last executing test programs: 22.099700831s ago: executing program 2 (id=26): sendto$inet(0xffffffffffffffff, &(0x7f0000000000)="057f2a209a04235dae854b6a394be876e60100017ab5d4e874e3b824225c5e18c6eddd73f1891293a55e2f574a7861eb7c12a28ba59bfae5ba6ddeab8bd5bd96df78b97035348481c2b8e5735de48cf9859bdb148af45bacc11389838db5c25c61fb31714a65d1a1fd62095d4a8a7389529c2fbe97fafac320bdf8264995584448b139d1095696ca3c2c9a453fb94f137e0a5e5194f49c16c70fb0712b6c0b01a8136ba40d388e50fc5d41a35e0e4e19979c46c7ccaf", 0xb6, 0x9, &(0x7f00000000c0)={0x10, 0x2, 0x1, 0x4}, 0x10) (async) r0 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000100), 0x10, 0x0) ioctl$WSKBDIO_GETDEFAULTBELL(r0, 0x40105706, &(0x7f0000000140)) (async) ioctl$WSKBDIO_GETKEYREPEAT(r0, 0x400c5708, &(0x7f0000000180)) (async) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) (async) r3 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000200), 0x10, 0x0) ioctl$WSKBDIO_SETBACKLIGHT(r3, 0x800c5712, &(0x7f0000000240)={0x4800000}) ioctl$WSKBDIO_SETMAP(r3, 0x8010570e, &(0x7f00000002c0)={0x3, &(0x7f0000000280)=[{0x0, 0x3, 0x2, 0xffff, 0x9}, {0x9, 0x8, 0x3, 0x3, 0x4}, {0x9, 0x669, 0x9, 0x9, 0x4}]}) lseek(r0, 0x4, 0xf031b0c99eb9c95a) (async) listen(r1, 0x8) (async) r4 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000300), 0x10, 0x0) ioctl$WSKBDIO_COMPLEXBELL(r4, 0x80105702, &(0x7f0000000340)={0xffffff47, 0x1, 0x7, 0x7}) ioctl$WSKBDIO_COMPLEXBELL(r0, 0x80105702, &(0x7f0000000380)={0x2, 0xac1d, 0x4, 0xffffffff}) (async) ioctl$DIOCCLRSTATES(r1, 0x0, &(0x7f00000003c0)={{0x81, 0x14000, 0x2}, 0x0, '\x00', 0x26a, {@table={'./file0\x00', 0x0, 0x3, 0x2}, [0x4, 0x4], 0xf4, 0x9, 0x6}, {@addrmask={@v4=@rand_addr=0x9, @v4=@remote={0xac, 0x14, 0x0}, 0x0, 0x0, 0x7}, [0x5, 0x800], 0x6, 0x8, 0xbe2b}, './file0\x00', './file0\x00', 0x1, 0x80}) (async) ioctl$LIOCSFD(r2, 0x80046c7f, &(0x7f00000004c0)=r1) sendto$unix(r1, &(0x7f0000000500)="d1aed0c278276d9f3e60a80f9da93bc71dc65c3fa0515fa0784fcfe8a27ffe8644c0774d5abe2d695148189bcbc6b25ccc057e89b87c1f77f6317d907882febbe2323e5572b0af1e3655c9063ce7d39ad4448164cf439a85f80c7c0bb6cab14aa3235d9581a1c139f6749d4e580e6a54ddb418fd5aff5fa22d4b26f056c2fd9c7d2d6948a9a91ed2bee15714efddd0d969a2c0de3fddd859c4", 0x99, 0x8, 0x0, 0x0) (async) ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f00000005c0)={0xfffffc00, 0xfffff3ab, 0x7fff, 0xb9, "20c03f82451712baac5c68fadf3ae131addd36d4", 0x400, 0x7}) ioctl$DIOCCLRSTATES(r1, 0x0, &(0x7f0000000600)={{0x8, 0x7, 0x2}, 0x0, '\x00', 0x5, {@addrmask={@v6=@empty, @v6=@empty, 0x0, 0x0, 0xe}, [0x7f, 0x7], 0x9, 0x4, 0x9}, {@table={'./file0\x00', 0x0, 0x3, 0x94}, [0x7, 0x1ff], 0x3, 0x6, 0xb17}, './file0\x00', './file0\x00', 0xfff, 0x1}) pread(r4, &(0x7f0000000700)="d59eda2fd0e8a10a4d6442f8d057b1a7", 0x10, 0x3) (async) ioctl$FIONREAD(r0, 0x4004667f, &(0x7f0000000740)) (async) ioctl$TIOCSTAT(r2, 0x20007465) (async) ioctl$WSKBDIO_COMPLEXBELL(r1, 0x80105702, &(0x7f0000000780)={0x2, 0x5, 0x8, 0x98}) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f00000007c0)={0x9, 0x6, r4}) pipe2(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}, 0x10004) ioctl$FIONREAD(r6, 0x4004667f, &(0x7f0000000840)) ioctl$WSKBDIO_SETBACKLIGHT(r6, 0x800c5712, &(0x7f0000000880)={0x0, 0x1, 0xb9}) (async) ioctl$TIOCDRAIN(r5, 0x2000745e) (async) ioctl$TIOCSTOP(r6, 0x2000746f) (async) r7 = openat$vnd(0xffffffffffffff9c, &(0x7f00000008c0), 0x200, 0x0) close(r7) 19.209494634s ago: executing program 3 (id=33): msync(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x37f093ccf39f2788) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = getsid(0xffffffffffffffff) getresuid(&(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)=0x0) fstatat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2) r4 = getpgid(0x0) r5 = getuid() getgroups(0x5, &(0x7f0000000300)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff]) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffff9c, 0xc00c642e, &(0x7f0000000340)={0x4, 0x8, 0xffffffffffffff9c}) r9 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000380), 0x10, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffff9c, 0xc00c642d, &(0x7f00000003c0)={0x1, 0x1, 0xffffffffffffffff}) r11 = openat$null(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xca605601, &(0x7f0000000440)={0x10, 0x8, [{&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0xb1c9, 0x1}, {&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x4, 0x1}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x95}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, 0x8}, {&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x6}, {&(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x7}, {&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x51, 0x1}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x3, 0x2}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x8, 0x1}, {&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff7000/0x3000)=nil, 0xcc5, 0x1}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff4000/0xc000)=nil, 0x429, 0x1}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x4, 0x1}, {&(0x7f0000ff3000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x5}, {&(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x3, 0x2}, {&(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff2000/0x1000)=nil, 0x9, 0x1}, {&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x9}], './file0\x00', 0x9, 0x3, 0x0, [], 0xffffffffffffffff}) r13 = open$dir(&(0x7f0000000ec0)='./file0\x00', 0x100, 0x20) r14 = openat$dri(0xffffffffffffff9c, &(0x7f0000000f00)='/dev/dri/card0\x00', 0x80, 0x0) r15 = setsid() getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000f40)={0x0}, 0xc) fstat(0xffffffffffffff9c, &(0x7f0000000f80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r18 = getuid() lstat(&(0x7f0000001000)='./file0\x00', &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$unix(r0, &(0x7f0000001180)={&(0x7f0000000040)=@file={0x0, 0x1, './file0\x00'}, 0xa, &(0x7f0000000140)=[{&(0x7f0000000080)="11d1d19c1aada68ae44e489879e2277c1165486ca898b76fb9dfcb7686385b33f5dd18059cff089cf03b3ad79dfd9f18229c731202f0ce6f52c90d7878dbfaf6fcb0a36ad9315316fb9beacf0fb7995b10e426ca39eb6b204e8b133201614ceebdf8e406e42b5f18ac964ab634b0bc57a911cfbc0c9e536f78fc486d81d5c05febbc4913d0c0ef92854d6e9958a70233d78641d9531a6b2e269eab0f6dda6d4f2862bf42ed66ac688c466ab371b41f5d", 0xb0}], 0x1, &(0x7f00000010c0)=[@cred={0x18, 0xffff, 0x0, r1, r2, r3}, @cred={0x18, 0xffff, 0x0, r4, r5, r6}, @rights={0x18, 0xffff, 0x1, [r8, r9, r10]}, @rights={0x20, 0xffff, 0x1, [0xffffffffffffff9c, r11, r12, r13, r14]}, @cred={0x18, 0xffff, 0x0, r15, r16, r17}, @cred={0x18, 0xffff, 0x0, 0xffffffffffffffff, r18, r19}], 0x98, 0x1}, 0x2) fchownat(r8, &(0x7f00000011c0)='./file0\x00', r18, r17, 0x0) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r8, 0xc00464be, &(0x7f0000001200)={0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r10, 0xc01064ac, &(0x7f0000001340)={r20, 0xc7, &(0x7f0000001240)=""/199}) chown(&(0x7f0000001380)='./file1\x00', r16, r7) ioctl$AUDIO_GETDEV(r10, 0x4030411b, &(0x7f00000013c0)) pipe(&(0x7f0000001400)={0xffffffffffffffff}) closefrom(r21) syz_extract_tcp_res$synack(&(0x7f0000001440), 0x1, 0x0) mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) 17.219016514s ago: executing program 2 (id=26): sendto$inet(0xffffffffffffffff, &(0x7f0000000000)="057f2a209a04235dae854b6a394be876e60100017ab5d4e874e3b824225c5e18c6eddd73f1891293a55e2f574a7861eb7c12a28ba59bfae5ba6ddeab8bd5bd96df78b97035348481c2b8e5735de48cf9859bdb148af45bacc11389838db5c25c61fb31714a65d1a1fd62095d4a8a7389529c2fbe97fafac320bdf8264995584448b139d1095696ca3c2c9a453fb94f137e0a5e5194f49c16c70fb0712b6c0b01a8136ba40d388e50fc5d41a35e0e4e19979c46c7ccaf", 0xb6, 0x9, &(0x7f00000000c0)={0x10, 0x2, 0x1, 0x4}, 0x10) (async) r0 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000100), 0x10, 0x0) ioctl$WSKBDIO_GETDEFAULTBELL(r0, 0x40105706, &(0x7f0000000140)) (async) ioctl$WSKBDIO_GETKEYREPEAT(r0, 0x400c5708, &(0x7f0000000180)) (async) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) (async) r3 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000200), 0x10, 0x0) ioctl$WSKBDIO_SETBACKLIGHT(r3, 0x800c5712, &(0x7f0000000240)={0x4800000}) ioctl$WSKBDIO_SETMAP(r3, 0x8010570e, &(0x7f00000002c0)={0x3, &(0x7f0000000280)=[{0x0, 0x3, 0x2, 0xffff, 0x9}, {0x9, 0x8, 0x3, 0x3, 0x4}, {0x9, 0x669, 0x9, 0x9, 0x4}]}) lseek(r0, 0x4, 0xf031b0c99eb9c95a) (async) listen(r1, 0x8) (async) r4 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000300), 0x10, 0x0) ioctl$WSKBDIO_COMPLEXBELL(r4, 0x80105702, &(0x7f0000000340)={0xffffff47, 0x1, 0x7, 0x7}) ioctl$WSKBDIO_COMPLEXBELL(r0, 0x80105702, &(0x7f0000000380)={0x2, 0xac1d, 0x4, 0xffffffff}) (async) ioctl$DIOCCLRSTATES(r1, 0x0, &(0x7f00000003c0)={{0x81, 0x14000, 0x2}, 0x0, '\x00', 0x26a, {@table={'./file0\x00', 0x0, 0x3, 0x2}, [0x4, 0x4], 0xf4, 0x9, 0x6}, {@addrmask={@v4=@rand_addr=0x9, @v4=@remote={0xac, 0x14, 0x0}, 0x0, 0x0, 0x7}, [0x5, 0x800], 0x6, 0x8, 0xbe2b}, './file0\x00', './file0\x00', 0x1, 0x80}) (async) ioctl$LIOCSFD(r2, 0x80046c7f, &(0x7f00000004c0)=r1) sendto$unix(r1, &(0x7f0000000500)="d1aed0c278276d9f3e60a80f9da93bc71dc65c3fa0515fa0784fcfe8a27ffe8644c0774d5abe2d695148189bcbc6b25ccc057e89b87c1f77f6317d907882febbe2323e5572b0af1e3655c9063ce7d39ad4448164cf439a85f80c7c0bb6cab14aa3235d9581a1c139f6749d4e580e6a54ddb418fd5aff5fa22d4b26f056c2fd9c7d2d6948a9a91ed2bee15714efddd0d969a2c0de3fddd859c4", 0x99, 0x8, 0x0, 0x0) (async) ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f00000005c0)={0xfffffc00, 0xfffff3ab, 0x7fff, 0xb9, "20c03f82451712baac5c68fadf3ae131addd36d4", 0x400, 0x7}) ioctl$DIOCCLRSTATES(r1, 0x0, &(0x7f0000000600)={{0x8, 0x7, 0x2}, 0x0, '\x00', 0x5, {@addrmask={@v6=@empty, @v6=@empty, 0x0, 0x0, 0xe}, [0x7f, 0x7], 0x9, 0x4, 0x9}, {@table={'./file0\x00', 0x0, 0x3, 0x94}, [0x7, 0x1ff], 0x3, 0x6, 0xb17}, './file0\x00', './file0\x00', 0xfff, 0x1}) pread(r4, &(0x7f0000000700)="d59eda2fd0e8a10a4d6442f8d057b1a7", 0x10, 0x3) (async) ioctl$FIONREAD(r0, 0x4004667f, &(0x7f0000000740)) (async) ioctl$TIOCSTAT(r2, 0x20007465) (async) ioctl$WSKBDIO_COMPLEXBELL(r1, 0x80105702, &(0x7f0000000780)={0x2, 0x5, 0x8, 0x98}) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f00000007c0)={0x9, 0x6, r4}) pipe2(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}, 0x10004) ioctl$FIONREAD(r6, 0x4004667f, &(0x7f0000000840)) ioctl$WSKBDIO_SETBACKLIGHT(r6, 0x800c5712, &(0x7f0000000880)={0x0, 0x1, 0xb9}) (async) ioctl$TIOCDRAIN(r5, 0x2000745e) (async) ioctl$TIOCSTOP(r6, 0x2000746f) (async) r7 = openat$vnd(0xffffffffffffff9c, &(0x7f00000008c0), 0x200, 0x0) close(r7) 16.067388229s ago: executing program 4 (id=230): sysctl$net_inet_tcp(&(0x7f00000000c0)={0x4, 0x2, 0x6, 0x6}, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0) 16.017658612s ago: executing program 4 (id=232): r0 = openat$speaker(0xffffffffffffff9c, &(0x7f0000001280), 0x2, 0x0) r1 = socket(0x18, 0x5001, 0x0) (async) mknod(&(0x7f00000001c0)='./file0\x00', 0x2000, 0x5901) (async, rerun: 64) open(&(0x7f0000000200)='./file0\x00', 0x80, 0x95) (async, rerun: 64) mknod(&(0x7f0000000180)='./file0\x00', 0x1100, 0x0) open(&(0x7f0000000280)='./file0\x00', 0x70e, 0x0) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x1, 0xe8) ioctl$TIOCSFLAGS(r2, 0x80047476, &(0x7f0000000300)=0xffff229b) poll(0x0, 0x0, 0x800) (async) poll(0x0, 0x0, 0x40dadcb6) setrlimit(0x8, &(0x7f0000000100)={0x42, 0x62}) r3 = syz_open_pts() close(r3) (async) r4 = syz_open_pts() setsid() (async) ioctl$TIOCSCTTY(r4, 0x20007461) (async, rerun: 32) ioctl$TIOCSETD(r3, 0x8004745f, &(0x7f0000000140)=0x1d) (async, rerun: 32) accept$unix(r1, 0x0, 0x0) (async, rerun: 64) pwritev(r0, &(0x7f0000000580)=[{&(0x7f0000000040)="47e4477bbeeb7b5702ab7f179e0147c4b1df1e2909896fcbbb914fb646887f3fc8b3afcc5247a38fb33a685b2ba97f8a0783fa3a163f026dc5d0cf58d6130a703079a6014c", 0x45}], 0x1, 0x9) (rerun: 64) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r5, 0x0, 0x200000000000b, &(0x7f0000000000)='\x00', 0x1) setsockopt$inet_opts(r5, 0x0, 0x200000000000c, &(0x7f00000000c0)="ea10070000000000", 0x8) (async) execve(&(0x7f0000000240)='./file0/file0\x00', 0x0, 0x0) 15.199833411s ago: executing program 3 (id=33): msync(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x37f093ccf39f2788) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = getsid(0xffffffffffffffff) getresuid(&(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)=0x0) fstatat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2) r4 = getpgid(0x0) r5 = getuid() getgroups(0x5, &(0x7f0000000300)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff]) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffff9c, 0xc00c642e, &(0x7f0000000340)={0x4, 0x8, 0xffffffffffffff9c}) r9 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000380), 0x10, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffff9c, 0xc00c642d, &(0x7f00000003c0)={0x1, 0x1, 0xffffffffffffffff}) r11 = openat$null(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xca605601, &(0x7f0000000440)={0x10, 0x8, [{&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0xb1c9, 0x1}, {&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x4, 0x1}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x95}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, 0x8}, {&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x6}, {&(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x7}, {&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x51, 0x1}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x3, 0x2}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x8, 0x1}, {&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff7000/0x3000)=nil, 0xcc5, 0x1}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff4000/0xc000)=nil, 0x429, 0x1}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x4, 0x1}, {&(0x7f0000ff3000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x5}, {&(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x3, 0x2}, {&(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff2000/0x1000)=nil, 0x9, 0x1}, {&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x9}], './file0\x00', 0x9, 0x3, 0x0, [], 0xffffffffffffffff}) r13 = open$dir(&(0x7f0000000ec0)='./file0\x00', 0x100, 0x20) r14 = openat$dri(0xffffffffffffff9c, &(0x7f0000000f00)='/dev/dri/card0\x00', 0x80, 0x0) r15 = setsid() getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000f40)={0x0}, 0xc) fstat(0xffffffffffffff9c, &(0x7f0000000f80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r18 = getuid() lstat(&(0x7f0000001000)='./file0\x00', &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$unix(r0, &(0x7f0000001180)={&(0x7f0000000040)=@file={0x0, 0x1, './file0\x00'}, 0xa, &(0x7f0000000140)=[{&(0x7f0000000080)="11d1d19c1aada68ae44e489879e2277c1165486ca898b76fb9dfcb7686385b33f5dd18059cff089cf03b3ad79dfd9f18229c731202f0ce6f52c90d7878dbfaf6fcb0a36ad9315316fb9beacf0fb7995b10e426ca39eb6b204e8b133201614ceebdf8e406e42b5f18ac964ab634b0bc57a911cfbc0c9e536f78fc486d81d5c05febbc4913d0c0ef92854d6e9958a70233d78641d9531a6b2e269eab0f6dda6d4f2862bf42ed66ac688c466ab371b41f5d", 0xb0}], 0x1, &(0x7f00000010c0)=[@cred={0x18, 0xffff, 0x0, r1, r2, r3}, @cred={0x18, 0xffff, 0x0, r4, r5, r6}, @rights={0x18, 0xffff, 0x1, [r8, r9, r10]}, @rights={0x20, 0xffff, 0x1, [0xffffffffffffff9c, r11, r12, r13, r14]}, @cred={0x18, 0xffff, 0x0, r15, r16, r17}, @cred={0x18, 0xffff, 0x0, 0xffffffffffffffff, r18, r19}], 0x98, 0x1}, 0x2) fchownat(r8, &(0x7f00000011c0)='./file0\x00', r18, r17, 0x0) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r8, 0xc00464be, &(0x7f0000001200)={0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r10, 0xc01064ac, &(0x7f0000001340)={r20, 0xc7, &(0x7f0000001240)=""/199}) chown(&(0x7f0000001380)='./file1\x00', r16, r7) ioctl$AUDIO_GETDEV(r10, 0x4030411b, &(0x7f00000013c0)) pipe(&(0x7f0000001400)={0xffffffffffffffff}) closefrom(r21) syz_extract_tcp_res$synack(&(0x7f0000001440), 0x1, 0x0) mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) 11.821985555s ago: executing program 2 (id=26): sendto$inet(0xffffffffffffffff, &(0x7f0000000000)="057f2a209a04235dae854b6a394be876e60100017ab5d4e874e3b824225c5e18c6eddd73f1891293a55e2f574a7861eb7c12a28ba59bfae5ba6ddeab8bd5bd96df78b97035348481c2b8e5735de48cf9859bdb148af45bacc11389838db5c25c61fb31714a65d1a1fd62095d4a8a7389529c2fbe97fafac320bdf8264995584448b139d1095696ca3c2c9a453fb94f137e0a5e5194f49c16c70fb0712b6c0b01a8136ba40d388e50fc5d41a35e0e4e19979c46c7ccaf", 0xb6, 0x9, &(0x7f00000000c0)={0x10, 0x2, 0x1, 0x4}, 0x10) (async) r0 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000100), 0x10, 0x0) ioctl$WSKBDIO_GETDEFAULTBELL(r0, 0x40105706, &(0x7f0000000140)) (async) ioctl$WSKBDIO_GETKEYREPEAT(r0, 0x400c5708, &(0x7f0000000180)) (async) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) (async) r3 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000200), 0x10, 0x0) ioctl$WSKBDIO_SETBACKLIGHT(r3, 0x800c5712, &(0x7f0000000240)={0x4800000}) ioctl$WSKBDIO_SETMAP(r3, 0x8010570e, &(0x7f00000002c0)={0x3, &(0x7f0000000280)=[{0x0, 0x3, 0x2, 0xffff, 0x9}, {0x9, 0x8, 0x3, 0x3, 0x4}, {0x9, 0x669, 0x9, 0x9, 0x4}]}) lseek(r0, 0x4, 0xf031b0c99eb9c95a) (async) listen(r1, 0x8) (async) r4 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000300), 0x10, 0x0) ioctl$WSKBDIO_COMPLEXBELL(r4, 0x80105702, &(0x7f0000000340)={0xffffff47, 0x1, 0x7, 0x7}) ioctl$WSKBDIO_COMPLEXBELL(r0, 0x80105702, &(0x7f0000000380)={0x2, 0xac1d, 0x4, 0xffffffff}) (async) ioctl$DIOCCLRSTATES(r1, 0x0, &(0x7f00000003c0)={{0x81, 0x14000, 0x2}, 0x0, '\x00', 0x26a, {@table={'./file0\x00', 0x0, 0x3, 0x2}, [0x4, 0x4], 0xf4, 0x9, 0x6}, {@addrmask={@v4=@rand_addr=0x9, @v4=@remote={0xac, 0x14, 0x0}, 0x0, 0x0, 0x7}, [0x5, 0x800], 0x6, 0x8, 0xbe2b}, './file0\x00', './file0\x00', 0x1, 0x80}) (async) ioctl$LIOCSFD(r2, 0x80046c7f, &(0x7f00000004c0)=r1) sendto$unix(r1, &(0x7f0000000500)="d1aed0c278276d9f3e60a80f9da93bc71dc65c3fa0515fa0784fcfe8a27ffe8644c0774d5abe2d695148189bcbc6b25ccc057e89b87c1f77f6317d907882febbe2323e5572b0af1e3655c9063ce7d39ad4448164cf439a85f80c7c0bb6cab14aa3235d9581a1c139f6749d4e580e6a54ddb418fd5aff5fa22d4b26f056c2fd9c7d2d6948a9a91ed2bee15714efddd0d969a2c0de3fddd859c4", 0x99, 0x8, 0x0, 0x0) (async) ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f00000005c0)={0xfffffc00, 0xfffff3ab, 0x7fff, 0xb9, "20c03f82451712baac5c68fadf3ae131addd36d4", 0x400, 0x7}) ioctl$DIOCCLRSTATES(r1, 0x0, &(0x7f0000000600)={{0x8, 0x7, 0x2}, 0x0, '\x00', 0x5, {@addrmask={@v6=@empty, @v6=@empty, 0x0, 0x0, 0xe}, [0x7f, 0x7], 0x9, 0x4, 0x9}, {@table={'./file0\x00', 0x0, 0x3, 0x94}, [0x7, 0x1ff], 0x3, 0x6, 0xb17}, './file0\x00', './file0\x00', 0xfff, 0x1}) pread(r4, &(0x7f0000000700)="d59eda2fd0e8a10a4d6442f8d057b1a7", 0x10, 0x3) (async) ioctl$FIONREAD(r0, 0x4004667f, &(0x7f0000000740)) (async) ioctl$TIOCSTAT(r2, 0x20007465) (async) ioctl$WSKBDIO_COMPLEXBELL(r1, 0x80105702, &(0x7f0000000780)={0x2, 0x5, 0x8, 0x98}) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f00000007c0)={0x9, 0x6, r4}) pipe2(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}, 0x10004) ioctl$FIONREAD(r6, 0x4004667f, &(0x7f0000000840)) ioctl$WSKBDIO_SETBACKLIGHT(r6, 0x800c5712, &(0x7f0000000880)={0x0, 0x1, 0xb9}) (async) ioctl$TIOCDRAIN(r5, 0x2000745e) (async) ioctl$TIOCSTOP(r6, 0x2000746f) (async) r7 = openat$vnd(0xffffffffffffff9c, &(0x7f00000008c0), 0x200, 0x0) close(r7) 11.821826932s ago: executing program 4 (id=232): r0 = openat$speaker(0xffffffffffffff9c, &(0x7f0000001280), 0x2, 0x0) r1 = socket(0x18, 0x5001, 0x0) (async) mknod(&(0x7f00000001c0)='./file0\x00', 0x2000, 0x5901) (async, rerun: 64) open(&(0x7f0000000200)='./file0\x00', 0x80, 0x95) (async, rerun: 64) mknod(&(0x7f0000000180)='./file0\x00', 0x1100, 0x0) open(&(0x7f0000000280)='./file0\x00', 0x70e, 0x0) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x1, 0xe8) ioctl$TIOCSFLAGS(r2, 0x80047476, &(0x7f0000000300)=0xffff229b) poll(0x0, 0x0, 0x800) (async) poll(0x0, 0x0, 0x40dadcb6) setrlimit(0x8, &(0x7f0000000100)={0x42, 0x62}) r3 = syz_open_pts() close(r3) (async) r4 = syz_open_pts() setsid() (async) ioctl$TIOCSCTTY(r4, 0x20007461) (async, rerun: 32) ioctl$TIOCSETD(r3, 0x8004745f, &(0x7f0000000140)=0x1d) (async, rerun: 32) accept$unix(r1, 0x0, 0x0) (async, rerun: 64) pwritev(r0, &(0x7f0000000580)=[{&(0x7f0000000040)="47e4477bbeeb7b5702ab7f179e0147c4b1df1e2909896fcbbb914fb646887f3fc8b3afcc5247a38fb33a685b2ba97f8a0783fa3a163f026dc5d0cf58d6130a703079a6014c", 0x45}], 0x1, 0x9) (rerun: 64) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r5, 0x0, 0x200000000000b, &(0x7f0000000000)='\x00', 0x1) setsockopt$inet_opts(r5, 0x0, 0x200000000000c, &(0x7f00000000c0)="ea10070000000000", 0x8) (async) execve(&(0x7f0000000240)='./file0/file0\x00', 0x0, 0x0) 11.220684629s ago: executing program 3 (id=33): msync(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x37f093ccf39f2788) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = getsid(0xffffffffffffffff) getresuid(&(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)=0x0) fstatat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2) r4 = getpgid(0x0) r5 = getuid() getgroups(0x5, &(0x7f0000000300)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff]) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffff9c, 0xc00c642e, &(0x7f0000000340)={0x4, 0x8, 0xffffffffffffff9c}) r9 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000380), 0x10, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffff9c, 0xc00c642d, &(0x7f00000003c0)={0x1, 0x1, 0xffffffffffffffff}) r11 = openat$null(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xca605601, &(0x7f0000000440)={0x10, 0x8, [{&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0xb1c9, 0x1}, {&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x4, 0x1}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x95}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, 0x8}, {&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x6}, {&(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x7}, {&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x51, 0x1}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x3, 0x2}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x8, 0x1}, {&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff7000/0x3000)=nil, 0xcc5, 0x1}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff4000/0xc000)=nil, 0x429, 0x1}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x4, 0x1}, {&(0x7f0000ff3000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x5}, {&(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x3, 0x2}, {&(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff2000/0x1000)=nil, 0x9, 0x1}, {&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x9}], './file0\x00', 0x9, 0x3, 0x0, [], 0xffffffffffffffff}) r13 = open$dir(&(0x7f0000000ec0)='./file0\x00', 0x100, 0x20) r14 = openat$dri(0xffffffffffffff9c, &(0x7f0000000f00)='/dev/dri/card0\x00', 