last executing test programs: 7.606599677s ago: executing program 1 (id=429): r0 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x8, 0x0) setsockopt(0xffffffffffffffff, 0x11, 0x1, &(0x7f00000000c0)='/', 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xa7210e10bc3c9de9) mkdir(&(0x7f0000000180)='./file0\x00', 0x25) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) unveil(&(0x7f00000000c0)='./file2\x00', &(0x7f0000000000)='r\x00') unveil(&(0x7f0000000200)='./file0/file0\x00', &(0x7f00000002c0)='x\x00') unveil(&(0x7f0000000340)='./file1\x00', &(0x7f0000000380)='r\x00') r1 = socket(0x18, 0x2, 0x0) setsockopt(r1, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) setsockopt(r1, 0x1000000000029, 0x9, &(0x7f0000000040)="03000000", 0x4) r2 = dup2(r1, r1) sendmmsg(r2, &(0x7f0000000200)={{&(0x7f0000000140)=@in6={0x1c, 0x18, 0x3, 0x7, "ff0100", 0x3}, 0x1c, 0x0, 0x0, 0x0}}, 0x38, 0x8) fcntl$setown(r0, 0x6, 0x0) 7.60224839s ago: executing program 1 (id=432): mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x5900) syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000000080)={0x3, 0x0, 0x0, 0x100000001}) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = socket(0x2, 0x1, 0x0) connect$unix(r1, &(0x7f0000000000), 0x10) setrlimit(0x4, 0x0) getpeername$unix(r1, 0x0, &(0x7f0000001340)) sysctl$net_inet6_ip6(&(0x7f0000000040)={0x4, 0x18, 0x29, 0x35}, 0x4, 0x0, 0x0, 0x0, 0x0) r2 = setsid() ktrace(0x0, 0x2, 0xf0bf9083bffff6e7, r2) open(&(0x7f0000000000)='./file0\x00', 0x8, 0x9bf2d3725864749b) mknod(&(0x7f0000000200)='./file0\x00', 0x2000, 0x4287e) open(&(0x7f0000000300)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7891) r3 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000100), 0x40000, 0x0) ioctl$WSDISPLAYIO_GETEMULTYPE(r3, 0x80184901, &(0x7f00000000c0)={0x9, './file0\x00'}) 7.555746765s ago: executing program 1 (id=434): r0 = semget$private(0x0, 0xb, 0x19f) r1 = semget(0x0, 0x1, 0x281) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$sock_cred(r2, 0xffff, 0x1022, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f00000005c0)=0xc) setresgid(r4, r4, r4) semctl$IPC_SET(r1, 0x0, 0x1, &(0x7f0000000780)={{r3, r4, r3, r4, 0x8f, 0x1a00, 0x0, 0x0, 0xb}, 0x0, 0x6, 0x0, 0x0, 0x7, 0x0, 0x8}) setgroups(0x0, 0x0) setuid(0xffffffffffffffff) r5 = semget(0x0, 0x1, 0x281) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)) semctl$GETVAL(r5, 0x2, 0x5, 0x0) sysctl$kern(&(0x7f0000000280)={0x1, 0x9}, 0x2, &(0x7f00000002c0)="ac44eb3e", &(0x7f0000000300)=0x4, &(0x7f0000000340)="4d42a57f", 0x4) pipe(&(0x7f0000000000)={0xffffffffffffffff}) connect(r6, &(0x7f0000000040)=@un=@abs={0x80, 0x1, 0x0, 0x2}, 0x8) semop(r0, &(0x7f0000000140)=[{0x1, 0x142, 0x1c00}, {0x4, 0x8}, {0x3, 0x4c69, 0x800}, {0x0, 0x100, 0x1800}, {0x3, 0xffff, 0x800}, {0x3, 0xfff, 0x1000}], 0x6) 7.550458005s ago: executing program 1 (id=435): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0xbe, 0x0) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x60, 0x36, 0x2, 0x4}, {0x40, 0xf0, 0x3}, {0x6, 0x8d}]}) setrlimit(0x8, 0x0) r1 = syz_open_pts() close(r1) r2 = syz_open_pts() ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f00000000c0)={0x5b0, 0xee6f, 0x7, 0x160350d, "cc14d30d2100caa26a364fa8a325850d1ec100", 0xa00001, 0x6}) read(r2, &(0x7f0000000000)=""/63, 0x3f) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000040)={0x28, 0x0}) 6.094115916s ago: executing program 6 (id=489): setuid(0xee01) syz_emit_ethernet(0xe, &(0x7f0000000100)=ANY=[@ANYRESOCT]) syz_extract_tcp_res$synack(&(0x7f00000001c0), 0x1, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1) open(&(0x7f0000000000)='./file0\x00', 0x9cab835cfdc52675, 0x0) r0 = socket(0x1, 0x8002, 0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = socket$inet(0x2, 0x3, 0x0) setsockopt$inet_opts(r2, 0x0, 0x21, &(0x7f0000000240), 0x0) r3 = open(&(0x7f0000000240)='./file0\x00', 0x205, 0x0) fcntl$lock(r3, 0x9, &(0x7f00000002c0)={0x0, 0x0, 0x3b5, 0x1000381210089}) closefrom(r1) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) nanosleep(0x0, 0x0) syz_extract_tcp_res(&(0x7f0000000200), 0x7, 0x81) sysctl$net_pipex(&(0x7f00000002c0)={0x6, 0x1b, 0x4}, 0x3, &(0x7f0000000240), 0x0, 0x0, 0x0) socket$inet(0x2, 0x2, 0x0) mknod(&(0x7f0000000080)='./file0\x00', 0x2000, 0x608) r4 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) ioctl$VNDIOCSET(r4, 0xc0384600, &(0x7f0000000140)={&(0x7f0000000180)='./file0\x00', 0x567, 0x0}) open(&(0x7f0000000280)='./file0/file0\x00', 0x68e, 0x2) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 5.834128631s ago: executing program 7 (id=504): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x10, 0x2, 0x3}, 0x10) listen(r0, 0x7fff) syz_emit_ethernet(0x46, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x3d, 0x38, 0x68, 0x0, 0x0, 0x6, 0x0, @multicast1, @local={0xac, 0x14, 0x0}}, @tcp={{0x3, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0x2, 0x8200, 0x0, 0xfffc, {[@sack_perm={0x4, 0x2}, @timestamp={0x8, 0xa, 0xfffffff8}, @sack_perm={0x4, 0x2}, @generic={0x13, 0x2}]}}}}}}}) syz_emit_ethernet(0x99, &(0x7f0000000200)={@broadcast, @local, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x8b, 0xfffd, 0x0, 0x7, 0x1, 0x0, @broadcast, @multicast1, {[@timestamp={0x44, 0x4, 0x6, 0x1}]}}, @udp={{0x0, 0x2, 0x8}, {"21489e4311b3d62f57713f4786c82ff10da3ba2529bb9567964b44ca631af41c8199b3d3b0597965175eec93dd7167be5804e7955d18912bc22c89b978267bb81161ad6aaa1c06775c8d0d3b8faa9c2f834ec09d0c9a219cdcc822bafee0cc776a53bf2bb3da44356d8ce2"}}}}}}) 5.833010479s ago: executing program 7 (id=505): r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0xae828e137847f62, 0x9) sysctl$net_inet_carp(&(0x7f0000000080)={0x4, 0x2, 0x6, 0x3}, 0x4, 0x0, 0x0, &(0x7f0000000000)="e1000000", 0x4) ftruncate(r0, 0x48001000007) setsockopt(0xffffffffffffffff, 0x1000000029, 0x2e, &(0x7f0000000000), 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x0, 0x0}) r1 = socket(0x18, 0x3, 0x0) ioctl$FIONREAD(r1, 0xc0106924, &(0x7f00000001c0)) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x80000000000206, 0xb5) fcntl$lock(r2, 0x7, &(0x7f0000000040)={0x0, 0x0, 0xfffffffffffffffd, 0x1800300000004}) ioctl$FIONREAD(r1, 0x8080691a, &(0x7f0000000100)) openat$klog(0xffffffffffffff9c, 0x0, 0x400, 0x0) r3 = openat$bpf(0xffffffffffffff9c, 0x0, 0x184, 0x0) ioctl$BIOCSRTIMEOUT(r3, 0x8010427f, &(0x7f0000000100)={0x5, 0x6f}) openat$pf(0xffffffffffffff9c, 0x0, 0x1, 0x0) truncate(&(0x7f00000000c0)='./file0\x00', 0x6001000000) r4 = openat$pf(0xffffffffffffff9c, &(0x7f00000000c0), 0x82, 0x0) setitimer(0x2, &(0x7f0000000140)={{0x2, 0x122800000000009}, {0xffffdff0, 0x8020000000000001}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$TIOCSETA(r4, 0xcd60441a, &(0x7f0000000140)={0x5, 0x100, 0x4, 0x403, "000000000a00000f000000aff0338a6b4fc6d700", 0x8, 0x7}) mknod(&(0x7f0000000240)='./file0/file0\x00', 0x2000, 0xc886) 5.832356516s ago: executing program 7 (id=506): r0 = socket$inet6(0x18, 0x1, 0x6) setsockopt$sock_int(r0, 0xffff, 0x1, &(0x7f0000000080)=0x400, 0x4) (async) setsockopt$sock_int(r0, 0xffff, 0x1, &(0x7f0000000080)=0x400, 0x4) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x18, 0x1, 0x400e, "ffb40c196b992c1999020004001400", 0x80000000}, 0x1c) (async) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x18, 0x1, 0x400e, "ffb40c196b992c1999020004001400", 0x80000000}, 0x1c) getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f00000000c0)={0x0}, 0xc) r2 = getuid() setuid(r2) stat(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r0, &(0x7f0000000840)=[{&(0x7f0000000200)=""/188, 0xbc}, {&(0x7f0000000340)=""/117, 0x75}, {&(0x7f00000003c0)=""/67, 0x43}, {&(0x7f0000000480)=""/138, 0x8a}, {&(0x7f0000000540)=""/224, 0xe0}, {&(0x7f0000000640)=""/165, 0xa5}, {&(0x7f0000000700)=""/84, 0x54}, {&(0x7f0000000780)=""/131, 0x83}], 0x8, 0x7fff) (async) preadv(r0, &(0x7f0000000840)=[{&(0x7f0000000200)=""/188, 0xbc}, {&(0x7f0000000340)=""/117, 0x75}, {&(0x7f00000003c0)=""/67, 0x43}, {&(0x7f0000000480)=""/138, 0x8a}, {&(0x7f0000000540)=""/224, 0xe0}, {&(0x7f0000000640)=""/165, 0xa5}, {&(0x7f0000000700)=""/84, 0x54}, {&(0x7f0000000780)=""/131, 0x83}], 0x8, 0x7fff) setsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f00000001c0)={r1, r2, r3}, 0xc) sysctl$hw(&(0x7f0000000900)={0x6, 0x18}, 0x2, &(0x7f0000000940)="e7cf49e892e6f6d6d23d734cf9ced7f0b075e44a07285c742aa4163815f6398531337ee29aa82052e3a3b13e3c588916282310148a9ae9925356a24845f16f954626d0e1bbf770f76aee29b0109c11839bb8cc02540811f02f4f681bc1ae63c58c3aa9357631da63d150aeabd117efb32c4f224f618409a35186cd383f1ab6a23ef820b6bb7b1ecfeb0811a9e42c984e4dd90bf38f99c132da7a44bc416a62c7a1466ba3b2c97c1a51fd1b96cd947421f8633f98e77e2b61ec43023b05c85036e88400705668f899788d5badd28672d85c40e7ec825a694505280442bca409e045f1de2e9fd9d7ca", &(0x7f0000000a40)=0xe8, &(0x7f0000000a80)="6d5502ad04f936cec9ebcc4e2959862b3567bd75b132cecf7d7ae067eb925f9fbb531b4357cfde6adc3aef8aa460c4f87b6f0d8b5906692b8dc01a15", 0x3c) bind$inet6(r0, &(0x7f00000008c0)={0x1c, 0x18, 0x2, 0x5, "6dbc1c2bde56647cf1e2ad354a743dc9", 0x9}, 0x1c) chmod(&(0x7f0000000040)='.