last executing test programs: 4.965934008s ago: executing program 5 (id=29): r0 = socket$inet(0x18, 0x3, 0x102) sysctl$vm(&(0x7f0000000180)={0x2, 0x9}, 0x2, &(0x7f0000000040)="00825423", &(0x7f00000000c0)=0x4, 0x0, 0x0) ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x0, [{0x3, 0x7}, {0x2, 0xff03}, {0x1}, {0x0, 0x800}, {0x3}, {0x5}, {0x0, 0xaa59}, {0x3, 0xb59}, {0x1, 0x1}, {0x3, 0x100}, {0x1, 0x1}, {0x3, 0x80000000}, {0x2, 0x5}, {}, {0x0, 0x5}, {0x1, 0xffffffff}, {0x3, 0x1}, {0x3}, {0x3, 0xfffffffe}, {0x3, 0x7ff}, {0xbb08c0840fa32129, 0x6}, {0x0, 0x1}, {0x1}, {0x0, 0x3ff}, {0x2, 0x1000000}, {0x1, 0x1}, {0x0, 0x1ff}, {0x0, 0x200}, {0x2, 0xffffffff}, {0x0, 0x9}, {0x1, 0x3}, {0x3}]}) sendmsg$unix(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x400}, 0x0) sendmsg(r0, &(0x7f0000000240)={&(0x7f0000000280)=@in6={0x1c, 0x18, 0x1, 0xca, "00000000000000000000000000000001", 0x65d}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000000)="630c00000000069afeb51ece15144d8751f6f2efa24a85abdd612dd68e59adffbb02000000372e9bc47e84f7c4141a4d9c793909f5480a0000000000", 0x3c}], 0x1, 0x0}, 0x0) 4.755308869s ago: executing program 5 (id=32): symlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mknod(&(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0xd02) link(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) rename(&(0x7f0000000a80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mknod(&(0x7f0000000b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0xd02) 4.607953136s ago: executing program 5 (id=39): socket$inet(0x2, 0x4000, 0x6) r0 = socket(0x18, 0x1, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) (async) ioctl$FIONREAD(r0, 0xc0106924, &(0x7f00000001c0)) (async, rerun: 32) r1 = open(&(0x7f0000000080)='./file0\x00', 0x10, 0xe0) (rerun: 32) ioctl$FIONBIO(r1, 0x82907003, &(0x7f0000000140)=0x2) ioctl$FIONBIO(r1, 0xc0307004, &(0x7f0000000140)) (async) r2 = socket(0x2, 0x3, 0x0) ioctl$FIONREAD(r2, 0x40047309, &(0x7f00000001c0)) (async) ioctl$DIOCGETSTATE(r1, 0xc1084413, &(0x7f0000000280)={{0xb, './bus\x00', [{[@v4=@rand_addr=0x4, @v6=@remote={0xfe, 0x80, '\x00', 0x0}], [0x80, 0x7]}, {[@v4=@local={0xac, 0x14, 0x0}, @v4=@remote={0xac, 0x14, 0x0}], [0x8, 0x1], 0x70, 0x18}], {{0x1854, 0xd, 0xf2, 0x1}, 0x31, 0xca, 0x8, 0x8, 0x8001, 0x48, 0x4}, {{0x1ff, 0x7f, 0x6, 0x3}, 0x2, 0xa4e, 0x4, 0x5, 0x4, 0x9, 0x8}, @v6=@mcast2, 0x1, 0xffffffaf, 0x2b, 0x9, 0x1000, [[0x3ff, 0x5], [0x80000001, 0x6]], [[0x80000001, 0x7], [0x9, 0x8001]], 0x8, [0x2, 0x9], 0x6, 0x30, 0x2, 0x2, 0xff, 0x1, 0x59, 0x6, 0x80, 0x4, 0x3, 0x9, "96f5"}}) r3 = socket(0x18, 0x3, 0x0) r4 = semget(0x0, 0x1, 0x281) (async) setreuid(0x0, 0xee01) (async) symlink(&(0x7f0000000780)='./bus/\x00', &(0x7f0000000740)='./bus\x00') (async) open(&(0x7f0000000000)='./bus/\x00', 0x200, 0x0) semctl$IPC_SET(r4, 0x0, 0x1, &(0x7f0000000780)={{0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x0, 0x6, 0x0, 0x0, 0x1, 0x0, 0x200000000005}) (async) setitimer(0x2, &(0x7f0000000080)={{0x3, 0x9}, {0x9, 0x3}}, 0x0) (async, rerun: 32) mknod(&(0x7f0000000040)='./file1\x00', 0x4, 0x2db6) (async, rerun: 32) mknod(&(0x7f00000000c0)='./file1\x00', 0x2000, 0x637d) r5 = open(&(0x7f0000000800)='./file1\x00', 0x21, 0x1be) (async, rerun: 64) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6381) (async, rerun: 64) open(&(0x7f0000000200)='./file0\x00', 0x100, 0x100) (async) open(&(0x7f0000000180)='./file0\x00', 0x80000000000206, 0x0) (async, rerun: 32) r6 = setsid() (rerun: 32) ktrace(&(0x7f0000000040)='./file0\x00', 0x4, 0x11, r6) (async) writev(r5, &(0x7f0000002a40)=[{0x0}], 0x1) ioctl$FIONREAD(r3, 0x8080691a, &(0x7f0000000100)) r7 = socket$inet(0x18, 0x3, 0x102) sendmsg(r7, &(0x7f0000000240)={&(0x7f0000000140)=@un=@file={0x2, 0x0, './file0\x00'}, 0xa, &(0x7f00000003c0)=[{&(0x7f0000000180)="638802000000339afe51f6f2efa24a85abd9612dd68e59adfecf9323100084410a8591426ee03e", 0x27}, {&(0x7f0000000680)="a2", 0x1}], 0x2, 0x0}, 0x402) 4.29822042s ago: executing program 2 (id=42): r0 = socket(0x18, 0x1, 0x0) (async) r1 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000040), 0x8, 0x0) ioctl$WSMOUSEIO_SETPARAMS(r1, 0x80105728, &(0x7f00000000c0)={&(0x7f0000000080)=[{0x3, 0xffffffff}], 0x1}) (async, rerun: 32) pwritev(0xffffffffffffffff, &(0x7f00000026c0)=[{&(0x7f0000000140)="316088d1921eb4f4193256eaa423c0572f3159", 0x13}], 0x1, 0x0) (async, rerun: 32) ioctl$WSMOUSEIO_GETPARAMS(r1, 0x80105727, &(0x7f0000000200)={&(0x7f0000000180)=[{0x101, 0x6}], 0x1}) (async) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) (async, rerun: 32) ioctl$FIONREAD(r0, 0xc0106924, &(0x7f0000000000)) (rerun: 32) ioctl$FIONREAD(r0, 0x8080691a, &(0x7f0000000100)) 3.513260587s ago: executing program 0 (id=40): r0 = socket(0x1, 0x2, 0x0) shutdown(r0, 0x2) (async) ioctl$FIONREAD(r0, 0xc02069a5, &(0x7f00000001c0)) (async, rerun: 64) getsockopt$SO_PEERCRED(r0, 0xffff, 0x1022, &(0x7f0000000180)={0x0}, 0xc) (async, rerun: 64) r2 = semget(0x0, 0x1, 0x281) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) getsockopt$sock_cred(r3, 0xffff, 0x1022, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) setresgid(0x0, r5, 0x0) semctl$IPC_SET(r2, 0x0, 0x1, &(0x7f0000000780)={{0x0, r5, r4, r5, 0x8f, 0x9}, 0x0, 0x6, 0x0, 0x0, 0x1, 0x0, 0x200000000005}) (async) fchown(r0, r1, r4) (async) socketpair(0x10, 0x3, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r7, 0xffff, 0x1008, &(0x7f00000000c0)=0x200, 0x4) (async) r8 = openat$tty(0xffffffffffffff9c, &(0x7f0000000140), 0x200, 0x0) ioctl$TIOCCHKVERAUTH(r8, 0x2000741e) (async, rerun: 32) ioctl$WSDISPLAYIO_ADDSCREEN(0xffffffffffffffff, 0x80245753, &(0x7f0000000040)={0x3, './file0\x00', './file0\x00'}) (async, rerun: 32) mprotect(&(0x7f000049a000/0x1000)=nil, 0x1000, 0x2) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0xd02) (async) r9 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BIOCSETIF(r9, 0x40086475, 0x0) ioctl$BIOCGDIRFILT(r9, 0x4004427c, &(0x7f0000000100)) (async) getsockopt$sock_linger(r6, 0xffff, 0x80, &(0x7f0000000040), &(0x7f0000000080)=0x8) 3.513081896s ago: executing program 0 (id=51): r0 = syz_open_pts() openat$bpf(0xffffffffffffff9c, &(0x7f00000001c0), 0x200, 0x0) socket$unix(0x1, 0x1, 0x0) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x62}) close(0x3) close(r0) syz_open_pts() ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000000)={0xb, 0xfffffbef, 0x583, 0x160350d, "cc14ee0d2100caa26a364fa8a325850d1ec100", 0x81, 0x84}) writev(r0, &(0x7f00000019c0)=[{&(0x7f00000001c0)="0d6894", 0x3}], 0x1) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x8010640d, &(0x7f0000000040)={0x6, 0x4000004}) 3.512198709s ago: executing program 2 (id=42): r0 = socket(0x18, 0x1, 0x0) (async) r1 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000040), 0x8, 0x0) ioctl$WSMOUSEIO_SETPARAMS(r1, 0x80105728, &(0x7f00000000c0)={&(0x7f0000000080)=[{0x3, 0xffffffff}], 0x1}) (async, rerun: 32) pwritev(0xffffffffffffffff, &(0x7f00000026c0)=[{&(0x7f0000000140)="316088d1921eb4f4193256eaa423c0572f3159", 0x13}], 0x1, 0x0) (async, rerun: 32) ioctl$WSMOUSEIO_GETPARAMS(r1, 0x80105727, &(0x7f0000000200)={&(0x7f0000000180)=[{0x101, 0x6}], 0x1}) (async) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) (async, rerun: 32) ioctl$FIONREAD(r0, 0xc0106924, &(0x7f0000000000)) (rerun: 32) ioctl$FIONREAD(r0, 0x8080691a, &(0x7f0000000100)) 3.512025172s ago: executing program 0 (id=52): r0 = socket(0x18, 0x1, 0x6) sendmmsg(r0, &(0x7f0000000600)={{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="b10cd22d", 0x4}], 0x1, 0x0}}, 0x38, 0x407) openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r1 = openat$speaker(0xffffffffffffff9c, &(0x7f0000001280), 0x2, 0x0) writev(r1, &(0x7f0000002ac0)=[{&(0x7f00000012c0)="2ab5f449502e", 0x6}], 0x1) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) 3.482009013s ago: executing program 5 (id=39): socket$inet(0x2, 0x4000, 0x6) r0 = socket(0x18, 0x1, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) (async) ioctl$FIONREAD(r0, 0xc0106924, &(0x7f00000001c0)) (async, rerun: 32) r1 = open(&(0x7f0000000080)='./file0\x00', 0x10, 0xe0) (rerun: 32) ioctl$FIONBIO(r1, 0x82907003, &(0x7f0000000140)=0x2) ioctl$FIONBIO(r1, 0xc0307004, &(0x7f0000000140)) (async) r2 = socket(0x2, 0x3, 0x0) ioctl$FIONREAD(r2, 0x40047309, &(0x7f00000001c0)) (async) ioctl$DIOCGETSTATE(r1, 0xc1084413, &(0x7f0000000280)={{0xb, './bus\x00', [{[@v4=@rand_addr=0x4, @v6=@remote={0xfe, 0x80, '\x00', 0x0}], [0x80, 0x7]}, {[@v4=@local={0xac, 0x14, 0x0}, @v4=@remote={0xac, 0x14, 0x0}], [0x8, 0x1], 0x70, 0x18}], {{0x1854, 0xd, 0xf2, 0x1}, 0x31, 0xca, 0x8, 0x8, 0x8001, 0x48, 0x4}, {{0x1ff, 0x7f, 0x6, 0x3}, 0x2, 0xa4e, 0x4, 0x5, 0x4, 0x9, 0x8}, @v6=@mcast2, 0x1, 0xffffffaf, 0x2b, 0x9, 0x1000, [[0x3ff, 0x5], [0x80000001, 0x6]], [[0x80000001, 0x7], [0x9, 0x8001]], 0x8, [0x2, 0x9], 0x6, 0x30, 0x2, 0x2, 0xff, 0x1, 0x59, 0x6, 0x80, 0x4, 0x3, 0x9, "96f5"}}) r3 = socket(0x18, 0x3, 0x0) r4 = semget(0x0, 0x1, 0x281) (async) setreuid(0x0, 0xee01) (async) symlink(&(0x7f0000000780)='./bus/\x00', &(0x7f0000000740)='./bus\x00') (async) open(&(0x7f0000000000)='./bus/\x00', 0x200, 0x0) semctl$IPC_SET(r4, 0x0, 0x1, &(0x7f0000000780)={{0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x0, 0x6, 0x0, 0x0, 0x1, 0x0, 0x200000000005}) (async) setitimer(0x2, &(0x7f0000000080)={{0x3, 0x9}, {0x9, 0x3}}, 0x0) (async, rerun: 32) mknod(&(0x7f0000000040)='./file1\x00', 0x4, 0x2db6) (async, rerun: 32) mknod(&(0x7f00000000c0)='./file1\x00', 0x2000, 0x637d) r5 = open(&(0x7f0000000800)='./file1\x00', 0x21, 0x1be) (async, rerun: 64) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6381) (async, rerun: 64) open(&(0x7f0000000200)='./file0\x00', 0x100, 0x100) (async) open(&(0x7f0000000180)='./file0\x00', 0x80000000000206, 0x0) (async, rerun: 32) r6 = setsid() (rerun: 32) ktrace(&(0x7f0000000040)='./file0\x00', 0x4, 0x11, r6) (async) writev(r5, &(0x7f0000002a40)=[{0x0}], 0x1) ioctl$FIONREAD(r3, 0x8080691a, &(0x7f0000000100)) r7 = socket$inet(0x18, 0x3, 0x102) sendmsg(r7, &(0x7f0000000240)={&(0x7f0000000140)=@un=@file={0x2, 0x0, './file0\x00'}, 0xa, &(0x7f00000003c0)=[{&(0x7f0000000180)="638802000000339afe51f6f2efa24a85abd9612dd68e59adfecf9323100084410a8591426ee03e", 0x27}, {&(0x7f0000000680)="a2", 0x1}], 0x2, 0x0}, 0x402) 3.420972285s ago: executing program 2 (id=56): recvmmsg(0xffffffffffffffff, 0xfffffffffffffffe, 0x0, 0x2000, &(0x7f0000000000)={0x4, 0x5}) setrlimit(0x5, &(0x7f0000000980)={0x3}) 3.085106381s ago: executing program 2 (id=57): r0 = socket(0x20, 0x1000, 0xff) r1 = openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$WSKBDIO_SETMODE(r1, 0x80045713, &(0x7f00000007c0)) bind$inet(r1, &(0x7f0000000240)={0x10, 0x2, 0x2, 0x6}, 0x10) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x2, 0x0, 0x0, 0x8000003}, {0x0, 0x0, 0x40}, {0x46, 0x0, 0x0, 0x37f}]}) ioctl$WSMOUSEIO_SETPARAMS(0xffffffffffffffff, 0x80105727, &(0x7f00000000c0)={&(0x7f0000000200)=[{0x21, 0x5}], 0x1}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xff0a, 