0x80, 0x0) r15 = setsid() getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000f40)={0x0}, 0xc) fstat(0xffffffffffffff9c, &(0x7f0000000f80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r18 = getuid() lstat(&(0x7f0000001000)='./file0\x00', &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$unix(r0, &(0x7f0000001180)={&(0x7f0000000040)=@file={0x0, 0x1, './file0\x00'}, 0xa, &(0x7f0000000140)=[{&(0x7f0000000080)="11d1d19c1aada68ae44e489879e2277c1165486ca898b76fb9dfcb7686385b33f5dd18059cff089cf03b3ad79dfd9f18229c731202f0ce6f52c90d7878dbfaf6fcb0a36ad9315316fb9beacf0fb7995b10e426ca39eb6b204e8b133201614ceebdf8e406e42b5f18ac964ab634b0bc57a911cfbc0c9e536f78fc486d81d5c05febbc4913d0c0ef92854d6e9958a70233d78641d9531a6b2e269eab0f6dda6d4f2862bf42ed66ac688c466ab371b41f5d", 0xb0}], 0x1, &(0x7f00000010c0)=[@cred={0x18, 0xffff, 0x0, r1, r2, r3}, @cred={0x18, 0xffff, 0x0, r4, r5, r6}, @rights={0x18, 0xffff, 0x1, [r8, r9, r10]}, @rights={0x20, 0xffff, 0x1, [0xffffffffffffff9c, r11, r12, r13, r14]}, @cred={0x18, 0xffff, 0x0, r15, r16, r17}, @cred={0x18, 0xffff, 0x0, 0xffffffffffffffff, r18, r19}], 0x98, 0x1}, 0x2) fchownat(r8, &(0x7f00000011c0)='./file0\x00', r18, r17, 0x0) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r8, 0xc00464be, &(0x7f0000001200)={0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r10, 0xc01064ac, &(0x7f0000001340)={r20, 0xc7, &(0x7f0000001240)=""/199}) chown(&(0x7f0000001380)='./file1\x00', r16, r7) ioctl$AUDIO_GETDEV(r10, 0x4030411b, &(0x7f00000013c0)) pipe(&(0x7f0000001400)={0xffffffffffffffff}) closefrom(r21) syz_extract_tcp_res$synack(&(0x7f0000001440), 0x1, 0x0) mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) 8.789664217s ago: executing program 4 (id=232): r0 = openat$speaker(0xffffffffffffff9c, &(0x7f0000001280), 0x2, 0x0) r1 = socket(0x18, 0x5001, 0x0) (async) mknod(&(0x7f00000001c0)='./file0\x00', 0x2000, 0x5901) (async, rerun: 64) open(&(0x7f0000000200)='./file0\x00', 0x80, 0x95) (async, rerun: 64) mknod(&(0x7f0000000180)='./file0\x00', 0x1100, 0x0) open(&(0x7f0000000280)='./file0\x00', 0x70e, 0x0) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x1, 0xe8) ioctl$TIOCSFLAGS(r2, 0x80047476, &(0x7f0000000300)=0xffff229b) poll(0x0, 0x0, 0x800) (async) poll(0x0, 0x0, 0x40dadcb6) setrlimit(0x8, &(0x7f0000000100)={0x42, 0x62}) r3 = syz_open_pts() close(r3) (async) r4 = syz_open_pts() setsid() (async) ioctl$TIOCSCTTY(r4, 0x20007461) (async, rerun: 32) ioctl$TIOCSETD(r3, 0x8004745f, &(0x7f0000000140)=0x1d) (async, rerun: 32) accept$unix(r1, 0x0, 0x0) (async, rerun: 64) pwritev(r0, &(0x7f0000000580)=[{&(0x7f0000000040)="47e4477bbeeb7b5702ab7f179e0147c4b1df1e2909896fcbbb914fb646887f3fc8b3afcc5247a38fb33a685b2ba97f8a0783fa3a163f026dc5d0cf58d6130a703079a6014c", 0x45}], 0x1, 0x9) (rerun: 64) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r5, 0x0, 0x200000000000b, &(0x7f0000000000)='\x00', 0x1) setsockopt$inet_opts(r5, 0x0, 0x200000000000c, &(0x7f00000000c0)="ea10070000000000", 0x8) (async) execve(&(0x7f0000000240)='./file0/file0\x00', 0x0, 0x0) 8.644266378s ago: executing program 2 (id=26): sendto$inet(0xffffffffffffffff, &(0x7f0000000000)="057f2a209a04235dae854b6a394be876e60100017ab5d4e874e3b824225c5e18c6eddd73f1891293a55e2f574a7861eb7c12a28ba59bfae5ba6ddeab8bd5bd96df78b97035348481c2b8e5735de48cf9859bdb148af45bacc11389838db5c25c61fb31714a65d1a1fd62095d4a8a7389529c2fbe97fafac320bdf8264995584448b139d1095696ca3c2c9a453fb94f137e0a5e5194f49c16c70fb0712b6c0b01a8136ba40d388e50fc5d41a35e0e4e19979c46c7ccaf", 0xb6, 0x9, &(0x7f00000000c0)={0x10, 0x2, 0x1, 0x4}, 0x10) (async) r0 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000100), 0x10, 0x0) ioctl$WSKBDIO_GETDEFAULTBELL(r0, 0x40105706, &(0x7f0000000140)) (async) ioctl$WSKBDIO_GETKEYREPEAT(r0, 0x400c5708, &(0x7f0000000180)) (async) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) (async) r3 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000200), 0x10, 0x0) ioctl$WSKBDIO_SETBACKLIGHT(r3, 0x800c5712, &(0x7f0000000240)={0x4800000}) ioctl$WSKBDIO_SETMAP(r3, 0x8010570e, &(0x7f00000002c0)={0x3, &(0x7f0000000280)=[{0x0, 0x3, 0x2, 0xffff, 0x9}, {0x9, 0x8, 0x3, 0x3, 0x4}, {0x9, 0x669, 0x9, 0x9, 0x4}]}) lseek(r0, 0x4, 0xf031b0c99eb9c95a) (async) listen(r1, 0x8) (async) r4 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000300), 0x10, 0x0) ioctl$WSKBDIO_COMPLEXBELL(r4, 0x80105702, &(0x7f0000000340)={0xffffff47, 0x1, 0x7, 0x7}) ioctl$WSKBDIO_COMPLEXBELL(r0, 0x80105702, &(0x7f0000000380)={0x2, 0xac1d, 0x4, 0xffffffff}) (async) ioctl$DIOCCLRSTATES(r1, 0x0, &(0x7f00000003c0)={{0x81, 0x14000, 0x2}, 0x0, '\x00', 0x26a, {@table={'./file0\x00', 0x0, 0x3, 0x2}, [0x4, 0x4], 0xf4, 0x9, 0x6}, {@addrmask={@v4=@rand_addr=0x9, @v4=@remote={0xac, 0x14, 0x0}, 0x0, 0x0, 0x7}, [0x5, 0x800], 0x6, 0x8, 0xbe2b}, './file0\x00', './file0\x00', 0x1, 0x80}) (async) ioctl$LIOCSFD(r2, 0x80046c7f, &(0x7f00000004c0)=r1) sendto$unix(r1, &(0x7f0000000500)="d1aed0c278276d9f3e60a80f9da93bc71dc65c3fa0515fa0784fcfe8a27ffe8644c0774d5abe2d695148189bcbc6b25ccc057e89b87c1f77f6317d907882febbe2323e5572b0af1e3655c9063ce7d39ad4448164cf439a85f80c7c0bb6cab14aa3235d9581a1c139f6749d4e580e6a54ddb418fd5aff5fa22d4b26f056c2fd9c7d2d6948a9a91ed2bee15714efddd0d969a2c0de3fddd859c4", 0x99, 0x8, 0x0, 0x0) (async) ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f00000005c0)={0xfffffc00, 0xfffff3ab, 0x7fff, 0xb9, "20c03f82451712baac5c68fadf3ae131addd36d4", 0x400, 0x7}) ioctl$DIOCCLRSTATES(r1, 0x0, &(0x7f0000000600)={{0x8, 0x7, 0x2}, 0x0, '\x00', 0x5, {@addrmask={@v6=@empty, @v6=@empty, 0x0, 0x0, 0xe}, [0x7f, 0x7], 0x9, 0x4, 0x9}, {@table={'./file0\x00', 0x0, 0x3, 0x94}, [0x7, 0x1ff], 0x3, 0x6, 0xb17}, './file0\x00', './file0\x00', 0xfff, 0x1}) pread(r4, &(0x7f0000000700)="d59eda2fd0e8a10a4d6442f8d057b1a7", 0x10, 0x3) (async) ioctl$FIONREAD(r0, 0x4004667f, &(0x7f0000000740)) (async) ioctl$TIOCSTAT(r2, 0x20007465) (async) ioctl$WSKBDIO_COMPLEXBELL(r1, 0x80105702, &(0x7f0000000780)={0x2, 0x5, 0x8, 0x98}) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f00000007c0)={0x9, 0x6, r4}) pipe2(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}, 0x10004) ioctl$FIONREAD(r6, 0x4004667f, &(0x7f0000000840)) ioctl$WSKBDIO_SETBACKLIGHT(r6, 0x800c5712, &(0x7f0000000880)={0x0, 0x1, 0xb9}) (async) ioctl$TIOCDRAIN(r5, 0x2000745e) (async) ioctl$TIOCSTOP(r6, 0x2000746f) (async) r7 = openat$vnd(0xffffffffffffff9c, &(0x7f00000008c0), 0x200, 0x0) close(r7) 7.5314554s ago: executing program 5 (id=269): sysctl$net_inet_tcp(&(0x7f00000000c0)={0x4, 0x2, 0x6, 0x6}, 0x4, 0xffffffffffffffff, &(0x7f0000000000)=0xffffffffffffff29, 0x0, 0x0) 7.139392571s ago: executing program 3 (id=33): msync(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x37f093ccf39f2788) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = getsid(0xffffffffffffffff) getresuid(&(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)=0x0) fstatat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2) r4 = getpgid(0x0) r5 = getuid() getgroups(0x5, &(0x7f0000000300)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff]) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffff9c, 0xc00c642e, &(0x7f0000000340)={0x4, 0x8, 0xffffffffffffff9c}) r9 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000380), 0x10, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffff9c, 0xc00c642d, &(0x7f00000003c0)={0x1, 0x1, 0xffffffffffffffff}) r11 = openat$null(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xca605601, &(0x7f0000000440)={0x10, 0x8, [{&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0xb1c9, 0x1}, {&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x4, 0x1}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x95}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, 0x8}, {&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x6}, {&(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x7}, {&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x51, 0x1}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x3, 0x2}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x8, 0x1}, {&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff7000/0x3000)=nil, 0xcc5, 0x1}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff4000/0xc000)=nil, 0x429, 0x1}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x4, 0x1}, {&(0x7f0000ff3000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x5}, {&(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x3, 0x2}, {&(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff2000/0x1000)=nil, 0x9, 0x1}, {&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x9}], './file0\x00', 0x9, 0x3, 0x0, [], 0xffffffffffffffff}) r13 = open$dir(&(0x7f0000000ec0)='./file0\x00', 0x100, 0x20) r14 = openat$dri(0xffffffffffffff9c, &(0x7f0000000f00)='/dev/dri/card0\x00', 0x80, 0x0) r15 = setsid() getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000f40)={0x0}, 0xc) fstat(0xffffffffffffff9c, &(0x7f0000000f80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r18 = getuid() lstat(&(0x7f0000001000)='./file0\x00', &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$unix(r0, &(0x7f0000001180)={&(0x7f0000000040)=@file={0x0, 0x1, './file0\x00'}, 0xa, &(0x7f0000000140)=[{&(0x7f0000000080)="11d1d19c1aada68ae44e489879e2277c1165486ca898b76fb9dfcb7686385b33f5dd18059cff089cf03b3ad79dfd9f18229c731202f0ce6f52c90d7878dbfaf6fcb0a36ad9315316fb9beacf0fb7995b10e426ca39eb6b204e8b133201614ceebdf8e406e42b5f18ac964ab634b0bc57a911cfbc0c9e536f78fc486d81d5c05febbc4913d0c0ef92854d6e9958a70233d78641d9531a6b2e269eab0f6dda6d4f2862bf42ed66ac688c466ab371b41f5d", 0xb0}], 0x1, &(0x7f00000010c0)=[@cred={0x18, 0xffff, 0x0, r1, r2, r3}, @cred={0x18, 0xffff, 0x0, r4, r5, r6}, @rights={0x18, 0xffff, 0x1, [r8, r9, r10]}, @rights={0x20, 0xffff, 0x1, [0xffffffffffffff9c, r11, r12, r13, r14]}, @cred={0x18, 0xffff, 0x0, r15, r16, r17}, @cred={0x18, 0xffff, 0x0, 0xffffffffffffffff, r18, r19}], 0x98, 0x1}, 0x2) fchownat(r8, &(0x7f00000011c0)='./file0\x00', r18, r17, 0x0) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r8, 0xc00464be, &(0x7f0000001200)={0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r10, 0xc01064ac, &(0x7f0000001340)={r20, 0xc7, &(0x7f0000001240)=""/199}) chown(&(0x7f0000001380)='./file1\x00', r16, r7) ioctl$AUDIO_GETDEV(r10, 0x4030411b, &(0x7f00000013c0)) pipe(&(0x7f0000001400)={0xffffffffffffffff}) closefrom(r21) syz_extract_tcp_res$synack(&(0x7f0000001440), 0x1, 0x0) mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) 7.13129428s ago: executing program 5 (id=275): mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0xd02) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x139) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000380)=""/104, 0x68}], 0x1, 0x4d) chmod(&(0x7f0000000140)='.