last executing test programs: 7.857318314s ago: executing program 5 (id=155): syz_emit_ethernet(0x77, &(0x7f0000000080)={@local, @local, [{[{0x88a8, 0x0, 0x0, 0x4}], {0x8100, 0x5, 0x1}}], {@ipv6={0x86dd, {0x4, 0x6, "483ad7", 0x39, 0x3b, 0x6, @local={0xfe, 0x80, '\x00', 0x0}, @rand_addr="e52f99c804a216f93743efed879cfa48", {[], @tcp={{0x2, 0x1, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x20, 0x8, 0x0, 0x1}, {"bc7130c981dcfbb174d23a0293022987fd1cb2e63ef01aa060a700"/37}}}}}}}) 7.839828464s ago: executing program 7 (id=156): mlock(&(0x7f0000ff5000/0xb000)=nil, 0xb000) minherit(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2) sysctl$net_inet6_ip6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) ktrace(0x0, 0x4, 0x210a, 0x0) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000080)={0x3, &(0x7f00000001c0)=[{0x28, 0x68, 0x4, 0x7}, {0x4, 0x7, 0x4, 0x3}, {0xfffe, 0x0, 0x1c, 0x3}]}) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000440)={'tap', 0x0}) syz_emit_ethernet(0x2a, &(0x7f0000001600)=ANY=[]) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) 5.636078885s ago: executing program 5 (id=158): kqueue1(0x10000) r0 = syz_open_pts() fchmod(r0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x200, 0xcf) r2 = socket$inet6(0x18, 0x1, 0x6) shutdown(r2, 0x2) listen(r2, 0x68) fcntl$setown(r1, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000000)={0x1c, 0x18, 0x0, 0x8, "72d20e2e69af0c2c5253bc7912824d5f", 0x2}, 0x1c) openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) seteuid(0xffffffffffffffff) r3 = semget$private(0x0, 0x2, 0x201) getuid() getgroups(0x0, 0x0) semctl$IPC_STAT(r3, 0x0, 0x2, &(0x7f0000000100)=""/52) ioctl$WSKBDIO_SETMODE(0xffffffffffffffff, 0x80045713, &(0x7f0000000040)=0x1) 5.635809318s ago: executing program 7 (id=159): r0 = kqueue1(0x10004) sysctl$net_inet6_ip6(&(0x7f0000000100)={0x4, 0x18, 0x29, 0x29}, 0x4, 0x0, 0x0, 0x0, 0x0) r1 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000002300), 0x1, 0x0) ioctl$WSKBDIO_SETMAP(r1, 0x8010570e, &(0x7f0000000040)={0x0, 0x0}) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x20007461) seteuid(0xffffffffffffffff) r2 = semget$private(0x0, 0x3, 0x2b1) semctl$IPC_SET(r2, 0x0, 0x1, &(0x7f0000000180)={{0x0, 0x0, 0x0, 0x0, 0x100, 0x8, 0x0, 0x0, 0x9}, 0x0, 0x6, 0x0, 0x0, 0xc, 0x0, 0x2f}) semctl$GETNCNT(r2, 0x4, 0x3, 0x0) semctl$GETVAL(r2, 0x1, 0x5, &(0x7f0000000200)=""/148) kevent(r0, &(0x7f0000000000), 0x100efd, 0x0, 0xffff4b51, 0x0) madvise(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x2) minherit(&(0x7f0000211000/0x4000)=nil, 0x4000, 0x3) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) r3 = socket$inet6(0x18, 0x3, 0x7) getsockopt$sock_int(r3, 0xffff, 0x1008, &(0x7f0000000200), &(0x7f00000001c0)=0x4) 5.069977822s ago: executing program 5 (id=172): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000001ec0), 0x0, 0x0) ioctl$BIOCGBLEN(r0, 0x40044266, &(0x7f0000000540)) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000280)={0x1, &(0x7f0000000100)=[{0x7154, 0x4, 0x3}]}) r1 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000040), 0x48129, 0x0) r2 = kqueue1(0x10000) r3 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$DIOCCHANGERULE(r2, 0xcd60441a, &(0x7f0000000600)={0x8, 0x1, 0xd7, './file0\x00', './file0\x00', 0x0, "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"}) ioctl$DIOCXBEGIN(r3, 0xc0104451, &(0x7f00000004c0)={0x1, 0x7fffffff, &(0x7f0000000080)=[{0x0, './file0\x00', 0x5e61}]}) mquery(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x6) r4 = open(&(0x7f0000000180)='./file0\x00', 0x200, 0xcf) pselect(0x40, &(0x7f0000000000)={0x49f, 0x1, 0x8000000000000001, 0x1, 0x9, 0x6, 0x8, 0x8}, 0x0, 0x0, 0x0, 0x0) sysctl$net_pipex(&(0x7f0000000000)={0x4, 0x1f, 0x2}, 0x3, 0x0, 0x0, 0x0, 0x0) sysctl$kern(&(0x7f0000000000)={0x1, 0x49}, 0x6, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x2011, r4, 0x0) ioctl$DIOCCLRSTATUS(r4, 0xc0284416, &(0x7f00000013c0)={'./file0\x00', &(0x7f0000001380)=""/2, 0xfffffff7, 0x3, 0x0, 0x7fff}) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000500), 0x800, 0x0) kevent(r2, &(0x7f0000001400)=[{{r1}, 0xfffffffffffffffa, 0x81, 0x40, 0xffffffffffff223c, 0x1}, {{r2}, 0xfffffffffffffff8, 0x2, 0x40, 0x4f88, 0x8}, {{r4}, 0xfffffffffffffff7, 0x2, 0x1, 0x68, 0x6}, {{r5}, 0xfffffffffffffffe, 0x4, 0x1, 0x9, 0x2e}, {{r3}, 0xfffffffffffffffe, 0xcf, 0x40000000, 0x81, 0x3}, {{r3}, 0xa, 0xc0, 0x4, 0x5, 0x8}, {{r2}, 0xfffffffffffffff6, 0x20, 0x10, 0x9, 0x4}], 0xf00, 0x0, 0xffff4b50, 0x0) 3.822419401s ago: executing program 7 (id=173): mknod(&(0x7f0000000040)='./file0\x00', 0x2000, 0x33a5) (async, rerun: 64) r0 = open(&(0x7f0000001980)='./file0\x00', 0x80, 0xc3) (rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r2, &(0x7f0000002e40)={{0x0, 0x0, &(0x7f0000002dc0)=[{&(0x7f0000000240)=""/178, 0xb2}], 0x1, 0x0}, 0x7}, 0x38, 0x5002, 0x0) (async) sendmsg$unix(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000680)="ef61e55c3b0674a3f204f9223ab92b5b01e44e33e75efac56f058c520e2f6ca7045e45300b994fa0", 0x28}, {&(0x7f0000000340)="43bdbf83b4cb5eb9f759c6df62da6c88d9216acc7a98011a1a8e63ca681e9f49923bc7863b1096532d6ef574a61c3a98f76739db000000e775dcfa87d5a561638cc0a07c72c861452d83073bf635085e81db4d83", 0x54}, {&(0x7f0000000100)="425746c89f9739240653e4877c42929f3ffa94ddcc", 0x15}], 0x3, 0x0, 0x0, 0x409}, 0xc) (async) ioctl$TIOCCONS(r0, 0xc0a86b05, &(0x7f0000000140)=0x1) 3.449702416s ago: executing program 5 (id=184): r0 = openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$WSDISPLAYIO_GVIDEO(r0, 0x40045744, &(0x7f0000000040)) fsync(r0) r1 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$WSKBDIO_SETDEFAULTBELL(r1, 0x80105705, &(0x7f00000000c0)={0x4, 0x7fffffff, 0x7fff, 0xd}) closefrom(r1) read(r0, &(0x7f0000000100)=""/23, 0x17) unveil(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='c\x00') ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000200)={0x5, &(0x7f00000001c0)=[{0x1, 0x6, 0x0, 0x7}, {0x2, 0x4, 0x2, 0xdbe}, {0x40, 0x6, 0xb}, {0x8, 0x6, 0x5}, {0x4, 0x4, 0xd6, 0x8}]}) ioctl$DIOCRADDADDRS(r0, 0xc4504443, &(0x7f00000003c0)={{'./file0\x00', './file0\x00', 0x80, 0xff}, &(0x7f0000000240)=[{@multicast2, '\x00', './file0\x00', 0x5, 0xc, 0x18, 0x3, 0x2, 0x2}, {@rand_addr=0x7ff, '\x00', './file0\x00', 0x1, 0xf, 0x1a, 0xa0, 0x3, 0xb, 0x1}, {@local={0xac, 0x14, 0x0}, '\x00', './file0\x00', 0x6, 0x1, 0x18, 0x0, 0x1, 0x7}, {@remote={0xac, 0x14, 0x0}, '\x00', './file0\x00', 0x6, 0xfffd, 0x18, 0x7, 0x6, 0xf, 0xa}, {@multicast2, '\x00', './file1\x00', 0x4, 0x4, 0x2, 0x88, 0xc, 0x9, 0x6}, {@broadcast, '\x00', './file0\x00', 0x3, 0x9, 0x18, 0x3, 0x6, 0x9, 0x80}, {@remote={0xac, 0x14, 0x0}, '\x00', './file0\x00', 0x0, 0x1, 0xc, 0x1, 0x5, 0x7f, 0xf9}], 0xeb9e, 0x7, 0x7, 0xba9a, 0xd3a, 0xd, 0x0, 0x1000000}) getsockopt$sock_int(r0, 0xffff, 0x100b, &(0x7f0000000840), &(0x7f0000000880)=0x4) sysctl$net_inet_udp(&(0x7f00000008c0)={0x4, 0x2, 0x11, 0x5}, 0x4, &(0x7f0000000900)="5cbd92aa0c244ec5334607a5ba954f8571793676808a39614d2b720b34cf7cfdd93e885c9e39694438c9341e9efb20c45b8c7449c66078b470cb8afbc01c0e206aabc732187013da482f1aec005a", &(0x7f0000000980)=0x4e, &(0x7f00000009c0)="49b72be4730ff7f1d9a535e8ec6d6a9a45c0c043601e71cfb96ecb18d78779defb780b9324f89f0aab0255d445f3294d2273ba331cab4fc9a8f089c554ba80554d5ef4ac2219131fa48e4455dea56558023819206e190c97ec88d4fb211db11e2539d2d22886eaad8a99011bc470e6906261a830bec9fafc0afe3cfa29f66ccf72e9b6e5bc1dae51682375919f847193c2363c02ae66fa61aa2679594c563523d8fb3a767aa890d857c7759afd86022a40936776c85b4a0961ccd6cdcea3dbd52799be3a980e29a3a1ce7de717346f6976305c375231b1d46a5906d386a28d", 0xdf) r2 = open$dir(&(0x7f0000000ac0)='./file0\x00', 0x20000, 0x100) r3 = getpid() ktrace(&(0x7f0000000b00)='./file1\x00', 0x1, 0x40002000, r3) closefrom(r2) socketpair(0x18, 0x4, 0x52, &(0x7f0000000b40)={0xffffffffffffffff}) getpeername(r4, &(0x7f0000000b80)=@in, &(0x7f0000000bc0)=0x10) ioctl$AUDIO_GETSTATUS(r0, 0x40204128, &(0x7f0000000c00)) r5 = openat$pf(0xffffffffffffff9c, &(0x7f0000000c40), 0x400, 0x0) ioctl$DIOCRGETASTATS(r5, 0xc4504447, &(0x7f0000000d00)={{'./file0\x00', './file2\x00', 0x8, 0x4}, &(0x7f0000000c80)=[{@remote={0xac, 0x14, 0x0}, '\x00', './file0\x00', 0x3b9f33c2, 0x8, 0x2, 0x4, 0xd, 0x4, 0xff}, {@multicast1, '\x00', './file0\x00', 0x1, 0x0, 0x2, 0x3, 0x74, 0x8, 0x5}], 0x7fff, 0x2, 0x4, 0xfffffff0, 0x5b, 0x80000000, 0x52, 0xfffffffe}) syz_open_pts() getpeername$unix(r4, &(0x7f0000001180)=@file={0x0, 0x0, ""/19}, &(0x7f00000011c0)=0x15) r6 = getppid() ktrace(&(0x7f0000001200)='./file0\x00', 0x2, 0x1000, r6) r7 = openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000001240), 0x8200, 0x0) ioctl$BIOCGSTATS(r7, 0x4008426f, &(0x7f0000001280)) ioctl$DIOCIGETIFACES(r0, 0xc0284457, &(0x7f0000001340)={'./file1\x00', &(0x7f00000012c0)=""/90, 0x80, 0x6, 0x3, 0x4}) ioctl$DIOCGETSTATUS(r0, 0xc2084415, &(0x7f0000001380)) mknod(&(0x7f00000015c0)='./file2\x00', 0x1, 0x26e1) 3.449479531s ago: executing program 7 (id=185): madvise(&(0x7f0000001000/0x9000)=nil, 0x9000, 0x2) openat$wskbd(0xffffffffffffff9c, &(0x7f0000002300), 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000004200)) sysctl$net_inet_ip(&(0x7f0000000000)={0x4, 0x2, 0x0, 0x5}, 0x4, 0x0, 0x0, 0x0, 0x0) 3.449251519s ago: executing program 7 (id=186): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000240), 0x40, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000180)={'tap', 0x0}) ioctl$BIOCPROMISC(r1, 0x20004269) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$BIOCPROMISC(r0, 0x20004269) closefrom(r0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x200, 0xcf) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x2011, r2, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000180)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd6f75184a00402c0000d5e6b7b40700000200001a00000000fe8000000000000000000000000000aa030090780ffeff006800000000642c32d87c98be9a000000000000000000"]) r3 = socket$inet6(0x18, 0x3, 0x7) getsockopt$sock_timeval(r3, 0xffff, 0x1005, 0x0, 0x0) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x6) sysctl$net_pipex(&(0x7f0000000000)={0x4, 0x12, 0x2}, 0x3, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$DIOCKILLSTATES(r4, 0x0, &(0x7f0000000280)={{0x2, 0x1}, 0x4, '\x00', 0x1ff, {@any={'\x00', 0x0, 0x6, 0x7}, [0x6, 0x1], 0x8, 0x6, 0x6}, {@addrmask={@v4, @v4=@remote={0xac, 0x14, 0x0}, 0x0, 0x0, 0x34}, [0xfff9], 0x5, 0x9, 0x6}, './file0\x00', './file0\x00', 0x1000, 0xdc54}) sysctl$hw(&(0x7f0000000180)={0x6, 0xf}, 0x2, &(0x7f0000000240), 0x0, 0x0, 0x0) sysctl$hw(&(0x7f0000000080)={0x6, 0x1a}, 0x2, &(0x7f00000000c0)='VaR', &(0x7f0000000100)=0x3, &(0x7f0000000140)="e5e0e52b4df21dc52020dbf0c1c1cdf927703fafe0e84cd033d4f639bde0a77edcc0a047adca4743aaa80523c0", 0x2d) 2.360880615s ago: executing program 7 (id=188): r0 = syz_open_pts() write(r0, &(0x7f0000000140)="2775137bddb2b1eecd27b287aca0213a460a6155d2db12f1102dcd7ff429f586ba5d49626c454277f80653eda3d07ec54d86f177a3c301f802270f1b14c90287b2b8b296146198d5d84a2cfa32e09557b6cde4c9d7c8c7771869217a330e3b7f5b05bd27d117d865777a74011b44d4934eba69dc5d712d6ba832e856f1c9d6336174ee22bee7", 0x86) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)) (async) pselect(0x40, &(0x7f0000000000)={0x1, 0x217, 0x4, 0x6, 0x1834, 0x140, 0x5, 0x5}, 0x0, &(0x7f0000000100)={0x7fff, 0x654, 0x10001, 0xffffffffffffffff, 0x2, 0x5, 0x7fffffff, 0x7fff}, 0x0, 0x0) (async) symlinkat(&(0x7f00000003c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00') (async) rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0/../file0\x00') (async) ioctl$TIOCSETVERAUTH(r0, 0x8004741c, &(0x7f0000000040)=0xfffffffb) (async) select(0x40, &(0x7f0000000080)={0x2dc1189, 0x2, 0x8, 0x0, 0x5, 0x400, 0xa0, 0x8}, &(0x7f00000000c0)={0x6, 0x2, 0x2, 0x400, 0x4, 0xac97, 0x8, 0x7f}, &(0x7f0000000200)={0xeaec, 0x10000, 0x6, 0xab, 0x4, 0x4073, 0xffffffff, 0x7}, &(0x7f0000000240)={0x6415, 0x10a67f67}) socket$inet6(0x18, 0x2, 0x6e) 1.986780451s ago: executing program 5 (id=197): r0 = kqueue() (async, rerun: 32) pipe(&(0x7f0000000a80)) (async, rerun: 32) r1 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000002140), 0x40000, 0x0) ioctl$FIOGETOWN(r1, 0x40047477, 0x0) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$BIOCSETF(r2, 0x80104267, &(0x7f0000000080)={0x3, &(0x7f0000000100)=[{0x0, 0x40, 0x6, 0x8}, {0x48, 0xa, 0x5, 0x206}, {0x6, 0xe, 0x8, 0x6}]}) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) (async) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[]) (async, rerun: 64) pselect(0x40, &(0x7f0000000080)={0xe0, 0xfffffffffffffffd, 0x101, 0x9, 0x2, 0xffffffff, 0x9, 0x2000000000000000}, &(0x7f00000000c0)={0xaa, 0xffffffffffffff00, 0x800, 0x6, 0x0, 0xf, 0x20000400, 0x10001}, 0x0, 0x0, 0x0) (rerun: 64) mknod(&(0x7f0000000080)='./file0\x00', 0x2000, 0x5be7) (async) open$dir(0x0, 0x200, 0x4) open(&(0x7f0000000180)='./file0\x00', 0x200, 0xef) (async) syz_emit_ethernet(0xcd, &(0x7f0000000180)={@local, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x2, 0x36, 0xbf, 0x66, 0x0, 0x5, 0x1, 0x0, @multicast1, @local={0xac, 0x14, 0x0}}, @generic="247bdbdd8c5efdfee2f8e7b85a2447379d88cccd83a94ad17a7bd035205d6190b9e0b4d92cd21ecfa003ea47eb2f913f44116d56ce27a6dcd64e9645e9ee89a9938af1e0d768c361b9bf31ceb4c3d517684f2137b55c3c61ad715fdfadf83a3d79892c48f0d6f250b9b7521192008df2edd931b8009e179d51a467cde1ed90f65483586ecaed64a0539d7040815e3f0175a5a2b7c439446496ffcb89834b36da0d42a391ed11d2b04ddd00"}}}}) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) (async) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0x80047308, &(0x7f0000001840)={0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff}) closefrom(r5) (async, rerun: 32) r6 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000780), 0x10, 0x0) (rerun: 32) ioctl$BIOCSETF(r6, 0x80104267, &(0x7f0000000100)={0x2, &(0x7f0000000000)=[{0xc0, 0xf2, 0x6, 0x3}, {0x206, 0x8, 0x3, 0x7}]}) (async) sendmmsg(r4, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x0, 0x0}}, 0x38, 0x406) (async, rerun: 32) closefrom(r0) (rerun: 32) syz_extract_tcp_res(&(0x7f0000000000), 0x0, 0x8001) 1.7908988s ago: executing program 6 (id=200): sysctl$kern(&(0x7f00000011c0)={0x1, 0x58}, 0x2, 0x0, &(0x7f0000001240), 0x0, 0x0) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) sysctl$kern(&(0x7f00000011c0)={0x1, 0x48}, 0x2, &(0x7f0000001200), &(0x7f0000001240), 0x0, 0x0) sysctl$net_inet6_icmp6(&(0x7f0000000000)={0x4, 0x18, 0x3a, 0xb}, 0x4, &(0x7f0000000040), 0x0, 0x0, 0x0) 1.790535847s ago: executing program 6 (id=201): r0 = kqueue1(0x10000) kevent(r0, &(0x7f0000000040)=[{{r0}, 0xfffffffffffffffa, 0xc3, 0x2, 0x1, 0xfffffffffffffffd}], 0x6, 0x0, 0x4, 0x0) sysctl$ddb(&(0x7f0000000000)={0x9, 0x5}, 0x2, 0x0, 0x0, &(0x7f0000001100), 0x0) (async) kevent(r0, &(0x7f0000000040), 0xf00, 0x0, 0xffff4b51, 0x0) 1.142102956s ago: executing program 6 (id=208): mkdir(&(0x7f0000000400)='./file0\x00', 0x120) seteuid(0xffffffffffffffff) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100, 0x1) sysctl$ddb(&(0x7f0000005c00)={0x9, 0x5}, 0x2, &(0x7f0000005c40)="f8b57274", &(0x7f0000000000)=0x4, &(0x7f0000005d00)='\x00\x00\x00\x00', 0x4) 1.139995492s ago: executing program 0 (id=209): ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f0000000000)={0x3, 0x5, 0x3, 0x494, "2f35b570dd26498b62ac4a6196e913eac1b1549b", 0x2, 0x6}) (async) openat$vnd(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) (async) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) (async) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0) (async) pipe2(&(0x7f0000000040), 0x4) semctl$SETVAL(0x0, 0x0, 0x8, &(0x7f0000000040)=0xa) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x4) (async) sysctl$net_inet_tcp(&(0x7f0000000040)={0x4, 0x2, 0x6, 0x12}, 0x4, 0x0, 0x0, 0x0, 0x0) (async) sysctl$kern(&(0x7f0000000000)={0x1, 0x3d}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) (async) sysctl$vfs_nfs(&(0x7f0000000000)={0xa, 0x2, 0x1}, 0x3, 0x0, 0x0, 0x0, 0x0) (async) r0 = open(&(0x7f0000000180)='./file0\x00', 0x200, 0xcf) sysctl$net_inet_tcp(&(0x7f0000000000)={0x4, 0x2, 0x6, 0x14}, 0x4, 0x0, 0x0, &(0x7f0000000040)="283e36a0", 0x4) (async) closefrom(r0) (async) getdents(r0, 0x0, 0x0) ioctl$WSMUXIO_LIST_DEVICES(r0, 0xc1045763, &(0x7f0000000200)={0xfffffff9, [{0x1, 0x2}, {0x3}, {0x1, 0x4}, {0x3, 0x4}, {0x2, 0x4}, {0x2, 0xf}, {0x2, 0x10000}, {0x2, 0xf}, {0x0, 0xa}, {0x3, 0xe}, {0x1, 0x5}, {0x2, 0x7}, {0x3, 0xe000000}, {0x3, 0x400}, {0x3, 0x8}, {0x2, 0xfff}, {0x2}, {0x1, 0x7}, {0x2, 0x2b73}, {0x2, 0x1}, {0x1, 0x400}, {0x1, 0x5}, {0x1, 0x4}, {0x1, 0x1}, {0x2, 0x2}, {0x3, 0x7}, {0x3, 0x1000}, {0x3, 0x81}, {0x3, 0x3ff}, {0x2, 0xb}, {0x1}, {0x1, 0x3}]}) (async) mquery(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x0, 0xffffffffffffffff, 0x1000) sysctl$vfs_nfs(&(0x7f0000000040)={0xa, 0x2, 0x1}, 0x3, &(0x7f00000000c0)="e9977ab8bb5d66750f4d289ae96f32c6be77683e204c0032fb7aca07df2f6e9b60b02be56bd0eb017bb39ed7c7dfef9ddb490d7da103a08716ccbde5cd38e21732aa072e8526b8cae92bf7497f6c62b899482240c6c59fb69b86ff7de3f39b37399aa60ceb4b09af5aac0e60568c24e122eaf0add634d037718ccc65a024a2ba7c05dda4ce982fe9a22e9e2598e1dafa6e809070d1899eda9743300a119d73e1e8a115fd33c634403dc22551e3f1585fe959be02a8c4", &(0x7f0000000180)=0xb6, &(0x7f00000001c0)="b12f2c2e6b7c1b590e9e917489c92fd9f6f61fc8a44cbaf877d6c053e13c82769ab68ca8e84b4f006f7059135d62553879b39057f4a7ccf6", 0x38) (async) r1 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) preadv(r1, &(0x7f0000001640)=[{&(0x7f0000000000)=""/30, 0x1e}], 0x1, 0xe000000000000000) 1.136416752s ago: executing program 2 (id=211): r0 = syz_open_pts() syz_open_pts() r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) r2 = dup(r1) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000000)={'tap', 0x0}) mkdir(&(0x7f0000000640)='./file0\x00', 0x40) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) ioctl$BIOCSETF(r3, 0x80104267, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x7, 0x2, 0xb}, {0x3, 0x4, 0x5, 0x1}, {0xd9e6, 0xa4, 0x3, 0x6}]}) ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f0000000580)={'tap', 0x0}) syz_emit_ethernet(0xe, &(0x7f00000000c0)={@remote, @remote, [], {@generic={0x888e}}}) socket$inet6(0x18, 0x1, 0x6) r4 = open$dir(&(0x7f0000000000)='./file0\x00', 0x80, 0x12) mkfifoat(r4, &(0x7f00000000c0)='./file1\x00', 0x180) rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000100)='./file1\x00', 0x204) pselect(0x23, &(0x7f0000000040)={0x1000000000000001, 0x474, 0xf, 0x1, 0xda8, 0x6, 0x4000000000005, 0x8}, &(0x7f00000000c0)={0x8001, 0x1d46, 0x101, 0x9, 0x4, 0x9, 0x7, 0x2}, &(0x7f0000000100)={0x8000000000000001, 0x3, 0x200, 0xe, 0x7, 0x5, 0x5, 0x7fffffff}, &(0x7f0000000180)={0x4, 0x5}, &(0x7f00000001c0)={0x100}) rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file1\x00') mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) writev(r2, &(0x7f0000002700)=[{0x0}], 0x1) syz_open_pts() r5 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$VMM_IOC_RESETCPU(r5, 0x82405605, &(0x7f0000000200)={0x0, 0x6, {[0xd51, 0x5, 0xdb, 0x2, 0x9, 0xffffffff, 0x2000, 0x650, 0x1, 0x400, 0xa, 0x80000001, 0x4, 0x8, 0x7, 0x6, 0x3, 0x9], [0x7, 0x10, 0x10001, 0x6, 0x40, 0x4, 0x1, 0xffffffffffffff56, 0x1aca, 0xfffffffffffffff9], [0x4, 0x3, 0x6b5a, 0x6, 0x8, 0x40, 0x6], [0x8, 0x10000, 0x5, 0x0, 0x8000000000000001, 0x57], [{0x6b3, 0xd8, 0x10, 0xf}, {0x6, 0x3b, 0xfffff172, 0xa0}, {0x4, 0xaf73, 0x3, 0x1}, {0x7, 0x5, 0x6, 0x1e}, {0x9f, 0x8, 0x5, 0x8000000000000000}, {0x6a5, 0x3, 0x200, 0xe0000000000000}, {0x4, 0x80000000, 0x5ba5, 0x4}, {0x6, 0x10, 0x8000, 0xfffffffffffffbff}], {0x10, 0x7, 0xffff0000, 0x6}, {0xf, 0x6, 0x0, 0x47}}}) fchown(r0, 0x0, 0x0) 1.094231216s ago: executing program 0 (id=212): mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x672) r0 = open(&(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80, 0x1b1) read(r0, &(0x7f0000000140)=""/79, 0x4f) unveil(0x0, &(0x7f0000000080)='w\x00') getgroups(0x7, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]) r4 = msgget(0x2, 0x203) msgrcv(r4, 0x0, 0x0, 0x0, 0x1000) msgsnd(r4, 0x0, 0x30, 0x800) setresgid(r3, r2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) getsockopt$sock_cred(r5, 0xffff, 0x1022, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) chown(&(0x7f0000000040)='./file0\x00', r6, r7) getgroups(0x8, &(0x7f0000000040)=[r7, 0x0, 0x0, 0x0, r3, 0x0, 0x0, r1]) setresgid(0x0, r9, r8) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x8001) mkfifo(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40) rename(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000540)='./file0\x00') mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x672) (async) open(&(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80, 0x1b1) (async) read(r0, &(0x7f0000000140)=""/79, 0x4f) (async) unveil(0x0, &(0x7f0000000080)='w\x00') (async) getgroups(0x7, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]) (async) msgget(0x2, 0x203) (async) msgrcv(r4, 0x0, 0x0, 0x0, 0x1000) (async) msgsnd(r4, 0x0, 0x30, 0x800) (async) setresgid(r3, r2, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) (async) getsockopt$sock_cred(r5, 0xffff, 0x1022, &(0x7f0000000100), &(0x7f0000000140)=0xc) (async) chown(&(0x7f0000000040)='./file0\x00', r6, r7) (async) getgroups(0x8, &(0x7f0000000040)=[r7, 0x0, 0x0, 0x0, r3, 0x0, 0x0, r1]) (async) setresgid(0x0, r9, r8) (async) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x8001) (async) mkfifo(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40) (async) rename(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000540)='./file0\x00') (async) 1.060377868s ago: executing program 6 (id=213): mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x674) r0 = open(&(0x7f0000001980)='./file0\x00', 0x80, 0x0) r1 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x2c1, 0x0) ioctl$BIOCSETF(r2, 0x80104267, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x7, 0x5, 0xf9, 0x1}, {0x4, 0x4, 0x1, 0x1}, {0xd9e6, 0x9, 0x3, 0x7}]}) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000580)={'tap', 0x0}) syz_emit_ethernet(0x4a, &(0x7f00000026c0)={@local, @empty, [], {@ipv6={0x86dd, {0x7, 0x6, '\x00', 0x14, 0x3c, 0x38, @empty, @local={0xfe, 0x80, '\x00', 0x0}, {[], @tcp={{0x2, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x9, 0x0, 0x6}}}}}}}) munmap(&(0x7f0000000000/0x9000)=nil, 0x9000) r3 = shmget$private(0x0, 0x3000, 0x2ea, &(0x7f0000469000/0x3000)=nil) shmat(r3, &(0x7f0000000000/0x800000)=nil, 0x1000) listen(0xffffffffffffffff, 0xfffffff7) poll(0x0, 0x0, 0x53b6) ioctl$DIOCSETIFFLAG(r1, 0xc0284459, &(0x7f00000006c0)={'./file0\x00', 0x0, 0x9, 0x7, 0x704b, 0xffffffff}) r4 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r4, &(0x7f00000001c0)=[{&(0x7f0000000280)="47eef977e06dde66b3d8653183a345056f4cb4e900c5a874b412ab9fad09ed632d29ebbbbda70221817038677f5f93d85756e63ce0c6090c0b18a954f8d7f3a1c50bfb872914912192aae1267c1cac48dc26402be7bc20b1d99029a9bf56592cd31b713495f3bbb5af38fee51ce077421851da784dd843fe6f51ddb6eb0d335e60fcbec82280421fceedbb38bc5048677f87a85b75c40df1476db29d51964e3e0f452b", 0xa3}], 0x1) unveil(0x0, &(0x7f0000000000)='x\x00') sysctl$net_inet_tcp(&(0x7f0000000080)={0x4, 0x2, 0x6, 0x2}, 0x4, 0x0, &(0x7f0000003a00), 0x0, 0x0) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) sysctl$net_inet_tcp(&(0x7f0000000080)={0x4, 0x2, 0x6, 0x4}, 0x4, &(0x7f00000000c0), &(0x7f0000003a00), 0x0, 0x0) munmap(&(0x7f0000000000/0x9000)=nil, 0x9000) r5 = shmget$private(0x0, 0x3000, 0x2ea, &(0x7f0000ffd000/0x3000)=nil) mknod(&(0x7f0000000040)='./file0\x00', 0x2000, 0x33a5) r6 = open(&(0x7f0000001980)='./file0\x00', 0x80, 0x39) r7 = open(&(0x7f0000001980)='./file0\x00', 0x80, 0xc3) ioctl$TIOCCONS(r7, 0xc0a86b03, &(0x7f0000000140)=0x1) ioctl$TIOCCONS(r6, 0xc0a86b06, &(0x7f0000000140)=0x80000000) shmat(r5, &(0x7f0000000000/0x800000)=nil, 0x1000) ioctl$TIOCSETA(r0, 0x80047466, &(0x7f0000000500)={0x3, 0xffffffff, 0x519, 0x6, "4522ab1c59b3f1beca704340880e1a5213513f4c", 0x2c1, 0x4}) syz_emit_ethernet(0x5a, &(0x7f0000000300)={@local, @local, [], {@ipv6={0x86dd, {0xf, 0x6, "61184a", 0x24, 0x6, 0x1, @remote={0xfe, 0x80, '\x00', 0x0}, @local={0xfe, 0x80, '\x00', 0x0}, {[], @udp={{0x2, 0x2, 0x8}, {"cac7b94a86028ed6d6535d2243d0609e29473a29b9fcaab67a2575fb"}}}}}}}) ioctl$WSDISPLAYIO_LDFONT(r0, 0x8058574d, &(0x7f00000000c0)={'./file0\x00', 0x0, 0x6, 0x2, 0x0, 0x60e, 0xe25, 0x81, 0x1, 0x2, 0x7fffffff, 0xb1}) 936.799725ms ago: executing program 1 (id=214): socket$inet6(0x18, 0x3, 0x0) syz_emit_ethernet(0x1000e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa63f6557d72b786dd65e481e2ffd8030000ffff00000000000000000000000000ff020000000000000000000000000001"]) 934.065666ms ago: executing program 2 (id=215): r0 = msgget$private(0x0, 0x220) getresuid(&(0x7f0000001140), &(0x7f0000001180), &(0x7f00000011c0)=0x0) r2 = getgid() sysctl$net_inet_udp(&(0x7f0000002080)={0x4, 0x12, 0x11, 0x5}, 0x4, 0x0, 0x0, 0x0, 0x0) fstatat(0xffffffffffffffff, &(0x7f0000001200)='./file0\x00', &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6) getresgid(&(0x7f00000012c0), &(0x7f0000001300), &(0x7f0000001340)=0x0) r5 = getsid(0xffffffffffffffff) r6 = syz_open_pts() mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4) dup2(r6, r6) r7 = fcntl$getown(r6, 0x5) r8 = socket$inet6(0x18, 0x3, 0x7) fcntl$setown(r8, 0x6, r7) msgctl$IPC_SET(r0, 0x1, &(0x7f0000001380)={{r1, r2, r3, r4, 0xc4, 0x7, 0x0, 0x0, 0x401}, 0x0, 0x0, 0x10, 0x2, 0x8, r5, r7, 0xd, 0x0, 0x1ff, 0x0, 0x2}) r9 = getuid() munmap(&(0x7f0000000000/0x9000)=nil, 0x9000) r10 = shmget$private(0x0, 0x3000, 0x2ea, &(0x7f0000ffd000/0x3000)=nil) shmat(r10, &(0x7f0000000000/0x800000)=nil, 0x1000) r11 = socket$inet(0x2, 0x3, 0x2) setsockopt(r11, 0x0, 0x16, &(0x7f0000000140)="9a350700", 0x4) r12 = geteuid() setuid(r12) getgroups(0x3, &(0x7f0000001040)=[0x0, 0x0, 0xffffffffffffffff]) r14 = getsid(0xffffffffffffffff) r15 = getpgid(r14) msgctl$IPC_SET(r0, 0x1, &(0x7f0000001080)={{r9, 0x0, r12, r13, 0x80, 0x3, 0x0, 0x0, 0x73d}, 0x0, 0x0, 0x3, 0x10, 0x5, 0x0, r15, 0x1, 0x0, 0x10, 0x0, 0x7be00000}) msgrcv(0x0, &(0x7f0000000000)={0x0, ""/4096}, 0x1008, 0x0, 0x1800) msgctl$IPC_SET(r0, 0x1, 0xfffffffffffffffe) 931.059276ms ago: executing program 2 (id=216): wait4(0xffffffffffffffff, 0x0, 0x1, 0x0) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DIOCNATLOOK(r1, 0xc0504417, &(0x7f0000000ec0)={@v6=@ipv4={'\x00', '\xff\xff', @multicast2}, @v6=@empty, @v4=@local={0xac, 0x14, 0x0}, @v6=@ipv4={'\x00', '\xff\xff', @rand_addr=0xe}, 0x7, 0x8008, 0x1, 0x1, 0x2, 0x7, 0x18, 0x6}) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000080)={0x3, &(0x7f00000001c0)=[{0x2c, 0x68, 0x4, 0x7}, {0x4, 0x7, 0x4, 0x3}, {0xfffa, 0x0, 0x1c, 0x3}]}) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000440)={'tap', 0x0}) r2 = openat$pf(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1) fcntl$lock(r2, 0x9, &(0x7f0000000240)={0x3, 0x2, 0x3, 0x1}) ioctl$DIOCSETREASS(0xffffffffffffffff, 0xc004445c, &(0x7f0000000000)) syz_emit_ethernet(0x2a, &(0x7f0000001600)=ANY=[]) 846.785945ms ago: executing program 4 (id=217): r0 = openat$klog(0xffffffffffffff9c, &(0x7f0000000580), 0x1, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x8, 0x1000) r1 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0) sysctl$hw(0x0, 0x0, &(0x7f00000005c0)="e5867ecdf75530316376221c2d4b85ae0d9cb2d2f7", &(0x7f0000000640)=0x15, 0x0, 0x0) ioctl$WSMOUSEIO_SETPARAMS(r1, 0x80105728, &(0x7f0000000200)={&(0x7f00000001c0)=[{0x101}], 0x1}) munmap(&(0x7f0000000000/0x9000)=nil, 0x9000) r2 = shmget$private(0x0, 0x3000, 0x2ea, &(0x7f0000001000/0x3000)=nil) shmat(r2, &(0x7f0000001000/0x2000)=nil, 0x0) mlock(&(0x7f0000002000/0x1000)=nil, 0x1000) madvise(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x4) getsockopt$sock_int(0xffffffffffffffff, 0xffff, 0x200, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$TIOCNXCL(r3, 0x4004667f) socket$unix(0x1, 0x1, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) close(r4) ioctl$VMM_IOC_WRITEREGS(0xffffffffffffffff, 0xc0205609, &(0x7f0000000040)={0x6, 0x4, 0x100, {[0x8, 0x4, 0x6f6, 0x7, 0x1, 0xfffffffffffffffa, 0x6, 0x6, 0x21, 0x10001, 0x3, 0xdde0, 0x9, 0x1, 0x8, 0x2, 0x1, 0x6], [0x5, 0x7, 0xfffffffffffffffa, 0xd, 0xffff, 0x9, 0x3, 0x100000000, 0x6, 0x81], [0x6, 0x7, 0x4, 0x3ff, 0x8, 0x7, 0x1], [0x7ff, 0x8, 0x1, 0x7cee, 0x0, 0x7], [{0x0, 0x5, 0xffffff01, 0x80}, {0x2, 0x4, 0x6, 0x67}, {0x5, 0x4, 0x6, 0x2c2}, {0x9, 0x6, 0x30, 0x5}, {0x4, 0x3, 0x7, 0x4}, {0x9557, 0x9, 0x5, 0x33f}, {0x47, 0x8000, 0x9, 0x8}, {0x4, 0x3, 0x1e, 0x8}], {0x40, 0x8, 0x3, 0x5}, {0x0, 0x9, 0x7}}}) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x40}, {0xffffffffffffffff, 0x1a0}, {0xffffffffffffffff, 0x10}, {0xffffffffffffffff, 0x1}], 0x55, 0x1) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x40}, {0xffffffffffffffff, 0x1a0}, {0xffffffffffffffff, 0x10}, {0xffffffffffffffff, 0x1}], 0x55, 0x1) ioctl$LIOCSFD(r0, 0x40047477, &(0x7f00000005c0)) sysctl$kern(&(0x7f0000000040)={0x1, 0x18}, 0x2, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd65e481e200003c000000000000000000000000000000000000000000bb"]) 845.809099ms ago: executing program 2 (id=218): setitimer(0x0, &(0x7f0000000100)={{0x7, 0x2}, {0x0, 0x6}}, &(0x7f0000000140)) sysctl$vfs_nfs(&(0x7f0000007240)={0xa, 0x2, 0x2}, 0x3, &(0x7f0000007280)="7076acc5", &(0x7f0000007340)=0x4, &(0x7f0000007380)="c73c6e22", 0x4) 845.228061ms ago: executing program 3 (id=219): r0 = socket$inet6(0x18, 0x2, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffff9c, 0xc00c642d, &(0x7f0000000040)={0x4000f7, 0x9, r0}) accept$inet6(r1, 0x0, &(0x7f0000000080)) mkdir(&(0x7f0000000400)='./file0\x00', 0x150) unveil(&(0x7f0000000100)='.\x00', &(0x7f0000000240)='r\x00') unveil(&(0x7f0000000180)='./file0/file0\x00', &(0x7f0000000000)='x\x00') open$dir(&(0x7f00000002c0)='./file0\x00', 0x2, 0x3c) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x18, 0x3, 0x332, "89000000000000000000f059d95000", 0x63}, 0x76) 844.172076ms ago: executing program 4 (id=220): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setstatus(r0, 0x4, 0x40) sysctl$net_inet_tcp(&(0x7f0000000040)={0x4, 0x2, 0x6, 0x16}, 0x4, &(0x7f00000002c0)="6d913be9a6a0da682a93589df01a337072fd1de2658b7d004e8c8ac96f5997601691e9aba1bba357fdd28744583d0a5473d5ce5023e772a242aa46055a462a7c4f93e6a7bf91b19d4ce50623528f1392b1babbd4e7cafe6fa240910e9f92c9cfb1ec06417f7fc4b0affc42ee2de5d8a832a2e67d52870691ac0abbca13fd93d0fa8056a49a7ff2a413dae90136cf912f456a0f", &(0x7f0000000380)=0x93, &(0x7f00000003c0)="923c9f6facf444a99c72465a0f3ddc83303ff40de36470f67ff8826fb064a4f2cbcf003c5375106eb3446ce5c00206023361bfd3f87e71728239433498c850b2f1f71bd6be6e12aa7dad6309db20ab123c68f9ccfe3b660bc462f460f4ae06f3309e558f0a01b07783bcee6781ebbca13300fe664f26d5add01a23efbd048280668fb3f213d4f47903a35551e5cafa0a6b8df56f1f63548b7900573df9d4ff119f4edf16c2b480c27effba137f128539bd4d45763f6acfa0d77d456c0239e661e3dfbc797bf266b6e2e4cc21304cb2f411", 0xd1) shutdown(r0, 0x2) syz_emit_ethernet(0x13a1, &(0x7f0000000280)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd6f755803136b3aff00d5e6b7ff0300000200001000000000fe8000000000000000000000000000aa87"]) syz_emit_ethernet(0x32, &(0x7f0000000100)=ANY=[@ANYBLOB="ce560d7ce4f29476328079ba58db104829938882edf40ec935c70b9ff83badf27580358e1776eeae2230c7c9adf684bd3276c6413e7ef65e610b180dea400c6c76d01e8002fc3a0d12ccf95484519fb09cba23a40659bdedc1a5633feab1c4d63b9e7d373ca2c681b5b503aae2c9060b12e66d44971da8ba6f77a440e568c8a6de6c90cdbfa085660477881f2d0981e54f490884cdb8054ffcb8f93e92ff10b068762d0ac6aa265e2c0c52dacf7cf9d64fbcc641b16f22234d5070eb890274303639"]) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f00000024c0), 0x8000, 0x0) ioctl$BIOCSETWF(r1, 0x80104277, &(0x7f0000000080)={0x57, 0x0}) pwrite(r1, &(0x7f0000000000)="68c7c0c7035ca1dd6d28d9cdcf1ac24fd231815f", 0x14, 0x1ad) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)) (async) fcntl$setstatus(r0, 0x4, 0x40) (async) sysctl$net_inet_tcp(&(0x7f0000000040)={0x4, 0x2, 0x6, 0x16}, 0x4, &(0x7f00000002c0)="6d913be9a6a0da682a93589df01a337072fd1de2658b7d004e8c8ac96f5997601691e9aba1bba357fdd28744583d0a5473d5ce5023e772a242aa46055a462a7c4f93e6a7bf91b19d4ce50623528f1392b1babbd4e7cafe6fa240910e9f92c9cfb1ec06417f7fc4b0affc42ee2de5d8a832a2e67d52870691ac0abbca13fd93d0fa8056a49a7ff2a413dae90136cf912f456a0f", &(0x7f0000000380)=0x93, &(0x7f00000003c0)="923c9f6facf444a99c72465a0f3ddc83303ff40de36470f67ff8826fb064a4f2cbcf003c5375106eb3446ce5c00206023361bfd3f87e71728239433498c850b2f1f71bd6be6e12aa7dad6309db20ab123c68f9ccfe3b660bc462f460f4ae06f3309e558f0a01b07783bcee6781ebbca13300fe664f26d5add01a23efbd048280668fb3f213d4f47903a35551e5cafa0a6b8df56f1f63548b7900573df9d4ff119f4edf16c2b480c27effba137f128539bd4d45763f6acfa0d77d456c0239e661e3dfbc797bf266b6e2e4cc21304cb2f411", 0xd1) (async) shutdown(r0, 0x2) (async) syz_emit_ethernet(0x13a1, &(0x7f0000000280)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd6f755803136b3aff00d5e6b7ff0300000200001000000000fe8000000000000000000000000000aa87"]) (async) syz_emit_ethernet(0x32, &(0x7f0000000100)=ANY=[@ANYBLOB="ce560d7ce4f29476328079ba58db104829938882edf40ec935c70b9ff83badf27580358e1776eeae2230c7c9adf684bd3276c6413e7ef65e610b180dea400c6c76d01e8002fc3a0d12ccf95484519fb09cba23a40659bdedc1a5633feab1c4d63b9e7d373ca2c681b5b503aae2c9060b12e66d44971da8ba6f77a440e568c8a6de6c90cdbfa085660477881f2d0981e54f490884cdb8054ffcb8f93e92ff10b068762d0ac6aa265e2c0c52dacf7cf9d64fbcc641b16f22234d5070eb890274303639"]) (async) openat$bpf(0xffffffffffffff9c, &(0x7f00000024c0), 0x8000, 0x0) (async) ioctl$BIOCSETWF(r1, 0x80104277, &(0x7f0000000080)={0x57, 0x0}) (async) pwrite(r1, &(0x7f0000000000)="68c7c0c7035ca1dd6d28d9cdcf1ac24fd231815f", 0x14, 0x1ad) (async) 620.034463ms ago: executing program 4 (id=221): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) (async) setitimer(0x2, &(0x7f0000000080)={{0x10000006, 0xa2a}, {0x112d, 0x40000000}}, 0x0) r1 = accept$inet6(0xffffffffffffff9c, &(0x7f0000000040), &(0x7f0000000140)=0x1c) getsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f0000000180), &(0x7f00000001c0)=0xc) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000080)={0x3, &(0x7f0000000100)=[{0x2, 0x40, 0x6, 0x8}, {0x48, 0xa, 0x5, 0x206}, {0x206, 0xe, 0x8, 0x6}]}) (async) ioctl$DIOCADDRULE(0xffffffffffffffff, 0xcd604404, &(0x7f0000000f80)={0x4, 0x7, 0x2, './file0\x00', './file0\x00', 0x0, "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"}) (async, rerun: 32) madvise(&(0x7f0000001000/0x9000)=nil, 0x9000, 0x2) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000004200)) sysctl$net_inet_tcp(&(0x7f0000000040)={0x4, 0x2, 0x6, 0x12}, 0x4, &(0x7f00000023c0), &(0x7f0000000000)=0x19, 0x0, 0xfffffffffffffe99) (async, rerun: 32) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) (async, rerun: 32) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[]) 617.988123ms ago: executing program 3 (id=222): r0 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$WSKBDIO_GETENCODINGS(r0, 0xc0105715, &(0x7f00000000c0)={0x0, 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000100)={0x2324, &(0x7f0000000040)=[{0x84, 0xf2, 0x6, 0x4}, {0x6, 0x8, 0x3, 0x7}, {0x7fff, 0x80, 0x6, 0x2}]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f0000000000), &(0x7f0000000140)=0xc) (async) sysctl$kern(&(0x7f0000000000)={0x1, 0x4e}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x4) (async) sysctl$vm_swapencrypt(&(0x7f0000000000), 0x3, &(0x7f0000000040), &(0x7f0000000100), 0x0, 0x0) (async) symlink(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000600)='./file0\x00') (async) open(&(0x7f0000000180)='./file0\x00', 0x19083084ca9cf73d, 0x2) 617.578973ms ago: executing program 4 (id=223): r0 = socket$unix(0x1, 0x6, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) getsockname$unix(r1, &(0x7f0000000e40)=@file={0x0, 0x0, ""/105}, &(0x7f0000000e00)=0x6b) (async) ioctl$FIOASYNC(r0, 0x8004667d, &(0x7f0000000000)=0x7) sysctl$hw(&(0x7f0000000040)={0x6, 0x1c}, 0x2, 0x0, 0x0, &(0x7f0000000280), 0x0) bind(r1, &(0x7f00000000c0)=@un=@file={0x0, 0x1, './file0\x00'}, 0xa) r2 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) (async) ioctl$FIOASYNC(r0, 0x8004667d, &(0x7f0000000100)=0xd136) r3 = syz_open_pts() (async) openat$bpf(0xffffffffffffff9c, &(0x7f0000001ec0), 0x20, 0x0) (async) closefrom(0xffffffffffffffff) (async) setrlimit(0x8, &(0x7f0000001ec0)={0x9, 0x37e1790c}) (async) r4 = socket$unix(0x1, 0x5, 0x0) closefrom(r4) (async) r5 = syz_open_pts() ioctl$TIOCSTOP(r5, 0x2000746f) (async) ioctl$TIOCSETAW(r5, 0x802c7415, &(0x7f00000003c0)={0x401, 0x1, 0xc0000015, 0xe, "6c0900805045b08e44edf100", 0x4, 0x80000000}) (async) write(r3, &(0x7f0000000040)="7ef5b6", 0x3) (async) recvfrom(r0, &(0x7f0000000180)=""/161, 0xa1, 0x40, &(0x7f0000000240)=@in6={0x1c, 0x18, 0x0, 0x3, "5c0626ac66bd324cce2199831ccc0fca", 0x8}, 0x1c) (async) sysctl$net_inet_tcp(&(0x7f0000000dc0)={0x4, 0x2, 0x6, 0x11}, 0x4, 0x0, 0x0, &(0x7f0000000d80)="283e36a0", 0x4) ioctl$DIOCSETLIMIT(r2, 0xc0084428, &(0x7f0000000140)={0x3, 0x9d}) (async) r6 = openat$pf(0xffffffffffffff9c, &(0x7f00000044c0), 0x2, 0x0) r7 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$DIOCGETRULESET(r7, 0xc444443b, &(0x7f0000000700)={0x8000, './file0\x00', './file0/file0\x00'}) munmap(&(0x7f0000000000/0x9000)=nil, 0x9000) (async) ppoll(0x0, 0x0, &(0x7f0000001980)={0x3}, 0x0) (async) ioctl$DIOCCHANGERULE(r6, 0xcd60441a, &(0x7f0000000000)={0x0, 0x8, 0x9, './file0\x00', './file0\x00', 0x0, "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"}) (async) sysctl$net_inet_ip(&(0x7f0000000080)={0x4, 0x2, 0x0, 0x1a}, 0x4, 0x0, 0x0, &(0x7f0000000180)='h', 0x1) mknod(&(0x7f0000000080)='./file0\x00', 0x2000, 0x5be7) (async) open(&(0x7f00000000c0)='./file0\x00', 0x10000, 0x112) 616.955602ms ago: executing program 3 (id=224): syz_emit_ethernet(0x307, &(0x7f00000002c0)={@local, @broadcast, [], {@ipv6={0x86dd, {0x5, 0x6, "e481e2", 0x2d1, 0x3c, 0x0, @empty, @remote={0xfe, 0x80, '\x00', 0x0}, {[@dstopts={0x3a, 0x0, '\x00', [@generic={0x1}]}, @dstopts={0x8}, @dstopts={0x29, 0x0, '\x00', [@ra={0x5, 0x2, 0x8001}]}, @fragment={0x3, 0x0, 0x7, 0x0, 0x0, 0x1d, 0x67}, @routing={0x61, 0xa, 0x0, 0x5, 0x0, [@loopback, @local={0xfe, 0x80, '\x00', 0x0}, @empty, @remote={0xfe, 0x80, '\x00', 0x0}, @ipv4]}, @routing={0xf0, 0xc, 0x0, 0x9, 0x0, [@empty, @local={0xfe, 0x80, '\x00', 0x0}, @ipv4={'\x00', '\xff\xff', @multicast2}, @local={0xfe, 0x80, '\x00', 0x0}, @local={0xfe, 0x80, '\x00', 0x0}, @ipv4={'\x00', '\xff\xff', @rand_addr=0xfffffff9}]}, @hopopts={0x3c, 0x1e, '\x00', [@enc_lim={0x4, 0x1, 0x8}, @generic={0x9, 0xd5, "2ac75f0a9841c95015a87428bd616c2c8171df5210b603c72215b99e46b6e8652135e16bf8b310690763f394090239de47c20dcdad3e277564ac1b62e850a7b264ee1689643d521ef99c4112b87ea83606df612915c03a2ccae053af3e868e45a46606ba54da746c203795e34a49648a782389224e1f7f184e770b0c15f6462ab51d35a31bf09549cb2d9a619432ce5ea913f6897364abc7dc80bf1dbe9d99edaf2cdc3235a3f5a50982fff2fafecc8268cdccd1d71203dbfd484db5643a6615b5080b5bdd1277c7c3482afd5d93174ce1316e9c5f"}, @jumbo={0xc2, 0x4, 0x3}, @padn={0x1, 0x1, [0x0]}, @pad1, @padn={0x1, 0x1, [0x0]}, @generic={0x1, 0x4, "48644bd2"}, @ra={0x5, 0x2, 0xfffb}]}, @dstopts={0x37, 0xf, '\x00', [@jumbo={0xc2, 0x4, 0x1}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @generic={0x3, 0xf, "13d90aa6df3957c397f41d78e92697"}, @padn={0x1, 0x1, [0x0]}, @pad1, @pad1, @generic={0x9, 0x55, "b43dea8e75fb1130e40957b3257aca4a3717d692e4d171034bf66562a0fdf7973b23881d254358cbc6d46097496bda7ebedea5ef2703153a0c9326d6e52519cd9e0586f511efffde7bf7026cb03417316b2663a38b"}, @enc_lim={0x4, 0x1, 0x3}, @padn, @pad1]}, @routing={0x88, 0x6, 0x0, 0x40, 0x0, [@remote={0xfe, 0x80, '\x00', 0x0}, @loopback, @local={0xfe, 0x80, '\x00', 0x0}]}], @generic="b1298f3dd8b76b33784067d62949f80eced729a65a25ac11d842fdc25b7f10a53f"}}}}}) (async) sysctl$kern(&(0x7f0000000000)={0x1, 0x39}, 0x2, &(0x7f0000000040)="35322f03e967daf354f927ee9de4e56c8e61aa44ddcb0920d436ab4917a26658e9abfa30b3a2df6c70c597d0e0c5084046aa6c7c4fed0f0512bed83414835fb8fdb491374998362918098e07f61c9335bfa67f94", &(0x7f00000000c0)=0x54, &(0x7f0000000100)="020ec9b7b5462600e82d3daa924ef3e8080ba649a6c3fe5615ad67f1d0bfa36d3e388baeb8170a63846570f505e88d4f1f7de06d9974435afd763bdf85b7d4d50a4611c03099f3607df3b9a35373f2b34e3029814a696ca32300501679ffa8a40c9ece2c4914a1268c3d3ba22a4372ffb8c5ecfd6a44e193cf65f6e267c83e46832e89839e32ecdc6b4383bc3b2a10028448aaa9926300e30276db7e1dec17efa95a6a93524132adb3689df6", 0xac) 616.670407ms ago: executing program 3 (id=225): sysctl$kern(&(0x7f0000000240)={0x1, 0x47}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) r0 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) sysctl$vfs_nfs(&(0x7f0000000200)={0xa, 0x2, 0x2}, 0x3, &(0x7f0000000340)="a47702bec614d5ae28ab9873c2b66157dc6ca4bb71394710109cabc0d80be1c1e67135517dc33a5fa0bee19f2c39", &(0x7f0000000380)=0x2e, &(0x7f0000000400)="bf92d02841", 0x5) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000140)="aaae9c43ae291599a4b230a4d2e2caec54d50e4255efa513d9c6a72e31dc2b072dc14792bd54704c365a7ee7a5236d90d2f9bd99c21225727e01ada1ec2ebfb7fe83969873258ee1ce34419eb61d5e493cfb83ee20d857e664d9e25c93b36c6ab12211f416210e7e7c2a6b15851cd117801b9178cadf0c089769b358f92bd30a77a099a1a10207106f6c", 0x8a}, {&(0x7f0000000280)="7208dad9de0dcd7bd9515742c14ad14664ba3792f61808093a6813025911da8f52e8a2a64a74e78df2e2944da9c81ef2894558a682cd31dcb3abee51e8680a05b8aad08d6857e9e49722f953006294f68d6045538b6bab7761d73e0ee1514ce2e2f6608194604ed874082514165f59f70e0020b09aeed7846299a0f3244fc28a7b0068c844c6f73f034eb70b9a298cea68c69ba59b41", 0x96}], 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) write(r1, &(0x7f00000000c0)="ab8b53c54127af35ca3495e70406d010f3b76eb3baeb77bd72f199680c9724c351672babdf0a569e28163ccd3654ea36bcc0344c804176d5b74d9e9a31be67e5c7029e618c62a2bd63b39386c02659748c62136a4c3fb19abd813952578bb4e541c45c1f097ac44c243c0d6466c06deb00be3a41b8c7", 0x76) unveil(0x0, &(0x7f0000000080)='w\x00') sysctl$net_inet6_icmp6(&(0x7f0000000000)={0x4, 0x18, 0x3a, 0xb}, 0x4, 0x0, 0x0, 0x0, 0x0) 613.949839ms ago: executing program 2 (id=226): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) openat$pf(0xffffffffffffff9c, &(0x7f0000005240), 0x2, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4, 0x10, r0, 0x0) ioctl$DIOCRGETTSTATS(r1, 0xc4504440, &(0x7f0000001540)={{'./file0\x00', './file0\x00', 0x8, 0x2}, &(0x7f0000000040)=[{'./file0\x00', './file0\x00', 0x28, 0x7}, {'./file0\x00', './file0\x00', 0x2b, 0xba}, {'./file0\x00', './file0\x00', 0x2, 0x40}, {'./file0\x00', './file0\x00', 0x1, 0x2}, {'./file0\x00', './file0\x00', 0x1, 0x4}], 0x81, 0x5, 0x400, 0x9, 0x2, 0xa3, 0x4, 0xfff}) 394.44243ms ago: executing program 1 (id=227): r0 = kqueue1(0x10000) fcntl$dupfd(r0, 0xa, r0) (async) r1 = fcntl$dupfd(r0, 0xa, r0) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0) kevent(r1, &(0x7f00000010c0)=[{{r2}, 0xfffffffffffffffa, 0x1, 0x1, 0x32, 0x3c}], 0x786, 0x0, 0xf, 0x0) (async) kevent(r1, &(0x7f00000010c0)=[{{r2}, 0xfffffffffffffffa, 0x1, 0x1, 0x32, 0x3c}], 0x786, 0x0, 0xf, 0x0) r3 = kqueue1(0x10000) r4 = kqueue1(0x10000) kevent(r4, &(0x7f00000001c0), 0xf00, 0x0, 0xffffcb50, 0x0) (async) kevent(r4, &(0x7f00000001c0), 0xf00, 0x0, 0xffffcb50, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x2000, 0x5388) open(&(0x7f00000000c0)='./file0\x00', 0x7c6, 0xea) open$dir(&(0x7f0000000000)='./file0\x00', 0x2, 0x1c) (async) open$dir(&(0x7f0000000000)='./file0\x00', 0x2, 0x1c) r5 = kqueue1(0x10000) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) (async) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) kevent(r5, &(0x7f0000000040), 0xf00, 0x0, 0xffff4b51, 0x0) r6 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) kevent(r3, &(0x7f0000000040)=[{{r0}, 0xfffffffffffffffb, 0x0, 0x2, 0x4, 0xfffffffffffffc00}, {{r6}, 0xfffffffffffffff8, 0x2, 0x20, 0x7, 0x8}, {{r1}, 0xfffffffffffffffd, 0x11, 0x4, 0x2, 0xa}, {{r6}, 0xfffffffffffffff9, 0x4, 0x80, 0x3ff, 0x3}, {{r6}, 0xfffffffffffffffd, 0x21, 0x20, 0xe99, 0x1}, {{r5}, 0xfffffffffffffffb, 0x4, 0x1, 0xd8, 0x9}], 0x86, 0x0, 0xffff4b4d, 0x0) closefrom(r0) 393.924336ms ago: executing program 5 (id=197): r0 = kqueue() (async, rerun: 32) pipe(&(0x7f0000000a80)) (async, rerun: 32) r1 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000002140), 0x40000, 0x0) ioctl$FIOGETOWN(r1, 0x40047477, 0x0) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$BIOCSETF(r2, 0x80104267, &(0x7f0000000080)={0x3, &(0x7f0000000100)=[{0x0, 0x40, 0x6, 0x8}, {0x48, 0xa, 0x5, 0x206}, {0x6, 0xe, 0x8, 0x6}]}) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) (async) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[]) (async, rerun: 64) pselect(0x40, &(0x7f0000000080)={0xe0, 0xfffffffffffffffd, 0x101, 0x9, 0x2, 0xffffffff, 0x9, 0x2000000000000000}, &(0x7f00000000c0)={0xaa, 0xffffffffffffff00, 0x800, 0x6, 0x0, 0xf, 0x20000400, 0x10001}, 0x0, 0x0, 0x0) (rerun: 64) mknod(&(0x7f0000000080)='./file0\x00', 0x2000, 0x5be7) (async) open$dir(0x0, 0x200, 0x4) open(&(0x7f0000000180)='./file0\x00', 0x200, 0xef) (async) syz_emit_ethernet(0xcd, &(0x7f0000000180)={@local, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x2, 0x36, 0xbf, 0x66, 0x0, 0x5, 0x1, 0x0, @multicast1, @local={0xac, 0x14, 0x0}}, @generic="247bdbdd8c5efdfee2f8e7b85a2447379d88cccd83a94ad17a7bd035205d6190b9e0b4d92cd21ecfa003ea47eb2f913f44116d56ce27a6dcd64e9645e9ee89a9938af1e0d768c361b9bf31ceb4c3d517684f2137b55c3c61ad715fdfadf83a3d79892c48f0d6f250b9b7521192008df2edd931b8009e179d51a467cde1ed90f65483586ecaed64a0539d7040815e3f0175a5a2b7c439446496ffcb89834b36da0d42a391ed11d2b04ddd00"}}}}) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) (async) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0x80047308, &(0x7f0000001840)={0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff}) closefrom(r5) (async, rerun: 32) r6 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000780), 0x10, 0x0) (rerun: 32) ioctl$BIOCSETF(r6, 0x80104267, &(0x7f0000000100)={0x2, &(0x7f0000000000)=[{0xc0, 0xf2, 0x6, 0x3}, {0x206, 0x8, 0x3, 0x7}]}) (async) sendmmsg(r4, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x0, 0x0}}, 0x38, 0x406) (async, rerun: 32) closefrom(r0) (rerun: 32) syz_extract_tcp_res(&(0x7f0000000000), 0x0, 0x8001) 393.810804ms ago: executing program 2 (id=228): setitimer(0x1, 0x0, 0x0) r0 = socket$inet(0x2, 0x1, 0x6) connect$inet(r0, &(0x7f0000000700)={0x10, 0x2, 0x2, 0xffff0002}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x10, 0x2, 0x1, 0x804}, 0x10) 393.149533ms ago: executing program 3 (id=229): r0 = accept$unix(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x105, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"]) recvmmsg(r0, &(0x7f0000002ac0)={{0x0, 0x0, 0x0, 0x0, &(0x7f00000029c0)=""/253, 0xfd}, 0x4}, 0x38, 0x1c00, 0x0) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000002f00), 0x80, 0x0) mlock(&(0x7f0000ff5000/0xb000)=nil, 0xb000) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6) (async) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6) ioctl$DIOCRADDTABLES(r1, 0xc450443d, &(0x7f0000002a80)={{'./file0\x00', './file0\x00', 0x78, 0x3}, 0x0, 0x2, 0x0, 0x4000001, 0x8, 0x18, 0x9, 0x2, 0x7f}) (async) ioctl$DIOCRADDTABLES(r1, 0xc450443d, &(0x7f0000002a80)={{'./file0\x00', './file0\x00', 0x78, 0x3}, 0x0, 0x2, 0x0, 0x4000001, 0x8, 0x18, 0x9, 0x2, 0x7f}) socketpair$unix(0x1, 0x4c93cad384ba5ece, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x2000) openat$vnd(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) (async) r4 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write(r4, &(0x7f0000000140)="f3c37a7bc2d27777776eed6d1a7b33e89d6e1f87966d44ebddab72c806dcb63d95640b2f3f8f14c917addeddc91fd1008fc2eefd11cc44f052cc5bec1d2d28e8022d768a5806670c35ba34f8346156e15f41b49f0743fb7044bcce2e97666bd6718bee1175d9461c0ebe4d11", 0xffffffcf) recvmmsg(r3, &(0x7f0000002e40)={{0x0, 0x0, &(0x7f0000002dc0)=[{&(0x7f0000000240)=""/167, 0xa7}], 0x1, 0x0, 0xffffff25}, 0x7}, 0x38, 0x6840, 0x0) (async) recvmmsg(r3, &(0x7f0000002e40)={{0x0, 0x0, &(0x7f0000002dc0)=[{&(0x7f0000000240)=""/167, 0xa7}], 0x1, 0x0, 0xffffff25}, 0x7}, 0x38, 0x6840, 0x0) setsid() r5 = syz_open_pts() socket$unix(0x1, 0x2, 0x0) (async) r6 = socket$unix(0x1, 0x2, 0x0) setsockopt$sock_int(r6, 0xffff, 0x800, &(0x7f0000000000)=0xd581, 0x4) r7 = dup2(r5, r5) ioctl$TIOCSCTTY(r7, 0x20007461) (async) ioctl$TIOCSCTTY(r7, 0x20007461) ioctl$DIOCGETQUEUES(0xffffffffffffffff, 0xc0104401, &(0x7f0000000040)={0x8, 0x1, {'\x00', './file1\x00', './file0\x00', './file0\x00', {{0x1, 0x5}, {0x6, 0x2}, 0x4}, {{0x5, 0x2}, {0xa, 0x801}, 0x4}, {{0x9, 0x2}, {0xc, 0x1000}, 0x40000000}, {0x7, 0x20, 0x0, 0x4004}, 0x0, 0x10000, 0x6, 0x7, 0x4}}) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) (async) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) socket$inet(0x2, 0x3, 0x57) (async) r8 = socket$inet(0x2, 0x3, 0x57) setsockopt(r8, 0x0, 0x14, &(0x7f0000000140)="9a350700", 0x4) syz_emit_ethernet(0x2da, &(0x7f0000000700)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa88a830008100110086dd65920cbb029c7040295d925573202d04f2b3640d45eb9cdffe8000000000000000000000000000aa70020000000000000502000205020fff010100c204800000010000000000000089000000000000001108002800000000ff0200000000000000000000000000010000000000000000000000000000000000000000000000000000ffff00000000000000000000000000000000000000002e000000000000000502000300000000374000000000000003feab54bd1121b6307295c87a1db3b895fae7dd4fcf52a42c4b81babe4f1c9a7d5c0784f0f240bf5d24cf8490baea4cacddd15b5e2d1237b9605275827db6bf0e9e11f6d46814db5aee284377dc37fe4c180e16364de2bf51b3c5d731988d6815c1574e443ecd7e45f51e71922fde2320b4800dc3d95fab74e68fb426f1b3814958e7149bb19282572f855de06109b0a7b1a04dc5b6b72f22cfed80e2271b0ea9fdd0377559e8a30cdc4ae5f572f4e346bc1cf5436e7b7520f13d42430c4a0022abe7b98a1b928899c3cdc9aed12eba0297676225fbe7c3e8621e9c20ba0b9f4f2d84cc9dfc2120e24e4ad4c55b3e02a35bc8f4fe2e1d2afda7cc97025eea5ceb55870c44648c51e61da6b64930b2c8353d3be8b95f33fb22849982ad2103e65e46295cf6a085f2e08d13a140da90ea456ce3cc32edc23fa39fb03b6271ce5971fbc12e834f1d5d7fb90aa3b8c2867e6ba53cbfeb988369841d65bb7496fa257fd0fe10f9e43e11e71e1a1d55108415936d4c5161fde50fff18787c6e35dd8e0110393e1edaee7e33a5ef78a01c0f085a43ceff42bef8fa31a29407f13c9735cc016b233ce957b0307939eabbb83021f5d28812a20e50c929e106d2e8ea694bd0fe0bd527e9efafa1c7d24359e543f3444a779011d9d6d041256c69164dba751e285b8a6bb0c1ac69866846f5352d577924e79851139ded57bc2cfc6dcfc2334e204e23", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="500000059078fff9e750583680f263e53f88043603a3ac636f3be31fdd49d772dab22a0907391ee954527a9e4d4ee01234e8131b22c972579e"]) (async) syz_emit_ethernet(0x2da, &(0x7f0000000700)=ANY=[@ANYBLOB="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", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="500000059078fff9e750583680f263e53f88043603a3ac636f3be31fdd49d772dab22a0907391ee954527a9e4d4ee01234e8131b22c972579e"]) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) r9 = socket$inet(0x2, 0x3, 0x14) ioctl$FIOASYNC(r9, 0x80206979, &(0x7f0000000580)=0x7) (async) ioctl$FIOASYNC(r9, 0x80206979, &(0x7f0000000580)=0x7) ioctl$FIOSETOWN(r5, 0x8004667c, &(0x7f0000000540)=0x80000001) r10 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write(r10, &(0x7f0000000040)="0800000000000000dc1f490dbbb048be22aa35ae12df6a1abd9984ab4f4e", 0x1e) sendmsg$unix(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000080)="ef", 0x1}], 0x1, 0x0, 0x0, 0x1}, 0x4) 276.362536ms ago: executing program 1 (id=230): sysctl$net_inet_icmp(&(0x7f0000000000)={0x4, 0x2, 0x1, 0x2}, 0x4, 0x0, 0x0, 0x0, 0x0) sysctl$kern(&(0x7f0000000000)={0x1, 0x37}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) sysctl$net_inet6_icmp6(&(0x7f0000000000)={0x4, 0x18, 0x3a, 0xb}, 0x4, &(0x7f0000000040), 0x0, 0x0, 0x0) sysctl$net_inet6_icmp6(&(0x7f0000000040)={0x4, 0x18, 0x3a, 0x9}, 0x4, &(0x7f0000000280)="645db251f188c2c9be73ea581046884bc94d675ac108b40e1eca8b96a910b323bc3e16af30d476ef47562868b0ca8fd0b9645d709e8868d86b809d3d277b3fe7a3ebc48f044004c1917cb79dda05f345e6df97a2f9c243e1e3358708fb1dfbe535a36d8e9e3629f636bf429cf49ba14e8b402164e03ba42dfb3fc6f51d22c269d8523205506ce1c6bfa6785e3364c10f5deb578bc7d5c392cb3060d7506b68973bd7bf520408b856dfb96cabc374444a14f7c3915b51ed83459c76496e286614728c61f05b82f55a3505cb46764d908751c20624b5b707bec1ee5f", &(0x7f0000000080)=0xdb, &(0x7f0000000180)="f7da22c792018830c04194345390c0c043a8f06d1fd96f1debdc7a8ef34d0dcc2b8ae6e2bd40da3cbae22f61217d4b93eed75fa09125", 0x36) 274.877257ms ago: executing program 1 (id=231): r0 = openat$bpf(0xffffffffffffff9c, 0x0, 0x80, 0x0) ioctl$BIOCSETF(r0, 0x80104267, 0x0) sysctl$kern(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000780), 0x10, 0x0) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x7c, 0xf2, 0x0, 0x4}, {0x80, 0x8, 0x5d, 0x7}, {0x5dfe, 0x3, 0x0, 0x8000081}]}) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000040)={'tap', 0x0}) syz_emit_ethernet(0x56, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x200, 0x0) ktrace(&(0x7f0000000000)='./file0\x00', 0x4, 0x1104, 0xffffffffffffffff) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0xfffffffffffffee6, &(0x7f0000000080)=[@rights={0x18, 0xffff, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}], 0x18, 0x40a}, 0x404) r2 = shmget$private(0x0, 0x3000, 0x2ea, &(0x7f0000ffd000/0x3000)=nil) shmat(r2, &(0x7f0000000000/0x800000)=nil, 0x1000) r3 = socket$inet(0x2, 0x3, 0xfe) r4 = socket$inet(0x2, 0x3, 0x0) setsockopt$sock_int(r4, 0xffff, 0x1002, &(0x7f0000000140)=0x8, 0x4) sendmsg(r3, &(0x7f00000003c0)={&(0x7f00000000c0)=@in={0x10, 0x2, 0x1, 0xffffffff}, 0x10, 0x0, 0x0, 0x0, 0xa0}, 0x400) syz_emit_ethernet(0x149, &(0x7f0000000400)={@broadcast, @local, [], {@ipv6={0x86dd, {0xf, 0x6, "755803", 0x113, 0x3a, 0x0, @rand_addr="00d5e6b7ff0300000200001000", @local={0xfe, 0x80, '\x00', 0x0}, {[], @icmpv6=@time_exceed={0x3, 0x0, 0x0, 0xf, '\x00', {0x8, 0x6, '\x00', 0x6, 0x2b, 0x7c, @local={0xfe, 0x80, '\x00', 0x0}, @local={0xfe, 0x80, '\x00', 0x0}, [], "812377d8f7d45ea5284b1ce7a893c96d002925dbac774360ecef92c1e42b52ca2215c487b62a6710b412fc077183917be6ca07f80c37ad21f1611e22ece87289cd72837c74fc8dc13394b88f49e548994d6f6b5595360d4ea07815c192c6f3d4b0290334fc6d844e9a312464b464ea9bc953a1d4d873bc4e392a323f6cd17600d049238ae48e7f8494b4e3b36961b2cee30caf835db78dbc4c0b6c879d6ce691a57587bc017b0de2c9bb5d7b4b694e660d75289582c72d1a5b2e19693bf323d72ffd087c3182a20d4dd93c60acc9ba3f7f78920bde04a0386fde0b9b5f988a73465f0f"}}}}}}}) 274.601992ms ago: executing program 3 (id=232): r0 = kqueue1(0x10000) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x674) r1 = open(&(0x7f0000001980)='./file0\x00', 0x80, 0x0) ioctl$TIOCSETA(r1, 0x80047466, &(0x7f0000000500)={0x3, 0xffffffff, 0x519, 0x6, "4522ab1c59b3f1beca704340880e1a5213513f4c", 0x2c1, 0x4}) ioctl$TIOCCBRK(r1, 0x2000747a) poll(&(0x7f0000000040)=[{r1, 0x2}], 0x1, 0x5) kevent(0xffffffffffffffff, &(0x7f0000000080)=[{{}, 0xfffffffffffffff6, 0x9, 0x96f799025b5b12ad, 0x5, 0x3}], 0x4, 0x0, 0xffff4b4d, 0x0) kevent(r0, &(0x7f0000000040), 0x6, 0x0, 0x4, 0x0) kevent(r0, &(0x7f0000000040), 0xf00, 0x0, 0xffff4b51, 0x0) 274.234534ms ago: executing program 1 (id=233): kqueue() pipe(&(0x7f0000000a80)) r0 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000002140), 0x40000, 0x0) ioctl$FIOGETOWN(r0, 0x40047477, 0x0) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) ioctl$DIOCXBEGIN(r1, 0xc0104451, &(0x7f0000003dc0)={0x7, 0xb, &(0x7f0000002180)=[{0x1, './file0\x00', 0xa}, {0x0, './file0\x00', 0x1}, {0x0, './file0\x00', 0xaf82}, {0x1, './file0\x00', 0xfffffffe}, {0x0, './file0\x00', 0x6}, {0x0, './file0\x00', 0x1000}, {0x0, './file0\x00', 0x1ff}]}) pselect(0x40, &(0x7f0000000080)={0xe0, 0xfffffffffffffffd, 0x101, 0x9, 0x2, 0xffffffff, 0x9, 0x2000000000000000}, &(0x7f00000000c0)={0xaa, 0xffffffffffffff00, 0x800, 0x6, 0x0, 0xf, 0x20000400, 0x10001}, 0x0, 0x0, 0x0) r2 = socket$inet(0x2, 0x3, 0x2) closefrom(r2) closefrom(r2) 195.500655ms ago: executing program 1 (id=234): r0 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SPKRTONE(r0, 0x80085301, &(0x7f0000000000)={0x9, 0x9}) openat$pf(0xffffffffffffff9c, &(0x7f0000000e80), 0x1, 0x0) setitimer(0x0, &(0x7f0000000040)={{0x6, 0x1}, {0x8000, 0x652f}}, 0x0) sysctl$kern(&(0x7f0000000040)={0x1, 0x31}, 0xa, 0x0, 0x0, 0x0, 0xfffffffffffffc47) writev(r0, &(0x7f00000016c0)=[{&(0x7f00000000c0)="b9e2c28a7dc3d77be4dcc5190cb73d5abffe312d7e", 0x15}], 0x1) sysctl$net_inet6_ip6(&(0x7f0000000000)={0x4, 0x18, 0x29, 0x6}, 0x4, 0x0, 0x0, &(0x7f0000000140), 0x0) unveil(0x0, &(0x7f0000000080)='w\x00') r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f00000002c0)=@file={0x4, 0x1, './file0\x00'}, 0xa) sendto$unix(r1, 0x0, 0x0, 0x400, &(0x7f0000000100)=@file={0x3, 0x1, './file0\x00'}, 0xa) r2 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000ec0), 0x40000, 0x0) ioctl$KDGETLED(r2, 0x40044b41, &(0x7f0000000f00)) r3 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000040), 0x10, 0x0) ioctl$DIOCADDRULE(r3, 0xcd604404, &(0x7f0000000100)={0x81, 0x7fff, 0x1, './file0\x00', './file0\x00', 0x0, "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"}) closefrom(0xffffffffffffffff) 193.611447ms ago: executing program 0 (id=235): munmap(&(0x7f0000000000/0x9000)=nil, 0x9000) (async) r0 = shmget$private(0x0, 0x3000, 0x2ea, &(0x7f0000ffd000/0x3000)=nil) msync(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3) (async) r1 = shmat(r0, &(0x7f0000000000/0x800000)=nil, 0x1000) (async) shmctl$IPC_RMID(r0, 0x0) (async) r2 = socket$inet(0x2, 0x2, 0x0) (async) openat$pf(0xffffffffffffff9c, &(0x7f0000001700), 0x8840, 0x0) bind(r2, &(0x7f0000000000)=@un=@file={0xa, 0x1, './file0\x00'}, 0xa) shmdt(r1) 193.390504ms ago: executing program 0 (id=236): syz_emit_ethernet(0x52, &(0x7f0000000000)={@local, @local, [], {@ipv6={0x86dd, {0x8, 0x6, "c0fb9b", 0x1c, 0x2b, 0x7, @rand_addr="89607067d12d8bb5f75c3fbb97283fe5", @remote={0xfe, 0x80, '\x00', 0x0}, {[@routing={0x0, 0x0, 0x0, 0x3}], @tcp={{0x3, 0x2, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x4, 0x802, 0x0, 0xa1ad}}}}}}}) symlinkat(&(0x7f00000003c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00') 193.071935ms ago: executing program 4 (id=237): r0 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000001c80), 0x1, 0x0) r1 = socket$inet6(0x18, 0x2, 0x0) setsockopt$sock_int(r1, 0xffff, 0x1000, &(0x7f00000002c0)=0x6, 0x4) bind$inet6(r1, &(0x7f0000000040)={0x1c, 0x18, 0x3, 0xd, "0000000000000000030f00", 0x1000004}, 0x1c) ioctl$WSMUXIO_ADD_DEVICE(r0, 0x80085761, &(0x7f0000001d40)={0x3}) sysctl$hw(&(0x7f00000002c0)={0x6, 0x1c}, 0x2, 0x0, &(0x7f0000000380), 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000cc0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa080045da007c006800000589bed33c000001ac1400bb34f21b9371d67a17543bb91c66f103d6298aa491cc4a7b8dfa914bef57c0929e229ccb7d"]) openat$bpf(0xffffffffffffff9c, &(0x7f0000000780), 0x10, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x204) unveil(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='r\x00') unveil(&(0x7f0000001d00)='./file1\x00', &(0x7f0000001d40)='w\x00') mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) sysctl$kern(&(0x7f0000003d00)={0x1, 0x1d}, 0x2, 0x0, 0x0, 0x0, 0x0) sysctl$hw(&(0x7f00000002c0)={0x6, 0x6}, 0x2, &(0x7f0000000000)="06c57971913b9152fabd8e916295091d0a5b360ea1380ec43fd7aade85ba02bb52fc6fc2da86be52d6ef65caa7e54604cddda61d0c480da86771a4eb9467ddaa05eb010401ce5825a84a5e258ef63094ec98588913d785f92b0e114bbe7fe20754d4c326d67d927e95c3c9a73af7d61bd738a574bf", &(0x7f0000000380)=0x75, 0x0, 0x0) 72.908887ms ago: executing program 4 (id=238): syz_emit_ethernet(0x2e, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb080045da00200066000005020078e0000001ac1400aa1200907800800006000000049761c58b159cb2d5c6ba9d7ef88fcba2dcbfc0b73fc2471911524fdbd0282fe1e0e9c3d22431e57b8aa42565bee289a50621ac8a36e7f38d036c76c0c64c4a5553b067c40e31afe6fb5850b28b2a1a7a31ce0694e4f30ef398d554c23749fc934f9b1170fe42244fae872cae3d508d2a61cad35ef4e36c63527138296ef06af5ae97015f6480a4e4ff73150f200c635f0a86ee5426198eb6ea32c04cf07938542c6fe566ece36c14d6ba9e633992591da4e0cb775b70141d262aabc5f138fba4152f45ef432d566e2be683784827a0e7af581582e269dd7eb0fa09a6aa3c7fba5dfaab597aee59e6a35b5f4771993aa22405df55b5551e98cd1100"]) syz_emit_ethernet(0x2e, &(0x7f0000000040)=ANY=[@ANYBLOB="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"]) (async) 72.350653ms ago: executing program 0 (id=239): openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) (async) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$FIOASYNC(r0, 0x8004667d, &(0x7f00000000c0)=0xc3a) (async) ioctl$FIOASYNC(r0, 0x8004667d, &(0x7f00000000c0)=0xc3a) kevent(0xffffffffffffff9c, 0x0, 0xc0a7968, 0x0, 0x0, 0x0) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x5, 0x5, 0xf9}, {0x0, 0x4, 0x1, 0x1}, {0xd9e6, 0x9, 0x3, 0x7}]}) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000580)={'tap', 0x0}) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) ioctl$DIOCRGETADDRS(r1, 0xc4504446, &(0x7f00000005c0)={{'./file0\x00', './file0\x00', 0xfa, 0x5}, &(0x7f0000000140)=[{@remote={0xac, 0x14, 0x0}, '\x00', './file0\x00', 0x401, 0x7ff, 0x2, 0xf, 0x4, 0x0, 0x9}, {@empty, '\x00', './file0\x00', 0x7, 0x4, 0x2, 0x2, 0x3, 0x9, 0x80}], 0x4, 0x2, 0x4, 0x2, 0x200, 0x2, 0xdb6504443f236e23, 0x1}) pipe(0x0) (async) pipe(0x0) writev(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000003480)=ANY=[]) 49.243528ms ago: executing program 6 (id=240): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) open$dir(&(0x7f00000001c0)='./file0\x00', 0x200, 0x80) ktrace(&(0x7f0000000040)='./file0\x00', 0x4, 0x814, 0x0) getgroups(0x7, &(0x7f0000001900)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]) setregid(r1, 0x0) r2 = getpid() ktrace(&(0x7f0000000080)='./file0\x00', 0x0, 0x1400, r2) truncate(&(0x7f0000000080)='./file0\x00', 0x100000) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x14, 0xb, 0x1, 0xfffffffe}, {0x2, 0x3, 0x0, 0x3}, {0x6, 0xf, 0xe, 0x7}]}) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000440)={'tap', 0x0}) syz_emit_ethernet(0x2a, &(0x7f00000000c0)=ANY=[]) 823.524µs ago: executing program 0 (id=241): r0 = socket$inet(0x2, 0x1, 0x6) setsockopt$sock_int(r0, 0xffff, 0x1, &(0x7f0000000040)=0xdd4e, 0x4) connect$inet(r0, &(0x7f0000000700)={0x10, 0x2, 0x2, 0xffff0002}, 0xe0) getsockopt$sock_int(r0, 0xffff, 0x1021, &(0x7f0000000040), &(0x7f0000000080)=0x4) munmap(&(0x7f0000000000/0x9000)=nil, 0x9000) r1 = openat$pf(0xffffffffffffff9c, &(0x7f00000000c0), 0x10, 0x0) ioctl$DIOCSETTIMEOUT(r1, 0xc008441d, &(0x7f0000000100)={0x10, 0x4703}) r2 = shmget$private(0x0, 0x3000, 0x2ea, &(0x7f0000ffd000/0x3000)=nil) shmat(r2, &(0x7f0000000000/0x800000)=nil, 0x0) sysctl$kern(&(0x7f00000001c0)={0x1, 0x5}, 0x2, &(0x7f0000000040), 0x0, 0x0, 0x0) r3 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) readv(r3, &(0x7f0000001240)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x1) socket$inet(0x2, 0x1, 0x6) (async) setsockopt$sock_int(r0, 0xffff, 0x1, &(0x7f0000000040)=0xdd4e, 0x4) (async) connect$inet(r0, &(0x7f0000000700)={0x10, 0x2, 0x2, 0xffff0002}, 0xe0) (async) getsockopt$sock_int(r0, 0xffff, 0x1021, &(0x7f0000000040), &(0x7f0000000080)=0x4) (async) munmap(&(0x7f0000000000/0x9000)=nil, 0x9000) (async) openat$pf(0xffffffffffffff9c, &(0x7f00000000c0), 0x10, 0x0) (async) ioctl$DIOCSETTIMEOUT(r1, 0xc008441d, &(0x7f0000000100)={0x10, 0x4703}) (async) shmget$private(0x0, 0x3000, 0x2ea, &(0x7f0000ffd000/0x3000)=nil) (async) shmat(r2, &(0x7f0000000000/0x800000)=nil, 0x0) (async) sysctl$kern(&(0x7f00000001c0)={0x1, 0x5}, 0x2, &(0x7f0000000040), 0x0, 0x0, 0x0) (async) openat$vnd(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) (async) readv(r3, &(0x7f0000001240)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x1) (async) 0s ago: executing program 6 (id=242): mknod(&(0x7f0000000000)='./file0\x00', 0x2050, 0x674) r0 = open(&(0x7f0000001980)='./file0\x00', 0x80, 0x8) ioctl$TIOCSETA(r0, 0x80047466, &(0x7f0000000500)={0x3, 0x9, 0x5, 0x20003, "450400000000000000704340880e1a5213513f4c", 0xa6d, 0x4}) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x4c, 0xa, 0x85, 0x3}, {0x81, 0x40, 0x6, 0x8}, {0x206, 0x9, 0x8, 0x5}]}) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) syz_emit_ethernet(0x2a, &(0x7f00000016c0)=ANY=[]) readv(r0, &(0x7f0000000400)=[{&(0x7f00000002c0)=""/72, 0x48}], 0x1) r2 = openat$pf(0xffffffffffffff9c, &(0x7f0000002540), 0x182, 0x0) ioctl$DIOCRCLRASTATS(r2, 0xc4504448, &(0x7f0000006ac0)={{'./file1\x00', './file1\x00', 0x0, 0x9}, 0x0, 0x34, 0x0, 0x5, 0x9, 0x7, 0x7fffffff, 0x0, 0x401}) open$dir(&(0x7f00000001c0)='./file0\x00', 0x200, 0x80) getgroups(0x7, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]) setresgid(r4, r3, 0x0) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4) ktrace(&(0x7f0000000180)='./file0\x00', 0x0, 0x40002004, 0x0) r5 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) r6 = socket$unix(0x1, 0x2, 0x0) bind$unix(r6, &(0x7f0000000080)=@file={0x4, 0x1, './file0\x00'}, 0xa) getgroups(0x7, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]) setresgid(r8, r7, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) getsockopt$sock_cred(r9, 0xffff, 0x1022, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000140)=0xc) chown(&(0x7f0000000180)='./file0\x00', r10, 0x0) setreuid(0x0, r10) connect$unix(r6, &(0x7f00000000c0)=@file={0xfc, 0x1, './file0\x00'}, 0xa) ioctl$WSMOUSEIO_SRES(r5, 0x80045721, &(0x7f0000000040)=0xad8) setresgid(0x0, 0x0, 0x0) ktrace(&(0x7f00000001c0)='./file0\x00', 0x2, 0x40000100, 0x0) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000080)={0x8, &(0x7f0000000040)=[{0x3f3, 0x1, 0x3, 0xa}, {0x9, 0x7f, 0x2, 0xe}, {0x0, 0xa, 0xa4, 0xfffffffc}, {0x5, 0x6, 0x4, 0x120}, {0x3, 0xe, 0x6, 0x6}, {0x1, 0x7, 0xfb, 0x8000}, {0x6, 0xf, 0x0, 0xfc6c}, {0x5, 0x40, 0xf}]}) ioctl$TIOCSETD(r0, 0x8004741b, &(0x7f0000000000)=0x9) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.78' (ED25519) to the list of known hosts. Connection to 10.128.1.78 closed by remote host. pckbd_enable: command error OpenBSD/amd64 (ci-openbsd-kasan-0.us-central1-f.c.syzkaller.internal) (tty00) login: pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error ktrace write failed, errno 27, tracing stopped ktrace write failed, errno 27, tracing stopped witness: lock order reversal: 1st 0xffff8000110bf398 sbufsnd (&so->so_snd.sb_lock) 2nd 0xffff800001dd1a40 inode (&ip->i_lock) lock order [1] sbufsnd (&so->so_snd.sb_lock) -> [2] inode (&ip->i_lock) lock order data 0xffffffff849248e0 -> 0xffffffff849a4520 is missing lock order [2] inode (&ip->i_lock) -> [3] sbufrcv (&so->so_rcv.sb_lock) #0 rw_do_enter_write+0xc4 #1 sblock+0xbf #2 soreceive+0x3b1 #3 fifo_read+0x1d9 #4 VOP_READ+0x1a8 #5 vn_rdwr+0x1bc #6 vndsetcred+0xbf #7 vndioctl+0x12ef #8 VOP_IOCTL+0x131 #9 vn_ioctl+0x18c #10 sys_ioctl+0x868 #11 syscall+0x1089 #12 Xsyscall+0x128 lock order [3] sbufrcv (&so->so_rcv.sb_lock) -> [1] sbufsnd (&so->so_snd.sb_lock) #0 rw_do_enter_write+0xc4 #1 sblock+0xbf #2 sosplice+0x4a5 #3 sosetopt+0xdac #4 sys_setsockopt+0x4bd #5 syscall+0x1089 #6 Xsyscall+0x128 Stopped at db_enter+0x17: popq %rbp ddb{0}> ddb{0}> set $lines = 0 ddb{0}> set $maxwidth = 0 ddb{0}> show panic the kernel did not panic ddb{0}> show kasan kasan: no report recorded this boot ddb{0}> trace db_enter() at db_enter+0x17 witness_checkorder(ffff800001dd1a40,9,0) at witness_checkorder+0x19db rw_do_enter_write(ffff800001dd1a28,1) at rw_do_enter_write+0xc4 rrw_enter(ffff800001dd1a28,1) at rrw_enter+0xf0 VOP_LOCK(ffff800001dd2128,2001) at VOP_LOCK+0x17e vn_lock(ffff800001dd2128,2001) at vn_lock+0xca vfs_lookup(ffff80003bbe8600) at vfs_lookup+0x1f7 namei(ffff80003bbe8600) at namei+0xe19 unp_connect(ffff8000110bf1b0,fffffd8076a6c000,ffff800045ff5258) at unp_connect+0x2b9 uipc_dgram_send(ffff8000110bf1b0,fffffd8069c68b00,fffffd8076a6c000,0) at uipc_dgram_send+0x1f8 sosend(ffff8000110bf1b0,fffffd8076a6c000,ffff80003bbe89a0,0,0,400) at sosend+0xb96 sendit(ffff800045ff5258,5,ffff80003bbe8ab0,400,ffff80003bbe8c80) at sendit+0x83b sys_sendto(ffff800045ff5258,ffff80003bbe8d10,ffff80003bbe8c80) at sys_sendto+0x15c syscall(ffff80003bbe8d10) at syscall+0x1089 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x2fe69a04f10, count: -15 ddb{0}>