(0x7f0000663000/0x4000)=nil) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc5005601, &(0x7f0000000000)={0x10, 0xffffffffffffffff, [{&(0x7f000046c000/0x3000)=nil, &(0x7f0000663000/0x4000)=nil, 0x5}, {&(0x7f00005c9000/0x2000)=nil, &(0x7f00000a5000/0x3000)=nil}, {&(0x7f0000060000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil}, {0x0, &(0x7f000079a000/0x1000)=nil, 0x1}, {&(0x7f000017c000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil}, {&(0x7f0000000000/0x2000)=nil, &(0x7f0000758000/0x2000)=nil, 0x6}, {0x0, &(0x7f000014c000/0x2000)=nil, 0xfffffffffffffffa}, {&(0x7f0000ff0000/0xf000)=nil, &(0x7f00002c6000/0x4000)=nil, 0x200000000000}, {&(0x7f0000752000/0x3000)=nil, &(0x7f00001d9000/0x2000)=nil, 0x2}, {&(0x7f00004cc000/0x4000)=nil, &(0x7f0000661000/0x3000)=nil}, {0x0, &(0x7f00006a2000/0x3000)=nil, 0x16}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x8000000000000000}, {&(0x7f000038f000/0x1000)=nil, &(0x7f00007f6000/0x2000)=nil, 0x100000000}, {&(0x7f0000ffd000/0x1000)=nil, 0x0, 0x100000001}, {&(0x7f00001cf000/0x4000)=nil, &(0x7f0000142000/0x4000)=nil}, {&(0x7f0000573000/0x2000)=nil, &(0x7f000015d000/0x4000)=nil}], './file0\x00'}) setrlimit(0x8, &(0x7f0000000980)={0xb, 0x54}) r1 = syz_open_pts() close(r1) r2 = syz_open_pts() write(r0, &(0x7f0000000300), 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) syz_emit_ethernet(0x138, &(0x7f0000000480)=ANY=[]) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) r3 = socket(0x18, 0x3, 0x0) ioctl$FIONREAD(r3, 0xc0106924, &(0x7f00000001c0)) symlink(&(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r4 = socket(0x18, 0x3, 0x0) setitimer(0x1, &(0x7f0000000140)={{0xf32b46f, 0x100800000000009}, {0x7ffeffffffffffff, 0x10001}}, 0x0) ioctl$FIONREAD(r4, 0x81206919, &(0x7f0000000100)) ioctl$FIONREAD(r4, 0x8080691a, &(0x7f0000000100)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000000)={0x7ffffffe, 0xf, 0x8001, 0x8, "88b4e4d6a24bfdfffffffff4ff10235300", 0x1, 0xffffffff}) read(r2, &(0x7f0000000200)=""/232, 0xe8) sendto$unix(r0, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a421020000df710fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x0, 0x0, 0x0) 438.909385ms ago: executing program 1 (id=1283): r0 = socket(0x18, 0x2, 0xe) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r1 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000300)="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", 0x11c}, {&(0x7f0000000200)="ffba7fd34c7757e064f8ef782f0500000000000000b35f986b2c5397b224", 0x1e}, {&(0x7f00000000c0)="6fffa671ebf3452fcfa8f15a4a6e759f52a3accc7747b0bf390f18e9b126dca41a0d105be2fc2576fbe63786e42739158a948fa667f8f70703e5901a54406c30e0f200009845c613c7d7ad2b014f19916cae0d95bcb6874b0fa2851ef49116fdbdcd78e6d7ef79100b287c2bd18552fa8e477cbeb00d2e9a5f2bf9b916ef13476928d993360372", 0x87}, {&(0x7f0000000480)="1957772e331e5d8ec2868796bd060e0163ef017da1d7e926f02303221af1a8934a57067059b236059209ee28b19bb76517d6eae632bce98b6e8c2ea14574300096", 0x41}], 0x4) execve(0x0, 0x0, 0x0) mprotect(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0) sysctl$ddb(&(0x7f0000000000)={0x9, 0x5}, 0x2, 0x0, 0x0, &(0x7f0000001080), 0x4) setrlimit(0x8, &(0x7f0000000080)={0xb, 0x54}) r2 = syz_open_pts() close(r2) syz_open_pts() ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f0000000280)={0x7, 0x40000000, 0xffffff95, 0x5ffffd58, "9d5cff7f1c00606200b00000621300", 0x203fb, 0x8001}) writev(r2, &(0x7f0000000180)=[{&(0x7f00000004c0)="8000d23977036cc5c00138a405c26d94f11e75548c9d0609d94574bd35e644404de4d5deef23493acf1f1abc57a68f24ec324a3a75b1ac289afa64d32889d77d52639b8b7d201d", 0x47}, {&(0x7f0000000580)="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", 0x8b7}], 0x2) sysctl$kern(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)="55f8f5782087a072a82ec35f78d14780f518", 0x12) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r3 = socket(0x10, 0x3, 0x85) ioctl$FIONREAD(r3, 0xc1206949, &(0x7f00000001c0)) setsockopt(r0, 0x1000000000029, 0x2, &(0x7f0000000000), 0x0) 438.555338ms ago: executing program 3 (id=1284): unveil(0x0, 0x0) unveil(&(0x7f0000000280)='.\x00', 0x0) mknod(&(0x7f0000000080)='./file0\x00', 0x6000, 0x100) r0 = msgget(0x2, 0x4) r1 = getuid() setuid(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) getsockopt$sock_cred(r2, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, 0x0, 0x0}, &(0x7f0000000400)=0xfffffffffffffe33) setregid(0x0, r3) setregid(0x0, r3) r4 = getuid() getgroups(0x0, &(0x7f0000000040)) r5 = getpid() setpgid(r5, r5) msgctl$IPC_SET(0x0, 0x1, &(0x7f00000000c0)={{}, 0x0, 0x0, r5}) r6 = socket$unix(0x1, 0x5, 0x0) r7 = getpid() fcntl$setown(r6, 0x6, r7) msgctl$IPC_SET(r0, 0x1, &(0x7f00000000c0)={{0x4, r1, r3, r4, 0x0, 0x80, 0x9}, 0xffffffffffffff74, 0x1, r5, r7, 0x80000001, 0xffffffffffffff02, 0x8, 0x6}) unlink(&(0x7f0000000000)='./file0\x00') 407.517575ms ago: executing program 3 (id=1285): r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0xae828e137847f62, 0x0) (async) setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) ftruncate(r0, 0x20008002) open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x2) preadv(r0, &(0x7f00000001c0), 