\x00', 0x35a) setuid(0xee01) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0xc4) mkdir(&(0x7f0000000000)='./file2\x00', 0x132) sysctl$kern(&(0x7f0000000080)={0x1, 0x58}, 0x2, &(0x7f0000000180)="bd5e2d0b88b47500d2b7701fd000b01baac2f0b3dbc19f55aaf7fb4451b6d6f7c3412c410bc735cf06136ce2db8061579c0de94acc397d0aaf47904bab1a07e36024abc7b70ecde2842c882e7a668427546cb4cba0220a736d217ec4274820fd54347f35fd8977402b3dc64ff9ee731c9b2944dd084a355262a703c0ce815a49020a4af7bdf71c076ad5f81aa19265f0fd9407c9eef32a6541582de777bcd07b625e4af53ee66a6779e94ddbeacb6812efbe89f2b41ba9b139d8e5f533238d687e8d129a1cecc92f89ee760ae5510d8694", &(0x7f0000000280)=0xd1, &(0x7f00000002c0)="f53cab23eb30668dd10084eb532a23f3fa29cf4b760988026baf14e05c795a8527691f4b1fb2048a99ef05822f5dfb510acdb2a005d7a38e60140860dc757fff00ad252bfed1c784484931e3b2cc25199116c40879b37886c84f385562", 0x5d) rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)='./file2\x00') 4.920075677s ago: executing program 4 (id=232): r0 = openat$speaker(0xffffffffffffff9c, &(0x7f0000001280), 0x2, 0x0) r1 = socket(0x18, 0x5001, 0x0) (async) mknod(&(0x7f00000001c0)='./file0\x00', 0x2000, 0x5901) (async, rerun: 64) open(&(0x7f0000000200)='./file0\x00', 0x80, 0x95) (async, rerun: 64) mknod(&(0x7f0000000180)='./file0\x00', 0x1100, 0x0) open(&(0x7f0000000280)='./file0\x00', 0x70e, 0x0) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x1, 0xe8) ioctl$TIOCSFLAGS(r2, 0x80047476, &(0x7f0000000300)=0xffff229b) poll(0x0, 0x0, 0x800) (async) poll(0x0, 0x0, 0x40dadcb6) setrlimit(0x8, &(0x7f0000000100)={0x42, 0x62}) r3 = syz_open_pts() close(r3) (async) r4 = syz_open_pts() setsid() (async) ioctl$TIOCSCTTY(r4, 0x20007461) (async, rerun: 32) ioctl$TIOCSETD(r3, 0x8004745f, &(0x7f0000000140)=0x1d) (async, rerun: 32) accept$unix(r1, 0x0, 0x0) (async, rerun: 64) pwritev(r0, &(0x7f0000000580)=[{&(0x7f0000000040)="47e4477bbeeb7b5702ab7f179e0147c4b1df1e2909896fcbbb914fb646887f3fc8b3afcc5247a38fb33a685b2ba97f8a0783fa3a163f026dc5d0cf58d6130a703079a6014c", 0x45}], 0x1, 0x9) (rerun: 64) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r5, 0x0, 0x200000000000b, &(0x7f0000000000)='\x00', 0x1) setsockopt$inet_opts(r5, 0x0, 0x200000000000c, &(0x7f00000000c0)="ea10070000000000", 0x8) (async) execve(&(0x7f0000000240)='./file0/file0\x00', 0x0, 0x0) 4.900614489s ago: executing program 5 (id=280): mmap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x1011, 0xffffffffffffffff, 0x0) unveil(&(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='w\x00') 4.869704438s ago: executing program 2 (id=26): sendto$inet(0xffffffffffffffff, &(0x7f0000000000)="057f2a209a04235dae854b6a394be876e60100017ab5d4e874e3b824225c5e18c6eddd73f1891293a55e2f574a7861eb7c12a28ba59bfae5ba6ddeab8bd5bd96df78b97035348481c2b8e5735de48cf9859bdb148af45bacc11389838db5c25c61fb31714a65d1a1fd62095d4a8a7389529c2fbe97fafac320bdf8264995584448b139d1095696ca3c2c9a453fb94f137e0a5e5194f49c16c70fb0712b6c0b01a8136ba40d388e50fc5d41a35e0e4e19979c46c7ccaf", 0xb6, 0x9, &(0x7f00000000c0)={0x10, 0x2, 0x1, 0x4}, 0x10) (async) r0 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000100), 0x10, 0x0) ioctl$WSKBDIO_GETDEFAULTBELL(r0, 0x40105706, &(0x7f0000000140)) (async) ioctl$WSKBDIO_GETKEYREPEAT(r0, 0x400c5708, &(0x7f0000000180)) (async) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) (async) r3 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000200), 0x10, 0x0) ioctl$WSKBDIO_SETBACKLIGHT(r3, 0x800c5712, &(0x7f0000000240)={0x4800000}) ioctl$WSKBDIO_SETMAP(r3, 0x8010570e, &(0x7f00000002c0)={0x3, &(0x7f0000000280)=[{0x0, 0x3, 0x2, 0xffff, 0x9}, {0x9, 0x8, 0x3, 0x3, 0x4}, {0x9, 0x669, 0x9, 0x9, 0x4}]}) lseek(r0, 0x4, 0xf031b0c99eb9c95a) (async) listen(r1, 0x8) (async) r4 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000300), 0x10, 0x0) ioctl$WSKBDIO_COMPLEXBELL(r4, 0x80105702, &(0x7f0000000340)={0xffffff47, 0x1, 0x7, 0x7}) ioctl$WSKBDIO_COMPLEXBELL(r0, 0x80105702, &(0x7f0000000380)={0x2, 0xac1d, 0x4, 0xffffffff}) (async) ioctl$DIOCCLRSTATES(r1, 0x0, &(0x7f00000003c0)={{0x81, 0x14000, 0x2}, 0x0, '\x00', 0x26a, {@table={'./file0\x00', 0x0, 0x3, 0x2}, [0x4, 0x4], 0xf4, 0x9, 0x6}, {@addrmask={@v4=@rand_addr=0x9, @v4=@remote={0xac, 0x14, 0x0}, 0x0, 0x0, 0x7}, [0x5, 0x800], 0x6, 0x8, 0xbe2b}, './file0\x00', './file0\x00', 0x1, 0x80}) (async) ioctl$LIOCSFD(r2, 0x80046c7f, &(0x7f00000004c0)=r1) sendto$unix(r1, &(0x7f0000000500)="d1aed0c278276d9f3e60a80f9da93bc71dc65c3fa0515fa0784fcfe8a27ffe8644c0774d5abe2d695148189bcbc6b25ccc057e89b87c1f77f6317d907882febbe2323e5572b0af1e3655c9063ce7d39ad4448164cf439a85f80c7c0bb6cab14aa3235d9581a1c139f6749d4e580e6a54ddb418fd5aff5fa22d4b26f056c2fd9c7d2d6948a9a91ed2bee15714efddd0d969a2c0de3fddd859c4", 0x99, 0x8, 0x0, 0x0) (async) ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f00000005c0)={0xfffffc00, 0xfffff3ab, 0x7fff, 0xb9, "20c03f82451712baac5c68fadf3ae131addd36d4", 0x400, 0x7}) ioctl$DIOCCLRSTATES(r1, 0x0, &(0x7f0000000600)={{0x8, 0x7, 0x2}, 0x0, '\x00', 0x5, {@addrmask={@v6=@empty, @v6=@empty, 0x0, 0x0, 0xe}, [0x7f, 0x7], 0x9, 0x4, 0x9}, {@table={'./file0\x00', 0x0, 0x3, 0x94}, [0x7, 0x1ff], 0x3, 0x6, 0xb17}, './file0\x00', './file0\x00', 0xfff, 0x1}) pread(r4, &(0x7f0000000700)="d59eda2fd0e8a10a4d6442f8d057b1a7", 0x10, 0x3) (async) ioctl$FIONREAD(r0, 0x4004667f, &(0x7f0000000740)) (async) ioctl$TIOCSTAT(r2, 0x20007465) (async) ioctl$WSKBDIO_COMPLEXBELL(r1, 0x80105702, &(0x7f0000000780)={0x2, 0x5, 0x8, 0x98}) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f00000007c0)={0x9, 0x6, r4}) pipe2(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}, 0x10004) ioctl$FIONREAD(r6, 0x4004667f, &(0x7f0000000840)) ioctl$WSKBDIO_SETBACKLIGHT(r6, 0x800c5712, &(0x7f0000000880)={0x0, 0x1, 0xb9}) (async) ioctl$TIOCDRAIN(r5, 0x2000745e) (async) ioctl$TIOCSTOP(r6, 0x2000746f) (async) r7 = openat$vnd(0xffffffffffffff9c, &(0x7f00000008c0), 0x200, 0x0) close(r7) 4.869549336s ago: executing program 0 (id=281): select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x8, 0x2000000000000004}, 0x0, 0x0, 0x0) r0 = kqueue() kevent(r0, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file0\x00', 0x6, 0x40000d, 0x6, 0x0, 0x20a5, 0xd86, 0xf, 0x2, 0x0, 0x4, 0x7effffffffffffff}) mknod(&(0x7f00000000c0)='./file1\x00', 0x2000, 0x637d) r1 = open(&(0x7f0000000800)='./file1\x00', 0x800, 0xba) ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f0000000040)={0xfffffffd, 0x6, 0x3, 0x9, "01000100d100", 0x400, 0x4}) sysctl$kern(&(0x7f0000000080)={0x1, 0x3e}, 0x3ffffffffffffdf3, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sysctl$vm_swapencrypt(&(0x7f00000001c0), 0x3, 0x0, 0x0, &(0x7f0000000200), 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) ioctl$FIONBIO(r1, 0x82907003, &(0x7f0000000140)=0x1) sysctl$kern(0x0, 0x0, &(0x7f00000000c0)="3bf2ee74e747c82dad6eb2a36fa755e1a3925fe49afca7e63b52fa65ccaa74d6e6b85b6cdced70357ef201f97842b1068dca31553fa2d7031f38c03e56ad0e24dfc4f97b8b7f81499647e6e7725765d61436c85e43c15d12a78cb8c57ddde87021d7b685507fd3e0652f35e45bdaa3afd86c4fe557433e4c2b632de71c951516adff26aa2e48b45f8ce92bcefd3eceefabee7e3ebe806fdb4f6af569ae94b5d127", 0x0, 0x0, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6381) r3 = open(&(0x7f00000003c0)='./file0\x00', 0x10, 0x142) ioctl$FIONBIO(r3, 0x82907003, &(0x7f0000000140)=0x2) syz_emit_ethernet(0x0, 0x0) closefrom(r2) 3.771319611s ago: executing program 6 (id=283): pipe(&(0x7f0000000240)={0xffffffffffffffff}) select(0x40, &(0x7f0000000280)={0xfffffffffffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x8, 0x2000000000000004}, 0x0, 0x0, 0x0) readv(r0, &(0x7f00000002c0)=[{0x0}], 0x1) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x200, 0x186) openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r2 = socket(0x11, 0x3, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x2000, 0x3201) open$dir(&(0x7f00000001c0)='./file0\x00', 0x1, 0x2) setsockopt(r2, 0x11, 0x2, &(0x7f0000000100), 0x4) openat$pf(0xffffffffffffff9c, &(0x7f0000000200), 0xd98, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x2010, r1, 0x0) select(0x40, &(0x7f0000000000)={0xf, 0x9, 0x0, 0x5, 0x2, 0x5, 0x6, 0x6}, 0x0, &(0x7f0000000080)={0xfffffffffffffff7, 0x7, 0x6, 0x2, 0x2, 0xc, 0xd249, 0xa}, &(0x7f0000000140)={0x4, 0x3}) openat$vnd(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) 3.573841187s ago: executing program 5 (id=285): pledge(0x0, &(0x7f0000000b40)='tty \x00\x02\x00!\a\x9bp^|#\xcbhl\x97\xa3_\xbc\x04\x9d!\xd9\x9f\x9f\xb4\x96\x13\x12\xe0\r\xe7\xb9E\b\x00\x00\x00l\xaaY\xe1Q<\x19\xc0\xf6Yf\x9au^\xa0\xc9j\xdd-I\x01R\x00w\xf7\x15\x04\xa6\x82aY\x1d\xd7\f>Y\x06\"\xad\xb6\x88_\xeb\at\x91\xd3\xbf\xea\xddt\xe0\bt\x06S,\xdbH\xa7-\xaaw\xcet\x04t\xc5\xa9e\xa9\xf6\x1b\x8e\x05\x86\x93IsC\xb9ul\xaeu\x94\x9b\xaf\x04\xc4\x03\"F\x8f\xd5\xe8\r\x8d\xa1\x00\xcc\xd7\xa0\xe1\xeb\xc1>\xbd\t\xc8\x15\v\xb0, \xee\xa4\xa6\xb9a\x01&\xadrj\xd5\xc26\xe0\xbf\xa0\x1es\x01=\xdbd\xf0?=\x8afcJ\x8eYEn\xd4<\x00\xec\xe4^\x00\x00\x00\xca\x90\xfa\x98\xc9gty\xce\xab\xd2\xa1\x85E\xe4\xa9\xd5\xab\x83\xda?w\x83\xbc\xcf\xd20(L&b\xed\x8c\x1d\x1a\x9fd\x99H\x9e\x82\x10\xea\x05\xf8\xff\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\xa6\x8c\x05n\x83\x83\x12+\x16\xc1\x00\x04\x00\x00\x13:o\x0f\x1fB\xa4\x00wB\x92h\xde\xfal3\x88e\x04J\\\x00D\xae`\x8e\xadd\xa8;\xee\xc4K\xe8]\x84\x90\xb8d\xfb\x95\xb3\xe9(x_\x80]\xadW\xd5\xa9\xaa\x03\x9c6\xa9\xc4\x01\x03\xea\xe5\x90\x85\x16\xb0DV\x13\xf4\xaa\x01\xf0\x8f\x02\xc2\xc8\x9b\x03\x1f\xd7\xdbN\\\xc0\xcd?Pg\xd5q\x13\xbd \xfa\xab\xccJK\x11\\\x16~#P.\xc9K\x15r\x04\xd9Z;\xc0\x8dOze\x96\xe9\xc3\x93\xed\x94.\xc2\xa0\x1fU#\x96\xe6\xbeC\xfa\x03/\x8b\x0e2\xec\x96v\x9b/.\v\x9e\x80\x18s\xae.\xf4\x14KS`\x87\x8b4\t\x00\x87{\xa8@e\xbfe\xeb\xee\xa2\xe72\xb8Q:\x9f\xc2b\x897\xbe\r\x04\xdf\xe2\xc0\xf0FV\'m\xcbm\x80%\xfc\x9e\x9f\x87\x80A\xbe\xc2\x00\x00\x00\x00\x00\x006\x96\xbb\x9f\x85\x98\xbb\xbc;\xaa\x97c\xfe\x82jz&t\xa7\xc4\xcd\xb0\b9G\xcag\fY\xe6\r\xcdT\xd3\x1c(\xef\xc0\x038\xbd\xdd\xd9\xc9\x93a]q\xd2\x9b\a\x1e\xf8\xc3\"\xc8:\xb8$\x9f\'\xea\x1f\xfa\xf3Xa\trB-\xf2g\xe6Z\xd5F\xd2\x80\xe0\x99\"\xc12\xe8\b\xc58\x00') syz_emit_ethernet(0x16e, &(0x7f0000000940)=ANY=[@ANYBLOB="8f6f77ede655ffffffffffff86dd605f6ad901383a00000000000000000000000000000000003a940b83e374555f9560cbad8d2de37d04000108660000001d0100000000000005020800c2040000000300000000000001000540680000002e000a28660000006718000000000000010700000000000000c2040000010025b28dc6a7962d747c46"]) pledge(&(0x7f0000000780)='\x00\x83\xb0\xaaXC8\x95`\xe9$~\xb8\xe2M\v\xaf\xa0y\'\xfb\xb4A\xba\xb4\xd8\"\xf6\xce\x1c,F\tzdTur\xfap\xac\xb3P\xd3/d\x11\x8a\xd3\xbf\"\xac-\xa7\f\x18KP\x99\xe34\xe8O\xfe\x82\xecXHZ;C\xe6\xda\xa6\xefn[\xf7\xcc\xa3 \xe8\x80\v\xb9\xc0\xcc\xaf}8\"\xa6\x7f\x9e\x16-k\xba\xfdu\xca\xd5a\xe1\xbf\x10\x03\xa2x-\x1fL0`\x12\x80T\xf3\xca,)\th\x82F\xf7\x197\xd7\x1d\xbf\x95G\xf1\x93h\xf1\xc9H:\xfc\xd0\xc0\x17lVFQb\a\xc5$\x02\x9b\xf9\xd6\f3f\x9b\xa1(\x04\x8a\xffmmyX\xfb\x04\xa1\x0f\xcd3\xa0U\xd1n?\xf4\xe6W\x03J`~?