last executing test programs: 3.352219637s ago: executing program 0 (id=247): r0 = socket$unix(0x1, 0x2, 0x0) sendmsg(r0, &(0x7f0000001c00)={&(0x7f0000000140)=@in6={0x1c, 0x18, 0x0, 0x4, "dd8a4a07dddfba30dc48d900", 0xfffffffe}, 0x1c, &(0x7f00000014c0)=[{&(0x7f0000000180)="8df81b7712f0d3824fafe654d22276ab8635bc0c410f9fc5c7509064827545f34490d369425e8af676d7f90531a0af043bcc", 0x32}, {&(0x7f0000000300)="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", 0x7cf}], 0x2, 0x0, 0x700}, 0x5) r1 = socket$inet6(0x18, 0x1, 0x6) sysctl$kern(&(0x7f0000003fc0)={0x1, 0x15}, 0x2, &(0x7f0000004000), 0x0, 0x0, 0x0) setuid(0x0) setrlimit(0x8, &(0x7f0000000980)={0xb, 0x54}) r2 = syz_open_pts() setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) futimens(0xffffffffffffffff, &(0x7f0000000000)=[{0x0, 0x2}, {0x7, 0x8}]) close(r2) r3 = syz_open_pts() ioctl$FIOASYNC(r2, 0x80047469, &(0x7f00000000c0)=0x5) read(r3, &(0x7f0000000380)=""/147, 0x93) writev(r2, &(0x7f0000000240)=[{&(0x7f0000000300)="fac21ddb5c288f19b558371e041ceac7b018c875495c165faa7e7ac7f2f415df5e76a04952657ac540685d3c687e9322bc0f45f995ad9f3b433c376956ea6601b36f8f701c597f898f27", 0x4a}, {&(0x7f0000000140)="df109d3a6e51c076fa70c4596bb8f020cf7b7c87b28666be197e484f19b3eec83612d133388acdb2b800dea9034ee0a165ce0869b0bebe3a8eb942f1a11bcd46d01803847270047afad1", 0x4a}], 0x2) ioctl$FIONREAD(r1, 0xc0106978, &(0x7f00000001c0)) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r4, 0x0) r5 = socket(0x11, 0x3, 0x0) sendto(r5, 0x0, 0x0, 0x404, &(0x7f00000001c0)=@in={0x10, 0x2, 0x1, 0xb}, 0x10) ioctl$VNDIOCCLR(r4, 0x80384601, &(0x7f0000000240)={&(0x7f0000000100)='./file0\x00', 0x1a7, &(0x7f0000000200)='./file1\x00', 0x8}) ioctl$DIOCRSETADDRS(r4, 0xc4504445, &(0x7f0000000bc0)={{'./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', './file1\x00', 0x20, 0x5e}, &(0x7f0000000b00)=[{@local={0xac, 0x14, 0x0}, '\x00', './file0\x00', 0x9, 0xf3b7, 0x2, 0x6, 0x8, 0xe, 0xc}, {@multicast2, '\x00', './file1\x00', 0x6, 0x2, 0x2, 0x2, 0xc1, 0x8, 0x5}, {@local={0xac, 0x14, 0x0}, '\x00', './file0\x00', 0x9, 0x6037, 0x2, 0xfa, 0x41, 0x2, 0x2}], 0x9, 0x3, 0x7, 0x200, 0x0, 0x0, 0x10, 0x4}) ftruncate(r4, 0x8531) fstatat(r4, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0) open(&(0x7f0000000280)='./file2\x00', 0x10, 0x0) 2.890177239s ago: executing program 4 (id=268): r0 = kqueue() kevent(r0, &(0x7f00000000c0), 0x138, &(0x7f0000000100), 0xffffffff, 0x0) (async) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x82, 0x0) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x200, 0x4c) ioctl$WSMOUSEIO_SCALIBCOORDS(r2, 0x81205724, &(0x7f0000000100)={0xfffffffe, 0xffffaf35, 0x7f, 0x5, 0x80000001, 0x7fbffffd, 0x5, 0x10, [{0x10000000, 0x60, 0x3, 0x3}, {0xfffffff3, 0xfffffffe, 0x9, 0x2}, {0x20007, 0x8000b86, 0xffffff79, 0x9}, {0x73f0, 0x6, 0x2, 0x200}, {0x42, 0x8, 0x2, 0x800007}, {0x20002, 0x8, 0x8, 0x95}, {0xcdf, 0xdf61, 0x200004f8, 0x10}, {0x8, 0xf, 0x14, 0xe}, {0x4, 0xe2b4, 0x40000003, 0x6}, {0x4, 0x8a, 0x410001, 0x1ff}, {0x1e6, 0x400fff9, 0x927c, 0x4}, {0x1016, 0x25, 0x9, 0x2d0b}, {0x3, 0x2, 0x80000001, 0x408}, {0x29a71718, 0x4, 0x3, 0x2579}, {0x0, 0xf8f, 0x8}, {0xfffffff7, 0x800bd3d, 0xf778, 0x8}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) ioctl$VNDIOCSET(r2, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$DIOCSTART(r3, 0x20004401) ioctl$VNDIOCSET(r2, 0x80044403, 0x0) (async) ioctl$TIOCSETA(r1, 0xc4504442, &(0x7f0000000200)={0xffffffff, 0x0, 0x2000000b, 0x228c4ae2, "6aff000047000000f8ff00", 0x4e9, 0x8}) 2.887943972s ago: executing program 3 (id=269): r0 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0x100000007, [{&(0x7f0000ffd000/0x3000)=nil, &(0x7f000012a000/0x4000)=nil, 0x2}, {&(0x7f0000028000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0xfffffffffffeffff}, {&(0x7f0000578000/0x9000)=nil, &(0x7f00006d0000/0x2000)=nil, 0x9}, {&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000467000/0x1000)=nil, 0xefffffffeffffffd}, {&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000183000/0x3000)=nil, 0x3}, {&(0x7f000026d000/0x4000)=nil, &(0x7f00006c7000/0x4000)=nil, 0x8000000010000001}, {&(0x7f0000e64000/0x1000)=nil, &(0x7f0000657000/0x3000)=nil, 0xfffffffffffffffd}, {&(0x7f00000c7000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0xfffffffffffffffc}, {&(0x7f0000ffd000/0x3000)=nil, &(0x7f000057d000/0x3000)=nil, 0x8000000000007ff}, {&(0x7f000045d000/0x2000)=nil, &(0x7f00007fe000/0x1000)=nil, 0xa}, {&(0x7f000033f000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0xd10a}, {&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000385000/0x3000)=nil}, {&(0x7f0000ff2000/0xb000)=nil, &(0x7f0000592000/0x3000)=nil, 0x74b6}, {&(0x7f0000167000/0x4000)=nil, &(0x7f000058c000/0x3000)=nil, 0x1ff}, {&(0x7f0000ff7000/0x3000)=nil, &(0x7f00000d2000/0x1000)=nil, 0xf}, {&(0x7f0000ffb000/0x4000)=nil, &(0x7f000031e000/0x3000)=nil, 0x1007d}], './file0\x00', 0x4, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12000]}) syz_emit_ethernet(0x56, &(0x7f0000000440)={@broadcast, @empty, [], {@ipv4={0x800, {{0x10, 0x4, 0x0, 0x0, 0x48, 0x0, 0x1, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0x0}, @broadcast, {[@timestamp={0x44, 0x28, 0x0, 0x1, 0x7, [{[@rand_addr=0x1], 0xdf9c}, {[], 0xff}, {[], 0x5}, {[@multicast2], 0xfffffffc}, {[@broadcast], 0x3}, {[], 0x3ff}]}, @timestamp={0x44, 0x4, 0xd, 0x1}]}}, @udp={{0x1, 0x3, 0x8}}}}}}) (async) r1 = kqueue() kevent(r1, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) (async) ioctl$BIOCSETF(r2, 0x80104267, &(0x7f0000000140)={0x3, &(0x7f0000000600)=[{0x1, 0x6f, 0x23, 0x3}, {0x30, 0x23, 0x82}, {0x9b1e, 0x4, 0xf4, 0x7f}]}) (async) syz_emit_ethernet(0x2a, &(0x7f0000000200)=ANY=[]) (async) r3 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r3, 0xc028698d, &(0x7f00000001c0)) r4 = socket(0x24, 0x2, 0x0) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x3fb}) r5 = syz_open_pts() close(r5) (async) syz_open_pts() ioctl$TIOCSETD(r5, 0x8004741b, &(0x7f0000000000)=0x9) writev(r5, &(0x7f0000001b80)=[{&(0x7f00000009c0)="5189eb76c555fe5cf252676125529882d3134cb3f4ba75b72e0a20bf8259d90f24930276248b25bd2d2d722a7a972f3c575fc5ac52969d4a37545c25d6b89e887fbeaf5f8aedbb0f17510a", 0x4b}], 0x1) (async) shutdown(r4, 0x1) (async) ioctl$SPKRTONE(r0, 0x80085301, &(0x7f0000000040)={0xa, 0x3}) 2.801963336s ago: executing program 4 (id=272): r0 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000000), 0x20, 0x0) ioctl$WSKBDIO_GETENCODINGS(r0, 0xc0105715, &(0x7f0000000200)={0x5, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0]}) r1 = socket(0x18, 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x8, 0x2000000000000004}, 0x0, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240), 0x100, 0x0) fcntl$lock(r2, 0x7, &(0x7f0000000300)={0x0, 0x0, 0x5fdf, 0x180030001ffff}) setsockopt(r1, 0x1000000029, 0x23, &(0x7f0000000080)="031000086941e7c5ce5876778f181b12184c256b1ca6f583b03f959b5253027d08b90779da6a56ed10cdd9967a674820f89c4daa330fee01c76728490d1851d4ab60059f6a3f7cc45ac10500000078bbf169d0632f4ce57a508bc82acd00000000140e0343395b00737a4a00000084fc604fd6642787b31558a39bd200"/136, 0x88) r3 = shmat(0xffffffffffffffff, &(0x7f0000ffd000/0x2000)=nil, 0x1000) shmdt(r3) sysctl$net_inet6_icmp6(&(0x7f00000000c0)={0x4, 0x18, 0x3a, 0x3}, 0x4, &(0x7f0000000080)="ada5d943", &(0x7f0000000140)=0x66, &(0x7f0000000040)="feffff0b916353fc404efc3c3595859770fe", 0x4) sendmsg$unix(r1, &(0x7f0000000380)={&(0x7f0000000040)=@file={0xa, 0x0, './file1\x00'}, 0xa, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="100000fffeffdeff01000000", @ANYRES32], 0x10}, 0x400) openat$wskbd(0xffffffffffffff9c, &(0x7f0000000000), 0x20, 0x0) (async) ioctl$WSKBDIO_GETENCODINGS(r0, 0xc0105715, &(0x7f0000000200)={0x5, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0]}) (async) socket(0x18, 0x2, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x8, 0x2000000000000004}, 0x0, 0x0, 0x0) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000240), 0x100, 0x0) (async) fcntl$lock(r2, 0x7, &(0x7f0000000300)={0x0, 0x0, 0x5fdf, 0x180030001ffff}) (async) setsockopt(r1, 0x1000000029, 0x23, &(0x7f0000000080)="031000086941e7c5ce5876778f181b12184c256b1ca6f583b03f959b5253027d08b90779da6a56ed10cdd9967a674820f89c4daa330fee01c76728490d1851d4ab60059f6a3f7cc45ac10500000078bbf169d0632f4ce57a508bc82acd00000000140e0343395b00737a4a00000084fc604fd6642787b31558a39bd200"/136, 0x88) (async) shmat(0xffffffffffffffff, &(0x7f0000ffd000/0x2000)=nil, 0x1000) (async) shmdt(r3) (async) sysctl$net_inet6_icmp6(&(0x7f00000000c0)={0x4, 0x18, 0x3a, 0x3}, 0x4, &(0x7f0000000080)="ada5d943", &(0x7f0000000140)=0x66, &(0x7f0000000040)="feffff0b916353fc404efc3c3595859770fe", 0x4) (async) sendmsg$unix(r1, &(0x7f0000000380)={&(0x7f0000000040)=@file={0xa, 0x0, './file1\x00'}, 0xa, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="100000fffeffdeff01000000", @ANYRES32], 0x10}, 0x400) (async) 1.778785449s ago: executing program 7 (id=274): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) sysctl$net_inet_tcp(&(0x7f0000000040)={0x4, 0x2, 0x6, 0x17}, 0x4, 0xfffffffffffffffe, &(0x7f0000000000)=0x24, 0x0, 0x0) r0 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000140), 0x200, 0x0) ioctl$VNDIOCCLR(r0, 0x80384601, &(0x7f0000000240)={&(0x7f00000001c0)='./file0/file0\x00', 0x5, &(0x7f0000000200)='./file0/file0\x00', 0xe}) readv(0xffffffffffffffff, &(0x7f0000000a40)=[{0x0, 0xfffffe88}, {&(0x7f0000000600)=""/251, 0xfb}], 0x10000000000001e3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x3d}, 0x9, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1, 0x0, 0x37) recvmmsg(r1, &(0x7f0000000880)={{0x0, 0x0, 0x0, 0x0, 0x0}}, 0x38, 0x40, 0x0) r2 = syz_open_pts() setrlimit(0x8, &(0x7f0000000980)={0x42, 0x62}) r3 = syz_open_pts() r4 = socket$inet(0x18, 0x3, 0x102) ppoll(&(0x7f00000000c0)=[{r4, 0x100}, {r2, 0x81}], 0x2, 0x0, 0x0) unveil(0x0, &(0x7f0000000000)='c\x00') close(r3) r5 = syz_open_pts() ioctl$TIOCSETD(r5, 0x8004741b, &(0x7f0000000000)=0x5) writev(r1, &(0x7f0000001c40)=[{&(0x7f00000009c0)="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", 0xfffffffffffffe65}], 0x0) close(r1) ioctl$TIOCCBRK(r3, 0x2000747a) openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0xe8, 0x0) execve(0x0, 0x0, 0x0) unveil(&(0x7f0000000280)='.\x00', &(0x7f0000000080)='x\x00') mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) 1.772725148s ago: executing program 0 (id=276): sysctl$hw(&(0x7f0000000040)={0x6, 0x2}, 0x2, 0x0, 0x0, &(0x7f0000000140), 0x0) r0 = socket$inet(0x2, 0x1, 0x0) r1 = socket(0x11, 0x3, 0x8) sendto$unix(r1, &(0x7f0000000280)="b1000501600000001700000007000000085c13fecea10500fef96ecfc72fd3357ae320b37b673039d2d236a3f20b7804be38164991f7c8cf5f882b297be1aa5b236deb51e2f0ac3ebbc2576b9a5f139b672f4d335d223e7d026ba8af630037282118000000720fd38bfbb770c1f5a872c881ea6e69e0bb76d907c400000200361b1257aea8c500002002fb00000000008abfba09000000ec1d89e000040781e40500000000000000000900000000000000", 0xb1, 0x40a, 0x0, 0x0) bind$inet(r0, &(0x7f0000000000)={0x10, 0x2, 0x3}, 0x10) 1.764525778s ago: executing program 6 (id=278): r0 = socket$inet(0x2, 0x3, 0x2) ioctl$FIONREAD(r0, 0x80206979, &(0x7f0000000100)) r1 = socket(0x18, 0x3, 0x0) getsockopt(r1, 0x29, 0x36, 0x0, 0x0) accept$inet6(r1, 0x0, &(0x7f0000000080)) ioctl$FIONREAD(r0, 0x4004667f, &(0x7f0000000000)) r2 = socket(0x2, 0x8002, 0x0) r3 = fcntl$dupfd(r2, 0x2, 0xffffffffffffffff) openat$wskbd(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) closefrom(r3) openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) 1.732204717s ago: executing program 0 (id=280): mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0xfff) r0 = open(&(0x7f0000000080)='./bus\x00', 0x880, 0x0) r1 = kqueue() kevent(r1, &(0x7f0000000740)=[{{}, 0xfffffffffffffff9, 0xc7, 0x1, 0x200000000000000, 0x7ff}], 0x200020, 0x0, 0x0, 0x0) ioctl$VNDIOCSET(r0, 0xc0384600, &(0x7f0000000100)={&(0x7f0000000000)='./bus/file0\x00', 0xd, &(0x7f00000000c0)='./bus\x00', 0x6}) 1.731007331s ago: executing program 1 (id=282): r0 = socket$inet(0x2, 0x3, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket$inet(0x2, 0x8003, 0x0) setsockopt(r1, 0x0, 0x7, &(0x7f0000000340)="15337ac0", 0x4) setgid(0xffffffffffffffff) setgroups(0x0, 0x0) chmod(&(0x7f0000000080)='.\x00', 0x3db) setuid(0xffffffffffffffff) unveil(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='c\x00') sendto$inet(r0, &(0x7f0000000440)="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", 0x5c9, 0xa, &(0x7f0000001440)={0x10, 0x2, 0x3, 0xfffffffc}, 0x10) 1.730357503s ago: executing program 3 (id=283): shmget(0x1, 0x4000, 0x2c7, &(0x7f0000ffb000/0x4000)=nil) (async) r0 = shmget(0x1, 0x4000, 0x2c7, &(0x7f0000ffb000/0x4000)=nil) r1 = shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x1000) shmdt(r1) shmctl$SHM_LOCK(r0, 0x3) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) (async) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) r2 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) shmctl$IPC_RMID(r0, 0x0) r3 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) ioctl$WSDISPLAYIO_SETPARAM(r3, 0xc020575a, &(0x7f0000000080)={0x2, 0x4, 0x4, 0x1}) shmctl$IPC_RMID(r0, 0x0) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x0) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x1000) ioctl$VMM_IOC_CREATE(0xffffffffffffff9c, 0xca605601, &(0x7f00000000c0)={0x10, 0x8, [{&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil}, {&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x1}, {&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x460}, {&(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, 0x7}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x8}, {&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0xf414}, {&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0xbc85}, {&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, 0xffffffff00000000}, {&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x2}, {&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x100000000}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x6}, {&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x71}, {&(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0xd590}, {&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, 0xbe3}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0xf53}, {&(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0xbc}], './file0\x00', 0xd97, 0x81, 0x2ee, 0x5, [0xca6, 0x1, 0x7, 0x3, 0x4, 0x0, 0x4, 0x10, 0x0, 0x7fffffff, 0x0, 0x80000001, 0xe, 0xf91, 0x9, 0x9, 0x7, 0x7, 0x80, 0xffff31b2, 0x9, 0x0, 0x0, 0x101, 0x81, 0x7, 0x10001, 0xe07, 0x9, 0x3, 0x7, 0x3, 0x2abf, 0x3, 0x5, 0xffffffff, 0x8, 0x4, 0x720d6103, 0xd, 0x3, 0x4, 0x7fffffff, 0x4, 0x8, 0x6, 0x8, 0x2, 0x80, 0x7e, 0xe, 0x0, 0x8, 0x8, 0xfffffffb, 0x5, 0x9, 0x10001, 0x6, 0x0, 0x754, 0x59, 0x1, 0x6, 0x4, 0x0, 0x8000, 0xde2, 0xfffffff8, 0x9, 0xe, 0xc9e5, 0xf446, 0x7, 0x7, 0xe4e7, 0x3, 0x7, 0x2, 0xfffeffff, 0x0, 0x2, 0xc, 0x9, 0x9, 0x5, 0x9, 0x2, 0x2, 0x7, 0xe2f, 0xab9, 0x80000000, 0x1e7d, 0x1, 0x5a, 0x0, 0x7, 0x1bf, 0x8, 0x9, 0xe9, 0x9, 0x200, 0x3, 0x8000, 0x4, 0x9e800000, 0xc, 0x6, 0x3ff, 0x4, 0x1, 0xffffffff, 0x8, 0xffffffff, 0x6, 0x66b86616, 0x8, 0x5, 0x7, 0x3191, 0x7, 0x3, 0xa58f, 0x80000001, 0x6, 0x401, 0xd, 0x7, 0x4, 0x101, 0xfa355779, 0x0, 0xe6cd, 0x0, 0x6a49, 0x80, 0x8, 0xf, 0x9, 0x37, 0xe, 0xfffffa56, 0x3, 0x6, 0x2, 0x9, 0xfffffff9, 0x0, 0x0, 0x81, 0x7, 0x9, 0xfffffe01, 0xff, 0x100, 0x3, 0x0, 0xf6a, 0x3, 0x7f, 0x3499, 0x5, 0x401, 0xffffff80, 0x8, 0x8, 0xffffff55, 0x99, 0x800, 0xae, 0x8000, 0x5, 0x1, 0x1, 0x8, 0x10001, 0x1, 0x8962, 0x400, 0x7, 0x10, 0x4, 0xa, 0x3, 0x2, 0x4, 0x8, 0x10001, 0x7, 0xb62, 0x40, 0x5, 0x93, 0x200, 0x80000001, 0x5, 0x4ec000, 0x6, 0x5, 0x81, 0xa, 0xffffffd0, 0x2, 0xdd, 0xdb, 0x8, 0x7, 0x9, 0x7, 0x2, 0x0, 0x4, 0x6, 0x8, 0x5, 0x10, 0x200, 0x6, 0x9, 0x3, 0xd, 0xc, 0x5, 0x6a6, 0x0, 0x5, 0x3, 0xc8b, 0x1, 0x7e, 0xfffffffa, 0x6ba0d5c0, 0x5, 0xd, 0x1, 0x8, 0x1000, 0x1, 0x6, 0x906, 0xa849, 0x4, 0x58, 0x40, 0xfffe0000, 0x100, 0x2, 0x9, 0x2, 0x5, 0x3, 0xffff8001, 0x5, 0x4, 0x8000, 0x1, 0x7, 0x7, 0x28000000, 0x10, 0x8, 0x9, 0x35ce, 0x80, 0x81, 0xa9, 0x5, 0x1, 0x3, 0x0, 0x2, 0x0, 0x4, 0xffff1484, 0x6, 0xbd0b, 0x7, 0x1, 0xffff, 0x4, 0x4d, 0x7ff, 0x1, 0x6e63, 0x3, 0x4, 0x6, 0x3, 0x9, 0x6, 0x8, 0x4, 0xfffffff0, 0x0, 0x5, 0x10, 0x10000, 0x8000, 0x4, 0x250e, 0x2, 0x9, 0x2, 0xa141, 0xdb3, 0x1, 0x8, 0x6, 0x9, 0x6, 0x0, 0x7, 0x0, 0x1ff, 0x3, 0x8, 0xe1, 0x1, 0x100, 0x9, 0x1, 0x8, 0x94cd, 0xb032, 0x8, 0x0, 0x6, 0x3, 0x2, 0x6, 0x2, 0x7, 0x0, 0x7, 0x7, 0x100, 0x3, 0xff, 0x8001, 0xf55, 0xf, 0x800, 0x7, 0x3, 0x8, 0x4, 0x5, 0x2, 0x8001, 0x8, 0x7, 0x6, 0xcf, 0x3, 0xfff, 0xc, 0xa46, 0x8, 0x8, 0x9, 0xccc, 0x1000, 0x4, 0x0, 0x1, 0x2, 0x0, 0x3, 0x3, 0x8, 0x3, 0xd, 0x1, 0x6, 0x9, 0x3ff, 0x5, 0x5, 0x4, 0xffffff5a, 0x5, 0xffff, 0x7, 0x5, 0x80, 0x81, 0x3, 0x5, 0x9, 0x0, 0x6, 0x40, 0x1, 0x4, 0x3, 0x2, 0x6, 0x0, 0x2, 0x1000, 0xcb, 0x79a, 0x6, 0x7, 0xffffff2e, 0x8e, 0x73, 0x1, 0xe1, 0xc1, 0x7fffffff, 0xb, 0x2, 0x6c0, 0x20000000, 0xda, 0x7, 0x7, 0x0, 0x4, 0x8001, 0x1ae351cd, 0xfffffffa, 0x3, 0x641c2120, 0x7fff, 0x9285, 0xa1, 0x4, 0xe, 0x6, 0x3ff, 0x0, 0x101, 0xa8, 0x6, 0xfffffffc, 0x7, 0x800, 0x0, 0x8, 0x2348, 0x12, 0x0, 0x748f9fe3, 0x8001, 0x6, 0xc55, 0xff, 0xfffffffc, 0x1ff, 0x9, 0x147eb005, 0xffff, 0x8000, 0x100, 0xf, 0x9, 0xf, 0x2aa3, 0x5d, 0x9, 0x3ff, 0x4, 0x80000000, 0x9, 0x2, 0x6, 0x6, 0x6, 0x5, 0x3, 0x7ff, 0x40e, 0xc, 0x1, 0x8, 0x7, 0xfffffff7, 0xb, 0x4, 0x5, 0x6ab, 0x9, 0x6, 0x7fffffff, 0x4, 0x9, 0x7, 0x5, 0x101, 0x2849, 0x6, 0x4, 0x9, 0x4000000, 0x10000, 0xb1, 0x10000, 0xfffffff8, 0x2cf, 0x2, 0x78, 0x6, 0x8, 0x4, 0x7f76529f, 0x1eab6707, 0x13f8, 0x1000]}) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x2000) (async) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x2000) ioctl$DIOCRGETTSTATS(r2, 0xc4504440, &(0x7f0000000f00)={{'./file0\x00', './file0/file0\x00', 0x46, 0xf}, &(0x7f0000000ac0)=[{'./file0\x00', './file0\x00', 0x1, 0x2}], 0x7, 0x1, 0x8, 0xe4e3, 0x393, 0x2, 0x18, 0x4}) ioctl$WSDISPLAYIO_GINFO(r3, 0x40185741, &(0x7f0000001380)) shmget(0x0, 0x1000, 0x200, &(0x7f0000ffc000/0x1000)=nil) (async) r4 = shmget(0x0, 0x1000, 0x200, &(0x7f0000ffc000/0x1000)=nil) shmat(r4, &(0x7f0000ffb000/0x4000)=nil, 0x3000) (async) shmat(r4, &(0x7f0000ffb000/0x4000)=nil, 0x3000) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffff9c, 0xc01864c6, &(0x7f0000001400)={&(0x7f00000013c0)=[0x81], 0x1, 0x18000, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETFB(0xffffffffffffff9c, 0xc01c64ad, &(0x7f0000001440)={0x0, 0x8, 0x0, 0x1, 0x1, 0x40}) (async) ioctl$DRM_IOCTL_MODE_GETFB(0xffffffffffffff9c, 0xc01c64ad, &(0x7f0000001440)={0x0, 0x8, 0x0, 0x1, 0x1, 0x40, 0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r5, 0xc008640a, &(0x7f0000001480)={r6}) (async) ioctl$DRM_IOCTL_GEM_FLINK(r5, 0xc008640a, &(0x7f0000001480)={r6}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000001500)={&(0x7f00000014c0)=[0x10, 0x7], 0x2, 0x4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETFB2(r7, 0xc06864ce, &(0x7f0000001540)={0x0, 0x4e, 0x3, 0x32313050, 0x0, [r6, r6, r6, r6], [0xfff, 0x2, 0xd, 0x8001], [0x5, 0x4, 0x7c17, 0x1], [0x7, 0x7, 0x3ff, 0x2]}) (async) ioctl$DRM_IOCTL_MODE_GETFB2(r7, 0xc06864ce, &(0x7f0000001540)={0x0, 0x4e, 0x3, 0x32313050, 0x0, [r6, r6, r6, r6], [0xfff, 0x2, 0xd, 0x8001], [0x5, 0x4, 0x7c17, 0x1], [0x7, 0x7, 0x3ff, 0x2]}) shmget(0x3, 0x2000, 0x400, &(0x7f0000ffb000/0x2000)=nil) (async) r8 = shmget(0x3, 0x2000, 0x400, &(0x7f0000ffb000/0x2000)=nil) shmat(r8, &(0x7f0000ff3000/0xd000)=nil, 0x1000) r9 = dup3(r3, r7, 0x0) setsockopt$sock_linger(r9, 0xffff, 0x80, &(0x7f00000015c0)={0x6, 0x5}, 0x8) ioctl$WSKBDIO_GETENCODING(0xffffffffffffffff, 0x4004570f, &(0x7f0000001600)) (async) ioctl$WSKBDIO_GETENCODING(0xffffffffffffffff, 0x4004570f, &(0x7f0000001600)) shmdt(0x0) shmctl$IPC_RMID(r4, 0x0) 1.720777147s ago: executing program 0 (id=284): sysctl$kern(&(0x7f00000000c0)={0x1, 0x3e}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) nanosleep(&(0x7f0000000140)={0x80000000}, &(0x7f0000000180)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$kern(&(0x7f0000000300)={0x1, 0x1d}, 0x2, &(0x7f0000000340)="3bc99393547d0d848e58d0ad9dd82c8f472de70c47aaec4c", &(0x7f0000000380)=0x18, &(0x7f00000003c0)="444ebe241daec67673f571bc0e1956367f29bb31b0fbf95ad328e6a3f84774b7c9591e", 0x23) (async) sysctl$kern(&(0x7f0000000300)={0x1, 0x1d}, 0x2, &(0x7f0000000340)="3bc99393547d0d848e58d0ad9dd82c8f472de70c47aaec4c", &(0x7f0000000380)=0x18, &(0x7f00000003c0)="444ebe241daec67673f571bc0e1956367f29bb31b0fbf95ad328e6a3f84774b7c9591e", 0x23) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x80, 0x83) ioctl$TIOCCONS(r0, 0x80047462, &(0x7f0000000040)=0x10004) (async) ioctl$TIOCCONS(r0, 0x80047462, &(0x7f0000000040)=0x10004) ktrace(&(0x7f0000000080)='./file0\x00', 0x0, 0x40000630, 0x0) (async) ktrace(&(0x7f0000000080)='./file0\x00', 0x0, 0x40000630, 0x0) unveil(0x0, &(0x7f0000004000)='x\x00') sysctl$net_inet_tcp(&(0x7f00000000c0)={0x4, 0x1e, 0x2, 0x1a}, 0x4, &(0x7f0000000a40), 0x0, 0x0, 0x0) (async) sysctl$net_inet_tcp(&(0x7f00000000c0)={0x4, 0x1e, 0x2, 0x1a}, 0x4, &(0x7f0000000a40), 0x0, 0x0, 0x0) r1 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000b00), 0x20, 0x0) ioctl$VNDIOCGET(r1, 0xc4104603, &(0x7f0000000b40)={'./file0\x00', 0xfffffffd, 0x5, 0x4}) openat$pf(0xffffffffffffff9c, &(0x7f0000000200), 0x40, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYRES16=0x0]) openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x10, 0x0) (async) r2 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x10, 0x0) ioctl$DIOCGETQUEUES(r2, 0xc148445e, &(0x7f0000000040)={0x6, 0x0, {'\x00', './file0\x00', './file0\x00', './file0\x00', {{0x98, 0xfff}, {0x463b, 0x6}, 0x8}, {{0x0, 0x5}, {0x10, 0x5}, 0x5d}, {{0x1, 0x1}, {0x10000, 0xa}, 0xcf3}, {0xc, 0x401, 0x5}, 0x0, 0x1, 0x322f, 0x8, 0x7f}}) mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) ioctl$VNDIOCSET(0xffffffffffffffff, 0xc0384600, &(0x7f00000002c0)={&(0x7f0000000240)='./file0\x00', 0x9, &(0x7f0000000280)='./file0\x00', 0x8}) 1.716038002s ago: executing program 1 (id=286): preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) sysctl$net_inet_udp(&(0x7f0000000000)={0x4, 0x2, 0x11, 0x2}, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x80, 0x4) bind$unix(r1, 0x0, 0x0) chmod(0x0, 0x3db) r2 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$DIOCRADDTABLES(r2, 0xc450443d, &(0x7f00000008c0)={{'./file0\x00', './file0\x00', 0x1, 0x6}, 0x0, 0x6, 0x0, 0xffff, 0x3, 0x9, 0x8, 0x40, 0xffffffff}) r3 = socket(0x1, 0x8002, 0x0) fcntl$dupfd(r3, 0x2, 0xffffffffffffffff) r4 = socket$inet(0x2, 0x1, 0x0) bind$inet(r4, 0x0, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x10000, 0x0) openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f00000008c0), 0x80, 0x0) select(0x40, &(0x7f0000000980)={0x7fff, 0x5, 0x9, 0x8, 0x4, 0x6, 0x8001, 0x4}, 0x0, 0x0, 0x0) open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0xd6) getpid() r5 = openat$pci(0xffffffffffffff9c, 0x0, 0x80, 0x0) ioctl$PCIOCREAD(r5, 0xc0107002, 0x0) setsockopt(0xffffffffffffffff, 0x1000000029, 0xd, 0x0, 0x0) r6 = openat$pf(0xffffffffffffff9c, &(0x7f00000000c0), 0x82, 0x0) setitimer(0x2, &(0x7f0000000140)={{0xfffffffffffffffe, 0x122800000000009}, {0xffffdff0, 0x8020000000000001}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$TIOCSETA(r6, 0xcd60441a, &(0x7f0000000140)={0x5, 0x100, 0x4, 0x403, "000000000a00000f000000aff0338a6b4fc6d700", 0x8, 0x7}) syz_emit_ethernet(0x46, &(0x7f00000001c0)={@local, @broadcast, [{[{0x88a8, 0x1, 0x1, 0x4}], {0x8100, 0x7, 0x0, 0x4}}], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x3d, 0x30, 0x67, 0x0, 0x0, 0x6, 0x0, @multicast1, @local={0xac, 0x14, 0x0}}, @tcp={{0x0, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0x8200, 0x0, 0xfffc, {[@sack_perm={0x4, 0x2}, @window={0x3, 0x3, 0xc}]}}}}}}}) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0x80000000, 0xffff63d6, 0xe9, 0x1, 0x10001, 0x3, 0xb, 0x10, [{0x10000404, 0x80000003, 0x4, 0x80000002}, {0xe9, 0xec, 0x1000002, 0x2}, {0xcd8, 0x4baa, 0x9, 0x4}, {0x7, 0xff, 0xf, 0x88ce}, {0x4, 0x200400b, 0x1, 0x25cb}, {0x388d, 0xffffffff, 0x85, 0x5}, {0x10000, 0xa00, 0x20003, 0xffffffff}, {0x207, 0x4, 0x7, 0xffffe2e8}, {0x7, 0x1000, 0x1, 0x7ffd}, {0x8003, 0x1, 0x1ff, 0x12}, {0x82, 0x0, 0x8a3a0004, 0xfffffff4}, {0x10000, 0xff7ffffe, 0x1, 0xa68}, {0x401, 0xc, 0x400809, 0xa5}, {0x6, 0x2, 0x102, 0x2}, {0x2, 0x1, 0x1, 0x80000007}, {0x89be2, 0x1, 0x2, 0x2}]}) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000180)={0x7, 0x2, 0x2dfbbd99, 0x2, 0x6, 0x40, 0x7fff, 0x10, [{0x1, 0x87, 0x3, 0x7}, {0x2, 0x29f, 0x7, 0x5}, {0x5, 0x10, 0xffff0001, 0xb9}, {0x4, 0x80, 0x976a, 0xfffffff9}, {0x714, 0x7, 0x10, 0x7fffffff}, {0x0, 0x9c7e, 0x1, 0x4}, {0x9, 0x3, 0x1, 0x6}, {0x8, 0x6, 0xff, 0x2}, {0xfffffeff, 0x2, 0x7, 0x6}, {0x400, 0x7, 0x1, 0x4}, {0x9, 0x5, 0x2, 0x7}, {0x8, 0xff, 0x0, 0x3}, {0x3ff, 0xffff, 0x1527, 0x8}, {0x4, 0x4, 0x4, 0x50}, {0x4, 0x3, 0x570c, 0xfff}, {0x7, 0x401, 0x17c8, 0xc00}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$TIOCSETA(r0, 0x80d04466, &(0x7f0000000140)={0x9, 0xa525, 0x4, 0x127492, "08e50000000000000100", 0x20004118, 0x6}) 1.655387794s ago: executing program 0 (id=289): r0 = socket$unix(0x1, 0x2, 0x0) sysctl$net_inet_udp(&(0x7f0000000000)={0x4, 0x2, 0x11, 0x2}, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x4) bind$unix(r0, 0x0, 0x0) chmod(0x0, 0x3db) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$DIOCRADDTABLES(r1, 0xc450443d, &(0x7f00000008c0)={{'./file0\x00', './file0\x00', 0x1, 0x6}, 0x0, 0x6, 0x0, 0xffff, 0x3, 0x9, 0x8, 0x40, 0xffffffff}) r2 = socket(0x10, 0x8002, 0x80) fcntl$dupfd(r2, 0x2, 0xffffffffffffffff) bind$inet(0xffffffffffffffff, 0x0, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x10000, 0x0) ioctl$DIOCXBEGIN(0xffffffffffffffff, 0xc0104451, &(0x7f0000000100)={0x1, 0x0, &(0x7f0000000180)=[{0x749df8fe55911e74, './file1\x00', 0x7}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r3 = socket(0x18, 0x2, 0x0) setsockopt(r3, 0x1000000000029, 0xb, &(0x7f0000000180)='\x00\x00\x00\x00', 0x4) openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f00000008c0), 0x80, 0x0) select(0x40, &(0x7f0000000980)={0x7fff, 0x5, 0x9, 0x8, 0x4, 0x6, 0x8001, 0x4}, 0x0, 0x0, 0x0) open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0xd6) getpid() r4 = openat$pci(0xffffffffffffff9c, 0x0, 0x80, 0x0) ioctl$PCIOCREAD(r4, 0xc0107002, 0x0) setsockopt(0xffffffffffffffff, 0x1000000029, 0xd, 0x0, 0x0) r5 = openat$pf(0xffffffffffffff9c, &(0x7f00000005c0), 0x80, 0x0) setitimer(0x2, &(0x7f0000000140)={{0x2, 0x122800000000009}, {0xffffdff0, 0x8020000000000001}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$TIOCSETA(r5, 0xcd60441a, &(0x7f0000000140)={0x5, 0x100, 0x4, 0x403, "000000000a00000f000000aff0338a6b4fc6d700", 0x8, 0x7}) syz_emit_ethernet(0x46, &(0x7f00000001c0)=ANY=[]) ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x0, [{0x2, 0x2}, {0x0, 0xfffffffb}, {}, {0x0, 0x100001}, {0x0, 0x7fffffff}, {0x1, 0x4}, {0x3}, {0x0, 0xc8}, {0x5, 0x2}, {0x0, 0xfe}, {0x2}, {0x3}, {0x1, 0x2}, {0x3}, {}, {0x1}, {0x1, 0x8}, {0x2, 0xfffeffff}, {}, {0x0, 0x2}, {0x0, 0x1}, {0x2, 0xfffffffc}, {0x2}, {0x0, 0xfffffffc}, {0x0, 0xffffffff}, {0x2}, {0x0, 0x3}, {}, {}, {}, {}, {0x1, 0x57fd}]}) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) 1.644606341s ago: executing program 1 (id=291): mprotect(&(0x7f000017e000/0x1000)=nil, 0x1000, 0x4) r0 = socket(0x18, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x10, 0x2, 0x1, 0xcd}, 0x10) (async) sendmmsg(r0, &(0x7f0000000200)={{&(0x7f00000000c0)=@in6={0x1c, 0x18, 0x3, 0x7, "ff010000000000000000000000000001", 0x6}, 0x1c, 0x0, 0x0, 0x0}}, 0x38, 0x8) (async) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000580), 0x10000, 0x0) preadv(r1, &(0x7f0000000080)=[{&(0x7f0000000480)=""/240, 0xfffffc47}, {&(0x7f00000000c0)=""/179, 0xfdac}, {&(0x7f00000002c0)=""/229, 0xe2}], 0x50, 0x0) (async) r2 = getuid() setreuid(0xee00, r2) (async) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0) ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) (async) ioctl$BIOCSETF(r3, 0x80104267, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x0, 0xff, 0x2, 0x6}, {0x25, 0x0, 0x2, 0x3}, {0x80, 0xf5, 0x5, 0x6}, {0x891e, 0xff, 0x19}, {0x9b1e, 0x4, 0x3, 0x2}]}) syz_emit_ethernet(0x3e, &(0x7f00000000c0)=ANY=[]) (async) setuid(r2) 1.584733822s ago: executing program 1 (id=293): r0 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$WSKBDIO_SETBELL(r0, 0x80105703, &(0x7f0000000040)={0x4, 0x4, 0xfff, 0x4}) (async) ioctl$WSKBDIO_SETBELL(r0, 0x80105703, &(0x7f0000000040)={0x4, 0x4, 0xfff, 0x4}) ioctl$BIOCGETIF(r0, 0x4020426b, &(0x7f0000000080)={""/16, @ifru_index}) r1 = dup3(r0, r0, 0x0) poll(&(0x7f00000000c0)=[{r0, 0x1}, {r0, 0x8}, {r0, 0x94}, {r1, 0x20}, {r0, 0x20}, {r0, 0x4}, {r0, 0x100}], 0x7, 0x800) r2 = getpgrp() fcntl$getown(r1, 0x5) (async) fcntl$getown(r1, 0x5) r3 = openat$tty(0xffffffffffffff9c, &(0x7f0000000100), 0x40000, 0x0) fcntl$setown(r3, 0x6, r2) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0x66, &(0x7f0000000140)={0x9, 0x1, 0x7, 0x7859, 0x9}, 0xc) (async) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0x66, &(0x7f0000000140)={0x9, 0x1, 0x7, 0x7859, 0x9}, 0xc) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0) poll(&(0x7f00000001c0)=[{r4, 0x8}, {r3, 0x40}], 0x2, 0xaf54) getpid() (async) r5 = getpid() ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0x808, r5) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)) getpgrp() closefrom(r0) sendmmsg(r1, &(0x7f00000009c0)={{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000300)="04429721b4e31016698c6425505153af0c3468117d3fba9b07551902595cad19ab53b33271e663c55f6de83391f00a0837dfddab3009b5389a6cf192d021e80fe78d27f2683d44f3d7e88603d7b30db7bb9c5e98d40e4ff88e5280d4ce34c44f3812249d71c6fd450b992ccdef8a6c270c6b8a0f7613c3b5b794854ca755debb4321678539aca8ce33bea07a7cebaa55f8bb955a3af88cbf9811ba547f75c6717ab1f452b2", 0xa5}, {&(0x7f00000003c0)="17481b5e1da6bd237f1607a3e0c235ceff277a99d6b0d3adaec8f7b54acb3e90bd1a8555173bdf4f71fa70023f0d8f62ef9d383878594801753dc5c49b89925f674b9a9c5092047d626d1f2028b106175ffd15320b8f29e8a8a7f6ad2904919e0b11db5b55b310070b3caba98c657a1715808ef615b6644f9eb5618b9594b11a2dff8f95637a84c439954658e5f13fdfe7632b09396431713ee7af887a89f8722eda6c84fc22ee9adae32e5cf90287ea4cd45b10bf0cad6d5d2595920a0e88222458cf329ab923109927b18368dd56557c64bc72034ee07dae4ee4f5fefae24f514b4afed270505976040dd347c19aacff26bbfcc46d5c553b42e514396f", 0xfe}, {&(0x7f00000004c0)="c07566b79f8d22384952b8348ad0be2757e947106212b524e75d5c80285fc3f73de2efd51c502981f95956801ae92a539823a9d576d5b9fab1ab3d7b9348d2e68cabbaa246be4dd76dbea3fc65816cc107ba54e27571ef93e42c1f4ee627d0d7bc6e5498c88cfa2671c6b2259522fc570940c637a4e9a98c0da34465d7f8d4752789c5e0557815bb817b17959e82302133974b169c10f2499f33dbac4ced8fb9f9253407f2fd47ef65a99b4f703d95b6c8a69ff92cc7f2dc7105e2400a19f076b1faac6112bbb9a2c63712d2c4aa90783e5b288f48d2cf634d5a2269cca3b6c365974e620d56175c8cfa14ffb3337cbb42de", 0xf2}, {&(0x7f00000005c0)="7f38e69ef775108cb47194852993afd12518f199dab922886872457395449a7befc5355ce6c37e31d0dc575325d8d17c891f21aff6d46f44dd17587c898944b3d7934be87f920328e81de8f4139f957fcbce74900be6350752e1e3a1e02a2f68b739fecbbf70f2446399b5dc65d8fa9f98f0069a870de184b427f7525645046b763bc31e26117e6426e016dc5f570117f45ba3fd10e252f539e872ae60011f2957ee52804516a127fee97cbbcfe7de1b19736069bf5c8db2634d", 0xba}, {&(0x7f0000000680)="31c430dba5efe512d2a0e10f49a79223fb530a33d32e881b9147bb212e7005a71062c562596f0451cca683", 0x2b}], 0x5, &(0x7f0000000740)=[{0xb8, 0x1, 0x9, "a53f14a8ac8b19ef6ed1b3947e95ff0b14749ef726615728c7da3d0e545a1c14faf07898760146f095e99f5c3f823d872ce4c8abaa8ccb14a52ffebe8c89ede6df4fa1d5874d4014c62826b2f9376d05a5f5cf51932f62a37a5cf9950d4d9859bcc7549dd4e843a4f0d70df1d5071059a5445519fa45a1590797cabd8bef825084f4fbc2028af09f23753a0d54bdd863f607354147ab64d9412b615595f7341c74a62b688e79783a8535"}, {0xa8, 0xffff, 0x0, "c720741d690347de772e5b1024417c2294bff1370fb15c4f0aac578d880e42b4823b0afb23c3fa512b0116b6973868c3de6653e7585ba03cb3c0e1d2cc816940909755faca8866dbda1ddbea1be66b29b4010b2653ea5bb40655ab9986518b013865853f2376c3b0dc6efba8a764e5db8cdd29fdc8c007050031cc21f73bfb9188edb2409cf6fb5b16e2487499fea9723b23ca263d3478d18eef"}, {0xe4, 0xffff, 0x8, "6229367dc956c3671aa4a903ce4f7140be9a1679cdf3ec8fcfcd53080e686d6d379fa93309c7a1ea13c8cdbe8b3fb8369ea213b983c04c69140226cb9f59de1677f5f2c32c766dcf38654b13589f28ee6286df38e9e1dfb4af78cf1485776d8bda1bb59aa6457f18357092c87babc15448996bfe1775f91b811686dfbb4a9b560f0a50f5401046de9a6a92f6dc798e6040282f708cee1f3dc8169c8fa3f543b23e5a72949757bdf1b41e76a3280345b6fbeab2bdc92d9e2001bc0e691330bcdb0e3205742767be6af51304ef4fc534b170e7a69e56cb530e"}], 0x244}}, 0x38, 0x200) ioctl$WSKBDIO_SETDEFAULTBELL(r1, 0x80105705, &(0x7f0000000a00)={0x0, 0x1, 0x2}) (async) ioctl$WSKBDIO_SETDEFAULTBELL(r1, 0x80105705, &(0x7f0000000a00)={0x0, 0x1, 0x2}) recvmmsg(r0, &(0x7f0000001d00)={{&(0x7f0000000a40)=@un=@file={0x0, 0x0, ""/4089}, 0xffb, &(0x7f0000001c80)=[{&(0x7f0000001a40)=""/22, 0x16}, {&(0x7f0000001a80)=""/19, 0x13}, {&(0x7f0000001ac0)=""/216, 0xd8}, {&(0x7f0000001bc0)=""/155, 0x9b}], 0x4, &(0x7f0000001cc0)=""/37, 0x25}, 0x7}, 0x38, 0x800, &(0x7f0000001d40)={0x3}) (async) recvmmsg(r0, &(0x7f0000001d00)={{&(0x7f0000000a40)=@un=@file={0x0, 0x0, ""/4089}, 0xffb, &(0x7f0000001c80)=[{&(0x7f0000001a40)=""/22, 0x16}, {&(0x7f0000001a80)=""/19, 0x13}, {&(0x7f0000001ac0)=""/216, 0xd8}, {&(0x7f0000001bc0)=""/155, 0x9b}], 0x4, &(0x7f0000001cc0)=""/37, 0x25}, 0x7}, 0x38, 0x800, &(0x7f0000001d40)={0x3}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffff9c, 0xc02064b9, &(0x7f0000001e00)={&(0x7f0000001d80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001dc0)=[0x0, 0x0, 0x0], 0x7, 0x8b5, 0xdededede}) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4) ioctl$DIOCRGETADDRS(r0, 0xc4504446, &(0x7f0000001f40)={{'./file0\x00', './file0\x00', 0x10, 0xe}, &(0x7f0000001e40)=[{@local={0xac, 0x14, 0x0}, '\x00', './file0\x00', 0x6, 0x6, 0x0, 0x81, 0x7, 0x35}, {@multicast1, '\x00', './file1\x00', 0x401, 0x1, 0x18, 0x7f, 0x6, 0x7, 0xa8}, {@remote={0xac, 0x14, 0x0}, '\x00', './file0\x00', 0x3, 0x200, 0x28, 0x7, 0x8, 0xb, 0x9}, {@empty, '\x00', './file0\x00', 0x40, 0x0, 0x18, 0x4, 0xd0, 0xd3, 0xf}], 0x0, 0x4, 0x79, 0xf24e0f5, 0xe1f, 0x5, 0x4a, 0xe}) r6 = accept4(r0, &(0x7f00000023c0)=@in6, &(0x7f0000002400)=0x1c, 0xe000) sendmmsg(r6, &(0x7f0000002840)={{&(0x7f0000002440)=@in={0x10, 0x2, 0x2, 0x7fffffff}, 0x10, &(0x7f0000002700)=[{&(0x7f0000002480)="0ff334e985f269482542e09fe53fbfd9e85d9bedc35b77d6dd60c220685c8eb10b2da400b9b90180a4dbc5c1bfaa4a01e273ae199e2a59221c2eefd4baabb6a5dfc1a88bfacbefa89574a3c41ab072bf8e157d664631ffb18eb5bcb699f38132d2016eef63065544", 0x68}, {&(0x7f0000002500)="65761ced5183b5b95c1cdc1c5bc45ed9d95787bf3e199798e8aa17e7f3", 0x1d}, {&(0x7f0000002540)="98b297fd284d03997ac6b56372da634be228953ece669ecb0931ec61e78c2b2f3aa398dd4e523d70aaa6ed17fde7cca9d4e8599051ce981679646d8d2bfaf5d15da00f718e61a2956d2124ba3fcc9f0f495e66bc9159e3605850ec02ff5baa09dd9732acb5591025c0bd6e7912725761e8e0e3f1bf225704cdbed40af3f028488e27281967f29c0251ee4edf7b9e1c317a65634f3bb270c647d68228c1ee8312db95a5425e5ce5cfe5538945a3fe694286cc548f3d7f0e7cca49671266555fb2947bb228e15f1d8545aba9853370be5fc802dd13f09e313e82ce12be6a329ed63aaae06cb9fb582d", 0xe8}, {&(0x7f0000002640)="7bbf7c10ac89e76262d25ca7113177e485b5b3415a94dbdef0ddbea14baddb68fa9ecd4e2c7809b418a992838def6b453ea3072a3dd46f486351ed91cc21ee8e83cfae264e3eacacd59fe27aeaffcde6e73afe916949e0e97c0b29bc50d30f5967df5e0dc0cf1888dbeadc113dabeab3b699adbb2e29010fdb918bbddb2a1021ba771bccecc8df2ce81ac1de3fdabcbfacdae75c38d3f8e94cbfcb46626e0513d2170e06798a30da1643b1086ac8a590badf4877d46c7e41e484822a", 0xbc}], 0x4, &(0x7f0000002740)=[{0x50, 0xffff, 0x1, "47734161609a1409e0b17d650f89fc8761424583b0f372534bb00d2de8b550571a37d593070a3814f1aa75505e4408c2b6fb4d3a1e01dd45e99ccaf5bf3f96389177"}, {0x78, 0x1, 0x8, "34326345460ac0af5cd107a1e4a316143f9184d09e662c4679cb118f12711247297b73a7bf10ead4216bf6cc58c4e0d6c7f17b35525c80302743d3c2dccb8cc55a9afd58559cd707dbe942ab98d86ac1d1a02895a2c1a4fbeaf64c1e9047a6726715b128ed768b03604d2691"}, {0x18, 0xffff, 0x40, "16720947a24b068f60bd7b3b"}], 0xe0}}, 0x38, 0x401) (async) sendmmsg(r6, &(0x7f0000002840)={{&(0x7f0000002440)=@in={0x10, 0x2, 0x2, 0x7fffffff}, 0x10, &(0x7f0000002700)=[{&(0x7f0000002480)="0ff334e985f269482542e09fe53fbfd9e85d9bedc35b77d6dd60c220685c8eb10b2da400b9b90180a4dbc5c1bfaa4a01e273ae199e2a59221c2eefd4baabb6a5dfc1a88bfacbefa89574a3c41ab072bf8e157d664631ffb18eb5bcb699f38132d2016eef63065544", 0x68}, {&(0x7f0000002500)="65761ced5183b5b95c1cdc1c5bc45ed9d95787bf3e199798e8aa17e7f3", 0x1d}, {&(0x7f0000002540)="98b297fd284d03997ac6b56372da634be228953ece669ecb0931ec61e78c2b2f3aa398dd4e523d70aaa6ed17fde7cca9d4e8599051ce981679646d8d2bfaf5d15da00f718e61a2956d2124ba3fcc9f0f495e66bc9159e3605850ec02ff5baa09dd9732acb5591025c0bd6e7912725761e8e0e3f1bf225704cdbed40af3f028488e27281967f29c0251ee4edf7b9e1c317a65634f3bb270c647d68228c1ee8312db95a5425e5ce5cfe5538945a3fe694286cc548f3d7f0e7cca49671266555fb2947bb228e15f1d8545aba9853370be5fc802dd13f09e313e82ce12be6a329ed63aaae06cb9fb582d", 0xe8}, {&(0x7f0000002640)="7bbf7c10ac89e76262d25ca7113177e485b5b3415a94dbdef0ddbea14baddb68fa9ecd4e2c7809b418a992838def6b453ea3072a3dd46f486351ed91cc21ee8e83cfae264e3eacacd59fe27aeaffcde6e73afe916949e0e97c0b29bc50d30f5967df5e0dc0cf1888dbeadc113dabeab3b699adbb2e29010fdb918bbddb2a1021ba771bccecc8df2ce81ac1de3fdabcbfacdae75c38d3f8e94cbfcb46626e0513d2170e06798a30da1643b1086ac8a590badf4877d46c7e41e484822a", 0xbc}], 0x4, &(0x7f0000002740)=[{0x50, 0xffff, 0x1, "47734161609a1409e0b17d650f89fc8761424583b0f372534bb00d2de8b550571a37d593070a3814f1aa75505e4408c2b6fb4d3a1e01dd45e99ccaf5bf3f96389177"}, {0x78, 0x1, 0x8, "34326345460ac0af5cd107a1e4a316143f9184d09e662c4679cb118f12711247297b73a7bf10ead4216bf6cc58c4e0d6c7f17b35525c80302743d3c2dccb8cc55a9afd58559cd707dbe942ab98d86ac1d1a02895a2c1a4fbeaf64c1e9047a6726715b128ed768b03604d2691"}, {0x18, 0xffff, 0x40, "16720947a24b068f60bd7b3b"}], 0xe0}}, 0x38, 0x401) select(0x40, &(0x7f0000002880)={0x6, 0xfffffffffffffffc, 0xa, 0x10, 0x9, 0xbce, 0x5, 0x2}, &(0x7f00000028c0)={0x6, 0x86, 0xbcb9, 0x7fff, 0xa4, 0x2, 0x3, 0x3}, &(0x7f0000002900)={0xe3, 0x2, 0x2, 0xfffffffffffffffb, 0x2, 0x620, 0x5a75, 0x2}, &(0x7f0000002940)={0x5b4, 0x3}) r7 = msgget(0x1, 0x404) msgctl$IPC_RMID(r7, 0x0) (async) msgctl$IPC_RMID(r7, 0x0) msgsnd(r7, &(0x7f0000002980)={0x1, "27bd6c59ff66cd4eeb619ff5ecf26c45a0c27de637ee6f8063e5941a6cbdbfaf277fbf44ac7b65f7499ef12ebb39cd0e9f2290cbd3fc78b59b9a42b76df189b33c365c5eb5433055cbae0eba2411db110aa99364d8a8b6cf2043729ddacdaf7ca2768c458922f2603fa3f97d42ad80c143afcc5e"}, 0x7c, 0x800) (async) msgsnd(r7, &(0x7f0000002980)={0x1, "27bd6c59ff66cd4eeb619ff5ecf26c45a0c27de637ee6f8063e5941a6cbdbfaf277fbf44ac7b65f7499ef12ebb39cd0e9f2290cbd3fc78b59b9a42b76df189b33c365c5eb5433055cbae0eba2411db110aa99364d8a8b6cf2043729ddacdaf7ca2768c458922f2603fa3f97d42ad80c143afcc5e"}, 0x7c, 0x800) ioctl$TIOCSETVERAUTH(r3, 0x8004741c, &(0x7f0000002a00)) (async) ioctl$TIOCSETVERAUTH(r3, 0x8004741c, &(0x7f0000002a00)) 1.582192014s ago: executing program 2 (id=294): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) r1 = socket(0x18, 0x3, 0x0) ioctl$FIONREAD(r1, 0xc0106924, &(0x7f00000001c0)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sysctl$hw(&(0x7f0000000280)={0x6, 0x9}, 0x2, &(0x7f0000000480)="06c7a681d3308227fc7548f0a0e44f10aa77d6396873f05c637abc3e4dff1af80368927226211a2fd6e3753159a6f1b70309d411e15aba2549a511a8fefa3db46ea43a7c75178b0a1a9b6fc0fb9262632c21f45fe132bfa5e0096fd437d8b3bcbdbf2cbc41a15c4ac87d2fa9d89772b5e5fbc317cc0c3ba5c696c25ea0a1be118f5993116df1e5ba3162ed65752d61078476a7ee4cdc35a86dff0c695f42e9a2ac321457d9e61fa386b945de2d6b76c277d5ec1ac56bcdeb78684e3f99a8bb74dabb67295e0a35b523356edbee51ba503fd406b9a81a1304b78a1d48a355dd", &(0x7f00000002c0)=0xdf, 0x0, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) write(r0, &(0x7f0000000740)="00400045fc", 0xffffff17) sysctl$net_inet_tcp(&(0x7f0000000040)={0x4, 0x2, 0x6, 0xd}, 0x4, 0x0, 0x0, 0x0, 0x0) 1.580173336s ago: executing program 2 (id=296): r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x10091, 0x0) write$audio(r1, &(0x7f0000000080)="d4ea", 0x2) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000b40)="825a4f47c21e6ed7eda4f5903abf65b18d7c51f78b06cc3a5840c04c2a649b0000000000fafd3493776665d4cd12c63d34", 0x31}], 0x1, 0x0, 0x0, 0xd}, 0x6) ioctl$TIOCSETA(r0, 0xc4504444, &(0x7f0000000740)={0x2f, 0xc, 0x3, 0xfffffffe, "0400091000000000000048000000448621c82f00", 0x100, 0x2}) openat$pf(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) (async) openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x10091, 0x0) (async) write$audio(r1, &(0x7f0000000080)="d4ea", 0x2) (async) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000b40)="825a4f47c21e6ed7eda4f5903abf65b18d7c51f78b06cc3a5840c04c2a649b0000000000fafd3493776665d4cd12c63d34", 0x31}], 0x1, 0x0, 0x0, 0xd}, 0x6) (async) ioctl$TIOCSETA(r0, 0xc4504444, &(0x7f0000000740)={0x2f, 0xc, 0x3, 0xfffffffe, "0400091000000000000048000000448621c82f00", 0x100, 0x2}) (async) 503.185206ms ago: executing program 5 (id=297): mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0x1604) setresuid(0x0, 0xffffffffffffffff, 0xee00) r0 = open(&(0x7f0000000380)='./bus\x00', 0x2, 0x4ebfac6bbaf794b) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000240)='#!', 0x2}], 0x1) write(r0, &(0x7f0000000140)="892020090910db00132f68cabc37b6415642000b003c090000000a", 0x1b) execve(&(0x7f0000000580)='./file0\x00', 0x0, 0x0) open(&(0x7f00000002c0)='./bus\x00', 0x2, 0x0) mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0x1604) (async) setresuid(0x0, 0xffffffffffffffff, 0xee00) (async) open(&(0x7f0000000380)='./bus\x00', 0x2, 0x4ebfac6bbaf794b) (async) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000240)='#!', 0x2}], 0x1) (async) write(r0, &(0x7f0000000140)="892020090910db00132f68cabc37b6415642000b003c090000000a", 0x1b) (async) execve(&(0x7f0000000580)='./file0\x00', 0x0, 0x0) (async) open(&(0x7f00000002c0)='./bus\x00', 0x2, 0x0) (async) 502.780017ms ago: executing program 2 (id=298): r0 = socket$inet(0x2, 0x3, 0x2) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) r1 = socket(0x18, 0x3, 0x0) sysctl$hw(0x0, 0x0, &(0x7f00000000c0)="99c5069e7aab2155751fcf107818533afc9ff01a68a4b1baa30a07f4c4b66ce08d59af7e54a8341f3be673a174c3a12223a171ff2ab99d0e0d43f0a6c3948f11658e876ac2126614dcd00fdfe76f1ace1f77da0c0af828b5c508585fd9df9ae729f85999a053e2c9872fbdd4e491010010", 0x0, 0x0, 0x0) ioctl$FIONREAD(r1, 0xc0106924, &(0x7f00000001c0)) r2 = socket(0x18, 0x2, 0x4) r3 = socket(0x2, 0x1001, 0x0) getsockopt$sock_int(r3, 0xffff, 0x1000, &(0x7f0000000180), &(0x7f00000001c0)=0x4) setsockopt(r2, 0x1000000029, 0x2e, 0x0, 0x0) setsockopt(r2, 0x1000000000029, 0xa, 0x0, 0x0) r4 = dup2(r2, r2) ioctl$DIOCRSETTFLAGS(r4, 0xc450444a, 0x0) ioctl$FIONREAD(r0, 0x8040691a, &(0x7f0000000100)) 502.359898ms ago: executing program 6 (id=299): open$dir(&(0x7f00000000c0)='.\x00', 0xf02, 0xce) syz_emit_ethernet(0x46, &(0x7f00000001c0)={@broadcast, @random="94ea09066dbd", [], {@ipv6={0x86dd, {0x0, 0x6, "008302", 0x10, 0x11, 0x0, @rand_addr="fed38d5ba80b9e61cd0c535a9800", @mcast2, {[@hopopts={0x16}], @udp={{0x3, 0x2, 0x8}}}}}}}) 484.03138ms ago: executing program 0 (id=300): r0 = open(0x0, 0x20, 0x4ebfac6bbaf7900) ioctl$VNDIOCCLR(r0, 0xc0a86b06, 0x0) r1 = getpgrp() (async) r2 = kqueue() kevent(r2, &(0x7f0000000240), 0x96, &(0x7f0000000540), 0xfffb4961, 0x0) (async) fcntl$setown(r0, 0x6, r1) r3 = socket$inet6(0x18, 0x3, 0x6) (async) r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0) ioctl$BIOCIMMEDIATE(r4, 0x8010427e, &(0x7f0000000040)=0x8) ioctl$BIOCSETIF(r4, 0x8020426c, &(0x7f0000000000)={'tap', 0x0}) (async) syz_emit_ethernet(0x1000e, &(0x7f00000015c0)=ANY=[]) (async) syz_emit_ethernet(0x138, &(0x7f0000000480)=ANY=[]) (async) ioctl$BIOCSETIF(r4, 0x8020426c, &(0x7f0000000080)={'tap', 0x0}) connect$inet6(r3, &(0x7f0000000040)={0x1c, 0x18, 0x2, 0x2000090, "fe80000400000000a8ff09000000fdff", 0x2}, 0x1c) (async) ioctl$AUDIO_GETPAR_ctl(r0, 0x40404124, &(0x7f00000002c0)) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) (async) ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file0\x00', 0x938, 0x20800c1, 0xf, 0x0, 0x1040807, 0x10050001, 0xfffffffe, 0x0, 0x2, 0xd, 0xf5fffffffffffff9}) (async) getitimer(0x2, &(0x7f00000000c0)) (async) mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) (async) r5 = open(&(0x7f0000000240)='./file0\x00', 0x20, 0x0) (async, rerun: 64) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x6, 0x4, 0xb, 0x1, 0x1, 0x6f, 0x10, [{0x5, 0xfe3, 0xffffff26, 0x71800}, {0x1, 0xf, 0xf, 0x7}, {0x100004, 0x40000004, 0x1fc000, 0x5}, {0x3, 0x0, 0x200, 0xfffffffb}, {0x4, 0x3, 0xe, 0x7}, {0x2, 0x20048000, 0x7d457398, 0xff}, {0x5, 0xbffffff5, 0x4, 0x6}, {0x99d, 0x8, 0x0, 0x4}, {0xf, 0x44c7, 0xbfa9, 0x8000}, {0x1ff, 0x0, 0x10001, 0x20000001}, {0xa450, 0xfff8, 0x488, 0xe1}, {0x8000, 0x5, 0x8, 0x8}, {0x2080e0, 0x9, 0x20000005, 0x3ff}, {0x1, 0x5, 0x8001, 0xfffffff6}, {0x2, 0x5, 0x4, 0x2000b}, {0x81, 0xf3, 0x7, 0x3a295788}]}) (rerun: 64) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x8, &(0x7f0000000300)=[{0x100, 0x81, 0x6c, 0x4}, {0x7, 0x1, 0x2, 0x80000001}, {0x7}, {0x8000, 0xc, 0x8, 0x6}, {0x2, 0x7, 0xff, 0xa}, {0x83f, 0x5, 0xfb, 0x5}, {0x3, 0x6, 0x6, 0xf26}, {0xb9, 0x1, 0x1, 0x7ff}]}) ioctl$FIONREAD(r5, 0xc0106978, &(0x7f00000001c0)) syz_emit_ethernet(0x3a, &(0x7f0000000000)=ANY=[@ANYBLOB="cfa1dc4b8b99ffff0200ffff08004900002c00002004fd3a9078ac1400bbffffffff8202440c00610000010100008000000000009078006703ff"]) (async) socket(0x18, 0x3, 0x0) (async, rerun: 64) r6 = socket(0x11, 0x3, 0xa) (rerun: 64) sendto$unix(r6, &(0x7f0000000100)="b10005016000009f05003f0407200000001813fecea10516d09a32693f316e357ae325b37b673031d2d236acf20b8f25be38164991f7c8cf5f882b297be1aa5b23edeb51e2f0ac3ebbc257699a1f139b672f4d335c223ef0806d392664a5902821020000000000008bfbb770c116a985c881ea772ec5890400000000ff0000361b1257aea8c5000020022138f2d90000c11a000000000008e38295f80004073da51a221f00000080042000000000000000", 0xb1, 0x14, 0x0, 0x0) (async, rerun: 64) r7 = getppid() (rerun: 64) ktrace(&(0x7f0000000080)='./file0\x00', 0x0, 0x1802, r7) (async) ioctl$FIONREAD(r0, 0xc0106924, &(0x7f0000000000)) 276.873687ms ago: executing program 5 (id=301): syz_emit_ethernet(0x126f, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd609ded1a12390000c4a4e3434e58d025a6a8a81cf312b8befe8000000000000000000000000000aa00030000000000000101000101000401000401"]) syz_emit_ethernet(0xd8, &(0x7f0000000140)={@random="718f15a5de07", @broadcast, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x3, 0xca, 0x67, 0x401, 0x4, 0x16, 0x0, @multicast1, @remote={0xac, 0x14, 0x0}, {[@noop, @end]}}, @generic="ef7bd52f605fdc263eb771371ee5286b81cf28730061a0472a3c9a88e9be107b066a7e7a6dd21251a90e139d5cc3ae9e20106cf99ea7c9715a85596c2902298dfb7ddb80fdebc3e7b5b28a9046186880bc0f4dba92aeb098cb477b72e21bb8213d81e8453982981818b9f75c9feffbc8e1d34294c635f4986099b72e409d75ea8eda293920d93adf87e90fc12f8869f1ef0a77109f723dfdfc9d63741dd5781cfea20cf96fc9af23b16b2eaf6824c0886284"}}}}) 246.585538ms ago: executing program 7 (id=302): r0 = msgget(0x3, 0x280) r1 = socket$inet6(0x18, 0x5, 0x6) setsockopt$sock_int(r1, 0xffff, 0x1000, &(0x7f0000000000)=0x6, 0x4) bind$inet6(r1, &(0x7f0000000040)={0x1c, 0x18, 0x2, 0x9, "4d1cf74b00000002b100", 0x8}, 0x1c) connect$inet6(r1, &(0x7f0000000280)={0x1c, 0x18, 0x3, 0x8d, "fe800004000000000000fe003200fdff"}, 0x1c) execve(0x0, 0x0, 0x0) syz_emit_ethernet(0x1000e, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd60db090000280000fed38d5ba80b9e61470c535a98000000ff0200000000000000000000000000012c000502"]) msgsnd(r0, &(0x7f0000000f80)=ANY=[@ANYRES32], 0xe2, 0x0) 37.345084ms ago: executing program 5 (id=303): open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x200, 0x1c6) setrlimit(0x1, &(0x7f0000000240)={0xad, 0x1fd}) r0 = getpid() setgroups(0x0, 0x0) ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x510, r0) setuid(0xffffffffffffffff) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@local, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x3, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0x0}, @broadcast}, @udp={{0x1, 0x2, 0x8}}}}}}) ppoll(0x0, 0x0, &(0x7f0000000080)={0xffffffffffffff3b, 0x69}, 0x0) fcntl$lock(0xffffffffffffffff, 0x9, &(0x7f0000000280)={0x0, 0x0, 0x3b5, 0x1000381210089}) open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) (async) open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) (async) open$dir(&(0x7f00000000c0)='./file0\x00', 0x200, 0x1c6) (async) setrlimit(0x1, &(0x7f0000000240)={0xad, 0x1fd}) (async) getpid() (async) setgroups(0x0, 0x0) (async) ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x510, r0) (async) setuid(0xffffffffffffffff) (async) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@local, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x3, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0x0}, @broadcast}, @udp={{0x1, 0x2, 0x8}}}}}}) (async) ppoll(0x0, 0x0, &(0x7f0000000080)={0xffffffffffffff3b, 0x69}, 0x0) (async) fcntl$lock(0xffffffffffffffff, 0x9, &(0x7f0000000280)={0x0, 0x0, 0x3b5, 0x1000381210089}) (async) 37.027615ms ago: executing program 6 (id=304): r0 = socket(0x18, 0x3, 0x0) mprotect(&(0x7f0000269000/0x4000)=nil, 0x4000, 0x0) (async, rerun: 64) setsockopt(r0, 0x1000000000029, 0x37, &(0x7f0000000040)="03000000", 0x4) (async, rerun: 64) ioctl$LIOCSFD(0xffffffffffffff9c, 0x80046c7f, &(0x7f0000000000)=r0) r1 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000080), 0x10, 0x0) ioctl$WSDISPLAYIO_GETPARAM(r1, 0xc0205759, &(0x7f00000000c0)={0x1, 0x1, 0xfffffff7, 0x6}) 36.643508ms ago: executing program 5 (id=305): sendmmsg(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x0, 0x0, 0x0, 0x0}}, 0x38, 0x8) sendmsg$unix(0xffffffffffffffff, 0x0, 0x4) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x8) readv(0xffffffffffffffff, 0x0, 0x0) pipe2(0x0, 0x0) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x8, 0x6, 0x978, 0x4, 0x1, 0x6f, 0x10, [{0x5, 0xfe3, 0x2, 0x71800}, {0xfffffffe, 0xfffffff6, 0xf, 0x7}, {0x100004, 0x4, 0x1fc000, 0x5}, {0x3, 0x0, 0x8, 0xfffffffb}, {0x4, 0x3, 0xb, 0x7}, {0x2, 0x20048000, 0x7d457398, 0x400ff}, {0x2, 0xbffffff5, 0x4, 0x6}, {0x99d, 0x8, 0x0, 0x3}, {0x0, 0x5, 0xbfa9, 0x8000}, {0x6, 0x0, 0x10001, 0x8}, {0xa450, 0x5, 0x488, 0xdf}, {0x8000, 0x5, 0x8, 0x8}, {0x2080e0, 0x9, 0x5, 0x3ff}, {0x1, 0xe9d9, 0x8001, 0xfffffff8}, {0x2, 0x5, 0x4, 0x20008}, {0x81, 0xf3, 0x7, 0x3a295788}]}) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) r0 = socket(0x18, 0x3, 0x0) ioctl$FIONREAD(r0, 0xc0106924, &(0x7f00000001c0)) r1 = socket(0x18, 0x2, 0x0) ioctl$FIONREAD(r1, 0x8080691a, &(0x7f0000000100)) r2 = socket(0x20, 0x3, 0x1) getsockopt$sock_int(r2, 0xffff, 0x200, 0x0, 0x0) listen(r2, 0x3) 33.345687ms ago: executing program 6 (id=306): r0 = socket(0x11, 0x8003, 0x8) r1 = socket(0x18, 0x1, 0x0) setrlimit(0x8, &(0x7f0000000980)={0xb, 0x4e}) r2 = syz_open_pts() close(r2) syz_open_pts() ioctl$FIOASYNC(r2, 0x80047469, &(0x7f00000000c0)=0x47) writev(r2, &(0x7f0000000580)=[{&(0x7f0000000100)="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", 0x2a0}], 0x1) setrlimit(0x8, &(0x7f0000000980)={0xb, 0x53}) r3 = syz_open_pts() close(r3) syz_open_pts() syz_open_pts() open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) fcntl$dupfd(r0, 0x0, r1) openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) bind$unix(0xffffffffffffffff, &(0x7f0000000140)=@file={0x6, 0x1, './file0\x00'}, 0xa) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r4 = socket(0x1, 0x4001, 0x0) r5 = fcntl$dupfd(r4, 0x2, 0xffffffffffffffff) close(r5) socket(0x20, 0x2, 0x0) r6 = accept$unix(r5, &(0x7f0000000400)=@file={0x0, 0x0, ""/23}, &(0x7f00000003c0)=0x19) connect$unix(r6, &(0x7f0000000100)=@abs={0x8, 0x0, 0x0, 0x1}, 0x8) r7 = socket(0x18, 0x2, 0x0) setsockopt$sock_int(r7, 0xffff, 0x1023, &(0x7f0000000040)=0x4, 0xd4) r8 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) ioctl$WSMUXIO_LIST_DEVICES(r8, 0x40047477, &(0x7f0000000200)={0x8, [{0x2, 0x2}, {0x0, 0xfffffffb}, {}, {0x0, 0x1}, {0x0, 0x7fffffff}, {0x0, 0xffff}, {}, {0x0, 0xc8}, {0x2, 0x2}, {0x0, 0xff}, {0x2}, {0x3, 0x6}, {0x1, 0xfffffffd}, {}, {}, {0x1, 0x1ff}, {0x3, 0x8}, {0x2, 0xfffefffd}, {0x0, 0x6}, {0x0, 0x2000002}, {}, {0x1, 0xfffffffc}, {0x2, 0x3}, {}, {0x0, 0xffffffff}, {0x2}, {0x0, 0x3}, {}, {}, {}, {0x0, 0x6}, {0x1, 0x57fd}]}) socket(0x18, 0x2, 0x0) 32.464671ms ago: executing program 2 (id=307): mknod(&(0x7f0000000280)='./file0\x00', 0x6000, 0x1e5f) open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) readv(0xffffffffffffffff, &(0x7f0000000a40)=[{0x0, 0xfffffe88}, {&(0x7f0000000600)=""/251, 0xfb}], 0x10000000000001e3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$unix(r1, &(0x7f0000000000)=@file={0x0, 0x0, ""/6}, &(0x7f00000000c0)=0x8) write(r0, &(0x7f0000000080)="ed", 0x1) recvmmsg(r1, &(0x7f0000000880)={{0x0, 0x0, 0x0, 0x0, 0x0}}, 0x38, 0x40, 0x0) shutdown(r1, 0x0) close(r1) r2 = socket$inet(0x18, 0x3, 0x102) sendmsg(r2, &(0x7f0000000240)={&(0x7f0000000280)=@in6={0x1c, 0x18, 0x0, 0x7, '\x00', 0x101}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000180)="638802000000339afe51f6f2efa24a85abdd612dd68e59adfecf9323100084410a8591426ee03e", 0x27}, {&(0x7f0000000680)="a2", 0x1}, {&(0x7f0000000100)="0601c42b37e12e2f861d72ab2950f9c30d92c97007db1675cdf970467d2a7940", 0x20}], 0x3, 0x0}, 0x402) execve(0x0, 0x0, 0x0) mknod(&(0x7f0000000280)='./file0\x00', 0x6000, 0x1e5f) (async) open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) (async) readv(0xffffffffffffffff, &(0x7f0000000a40)=[{0x0, 0xfffffe88}, {&(0x7f0000000600)=""/251, 0xfb}], 0x10000000000001e3) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) (async) getsockname$unix(r1, &(0x7f0000000000)=@file={0x0, 0x0, ""/6}, &(0x7f00000000c0)=0x8) (async) write(r0, &(0x7f0000000080)="ed", 0x1) (async) recvmmsg(r1, &(0x7f0000000880)={{0x0, 0x0, 0x0, 0x0, 0x0}}, 0x38, 0x40, 0x0) (async) shutdown(r1, 0x0) (async) close(r1) (async) socket$inet(0x18, 0x3, 0x102) (async) sendmsg(r2, &(0x7f0000000240)={&(0x7f0000000280)=@in6={0x1c, 0x18, 0x0, 0x7, '\x00', 0x101}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000180)="638802000000339afe51f6f2efa24a85abdd612dd68e59adfecf9323100084410a8591426ee03e", 0x27}, {&(0x7f0000000680)="a2", 0x1}, {&(0x7f0000000100)="0601c42b37e12e2f861d72ab2950f9c30d92c97007db1675cdf970467d2a7940", 0x20}], 0x3, 0x0}, 0x402) (async) execve(0x0, 0x0, 0x0) (async) 31.946085ms ago: executing program 5 (id=308): chmod(&(0x7f0000000040)='.\x00', 0x35e) setuid(0xee01) open(&(0x7f0000000140)='./file0\x00', 0x78e, 0x1a) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f00000002c0)={0x0, 0x400, {0xffffffffffffffff, 0x10000000002}}) r0 = semget$private(0x0, 0xb, 0x19f) semop(r0, &(0x7f0000000180)=[{0x0, 0x0, 0x1000}, {0x2, 0xc, 0x1000}], 0x2) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000332000/0x1000)=nil, 0x1000, 0x1) r1 = socket(0x18, 0x2, 0x0) lstat(&(0x7f0000000080)='./file1\x00', &(0x7f0000000240)) setsockopt(r1, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) setitimer(0x1, &(0x7f0000000140)={{0xcdc, 0x7}, {0x2, 0x10000011}}, 0x0) socket(0x2, 0x1, 0x0) mknod(&(0x7f00000001c0)='./file1\x00', 0x2000, 0x285b9a) r2 = open(&(0x7f0000000800)='./file1\x00', 0x800, 0x120) readv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000100)=""/62, 0x3e}], 0x1) ioctl$FIONBIO(r2, 0x82907003, &(0x7f0000000140)=0x3) sysctl$net_inet_ip(0x0, 0x0, &(0x7f0000000080)="ae215599fed2fce97f573b9c553a0e622d29cd093849cd4fe42e0f5d2d06a4e744f0", 0x0, 0x0, 0x0) faccessat(0xffffffffffffffff, &(0x7f0000000080)='.\x00', 0x3e, 0x0) ioctl$TIOCSETAF(0xffffffffffffffff, 0x802c7416, &(0x7f0000000000)={0x5, 0x4000000a, 0x0, 0x549, "22ff060000000000000023000000ca00", 0x79c, 0x71}) sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b100050400", 0x5, 0x400, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r3 = socket(0x11, 0x3, 0x0) sendto$unix(r3, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a378343712051eea040000000000", 0xb1, 0x0, 0x0, 0x0) r4 = socket$inet(0x2, 0x1, 0x0) getsockopt(r4, 0x0, 0x18, 0xffffffffffffffff, &(0x7f0000000080)) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2, 0x2010, 0xffffffffffffffff, 0x0) r5 = socket(0x18, 0x3, 0x1) getsockopt(r5, 0x29, 0x24, 0x0, 0x0) dup2(r1, r1) 22.915948ms ago: executing program 1 (id=309): openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) (async) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$BIOCSFILDROP(r0, 0x80044279, &(0x7f0000000040)=0x1) openat$dri(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dri/renderD128\x00', 0x1, 0x0) (async) r1 = openat$dri(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dri/renderD128\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_MASTER(r1, 0x2000641e) (async) ioctl$DRM_IOCTL_SET_MASTER(r1, 0x2000641e) r2 = openat$dri(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dri/card0\x00', 0x10000, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000100)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f0000000140)={r3}) (async) ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f0000000140)={r3}) r4 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0) fchmod(r1, 0x1a) r5 = semget(0x0, 0x1, 0x5) semctl$GETZCNT(r5, 0x2, 0x7, &(0x7f00000001c0)=""/91) (async) semctl$GETZCNT(r5, 0x2, 0x7, &(0x7f00000001c0)=""/91) getppid() (async) r6 = getppid() wait4(r6, &(0x7f0000000240), 0x0, &(0x7f0000000280)) (async) wait4(r6, &(0x7f0000000240), 0x0, &(0x7f0000000280)) r7 = openat$pf(0xffffffffffffff9c, &(0x7f0000000340), 0x200, 0x0) ioctl$DIOCRDELADDRS(r7, 0xc4504444, &(0x7f0000000480)={{'./file0\x00', './file0\x00', 0x11, 0x3}, &(0x7f0000000380)=[{@local={0xac, 0x14, 0x0}, '\x00', './file0\x00', 0x957e, 0x3, 0x18, 0x8, 0x4, 0x7f}, {@rand_addr=0xe, '\x00', './file0\x00', 0x77e, 0x4, 0x0, 0x5, 0x1a, 0x2, 0xf7}, {@multicast2, '\x00', './file0\x00', 0xffffff00, 0xfff, 0x0, 0x7, 0x4, 0x4, 0x4}, {@loopback, '\x00', './file0\x00', 0x81, 0x4, 0x2, 0x8, 0x0, 0x9, 0x40}], 0x7e, 0x4, 0x8, 0x336, 0x200000, 0x7f, 0xb0, 0xfffffffa}) closefrom(r2) (async) closefrom(r2) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000900)={0x0, 0x1}) r8 = socket(0x18, 0x4000, 0x7) syz_emit_ethernet(0x3a, &(0x7f0000000940)={@broadcast, @broadcast, [{[{0x88a8, 0x1}], {0x8100, 0x6, 0x0, 0x1}}], {@arp={0x806, @generic={0x6, 0x8062, 0x6, 0x0, 0x3, @local, "", @broadcast, "433d789427ec547fb78f4fa43a06ee7e"}}}}) fcntl$setown(r8, 0x6, r6) r9 = semget$private(0x0, 0x3, 0xf) semctl$GETNCNT(r9, 0x1, 0x3, &(0x7f0000000980)=""/26) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000ac0)={0x75dde2e1b948cb05, 0x2, &(0x7f00000009c0)=[0x1, 0x40000], &(0x7f0000000a00)=[0x7, 0x20, 0x4], &(0x7f0000000a40)=[0x2, 0x6, 0x98fb, 0x4, 0x10001, 0x7, 0x6, 0x0, 0x8000], &(0x7f0000000a80)=[0x0, 0x9, 0xfffffffffffff000, 0x8], 0x0, 0x9}) (async) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000ac0)={0x75dde2e1b948cb05, 0x2, &(0x7f00000009c0)=[0x1, 0x40000], &(0x7f0000000a00)=[0x7, 0x20, 0x4], &(0x7f0000000a40)=[0x2, 0x6, 0x98fb, 0x4, 0x10001, 0x7, 0x6, 0x0, 0x8000], &(0x7f0000000a80)=[0x0, 0x9, 0xfffffffffffff000, 0x8], 0x0, 0x9}) shmget(0x3, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4) r10 = geteuid() getgroups(0x7, &(0x7f0000000d00)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0]) (async) getgroups(0x7, &(0x7f0000000d00)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0]) r12 = setsid() r13 = getuid() sendmsg$unix(r8, &(0x7f0000000fc0)={&(0x7f0000000b00)=@abs={0x4, 0x1, 0x0, 0x3}, 0x8, &(0x7f0000000cc0)=[{&(0x7f0000000b40)="0755a17ca4c0384412088dc9da80f8d0d7b20c4ce9d2f405771be52af330dff0dcb5b3a02c37b007f7452bfec05a58c6c08df0adc8972a453b12a8477dceec6e93f5950e250bf7e0c9d2675139b94495dc8120d0d213f81ecf8f43a8334b2def7136a24abd4512a4ff4b5f6c34bad468e551246160608827a3d69ade9988a9e46fa39ed867500ee77955efc5bf", 0x8d}, {&(0x7f0000000c00)="d0468832290461c3d33a5c793501dd1ab6c270c7e7c41df087968c02c5b0e79b2c58948d86b3d2d7710432036994be03633e28129c33aeef6775f6a0926c05cb25b719f6c744f90db4be1b8d950e8892df72469a8bf1ab59100961f2addee101a594bf8aebcce740f3ad118e213a48fc3dd2d20ae18ad9088caf42186b526262a36ddea9e164f9a266", 0x89}], 0x2, &(0x7f0000000ec0)=[@cred={0x18, 0xffff, 0x0, 0x0, r10, r11}, @cred={0x18, 0xffff, 0x0, r12, r13}, @rights={0x10, 0xffff, 0x1, [r4]}, @rights={0x2c, 0xffff, 0x1, [r4, r1, r4, 0xffffffffffffffff, r8, 0xffffffffffffffff, 0xffffffffffffff9c, r2]}, @rights={0x18, 0xffff, 0x1, [r0, r7, r8]}, @rights={0x14, 0xffff, 0x1, [r1, 0xffffffffffffffff]}, @rights={0x14, 0xffff, 0x1, [r1, 0xffffffffffffffff]}, @cred={0x18, 0xffff, 0x0, r6}], 0xc4, 0x2}, 0x0) 21.792356ms ago: executing program 6 (id=310): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x200, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0x80000000, 0xffff63de, 0x9, 0x2, 0x8, 0x3, 0x44, 0x10, [{0x5, 0x3, 0xfffff115, 0x80000001}, {0x10000, 0xffffffff, 0x1, 0x9}, {0x1, 0x4baa, 0x3, 0x9}, {0x4, 0xe2, 0xf, 0x100}, {0x3, 0x2000007, 0x5, 0x84}, {0x7890, 0xffff, 0x8, 0x2}, {0x4, 0x7fe, 0x3, 0xfffffffa}, {0x207, 0x40, 0x27ffc, 0xffffe2e9}, {0x9, 0x1000, 0x6, 0x7fff}, {0x3, 0x1, 0x6, 0x8bfd}, {0x0, 0x0, 0x8, 0x6}, {0x10000, 0x0, 0x800000, 0xa6a}, {0x401, 0x4, 0x400009, 0xa1}, {0x3, 0x6e2, 0x2, 0x6f5fc48f}, {0x3, 0x101, 0x3, 0x9}, {0x9be2, 0x1, 0x2, 0x400}]}) poll(&(0x7f0000000000), 0x35, 0x0) ioctl$FIOASYNC(r0, 0x8004667d, &(0x7f0000000000)=0x9) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) getitimer(0x2, &(0x7f0000000180)) r1 = socket$inet(0x2, 0x3, 0x0) socket(0x11, 0x3, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) close(r2) ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f00000019c0)={0xfffffffc, 0xfffffffe, {[0x0, 0x2, 0x5, 0x3, 0x0, 0x8000080000000, 0x1000000006, 0x0, 0x0, 0x2f01, 0x4, 0x0, 0x1000, 0x0, 0x7, 0x0, 0x2, 0xff], [0x8, 0x5, 0xfffffffffffffff8, 0x10000000000000, 0xffffffffffffffff, 0x80000000, 0x0, 0x0, 0x0, 0xb81], [0x8, 0x0, 0x8f, 0x0, 0x800000, 0x0, 0xfffffffffffffffe], [0x100, 0x20000000000, 0x0, 0x100000002, 0xfffffffffffffffe], [{0x0, 0xc, 0x0, 0x7d06}, {0x2, 0x1, 0x1, 0x3}, {0x0, 0x0, 0xfff7fffe, 0xffd}, {0x1008, 0x0, 0x6, 0xfffffffffffffffe}, {0xfffc, 0x400, 0xd, 0x40}, {0x7ffe, 0x4, 0x6, 0x4}, {0xfffe, 0x0, 0x7}, {0x0, 0x95b, 0x200, 0x6}], {0x4000, 0x3, 0x0, 0x84b}, {0x203, 0x10, 0x4, 0x2}}}) r3 = kqueue() kevent(r3, &(0x7f0000000140), 0xe4a, 0x0, 0xa9f9, 0x0) ioctl$FIONREAD(r1, 0x80206979, &(0x7f0000000100)) 21.047578ms ago: executing program 3 (id=311): r0 = syz_open_pts() ioctl$TIOCSETD(r0, 0x8004741b, &(0x7f0000000040)=0x9) ioctl$TIOCSETD(r0, 0x8004741b, &(0x7f0000000000)=0x1) syz_emit_ethernet(0x42, &(0x7f0000001e80)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x8, 0x4, 0x0, 0x3c, 0x34, 0x67, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x7, @multicast1, {[@timestamp={0x44, 0xc, 0x55, 0x3, 0xf, [{[], 0x8000}, {[], 0x2}]}]}}, @tcp={{0x3, 0x3, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x0, 0x2000, 0x0, 0x1}}}}}}) 19.820153ms ago: executing program 3 (id=312): syz_emit_ethernet(0x20ca, &(0x7f0000004300)=ANY=[@ANYBLOB="aaaaaaaaaaaaca5979d5217e86dd6000000820942b00fe80000000000000000000003a0000bbfe8000000000000000000000000000aa3c00f301660000002b"]) mknod(&(0x7f0000000200)='./file0\x00', 0x2008, 0x412dff) open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x0) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0xc, 0x2000000000000004}, 0x0, 0x0, 0x0) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) ioctl$DIOCXROLLBACK(r0, 0xc0104453, &(0x7f0000002340)={0x2f, 0x408, &(0x7f0000000300)=[{0x0, './file0\x00', 0x7fff}]}) 18.20821ms ago: executing program 7 (id=313): r0 = socket$inet(0x18, 0x3, 0x102) sysctl$kern(&(0x7f00000005c0)={0x1, 0x48}, 0x2, &(0x7f0000000600)="371dc444", &(0x7f0000000680)=0x4, &(0x7f00000006c0)="a127847f", 0x4) sendmsg(r0, &(0x7f0000000240)={&(0x7f0000000280)=@in6={0x1c, 0x18, 0x0, 0x7, "00000000000000000000000000000001", 0x101}, 0x1c, &(0x7f00000001c0)=[{&(0x7f00000002c0)="630c00000000069afe51f6f2efa24a85abdd612dd68e59adfebb93232d44372e9bc47e84f7c477d24d9c793909f5480a00000000", 0x34}, {&(0x7f0000000000)="23071d80519db38c22e1efd63b86057883d4153c83722160ea6faf499957d7eb920a2d02d947fa1b4a8e7b91065ac33727143ff3944ba9fb47648a1216b7124e6893a828fd786ab18372aba6", 0x4c}, {&(0x7f0000000180)="e7846b9242c39c8dd1db706ec981f0eeed8c2d33bf4f", 0x16}], 0x3, 0x0}, 0x0) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r2 = syz_open_pts() close(r2) dup2(r2, r2) ioctl$BIOCSBLEN(r1, 0xc0044266, &(0x7f0000000040)=0x6) 14.412126ms ago: executing program 4 (id=314): select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x8, 0xffffffffffffffff, 0xfffffffffffffffd, 0x800, 0x181c, 0xa, 0x2}, 0x0, 0x0, 0x0) r0 = kqueue() kevent(r0, 0x0, 0x0, 0x0, 0x40000009, 0x0) r1 = socket(0x2, 0x8002, 0x0) fcntl$lock(0xffffffffffffffff, 0x9, 0x0) (async) fcntl$lock(0xffffffffffffffff, 0x9, 0x0) r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) closefrom(r2) socket$unix(0x1, 0x1, 0x0) (async) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$WSMOUSEIO_GETPARAMS(r2, 0x80105727, &(0x7f0000000040)={&(0x7f0000000000)=[{0x1, 0x49}, {0x46, 0x7fffffff}, {0x101, 0x3}, {0x44, 0x80000000}], 0x4}) closefrom(r3) (async) closefrom(r3) 13.851924ms ago: executing program 7 (id=315): chdir(0x0) writev(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x1, &(0x7f00000004c0)="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", 0xff) setitimer(0x0, &(0x7f0000000300)={{0x401, 0xe19}, {0xfffffffffffffff9, 0xc0003}}, &(0x7f0000000140)) setsockopt$inet_opts(r0, 0x0, 0x9, &(0x7f0000000140), 0x0) r1 = syz_open_pts() mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mprotect(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) fcntl$lock(r1, 0x8, &(0x7f0000000840)={0x1, 0x2, 0x5, 0x1000104000000}) flock(r1, 0x1) fcntl$lock(r1, 0x6, &(0x7f0000000040)={0x3, 0x33cfb0eff268a541, 0x0, 0x100000001}) unveil(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='c\x00') mkdir(&(0x7f0000000180)='./file0\x00', 0x25) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) select(0x40, &(0x7f0000000180)={0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x800, 0x0, 0x0, 0xe}, &(0x7f00000001c0)={0xfe, 0xfff, 0x9, 0x5, 0xfffffffffffffff7, 0x0, 0xa}, 0x0, 0x0) bind(r2, &(0x7f00000003c0)=@un=@abs={0x5, 0x0, 0x0, 0x0}, 0x8) mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) sysctl$kern(&(0x7f0000000040)={0x1, 0x39}, 0x2, &(0x7f00000011c0)="71f91e3471ac0058bc5a91501d94a34b8e", &(0x7f00000000c0)=0x11, 0x0, 0x0) readv(r2, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/73, 0x49}], 0x1) close(r2) writev(r3, &(0x7f0000000200)=[{&(0x7f0000000100)="19", 0x3a4e1e905c56cdb7}], 0x1) unveil(&(0x7f0000000240)='./file0/file0\x00', &(0x7f0000000280)='w\x00') execve(0x0, &(0x7f0000000000)=[&(0x7f00000005c0)='/\xe0\xff\xff\xaa/\xba\x83\xa2\xda\x8c!Pk\xbd\x13\xcex-\x824p\a\x9a\xee2\xb5\b\xb8\xa1\xdeNH\xa2\x14\xd2\xa8\x89\x7f\x1f\xde\x1b\xb0\xf3\xcd\xf2\x1a\x84m\x01G7V\xe1z=\x88\x9d\x97\xe3U\xc7\x91\x8b\xd4_W\xd2\x14F.\xf6\xfc\xeaC,t\x9e\x1d\xadHe\xe5\x9b=\xc3\xbd\x96D\x9e\x98\xcf\xc7\f\xb4\xc5\xb4\xa0\xb1<\x1a\x85\xdbz<_\xab\xa9\x04\xc4{V\xc7\xf8\x9d\xbcd.\x11\xa1T\x8e\x15\x99\xe2\x87O\xad\xf9d\xbc\xf4\xd4\xee*\xd9(q\x18\aW\x17k\xc1\x86\xe8\r\xb1\x0eyv\x99\x93\x972>\xe7w\xc3/\b[o:\xa3\t\x17\xe8\xe4\x0f\xfc6\x98\xdb;\'r&8_\x8c\xc3y\xe8p\x15\xd7TOM\x8b\xc1\xafOe\x91p\x0e\xbc\xc0$\xc4\xca\xfc\xa2\x04\xef\x98p\xf0/\xa9BR\xb5T\xe5,\xf7\xc5\x80B\x8e\x04%\xca~\x93\b\xee{\x9cJ/Ge\x03\xf7\x13\x01>@\xf0Y\xe1\xcd -\xf3p\t\xa2T\xe3} &\x88\x1d\xa0\xdb\x1e\x12\xf8b\xdc\xeeW5 \x1d4\a\x05\xaf\x80\xc9L\xef\xe9\xeb\xf0OkL\x90`Y\x9f$\n\x1fBN\xd9\xb9A\x16+\xe6^4\x87\v,\xfbF\xa5\xf1\x1a2\xbf\xa1\xff\x8fM\xb9zc\xe5\x8ev\xdb5\xe3\xe6\x9f\xabH\xc8/i\xe6\x06\xfdY\x8eg\t\xa3\x06&\x15\xfc\xfd%\xca\x98\fvA}\x94\xea\n\x90\x7fQ\xa3Dx\xa7\xebh\xe5\"\xb5\xde\xea\xc4\x82\xa7\x1d\xe1#\xb1,\xc8r\x97PIq\xa38\xdd\xabG\x17li\x01\xbc\x98wJ\x1f\xe6}\xaf\x06 \f\"'], 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb5219f1000b913f1, 0x44) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) fcntl$lock(r4, 0x7, &(0x7f0000000080)={0x3, 0x1, 0x6, 0x800}) chmod(&(0x7f0000000480)='./file0\x00', 0x150) mprotect(&(0x7f0000685000/0x1000)=nil, 0x1000, 0x5) 10.386893ms ago: executing program 4 (id=316): mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) setrlimit(0x8, &(0x7f0000000080)={0xe, 0x51}) (async) setrlimit(0x8, &(0x7f0000000080)={0xe, 0x51}) r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$DIOCGETSTATE(r0, 0xc1084413, &(0x7f0000000040)={{0x2, './bus/file0\x00', [{[@v4=@rand_addr=0x9, @v4=@local={0xac, 0x14, 0x0}], [0x7f, 0x8], 0x0, 0x18}, {[@v4=@loopback, @v6=@loopback], [0x46], 0x3, 0x2}], {{0x246, 0x4a, 0x2, 0x7ff}, 0xe, 0xb, 0x8000bc, 0xbe46, 0xa1, 0x17, 0x16}, {{0x0, 0x7, 0x1, 0x5}, 0x18001, 0x7, 0x4cdf, 0x6, 0x800, 0xf0}, @v6=@local={0xfe, 0x80, '\x00', 0x0}, 0x4, 0xba, 0x4, 0x85d3, 0x7, [[0xfffffff7, 0x7fffffff], [0x5, 0x34c]], [[0xfc000002, 0x400], [0xa2cb5812, 0x1ff]], 0x8000009, [0xb, 0x79], 0x1, 0x18, 0x52, 0x3, 0x2, 0xff, 0xb, 0x83, 0x3, 0x8, 0x21, 0xce53, "b31c"}}) ioctl$TIOCSETA(r0, 0xc1084425, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x3, "210d0000000200000006000000000200007fffff", 0x7effdffe}) pipe(0x0) r1 = socket$inet(0x2, 0x5, 0xff) socket$inet(0x2, 0x3, 0x2) (async) r2 = socket$inet(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="28000000ffff000001"], 0x28}, 0x0) (async) sendmsg$unix(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="28000000ffff000001"], 0x28}, 0x0) recvmmsg(r3, &(0x7f0000000600)={{}, 0x800}, 0x10, 0x840, 0x0) (async) recvmmsg(r3, &(0x7f0000000600)={{}, 0x800}, 0x10, 0x840, 0x0) recvmsg(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/239, 0xef}], 0x1, 0x0}, 0x40) dup2(r3, r4) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x10, 0x2, 0x0, 0x7fffffff}, 0x10) setsockopt(r1, 0x7, 0x1f, &(0x7f0000000340)="15337ac0", 0x4) r5 = socket$inet(0x2, 0x3, 0x40) getrlimit(0x3, &(0x7f0000000000)) r6 = geteuid() lstat(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f0000000140)={0x0, r6, r7}, 0xc) (async) setsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f0000000140)={0x0, r6, r7}, 0xc) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) sendto$inet(r5, 0x0, 0x0, 0xa, &(0x7f00000002c0)={0x10, 0x2, 0x2, 0xffffffff}, 0x10) (async) sendto$inet(r5, 0x0, 0x0, 0xa, &(0x7f00000002c0)={0x10, 0x2, 0x2, 0xffffffff}, 0x10) 9.844248ms ago: executing program 4 (id=317): sysctl$hw(&(0x7f0000000280)={0x6, 0xd}, 0x2, &(0x7f00000002c0), 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x20000, 0xa8) preadv(r0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/104}, {&(0x7f0000000140)=""/192, 0x100000}, {&(0x7f0000000340)=""/175}, {&(0x7f0000000000)=""/18}], 0x10000000000002b8, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f00000003c0)={0xb01, 0x0, 0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x81}) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$TIOCSETA(r1, 0x80d04466, &(0x7f0000000280)={0x6, 0xa525, 0x10, 0x127492, "0849a2ba6300000058302a2f0e83050095ea0868", 0x20004118, 0x6}) r2 = socket(0x20, 0x2, 0x33) socket(0x18, 0x1003, 0x0) sysctl$net_inet_ah(&(0x7f0000000000)={0x4, 0x2, 0x33, 0x2}, 0x4, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$kern(&(0x7f0000000000)={0xa}, 0x7, &(0x7f0000000080), 0x0, 0x0, 0x24) accept$unix(r2, 0x0, 0x0) r3 = getpid() ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x510, r3) kill(0x0, 0x1b) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x8000000000000062}) r4 = syz_open_pts() munmap(&(0x7f0000003000/0x3000)=nil, 0x3000) close(r4) getresuid(0x0, 0x0, &(0x7f0000000280)) mknod(&(0x7f0000000000)='./bus\x00', 0x2000, 0x201) open(&(0x7f0000000080)='./file1\x00', 0x0, 0xcf) r5 = syz_open_pts() mknod(&(0x7f0000000000)='./file0\x00', 0xc000, 0x400007fe) r6 = open(&(0x7f0000000000)='./file0\x00', 0x100, 0xc2) ioctl$TIOCSCTTY(r6, 0x40047463) setrlimit(0x7, &(0x7f0000000000)={0x5667, 0x7}) writev(r5, &(0x7f0000000700), 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x1010, r4, 0x8) 8.971791ms ago: executing program 1 (id=318): r0 = semget$private(0x0, 0xb, 0x19f) syz_emit_ethernet(0x4a, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6603816a00140630fe90a00ce3b527dc610d33066684a88000000000000000000000000000aa"]) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) sysctl$kern(&(0x7f0000000280)={0x1, 0x57}, 0x2, &(0x7f00000002c0)="661e0b408b48cb43d6049171fe156a97647d473c9711e8c077d19df343ad6d575c21d274412e9d08ac1a09", &(0x7f0000000300)=0x2b, &(0x7f0000000340)="cb7f73518df31c556fa176170a0df1bc5c1dfa73dfabd404f9226afdff82e7e29bbf3a7c63357bbdf69a5282e38fcbf436ea6a509ce16034db1b80b93c8ad816158bcaf6f07063caa4f6024496dacdb20714b23cf4c56a7d4457d9c8945c86346c112a2671f1f924d2166b95ab7ce190d399b65ae8492268daab06b2535568cf868bfc17f8674126f17c6594f95771b309d7519c21961ea819068d009e344adf558b4307179de235efd7b765", 0xac) semctl$GETALL(r0, 0x0, 0x6, &(0x7f0000000080)=""/193) semctl$GETZCNT(r0, 0x3, 0x7, &(0x7f0000000000)=""/72) r2 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r3 = open(&(0x7f0000000600)='./file0\x00', 0x0, 0x62) ioctl$FIONBIO(r3, 0x82907003, &(0x7f0000000140)=0x3) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000600)) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(0xffffffffffffffff, 0xc00864c0, &(0x7f0000000640)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(0xffffffffffffff9c, 0xc00864c0, &(0x7f0000000680)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f00000006c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(0xffffffffffffffff, 0xc01864c2, &(0x7f0000000700)={0x0, 0x3, 0xffffffffffffffff, 0x0, 0x96}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(0xffffffffffffff9c, 0xc00864c0, &(0x7f0000000740)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(0xffffffffffffffff, 0xc01864c2, &(0x7f0000000780)={0x0, 0x3, r1, 0x0, 0x10}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(0xffffffffffffff9c, 0xc01864c2, &(0x7f00000007c0)={0x0, 0x1, r1, 0x0, 0x6}) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x3fb}) r10 = syz_open_pts() close(r10) syz_open_pts() ioctl$TIOCSETD(r10, 0x8004741b, &(0x7f00000001c0)=0x33e) writev(r10, &(0x7f0000001b80)=[{&(0x7f00000009c0)="5189eb76c555fe5cf252676125529882d3134cb3f4ba75b72e0a20bf8259d90f24930276248b25bd2d2d722a7a972f3c575fc5ac52969d4a37545c25d6b89e887fbeaf5f8aedbb0f17510a", 0x4b}], 0x1) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r3, 0xc01064c5, &(0x7f0000000840)={&(0x7f0000000800)=[r5, r4, r5, r4, r6, r7, r8, 0x0, r9], 0x9}) ioctl$SPKRTONE(r2, 0x80085301, &(0x7f0000000100)={0x1}) sysctl$kern(&(0x7f0000000440)={0x1, 0x27}, 0x2, &(0x7f0000000480)=' Ic', &(0x7f00000004c0)=0x3, &(0x7f0000000500)="73d6424f494222af1db2a0ed8f54568438736b6eba2e403efa358ee1598f8e1968fc1123c42c53de41fea6c9124dda0730cfc01325be5dfd2b60ded6528b40bbd6580f97ee58f8cee3f755bf0f3b324edb43540efef617c7e6dbb0427314b9b8e3d70d8918fc1db52e319c4a03aef920c9b7ea9308259f6993d3d6279cbaf5fef8c0e5846e6eb114fc69da3dcc6e3f9aa220cf293117406f6a75ff8328df68e9bd348bb28814ae41d292a7a0648b855ae0fc7dadf12b9e5a5b37f0623ffcd6876e9e5cdd3f24d472eea643b12a7fd068f5cb4244f933d7a1", 0xd8) ioctl$BIOCSETWF(r3, 0x80104277, &(0x7f0000000880)={0x3b, &(0x7f0000000880)}) syz_open_pts() open$dir(&(0x7f0000000180)='./file0\x00', 0xf02, 0x186) 8.711567ms ago: executing program 2 (id=319): r0 = socket(0x18, 0x3, 0x3a) setsockopt$sock_int(r0, 0xffff, 0x800, &(0x7f0000000000)=0xe, 0x4) getsockopt(r0, 0x29, 0x65, 0x0, 0x0) 8.230641ms ago: executing program 3 (id=320): r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000002f40), 0x40000, 0x0) ioctl$DIOCGETSYNFLWATS(r0, 0xc0084463, &(0x7f0000000000)) (async) ioctl$DIOCNATLOOK(r0, 0xc0504417, &(0x7f0000002f80)={@v6=@ipv4={'\x00', '\xff\xff', @remote={0xac, 0x14, 0x0}}, @v6=@remote={0xfe, 0x80, '\x00', 0x0}, @v6=@mcast1, @v4=@remote={0xac, 0x14, 0x0}, 0x1, 0x0, 0x800, 0x0, 0x924, 0xe, 0x18, 0x11, 0x2}) 7.654727ms ago: executing program 4 (id=321): r0 = socket$inet(0x18, 0x3, 0x102) sendmsg(r0, &(0x7f0000000240)={&(0x7f0000000280)=@in6={0x1c, 0x18, 0x0, 0x7, "00000000000000000000000000000001", 0x101}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000000)="630c00000000069afe51f6f2efa24a85abdd612dd68e59adfebb93232d44372e9bc47e84f7c477d24d9c793809f5480a0000000096a431194f219f222a2ab289790125ec4816cff55c4d8d45012f74781fc432ad9d0f334946839cfc5e808692961f794bd93960e7faabd15fd5405acb1664bded08c01a", 0x77}, {&(0x7f0000000080)="23071d80519db38c22e1efd63b86057883d4153c83722160ea6faf499957d7eb920a2d02d947fa1b4a8e7b91065ac33727143ff3944ba9fb47648a1216b7124e6893a828fd786ab18372aba6", 0x4c}, {&(0x7f0000000180)="e7846b9242c39c8dd1db706ec981f0eeed8c2d33bf4f", 0x16}], 0x3, 0x0}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2000, 0x3d1e) ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x0, [{0x0, 0xfffffffd}, {0x1}, {0x2, 0x1}, {0x3}, {}, {0x1, 0x4000}, {0x2}, {0x1, 0x20000000}, {0x1, 0x1}, {0x1}, {0x1, 0xfffffffd}, {}, {0x3, 0x2}, {0x0, 0x3b6}, {0x3, 0x400000}, {0x0, 0x1003ff}, {0x2, 0xba}, {0x3, 0x802}, {0x1, 0x8}, {0x2, 0x7ff}, {0x1, 0x100}, {0x1, 0x7}, {0x3}, {0x3, 0x400}, {}, {0x2, 0x7}, {0x0, 0xfffffffd}, {0x0, 0x4010}, {0x2, 0x7}, {0x2, 0x14a}, {0x1, 0x20000a}, {0x1, 0xfdfffffa}]}) setsockopt$sock_int(r0, 0xffff, 0x4, &(0x7f0000000200)=0x9, 0x4) r1 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$DIOCCHANGERULE(r1, 0xcd60441a, &(0x7f00000001c0)={0x3, 0xffff4b52, 0x1000, './file0\x00', './file0\x00', 0x0, "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"}) sysctl$net_inet_tcp(0x0, 0x0, &(0x7f00000000c0)="9b18", 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sysctl$net_inet_tcp(&(0x7f0000000f40)={0x4, 0x2, 0x6, 0x17}, 0x4, &(0x7f0000000f80)="2ec25737939b284ddc69564d76579a4209121d1ed30f23cfd324528abe42130803fded6e45192617eb99283b7b9b9155be70", &(0x7f0000000fc0)=0x32, &(0x7f0000001000)="f5fb5e8e9f8717d07f7fdc3040817aa24e45333ecb42f77a29290882eb6ed29bb6316a1eb3c17f826c458576b85e9c774db4beccc797", 0x36) r2 = socket(0x18, 0x1, 0x0) connect$unix(r2, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) socketpair(0x18, 0x3, 0x2, 0x0) sysctl$net_inet_udp(&(0x7f00000004c0)={0x4, 0x2, 0x11, 0x6}, 0x4, 0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) 7.140659ms ago: executing program 5 (id=322): sendsyslog(&(0x7f0000000200)="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", 0xffffff08, 0x2) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x65, 0x36, 0x7, 0x7}, {0x40, 0xf0, 0xff, 0x20}, {0x6, 0x7f, 0xb6, 0xfffff802}]}) pipe2(&(0x7f0000000000), 0x0) (async) pipe2(&(0x7f0000000000), 0x0) r1 = semget$private(0x0, 0x3, 0x150) semctl$SETALL(r1, 0x0, 0x9, 0xffffffffffffffff) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) (async) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) (async) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x3e, &(0x7f00000001c0)=ANY=[]) mknod(&(0x7f00000000c0)='./file0\x00', 0x2000, 0x0) open(&(0x7f00000002c0)='./file0\x00', 0x100, 0x88) (async) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x100, 0x88) ioctl$TIOCMSET(r2, 0x8004746d, &(0x7f0000000000)) socket$inet(0x2, 0x3, 0x2) (async) r3 = socket$inet(0x2, 0x3, 0x2) getsockopt(r3, 0x0, 0x64, 0x0, 0x0) mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4) ioctl$AUDIO_MIXER_WRITE(r2, 0xc0144d01, &(0x7f0000000080)=@value_ctrl={0x4, 0x3, 0x4, "13fbda44cdcf6b74"}) 6.722089ms ago: executing program 6 (id=323): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000000)={0x3, &(0x7f0000000100)=[{0x4, 0xfb, 0xfd, 0x3}, {0x4, 0x9, 0x4, 0x6}, {0x9b9e, 0x2, 0xf4, 0x6}]}) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x65}) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, 0x0) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) setuid(0xee01) r2 = getppid() kill(r2, 0x0) r3 = socket(0x11, 0x3, 0xc) sendto$unix(r3, 0x0, 0x0, 0x2, 0x0, 0x0) ioctl$DIOCNATLOOK(r1, 0xc0504417, &(0x7f0000000140)={@v6=@rand_addr="997a520d3f6324d24f620ac84e4d9c94", @v6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x100d}, @v6=@empty, @v6=@ipv4={'\x00', '\xff\xff', @remote={0xac, 0x14, 0x0}}, 0x2, 0x805, 0xfff, 0xb, 0x1000, 0x407, 0x18, 0x6, 0x3}) r4 = syz_open_pts() close(r4) syz_open_pts() setrlimit(0x2, &(0x7f0000000140)={0x60000000, 0x8000000000000001}) ioctl$TIOCSETA(r4, 0x802c7414, &(0x7f00000001c0)={0x2f9, 0x9, 0x7, 0xffffff8e, "25589519000403007fd8f90d6400ffffbfff6aa0", 0x3, 0x4}) fchdir(r0) writev(r4, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) syz_emit_ethernet(0x1000e, &(0x7f00000015c0)=ANY=[]) 3.738871ms ago: executing program 2 (id=324): mknod(&(0x7f0000000180)='./bus\x00', 0x2000, 0xd01) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc5005601, &(0x7f0000000000)={0x10, 0x0, [{&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000663000/0x4000)=nil, 0xfffffffffffff801}, {&(0x7f00006ac000/0x4000)=nil, 0x0, 0x3}, {&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil}, {0x0, &(0x7f0000b1b000/0x2000)=nil}, {&(0x7f000067c000/0x10000)=nil, &(0x7f0000ffb000/0x1000)=nil}, {&(0x7f0000088000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil}, {0x0, 0x0, 0x7fff}, {&(0x7f0000727000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil}, {&(0x7f0000593000/0x2000)=nil, &(0x7f0000826000/0x1000)=nil}, {&(0x7f0000110000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil}, {0x0, &(0x7f000065d000/0x2000)=nil, 0xdc9}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0xfffffffffffffffc}, {0x0, &(0x7f0000ffd000/0x3000)=nil}, {&(0x7f00004c1000/0x2000)=nil}, {&(0x7f00001cf000/0x4000)=nil}, {&(0x7f0000355000/0x13000)=nil, &(0x7f0000358000/0x2000)=nil, 0x1}], './file0\x00', 0x7, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1135, 0x0, 0x0, 0x80c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc87, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x15, 0x0, 0x0, 0x15340, 0x0, 0x0, 0x80, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0xd824, 0x0, 0x0, 0x800000, 0x0, 0xfffffffc, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0xfe7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000b40)={0x3, 0xffff8001, 0xffffffffffffff9c}) bind$unix(r0, &(0x7f0000000b80)=@abs={0x9, 0x1, 0x0, 0x3}, 0x8) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) r1 = open(&(0x7f0000000240)='./bus\x00', 0x2, 0x111) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r1, 0x84946467, &(0x7f0000000000)={0x0, 0xffffffffffffffba, 0x0}) (async) ioctl$VNDIOCSET(r1, 0x84946467, &(0x7f0000000000)={0x0, 0xffffffffffffffba, 0x0}) rename(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000008c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0x1c, 0x18, 0x1, 0x5, "ff0100e88400000002ec00020100"}, 0x1c) sysctl$net_inet_tcp(&(0x7f00000000c0)={0x4, 0x2, 0x6, 0x9}, 0x4, &(0x7f0000000000)="9b1809fffffffffffeff7f473f11e1a4e5f2f9f220ef7f0abdbc34fe42021588dc8ff44f4b76c76d41859d85ea800dabe467badf35b6fd74c94d1b44", &(0x7f0000000040)=0x10011, 0x0, 0x0) socket$inet(0x2, 0x1, 0x0) (async) r2 = socket$inet(0x2, 0x1, 0x0) getpeername$unix(r1, &(0x7f0000000cc0)=@file={0x0, 0x0, ""/17}, &(0x7f0000000d00)=0x13) (async) getpeername$unix(r1, &(0x7f0000000cc0)=@file={0x0, 0x0, ""/17}, &(0x7f0000000d00)=0x13) sendmsg(r2, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="10040000ffff000008000000"], 0x10}, 0x401) chown(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) setrlimit(0x8, &(0x7f0000000980)={0xb, 0x53}) (async) setrlimit(0x8, &(0x7f0000000980)={0xb, 0x53}) syz_open_pts() (async) r3 = syz_open_pts() close(r3) (async) close(r3) r4 = syz_open_pts() ioctl$TIOCSETA(r4, 0x802c7414, &(0x7f0000000100)={0xc, 0x1, 0x10001, 0x9, "4e4896da13877ed7bdeed8221d4c9ca1cff51820", 0x9, 0x1}) chmod(&(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x188) (async) chmod(&(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x188) syz_open_pts() ioctl$TIOCSETA(r3, 0x802c7414, &(0x7f0000000040)={0x1000f66d, 0xd, 0x1, 0x5fffff5f, "9cdc452e307e88d5c5fafc32ac082f9e68cd3304", 0xe1, 0x9}) (async) ioctl$TIOCSETA(r3, 0x802c7414, &(0x7f0000000040)={0x1000f66d, 0xd, 0x1, 0x5fffff5f, "9cdc452e307e88d5c5fafc32ac082f9e68cd3304", 0xe1, 0x9}) writev(r3, &(0x7f0000002a00)=[{&(0x7f0000002a40)="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", 0x6fc}], 0x1) (async) writev(r3, &(0x7f0000002a00)=[{&(0x7f0000002a40)="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", 0x6fc}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r5 = socket(0x18, 0x1, 0x0) setsockopt(r5, 0x1000000029, 0x2e, &(0x7f0000000040)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) setsockopt(r5, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbdf13b9fd812eaa4e713048e69931929648", 0x14) 2.693225ms ago: executing program 3 (id=325): r0 = shmget$private(0x0, 0x2000, 0x88, &(0x7f0000001000/0x2000)=nil) shmat(r0, &(0x7f0000001000/0x3000)=nil, 0x0) shmctl$SHM_LOCK(r0, 0x3) sysctl$net_pipex(&(0x7f0000000180)={0x6, 0x1b, 0x2}, 0x3, &(0x7f0000000580), 0x0, 0x0, 0x0) 2.264182ms ago: executing program 7 (id=326): r0 = socket(0x18, 0x5, 0xfd) (async) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) (async) r1 = syz_open_pts() (async) syz_open_pts() syz_open_pts() lseek(r1, 0xac63, 0x2) (async) r2 = openat$pf(0xffffffffffffff9c, &(0x7f00000000c0), 0x82, 0x0) ioctl$DIOCCLRSTATES(r2, 0x0, &(0x7f0000000200)={{0x6, 0xffffc0a1, 0x1}, 0x2, '\x00', 0x7, {@any={'\x00', 0x0, 0x7, 0xe}, [0x3, 0xc2], 0xfe, 0x8, 0x8}, {@addrmask={@v6=@mcast2, @v4=@multicast2, 0x0, 0x0, 0x10}, [0xe, 0x2], 0x18, 0x1, 0x1}, './file0/file0/..', './file0/file0/..\x00', 0x5, 0xa984}) ioctl$DIOCIGETIFACES(r2, 0xc0284457, &(0x7f0000000180)={'./file0/file0/..', 0x0, 0x102, 0x21, 0x36d, 0x40009}) (async) ioctl$FIONREAD(r0, 0x80206919, &(0x7f00000001c0)) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$BIOCGETIF(r3, 0x4020426b, &(0x7f00000003c0)={""/16, @ifru_data=&(0x7f0000000300)="12394257093dc3ccbc2e4a8cda718c9b5164d4017e11fa7d6b8665d684a28a545ba0d02c3b66137d8ffee8e0c788d726e084dc0361f254f61b468d79b551e53337dcc878323d9fa844832df4b8d0211265306afc3a3b978d0e71348ee4ce372b2a8e575e4ead969e5dd8a618633aad6dd6369bb5823b6d2e64b14c570f00e4e883dc964a694922e5d6a5f75362d3ee1afc151a6a8ad672aaac"}) 0s ago: executing program 7 (id=327): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x200, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r1 = syz_open_pts() flock(r1, 0x1) fcntl$lock(r1, 0x9, &(0x7f00000001c0)={0x3, 0x0, 0x1000000, 0x300000003}) closefrom(r1) unveil(0x0, &(0x7f0000000000)='x\x00') mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) sysctl$kern(&(0x7f0000000040)={0x1, 0x2a}, 0x2, 0x0, 0x0, 0x0, 0x0) r2 = socket(0x11, 0x3, 0x8) sendto$unix(r2, &(0x7f0000000280)="b1000501600000001700000007000000085c13fecea10500fef96ecfc72fd3357ae320b37b673039d2d236a3f20b7804be38385291f7c8cf5f882b297be1aa5b236deb51e2f0ac3ebbc2576b9a5f139b672f4d335d223e7d026ba8af630037282118000000720fd38bfbb770c1f5a872c881ea6e69e0bb76d907c400000200361b1257aea8c500002002fb00000000008abfba09000000ec1d89e000040781e40500000000000000000900000000000000", 0xb1, 0x40a, 0x0, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x80, 0x186) select(0x40, &(0x7f0000000100), &(0x7f00000024c0)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0) sysctl$kern(&(0x7f00000017c0)={0x1, 0x3a}, 0x2, &(0x7f00000016c0)="9870eb9f", &(0x7f0000001700)=0x4, &(0x7f0000001740), 0x0) rename(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000003c0)='./file0/file0/../../file0\x00') r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) r4 = dup2(r0, r2) r5 = dup3(r4, r4, 0x1000e) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(r5, 0xc01864c2, &(0x7f0000000080)={0x0, 0x0, r0, 0x0, 0xffffffffffffffff}) ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ktrace(&(0x7f0000000140)='./file1\x00', 0x4, 0x12, 0x0) r6 = socket$inet(0x2, 0x3, 0x0) ioctl$FIONREAD(r6, 0x80206979, &(0x7f0000000100)) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.151' (ED25519) to the list of known hosts. pppx: unable to set addresses for pppx1, error=17 pckbd_enable: command error OpenBSD/amd64 (ci-openbsd-main-4.us-central1-a.c.syzkaller.internal) (tty00) login: pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error uvm_fault(0xffffffff83a877c8, 0xffff800026c82004, 0, 1) -> d kernel: page fault trap, code=0 Stopped at ufs_lookup+0x613: movzwl 0x4(%r15,%r14,1),%ebx TID PID UID PRFLAGS PFLAGS CPU COMMAND *142260 31162 0 0 0x4000000 0 syz-executor ufs_lookup() at ufs_lookup+0x613 VOP_LOOKUP(fffff8006ab812a8,ffff80002a783708,ffff80002a783738) at VOP_LOOKUP+0x6e vfs_lookup(ffff80002a7836d8) at vfs_lookup+0x94a namei(ffff80002a7836d8) at namei+0x7c3 domknodat(ffff80002f0b07e0,ffffff9c,2000000000c0,2000,0) at domknodat+0xb4 syscall(ffff80002a7838c0) at syscall+0x962 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x38c25a49200, count: 8 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb> ddb> set $lines = 0 ddb> set $maxwidth = 0 ddb> show panic *cpu0: uvm_fault(0xffffffff83a877c8, 0xffff800026c82004, 0, 1) -> d ddb> trace ufs_lookup() at ufs_lookup+0x613 VOP_LOOKUP(fffff8006ab812a8,ffff80002a783708,ffff80002a783738) at VOP_LOOKUP+0x6e vfs_lookup(ffff80002a7836d8) at vfs_lookup+0x94a namei(ffff80002a7836d8) at namei+0x7c3 domknodat(ffff80002f0b07e0,ffffff9c,2000000000c0,2000,0) at domknodat+0xb4 syscall(ffff80002a7838c0) at syscall+0x962 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x38c25a49200, count: -7 ddb> show registers rdi 0 rsi 0 rbp 0xffff80002a783470 rbx 0 rdx 0 rcx 0xffffffff rax 0xffff80002f0b07e0 r8 0xffffffffffffffff r9 0xfffff80007ffd5b0 r10 0x1d9c8864224adbf2 r11 0x95f217e3550c3060 r12 0xfffff8006ab9fee8 r13 0 r14 0 r15 0xffff800026c82000 rip 0xffffffff826393f3 ufs_lookup+0x613 cs 0x8 rflags 0x10246 __ALIGN_SIZE+0xf246 rsp 0xffff80002a783380 ss 0x10 ufs_lookup+0x613: movzwl 0x4(%r15,%r14,1),%ebx ddb> show proc PROC (syz-executor) tid=142260 pid=31162 tcnt=2 stat=onproc flags process=0 proc=4000000 runpri=32, usrpri=50, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff80002f0b14d8,0xffff800035cce2d0 process=0xffff8000380db620 user=0xffff80002a77e000, vmspace=0xfffff8006cfd7b98 estcpu=36, cpticks=0, pctcpu=0.0, user=0, sys=0, intr=0 ddb> ps PID TID PPID UID S FLAGS WAIT COMMAND 21978 464111 99099 0 2 0 syz-executor 21978 338226 99099 0 3 0x4000080 fsleep syz-executor 21978 327103 99099 0 3 0x4000080 fsleep syz-executor 44444 334055 30551 0 2 0 syz-executor 44444 228091 30551 0 2 0x4000000 syz-executor 31162 11421 3925 0 2 0 syz-executor *31162 142260 3925 0 7 0x4000000 syz-executor 37157 148681 9532 0 2 0 syz-executor 37157 247097 9532 0 3 0x4000080 fsleep syz-executor 47872 193981 11621 0 3 0x80 nanoslp syz-executor 47872 450730 11621 0 3 0x4000080 fifor syz-executor 47872 138362 11621 0 3 0x4000080 fsleep syz-executor 47872 434271 11621 0 3 0x4000080 fsleep syz-executor 63850 34090 0 0 3 0x14280 nfsidl nfsio 13927 131651 0 0 3 0x14280 nfsidl nfsio 58846 459536 0 0 3 0x14280 nfsidl nfsio 8112 382414 0 0 3 0x14280 nfsidl nfsio 12450 522538 0 0 3 0x14280 nfsidl nfsio 74325 475110 0 0 3 0x14280 nfsidl nfsio 18489 360724 0 0 3 0x14280 nfsidl nfsio 39719 36563 0 0 3 0x14280 nfsidl nfsio 15123 370515 0 0 3 0x14280 nfsidl nfsio 68419 286296 0 0 3 0x14280 nfsidl nfsio 38942 121070 0 0 3 0x14280 nfsidl nfsio 91051 88847 0 0 3 0x14280 nfsidl nfsio 26386 113633 0 0 3 0x14280 nfsidl nfsio 18948 28709 0 0 3 0x14280 nfsidl nfsio 86388 32206 0 0 3 0x14280 nfsidl nfsio 7988 130193 0 0 3 0x14280 nfsidl nfsio 56960 161522 0 0 3 0x14280 nfsidl nfsio 87196 478622 0 0 3 0x14280 nfsidl nfsio 77217 408928 0 0 3 0x14280 nfsidl nfsio 33820 14324 0 0 3 0x14280 nfsidl nfsio 85663 57736 1 0 3 0x100083 ttyin getty 30551 150867 58554 0 2 0xc82 syz-executor 3925 62310 58554 0 2 0xc82 syz-executor 99099 491389 58554 0 2 0xc82 syz-executor 9532 373546 58554 0 2 0xc82 syz-executor 11621 103144 58554 0 3 0x82 nanoslp syz-executor 58554 380615 1 0 3 0x82 wait syz-executor 42566 12514 27495 0 3 0x98 kqread sshd-session 27495 125012 1 0 3 0x92 kqread sshd-session 75200 493433 1 73 3 0x1100090 kqread syslogd 96556 515747 0 0 3 0x14200 bored smr 65400 68967 0 0 2 0x14200 zerothread 20042 387199 0 0 3 0x14200 aiodoned aiodoned 16985 260853 0 0 3 0x14200 syncer update 4414 296293 0 0 3 0x14200 cleaner cleaner 57983 502805 0 0 3 0x14200 reaper reaper 88704 266762 0 0 3 0x14200 pgdaemon pagedaemon 14756 273121 0 0 3 0x14200 bored viomb 83174 308775 0 0 3 0x40014200 acpi0 acpi0 78466 51214 0 0 3 0x14200 bored softnet0 73663 178330 0 0 3 0x14200 bored systqmp 89624 363094 0 0 3 0x14200 bored systq 12385 144650 0 0 3 0x40014200 tmoslp softclock 61641 20761 0 0 3 0x40014200 idle0 1 275537 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb> show all locks No such command ddb> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 11064 12233K 12461K 166960K 12517 0 pcb 83 16K 16K 166960K 193 0 rtable 235 10K 11K 166960K 509 0 pf 32 13K 21K 166960K 81 0 ifaddr 40 7K 8K 166960K 64 0 ifgroup 48 2K 2K 166960K 81 0 sysctl 1 1K 9K 166960K 9 0 counters 34 17K 18K 166960K 56 0 ioctlops 0 0K 4K 166960K 125 0 iov 0 0K 12K 166960K 15 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1299 82K 82K 166960K 1704 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 9K 166960K 13 0 VM map 2 1K 1K 166960K 2 0 sem 12 0K 0K 166960K 62 0 dirhash 12 2K 2K 166960K 15 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 15 53K 93K 166960K 456 0 sigio 0 0K 0K 166960K 1 0 proc 20 25K 83K 166960K 536 0 subproc 72 4K 4K 166960K 72 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 38 0 in_multi 91 6K 7K 166960K 114 0 ether_multi 1 0K 0K 166960K 1 0 mrt 0 0K 0K 166960K 15 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 241 1076K 1076K 166960K 241 0 exec 0 0K 1K 166960K 411 0 fusefs mount 1 32K 32K 166960K 1 0 pfkey data 0 0K 0K 166960K 1 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 143 91K 160K 166960K 5737 0 UVM aobj 14 2K 2K 166960K 17 0 pinsyscall 23 46K 94K 166960K 1573 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 0K 166960K 8 0 NDP 11 0K 2K 166960K 40 0 temp 44 9112K 9170K 166960K 18661 0 kqueue 6 10K 24K 166960K 98 0 SYN cache 2 16K 16K 166960K 2 0 ddb> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle rtpcb 120 125 0 60 3 0 3 3 0 8 1 rtentry 136 131 0 36 4 0 4 4 0 8 0 unpcb 144 321 0 312 6 0 6 6 0 8 5 syncache 336 7 0 7 1 0 1 1 0 8 1 tcpcb 736 111 0 109 4 0 4 4 0 8 3 arp 96 19 0 3 1 0 1 1 0 8 0 ipq 40 4 0 0 1 0 1 1 0 8 0 ipqe 40 6 0 2 1 0 1 1 0 8 0 inpcb 328 420 0 352 7 0 7 7 0 8 1 ip6q 72 2 0 1 1 0 1 1 0 8 0 ip6af 40 4 0 2 1 0 1 1 0 8 0 nd6 112 30 0 6 1 0 1 1 0 8 0 pkpcb 40 8 0 8 1 0 1 1 0 8 1 kcovpl 48 8 0 0 1 0 1 1 0 8 0 mppekey 1024 1 0 1 1 0 1 1 0 8 1 ppxss 1072 21 0 19 1 0 1 1 0 8 0 pppxif 1416 2 0 2 1 0 1 1 0 8 1 pfsrclim 320 1 0 1 1 0 1 1 0 8 1 pfanchor 1288 2 0 0 1 0 1 1 0 8 0 pftag 88 2 0 0 1 0 1 1 0 8 0 pfqueue 320 1 0 0 1 0 1 1 0 8 0 pfrule 1360 3 0 3 1 0 1 1 0 8 1 rttmr 136 1 0 1 1 0 1 1 0 8 1 art_heap8 4096 2 0 0 2 0 2 2 0 8 0 art_heap4 256 597 0 174 31 0 31 31 0 8 2 art_table 40 599 0 174 5 0 5 5 0 8 0 art_node 32 131 0 46 1 0 1 1 0 8 0 sysvmsgpl 40 4 0 2 1 0 1 1 0 8 0 semupl 112 1 0 1 1 0 1 1 0 8 1 semapl 72 58 0 48 1 0 1 1 0 8 0 shmpl 112 14 0 3 1 0 1 1 0 8 0 dirhash 1024 19 0 2 3 0 3 3 0 8 0 dino2pl 256 2196 0 734 93 0 93 93 0 8 0 ffsino 256 2198 0 736 93 0 93 93 0 8 0 nchpl 144 2859 0 1166 64 0 64 64 0 8 0 rtmask 32 6 0 6 1 0 1 1 0 8 1 vnodes 216 2440 0 0 136 0 136 136 0 8 0 namei 1024 9079 0 9078 2 0 2 2 0 8 1 kstatmem 264 49 0 26 2 0 2 2 0 8 0 scsiplug 72 1 0 1 1 0 1 1 0 8 1 scxspl 216 10908 0 10908 8 0 8 8 1 8 8 plimitpl 152 171 0 157 1 0 1 1 0 8 0 sigapl 424 776 0 723 7 0 7 7 0 8 0 knotepl 120 15216 0 14980 17 7 10 17 0 8 2 kqueuepl 184 132 0 126 1 0 1 1 0 8 0 pipepl 304 140 0 111 3 0 3 3 0 8 0 fdescpl 448 743 0 723 5 0 5 5 0 8 1 filepl 120 3976 0 3661 11 0 11 11 0 8 1 lockfpl 104 151 0 151 1 0 1 1 0 8 1 lockfspl 48 67 0 67 1 0 1 1 0 8 1 sessionpl 144 44 0 39 1 0 1 1 0 8 0 pgrppl 48 53 0 40 1 0 1 1 0 8 0 ucredpl 104 795 0 788 1 0 1 1 0 8 0 zombiepl 144 726 0 723 1 0 1 1 0 8 0 processpl 1152 776 0 723 5 0 5 5 0 8 0 procpl 664 1253 0 1192 6 0 6 6 0 8 0 sosppl 176 1 0 1 1 0 1 1 0 8 1 sockpl 552 889 0 747 15 3 12 12 0 8 1 mcl64k 65536 27 0 25 1 0 1 1 0 8 0 mcl16k 16384 3 0 3 1 0 1 1 0 8 1 mcl9k128 9344 3 0 2 1 0 1 1 0 8 0 mcl8k 8192 11 0 11 1 0 1 1 0 8 1 mcl4k 4096 2988 0 2937 14 0 14 14 0 8 6 mcl2k2 2112 1 0 1 1 0 1 1 0 8 1 mcl2k 2048 370 0 367 3 0 3 3 0 8 2 mtagpl 96 10 0 6 1 0 1 1 0 8 0 mbufpl 256 7812 0 7234 41 0 41 41 0 8 0 bufpl 272 6640 0 424 415 0 415 415 0 8 0 anonpl 24 135423 0 133299 52 0 52 52 0 186 22 amapchunkpl 152 18624 0 18279 25 0 25 25 0 158 10 amappl16 200 2339 0 2320 15 3 12 15 0 8 8 amappl15 192 7 0 7 1 0 1 1 0 8 1 amappl14 184 414 0 414 1 0 1 1 0 8 1 amappl13 176 117 0 113 1 0 1 1 0 8 0 amappl12 168 982 0 963 2 0 2 2 0 8 0 amappl11 160 9 0 9 1 0 1 1 0 8 1 amappl10 152 60 0 57 1 0 1 1 0 8 0 amappl9 144 286 0 286 1 0 1 1 0 8 1 amappl8 136 97 0 97 1 0 1 1 0 8 1 amappl7 128 189 0 183 1 0 1 1 0 8 0 amappl6 120 160 0 160 1 0 1 1 0 8 1 amappl5 112 93 0 89 1 0 1 1 0 8 0 amappl4 104 266 0 258 1 0 1 1 0 8 0 amappl3 96 3565 0 3488 3 0 3 3 0 8 0 amappl2 88 539 0 512 2 0 2 2 0 8 0 amappl1 80 11663 0 11350 13 0 13 13 0 8 1 amappl 88 4929 0 4812 4 0 4 4 0 92 0 uvmvnodes 80 105 0 0 3 0 3 3 0 8 0 dma4096 4096 1 0 1 1 0 1 1 0 8 1 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 7 0 7 1 0 1 1 0 8 1 dma128 128 253 0 253 1 0 1 1 0 8 1 dma64 64 7 0 7 1 0 1 1 0 8 1 dma32 32 7 0 7 1 0 1 1 0 8 1 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 16 0 3 1 0 1 1 0 8 0 uaddrrnd 24 743 0 723 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 743 0 723 1 0 1 1 0 8 0 vmmpekpl 168 7603 0 7567 2 0 2 2 0 8 0 vmmpepl 168 55302 0 54185 80 0 80 80 0 357 15 vmsppl 368 742 0 723 4 0 4 4 0 8 1 rwobjpl 40 18018 0 17419 11 0 11 11 0 8 1 pdppl 4096 1492 0 1446 106 54 52 80 0 8 6 pvpl 32 349289 0 343846 114 0 114 114 0 265 34 pmappl 216 742 0 723 3 0 3 3 0 8 0 extentpl 40 45 0 27 1 0 1 1 0 8 0 phpool 112 825 0 54 23 0 23 23 0 8 0 ddb> machine ddbcpu 0 No such command ddb> trace ufs_lookup() at ufs_lookup+0x613 VOP_LOOKUP(fffff8006ab812a8,ffff80002a783708,ffff80002a783738) at VOP_LOOKUP+0x6e vfs_lookup(ffff80002a7836d8) at vfs_lookup+0x94a namei(ffff80002a7836d8) at namei+0x7c3 domknodat(ffff80002f0b07e0,ffffff9c,2000000000c0,2000,0) at domknodat+0xb4 syscall(ffff80002a7838c0) at syscall+0x962 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x38c25a49200, count: -7 ddb> machine ddbcpu 1 No such command ddb> trace ufs_lookup() at ufs_lookup+0x613 VOP_LOOKUP(fffff8006ab812a8,ffff80002a783708,ffff80002a783738) at VOP_LOOKUP+0x6e vfs_lookup(ffff80002a7836d8) at vfs_lookup+0x94a namei(ffff80002a7836d8) at namei+0x7c3 domknodat(ffff80002f0b07e0,ffffff9c,2000000000c0,2000,0) at domknodat+0xb4 syscall(ffff80002a7838c0) at syscall+0x962 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x38c25a49200, count: -7