0x0, 0x8000002) 406.591367ms ago: executing program 0 (id=1286): setrlimit(0x8, &(0x7f0000000040)={0x7, 0x2000000000000}) r0 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000080), 0x10, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) getsockopt(r1, 0x0, 0x1e, 0x0, 0x0) shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x2000) semop(0x0, &(0x7f00000000c0)=[{0x1, 0x0, 0x800}, {0x4, 0x1ff, 0x1800}], 0x2) connect$unix(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) socket(0x18, 0x3, 0x0) setsockopt(0xffffffffffffffff, 0x1000000029, 0x2e, &(0x7f0000000000), 0x0) shmat(0x0, &(0x7f0000ff5000/0x3000)=nil, 0x1000) sysctl$net_inet_tcp(&(0x7f0000000000)={0x4, 0x2, 0x6, 0x18}, 0x4, 0x0, 0x0, 0x0, 0x0) sysctl$kern(0x0, 0x0, &(0x7f0000000200)="879b73d66352cddd203f28392d7fcd", 0x0, 0x0, 0x0) ioctl$WSMOUSEIO_SETPARAMS(r0, 0x80105728, &(0x7f00000003c0)={&(0x7f0000000380)}) sysctl$hw(&(0x7f0000000080)={0x6, 0x11}, 0x2, 0x0, 0x0, &(0x7f0000000340), 0x0) 397.916991ms ago: executing program 6 (id=1287): setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x186) r1 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) r2 = socket$inet(0x2, 0x3, 0x2) r3 = kqueue() r4 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) ioctl$VMM_IOC_RESETCPU(r4, 0x82405605, &(0x7f0000000400)={0x3, 0x7f, {[0x2, 0xa7c, 0x7ff, 0x2, 0x80000000, 0x2d1, 0x40, 0x7, 0x7fffffff, 0x6, 0x4, 0x8, 0x9, 0xa, 0x3, 0x8001, 0x4], [0x5, 0x1, 0xe, 0x3, 0x0, 0x7, 0x2, 0x6, 0x80000000, 0xff], [0xe4d9, 0x1, 0x86, 0x1, 0x7, 0x1, 0x8], [0x7fffffffffffffff, 0x0, 0x8, 0x5d, 0x7fffffffffffffff, 0x80000000], [{0x2, 0x0, 0x7f, 0x5}, {0x401, 0x0, 0x0, 0x9}, {0x43, 0x5, 0x5, 0x8}, {0x8, 0x2, 0x8001, 0x3800000000000000}, {0xd3, 0x6, 0x2, 0x6}, {0xdfe0, 0x4, 0x0, 0x6}, {0x1000, 0x3, 0x4010, 0x1}, {0x7, 0x101, 0x10001, 0x1}], {0x5e, 0x4, 0x1000, 0x9}, {0x5b9f, 0x9, 0x8, 0x1}}}) kevent(r3, &(0x7f00000003c0)=[{{}, 0xfffffffffffffff6, 0x3, 0x1, 0xfd, 0x6}], 0x1, 0x0, 0x9b67, 0x0) syz_open_pts() syz_open_pts() kevent(r3, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000140)={0x10000080000000, 0xb7}) kevent(r3, &(0x7f0000000040), 0xe4a, 0x0, 0xa9fa, 0x0) setsockopt$inet_opts(r2, 0x0, 0x64, &(0x7f0000000180)="01000000", 0x4) writev(r0, &(0x7f0000000080)=[{&(0x7f00000001c0)="fc4e02abdf991c8b13c4d0a37ef0a9277ff788400de8180d6587fd5688b174084ce0b1cc40ccc7252733581b4f294fe8cff2dc03b63569b32d889f7a8a3c779bb3786c4ecb01325473f0db46611f1003b5215de66400de7ca8259057656c5930338d5c5f46741fed70eb810974f8267a558987d6898fd42c721bd7204d6950620f", 0x81}], 0x1) ioctl$FIONREAD(r2, 0xc0287533, &(0x7f0000000440)) setsockopt$inet_opts(r1, 0x0, 0x0, &(0x7f0000000280)="46b18ab4f6109cfce3422d3afdd66c193ae51d232a9a8f6f78df553741eb4fea1d401b9d3040ba9c739fbff9619f3822388980f5c422cf133432df4cf9d1e2cea991dba062cc7521773eefdd829ef9803564f00e16e2888593f21ca37af7c53c4e085fc1567815112f267e5bffa5ccf5eb989b17533bf60e0d85805d024d1991fc153f2ca99e7f788f8362f462b975621b07e050bfe62755abfbb0c9113fb1b50250", 0xa2) syz_emit_ethernet(0x1000e, &(0x7f0000000000)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "15f2ff", 0xffc2, 0x0, 0x0, @rand_addr="eee21f0000003c00000500004c58053b", @local={0xfe, 0x80, '\x00', 0x0}}}}}) write(r1, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x2012, r0, 0x0) fcntl$setstatus(r0, 0x4, 0x40) r5 = socket(0x800000018, 0x1, 0x0) getsockname$unix(r5, 0x0, &(0x7f0000000100)) shutdown(r5, 0x2) sysctl$net_inet_tcp(&(0x7f0000000040)={0x4, 0x2, 0x6, 0x19}, 0x4, 0x0, 0x0, &(0x7f00000001c0), 0x0) close(r5) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="35b083b170e0aaaaaaaaaabb86dd6e46a8c00000110600000000000000000000000000010000000000000032"]) 200.126009ms ago: executing program 7 (id=1288): setreuid(0x0, 0xee01) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(0xffffffffffffff9c, 0xc01064c2, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000080)={'tap', 0x0}) r1 = socket(0x2, 0x2, 0x0) ioctl$FIONREAD(r1, 0x80206918, &(0x7f00000001c0)) ioctl$TIOCSETAF(0xffffffffffffffff, 0x802c7416, 0x0) openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) r2 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000100), 0x10000, 0x0) socket(0x2, 0x2, 0x0) select(0x1b, &(0x7f00000001c0)={0xffffffffffffffff, 0x90, 0xdc0, 0x564, 0x9cea, 0x0, 0x7fffffffff, 0xfffffffffffffffd}, 0x0, 0x0, 0x0) close(r2) mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x4) sysctl$kern(&(0x7f0000000040)={0x1, 0x51}, 0x2, 0x0, 0x0, &(0x7f0000001440)='\x00\x00\x00\x00', 0x4) 199.814899ms ago: executing program 3 (id=1289): setuid(0xffffffffffffffff) geteuid() (async) r0 = geteuid() r1 = getegid() shmctl$IPC_SET(0x0, 0x1, &(0x7f00000002c0)={{0x4f, 0x0, 0x0, r0, r1, 0x48, 0xfff}, 0x10000, 0x7fff, 0x0, 0x0, 0x4, 0xc8, 0x7b5}) (async) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000002c0)={{0x4f, 0x0, 0x0, r0, r1, 0x48, 0xfff}, 0x10000, 0x7fff, 0x0, 0x0, 0x4, 0xc8, 0x7b5}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f0000000080), 0x1c, 0x0}, 0x0) (async) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f0000000080), 0x1c, 