\xc2=\x00\x942yPv:\r\xfa\\\xbb\xf2\x02\x1af\x93\x01\xda\a\x1a\x81\xd3L\x98\'\x11 \xf8\x88\x93\xb9\x8bIyhE\xbc\xa5\xd5\x00Y\xb8g\xe2\xc6\xc9\xf3\x8a\xb4\x84\x9a;96<\xa42\x97\xef\x93\xb7_^x\x02n\xfd|\xcfvZ\x90\x1d,\xed\x96g\\\xef\xd9\xa9xY\xc0\xad\xacM&\xa0-\x17U\x16\xf1\tS5\x1e\x12uz\xceZ|<\x9a\xb60/\xd1\x06\x9eG-j\b\xf3\xcc\xe3`\xca$\x01\xd4\tY\xb0z%\x1dl\xe0*R34\x1e\x8d4`}\xa5\xb3\xadc^\xe5\x9f\x94\xc0\xbf\x15\x7f(t\xe9\xaaR\x03\xd4\xf5\xf2\xc5\x10\xe9kd\aX\f\xa3\x06\xca\xcb\x9b\xeeqj\x10\xc4\x81\xb1\xb0#\xb67\x80?2\x0e\xa5\x1d\x93\x83\"\xe0@\x0fC\xfd\x89\x8a1\xa8;r\x85\xb2\xc4r\x8f\x161uE\xbe\xb6\n', &(0x7f0000000180)='\x00') r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$DIOCRADDTABLES(r0, 0xc450443d, &(0x7f0000000300)={{'./file0\x00', './file0\x00', 0x8, 0x7}, 0x0, 0x428, 0x0, 0x6, 0x3, 0x200, 0xd, 0x2, 0x8}) r1 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) ioctl$DIOCRADDADDRS(r1, 0xc4504443, &(0x7f0000000e00)={{'./file0\x00', './file0\x00', 0x2, 0x10}, &(0x7f0000000040)=[{@remote={0xac, 0x14, 0x0}, '\x00', './file0\x00', 0x0, 0x1, 0x2, 0x0, 0x6, 0x4}, {@local={0xac, 0x14, 0x0}, '\x00', './file0/file0\x00', 0x4, 0x2, 0x4, 0x9, 0x3c, 0x6, 0xba}, {@remote={0xac, 0x14, 0x0}, '\x00', './file0\x00', 0x2, 0x1, 0x1a, 0xf9, 0x6, 0x1, 0x1}, {@broadcast, '\x00', './file0/file0\x00', 0x4, 0x9, 0x2, 0x0, 0x11, 0x7, 0x6}, {@local={0xac, 0x14, 0x0}, '\x00', './file0\x00', 0xfffffff7, 0x400, 0x0, 0x7, 0x73, 0x2, 0x9}], 0x2905, 0x5, 0xfffffffb, 0xee9c, 0x5, 0x2, 0x48, 0x2}) ioctl$TIOCSETA(r1, 0xcd604404, &(0x7f0000000240)={0x1, 0x2, 0x7, 0x2f, "201800", 0xfffffff9, 0x40000002}) 3.57210719s ago: executing program 1 (id=287): symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') unveil(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='c\x00') unveil(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='w\x00') r0 = socket$inet(0x2, 0x3, 0x0) close(r0) r1 = socket$inet(0x2, 0x3, 0x0) setsockopt$inet_opts(r1, 0x0, 0x200000000000a, &(0x7f0000000140)='\x00', 0x1) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f00000001c0), 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x14) 3.56884353s ago: executing program 1 (id=288): sysctl$kern(0x0, 0x0, &(0x7f0000000100)="71f91e3471ac0058bc", 0x0, 0x0, 0x0) setuid(0xee01) acct(0x0) r0 = socket(0x18, 0x1, 0x0) getsockopt(r0, 0x29, 0x23, 0x0, 0x0) sysctl$kern(&(0x7f0000000100)={0x1, 0x50}, 0x3, &(0x7f00000011c0)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xfe10, 0x0, 0xfffffffffffffff9) sysctl$kern(&(0x7f0000000000)={0x1, 0x33}, 0x2, &(0x7f0000000040)="d38cf4", &(0x7f00000000c0)=0x3, &(0x7f0000000140)="ee720a65f69091424ecd2c5fac9fb914f11dab71c5d70ee17611a37930f84b21cded40313fedce1bb1563365f1dcbd8bef0ef5123f8a390afa3f163e498a9a2f7ffa61144d57b8398b8cf0e9b9d0be056adfa900923406fa48d585362944773699f84765e6c330af1bc366ae66016cc64c7c4ec06df2980d369a65267b604ca3", 0x80) 3.567673029s ago: executing program 7 (id=289): r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DIOCRGETTABLES(r0, 0xc450443f, &(0x7f0000001100)={{'./file0\x00', './file0\x00', 0x24, 0x7f}, &(0x7f0000000040)=[{'./file0\x00', './file0\x00', 0x0, 0x2}, {'./file0\x00', './file0\x00', 0x10, 0xa1}, {'./file0\x00', './file0\x00', 0x23, 0x4}, {'./file0\x00', './file0\x00', 0x40, 0x6}], 0x56cb, 0x4, 0x8, 0x7, 0x100, 0x80000000, 0x5c, 0xd9}) r1 = socket$unix(0x1, 0x2, 0x0) getsockname$unix(r1, &(0x7f0000001580)=@abs, &(0x7f00000015c0)=0x8) setsockopt(r1, 0x6, 0x200, &(0x7f0000001600)="b750bcc3becf4c01c0b878f0fac54fa30dee1067fdf2ec55604a2a87434b052fccddcd412959f469ef35e75817e0ea597fa9849711ce104aeb69ee3041f7e29957fee5e48a1c3692b7ccf22cb4b4a53e349946e43f4816cc12f45ab57c8a45eef2a0626272a6e32f7bd1e2fcc9d992aae6cd050239c50d356ec383499111a277d3efb95ff266c5a1585d98f83e0966756941a3f0193bd1f7fe04bd1a4d6b38807fc34e35507378111cf5c7b540", 0xad) ioctl$FIONBIO(r0, 0x8004667e, &(0x7f00000016c0)=0x7f) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) closefrom(r0) sendto$unix(r1, &(0x7f0000001700)="a7b15071df2e78ee012c6dcbf49c35c03f07ca3ad511a379d51e65f44dd8c33de8dd77066883fa525ddab244536c79676eafd2a69e3d61bc393288bffd55a5938a54", 0x42, 0x2, &(0x7f0000001780)=@abs={0x76, 0x0, 0x0, 0x0}, 0x8) r2 = openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f00000017c0), 0x40000, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(r2, 0xc01864c1, &(0x7f0000001800)={0x0, 0x1, 0xffffffffffffffff}) ioctl$DIOCMAP(r1, 0xc0106477, &(0x7f0000001880)={&(0x7f0000001840)='./file0\x00', r3}) ioctl$FIONBIO(r2, 0x8004667e, &(0x7f00000018c0)=0x2) ioctl$DIOCSTOP(r2, 0x20004402) close(r2) ioctl$VMM_IOC_CREATE(r2, 0xca605601, &(0x7f0000001900)={0x10, 0xc5f1, [{&(0x7f0000ff4000/0xc000)=nil, &(0x7f0000ff7000/0x2000)=nil, 0x82c000000000000}, {&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x1}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff3000/0x4000)=nil, 0x9, 0x1}, {&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000001000/0xb000)=nil, 0x10000, 0x2}, {&(0x7f000000b000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0xac7b}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f000000b000/0x2000)=nil, 0x3ff}, {&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x400, 0x1}, {&(0x7f000000b000/0x2000)=nil, &(0x7f0000ff7000/0x1000)=nil, 0x0, 0x2}, {&(0x7f0000ffb000/0x1000)=nil, &(0x7f0000005000/0x3000)=nil, 0x2, 0x1}, {&(0x7f0000003000/0x5000)=nil, &(0x7f0000004000/0x2000)=nil, 0x1}, {&(0x7f0000008000/0x1000)=nil, &(0x7f0000003000/0x2000)=nil, 0x6, 0x2}, {&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff5000/0x2000)=nil, 0x8, 0x2}, {&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000001000/0x1000)=nil, 0x3ff, 0x1}, {&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x5d, 0x1}, {&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff4000/0x2000)=nil, 0x9}], './file0\x00', 0x80, 0xa}) ioctl$DIOCADDQUEUE(r0, 0xc148445d, &(0x7f0000002380)={0x5, 0x4697, {'\x00', './file0\x00', './file0\x00', './file0\x00', {{0x9, 0x9}, {0x80, 0x1ff}, 0x3}, {{0x5e3, 0x7}, {0x4}, 0x3}, {{0x5049cbc2, 0x6}, {0x2, 0x2}, 0x418}, {0x5, 0x3, 0x1, 0x6b03}, 0x0, 0x80000000, 0x10, 0x3, 0x4}}) connect(r2, &(0x7f0000002500)=@in6={0x1c, 0x18, 0x1, 0x1, "1302d445c2c5acd3dd4ab5ebdee284a1", 0x43}, 0x1c) ioctl$DIOCADDQUEUE(r3, 0xc148445d, &(0x7f0000002540)={0x4, 0x9, {'\x00', './file0\x00', './file0\x00', './file1\x00', {{0x1, 0x80000001}, {0x6, 0x1397}, 0x7fffffff}, {{0x7, 0x5}, {0x3, 0x5992}}, {{0x2, 0x4}, {0x5, 0x1000}, 0x464}, {0x556, 0x3, 0x1, 0x5}, 0x0, 0x4b, 0x80000000, 0x8, 0xfffff000}}) getsockopt$sock_timeval(r1, 0xffff, 0x1006, &(0x7f00000026c0), &(0x7f0000002700)=0x10) getpeername(0xffffffffffffff9c, &(0x7f0000002740)=@un=@abs, &(0x7f0000002780)=0x8) utimensat(r2, &(0x7f00000027c0)='./file0\x00', &(0x7f0000002800)={{0x0, 0x1000}, {0xd6fe, 0x1000}}, 0x0) closefrom(r1) getpeername$unix(r1, &(0x7f0000002840)=@abs, &(0x7f0000002880)=0x8) fstatat(r3, &(0x7f00000028c0)='./file1\x00', &(0x7f0000002900), 0x6) ioctl$DIOCSETIFFLAG(r3, 0xc0284459, &(0x7f0000002a80)={'./file0\x00', &(0x7f0000002980)=""/224, 0x7fffffff, 0xfffffff9, 0x8, 0x3}) ioctl$DIOCRGETTSTATS(r2, 0xc4504440, &(0x7f0000004c00)={{'./file0\x00', './file0\x00', 0x11, 0xe}, &(0x7f0000002ac0)=[{'./file0\x00', './file1\x00', 0x10, 0x8}, {'./file0\x00', './file0\x00', 0x3e, 0x26}, {'./file0\x00', './file1\x00'}, {'./file0\x00', './file0\x00', 0xa, 0xff}, {'./file1\x00', './file0\x00', 0x58, 0x6}, {'./file1\x00', './file1\x00', 0x3c, 0x2}, {'./file0\x00', './file1\x00', 0x2, 0x1}, {'./file0\x00', './file1\x00', 0x41, 0xb}], 0x0, 0x8, 0x1, 0xd5b7, 0x3, 0x5, 0x99, 0x7}) r4 = setsid() fcntl$lock(r0, 0x8, &(0x7f0000005080)={0x3, 0x7fffffffffffffff, r4, 0x3, 0x1}) ioctl$DIOCCLRIFFLAG(r3, 0xc028445a, &(0x7f0000005180)={'./file0\x00', &(0x7f00000050c0)=""/161, 0x9, 0x7fe8, 0x400, 0x3}) 3.456065009s ago: executing program 1 (id=290): mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x285b9c) r0 = socket(0x2, 0x8002, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r1, 0x0, 0x1, &(0x7f00000001c0)="fe0cc0c5c53b2191f7a1a54f46b96b06d93edb2216c9e7503ee3bd0d", 0x1c) select(0x40, &(0x7f0000000180)={0xfffffffffffffffc, 0x44809e9d, 0x20000c, 0x9, 0x400002009, 0x210, 0x3, 0x3}, 0x0, 0x0, 0x0) r2 = kqueue() kevent(r2, &(0x7f00000000c0), 0x7ff, &(0x7f00000001c0), 0x15, 0x0) r3 = open(&(0x7f0000000080)='./file0\x00', 0x10, 0xe0) r4 = socket$unix(0x1, 0x5, 0x0) setsockopt$sock_linger(r4, 0xffff, 0x80, &(0x7f0000000100)={0xffffffff, 0x7fffffff}, 0x8) ioctl$FIONBIO(r3, 0x82907003, &(0x7f0000000140)=0x2) ioctl$FIONBIO(r3, 0x82907003, &(0x7f0000000140)=0x1) r5 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) mlock(&(0x7f00007ba000/0x3000)=nil, 0x3000) r6 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DIOCSETHOSTID(r6, 0xc0044456, 0x0) openat$pf(0xffffffffffffff9c, 0x0, 0x8000, 0x0) r7 = openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket(0x10, 0x1, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$DIOCSETLIMIT(r7, 0xc0084428, &(0x7f00000000c0)={0x4}) closefrom(r5) 3.455644017s ago: executing program 6 (id=291): r0 = socket$inet6(0x18, 0x2, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1000, &(0x7f0000000140)=0x5, 0x4) (async) mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2) (async) bind$inet6(r0, &(0x7f0000000040)={0x1c, 0x18, 0x0, 0x7, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00', 0x2}, 0x1c) (async) r1 = socket$inet6(0x18, 0x2, 0x0) setsockopt$sock_int(r1, 0xffff, 0x1000, &(0x7f0000000140)=0x5, 0x4) (async) r2 = socket$inet6(0x18, 0x2, 0x0) r3 = accept$inet(0xffffffffffffff9c, &(0x7f00000000c0), &(0x7f0000000180)=0x10) connect$inet(r3, &(0x7f00000001c0)={0x10, 0x2, 0x0, 0x1}, 0x10) (async) setsockopt$sock_int(r2, 0xffff, 0x1000, &(0x7f0000000140)=0x5, 0x4) (async) r4 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$DIOCGETLIMIT(r4, 0xc0084427, &(0x7f0000000080)={0x7, 0xf}) openat$pf(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) (async) bind$inet6(r1, &(0x7f0000000100)={0x1c, 0x18, 0x3, 0x8, "000000000000000051ef4222cf3b07cb", 0x6}, 0x1c) (async) bind$inet6(r1, &(0x7f0000000040)={0x1c, 0x18, 0x0, 0x4, "00000000fe000000000200008000", 0xc}, 0x1c) (async) listen(r0, 0x10000) 3.455318529s ago: executing program 6 (id=292): r0 = syz_open_pts() ioctl$FIONBIO(r0, 0x8004667e, &(0x7f00000000c0)=0x2) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100)="079facfaaed69aea4dc561c3b736feac0a2a76087be8b904ddc6f90b66e0f69b6dfba683cd48224cf0ccc2a39b0f79389a2bd9b211424a22ca014b9231e253e257706c75b3f320166475c72455021edf575fab8b5d65b8d261c87c3ccc4e784ea7462f3723edabb8e26d27acb1797e2ef4db27270aff4ad94c9d7d1354b48ce2d1ea85c4c9011e08b71a0b2d9f6601b558c438ddbfc753854f2074eaae669c4ddecd262f86735db90ee9d1220eaa3aeb6dfd59e67bd8321f731548ae7325f9b55cca7f710df617b22c4b0d", 0xff46}], 0x1) setrlimit(0x8, &(0x7f0000000000)={0x45, 0x62}) r1 = syz_open_pts() close(r1) syz_open_pts() ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000200)={0x1200, 0x9, 0x3, 0x8, "1fb70004001a7c0000fe9b64001500000000cab4", 0x5}) writev(r1, &(0x7f0000000240)=[{&(0x7f0000000280)="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", 0x25d}], 0x1) write(r0, &(0x7f0000000080)="fa", 0x1) 3.455098122s ago: executing program 6 (id=293): r0 = socket$inet(0x2, 0x3, 0x2) getsockopt(r0, 0x0, 0x69, 0x0, 0x0) r1 = openat$speaker(0xffffffffffffff9c, &(0x7f0000001280), 0x2, 0x0) pwritev(r1, &(0x7f00000008c0), 0x0, 0x5) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x10000, 0x0) symlinkat(&(0x7f0000000080)='./file0\x00', r2, &(0x7f0000000100)='./file0\x00') mknod(&(0x7f0000000000)='./file0\x00', 0x6000, 0x400) chroot(&(0x7f0000000040)='./file0\x00') lseek(0xffffffffffffffff, 0x0, 0x2) 2.851664255s ago: executing program 0 (id=294): sysctl$net_inet_tcp(&(0x7f00000000c0)={0x4, 0x2, 0x6, 0x6}, 0x4, 0xffffffffffffffff, &(0x7f0000000000)=0xffffffffffffff29, 0x0, 0x0) 2.851264809s ago: executing program 1 (id=295): chmod(&(0x7f0000000280)='.\x00', 0x35f) setuid(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0xc4) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0xc4) chdir(&(0x7f0000000340)='./file0\x00') chmod(&(0x7f0000000380)='.\x00', 0x35e) (async) chmod(&(0x7f0000000380)='.