0x0, 0x37) openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x81, 0x0) r2 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000f80)={{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=[{0xb0, 0x1, 0x2, "35df27ce572bc10022536d229370ac0f7c58dcf940c02be06c37d9010817734a6a7e0bef98595f9037990ddbea61b519b7bbe6ead5803aee50aea2facfe1462b4483e16b6db3d40a6babb0f0f44383a98b14f60dc27826ca63589c147eba6a8980855762566bf2b05bc09404e644400ee65545a69f6b210af951a728d61936ec8feae8d500b3a765c4f0ba7b135540921f7504d01ebcf60dc1158aa91c494ead8c"}, {0xc0, 0xffff, 0x9, "a4f51858f101232eb9ddfe158f076d43b6213c1b54b6137e1beabf3ee6e38cdf847825ef63b30fe33dc2372e9095cc6a6758d1a7dac2833571efdd92fe02be26a32af5734116f04bb17e62a62c20e9b6f853a42dd9f966a732881bbea920539a67ef0ec9daddf7e5a1196983afd713375eb8af8b0213f3ace1b0f7757bb58ba1e644bb2b8a1b4432061f09dab61adf64bcbeceb257b823b45ce75bb489c03108102628465657740f1af70694049e2d6003"}, {0x8c, 0x1, 0x3ff, "75fc55212d94045898ec405dc9082fec83a85e1db26e6a4feef768183cf37be692b403418b086677bfa439c5bafa9accf4240ccd1d8376440c37575be22c108fdb0c66ac6daeffdeb268bb218050f9e55bf0ab1a212d154d826e1226af85089ede2a254ccf6766cc8f7cd2bd73fc2ea0904513a129bc82ff1bb764f90e"}, {0xc0, 0xffff, 0x91, "4ad8cda27ad5f97348d0384ef5b178507d3691921e40718dbff1bdd820a5292b4168b74d0a41a4ca2abccfc79d014a14c7dcd02293f081d415bc61a3ce83d25f95801bb95925e90d75ef2268e4a9f52924f335ee6081e2511b192e1a094c69ac46055014ad82350f3c4b73b6970fd9707ff6e14ea2571bc4a6e2c5fb9f1afa75ba66aaefdba0dd0533ee2f087f650eb2a3fc43b3deb02772f80cbfac3d4c951a3becfaa7602fba9d20aef17cfca9fb692f"}, {0x3c, 0xffff, 0x6, "af96b8ddb345837c818c6826407294441fc04e106727ef640666e9fdc149042e846ffdfd0e8485bc4644ef1507"}, {0x78, 0x1, 0x7, "07282bd3d9cc4ec8437bbd44dabf905ea1768a241b978f80cda3c9cfc5a88fd7725d5f3fbc3868998c988a47a69d5b5c4dfed7a0640029a25131cb6a5ded7f6602594c65930868a3e56eb692a5c96271b2a7bb6362f526fc5409c132a9a4d7686f1b1c42529aa148cd51cd2f"}], 0x370}}, 0x38, 0x6) ioctl$TIOCSETA(r2, 0xcd604404, &(0x7f00000001c0)={0x1, 0x2, 0x7, 0x2f, "20180000000001002500", 0xfffffffb, 0xb}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000b40)="825a4f47c21e6ed7eda0f58f10939603ad903abf65b18d01000000000000000000000001000000af776665d4cd12c60034", 0x31}], 0x1, 0x0, 0x0, 0x2}, 0x40d) ioctl$TIOCSETA(0xffffffffffffff9c, 0xc450444d, &(0x7f0000000740)={0x10005, 0x2000001, 0xffffeffd, 0x8, "97a22206a7f6c449ebb17a926cc9795a6b47c1d1", 0x3, 0x5}) connect$inet(r0, &(0x7f0000000280)={0x10, 0x2, 0x1, 0x200000e3}, 0x10) chroot(&(0x7f0000000740)='.\x00') ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000300)={0x2, &(0x7f00000000c0)=[{}, {0x1}]}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x4e}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x2000, 0x0, 0x37) connect$inet(r0, &(0x7f0000000200)={0x10, 0x2, 0x3, 0xe}, 0x10) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0x66, &(0x7f0000000180)={0xff, 0x1, 0xc42d}, 0x6) 3.08000869s ago: executing program 3 (id=58): r0 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000000), 0x8, 0x0) ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x0, [{}, {0x1}, {0x0, 0x300}, {0x2, 0x4}, {0x0, 0x4000}, {0x1, 0xe}, {}, {0x3, 0x1}, {}, {0x4}, {}, {0x3}, {0x1, 0x6}, {0x2}, {0x2}, {0x1}, {0x1}, {0x1}, {0x3, 0x10000}, {}, {0x3}, {0x1, 0x4}, {0x2}, {0x2}, {0x3, 0x5}, {0x0, 0x5}, {0x2, 0x1}, {0x0, 0x10000}, {0x1, 0x3}, {0x1, 0x6}, {0x0, 0x2}]}) r1 = socket(0x18, 0x1, 0x0) ioctl$FIONREAD(r1, 0xc0106924, &(0x7f00000001c0)) msgctl$IPC_RMID(0x0, 0x0) r2 = msgget$private(0x0, 0x80) msgrcv(0x0, &(0x7f0000000140)={0x0, ""/165}, 0xad, 0x0, 0x1000) msgrcv(r2, 0x0, 0x0, 0x3, 0x1000) msgsnd(r2, &(0x7f0000000940)={0x3}, 0x8, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setitimer(0x0, &(0x7f0000000080)={{0x3, 0x2}, {0x0, 0x4}}, 0x0) getitimer(0x0, &(0x7f0000000040)) ioctl$VMM_IOC_CREATE(r0, 0xca605601, &(0x7f0000000080)={0x10, 0x9, [{&(0x7f0000354000/0x4000)=nil, &(0x7f00005f0000/0x2000)=nil, 0x9}, {&(0x7f0000167000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, 0xffffffffffff822d, 0x2}, {&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x73}, {&(0x7f00003d4000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0xb}, {&(0x7f0000576000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x800000}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x7, 0x2}, {&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x7}, {&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x3, 0x2}, {&(0x7f0000ffd000/0x3000)=nil, &(0x7f00001a1000/0x2000)=nil, 0x6}, {&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000630000/0x2000)=nil, 0x762c}, {&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x6, 0x2}, {&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x4}, {&(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x2}, {&(0x7f0000ffd000/0x3000)=nil, &(0x7f000009d000/0x2000)=nil, 0x1000007fffffff}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000165000/0x1000)=nil, 0x8001}, {&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, 0x7, 0x2}], './file0\x00', 0x8000005, 0x9}) socket(0x6, 0x1, 0x1) msgget(0x1, 0x2) pipe(&(0x7f0000001780)={0xffffffffffffffff}) fcntl$getown(r3, 0x5) 3.079253187s ago: executing program 2 (id=59): r0 = openat$wskbd(0xffffffffffffff9c, &(0x7f00000014c0), 0x1, 0x0) ioctl$WSKBDIO_GETKEYREPEAT(r0, 0x400c5708, &(0x7f0000000000)) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) minherit(&(0x7f0000306000/0x2000)=nil, 0x2000, 0x0) r1 = socket(0x18, 0x3, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x4, &(0x7f0000000040)=[{0x5, 0x6, 0x0, 0x251}, {0x2, 0x8, 0x6, 0x80000001}, {0x4, 0x83, 0x9, 0x9}, {0x8, 0x1, 0x5, 0xce03}]}) ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file0aaaaaaaaaaaaaaaaaaaaaaaaa', 0x4, 0x2800c1, 0x0, 0x0, 0x80000001, 0xffff, 0x80000, 0x2, 0x0, 0x8000000000000009, 0xbf}) getgroups(0x7, &(0x7f0000000000)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]) setresgid(0x0, r2, 0x0) setuid(0xee01) setresgid(0x0, r2, r3) sendmsg(r1, 0xfffffffffffffffe, 0x0) ioctl$FIONREAD(r1, 0xc0106924, &(0x7f00000001c0)) r4 = socket(0x1, 0x3, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$FIONREAD(r4, 0x8080691a, &(0x7f0000000100)) sysctl$kern(&(0x7f0000000100)={0x1, 0x20}, 0x2, &(0x7f0000000000)="01002000", &(0x7f0000000080)=0x4, 0x0, 0x0) openat$wskbd(0xffffffffffffff9c, &(0x7f00000014c0), 0x1, 0x0) (async) ioctl$WSKBDIO_GETKEYREPEAT(r0, 0x400c5708, &(0x7f0000000000)) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) minherit(&(0x7f0000306000/0x2000)=nil, 0x2000, 0x0) (async) socket(0x18, 0x3, 0x0) (async) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x4, &(0x7f0000000040)=[{0x5, 0x6, 0x0, 0x251}, {0x2, 0x8, 0x6, 0x80000001}, {0x4, 0x83, 0x9, 0x9}, {0x8, 0x1, 0x5, 0xce03}]}) (async) ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file0aaaaaaaaaaaaaaaaaaaaaaaaa', 0x4, 0x2800c1, 0x0, 0x0, 0x80000001, 0xffff, 0x80000, 0x2, 0x0, 0x8000000000000009, 0xbf}) (async) getgroups(0x7, &(0x7f0000000000)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]) (async) setresgid(0x0, r2, 0x0) (async) setuid(0xee01) (async) setresgid(0x0, r2, r3) (async) sendmsg(r1, 0xfffffffffffffffe, 0x0) (async) ioctl$FIONREAD(r1, 0xc0106924, &(0x7f00000001c0)) (async) socket(0x1, 0x3, 0x0) (async) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) (async) ioctl$FIONREAD(r4, 0x8080691a, &(0x7f0000000100)) (async) sysctl$kern(&(0x7f0000000100)={0x1, 0x20}, 0x2, &(0x7f0000000000)="01002000", &(0x7f0000000080)=0x4, 0x0, 0x0) (async) 2.793859283s ago: executing program 1 (id=60): r0 = socket(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x10, 0x2, 0x1, 0x200000e3}, 0x10) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffff9c, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000000)=[0x6], 0x1, 0x4, 0x0, 0xffffffffffffffff}) r2 = openat$pf(0xffffffffffffff9c, &(0x7f0000000100), 0x40000, 0x0) ioctl$DIOCSTOP(r2, 0x20004402) closefrom(r1) sendmmsg(r0, &(0x7f0000002500)={{0x0, 0x0, 0x0, 0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="280000000100000001000000e4da48eb3594c01c236b7de5f3ab2be9b62058ce53ffb5e849000000c000000000000000070000004e23d761d5a3a48920ee18c450e61aacbbc2f124ec2ccace30f696457f04359a75b138cc415c805c938e6ae3339682e00b8f77159e324b969ff234effe8d4398a7877251c0e27d20a65814d868a59cd7922910a03c97f70cbb0f564cc8cfc55d46f4d5773026d31652bbf95ee85837b8619feca14e5c19588a8d7fc67a284834e9424f91065652d4d37fa94be3d9bbac1127d679fdf23a50bb7951efede7507dde3f0611eb787e0f57c2e254cb1712d53f000000"], 0xe8}}, 0x38, 0x4) r3 = syz_open_pts() ioctl$TIOCCONS(r3, 0x80047462, &(0x7f00000000c0)=0x4f9) 2.793353234s ago: executing program 6 (id=61): r0 = openat$tty(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) fstatat(0xffffffffffffff9c, 0x0, 0x0, 0x4) pipe(&(0x7f0000001b40)={0xffffffffffffffff, 0xffffffffffffffff}) read$audio(r2, &(0x7f0000001b80)=""/20, 0x14) dup2(r2, r1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5820eb4bce11709d, 0xc011, r0, 0x8) msgrcv(0x0, 0x0, 0x0, 0x2, 0x0) closefrom(0xffffffffffffffff) msgctl$IPC_STAT(0x0, 0x2, &(0x7f0000000100)=""/187) openat$tty(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) (async) fstatat(0xffffffffffffff9c, 0x0, 0x0, 0x4) (async) pipe(&(0x7f0000001b40)) (async) read$audio(r2, &(0x7f0000001b80)=""/20, 0x14) (async) dup2(r2, r1) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5820eb4bce11709d, 0xc011, r0, 0x8) (async) msgrcv(0x0, 0x0, 0x0, 0x2, 0x0) (async) closefrom(0xffffffffffffffff) (async) msgctl$IPC_STAT(0x0, 0x2, &(0x7f0000000100)=""/187) (async) 1.687330278s ago: executing program 0 (id=64): r0 = socket(0x1, 0x1, 0x0) fcntl$setown(r0, 0x6, 0x0) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x81, 0x1, 0x4b, 0x8}, {0x40, 0x81, 0xfc, 0x7}, {0x6, 0x6, 0x1, 0xfffff804}]}) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) ioctl$DIOCMAP(0xffffffffffffffff, 0xc0106477, &(0x7f0000000040)={&(0x7f0000000140)='./file0\x00', 0xffffffffffffffff, 0x2}) sendmsg(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x308}, 0xc) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2, 0x2012, r2, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) getrusage(0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffff9c, 0xc01864c6, &(0x7f0000000100)={&(0x7f0000000080)=[0x80000000], 0x1, 0x10004, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000180)={0x1, 0x49a6, r2}) connect$unix(r0, &(0x7f0000000200)=@abs={0x9, 0x0, 0x0, 0x2}, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) sendmmsg(r4, &(0x7f00000003c0)={{0x0, 0x0, 0x0, 0x0, 0x0}, 0x4008}, 0x38, 0x406) r5 = socket(0x2, 0x8002, 0x0) r6 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$WSMUXIO_ADD_DEVICE(r6, 0x80085761, &(0x7f00000000c0)={0x3}) fcntl$dupfd(r5, 0x2, 0xffffffffffffffff) syz_emit_ethernet(0x13e, &(0x7f0000000380)=ANY=[]) socket(0x18, 0x2, 0x0) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) 1.669070253s ago: executing program 3 (id=65): sysctl$net_inet_ip(&(0x7f00000002c0)={0x4, 0x2, 0x0, 0x1d}, 0x4, 0x0, 0x0, &(0x7f0000000440), 0x0) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x2, 0x0, 0x6}, 0x4, &(0x7f0000000080)="5e3aba0e7ab5f69f351c6f58c5e5b22b5b30e3929349a24d89aa277d0c2b2383b088e57078a8f08faf037c3332c8047136976975eb36d28db20d7516bc69b5cfbd7b2658668360cfaecad1bd6f73bea8df2f3c5cae6ec11f868f977204b3e25ea3bdc52c9cafd9945bff890b9c06ba76633a6146fff08d344e2d932c46c8122cbf7b2a441b11931191ca75701b250e7c81bc9a49a3c1a261ea8e73ce15a6d1f0b00981cbe4ef66298c974e7d4df8e5606021d9331ceed228160c901a44006ecd825905302519e130c8797950a00ceb67bc202273045c68c6cd3f0548941ba3", &(0x7f0000000180)=0xdf, &(0x7f00000001c0)="3ea36e16714bc6897686ebdee46a256c455481b37c5bec96b95c48a9d4a9c243e65937b36d8ef84e3b041291813d54291013a7e8db0aa3b84f2af0b069090617a3f02774825b672f52b4b7b2754f9202845b22493a111cdbc195bdedda12b942d1e3737ccd4cbeac94b1d7cb8f4451dc504d7ecb323de65613acf581e972af506458a75aa81f406f6bc669aed550d6a5c0d5477ca151b614fd355bf5f27114c7acc180af32b4a7d0e90c4eb4231650ccf20b13191de55254412e57210a6a3e0781f0e55d3db300f5d62740374746da6f2de76a7bf6736103", 0xd8) sysctl$net_inet_ip(&(0x7f0000000000)={0x4, 0x2, 0x0, 0x7}, 0x4, &(0x7f0000000300)="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", &(0x7f0000001300)=0x1000, &(0x7f0000001340)="cc3aecc33e", 0x5) 1.65906167s ago: executing program 1 (id=67): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x80, 0x0) closefrom(r0) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000300)={0x3, &(0x7f0000000040)=[{0xff, 0x3, 0x6, 0x9d}, {0x5db, 0xfa, 0x0, 0x3}, {0xf34, 0x0, 0x5, 0xcaec}]}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x4e}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x2000, 0x0, 0x37) 1.430436951s ago: executing program 0 (id=68): r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) sysctl$net_inet6_ip6(&(0x7f0000000000)={0x4, 0x18, 0x29, 0x32}, 0x4, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) sysctl$net_inet_ip(&(0x7f0000000000)={0x4, 0x2, 0x0, 0x1c}, 0x4, 0x0, 0x0, &(0x7f0000001100), 0x4) openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$DIOCRCLRTSTATS(r0, 0xc4504441, &(0x7f00000017c0)={{'./file0\x00', './file0\x00', 0xf, 0x7}, 0x0, 0x100006, 0x0, 0x8, 0x9, 0x3, 0x3, 0x80, 0x3}) r1 = openat$pci(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$PCIOCGETROM(r1, 0xc0187009, &(0x7f0000000080)={{0x4, 0x7}, 0x0, 0x0}) munmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000) mquery(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x0, r0, 0x81) r2 = socket(0x18, 0x3, 0x7) setsockopt(r2, 0x1000000000029, 0x3e, &(0x7f0000000780)="00000080", 0x4) setuid(0xee01) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r3 = socket(0x2, 0x1, 0x0) ioctl$FIONREAD(r3, 0x80206918, &(0x7f00000001c0)) sendmsg(r2, &(0x7f0000000240)={&(0x7f0000000280)=@in6={0x1c, 0x18, 0x3, 0x10000007, "00000000000000000000000000000001", 0x101}, 0x1c, 0x0, 0x0, 0x0}, 0x402) ioctl$TIOCSETA(r0, 0xc4504443, &(0x7f0000000740)={0x0, 0x2, 0x0, 0x0, "01d04b0a0047c1d100", 0x6, 0x1}) r4 = accept$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x8) ioctl$FIONREAD(r4, 0x4004667f, &(0x7f00000000c0)) 1.429922209s ago: executing program 1 (id=69): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f00000000c0)=[{r3, 0x4}], 0x1, 0x0) setuid(0xffffffffffffffff) r4 = getpgrp() semget(0x2, 0x0, 0x100) kill(r4, 0x12) ioctl$FIOASYNC(r2, 0x8004667d, &(0x7f0000000080)=0xff) write(r3, &(0x7f0000000100)="c17343dda7bb", 0x6) poll(&(0x7f00000000c0)=[{r1, 0x4}], 0x1, 0x0) write(r1, &(0x7f00000002c0)="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", 0xfffffdaf) close(r0) r5 = msgget$private(0x0, 0x600) syz_emit_ethernet(0x4e, &(0x7f0000000180)=ANY=[@ANYBLOB="8f6f77ede655aaaaaaaaaabb86dd605f6ad900183a01fe7c00000000000000000000000000bbfe8000000000000000000000000000aa83"]) fstat(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstatat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4) r9 = fcntl$getown(0xffffffffffffff9c, 0x5) r10 = setsid() r11 = semget$private(0x0, 0x4, 0x0) semctl$IPC_SET(r11, 0x0, 0x1, &(0x7f0000000200)={{0x0, 0x0, 0x0, 0xffffffffffffffff, 0xc933289095ae6031, 0x7}, 0x0, 0x1000, 0x0, 0x0, 0x9, 0x0, 0x2}) semctl$SETVAL(r11, 0x4, 0x8, 0x0) getsockopt$SO_PEERCRED(r3, 0xffff, 0x1022, &(0x7f0000000240)={0x0, 0x0}, 0xc) semctl$IPC_SET(r11, 0x0, 0x1, &(0x7f0000000400)={{r6, r12, r6, r7, 0x9, 0x8000, 0x4}, 0x0, 0xfff0, 0x0, 0x0, 0xb, 0x0, 0x7ff}) msgctl$IPC_SET(r5, 0x1, &(0x7f0000000140)={{0x0, r7, r8, 0x0, 0x180, 0x619, 0x4}, 0x0, 0x0, 0x762, 0x1, 0x5, r9, r10, 0x9, 0x0, 0x8, 0x0, 0x8}) fchownat(r3, &(0x7f0000000000)='./file0\x00', 0x0, r7, 0x0) setsockopt$sock_int(r3, 0xffff, 0x1025, &(0x7f0000000200)=0xc515, 0x4) 1.4296327s ago: executing program 3 (id=70): r0 = socket$inet(0x2, 0x3, 0x9) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) readv(0xffffffffffffffff, &(0x7f0000005cc0)=[{0x0}], 0x1) getsockname$inet(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10) sysctl$hw(&(0x7f0000000cc0)={0x6, 0x19}, 0x2, 0x0, 0x0, &(0x7f0000000c80), 0x0) r1 = syz_open_pts() r2 = syz_open_pts() poll(&(0x7f00000007c0)=[{r2, 0x2}, {r1, 0x10}, {r1, 0x40}, {r1, 0x2}, {r1, 0x1}, {r1, 0x40}, {r1, 0x7}], 0x7, 0x7) getsockopt(r0, 0x8001, 0x2, 0x0, 0x0) r3 = openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) r4 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$DIOCRCLRTABLES(r4, 0xc450443c, &(0x7f00000001c0)={{'./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', './file0\x00', 0x48, 0xa}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x7, 0x80000000, 0x2, 0x5}) poll(&(0x7f00000000c0)=[{0xffffffffffffff9c}, {r3, 0x40}, {r4, 0x8}, {r0, 0x2}, {r2, 0x1}, {r0, 0x80}, {r0, 0x4}, {r2, 0x4}, {r1, 0x8}, {r2, 0x4}], 0xa, 0x8) 1.413897637s ago: executing program 5 (id=39): socket$inet(0x2, 0x4000, 0x6) r0 = socket(0x18, 0x1, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) (async) ioctl$FIONREAD(r0, 0xc0106924, &(0x7f00000001c0)) (async, rerun: 32) r1 = open(&(0x7f0000000080)='./file0\x00', 0x10, 0xe0) (rerun: 32) ioctl$FIONBIO(r1, 0x82907003, &(0x7f0000000140)=0x2) ioctl$FIONBIO(r1, 0xc0307004, &(0x7f0000000140)) (async) r2 = socket(0x2, 0x3, 0x0) ioctl$FIONREAD(r2, 0x40047309, &(0x7f00000001c0)) (async) ioctl$DIOCGETSTATE(r1, 0xc1084413, &(0x7f0000000280)={{0xb, './bus\x00', [{[@v4=@rand_addr=0x4, @v6=@remote={0xfe, 0x80, '\x00', 0x0}], [0x80, 0x7]}, {[@v4=@local={0xac, 0x14, 0x0}, @v4=@remote={0xac, 0x14, 0x0}], [0x8, 0x1], 0x70, 0x18}], {{0x1854, 0xd, 0xf2, 0x1}, 0x31, 0xca, 0x8, 0x8, 0x8001, 0x48, 0x4}, {{0x1ff, 0x7f, 0x6, 0x3}, 0x2, 0xa4e, 0x4, 0x5, 0x4, 0x9, 0x8}, @v6=@mcast2, 0x1, 0xffffffaf, 0x2b, 0x9, 0x1000, [[0x3ff, 0x5], [0x80000001, 0x6]], [[0x80000001, 0x7], [0x9, 0x8001]], 0x8, [0x2, 0x9], 0x6, 0x30, 0x2, 0x2, 0xff, 0x1, 0x59, 0x6, 0x80, 0x4, 0x3, 0x9, "96f5"}}) r3 = socket(0x18, 0x3, 0x0) r4 = semget(0x0, 0x1, 0x281) (async) setreuid(0x0, 0xee01) (async) symlink(&(0x7f0000000780)='./bus/\x00', &(0x7f0000000740)='./bus\x00') (async) open(&(0x7f0000000000)='./bus/\x00', 0x200, 0x0) semctl$IPC_SET(r4, 0x0, 0x1, &(0x7f0000000780)={{0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x0, 0x6, 0x0, 0x0, 0x1, 0x0, 0x200000000005}) (async) setitimer(0x2, &(0x7f0000000080)={{0x3, 0x9}, {0x9, 0x3}}, 0x0) (async, rerun: 32) mknod(&(0x7f0000000040)='./file1\x00', 0x4, 0x2db6) (async, rerun: 32) mknod(&(0x7f00000000c0)='./file1\x00', 0x2000, 0x637d) r5 = open(&(0x7f0000000800)='./file1\x00', 0x21, 0x1be) (async, rerun: 64) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6381) (async, rerun: 64) open(&(0x7f0000000200)='./file0\x00', 0x100, 0x100) (async) open(&(0x7f0000000180)='./file0\x00', 0x80000000000206, 0x0) (async, rerun: 32) r6 = setsid() (rerun: 32) ktrace(&(0x7f0000000040)='./file0\x00', 0x4, 0x11, r6) (async) writev(r5, &(0x7f0000002a40)=[{0x0}], 0x1) ioctl$FIONREAD(r3, 0x8080691a, &(0x7f0000000100)) r7 = socket$inet(0x18, 0x3, 0x102) sendmsg(r7, &(0x7f0000000240)={&(0x7f0000000140)=@un=@file={0x2, 0x0, './file0\x00'}, 0xa, &(0x7f00000003c0)=[{&(0x7f0000000180)="638802000000339afe51f6f2efa24a85abd9612dd68e59adfecf9323100084410a8591426ee03e", 0x27}, {&(0x7f0000000680)="a2", 0x1}], 0x2, 0x0}, 0x402) 1.366678365s ago: executing program 7 (id=73): sysctl$hw(&(0x7f0000000000)={0x6, 0x1d}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f00000aa000/0x1000)=nil, 0x1000, 0x5) mprotect(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0) poll(0x0, 0x0, 0x0) sysctl$kern(&(0x7f0000000000)={0x1, 0x33}, 0x1, 0x0, 0x0, &(0x7f0000000040)='\x00', 0x1) 1.175202885s ago: executing program 3 (id=74): r0 = socket$inet(0x2, 0x1, 0x0) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000300), 0x8000, 0x0) ioctl$DIOCNATLOOK(r1, 0xc0504417, &(0x7f0000000080)={@v6=@loopback, @v4=@remote={0xac, 0x14, 0x0}, @v4, @v6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x4, 0x2, 0x7, 0x1, 0x9, 0x5, 0x2, 0x6, 0x3}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000040)={0x1, 0x2, r1}) ioctl$WSKBDIO_GETENCODING(r2, 0x4004570f, &(0x7f0000000100)) bind$inet(r0, &(0x7f0000000000)={0x10, 0x2, 0x3}, 0x10) r3 = socket$inet(0x2, 0x3, 0x2) getsockopt(r3, 0x0, 0x68, 0x0, 0x0) listen(r0, 0x7fff) syz_emit_ethernet(0x3e, &(0x7f00000002c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x3d, 0x30, 0x67, 0x0, 0x0, 0x6, 0x0, @multicast2, @local={0xac, 0x14, 0x0}}, @tcp={{0x2, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0x8200, 0x0, 0xfffc, {[@window={0x3, 0x3, 0x7}, @generic={0x3, 0x5, "5a001c"}]}}}}}}}) listen(r2, 0x9) 1.17472996s ago: executing program 3 (id=75): r0 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7959) poll(&(0x7f0000000440), 0x0, 0x6) (async) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000000)="7f454c4602df7a264ee4975f55011a49b70cb710aa950000000a52e92a24d18fcf8fd1f9794ffa08bb11bafcdc24ff4c5d0b5c7b1ad1a2ec434c500191", 0x3d}, {&(0x7f0000000340)="1551e6", 0x3}], 0x2) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000080)={0x2, 0x6a, 0x6, 0x4, 0x0}) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000180)={0x0, 0xf0, 0x2, 0x35314152, 0x81954b350594b4fa, [r1, r1, r1, r1], [0x4, 0x1, 0x7, 0xcaa3], [0x5, 0x4, 0x6, 0x3], [0x1, 0xc5, 0x6, 0xaf5]}) (async) r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0x8, 0x0) ioctl$BIOCSETIF(r4, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) (async) ioctl$BIOCSETF(r4, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f00000000c0)=[{0x6c, 0x29, 0xb2, 0x10}, {0x24, 0x6, 0xd, 0x80}, {0x6, 0x8, 0x7, 0x4}]}) (async) syz_emit_ethernet(0x22, &(0x7f00000005c0)=ANY=[@ANYRES16=r3, @ANYRES16=r2, @ANYRESOCT=r1, @ANYRES16=r0, @ANYRES64=r3, @ANYRESOCT, @ANYRES64=r1, @ANYRES16, @ANYRES32=r1]) ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f0000000200)={0x0, 0x4, 0x3ff, 0x34324241, 0x2, [r3, r1, r1, r1], [0x10001, 0x1, 0x7, 0x5], [0x6, 0x8b2, 0x3, 0x9], [0xffff, 0x3, 0x1, 0x4]}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)={r1}) (async) ioctl$WSDISPLAYIO_SMODE(r0, 