\x00', 0x35e) (async) chmod(&(0x7f0000000040)='.\x00', 0x35e) syz_emit_ethernet(0x36, &(0x7f0000000440)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x8, 0xff, 0x0, @local={0xac, 0x14, 0x0}, @rand_addr=0xac1400ff}, @tcp={{0x1, 0x3, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x8, 0xff, 0x0, 0x8}}}}}}) setuid(0xee01) mkdir(&(0x7f0000000000)='./file0\x00', 0xfb) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0xfb) unveil(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000300)='x\x00') bind(0xffffffffffffffff, &(0x7f0000000080)=@un=@abs={0x2, 0x0, 0x0, 0x3}, 0x8) 5.785641566s ago: executing program 7 (id=507): mknod(&(0x7f0000000480)='./bus\x00', 0x2000, 0x412dff) r0 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000000)={'tap', 0x0}) readv(r0, &(0x7f0000000040)=[{&(0x7f0000002140)=""/4103, 0x1007}, {&(0x7f0000001140)=""/4092, 0xffc}], 0x2) 5.746498562s ago: executing program 7 (id=509): ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x801, 0x51, 0x2100008, 0x6, 0x80000001, 0x80000001, 0xfffe, 0x10, [{0x3, 0x9, 0x4, 0x71020}, {0x8, 0x8001, 0x8, 0xfffffff9}, {0x8, 0xf86, 0x0, 0x9}, {0xffffffff, 0x800, 0x8007, 0x6}, {0x7, 0x201726, 0x2800, 0x7}, {0xffffff02, 0xa, 0x3, 0x9d}, {0xce1, 0xffffffff, 0x4fa, 0x6d}, {0x6, 0x2512c1a3, 0x54, 0x8}, {0x2, 0x82, 0x5, 0x9}, {0x6, 0x8001, 0xd1b, 0x100}, {0x9, 0x10001, 0x40, 0x3}, {0x81, 0x9, 0x7, 0x2009}, {0xb8c, 0x5, 0x8, 0x4}, {0x29a7171a, 0x7f, 0x1, 0xc373}, {0xb6f, 0x407, 0x40041}, {0x8000, 0x1, 0x101002, 0x30004}]}) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file0\x00', 0x938, 0x20800c1, 0xf, 0x0, 0x1040807, 0x10050001, 0xfffffffe, 0x2, 0x2, 0xd, 0xf5fffffffffffff9}) r0 = socket(0x18, 0x3, 0x0) ioctl$FIONREAD(r0, 0xc0106924, &(0x7f00000001c0)) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$FIONREAD(r0, 0x8080691a, &(0x7f0000000100)) setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) r1 = open(&(0x7f0000000080)='./file1\x00', 0x18289, 0x1f0) write(r1, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) r2 = syz_open_pts() flock(r2, 0x1) fcntl$lock(r2, 0x9, &(0x7f00000001c0)={0x3, 0x0, 0x1000000, 0x300000003}) closefrom(r2) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x100) ioctl$VNDIOCSET(r3, 0x80184405, &(0x7f00000001c0)={0x0, 0x0, 0x0}) connect$unix(r3, &(0x7f00000000c0)=@abs={0xc, 0x1, 0x0, 0x1}, 0x8) fchmod(r1, 0x1a3) unveil(0x0, &(0x7f0000000140)='r\x00') ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f00000003c0)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[{}, {}, {}], &(0x7f0000000340)=[0x0], &(0x7f0000000380)=[0x0], 0x3, 0x1, 0x4, 0x0, 0x0, 0x12, 0x73, 0xa6, 0xfffffff9, 0x4, 0x4}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000580)={&(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0], 0x5, 0x5, 0x5, 0x4, 0x8, 0x8a, 0x1}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000006c0)={&(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0], &(0x7f0000000640)=[0x0], &(0x7f0000000680)=[0x0, 0x0], 0x5, 0x3, 0x1, 0x2, 0x3, 0x2, 0x6, 0x336}) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r5 = kqueue() ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f00000019c0)={0xfffffffc, 0xfffffffe, {[0xfffffffffffffffc, 0x8, 0x5, 0x100000000, 0xc05, 0x80000000, 0x8000002e, 0x0, 0x1, 0x3, 0x1, 0x3, 0xfffffffffffffffe, 0x1, 0x8, 0x5, 0xfffffffffffffff7, 0x100], [0x9, 0x5, 0xfffffffffffffff8, 0x0, 0x1, 0x80104000, 0xfffffffffffffffd, 0x0, 0x0, 0x48], [0x7, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0xfffffffffffffffe], [0x3, 0x20000000000, 0x0, 0x100000002, 0xfffffffffffffffe], [{0x0, 0xc, 0xfffffffe, 0x7d06}, {0x2, 0x2, 0x295dcbee, 0x3}, {0x0, 0xfffffffd, 0xfffffffe, 0xff9}, {0x1008, 0x0, 0x8, 0x3}, {0x8000, 0x400, 0x10, 0x5}, {0x7ffe, 0x2000, 0x40003, 0x1}, {0xfffe, 0x0, 0x7}, {0x0, 0x95b, 0x1fd, 0xc}], {0x0, 0x25, 0x1, 0x849}, {0x7, 0x40010, 0x4, 0x2}}}) kevent(r5, &(0x7f00000000c0), 0x138, 0x0, 0xffffffff, 0x0) closefrom(r4) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000980)={&(0x7f0000000700)=[0x0], &(0x7f0000000740)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000900)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000940)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x4, 0x1, 0x0, 0x0, 0x0, 0x6, 0x5, 0x9, 0x7, 0x3}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000b00)={&(0x7f0000000a00)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000a40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000a80)=[0x0], &(0x7f0000000ac0)=[0x0, 0x0, 0x0, 0x0], 0x5, 0x7, 0x1, 0x4, 0x1, 0x6, 0x2, 0x8}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r1, 0xc01864b0, &(0x7f0000000b80)={0x0, 0x0, 0x1, 0x0, 0x2}) 5.533160811s ago: executing program 6 (id=489): setuid(0xee01) syz_emit_ethernet(0xe, &(0x7f0000000100)=ANY=[@ANYRESOCT]) syz_extract_tcp_res$synack(&(0x7f00000001c0), 0x1, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1) open(&(0x7f0000000000)='./file0\x00', 0x9cab835cfdc52675, 0x0) r0 = socket(0x1, 0x8002, 0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = socket$inet(0x2, 0x3, 0x0) setsockopt$inet_opts(r2, 0x0, 0x21, &(0x7f0000000240), 0x0) r3 = open(&(0x7f0000000240)='./file0\x00', 0x205, 0x0) fcntl$lock(r3, 0x9, &(0x7f00000002c0)={0x0, 0x0, 0x3b5, 0x1000381210089}) closefrom(r1) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) nanosleep(0x0, 0x0) syz_extract_tcp_res(&(0x7f0000000200), 0x7, 0x81) sysctl$net_pipex(&(0x7f00000002c0)={0x6, 0x1b, 0x4}, 0x3, &(0x7f0000000240), 0x0, 0x0, 0x0) socket$inet(0x2, 0x2, 0x0) mknod(&(0x7f0000000080)='./file0\x00', 0x2000, 0x608) r4 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) ioctl$VNDIOCSET(r4, 0xc0384600, &(0x7f0000000140)={&(0x7f0000000180)='./file0\x00', 0x567, 0x0}) open(&(0x7f0000000280)='./file0/file0\x00', 0x68e, 0x2) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 5.289967079s ago: executing program 6 (id=489): setuid(0xee01) syz_emit_ethernet(0xe, &(0x7f0000000100)=ANY=[@ANYRESOCT]) syz_extract_tcp_res$synack(&(0x7f00000001c0), 0x1, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1) open(&(0x7f0000000000)='./file0\x00', 0x9cab835cfdc52675, 0x0) r0 = socket(0x1, 0x8002, 0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = socket$inet(0x2, 0x3, 0x0) setsockopt$inet_opts(r2, 0x0, 0x21, &(0x7f0000000240), 0x0) r3 = open(&(0x7f0000000240)='./file0\x00', 0x205, 0x0) fcntl$lock(r3, 0x9, &(0x7f00000002c0)={0x0, 0x0, 0x3b5, 0x1000381210089}) closefrom(r1) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) nanosleep(0x0, 0x0) syz_extract_tcp_res(&(0x7f0000000200), 0x7, 0x81) sysctl$net_pipex(&(0x7f00000002c0)={0x6, 0x1b, 0x4}, 0x3, &(0x7f0000000240), 0x0, 0x0, 0x0) socket$inet(0x2, 0x2, 0x0) mknod(&(0x7f0000000080)='./file0\x00', 0x2000, 0x608) r4 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) ioctl$VNDIOCSET(r4, 0xc0384600, &(0x7f0000000140)={&(0x7f0000000180)='./file0\x00', 0x567, 0x0}) open(&(0x7f0000000280)='./file0/file0\x00', 0x68e, 0x2) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 2.640159725s ago: executing program 0 (id=522): r0 = socket$inet(0x18, 0x3, 0x102) openat$klog(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg(r0, &(0x7f0000000240)={&(0x7f0000000280)=@in6={0x1c, 0x18, 0x1, 0x5df, "00000000000000000000000000000001", 0x101}, 0x1c, &(0x7f0000000080)=[{&(0x7f00000000c0)="630c000000008c0550144e36277ad377b4f6f2efa2ffffffff612dd68e59adffbb93232d44372e9b", 0x28}], 0x1, 0x0}, 0x0) setresgid(0x0, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x20, 0x0) flock(r1, 0x15) r2 = open(&(0x7f0000000080)='./file1\x00', 0x18289, 0x1f0) write(r2, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) fchmod(r2, 0x1a3) ioctl$KDSETLED(r2, 0x20004b42, &(0x7f0000000040)) 2.418627816s ago: executing program 6 (id=489): setuid(0xee01) syz_emit_ethernet(0xe, &(0x7f0000000100)=ANY=[@ANYRESOCT]) syz_extract_tcp_res$synack(&(0x7f00000001c0), 0x1, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1) open(&(0x7f0000000000)='./file0\x00', 0x9cab835cfdc52675, 0x0) r0 = socket(0x1, 0x8002, 0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = socket$inet(0x2, 0x3, 0x0) setsockopt$inet_opts(r2, 0x0, 0x21, &(0x7f0000000240), 0x0) r3 = open(&(0x7f0000000240)='./file0\x00', 0x205, 0x0) fcntl$lock(r3, 0x9, &(0x7f00000002c0)={0x0, 0x0, 0x3b5, 0x1000381210089}) closefrom(r1) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) nanosleep(0x0, 0x0) syz_extract_tcp_res(&(0x7f0000000200), 0x7, 0x81) sysctl$net_pipex(&(0x7f00000002c0)={0x6, 0x1b, 0x4}, 0x3, &(0x7f0000000240), 0x0, 0x0, 0x0) socket$inet(0x2, 0x2, 0x0) mknod(&(0x7f0000000080)='./file0\x00', 0x2000, 0x608) r4 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) ioctl$VNDIOCSET(r4, 0xc0384600, &(0x7f0000000140)={&(0x7f0000000180)='./file0\x00', 0x567, 0x0}) open(&(0x7f0000000280)='./file0/file0\x00', 0x68e, 0x2) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 2.418341621s ago: executing program 3 (id=548): open(&(0x7f0000000080)='./file0/file0\x00', 0x9cab835cfdc52675, 0xc3) r0 = openat$wsmouse(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$WSMOUSEIO_SETPARAMS(r0, 0x80105728, &(0x7f0000000040)={&(0x7f0000000000)=[{0x101, 0x7f}], 0x1}) (async) ioctl$WSMOUSEIO_SETPARAMS(r0, 0x80105728, &(0x7f0000000040)={&(0x7f0000000000)=[{0x101, 0x7f}], 0x1}) mlock(&(0x7f0000000000/0x2000)=nil, 0x2000) sysctl$kern(&(0x7f0000000100)={0x1, 0x50}, 0x3, &(0x7f00000011c0)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xfe10, 0x0, 0xfffffffffffffff9) 2.414029838s ago: executing program 2 (id=550): unveil(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='c\x00') mknod(&(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x70e, 0x0) r1 = kqueue() kevent(r1, &(0x7f0000000240)=[{{r0}, 0xfffffffffffffffc, 0x3, 0x1, 0x1, 0x1}], 0xf, 0x0, 0x8, 0x0) symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='.\x00') 2.196963847s ago: executing program 2 (id=551): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket$inet(0x2, 0x3, 0x7) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) mknodat(0xffffffffffffff9c, 0x0, 0x1000, 0x0) r1 = socket$inet(0x1e, 0x3, 0x0) getpeername(r1, 0x0, 0x0) open(0x0, 0x70e, 0x0) r2 = kqueue() r3 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x81, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$FIONREAD(r2, 0x80206910, &(0x7f00000001c0)) r5 = socket(0x18, 0x1, 0x0) r6 = kqueue() kevent(r6, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) ioctl$FIONREAD(r4, 0x4004667f, &(0x7f0000000040)) ioctl$FIONREAD(r5, 0x8020699d, &(0x7f00000001c0)) bind$inet(r0, &(0x7f0000000000)={0x10, 0x2, 0x3, 0x80010001}, 0x10) 2.195243009s ago: executing program 3 (id=552): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$FIONREAD(r0, 0x4004667f, &(0x7f0000000000)) (async) r1 = socket$unix(0x1, 0x5, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x400, 0x2e) ioctl$VMM_IOC_CREATE(r2, 0xca605601, &(0x7f0000000080)={0x10, 0xffffffff, [{&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x3}, {&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x81}, {&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x7}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0xdd}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil}, {&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0xfffffffffffffffa}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0xb6}, {&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff7000/0x9000)=nil, 0xfffffffffffffffe}, {&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x2}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0xc000)=nil, 0x2}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff7000/0x4000)=nil, 0x401}, {&(0x7f0000ff4000/0x1000)=nil, &(0x7f0000ff2000/0x4000)=nil, 0x1}, {&(0x7f0000ff5000/0x4000)=nil, &(0x7f0000ff7000/0x3000)=nil, 0x400}, {&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x6}, {&(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff4000/0x3000)=nil, 0x4}], './file0\x00', 0x100, 0x7, 0x2, 0xfe, [0x9, 0x0, 0x3, 0xc, 0x891, 0x4, 0x981, 0x1, 0x6440, 0x2, 0x5, 0x401, 0x1468, 0xe0c, 0x9, 0x12a0, 0x2, 0xe0000000, 0x0, 0x7ff, 0xc, 0x0, 0x8, 0x4, 0xd4e3, 0x1000, 0x43, 0x9, 0x7fffffff, 0x1, 0x40, 0x9, 0xc, 0x5, 0x5, 0x3, 0x8, 0x6, 0xec1b, 0xd6, 0xe0000000, 0xffffffff, 0x79, 0x6, 0x40, 0xfffffffa, 0x3, 0x7, 0x3, 0x10001, 0x7, 0x7f, 0xf, 0x4513, 0x4, 0x6, 0x6, 0x2, 0x4, 0x3, 0x1, 0x9, 0x9099, 0x0, 0x6, 0xf318, 0x2, 0x9, 0x42d, 0x4, 0x2, 0x7, 0x3, 0x7, 0x3, 0xfffffffc, 0x10000, 0x1, 0x3ff, 0x9, 0xfffffffd, 0x697e, 0x715, 0xd8, 0x7, 0x6, 0x3, 0xe, 0x4a28, 0x700000, 0xff5f, 0x345, 0x9cca, 0xfffffff8, 0x2, 0x8, 0x5, 0x2, 0x5a, 0x2a, 0x7f, 0x5, 0x5, 0x6, 0x575c6f5c, 0x0, 0x3ff, 0x6, 0x18000, 0x10, 0x55, 0x5, 0x6, 0x7, 0x8, 0x1, 0x72, 0x7a97, 0x80, 0xfce0, 0xfffffff1, 0x0, 0x8000, 0x0, 0x1, 0xffff0000, 0xff, 0x7f, 0xfffffeff, 0x8, 0x9, 0x7fff, 0x6, 0x3, 0xc, 0x6, 0x7fff, 0x34, 0xffffff23, 0x8410, 0x1, 0x101, 0x9, 0x4a3, 0x2, 0x22f, 0x1, 0x101, 0x4, 0x9, 0x664, 0x98ed, 0x2, 0x37b, 0x1ff, 0x2, 0xb1f, 0xc, 0x40, 0x5, 0xff, 0x1, 0x81, 0xce69, 0x101, 0x7ff, 0xe, 0x6, 0x5, 0x3, 0x7, 0x40, 0xffff9338, 0x7, 0x6, 0x6, 0x1, 0xcd4, 0x9, 0x4, 0x3, 0x4, 0x2, 0x7, 0x8, 0x8, 0x6, 0xcc06, 0x2, 0x2000000, 0x7, 0x8, 0x10001, 0x5, 0x93, 0x7, 0xf30b, 0x8, 0x5, 0x800, 0x77, 0xfff, 0x1, 0xff, 0x5, 0x3, 0x3, 0x1, 0x952b, 0x22d, 0x9, 0x63c, 0xd, 0x2, 0x810c2f38, 0x3, 0x2, 0x5, 0xf627, 0x9, 0x8000, 0x1, 0x5, 0x1ff, 0x8, 0x1, 0x9, 0x8000, 0x90, 0x8000, 0x6, 0x4, 0x25, 0xfffffff8, 0x401, 0xffffffb3, 0x3, 0x4, 0x40, 0x1, 0x754, 0x2, 0xcc4, 0x5, 0x0, 0x1ff, 0x4, 0x100, 0x0, 0x8, 0x1, 0xfffff001, 0x8, 0x88, 0xf, 0x101, 0x8001, 0x7, 0x7, 0x3, 0x5, 0xdb, 0xdbbd, 0x758, 0xe0000, 0x5, 0x1, 0xe, 0x3ff, 0x3, 0x6, 0x4, 0x10001, 0x9205, 0x7, 0x76, 0x2, 0x4, 0x3, 0x3f, 0x9, 0x3, 0x1000, 0x401, 0xc, 0x9, 0x7, 0x3, 0xa60, 0x6, 0x1, 0x0, 0x7fff, 0x0, 0x9, 0xe, 0x1, 0x9, 0x8, 0x3, 0x1, 0x3, 0x81, 0xf4c, 0x8f, 0x0, 0x7f, 0x1, 0x0, 0x6, 0x8, 0x1, 0xfd3, 0x6, 0xa, 0x0, 0x2, 0x7ff, 0xfffffeff, 0x3ff, 0x6, 0x3, 0x9eaa, 0x1, 0x2, 0x2, 0x7, 0x0, 0xfffffffc, 0x1, 0x7, 0x2, 0x6, 0x5, 0x1fc00, 0xfff, 0x6, 0x1, 0x0, 0x0, 0x9, 0x80000001, 0x4, 0x1, 0x2, 0x4, 0x62, 0x30c, 0x400, 0x5c4fd4bf, 0x6, 0x7e3824fe, 0x4, 0x7fffffff, 0x800, 0x6, 0x10001, 0x3, 0xff, 0x3, 0x3, 0x117697b1, 0x9, 0x5, 0x7, 0x4, 0x2, 0x1, 0x9, 0x2, 0x10, 0x80000001, 0x3, 0xe, 0x9, 0x9, 0x1, 0x3, 0x9, 0x80000001, 0x4, 0x3, 0x8, 0x93, 0xc6d8d21, 0xaa, 0x0, 0x3, 0x6, 0xcb, 0x3, 0x7ff, 0x4, 0xcdac, 0x1ff, 0x1e, 0x1, 0xfff, 0x13a, 0x18, 0x1cb3, 0xffff571b, 0xffffffff, 0x80, 0x5, 0x6, 0x74, 0x9, 0x4, 0x32b, 0x1, 0x6, 0x1, 0x8, 0x5, 0xac, 0x401, 0x7, 0x7, 0x6, 0xa45, 0x7, 0x0, 0x7, 0xfffffffc, 0x9, 0x10, 0xfff, 0x1, 0x8, 0x9, 0x0, 0x8000, 0x7, 0x8, 0x3, 0x1, 0x1ff, 0x2, 0x100, 0x2, 0x80000001, 0x90, 0xe14, 0x1ff, 0x1ff, 0x5, 0x101, 0x5, 0xe, 0x6, 0x101, 0xffffff00, 0x1, 0xfffffff9, 0x0, 0x4, 0x0, 0x0, 0x7, 0x6, 0x2, 0xffff, 0x9, 0xb, 0x8, 0x4, 0x3, 0xfffffffc, 0x6785b1df, 0x8000, 0x81, 0x7fffffff, 0xc49d, 0x2, 0x2, 0x4, 0x1, 0x2367, 0x8, 0xffff, 0x8001, 0x1, 0x7f, 0xe, 0x8, 0x5, 0xfffffffb, 0x8000, 0xa2, 0x4, 0x6, 0xfffffffb, 0x5, 0xffff, 0xfff, 0x800, 0x40, 0x8, 0x496, 0x8001, 0x51c, 0x4, 0x4, 0x1, 0x2, 0x1, 0xffff, 0x359e, 0x2, 0x0, 0x6854]}) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$WSDISPLAYIO_SVIDEO(r2, 0x80045745, &(0x7f0000000ac0)) ioctl$DIOCSETSTATUSIF(r2, 0xc0284414, &(0x7f0000000b40)={'./file0\x00', &(0x7f0000000b00)=""/60, 0x7, 0x6, 0x3, 0x3}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000c80)={&(0x7f0000000b80)=[0x0, 0x0], &(0x7f0000000bc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000c00)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000c40)=[0x0], 0x2, 0x6, 0x4, 0x1, 0xffff, 0x4, 0x2, 0xffff}) (async) ioctl$DRM_IOCTL_MODE_SETGAMMA(r2, 0xc02064a5, &(0x7f0000000dc0)={0x0, 0x2, &(0x7f0000000d00)=[0x7000, 0x6], &(0x7f0000000d40)=[0x3], &(0x7f0000000d80)=[0x3, 0x0, 0x6, 0x2ac, 0x9]}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r2, 0xc01864b0, &(0x7f0000000e00)={0x0, 0x0, 0x8, 0x0, 0x80000000}) ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, &(0x7f0000000e40)={&(0x7f0000000cc0)=[r5], 0x1, r6, r7, 0x5, 0x80, 0x40, 0x44, {0x7, 0x1ff, 0x1, 0x3, 0x1, 0x7, 0x5, 0x9, 0xfff8, 0x5, 0x5454, 0x5, 0x8000, 0x3, "bdabe94d40d4e66e8091b58b6b6576691d777cebef7b10b9e72d183d08ac6356"}}) ioctl$WSDISPLAYIO_GETSUPPORTEDDEPTH(r2, 0x4004575c, &(0x7f0000000ec0)) (async) r8 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000f00), 0x80, 0x0) ioctl$KDGKBMODE(r8, 0x40044b06, &(0x7f0000000f40)) (async) ioctl$VT_RELDISP(r2, 0x20007604, &(0x7f0000000f80)) ioctl$FIOASYNC(r1, 0x8004667d, &(0x7f0000000fc0)=0x1) (async) connect$unix(r3, &(0x7f0000001000)=@file={0x9, 0x1, './file0\x00'}, 0xa) (async) kevent(r2, &(0x7f0000001040)=[{{r4}, 0xfffffffffffffff9, 0x0, 0x4, 0x90, 0xf}, {{r8}, 0xffffffffffffffff, 0x0, 0x80, 0x9, 0x10}], 0xdd, &(0x7f0000001080)=[{{r3}, 0xfffffffffffffffa, 0x4, 0xf0000000, 0x7f, 0x5}, {{r4}, 0xffffffffffffffff, 0x4, 0x1, 0x2, 0x5}], 0x9, &(0x7f00000010c0)={0x7, 0xfffffffffffffff9}) (async) ioctl$WSDISPLAYIO_GETSCREENTYPE(r8, 0xc028575d, &(0x7f0000001100)={0x9dcf, 0x5, './file0\x00', 0x6ca2, 0x81, 0xca7, 0x6}) (async) r9 = open(&(0x7f0000001140)='./file0\x00', 0x400, 0x42) ioctl$WSDISPLAYIO_GINFO(r9, 0x40185741, &(0x7f0000001180)) (async) r10 = openat$bpf(0xffffffffffffff9c, &(0x7f00000011c0), 0x10, 0x0) ioctl$BIOCSETIF(r10, 0x8020426c, &(0x7f0000001200)={'tap', 0x0}) (async) ioctl$DRM_IOCTL_MODE_DIRTYFB(0xffffffffffffffff, 0xc01864b1, &(0x7f00000012c0)={0x0, 0x2, 0x7, 0xa, &(0x7f0000001240)=[{0x4, 0x1, 0x8}, {0x1, 0xd3, 0x5, 0x6}, {0x0, 0x0, 0x9, 0x100}, {0x1, 0x4, 0x6, 0x80}, {0x0, 0x0, 0xa, 0x5}, {0x9, 0x5, 0x8, 0x1c}, {0x10, 0x200, 0x2, 0x2}, {0x3, 0x3, 0xa}, {0x8, 0x9, 0x7}, {0x2, 0x7, 0xf398, 0xfffc}]}) (async) r11 = kqueue1(0x0) fchdir(r11) (async) ioctl$WSMUXIO_ADD_DEVICE(r2, 0x80085761, &(0x7f0000001300)={0x1}) (async) ioctl$DIOCKILLSTATES(r9, 0x0, &(0x7f0000001340)={{0x3, 0x1, 0x2}, 0x2, '\x00', 0x2, {@addrmask={@v6=@mcast1, @v4=@local={0xac, 0x14, 0x0}}, [0x7, 0x1], 0x2, 0x8, 0x6}, {@any={'\x00', 0x0, 0x7, 0x45}, [0x9, 0x5], 0xd1, 0x3, 0x63b}, './file0\x00', './file0\x00', 0x4c8, 0x3}) (async) ioctl$VMM_IOC_INFO(r2, 0xc0185603, &(0x7f0000001480)={0x2c, 0x6, &(0x7f0000001440)=""/44}) 2.194060803s ago: executing program 2 (id=553): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r1 = dup3(r0, r0, 0x10000) r2 = open(&(0x7f0000000040)='./file0\x00', 0x8, 0x0) ioctl$BIOCSRTIMEOUT(r2, 0x42087007, &(0x7f0000000080)={0x1, 0xd8}) (async) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0xbe, 0x0) ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) (async) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0xc, 0x26, 0xf, 0x9}, {0x44, 0xf0, 0xff, 0xd0}, {0x6, 0x7f, 0x4, 0xfffff805}]}) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x0, 0xb3f, {[0xfffffbfffffffffb, 0x0, 0x2, 0x100200000, 0x6, 0x17, 0xdf60, 0xfffffffffffffffe, 0x80, 0x2f01, 0x93, 0x3, 0xffffffffffffffff, 0x200000000002, 0xd, 0x4, 0xfffffffffffffffe, 0x6], [0xfffffffffffffffe, 0x80000001, 0x1, 0x20000001, 0x5e, 0x7, 0x80000000000001fe, 0x0, 0x0, 0x1], [0x100000003, 0x8000, 0x40000000, 0x0, 0xb, 0x11000, 0xffffffff00000000], [0x104, 0x1fffffffffb, 0x7ffffffffffffffc, 0x100000000, 0xd, 0x8], [{0x0, 0x0, 0xfffffffe, 0x8000000000007d06}, {0xfffc, 0x22, 0x5}, {0x4, 0x0, 0xfffffffe, 0x80}, {0x3, 0x4, 0x9, 0xffffffffffffffff}, {0x0, 0x2, 0x7f, 0x8}, {0x0, 0x9, 0x9, 0x2000000000000000}, {0x0, 0x0, 0xfffffff9, 0x100000000000000}, {0x0, 0x100, 0x1, 0x4}], {0x1, 0x5, 0x6, 0x3}, {0xfffe, 0x3, 0x6d5, 0x1}}}) r4 = kqueue() kevent(r4, &(0x7f00000000c0), 0x138, 0x0, 0xffffffff, 0x0) ioctl$BIOCSETF(r3, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) (async) syz_emit_ethernet(0x36, &(0x7f0000000200)=ANY=[]) (async) ioctl$VNDIOCCLR(r1, 0x80384601, &(0x7f0000000200)={&(0x7f00000000c0)='./file0/file0\x00', 0x8, &(0x7f0000000180)='./file0\x00', 0x8}) (async) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) (async) r5 = socket(0x18, 0x1, 0x0) ioctl$FIONREAD(r5, 0x80206916, &(0x7f00000001c0)) 1.972438873s ago: executing program 0 (id=554): r0 = open(&(0x7f0000000000)='./file0\x00', 0x800, 0x10c) r1 = socket(0x18, 0x1, 0x0) close(r1) socket(0x24, 0x2, 0x0) ioctl$TIOCSETA(0xffffffffffffffff, 0xc0284457, &(0x7f0000000280)={0x0, 0xfffffffd, 0xfeffffff, 0x9, "0800140000fffbf6ed010076d0f0ef69d5b1b1ad", 0x50000000, 0x9}) setsockopt(r1, 0x6, 0x41, &(0x7f0000000280), 0x1c) ioctl$DIOCRGETASTATS(r0, 0xc4504447, &(0x7f0000000180)={{'./file0\x00', './file0\x00', 0x16, 0x6}, &(0x7f0000000040)=[{@local={0xac, 0x14, 0x0}, '\x00', './file0\x00', 0x6bf, 0xfffc, 0x2, 0x10, 0x2, 0x3, 0x1}], 0x7, 0x1, 0xff, 0x51e, 0x3, 0x7, 0x12, 0x2}) r2 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7959) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x0, &(0x7f0000000080)}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000040)="7f454c4602e4e0d6011a49b70cb710aa950000000a52e92a24d18fcf8fd1f9794ffa08bb11bafcdc24ff4c5d0b5c7b1ad1a2ec434c50019377fa4300b046e521", 0x40}], 0x1000000000000043) link(&(0x7f0000000140)='.\x00', 0x0) r3 = kqueue() kevent(r3, &(0x7f0000000200)=[{{}, 0xfffffffffffffff6, 0x19, 0xf27ff7794bbc9c2d, 0xfd, 0x10000}], 0x1, 0x0, 0x9b68, 0x0) setreuid(0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000100)=0x0, &(0x7f0000000600), &(0x7f0000000640)) seteuid(r4) semget(0x1, 0x0, 0x2a4) kevent(r3, &(0x7f0000000040)=[{{}, 0xfffffffffffffff6, 0x4, 0x80000000, 0x100, 0x13fff}], 0x1, 0x0, 0x5, 0x0) rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00') mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) futimens(0xffffffffffffffff, &(0x7f0000003880)=[{0xffffffffffffffff, 0xffffffffffffffff}, {0xa0, 0xffffffffffffffff}]) socket(0x1, 0x1000, 0x9) closefrom(r0) 1.971961876s ago: executing program 2 (id=555): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000140), 0x10, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000040)={'tap', 0x0}) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x40000803) r1 = open(&(0x7f0000000100)='./file0\x00', 0x80, 0x83) ioctl$TIOCCONS(r1, 0x80047462, &(0x7f0000000040)=0x10004) ioctl$TIOCCONS(r1, 0x80047462, &(0x7f0000000080)) r2 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a) ioctl$VNDIOCSET(r2, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r2, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffe, 0x0}) ioctl$TIOCFLUSH(r2, 0x80047410, &(0x7f00000000c0)=0x2) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000240)={0x2, &(0x7f0000000280)=[{0x50, 0xfe, 0x10, 0x8}, {0x16, 0x24, 0xc, 0x1}]}) syz_emit_ethernet(0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa0800450000280000000008ff9078ac1400aaac1400ff4e214e23", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="0800000080000000"]) 1.97124705s ago: executing program 3 (id=556): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0) (async) sysctl$kern(&(0x7f0000000000)={0x1, 0xd7c379b188be1c65}, 0x2, &(0x7f0000000080)="7a57c4d0aabb638d46c9d713860932102e66e31a30781d9bfc187f0212f4df4af9ef91cea9f6c5f80969f54c3b2bb9ab21f87e80c26c843de798da085ed06f8b69aa24e23609e1b25c9fd8b5111e61f8febedd7e9c3d2bf0b60bc47e2ec4509a367bf277d064e880ad70913b67a1911974b8e8133a4e81659095c2571d5162ca620d03efe0155f6207cbdd1dcae9545dff265c353c7c3e162ead9cae8ea002a3032e9b17abe8d2dcee5c56c224d2da436180264882912db1", &(0x7f0000000140)=0xb8, &(0x7f0000000200)="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", 0xfb) (async) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000180), 0x8000, 0x0) r2 = open(&(0x7f0000000080)='./file1\x00', 0x18289, 0x1aa) pwritev(r2, &(0x7f0000000340)=[{0x0}], 0x1, 0x3) (async) ioctl$DIOCRADDTABLES(r1, 0xc450443d, &(0x7f0000001640)={{'./file1\x00', './file0aaaaaaaaaaaaaaaaaaaaaaaaa', 0x2c, 0x1}, 0x0, 0x428, 0x0, 0x8, 0xfffffca5, 0x80000100, 0x2, 0x0, 0x8}) (async, rerun: 32) setitimer(0x1, &(0x7f0000000080)={{0x3ff, 0x100000003}, {0xc, 0x5}}, 0x0) (async, rerun: 32) sysctl$kern(&(0x7f0000000080)={0x1, 0x44}, 0x4000000000000004, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x2000000000000173, &(0x7f0000000780)}) (async, rerun: 64) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x810, r0, 0x9) 1.884564883s ago: executing program 3 (id=558): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = socket(0x18, 0x1, 0x0) setsockopt(r1, 0x1000000000029, 0xa, &(0x7f00000001c0)='\x00\x00\x00\x00', 0x4) (async) setsockopt(r1, 0x1000000000029, 0xa, &(0x7f00000001c0)='\x00\x00\x00\x00', 0x4) setsockopt(r1, 0x1000000000029, 0xa, 0x0, 0x0) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x186) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x2012, r2, 0x0) (async) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x2012, r2, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x2) write(r3, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) unveil(&(0x7f0000000180)='./file0\x00', &(0x7f0000000140)='r\x00') (async) unveil(&(0x7f0000000180)='./file0\x00', &(0x7f0000000140)='r\x00') unveil(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='r\x00') ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{0xf52c, 0xc, 0xf, 0x2}]}) (async) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{0xf52c, 0xc, 0xf, 0x2}]}) mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) (async) mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) r4 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$DIOCMAP(r4, 0xc0106477, &(0x7f0000000040)={&(0x7f0000000080)='./file0\x00', r4, 0x3}) close(r4) (async) close(r4) open(&(0x7f00000000c0)='./file0\x00', 0x715, 0xc3) mprotect(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x4) 1.879931695s ago: executing program 0 (id=560): r0 = syz_open_pts() fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x2, 0x2, 0x0, 0x200000000007fff}) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc5005601, &(0x7f0000000000)={0x10, 0x0, [{&(0x7f0000462000/0x2000)=nil, &(0x7f000057e000/0x2000)=nil, 0x1}, {&(0x7f0000ffd000/0x1000)=nil}, {&(0x7f00000cf000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0xfffffffffffffffd}, {0x0, &(0x7f00004f5000/0x4000)=nil, 0x10000}, {&(0x7f0000000000/0x2000)=nil, &(0x7f0000181000/0x1000)=nil, 0x1}, {&(0x7f0000000000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x2}, {&(0x7f000028c000/0x4000)=nil, &(0x7f000028b000/0x3000)=nil, 0xe04}, {&(0x7f00003de000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil}, {&(0x7f0000065000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0xffffffffffffffff}, {&(0x7f0000523000/0x1000)=nil, &(0x7f0000063000/0x13000)=nil}, {&(0x7f0000181000/0x3000)=nil, &(0x7f0000156000/0x1000)=nil, 0x6}, {&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000463000/0x1000)=nil, 0x8}, {&(0x7f00004c1000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x1ffffffff}, {&(0x7f00004c1000/0x2000)=nil, &(0x7f000006c000/0x4000)=nil, 0x2}, {&(0x7f00001cf000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x4}, {&(0x7f00000cf000/0x1000)=nil, &(0x7f000028b000/0x4000)=nil, 0x9}], './file0\x00', 0x0, 0x1, 0x0, 0x43b, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}) mknod(&(0x7f0000000a00)='./file0\x00', 0x2000, 0x10000) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x33b9) r1 = open(&(0x7f0000000480)='./file0\x00', 0x8, 0x0) ioctl$VNDIOCCLR(r1, 0xc0a86b02, &(0x7f0000000200)={0x0, 0x10000, 0x0}) openat$bpf(0xffffffffffffff9c, 0x0, 0x40000, 0x0) r2 = socket(0x18, 0x1, 0x0) setsockopt(r2, 0x1000000000029, 0xa, &(0x7f00000001c0)='\x00\x00\x00\x00', 0x4) setsockopt(r2, 0x1000000000029, 0x9, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000a40)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff080045000028000000000401907800000000e00000010d0090780012007f00000660000003ff0000000769f4af94"]) ioctl$DIOCXROLLBACK(r1, 0xc0104453, &(0x7f0000001680)={0x0, 0x9b5c, &(0x7f0000000a40)}) r3 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$VNDIOCSET(r3, 0xc0384600, &(0x7f0000000140)={&(0x7f0000000040)='./file0\x00', 0xc5, 0x0}) 1.583935993s ago: executing program 4 (id=561): munmap(&(0x7f0000001000/0x1000)=nil, 0x1000) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x62}) r0 = syz_open_pts() pipe(&(0x7f0000000000)) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff}) setsockopt$inet_opts(r1, 0x0, 0x1, &(0x7f00000009c0)="14c784ace7e9283b66629f7cca0c2cb144bae5760db1cbe80e4cad1388d78845714b686f1462f4096614cca5116aa1d54e92a0610e985e634327966b1b507f9e62a1e2bc3f4a5accc1344207d5ec862d1f08713c0a3508b2c5beb6893a4f1089b4330c563454f9aef2ffee366096884cde2a2723a58d7dd3e6fc0db10b003dea84f214bad3f898e7158e21f7277ec4c2b98ee5b4d1fb206b30e67fb6bbd9fb2cedc712b96fcae0f9c4c60e0e8b876ea113a0443b15a3c02b829b47058acd8014a194aee04506bbb365564bca597c7dc8289df56e908f1acf2e2a6a310909bb3ae932dc27b22486f038934a591f2d81752826e8d751fca9840ba4c4d31a0f2f172e300d73d1801b8c63e35c405ce4dd143a8f7953bb2b453638cf024e6bdd17371fce15799a79e43ececba66e930241469d50cf431fdfdbf5f0ed807aab699caa70de7f97381c8f2c09d52863b1fc0437661d8be66242eb08d7e254fc85dcc8e1fa0f3022cc6b9007e48dfdb71fbac055156d8765c06d2892792dc66dbcd9b7659e5e7cab3531dec6db644b62482027964b9892b18327905795c859750854b686afde86251a98a717b2515a5c404be8b976c934070c6d967c2ef3114356ffab9a5eb7e9bd699f80f22b415ec7f7cf7a27ecc04a6df7255db78252407e0f82635036596fc932eb739b10468157886ab750e0d5727e0dbc528b2ddde55c53557b9b9a1ac54671e1704a89a149fb3638d3141cc65cdaa4a116191f9d9fa80e3f1e1254d8e54139950ba413f509c7904913dba9707254c46a7236ea510317f94318647dd73382781058cf38d63c5ca5202581e11ab1e67730d754f1f3a2143a5cc719ffeaca73cf8a7e526a775f1f08b28d0c9cdf853ed397549e5391a0858fa70032a07edd9bc8b5768ea746d3d8d85eaf06f83ebf8a43939521ee72cf66b3c7bf89382d54d2fcddf4528cd8cf2f618e82d68e201a915a224a6cd668db94ac51d49cec8320685c061c897b1d2972dadf4b89c486da8f4ae67366ee39f26ac734baff1a007a1d668f0c7345a34a67fcd4451cde1c0d40c45257a48290fd3d318496a417f38fe249edb616523cec70e4c1f78e3bdf55dbe9310cf2e6d1a6d3c9b74d75a9caa7a2e160557b706a68f8248b0847af494675d054643ace7d2613d14b84fc0d869824784b5baaca34ab23457ab8408a66af857f21946373fcaa576bd43854b1ef8d826793bd3b384d34fef9177101a8783e869e14c0b6216dc6cafc20eaaddab2581fb7b7d52269fa003488d0ee9d826fc1fc7ba3aa667c27c07f4274081fe478d6f7a7d2c09ef716d58163b7ff25a7c313b615e7e5cb34e0d4550b29707ce5bf43e7fcea292ffad320fa4f6da6e90974e9e1d5849996b7428ae64b9145e9e7413110c028ad4eca3a9c3b8beecb0597adb2fd45f7e7a23b9f1953bbb35af4fb644127d96c6a0af6dced3d88193d0d6e4cfb9c4fdf6ae509637f42708f5b5646259cbf7a6924383444989da243df3936f4389fc73f17d7cdb1e9787b87db3fa01e12796144ef75814fd5af7d889b65d28004a5e0cbd68888af90fe79c015535a50ac2166ef6c1e04bcf8e18f3fe9541a0ec931247dadddd9d7f6423e1729c5d98dba781baab9d3ab2b34561410fc931e4d061d8a29eec0746c12f978a1356c74b6f23a0cd372e33db98366a067f5ea39965e4e287f26b191992a10dd2ad1ff107137e3409339504394ffdd0799350d5c6afd167f50887cc19b59b0a24f9f4768e710b1964b1340dc8a1a6244fa973e28a7cb74a4554a9bc09aa04f024a780333eb80aedb3949737a0bce7ae13d89e91516f59c4924d94073d171998e5cb52a918fb457a26b68e50233d55922bc181fdc21b4e6a5eed0127226af60d25d42f93ab0129e2ed4b25d7b1818e64cc0a4ba5bae5fd7cbb9e871067e8d0633142db35861624d9397e128c4752075c0704f5132b02b965373e253f0aa8fc198dcb4931ec2b0ab9279f81d4841cf1acd465ed90e20038acc7fe48751d23e06a1980c0a19b6717e69e6d4b8f52090577430e1bfd2243b715ca136e5e0e710ef3ad8bca6d9c718c5e1e6ba5effc59823284e2c7a784ef7d5f701495bbd095ffcfdf14710bfb58ab5cd5573f177c2cfe28091ec21b72ae38b5441b18f689c0a5cd64d1a7bb6fe9f734664f441b2961b0407026f1fc747a19596c1047e534e60d9a452ba6ea858fef2877253d31494cbc0063546bf9e7a7089dc3b011f288d1921ea67a600610d31750f533c9b4c0e613a4e9d63d9a7ecae57951576edfc946bd499a7b59f1e9dd5384336c3de4df3bc151f70229cff54fdb22dfd7ceb8c44b890041bc69576cf6fa6ff77ac1698894832047715ea87576178eaa951c6ce31b94ba1a986fff7219965cfbbf466d72682bb8f3dfedf8a1d5c524a406f5d67861f091889843c0f7f45a261c9c03ba2d8c89f2e242cd6b5a3f83d438ec39335f508d63b5214060832c6137fb1d5f586f25f730cf984655dc5d315dfbb15e85e89bb4784b6fd61d7a964f05ec624ee49eb02abc4cb375412154cc8f26d1686dadda7f92fd8028091fe2ae228d0124812532c6873da5f16d9a66e7d430fef156e6e446e10a57dafa7ae2b07d5f07cdeaa42ef5e1c82a5cea82c82d5cb59effd35ed5d6484c7a196c5279b8a90df89f0f9ca0e4d122290cab614391f5d1c7636b0be8c4b72d59ab32bb3aca01e96e37e1f629dda4c1d3ba3b62bb61594d08a1e3d47e91a8f4771509b9af5904d9c07ccdee717060b4563e1ad56f8651eb72cfbe5642cb6d0bcf05740ed6bf0e92c6834d287fbdf7a67dab7ed3a159915431cb0e63199607ce2b74b99664e8ab73bac0bd4050fd51d9a2b22270bbd9292643826c8c4f8010c19049e1ccf443cfbb3740a08efe030786575d086121ac19295ac04d659da3d838072111b2ada2eaeaccb154c7301cf485b537acf89d322e4722bcf5171502959baea1fcc635b3cd2b60166d73e51c5fffdc634d98a397f48877fe47bb59fc6ab37fe5ccd47a0c83ac09ba19451f16567f4e668dd67bc324c955ddc3f59a4b39fcc903923b407c092b0f08bca7c7f9380b995392e9c3d88db20b60b0b39848842f31d9cb1e8a1c668d16bd72d9e8138b7f320183c4af18ba6c38a03614abcb1adc1e5827e838f3c9be19679eea17a4c27f259efab3e9f98ee6517f5788b18fffb41fc51875ce01510c15ab43a2e649ed892cd3fa2fade383408027b3d8e50b17fa3992243c1708c4e87cb104d4a80883e0af88ebb79218e7c6a11dc9027f8f8b9fda2854fccb47b8a52d04edc9ef90961b05727b414681ebc713f010b544a3c215c625bac959c53d3ba67b2c2b1e55d23de2048e59f783af8e89f60f09386d57bfc5f9ede3d7b98466d75c9d07e606492e38b10711a0f92365046767f3b4b203d69747867074ae5025edd6f306bc2188dffe369df92324ad081c65ff90eea8f39fd683ce759a3137858fe604efb97a00ae8c2c5c933be6d2058cea1c48a0305ff5989e640d8d5826a2fb483ce7097ced33e8c9c96b8a2ec59121847387becec22c2a685a357debd2fd1e336581665651c36e4b37c3d7275e59ae097fb2449f4e649e269d9988a2bd43bd4e16255945cf7e28547793c268f447a82b075790151452e61397b27690bbbe59ee4638b07726094b48fc06565cabfa603b78076ff75eb19fbf08d029f1f59687d14071b2a67d74c7f89676a282fb80be03076bbb2f177287c3c1829dc73ee6cf2a74fd0c3ff3bf0cce5b1f9fe0d2df2714c22abbbe3e504f4a73b4c49be3e016692e9800b937c91e343013b292e572e2e2fe180951bd3771eafcd3bce0500d2e89d9d4bd4e98c003241c721d9ec9af83c7916eec142d709448f0d69fcf82dbbfa63f3b6ef6af9e6c2664dfc0a2117c80bf4dd7323369a6478af519d79349d499de3c3b70e6da6b7fbd421e1e0badde5ddef70dc9ea7583ad3959c1e03da4651710d367c5c00e706621fb4cb2430ef5e3f362b1f06411edd6404ca0978c270dbf47151efc628439e1e0d771bc05770d2db166f7c8b02b45ce53beca17a758c1a5a3ee6e415d808b9599eea6c3ad3275ce3baa258cda90b706fc34ad8f677b7831c2d7bf743f1fc6fb638b63ab858deff4883cf48c97cfcdd761cb165758860fe414eeb1cb41d943c2ca8bba36a052f7e0371e733bd2df0deed90d99e8efde8bfe0f0e0c6deb9faf3c0034f4675c6ed9f33d83023204fe5ec9e107f42b91f5910c10df7765354256319b5aa1dfb32487431799f3ed72dd46e5e296e97e20d7ff5373c609f8bb0367ece584283e84ab663a897f2ad47476b0ff4e32ec5f45812dc462cea077da9901a009dc95a8b233314f336983a815b5a70eda3f7894d8f5fa4e20ea6c2edd980aa79fbbd6cf5d1d488222cec3edce8eaea23c26455d8ef295409332cd4e1a839981062795e1660106db155622fd8fb21ea23323675980f0ffc3d460f36b5c48c91b8e90070673af13a3391a77c48881f5ea9325f1f45733e7ce3ac0ed6bb2910b16d36811730342f64b5c1c5ea92a0378f2dbaaa5ac3c46ead920b8d119b947a706755fa02ce4608c9ef57ab93b855e17730d82d2bba6333df4782a9f4235b40b2d14f097e50e712cb5ce4b9b35a3859190a5402f3db3a34af061bf9aad254bfb7b1606498c5393cae2419bdf6bb5e27542e9b931188e81c9f0046e2c696d4479d51bc0407b28f514f555c1bac4a55b2d4aa0d07c552b9df2d78e7ed88a47b421cd73aa002aa65576b98bf81c9f8883df85acb9936a1931b716ce5e4fbab82a0e5be45a3450fb6d407437910cb7c3ae20c2eac807d395cb2827ae8d1be30c002840ad7fd5aa5876e4e3368651678d3a2f09582f27832d815e6ab85806ea48c263e6b204d2077b646199353289ad96f86f6ed59d7fc8dbc4e89a29ca6dac29a5a902d1826e52dea20516735645abaa705e933b22df07985ca25f76a4fef84b4c598afe613e68498637b6217ca73701f39b6ce83b57f07b0e5531a47006dd1ee7585c2c6f86cf90bb83721ee4fb7d7c233ac488bfff395aef81d9e05df9bafb552e8587de109d775884f78316a03157cc0e6aed0febe270c9f135c4dd26e006fb9cb8a552a02f79b2d11a61725c5b679e9a04645d182102a5a8fa7f85f0c792e060c509c4e818058f6c4095e932b42169295c9ed0b989d22921a342e818d740c55e3aaf7070ca16c71a6b91322531a8a30ef2701604be9042b505cd92a53eff87d1cec52efe74a0761371398c35c568e764a00d076260fa00a504cc0270a421208975866b7ee5c9d2900df04cb7fd6e4847dc3648dbef53de75d98776c191f4638bdd33423952b6bbffdb69fe79777a4126eca0f06585ac215472771ed869d81d1a6ed509ae5b336149b15e032920e087ea33f6d20bb3067b84b43aeffea4c51339b01428dcd3a9e78e8744a9897f1912c82c186a99b6d0b55d0d222258d5e552e9135b84f4fa53ad8fcf715012da75a89c3208c48053d2b4a342ca0c1f81975309b01abde97bb4cd87fa864ee1a6aa18334a7e3add76a9cf7f70aec2429ff8ab4e351cdf5bd27ef71e87750dbcbe227e1fff0b1bc59c58099e98da69cc7cf5da70729c7040ab04070c410dda223db2df0d7e78689907a6679cd1df7936fdff6743590a41586dce4a84ec95c8ca445251f3744d9e3f04a0f20a4e8b1c3fb3fd8698f54c1be3346638c1ac5fe8de4ecc137ce40c5ac566e40516b83370d8b249ee27e8f182f7d0ea0dca99a500cc6f52378beffc4", 0x1000) close(r0) (async) close(r0) syz_open_pts() (async) r2 = syz_open_pts() ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f0000000100)={0xfffffff8, 0x6, 0xfffff966, 0xffffff90, "08955c1cfac164e20a070e00000009ffe600", 0x4000000, 0x2}) openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x19, 0x0) (async) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x19, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r4 = fcntl$dupfd(r3, 0x2, 0xffffffffffffffff) close(r4) r5 = socket$inet(0x2, 0x1, 0x0) listen(r5, 0x7fff) (async) listen(r5, 0x7fff) syz_emit_ethernet(0x3a, 0x0) setsockopt$sock_int(r4, 0xffff, 0x1023, &(0x7f00000004c0)=0x200, 0x4) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) readv(r2, &(0x7f00000004c0)=[{&(0x7f00000000c0)=""/1, 0x1}], 0x1) (async) readv(r2, &(0x7f00000004c0)=[{&(0x7f00000000c0)=""/1, 0x1}], 0x1) 1.582968387s ago: executing program 7 (id=509): ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x801, 0x51, 0x2100008, 0x6, 0x80000001, 0x80000001, 0xfffe, 0x10, [{0x3, 0x9, 0x4, 0x71020}, {0x8, 0x8001, 0x8, 0xfffffff9}, {0x8, 0xf86, 0x0, 0x9}, {0xffffffff, 0x800, 0x8007, 0x6}, {0x7, 0x201726, 0x2800, 0x7}, {0xffffff02, 0xa, 0x3, 0x9d}, {0xce1, 0xffffffff, 0x4fa, 0x6d}, {0x6, 0x2512c1a3, 0x54, 0x8}, {0x2, 0x82, 0x5, 0x9}, {0x6, 0x8001, 0xd1b, 0x100}, {0x9, 0x10001, 0x40, 0x3}, {0x81, 0x9, 0x7, 0x2009}, {0xb8c, 0x5, 0x8, 0x4}, {0x29a7171a, 0x7f, 0x1, 0xc373}, {0xb6f, 0x407, 0x40041}, {0x8000, 0x1, 0x101002, 0x30004}]}) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file0\x00', 0x938, 0x20800c1, 0xf, 0x0, 0x1040807, 0x10050001, 0xfffffffe, 0x2, 0x2, 0xd, 0xf5fffffffffffff9}) r0 = socket(0x18, 0x3, 0x0) ioctl$FIONREAD(r0, 0xc0106924, &(0x7f00000001c0)) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$FIONREAD(r0, 0x8080691a, &(0x7f0000000100)) setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) r1 = open(&(0x7f0000000080)='./file1\x00', 0x18289, 0x1f0) write(r1, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) r2 = syz_open_pts() flock(r2, 0x1) fcntl$lock(r2, 0x9, &(0x7f00000001c0)={0x3, 0x0, 0x1000000, 0x300000003}) closefrom(r2) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x100) ioctl$VNDIOCSET(r3, 0x80184405, &(0x7f00000001c0)={0x0, 0x0, 0x0}) connect$unix(r3, &(0x7f00000000c0)=@abs={0xc, 0x1, 0x0, 0x1}, 0x8) fchmod(r1, 0x1a3) unveil(0x0, &(0x7f0000000140)='r\x00') ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f00000003c0)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[{}, {}, {}], &(0x7f0000000340)=[0x0], &(0x7f0000000380)=[0x0], 0x3, 0x1, 0x4, 0x0, 0x0, 0x12, 0x73, 0xa6, 0xfffffff9, 0x4, 0x4}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000580)={&(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0], 0x5, 0x5, 0x5, 0x4, 0x8, 0x8a, 0x1}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000006c0)={&(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0], &(0x7f0000000640)=[0x0], &(0x7f0000000680)=[0x0, 0x0], 0x5, 0x3, 0x1, 0x2, 0x3, 0x2, 0x6, 0x336}) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r5 = kqueue() ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f00000019c0)={0xfffffffc, 0xfffffffe, {[0xfffffffffffffffc, 0x8, 0x5, 0x100000000, 0xc05, 0x80000000, 0x8000002e, 0x0, 0x1, 0x3, 0x1, 0x3, 0xfffffffffffffffe, 0x1, 0x8, 0x5, 0xfffffffffffffff7, 0x100], [0x9, 0x5, 0xfffffffffffffff8, 0x0, 0x1, 0x80104000, 0xfffffffffffffffd, 0x0, 0x0, 0x48], [0x7, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0xfffffffffffffffe], [0x3, 0x20000000000, 0x0, 0x100000002, 0xfffffffffffffffe], [{0x0, 0xc, 0xfffffffe, 0x7d06}, {0x2, 0x2, 0x295dcbee, 0x3}, {0x0, 0xfffffffd, 0xfffffffe, 0xff9}, {0x1008, 0x0, 0x8, 0x3}, {0x8000, 0x400, 0x10, 0x5}, {0x7ffe, 0x2000, 0x40003, 0x1}, {0xfffe, 0x0, 0x7}, {0x0, 0x95b, 0x1fd, 0xc}], {0x0, 0x25, 0x1, 0x849}, {0x7, 0x40010, 0x4, 0x2}}}) kevent(r5, &(0x7f00000000c0), 0x138, 0x0, 0xffffffff, 0x0) closefrom(r4) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000980)={&(0x7f0000000700)=[0x0], &(0x7f0000000740)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000900)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000940)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x4, 0x1, 0x0, 0x0, 0x0, 0x6, 0x5, 0x9, 0x7, 0x3}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000b00)={&(0x7f0000000a00)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000a40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000a80)=[0x0], &(0x7f0000000ac0)=[0x0, 0x0, 0x0, 0x0], 0x5, 0x7, 0x1, 0x4, 0x1, 0x6, 0x2, 0x8}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r1, 0xc01864b0, &(0x7f0000000b80)={0x0, 0x0, 0x1, 0x0, 0x2}) 1.582854574s ago: executing program 4 (id=562): r0 = syz_open_pts() ioctl$TIOCSETAF(r0, 0x802c7416, &(0x7f0000000000)={0x9, 0x6, 0x3f680, 0x8, "b40c6d0a84bfd74768f45446c1ce1daa97ac9bbd", 0xfffffffe, 0x80000000}) futimes(0xffffffffffffffff, &(0x7f0000000180)=[{0x5}, {0x0, 0xfffffffffffffff7}]) 1.582357355s ago: executing program 6 (id=489): setuid(0xee01) syz_emit_ethernet(0xe, &(0x7f0000000100)=ANY=[@ANYRESOCT]) syz_extract_tcp_res$synack(&(0x7f00000001c0), 0x1, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1) open(&(0x7f0000000000)='./file0\x00', 0x9cab835cfdc52675, 0x0) r0 = socket(0x1, 0x8002, 0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = socket$inet(0x2, 0x3, 0x0) setsockopt$inet_opts(r2, 0x0, 0x21, &(0x7f0000000240), 0x0) r3 = open(&(0x7f0000000240)='./file0\x00', 0x205, 0x0) fcntl$lock(r3, 0x9, &(0x7f00000002c0)={0x0, 0x0, 0x3b5, 0x1000381210089}) closefrom(r1) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) nanosleep(0x0, 0x0) syz_extract_tcp_res(&(0x7f0000000200), 0x7, 0x81) sysctl$net_pipex(&(0x7f00000002c0)={0x6, 0x1b, 0x4}, 0x3, &(0x7f0000000240), 0x0, 0x0, 0x0) socket$inet(0x2, 0x2, 0x0) mknod(&(0x7f0000000080)='./file0\x00', 0x2000, 0x608) r4 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) ioctl$VNDIOCSET(r4, 0xc0384600, &(0x7f0000000140)={&(0x7f0000000180)='./file0\x00', 0x567, 0x0}) open(&(0x7f0000000280)='./file0/file0\x00', 0x68e, 0x2) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 1.582213867s ago: executing program 4 (id=563): syz_emit_ethernet(0x56, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaafffffffffb6d0dea2421caffff86dd684498fb00202c09fe8000000000000000000000000000aaff0200000000000000000000000000012c000000000000002b0000000000000016000000220000000502039d00000000"]) r0 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) ioctl$WSKBDIO_SETMAP(r0, 0x8010570e, &(0x7f0000000180)={0x0, 0x0}) r1 = open(&(0x7f0000000480)='./file0\x00', 0x10, 0xde) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000280)='#!', 0x2}], 0x1) getsockopt$SO_PEERCRED(r1, 0xffff, 0x1022, &(0x7f0000000000), 0xc) r2 = openat$dri(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card0\x00', 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(r2, 0xc01864c2, &(0x7f0000000080)={0x0, 0x0, r1, 0x0, 0x7}) 1.581940344s ago: executing program 4 (id=564): r0 = open(&(0x7f0000000140)='./file0\x00', 0x78e, 0x8) setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) truncate(&(0x7f0000000100)='./file0\x00', 0x2040002ffff) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000180)="b59e", 0x2}], 0x1) open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) (async) open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000080)={{&(0x7f0000000000)=@in, 0x10, &(0x7f0000000040), 0x1000000000000258, 0x0}, 0x8}, 0xffffffffffffff5c, 0x2042, 0x0) sysctl$net_inet_tcp(&(0x7f00000000c0)={0x4, 0x2, 0x6, 0x18}, 0x4, &(0x7f0000000400)="9b1809ffffffffffffff5fa9ac6df0eeafdb4466a4326da2e1df55f8ee9e5d6cf220ef7f0abdbc34fe42021572dc8ff44f4b76c76d41859d85ea800dabe467badf35b6fd74c94d1b4cf2d71670109f6a8aa1c7c1abaf40b166d5b12c8305000000000000009a9ab9b8002192bc4bc83d9368e0ed83c7b89c599f107d940a8d37efbb405d8ecb87a1c9fc75601eec889c0911ff455f4caae80e3e393219a92252198bcf509a5f1ed9c58b5518e2932cc5621113382c571bff52df30d3d5dd2438b6febb4442cd1624697c1fbbf10ed5a3d50adf762b7d32f8dd1e840ca13018fbc8743418114cef99587cde68a3b33e7babec7703250dec47ed68c00e4c6d4016047658db75", &(0x7f0000000280)=0x10011, 0x0, 0x9c) (async) sysctl$net_inet_tcp(&(0x7f00000000c0)={0x4, 0x2, 0x6, 0x18}, 0x4, &(0x7f0000000400)="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", &(0x7f0000000280)=0x10011, 0x0, 0x9c) 825.248331ms ago: executing program 0 (id=565): lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0xa, 0x8, 0x7, 0x2, 0x8, 0x3, 0x40, 0x10, [{0x3, 0xffff, 0x7fff, 0x80000202}, {0x4, 0x8, 0x6, 0xfff}, {0x1, 0xfffffffe, 0x6, 0x2}, {0x2, 0xdf, 0xf, 0x40}, {0x4, 0x7, 0xf11, 0x7}, {0x800, 0x0, 0x80d1}, {0x7, 0x5, 0x87, 0x2}, {0x4, 0xfffffffe, 0xfffffffa, 0xfbffe2e9}, {0x8, 0xfff, 0x6, 0x17fff}, {0x101, 0x0, 0x5, 0x7}, {0x8, 0x8000000, 0x8, 0x7}, {0x4, 0xc7cb, 0x800000, 0x2}, {0x401, 0x10a, 0x6, 0x9}, {0x200003, 0x0, 0x6, 0x5}, {0x81, 0x5, 0x3, 0x7fff}, {0xffffffff, 0x8005, 0x6, 0x69}]}) poll(&(0x7f0000000000), 0x35, 0x0) msync(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x6) socket(0x10, 0x1, 0x8) r1 = syz_open_pts() fchmod(r1, 0xc92) ioctl$TIOCOUTQ(r1, 0x40047473, &(0x7f0000000200)) poll(&(0x7f0000000000), 0x35, 0x0) 824.37378ms ago: executing program 1 (id=566): writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000080)="76e5eac907f9ccf7a251ceddcec7d6aa45cffe2c63a56077123a276d3ba4e9d17eb3eb5db12a3783a8e0620d357de1fe04fa9465b5bd1286e9624dec06a00c222f", 0x41}], 0x1) socket(0x6, 0x0, 0x5) sysctl$vm(&(0x7f0000000080)={0x2, 0xc}, 0x2, &(0x7f0000002f80), 0x0, 0x0, 0x60) rename(&(0x7f0000000100)='./file0\x00', 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0xe8, 0x0) r1 = fcntl$dupfd(r0, 0x3, 0xffffffffffffffff) ioctl$FIONREAD(r1, 0x800474c4, &(0x7f0000000180)) pread(r1, &(0x7f0000000080)=':', 0x1, 0x81) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='.\x00') openat$pf(0xffffffffffffff9c, &(0x7f0000000100), 0x20, 0x1f) 823.675783ms ago: executing program 2 (id=567): sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b10005010000009f0500070107000000211c13fecea70500fef96ecfc72fd3007ae30200fdef3044d2d236acf20bf404be01000000f7c8cf5f8823297be1aa0504000051e2f0ad3ebbc257699a1f139b672f335c22db830c032bfa896443c32118210000720fd38bfb0000fd54c125191b1257aea8c500001602", 0x7a, 0x404, 0x0, 0x0) syz_emit_ethernet(0x26, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff0800463400180068000f0000000000ebffaa0000000507033901ae4f052d8a247f0106feec1237d32625fa46bc11f5f79e04d611c9973987f07d108447314df42ca37cd4c3422a908a51825e96f43e7d356c804f4299436a91e46b5afd438c77cbe43a0f771be6"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x11, 0x3, 0x0) sendto$unix(r0, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb61b98df192f9781ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x40c, 0x0, 0x0) mknod(&(0x7f0000000000)='./file1\x00', 0x2000, 0x281b9a) open(&(0x7f0000000080)='./file1\x00', 0x40, 0x132) sysctl$net_inet_tcp(&(0x7f00000000c0)={0x4, 0x2, 0x6, 0x19}, 0x4, &(0x7f0000000180), 0x0, 0x0, 0x0) 822.862537ms ago: executing program 3 (id=568): ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) (async) r0 = socket$inet(0x2, 0x3, 0x0) (async) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) shmat(0x0, &(0x7f0000fff000/0x1000)=nil, 0x0) (async) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000500)={'tap', 0x0}) (async) ioctl$BIOCPROMISC(r1, 0x20004269) (async) ioctl$BIOCGRTIMEOUT(r1, 0x4010426e, 0x0) (async) ioctl$FIONREAD(r0, 0x80206979, &(0x7f0000000100)) 822.512414ms ago: executing program 4 (id=569): syz_emit_ethernet(0x2e, &(0x7f00000000c0)={@local, @local, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x20, 0xfffd, 0x0, 0x7, 0x1, 0x0, @broadcast, @multicast1, {[@timestamp={0x44, 0x4, 0x6, 0x1}]}}, @icmp=@echo={0x8, 0x0, 0x0, 0x4, 0x5ab3}}}}}) syz_extract_tcp_res(&(0x7f0000000000), 0xd, 0x5) 604.283473ms ago: executing program 0 (id=570): sysctl$kern(&(0x7f0000000700)={0x1, 0x48}, 0x2, &(0x7f00000007c0)="7b9a6d12", &(0x7f00000008c0)=0x4, &(0x7f0000000900), 0x0) r0 = socket(0x18, 0x3, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) ioctl$FIONREAD(r0, 0xc0106924, &(0x7f00000001c0)) ioctl$FIONREAD(r0, 0x8060693d, &(0x7f0000000100)) sysctl$kern(&(0x7f0000000000)={0x1, 0xbd}, 0x2, &(0x7f0000000040)="45e886c5f72da241e790e8faec2524dfad28e83f5c7c4a93bb241a360ee63a74d6fbd48bbf9c91d745ec5e8dfa863fcb8869301fa3b073895d36912ee6fa355bab52e5ae104dfebb5479c085cd98c202d33fae193b269316bc32872492014842c895c43a3576b4623b157c9763908bb0ce572a37cc031beb30ee9412997f5326", &(0x7f00000000c0)=0x80, &(0x7f0000000100)="f54b9564963e333517d5dbcbb72a0c64795f0b88b09a63447c428ec39984521fc576d4b1b908d58f6bda3e4d5b531bc16906ceca5ba02d364783c911b644e864fea1928794b31892310dcb5c6a5669ba0ca379795f73cc8320a361182700dfdb737c1af5d93e38a05d2e60d1ca808fb803938b04041ea6523a30c483128f6b4fdaefe978aaef41275af397811a56e873e29b0cb2e4f6ba07323e93faceb4c579670764878c61ffb9312742cf", 0xac) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f00000001c0), 0x8000, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000000)={0x3, &(0x7f0000000080)=[{0x84, 0x4, 0x80, 0xa}, {0x50, 0x3, 0x2b, 0x2}, {0x3fe, 0x7, 0xff, 0x200000}]}) syz_extract_tcp_res(0x0, 0xa93f, 0xfff) socket$inet(0x2, 0x0, 0x1) sysctl$kern(&(0x7f0000000700)={0x1, 0x48}, 0x2, &(0x7f00000007c0)="7b9a6d12", &(0x7f00000008c0)=0x4, &(0x7f0000000900), 0x0) (async) socket(0x18, 0x3, 0x0) (async) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) (async) ioctl$FIONREAD(r0, 0xc0106924, &(0x7f00000001c0)) (async) ioctl$FIONREAD(r0, 0x8060693d, &(0x7f0000000100)) (async) sysctl$kern(&(0x7f0000000000)={0x1, 0xbd}, 0x2, &(0x7f0000000040)="45e886c5f72da241e790e8faec2524dfad28e83f5c7c4a93bb241a360ee63a74d6fbd48bbf9c91d745ec5e8dfa863fcb8869301fa3b073895d36912ee6fa355bab52e5ae104dfebb5479c085cd98c202d33fae193b269316bc32872492014842c895c43a3576b4623b157c9763908bb0ce572a37cc031beb30ee9412997f5326", &(0x7f00000000c0)=0x80, &(0x7f0000000100)="f54b9564963e333517d5dbcbb72a0c64795f0b88b09a63447c428ec39984521fc576d4b1b908d58f6bda3e4d5b531bc16906ceca5ba02d364783c911b644e864fea1928794b31892310dcb5c6a5669ba0ca379795f73cc8320a361182700dfdb737c1af5d93e38a05d2e60d1ca808fb803938b04041ea6523a30c483128f6b4fdaefe978aaef41275af397811a56e873e29b0cb2e4f6ba07323e93faceb4c579670764878c61ffb9312742cf", 0xac) (async) openat$bpf(0xffffffffffffff9c, &(0x7f00000001c0), 0x8000, 0x0) (async) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) (async) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000000)={0x3, &(0x7f0000000080)=[{0x84, 0x4, 0x80, 0xa}, {0x50, 0x3, 0x2b, 0x2}, {0x3fe, 0x7, 0xff, 0x200000}]}) (async) syz_extract_tcp_res(0x0, 0xa93f, 0xfff) (async) socket$inet(0x2, 0x0, 0x1) (async) 585.018332ms ago: executing program 6 (id=489): setuid(0xee01) syz_emit_ethernet(0xe, &(0x7f0000000100)=ANY=[@ANYRESOCT]) syz_extract_tcp_res$synack(&(0x7f00000001c0), 0x1, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1) open(&(0x7f0000000000)='./file0\x00', 0x9cab835cfdc52675, 0x0) r0 = socket(0x1, 0x8002, 0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = socket$inet(0x2, 0x3, 0x0) setsockopt$inet_opts(r2, 0x0, 0x21, &(0x7f0000000240), 0x0) r3 = open(&(0x7f0000000240)='./file0\x00', 0x205, 0x0) fcntl$lock(r3, 0x9, &(0x7f00000002c0)={0x0, 0x0, 0x3b5, 0x1000381210089}) closefrom(r1) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) nanosleep(0x0, 0x0) syz_extract_tcp_res(&(0x7f0000000200), 0x7, 0x81) sysctl$net_pipex(&(0x7f00000002c0)={0x6, 0x1b, 0x4}, 0x3, &(0x7f0000000240), 0x0, 0x0, 0x0) socket$inet(0x2, 0x2, 0x0) mknod(&(0x7f0000000080)='./file0\x00', 0x2000, 0x608) r4 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) ioctl$VNDIOCSET(r4, 0xc0384600, &(0x7f0000000140)={&(0x7f0000000180)='./file0\x00', 0x567, 0x0}) open(&(0x7f0000000280)='./file0/file0\x00', 0x68e, 0x2) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 5.350766ms ago: executing program 0 (id=571): mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0xd02) select(0x40, &(0x7f0000000300)={0x100000000000000d, 0x5, 0xf, 0xa5ab, 0x3, 0x5, 0x5000000000000000, 0x7}, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x80, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r0, 0x80086d01, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xfffffffffffffc1a}) r1 = socket(0x18, 0x1, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0x1c, 0x18, 0x0, 0x7fa, "fe80000400000000fdff00"}, 0x1c) fstat(r1, &(0x7f0000000040)) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0x68, &(0x7f0000000100)={{0x1c, 0x18, 0x3, 0x8f, "8608356c87815100eff8e0e3abd6b437", 0x5}, {0x1c, 0x18, 0x2, 0x1200, "6afb8fa7ff7019e85133d91a393a5bf9", 0x7}, 0x93, [0x1, 0x5, 0x100, 0x10001, 0x8, 0xfffffc00, 0x7, 0x2800]}, 0x5c) getuid() syz_open_pts() syz_open_pts() open$dir(&(0x7f0000000b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x0) open$dir(&(0x7f0000000b00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x4) mknod$loop(&(0x7f0000000000)='./bus\x00', 0x2000, 0x0) link(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000780)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000a40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00') symlink(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_open_pts() mknod(&(0x7f0000000240)='./file0/file0\x00', 0x1000, 0x3) getpid() mprotect(&(0x7f0000554000/0x4000)=nil, 0x4000, 0x1) r2 = socket(0x18, 0x2, 0x0) setsockopt(r2, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd31929648160000000000000000", 0x14) closefrom(r1) setsockopt(r2, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbdf13b9fd812eaa4e713048e69931929648", 0x14) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x10091, 0x0) ioctl$TIOCSETA(0xffffffffffffffff, 0xcd604407, &(0x7f0000000040)={0xa, 0x0, 0xe76b, 0x800005, "2c0d000000024000a400000300", 0x10000, 0x400}) ioctl$BIOCSETWF(r3, 