\x00', 0x35e) r0 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) syz_emit_ethernet(0x1000e, &(0x7f00000004c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff08004500ffb0006700000011907800000000ac14ffff4e204e23", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="21df9c9663b1a2056636c830d69e40b44c5a96ff738d44ca818faf7af2452bf99b18b6976f1b89728b31a6c21c8203fd8e2f3d23bcddf2bd4091b1addf800cb731f881874e8e01ab64ef887e5bb922941bb9b185b810733e535fa382568914c29184dc86dedfd5cafc86a92ef830ba1d402a1838e7607a6042966192559d3d39b818c45cf616797d012f994ad814512f507f87d71f67d4d7a878caa34c5e7ca49c4e09e38d8e39053c6bd69b9dbe86b84c1c2e05df00b524f9038a58fc70"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$kern(&(0x7f0000000440)={0x1, 0x38}, 0x2, 0x0, 0x0, 0x0, 0x0) ioctl$WSMUXIO_REMOVE_DEVICE(0xffffffffffffffff, 0x80085762, &(0x7f00000003c0)={0x1}) (async) ioctl$WSMUXIO_REMOVE_DEVICE(0xffffffffffffffff, 0x80085762, &(0x7f00000003c0)={0x1}) r1 = socket(0x18, 0xc003, 0x3a) setsockopt(r1, 0x29, 0x6c, &(0x7f0000000440), 0x4) (async) setsockopt(r1, 0x29, 0x6c, &(0x7f0000000440), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0x66, &(0x7f0000000480)={0x0, 0x0, 0x10}, 0x41) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) openat$pci(0xffffffffffffff9c, &(0x7f0000000400), 0x10000, 0x0) (async) r4 = openat$pci(0xffffffffffffff9c, &(0x7f0000000400), 0x10000, 0x0) mquery(&(0x7f0000ff4000/0x1000)=nil, 0x1000, 0x4, 0x10, r4, 0x100) (async) mquery(&(0x7f0000ff4000/0x1000)=nil, 0x1000, 0x4, 0x10, r4, 0x100) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000100)="2ab5f449502e", 0x6}], 0x1) read(r3, &(0x7f0000000140)=""/245, 0xf5) ioctl$WSMOUSEIO_SETPARAMS(r0, 0x80105727, &(0x7f0000000300)={&(0x7f00000000c0)}) 1.239986367s ago: executing program 3 (id=33): msync(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x37f093ccf39f2788) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = getsid(0xffffffffffffffff) getresuid(&(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)=0x0) fstatat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2) r4 = getpgid(0x0) r5 = getuid() getgroups(0x5, &(0x7f0000000300)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff]) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffff9c, 0xc00c642e, &(0x7f0000000340)={0x4, 0x8, 0xffffffffffffff9c}) r9 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000380), 0x10, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffff9c, 0xc00c642d, &(0x7f00000003c0)={0x1, 0x1, 0xffffffffffffffff}) r11 = openat$null(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xca605601, &(0x7f0000000440)={0x10, 0x8, [{&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0xb1c9, 0x1}, {&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x4, 0x1}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x95}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, 0x8}, {&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x6}, {&(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x7}, {&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x51, 0x1}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x3, 0x2}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x8, 0x1}, {&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff7000/0x3000)=nil, 0xcc5, 0x1}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff4000/0xc000)=nil, 0x429, 0x1}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x4, 0x1}, {&(0x7f0000ff3000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x5}, {&(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x3, 0x2}, {&(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff2000/0x1000)=nil, 0x9, 0x1}, {&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x9}], './file0\x00', 0x9, 0x3, 0x0, [], 0xffffffffffffffff}) r13 = open$dir(&(0x7f0000000ec0)='./file0\x00', 0x100, 0x20) r14 = openat$dri(0xffffffffffffff9c, &(0x7f0000000f00)='/dev/dri/card0\x00', 0x80, 0x0) r15 = setsid() getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000f40)={0x0}, 0xc) fstat(0xffffffffffffff9c, &(0x7f0000000f80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r18 = getuid() lstat(&(0x7f0000001000)='./file0\x00', &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$unix(r0, &(0x7f0000001180)={&(0x7f0000000040)=@file={0x0, 0x1, './file0\x00'}, 0xa, &(0x7f0000000140)=[{&(0x7f0000000080)="11d1d19c1aada68ae44e489879e2277c1165486ca898b76fb9dfcb7686385b33f5dd18059cff089cf03b3ad79dfd9f18229c731202f0ce6f52c90d7878dbfaf6fcb0a36ad9315316fb9beacf0fb7995b10e426ca39eb6b204e8b133201614ceebdf8e406e42b5f18ac964ab634b0bc57a911cfbc0c9e536f78fc486d81d5c05febbc4913d0c0ef92854d6e9958a70233d78641d9531a6b2e269eab0f6dda6d4f2862bf42ed66ac688c466ab371b41f5d", 0xb0}], 0x1, &(0x7f00000010c0)=[@cred={0x18, 0xffff, 0x0, r1, r2, r3}, @cred={0x18, 0xffff, 0x0, r4, r5, r6}, @rights={0x18, 0xffff, 0x1, [r8, r9, r10]}, @rights={0x20, 0xffff, 0x1, [0xffffffffffffff9c, r11, r12, r13, r14]}, @cred={0x18, 0xffff, 0x0, r15, r16, r17}, @cred={0x18, 0xffff, 0x0, 0xffffffffffffffff, r18, r19}], 0x98, 0x1}, 0x2) fchownat(r8, &(0x7f00000011c0)='./file0\x00', r18, r17, 0x0) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r8, 0xc00464be, &(0x7f0000001200)={0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r10, 0xc01064ac, &(0x7f0000001340)={r20, 0xc7, &(0x7f0000001240)=""/199}) chown(&(0x7f0000001380)='./file1\x00', r16, r7) ioctl$AUDIO_GETDEV(r10, 0x4030411b, &(0x7f00000013c0)) pipe(&(0x7f0000001400)={0xffffffffffffffff}) closefrom(r21) syz_extract_tcp_res$synack(&(0x7f0000001440), 0x1, 0x0) mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) 1.220178484s ago: executing program 5 (id=296): ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x4, 0xfd, 0x0, 0xfffffffe}, {0x2, 0x0, 0x0, 0xffffffff}]}) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) execve(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000340)={'tap', 0x0}) r1 = socket(0x2, 0x1, 0x0) ioctl$FIONREAD(r1, 0x8040691a, &(0x7f0000000380)) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000180)={0x2, &(0x7f00000001c0)=[{0x61, 0x4, 0x2, 0x8}, {0x6, 0x2d, 0x1, 0x5}]}) ioctl$BIOCSRSIG(r0, 0x80044272, &(0x7f0000000200)=0x6c) sysctl$kern(&(0x7f00000000c0)={0x1, 0x33}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x95, 0x0, 0xffffffffffffffb8) 1.219040171s ago: executing program 6 (id=297): syz_emit_ethernet(0x42, &(0x7f0000000300)=ANY=[@ANYBLOB="b905f0ffffff000000000000080d450000340000000100009078ac1400bbffffe7ff05009078ffffffff4622000d0066000606038000ac1400aaac1400bb00000000fae97e3404eae5baef7135effa67f6ae661ecef19892d118df4ac449506d7cbaeed3a7e26072c900694c0d8fbab3d744b9ab9473996026f0625aa4dfb7ed333fe4e9ea6f80b2351c0283c319aa5f6422906e6fba46c9d936a5b4151f4e9c4db9fabfb8241691c2db3468e56a753bcfab340a116b5ccd7c0b20b8b09baea7a1"]) r0 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000180)={0x80000000, 0xffff63de, 0x5, 0x2, 0x8, 0x3, 0x44, 0x10, [{0x5, 0x3, 0xfffff115, 0x8}, {0x3, 0xffffffff, 0x6, 0xfff}, {0x2001, 0x4baa, 0x3, 0x9}, {0x4, 0xe2, 0x0, 0x100}, {0x3, 0x2000007, 0x5, 0x84}, {0x7890, 0xffff, 0x8, 0x2}, {0x4, 0x800, 0x3, 0xfffffffa}, {0x207, 0xffffffff, 0x28000, 0xffffe2e9}, {0x9, 0x1000, 0x6, 0x7ffe}, {0x5, 0x1, 0x6, 0x8bfd}, {0x800, 0x0, 0x8, 0x6}, {0x10000, 0x0, 0x800000, 0xa6a}, {0x401, 0x4, 0x400009, 0xa1}, {0x3, 0x6e2, 0x2, 0x1}, {0x3, 0x101, 0x3, 0x9}, {0x9be2, 0x1, 0x2, 0x400}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$WSMOUSEIO_SETPARAMS(r0, 0x80105728, &(0x7f00000002c0)={0x0}) getrusage(0x0, &(0x7f00000000c0)) syz_emit_ethernet(0x42, &(0x7f0000000300)=ANY=[@ANYBLOB="b905f0ffffff000000000000080d450000340000000100009078ac1400bbffffe7ff05009078ffffffff4622000d0066000606038000ac1400aaac1400bb00000000fae97e3404eae5baef7135effa67f6ae661ecef19892d118df4ac449506d7cbaeed3a7e26072c900694c0d8fbab3d744b9ab9473996026f0625aa4dfb7ed333fe4e9ea6f80b2351c0283c319aa5f6422906e6fba46c9d936a5b4151f4e9c4db9fabfb8241691c2db3468e56a753bcfab340a116b5ccd7c0b20b8b09baea7a1"]) (async) openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) (async) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000180)={0x80000000, 0xffff63de, 0x5, 0x2, 0x8, 0x3, 0x44, 0x10, [{0x5, 0x3, 0xfffff115, 0x8}, {0x3, 0xffffffff, 0x6, 0xfff}, {0x2001, 0x4baa, 0x3, 0x9}, {0x4, 0xe2, 0x0, 0x100}, {0x3, 0x2000007, 0x5, 0x84}, {0x7890, 0xffff, 0x8, 0x2}, {0x4, 0x800, 0x3, 0xfffffffa}, {0x207, 0xffffffff, 0x28000, 0xffffe2e9}, {0x9, 0x1000, 0x6, 0x7ffe}, {0x5, 0x1, 0x6, 0x8bfd}, {0x800, 0x0, 0x8, 0x6}, {0x10000, 0x0, 0x800000, 0xa6a}, {0x401, 0x4, 0x400009, 0xa1}, {0x3, 0x6e2, 0x2, 0x1}, {0x3, 0x101, 0x3, 0x9}, {0x9be2, 0x1, 0x2, 0x400}]}) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) (async) ioctl$WSMOUSEIO_SETPARAMS(r0, 0x80105728, &(0x7f00000002c0)={0x0}) (async) getrusage(0x0, &(0x7f00000000c0)) (async) 1.210141972s ago: executing program 7 (id=298): pledge(0x0, &(0x7f0000000b40)='tty \x00\x02\x00!\a\x9bp^|#\xcbhl\x97\xa3_\xbc\x04\x9d!\xd9\x9f\x9f\xb4\x96\x13\x12\xe0\r\xe7\xb9E\b\x00\x00\x00l\xaaY\xe1Q<\x19\xc0\xf6Yf\x9au^\xa0\xc9j\xdd-I\x01R\x00w\xf7\x15\x04\xa6\x82aY\x1d\xd7\f>Y\x06\"\xad\xb6\x88_\xeb\at\x91\xd3\xbf\xea\xddt\xe0\bt\x06S,\xdbH\xa7-\xaaw\xcet\x04t\xc5\xa9e\xa9\xf6\x1b\x8e\x05\x86\x93IsC\xb9ul\xaeu\x94\x9b\xaf\x04\xc4\x03\"F\x8f\xd5\xe8\r\x8d\xa1\x00\xcc\xd7\xa0\xe1\xeb\xc1>\xbd\t\xc8\x15\v\xb0, \xee\xa4\xa6\xb9a\x01&\xadrj\xd5\xc26\xe0\xbf\xa0\x1es\x01=\xdbd\xf0?=\x8afcJ\x8eYEn\xd4<\x00\xec\xe4^\x00\x00\x00\xca\x90\xfa\x98\xc9gty\xce\xab\xd2\xa1\x85E\xe4\xa9\xd5\xab\x83\xda?w\x83\xbc\xcf\xd20(L&b\xed\x8c\x1d\x1a\x9fd\x99H\x9e\x82\x10\xea\x05\xf8\xff\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\xa6\x8c\x05n\x83\x83\x12+\x16\xc1\x00\x04\x00\x00\x13:o\x0f\x1fB\xa4\x00wB\x92h\xde\xfal3\x88e\x04J\\\x00D\xae`\x8e\xadd\xa8;\xee\xc4K\xe8]\x84\x90\xb8d\xfb\x95\xb3\xe9(x_\x80]\xadW\xd5\xa9\xaa\x03\x9c6\xa9\xc4\x01\x03\xea\xe5\x90\x85\x16\xb0DV\x13\xf4\xaa\x01\xf0\x8f\x02\xc2\xc8\x9b\x03\x1f\xd7\xdbN\\\xc0\xcd?Pg\xd5q\x13\xbd \xfa\xab\xccJK\x11\\\x16~#P.\xc9K\x15r\x04\xd9Z;\xc0\x8dOze\x96\xe9\xc3\x93\xed\x94.\xc2\xa0\x1fU#\x96\xe6\xbeC\xfa\x03/\x8b\x0e2\xec\x96v\x9b/.\v\x9e\x80\x18s\xae.\xf4\x14KS`\x87\x8b4\t\x00\x87{\xa8@e\xbfe\xeb\xee\xa2\xe72\xb8Q:\x9f\xc2b\x897\xbe\r\x04\xdf\xe2\xc0\xf0FV\'m\xcbm\x80%\xfc\x9e\x9f\x87\x80A\xbe\xc2\x00\x00\x00\x00\x00\x006\x96\xbb\x9f\x85\x98\xbb\xbc;\xaa\x97c\xfe\x82jz&t\xa7\xc4\xcd\xb0\b9G\xcag\fY\xe6\r\xcdT\xd3\x1c(\xef\xc0\x038\xbd\xdd\xd9\xc9\x93a]q\xd2\x9b\a\x1e\xf8\xc3\"\xc8:\xb8$\x9f\'\xea\x1f\xfa\xf3Xa\trB-\xf2g\xe6Z\xd5F\xd2\x80\xe0\x99\"\xc12\xe8\b\xc58\x00') r0 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) ioctl$TIOCSETA(r0, 0xcd604404, &(0x7f0000000240)={0x1, 0x2, 0x7, 0x2f, "201800000000000003ff00", 0xfffffff9, 0x40000002}) 981.661302ms ago: executing program 0 (id=299): sysctl$hw(&(0x7f0000000080)={0x6, 0x1d}, 0x2, 0x0, 0x0, &(0x7f0000000040)='L', 0x1) r0 = openat$tty(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f00000000c0)={0xfffffff7, 0x2, 0x28, 0xe693, "d234f58b43836b1129ac1864b966e43a56c86174", 0x800000, 0x6}) 980.52639ms ago: executing program 1 (id=300): r0 = socket(0x18, 0x2, 0x0) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f00000002c0)={0x0, 0x0, {0x0, 0x10000100000001}}) setsockopt(r0, 0x1000000000029, 0xc, &(0x7f0000000300), 0x14) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x20, 0x0) kevent(0xffffffffffffff9c, &(0x7f0000000300)=[{{}, 0x0, 0x0, 0x0, 0x7}], 0x0, 0x0, 0x0, 0x0) sysctl$net_inet_ip(&(0x7f0000000340)={0x4, 0x11, 0x0, 0x2}, 0x4000000000000006, 0x0, 0x0, 0x0, 0x0) r2 = socket(0x18, 0x2, 0x0) ioctl$TIOCNOTTY(r1, 0x20007471) socketpair$unix(0x1, 0x1, 0x0, 0xfffffffffffffffe) ioctl$DIOCGETSTATE(0xffffffffffffffff, 0xc1084413, &(0x7f0000000440)={{0x0, './file1\x00', [{[@v6=@empty, @v6=@rand_addr="f197bf3911adcb15b86c8e060374d842"], [0x1, 0x40], 0x0, 0x18}, {[@v6=@loopback, @v4=@rand_addr=0x9], [0x46], 0x4, 0x14}], {{0x246, 0x48, 0xba, 