0x0}, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) (async) bind$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0x0, [{&(0x7f0000753000/0x3000)=nil, &(0x7f00007f5000/0x3000)=nil, 0x7}, {&(0x7f000043e000/0x1000)=nil, &(0x7f0000624000/0x1000)=nil, 0x7}, {&(0x7f0000fff000/0x1000)=nil, &(0x7f0000095000/0x4000)=nil, 0x20000001}, {&(0x7f0000ffd000/0x2000)=nil, &(0x7f000052f000/0x4000)=nil, 0xfffffffffffffffe}, {&(0x7f000068b000/0x2000)=nil, &(0x7f00003a4000/0x1000)=nil, 0x2000000000009}, {&(0x7f00003b7000/0x1000)=nil, &(0x7f00002c6000/0x4000)=nil}, {&(0x7f00002a8000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x3}, {&(0x7f0000787000/0x3000)=nil, &(0x7f00005b6000/0x3000)=nil, 0x8}, {&(0x7f00000b6000/0x3000)=nil, &(0x7f0000243000/0x4000)=nil, 0x1}, {&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000261000/0x3000)=nil, 0x50}, {&(0x7f0000062000/0x4000)=nil, &(0x7f0000160000/0x4000)=nil, 0x1ff}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000044000/0x4000)=nil, 0x6}, {&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000042000/0x3000)=nil, 0xfffffffffffbfffb}, {&(0x7f0000334000/0x1000)=nil, &(0x7f0000246000/0x2000)=nil, 0x6}, {&(0x7f00003e3000/0x1000)=nil, &(0x7f000059c000/0x3000)=nil, 0x1000039fa}, {&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000524000/0x3000)=nil, 0x500ffffffb}], './bus\x00', 0x81}) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x10000000000001}}) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket(0x18, 0x1, 0x0) close(r2) (async) close(r2) socket(0x18, 0x2, 0x0) (async) r3 = socket(0x18, 0x2, 0x0) setsockopt(r3, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) connect$unix(r2, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) sendmsg$unix(r2, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0) r4 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) ioctl$VMM_IOC_RESETCPU(r4, 0x82405605, &(0x7f0000000040)={0x9, 0x0, {[0x45a, 0xe, 0x8, 0x8, 0x0, 0x5, 0x8, 0xc, 0xfffffffffffffff9, 0x3, 0x8, 0x80, 0x5, 0xb18, 0x7, 0x7, 0x4cf, 0x81], [0x8000000000000001, 0x3, 0x9, 0x7f, 0xffffffffffffcd1b, 0x8, 0x2, 0xfffffffffffffffe, 0x7, 0xffff], [0xe13, 0x7, 0x9, 0x5, 0x4, 0x1, 0x3], [0x401, 0x6, 0x6, 0xffff, 0xffffffffffffffff, 0xe], [{0xe850, 0xfff, 0x1, 0xff}, {0xcb4, 0x5f0a, 0x0, 0x3}, {0x3, 0x1, 0x3, 0xb9d}, {0x1, 0x5, 0x2, 0x4}, {0x7, 0xff000, 0x3, 0x4}, {0x6, 0x7, 0xd88, 0x2}, {0x1, 0x8, 0x7, 0x7}, {0x71a, 0x2, 0x7adc9b32, 0x6}], {0x8, 0x101, 0x5, 0x6}, {0x7fff, 0x7, 0x0, 0x9}}}) r5 = socket$inet(0x2, 0x3, 0xfc) ioctl$FIONREAD(r5, 0x80206979, &(0x7f0000000000)) 199.351119ms ago: executing program 0 (id=1290): close(0xffffffffffffffff) writev(0xffffffffffffffff, &(0x7f0000000140)=[{0x0}], 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f00000000c0)=0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f00000003c0)=0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) setregid(0x0, r1) getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0xc) r3 = semget(0x0, 0x1, 0x281) ioctl$WSMUXIO_REMOVE_DEVICE(0xffffffffffffffff, 0x80085762, &(0x7f0000000240)={0x3, 0x5}) sysctl$net_inet_tcp(0x0, 0x0, &(0x7f0000000200)="0d00256217fad9c4", 0x0, 0x0, 0x5) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x4000000000000003}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r4 = socket(0x6, 0x4000, 0x9) close(r4) r5 = socket(0x18, 0x1, 0x0) setsockopt(r4, 0x28, 0x3f, &(0x7f0000000180)="00fb534f4c59bae2e69c9a61bbcee615a16accae3f7e43eff8bcca91333ff3fb6384687fa65e358b830fb93078b250f588c59113728359be5c9877d1c1596a7056b4b62d5a4338a18ac55a00"/89, 0x59) setsockopt(r5, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) connect$unix(r4, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) write(r4, 0x0, 0x0) r6 = getgid() getgroups(0x1, &(0x7f0000000600)=[r6]) getgroups(0x7, &(0x7f0000000340)=[0x0, 0x0, 0xffffffffffffffff, 0x0, r7, 0xffffffffffffffff, 0xffffffffffffffff]) semctl$IPC_SET(r3, 0x0, 0x1, &(0x7f0000001300)={{0x902c, 0x0, r6, 0x0, r8, 0x90, 0xfffd}, 0x240, 0x2000099, 0x8000}) sysctl$hw(&(0x7f0000000380)={0x6, 0x15}, 0x2, &(0x7f0000000400)="07918539f05ee636ef4ddd6da418eac403389e5023d2708e637930382b", &(0x7f0000000440)=0x1d, &(0x7f0000000480)="bab043f4a6dc07243e4c114497e64f5b5788cd7da20b1bd4a4bf00dc6e887f99b0a50abedc3f18d6900b6d42e1f33564bd08889287766cd244bde2762a8312e8157e1e0804adab75f2bdbcc7f4bbc512c73587892aa8b1c5fcab1a10f2d7e5f50b11672a3aba09b80391811979a1b7f6b68681f44edcac2f2281d08d69943bbb3d7dd3ac0cfa76846f0330a9c2f04c1a06fc39e5d688deab0cd12a744485bc0f14d14f44139bb4cc961e24e94b381899c66dc4c8a28206bfa7ebc0851543833fc5467adee25cbafdd55d9ef3", 0xcc) r9 = getgid() getgroups(0x4, &(0x7f00000002c0)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0]) r11 = getgid() setgroups(0x7, &(0x7f0000000300)=[r0, r1, r2, r6, r9, r10, r11]) socket(0x6, 0x3, 0xad) 199.105644ms ago: executing program 3 (id=1291): ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0xfffffff9, 0xffff63db, 0x9, 0x8, 0x8, 0x8007c, 0x80000000, 0x10, [{0x8, 0x10000, 0xfbfff115, 0x80000002}, {0x0, 0xffffffff, 0x200100, 0xffd}, {0xcd5, 0x4baa, 0x0, 0x9}, {0x8, 0x8020fe, 0x7, 0x2000100}, {0x6, 0x2000007, 0x5, 0x5}, {0x3993, 0xfffd, 0x8, 0x40000009}, {0x10004, 0xa00, 0x3, 0xfffffffb}, {0x206, 0xffffffff, 0x228000, 0xffffe2e9}, {0x9, 0x7fffffff, 0x5, 0x1}, {0x3, 0x1, 0x7, 0xfffffd76}, {0x86, 0x0, 0x80, 0x2000a}, {0x10001, 0xffffffcc, 0x4, 0xa6a}, {0x401, 0x0, 0x400009, 0x4}, {0x3, 0x22, 0x2, 0x6f5fc48f}, {0x4, 0xff, 0x3, 0x9}, {0x9be2, 0x5, 0xfffffffe, 0xb}]}) sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b10005010000009f0500070107000000211c13fecea70500fef96ecfc72fd3007ae30200fdef3044d2d236acf20bf404be01000000f7c8cf5f8823297be1aa0504000051e2f0ad3ebbc257699a1f139b672f335c22db830c032bfa896443c32118210000720fd38bfb0000fd54c125191b1257aea8c500001602", 0x7a, 0x404, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x11, 0x3, 0x0) sendto$unix(r0, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb61b98df192f9781ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x40c, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BIOCSETWF(r1, 0x80104277, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x4, 0x0, 0x0, 0x4b}, {0x3, 0x5, 0xfe}]}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x33}, 0x2, &(0x7f0000000140)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7a3589581241c2fec37082", &(0x7f0000000080)=0x22, 0x0, 0x0) 21.305401ms ago: executing program 0 (id=1292): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x10000, 0x0) ioctl$FIONREAD(r1, 0x4004667f, &(0x7f0000000240)) ioctl$VMM_IOC_CREATE(r2, 0xc5005601, &(0x7f0000000000)={0x10, 0x0, [{&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000068000/0x4000)=nil}, {&(0x7f0000d80000/0x2000)=nil, &(0x7f00006ad000/0x1000)=nil, 0xffffffffffffffff}, {&(0x7f0000bb8000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0xc}, {0x0, &(0x7f0000a80000/0x3000)=nil, 0x10000}, {0x0, &(0x7f0000826000/0x4000)=nil, 0xffffffffffffffff}, {&(0x7f0000000000/0x2000)=nil, &(0x7f0000000000/0x3000)=nil, 0xffffffffffffffff}, {0x0, 0x0, 0xe}, {&(0x7f00001c9000/0xb000)=nil, &(0x7f0000b72000/0x4000)=nil, 0x1}, {&(0x7f00001d0000/0x2000)=nil, &(0x7f00001d2000/0x1000)=nil}, {&(0x7f0000c49000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil}, {0x0, &(0x7f0000156000/0x1000)=nil, 0x1ff}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000b99000/0x3000)=nil, 0xffffffffffffffff}, {&(0x7f0000eef000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x400000000001}, {&(0x7f00004c1000/0x2000)=nil, &(0x7f00001d3000/0x2000)=nil}, {&(0x7f000006a000/0x2000)=nil, 0x0, 0x3}, {&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil}], './file0/../file0/file0\x00'}) write(r0, 0x0, 0x0) setitimer(0x3, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000040)={0x0, 0xff}, 0x10, 0x42, 0x0) 13.78949ms ago: executing program 3 (id=1293): mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x40, 0xa9) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(r0, 0xc01064c1, &(0x7f0000000080)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(r0, 0xc01064c2, &(0x7f00000003c0)={r1, 0x0, r0}) ioctl$WSMOUSEIO_SCALIBCOORDS(r0, 0x81205724, &(0x7f0000000100)={0x1, 0x9e, 0x2000007, 0xb, 0x4, 0x8000, 0xb8e, 0x10, [{0x1, 0xb7, 0x3, 0x7}, {0x101, 0x8, 0x4, 0x8000}, {0x1000, 0x4, 0xffffff79, 0x9}, {0x73f0, 0x6, 0x100, 0x2}, {0x42, 0x8, 0x80002800, 0xb}, {0x1ff, 0x6, 0xe, 0x95}, {0x4, 0xdf41, 0x200004f6, 0x3}, {0x6, 0x4, 0x80000016, 0xb}, {0x9, 0x1000084, 0xb, 0x3}, {0x4, 0x7, 0x9b, 0x1ff}, {0x1e3, 0xffff, 0x42, 0x7}, {0xc, 0x29, 0x7f, 0x2d0c}, {0x1000000, 0x100401, 0x80000003}, {0x29a71797, 0x4, 0x0, 0x579}, {0x1, 0xf8f, 0x4000006, 0xfffffffb}, {0xfffffffd, 0x800bd3d, 0x6, 0x30001}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) r2 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$WSMUXIO_ADD_DEVICE(r2, 0x80085761, &(0x7f0000000040)={0x3, 0x1c}) ioctl$VMM_IOC_WRITEREGS(0xffffffffffffffff, 0xc0205609, &(0x7f0000000140)={0x5, 0x0, 0x3, {[0x6, 0xffffffffffffff01, 0x7, 0x1000000000000c1, 0x3, 0x2e9, 0x0, 0x6, 0x8, 0x8, 0x8, 0xc, 0x22bd, 0x6, 0x4, 0x7, 0x6c3, 0x8000000000000000], [0x9, 0x4, 0x7ff, 0x101, 0x9, 0x34, 0x2, 0x100000000, 0xfff, 0x5], [0x6, 0xa, 0xbc1, 0x9a, 0x2, 0x1af2, 0x1], [0x0, 0xffffffffffffff80, 0x8001, 0x3, 0x280000000000, 0xffffffffffffff63], [{0x5, 0x4, 0x3ff, 0x49032a79}, {0x9, 0x5, 0x4, 0x1}, {0x6, 0xe000, 0x800}, {0x401, 0x9, 0x40, 0x9}, {0x0, 0xfc8, 0x2, 0xf0}, {0x0, 0x400004, 0x401, 0x4}, {0x1, 0xb, 0xfffffffa, 0x3}, {0x0, 0x1ff, 0x8, 0x7}], {0xfff7, 0xa0, 0x75, 0x100000000}, {0x1d49, 0x6, 0x8, 0x5}}}) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x88, 0x7}, 0xd76, 0xfffffffffffffffd, 0x0, 0x0, 0x3, 0x1}) sysctl$kern(&(0x7f0000000040)={0x1, 0x3d}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) sysctl$vm_swapencrypt(&(0x7f0000000040), 0x3, 0x0, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x2, 0x1, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) ioctl$FIONREAD(r3, 0x8040691a, &(0x7f00000001c0)) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) (async) open(&(0x7f00000000c0)='./file0\x00', 0x40, 0xa9) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(r0, 0xc01064c1, &(0x7f0000000080)={0x0, 0x0, r0}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(r0, 0xc01064c2, &(0x7f00000003c0)={r1, 0x0, r0}) (async) ioctl$WSMOUSEIO_SCALIBCOORDS(r0, 0x81205724, &(0x7f0000000100)={0x1, 0x9e, 0x2000007, 0xb, 0x4, 0x8000, 0xb8e, 0x10, [{0x1, 0xb7, 0x3, 0x7}, {0x101, 0x8, 0x4, 0x8000}, {0x1000, 0x4, 0xffffff79, 0x9}, {0x73f0, 0x6, 0x100, 0x2}, {0x42, 0x8, 0x80002800, 0xb}, {0x1ff, 0x6, 0xe, 0x95}, {0x4, 0xdf41, 0x200004f6, 0x3}, {0x6, 0x4, 0x80000016, 0xb}, {0x9, 0x1000084, 0xb, 0x3}, {0x4, 0x7, 0x9b, 0x1ff}, {0x1e3, 0xffff, 0x42, 0x7}, {0xc, 0x29, 0x7f, 0x2d0c}, {0x1000000, 0x100401, 0x80000003}, {0x29a71797, 0x4, 0x0, 0x579}, {0x1, 0xf8f, 0x4000006, 0xfffffffb}, {0xfffffffd, 0x800bd3d, 0x6, 0x30001}]}) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) (async) ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0}) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (async) openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) (async) ioctl$WSMUXIO_ADD_DEVICE(r2, 0x80085761, &(0x7f0000000040)={0x3, 0x1c}) (async) ioctl$VMM_IOC_WRITEREGS(0xffffffffffffffff, 0xc0205609, &(0x7f0000000140)={0x5, 0x0, 0x3, {[0x6, 0xffffffffffffff01, 0x7, 0x1000000000000c1, 0x3, 0x2e9, 0x0, 0x6, 0x8, 0x8, 0x8, 0xc, 0x22bd, 0x6, 0x4, 0x7, 0x6c3, 0x8000000000000000], [0x9, 0x4, 0x7ff, 0x101, 0x9, 0x34, 0x2, 0x100000000, 0xfff, 0x5], [0x6, 0xa, 0xbc1, 0x9a, 0x2, 0x1af2, 0x1], [0x0, 0xffffffffffffff80, 0x8001, 0x3, 0x280000000000, 0xffffffffffffff63], [{0x5, 0x4, 0x3ff, 0x49032a79}, {0x9, 0x5, 0x4, 0x1}, {0x6, 0xe000, 0x800}, {0x401, 0x9, 0x40, 0x9}, {0x0, 0xfc8, 0x2, 0xf0}, {0x0, 0x400004, 0x401, 0x4}, {0x1, 0xb, 0xfffffffa, 0x3}, {0x0, 0x1ff, 0x8, 0x7}], {0xfff7, 0xa0, 0x75, 0x100000000}, {0x1d49, 0x6, 0x8, 0x5}}}) (async) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x88, 0x7}, 0xd76, 0xfffffffffffffffd, 0x0, 0x0, 0x3, 0x1}) (async) sysctl$kern(&(0x7f0000000040)={0x1, 0x3d}, 0x2, 0x0, 0x0, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) (async) sysctl$vm_swapencrypt(&(0x7f0000000040), 0x3, 0x0, 0x0, 0x0, 0x0) (async) readv(0xffffffffffffffff, 0x0, 0x0) (async) socket(0x2, 0x1, 0x0) (async) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) (async) ioctl$FIONREAD(r3, 0x8040691a, &(0x7f00000001c0)) (async) 11.726328ms ago: executing program 0 (id=1294): r0 = socket$inet(0x2, 0x3, 0xb) recvmsg(r0, &(0x7f0000000540)={&(0x7f0000000300)=@in6, 0xc, &(0x7f00000004c0)=[{&(0x7f0000000340)=""/157, 0x9d}, {&(0x7f0000000400)=""/142, 0x8e}], 0x2, &(0x7f0000000500)=""/41, 0x29}, 0x842) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffff990000083a2900000000000000000000000000000000aa8100907800040004"]) syz_extract_tcp_res(&(0x7f0000000200), 0x400, 0x800) r1 = open(&(0x7f0000000080)='./file0\x00', 0x10, 0x2a) sendto$inet(r1, &(0x7f0000000240)="219d88314475aac860d81feb06a390ad0a89b6b2a2ac7be02bf96db549ac70", 0x1f, 0x409, &(0x7f00000002c0)={0x2, 0x3}, 0xc) unveil(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='c\x00') sendmsg$unix(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f00000000c0), 0x1c, 0x0}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket(0x18, 0x1, 0x0) close(r2) socket(0x24, 0x2, 0x0) sendmsg$unix(r2, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x402) syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0xa32) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) ioctl$VNDIOCSET(r1, 0xc0284408, &(0x7f00000001c0)={0x0, 0x0, 0x0}) select(0x40, &(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x0, 0x0) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r3 = socket(0x2, 0x3, 0x3) r4 = socket$inet(0x2, 0x8003, 0x0) setsockopt$sock_int(r4, 0xffff, 0x800, &(0x7f0000000000)=0x9, 0x4) connect$unix(r3, &(0x7f0000000000), 0x10) sendto$inet(r3, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$WSMOUSEIO_SCALIBCOORDS(r1, 0x81205724, &(0x7f0000000040)={0x3, 0x8, 0x74, 0x3, 0x7, 0xe4a8, 0x1, 0x10, [{0xff, 0x5, 0xfff, 0xd}, {0x1, 0xfffffcd5, 0x0, 0x4}, {0x1, 0x2, 0x4e, 0x3}, {0xe05b, 0xc2, 0x6, 0x1}, {0x5, 0x9, 0x1, 0x80}, {0x8, 0x3, 0x2, 0x3}, {0x4, 0xfffffffa, 0x3, 0x80}, {0x6, 0x0, 0x0, 0xffffffff}, {0x2, 0x9, 0x4, 0x1b74}, {0x3, 0x0, 0x3, 0x18}, {0x5, 0x8, 0x2, 0x95}, {0xb, 0x0, 0x24, 0xa55d}, {0x80000000, 0x1, 0xa61, 0x8000}, {0x401, 0x1, 0x283, 0xffffffff}, {0xffff, 0x40, 0x9, 0xae90}, {0x9, 0x0, 0x2, 0x1}]}) 0s ago: executing program 7 (id=1295): setrlimit(0x1, &(0x7f0000000000)={0xffffeffffffffffd, 0xfffffffffffdffff}) r0 = open(&(0x7f0000000040)='./file1\x00', 0x18289, 0x110) r1 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) pwrite(r1, &(0x7f0000000100)="4d5303b6", 0x4, 0xe3bb) unveil(0x0, 0x0) r2 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r3 = fcntl$dupfd(r2, 0x2, 0xffffffffffffffff) close(r3) setsockopt$sock_int(r3, 0xffff, 0x1023, 0x0, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, 0x0) socket(0x1, 0x1, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x1000}, 0x400, 0x9, 0x0, 0x0, 0x200000001, 0x1, 0x6, 0x7}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xff0a, 0x0, 0x37) write(r0, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) r4 = socket$inet(0x2, 0x2, 0x0) sendmsg(r4, &(0x7f0000000680)={&(0x7f00000001c0)=@in6={0x18, 0x2, 0xffffff82, 0xf9f}, 0xc, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="14"], 0x18}, 0x40e) mkdir(&(0x7f0000000180)='./file0\x00', 0x14) r5 = openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) dup2(r5, r5) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$TIOCSETA(r5, 0xc0284457, &(0x7f0000000040)={0x0, 0x1, 0x3, 0x7, "0824000000000000000100000000000000000005", 0x4917, 0x6}) chmod(&(0x7f00000000c0)='./file1\x00', 0x8) r6 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0) ioctl$DIOCMAP(r6, 0xc0106477, &(0x7f00000000c0)={&(0x7f0000000140)='./file0\x00', r6}) close(r6) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.79' (ED25519) to the list of known hosts. in6_pcbnotify: Huh? Thought we never got called with mapped! pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pppx: unable to set addresses for pppx1, error=17 pckbd_enable: command error malloc(): allocation too large, type = 127, size = 6535087492 pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error denied attempt to set clock back 131082 seconds denied attempt to set clock back 131082 seconds pckbd_enable: command error pckbd_enable: command error OpenBSD/amd64 (ci-openbsd-multicore-2.us-central1-b.c.syzkaller.internal) (tty00) login: pckbd_enable: command error vm_resetcpu: failed pppx: unable to set addresses for pppx1, error=17 pppx: unable to set addresses for pppx1, error=17 uvm_fault(0xfffffd8072581408, 0x0, 0, 1) -> e kernel: page fault trap, code=0 Stopped at dt_ioctl_record_stop+0x108: movq 0(%r14),%r14 TID PID UID PRFLAGS PFLAGS CPU COMMAND 233770 16710 0 0 0 0 syz-executor dt_ioctl_record_stop(ffff800001685000) at dt_ioctl_record_stop+0x108 dtclose(11e5f,41,2000,ffff80003c3c8020) at dtclose+0x109 spec_close(ffff80003c3f3850) at spec_close+0x466 VOP_CLOSE(fffffd805f0d3c30,41,fffffd80097fd000,ffff80003c3c8020) at VOP_CLOSE+0x132 vn_closefile(fffffd806c8fc7b8,ffff80003c3c8020) at vn_closefile+0x12b fdrop(fffffd806c8fc7b8,ffff80003c3c8020) at fdrop+0x121 closef(fffffd806c8fc7b8,ffff80003c3c8020) at closef+0x192 fdfree(ffff80003c3c8020) at fdfree+0x116 exit1(ffff80003c3c8020,0,0,1) at exit1+0x576 sys_exit(ffff80003c3c8020,ffff80003c3f3bc0,ffff80003c3f3b10) at sys_exit+0x1a syscall(ffff80003c3f3bc0) at syscall+0xb17 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7d154dc166d0, count: 3 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{1}> ddb{1}> set $lines = 0 ddb{1}> set $maxwidth = 0 ddb{1}> show panic *cpu1: uvm_fault(0xfffffd8072581408, 0x0, 0, 1) -> e ddb{1}> trace dt_ioctl_record_stop(ffff800001685000) at dt_ioctl_record_stop+0x108 dtclose(11e5f,41,2000,ffff80003c3c8020) at dtclose+0x109 spec_close(ffff80003c3f3850) at spec_close+0x466 VOP_CLOSE(fffffd805f0d3c30,41,fffffd80097fd000,ffff80003c3c8020) at VOP_CLOSE+0x132 vn_closefile(fffffd806c8fc7b8,ffff80003c3c8020) at vn_closefile+0x12b fdrop(fffffd806c8fc7b8,ffff80003c3c8020) at fdrop+0x121 closef(fffffd806c8fc7b8,ffff80003c3c8020) at closef+0x192 fdfree(ffff80003c3c8020) at fdfree+0x116 exit1(ffff80003c3c8020,0,0,1) at exit1+0x576 sys_exit(ffff80003c3c8020,ffff80003c3f3bc0,ffff80003c3f3b10) at sys_exit+0x1a syscall(ffff80003c3f3bc0) at syscall+0xb17 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7d154dc166d0, count: -12 ddb{1}> show registers rdi 0 rsi 0 rbp 0xffff80003c3f3780 rbx 0x1 rdx 0 rcx 0xffff80003c3c8020 rax 0xffffffff8394b6a8 dt_prov_syscall r8 0 r9 0x1 r10 0 r11 0x6cceb23bedc00a5f r12 0 r13 0 r14 0 r15 0xffff800001617300 rip 0xffffffff82fbcfc8 dt_ioctl_record_stop+0x108 cs 0x8 rflags 0x10207 __ALIGN_SIZE+0xf207 rsp 0xffff80003c3f3750 ss 0 dt_ioctl_record_stop+0x108: movq 0(%r14),%r14 ddb{1}> show proc PROC (syz-executor) tid=132045 pid=72820 tcnt=0 stat=onproc flags process=1008 proc=2000 runpri=32, usrpri=86, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0xffff80003c3c8020 scnt=-1 ecnt=1 forw=0xffffffffffffffff, list=0xffff80003c3c9ca8,0xffff80003c3c9a20 process=0xffff80003c481368 user=0xffff80003c3ee000, vmspace=0xfffffd8072581408 estcpu=36, cpticks=1, pctcpu=0.0, user=0, sys=0, intr=0 ddb{1}> ps PID TID PPID UID S FLAGS WAIT COMMAND 16710 233770 61786 0 7 0 syz-executor 16710 336930 61786 0 3 0x4000080 sbwait syz-executor 16710 317569 61786 0 2 0x4000000 syz-executor 25826 489525 15668 0 2 0x1 syz-executor 25826 41602 15668 0 3 0x4000080 fsleep syz-executor 25826 331825 15668 0 3 0x4000080 fsleep syz-executor 36624 364678 9562 0 2 0 syz-executor 36624 15826 9562 0 2 0x4000000 syz-executor 84657 232954 64672 0 2 0 syz-executor 84657 404348 64672 0 3 0x4000080 sbwait syz-executor 84657 84565 64672 0 2 0x4000001 syz-executor 84657 221904 64672 0 3 0x4000080 fsleep syz-executor 56235 259742 19363 0 2 0x1 syz-executor 56235 365584 19363 0 3 0x4000080 fsleep syz-executor 56235 250408 19363 0 3 0x4000080 kqread syz-executor 56235 427485 19363 0 3 0x4000080 fsleep syz-executor 19363 346087 47908 0 3 0x82 nanoslp syz-executor 97036 407965 47908 0 3 0x82 nanoslp syz-executor 28298 182207 1 0 3 0x100083 ttyopn getty 37442 218083 0 0 3 0x14280 nfsidl nfsio 91159 496439 0 0 3 0x14280 nfsidl nfsio 11746 297413 0 0 3 0x14280 nfsidl nfsio 81651 84377 0 0 3 0x14280 nfsidl nfsio 17034 192603 0 0 3 0x14280 nfsidl nfsio 43280 68657 0 0 3 0x14280 nfsidl nfsio 67874 483966 0 0 3 0x14280 nfsidl nfsio 17735 154284 0 0 3 0x14280 nfsidl nfsio 53603 318455 0 0 3 0x14280 nfsidl nfsio 9600 318975 0 0 3 0x14280 nfsidl nfsio 98957 397210 0 0 3 0x14280 nfsidl nfsio 77038 436346 0 0 3 0x14280 nfsidl nfsio 81620 401259 0 0 3 0x14280 nfsidl nfsio 26931 61022 0 0 3 0x14280 nfsidl nfsio 23049 261075 0 0 3 0x14280 nfsidl nfsio 15049 161204 0 0 3 0x14280 nfsidl nfsio 22555 407585 0 0 3 0x14280 nfsidl nfsio 53634 21196 0 0 3 0x14280 nfsidl nfsio 49320 153615 0 0 3 0x14280 nfsidl nfsio 6828 197215 0 0 3 0x14280 nfsidl nfsio 9562 270432 47908 0 3 0x82 nanoslp syz-executor 69061 298871 47908 0 3 0x82 wait syz-executor 51313 83604 47908 0 3 0x82 nanoslp syz-executor 15668 323888 47908 0 3 0x82 nanoslp syz-executor 61786 27183 47908 0 2 0xc82 syz-executor 64672 252979 47908 0 3 0x82 nanoslp syz-executor 47908 207017 88701 0 3 0x82 kqread syz-executor 88701 116369 29483 0 3 0x10008a sigsusp ksh 29483 188442 47804 0 3 0x98 kqread sshd-session 47804 432862 11073 0 3 0x92 kqread sshd-session 11073 517309 1 0 3 0x88 kqread sshd 39411 28062 59200 74 3 0x1100092 bpf pflogd 59200 5278 1 0 3 0x80 sbwait pflogd 47255 480716 49334 73 3 0x1100090 kqread syslogd 49334 172460 1 0 3 0x100082 sbwait syslogd 20259 317958 1 0 3 0x100080 kqread resolvd 48963 487991 92883 77 3 0x100092 kqread dhcpleased 6077 172179 92883 77 3 0x100092 kqread dhcpleased 92883 306230 1 0 3 0x80 kqread dhcpleased 7086 368364 0 0 3 0x14200 bored smr 40775 480246 0 0 2 0x14200 zerothread 49382 56394 0 0 3 0x14200 aiodoned aiodoned 87465 342918 0 0 3 0x14200 syncer update 50603 346722 0 0 3 0x14200 cleaner cleaner 50159 63596 0 0 2 0x14200 reaper 91140 424030 0 0 3 0x14200 pgdaemon pagedaemon 37427 345891 0 0 3 0x14200 bored viomb 8511 200337 0 0 3 0x40014200 acpi0 acpi0 987 202328 0 0 3 0x40014200 idle1 99513 2634 0 0 3 0x14200 bored softnet1 22732 506953 0 0 3 0x14200 bored softnet0 40872 251324 0 0 3 0x14200 bored systqmp 20794 5882 0 0 3 0x14200 bored systq 72442 3928 0 0 3 0x14200 tmoslp softclockmp 31650 443698 0 0 3 0x40014200 tmoslp softclock 27176 268961 0 0 3 0x40014200 idle0 1 69810 0 0 3 0x80082 wait init 0 0 -1 0 3 0x10010200 scheduler swapper ddb{1}> show all locks Process 36624 (syz-executor) thread 0xffff80003c47eaa0 (15826) exclusive rrwlock inode r = 0 (0xfffffd8072888468) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 rrw_enter+0xc6 #3 VOP_LOCK+0xbd #4 vn_lock+0xa4 #5 vn_write+0x18f #6 dofilewritev+0x2bd #7 sys_write+0xa2 #8 syscall+0xbd4 #9 Xsyscall+0x128 ddb{1}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 11112 12135K 12452K 166960K 13660 0 pcb 18 15K 16K 166960K 367 0 rtable 248 12K 12K 166960K 731 0 pf 39 18K 83K 166960K 209 0 ifaddr 42 8K 8K 166960K 138 0 ifgroup 58 2K 3K 166960K 267 0 sysctl 4 1K 9K 166960K 23 0 counters 70 37K 38K 166960K 332 0 ioctlops 0 0K 4K 166960K 1944 0 iov 0 0K 16K 166960K 79 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1441 91K 91K 166960K 2901 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 5K 166960K 17 0 VM map 2 1K 1K 166960K 2 0 sem 12 0K 1K 166960K 52 0 dirhash 12 2K 3K 166960K 54 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 18 65K 240K 166960K 1473 0 sigio 0 0K 0K 166960K 28 0 proc 73 131K 180K 166960K 764 0 subproc 72 4K 6K 166960K 124 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 144 0 in_multi 90 6K 7K 166960K 181 0 ether_multi 1 0K 0K 166960K 14 0 mrt 2 0K 0K 166960K 30 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 265 1182K 1182K 166960K 265 0 exec 0 0K 1K 166960K 620 0 fusefs mount 1 32K 32K 166960K 1 0 pfkey data 0 0K 0K 166960K 2 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 269 164K 193K 166960K 15774 0 UVM aobj 36 12K 12K 166960K 39 0 pinsyscall 43 86K 102K 166960K 2703 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 1K 166960K 106 0 NDP 12 0K 2K 166960K 94 0 temp 80 9088K 9213K 166960K 78439 0 kqueue 15 22K 30K 166960K 291 0 SYN cache 2 16K 16K 166960K 2 0 ddb{1}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 26 0 0 1 0 1 1 0 8 0 rtpcb 120 155 0 152 2 1 1 2 0 8 0 rtentry 176 185 0 86 6 0 6 6 0 8 0 unpcb 144 863 0 843 8 4 4 4 0 8 3 syncache 336 10 0 10 3 3 0 1 0 8 0 tcpqe 32 5 0 5 2 2 0 1 0 8 0 tcpcb 736 483 0 472 12 6 6 7 0 8 4 arp 136 29 0 12 1 0 1 1 0 8 0 inpcb 328 1810 0 1791 20 12 8 12 0 8 6 nd6 152 35 0 11 2 0 2 2 0 8 0 pkpcb 40 8 0 8 5 4 1 1 0 8 1 kcovpl 48 10 0 2 1 0 1 1 0 8 0 mppekey 1024 1 0 1 1 1 0 1 0 8 0 ppxss 1192 101 0 101 4 3 1 1 0 8 1 pppxif 1576 13 0 13 4 3 1 1 0 8 1 pfstscr 40 2 0 0 1 0 1 1 0 8 0 pffrag 232 12 0 1 1 0 1 1 0 482 0 pffrnode 88 12 0 1 1 0 1 1 0 8 0 pffrent 40 17 0 5 1 0 1 1 0 8 0 pfosfp 40 1428 0 1005 5 0 5 5 0 8 0 pfosfpen 112 1428 0 714 21 0 21 21 0 8 0 pfrktable 1344 66 0 66 1 1 0 1 0 8 0 pfstitem 24 113 0 32 1 0 1 1 0 8 0 pfstkey 128 115 0 37 3 0 3 3 0 8 0 pfstate 448 111 0 33 10 1 9 9 0 8 0 pfrule 1360 21 0 16 2 1 1 2 0 8 0 rttmr 136 1 0 0 1 0 1 1 0 8 0 art_heap8 4096 3 0 0 3 0 3 3 0 8 0 art_heap4 256 736 0 304 32 4 28 31 0 8 1 art_table 40 739 0 304 5 0 5 5 0 8 0 art_node 32 183 0 102 1 0 1 1 0 8 0 sysvmsgpl 40 14 0 12 1 0 1 1 0 8 0 semupl 112 1 0 1 1 1 0 1 0 8 0 semapl 112 48 0 38 1 0 1 1 0 8 0 shmpl 112 31 0 3 1 0 1 1 0 8 0 dirhash 1024 45 0 28 3 0 3 3 0 8 0 dino2pl 256 4577 0 3120 93 0 93 93 0 8 0 ffsino 296 4577 0 3120 114 0 114 114 0 8 0 nchpl 144 6543 0 4831 64 0 64 64 0 8 0 rtmask 32 14 0 14 5 4 1 1 0 8 1 vnodes 216 5381 0 0 299 0 299 299 0 8 0 namei 1024 22020 0 22020 3 1 2 2 0 8 2 percpumem 16 181 0 131 1 0 1 1 0 8 0 vcpupl 3968 5 0 0 1 0 1 1 0 8 0 vmpool 848 5 0 0 1 0 1 1 0 8 0 kstatmem 264 152 0 124 3 0 3 3 0 8 0 scsiplug 72 4 0 4 3 3 0 1 0 8 0 scxspl 216 35054 0 35054 15 13 2 8 1 8 2 plimitpl 152 362 0 342 1 0 1 1 0 8 0 sigapl 424 1800 0 1732 8 0 8 8 0 8 0 knotepl 120 734 0 0 23 0 23 23 0 8 0 kqueuepl 224 781 0 770 14 12 2 5 0 8 1 pipepl 344 305 0 278 9 6 3 9 0 8 0 fdescpl 528 1763 0 1731 3 0 3 3 0 8 0 filepl 160 11647 0 11404 28 11 17 18 0 8 6 lockfpl 104 696 0 693 2 1 1 2 0 8 0 lockfspl 48 277 0 274 1 0 1 1 0 8 0 sessionpl 144 30 0 21 1 0 1 1 0 8 0 pgrppl 48 67 0 50 1 0 1 1 0 8 0 ucredpl 104 2263 0 2250 1 0 1 1 0 8 0 zombiepl 144 2160 0 2157 1 0 1 1 0 8 0 processpl 1232 1800 0 1732 6 0 6 6 0 8 0 procpl 664 4157 0 4077 9 1 8 8 0 8 0 sosppl 176 11 0 10 3 2 1 1 0 8 0 sockpl 752 2875 0 2833 25 14 11 17 0 8 6 mcl64k 65536 4 0 0 1 0 1 1 0 8 0 mcl16k 16384 5 0 0 1 0 1 1 0 8 0 mcl12k 12288 2 0 0 1 0 1 1 0 8 0 mcl9k 9216 1 0 0 1 0 1 1 0 8 0 mcl8k 8192 2 0 0 1 0 1 1 0 8 0 mcl4k 4096 135 0 0 17 0 17 17 0 8 0 mcl2k 2048 26 0 0 4 0 4 4 0 8 0 mtagpl 96 6 0 0 1 0 1 1 0 8 0 mbufpl 256 1828 0 0 115 0 115 115 0 8 0 bufpl 280 13444 0 7315 439 0 439 439 0 8 1 anonpl 32 10408 0 0 84 0 84 84 0 246 0 amapchunkpl 152 52906 0 52271 61 30 31 45 0 158 4 amappl16 200 4964 0 4904 36 19 17 17 0 8 6 amappl15 192 6 0 6 1 1 0 1 0 8 0 amappl14 184 455 0 454 1 0 1 1 0 8 0 amappl13 176 152 0 140 1 0 1 1 0 8 0 amappl12 168 2025 0 1994 2 0 2 2 0 8 0 amappl11 160 4 0 4 2 2 0 1 0 8 0 amappl10 152 63 0 49 1 0 1 1 0 8 0 amappl9 144 273 0 273 2 1 1 1 0 8 1 amappl8 136 106 0 103 1 0 1 1 0 8 0 amappl7 128 170 0 156 1 0 1 1 0 8 0 amappl6 120 177 0 176 1 0 1 1 0 8 0 amappl5 112 104 0 94 1 0 1 1 0 8 0 amappl4 104 321 0 301 1 0 1 1 0 8 0 amappl3 96 10547 0 10418 5 1 4 4 0 8 0 amappl2 88 635 0 571 2 0 2 2 0 8 0 amappl1 80 17331 0 16721 17 1 16 16 0 8 0 amappl 88 14736 0 14539 5 0 5 5 0 92 0 uvmvnodes 80 141 0 0 3 0 3 3 0 8 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma512 512 1 0 1 1 1 0 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 7 0 7 2 2 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 20 0 19 1 0 1 1 0 8 0 aobjpl 72 38 0 3 1 0 1 1 0 8 0 uaddrrnd 24 1763 0 1731 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 1763 0 1731 1 0 1 1 0 8 0 vmmpekpl 168 16659 0 16611 4 1 3 3 0 8 0 vmmpepl 168 119396 0 117353 131 31 100 111 0 357 1 vmsppl 488 1762 0 1731 8 3 5 5 0 8 0 rwobjpl 80 33483 0 32299 33 3 30 31 0 8 0 pdppl 4096 3543 0 3467 131 55 76 83 0 8 0 pvpl 32 19447 0 0 158 1 157 157 0 265 0 pmappl 256 1767 0 1731 3 0 3 3 0 8 0 extentpl 40 45 0 27 1 0 1 1 0 8 0 phpool 112 439 0 75 11 0 11 11 0 8 0 ddb{1}> machine ddbcpu 0 Stopped at x86_ipi_db+0x27: addq $0x8,%rsp x86_ipi_db(ffffffff838edff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 end of kernel end trace frame: 0x7314ade6df60, count: 12 ddb{0}> trace x86_ipi_db(ffffffff838edff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 end of kernel end trace frame: 0x7314ade6df60, count: -3 ddb{0}> machine ddbcpu 1 Stopped at dt_ioctl_record_stop+0x108: movq 0(%r14),%r14 dt_ioctl_record_stop(ffff800001685000) at dt_ioctl_record_stop+0x108 dtclose(11e5f,41,2000,ffff80003c3c8020) at dtclose+0x109 spec_close(ffff80003c3f3850) at spec_close+0x466 VOP_CLOSE(fffffd805f0d3c30,41,fffffd80097fd000,ffff80003c3c8020) at VOP_CLOSE+0x132 vn_closefile(fffffd806c8fc7b8,ffff80003c3c8020) at vn_closefile+0x12b fdrop(fffffd806c8fc7b8,ffff80003c3c8020) at fdrop+0x121 closef(fffffd806c8fc7b8,ffff80003c3c8020) at closef+0x192 fdfree(ffff80003c3c8020) at fdfree+0x116 exit1(ffff80003c3c8020,0,0,1) at exit1+0x576 sys_exit(ffff80003c3c8020,ffff80003c3f3bc0,ffff80003c3f3b10) at sys_exit+0x1a syscall(ffff80003c3f3bc0) at syscall+0xb17 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7d154dc166d0, count: 3 ddb{1}> trace dt_ioctl_record_stop(ffff800001685000) at dt_ioctl_record_stop+0x108 dtclose(11e5f,41,2000,ffff80003c3c8020) at dtclose+0x109 spec_close(ffff80003c3f3850) at spec_close+0x466 VOP_CLOSE(fffffd805f0d3c30,41,fffffd80097fd000,ffff80003c3c8020) at VOP_CLOSE+0x132 vn_closefile(fffffd806c8fc7b8,ffff80003c3c8020) at vn_closefile+0x12b fdrop(fffffd806c8fc7b8,ffff80003c3c8020) at fdrop+0x121 closef(fffffd806c8fc7b8,ffff80003c3c8020) at closef+0x192 fdfree(ffff80003c3c8020) at fdfree+0x116 exit1(ffff80003c3c8020,0,0,1) at exit1+0x576 sys_exit(ffff80003c3c8020,ffff80003c3f3bc0,ffff80003c3f3b10) at sys_exit+0x1a syscall(ffff80003c3f3bc0) at syscall+0xb17 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7d154dc166d0, count: -12