last executing test programs: 9.755374705s ago: executing program 5 (id=82): r0 = socket$inet(0x2, 0x3, 0x2) r1 = dup(r0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0x80047308, &(0x7f00000001c0)={0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000000500)={&(0x7f0000000200)=@file={0x0, 0x0, './file0\x00'}, 0xa, &(0x7f00000004c0)=[{&(0x7f00000002c0)="7c933c239db322b81b67dbffd1a568cadf5348f26e2cccbd512f36ca257c8283096085bc85be61f7fe38fb6181079d5b76b507466dd0d6dafbc33a80cc9eca789428e60ece52f9273309c1833b5faee42667adee", 0x54}, {&(0x7f0000000400)="8189387ea4f6c8fbf9801ab4309bb421e05c64ac1cfbc71ec98471a43b109af3c3e5e06a154612546d7cdc46027f5229a3270429dc34ec6744039e981f8485135575e2530df3486e4b826f718a19f224fe77de10c493da75c8119c6a59cf35c1fc74c5ce9f85d0894d6dcccd35e72e15fc8ab9ed78c3339b1679138fd49546069999d2aeb12b5bfb7e20c01add9c4e04728d", 0x92}], 0x2, 0x0, 0x0, 0x806}, 0x1) closefrom(r3) r4 = socket$inet6(0x18, 0x2, 0x0) shutdown(r4, 0x2) bind$inet6(r4, &(0x7f0000000040)={0x1c, 0x18, 0x2, 0x0, "fffe0000000000000000008000", 0xfffffff5}, 0x1c) connect$inet6(r4, &(0x7f0000000080)={0x1c, 0x18, 0x0, 0x8a, "0a5be30e01a3d3d1793c1db58465282f", 0x308}, 0x1c) setsockopt$sock_cred(r4, 0xffff, 0x1023, &(0x7f00000003c0), 0x20) ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f0000000000)={0x80000000, 0x5, 0x1, 0x494, "2feac1b1549b00", 0x0, 0x6}) sysctl$kern(&(0x7f0000000000)={0x1, 0x3d}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) sysctl$vm_swapencrypt(&(0x7f0000000000), 0x3, 0x0, 0x0, &(0x7f00000000c0)='\x00\x00\x00\x00', 0x4) r5 = getthrid() fcntl$setown(r1, 0x6, r5) sendmsg(r1, &(0x7f0000000900)={&(0x7f0000000340)=@in6={0x1c, 0x18, 0x2, 0x3, "c2c31d589df587303b968303550ac0d8"}, 0x1c, &(0x7f0000000800)=[{&(0x7f0000000540)="a292eb538da9583c1184e0a65c086509e06d8b811344ee6f4db884b05213434ecdb7f8953eee0839294f277b37c198dec1812357016dc0c701a1257b8335619750ec5708a611a6aa1446746168b28602fdcb143e1da5bde757e68100893d4068fa6b9e6a07c9d169d7db69529b554a8f180d34b5a525cfb5bd19c66e0eff690c59365d689b1ca45f339c442719ce2cea33ea629b2b9e2e9a", 0x98}, {&(0x7f0000000600)="6a1bbd3a8f914c506500f83bff464e6d212f71a87b349d3346b1bf3f", 0x1c}, {&(0x7f0000000640)="a4bddd5aacd66d98adf98bdc24abffc709f472b428d9ac4316ef0d05b1e6ff99cde161d1271324da27", 0x29}, {&(0x7f0000000680)="741109a47f685df8607fc2569ede13499007220085851298d7c893b9a69f5b574545a3bb47380846ac6eefd41e87beada291f1a1838806", 0x37}, {&(0x7f00000006c0)="15c03cb00667c182ac715637d30b2eab29cd889efd08cd5c811cbd5347f413c7158ba7a0da8576214cbd26e4dd7a339a93b26d5ea601875cb25bb4443843ad493d7d98b3099639e6ce65b5d3fab07049297da6fd19ec", 0x56}, {&(0x7f0000000740)="c54967e41cdf820dbc04fcb09fa5e96aedb57b90ee5b", 0x16}, {&(0x7f0000000780)="31258764a015046facdf1adcb30d54493175ef991a0be059d56f93bfe53fb96e803ccd45fbd99865d2f33484e68acf41907cb5fd42aeb3ef4396e2dbd18be7312b876e54eec11559963eb56f28eda74cc8e6785b737eb43481fcf75d5be0019d9e5be1b1b188a0dd39c66ff691322e7382f9d9916951", 0x76}], 0x7, &(0x7f0000000880)=[{0x80, 0x1, 0xffff, "036cc49365390733d86d0f082c5a41306d4bfdded9aeddc2f9cf935e6031a7404942095a9f42791f8941cebd3f673326cb917ad9bab3da7830a94a18e1b160b3f7d022ab24a1eeaf13d52c7e05fa08ff3d99e09301114d9e4c8eb6c9ffabf8f706869f521608e73dfe3e012213e5ec222519883e"}], 0x80}, 0x404) ioctl$LIOCSFD(r1, 0x80046c7f, &(0x7f0000000100)=r2) r6 = kqueue() kevent(r6, &(0x7f0000000140)=[{{r0}, 0xfffffffffffffffe, 0x40, 0x80, 0xb53, 0x80000000}, {{}, 0xfffffffffffffff6, 0x30, 0xfffff, 0x8, 0x8}, {{r0}, 0xfffffffffffffff7, 0x40, 0xfffff, 0x5, 0xffffffffffffffff}], 0x77c, &(0x7f0000000240)=[{{r0}, 0xfffffffffffffff9, 0x98, 0x1, 0x10, 0x53b3}], 0x8001, 0x0) connect$unix(r1, &(0x7f0000000380)=@abs={0x0, 0x1, 0x0, 0x0}, 0x8) 8.40280802s ago: executing program 7 (id=94): ioctl$DRM_IOCTL_MODE_PAGE_FLIP(0xffffffffffffffff, 0xc01864b0, &(0x7f0000000000)={0x0, 0x0, 0x7, 0x0, 0x4}) ioctl$DRM_IOCTL_MODE_RMFB(0xffffffffffffff9c, 0xc00464af, &(0x7f0000000040)=r1) r2 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) fcntl$setflags(r2, 0x2, 0x4) (async) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffff9c, 0xc05064a7, &(0x7f0000000400)={&(0x7f00000000c0)=[0x0], &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x6, 0x1, 0x0, 0x0, 0x10, 0x80, 0x4, 0x93, 0x10001}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffff9c, 0xc05064a7, &(0x7f00000006c0)={&(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[{}, {}, {}, {}], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x7, 0x5, 0x0, 0x0, 0x0, 0x2, 0x9, 0x8001, 0x3, 0x3297a37e}) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffff9c, 0xc05064a7, &(0x7f0000000940)={&(0x7f0000000740)=[0x0, 0x0], &(0x7f0000000780)=[{}, {}, {}, {}], &(0x7f00000008c0)=[0x0], &(0x7f0000000900)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x1, 0x2, 0x0, 0x0, 0xd, 0x7, 0x1, 0x7, 0x2, 0x7}) (rerun: 64) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffff9c, 0xc03064b7, &(0x7f0000000a00)={0x0, r0, 0x0, 0x0, 0x5, 0x9, 0x5, 0x1, 0xd, 0x0, 0x7, 0x2b}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffff9c, 0xc06864a1, &(0x7f0000000a40)={&(0x7f00000009c0)=[r3, r4, 0x0, r5], 0x4, r6, r1, 0x3, 0x2, 0x927, 0x4, {0x1, 0x5, 0x6, 0x9, 0xf2a8, 0x34, 0x7, 0x6, 0x6, 0x9, 0x0, 0x7, 0x180000, 0x5, "0cfada8979084104e4d3115f9e2bbc3eac0ed97bc6809545475c0f7e0c7bcde5"}}) (async) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffff9c, 0xc01864c6, &(0x7f0000000b00)={&(0x7f0000000ac0)=[0x8], 0x1, 0x10000, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000c40)={&(0x7f0000000b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000b80)=[0x0, 0x0, 0x0], &(0x7f0000000bc0)=[0x0], &(0x7f0000000c00)=[0x0], 0x8, 0x3, 0x1, 0x1, 0x5, 0x2, 0x55ef6a1a, 0x9}) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f0000000cc0)={&(0x7f0000000c80)=[0x2, 0xd, 0x1, 0xfffffff8, 0x3], 0x5, 0x4, 0x0, 0xffffffffffffffff}) (rerun: 64) ioctl$DRM_IOCTL_MODE_RMFB(r10, 0xc00464af, &(0x7f0000000d00)) r11 = openat$dri(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/dri/renderD128\x00', 0x80, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000e80)={&(0x7f0000000d80)=[0x0, 0x0, 0x0], &(0x7f0000000dc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000e00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000e40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x3, 0x6, 0x7, 0x9, 0x81, 0xb, 0x9, 0x3}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r10, 0xc04064a0, &(0x7f0000000fc0)={&(0x7f0000000ec0)=[0x0], &(0x7f0000000f00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000f40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000f80)=[0x0], 0x1, 0x7, 0x6, 0x1, 0x9, 0x7, 0x5, 0x9}) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_SETGAMMA(0xffffffffffffff9c, 0xc02064a5, &(0x7f0000001100)={r9, 0x2, &(0x7f0000001040)=[0xba6, 0xec88], &(0x7f0000001080)=[0x8], &(0x7f00000010c0)=[0x572e]}) (rerun: 64) ioctl$DRM_IOCTL_MODE_GETCRTC(r11, 0xc06864a1, &(0x7f0000001140)={&(0x7f0000001000)=[r4, r12, r13, r4, r5], 0x5, r14, r8, 0x400, 0x1, 0x4, 0x8, {0x0, 0x4, 0x2, 0x8, 0xed76, 0x7, 0x9d1f, 0x2, 0x8, 0x2, 0x9, 0x4, 0x4000, 0x40, "106d8c2aade424342b7b160e9e0214b0541908b26fb64380d81a48c71f5138b8"}}) (async) ioctl$DRM_IOCTL_MODE_GETFB2(r11, 0xc06864ce, &(0x7f00000011c0)={0x0, 0x6, 0x0, 0x38424752, 0x2, [0x0, 0x0, 0x0], [0x8, 0x7fffffff, 0x3, 0x7], [0x5, 0x9, 0x2, 0xffffffff], [0x1ff, 0xffffffffffffeeff, 0x100, 0xc]}) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_ADDFB2(r7, 0xc06864b8, &(0x7f0000001240)={0x0, 0x1, 0x6, 0x20203243, 0x0, [0x0, 0x0, 0x0, 0x0], [0xfffffffd, 0x8, 0x5ca2, 0x7], [0x6, 0x480000, 0x7, 0x7], [0x3, 0x0, 0x4, 0x7]}) (async, rerun: 64) ioctl$DRM_IOCTL_GEM_OPEN(r10, 0xc010640b, &(0x7f00000012c0)={0x0, 0x0}) (async) ioctl$DRM_IOCTL_MODE_ADDFB2(r7, 0xc06864b8, &(0x7f0000001300)={0x0, 0x4, 0xa0000, 0x38415852, 0x1, [0x0], [0x4, 0x2, 0x400, 0x4], [0x80, 0x2, 0x400, 0x2], [0x8, 0xfffffffffffffffe, 0x6, 0x100]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r11, 0xc06864b8, &(0x7f0000001380)={0x0, 0x81, 0x401, 0x30313459, 0x0, [r16, r17, r18, r19], [0x5, 0x4, 0x2], [0x5, 0x8, 0x2, 0x9], [0x769de601, 0x3, 0x4, 0x3]}) (async) r20 = syz_open_pts() ioctl$TIOCSETAW(r20, 0x802c7415, &(0x7f0000001400)={0x3, 0x8, 0x8001, 0x97, "548802d1f7735283f83866d5440b69552e31b482", 0x9, 0x3}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(r10, 0xc01864c2, &(0x7f0000001440)={0x0, 0x0, r2, 0x0, 0x3ff}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(0xffffffffffffff9c, 0xc01864c1, &(0x7f0000001480)={r21, 0x0, 0xffffffffffffffff, 0x0, 0x7}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r10, 0xc01064b5, &(0x7f0000001500)={&(0x7f00000014c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) ioctl$DRM_IOCTL_MODE_DIRTYFB(r7, 0xc01864b1, &(0x7f0000001580)={r15, 0x0, 0x100, 0x2, &(0x7f0000001540)=[{0x0, 0x6, 0x400, 0x1000}, {0x4, 0x6, 0x7}]}) 8.381731273s ago: executing program 7 (id=96): mkfifo(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40) open$dir(&(0x7f0000000800)='./file0\x00', 0x200, 0xfdf98e28ba4af85) r0 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000004e00), 0x80, 0x0) ioctl$WSKBDIO_COMPLEXBELL(r0, 0x80105702, &(0x7f0000004e40)={0xffff0000, 0xd5, 0x4, 0x5c}) rename(&(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000010c0)='./file1\x00') symlink(&(0x7f0000000180)='./file0\x00', &(0x7f0000000440)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 7.252224253s ago: executing program 5 (id=99): shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f00000001c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1ff}, 0xd, 0x0, 0x0, 0x7, 0x0, 0x4, 0x5, 0xa52, 0x200, 0x2, 0x401}) seteuid(0xffffffffffffffff) ktrace(0x0, 0x1, 0x40000626, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x2000, 0xffff6383) r0 = open(&(0x7f0000000240)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80, 0xc3) chown(&(0x7f0000000580)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000580)={'tap', 0x0}) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x4) r1 = socket$inet(0x2, 0x3, 0x14) ioctl$FIOASYNC(r1, 0x80206916, &(0x7f0000000580)=0x7) ioctl$WSDISPLAYIO_SVIDEO(r0, 0x82907003, &(0x7f0000000000)=0x3) 5.90868081s ago: executing program 7 (id=104): ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(0xffffffffffffff9c, 0xc01864c1, &(0x7f0000000000)={0x0, 0x3, 0xffffffffffffffff}) dup(r0) pselect(0x40, &(0x7f0000000180)={0x8, 0x4, 0xfffffffffffffff7, 0x9, 0xbec, 0x7fff, 0x5, 0x5}, 0x0, 0x0, 0x0, 0x0) sysctl$kern(&(0x7f0000000180)={0x1, 0x45}, 0x3, &(0x7f0000000280)="ee8f409198157e3b0d482cd811439e57ce10400716e4853368b73a55267eae31dfdeb4695f32fe7b7ad86f86b9026db90f9b45d9c0dfe6f336cdbed0b1e9503fb71d22c07e97988cb677f6e039bda806b77d2700"/100, &(0x7f0000000140)=0x5b, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(0xffffffffffffff9c, 0xc01864c1, &(0x7f0000000000)={0x0, 0x3}) (async) dup(r0) (async) pselect(0x40, &(0x7f0000000180)={0x8, 0x4, 0xfffffffffffffff7, 0x9, 0xbec, 0x7fff, 0x5, 0x5}, 0x0, 0x0, 0x0, 0x0) (async) sysctl$kern(&(0x7f0000000180)={0x1, 0x45}, 0x3, &(0x7f0000000280)="ee8f409198157e3b0d482cd811439e57ce10400716e4853368b73a55267eae31dfdeb4695f32fe7b7ad86f86b9026db90f9b45d9c0dfe6f336cdbed0b1e9503fb71d22c07e97988cb677f6e039bda806b77d2700"/100, &(0x7f0000000140)=0x5b, 0x0, 0x0) (async) 5.698811665s ago: executing program 7 (id=111): mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x9011, 0xffffffffffffffff, 0x0) (async) r0 = open(&(0x7f0000000180)='./file0\x00', 0x200, 0xcf) (async) munmap(&(0x7f0000ff5000/0x6000)=nil, 0x6000) (async) r1 = socket$inet6(0x18, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0x1c, 0x18, 0x0, 0x8, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', 0x5b}, 0x1c) closefrom(r1) minherit(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x3) (async) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x2011, r0, 0x0) 5.696998192s ago: executing program 5 (id=112): r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000006340), 0x40000, 0x0) ioctl$DIOCRADDTABLES(r0, 0xc450443d, &(0x7f0000000a40)={{'./file0\x00', './file0\x00', 0x4c, 0x40}, &(0x7f00000001c0)=[{'./file0\x00', './file1\x00', 0x0, 0x1}, {'./file1\x00', './file1\x00', 0x12, 0xb}], 0x1, 0x2, 0x40, 0x3, 0x1a8edd8e, 0x101, 0x12, 0xdd}) ioctl$DIOCRDELTABLES(r0, 0xc450443e, &(0x7f000000ac40)={{'./file1\x00', './file0\x00', 0x48, 0x5}, 0x0, 0x7, 0x0, 0x8, 0x863, 0x81, 0x7, 0x6, 0x1ff}) mknod(&(0x7f0000000080)='./file0\x00', 0x2000, 0x5be7) open(&(0x7f00000000c0)='./file0\x00', 0x10000, 0x112) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fchown(r1, 0x0, 0x0) r2 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$DIOCGETSTATES(r2, 0xc0104419, &(0x7f0000000180)={0x1, &(0x7f0000000ec0)=[{0x0, ""/16, [{[@v4=@multicast2, @v4=@broadcast]}, {[@v4=@multicast2]}], {}, {}, @v4=@multicast1}]}) 5.693246494s ago: executing program 5 (id=114): seteuid(0xffffffffffffffff) getgroups(0x7, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]) setresgid(0xffffffffffffffff, r0, 0x0) sysctl$hw(&(0x7f0000000580)={0x6, 0x8}, 0x2, &(0x7f0000000000), 0x0, 0x0, 0x0) 5.600963319s ago: executing program 5 (id=116): r0 = socket$inet6(0x18, 0x1, 0x6) setsockopt(r0, 0x6, 0x2, &(0x7f0000000140), 0x0) r1 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x0) r2 = dup(0xffffffffffffff9c) r3 = socket$inet(0x2, 0x3, 0x1) sendto$inet(r3, &(0x7f0000000400)="46049e490b093dd1", 0x8, 0x8, &(0x7f0000000000)={0x10, 0x2, 0x0, 0xffffffff}, 0x10) dup3(r1, r2, 0x10000) sysctl$vfs_nfs(0xfffffffffffffffe, 0x3, &(0x7f0000000080)="52d72c3c4dd9340cb2168b98f11d425bae8a912b64a13fd80d0d6d1d222222a38793ce1a6e59dd2cebe3f9402cb87d8cb983bc32726886fececbbc8e61a9d75add3d1009ef20429cfdeb899531e50a01f75fc3205abd840429731678043f9bc594821fe3a7bbcdcd04532cb352fc0e101fa8b60321b4860e9eacd7d6c9b34460f7c8d4f333893d79ec8790d4ec86ead23af95df74f8f302d5157e74608b8bdca5f2a", &(0x7f0000007340)=0x4, &(0x7f0000000040)="aa9d3993b12622a77a9292a947cf74d96f633423d9f2f5cd2a0f8bf667c7ca137c32016dbb39f279a75e34e01e06126a367fda3c2b4b8e1621b91b31", 0x5e) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, &(0x7f0000000000)) 5.600530051s ago: executing program 7 (id=117): r0 = open(&(0x7f0000000180)='./file0\x00', 0xa60, 0xcf) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000580)={'tap', 0x0}) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x4) r1 = socket$inet(0x2, 0x3, 0x14) ioctl$FIOASYNC(r1, 0x802069a1, &(0x7f0000000580)=0x7) ktrace(&(0x7f0000000040)='./file0\x00', 0x0, 0x814, 0xffffffffffffffff) ioctl$BIOCGSTATS(r0, 0x4008426f, &(0x7f0000000000)) openat$bpf(0xffffffffffffff9c, 0x0, 0x200, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) shutdown(r2, 0x1) pselect(0x40, &(0x7f0000000080)={0xe3, 0x1d, 0xff, 0x6, 0xc8, 0xfffffffe, 0x5, 0x40000000005}, 0x0, 0x0, 0x0, 0x0) r3 = kqueue1(0x10000) kevent(r3, &(0x7f0000000040), 0x6, 0x0, 0x4, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000580)={'tap', 0x0}) mprotect(&(0x7f00003cd000/0x3000)=nil, 0x3000, 0x1) r4 = socket$inet(0x2, 0x3, 0x14) ioctl$FIOASYNC(r4, 0x80206979, &(0x7f0000000580)=0x7) sysctl$net_inet_tcp(&(0x7f00000003c0)={0x4, 0x2, 0x6, 0x9}, 0x4, &(0x7f00000006c0)="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", &(0x7f00000016c0)=0x210, 0x0, 0x0) ioctl$DIOCGETSTATE(r0, 0xc1084413, &(0x7f00000001c0)={{0x1a, './file1\x00', [{[@v6=@rand_addr="ce13c7cfe20dfbdec2bc72e496be7f3c", @v6=@loopback], [0xfffa, 0x1], 0x1, 0x18}, {[@v6=@rand_addr="13f2447183b46b892d9bbddf88dd6ba1", @v6=@mcast2], [0xfffd, 0x40d], 0x6, 0x2}], {{0x86, 0x2, 0xa}, 0x9, 0x8, 0x40, 0xfffa, 0x4, 0x4, 0x4}, {{0x100, 0x3, 0x46, 0x7}, 0x6, 0x2, 0x1, 0x7, 0x6, 0x0, 0x27}, @v4=@remote={0xac, 0x14, 0x0}, 0x3, 0x8, 0x7, 0x7fff, 0xfff, [[0x8, 0x5], [0x4, 0x3]], [[0x66, 0x7], [0x5, 0xffff]], 0x1, [0x5, 0x8000], 0x8, 0x18, 0x2, 0x0, 0x4, 0xb8, 0x2, 0x1, 0x1, 0x5, 0xe, 0x2, "521b"}}) 4.335794153s ago: executing program 5 (id=123): mknod$loop(&(0x7f0000000580)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x0) mkfifo(&(0x7f0000000300)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8) open(&(0x7f0000000180)='./file0\x00', 0x200, 0x2c) mkdir(&(0x7f0000001f40)='./file0\x00', 0x90) open$dir(&(0x7f00000001c0)='./file0\x00', 0x200, 0x80) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x80, 0x0) ioctl$FIOASYNC(r0, 0xc0106978, &(0x7f0000000580)=0x7) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(r2, &(0x7f0000000900)=[{&(0x7f00000007c0)=""/208, 0xd0}, {&(0x7f00000008c0)=""/28, 0x1c}], 0x2, 0x8e) kqueue() mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x1672) open(&(0x7f0000001980)='./file0\x00', 0x40, 0x4a) writev(r1, &(0x7f0000000780)=[{&(0x7f0000000440)="29d25f48fa", 0xfffffe54}], 0x1) mkfifo(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40) rename(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r3 = syz_open_pts() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) closefrom(r4) fchdir(r3) r5 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000040), 0x8, 0x0) sysctl$kern(&(0x7f00000011c0)={0x1, 0x48}, 0x2, &(0x7f0000001200)="ed496750", &(0x7f0000001240)=0x4, 0x0, 0x0) setitimer(0x1, &(0x7f00000000c0)={{0x5, 0x3}, {0x334c, 0xfb6a}}, &(0x7f00000006c0)) ioctl$VNDIOCSET(r5, 0xc0384600, &(0x7f0000000140)={0x0, 0x3, &(0x7f0000000100)='./file0\x00', 0x8}) r6 = syz_open_pts() writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000000)="911a", 0x2}], 0x1) ioctl$TIOCMGET(r1, 0x4004746a, &(0x7f0000000700)) ioctl$TIOCSETD(r6, 0x8004741b, &(0x7f00000086c0)=0x9) ioctl$TIOCSETD(r6, 0x8004741b, &(0x7f0000000040)=0x9) syz_open_pts() mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1) 4.108387478s ago: executing program 6 (id=126): munmap(&(0x7f0000fea000/0x13000)=nil, 0x13000) ktrace(0x0, 0x0, 0x80000000, 0x0) openat$bpf(0xffffffffffffff9c, 0x0, 0x10000, 0x0) r0 = openat$bpf(0xffffffffffffff9c, 0x0, 0x40, 0x0) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x4, 0x5, 0xf9}, {0x1c, 0x4, 0x1, 0x1}, {0xd9e6, 0x9, 0x3, 0x7}]}) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000580)={'tap', 0x0}) syz_emit_ethernet(0x66, &(0x7f0000000480)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd68595b8100302c0400020000000000000000000000000000ff020000000000000000000000000001020090780000000a64000008f000620100000000000000000000ffff0000feffff020000000000000000000000000001"]) 4.062249369s ago: executing program 7 (id=130): syz_emit_ethernet(0x8e, 0x0) syz_open_pts() r0 = openat$pci(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = kqueue1(0x4) kevent(r1, &(0x7f0000000000), 0x3ff, &(0x7f0000000040), 0xb592, 0x0) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) r2 = syz_open_pts() ioctl$TIOCSTAT(r2, 0x20007465) execve(0x0, 0x0, 0x0) r3 = socket$inet6(0x18, 0x4, 0x3) shutdown(r3, 0x2) r4 = dup2(r0, r0) ioctl$DIOCXBEGIN(r4, 0xc0187009, &(0x7f0000001900)={0x0, 0x2, 0x0}) 4.00738298s ago: executing program 6 (id=134): r0 = syz_open_pts() writev(r0, &(0x7f00000016c0)=[{&(0x7f00000000c0)="b9e2c28a7dc3d77be4dcc5190cb73d5abffe312d7e337d", 0x17}, {0x0, 0x10}, {0x0}, {0x0}, {0x0}], 0x5) ioctl$TIOCCLRVERAUTH(r0, 0x2000741d) syz_emit_ethernet(0x5f, &(0x7f0000000080)={@empty, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x2, 0x36, 0x51, 0x66, 0x2000, 0x1f, 0x33, 0x0, @multicast1, @multicast1}, @generic="7ab8fed08705088b90ae0c4b4b8c852295ea92a3070613e5f9812474d9ce1cc14a5c14688a8be6b4f2ef9cab354a2f4f131fa8e57afd35f4da38914e23"}}}}) 3.549215242s ago: executing program 6 (id=140): r0 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000001c80), 0x1, 0x0) ioctl$WSMUXIO_ADD_DEVICE(r0, 0x80085761, 0x0) (async) ioctl$WSMUXIO_ADD_DEVICE(r0, 0x80085761, 0x0) ioctl$WSKBDIO_SETMODE(r0, 0x80045713, &(0x7f0000000000)) ioctl$TIOCGFLAGS(r0, 0x4004745d, &(0x7f0000000200)) ioctl$WSMUXIO_REMOVE_DEVICE(r0, 0x80085762, &(0x7f0000000240)={0x1, 0x4}) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x2, 0x0, 0x26}, 0x4, 0x0, 0x0, &(0x7f0000000100), 0x0) (async) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x2, 0x0, 0x26}, 0x4, 0x0, 0x0, &(0x7f0000000100), 0x0) 3.548621058s ago: executing program 6 (id=141): r0 = syz_open_pts() openat$bpf(0xffffffffffffff9c, &(0x7f0000001ec0), 0x20, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0xd01) ktrace(&(0x7f0000000040)='./file0\x00', 0x4, 0x814, 0x0) ktrace(&(0x7f0000000040)='./file0\x00', 0x0, 0x814, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(0x0) closefrom(r1) getsockname(r2, 0x0, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) closefrom(r3) setrlimit(0x8, &(0x7f0000001ec0)={0x9, 0x37e1790c}) r4 = syz_open_pts() ioctl$TIOCSETAW(r4, 0x802c7415, &(0x7f0000000000)={0x7, 0x3, 0xffffffc0, 0x8, "fe83fe7a9542a14123a70000001efe02bfabb686", 0x2, 0xcfe}) write(r0, &(0x7f0000000200)="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", 0xfb9) write(r0, &(0x7f0000000040)="77d5b655ea62eae9fde7033fcd8b8bdb777835656f91263b4d71958e4326ac23f4b439b8e819bdfde6eeda3e72dd8c5a2c1df009ace87fcfda3c73ac6494911f09f40986334a99ae", 0x48) 3.444153386s ago: executing program 6 (id=144): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000240)=0xc) setresgid(r1, 0xffffffffffffffff, r1) r2 = socket$inet6(0x18, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000000)={0x1c, 0x18, 0x3, 0x332, "89000000000000000000f059d95000", 0x63}, 0x76) setregid(0x0, r1) r3 = socket$inet6(0x18, 0x2, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x200, 0x1f0) open(&(0x7f0000000200)='./file0\x00', 0x9da, 0xc9) open$dir(&(0x7f00000002c0)='./file0\x00', 0x12, 0x3c) closefrom(r3) sysctl$net_inet_tcp(&(0x7f0000000000)={0x4, 0x2, 0x6, 0x2}, 0x4, 0x0, 0x0, &(0x7f0000000040)="01000000", 0x4) r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) ioctl$BIOCSETIF(r4, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x2, 0x0, 0x1d}, 0x4, 0x0, 0x0, &(0x7f0000000280)="54b1", 0x2) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="ca2d6046849a2d6c96de08bb07d13c1e0c247c82f7104d579449742f5dae867a33531be41c18ab4ebc036271cd75320deb3becf90a3c8425a52d11b94008888a9e13efe2e346beb7c930", 0x4a}], 0x1, 0x0, 0x0, 0x8}, 0x5) ioctl$DIOCGETQUEUES(0xffffffffffffffff, 0xc0104401, &(0x7f0000000040)={0x8, 0x1, {'\x00', './file1\x00', './file1\x00', './file0\x00', {{0x3, 0x2}, {0x6, 0x13}, 0x4}, {{0x5, 0x2}, {0x7, 0x801}, 0x4}, {{0x9, 0x2}, {0x9, 0x1000}, 0x40000000}, {0x7, 0x0, 0x0, 0x4}, 0x0, 0x10000, 0x6, 0x7, 0x4}}) mknod(&(0x7f0000000040)='./file0\x00', 0x2000, 0x33a5) r5 = open(&(0x7f0000001980)='./file0\x00', 0x80, 0xc3) ioctl$TIOCCONS(r5, 0xc0a86b05, &(0x7f0000000140)=0x1) r6 = open(&(0x7f00000000c0)='./file0\x00', 0x80, 0xec) ioctl$TIOCSETAW(0xffffffffffffffff, 0x802c7415, &(0x7f0000000140)={0x3fe, 0x5, 0xc2d, 0x4a94, "fe83fe7a1542a741fb17f989694df1fdd46db686", 0x80000003, 0x8}) ioctl$TIOCCONS(r6, 0xc0a86b07, &(0x7f0000000140)=0x1) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) sysctl$kern(&(0x7f0000000180)={0x1, 0x45}, 0x3, &(0x7f0000000280)="ee8f409198157e3b0d482cd811439e57ce10400716e4853368b73a55267eae31dfdeb4695f32fe7b7ad86f86b9026db90f9b45d9c0dfe6f336cdbed0b1e9503fb71d22c07e97988cb677f6e039bda806b77d2700"/100, &(0x7f0000000140)=0x5b, 0x0, 0x0) r7 = socket$inet6(0x18, 0x3, 0x7) setsockopt$sock_int(r7, 0xffff, 0x1021, &(0x7f0000000040)=0x9ee, 0x4) syz_extract_tcp_res(0x0, 0x4, 0xa) 1.464775385s ago: executing program 1 (id=155): mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000b4a000/0x400000)=nil, 0x400000, 0x6) r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$DIOCGETRULE(r0, 0xc040446c, &(0x7f0000000e00)={0x33, 0x1, 0x2, '.\x00', './file0\x00', 0x0, "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"}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) closefrom(r1) fchflags(r2, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0xd02) sysctl$kern(&(0x7f0000000e00)={0x1, 0x46}, 0x2, 0x0, 0x0, &(0x7f0000000f40), 0x0) r3 = fcntl$dupfd(r0, 0xc, r2) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x1, 0x7], 0x2, 0x4, 0x0, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000000340)={&(0x7f0000000040)=@file={0x6, 0x1, './file0\x00'}, 0xa, &(0x7f0000000240)=[{&(0x7f0000000180)="0cb06d119bbfcc500c450401c9d9bd82520577769e71d8e3019bf4d4a8fdcd5855820181451000d6ee08821a78e608d640db4cebdc38ae9114b5df6689d9de4438cd35317dd42e9fba873bf219670f9ed25117ed4fe17aecf1e0c0b6879a580522161fbe506a6d3c452a62a3f33f542818f547a5c5b57ee6b6f7d52eb14cbb7c1e73193154a833e6d3e2d5db53b366a77997de3e268ca6641b78b1249c080caae6", 0xa1}], 0x1, &(0x7f0000000300)=[@rights={0x20, 0xffff, 0x1, [r1, r3, 0xffffffffffffff9c, 0xffffffffffffff9c, r4]}, @rights={0x14, 0xffff, 0x1, [r2, r0]}], 0x34, 0x401}, 0x0) r5 = open(&(0x7f0000001980)='./file1\x00', 0x1, 0xc3) ioctl$TIOCSETD(r5, 0xc0785101, &(0x7f0000000080)=0x3) 1.431862815s ago: executing program 3 (id=157): r0 = openat$pci(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) r1 = dup2(r0, r0) madvise(&(0x7f00003a2000/0x2000)=nil, 0x2000, 0x2) munmap(&(0x7f0000000000/0x9000)=nil, 0x9000) r2 = shmget$private(0x0, 0x3000, 0x2ea, &(0x7f0000ffd000/0x3000)=nil) shmat(r2, &(0x7f0000000000/0x800000)=nil, 0x1000) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt(r3, 0x0, 0x24, &(0x7f0000000100)="9a355644", 0x4) ioctl$DIOCXBEGIN(r1, 0xc00c7007, &(0x7f0000000000)={0x0, 0x1d351d92, 0x0}) openat$pci(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) (async) dup2(r0, r0) (async) madvise(&(0x7f00003a2000/0x2000)=nil, 0x2000, 0x2) (async) munmap(&(0x7f0000000000/0x9000)=nil, 0x9000) (async) shmget$private(0x0, 0x3000, 0x2ea, &(0x7f0000ffd000/0x3000)=nil) (async) shmat(r2, &(0x7f0000000000/0x800000)=nil, 0x1000) (async) socket$inet(0x2, 0x3, 0x2) (async) setsockopt(r3, 0x0, 0x24, &(0x7f0000000100)="9a355644", 0x4) (async) ioctl$DIOCXBEGIN(r1, 0xc00c7007, &(0x7f0000000000)={0x0, 0x1d351d92, 0x0}) (async) 1.425917019s ago: executing program 3 (id=160): mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x5d42) open$dir(&(0x7f0000000040)='./file0\x00', 0x10000, 0x2) syz_open_pts() (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pselect(0x40, &(0x7f00000001c0)={0x7f, 0x0, 0x101, 0x9, 0x3fffffffe, 0x9a2b, 0x9, 0x7}, &(0x7f00000000c0)={0xfd, 0x9ebb, 0x9, 0x7, 0x0, 0x7, 0x9, 0x9}, 0x0, 0x0, 0x0) (async) poll(&(0x7f0000001200)=[{r0, 0x10}], 0x1, 0x37) msgget(0x2, 0x41) 1.145754869s ago: executing program 1 (id=161): r0 = socket$inet(0x2, 0x5, 0x4) setsockopt$sock_linger(r0, 0xffff, 0x80, &(0x7f00000002c0)={0x6, 0xfffffff8}, 0x0) 1.137282555s ago: executing program 1 (id=162): socket$inet6(0x18, 0x8000, 0x0) unveil(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='c\x00') syz_emit_ethernet(0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb886369a0e6ef00140340ff020400000000000000000000000001fe8000000000000000000000000000aa4e", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5180001390"]) r0 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000040), 0x48129, 0x0) ioctl$FIOGETOWN(r0, 0x80047476, &(0x7f0000000080)) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) unveil(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='c\x00') r1 = socket$inet(0x2, 0x3, 0x6) shutdown(r1, 0x1) pselect(0x0, 0x0, &(0x7f00000000c0)={0xfd, 0x9ebb, 0x9, 0x7, 0x0, 0x7, 0x9, 0x9}, 0x0, 0x0, 0x0) r2 = openat$pf(0xffffffffffffff9c, &(0x7f0000000100), 0x40000, 0x0) ioctl$DIOCRDELADDRS(r2, 0xc4504444, &(0x7f0000001040)={{'./file1\x00', './file1aaaaaaaaaaaaaaaaaaaaaaaaa', 0x0, 0x8}, 0x0, 0x34, 0x0, 0x80000001, 0x218, 0x1, 0x396b5409, 0x60, 0x7}) r3 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) pipe(&(0x7f0000000280)) syz_open_pts() socket$inet6(0x18, 0x2, 0x0) openat$bpf(0xffffffffffffff9c, &(0x7f0000001ec0), 0x20, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) closefrom(r4) setrlimit(0x8, &(0x7f0000001ec0)={0x9, 0x37e1790c}) pipe(0x0) ioctl$WSMOUSEIO_SETPARAMS(r3, 0x80105728, &(0x7f0000000100)={&(0x7f0000000080)=[{0x80, 0x3}, {0x4, 0x1}, {0xe499f2544b0a69f7, 0xfffeffff}, {0x26, 0x3}, {0x85, 0xfffffffc}, {0x85, 0x40000000}, {0x46, 0x1ff}, {0x44, 0x8}], 0x8}) r5 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000040), 0x48129, 0x0) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) ioctl$WSMOUSEIO_SETPARAMS(r5, 0x80105728, &(0x7f00000000c0)={0x0}) sysctl$net_inet_tcp(&(0x7f0000000040)={0x4, 0x2, 0x6, 0x3}, 0x4, 0x0, 0x0, 0x0, 0x0) sysctl$net_inet_tcp(&(0x7f0000000140)={0x4, 0x2, 0x6, 0xa}, 0x4, &(0x7f0000000180)="bb401386ef3f0f08f6c4dec29abee7565d77b2f759815a91dba36c7a37dc7a79070f8ce36117052849f2702b635c349347c96b6009b6bbfa5d9831076447e18bdba8704ca1a041f9c75690af4a2c1b6235121fb3cc0a9a99cc873f1d3fc0c2f43ac086fcfb53f28edb7e44b7812154fc560e393bd6e9801e6b9d131e68afea7d6c779e59596d2b89351a0d73b784e4bcb134190eb4fd53466fa0a2f21484d6d7ad0b2dc27333e1585787fdd99908bf7d741c298f0b097c870995b8c937482a5fb9122c1da6b6139e64343bf467", &(0x7f00000002c0)=0xcd, &(0x7f0000000300)="0a929f6a785bb0b23889e63be5280746624bfc4ee5b4907bccf5a96e8e80e7d038335d72739612a025b9533d712097ee90f425b08bfb9af557e509965c9bc360b912ac173ae70195c596806bfd37a11f9dcba9f9731b7e92737b1a2561cb2b4edbf5e10044e4ded18a8f04a674dec2281b612c72a33e708f0337dce6fdda60e15c6b13acc822f0897fa5bfcf780f09be69ce653930e8b55539bb3133415492c5030e5c5d0c2998d465f9bcab959a4923df3e0e8a9998184c5e87d835c02ba8a6a393a5fbe15e5be767c8312939aca8708e42dde86f6b29a5cb48f65f", 0xdc) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x4) sysctl$net_inet6_ip6(&(0x7f0000000040)={0x4, 0x18, 0x29, 0x2b}, 0x4, &(0x7f0000000000), &(0x7f00000000c0), 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x40c, 0x0, 0x0) 1.13638151s ago: executing program 2 (id=163): r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x4) renameat(r0, &(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00') (async, rerun: 64) execve(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)=[&(0x7f0000000100)='O,\x00', &(0x7f0000000140)='($%,\x00'], &(0x7f0000000380)=[&(0x7f00000001c0)='+\x00', &(0x7f0000000200)='(\x00', &(0x7f0000000240)=')\x00', &(0x7f0000000280)='\x00', &(0x7f00000002c0)='@-![(-}\x00', &(0x7f0000000300)='\x00', &(0x7f0000000340)='\x00']) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffff9c, 0xc01864c6, &(0x7f0000000400)={&(0x7f00000003c0)=[0xe1dc, 0x8001, 0x3, 0x5, 0x6, 0x400], 0x6, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000480)={&(0x7f0000000440)=[0x8, 0xe, 0x8], 0x3, 0x10004}) (async, rerun: 32) mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) (async, rerun: 32) sysctl$vm_swapencrypt(&(0x7f00000004c0)={0x2, 0x5, 0x2}, 0x3, &(0x7f0000000500)="7e2d04b7341e951ef3e8e3a17d2ce5f8a6248c7d1c34970426fbd37f09a8c6640547ee544f4ee676573e9964df75d0a8e83af89dab3497", &(0x7f0000000540)=0x37, &(0x7f0000000580)="a7633fee105a41f301fd1ebd76bb1ee54e1d0f6edeb0c88e28026efdfd0c09e7521482cc229ef4a84fbcd7c2e4f7cec6e67d7c9bc8f96d52", 0x38) (async, rerun: 32) r2 = open(&(0x7f00000005c0)='./file0\x00', 0x400, 0xc0) (async, rerun: 32) r3 = openat$pf(0xffffffffffffff9c, &(0x7f0000000600), 0x200, 0x0) ioctl$DIOCGETRULE(r3, 0xcd604407, &(0x7f0000000640)={0x3, 0xfffffff4, 0x3fe7d9f4, './file0\x00', './file0\x00', 0x0, "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"}) (async) r4 = dup2(r2, r2) ioctl$DIOCCHANGERULE(r2, 0xcd60441a, &(0x7f00000013c0)={0x80, 0x0, 0x6, './file0\x00', './file0\x00', 0x0, "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"}) (async) syz_emit_ethernet(0x118, &(0x7f0000002140)={@random="ea37a395f681", @remote, [], {@ipv6={0x86dd, {0x2, 0x6, "9ba74d", 0xe2, 0x16, 0x7, @empty, @ipv4={'\x00', '\xff\xff', @loopback}, {[@fragment={0x0, 0x0, 0x3, 0x1, 0x0, 0x1d, 0x66}, @fragment={0xc, 0x0, 0x7d, 0x1, 0x0, 0x1a, 0x68}], @icmpv6=@param_prob={0x4, 0x1, 0x0, 0x0, {0x3, 0x6, "0da9c5", 0x2b, 0xc, 0xfe, @loopback, @rand_addr="12fbb96bd9c3a1e9212bcd349eb22b96", [@dstopts={0x11, 0x0, '\x00', [@ra={0x5, 0x2, 0x4}]}], "1380dde5db6e96bb7a0ded769067e689364d1305f28ab9918808d02de06d504bbe71c76ddca35e6d8cf72e021db53c26d9e7ea3cc45744636c9ddcf14f49abb8e22215c2f5a35ee48d8e6dffcf7c8c7fbd3403349641cfa0a73dfa8b11d3e81e7d38e59b65edb8de962638adf22bb2494335bee44a38416743377c3bed0e0f64ee5a73466dd5876b903769f83684bec4804f"}}}}}}}) (async) ioctl$DIOCXBEGIN(r3, 0xc0104451, &(0x7f0000003ec0)={0x7, 0x7f, &(0x7f0000002280)=[{0x1, './file0\x00', 0x401}, {0x0, './file0\x00', 0xfffffffd}, {0x0, './file0\x00', 0x5}, {0x0, './file0\x00', 0x2}, {0x1, './file1\x00', 0x9}, {0x1, './file0\x00', 0x7}, {0x0, './file0\x00', 0x8001}]}) (async) sendmsg$unix(r4, &(0x7f0000004140)={&(0x7f0000003f00)=@file={0x8, 0x1, './file0\x00'}, 0xa, &(0x7f0000004100)=[{&(0x7f0000003f40)="67dfff01629187ebc52c45174f45e11bc576021e0d3c9a23d7189d060eb6bf0261a68d3e89e42478f1db8fee8dde4591e82edee0c1c7ed991a895f5a6f7408c3e938c69d0072f480636ef0f48540712a9dabe9b7c864c830b933fefbf2103907f8ad8a13972c3588ab5e97d0e3509bb223fb7cb8ae4f1ab6ad99407325fd854d5feeeaf62f9384a7d237817f7cb16c177971a714fea792f5356c9335ed548f9e07e427586e6960b3e6ec044a038a", 0xae}, {&(0x7f0000004000)="4cd15ef72b82dae64702417d0168e47780dc80796c945b3f1b4324418830044cd3ab15b82907c10fea3876870710a0f8014fe267ba86866a3c93316b766d39ff53416840523d3644eb00d5f529b3062824509efdcb60240320523d", 0x5b}, {&(0x7f0000004080)="14582dcb5ce788c0c53988a261de3b542f556ec31a663e8aad1e918377c9afa0e12e2eda2cf0b57aea509de589f73314072534dd56b271f980ad9a674536de0ac43ef7263c2d67587eb6b0", 0x4b}], 0x3, 0x0, 0x0, 0x3}, 0x400) (async) ktrace(&(0x7f0000004180)='./file1\x00', 0x1, 0x20000008, 0xffffffffffffffff) (async) bind$inet6(r4, &(0x7f00000041c0)={0x1c, 0x18, 0x0, 0xe00, "0365063bb515bd810dbeb66b3325d190", 0x2}, 0x1c) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000004200)={0x1, 0x9, r0}) dup3(r3, r5, 0x10004) (async, rerun: 32) sysctl$net_inet6_icmp6(&(0x7f0000004240)={0x4, 0x18, 0x3a, 0xb}, 0x4, &(0x7f0000004280)="7a46d6365435eedd1fb01087cdecb4be7eacafdd19cc224c984c1ea2f155ea262a301c31c2a3209685209ba64098dd9c66ac87833d0167a34212ac5af48a8cf79c38c036c07749a0c70ab1372be397f50f81cdfd59902b3b138c7ac098fc0279e0d19bc2004791fb87a0618ae9a9121ca11b8f38fc0bf3cfdf78f9346158c0ff3d8c72a43df889cdb4521eaafcc8d13bc82bc079b5c4895332598c2c8c3009229899d04c202e657255c55938f282d6", &(0x7f0000004340)=0xaf, &(0x7f0000004380)="2efda29936f491155df82a1e77718c45a2a08b5b5cba2c837255fbc0f687e81eb9a76d3497ed014ae47169443fd3e2051bc041b4008022c7088eec8e3930edefaaeb4b775d66bde78009b4df4634a1e8c15ea519683ba5fd905d0fdb411c91bf48de6833966f15e57d1a02d9094e1db49304713b8bac4c330aa73b5974", 0x7d) (rerun: 32) ioctl$DIOCRCLRTSTATS(r3, 0xc4504441, &(0x7f00000054c0)={{'./file0\x00', './file0\x00', 0x2a, 0x1}, &(0x7f0000004400)=[{'./file1\x00', './file1\x00', 0x64, 0x9}, {'./file1\x00', './file2\x00', 0x16, 0xcb}, {'./file1\x00', './file0\x00', 0x8, 0xf}, {'./file1\x00', './file1\x00', 0x8, 0xe8}], 0xf0000000, 0x4, 0x9, 0xfffffff7, 0x80000001, 0x3, 0x8, 0x768f}) (async, rerun: 32) socket$inet(0x2, 0x4000, 0x2) (async, rerun: 32) lstat(&(0x7f0000005940)='./file2\x00', &(0x7f0000005980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r5, 0xffff, 0x1022, &(0x7f0000005a00)={0xffffffffffffffff, 0x0, r6}, 0xc) syz_extract_tcp_res(&(0x7f0000005a40), 0x400, 0x8001) sysctl$vm_swapencrypt(&(0x7f0000005a80)={0x2, 0x5, 0x1}, 0x3, &(0x7f0000005ac0)="d8bfd2f2347578ff9179e2252dc8475bfdd7d9c9d0b34f23b711e7882460e94ab48d939b6f889033e03ce70c3ef092a9034a939124ff0c04d36425e5685c04e8572a81b4f13e4bd1dc5e70a51396f6c60a89a617b839a81c3fb1b78ae453b78e5ef5dbbe680b3e", &(0x7f0000005b40)=0x67, &(0x7f0000005b80)="1ab17ddb8a5d3dc847b848a5bc4ecbff", 0x10) r7 = openat$pf(0xffffffffffffff9c, &(0x7f0000005bc0), 0x40, 0x0) writev(r7, &(0x7f0000006d80)=[{&(0x7f0000005c00)="89f5d9083552aa6d15d3e3dffdc588acfbb0035188bf1238c2d92d7ca5e8ffdb737ec697235dc0c8c7c31677dc27135a954b5e0a531b9047006d964fe14d848d35e7411c6178a425f20cb161008c09ac82e1e3f7e4e8a87c077104f9bc148870981bd8122365da3df86e5ed13b43c9018230c6af6aa86dd25e6d8031fc7d39650b4f9a1e780b9db11efd22d7f2016fe4d81b46b542fd67236408352ce962", 0x9e}, {&(0x7f0000005cc0)="ff489205d7fb", 0x6}, {&(0x7f0000005d00)="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", 0x1000}, {&(0x7f0000006d00)="4c1368b19450d6ce8dc6c7babc42680be5506eb500dc51e07f9b259a4de4bb4fd9340c77d62f943ea85cea6340c98b38a99a9792d2299d8c2e7768bf4b92b7865174cb6e122ed31722197f7826c784706c8af9a0b4558c17e71be970", 0x5c}], 0x4) (async, rerun: 64) ioctl$DIOCSETIFFLAG(r7, 0xc0284459, &(0x7f0000006e80)={'./file2\x00', &(0x7f0000006dc0)=""/191, 0x0, 0x2, 0x8, 0x101}) (rerun: 64) ioctl$VNDIOCSET(r5, 0xc0384600, &(0x7f0000006f40)={&(0x7f0000006ec0)='./file2\x00', 0x6, &(0x7f0000006f00)='./file2\x00', 0x8}) 1.136049765s ago: executing program 2 (id=164): r0 = open(&(0x7f0000000180)='./file0\x00', 0x200, 0xcf) socket$inet6(0x18, 0x3, 0x7) (async) r1 = socket$inet6(0x18, 0x3, 0x7) setsockopt(r1, 0x29, 0x1b, 0x0, 0x0) (async) setsockopt(r1, 0x29, 0x1b, 0x0, 0x0) r2 = socket$inet(0x2, 0x3, 0x6) setsockopt(r2, 0x0, 0x6e, &(0x7f0000000100), 0x0) setegid(0xffffffffffffffff) (async) setegid(0xffffffffffffffff) setgroups(0x0, 0x0) (async) setgroups(0x0, 0x0) r3 = getegid() fchownat(r0, &(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, r3, 0x6) seteuid(0xffffffffffffffff) sysctl$kern(&(0x7f0000000000)={0x1, 0x1b}, 0x2, &(0x7f0000000240)="6f2ca0f44cf4c5efef3015d2", &(0x7f0000000140)=0xc, &(0x7f0000000180), 0x0) truncate(&(0x7f0000000200)='./file0\x00', 0xffffffffffffff0b) 1.0882583s ago: executing program 6 (id=144): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000240)=0xc) setresgid(r1, 0xffffffffffffffff, r1) r2 = socket$inet6(0x18, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000000)={0x1c, 0x18, 0x3, 0x332, "89000000000000000000f059d95000", 0x63}, 0x76) setregid(0x0, r1) r3 = socket$inet6(0x18, 0x2, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x200, 0x1f0) open(&(0x7f0000000200)='./file0\x00', 0x9da, 0xc9) open$dir(&(0x7f00000002c0)='./file0\x00', 0x12, 0x3c) closefrom(r3) sysctl$net_inet_tcp(&(0x7f0000000000)={0x4, 0x2, 0x6, 0x2}, 0x4, 0x0, 0x0, &(0x7f0000000040)="01000000", 0x4) r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) ioctl$BIOCSETIF(r4, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x2, 0x0, 0x1d}, 0x4, 0x0, 0x0, &(0x7f0000000280)="54b1", 0x2) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="ca2d6046849a2d6c96de08bb07d13c1e0c247c82f7104d579449742f5dae867a33531be41c18ab4ebc036271cd75320deb3becf90a3c8425a52d11b94008888a9e13efe2e346beb7c930", 0x4a}], 0x1, 0x0, 0x0, 0x8}, 0x5) ioctl$DIOCGETQUEUES(0xffffffffffffffff, 0xc0104401, &(0x7f0000000040)={0x8, 0x1, {'\x00', './file1\x00', './file1\x00', './file0\x00', {{0x3, 0x2}, {0x6, 0x13}, 0x4}, {{0x5, 0x2}, {0x7, 0x801}, 0x4}, {{0x9, 0x2}, {0x9, 0x1000}, 0x40000000}, {0x7, 0x0, 0x0, 0x4}, 0x0, 0x10000, 0x6, 0x7, 0x4}}) mknod(&(0x7f0000000040)='./file0\x00', 0x2000, 0x33a5) r5 = open(&(0x7f0000001980)='./file0\x00', 0x80, 0xc3) ioctl$TIOCCONS(r5, 0xc0a86b05, &(0x7f0000000140)=0x1) r6 = open(&(0x7f00000000c0)='./file0\x00', 0x80, 0xec) ioctl$TIOCSETAW(0xffffffffffffffff, 0x802c7415, &(0x7f0000000140)={0x3fe, 0x5, 0xc2d, 0x4a94, "fe83fe7a1542a741fb17f989694df1fdd46db686", 0x80000003, 0x8}) ioctl$TIOCCONS(r6, 0xc0a86b07, &(0x7f0000000140)=0x1) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) sysctl$kern(&(0x7f0000000180)={0x1, 0x45}, 0x3, &(0x7f0000000280)="ee8f409198157e3b0d482cd811439e57ce10400716e4853368b73a55267eae31dfdeb4695f32fe7b7ad86f86b9026db90f9b45d9c0dfe6f336cdbed0b1e9503fb71d22c07e97988cb677f6e039bda806b77d2700"/100, &(0x7f0000000140)=0x5b, 0x0, 0x0) r7 = socket$inet6(0x18, 0x3, 0x7) setsockopt$sock_int(r7, 0xffff, 0x1021, &(0x7f0000000040)=0x9ee, 0x4) syz_extract_tcp_res(0x0, 0x4, 0xa) 1.048185549s ago: executing program 4 (id=166): openat$vnd(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) (async) r0 = semget(0x1, 0x3, 0x302) semctl$SETALL(r0, 0x0, 0x9, 0x0) 858.054837ms ago: executing program 2 (id=167): mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x28dd) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x7c6, 0xea) write(r0, &(0x7f0000000040)="5ff25318", 0x4) r1 = socket$inet(0x2, 0x3, 0x14) ioctl$FIOASYNC(r1, 0xc0207534, &(0x7f0000000580)=0x7) r2 = semget$private(0x0, 0x2, 0x2b1) semctl$GETZCNT(r2, 0x2, 0x7, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x7) pipe(&(0x7f0000000000)={0xffffffffffffffff}) close(r3) r4 = kqueue1(0x10000) kevent(r4, 0x0, 0x2, 0x0, 0x80000000, &(0x7f0000000640)={0x3ff, 0x80000000005}) open$dir(&(0x7f00000002c0)='./file0\x00', 0x2, 0x3c) ioctl$AUDIO_STOP(r3, 0x4004746a) openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) r5 = openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x10, 0x0) ioctl$DIOCRGETTSTATS(r5, 0xc4504440, &(0x7f0000000900)={{'\x00', './file0\x00', 0x28, 0x2}, 0x0, 0x4d0, 0x0, 0xb5, 0x400, 0x4, 0x2, 0x0, 0x8}) r6 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000001c80), 0x1, 0x0) mkfifo(&(0x7f0000001380)='./file0\x00', 0x8) r7 = openat$vnd(0xffffffffffffff9c, &(0x7f0000002a80), 0x200, 0x0) ioctl$VNDIOCSET(r7, 0xc0384600, &(0x7f00000000c0)={&(0x7f0000002ac0)='./file0\x00', 0x5, 0x0}) open$dir(&(0x7f0000000080)='./file0\x00', 0x80, 0x107) unveil(0x0, &(0x7f0000000740)='c\x00') ioctl$WSMUXIO_REMOVE_DEVICE(r6, 0x80085762, &(0x7f0000000040)={0x1}) mquery(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0x0, r0, 0x1) 852.711149ms ago: executing program 3 (id=169): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000580)={'tap', 0x0}) r1 = dup2(r0, r0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000140)={0x1000, 0x10, r0}) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r3 = open(&(0x7f0000000100)='./file0\x00', 0x80, 0x60) fcntl$setflags(r3, 0x2, 0x1) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0) read$audio(r4, &(0x7f0000000040)=""/53, 0x35) writev(r2, &(0x7f0000000780)=[{0x0}], 0x1) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x4) r5 = socket$inet(0x2, 0x3, 0x14) minherit(&(0x7f0000345000/0x4000)=nil, 0x4000, 0x2) r6 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000040), 0x48129, 0x0) ioctl$WSMOUSEIO_GETPARAMS(r6, 0x80105727, &(0x7f0000000080)={&(0x7f0000000000)=[{0x8, 0x3}, {0x20, 0x2}], 0x2}) ioctl$FIOASYNC(r5, 0x80206979, &(0x7f0000000580)=0x7) ioctl$BIOCPROMISC(r0, 0x20004269) 850.755426ms ago: executing program 4 (id=170): ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f0000000000)={0x80000004, 0x5, 0x1, 0x2, "2feac1b1549b00", 0x0, 0xf403}) sysctl$kern(&(0x7f0000000000)={0x1, 0x3d}, 0x2, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCSETAF(0xffffffffffffffff, 0x802c7416, &(0x7f0000000040)={0x2, 0x7fffffff, 0x7, 0xe0000000, "a06415720ad86ac881e295b77feb6ae13b3c1df3", 0xe, 0x2}) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) socketpair(0x1e, 0x5, 0x0, 0x0) sysctl$vm_swapencrypt(&(0x7f0000000000), 0x3, 0x0, 0x0, &(0x7f00000000c0), 0x0) 848.923241ms ago: executing program 4 (id=172): open$dir(&(0x7f00000001c0)='./file0\x00', 0x200, 0x1c9) ktrace(&(0x7f0000000000)='./file0\x00', 0x4, 0x1104, 0xffffffffffffffff) setitimer(0x2, &(0x7f0000000040)={{0x3, 0x8000000032}, {0x40000000c, 0x4}}, 0x0) 847.610024ms ago: executing program 4 (id=173): unveil(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='x\x00') (async) unveil(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='x\x00') r0 = syz_open_pts() syz_open_pts() (async) syz_open_pts() r1 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) closefrom(r1) syz_open_pts() (async) syz_open_pts() mquery(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x2, 0x10, r0, 0x3) mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4) openat$pf(0xffffffffffffff9c, &(0x7f0000001bc0), 0x0, 0x0) 845.135279ms ago: executing program 4 (id=174): r0 = open(&(0x7f0000000000)='./file0\x00', 0x80, 0x8) closefrom(r0) pselect(0x40, &(0x7f0000000040)={0x6, 0x3, 0xb, 0x7, 0x8, 0x3, 0x81, 0x3}, &(0x7f0000000080)={0x5, 0x381, 0x3, 0x5, 0x0, 0x8, 0x10, 0x9}, &(0x7f00000000c0)={0xfffffffffffffffd, 0xfff, 0x200, 0x100000000, 0x101, 0x1, 0x7b, 0xa}, &(0x7f0000000100)={0xffffffff, 0x3}, 0x0) ioctl$TIOCSETAF(r0, 0x802c7416, &(0x7f0000000140)={0x6, 0x0, 0x4, 0x3, "1f4c78b2cb6d2c58b17c195bf2eeb70f99d7012d", 0x5, 0x8}) r1 = dup2(r0, r0) ioctl$BIOCLOCK(r0, 0x20004276) r2 = openat$diskmap(0xffffffffffffff9c, &(0x7f00000001c0), 0x400, 0x0) ioctl$DIOCMAP(r0, 0xc0106477, &(0x7f0000000200)={&(0x7f0000000180)='./file0\x00', r2, 0x2}) readv(r0, &(0x7f0000000540)=[{&(0x7f0000000240)=""/100, 0x64}, {&(0x7f00000002c0)=""/120, 0x78}, {&(0x7f0000000340)=""/110, 0x6e}, {&(0x7f00000003c0)=""/142, 0x8e}, {&(0x7f0000000480)=""/171, 0xab}], 0x5) ioctl$TIOCSETAF(r0, 0x802c7416, &(0x7f00000005c0)={0x0, 0x3, 0x5, 0x10001, "15bd2608d54339983217984ed28df94742ed9b49", 0xffffffce, 0x6}) ioctl$DIOCXEND(r1, 0xc0044464, &(0x7f0000000600)) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000640)={0x0, 0x1}) ioctl$BIOCSFILDROP(r0, 0x80044279, &(0x7f0000000680)=0x400) ioctl$TIOCDRAIN(r0, 0x2000745e) readv(r2, &(0x7f0000001a00)=[{&(0x7f00000006c0)=""/1, 0x1}, {&(0x7f0000000700)=""/232, 0xe8}, {&(0x7f0000000800)=""/4096, 0x1000}, {&(0x7f0000001800)=""/128, 0x80}, {&(0x7f0000001880)=""/35, 0x23}, {&(0x7f00000018c0)=""/118, 0x76}, {&(0x7f0000001940)=""/93, 0x5d}, {&(0x7f00000019c0)=""/3, 0x3}], 0x8) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000001a80), 0x10, 0x0) ioctl$BIOCSRTIMEOUT(r3, 0x8010426d, &(0x7f0000001ac0)={0x8}) getsockopt$SO_PEERCRED(r0, 0xffff, 0x1022, &(0x7f0000001b40)={0x0}, 0xc) ktrace(&(0x7f0000001b00)='./file0\x00', 0x1, 0x40000800, r4) openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000001b80), 0x81, 0x0) ioctl$DIOCRSETTFLAGS(r0, 0xc450444a, &(0x7f0000001bc0)={{'./file0\x00', './file0\x00', 0xa, 0x6}, 0x0, 0x0, 0x0, 0x6, 0x705, 0x4, 0x8001, 0x2, 0x5}) r5 = syz_open_pts() r6 = openat$tty(0xffffffffffffff9c, &(0x7f0000002040), 0x1, 0x0) ioctl$TIOCEXCL(r6, 0x2000740d) mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2) ioctl$TIOCSCTTY(r1, 0x20007461) poll(&(0x7f0000002080)=[{r3, 0x1}, {r5, 0x80}, {r6, 0x80}, {r6, 0x4}, {r0, 0x1}], 0x5, 0x7fffffff) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000002100)={&(0x7f00000020c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) ioctl$TIOCMBIS(r1, 0x8004746c, &(0x7f0000002140)) fcntl$getown(r6, 0x5) 844.715891ms ago: executing program 0 (id=175): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f00000000c0)={0x4, &(0x7f0000000100)=[{0x30, 0x0, 0x9, 0x7}, {0xfffe, 0x0, 0xd7, 0xfffffff7}, {0x401, 0x5, 0x2f, 0xfffffffc}, {0x6, 0x84, 0x0, 0xff}]}) (async) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000440)={'tap', 0x0}) syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x2, 0x36, 0x28, 0x67, 0x0, 0x1, 0x6, 0x0, @multicast2=0xe0000001, @local={0xac, 0x14, 0x0}}, @tcp={{0x3, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x9, 0x0, 0x100}}}}}}) 549.141748ms ago: executing program 0 (id=176): r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$DIOCRSETADDRS(r0, 0xc4504445, &(0x7f00000000c0)={{'./file0\x00', './file0aaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x0, 0x34, 0x0, 0x2a1df, 0x100, 0x2, 0x0, 0x8, 0x2}) 332.539018ms ago: executing program 0 (id=177): r0 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) stat(&(0x7f0000000080)='./file0\x00', 0x0) pselect(0xffffffffffffff16, 0x0, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0}) fstatat(r0, &(0x7f00000008c0)='./file0\x00', &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4) getresuid(&(0x7f0000000980)=0x0, &(0x7f00000009c0), &(0x7f0000000a00)) getsockopt$SO_PEERCRED(r0, 0xffff, 0x1022, &(0x7f0000000a40)={0x0, 0x0, 0x0}, 0xc) getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000000a80)={0x0}, &(0x7f0000000ac0)=0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) getsockopt$sock_cred(r6, 0xffff, 0x1022, &(0x7f0000001100)={0x0, 0x0}, &(0x7f00000010c0)=0xfffffffffffffc3a) chown(&(0x7f0000000180)='./file0\x00', r7, 0x0) setreuid(0x0, r7) getgroups(0x7, &(0x7f0000001900)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]) r10 = getegid() setregid(r10, r9) sendmsg$unix(r0, &(0x7f0000000c40)={&(0x7f00000000c0)=@file={0xae, 0x0, './file0\x00'}, 0xa, &(0x7f0000000540)=[{&(0x7f0000000240)="6b2e8a8cb28c4d106228013935dde96ba30d4766e1a6cfb77db437d53c29a7a13e8651567da120e63b8478ac3c79bd0900bb204ee1934dbac10d08685b316b5d9ce397ed6eb2dfe75f5be2d2f144071fff98c116d3456bf66032a691d24eeeb6579db97f75c654de50dba505733bbcd1bfa5b3ec3b1f4e55d21593484e9b84845118768c6b70585650902f4f055255f5f976561012e05be07671996aa1f0419148e1040a85c2ec9d362b55f5a23e426be8d0d8663f3895443225f33144ce571ce47d8fe50efa594e1ba045a272", 0xcd}, {&(0x7f0000000340)="929bd06750a112b1a33129c863da89de1c00de2141e72e96c72942498e515adfa821f32f5f63661f69bdb9f0aac1edf28a1cbc21c87008b6b95f9c770ed437cf2bed4d62d90bd1ed616fdea63a18b0c5733fb943e422661ae9a19bffe4b7d25a7f7ad6da97323888e69f88da167802e80f1ad9905478ce2a23469ba80998b2a3fb829675bb3fcdbed4e691199b7d4dfdfb329fea8d433d1305a1993abaaa2d1a914128da397e8f97fbeb0d8a1a0d9525205eea707d1853c53d7ed22475ddfb4625464593fca317e8", 0xc8}, {&(0x7f0000000440)="5bcdb670492e9ab2bad3a4ac0894422f343d2ce2713a3794d3a6615d5acdf3051e9673df9b6236dae75eb9159c2c374e94979d8613ebf6a6c65449351d78aed01098e85b9145051d8c1a9b2da4685cfd5f1398b29fb72aaa2a58aea964961608af099cb9e85c86876725fb743e828b2b07df2f5f9fca9532cb5006d784fdab2e69e74c8d47b3afd6c4e0824b98b63b9bc010bca3249927d8cf444fa53dc7f725dd381950b30a03d5df9ae2560567a418b9517ff5b5339273c7872e29059faddd43", 0xc1}], 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="34000000ffff000001000000", @ANYRES32=0x0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r8, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="18000000ffff000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="18000000ffff000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="28000000ffff000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="18000000ffff000000000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="f5580993b0ed41b7006095bcc9248827adbbfc69c65591d3db0b93079d3752eeb17ae0833eee44a890b7e52357d1f26bb3c23a28dd80cd2b4b462c85071bb2298c706b9d7f9b32f74082b11a9db1bc22d419a9cc2447f436f2336a5d096eba0ca8e3563f37e69b0ed043814a7f4d", @ANYRES32, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="28000000ffff000001000000", @ANYRES32=r0, @ANYRES32, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32, @ANYRES32=r0, @ANYBLOB="18000000ffff000000000000", @ANYRES32=r6, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="18000000ffff000000000000", @ANYRES32, @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="18000000ffff000000000000", @ANYRES32=r5, @ANYRES32=r7, @ANYRES32=r10], 0x12c, 0x2}, 0x408) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x4) r11 = kqueue1(0x4) kevent(r11, &(0x7f0000000100)=[{{r11}, 0xfffffffffffffff6, 0x8b, 0x80, 0x8}, {{r11}, 0xfffffffffffffff6, 0x0, 0x80000000, 0x4, 0x27ffffffd}], 0x86, 0x0, 0xffff4b4d, 0x0) r12 = socket$inet6(0x18, 0x1, 0x0) getsockopt$sock_int(r12, 0xffff, 0x8, &(0x7f0000000000), &(0x7f0000000080)=0x4) write$audio(r0, &(0x7f0000000200)="f5c81ee3", 0x4) mknod(&(0x7f0000000080)='./file0\x00', 0x2000, 0x7) r13 = open(&(0x7f0000001980)='./file0\x00', 0x80, 0xc3) ioctl$TIOCSETD(r13, 0x8004741b, &(0x7f0000000000)=0x7) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x2d28) open(&(0x7f0000000000)='./file0\x00', 0x200, 0x80) sysctl$hw(&(0x7f0000000040)={0x6, 0x11}, 0x2, 0x0, 0x0, 0x0, 0x0) ioctl$FIOASYNC(0xffffffffffffffff, 0x8004667d, &(0x7f0000000040)=0x4) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x4) 332.063346ms ago: executing program 1 (id=178): unveil(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='w\x00') open$dir(&(0x7f00000001c0)='./file0\x00', 0x200, 0x80) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaffffffffffff7bf6b452c540336a184142b850d30800460f003c0064000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="9104010190788000130f42bfa79f291fb14f3be84d42aa00"]) chroot(&(0x7f0000000000)='./file0\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$unix(r0, &(0x7f0000000140)=@file={0x0, 0x0, ""/90}, &(0x7f0000000200)=0x5c) 331.62024ms ago: executing program 3 (id=179): r0 = socket$inet6(0x18, 0x2, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000200)={@local, @broadcast, [], {@ipv6={0x86dd, {0x5, 0x6, "e481e2", 0x10, 0x0, 0x0, @empty, @remote={0xfe, 0x80, '\x00', 0x0}, {[@dstopts={0x3a}, @fragment={0xb6d42b363339708b, 0x0, 0x2, 0x0, 0x0, 0x16, 0x64}]}}}}}) sendto$inet6(r0, 0x0, 0x0, 0x8, &(0x7f0000000180)={0x1c, 0x18, 0x3, 0x8000, "ff02000c00557600"}, 0x1c) 215.532551ms ago: executing program 1 (id=180): munmap(&(0x7f0000000000/0x9000)=nil, 0x9000) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3) open$dir(&(0x7f0000000080)='./file0\x00', 0x200, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x2, 0xcf) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) ioctl$DIOCRDELADDRS(r1, 0xc4504444, &(0x7f00000001c0)={{'./file0\x00', '\x00', 0x0, 0x8}, 0x0, 0x34, 0x0, 0x80000001, 0x21b, 0xffffffff, 0x5515, 0x2, 0x40}) r2 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x81, 0x0) ioctl$DIOCXBEGIN(r2, 0xc0104451, 0x0) ioctl$DIOCSETLIMIT(r2, 0xc0084428, &(0x7f0000000200)={0x2, 0x80000001}) mmap(&(0x7f0000722000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x0) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r3 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000443000/0x2000)=nil) shmat(r3, &(0x7f0000000000/0x800000)=nil, 0x1000) kqueue1(0x10000) socket$inet6(0x18, 0x1, 0x0) pipe(&(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001280)) setrlimit(0x8, &(0x7f0000001ec0)={0x9, 0x37e1790c}) socketpair$unix(0x1, 0x2, 0x0, 0x0) r4 = openat$vmm(0xffffffffffffff9c, 0x0, 0x10000, 0x0) ioctl$VMM_IOC_TERM(r4, 0x80045604, 0x0) setsid() openat$pf(0xffffffffffffff9c, &(0x7f0000000200), 0x30, 0x0) ioctl$DIOCRCLRTABLES(r0, 0xc450443c, &(0x7f0000000380)={{'./file2\x00', './file1\x00', 0x10}, 0x0, 0x0, 0x0, 0x3, 0x800, 0x0, 0x4, 0x2, 0x2}) r5 = shmget$private(0x0, 0x2000, 0x4e6, &(0x7f0000ff6000/0x2000)=nil) openat$vmm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) kqueue1(0x10000) shmat(r5, &(0x7f0000ffd000/0x1000)=nil, 0x2000) r6 = shmat(r5, &(0x7f0000ff5000/0x1000)=nil, 0x2000) shmdt(r6) 213.22528ms ago: executing program 3 (id=181): seteuid(0xffffffffffffffff) getgroups(0x7, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) getsockopt$sock_cred(r2, 0xffff, 0x1022, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000140)=0xc) getresuid(0x0, &(0x7f00000000c0)=0x0, 0x0) setresuid(0x0, 0x0, r4) setsid() r5 = syz_open_pts() r6 = dup2(r5, r5) ioctl$TIOCSCTTY(r6, 0x20007461) ioctl$TIOCSETA(r6, 0x802c7414, &(0x7f0000000000)={0x3, 0x5, 0xfffffc01, 0x494, "2f35b570dd26498b62ac4a6196e913eac1b1549b", 0x2, 0x6}) setresuid(r3, r4, r4) lchown(&(0x7f00000000c0)='./file0\x00', r3, r1) setresgid(0xffffffffffffffff, r0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[{0x70, 0xffff, 0x0, "101a5ee859825d7beb4a5224385c602851414a8e375a5ac40028f8b09c2d605abe36a461f892f0fcee29d31e67ca2d1089be7c35ec12778212d4a9a88f2d6cd86b541f773f7c568d099adc9617723ecf1b010b95be3049b0031977e9794ec9a157fa3d"}], 0x70}, 0x400) syz_emit_ethernet(0x3a, &(0x7f0000000300)=ANY=[@ANYBLOB="83ff10ff00000000000000aa08004608002c00640001103390780001000000000080070305404e224e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5120000490780007"]) r7 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x6000a, 0x0) ioctl$DIOCRADDADDRS(r7, 0xc4504443, &(0x7f0000000400)={{'./file0\x00', './file0\x00', 0x4a, 0x7}, &(0x7f0000000040)=[{@multicast2, '\x00', './file0\x00', 0x6, 0x5, 0x18, 0x7, 0x5f, 0x7f, 0x43}, {@broadcast, '\x00', './file0\x00', 0xb8, 0x9, 0x2, 0x9, 0xc, 0x9, 0x51}], 0x3ff, 0x2, 0x4, 0x9, 0x0, 0x6a, 0x2, 0x2}) seteuid(0xffffffffffffffff) (async) getgroups(0x7, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) (async) getsockopt$sock_cred(r2, 0xffff, 0x1022, &(0x7f0000000100), &(0x7f0000000140)=0xc) (async) getresuid(0x0, &(0x7f00000000c0), 0x0) (async) setresuid(0x0, 0x0, r4) (async) setsid() (async) syz_open_pts() (async) dup2(r5, r5) (async) ioctl$TIOCSCTTY(r6, 0x20007461) (async) ioctl$TIOCSETA(r6, 0x802c7414, &(0x7f0000000000)={0x3, 0x5, 0xfffffc01, 0x494, "2f35b570dd26498b62ac4a6196e913eac1b1549b", 0x2, 0x6}) (async) setresuid(r3, r4, r4) (async) lchown(&(0x7f00000000c0)='./file0\x00', r3, r1) (async) setresgid(0xffffffffffffffff, r0, 0x0) (async) sendmsg(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[{0x70, 0xffff, 0x0, "101a5ee859825d7beb4a5224385c602851414a8e375a5ac40028f8b09c2d605abe36a461f892f0fcee29d31e67ca2d1089be7c35ec12778212d4a9a88f2d6cd86b541f773f7c568d099adc9617723ecf1b010b95be3049b0031977e9794ec9a157fa3d"}], 0x70}, 0x400) (async) syz_emit_ethernet(0x3a, &(0x7f0000000300)=ANY=[@ANYBLOB="83ff10ff00000000000000aa08004608002c00640001103390780001000000000080070305404e224e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5120000490780007"]) (async) openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x6000a, 0x0) (async) ioctl$DIOCRADDADDRS(r7, 0xc4504443, &(0x7f0000000400)={{'./file0\x00', './file0\x00', 0x4a, 0x7}, &(0x7f0000000040)=[{@multicast2, '\x00', './file0\x00', 0x6, 0x5, 0x18, 0x7, 0x5f, 0x7f, 0x43}, {@broadcast, '\x00', './file0\x00', 0xb8, 0x9, 0x2, 0x9, 0xc, 0x9, 0x51}], 0x3ff, 0x2, 0x4, 0x9, 0x0, 0x6a, 0x2, 0x2}) (async) 212.631122ms ago: executing program 1 (id=182): r0 = syz_open_pts() ioctl$TIOCGTSTAMP(r0, 0x4010745b, &(0x7f0000000000)) sysctl$kern(&(0x7f0000000380)={0x1, 0x11}, 0x2, &(0x7f0000000300)="b45021a086ffb4c0c2e8c213321fd2e82bf49bf3b881f425c7ef1fbb131e5bafe09bd2e6c8e0a21b070000000000005119245590ecf9bdddd6ee5a9f6ef3fb2dbec963dc63657d847ce29eedaf9e01ccb48e9b0bdeced40ddfa532aa1f9bb424e098ea42c7fd91e2ec194ec3", 0x0, 0x0, 0x0) r1 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000980), 0x1, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x200, 0x112) ppoll(&(0x7f0000000100)=[{r2, 0x1}], 0x1, 0x0, 0x0) unlink(&(0x7f00000001c0)='./file0\x00') ioctl$VNDIOCCLR(r1, 0x80384601, &(0x7f0000000a40)={0x0, 0x2d1, 0x0, 0x2}) mknod(&(0x7f0000000000)='./file0\x00', 0x2008, 0x1ea8) open(&(0x7f0000000200)='./file0\x00', 0x8000, 0x49) fcntl$lock(0xffffffffffffffff, 0x9, &(0x7f0000000040)={0x1, 0x0, 0xa, 0xca4}) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x4) r3 = open(&(0x7f0000000200)='./file0\x00', 0x9da, 0xc9) r4 = syz_open_pts() openat$bpf(0xffffffffffffff9c, &(0x7f0000001ec0), 0x20, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) closefrom(r5) setrlimit(0x8, &(0x7f0000001ec0)={0x9, 0x37e1790c}) syz_open_pts() write(r4, &(0x7f00000003c0)="30ffb178", 0x4) ioctl$TIOCSETAW(r4, 0x802c7415, &(0x7f0000000100)={0x45, 0x237, 0x2a7, 0xfffffc03, "ff0109e8fa020add00", 0x8, 0x35a85086}) pselect(0x40, &(0x7f0000000040)={0xe0, 0x0, 0x101, 0x22e8, 0x2, 0xffffffff, 0x80000000000b, 0x3}, 0x0, 0x0, 0x0, 0x0) ioctl$DIOCGETQUEUES(r3, 0x80184404, &(0x7f0000000040)={0x8, 0x1, {'\x00', './file1\x00', './file1\x00', './file0\x00', {{0x7, 0x2}, {0x6, 0x13}, 0x4}, {{0x9, 0x2}, {0x7, 0x7ff}, 0x4}, {{0x9, 0x2}, {0x9, 0x1000}, 0x40000000}, {0x7, 0x0, 0x0, 0x4}, 0x0, 0x1, 0x2, 0x7, 0x4}}) open$dir(&(0x7f00000002c0)='./file2\x00', 0x20, 0x0) ioctl$BIOCGHDRCMPLT(r2, 0x40044274, &(0x7f0000000280)) ktrace(&(0x7f0000000000)='./file0\x00', 0x4, 0x1104, 0xffffffffffffffff) setitimer(0x1, &(0x7f0000000240)={{0x0, 0x2c4}, {0x2000000040000, 0xcc21c10}}, 0x0) pread(0xffffffffffffffff, 0x0, 0xfffffffffffffd33, 0x20000000000000e) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd68595b8100102c040000ffffffffffff0000000000000000ff020000000000000000000000000001320001"]) sysctl$hw(&(0x7f0000000240)={0x6, 0x9}, 0x2, &(0x7f0000000280), 0x0, 0x0, 0x0) 210.365561ms ago: executing program 0 (id=183): ioctl$WSDISPLAYIO_WSMOUSED(0xffffffffffffff9c, 0x80185758, &(0x7f0000000000)={0x7, 0x0, {0xfb, 0xac9}}) munmap(&(0x7f0000000000/0x9000)=nil, 0x9000) (async) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000180)={0x3, &(0x7f0000000040)=[{0x0, 0x8, 0x5, 0x9}, {0x33, 0x43, 0x4, 0xf}, {0x6, 0x5, 0xff, 0x8}]}) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000000)={0x0, 0xfffffffd, 0x3, 0x85f574d1dff05191, 0x2, [], [0x400, 0x1, 0x2, 0x7], [0x8, 0x1, 0x7, 0x6], [0xfffffffffffffff8, 0x3, 0x7fff, 0x3]}) (async, rerun: 64) sysctl$kern(&(0x7f0000000000)={0x1, 0x49}, 0x6, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000440)={'tap', 0x0}) (async, rerun: 32) syz_emit_ethernet(0x42, &(0x7f0000000140)=ANY=[]) (async, rerun: 32) r1 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) (rerun: 32) ioctl$WSDISPLAYIO_GETEMULTYPE(r1, 0xc014575e, &(0x7f0000000080)={0xa, './file0\x00'}) 104.642331ms ago: executing program 3 (id=184): setsid() mkdir(&(0x7f0000000400)='./file0\x00', 0x148) seteuid(0xffffffffffffffff) r0 = semget(0x1, 0x7, 0x200) semop(r0, &(0x7f0000000100)=[{0x1, 0x7, 0x1000}], 0x1) socket(0x21, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sysctl$hw(&(0x7f0000000340)={0x6, 0x9}, 0x2, 0x0, 0x0, &(0x7f0000000380), 0x0) getsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0xfea3) setregid(0x0, r2) setregid(r2, 0x0) semctl$SETVAL(r0, 0x1, 0x8, 0x0) r3 = open$dir(&(0x7f00000001c0)='./file0\x00', 0x200, 0x80) pread(r3, 0x0, 0x0, 0x5) sysctl$net_inet_tcp(&(0x7f0000000100)={0x4, 0x2, 0x6, 0x7}, 0x4, 0x0, 0x0, 0x0, 0x0) chown(&(0x7f00000002c0)='./file0\x00', 0x0, 0xffffffffffffffff) sysctl$net_inet_tcp(&(0x7f0000000000)={0x4, 0x2, 0x6, 0x2}, 0x4, &(0x7f0000000040)="18e4906303ef6c1c017d8571c189b1f8246328be21df4af4fceb411505342178ea47121b13fc01e82e6bd9bc3e67ea1cd29a46fcfb63f6983f6f1e698ca6f7c5fd13c97a7af0ac15e030a7a95bb15a0cfef39aea03a43fdeea0736775abc0933f4cc3f3f36ac25a40680edc9d5f8a6a2e5f2acea3c6856503f782aa13b4f454cbc1316c7f87106cc3a3bd79cf350e8dfaa1117858b450963acb8e39038d58d875fc06167d2908ed4c51c112e5ed34a5230de4528f8d532b2ece1f0", &(0x7f0000000140)=0xbb, &(0x7f0000000300)="e2bb43a22e99982d4dd5eaa35e0a71383558fc46f7b17572200367b4fc29b74895d29f2a28d3d43a08d1a119a0caec0221809bfb53c8ea3e8ec2c435a26803ae936b1d451962ccae3a5e167506f18ae4ea535889863a97e17b35832af588cce4d6b31ecdd1d039a1e6431ab84183ed94840a18dc8843dc9f25c4c9c8a2d4e96717abe075b8e262201c2e0dfbfa6a067cfa0e2ec11d838cb8519e069d0426b882c976727eea8a0a2e3e7b403f094beb643f1ad2b8d85fa1fe13de5b8f675dd4ce62e5a52aea", 0xc5) 104.173882ms ago: executing program 2 (id=185): r0 = socket$inet6(0x18, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000080)={0x1c, 0x18, 0x0, 0xfffffffc, "ff8000", 0x4edd}, 0x1c) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x5c}) sysctl$vfs_nfs(&(0x7f0000000000)={0xa, 0x2, 0x2}, 0x3, 0x0, 0x0, 0x0, 0x0) sysctl$kern(&(0x7f0000000000)={0x1, 0x3f}, 0x7, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) setitimer(0x0, &(0x7f0000000040)={{0x100000001, 0x3e}, {0xffffffff}}, 0x0) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) sysctl$net_inet_tcp(&(0x7f0000000000)={0x4, 0x2, 0x6, 0x4}, 0x4, 0x0, 0x0, 0x0, 0x0) r1 = dup(r0) sendto$inet6(r1, &(0x7f0000000240)="d3095a6a6ea10c21", 0x8, 0x0, &(0x7f0000000000)={0x1c, 0x18, 0x3, 0x2d5, "feffffaa8cffffff00000000edffff00"}, 0x1c) r2 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000002300), 0x1, 0x0) r3 = dup(r2) ioctl$TIOCSTAT(r3, 0x4004570f) 102.428708ms ago: executing program 2 (id=186): r0 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = getpid() sysctl$hw(&(0x7f0000000000)={0x6, 0x1d}, 0x2, 0x0, 0x0, 0x0, 0x0) fcntl$setown(r0, 0x6, r1) mlock(&(0x7f0000ff5000/0xb000)=nil, 0xb000) setsid() r2 = syz_open_pts() r3 = dup2(r2, r2) ioctl$TIOCSCTTY(r3, 0x20007461) ioctl$TIOCSPGRP(r3, 0x40047477, &(0x7f0000000080)) pipe(&(0x7f0000000a80)={0xffffffffffffffff}) ioctl$BIOCGDIRFILT(r4, 0x80047476, &(0x7f0000000080)) fcntl$setown(r0, 0x6, r1) 3.621556ms ago: executing program 0 (id=187): open(&(0x7f0000000180)='./file0\x00', 0xa60, 0xcf) (async) ktrace(&(0x7f0000000000)='./file0\x00', 0x1, 0x1104, 0xffffffffffffffff) 2.037396ms ago: executing program 0 (id=188): r0 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) fcntl$setstatus(r0, 0x4, 0x80) unveil(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='x\x00') truncate(&(0x7f00000000c0)='./file0\x00', 0x82) r1 = open(&(0x7f0000000100)='./file0\x00', 0x80, 0x2a) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r1, 0xc01864b0, &(0x7f0000000140)={0x0, 0x0, 0x6, 0x0, 0x5b4}) ioctl$DRM_IOCTL_MODE_DIRTYFB(r1, 0xc01864b1, &(0x7f00000001c0)={r3, 0x0, 0xb6, 0x6, &(0x7f0000000180)=[{0x6, 0x9, 0x6, 0x5361}, {0x40, 0xe, 0x0, 0x622}, {0xffff, 0x2e00, 0x2, 0x85}, {0xfc00, 0x40, 0x1, 0x8}, {0x3, 0x3, 0x7ff, 0xff3}, {0x1, 0x1, 0x2000, 0x1000}]}) getpeername(r1, &(0x7f0000000200)=@in6, &(0x7f0000000240)=0x1c) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f00000002c0)={&(0x7f0000000280)=[0x0, 0x0, 0x0], 0x3}) ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f0000000300)={r5, r2, r4, 0x4, 0xba6, 0x2, 0x2cd, 0x800, 0x4ac, 0xc2d4, 0x9, 0x8}) fchflags(r0, 0x0) ioctl$DIOCRCLRADDRS(r1, 0xc4504442, &(0x7f0000000340)={{'./file0\x00', './file0\x00', 0x1, 0x5}, 0x0, 0x0, 0x0, 0x400, 0x2, 0xc8a5, 0x80000001, 0x34, 0x8}) r6 = openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f00000007c0), 0x20000, 0x0) ioctl$KDDISABIO(r6, 0x20004b3d) r7 = semget(0x2, 0x0, 0x14) semctl$GETZCNT(r7, 0x0, 0x7, &(0x7f0000000800)=""/182) sendmsg(r1, &(0x7f0000000c40)={&(0x7f00000008c0)=@in={0x10, 0x2, 0x0, 0x10001}, 0x10, &(0x7f0000000a40)=[{&(0x7f0000000900)="0122550b717f441f51dbf3450533055d1f49fc423a0127729384af4b8ff6536a089560d00407cd20645b8a5327a86e81eceebf09c139a30af8d88776ade86dc3c2f82f8ffb5ea3a9a3f28205ba9f83a0e2", 0x51}, {&(0x7f0000000980)="887b3f42a5b6f6e66c435f32d0e1dbaf76eb5d1d24a59643dc3978750cefabbe7f8a017602332883083c32576157f9a5c821f2eb6e805f04c6de6290c50dc614dbc4bcf92634bb8351c7099a22c1615dcd5a76f06c65a095057727d2246bf3fe34113de8d12f1d05a9ccb27392d0a6d2f2a705e1bda280b96983b037273dd45de068457bdf563a2fba3d8dc35f16dde5b068a1c9b49db543ee3f374ef994bc73017288153d5d5b3088d2382aca1274a8951a1fdf92", 0xb5}], 0x2, &(0x7f0000000a80)=[{0xac, 0x1, 0x0, "eeded24f83f03da95c4e6bd621e03dcff93b6d932dbb14f94f2bba403ae32f28785de29e3be49f63a0586dfa3e3c19994d359ae4fa7c059506091b443ce5b3784b63a875d8693703d6afad6ce49b5981e622caf5de7574e9a58b15a7f9303c8657b5d2f89019736ef93a7264dc0360ade8811e2ae67ed339cc4bb723c744c795e5e9052b881ae8589cca7b411cc52c550746b0eea7c6102014dc85b48e"}, {0xa0, 0x1, 0x8, "ebdf77513fc191f17ff6c800766c6051c011a59ac23b34fc978ddebe6d69526d2c6cdfeace0551c0d84ef621d06efdb87d5136885218c369c1e3a31dc12900d9f28f3ba5dff5b05ce3e0b60a74ee50332e8144ce06337fa05895049966dcc3095e25188e324eb0bda821bc7634a3217646fb2c61078cbe41a0b22e7b727b289d7bc02a4243276c9a3b3a0e9b29575567d7b42005"}, {0x4c, 0x1, 0x7, "774a748f580a3e99485633bd6ab483691d6f6a0933cef76826d65ba859b54fa42a056a3d0f94aa08c9344353781a2d82e4411bdd7a266123e5c59950f27af7"}], 0x198}, 0x8) faccessat(r1, &(0x7f0000000c80)='./file0\x00', 0x1, 0x0) writev(r6, &(0x7f0000000d80)=[{&(0x7f0000000cc0)="03cd63558441ea80107b806ccb349ef0688df36907f1bce1fd1d8a794c3fcc6d184c8ffca5f8951a2d8595471c568cf24f7f86eb5949b37691c438d3108362bf065119", 0x43}, {&(0x7f0000000d40)="d3f4e56d21c8883991f3f9ffe0f4d69e", 0x10}], 0x2) ioctl$WSDISPLAYIO_WSMOUSED(r6, 0x80185758, &(0x7f0000000dc0)={0xbd3, 0x4, {0x5, 0xffffffffffffffff}}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r1, 0xc00864c0, &(0x7f0000000e00)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000e40)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r6, 0xc00864c0, &(0x7f0000000e80)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r6, 0xc00864c0, &(0x7f0000000ec0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r6, 0xc00864bf, &(0x7f0000000f00)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(r1, 0xc01864c2, &(0x7f0000000f40)={0x0, 0x1, r0, 0x0, 0xab5}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(0xffffffffffffff9c, 0xc01064c5, &(0x7f0000000fc0)={&(0x7f0000000f80)=[r8, r9, r10, r11, r12, 0x0, r13], 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001040)={&(0x7f0000001000)=[0x7f, 0x1, 0x2da, 0x1, 0x800], 0x5, 0x30000}) readv(r0, &(0x7f00000022c0)=[{&(0x7f0000001080)=""/109, 0x6d}, {&(0x7f0000001100)=""/68, 0x44}, {&(0x7f0000001180)=""/132, 0x84}, {&(0x7f0000001240)=""/15, 0xf}, {&(0x7f0000001280)=""/4096, 0x1000}, {&(0x7f0000002280)=""/45, 0x2d}], 0x6) sendto$unix(r6, &(0x7f0000002340)="1858ee19875c7e4ec3cec43b49b7b65f7ddde51d969238ca2bfe338aa07db45e2c3f331677a132060188c45d59eaedc2f81b7c96ae1a46a8fd1288670ba834e47fd83c773b28732cbc3c5f6eab79f9fb0279c8ad04a9836c2e869916ebbe2b828bcf016d93ed3a8df53d646d82d1519adf058112b7e421fc8d7fafe3f4e1c3b6e9743ef66fcb0f17ee2cedab0bdf518f772f37dd450ae47eeb7795490edf2dd0c4e75bdf2576", 0xa6, 0x200, &(0x7f0000002400)=@abs={0x3, 0x1, 0x0, 0x0}, 0x8) 317.473µs ago: executing program 2 (id=189): setsockopt$sock_linger(0xffffffffffffff9c, 0xffff, 0x80, &(0x7f0000000040)={0x8, 0xe9e}, 0x8) sysctl$vfs_nfs(&(0x7f0000000000)={0xa, 0x2, 0x1}, 0x3, 0x0, 0x0, 0x0, 0x0) sysctl$kern(&(0x7f0000000000)={0x1, 0x50}, 0x2, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x2000, 0x33a5) r0 = open(&(0x7f0000001980)='./file0\x00', 0x80, 0x39) ioctl$DIOCGETSTATES(r0, 0xc0104419, &(0x7f00000008c0)={0x7, &(0x7f0000000180)=[{0x0, ""/16, [{[@v6=@ipv4, @v4=@broadcast]}, {[@v6=@ipv4={""/10, ""/2, @local}, @v6=@ipv4={""/10, ""/2, @multicast2}]}], {}, {}, @v4=@remote}, {0x0, ""/16, [{[@v6=@loopback, @v6=@loopback]}, {[@v4=@multicast2, @v6=@remote]}]}, {0x0, ""/16, [{[@v6=@local, @v6=@empty]}, {[@v6=@loopback, @v4=@loopback]}], {}, {}, @v6=@empty}, {0x0, ""/16, [{[@v6=@local, @v4=@remote]}, {[@v4=@loopback, @v6=@ipv4={""/10, ""/2, @rand_addr}]}], {}, {}, @v4=@remote}, {0x0, ""/16, [{[@v6=@ipv4={""/10, ""/2, @loopback}]}, {[@v6=@loopback, @v4=@local]}]}, {0x0, ""/16, [{[@v4=@local, @v6=@empty]}, {[@v4, @v6=@ipv4={""/10, ""/2, @remote}]}], {}, {}, @v6=@local}, {0x0, ""/16, [{[@v6=@mcast1, @v6=@local]}, {[@v4=@multicast1, @v6=@local]}], {}, {}, @v6}]}) r1 = open(&(0x7f0000001980)='./file0\x00', 0x80, 0xc3) ioctl$TIOCCONS(r1, 0xc0a86b03, &(0x7f0000000140)=0x1) ioctl$TIOCCONS(r0, 0xc0a86b06, &(0x7f0000000140)=0x80000000) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x4) sysctl$vfs_nfs(&(0x7f0000000000)={0xa, 0x2, 0x3}, 0x3, &(0x7f0000000040), 0x0, 0x0, 0x0) 0s ago: executing program 4 (id=190): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt(r0, 0xffff, 0x40, 0x0, 0x0) sysctl$kern(&(0x7f00000000c0)={0x1, 0x38}, 0x2, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.204' (ED25519) to the list of known hosts. pckbd_enable: command error OpenBSD/amd64 (ci-openbsd-kasan-3.us-central1-f.c.syzkaller.internal) (tty00) login: pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error Connection to 10.128.0.204 closed by remote host. malloc(): allocation too large, type = 127, size = 4294967304 pckbd_enable: command error OpenBSD/amd64 (ci-openbsd-kasan-3.us-central1-f.c.syzkaller.internal) (tty00) login: KASAN: invalid write of 8 bytes at 0xffff800001d563c0 from pc 0xffffffff81dc0ec9 KASAN: first bad byte at 0xffff800001d563c0 (+0); shadow 0xfd: pool use-after-free (or unallocated item) KASAN: 0xffff800001d563c0 is 64 bytes inside the 112-byte item [0xffff800001d56380..0xffff800001d563f0) in pool 'shmpl' KASAN: allocated at: #0 pool_get+0x770 #1 shmget_allocate_segment+0x23b #2 sys_shmget+0x260 #3 syscall+0x1089 #4 Xsyscall+0x128 KASAN: freed at: #0 pool_put+0x79 #1 shm_deallocate_segment+0x85 #2 sys_shmctl+0x51e #3 syscall+0x1089 #4 Xsyscall+0x128 KASAN: pc: shm_delete_mapping+0x1f9 KASAN: call trace: #0 __asan_store8_noabort+0xc0 #1 shm_delete_mapping+0x1f9 #2 syscall+0x1089 #3 Xsyscall+0x128 KASAN: shadow of 0xffff800001d56280..0xffff800001d56500 (1 cell = 8 bytes): 0xffff800001d56280: fd fd fd fd 08 08 fd fd fd fd fd fd fd fd fd fd 0xffff800001d56300: fd fd 08 08 fd fd fd fd fd fd fd fd fd fd fd fd >0xffff800001d56380: 08 08 fd fd fd fd fd fd[fd]fd fd fd fd fd 08 08 0xffff800001d56400: 08 08 08 08 08 08 08 08 08 08 08 08 08 08 fd fd 0xffff800001d56480: fd fd fd fd fd fd fd fd fd fd 08 08 fd fd fd fd KASAN: legend: 00 valid; 01..07 partial; fb malloc redzone; fc malloc freed; fd pool freed; fe kmem; fa global; f1..f4/f8 stack/scope panic: Caught invalid memory access at ffff800001d563c0 size 8 op 1 Stopped at db_enter+0x17: popq %rbp TID PID UID PRFLAGS PFLAGS CPU COMMAND 377614 29620 0 0 0 0 syz-executor *190191 49642 0 0 0x4000000 1K syz-executor db_enter() at db_enter+0x17 panic(ffffffff84636510) at panic+0x270 __asan_store8_noabort(ffff800001d563c0) at __asan_store8_noabort+0xe4 shm_delete_mapping(ffff800001c4c9a0,ffff800001c4b008) at shm_delete_mapping+0x1f9 syscall(ffff80003bb70cf0) at syscall+0x1089 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x1fd5981b580, count: 9 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{1}> ddb{1}> set $lines = 0 ddb{1}> set $maxwidth = 0 ddb{1}> show panic *cpu1: Caught invalid memory access at ffff800001d563c0 size 8 op 1 ddb{1}> show kasan KASAN: invalid write of 8 bytes at 0xffff800001d563c0 from pc 0xffffffff81dc0ec9 KASAN: first bad byte at 0xffff800001d563c0 (+0); shadow 0xfd: pool use-after-free (or unallocated item) KASAN: 0xffff800001d563c0 is 64 bytes inside the 112-byte item [0xffff800001d56380..0xffff800001d563f0) in pool 'shmpl' KASAN: allocated at: #0 pool_get+0x770 #1 shmget_allocate_segment+0x23b #2 sys_shmget+0x260 #3 syscall+0x1089 #4 Xsyscall+0x128 KASAN: freed at: #0 pool_put+0x79 #1 shm_deallocate_segment+0x85 #2 sys_shmctl+0x51e #3 syscall+0x1089 #4 Xsyscall+0x128 KASAN: pc: shm_delete_mapping+0x1f9 KASAN: call trace: #0 __asan_store8_noabort+0xc0 #1 shm_delete_mapping+0x1f9 #2 syscall+0x1089 #3 Xsyscall+0x128 KASAN: shadow of 0xffff800001d56280..0xffff800001d56500 (1 cell = 8 bytes): 0xffff800001d56280: fd fd fd fd 08 08 fd fd fd fd fd fd fd fd fd fd 0xffff800001d56300: fd fd 08 08 fd fd fd fd fd fd fd fd fd fd fd fd >0xffff800001d56380: 08 08 fd fd fd fd fd fd[fd]fd fd fd fd fd 08 08 0xffff800001d56400: 08 08 08 08 08 08 08 08 08 08 08 08 08 08 fd fd 0xffff800001d56480: fd fd fd fd fd fd fd fd fd fd 08 08 fd fd fd fd KASAN: legend: 00 valid; 01..07 partial; fb malloc redzone; fc malloc freed; fd pool freed; fe kmem; fa global; f1..f4/f8 stack/scope ddb{1}> trace db_enter() at db_enter+0x17 panic(ffffffff84636510) at panic+0x270 __asan_store8_noabort(ffff800001d563c0) at __asan_store8_noabort+0xe4 shm_delete_mapping(ffff800001c4c9a0,ffff800001c4b008) at shm_delete_mapping+0x1f9 syscall(ffff80003bb70cf0) at syscall+0x1089 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x1fd5981b580, count: -6 ddb{1}> show registers rdi 0 rsi 0x1 rbp 0xffff80003bb709b0 rbx 0xffff80003bb70a20 rdx 0 rcx 0xffff800028fe3ff0 rax 0 r8 0x101010101010101 r9 0x8080808080808080 r10 0xffff80003bb70798 r11 0xffffffff831c6730 x86_bus_space_io_read_1 r12 0xffffffff84636510 __rodata_start+0x9e510 r13 0xffff800028fe4c08 r14 0xffff800028fe4e07 r15 0x1 rip 0xffffffff82e89947 db_enter+0x17 cs 0x8 rflags 0x246 rsp 0xffff80003bb709b0 ss 0x10 db_enter+0x17: popq %rbp ddb{1}> show proc PROC (syz-executor) tid=190191 pid=49642 tcnt=5 stat=onproc flags process=0 proc=4000000 runpri=32, usrpri=86, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff800031ae34e0,0xffff800031ae8a98 process=0xffff800031ae79e0 user=0xffff80003bb65000, vmspace=0xffff800001c4c9a0 estcpu=36, cpticks=20, pctcpu=0.0, user=0, sys=20, intr=0 ddb{1}> ps PID TID PPID UID S PRLAGS PFLAGS WAIT COMMAND 29620 377614 32375 0 7 0 0 syz-executor 49642 110010 42145 0 2 0 0 syz-executor 49642 186317 42145 0 2 0 0x4000000 syz-executor 49642 142973 42145 0 2 0 0x4000000 syz-executor *49642 190191 42145 0 7 0 0x4000000 syz-executor 49642 135796 42145 0 2 0 0x4000000 syz-executor 63308 490735 74394 0 2 0x10 0 syz-executor 63308 294835 74394 0 3 0x10 0x4000080 fsleep syz-executor 45332 35092 28144 0 2 0 0 syz-executor 45332 255309 28144 0 3 0 0x4000080 fsleep syz-executor 88939 208640 27631 0 2 0x2 0 ifconfig 27631 451607 91094 0 3 0x100002 0x88 sigsusp sh 24958 159954 69158 0 2 0 0 syz-executor 24958 405621 69158 0 3 0 0x4000080 fsleep syz-executor 91094 323659 4411 0 3 0x2 0x80 wait syz-executor 58014 256503 1 0 3 0x100003 0x80 ttyin getty 95200 17438 4411 0 3 0x2 0x80 wait syz-executor 70567 415894 4411 0 3 0x2 0x80 wait syz-executor 42145 280720 4411 0 3 0x2 0x80 nanoslp syz-executor 74394 248788 4411 0 3 0x2 0x80 nanoslp syz-executor 32375 21801 4411 0 3 0x2 0x80 nanoslp syz-executor 69158 100993 4411 0 3 0x2 0x80 nanoslp syz-executor 28144 165375 4411 0 3 0x2 0x80 nanoslp syz-executor 4411 57035 1 0 3 0x2 0x80 kqread syz-executor 21907 367010 1 0 3 0x10000002 0x88 kqread sshd 66652 156925 43544 74 3 0x1100012 0x80 bpf pflogd 43544 111899 1 0 3 0 0x80 sbwait pflogd 4847 175978 27000 73 3 0x1100010 0x80 kqread syslogd 27000 170005 1 0 3 0x100002 0x80 sbwait syslogd 10337 346028 1 0 3 0x100000 0x80 kqread resolvd 89454 301493 65148 77 3 0x100012 0x80 kqread dhcpleased 53883 123606 65148 77 3 0x100012 0x80 kqread dhcpleased 65148 15648 1 0 3 0 0x80 kqread dhcpleased 46964 16622 0 0 3 0x14000 0x200 bored smr 23757 69541 0 0 2 0x14000 0x200 zerothread 16393 116754 0 0 3 0x14000 0x200 aiodoned aiodoned 64695 421260 0 0 3 0x14000 0x200 syncer update 13345 471641 0 0 3 0x14000 0x200 cleaner cleaner 71634 366968 0 0 3 0x14000 0x200 reaper reaper 21045 294295 0 0 3 0x14000 0x200 pgdaemon pagedaemon 72554 148360 0 0 3 0x14000 0x200 bored viomb 9846 112093 0 0 3 0x14000 0x40000200 acpi0 acpi0 49090 488742 0 0 3 0x14000 0x40000200 idle1 31000 379680 0 0 3 0x14000 0x200 bored softnet1 1493 69046 0 0 2 0x14000 0x200 softnet0 18623 437838 0 0 3 0x14000 0x200 bored systqmp 16648 378790 0 0 3 0x14000 0x200 bored systq 10506 442683 0 0 3 0x14000 0x200 tmoslp softclockmp 51725 384843 0 0 3 0x14000 0x40000200 tmoslp softclock 1827 271029 0 0 3 0x14000 0x40000200 idle0 1 54750 0 0 3 0x2 0x80 wait init 0 0 -1 0 3 0x10000 0x200 scheduler swapper ddb{1}> show all locks Process 49642 (syz-executor) thread 0xffff800031ae3ca8 (190191) ddb{1}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 11061 12290K 12457K 166960K 12424 0 pcb 17 24K 24K 166960K 43 0 rtable 173 9K 13K 166960K 383 0 pf 28 20K 24K 166960K 64 0 ifaddr 31 8K 12K 166960K 57 0 ifgroup 43 2K 2K 166960K 79 0 sysctl 4 1K 13K 166960K 9 0 counters 64 41K 43K 166960K 84 0 ioctlops 0 0K 4K 166960K 1521 0 iov 0 0K 8K 166960K 6 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1305 84K 84K 166960K 1631 0 UFS quota 1 36K 36K 166960K 1 0 UFS mount 5 44K 44K 166960K 5 0 shm 3 6K 10K 166960K 11 0 VM map 2 1K 1K 166960K 2 0 sem 8 0K 0K 166960K 10 0 dirhash 12 2K 2K 166960K 12 0 ACPI 1734 201K 292K 166960K 11964 0 file desc 19 69K 93K 166960K 344 0 sigio 0 0K 0K 166960K 3 0 proc 78 145K 176K 166960K 644 0 subproc 72 9K 9K 166960K 90 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 20K 20K 166960K 1 0 ip_moptions 0 0K 0K 166960K 3 0 in_multi 66 4K 7K 166960K 110 0 ether_multi 1 0K 0K 166960K 1 0 mrt 0 0K 0K 166960K 11 0 ISOFS mount 1 36K 36K 166960K 1 0 MSDOSFS mount 1 20K 20K 166960K 1 0 ttys 85 587K 587K 166960K 85 0 exec 0 0K 2K 166960K 441 0 fusefs mount 1 36K 36K 166960K 1 0 tdb 3 1K 1K 166960K 3 0 VM swap 14 124K 124K 166960K 15 0 UVM amap 215 221K 252K 166960K 4970 0 UVM aobj 13 4K 4K 166960K 14 0 pinsyscall 1063 1797K 1797K 166960K 1541 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 NDP 9 0K 1K 166960K 37 0 temp 36 9166K 9486K 166960K 4603 0 kqueue 12 36K 52K 166960K 58 0 SYN cache 2 16K 16K 166960K 2 0 ddb{1}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 28 0 0 1 0 1 1 0 8 0 rtpcb 120 35 0 32 1 0 1 1 0 8 0 rtentry 176 123 0 45 6 0 6 6 0 8 0 unpcb 144 176 0 159 1 0 1 1 0 8 0 syncache 336 4 0 4 2 2 0 1 0 8 0 tcpcb 736 23 0 19 1 0 1 1 0 8 0 arp 136 21 0 8 1 0 1 1 0 8 0 inpcb 328 162 0 153 2 0 2 2 0 8 1 nd6 152 27 0 12 1 0 1 1 0 8 0 kcovpl 48 10 0 2 1 0 1 1 0 8 0 ppxss 1192 3 0 3 1 0 1 1 0 8 1 pffrag 232 6 0 3 1 0 1 1 0 482 0 pffrnode 88 6 0 3 1 0 1 1 0 8 0 pffrent 40 9 0 6 1 0 1 1 0 8 0 pfosfp 40 1428 0 1005 5 0 5 5 0 8 0 pfosfpen 112 1428 0 714 21 0 21 21 0 8 0 pfstitem 24 29 0 3 1 0 1 1 0 8 0 pfstkey 128 29 0 3 1 0 1 1 0 8 0 pfstate 448 29 0 3 3 0 3 3 0 8 0 pfrule 1360 22 0 17 2 1 1 2 0 8 0 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 499 0 179 29 0 29 29 0 8 6 art_table 40 500 0 179 5 0 5 5 0 8 0 art_node 32 123 0 52 1 0 1 1 0 8 0 semapl 72 8 0 2 1 0 1 1 0 8 0 shmpl 112 11 0 1 1 0 1 1 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino2pl 256 1993 0 518 93 0 93 93 0 8 0 ffsino 296 1993 0 518 114 0 114 114 0 8 0 nchpl 144 2445 0 733 64 0 64 64 0 8 0 vnodes 216 2202 0 0 123 0 123 123 0 8 0 namei 1024 8299 0 8299 2 1 1 1 0 8 1 percpumem 16 58 0 10 1 0 1 1 0 8 0 kstatmem 264 41 0 20 2 0 2 2 0 8 0 scxspl 216 8308 0 8308 11 3 8 8 1 8 8 plimitpl 152 83 0 68 1 0 1 1 0 8 0 sigapl 424 659 0 612 7 1 6 7 0 8 0 knotepl 120 142 0 0 5 0 5 5 0 8 0 kqueuepl 224 85 0 77 1 0 1 1 0 8 0 pipepl 344 161 0 134 3 0 3 3 0 8 0 fdescpl 528 643 0 613 3 0 3 3 0 8 0 filepl 160 3431 0 3211 15 2 13 15 0 8 2 lockfpl 104 107 0 104 1 0 1 1 0 8 0 lockfspl 48 49 0 46 1 0 1 1 0 8 0 sessionpl 144 39 0 30 1 0 1 1 0 8 0 pgrppl 48 50 0 33 1 0 1 1 0 8 0 ucredpl 104 602 0 587 1 0 1 1 0 8 0 zombiepl 144 615 0 612 1 0 1 1 0 8 0 processpl 1232 659 0 612 5 0 5 5 0 8 0 procpl 664 1010 0 956 6 0 6 6 0 8 0 sosppl 176 1 0 1 1 0 1 1 0 8 1 sockpl 752 381 0 352 4 0 4 4 0 8 0 mcl64k 65536 2 0 0 1 0 1 1 0 8 0 mcl8k 8192 2 0 0 1 0 1 1 0 8 0 mcl4k 4096 110 0 0 14 0 14 14 0 8 0 mcl2k 2048 19 0 0 3 0 3 3 0 8 0 mextrefs 64 19 0 0 1 0 1 1 0 8 0 mtagpl 96 2 0 0 1 0 1 1 0 8 0 mbufpl 256 155 0 0 10 0 10 10 0 8 0 bufpl 272 2632 0 172 164 0 164 164 0 8 0 anonpl 32 5152 0 0 42 0 42 42 0 222 0 amapchunkpl 152 14724 0 14284 25 1 24 24 0 158 4 amappl16 200 2167 0 2140 5 3 2 5 0 8 0 amappl15 192 6 0 6 2 2 0 1 0 8 0 amappl14 184 444 0 443 1 0 1 1 0 8 0 amappl13 176 128 0 118 1 0 1 1 0 8 0 amappl12 168 900 0 873 2 0 2 2 0 8 0 amappl11 160 23 0 23 2 1 1 1 0 8 1 amappl10 152 68 0 53 1 0 1 1 0 8 0 amappl9 144 277 0 277 1 1 0 1 0 8 0 amappl8 136 119 0 116 1 0 1 1 0 8 0 amappl7 128 155 0 142 1 0 1 1 0 8 0 amappl6 120 167 0 165 1 0 1 1 0 8 0 amappl5 112 97 0 88 1 0 1 1 0 8 0 amappl4 104 328 0 305 1 0 1 1 0 8 0 amappl3 96 2785 0 2679 4 0 4 4 0 8 0 amappl2 88 564 0 510 2 0 2 2 0 8 0 amappl1 80 11650 0 11201 15 1 14 15 0 8 3 amappl 88 4185 0 4038 5 0 5 5 0 92 1 uvmvnodes 80 100 0 0 3 0 3 3 0 8 0 dma4096 4096 2 0 2 2 2 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 8 0 8 3 2 1 1 0 8 1 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 13 0 1 1 0 1 1 0 8 0 uaddrrnd 24 643 0 613 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 643 0 613 1 0 1 1 0 8 0 vmmpekpl 168 7529 0 7488 3 0 3 3 0 8 0 vmmpepl 168 50308 0 48657 87 0 87 87 0 357 7 vmsppl 488 642 0 613 5 1 4 5 0 8 0 rwobjpl 80 17481 0 16549 25 2 23 24 0 8 1 pdppl 4096 1295 0 1226 97 28 69 87 0 8 0 pvpl 32 11420 0 0 95 2 93 93 0 265 0 pmappl 256 642 0 613 3 0 3 3 0 8 0 extentpl 40 47 0 29 1 0 1 1 0 8 0 phpool 120 435 0 36 13 0 13 13 0 8 0 ddb{1}> machine ddbcpu 0 Stopped at x86_ipi_db+0x19: leave x86_ipi_db(ffffffff851c3ff0) at x86_ipi_db+0x19 x86_ipi_handler() at x86_ipi_handler+0x112 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __mp_lock(ffffffff85435340) at __mp_lock+0x272 softintr_dispatch(0) at softintr_dispatch+0x215 dosoftint(0) at dosoftint+0x7b Xsoftclock() at Xsoftclock+0x27 __mp_lock(ffffffff85435340) at __mp_lock+0x272 end trace frame: 0x0, count: 7 ddb{0}> trace x86_ipi_db(ffffffff851c3ff0) at x86_ipi_db+0x19 x86_ipi_handler() at x86_ipi_handler+0x112 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __mp_lock(ffffffff85435340) at __mp_lock+0x272 softintr_dispatch(0) at softintr_dispatch+0x215 dosoftint(0) at dosoftint+0x7b Xsoftclock() at Xsoftclock+0x27 __mp_lock(ffffffff85435340) at __mp_lock+0x272 end trace frame: 0x0, count: -8 ddb{0}> machine ddbcpu 1 Stopped at db_enter+0x17: popq %rbp db_enter() at db_enter+0x17 panic(ffffffff84636510) at panic+0x270 __asan_store8_noabort(ffff800001d563c0) at __asan_store8_noabort+0xe4 shm_delete_mapping(ffff800001c4c9a0,ffff800001c4b008) at shm_delete_mapping+0x1f9 syscall(ffff80003bb70cf0) at syscall+0x1089 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x1fd5981b580, count: 9 ddb{1}> trace db_enter() at db_enter+0x17 panic(ffffffff84636510) at panic+0x270 __asan_store8_noabort(ffff800001d563c0) at __asan_store8_noabort+0xe4 shm_delete_mapping(ffff800001c4c9a0,ffff800001c4b008) at shm_delete_mapping+0x1f9 syscall(ffff80003bb70cf0) at syscall+0x1089 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x1fd5981b580, count: -6 ddb{1}>