0x100007ff}, 0x6543, 0x409, 0xfff00000, 0x8001, 0x8, 0x17, 0x17}, {{0x0, 0x7, 0x6, 0x5}, 0x51fe1b20, 0xc86, 0x10007, 0x4, 0x3ff, 0xf2}, @v6=@mcast2, 0x54d5, 0xa, 0x2, 0xf23b, 0x5, [[0x8, 0xffffffff], [0x3958, 0x6]], [[0xfc000002, 0x4], [0xfffffff7, 0x3]], 0xb, [0x80001d9, 0xa], 0x1, 0x18, 0x6, 0x1, 0x0, 0x3, 0xb, 0x83, 0x5, 0x8, 0x1, 0xce57}}) r3 = kqueue() kevent(r3, &(0x7f0000000580), 0x96, &(0x7f00000005c0), 0xfffa4961, 0x0) r4 = openat$pf(0xffffffffffffff9c, &(0x7f0000000600), 0x1, 0x0) ioctl$TIOCSETA(r4, 0xcd604404, &(0x7f0000000640)={0x1, 0x2, 0xf, 0x2f, "20180000000001002500", 0xfffffffb, 0xb}) ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffff9c, 0xc1045763, &(0x7f0000000180)={0x3, [{0x2, 0xfffffff3}, {0x1, 0x96}, {0x1, 0x5}, {0x2, 0x9}, {0x2}, {0x2, 0x3}, {0x4, 0x6}, {0x3, 0xfffffffd}, {0x1, 0x3}, {0x3, 0x1}, {0x3, 0x4}, {0x2, 0x6}, {0x0, 0x200}, {0x2, 0x3}, {0x1, 0x7ff}, {0x2, 0x5aff}, {0x3, 0x2d4}, {0x3, 0x7fff}, {0x1, 0xd}, {0x2, 0x4}, {0x1, 0x2}, {0x1, 0x9}, {0x1, 0x1}, {0x2, 0x8}, {0x2, 0x7fff}, {0x2, 0x9}, {0x1, 0x2}, {0x3, 0x4}, {0x1, 0x8}, {0x2, 0xfffffff9}, {0x1, 0x475}, {0x2, 0x1ff}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setsockopt(r2, 0x1000000029, 0x41, &(0x7f0000000040)="03000000", 0x4) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x62}) ioctl$DIOCSETSTATUSIF(r1, 0xc0284414, &(0x7f0000000140)={'./file0\x00', &(0x7f0000000380)=""/182, 0x5000000, 0x200, 0x1, 0x7}) 980.303559ms ago: executing program 4 (id=232): r0 = openat$speaker(0xffffffffffffff9c, &(0x7f0000001280), 0x2, 0x0) r1 = socket(0x18, 0x5001, 0x0) (async) mknod(&(0x7f00000001c0)='./file0\x00', 0x2000, 0x5901) (async, rerun: 64) open(&(0x7f0000000200)='./file0\x00', 0x80, 0x95) (async, rerun: 64) mknod(&(0x7f0000000180)='./file0\x00', 0x1100, 0x0) open(&(0x7f0000000280)='./file0\x00', 0x70e, 0x0) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x1, 0xe8) ioctl$TIOCSFLAGS(r2, 0x80047476, &(0x7f0000000300)=0xffff229b) poll(0x0, 0x0, 0x800) (async) poll(0x0, 0x0, 0x40dadcb6) setrlimit(0x8, &(0x7f0000000100)={0x42, 0x62}) r3 = syz_open_pts() close(r3) (async) r4 = syz_open_pts() setsid() (async) ioctl$TIOCSCTTY(r4, 0x20007461) (async, rerun: 32) ioctl$TIOCSETD(r3, 0x8004745f, &(0x7f0000000140)=0x1d) (async, rerun: 32) accept$unix(r1, 0x0, 0x0) (async, rerun: 64) pwritev(r0, &(0x7f0000000580)=[{&(0x7f0000000040)="47e4477bbeeb7b5702ab7f179e0147c4b1df1e2909896fcbbb914fb646887f3fc8b3afcc5247a38fb33a685b2ba97f8a0783fa3a163f026dc5d0cf58d6130a703079a6014c", 0x45}], 0x1, 0x9) (rerun: 64) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r5, 0x0, 0x200000000000b, &(0x7f0000000000)='\x00', 0x1) setsockopt$inet_opts(r5, 0x0, 0x200000000000c, &(0x7f00000000c0)="ea10070000000000", 0x8) (async) execve(&(0x7f0000000240)='./file0/file0\x00', 0x0, 0x0) 541.385485ms ago: executing program 7 (id=301): sysctl$vm(&(0x7f0000000000)={0x2, 0x8}, 0x400000ea, 0x0, 0x0, 0x0, 0x54) semget(0x0, 0x0, 0x400) (async) semget(0x0, 0x0, 0x400) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) openat$null(0xffffffffffffff9c, &(0x7f0000000140), 0x20, 0x0) socket(0x2, 0x2, 0x0) (async) r0 = socket(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000180)={0x10, 0x2, 0x2, 0x200000e3}, 0x10) socket(0x2, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0xffff, 0x1000, &(0x7f00000001c0)=0x2, 0x4) setsockopt$sock_int(r0, 0xffff, 0x1023, &(0x7f0000000200)=0x6, 0x4) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) (async) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) poll(&(0x7f0000000100)=[{0xffffffffffffffff, 0x1}], 0x1, 0x3) getsid(0xffffffffffffffff) (async) getsid(0xffffffffffffffff) r1 = openat$dri(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dri/renderD128\x00', 0x40000, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r1, 0x40046402, &(0x7f00000000c0)) 532.074763ms ago: executing program 0 (id=302): munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mquery(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x0, 0xffffffffffffffff, 0x81) ktrace(&(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x2, 0x100, 0x0) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) mknod(&(0x7f0000000280)='./file0\x00', 0x0, 0x7) r0 = shmget$private(0x0, 0x4000, 0x687, &(0x7f0000ffc000/0x4000)=nil) r1 = shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x3000) shmdt(r1) r2 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$DIOCRADDTABLES(r2, 0xc450443d, &(0x7f0000000700)={{'./file1\x00', './file0\x00', 0x66, 0x5a}, &(0x7f00000002c0)=[{'./file0\x00', './file0\x00', 0x31, 0x6e}], 0x5, 0x1, 0xffffff7f, 0xa7a8, 0x6, 0x0, 0x62, 0xc}) chroot(&(0x7f0000000080)='./file0\x00') 529.521429ms ago: executing program 1 (id=303): ioctl$DIOCRCLRTSTATS(0xffffffffffffffff, 0xc4504441, &(0x7f0000000000)={{'./file0\x00', './file0\x00', 0x0, 0x3}, 0x0, 0x428, 0x0, 0x8, 0xb, 0x4000400, 0x200005, 0x40, 0xf}) ioctl$DIOCRDELADDRS(0xffffffffffffff9c, 0xc4504444, &(0x7f00000006c0)={{'./file0\x00', './file0\x00', 0x45, 0x8}, &(0x7f00000005c0)=[{@multicast2, '\x00', './file0\x00', 0x8, 0x3, 0x0, 0x3, 0xa6, 0x4, 0x7}, {@broadcast, '\x00', './file0\x00', 0x3b, 0x1, 0x1a, 0x2, 0x20, 0x1, 0x45}, {@local={0xac, 0x14, 0x0}, '\x00', './file0\x00', 0xa6, 0x3, 0x28, 0xf0, 0x1, 0x13, 0x87}, {@rand_addr=0x6, '\x00', './file0\x00', 0x3, 0x8f3c, 0x0, 0x9, 0x2, 0x5, 0xe}], 0x0, 0x4, 0x8, 0x7, 0x1, 0x6, 0x2, 0x8}) r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000480), 0x8, 0x0) ioctl$TIOCSETA(r0, 0xc450443f, &(0x7f00000004c0)={0x102f, 0x2, 0xfffffffe, 0x4, "21bec3177000", 0x6, 0x3}) syz_emit_ethernet(0x1000e, &(0x7f0000000500)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6603816a0046063000f8ff00000000000000eeff00000000fe8000000000100000000000000000aa3d259c06b1"]) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000540), 0x1, 0x0) ioctl$TIOCSETA(r1, 0xc1084425, &(0x7f0000000580)={0x1, 0x0, 0xfffffffe, 0x3, "210d0000000200000006000000000200007fffff", 0x7ffffffe}) r2 = openat$speaker(0xffffffffffffff9c, &(0x7f00000058c0), 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000b40)='./file0\x00', 0xc0e99db6de761f86, 0x0) open(&(0x7f0000000b80)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7815) r3 = open(&(0x7f0000000bc0)='./file0\x00', 0x0, 0x0) r4 = kqueue() kevent(r4, &(0x7f0000000c00), 0x100, &(0x7f0000000c40)=[{{r3}, 0xffffffffffffffff, 0x13, 0x80}, {{r3}, 0xffffffffffffffff, 0x62}], 0x6, 0x0) writev(r2, &(0x7f00000059c0)=[{&(0x7f0000005900)="8517cc1db0201d9ffe6423", 0xb}], 0x1) 223.509383ms ago: executing program 5 (id=304): unveil(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='c\x00') (async) open$dir(&(0x7f0000000380)='./file0\x00', 0x100, 0x2) (async) openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) (async) r0 = openat$pf(0xffffffffffffff9c, &(0x7f00000001c0), 0x40, 0x0) ioctl$DIOCADDQUEUE(r0, 0xc148445d, &(0x7f0000000200)={0x5, 0x1, {'\x00', './file0\x00', './file0\x00', './file0\x00', {{0x9, 0xef}, {0x0, 0x6}, 0x5}, {{0xfffffffffffffffe, 0x1}, {0x1, 0xffffffff}}, {{0x4, 0x5}, {0xf35, 0x6}, 0x8}, {0x10001, 0xf, 0x5a4f, 0x7}, 0x0, 0xf, 0x6, 0x100, 0x8}}) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) setresgid(0xffffffffffffffff, 0x0, r2) (async) openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000180), 0x10, 0x0) (async) utimensat(0xffffffffffffff9c, 0x0, 0x0, 0x2) 222.585206ms ago: executing program 6 (id=305): r0 = socket(0x2, 0x8002, 0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) select(0x40, &(0x7f0000000180)={0xfffffffffffffffb, 0x44809e9d, 0x1, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x7fd, 0x2000000000000004}, 0x0, 0x0, 0x0) r2 = kqueue() kevent(r2, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file1\x00', 0x7, 0xf9, 0x4, 0x0, 0x6, 0x3, 0x3d, 0x2, 0x1, 0x100002000640, 0x9}) mknod(&(0x7f00000000c0)='./file1\x00', 0x2000, 0x637d) r3 = open(&(0x7f0000000800)='./file1\x00', 0x8, 0x2) ioctl$FIONBIO(r3, 0x82907003, &(0x7f0000000140)=0x1) mknod(&(0x7f0000000200)='./file0\x00', 0x2000, 0x5c4a) r4 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000240), 0x80, 0x0) ioctl$VNDIOCSET(r4, 0xc0384600, &(0x7f0000000280)={&(0x7f00000002c0)='./file0\x00', 0x152, 0x0, 0x4, 0x0, 0x0}) ioctl$WSDISPLAYIO_USEFONT(r3, 0x80585750, &(0x7f0000000140)={'./file1\x00', 0x7, 0xfffffffa, 0x9, 0x1, 0x1000003, 0x105, 0x80000001, 0x2, 0x0, 0x100002000642, 0x2000000000000003}) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x412dff) r5 = open(&(0x7f0000000040)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7949) writev(r5, &(0x7f0000000080)=[{&(0x7f0000000100)='#!', 0x2}, {&(0x7f00000001c0)="9bb709", 0x3}], 0x2) ioctl$FIONBIO(r3, 0x82907003, &(0x7f0000000140)=0x2) closefrom(r1) 222.342345ms ago: executing program 0 (id=306): setrlimit(0x4, &(0x7f0000000140)={0x4, 0x1}) select(0x40, &(0x7f0000000000)={0xe, 0x6, 0x4bff, 0x66fc, 0x2, 0x2, 0x3, 0x7}, &(0x7f0000000040)={0x6, 0x4, 0x1, 0xf, 0x0, 0x8, 0x6, 0xef1}, &(0x7f0000000080)={0x8, 0x3, 0x0, 0x0, 0x506, 0x7, 0xfff, 0x7ff}, &(0x7f00000000c0)={0x7, 0x1}) pipe(0x0) 219.818881ms ago: executing program 2 (id=26): sendto$inet(0xffffffffffffffff, &(0x7f0000000000)="057f2a209a04235dae854b6a394be876e60100017ab5d4e874e3b824225c5e18c6eddd73f1891293a55e2f574a7861eb7c12a28ba59bfae5ba6ddeab8bd5bd96df78b97035348481c2b8e5735de48cf9859bdb148af45bacc11389838db5c25c61fb31714a65d1a1fd62095d4a8a7389529c2fbe97fafac320bdf8264995584448b139d1095696ca3c2c9a453fb94f137e0a5e5194f49c16c70fb0712b6c0b01a8136ba40d388e50fc5d41a35e0e4e19979c46c7ccaf", 0xb6, 0x9, &(0x7f00000000c0)={0x10, 0x2, 0x1, 0x4}, 0x10) (async) r0 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000100), 0x10, 0x0) ioctl$WSKBDIO_GETDEFAULTBELL(r0, 0x40105706, &(0x7f0000000140)) (async) ioctl$WSKBDIO_GETKEYREPEAT(r0, 0x400c5708, &(0x7f0000000180)) (async) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) (async) r3 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000200), 0x10, 0x0) ioctl$WSKBDIO_SETBACKLIGHT(r3, 0x800c5712, &(0x7f0000000240)={0x4800000}) ioctl$WSKBDIO_SETMAP(r3, 0x8010570e, &(0x7f00000002c0)={0x3, &(0x7f0000000280)=[{0x0, 0x3, 0x2, 0xffff, 0x9}, {0x9, 0x8, 0x3, 0x3, 0x4}, {0x9, 0x669, 0x9, 0x9, 0x4}]}) lseek(r0, 0x4, 0xf031b0c99eb9c95a) (async) listen(r1, 0x8) (async) r4 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000300), 0x10, 0x0) ioctl$WSKBDIO_COMPLEXBELL(r4, 0x80105702, &(0x7f0000000340)={0xffffff47, 0x1, 0x7, 0x7}) ioctl$WSKBDIO_COMPLEXBELL(r0, 0x80105702, &(0x7f0000000380)={0x2, 0xac1d, 0x4, 0xffffffff}) (async) ioctl$DIOCCLRSTATES(r1, 0x0, &(0x7f00000003c0)={{0x81, 0x14000, 0x2}, 0x0, '\x00', 0x26a, {@table={'./file0\x00', 0x0, 0x3, 0x2}, [0x4, 0x4], 0xf4, 0x9, 0x6}, {@addrmask={@v4=@rand_addr=0x9, @v4=@remote={0xac, 0x14, 0x0}, 0x0, 0x0, 0x7}, [0x5, 0x800], 0x6, 0x8, 0xbe2b}, './file0\x00', './file0\x00', 0x1, 0x80}) (async) ioctl$LIOCSFD(r2, 0x80046c7f, &(0x7f00000004c0)=r1) sendto$unix(r1, &(0x7f0000000500)="d1aed0c278276d9f3e60a80f9da93bc71dc65c3fa0515fa0784fcfe8a27ffe8644c0774d5abe2d695148189bcbc6b25ccc057e89b87c1f77f6317d907882febbe2323e5572b0af1e3655c9063ce7d39ad4448164cf439a85f80c7c0bb6cab14aa3235d9581a1c139f6749d4e580e6a54ddb418fd5aff5fa22d4b26f056c2fd9c7d2d6948a9a91ed2bee15714efddd0d969a2c0de3fddd859c4", 0x99, 0x8, 0x0, 0x0) (async) ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f00000005c0)={0xfffffc00, 0xfffff3ab, 0x7fff, 0xb9, "20c03f82451712baac5c68fadf3ae131addd36d4", 0x400, 0x7}) ioctl$DIOCCLRSTATES(r1, 