0x80104277, &(0x7f00000002c0)={0x5, &(0x7f0000000280)=[{0x4c, 0xb, 0x9, 0x1}, {0x4, 0xfb, 0x8, 0x3}, {0x1, 0x0, 0xf, 0x9}, {0xff, 0x0, 0x5, 0x14}, {0xfc, 0x5, 0x0, 0x3}]}) 2.526935ms ago: executing program 1 (id=572): r0 = syz_open_pts() close(r0) (async) r1 = syz_open_pts() (async) r2 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) socket(0x18, 0x3, 0x0) (async) syz_emit_ethernet(0x1000e, &(0x7f0000000080)=ANY=[@ANYBLOB="69e1629b6174391e7dd7a2d786dd60b6000000302c03cb697a653e336f000000500000000000ff02000000000000000000000000000102"]) (async) ioctl$WSMOUSEIO_SETPARAMS(r2, 0x80105727, &(0x7f00000001c0)={&(0x7f00000000c0)=[{0x2, 0x6}, {0x6, 0x4}], 0x2}) (async) sysctl$kern(&(0x7f0000000000)={0x1, 0x4d}, 0x2, &(0x7f0000000180), 0x0, 0x0, 0x0) (async) r3 = setsid() (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffff9c, 0xc00c642e, &(0x7f00000000c0)={0xfffffff9, 0x37, r1}) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0x2816, r4, 0x800) (async) ktrace(&(0x7f0000000140)='./file0\x00', 0x1, 0x2000, r3) (async) syz_open_pts() (async) r5 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x10, 0x0) ioctl$BIOCSRSIG(r5, 0x80044272, &(0x7f0000000040)) (async) ioctl$FIOASYNC(r5, 0x8004667d, &(0x7f0000000080)=0x8) closefrom(r5) (async) r6 = socket$inet6(0x18, 0x1, 0x6) bind$inet6(r6, &(0x7f0000000040)={0x1c, 0x18, 0x1, 0x4, "00000000000000000000010000000600", 0x7}, 0x4a) (async) ioctl$TIOCSCTTY(r0, 0x20007461) setuid(0xee01) (async) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) (async) r7 = socket(0x18, 0x1, 0x0) ioctl$FIONREAD(r7, 0xc1126939, &(0x7f00000001c0)) ioctl$TIOCSPGRP(r0, 0x40047477, &(0x7f0000000080)) 2.060417ms ago: executing program 2 (id=573): readv(0xffffffffffffffff, &(0x7f0000000a40)=[{0x0, 0xfffffe88}, {&(0x7f0000000600)=""/251, 0xfb}], 0x10000000000001e3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000000880)={{0x0, 0x0, 0x0, 0x0, 0x0}}, 0x38, 0x40, 0x0) close(r1) execve(0x0, 0x0, 0x0) connect$unix(r0, &(0x7f0000000000)=@file={0x4, 0x0, './file0\x00'}, 0xa) 951.73µs ago: executing program 3 (id=574): syz_emit_ethernet(0x3e, &(0x7f0000001200)={@remote, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "c1b1b8", 0x8, 0x6c, 0x4, @empty, @rand_addr="3bd6d82111287262bf94eec3b92c395f", {[], @udp={{0x3, 0x0, 0x8}}}}}}}) (async) syz_emit_ethernet(0x3e, &(0x7f0000001200)={@remote, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "c1b1b8", 0x8, 0x6c, 0x4, @empty, @rand_addr="3bd6d82111287262bf94eec3b92c395f", {[], @udp={{0x3, 0x0, 0x8}}}}}}}) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x62}) syz_open_pts() (async) r0 = syz_open_pts() ftruncate(0xffffffffffffffff, 0x8531) close(r0) r1 = syz_open_pts() openat$bpf(0xffffffffffffff9c, &(0x7f0000000140), 0x10, 0x0) (async) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000140), 0x10, 0x0) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000040)={'tap', 0x0}) (async) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000040)={'tap', 0x0}) ioctl$BIOCSETF(r2, 0x80104267, &(0x7f0000000240)={0x3, &(0x7f0000000280)=[{0x14, 0xfe, 0x10, 0x8}, {0x80, 0xef, 0x5, 0x207}, {0x1e, 0x24, 0xc, 0x9}]}) syz_emit_ethernet(0x36, &(0x7f00000000c0)=ANY=[@ANYRES16=r0, @ANYRESOCT=r1, @ANYRES8=0x0, @ANYRES64=r2, @ANYRES64=r2, @ANYRES64=r0, @ANYRES8=r0, @ANYRESDEC=r1]) ioctl$TIOCSETAF(r0, 0x802c7416, &(0x7f0000000180)={0x42b788, 0x8, 0x7, 0x86a19c, "bb080006020900d910040801b7cd0d8c00004000", 0x0, 0x220}) writev(r0, &(0x7f0000000700)=[{&(0x7f0000000080)="34eb4cd59e8456ebc0881681c60e1cd9e0bf01b618b3cb934394c5951c1db0fd943a", 0xff99}], 0x1) write(r0, &(0x7f0000000000)="08b09cfa015770475dff0201ea2bfc1ec4ec4a9342545fa5971a14f13f484f2e943544729a03b082d82e9f2fafc204a1459e", 0x32) 0s ago: executing program 4 (id=575): sysctl$kern(&(0x7f0000000040)={0x1, 0x53}, 0x2, &(0x7f0000001940), &(0x7f0000000100)=0xffffffffffffff90, 0x0, 0x0) mknod(&(0x7f0000000180)='./bus\x00', 0x2000, 0xd01) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc5005601, &(0x7f0000000000)={0x10, 0x0, [{&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000663000/0x4000)=nil, 0xfffffffffffff801}, {&(0x7f00006ac000/0x4000)=nil, 0x0, 0x3}, {&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil}, {0x0, &(0x7f0000b1b000/0x2000)=nil}, {&(0x7f000067c000/0x10000)=nil, &(0x7f0000ffb000/0x1000)=nil}, {&(0x7f0000088000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil}, {0x0, 0x0, 0x7fff}, {&(0x7f0000727000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil}, {&(0x7f0000593000/0x2000)=nil, &(0x7f0000826000/0x1000)=nil}, {&(0x7f0000110000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil}, {0x0, &(0x7f000065d000/0x2000)=nil, 0xdc9}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0xfffffffffffffffc}, {0x0, &(0x7f0000ffd000/0x3000)=nil}, {&(0x7f00004c1000/0x2000)=nil}, {&(0x7f00001cf000/0x4000)=nil}, {&(0x7f0000355000/0x13000)=nil, &(0x7f0000358000/0x2000)=nil, 0x1}], './file0\x00', 0x7, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1135, 0x0, 0x0, 0x80c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc87, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x15, 0x0, 0x0, 0x15340, 0x0, 0x0, 0x80, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0xd824, 0x0, 0x0, 0x800000, 0x0, 0xfffffffc, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0xfe7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xffffffff]}) r0 = open(&(0x7f0000000240)='./bus\x00', 0x2, 0x111) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000a80)={0x7, &(0x7f0000000a40)=[{0x401, 0x3, 0x0, 0x72}, {0x8, 0xf, 0x7, 0x1}, {0xfea6, 0x2, 0x0, 0x7}, {0x3ff, 0x8, 0x8, 0x7}, {0x5, 0x7, 0x3, 0x3}, {0x9, 0x83, 0x9, 0xfffffffd}, {0xc5, 0x3b, 0x9, 0x777}]}) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0xffffffff, 0xb, {0x0, 0x1}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r0, 0x84946467, &(0x7f0000000000)={0x0, 0xffffffffffffffba, 0x0}) symlink(&(0x7f0000000a00)='./bus\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.185' (ED25519) to the list of known hosts. ¹j¼õ¬|ÿ ž¨E1\…:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa./file0pckbd_enable: command error lo0: can't handle af0 pckbd_enable: command error OpenBSD/amd64 (ci-openbsd-main-2.us-central1-a.c.syzkaller.internal) (tty00) Connection to 10.128.0.185 closed by remote host. login: pckbd_enable: command error pckbd_enable: command error uvn_flush: obj=0xfffff880685489c0, offset=0x0. error during pageout. uvn_flush: WARNING: changes to page may be lost! OpenBSD/amd64 (ci-openbsd-main-2.us-central1-a.c.syzkaller.internal) (tty00) login: malloc(): allocation too large, type = 127, size = 469762064 pckbd_enable: command error pckbd_enable: command error uvm_fault(0xffffffff83a71ae8, 0xffff800027da2004, 0, 1) -> d kernel: page fault trap, code=0 Stopped at ufs_lookup+0x613: movzwl 0x4(%r15,%r14,1),%ebx TID PID UID PRFLAGS PFLAGS CPU COMMAND *141716 73062 0 0 0x4000000 0 syz-executor ufs_lookup() at ufs_lookup+0x613 VOP_LOOKUP(fffff8804747db40,ffff80002f09ee90,ffff80002f09eec0) at VOP_LOOKUP+0x6e vfs_lookup(ffff80002f09ee60) at vfs_lookup+0x94a namei(ffff80002f09ee60) at namei+0x7c3 dosymlinkat(ffff80002f0a0a78,200000000a00,ffffff9c,200000000000) at dosymlinkat+0xef syscall(ffff80002f09f030) at syscall+0x962 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x347545199c0, count: 8 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb> ddb> set $lines = 0 ddb> set $maxwidth = 0 ddb> show panic *cpu0: uvm_fault(0xffffffff83a71ae8, 0xffff800027da2004, 0, 1) -> d ddb> trace ufs_lookup() at ufs_lookup+0x613 VOP_LOOKUP(fffff8804747db40,ffff80002f09ee90,ffff80002f09eec0) at VOP_LOOKUP+0x6e vfs_lookup(ffff80002f09ee60) at vfs_lookup+0x94a namei(ffff80002f09ee60) at namei+0x7c3 dosymlinkat(ffff80002f0a0a78,200000000a00,ffffff9c,200000000000) at dosymlinkat+0xef syscall(ffff80002f09f030) at syscall+0x962 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x347545199c0, count: -7 ddb> show registers rdi 0 rsi 0 rbp 0xffff80002f09ebf0 rbx 0 rdx 0xffff8000015dd900 rcx 0xffffffff rax 0xffff80002f0a0a78 r8 0xffffffffffffffff r9 0xfffff88007ffd4e0 r10 0x8cbc556024b3d56c r11 0x323bd7b509eac5b r12 0xfffff88068837dd0 r13 0 r14 0 r15 0xffff800027da2000 rip 0xffffffff8226f9b3 ufs_lookup+0x613 cs 0x8 rflags 0x10246 __ALIGN_SIZE+0xf246 rsp 0xffff80002f09eb00 ss 0x10 ufs_lookup+0x613: movzwl 0x4(%r15,%r14,1),%ebx ddb> show proc PROC (syz-executor) tid=141716 pid=73062 tcnt=2 stat=onproc flags process=0 proc=4000000 runpri=32, usrpri=79, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff80002f0a1770,0xffff80002f0a1a18 process=0xffff80002a78c490 user=0xffff80002f09a000, vmspace=0xfffff8806be18180 estcpu=29, cpticks=2, pctcpu=0.0, user=0, sys=2, intr=0 ddb> ps PID TID PPID UID S FLAGS WAIT COMMAND 72941 406487 44334 0 2 0x82000 syz-executor 72941 98728 44334 0 4 0x4082000 syz-executor 72941 358425 44334 0 3 0x4002000 suspend syz-executor 72304 188262 51875 0 2 0 syz-executor 72304 356222 51875 0 3 0x4000080 fsleep syz-executor 76829 216784 91597 0 2 0 syz-executor 76829 515971 91597 0 3 0x4000080 bell syz-execut