0x8004574c, &(0x7f0000000280)) (async) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x0, 0xfe, 0x0, 0x10001}, {0x2}]}) (async) sysctl$kern(&(0x7f00000000c0)={0x1, 0x33}, 0x2, 0x0, 0x0, 0x0, 0x0) (async) setrlimit(0x2, &(0x7f0000000400)={0x60000000, 0x60000000}) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) r5 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) ioctl$WSMOUSEIO_SETPARAMS(r5, 0x80105727, &(0x7f0000000000)={&(0x7f0000000040)=[{0x26, 0xfb}, {0x22}], 0x2}) sysctl$kern(&(0x7f00000002c0)={0x1, 0x14}, 0x2, &(0x7f0000000300)="3643d4d9d3d6a2a80ccd8f83eee24fef5727a430676a97d13525353545fbfdd43fa5dadc077645d5667906dfe6", &(0x7f0000000380)=0x2d, &(0x7f00000003c0)="397da5bc229cb6e6ce8b2e1e3fe92a03c45b951a23e0c2e24764ef5c08e830c072a48585d5a4a2cf5ee0bca80ec8d392143492841a0ecc", 0x37) (async) sysctl$kern(&(0x7f00000000c0)={0x1, 0x45}, 0x3, &(0x7f0000002480)="71f91eca6e530c79e2f8e2a2ce3471ac0058bc5a91501d94a34bfec38a820600000000000000dc0225f0e4cf52b7d99d15d923", &(0x7f0000000080)=0x1232, 0x0, 0xfffffffffffffe4d) (async) pselect(0x40, &(0x7f0000000080)={0x6, 0x2, 0xfffffffffffffff7, 0xc, 0x7fffffffffffffff, 0x1, 0x7, 0x6}, 0x0, 0x0, 0x0, 0x0) (async) r6 = kqueue() kevent(r6, &(0x7f0000000000), 0x96, &(0x7f0000000340), 0xfffa4961, 0x0) r7 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x7e, 0x0) ioctl$TIOCSETA(r7, 0xcd60441a, &(0x7f0000000080)={0x1, 0x5, 0xb, 0xf26e, "2000030100010000000000000068a95a010400", 0x6}) (async) r8 = openat$speaker(0xffffffffffffff9c, &(0x7f0000001280), 0x2, 0x0) pwritev(r8, &(0x7f0000000340)=[{&(0x7f0000000040)="8e7d4dba1edea349879f0a34105825bcd10fd38364e032d205050460b1436a628ef9490041", 0x25}], 0x1, 0xa4f) (async) pwritev(r8, &(0x7f0000001440)=[{&(0x7f0000000080)="00804f6c99f22ad13579033f80473628df31451fe08e095fad50356ec12d9f1e00c91f4532", 0x25}], 0x1, 0x10) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) sysctl$vm(&(0x7f0000000040)={0x2, 0x8}, 0x2, &(0x7f0000000000)="0000040c", &(0x7f0000000540)=0x4, &(0x7f0000000580)="096c4b1a", 0x4) 1.10247556s ago: executing program 0 (id=76): open(&(0x7f0000000180)='./file0\x00', 0x80000000000206, 0x32) (async) acct(&(0x7f00000000c0)='./file0\x00') (async, rerun: 64) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0xffffffffffffffff, 0xd00, 0x1ff, 0x6}, 0x6, 0xfffffffffffffffd, 0x4, 0x0, 0x200000000000, 0x1, 0x0, 0x0, 0x0, 0x6, 0x0, 0x1000}) (async, rerun: 64) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x11, 0x0, 0x2}, 0x6, &(0x7f0000000080), 0x0, 0x0, 0x0) (async) acct(0x0) 1.101034184s ago: executing program 1 (id=77): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async) r1 = syz_open_pts() ioctl$TIOCSETAW(r1, 0x802c7415, &(0x7f0000000040)={0xfffffffe, 0x0, 0x83, 0xc072, "e0909c80429a030bf70100001613f6d7bc0d6e60"}) fcntl$setown(r1, 0x6, 0xffffffffffffffff) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) (async) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000040), 0x10, 0x0) r3 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x18010, 0x0) ioctl$BIOCGHDRCMPLT(r2, 0x40044274, &(0x7f0000000180)) (async) open(&(0x7f0000000140)='./file0\x00', 0x8, 0x147) (async) ioctl$TIOCSBRK(r3, 0x2000747b) ioctl$AUDIO_STOP(r3, 0x20004127) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) (async) r4 = socket(0x18, 0x3, 0x0) setsockopt(r4, 0x1000000029, 0x1a, &(0x7f0000000080)='\"\x00\x00\x00', 0x4) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r7, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000b40)="a2", 0x1}], 0x1, 0x0, 0x0, 0xf}, 0x406) write(r7, &(0x7f0000000a00)="6e522a8b32e5a0e61beb09122e40f120084d3feef9cd18c58f6708e9d949c7925a1735badf2baeda5ca0dc8bd0dd76edc806fc84ca28020b9860e9277b12ca53400fd6331a95ecae449b7c30024066d79c984f0a3ff392b4553c2df9c61d2f53c1f20f3fa42188076606dc82f44706a4252e81d092dea4397de1c2525e290f5503141c596b4ad9f936068948f927a1304d", 0x91) recvmsg(r6, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000000440)=""/160, 0xa0}], 0x1, 0x0}, 0x2042) closefrom(r5) sysctl$hw(&(0x7f0000002bc0)={0x6, 0x9}, 0x2, &(0x7f0000002c00)="d01389a3b8b43a4c2b0121f5644acc152d3d342c2f520c010102b4ffc72c31ff364d48b63e53ce6a16146e99ffbf3f74e170a3964ab3cdeed8dc90352f322023da2a0568764222127dc4fa8f80d8d0a4ebdb90ebba0d97ab27ffc03e7ef39486f6c113e1867ea8157f84c17232a0c078", &(0x7f0000002cc0)=0x70, &(0x7f0000002d00), 0x0) (async) syz_emit_ethernet(0x5a, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffffe04b1c561ac486dd6036e28200243b020182c124b80eaba90c00d6ea67b40000fe8000000000000000edabc71ea3b94254c6bf0479406d7faa968b6f16d19daaa59a2986e7a06eff1d3bcb"]) r8 = socket$inet(0x2, 0x1, 0x6) ioctl$FIONREAD(r8, 0x80206979, &(0x7f0000000100)) 1.100594973s ago: executing program 2 (id=59): r0 = openat$wskbd(0xffffffffffffff9c, &(0x7f00000014c0), 0x1, 0x0) ioctl$WSKBDIO_GETKEYREPEAT(r0, 0x400c5708, &(0x7f0000000000)) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) minherit(&(0x7f0000306000/0x2000)=nil, 0x2000, 0x0) r1 = socket(0x18, 0x3, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x4, &(0x7f0000000040)=[{0x5, 0x6, 0x0, 0x251}, {0x2, 0x8, 0x6, 0x80000001}, {0x4, 0x83, 0x9, 0x9}, {0x8, 0x1, 0x5, 0xce03}]}) ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file0aaaaaaaaaaaaaaaaaaaaaaaaa', 0x4, 0x2800c1, 0x0, 0x0, 0x80000001, 0xffff, 0x80000, 0x2, 0x0, 0x8000000000000009, 0xbf}) getgroups(0x7, &(0x7f0000000000)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]) setresgid(0x0, r2, 0x0) setuid(0xee01) setresgid(0x0, r2, r3) sendmsg(r1, 0xfffffffffffffffe, 0x0) ioctl$FIONREAD(r1, 0xc0106924, &(0x7f00000001c0)) r4 = socket(0x1, 0x3, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$FIONREAD(r4, 0x8080691a, &(0x7f0000000100)) sysctl$kern(&(0x7f0000000100)={0x1, 0x20}, 0x2, &(0x7f0000000000)="01002000", &(0x7f0000000080)=0x4, 0x0, 0x0) openat$wskbd(0xffffffffffffff9c, &(0x7f00000014c0), 0x1, 0x0) (async) ioctl$WSKBDIO_GETKEYREPEAT(r0, 0x400c5708, &(0x7f0000000000)) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) minherit(&(0x7f0000306000/0x2000)=nil, 0x2000, 0x0) (async) socket(0x18, 0x3, 0x0) (async) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x4, &(0x7f0000000040)=[{0x5, 0x6, 0x0, 0x251}, {0x2, 0x8, 0x6, 0x80000001}, {0x4, 0x83, 0x9, 0x9}, {0x8, 0x1, 0x5, 0xce03}]}) (async) ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file0aaaaaaaaaaaaaaaaaaaaaaaaa', 0x4, 0x2800c1, 0x0, 0x0, 0x80000001, 0xffff, 0x80000, 0x2, 0x0, 0x8000000000000009, 0xbf}) (async) getgroups(0x7, &(0x7f0000000000)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]) (async) setresgid(0x0, r2, 0x0) (async) setuid(0xee01) (async) setresgid(0x0, r2, r3) (async) sendmsg(r1, 0xfffffffffffffffe, 0x0) (async) ioctl$FIONREAD(r1, 0xc0106924, &(0x7f00000001c0)) (async) socket(0x1, 0x3, 0x0) (async) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) (async) ioctl$FIONREAD(r4, 0x8080691a, &(0x7f0000000100)) (async) sysctl$kern(&(0x7f0000000100)={0x1, 0x20}, 0x2, &(0x7f0000000000)="01002000", &(0x7f0000000080)=0x4, 0x0, 0x0) (async) 1.098575651s ago: executing program 6 (id=61): r0 = openat$tty(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) fstatat(0xffffffffffffff9c, 0x0, 0x0, 0x4) pipe(&(0x7f0000001b40)={0xffffffffffffffff, 0xffffffffffffffff}) read$audio(r2, &(0x7f0000001b80)=""/20, 0x14) dup2(r2, r1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5820eb4bce11709d, 0xc011, r0, 0x8) msgrcv(0x0, 0x0, 0x0, 0x2, 0x0) closefrom(0xffffffffffffffff) msgctl$IPC_STAT(0x0, 0x2, &(0x7f0000000100)=""/187) openat$tty(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) (async) fstatat(0xffffffffffffff9c, 0x0, 0x0, 0x4) (async) pipe(&(0x7f0000001b40)) (async) read$audio(r2, &(0x7f0000001b80)=""/20, 0x14) (async) dup2(r2, r1) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5820eb4bce11709d, 0xc011, r0, 0x8) (async) msgrcv(0x0, 0x0, 0x0, 0x2, 0x0) (async) closefrom(0xffffffffffffffff) (async) msgctl$IPC_STAT(0x0, 0x2, &(0x7f0000000100)=""/187) (async) 1.098426143s ago: executing program 7 (id=79): r0 = socket(0x0, 0x8000, 0x0) setsockopt(r0, 0x1000000000029, 0xa, &(0x7f0000003680)='\x00\x00\x00\x00', 0x4) sysctl$hw(&(0x7f0000000140)={0x6, 0x14}, 0x2, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f0000000040)={0x0, 0x0, 0x1, 0xffffffff, "1a1116f043000000000000fffffffffff700"}) sysctl$kern(&(0x7f0000000040)={0x1, 0x4f}, 0x3, &(0x7f0000000180)="3bf2ee74e747c82dad6eb2a36fa7feffffff5fe49afca7e63b52fa65ccaa74d6e6b85b6cdced70357ef201f97842b1068dca31553fa2d7031f38c03e56ad0e24dfc4f97b8b7f81499647e6e7725765d61436c85e43c15d12a78cb8c57ddde87021d7b685507fd3e0652f35e45bdaa3afd86c4fe557433ec25d330a4c2b632dcefd3eceefabee7e3ebe806fdb4f6af569ae94b5d127", &(0x7f0000000080)=0xff19, &(0x7f0000000340)="5a67923ef0cb189971421989ebcff78831a7581e2f27caa362f1363042efb27688b2c899220fb2fe37e467d974592496856ca7b78060998608c2f952e43bc0bf11555cc5cb0fe17b2ec1be389871829bfe10dd4c4d2c8f9da2bd2868fd86791dc09dc4fa89a217458bdaed31003fdc3a7323189ba3ccbad6c8af17516e4557f61ad20180000000000000125f568ca7d3396b9057255f381855110eb3a673713716cdf010ddfa7977f92cf061ad125ca670353b45d53aae196b00271f9d3452b523b3dea22d6027625614312183724b71c7eb02083a410c1c99fa455013521f98686e472b70b560f7021f567adf4d", 0xb31bc9ae5bacb483) setsockopt(r0, 0x1000000029, 0xc, &(0x7f0000000140), 0x14) 664.486987ms ago: executing program 7 (id=81): ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x7f, 0x0, {0x1000000ff}}) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x200000000000a, 0x0, 0x0) sysctl$net_inet6_icmp6(&(0x7f0000000080)={0x4, 0x18, 0x3a, 0x8}, 0x4, &(0x7f00000000c0)="787e34bcce90214993b62bd217e3564281169e240596e45082ff9a9cf7144010288ca97e680e012693464c89607980b5bfee3317d5fb1d1869bdcd131d3e7002b18ece8c0bc01345a6f72ec6c89208de74f9a32f5a3f4fc185c288a7ef0848275a8788423cea456e2cfebfba39aa8455de3c2dd072f2e47c3047288a8fd42cdb1584176c773fd48585c5a3a58ef2db15cc1b736933673e613adcb451302c5631858a1c9aa2fa", &(0x7f0000000180)=0xa6, &(0x7f00000001c0)="c7", 0x1) sysctl$hw(&(0x7f0000000000)={0x4, 0x18}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = socket(0x18, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000040)={0x1c, 0x18, 0x1, 0x10001, "fe800500000000840800000500", 0x3}, 0x1c) mmap(&(0x7f0000328000/0x1000)=nil, 0x1000, 0x0, 0x10, r1, 0x1ffe000000000) sysctl$net_inet6_icmp6(&(0x7f0000000200)={0x4, 0x18, 0x3a, 0x1}, 0x2, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000040)=ANY=[@ANYRESOCT=0x0]) syz_extract_tcp_res$synack(&(0x7f0000000240), 0x1, 0x0) 445.753447ms ago: executing program 7 (id=83): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$BIOCLOCK(r0, 0x20004276) ioctl$BIOCGDIRFILT(r0, 0x4004427c, &(0x7f00000005c0)) (async) r1 = socket(0x1, 0x1, 0x61) ioctl$FIONREAD(r1, 0xc0106978, &(0x7f00000001c0)) 358.045188ms ago: executing program 7 (id=84): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0e99db6de761f86, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) select(0x40, &(0x7f0000000000)={0x8, 0x3ff, 0x0, 0x0, 0xe4c6, 0x0, 0x0, 0x3}, &(0x7f0000000380)={0xffb, 0x200, 0xfffffffffffffffa, 0x400000000000000, 0x0, 0x9, 0x2}, 0x0, 0x0) close(0x3) ioctl$BIOCIMMEDIATE(r0, 0x80044270, &(0x7f0000000080)=0xdf) 346.129187ms ago: executing program 7 (id=86): r0 = socket(0x20, 0x3, 0x35) listen(r0, 0xfffffffe) (async, rerun: 64) select(0x40, &(0x7f0000000000)={0x8, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x8}, 0x0, 0x0, 0x0) (async, rerun: 64) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt(r1, 0x6, 0x1000, 0x0, 0x0) (async) shutdown(r0, 0x2) 335.932673ms ago: executing program 4 (id=89): sysctl$net_inet_ipcomp(&(0x7f0000000000), 0x4, &(0x7f0000000180)="fd7f0b8fad85d531d0dca351bd3d3338d206c3b81ae93e2bb88fc827853a2a051032031611eb25866b77631decb32c7a5e7332aee59a18c5e6e0095730be5d66d143f5ec73a2cf0d7e6d5e8d8942b0327ed5a1904b7b4ffdbfaef635741dba67d57c07371e5b9a", &(0x7f0000000200)=0x67, &(0x7f0000000240)="be586a1507fb6cdbb6011f2218ac6314f2441a39ba0ee579cbf8294b8d87950cb56f57395de31c63d26cba2bb2c86f7418b9cc2df6ba9daa16c4efbdfcdb6639d293657e574c7462db7f59f96ed80cf6878ee0296934b7662bbf71d9f57374003c8f5534d302ab5fbe1ec76120fd641d8d99ca994bbb8e850046", 0x7a) setrlimit(0x2, &(0x7f0000000040)={0x60000000, 0x60000000}) r0 = syz_open_pts() r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$DIOCADDRULE(r1, 0xcd604404, &(0x7f0000000040)={0x8001, 0xfffffffb, 0x9fd, './file0\x00', './file0\x00', 0x0, "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"}) close(r0) r2 = syz_open_pts() ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000100)={0x920e, 0x6, 0x10, 0xffff, "08955ce9310000eb0a07fa23b8aa299cfcf20800", 0x4000000, 0x4}) r3 = socket(0x18, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000040)={0x1c, 0x18, 0x1, 0x4, "00000000000000000000000000000001", 0x1}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) sendto(r3, 0x0, 0x0, 0x0, &(0x7f0000000040)=@in6={0x1c, 0x18, 0x1, 0x5, "00da4f7962300000001000", 0xffffffbd}, 0x1c) ioctl$DIOCSETREASS(r1, 0xc004445c, &(0x7f0000000dc0)=0x2) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) r4 = msgget$private(0x0, 0x100) r5 = geteuid() r6 = semget(0x0, 0x1, 0x281) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) getsockopt$sock_cred(r7, 0xffff, 0x1022, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) setresgid(0x0, r9, 0x0) semctl$IPC_SET(r6, 0x0, 0x1, &(0x7f0000000780)={{0x0, r9, r8, r9, 0x8f, 0x9}, 0x0, 0x6, 0x0, 0x0, 0x1, 0x0, 0x200000000005}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = accept4(r10, 0x0, &(0x7f00000003c0), 0x8000) getsockopt$sock_cred(r11, 0xffff, 0x1022, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000000140)=0xc) r14 = syz_open_pts() fchown(r14, r12, r13) getsockopt$sock_cred(r3, 0xffff, 0x1022, &(0x7f0000000e00)={0x0, 0x0}, &(0x7f0000000e40)=0xc) getsockopt$SO_PEERCRED(r3, 0xffff, 0x1022, &(0x7f0000000e80)={0x0, 0x0, 0x0}, 0xc) msgctl$IPC_SET(r4, 0x1, &(0x7f0000000ec0)={{r5, r8, r12, r15, 0x0, 0x2, 0x80000001}, 0x0, 0x0, 0x9, 0x2, 0x8, r16, 0xffffffffffffffff, 0x7f, 0x0, 0x1}) ioctl$TIOCDRAIN(r2, 0x2000745e) 320.510625ms ago: executing program 4 (id=90): open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x0) r0 = syz_open_pts() syz_open_pts() ioctl$TIOCSTAT(r0, 0x20007465) r1 = socket$inet6(0x18, 0x1, 0x6) setsockopt(r1, 0xe, 0xae, &(0x7f0000000080)="d267", 0x2) sysctl$hw(&(0x7f0000000040)={0x6, 0xc}, 0x2, &(0x7f0000000080)="83e55350", &(0x7f0000000100)=0x4, &(0x7f0000000140), 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(0xffffffffffffff9c, 0xc01864c1, &(0x7f0000000000)={0x0, 0x1, 0xffffffffffffffff, 0x0, 0x3}) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2, 0x2012, r2, 0x268) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) sysctl$kern(&(0x7f0000000000)={0x1, 0x30}, 0x2, &(0x7f0000001940), &(0x7f0000000040)=0xfffffffffffffed0, 0x0, 0x0) r3 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$FIONREAD(r0, 0x4004667f, &(0x7f0000000740)) sysctl$kern(&(0x7f0000000500)={0x1, 0x2e}, 0x2, &(0x7f0000000540)="837b8c012ad9a16e51dcaef9dff2c3cbdc8fe3efa41092fd62c1ee3d10e765b18679eb05b587f4b7d85d17cf7bbf04001db68e3643033c87698feb2ccd773c54851e8fa760b275150fd3439218f4c6e10ebbdd1f5d66a344169247887beb261cd80a93b9f55f56880ee4df329b13e9d005ceaac549a462975c9fb824d20f154d5efb245cf17e024e41cb59a6123bd49c8eaed9f5f68361af24f92eb619be84a6bcef0b2b030ff5a26bcf00f3e3690c42c05317f1f965a06bd42295db2c93b3ace0abd667e19714f2cd455dff3608bc715bce78a439042b20e4fc9b40c8ebee13dcbe89d9ae073cee906692a978e202", &(0x7f0000000640)=0xef, &(0x7f0000000680)="dcdb7930672864378034b48c032da781e77ed7040bd045ac6f2a077cb10789600bb6f2bdf5bc3cf6a611e8c892e2f39ec95cea64bb6a997fae09dfe1e8e379d1522961e58a9df0af186ba3b3ccdc563e6d635711ccc48b747e2393a6a02e0daec777505975cae5e2fad1c0370358c7ffe180e3e28eee83ca06488ad5ce8d6ba0245351c680ec6959a3509fb8d8b63d8d7103f56900e3103b6bbbabb82d7d71ec2011d22050434045e05d7091c0f391", 0xaf) ioctl$DIOCXBEGIN(r3, 0xc0104451, &(0x7f0000000040)={0x42, 0x408, &(0x7f0000000080)=[{0x1, './bus/../file0/file0/../file0/file0/file0\x00', 0x74}]}) mkfifo(&(0x7f00000004c0)='./bus/../file0/file0/../file0/file0/file0\x00', 0x4) sysctl$hw(&(0x7f0000000780)={0x6, 0xb}, 0x2, &(0x7f00000007c0)="8470bb2fbfa8d1242ac1d2511d4f4bfd9b42dc4f9563a4cdaf5342d159b5a342b8dc89ae143f69f9a88f1ae20e008781a0c38d67f80bf503c4cb5456bdc771ed4dc83fab08f5ca6475369ab7c6c30bb8a5f8c519520bd21b0c4bec5f10a17a8a1a3630014429612d0b9e20d8989c25fd5d981a608e9e0b03daf133576a50dc7090180a3f88e8f7f98e7fb9d41aed9fcf699b73da8d45b8a15b0815832a1bbb0fd8a119bfaa5178dfc1ed958b13923bb7a4f213e1444fddc1dbeead3b5b47787156ac48099edd0338d463549fd68e4573d0743f7dd38fce3c08e2f7003d4b0c184cd287e72f2387d35e", &(0x7f00000008c0)=0xe9, &(0x7f0000000900)="7bd1b1d03b7b8799f277535982e3fc078ee24a61fb61beea77e5653390882685c88c813329d3528c5e60f5f73ad720b01973a7ee1a442a9060bd4be0ea27de5f088f98393c3e38d30d6d1f136613c09ffd0cb384afb82fd2c70ce8e72dd8961710df63e6b369aa802a8aa59009e94698719a72993d0cb8e69869d25214075ebbde1a1ec31e6150e641c5a2f5f78d34b55725feac65d509f1f531b47cbcf31a", 0x9f) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r4 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0xf94a14e19cec2761, 0x0) ioctl$TIOCSETA(r4, 0xc0104453, &(0x7f0000000040)={0x4, 0x408, 0x6, 0x10070, "456000004fcb420865abbf000200000000000001", 0xc, 0x3}) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x91) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000a00), 0x8, 0x0) read$audio(r6, &(0x7f00000009c0)=""/2, 0x2) r7 = openat$speaker(0xffffffffffffff9c, &(0x7f0000001280), 0x2, 0x0) writev(r7, &(0x7f0000000300)=[{&(0x7f0000000140)="ce5fd0c108ebd280672b", 0xa}], 0x1) unveil(0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mprotect(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0) sysctl$kern(&(0x7f0000000100)={0x1, 0x50}, 0x3, &(0x7f00000011c0)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xfe10, 0x0, 0xfffffffffffffff9) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r5, 0x0) 319.516494ms ago: executing program 4 (id=91): open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x0) r0 = syz_open_pts() syz_open_pts() ioctl$TIOCSTAT(r0, 0x20007465) r1 = socket$inet6(0x18, 0x1, 0x6) setsockopt(r1, 0xe, 0xae, &(0x7f0000000080)="d267", 0x2) sysctl$hw(&(0x7f0000000040)={0x6, 0xc}, 0x2, &(0x7f0000000080)="83e55350", &(0x7f0000000100)=0x4, &(0x7f0000000140), 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(0xffffffffffffff9c, 0xc01864c1, &(0x7f0000000000)={0x0, 0x1, 0xffffffffffffffff, 0x0, 0x3}) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2, 0x2012, r2, 0x268) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) sysctl$kern(&(0x7f0000000000)={0x1, 0x30}, 0x2, &(0x7f0000001940), &(0x7f0000000040)=0xfffffffffffffed0, 0x0, 0x0) r3 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$FIONREAD(r0, 0x4004667f, &(0x7f0000000740)) sysctl$kern(&(0x7f0000000500)={0x1, 0x2e}, 0x2, &(0x7f0000000540)="837b8c012ad9a16e51dcaef9dff2c3cbdc8fe3efa41092fd62c1ee3d10e765b18679eb05b587f4b7d85d17cf7bbf04001db68e3643033c87698feb2ccd773c54851e8fa760b275150fd3439218f4c6e10ebbdd1f5d66a344169247887beb261cd80a93b9f55f56880ee4df329b13e9d005ceaac549a462975c9fb824d20f154d5efb245cf17e024e41cb59a6123bd49c8eaed9f5f68361af24f92eb619be84a6bcef0b2b030ff5a26bcf00f3e3690c42c05317f1f965a06bd42295db2c93b3ace0abd667e19714f2cd455dff3608bc715bce78a439042b20e4fc9b40c8ebee13dcbe89d9ae073cee906692a978e202", &(0x7f0000000640)=0xef, &(0x7f0000000680)="dcdb7930672864378034b48c032da781e77ed7040bd045ac6f2a077cb10789600bb6f2bdf5bc3cf6a611e8c892e2f39ec95cea64bb6a997fae09dfe1e8e379d1522961e58a9df0af186ba3b3ccdc563e6d635711ccc48b747e2393a6a02e0daec777505975cae5e2fad1c0370358c7ffe180e3e28eee83ca06488ad5ce8d6ba0245351c680ec6959a3509fb8d8b63d8d7103f56900e3103b6bbbabb82d7d71ec2011d22050434045e05d7091c0f391", 0xaf) ioctl$DIOCXBEGIN(r3, 0xc0104451, &(0x7f0000000040)={0x42, 0x408, &(0x7f0000000080)=[{0x1, './bus/../file0/file0/../file0/file0/file0\x00', 0x74}]}) mkfifo(&(0x7f00000004c0)='./bus/../file0/file0/../file0/file0/file0\x00', 0x4) sysctl$hw(&(0x7f0000000780)={0x6, 0xb}, 0x2, &(0x7f00000007c0)="8470bb2fbfa8d1242ac1d2511d4f4bfd9b42dc4f9563a4cdaf5342d159b5a342b8dc89ae143f69f9a88f1ae20e008781a0c38d67f80bf503c4cb5456bdc771ed4dc83fab08f5ca6475369ab7c6c30bb8a5f8c519520bd21b0c4bec5f10a17a8a1a3630014429612d0b9e20d8989c25fd5d981a608e9e0b03daf133576a50dc7090180a3f88e8f7f98e7fb9d41aed9fcf699b73da8d45b8a15b0815832a1bbb0fd8a119bfaa5178dfc1ed958b13923bb7a4f213e1444fddc1dbeead3b5b47787156ac48099edd0338d463549fd68e4573d0743f7dd38fce3c08e2f7003d4b0c184cd287e72f2387d35e", &(0x7f00000008c0)=0xe9, &(0x7f0000000900)="7bd1b1d03b7b8799f277535982e3fc078ee24a61fb61beea77e5653390882685c88c813329d3528c5e60f5f73ad720b01973a7ee1a442a9060bd4be0ea27de5f088f98393c3e38d30d6d1f136613c09ffd0cb384afb82fd2c70ce8e72dd8961710df63e6b369aa802a8aa59009e94698719a72993d0cb8e69869d25214075ebbde1a1ec31e6150e641c5a2f5f78d34b55725feac65d509f1f531b47cbcf31a", 0x9f) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r4 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0xf94a14e19cec2761, 0x0) ioctl$TIOCSETA(r4, 0xc0104453, &(0x7f0000000040)={0x4, 0x408, 0x6, 0x10070, "456000004fcb420865abbf000200000000000001", 0xc, 0x3}) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x91) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000a00), 0x8, 0x0) read$audio(r6, &(0x7f00000009c0)=""/2, 0x2) r7 = openat$speaker(0xffffffffffffff9c, &(0x7f0000001280), 0x2, 0x0) writev(r7, &(0x7f0000000300)=[{&(0x7f0000000140)="ce5fd0c108ebd280672b", 0xa}], 0x1) unveil(0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mprotect(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0) sysctl$kern(&(0x7f0000000100)={0x1, 0x50}, 0x3, &(0x7f00000011c0)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xfe10, 0x0, 0xfffffffffffffff9) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r5, 0x0) 292.041494ms ago: executing program 4 (id=92): setgid(0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = open(&(0x7f0000000140)='./file0\x00', 0x10686, 0x4) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x5, 0x8010, r1, 0x0) pwrite(r1, &(0x7f00000001c0)='5', 0x1, 0x7f) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r2 = open$dir(&(0x7f0000000300)='.\x00', 0x8, 0x4a) setgid(0xffffffffffffffff) setgroups(0x0, 0x0) fchmod(r2, 0xf3) setuid(0xffffffffffffffff) rename(&(0x7f0000000a80)='./file0\x00', &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') ioctl$WSMOUSEIO_SCALIBCOORDS(r1, 0x81205724, &(0x7f00000001c0)={0x6, 0x2, 0x9, 0xd, 0x8, 0x2b35, 0xfffffffe, 0x10, [{0x2, 0x9, 0x5, 0x80000000}, {0x4, 0x8, 0x9, 0xd}, {0x69cb, 0x0, 0x4, 0x9}, {0x5, 0x9, 0x0, 0x9}, {0x0, 0x2, 0x3, 0x6}, {0x2, 0x81, 0x9, 0x7}, {0x9, 0x7, 0xfffffffb, 0x6da}, {0x4, 0x0, 0x1, 0x7fff}, {0xf, 0x100, 0x7f, 0x3346}, {0x8001, 0x4, 0x9, 0x10001}, {0x8, 0x2, 0x0, 0x80000001}, {0x8, 0x7, 0x2f5, 0xfc78}, {0x2, 0x400, 0xa3, 0x7}, {0x6, 0x4, 0x9, 0x1}, {0x7, 0x7b0, 0x5, 0xc1}, {0x5, 0x1, 0x2d, 0x5}]}) getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) setgroups(0x1, &(0x7f0000000000)=[r3]) mknod(&(0x7f00000000c0)='./file0\x00', 0x1ffa, 0x0) 228.997207ms ago: executing program 4 (id=93): sysctl$vfs_nfs(&(0x7f0000000000)={0xa, 0xe}, 0x3, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x18004) sysctl$net_pipex(&(0x7f0000000000)={0x4, 0x22}, 0x3, 0x0, 0x0, 0x0, 0x0) connect(r0, 0x0, 0x0) r1 = socket$inet6(0x18, 0x3, 0x0) getsockopt(r1, 0x29, 0x68, 0x0, 0x0) syz_emit_ethernet(0x1000e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaa2ffffffffffff0800457f89300067000000119078ffffffffac000400660ecf043b0005e0000001e000000100"/62]) 227.092251ms ago: executing program 4 (id=94): setrlimit(0x8, &(0x7f0000000000)={0x41, 0x5f}) r0 = syz_open_pts() close(r0) (async) r1 = syz_open_pts() ioctl$TIOCSETAW(r1, 0x802c7415, &(0x7f0000000100)={0x77ffffff, 0x8, 0x7fffffff, 0xffff7df8, "ec7600b72802100006faef0a00", 0x80000003, 0x6}) (async) r2 = open(&(0x7f0000000080)='./file0\x00', 0x9cab835cfdc52675, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb5219f1000b913f1, 0x0) flock(r2, 0x1) (async) r3 = socket(0x2, 0x2, 0x0) setsockopt(r3, 0x0, 0x4, &(0x7f0000000040), 0x0) (async) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000540)="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", 0x221}, {&(0x7f0000000940)="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", 0x274}], 0x2) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000380)) mknod(&(0x7f00000000c0)='./file1\x00', 0x4, 0x10001) (async) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x2, 0x0, 0xd}, 0x4, 0x0, 0x0, 0x0, 0x0) ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x0, [{0x2, 0x7}, {0x3, 0x40}, {0x1, 0xef}, {0x0, 0x2800}, {0x3}, {0x3, 0x1}, {0x0, 0xaa59}, {0x3, 0x5}, {0x1, 0x1}, {0x3, 0x100}, {0x3, 0x2}, {0x3, 0x80000000}, {0x1, 0x3}, {0x0, 0xfffffffd}, {0x1, 0x5}, {0x1, 0x1}, {0x3, 0x1}, {0x3}, {0x3, 0xfffffffe}, {0x1, 0x7ff}, {0xbb08c0840fa32129, 0xa}, {0x0, 0x2}, {0x1}, {0x0, 0xf205}, {0x3, 0xffffff}, {0x1, 0x1}, {0x0, 0x1ff}, {0x3, 0x2}, {0x2, 0xffffffff}, {0x2, 0xb}, {0x1, 0x5}, {0x2}]}) (async) socket(0x1, 0x3, 0xfd) pipe(&(0x7f0000000000)) (async) r4 = socket(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000280)={0x10, 0x2, 0x1, 0x200000e3}, 0x10) setsockopt$sock_int(r4, 0xffff, 0x1023, &(0x7f0000000040)=0x6, 0x4d) (async) ioctl$VMM_IOC_WRITEREGS(0xffffffffffffffff, 0x82485608, &(0x7f0000000100)={0x793, 0x4}) (async) r5 = socket(0x18, 0x1, 0x0) (async) r6 = syz_open_pts() ioctl$TIOCSETA(r6, 0x802c7414, &(0x7f00000003c0)={0x3, 0x0, 0xbf6, 0x1, "4116b064bec1744b0fd80f36c616863c14cc4942", 0x3}) (async) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) (async) ioctl$FIONREAD(r5, 0xc0106924, &(0x7f00000001c0)) ioctl$FIONREAD(r5, 0x8080691a, &(0x7f0000000100)) (async) msgget(0x0, 0x322) (async) msgget(0x0, 0x440) 226.293555ms ago: executing program 6 (id=95): r0 = socket(0x11, 0x3, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1002, &(0x7f0000000000)=0x13, 0x4) sendto$unix(r0, &(0x7f0000000200)="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", 0xb1, 0xe, 0x0, 0x78) sysctl$net_inet_icmp(&(0x7f0000001380)={0x4, 0x2, 0x1, 0x5}, 0x4, &(0x7f0000000000), 0x0, 0x0, 0x0) 224.562812ms ago: executing program 6 (id=96): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x10, 0x2, 0x3}, 0x10) listen(r0, 0x4) semctl$SETVAL(0x0, 0x2, 0x8, &(0x7f0000000840)=0x4) syz_emit_ethernet(0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000000800452000280000000001069078ac1400bbac1400aa4e214e23", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50020040907a0000"]) sysctl$net_inet_tcp(&(0x7f0000000000)={0x4, 0x2, 0x6, 0x15}, 0x4, 0x0, 0x0, 0x0, 0x0) 222.450472ms ago: executing program 1 (id=97): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) r0 = socket(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x10, 0x2, 0x1, 0x5}, 0x9) sendmmsg(r0, &(0x7f0000002500)={{0x0, 0x0, 0x0, 0x0, 0x0, 0xe8}}, 0x38, 0x4) 4.549106ms ago: executing program 6 (id=98): mknod(&(0x7f0000000e40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x100d02) accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000000)) open(&(0x7f0000000040)='./file1\x00', 0x18289, 0x8) rename(&(0x7f0000000a80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mkfifo(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x82) 1.70294ms ago: executing program 1 (id=99): mknod(&(0x7f0000000040)='./file0\x00', 0x2000, 0x40000801) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x80, 0xe4) ioctl$TIOCMBIS(r0, 0x8004746c, &(0x7f0000000200)=0x80000000) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x200, 0x186) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x2010, r1, 0x0) select(0x40, &(0x7f0000000000)={0xf, 0x9, 0x0, 0x5, 0x2, 0x5, 0x6, 0x6}, 0x0, &(0x7f0000000080)={0xfffffffffffffff7, 0x7, 0x6, 0x2, 0x2, 0xc, 0xd249, 0xa}, &(0x7f0000000140)={0x4, 0x3}) r2 = socket(0x1e, 0x3, 0x0) r3 = socket$inet(0x2, 0x4, 0x2) shutdown(r3, 0x1) setresuid(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(r2, &(0x7f0000000000)={&(0x7f0000000040)=@file={0x3, 0x0, './file0\x00'}, 0xa, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x40a) 605.538µs ago: executing program 3 (id=75): r0 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7959) poll(&(0x7f0000000440), 0x0, 0x6) (async) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000000)="7f454c4602df7a264ee4975f55011a49b70cb710aa950000000a52e92a24d18fcf8fd1f9794ffa08bb11bafcdc24ff4c5d0b5c7b1ad1a2ec434c500191", 0x3d}, {&(0x7f0000000340)="1551e6", 0x3}], 0x2) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000080)={0x2, 0x6a, 0x6, 0x4, 0x0}) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000180)={0x0, 0xf0, 0x2, 0x35314152, 0x81954b350594b4fa, [r1, r1, r1, r1], [0x4, 0x1, 0x7, 0xcaa3], [0x5, 0x4, 0x6, 0x3], [0x1, 0xc5, 0x6, 0xaf5]}) (async) r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0x8, 0x0) ioctl$BIOCSETIF(r4, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) (async) ioctl$BIOCSETF(r4, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f00000000c0)=[{0x6c, 0x29, 0xb2, 0x10}, {0x24, 0x6, 0xd, 0x80}, {0x6, 0x8, 0x7, 0x4}]}) (async) syz_emit_ethernet(0x22, &(0x7f00000005c0)=ANY=[@ANYRES16=r3, @ANYRES16=r2, @ANYRESOCT=r1, @ANYRES16=r0, @ANYRES64=r3, @ANYRESOCT, @ANYRES64=r1, @ANYRES16, @ANYRES32=r1]) ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f0000000200)={0x0, 0x4, 0x3ff, 0x34324241, 0x2, [r3, r1, r1, r1], [0x10001, 0x1, 0x7, 0x5], [0x6, 0x8b2, 0x3, 0x9], [0xffff, 0x3, 0x1, 0x4]}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)={r1}) (async) ioctl$WSDISPLAYIO_SMODE(r0, 0x8004574c, &(0x7f0000000280)) (async) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x0, 0xfe, 0x0, 0x10001}, {0x2}]}) (async) sysctl$kern(&(0x7f00000000c0)={0x1, 0x33}, 0x2, 0x0, 0x0, 0x0, 0x0) (async) setrlimit(0x2, &(0x7f0000000400)={0x60000000, 0x60000000}) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) r5 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) ioctl$WSMOUSEIO_SETPARAMS(r5, 0x80105727, &(0x7f0000000000)={&(0x7f0000000040)=[{0x26, 0xfb}, {0x22}], 0x2}) sysctl$kern(&(0x7f00000002c0)={0x1, 0x14}, 0x2, &(0x7f0000000300)="3643d4d9d3d6a2a80ccd8f83eee24fef5727a430676a97d13525353545fbfdd43fa5dadc077645d5667906dfe6", &(0x7f0000000380)=0x2d, &(0x7f00000003c0)="397da5bc229cb6e6ce8b2e1e3fe92a03c45b951a23e0c2e24764ef5c08e830c072a48585d5a4a2cf5ee0bca80ec8d392143492841a0ecc", 0x37) (async) sysctl$kern(&(0x7f00000000c0)={0x1, 0x45}, 0x3, &(0x7f0000002480)="71f91eca6e530c79e2f8e2a2ce3471ac0058bc5a91501d94a34bfec38a820600000000000000dc0225f0e4cf52b7d99d15d923", &(0x7f0000000080)=0x1232, 0x0, 0xfffffffffffffe4d) (async) pselect(0x40, &(0x7f0000000080)={0x6, 0x2, 0xfffffffffffffff7, 0xc, 0x7fffffffffffffff, 0x1, 0x7, 0x6}, 0x0, 0x0, 0x0, 0x0) (async) r6 = kqueue() kevent(r6, &(0x7f0000000000), 0x96, &(0x7f0000000340), 0xfffa4961, 0x0) r7 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x7e, 0x0) ioctl$TIOCSETA(r7, 0xcd60441a, &(0x7f0000000080)={0x1, 0x5, 0xb, 0xf26e, "2000030100010000000000000068a95a010400", 0x6}) (async) r8 = openat$speaker(0xffffffffffffff9c, &(0x7f0000001280), 0x2, 0x0) pwritev(r8, &(0x7f0000000340)=[{&(0x7f0000000040)="8e7d4dba1edea349879f0a34105825bcd10fd38364e032d205050460b1436a628ef9490041", 0x25}], 0x1, 0xa4f) (async) pwritev(r8, &(0x7f0000001440)=[{&(0x7f0000000080)="00804f6c99f22ad13579033f80473628df31451fe08e095fad50356ec12d9f1e00c91f4532", 0x25}], 0x1, 0x10) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) sysctl$vm(&(0x7f0000000040)={0x2, 0x8}, 0x2, &(0x7f0000000000)="0000040c", &(0x7f0000000540)=0x4, &(0x7f0000000580)="096c4b1a", 0x4) 409.138µs ago: executing program 5 (id=39): socket$inet(0x2, 0x4000, 0x6) r0 = socket(0x18, 0x1, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) (async) ioctl$FIONREAD(r0, 0xc0106924, &(0x7f00000001c0)) (async, rerun: 32) r1 = open(&(0x7f0000000080)='./file0\x00', 0x10, 0xe0) (rerun: 32) ioctl$FIONBIO(r1, 0x82907003, &(0x7f0000000140)=0x2) ioctl$FIONBIO(r1, 0xc0307004, &(0x7f0000000140)) (async) r2 = socket(0x2, 0x3, 0x0) ioctl$FIONREAD(r2, 0x40047309, &(0x7f00000001c0)) (async) ioctl$DIOCGETSTATE(r1, 0xc1084413, &(0x7f0000000280)={{0xb, './bus\x00', [{[@v4=@rand_addr=0x4, @v6=@remote={0xfe, 0x80, '\x00', 0x0}], [0x80, 0x7]}, {[@v4=@local={0xac, 0x14, 0x0}, @v4=@remote={0xac, 0x14, 0x0}], [0x8, 0x1], 0x70, 0x18}], {{0x1854, 0xd, 0xf2, 0x1}, 0x31, 0xca, 0x8, 0x8, 0x8001, 0x48, 0x4}, {{0x1ff, 0x7f, 0x6, 0x3}, 0x2, 0xa4e, 0x4, 0x5, 0x4, 0x9, 0x8}, @v6=@mcast2, 0x1, 0xffffffaf, 0x2b, 0x9, 0x1000, [[0x3ff, 0x5], [0x80000001, 0x6]], [[0x80000001, 0x7], [0x9, 0x8001]], 0x8, [0x2, 0x9], 0x6, 0x30, 0x2, 0x2, 0xff, 0x1, 0x59, 0x6, 0x80, 0x4, 0x3, 0x9, "96f5"}}) r3 = socket(0x18, 0x3, 0x0) r4 = semget(0x0, 0x1, 0x281) (async) setreuid(0x0, 0xee01) (async) symlink(&(0x7f0000000780)='./bus/\x00', &(0x7f0000000740)='./bus\x00') (async) open(&(0x7f0000000000)='./bus/\x00', 0x200, 0x0) semctl$IPC_SET(r4, 0x0, 0x1, &(0x7f0000000780)={{0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x0, 0x6, 0x0, 0x0, 0x1, 0x0, 0x200000000005}) (async) setitimer(0x2, &(0x7f0000000080)={{0x3, 0x9}, {0x9, 0x3}}, 0x0) (async, rerun: 32) mknod(&(0x7f0000000040)='./file1\x00', 0x4, 0x2db6) (async, rerun: 32) mknod(&(0x7f00000000c0)='./file1\x00', 0x2000, 0x637d) r5 = open(&(0x7f0000000800)='./file1\x00', 0x21, 0x1be) (async, rerun: 64) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6381) (async, rerun: 64) open(&(0x7f0000000200)='./file0\x00', 0x100, 0x100) (async) open(&(0x7f0000000180)='./file0\x00', 0x80000000000206, 0x0) (async, rerun: 32) r6 = setsid() (rerun: 32) ktrace(&(0x7f0000000040)='./file0\x00', 0x4, 0x11, r6) (async) writev(r5, &(0x7f0000002a40)=[{0x0}], 0x1) ioctl$FIONREAD(r3, 0x8080691a, &(0x7f0000000100)) r7 = socket$inet(0x18, 0x3, 0x102) sendmsg(r7, &(0x7f0000000240)={&(0x7f0000000140)=@un=@file={0x2, 0x0, './file0\x00'}, 0xa, &(0x7f00000003c0)=[{&(0x7f0000000180)="638802000000339afe51f6f2efa24a85abd9612dd68e59adfecf9323100084410a8591426ee03e", 0x27}, {&(0x7f0000000680)="a2", 0x1}], 0x2, 0x0}, 0x402) 0s ago: executing program 6 (id=100): pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffff9c, 0x81205724, &(0x7f0000000040)={0x80000000, 0xffff63de, 0x8000005, 0x6, 0x5, 0x3, 0xf7, 0x10, [{0x8, 0x2, 0xfffff11b, 0x80000001}, {0x9, 0x7, 0x1, 0x1001}, {0x30000, 0x4baa, 0x3, 0xd}, {0x17, 0x7, 0x800000f, 0xfffffff9}, {0x6, 0xfffff800, 0x5, 0xffffefff}, {0x7890, 0x671e, 0x8, 0x2}, {0x3, 0x800, 0x3, 0xfffffffa}, {0x203, 0xffffffff, 0x27ffc, 0xffffe269}, {0x9, 0xffc, 0x20c4, 0x7fff}, {0xa, 0xfffffffa, 0x0, 0x8bfd}, {0x3, 0x0, 0x4000000c, 0x7}, {0x9, 0x8, 0x5, 0x5}, {0x401, 0x5, 0x40000b, 0x2}, {0x8003, 0x4, 0x1, 0x6f5fc48f}, {0x10000, 0x5, 0x7, 0x9}, {0x8ff9, 0x2, 0x108001, 0x400}]}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xfffffffffffffe3c, 0x0, 0x37) readv(r0, &(0x7f0000002080)=[{&(0x7f0000000080)=""/2, 0x2}, {&(0x7f0000000b80)=""/147, 0x93}, {&(0x7f0000000c40)=""/185, 0xb9}, {&(0x7f0000000d00)=""/93, 0x5d}, {&(0x7f0000000d80)=""/82, 0x52}, {&(0x7f0000000e00)=""/40, 0x28}, {&(0x7f0000000e40)=""/4096, 0x1000}, {&(0x7f0000001e40)=""/234, 0xea}, {&(0x7f0000001f40)=""/85, 0x55}, {&(0x7f0000001fc0)=""/130, 0x82}], 0xa) openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f00000000c0)=@file={0x0, 0x1, './file0\x00'}, 0xa) listen(r2, 0x1) r3 = socket$unix(0x1, 0x1, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x5, 0x1, './file0\x00'}, 0xa) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) accept4(r2, &(0x7f0000000180)=@in, &(0x7f0000000140)=0x10, 0xc000) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc290560b, &(0x7f0000000100)={0x10, 0x800, [{&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x800}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, 0xd154}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x3}, {&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x2}, {&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x4000000000000040}, {&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x7}, {&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x7}, {&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x619}, {&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x2}, {&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x3000)=nil, 0xeb}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff7000/0x3000)=nil, 0xfff}, {&(0x7f0000ff8000/0x2000)=nil, &(0x7f000007b000/0x4000)=nil, 0x8}, {&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x7}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0xb1}, {&(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x3}, {&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0xffffffffffff0000}], './file0\x00', 0x3, 0x4}) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) r4 = socket(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000040)={0x10, 0x2, 0x3}, 0x10) r5 = socket(0x2, 0x8002, 0x0) r6 = fcntl$dupfd(r5, 0x2, 0xffffffffffffffff) closefrom(r6) r7 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$DIOCRCLRTABLES(r7, 0xc450443c, &(0x7f00000001c0)={{'./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', './file0\x00', 0x48, 0xa}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x7, 0x80000000, 0x2, 0x5}) r8 = socket$inet6(0x18, 0x2, 0x0) setsockopt$sock_int(r8, 0xffff, 0x1000, &(0x7f0000000140)=0x5, 0x4) bind$inet6(r8, &(0x7f0000000040)={0x1c, 0x18, 0x1, 0x4, "00000000010000000600", 0x62a4}, 0x1c) connect$inet6(r8, &(0x7f00000001c0)={0x1c, 0x18, 0x0, 0x8, "0000000082c935b9435ddb1500", 0x4001d7}, 0x1c) connect$inet6(r8, &(0x7f0000000000)={0x1c, 0x18, 0x1, 0x2, "0bad6daf0b5ffce3b1a74c3fc10edd0d", 0x3ff}, 0x1c) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="19", 0xfffffe98}], 0x1) closefrom(r1) ioctl$BIOCSRTIMEOUT(r0, 0x8010426d, &(0x7f00000000c0)={0xf3c7199}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.230' (ED25519) to the list of known hosts. V…²D+SŸ(ÒŠ¼ãHÖå*�Y’T¿*·É'¿á0Œ¢®�pƒ©wpËÿöoŒñ³_¡ñãÿ ºðž,§ñ˜µBnÏç?ýß µ°�GŠ]äsµ€&XÖ4³þ‘,ù'w ¶³N•3uOX*ÀþyÜ`(À›nTš\œ“û¶ejAÀx†˜@r〞4HQ.!GÇ(¸»Óÿ¿™ELy‚ÊfiÅ×°^À«œŠÀÙ‚®,½ýN/^¶11XFy¢­ðçŽÉ¤ÐkRr¾ç^ÉJY3 ’åq´¢pÁøûøÉyÎS8@é;2ož]LÔ=UeXºŠÌ&Ãf·‰ÁÒ½ÒÓÛŽ–lú™@<kÜA8th°E)Úà¦ÝIJZ‘({Á_«dþÀlŒ P¬‚Q6¨Ý@­Á¾ráSx:1Tɇ„Ì \6(Áò@ùÕ1ë<�·5TÊF z;~�ЛäW~ž,˜òÛI·™KŠÌ´ 8  ¹ß´ qzp�]ïOëõ­mø3Z,ÀQ_¡?´?|>†¥Cã&S´±²ÆÉíÖÎû:-ÞP^„«*xßÇé%îžÌ9YÏeÒ ä.t¼‚áárzì)´ÕöKFV€z©1ÀûG™V âWë˜RÖ%æšÀcjáL²ÅÉH ¥XÊ� žºž‚Uñ'iäÕ¢ÌP.x7‹ ’¡H£ñM�ûÒ8ãüê 5±&‹Än©hýÔ:!/³§JQÙvW­M§¸ì�5O$œÅ£pžÛ8"Åôùãö9]ÿýšðBÀª6­�ˆpîÅÑa§joóøbÙ§þÅf±òì“ßX,ºÒAÃç‹<òª,|=pßO¢¯ŒæËP÷<^}“«õE#cU¦Zôå˜mÞ•{Ä2ÕðEí �ùÌZ×w÷g:^V¿Fî/ O®�ÎMaIA24Û�d™ä}v¢�·ÄÌîÁì�±^/�SÈw誀¤S&•¿,æ9å#4H¶xœ¿r‰ô¨/àL?9[Ϻ¤òÞšnnþû0'b Qõc ìëÅÒAjêU)Ç—˜@fŠoja Ð??|{v�V’²Š�L_ÁZ暨ß&‘Ê3ÅeúôؘÇÔq�¥W™=×\¯GÇîÉüÙž ú<ˆL··Ró"¿%o\uëƒr“Ÿÿ¨Ø=$wkĪPê´hŸ�YéK£k7³Õ¬s=ÞQ½hÝà�¤Æ™ªÌcÇÕ/d)>ö®yÒCш8ÈT9“å¤+ŸEÿŸF£;‘ Ê+,<±46ߡӲ÷�Ïjù†‘EyWΜ-»S“ЕرäAZ×*¯tm»)ôÐí 7¸D§àOኟ:r—Íäw¤ gêž®³gÌ`|öá—˜²ôñSH†§Ý¶‚µ^Rî…s$ÂÖíqD�½~Ú'í~ÔCX‚(SEÄ�C®™É|šê£ˆ—ÁÃ=glÿUôxr,d£Zuº0–¤žÊÓæ•?’C²þ®ÿ)Ϫ1yJŒñs#´$go�®N…C¡ àG¸•öÎZÇ�`pôZRvzÅAt®D†bpn²ÒGd€Ÿüó®ùePoj—úQ6ÒºÙ'ÆåôtàƒSÃîK=[gëD wmÛ†ÑL‘ðϸÎ;þE{ß`À«òÊï ­.ç=:¾z݃¼ùîùµ-E�öÖÕ›]„d³¨4vœG⯰«â?¦ ÐÎZvhFk³gÙdå>›ÅKvæù`tæª'Ò ©uhÊC4ŽâAM”[ÎBzA—^3|«Á`Ó¡ ‹ú¡èÅθ*sÇyçÈZÓFé^»§Ÿ¬Ù«ƒˆnSsz.•ʽ‚ &ú°‹¶™¹Ö©}™Ð9ÆE—j6ž›ÚV\1Œb1 Ýã@7Í.l@L½WP´õop‡¾ŽV<ß¿6LFÕøðÆLÀŸNC»�Âa)t’6ÙGr‘z¹´™OàÉÒÙϰï”ÝœäGK|`7EYnEíh$�K˜ÒÏ�ŸÐbHŒ¤‚?¤™-ˆƒÀÃ(V„†¥P¨Þ.†íëqˆ°¢´-‡ÚÈK'>¶@§ ë€2e–ߣЙ=™ÑC¨EPòæ,‡ön8dh mšØ År#›$¾ C¯5k‹ti¶ùIéÛï„·‡ÿAÑÁA¬“_äþß­Ôü¶owt(ÏŒ�eÍvrš8ŽÜYy;µ,ûkS‡A}cD]Œ˜p®ß6µ¶vd_P’ÙÛ´èÈWZïEonL·�4Äi+ެ1W2b°ê/�² ­këÚòUßá‡n¬Á)8C¦à Àjþƒíܸ- ÜŽWpÐÐOÐ*«ö¬Ø¬ìT’—Ðé .ÝÒ%Õ¦­@‚TæÖÆÈ,{˜¯{k¯‰;“~¿V{�PàXiz0,2ñt9(ÍðÉŽøÍþG¤ÒøNÑwú�mcÛ[ƒëZ8Ê/dÀOVs8òCgE|Ón»!:b÷fPRUiúqÀ�§bÝŸ„Ÿ±™¨ÉÃ+)‚�U»VZ·:¬_ú8IäIš‡íZù‰Cs(:.Ùæ‹‘Úd{Âðçæ»‰IˆÉ®ÍÉÙÜ–~Á½_:z¨½Ú×�{EŠÃYSÃ|Bœ�CMM+ôW-pì´üÿDˬ‘Eµì¾G¨w�Œ¹,ˆ^ ?å‡UÀ¢zEú§›À[´z?éÍùÀÏ*�éŸ=›��d`ìH3î îÈÊd)úîž�Ïdñ†hz¾TL>à•½ýÍÊXuí.Êš\r.³üÃMؼøá"«š,ìt®;aå §ø’{lz΃,KÎ4#—âòÝôƒ]‚…›x誾"»�j\ÖÛJžJ”MO(²&SÞ ƒ’Rg8ÐlbaF8mlB?žÃâ=†3íF03«ìpI ¯<%GKrôšHÿTϵZ V­“]4eP™èxÿÖwƒcƒ­_�%{‡îKæ"aA|JJ›÷hWVÜýDL0za'‡IL#ñÌAæ'ô±¨�cêW×ç×Ò’¸o;ë0õ`1YgR¨CÒh”j‹ÓñÓ¬£�|øW?®š> üÇÚ*}Q¾Ìrº>øñÜG\EÂùÿð¾õAtªcÇß뱸vŸJ¼\œiy©ŒG±L)W‘ÙÄÉaͯ1ÏÕÖe A {ŒmŠŸ´ é`mv£þÝí5$³›gi�XßJµ@V(zGÑ;‰Ív{´L«Ë6àKµ<¢sÙ$ÈÛÏš!¯=8µ—®•†¦äßpŒõ¸ù¶”;V’¯OZ! ÃÈm##´ÀáÔgÔ9™¨ :¯�=´J|Õ?)R±eá[«%š“±f"åÃQß p/2ß_>`“òìÅé¬U‹nð£qZ?�Ö™î”2Ì‘a,ÃÎq¦Oã+«ûÈÀ1­Ù S¡ûˉhDó«š‚ì©X ¹�t�2Ï„«кfÞ†E˜¼º¥ c Gf3¶ÿlCÓk?ªSæœâ?ÎŽ·~öüOí�>˜ß:ÿ~›0¿«tZºüpɉ,Êð=¾ƒó"�eÀqŠŠ†ªä²„ÜúUÍÿ×ÖOÙ\×bW¹÷"ýÀdw¹Ô¿.¨ÁmK‰ï3i@SƒÌÑ-i™ÁÓóê‰{Sq¾ï>ùyM>º¶øçÑNã m8I0üû�w2+2Hô> ¬Ýw–¿ó¤€Ž%×åSMSo>Oiß»W'ª±a‡�JëßÉC’ýƒ¦¿�¿ík©PõåÚtRóì.>.0±âë"V€|Å$%·J R!ffK8®¡Î$_‚àžÙ\(v®#œÆ’/ÅlƒBq�V“Œ7"‚Qc«_žœ:nEî%�zn¿ad"“‰õ§Vœ8}¸ÜÚ‚Æ®×xçB³îLæq�é=®Aèdö$9jv8b['QΙVñáAPøeY#‹®KÑçÆ!hEiŽB}—ÒëË5k¿×Ëò8×»�x7wòÇw°x$ZW¨¥l8=úÈ+ݩ…M”°Ú#Qöh(Mª{°”†?q�?¡ÍË^ßÏ|âÚ¿SÀõÔsPÞ±EœÞù;tÔËp¶%²Ádz&eUX#– äÿ‚ë)œpÂmg�áÄFÍ|wŠ,Ú0Τ†×z·á�.[„óu⊞k;`´ÏñQ hì€Ý�ótïm(¾´}<—1í€f®:†«µG3Û´_^ëJGÓÿ¥…Yû;Ý=ÝìvG8šUá ×�ÈÄóÀ� ±µ/œ ¾ž•&½ls]!Å”iß ddb{1}> set $lines = 0 ddb{1}> set $maxwidth = 0 ddb{1}> show panic *cpu0: acquiring blockable sleep lock with spinlock or critical section held (rwlock) vmmaplk ddb{1}> show kasan No such command ddb{1}> trace proc_trampoline() at proc_trampoline+0xc7 end of kernel end trace frame: 0x7dceef8a4cc0, count: -1 ddb{1}> show registers rdi 0 rsi 0 rbp 0xffff80003c3b6670 rbx 0 rdx 0 rcx 0xffff80002a22b4d8 rax 0x2a r8 0xffff80003c3b65a0 r9 0 r10 0x609ef59aaf85e80c r11 0xdad456fb8c2575a5 r12 0 r13 0 r14 0 r15 0 rip 0xffffffff82e8c4c7 proc_trampoline+0xc7 cs 0x8 rflags 0x246 rsp 0xffff80003c3b65f0 ss 0 proc_trampoline+0xc7: movl $0,%gs:0x688 ddb{1}> show proc PROC (syz-executor) tid=299211 pid=25311 tcnt=2 stat=onproc flags process=0 proc=0 runpri=86, usrpri=86, slppri=16, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff80002a22b240,0xffff80002a22ad20 process=0xffff800045fe4ea8 user=0xffff80003c3b1000, vmspace=0xfffff0806cc1c208 estcpu=36, cpticks=2, pctcpu=0.0, user=1, sys=1, intr=0 ddb{1}> ps PID TID PPID UID S PRLAGS PFLAGS WAIT COMMAND 68682 58623 87278 0 2 0 0 syz-executor 68682 243884 87278 0 7 0 0x4000000 syz-executor *25311 299211 80300 0 7 0 0 syz-executor 25311 148196 80300 0 3 0 0x4000080 fsleep syz-executor 32177 380328 36518 0 4 0x2004 0x80000 syz-executor 32177 502671 36518 0 3 0x2004 0x4000000 inode syz-executor 32177 453872 36518 0 4 0x2004 0x4080000 syz-executor 32177 175759 36518 0 4 0x2004 0x4080000 syz-executor 89037 472906 63031 0 3 0x2 0 biowait syz-executor 98892 481958 40734 0 3 0 0x80 nanoslp syz-executor 98892 451013 40734 0 3 0 0x4000080 fsleep syz-executor 98892 63976 40734 0 3 0 0x4000080 kqread syz-executor 98892 136907 40734 0 3 0 0x4000080 fsleep syz-executor 50894 459983 63031 0 3 0x2 0 biowait syz-executor 36518 306673 63031 0 3 0x2 0x80 nanoslp syz-executor 80300 413620 63031 0 3 0x2 0x80 nanoslp syz-executor 40734 217174 63031 0 3 0x2 0x80 nanoslp syz-executor 87278 158212 63031 0 3 0x2 0x80 nanoslp syz-executor 63031 295082 15206 0 3 0x2 0x80 wait syz-executor 15206 10411 43109 0 3 0x100002 0x88 sigsusp ksh 43109 483360 38347 0 3 0x10 0x88 kqread sshd-session 38347 72625 84581 0 3 0x12 0x80 kqread sshd-session 14106 485721 1 0 3 0x100003 0x80 ttyin getty 84581 102066 1 0 3 0 0x88 kqread sshd 75790 255436 78611 74 3 0x1100012 0x80 bpf pflogd 78611 108211 1 0 3 0 0x80 sbwait pflogd 23410 161579 72797 73 3 0x1100010 0x80 kqread syslogd 72797 435542 1 0 3 0x100002 0x80 sbwait syslogd 83834 158458 1 0 3 0x100000 0x80 kqread resolvd 5569 10829 213 77 3 0x100012 0x80 kqread dhcpleased 63488 517961 213 77 3 0x100012 0x80 kqread dhcpleased 213 25008 1 0 3 0 0x80 kqread dhcpleased 91621 34930 0 0 3 0x14000 0x200 bored smr 70943 436197 0 0 2 0x14000 0x200 zerothread 17829 296331 0 0 3 0x14000 0x200 aiodoned aiodoned 27529 240031 0 0 3 0x14000 0x200 syncer update 39923 178174 0 0 3 0x14000 0x200 cleaner cleaner 8713 4665 0 0 3 0x14000 0x200 reaper reaper 35333 312383 0 0 3 0x14000 0x200 pgdaemon pagedaemon 32842 147263 0 0 3 0x14000 0x200 bored viomb 99044 342104 0 0 3 0x14000 0x40000200 acpi0 acpi0 41762 502549 0 0 3 0x14000 0x40000200 idle1 23197 395748 0 0 3 0x14000 0x200 bored softnet1 70144 501325 0 0 3 0x14000 0x200 bored softnet0 57474 294001 0 0 3 0x14000 0x200 smrbar systqmp 29257 397246 0 0 3 0x14000 0x200 bored systq 4537 11211 0 0 3 0x14000 0x200 tmoslp softclockmp 59231 135233 0 0 3 0x14000 0x40000200 tmoslp softclock 28767 169443 0 0 3 0x14000 0x40000200 idle0 1 131152 0 0 3 0x2 0x80 wait init 0 0 -1 0 3 0x10010000 0x200 scheduler swapper ddb{1}> show all locks CPU 0: exclusive mutex &table->inpt_mtx r = 0 (0xffffffff83b409b0) #0 witness_lock+0x5f1 #1 mtx_enter+0x4b4 #2 in_pcballoc+0x192 #3 rip6_attach+0x11c #4 socreate+0x238 #5 sys_socket+0x124 #6 syscall+0xbd4 #7 Xsyscall+0x128 CPU 1: exclusive mutex &pmap->pm_mtx r = 0 (0xfffff0806cc1bc10) #0 witness_lock+0x5f1 #1 mtx_enter+0x4b4 #2 pmap_enter+0x24b #3 udv_fault+0x1de #4 uvm_fault+0x22e #5 upageflttrap+0xa9 #6 usertrap+0x430 #7 recall_trap+0x8 Process 68682 (syz-executor) thread 0xffff800045fe3a18 (243884) exclusive rwlock inet46 r = 0 (0xffff800010fdd7b8) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 socreate+0x214 #3 sys_socket+0x124 #4 syscall+0xbd4 #5 Xsyscall+0x128 shared rwlock netlock r = 0 (0xffffffff83992cf0) #0 witness_lock+0x5f1 #1 rw_do_enter_read+0x3e8 #2 solock_shared+0x6e #3 socreate+0x214 #4 sys_socket+0x124 #5 syscall+0xbd4 #6 Xsyscall+0x128 Process 25311 (syz-executor) thread 0xffff80002a22b4d8 (299211) exclusive kernel_lock &kernel_lock r = 0 (0xffffffff83a74c00) #0 witness_lock+0x5f1 #1 uvm_fault+0x1ea #2 upageflttrap+0xa9 #3 usertrap+0x430 #4 recall_trap+0x8 exclusive rwlock uobjlk r = 0 (0xfffff0806cc671c8) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 uvm_fault+0x1e5 #3 upageflttrap+0xa9 #4 usertrap+0x430 #5 recall_trap+0x8 shared rwlock vmmaplk r = 0 (0xfffff0806cc1c308) #0 witness_lock+0x5f1 #1 rw_do_enter_read+0x3e8 #2 uvmfault_lookup+0x122 #3 uvm_fault_check+0x4f #4 uvm_fault+0x106 #5 upageflttrap+0xa9 #6 usertrap+0x430 #7 recall_trap+0x8 exclusive mutex &pmap->pm_mtx r = 0 (0xfffff0806cc1bc10) #0 witness_lock+0x5f1 #1 mtx_enter+0x4b4 #2 pmap_enter+0x24b #3 udv_fault+0x1de #4 uvm_fault+0x22e #5 upageflttrap+0xa9 #6 usertrap+0x430 #7 recall_trap+0x8 Process 89037 (syz-executor) thread 0xffff80002a22ba08 (472906) exclusive rrwlock inode r = 0 (0xfffff0807be6d570) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 rrw_enter+0xc6 #3 VOP_LOCK+0xbd #4 ufs_ihashins+0x4f #5 ffs_vget+0x187 #6 ffs_inode_alloc+0x279 #7 ufs_mkdir+0xfc #8 VOP_MKDIR+0x101 #9 domkdirat+0x179 #10 syscall+0xb17 #11 Xsyscall+0x128 exclusive rrwlock inode r = 0 (0xfffff0806feccc68) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 rrw_enter+0xc6 #3 VOP_LOCK+0xbd #4 vn_lock+0xa4 #5 vfs_lookup+0x12b #6 namei+0x7c1 #7 domkdirat+0x8b #8 syscall+0xb17 #9 Xsyscall+0x128 Process 50894 (syz-executor) thread 0xffff800045fe3cb0 (459983) exclusive rrwlock inode r = 0 (0xfffff0807be6d0d0) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 rrw_enter+0xc6 #3 VOP_LOCK+0xbd #4 ufs_ihashins+0x4f #5 ffs_vget+0x187 #6 ffs_inode_alloc+0x279 #7 ufs_mkdir+0xfc #8 VOP_MKDIR+0x101 #9 domkdirat+0x179 #10 syscall+0xb17 #11 Xsyscall+0x128 exclusive rrwlock inode r = 0 (0xfffff0806d0be7b0) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 rrw_enter+0xc6 #3 VOP_LOCK+0xbd #4 vn_lock+0xa4 #5 vfs_lookup+0x12b #6 namei+0x7c1 #7 domkdirat+0x8b #8 syscall+0xb17 #9 Xsyscall+0x128 Process 57474 (systqmp) thread 0xffff800045ffea60 (294001) shared rwlock systqmp r = 0 (0xffffffff839e7e68) #0 witness_lock+0x5f1 #1 taskq_thread+0x12a #2 proc_trampoline+0x10 ddb{1}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 11053 12145K 12219K 166960K 12277 0 pcb 17 12K 12K 166960K 38 0 rtable 206 7K 8K 166960K 745 0 pf 32 17K 23K 166960K 113 0 ifaddr 35 6K 7K 166960K 98 0 ifgroup 47 2K 2K 166960K 112 0 sysctl 3 1K 9K 166960K 7 0 counters 66 36K 37K 166960K 108 0 ioctlops 0 0K 4K 166960K 1587 0 iov 0 0K 12K 166960K 8 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1292 81K 81K 166960K 1535 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 5K 166960K 5 0 VM map 2 1K 1K 166960K 2 0 sem 27 1K 1K 166960K 82 0 dirhash 12 2K 2K 166960K 12 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 14 46K 85K 166960K 423 0 sigio 0 0K 0K 166960K 1 0 proc 72 115K 164K 166960K 891 0 subproc 63 3K 4K 166960K 180 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 16 0 in_multi 77 5K 6K 166960K 237 0 ether_multi 1 0K 0K 166960K 2 0 mrt 0 0K 0K 166960K 7 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 49 228K 228K 166960K 49 0 exec 1 0K 1K 166960K 554 0 fusefs mount 1 32K 32K 166960K 1 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 211 158K 185K 166960K 5180 0 UVM aobj 8 2K 2K 166960K 8 0 pinsyscall 39 78K 103K 166960K 1923 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 0K 166960K 2 0 NDP 18 1K 2K 166960K 67 0 temp 38 9123K 9140K 166960K 6794 0 kqueue 15 24K 24K 166960K 42 0 SYN cache 2 16K 16K 166960K 2 0 ddb{1}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 28 0 0 1 0 1 1 0 8 0 rtpcb 120 62 0 59 1 0 1 1 0 8 0 rtentry 176 246 0 157 6 0 6 6 0 8 1 unpcb 144 92 0 75 2 0 2 2 0 8 1 syncache 336 7 0 7 1 0 1 1 0 8 1 tcpcb 736 45 0 40 1 0 1 1 0 8 0 arp 136 42 0 28 1 0 1 1 0 8 0 inpcb 328 209 0 200 2 0 2 2 0 8 0 nd6 152 62 0 44 2 0 2 2 0 8 0 pkpcb 40 2 0 2 1 0 1 1 0 8 1 kcovpl 48 20 0 13 1 0 1 1 0 8 0 ppxss 1192 6 0 6 1 0 1 1 0 8 1 pfstscr 40 3 0 2 1 0 1 1 0 8 0 pffrag 232 2 0 0 1 0 1 1 0 482 0 pffrnode 88 2 0 0 1 0 1 1 0 8 0 pffrent 40 2 0 0 1 0 1 1 0 8 0 pfosfp 40 1428 0 1005 5 0 5 5 0 8 0 pfosfpen 112 1428 0 714 21 0 21 21 0 8 0 pfanchor 1288 18 0 18 1 0 1 1 0 8 1 pfqueue 320 1 0 1 1 0 1 1 0 8 1 pfstitem 24 43 0 0 1 0 1 1 0 8 0 pfstkey 128 44 0 1 2 0 2 2 0 8 0 pfstate 448 44 0 1 5 0 5 5 0 8 0 pfrule 1360 24 0 18 2 0 2 2 0 8 0 art_heap8 4096 2 0 0 2 0 2 2 0 8 0 art_heap4 256 997 0 542 32 0 32 32 0 8 3 art_table 40 999 0 542 6 0 6 6 0 8 0 art_node 32 246 0 151 1 0 1 1 0 8 0 sysvmsgpl 40 1 0 1 1 0 1 1 0 8 1 semupl 112 1 0 1 1 0 1 1 0 8 1 semapl 72 79 0 54 1 0 1 1 0 8 0 shmpl 120 5 0 0 1 0 1 1 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino2pl 256 1768 0 272 94 0 94 94 0 8 0 ffsino 296 1768 0 272 116 0 116 116 0 8 0 nchpl 144 2112 0 363 65 0 65 65 0 8 0 rtmask 32 1 0 1 1 0 1 1 0 8 1 vnodes 216 2001 0 0 112 0 112 112 0 8 0 namei 1024 8906 0 8902 4 1 3 3 0 8 2 percpumem 16 70 0 21 1 0 1 1 0 8 0 kstatmem 264 57 0 34 2 0 2 2 0 8 0 scsiplug 72 1 0 1 1 0 1 1 0 8 1 scxspl 216 7016 0 7014 4 3 1 3 1 8 0 plimitpl 152 57 0 39 1 0 1 1 0 8 0 sigapl 424 727 0 683 7 0 7 7 0 8 0 knotepl 120 552 0 0 17 0 17 17 0 8 0 kqueuepl 224 51 0 38 1 0 1 1 0 8 0 pipepl 344 181 0 153 3 0 3 3 0 8 0 fdescpl 528 709 0 681 3 0 3 3 0 8 0 filepl 160 2655 0 2451 10 0 10 10 0 8 0 lockfpl 104 45 0 42 1 0 1 1 0 8 0 lockfspl 48 22 0 19 1 0 1 1 0 8 0 sessionpl 144 71 0 62 1 0 1 1 0 8 0 pgrppl 48 92 0 75 1 0 1 1 0 8 0 ucredpl 104 235 0 222 1 0 1 1 0 8 0 zombiepl 144 685 0 683 1 0 1 1 0 8 0 processpl 1240 727 0 683 5 0 5 5 0 8 0 procpl 664 949 0 897 6 0 6 6 0 8 0 sockpl 752 369 0 340 5 0 5 5 0 8 1 mcl64k 65536 2 0 0 1 0 1 1 0 8 0 mcl16k 16384 1 0 0 1 0 1 1 0 8 0 mcl12k 12288 1 0 0 1 0 1 1 0 8 0 mcl8k 8192 3 0 0 1 0 1 1 0 8 0 mcl4k 4096 133 0 0 17 0 17 17 0 8 0 mcl2k 2048 19 0 0 3 0 3 3 0 8 0 mextrefs 64 17 0 0 1 0 1 1 0 8 0 mtagpl 96 3 0 0 1 0 1 1 0 8 0 mbufpl 256 170 0 0 11 0 11 11 0 8 0 bufpl 272 2455 0 105 157 0 157 157 0 8 0 anonpl 32 5334 0 0 43 0 43 43 0 247 0 amapchunkpl 152 14502 0 14077 26 0 26 26 0 158 6 amappl16 200 1348 0 1333 4 2 2 4 0 8 0 amappl15 192 4 0 4 1 1 0 1 0 8 0 amappl14 184 584 0 583 1 0 1 1 0 8 0 amappl13 176 217 0 205 1 0 1 1 0 8 0 amappl12 168 1010 0 984 2 0 2 2 0 8 0 amappl11 160 6 0 6 1 1 0 1 0 8 0 amappl10 152 64 0 49 1 0 1 1 0 8 0 amappl9 144 277 0 277 1 1 0 1 0 8 0 amappl8 136 153 0 151 1 0 1 1 0 8 0 amappl7 128 171 0 158 1 0 1 1 0 8 0 amappl6 120 277 0 275 1 0 1 1 0 8 0 amappl5 112 105 0 93 1 0 1 1 0 8 0 amappl4 104 346 0 326 1 0 1 1 0 8 0 amappl3 96 2597 0 2514 3 0 3 3 0 8 0 amappl2 88 794 0 721 2 0 2 2 0 8 0 amappl1 80 12554 0 11952 15 0 15 15 0 8 1 amappl 88 4206 0 4066 4 0 4 4 0 92 0 uvmvnodes 80 103 0 0 3 0 3 3 0 8 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 254 0 254 2 1 1 1 0 8 1 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 7 0 0 1 0 1 1 0 8 0 uaddrrnd 24 710 0 682 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 710 0 682 1 0 1 1 0 8 0 vmmpekpl 168 7764 0 7709 3 0 3 3 0 8 0 vmmpepl 168 54046 0 52297 87 0 87 87 0 357 2 vmsppl 488 709 0 682 5 0 5 5 0 8 0 rwobjpl 80 17977 0 16968 25 1 24 24 0 8 0 pdppl 4096 1427 0 1364 109 34 75 81 0 8 12 pvpl 32 11794 0 0 96 0 96 96 0 265 0 pmappl 256 709 0 682 3 0 3 3 0 8 0 extentpl 40 45 0 27 1 0 1 1 0 8 0 phpool 112 450 0 37 12 0 12 12 0 8 0 ddb{1}> machine ddbcpu 0 Stopped at x86_ipi_db+0x27: addq $0x8,%rsp x86_ipi_db(ffffffff83913ff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 x86_bus_space_io_read_4(b008,0) at x86_bus_space_io_read_4+0x37 acpitimer_delay(1) at acpitimer_delay+0xb7 comcnputc(800,73) at comcnputc+0x29b cnputc(73) at cnputc+0x67 db_putchar(73) at db_putchar+0x36d kprintf() at kprintf+0x2a75 db_printf(ffffffff834ac139) at db_printf+0x9b panic(ffffffff8356d847) at panic+0x103 witness_checkorder(fffff0806cc1c8c0,1,0) at witness_checkorder+0x11ee rw_do_enter_read(fffff0806cc1c8a8,0) at rw_do_enter_read+0x99 uvmfault_lookup(ffff80002a3561f0,0) at uvmfault_lookup+0x122 end trace frame: 0xffff80002a3560e0, count: 0 ddb{0}> trace x86_ipi_db(ffffffff83913ff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 x86_bus_space_io_read_4(b008,0) at x86_bus_space_io_read_4+0x37 acpitimer_delay(1) at acpitimer_delay+0xb7 comcnputc(800,73) at comcnputc+0x29b cnputc(73) at cnputc+0x67 db_putchar(73) at db_putchar+0x36d kprintf() at kprintf+0x2a75 db_printf(ffffffff834ac139) at db_printf+0x9b panic(ffffffff8356d847) at panic+0x103 witness_checkorder(fffff0806cc1c8c0,1,0) at witness_checkorder+0x11ee rw_do_enter_read(fffff0806cc1c8a8,0) at rw_do_enter_read+0x99 uvmfault_lookup(ffff80002a3561f0,0) at uvmfault_lookup+0x122 uvm_fault_check(ffff80002a3561f0,ffff80002a356228,ffff80002a356260,0) at uvm_fault_check+0x4f uvm_fault(fffff0806cc1c7c0,100000000,0,2) at uvm_fault+0x106 kpageflttrap(ffff80002a3563a0,1000000b1) at kpageflttrap+0x2f4 kerntrap(ffff80002a3563a0) at kerntrap+0x19d alltraps_kern_meltdown() at alltraps_kern_meltdown+0x7b in_pcbhash_insert(fffff08066785a48) at in_pcbhash_insert+0x159 in_pcballoc(ffff800010fdd798,ffffffff83b409a0,1) at in_pcballoc+0x24c rip6_attach(ffff800010fdd798,0,1) at rip6_attach+0x11c socreate(18,ffff80002a356640,3,0) at socreate+0x238 sys_socket(ffff800045fe3a18,ffff80002a356790,ffff80002a3566e0) at sys_socket+0x124 syscall(ffff80002a356790) at syscall+0xbd4 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x15ffe4c41f0, count: -26 ddb{0}> machine ddbcpu 1 Stopped at proc_trampoline+0xc7: movl $0,%gs:0x688 proc_trampoline() at proc_trampoline+0xc7 end of kernel end trace frame: 0x7dceef8a4cc0, count: 14 ddb{1}> trace proc_trampoline() at proc_trampoline+0xc7 end of kernel end trace frame: 0x7dceef8a4cc0, count: -1