0x0, &(0x7f0000000600)={{0x8, 0x7, 0x2}, 0x0, '\x00', 0x5, {@addrmask={@v6=@empty, @v6=@empty, 0x0, 0x0, 0xe}, [0x7f, 0x7], 0x9, 0x4, 0x9}, {@table={'./file0\x00', 0x0, 0x3, 0x94}, [0x7, 0x1ff], 0x3, 0x6, 0xb17}, './file0\x00', './file0\x00', 0xfff, 0x1}) pread(r4, &(0x7f0000000700)="d59eda2fd0e8a10a4d6442f8d057b1a7", 0x10, 0x3) (async) ioctl$FIONREAD(r0, 0x4004667f, &(0x7f0000000740)) (async) ioctl$TIOCSTAT(r2, 0x20007465) (async) ioctl$WSKBDIO_COMPLEXBELL(r1, 0x80105702, &(0x7f0000000780)={0x2, 0x5, 0x8, 0x98}) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f00000007c0)={0x9, 0x6, r4}) pipe2(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}, 0x10004) ioctl$FIONREAD(r6, 0x4004667f, &(0x7f0000000840)) ioctl$WSKBDIO_SETBACKLIGHT(r6, 0x800c5712, &(0x7f0000000880)={0x0, 0x1, 0xb9}) (async) ioctl$TIOCDRAIN(r5, 0x2000745e) (async) ioctl$TIOCSTOP(r6, 0x2000746f) (async) r7 = openat$vnd(0xffffffffffffff9c, &(0x7f00000008c0), 0x200, 0x0) close(r7) 219.566917ms ago: executing program 3 (id=33): msync(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x37f093ccf39f2788) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = getsid(0xffffffffffffffff) getresuid(&(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)=0x0) fstatat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2) r4 = getpgid(0x0) r5 = getuid() getgroups(0x5, &(0x7f0000000300)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff]) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffff9c, 0xc00c642e, &(0x7f0000000340)={0x4, 0x8, 0xffffffffffffff9c}) r9 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000380), 0x10, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffff9c, 0xc00c642d, &(0x7f00000003c0)={0x1, 0x1, 0xffffffffffffffff}) r11 = openat$null(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xca605601, &(0x7f0000000440)={0x10, 0x8, [{&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0xb1c9, 0x1}, {&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x4, 0x1}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x95}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, 0x8}, {&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x6}, {&(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x7}, {&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x51, 0x1}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x3, 0x2}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x8, 0x1}, {&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff7000/0x3000)=nil, 0xcc5, 0x1}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff4000/0xc000)=nil, 0x429, 0x1}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x4, 0x1}, {&(0x7f0000ff3000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x5}, {&(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x3, 0x2}, {&(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff2000/0x1000)=nil, 0x9, 0x1}, {&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x9}], './file0\x00', 0x9, 0x3, 0x0, [], 0xffffffffffffffff}) r13 = open$dir(&(0x7f0000000ec0)='./file0\x00', 0x100, 0x20) r14 = openat$dri(0xffffffffffffff9c, &(0x7f0000000f00)='/dev/dri/card0\x00', 0x80, 0x0) r15 = setsid() getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000f40)={0x0}, 0xc) fstat(0xffffffffffffff9c, &(0x7f0000000f80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r18 = getuid() lstat(&(0x7f0000001000)='./file0\x00', &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$unix(r0, &(0x7f0000001180)={&(0x7f0000000040)=@file={0x0, 0x1, './file0\x00'}, 0xa, &(0x7f0000000140)=[{&(0x7f0000000080)="11d1d19c1aada68ae44e489879e2277c1165486ca898b76fb9dfcb7686385b33f5dd18059cff089cf03b3ad79dfd9f18229c731202f0ce6f52c90d7878dbfaf6fcb0a36ad9315316fb9beacf0fb7995b10e426ca39eb6b204e8b133201614ceebdf8e406e42b5f18ac964ab634b0bc57a911cfbc0c9e536f78fc486d81d5c05febbc4913d0c0ef92854d6e9958a70233d78641d9531a6b2e269eab0f6dda6d4f2862bf42ed66ac688c466ab371b41f5d", 0xb0}], 0x1, &(0x7f00000010c0)=[@cred={0x18, 0xffff, 0x0, r1, r2, r3}, @cred={0x18, 0xffff, 0x0, r4, r5, r6}, @rights={0x18, 0xffff, 0x1, [r8, r9, r10]}, @rights={0x20, 0xffff, 0x1, [0xffffffffffffff9c, r11, r12, r13, r14]}, @cred={0x18, 0xffff, 0x0, r15, r16, r17}, @cred={0x18, 0xffff, 0x0, 0xffffffffffffffff, r18, r19}], 0x98, 0x1}, 0x2) fchownat(r8, &(0x7f00000011c0)='./file0\x00', r18, r17, 0x0) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r8, 0xc00464be, &(0x7f0000001200)={0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r10, 0xc01064ac, &(0x7f0000001340)={r20, 0xc7, &(0x7f0000001240)=""/199}) chown(&(0x7f0000001380)='./file1\x00', r16, r7) ioctl$AUDIO_GETDEV(r10, 0x4030411b, &(0x7f00000013c0)) pipe(&(0x7f0000001400)={0xffffffffffffffff}) closefrom(r21) syz_extract_tcp_res$synack(&(0x7f0000001440), 0x1, 0x0) mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) 219.440552ms ago: executing program 7 (id=307): socket$inet(0x2, 0x1, 0x9) sysctl$net_inet_etherip(&(0x7f0000000480), 0x0, 0x0, 0x0, 0x0, 0x0) 1.558023ms ago: executing program 7 (id=308): r0 = syz_open_pts() ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000100)={0x920f, 0x9, 0xffffdf82, 0xffff14b3, "08955c1cfac164eb0a07fa23b8aa291cfcf20800", 0x4000000, 0x5}) mquery(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x10, r0, 0x6) syz_emit_ethernet(0x10004, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000080086dd60db8344ffb10608feff0000010000ff80f144000020080000000000000002b8eddb001500000000008ff954af4e2209189078037f3cd254"]) syz_open_pts() ioctl$TIOCSTART(r0, 0x2000746e) 572.469µs ago: executing program 0 (id=309): mknod(&(0x7f0000000100)='./file0\x00', 0x2000, 0x200) r0 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$WSMUXIO_ADD_DEVICE(r0, 0x40047477, 0x0) syz_emit_ethernet(0x1e, &(0x7f0000000080)={@local, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x67, 0x3, 0x0, 0x6, 0x0, @multicast1, @remote={0xac, 0x14, 0x0}}}}}}) ioctl$TIOCSFLAGS(r0, 0x8004745c, &(0x7f0000000040)=0x40) open(&(0x7f0000000180)='./file0\x00', 0x1, 0x160) socket$inet(0x2, 0x4004, 0x0) 0s ago: executing program 7 (id=310): r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$DIOCXBEGIN(r0, 0xc0104451, &(0x7f0000000040)={0x1, 0x408, &(0x7f0000002480)=[{0x1, './file0/file1/../file0\x00', 0x400004}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$DIOCRCLRTABLES(r0, 0xc450443c, &(0x7f0000000080)={{'./file0/file1/../file0\x00', './file0/file1/../file0\x00', 0x3, 0xc}, 0x0, 0x0, 0x0, 0xffff, 0x2, 0x8, 0x8, 0x40, 0x7}) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sysctl$kern(&(0x7f0000000540)={0x1, 0x4d}, 0x2, &(0x7f0000000580), 0x0, 0x0, 0x0) ioctl$DIOCXCOMMIT(r1, 0xc0104452, &(0x7f0000000040)={0x0, 0x40a, 0x0}) r2 = syz_open_pts() ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f0000000500)={0xf2, 0x2, 0x3, 0x0, "0ed63582d65132aef44e80874d39a0dcda7d988c", 0xe5, 0x7ff}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.148' (ED25519) to the list of known hosts. pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pppx: unable to set addresses for pppx1, error=17 SYZFAIL: tun: read failed (errno 9: Bad file descriptor) SYZFAIL: child failed (errno 0: Undefined error: 0) ifconfig: tap3: SIOCIFDESTROY: Device not configured SYZFAIL: tun: read failed (errno 9: Bad file descriptor) SYZFAIL: child failed (errno 0: Undefined error: 0) ifconfig: tap3: SIOCIFDESTROY: Device not configured SYZFAIL: too many calls in output slot=64 (errno 1: Operation not permitted) SYZFAIL: child failed (errno 0: Undefined error: 0) ifconfig: tap3: SIOCIFDESTROY: Device not configured SYZFAIL: too many calls in output slot=64 (errno 1: Operation not permitted) SYZFAIL: child failed (errno 0: Undefined error: 0) ifconfig: tap3: SIOCIFDESTROY: Device not configured SYZFAIL: too many calls in output slot=64 (errno 1: Operation not permitted) SYZFAIL: child failed (errno 0: Undefined error: 0) ifconfig: tap3: SIOCIFDESTROY: Device not configured SYZFAIL: too many calls in output slot=64 (errno 1: Operation not permitted) SYZFAIL: child failed (errno 0: Undefined error: 0) ifconfig: tap3: SIOCIFDESTROY: Device not configured SYZFAIL: too many calls in output slot=64 (errno 1: Operation not permitted) SYZFAIL: child failed (errno 0: Undefined error: 0) ifconfig: tap3: SIOCIFDESTROY: Device not configured SYZFAIL: too many calls in output slot=64 (errno 1: Operation not permitted) SYZFAIL: child failed (errno 0: Undefined error: 0) ifconfig: tap3: SIOCIFDESTROY: Device not configured SYZFAIL: too many calls in output slot=64 (errno 1: Operation not permitted) SYZFAIL: child failed (errno 0: Undefined error: 0) ifconfig: tap3: SIOCIFDESTROY: Device not configured SYZFAIL: too many calls in output slot=64 (errno 1: Operation not permitted) SYZFAIL: child failed (errno 0: Undefined error: 0) ifconfig: tap3: SIOCIFDESTROY: Device not configured SYZFAIL: too many calls in output slot=64 (errno 1: Operation not permitted) SYZFAIL: child failed (errno 0: Undefined error: 0) ifconfig: tap3: SIOCIFDESTROY: Device not configured SYZFAIL: too many calls in output slot=64 (errno 1: Operation not permitted) SYZFAIL: child failed (errno 0: Undefined error: 0) ifconfig: tap3: SIOCIFDESTROY: Device not configured SYZFAIL: too many calls in output slot=64 (errno 1: Operation not permitted) SYZFAIL: child failed (errno 0: Undefined error: 0) ifconfig: tap3: SIOCIFDESTROY: Device not configured SYZFAIL: too many calls in output slot=64 (errno 1: Operation not permitted) SYZFAIL: child failed (errno 0: Undefined error: 0) ifconfig: tap3: SIOCIFDESTROY: Device not configured SYZFAIL: too many calls in output slot=64 (errno 1: Operation not permitted) SYZFAIL: child failed (errno 0: Undefined error: 0) ifconfig: tap3: SIOCIFDESTROY: Device not configured SYZFAIL: too many calls in output slot=64 (errno 1: Operation not permitted) SYZFAIL: child failed (errno 0: Undefined error: 0) ifconfig: tap3: SIOCIFDESTROY: Device not configured SYZFAIL: too many calls in output slot=64 (errno 1: Operation not permitted) SYZFAIL: child failed (errno 0: Undefined error: 0) ifconfig: tap3: SIOCIFDESTROY: Device not configured SYZFAIL: too many calls in output slot=64 (errno 1: Operation not permitted) SYZFAIL: child failed (errno 0: Undefined error: 0) ifconfig: tap3: SIOCIFDESTROY: Device not configured SYZFAIL: too many calls in output slot=64 (errno 1: Operation not permitted) SYZFAIL: child failed (errno 0: Undefined error: 0) ifconfig: tap3: SIOCIFDESTROY: Device not configured SYZFAIL: too many calls in output slot=64 (errno 1: Operation not permitted) SYZFAIL: child failed (errno 0: Undefined error: 0) ifconfig: tap3: SIOCIFDESTROY: Device not configured SYZFAIL: too many calls in output slot=64 (errno 1: Operation not permitted) SYZFAIL: child failed (errno 0: Undefined error: 0) SYZFAIL: repeatedly failed to execute the program proc=3 req=33 state=3 status=67 (errno 4: Interrupted system call) OpenBSD/amd64 (ci-openbsd-multicore-0.us-central1-f.c.syzkaller.internal) (tty00) login: uvn_flush: obj=0xfffffc006f84b828, offset=0x3ff000. error during pageout. uvn_flush: WARNING: changes to page may be lost! set $lines = 0 Password: Login incorrect login: show panic Password: Login incorrect login: trace Password: Login incorrect login: show proc Password: Login incorrect show all locks login: Password: Login incorrect show all pools login: Password: Login incorrect trace login: Password: Login incorrect trace login: Password: